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Speech  recognition 
software  has  come 
aloogwayin20 
years,  BaryH. 
Anthes  reports. 
Now  H’s  easier  to 
integrate  with 
back-office  IT 
applicatiensand 
smart  enough  to 
hedownri^ 
conversational. 
Page  23 
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*  Java  Developers 
Aren’t  Buying 
Sun’s  Tools  Pitch 

Although  lavaOne  attendees  showed  interest  in 
new  offerings,  Sun  still  has  bottom-dweller  status 


Appeals  Court  RuBrnSiences 
racrosoft  Arititriist  ftrttle^ 


Defeats  last  efibrt  to 
force  changes  b)  OS; 
hitler  dout^ 

•V  MATKICK  TMIMOKAU 

WASHIN6TON  i 

Microsoft  Corp.  last  week  said  I 
h  will  finally  be  able  to  move  I 


forward,  following  a  U.S. 

Court  of  Appeals  dectskm  that 
defeated  a  last  stand  to  force 
foe  s(rftware  giant  to  change 
Windows.  Hie  question  for 
Microsoft^  users  and  rivals  is 
'^lete  foat  move  forward  is 
headed. 

Massachusetts,  the  lone 
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holdout  sute  in  foe  battle,  can 
appeal  to  foe  Supreme  Court 
But  there's  a  strong  sense 
among  people  on  both  sides  of 
foe  case  that  this  historic  fight 
is  over. 

The  court  ruling  unani¬ 
mously  affirmed  a  settlement 
Microsoft  reached  in  2001 
with  foe  US.  Department  of 
Justice  and  eveiuually  nearly 
all  of  foe  20  states  involved  in 
foe  case  at  foe  time. 

The  sht-year  government 
case  did  have  a  positive  im¬ 
pact  on  Microsoft^  behavion 

_ _ A^crosq^pqgeJd  I 


Sun  Microsystems  Inc.  said 
attendance  Jumped  m  14,000 
at  last  week's  JavaOne  confer¬ 
ence  ^  an  increase  of  2,000 
over  last  year^  event  and  a 
sign  foat  interest  in  foe  lan¬ 
guage  and  development 
platfiarm  Sun  created 
nine  years  ago  remains 
hi^ 

Yet  Sun  continues  to 
struggle  in  foe  commer¬ 
cial  tools  market,  despite 
its  cachet  as  foe  inventor  of 
Java.  Analysts  place  Sun 
among  foe  bottom  dwellers  in 
foe  commercial  Java  tools 
market,  estimating  foat  h 
commands  less  than  10%  of  a 
market  led  by  Borland  Soft¬ 
ware  Corp.  and  IBM. 

Sun  has  high  hopes  that  foe 

Real  Estate 
Fvm  Mixes  TT 
Management 

•V IMTT  HaMaLBt 
Lend  Lease  Corp.,  a  glohal 
construction  management  and 
real  estate  investment  firm 
based  in  Australia,  plans  to  go 
live  Sept.  1  with  an  IT  overhaul 
foat  will  cfwnhm#  its  woHd- 
wide  network,  systems  and  se¬ 
curity  man^emefit  operatioos 
te  a  data  center  in  Atlanta. 

Lend  Lease  is  overhauling 


new  offerings  h  demonstrated 
and  previewed  at  JavaOne  — 
particulariy  its  visually  orient¬ 
ed  Java  Studio  Creator  —  will 
spark  a  resurgence  in  interest 
in  its  toob  products.  But  the 
company  &ces  an  uphill  Hiq>b 
in  changing  perceptiotts  with¬ 
in  a  developer  commu¬ 
nity  foat  has  paid  little 
attention  to  its  com¬ 
mercial  tools  to  date. 

*I  don't  use  any  Sun 
products,*  said  Scott 
Jensen,  a  software  de¬ 
veloper  at  Beneficial  Life  In¬ 
surance  Ca  in  Salt  Lake  City 
and  a  user  of  JetBrains  Inc's 
InteUiJ.  They  created  Java, 
and  it  gives  them  a  marketing 
edge,  but  when  h  comes  down 
to  it,  ifs  the  competitiveness 
of  foe  products  that  counts.” 

JavaOne.  page  45 


40  core  management  process¬ 
es,  installing  16  software  prod¬ 
ucts  ftna  six  vendors  and  do¬ 
ing  neatly  all  foe  integration 
work  inhouse,  according  to 
John  MOes,  the  company's 
chief  security  officer.  The 
conqiany  is  replacing  smne 
off-foe-sbclf  management 
tools,  but  much  of  foe  soft¬ 
ware  foifs  being  installed  will 
add  aU-new  functionality. 
Miles  said  last  wedL 
The  yeariong  protect,  which 
was  difobed  Hi^iRlSE.  was 
prompted  by  several  hard  real- 
/T  OverhouL  page  J6 


The  power  to  control  pretty  much  everything. 


A  constantly  changing  business  needs  IT  that  changes 
with  It  HP  OpenView  management  software,  used  by  every 
Fortune  100  company,  lets  you  see,  control  and  automate 
a  mixed  IT  environment  from  ony  location  The  result^ 

Your  IT  stays  in  sync  with  the  demands  of  your  business, 
and  suddenly  change  doesn’t  seem  like  such  a  scary  thing 
www.hp.com/lnfo/openview 
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The  right  management  should  do  more  than  just  protect. 

It  should  also  enable. 

eTrusf  Security  Management  Software 

With  ©Trust  security  management  software,  your  information  isn't  just  safeguarded  from  internal  and  external  threats. 
We  provide  authorized  customers,  partners,  and  employees  with  appropriate  access  that  can  help  your  business  grow, 
in  addition  to  securing  data,  ©Trust  also  provides  a  single  view  of  your  security  environment,  so  you  can  make  real-time 
decisions  based  on  comprehensive  information.  If  you’re  looking  for  ways  to  minimize  risk  while  maximizing  your 
potential,  or  to  get  a  white  paper,  go  to  ca.com/security. 
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Big  Blue  Meets  Inspector  Gadget 

In  thn  Tochnology  soction:  IBM's  not  so  staid  anymore. 
Its  Gadget  Lab  is  working  with  companies  to  develop 
high-tech  gumos  like  bathroom  scales  and  pillboxes 
that  transmit  data  to  doctors.  Nothing  seems  to  be 
olT-Hmits.  Page  25 
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•n  BuMding  a  Compliance  Framework 

In  thn  ManagMiwnt  snction:  The  task  of  complying 
With  government  regulations  is  sucking  up  far  too 
many  resources.  With  no  end  in  sight.  CIOs  who  can 
integrate  compliance  into  their  corporate  cultures 
will  push  their  companies  ahead  of  the  pack.  Pag*  33 
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6  E-votIng  systems  may  not 
have  security  issues  resolved 
in  time  for  the  November 
election,  despite  guidance 
from  IT  security  experts. 

6  3Com  marks  the  2Sth  an¬ 
niversary  of  its  founding,  but 
it’s  still  looking  to  become 
profitable  again  after  17  con¬ 
secutive  losing  quarters. 

7  VAX  systam  users  will  soon 
have  to  make  potentially 
costly  migration  choices. 

7  Intel  prepares  64'bit  exten¬ 
sion  technology  for  its  x86 
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market  for  service-oriented 
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system  i$  delayed,  but  that 
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culties  selling  Java  tools. 
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mainstream. 
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View.  Weatherford  Interna¬ 
tional  is  using  Endeca  search 
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sive  ERP  project. 
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technolc^. 

28  Security  Manager's  Journal: 
Spyware  Bets  Top  Billing. 

Dealing  with  spyware  cakes 
on  new  urgency  after  the 
CEO's  system  is  infected. 
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35  Shareware  Brows  Up.  a 

group  of  CIOs  who  were  tired 
of  the  high  cost  of  software 
development  thought  there 
had  to  be  a  better  way.  so  they 
formed  a  software  co-op  to 
share  intellectual  property. 

36  Think  Tank.  The  IT  and  facili¬ 
ties  management  departments 
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looki  a  lot  like  open-source 
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ing  to  cut  costs;  IT  should  get 
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Department  came  up  with. 
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Confessions  of  a  War  Driver 

MOOILE/WIRELESS:  A  Computerworid  editor 
takes  up  the  wireless  war-driving  game  to 
find  unsecured  networks.  How  tempted  is  he 
by  the  "sorry  state  of  wireless  security’? 

OQiickLJnh  47861 

Inside  the  Insider  Threat  ^ 

SECURITY;  Mudge,  security  expert  an^  J 

scientistatlntrusicInc.,detailsson>e.ortbe  * 

ways  that  malicious  hackers  can  slip  inio 
computer  networks  undeteaed. 

Cl  QuidiLJnk 47294 

The  IT  Accounting  Scam 

DEVELOPMENT;  Cohimntsi  Linda  Hayes  ex¬ 
poses  a  software  development  quality  scam 
— and  proposes  a  solution.  O  OutekUnk  47^7 

Storage  on  the  Edge 

STORA6E;  Many  organizatioQs  have  more 
data  stored  on  their  network  perimeters  than 
in  their  dau  centers.  CIOs  need  to  leam  the 
new  realities  of  the  "stor-edge" 
write  Robert  Galletia  and  Melanie  Heintz.  IT 
staff  directors  at  the  Federal  Reserve  Bank  of 
New  York.  O  QidckUak  47764 

Using  os  X  Server 
to  Manage  Cieiits 

MACINTOSH;  Columnist  Rygn  Faas  offers  ad- 
vke  for  systems  administnuon  on  what  to 
keep  in  mind  when  configuring  a  user  envi¬ 
ronment  for  individuals  or  workgroups. 

OQukMJRk  47785 
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Time  Running  Out  for 
E-voting  Security  Plan 


’Net  Attack  Spurs 
Change  to  Windows 

Microsoft  Corp.  released  a  conftg* 
oration  change  for  Windows  XP. 
2000  and  Server  2003  in  an  at¬ 
tempt  to  better  protect  the  oper¬ 
ating  systems  against  an  Internet 
attack  launched  two  weeks  ago 
(QuickLfnk  47818].  Microsoft  said 
the  update  will  safeguard  users 
from  the  Download.  Ject  attack. 
The  company  added  that  it’s  also 
worfiing  on  a  series  of  security 
updates  for  Inlemet  Eipiorer  to 
provide  increased  protactions. 


CSC  to  Modernize 
Air  Traffic  System 

Computer  Sciences  Corp.  said  H 
has  wmn  a  contract  from  the  Feder¬ 
al  Aviation  Adnunistration  to  mod¬ 
ernize  the  system  that's  used  to 
manage  ak  traffic  flow  in  the  U^. 
G  Segundo.  CalH.-based  CSC  wiO 
also  network  fragmented  compo¬ 
nents  of  the  FAA's  IT  infrastruc¬ 
ture.  The  contract's  design  phase 
is  v^ued  at  S13.S  million,  but 
CSC  said  the  deal  could  be  worth 
S589  million  over  t1  years. 

Dell  to  Replace 
Notebook  Adapters 

OeU  kic.  said  it’s  recalling  and 
repiacmg  about  38.000  notebook 
PC  power  adapters  that  could 
cause  an  electrical  shock  if 
they're  used  with  power  cords 
Irom  companies  other  than  MoInI- 
ity  Electronics  Inc.,  which  makes 
the  adapters.  The  Combmation 
Auto/Air  Adapters  were  sold 
wirldwide  between  December 
and  May  as  an  accessory  to  Deft's 
Latitude  and  Inspiron  notebooks. 


Short  Takes 

SVBASC  INC  said  its  second* 
quarter  revenue  will  be  tower  than 
expected  due  to  probtems  in  its 
North  American  corporate  sales 
unit  Steps  to  strengthen  the  unit 
are  planned. . . .  NETWORK  ASSO 
ClATEStNC  changed  its  name  to 
MCAFEE  INC  as  part  of  a  move  to 
focus  on  IT  security  tools. 


Panel  calls  for  indcfyndent  inersight  of 
voting  systems,  but  it  ma\  be  too  late 


BV  OAN  VERTON 

S  TArr  AM.  I(x-al  juris- 
dictions  must  act  im¬ 
mediately  to  ensure  the 
security  of  the  cicc- 
tmnic  voting  systems  that  are 
to  be  used  m  the  November 
presidential  election,  accord¬ 
ing  to  an  IT  security  panel.  But 
the  panel’s  recommendations 
may  well  have  come  uh>  late. 

In  a  report  released  last 
week  by  the  Bamnan  Center 
for  lusticc  at  the  New  York 
University  Schtxd  of  Law  and 
the  Leadership  Conference  on 
Civil  Rightig  the  panel  outlined 
a  strat^*g>'  for  certifying  the  se¬ 
curity  and  rcliabili(>  of  touch- 
screen  direct  recording  elec¬ 
tronic  (DRf.i  voting  systems. 
The  systems  will  be  used  in  ju¬ 
risdictions  representing  about 
.10^.  of  registered  voters  in  the 
upcoming  presidential  election. 

While  analysts  in  the  secu¬ 
rity  and  elections  communi¬ 
ties  praisL'd  the  report,  most 
agreed  that  it  may  have  come 


too  late  for  slates  and  local  ju¬ 
risdictions  to  act  upon. 

Chief  among  the  panel’s 
eight  recommendations  is  a 
call  for  elections  officials  to 
hire  a  wcU-qualified.  indepen¬ 
dent  security  team  to  examine 
the  potential  for  operational 
failures  and  malicious  attacks 

against  ORE  voting  _ 

systems.  According  to 
the  report,  such  a 
team  "must  be  free  of 
any  business  relation¬ 
ships  with  any  voting 
sy.stem  vendors  or  de¬ 
signers"  and  must  be 
granted  unfettered  access  to 
all  software  code  and  configu¬ 
ration  data. 

The  panel  also  recommend¬ 
ed  that  all  jurisdictions  con¬ 
tract  for  independent  “red 
team"  c.xerciscs  to  uncover 
any  hidden  physical  or  elec¬ 
tronic  vulnerabilities  in  ORE 
systems.  And  it  urged  election 
officials  to  make  public  infor¬ 
mation  ahiiui  the  level  of  eo- 


A  VOTE  FOR 
PAKRTRiULS 

SNin3n  Machlis  says 
voters  r«ed  to  be  abk 
to  bust  e-voling 
systems  Set  {uge  tS 


operation  received  from  ORE 
system  vendors. 

Site-specific  security  prtice- 
durcs  and  physical  security 
also  weighed  heavily  in  the 
panel's  report.  For  example, 
the  experts  urged  jurisdictions 
to  use  “tamper  tape"  on  all 
vulnerable  hardware  devices 
and  to  document  strict  proce¬ 
dures  for  system  repairs. 

]im  Adler,  CEO  of  VoteHerc 
Inc.,  a  Bellevue,  Wash.-based 
developer  of  electron¬ 
ic  voting  security 
technoktgics,  said  the 
recommendations  are 
an  accurate  reflection 
of  what  must  be  dune. 

But  many  of  the 
systems  and  proce¬ 
dures  for  the  November  elec¬ 
tion  are  either  already  in  place 
or  are  now  being  deployed. 

"It's  late."  said  Adler,  who  was 
interviewed  by  the  panel  for 
the  report.  “When*  was  this  a 
year  ago?'* 

Jeremy  Epstein,  senior  di¬ 
rector  for  product  security  at 
Fairfax.  Va.-bascd  WebMeth- 
t>ds  Inc.,  characterized  the 
panel’s  report  as  a  set  of  short- 


KEY  RECOMMENDATIONS 


Section  officials 
should: 

I  •  Hire  an  independent  team  of 
eecurtty  eqyerls  to  examine  the 
potential  lor  failures  artel  attack, 
and  implement  the  team's  recom¬ 
mendations. 

•  Provide  thorough  training  lor 

all  election  officials  and  workers  on 
security  procedures- 

■  Develop  procedires  for  ran¬ 
dom  paniflel  tasting  of  tfie  voting 
systems  in  use  to  detect  malicious 
code  or  bugs  in  the  software. 

•  Create  a  permanent  inde¬ 

pendent  technotogy  panel  to 
monitor  the  process. _ 

•  Estabflsh  pracedwee  for 
regular  reviews  ol  audit  faciltties 
and  operating  logs  for  voting  termi- 
nats  and  canvassing  systems. 

■  Prepera  and  fellow  standard¬ 
ized  procedures  lor  response  to 
aileg^  or  actual  security  mod^. 

term  recommendations  that 
are  “exactly  on  the  mark." 

Epstein  said  he  believes 
the  recommendations  can  be 
implemented  in  time  for  the 
election.  But  “tiver  the  longer 
term,’’  he  added,  “the  need  is 
clearly  there  for  voter-verified 
paper  audit  trails  or  perhaps 
some  form  of  cryptographical¬ 
ly  protected  voting.”  O  47931 


3Com  Hits  Milestones  but  Seeks  Path  to  Profitability 


V  r  .  B'ucc  Clafitn  (Ifift) 
MjiSdctiuietts  Gov.  Mill  Romney  at  Iasi 
wewk's  anmvefsary  cetebralton 


Nstworfeng  eqtapment  vendor 
3COM  COUP,  week  marked  its 
2Sth  year  n  busmess  and  the  one- 
year  anniversary  of  relocating  its 
headquarters  frm  CaWomia  to 


Massachusetts.  The 
celefaration  came 
as  3Com  is  trying 
to  rebound  fr^f7 
straight  quarlerfy 
losses  and  steep  de¬ 
clines  in  Ms  sales  and 
headcount. 

Two  weeks  ago. 
3Com  reported  that  it 
lost  $18.7  million  In  its 
fourth  quarter  and 
$349.3  miion  for  afl 
ol  fecal  2004,  which 
ended  May  28.  But  fourth-quarter 
revenuewasup5%iromtheyear- 
earfier  period.  Oumg  the  anniver¬ 
sary  ceremony  al  3Com  headquar¬ 
ters  here.  CEO  Bruce  Qafitn  cafed 
the  levenue  vowth ‘a  milestone  in 
our  tumoound  efforts.* 


Massachusetts  Gov.  Mitt  Rom¬ 
ney,  who  also  spoke  at  the  event 
prased  3Com  for  weathering  the 
‘perfect  storm*  generated  in  die  IT 
Industry  by  the  dot-com  bust  and 
the  post-^  economic  dokkums. 

ConmateMailisIKsy 

But  3Com's  hoped-ior  kimaround 
has  been  a  long  time  conwtg  and 
stN  isn't  assured,  said  Zeus  Ker- 
ravaia.  an  independent  analyst 
based  in  Bostoa  Increasing  its 
sales  to  large  companies  6  vital,  he 
added.  For  example,  he  noted  that 
the  3Com  vex  IP  Telephony  Solu¬ 
tion  ts  a  hlglHiuality  switch  but 
hasn't  attracted  many  corporate 
customers  snee  it  was  Introduced 
tor  oiierpnse  use  a  year  ago. 
"dCom  needs  to  get  more  enter¬ 


prise  users,  and  the  next  12  to  24 
months  will  make  the  difference.* 
Kerravala  said. 

Claflin  ^treed  that  3Com  oust 
better  market  Us  products  lo  cor¬ 
porate  users.  He  took  a  few  stabs 
at  networking  markel  leader 
Systems  fnc..  descrying  its  treat¬ 
ment  of  users  as ‘feudal  *  Cisco 
locte  customers  into  its  technology 
and  then  acts  as  the  *lord  of  the 
manor  over  serfs  tiInQ  the  fields.* 
Qaflinsaid. 

3Com  had  revenue  of  $699  mil¬ 
lion  in  fecal  2004,  compared  with 
$16.1  bdion  for  Cisco  in  the  hrst 
three  quarters  of  its  cunenl  fiscal 
yaar.  Kerravala  and  other  analysts 
said  3Com  has  to  find  corporate  IT 
niches  where  it  can  compete  effec¬ 
tively  against  Cisco.  0  47937 
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Tilet  Attack  Spurs 
Change  to  Wbidows 

Mtawoft  Cofp.  wkiMid  w  config- 
urattan  dungi  for  \Mndowi  XP. 
2000  and  Sorvor  2003  in  an  at* 
tampltobattarprolactthtogar- 
atina  tyitMtt  aoainit  an  Mamat 
attach  tanKhad  two  naafca  ago 
[QidchtMt  47nn  Ifereaort  saU 
Om  ugdala  wM  a^apiard  unrs 
from  tha  OoambadJact  attack. 
Tba  cemponr  addad  that  rt  also 
worktog  on  a  aariaa  of  aocurhy 
updataa  for  tnOamol  Eiplorar  to 
profida  Incraaaed  protoctiona. 


CSC  to  Modernize 
Air  Traffic  System 

Cowpmar  Sriancai  Carp,  said  it 
haa  am  a  contract  from  *10  Fadar* 


amta  tha  aiiatom  dirt's  uaod  to 
manaoa  air  traffic  ftoar  in  tbo  U.S. 
8  Sagunde.  Crti.'faaaod  CSC  w«i 


nents  of  tho  BU's  rr  tofrastnic' 
tort.  Tha  contract's  daairti  phasa 
is  vrtuad  at  S13.S  miBon.  but 
CSC  said  lha  dart  could  ba  worth 
IT  tt  wars. 


DeN  to  Replace 
Notebook  Adapters 

OflR  toe.  said  it's  rariBng  and 
raptoeing  afeoul  38.000  notabook 
PC  powor  adaptors  that  couM 
causa  an  aiactrteal  shock  if 
they’re  uaad  aritb  powor  cords 
from  eampanios  other  than  MobK' 
ity  Etoctronics  toe.,  which  mahos 
ttis  adaptors.  Tha  Combinalton 
Auta/Air  Adaptors  wars  sold 
werktorido  betwoon  OoGombor 
and  May  as  an  accoooory  to  Don's 
LaNtude  and  toopiron  notobooks. 


Short  Takes 

SYBASE  MC.  said  Its  saeond' 
quartar  rovomia  wfl  ba  iewor  than 
aspoctod  due  to  prohtowia  to  Us 
North  Anartcan  eerporrta  aatos 
uniL  Stopa  to  atrangNian  tho  unit 
are  ptoanad. ..  >NETW0fW  ASSO¬ 
CIATES  lie.  changod  Rs  nama  to 
MCAFEE  MC.  ao  port  of  a  movo  to 
focua  00  fT  aocurfly  tooto. 


Time  Running  Out  for 
E-voting  Security  Plan 

Panel  caUs  for  independent  oversight  of  I 
voting  systems,  but  it  may  be  too  late 


OV  OAK  VCItTOH 

STATE  AND  local  juris¬ 
dictions  must  act  im¬ 
mediately  to  ensure  the 
security  of  the  elec¬ 
tronic  voting  systems  that  are 
to  be  used  in  the  November 
presidential  election,  accord¬ 
ing  to  an  IT  security  panel  But 
the  panel's  recommendations 
may  well  have  come  too  late. 

In  a  report  released  Ia.st 
week  by  the  Brennan  Center 
for  lustice  at  the  New  York 
University  School  of  Law  and 
the  Leadership  Conference  on 
Civil  Rights,  the  panel  outlined 
a  strata  for  certifying  the  se¬ 
curity  and  reliability  of  touch¬ 
screen  direct  recording  elec¬ 
tronic  (DR£)  voting  systems. 
The  systems  will  be  used  in  ju¬ 
risdictions  representing  about 
30%  of  registered  vtrters  in  the 
upcoming  presidential  election. 

While  analysts  in  the  secu¬ 
rity  and  electioos  communi¬ 
ties  praised  the  report,  most 
agreed  that  it  may  have  come 


too  late  for  states  and  local  ju¬ 
risdictions  to  act  upon. 

Chief  among  the  panel’s 
eight  recommendations  is  a 
call  for  elections  olHcials  to 
hire  a  well-qualified,  indepen¬ 
dent  security  team  to  examine 
the  potential  for  operational 
failures  and  malicious  attacks 
against  DR£  voting 
systems.  According  to 
the  repdrt.  such  a 
team  "must  be  free  of 
any  business  relation¬ 
ships  with  any  voting 


AV01EFN 

PIPEITUm 


Sharon  Machte  says 
voters  need  to  be  able 
,  .  to  trust  e-volng 

syslemvendoreorde- 
signers"  and  must  be 


granted  unfettered  access  to 
alJ  software  code  and  configu¬ 
ration  data. 

The  panel  also  recommend¬ 
ed  that  all  rurisdictions  con¬ 
tract  for  independent  "red 
team"  exercises  to  uncover 
any  hidden  physical  or  elec¬ 
tronic  vulnerabilities  in  DRE 
systems.  And  it  urged  election 
officials  to  make  public  infor¬ 
mation  about  the  level  of  co- 


Site-specific  security  proce¬ 
dures  and  physical  security 
also  weighed  heavily  in  the 
panel's  report.  For  example, 
the  experts  uiged  jurisdictions 
to  use  "tamper  tape”  on  all 
vulnerable  hardware  devices 
and  to  document  strict  proce¬ 
dures  for  system  repairs. 

Jim  Adler.  CEO  of  VoteHere , 
Inc.,  a  Bellevue.  Wa5h.-based 
developer  of  electron¬ 
ic  voting  security 
technologies,  said  the 
recommendations  are 
an  accurate  reflection 
of  what  must  be  done. 

But  many  of  the 
systems  and  proce¬ 


dures  for  the  November  elec¬ 
tion  are  either  already  in  place 
or  are  now  being  deployed 
"It's  late."  said  Adler,  who  was 
interviewed  by  the  panel  for 
the  report.  "Where  was  this  a 
year  ago?” 

Jeremy  Epstein,  senior  di¬ 
rector  for  product  security  at 
Fairfax.  Va.-based  WebMech- 
ods  Inc.,  characterized  the 
panel's  report  as  a  set  of  shpri- 


ECOMMENDATIONS 
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potonM  tor  Mils  and  rttack. 
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raptor  fuatows  of  todlladNia 

and  opnBng  togs  tor  votoigtonnH 


Dtorirapomik) 
aMgad  or  ackrt  warty  toertsnia. 

term  recommendations  that 
are  “exactly  on  the  mark." 

Epstein  said  be  believes 
the  recommendations  can  be 
implemented  in  time  for  tbe 
election.  But  “over  the  longer 
term,"  he  added,  "the  need  is 
clearly  there  for  voter-verified 
paper  audit  trails  or  perhaps 
some  form  of  cryptographical¬ 
ly  protected  voting."  ©  47931 


3Com  Hits  Miestones  but  Seeks  Path  to  Profitably 
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VAX  Users  See  the  Writing  on  the  Wall 

Thou^  still  widely  used  and  ver)' 
reliable.  PEC’s  legac>'  to  FT  is  aging 


BY  PATBICK  THIBOOCAU 

The  VAX  system  ai  THumph 
Componeats  has  been  in  use 
since  about  1996,  and  informa¬ 
tion  systems  manager  Dan 
Blackshear  couldn’t  be  happi¬ 
er  with  it  There's  just  one 
problem:  He’s  got  to  scrap  it 
The  system  is  fast  woiics 
well  with  Windows  and  “nts 
into  the  modem  environment 
very  cleanly"  at  the  El  Cajoa 
Calif.-based  aerospace  parts 
maker,  said  Blackshear.  "But 
it's  a  dinosaur,  and  eventually 
it  has  to  go."  be  said 
It's  been  four  years  since 
the  former  Compaq  Couqniter 
Corp.  shipped  the  1^  new 
VAX  but  Hewlett-Packard 
Co.,  which  acquired  Compaq, 
estimates  that  there  are  about 
ISOXKX)  to  17SXKH)  of  the  sys¬ 
tems  in  use  in  the  U.S. 

IT  managers  interviewed 
about  VAX  and  its  Open  VMS 
operating  system  said  the  ma¬ 
chines  rarely  fail.  Geoffrey  Ive 
manages  ISO  VAX  systems,  in¬ 
cluding  one  bought  in  1986 
and  others  purchased  in  1990 
and  1995  by  his  South  African 
company.  Eskom  TVansmis- 
sion.  Some  of  the  systems  have 
run  for  more  rhan  six  years 
without  a  reboot  Reliability  b 
"extremely  high.”  he  said 

Bom  ki  1977 

A  reminder  of  VAX’s  advanc¬ 
ing  age  came  last  week  when 
Nemonix  Engineering  Inc.  in 
HolUstoo,  Mass.,  announced 
that  it  was  starting  a  24-hour 
support  line  for  the  system. 
"That’s  in  response  to  a  mar¬ 
ketplace  that  realty  can’t  af¬ 
ford  to  get  rid  of  them.”  said 
Beth  Bumbarger,  Nemonix's 
CEO.  The  company,  which 
makes  custom  hardware  com¬ 
ponents  for  the  VAX  employs 
many  people  who  once  woriced 
at  Digital  Equipment  Corp.. 
the  company  that  developed 
the  VAX  in  1977.  long  before  H 
was  acquired  by  Compaq. 

B<^  Blatz.  HPs  director  of 
marketing  for  OpenVMS.  re- 
affinncd  the  company’s  VAX 


commitment  "Wc  intend  to 
continue  supporting  that  line 
—  we  have  no  plans  to  stop  it,” 
he  said  HP  plans  to  port 
OpenVMS  to  its  Itanium- 
b^d  Integrity  server  line  by 
the  end  of  the  year. 

Users  will  be  under  increas¬ 
ing  pressure  to  migrate  as 
HP's  maintenance  costs  in¬ 
crease  and  the  reliability  of 
the  systems  declines.  Blatz  es¬ 
timates  that  the  number  of 
VAX  systems  in  use  is  shrink¬ 
ing  by  about  10%  each  year. 

But  HP  is  continuing  devel¬ 
opment  of  OpenVMS.  and 
Blatz  said  that  for  the  Integrity 
server;  the  company  has  more 
than  650  applications  commit¬ 
ted  from  SDO-plus  indepen¬ 


dent  software  vendors.  And  in 
the  major  OpenVMS  markets 
—  ftnancial  services,  govern¬ 
ment.  health  care  and  tele¬ 
communications  ~  be  eiqtects 
nearly  100%  of  the  applica¬ 
tions  will  be  ready  for  porting 
to  Integrity. 

StiU.  DO  porting  effort  will 


iMtiV  KtsHy 


be  easy  or  inexpensive.  Users 
are  often  running  legacy  appli¬ 
cations  that  have  been  heavily 
custxnnlzed  Source  code  may 
be  missing,  and  specilk  hard¬ 
ware  caUs  to  VAX  systems  may 
have  been  written,  complicat¬ 
ing  a  migration.  That's  a  prob¬ 
lem  Blackshear  faces;  be  esti¬ 


mates  that  porting  to  another 
system  will  cost  S200XK>0. 

One  migratioo  option  is  us¬ 
ing  Software  Resources  Inter¬ 
national  SA’S  VAX 
Charon-VAX  The  Geneva- 
based  company  was  a  former 
Digital  software  eogmeering 
center  that  was  formed 
through  a  buyout. 

One  Cbanm-VAX  user  is 
Midwest  Microwave  Inc.,  a 
components  maker  in  Saline. 
Mich.,  that  was  running  a  10- 
year-old  VAX  machine  until 
last  year  It  has  moved  Open* 
VMS  and  its  manufacturing 
I  resource  planning  system  to  a 
system  with  dual  Athlon  proc¬ 
essors.  which  are  made  by  Ad¬ 
vanced  Micro  Devices  Inc. 

'There  is  absolutely  no 
migrating  or  porting  or 
co^  conversion.”  said  Barry 
Treahy.  Midwest’s  vice  presi¬ 
dent  and  CIO.  The  application 
"thinks  it^  on  a  VAX.”  he  said. 
0479M 


Intel  Counters  AMD  With  64-bit  Extensions  to  x86 


Could  affect  price, 
supply  of  64-bit 
x86  machines 


BT  PATftieiC  TNiSeOCAU 

Intel  Corp.  last  week  released 
64-bit  extension  technolog>' 
for  x86  workstations  and  in 
two  months  will  deliver  the 
technology  for  servers. 

Intel  is  following  Advanced 
Micro  Devices  Inc.  in  releas¬ 
ing  an  x86  processor  that  can 
run  both  32-  and  64-bit  appli¬ 
cations.  AMD’s  _ 

Opteron  has  already  UOK  | 
shcmm  that  there  is 
d«nand  for  time-  ""I**"®*®* 
pability  on  lower- 
cost.  industry- 
standard  servers. 


coRVMarracHMSip; 

CKMcttMATMO 


The  64-bit  capability  is  |>ar- 
ticularly  important  in  research 
environments.  The  University 
of  Notre  Dame  in  inHiafia,  for 
instance,  recently  installed  a 
256-node  cluster  of  Opteron 
processors  for  resear^  ^pli¬ 
cations. 

Gordon  Wishon.  Notre 
Dame’s  CIO,  said  he  expects 
Intel’s  entry  in  the  market  to 
"substantiaity  influence  price 
as  well  as  availability  of  ma¬ 


chines  of  this  type.”  He  said  he 
will  consider  moving  his  64- 
bit  RISC-based  environments 
to  x86  extensions  because  do¬ 
ing  so  "could  substantially  re¬ 
duce  COST”  and  boost  perfor¬ 
mance.  But  he  doesn’t  want  to 
be  the  first  to  use  It  —  he  will 
wait  until  application  vendors 
have  tested  their  software  and 
mitigated  the  risks,  he  said. 

Vendors  don't  appear  to  be 
expecting  an  onslaught  of  de- 
for  64-611  x86  plica¬ 
tions  as  alternatives  to  ones 

_  already  running  on 

I  m  Itanium  and  RISC- 
based  chips.  There 
has  been  no  flurry  of 
vendors  announcing 
64-bit  x86  versions 
of  their  software. 


Tim  Tribe,  a  product  man¬ 
ager  at  financial  system  appli¬ 
cation  vendor  CODA  Group 
Holdings  Ltd.  in  Harrogate. 
England,  said  his  company 
isdll  release  a  64-bit  version  of 
its  software  when  customers 
demand  it  —  something  be  ex¬ 
peas  will  come  ftom  new 
users.  "1  see  it  quite  clearly  di¬ 
vided  betv;een  existing  users 
of  our  applications  and  new 
users,"  ^  said. 


Users  running  in  32 -bit  eo- 
virooments.  such  as  Paul  Ro¬ 
mano.  senior  manager  of  com¬ 
puter  operations  at  Common¬ 
wealth  Automobile  Reinsurers 
in  Bosmn.  may  sec  no  com¬ 
pelling  reason  to  jump  to  64- 
bit  Romano  said  the  32-bit 
custom  applications  in  his 
Microsoft  shop  are  stable  and 
running  well.  And  he's  not 
about  to  change  that 
Intel  officials  said  they  don't 
see  their  x86  extension  tech¬ 
nology  competing  with  Itani¬ 
um.  which  b  positioned 
against  RISC  systems. 

But  Randy  Bryant,  dean  of 
the  School  of  Computer  Sci- 
ence  at  Carnegie  Mellon  Uni¬ 
versity  in  Pittsburgh,  said  he 
believes  "Itanium  b  dead  ~ 
DOA."  There  may  be  peifor- 

H  Itanium  is 
dead-DOA. 
The  thino  about  x86 
is,  I  can  nm  my  old 
code  on  it 

RANOr  BmrANT.  0£AN  Of  THE 
SCHOOL  OF  COUPUTER  SCIENCE. 
CARNE3IE  MELLON  UNIVERSITY 


mance  issues  with  x86  exten¬ 
sions.  but  "the  thing  about  x86 
b.  1  can  run  my  old  code  on 
it,’’  said  Bryant  He  added  that 
multithreading  technology'  can 
improve  application  perfor¬ 
mance  in  x66  enviroaments. 

'The  arrival  of  64-bit  x86 
extension  technology  "really 
opens  the  door  to  all  [indc- 
pendem  software  vendors]  to 
at  least  consider  yriiether  they 
should  64-bii-enable  their  ap¬ 
plications."  said  Gordon  HafT. 
an  analyst  at  lUuminau  Inc.  in 
Nashua.  NJl. 

The  x86  extension  tecfaix>l- 
ogy  will  likely  populate  the 
T^lntel  server  linn  of  the  ma¬ 
jor  hardware  vendors,  in  much 
the  same  way  they  have  adopt¬ 
ed  OpteroTL  In  the  case  of 
Opteron.  however.  Dell  Inc. 
continues  to  be  a  significant 
holdouL 

Although  Sun.  Hewlett- 
Packard  Co.  and  IBM  are  all 
delivering  Optenm-based 
hardware,  a  Dell  spokesman 
said  last  week  that  bb  compa¬ 
ny  has  no  plans  to  do  so  in  the 
near  future.  Dell  is.  however, 
continuing  to  evaluarc  AMD's 
technology,  the  spokesman 
added.  047B33 
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Halmaffc.ACSInk 
fT  Services  Deal 
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GE  Sends  Some 
CodkigOHshore 
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Short  Takes 
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Can  Steer 
Users  in  Wrong .. . 

uo.dirKtlon  Without  *181^ 

lyino  burinoM  procMNO.”  Sober  thoughts,  especially 
.  gjvOT  that  they  come  from  Colin  Dover,  product 
mAeting  manager  at  Hypraon  Solutions  Corp.,  a 
Su^yvale,  Califr-based  business  intelligence  con¬ 
cern  that  supplies  BI  dashboards.  The  technology 
U  the  easy  part,*  he  says.  consolesoan 

Dov«r  estimates  that  60%  of  administrator 

the  success  or  failure  of  dash>  H|  can  manage 

board  implementations  de-  thousands  of 

pends oo "getting to  the  nub  dients.Spy- 

ofwhat  your  business  truly 

is."  That  may  sound  like  a  comeswitfa 

cinch,  but  "common  points  of  a  library  of 

alignment”  among  various  "spywareffai- 

business  units  aren’t  that  easy  JUjipjjU  gerprints" 
to  quantify  in  ways  that  are  that's  regular- 

useful  for  dashboard  users,  he  ^  updated, 

says.  In  other  words,  prepare  And  ifyou  work  in  a  place 

for  a  truckload  of  meetings  that  discourages  fon,  you  can 
between  your  various  dash-  suppress  unwanted  applka- 
board  constituencies  to  ere-  tions.  such  as  by 

ate  meaningful  business  met-  adding  them  to  its  daubase. 

rics.  Drive  carefully.  SpyCatcher  3X)  uses  an  ag- 


No  Need  for 
James  Bond... 

...w«iSpyCilelNra.a  avail¬ 
able  later  this  month  in  retail 
outlets.  But  don’t  let  the  com¬ 
mercial  release  deter  you 
from  evahutiog  the  ^^yware 
elimination  tool  "It  was  de- 
sig^  with  corporations 
uMfiind.”  says  CEO  Joshua 
BtanchTreld  of  Terrebril  Inc 
in  Boston,  which  created  the 
software.  It  uses  a  remote 


consolesoan 
administrator 
canmaitage 
thousands  of 
clients.  Spy- 
Catcher 
comes  with 
a  library  of 
"spyware  fin¬ 
gerprints" 
that’s  regular¬ 
ly  updated. 
And  if  you  work  in  a  place 
that  discourages  fon,  you  can 
suppress  unwanted  applica¬ 
tions.  such  as  games,  by 
adding  them  to  its  daubase. 
SpyCatcher  3X1  uses  an  ag¬ 
gressive  reinstall-prevention 
shield  that  keeps  the  malware 
from  returning  to  the  PC. 
Cost?  Depends  on  bow  nuny 
copies  you  get  A  recent  con¬ 
tract  for  40.000  users  went  for 
S2  a  copy,  says  BlanchTield 

Discipline  Application 
Behavior... 

. . .  wMi  MW  awlianoa.  This 
week  a  San  Jose  start-up, 
nlayen  Inc.,  ^ps  its  First 
product.  InSight.  wdiicfa  cre- 


•  ates  an  “ap- 
plication  be- 
j  havior  mod- 

t  el  through  hoIgM 

I  deep  packet  analysis,"  says 
CEO  GiU  Raanan  He  argues 
that  most  performance  man¬ 
agement  tools  m  devoted 
to  watching  infrastructure 
activity  such  as  routers  and ' 
swipes  and  not  the  applica¬ 
tions.  which  Forrester  Re¬ 
search  Inc.  estimates  cause 
54%  of  uiucheduled  down¬ 
time.  Raanan  theorizes  that  in 
a  vYorld  of  Web  services  and 
distributed  sofhvare,  "ques¬ 
tions  like.  'What  b  my  appU- 
cationF  and  ’Where  b  my  ap¬ 
plication?’  have  become 
meuphysical  questions  and 
not  engineering  ones."  To  ' 
know  the  health  of  a  given  ap¬ 
plication  meauis  knowii^ 
more  about  the  condition  of  a 
machine  or  even  a  set  of  ma¬ 
chines.  You  need  to  look  at 
the  overall  behavior  of  the 
appUcatioa  That,  be  says,  b 
what  InSight  does,  by  pas- 
shiely  detecting  and  then  ob¬ 
serving  packaged  and  custom 
applicatioQs  on  your  network. 
-InSight  displays  the  complex 
intefdq>endencies  and  b^v- 
ior  of  programs,  then  simpli- 
Hes  the  view  so  managers 
say.  streamline  their  distribu¬ 
tion  to  improve  performance. 
You  can  buy  a  subscription 
for  S2,438  per  month  or  get  a 
perpetual  license  for  S4S.000. 

Conlnl  Batch 
Jobs  in  Mixed... 

. . .  amirenMnt  from  Wh- 
dowtcenMla.  Active- 
Batch  from  Advanced 
Systems  Concepts 
Inc.  in  Parsippany, 

HJn  lets  you  queue 
jobs  on  linux.  Open- 
VMS,  Unix  and  Win¬ 
dows  machines  to  cun 
at  any  time  and  in  the 
correct  order,  estab¬ 
lishing  triggers  be¬ 
tween  the  successfol 
completioD  of  one  job 
before  another  kicks 
off.  Version  5  b  ex- 


pected  to 
be  ready 
for  delivery 
the  first  week  of 
September.  It  will  add  Ker¬ 
beros  security  and  let  you  > 
create  a  "job  plan"  that  coof- 
dinates  numerous  jobs  into  a 
single  entity  for  easier  man¬ 
agement.  The  upgrade  will 
also  add  new  job  types,  such 
as  customized  e-mail  mes¬ 
sages.  Pricing  has  not  yet 
been  determined. 

AppUence  Boosts 
Im  Warehouse... 

. . .  parformanee  wMa  oftting 
coatL  A  tenfold  performance 
jun^  at  half  the  price.  That’s 
the  boast  from  Jit  Saxena, 

CEO  of  Netezza  Corp.  in 
Framin^um.  Mass,,  whose 
Netezza  Performance  Server 
CNPS)  runs  a  fost  proprietary 
database  on  what  be  calls 
"commodity  hardware."  'The 
trick,  thou^  b  to  push  low- 
cost  Intel  processors  down  to 
disk  drives  on  the  appliance 
for  foster  response  time  "so 
the  data  b  processed  ufoere 
it^  being  stored."  says  vice 
president  oif  marketing  Ellen 
Rubin.  Sax^  adds  that  tun¬ 
ing  the  datibase  specifically 
for  ODBC  |DBC  and  SQL 
business  indulgence  queries 
improves  performance.  Gen¬ 
eral-purpose,  high-end  Unix 
machines  running  Oracle, 

DB2  and  even  Ihradata  data¬ 
bases  can't  compete,  he 
claims.  Because  it’s  an  appli¬ 
ance.  Saxena  says,  it's  "plug- 
and-play  and  doesn't  re¬ 
quire  much  of  that 
DBA  stuff"  saving 
money  on  opera¬ 
tions  costs.  An  NPS 
•PpUance  can  han¬ 
dle  to  10TB  of 
data,  but  before  the 
end  of  the  year, 
Netezza  plans  to 
double  or  triple  that 
Pricing  starts  at 
S700.000fora2TB 
047m 
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SCAN 
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Double  your  productivity  with  Scan^  technology. 


#The  best  way  to  stay  ahead  is  to  double  In  fact,  it's  1 15%  faster  than  any  other  product  in  its  class. 
^  your  productivity-  Introducing  Scan^  Not  only  is  it  like  having  double  the  help,  it  will  also  allow 

*  ^  ®  technology  from  Sharp.  Sharp's  Digital  you  to  accomplish  more  tasks,  in  dramatically  less  time. 

Imagers  with  Scan*  technology  are  designed  to  scan  two-  Together  with  Sharp's  integrated  network  management 


sided  documents  in  a  single  pass. 


software  and  security  features,  your  digital  information  is 


Now  your  training  manuals  and  white  papers  can  be  safe  and  workflow  is  fully  optimized. 


The  M-MS50.  AP-M620  0n<3  ARM  TOO: 

•  Opetare  at  5S.  62  and  TOpagei-per-mnute 

■  fuUy  integrated  nermyk  ready  digital  copier/pnnten 

■  Include  network  rryjnagement  ioftware  and  documenr  fHing  capability 


scanned,  copied,  emailed  and  digitally  distribbted  quicker 
than  ever  before. 


Visit  sharpusa.com/scan2  or  call  1-800-BE-SHARP  for 
'more  information. 


be  shorp 


•nj^moae  to  i^^«toAR  M5M  vi  tue  fo«o»vir*9  m*nu(acto>eii(tonipein.vf  Tiodeft.  iR  5000  jnd  SCJO  M 
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Business  Objects 
To  Integrate  Crys 

Upgrade  follows  mei^er  road  map. 
adds  unified  software  portal,  CEO  says 


OOlS 


8V  MAMC  L.  SOMOINI 

Business  objects  sa 
List  week  announced 
a  business  intelli¬ 
gence  software  up¬ 
grade  that  provides  ini 
rial  ties  between  its 
products  and  the  re¬ 
porting  tools  the  com¬ 
pany  acquired  when  it 
bought  Crystal  Deci¬ 
sions  Inc.  lace  last  year. 

In  advance  of  the  an¬ 
nouncement.  Business 
Objects  Chairman  and 
CEO  BBrnard  Liautaud 
spoke  with  Computerworld 
from  his  Paris  oflTice  about  the 
merger  of  the  two  vendors  and 
the  new  software  release, 
which  hews  to  an  integration 
road  map  outlined  in  lanuary 
[QuickLink  4J9461 

What's  ingiortant  about  tha  an- 
nouncamant  of  BuainsssObiects 
8.S?  It’s  the  first  release  with 
the  integration  of  the  products 
of  Business  Objects  and  Crys¬ 


tal  Decisions.  Business  Ob¬ 
jects  has  built  its  success  in 
query-  technology  at  the  sc- 
mamic  layer,  and  Crystal  Dcci' 
sions  has  built  it  on  reporting, 

. . .  Now  the  two  things 
will  be  together  in  one 
product 

We’ve  got  a  unified 
ponal  and  dashboard 
for  both  Crystal  Deci¬ 
sions  and  the  Business 
Objects  products,  for 
the  user  to  log  in  with  a 
stogie  username  and 
password.  It’s  a  true 
I  common  user  experience  be¬ 
tween  the  two  products.  As 
part  of  the  integration,  there 
[also]  will  be  one  single  Web 
services  API  for  the  entire 
product  line. 

I  What’s  iha  status  of  tha  menier 
with  Crystal  Dacisions  from  a 
I  busitMSSstafMfpoim?  Asofjaa 
j  1.  we  have  been  operating  as 
]  one  company.  Wc  defined  the 
'  road  map  of  the  products  for 


the  ne.xt  two  years  and  com¬ 
municated  it  to  all  our  cus¬ 
tomers  and  partners.  We  saw 
11.000  custonvers  and  clarified 
the  message  to  them  that  we 
are  going  to  get  an  integrated 
product  out  by  the  end  of  this 
year.  In  6.5.  we’ll  have  a  lot  of 


integration  coming  in  the 
front  end,  and  in  the  next  six 
months  in  the  back  end. 

That  was  very  reassuring 
for  the  customer  base  because 
usually  in  mergers,  one  prod- 
ua  disappears  to  be  replaced 
by  the  other.  That's  not  hap¬ 
pening  here,  because  we  didn’t 
have  that  much  overlap. 

How  has  the  deal  affected  your 
internal  operations?  We're  clos¬ 
ing  some  offices,  and  we  elim¬ 
inated  some  redundant  posi¬ 


tions.  We  have  let  about  300 
people  go. 

What’s  the  hot  technoiopy  in  the 
business  inteNigence  maihet? 
Probably  the  No.  1  thing  is  per¬ 
formance  management  —  using 
business  intelligence  to  drive 
real  business  performance  im¬ 
provements  with  dashboards 
and  scorecard  methodologies 

and  real-time  information _ 

That’s  probably  the  piece  we 
see  the  most  interest  in  from 
the  customer  base.  O  47737 


Version  6.5  Adds  to  Scalability,  Wbb  Capabilities 


In  addHion  to  providing  a  consis¬ 
tent  user  interface  for  the  Bust* 
ness  Objects  and  Crysl^  Deo- 
sons  product  lines.  Business- 
Objects  6.5  includes  upgraded 
\Afab  reporting  tools  as  well  as 
server  optimizabon  and  en¬ 
hanced  caching  features  de¬ 
signed  to  improve  scat^lty. 

The  goal  is  to  give  a  broader 
sei  of  corporate  useis  access  to 
the  fools,  said  James  Thomas,  a 
procket  marketing  manager  at 
Business  Objects.  *We  see  In  our 
customer  base  a  trend  towwd 
expandingtbesizeofthedeploy 
ment  so  we  want  to  provide  for 
people  with  lesa-sophisticaled 
stats.*  he  added. 


Jonathan  Rothman,  director  of 
data  management  at  &neroency 
Medical  A^ociates  In  fjvinf^toa 
NJ.  is  beta-testing  6.5  and  said 
he  welcomes  the  front-end  inte¬ 
gration  features. 

EMA.  iMitch  providss 
gency  room  staffing  and  medical 
services  to  hospitals,  has  used  - 
Business  Obje^  software  for 
several  years.  It  added  CrysU 
Reports  for  reporting  puposes 
last  tear,  before  Business  Ob¬ 
jects  announced  its  agreement 
to  buy  Crystal  Decisions. 

'The  b^iful  thing  now 
about  the  iniegration  between 
the  two  tod  sets  md  companws 
s  that  we  can  ye  advenlage  of 


the  infrastiucture  we've  built  to 
publish  reports  developed  in 
Crystal  to  our  Business  Objects 
dashboards.'  Rothman  said. 

EMA  runs  Business  Obj^' 
ApplicationFoundatjontechrK)l‘ 
ogy  atop  a  pabent-tracking  sys¬ 
tem  it  developed  in-house. 
Deploying  the  new  integration 
capabilities  was  straightforward. 
Rothman  sad. 

BusinessObiects  6.5  is  avail- 
abfe  on  Windows  and  Solaris, 
and  versions  for  HP-UX  and  AIX 
wil  ship  later  this  year.  Business 
Obiecis  plans  to  support  Unux 
by  next  year.  Thomas  sad. 

•StacyCowtey. 
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Oracle  Uses  Acquisition  to 
Close  Gap  on  SOA  tools 


Offers  Jax-a-based  [ 
-siifhvare  to  link  j 

business  processes  i 

SV  MARC  L.  BONOtNt 

looldi^  to  catch  up  to  rival 
vendors  in  supporting  service- 
oriented  architectures  (SOA). 
Oracle  Corp.  last  week  re¬ 
leased  Java-based  software 
that's  designed  to  make  it  easi¬ 
er  for  companies  to  craft 
reusable  business  processes. 

Oracle  acquired  the  BPEL 
Process  Manager  product 
when  it  purchased  stan-up 
vendor  CfoUaxa  Inc.  last 
monitL  At  last  week’s  2004 
lavaOne  Conference  in  San 


Francisco.  Oracle  announced 
the  CoUaxa  deal  and  said  it's 
now  selling  the  software, 
which  supports  the  Business 
Process  ^ecution  Language 
specification. 

BPEL  Process  Manager  will 
let  users  tie  together  different 
applications  without  having  to 
rely  on  point-to-point  hooks, 
said  Rob  Cheng,  director  of 
product  marketing  for  Oracle's 
application  server  software 
and  tools.  The  new  offering  in¬ 
cludes  open  interfaces,  can 
run  (Ml  any  J2EE-compatible 
j  server  and  is  built  around  Web 
j  services  technologies  such  as 
I  the  Web  Services  Description 
'  Langu^.  according  to  Cheng. 


With  the  software,  business 
processes  can  be  automated 
and  made  portable  so  they  can 
be  quickly  adapted  as  business 
needs  change,  Oracle  said.  For 
instance,  a  company  that  has 
developed  a  transactional  sys¬ 
tem  to  do  business  with  one 
supplier  could  take  the  exist¬ 
ing  configurations  and  reuse 
them  with  another  supplier. 

Hypothetically.  John  I.  Haas 
Inc.  could  use  the  SOA  tech¬ 
nology  to  more  tightly  link  its 
supply  chain  systems  with 
ones  at  some  sister  companies 
and  key  suppliers,  said  Kyle 
Lambert,  the  hops  grower's 
vice  president  of  information 
solutions.  Washington-based 
Haas  uses  Oracle's  database, 
business  applications  and  ap¬ 
plication  server. 

Lambert  said  the  applica¬ 
tions  and  Internet  portals 


serving  its  business  partners 
and  customers  “don’t  neces¬ 
sarily  talk  to  each  other."  lim¬ 
iting  visibility  into  informa¬ 
tion  such  as  the  status  of  or¬ 
ders.  He  added  that  although 
it’s  too  early  to  tell  whether 
Haas  might  deploy  BPEL 
Process  Manager,  the  software 
could  help  the  company  ex- 


TECHNOLOGY  DETAILS 


BPELPrcKKss 

Manager 

■  fncMet  a  buBkwM  proens 
necutlM  angiM,  plus  a  man- 
agemem  and  debugging  console 
and  a  design  GLfl. 


■  CoataSfO.OOOiwrCPU 

as  an  add-on  for  Oracle's  lOg 
application  server  software,  or 
S30.000  per  processor  as  a 
I  stand-alone  product 


pand  its  business-to-business 
collaboration  capabilities 
without  extra  development 
efforts.  “I  just  hope  my  affili¬ 
ates  and  vendors  also  use  , 
SOA-compatiblc  systems,” 
Lambert  said. 

Oracle's  product  release  is  a 
modest  first  step  that  at  least 
proves  it’s  serious  about  offer¬ 
ing  SOA  technology,  said  Ron¬ 
ald  Schmelzer.  an  analyst  at 
consulting  firm  ZapThink 
LLC  in  Waltham.  Mass. 

But  Schmelzer  sud  Oracle 
remains  behind  middleware 
vendors  such  as  ERP  rival 
SAP  AG,  which  has  a  more 
extensive  SOA  offering  with 
its  NetWeaver  integration 
tools.  SAP  co-authored  the 
BPEL  specification  with  Mi¬ 
crosoft  Corp„  IBM.  BEA  Sys¬ 
tems  Inc.  and  Siebel  Systems 
Inc.  <1 4790B 
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Delay  for  FBI’s  Virtual  Case  File 
May  Be  a  Blessing  in  Disguise 


MisuKinagoiiK'iit, 
Ji-’simi  iiiilcxihilily 
citoJ  in  stiiJv 

BY  OAN  VERTON 

TUI  ‘  :  ih.it  tlu- 

IKl's  loni:  .ivv.iiti\j 
v’kvirnnii-  c.ixc  llii. 
'•ysiem  « ill  n«'i  b. 
fuliv  Jcpl«*\cJ  h\  thv  i*nJ  i.i 
ihix  u-jr  .IV  pLiniK-d  in.ix  hi- 
m»‘rc«*r.»  N.nins;  jjr.ivi-  tlun 
an  cnlharr.ls^ml•lU.  J  hv  j-HI 
lUids  111  Mkc  thi-  tinu-  iM  ijiT 
ihv  >\  si.-m  right,  an.ilvvtv  s.iid 

1.1  Vt  VVVvk- 

Thc  vysti'ni.  know  n  js  th*' 
S'inuul  (..ivi  hill-  ( \  <  f  1.  VI 

i-nvismncd  jv  .1  means  nl' en¬ 
abling  .igentv  loeonduet  rapid, 
paperless  mformaiion  sharing: 
it's  a  m.ijor  eoinpi  inent  «»t  the 
MU'n  I  r  muderni/ation  eti«*n, 
kni'un  .IS  Triliig).  Bui  nnl\ 
one  mtklule  t>f  the  sy>tem,  the 
JUiomaieJ  workHiiw  applicj* 
tiim.  is  scheduled  in  he  Je- 
phncJ  h>  the  end  nf  the  year. 

"Beiause  ihe  snimare  priv- 
liram  is  large  .ind  enmpU-x 
We  an*  miKiulariring  \'(.  I  e.i 
pabilities  and  ihen  testing 
them,  deploying  them  to  sub 
si-i  user  groups,  evaluating 
pertormanee  and  then  building 
upon  them."  said  an  bBI  ofrl 
ei.il  whom  the  agency  would 
not  .illow  to  be  idenfl}K*J. 

•And  ih.u  s  actually  a  uel 
come  deM'lopmeni.  s.iid  .ijui- 
lysis,  who  have  iriiiei/ed  the 
bureau  in  the  past  lor  nm  uk- 
ing  .1  phased  .•pproiich  t**  such 
a  large  1 1'  deplovnieni.  In  ad¬ 
dition.  the  bureau  h,is  only  re 
eently  begun  luWverse  years 
ol  misntan.igenK'ni  and  design 
Haws  that  h.oeIed  to  m.ig-r 
delavs  and  proMeiiis  with  the 
deployment  oi  rfte  sy%tem.  .m 
ilVsts  s;nd. 

In  .1  letter  sent  to  the  I- HI  on 
fune  u,  j  committee  oiTI  w 
pens  Irom  the  National  Re- 
V  .irch  fituneil  <\K(  leiied 
■  ir  V  videnee  of  progress  ■ 

'lie  month  since  it  issued  .1 


eathing  rept.n  of  the  Irilogv 
pr.*gr.im.  1  h.n  report,  spon¬ 
sored  by  Ihe  nil  .ind  issued  on 
M.iy  10.  MiulineJ  .1  series  of 
p.i'i  missteps  in  the  design 
.md  deploy  niem  of  the  \  i  > 
system  that  by  .ill  .leeounts 
nuide  enterprisew  ide  rollout 
by  Heeeinber  20()J  inipr.iciieal 
.»nd  highly  risky. 

A  Matter  of  Time 

Hut  while  the  progress  ha.s 
been  "re.issuring."  the  bure.iu 
l.ices  many  remaining  I  P  chal¬ 
lenges  ih.u  w  ill  take  lime  to 

fix.  iheNR{:s.iid. 

f  or  evimple.  according  to 
the  NRy:  study. the  \'(‘l  system 
wasdevek'pcd  wiihttui  the 
K*nefii  t*l' prototyping  .md  test¬ 
ing.  In  addition,  the  bureau  h.id 
m'vYvniingerKy  plan  inpLiee 
for  handling  "missittn  disrup¬ 
tive  failures"  that  ci»uld  stem 
troni  the  bureaus  planned  ' 
"ll.ish  euiover"  from  the  old 


ysicrn  tt'  the  \(  I-  system. 

"W  ith  limited  testing,  and 
no  experience  gained  from 
.1  limited  iniii.il  rollout,  the 
1-Hl  would  be  implementing 
w  h.n  .im(*unis  to  .1  pmtotv  pi- 
throughout  tne  bureau."  the 
NRy  concluded  in  its  studv. 

"  Diis  appnt.ieh  is  nearly  guar- 
.inieed  to  cause  missi<»n-eriti- 


al  failures  .md  hirther  delays." 
In  light  of  that  criticism,  the 
decision  ii*  delay  the  r<*llout  in 
tavor  of  a  ph.ised  deploy  mciu 
Is  ntit  surprising.  s.iid  Bill 
Hamilton,  t  H)  of  Insbw  Inc., 
a  W.ishingloii-ba.sed  developer 
o(  e.isi-  management  sofiware- 
"II  isditficuli  to  imagine  a 
eompar.ihly  si/t>d  private  en¬ 
terprise  ever  even 
considering  doing 
something  like  a  Hash 
cutover  w  ithout  rigor¬ 
ous  testing."  he  said. 

The  initi.1l  "innexi- 
ble"  design  of  the 
V(T  system  has  also 
played  a  role  in  the 
continued  delays  ofihe 

—  n-.  system,  .leeording  to  the 

■■  -I"  ‘’rtgi- 

nally  designed  in  the  mij- 
I'f'HK  to  support  criminal  in- 
ves(ig:ition.s  and  not  terrorism 

A  N4l«fial  c-iuncil  »ctK>n  ( tfeg  ufotjiMi  Out  wamm}  tT  oftstjcla*  remain 


A  Review  of  the 

FBI's  Trilogy  Information  Tochnology 
Modernijalion  Program 


Court  Blocks  ISP  From 
Reclaiming  IP  Addresses 


BY  JAIKUMAR  VIJAYAN 

An  initial  ruling  by  a  New  )er 
sey  state  court  judge  in  :i  l.m  - 
suit  hied  by  .1  UVb  h«*siing 
lirm  is  causing  .ilarm  among 
si>ine  Internet  serv  ice  pro- 
V  iders.  wh«*  fear  that  the  rul¬ 
ing  w  ill  set  a  dangerous  prece¬ 
dent  for  letting  companies  re- 
t.iin  their  IP  addri*ssi-si-ien  if 
they  switch  fSPs. 

Bm  ihe  .American  Regisiry 
tor  Internet  Numbers  (.-\R|M. 
a  (.h.iniillv.  k'.i.  based  oreani- 
/jlion  that  nunages  the  distri¬ 
bution  of  IP  .iddfesses  in 
Ni*rih  -Ameriia.  said  those 
tears  are  mispl.ieed.  The  rul¬ 
ing  "js  not  a  problem  w  hen 
read  in  context."  .\RIS  s,ijd  in 
jsiatcmcni  signed  by  K.iv 
I’l/ak.  Its  president  .md  t  .Tti 
Pl/:ik  .idded  that  he  thinks 
the  concerns  r.iised  about  l.ist 


week's  ruling  resulted  from  the 
manner  in  vv  hieh  the  litigation 
was  described  by  one  of  the 
p.inies  —  an  apparent  refer 
ence  l«»  Net  AceessC!orp..  the 
Parsippany,  N.f.-hasexj  ISP  that 
is  the  defendant  in  the  case. 

University  Communications 
Inc.  t  U(  :i  >.  a  Web  hiwting  firm 
in  Parsippany.  reccivi.*d  a  tem¬ 
porary  restraining  order  from 
a  New  lersey  Superior  C-tturi 
jud.ue  that  allow  s  the  tumpanv 
I"  continue  using  its  current 
IP.iddresseseven  thimgh  it 
has  ti-rminated  its  Internet  ae- 
,  ci*ss  otmr.iei  with  Net  Aeivss. 

.Althiiugh  some  large  com¬ 
panies  own  their  IP  .iddresses 
outright.  ARIN  typically  as¬ 
signs  the  numerical  addressi-s 
to  l.irge  Isl's.  which  in  turn 
alioeate  them  to  their  cus¬ 
tomers.  I  he  ISIS  get  the  ad 


dress  space  back  w  hen  eus- 
n*mers  end  their  eontnii’ts. 
But  tor  now.  the  court  ruling 
prevents  Net  Aeces.s  from  re¬ 
assigning  or  interfering  in  any¬ 
way  with  Uersuscofthe  II* 
addresses  it  was  assigiK-d. 

"If  this  ruling  is  upheld,  it 
has  the  potential  10  disrupt 
nmting  ihnmghtmt  the  Inter¬ 
net  and  change  practices  of 
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intelligence  gathering  and 
.inalysis.  aeeivrding  to  the  NR<! 
repitrt.  w  hich  went  mi  far  as  to 
I  recommend  that  the  FBI  de- 
'  velop  ;in  intelligence  system 
I  architecture  "fn*m  scratch" 

;  rather  than  rely  on  the  \'t  I 
I  system. 

'  ‘•an  I  >ieg.»-based  Science 
I  Applications  Imernaiional 
L.i>rp..  the  vendttr  wurking  on 
'  the  V(T  system,  declined  tti 
citmment  and  referred  .ill  in¬ 
quiries  to  the  FBI.  Ihe  FBI  of- 
heiai  siiid  the  current  cimtract 
vxith  SAKi  runs  thnnigh  I  >e- 
eember  and  th.u  cost- 
sharing  mechanisms  will 
1  come  into  play  if  the  firm 
'  diH'sn't  deliver  on  the  con- 
iract  as  I'utlined. 

Flowex er.  «me  t>f  the  authors 
'  of  the  NRC  report  who  sp».ke 
on  condition  of  anonymiiv 
said  the  current  delay  is  the 
result  of  years  of  mismanage- 
'  ment  by  the  FBI  that  allowed 

I  the  iuntracior  "to  run  the 
show."  7110  delay  ,  hoxvever. 
is  ".ictually  a  good  thing."  the 
oflieuil  said,  bee.iuse  the  bu- 
,  reau  h.is  always  h.id  .i  choice 
"to  do  it  slow  ,ind  gel  it  right, 
j  or  do  it  fast  and  screw  it  up." 

I  0  47938 


business  for  any  Iniemel  si-r- 
I  vice  provider."  claimed  Net 
I  Access  President  Alex  Huben- 
siein  in  a  letter  that  was  post- 
I  ed  on  the  mailing  list  of  the 
*  North  American  Network 
I  Lfperaiors' iJroup. 

I  Allow  ing  Util  to  continue 
using  the  IP  addresses  com¬ 
promises  the  “right  of  the 
provider  to  maintain  control 
and  use  of  the  address  space 
assigned  to  his  network." 
RuK-nsicin  Miid  in  his  note. 

Neither  Rubenstein  nor  177 
Aiffteials  responded  to  requi*sts 
for  comment  follow  ing  his 
posting. 

In  its  court  filing.  Util  said 
it  was  seeking  the  ri*straining 
order  because  it  w  anted  to 
prevent  Nei^ Access  from  dis¬ 
rupting  its  business  while  it 
sw  itches  ISPs.  Util  added  that  .. 

the  effoVi  needed  to  assigii  * 
fresh  II’  addresses  lo  each  of  * 
its  eustt>nH‘rs  will  take 
longer  than  the  period  speci 
Tied  in  its  e»*niraei  with  Net 
Access.  O  47942 
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Delay  for  FBI’s  Virtual  Case  File 
May  Be  a  Blessing  in  Disguise 

....f  >1 _ ■TT-;i _  _ 


Mismanagement, 
design  infle,\ibilit> 
cited  in  itud\' 


BV  OANVEirrOM 

WASHINGTON 

The  FACT  thai  the 
FBI’s  lon|>- awaited 
electronic  case  file 
system  will  not  be 
fully  deployed  by  the  end  of 
this  year  as  planned  may  be 
more  of  a  saving  grace  than 
an  embarrassment.  The  FBI 
needs  to  take  the  time  to  get 
the  system  right,  analysts  said 
last  week. 

The  system,  known  as  the 
Virtual  Case  File  (VCF),  was 
envisioned  as  a  means  of  en¬ 
abling  agents  to  conduct  rapid, 
paperless  information  sharing; 
it’s  a  tnaior  component  of  the 
FBI’s  IT  modernization  effort. 
kiu>wn  as  Trilogy.  But  tmly 
one  module  of  the  system,  the 
automated  workflow  applica* 
tioa  is  scheduled  to  be  de¬ 
ployed  by  the  end  of  the  year. 

“Because  the  software  pro¬ 
gram  is  large  aixi  complex, 
we  are  modularizing  VCF  ca¬ 
pabilities  and  then  testing 
them,  deploying  them  to  sub¬ 
set  user  groups,  evaluating 
performance  and  then  building 
upon  them."  said  an  FBI  offi¬ 
cial  whom  the  agency  would 
not  allow  to  be  identified. 

And  that’s  actually  a  wel¬ 
come  development,  said  ana¬ 
lysts,  who  have  criticized  the 
bureau  in  the  past  for  not  tak- 
tr^  a  phased  approach  to  such 
a  Urge  IT  deployment.  In  ad¬ 
dition.  the  bureau  has  only  re¬ 
cently  begun  to  reverse  years 
of  mismanagement  artd  design 
flaws  that  have  led  to  maior 
delays  and  problems  with  the 
deployment  of  the  system,  an¬ 
alysts  said. 

In  a  letter  sent  to  the  FBI  on 
June  9,  a  committee  of  IT  cx- 
pcTU  from  the  National  Re¬ 
search  Council  (NRO  cited 
“clear  evidence  of  progress” 
in  the  month  since  it  issued  a 


scathing  report  of  the  Trilogy 
program.  That  report,  spon¬ 
sored  by  the  FBI  and  issued  on 
May  10.  outlined  a  scries  of 
past  missteps  in  the  design 
and  deployment  of  the  VCF 
system  that  by  all  accounts 
made  enterprisewide  rollout 
by  December  2004  impractical 
and  highly  risky. 

AMatterofTNne 

But  while  the  progress  has 
been  "reassuring."  the  bureau 
faces  many  remaining  IT  chal¬ 
lenges  that  will  take  time  to 
fix.  the  NRC  said. 

For  example,  according  to 
the  NRC  study,  the  VCF  system 
was  developed  without  the 
benefit  of  prototyping  and  test¬ 
ing.  In  addition,  the  bureau  had 
no  contingency  plan  in  place 
for  handling  "mission  disrup¬ 
tive  Uilures"  that  could  stem 
from  the  bureau’s  planned 
“flash  cutover*  from  the  old 


system  to  the  VCF  system. 

"With  limited  testing,  and 
no  experience  gained  from 
a  limited  initial  rollout,  the 
FBI  would  be  implementing 
what  amounts  to  a  prototype 
throughout  the  bureau,"  the 
NRC  concluded  in  its  study. 
’TTiis  approach  is  nearly  guar¬ 
anteed  to  cause  mission-criti- 


ARtfiewaiaM 

nn  Trtlatr  manMUN  Tadai 
MMwabitlM  Frtmm 


cal  Allures  and  further  delays.’ 

In  li^t  of  that  criticism,  the 
decision  to  delay  the  rollout  in 
favor  of  a  phased  deployment 
is  not  surprising,  said  Bill 
Hamilton.  CEO  of  Inslaw  Inc., 
a  Washington-based  developer 
of  case  management  software. 
’Tt  is  difficult  to  imagine  a 
comparably  sized  private  en¬ 
terprise  ever  even 
considering  doing 
something  like  a  flash 
cutover  without  rigor¬ 
ous  testing."  he  said. 

The  initial  "inflexi¬ 
ble"  design  of  the 
.  VCF  system  has  also 
^  played  a  role  in  the 
^  continued  delays  of  the 
f  system,  accordii^  to  the 
NRC.  The  VCF  wras  origi¬ 
nally  designed  in  the  mid- 
1990s  to  support  criminal  in¬ 
vestigations  and  not  terrorism 


A  Pbtiuul  ItBMvch  Cownd  rtporl  diad  progrtss  but  wwnad  IT  ofictadM  rtman. 


intelligence  gathering  and 
analysis^  according  to  the  NRC 
report,  which  went  so  far  as  to 
recommend  that  the  FBI  de¬ 
velop  an  intelligence  system 
architecture  •’from  scratch” 
rather  than  rely  on  the  VCF 
system. 

San  Diego-based  Science 
Applications  International 
Corp..  the  vendor  woiking  on 
the  VCF  system,  declined  to 
comment  and  referred  ail  in¬ 
quiries  to  the  FBI.  The  FBI  of¬ 
ficial  said  the  current  contract 
with  SAIC  runs  through  De¬ 
cember  2004  and  that  cost¬ 
sharing  mechanisms  will 
come  into  play  if  the  firm 
doesn’t  deliver  on  the  con¬ 
tract  as  outlined. 

However,  one  of  the  authors 
of  the  NRC  report  who  spoke 
on  condition  of  anonymity 
said  the  current  delay  is  the 
result  of  years  of  mismanage¬ 
ment  by  the  FBI  that  allowed 
the  contractor  “to  run  the 
show."  The  delay,  however, 
is  “actually  a  go^  thing."  the 
ofliciaJ  said,  because  the  bu¬ 
reau  has  always  had  a  choice 
‘To  do  it  slow  and  get  it  right, 
or  do  it  fast  and  screw  it  up." 
047938 


Court  Blocks  ISP  From 
Reclaiming  IP  Addresses 


av  JAIKUMAR  VMAVAN 

An  initial  ruling  by  a  New  Jer¬ 
sey  state  court  judge  in  a  law¬ 
suit  filed  by  a  Web  hosting 
firm  is  causing  alarm  among 
some  Internet  service  pro¬ 
viders.  who  fear  that  the  rul¬ 
ing  will  set  a  dangerous  prece¬ 
dent  for  letting  companies  re¬ 
tain  their  IP  addresses  even  if 
they  switch  ISPs. 

But  the  American  Registry 
for  Internet  Numbers  (ARIN), 
a  Chantilly,  Va. -based  organi¬ 
zation  that  manages  the  distrF 
bocion  of  IP  addresses  in 
North  America,  said  those 
fears  are  misplaced.  The  rul¬ 
ing  “is  not  a  problem  when 
read  in  context."  ARIN  said  in 
a  statement  signed  by  Ray 
Plzak.  its  president  and  CEO. 

Plzak  added  that  he  thinks 
the  concerns  raised  about  last 


week’s  ruling  resulted  from  the 
I  manner  in  which  the  litigation 
'  was  described  by  one  of  the 

parties  —  an  apparent  refer¬ 
ence  to  Net  Access  Corp^  the 
I*arsippany.  N.J.-based  ISP  that 
is  the  defendant  in  the 
University  Communications 
Inc.  (UCI).  a  Web  hosting  firm 
in  Parstppany.  received  a  tem¬ 
porary  restraining  order  from 
a  New  Jersey  Superior  Court 
judge  that  allows  the  company 
to  continue  using  its  current 
IP  addresses  even  though  it 
has  terminated  its  Internet  ac¬ 
cess  contract  urilh  Net  Access. 

Although  some  large  com¬ 
panies  own  their  IP  addresses 
outright,  ARIN  typically  as¬ 
signs  the  numeric^  addresses 
to  large  ISPs,  which  in  turn 
allocate  them  to  their  cus-  i 
tomers.  The  ISPs  get  the  ad-  I 


dress  space  back  when  cus¬ 
tomers  end  their  contracts. 
But  for  now.  the  court  ruling 
prevents  Net  Access  from  re¬ 
assigning  or  interfering  in  any 
way  with  UCPs  use  of  the  IP 
addresses  it  was  assigned. 

"If  this  ruling  is  upheld,  it 
has  the  potential  to  disrupt 
routing  throughout  the  Inter¬ 
net  and  change  practices  of 
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business  for  any  Internet  ser¬ 
vice  provider,"  claimed  Net 
Arcess  President  Alex  Ruben- 
stein  in  a  letter  that  was  post¬ 
ed  on  the  mailii^  list  of  the 
North  American  Network 
Operators*  Group. 

Allowing  UCI  to  continue 
using  the  IP  addresses  com¬ 
promises  the  "right  of  the 
provider  to  maintain  control 
and  use  of  the  address  space 
assigned  to  his  network," 
Rubensiein  said  in  his  note. 

Neither  Rubenstein  nor  UCI 
officiab  responded  to  requests 
for  comment  following  his 
posting. 

In  its  court  filing,  UCI  said 
it  was  seeking  the  restraining 
order  because  it  wanted  to 
prevent  Net  Access  from  dis¬ 
rupting  its  business  while  it 
switches  ISPs.  UCI  added  that 
the  effort  needed  to  assign 
fresh  IP  addresses  to  each  of 
its  3XK)0  customers  will  take 
longer  than  the  period  speci¬ 
fied  in  its  contract  with  Net 
Access.  O  47942 


The  Itanium  2  processor. 
Think  of  it  as  the 


turbo  engine  inside  your 
enterprise  servers. 


HThe  Inter  Itanium'  2  processor. 

It's  all  about  performance. 

The  Intel  Itanium  2  processor 
is  engineered  for  industry-leading 
performance.*  With  over  thirty  #1  rankings 
across  eight  industry  benchmarks.  Addressable 
memory  up  to  one  petabyte.  And  support 
for  over  1,600  of  today’s  leading  database  and 
enterprise  applications  and  tools. 

All  at  reduced  cost  over  RISC  solutions.  For  specs 
and  case  studies,  visit  intel.com/business. 


iny. 


systems  and/or  componerrts  and  reflect  the  approximate  performance  of  Inter  products  as  measured  bv  those  tests  Anv 
performance.  Buyers  shoutd  consult  other  sources  of  rnformation  to^Ste  the  performance  of  svstemsor 
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Microsoft  to  AHow 
Win  CE  Changes 

MKRisofl  Corp.  uid  R  wil  «har< 
mor«  of  tfw  sourca  code  for  its 
WindQiiis  CE  wnbeddod  opofiflnB 
system  vritfi  hardenre  makers 
and  alow  them  to  modfy  the 
code  for  thair  oem  commercial 
uees.  Companies  wool  be  re* 
qukedtosharettiairmodifica- 
hons  wMi  Hcnaofl  or  other  CE 
lireneoes.  The  chanpes  take  of- 
fact  hi  Windem  CE  5ii. «  up¬ 
grade  that’s  due  to  be  relearod  to 
manufacturing  this  ereek. 


Nortel  to  Sell  Off 
Production  Plants 

Norloi  Natenrhs  Ltd.  saU  11  w« 
dhreataioelafitsfanialningpro- 
ductian  lacflMaa  to  Raslronics  In- 
lamational  Ine^  a  Singapore- 
baaed  cantraet  flianubcturar.  The 
apreswsnt  is  mined  at  betmaen 
S875  milon  Md  S725  tidMon 
and  inciudaa  a  four-year  contract 
tor  Reilrenics  to  provide  manu¬ 
facturing  sarvicee  to  Norlai. 


bwestment  Fam 
Sues  CA  Over  Pay 

Ranger  Oovamanca  LhL.  the  Oto- 
Im  bawd  imreettnent  linn  that 
triad  to  taka  control  of  CotoNitor 
Aaeociatoi  bdemational  Inc,  in 
2001  hee  fiM  a  taBseuN  Kkkig 
that  12  tormar  and  current  CA  ex- 
ecultoes  be  ordered  to  pay  beck 
fflore  than  SI  bOon  Id  compensa- 
tkM.  The  sHh  atoms  from  CA’s 
April  aMssion  Ihto  »  knprepariy 
boohsd  remnus  In  the  past  CA 
said  If  s  reWawing 'Iha  mattor  of 
conipanaaltongivenofdua*toln- 
dhriduali  eiho  are  mhjact  to  M 
ongoing  govemmant  probe. 


Short  Takes 

The  SECURITIES  AND  EXCHANOe 
COMMISSION  sued  SIEBEL  SYS¬ 
TEMS  MC..  diMng  that  hm  of 
Ns  aiecudves  brohs  finandal  ds- 
elemaeftdastaatyaar....NO- 
VCU  MC.  ralaaeod  Vbrston  to  of 
Mone.anopin-eoureadevetop- 
mantpfatforniN’spftehingasan 
sNsniattos  to  MtoesoR’s  Jfot 


Banks,  Brokerages  Dogged 
By  Message  Storage  Rmes 


Mandates  for  IM, 
e-mail  retention 
pose  IT  challenges 


INFORMATION  technology 
maiugers  at  financial  ser¬ 
vices  firms  are  finding  it 
increasingly  difficult  to 
comply  with  a  of  regula¬ 
tions  that  require  them  to 
archive  e-mail  and  instant 
messaging  exchanges  with 
customers  and  ensure  that  the 
messages  can  be  retrieved. 

The  US.  Securities  and  Ex¬ 
change  Commission,  the  T4ew 
York  Stock  Exchange  and  the 
National  Associatioa  of  Secu¬ 
rities  Dealers  have  all  imposed 
regulations  on  the  types  of  in¬ 
formation  that  brokerages  can 
share  with  clients  via  e-mail 
or  IM  and  how  loi^  messages 
must  be  stored  so  they  can  be 
retrieved  for  regulatory  audits. 

The  regulations  have  creat¬ 
ed  “a  poisonous  atmosphere'* 


for  brokerages  that  are  strug¬ 
gling  to  comply  with  them, 
said  Stephen  Shine,  senior 
vice  president  and  senior 
counsel  at  Prudential  Equity 
Group  LLC  in  Newark.  N-k  He 
was  one  of  the  speakers  at  a 
conference  on  the  use  of  mes- 
sagii^  and  collaboration  tools 
in  the  financial  services  indus¬ 
try,  held  here  last  week  by 
New  York-based  Information 
Management  Network  Inc. 

Shine  said  one  of  the  big 
challenges  securities  firms 
face  is  being  able  to  retrieve 
e-mail  corre^ndence  for 
regulators  within  24  hours,  as 
some  measures  require.  "Re¬ 
gardless  of  how  sophisticated 
your  e-mail  retrieval  system  is. 
you  won't  be  able  to  comply 
by  tooiotiow.'*  he  said. 

He  recommended  that  com¬ 
panies  take  several  steps  to 
“intervene"  with  regulators, 
such  as  asking  for  adequate 
time  to  review  e-mail  mes¬ 
sages  in  order  to  determine 
whether  any  of  the  requested 


What  You  Should  Do 
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correspondence  impinges  on 
attorocy/client  privileges. 

Not  complying  with  the 
messaging  regulations  is  a  po¬ 
tentially  costly  problem.  The 
most  notable  enforcement  ac¬ 
tions  were  taken  in  E)ecember 


2002.  when  the  SEC  fined  five 
broker/dealers  a  total  of  S8.25 
million  for  improperly  storing 
e-mail  [QuickUnk  54912]. 

Brokera^s  frequently  audit 
and  test  their  e-mail  and  IM 
backup  and  recovery  proce¬ 
dures.  but  those  efTorts  arc 
probably  not  done  “consis¬ 
tently  enough  to  meet  regula¬ 
tory  requirements.”  said  Andy 
Welch,  a  senior  manager  at 
KPMG  LLP's  risk  advisory 
practice  in  Short  Hills,  N.]. 

Regulators  at  the  Federal 
Deposit  Insurance  Corp.  in 
Washington  are  also  con¬ 
cerned  about  the  potential 
network  security  vulnerabili¬ 
ties  created  when  bank  em¬ 
ployees  use  IM  tools  for  exter¬ 
nal  communications. 

Attempts  by  banks  to  secure 
IM  exchanges  via  the  use  of 
firewalls  have  proved  to  be 
“very  difficult."  said  Kathryn 
Weatherby.  an  examination 
^>eciaiist  in  the  FDIC’s  divi¬ 
sion  of  supervision  and  con¬ 
sumer  protection. 

In  order  to  help  reduce  the 
security  threats.  Weatherby 
recommended  that  FT  man¬ 
agers  at  banks  set  and  enforce 
limits  on  which  of  their  em¬ 
ployees  can  use  IM  externally. 
0  47936 


Microsoft  CRM  Pace  Frustrates  Users 


■V  STACV  COWLev 
After  its  launch  in  a  blaze  of 
hype  early  last  year,  Microsoft 
Corp.’s  CRM  software  is  on  a 
slower-ihan-expected  devel¬ 
opment  path,  frustrating  some 
users. 

Microsoft  now  expects  to 
have  Version  2  of  the  sofrivare 
ready  in  mjd-2005.  more  than 
two  years  after  it  released  the 
first  version.  In  the  interim, 
the  company  has  issued  point 
upgrades  to  fix  bugs  and  ex¬ 
pand  functionality,  but  the 
current  release.  Microsoft 
CRM  1.2,  still  lacks  features 
found  in  rival  midmarket 
products. 

“I  think  Microsoft  CRM 
wasn't  ready  when  it  was  re¬ 
leased.”  said  customer  Jeremy 
Whitelcy.  CEO  of  Promarket¬ 
ing  Gear  Inc.  in  Kirkland. 
Wash.  Whiteley  switched 


H  We  under¬ 
stood  [the 
software]  is  a  Ver¬ 
sion  1,  but  we  didn't 
understand  there 
would  be  this  many 
challenges. 

MICHAEL  KRIMER.  IS  MANAGER 
DESIGNER  DOORS  INC 

from  FrontRange  Solutions 
Inc.'s  GoklMinc  to  Microsoft 
CRM  but  then  switched  back. 

Whiteley  said  the  problem 
was  that  Microsoft’s  software 
inserted  a  long  string  of  char¬ 
acters  in  the  subject  line  of 
every  e-mail  sent  through  the 
system.  Intended  as  a  feature 
to  help  with  tracking,  the  ID 
string  annoyed  many  cus¬ 


tomers,  and  Microsoft  issued  a 
patch  to  let  users  turn  it  off. 
That  patch  came  after  White- 
ley  h^  already  decided  to 
stop  using  the  software. 

FeatuesTBA 

Microsoft  only  recently  ac¬ 
knowledged  that  Version  2 
won’t  be  finished  this  yeat 
The  update's  feature  set  is  still 
being  determined,  though  Mi¬ 
crosoft  said  h  will  include  in¬ 
tegration  with  Navision  4,  an 
important  addition  for  cus¬ 
tomers  of  the  Navision  appli¬ 
cations  Microsoft  acquired. 

Michael  Kruger,  IS  manager 
at  Designer  Doors  Inc.  in  Riv¬ 
er  Falls,  Wis.,  said  his  compa¬ 
ny  is  scaling  back  its  Microsoft 
CRM  use  until  Version  2  is 
available.  In  October,  the  com¬ 
pany  began  rolling  out  the 
software  to  ^>out  40  employ¬ 


ees  but  soon  hit  ma|or  prob¬ 
lems  with  unreliable  synchro¬ 
nization  between  Microsoft 
CRM  and  Outlook. 

“I  like  Microsoft  CRM.  and  I 
believe  I  will  like  Version  2  a 
lot,"  Kruger  said.  “We  under¬ 
stood  [the  software]  is  a  Ver¬ 
sion  1.  but  wc  didn’t  under¬ 
stand  there  would  be  this 
many  challenges.  Had  we 
known,  we  may  have  waited." 

Holly  Holt,  a  senior  product 
manager  at  Microsoft,  ac¬ 
knowledged  that  some  cus¬ 
tomers  are  having  trouble 
with  synchronization  but  said 
that  many  arc  seeing  signifi¬ 
cant  improvements  with  the 
fixes  that  will  be  included  to  a 
feature  pack  due  next  month. 
Holt  added  that  Microsoft  is 
“happy  and  on  pace"  with  its 
CRM  development  efTorts. 
047941 
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ities,  indudiag  a  30%  reduc- 
tioQ  in  Lend  Lease's  IT  staff 
durii^  recent  years,  said 
Miles.  Lend  Lease  has  also 
made  a  series  of  acquisitions 
and  divestitures  that  have  left 
the  company  with  an  overly 
complex  IT  infrastnicture. 
Miles  said. 

In  addition.  Lend  Lease  con¬ 
solidated  seven  North  Ameri¬ 
can  data  centers  into  its  At¬ 
lanta  IT  facility  two  years  ago 
—  a  move  chat  was¬ 
n’t  accompanied  by 
an  upgrade  of  its 
technology  manage¬ 
ment  capabilities. 

From  a  business 
standpoint,  security, 
network  and  sys¬ 
tems  management 
are  being  converged 
now  partly  because 
Lend  Lease  wants  to 
be  sure  it  can  handle 
competing  corpo¬ 
rate  goals:  opening 


up  online  processing  of  bids 
for  construction  projects  in 
order  to  stay  competitive  in 
chat  market,  while  making 
sure  that  financial  data  from 
its  investment  business  is  se¬ 
cure.  The  S7  billion  company’s 
presence  in  the  fmarvdal  ser¬ 
vices  market  also  requires  it  to 
be  prepared  for  internal  and 
external  audits  of  its  IT  secu¬ 
rity  capabilities  and  financial 
records.  Miles  said. 

Miles  and  Lend  Lease  CIO 
lay  Skibinski  both  of  whom 
are  based  at  the  company’s 
Shared  Tcchnolc^  Center  in 
Atlanta,  wouldn’t  di¬ 
vulge  the  cost  of  the 
project  But  industry 
analysts  said  the 
scope  is  very  large, 
with  the  software 
costs  alone  perhaps 
amounting  to  more 
than  Si  millinn 
The  project  time¬ 
line  also  is  ambi¬ 
tious.  Lend  Lease  de¬ 
veloped  a  blueprint 
last  November,  chose 
its  vendors  in  Febru¬ 


ary  and  staned  the 
software  implemen¬ 
tation  work  in 
March.  “One  princi¬ 
ple  we  agreed  upon 
at  the  start  was  the 
need  to  fire  once 
and  do  it  right.” 

Skibinski  said. 

Lend  Lease  is  in¬ 
stalling  manage¬ 
ment  tools  from 
BMC  Software  Inc’s 
Remedy  subsidiary, 
NetlQ.Corp..  Man- 
^Soft  Corp.  and  M-Teeh  In¬ 
formation  Technology  Inc.,  as 
well  asamdcrlying  technology 
from  Microsoft  Corp.  and  Ora¬ 
cle  Corp. 

Integrating  the  tools  will  let 
network  operations  engineers 
and  help  desk  staffers  use  one 
primary  system  based  on 
Remedy's  software  to  "moni¬ 
tor  all  critical  events  and  re¬ 
spond  to  them  more  efficient¬ 
ly.”  Miles  said.  Global  moni¬ 
toring  of  the  company's  sys¬ 
tems  and  networks  will  be 
done  around  the  clock  at  the 
Atlanta  facility. 


Such  information 
should  help  Lend 
Lease  determine  the 
cause  of  problems 
affecting  its  systems 
and  network  com¬ 
ponents.  said 
Michael  Disabato. 
an  analyst  at  Burton 
Group  in  Midvale, 
Utah.  He  noted  that 
network  faults,  such 
as  an  outage  stem¬ 
ming  from  a  back- 
hoe  cutting  a  fiber 
cable,  require  much  different 
responses  than  denial-of-ser- 
vice  attacks  and  other  security 
incidents. 

There  is  so  much  going  on 
in  a  global  network  with  many 
locations  that  you  need  some 
method  of  sorting  it  all  out 
and  making  sense  of  it.”  Di- 
sabato  said. 

Scott  Crawford,  an  analyst 
at  Enterprise  Management  As¬ 
sociates  Inc.  in  Boulder.  Colo., 
has  talked  with  Miles  about 
the  project  and  said  he  views 
it  as  "a  very  advanced  endeav¬ 
or  in  implementing  manage-  I 
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Microsoft 

said  Ashok  Bakhshi,  IT  direc¬ 
tor  at  Schindler  Elevator  Corp. 
in  Morristown.  N.J.  But  Bakh¬ 
shi  said  he  now  wonders 
whether  the  company  will  re¬ 
vert  to  its  old  ways. 

'‘They  [haven’t  been]  as  ar¬ 
rogant.  sometimes,  in  dealings 
[as]  they.  Were  before,”  said 
Bakhshi  But  with  the  end  of 
the  antitrust  case,  Microsoft 
"might  get  back  to  the  old 
ways.  That's  tendency  of 


any  big  corporation.”  he  said. 

Microsoft’s  IT  industry  op¬ 
ponents  consider  the  decision 
a  disaster. 

”I  think  we  will  see  [Micro¬ 
soft]  be  a  little  more  ^gres- 
sive,”  said  Mike  Petit,  presi¬ 
dent  of  ProComp.  an  anti- 
Microsoft  industry  group  that 
has  supponed  harsher  reme¬ 
dies  than  those  agreed  to  in 
the  antitrust  settlement. 

“They  can  still  wreak  havoc 
on  the  industry. 

"For  people  who  ask  the 
question.  ’What  kinds  of 
things  can  be  commingled 


into  Windows?* 

[the  answer  is], 

‘Anything  that  they 
choose.’  ”  said  Pe¬ 
tit  The  settlement 
imposed  “no  re¬ 
strictions  at  all  on 
that”  he  added. 

Massachusetts,  joined  by 
the  Computer  &  Communica¬ 
tions  Industry  Association  and 
the  Software  &  Information 
Industry  Association,  had  ar¬ 
gued  that  the  U.S.  antitrust 
settlement  didn't  go  far 
enough  and  sought  a  range  of 
tougher  sanctions.  Those 


harsher  remedies 
included  forcing 
the  company  to 
open-source  its  In¬ 
ternet  Explorer 
Web  browser  and 
to  allow  t^  porting 
of  Office  to  other  operating 
systems,  such  as  Linux.  Massa¬ 
chusetts  also  sought  to  force 
Microsoft  to  unbundle  some 
of  its  operatii^  system  func¬ 
tions.  like  Media  Player. 

Last  week's  decision  likely 
means  chat  the  end  of  the  legal 
line  in  that  effort  has  been 
reached,  legal  expens  said. 

”A  Supreme  Court  appeal  is 
beyond  a  long  shot  for  the 
pl^tifts,"  said  Hillard  Ster¬ 
ling,  an  antitnisi  attorney  in 
Chicago  who  has  followed  the 
case  since  its  beginning  in 
1998.  “It’s  virtually  certain  the 
court  would  have  no  interest 
in  even  taking  this  case.” 

Microsoft  officials  said  the 
develi^ment  is  the  roost  im¬ 
portant  to  date  in  resolving  its 
antitrust  battles. 

The  decision  "has  made 
clear  that  Microsoft  and  the 
rest  of  our  industry  can  move 


Microsoft  Antitrust  Timeline 
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ment  architecture.”  Crawford 
added  that  the  Lend  Lease 
project  is  part  of  an  emerging 
trend  toward  converged  sys¬ 
tems  and  network  and  securi¬ 
ty  management,  partly  driven 
by  the  reality  of  IT  job  cuts  — 
as  is  the  case  at  Lend  Lease. 

The  expanding  capabilities 
of  management  tools  also  are 
a  factor,  Crawford  said.  Until 
recently,  management  soft¬ 
ware  couldn't  identify  security 
problems  as  the  root  cause  of 
network  issues.  "Increasingly, 
security  management  will  be 
less  of  a  product  or  a  service 
in  its  own  right  and  more  of  an 
aspect  of  management  soft¬ 
ware  as  a  whole.”  be  predicted. 

One  of  the  biggest  chal¬ 
lenges  of  the  project  was  get¬ 
ting  the  different  vendors  to 
work  together  to  integrate 
their  products,  Skibinski  said. 
The  vendors  saw  risks  in  the 
process,  he  added,  but  were 
willing  to  write  additional 
code  "so  they  can  demonstrate 
to  other  customers  that  they 
can  work  with  other  prod¬ 
ucts  ”047909 


forward  with  this  decree  and 
judgment  in  place.”  said  Brad 
Smith,  Microsoft's  senior  vice 
president  and  general  counseL 
The  ruling  in  effect  supports 
Microsoft’s  operating  system 
strategy,  said  Smith.  The 
Court  of  Appeals  made  clear 
. . .  that  removing  code  ftom 
Windows  would  be  a  huge 
step  backward.”  O  47923 
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A  Voter’s  Paper  Trail 


IF  VOTING  IS  a  cornerstone  of  democracy,  so 
is  the  belief  that  one’s  vote  will  be  properly 
counted.  That’s  why  the  stakes  —  and  emo¬ 
tions  —  are  high  as  vendors,  government  offi¬ 
cials  and  citizens  groups  debate  the  use  of 
electronic  voting  machines. 


Advocates  of  e-voting 
systems  could  leam  some¬ 
thing  from  the  e-commerce 
industry,  which  spent  years 
battling  consumer  fears 
that  (Miline  transactions 
were  unsafe.  Early  Web  re¬ 
tailers  argued  that  trans¬ 
mitting  encrypted  credit 
card  data  over  the  Internet 
was  substantially  more  se¬ 
cure  than.  say.  giving  your 
card  to  a  waiter  and  letting 
him  walk  out  of  sight.  But 
logic  alone  wasn’t  enou^ 
to  persuade  the  masses. 

it  also  took  major  marketing  efforts 
aimed  at  convincing  consumers  that 
they  wouldn’t  be  liable  for  fraudulent 
transactions  before  large  numbers  of 
shoppers  felt  confident  buying  online. 
Ultimately,  people  were  able  to  test 
the  waters  by  making  small  purchases 
ffom  trusted  brands.  When  neither 
their  idemtttes  nor  card  numbers  were 
stolen,  most  were  wUlir^  to  try  again. 

How  can  voters  judge  whether  their 
use  of  an  electronic  voting  nuchine  is 
a  success?  Several  groups  are  lobby¬ 
ing  for  a  “paper  trail,’  arguing  that 
machines  should  keep  a  paper  record 
of  each  vote  cast.  This  is  a  reasonable 
compromise  between  banning  the 
machines  outright  and  allowing  soft¬ 
ware-only  systems  with  questionable 
recount  abilities. 

An  independent  report  issued  last  ^ 
week  recommends  that  election  offt- 
dais  hire  security  teams  to  test  their 
systeoE,  train  all  poll  workers  on  se¬ 
curity  issues,  develop  audit  proce¬ 
dures  and  conduct  “parailer  tests  of  a 
few  random  systems.  (Because  the  re¬ 
port’s  goal  was  to  offer  security  advice 
for  systems  already  in  place,  it  didn’t 
address  the  issue  of  paper  trails.) 
However,  it’s  doubtftil  that  those 


steps  alone  will  convince 
skeptics  that  e-voting  is 
secure.  When  well-cre- 
dentialed  experts  say  it’s 
not  that  hard  to  hack  into 
an  electronic  voting  ma¬ 
chine.  voters  have  every 
rig^it  to  be  concerned 
[QuickLink  46750],  even 
if  other  experts  claim  that 
such  tampering  is  a  low- 
level  or  "theoretical"  risk. 

Vendors  need  to  re¬ 
member  that  their  cus¬ 
tomers  aren’t  just  local  of¬ 
ficials  who  sign  purchase  orders,  but 
also  voting  citizens  who  ultimately 
foot  the  bill  As  many  IT  managers 
have  learned  the  hard  way,  end-user 
buy-in  is  critical  to  successfully  imple¬ 
menting  new  technology.  The  more 
disruptive  or  controversial  the  system, 
the  greater  the  need  to  convince  users 
that  they  will  beoefli.  If  paper  print¬ 
outs  are  a  feature  that  voters  say  they 
want,  bufld  them  into  the  system. 


Industry  critics  say  that  such  a  man¬ 
date  could  lead  to  jammed  printers, 
which  could  slow  or  even  halt  Elec¬ 
tion  Day  voting.  However,  voters 
should  be  rightfully  skeptical  of  com¬ 
panies  that  promise  sophisticated 
hack-proof  technology  and  yet  can’t 
make  a  dependable  printer.  As  one  pa¬ 
per-trail  advocate  noted,  ATMs  and 
gasoline  pumps  regularly  give  pa^r 
receipts  without  incident. 

Others  complain  that  the  paper  re¬ 
quirement  could  make  the  machines 
too  expensive.  But  if  that’s  the  case,  it 
would  be  belter  to  delay  deployment 
until  hardware  prices  come  down 
than  to  spike  an  important  feature. 

No  one  must  shop  online  (and  plen¬ 
ty  of  people  still  don’t).  We  have  oth¬ 
er  venues  to  get  gaods  and  services. 
Voters,  though,  aren’t  given  a  choice 
between  paper  or  touch  screen  ballots 
when  they  arrive  at  polling  places  — 
which  makes  it  vital  that  citizens  have 
confidence  in  their  local  systems. 

Paper  isn't  a  panacea,  as  the  2000 
Florida  vote-counting  debacle  made 
painfully  clear.  But  deploying  new 
technology  for  a  mission-critical 
function  while  ignoring  the  wishes 
of  end  users  is  rarely  a  recipe  for  suc¬ 
cess.  047905 


Maryfinn  Johnson  is  on  vacation.  Her 
column  will  return  in  next  week's  issue. 
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Free  .iq  Now 

IRA(iSEEMS  to  be  every¬ 
where.  The  country  is  in 
headlines  and  political 
speeches  and  could  affect  the  out¬ 
come  of  the  U.S.  presidential  election 
in  November. 

But  it  isn't  on  the  Internet. 

Because  of  a  legal  dispute,  the  Inter¬ 
net  Corporation  for  Assigned  Names 
and  Numbers  has  frozen  the  .iq  ad¬ 
dress.  making  it  impossible  for  Iraqi 
organizations,  businesses  and  people 
to  establish  their  unique  identities 
online. 

This  should  be  changed,  now. 

You  can  make  the  argument  that 
now  that  Iraq's  interim  government 
has  taken  over  from  the  (Coalition  Pro¬ 
visional  Authority,  worrying  about 
online  domain  addresses  is  far  down 
on  the  list  of  priorities,  below  thing^s 
like  public  safety,  reliable  electricity 
and  routine  commercial  air  flints. 

But  I  disagree. 

The  task  of  rebuilding  Iraq  is  im¬ 
mense.  and  any  re¬ 
source  that  can  be 
applied  to  the  effort 
should  be  used.  The 
importance  of  mak¬ 
ing  it  possible  for 
government  min¬ 
istries  to  effectively 
communicate  and 
coordinate  recon¬ 
struction  work  is 
self-evident. 

The  former  U.S. 
administrator  in  Iraq, 

L  Paul  Bremer,  as  well  as  Siyamend 
Ziad  Othman,  bead  of  the  new  National 
Communications  and  Media  Ck>mmis* 
sion  of  Iraq,  have  both  asked  ICANN  to 
release  jq  for  use. 

Sa  why  the  holdup? 

It  seems  that  InfbCom  Ck>rp..  the 
Richardson,  Texas-based  company  that 
runs  the  .iq  domain  name,  was  indicted 
in  2002  for  allegedly  exporting  com¬ 
puter  equipment  to  Libya  and  Syria.  In 
addition,  the  company  is  charged  with 
sending  money  to  terrorist  groups  in 
the  Middle  East 
Until  the  conclusion  of  the  triaL 
which  began  in  Dalla.s  last  month,  iq 
stays  locked  up. 

This  doesn’t  make  sense. 

The  Iraqi  people  need  and  deserve 
the  opportunity  to  have  an  electronic 
identity.  They  should  be  able  to  build 
Web  pages,  establish  businesses  and 
create  electronic  communities  without 


having  to  borrow  domain  names  from 
other  countries  in  the  region. 

One  way  to  facilitate  the  use  of  the 
•iq  domain  would  be  to  put  it  in  an  es¬ 
crow  account  until  the  trial  is  complet¬ 
ed.  so  it  could  be  made  available  now 
to  Iraqis  on  a  nonprofit  basis. 

Getting  Iraq  on  the  Internet  could 
give  it  a  technological  boost  and  per¬ 
haps  even  encourage  a  broadband 
build-out  of  the  country’s  infrastruc¬ 
ture.  In  the  past.  Icss-developed  coun¬ 
tries  have  bwn  able  to  move  from  no 
phone  service  to  mobile  phone  service, 
completely  bypassing  the  time  and 
costs  of  fixed-line  development. 

But  peihaps  the  most  important 
reason  to  release  the  .iq  domain  is  the 
.  one  least  likely  to  coroe  with  dollar 
signs.  It  has  to  do  with  this  strange 
notion:  It’s  intrinsically  a  good  thing 
when  people  have  a  say  about  their 
lives  and  are  able  to  communicate 
their  feelings,  opinions  and  ideas  to 
others  through  e-mail,  online  postings, 
Web  sites  and  blogs. 

it  can  build  pride  and  respect  And. 
if  you  can  for  only  a  moment  cur 
through  the  cynicism  so  prevalent  in 
what  we  call  a  technologically  ad¬ 
vanced  culture,  it  can  give  people  a 
chance  to  dream. 

If  ever  there  was  a  country  that 
needs  to  dream,  it’s  Iraq.  Freeing  the 
.iq  domain  address  is  a  start.  O  477BS 

DAN  GILLMOR 

The  Land 
Of  the  ‘Free’ 
Hot  Spots 

SOMETIME  soon,  Boingo 
Wireless,  a  Wi-Fi  wire¬ 
less  hot-spot  service 
provider,  will  launch  a  product  I’ve 
been  bugging  the  company  about  for  a 
long  dme:  a  Macintosh  client.  But  now 
that  it's  almost  a  reality.  I  find  myself 
wondering  if  it’s  too  late. 

Not  that  I've  stopped  using  a  Mac 
when !  travel  Despite  Apple’s  quality- 
control  problems  and  the  occasional 
application  Td  like  to  use  that  runs 
only  on  Windows.  Tm  still  a  Mac  user 
and  will  probably  remain  one  for  the 
most  part. 

The  reason  I  wonder  if  it's  too  late 
for  Boingo  to  be  useful  for  me  is  that  I 
have  doubts  about  the  entire  bitsiness 
model  of  charging  for  Wi-Fi  access.  I’m 
just  not  convinced  that  it  makes  sense. 


Now.  I'm  not  suggesting 
that  Wi-Fi  should  be  “free" 
in  any  serious  way.  What 
I  question  is  the  idea  that 
hot-spot  providers  can 
charge  high  rates  except 
in  a  fairly  small  set  of  cir- 
cumsunces. 

The  cost  of  setting  up  a 
hot  spot  is  being  driven 
down,  down,  dov^m.  Once 
you  have  a  connection  to 
the  Internet,  adding  an  ac¬ 
cess  point  is  dirt-cheap. 

More  and  more  business¬ 
es  are  seeing  value  in  adding  hot  spots 
and  offerii^  access  as  pan  of  their 
overall  service  —  something  like  the 
free  glass  of  tap  water  you  get  at  the 
restaurant  before  you  order  your  meal. 

If  a  coffee  house  offers  me  access. 
I’m  likely  to  stay  longer  and  drink 
more  coffee.  How  many  extra  cups 
of  coffee  does  a  store  owner  have  to 
sell  every  week  to  cover  the  cost  of 
the  hot  spot  and  make  a  little  extra? 


I’d  wager  not  very  many. 

Tm  also  baffled  by  some 
of  the  locations  I've  seen 
offering  wirelf^s>  access. 
Whether  you're  a  fan  of 
last  food  or  not.  the  idea  of 
taking  a  laptop  to  McDon¬ 
ald’s  seems  a  little  weird. 
My  keyboard  is  the  last 
place  I’d  tend  to  put  my 
fingers  r^t  after  eating 
greasy  food. 

Nevertheless,  there  arc 
sometimes  excellent  rea¬ 
sons  to  use  commercial  hot 
spots.  The  best  reason,  if  the  most  an- 
no>-ing,  is  that  you  have  no  choice.  Air¬ 
ports  and  hotels  lend  to  lease  “air 
rights"  to  commercial  providers,  and 
sometimes  the  only  way  to  catch  up 
with  e-mail  on  a  trip  is  to  use  the  com¬ 
mercial  service. 

Another  good  reason  is  something 
Ek>ingo  understands:  the  need  for  secu¬ 
rity  in  a  notoriously  insecure  environ- 
menL  Boingo  creates  an  encrypted  vir¬ 


tual  private  neOA-oric  tiuuiel  from  the 
user's  computer  back  to  its  own  serv¬ 
ers.  a  feature  that  adds  genuine  value.  I 
have  a  VPN  to  my  company's  servers 
and  use  a  Secure  Shell  server  to  get  to 
my  own  domain,  so  1  don’t  really  need 
this  feature.  Nonetheless.  Boingo  de¬ 
serves  kudos  for  providing  some  secu¬ 
rity  for  people  who  don’t  have  this  kind 
of  infrastructure. 

The  commercial  services  still  don't 
have  enough  access  points.  The>  ’U 
need  to  solve  that  problem  before  they 
have  a  long-range  hope  of  getting  my 
ongoing  business. 

Meanwhile.  I’m  still  looking  for 
“free"  hot  spots.  There  are  enough  of 
them  for  the  average  user,  with  more 
emerging  all  the  time.  That  should 
worry  the  commercial  providers. 
047809 


WMTOWOPIMIII? 

OMon  oAnnim  and  Ma  to  antwB  o<  (xewoiA 
coitfWB  an  on  our  Web  am 


READERS’ LEPERS 


Projects  Should  Be  Ongoing.  Never  Ikine’ 

IHnccoUNM'Gemr^to 

D 


I  Done*  (Qucktjnk  46976]. 

^  touched  on  the  dlfHculties  of 
development  protects  but  (Mnl  see 
the  true  aipm.  That  culpni  e  the 
concept  ol ‘done.' The  prebiem 
anseswthhspremsethatalprar- 
ects  should  have  a  condusioa  The 
maMyisdtatmostdevelopmeniDnif 
ects  ate  support  tasks  lor  ongono 
operaOons.  8y  trying  to  segrnent  Iti6 
conhnuous  support  operation  nto  a 
senes  of  ndependent  protects,  we 
craale  the  dfffiaibes  described. 

fm  nert  saying  that  deadlines, 
budgets  and  resource  ^locations 
should  be  ignored:  I'm  saying  that  if 
I.  as  a  protect  maiager.  am  going  to 
be  able  to  meet  these  restrictions, 
dien  I  need  the  ability  to  defer  Items 
into  the  kdute.  It  a  project  6  gomg 
to  be 'done.*  1  have  the  options  only 
to  complete  or  not  conviete  tasks; 
essenlialy.  an  nfmtte  regurement 
is  mapped  onto  a  hnile  project  N 
the  project  is  viewed  as  an  ongotfig 
operation,  dien  I  have  the  abify  to 
negobaie  trade-oHs.  If  I  need  to 
have  some  set  of  teabfes  availabie 
for  a  trade  show,  than  i  can  focus  on 
those  now  and  defer  other  issues. 

In  addition,  as  a  project  pro¬ 
gresses  doser  to  ris ‘end.*  the  te«n 
IS  muchless  wiKng  to  bsten  to  new 
voices,  regardtess  ol  how  vakaUe 


iheff  niormaiion  may  be.  But  if  the 
project  B  viewvd  as  ongoing,  new 
information  can  be  adekessed  as 
appropnale 

Fndly.  building  consensus  s 
almost  impossiiie  in  a  foniHengIh 
project  One  can  have  only  winners 
andioseis  The  wamers get  thee 
issues  addressed  wdhin  the  project: 
the  lasers  do  not  With  an  ongoaig 
protect  one  can  buki  consensus  on 
when  specific  issues  wi  be  ad¬ 
dressed  and  allow  afl  stakeholders 
tobewmners. 

-■ 

wayne  ■kr 

Oevtlojmetu  project  monogrr. 
South  Kitiirtg 


Respect  for  Sanjay 

IKNOWlTiSfashionattetogive 
Saniay  Kumar  and  CA  a  hard  tne 
(QuckUnk  47368].  However,  as  a 
CA  user  from  1978  and  throughout 
the  time  i  was  a  CTO  and  CIO  n 
benlwiQ.  I  have  to  say  Sar^  made 
a  tremendous  change  m  Dl  He 
brought  ft  from  a  company  that  was 
busy  with  litigation  to  one  that  tried 
to  work  with  Its  customers.  Vour 
magaanemaypnividethebeslavi- 
denix.  if  you  go  back  one.  three, 
live  and  10  years  and  compare  Ite 
amount  of  negatwe  customer  rn- 
acbontoCA.Iamrwiacurrentcus- 


tomer  and  have  niMhfig  to  gam  by 
saying  ihB.  it's  just  base  decency  to 
let  Sas^y  have  he  due  respect 
TsvfU 

Semor  vicr  prvrideru 
and  CJO,  Warner  Musk 
Groifp.  Nfw  yoric 


Lake  Wobegon  IT 

IN  TNE  June  14  issue.  Frank Hayas 
stated.  *Renieniber.  half  of  nr 
workers  are  balow  average*  {'Vlage 
Re^.' OiMkLink  47474]  Tlis  . 
staiemoni  IS  aiconeet  R  is  true  that 
half  of  al  rr  workers  are  below  toe 
msolan  But  about  809b  of  al  ff 
vtorkBrsarebeiawaverage.Fte- 
member  toe  good  old  80/20  rule 
JawaMcOevein 
Hartford,  Conn.  I 


Woe,  Canada 

TfCMmCLE'CanadiantTEi- 
ecs  Say  U  5.  Peen  Aie  Owr- 
patd*  {(kiickink  47346]  ignores 
several  factors  toal  m  my  viaw  lusti¬ 
ly  a  wide  (Merence  m  salanes  be¬ 
tween  U.S.  and  Canadian  IT  work- 
ets.Fbrestfuple.nianyU^.camoe' 
raes  have  decreased  their  health 
and  larniy  benefits,  iorcsig  wokars 
tocampers8le.inadditian.Cana(k- 
an  F^c^'s  Akn  Borak  adiuBled  he 
formub  tor  wage  me  oompmson  to 
accommodate  eachange  rates,  but 


he  mssed  toe  critical  cost-of-toang 

dtHerence 

Sotkis  Bairanis 

Senior  consultant.  Arlington. 

Vo..  9ohris/{S))uhoojrom 

INTMIpnnleduon.ihestvy 
about  Canadans  sayrig  U.Sl 
vtorkss  are  ovenwid  B  ngft  ned  to 
one  that  says  toe  RotW  Bar*  of 
Canada  *was  delaying  4s  prooesstiQ 
of  deposris.  watodiawals  and  pay- 
merts*  because  of ‘a  rouBne  pro- 
Tmnno  mdatofthat]  toroed  b«* 
wortiers  to  redieck  and  vB«y  (ana  of 
miions  ol  transactions  (Wy  *  n  bet 
lhatwascheap  kfaytetoere's  a  rea¬ 
son  US  programmers  are  pad  run 
than  Canadon  pragrmTBTs 
Jack  Beckman 
Manager,  iq^Ocorions  pn>- 
gramming,  Southfield.  MkK 

COfW^rrmiORLD  wetcornes 
comments  from  its  readers  Letters 
wtf  be  added  for  breMly  and  danty 
They  should  be  adikes^  to  Jamte 
BMe.  letters  edior.  Comptierworid 
F>OBoK9f71.SOOOldCot«iecncui 
fttfi.  Frarrmgham.  Mass  01701 
Fax  (506)  87^4843 
E-mail;  letiers^compuierwortd.cam 
Include  an  address  and  phone  run 
ber  for  immedale  verification. 

OFornae  Mas  on  v«se  and 
otoartDpcs.goto 

WWW  runila  wiiiM  i  iwyiMors 


JETBLUE  AIRWAYS  has  a  Wret  from  home.  In  the  state  of  Avaya,  our  with  $4  million  in  revenue  from  10,000 

weapon  in  the  airline  competition:  a  virtual  contact  center  solution  lets  every  agent  reservations  its  first  week  alone.  See  how 

reservations  center.  field  customer  inquiries  and  book  your  customer  relationships  can  take  off 


As  in.  virtually  no  overhead  costs,  no  reservations  in  real  time,  in  their  socks  if  with  the  worldwide  leader  in  multimedia 

unhappy  employees,  no  limits  to  growth.  they  choose,  with  a  PC-based  soft  phone.  contact  centers  at  avaya.com/cc.  Or  call 

Because  JetBlue's  600  agents  alt  work  Avaya  helped  JetBlue  get  off  the  ground  866-GO  AVAYA  today. 


EVERY  JEIBUIE  AIRWAYS  RESERVAIIONS  AGENT 


THE  VIRTUAL  CONTACT  CENTER 


0705.04 
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SECURITY  HANtSER’S  JOURNAL 

Spyware  Gets  Top  Billing 

Mathias  Thuraian  finds  that 
developing  a  policy  for  dealing 
with  spyware  and  adware  takes  on 
a  new  urgency  after  the  CEO’s 
home  computer  is  infected.  Pape  28 


QUICKSTUDV 

VoiceXML 

This  scripting  language  allows  users  to 
interact  with  speech-enabled  applica¬ 
tions.  It  could  make  it  possible  to  surf  the 
Web  using  phones,  handheld  devices  or 
even  household  appliances.  Page  27 


CASE  STUDY 

Search  for  a  View 

Oil  field  parts  and  services  provider 
Weatherford  International  is  using 
Endeca  search  technology  to  lop  off 
a  massive  ERP  and  product  data 
management  project.  Page  26 


The  velvety  voice 
of  that  nice  young 
woman  on  the  other 
end  of  the  phone  is 
really  just  digits  on  a 
disk  somewhere  at  Ver¬ 
izon  Communications 
^  Inc.,  but  “she"  remem¬ 
bers  that  I  spoke  to  her  a  few  mo¬ 
ments  earlier,  before  I  was  inter¬ 
rupted  by  airother  call.  “I  apolo¬ 
gize  if  I  ask  some  questions  you 
already  answered."  the  voice  says. 
She  sounds  genuinely  contrite. 

But  the  virtual  telephone- 
repair  lady  is  just  getting  warmed 
up.  Til  test  yonr  line  from  here," 
she  intones.  “OK.  I  got  the  line 
test  started.  It  could  take  up  to  a 
minute.  I’ll  also  check  to  see  if 
anythii^’s  changed  on  the  line 
since  you  last  called."  While  the 
test  ruirs.  she  asks  me  for  more 
information  about  my  telephone 
problem,  and  she  seems  to  un¬ 
derstand  my  every  response. 

Presently  she  says.  "The  line 
test  is  finished  now.  Unfortunate¬ 
ly,  It  couldn’t  determine  if  the 


problem  is  in  Verizon’s  network 
or  with  your  equipment,  so  we 
need  to  dispatch  a  technician. . . 
sHere  we  are 


I’ve  picked  up  all 
I  ofour  technicians' current  sdhed- 
I  ules.  The  earliest  we  can  schedule 
it  is  on  Thursday.  June  3.  between 
8  a.m.  and  6  pan.  Can  someone 
give  access  to  the  premises  at  that 
time?"  The  call  is  soon  complet- 
ed.  and  on  June  3.  so  is  the  repair. 

Computerized  speech  has 
come  a  long  way  in  20  years.  As  m 

Verizon’s  system  illustrates,  the  * 

technolc^  has  become  smarter, 
easier  to  use  aiKl  more  integral-  . 

ed  with  other  applicatitms.  Such  \ 

technical  advances,  plus  product 
introductions  that  facilitate  the 
deployment  of  the  technology  by 
mainstream  developers,  are  en¬ 
abling  new  uses  for  automated 
speech  systems. 


A  Long  ind  Winding  Road 


Research  in  automated  q>eech 
recognition  goes  back  to  the 
1930s.  but  serious  commercial¬ 
ization  of  it  didn’t  begin  until  50 
years  later.  In  1988.  Dragon  Sys¬ 
tems  IiK.  demonstrated  a  PC- 
based  speech  recognition  system 
with  an  8,000-H'ord  vocabulary. 
Users  had  to  speak  slouiy  and 
clearly.  One.  Word.  At  A.  nroe. 

The  next  big  step  came  in 
1990.  when  Dragon  demonstrat¬ 
ed  a  5,000-word  continuous- 
speech  system  fijr  PCs  and  a 
large-vocabulary,  speech-to-text 
system  for  general-purpose  dic¬ 
tation.  Then,  in  1997,  Dragon  and 
IBM  both  introduced  continuous 
Continued  on  page  24 


Advances  in  speech  recognition  software 
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i  omtntn'J  pofiK  21 

N>'tiTn>  N’t  ja'iuTjl- 

piir}'-'N.  (is, 

,**rpt»r.i(u*ns  K*i:.in 

rk’liiii.i.  v’ut  itiUTj\  JIM.'  voK'v  ri'>}*»'Msc 
'  I\’K  > ‘•vsti'iTi'  Hh' v'arlicr  «ini*s  — 
inJt'cd.  nu'*-t  in  um' ti'd.iv  -  jn-mi-nu- 
driv.'f);  ‘  lor  \.Hir  J'linJ  h.iLijuv ,  sj>  m 
pri  ss  .'ni-  A  iVw  .id\.ins'i‘d  %y>U'inN 
irc  mure  ,  nn^cr'vtdon.i);  W  h.iJ  eit\ 

.irv  \»'U  dff.truni:  irumf"  IV'^puc  the 
••ic.iJv  .id\.iiKfments  «.•  bjjriier  M>tMhu 
i.iriv"»-  lt‘Wirern*r  r.iIvv.inJ  im*rc  njl- 
ural  inivrl’.u'i'N.  houever.  spi'tvh  prt>d- 
ulI’.  Jum-  reni.imed  speeiah/i'il 
N>r  nuhe  mjrkcj*,  sm  li  I'»  n.iv  ipi- 
the  vlivihled  mt-Jiul  Ju.-j.idi'n 
inj  tightly  vorh'tr.ime.Kvistimier  ser 
vu«'  inu'tavtnnj'- 
Hu!  n*m.  pavi*iii*.|y  •.i.iijJ-.iiiine 
>p».vt  h  swiemv  an.'  linking  up  with  cn- 
UTpnw  swieHi-,  tu  .itcess  mbi-r.ippli 
.inJ  spawn  inns^itinms  .'Vs  j 
result,  these  speech  systems  —  pre\  i- 
ousK  ihe  Ji»m.irn  of' e.ill  center  ,md 
telephony  nunapers  —  jre  increasinit- 
ly  hs'cominy:  sumeihinv  lor  the  IT  shop 
!i>  worry  aK'Ut.  il  noi  manjtte 
Veri/on's  spccvh  appheation.  I'ot  e\- 
ample.  can  triytper  a  line  !csl.  update 
cmiomcf  accounts,  schedule  repairs 


WithlVR, 
it  was ‘Touch 
or  say  three!  Now  we 
can  say, ‘I'd  like  to 
change  my  address! 

JOE  ALESSI. 

AAAWNS:SO‘A  OftA 

artd  create  trouble  tickets  —  processes 
that  ri-quire  mrert'aces  w  ith  many  sys 
tents.  "If  you  cre.iie  s,imetliiny:  that's 
ius!  a  veneer,  people  jtei  it  very  ..juiek- 
ly."  says  tan  fcbr.ihimi.  se-iiior  vice 
president  for  IT  ai  ^eri/on  "Hut  for 
eUsioinep.to  really  pci  value,  you  need 
to  do  sonicihinp  with  the  baek  office." 

.\tam  of  Veri/«»n‘s  b.ick-olTiee  fiinc- 
rums  have  been  redesigned  as  Web 
ser\  ices  and  arc  accessible  by  eus- 
ti«niers  over  the  Web  or  by  spoken  rs** 
vjuesi.  The  new  system  handles  some 
repair  calls  per  day  and  has 
boosted  the  perecniape  of  calls  ih;»i  are 
fully  automated  from  to  20"ii. 


. ,  Voice  Tools  6o 

Mainstream 


Speech  and  telephony  speddlsts  tradb 
honaly  have  buH  spe^  recotipftion 
systems  fnm  complex  stanchaione  pro^ 
ucts.  But  IBM.  Micrtieolt  Corp.  and  oth¬ 
ers  are  changaig  thM  with  speech  prod¬ 
ucts  based  on  a  broad  range  of  ap^- 
bon  development  and  delhrery  tools. 

IBM’s  \toice  Server  speech  recogni¬ 
tion  engine,  its  Voice  Application  Access 
middfevore  (for  addng  voice  portals  irilo 
enterpree  appkations)  and  Its  Voce 
sporiseprDdud(foriritei1acingwithtale- 
phore  nehvorKs)  are  al  part  ol  IBM's 
WebSphere  pro^  ine. 'The  developer 
ol  a  speech  appicabon  now  has  access 
loihesame(oainQ.appliC8tionirAer- 
faces  and  databases  ihti  the  WVb  pro¬ 
grammer  has  had  for  several  years.’ says 
Eugene  dbedor  of  mobile  soiubons 
lor  IBM  pervasive  compuifto.  And  be¬ 
cause  the  products  are  based  on  open 
standards  such  as  VneeXML  he  says, 
not  al  the  components  of  the  speech 
appbeabon  ham  to  come  from  IBM.  (To 
learn  rnore  aboU  VoeeXML  see  CM- 
Study  on  page  27.) 

Sanitarty.  Menu's  new  Speech- 
Server  products  are  Mended  to  brmg 
speech  technology  to  companies  (hat 


lack  huge  IT  budgets  or  employees  yMh 
specialded  speech  or  teiephony  skills. 
'We  have  taken  standard  Web  program¬ 
ming  techniques  and  developed  tools 
that  integrate  into  Visual  Studk)  .Net.* 
says  James  Mastan.  direclor  market¬ 
ing  in  Microsoft’s  SpeedtServer  product 
group.  nrtM  can  add  speech  to  your  Web 
appkcatnrs  and  program  that  the  way 
you  would  any  Web  apphcalion.’ 

And.  he  says,  unlite  many  IVR  sys¬ 
tems  that ’go  into  a  black  box  In  the  clos¬ 
et’ and  don’t  Megtato  with  corporMe 
^(Stems.SpeechServercanbeintegrai- 
ed  and  managed  just  like  other  Microsoft 
server  products. 

Mark  Plakias.  an  analyst  at  Zelos 
Group  be.  in  San  Francto.  says  a  lew 
cornpanies  go  (Irectly  from  feve  customer 
service  agents  to  automated  speech,  but 
a  more  logical  path  is  to  start  by  buit^ 
speech  on  ttto  of  Wsb  appkcalions. 
'Companies  are  saytog.  1  c»T  do  this  on 
the  VWb  *  self-service  realy  works.  Now 
ri  go  back  and  do  this  on  the  phone.’ So 
theyaretiyingtomakelheirphonesdf- 
service  as  flexibto  and  tnaMainable  as 
their  Web  self-service.* 

-txary/fAnthes 


:  Kbrahimi  says.  Hv  won't  say  how  much 
the  company  is  savinj*  in  labi>r  costs, 
but  Ilf  says  it  s  "millions  and  millions. " 

Wri/on's  .National  Operations  Voice 
Portal  IS  deployed  across  three  ^eo- 
jtraphicalb  dispersed  data  centers,  and 
calls  .ire  routed  fr<'m  point  to  p«>ini  us- 
in{.’  voice-Jwer-IP  technolofiy.  The  sys¬ 
tem  uses  speech  rect'fjnilion  products 
.ind  user  interface  designs  from  Scan- 
Sofi  Inc.  rwhicli  obtained  much  of 
Hra^on's  speech  technology  vi.i  acqui¬ 
sition).  Telephony  servers  at  each  dat.i 
center  are  connected  to  back-otTiee  ap 
plication  servers  running  Bb.A  Systems 
Inc.'s  Wcbl  ogic  Server. 

■'The  technologv  th.ii  used  to  he  in 
those  telephone  silos,  man.tgeJ  hy  the 
c.ill  center  m.inager.  is  luwv  becoming 
standards-based  and  is  being  driven  b\ 
thes.iniearrlicaliv>n  server  that  serves 
the  Web  pagi-s,"  s;tys  William  .Meisel. 
president  of  TM.A  .•\s.sot-uies.,i  speech- 
technology  consulting  firm  in  Tar/ana. 
t!alif.  "Now  the  I  T  departmeni  can  cre¬ 
ate  the  applications  in  an  environment 
that's  more  familiar  to  them,’’ 

Better  Listeners 

Organizations  that  have  deploycvl 
speech  technology  say  that  recent  ad¬ 
vancements  in  natural-language  under¬ 
standing  have  made  the  systems  more 
acceptable  to  callers.  “With  IVR.  it  was 
'Touch  or  say  three.'  "  says  |oe  Alessi. 
vice  president  for  marketing  and  IT  at 


AAA  Minnesota  Iowa.  "Now  we  can 
say.  i’d  like  to  change  my  address.’ " 

The  organization  last  year  replaced  a 
touch-tone-based  IVK  memK'r  service 
system  with  a  self-service  system  built 
on  the  Say  Anything  natural-language 
speech  engine  fmm  Nuance  (!ommu- 
nications  Inc.  t)ne  objective  w.-»s  to  re¬ 
duce  lumover  in  the  call  ecnier  by 
freeing  agents  from  handling  mundane 
calls,  such  as  requests  for  new  mem¬ 
bership  cards.  Another  goal  was  lo  ad¬ 
dress  the  problem  of  callers  bailing  out 
of  the  IVK  system  K'cause  they  found 
the  menus  confusing,  Alessi  says. 

The  new  system  enabled  AAA  to 
reassign  20%  of  its  call  center  stafi’as 
the  number  of  calls  that  could  be  com¬ 
pletely  automated  increased.  And  the 
organization  has  reduced  processing 
costs  by  S2  per  call  on  average,  for  a 
total  annual  savings  of  S200.000.  ac¬ 
cording  to  Alessi. 

T.  Rowe  Price  Group  Inc.  in  Baltimore 
also  upgraded  its  menu-driven  IVK  sys¬ 
tem  to  a  free-form  speech  system  based 
on  IBM's  WebSphere  Voice  Response 
and  Voice  Server  with  natural-language 
understanding  capabilities.  The  invest¬ 
ment  company  reports  big  savings  in 
telephone  charges  because  automated 


calls  can  bo  completed  faster.  "An  are.i 
we  struggled  with  is  doing  transactions 
in  the  system."  says  Nicholas  Welsh,  a 
vice  president  at  T  Rowe  l*rice.  "They 
,  could  lake  three  !o  four  minutes,  be- 
^  cause  you  have  to  g»i  through  five  or 
six  menu  legs.  Now  the  same  !rans;ic- 
tion  takes  .To  seconds  because  you  can 
speak  it  all  in  one  sentence.” 

Tying  speech  systems  to  mainsiream 
corporate  IT  systern.s.  and  the  use  of 
VoII’.  are  making  il  easier  mine  data¬ 
bases  of  voice  records,  much  as  com- 
panii's  have  mined  other  customer 
records  for  years.  For  example.  t!onti- 
nenial  Airlines  Inc.,  which  has  used 
e(,iualitv  Kilancc  from  Atlanta-based 
Witness  Systems  Inc.  to  monitor  calls 
.ind  capture  voice  rwvords  and  other 
data  tor  three  years,  recently  beg;in  us¬ 
ing  Witness'  new  T'.allMiner  product  to 
an.ilyze  call  content. 

I\’R  analysis  tools  usually  can  keep 
track  of  and  repon  on  a  caller's  choices 
b.i-sed  on  which  menu  paths  the  s'allcf 
,  ha.s  taken.  But  CallMiner  and  a  few  oth¬ 
er  tools  can  go  into  the  voice  record 
and  look  for  spccitlc  words  ivr  word 
combmaiions.  Continental,  for  e.vam- 
ple.  recorded  a  sample  of  its  5  million 
monthly  calls  and  then  used  CallMiner 
to  turn  the  dialogues  into  text  and  mine 
it  for  certain  tilings.  In  so  doing,  it  dis¬ 
covered  that  about  of  the  calls  con¬ 
tain  the  word  rpcoft/Irm. 

Calls  to  reconfirm  a  flight  are  “quite 
frankly  low-value  calls."  says  Andre 
Harris,  Continental’s  director  of  reser¬ 
vations  irainirtg  and  quality.  She  says 
she  used  the  CallMiner  analysis  to  jus¬ 
tify  the  deployment  of  a  new  IVK  sys¬ 
tem  just  ft*r  flight  confirmations.  ^  ^  . 

Continental  currently  has  eight  pc»v-  • 
pie  listening  to  samples  ofcalls  in  or-  ^  i 
der  to  manually  prepare  a  “call-mix  re¬ 
port."  which  is  used  for  analytical  pur¬ 
poses  by  marketers  and  business  plan¬ 
ners  at  the  airline.  “The  pilot  test  [of 
CallMiner)  helped  me  realize  very 
quickly  that  I  can  do  this  with  one  per¬ 
son  instead  of  eight."  she  says. 

And  do  it  better.  From  the  manually 
prepared  call-mix  report.  Continental 
could  sec  that  it  makes  a  sale  on  only 
half  of  all  calls,  but  it  couldn't  tell  why 
sales  were  lost.  Telephone  agents  do 
try  to  elicit  the  reasons,  and  sotm 
automated  call  mining  will  enable  the 
airline  to  analyze  callers'  responses, 

Harris  says.  O  47463 
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Continued  from  page  21 

speech  recognition  systems  for  general- 

purpose  use. 

Meanwhile,  corporations  began 
rolling  out  interactive  voice  response 
(IVR)  systems.  The  earlier  ones  — 
indeed,  most  in  use  today  —  are  menu- 
driven:  “For  your  hind  balance,  say  or 
press  'one.'  *  A  few  advanced  systems 
are  more  conversational;  “What  city 
arc  you  departing  from?"  Despite  the 
steady  advancements  to  bigger  vocabu¬ 
laries,  lower  error  rates  and  more  nat¬ 
ural  imcrtices,  however;  speech  prod¬ 
ucts  have  remained  specialized  tools 
for  niche  markets  such  as  PC  naviga¬ 
tion  by  the  disabled,  medical  dictation 
and  tightly  constrained  customer  ser¬ 
vice  interactions. 

But  now.  previously  stand-alone 
speech  systems  are  linking  up  with  en¬ 
terprise  systems  to  access  other  appli¬ 
cations  and  spawn  transactions.  As  a 
result,  these  speech  systems  ~  previ¬ 
ously  the  domain  of  call  center  and 
telephony  managers  —  are  increasing¬ 
ly  burning  something  for  the  IT  shop 
to  worry  about,  if  not  manage. 

Verizon's  speech  application,  for  ex-  i 
ample,  can  trigger  a  line  test,  update  I 
customer  accounts,  schedule  repairs  I 


H  With  IVR. 

it  was  Touch 
or  say  three!  Now  we 
cansay,Tilh1(eto 
change  my  address! 

JOE  ALESSI. 

AAA  MINNESOTA/IOWA 


and  create  trouble  tickets  —  processes 
that  require  interfaces  with  many  sys¬ 
tems.  “If  you  create  something  that's 
just  a  veneer,  people  get  it  very  quick¬ 
ly."  says  Fan  Ebrahimi,  senior  vice 
president  for  IT  at  Verizon.  "But  for 
customers  to  really  get  value,  you  need 
to  do  something  with  the  back  office." 

Many  of  Verizon’s  back-office  func¬ 
tions  have  been  redesigned  as  Web 
services  and  are  accessible  by  cus> 
tomers  over  the  Web  or  by  spoken  re¬ 
quest.  The  new  system  handles  some 
50,000  repair  calls  per  day  and  has 
boosted  the  percentage  of  calls  that  are 
hilly  automated  from  3%  to  20%. 


Ebrahimi  says.  He  won't  say  how  much 
the  company  is  saving  in  labor  costs, 
but  he  says  it's  “millions  and  millions." 

Verizon’s  National  Operations  Voice 
Portal  is  deployed  across  three  geo¬ 
graphically  dispersed  data  centers,  and 
calls  are  routed  from  point  to  point  us¬ 
ing  voice-over-IP  technology.  The  sys¬ 
tem  uses  speech  recognition  products 
and  user  interface  designs  from  Scan- 
Soft  Inc.  (which  obtained  much  of 
Dragon  s  speech  technology  via  acqui¬ 
sition).  Telephony  servers  at  each  data 
center  are  connected  to  back-oIHce  ap¬ 
plication  servers  running  BEA  Systems 
Inc.’s  BEA  WebLc^ic  Server. 

“The  technology  that  used  to  be  in 
those  telephone  silos,  managed  by  the 
call  center  manager,  is  now  becoming 
standards-based  and  is  being  driven  by 
the  same  application  server  that  serves 
the  Web  pages."  says  William  Meisel, 
president  of  TMA  Associates,  a  speech- 
technology  consulting  firm  in  Tarzana, 
Calif.  “Now  the  IT  department  can  cre¬ 
ate  the  applications  in  an  environment 
that’s  more  familiar  to  them." 

Better  Listeners 

Organizations  that  have  deployed 
I  speech  technology  say  that  recent  ad¬ 
vancements  in  natural-language  under¬ 
standing  have  made  the  systems  more 
acceptable  to  callers.  ‘With  IVR,  it  was 
Touch  or  say  three.' "  says  Joe  Alessi. 
vice  president  for  marleting  and  IT  at 
AAA  Mlnnesota/Iowa.  “Now  we  can 
say,  Td  like  to  change  my  address.' " 

The  organization  last  year  replaced  a 
toueb-tone-based  IVR  member  service 
system  with  a  self-service  system  built 
on  the  Say  Anything  natural-language 
speech  engine  from  Nuance  Commu- 
okations  Inc.  One  objective  was  to  re¬ 
duce  turnover  in  the  caU  center  by 
freeing  agents  from  handling  mundane 
calls,  such  as  requests  for  new  mem¬ 
bership  cards.  Another  goal  was  to  ad¬ 
dress  the  problem  of  callers  bailing  out 
of  the  IVR  system  because  they  found 
the  menus  confusing,  Alessi  says. 

The  new  system  enabled  AAA  to 
reassign  20%  of  its  call  center  staff  as 
the  number  of  calls  that  could  be  com¬ 
pletely  automated  increased  And  the 
organization  has  reduced  processing 
costs  by  S2  per  call  on  average,  for  a 
total  annual  savings  of  S200.000.  ac¬ 
cording  to  Alessi 

T.  Rowe  Price  Group  Inc.  in  Baltimore 
also  upgraded  its  menu-driven  IVR  sys¬ 
tem  to  a  ftee-form  speech  system  bas^ 
on  IBM's  WebSphere  Voice  Response 
and  Voice  Server  with  natural-language 
undemanding  capabilities.  The  invest¬ 
ment  company  reports  big  savings  in 
telephone  charges  because  automated  I 


calls  can  be  completed  faster.  “An  area 
we  struggled  with  is  doing  transactions 
in  the  system,"  says  Nicholas  Welsh,  a 
vice  president  at  T.  Rowe  Price.  "They 
could  take  three  to  four  minutes,  be¬ 
cause  you  have  to  go  through  five  or 
six  menu  legs.  Now  the  same  transac¬ 
tion  takes  30  seconds  because  you  can 
speak  it  all  in  one  sentence." 

Tying  speech  systems  to  mainstream 
corporate  IT  systems,  and  the  use  of 
VoIP,  are  making  it  easier  to  mine  data¬ 
bases  of  voice  records,  much  as  com¬ 
panies  have  mined  other  customer 
records  for  years.  For  example.  Conti¬ 
nental  Airlines  Inc.,  which  has  used 
eC^uality  Balance  from  Atlanta-based 
Witness  Systems  Inc.  to  monitor  calls 
and  capture  voice  records  and  other 
data  for  three  years,  recently  began  us¬ 
ing  Witness'  new  CallMiner  product  to 
analyze  call  content. 

IVR  analysis  tools  usually  can  keep 
track  of  and  report  on  a  caller’s  choices 
based  on  which  menu  paths  the  caller 
has  taken.  But  (CallMiner  and  a  few  oth¬ 
er  tools  can  go  into  the  voice  record 
and  look  for  specific  words  or  word 
combinations.  Continental,  for  exam¬ 
ple.  recorded  a  sample  of  its  5  million 
monthly  calls  and  then  used  CallMiner 
to  turn  the  dialogues  into  text  and  mine 
it  for  certain  things.  In  so  doing,  it  dis¬ 
covered  that  ifoout  10%  of  the  calls  con¬ 
tain  the  word  recor^rm. 

Calls  to  recoafirm  a  flight  are  “quite 
frankly  low-value  calls,”  says  Andre 
Harris,  Continental's  director  of  reser¬ 
vations  training  and  quality.  She  says 
she  used  the  CallMiner  analysis  to  jus¬ 
tify  the  deployment  of  a  new  IVR  sys¬ 
tem  just  for  flight  confirmations. 

Coottnental  currently  has  eight  peo- 

listening  to  samples  of  calls  in  or¬ 
der  to  manually  prepare  a  “call-mix  re¬ 
port”  which  is  used  for  analytical  pur¬ 
poses  by  marketers  and  business  plan¬ 
ners  at  the  airline.  The  pilot  test  [of 
CallMiner]  helped  me  realize  very 
quickly  that  1  can  do  this  with  one  per¬ 
son  instead  of  eight"  she  says. 

And  do  it  better.  From  the  manually 
prepared  call-mix  report  C^dnental 
could  see  that  it  malm  a  sale  on  only 
half  of  ail  calls,  but  It  couldn't  tell  why 
sales  were  lost.  Telephone  agents  do 
try  to  elicit  the  reasons,  and  soon 
automated  cal]  mining  will  enable  the 
airline  to  analyze  callers’  responses. 
Harris  says.  Ci  47468 
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“Wforldwide  FT  spending  will  con¬ 
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resolve  infrastructure  problems." 

John  Gantz 
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IDC 
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interoperable  standards 
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converge  to  address  end-to- 
end  management  needs,' 

Heather  Kreger 
IBM 
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•  Long  Tern.  Mar-ageme-it  and  RQl 

CTO  &  CIO  Insights 

-  Impiementatior*  T.qs 

•  Roadmaps  for  Success 

•  Product  Features  Use's  Need  to  Know  to  Make 


Data  Center  and  Infrastructure 
Considerations 


Systems  Integration  and  Interoperability 


•  S.-'twn'e  Deveupei 
X'tearar  or  0*  Ent-' 


Tun  5  anoS'aridar.ts  for 
f  se  B  jS'Cess  App  ,  ar  .t 


Return  on  Investment  (ROD 
and  Total  Cost  of  Ownership  (TCO) 

•  Ke>  Issues 

.  Pre-  .ren-ent  T.ps 

•  Service  Le.e'  AQree.neri;^ 

•  Case  S’uo-es  A.tn  Derno'is*rarec  and  M^asu' 
Results 

Managing  Deployment  of  Emerging 
Technologies  and  Standards 

•  Procurement/ Actual  Products 

•  P'0)ec:  Managernent 
■  rrnclementat'On 

•.  Educaturi 

•  Manaqemer.  pQi.c  ts 

•  Long  Tern.  Ma'-agen’em  ana  RQl  ExpecfaliO' 


Conference  At-a-Glance 


(subject  to  change) 


-  www.emwusa.com/cw 


SUNDAY.  SEPTEMBER  12 _ _ 

1  OOpm  -  5:00pm  Pre-Conference  Developer  and  Analyst  Tracks 
7  OOpm  -  9  OOpm  Welcome  Reception 

MONDAY.  SEPTEMBER  13 


7;00a»n  -  8  00am 
8'OOam  -  12, 15pm 
'2:15om  -  1 :30pm 
1 .30pm  -  5:30pm 
1  30pm  -  5:30pm 
3:45pm  -  5: 1 5pm 
5:30pm  -  8:30pm 


Breakfast 

General  Conference  Sessions 

Luncheon  Sessions 

General  Conference  Sessions 

Concurrent  Developer  Tracks 

End  User  Case  Study  and  Analyst  Tracks 

Expo  with  Dinner 


TUESDAY.  SEPTEMBER  14 

7:00am  -  8:00am  Breakfast 

8;00am  -  Noon  General  Conference  Sessions 

Noon-1;30pm  Expo  with  Lunch 

I  30pm  -  5:00pm  General  Conference  Sessions 

1 :30pm  -  5:00pm  Concurrent  Developer  Tracks 
4:00pm  -  5:00pm  ErrdHJser  Case  Study  Track 
6:00pm  -  8:00pm  Gala  .Evefimg 


LEARN  FROM  USER 
CASE  STUDIES  AND 
PERSPECTIVES 


MARCIA  BALESTRINO 

SVP  &  OO,  Infomabjn  T«chnoiogy 


WENOEa  BROWNE 

SSIS  Enterpnse  Msnager. 
Depart'n«nt  of  Human  Sonnces 
Minnesota  State  Department  of 
Human  Services  -  SSIS  Divrwjn 


DENNIS  CALLAHAN 

EVP&OO 

The  Guardian  ti<e  Insurance 
Company  of  Amerca 


JASON  GLAZIER 

SVP &  CTO 

S  Chief  E-Commerce ^.eef 
I  Lincoln  Financial  Group 


SASAN  HAMIDI 

cso 

Hterva'  internat<vtai 


WEDNESDAY.  SEPTEMBER  15 

7:30am  -  8;30am  Breakfast 


8:30am  -  1 1 :4^am 


Developer  Track  and  Vendor  Tracks 
Conference  Concludes 


HENRY  HOLCOMBE 

SvP  &  CTO  Operations 
G<9tx> 


Philadelphia  Marriott 

Philadelphia.  Pennsylvania 


MARK  RAMSEY 

Director  of  Data  Arcri  tecture 
FedSr  Serv  ces  Corporation 


IRVING  TYLER 

VF-iCO 


Hotel  Reservations  and  Travel  Services 

IDG  Taavel  is  the  official  travel  company  for  Enterprise 
Management  World.  They  are  your  one-stop  shop  for 


IDG  Taavel  is  the  official  travel  company  for  Enterprise 
Management  World.  They  are  your  one-stop  shop  for 
exclusive  discounted  rates  on  hotel  accomrrtodations. 
To  reserve  your  accommodations,  visit: 

wvvw.etcentral.com 

You  can  also  call  our  conference  housmg  Ime  at. 

1. 800-340-2262  (or  1-508-820-8686) 


^4 

ENTERPRISE 

MiUU6EMENT 

IP 

ceMnnERWORU 

Sept8fnb«T  12-1S,  2004 
Ptiiladetpl***  Marrton 
Ptii<«delphia,  Pennaytvania 


Application  for  Conference  Registration 

Fax  this  completed  application  to  1  -508*620*8254.  Or  apply  online  at:  ww\M:emwusa.com/cw 


Your  business  card  is 
REQUIRED 

to  process  your  application 

Please  affix  your  business  card  to  this  space  prior  to 
submitting  your  application  Applications  submitted 
without  business  cards  will  not  be  processed 

Questions?  Call  1-800-883-9090 


If  not  indicated  on  your  business  card,  please 
provide  the  following  required  information; 


Registration  questions? 

Call  I  ^00  983  909O0'' w'^iai' e''ni«ffegac(V’'pu'€‘'w)ficlcom 

Need  accommodations? 

Re't-'ve  rnerr  at  wwMetcentral.com 

Pi^ds^Cdi'  1  800  340  2262 


Please  dwelt  ONE  of  Hw  following: 

EarlyWrd  WagtstiaUon 

-m-jgkJiA  16  200*1 

PuN/OnaMa  Raglatratlon 

lihr'Aifr  '8  700*’ 

Q 1  am  an  IT  End*  User* 

3  S79S 

3  SMS 

Generar  Conference  Package 

General  Conference  Package 

••C\i0vs,j»v>»'  E'D-  u*i  v  s  W-'-rconsi 

'rK;iuc5«Ge'-w*Corler»ncg  Sess.'ns  £,««  Urr-s  8  Rscetkwsi 

a  IT  Ena- OSS'S  are  deiiree 
Our  conierence  sponsors  a 
pu'cnasing  ipKIusnce  win.i 


as  those  atiena  ng  Enterpr  se  Management  Wond  xnfh  an  .nfent  (anfl  an  IT  spending  budget)  to  potent-ally  buy/lease  nardsea'e/scrftware/services,  etc  from 

n  are  not  he'^seves  an  T  ven<jor  As  such  account  repfese->tatives  ous.ness  deveioftment  pet sonnei,  analysts  and  anyone  else  attending  who  does  not  have  IT 
n  theif  o'ganiratKjn  are  evCuded  trom  the  "IT  End  user'  d«s<gnal-on  mterpretat-on  and  enrorcemeni  a!  this  poiicv  are  at  the  sole  discretion  of  Computerworld 


Q  My  company  is 

Sponsoring/ExhibHing 

atEMW 

As  a  sponsor,  you  may  oe  eiigrbie  to  atteryj  usmg 
above  )  See  the  Current  iistof  soonso.sat  wwwei 


I  a  $7»$  mfOu9^  -  ’S 
Gerxerai  Conference  Package 

Ge-e*!#  C.oniemnre  5em***T  W 

I  registration  provided  with  your  sponsorship  fl*  ' 
iwusacom  Questions'’ Cal'  ’-800  S83-9090c 


IQ  sets  <8  300*1 

Ger'eral  Conference  Package 

’  nc'udes  Genr»»i  CoH*»eii(*  Sesxm  £«oa  MeaK  A  Recertens) 

registrations  have  akeady  been  ass-gned/used  then  you  may  register  at  ft>e  prevailing  rates 
a  I  e'nwregvscomputerwo'ld.corr. 


Q  I  am  a  representative  of  a  Non-Sponsoring  IT  Vendor  Company 

3  Sl,SM  Technical  Profeaionei  Package' 

evcJudes  Sales.  Mprketirvg  ano  Business  Devetopmeni  Professcna*$ 
"'•cigaesGi!n»f»iO)"lerenc*S«wm4t«o  Mvms.S  HwvpronsJ 

’ve  tu3  'egrst'sr-rspe.tompjn, 


Q  $5,000  BwatiwM  Deveiepment  Profeastonai  Pacfcaga 

for  Sales  Marketing  and  Business  Oovetopmeni  Ptofessiorwis 
‘'ni:kidKG«nr<aironle>enceSeSfi«ns.Eno  Mens  Afrecrptrins) 


Vendors  are  encouraged  to  part  cipate  -n  Enterprise  Management  \toid  tnroog"  soonsorsh  p  (Oelai 
■fron-IT  erul-user'  professionals  as  defined  by  Computerworld).  may  apply  for  'egelralion  at  the  •non 
dor'  regist'aton  -s  made  ewMsiyeV  by  Computerworld  Please  cal'  888-239-4&06  wt-  questons 


IS  are  ava.'abiebycaimgLeo  Legerat  506  620-8212  1  Alternatively  vendors  (as  well  as  other 
•sponsoring  vendor'  rate  of  $5  (DOO.  Defe{m,natwn  of  what  constitutes  a  -npn-sponsor  ng  ven- 


Q  I  am  a  RnancM/EquHy  Analyst 
Vsntura  Capital  Professional 

3  $7N  ihwouge  July  la  700*1 
General  Coniererv*  Package 
iKKkklBsGeoeniiCoivrereneeSesvons  £«»■ 

Mms  iRerepiionsi 


and/or 


3  $s»s  vr-w-iuiy  '8  J0Q4' 

General  Conference  Package 

imciuoes'wi^'aJCo'keiBiKv^jgo-j  tint 
Meals  &  frvrepr  cwsr 


LJ  ^  *  quallftad  mombsr  of  ttW  prass.  lean  verify  my  press  credentials. 

Press  should  can  lam  Pollock  at »  781-915-5014  to  register 


_ Payment  Method 

3  Chech  .  A  ■  A,  ,, 


J  American  Eipress  J  VISA  3  MasterCard 


CancataHon  PoMcy  a  iwij...;.,,  wrtitennotiflcation' 


Please  fax  this  completed  application 
to  1-508-820-8254 


’w.computerworld  con 
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Big  Blue  Meets 
Inspector  Gadget 


IBM  shows  Hs  not-so-staid  side 
as  its  lab  wDilis  to  develop  nigh¬ 
ty  gizmos.  By  Gary  H.  Anthes 


THERE'S  NOTHING 
special  anymore 
about  a  digital  bath¬ 
room  scale.  But  this 
one  has  its  own  IP 
address  and  a  Bluetooth  con¬ 
nection  to  a  cell  phone. 

And  nearby  is  a  similarly 
equipped  pillbox.  Forget  your 
meds.  and  it  might  fust  e-mail 
you  a  remmder. 

You  won't  find  these  items 
at  The  Sharper  Image  just  yet. 
They  and  dozens  of  other  fu¬ 
turistic  gizmos  are  prototypes 
at  IBM’s  Corporate  Design 
Center  in  Somers,  N.Y. 

That's  right  —  the  same 
company  that  makes  million- 
doUar  mainframes  and  enter¬ 
prise  application  software. 
Here  in  what  IBM  calls  its 
Gadget  Lab  are  devices  that 
sit  at  the  intersection  of  the 
marisetplace  and  IBM’s  vast 
patent  portfoUa  Most  of  the 
prototypes  have  been  built  in 
small  quantities  for  specific 
customers. 

IBM  hopes  these  demo  de¬ 
vices  will  turn  into  real  prod¬ 
ucts,  albeit  in  most  cases  man¬ 
ufactured  by  another  compa¬ 
ny.  In  addition  to  generating 
license  fees.  IBM  hopes  they 
will  spawn  demand  for  hs  big- 
iron  infrastructure  products. 
Wherever  there  are  net¬ 
worked  bathroom  scales  and 
pillboxes,  there  must  be  a 
server  and  some  database 
software  in  the  background, 
IBM  figures. 

Several  forces  conveiged  to 
prompt  IBM  to  establish  hs 
Engineenng  Thcfanology  & 
Services  division,  wfaidi  owns 
the  Gadget  Lab,  in  October  I 


2002.  There  had  been  an  ex¬ 
plosion  in  the  number  of  ap¬ 
plications  for  IT  embedded  in 
consumer  products,  from  cars 
to  toys  to  medical  devices,  and 
there  had  been  much  innova¬ 
tion  around  e-commerce.  “We 
interviewed  76  companies  at 
the  end  of  the  dot-com  era, 
and  there  was  a  lot  of  interest¬ 
ing  technology  left  on  the 
table,"  says  Pat  Toole,  general 
manager  of  ET&S. 

Seeking  a  way  to  match 
those  technological  opportu¬ 
nities  with  its  20,000  active 
patents  and  40,000  engineers, 
and  propelled  by  a  manage- 


vl 


I  ment  mandate  to  become 
more  of  a  services  company, 
IBM  got  into  the  gadgets  busi¬ 
ness.  Some  200  companies 
have  paid  it  to  develop  proto¬ 
types  so  far.  For  the  first  time. 
IBM  is  giving  customers  ac¬ 
cess  to  its  core  technologies. 
DM  just  to  finished  products. 

IBM  worked  with  the  Mayo 
Clinic  in  Rochester,  Mixm.,  to 
design  a  small  magnetic  reso¬ 
nance  imaging  coil  that  can  be 
used  to  examine  body  parts  in 
extreme  detail  An  injured 
arm.  for  example,  is  inserted 
into  the  coil  and  then  the  coU 
and  arm  are  inserted  into  the 
tube  of  an  MRl  machine.  The 
resulting  images  recorded  by 
the  coil  are  more  detailed  rhan 
those  that  can  be  obtained  any 
other  way,  says  Bruce  Kline. 
Mayo's  technology  commer- 
cializatioD  manager. 

Doctor  in  the  House 

Why  turn  to  a  computer  com¬ 
pany  for  a  medical  device? 
“Mayo  and  IBM  are  try- 
to  get  together  on 
many  levels.”  Kline 
says.  “IBM’s  win  was 
they  learned  how  to  do  a 
device.  Mayo’s  win 
access  to  engineers  that 
good  at  productization.” 
is  working  with  four 
to  develop  devices 
Jess  medical  data  col- 
Wearabie  blood  pres- 
beart  rate  and  EKG  mon- 
hots  —  plus  the  bathroom 
scale  and  pillbox  could 
send  real-time  medical  data 
by  mobile  phone  to  a  doctor, 
a  clinic  or  a  phannaceutkal 
company  whose  clinical  trial 
of  a  new  drug  includes  the 
user  of  those  devices.  The  de¬ 
vices  could  work  in  concert  so 
that  a  physician  recehring.  say. 
adverse  bk>od  pressure  or 
heart  rate  data  could  see  that 
the  patient  hadn't  taken  bis 
medication  that  day  and  re¬ 


spond  accordingly. 

A  communications  compa¬ 
ny  in  Europe  wanted  more 
flexibility  in  pricing  cell 
phones,  and  it  wanted  to  fos¬ 
ter  demand  for  services  over 
its  cellular  network.  In  re¬ 
sponse,  IBM  designed  a  cell 
phone  "hub"  that  contains  the 
phone's  battery,  its  cellular 
radio  and  a  Bluetooth  device. 
The  bub  suys  in  a  pocket  or 
purse  and  communicates  with 
appUcation-q>ecifM:  cell  phone 
m^ules  --  which  IBM  also 
designed  —  that  contain  input 
and  output  devices  such  as 
keypads,  earphones,  cameras 
or  minikeyboards. 

This  arran^ment  allows  the 
cell  phone  owner  to  use  the  ul¬ 
tralight  and  cheap  user-inter¬ 
im  device  as  an  ordinary  cell 
phoite.  But  it  also  lets  the  user 
employ  any  number  of  special¬ 
ized  mobile  wireless  gad^ts. 
For  exan^le.  IBM  worked  with 
Nike  Inc  to  fit  Kike’s  foot- 
mounted  pedometer  with  a 
Bluetooth  connection  to  the 
c^  bub.  Now  a  jogger  can  au¬ 
tomatically  send  time  and  dis¬ 
tance  data  to  his  trainer  — 
which  might  just  be  a  Web  ap- 
pUcatioa.  not  a  person  ~  and 
get  back  instructions  or  words 
of  encouragement. 

A  stack  of  27  bricks  may  be 
one  of  the  most  promising 
items  in  the  Gadget  Lab.  Each 
brick  in  the  prototype  storage 
system  contains  a  microproc¬ 
essor.  eight  to  12  disk  drives 
and  communications  hard¬ 
ware.  Each  brick  can  commu¬ 
nicate  with  any  other  brick  at 
lOGbit/sec.,  and  the  bricks  can 
be  stadttd  to  create  data  stor- 


IBM  s  tab  I*,  wo'bing  oo  a 
blood  rate 


age  cubes  scalable  to  peta¬ 
bytes  rOukklink  4688SI 

An  array  of  these  bricks  in 
the  —  a  cube  that’s  about 
30  inches  oo  each  side  —  can 
hold  as  much  infomiafioa  as 
the  Library  of  Congress.  It  has 
10  times  the  storage  density  of 
anything  ever  made,  says 
Robert  Sreinbi^er.  IBM’s 
manager  of  strategic  design.  In 
a  few  years,  one  storage  ad¬ 
ministrator  using  smart  bricks 
should  be  able  to  managi*  f 
petabyte  of  storage,  about  100 
times  more  than  is  typical  to¬ 
day.  according  to  IBM. 

The  technology  is  pan  of 
IBM's  autonomic  computing 
uutiative.  *”1110  idea  of  auto¬ 
nomic  is  self-healing,  or  seif¬ 
managing.”  Stetnbugler  says. 
Sman  bricks  perfonn  security 
and  recovery  operations  with¬ 
out  human  intervention.  The 
system  can  reconfigure  itself 
in  response  to  and  in  anticipa¬ 
tion  of  varying  conditions  and 
user  needs.  And  when  a  disk 
drive  foils,  users  can  ignore  it 
“You  don't  have  to  replace  a 
foiled  drive,”  says  Steinbu^er. 
“It  just  £uls  in  place.  Drives 
are  a  commodity;  that’s  why 
we  can  let  them  fofl.’  0  47125 
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V  Oil  field  services  provider  Weatherford  completes  a 
companywide  ERP  deployment  with  enterprise  search 
technology  for  user  access.  By  Tommy  Peterson 


WHW  \«ATWG?FORO  INTERNATIONAL  LTD 
Kfiin  .in  I'liifcTprisv-.vidc  l-K!’ 

in 2iKH, ih*- v't«mpvin\  'vanfvd 
nuke  sure  it  nuximum  K-neiii 
fnim  the  nussive  mifir.!iuin  pntjivt. 
Sp^vifujlk.  ilif  nil  field  pn ‘duets  jnd 
«er\  ice-*  ennip.in\  wanted  ««'  develop 
.Klvaneed  search  eapahiliiies  that  would 
expose  the  intomution  in  its  new  |.t). 
hdvvards  DneVS’orld  FRl*  software  and 
the- P.iranieiric  IeehnoK»^'>  Ct.rp.tlTCi 
W'inJehill  product  data  man.i^emeni 
<1*1  >M»  svstero  installed  with  it,  \,»ys 
Hill  Droke.  Wejthef1t>rd's  KRp  manag¬ 
er.  the  eompan)  hrounhi  in  I’roHnd. 


.Ill  enierpri.sc-  version  of  the  E  ndeea 
Navigation  f-njtine  from  FnJeca  Teeh- 
iiolojnes  Ine,  In  Cambridtje.  Mass. 

WeatherlorJ  is  a  St»  billion  corpora¬ 
tion  lh.it  ciunpetes  with  Halliburton 
Co.  and  Sehlumbetyter  I  Id.  It  has 
KTow  n  laiyielv  ihniujjh  metv'ers  and  ac 
ijuisitums.  a  pr4K\*s.s  that  left  it  with  a 
p.Mchwork  of  IT  systems  aeniss  -WO  lo- 
e.Uions  in  more  thian  l(K>  countries. 

"We  identified  r«0  dillereni  s>-siems 
that  pc'ople  were  usinjs  lo  run  the  busi¬ 
ness.  and  a  lol  of  them  didn't  talk  to 
each  i\jher.'*  viys  Proke. 

It  had  beeomc  nearly  impossible  lo 


I  iraek  orders,  assets  and  inventories. 
Many  ol  the  disparate  IT  systems  came 
from  acquired  ct>mp.inies  that  used 

I  part-numberin};  systems  that  were  dif-  i 
ferent  fromthe  one  Weatherford  used.  ! 

"We  h.id  multiple  part  numbers  for  ' 
the  same  item  and  the  same  part  num-  j 
her  for  diflerent  item.s  in  various  parts 
of  the  company."  says  l>roke.  I'hat 
me.ini  that  the  sales  staff  was  some¬ 
times  unsure  ol  the  availability  and  lo- 
c.iiiim  of  products.  And  purchasers  K*r 
Weatherford  s  manufaclurin};  opera- 
i  lions  sometimes  bought  components 
that  were  already  in  stock. 

Weatherhird  needed  to  cleanse  and 
ralumali/e  data  going  into  its  PPM  and 
I  RP  systems  and  make  the  information 
quickly  .ivailable  lo  the  company. 

WeatherlorJ  first  approached  Fnde 
j  ea  for  i<m>Is  to  help  w  ith  the  indexing 
and  classineatiitn  necessary  for  the 
,  data  lransformatii>n  and 
I  cleansing,  and  it  later  select 
ed  the  vendor  to  provide  iht 
integrated  search  function. 

A.S  the  KKP  deployment 
rolls  out  ineremenially. 
progvi  te;uns  identify  pri>d- 
ueis  that  have  had  business 
activity  within  the  past  24 
I  months,  bjch  item  is  then 
designated  with  a  part  num¬ 
ber  and  classified  based  on 
its  technical  atlribules. 

When  two  dift'ereni  num¬ 
bers  are  associated  w  ith 
parts  that  have  identical 
technical  attributes,  one  of 
the  numbers  is  eliminated. 

The  cleansed  and  rationalis'd  parts 
data,  along  with  product  structua*  data 
I  for  anything  Weatherford  manufae- 
lures.  Is  then  inserted  into  the  Wind- 
chill  system,  w  hieh  provides  the  engi¬ 
neering  staff  with  control  over  the  in¬ 
formation.  Windehill  then  publishes 
Ihe  data  to  the  ).P,  Fdwards  OneW'orlJ 
system  (renamed  FnterpriseOnc  by 
People.Soft  Ine.).  Since  both  systems 
have  limited  search  capabilities, 

ProFind  links  to  each  of  them,  e.xpirs- 
ing  the  data,  including  technical  attrib¬ 
utes  and  legacy  part  numbers,  to  users 
from  all  departments. 

Pave  (lolley.  vice  president  of  manu¬ 
facturing  and  ghibal  pnK-urement  at 
Weatherford,  says  ProFind  has  solved 
the  "inhercni  data  presentaiion"  prob¬ 
lems  that  have  arisen  from  the  FRP  de- 
phtymeni.  "Kach  business  dise'ipline  ' 
PiK*uses  on  different  attributi's  rebiing 
to  a  product,  and  with  the  Kndeca  tool, 
we  arc  able  to  solve  ihl.s  accessing  is¬ 
sue  for  the  entire  business  by  present¬ 
ing  a  combined  view."  he  says.  "This 
view  includes  detailed  classification 


information  fore.u  h  product  without 
depending  on  a  ‘sman  number'  that  is 
extremely  diffieull  to  manage  in  a 
gh’bal  environment.'' 

The  initial  l-ndeea  integration  into 
the  Windehill  and  OneWorld  systems 
in  2002  took  .ibout  four  months  to  e«>ni- 
plete,  including  the  requirements  pha.se. 
according  to  [im  Fii/gcrald.a  senior 
application  dcvclt>per  .it  FnJec.i. 

“We  were  working  w  itli  the  people 
w  ho  ow  ned  the  data  sources  in  the 
company,  defining  the  logic  between 
iWindehill  and  OneWorldl  and  then 
rolling  it  out  into  the  Weatherford  cor¬ 
porate  environment."  says  Fil/gerald. 

Fndeea  returned  to  help  solve  some 
si-rver  configuration  and  load-balancing 
problems  that  cropped  up  as  the  FRP 
project  scaled  t*ut  to  various  regions,  Hv 
this  p.ist  spring,  with  the  deployment 
progressing  but  with  more  to  be  done 
in  the  IfS..  furope  and 
the  Asi.i-Paeifie  region, 
million  items  were  already 
indexed  and  accessible 
ihrougli  the  search  sofiw.irc. 

Although  interaction  with 
the  PDM  and  FRP  systems  is 
largely  limited  to  engineers 
tool 

has  required  minimal  train¬ 
ing  and  been  adopted  readi¬ 
ly  by  nontechnical  staff, 

“1  see  a  large  pan  of  its 
utili/ation  with  employees 
that  have  niiniimil  day-to- 
day  exposure  to  (One- 
WorlJ),  such  as  manage¬ 
ment  and  sales.'"  says  Harris 
Hurst.  Weatherfi*rd's  drilling  and  well 
services  disiriet  manager  for  the  Fjsi 
,  Wnezuela  region.  "It  gives  ntamige- 
I  nient  real-time  data  Ui  review  available 
inventory  and  assets . . .  and  sales  can 
^  accurately  respond  to  a  eustomer 
equipment  reque.s!." 

On  the  engineering  side,  says  I  )roke. 

I  Weatherford  olien  gets  requests  for  oil 
'  field  equipment  that  must  be  certified 
for  specific  properties  such  as  pressure 
ratings,  temperature  ratings  and  corm- 
sion  resistance.  What  was  once  a  labo¬ 
rious  manual  search  process  has  been 
replaced  by  a  single  query  to  l•^oFind. 
which  returns  item  numbers  that  meet 
the  requirements  along  with  links  to 
eertifieation  documents  in  Weather¬ 
ford’s  inviging  sysicin. 

Hroke  s;»ys  KOI  on  the  project  is  dif¬ 
ficult  to  sort  out.  “The  return  comes 
from  all  the  pieces  you  put  in  togeth¬ 
er."  he  say.s.  "I  can  say  that  because  of 
the  search  technology  in  place,  there 
are  jobs  not  missed  and  equipment  we 
didn’t  purchase  because  we  could  see 
we  didn't  have  to."  O  46736 
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\bteXML 

[III  I  IM  I  l(l\  B 

Voice  Extended  Markup  Language  (VoiceXML)  is  a  | 

scripting  language  for  defining  dialogues  and  I 
specifying  the  exchange  of  information  between  I 
a  user  and  a  speech-enabled  application.  I 


BV  RUSSELL  KAV 

Htmj  V  AKii  I  rv  tt» 

dcscribo  layouLs  and 
panics  was  a  major  fac 
lor  in  iho  rise  of  the 
World  Wide  W'ch.  Bui  HTML 
has  a  fundamental  flaw:  It  as¬ 
sumes  a  itraphical  output  Jis- 


svstems.  and  there's  a  real 
need  to  make  those  systems 
accessible  from  any  teIoph«»ne 
without  the  benefit  «»f  a  c«>m- 
puter  client  or  v  isual  display. 

In  other  vv«>rds,  wc  want  u* 
be  able  to  talk  to  our  W'eb 
payes  and  have  them  talk  back 


- -  t’apes  diio  nave  rnem  taiK  t 

play  on  a  a>mpuier.  Five  or  10  I  to  us.  This  is  called  voice 
years  a(!o.  that  was  the  natural  i  bmwsing.  and  it  lets  users 
and  obvious  thing  to  do.  |  retrieve  Inflirmaiion  from 
But  nowadays  people  want  W'eb  by  means  of  speech  s' 

to  be  able  to  access  the - J -  thesis,  prerecorded 

W'eb  when  iluT're  away  dio  and  speech  ree 


from  their  dt*sktops.  ||ll 

using  phones,  pagers.  ||ib 

handheld  deviees  and  \T 

even  hou.sehold  appli¬ 
ances.  W'hile  mi>st  of 
these  devices  have  graphical 
displays,  at  best  those  dispbys 
are  ver>-  small,  have  limited 
bandw  idth,  aren't  well  suited 
to  normal  Web  browsing  and 


retrieve  inflirmaiion  from  the 
W'eb  by  means  of  speech  syn- 

-  thesis,  prerecorded  au- 

|l|«  -Jrtd  speech  recvtg- 

capabili- 

1111%  ty  can  be  added  to 
III  »  conventional  deski»>p 

_  hrow.sers.  and  as  mtv- 

bile  devices  become 
smaller.  vt»icc  interaeiion  can 
provide  a  more  practical  alter¬ 
native  to  tiny  keypads  and  un¬ 
dersized  displays. 

The  W'orld  W'ide  W'eb  Con- 


,  . I  *  iiv  «oriu  wiue  vvePL,on- 

generally  don  i  have  keybtwrds  sortium  is  working  to  expand 
lor  input  or  control.  In  bu.sincss.  j  access  to  the  W'eb  to  allow 


many  areas  of  customer  sup¬ 
port  have  moved  tt>  Web-based 


people  ii>  inieracr  via  kevpads, 
spoken  etimmands.  prerecord¬ 


ed  speech,  synthetic  spe-ech 
and  music.  In  I'Wg.  the  W'.^C 
sponsored  a  vtnee  browsing 
worksht>p.  The  next  year,  it 
formed  a  vv  orfcing  group 
whose  members  inehiJed 
'  AT&T  Corp..  British  Tele- 
ctimmunicaiions  PLC.  Lucent 
Technologies  Inc..  I’hitips 
;  Electronics  NV.  IBM.  Momr- 
ola  Inc,  and  Nokia  Corp.  The 
group  is  working  on  interrelat- 
I  ed  .\ML-b3sed  languages  and 
I  standards  for  developing 
speech  applications.  Calli-d  the 
W'.t<.:  speech  Interface  Frame- 
I  work,  this  platform  includes 
the  following: 

■  VoiceXML  2.0.  for  defining 
dialogues  and  specifying  the 
exchange  of  data  between  the 
user  and  a  sptvch  application. 

■  VoiceXML  2.1,  a  small  set  of 
leaiures  that  have  been  widely 
implemented  by  vendt>rs. 

•  Speech  Recognition  Grammar 
Specification,  for  spivifying  the 
structure  of  us*t  input  to  a 


Origins  of  Speech  Synthesis 


Wb  w  paid  a  kM  of  attention  over  the  years  to  speech 

recognition  -  oetbno  the  cvnputer  to  hear  and  un¬ 
derstand  whal  we  say  to  X  -  but  much  less  to  how  ihe 
wmputer  talks  back  to  us  va  text-lo-speech 
synthess.  A  number  of  propnetary  systems  h^  been 
used,  beginning  m  1961  when  BeA  L^  researchers 
procFarnrned  ai)  IBM  7094  to  smg 'Daisy*  (an  event 
mernonaieed  m  the  film  4  5^ 

TTS  got  a  big  boost  in  1976  when  Ray  Kurzweilin- 
troikiced  his  Reading  Machine. 
ed  copy  arto  speak  A.  At  the  time,  we  acknowledged 
the  signllicarK«  of  the  breakthrough  bid  rnade 
iokes  about  the  heavy ‘Swedish  chef  accent 

In  the  miervening  three  decades,  computers  have 

grown  far  more  pcAwerful  ard  we  have  devekiped 
inany  more  tools  wift  which  to  produce  better  output  » 


l^iiceXML  has  Its  roots  in  an  AT&T  BeN  Labs  prot¬ 
ect  caled  PhoneWeb.  a  phone  markup  language  and 

pWorm  for  building  both  consumer  and  cal-center 
tetephonyappfcations. 

MtXorola  used  a  senilv  approach  so  il  could  pro¬ 
vide  mobte  users  with  interactivity  and  cunent  1^^ 
mation.  Motorola  focused  on  han^-tree  em-* 

phasiTing  speech  recognition  rather  totfi  touch-tones 
tor  input  Motorola  based  its  language  on  XML  and  m 
1998  announced  VokML 

Another  XML-based  speech  language.  Sable,  mbs 
also  introduited  in  1998  and  buiR  on  the  Spoken 
Markup  Language  (199rs  STML  based  on  the  1996 
Speech  Synthesis  Markup  Ltfiguage)  and  JavB 
Speech  Markup  Language,  also  dating  ftom  1997 

-RusselKsy 


'Pi  ivh  .ipplkMimir, 

•  Speech  Synthesis  Markup 
Language,  for  spi-,  ifv  mg  mst 
how  sv  nthl■^iz^,  J  sptAvli  is 
rviuK  rvvt  to  llu  usvr  -  v  g . 
Ihv  tv  pi'  Voice  uved  and 
'i  I'cirk  prontinoiaiions. 

■  Semantic  Interpretation  tor 
Speech  Recognition,  whu  h  dc- 

tin*-s  links  Kiui-cn  uramm.ir 
rules .md  .ipplic.iiion  s^-rnan- 
rics.  Mt  ihat  spoken  v.-iriaiions 
of  the  sume  clcincni.  such  .is 
i.okc  and  "<  .uo.i-L.id.i."  .irc 
trvaiod  as  equivalent. 

■  eeXML.  for  specifying  c.!ll 
control  functions. 

Vvik'c.M.Ml  is  the  m«»st  V  isi 
bic  part  v»f  this  framework, 
while  the  tithcr  elements  are 
O'Lscntialiy  infrastructure. 
V'oiceXMl  Icvvragc-s  the  oriier 
specifications  for  creating  dia¬ 
logue's  that  feature  synthc- 
si/cd  spe-ech.  digitized  audio, 
reci^nitinn  of  spoken  and 
HT.MFkcv  tie.,  touch-tone) 
input,  rtvording  of  sp«>ken  in¬ 
put  and  telephom.  Voice.VMl 
hides  many  of  the  complexi- 
.•  tit's  of  telephom  platAirniv 
VoiceXML  has  features  to 
eontrol  audio  «>utpuf  and  input, 
presentation  lopie.  fltnv.  event 
handling  and  basic  telephony 
,  eonmviions.  Applications 
built  with  VoiceXML  can  in¬ 
clude  prercctirded  audio  ma¬ 
terial.  just  as  H  I  ML  can  ineor- 
pivraie  existing  im.iges  in  a 
gr.tphieal  page 
HTML  i.s  orieniv*d  toward 
sc-reen  lavx>uts  that  present 
multiple  objes'ts  at  the  same 
lime.  Speech.  h«mever.  is  much 
moK'  lini'ar  —  you  can  hear 
only  one  thing  at  a  lime  -  and 
S4i  VoiceXMl.  h.is  to  cxiniml  the 
interaction  beiwxvn  the  user 
and  the  application.  In  jlm»>si 
all  cases,  the  application  and 
user  take  turns  speaking:  The 
.ipplieatuvn  prompts  the  user, 
and  then  the  user  resp»)nds. 

I.jnguages  like  VoieeX.MI 
and  its  predecessors  have  to 
suppon  iwx>  kinds  of  m,irkup: 
one  that  describes  the  text  ac- 
I  cording  to  its  structure  or  con¬ 
tent.  and  another  that  contnds 
aspects  of  how  speech  is  t<'  K* 
produced,  such  as  voice  pitch 
and  emphasis.  O  47675 
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View 

Oil  field  services  provider  Weatherford  completes  a 
|2|Ti|m  compartywide  ERP  deployment  with  enterprise  search 
BlUil  technology  for  user  access.  By  Tommy  Petenmn 


mo  iMimisaD  iiTBwnKauL  im 

began  deploying  an  enterphsewide  ERP 
system  in  200L  the  compai^  wanted  to 
make  sure  it  gained  maximum  benefit 
from  the  massive  migration  protect 
Speciftcally,  the  oil  field  fHt>ducts  and 
services  company  wanted  to  develop 
advanced  search  capabilities  that  would 
expose  the  information  in  its  new  jJ). 
Edwards  OneWorld  ERP  software  and 
the  Parametric  Technology  Cotp.  (PTC) 
WindchtlJ  product  data  management 
(PDM)  system  installed  with  it  says 
Bill  Droke,  Weatherford's  ERP  manag* 
er.  So  the  company  brought  in  ProFi^ 


an  enterprise  version  of  the  Endeca 
Navigation  Engine  from  Endeca  Tech- 
nolt^ies  liK.  in  Cambridge.  Mass. 

Weatherford  is  a  $6  billion  corpora¬ 
tion  that  competes  with  Hallibunon 
Co.  and  SchlunU>erger  Ltd.  It  has 
grown  largely  through  mergers  ai>d  ac¬ 
quisitions,  a  process  that  left  it  with  a 
patchwork  of  IT  systems  across  440  lo¬ 
cations  in  more  than  100  countries. 

“We  identified  60  different  systems 
that  people  were  using  to  run  the  busi¬ 
ness,  and  a  lot  of  them  didn't  talk  to 
each  other.”  says  Droke. 

It  had  become  nearly  impossible  to 


Access  to  Weatherford  Data;  Search  Is  Central 


s 


C± _ 


I  track  orders,  assets  and  inventories.  i  information  for  each  product  without 
Many  of  the  disparate  IT  systems  came  depending  on  a  ‘smart  number’  that  is 

fmm  arnnirpH  rnmnaniAc  _ i.  . _ . 


from  acquired  companies  that  used 
part-numbering  systems  that  were  dif¬ 
ferent  from  the  one  Weatherford  used. 

‘'We  had  multiple  part  numbers  for 
the  same  item  and  the  same  |»rt  num¬ 
ber  for  different  items  in  various  parts 
of  the  company.”  says  Droke.  That 
meant  that  the  sales  staff  was  some¬ 
times  unsure  of  the  availability  and  lo¬ 
cation  of  products.  And  purchasers  for 
Weatherford's  manufacturing  opera- 
tioos  sometimes  bought  compNsnents 
that  were  already  in  stock. 

Weatherford  needed  to  cleanse  and 
rationalize  data  going  into  its  POM  and 


extremely  difficult  to  manage  in  a 
global  environment.’' 

The  initial  Endeca  integration  into 
the  Windchill  and  OneWorld  systems 
in  2002  took  about  four  months  to  com¬ 
plete,  inchidii^  the  requirements  phase, 
according  to  Jim  Fitzgerald,  a  senior 
application  develt^r  at  Endeca. 

“We  were  working  with  the  people 
who  owned  the  data  sources  in  the 
company,  defining  the  logic  between 
[Windchill  and  OneWorld]  and  then 
rolling  it  out  into  the  Weatherford  cor¬ 
porate  environment."  says  Fitzgerald. 

Endeca  returned  to  help  solve  some 


— A  Ajiwt  <uiu  cjiueca  renunea  to  neip  solve  some 
ERP  systems  and  make  the  information  server  configuration  and  load-balancing 

miii-lrlv  avaSI^Klp  fr,  »Ka  _ _ .> _ _ _  .  .  ■  _ _ 


quickly  availubtc  Co  the  corapany.  problems  chat  cropped  up  as  the  ERP 

Weatherford  first  approached  Endc-  project  scaled  out  to  various  regioics.  By 
ca  for  tools  to  help  with  the  indexing  this  past  spring,  with  the  deployment 
and  classification  necessary  for  the  progressing  but  with  more  to  be  done 
data  transformation  and  mTSVniWPm  in  ihu  U.S.  Europe  and 
cleansing,  and  it  later  select-  milrnrUUM  the  Asia-Pacific  region.  3J 
ed  the  vendor  to  provide  the  COIII>*l(y:  tlMteiM  million  items  were  already 

integrated  search  fiinctioa  _ indexed  and  accessible 

As  the  ERP  deployment  HE«OQUARTtHS:Hooi»«i  through  the  search  software, 
rolls  out  mcreircnt^y.  gusmess  PROBIEM  '  Although  interaction  with 
project  teams  Identify  prod-  iyw*«de»tmduserjc  the  PDM  and  ERP  systems  is 
ucts  that  have  had  business  cassIolnfcniialionJrofflacor.  laigely  limited  to  engineers 
activity  within  the  past  24  jMoKowileilsfciitnmtola  and  IT  staff  the  Endeca  tool 
months.  Each  item  is  then  has  required  minimal  train, 

designated  with  a  parr  num-  tag  and  been  adopted  rcadi- 

ber  and  classified  based  on  TICHIfOLOCY  USED;  |y  by  nontechnical  staff 
its  technical  attributes.  “I  see  a  large  part  of  its 

When  two  different  num-  „ — - - - -  utilization  with  employees 

bets  are  associated  with  B£»EFTTS;M«lel«»ulo  that  have  minimal  day-ro- 
parts  that  have  identical  Mro^l.dldeiwt-  day  exposure  to  [One- 
tKhnicd  attributes,  one  of  World],  such  as  manage- 

the  numbers  is  eluninated.  - — - -  nient  and  sales."  says  Harris 

The  cleans^  and  rationalized  pam  i  Hurst.  Weatherford’s  drilling  and  well 
data,  along  with  product  structure  data  services  district  manager  for  the  Fa«« 

fiw  anvthino  u/oath^pfrkivl  _ i _ : _ mt.  • _ 


for  anything  Weatherford  manufac¬ 
tures.  is  then  inserted  into  the  Wind- 
chill  system,  which  provides  the  engi¬ 
neering  staff  with  control  over  the  in¬ 
formation.  Windchill  then  publishes 
the  data  to  the  ]J>.  Edwards  OneWorld 
system  (renamed  EnterpriseOne  by 
PeopleSoft  Inc.).  Since  both  systems 
have  limited  search  capabUiti^ 
ProFind  links  to  each  of  them,  expos¬ 
ing  the  data,  includii^  technical  attrib¬ 
utes  and  legacy  part  numbers,  to  users 
from  all  departments. 

Dave  CoUey.  vice  president  of  manu- 
focturing  and  global  procurement  at 
Weatherford,  says  ProFind  has  solved 
the  “inherent  data  presentation"  prob¬ 
lems  that  have  arisen  from  the  de¬ 
ployment.  “Each  business  discipline 
focuses  on  different  attributes  relating 
to  a  product,  and  with  the  Endeca  tool 
we  are  able  to  solve  this  accessing  is¬ 
sue  for  the  entire  business  by  present¬ 
ing  a  combined  view,"  be  says.  "This 
view  includes  detailed  classification 


Venezuela  region.  "It  gives  manage¬ 
ment  real-time  data  to  review  available 
inventory  and  assets . . .  and  sales  can 
accurately  respond  to  a  customer 
equipment  request" 

On  the  et^ineering  side,  says  Droke. 
Weatherford  often  gets  requests  for  oil 
field  equipment  that  must  be  certified 
for  specific  properties  such  as  pressure 
ratings,  temperature  ratings  and  corro¬ 
sion  resistance.  What  was  once  a  labo¬ 
rious  manual  search  process  has  been 
replaced  by  a  single  query  to  ProFind, 
u^ich  returns  hem  numbers  that  meet 
the  requirements  along  with  Itnify  to 
certification  documents  in  Weather¬ 
ford’s  imping  system. 

Droke  says  ROI  on  the  project  is  dif¬ 
ficult  to  sort  out.  The  return  comes 
from  ah  the  pieces  you  put  in  tc^eth- 
cr,"  he  says.  "1  can  say  that  because  of 
the  search  technology  in  place,  there 
are  jobs  not  missed  and  equipment  we 
didn't  purchase  because  we  could  see 
we  didn’t  have  to."  O  46736 
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\bteXML 

[DEFINITION  H 

Voto  fended  Markup  Language  (VoiceXML)  is  a  | 

scripting  language  for  defining  dialogues  and  I 

specifying  the  exchange  of  information  between  I 
a  user  and  a  speech-enabled  application.  I 


■V  RUSSELL  KAV  Systems,  and  there’s  a  real 

B  fl  *  ABILITY  to  need  to  make  those  systems 

describe  layouts  and  accessible  from  any  telephone 
^  pages  was  a  major  fac-  without  the  benefit  of  a  com- 
I  tor  in  the  rise  of  the  puter  client  or  visual  display. 

Wide  Web.  But  HTML  In  other  words,  we  want  to 

mdamentalflawiltas-  be  able  to  talk  to  our  Web 
a  graphical  output  dis-  pages  and  have  them  talk  back 


World  Wide  Web.  But  HTML 
has  a  fimdamental  flaw:  It  as¬ 
sumes  a  graphical  output  dis- 


w  r - — r— — —  iMvc  uiein  laiK  oacK 

play  on  a  computer.  Five  or  10  to  us.  This  is  caUed  voice 
years  ago,  that  was  the  natural  browsing,  and  it  lets  users 
and  obvious  thing  to  da  retrieve  information  from  the 

But  nowadays  people  want  Webbymeansofspeechsyn- 

to  ^  able  to  access  the  - 1 -  thesis,  prerecorded  au- 

JfebM*eo  they're  away  dio  and  speech  recog- 

from  their  desktops,  ||ll|nr «  ration.  Voice  capabUi- 
using  phones,  pagers,  2f||||yB  ty  can  be  added  to 
handheld  devices  and  \|lll|f  ^  conventional  desktop 
even  household  ^>pU-  browsers,  and  as  mo- 

ances.Whaemostof  \  bUe  devices  become 

these  devices  have  graphical  smaller,  voice  interaction  can 
displays,  at  best  those  displays  provide  a  more  practical  alter- 
are  very  smalL  have  limited  native  to  tiny  keypads  and  un¬ 
bandwidth,  aren't  well  suited  dersized  displays, 
to  normal  Web  browsing  and  The  World  Wide  Web  Con- 
gwerally  doni  have  keyboards  sortium  is  working  to  expand 
for  iiqnit  or  controL  In  business,  access  to  the  Web  to  allow 
many  areas  of  customer  sup-  people  to  interact  via  keypads, 
port  have  moved  to  Web-based  ^ken  commands,  prerecord¬ 


ed  speech,  synthetic  speech 
and  music.  In  1998,  the  W3C 
sponsored  a  voice  browsing 
workshop.  The  next  year,  it 
formed  a  working  group 
whose  members  included 
AT&T  Corp.,  British  Tele¬ 
communications  PLC,  Lucent 
Technologies  Inc.,  Kiilips 
Electronics  NV.  IBM,  Motor¬ 
ola  Inc  and  Nokia  Coip.  The 
group  is  working  on  interrelat- 
I  ed  XML-based  languages  and 
standards  for  develop^ 
speech  applications.  Called  the 
W3C  Spe^  Interfoce  Frame¬ 
work.  this  platform  includes 
the  following: 

■  \WoaXML  2.0,  for  defining 
dialogues  and  specifyii^  the 
exchange  of  data  between  the 
user  and  a  speech  application. 

■  VoioaXML  2.1.  a  small  set  of 
features  that  have  been  widely 
implemented  by  vendors. 


SpaciKulion,  for  specifying  the 
structure  of  user  input  to  a 


speech  application. 

■  Speech  SynttHssUwki^ 
LafQuage.  for  specifying  just 
how  synthesiz^  speech  is 
rendered  to  the  user  —  e.g., 
the  type  of  voice  used  and 
specific  pronunciations. 

■  Semantic  krterpreWien  for 
Speech  Reco^iMon,  which  de¬ 
fines  links  between  grammar 
rules  and  application  seman¬ 
tics.  so  that  ^Mken  variations 
of  the  same  element,  such  as 
“Coke"  and  “Coca-Cola.*  are 
treated^  equivalent. 

■  eeXML  for  specifying  call 
control  functions. 

VoieeXML  is  the  most  visi¬ 
ble  pan  of  this  framework, 
while  the  ocher  elements  are 
essentially  infrastructure. 
VoieeXML  leverages  the  other 
specifications  for  creating  dia¬ 
logues  that  feature  synthe¬ 
sized  speech,  digitized  audio, 
recc^nition  of  spoken  and 
DTMF  key  (ic,  touch-tone) 
input,  recordij^  of  spokra  in¬ 
put  and  telephony.  VbieeXML 
hides  many  of  the  complezi- 
:  lies  of  telephony  platforms. 

VoieeXML  has  features  to 
control  audio  output  and  input, 
presentation  logic,  flow,  event 
handlii^  and  basic  telephony 
connections.  Applications 
built  with  VoieeXML  can  in¬ 
clude  prerecorded  audio  ma¬ 
terial,  just  as  HTML  can  incor¬ 
porate  existing  im^s  in  a 
graphical  page. 

HTML  is  oriented  toward 
screen  layouts  that  present 
multiple  objects  at  the  same 
time.  Speech,  however,  is  much 
more  linear  —  you  fag  hear 
only  one  thing  at  a  time  —  and 
so  VoieeXML  has  to  control  the 
interaction  between  the  user 
and  the  application.  In  almost 
all  cases,  application  and 
user  take  turns  speaking:  The 
application  prompts  the  user, 
and  then  the  user  responds. 

Languages  like  VoieeXML 
and  its  pr^ecessors  have  to 
support  two  idnds  of  markup: 
one  that  describes  the  text  ac¬ 
cording  to  Its  stnicture  or  con¬ 
tent,  and  another  that  controls 
aspects  of  how  speech  is  to  be 
produced,  such  as  voice  pitch 
and  emphasis.  Cl  47V7S 
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Spyware  Gets 
Top  Billing 


An  infection  on  the  CEO’s  home  system 
leads  to  a  cal  for  new  preventive  measures. 
By  Mathias  Thurman 


This  week.  I  was  sud* 
denly  called  into  my 
boss’s  office  for  an  ur¬ 
gent  meeting.  From  the 
look  on  his  face.  I  expected  to 
bear  that  we  had  a  serious  se¬ 
curity  incident  under  way. 
Instead,  be  asked  what  our 
department  was  doing  about 
spyware. 

Apparently,  a  spy- 
ware  program  had 
infected  our  CEO's 
home  computer,  so 
he  asked  the  CIO  if 
we  had  a  plan  to  deal 
with  adware  and 
spyware.  The  CIO 
marched  down  to  a  vke  presi¬ 
dent’s  office  to  ask  the  same 
question.  That  VP  then  asked 
a  director,  who  asked  me 
whether  we  have  any  infra¬ 
structure  to  deal  with  an  in* 
crease  in  spyware  activity 
within  our  company.  The 
short  answer  is  that  we  don’t 
have  any.  So  now  the  question 
IS.  Why  don’t  we  have  that  in¬ 
frastructure  in  place? 

It's  funny  how  these  sorts  of 
inquiries  roll  downhill  At  a 
previous  job,  I  once  had  to 
bring  in  several  vendors  after 
the  CEO  read  an  article  about 
public-key  infrastructure.  We 
explained  to  him  that  PKI  was 
still  in  its  infancy  and  would 
cost  several  million  dollars  to 
implement.  The  project  died 
quickly  after  that. 

Typically,  adware  is  soft¬ 
ware  that  installs  a  ser^c  or 
program  that  spawns  pop-ups 
or  launches  a  Web  browser 
that  points  to  a  specific  Web 
site’s  marketing  message 
(QuickUnk  45702].  Adware 
also  tracks  an  individual's 
surfing  habits  and  sends  that 


information  to  a  third  party 
for  analysis  and  use  in  market¬ 
ing  campaigns.  Spyware  is 
software  that  monitors  a  user’s 
activity  without  his  knowl¬ 
edge.  In  addition  to  Web  surf¬ 
ing.  it  may  also  monitor  things 
such  as  keystrokes. 

Spyware  and  adware  are 
two  sides  of  the  same  coin. 

Both  enter  a  com¬ 
puter  system  when  a 
user  opens  an  at¬ 
tachment  or  clicks 
on  a  Web  page  that 
allows  a  program  to 
be  executed  on  the 
system  without  his 
knowledge.  Both  make  similar 
modifications  to  a  5>*stcm. 
such  as  changing  Windows 
registry  settings,  adding  ser¬ 
vices  and  installing  and  exe¬ 
cuting  applications. 

When  I  recently  experi¬ 
enced  pop-up  ads  on  my  home 
system,  for  example.  I  was 
amazed  at  the  number  of  mod¬ 
ifications  that  had  been  made 
to  (L I  found  several  applica¬ 
tions  I  didn't  recognize  in  the 
r^istry  key  responsible  for 
starting  applications  at  bo<M 
time.  All  of  them  turned  out  to 
be  adware.  There  are  many 
fteeware  and  commercial 
products  I  can  use  at  home  to 


Adware  and 
spyware  are  often 
difficult  to  detect 
until  they  affect 
peifonnance. 


identify  and  remove  these 
applications.  For  example.  I 
use  Patrick  Kolia’s  Spyboi  — 
Search  &  Destroy.  The  popular 
program  is  available  for  free  at 
wwwsafer-networkingjtrg  and 
is  supported  by  user  dona¬ 
tions.  But  neither  this  nor  the 
other  tools  I’ve  come  across 
are  appropriate  for  enterprise 
use.  Most  lack  enterprise-class 
support,  pricing  and  central¬ 
ized  management  features. 

Furthermore,  while  the  CEO 
and  I  had  both  experienced 
spyware  problems  at  home.  I 
wasn't  aware  of  an  issue  on 
company  machines.  I  called 
our  help  desk  manager,  who 
concurred  that  we  haven’t  had 
many  internal  problems  with 
spyware  or  adware.  But  that 
doesn't  mean  that  our  desk¬ 
tops  are  free  of  this  code,  and 
now  I  need  to  know  for  sure. 

I  The  dilemma  is  that  adware 
and  spyware  are  often  difficult 
to  detect  until  they  aflcct  per¬ 
formance.  flood  the  user  with 
pop-up  ads  or  make  the  sys¬ 
tem  unstable. 

Djfficult  to  Block 

^  for  blockii^  spyware  com¬ 
munications,  we  don’t  restrict 
outbound  TCP/IP  traffic.  Ex¬ 
cept  for  certain  unauthorized 
music-sharing  applications 
such  as  Kazaa.  we  allow  al¬ 
most  all  network  traffic  origi¬ 
nating  from  desktops  to  leave 
the  company.  Many  spyware 
and  adware  programs  send 
data  out.  or  “call  home,"  by 
way  of  HTTP  Pon  80. 

Practically  speaking,  we 
can’t  block  ^  those  destina¬ 
tion  addresses  because  they 
change  ftequemly.  Although 
we  have  an  intrusion-detection 
system  (IDS),  spyware  and  ad¬ 
ware  are  so  dynamic  that  it's 
difficult  to  use  signatures  to 
identify  this  traffic. 

The  best  way  to  deal  with 
this  type  of  problem  is  on  the 
desktop.  Several  programs  can 
identify  the  common  registry 
entries,  services  and  applica¬ 
tions  that  might  be  mc^ified 
or  installed  by  adware  and 
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spyware.  The  problem  is  that 
we  have  more  than  10.000 
desktops  in  dozens  of  coun¬ 
tries.  so  management  of  one 
desktop  at  a  time  is  unrealistic. 

Another  option  is  to  inwall 
a  host-based  IDS.  which  typi¬ 
cally  includes  a  period  of  time 
in  which  you  record  the  norr 
mal  activity  of  an  uninfected 
system  and  then  mark  that  as 
the  baseline.  Then,  when  the 
software  detects  somethii^ 
outside  of  normal  operations 
(for  example,  starting  a  new 
service  or  writing  to  certain 
parts  of  the  registry),  the  IDS 
generates  an  alert.  But  deploy¬ 
ing  this  software  requires  ex¬ 
tensive  resources.  And  if  it’s 
not  deployed  properly,  a  host- 
based  IDS  will  generate  false 
positives,  preventing  users 
from  conducting  legitimate 
business  activities  or  sending 
users  excessive  pop-up  warn¬ 
ing  messages. 

In  addition,  a  host-based  IDS 
is  yet  another  application  that 
must  be  managed  and  main- 
tained.  Add  it  to  the  plethora  of 
applications  you  already  have 
—  antivirus,  desktop  firewall, 
patch  management,  disk  en¬ 
cryption  and  so  on  —  and 
you’ve  created  a  very  complex 
desktop  environment  with 
multiple  centralized  manage¬ 
ment  consoles  to  maintain. 

Don’t  get  me  wrong.  I’d  love 
to  have  everything  I  could 
install  on  each  employee’s 
desktop.  But  technology  con¬ 
sumes  both  money  and  staff 
resources.  There's  a  place  for 
a  host-based  IDS,  but  mostly 
for  important  servers,  not  for 
10.000  desktops.  But  I  have  to 
start  calling  on  vendors  that 
claim  to  have  centrally  man¬ 
ageable  enterprise-class  tools 
for  delecting  and  removing 
spyware  and  adware.  The  first 
tools  are  just  coming  out.  but 
I’d  be  surprised  if  there  were 
any  mature,  scalable  systems 
at  this  early  stage.  I 
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CIOs  Must 
Manage  What’s  Left 


"  F  ALL  YOUR  NEIGHBORS  lose  their  jobs,  you 
call  that  an  economic  recession.  If  you  lose  your 
job,  you  call  it  a  depression.  The  same  reasoning 
seems  to  apply  to  the  enormous  attention  that 
.  computer  people  are  suddenly  giving  to  out- 


sourcing.  The  fact  is  that 
CFOs  have  altvays  pushed 
for  outsourcing  everything 
associated  with  the  cost  of 
goods  sold.  What  is  differ¬ 
ent  now  is  that  CFOs  have 
shifted  their  target  and 
placed  IT  on  the  top  of 
their  list  of  functions  that 
should  be  subjected  to 
competitive  pricing. 

Outsourcing  is  widely 
practiced  with  r^ard  to 
factory  labor  and  materials 
supplies,  without  distinc¬ 
tion  between  domestic  or 
foreign  sources.  It  is  labeled  as  "com¬ 
petitive  purchasing."  “best  value  pro¬ 
curement"  or  “commercial  off-the-shelf 
acquisitions"  (in  government).  After  50 
years  of  abnonnal  growth  in  the  num¬ 
ber  of  IT  and  after  a  period  of 

above-average  increases  in  compensa¬ 
tion  for  IT  people,  CFOs  are  seating 
lower  overhead  expenses.  That's  where 
IT  is  roost  vulnerable,  because  most  of 
IT  is  an  overhead  burden. 

A  squeeze  on  profits  necessitates 
cost-cutting.  When  it  comes  to  picking 
where  to  cut,  why  not  select  what  has 
escaped  pruning  for  at  least  20  years? 


Slicing  the  Corporate  Pie 
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The  CFOs  —  still  nursing 
a  grudge  for  having  lost 
possession  of  IT  —  are 
happy  to  oblige  (CbtickLink 
41348]. 

The  CFOs  understand 
that  corporations  already 
purchase  (e.g.,  outsource) 
most  of  their  costs,  as 
shown  in  the  pie  chart 
below  of  median  values 
for  over  2,000  U.S.  corpo¬ 
rations. 

Given  the  high  percent¬ 
age  already  devoted  to  pur¬ 
chasing  to  gain  a  competi¬ 
tive  cost  advantage,  the  current  out¬ 
sourcing  initiatives  shouldn’t  come  as 
a  surprise.  Offshore  procurement 
would  be  a  logical  choice,  since  im¬ 
ports  already  account  for  14%  of  the 
gross  national  product  of  the  US. 

I  have  calculated  “outsourcing  ra¬ 
tios"  (e.g.,  the  ratio  of  purchases  to 
revenues)  for  over  l.OfK)  global  compa¬ 
nies.  (For  a  chart  showing  a  diverse  se¬ 
lection  of  firms,  sec  (^ickUnk  a4710.) 

As  a  rule.  I  find  that  diversified 
multinational  corporations  —  already 
ei^aged  in  global  commerce  —  show 
higher  outsourcing  ratios  than  smaller 
firms.  Therefore,  one  can  expect  an 
acceleration  in  the  awarding  of  out¬ 
sourcing  contracts  in  $1(X)  million 
increments.  The  primary  purpose 
of  such  contracts  is  to  take  over  the 
job  of  migrating  the  obsolete  client/ 
server  architectures  to  network-based 
data-centric  designs.  As  I  previously 
noted  in  Computerworid  [(^ckLink 
40856],  such  outsourcing  would  p?ss 
on  to  vendors  the  technology  risks 
for  fixing  the  creaky  and  unaffordable 


computing  infrastructures. 

Sensational  headlines  notwithstand¬ 
ing,  the  CFOs  folly  comprehend  that 
IT  does  matter!  IT  median  costs  now 
equal  median  corporate  profits.  They 
are  not  a  mere  3%  of  revenues  but  13% 
of  overhead  (eg.,  transaction  costs), 
which  is  nowadays  the  principal  cause 
of  eroding  corporate  profits. 

In  about  a  quarter  of  companies,  IT 
constitutes  the  largest  cost  center  and 
therefore  will  get  intense  attention  in 
budget  reviews.  In  this  environment, 
asking  for  massive  reductions  in  IT 
spending  will  always  be  a  politically 
popular  move  —  except  that  IT  inno¬ 
vation  has  now  become  a  strat^c 
necessity.  \^ithout  injections  of  new 
sums  of  money,  we  won’t  be  able  to 
free  companies  from  50  years  of  em¬ 
phasis  on  intracompany  information 
processit^  and  start  moving  toward  a 
future  that  mandates  global  Interoper¬ 
ability  with  vendors  and  customers. 

Whether  refocusing  your  firm’s  IT 
infrastructure  results  in  a  bleeding 
amputation  or  in  simple  outpatient 
surgery  depends  on  your  information 
architecture.  If  you  have  built  up  your 
infrastructures  separately  for  e^  or¬ 
ganization.  inmt^  in  isokued  client/ 
server  fonns,  depend  on  desktop-cen¬ 
tric  applications  for  too  many  applica¬ 
tions  or  do  not  have  a  company  wide 
data  dictionary,  you  will  need  to  reme¬ 
dy  your  conditions  prior  to  passing  on 
your  IT  infrastructure  to  the  out¬ 
sourcers  with  the  most  attractive  bids. 

The  CFO  will  always  show  reasons 
for  outsourcing  to  reduce  costs.  'The 
job  of  the  CIO  after  outsourcing  more 
than  three  quarters  of  IT  spending  is 
to  manage  risks  and  preserve  those 
parts  of  the  IT  organization  that  are 
the  essential  core  competency  for 
safeguardii^  future  prosperity. 
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Read  it  before  your  boss  does 


Powerful.”i 


— The  Economist 

“Carr  lays  out  the  simple  truths  of  the 
economics  of  information  technology  in 
a  lucid  way.” 

—  The  New  York  Times 

“Will  give  executives  and  managers  a  way 
to  sift  through  the  next  wave  of  tech  hype.' 
— BusinessWeek 

“Important  and  insightful... A  must-read  for 
both  CIOs  and  CEOs.” 

— Tony  Comper,  CEO,  bmo  Rnandai 

“Carr’s  expanded  arguments  make  a  good 
case  for  managing  IT  to  the  goals  he 
describes.  And  even  if  you  don’t  agree 
with  him,  your  boss  very  well  might.” 

— CIO  Inslgtrt 

“IT  thinking  rarely  gets  a  contribution  of 
this  caliber.  Read  it.” 

— eWeek 
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Shareware  Grows  Up 

CIOs  Scott  R.  Lien  (left)  and  Andrew 
Black  got  tired  of  the  high  cost  of 
software  development  and  thought 
there  had  to  be  a  better  way.  So  they 
developed  a  software  co-op  to  share 
intellectual  property.  Page  35 


Think  Tank 

The  IT  and  facilities  management 
departments  are  headed  for  a 
merger  in  the  next  decade:  and  a 
new  book  on  the  future  of  work 
says  it  looks  a  lot  like  open-source 
software  development.  Page  36 


OPINION 

The  Wrong  Stuff 

Gearing  up  to  make  some  great 
IT  hires?  l^ul  Glen  says  many 
IT  shops  will  miss  out  on  the 
best  people  because  they  don't 
know  what  to  look  for.  38 


As  the  flow  of  mandates  continues, 
CIOs  who  can  integrate  corporate 
compliance  efforts  will  be  ahead  of 
the  pack  by  steve  ulfelder 


o  YOU  BREAK  OUT  in  a  cold  sweat  whenever 

(you  hear  the  phrase  Section  404?  When  a  co- 
worker  mentions  HIPAA,  do  you  race  xo 

your  office  to  figure  out  the  earliest  possible 
date  you  can  retire? 

If  so.  we’ve  got  some  bad  news:  The  Sarbanes-Oxley  Act. 
the  Health  Insurance  Portability  and  Accountability  Act, 
ft*®  USA  Patriot  Act  and  other  regulations  of  their  ilk  are 
just  the  beginning.  For  the  foreseeable  future,  you  can  ex¬ 
pect  a  steady  flow  of  industry,  state,  federal  and  interna¬ 
tional  mandates  that  codify  the  way  businesses  gather, 
store,  manage  and  report  information. 

Naturally.  IT  will  play  a  key  role  in  compliance.  But  vrill 
that  role  be  one  of  leadership  or  mere  execution?  Can  IT 
create  systems  and  processes  that  allow  the  corporation  to 
easily  comply  with  any  new  regulation  it  encounters,  re¬ 
gardless  of  that  regulation’s  specifics  and  origin?  Tltese  are 
key  questions,  and  millions  of  dollars  ride  on  the  answers. 

Some  doubt  such  preparedness  is  feasible.  Tredicting 
the  next  big  regulation  is  like  trying  to  predict  the  weath¬ 
er.”  says  Thomas  Watson,  information  security  project  lead 
at  West  Haven,  CUmn.-based  Bayer  I%armaceuticaL  ‘Who 
knows  T^t  s  going  to  come  down  nextr  Others,  however, 
believe  it’s  both  possible  and  necessary  to  create  a  compli¬ 
ance  management  infrastructure  and  environment  that 
make  future  r^ulations  less  onerous  to  follow.  Here’s  a 
look  at  the  benefits  of  compliance  management,  the  hur¬ 
dles  and  the  steps  companies  can  take  to  get  started. 


^^BUILDINGA  ■■ 

CDpnpliance 

Framework 


Keys  to 
Compliance 

AIIM  Intemationai  recently  a 
book  on  fT  compliance  that  attempts  to 
lay  out  a  step-by-step  program  tor  busi¬ 
nesses.  Information  Hation:  Seven  Keys 
to  kiformatHyi  Management  Compliance. 
by  Randolph  Kahn  and  Barclay  T  Blair, 

1$  tilled  with  checklists,  examples  and 
keyouesoonsihatlTrmistask.  Here  are 
the  seven  keys  as  outlined  in  the  book 


i 


Good  policies  and  procedures 

Executive-level  program 
responsibility 

Proper  delegation  of  pro¬ 
gram  roles  and  components 


Program  communication 
and  training 
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Audrtirig  and  monitonng  to 
measure  program  ompliance 


a 


Effective  and  consistent 
program  enforcement 

Continuous  program 
mprovement 


WWW  aiim.org 


Making  Lemonade 
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■''IM.  Mit  s  .■mf'-inif,  voiiJutftJ 
'MK  r  'i;r\  i.  \  iii  Iul\  .?imi»  m  whitfi  it 
f"ii'  j  i-'* '  III'  ,jt  Ijruf  n'mpanit'N. 

H  ilf  '  ij  tiii  ir  "'inj-li.iiKt  i-iists  \vMuld 

r. ;););'  ff  •'!'  '1  ir.illi.-n  1"  >5  million; 

Mill,.  . '  'M,  i:*  s  r,  ,p;  ..  xi(i  million. 

Ii.»  %.'W'  I*-  th.n  tilt  to>t  ot 

s. irh.itK'-*  ‘-..v'  .  riij  •  .tl..ii^: 

•.\ithth.«i  UILX  ^  U'cJ  IS. I 

hj'i' lof  nil  t*ii. .  -viI.iHiiiis 

tordmi: »"  Si, III, r*jsfd 
ti.irtncr  Int .  pul'>.  ■  .  -  th.it 

ij'ipt  j  v"inpri  lii  ii'iM  :  '".x  I 

iii.ituuimtnt  jr'hnvxton  ,  •iid 
'•f  -  loss  jxT  yc.ir  ih.in  t:n'*i  ti.ji  d,.n  i 


In  in.in\  oru.miAuions. 
tht  I'lfM  it.ution  to  .1  iu-« 
rtj’ul.uum  Is  to  x.riMit  .i 
lictr  tt.ini'  ■■  to  .iddrtss 
tht  issut 

.m.il\si  Idiit  1  tskti.i.  "Itui 
it  you'vi 

tor  thrtc  >*r  niort  rtf-'iil.i 
tions.  tht  rtdund.iiity 
m.ikts  no  sinsf," 

A  toinpli.ititt  slr.itt};\ 

•-.111  .iis,>  proxidi-  .1  tonipttiiivt  tdpt.  tl 
vour  husiiitss  t.m  rtspx>nd  quitkiy  to 
nt«  rtpul.iiioiis  uhilt  otlu'rs  in  your 
industr\  rtni.iin  stutk  in  liutr-ttiim 
modt.  lilt  .id\  .intoiit  pots  to 

Spearheading 

\\  hilt  it's  toueh  tl*  .imitip.iit  r'liiiirc 

rtL'iiIjtions.  It's  .1  Mirc  K-t  iliut  dtit.)- 

p.ithtnnt  will  K'  -1  tritit.ilwomponi  iii 
oi  compii.iiitt  7  fun's  why  it  nukts 
svTisi'  tor  i.lOs  to  li'.id  lilt  ch.irtt 

kV  litn  busint'ss  K\idtrs  look  .it  toin- 
pli.intt.  tht\  look  .It  iht  Itltir  ot'thi 
l.*w.  noi  rtpt.iMhiliij"  s;i\s  Iuhn  ll.iptr- 
i>..in  .iriiilysi  .n  Hosion-h;istJ  .\Mk  K.  - 
st.irv-fi  liK.  1 1  t.iii  s;i\.-Htrt's  how  wi 
'  jn  .lutoniJit  s"  It’s  n»'t  suth  .i  p.iin 
nt\i  iimt-  ■  Itthiiolopistx  t.in  lt;id  tilt 
toinplidiKv  tUori  httuust  iht\  t;in  ip 
nort  dtp;irtmtntjl  und  liiit-ol-busintss 
h.itritrs  .inJ  tomprthtiid  tht  bip  pic 
lurt  rtp.irdinp  d.ii.i  .md  d.ii.i  llow. 

It  s  .iKo  impori.ini  lolt.id  txttrniilly 
b\  it.tninp  on  snttwjrt  i  tnJors  to 
mort  iiillv  Jtvtliip  thtii  oiVtrinps  so 
rli.ii  ihtrt  lire  I'twtr  stcuritx  \  uintra- 
biliiits  .ind  Itss  rtlianct  on  p.itthts. 
Kptfis  s.i\  i.id.w  's  prtixiaturt  coni- 
mtrci.il  s,«ittwjrt  rollouts  .md  subst- 
qutnt  frtqutni  patchinp  tnaki-  it  ditfi- 
cult  lur  (.oinp.ipits  lo  \outli  for  iht  in- 
iv'untx  of  thtir  sysitms  Where  J.it.i  in- 
itpriii  .md  stcurit)  art  conctrntd.  "ri’ 
nrust  sa\  to  suppliers  that  it  cannot  live 
with  unsafv  ttthiiolopy."  s.iys  Alan 
b.illtr  director  of  rtstartli  .it  the  S.•^NS 
Jnstiiutt  in  Ktihtsda.  Md  loday. 
llitrt's  not  sufficient  pressurt;  I  T 
protips  art  all••w  inp  vendors  to  s»,'ll 
•htni  sxsitins  t^ii  ..f  holts." 

Elements 

liovv  do  you  create  systems  w  ith  an 
eye  tow.ird  c-ompliancer  (.r.iduallv.  for 
starters:  nobody  expects  I  Tproups  i»i 
toss  their  inlVa-siructurts  «i\  erhoarj  .md 
start  from  ser.itch,  lohn  .Matuini.  pix-si- 
Jent  of  inJustrv  pMup  AIIM  Interri.i- 
non.»l  in  silver  Sprinp.  .Md  .  sajsone  Ji- 
pestibleappriuicU  is  to  keep  in  mind  a 
repulation  iliat  you  know  ispendinp. 
ITien.  when  you  upprade  a  tcehnolopy 
'  omponeni  that  w  ill  bi’  atTccted  bv  that 
repul.ition.  shop  aceorJinply.  h*r  exam¬ 
ple,  a  business  ihat's  heavily  atTecieJ  by 


llll’AA  should  consider 
th.it  repulation  when  e\- 
lorinp.ieeess-eomroi  - 
"fferinps, 

.\MK's  H.iperty  .iprecs, 
can  t  buy  a  compli- 
.ince  .irchitecture:  they 
don't  exist.  "  he  s.iys.  "Sn 
vou  look  .u  hot  buttons  for 
\  I  mr  eomp.mv  to  sc\'  wh.ii 
vou  must  handle  firsi,  .md 
Use  that  lo  decide  what  archileelure 
pieces  you  must  put  in  pLice  first  ' 
Myriad  technoIi>pies  play  a  role  in 
compliance  support; 

■  Business  process  management  applica¬ 
tions.  lor  both  reportinp  and  risk 
forecasiinp. 

■  Enterprise  resource  planning,  to  ensure 
that  ci'ntn'ls  .ire  in  place. 

■  Search  and  retrieval,  for  informaiii<n 
discovery  and  communications  mun- 
ilorinp. 

■  Storage  (software  and  hardware),  to  pro¬ 
tect  .md  retain  data 

•  Security,  to  control  .iccess.  protect 
d.itj  .md  ensure  th.it  systems  are 
audit.ible. 

■  Content  management,  to  control  access 
.md  handle  document  compliance 

efforts 

■  Records  management  and  e-mail  archiv¬ 
ing.  to  meet  retention  repulalions. 

■  Data  and  application  integration,  to  make 
iinstnictureJ  data  usable  and  ensure 
the  data's  reliability. 

■  Business  process  automation,  to  mi  mi- 
tor  key  processes  and  define  rela¬ 
tionships  amonp  data. 

In  addition,  vendors  h.ive  bepun  ivi 
roll  «*ut  pencral-purpose  e«*mpliance 
manapement  applications  <a.s  tipposed 
to  applications  focused  on  a  sinple  rep¬ 


ulation).  .A.xentis  Ins..  IBM,  Documen- 
lum  and  HleNet  Corp.  have  fielded 
products,  .ind  many  others  are  expect¬ 
ed  to  folliuv  suit. 

Challenges 

n  manapers  who  attempt  to  raise 
comp.iny  consciousness  about  compli¬ 
ance  shouldn't  necessarily  expect  a 
hero's  welcome.  .Aeeordinp  to  (Lirt- 
ner's  I.eskel.i,  loo  ni.iny  eorptirations 
still  ap7*roiKh  repulatinns  the  \\.iy  they 
did  when  Sarbanes-i)\.Ie\  became  .in 
issue:  'Businesses  decided  this  was  an 
issue  for  finance,  and  finatuv  s.iid  to 
1 1 ,  'You'll  pet  involved  when  wu  say 
you'll  pet  involved.'  "  he  says, 

1  eskela  adds  that  in  iiilerv  ievvs  with 
m.my  ot  the  larpest.  besi-ni.maped 
s-omp.inies  in  ihe  I'.S  .  (.ariner  found  ,i 
dispiritinp  number  of  process  manape- 
ment  silos  preventinp  lepal.  financial 
viudil  and  IT  audit  primps  from  work- 
inp  topether.  "(^rpani^ations  just  don't 
connect  senior  manapement  of  busi¬ 
ness  divisions  to  (corporate i  lep.il.  I  T 
and  finance  proups."  he  s.iys. 

Makinp  these  connections  is  the  first 
ehallenpe.  and  a  prickly  one  at  that.  \'ol- 
unteerinp  to  lead  the  onnpany's compli¬ 
ance  manapemeni  propram  Ls  sure  to  be 
viewed  by  some  as  a  power  prab.  Never¬ 
theless.  it's  wonh  the  eft'ort.  O  47455 

L’Ile/deri>iuC.omputerworldeimfri'buf- 
inp  ivrifer  in  Soufhhnnn.  Mu.s,s.  Conrucf 
him  01  sulfclJi’r  a  chart cr.tM. 


WANTED:  IT  INVOLVEMENT 

Some  ayuorate  auditors  a*?  lairie^nng  IT  statte's 
rs*u«ance  to  heio  witfi  SeciiO'’  404  comniiaiKe 

QuickLink  47728 
www.compulerworld.com 
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'cein’t 
buyacompli 
ance  archi¬ 
tecture;  they 
don’t  exist. 

John  Haqorty.  analyst 
AMRResc-arch  Inc 
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AudMig  and  monitortaip  to 
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Making  Lsrnonade 

The  most  persuasive  reason  to  insti¬ 
tute  a  compliance  management  culture 
is  to  reduce  the  cost  of  meeting  indi¬ 
vidual  regulations.  A  look  at  the  price 
tag  fof  Sarbanes-Oxley  drives  home 
the  pdint.  In  a  January  2004  survey  of 
321  coropaaies,  industry  group  Finan¬ 
cial  Executives  International  found 
that  for  large  companies,  the  average 
cost  of  compliance  with  Section  404  — 
Management  Assessment  of  Internal 
Controls  —  was  $4.6  miUion.  including 
35.000  hours  of  internal  staff  time. 

SIJ  million  for  consulting  and  soft¬ 
ware  and  S1.5  million  in  new  audit  fees. 

Business  Roundtable,  an  association 
of  CEOs  of  U.S.  companies,  conducted 
another  survey  in  July  2003  in  which  it 
polled  150  CEOs  at  large  companies. 
Half  said  their  compliance  costs  would 
range  from  $1  million  to  $5  million: 
some  estimates  topped  $10  cnUlloa 

The  good  news  is  that  the  cost  of 
Sarbanes-Oxley  compliance.  aJottg 
with  that  of  HIPAA.  can  be  used  as  a 
basts  for  meeting  future  regulations. 
According  to  Stamford.  Conn.-based 
Gartner  Inc.,  public  companies  that 
adopt  a  comprehensive  compliance 
management  architecture  will  spend 
50%  less  per  year  than  those  that  don’t 


“In  many  organizations,  m  ^ 
the  first  reaction  to  a  new  ■ 

regulation  is  to  create  a  H  m  C 
t^er  team'"  to  address  bilVS 
the  issues,  says  Gartner  ^ 

analyst  Lane  Leskela.  "But  3nC©  < 
if  you’ve  got  these  teams  tectur 
for  three  or  more  regula-  i 

tions.  the  redundancy  WWlIkf 
makes  no  sense." 

.  AMRResee 

A  compliance  strategy 

can  also  provide  a  competitive  edge.  If 
your  business  can  respond  quickly  to 
txew  regulations  while  others  in  your 
industry  remain  stuck  in  tiger-team 
mode,  the  advantage  goes  to  you. 

Spearheading 

UTiile  it’s  tough  to  anticipate  future 
regulations,  it's  a  sure  bet  that  data- 
gathering  will  be  a  critical  component 
of  compliance.  That’s  why  it  makes 
sense  for  CIOs  to  lead  the  charge. 

“When  business  leaders  look  at  com¬ 
pliance,  they  look  at  the  letter  of  the 
law.  not  repeatability."  says  John  Hager- 
ty.  an  analyst  at  Boston-based  AMR  Re¬ 
search  Inc.  “IT  can  say,  ’Here's  how  we 
can  automate  so  it’s  not  such  a  pain 
next  time.’  "Technologists  can  lead  the 
compliance  effort  because  they  can  ig¬ 
nore  departmental  and  line-of-business 
barriers  and  comprehend  the  big  pic¬ 
ture  regarding  data  and  data  flow. 

It’s  also  important  to  lead  externally 
by  leaning  on  software  vendors  to 
more  fully  develop  their  offerings  so 
that  there  are  fewer  security  vulnera¬ 
bilities  and  less  reliance  on  patches. 
Experts  say  today's  premature  com¬ 
mercial  software  rollouts  and  subse¬ 
quent  frequent  patching  make  it  diffi¬ 
cult  for  companies  to  vouch  for  the  in¬ 
tegrity  of  their  systems.  Where  data  in¬ 
tegrity  and  security  are  concerned.  “IT 
must  say  to  suppliers  that  it  cannot  live 
with  unsafe  technology."  says  Alan 
Palier,  director  of  research  at  the  SANS 
Institute  in  Betbesda.  Md.  “Today, 
there’s  not  sufficient  pressure:  FT 
groups  are  allowing  vendors  to  sell 
them  systems  full  of  holes." 

Elements 

So  how  do  you  create  systems  with  an 
eye  toward  compliance?  Gradually,  for 
starters;  nobody  ei^ects  IT  groups  to 
toss  their  infrastructures  overbo^  and 
start  from  scratch,  fohn  Mancinl  presi¬ 
dent  of  industry  group  AUM  Interna¬ 
tional  in  Silver  Spring  Md.,  says  ortc  di¬ 
gestible  approach  is  to  keep  in  mind  a 
regulation  that  you  know  is  pending. 
Then,  when  you  upgrade  a  technology 
component  ^t  will  be  affected  by  that 
regulation,  shop  accordingly.  For  exam¬ 
ple,  a  business  that’s  heavily  affected  by 


buyacompli- 

AMR’S  Hageity  agrees. 
CUI^  -You  can’t  buy  a  compli- 

tOCtUrSy  tn0y  ance  architecture;  they 

don't  exisL 

you  look  at  hot  buttons  for 
company  to  see  what 
you  must  handle  first,  and 
use  that  to  decide  what  architecture 
pieces  you  must  put  in  place  first" 
Myriad  technolc^es  play  a  role  in 
compliance  support; 

■  Busmmss  process  managefiwnt  appBca- 
tions,  for  both  reporting  and  risk 
forecasting. 

■  Entsrpriss  rseourcs  planning,  to  ensure 
that  controls  arc  in  place. 

■  Search  and  retrieval,  for  information 
discovery  and  communications  mon¬ 
itoring. 

■  Storage  (software  and  hardware),  to  pro¬ 
tect  and  retain  data. 

■  Security,  to  control  access,  protect 
data  and  ensure  that  systems  are 
auditable. 

■  Content  management,  to  control  access 
and  handle  document  compliance 
efforts. 

•  Records  management  and  »-ma9  archiv¬ 
ing.  to  meet  retention  regulations. 

■  Data  and  appfication  integration,  to  make 
unstructured  data  usable  and  ensure 
the  data's  reliability. 

■  Ehisiness  procoss  automation,  to  moni¬ 
tor  key  processes  and  define  rela¬ 
tionships  among  data. 

In  addition,  vendors  have  begun  to 

roll  out  general-purpose  compliance 
management  applications  (as  opposed 
to  applications  focused  on  a  sir^  reg- 


HIPAA  should  consider 
that  regulation  when  ex¬ 
ploring  access-control 


John  Hagorty.  analyst. 
AMR  Research  Inc. 


ulation).  Axentis  Inc.,  IBM,  Documen- 
turn  and  FileNet  Corp.  have  fielded 
products,  and  many  others  are  expect¬ 
ed  to  follow  suit. 

Challenges 

IT  managers  who  attempt  to  raise 
company  consciousness  about  compli¬ 
ance  shouldn’t  necessarily  expect  a 
hero’s  welcome.  According  to  Gart- 
ner  s  Leskela.  too  many  corporations 
still  approach  regulations  the  way  they 
did  when  Sarbanes-Oxley  became  an 
issue:  "Businesses  decid^  this  w’as  an 
issue  for  finance,  and  finance  said  to 
IT.  'Youll  get  involved  when  we  say 
you’ll  get  involved.’ "  he  says. 

Leskela  adds  that  in  inter.iews  with 
many  of  the  largest,  best-managed 
companies  in  the  U.S..  Gartner  found  a 
dispiriting  number  of  process  manage¬ 
ment  silos  preventing  legal,  financial 
audit  and  IT  audit  groups  from  work¬ 
ing  together.  "Organizations  just  don't 
connect  senior  management  of  busi¬ 
ness  divisions  to  [corporate]  legal.  IT 
and  finance  groups."  be  says. 

Making  these  connections  is  the  fust 
challenge,  and  a  prickly  one  at  that  Vol¬ 
unteering  to  lead  the  company's  compli¬ 
ance  management  program  is  sure  to  be 
viewed  by  some  as  a  power  grab.  Never¬ 
theless,  it’s  worth  the  effort.  O  <7455 

Ulfelder  is  a  Computerworid  confribuf- 
ing  writer  in  Southboro.  Mass.  Contact 
him  at  sutfelder@charter.net. 

Sonw  corpotate  aiditois  are  lamenimg  rr  stafleis' 
ralucttfKX  to  hdp  wKh  Section  4(14  orn^ 
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SHAREWARE 


Up 


A  friendly  group  of  Midwestern  CIOs ' 
Is  saving  money  by  pooling  resources 
and  software.  BY  CJ  RHOADS 


IN  JULY  2001.  Andrew  Black  and 
Scott  R.  Lien  were  having  a  drink 
after  work  and  commiserating 
about  the  high  cost  of  software  and 
intellectual  propterty  development 
Uen.  then  vice  president  of  infor¬ 
mation  services  for  customer- 
facing  systems  at  Best  Buy  Inc. 
had  just  been  burned  by  a  vendor  that 
decided  to  take  its  software  in  a  diff¬ 
erent  direction  —  leavii^  Uen  high  and 
dry  for  future  updates.  He  and  Black. 
CIO  at  Jostens  Inc.,  knew  from  years  of 
experience  that  they  were  both  pur¬ 
chasing  the  same  software  and  coding 
the  same  integration  ftmctions.  They 
decided  there  had  to  be  a  better  way. 

In  yet  another  after-work  conversa¬ 
tion,  they  enlisted  the  help  of  Elmer 
Baldwin.  CEO  of  consulting  firm  Bom 
Information  Services  Inc  The  plan: 
Form  a  member  organization  to  share 
resources  such  as  software,  utilities 
and  IT  planning  tools. 

"Initially."  Baldwin  said.  T  thought 
they  were  nutt!"  But  he  took  on  the 
project,  b^an  to  investigate  and  soon 
was  hearing  a  litany  of  complaints 
from  CIOs  about  the  cost  of  duplicated 
development  efforts. 

Meanwhile.  Baldwin.  Black  and  Uen 
met  monthly.  They  hired  Minneapolis- 
based  Dorsey  &  Whitney  LLP  to  work 
through  the  legal  issues,  consulted 
with  prospective  members  and  devel¬ 
oped  a  business  charter.  Iact  fall,  they 
formalized  the  structure  as  Avalanche 
Technology  Corp.,  a  for-profit  Min¬ 
neapolis-based  cooperative,  and  hired 
lay  Hansen,  formerly  ^nerai  manner 
of  Asia-Pacific  operations  at  Retek 
Inc.,  as  CEO. 

Companies  pay  S30.000  a  year  for  an 
Avalanche  mem^rship.  which  entitles 
them  to  use  any  of  the  intellectual 
property  that  has  been  donated  to  the 
cooperative  by  other  members.  There 
are  currently  four  members,  with  four  I 


more  in  various  stages  of  approval,  and 
about  30  intellectual  property  assets 
are  being  legally  cleared  for  use.  “Our 
goal  is  to  grow  by  at  least  10  companies 
wiiliin  the  next  year."  Hansen  says. 

Members  log  onto  WHrH'.ava/ancfie. 
coop,  where  they  can  review  and 
download  intell^tual  property  or  up¬ 
load  property  they  wish  to  donate. 

Intellectual  property  assets  can  be 
integration  ^plets.  application  add¬ 
ons.  best-practice  documentation,  tem¬ 
plates.  project  plans,  user  interfaces, 
software  coding  or  schemas.  “Anything 
that  makes  it  easier  to  implement  soft¬ 
ware."  Baldwin  says.  The  financial 
models  project  a  20%  to  40%  decrease 
in  the  total  cost  of  ownership  of  soft¬ 
ware  at  member  companies."  he  adds. 

Lien  explains  the  Avalanche  mis¬ 
sion:  "We  want  to  take  the  fnetion  out 
of  collaboration.”  be  says.  “We  arc  all 
under  tremendous  cost  pressure  to 
save  money,  and  through  Avalanche 


we  can  save  each  other  money." 

“Sofhvare  cooperatives  are  a  great 
idea."  says  Bob  Lewis,  president  of  IT 
Catalysts  Inc.,  a  consulting  firm  in 
Eden  Praine.  Minn.  “I'm  surprised 
that  it  took  so  long  to  bappea  It  really 
legitimizes  the  c^n-source  model." 

Beyond  Open-Source 

Uen  says  the  co-op  model  is  similar  lo 
that  of  open-source  but  takes  the  con¬ 
cept  further.  This  is  the  next  level  be¬ 
yond  open-source.”  he  explains.  "With 
open-source,  there  is  too  much  risk. 

You  are  stuck  maintaining  and  sup¬ 
porting  anything  you  develop  TTiat 
can  get  resource-intensive." 

With  Avalanche,  Uen  says,  the  a>-op 
becomes  re^nsible  for  the  asset  and 
also  ensures  that  there’s  a  clear  title  so  ' 
member  companies  can't  be  sued  later. 

It  is  great  for  the  donating  compa- 
1^"  he  says.  The  larger  the  installa¬ 
tion  base,  the  lower  the  cost  of  ongoii^ 
maintenance.”  [ 

John  Schmidt,  vice  president  of  inie-  I 
gration  at  Best  Buy,  echoes  that  idea. 

“It’s  easy  to  informally  collaborate  i 

with  just  one  or  two  developers:  com-  I 
panics  do  it  all  the  time.  But  beyond  I 
that,  you  begin  to  run  into  risks,"  he  j 
says.  For  example.  Best  Buy  was  using 

an  open-source  framework  available  at  I 
www.openadaptor.ors.  but  the  original 
developers  stopped  supporting  it  Icav-  I 

ing  Schmidt  lumging.  Later,  when  Best  ' 
Buy  developed  its  own  framework  for  1 

coding  integration  adapters,  the  com-  I 

pany  donated  it  to  Avalanche. 

The  charter  members  of  Avalanche  I 
are  Jostens,  a  provider  of  affiliation  I 
products  such  as  yearbooks;  ePredix 
Inc.,  an  employee  assessment  firm,  I 
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I  i^ere  Uen  is  now  CIO;  Bom  Informa¬ 
tion  Services:  and  Integral  Business 
I  Solutions.  All  four  arc  based  in  the 

I  Minneapolis  area.  As  technology  ser- 
'  vice  providers.  Bom  and  Integral  arc 
j  obl^tcd  to  donate  services  in  addi- 
I  tion  to  paying  the  membership  fee. 

I  Hansen  says  that  competition 
among  members  shouldn't  be  an  issue 
I  because  the  shared  assets  dontbrii^ 

J  competitive  advantage.  “W*  fully  cx- 

j  p€?cf  competing  companies  to  join  and 
I  share.”  he  says.  But  he  acknowiedges 
I  that  gettii^  members  to  really  coUabo- 
I  rate  is  a  challenge. 

I  Baldwin  agrees.  “We  are  looking  for 
more  than  just  money.“  be  says.  “We 
want  member  companies  to  get  in¬ 
volved,  to  participate."  They  hope 
member  companies  will  donate  intel¬ 
lectual  property,  cooperate  in  adapting 
it  for  other  companies,  help  trou¬ 
bleshoot  problems  and  form  sub¬ 
groups  to  develop  needed  niche  soft¬ 
ware  for  the  library. 

As  of  June,  a  discussion  board  on  the 

Avalanche  site  had  been  discontinued 
because  of  undertise.  but  Schmidt  is  still 
t^Himistic.  “Six  months  from  now,  the 
site  will  be  very  active."  be  says.  The 
idea  hasn't  been  proven  yet  It’s  a  leap  of 
foith.  But  I  think  k  will  work.”  O  47MS 

Rhoads  is  a  freelance  writer  in  the 
Philadelphia  area.  Contact  her  at 
CPlhoadsi^FrMAssociatesxom. 
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U.S.  IT  Spending 
Forecast 


Packaged  software 
will  make  up  only  24% 
of  FT  spending . . . 


The  IT  Economy 

■  The  IT  department  has  taken  over 
printer  procurement  from  office  man¬ 
agers.  since  printers  are  on  the  net¬ 
work,  says  a  report  by  Merrill  Lynch  & 
Co.  analysts.  The  firm's  survey  of  100 
CIOs  found  that  87%  are  in  charge  of 
buying  pnnters.  though  it's  a  relatively 
low-pnority  task. 


■  IT  outsourcing  spending  will  grow 
9%  this  year,  while  spending  on  IT 
consultants  and  full-time  staff  will  stall 
at  3%  and  2%  growth,  respectively, 
according  to  a  Forrester  Research  Inc. 
survey  of  115  CIOs. 


■  The  combined  IT  spending  in  Califor¬ 
nia,  New  York  and  Texas  is  almost 
equal  to  IT  spending  in  Japan,  the 
second-largest  market  m  the  world, 

IDC  reports. 


I  Packaged  '  Services . 

'  software  I 

'  Hardware 


...  but  it  will  be  the 
fastest-growing 
segment. 


CIOs  to  Manage 
Buildings,  Too? 


Best  Bits 


MANAGEMENT 


Things  to  Ponder 

■  Less  15  more 


I  'What's  the  next  big  thing  in  IT*^ 


Privacy  Brands 

Consumers  say  these  are  the  most 
trusted  companies  for  protecting  their 
privacy: 

1  eBayktc. 

2.  American  Express  Co. 

3.  Procter  A  Gamble  Co. 

4.  Amazon.com  kic. 
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Richard  LeFave 

TITLE; CK) and se- 
|KiI  nior  vice  president 


COMPANY:  Nextel 
Communications 


Le^ve.  a  Conyxrfenmnld 
Premier  100  FT  Leader,  is  this 
month's  guest  columnist.  He  an¬ 
swers  readers' questions  about 
breaking  into  martagemefrt.  the 
outlook  for  older  rr  workers  and 
pursuing  an  advanced  degree. 

If  you  have  a  question  you’d  like 
to  pose  to  one  of  our  Premier 
100  fT  Leaders,  send  it  to 
asKaleaderis^computerworid.com 
and  watch  for  this  column  each 
month  online  and  in  print. 


COMPUTtiliYOUlL  ,  ,  W. 


Stateside  Pay 
Slide  Tied  to 
Offshore 
Outsourcing 


Getting  Colder 

The  following  certificaitons  have  ios' 
between  17^5  ana  36^  of  the;r 
p'emium  boni/s  cay -n  the  oast  year 

GIAC  Certified  firewaJI  Analyst 
GtAC  Certified  InciderTt  Handler 
Siebel  Certified  Consultant 
Sun  Certified  Java  Programmer 
Microsoft  Certified  Systems 
Engineer  ♦  Internet 

Microsoft  Certified  Professional 
*  Internet 


trending  downwaid  fo'^  U  S  IT 

workers  whose  jobs  are  moif 
susceptible  to  offshore  out 
sourcing,  according  lu  new 
research  conducted  by  Foote 
Partners  LLC  in  New 
Caanan.  Conn.  Pay  for  boln 
noncertified  application  o^o  - 
qiamminq  and  enterprise  ap¬ 
plication  development  skills 
declined  2'=oin  the  first 
quarter  of  2004  and  be¬ 
tween  I900  and  20°o  over 
the  past  two  years.  Mean 
while,  certified  application 
development  skills  have  not 
fared  much  better.  They  have 
lost  nearly  15‘>o  of  their  value 
over  the  same  two-year  pen  - 
od.  ‘  This  IS  premium  skills 
pay  that  has  traditionally 
been  used  to  retain  and  moti  - 
vate  workers."  says  David 
Foote,  president  and  chief  re¬ 
search  officer  of  Foote  Part¬ 
ners.  "As  more  programming 
work  IS  transferred  offshore 
oral  least  directed  away 
from  IT  full-timers,  premium 
pay  becomes  unnecessary '' 


20  years.  Is  there  a  tendency  among 
hiring  managers  today  to  look  at  any 
one  over  55  as  obsolete  -  even 
though  we  have  current  skills'^ 


Still  Hot 


Strong  demand  can  be  expected  tor 
the  following  groups  of  certified  and 
noncenified  skills  over  the  next  '/ear 


Security 


XML  variants/Web  services 

VoIP 

Wireless 

Enterprise  project  management 
Web-enabied  analytics, 
management  applications 


With  so  many  )obs  being  outsourced, 
what  are  the  opportunities  for  IT  pro¬ 
fessionals  of  the  future? 


Even  though  I  have  more  than  20 
years  of  support,  development  and 
project  management  training  and  e* 
perience.  and  a  bachelor's  degree.  I 
haven't  been  able  to  break  into  man¬ 
agement.  Should  I  simply  focus  on 
improving  my  technical  skills,  or  in¬ 
sist  on  joining  management^ 


I  am  an  undergraduate  student  in 
computer  information  systems.  I  am 
considering  graduate  school.  Which 
would  be  more  beneficial'  a  master's 
degree  in  business  administration  or 
in  information  systems  management'^ 


I'm  58  years  old  and  have  been  in  IT 
since  1969  I've  been  a  Unix  systems 
administrator  for  fO  years  and  a 
mainframe  systems  programmer  for 
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BRAIN  FOOD  FOR  IT  EXECUTIVES 


CIOs  to  Manage 
Buildings,  Too? 

II  you’w  ever  reiocaied  a  data  center  or 
moved  a  headquvters.  you  know  how 
muchtherrgnNjpandtheiaciliesnfian- 
agemenl  group  need  to  vMirk  together.  The 
hm  depertmento  must  coonJmate  myiM 
detais  about  eiectricai  power.  heaHng  and 
cooino9|fitefns.secuntyartoteiecoRvnunh 
cations.  OlhenMse.  youl  have  insufficient 
cooing  for  those  recHttt  blade  servers,  or 
teiecannunicatiors  circuits  thM  are  provF 
sioned  too  late  for  the  move. 

Toirnprovecoordnation.efewconipe- 
nies  are  starting  to  conAine  rr  and  lacAiies 
managernent  toncAons  in  a  stogie  (poup.  a 
merger  fat  couM  become  matosttoam  in 
fwe  to  10  yearsw  says  Joshua  Aaroa  presF 


Best  Bits 

The  most  ueehd  parts  of  recent  business 

and  IT  management  books 

THE  BOOK:  The  Future  of  Wbrfc.  by 

Thomas  W.  Malone  (Harvard  Business 
School  Press,  2004). 

You  know  how 
open-source  soft¬ 
ware  is  created  by  a 
ely  dispersed 
unch  of  highly  tai¬ 
nted  people  who 
come  and  go  but  at 
some  i>oint  focus  on 
this  particular  software  project? 

That’s  the  future  of  woric,  according 
to  MIT  organizational  guru  Thomas 
Malone.  Projects  will  be  handled  by 
"flexible  webs  of  small  companies,"  or 
ad  hoc  teams  of  internal  experts,  or 
electronically  connected  freelancers. 
Malone  calls  the  latter  group  e-foncers, 
and  already  there’s  an  online  maricet- 
place  where  buyers  can  receive  bids 
from  service  contractors  {www^lance. 
com).  Afterward,  the  team  will  disband 


and  regroup  in  different  combinations 
for  other  projects. 

This  is  all  made  possible  by  cheaper 
communications  and  collaborative  IT. 
of  course,  but  it  will  require  new  ways 
of  managing:  more  coordination,  less 
command-and-control.  And  Malone 
says  we’U  need  to  establish  guilds  — 
reminiscent  of  the  craft  associations 
of  the  Middle  Ages  —  to  make  sure 
e-Iancers  have  health  care  benefits,  fi¬ 
nancial  security,  training,  reci^nition 
and  social  interaction  with  their  peers. 

—  Mitch  Betts 

Things  to  Ponder 

■  Lan  it  more.  World-class  IT  organiza¬ 
tions  spend  1B%  less  than  average  ones 
and  operate  with  36%  fewer  employees 
while  still  providing  hi^ier  levels  of 
strategic  value  to  their  companies,  ac¬ 
cording  to  a  benchmarking  study  by 
The  Hackett  Group  in  Atlanta,  a  unh 
of  Answerthink  Inc. 

■  tilfhafs  fa  iwxt  big  ki  n?  Merrill 

Lynch  &  Ca  asked  100  CIOs  that  ques¬ 
tion  and  the  most  common  answer  was 
"don’t  know."  followed  by  security  and 


deni  of  consuKtog  firm  Business  TechnoF 
ogy  Partnere  fa  to  New  Tbrk  l^cilfties 
nenagere  rieed  to  know  a  lot  more  about 
tedvutogythantheyusedto.Andtechrnl- 
ogy  managers  need  to  know  a  lot  more 
ab^  facities  thwi  they  used  to.*  Aaron 
sajs.  *1eGlmtogy  is  now  so  vvoven  into  the 
fabric  of  office  space  that  I  doni  thtok  these 
things  can  be  (separate)  anymore.* 

That's  espect^  true  to  fa  *smat  of* 
fice*  of  fa  future.  Aaron  says.  Integrated 
bulking  systerns  wi  recognize  that  a  partic¬ 
ular  empl^  has  entered  fa  buldtog  (via 
btometricaccesscontroisXprovidejust- 
toHirne  lighting  atong  his  path,  boot  up  his 
PC  and  set  the  customized  temper^jre  in 
his  office.  Those  capabilities  exist  today. 
Aaronsays.bUfaywon’tbewidelyaffi)rd- 
afale  for  seven  to  12  years. 

-imchBeas 


Moreless/RFID.  Obviously  there’s  no 
killer  app  on  the  horizon,  but  Merrill 
Lynch  analysts  say  that  sensors  may  be 
a  b^  deal  in  a  couple  of  years  [Quick- 
Link  44641). 

■  Dirty  data,  ffompanies  are  basing  im¬ 
portant  decisions  on  bad  information, 
says  Gartner  Inc.,  which  estimates 
that  more  than  25%  of  the  critical  data 
within  Fortune  LOOO  businesses  is 
inaccurate  or  incomplete.  O  47651 


GOT  ANY  BRIGHT  IDEAS?  Send  rhem  to 
pitches@conq)utenvorid.com. 
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LeFav*;.  a  Computvrwp'ia 
Premier  100  IT  Leaner  ib  mis 
month'!,  guest  columnist.  He  an¬ 
swers  readers'  question:,  .ihout 
biejkiiig  into  management,  the 
outlook  for  older  IT  ^vorkers  and 
pursuing  an  advanced  degree 
If  you  have  a  qui’st’O'i  you’d  like 
to  pose  (0  one  ot  it.i-  Premier 
100  (T  Leaders  send  il  lu 

and  waten  tor  this  column  each 
month  online  and  in  gfini 


Evan  though  I  hm«  niort  than  20 
yavs  of  Mvport  doMtopmont  «nd 
projoctmanagaiiMnttrainjngandn- 
perienea,  and  a  bacholor’t  dograe,  I 
havoni  baon  aUo  to  braak  into  man* 
agamenL  Should  I  sbnpty  foGiis  on 
impreving  my  technical  skills,  or  in> 
sist  on  joMng  managoment?  H  moving 
into  management  is  something  you  want  to 
do.  I  tNnk  your  technical  leadeish^  skills 
could  support  a  move.  The  issue  some¬ 
times  is  making  your  management  aware 
of  what  you  want  to  do.  Start  with  HR  and 
lake  the  time  to  promote  your  career  de¬ 
sign  with  them  so  they  can  be  a  supporter. 

rm  58  years  old  and  haw  been  in  rr 
skwe  1909.  INo  boon  a  Unix  systems 
adminithator  for  10  ysers  and  a 
mainframo  systems  programmer  for 


20  years,  b  there  a  tendency  among 
hMng  managers  today  to  loak  at  any¬ 
one  owr  55  as  obsobte  -  own 
though  we  haw  current  skib? 

The  power  of  the  rr  profession  is  that  il 
gives  people  the  ability  to  bridge  age  and 
gender  gaps;  the  need  for  technicafly  com¬ 
petent  leaders  provides  a  level  playing 
field.  Mobility  and  skill  sets  play  an  impor¬ 
tant  role  in  being  considered  for  the  right 
job  for  you.  Broadening  your-skite  always 
helps,  and  adding  capal^ies  in  project 
rnanagernent.  benchmarking  analysis  and 
balanced  scorecard  techniques  are  very 
valuable  acfiuncts  to  a  sobd  Unix  back¬ 
ground.  Adding  Linux  expertise  broaderts 
technicaJ  ski  sets  as  well. 

With  so  many  jobs  being  outsourced, 
what  are  the  opportunities  for  rr  pro¬ 
fession's  of  the  futaire?  The  areas  that 
wi  continue  to  grow  at  a  fast  rate  indude 
local  and  wide-area  networks.  dat^)ase 
administration.  systOTis  administration  arxJ 
business  systems  analysis. 

I  am  an  undergraduate  student  in 
computer  kiformation  systems.  I  am 
corakbring  graduata  school  Which 
would  be  more  benefieW:  a  master's 
degree  in  business  administration  or 
in  information  systems  management? 
i  think  that  an  undergraduate  degree  in 
computer  science  coupled  with  a  few  years 
of  v«)fk  experience  makes  a  solid  launch¬ 
ing  piatfonn  for  either  graduate  degree.  An 
MBA  will  provide  a  valuable  experience  in 
business  operations  and  insight  into  where 
IT  can  best  be  deployed.  You  can  cus¬ 
tomize  either  de^  with  courses  that 
cross  over,  ther^  getting  the  best  of  both 
worlds.  Betting  some  work  experience  first 
will  give  you  insight  into  which  degree 
makes  the  most  sense  for  you. 
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EXEC  TRACK 


Steele  Moves  to 
DentegraasCIO 

Pairidt  S.  SiMb  has  baen  named 
senior  vice  praaidant  ant  aO  for 
The  Danl^pi  Qmup  Ine^  dw  San 
FranctetHwaodhoMtagcompa* 
iqr  that  feidudaB  Della  Oantal  of 
CaMimie  and  oiwratM  in  16 
Malaa  plUB  the  DWrfct  of  Cohan* 
bio.  He  aaaiBnes  the  riaponsibll' 
ties  of  Martin  Whelan,  who  is  re* 
thing.  SMole  is  a  aStoar  veteran 
of  Mbertaen’s  bic..  the  nathm's 
aocawHaigset  vocanr  retaier. 
sarvinofnostreearMhraseiecu- 
tive  vice  praoidant  and  CM). 


Apfilegarth  Named 
do  at  New  Airline 

Don  Appiagard)  has  boon  named 
CIO  at  America,  a  now  do* 

meetic  ahtne  vdth  hewhaiertarr 
in  Now  Wirfc.  He  proviouehr  wos  a 
vicoprealdeiitatMBviriire.aWvi- 
ehm  of  Acoanturo  LhL.  whare  he 
innwed  on  business  demiopment 
for  die  Melon's  ahine  rsaorvo* 
don  syetoms.  Wrghi  America 
piano  to  begin  sarviGo  in  200$. 


Becton  Dickinson 
PideNateleasCIO 

X  hdar  Natalo  has  boon  named 
tdee  preeMooC  and  CM)  at  Becton. 
Diddnoen  and  Co.  in  Frankln 
Lahai.  HJ.  He  eHI  hove  rwponoi* 
hfty  for  ghihol  (T  oporadons. 
NatataGomostothemeiicM 
tedoiolegy  company  from  aener* 
al  Boehic  Co^  where  he  moat 
roGondy  lend  dm  rr  gre«V  for 
the  Americas  Coneomer  A  Indus¬ 
trial  tfvWen.  a  SB  baonbuBh 


May  to  Take  Over 
FT  at  Oigimarc 

Oghnare  Corp.  in  Tualadn.  Ore., 
aonoonood  dm  appoinhnanl  of 
iehn  May  as  (30.  May  prewouaiy 
eervad  as  eenierideo  president 
and  CIO  at  ModU  Itavomant 
bdamflonni  Me.  for  fim  yean  in 
tadMd.  Ore.  DtMnre  pnwideB 
preductoandaandcioeiereecMr- 
erg  pareanm  menancaDOfL 


PAUL  GLEN 


The  Wrong  Stuff 


Now  THAT  IT  DEPARTMENTS  are  Start¬ 
ing  to  do  just  a  little  recruiting,  it’s  time 
to  think  about  how  to  hire  the  best  and 
brightest  people.  Despite  having  had  a 
few  years  when  they  could  be  really 
choosy,  hiring  managers  seem  to  have  lost  sight  of 
how  to  pick  great  employees. 

We’ve  all  seen  job  postings  with  statements  like, 
“Must  meet  all  requirements  below  to  be  considered. 
Otherwise,  don’t  waste  our  time  by  applying.”  What 


follows  is  invariably  a  list 
of  required  experience 
that  would  elude  even  the 
most  energetic  and  accom¬ 
plished  centenarian.  Usual¬ 
ly  the  list  includes  a  tong 
string  of  ill-considered, 
mutually  incompatible  skill 
sets  and  temperaments. 

Statements  like.  "Must 
have  a  successful  record  as 
a  sales  hunter,  a  seller  of 
large-scale  sofrivare  solu¬ 
tions  to  senior  executives 
and  a  I2EE  programmer, 
with  a  minimum  of  2S  years 
of  experience,”  seem  all  too 
common. 

I  imagine  some  junior 
HR  person  fresh  out  of  col¬ 
lege  sitting  in  a  windowless  cubicle 
sifting  through  pUes  of  resumes. 
“Hmin.  Here’s  one.  Oops.  Only  24 
years  of  java.  Reject.  Next.  Steve  Jobs; 
that  name  sounds  familiar.  Oh.  didn’t 
finish  college.  Next.” 

I’m  not  suggesting  that  hiring  man¬ 
agers  shouldn’t  be  choosy  now  that 
they  have  the  chance,  but  they  should 
use  the  opportunity  to  choose  based 
on  meanii^ul  criteria.  Too  ofren.  it 
seems,  these  attempts  to  be  selective 
are  based  on  a  few  myths  that  lead  to 
poor  decisions. 

Myth  1;  Past  Emrience 
Equab  Future  Success 

At  the  heart  of  absurd  selection  crite¬ 
ria  is  the  assumption  that  an  appli¬ 


cant’s  previous  experience 
doing  exactly  the  same  job 
implies  future  success.  But 
there  are  a  number  of 
problems  with  hiring 
someone  to  re-create  a 
previous  performance. 

People  frequently  try  to 
repeat  past  success  by  do¬ 
ing  things  exactly  the  same 
way  as  before,  failing  to 
recognize  the  uniqueness 
of  the  new  situation.  In 
fact,  if  someone  has  done  a 
job  before  and  been  wildly 
successful,  he’s  unlikely  to 
reproduce  the  results.  Ear¬ 
ly  success  doesn’t  lead  to 
learning.  Failure  is  a  much 
better  teacher. 

Also,  people  get  bored  doii^  the 
same  things  over  and  over  again  and 
don’t  engage  completely  with  the  job. 

A  much  better  rule  to  follow  when 
hiring  would  be  “past  drive  for  success 
implies  future  drive  for  success."  The 
desire  to  be  effective  is  much  more  en¬ 
during  and  important  than  some  spe¬ 
cific  experience.  You  can  see  it  in  a 
progression  of  increasing  responsibili¬ 
ty.  but  mostly  it  comes  through  in  the 
interviews. 

Myth  2:  SpectiSzatian 
Equals  f^odw^vily 

This  myth  has  deep  roots  in  the  busi¬ 
ness  community.  Ever  since  studies  of 
scientific  management  were  conduct¬ 
ed  at  the  turn  of  the  last  century,  spe¬ 


cialization  has  been  considered  a 
bedrock  of  productivity.  The  more 
specialized  someone  Is,  the  more  pro¬ 
ductive  he  must  be.  Obviously,  this  be¬ 
lief  has  served  us  well  over  the  past 
100  years  or  so,  helping  to  multiply  the 
productivity  of  physic^  labor  by  a  fac¬ 
tor  of  more  than  50. 

But  just  because  this  assumption  has 
proved  true  for  improving  the  produc¬ 
tivity  of  physical  labor,  that  doesn’t 
necessarily  mean  that  it  will  work  the 
same  way  for  improving  the  produc¬ 
tivity  of  knowledge  work. 

A  better  assumption  would  be  that 
every  organization  and  project  needs  a 
blend  of  both  deep  specialists  and 
broad  generalists.  Hiring  a  bunch  of 
specialists  more  often  results  in  inter¬ 
nal  competition  and  posturing  rhan  in 
outstanding  productivity.  In  the  right 
environment,  people  with  varying 
perspectives  find  the  roost  efficient 
and  creative  solutions  to  the  problems 
at  hand. 

Myth  3;  Ybu  Can  Do 
Only  One  TNngWsI 

This  myth  assumes  that  each  of  us  is 
entitled  to  only  one  primary  skill  If 
someone  has  pursued  a  career  writing 
mystery  novels,  he  clearly  can’t  be 
much  of  a  programmer. 

For  me.  one  of  the  great  privileges  of 
being  in  IT  has  been  work^  with  just 
these  sorts  of  talented  polymaths.  I've 
worked  alongside  people  who  started 
their  careers  as  opera  singers,  concen 
pianists,  high  school  teachers,  mathe¬ 
maticians,  physicists,  historians,  sales¬ 
people.  factory  workers  and  psycholo¬ 
gists.  They  all  brii^  varied  perspec¬ 
tives  from  their  other  careers,  enrich¬ 
ing  our  work  experiences  and  the 
quality  of  our  technical  products. 

If  we  allow  these  people  to  be  forced 
out  of  the  industry  ^  checklist  re¬ 
cruiting,  our  projects  and  work  lives 
will  be  poorer  for  it.  Cl  47B0B 
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JavaOne 

“I’ve  never  even  evaluated 
Sun  tools."  said  Rick  Davis,  a 
Ravenswood.  Wya.-based 
senior  systems  analyst  at 
Pechiney  Rolled  Products 
LXC.  which  uses  IBM’s  Web¬ 
Sphere  application  server  and. 
like  most  WebSphere  sites,  the 
de\-elopmeni  tool  designed  for 
it.  Although  Davis  expressed 
curiosity  about  the  new  offer- 
mgs  Sun  promoted  last  week, 
be  added,  "I’m  curious  about  a 
lot  of  things,  but  I  don't  have 
time  for  them." 

A  random  poll  of  more  than 
a  dozen  attendees  at  JavaOne 
found  that  none  use  Sun  com¬ 
mercial  tools.  A  few  said  they 
use  Sun's  open-source  Net- 
Beans  integrated  development 
environment  (IDE).  Sun  pre¬ 


viewed  a  4.0  version  of  Net- 
Beans  last  week. 

Daniel  Vela,  a  San  Antonio- 
based  software  engineer  at 
Sierra  Nevada  Corp..  said  he 
has  no  need  for  Sun’s  com¬ 
mercial  tools  because  Net- 
Beans  is  more  than  adequate. 
He  said  several  colleagues 
also  use  NetBeans,  and  two  of 
them  have  opted  for  the  open- 
source  Eclipse  IDE  that  IBM 
created  and  this  year  turned 
over  to  an  independent  non¬ 
profit  corporation  to  manage. 

An  architect  at  a  big  invest¬ 
ment  bank  who  asked  not  to 
be  named  said  he  uses  Eclipse. 
NetBeans  and  Intellil.  He  said 
he  abandoned  Borland's 
JBuilder  because  of  the  ex¬ 
pense  and  opted  for  the  cheap¬ 
er  IntelliJ.  He  said  he  tends  to 
favor  Eclipse  over  NetBeans 
because  it’s  "snappier." 

The  architect  expressed  re¬ 


spect  for  Sun  as  the  “only  vi¬ 
able  steward  of  Java.”  But.  he 
added,  “it’s  difficult  to  see 
bow  they  reconcile  the  invest¬ 
ment  tbe>’’re  making  in  Java.  1 
find  it  hard  to  work  out  how 
Sun  will  make  any  money  off 
the  Java  platform." 

Sun  is  being  creative  with 
bundled  options  and  subscrip¬ 
tion  pricing,  but  the  grovk-ii^ 
popularity  of  free  open-source 
options  such  as  Eclipse  and 
NetBeans  threatens  commer¬ 
cial  offerings.  Thomas  Murphy, 
an  analyst  at  Meta  Group  Inc,, 
said  more  corporations  will 
take  a  mixed  approach,  using 
commercial  and  open-source 
tools  to  cut  costs.  A  J2EE  tools 
suite  can  cost  SS.000  to  S10.000 
per  developer,  he  said 

"People  are  pushing  back 
against  that.”  Murphy  said. 

Some  development  teams, 
however,  still  want  the  add- 
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ons  that  a  commercial  tool 
provides.  Joseph  Saab,  a  De¬ 
troit-based  development  man¬ 
ager  at  Daimler  Chrysler  AG, 
said  the  automaker  needs  the 
Enterprise  JavaBcans  support, 
lest  environment  and  enter¬ 
prise  application  integration 
modelers  in  IBM's  WebSphere 
Studio  Application  Developer 
Developers  expressed  vary¬ 
ing  levels  of  interest  in  Java  Stu - 
dio  Creator,  the  Microsoft-like 
dr^and-drop  tool  that  comes 
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■ana  an  toad  anai^  Dan 

aebady  Is  a  madal  ahem  people 
an  ppytog.  and  theTs  uEuady  da 
mom  apacaiad  took.  Da  way 
that  NsIBeara  Is  amhaeclad.  rs 
not  so  inidi  a  tool  as  a  tool  anyl- 
nrrenard.  dkm  al  released 
drese  Mtk  htgharkwl  took  dial 
are  bull  as  pkigas  to  i.  So  Cre¬ 
ator  Is  ready  lusi  an  gdeneam  to 
NelBeans.andj8wSludnEn- 
iBphsalsanedenakintoftel- 
Beans.  Da  molrlly  stack  Is  an 
erdensiontoNalS^. 

k  •  yaw  daiga  la  mala  a  tat 
af  nansy  an  feakT  for  us.  da 

resi  goal  B  to  irake  •  so  that  da 
soflwan  ecosystem  Is  as  haattiy 
as  bosslUs  ¥k  donihsw  to  be 
kbilously  caait««lllw  We  lust 
haw  to  be  nol  fabiloisly  cash- 
nagatM.  because  daee  look 
am  enormous.  Drey’m  tremen- 
dnsengkaenngellons. 
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free  with  a  S99  annual  Sun  de¬ 
veloper  network  subscriptiun. 
Todd  Reeser.  a  manager  of  ap¬ 
plication  development  at 
Choice  Hotels  International  in 
Phoenix,  said  his  group  will 
evaluate  Creator.  c%'en  though 
he  has  beard  some  say  “it’s  a 
toy."  His  group  uses  Eclipse. 
"It's  open-source,  h’s  free,  and 
it's  an  excellent  IDE"  he  said. 

Christopher  Randall  a  Sea¬ 
side.  Calif -based  software  en¬ 
gineer  at  Northrop  Grumman 
Corp..  said  he  typically  has 
found  Sun’s  new  to(^  to  be  too 
slow,  but  he  was  impressed 
when  testing  Creator  in  labs  at 
JavaOne.  Whether  be  will  actu¬ 
ally  use  it  is  another  matter.  He 
said  he  doesn't  use  an  IDE 
“When  you  use  an  IDE  you 
I  always  haw  to  learn  some  set 

of  steps  that  may  or  may  not  be 
'  applii^le  10  what  you're  do¬ 
ing-*'  be  said.  Creator  also  has 
another  strike  against  it  "1  gen¬ 
erally  don't  like  programming 
with  drag-and-drop."  be  said 
Bui  Mark  Driver,  an  analyst 
at  Gartner  Irtc.,  said  ease  of  use 
and  rapid  application  develop¬ 
ment  tools  represent  hard¬ 
ware-centric  Sun's  last  chance 
to  have  an  impact  in  the  tools 
business,  since  there’s  no 
leader  in  that  area.  "This  is  a 
market  for  them  to  lose,  and 
they  have  lost  it.”  Driver 
They  have  a  lof%;  tradition  of 
shooting  themselves  in  the  foot 
with  anything  that  has  to  do 
with  software  strategy." 

Murphy  said  that  in  order  to 
make  strides  in  tools.  Sun  will 
have  to  establish  more  of  a 
presence  with  its  application 
server.  "You  have  to  have  the 
combination."  be  said. 
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IT’S  INCREDIBLE  —  THAT’S  THE  ONLY  WORD  FOR  IT. 

In  May,  the  Justice  Department  said  it  couldn’t  copy  what’s 
supposed  to  be  public  information  in  one  of  its  databases  be¬ 
cause  “implementing  such  a  request  risks  a  crash  that  cannot 
be  fixed  and  could  result  in  a  major  data  loss,  which  would  be 
devastating.  In  addition  to  running  the  risk  of  data  loss,  this  is  a  new 
feature  request  which  would  be  costly  and  take  a  considerable 
amount  of  time  to  implement.” 

Yes,  this  Justice  Department  bureaucrat  actually  said  that  copying 
a  database  could  destroy  the  data  and  produce  an  unfixable  crash. 
And  that  it  would  be  costly  and  take  time. 

And  we’ve  been  worried  about  Sarbanes-Oxley.  Silly  us. 

Details  of  this  database  problem  arc  sketchy.  ■  If  we  hire  this  contractor  for  our  Sarbanes- 

All  we  know  for  sure  is  what’s  in  a  letter  to  the  Oxley  overhauls  and  our  e-mail  and  instant 

Center  for  Public  Integrity,  a  Washington  messaging  repository  projects,  wiil  we  be  able 

watchdog  group.  In  the  letter,  the  Justice  De-  to  use  the  same  copying-the-data-could- 
partmenl  denies  the  grou^^  request  for  a  copy  destroy-it  excuse  successfully? 

of  the  government's  database  of  foreign  lobbyist  ■  Will  our  users  beUeve  us  when  we  tell  them 
activity  under  the  Freedom  of  InformaUon  Act.  accessing  the  data  they  need  will  destroy  it,  so 

TIk  database  exists,  and  it’s  supposed  to  be  they’ll  have  to  make  do  without  it?  OK,  scratch 
publicly  available.  In  fact.  Justice  is  legally  re-  that  one  —  we  already  know  the  answer, 
quired  to  generate  a  report  from  it  for  Congress  ■  WiU  our  CEOs  accept  that  this  is  a  new  fed- 

twice  a  year.  But  the  most  recent  report  was  for  eral  standard  for  data-intensive  IT  projects? 

the  second  half  of 2002.  ■  since  Attorney  General  John  Ashcroft  will 

Since  then,  the  database  has  been  undergoing  be  two  years  behind  in  filing  required  reports 

a  “technology  upgrade."  according  to  the  letter.  by  the  time  the  database  is  working  again,  can 
As  a  result,  the  database  can’t  be  copied  until  we  get  him  to  file  a  friend-of-the-court  brief 
December  without  risking  a  devastating  dau  when  the  Securities  and  Exchange  Commission 

loss  and  a  crash  that  cant  be  fixed.  or  New  York  Attorney  General  Eliot  Spitzer 

What  could  possibly  be  better  news  to  over-  comes  after  us  for  not  filing  our  reports? 

"titked.  deadline-pressed  IT  shops?  The  Justice  ■  How  about  just  writing  us  an  excuse  note? 

Department  officially  believes  in  daubases  that  ■  b  this  copying-destroys-it  feature  available 

can  be  destroyed  Just  by  being  copied.  for  digital  rights  management  systems? 

And  Justice  also  officially  believes  that’s  a  ■  If  we  can’t  hire  the  contractor  or  buy  the 

perfectly  good  excuse  for  faUing  to  comply  with  technology,  can  we  at  least  see  the  resume  of 
j._-i  the  IT  department  stafTerwho 

came  up  with  the  phrase  "a  crash 
that  cannot  be  nxed*? 

■  How  could  anyone  know  that 
copying  the  data  may  cause  “a 
crash  that  cannot  be  fuced”  unless 
. . .  uh-oh. . . . 

■  Somebody  did  back  up  that 
database  at  some  point,  right? 

They  must  have  answers  to  these 
questions  somewhere  at  the  Justice 
Department.  Maybe  even  in  a  data¬ 
base.  Now  if  we  can  just  get  some¬ 
one  to  make  a  copy  for  us. . . . 
047901 


And  there  are  a  few  other  things 
we*d  like  to  know.  Such  as: 

■  Who  is  this  brilliant  contractor 
that  leaves  an  organization  unable 
to  perform  tasks  it's  legally  required 
to  do  for  between  six  months  and 
two  years? 
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Excuses,  Excuses 


••  •  •• 
•  • 


CONSIDER  YOUR  NATIONAL 
DEALER  NETWORK. 

Consider  the  dots  connected. 


Now  we  can  design,  deliver  and  manage  a  data 


integration  system  that  brings  it  all  together. 


Converge  every  kind  of  business  network  -  dealers, 


brokers,  suppliers,  customers  -  across  platforms. 
All  on  the  strong,  reliable  backbone 
coast  to 


the  Oracle  Platform 

Database  lOg 
Application  Server  lOg 

Common  LDAP  directory 
Unified  security  model 
Common  administration 
Automated  space  management 


Engineered  to  work  together 


orade.com/pletfomri 
or  call  1.800.633.0753 
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Q&A-  Sun  s  John  Loiacono  on  the  cotnpany’s  plan  to  open-sourcc  Solans 
BearingPoint  raises  China  s  profile  as  an  offshore  outsourcing  destinatior; 
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■  KOftC4  f 


PsiflA  ^  Outsourcing  is  fraught  with  politicai  risks,  from  employee 
r  ClW  U I  angst  to  customer  dissatisfaction  and  PR  nightmares. 

Julia  wng  explains  how  to  manage  or  even  prevent  the  backlash. 

DamageControl 


Australian  Rrm  Wrestles  With 
Delays,  $11.5M  Overrun 


Problems  lead  to  rr 
overhaul;  PeopleSoft 
could  6ce  leg^  action 

BV  MARC  L.  SONOINI 

Problems  with  the  installation 
of  an  ERP  system  at  Australia- 
based  Crane  Group  Ltd.  have 
led  to  an  estimated  cost  over¬ 
run  of  $11.5  million  and  a  reor¬ 


ganization  of  the  company’s 
IT  operations.  The  difficulties 
may  also  lead  to  financial 
claims  against  PeopIeSoff  Inc., 
according  to  Crane  officials. 

No  legal  proceedings  have 
been  started  against  People- 
Soft,  a  Crane  spokeswoman 
said  last  week.  But  she  added 
that  the  company  is  exploring 
all  options  because  the  prob- 
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I  lems  and  delays  on  the  ERP 
I  project  caused  “quite  a  disrup¬ 
tion  to  Crane’s  business  over 
the  last  couple  of  years." 

The  spokeswoman  said 
Crane  has  spent  an  estimated 
$49  million  (U.S.)  on  the  proj¬ 
ect,  which  began  in  early  2001 
and  was  originally  due  to  be 
completed  last  year.  She  de¬ 
clined  to  specify  the  nature  of 
the  problems,  saying  only  that 
the  rollout  has  b^n  difficult 
and  that  Crane  and  Pet^leSoft 
are  engaged  in  discussions 
about  the  project. 

Crane,  ndiich  expects  to  re¬ 
port  revenue  of  ab^t  $L5  bil¬ 
lion  for  the  fiscal  year  that 
ended  June  30.  m^s  prod- 

ERP  Delays,  page  45  I 


E-mail  Glitch 
Exposes  Flaw 


In  Privacy  Law 

Inadvertent  release  of  count)'  cmplov’ec  data  to 
Swedish  company  leads  to  California  inquir) 


'  BVOANVERTOM 

IT  officials  in  Contra  Costa 
County,  Calif,  last  week 
launched  an  investigation 
into  how  hundreds  of  intemal 
e-mails  that  contained  private 
employee  data  ended  up  in 
the  in-box  of  a  Swedish  com¬ 
pany.  And  novi'  legal  analysts 
say  the  incident  has  ro'calcd 
major  weaknesses  in  Califor¬ 
nia’s  landmark  pri-  - 

vacy  law. 

The  investigation 
was  launched  after 
Comptaerworld  notified  the 
county  cm  July  6  that  Roben 
Carlesten,  managing  director 
of  Internet  company  Ord&Bild 
AB  in  Karlstad,  Sweden,  had 
produced  dozens  of  e-mails 
that  he  said  had  been  arriving 
at  his  Imemet.ac  domain  reg¬ 
ularly  for  the  past  two  years. 
Carlesten  said  he  responded 
to  the  senders  of  the  e-mails 


on  multiple  occasions  to  in¬ 
form  them  of  the  problem  but 
never  received  a  reply. 

In  addition  to  a  deluge  of 
administrative  communica¬ 
tions  from  the  county's  De¬ 
partment  of  Information  Tech- 
'  nology  and  its  human  re¬ 
sources  director,  the  e-mails 
contained  detailed  discussions 
and  attachments  related  to  the 
payroll  files  for  the 
county’s  Superior 
Court  as  well  as 
current  and  former 
employee  benefits.  Many  of 
the  e-maik  contain  the  names, 
employee  ID  numbers  and 
benefits  information  of  Supe¬ 
rior  Court  commissioners  and 
other  woricers.  Computerworfd 
broke  the  story  on  its  Web  she 
on  luly  6  [QuickUnk  47999). 

Tom  Whittington,  CIO  for 
the  Contra  Costa  County  gov- 
Privocy  Law,  page  45 
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Committee 

CT7V3n|  IT  gowaranca  and 
Fnrrrn  steering  cammMaas 
MUJitaiUl  vewiraiingadhar- 
enls  wch  as  Cathy  Brunt,  CTO  at 
Mbtate  hsurance.  But  recant  stud¬ 
ies  Meate  that  many  companies 
remain  hddoiils.  Thomas  HoffniM  • 
raporis  on  tha  adopthm  of  fonnal 
IT  govamanca  procaaan.  PAPE  6 
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■me  ultra  reliable  IBM  eServer  xSeiies  365  system  -  with  powerful  Intel"  Xeon'  processors  -  can  make  your  work,  and 
IT  selection  process,  easier.  With  three  levels  of  memory  protection  and  a  comprehensive  monitoring  of  key  components,  it’s 
all  about  uptime.  So  you  get  outstanding  reliability  when  running  mission-critical  ERR  collaboration  and  database  applications. 
1 1  The  works.  Management  Is  easier,  too.  You  can  have  around-tt^e-dock  remote  access,  on  demand.  And  system  status  can  be 
available  even  when  powered  off.  For  more  on  highly  available,  manageable  xSeries  servers,  go  to  iim«om/eserver/advantage 

_ s  reasons  more  and  more  businesses  are  turning  to  IBM  eServer  xSeries  systems  wilhliuel xion processors' 

Scale  1-16  W3y  with  select  ]  IBM  Oireclor  systems  Unux-ready  through  1  Mainframe-inspired  '[  24  7  365  optional  onstte 

models.  Pay  as  you  grow.  |  management  the  entire  line  i  lechnologies  [  hantware  support. 


The  right  management  should  do  more  than  just  protect. 

It  should  also  enable. 

eTrusf  Security  Management  Software 

With  eTrust  security  management  software,  your  information  isn't  just  safeguarded  from  internal  and  external  threats 
We  provide  authorized  customers,  partners,  and  employees  with  appropriate  access  that  can  help  your  business  grow. 
In  addition  to  securing  data,  eTrust  also  provides  a  single  view  of  your  security  environment,  so  you  can  make  real-time 
decisions  based  on  comprehensive  information.  If  you're  looking  for  ways  to  minimize  risk  while  maximizing  your 
potential,  or  to  get  a  white  paper,  go  to  ca.com/security. 
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IT  aneita  aqr  Mumt 
tWirtataMitalvfeiM 
tTpiwnimi  ■iiHa.Nii? 

10  Q2  software  tales  slump 

as  spending  by  U3.  users 
dips  in  June. 

10  SAP  and  MySQL  prepare  an 
upgrade  of  the  MaxDB  open- 
sotirce  database. 

12  Q&A:  Sun's  John  Loiacono 

discusses  plans  to  move  So¬ 
laris  to  an  open-source  model. 

12  Microsoft  gives  users  more 
options  for  support  through 
its  channel  partners. 

14  BearingPoint  boosts  China’s 
standing  as  a  possible  offshore 
outsourcing  venue. 

14  The  BBC  awards  Siemens 

a  $3.7  billion  IT  contract. 

16  E-voting  takes  a  hR  from  a 
California  judge. 

16  The  Pentagon's  IT  problems 

have  wasted  billions  of  tax¬ 
payer  dollars,  the  GAO  says. 


24  Case  Study:  Wireless  CftM 
Takes  to  the  Field.  Pitney 
Bowes’  new  wireless  field  ser¬ 
vice  system  provides  a  wider 
wireless  covera^  area  and 
more  access  to  customer  data. 

25  Simplifying  NAS  Manage¬ 
ment.  More  companies  are 
choosing  virtualization  tech¬ 
nology  to  consolidate  man¬ 
agement  of  multiple  network- 
attached  storage  systems. 

2B  Security  Manager's  Jownal: 
Four  Stops  to  a  Secure  Bud¬ 
get  Our  new  columnist  out¬ 
lines  a  strategy  for  convincing 
the  CFO  to  fund  IT  security 
projects. 

MillU6EMENT 


31  Damage  Control.  Backlash 
over  ol&hore  outsourcing  has 
triggered  productivity  and 
revenue  losses.  Here’s  bow 
to  control  the  damage. 

34  Managing  ‘RaaT  Rblis.  Risk 
management  is  an  idea  whose 
time  has  finally  come,  says 
Cutter  Consorthun  analyst 
and  author  Tom  DeMarco.  He 
explains  bow  to  embrace  risk 
and  reap  the  rewards. 

35  (WA:  Moving  Targets.  Com- 
panies  go  through  innovation 
stages,  so  IT  needs  to  provide 
the  right  help  at  the  right 
time,  says  Geoffrey  A.  Moore. 

36  Caranr  Watch.  How  to  land 
an  IT  job  in  today’s  market. 
Pius,  burning  the  midnight  oU 
in  Britain,  and  hot  summer 
readily  for  IT  execs. 


6  On  the  Mark:  Mark  Hall 
writes  that  a  movement  is 
afoot  to  get  you  to  dump  all 
of  your  proprietary*  Unix 
hardware. 

18  Maryfran  Johnson  says  deci¬ 
sions  to  send  IT  work  off¬ 
shore  will  remain  controver¬ 
sial  for  a  while,  but  better 
communication  can  help. 

16  Michael  H.  Hugos  looks  at 
five  key  skills  shared  by  all 
successful  systems  designers. 

19  Thornton  A.  May  sees  the 
keys  to  IT  success  in  the 
things  we  say.  think  and  do. 

29  Tommy  Peterson  warns:  If 
you  thought  pregnant  chads 
in  2000  were  ba^  wait  imril 
you  see  what  a  determined 
hacker  could  do  to  the  democ¬ 
ratic  process  this  fall. 

38  Bart  Perkins  rhinkg  that, 
rather  than  engaging  in  '‘des¬ 
peration  outsourcing."  compa¬ 
nies  are  better  off  investing  in 
a  sound  project  to  bring  a  bro¬ 
ken  IT  shop  back  to  life. 

46  Frankly  Speaking:  Frank 
Hayes  wonders  what  Contra 
Costa  County.  Calif.,  could 
have  done  to  keep  sensitive 
e-mail  from  going  astray.  Not 
much,  he  figures. 
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News  Briefe . 14 

Letters . 19 

IT  Careers . 99 

Company  Index . 44 

How  to  Contact  CW . 44 

Shark  Tank  . 46 


Howto  Launch  an  bitorat  Use  Poicy 

SECURITY :  Companies  can  benefit  in  a  num¬ 
ber  of  ways  if  tb^  set  rules  for  emplo)«e  In¬ 
ternee  use.  Jeff  Hughes  of  Bhie  Coat  Systems 
teQs  you  how  to  do  it  Cl  QbIcUMi  47IBR 

TvafarSuccaMUSMiiwRBOoMrias 

DISASTER  RECOVERY:  Data  loss  on  a  server 
can  affect  an  entire  company,  so  quick  and 
painless  restoration  is  crucial  Jim  Retnen 
of  Ontxack  Data  Recovery  offers  his  advice. 

OQiMUnk47S86 

ImifananWian  is  What  Mattes 

fT  MANMEMEIIT:  Seoirity  consultant  Ben 
Rothke  says  that  Does  fTMotterf  author 
Nicholas  G.  Carr  is  wrong  to  call  IT  a  com¬ 
modity.  O  OtricMMSTBOl 


worm  wars 

In  this  week's  Technology  section; 

As  now  worms  and  viruso 
appear  at  an  evcr-quickoning  pace 
companies  need  much  more  than 
a  traditional  perimeter  defense 
order  to  fend  them  off.  Page  21 


The  Coining  Robot  Revolution 

Also  In  this  weeks  Technology  section: 

Alter  spending:  decades  mostly  in  facto¬ 
ries,  robots  will  bejiin  playing:  rtdes  in 
homes  and  otfices,  experts  say.  Page  26 


IT  by 

Committee 

^  IT  governance 
*  committees 

-  t*  vary  in  their  ap* 
proaches,  and  many  companies 
don't  involve  their  top  execu¬ 
tives  -  or  even  have  such 
panels.  Page  6 

MIT  research  finds  a  correlation 
between  good  governance  and 
higher  profits.  Page  6 

IT  executives  say  Saitanes- 
Oxiey  isnl  a  big  factor  in  their 
IT  governance  efforts.  Page? 

10  Q2  software  sales  slump 

as  spendinj:  by  U.S.  users 
dips  in  June. 

10  SAP  and  MySQL  prepare  an 
upgrade  of  the  Ma.\l>B  open- 
source  database. 

12  Q&A  Sun's  John  Loiacono 

discusses  plans  to  move  St)- 
lari.s  to  an  open-source  model. 

12  Microsoft  gives  users  more 
options  for  support  through 
its  channel  partners. 

14  BearingPoint  boosts  China's 
standing  as  a  possible  offshore 
outsourcing  venue. 

1  The  BBC  awards  Siemens 

a  S3.7  billion  IT  contract. 

E-voting  takes  a  hit  from  a 
California  judge. 

The  Pentagon’s  IT  problems 

have  wasted  billions  of  tax¬ 
payer  dollars,  the  GAO  says. 


TECHNOLOGY 

24  Case  Study:  Wireless  CRM 
Takes  to  the  Field.  Pitney 
Bowes'  new  wireless  field  ser¬ 
vice  system  provides  a  wider 
wireless  coverage  area  and 
more  access  to  customer  data. 

25  Simplifying  NAS  Manage¬ 
ment.  More  companies  are 
choosing  virtualization  tech¬ 
nology’  to  consolidate  man¬ 
agement  of  multiple  network- 
attached  storage  systems. 

28  Security  Manager's  Journal: 
Four  Steps  to  a  Secure  Bud¬ 
get.  Our  now  columnist  out¬ 
lines  a  strategy  for  convincing 
the  CFO  to  fund  IT  security 
projects. 

MANA6EMENT 

31  Damage  Control.  Backlash 
over  offshore  outsourcing  has 
triggered  pix)ductivity  and 
revenue  losses.  Here’s  Im>\v 
to  control  the  damage. 

34  Managing  'Real'  Risks.  Risk 
management  is  an  idea  whose 
time  has  finally  come,  says 
Cutter  Consortium  analyst 
and  autht»r  Tom  DeMarco.  He 
explains  how  to  embrace  risk 
and  reap  the  rewards. 

35  Q&A:  Moving  Targets.  Com¬ 
panies  go  thri»ugh  innovation 
stages,  so  IT  needs  to  provide 
the  right  help  at  the  right 
time,  says  Geoffa'y  A.  Moiuv. 

36  Career  Watch.  How  to  land 
an  IT  job  in  today's  market. 

Plus,  burning  the  midnight  ml 
in  Britain,  and  hot  summer 
reading  for  IT  execs. 
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0  On  the  Mark  Mark  Hall 
writes  that  a  mtwement  is 
afoot  to  get  you  to  dump  all 
of  your  proprietary  Uni.x 
hardware. 

18  Maryfran  Johnson  says  doc! 
sions  to  send  IT  work  »itT- 
shore  will  remain  conirover- 
sial  for  a  while,  hut  bolter 
communication  can  help. 

18  Michael  H.  Hugos  hK>ks  at 
five  key  skills  shared  by  all 
successful  systems  designers, 

19  Thornton  A.  May  sws  the 
keys  to  IT  success  in  the 
things  we  say.  think  and  do. 

29  Tommy  Peterson  warns:  If 
you  thought  pregnant  chads 
in  2000  were  bad.  wait  until 
you  see  what  a  determined 
hacker  could  do  to  the  democ¬ 
ratic  process  this  tall. 

38  Bart  Perkins  thinks  that. 

rather  than  engaging  in  "de*s- 
peration  outsourcing."  compa¬ 
nies  are  belter  oiT  investing  in 
a  sound  project  tt>  bring  a  bn»- 
ken  IT  shop  back  to  life. 

46  Frankly  Sptidkinq  Frank 
Hayes  wonders  u  hat  Contra 
0>sta  County,  Calif..  a»uld 
have  done  to  keep  sensitive 
e-mail  fnim  g*>ing  astray.  Not 
much,  he  figures. 
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How  to  Launch  an  Internet  Use  Policy 

SErURITV  Companies  can  benefit  in  a  num¬ 
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ternet  use.  leff  Hughes  of  Blue  (aval  Systems 
tells  ymi  how  to  do  it.  O  OutekLink  47862 

Tips  for  Successful  Server  Recoveries 

niSeSTFR  Rf  COVtRV  Dau  liss  nn  a  siTivr 
can  jiTtx-t  an  entire  company.  si>  quick  and 
painless  a*s|or.ition  is  crucial.  ?im  Reinert 
ofDntrack  Data  kecovcA’ offers  his  advice 
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Impiementation  Is  What  Matters 

IT  WANAGEMfNT  Security  consultant  Ben 
Rothke  says  th.iT  iTrvs  IT  A  larfer.' author 
Nicholas  G.  Carr  is  w  rong  to  call  IT  a  com¬ 
modity.  O  QutekUnk  47801 
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IT  Governance  Is 
OntheHotS^t 

Committees  of  IT  and  business  execs  oversee 
spending  at  some  companies,  but  surveys  find 
lots  of  skeptics.  By  Thoir.ai,  Hoffman 


camra 


}  .Allstate  Insur- 

‘  ance  Co.  formed  a  eap- 

’'Pending  commit- 
tee  with  IT  ^rtuernance 
responsibilities  about  IK 

months  ago.  the  process  of 
rrit»riti/ing  IT  projects  t\  pi- 
cally  was  decided  by  "who¬ 
ever  spi'ke  the  loudest  or 
whoever  had  the  biggest 
checkbook."  said  (ihief  Tech- 
noK>gy  Oftlcer  Cathy  Brune. 

No%s  Brune  and  some  top 
.Allstate  executive's,  including 
the  chairman  .tnd  CFO  and  the 
chief  financial  oftlcer.  collec¬ 
tively  decide  how  to  prioritize 
1 1  inituitives  based  **n  busi¬ 
ness  needs.  -  Phey  help  me  de¬ 
cide  w  here  to  spend  our  mon¬ 
ey."  Hrune  said,  noting  ih.it  the 
new  approach  to  I  p  gover¬ 
nance  gives  the  business  e.xec- 
utives  a  better  understanding 
of  the  IT  spending  process. 

IT  g«»vemance  committees 
like  the  one  at  .Allstate  are  bt'- 
coming  m»*re  commonpbee  as 
companies  aim  to  better  align 
their  IT  operations  with  busi¬ 
ness  goals.  The  idea  behind 
such  committees  is  to  bring 
together  key  IT  and  business 
managers  and  give  them  joint 
responsibility  lor  making  deci¬ 
sions  about  technology  priori¬ 
ties  and  investments. 

But  the  specific  IT  gover¬ 
nance  techniques  being  used 
by  dlftereni  companies  vary 
widely,  according  to  more 
than  a  dozen  IT  managers, 
researchers  and  academics 
inien  iewed  for  this  article. 
Moreewer.  many  companies 
have  yet  to  adopt  governance 
pnicesses  that  include  direct 
input  about  IT  fn*m  CFOs, 
other  sv-nior  executive's  and 
board  members  —  j  situation 


that  some  analysts  think  could 
hamper  efforts  to  align  IT  and 
business. 

"Top  management  is  still 
n«»i  involved  enough  yet."  said 
<jary  Hardy,  technical  coordi¬ 
nator  at  the  IT  (iiwernance 
Institute  (ITCI)  in  Rolling 
Meadows.  111.  (!tOs  and  I'thcr 
high-level  e.xecutives  often 
recognize  1T\  importance  to 
their  companies,  he  said,  "but 
the  still  tends  to  drive  IT 
governance  initiatives  m«ire 
than  top  management." 

The  use  of  IT  governance 
committees  is  by  no  means 


Companies  that  don't  have  lor 
mal  IT  governance  committees 
might  want  to  take  heed  of  the 
following:  Businesses  with  su¬ 
perior  governance  practices 
generate  20*\)  greater  profits 
on  average  than  other  compa 
hies  that  share  similar  goals  of 
making  IT  spending  more  ef- 
fectrve  and  better  aligning 
technology  resources  with 
business  needs,  according  to 
an  MIT  study 

The  study,  conducted  by  the 
Center  for  Information  Sys¬ 
tems  Research  (CISR)  at  MIT’s 
Sloan  School  of  Management, 
examined  IT  governance 
processes  and  profitability  at 
256  companies  from  2001  to 
mid-2003.  The  findings  were 
published  last  month  in  a  book 
titled  IT  Goifern^nce:  How  Top 
Performers  Manage  IT  Deci¬ 
sion  Rights  for  Superior  Re- 
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univcrsiiL  In  a  survey  due  for 
I  relvMsc  this  mnnth  that  was 
conducted  for  the  I’l’CI  bv 


Prieewaterhou-seCoopers.  76" 

I  of  the  .T.T5  CEOs  and  CIOs 
who  responded  said  they’re 
I  aware  ot  IT  problems  that 
1  could  be  resolved  if  they  had  a 
formal  governance  framewurk. 
But  42".)  said  they  have  no 
plans  to  create  IT  gove  mance 
programs  involving  executive- 
level  steering  and  board-level 
strategy  committees. 

In  a  recent  online  survey  of 
I  about  200  IT  executives  and 
CEOs  at  companies  in  North 
America  and  Euaipe.  Mela 
tiroup  Inc.  found  that  less 
I  than  20"ii  o|  the  respondents 
hiive  set  up  corporate  or  I  F 
governance  committees  with 
lormal  memberships  and  char¬ 
ters  I  FiuickI.ink  47.^04 1.  Mean¬ 
while.  analysts  have  said  that 
they’re  aware  of  only  a  small 
number  of  companies  with  IT 
oversight  panels  that  include 
members  of  ihoir  boards  of  di¬ 
rectors  iQuickLink  4t>8'»2|. 

Even  companies  with  IT 
steering  c<»mmitiees  may  not 
be  fully  prepared  from  a  gov¬ 
ernance  standpoint  if  the  pan-  I 


IM 

M  At  a  high 
level,  we 
look  at  what 
business  needs 
to  accomplish 
and  how  we  pri¬ 
oritize  project 
deliverkiles. 

JAV  OARONER,  ClO  BMC  SOf  'WARE 

els  include  business  unit  man¬ 
agers  and  department  heads 
I  but  not  lop  corporate  execu¬ 
tives.  said  Rob  Austin,  a  fellow 
I  at  Cutler  Consortium  in  .Ar- 
j  lington.  Mass.,  and  a  professor 
,  at  Harvard  Business  Sch«K»l. 

^  Such  committees  "don't  aJ- 
I  dress  the  overarching  gover¬ 
nance  problem  at  an  e.xeeutive 
level."  Austin  said,  adding  that 


su/fs  (Harvard  Business 
School  Press). 

CISR  Direclor  Peter  Weill, 
who  helped  lead  the  study  and 
co-authored  the  book,  said 
companies  with  effective  IT 
governance  lend  to  have  joint 
decision-making  between 
business  and  IT  managers  on 
prioritizing  technology  projects 
and  other  key  issues 

But  Weill  noted  that  compa¬ 
nies  with  world-class  IT  gover¬ 
nance  techniques,  such  as 
Slate  Sireel.  United  Parcel 
Service  Inc.  and  insurer  and  fi¬ 
nancial  services  firm  USAA, 
often  use  complelefy  different 
approaches.  “I  think  the  lesson 
here  is  that  you  have  to  have 
governance  tailored  to  what 
you’re  trying  to  achieve."  he 
said. 

State  Street  CIO  Joe  Anton- 
ellis  said  he  hasn't  done  the 


kind  of  financial-return  analy¬ 
sis  that  the  CISR  did  to  gauge 
the  effectiveness  of  the  bank's 
IT  governance  model.  But  he 
thinks  State  Street's  gover¬ 
nance  processes  are  helping 
the  company  spend  its  IT  bud 
gel  more  effectively  and  en¬ 
abling  (t  to  earmark  more  mon¬ 
ey  for  projects  that  support 
business  initiatrves  aimed  at 
increasing  revenue. 

The  bank's  overall  IT  costs 
have  remained  flat  since  An 
tonellis  became  CIO,  while  its 
IT  workforce  is  23°^  smaller. 

In  addition.  State  Street  now 
invests  about  30“o  of  its  IT 
spending  on  new-revenue  proj¬ 
ects  and  uses  the  other  70“ti 
for  day-to-day  IT  operations. 
Antonellis  said  That's  an  im¬ 
provement  over  the  25*o/75“-fl 
spending  split  that  he  inherit¬ 
ed.  Antonellis  added  that  his 
goal  IS  to  push  IT  spending  re 
laled  to  new  revenue  opportu¬ 
nities  to  40°o  of  the  overall 
budget  by  the  end  ol  next  ye.ir 
-  Thomas  Hoffman 
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hii.irds  of  ditvciors  also  need  ,  I'hjtlle.  an  executive  vice  prcsi- 

to  be  involved  in  ovcrseeinjj  |  dent  in  the  companv  s  Key 
rr.  "It  seems  to  me  that  there’s  Technoh»fr>-  Services  Grtmp, 
a  tr.iin  wreck  due  sometime 
. .  where  inattentive  boards 


are  n<M  (!oin}i  to  kmnv  what  hit 
them  vs  hen  thev  have  an  I  T 
disaster."  he  said. 

.At  All-State,  busini^ss  units 
are  resptmsible  for  funding 
maintenance  and  upgrades  i>f 
their  own  applications.  Hut 
Brune  viid  IT  spending  is 
managed  at  a  group  level,  .md 
money  is  moved  anmnd  be¬ 
tween  units  as  needed.  The 
capital  allocation  committee, 
which  alst)  includes  represen¬ 
tatives  Irvtm  the  Noelhbnmk. 
in.-bjsed  insuaT's  two  main 
operating  units,  has  to  ap¬ 
prove  all  IT  projects  budgeted 
at  mvtre  than  S.>  million,  or  S2.> 
million  over  five  years. 

Klfetiive  JT  governance 
"makes  \ou  more  nimble 
abi>ut  what  you  do."  Brune 
said,  adding  that  Allstate's  ap¬ 
proach  helps  avoid  political 
infighting  that  can  shnv  down 
decision-making. 

Other  companies  haw  I'l’ 
governanee  goals  that  are  sim¬ 
ilar  to  the  ones  espvmsed  hy 
Brune.  But  they  h.ive  adopted 
sv>mewhat  dilTerem  laeiics  for 
aehiev  ing  their  obieetives. 

l-.irlier  this  year.  t'leveLind- 
based  KeyTorp  formed  a  tech¬ 
nology  advisory  bviard  that  in¬ 
cludes  (..Tl)  Robert  Riekvri. 
the  bank's  ITO  and  the  he.id 
of  each  business  unit,  'nie 
bvxird  meets  regularly  10  pri¬ 
oritize  and  manage  the  Sliio 
million  in  IT  project  spending 
planned  for  this  year,  said  Bob 


In  the  past.  IT  governance 
at  KeyCorp  consisted  i>l  the 
bank’s  CK)  measuring  IT 
spending  by  line  of  business. 
Inutile  said.  By  last  year,  the 
prioritization  of  IT  projects 
was  di'ne  “more  aj  hoe  at  the 
civrporate  level."  he  noted. 
The  more  structured  gover¬ 
nance  process  mnv  in  place 
ensures  that  KeyCorp  has  .in 


A  Governance 
Framework 

ur 

Provides  insight  and 
advice  to  the  board  of 
directors  on  IT  topics 
Gives  direction  on 
IT  strategy  to  senior 
management 
Can  indude  board 
members,  key  execu¬ 
tives  and  external  IT 
experts 


Makes  dedsions  on  IT 
spendirvg  levels,  project 
plans  and  other  opera- 
tiorts  issues 
Oversees  day-to-day 
management  of  projects 
and  the  delivery  of  IT 
services  to  end  users 
Can  inplude  senior  ex¬ 
ecutives.  business  unit 
leadereand  IT  managers 


explicit  approach  for.illoeai- 
ing  IT  funding.  I>utile  s.nd. 

When  lay  Gardner  became 
ClOat  BM('  Sijftvvare  Ine. 
three  years  ago.  he  discovered 
that  the  Housum-based  mUT 
ware  vendor  had  12«  I  I  proj¬ 
ects  in  progress,  manv  «»f 
which  had  no  busini'ss  twvners 
or  a*ium-on-inveMment  eriie- 
ria  aitached  to  them,  (jardner 
spurred  the  creation  «»f  an  in¬ 
formal  eommiltw  to  oversee 
IT  decision-making,  and  BMC 
made  the  group  .1  formal  entitv 
last  September 

The  IT  executive  board 
meels  at  le.ist  monthiv.  but  be¬ 
tween  February  and  May.  it 
met  every  iwo  weeks  beeausi- 
"we  had  a  lof  of  prt»jeels  lo 
prioriiiz.e.’  Gardner  s.iid.  The 
lH»ard  includes  seniitr  man¬ 
agers  from  e.ich  department. 
repri>senijtive  from  BMC's  in¬ 
ternational  »»perations  and  its 
chief  aect)unting  officer,  (iard- 
ner  and  BMC's  director  of  IT 
operations  are  alsti  members. 

"At  a  high  level,  we  livtik  at 
w  h.it  the  busint-ss  needs  to  ac¬ 
complish  and  how  we  pritiri- 
tize  project  deliverables."  said 
<»ardncr.  1  he  memix’rs  »»t  the 
b«*ard  "not  only  m.ike  the  de¬ 
cisions.  but  they  come  with 
their  elwckboivks."  he  added. 

Kaeh  of  the  six  business 
units  at  Wyeth,  a  maker  of 
phiuinaeeuticals  and  other 
health  eatx‘ pniduets.  has  its 
•  *wn  M'  steering  L-ommittce 
with  a  liaiMm  frvmi  the  IT'  de¬ 
partment.  But  somv*  Lirge  proj¬ 
ects  are  vetted  by  an  execu¬ 
tive-level  i-ommittec  that  in¬ 
cludes  CIO  Bruce  Fadcni.  plus 
Madison.  N.).-hasi*J  \\  wih's 
CFOand  CFOand  the  man- 
.tgers  oiits  six  businv*ss  units. 

For  example,  if  Wyeth’s  con¬ 
sumer  health  care  products 
group  lias  25  I  r  projeet.s  plot 
led  out  over  the  ciHirse«*f  .i 
vear.  the  executive  coniniitiee 
will  monitor  the  largest  iwti  or 
ihnv.  F'adem  said.  F'ven  m». 
much  of  the  accoutuabiliiv  f««r 
the  rr  projects  rtsidi's  within 
the  busirti’ss  units  themselves. 

"What  we’ve  d»»ne  Is  put  the 
prioriij/.iti.inoi  IT  invest 
nients  in  the  h.inds  of  our 
business  managers."  Fadem 
Slid-  "To  think  that  senior 
management  can  sit  in  .1  cimi- 
miitec  mwiing  and  rank  proj- 


rr  Execs  Downplay  Role  of 
Saitanes-Oxley  in  Governance 


The  relalrvely  low  levels  of  inter¬ 
est  m  creating  IT  governance 
cornmniees  found  by  the  ITQ 
and  Mela  Group  surveys  are 
alarming,  considering  ihe 
heightened  emphasis  that  Ihe 
Sarbanes-Oxtey  Acl  has  {to»d 
on  overall  corporate  gover¬ 
nance.  ^  Adrian  Bowles, 
director  of  education  and  re¬ 
search  at  the  IT  Conplance 
Insirtute  in  Seattle 
Bowles  said  he  expects  atti¬ 
tudes  to  change  as  the  dead¬ 
lines  lor  complying  with  the 
financial  reponxig  law  begin  to 
draw  near  Xenairty,  more 
companies  are  trying  to  gel 
serous  about  tT  governance 
wforeas  tour  ot  five  years  ago. 
not  a  lof  ol  people  were  talking 
about  It."  he  said  ‘As  we  get 
into  crunch  time  for  Sarbanes- 
Oxtey  (compliancel.  we  re  go¬ 
ing  to  see  rnore  formal  evi¬ 
dence  of  IT  governance " 

Bui  none  of  Ihe  IT  execu¬ 
tives  interviewed  for  ihQ  story 
said  Sarbanes-Oxtey  olayed  an 
irstrumenlal  role  m  dnvir^  their 
companies'  IT  governance  ef¬ 
forts  Instead,  they  ded  factors 
such  as  a  desve  lo  better  align 
IT  strategies  with  the  needs  of 
business  units 
MasterCard  International 


evtx  in  nrdur  juNt  i>n't  prjcii- 
cal-  Tlicv  might  know  ihoiop 
rivo  iTiicria  fi»r  a  pn»|is  t.  but 
not  K-vond  lh.ir.~ 

Dnv  oi'iho  companies  th.ii 
aiialvsts  cite  a>  a  k-adcr  m  IT 
govcnumcc  is  Si.iti.-  sinvi 
(!orp.,  a  financial  si-rv  ii-i-s  firm 
in  Ikivion.  Ni-arlv  three  \c.4r« 
agv«.  State  Street  formed  .in 
1 1  exck-utive  i-i>uoctl  that  v*ut 
rentl>  im.-liides  cTi )  liti-  \n- 
foiielliv  the  comp.tnv\  I'l  1 1. 
its  V  ice  eh.iintun  and  ilie 
iuMdsol  iiN  three  biisifK*s> 
units.  I  hegroup  nuvtsevep 
six  weeks  t»*  rei  iew  1 1  *.pend 
ing  levels  and  hn'k  .it  liow 
State  Mreet's  n  worker- 
are  distrihuied  among  proj- 
eels.  .AnioneHis-jid. 

VN'hen  .Anitmellis  Kvame 
GIt,>  18  months  ago,  he  formed 


Inc  has  an  IT  sleenng  commii- 
tee  that  meets  every  sn  weeks 
or  so  and  includes  IT  represen¬ 
tatives  and  business  managers 
from  each  of  the  fotx  regions 
where  the  Purchase.  NY  - 
based  con^iany  operates  The 
committee  categorizes  pro¬ 
posed  IT  projects  and  then 
ranks  them  m  importance 
based  on  business  needs  and 
projected  paybacks,  said 
James  Whalen,  senior  vice 
prcsideni  of  finance  and  ad¬ 
ministration  at  MasterCard's 
gtobaf  technology  organization 
MasterCard  has  changed 
from  being  a  member-owned 
company  to  one  that  s  putHcfy 
traded  maeasmg  the  amount 
of  fmanoai  dsObsures  it  needs 
lo  make  But  Sarbanes-Oxtey 
"isn’t  a  pnnary  driver"  for  ns  IT 
governance  efforts  Whalen 
said.  IT  governance  woukJ 
have  become  rnore  importani 
at  MasterCard  even  if  the  law 
never  came  mio  play,  accord¬ 
ing  to  Whalen 
"I  think  this  6  tangential  (to 
Saibanes-O^ley]  because  our 
•nvestmenl  deoiohs  are  sig- 
nificaoUy  more  transparent  and 
reoure  a  SiQniticanl  amount  of 
communicarions.’  he  said. 

'  Thomas  Hofirmn 
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FT  Governance  b 
OntheEiotS^ 

Coniinitteesofrr  and  business  execs  oversee 
spending  at  some  companies,  but  surveys  find 
krtsof  skeptics.  By  Thomas  Hoffrnan 


Before  Allstate  Insur¬ 
ance  Ca  formed  a  cap¬ 
ital  spending  commit¬ 
tee  with  IT  governance 
responsibilities  about  18 
months  ago,  the  process  of 
prioritizing  IT  projects  typi¬ 
cally  was  decided  by  “who¬ 
ever  spoke  the  loudest  or 
whoever  had  the  biggest 
checkbook."  said  Chief  Tech¬ 
nology  Officer  Cathy  Brune. 

Now  Brune  and  some  top 
Allstate  executives,  including 
the  cbairman  and  CEO  and  the 
chief  fmancial  officer,  collec¬ 
tively  decide  how  to  prioritize 
IT  initiatives  based  on  busi¬ 
ness  needs.  “They  help  roe  de¬ 
cide  where  to  spend  our  mon¬ 
ey,"  Brune  said,  noting  that  the 
new  approach  to  IT  gover¬ 
nance  gives  the  business  exec¬ 
utives  a  better  understanding 
of  the  IT  spending  process. 

IT  governance  committees 
like  the  one  at  Allstate  are  be¬ 
coming  more  commonplace  as 
companies  aim  to  better  align 
their  IT  operations  with  busi¬ 
ness  goals.  The  idea  behind 
such  committees  is  to  bring 
tc^ther  key  IT  and  business  I 
managers  and  give  them  joint 
responsibility  for  making  deci¬ 
sions  about  technology  priori¬ 
ties  and  investments. 

But  the  specific  IT  gover-  i 
nance  techniques  being  used  I 
by  different  companies  vary  I 
widely,  according  to  more 
than  a  dozen  IT  managers.  I  i 
researchers  and  academics  I 
interviewed  for  thk  article.  I 
Moreover,  many  companies  I  i 
have  yet  to  adopt  governance  I  | 
processes  that  include  direct 
I  input  about  rrirom  CEOs, 
other  senior  executives  and  ! 
board  members  —  a  situation  !  I 


I  that  some  analysts  think  could 

hamper  efforts  to  align  IT  and 
business. 

“Top  management  is  still 
not  involved  enot^  yet,"  said 
Gary  Hardy,  technical  coordi¬ 
nator  at  the  IT  Governance 
Institute  (ITGl)  in  Rolling 
Meadows.  Ill.  CEOs  and  other 
h^-level  executives  often 
recognize  ITs  importance  to 
their  companies,  he  said,  “but 
the  CIO  still  fends  to  drive  IT 
governance  initiatives  more 
than  top  man^emenL" 

The  use  of  IT  governance 
committees  is  by  no  means 


I  I  ||  ...  r,  ,1 

■-1|||MI  ]  ■  I  I,  I  I,  I  ,  ,  I 

t'-  '  ■  •'  'I'.VI  r  ■■  t'  .  .  I 

I'l'-  *'M'  •  if.  ,,  , 


universal  In  a  survey  due  for 
release  this  month  that  was 
conducted  for  the  ITGI  by 
PricewaterhouseCoopers.  76% 
of  the  335  CEOs  and  CIOs 
who  responded  said  they’re 
aware  of  IT  problems 
could  be  resolved  if  they  had  a 
formal  governance  framework. 
But  42%  said  they  have  no 
plans  to  create  IT  governance 
programs  involving  executive- 
level  steering  and  board-level 
strategy  committees. 

In  a  recent  online  survey  of 
I  about  200  IT  executives  and 
CFOs  at  companies  in  North 
America  and  Europe,  Meta 
Group  Inc.  found  that  less 
than  20%  of  the  respondents 
have  set  up  corporate  or  IT 
governance  committees  with 
formal  memberships  nnd  char¬ 
ters  [QuickLink  47304 J.  Mean¬ 
while.  analysts  have  said  that 
they’re  aware  of  only  a  small 
number  of  companies  with  IT 
oversight  panels  that  include 
members  of  their  boards  of  di¬ 
rectors  [QuickLink  46892J. 

Even  companies  with  IT 
steering  committees  may  not 
be  fully  prepared  from  a  gov¬ 
ernance  standpoint  if  the  pan- 


nAtahigh 
level,  we 
look  at  what 
business  needs 
to  accomplish 
and  how  we  pri¬ 
oritize  project 
deliverables. 

JAY  eARONER.  CIO.  6MC  SOFTWARE 

els  include  business  unit  man¬ 
agers  and  department  heads 
but  not  top  corporate  execu¬ 
tives.  said  Rob  Austin,  a  fellow 
at  Cutter  Consortium  in  Ar¬ 
lington.  Mass.,  and  a  professor 
at  Harvard  Business  School 
Such  committees  “don’t  ad¬ 
dress  the  overarching  gover¬ 
nance  problem  at  an  executive 
level"  Austin  said,  adding  that 
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TooeKoensive 

Lack  otfenuired  skills 

Formal  solutions  *VQn'|  work 

V 

No  IT  problems  to  fix 

Company  is  loo  small 

Too  difficult  to  tmpietnent 

Others 

to  be  involved  to  overseeing 
IT.  “It  seems  to  me  that  there’s 
a  train  wreck  due  sometime 
. .  where  inattentive  boards 
are  not  going  to  know  what  hit 
them  when  they  have  an  IT 
disaster.”  he  said. 

At  Allstate,  business  units 
are  responsible  for  funding 
maintenance  and  upgrades  of 
their  own  applications.  But 
Brune  said  IT  spending  is 
managed  at  a  group  level,  and 
money  is  moved  around  be¬ 
tween  units  as  needed.  The 
capital  allocation  committee, 
which  also  includes  represen¬ 
tatives  from  the  Northbrook. 
lU.'based  insurer’s  two  main 
<^>erating  units,  has  to  ap¬ 
prove  all  IT  protects  budgeted 
at  more  than  SS  million,  or  S25 
million  over  five  years. 

*■  Effective  IT  governance 
“makes  you  more  nimble 
about  what  you  do."  Brune 
said,  adding  that  Allstate’s  ap¬ 
proach  helps  avoid  political 
infighting  that  can  slow  down 
decision-nuking. 

Other  companies  have  IT 
governance  goals  that  are  sim¬ 
ilar  to  the  ones  espoused  by 
Brune.  But  they  have  adopted 
somewhat  different  tactics  for 
achieving  their  obfectives. 

Earlier  this  year.  Cleveland- 
based  KeyCorp  formed  a  tech¬ 
nology  advisory  board  that  in¬ 
cludes  CTO  Robert  Rickert. 
the  bank's  CFO  and  the  head 
of  each  business  unit.  The 
board  meets  r^lariy  to  pri¬ 
oritize  and  manage  the  SIOO 
million  in  IT  protect  spending 
planned  for  this  year,  said  Bob 


Ehitile,  an  executive  vice  presi¬ 
dent  in  the  company’s  Key 
Technology  Services  Group. 

In  the  past.  IT  governance 
at  KeyCorp  consisted  of  the 
bank’s  CFO  measuring  IT 
spending  by  line  of  business. 
Dutile  said.  By  last  year,  the 
prioritization  of  IT  protects 
was  done  "more  ad  hoc  at  the 
corporate  level,*  he  noted. 

The  more  structured  gover¬ 
nance  process  now  in  place 
ensures  that  KeyCorp  has  an 


AGovemance 

Framework 

IT  STRATEGY  COMMITTEE 


•  ProviteiniigMind 
•(Met  to  the  board  of 
dimclors  on  IT  topics 


■Gwosdroctionon 

fTstratogytoaontor 


•  Can  indutt  board 
mambirs.tay«Mcu- 
dvosandartamallT 
oxporls 

irSTEERWQCOMMTTTEE 


•  Mohis  dodsionB  on  IT 
spen(lnatovalK,prQtoct 
plans  and  ofhsr  opera¬ 
tions  iSM 


■  Overseas  daiMo*d«ir 
managamsnl  of  proiom 
andthedolysfyoffT 
sorvieestoondiMra 


oConbidudsasniorei- 
scidhm,  businoss  unit 
Isedors  and  IT  msnaoors 
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explicit  approach  for  allocat¬ 
ing  IT  funding.  DuiUc  said. 

When  Jay  Gardner  became 
CIO  at  BMC  Software  Inc. 
three  years  ago,  he  discovered 
that  the  Houston-based  soft¬ 
ware  vendor  had  128  IT  proj¬ 
ects  in  progress,  many  of 
which  had  no  business  owners 
or  retum-on-investment  crite¬ 
ria  attached  to  them.  Gardner 
spurred  the  creation  of  an  in¬ 
formal  coirunittee  to  oversee 
IT  decision-making,  and  BMC 
made  the  group  a  formal  entity 
last  September. 

The  IT  executive  board 
meets  at  least  monthly,  but  be¬ 
tween  February'  and  May,  it 
met  every  two  weeks  because 
“we  had  a  lot  of  projects  to 
prioritize."  Gardner  said.  The 
board  includes  senior  man¬ 
agers  from  each  department,  a 
representative  from  BMC's  in¬ 
ternational  operations  and  its 
chief  accounting  officer.  Gard¬ 
ner  and  BMC’s  director  of  IT 
operations  are  also  members. 

"At  a  high  level,  we  look  at 
what  the  business  needs  to  ac¬ 
complish  and  how  we  priori¬ 
tize  project  deliverables."  said 
Gardner.  The  members  of  the 
board  “not  only  make  the  de¬ 
cisions.  but  they  come  with 
their  checkbooks."  he  added. 

Each  of  the  six  business 
units  at  Wyeth,  a  maker  of 
pharmaceuticals  and  other 
health  care  products,  has  its 
own  IT  steering  committee 
with  a  liaison  from  the  IT  de¬ 
partment.  But  some  laige  proj-  i 
ects  are  vetted  by  an  exccu-  I 
tive-level  committee  that  in¬ 
cludes  CIO  Bruce  Fadem.  plu< 
Madison,  N.J.-based  Wyeth’s 
CEO  and  CFO  and  the  man¬ 
agers  of  hs  six  business  units. 
For  example,  if  Wyeth's  con 
'  Sumer  health  care  products 
group  has  25  IT  projects  plot¬ 
ted  out  over  the  course  of  a 
year,  the  executive  committee 
will  monitor  the  largest  two  oi 
three.  Fadem  said.  Even  so, 
much  of  the  accountabilit)'  for 
the  IT  projects  resides  within 
the  business  units  themselves. 

“What  we’ve  done  is  put  the 
prioritization  of  IT  invest¬ 
ments  in  the  hands  of  our 
business  managers."  Fadem 
said.  “To  think  that  senior 
management  can  sit  in  a  com¬ 
mittee  meeting  and  rank  proj- 


IT  &ecs  Downplay  Role  of 
Sarbanes-Oxtey  in  Govemitfice 


TherclalMjiylowlevelBofiriler- 
est  in  oealino  IT  giMemanoe 
cornmttees  found  bi  the  IT6I 
and  Meta  6rai9  ate 
afarTTino.considBnnglhe 
heighlenad  emphase  thaf  the 
SarbaneeOidey  Ad  has  placed 
on  oveni  oorpotato  gover¬ 
nance,  said  Adrian  Bowles, 
diredorafeducationandie- 
seafch  al  the  IT  Cotnpiance 
institulenSeenie 
BoMessatoheetoectsatti- 
tudestochangeasthedead* 
tarn  for  compiling  with  ihe 
finanoal  reporting  taw  begin  to 
draw  near.  "Certainly,  more 
companies  ate  trying  to  gel 
serous  about  IT  governance, 
whereas  lour  or  live  years  ago. 
not  a  tot  ol  people  were  laigng 
about  1."  he  sad.  *As  we  gel 
into^crunch  tine  lor  Sarbaros- 
Odey  Icompiance].  we'te  go- 
ogtoseemorefoimalevi' 
dooe  of  rr  governance ' 
BulmneollhefTeiecu- 
tMS  nteneewed  for  this  story 
sard  Sorbanes-Oxiey  play^  an 
mstnmentai  role  to  d^  thee 
companies’ fT  governance  el* 
forte.  Instead,  they  dtod  fat%vs 
sud)  as  a  desve  to  better  aign 
IT  strategies  with  toe  needs  of 
business  unite 
MasterCard  tolemational 


ects  in  order  just  isn't  practi¬ 
cal.  They  mi^t  know  the  lop 
five  criteria  for  a  project  but 
not  beyond  that." 

Ooe  of  the  companies  that 
analysts  cite  as  a  leader  in  IT 
gov-ernance  is  State  Street 
Corp..  a  financial  services  firm 
in  Boston.  Nearly  three  years 
ago,  State  Street  formed  an 
IT  executive  council  that  cur¬ 
rently  includes  CIO  foe  An- 
tonellis.  the  company's  CEO, 
its  vice  chairman  and  the 
heads  of  hs  three  busincs.<i 
units.  The  group  meets  every 
six  weeks  to  review  IT  spend¬ 
ing  levels  and  look  at  how 
State  Street's  3i,200  IT  workers 
are  distributed  among  proj¬ 
ects.  Antonellis  said. 

When  Antonellis  became 
CIO  18  months  ago,  he  formed 


^  toc  hasanlTstoafingcomnvi' 
tee  that  meets  ««ry  SB  weeks 
orso  and  indudas  rr  rapresan- 
tatMs  and  business  managers 
from  each  of  the  toia  legtons 
where  the  fWi88a.N.Y.- 
based  company  operates.  The 
commaiee  cMegorizBs  pro¬ 
posed  IT  projacteandtoM 
'ante  them  to  anportne 
based  on  bustoeas  needs  and 
projected  paiibad&.saKl 
James  Wlhai^serHor  wee 
prasident  of  Inanoe  and  ^ 
mtoBtrabon  81  MasleiCanf 5 
glotMl  technology  organeahon 
MasterCard  htt  dongad 
horn  bang  a  member-owned 
cornpany  to  one  toWTs  pubbdy 
traded,  tocreasng  toe  amount 
of  ftnandal  dBdoautes  a  neerto 
tomaka  ButSarbanesKMey 
Isn't  a  pnmery  driver' lor  its  IT 
governance  etiorte  Whalen 
said.  IT  governance  would 
hm«  become  more  ffDportant 
at  MasterCard  even  If  the  law 
never  came  nio  play,  accord* 
ngloWhatan. 

1  think  this  s  tangertoal  [to 
Sarbanc-Oidey].  because  our 
tovesbnant  decstons  are  $to- 
nAcandy  rnore  Ifansparant  and 
reqilre  a  agnlficanl  amouil  ol 
commuracatorte' he  sad. 

>  ThomasHofinan 


an  office  of  IT  strategy  and 
governance  within  State 
.Street's  IT  department.  The 
strategy*  and  governance  of¬ 
fice.  which  is  run  by  his  chief 
of  staff  sets  internal  technical 
standards  and  oversees  every¬ 
thing  from  rr  archiiecrure 
decisions  to  technology  risk 
management  procedures. 

Despite  State  Street's  two- 
pror^d  strategy  for  governing 
IT.  Antonellis  said  the  fins 
continues  to  wrestle  with 
thorny  issues  such  as  how  to 
migrate  the  governance  model 
to  its  overseas  divisions. 
That’s  a  challenge.”  he  said, 
adding  that  Sutc  Street  hopes 
to  ease  the  process  by  stan¬ 
dardizing  giobaliy  on  develop¬ 
ment  tools  from  IBM's  Ratio¬ 
nal  Software  uniL  fk  4BQ25 
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AT  DEADLINE 


Sprint  Taps  IBM 
FwMorelTWbrit 

Sprint  Corp.  armouncad  a  five- 
yaar  IT  servieas  daal  with  BM 
that  Bxpands  tha  snpa  of  an  ini¬ 
tial  aoraaniant  the  twa  cocnpaniM 
signed  In  Septwnbar.  Under  the 
new  contract.  wMch  Is  valued  at 
more  than  S400  mWon.  IBM 
SlohalServleeswiltateoverap- 
phcatton  development  and  main¬ 
tenance  on  eenw  Sprint  aystsras. 
About  tOOO  n  worhars  will  trans¬ 
fer  to  IBM  as  part  of  the  deal 


SAPSawHWifl 

TopQ2Porecast 

S«P  M  KM  it  «HI  raport  Mcoid- 
iMitw  manui  ol  ■fenl  SU  H- 
■on.  u|i  9%  from  Itw  iw«v9tr 
■ml  Old  rigMy  mora  than  Hnan- 
dil  anlyai  had  miaclid.  Scdt- 
«ara  Bcanaa  talM  should  IMal 
S814  odHon.  a  15%  incrBaao  om 
last  loar's  sacand  guaitar.  SAP's 
shoidng  it  at  caotrast  to  unndngs 
tv  othar  todtanra  tondon  that 
thah  foautts  uitl  bo  hmor  than  as* 
pactsd  (laa  stoiy.  pags  10). 


Mozia  Issues  Fn 
To  Windows  Users 

The  Mozila  Foundation  issuad  a 
soflwara  patch  daeignad  to  plug  a 
sacurily  heto  that  could  affect 
toors  who  run  Kb  open-eourca 
Mozila  Applieation  Suite.  Fhotin 
btoanar  and  Thundefhhd  g-maa 
chant  on  Wlndoais  tystama.  lha 
patch  liaaUat  uaa  of  tha -shall:' 
oEtamal  protocol  handar,  which 
attochancoiddaiploiltoninma- 
Idcuo  coda.  Usnn  of  Umn  and 
Machiuah  tystonis  annl  at  riak. 
the  hicndalion  said. 

Short  Takes 

A  Catfemie  iudge  approved  the 
$t1  MIton  setttontent  of  a  dass- 
actioo  towndt  Med  in  that  state 
against  MK»OSOn  COUP,  over 
its  pricing  polctos  [QuiekLMi 
357T1] ....  PEOPLESOFT  WC.  up¬ 
graded  the  manufacturing  asset 


prtooOne  Ins  of  bustoeae  appBca- 
tfsne  tor  midBizs  uoers. 
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HOT  TECHNOLOOV  TRENDS,  NEW  PRODUCT 
NEWS  AND  INDUSTRY  GOSSIP  BY  MARK  HAU 
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Reach  Path  to 
Unux  Nirvana’. . . 

. . .  will  I  sfcMwiQ  tool  for  dsto  csntor.  That’s  the  message 
from  major  software  vendors  that  have  jumped  on 
the  information  life-cycle  management  bandwagon. 
SAP  AG  will  release  an  ILM  product,  possibly  this 
summer,  based  on  technology  from  OuterBay  Tech¬ 
nologies  Inc.  And  Sybase  Inc.  in  Dublin,  Calif.,  has 
just  begun  ofterii^  Outer- 


Bay’s  ILM  technology,  joining 
PeopleSoft  Inc.,  Oracle  Corp., 
EMC  Corp.  and  other  compa¬ 
nies  anxious  to  get  users  to 
migrate  their  dusty  data  ftom 
high-priced  proprietary 
servers  to  cheaper  Linux  ma¬ 
chines.  Bui  Michael  Howard, 
CEO  of  Cupertino.  Calif.- 
based  OuterBay,  thinks  these 
software  giants  want  to  prod 
you  toward  "a  Unux  nirvana." 
where  even  your  pricey  pro¬ 
duction  machines,  not  just 
the  ones  with  archived  data, 
are  low-cost,  commodity  Lin¬ 
ux  boxes.  Howard  claims  the 
software  vendors  are  discov¬ 
ering  that  their  proditcts  run 
plenty  fast  on 
Linux  systems 
I  once  the  old 
data  has  been 
moved  else- 
I  where,  so 
I  they're  en- 
I  couragingyou 
to  dump  vir- 
I  tualJy  all  of 
I  your  propri¬ 
etary  Unix 


systems.  “For  software  ven¬ 
dors.  every  dollar  you  take 
away  from  hardware  procure¬ 
ment  leaves  you  more  to 
spend  on  software,"  he  says. 

A  diabolical  plot?  Or  a  gift 
from  heaven? 

Linux  Lavers  Should 
Forget  Feud  WHh... 

...  Windows  and  think  above  and 
betow  the  oporating  system. 

That’s  the  advice  from  Tim 
O’RciUy.  CEO  of  O’ReiUy  Me¬ 
dia  Inc.  in  Sebastopol,  Calif. 
The  publisher  of  open-source 
books  and  the  impresario  of 
the  O'Reilly  Open  Source 
Convention  being  held  later 
this  month  in  Portland.  Ore., 
argues  that  by  emphasizing 
the  operating  system  strtiggle, 
open-source  zealots  overlook 
opportunities  to  build  suc- 
cessftjl  business  alternatives 
to  proprietary  technologies. 

He  points  to  Google,  Ama- 
zoiLcoro  and  other  successful 
Internet  businesses  that  are 
built  on  top  of  Linux,  as  well 
as  IndianapoUs-based  hard¬ 
ware  maker  Progeny  Linux 


Systems  Inc.,  which  builds  its 
business  below  the  operating 
system.  "A  lot  of  the  Linux 
community  is  Fixated  on  beat¬ 
ing  Microsoft."  he  says.  “Bur 
value  is  moving  up  and  down 
the  stack,  as  these  companies 
show."  In  contrast  to  what 
was  written  here  two  weeks 
ago  [QuickLink  47772J. 
O’Reilly  thinks  the  desktop 
opportunities  for  Linux  are 
alive  and  well.  Especially 
with  Novell  Inc.’s  purchase  of 
SUSE  and  Ximian.  which  en¬ 
ables  the  Orem,  Utah-based 
company’s  brand-name 
recc^ition  in  the  enterprise 
to  be  used  as  ammo  in  the 
desktop  wars. 

IT  Departments  Wony 
That  Chargeback . . . 

...  systems ’\«M  siposs  them 
much  more  Meniely,*'  says 
Richard  Simons,  chief  operat¬ 
ing  officer  at 
MBG  in  New 
Yoric  Once  in¬ 
ternal  cus¬ 
tomers  icam 
the  minutiae 
of  bow  much 
IT  is  charging 
them,  they 
have  critical 
data  by  which 
to  measure  IT 
against  exter¬ 
nal  ofTeriogs.  However,  the 
greater  the  detail  Simons  ar¬ 
gues.  the  less  time  CIOs  will 
waste  in  acrimonious  meet¬ 
ings  justify  ing  budget  assess¬ 
ments.  “Breaking  our  the 
costs  shows  the  value  users 
get,*  he  says.  “Visibility  is 
what  helps  keep  IT  honest." 
MBG  offers  tools  for  detailing 
everything  from  IT  to  tele¬ 
communications  charges.  In 
the  latter  category,  telcos 
have  cut  delivery  costs  nearly 
to  the  bone,  so  they’re  look¬ 
up  to  automate  on  business 
processes  using  XML,  he  says. 


business 
process  sav¬ 
ings  that  Ab¬ 
erdeen  says 
telcos  can 


Automate  MuMsoiiice 
Infonnatian . . . 

...  workflow  in  a  Mgh-vQfejme 
•mdroomanl  w«i  IntarchMigs. 


a  new  product  from  Captaris 
Inc.  in  Bellevue,  Wash.  Set  to 
ship  the  first  week  of  Septem¬ 
ber,  .Net-based  Interchange 
takes  vast  numbers  of  files, 
like  e-mails,  (axes  and  spread¬ 
sheets.  and  routes  them  to  the 
appropriate  recipients,  tracks 
their  progress,  handles  excep¬ 
tions  and  delivers  reports  to 
management  on  workflow 
status.  Pricing  will  start  at 
$20,000. 

GIS  Data  Shifts 
IT  Landscape... 

...  lor  loob  in  the  Md.  Today's 
modern  civil  engineers  plant 
stakes  equipped  with  global 
positioning  systems,  and  this 
year  Caterpillar  Inc.  made 
GPS  standard  on  all  of  its 
earth-moving  equipment,  ob¬ 
serves  Chris  Bradshaw,  vice 
president  of  the  information 
solutions  divisions  at  Auto¬ 
desk  Inc.  in  San  Rafael,  Calif. 
He  says  these  are  only  some 
of  the  changes  occurring  in 
geographic  information  sys¬ 
tems  that  are  forcing  IT  to 
rethink  the  way  it  outfits  sys¬ 
tems  deployed  in  the  Field  as 
well  as  the  way  the  data  gets 
processed  back  in  the  data 
center.  First.  Bradshaw  points 
out,  real-time  information 
isn’t  necessary  for  GIS  usets 
who  carry  laptops  in  the  field 
—  a  daily  up¬ 
date  back  at 
the  office 
works  Fine. 

That  means 
less  concern 
about  wire¬ 
less  problems. 

Another  point 
that  Braihhaw  | 
raises  is  the 
lack  of  a  stan¬ 
dard  for  storing  GIS  data. 
“Oracle  is  way  ahead  of  the 
game.”  but  only  on  the  high 
end,  he  says.  If  an  industry 
standard  does  appear.  Brad¬ 
shaw  says  Autodesk  will  sup¬ 
port  it  In  the  meantime,  buy 
lots  of  disk  drives;  GIS  data 
cats  them  like  candy. 
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Purchasing  Delays  Cause 
Software  Sales  Shortfalls 


Nondors  miss  sccond-i.iiuirtcr  targets, 
hlanie  sjx-nding  drop-off  in  L'.S.  in  |une 


BV  LUCAS  MEARIAN 
AND  MARC  L  SONOINI 

S  -.  ven¬ 

dors  warned  Iasi  week 
that  they  w  ill  report 
louer-fh.m-projtvted 
fvvenues  for  the  second  quar- 
ler.  blaming  a  slowdown  in 
spending  bv  I'.S  customers 
last  month 

PcopleSi>ft  Inc.,  (hmipuler 
AsxKiates  Internaiional  Inc,. 
Siebel  Systems  Inc..  Wdtas 
Si*rtware  t:<*rp..  PMC  Software 
Inc.  and  FileNet  ('orp.  all  s.tid 
they  missL‘d  their  revenue  tar¬ 
gets  for  the  sjuarter.  The  caval- 
sMde  ofannituncemenis  fol¬ 
lowed  a  similar  warning  from 
Sybase  Ine  on  luly  1. 

Sybase  ciu-d  eNccuth'n 
problems  in  its  \onh  Amen 
can  sales  unit,  and  IVopIcSoft 
pointed  a  finger  at  the  fall«*ui 
from  the  trial  in  which  the  L  .S 
1  k-partment  of  lustice  is  try  ing 
to  bK»ck  t  trade  Corp.’s  Ijiwiile 
laketwer  btj  tor  the  enmpam. 
But  a  common  thread  jm4mg 
all  seven  vendors  was  that  ex¬ 
pected  sales  didn’t  inaterialii'e 
in  the  L’..S.  in  lunc 
for  example.  Mvtuniain 
View,  tjlil. -based  Writas  s,jiJ 


that  sales  of  its  storage  man- 
.igement  software  met  expec¬ 
tations  in  most  of  Europe  and 
the  Asia-Paeific  region.  But 
the  sales  in  those  areas  were 
offset  by  a  late  Jrop-otTin  pur¬ 
chases  by  U.S.  customers.  ’At 
the  end  ot  the  lune  quarter, 
our  anticipated  order  flow 
weakened."  said  Writa.s  CfX) 
Uary  BliH>m  in  a  statement 
Houston-based  BMC  said 
it  signed  just  nine  software 
licen.sing  deals  worth  more 
than  SI  million  each  during 
the  quarter,  the  first  in  its  2(Ut5 
fiscal  year  In  comparison. 


BMC  inked  ki  deals  that 
topped  the  SI  million  mark  in 
the  same  quarter  a  year  ago. 

Some  analysts  said  the 
w  idespread  dip  in  sales  is 
good  news  for  users  bceause  it 
should  increase  competition 
and  further  drive  down  soft¬ 
ware  prices.  t)ihers  called  it 
an  indication  that  the  long- 
awaited  recovery  in  IT  spend¬ 
ing  is  already  sputtering. 

For  sjime  users,  the  recov¬ 
ery  hadn't  even  begun. 

■|  haven’t  seen  any  inerca.se 
in  spending  on  our  end."  said 
Matt  Fuoco.  director  of  net 
w  ork  services  at  the  L’niversi-  ' 
ty  oi  Kansas  Medical  ('.enter  in 
Kansas  City.  "People  are  ask¬ 
ing  more  questions  about  the 
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In  addition  to  Ihe  warning  from 
Verifas.  storage  hardware  makers 
EmuiexCorp  and  Overland  Stor¬ 
age  Inc.  have  said  they  will  miss 
Iheir  second-quarter  revenue  tar¬ 
gets  -  a  development  that  has 
made  analysts  nervous  as  the 
largest  storage  vendors  prepare  to 
report  their  results  foi  Ihe  quarter 
'We  re  all  anxiously  waiting  for 
the  storage  companies  to  report 
Iheir  numbers.”  said  Gartner  Inc 


analyst  Roger  Cox.  “This  quarter 
will  be  a  telling  quarter.  The 
weather  reports  don’t  give  you  all 
that  much  confidence ' 

Nifsan  Hargil,  an  analyst  at 
Arlington.  Va.-based  mvesimenJ 
bank  Fnedman.  Billings.  Ramsey 
I  Group  Inc.,  said  in  a  research  note 
that  Veritas  will  continue  to  lace 
increased  competition  from  larger 
verxiors  such  as  EMC  Corp., 
which  last  year  acquired  data 


smf-sftSM 


spending  that’s  going  on." 
Fuoco  added  that  there  is  still 
plenty  of  economic  uncertain¬ 
ty.  which  is  keeping  IT  spend¬ 
ing  fiat  at  the  medical  facility. 

limPrevo.  CIO  at  Green 
Mountain  Coffee  Rviasters  Inc. 
in  Waterbury.  Vt..  said  many 
companies  could  still  be  di¬ 
gesting  software  purchases 
they  made  in  prior  years.  •Cer¬ 
tainly,  all  of  us  are  focu.sed  on 
getting  more  out  of  what  we 


backup  and  recovery  software 
vendor  Legato  Systems  Inc. 

Dong  Jin  Kim,  senior  Unix  sys¬ 
tem  administrator  for  worldwide 
infomnation  systems  al  Eastman 
Kodak  Co.  in  Rochester,  N  Y .  runs 
backup  software  from  Veritas  on 
his  Sun  Solans  servers 
Kim  said  he  hasn’t  seen  any 
change  in  prices  from  Venlas  But. 
he  added  that  he  has  been  getting 
increased  sales  pitches  from 
EMCs  Legato  unit. 

'Cerlainly,  there’s  been  more 


have  already  paid  for.  rather 
than  writing  checks  for  new 
software."  said  Prevo.  who 
runs  I’eopleSofi’s  applications. 

“Companies  are  still  reluc¬ 
tant  to  make  major  software 
purchases."  said  John  Moore, 
an  analyst  at  ARC  Advisory 
Group  Inc.  in  Dedham.  Mass. 
He  predicted  that  there  wivn’t 
be  any  big  uptick  in  sales  until 
after  the  November  election, 
ill  (he  earliest.  O  48066 


pnee  competition  in  a  lot  oi  these 
[storage]  markets."  said  Brian 
Babineau,  an  analyst  at  Enterprise 
Storage  Group  Inc.  in  Milford. 
Mass 

But  Babineau  said  ifs  loo  early 
to  tell  whether  the  storage  sales 
slump  IS  industrywide  or  limited  to 
specific  companies. 

Emulex  and  Overland  Storage 
both  blamed  a  lack  of  reseller 
sales  for  lhar  shonfalls.  which 
they  disclosed  two  weeks  ago. 

-  Lucas  Meanan 


MySQL,  SAP  Plot  Upgrade 
Of  Open-Source  Database 


M;i\l  )H  to  get 
(vl-hit  c;ip;thilities 

BVMARCL  SONGINl 

and  development 
partner  .^BarcrvMdy- 

Hig  an  upgr.ide  i.>  SAP’^.ipen 
Miurce  database  ih.it  will  add 
suppvift  i»if  ii4-bir  computinc. 
alvtng  w  tth  nevv  mnnxoring 
and  man.igemeui  features 
S/\P  inked  j  deal  with  ope-i 
source  J.uabasi-  Vendor  M-. 
•stil  in  Mav  JtHi.'iMi.ikrover 


much  v)l  the  devvlopmem. 
support  and  marketing  of  the 
SAP  DB  software,  which  -My 
SQL  renamed  MaxDB. 

/ack  L  rlvickvr,  vKe  presi¬ 
dent  of  marketing  at  Uppsala. 
Sweden-based  MySQi,  ij^t 
Week  said  ihe  tv\«>c*in>paiiies 
.ire  working  on  a  .MjxI>B7.r> 
upgrade  that  s  due  bv  year’s 
end. 

t  he  new  version  will  run  on 
id.litmiuil  operating  systems, 
including  <»a  bit  I  |nuv  and 
HP  *  ,ii\J  support  rln-  ).iv.i 


based  Eclipse  development 
framew  ork.  he  said.  It  will  also 
include  support  for  MySQL 
Pro.vy.  a  stand-alone  program 
that  Iet.s  .MySQL’s  namesake 
software  share  information 
with  other  databases. 

User  Appeal 

The  performance  hnist  that 
should  come  with  64-bii  sup- 
pon  is  of  interest  tt>  Charlie 
Brann.  S.\P  administrator  at 
Sw  isslog  Lr.msLogic  Corjx.  as 
are  the  automated  monitoring 
.ind  nun.igenu'nt  features. 

Denver-based  Sw  isslog  uses 
SAP  DH  r.*  to  support  iisK  5 
1  WP  system  and  other  .ipplk  .i- 
tions  Brann  s.iid  the  maker  of 


mjfcrtals-handling  systems  i.s 
considering  an  upgrade  to 
SAP’s  mySAP  F-RP  software 
and  .1  migration  to  MaxDB  7.6. 

MaxDB  is  currently  used 
in  about  6,000  installations. 
Uriockcr  said.  MySQL  and 


■  OrigiBalty  developed  by 
SAP  as  a  free  aftamalive  to 
commercial  databases  for 
users  of  teappAcations. 

■  Released  b)  an  open* 
source  version  by  SAP  in 
2000.  than  renamed  and 
offered  under  a  commercial 
license  by  MySQL  last  fan. 


SAP  announced  a  commercial 
1  version  last  November  as  an 
'  Jliemativc  to  the  Tree  release 
I  that  SAP  ineludcs  with  its 
I  business  applications.  Pricing 
I  starts  at  S49  per  named  user 
I  on  single-CPU  systems. 

Charles  Garry,  an  analyst 
at  Meta  Group  Inc.,  said  he 
divesn’t  see  MaxDB  at  user 
sites  very  often,  but  he  fre¬ 
quently  discusses  the  technol¬ 
ogy  with  hi.s  clients. 

IT  managers  at  many  large 
companies  are  a*luetant  to  de¬ 
ploy  the  database  because 
they  think  it's  more  appropri- 
aiefor  midsize  users  looking 
to  cut  costs.  Garrv  said. 

0  48080 
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Purchasing  Delays  Cause 
Software  Sales  Shortfalls 


V  endors  miss  second-quarter  targets, 
blame  spending  drop-off  in  U,S.  in  June 


BY  LUCAS  MEARtAN 
AND  MARC  L.  SOHBINI 

SIX  TOP  SOFTWARE  ven¬ 
dors  warned  last  week 
that  they  will  report 
lower-than-proiected 
revenues  for  the  second  quar¬ 
ter.  blaming  a  slowdown  in 
spending  by  U.S.  customers 
last  month. 

PeopleSoft  Inc.,  Computer 
Associates  International  Inc., 
Siebel  Systems  Inc..  Veritas 
Software  Cotp..  BMC  Software 
Inc  and  FileNet  Corp.  all  said 
they  missed  their  revenue  tar¬ 
gets  for  the  quarter.  The  caval¬ 
cade  of  announcements  fol¬ 
lowed  a  simitar  warning  from 
Sybase  Inc.  on  July  L 
Sybase  cited  execution 
problems  in  its  North  Ameri¬ 
can  sales  unit,  and  PeopleSoft 
pointed  a  finger  at  the  fallout 
from  the  trial  in  which  the  US. 
Department  of  Justice  is  tryii^ 
to  block  Oracle  Corp.'$  hostile 
takeover  bid  for  the  company. 
But  a  common  thread  among 
all  seven  vendors  was  that  ex-  j 
pected  sales  didn’t  rraterialize 
in  the  U.S.  in  June. 

For  example.  Mountain 
View,  Calif.-based  Veritas  said 


that  sales  of  its  storage  man¬ 
agement  software  met  expec¬ 
tations  in  most  of  Europe  and 
the  Asia-Paciftc  region.  But 
the  sales  in  those  areas  were 
ofisct  by  a  late  drop-off  in  pur' 
chases  by  U.S.  customers.  “At 
the  end  of  the  June  quarter, 
our  anticipated  order  flow 
weakened."  said  Veritas  CEO 
Gary  Bloom  in  a  statement. 

Houston-based  BMC  said 
it  signed  just  nine  software 
licensing  deals  worth  more 
than  SI  million  each  during 


I  BMC  inked  16  deals  that 
topped  the  SI  million  mark  in 
'  the  same  quarter  a  year  ago. 

Some  analysts  said  the 
widespread  dip  in  sales  is 
good  news  for  users  because  it 
should  increase  competition 
and  further  drive  down  soft¬ 
ware  prices.  Others  called  it 
an  indication  that  the  long- 
awaited  recovery  in  IT  spend¬ 
ing  is  already  sputtering. 

For  some  users,  the  recov¬ 
ery  hadn’t  even  begun. 

"I  haven't  seen  any  increase 
in  spending  on  our  end  "  said 
Matt  Fuoco.  director  of  net¬ 
work  services  at  the  Universi¬ 
ty  of  Kansas  Medical  Center  in 


the  quarter,  the  first  in  its  2005  Kansas  City.  -People  are  ask- 
fiscal  year.  In  comparison.  ing  more  questions  about  the 
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spending  that’s  going  on." 
Fuoco  added  that  there  is  stiU 
plenty  of  economic  uncertain¬ 
ty,  which  is  keeping  IT  spend¬ 
ing  flat  at  the  medical  focility. 

Jim  Preva  CIO  at  Green 
Mountain  Coffee  Roasters  Inc. 
in  Waterbuiy,  Vt.,  said  many 
companies  could  still  be  di¬ 
gesting  software  purchases 
they  made  in  prior  years.  "Cer¬ 
tainly,  all  of  us  are  focused  on 
getting  more  out  of  what  we  i 


backup  and  recovery  sofMwe 
vendor  bgato  SyeM  Inc. 

Dong  Jn  Nm.  senior  Unix  sys* 
lernarkninisftafoifbfvvDridwride 
information  sysfoms  at  Ettfow 

Kodak  Co.  in  RDchesfor.  tiV..  runs 
backup  sofbMBfo  from  Veritas  on 
his  Sun  Solaris  servers. 

Kkn  $8id  he  hasnl  seen  any 
change  in  prices  from  Verflas.  6uL 
he  at^  that  he  has  been  oetling 
mcreesed  sales  pichee  from 
EMCs  Legato  unIL 
‘Certainly,  there’s  been  more 


have  already  paid  for,  rather 
than  writing  checks  for  new 
software,"  said  Prevo.  who 
runs  PeopleSoft’s  aj^Ucations. 

“Companies  are  still  reluc¬ 
tant  to  n^e  major  software 
purchases,"  said  John  Moore, 
an  analyst  at  ARC  Advisory 
Group  Inc.  in  Dedham,  Mass. 
He  predicted  that  there  won't 
be  any  big  uptick  in  sales  until 
after  the  November  election, 
at  the  earliest.  O  48066 


price  compeMkin  in  a  tot  of  these 
[storage]  merkets,  ‘  said  Brian 
BabffW  an  ana^  at  Enterprise 
Storage  Group  Inc.  In  MWord, 
Mass. 

Babinaau  stid  k's  too  early 
to  (eN  whethar  the  storage  safes 
storig)  e  Mus&ywide  or  lirriitB^ 
specAccompanfes. 

Enate  and  Ovartend  Storage 
bodi  blamed  a  lack  of  reseller 
safes  for  thee  shortfals.  which 
they  dbefesed  two  weeks  ago. 

•LucasMuhan 


MySQL,  SAP  Plot  Upgrade 
Of  Open-Source  DatsSiase 


MaxDB  to  get 
64-bit  capabilities 

BVMARC  L.  SOWeiMI 

SAP  AG  and  development 
partner  MySQI.  AB  are  ready¬ 
ing  an  up^adc  to  SAP’s  open- 
source  database  that  will  add 
support  for  64-bit  computing, 
along  with  new  monitoring 
and  management  features. 

SAP  inked  a  deal  with  open- 
source  database  vendor  My¬ 
SQL  in  May  2003  to  take  over 


much  of  the  development, 
support  and  mariteting  of  the 
SAP  DB  software,  which  My¬ 
SQL  renamed  MaxDB. 

Zack  Uriocker.  vice  presi¬ 
dent  of  marketing  at  Uppsala, 
Sweden-based  MySQL,  last 
week  said  the  two  companies 
are  working  on  a  MaxDB  7.6 
upgrade  that’s  due  by  year’s 
end. 

The  new  version  will  run  on 
'  additional  operating  systems, 
including  64-bit  Linux  and 
HP-UX.  and  support  the  Java-  I 


based  Eclipse  development 
framework  be  said-  It  will  also 
include  suppon  for  MySQL 
Proxy,  a  stand-alone  program 
that  lets  MySQL’s  namesake 
software  share  information 
with  other  databases. 

User  Appeal 

The  performance  boost  that 
should  come  with  64-bit  sup¬ 
port  is  of  interest  to  Charlie 
Brann,  SAP  administrator  at 
Swisslog  TVansLogic  Corp.,  as 
are  the  automated  monitoring 
and  management  features. 

Denver-based  Swisslog  uses 
SAP  DB  73  to  suppon  its  R/3 
ERP  system  and  other  applica¬ 
tions.  Brann  said  the  maker  of 


materials-handlii^  systems  is 
considering  an  upgrade  to 
SAP’s  mySAP  ERP  software 
and  a  migration  to  MaxDB  7.6. 

MaxDB  is  currently  used 
in  about  6,000  installations, 
Uriocker  said.  MySQL  and 


SAP  announced  a  commercial 
version  last  November  as  an 
altenutive  to  the  free  release 
that  SAP  includes  with  its 
business  applications.  Pricing 
starts  at  $49  per  named  user 
on  single-CPU  systems. 

Charles  Garry,  an  analyst 
at  Meta  Group  Inc.,  said  be 
doesn't  see  MaxDB  at  user 
sites  very  often,  but  he  fre¬ 
quently  discusses  the  technol¬ 
ogy  with  his  clients. 

IT  managers  at  many  large 
companies  are  reluctant  to  de¬ 
ploy  the  database  because 
they  think  it's  more  appropri¬ 
ate  for  midsize  users  looking 
to  cut  costs,  Garry  said. 
048060 


COMPANIES  THAT  PUT  VOICE  ON  THE 
NETWORK  CHOOSE  THE  COMPANY 
THATBUILTTHE  NETWO^ 

Wngs  »n  happen.  Instead  of  managing  different  flavors  of  PBX  from  ktcation  to  location  voo 
^n  l^ndle  Wng  torn  one  p^ce.  saving  hme  and  money-not  to  mention  miteage  on  IT  shtff  sl«es.  And  v.th  over  20 

standard  for  millions  of  voice  IP  users  around  the  world.  It's  why  over  half  of  the  Global  500  have  chosen  Cisco  to  rethink 
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Sun  Exec  Discusses  Plans 
For  Open-Source  Solaris 


No  decisions  yet  about  licensing  model 


SUN  MICROSYSTEMS  INC 
will  make  its  Solaris 
operating  system  avail¬ 
able  under  an  open- 
source  model  by  the  end  of  the 

year,  according  to  John  _ 

loiacona,  the  company's 
executive  vice  presi¬ 
dent  of  software. 

Lotacono  said  no  de¬ 
cision  has  been  made 
about  the  open-source  | 
licensing  fiwxiel.  but  he 
discu-ssed  the  philoso¬ 
phy  behind  the  move  to 
(^>en-$ource  during  an 
interview  at  the  company's  re¬ 
cent  JavaOnc  conference  here. 
Excerpts  follow: 

Why  is  Sun  gone  to  myia  Solaris 
mraiaWa  under  an  opon-oourea 
niodor?  If  you  talk  to  CIOs 
about  something  like  Solaris, 
you  know  what  they  say  to  roe? 
"Why  would  you  do  th«?  It 
makes  no  sense  to  roe."  They 
say.  1  want  mismn-critical. 
reliable,  redundant,  available, 
secure.  That’s  w^t  Solaris 
brings  to  me.  I  want  that  to 
continue.  Open-source  means 
very  little  ro  roe  " 

Conveisely,  you  go  taifc  to 
the  developers  in  t^  corpora¬ 
tion.  and  they  say.  "Oh,  thU 
would  be  greaL  1  can  write  dri¬ 
vers.  I  can  do  innovation." 

So  there's  a  sense  of  creat¬ 
ing  the  community  This  is 
about  how  I  get  more  people 
developing  sofhvare  on  the 
platform,  because  at  the  end  of 
the  day.  it's  all  about  applica¬ 
tions.  It’s  not  about  the  OS  it¬ 
self  People  like  Windows  be¬ 
cause  there's  a  lot  of  applica¬ 
tions  running  on  h.  Pe^le  are 
liking  Mac  more  because 
there's  a  Lot  of  applications  on 
ft  They  like  Linux  because 
there's  a  growing  number  of 
applications  on  it. 

The  reason  we're  doing  this 
on  the  whole  b  we're  trying  to 
create  relevance  in  the  £act  that 


there's  more  people  finding  So¬ 
laris  and  being  more  able  to  use 
and  modify  and  actually  devel¬ 
op  on  top  of  Solaris.  And  that 
isn't  iust  about  the  (people] 
that  we  sell  to.  It's  about  creat¬ 
ing  the  community  of  tens  of 
thousands  or  hundreds 
of  thousands  of  people 
who  want  to  innovate 
on  t<^  of  the  code  we 
give  them  access  ta 

Wl  moving  to  opan-source 
■iowr  Sun  to  dacraaaa  ks 
Solarii  davatopmant  staff? 
There's  not  going  to  be 
a  huge  decrease.  The 
CIOs  say.  “^y  biggest  worry 
about  open-source  is  all  the 
problems  that  things  like  Linux 
give  me.  What  I  wuu  is  your 
QA  tests  and  all  the  r^ity 
you  put  behind  a  Solaris  re¬ 


lease."  And  my  point  to  them 
is.  absolutely.  What  we’ll  do  to¬ 
morrow  —  whether  it’s  open- 
source.  or  no  matter  what  li¬ 
censing  model  it  is  —  you  will 
get  Solaris  with  all  its  QA.  its 
tests,  its  hardening,  all  its  secu¬ 
rity  that  you  have  today.  All 
those  resources  required  to  do 
that,  we  will  maintain. 

In  addition  to  innovation  for 
things  like  container  technol¬ 
ogy  or  lauii  recovery  or  dy¬ 
namic  tracing  that  Pm  adding 
as  new  features  in  Solaris.  I  an¬ 
ticipate  tKjw  that  rU  have  tens 
of  thousands  of  people  saying, 
"Here's  an  innovation  on  top 
of  that."  So  could  I  get  even 
more  features  built  in.  or  could 
I  over  time  reduce  my  cost  of 
production?  Yeah,  al^hitely 
—  as  long  as  Pm  doing  the  QA 
and  lest  cycle  on  what  I  call 
Solaris  versus  the  open  ver¬ 
sion  of  Solaris,  which  is  proba- 


Microsoft  Partners  Get 
New  Support  Options 


BV  CaBOt  SLIWA 

Users  turning  to  Microsoft 
Corp.’s  ample  stable  of  chan¬ 
nel  partners  for  products,  sup¬ 
port  or  consulting  services  are 
getting  a  new  point  of  differ¬ 
entiation  to  help  them  make 
decisions  about  which  ven¬ 
dors  to  select 

At  its  Worldwide  Partner 
Conference  in  Toronto  yester¬ 
day.  Microsoft  launched  its 
Services  Partner  Advantage 
program  to  provide  additional 
resources  and  support  options 
to  independent  sofhvare  ven¬ 
dors.  systems  integrators  and 
other  partners. 

A  standard  prepackaged  op¬ 
tion  gives  a  partner  phone- 
based  problem  resolution  sup¬ 
port  and  various  onitne  re¬ 
sources.  The  higher-priced 
"plus"  plan  can  be  customized 
by  the  partner  and  adds  a  des¬ 
ignated  service  professional  at  i 


Microsoft  as  a  resource.  There 
is  also  a  third  plan,  based  on 
the  standard  and  plus  offer¬ 
ings.  that  applies  to  Microsoft 
Business  Solutions  products. 

“We  want  to  try  to  drive 
bener  credibility  for  the  part¬ 
ner  community  so  they  be¬ 
come  more  of  an  asset  for 
their  end  customers."  s?td 
Thomas  Dawkins,  a  product 
manager  for  worldwide  ser¬ 
vices  at  Microsoft.  His  prior 
expertence  includes  running  a 
consulting  practice  and  work- 


bty  called  something  slightly 
different,  fust  to  make  sure 
people  understand  there  are 
differences  between  the  two. 

Will  thtrv  bs  two  versions  of  So¬ 
laris?  No.  We  will  release  the 
same  version.  But  one  will  be 
open-source,  no  support.  And 
one  will  be  the  one  that  we 
ship  to  Merrill  Lynch. 

Are  you  toaning  tomrd  a  specific 
,  open-sowce  Mceneing  model 
at  this  poinf?  Wc  have  some 
imemal  debates  on  what  we 
think  will  be  the  roost  optimaL 
There  are  several  to  pick  from. 
There  isn't  one  hammer  for 
every  nail. 

b  H  poesatke  youH  taka  an  ap¬ 
proach  rimilar  to  ivhat  IBM  dM 
with  Edpae?  Possible.  You 
should  also  look  at  what  Red 
Hat  has  done  with  Linux. 

Any  othar  modab  look  appealing? 
I've  got  to  be  careful,  because 
they  do  bring  different  things 
Co  the  table.  You  have  things 
like  the  Apache  model  which 
gives  you  some  of  the  brand-  ' 


ing  at  an  Independent  soft¬ 
ware  vendor.  "I  know  how  im¬ 
portant  it  b  to  show  credibilf- 
cy  to  a  new  customer,"  he  said. 

Partners  in  the  past  had  to 
pay  at  least  $40,000  to  $50,000 
to  get  premier  support  with 
Microsoft.  They  will  now  find 
an  entry-level  option  for  the 
standard  plan  starting  at  SSXXK) 
to  S8.000;  the  entry  price  point 
for  the  plus  plan  ranges  from 
$27,000  to  S32,00a  a  Microsoft 
spokeswoman  said.  The  less 
expensive  i^Ttions  are  expected 
to  enable  an  increasing  number 
of  Microsoft's  partners  to  ac¬ 
cess  more  conststeni  support. 

"It  could  be  a  selling  point 
for  partners.  They  might  say, 
'We  can  support  your  system  I 


Mcrosofl’s  NewSanlGwPlMi 


ing  rights-  You  have  MySQL, 
which  has  some  of  the  brand¬ 
ing  rights.  You  have  the  Mozil- 
la  license,  which  is  a  very  pop¬ 
ular  license  model  You  have 
the  CPL  (Common  Public  Li¬ 
cense],  which  gives  you  some 
flexibility  in  different  areas. 
And  you  obviously  have  GPL 
(General  Public  License)  and 
LGPL  [Lesser  GPL).  Then  we 
even  have  our  Sun  public  li¬ 
cense.  something  we  call  the 
SISL,  the  Sun  Industry  Stan¬ 
dard  License. 

When  will  you  maks  •  (bebion 
about  tho  Aeeniing  hkmW?  Short¬ 
ly.  1  hate  to  be  so  vague,  but  by 
the  end  of  the  year,  we’ll  have 
the  whole  thing  announced 

Soiarb  b  going  opoft-sourco.  Why 
not  Java?  We  see  ourselves  as 
being  the  stewards  of  Java. 
Compatibility  is  a  key  issue. 

048079 
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better  because  we  have  a  dedi¬ 
cated  suppon  resource  at  Mi¬ 
crosoft.’  "  said  Paul  DeGroot. 
an  analyst  at  Directioos  on 
Microsoft  in  Kirkland.  Wash. 
Corporate  users  looking  at 
competitive  offerings  from 
variom  partners  m^t  now 
ask  what  kind  of  support  con¬ 
tract  the  partner  has  with  Mi¬ 
crosoft,  be  said. 

The  Partner  Advantage  pro¬ 
gram  is  available  to  Microsoft's 
Regbtered.  Certined  and  Gold 
Certified  partners.  It  b  intend¬ 
ed  to  help  address  partner 
complaints  about  contract 
terms,  limited  service  options 
and  the  lack  of  consbtency  in 
the  naming  of  programs  on  a 
global  basis,  Dawkins  said. 

"It  arms  the  systems  inte¬ 
grators  and  ISVs  with  services 
they  perhaps  did  not  have  be¬ 
fore  or  didn’t  have  enough  of 
to  suppon  their  customers  ap¬ 
propriately."  said  Paul  Ed¬ 
wards,  a  Tbronto-based  ana¬ 
lyst  at  IDC.  "If  partners  can 
get  access  to  the  people  they 
need  [at  Mkrosoft],  the  cus¬ 
tomers  will  benefit."  O  48082 
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Microsoft  Looks  to 
Cut  Costs  by 

MicniiiillC(irp.|iluBloliNwn- 
pnas  br  nuriy  n  bWon  In  Its 
2005  liseal  ysw.  CEO  Sim 
Bairnsr  snnto  In  an  s-fflaS  mes- 
saga  la  anvloyaas.  Mkratatl's 
coals  haaa  groan  faalai  than  Us 
lanouo  om  Uio  past  llaaa  yHTS, 
acoordnoloBalniar.-IMaliob- 
vIoialyiiotaltandiMcancontln- 
na.'haiaid.addbigllialMkro- 
aottasacuHaaoVanllobam- 
danl  noss  so  wo  asoM  sasara 
inonMas  lalar  •  Hh  camaany's 
noss  Dacal  yaar  bagan  July  t 

Patent  Ruling  Goes 
Against  Microsoft 

Tht  U.Su  Court  of  AppoalE  in 
WiiWnjion  Tuwood  o  knm- 
coort  ndtag  in  feicraoft’s  favor 
as  part  of  a  patanf  mMngMnont 
Had  ia  1990  by  EncMtas. 
CaH.*basad  TypoMgM  Kayboard 
Corp.  Ibo  court  saM  a  doeiBier)  in- 
vaBdaUng  two  hayboard  patonts 
bald  by  TyptlBgM  was  'Improper*' 
and  sam  the  ease  back  to  the 
Dtobtet  Court  in  San  OioQo. 
Merosoft  ropaatod  ib  dakn  that 
no  infrtogonwnt  took  plaee. 

Symbian  Receives 
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BearingPoint  Move 
Raises  China’s  Profile 

Dl.fr  ^*.211  1 IS*  1  »  1. 


But  country  still  lags  far  behind  India 
as  ofehore  outsourcing  destination 

ov  PATnicK  THiaooEAU  includc  Accenhire  Ltd.,  SAP 

BEARiNGPotNT  INC,  AG.  Hewlcn-Packard  Co,  IBM 

has  opened  its  second  Global  Services  and  GE  Capi* 
development  facility  tal  Corp. 

in  China,  a  mow  ana-  Wu  Jiazhi  is  a  China-based 
lysts  see  as  part  of  a  trend  by  programmer  who  works  for 
U.S.  firms  10  expand  such  op-  TopCoder  Irvc.,  a  Glastonbury, 
erations  in  that  country.  Comt-based  firm  that  con- 

The  McLean,  Va.*based  con-  ducts  online  competitions  for 


suiting  firm  said  last  week  that  recruiting  programming  talent 
ir  rvrwondxt  rko  CA  e _ _ _ 


na  as  well  However.  Bearing- 
Point’s  Franklin  said  he  be¬ 
lieves  his  company  has  the 
necessary  resources  in  place, 
including  bilingual  workers 
based  in  the  U.S..  to  ensure 
good  projcCT  management  and 
clear  communication. 

Sierra  Atlantic  Inc.,  a  Fre¬ 
mont,  Calif.-based  outsourcing 
firm  that  specializes  in  re¬ 
search  and  development,  has  a 


development  center  in  India. 
But  it’s  eyeing  China  as  a  fu¬ 
ture  development  site  because 
the  country  “has  the  best  com¬ 
bination  of  cost  advantage  and 
supply  of  strong  engineers," 
said  Marc  Hebert,  a  vice  presi¬ 
dent.  Market  access  is  also  a 
key  factor  in  opening  a  devel¬ 
opment  center  in  China. 
Hebert  said. 

Although  labor  costs  in  In¬ 
dia  are  rising.  Hebert  said  he 
sees  nothing  threatening  that 
country’s  dominance  as  an  off¬ 
shore  development  center.  Im¬ 
pediments  to  doing  business 
in  China  include  government 
bureaucracy  and  the  language 
barrier,  he  noted.  0  48063 


it  opened  the  56300-$quare- 
foot  development  center  in 
the  northeastern  industrial 


for  outsourcing  projects.  Wu 
said  he  believes  Ch^'s  work¬ 
ers  have  the  technical  skills 


-  — .bwibuivai  aguua 

CTty  of  Dalian.  The  facility  cur-  that  will  enable  the  country  to 


renily  has  60  employees,  but 
BearingPoint  ht^cs  to  haw 


rival  or  exceed  India  within 
several  years.  China  lags  not  in 


V.  - , - -  ycoia.  V,I1UI<I  lags  not  in 

14»0  people  working  there  “as  technical  skills  but  in  develop- 
quickly  as  possible."  said  Craig  ment  standards,  he  said.  "Most 


Short  Takes 

CISCO  SYSTEMS  WC.  aid  it  wil 
p^rS8fniltontobuyPveTech- 
nQlo0iMUl.aLMden-hMdda- 
wtopg  af  network  routing  aoft- 
WM. . . .  AffTTVmuS  SOFTYVAM 
VENDORS  uwitod  ^eut  Iwe  nuw 
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Franklin,  an  executive  vice 
president  at  BearingPoint  and 
head  of  its  Global  Technology 
Services  arm. 

BearingPoint.  which  has 
15.500  employees  worldwide, 
also  runs  a  development  facili¬ 
ty  in  Shanghai  with  400  em¬ 
ployees.  It  has  a  center  in 
Chennai.  India,  with  100  peo¬ 
ple.  which  it  plans  to  expand 
to  IXXK)  workers  during  the 
next  year.  TTie  company  also 
operates  a  development  cen¬ 
ter  in  ^lain. 

Onming  Interest 

BearingPoint  isn’t  the  only 
multinational  firm  that's  inter¬ 
ested  in  China,  but  the  coun¬ 
try  remains  well  behind  India 
as  a  provider  of  development 
services,  said  Eugene  Kubla- 
nov.  an  analyst  at  NeoTT.  an 
outsourcing  consulting  firm  in 
San  Ramon.  Calif 
In  2003.  India  had  IT  ser¬ 
vices  exports  of  about  $9.5  bil¬ 
lion.  compared  with  about 
$700  millioo  for  China,  said 
Kublanov.  Most  of  China's  ex¬ 
port  work  is  for  the  Korean 
and  japanese  markets,  be  said. 

According  to  Michael  Yc. 
general  manager  of  business 
operations  at  I>alian  Software 
Park  COh  other  IT  firms  with 
offshore  operations  in  Dalian 


Chinese  firms  arc  providing 
application  solutions  with  rel¬ 
atively  poor  extensibility  and 
documentation."  he  said. 

Kublanov  cited  project  man¬ 
agement  as  a  problem  for  Chi- 


■  |P  '  Jl  the  up<ifitliil  n 

BeanngPoint's  develooroenl  center  in  Oalian,  China 


BBC  Awards  Siemens 
$3.7B  Outsourcing  F^ct 


UT  PArmCR  THIBOOCAU 

British  Broadcasting  Corp.  has 
picked  Siemens  Business  Ser¬ 
vices  Ltd.  to  take  over  its  tech¬ 
nology  arm  in  a  $3.7  billion 
deal  that’s  one  of  the  largest 
outsourcing  pacts  signed 
this  year. 

The  10-year  agreement, 
the  result  of  a  contracting 
process  that  took  only  about 
six  months,  calls  for  the 

BBC  to  sell  its  wholly - 

owned  commercial 
subsidiary.  BBC 
Technology  Holdings 
Ltd.  to  Siemens.  BBC 
Technology  employs 
about  1,400  workers. 

)ohn  Varney,  the 
BBC’s  chief  technol- 
officer,  said  Sie¬ 
mens  was  chosen  be¬ 
cause  the  company 
*^inder5tood  our  I 


technology  vision  [and]  where 
we  need  to  get  ta" 

Most  important,  “it  was  a 
very,  very  strong  cultural  fit,” 
said  Varney,  who  noted  that 
the  Berkshire,  England-based 
Siemens  unit  got  the  nod  in 
part  because  of  its  willingness 
to  be  flexible,  ■’'fhey  under¬ 
stand  the  nature  of  this  con¬ 
tract.  in  that  it  will  need  to  be 
very  dynamic  —  it  will  need  to 
evolve  over  the  next 
10  years." 

Moreover.  Siemens 
is  “prepared  to  travel 
with  us  as  we  move 
tovrard  a  different 
world  of  broadcast¬ 
ing."  Wrney  said. 

The  basis  of  our 
transformation  is  to 
use  internet  tech¬ 
nologies  to  bring 
program-making  i 


to  every  desktop." 

The  BBC  beg^  its  selection 
process  in  December  with  an 
advertisement  for  bidders.  It 
compiled  a  list  of  31  vendors 
and  quickly  reduced  that  to 
nine  and  then  three:  Siemens, 
Accenture  Ltd.  and  Computer 
Sciences  Corp^  which 
dropped  out  of  the  running 

Varney  said  it’s  possible 
to  put  together  a  complex 
outsourcing  deal  rapi^y  if 
enough  people  are  assigned 
to  It  The  BBC  assembled  a 
team  of  about  70  people  who 
conducted  "1.000  man-days 
of  negotiations"  over  a  four- 
week  period,  he  said. ' 

The  BBC  used  a  combination 
I  of  oE^ective  measures  and  sub¬ 
jective  assessments  in  reaching 
its  decision.  Varney  said.  In  a 
previous  interview  [QuickLink 
470401  be  said  it  was  impor¬ 
tant  that  teams  from  the  BBC 
and  the  vendor  be  able  to  work 
wen  together  —  something  he 
said  has  been  accompUsbed 
with  Siemens.  O  48091 


Profiles  in  Business  Mobility  #2  |  Versatility 

Why  carry  two  devices  when  you  can 
carry  just  one? 


jQL  If  your  employees  are  bften  out  of  the'offe^ng  customers,  yet 
they  always  need  to  stay  conneaed,  the  Nokia  6820  Messaging 
Device  is  the  right  call.  A  full  messaging  keypad  makes  email  fast 
and  easy.  A  color  screen  enhances  readability.  And  because  Nokia  business 
mobility  offerings  go  beyond  phones  to  enable  sophisticated  back-end 
secure  mobile  connecbvity,  you  can  give  your  workforce 

NokioseojiH^appSona 

the  advantage  of  mobile  access  to  critical  data  such  as  sales  numbers, 
inventory  levels,  financials,  and  more.  When  you  think  about  it,  with  the 
Nokia  6820  Messaging  Device  and  business  mobility  solutions,  who 
needs  an  office?  Email,  voice,  data — even  calendar  and  contacts — 
are  always  right  where  your  people  need  them:  at  their  fingertips. 


Newer  jfjffie  Office  \tofo 


Learn  how  to  mobilize  your  team  and 
increase  business  productivity.  Download 
“The  Anytime,  Anyplace  World”  white  paper. 
nokiarorbusiness.com 
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Connecting  People 
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Court  Upholds  Calif.  E-voting  Ban 


Advocates  for  the 
disabled  claimed  it 
was  discriminatorv 


BV  OAN  VCBTOM 

A  FEDERAL  lUDCE  Ust 
we«k  upheld  a  Cali- 
fomia  directive  chat 
decertified  touch¬ 
screen  voting  machines  and 
withheld  future  certification 
until  vendors  of  those  systems 
can  meet  specific  security 
requirements. 

The  decision  arose  from  a 
lawsuit,  Benavidea  v.  Shelley, 
brought  by  disability  rights 
advocates  and  four  California 
counties  that  oppose  Califor¬ 
nia  Secretary  of  Sute  Kevin 
Shelley’s  requirement  for 
voter-verifiable  paper  audit 
trails.  The  counties  also  op¬ 
pose  Shelley’s  order  to  decerti¬ 
fy  direct-recording  equipment 


(DR£)  voting  systems. 

The  plaintiffs  argued  that 
banning  the  systems  would 
duenfranchise  visually  or 
physically  impaired  voters. 

In  an  order  issued  by  the 
U5.  District  Court  for  the 
Central  EKstrict  of  California, 
Judge  Florence- Marie  Cooper 


The  evidence 
does  not  sup¬ 
port  the  conclusion 
that  the  eftnination 
of  [e-voting  ma¬ 
chines]  wndd  have  a 
discriminatory  effect 
on  the  visually  or 
manualy  impaired. 

U.S  DISTRICT  COURT  JUDGE 

FIORENCE-IIAIIIE  COOPER 


GAO  Says  IT  Mi 
At  Pentagon  Wastes 


lent 
lions 


•v  OAN  veirroN 

Despite  years  of  moderniza¬ 
tion  efforts  that  have  cost  tax¬ 
payers  billions  of  dollars, 
thousands  of  IT  systems  at  the 
Pentagon  remain  "fundamen¬ 
tally  flawed'  and  have  led  to 
logistics  and  pay  problems  for 
forces  serving  in  Iraq,  accord¬ 
ing  to  a  new  report  by  the  U.S. 
General  Accounting  OfTke. 

The  problems,  primarily  a 
lack  of  management  oversight 
and  investment  control,  stem 
from  "long-standing"  chal¬ 
lenges  to  the  Pentagon’s  busi¬ 
ness  modernization  efforts. 
GAO  auditors  told  members 
of  Cot^ress  last  week. 

For  example,  more  than  200 
inventory  control  systems  at 
the  Department  of  E)efense 
still  aren’t  integrated,  offering 
little  or  no  visibility  into  the 
Pent^xm's  $1.1  trUlion  in  as¬ 
sets.  according  to  the  GAO.  In 
addition,  the  Pentagon  has  no 
standard  process  for  identify¬ 
ing  critical  business  systems, 
nor  does  H  even  have  a  stan¬ 
dard  definition  of  what  consti¬ 


tutes  a  business  system. 

These  problems  have  left 
the  department  vulnerable  lo 
billions  of  dollars  of  ftaud. 
waste  and  abuse  annually,  at  a 
time  of  increasing  fiscal  con¬ 
straint."  GAO  auditors  told 
Congress. 

The  Defense  Department's 
IT  management  blunders  have 
also  adversely  affected  U.S. 
military  units  and  service 
members,  including  those 
fighting  in  Afghanistan  and 
Iraq,  according  to  the  GAO. 

The  lack  of  IT  management 
at  the  Pentagon  has  cau^  mil¬ 
itary  personnel  to  experience 
"substantial  logtstkal  support 
problems"  in  Iraq, 
the  GAO  concluded. 

In  a  written  re- 
H>onse  to  the  GAO's 
findings,  David 
Norquist,  aaing 
comptroller  at  the 
Pentagon,  cited  the 
continuing  develop¬ 
ment  of  a  business 
cmerprise  arch¬ 
itecture  and  a  busi- 


wrote  that  "the  evidence  does 
not  support  the  conclusion 
that  the  elimination  of  the 
DREs  would  have  a  discrimi¬ 
natory  effect  on  the  visually  or 
manually  impaired.” 

Cooper  also  said  that  the 
secretary  of  state’s  "decision 
to  suspend  the  use  of  DREs 
pending  improvemem  in  their 
reliability  is  certainly  a  ratio¬ 
nal  one.  designed  to  protect 
the  voting  rights  of  the  state’s 
citizens."  Cooper  noted  that 
Shelley  is  responsible  for  en¬ 
suring  that  votes  are  counted 
accurately,  and  requiring  a  pa¬ 
per  audit  trail  is  one  way  of 
fulfilling  that  obligation. 

Cindy  Cohn,  legal  director 
for  the  Electronic  Frontier 
Foundation,  called  the  court's 
decision  a  "iandmarif  ruling 

The  court  said  in  clear,  un¬ 
ambiguous  terms  that  requir¬ 
ing  a  paper  trail  for  e-voting 


ness  IT  investment  governance 
structure  that  he  said  should 
begin  to  reap  benefits  during 
the  fiscal  2006  budget  cycle. 

John  GUligan.  CIO  of  the  Air 
Force,  said  the  GAO  report 
tells  only  part  of  the  story.  Ac¬ 
cording  to  GilUgan,  the  $19  bil¬ 
lion  that  the  DOD  requested 
for  modernizing  its  business 
systems,  as  cited  in  the  GAO 
report,  also  covered  infra¬ 
structure  costs  such  as  classi¬ 
fied  and  unclassified  networks 
and  computing  centers  in  both 
U.S.  and  overseas  locations. 

GUligan  said  the  branches  of 
the  military  have  made  sub¬ 
stantial  progress  in  consoli¬ 
dating  and  modernizing  their 
business  systems,  "on  a  scale 
larger  than  all  but  a  few  of  the 
Fortune  SOO  companies." 

Karen  Evans,  the 
White  House's  di¬ 
rector  of  e-govem- 
roent.  said  the 
DOD’s  leadership 
"supports  the  presi¬ 
dent's  management 
agenda  and  is  com¬ 
mitted  to  transform¬ 
ing  the  department’s 
business  opera¬ 
tions."  Q4aM4 


machines  is  consistent  with  the 
obligation  to  assure  the  accura¬ 
cy  of  election  results."  Cohn 
said.  That’s  an  enormous  vic¬ 
tory  for  secure  elections." 

The  plaintiffs  in  the  case  did 
not  respond  to  calls  seeking 
comment. 

State  and  local  elections  of¬ 
ficials  around  the  country  are 
scrambling  to  ensure  that 
e-voting  systems  in  different 


Jurisdictions  are  reliable  and 
can  be  secured  from  tamper¬ 
ing  in  time  for  the  November 
election. 

The  decision  follows  the  re¬ 
lease  of  a  report  two  weeks 
ago  by  an  IT  security  panel 
that  outlined  a  strategy  for 
certifying  the  security  and  re¬ 
liability  of  touch-screen  DRE 
voting  systems  IQuickLink 
479311.  The  systems  wiU  be 
used  in  Jurisdictions  repre¬ 
senting  about  30%  of  regis¬ 
tered  voters  in  the  upcoming 
presidential  election.  0  48066 


Siemens  Adds  to  Unified 
CommunicatkHis  Sofhraie 
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HP  Integrity  servers  are  taking  off,  as  are  the  companies  using  them. 


Companies  adopting  HP  Integrity  server^  powered  by  industry-leoding  Intel*  Itanium*  2  processors,  ore  seeing  remarkable 
gams  in  performance,  the  is  buiwing.  o«  o(i„  o,e  ciK»,i„a  hp  in»g,iv  =,  bea 

«ro»(l.  Oocl..  SAP  nnd  S,rf«l  Sy*m>  hov.  enlxoc^J  *.  plafcm  os  on  Indosiry  slondord.  And  will,  *o  oMiy  to  monog.  a  mixed  «w„onmen,  of  UNIX  Micosof.'  Wimlows* 
Uno.  ond  OpenVMS.  HP  ln«,gdy  ser^n  oie  fosi  becoming  *e  eltimote  consolidolion  lool.  Demond  moximom  peAxmonee.  ietiobiliy  end  eosHefHciency  now.  on  o  plofem  *0, 
w,ll  corry  you  forwond  mlo  Ihe  hdure.  Demond  pefformonce  iboli  reotwoHd  proven,  ond  gel  il-wilb  HP  Inlegriy  server  solutions 


Choosing  HP  Integrity  servers,  choosing  i 


AIRBUS  UK: 

Running  HP.UXIIi 
on  HP  Infegrify  servers, 
20-30  wing  design 
simulations  that  used 
to  toke  weeks  are 
now  done  overnight. 


COMPUSA: 

Going  with  64-bit 
architecture  using  HP 
Integrity  servers,  they 
cut  access  time  to 
inventory  date  by  up 
to  85%. 


FIAT  AUTO: 
Standardizing  on  64-bit 
infrastructure  using  HP 
Integrity  servers,  they're 
integrating  and  enhancing 
sales  ond  service  as  well 
as  streomlining  the  buying 
process  while  lowering 
soles  cost. 


THE  KOEHLER  GROUP: 
Moving  to  on  environment 
composed  of  HP  Integrity 
servers,  they  gained 
a  50%  improvement  in 
missioixriticol  performance. 
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MARYFRAN  JOHNSON 


Bracing  for  Backlash 


ONE  DAY,  the  political  windstorm  around 
offshore  outsourcing  will  blow  over. 

One  day,  the  inflated  numbers  on  both 
sides  of  the  debate  will  be  debunked. 
One  day,  the  last  angry  letter  from  a 
displaced  American  IT  worker  will  be  published. 


Unfortunately  for  IT 
managers  everywhere, 
that  day  is  not  today. 

The  emotional  back¬ 
lash  against  any  plans  to 
outsource  technology 
jobs  overseas  —  regard¬ 
less  of  how  economically 
or  competitively  driven 
—  is  a  force  to  be  reck¬ 
oned  with  in  today  s  IT 
workplace.  It  dampens 
the  morale  of  even  the 
most  valuable,  talented 
employees,  as  we  saw  recently  in  our 
Best  Places  to  Work  in  IT  survey 
(QutckLink  a46I0J.  One  reader  sent 
us  a  note  last  week  suggesting  that 
we  include  “foreign  outsourcing  sta¬ 
tistics"  in  future  Best  Places  reports, 
thereby  revealing  how  many  U.S.  cit- 
iaeas  are  part  of  the  IT  head  count  of 
the  companies  on  our  list. 

Negative  reactions  can  blast  back 
from  customers  as  well  as  from  affect¬ 
ed  employees,  as  Dell  and  Lehman 
Brothers  discovered  when  they  had  to 
puU  customer  service  operations  out 
of  India.  Despite  a  few  other  widely 
publicized  retreats,  the  majority  of 
Fortune  1,000  companies  are  forging 
relentlessly  ahead  with  offshoring 
plans  —  albeit  with  greater  stealth,  in 
hopes  of  avoiding  bad  publicity. 

The  bottom  line  driving  what 
Gartner  calls  an  “irreversible  mega¬ 
trend"  is  always  the  same  cost  sav¬ 
ings  too  compelling  to  ignore  in  an 
open,  intcrconneaed  global  market¬ 
place.  "To  outsource  of&hore  is  not  a 
political  decision  on  the  pan  of  the 
company.  It’s  an  economic  decision 
with  political  ramifications."  says 
Mike  Hoyt.  CEO  of  Paradigm  Works. 
He’s  one  of  our  sources  in  "Damage 


Control"  (page  31,  and 
online  at  (^uickLink 
47609).  a  story  about 
how  IT  managers  can 
cope  with  the  offshore 
backlash. 

One  impressive  exam¬ 
ple  of  a  company  dealing 
effectively  with  the  back¬ 
lash  problem  is  Union 
Bank  of  California,  which 
created  a  "sourcing  man¬ 
agement  office”  to  han¬ 
dle  any  concerns  that 
might  harm  its  reputation  with  cus¬ 
tomers.  The  office’s  duties  include 
handling  all  communications  about 
the  bank’s  offshore  plans. 

The  preventive  measures  we  dis¬ 
cuss  in  our  story  basically  boil  down 
to  having  honest,  frequent,  candid 
communication  with  everyone  in¬ 
volved.  CFO  magazine  gave  similar 
advice  last  month  in  its  cover  story 
about  of&horing,  noting  that  the  ma¬ 


jority  of  the  275  financial  executives 
surveyed  had  no  intention  of  cancel¬ 
ing  their  offshoring  plans,  despite  the 
backlash.  Some  42%  of  those  CFOs 
said  they  were  realizing  net  savings 
of  more  than  20%  from  their  offshore 
projects,  and  64%  were  planning  to 
increase  offshoring  levels. 

So  where  do  companies  go  wrong 
in  commumcating  their  outsourcing 
plans?  Let  us  count  the  ways.  They 
overlook  a  basic  communications 
plan  for  internal  or  external  con¬ 
sumption  (the  offshoring  version  of 
a  “don’t  ask,  don't  tell”  policy).  They 
fail  to  explain  why  a  given  project  is 
going  overseas  or  how  such  deci¬ 
sions  are  made.  They  try  to  down¬ 
play  the  negatives  about  workforce 
changes.  They  hide  their  plans  for  as 
long  as  possible,  then  look  guilty  and 
act  defensive  when  the  news  le^. 

Some  analysts  are  predicting  that 
the  backlash  will  fade  away  by  next 
year,  and  I  hope  they're  right.  But  in 
the  meantime,  IT  managers  must 
brace  for  the  backlash  and  deal  with 
it  decisively. 

“You  don’t  want  rumor  to  overtake 
reality,"  says  Michael  Treacy,  co- 
founder  of  Gen3  Partners,  an  out¬ 
sourcing  consultancy.  "In  the  end. 
you  can  only  politicize  so  long,  and 
then  the  facts  will  prevail”  O  48033 
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MICHAEL  H.  HUGOS 

The  Systems 
Builder 

I  GOT  INTO  the  IT  business 
because  I  love  to  design 
and  build  systems.  After 
doing  a  lot  of  designing  and 
building  and  watching  others 
do  a  lot  of  designing  and 
building,  one  of  the  most 
important  thit^  Tve  learned  is  that 
successful  projects  are  always  run  by  a 
certain  kind  of  person.  This  person 
can  speak  both  the  language  of  tech¬ 
nology  and  the  language  of  business. 
This  person  understands  the  specific 
business  issues  that  a  new  system  is 
supposed  to  address  and  is  always 
looking  for  simple  and  effective  ways 
to  use  technology  to  get  things  done. 

I  call  this  person  the 
systems  builder. 

The  competence 
of  the  systems 
builder  goes  a  long 
way  toward  deter¬ 
mining  the  success 
or  failure  of  any  de¬ 
velopment  project. 

Often,  the  systems 
builder  comes  up 
through  the  techni¬ 
cal  ranks  and  learns 
about  business  along 
the  way.  Sometimes 
the  systems  builder 
comes  up  throu^ 
the  business  side  and 
manages  to  learn 
about  technology. 

Either  way.  this  is 
someone  who  can 
clearly  demonstrate  skills  in  two  main 
areas:  designing  systems  and  leading 
projects  to  build  systems. 

Next  month.  I’ll  discuss  the  six 
skills  that  are  the  basis  for  success 
in  leading  projects.  But  now  I'll  look 
at  the  five  basic  skills  the  systems 
builder  needs  in  order  to  be  any  good 
in  the  first  area  —  designing  systems. 
There  are  certainly  other  skills,  but 
without  these  as  a  foundation,  the  sys¬ 
tems  builder  can't  excel  in  the  des^ 
process: 

1  Undantand  tha  buBinMi  opentton. 

The  systems  builder  needs  to  have  a 
good  grasp  of  the  concepts  and  rules 
that  guide  the  business  operatioa  This 
means  knowing  how  the  operation  fils 


into  the  overall  business,  how  the  work 
of  the  operation  is  perfonned  and  what 
the  cost  and  profit  factors  arc. 

2.  Craale  an  nduiive  proem.  Systems 
builders  must  be  able  to  consistently 
produce  competent  (and  sometimes 
even  brilliant)  designs  in  spite  of  high 
levels  of  complexity  in  both  business 
and  technology.  Complexity  loses 
much  of  its  power  to  intimidate  and 
confuse  if  groups  of  people  with  the 
appropriate  skills  and  experience 

arc  brought  together  in  a  collabora¬ 
tive  process  where  they  can  pool 
their  collective  insights.  The  systems 
builder  is  the  one  who  orchestrates 
this  process. 

3.  TolaralB  not  knowno.  It‘s  an  act  of  real 
discipline  to  inunerse  yourself  in  the 
details  of  a  situation  and  resist  the 
temptation  to  rush  to  judgment.  Be¬ 
cause  of  the  complexity  inherent 

in  most  situations,  it’s  unlikely  that  a 
great  system  design  will  be  the  first 
or  even  the  second  one  that  comes 
to  mind. 

The  systems  builder  keeps  an  open 
mind  and  encourages  othem  on  the 
project  to  do  the  same  as  they  investi¬ 
gate  the  issues. 

4.  Look  lor  the  aimpie  imdiriytno  prttam 

This  is  the  creative  leap  where  investi¬ 
gation  and  analysis  give  way  to  synthe¬ 
sis  and  the  design  emerges.  At  first, 
you're  assailed  by  the  surface  com¬ 
plexity  of  the  situation  and  all  the  po¬ 
tential  technology  that  could  be  used. 
When  you  allow  a  range  of  possible 
solutions  to  be  generated,  some  pro¬ 
foundly  simple  and  yet  very  useful 
insights  can  emerge. 

5.  Use  sknpja  contatlora  (rf  tachnotogy  Mid 
preoBK.  Beware  of  the  cleverness  trap. 
Cleverness  means  complexity,  and 
complex  designs  are  very  ha^  to 
build.  Strive  to  create  system  designs 
that  display  an  elegant  simplicity.  Use 
as  few  technology  components  as  pos¬ 
sible,  and  use  each  component  for 
what  it  does  best 

Use  these  components  to  support 
streamlined  worldlow  processes  that 
will  achieve  the  performance  levels 
needed  to  eflfectively  respond  to  the 
business  issues  that  the  system  b 
meant  to  address. 

If  you  are  a  systems  builder  or  want 
to  become  one,  work  at  developing 
these  skills,  and  your  success  rate  will 
go  way  up.  If  you  are  an  executive  who 
sponsors  or  oversees  systems  develop¬ 
ment  projects,  make  sure  that  a  person 
with  these  skilb  heads  each  project 
€147673 
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Success  With 
Word,  Mind 
And  Deed 

For  high-level  it 
managers,  career  suc¬ 
cess  could  be  a  matter 
ofWMDs. 

No.  those  aren't  weapons  of  mass  de¬ 
struction.  In  thb  case.  WMD  b  short¬ 
hand  for  “words,  mind-sets  and  deeds." 

Words  refers  to  the  messages  wc 
send.  Mind-sets  are  the  mental  modeb 
that  are  at  work  in  our  own  brains  and 
in  those  of  key  constituents.  Deeds 
refers  to  how  we  and  key  constituents 
behave. 

Words 

Several  years  ago.  the  CEO  of  a  major 
software  vendor  visited  Tokyo.  Want¬ 
ing  to  reach  out  to  hb  audience  of  very 
senior  IT  executives,  be  decided  to 
pull  a  Kennedy:  Just  like  J.F.K.  in  Ber¬ 
lin  and  Jackie  Kennedy  in  France,  he 
would  open  hb  remarks  in  the  native 
tongue  of  hb  audience.  He  wanted  to 


say.  “I  am  tickled  pink  to 
be  here.  I  am  so  happy  I 
could  die." 

Instead  he  said.  “1  have  a 
rash  that  will  probably  kill 
me." 

The  hygienc-conscious 
Japanese  were  in  no  hurry 
to  meet  with  this  CEO.  The 
lesson:  Have  a  message  that 
matters  and  b  connected  to 
what  you  are  trying  to  da 
And  while  it’s  always  a  good 
idea  to  speak  the  language 
of  one’s  audience,  it's  al^ 
important  to  make  sure  that 
the  message  translates  correctly. 

Mind-sets 

Researdi  sponsored  by  Lawson  Soft¬ 
ware  and  conducted  at  a  series  of  exec¬ 
utive  dinners  across  the  country  indi¬ 
cates  that  IT  leaders  with  accelerating 
career  momentum  have  a  real-time 
inventory  of  the  IT  mental  modeb 
that  are  at  work  in  and  around  the  en¬ 
terprise. 

An  IT  mental  model  is  the  particular 
way  in  which  a  person  thinks  about  IT 
—  values,  belief  frameworks,  stories. 

Successftil  IT  leaders  understand 
their  personal  IT  mental  models,  the 
IT  mental  modeb  of  their  internal  and 
external  customers,  and  the  IT  mental 


modeb  that  are  at  work 
among  their  competitors. 

Deeds 

Many  longtime  participants 
in  the  IT  game  observe  that 
for  all  our  fuss  and  bother, 
the  problems  we  arc  work¬ 
ing  on  today  are  much  the 
same  as  the  problems  we 
were  working  on  20  years 
aga  Thb  b  probably  be¬ 
cause  we  thought  for  the 
longest  time  that  our  job 
was  to  deploy  technology. 

As  new  lechrology  became 
available  and  expanded  what  we  could 
accomplbh  with  a  computer,  wc  de¬ 
ployed  it  But  deploying  stuff  isn’t  our 
real  job.  Although  we’re  just  now  step¬ 
ping  up  to  it.  our  real  job  b  to  change 
wxirkplace  behaviot 
Before  starting  an  IT  project  one 
should  model  “before"  and  "after" 
workplace  behaviors.  IT  success  now 
hinges  on  bow  people  act  —  their 
deeds  —  not  on  whidi  technical  de¬ 
vices  were  shipped  and  plugged  ia 
047952 
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Keep  Users  in  Mind, 
And  Keep  It  Simpie 

Luimr  WILLIAMS’ contribution 
fOuickLink  47099]  to  your  May 
31  letters  column  speaks  vofumes 
about  how  some  techies  view  users 
with  disiaste  and  arrogance.  Com¬ 
menting  cm  a  column  about  the  per- 
4s  of  Sasser,  etc..  Wiltisns'  retort  6 
essenttaly  that  al  one  has  to  do  is 
install  hanJwwe  and  software  fire-  i 
waits  and  disallow  a  bunch  of  soft-  | 
ware  and  secise-dear  admmistraior 
rights,  and  so  on. 

For  the  nwxiscule  percentage  of 
technicaly  adrott  PC  owners  and 
users,  this  is  certainly  ail  chikTs 
play.  The  issue  is  that  the  vast  ma- 
lorflyofPCsare  operated  by  folks 
who  can  no  more  do  those  things 
than  they  can  replace  the  dnvelrain 
otiheircars. 

K  there  were  a  plague  of  poor  as¬ 
phalt  leading  to  rnore  accidenis.  the 
cry  would  naturally  be  to  improve 
the  roatb.  but  tor  W(5  erf  Williams' 
persuasion,  the  ‘simple  answer* 
would  be  to  just  inslal  extra  low 


gears  in  your  car  to  make  it  eas«r 
to  drive  those ‘supposedly  danger¬ 
ous*  roads. 

Bob  Maty 

Partner,  Third  Wove  Inter¬ 
national  Von  Nuys.  Calif. 


Not  Rocket  Science 

I  NINE  Ainicu*EU Seeks  Quan¬ 
tum  Orography  Response  to 
Echelon*  [QuicMJnk  46^  the  au¬ 
thor  obse^  that  there  are  a  num¬ 
ber  of  technical  chalenges.  rnckd- 
ng  building 'sensors  capable  of  re¬ 
cording  the  wnval  of  photons  M  high 
speed  *  Because  al  phmons  travel 
exacttyatthespeedofbghtiltsun* 
cailan  vvhy  encryirfed  ones  should 
requresp^lraatmeni.Moreit- 
recttyreleiMntlothedOparenlprab' 
iemofunaulhonzBdsabfliteeaves- 
droppmgwouldbethesimplesaiu- 
bon  of  noR  leateng  comrTxinicalions 
skywMd.wheresMeilitescouldie' 
ceive  them.  Clearly,  quantum  cryp¬ 
tography  is  not  rocket  science. 
JolmHkrfiMlWIliMm 
Redwood  City.  Caitf.  \ 


Tech  Issues  WNI  [)elay  Music-Store  Death 


PNMl  FOX  thinks  that  n  less 
thanadecade.thehgbnck- 
and-mortar  music  retailers  wdi  be 
out  of  business  (The  Day  the  Music 
Stores  Died.*  QuckU*  46935] 

He  goes  on  to  ate  Internet  down¬ 
load  and  the  Apple  iPod  as  the 
technologies  that  wi  destroy  muse 
retarfng. 

Although  10  yeais  s  a  tong  tme. 

4  won'!  be  long  enough  to  ddoy 
the  musK  business  Many  coltectors 
enioy  the  kner  notes,  and  these 
doni  oorne  wdh  dcMnloaded  tracks. 
But  the  ent  the  only  thmg  stopping 
the  wholesale  dernolwon  of  nusic 
retarfers  The  technology  ami  al 
that  great!  My  40GB  MP3  lukebcB 
(ted  after  less  than  SIX  months. 

Wat  music  aficionado  wants  to 
trust  such  unreliable  technology? 

Even  more  Iroubifig  6  the  greedy 
muse  industry.  UnM  4  can  agree  on 
a  model  and  format  that  works  on  al 
devices.  Itas  transformebon  won1 
occur.  The  pnong  needs  to  be  kxad. 
too:  $1  e  track  6  highwey  robbery  If 


4  fm  geftng  are  sorrw  bus  and 
bytes  and  not  a  tangbie  dec  or  tape. 
And  I  wont  to  be  able  lo  copy  I  from 
my  PC  to  my  MP3  player  to  my  car  to 
a  tape  and  to  a  CO  •  mJvie  tones 
Once  fve  bought  1 4  should  be 
mne.  Let's  sake  these  Gsues  first, 
then  we  can  ta*  about  shutting 
down  (he  CD  shops. 

Craig  S.  Moflins 
Director  qf  rechnolq;>- 
planning.  Houston 

COMnHEinVOmi)  wBlcoriMs 
comments  from  4B  leaders  Letters 
wi  be  ediad  tar  brevey  and  danty. 
They  should  be  addressed  to  Jamte 
Eckta.  letters  edrfor.  Computerwakl 
PO  Box  9171. 500  Ota  Cormadicui 
Path.  Frammghanv  Mass  OfTDI 
^(508)879-4643 
E  intol.  teflen6oornpulerworkl  com 
kickjde  an  address  and  phone  num¬ 
ber  tar  mnedate  verrficaliDn 


k  For  more  taiiBS  on  these  and 
'  othe  lopo.  go  Id 


Your  business  is  only  as 
secure  as  your  network. 

Here’s  sonne  extra 
protection: 

www.idg.net/mcafeecenter 


If  your  company  is  compromised  or  experiences  downtime 
for  even  a  matter  of  minutes,  that  time  can  translate  into  lost 
profitability,  customers  and  dollars.  And  that  is  something 
none  of  us  can  afford. 

For  that  reason  the  McAfee®  Enterprise  Security  Center 
was  created:  an  exclusive  collection  of  news,  whitepapers, 
information,  analysis  and  strategies  for  securing  your 
networks  and  systems. 

Learn  new  strategies  for  securing  your  servers  and  protecting 
your  desktops  from  viruses.  Get  the  latest  information  on  howto 
stay  on  top  of  the  latest  threats  to  your  network  and  bolster  your 
skills  in  synergizing  your  IT  staff  as  a  critical  business  asset. 

Armed  with  this  knowledge,  you'll  not  only  strengthen 
your  network's  defenses,  you'll  also  enhance  your  IT 
leadership  and  business  skills,  benefiting  your  enterprise's 
bottom  line— and  your  own. 
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Simplifying  NAS  Management 

More  companies  are  choosing  technol¬ 
ogy  that  pK>ols  and  virtualizes  net¬ 
work-attached  stor^  systems  to  con¬ 
solidate  NAS  management.  Pape  25 


CASE  STUDY 

Wireless  CRM  Takes  to  the  Reid 

Pitney  Bowes'  new  wireless  field  service 
system  gives  technicians  both  a  broader 
wireless  coverage  area  and  expanded 
access  to  customer  data.  Page  24 


SECURITY  MANADER'S  JOURNAL 

Four  Steps  to  a  Secure  Budget 

Our  new  Security  Manager’s  Journal 
columnist  outlines  a  step-by-step 
strateg>'  for  freeing  up  Kmds  for 
critical  IT  security  projects.  Page  28 


CHRISTOFER  HOFF  is  tak¬ 
ing  no  chances  when  it 
comes  to  protectmg  his 
organization  against 
worms  and  viruses.  As 
the  director  of  enter¬ 
prise  security  services  at  Western 
Corporate  Federal  Credit  Union  (Wes- 
Corp),  Hoff  has  put  in  place  a  multilay¬ 
ered  architecture  designed  to  set  as 
many  barriers  as  possible  between  the 
bad  guys  and  his  data. 

Apart  from  the  usual  firewall  and  an¬ 
tivirus  tools,  the  San  Dimas.  Cali£-ba$ed 
company,  which  has  $25  billion  in  as¬ 
sets.  has  also  segmented  its  networks 
and  deployed  an  array  of  intrusicm 
detection  and  prevention  tools,  client 
security  products  and  threat-modeling 
software.  Such  defense  in  depth  is  pre- 
asdy  what’s  needed  to  keep  maranHing 
malware  at  bay  these  days,  say  security 
practitioners  such  as  Hoff. 

*Theworm 
problem  has 
omtpletely 


catalyzed  the  relevancy  of  the  informa¬ 
tion  security  function.*  says  Hoff.  “It’s 
not  about  ROI  any  longer  but  about  the 
teduction  of  risk  on  investment* 

Worms  aiKl  other  malware  have  been 
around  for  years.  But  several  trends 
are  coming  together  to  make  them 
more  dangerous  than  before,  users  say. 

■  WonnvnNmaraliidngadiMnlaoao^ 
imRy  announead  aeftiMn  Ims  mom  qiriddy. 

ua«s  lam  lirae  to  dafand  tfMk  ayaiaras. 
Last  year’s  Blaster  was  considered  East 
when  it  e:q>loited  a  vulxterability  in  26 
days.  This  May’s  Sasser  worm  took  17  ' 

days,  while  the  Witty  worn  in  March 
was  out  in  one  day.  And  there  ha^v 
been  a  few  “zero-day*  exploits,  which 
appear  before  a  flaw  has  been  disclosed 
or  a  fix  becomes  available.  Their  dam- 
has  been  limited,  but  it’s  only  a 
matter  of  time  before  a  virulent  one  is 
unleashed,  experts  say.  “Thk  is  a  war. 

If  the  users  are  to  win,  they  have  to 
beat  the  clock  every  single  time.”  says 
Eric  Utt,  chief  infmmation  security  of¬ 
ficer  (CISO)  at  General  Motors  Corp.  I 


But  companies  are  still  takii^  an  av¬ 
erage  of  60  days  to  patch  their  systems, 
which  is  too  long,  says  Gerhard  Eschel- 
bedt,  diief  technology  officer  at  Qualys 
Inc.,  a  Redwood  Shores,  Calif.-based 
provider  of  vulnerability  management 
services.  Also,  every  year  half  of  the 
most  critical  vulnerabilities  are  replaced 
with  new.  equally  serious  ones,  he  says. 

of  p«tmn  and  fldMr  tMrd  pvta.  The  bur¬ 
geoning  remote  and  wireless  user  pop¬ 
ulation  adds  to  the  problem. 

“There  are  more  avenues  that  can  be 
attacked,  wdiich  is  why  perimeter  de¬ 
fenses  alone  are  no  longer  enough.” 
says  Greg  Murray,  vice  presideat  of  in¬ 
formation  security  at  liifonnation  Re¬ 
sources  Inc.  in  Chicago.  IRI  does  mar¬ 
ket  research  for  some  of  the  world’s 
largest  food,  consumer  goods  and 
pharmaceutical  companies. 

•UfanmaraWngralMMditMimr- 
incTMong  rate,  and  th^Tiv  baconing  more 
MnL  Four  of  the  five  worst  mass  out- 


Companies  are  throwing  up  layers  of  protection 
new  worms  and  viruses  appear  at  an  ever- 
-^^xS^kauickening  pace,  by  jaikumar  vmayan 
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breaks  of  worms  -  M\  NotSky. 

Bagic  and  Sasser  —  have  taken  place 
this  year.  Antivirus  nrm  Svmanicc 
C»)rp.  has  rated  mi  ire  threats  at  t^^aicin*-  I 
ry  4  —  its  most  severe  -  in  the  first 
parr  of  :iHt4  than  it  did  in  all  of  2003. 

For  instance.  Mv  l)<H»m  infected  sys¬ 
tems  and  then  used  them  as  launch 
pads  ti'r  deniaJ-of-sereice  attacks 
j^insi  MicroM»ft  Corp.  and  The  SCO 
Vtroup  Inc.  Other  worms  have  attempt¬ 
ed  to  block  infected  systems  from 
d»>wnlojdLnp  patches  and  antivirus  up¬ 
date's.  while  others  have  been  u.scd  to 
install  back  doctrs  and  steal  data. 

'•The  day  of  the  digital  Pearl  Harbor 
that  a  lot  ofpeisple  have  been  talking 
about  is  fast  appn>aching."  says  lamie 
Chanaja.  CISC  ji  Geisinger  Health 
System  in  Danville.  Pa. 

Preparing  for  that  emergency  re¬ 
quires  a  security  architecture  capable 
of  aut«>matically  detecting  and  bkvk 
ing  ihrc'ais.  both  known  and  unknown, 
say's  Lin.  “The  dominant  laniivirusl 
ieehn<«logies  today  are  those  that  filter 
out  infc'ciions  basc'd  upon  signaiurev" 
he  says.  This  .ipproach  works  only 
w  iih  known  vulnerabilities  and  exploit 
c»Hle.  Given  the  shortening  time  K'- 
rween  vulnerability  disclosures  and 
exploit  availahiluk's.  that  simply  isn't 
enough.  IJfi  s.iys. 

“  The  core  reason  vs  hy  worms  .ind 
viruses  .ire  si>  effective  is  |ji;«  it  k  not 
always  feasible  for  companies  to  patch 
pn»ducti(m  systems  right  away.'’  soys 
Chanaga,  The  goal  should  be  to  have 


enough  defease  Liycrs  so  that  a  breach 
I  of  one  layer  won't  compromise  your 
ability  to  do  business.  Litt  wys, 

In  WesC'orps  ease,  the  company's 
networks  have  been  segmented  by  ap¬ 
plication  function  and  business  value. 
For  instance,  all  of  its  SQL  servers  sit 
on  one  segment,  and  its  mail  servers 
sit  i>n  another.  Each  network  segment  is 
protected  by  an  array  of  intrusion  de¬ 
tection  and  prevention  systems,  and 
deep  packet-inspection  firewalls  and 
signature-based  aniiviru-s  U'chnologies 
,  conduct  filtering. 

[  WesCorp  uses  a  server-based  scan- 
i  ning  technology  from  WholeSeeurity 
'  Inc.  in  Au.stin  to  scan  client  or  partner 
I  systems  for  Tnijan  horses,  spyware 
I  and  other  malicious  code  before  letting 
another  party  li*g  into  its  corporate 
network.  A  Qualys  third-party  vulnera¬ 
bility  managemeni  service  scans  for 
I  holes  and  helps  WesC*>rp  quickly  priori- 
I  tize  the  assets  that  iKvd  to  he  pnttcctcd 
in  the  event  of  an  attack.  Also  deployed 
IS  software  from  Sk\  box  Security  Inc. 
in  I’alo  Alto.  ( jlif..  that  combines  fire- 
w’all.  router,  network  and  vulnerability 
Jala  to  mvHlei  attacks. 

Tivhnokigy  from  t)rossbeam  Sys¬ 
tems  Inc-  in  Concord.  Mass.,  allows 
Wes<  lorp  to  consolidate  the  manage¬ 
ment  ol  all  of  its  security  ci*mponenis. 
The  result  w  impres.sive.  but  not  per-  t 
feet,  security.  '  We  will  never  be  .able  to  | 
bringdown  the  risk  to  zen>."  HotT says.  ' 

It's  crucial  to  install  host  fircwalLs. 
virtual  pru'ate  nciW4>rk  support  and  , 


MORE  THAN  SIGNATURES  NEEDED 


MMl  oMnue  to  olSY  a  rote  f)  iiAfe  tintnH^^ 
bon  strateges  but  tiOT‘1  be  as  prormnent  8s  (hey 
ate  n<Mr.  users  say. 

TiadtiDnal  aniMus  produds  Mto 
arto  i«fies  by  makAng  paoerm  n  their  ie&  The 
approad)  is  sti  consNkrad  Ihe  mod  enec^ 
biociiifto  iaio«m  ttweets.  especially  becau^ 
sorne  wornie  floto  arotfto  toe  Intemel  for  yeeis. 
laers  sey.  Companies  that  have  kept  toer  wus 
s^niures  iiidatad  have  oonssieniV  bee^ 
to  avoid  eimn  toe  mote  dangemus  ouctraaks 

Kewsiw.  toe  lechnologtes  don't  work  agansl 
previoiely  ureinovm  «prTi&  Fw  such  products 
to  be  eftoctrve.  vendors  need  to  develop  new 
sigreaaes  every  ira  a  worm  appaen.  Thw  e  true 
««t  n  cases  of  triAaite  worm  vmnts  toat  may 
aH  be  e^Ming  toe  same  vubierabiliiy  or  use  tl4 
samemetoods  The  speed  ai  which  vendors  can 
deliver  such  i4Ktafies  6  bearnig  mcreastndv 
cniewf  as  hackers  exptoii  holes  at  a  ojidw  pace. 

Useis  also  need  a  vray  10  constantly  poll  for 
new  aqntoures  to  keep  toee  files  updated  Be¬ 
cause  of  toe  eioaase  m  toe  number  ol  woms. 
carnpanies  have  had  to  Orarnstediy  incmese  toe 


number  ri  tunes  they  check  for  updates  with 
^  antMri£  vendors,  somehmasdomg  so  as  often 
as  once  every  15  mnites.  *Wonm  are  traveling 
faster  than  aniivaus  updates' says  Berhard 
Eschett)eck.CTOatCualys. 

I  In  the  future,  big  companies  won't  be  able  to 

-  cxMit  on  antMrus  vendors  to  win  the  race  says 
Enc  Ud  CtSO  at  General  Motors. 

Thto  realtoi  B  forcing  many  oi  them,  mciuding 
6M.  to  look  tot  tochnotoges  capable  of  detect¬ 
ing  and  proacovely  btod^  toretes. 

Thetmo  Electron  Corp.  a  $?  btflton  rnarufac- 
,  tarerofmedi(alequtomerrtinVtettham.MBSs.. 

6  planning  to  deploy  a  new 'memory  toevoT 
kom  Oettemina  Ire.  a  siah-ito  in  Itetovood  Dty. 
I  CaM  Instead  ot  signature  matching.  Delermina’s 
technology  uses  an  appkeation  men«ry  scar^ 
nmg  technesje  to  detect  and  btock  even 
unknown  threats 

Otoerproductsbtockattecksbasedondevia- 
tiorB  n  network  trafkc.  Wtoite  such  pioducts  are 
being  oftored  as  attemabves  to  signature-bteed 
technotogies.  experte  say  iTs  ttte  earty  to  (vedict 
how  effective  toeyl  be 

-  Jatimmar  \fiiaYan 


DISCOVERV/ATTACK  UFE  CYCLE 

As  (bs  graph  illustrates,  the  window  between  the  lime  a  vulnerability  is  discovered  and  the  time  it « 
exploited  IS  shrinking.  Consequently,  security  teams  have  less  time  to  identify  and  fix  problems  before 
networks  are  subiect  to  attacks  so„«<f  ut. 
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Vulnerability  Advisory 
discovered  released 

intrusion-Ucletlion  technologies  on  all  i  in  mind  when  deploying  such  a  multi- 
endpoint  devices  and  to  have  ways  to  layered  defense,  users  say. 
enforce  compliance  with  clients  and  |  TTie  biggest  is  the  integration  of  the 
business  partners,  says  Murray.  He  '  various  technology  comfK>nx'nis. 
uses  a  UHil  from  Check  Point  Software  [  Where  possible,  it's  important  to  use 
Technok>gies  Ltd.  to  do  all  of  that.  '  buying  power  to  get  vendors  to  do  the 
“The  days  when  you  could  simply  :  integration  for  you  before  agreeing  to 
have  a  titanium  outer  shell  arc  over.  j  buy  a  pri>duct.  Hoff  says, 
considering  you  have  to  open  \x>ur  net-  H.nving  a  muliiLiycred  strategy  also 
works  to  trading  partners,  \  endors  .md  di>es  little  gw»d  without  comptvhen- 
othcr  institutions.  Chanaga  says.  sive  analytical  and  reporting  eapabtli- 

Real-time  monitoring  of  the  netwtirk  ties  to  interpret  and  present  the  mfor- 
and  all  systems  conni'cted  to  it  i.s  also  i  maiion  that's  gathered  by  such  sy.s- 
crucial  for  delecting  vulnerabilities  '  terns,  Murray  says, 
and  prioritizing  responses,  says  Ghana-  “More  security  ttvhnologies  doesn't 
ga,  who  is  using  Qualys  to  do  both.  make  you  imirc  secure;  K'tter  manage- 


Lesson  Learned 

Sallie  Mae  Irw.  has  revampi'd  much  of 
its  worm  mitigation  straieg)-  after  be¬ 
ing  badly  mauled  by  the  Nimda  worm 
in  September  2(H)1.  says  Mare  Houpt. 
the  s-ompany's  information  security  ar¬ 
chitect.  Since  then.  Keston,  Va.-ba-sed 
Sallie  Mao  has  signed  up  with  New 
York-based  Messagel  jbs  Inc.  to  scan 
Its  80,000  daily  c-maiis  and  filter  out 
executable  files  and  other  suspicious 
extensions.  It  has  deployed  antivirus 
wftware  frtim  Computer  Associates 
Internationa]  Inc.  on  all  servers  and 
workstations  and  has  incn.’ased  the  fre- 
qucnc>'«f  its  searches  for  updated 
virus  signatures  from  rw'ice  a  day  to 
every  four  hours.  The  company's 
workstations  check  with  the  master 
antivirus  server  every  15  minutes. 

Sallie  Mae's  information  security 
team  has  also  been  given  greater  au¬ 
thority  to  make  spot  decisions  about 
w  orms  and  viruses,  Houpt  says.  When 
MyDiHim  started  spreading,  be  was 
able  to  quickly  convince  his  superiors 
to  shut  down  the  e-mail  servers  until 
the  problem  was  fi.xed.  Previously, 
such  a  shutdown  would  have  required 
“two  or  three  levels  of  authorization 
and  a  very  strict  on-the-spot  change- 


meni  Jxk-s."  says  Sam  Curry,  a  \-icc 
president  at  CA. 

And  don't  undcresiim.iie  the  sup¬ 
port  issues.  R)r  instance,  integrating 
security  into  endpoint  devices  will  in¬ 
evitably  re.sulf  in  tmire  calls  to  the  PC 
^  help  desk,  requiring  the  information 
security  group  to  assume  responsibili- 
I  ly  for  Si>me  of  the  exist  burdens  as  well. 

HolT says.  So  end-user  training  is  an 
I  essential  eompxmeni  of  any  worm  miti- 
I  gallon  strategy. 

I  Ironkraliy,  regulations  can  sometimes 
I  get  in  the  way.  For  example,  Geisinger 
is  unable  to  deploy  much-needed  patch¬ 
es  and  antivirus  software  on  exposed 
Windows-based  clinical  sy'stcms  be¬ 
cause  it  will  break  the  FDA  ceniftca- 
tion  on  tho.se  systems.  Chanaga  say.s. 

The  effort  also  needs  to  be  balanced 
j  against  business  needs.  Houpt  says.  For 
I  instance,  when  the  information  securi- 
I  ly  team  gets  the  authority  to  shut 
down  crucial  servers,  it  must  have  a 
I  very  good  understanding  of  a  prob- 
I  lem's  potential  effect,  he  says, 
j  “Your  infoscc  team  needs  to  have  the 
technical  know-how  and  the  crcdibility 
'  to  make  an  impact  assessment,  and  the- 
I  user  teams  nc^  to  be  able  to  trust  that 
I  knowledge."  Houpt  says.  O  47711 


control  process."  he  say.s.  “Now  all  it 
requires  is  a  consensus  between  the 
netwxirk  manager  and  myself.“ 

It's  important  to  kc'cpcert.iin  issues 
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breaks  of  worms  —  MyDoom.  NetSky, 
Bagle  and  Sasser  —  have  taken  place 
this  year.  Antivirus  fum  Symantec 
Corp.  has  rated  more  threats  at  Catego¬ 
ry  4  —  its  most  severe  —  in  the  first 
part  of 2004  than  it  did  in  ail  of 2003. 
For  instance,  MyDoom  iitfected  sys¬ 
tems  and  then  used  them  as  launch 
pads  for  deniai-of-service  attacks 
against  Microsoft  Corp.  and  The  SCO 
Group  Inc  Other  worms  have  attempt¬ 
ed  to  block  infected  systems  from 
downloading  patches  and  antivirus  up¬ 
dates;.  while  others  have  been  used  to 
install  back  doors  and  steal  data. 

*The  day  of  the  digital  Pearl  Harbor 
that  a  lot  of  people  have  been  talking 
about  is  fast  approaching.”  says  Jamie 
Chanapt,  CISO  at  Getsinger  Health 
System  in  Danville.  Pa. 

Preparing  for  that  emergency  re¬ 
quires  a  security  architecture  capable 
of  automatically  detecting  and  block¬ 
ing  threats,  both  known  and  unknown, 
says  Litt.  “The  dominant  (antivirusi 
technologies  today  are  those  that  filter 
out  infections  based  upon  signatures," 
he  says.  This  approach  works  only 
with  known  vulMrabilitics  and  exploit 
code.  Given  the  shortening  time 
tween  vulnerability  disclosures  and 
exploit  availabilities,  that  simply  isn’t 
enough.  Lin  says. 

■The  core  reason  why  worms  and 
viruses  are  so  effective  is  that  it  is  not 
always  feasible  for  companies  to  patch 
production  systems  right  away,"  says 
Chanaga.  The  goal  should  be  to  have 


enough  defense  layers  so  that  a  breach 
of  one  layer  won’t  compromise  your 
ability  to  do  business,  Un  says. 

In  WesCorp's  case  the  company's 
networks  have  been  segmented  by  ap¬ 
plication  function  and  business  value. 
For  instance,  all  of  its  SQL  servers  sit 
on  one  segment,  and  its  mail  servers 
sit  on  another.  Each  network  segment  is 
protected  by  an  array  of  inmtsion  de¬ 
tection  and  prevention  systems,  and 
deep  packet-inspection  firewalls  and 
signature-based  antivirus  technologies 
conduct  filtering. 

WesCorp  uses  a  server-based  scan¬ 
ning  technology  from  WboIeSecurity 
Inc.  in  Austin  to  scan  client  or  partner 
systems  for  TVoian  horses,  spyware 
and  other  malicious  code  before  letting 
another  party  log  into  its  corporate 
network.  A  Qualys  third-party  vulnera¬ 
bility  management  service  scans  for 
holes  and  helps  WesCorp  quickly  priori¬ 
tize  the  assets  that  need  to  be  protected 
in  the  event  of  an  attack.  Also  deployed 
is  software  from  Skybox  Security  Inc. 
in  Palo  Alto.  Calif.,  that  combines  fire¬ 
wall.  router,  network  and  vulnerability 
data  to  model  attacks. 

Technology  from  Crossbeam  Sys¬ 
tems  Inc.  in  Concord,  Mass.,  allows 
WesCorp  to  consolidate  the  manage¬ 
ment  of  all  of  its  security  components. 
The  result  is  impressive,  but  not  per¬ 
fect.  security.  “We  will  never  be  able  to 
bring  down  the  risk  to  zero."  Hoff  says. 

It’s  crucial  to  install  host  firewalls, 
virtual  private  network  support  and 


MORE  THAN  SIGNATURES  NEEDED 


discovery/attack  ufe  cycle 

As  IhB  grapti  ilkislrates.  tM  wifKiow  between  the  tm  a  vulnefaMrty  B  discovered  and  the  time  it  6 
explortedisshnntung.  Consequently,  security  teams  have  less  titne  to  kJenlify  and  fbi  problems  before 
networks  are  subjecito  attacks. 


intrusion-detection  technologies  on  all 
endpoint  devices  and  to  have  ways  to 
enforce  compliance  with  clients  and 
business  partners,  says  Murray.  He 
uses  a  tool  from  Check  Point  Software 
Technologies  Ltd.  to  do  all  of  that. 

The  days  when  you  could  simply 
have  a  titanium  outer  shell  are  over, 
considering  you  have  to  open  your  net¬ 
works  to  trading  partners,  vendors  and 
other  institutions."  Chanaga  says. 

Real-time  monitoring  of  the  network 
and  all  systems  connected  to  it  is  also 
crucial  for  detectit^  vulnerabilities 
and  prioritizing  responses,  says  Chana¬ 
ga.  who  is  using  Qualys  to  do  both. 

Lesson  Learned 

Sallic  Mae  Inc.  has  revamped  much  of 
its  worm  mitigation  strategy  after  be¬ 
ing  badly  mauled  by  the  Nimda  worm 
in  September  2001.  says  Marc  Houpi, 
the  company’s  information  security  ar¬ 
chitect.  Since  then,  Reston.  Va.-ba^ 
Sallie  Mae  has  signed  up  with  New 
York-based  MessageLate  Inc  to  scan 
its  80.000  daily  e-mails  and  filter  out 
executable  files  and  other  suspicious 
extensions.  It  has  deployed  antivirus 
software  from  Computer  Associates 
International  Inc  on  all  servers  and 
workstations  and  has  increased  the  fre¬ 
quency  of  its  searches  for  updated 
virus  signatures  from  twice  a  day  to 
every  four  hours.  The  company’s 
workstations  check  with  the  master 
antivirus  server  every  15  minutes. 

Sallie  Mae’s  information  security 
team  has  also  been  given  greater  au¬ 
thority  to  make  spot  deebions  about 
worms  and  viruses.  Houpt  sa^  When 
MyE)oom  started  spreading.  ^  was 
able  to  quickly  convince  his  superiors 
to  shut  down  the  e-mail  servers  imtU 
the  problem  was  fixed.  Previously, 
such  a  shutdown  would  have  required 
“two  or  three  levels  of  authorization 
and  a  very  strict  on-the-spot  change- 
control  process.”  be  says.  “Now  all  it 
requires  is  a  consensus  between  the 
network  manager  and  myselL" 

It’s  important  to  keep  certain  issues  I 


in  mind  when  deploying  such  a  multi¬ 
layered  defense,  users  say. 

The  biggest  is  the  integration  of  the 
various  technolc^  components. 
Where  possible,  it’s  important  to  use 
buying  power  to  get  vendors  to  do  the 
integration  for  you  before  agreeing  to 
buy  a  product,  Hoff  says. 

Having  a  multilayered  strategy  also 
does  little  good  without  comprehen¬ 
sive  analytical  and  reporting  capabili¬ 
ties  to  interpret  and  present  the  infor¬ 
mation  that’s  gather^  by  such  sys¬ 
tems.  Murray  says. 

“More  security  technologies  doesn't 
make  you  more  secure:  better  manage¬ 
ment  does,"  says  Sam  Curry,  a  vice 
president  at  CA. 

And  don’t  underestimate  the  sup¬ 
port  issues.  For  instance,  integrating 
security  into  endpoint  devices  will  in¬ 
evitably  result  in  more  calls  to  the  PC 
help  desk,  requiring  the  information 
security  group  to  assume  responsibili¬ 
ty  for  some  of  the  cost  burdens  as  well. 
Hoff  says.  So  end-user  training  is  an 
essentia]  component  of  any  worm  miti¬ 
gation  strategy. 

Ironically,  regulations  can  sometimes 
get  in  the  way.  For  example,  Geisinger 
is  unable  to  deploy  much-needed  patch¬ 
es  and  antivirus  software  on  exposed 
Windows-based  clinical  systems  be¬ 
cause  it  will  break  the  FDA  certifka- 
I  tion  on  those  systems.  Chanaga  says. 

'  The  effort  also  needs  to  be  balanced 
against  business  needs.  Houpt  says.  Fbr 
instance.  w4>en  the  infonnation  securi¬ 
ty  team  gets  the  authority  to  shut 
down  crucial  servers,  it  must  have  a 
very  good  understanding  of  a  prefo- 
lem’s  potential  effect,  he  says. 

“Your  infbsec  team  needs  to  have  the 
technical  know-how  and  the  credibility 
to  make  an  impact  assessmenL  and  the 
user  teams  need  to  be  able  to  trust  that 
knowledge.”  Houpt  says.  O  47711 
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Predict 


Introducing  IronPort  Virus  Outbreak  Filters 


Today’s  email  borne  viruses  propagate  globally  in  hours  or  minutes,  much 
faster  than  traditional  defenses  can  react,  leaving  you  exposed  to  the  “reaction 
time  gap.  IronPort’s  Virus  Outbreak  Filters'"  stop  viruses  4  to  6  hours  before 
traditional  virus  definition  files  are  available,  literally  prediaing  virus  attacks 
before  they  cause  harm.  Predict  your  future  at  www.ironport.com/cw 
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Wireless  CRM 


Y  ^  r  I  m  • 
lo  1  luK  ' 

Pitney  Bowes’  revamped  field  service  system 
provides  broader  wireless  coverage  while 
giving  technicians  access  to  more  customer 
information.  BY  MARC  L.  SONGINI 


WHii  f  MAs\  comf^anics 
an'  siill  tcstini!  large- 
scale  wia'IesN  CRM  pixij- 
ecfs.  Stamford.  Qmn.- 
hased  mailing  systems 
vendt>r  Pirncs  Bowes  Ine. 
is  an  expiTieneed  praeii- 
ti«*ner.  The  S4  billion  company  set  up 
il.s  first  uireless  system  in  the  late 
Since  then,  it  has  deploy  eJ  a  si-conJ- 
generation  system  f»>r  .250  field  ser\  ice 
emplmees  in  its  Document  Messaging 
Technolisgies  division,  which  sells 
high-end  insc-rter  mailing  systems. 

\ow  the  ct>mpany  is  w  rapping  up  a 
more  sophisticated  wireli-s>  CRM  ri»ll 
out  for  ii-st.lobal  Mailing  systems  dhi- 
sK'n.  where  some  wired  empNw  - 
CCS  service  Pitney  Bowes  machines  de¬ 
signed  for  the  low  -volume  distribution 
•  *l'mail. 

I'he  newvsl  s\>iem  c»»nnecls  field 
serv  ice  feprest-nraiives  to  its  back-end 
vull  eetilcr  and  serv  iee  jpplic.nfums. 

I  sing  pK  k^r  pCv  RJM  o<rsfr..m  Re¬ 
st  .irch  In  l  td.  and  other  de¬ 

ices  serv  ico  technicians  c.m  .uvess  a 
» idi  r  .tjue  of  J.Hii  triim  multiple  back- 
•  n.*.  v\h|,  r»tv  such  data  includt's  inf4>r- 
;iij'ii»n  .oh-’Ut  mu-ntory  .ivuilability 
-t»  J  •*  till  f  V  .ills  ,ifv  billable  o»r  eov- 
'  lOinrat' 

Early  Start 

niec-mp.tm  «  first  vcvl^.^s  t  KMsys- 
\-m  w.|s  m..re  Ir  relic  J  Mo 

torn!.  Ifu  •••  ck  .  iienr  ,ii  vici-s  ih.it 
csmtHcieJ  I.,  li.  niegroun  »  KM  sys¬ 
tems.  .mJ  it  Ten ie\.  J  Si  rMcc  call  J.»ta 
twer  .Moliem  t  .tj  s  w  rcl.  ss  J.u.i  net¬ 
work.  says  Ralph  Nuhols.  serviee  pr<i- 
gram  manager  at  Pitney  B.ot*- 
In  iWi.  the  company  bc-gai.  in<4vine 
t4i  hiw-cv»vt  RIM  devices  and  st.itt.  d 
Work  on  an  integrated  field  sen  icc  .md 


call  cenivT  back  end.  says  Mark  Davis, 
vice  president  of  cust«>mer  sen  ice. 

In  2001  Pitney  Bowes  installed  field 
serv  iee  s«iftware  from  San  Mateo, 
t  .alif--ba.scd  Siebel  Systems  Inc.  for  its 
Document  Messaging  div  ision.  and  it 
upgraded  to  cellular  wireless  serv  ice 
from  .-\tlanta-based  Cingular  Wireless, 
which  uses  General  P.icket  Radio  Ser- 
V  ice  <(iPRS)  iechnt*togy. 

kor  w  ireless  connectivity  middle¬ 
ware.  Ihtney  Bowes  u.svs  software  and 
sen  ices  from  .-Nnienna  Software  Inc. 
Antenna  and  SmartCIient  field  ser¬ 
vice  software  links  field  workers  with 
HIM  handheld  dev  ices  to  Siebs’l  sjiles 
force  automation  s»»ftvvjre  and  Ptinev 
Bowes'  parts  ordering  system. 

Network  coverage  was  important,  so 
the  company  tested  several  c.irriers 
and  dev  ices  before  settling  on  Gingu- 
lar’s  sen  iee  and  RlM  s  handheld  dc- 


\  Ill  s.  lerscy  t.ity,  N.I.-based  .-\iitenn.i 
w.is  ihe  logical  choice  for  g.new.iv  soft 
ware  .ind  sen  iccs.  s.iys  Paul  Wesit>n, 
Mcc  president  of  CRM  .u  Pitney 
Bowes  Its  software  had  the  most  fea¬ 
tures.  included  sy  stems  man.igcmeni 
to»*ls  for  troubleshooting  breakdowns, 
supported  multiple  carriers'  networks 
•ind  was  .lire .idy  Sicbcl-approveJ. 

I  nsuring  the  convcnicnccand  it.s- 
.ibility  tvf  (he  dev  iees  was  also  key.  "If 
ihe  thing  is  difficult  to  use,  ihc  people 
will  tind  ways  .irt'und  it.”  says  Weston. 
Si)  the  staff  made  sure  that  menus  on 
ihe  RIM  devices  were  easy  to  navigate 
and  included  special  product  codes  to 
help  users  place  inventory  orders. 

The  workfiow  starts  in  the  system 
when  a  customer  calls  the  contact  cen- 
ler  to  place  a  field  service  request.  The 
j  Siebel  application  identifies  the  prod- 
^  uct  needing  repair,  selects  the  repre- 
I  seniaiive  to  dispatch  and  pushes  the 
request  out  to  that  technician's  vvirc- 
,  less  device.  The  recipient  then  ae- 
I  knowledges  the  receipt  of  the  order. 

Messages  from  the  devices  are  rout¬ 
ed  to  Antenna's  wireless  gateways  in 
New  Jersey.  XMl  -formatted  data  is 
then  forwarded  over  a  frame-relay  or 
VPN  connection  to  Pitney  Bowes"  data 
center,  where  it  passe.s  through  a  gate¬ 
way  server  before  being  routed  n*  the 
back-end  applications. 

The  sy  stem  delivers  customer  data 
to  field  service  personnel  in  near  real 
time,  including  the  service  history  for 
a  given  customer  i»r  piece  of  equip¬ 
ment.  It  also  tells  the  technician 
whether  Wi«rk  is  covered  by  contract 
or  is  billable  and  feeds  data  for  billable 
work  into  the  company’s  billing  sys¬ 
tem.  When  parts  are  required,  the 
Siebel  field  service  applicaiion  deter- 


Pitney  Bowes'  Service  Ma'WQeiriPn!  Syst<' 


In  Pitney  Bowes'  Global  Maikno  Systems  divtsion.  field  service  staffeis  use  handheld  devices 

running  Antenna  SmartOient  software  to  access  customer  information  over  a  secure  VPN 

connection  Information  passes  to  a  system  running  MQSenes  rntddleware  that  converts  the 

message  mto  XML 

lormal  The  message 

then  passes  to  the  fMMKi 


lormal  The  message 
then  passes  to  the 
Siebel  system,  which 
automatically  updates 
irwentory,  billmg. 
call  center  and  other 
back-end  systems. 


mines  if  the  p.irt  is  in  sti'ck  .md  sends 
information  on  pans  ilie  technician 
uses  to  a  leg.icy  imentory  application 
ih.ii  in  turn  connects  to  the  company's 
's.AP  supply  chain  management  system. 

1  or  areas  where  w  ireless  coverage  is 
spotty,  client  devices  either  use  a  dial¬ 
up  v'onncction  or  store  information 
and  forward  it  later. 

Weston  says  that  better  information 
has  allowed  field  service  stalTl»i  solve 
problems  faster  and  complete  more 
calls  per  day.  Managers  now  can  get 
up-to-date  reports  on  what  activities 
service  personnel  are  engaged  in  .md 
what  steps  were  taken  to  satisfy  cus- 
I  turner  requests.  And  by  flagging  the  i 
problems  that  require  the  most  iechni-| 
eian  lime.  Pitney  Bowes  has  been  able  ‘ 

,  to  save  money  by  scheduling  proactive 
maintenance  calls. 

The  company  is  nearly  done  rolling 
out  a  similar  system  in  its  Global  Mail¬ 
ing  Systems  operation.  The  newer  sys¬ 
tem  features  smart  cell  phones.  RIM 
‘)57s,  pocket  IH:s  or  other  handhelds 
'  and  GPRS  serv  ices  provided  by  several 
,  carriers.  By  using  a  mix  of  carriers  and 
handheld  devices  with  Antenna’s 
SmartCIient  software,  Pitney  Bowc-s 
estim.ates  that  it  can  cover  y5"ri  of  its 
territory,  up  from  85"ii  with  the  previ- 
I  mis  system. 

The  Gl«)ba!  Mailing  unit's  system  is 
.  similar  to  that  of  the  Document  Mes¬ 
saging  group,  but  it's  completely  sepa¬ 
rate.  "There  is  a  uniqueness  between 
(he  organizations."  Davis  explains. 

'Tm  more  distributed  [than  the  Docu¬ 
ment  Messaging  unit  J  w  ith  a  greater 
breadth." 

The  Global  Mailing  rollout  also  was 
about  five  limes  more  evrstly  than  that 
4'f  the  Document  Messaging  unit's  sys¬ 
tem.  The  Glob.al  Mailing  system  uses 
more  expensive  Window  s  CE-based 
handhelds  and  required  more  exten- 
•  sive  integration  with  the  company’s 
S;\P,  billing,  call  center  and  other  ap¬ 
plications.  With  this  setup.  Pitney 
Bowes  hopes  to  create  a  single  system 
of  record  and  avoid  re-entering  the 
sitme  data  in  different  systems.  With 
the  resulting  pnvductiviiy  gains,  the 
company  expects  the  system  to  pay  for 
itself  in  three  years. 

Weston  has  some  advice  for  juhers 
try  mg  to  build  similar  systems:  Tesi 
the  hardware  and  software  thoroughly, 
make  sure  the  devices  have  adequate 
battery  lile.  and  plan  for  the  change 
management  such  n  project  requires. 

’T  he  key."  he  says,  "is  understanding 
how  these  processes  interact  w  ith  the 
rest  of  your  business  and  understand¬ 
ing  that  it's  not  just  field  service.  It  af¬ 
fects  sales."  O  47707 
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Wireless  CRM 

TakestoltieReld 

Pitney  Bowes’  revamped  field  service  system 
provides  broader  wireless  coverage  while 
giving  technicians  access  to  more  customer 
information.  BY  MARC  L  SONGINI 


WHILE  MANY  Companies 
are  still  testing  large* 
scale  wireless  CRM  proj¬ 
ects,  Stamford,  Conn.- 
based  mailing  systems 
vendor  Pitney  Bowes  Inc. 
is  an  experienced  practi- 
ikwer.  The  $4  billion  company  set  up 
its  first  wireless  system  in  the  late  *90$. 
Since  then,  it  has  deployed  a  second- 
generation  system  for  2S0  field  service 
employees  in  its  Document  Messaging 
Technologies  division,  which  sells 
high-end  inserter  mailing  systems. 

Now  the  company  is  wrapping  up  a 
more  sophisticated  wireless  CRM  roll¬ 
out  for  its  Gli^al  Mailmg  Systems  divi¬ 
sion.  where  some  1.500  wired  emptoy- 
ew  service  Pitney  Bowes  machines  de¬ 
signed  for  the  low-volume  distribution 
of  mail 

The  newest  system  connects  field 
service  representatives  to  its  back-end 
call  center  and  service  applications. 
Using  pocket  PCs.  RIM  957s  from  Re¬ 
search  In  Motion  Ltd.  and  other  de¬ 
vices.  service  technicians  access  a 
wide  range  of  data  fiom  multiple  back¬ 
end  systems.  Such  data  includes  infor¬ 
mation  about  inventory  availabiltiy 
and  whether  calls  are  billable  or  cov¬ 
ered  by  contract. 

Early  Start 

The  company’s  first  wireless  CRM  sys¬ 
tem  was  more  limited.  It  relied  on  Mo¬ 
torola  Inc.  "brick"  client  devices  that 
connected  to  homegrown  CRM  sys¬ 
tems.  and  it  retrieved  service  call  data 
over  Motient  Corp.'s  wireless  data  net¬ 
work.  says  Ralph  Nichols,  service  pro¬ 
gram  manager  at  Pitney  Bowes. 

In  1999,  the  company  began  moving 
to  low-cost  RIM  deices  and  started 
work  on  an  integrated  field  service  and 


call  center  back  end,  says  Mark  Davis, 
vice  president  of  customer  service. 

In  2001  Pitney  Bowes  installed  field 
service  software  from  San  Mateo. 
Calif-based  Siebel  Systems  Inc.  for  its 
Document  Messaging  division,  and  it 
upgraded  to  cellular  wireless  service 
ftom  Atlanta-based  Cingular  Wireless, 
which  uses  General  Packet  Radio  Ser¬ 
vice  (GPRS)  technolt^. 

For  wireless  connectivity  middle¬ 
ware,  Pitney  Bowes  uses  software  and 
services  from  Antenna  Software  Inc. 
Antenna  A3  and  SmartClient  field  ser¬ 
vice  software  links  field  workers  with 
RIM  handheld  devices  to  Siebel  sales 
force  automation  software  and  Pitney 
Bowes’  parts  ordering  system. 

Netwoik  coverage  was  important,  so 
ibc  company  tested  several  carriers 
and  devices  before  settling  on  Cingu- 
lar's  service  and  RlM’s  handheld  de¬ 


vices.  lersey  City.  N.J.-based  Antenna 
was  the  logical  choice  for  gateway  soft¬ 
ware  and  services,  says  Paul  Weston, 
vice  president  of  CRM  at  Pitnc)' 
Bowes.  Its  software  had  the  most  fea¬ 
tures,  included  systems  management 
tools  for  troubleshooting  breakdowns, 
supported  multiple  carriers’  networit' 
and  was  already  Siebel-approved. 

Ensuring  the  convenience  and  us¬ 
ability  of  the  devices  was  also  key.  “If 
the  thing  is  difficult  to  use,  the  people 
will  find  ways  around  it,"  says  Weston. 
So  the  staff  made  sure  that  menus  on 
the  RIM  devices  were  easy  to  navigate 
and  included  special  product  codes  to 
help  users  place  inventory  orders. 

The  workflow  starts  in  the  system 
when  a  customer  calls  the  contact  cen¬ 
ter  to  place  a  field  service  request.  'The 
Siebel  application  identifies  the  prod¬ 
uct  needing  repair,  selects  the  repre¬ 
sentative  to  dispatch  and  pushes  the 
request  out  to  that  technician’s  wire¬ 
less  device.  The  recipient  then  ac¬ 
knowledges  the  receipt  of  the  order. 

Messages  ftom  the  devices  are  rout¬ 
ed  to  Antenna’s  wireless  gateways  in 
New  Jersey.  XML-fortnatted  data  is 
then  forwarded  over  a  ftame-reiay  or 
VPN  connection  to  Pitney  Bowes’  data 
center,  where  ft  passes  through  a  gate¬ 
way  server  before  being  routed  to  the 
back-end  applications. 

The  system  delivers  customer  data 
to  field  service  personnel  in  near  real 
lime,  including  the  service  history  for 
a  given  customer  or  piece  of  equip¬ 
ment.  It  also  teUs  the  technician 
whether  work  is  covered  by  contract 
or  is  billable  and  feeds  dau  for  billable 
woric  into  the  company's  hilling  syj. 
tem.  When  parts  are  required,  the 
Siebel  field  service  application  deter- 
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mines  if  the  part  is  in  stock  and  sends 
information  on  parts  the  technician 
uses  to  a  legacy  inventoiy  application 
that  in  turn  connects  to  the  company’s 
SAP  supply  chain  management  system. 

For  areas  where  wireless  coverage  is 
spotty,  client  devices  either  use  a  dial¬ 
up  connection  or  store  information 
and  forward  it  later. 

Weston  says  that  better  infonnation 
has  allowed  field  service  staff  to  solve 
problems  faster  and  complete  more 
calls  per  day.  Managers  now  can  get 
up-to-date  reports  on  what  activities 
service  personnel  are  engaged  in  and 
what  steps  were  taken  to  satisfy  cus¬ 
tomer  requests.  And  by  flagging  the 
problems  that  require  the  most  techni¬ 
cian  time,  Pitney  Bowes  has  been  able 
to  save  money  by  scheduling  proactive 
maintenance  calk 
The  company  is  nearly  done  rolling 
out  a  similar  system  in  its  Global  Mail¬ 
ing  Systems  operation.  ’The  newer  sys¬ 
tem  features  smart  cel]  phones.  RIM 
957s.  pocket  PCs  or  other  handhelds 
and  GPRS  services  provided  by  several 
carriers.  By  using  a  mix  of  carriers  and 
handheld  devices  with  Antenna’s 
SmariGient  software,  Pitney  Bowes 
estimates  that  ft  can  cover  95%  of  its 
territory,  up  from  85%  with  the  previ¬ 
ous  system. 

The  Global  Mailing  unit’s  system  is 
similar  to  that  of  the  E>ocument  Mes¬ 
saging  group,  but  it’s  completely  sepa¬ 
rate.  “There  is  a  uniqueness  between 
the  organizations.”  Davis  explains. 

“I’m  more  distributed  [than  (he  Docu¬ 
ment  Messaging  unit]  with  a  greater 
breadth.” 

The  Global  Mailing  rollout  also  was 
about  five  limes  more  costly  than  that 
of  the  Docximent  Messaging  unit's  sys¬ 
tem.  TTie  Global  Mailing  system  uses 
more  expensive  Windows  CE-based 
handhelds  and  required  more  exten¬ 
sive  integration  with  the  company’s 
SAP.  billing,  call  center  and  other  ap¬ 
plications.  With  this  setup,  Pitney 
Bowes  hopes  to  create  a  single  system 
of  record  and  avoid  re-entering  the 
same  dau  in  different  systems.  With 
the  resulting  productivity  gains,  the 
rompuiy  expects  the  system  to  pay  for 
itself  in  three  years. 

Weston  has  some  advice  for  others 
trying  to  build  similar  systems:  Test 
the  hardware  and  software  thoroughly, 
make  sure  the  devices  have  adequate 
battery  life,  and  plan  for  the  change 
management  su^  a  project  requires. 

The  key,”  he  says,  “is  understanding 
how  these  processes  interact  with  the 
rest  of  your  business  and  understand¬ 
ing  that  it’s  not  just  field  service.  It  af¬ 
fects  sales."  O  47707 
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Learn  How  to  Achieve 
Storage  Networking  Success 


Get  a  Contemoorary  Overview  ot  Today  s  Storage  Networking  Issues  a^d  Opportunities 

•  See  How  to  Implement  and  Deploy  the  Latest  m  Storage  Networking  Technp'og'es 

•  Hear  the  Latest  in  Enterprise  Security 

•  Learn  from  Best  Practices  and  Case  Studies 


What  You’ll  Learn 

In  this  execut've-forurn  setting  vou  "  d<'ec*W  ♦'•om  e»ec', 
They'd  address  a  wde  vanety  o*  today's  burnma  .ssue?  iiUe 

Selecting  and  Deploying  Storage  Networks  CTO  In 

■  SAN 

•  NAS  5-,, 

•  CASOct-.'!  . 

•  Dec'cyn-e-i 

•  Da'sVg'a’c'  • 

■  Sea  aC'  tv  .  Sf  t 


•  C"  Ccnc.ijprat.or;  .T-  -  ~  ; 

Data  Center  and  Infrastructure 
Considerations 

•  Gl:^er^^r^g  5yj.p,^  p 

•  L”  !y/Gn(J  Cc’"C’vV''rj 

•  8a''iiw  ctt>- Reqj '•‘"•“'■•c 

•  i-'g"‘Ava  ar i:» 

•  In‘r35trucr','e  ”cC  ? 

storage  Security 

•  Protec*  C' 

■  Ssc'j'  *y  Pq  'ces 

■  A-ii’^-cetJ  Poccve'y  So  u'  ent 


Managing  Storage  Networking  Solutions 

'  G'oea' Va-aaer”®': 

•  Bu5''ess  p'ceesse' 

•  Ccf-c"a''ce  !3  ''■du'try  Standar-c 

Managing  Deployments  of  Existing  and 
Errterging  Technologies 

•  P'CCU''e'"e'it  c‘  A<-*.oi  PfryJon*- 

•  Project  Ma-aper"®-* 

•  EducstC" 

■  Var‘ade'''e'‘t  Po''C  et 

-  i-onoTe"- Va"age"^e'-*  andRC  E«rec!a*c"«  ‘ 

Deployirtg  Storage  to  Meet  Industry 
Regulations 

•  H!PAA 

•  SEC 

•  PDA 

•  SarCares/Ox  ey  Ac*.  Patnn;  Act  ®*c 


Enterprise  Business  Applications 
and  Databases 


Critical  and  Emerging  Technology  Topics 


High  Bandwidth  Storage  Applications 


Small  Medium  Business  Considerations 

•  qg.  Seer-  ;■  .  '•  • 

•  Si/Ve-do'5e>'*-:riv>-p't 


Why  You  Should  Attend 

Are  you  responsible  for  managing  vou*-  comoany  s  data  cer-ter  assets?  Want  ‘o  exchar^ge  "nova’  .-e  'deas 
and  strategies  with  other  executives  wt-o  sha^e  the  same  ooiective'^’’  Ti-pn  a^'e-'d  S’oraoe  Netw-'i.  r-q 
Wbrid,  where  you’ll  network  wth  ang  igam  from  rer^owned  experts  a''d  the  nation  s  foe  usp'  ptpcu'.ves 
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V  100  Storage  Analyst  Briefing 


See  SNWs  interoperability 
&  Solutions  Demo 


SNW  is  a  great  venue  for 
peer  discussion  ^  an  opportu¬ 
nity  to  provide  feedback  to 
vendors  on  what  users  need 
from  them ...  I  sat  down  with 
my  key  vendors  and  shared 
information 


John  Greer 

Director,  IT  Infrastructure 
Pacific  Gas  &  Electric 


Conference  At-a-Glance 


(subject  to  change) 


wnww.snwusa.com/cw 


9.30am-  i^SOam 
1 1  30am  -  1  :OODm 
'2'OOpm  -  SiOOpf'' 
1  OOpm  -  6:00pm 
1 :00pm  -  5'OOpm 
7  OOpm  -  9, OOpm 


Primer  a^'d  Tutorial  Tracks 
Luncheon 

P'e-Conference  Go'^  Outm 
SNIA  Technical  Tutof'a's 
OC  Analyst  Brie'mg 
Welcome  Recept-on 


TUESDAY,  OCTOBER  26 

7:00am  --  8.00am 
8:00am  -  12.00pm 
12, OOpm  -  f;30om 
1  30om  -  5:30om 
A.OOpm  -  5:30pm 
S.SOpm  -  8:30om 


Breakfast 

Genera  Conference  Sess'ons 
Luricheon 

General  Cor’ference  Sess  ons 
Ccncurre"t  Sess'ons 

Expo  W'th  Dinner  and  Interoperabi'.tv  &  Soiut  ons  Demo 


WEDNESDAY.  OCTOBER  27 


7  OOam  -  8:00am 
8:00am  -  12  00pm 
12;OOom  -  1:30Dm 
12;00om  -  7'  15om 
1  .SOpm  -  3:45om 
3'45pm  -  5: 15pm 
5:15pm  -  7,15pm 
7  SOpm  -  9:00pm 


Breakfast 

Genera'  Conference  Sessions 
Expo  w  th  Luncheon 
interoperaO'iity  &  So'utions  Demp 
Genera;  Conference  Sessions 
Concurrent  Sess'ons 
Expo 

Gala  Evening 


NICK  CARR 

Ajrrner  Executive  Editiy  of  tne 
Harvard  Busriess  Revew 
and  aut^O'  o*  'Does,  i'  Ma“e^ 


THURSDAY.  OCTOBER  28 


The  RitZ'Cariton 
Golf  Club 

Orlando,  ^lonfla 


JW  Marriott 
Grande  Lakes  Resort 

Orlando.  Florida 


Pre-Conference  Golf  Outing 

Complimentary  for  Registered  IT  Users 

The  P'e-Conference  Go'f  Outmg  at  The  RiTz-  i  SP 
Car'ton  Golf  Club  located  adjacent  to  the  JW  |  Q 
Marriott  Grande  Lakes  Resort. 


Hotel  Reservations  and  Travel  Services 

IDG  T'aveL'S  theoff'ciai  travel  company  for  Storage  ]  TT^ 
Networking  Wohd  They  are  your  one-stop  shop  for  1J_/* 

exclusive  discounted  rates  on  hotel  accommodations.  |  *- 

To  reserve  your  accomrriodations.  vs  t 

www.etcentral.com 

You  can  a^so  call  our  con%e"ce  housmg  i-ne  at 

1-800-340>2262  (or  1-S08-820-8686) 


..  .  IS  complimentary  * - 

($ '  25  value)  for  registered  IT  End-Users  (other  oarticpants. 
including  soonso's  and  vendors,  may  play  on  an  'as  ava'iaWe'  oasis 
and  are  responsible  for  al*  aoplicable  golf  outmg  expenses' 

For  details  contact  Michael  Meleedy  at  1  •508-820-8529 
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MfKE  STREB  RECENTtY  found 
himself  with  a  problem 
that's  common  to  IT  man¬ 
agers  who  consolidate  data 
from  file  servers  on  net¬ 
work-attached  storage  de¬ 
vices.  After  years  of  growth, 
he  wound  up  with  100  different  NAS 
file  systems  to  manage  and  faced  in¬ 
creased  downtime  when  he  had  to  add 
application  servers  or  update  code. 

The  answer  for  Streb  and  a  growing 
number  of  users  like  him  is  to  pool  or 
virtualize  the  NAS  infrastructure. 

Streb.  vice  president  of  IT  services 
at  Warner  Music  Group,  installed  intel¬ 
ligent  switches  on  his  network  to  gen¬ 
erate  a  global  namespace,  or  distrib¬ 
uted  file  system,  that  creates  a  lo^cal 
layer  between  servers  and  the  NAS 
boxes  that  store  their  files.  A  global 
namespace  spans  multiple  file  systems 
but  appears  to  end  users  as  a  sir^e  lo¬ 
cal  drive  on  their  computers. 

Other  storage  administrators  are 
opting  for  an  appliance  that  sits  in 
front  of  NAS  devices  and  creates  a  log¬ 
ical  view  by  pooling  multiple  NAS  fil¬ 
ers  behind  it  Policy-based  engines 
contained  in  intelligent  switches  and 
appliances  from  companies  such  as 
Ac^ia  Networks  Inc.,  NuView  Inc. 
and  BlueArc  Corp.  can  automatically 
balance  I/O  streams  and  capacity 
tween  servers  and  increase  or  move 
stora^  volumes  without  disrupting 
workflow. 

Compfication  of  NAS  Growth 

The  hWS  market  has  grown  to  $147  bil¬ 
lion  because  the  technology  is  easy  to 
install  and  manage,  according  to  mar¬ 
ket  research  firm  IDC.  But  as  storage 
needs  grow,  companies  continue  to  in¬ 
stall  bo*  after  NAS  box.  and  each  re¬ 
quires  individual  management. 

Over  the  past  two  years,  adoption  of 
NAS  virtualization  teclmology  has 
been  slow,  according  to  Arun  Taneja, 
an  analyst  at  Taneja  Group  Inc  in  Hop- 
kinton.  Mass.  But  interest  among  users 
has  picked  up  in  recent  months,  mainly 
because  of  the  maturity  of  the  NAS 


NuView  Inc, 
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Companies  are  using  technologies 
that  virtualize  multiple  networic- 
attached  storage  systems  into  a 
storage  pool.  BY  LUCAS  MEARIAN 


market  Now  that  many  oropanies 
have  Imndieds"  of  NAS  boxes  to  man¬ 
age,  individuat  administration  has  be¬ 
come  a  nightmare,  Taneia  says. 

To  deal  with  that  problem.  New 
York-based  Warner  Music  last  month 
purchased  two  ARXIOOO  NAS  virtual¬ 
ization  switches  ftom  Ao^ia  to  handle 
millions  of  .wav.  MP3  and  graphics  files 
on  128  Unix  and  350  \Wntel  servers. 
Streb  also  plans  to  install  four  Celerra 
NS600  NAS  servers  ftom  EMC  Coip. 
as  back-end  storage. 

Streb  has  five  storage  administrators 
who  manage  the  distribution  of  files 
I  across  Warner  Music's  NAS  devices. 
That  task  alone  takes  up  about  20% 
of  their  time  he  estimates.  “Now. 
through  a  policy  engine,  I  can  migrate 
the  data  from  one  box  to  another  and 
take  a  brief  outage  by  pointing  the 
global  namespace  somewhere  else, 
and  the  user  doesn't  even  know  it  be¬ 
cause  it's  all  done  behind  the  scei>es," 
Str^says. 

Streb  is  testing  Acopia’s  switches 
on  20  WinteJ  servers  aitd  says  he  plans 
to  complete  the  installation  over  the 
next  two  weeks.  He  also  says  that  he 
hopes  virtualization  will  open  hts  data 


BlueArc  Corp. 


center  to  more  storage  vendors. 

“In  the  past,  it’s  been  really  compli¬ 
cated  for  me  to  introduce  something 
from  BlueArc  or  Network  Appliance 
without  creating  too  much  manage¬ 
ment  pain  for  mc.“  Streb  says.  “Now  1 
feel  comfortable  opening  up  the  door 
to  additional  storage  vendors  and  let¬ 
ting  them  compete  more." 

Different  Approaches 

Acopia’s  switches  sit  in-band  between 
end  users  and  file  servers  or  NAS  de¬ 
vices  in  the  I/O  stream,  while  products 
such  as  Nu View's  StorageX  software 
reside  on  a  Wintel  server  out  of  band, 
directing  files  to  the  appropriate  NAS 
device  or  volume  within  a  file  server. 
StorageX  is  resold  by  Network  Aw>U- 
ance  Inc  under  the  name  Virtual  File 
Manager  (VFM). 

Mike  Karp,  an  analyst  at  Enterprise 
Management  Associates  Inc,  a  con¬ 
sulting  firm  in  Boulder,  Colo.,  says  the 
argument  for  in-band  versus  out-of- 
band  devices  is  moot,  and  users  should 
pay  a>ore  attention  to  bow  well  a  de¬ 
vice  or  software  eases  management  of 
NAS  devices. 

“Typically,  the  knock  on  in-band 


technology  b  that  it  eventually  be¬ 
comes  a  choke  point,  but  I  rarely  talk 
to  a  company  that  says  Tve  maxed  out 
pipeline  to  my  NAS.’ "  Karp  says. 
“Clearly,  what  you  need  is  some  kind 
of  common  interconnect,  so  com¬ 
mands  —  no  matter  what  kiiwl  of  stor¬ 
age  3rOU  have  —  go  out  anrf  mana^ 
various  units  in  the  storage  pool" 

One  problem  with  managing  multi¬ 
ple  NAS  devices,  Karp  says,  is  that  file 
servers  based  on  Windows  use  the 
Network  File  System  protocol  to  com¬ 
municate  over  a  network,  and  servers 
based  on  Unix  or  Linux  use  the  Com¬ 
mon  Internet  File  System.  The  indus¬ 
try  should  agree  on  a  sundard  way  for 
servers  to  make  requests  for  files  or 
services  over  the  network,  he  says.  In 
the  meantime,  storage  managers  con¬ 
tinue  to  virtualize  Unix  and  Windows 
environments  separately. 

Clay  Racdeker.  a  systems  adminis¬ 
trator  at  Bead  SAIC  Co,  says  be  re¬ 
cently  purchased  VFM  and  a  second 
FAS960  NAS  file  server  from  Network 
Appliance  to  help  control  file  distribu¬ 
tion  from  more  than  70  file  servers 
with  a  combined  total  of  12TB  of  data. 
Las  Vegas-based  Bechtel  SAIC  b  the 
prime  cootraaor  for  the  U.S.  Depart¬ 
ment  of  Energy’s  program  to  use  Yucca 
Mountain  in  Nevada  as  a  repository  for 
spent  nuclear  fuel. 

Raedeker  says  be  currently  has  to 
come  to  work  in  the  eariy  mnming 
when  no  one  b  accessing  files  so  be 
can  spend  two  or  more  hours  remap¬ 
ping  users  when  he  adds  servers  or 
expands  capacity. 

“We're  trying  to  map  individual 
users  to  individual  shares  and  individ¬ 
ual  servers,  and  it  becomes  extremeh’ 
diflicult  to  manage.”  he  says.  “)ust  con- 
taaing  people  and  putting  proper  no¬ 
tices  out  b  hard  enough." 

With  the  Networic  Appliance  instal¬ 
lation.  Raedeker  says  hb  staff  will  be 
able  to  map  to  a  shared  file  in  a  com¬ 
puter  at  any  time,  without  having  to 
specify  the  storage  device  it's  on  and 
"without  having  to  imeraa  with  users 
atalL“047794 
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MIK^  MKIH  kl  I  IMIV  found 
himself  with  a  pn>blem 
that's  common  to  IT  man¬ 
agers  who  cons4>lidate  data 
from  file  servers  on  net- 
work-attached  storage  de¬ 
vices.  After  years  of  growth, 
he  wound  up  with  100  different  NAS 
hie  systems  to  manage  and  faced  in¬ 
creased  downtime  when  he  had  to  add 
application  servers  or  update  code. 

The  answer  for  Streb  and  a  growing 
number  of  users  like  him  i.s  to  pool  or 
virtualize  the  NAS  infrasirueturc. 

Streb.  vice  president  of  IT  services 
at  Warner  Music  Group,  installed  intel¬ 
ligent  switches  on  his  neiHt»rk  to  gen¬ 
erate  a  global  namespace.  i)r  distrib¬ 
uted  file  system,  that  creates  a  l»^ical 
layer  between  scrs’crs  and  the  NAS 
boxes  that  store  their  files.  A  global 
namespace  spans  multiple  file  systems 
but  appears  to  end  users  as  a  single  lo¬ 
cal  drive  on  their  computers. 

Other  storage  administrators  arc 
opting  for  an  appliance  that  sits  in 
front  of  NAS  devices  and  creates  a  h»g- 
ical  view  by  pooling  multiple  NAS  fil¬ 
ers  behind  it.  Policy-based  engines 
contained  in  intelligent  switches  and 
appliances  from  companies  such  as 
Acopia  Networks  Inc.,  NuV'icw  Inc, 
and  BIueArc  Corp.  can  automatically 
balance  I,  O  streams  and  capacity  be¬ 
tween  ser\x*rs  and  increase  or  move 
storage  volumes  without  disrupting 
workflow. 

Complication  of  NAS  Growth 

The  NAS  market  has  grown  to  SI4.7  bil¬ 
lion  because  the  technology  is  easy  to 
install  and  manage,  according  to  mar¬ 
ket  research  firm  IDC.  But  as  storage  I 
needs  grow,  companies  continue  to  in-  | 
stall  box  after  NAS  box.  and  each  re-  I 
4)uires  individual  management. 

Over  the  past  two  years,  adoption  of 
NAS  vinualization  technology  has 
been  sKrw.  according  to  .Arun  Taneja. 
an  analyst  at  Taneja  Group  Inc.  in  Hop- 
kinton.  Mass.  But  interest  among  users  j 
has  picked  up  in  recent  months,  mainly  ' 
because  of  the  maturity  of  the  NAS  I 
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Companies  are  using  technologies 
that  virtualize  multiple  netw  ork- 
attached  storage  systems  into  a 
storage  pool. 


market.  Now  that  many  companies 
have  "hundreds''  of  NAS  boxes  to  man¬ 
age.  individual  administration  has  bt*- 
come  a  nightmare.  Taneja  .says. 

To  deal  w  ith  that  problem.  New 
York-based  Warner  Music  last  mt)nth 
purchased  two  ARXIOOO  NAS  virtual¬ 
ization  switches  from  Acopia  to  handle 
millions  of  .wav.  MP.^  and  graphics  files 
on  128  Unix  and  .^50  Winicl  servers. 
Streb  als(»  plans  to  install  four  Celcrra 
NS600  NAS  scrv'crs  fn*m  EMC  Corp. 
as  back-end  storage. 

Streb  has  five  st4»ragc  administrators 
who  manage  the  distribution  of  files 
acr«»ss  Warner  Music's  NAS  devices. 
Tliat  task  alone  lakes  up  about  30''ii 
of  their  time,  he  estimates.  •‘Now. 
through  a  policy  engine.  I  can  migrate 
the  data  fn^m  one  box  to  antgher  and 
take  a  brief  outage  by  pointing  the 
global  namespace  somewhere  else, 
and  the  user  doesn't  even  know  it  be¬ 
cause  it's  all  d«me  behind  the  scenes,  " 
Streb  says. 

Streb  is  testing  Acopia 's  switches 
on  20  Winiei  servers  and  says  he  pbns 
to  complete  the  installation  over  the 
next  two  weeks.  He  also  says  that  he 
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center  t4>  more  storage  vendors. 

"In  the  pa.si.  it'.s  been  really  c«)mpli- 
cated  for  me  to  introduce  something 
from  BIueArc  or  Network  Appliance 
without  creating  too  much  manage¬ 
ment  pain  for  me."  Streb  says,  "Now  I 
leel  e<»mfonabIc  opening  up  the  dwr 
to  additional  storage  vendors  and  Ici- 
ting  them  compete  more." 

Different  Approaches 

Acitpia’s switches  sit  in-band  between 
end  users  and  file  servers  or  NAS  de¬ 
vices  in  the  I  O  stream,  while  products 
such  as  Nu\'i**w's  SiorageX  software 
reside  on  a  Winiel  server  «»ut  of  band, 
directing  files  t»»  the  .appropriate  NAS 
device  or  volume  w  ithin  a  file  server 
Sti>rageX  is  n*s*ild  b\  Network  Appli¬ 
ance  Inc.  under  the  name  Virtual  Kile 
Manager  (VFM). 

Mike  Karp,  an  analyst  at  FnierpriH’ 
Management  Associates  Inc.,  a  con¬ 
sulting  firm  in  Boulder.  Coltx.  s.iys  the 
argument  for  in-band  versus  i*ut-of- 
band  devices  is  m4»i*t.  and  users  should 
pay  more  attention  itt  how  well  a  de¬ 
vice  or  sitftware  eo-sos  marugemeni  of 
NAS  devices. 

"Typically,  the  knttek  tm  in-band 
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fechn4>]«»gy  is  that  it  eventually  be 
Climes  a  choke  point,  but  I  rarely  i.ilT 
to  a  c-ompam  that  says  'I've  ma.seJ  hui 
ptpeline  to  my  N.AS.'  "  Karp  s.t\  s 
(  learly.  what  you  need  is  some  kmJ 
ofennitnon  interconnect-  mi  com¬ 
mands  —  no  matter  what  kind  of  stnr- 
.  age  you  have  —  go  out  and  manage  the 
various  units  in  the  sturagc  piHil." 

t)ne  problem  with  managing  multi- 
plo  NAS  devices.  Karp  says,  is  that  file 
servers  based  nn  WinJ^iws  use  the 
Network  File  System  protocol  to  com¬ 
municate  over  a  netwiirk.  and  servers 
Kis*'d  iin  Unix  or  Linux  use-  the  Uom- 
mon  Internet  File  System.  The  indus¬ 
try  should  agive  on  a  standard  way  for 
servers  to  make  requests  for  fili*s  or 
services  over  the  network,  he  says.  In 
the  meantime,  storage  managers  con¬ 
tinue  to  virtuali/c  Unix  and  Windows 
g  environments  separaioly. 

Clay  R.iedeker.  a  systems  adminis¬ 
trator  at  Bestel  SAIC  Co.,  says  be  re¬ 
cently  purchased  \'F.M  and  a  sivond 
F.ASWH)  NAS  fik-  server  from  Network 
Appliance  to  help  contMl  file  drsirihu- 
lion  from  more  than  Til  file  servers 
with  a  combined  total  of  12TB  of  data. 
Las  Vegas-based  Bechtel  SAIC  is  the 
prime  eoniraetor  for  the  U.S.  I>cp.iri- 
ment  of  Fnergy 's  program  m  use  Yucca 
Mountain  in  Nevada  as  a  nposiiory  for 
spent  nuels-ar  fuel. 

R.iedekcT  says  he  currently  has  to 
come  to  work  in  the  early  morning 
w  hen  no  one  is  ac'cessuig  files  so  Iw 
can  spend  two  or  more  hours  remap¬ 
ping  user,  when  he  adds  servers  or 
expands  capacity 
"We're  trying  to  map  individual 
users  to  individual  shaa’s  .md  individ¬ 
ual!  siTvers,and  it  becomes  extremely 
diiTleult  to  manage."  he  says.  “lust  con¬ 
tacting  pinple  and  putting  proper  mi- 
tk'cs  «mt  is  hard  enough" 

With  the  Network  Applunee  instal¬ 
lation.  Raixleker  says  his  staff  w  ill  be 
able  to  map  to  a  shared  file  in  .t  s'om- 
puier  at  any  time,  w  ithoui  having  to 
specify  the  storage  Jev  kv  it's  on  and 
"wiihiHit  having  to  interact  w  ith  users 
at  alL  O  47734 
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REVOLUTION 

They  could  fight  wars,  drive  cars  and 
patrol  data  centers.  By  Lucas  Mearian 


FUTURE 


Robots,  from 


WATN©  dogs  that  can 
IfniVllA  team  new  tricks 
to  automated  vacuum  cleaners 
that  avoid  furniture,  are  steadi¬ 
ly  becoming  a  part  of  evcryda>> 
^e.  Bui  the  real  robot  boom  lies 
just  ahead,  experts  soy. 

In  the  future,  robots  could 
help  determine  the  outcome  of 
wars  and  identify  problems  m 
data  centers,  (^jfice  buildings 
may  come  to  life  as  they  use 
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Wi-Fi  to  dispatch  robots  to  con¬ 
trol  human  access,  test  heating 
and  cooling  systems,  and  fetch 
tools  fijr  workers. 

Compuierwortd  recently 
spoke  <^ut  the  future  of  robots 
with  three  experts:  CbuckThierpe, 
director  cf  Came^  Mellon 
University's  Robotics  Institute: 
Joomo  OlotseK  CEO  of  Mobile- 
Robotsxom  in  Nasloja.  NJI.;  and 
VUay  Kumar,  a  professor  in  the 
Department  of  Mechonicai  En- 
Sneering  and  Apptied  Mechan¬ 


ics  at  the  University  o/Pennsyi- 
vania.  Here's  what  th^  sai± 

WHERE  WLL  ROBOTS  SERVE  IN 
THE  FUTURE? 

KUMAR:  They’U  fight  our  wars. 
My  robots  will  your  ro¬ 
bots.  It’s  like  playing  chess. 

It’ll  be  an  expensive  game,  but 
I  think  it  will  minimize  loss  of 
life.  1  don't  know  it's  some¬ 
thing  our  leaders  want  to  hear 
about  though. 

WHArS  THE  FUTURE  OF  ROBOTS 
m  THE  SERVKES  SECTOR? 

THORPt  That’s  the  real  fron¬ 
tier  for  robots  —  gettii^  them 
out  of  the  manufacturing  world  , 
and  interacting  much  more 
with  people  in  our  day-to-day 
chores.  That’s  a  little  tougher. 

I  If  you  think  about  an  assembly 
line,  it’s  set  up  so  that  every¬ 
thing  is  predictable.  If  you 
think  about  the  Lob  of  creating 
a  robot  butler  to  operate  in 
your  house,  the  difference  be¬ 
tween  pile  of  clothes  which 
should  be  picked  up  and  a 
sleeping  cat  which  shouldn't  be 
picked  up  is  a  little  bit  tricky. 

The  manipulation  skills  re¬ 
quired  to  m^e  a  bed  —  flip¬ 
ping  up  the  comer  of  the  mat¬ 
tress  and  tucking  in  a  sheet  so 
it  looks  straight  —  is  compli¬ 
cated.  Some  of  those  jobs  will 
take  a  tong  time  before  robots 
can  really  do  them  as  well  as 
people  do  them. 

To  really  have  a  humanoid 
robot  walking  around  like 
C-3PO  or  like  Rosie  on  The 
fetsons  is  still  a  long  ways  olT. 

DECADES? 

THORPE:  Probably. 

CAN  ROBOTS  HELP  MFORMATKW 
TECHNOLOBY? 

OCTSCH:  Hewlett-Packard  uses 
our  PatrolBot  in  their  data 
centers.  It's  got  temperature 
sensors.  It  diives  around  sev¬ 
eral  times  a  day,  and  the  data 
from  these  patrols  is  used  to 
create  3-D  models  of  the  beat 
in  the  EacUity.  If  there's  a  prob¬ 
lem  in  the  facility,  the  comput¬ 
er  or  a  human  can  send  the  ro¬ 
bot  out  to  check  on  it. 

Our  robots  are  computers  on 
wheels.  When  programmers 
start  realizii^  *K>h.  I  can  drive 
my  computer  around  and  makp 
it  do  things,"  they’ll  come  up 


with  all  sorts  of  interesting 
things.  For  exantple,  they  could 
keep  track  of  any  asset  in  the 
facility  based  on  RFID  tags. 

WHATS  HARO  ABOUT  MAKING 
ROBOTS  Aa  LIKE  HUMMS? 
THORPE:  I  think  you  could  turn 
that  question  around  and  say, 
"Wow,  humans  are  a  lot  more 
complicated  than  we  thought." 

We're  strivii^  for  a  couple 
different  things  with  robc^. 
Sometimes  we're  trying  to 
make  them  very  much  like  hu¬ 
mans,  and  sometimes  we’re 
trying  to  make  them  be  a  lot 
better  than  humans.  Where 
we’ve  had  our  greatest  success 
is  when  we  let  the  robots  be  ro¬ 
bots  and  do  what  they're  best 
at  and  let  humans  be  humans 
and  do  what  they’re  best  at 

A  couple  of  guys  from  my 
lab  have  spun  off  a  company 
that  makes  a  little  TV  camera 
that  watches  the  road  as  you're 
driving.  It  doesn't  drive  your 
car,  but  It’s  there  to  watch,  and 
if  you  start  to  get  sleepy  and 
start  to  drive  off  the  road,  it 
will  beep  at  you  and  wake 
you  up  before  you  become 
an  accident  statistic. 

VmElBEAlEVDUWORRMeaNT 
THORPt  We’ve  got  61  frculty 
members  with  120  proLects. 
We’ve  got  robots  doing  every¬ 


thing  from  cleaning  paint  off 
ships  to  search  and  rescue  in 
hazardous  environments.  We 
have  snake  robots  that  can 
crawl  through  skinny  little 
holes,  and  great  big  military 
scout  robots.  We  have  teams 
of  robots  playing  soccer. 
Thar's  a  great  way  to  study 
teamwork:  How  do  robots  co¬ 
ordinate  to  tackle  a  project?  In 
the  latest  version  of  that,  we 
have  a  team  that  consists  of 
robots  and  people:  bow  do  ro¬ 
bots  and  people  collaborate  to 
solve  a  difTicult  task? 

CAN  YOU  SPECUUTE  ON  SOME 
OF  THE  MORE  FAR-OUT  APPLICA¬ 
TIONS  FOR  ROBOTS? 

KUMAR:  My  colleagues  would 
argue  the  biggest  opportunity 
for  robots  is  in  entertainment. 

There  are  many,  many 
prototypes  of  robots  that  are 
intended  to  be  domestic  com¬ 
panions,  They  walk  like  hu¬ 
mans  and  talk  like  humans, 
but  unlike  pets,  they  don’t 
dirty  up  your  apartment. 
OCTSCH:  Our  robots  are  made 
to  work  indoors.  We’re  work¬ 
ing  next  toward  working  out¬ 
doors.  Everyone  thinks  GPS 
has  solved  ^  prc^lem  for 
robots,  but  it  hasn’t  at  alL  If 
you’re  under  tali  buildings  or 
trees,  GPS  is  not  reliable. 

The  problem  with  working 
outdoors  is  that  you're  working 
on  three-dimensional  terraia 
Going  from  building  to  build¬ 
ing,  depending  on  terrain,  is 
not  so  bad.  Pm  hoping  we  can 
do  that  in  one  to  two  years.  Ftri- 
lowing  streets  and  sidewalks  — 
if  we  can  do  that  reliably  in 
three  or  four  years,  that  will  be 
good.  But  we’ll  still  not  be  able 
to  avoid  cars  going  40  mph. 
THORPE:  Certainly,  within  25 
years,  well  have  robots  assist¬ 
ing  surgeons  to  be  more  pre¬ 
cise,  robots  enabling  elderly 
pet^le  to  live  in  their  houses 
longer  and  not  have  to  go  into 
nursing  homes,  (and]  robots 
doing  a  lot  of  the  dull  jobs  we 
don't  like  to  do.  so  we  can  have 
more  fun  and  do  the  more  in- 
terestii^  jobs.  O  47B44 
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FourSt^toa 
Secure  Budget 

A  seasoned  security  manager  offers 
hard-nosed  advice  on  how  to  get  critical 
IT  security  projects  funded.  By  Roger  Foix 


Ar  :  m  working  as  an  in- 
housf '^•curit\  manag¬ 
er  in  the  financial  ser- 
'  ices  industry  for  many 
years.  I  recently  moved  to  con¬ 
sulting  work.  This  will  give  me 
the  opponunity  to  work  in  a 
s  ariets  of  in  Just  ries  ( my  cur¬ 
rent  contract  is  with  a  compa- 
ns  in  the  health  care  industry) 
and  prolccts. 

JVe  spent  the  past  few  days 
thinking  about  the  many  is¬ 
sues  I  face,  try  ing  to  decide 
w  hich  one  to  discuss 
in  this.  m>  first  col¬ 
umn  In  the  end.  it 
was  an  easy  decision: 
esiortion.  I'm  not 
talking  about  pre¬ 
venting  employees  or 
<mtsiders  from  steal¬ 
ing  funds.  I’m  referring  to  my 
ability  to  •'eMori"  appropriate 
funding  from  rruruigement. 

There  are  less-cynical  ways 
of  liKiking  .It  the  budgeting 
pfivi'ss.  but  my  experiences 
oxer  the  past  levs  years  jt  dif¬ 
ferent  companies  have  made 
gelling  blood  out  tU" a  stone 
IiH»k  simple  in  comparison 
.Many  -wcuriry  managers 
labtir  under  the  misapprehen¬ 
sion  that  the  budget  proeevs 
consists  of  wixrking  out  how- 
much  vou  need,  spending  a 
few  weeks  coa.ving  vtiur  fig¬ 
ures  into  the  bi/arre  formats 
that  the  finance  group  re¬ 
quires.  then  defending  your 
important  protec  ts  in  rru-ct- 
ings.  Hu!  m>  --ucxvssful  bud¬ 
get-  h.ive  hc-en  the  result  of 
a  dilTereni  pn»cess  —  one  in 
which  I  laid  the  groundwork 
well  aht  aJ  of  lime.  Mere  arv 
four  steps  I  follow  to  obtain 
funding  from  ih.ii  parsimo¬ 
nious  corporate  bean  eounier. 


Start  by  going  back  to  your  se¬ 


curity  basics  and  calculating 
your  risk  pri'file.  Determine 
the  potential  financial  loss 
,  arising  from  each  of  your 
j  thre.nts.  and  multiply  that  by 
the  annualized  percentage 
;  likelihood  i»f  the  loss  tK'cur- 
j  ring  to  get  the  annualized  loss 
expeetaney  (ALE).  Then 
j  demonstrate  how  much  your 
I  pnijeet  will  reduce  the  ALE  — 
and  how  much  money  it  will 
save  the  company. 

A.ssuming  you  have  .1  sound 
business  case,  docu¬ 
ment  this  clearly,  ex- 
pbin  your  reasoning 
in  great  derail,  and 
then  submit  it  to  the 
finance  people.  It 
will  get  rejc'cted  al¬ 
most  immediately, 
of  course,  because  no  one  in 
finance  w  ill  understand  a 
word  of  it.  But  don't  worry: 
you  have  to  go  thrxmgh  this 
Slop  only  to  show  that  you've 
done  your  homework  and  to 
lay  the  groundwork  for  more 
productive  tactics  later  on. 

Introduce  FDD 

Next,  use  fear.  unc\Ttainty  and 
doqbt  to  your  advantage.  H.'D 
is  the  mi*st  important  acro¬ 
nym  to  siilespcsiple  hawking 
IT  security  w.tres.  and  you  are 
try  ing  to  sell  your  iiwn  IT  se- 


There  are  less-cynical 
ways  of  looking  at  the 
budgeting  process,  but 
...gettkig  blood  out 
of  a  stone  looks  like 
a  simple  task  in 
comparison. 


curity  services  to  the  corpo¬ 
rate  bean  counters.  Sow  fear 
("Did  you  hear  about  that 
hacker  who  broke  into  NASA? 
I  hope  that  diK’sn'i  happen  to 
US-"),  uncertainty  ("Yes.  I 
know  we  spent  S500.0(')0  on 
securing  our  network  perime¬ 
ter  last  year,  bui  we  need  to 
I  make  sure  it's  working.") 

I  and  doubt  C'rO'V  of  security 
I  bre.iches  an-  internal.  I  won- 
'  der  who  the  criminals  an*  in 
,  our  company?").  Sometimes 
this  beginner's  t.ictic  works. 

I  but  any  chief  financial  officer 
I  who  has  been  around  the 
I  block  a  few  times  w  ill  Now- 
EUD  out  i>f  the  water.  Still,  it's 
I  still  worth  trying  [usl  to -si*e 
j  what  answers  you  get.  You  can 
j  always  use  those  responses 
I  the  next  time  an  IT  security 
I  salesperson  ctimes  calling- 

Befriend  Your  Auditor 

TIk*  next  time  you  pass  an  au¬ 
ditor  in  the  corridor,  give  him 
a  big  smile  These  people 
w  rite  long-winded  reports, 
and  while  no  one  reads  the 
I  main  text,  everyone  reads  the 
I  e.xecutive  summaries.  Then 
'  these  reports  go  on  file,  as  do 
I  management's  responses.  Best 
of  all.  the  auditors  eventually 
check  back  to  see  whether 
management  has  addressed 
the  issues  the  reports  have 
raised. 

While  the  threat  of  a  hacker 
.mack  or  a  virus  infestation 
makes  the  budget  gods  ner- 
\ous.  the  thought  tif  three 
years'  worth  of  .ludii  reports 
pointing  a  finger  at  their  in¬ 
competence  w  ill  give  them 
night  sweats.  A  seared  budget- 
setter  is  .1  generous  budget- 
setter.  S4>  your  internal  audi¬ 
tors  are  a  nukir  ally.  The  same 
goes  for  external  auditors  and 
j  your  compltanci*  team.  too.  if 
!  you're  in  a  regulated  indust  ry. 

I  So  make  friends  with  these 
people.  That  should  be  easy, 
since  e\  eryone  else  tries  to 
avoid  them  nien  drop  a  few 
choice  lines  into  the  conversa- 
iit»n  like.  Td  really  appreciate 
your'opinittn  on  our  firewall 
j  setup."  In  no  time  at  all.  you'll 
have  auditors  crawling  all  over 
the  areas  in  which  you  want  to 
spend  money.  Six  months  lat¬ 
er.  senior  management  will  get 
a  report  saying  how  dire  the 


problems  are  in  that  area. 

Then,  seven  months  later, 
you'll  submit  your  budget  re¬ 
quest  for  money  to  address 
those  i.ssuc.s. 

Choose  Your  Allies 

Every  company  has  its  alpha 
dogs,  and  they're  rarely  in  IT. 
You  may  think  that  the  CIO  is 
at  the  top  of  the  food  chain, 
but  in  budget  meetings,  every  ¬ 
one  complains  to  him  about 
how  much  IT  spends  and  how 
the  help  desk  still  can’t  sort 
out  the  small  issues.  This  di.s- 
cussion  invariably  comes  up 
just  befiirc  his  S17.5  million 
request  to  fund  a  project  that 
even  he  doesn't  understand 
properly. 

The  CIO  has  a  hard  fight,  SIX 
you  must  look  elsewhere  to 
find  your  alpha  dogs.  In  soft¬ 
ware  houses,  they’re  the  sales¬ 
people;  in  investment  bank.s. 
they're  the  senior  traders;  in 
pharmaceuticals,  they're  the 
research  and  development 
folks.  Set  up  meetings  with 
them  and  tell  them  what  you  I 
need,  using  no  more  than  tw  o 
I  technical  terms  in  any  one- 
j  hour  meeting.  Then  tell  them 
j  what  might  happen  to  the 
,  company  if  security  fails. 

I  Three  montks  later,  when 
I  the  budget  cycle  starts,  submit 
your  request  to  the  CKY  He'll 
go  into  meetings  expecting 
the  usual  beating,  but  (his 
lime  the  alpha  dogs  w  ill  be  de- 
I  manding  to  know  why  he  isn't 
spending  more  tin  security. 

He'll  have  the  answers  on 
hand,  you'll  get  your  funding, 
and  everyone  will  go  away 
I  h*Try  —  “r  as  happy  as  any¬ 
one  can  K*  after  a  three-hour 
budget  meeting. 

So  there  you  have  it:  the 
four  key  steps  to  budgeting 
I  success.  Gxiod  luck,  and  n*- 
,  member  to  get  started  now-. 

I  If  you  do.  yx»u  may  just  be  in 
'  lime  In  gel  the  money  you 
j  need  for  next  year  • 

I^TDOYODTHIHK?  ~ 

I  Thuweekiioumaiiswrittenbyareal 
I  sccofiiy  manager.  "Rogw  Fon."  whose 
name  and  emotoyef  have  been  dsgutsed 
(or  obvKHis  reasons  Contact  him  at  roger. 
Iwx^^shmaiLcom  or  )om  the  discusston 
in  Our  forum  QuwMJnk  a1590 
To  lind  a  complele  archive  of  our 
Security  Manager'sJoumats.  00  online  to 
O  computvnworM.com/seciotjmat 
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SpamKillerGets 
Mobile  Security 
Tool  Updated 

brfonratian  Sacurfly  Corp- in 
Oaaffidd.  has  rateMed 
SacratAQint  MoUte  for  licTO- 
aofI  F^ctol  PC  2002  and  Win- 
dwinl>oMa2008.Sacfwt- 
Agant  mamgM  and  aacwia 
dOGumails  stoTMl  on  handhaM 
dtvicoa.  Tho  now  vonion. 

avaflabte  now.  Mudas  wp- 
port  for  ANSi-complant  digital 
sipnabns,  has  now  wortdlow 
foaluros,  providaa  automatad 
hay  Mstory  inanagament  and 
enablaa  aharad  viawing  and 
aditing  of  oncrypiod,  arohhiod 
documante.  starts  St 
^.95pardavlct. 

SpamKillerGets 
New  Rules 

McAfoa  Inc  has  updatad  the 
ndas  sal  for  its  SpamKItr 
products.  Tho  monthly  ndcs 
updalas  art  now  moro  granu¬ 
lar,  aocaiding  to  tho  Santa 
Clara.  CoH. -haaad  company. 
Now  foaturaa  inchida  100  nte 
that  folour  Iho  Fadarat  Trada 
Commiasion's  labaHng  stan¬ 
dards  for  saguaiy  nplA 
spam,  URL  ndaa  Ihm  Uanlify 
t-mal  with  Vfsb  addraaao 
amhaddad  hi  tha  body  tait  and 
a  nda  to  datoct  tba  Sobar Ji 
spMbot  Trotan  horia.  wMch 
propagalM  hma-nial  mam. 
Tho  igidilaa.  wfdeb  waih  with 
SpandObr  for  hW  Swan 
and  SpamMtar  appbMcaa. 
wi  bt  aoaiaMo  tfdi  month. 
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FourSt^toa 
Secure  Budget 

A  seasoned  security  manager  offers 
hard-nosed  advice  on  how  to  get  critical 
n*  security  projects  finded.  By  Roger  Fbix 


After  woridng  as  an  in-  curity  basics  and  calculating 

bouse  security  manag-  your  risk  profile.  Determine 
er  in  the  financial  ser-  the  potential  financial  loss 
vices  industry  for  many  arising  from  each  of  your 
years.  I  recently  moved  to  con-  threats,  and  multiply  that  by 


sultii^  work.  This  will  give  me 
the  opportunity  to  work  in  a 
variety  of  industries  (my  cur¬ 
rent  contract  Is  with  a  compa¬ 
ny  in  the  health  care  industry) 
and  projects. 

Tve  spent  the  past  few  days 
thinking  about  the  many  is¬ 
sues  i  fiKe.  trying  to  decide 

which  one  discuss  - 

in  this,  my  first  col-  - 

umn.  In  end,  it 
was  an  easy  decision: 
extortion.  Pm  not 
talking  about  pre-  jnHj 
venting  employees  or 
outsiders  from  steal- 
ing  funds.  Pm  referring  to  my 
ability  to  '‘extort*’  appropriate 
funding  from  management. 

There  are  less-cynical  ways 
of  looking  at  the  budgeting 
process,  but  my  experiences 
over  the  past  few  years  at  dif¬ 
ferent  companies  have  made 
getting  blo^  out  of  a  stone 
look  simple  in  comparison. 

Many  security  managers 
labor  under  the  misapprehen¬ 
sion  that  the  budget  process 
consists  of  woriring  out  bow 
much  you  need,  i^Meoding  a 
few  weeks  coaxing  your  fig¬ 
ures  into  the  bizarre  formats 
that  the  finance  group  re¬ 
quires,  then  defending  your 
important  projects  in  meet¬ 
ings.  But  roy  successful  bud¬ 
gets  have  bMn  the  result  of 
a  different  process  —  one  in 
which  I  laid  the  groundwork 
well  ahead  of  time.  Here  are 
four  steps  I  follow  to  obtain  i 
funding  fiom  that  parsimo-  I 
nious  corporate  bean  counter.  I 


iii'l 


JOMULa 


the  annualized  percentage 
likelihood  of  the  loss  occur¬ 
ring  to  get  the  annualized  loss 
expectancy  (ALE).  Then 
demonstrate  how  much  your 
project  will  reduce  the  ALE  — 
and  how  much  money  it  will 
save  the  company. 

Assuming  you  have  a  sound 
-  business  case,  docu¬ 
ment  this  clearly,  ex¬ 
plain  your  reasoning 
in  great  detail,  and 
...  .  then  submit  it  to  the 

g  finance  people.  It 

_  will  get  rejected  al¬ 
most  immediately, 
of  course,  because  no  one  in 
finance  will  understand  a 
word  of  it  But  don't  worry; 
you  have  to  go  through  this 
step  only  to  show  that  you've 
done  your  homework  and  to 
lay  the  groundwork  for  more 
productive  tactics  later  on. 

Introduce  FUO 

Next,  use  fear,  uncertainty  and 
doubt  to  your  advantage.  FUD 
is  the  roost  important  acro¬ 
nym  to  salespeople  hawking 
IT  security  wares,  and  you  arc 
trying  to  sell  your  own  IT  se- 


Start  by  going  back  to  your  sc- 


Iheie  are  less-cynical 
ways  of  looking  at  the 
budgeting  process,  but 
...getting  blood  out 
of  a  Slone  looks  Bie 
a  simple  task  in 
comparison. 


curity  services  to  the  corpo¬ 
rate  bean  counters.  Sow  fear 
("Did  you  bear  about  that 
backer  who  broke  into  NASA? 

1  hope  that  doesn't  happen  to 
us."),  uncertainty  (“Yes,  I 
know  we  spent  $500,000  on 
securing  our  network  perime¬ 
ter  last  year,  but  we  need  to 
make  sure  it's  workup.”) 
and  doubt  (*70%  of  security 
breaches  are  internaL  I  won¬ 
der  who  the  criminals  are  in 
our  companyD.  Sometimes 
this  beginner’s  tactic  works, 
but  any  chief  financial  officer 
who  been  around  the 
block  a  few  times  will  blow 
FUD  out  of  the  water.  Still,  it’s 
still  svorth  trying  just  to  see 
what  answers  you  get.  You  can 
always  use  those  responses 
the  next  time  an  IT  security 
salesperson  comes  calling. 

Befriend  Ybur  Auditor 

The  next  time  you  pass  an  au¬ 
ditor  in  the  corridor,  give  him 
a  big  smile.  These  people 
write  long-winded  reports, 
and  while  no  one  reads  the 
main  text,  everyone  reads  the 
executive  summaries.  Then 
these  reports  go  on  file,  as  do 
management’s  responses.  Best 
of  all.  the  auditors  eventually 
I  check  back  to  see  whether 
I  management  has  addressed 
the  issues  the  reports  have  , 
raised. 

While  the  threat  of  a  hacker 
attack  or  a  virus  infestation 
makes  the  budget  gods  ner¬ 
vous.  the  thought  of  three 
years'  worth  of  audit  reports 
pointing  a  finger  at  their  in¬ 
competence  will  give  them 
night  sweats.  A  scared  budget- 
setter  is  a  generous  budget- 
setter,  so  your  internal  audi¬ 
tors  are  a  major  ally.  The  same 
goes  for  external  auditors  and 
your  compliance  team,  too,  if 
you're  in  a  regulated  industry. 

So  make  friends  with  these 
people.  That  should  be  easy, 
since  everyone  else  tries  to 
avoid  them.  Then  drop  a  few 
choice  lines  into  the  conversa¬ 
tion  like,  “I'd  really  appreciate 
your  opinion  on  our  firewall 
setup."  In  no  time  at  all,  you’ll 
have  auditors  crawling  all  over 
the  areas  in  which  you  want  to 
spend  mooey.  Six  months  lat¬ 
er.  senior  management  will  get 
a  report  saying  how  dire  the 


problems  are  in  that  area. 
Then,  seven  months  later, 
you'll  submit  your  budget  re¬ 
quest  for  money  to  address 
those  issues. 

Choose  Your  Allies 

Every  company  has  its  alpha 
dogs,  and  they’re  rarely  in  IT. 
You  may  think  that  the  CIO  is 
at  the  top  of  the  food  fhain, 
but  in  budget  meetings,  every¬ 
one  complains  to  him  about 
how  much  IT  spends  and  how 
the  help  desk  s^  can’t  son 
out  the  small  issues.  This  dis¬ 
cussion  invariably  comes  up 
just  before  his  S17.S  million 
request  to  fund  a  project  that 
even  he  doesn’t  understand 
properly. 

liie  CIO  has  a  hard  fight,  so 
you  must  look  elsewhere  to 
find  your  alpha  dogs.  In  soft¬ 
ware  houses,  they're  the  sales¬ 
people;  in  investment  banks, 
the/re  the  senior  traders;  in 
pharmaceuticals,  they're  the 
research  and  development 
folks.  Set  up  meetings  with 
them  and  tell  them  what  you 
need,  using  no  more  than  two 
technical  terms  in  any  one- 
hour  meeting.  Then  tell  them 
what  mi^t  happen  to  the 
company  if  security  fails. 

Three  months  later,  when 
the  budget  cycle  starts,  submit 
your  request  to  the  CIO.  He’ll 
go  into  meetings  expecting 
the  usual  beating,  but  this 
time  the  alpha  dogs  will  be  de¬ 
manding  to  know  why  he  isn’t 
spcndii^  more  on  sectmty. 

He’ll  have  the  answers  on 
hand,  you'll  get  your  ftinding, 
and  everyone  will  go  away 
happy  —  or  as  happy  as  any¬ 
one  can  be  after  a  three-hour 
budget  meeting. 

So  there  you  have  it:  the 
four  key  steps  to  budgeting 
success.  luck,  and  re¬ 
member  to  get  started  now. 

If  you  do,  you  may  just  be  in 
time  to  get  the  money  you 
need  for  next  year.  I 

WIUTNYNT1MK? 

This  tveek’s  ioumd  B  wrttlen  by  a  teal 
security  managar, 'Roger  Foo.*  «^iose 
name  and  employBr  have  been  dBgutsed 
hy  obvious  reasons.  &)ntact  him  al  roget. 
k)ix9hushrnait.cam  or  |om  the  discussion 
in  our  ktrutit  QokMJnk  atSBO 
To  Arid  a  coflipiete  ati^  oi  our 
Security  Man^s  Jotmals.  go  ontne  to 
Qrwwpilarwwld  cew/tiuMiial  I 
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Limix  Tool  Kit 
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TOMMY  PETERSON 

E-voting’s  Rush 
lb  Failure 


MontotMnoMM  Itou.  Tho 
PmMIKtotooiltatoMonijnd 
MoMiMtoa-t  EdporboMl  tolt- 

tnliil  itoriniwil  ■imIumhiiii 
■idiaBWMoarallMtiVhIa 
Lton  lollam  Mnitan  toal 
■>ot*r  anoodm  to  too 

Sunimta,  CiK-taood  oompany. 
Omtopon  CM  000  too  tad  tot  on 
Wndooii.aotartaorltoia«n<<i- 
■totoaa.  Piktog  oltoto  d  13.000 
pirdowtagor. 


IBM  Unit  Moves 
To  Hyades  Pl^fonn 

BITS  Rottond  SollMn  dtataion 
onnoimil  lod  wook  tod  g  »« 
alantaidzo  gi  ado  of  automdod 
•dhofo-godgir  boll  on  too 
Hyoitoo  open-aomo  pidtafin. 

Dm  Hyoriot  prdod  to  0  atograup 
dtooEcipooopon  oonwopng- 
flct  tod  BM  toon  off  10  on  ta^ 
panOng.  nonptoM  ooipotdtan. 

By  todpnrgng  Hynttao.  Rdtand 
ptonotaprooMotoW-porlyvon- 
ton  and  IT  otgnfadtono  agg  a 
dindard  ddtann  on  otokh  In 
bdU  pradudi  tod  dB  nmli  aWi 
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NLayers  Aims  For 
App  Optimization 

NUdn  toe.  tod  wook  announced 
(dayors  kiSIdd.  an  applanco 
daaignad  to  pnnMa  apptcdkn 
optontadkn.  ylkiktag  adtood 
agaMa.toaapplancatrackaap- 
Idkdkn  rddtanddpa,  riapandan- 
ctoi.  uaaga.  damand  and  aarvka 
tovato  ooar  toon.  toSigM  Pnaktaa 
pnlry  haaad  nodfcalkila.  atoita 
and  rocommandaltanB  toraudi  a 
lnototoahoeltogdadikootd.ac- 
oontoigteSM  taoa  haiodiday- 
arvIboapplanGaatootoackoap- 
P«cdlonuaaga.dannndandaar- 
aka  tonto.  Makk  now.  toSglil 
cndi$4S.OOOtarapocpaludg- 
canao  or  32.430  par  monto  far  a 
adrarilidkin. 
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N  THE  WAKE  OF  the  painful  experiences  of 
2000,  the  choice  of  the  mechanism  used  to 
record  and  tally  votes  in  this  year’s  presidential 
election  may  be  almost  as  controversial  as  the 
battle  between  the  candidates.  Unfortunately,  a 


hefty  portion  of  state  and 
local  jurisdictions  have 
prematurely  adopted  elec¬ 
tronic  voting  systems. 

E-voting  in  this  year's 
election  Is  a  terrible  idea 
because  of  both  real  tech¬ 
nical  limitations  and  the 
perception  that  the  systems 
are  unreliable  and  vulnera¬ 
ble  to  tampering.  That’s 
something  of  a  problem, 
consideru^  more  than  30% 
of  all  voting  in  the  election 
will  be  done  on  electronic  marhin^K 

This  isn’t  just  a  public  relations  is¬ 
sue  or  one  that  will  go  away  when  citi¬ 
zens  get  used  to  the  technology.  A 
mounting  record  of  problems  with 
e-voting  has  tarnished  elections  in 
Georgia,  California  and  Texas.  an>nng 
other  places,  and  seems  to  justUy 
widespread  voter  skepticism. 

Part  of  the  problem  arises  from  the 
compleidry  of  e-votii^  systems.  The 
code  that  makes  up  these  systems  is  so 
large  that  there’s  no  efficient  way  for 
election  officials  to  ensure  that  it’s  free 
of  malware  or  to  completely  debug  it, 
according  to  testimony  Johns  Hopkins 
University  professor  Avi  Rubin  gave 
before  the  XJS.  Election  Assistance 
Commission  this  spring. 

The  technology  simply  isn’t  ready  to 
be  used  for  the  most  basic  and  critical 
Junction  in  any  democracy.  And  even 
if  it  were,  the  processes  and  protocols 
needed  to  monitor  even  high-perform¬ 
ing  systems  aren't  in  place,  judging  by 
the  report  from  IT  security  experts  as¬ 
sembled  by  the  Brennan  Center  for 
Justice  at  New  York  University  School 
of  Law  and  the  Leadership  Conference 


on  Qvil  R^hts.  The  pan¬ 
el’s  mandate  was  to  devise 
a  strategy  for  ensuring  the 
security  of  touch-screen 
direct-recording  electronit 
(DRE)  voting  systems. 

The  recommendations 
of  the  group  are  all  emi¬ 
nently  sensible:  IVain  all 
election  workers  on  securi 
ty  procedures.  Develop 
random  testing  procedures 
to  detect  malicious  code  or 
bugs  in  e-vodng  software. 
Create  and  follow  standardized  proce¬ 
dures  for  responding  to  security 
threats  and  incidents.  You  get  the  idea. 
But  it’s  a  tittle  alarming  that  the  panel 
had  to  make  these  recommendations 
to  nil  an  existing  procedural  gap. 

To  be  fair,  the  chief  recommenda¬ 
tion  of  the  panel  isn't  so  obvious,  and 
following  it  is  essential  to  the  success 
of  any  e-voting  system.  According  to 
the  report  each  jtirisdiction  that  plan* 
to  use  an  e-voting  system  should  hire ; 
well-qualified  independent  security 
group  to  evaluate  the  system’s  poten¬ 
tial  for  failure  and  vulnerability  to  at¬ 
tack.  The  outside  security  team  shoulc 
be  free  of  ties  to  systems  vendors  and 
be  given  unlimited  access  to  software 
code  and  configuration  information. 

TTus  is  precisely  the  right  approach 
to  both  h^en  the  defenses  of  DRE 
voting  systems  and  put  to  rest  some  of 
the  public’s  basic  fears  about  vote  tam¬ 
pering.  If  an  expert  outsider  can  take  a 
hard  look  at  the  code  on  a  Diebold  vot¬ 
ing  system,  fewer  citizens  will  be  wor¬ 
ried  about,  say,  whether  Diebold 
Chairman  Walden  O’Dell’s  support  of 
President  Bush  (he’s  a  big  fund-raiser 


for  Bush’s  campaign)  might  have  influ¬ 
enced  the  system's  design. 

But  most  jurisdictions  haven’t  put  any 
of  the  recommendations  in  place,  anH 
it’s  too  late  to  get  h  an  done  by  Novem¬ 
ber;  as  has  been  pointed  out  by  a  chorus 
of  security  experts  IQuickLink  47931J. 

The  headlong  rush  to  e-vodng  grew 
out  of  demands  for  reform  following 
the  chaos  of  the  2000  presidential 
election.  The  $4  billion  allty-ated  by 
the  federal  government  to  enact  those 
reforms  got  the  attention  of  vendors 
that  were  ea^  to  make  a  big  sale.  It’s 
time  to  slow  down,  even  if  it  means 
shelving  e-vodng  until  2008. 

Setting  up  a  parallel  paper  trail  for 
voters  within  an  e-voting  system,  as 
some  have  suggested  (including  Com- 
put€rworl(ts  Sharon  Machlis  —  see 
QuickLink  47905),  is  not  the  answer. 
That  would  be  cumbersome,  threaten 
the  secrecy  of  the  ballot  and  still  leave 
the  system  open  to  tampering.  Which 
is  why  a  federal  jute's  decision  last 
week  to  uphold  CaUfomia's  decertifi¬ 
cation  of  DRE  systems  until  vendors 
provide  voter-sreriflable  paper  audit 
trails  and  other  security  improvements 
[C^iickLink  48022J  isn't  enough. 

In  four  years,  processes  could  be  in 
place  that  force  transparency  on  all 
vendors  of  e-voting  systems.  The  use 
of  blind-signature  encryption  proto¬ 
cols  could  preserve  secret  balloting 
while  giving  voters  a  means  to  verify 
election  results.  There's  not  much  up¬ 
side  in  using  e-voting  systems  for  the 
election  that's  less  than  four  months 
away,  and  the  risks  arc  enormous. 

If  you  thought  pregnant  chads  in  ibc 
2000  election  were  bad,  wait  until  you 
sec  what  a  determined  hacker  could 
do  to  the  democratic  process  this  fall 
That  is,  of  course,  if  we're  lucky 
enough  to  detect  the  anack.  C  48002 
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Q«A 

Managing  'Real*  Risk 

Risk  management  is  an  idea  whose  time  has 
finally  come,  says  Cutter  Consortium  ana¬ 
lyst  Tom  DeMarco  (left).  He  explains  how 
project  managers  can  help  their  businesses 
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Q«A 

Moving  Targets 

Companies  go  through  innovation  stages,  so  IT  needs 
to  provide  the  right  help  at  the  right  time,  says  Geoffrey 
A.  Moore  of  TCG  Advisors.  Depending  on  the  stage, 
the  company  may  need  IT  to  support  collaboration  or 
hypergrowth  or  to  help  break  down  silos.  Pl0B  35 


OPINION 

Regenerating  IT 

Amputating  a  “broken"  IT  shop  through 
outsourcing  squanders  precious  time  and 
resources,  says  Bart  Perkins.  You’re  better 
off  investii^  in  a  sound  project  to  bring  the 
failed  organization  back  to  life.  PlQt  38 


AST  NOWMMN.  after  a  deluge  of  ington  State  Health  Care  Authority  to 
customer  complaints  about  un-  use  oflfehore  labor  for  a  major  IT  con- 
intelligible  Ei^lish,  lengthy  tract  prompted  legisUtion  that  would 
telephone  watts  and  poor  effectively  bar  state  agencies  from  fti- 


sourcing.  But  despite  the  backlash,  in-  ■  IT  work  to  India.  To  outsource  off- 
eluding  the  ongoing  public  outcry  over  shore  is  iK)t  a  political  decision  cm  the 

lost  inh<  arut  rho  -r.i _  ... 


service,  Dell  Inc.  rerouted  tech-  ture  use  of  offehore  contractors. 


nical  support  for  its  U.S.  corporate 
clients  from  a  call  center  in  India  to  fa¬ 
cilities  in  Texas.  Idaho  and  Tennessee. 

Weeks  later.  Lehman  Brothers  Inc. 
followed  suit,  shifting  offshore  help 
desk  support  for  the  financial  firm’s 
internal  users  back  to  the  U.S. 

Another  company.  Fremont.  Calif.- 
based  Everdream  Corp..  pulled  the 
plug  on  its  offshore  help  desk  center  in 
Costa  Rica  in  ApriL  The  reason:  plum¬ 
meting  customer  satisfaction. 

Elsewhere,  a  decision  by  the  Wash- 


For  CIOs,  offshore  outsourcing  used 
to  be  a  pretty  straightforward  dollars- 


lost  U.S.  jobs  and  the  heated  rhetoric 
of  politicians  in  a  presidential  election 
year,  most  businesses  have  no  inten¬ 
tion  of  scalii^  back  or  delaying  their 
offshore  plans.  Indeed,  86%  of  96  at- 


—  f «^uauuic  puuia.  iiHieea,  so'nt  oi  to  at- 
and-cents  decision  —  a  relatively  mod-  tendecs  polled  at  a  Gartner  Inc.  out- 


est  financial  investment  in  cheap  for¬ 
eign  labor  in  return  for  significantly 
lower  ongoing  operational  costs. 

Not  anymore.  Backlash  from  em¬ 
ployees  and  customers  has  triggered 
productivity  and  revenue  losses,  plus 
more  than  a  few  public  relations  night¬ 
mares  and  political  donnybrooks. 

Clearly,  U.5.  companies  are  in  the 
hot  seat  when  it  comes  to  offshore  out¬ 


sourcing  conference  in  May  said  none 
of  the  backlash  factors  would  cause 
them  to  change  their  offshore  plans. 

The  reason  is  pure  and  simple:  eco¬ 
nomics. 

“Customers  are  constantly  pursuing 
cost  benefits.  It’s  a  constant,  like  gravi¬ 
ty.”  says  Mike  Hoyt.  CEO  of  Paradigm 
Works  Inc.,  a  chip  design  company  in 
Andover,  Mass.,  that  sends  design  and 


part  of  the  company.  It’s  an  economic 
decision  with  political  ramifications." 

PoKtical  Probleiiis 

But  those  ramifications  are  consider¬ 
able.  and  mounting  backlash  from  em¬ 
ployees.  corporate  partners  and  con¬ 
sumers  substantially  mcreases  the 
risks  urvolved  in  of&hore  outsourcing, 
says  Alfred  Ricci  who  beads  the  newly 
launched  sourcing  management  office 
at  Union  Bank  of  Califonua  (UBCX:)  in 
Los  Angeles.  A  technical  decision  to 
move  work  offshore  could  “absolutely" 

I  trigger  er>ough  of  a  backlash  to  affect  a 
I  company's  stock  price,  Ricci  says. 


3  avc.3„,„  py  me  wash-  ■  ho,  sea,  wheo .,  comes  io  oflshore  o„,-  |  Ahdover,  ^fc,ss.,  da.,  sehds  design  aod  I  compahy  s  s^k  pri;e:Rfcci  ^ 

Howto  combat  offshore  outsourcing  backlash,  e  ^  ''ing 
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As  an  example,  he  mentions  Califor* 
nia  Senate  BUI  1386  (QuickUnX  47344], 
which  requires  a  company  to  in/bnn 
customers  if  their  privacy  may  have 
been  compromised.  “A  violation  of  that 
law  [by  an  oflfsbore  outsourcer]  would 
have  a  tidal-wave  effect,  which  could 
result  in  a  downgradii^  of  the  bank's 
creditworthiness."  he  notes. 

To  mitigate  that  risk  and  tninimtyf» 
damage,  the  UBOC  created  a  dedicated 
sourcing  office,  which  reports  to  an  ex¬ 
ecutive  vice  president  and  handles  not 
only  all  contracts  for  professional  ser¬ 
vices  and  staff  augmentation,  but  also 
all  strategy  and  communications  re¬ 
garding  offshore  plans. 

Internal  Issues 

Two  of  the  thorniest  backlash  prob¬ 
lems  around  offshore  outsourcing  are 
rumors  and  employee  flight,  Ricci  says. 
"TTte  first  reduces  productivity,  and 
with  the  second,  the  bank  loses  skills 
and  knowledge,"  he  notes.  The  sourc¬ 
ing  office  helps  prevent  both  problems. 

It  assists  senior  management  in 
preparing  presentations  to  line  em¬ 
ployees  about  the  effect  outsourcing 
will  have  on  them.  It  also  provides 
managers  with  a  list  of  answers  to  fre¬ 
quently  asked  questions  so  all  informa¬ 
tion  is  consistent.  Moreover,  the  bank 
has  a  person  dedicated  to  tracking  leg¬ 
islation  and  regulatory  updates  that 
could  affect  how  and  where  the  com¬ 
pany  outsources  IT  work. 

Ricci  emphasizes  that  the  cost  of  run¬ 
ning  the  sourcing  office  is  "100%  over¬ 
head.  But  the  way  you  mitigate  some  of 
the  risks  associated  with  outsourcing  is 
to  plow  some  of  the  cost  savings  back 
into  the  monitoring  and  man^ement 
of  the  [outsourcing]  relationship."  That 
includes  managing  employees  and  cus¬ 
tomers.  "Basically,  the  cost  savings  is 
$0%.  You  take  2S%  of  chat  and  put  it  in 
legaL  contracts,  extra  management 
You  can't  be  greedy."  Ricci  says. 

Synygy  Inc.,  a  software  and  services 
company  in  Conshohocken.  Pa.,  chat 
has  development  centers  in  Pune,  In¬ 
dia.  and  Iasi,  Romania,  is  hoping  to 
mmimize  employee  backlash.  It  offers 
US.  employees  who  might  otherwise 
be  laid  off  the  choice  of  working  at  one 
of  those  centers  at  a  salary  equivalent 
to  what  local  FT  employees  earn,  which 
is  30%  to  70%  less  tlun  in  the  U3. 

In  addition  to  cost  savings,  the  "ex¬ 


change  program"  offers  other  benefits, 
says  Chief  Teclmology  Officer  Chetan 
Shah,  "h  helps  people  gain  experience 
and  understand  why  this  glob^  model 
is  so  important.  They  also  gain  respect 
for  their  foreign  counterparts. 

“You  need  to  be  honest  with  em¬ 
ployees."  explain  the  economics  of  the 
situation  and  offer  them  the  right  to  re¬ 
turn  when  jobs  become  available  in  the 
U.S.  again,  Shah  adds. 

But  choosing  which  IT  employees 
should  remain  after  sending  work  off¬ 
shore  can  be  tricky,  warns  Gartner  ana¬ 
lyst  Linda  Cohen. 

“Not  all  people  are  going  to  make 
the  transition  to  higher-level  positions 
here  as  the  commodity  woric  is  moved 
offshore."  she  says,  adding  that  CIOs 
often  choose  the  wrong  people  to  stay. 
"Typically,  they  choose  the  guys  who 
stuck  with  them  and  stayed  up  all  ni^t 
to  fix  broken  code.  They  usu^y  pick 
people  who  do  the  very  things  they’re 
choosing  to  outsource." 

The  solution.  Cohen  says,  is  to  pro¬ 
file  all  IT  employees,  flagging  as  keep¬ 
ers  "those  with  consultative  skills  who 
aren't  wedded  to  how  work  is  done  but 
instead  are  wedded  to  the  outcome." 

CIOs  should  also  be  forewarned  that 
IT  workers  aren't  the  only  potential 
source  of  employee  backlash.  Business 
managen  and  workers  in  other  depart¬ 
ments  are  often  resistant  to  change, 
says  Kaushik  Bhaumik,  vice  president 
of  business  technology  consulting  at 
offshore  outsourcing  vendor  Cog¬ 
nizant  Technology  Solutions  Corp.  in 
Teaneck.  N.|.  I 

"Each  one  ofthose  organizations  has  I 
gotten  used  to  working  with  IT  in  a  I 


certain  way,  and  they  may  be  used  to 
Tom  or  Mary  from  IT.  So  you  need  to 
identify  those  users’  key  concerns,  and 
it  may  mean  keeping  Tom  or  Mary 
where  they  are  and  developing  a  role 
around  them,"  he  says. 

Bhaumik  also  recommends  choosing 
“change  leaders”  to  remain  on  board  as 
employees.  “Change  leaders  speak  up 
at  meetings  and  command  respect  from 
peers,  regardless  of  their  titleC  be  says. 
“People  listen  more  and  espouse  change 
when  they  hear  it  from  their  peers." 

Lay  Out  Plans 

Counseling  corporate  customers  about 
how  to  prevent  or  deal  with  worker 
and  customer  backlash  to  offshore  out¬ 
sourcing  is  a  growing  part  of  a  consul- 
I  tancy’s  work,  Bhaumik  says.  The  most 
important  advice  he  gives  clients  is  to 
have  what  be  calls  an  ofi&bore  road  map. 

“One  of  the  most  painful  aspects  of 
[off^ore  outsourcing]  is  when  it 
comes  out  in  dribs  and  drabs,"  he  says. 
“It  can  be  very  disconcerting  to  peo¬ 
ple.  It  just  stops  work."  Bhaumik  advis¬ 
es  clients  who  are  ofi^horing  more 
than  25  jobs  to  lay  out  wliat  they  are 
doing  in  three,  six,  nine  and  12  months. 
"People  respond  better  to  a  long-term 
road  map  and  their  place  on  it.  rather 
than  a  road  map  that  appears  to  be 
thought  up  on  the  fly.”  he  says. 

Beardless  of  the  extent  of  work 
to  be  sent  ofl^ore,  the  absolute  cor¬ 
nerstone  of  all  backlash-control  strate¬ 
gies  has  to  be  factual  information, 
experts  say. 

Tou  don't  want  rumor  to  overtake 
reality."  says  Michael  'IVeacy,  author  of 
several  management  books  and  co¬ 
founder  of  Gen3  Partners  Inc.,  an  In¬ 
ternet  and  offshore  outsourcing  con¬ 
sulting  firm  in  Boston.  "In  the  end.  you 
can  only  politicize  so  long,  artd  then 
the  fKts  will  prevail" 

According  to  Tieacy.  the  "hysteria” 
that  surrounds  ofibore  outsourcing 


doesn’t  reflea  reality.  He  says  the 
highest  prediaion  of  the  number  of 
jobs  lost  to  oflshore  outsourcing  is 
300.000,  yet  the  U.S.  economy  has  130 
million  jobs.  That  means  oflshore  out¬ 
sourcing  accounts  for  one  quarter  of 
1%  of  the  American  economy,"  he  says. 


Customer  Concerns 

I  In  dealing  with  customers,  IVeacy  ad¬ 
vises  CIOs  and  other  executives  to  al¬ 
ways  explain  their  decision  to  go  off¬ 
shore  in  terms  of  the  value  it  brings  to 
the  customer.  "Customers  fundamen¬ 
tally  don’t  care  what  you’re  doing  with 
your  employees,”  be  says.  That’s  why 
every  communication  to  customers 
must  be  couched  in  such  a  way  fhat 
you're  providing  better  value  to  them.” 

The  best  way  to  control  damage,  of 
course,  is  not  to  outsource  offshore. 
That’s  the  strategy  at  DSLExtreme,  a 
Canoga  Paik.  Calif.-based  cable  com- 
munkattoQS  and  Internet  service 
provider  with  50.000  subscribers.  The 
company  tries  to  of&et  its  higher  labor 
costs  by  touting  itself  as  a  hometown 
player  ~  “a  local  company  with  a  local 
feel”  says  CEO  Ari  RamezanL 

The  downside,  Ramezani  says,  is  the 
unavoidable  faa  that  consumers  have 
to  be  willing  to  pay  more  for  services 
from  companies  that  don't  outsource 
overseas.  O  <7909 
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MIDOtEWARE  IS  IBM  SOFTWARE.  Powerful  software 
like  Tivoli*  and  WebSphere*  And  its  at  the  heart  of  solving 
what  analysts  call  the  key  Issue  of  2004:  automation. 

IBM  middleware  Is  open  and  can  deliver  it  all  at  a  pace 
to  match  your  needs.  It  anticipates  problems,  responds 
to  change  and  optimizes  resources.  And  it  all  leads  to 
meeting  business  goals,  ThatS  ON  DEMAND  BUSINESS. 

1.  IncranadATMaclivitydelscted  instantly. 

2.  kJenttties  confirmad  aacurety. 

3.  Onllna  banking  Incraaaas  dramatically. 

4.  IT  reaouraas  opUmlzad  dynamically. 

5.  Bank  sarves  customare  aaaily. 
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Managing 

‘ReaTRiste 

I 

Tom  DeMarco  says  knowing  how 
to  mana^  project  risks  enables 
companies  to  take  bigger  ones. 


lb  get  big  payoffs,  you 
need  to  take  big  risks. 
s<^  Cutter  Consortium 
anaJyst  Tom  DoMarm.  In 
his  most  recent  book,  Walt2ing  With 
Bears,  he  and  co-author  Timothy  Lister 
explain  how  pro/ect  managers  can  help 
their  businesses  embrace  fish  and  reap 
the  rewards.  He  told  Kathleen  Mely- 
muka  why  risk  management  is  an  idea 
whose  time  has  finally  come. 

Vw  and  Tin  UMir  hM  writtan  ^out  many 
tapica  owar  Aa  jMn.  Why  rfak  managamMrt 
ttoeff  We  have  moved  from  a  focus  on 
risk  control  to  a  focus  on  risk-taking. 
When  you're  trying  to  enable  pec^ie  to 
take  ri^  then  you  really  need  to  use  a 
much  more  disciplined  approach  that 
allows  you  to  assess  and  track  the  ride. 
It  sounds  paradoxical,  but  it's  the 
change  in  mind-set  from.  "Make  this 
go  away"  to  “Make  it  possible  for  me  to 
take  some  really  big  risks  without  bet¬ 
ting  the  farm  on  them."  All  the  systems 
that  are  chaining  the  worid  are  very 
risky  systems,  but  the  payback  b  enor¬ 
mous.  So  we  need  much  more  method¬ 
ical  ways  to  take  risks. 

Wu  cal  rbk  nunaoMnent  praiact 

tnMMOMmnL*  Why?  Children  are  al¬ 
lowed  to  maintain  a  blase  presumption 
that  there  b  nothiitg  bad  in  the  «vorid. 
Adults  worry  about  the  bad  things  that 
can  happeiL  In  pushing  aside  any  con¬ 
sideration  of  failure,  the  can-do  man¬ 
agement  philosophy  b  intrinsically 
childlike.  We  need  to  move  past  that, 
Can-do  b  a  recipe  for  being  able  to 
take  only  small  risks. 


I  mamoament?  It  makes  rbk-taking  pos¬ 
sible.  It  doesn't  oblige  you  to  abandon 
your  stretch  goal:  it  only  causes  you  to 
consider  your  fallback  plans  for  if  that 
goal  b  not  reached.  It  builds  a  much 
more  healthy  relationship  between 


builder  and  buyer,  in  which  people  are 
able  to  talk  maturely  about  uncertainty 
instead  of  pretending  they’re  certain 
when  they  haven't  got  a  clue.  It’s  a  way 
to  scrub  out  the  little  white  lies  that 
are  so  much  a  part  of  the  builder/ 
buyer  relationship. 

Whif't  tha  htfdast  tNng  about  manaoing 
rtefc  in  an  IT  proiact?  Risk  b  an  abstrac¬ 
tion:  something  that  may  or  may  not 
happen.  We  are  not  used  to  dealing 
with  abstractions  on  proiect  plans. 
Every  activity  on  a  protect  plan  has  to 
be  done.  Any  that  mighr  have  to  be 
done  are  not  on  the  plan.  The  whole 
notion  of  uncertainty  b  hard  to  wrap 
your  mind  around.  It’s  anti-intuitive 
and  abo  countercultural  in  some 
places.  There  are  some  places  where 
you  can  be  wrong  but  you’re  not  al¬ 
lowed  to  be  uncertain. 

ffisfc  management  SMms  so  obvious.  ¥fhy 
are  IT  groups  so  avarw  to  R?  There’s  a 
presumption  built  into  the  heart  of  IT 
project  planning  that  starting  a  project 
off  toward  unrealbric  goaU  does  no 
harm.  But  if  you’ve  been  through  a 
project  that  was  done  that  way,  you 


I  Wi  U..M  iK  (i.-fi)  „nij  wildif; 

'isk  t^kmg  m  tfiu*!  doom  I 


know  it  does  terrible  barm.  It  causes 
you  to  do  things  in  the  wrong  order 
and  leave  out  things  that  need  to  be 
done.  But  still,  we  figure  out  the  most 
optimbtic  possible  scenario  and  plan 
according  to  thac 

Are  IT  paopla  ready  to  do  rsai  risk  manage- 
menf?  There  is  a  class  of  person  who  b 
reluctant  to  open  thb  book.  They  know 
it  will  tell  them  about  managing  uncer¬ 
tainty  in  a  reasonable  way,  and  a  lot  of 
people  don't  want  to  bear  that.  It’s  like 
going  for  a  colonoscopy.  You  know  it's 
good  for  you,  but  you  keep  putting  it 
off  because  you  don’t  want  to  face  the 
possibility  of  bad  news.  O  47616 


THE  ONUS  OF  UNCERTAINTY 


CORPORATE  CULTURE  -  whatever 
that  means- poses  senous  challenges  ; 
to  the  would-be  risk  inanagef.  The  most  - 
important  of  these  is  an  attitude  toward  : 
uncertainty,  summed  up  as  follows:  It's 
OK  to  be  wrong,  but  not  OK  to  be  uncer¬ 
tain.  If  that  njfe  describes  your  company, 
you're  sunk. 

The  rule  says  you  may  mbs  your 
promised  deli^  date,  but  m  the 
months  and  days  leading  up  to  that 
date,  you're  not  allowed  to  express  any 
doubt  that  you  will  indeed  dekver  on 
time.  Future  b  tolerated  as  tong  as  you 
don't  commit  the  capital  crime  of  admit-  ■ 
ting  beforehand  that  you  mig/v  fail. 

Thb  constratrtt  may  leave  you  prone 
to  an  infectious  dbor^  calM  sefecfrve 
mwwa  PnDiecls  that  are  stneken  vwlh 
this  condition  can  see  only  small  prob¬ 
lems,  (..^problems  may  loom  Erectly  : 
ahead  -  problems  that  would  be  in  the 
center  of  any  healthy  project's  field  of 
vision  -  but  they  go  completely  unseen. 

People  take  elaborate  care  not  to 
trip  over  the  railroad  ties,  but  nobody 
can  see  the  oncoming  train.  Rbks  are 
identified,  a  rbk  kst  b  pubibhed.  risks 
are  reported  on  status  r^xNts.  and 


mitigation  str^egies  are  approved. 
Rbks  are  monitored  and  traded.  If  one 
only  reviews  the  rbk  Ibts  and  records, 
it  appears  that  the  project  b  low-rbk. 

All  the  risks  erumerated  are  at  the  in¬ 
convenience  or  nuisance  level.  The  rbk- 
Irarking  proceeds  without  variance  until 
the  project  b  suddenly  canceled,  often 
followed  by  a  furious  tone-picking  of 
the  corpse  by  litigation. 


* 


Fortunately,  there's  a  vaccine.  At 
the  first  go-roimd  of  ridi  identification, 
vaccinate  everyone  by  naming  all  the 
catastrophic  outcomes  you  can  imag¬ 
ine.  Ask  for  more  catastrophes  from 
the  group,  ^leak  the  words  faAjre.  re- 
/setonand  canceSation.  See  whether 
you  can  get  others  to  speak  them 
publicly  as  weH.  Now.  work  backward 
from  your  catastrophe  Ibt.  asking  for 
scenarios  that  could  lead  to  each  of  the 
catastrophes.  Take  eadi  scenario  and 
try  to  desento  the  risk($)  that  could 
bring  It  about.  Now  you  have  the  begin¬ 
nings  of  a  rbk  Ibt  that  might  reflect 
futim  reality. 

The  essence  of  the  technique  b  thb: 
Attack  your  nightmares,  not  your  petty 
wnies;  to  di«x}ver  the  rbks  that  really 
to  your  project  trace  backward 
affect  to  cause.  Watch  for  oncom- 
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their  place  That's  still  in  the  works. 


MovingTargets 

Companies  need  different 


types  of  innovation  sup¬ 
port  from  IT,  depending 
on  what  stage  fliey’re  in. 


y 

Q&A 


I  New  ideas  come  in 
many  fiyrms.  from  the 
disruptive  innovation  of 
the  first  PCs  to  the  busi¬ 
ness  model  innovation  o/i] 
Dell's  decision  to  bypass  ^ 
the  retail  channel  and 
sell  directly  to  con¬ 
sumers.  In  the  fuly  issue 
o/Harvard  Business  Re¬ 
view.  Geoffrey  A.  Moore 
says  the  way  to  get  more 
bang  for  your  iwtovation  buck  is  to  look 
at  how  any  market  evolves  throughout 
its  life  cycle  and  tie  your  innovation  ef¬ 
forts  to  that  evolution  Moore,  a  rruinag- 
ing  director  ofTCG  Advisors  LLC  in  San 
Mateo.  Calif,  ttdd  Computerworid’s 
Kathleen  Melymuka  that  the  challenge 
for  ITis  to  support  those  evolving  efforts 
with  appropriate  technology. 

UokingMinnowlionasMevoiufioniilu- 
cinatirig.  What  rote  does  IT  pMy  in  al  thie? 

IT  is  an  enabler  of  each  of  these  kinds 
of  innovation.  With  disruptive  and  ap¬ 
plication  innovation,  the  technologies 
that  matter  most  are  about  communi¬ 
cation  and  collaboration.  People  have 
been  talking  about  concurrent  engi¬ 
neering  and  collaboration  problems  for 
20  years,  but  our  clients  say  communi¬ 
cation  and  collaboration  are  still  not 
what  they  want  them  to  be.  IT  has  a 
long  way  to  go  to  be  better  at  those. 

ta  pradud  and  precaas  mwiGoiu  things 
heat  up.  How  dm  tha  rr  rate  dwiga?  With 

product  and  process  innovation,  where 
companies  are  ramping  up  and  seeing 
hypergrowth,  laying  down  the  trans¬ 
actional  systems  really  matters,  and 
designing  for  scalability  is  a  huge 
issue.  You  don't  need  IT  to  help  you 
differentiate;  you  need  IT  to  keep  the 
wheels  on  the  car.  and  it’s  vibrating 
madly.  During  this  period.  IT  has  its 
hair  on  fire.  It  gets  very  focused  and 
even  a  bit  siloed  because  at  this  point 
the  functions  in  the  company  that  it 
serves  tend  to  be  siloed. 


How  can  IT  avoid  tha  siloing?  During  this 
hypergrowth  phase  you’re  growing  so 
f^t  you  may  want  to  talk  across  func¬ 
tions,  but  there’s  no  time  to  talk  to  any¬ 
one.  Companies  and  IT  tend  to  build 
those  silos  that  they  spend  the  rest  of 
their  lives  trying  to  deconstruct,  but 
there’s  no  easy  way  around  it.  That’s 
the  classic  FT  of  the  go-go  years. 

What  happens  after  that?  We’re  not  in  hy¬ 
pergrowth  but  not  in  decline.  We’re  in 
that  inderinitely  elastic  middle  where 
IT  can  be  a  genuine  source  of  differen¬ 
tiation.  You’re  taking  the  costs  out  of 
processes,  and  there's  a  lot  IT  can  do. 

In  particular,  you’re  trying  to  extract 
resources  out  of  nondifferentiating 
processes  so  you  can  concentrate  on 
the  differentiating  ones.  Outsourcing 
some  of  the  functions  of  the  corpora¬ 
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tion  can  be  veiy  important  here. 

How  doK  rr  awort  ttal?  Whenever  you 
outsource,  you  need  great  visibility  and 
control  systems.  IT  has  fallen  behind 
here.  IT  systems  tend  to  be  about  pro¬ 
ductivity  for  in-house  workers.  When 
we  do  the  work,  we’re  not  so  worried 
about  visibility  and  control  because 
man^ment  takes  care  of  that  But 
now  (with  outsourcing)  it’s  about  visi¬ 
bility  and  control  at  a  distance.  It's 
really  important  to  put  in  place  service- 
level  agreements  around  outsourced 
functions  that  keep  everyone  apprised. 
Process  control  knowledge  is  typically 
built  iiuo  tbe  chemical  and  oil  indus¬ 
tries.  but  average  companies  don’t  Imow 
squat  about  it.  Sure,  we  have  Six  Sigma 
black  belts  running  aU  over  companies, 
but  IT  needs  to  develop  software  to  take  I 


What  happm  as  the  mwkte  dsdmes?  As 

the  curve  stans  to  decline  and  you 
come  to  business  model  innovation, 
the  old  transaction  systems  will  need 
to  be  reworked.  That’s  going  to  disrupt 
the  heck  out  of  IT.  and  1  don’t  have  an 
easy  answer.  You  may  be  eliminating 
members  of  the  value  chaia  Ma>*be 
you  no  loiter  need  fcHir  companies: 
maybe  you  can  make  do  with  two  or 
one.  When  you  do  that.  IT  systems  be¬ 
come  ground  zero.  Look  at  how  Dell 
disintermediated  the  retail  channels. 
They  did  it  with  IT.  So  vahie  chain  in¬ 
novation  is  a  big  deal. 

And  at  the  end  of  the  Ine?  Structural  inno¬ 
vation  is  all  about  merging  companies 
and  meigu^  IT.  There  must  be  a  place 
in  purgatory  where  that’s  all  you  do. 
because  nobody  likes  the  outcome  and 
everybody  hates  you  for  years.  That’s 
a  place  where  IT  is  really  challenged. 

If  you  have  an  eoemy,  this  is  a  great 
assignment  for  him.  O  47712 


This  is  the  lateal  in  a  senes  of  nvntMy  dbcus' 

teonavdlh  Harvard  Business  Rewew  ii 

on  topics  of  teterast  to  fT  tiwM^sn. 


To  Succeed  df  innovat.on.  Geoffrey  A  Moore  says  a  company  f>eeos  to  calibrate 
i!5  efforts  to  the  Me  cycle  of  the  marhel  .fs  >n  Here  htTv  i? 
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Du'ir.i;  X'‘  IT 
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Sleepless  In... 

■  onnMfe  One  out  of  Hvse  FT 
drectats  is  vfOfWng  between 

48  and  00  hoMi «  meh. 

■  HUMCErTIbaflTdrectors 
are  woiMng  more  ttan  00 


■  aa8MNV:2%oflT(lrec- 

tors  pi<  in  the  equnienl  of 

79«Mttiiodi|K«ieoelL 


What’s  on  Your  Nightstand? 

TORIO  PRESaOfT  BU  CUMTOIf s  new  autobiogr^ 
this  summer's  must-read  for  executives,  according  to  a  survey  of 

business  arwj  IT  executives  conducted  by  the  Association  (rf  Executive 
Search  Consultants  in  New  ^  Of  174  executives  poted.  36% 

said  they  would  be  reading  Clinton's  book  this  summer. 


■  Other  top  titles  include  AfeiarWiSfWarTx^^  Trw^: 

/few  To  aw  by  DonaW  Tfuntp  with  Meredith  Mclvw;  You 
Sacr^  by  Sophie  Ktfisdia:  arul  4<4ornaAc  Miior^ 


Q&A  Can  you  m.mc 

me  rnoneyT 

Can  you  iave  vit  money'^  Can 
you  increase  niy  I'ificiency'’ 
These  a'e  the  only  ihiee  thinyb 
today's  employei:^  ate  mte'est 
Rd  in  when  it  comes  to  hiring  IT 
proiessionals  So  say:,  author 
and  longtime  tl  teciuifct  Oainfi 
Perry  m  his  new  hooli.  C.trevt 
Guido  for  the  H'jh  Tech  ProfOb 
SionjI  Where  Stye-  Jntis  A'o  Vi-w 
4po  Hcyy  to  L^rd  Them  (Catefit 
Press  Inc.  2004) 


Making  yourself  relevant  to  an  employer's 
needs  IS  what  will  get  you  noticed  and  hired. 
Perry  says.  IT  job  candidates  need  to  think 
about  their  own  accomplishments  with  their 
potential  employer's  requirements  in  mind 
*As  a  job  seeker,  you  need  to  become  adept 
at  direct  selfi)rorrK)tlon  to  executives  and 
to  showcase  your  answer  to  this  question: 
'How  cw  I  increase  shareholder  vabe?"' he 
writes.  Perry  recently  spoke  with  Computer- 
rntW^  «bjia  King  about  the  challenges  of 
finding  an  FT  job  today. 

What’s  your  advice  to  rr  workers  who 
have  boon  laid  off  or  whoso  jobs  have 


I  been  outsourced?  How  should  they  be 
j  seiKng  themselves  in  today's  IT  job 
market?  ft's  about  taking  charge  of  your 
career  and  your  life.  If  you've  been  m  the 
high-tech  industry  for  the  past  15  years  or 
so.  up  until  2001.  there  was  always  some¬ 
body  like  me  on  every  comer  saying.  "Hey. 
do  you  want  a  job?"  ^  have  a  whole  gener¬ 
ation  of  people  who  don't  know  how  to  go 
and  ferret  out  their  owrr  opportunities.  You 
need  to  start  by  figuring  out  what  skill  sets 
you  have  that  employers  are  most  likely  to 
pay  for.  what  industries  you're  interested  in 
and  then  do  a  Google  search.  By  doing  a 
Google  search  by  |ob  title,  industry,  area 
code,  geographic  location,  etc.,  you'll  get  to 
80%  of  the  job  opportunities  out  ^lere.  Go¬ 
ing  through  IT  job  boards,  you'll  maybe  get 
to  2%  of  the  opportunities  out  there. 

And  then  what?  Figure  out  who  the  peo¬ 
ple  are  with  the  responsibility  for  actually  hir¬ 
ing  you.  Rnd  som^ing  int^igent  to  say  to 
these  people,  and  then  go  after  them  in  a  di¬ 
rect  manner.  Typically,  it's  a  VP.  Do  a  search 
I  for  quotes  from  them  in  business  articles  or 
j  find  any  white  papers  they've  writtwi  and 
I  read  them.  Fmd  the  person's  e-mail  address 
!  and  send  them  a  note  saying  you  read  their 
;  white  paper  and  get  a  discussion  going.  All 
I  of  a  sudden,  you’re  no  longer  looking  for  a 
I  job.  but  you're  having  a  business  discussion 
I  For  so  many  people  looking  for  an  IT  job. 

I  that  is  so  far  out  of  the  realm  of  what  they've 
I  been  taught  to  do. 

I  What  are  the  three  iTHstaJws  you 
I  see  IT  job  candfdatos  make  today? 

I  Sending  their  rdsurne  to  personnel.  Sending 
'  their  rOsume  to  personnel  and  sending  their 
■  resum4topersonReL0  47B20 


The  U.S.  House  Approprtalions  CommItBe 
has  voted  to  NilhfioU  S5  rnfo  frim  tftt 
gels  of  the  deportments  of  Commerce.  Jus¬ 
tice  and  State  und  the  fedeni  agencies  can 
inve  that  al  ei|^  woriars  are  perinltod  to 


I  tckrconviaOa  The  2005 appropriations  bl 
I  also  reqiires  the  faderaf  judiciary,  the  SnWI 
I  Business  Arknristration  and  the  Securities 
I  and  Exchange  Cornrnission  to  prove  that  fligl- 
1  bleerrodoyees  are  permitted  to  telecoirvTiule. 


WHh  at  of  the  advances  in 
there’s  Just  ne  reason  te  St 


■  ^  8  jwt  no  reason  to  strap  youreek  into  a 

n^  box  aveiy  niornim  just  to  drive  to  an  office 
whereyousitinfraiitoraconiputarydw-Off- 
the-shoH  tachnoiogy  avm  aloiim  for  faco^o-lBce 
moato  via  vidaoconfarencing.  So  not  being  ^ 
to  talt  -  or  see  -  cowwoitors  on  a  regute  basis  Is 
nolongaranissue. 


Got  Questions  About 
Network  Consolidation? 

Computerworld’s  IT  Executive  Summit  Has  the  Answers 


If  you’re  an  IT  executive*  In  an  end-user 
organization,  apply  to  attend  Computerworld’s 
upcoming  complimentary  half-day  summit 
on  Network  Consolidation. 

CIOs  and  senior  IT  executives  are  finding  that 
consolidating  high-performance  networks  can 
play  a  key  role  in  improving  business  applica¬ 
tion  performance  while  significantly  reducing 
operational  costs. 

The  proliferation  of  network  capacity  and  relat¬ 
ed  storage  and  server  infrastructure  presents  a 
daunting  challenge  for  today’s  enterprises, 
many  of  which  are  positioning  themselves  for 
growth  yet  still  seeking  to  reduce  IT  costs 
where  feasible. 

By  leveraging  the  knowledge  of  Irxiustry 
experts  and  the  reeil-world  experience  and 
advice  of  your  IT  peers,  this  IT  Executive 
Summit  will  provide  an  overview  of  effective 
strategies  for  consolidating  and  connecting 
net\^orks  and  data  center  applications. 

•Complimentary  registration  is  restricted  to 
qualified  IT  executives  only. 


Streamlining  Networks  and  Data  Centers: 
The  Business  Benefits  of  Consolidation 
San  Francisco  •  August  5,  2004 

San  Francisco  Four  Seasons  Hotel  •  757  Market  Street 
7:45am  to  8 15am 
8:15am  to  8:45am 


Selected 

speakers 

include: 


Registration  and  Networking  Breakfast 

Rebuilding  the  IT  Rxjrxiation 

Maryfran  Joiwtson.  Editor  in  Chef.  Computerworia 

Consolidation  and  the  Data  Center. 
Boosting  Business  Performance 
and  Application  Availability 

Matt  Eastwood,  Research  Director,  Global  Enterprise 
Server  Solutions.  IDC 


8:45am  to  9:15am 


9:15am  to  9:45am 


Perspectives  from  a  CIO 

Refreshment  and  Network, Break 

User  Case  Study 

Aleiandro  Lopez,  System  Architect  Universiry  of  Cahfomia 
Dave  Medical  Center 


9:45am  to  10:15am 


10:15am  to  10:45am 


Steve  Ado(pft 
C70,  Emrprist 


10:45am  to  11:15am 


Customer  Challei^es  and  Solutions: 
Real-Life  Scenarios  Conrrecting  Data 
Centers  Over  Distance 

Steve  Adolph,  CTO,  Enterprise  Sdutions  Group,  CIENA 

F^el:  Overcoming  Management  Barriers  — 
M^Udng  the  Case  for  Consolidation 

Panel  Moderator  Maryfran  Johnson,  Editor  m  Chief 
Computerworfd 

Panehsts  Joe  Puglisi,  CIO.  EMCOR.  Stephen  Morrn.  CIO, 
TAC  VWDfldwide:  Rank  Enfanto,  Vice  Resident,  (^Derations 
Delivery  &  Information  Secunty.  Blue  Cross  Blue  Shield  of 
Massachusetts;  Alejandro  Lopez.  System  Architect 
University  of  California  Davs  Medical  Center 

Program  Concludes 


11.15am  to  noon 


Apply  for  registration  today 

For  more  information  or  to  apply,  visit 
www.itexecut ivesummit.com/nc 


This  program  will  also  take  place  In:  Chicago  •  August  25.  2004 

Dallas  •  September  22,  2004 

For  more  information  on  these  focations,  call  888-299-0155 


Capgemini  Targets 
Eneiw  Sector 

Cipomni  Enenor  LP.  a  coNabo- 
rath«  vanturv  of  CapgamM 
Ainvica  Inc.  afid  TXU  Carp,  and 
Its  subsidiaries,  began  oparatiofs 
in  Dales  as  pm  of  a  lO-Wv  deal 
to  provide  rr.  cai  canter  and 
buainaas  servicas  WIMy  to  TXU 
and.  iaiar.  to  otfMr  energy  com¬ 
panies.  Bob  Pryor,  etbo  previously 
served  for  tour  years  as  North 
American  prasl^  of  outsourc¬ 
ing  sarvtoas  at  Capgendni.  aril 
servo  as  CEO.  Biabath  Uwaley. 
wtio  most  rocandy  Hrvad  as 
Daias  baaed  TX^sasnior  vice 
praaidantaffT.wffointholnilt- 
ed  partnership  as  chief  operating 


CSC,  Cinergy  Sign 
IT  Services  Deal 

CompulerScienoeeCorp.an- 
nouneedlhatilhesei^allvo- 
year,  S7I  m«on  rr  ^piealton 
servieae  agroamaat  edib  Qnargy 
Servicas  inc„  the  admintotradve 
arm  of  Ctomgy  Corp..  a  Ctoeto- 
mdHiaaod  power  providar.  G 
Sagundo.  CalL-baaad  CSC  wl 
provide  appictolan  dovetopmant 
andsupporttornoncorofunc- 
tiona.Gnorgy«slrolainapfilica- 
iow  woffc  rei^  to  mjaeton  cfAl- 
cai  company  programs.  CSC  has 
cendudad  praiact  tsarb  hr  Ciner¬ 
gy  tor  15  years  in  areas  wch  as 
applcattondsvatopmant  syetsms 
Magndioe  and  supply  chain 


CIO.CTDQiiitCitrix 

Fort  Laadmdato.  Fto.-banad  Obis 


Jeanne  M.  Meranp.  aanier  vtee 
praaidant  of  corporale  aervicos 
and  CIO.  and  Bob  Knigar,  senior 
idea  presidant  of  product  develop 
manl  and  ehiof  tochnotogy  ofRcar. 
Iwra  daeidad  to  toava  the  compa¬ 
ny.  CNrii  alao  annoimGod  that  it 
sdiraorgania  the  corporate  aar- 
ideaa  urdl.  inchidng  rr,  fadMes. 


Many  companies  feel  that  their  IT  or¬ 
ganizations  are  “broken”  or  irrepara¬ 
bly  damaged,  and  indeed,  some  are. 
The  symptoms  of  a  damaged  IT  orga¬ 
nization  are  all  too  familiar:  failed 
projects,  big  write-offs,  high  CIO  turnover,  an  outdated 
technology  base  and  uninvolved  executives  telling  the 
latest  CIO,  “Call  me  when  the  problems  are  fixed.” 
These  companies  are  often  tempted  to  succumb  to  the 
siren  song  of  the  outsourcers  who  offer  to  take  over  all 
of  IT  and  promise  to  fix  it. 


Tht  unll  «■  bo  Mogratod  into 


orgsntailion  imdw  GMif  Rnan- 


However.  companies  that 
expect  to  leverage  an  out¬ 
sourcer’s  expertise  in  this 
manner  usually  find  that 
their  costs  increase  dra¬ 
matically.  In  addition,  the 
outsourcer  often  requires 
numerous  changes  to  cor¬ 
porate  business  processes, 
some  of  which  may  be  un¬ 
acceptable. 

When  an  IT  organization 
is  badly  damaged,  out¬ 
sourcing  the  whole  thing  is 
truly  tempting,  but  such  a 
desire  often  means  “Let's 
abdicate  all  responsibility 
for  IT.”  Such  endeavors  can 
be  classified  as  “despera¬ 
tion  outsourcing”  and 
rarely  succeed.  Outsourcing  IT  can  be 
successfuL  but  not  when  the  organiza¬ 
tion  is  damaged.  Fix  the  problems 
first,  then  revisit  outsourcing  options. 

Like  the  damaged  arm  of  a  starfish, 
the  failed  IT  organization  needs  to  be 
regenerated,  not  amputated.  Success¬ 
ful  regeneration  eflbrts  require  a 
strong  CIO  who  will  say  “no"  loudly 
and  clearly  when  needed,  even  if  it 
makes  powerful  executives  unhappy. 

Regeneration  efforts  aren’t  a  popu¬ 
larity  contest  The  leadership  role  is 
generally  best  performed  by  an  OOTA 
(out  of  town  agitator),  a  specialist 
from  outside  the  corporation.  11)6 
OOTA  is  hired  as  CIO  to  focus  solely 


on  successful  regeneration, 
which  usually  takes  two  to 
three  years.  When  the  re¬ 
generation  is  complete.  IT 
j  will  be  turned  over  to  a  new 
CIO  whose  skills  are  better 
suited  to  running  a  stable 
organization.  Make  sure  to 
wait  until  completion  to 
make  this  turnover;  the  two 
CIOs  aren’t  interchange¬ 
able,  since  they  have  widely 
different  skill  sets.  Switch¬ 
ing  too  soon  can  undo 
everything  that’s  been  ac¬ 
complished  to  date  without 
reaping  the  full  benefits  of 
the  regeneration  effort. 

Yes,  the  right  OOTA  can 
be  expensive,  but  not  as  ex¬ 
pensive  as  outsourcing  your  whole  IT 
oiganization.  and  certainly  not  as  ex¬ 
pensive  as  outsourcing  IT.  failing  and 
then  having  to  bring  it  back  in-house.  ' 
A  Hrm  foundation  for  successful  re¬ 
generation  also  includes  the  following 
requirements: 

■  EzMulm  buy-in.  IT  isn’t  a  spectator 
sport.  The  other  CxOs  need  to  actively 
support  the  regeneration  effort.  Most 
new  IT  systems  require  changes  to  the 
underlying  business  processes,  partic¬ 
ularly  when  replacing  outdated  sys¬ 
tems.  Midlevel  managers  who  prefer 
the  status  quo  must  not  be  allowed  to 
withhold  their  cooperation  or  ignore 
or  undermine  the  efforts  of  the  re¬ 


generation  team. 

■  Sufficient  time.  Problems  that  took 
many  years  to  develop  require  sub¬ 
stantial  time  to  correct  —  usually  mea 
sured  in  years,  not  months.  Unfortu¬ 
nately,  there  are  no  silver  bullets. 

■  The  right  team.  Regeneration  isn’t 
sexy,  but  don’t  be  tempted  to  put  a  sec 
ond-level  team  on  it.  Regeneration  re¬ 
quires  a  talented,  focused  and  dedicat¬ 
ed  team,  and  prior  regeneration  expe¬ 
rience  is  invaluable.  While  the  team 
may  find  it  helpful  to  supplement  ex¬ 
isting  staff  with  experienced  consul¬ 
tants.  the  internal  members  must  be 
held  responsible  for  the  final  results. 

■  StabNKy.  Make  any  needed  staffing 
changes  at  the  start.  Changing  leader¬ 
ship  or  key  employees  midstream  will 
almost  certainly  derail  the  effort. 

■  Focus  and  szscutton.  Start  regenera¬ 
tion  with  a  clear,  well-thought-out 
plan.  Then  focus  ruthlessly  on  deliver¬ 
ing  against  that  plan.  When  an  IT  or¬ 
ganization  hasn’t  delivered  for  several 
years,  there  is  inevitably  pent-up  de¬ 
mand  for  IT  services.  When  the  rest  of 
the  corporation  realizes  that  the  IT  or¬ 
ganization  may  be  productive  again, 
demand  will  be  enormous.  But  the 
CIO  must  delay  most  new  projects  un¬ 
til  regeneration  nears  completion.  Un¬ 
dertaking  unanticipated  projects  can 
severely  hamper  regeneration  success. 

Although  it’s  tempting  to  believe 
that  outsourcing  a  broken  IT  organiza¬ 
tion  will  magically  fix  it,  this  "out  of 
sight,  out  of  mind”  approach  usually 
spells  disaster.  When  your  IT  organi¬ 
zation  is  damaged,  don’t  succumb  to 
desperation  outsourcing.  Instead,  take 
your  cue  from  the  starfish  at  the  bot¬ 
tom  of  the  ocean  to  make  sure  your  IT 
organization  doesn’t  er>d  up  at  the  bot¬ 
tom  of  the  Dumpster.  O  47773 
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IT  Careers:  Leaders  of  Top  Education  Programs  Look  to  Future 

he  leaden  of  the  nation's  top  computer  sciencelsoftware  enairwnnrvi  .  . 


The  leaders  of  the  nation's  top  computer  sciencelsoftware  engineering 
I  degree  programs  agree  on  two  things  about  preparing  the  IT  workforce 
of  the  future,  first,  they  need  to  attract  more  people  to  the  technical 
professions.  Second,  the  breadth  and  dexterity  of  what  is  covered  in 


lifekKig  learning  continues  to  grow, 

U.S  News  i  World  Report  rated  Roserttultman  Institute  of  Technology.  Cah 
Pofy  (San  Luis  Obispo)  and  The  Cooper  Union  as  the  top  three  institijtions 
for  undergraduate  computer  engineering. 


Dr.  George  Campbell,  president  of  The  Cooper  Union  for  Advancement  of 
Science  and  Art  in  New  York  Cdy.  looks  at  the  issue  of  technofogy 
education  from  two  peispectives  -  in  his  currem  rote  as  an  academic 
leadec  and  his  previous  role  as  CEO  of  NACME.  a  noniirofit  devoted  to 
science  and  technology  education  and  policy.  ‘The  most  significant 
deficiency  we  have  been  unable  to  overcome  Is  under  representation  of 
women  and  minorities-  in  technical  studies.  Campbell  says,  -ki  the  past  we  have  filled  the 
wotkiotce  needs  by  bringing  technology  workets  into  this  countiy.  This  is  no  longei 
working.  Other  countries  ate  invcsbng  a  greater  proportion  of  their  gross  nabonai  produa 
mtheeducationoltheir  own  technical  workforce. ' 


technology  wdl  be  driven  by  breakthroughs  and  greater  understanding  of 
processes  in  life  sciences— sell  replicalion.  OKA  and  the  like.  I  believe  all 
•ngineermg  majors  should  have  a  course  in  molecular  ^1  btofogy^  just  as 
physics  and  chemistry  are  required  ttday.* 


In  addition  to  major  shtfts  in  curriculwn  to  include  We  sdences,  Catr^MI 
says  educational  programs  have  to  avoid  the  trap  of  relying  on 
simulations  alone  to  help  teach  ‘You  really  need  to  understand  the  ideas 
to  comprehend  the  techriotogy  that  is  behind  rt,*  he  says. 


Cooper  Union's  situation  is  highly  unique;  the  institution  has  1,000  stodenis,  100%  of 
whom  am  on  full  tuition  scholarships.  Approximately  32%  of  the  students  are  female.  The 
number  is  higher  than  the  nationwide  average  of  women  in  technology  (23%).  However 
the  number  of  African-Americans^  latinos  and  Americart  Indians  enrolled  in  technology 
courses  nationwide  remains  In  low  double-digit  figures,  Campbell  believes  change  will 
occur  only  through  intervention  at  eariier  ages  to  attract  children  from  inner  city  schools. 


Dr.  Cary  Laxer,  head  of  the  software  engineering/computer  science 
program  at  Rose-Huhman  Institute  of  Technology,  says  the  breadth  of 
capabilities  required  also  must  be  addressed  Rose-Holtman  already  has 
added  courses  in  critical  areas  -  networking,  computer  security  and 
—  cryptography,  'We've  added  a  required  course  in  technical 
communications^  laxer  adds,  "to  make  sure  our  graduates  can 
communicate  with  a  variety  of  constituencies.*  laxer  and  his  peers  at  other  US.  unwersities 
ci^nue  to  assess  the  longer  term  future  of  technology  and  adjust  cumcuU  accordinoly. 
Adding  courses  is  just  one  aspect  of  that  change  -  professional  development  for  faculty 
and  equipment  for  students  also  has  to  be  included 


VWiile  demographics  and  numbers  are  critical,  given  that  the  vast  majority  of  higher  paying 
jobs  IS  in  the  technology  areas,  so  loo  is  the  breadth  of  studies  undertaken.  According  to 
Campbell,  'Most  of  the  technology  advances  that  took  place  in  the  20th 
century  resulted  from  major  breakthroughs  in  physical  sciences  -  quantum  mechanics,  solid 
state  physics,  chemistry  and  so  on,'  Campbell  explains.  “In  the  future,  more  advances  in 


Ihe  third  critical  aspect  of  IT  education  is  lifelong  learning,  say  Can^l  and  Luer  'This 
isn  t  just  a  technical  issue*  stresses  Campbell.  “There  needs  to  be  a  balance  between 
liberal  arts  and  techrwlogy  learning  throughout  life  This  is  so  kivortant  in  understanding 
the  context  in  which  we  do  science  and  entpneering  -  the  ethics,  societal  impBcaborts  and 
«onomic  effects.  These  are  the  things  that  separate  prafessionals  and  visionafy  leaders* 
from  others.  Campbell  adds. 
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Conrinued  from  page  / 

Privacy  Law 

emmeni,  said  the  county  be¬ 
came  aware  of  the  problem 
only  after  being  notified  by 
Con^uterworid.  A  prelimi¬ 
nary  investigation  revealed 
that  the  problem,  which  has 
since  been  fixed,  was  the  re¬ 
sult  of  some  county  employ¬ 
ees  using  erroneous  e-mail 
address  books  and  was  not 
caused  by  a  virus  or  worm  in¬ 
fection,  he  said. 

Recording  to  Whittington, 
the  glitch  stemmed  from  the 
county's  Internet  naming 
structure,  which  includes  "ac" 
for  Che  auditor  controller's  of¬ 
fice.  "Now  we  need  to  re¬ 
search  who  has  the  bad  ad¬ 
dress  book  that  has  this  ad¬ 
dress,"  he  said. 

Whittington  said  his  office 
was  never  directly  informed 
about  the  problem  by  Car- 
lesten  and  noted  that  any 
county  employees  who  may 
have  recent  e-mail  responses 
from  Carlesten  never  brou^i 
the  matter  to  bis  attentioa 

lagaiApplicatiiltty 

Joanne  McNabb.  chief  of  Cali¬ 
fornia's  Office  of  Privacy  Pro¬ 
tection.  said  an  initial  review 
of  the  language  contained  in 
California's  Senate  BUI  1386 
concluded  that  the  privacy  law 
doesn't  apply  to  local  govern¬ 
ments  in  the  state.  The  law 
stipulates  that  individuals 
must  be  informed  if  their  per¬ 
sona]  information  has  been 
compromised. 

According  to  McNabb,  SB 
1386.  which  went  into  effect  on 
July  1  last  year,  applies  to  "per¬ 
sons  or  entities"  doing  busi¬ 
ness  in  the  state.  Likewise,  the 
Information  Practices  Aa. 
which  is  the  California  equiva¬ 
lent  of  the  Federal  Privacy  Act, 
applies  only  to  state  agencies 
and  not  to  local  government 
agencies,  she  said. 

However,  "our  recommen¬ 
dation  beyond  minimum  com¬ 
pliance  with  the  law  b  to  let 
people  know"  that  their  per¬ 


sonal  information  has  been 
compromised,  said  McNabb. 

Whittington  said  the  extent 
of  the  compromise  b  still  un¬ 
der  investigation  and  that  no 
deebion  has  been  made  re¬ 
garding  notifying  affeaed 
employees. 

However,  some  legal  ana¬ 
lysts  said  the  law  does  indeed 
apply  to  the  county.  If  it  does, 
the  Contra  Costa  County  case 
would  be  the  first  major  test  of 
the  new  legbladon. 

Harold  J.  Krent,  dean  of  the 
Chicago-Kent  CoU^  of  Law. 
said  it's  unclear  whether  local 
government  ^tencics,  even  if 
exempt  from  the  statute,  fall 
within  the  definition  of  the 
term  person  as  contained  in  a 
companion  provbion  of  the 
bill.  If  so.  th^  would  be  re¬ 
quired  to  notify  individuab  of 
any  breach,  be  said. 

"In  similar  statutoiy  con¬ 
texts.  'person*  has  generally 
been  construed  broadly  to  cov- 
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ERP  Delays 

ucts  such  as  pipelines  and 
copper  tubing  and  seUs 
plumbing  and  electrical  sup¬ 
plies.  The  company  b  in¬ 
stalling  an  ERP  system  based 
on  PeopleSoft  EoterprbeOne. 
a  line  of  midmarkei-oriented 
applications  that  were  devel¬ 
op^  by  J.D.  Edwards  &  Co. 
prior  to  Its  buyout  by  People- 
Soft  last  year. 

Peopl^fr  declined  to  db- 
cuss  the  software  roUoui  at 
Crane  except  to  say  that  it’s 
largely  complete  and  that  the 
two  companies  are  cooperat¬ 
ing  with  each  other.  "Wc  con¬ 
tinue  to  have  a  close  working 
relationship  with  Crane  in  the 
ongoing  roUout  of  their  IT 
system."  said  PeopleSoft 
spokesman  Steve  Swasey. 

Greg  Sedgwick.  Crane's 
general  manager,  said  two 
weeks  ago  during  a  webcast 
for  investors  that  all  42  of  the 
company’s  manufocturing  and 
warehouse  sites  are  live  with 


failure  to  notify  said 
Kreni.  “Only  'cus¬ 
tomers'  can  sue  to  re¬ 
cover  damages  due  to  a 
failure  to  notify,"  be 
said.  This  suggests 
that  county  residents 
whose  information  is 
maintained  because 
they  consume  water  or 
waste  removal  services 
could  sue.”  But  resi¬ 
dents  wouldn’t  be  able 
to  sue  simply  by  virtue 


winuuu  I  oe aoil 

/  to  sue  simply  by  viitu 

itiri’rrjEss.'.rrscr"/  of^sBtm»taxp,y 

_  ^  '  erK  there  has  to  be  a  cus- 
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Contra  Coata  County  MniiioyMa 

er  municipal  corporations," 
said  Krent. 

Moreover,  even  if  the  county 
b  defined  as  a  person  within 
the  meaning  of  the  law.  it's  un¬ 
clear  if  there  b  a  remedy  for  a 


PeopleSoft  EnlerpriseOne. 
along  with  207  ofHs  230  trade 
outlets.  The  rest  of  the  stores 
are  due  to  begin  using  the 
software  thb  month,  he  added. 

The  ERP  system  has  more 
than  2J00  attive  users  per  day 
and  supports  functions  such 
as  planning,  forecasting,  pro¬ 
curement  and  manufocruring. 
according  to  Sedgwick.  He 
.said  Crane  hopes  to  use  the 
system  to  modernize  its  busi¬ 
ness  processes  and  to  add  ca¬ 
pabilities  such  as  support  for 
electronic  data  interchange 
and  collaborative  forecasting 
with  customers  and  suppliers. 

Cause  and  EHM 

Crane  has  made  changes  in  its 
IT  unit  and  at  some  business 
'  operations  as  a  result  of  the 
roUout  problems.  TTie  compa¬ 
ny  said  it  named  a  new  corpo¬ 
rate  CIO  who  has  had  exten¬ 
sive  experience  on  ERP  proj¬ 
ects.  consolidating  a  previous 
IT  management  structure  in 
wdiicb  its  four  divisions  had 
their  own  CIOs.  Crane  also 
plans  to  downsize  its  IT  de- 


'  ers;  there  has  to  be  a  cus- 
I  tomer/servicc  provider  rela¬ 
tionship  in  place.  Krent  noted. 

Professor  Jeff  Maisuura  of 
the  University  of  Dayton 
School  of  Law  said  the  e-malb 
appear  to  contain  personally 
identifiable  information  that  b 
covered  by  SB  1386.  “It  seems 
to  me  that  such  an  incident 
would  gut  the  sutute  if  thb 
kind  of  disclosure  did  not  fall 
I  wiiMn  h.- he  said  O  48086 


partiDCDt  by  30  people  after 
the  ERP  roUout  b  finished. 

From  a  business  standpoint, 
the  company  plans  to  firp  a 
$21  miUion  write-dowm  to  cov¬ 
er  the  cost  overruns  and  pro¬ 
ductivity  losses.  Sedgwick 
said  the  ERP  delays  have  also 
exacerbated  financial  prob¬ 
lems  foced  by  the  company's 
TradeUnk  plumbing  supplies 
unit,  which  plans  to  close  13 
of  its  stores  and  lay  off  200 
workers.  O  40068 


Crane's  Response 


Groove  Aims 
To  Boost 
Ease  of  Use 

Bv  ToooB.weisa 

Groove  Networks  he.  today  plare  to 
release  an  upgrade  of  Its  end-user 
elaboration  software  that  it  sad  of¬ 
fers  vnproved  security  and  scaUMkry 
capabdilies  as  well  as  better  perfor¬ 
mance  and  eese  of  use. 

Beverty.  Mass  -besed  Groove, 
wfveit  is  headed  by  lotus  Notes  cre¬ 
ator  Ray  Ozzie.  be^  beta-testing 
the  Groove  Virtuai  OfftcelOup- 
grade  n  Mach.  The  new  release 
launches  and  transfers  data  more 
QueUy  and  lets  end  isers  open  mul- 
tfoteproiedBwksoaceswilhouisuf- 
fenno  noticsabte  porformance  hits, 
sad  Andrew  Mahon.  Groove's  direc¬ 
tor  of  strategic  marketing 
The  upgrade  also  noUfos  «i 
on-screen  launch  bar  for  managing 
workspaces  and  contacts  with  other 
Groove  users,  as  weft  as  Whdows 
foMar  synchronization  capabddes 
that  let  users  share  any  Mee  stored 
on  thee  PCs.  On  the  server  sde. 
Groove  sad  rfs  adding  support  for 
thnHtarty  pufabc-fey  nfiaslrudu^ 
user  aulhenbcation  tools. 

Ethan  Schoonover,  e- business 
deeefor  at  London-based  ad  agency 
Lowe  &  Fteners  Mtridwde.  sad 
about  300  of  the  company's  workers 
use  the  exetmg  Groove  Workspace 
2.5  to  prepare  ad  pilches,  manage 
accounts  and  do  strategK;  reseach 
Marry  (ri  the  new  iealures  m  Vktuaf 
Office  3.0  are  ‘a  great  example  of  a 
company  reefy  leienmo  to  user 
feedback.'  sad  Schoonover,  who 
works  «  Hong  Kong 
The  vnproved  launch  speed ‘ad¬ 
dresses  a  key  issue  wdh  25  *  that 
it  was  sometimes  sluggish  ‘  sad 
Schoonover  "Even oertedmophobe 
uses  coud  get  he  hang  of  1’ 

Oavd  Marshak,  an  analyst  at 
The  f^trioa  SeyboU  Group  Inc  ft 
Boston,  sad  Groove's  ley  strength  s 
Ihatacombnesieaf-tmeonfmecd- 
laboration  with  the  atxhiy  to  do  work 
off-lme  ard  then  synchronize  data 
wdh  other  employees  Groove'sinte- 
93hon  of  those  fotures  *is  much 
better  than  anyone  else  has  even 
attempted.' he  sad  €1 48007 
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Mail  Mishap 

YOU'VE  GOT  TO  FEEL  EOR  TOM  WHITTINGTON. 

The  CIO  of  California’s  Contra  Costa  County,  across 
the  bay  from  San  Francisco,  just  found  out  that  copies 
of  hundreds  of  internal  e-mail  messages  containing 
financial  data  and  private  employee  information  have 
been  inadvertently  sent  to  a  Swedish  company  over  the  past  two 
years  (see  story,  page  1). 

It’s  not  as  if  Whittington  sat  on  his  hands,  ignoring  the  problem. 
He  didn’t  know  about  the  address  book  glitch  that  caused  it.  There 
was  no  indication  of  anything  being  wrong.  He  was  blindsided. 

Was  there  anything  he  could  have  done? 

Install  outgoing-mail  whitelists  (which  specify 
legal  destination  addresses)  or  blacklists  (which 
list  addresses  that  mail  won't  be  delivered  to)? 
Thai’s  impraaical  —  whitelists  are  too  restric¬ 
tive.  and  blacklists  can  never  be  comprehensive. 

Eliminate  address  books  from  county  users’ 
machines  so  they  have  to  type  addresses  manu¬ 
ally?  That  would  have  avoided  the  glitch  that 
caused  the  misdirected  e-mails:  a  ^rbled  ad¬ 
dress  in  one  user’s  address  book.  But  it  would 
generate  many  more  mistyped  addresses. 

Set  IT  staffers  to  work  poring  over  outgoing 
e-mail  logs,  looking  for  potentially  inappropriate 
destination  addresses?  That  would  be  spectacu¬ 
larly  labor-intensive  and  would  generate  huge 
numbers  of  false  positives  to  investigate  And 
how  would  they  know  what  to  look  for.  anyway? 

The  perfect  solution  might  be  to  somehow 
tag  sensitive  data  so  it  could  be  automatically 
blocked  at  the  Hrewall.  That  would  only  require 
rebuilding  all  the  county's  systems  from  the 
ground  up.  embedding  tags  in  all  the  dau  and 
then  customizing  the  e-mail  system  to  make 
sure  the  tags  don't  get  removed.  Good  hick  get¬ 
ting  the  budget  for  that  past  the  county  board. 

Whittington’s  team  is  still  inves¬ 
tigating  what  happened  and  what 
to  do  next.  Whittington  himself 
hopes  better  training  for  users  and 
clearer  policies  about  attaching 
data  to  e-mails  will  help. 

Think  there’s  a  better  way?  Whit¬ 
tington  would  like  to  hear  it.  So 
would  the  rest  of  us. 

Because  what  happened  to  Tom 
Whittington  and  Contra  Costa 
County  is  just  waiting  to  happen  to 
every  other  organization.  And  the 
next  one  the  problem  hits  may  not 
be  so  lucky.  O  4B030 
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pening  again?  That’s  what  Whitting¬ 
ton  and  his  staff  are  trying  to  figure 
out  now.  None  of  the  obvious  op¬ 
tions  are  very  good. 

Cut  off  the  e-mail  system  from 
the  rest  of  the  Internet?  That  would 
protect  the  data,  but  then  residents 
couldn't  use  e-mail  to  communicate 
with  their  government. 

Put  in  two  parallel  e-mail  systems 
—  one  for  internal  messages  and  an¬ 
other  for  e-mail  goii^  to  the  outside 
world?  That's  a  huge  kludge  for 
users  to  navigate. 


Not  that  I  can  see.  Or  at  least,  not  without  the 
kind  of  unlimited  budget  that  doesn't  exist  in 
any  real-world  IT  organization,  much  less  in  a 
government  IT  shop  at  the  county  level 
Actually.  Whittington  was  comparatively 
lucky.  The  e-mails,  many  of  which  were  stuffed 
with  financial  and  personal  data,  were  intended 
for  someone  in  the  county  auditor’s  office.  In¬ 
stead.  they  ended  up  at  Ord&Bild.  a  Swedish  In¬ 
ternet  company.  And  after  they  started  arriving 
there.  Ord&Bild  repeatedly  sent  messages  to 
tell  senders  of  the  wayward  e-mails  about  the 
problem,  according  to  Ord&Bild  managing  di¬ 
rector  Robert  Carlesten. 

But  those  messages  got  no  response.  And  no¬ 
body  told  Whittington  about  the  messages.  He 
didn’t  learn  about  the  problem  until  Carlesten 
contacted  Computerworld  reporter  Dan  Verton, 
who  called  Whittington 
Whittington  was  lucky  that  the  data  was  kept 
confidential  and  not  put  to  some  malicious 
use.  But  he  would  have  been  a  lot  luckier  if 
there  hadn’t  been  any  wayward  e-mails  in  the 
first  place. 

But  what  could  he  have  done  to  prevent  it? 
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Time  Is 
Running  Out! 


COM^RWMLD  Nominate  an 

outstanding  IT  ieader 
for  Cmputerworld’s 
Premier  100  IT  Leaders 
IT  LEADERS 2005  2005 Awards  program 


^  PREMIER  i 


EACH  YEAR.  Computerworld  editors  conduct  a  nationwide  search  for 
IT  managers  and  executives  who  show  technology  leadership  in  their 
organizations.  This  prestigious  awards  program  recognizes  and  honors 
IT  professionals  from  a  wide  range  of  industries,  drawing  attention  to  the 

innovative,  business-critical 
work  they  do. 
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EUGIBLE  NOMINEES  include 
CIOs,  CTOs,  vice  presidents, 
IT  directors  and  managers 
from  user  companies,  nonprof¬ 
its,  the  computer  industry  and 
the  private  sector. 

HONOfSES  will  be  announced 
in  Con9)ufcrworld’s  Jan,  3, 
2005.  issue  and  will  be  our 
guests  at  the  6th  Annual 
Premier  100  IT  Leaders 
Conference,  March  6-8, 

2005,  in  Scottsdale,  Ariz. 


Deadline  has  been  extended  to  July  30! 

Go  onfcetotKmiinateanff  leader  at  conxiiihmoitdxoin^ilOOiinii*irfaii!inrO(>^ 
(kiesix)ns?CoiitadiBbye-inalatpieinier100en)nxwt^^ 


HP  Blades,  now  in  a  bundle,  which  is  exactly  what  you'll  save. 


Save  over  30%  with  our  blade  bundle  featuring  two  HP  ProLiant  BL20p  Blade  Servers,  powered  by  Intel*  Xeon'"  processors,  and  gel  the 
power  to  make  network  management  simple  and  olfordable.  You'll  save  on  deployment  lime  loo.  thanks  to  this  ready-togo  packoge. 
Sure,  modular  design  leaves  room  to  expand  later,  but  HP  Blade  Servers  con  also  make  a  big  impoci  on  your  total  cost  of  ownership  in  the 
meantime  Our  management  software  boosts  productivity  and  cuts  reconfiguration  efforts  from  days  to  minutes.  And  because  your  time 
is  money,  the  Bt20p  features  fully  redundant  technologies  to  reduce  costly  downtime.  While  our  #1  ranking  in  Intel  -based,  server-customer 
solisfoction  is  one  reoson  we  recently  became  the  first  to  sell  over  1 00,000  blade  servers,  there's  more  than  one  reason.  You  also  get  the 
advice  ond  support  of  HP  and  our  local  partners-well  before  and  long  ofter  you  buy.  Even  when  you  buy  at  more  than  30%  off. 

'  HP  ProLiant  BL20p  BLADE 
SERVER  BUNDLE 

CPOOO 

j  ’  (2)  Bl20p  ftloda  Serven 
Eod>  Blade  Server  includes; 

I  (2)  Intel*  Xeon'“  processors  3.06GHz-512l( 

-  (3)  10/100/1000  NICs  +  0)  10/100  ilO  NIC 
1GB  DOR  memory' 

*  p-Closs  blade  erKlosure 

*  p-Ooss  single  phase  power  enclosure 
with  2  power  supplies 

*  Mini  bus  bar  kit 

*  (8)  Rapid  Deployment  Pock  licertses 
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Download  informoNon  about  HP  Blode  servers. 

Reod  o  white  paper  highlighting  total  cost  of  ownership  ond  the  Focfivo  and 
iSource  cose  studies  demonstroting  ROI. 


CALL 

CLICK 

VISIT 


1-877-726-8116 


hp.cem/go/biacics4 


your  local  HP  reseller 
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NEWSPAPER 


The  10-year  federal  IT  spending  spree  is  over,  a  new  study  shows. 

A  slart-up  formed  by  former  Red  Hatters  readies  a  new  version  of  Linux. 
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Nothing  affects  the  workplace  like  a  change  in 
e-mail  systems  or  collaboration  tools.  This  special 
report  covers  the  choices  IT  managers  face  regard¬ 
ing  suites  and  upgrades.  Stories  be^  on  page  35. 


Evet  misfired  a  sensittve  e-mail"?  Readers  reveal  their  worst  e-mail  nightmares. 


Microsoft  Delays  Ship  Date  of 
Windows  Update  Services 


\fendor  must  finish 
XP  Service  Rack  2  first 


Users  will  have  to  wait  even 
longer  for  already-delayed 
updates  of  security-focused 


products  and  services  that  Mi¬ 
crosoft  Corp.  pledged  would 
be  ready  by  now. 

At  hs  Woridwide  Partner 
Conference  here,  Microsoft 
ofiTicials  disclosed  that  Win¬ 
dows  Update  Services  won’t 
ship  until  the  first  half  of  next 


aMCTTWWttinittWyR-RT  LQTtte-053 
»82349452CB/7t  0(208438  802  5894 

U  «  I 

PERIOOIChLS 

PO  BOX  1346  27-5 

fWI  ftRBOR  MI  48186-1346 


year  WUS,  which  was  former¬ 
ly  known  as  Software  Update 
Services,  can  be  used  to  auto¬ 
mate  patch  distribution  to  em¬ 
ployees  on  a  scheduled  basis. 

At  last  October's  Microsoft 
Worldwide  Partner  Confer¬ 
ence.  CEO  Steve  Ballmer  said 
the  fiee  patch  management 
service  would  be  ready  in 
the  first  half  of  this  year.  In 
March,  Microsoft  revised  the 
release  date  to  the  second  half 
of  this  year,  and  last  week,  the 
vendor  pushed  it  back  ag?>in 

Mike  Nash,  vice  president 
of  Microsoft’s  security  busi- 

Microsofi,  page  16 
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Users  Freeze 
TT  Systems  as 
Sarb-Ox  Looms 

Software  mstallations.  upgraties  put  off  untU 
2005 to  avoid  last-minute  complianee  glitches 


BV  THOMASHOFFMAM 

Many  conmanies  plan  to  lock 
down  theirfinandal  systems 
and  other  applications  in  or¬ 
der  to  help  streamline  efforts 
to  meet  Sarbanes-Oxley  com¬ 
pliance  deadlines  that  start 
takir^  effect  late  this  year,  ac¬ 
cording  to  a  dozen  IT 
managers  and  consul¬ 
tants  who  were  inter¬ 
viewed  last  week. 

Section  404  of  the 
Sarbanes-Oxley  Act  re¬ 
quires  companies  with 
market  capitalizations  of 
STS  million  or  more  to  attest  to 
the  effectiveness  of  their  IT 
and  financial  controls  when 
they  file  10-K  reports  for  fiscal 
years  that  end  after  Nov.  IS.  To 
help  maintain  controls  that 
have  been  fully  audited  and 
tested.  IT  executives  such  as 


Marie  Thompson  have  decided 
to  postpone  until  early  2005 
systems  rollouts  and  upgrades 
that  otherwise  would  have 
taken  place  during  the  fourth 
quarter  —  or  even  earlier. 

"We  went  through  a  whole 
reprioritization  of  IT  pn^ects 
BIPB  for  W.- said  Thorap. 
■jhlllilS  son.  senior  vice  presi¬ 
dent  of  finance  and  IT 
at  Crown  Media  Hold¬ 
ings  Inc.,  a  Greenwood 
Village,  Colo.-b3sed  ca¬ 
ble  TV  company  that 
distributes  ^e  Hall¬ 
mark  Channel  and  other  pro¬ 
gramming  in  120  countries. 

For  instance.  Crown  Media 
postponed  a  planned  replace¬ 
ment  of  accounting  applica¬ 
tions  from  The  Group 
PLC  with  Microsoft  Corp.’s 

Sarb-Ox.  page  S3 


Boeing  Bets  Big  on  Cisco  With 
VblP  System  fw  1^,000 


Deployment  called 
laigest  for  one  vendor 


ST  MATT  HAMB4.EK 

Hie  Boeing  Ca  last  week  said 
it  will  install  up  to  150,000 
voice-over-IP  phones  and  oth¬ 
er  networking  equipmem 
from  Cisco  Systems  Inc.  over 
the  next  five  to  seven  years  — 
a  protect  that  analysts  called 
the  largest  VoIP  d^loyment 
thus  far  involving  one  vendor. 


Boeing  expects  to  buy 
130.000  to  ISOXKK)  of  Cisco’s 
VoIP  phones  as  part  of  the 
planned  rollout,  said  MOcc 
Terrill,  program  manager  for 
networic  convergence  at  the 
Chicago-based  aircraft  manu¬ 
facturer.  It  will  also  replace 
about  125  circuit'based  tele¬ 
phone  switches  with  an  undis¬ 
closed  number  of  Cisco-made 
IP  switches,  he  said.  In  addi- 
Boemg.pageS3 


*.4tsr 

•'•?^  ■"'■  f-  S  '^-■' 

m- 

'■<?*  V,’  I'-pP.,- 

?■■'  '4 

■:;  :^  :mr^ 


When  IT  systems  oren’t  builr  to  occommodate  Ihe  highs  a 
business  it  con  be  a  drfficolt,  and  sometimes  frightening,  f 
Coolinuity  and  A^bblity  sdutiofts  ensure  your  business 
and  safe  from  cotastrophic  toss  as  chonges  o<xur:  Wcxiin 
ond  IT  management,  W  consohcmts  deveiop  strotegies  th 
certain  technology  investments  complement  business  ioitK 
change  So  your  business  is  alwoys  ready  for  whotever's  i 


adaptive  enterprise. 


Put  your  trust  in  the  full  line  of  1/2"  data  storage  tape  that 
comes  with  Fiflifilm's  proven  technology  and  superior  quality. 

For  neaily  40  years,  Fujifilm  has  established  itself  a  leading  manufacturer  of  reliable,  high  quality  data 
storage  media.  After  a|  our  technological  advances  in  magnetic  coating  are  the  crux  of  partnerships  wiih 
world-leading  hanAvare  manufacturers  instrumental  in  the  development  of  LTO  Ultrium  1,  LTO  l^um  2, 
Super  [XTtepe~  and  IXllape'^  When  1C*  tape  is  what  you  reed,  tern  to  your  rnostreSable  source:  Fi^ifilm 

To  find  out  more  about  our  complete  line  of  data  storage  media,  visit  us  at;  www.fujifilm.com 
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Raytheon  Gets  Tracking 

In  tho  Tdchnology  section:  An  enterprise  supply  chain 
application  called  MTrak  that  more  than  20.000 
Raytheon  workers  use  at  13  sites  has  cut  the  defense 
contractor’s  costs  by  more  than  $8  million,  with  an¬ 
other  $17  million  in  savings  on  the  way.  Page  23 
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OPINIONS 


6  Federal  IT  spending  is  ex¬ 
pected  to  drop,  a  study  finds. 

6  The  e*voting  debate  takes  a 

turn  as  the  ITAA  president 
weighs  in  with  claims  of  a 
“religious  war"  between  pro¬ 
ponents  of  open-source  and 
proprietary  software. 

7  IBM  adds  mainframe  parti¬ 
tioning  technology  to  its  Unix 
servers. 

7  Supercomputing  develop¬ 
ment  in  the  U.S.  needs 
stronger  government  support, 
a  Ford  IT  eacec  testifies. 

10  A  customizable  version  of 
Linux  for  corporate  users 
goes  alpha. 

10  IM  interoperability  gets  a 
boost  with  Microsoft’s  an¬ 
nouncement  of  Live  Commu¬ 
nications  Server  2005. 

12  NBC’s  Summer  Olympics 

coverage  hinges  on  networic 
reliability. 

14  Microsoft  releases  seven 
patches,  two  for  critical  holes. 


8  On  the  Mark;  Mark  Hall 

writes  that  using  multiple  out¬ 
sourcers  can  be  complex,  but 
the  cost  savings  and  expertise 
may  be  worth  it. 

20  Maryfran  Johnson  is  begin¬ 
ning  to  suspect  that  the  boun¬ 
ty  of  IT  spending  promised 
for  2004  won't  show  up  next 
year,  either. 

20  Pimm  Fox  doesn’t  want  the 
federal  government  mucking 
up  the  VoIP  market  the  way  it 
has  mucked  up  telecom. 

21  Michael  Gartenberg  believes 
we  need  to  do  a  better  job  of 
explaining  to  users  how  tech¬ 
nology  can  help  them 

26  Curt  A.  Monash  tackles  in¬ 
discriminate  fear  by  taking  a 
realistic  look  at  information 
security  threats. 

32  Barbara  Gomolski  says  the 
real  technology  recovery 
won't  kick  in  until  IT  lexers 
face  reality,  focus  on  value 
and  help  usher  in  the  next  big 
thing. 

54  Frankly  Speaking;  Frank 
Hayes  knows  that  the  num¬ 
bers  might  argue  against  insti¬ 
tuting  a  proper  e-mail  policy, 
but  he  still  thinks  it's  the  ri^t 
thing  to  do. 
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At  Deadline  Briefs . 
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How  to  Contact  CW  . 
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Protecting  the  Data  Jeweb 

In  the  Menagement  section;  A  list  of  your  com¬ 
pany’s  best  customers  is  a  prixed  asset  and  possi¬ 
bly  a  trade  secret.  But  it  could  wind  up  in  the 
hands  of  your  competitors  unless  you  take  several 
legal,  manj^ement  and  technical  steps.  Page  29 
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BigDecisioiis 

Should  you  buy  a  collabora¬ 
tion  suite  or  assemble  the 
best  products  yourself? 
Should  you  upgrade  to  the 
latest  version  of  your  mes¬ 
saging  system  or  stay  on  the 
lagging  edge?  This  special 
IjHJJim  report  will  help 

you  decide,  rwkaoe 

lllilliill  BEOMSONMaEaS 

38  SuHa  Uaflimas.  Like 
Minnesota  Life's  )ean  De¬ 
laney  Nelson  (left),  most  IT 
numagers  choose  messaging 
and  collaboration  suites  be¬ 
cause  of  their  simplicity  and 
ready-nude  imegratioa  But 
they  don't  fit  every  company. 


38  Itoaping  a  Tigfrt 
Grip.  Customers 
hat^t  embraced 
e-mail  outsourc-  | 
ing.  Some  consider  | 
messaging  rimply  I 
too  crucial  to  hand 


Agoldetotfaebeatof 
CempiriNrwarlA  cov¬ 
erage  of  ennail  topics, 
sodi  as  trimies,  ^am 
aodtegutetory 


«as« 

Hi 


over  to  a  third  party.  But 
smaller  companies  wel¬ 
come  the  chuce  to  off¬ 
load  their  complicated, 
management-intensive 
e-mail  systems 

40  You  Bo  First.  How  do 
you  decide  that  it’s  time 
to  upgrade  your  company’s  ^ 
e-m^  system?  Many  CIOs 
like  to  stay  a  version  or  two 
behind  their  vendors'  latest 
offerings,  until  the  ROT  for 
an  upgrade  is  clear. 

41  QuicfcStutfy:  Sharing  files  by 
e-mailing  them  back  and  fonh  as 

/  attachments  is  a  common 
|B  way  of  exchanging  data, 
but  it's  a  long  way  from 
collaboration.  Here’s  a 
primer  on  the  latest  soft- 

I  ware  in  the  coUah- 
oratioQ  tool  kit. 

I  42  Tha  Ahnaiuc. 

I  How  to  take  the 
'  politics  out  of 
e-mail  migrations.  And  how  to 
send  walkie-talkie  vokc  messages 
via  e-mail. 

44  Opinion:  Can't  live  without 
e-mail?  (Columnist  Mark  Hall 
thinksyoucan  —  andwill-^- 
udten  it  soon  becomes  more 
trouble  than  ft’s  worth. 


■WW  CDMPUlEKWOHlD  COM 


TNiRiBMklMMi 

E-aiMl  Mao  inipcirtaut 
tocDOpanleaihatit 
aBMt  be  availaMe  and 
sacmearoaodtke 
clodL  llinpoiBrs  Jeff 
BninaadliMtfae 

nhn^candueat- 

eoe-aaBaeearity. 


Readers  ten  us  about 
the  proWeiBs  tbeyVe 
had  widi  e-mail  in  tiiis 
ooUectioB  of  Shark 
Thnkanecdoaes. 


.54 


COMfvniWDIIlO  July  19. 2004 


WWW  compulerworlo  com 


Best  Buy,  Accenture 
Rnalize  IT  Contract 

Best  Buy  Co.  said  i1  has  finalized 
a  seven*year  (T  outsourcing  and 
consulting  contract  with  Accenture 
Ltd.,  which  will  talie  over  manage- 
ment  of  the  retailer's  ff  infrastruc- 
lure  plus  application  development 
and  maintenance.  About  600  IT 
workers  wtH  shift  from  Richfield. 
Minn.'based  Best  Buy  to  Accen¬ 
ture  as  part  of  the  deal,  which 
look  effect  on  Friday.  The  finan¬ 
cial  terms  weren't  disclosed. 

Sun  May  Open  Up 
Its  Server  ^ftware 

Sun  Microsystems  Ire.  said  it's 
thinking  ol  offering  its  Java  Enter¬ 
prise  System  server  software  un¬ 
der  an  open-source  license.  JES 
includes  products  such  as  Sun's 
application  and  Web  server  soft¬ 
ware.  Sun  last  month  released  the 
source  code  for  a  3-0  user  inter¬ 
face  called  Looking  Glass  and  said 
It  would  make  Solaris  available 
under  an  open-source  model  by 
year's  end  (QuickLink  47345). 

IBM  Tops  Profit 
Plan,  Lags  on  Sales 

IBM  reported  a  higher-than-ex- 
pected  profit  of  S2  billion  lor  the 
secoTMj  quarter,  up  17^  year  over 
year.  Revenue  totaled  S23.2  bil¬ 
lion.  7*^1  above  the  year-earlier 
figure  but  lower  than  Wall  Street 
analysts  had  forecast.  IBM  was 
the  latest  vendor  to  disclose  a 
shortfall  in  software  sales  during 
the  quarter  lOuickLink  48066]. 

CFO  Mark  Lougtindge  sard  some 
expected  software  deals  didn't 
come  through  in  late  June. 

Short  Takes 

OEii 'hi.  raised  the  earnings 
forecast  for  its  second  quarter, 
which  ends  July  30.  But  it  didn't 
change  a  projection  that  revenue 
will  total  S11.7  billion. .  . 

^vSTfMS  today  plans  to 
release  a  “premium  edition'*  of  its 
Weblogic  application  server  soft¬ 
ware  that's  focused  on  service- 
orientod  archrlectures. 


Federal  FT  Spending 
Expeeted  to  Slael 


Ken 


Now  sponclin^  controls,  otlshorinjr  niul 
contnictor  scaiulnis  arc  kc\  factors 


BV  OAN  VERTON 

Ai.h  m,i  ,..v, 

tiroufh  spuri  in  fed¬ 
eral  IT  spendinl^is 
.ibnut  itiemne  to  .in 
.ihnipi  end.  .leeordinp  to  a  re- 
pori  releaNed  Iasi  week. 

The  report  h>  New  ^■o^k- 
Kised  l).itanu>nitor  I’l  C  lore- 
east  a  -1"m  eom- 
jsiHind  annual 
firowth  rate  lor  fed¬ 
eral  n  spendinj; 
during  the  tuxt  Uve 

jears.  In  the  past 

111  years,  spending 
gri  u  at  an  annual 
r.ite  ol  s"  I  It*  III' ><  .ind  has  been 
sieadih  mere.isjng.  .wcorjing 
to  the  report. 

I  he  federal  government's 
llsial  JiMM  IT  budget  stands  at 
billion  Paiamonitor  pre- 
diets  that  federal  spending  on 
M  will  grove  to  only  S5(>..s  bil¬ 
lion  by  2IUW.  Ae'eording  to  the 


AT  SEA 

The  N.)w  Oneer  '  ■••'i 
moc"  I  ^oenoE  ..V'  '<11 

O  QuickUnh  48204 


report,  eustomer  citizen  rela¬ 
tionship  m.in.igemeni.  enler- 
prise  restiure'c  planning  and 
sce-urity  w  ill  be  ihe  driving 
f:ie  ti*rs  behind  the  increase 
1  lovvever.  Pat.inionitor  ana- 
ly  Sts  said  ne-vv  m.inagcfnent 
and  spending  controls,  recent 
ceunraelor  se.indaLs  such  as 
CACI  Internatiimal  Ine.'s  in- 
_  volvemeni  in  Iraqi 
prisoner  abuse 
^  _  IQuie'kl  ink  J721W1. 
,,  -“fTd  fallout  from 

Herinuda-based 
.Veeniure  I  tj.'s 


Slid  loe'clyn  Yi>ung.  the  auth(»r 
*if  the  study  and  Djtamoni- 
t•'r's  research  dire-ctor  for 
health  e'are  and  piiblie-see'ior 
technology 

Security  Not  a  Catalyst 

But  even  homeland  security 
spending,  which  Young  said  is 
a  key  driver  of  grow  th  in  over- 
I  all  lederal  IT  spending,  is  be¬ 
ing  scrutinized  more  closely, 
particularly  as  that  spending 
relates  to  federal  grants  for 
state  and  hieal  governments. 

Keferring  u>  the  size  and 
scope  of  state  and  local  spend¬ 


ing  requirements,  former 
Virginia  Gtn.  lames  liilmitre. 
w  ho  chaired  a  congressionally 
mandated  commission  to 
study  terrorist  threats,  said 
last  week  that  the  U.S.  "is  in 
danger  of  expending  all  of  our 
i  national  treasure  and  brs-aking 
'  the  economy  of  this  country 
on  homeland  security."  (.il 
more  made  the  comment  at 
'  the  Iowa  (iovernor's  Home¬ 
land  Security  (,'onferenee  in 
Pes  Moines. 

But  a  key  to  understanding 
IT  funding  for  homeland  sv'cu- 
rity  is  distinguishing  between 
new  money  and  money  that's 
being  renlloealcd  from  other 
projects,  said  Young.  As  a  re 
suit,  “the  net  impact  of  home¬ 
land  security  funding  on  IT 
spending  by  the  federal  gov¬ 
ernment  may  not  be  as  dra¬ 
matic  as  one  might  think."  she 
said.  C  48203 


www.computerworfd.com  win  of  the  miilli- 
biilion-dollar  US 
\TSIT  program  iQuiekl.ink 
•l7(>.T‘t|  .ire  presenting  elul- 
lenges  lo  .m  unbridled  spend¬ 
ing  nmip  driven  in  recent 
ye.irsby  homel.tnd  security 
requirenu'iiis. 

"Shadows  have  bi-en  cast  on 
the  federal  vendor  community 
ihri'ugh  these  recent  events."' 


ITAA  Rres  Back  at  Crrtics  of  E-voting 


Sees  open-sdiiree 
agenda  at  work 

BV  OAN  VERTON 

.  p  ».  \ 

The  president  i>fan  inlliiential 
I  r  vendor  .issocuiiion  is  jc- 
eusing  eleeironk  voting  sys¬ 
tem  eriiies.  many  of  whom  are 
n  scviirity  resorehers.  of  us¬ 
ing  the  issue  "fe-votiiig  seeu- 
niy  to  wage  a  "religious  war" 
•hat  pits  open-source  softw.ire 
against  proprietary  software. 

Ihirris  Miller,  president  of 
the  Arlington.  Va.-based  Infor¬ 
mation  Ieehnul»*gy  Asstwia- 
iion  ol  .America,  said  a  recent 
ITAA  survey  showed  that  7?’i. 
ot  registered  voters  are  uri- 
eoneerned  about  the  security 
of  e-voling  systems.  Miller 


said  critics  who  claim  to  be 
concerned  about  the  security 
of  e-voiing  systems  are  really 
using  the  ivsue  to  push  a  polit 
'  ieal  agenda  iinbehalfof  the 
open-source  community. 

"It's  not  about  voting  ma¬ 
chines.  It's  a  religious  war 
abi'ui  open-source  software 
vs  prtiprieiary  software."  said 
Miller  "If  y»*u're  a 
computer  scientist 
and  you  think  thal 
open-s»*urce  software 
is  the  solution  to 
everything  ,  then 
you  hate  eiearonic 
voiing  machines.  But 
if  you're  a  person 
w  ho  believes  that 
proprietarv  sofivvare 
and  open-source 
software  can  b«uh  be 


MILLER  “It's  not 
about  voting 
machines.  It  's  a 
religious  war." 


reliable,  then  you  don't  hate 
electronic  voiing  machines." 

Erie  Raymond,  president 
of  the  Dpen  Source  Initiative, 
a  nonprofit  organization  pro¬ 
moting  open-source  standards 
and  eriieria.  •wiid  Miller  has 
the  issue  wrong.  "Most 
le-voting)  critics,  including 
me.  aren't  focusing  on  open- 
source  vs.  closed- 
source  at  all.  but 
rather  on  the  lack  of 
any  decent  audit  trail 
of  Votes  —  one  that 
can't  be  corrupted  by 
software."  he  said. 

Kim  Ale.xander, 
president  of  the 
California  Voter 
Foundation,  called 
Miller's  argument 
"non.wn.se."  "Fverv 


teehnologLsl  that  I  have 
worked  w  ith  believes  that 
even  if  we  had  open-source 
software,  we  would  still  need  a 
paper  iraij."  she  said.  "There 
would  be  no  guarantee  that 
the  software  thiU  was  irtspeet- 
ed  by  the  public  would  be  the 
same  software  that  is  running 
on  every  machine  in  every  ju- 
I  risdiction  in  the  country.” 

Miller  acknowledged  that 
security  has  to  be  a  priority, 
hut  he  wa.s  firm  in  his  stance. 
He  said  that  asking  open- 
source  proponents  v»f  open- 
I  source  software  to  comnieni 
on  the  security  ofe-voting  sys¬ 
tems  "is  like  asking  a  bunch  of 
clergy  men  wliat  they  think  «»f 
premarital  sex."  O  48210 


SUfTBlED 

The  e-voting  ifebaie  'leals  up  in  Csl<toin/a 

O  QuickLink  48228 
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AT  DEADLINE 


Best  Buy,  Accenture 
PmaBze  ft  Contract 

Best  Buy  Co.  said  R  fM»  finalzid 
aawan  yaof  fTortMurdngand 
consulting  contract  wtt)  Aceonture 
ltd  mtrfrti rrfli TiIm miar miniQfi 
raani  of  Bw  islalar's  fT  MrastniC' 
tin  fdui  aiipication  dtualopRMnt 
and  imimanafico.  About  600  FT 
weriBri  «■  Ml  from  RfddWd. 
Mhw.  baoid  Bast  Buy  to  Accan* 
tin  as  gart  of  Bw  daal.  odiidi 
took  afhct  on  Rbtay.  Ths  ffrian- 
dal  toniM  wortn'l  dtodoaad. 


Sun  May  Open  Up 
Its  Server  Software 

Sun  Mtemcystsms  fric.  said  tt*i 
Banking  of  oftaring  Ri  Jam  Enter* 
priae  Systoffl  asrvar  sofhirvs  un* 
dor  an  epon-aourca  Icanee.  JES 
inchidai  preduds  such  as  Sun's 
application  and  Wab  aarver  aoft- 
orara.  Sun  tost  month  raiaaiod  the 
sourcacDdaforaS-Ousarintor* 
face  calad  Inking  Olasa  and  add 
R  iMNdd  maha  Solaris  awMbio 
under  an  opan*aaurca  modal  by 
year's  and  (OutofcUnk  47345). 


IBM  Tops  Profit 
Plan,  Lags  on  Sales 

IBM  fopoftad  a  Mohar-than-ai* 
poetod  profit  of  S2  blRon  for  lha 
second  quarter,  up  17%  year  omr 
yur.Re«anuatatetadS2a.2  bU- 
Ron.  7%  atom  Bia  year  sartor 
figura  but  loamr  than  Wal  Street 
analyats  had  forecast  IBM  was 
the  latast  vender  to  tfadoaa  a 
shortfal  in  software  sales  during 
the  quwter  [QidckUnk  40068). 
CR)  Hark  Loughridga  said  some 
npoetad  software  deals  didn't 
cooM  througb  to  tats  June. 


Short  Takes 


OQl  MC.  raiaod  the  earnings 
ferocaat  lor  Ms  second  quarter, 
which  ande  July  30.  But  R  didn't 
change  a  projadion  dial  revenue 
wM  total  $n.7UMen....BCA 
SYSTEMS  MC.  today  plans  to 
rafaess  a  “prandum  adMon*  of  Ms 
BM&ppc  appileaton  ssrmr  iofl- 
mie  Bmfs  faniaad  on  ooivie*- 


Federal  IT  Spending 
Expected  to  Slacken 


New  spending  controls,  ofishoring  and 
contractor  scandals  are  key  factors 


A  DECADE-LONG 

growth  Spurt  in  fed¬ 
eral  IT  spending  is 
about  to  come  to  an 
abrupt  end.  according  to  a  re¬ 
port  released  bst  week. 

The  report  by  New  York- 
based  Datamonitor  PLC  fore¬ 
cast  a  4%  com¬ 
pound  annual  AT 

growth  rate  for  fed-  **  ** 
oral  IT  spending 
during  the  next  five 
years.  In  the  past 
10  years,  spending 
grew  at  an  annual 


report,  customer/citizen  rela¬ 
tionship  management,  enter¬ 
prise  resource  planning  and 
security  will  be  the  driving 
factors  behind  the  increase. 

However,  Datamonitor  ana¬ 
lysts  said  new  management 
and  spending  controls,  recent 
contractor  scandals  such  as 
CACI  International  Inc.'s  in¬ 
volvement  in  Iraqi 
prisoner  abuse 
[(^ickLink  47209). 
and  fallout  from 
Bermuda-based 
Accenture  Ltd.*s 


rate  of  5%  to  10%  and  has  been 
steadily  increasing,  according 
to  the  report. 

The  fe^ral  govemment's 
ftscaJ  2004  IT  Wdget  stands  at 
$46  billion.  Datamonitor  pre¬ 
dicts  that  federal  spending  on 
IT  will  grow  to  only  S56.5  bil¬ 
lion  by  2009.  According  to  the 


The  Navy  doesn'l  know  how 
much  II  spends  on  lelecom- 
muncabons  services 

OQ«cUink402O4 
wwwxofflpmwworkLoofn  win  of  the  multi 
bilHoo-dolIar  US- 


said  Jocelyn  Young,  the  author 
of  the  study  and  Datamoni- 
tor’s  research  director  for 
health  care  and  public-sector 
technology. 

Security  Not  a  Catalyst 

'  But  even  homeland  security 
spending,  which  Young  said  is 
a  key  driver  of  growth  in  over¬ 
all  federal  IT  spendir^u  1$  be¬ 
ing  scrutinized  more  closely, 
particularly  as  that  spending 
relates  to  federal  grants  for 
stale  and  local  governments. 

Referrii^  to  the  size  and 
I  scope  of  state  and  local  spend¬ 


ing  requirements,  former 
Virginia  Gov.  James  Gilmore, 
who  chaired  a  congressionally 
mandated  commission  to 
study  terrorist  threats,  said 
last  week  that  the  U.S.  “is  in 
danger  of  expending  all  of  our 
national  treasure  and  breaking 
the  economy  of  this  country 
on  homeland  security.”  Gil¬ 
more  made  the  comment  at 
the  Iowa  Governor's  Home¬ 
land  Security  Conference  in 
Des  Moines. 

But  a  key  to  understanding 
IT  funding  for  homeland  secu¬ 
rity  is  distinguishing  between 
new  money  and  money  that's 
being  reallocated  from  other 
projects,  said  Young.  As  a  re¬ 
sult,  “the  net  impact  of  home¬ 
land  security  funding  on  IT 
spending  by  the  federal  gov¬ 
ernment  may  not  be  as  dra¬ 
matic  as  one  might  think,”  she 
said.  O4B203 


VISIT  program  (QpkkLink 
47639)  are  presenting  chal¬ 
lenges  to  an  unbridled  spend¬ 
ing  romp  driven  in  recent 
years  by  homeland  security 
requirements. 

“Shadows  have  been  cast  on 
the  federal  vendor  community 
through  these  recent  events," 


1  U  S.  Federal  fT  Vendor  Opportunity  by  Technology  Segment 
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fTAA  Rres  Back  at  Critics  of  E-voting 


Sees  open-source 
agenda  at  work 


The  president  of  an  influential 
IT  vendor  association  is  ac¬ 
cusing  electronic  voting  sys¬ 
tem  critics,  many  of  whom  arc 
IT  security  researchers,  of  us¬ 
ing  the  issue  of  e-voting  secu¬ 
rity  to  wage  a  “religious  war” 
that  pits  open-source  software 
against  proprietary  software. 

Harris  Miller,  president  of 
the  Arlington.  Va. -based  Infor¬ 
mation  Technology  Associa¬ 
tion  of  America,  said  a  recent 
ITAA  survey  showed  that  77% 
of  registered  voters  are  un¬ 
concerned  about  the  security 
of  e-voting  systems.  Miller 


said  critics  who  claim  to  be 
concerned  about  the  security 
of  e-voting  systems  are  really 
using  the  issue  to  push  a  polit¬ 
ical  agenda  on  behalf  of  the 
open-source  community. 

“It's  not  about  voting  ma¬ 
chines.  It's  a  religious  war 
about  open-source  software 
vs.  proprietary  software,’'  said 
Miller.  “If  you're  a 
computer  scientist 
and  you  think  that 
open-source  software 
is  the  solution  to 
everything . . .  then 
you  hate  electronic 
votii^  machines.  But 
if  you're  a  person 
who  believes  that 
proprietary  software 
and  open-sourcc 
software  can  both  be 


reliable,  then  you  don't  hate 
electronic  voting  machines.” 

Eric  Raymond,  president 
of  the  Open  Source  Initiative, 
a  nonprofit  organization  pro¬ 
moting  open-source  standards 
and  criteria,  said  Miller  has 
the  issue  wrong.  “Most 
[e-votingl  critics,  including 
me.  aren't  focusing  on  open- 
source  vs.  clos^- 
source  at  all.  but 
rather  on  the  lack  of 
any  decent  audit  trail 
of  votes  —  one  that 
can’t  be  corrupted  by 
software.”  he  said. 

Kim  Alexander, 
president  of  the 
California  Voter 
Foundation,  called 
Miller’s  argument 
“nonsense.”  “Every 


technologist  that  I  have 
worked  with  believes  that 
even  if  we  had  open-source 
software,  we  would  still  need  a 
paper  trail,"  she  said.  “There 
I  would  be  no  guarantee  that 
the  software  that  was  inspect¬ 
ed  by  the  public  would  be  the 
same  software  that  is  running 
on  every  machine  in  every  ju¬ 
risdiction  in  the  country." 

Miller  acknowledged  that 
I  security  has  to  be  a  priority, 

;  but  he  was  firm  in  his  stance. 
He  said  that  asking  open- 
source  proponents  of  open- 
sourcc  software  to  comment 
on  the  security  of  c-voting  sys¬ 
tems  “is  like  asking  a  bunch  of 
clergymen  what  they  think  of 
premarital  sex."  O  48210 

SUIT  no 

Thaa-ifoung  debate  heats  up  in  Cahlomis 
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IBM  Adds  MainftiuiwTecAnology  to  Unix  Servers 


Poweo  line  seems 
to  deliver  big 
performance  leap 


BY  PATRICK  THIBODEAU 

Gregory  Martin,  integration 
manager  at  Royal  Caribbean 
Cruises  Ltd,  is  interested  in 
IBM’s  Power5-based  servers, 
including  a  new  Unix  server 
line  announced  last  week.  But 
he  wants  IBM  to  produce 
benchmarks  comparing  appli¬ 
cation  performance  across  var¬ 
ious  IBM  systems  —  not  just 
against  competitors'  products. 

Martin’s  Miami-based  com¬ 
pany  uses  IBM  iSeries  (for¬ 
merly  the  AS/400)  and  pSeries 
Unix/Linux  servers.  Bench¬ 
marks  showing  operating  sys¬ 
tem  performance  across  multi¬ 
ple  IBM  lines  would  help  him 
make  the  best  server  choice 
for  his  applications,  he  said. 

“If  we  don't  have  a  bcnch- 
maric  that  compares  a  pScries 
to  an  iSeries  from  an  OS  per¬ 
spective.  then  it's  hard  to  com¬ 
pare  that  to  a  different  tech¬ 
nology"  from  another  server 
vendor,  he  said. 

IBM  has  no  plans  to  pro¬ 
duce  internal  benchmark  com¬ 
parisons  becau.se  the  iSeries 
and  pScries  hardware  archi¬ 
tectures  are  identical,  said  Jim 
McGaughan.  director  of  IBM 
eServer  strategy.  If  a  company 
is  interested  in  comparir^  the 
performance  of  the  eServer 
i5/OS  operating  system  with 
that  of  AIX.  it’s  likely  to  be 
considering  a  migration,  he 
said.  In  that  case,  IBM  would 
help  the  user  evaluate  work¬ 
load  performance  on  both  sys¬ 
tems.  McGaughan  said. 

The  RISC-based  Power5 
processor  is  dual-core,  but  un¬ 
like  the  Power4  chip,  it  has  si¬ 
multaneous  multithreading 
capability.  That  means  it  can 
run  two  instruction  streams  in 
real  time,  or  up  to  four  threads 
in  parallel. 

A  Game  of  Laapfrog 

Server  makers  are  in  an  end¬ 
less  game  of  leapfrog  with 
chip  performance,  say  ana¬ 
lysts,  but  the  PowerS-based 
Unix  and  Linux  servers  appear 


to  be  a  significant  leap. 

IBM  is  “riow  pulling 
in  intellectual  property 
from  other  lines  of  busi¬ 
ness."  such  as  logical 
partitioning  from  its 
mainframe  group  and 
virtual  engine  technolo¬ 
gy  from  its  Tivoli  Soft¬ 
ware  group,  said  Brad 
Day.  an  an^yst  at  For¬ 
rester  Research  Inc.  in 
Cambridge,  Mass. 

But  while  these  Unix 
systems  are  becoming 
more  mainframelike, 
they  aren’t  mainframes. 

Dave  Ennen.  IT  direc¬ 
tor  at  Winnebago  Industries 
Inc.  in  Forest  City.  Iowa,  uses 
an  IBM  zSeries  mainframe  to 
run  his  company’s  most  criti¬ 
cal  applications.  He  doesn't 
see  Unix  or  other  servers  re- 


/ 1" 


wartii  benchmarks 

to  combare  IBM  systems  to  one  another. 


placing  the  mainframe,  despite 
the  addition  of  microproces¬ 
sor  partitioning  technology  to 
the  Unix  servers.  The  reason 
we  have  the  mainframe  is  wc 
don’t  ever  want  it  to  go  down. 


and  anything  short  of 
the  zSeries  doesn’t  have 
that  kind  of  dependabil¬ 
ity."  said  Ennen. 

IBM  officials  said  a 
wide  gap  remains  be¬ 
tween  the  capabilities  of 
mainframes  and  those 
of  systems  running 
Unix  For  instance,  un¬ 
like  with  Linux  or  Unix 
systems,  the  risk  of 
someone  cracking  into  a 
mainframe  system  “is  al¬ 
most  zero."  said  Ravi 
Arimilli.  an  IBM  fellow 
and  chief  architect  of 
the  IBM  Systems  Group. 
Unix  will  eventually  close 
the  gap  with  improved  securi¬ 
ty.  availability  and  virtualiza¬ 
tion.  said  Arimilli.  “When  will 
that  crossover  happen?  I  don’t 
think  it's  anytime  soon,"  he 


said,  estimating  that  it  would 
be  at  least  a  decade. 

But  the  mainfnunelikc  proc¬ 
essor  virtualization  capability 
in  eServer  Powers  systems 
will  help  Benton  Harbor. 
Mich.-based  Whirlpool  Corp, 
which  iust  took  delivery  of  a 
two-way  Powers  s>*stcm. 

Virtualizing  on  the  proc¬ 
essor  level  means  that  NV'hirl- 
pool  can  reduce  the  number  of 
separate  network  and  storage- 
area  netwoiiiog  cards  it 
needs,  as  well  as  cut  licensing 
costs  on  management  and 
monitoring  systems  that 
charge  on  a  pcr-CPU  basis, 
said  Robert  Comso.  senior 
principal  systems  architect  at 
the  appliance  maker.  The 
Power4  hardware  required 
s^rate  adapters;  the  Po«Tf5 
does  DOC  It  *^ocsn't  always 
make  economic  sense”  to  add 
cards  to  achieve  virruahzation. 
Gamso  said.  O  4B2t2 


Some  Say  U.S.  Supercomputing  Needs  a  Jump-start 


Legislation  intended  to 
strengthen  supcrcompuling 
development  in  the  U.S.  is  be¬ 
ing  endorsed  by  a  Ford  Motor 
Co.  IT  official  who  maintains 
that  the  govemroent's  empha¬ 
sis  on  parallel  processing  in 
supcrcomputing  is  undent- 
ting  research  and  hurting  the 
country’s  ability  to  compete. 

The  US.  House  of  Repre¬ 
sentatives  this  month  passed 
two  supercomputing-related 
bills;  HR  4218.  the  High-Per¬ 
formance  Computing  Revital¬ 
ization  Act  of 2004.  and  HR 
4516,  which  seeks  about  $200 
million  in  funding  for  super¬ 
computer  development  at  the 
U.S.  Department  of  Enetgy. 

The  legislation  aims  to 
bring  a  coordinated  approach 
to  federal  supercomputing 
development  and  require 
U.S.  agencies  to  make  super¬ 
computers  available  to  re¬ 
searchers. 

Vincent  Scaraftoo.  manager 
of  numerically  intensive  com¬ 
puting  in  Ford’s  supercomput- 
iiQ  program,  has  testified  in 
(Congress  on  the  need  for  a 
larger  federal  role  in  super- 
computing  development. 


In  an  interview,  Scarafino 
said  the  U.S.  has  been  losing 
its  edge  in  supercomputing 
because  of  a  shift,  beginning 
in  the  mid-1990s,  to  parallel 
processing  using  relatively  in¬ 
expensive  commodity  compo¬ 
nents  instead  of  concentrating 
on  developing  new  kinds  of 
processors.  That  has  led  to  re¬ 
duced  investment  by  the  gov¬ 
ernment,  he  said. 

Nat  Pushing  (he  Enveiape 

Parallel  processing  has  cut 
prices  and  helped  mcrease  pro¬ 
ductivity.  But  there  has  been  a 
trade-off.  said  Scarafino. 

“We  can  do  analysis  now 
that  is  cheaper  than  it  was  five 
years  ago.  and  that’s  great.  But 
we’re  not  pushing  the  enve¬ 
lope  like  we  used  to."  be  said. 
"Instead  of  learning  how  to  do 
new  things,  we're  learning 
how  to  do  old  things  cheaper." 
Scarafino  compared  it  to  eat¬ 
ing  one’s  seed  cora 

Parallel  processing  is  also 
labor-intensive,  requiring  the 
expertise  of  computer  scien¬ 
tists  to  program  so  problems 
can  be  solved  simultaneously. 
In  contrast,  classic  stq>ercom- 
puters  that  rely  on  very  fast, 
specially  designed  vector 


processors  "could  be  pro¬ 
grammed  in  Fortran,"  Scarafi¬ 
no  said.  They  could  be  pro¬ 
grammed  in  a  language  that 
mere  mortals . . .  could  pro¬ 
gram  in." 

Kevin  Wohlever,  director  of 
(^rations  of  the  Ohio  Super¬ 
computer  Onter's  Springfield 
facility,  agreed  that  the  push 
toward  parallel  processing  in 
the  U.S.  has  been  a  hindrs^c. 

“If  wc  keep  trying  to  make 
all  codes  fit  into  the  duster 
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environments,  we're  losing  the 
opportunity  to  make  the  codes 
that  run  best  in  the  vector  en¬ 
vironment,"  said  Wohlever. 

He  said  govcmment-hackcd 
supercomputer  development 
efforts  in  lapan  and  Europe 
have  improved  weather  fore¬ 
casting  there,  fapan  has  the 
world’s  largest  supercomputer 
The  Washington-based 
Computing  Research  Associa¬ 
tion.  which  represents  acade¬ 
mic  and  business  research 
j  groups,  praised  the  legislative 
effort  but  noted  that  next 
year's  proposed  federal  budget 
for  IT  research  is  0  below 
this  year’s  allocation. 

R^.  ludy  Higgen  (R-IIL). 
one  of  the  bill’s  authors,  said 
she  hopes  the  measures  will 
get  federal  ageodcs  To  rcallv 
jump-start  the  next  generation 
of  high-end  computers."  Big- 
gert's  legislation  has  VMutr 
House  support. 

Biggen  said  she  believes 
^  that  the  U.S.  has  lost  ground 
I  competitively  and  that  U5. 

I  companies  need  federal  rr- 
I  search  leadership  in  super- 
j  computing.  “What  goes  into 
I  providing  this  type  of  compui  - 
j  er  they  cani  do  on  their  own." 

'  she  said.  04«21t 
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Nortel  Restates 
2003  Earnings 

Ptorm  NttMoriis  Ud.  last  wMk 
said  its  Mt  aamifiQs  in  2003  wll 
bs  rastatad  dounnaard  by  50%. 
and  nat  aarnlnoi  basad  on  contin- 
uino  operations  taat  yoanail  be 
abninaled  wMi  the  change.  The 
restatMiont  wM  esaantiaRy  wipe 
out  Ks  net  earnings  for  the  year, 
the  Brampton,  Ontario-based 
comparry  said. 


Adaptec  Buys  Snap 
AppianceforSIOOM 

Netwoit  adaptor  card  fflahar 
Adaptec  Inc.  last  waek  said  H  . 

wdl  acguire  storage  server  vendor 
Snap  Appliance  Inc.  for  appreii- 
mataly  SWO  tnilion.  San  Jose- 
basod  Snap  AppKance,  which  j 

makas  natworh-attachad  storage  ' 

servers  for  fie  aharing.edi  be-  j 

come  a  dWaion  of  Mlplfai.  CaW.- 
based  Adaptoc.  Adaptec  said  the 
acquisitionwNsxpandilsairtBr- 
nal  storage  product  portfoBo  and 
systarm  channel  buainass.  I 


IBM  Expands 
Analytics  Offering 

BM  last  weak  announced  that 
h's  acguhiog  privatefy  held 
AlphaBkn  Corp.  in  Mountain 
Viaw.  CaM..  to  gain  tocleiolooy 
that  wahas  it  easier  for  develop 
■rs  to  sffibod  kifelioonca  tochnol- 
ogy  into  busieoss  applications 
Md  procetws.  IBM  saM  Alpha* 
Bloa  aofheera  wM  ba  offared  first 
as  a  stand-alona  product  and  wfl 
than  be  ambaddad  through  IBM's 
middtoware  sufto.  The  vahM  of 
tha  deal  wasn't  dtodosad. 


ShortTakes 

CISCO  SYSTEMS  me.  wMtod 
Charfaa  BMncarfo  to  Hit  position 
of  ddof  todmotogy  ofBcar.  a  post 
thM  bee  ben  vacant  atoce  2000. 
...ORACLE  CORP.  nd*eU.S. 
Oaftortmnt  of  Jualiee  Mad  dosing 
brtoli  In  too  gevommanf  s  case  to 
Mach  Oracle's  hesMo  nharwsr  hid  ; 
larftopliSeRlne..pa«higtotway  I 
for  dodngargumntitois  week.  I 
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HOT  TECHNOLOflV  TRENDS.  NEW  PRODUCT 
NEWS  AND  INDUSTRY  GOSSIP  BY  MARK  HALL 


...  involving  inore  than  one  outsourcar  operating  Irani 
niora  than  one  location  B  increasingly  convnon  for  many 

IT  shots,  says  John  Bostick,  CEO  of  dbaDirect  Inc.  in 
Florence,  Ky.  He  says  more  and  more  of  his  100  cor- 
porate  customers  have  struck  outsourcing  deals  with 
the  likes  of  IBM  Global  Ser¬ 
vices.  Electronic  Data  Sys¬ 
tems  Corp..  Keane  Inc.  and 
other  big  outsourcers.  Bui 
they  still  want  to  take  advan¬ 


tage  of  his  company's  focus 
on  databases  as  well  as  the 
low  overhead  he  has  from 
miming  his  main  data  center 
out  of  Boone  County,  Ky.  That 
means  he's  coordinating  work 
requests  from  user  sites  and 
giant  outsourcers'  data  cen¬ 
ters.  Despite  Bostick's  fervent 
belief  that  U.5.*based  special¬ 
ized  outsourcers  such  as  dba- 
Direct  can  effectively  com¬ 
pete  with  offshore  operations. 
I  he's  had  to 


I  manages  2.500  databases. 

I  with  45  to  50  being  mn  by  a 
I  senior  DBA  who  has  an  oper- 
I  ations  specialist  in  tow.  At  the 
moment.  Bostick  says.  Oracle 
and  SQL  Server  are  mnning 
I  neck  and  neck,  each  with  45% 
j  of  the  database  work  dba- 
I  Direct  has  under  contract. 

“But  Microsoft  is  growing 
I  like  a  weed."  he  says.  Sybase 
I  makes  up  8%.  DB2  and  In- 
.  formix  fight  over  the  scraps. 

MySQL  has  cropped  up  in  a 
I  couple  customer  conversa¬ 
tions,  he  says,  “so  we’re  look¬ 
ing  into  it  for  the  future." 

Catching  Killer 
CaHsfor... 

...  complex  documant  managa- 
mant  oparadens.  Dave  Ryan. 

IT  director  and  senior  deputy 
prosecutor  for  King  County 
in  Seattle,  recalls  that  nailing 
Gary  Ridgeway,  the  infamous 
Green  River  Killer,  began 
with  a  paper  trail  of  three- 


ring  binders 
investigators 
used  in  the 
1980s  when 
the  string  of 
bmtal  mur¬ 
ders  began. 
Eventually. 
Ryan  says,  he 
had  "a  whole 
roomful  of 
three-ring 
notebooks."  Not  having  the 
staff  on  hand  to  digitize  the 
mountain  of  information. 
Ryan  turned  to  Chameleon 
Data  Corp..  also  in  Seattle. 
CEO  Derek  Dohn  says  his 
team  had  to  digitize  the  data 
and  organize  it  in  three  for¬ 
mats  for  different  users  —  the 
prosecution,  public  defenders 
and,  ultimately,  the  public  at 
large.  Ryan  says  that  a  key 
moment  in  the  gathering  of 
evidence  came  when  investi¬ 


gators  discovered  that  unique 
paint  samples  from  Ridge¬ 
way’s  workplace  were  discov¬ 
ered  on  three  victims'  bodies. 
The  prosecution  had  already 
lied  Ridgeway  to  four  other 
murdered  women  who  were 
prostitutes  that  the  then- 
suspect  claimed  he  had  coin- 
cidciitaJly  met.  Technology 
from  eCopy  Inc.  in  Nashua, 
N.H.,  “that  feels  like  a  garden- 
variety  copier  to  paralegals" 
was  used  to  scan  the  paiht- 
sample  lab-report  informa¬ 
tion  into  the  document  man¬ 
agement  system  so  that  it  was 
immediately  available  in  the* 
different  formats  used  by 
both  the  prosecution  and  the 
defense.  Once  the  defense 
attorneys  had  the  new  data, 
they  knew  "the  coincidence 
argument  fell  apart."  Ryan 
says.  Ridgeway  soon  pleaded 
guilty  to  48  murders,  ending 
the  hunt  for  the  worst 
murderer  In  U5.  history. 


Swift  Data  Center- 
To-Data  Center... 

. . .  backupp  potsMe  wftti  Hyppr- 

IP.  a  proprietary  network  ap¬ 
pliance  that  uses  your  IP  net¬ 
work.  That's  the  claim  from 


Craig  Gust.  CEO  of  Network 
Executive  Software  Inc.,  also 
known  as  Netex.  in  Maple 
Grove,  Minn.  He  says  Hyper- 
IP  sits  between  a  standaixJ  IP 
switch  and  a  very-high-speed 
WAN  link.  Gust  boasts. 
“HyperlP  achieves  90% 
throt^put  with  1%  packer 
loss  at  up  to  46.000  circuit 
miles  distance."  And  that's 
before  the  appliance  applies 
data  compression.  HyperlP 
works  with  a  host  of  “quali¬ 
fied  applications."  says  Gust, 
and  this  week  will  add  Veritas 
NetBackup.  McData  iFCP  and 
others  to  the  list.  One  appli¬ 
ance  costs  $19,750  for  10Mbit/ 
sec.  performance.  You'll  pay 
incrementally  more  for  up 
to  480Mbit,''sec.  Remember 
to  multiply  that  by  two  be¬ 
cause  you  need  one  device 
on  each  end. 


HyptrIP  suffers  only  t%  packet  loss. 


PHP  Developer 
Makes  Spl^... 

...  this  week  ««fto  toe  news  that 
it's  moving  its  headquartsrs  from 
IstmI  to  toe  U.S.,  releasing  Ver¬ 
sion  5  of  the  world’s  leading 
server-side  scripting  lan¬ 
guage.  unveiling  two  product 
upgrades  and  picking  up 
more  than  $8  million  in  ven¬ 
ture  capital.  Zend  Technolo¬ 
gies  Inc.,  no«'  in  Cupertino. 
Calif,  has  kept  its  R&D  oper¬ 
ations  in  IsraeL  but  CEO 
Doran  Gerstel  says  that  with 
more  than  half  its  customers 
here,  it  makes  sense  to  move 
to  Silicon  Valley.  Its  release  of 
open-source  PHP  5  improves 
the  language's  obiect-orient- 
ed  capabilities.  And  the  com¬ 
pany’s  Zend  Studio  3.5  for 
PHP  developers  will  include 
30  templates  to  speed  coding. 
Also.  Zend  Performance  Suite 
4.0  boosts  PHP  performance 
two  to  three  times  through 
improved  content  caching 
and  other  techniques.  It's  all 
available  now.  0  4B190 
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"InfraStruXure  is  perfect  protection 
for  our  high  power  density  blade  servers 


With  its  modular,  scalable  aiKl  open  building  blocks,  it's  no 

wonder  InfraStruXure's  rack-based  architecture  is  winning  over 
editors  and  end-users  alike  -  especially  as  blade  servers  and 
server  consolidation  cause  power  densities  to  skyrocket. 

If  you  re  not  already  dealing  with  such  high  power  densities, 
the  chances  are  you  will  be  soon.  An  on-demand  architecture 
for  NCPI,  InfraStruXure’*  includes  power,  cooling,  racks  and 
physical  structure,  secunty  and  fire  protection,  cabling,  and  the 
management  and  servicing  of  these  elements.  It  is  specificalty 
designed  to  meet  ever-changing  IT  requirements  through 
scalable,  modular  and  standardized  components. 

For  high  density  applications,  the  InfraStruXure  High  Density 
Configuration  is  a  patent-pending  hot  aisle  containment  system 
that  cools  up  to  20kW  in  a  single  enclosure. 

Flexible  enough  to  be  moved  or  changed  without  system 
reconfiguration,  the  InfraStruXure  High  Density  Configuration 
can  also  be  scaled  to  meet  changing  needs  and  future 
expansion.  This  makes  it  a  perfect  solution  for  converted 
spaces,  as  well  as  high-density  areas. 


lnfraStru/\ure- 


On-demand  architactura  for  network- 
critical  physical  infrastructure 


Introducing  InfraStniXure"' 
High  Density  Configuration 

The  bifreStruXura*  High  Density  Configwrstion 
IS  a  oatent-pendirig  hot  aisle  containment  system 
that  cools  up  to  20kW  of  Made  server*  in 


The  InfraStruXure  High  Density 
Configuration  is  ideal  for 

*  Disaster  Recovery  Sites 

*  Blade  Server  Applications 

*  Converted  Spaces 


“More  computing  power,  but  with  more  heat  ., 
presents  a  serious  problem  for  companies  unprepared  to  meet  the 

_ _ _  cooling  demands  of  a  data  center. . 

BuiM-ou,  Tool  lets  plays  the  hero 

-  With  a  three-component 

TSw  B  environmental  system. " 

configurator 


Oliver  Rist,  Senior  Contributing  Editor, 
Brian  Chee,  industry  Expert 
iHfoWoHd,  3/12/2004 


See  it  UVE  and  hear  from  your  peers 
why  InfraStruXure  will  work  for  you! 

Register  today  lor  a  presentation  and  tow  of 
a  wodting  data  center  using  InfraStniXuie 

Free  dinner  to  foilow  presentation 
/•Mraff.  /naejaciom  m  tn»  «>  :ofc  r8S6*  Cel  80C  73372M  ijUSC 


Receive  your  FRS  APC  White  Paper 

“Cooling  Audit  for  Identifying  ^ 


To  learn  more  about  InfraStruXure.  call  1.88S.ISX.2990  today  or  visit  us  at  www.apc.com. 


in  Data  Centers' 

Visit  litlp://pfl)ino.apc.coiii 
Enter  M  i858y 
Call  888-289-APCC 13199 
111x401-788-2797 


Legendary  Reliability* 


•  132  Fafforounds  Road,  West  Kingstort.  R)  02892  USA  iSX204EF-uSb 
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Start-up  Pitches  Customizable 
Linux  OS  to  Corporate  Users 

_ il.ll _  . 


Novel  Spccifix  plan  enables  full  support 


ev  TODD  R.  WEISS 

TWO  FORUEjt  Red  Hat 
Inc.  Linux  software 
engineers  are  creat¬ 
ing  a  version  of  Lin¬ 
ux  for  corporate  users  that 
they  say  will  allow  custom 
code  modi/icatinns  to  be 
made  while  mainuining  full 
support  for  the  rest  of  the 
operating  system. 

San  lose-based  Specifix  Inc. 
which  was  founded  last  year, 
was  preparing  to  launch  an 
alpha  release  of  the  unnamed 
operatmg  system  last  week, 
according  to  co-founder  Erik 
Troaa  The  release  of  a  ship¬ 
ping  version  is  expected  by 
the  end  of  the  year. 

TVoan  said  corporate  users 
are  often  unable  to  customize 
Linux  software  without  invali¬ 
dating  suppon  from  the  origi¬ 
nal  vendor.  Specifix  hopes  to 
solve  that  problem  by  allow¬ 
ing  users  to  modify  the  do- 
sired  code  and  provide  their 
own  support  for  changes. 
SpeciHx  will  continue  to  sup¬ 
port  the  rest  of  the  unmodi¬ 
fied  Linux  operating  system. 

Tracking  Chingas 

Specifix  has  also  created  an 
open-source  appUcadon  called 
Conary  —  a  distributed  system 
that  allows  developers  to  track 
and  monitor  chan^  made  to 
the  Unux  code  ~  to  allow 
user  companies  to  modify  and 
tailor  the  sofhvare  as  needed. 

Conary  will  allow  the  con¬ 
struction.  deployment  and 
management  of  a  single  Linux 
code  base  across  an  unlimited 
number  of  configurations  and 
hardware  platforms,  according 
to  the  company.  Conary  was 
released  last  week  to  t^  de¬ 
veloper  community  under 
IBM's  open-source  Common 
Public  License. 

Several  corporate  Unux 
users  said  the  new  offerings 
from  Specifix  are  innovative 
but  pr^icted  that  demand  for 
them  will  be  fairly  limited. 


Scott  Clark,  director  of  IT 
systems  at  call  center  out¬ 
sourcer  Sitcl  Corp.  in  Omaha, 
said  most  corporate  users  be 
hears  about  arc  using  Linux 
for  "bread  and  butter''  things 
such  as  e-mail.  Web  and  file 
servers,  and  other  infrastruc¬ 
ture  tasks  where  major  code 
changes  aren't  needed.  “All 
those  kinds  of  things  are  well 
documented  and  easily  done 
and  supported  by  the  major 
Linux  vendors."  he  said. 

Clark  said  he  hasn't  yet  had 
to  change  the  Linux  code, 
though  Oracle  Corp.  has  pro- 


Inourcase, 

■  #  we  don't  have 
the  time...  to  ex¬ 
periment  and  to  play 
with  the  kernel 

JOE  POOLE,  TECHHICAl 
SUPPORT  MAMA6ER.  8OSC0VS 

vided  a  kernel  tweak  when 
one  was  needed  for  a  database 
application.  “It  strikes  me  as 
somewhat  of  a  niche  mai^cet." 
be  said  of  the  upcoming  prod¬ 
ucts  from  Specifix. 

Joe  Poole,  technical  suppon 
manager  at  Boscov's  Depan- 


raenl  Store  LLC  in  Reading. 

Pa.,  said  his  organization  has 
no  need  for  such  services  be¬ 
cause  its  Linux  operating  sys¬ 
tems  are  “plain  vanilla"  as  de¬ 
livered  by  the  vendors.  “In  our 
case,  we  don't  have  the  time  to 
do  that  son  of  thing,  to  experi¬ 
ment  and  to  play  with  the  ker¬ 
nel,"  Poole  said.  "Wc  have  not 
come  up  with  anything  yet 
that  would  require  that.” 

However,  at  least  one  enter¬ 
prise  Linux  user  said  that 
while  such  help  may  not  be 
needed  very  often,  there  are 
cases  when  it  could  be  valu¬ 
able.  Such  a  service  could  I 
be  useful  in  situations  where  I 


Linux  doesn’t  perform  as  well 
as  Unix,  said  Mike  Prince.  CIO 
at  Burlington  Coat  Factory 
Warehouse  Corp.  in  Burling¬ 
ton.  N.J.  “In  those  cases,  hav¬ 
ing  somebody  out  there  that 
could  pick  up  the  support  on 
these  systems  might  actually 
be  an  asset."  he  said.  “I  think 
there’s  a  market  out  there  and 
it  is  indeed  an  issue.  1  think 
the  approach  is  very  rationaL" 
Leigh  Day.  a  spoi^woman 
for  Raleigh.  NX:.-based  Red 
Hat.  said  her  company  wel¬ 
comes  Specifix  to  the  market¬ 
place  to  help  serve  customers 
who  want  to  make  changes  to 
their  operating  system  soft¬ 
ware,  which  would  be  outside 
of  Red  Hat's  standard  support 
policies. 

“Red  Hat  ultimately  endors¬ 
es  choice  for  the  customer." 

Day  said.  “The  more  choices, 
the  better."  O  48213 


Microsaft  to  Link  Enterprise  Instant 
Messaging  Server  With  Rival  Networks 


8V  JUAN  CARLOS  REREZ 
AND  TODD  R.  WEtSS 

In  a  move  that  advances  in¬ 
stant  messaging  interoperabii 
ity.  Microsoft  Corp.  will  open 
up  communication  between 
its  enterprise  IM  server  and 
the  IM  networks  run  by  its 
MSN  division  and  by  rivals 
Yahoo  Inc.  and  America  On¬ 
line  Inc. 

Microsoft’s  live  Conununi- 
cations  Server  (LCS)  2005, 
due  to  ship  in  the  fourth  quar¬ 
ter.  will  allow  users  to  ex¬ 
change  instant  messages  with 
users  on  AOL  Instant  Messen¬ 
ger  (AIM).  Yahoo  Messenger 
and  MSN  Messenger. 

This  has  been  the  top  re¬ 
quest  from  our  corporate  cus¬ 
tomers.  They  have  told  us  that 
anything  we  could  possibly  do 
to  make  this  happen  would 
make  them  the  happiest,**  said 
Taylor  CoUyer,  Mkrosoft's 
senior  director  for  LCS. 

Graham  Lawloc,  chairman 
of  the  New  York-based  Finan¬ 
cial  Services  Instant  Messag¬ 
ing  Assodatioa  which  repre¬ 
sents  seven  WaU  Street  finan¬ 
cial  firms  working  to  promote 
IM  standards,  called  the  LCS 


1  release  “the  most  significant 
I  announcement  in  the  enter¬ 
prise  IM  industry  since  there 
was  such  an  industry." 

IM  is  critical  to  investment 
banks  for  trading,  sales  opera¬ 
tions  and  more,  he  said,  but 
the  challenge  ha.s  been  that 
users  have  had  to  run  multiple 
IM  clients.  Being  able  to  con¬ 
nect  users  to  all  three  of  the 
largest  IM  systems  using  LCS 
brii^  a  “fundamenial  sea 
change  in  the  industry."  Law- 
iorsaid. 

The  link  between  LCS  and 
the  three  IM  networits  will  be 
provided  through  add-on 
modules  that  will  be  sold  sep¬ 
arately,  Collyer  said.  Pricing 
for  the  modules  will  be  an¬ 
nounced  later  this  year. 

Representatives  from  AOL 
and  Yahoo  indicated  separate¬ 
ly  that  the  collaboration  with 
Microsoft  is  a  significant  step 
for  their  respective  IM  ser¬ 
vices  in  the  corporate  market. 

"Tliis  will  open  up  new  op¬ 
portunities  for  all  of  us."  said 
Brian  Curry,  senior  director 
of  AIM  network  services  at 
Dulles.  Va.-bascd  AOL 
Through  our  relationship 


with  Microsoft  LCS.  we  arc 
able  to  increase  the  distribu¬ 
tion,  usage  and  presence  of 
Yahoo  Messenger  while  pro¬ 
viding  our  users  with  a  secure, 
convenient  and  seamless  ex¬ 
perience."  Lisa  Mann,  senior 
director  of  Yahoo  Messenger 
at  Sunnyvale.  Calif.-bascd 
Yahoo,  said  in  a  statement. 

Bobert  Mahowald.  an  ana¬ 
lyst  at  market  research  com¬ 
pany  IDC  said  the  LCS  an¬ 
nouncement  will  change  the 
market  dynamics  for  compa¬ 
nies  such  as  IMlogic  Inc.. 
FaceTime  Communications 

Hnhe  pending 
LCS  release 
is]themostsigniF 
Kantaimounce- 
ment  in  the  enter¬ 
prise  IMindus^ 
since  there  was 
suchanindusby. 

SRAHAM  UWLOR  CHAIRMAN. 
FINANOAL  SERVICES  INSTANT 
MESSAGING  ASSOCIATION 


Inc.  and  Akonix  Systems  Inc., 
which  make  gateway  software 
that  lets  different  IM  clients 
interact.  They're  definitely 
going  to  have  to  sort  out  a  new 
role"  that  stresses  how  they 
can  help  customers  gain  con¬ 
trol  over  IM  use  for  compli¬ 
ance  with  log^g,  archiving 
and  other  regulatory  require¬ 
ments,  he  said. 

Francis  dcSouza.  CEO  of 
Waltham.  Mass.-based  IM¬ 
logic.  said  LCS  will  do  for  IM 
what  SMTP  did  in  solving  a 
bottleneck  for  c-mail.  “Vtfe've 
been  waiting  for  this  for  al¬ 
most  eight  years."  deSouza 
said-  TTus  is  very  exciting 
for  everybody." 

Dmitri  Shapiro,  co-founder 
and  chief  technology  officer 
of  San  Diego-based  Akonix. 
said  LCS  interoperability  will 
mean  “much  wider  adoption 
of  IM"  in  the  workplace.  Cus¬ 
tomers  will  stiD  want  Akonix 
to  provide  its  layers  of  man¬ 
agement.  security,  archiving 
and  auditing,  be  said,  even 
after  LCS  is  in  use. 

This  in  no  way 
our  business."  said  Shapiro. 
“This  dramatically  increases 
our  business." 

O48207 


Perez  writes/wthelDG  News 
Service. 


With  SAS*  software's  new  Intelligence  Platform,  you  can. 


Drive  the  value  of  your  investment  in 
operational  software.  Once  and  for  all. 


SAS  introduces  a  software  breakthrough  for  sharing  mission-critical  intelligence,  in  just  the  right 
context,  with  everyone  from  executives  to  knowledge  workets  And  for  increasing  the  value  of  your 
IT  investment  every  step  of  the  way-from  aggregating  and  ensuring  the  quality  of  data,  from  any 
source,  to  transforming  that  data  into  predictive  insight  using  the  world's  best  analytics.  Can  one 
intelligence  platform  truly  fit  all  your  needs,  within  IT  and  across  your  enterprise?  Let  us  prove  it. 
Call  toll  free  1  866  791  3183  or  visit  our  Web  site. 

www.sas.com/itbreakthrough 


SAS:9  ThefbwertoKncnM  ISsaa 
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NBC  Seeks  Network 
Stability  for  Olympics 


NBC  UiNvws^ATftTOlyiiwic 
Games  Broadcast  Setup 


Works  with  AT&T  on  six  redundant 
cx)nnections  for  feeds  from  Athens 


BV  MATT  HAMSLEM 

WHEN  NBC  Uni¬ 
versal  begins  its 
television  cov¬ 
erage  of  the 

summer  Olympic  Games  from 
Athens  next  roonth.  the  broad¬ 
casting  and  cable  TV  compa¬ 
ny  will  use  three  satellite  net¬ 
work  linkups  and  three  land- 
based  connections  to  ensure 
that  its  video,  audio  and  data 
transmissions  are  redundant. 

The  six  connections,  which 
were  set  up  by  AT&T  Corp., 
are  design^  to  ensure  99.99% 
reliability,  tH*  about  one  min¬ 
ute  of  downtime  per  week,  ac¬ 
cording  to  ofTiciais  from  the 
two  companies.  NBC  wilt  be 
able  to  send  live  feeds  from 
Greece  to  the  U.S.  over  all  six 
links  at  once  or  use  them  for 
separate  transmissions. 

"An  Olympic  event  is  a  one¬ 
time  event,  and  there  are  no 
do-overs,"  said  Bob  Kiraly,  di¬ 
rector  of  broadcast  and  tele¬ 
communications  operations  at 
NBC  in  an  Interview  from 
Athens  last  week.  “Everything 
we  plan  for  in  our  networks  or 
our  Athens  operations  center 
is  really  based  on  a  failure  sce- 
naria  You  certainly  can't  tell  a 
marathon  runner  that  you 
need  to  run  it  over  Ibecause  of 
a  network  issue)." 

Kiraly  added  that  the  six 
layers  of  network  redundancy 
are  accompanied  by  built-in 
systems  redundancy  at  NBC's 
on-site  network  operations 
center.  All  servers,  switches, 
routers  and  power  supplies 
have  one  or  two  backups,  he 
said. 

"We  have  to  be  very  careful 
bow  we  move  our  pictures 
back  and  forth,  because  that's 
our  product,"  said  Kiraly,  who 
arri^  in  Athens  in  May,  al¬ 
though  network  preparations 
for  t^  broadcasts  began  a 
year  aga  Kiraly  and  his  staff, 
uducb  he  wouldn't  number  for 


security  reasons,  will  work  12- 
bour  days  leading  up  to  the 
games  and  expect  to  be  on  the 
job  almost  around  the  clock 
during  the  17-day  event. 

From  Aug.  13  to  29,  NBC 
plans  to  carry  1,210  hours  of 
coverage  on  its  various  TV 
outlets  —  its  flagship  broad¬ 
cast  network  plus  MSNBC. 
CNBC.  Bravo,  USA  Network 
and  the  Spanish-language 
Telemundo.  Thai's  about  three 
times  the  aiimunt  of  coverage 
that  NBC  provided  Irom  the 
2000  Summer  Olympics  in 
Sydney,  Australia.  In  addition, 
fugh-defuiition  broadcasts 
will  be  offered  for  the  first 


time  from  several  Olympic 
venues. 

AT&T  is  helping  NBC  de¬ 
sign,  deploy  and  manage  the 
satellite  networks  and  land- 
based  circuits,  which  will  con¬ 
nect  to  NBC’s  facilities  in  New 
York  via  undersea  fiber-optic 
cables  owned  by  AT&T,  said 
Mike  )cnner.  the  vendor’s  vice 
president  of  enterprise  net¬ 
working  services.  NBC  and 
AT&T  have  an  eight-year  con¬ 
tract  to  broadcast  the  Olympic 
Games,  dating  to  2000.  Nei¬ 
ther  company  would  disclose 
its  value  or  what  it  will  cost  to 
set  up  and  operate  the  net- 
worits  for  the  Athens  games. 

Icnncr  said  part  of  the  chal- 
leirge  of  building  the  network 
to  Athens  was  arranging  in  a 
short  time  to  use  terrestrial 


nctMTOiks  owned  by  other  car¬ 
riers,  such  as  British  Telecom¬ 
munications  PLC  and  Athens- 
based  OTEGIobc.  AT&T  also 
had  to  set  up  cable  and  satel¬ 
lite  stations  in  both  Athens 
and  New  York  to  transmit  and 
receive  broadcast  feeds  (see 
graphic). 

Kiraly  said  there  have  been 
no  significant  problems  in 


building  the  Athens  network 
operations  center,  despite  re¬ 
ports  of  delays  in  the  con¬ 
struction  of  Olympic  venues 
and  focilities.  “The  people  of 
Athens  had  a  big  cl^lenge 
and  are  rising  to  it,"  he  said. 
“There  have  been  many  con¬ 
struction  issues,  but  1  have  yet 
to  see  anything  delivered  to  us 
late."  O  48184 


Quantum  Adds  Data-Protection 
Technology  to  Tape  Storage  Line 


WORM  capability 
will  prevent  data 
overwrites,  it  says 


8V  LUCAS  MEASUN 

(^uanttun  Corp.  today  plans  to 
announce  a  firmware  upgrade 
for  its  super  digital  linear  tape 
(SDLT)  products  that  will  cre¬ 
ate  a  wriie-once,  read-many 
capability  designed  to  help 
users  preserve  data  as  part  of 
regulatory  compliance  efforts. 

The  DLTIce  firmware  will 
be  available  tomorrow  via  a 
free  download  frinn  (Quan¬ 
tum’s  Web  site.  The  new  offer¬ 
ing  supports  the  San  )ose- 
based  company’s  SDLT600 
drives  and  SDLT  U  cartridges, 
its  latest  tape  technology.  But 
a  spokesman  said  (Quantum  is 
considering  the  idea  of  offer¬ 
ing  DLTTce  across  its  entire 
line  of  DLT  and  SDLT  devices. 

(Quantum  isn't  the  first  tape 
drive  vendor  to  embrace 
write-once.  read-many  tech¬ 


nology.  or  WORM.  Sony  Ck>rp. 
added  WORM  support  to  its 
Advanced  Intelligent  Tape  and 
Super  ATT  products  in  March, 
and  IBM  and  Storage  Technol- 
Corp.  offer  the  feature  in 
their  enterprise-class  drives. 

But  Sony,  IBM  and  Storage- 
Tek  require  u.sers  to  buy  new 
cartridges  that  are  preconfig¬ 
ured  for  WORM,  said  Robert 
Amatruda.  an  analyst  at  IDC. 
In  addition.  DLT  and  SDLT 
tapes  are  used  much  more 
widely  than  AIT  and  SAIT  de¬ 
vices  are,  according  to  Ama¬ 
truda.  He  said  Quantum’s 
technologies  accounted  for 
about  40%  of  the  $821  million 
market  for  midrange  tape  stor¬ 
age  last  year,  compared  with 
8%  for  Sony's  product  line. 

Tape  drives  that  support 
WORM  could  be  a  boon  for 
users  who  want  to  better  safe¬ 
guard  archived  data,  Amatru¬ 
da  added  “More  and  more 
companies  are  interested  in 
things  like  compliance  and  un¬ 


alterable  data  protection  prod¬ 
ucts."  he  said  “You  don’t  have 
to  buy  and  support  a  separate 
device  that  will  enable 
WORM  capability." 

Partners  in  Health  is  a 
Boston-based  nonprofit  orga¬ 
nization  that  does  medical  re¬ 
search  and  provides  free 
health  care  in  Latin  America, 
the  Caribbean,  Eastern  Europe 
and  the  U3.  Yusuf  Karacaoglu. 
the  organization's  MIS  and 
networking  coordinator,  said 
he’s  looking  forward  to  down¬ 
loading  OLTlce  to  help  pro¬ 
tect  patient  research  docu- 
menu.  which  he  backs  up  onto 
SDLT600  drives. 

Karacaoglu  currently  has  to 
use  a  separate  server  loaded 
with  software  from  Authenti- 
Date  Holding  Corp.’5  DocStar 
unit,  which  makes  a  scanning 
device  for  turning  paper  docu¬ 
ments  into  electronic  records 
that  can  be  stored  on  optical 
disks,  hard  drives  and  other 
storage  media. 


The  good  part  is  we 
don’t  have  a  lot  of  money  to 
spend  on  this  technology,  so 
fDLTIccI  meets  our  expecta¬ 
tions  at  the  moment."  Kara¬ 
caoglu  said.  The  E>ocStar 
system  informs  him  if  a  doc¬ 
ument  has  been  changed,  but 
it  doesn't  provide  WORM  ca¬ 
pabilities  that  prevent  data 
from  being  overwritten,  he 
added. 

DLTIce  lets  users  designate 
new  or  existing  tape  car¬ 
tridges  as  WORM  media  when 
they’re  being  initialized.  The 
firmware  then  creates  a 
unique  electronic  identifica¬ 
tion  number  for  each  tape  and 
blocks  any  overwrites  of  data. 
Quantum  said. 

TTve  technology  can’t  pre¬ 
vent  data  from  being  erased  or 
scrambled.  But  if  that  hap¬ 
pens.  the  identification  num¬ 
ber  is  still  stored  on  the  car¬ 
tridge,  revealii^  that  it  previ¬ 
ously  held  data,  the  company 
said.  048184 
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Senator  IntnxJuces 
Phishing  Bill 

Sm.  PUriek  iMhy  (0-Vt)  on  July 
9  Mroducod  (hi  Antf-PhisMng 
Act  of  2004.  which  would  dofirw 
pNtNngMifMtorsIcrimipun- 
nhiUs  by  up  to  fivo  yMTi  in  lilL 
Dm  ba  would  outiiw  thi  id  of 
ipoofing  a  WM  Shi  in  an  attempt 
to  "biduco.  rwpMSt.  ask  or  solicit 
any  psnon  to  transmit,  submit  or 
provids  any  moans  of  identHica* 
flon  to  another.* 


NetForensksWins 
Deal  With  DOE 

NstFofwics  Inc.  in  Edison.  N  J.. 
last  wosk  said  ths  U.S.  Ospart* 
msnt  of  Energy  wW  uss  its  nFX 
socurity  kifonnalion  mMagsmont 
softwars  to  monitor  about  400 
notwork  aoGurity  produeli  at  10 
PlaltonaiNueisarSacurityAdmin- 
istrtoionsitos.lhsdoalcemssaf’ 
terasMigefMgh'proflsaacwl* 
ty  gaflss  wMhin  ths  DOE  that  may 
hast  rssidted  in  teaks  of  sserst 
kiformatten  about  too  U.S.’s  mf 
ctearamnaL 


IBM  Opens  Dev 
Center  in  Taiwan 

BHMuiMliaMthKsrt 
Up  a  dSMiepnant  cantor  for  Ns 
iSarios  sorvan  ki  Tatemn  bi  order 
to  bo  etesar  to  TatwMwas  hwd- 
wara  mnidacturars.  Bn  said 
tha  sSartea  Tatwan  Dawlopmant 
Cantor,  which  Is  tha  firat  wch 
facKy  N  has  aatobishMl  outside 
tha  UJS..  wfl  play  an  bnportanl 
rote  in  hatebig  K  tauNd  doaar  rote' 
ttenaMpa  wbh  Ttowwaaa  hanh 
ware  main  tor  the  dawlopmant 
of  asrmrs  b«ad  on  procaaaors 
from  tetol  Corp. 


Short  Takes 

SAf>AeaepiMA2Itec.to 
bramten  Mm  data  nwmganwnt 
capMteaofiteNatWimar 
platfarm....SECUIKCOMPVT- 
MO  CORP.  rafactod  an  umoicitod 
bid  from  fteal  CybofOoard  Corp.. 
amtop  tha  after  woanl  in  the  bast 
■vnsB  m  ■wnnemars. 


Microsoft  Patch  Release 
Plugs  Two  Critical  Holes 


Microsoft  Monthly  Patch  Summary 


Mi  l  MQOIMiiHmksjidnn^  _ 
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Vendor  issues  total 
of  seven  patches 


•V  MUL  noBEirrs 

ICROSOFT  Corp. 
last  week  re¬ 
leased  seven 
security-  patches, 
two  of  which  fix  holes  that  the 
vendor  deemed  “critical"  be¬ 
cause  they  could  allow  remote 
attackers  to  take  control  of 
vulnerable  Windows  systems. 

The  software  updates  in¬ 
clude  fixes  for  previously  tin- 
known  boles  in  the  Windows 
operating  system,  including 
critical  holes  in  the  Windows 
Task  Scheduler  and  HTML 
help  features. 

Microsoft  also  published  a 
patch  for  a  recently  disclosed 
bole  in  the  Windows  Shell  ap¬ 
plication  programmii^  inter¬ 
face  (API)  and  fixed  a  hole  in 
older  versions  of  the  Internet 
Information  Services  (IIS) 

Web  server 

TTve  seven  updates  were  re¬ 
leased  m  accordance  with  the 
company's  monthly  patching 
schedule. 

One  of  the  two  critical 
patches  fixes  a  hole  in  Win¬ 
dows  Task  Scheduler,  a  Win¬ 
dows  component  that  lets 
users  schedule  commands. 


programs  or  computer  scripts 
to  run  at  specific  times.  A 
bufier-overrun  vulnerability 
in  the  Task  Scheduler  could 
allow  a  malicious  hacker  to 
place  and  run  attack  code  on 
vulnerable  systems. 

The  second  of  the  two  criti¬ 
cal  patches  fixes  two  more 
newly  discovered  holes  in  the 
Windows  HTML  Help  feature. 
One  hole,  in  a  component 
called  showHelp.  causes  an  er¬ 
ror  in  the  way  Windows  proc¬ 
esses  a  type  of  help  file  known 
as  a  CHM  file.  TT)e  second 
bole  affects  the  way  Windows 
checks  data  in  help  files.  It 
could  allow  an  anonymous 
user  to  set  up  a  Web  site  con¬ 
taining  code  designed  to  trig¬ 


ger  the  vulnerability. 

Microsoft  also  patched  four 
holes  rated  “important." 
which  indicates  that  exploita¬ 
tion  could  result  in  the  com¬ 
promising  of  data,  but  not  the 
creation  of  an  Internet  worm. 
In  MS()4-021.  Microsoft  issued 
a  patch  for  customers  using 
IIS  Version  4.0  and  Windows 
NT  4.0.  A  buffer-overrun  flaw 
fixed  by  that  patch  could  al¬ 
low  a  remote  attacker  to  take 
control  of  a  system  by  sending 
a  specially  crafted  message  to 
the  vulnerable  OS  server, 
causing  it  to  run  the  attacker's 
code.  Microsoft  said. 

Despite  being  rated  “impor¬ 
tant"  rather  than  “critical"  by 
Microsoft,  the  MS04-021  hole 


I  is  of  particular  concern  to  se- 
I  curity  expens  at  McAfee  Inc., 

I  according  to  Vincent  Gullono, 
vice  president  of  the  Anti- 
Virus  Emergency  Response 
Team  at  McAfee.  Like  the  vul¬ 
nerabilities  that  led  to  the 
Blaster  and  Sasser  Internet 
worms,  the  IIS  4.0  hole  could 
enable  malicious  hackers  to 
take  total  control  over  servers 
without  requiring  them  to 
trick  users  into  clicking  on 
a  link  or  visiting  a  Web  page, 
he  said. 

Limitefi  Scope 

The  fact  that  the  vulnerability 
aflTects  only  organizations  that 
use  Windows  NT  and  IIS  4.0 
limits  its  reach  somewhat, 
but  many  companies  still 
use  those  products  and  could 
fall  victim  to  an  attack,  said 
GuUocta 

McAfee  experts  are  also 
concerned  a!x>ut  the  show¬ 
Help  hole  plugged  by  MS04- 
023  and  the  Shell  API  hole 
fixed  by  MS04'024.  In  both 
cases,  proof-of-corwrept  code 
has  been  released  on  the  In¬ 
ternet  that  could  make  it  easi¬ 
er  for  Icss-sophbtkated  hack¬ 
ers  to  launch  attacks  targeting 
the  security  holes,  he  said. 

“IProof-of-concept  code) 
simply  increases  the  risk  that 
it  will  attract  attention  from  a 
virus  writer,  who  could  create 
something  quicker."  GuUotto 
said.  “It  just  ups  the  ante  for  a 
zero-day  attack."  O  49166 
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Trojan  Horse  Spreads  Via  Mass  Spam 
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wn  and  upHiKtale  maoiB  ol 
Oudock  araltnnm  to  afladi 
said  Matoym  SchWa.  sentof 
anlMInBneaidiatalMassaoa- 
Lals  Ud.  I,  Bkmcaslaf.  England. 

MaaaageLabs  ncamd  more 
dai  3.600  astral  messages  wdh 
Mo  lo  lie  Tralan  tansa  dudng  a 


and  they  otien  lun  unnolloed 
byiaetsorpoeeaBleoainato 
apoicallons. 

The  BadtdoorCOT  oraixam 
uaesa'muHslage'aMaclilo 
plaoa  raatdoua  coda  on  victims' 
cofflouleis.  AKer  dddno  on  an 
emal  Ink  ambeddad  Si  Ihe 


my  oompanw  last  week  SOM  out 
MmSigs  about  a  nm  Troian 
hoi»  program  that  they  darn.  Is 
bsSigmassdisOtuledonlheln- 
lemel  by  means  of  spam. 

Thei)iogam.cdMBack' 
doorCGT.  is  a  new  ksm  ot  a 
Tiojen  horse  that's  instaled  when 
usera  of  MkneoA's  Oudook 
amrall  pcoisam  fotkiwa  Mb  Ink 
embedded  Sr  an  emal  nresaage. 
The  TiiM<  horse  was  baia^  to 
have  Sdocted  lhauaands  of  ^yB' 
tem5  own  drouili  anIMroa  soft' 


twoHroui  pedod.  die  rest*  of  a 
spam  dfshtiSjon  that  WBS  more 
dan  10  fimas  the  nomai  amount 
locsuchaprognm.he8ald.Tro- 
M  horae  pro^ama  glv*  lamote 
allaekera  aocaaa  to  or  oonlipl 
oyer  naciilnes  on  which  day  nil. 


spam  mesaage.  vidlmo  go  to  a 
series  of  Mb  staa.  eeidi  ol 
whteb  canas  om  ooe  atage  a 
da  attack. 

The  attack  lakes  aduamagi  of 
a  nourpaldad  daw  a  Oudook 

ofaddaTRUreapkillto 


hkfoda  Mbsde  radkecdons 
from  da  uaw  and  aiendy  down¬ 
load  and  aaal  da  Backdoor- 
C6T  pngnai,  Sdapka  said. 

Mediae  aboiokaaed  an  at»l- 
any  about  da  new  Troian  horse, 
efilch  a  also  known  as 'SS,' but 
rated  t  a 'W  daaal  to  users. 
McAlae  has  tetoasad  sollwara 
updma  Mas  to  daleci  da  Ttolwi 
horae.  accordag  to  da  adyfsoty. 
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Hyper -Threading  Technology 
from  Intel.  It’s  all  about  productivity. 

There’s  no  magic  potion  to  get  a 
workforce  working  harder.  There  is, 
however,  the  power  of  PCs  built  upon  the 
Intel  Pentium  4  Processor  with  HT  Technology. 
Hyper-Threading  Technology  was  engineered 
to  let  users  run  two  applications  at  once.*  So  security 
services  can  run  in  the  background  while  users 
stay  productive.  To  help  your  company  do  more, 
visit  intel.com/business. 


iny. 


'look  lor  systems  with  the  Intel*  Pentium*  4  Processor  with  HT  Technology  logo  which  your  system  vendor  has  venfied  utilize  Hyper-Threading  Technology.  Performance  will  vary  depending  on  the 
specific  hardware  and  software  you  use.  See  htfoy/www.fotel.com/infai1iyperthreadingr  for  Information.  02004  Intel  Corporation.  Intel.  Intel  Inside,  the  Intel  Inside  logo,  and  Pentium  are  trademarl® 
or  registered  trademarks  of  Intel  Corporation  or  its  subsidiaries  in  the  United  States  and  other  countries.  All  rights  reserved. 
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Updated  Microsoft  Security  Road  Map 

At  last  October  s  Worldwide  f^rtner  Conference.  CEO  Steve  Ballmer  detailed  the  company’s  plans 
_ new  security  products  and  services.  Here’s  wtiat  happened. 


KliVEBED  ON  SCHEOULf  Intemel  Secunty  and  Accaleralnn  Seniw  2004:  shm  la  monthly  releans 
lot  neoememeocy  ealrdis;  saciirlty  seminars;  monthly  webcasts;  IT  Pro  Secura  Zdrm  online  site 


PRODUCT 

OMBilM.  PROJECTED 
SMPQATE 

CURRENT 

PROJECTKM 

WMnk  V  Savin  tak  2 

Fkst  half  0(2004 

August 

WbR— iMHMiSBitoilia, 

ivM  bmm  »  Whdm  UpiMb  Satvw 

RrslfMlfaf2004 

find  had  012005 

Sitfi  MantS  UMM  Ih  la  II  kMAn 

Flrsl  half  o( 2004 

Brsihtfof2005 

Sa>pSd<hlSmmhtnidMs: 

loM  opaUiir  nboM  iiinMzan) 

FnlhaBor2004 

Some  completed; 
some  m  progress 

«lt*ai  Sam  2001  SailnFniH 

Second  had  of 2004 

Second  had  of  2004 

nowcAdNawnUranPmSSoT'"*' 

Second  hadof 2004 

Second  hidi  of  2005 

Conhnued  from  page  t 

Microsoft 


ness  and  technology  unit,  at¬ 
tributed  the  delay  to  the  secu¬ 
rity-focused  Service  Pack  2  for 
Windows  XP.  Microsoft  an¬ 
nounced  last  week  that  SP2  is 
due  for  release  in  AugusL 
"The  key  issue  [with  WUS] 
is  that  our  updating  technok^ 
is  a  core  part  of  how  Windows 
XP  Service  Pack  2  is  going  to 
ship  "  Nash  explained.  That 
team  is  woridng  on  getting  SP2 
done,  and  as  soon  as  SP2  is 
done,  well  be  able  to  go  focus 
on  getting  Wmdows  Update 
Services  done —  You  can't  do 
the  two  in  paraUeL” 

Nash  cited  encouraging 
signs  that  the  initial  version, 
SUS,  is  seeing  greater  usage. 

At  last  year’s  partner  confer¬ 
ence.  when  attendees  were 
asked  if  they  used  SUS.  the 
vast  maiority  of  hands  stayed 
down.  This  week,  the  number 
of  raised  arms  was  noticeably 
higher.  Nash  said  that  jibes 
with  statistics  showing  that 
some  112.000  unique  servers 
connect  to  Microsoft  each  day 
10  check  for  content  using  SUS. 

WUS  is  currently  available 
as  a  private  beta.  A  ptd>lic  beta 
is  due  toward  the  end  of  the 
year,  said  Gytis  Barzdukas.  a 
director  of  product  manage¬ 
ment  at  Microsoft. 

WUS  can  be  used  lo  patch 
not  only  Windows  but  also  Of¬ 
fice,  Exchange  and  SQL  Server. 
Unlike  SUS  IJ).  it  lets  users  tar¬ 


get  specific  computers,  get  ba¬ 
sic  reports  and  download  only 
changed  patch  bits. 

Russ  Cooper,  senior  scien¬ 
tist  at  TVuSecure  Corp.,  a  Mi¬ 
crosoft  Gold  Certified  partner 
in  Herndon,  Va..  said  he's 
bothered  by  the  delays,  but  he 
also  recognizes  that  Microsoft 
must  take  as  much  time  as  it 
needs  to  get  the  security  up¬ 
dates  right  '^Considering  how 
dramatic  this  all  is.  they’d  bet¬ 
ter  not  screw  up."  be  said. 

"When  1  hear  'delay'  when  it 
comes  to  sectirity.  I  intuit  they 
need  to  work  on  it  before  they 
feel  comfortable  sending  it 
out."  said  Bob  Crownhait.  di¬ 
rector  of  infrastructure  at  Pre- 
mera  Blue  Cross  in  Mountlake 
Terrace,  Wash.  "And  to  me. 
that’s  good  news.  That’s  less 
painful  than  if  they  put  out 
something  that  wasn’t  ready 
for  prime  time." 

Like  WUS.  the  Microsoft 
Update  service  that  Ballmer 
said  would  be  ready  by  now  is 
being  delayed  to  the  first  half 
of  next  year.  Nash  said.  Micro¬ 
soft  Update  is  a  single  place 
on  the  company's  Web  site 
where  patches  for  all  of  its 
products  will  be  available. 

Another  delayed  oftering  is 
Microsoft’s  Network  Access 
Protection  technology.  IT  ad¬ 
ministrators  will  be  able  to  use 
it  to  set  policies  to  determine 
whether  users  have  updated 
patch  and  antivirus  protection. 
If  the  machines  aren’t  compli¬ 
ant,  administrators  can  re¬ 
strict  network  access  and  use 


tools  to  make  sure  they  are 
updated. 

When  Microsoft  discussed 
the  technology  in  the  past,  it 
referred  only  to  the  ability  to 
quarantine  remote  users  in  vir¬ 
tual  private  networks  (VPN), 
according  to  Steve  Anderson, 
director  of  Windows  server 
marketing.  Network  Access 
Protection  technology  will  be 
more  broadly  applicable  to  any 
type  of  connection,  he  said. 

Network  Access  Protection 
is  due  lo  ship  in  the  second 
half  of 2005  with  the  update  to 
Windows  Server  2003.  code- 
named  R2.  But  one  systems 
management  analyst  at  a  Cali- 
fomia-based  health  insurer, 
who  asked  not  to  be  named. 


said  his  company  primarily 
uses  Windows  2000  Server 
and  would  find  it  helpful  if  Mi¬ 
crosoft  also  made  the  technol¬ 
ogy  available  for  that  operating 
system.  “A  lot  of  shops,  includ¬ 
ing  ours,  will  not  see  Windows 
Server  2003  for  probably  a 
couple  of  years,"  he  said 
Microsoft  plans  to  publish 
the  API  and  turn  it  over  to  a 
standards  body,  but  it  hasn't 
determined  which  one.  Ander¬ 
son  said.  More  than  25  of  Mi¬ 
crosoft’s  partners,  including 
Computer  Associates  Interna¬ 
tional  Inc,  McAfee  Inc  and 
Symantec  Corp^  announced 
supi>oit  for  Network  Access 
Protection.  A  notable  no-show 
was  Cisco  Systems  Inc^  but 


Anderson  said  Microsoft 
hopes  to  reach  an  agreement 
with  Cisco  soon. 

Also  last  week.  Microsoft 
announced  the  on-time  deliv¬ 
ery  of  its  Internet  Security  and 
Acceleration  Server  2004.  an 
application  firewaU.  VPN  and 
Web  cache  product  But  it 
hasn’t  seen  wide  corporate  us¬ 
age  to  date.  "Most  large  com¬ 
panies  are  looking  for  indus¬ 
trial-strength  solutions."  said 
one  IT  manager,  who  asked 
not  to  be  named.  O  48208 
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Computerworid  Executive  Bulletin 

All  Roads  Lead  to  IP 


To  CONSUMERS.  IP  telephony  means  making  cheap  long¬ 
distance  phone  calls  over  the  Internet.  But  for  corpo¬ 
rate  America,  the  convergence  of  voice,  video  and  data 
on  a  single  IP  network  is  much  more.  It’s  a  dramatic 
new  way  of  thinking  about,  and  managing,  communications, 
with  voice  traffic  acting  like  any  other  packet  on  the  network 
and  telephones  acting  as  just  another  network  client. 


Converged  IP  networks  allow  for  a 
wide  variety  of  new  applications  to 
ride  on  the  network  and  interact,  in¬ 
cluding  IP  telephony,  audioconferenc¬ 
ing.  videoconferencing,  unified  mes¬ 
saging  and  presence  technologies 
(like  chat). 

Getting  SUuled 

Corporate  America  is  just  starting 
down  the  road  to  voice-over-IP 
(VoIP)  communications,  though 
every  analyst  says  it's  just  a  matter  of 
time  before  it  becomes  mainstream. 
"By  2009,  the  installed  base  of  IP 
[communications)  equipment  will 
dominate  the  enterprise  landscape, 
but  (hat’s  still  a  few  years  away,"  says 
Robert  Rosenberg,  president  of  In¬ 
sight  Research  Corp.  in  Boonton.  N.). 

There  are  several  reasons  why  VoIP 
hasn’t  been  an  ovemiglu  success.  Com¬ 
panies  started  testing  the  waters  of 
VoIP  in  2001,  but  there  were  serious 
concerns  about  voice  sound  quality 
that  slowed  the  momentum  (those  con¬ 
cerns  have  been  largely  reserved). 
Moreover,  one  of  the  key  reasons  for 
implementif^  VoIP  was  to  reduce  the 
long-distance  charges  associated  with 
the  traditional  phone  networks,  yet 
those  charges  have  dropped  so  1^  that 
those  cost  savings  are  less  dramatic. 

The  cost  of  IP  phones  is  another 
reason  for  the  slow  pace.  "The  cost  of 
going  VoIP  is  certai^y  a  factor  here, 
since  the  price  of  newer  IP  phones 
will  continue  to  be  about  25%  higher 
than  the  [traditional)  alternative." 
Rosenberg  says. 

"VoIP  never  was  and  never  will  be 


the  least  expensive  way  to  deliver 
voice  to  the  enterprise,  but  the  allure 
of  VoIP’s  rich  applications  like  video 
telephony  will  slowly  convert  legacy 
customers,"  he  adds. 

Indeed,  there  are  a  variety  of  reasons 
for  moving  to  a  converged  IP  network. 
Users  report  benefits  such  as  the  fol¬ 
lowing: 

■  Much  Irnwr  costs  for  audioconfererwing. 
■The  ease  of  moving,  adding  and  chang¬ 
ing  phones. 

■  The  Met  that  the  rr  staff  can  manage  a 
singM  network  infrastnicture  out  of  the 
data  center,  instead  of  two  or  more  very 
different  networks. 

Thumbs  Up 

Early  users  are  giving  a  thumbs  up  to 
converged  networks,  saying  their  tech- 
nol<^  choices  have  saved  nmney  and 
made  their  voice  communications  se¬ 
tups  more  flexible.  Some  implement 
pure  VoIP  systems,  while  otters  rely 
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on  a  hybrid  of  IP  and  circuit-switched 
technologies.  Either  way.  the  users  say 
they're  realizing  greater  efficiencies 
just  by  starting  to  merge  their  voice 
and  data  networks. 

IBM.  for  example,  is  rolling  out  a 
global  VoIP  network  over  the  next  five 
years  that’s  expected  to  cut  voice/data 
communications  costs  by  25%.  ac¬ 
cording  to  Fred  Spuleck,  director  of 
global  voice  infrastructure  at  IBM. 

One  efficiency  will  come  from  lower¬ 
ing  the  number  of  IBM's  private 
branch  exchange  (PBX)  switches  from 
the  current  count  of  about  900  to  just 
11  IP-based  PBXs.  Spuleck  says. 

Pure  VoIP  supporters  say  their  sys¬ 
tems  are  more  resilient  and  can  more 
easily  support  video  or  voice  confer¬ 
encing  as  well  as  new  data  applica¬ 
tions.  For  example.  IBM's  new  VoIP 
network  will  allow  easy  creation  of  an 
audioconferencing  system  that  will 
cut  the  company’s  annual  costs  for 
i  that  capability  in  half.  Spuleck  says.  A 
VoIP  project  at  SouthTrust  Bank  in 
Birmingham,  Ala.,  will  save  $1  million 
annually  on  conference  calling  alone 
and  "several  million  dollars”  overall, 
says  Stanley  Adams,  the  bank’s  group 
vice  president  of  network  services. 

On  the  other  hand,  users  of  hybrid 
systems  say  they  want  to  hold  on  to 
the  value  of  large  investments  in  time 
division  multiplexing  (TDM)  switch¬ 
es.  and  they  suggest  that  a  hybrid  net¬ 
work  would  provide  a  backup  if  a  ma¬ 
jor  virus  or  other  security  incident  af¬ 
fected  their  data  networks. 

GMAC  Commercial  Holding  Corp. 
in  Horsham.  Pa.,  has  adopted  a  hybrid 
approach  that  relies  on  older  TDM 
switches  but  also  provides  IP  telepho¬ 
ny  capabilities  configured  on  top  of  a 
Multiprotocol  Label  Switching  serv¬ 
ice  to  106  locations  globally,  says  CIO 
Niraj  Patel.  The  annual  costs  should 
be  5%  to  10%  less  than  GMAC  Com¬ 
mercial  Holding’s  previous  system, 
with  last  year’s  savings  amounting  to 
S120.000.  he  says. 

But  hybrid  implementations  arc 
just  a  temporary  phase  in  the  evolu- 
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People  Issues 

WHUWBBQMES  MORE  popular, 
sorne  IT  managers  are  wresting  witt^ 
process  of  meiging  their  tistcxic^ 
separate  voiw  and  data  corranunicatim 
staffs. 'Every  day  I  feel  ire  firing  some¬ 
body.'' says  a  fnstrated  fT  manager  who 
works  at  a  truidna  and  transportation  co^ 
glomerate.  She  sqs  an  ongoing  effort  to 
Mend  voice  and  data  sfoffs  has  led  to  fre¬ 
quent  battles  arnong  vwrkers  over  their 
roles  in  the  combined  unH 
But  it  can  be  done.  Ts  working  out  for 
(jB.'sa)sOaMdSe«r.managercifcomnu- 
nic^  technology  services  at  PPL  Ser¬ 
vices  (>Np.  an  energy  ullty  to  AkntCM^ 
PPL  started  pfanriing  for  voice  and  data 
convergence  about  sn  years  aga  so  I  had 
tine  to  sort  through  picderns  and  plan 

tion  of  IP  communications.  Most  new 
enterprise  voice  systems  purchased 
over  the  next  several  years  will  be  IP- 
based,  according  to  ABI  Research  in 
Oyster  Bay,  N.Y.  The  research  firm 
says  that  by  2006. 90%  of  all  new  IP 
phone  systems  shipped  will  be  pure 


cai^uly,hesay5.Si)dyernployeesw4Kifor‘ 
merty  were  decicatod  to  eito  voice  or  data 
n^works  now  work  together  to  hande  al 
types  of  cornmunicaiorB  needs  to  three  in- 
te(yded  groups;  tofiasbuctiie  and  plan¬ 
ning.  appIcaGon  desiga  and  operations. 

(Md  \fon  Eforen.  presideri  of  Van¬ 
guard  toraruicalions  Corp,  a  consdttog 
ftontoM(]ntoPlains.NJ..saystoecomplex- 
ily  of  combtotog  voice  and  data  staffs  is  a 
big  ooncem. ‘The  heritage  d  (to  and  voice 
guys  is  just  ciforenL’ he  says.  1fs  to  the 
ONA.“ 

Van  Boren  says  that  an  oiqarfeional 
struct^  sinlv  to  PPL's  is  an  effoctive  way 
to  start  wtti  stafteis  assiitoed  to  support 
the  neivnik  tobestructure,  aitolica^ 
daAtos  such  as  phones  and  PCs. 

IP,  not  hybrids. 

In  most  cases,  corporate  IT  man¬ 
agers  are  opting  to  install  VoIP  in 
small  pilot  programs  at  branch  offices 
or  new  locations.  (Plus.  PBXs  general¬ 
ly  have  a  seven-  to  15-year  life,  so  com¬ 
panies  often  wait  until  their  PBX  sys¬ 


tems  die  before  they  move  to  VoIP.) 

“TTie  cost  of  IP  (tel^hony)  is  justi¬ 
fied  only  when  you  start  something 
new.  not  as  a  replacement.”  says  Geir 
Ramleth,  CIO  at  engineering  and  con¬ 
struction  group  Bechtel  Corp. 

Rermuning  Challenges 

VoIP  technology  is  still  more  difficult 
to  implement  than  the  vendors  would 
have  you  believe.  IT  managers'  top 
concerns  include  the  followit^ 

■  Management  tools.  VoIP  requires 
special  tools  and  skills  because  voice 
traffic  is  far  more  sensitive  than  data 
to  common  problems  such  as 
dropped  or  delayed  packets. 

■  Reliability.  When  an  employee  picks 
up  the  phone  —  whether  it's  the  CEO 
or  a  sales  rep  —  he  expects  a  dial  tone. 

■  Security.  Placing  voice  traffic  on 
the  IP  network  means  that  VoIP 
could  be  subject  to  the  same  sorts  of 
security  attacks  that  plague  today's 
data  networks. 

This  report  provides  advice  — 
from  your  peers  —  about  the  costs 
and  benefits  of  IP  communications, 
as  well  as  how  to  solve  those  manage¬ 
ment  and  security  issues. 


Voice-over-IP  will  dominate  the  enterprise  In  the  next 
few  years  -  are  you  ready?  It’s  a  dramatic  change,  but 
Computerworid’s  new  Executive  Bulletin  on  IP 
Communications  will  help  you  get  there!  Early  adopters 
are  already  saving  millions  of  dollars.  Get  this  report  to 
learn  the  new  lingo  and  obtain  advice  from  your  peers  on 
hot  topics  such  as  monitoring  tools,  security  and  ROI. 

For  a  limited  time,  get  this  full  report 

(a  S49.95  value),  for  free  compliments  of  Cisco. 

www.camputerworid.com/ipbulletin 


O  QuickLink  to  a4700 


COMPANIES  THAT  PUT  VOICE  ON  THE 
NET^RK  CHOOSE  THE  COMPANY 
THAT  BUILT  THE  NETWORK. 

When  voice  joins  data  on  a  secure  network,  some  remarkable  things  can  happen.  Instead  of  managing  different  flavors  of 
PBX  from  location  to  location,  you  can  handle  everything  from  one  place,  saving  time  and  money— not  to  mention  mileage  on 
IT  staff  shoes.  And  with  over  20  years  of  proven  networking  experience,  Cisco  has  become  the  standard  for  millions  of  voice 
IP  users  around  the  world.  It's  why  over  half  of  the  Global  500  have  chosen  Cisco  to  rethink  the  way  they  handle  voice.  And 
their  business.  Are  you  in  yet?  To  learn  how  Cisco  can  help  you  plan,  design  and  implement  an  end-to-end  IP  solution  visit 
cisco.com/go/ipcnow  NOW,  OVER  THREE  MILUON  PEOPLE  ARE  USING  CISCO  IP  PHONES. 


Got  Questions  About 
Network  Consolidetion? 

Computerworld’s  IT  Executive  Summit  Has  the  Answers 


If  you’re  an  IT  executive*  in  an  end-user 
organization,  apply  to  attend  Computerworld’s 
upcoming  complimentary  half-day  summit 
on  Network  Consolidation. 

CIOs  and  senior  IT  executives  are  finding  that 
consolidating  high-performance  networks  can 
play  a  key  role  in  improving  business  applica¬ 
tion  performance  while  significantly  reducing 
operational  costs. 

The  proliferation  of  network  capacity  and  relat¬ 
ed  storage  and  server  infrastructure  presents  a 
daunting  challenge  for  todaty’s  enterprises, 
many  of  w^ich  are  positioning  therroelves  for 
growth  yet  still  seeking  to  reduce  IT  costs 
where  feasible. 

By  leveraging  the  knowledge  of  industry 
experts  and  the  real-world  experience  and 
advice  of  your  IT  peers,  this  IT  Executive 
Summit  will  provide  an  overview  of  effective 
strategies  for  consolidating  and  connecting 
networks  and  data  center  applications. 

•Compiimentary  registration  is  restricted  to 
qualified  IT  executives  only. 

Apply  for  registration  today 

For  more  information  or  to  apply,  visit 
www.itexecutivesummit.com/nc 


Streamlining  Networks  and  Data  Centers; 

The  Business  Benefits  of  Consolidation 

San  Francisco  •  August  5,  2004 

San  Francisco  Four  Seasons  Hotel  •  757  Market  Street 
7:45am  to  8 15am  Registration  and  Networking  Breakfast 
8 15am  to  8:45am  Rebuilding  the  IT  Foundation 

Maryfran  Johnson.  Editor  in  Chief  Comouferworid 

8;45am  to  9:15am  Consolidation  and  the  Data  Center: 

Boosting  Business  Performance 
and  Application  Availability 

Matt  Easfwooa.  Researcn  Director.  Glotiai  Enteronse 
Server  Sokitiohs  IOC 

9;15am  to  9:45am  Perspectives  from  the  Chicago 
Mercantile  Exchange 

Steve  Goldman,  Director.  Network  Architecture 
Chicago  Mercantile  Exchange 

9:45am  to  lO  ISam  Refreshment  and  Networking  Break 
10.15am  to  10:45am  User  Case  Study 

Alejandro  Lopez  System  Architect.  Unrversrty  ol  Catifomwi 
Davis  Medical  Center 

10  45am  to  11:15am  Customer  Challenges  and  Solutions: 

Real-Life  Scenarios  Connecting  Data 
Centers  Over  Distance 

Steve  Adolph,  CTO.  Enterprise  Solutions  Group.  GENA 

11:15am  to  noon  Overcoming  Management  Barriers  - 

Making  the  Case  for  Consolidation 

Ffenel  Moderator  Maryfran  Johrjson,  Editor  «n  Chef 
Computerworld 

^neiists  Joe  Puglisi.  CIO.  EMCOR.  Stephen  Monn  QO 
TAC  Worldwide.  Frank  Enfanio.  Vice  PresKJent  Operations 
L^ivery  &  Information  Securrty.  Blue  Cross  Blue  Shield  of 
Massachusetts,  Alejandro  Lopez,  System  Architect 
University  of  California  Davis  Medical  Center 


Selected 

speakers 

include: 


Maryfran  fohnson 

Uttor  in  Outf, 

ComputerworU 


9:45am  to  10:15am 
10:15am  to  10:45am 


10  45am  to  11:15am 


11:15am  to  noon 


Steve  Goldman 
limctor.  NemoHc 
Arcitturtun. 
Chicago  hltrearmlr 
Bxckvigr 

m 

;  Alejandro  Lopez 
System  Ardurcer. 
t/niverairy  of 
Cal^amiaDara 
Medkol  Cmfer 


Steve  Adolph 
CTOl  Enterprife 
SohiUoHt  Group. 
CIESA 


Glabal  Enterprise 
Server  Solutions, 
IDC 


This  program  will  also  take  place  in:  Chicago  •  August  25.  2004 

Dallas  •  September  22.  2004 
For  more  mformation  on  these  locations,  caK  888-299-0155 
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MARYFRAN  JOHNSON 


Stone  Soup  Season 


The  WORD  summertime  used  to  have 

such  a  relaxing  sound  to  it,  conjuring  up 
images  of  sunshine,  seashores  and  a 
slower  pace  to  everything.  But  for  IT 
executives  —  especially  those  at  compa¬ 
nies  with  fiscal  years  beginning  Oct.  1  —  high  sum¬ 
mer  has  come  to  mean  high-anxiety  budget  time. 


I  think  of  it  as  stone 
soup  season. 

Remember  the  old  fa¬ 
ble  about  stone  soup?  It's 
the  story  of  a  wandering 
peddler  who  arrives  in  a 
starving  village  with 
nothing  but  a  stone  in  his 
pocket  and  a  hopeful 
plan.  (Picture  a  CIO  at 
budget  time,  dressed 
down  for  casual  Friday.) 

By  investing  the  stone 
(IT)  with  magical  pow¬ 
ers,  he  coaxes  the  suspicious  vil¬ 
lagers  (business  execs)  into  con¬ 
tributing  enough  meat  and  vegeta¬ 
bles  to  the  soup  pot  so  that  a  deli¬ 
cious  meal  (market  success  and  prof¬ 
its)  is  ultimately  created. 

Inspiring,  isn’t  k?The  moral  Ls 
that  the  greater  good  is  served  when 
everyone  contributes  a  little  some¬ 
thing.  But  as  IT  heads  into  its  fourth 
budget  year  since  the  dot-com  crash, 
the  soup  still  looks  mighty  thin.  No¬ 
body  believes  the  stone  has  much 
magic  left.  Even  at  the  world’s  rich¬ 
est  and  most  powerful  software  com¬ 
pany.  Microsoft  CEO  Steve  Ballmer 
ju-st  warned  employees  about  his 
plan  to  slice  SI  billion  in  expense.s  to 
“avoid  severe  measures  later." 

Also  last  week,  a  half-dozen  soft¬ 
ware  vendors  warned  about  faltering 
revenues  as  a  result  of  IT  spending 
slowdowns  (“Purchasing  Delays 
Clause  Software  Sales  Shortfalls," 
(^lickUnk  48066).  Anticipated  or¬ 
ders  never  materialized  for  compa¬ 
nies  such  as  PeopleSoft.  Computer 
Associates,  BMC  Software,  Veritas 
Software  and  FUeNet.  MiUion-doUar 
deals  shrank  to  more  modest,  six-Hg- 


ure  sales.  All  of  those  up¬ 
beat  a^lyst  predictions 
of  IT  spending  growth  in 
2004  now  seem  to  be  talk¬ 
ing  abMt  some  other  in¬ 
dustry.  “1  haven’t  seen  any 
increase  in  spending  on 
our  end,"  said  one  net¬ 
work  director  we  quoted. 
“People  are  asking  more 
questions  about  the 
s|>ending  that's  going  on." 

At  the  federal  govern¬ 
ment  level,  where  the  IT 
spending  growth  rate  has  averaged 
up  to  10%  annually,  the  brakes  are 
also  being  applied.  This  week  in 
our  News  section,  we  report  that 
research  firm  Datamonitor  predicts 
that  growth  in  federal  IT  spending 
will  drop  to  4%  annually  over  the 
next  five  years. 

Another  area  of  much-anticipated 


spendii^  has  been  in  regulatory 
compliance,  as  companies  fall  in  line 
with  Sarbanes-Oxiey  financial  re¬ 
porting  rules  and  other  laws  govern¬ 
ing  data  security  and  customer  priva¬ 
cy  protection.  But  another  News  sto¬ 
ry  reports  that  compliance  activities 
are  actually  slowing  down  new  sys¬ 
tems  installations  in  the  fourth  quar¬ 
ter  rather  than  adding  to  the  pot. 

Stone  soup  season  seems  to  bring 
about  happier  endings  in  places 
where  more  sophisticated  IT  gover¬ 
nance  practices  have  united  IT  and 
the  business  in  budget  planning 
and  goal-setting.  In  a  special  News 
report  last  week  ("IT  Governance  Is 
on  the  Hot  Scat,"  (^ickLink  48025). 
we  examined  companies  such  as  All¬ 
state  Insurance,  State  Street  and 
Wyeth,  where  high-level  steering 
committees  are  making  a  difference. 
Unfortunately,  this  trend  is  growing 
slowly,  and  surveys  indicate  that 
most  businesses  like  the  governance 
idea  but  find  the  work  required 
unappetizing. 

Despite  some  rosy  analyst  predic¬ 
tions  and  high  hopes  from  industry 
players,  I  think  stone  soup  will  still 
be  on  the  menu  for  2005. 1  wonder  if 
we  ll  ever  get  used  to  the  taste  of  it. 
04BT79 
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PIMM  FOX 

Hang  Up 
On  Congress 

The  government 
ought  to  get  out  of 
the  telecommunica¬ 
tions  business. 

As  far  as  I  can  tell,  the  U.S. 
government  has  botched 
every  initiative  to  regulate, 
deregulate  and  legislate  how 
telephone  calls  ought  to  be  made.  Sure, 
it  m^es  sense  that  everyone  should 
have  a  phone.  But  I  don’t  think  it's  the 
government's  business  to  levy  univer¬ 
sal  service  fees  on  vo»ce-ovcr-IP 
providers  as  pan  of  its  decades-old 
campaign  to  ensure  that  low-income 
and  rural  Americans  have  analog 
phone  service. 

But  that's  exactly  what  will  happen  if 
a  bill  introduced  in  Congress  earlier 
this  month  to  regulate  Internet  phone 
providers  becomes  law. 

VoIP  calls  are 
gaming  in  popularity 
as  companies  such  as 
Skype  ’Technologies 
SA  in  Luxembourg 
offer  free  downlo^ 
of  their  telephony 
software. 

The  move  by  Con¬ 
gress  would  make 
the  VoIP  sector  ad¬ 
here  to  a  host  of 
rules  on  privacy, 
bUling  and  fraud. 

That  just  doesn’t  make  sen.se. 

VoIP  calls  are  basically  free,  so 
there’s  no  billing. 

The  Skype  service  is  encrypted  and 
uses  public/private-key  security  fea¬ 
tures.  so  making  a  VoIP  call  carries  the 
same  level  of  risk  as  using  encrypted 
e-mail  programs. 

And  as  for  fraud  —  well,  when  Con¬ 
gress  can’t  stop  spam  from  hitting  the 
Internet,  it's  a  little  disingenuous  for 
lawmakers  to  say  they  can  protect  us 
from  ourselves  while  we  use  the  Inter¬ 
net  to  make  calls. 

Almost  3  million  people  are  using 
broadband  connections  to  make  phone 
calls,  and  businesses  are  getting  ag¬ 
gressive  in  replacing  their  traditional 
voice  networks  with  VoIP. 

So  why  would  our  representatives  in 
Congress  regulate  a  nascent  industry 
that  can  finally  challenge  the  domi- 
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nance  of  traditional  carriers?  Because 
they  can.  and  because  they’re  annoyed 
that  some  area  that  they  could  regulate 
might  slip  through  their  fingers. 

Past  efforts  at  regulating  the  tele¬ 
communications  arena  were  supposed 
to  give  us  lots  of  choices,  lower  prices, 
letter  service  and  a  vibrant,  competi¬ 
tive  market.  What  we  have  instead 
are  a  few  r^^onally  dominant  players, 
complicated  billing  structures,  a  pric¬ 
ing  mess  and  mediocre  technology, 
particularly  in  the  mobile  phone 
business. 

Members  of  the  Subcommittee  on 
Teleconuminications  and  the  Internet 
of  the  U.S.  House  of  Representatives 
are  already  lining  up  on  the  issue  of 
regulating  the  VoIP  industry.  After  all, 
this  is  a  big  dectioo  year. 

The  senior  Democrat  on  the  panel. 
Rep.  Ed  Markey  of  Massachusetts,  is  in 
favor  of  regulating  VoIP  services,  and 
Rep.  John  Oingell  (D-Mich.)  attacked 
the  rcc  for  its  February  ruling  that 
VoIP  wasn’t  subject  to  regulations  gov 
eming  telephone  calls. 

TV  FBI.  the  justice  Department  and 
the  IVeasury  are  getting  into  the  act 
The  G-men  want  the  ri^t  to  tap  your 
VoIP  caUs.  and  the  IRS  and  Treasury 
are  weighing  whether  a  3%  excise  tax 
should  be  reinterpreted  to  apply  to 
VoIP  services. 

You  have  to  hand  it  to  the  govern¬ 
ment.  Once  it  gets  a  little  power,  it 
feels  the  need  to  regularly  exercise  it. 

But  rather  than  doing  all  this  muscle- 
flexing.  maybe  the  politicians  should 
install  VoIP  in  goverament  offices  that 
don’t  need  extra-tight  security.  Imag¬ 
ine  the  savings! 

Oh.  but  I  forgot,  it  isn't  their  money 
anyway.  O  48040 

MICHAEL 

GARTENBERG 

No  Turning 
Back  From 
Digital 

I  RECENTLY  READ  a  col¬ 
umn  in  which  the  author 
lauded  the  use  of  paper 
over  digital  technology.  Paper, 
he  pointed  out,  was  persis¬ 
tent,  ubiquitous  and  never, 
ever  crashed  IMgital  technology,  be 
argued  was  uordlaUe.  so  he  had  re¬ 
placed  hb  Palm  and  odwr  gad¬ 


gets  with  analog  versions. 

In  an  age  when  my  cell 
phone  needs  to  be  rebooted 
on  occasion  and  my  car  re¬ 
cently  needed  to  go  back  to 
the  dealer  to  get  a  software 
patch  to  fix  some  bugs.  I 
found  myself  in  agreement 
—  for  all  of  about  two  sec¬ 
onds.  that  is. 

Are  there  problems  with 
the  digital  lifestyle?  Of 
course  there  are. 

In  the  years  that  I  used  a 
typewriter,  1  never  lost  as 
much  as  a  word  of  text  to  a 
system  crash.  However,  re¬ 
arranging  even  a  small 
amount  of  text  was  a  major 
exercise  and  often  led  to  re¬ 
typing  entire  sections,  if  1 
did  it  at  all  It  was  impossi¬ 
ble  to  outline  a  draft  and 
then  integrate  it  into  the  body  of  the 
text  There  was  no  spell  check  or  the¬ 
saurus  integrated  directly  with  the 
written  content 

In  the  end  the  benefits  of  the  digital 
word  processor  fer  ourwei^ied  what¬ 
ever  inconveniences  it  may  have 
caused.  Today,  the  typewriter  (whose 
own  introduction  caused  some  to 


lament  the  supplanting  of 
the  harvdwritten  word)  is  a 
rare  bca.<u  to  find  in  every¬ 
day  use. 

Likewise,  the  venerable 
spreadsheet  has  usurped 
the  ledger  book,  the  desk¬ 
top  publishing  program  the 
pasteboard  and  the  presen¬ 
tation  program  the  35mffl 
slide  show.  All  offered  fea¬ 
tures  and  benefits  that 
went  well  beyond  the  aiu- 
log  versions,  and  they  were 
adt^ed  in  droves. 

The  problem  today  b 
that  few  vendors  are  good 
at  explaining  the  benefits 
of  new  distal  technology 
over  analog.  Why  carry  a 
handheld  organizer  or  a 
Pocket  PC  if  you’re  only 
going  to  use  it  for  your 
to-do  Ibt.  making  the  digital  tool  noth¬ 
ing  more  than  a  hi^-teeb  notepad? 
There  are  lots  of  reasons,  but  if  users 
don't  understand  them,  they  will  never 
adopt  the  technology. 

The  same  communication  issues 
hold  true  for  those  of  us  deploying 
new  technology  to  others.  We  need  to 
careftaiy  explain  the  benefits  of  digital 
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1  over  analog  and  show  where  the  tech¬ 
nology  not  only  improves  the  old  expe- 
j  rience,  but  also  changes  it  and  adds 
features  that  weren't  possible  before, 
like  the  text-rearranging  ease  offered 
by  the  word  processor. 

The  wotk  we  do  today  b  no  longer 
accomplished  usii^  buriness-defined 
technology,  where  technology  assists 
business  ftinctiooaUty.  Instead,  we’re 

living  in  an  era  of  techflology-deftned 

business,  where  core  functionality  b 
<lctoiiuncd  by  technology  innovation. 

As  recently  as  10  years  ^  if  all  the 
PCs  in  the  world  went  dark  fm  a  day. 
work  would  have  conrinued.  If  all  the 
Internet  were  unavailable,  few  would 

have  noticed.  All  of  that  has  changed. 

Today,  the  notion  of  rei^acing 
technolo^  with  tried-aod-true  anat/vg  ^ 
systems  like  paper  makes  no 
Don’t  get  me  wrong.  1  still  like  p^cr 
for  lots  of  things.  But  for  those  of  you 
who  dislike  technology,  go  back  to 
your  quill  pens  and  candies.  rU  keep 
the  digital  fcamres.  even  with  all  of 
their  foibles.  O  48042 
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Perplexed  by  Apple's  Secretive  Nature 
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APPlEHAOeANCmWTIo 

getanXservetousforevaiua- 
bon  last  year.  The  problem  ves 
that  our  senior  manager  lor  sen«r 
systems,  who  personally  Ikes 
Macs,  couldn't  get  Apple  to  gtve 
him  the  soft  of  rnformation  about 
the  product's  future  that  HP.  IBM 
or  Del  woub  be  wing  to  give  hln 
about  their  products  rSecrecy 
Eating  at  Apple.*  QudlNik  47741) 
Appb  had  no  answers  to  ques¬ 
tions  aboutlhings  bhe  expecM 
product  Ue  eyebs.  eape^  parts 
avalaURy  and  serbee  personnel 
Wfiiiih8fy.lianientafthemany 
ertelngdKAppbtipthillhe 
vendor  needed  to  go  swipe  some 
server  bigMg  from  BM  or  HP  to 
go  in  sid  teed)  tfiem  how  to  stil 
MooarpoiitoAiiiattca. 

On  die  odiar  hand.  I  have  eome 
friends  vdio  run  a  company  w8i 
26  empi^eas.  They  got  an  evtour 
lionlbanmandiuefbvelL 


IkOow  Book  USA 
Cedar  Iowa 


PC/Intel  bgoL  but  aftm^  more 
than  15  yews  n  the  ndustry.  I  can 
say  that  Apple  has  never  been  easy 
to  integrate  nto  m  exefing  net¬ 
work. 

Some  of  the  proUems  Tve  seen 
indude  the  fodowmg: 

■Appietalr  6  too  chatty. 

■  Apple  resource  torirs  break 
when  copymg/mobng  Has  from  a 
Maontosh  anwontTwit  to  shared 
\Mndows  storage. 

■  Mac  ueets  land  to  be  slmto 
to  fly  fishennen  -  egoMied  wd 
dmandngoflheverybesfhard- 
tnre.  Mfe  hwa  Mac  users  wflh 
82.000  flat  ■eaeenmonitoobe- 
cua  they  said  Stay  needed  them. 

■Mac  hardware  raay  be  chetor 
to  vflian  compiling  bMurns  to  toe- 
kna,  but  oMn  a  ^6Hz  Cdtoon  k 
dtotWItorflto  typioi  oMcaaess' 
ttoWiuwaigMhseaallOllce. 

Bacauaa  the  magiriiy  of  daddop 
pubMno  appicMtons  at  now 
tooWifi  hr  IMndowa  ptoffumo,  I 
peiaotkly  no  (anger  aaa  a  need  to 
amparttBotypaaafhtodMfaand 


operatng  systems  on  the  corporate 
desktop 

The  fnanoef  costs  of  provNkng 
and  supporting  a  LAN/mN/SAN/ 
NAS  inftasiructure  tor  Mac  and 
Windows  lOt  proves  loo  costly. 
JameaKunys 
Setaor  systems  engineer, 
Lovriomi,  Ohio 

TWyttEPlACkisthesetoch 
stitng'OSrwilh'VMS'arto 
flien  replacing  ’Apple*  wtfi  *HP.* 
and  iteul  sea  that  what  Maik  Hal 
says  about  Apple  and  OS  X  is  even 
mre  strongly  applcahle  to  HP  and 
OpanVMS  (ocept  flito  Iff*  is  sft- 
cratwa  only  about  OpanVMS). 

AaaarGhfar’VMS’onCim- 
PtdariMrtfs  Wib  alto  yields  ordy 
248 fats,  even  tower  thin  far  *06 
X*  K  would  aaam  M  Appk  isn't 
•to  only  one  w*  a  protatom  wih 

ll*WHnirl 

THnidad  and  Tbbqgo 

MAMHNX^fl'SKncyE^ 

M  Apple*  was  an  Maraathg 
oakfim  nmd  by  an  amglouB 


rmstahe.  in  the  print  verson  of  the 
column.  Hal  retoned  to  Appto's 
’prelenixxfi  address*  as  T  Infniy 
litop  ' But  the  actual  address  6 
1  fnfinOe  Loopi  The  address  s  a 
geeky  software  engneesioke  An 
inflrate  loop  6  e  type  of  software 
bug.  The  addms  B  more  seH- 
deprecating  Ihtoi  pretentBus. 

I  don't  understand  why  Apple  6 
desenbed  as ‘ptatoniious*  and 
‘haughty’andMBrosdlsdr 
senbed  as  *eksome' k's  not  ger¬ 
mane  to  the  sUeact. 

•toiattian  Dodds 
Sofhirare  enginrer.  Boston 

COMPVTERWOBLD  wateomes 
comments  from  Ns  leaders.  iBOtos 
wi  be  adNad  for  brwMIy  arto  oltoty 
Tltoy  should  be  adikeaaad  to  Jamie 
EcNi.  kBets  adkv.  ConowtonMrto. 
PO  Bm  9171. 500  (M  ConnaeiKU 
Ml  Rvninghani  htos  017D1 
Far  (506)8794843. 

E-mat  lafton8camputorworid.0Gm 
Inchida  toi  adrkiK  and  phone  run- 
barfartnniBdlavtoficaOon 

^  For  nm  toton  on  iui  ate 
otovlepicxoolD 


ROBUST  OBJECTS 
AND  ROBUST  SQl 


EYE-OPENER  FOR 
ORACIE  USERS 


Before  developing  your  next  generation  of 
applications,  swtch  from  Oracle*  to  the  next 
generation  of  database  technology. 

Cache  is  the  post-relational  database  that 
combines  high-performance  SQL  for  ^ter 
queries  and  an  advanced  object  database  for 
rapidly  storing  and  accessing  objects.  With 
Cache,  no  mapping  is  required  between  objert 
and  relational  views  of  data.  That  means  huge 
saxin^  in  both  development  and  processing  time. 

Applications  built  on  Cache  are  massively 
scalable  and  lightning-fast.  Plus,  they  require 
minimal  or  no  database  administration. 

More  than  just  a  database  system,  Cache 
incorporates  a  powerful  Web  application 


development  environment  that  dramatically 
reduces  the  time  to  build  and  modify  applications. 

The  reliability  of  Cache  is  proven  every  day  in 
“life-or-death”  applications  at  thousands  of  the 
world’s  largest  hospitals.  Cache  is  so  reliable,  it’s 
the  leading  database  in  healthcare  -  and  it  powers 
enterprise  applications  in  financial  services,  govern¬ 
ment  and  many  other  sectors. 

We  are  InterSystems,  a  specialist  in  data 
management  technology  for  over  twenty-six  years. 
We  provide  24x7  support  to  four  million  users  in 
88  countries.  Cache  is  available  for  Windows, 
OpcnVMS,  Linux  and  major  UNIX  platforms  - 
and  it  is  deployed  on  systems  ranging  from  two 
to  over  10,000  simultaneous  users. 

InterSystems  ^ 


^  CACHE 

MeAe  ApplicMtions  Fester 


Tkv  a  Miir  inbisiL  lar  Om. 

Download  a  free,  fiiUy-lunctional,  non-eipiring  venkm  of  Cach£  or  request  it  on  CD  at  w« 
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Gets 


the  paper  ano  ink  used  m  the  ORi^uu, 

«*T*n:EcT^U!?^ 

WICROPORW  EDITION 


Raytheon’s  MTrak 


MaainimtiMtpTOvfdH 
*MMy  ••  af  iniMili,  ihgIi  as  rvMon, 


lMa>ilM  c>»a.  trow  ait  Mwolrtwilimniin 

P'vauct  Maks  aw  tfslOT  accaMUt  to  tvsry 
pananla»acowpaii»uilimeia>aiasbhrowMi. 

*ccawiiuda>i  rwniai  will  wiigm  Liukimj 

raMMawarteoarihrlnlatriitaMafromtfl^vatt 

BMiwfcainoaowoaaaiiawalwairrMiMistaawatst. 

BTffljjOTrahhaibacBiiwaitn^aaQiantorsappIrch^ 


biMi^  pnMMiw.  Coal  aastsfa:  S8.6  mMon  to  data; 

S2B  rnHan  pretax  ovar  fow  yaafs. 

late  1980s,  Raytheon  Co.’s  Network  Centric  Sys¬ 
tems  (NCS)  business  unit  in  North  Texas  migrated  to  a 
new  mainframe  system  that  didn't  a  maeRriatg 

tracking  program.  The  result  was  pure  bedlam. 

“A  lot  of  stuff  got  lost,  and  we  h^  no  way  to  find  it 
other  than  to  go  and  look  for  it.  and  friat  could  be  a  15- 
minute  or  a  15-day  process.”  says  V^nce  Hrenak,  vice 
president  of  st^iply  chain  at  Raytheon.  "We  used  to 
have  multiple  people  sitting  by  the  phones  to  take  the 
calls  asking  where  parts  were.” 

NCS  formed  a  cross-functional  team  to  search  for  a 
remedy.  It  evaluated  at  least  a  half-<lozen  software  pack¬ 
ages  as  well  as  proposals  solicited  from  commercial  sys¬ 
tems  integrators  before  ultimately  deckling  to  develop 
its  own  system.  McKinney.  Texas-based  NCS  had  ”a  lot 
of  q>ecinc  business  rules  wr^iped  around  custom 
processes.”  explains  Rob  Vettor.  senior  business  tech¬ 
nologist  and  diief  architect  of  the  new  KTHak  system 
”What  we  wanted  to  gain  was  foe  advantage  of  avoid¬ 
ing  software  costs  plus  bavii^  a  customized  solution 
to  our  unique  business  problems,”  says  Gene  FCi^my. 
MlVak’s  le^  software  engineer. 

Now,  a  little  more  than  two  and  a  half  years  later, 
what  began  as  a  pilot  project  at  NCS  has  blossomed 
into  an  enterprisewide  siq^ly  chain  application  that 
sui^rts  13  Raytheon  sites  and  serves  more  than  20XXK) 
users.  And  with  cost  savings  directly  attributed  to 
MTiak  totaling  $8.6  million,  other  Raytheon  sites 
are  lining  up  to  get  MTVak.  MTVak  will  eventually  be 
deployed  to  45,000  employees  and  is  expeaed  to  cut 
costs  by  another  $17  million.  The  $18  billion  defense 
contractor  projects  total  savings  of  $26  million  over 
four  years.  This  is  a  rare  victory,  in  my  e]q)erience.” 
says  Hrenak. 

(Mocking  the  Data 

From  the  start,  MlYak’s  developers  had  ambitious  goals: 
Build  a  system  that  would  provide  visibility  to  all  mate¬ 
rials  sudi  as  resistors,  c^citors  and  customized  com¬ 
puter  chips  from  the  time  of  order  through  receiving, 
testing,  placement  in  inventory  and  final  use  in  a  mUi- 
tary  field  radio,  handheld  motion  sensor  or  some  ofoer 
Raytheon  product.  The  system  also  had  to  be  accessible 
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E  PAPER  ANO  tNK  USED  IN  THE  ORIGINAL 
PUBLICATION  MAY  AFFECT  THE  QUALITY  OF 
THE  MICROFORM  EOTHON. 


Raytheon's  MTrak  Rollout 


SUMMER  2001;  Raytheon's  S3  billion  N-^t 
work  Centric  Systems  unit  contracts  its 
internal  IT  group  to  build  MTrak  1.0,  a  Web 
based  materials  management  application 

'T 


JULY  2002:  Release  1.0  deployed  to  6.000  users 
at  NCS  sites  in  North  Texas.  Ad  incoming  packages 
of  materials  are  scanned  using  bar  code  scanners 
and  information  is  entered  into  MTrak  database 
which  IS  accessible  to  all  users  via  the  Web 


JANUARY  2003.  RELEASE  1.5:  MTrak 
enhanced  to  include  mainframe  data 
via  WRQ's  Verastream  middleware 
menus  and  security  improved 

▼ 

2002 

A  A 

MAY  2003:  Release  2  0  debuts  En 
hancemenls  include  customized  reporting 
and  infeqra-ed  material-quality  rrackinq 
Raytheon's  Space  and  Airborne  Systems 
unit  m  California  deploys  MTrak 


OCTOBER  2003:  Elonda  sites  add  MTrak, 
Si.  Petersburg  unit  pilot-tests  wireless  RFID 
scanners  with  MTrak  In  future  releases, 
wireless  will  be  available  companywide 

▼  _ 

“  2004 

▲ 

JUNE  2004;  Raytheon  s  Missde 
Systems  unit  in  Tucson  Ariz 
deploys  MTrak  to  10  000  users 
onnqing  total  deployment  to 
20  000  users  in  13  sites. 
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to  every  person  in  the  company  via  a 
Web  bttnvsee.  “It  was  something  we 
were  missing  and  something  in  which 
we  saw  great  value,"  says  Feighny. 

The  team  released  Version  IjO  after 
little  more  than  a  year.  It  enabled 
workers  to  use  bar  code  scanners  to 
collect  data  ftom  incoming  packages 
and  to  create  an  electronic  record  of 
every  movement  a  package  made  after 
Hs  arrival  at  the  loading  dock.  This 
information  was  accessible  to  all  em¬ 
ployees  via  the  Web. 

Next  came  one  of  the  team’s  biggest 
challenges.  Much  of  the  additional 
supply  chain  data,  including  quality, 
testiz^  and  AnanciaJ  information  that 
it  wanted  to  present  to  users  at  their 
desktops,  was  locked  away  in  main- 
ftrame  applications. 

The  team  first  attempted  to  build  a 
screen-scrapir^  application  that  would 
pull  out  necessary  mainframe  data 
when  triggered  by  a  Web-based  user 
who  entered  a  purchase  order  or  part 
number.  But  the  behind-the-scenes 
process  took  too  long  and  was  too 
complex. 

So  the  team  evaluated  three  pack¬ 
aged  middleware  applications  to  do 
the  same  "We  took  our  ugliest 
mainframe  screens  and  asked  the  ven¬ 
dors  to  return  the  mainframe  data  to  a 
Web  page."  recalls  Vettor. 

The  first  vendor  gave  up  after  eight 
days.  The  second  accomplished  the 
task  in  four  days.  The  third  vendor. 
Seattle-b^ed  WRQlnc.,  got  the  job 
done  in  half  a  day.  So  Raytheon  pur¬ 
chased  WRQ’s  Verastream  integration 
software,  which  uses  database-style 
queries  to  access  mainframe  data  and 
then  filter  it  so  that  only  the  requested 
data  elements  are  returned  to  the  Web 
page.  "It  makes  calling  the  mainframe 
loc^  like  a  SQL  call"  Vertor  says. 

BuUngtheSeivices 

Once  mainframe  data  could  be  ac¬ 
cessed  and  delivered  to  the  Web-based 
application,  the  team  began  building 
XML-based  Web  services  usii^  Micro¬ 
soft  Corp.'s  J*let  tools.  These  were 
wnncn  after  what  developers  describe 
as  an  extremely  thorough  and  painstak¬ 
ing  review  of  the  business  processes 
surrounding  NCS's  supply  chain. 

"From  the  very  beginning,  Rob 
fVenor)  and  I  were  in  the  plant,  walk¬ 
ing  from  drop  zone  to  drop  zone,  map¬ 
ping  out  the  process  so  we  could  see 
how  it  worked  to  develop  the  system." 
sx<fi  Michele  EUison.  an  indust^  en¬ 
gineer  on  the  development  team. 

They  used  Raytheon's  integrated 
process-development  system,  a  struc¬ 
tured  systems-development  methodol¬ 


ogy  based  on  Six  Sigma  principles  and 
methods  developed  by  the  Newtown 
Square.  Pa.-based  Pro|ect  Management 
Institute. 

A  four-member  team  devel<^>ed 
MTVak  1.0  and  subsequent  versiofis 
using  a  highly  iterative  process  that 
invtrfved  end  users  at  every  step. 

“We  were  very  careful  about  always 
putting  out  prototypes  and  working 
models."  Vettor  says.  “When  we  had  a 
screen  idea,  we  put  it  out  [to  the  user 
community]  right  away  and  asked  for 
feedback.  I  don't  chink  the  customer 
was  ever  surprised.  They  were  in¬ 
volved  in  making  the  de^ions.  and 
they  got  what  they  wanted." 

MTrak's  service-oriented  architec¬ 
ture  works  to  keep  the  system  costs 
low  because  it  guarantees  reusability 
by  other  applications,  says  Vettor. 

Indeed,  one  of  the  main  advantages 
of  developing  the  system  in-house  was 
that  Raytheon  avoided  all  licensing  is¬ 
sues  and  costs,  says  Larry  Thompson, 
application  software  manager.  The 
team  opted  to  develop  the  software 
using  -Net.  he  says,  "because  we  had  a 
history  with  Microsoft  deveic^ment 
tools.  It  fit  our  internal  skills  base  bet¬ 
ter  (than  ]2EE]." 

Riming  MTrak 

Today.  NCS  employees  scan  informa¬ 
tion  into  MTrak  from  about  300  in¬ 
coming  packages  a  day.  either  using  a 
bar  co^  reader  or  a  workstation  in 
one  of  the  warehouse’s  drop  zones. 
Raytheon  sites  in  Florida  are  piloting 
wireless  radio  frequency  identification 
tags  and  scanners,  which  will  provide 
real-time  access  to  MTrak  data.  The 
devices  will  be  deployed  companywtdc 
by  early  200S.  A  pack^  u  scanned 
each  time  it  makes  a  stop  —  for  inspec¬ 
tion  or  testing,  placement  in  inventory, 
or  removal  from  inveotoiy  for  use  by 


MTrak 


manufocturing.  Thu  process  mchides 
recording  dau  about  the  pack^,  its 
contents,  i^o  handled  it,  who 
it  and  the  time  and  date.  That  informa¬ 
tion  is  uploaded  about  every  10  to  15 
minutes  from  the  scanners  anH  bar¬ 
code  units  to  two  mirrored  database 
servers  running  SQL  Server  ^XX).  Data 
from  wireless  scanners  is  immediately 
fed  into  the  database. 

At  higb-voluiiie  sites,  someone  does 
a  scan  every  four  seconds  and  a  search 
every  52  seconds,  on  average.  In  addi¬ 
tion  to  package-tracking  data,  users 
can  access  financial  and  ocher  supply 
chain  dau  from  Raytheon  mainframes 
using  the  same  Web-based  desktop, 
thanks  to  the  WRQtool  and  the  XML- 
based  Web  services  that  the  team  built 
"Whenever  we  created  an  interfree 
to  any  other  system,  such  as  a  ware¬ 
house  automation  system,  as  a  key  feed 
to  MTrak.  we  want^  to  build  h  as  a 
Web  service  so  any  other  aii^Ucation 
could  use  it"  explains  Feigluiy.  These 
are  kept  on  a  UDDl  servet  and  any 
developer  within  Raytheon  will  Ime 
accessibility  to  that,  in  the  long  run,  it 
will  save  the  company  money  from  a 
development  sundpoint  because  we 
have  one  service  that  can  be  used  by 
any  application  —  not  just  MTVak." 

In  the  past  month,  the  system  re¬ 
corded  32.000  scans  at  NCS  alone. 

“This  ability  to  trace  materials  means 
we’re  better  able  to  control  our  inven¬ 
tories,  and  that’s  a  very  clear  savings," 
notes  Hrenak. 

On  a  broader  scale,  the  visibility 
MTVak  provides  to  Raytheon  users 
enables  the  company  to  offer  its  cus¬ 
tomers  "a  higher  level  of  confidence 
and  comniitmem.”  says  Tun  Wholey, 
vfce  president  of  enterprise  supply 
chain  management.  , 

"MTVak  allows  us  very  precise  vist-  I 
biUty,  vdiicb  is  criticaL"  especially  I 


when  delivering  to  the  military,  says 
Wboley.  "We  might  have  a  spedfk 
product  Hke  a  high-end  microwave 
assembly  that  is  being  shipped  to 
A%hanistan  or  Iraq.  We  to  re¬ 
spond  to  them  so  tl^  know  when 
can  ei^ect  parts  for  a  system  that 
has  foiled  in  the  field."  be  says.  "We 
have  people  waiting  for  products  and 
spare  parts  that  dieir  lives  depend  oa" 

Next  Step:  SAP 

As  usage  of  MTVak  continues  to  grow, 
conqiany  officials  envision  it  as  an 
ideal,  user-friendly  bridge  to  SAP  AG’s 
enterprise  resource  planning  software, 
udiicb  Raytheon  plans  to  deploy 
worldwide  beginning  in  2006. 

"Going  forward,  we  envision  MTrak 
as  a  way  to  standardize  data  across 
business  units  and  throu^iout  the  en¬ 
tire  company.  We  have  this  common 
system  to  grow,  and  it  will  ease  our 
transition  to  SAP."  says  Feighny. 

“There  might  also  be  an  opportunity 
to  front-end  certain  parts  of  SAP  via 
MTVak,"  Vettor  says.  "Sometimes 
lERP]  software  interfoces  are  rigid, 
and  MTVak  could  be  the  way  to  have  a 
friendly  interface  going  up  against 
SAP." 

Raytheon  plans  to  migrate  away 
from  DOS-  and  Windows-based  hand¬ 
held  scanning  devices  in  favor  of 
Hewlett-Packard  Pocket  PCs.  In  the 
meantime,  there’s  no  question  that 
MTVak  has  gone  above  and  beyond  its 
initial  mission  of  creating  order  from 
chaos. 

“We  don’t  lose  material  anymore,” 
says  Mark  Ward,  manager  of  supply 
chain  logistics.  Before  MTVak,  be  says, 
"a  large  part  of  my  job  used  to  be  hav¬ 
ing  other  managers  call  me  and  tell  me. 
*¥00  lost  this  or  that’  It's  been  a  year 
DOW  since  anyone  has  called  me  to  say 
they  can’t  fmd  materiaL"  O  ^781 
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The  Real  Risks 


WE  LIVE  IN  AN  AGE  of  terror  and 
often  indiscriminate  fear.  Policy¬ 
makers  and  the  media  alike  scream 
about  weapons  of  mass  destruction, 
lumping  together  nuclear  weapons 
that  can  level  cities,  bioweapons  that  could  extermi¬ 
nate  the  human  race  and  chemical  weapons  that  are 
little  more  than  glorified  World  War  I  technology. 


Pronouncements 
about  information  security 
threats  can  be  equally 
misleading.  Some  attacks 
could  destroy  your  compa¬ 
ny,  but  others  are  no  more 
than  a  nuisance.  So  let's 
step  back,  consider  the 
classes  of  security  threats 
and  see  what  kinds  of  safe¬ 
guards  make  sense. 

Systam  sabotage,  such  as 
viruses,  spam  and  denial- 
of-service  attacks. 

Likelihood:  Very  high. 

Harm  potential:  Often  overstated, 
based  on  the  dubious  theory  that  busi¬ 
ness  interrupted  b  permanently  lost. 

impropriate  sq/eguords:  Firewalk, 
intrusion-protection  systems,  virtual 
private  networks  (VPN),  antivirus  and 
antbpam  software  and  good  security 
procedures. 

Pbysieal  sacurtlyof  tachnical  procassas. 
such  as  hacking  the  electric  power 
grid  or  shutting  down  a  steel  plant. 
Likelihood:  Very  low. 

Harm  potential:  Very  high. 
Appropriate  sq^guonds:  Keep  your 
process-control  systems  as  isolated  as 
possible  from  your  general  network. 
Stay  vigilant  about  rogue  access  points 
on  the  process-control  networic 
National  aaewtty  Mpfanaga,  such  as 
stealing  weapon  designs, 
likelihood:  Low 

Harm  potenrioL  Huge  —  people 
could  get  killed  or  you  could  lose  your 
clearance  and  go  out  of  business. 

Appropriate  safeguards:  If  you're  in 
the  government  or  the  defense  indus¬ 
try,  follow  security  rules  without  cut¬ 


ting  comers.  Also  monitor 
your  systems  for  unusual 
patterns  of  data  access. 

TransactkmaJ  fraud,  such 
as  bogus  banking  trans¬ 
actions. 

LikelUiood:  Low  to  mod¬ 
erate. 

Harm  potenriai:  Enor¬ 
mous  in  banking,  moderate 
in  other  cases. 

Appropriate  sa^guards: 
Protect  your  core  transac¬ 
tional  databases  with  defense-in-depth 
security.  Exploit  your  database  man¬ 
agement  system's  (DBMS)  security 
and  auditing  features.  But  don't  incon- 
venience  your  customers  too  badly. 

fatslactual  property  theft  of  things  such 
as  product  designs  or  customer  Ibts. 

Likelihood:  Greatly  exaggerated  — 
it's  simpler  just  to  hire  away  workers. 

Harm  poteTtriaL*  Greatly  exaggerated 
—  the  courts  offer  good  remedies. 

Appropriate  safeguards:  Basic  secu¬ 
rity.  And  don’t  alienate  employees. 

fatamal  mfauee,  such  as  pom,  instant 
messaging  with  friends,  or  illegal  or 
offensive  outgoing  e-maiL 
Likelihood:  Very  high. 

Harm  porenhal;  Low,  except  rhar 
people  can  waste  a  lot  of  time  online. 

Appropriate  safeguards:  Employee 
Internet  management  filters  set  to 
monitor,  not  block. 

Custoiiwr  data  axpoaura,  such  as 
stolen  credit  card  numbers. 

Likriihood:  Low  to  moderate. 

Harm  potentiab  High  and  somewhat 
underappreciated. 

j  Appropriate  safeguards:  Protect  your 
I  customers'  data  at  least  as  well  as  you  ' 


gxiard  your  own.  If  you  have  signifi¬ 
cant  customer  data  in  documents 
floating  around  your  network,  get 
them  into  a  DBMS-based  content  man¬ 
agement  system  and  secure  it  as  tight¬ 
ly  as  you  protect  transactional  data. 

Thb  last  category  is  a  tricky  one. 
Loss  of  private  information  rarely 
causes  much  real  harm.  On  the  other 
hand,  laws  and  regulations  mandate 
data  privacy,  especially  outside  the 
US.  And  any  leak  of  customers'  data  b 
a  public  relations  disaster.  So,  notwith¬ 
standing  the  ^sence  of  significant 
dan^r,  you  have  to  keep  your  cus¬ 
tomers'  data  extremely  secure. 

Some  security  threats  are  over¬ 
hyped,  and  some  security  "solutions" 
don't  solve  any  genuine  problems.  But 
it's  definitely  necessary  for  every  en¬ 
terprise  to  have  a  solid  security  infra¬ 
structure.  The  minimum  prudent  se¬ 
curity  for  most  organixations  should 
include  the  following; 

■  Firewall/intrusion-protection 
appliances  at  every  access  point,  with 
VPN  support  and  strong  network 
segmentation. 

■  Effective  antivirus  and  antbpam 
systems. 

■  DBMS-based  security  for  both 
transactional  and  document  data. 

■  Extra  rings  of  protection  for  criti¬ 
cal  databases. 

■  Integrated  identity  management 
(a  relational  or  LDAP  virtual  integrat¬ 
ed  identity  database  can  suffice). 

■  Archives  and  audit  traib  for  all 
important  documents  and  data. 

■  Physical  access  control  to  security 
appliances  and  critical  databases. 

Sane  password  policies.  (Smart 
cards  are  another  good  option.) 

Systems  and  policies  for  maintain¬ 
ing  and  verifying  general  client,  server 
and  network  system  health. 

No  security  strategy  b  going  to  be 
perfect,  but  you've  always  got  to  start 
with  a  realistic  assessment  of  the 
threats  your  company  frees.  O  48147 


WMTMMMIIT 

OFDrmOTGlAfnnandl^fatootfan:^Neag^ 

tnw^aaMfanNrttJBn/lMMn 


Foundry  leads  the  way. 
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Achieve  Business 
Intelligence  Success! 


The  leading  executive  conference  for; 

•  Business  Intelligence  Applications 

•  Performance  Management 

•  Risk  Management 

•  Analytic  Technologies 

•  Data  Warehousing  and  Mining 

•  CRM  and  ERP 

•  Regulatory  IT 

•  Best  Practices  in  Bl 


Visionary  &  Featured  Speakers 
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Senior  Enterprise  Archrteci 
Federal  Res^  System  (FRS) 


I6RE0  MCMILLAN 

Enterprise  Business 
Intehgence  and  Dau 
IMrshousing  Managei 
Ford  Motor  Corrvany 


MAHSLONAKER 

Oector  of  Enterprise  Busmess  Intehgence 
H&R  Btock/Oplnn  One  Mortgage 


For  more  information,  visit  www.biperspectives.com/cw  or  call  1-800-883-9090 

For  sponsorship  information,  contact  Leo  Leqer  at  1-508-820-8212  or  ieo  Jeger  *computerworldxom 


Find  Proven  Strategies  and  Solutions  to 
Achieve  Business  Intelligence  Success 

•  Get  a  High-level  Overview  in  Navigating  the  Business  Intelligence  Process 

•  See  How  to  Select  and  Deploy  Business  Intelligence  Technologies 

•  Hear  the  Latest  on  Managing  Performance 

•  Learn  from  Best  Practices  and  User  Case  Studies 


...  the  range  of 
perspectives  at 
Computerworld's 
Business  Intelligence 
conference  was 
particularly  valuable, 
and  the  interaction 
between  speakers 
and  the  audience 
was  excellent  ...•> 


Doug  Busch,  CIO.  Intel 


September  27-29, 2004 
JW  Mamott  Desert 
Springs  Resort 
Palm  Desert,  CaNfomia 


Why  You  Should  Attend 

Are  you  responsible  for  maximizing  the  value  of  your  company’s  data  assets?  Want  to  exchange  innova¬ 
tive  ideas  and  strategies  with  other  executives  who  share  the  same  obiectives?  Then  attend 
Computerworld’s  Business  Intelligence  Perspectives  conference  where  you’ll  network  with  and  learn 
from  world-renowned  experts  and  the  nation’s  top  user  executives. 

What  You’ll  Learn 

In  this  executive-forum  setting,  you’ll  hear  directly  from  executives  and  managers  in  user  companies. 
They  II  address  a  wide  variety  of  today’s  burning  issues  like: 

The  Big  Picture  for  Business  Intelligence  Managing  Performance 

•  Creating  Bl  Vision  anrt  Strategies  .  Defining  Metrics 

•  Ranning,  Designing  and  Building  the  Bl  .  Appiications 

Infrastructure 


•  Managing  Histoncal  and  Operational 
Information  Stores 

•  Information  Retrieval  and  Reporting  by 
Leveraging  Off-the-shelf  Enterprise  Software 

•  Data  Visualization,  Rediclion  and  Resenfation 
that  Leverages  Customized  Solutions 

•  Managing  and  Enhancing  Bl  Applications  and 
Infrastructure 

Selecting  the  Right  Technologies 

•  Infrastructure 

•  Bl  and  Data  Warehousing  Tools 

•  Business  Activity  Monitoring 

•  Content  Management 

•  Portals 

•  Data  Modeling 

•  Standards,  Corporate  Governance  and 
Compliance 

•  Managing  Metadata 


Managing  Performance 

•  Defining  Metrics 

•  Applications 

•  Business  Performance  Management 

•  Scorecarding  Corporate  Performance 
Management 

•  CRMandERP 

•  Corporate  Governance  and  Compliance 

•  Executive  Dashboards 

Best  Practices  and  Case  Studies 

•  Showing  Data’s  Real  Value  Through  Bl 

•  Deployment  Successes/Pitfalls 

•  How  to  Apply  Resources  and  Organize 

•  Mining  Data  and  Using  Predictive  Analytics 

•  Measunnglfsf^rformance  Using  Bl 

•  Managing  Costs 

•  Innovative  Applications  of  Bl 


HEAR  FROM  ONE  OF  THE  FIELD'S  TOP  EXPBnS 


ANDREAS  S.  WEIGEND,  Ph.D. 

•  fonnerChiefSdentisLArnazDn.com 

•  PmfessotofSIallsIks  Data  MWna  and  Becttoiic  Busing 

•  Professof  of  Infomialion  Systems,  National  Uniwre%d 

•  Professot,  School  of  Management.  Shanghai  JaoTonoUnivetsity 

•  Prolessot.  Executive  MBA  Program.  China  Eutope  International  Bosiness  School 


For  more  information  and  to  register,  visit  www.bipi 
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CONFERENCE  AT-A-GLANCE 

For  details,  updates,  and  to  register  visit  www.biper$pectives.com/cw 

MONDAY.  SEPTEMBER  27 _ _ 

10:00am  ■  8:00pm  Registralior  Open 
Noon  •  5:00pm  Pre-Conference  Golf  Outing 

1:00pm  •  GOOpm  Concurrent  Analyst  Sessions 

7  00pm  ■  9:00pm  Welcome  Reception 


Accredited 
Home  Lenders 


intelgence 
H&RBlock/Option 
One  Mortgage 


TUESDAY,  SEPTEMBER  28 _ 

700am  -  8:00pm  Registration  Open 

7:00am  -  8:00am  Buffet  Breakfast 

8:00am  ■  11:00am  Opening  Presentation  and  General  Sessions 

■  Keynote  Soeaker 

Andreas  S  Weigend.  Ph  D 

former  Ctvet  Sciefflisi.  Amazon  com.  and  fVolessor.  Stanford  Umversify 

11:00am  -  12:10pm  Concurrent  End  User  Case  Studies 
12:15pm  •  1:30pm  Networking  Luncheon 

1:30pm  ■  515pm  General  Sessions 

5.30pm  -  8:30pm  Expo  with  Dinner 


The  Palm  Course 

Ihe  JW  Marrioit 
Desert  Springs  Resort 

Pre-Conference  Golf  Outing 

Monday,  September  27,  Noon 
Compimanlary  tor  RagMered  rr  Bid-Usars 

The  PteCortferenw  Golf  Ouliig  at  The  Couse.  kicated  at  the  JW 

Desert  Springs  Resort  is  compirentary(S85wlue)fu  registered  IT 
(Other  parliciparits.  irxijdirio  sponsors  and  vwidors.  may 
abto' basis  and  ate  responsiito  lu  al  appicatto  gall  outirig 
For  detais:  contact  Chns  Leger  at  1-508-820-6277 


WEDNESDAY.  SEPTEMBER  29 _ 

7:00am  ■  6:00pm  Registration  Open 
7:00am  -  8:00am  Breakfast 

8:00am  -  t1:00am  Opening  Presentation  and  (Seneral  Sessions 
IliOOam  -  1210pm  Concurrent  End  User  Case  Studies 
12;15pm  -  2:00pm  Expo  with  Lunch 

2:00pm  •  5:30pm  General  Sessions 

6:00pm  -  8:00pm  Gala  Evening 
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irspectives.com/cw  or  call  1-800-883-9090 


If  not  indicatod  on  your  business  card,  please  provide 
the  following  required  information: 
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Registratiofi  questions? 

Can  1-800-883-90W  or  email  bipreg§tompijtefworid.com 


IN  THE  CASINO  INDUSTRY. 

one  of  the  most  valuable  as¬ 
sets  is  the  dossier  that  casi¬ 
nos  keep  on  their  affluent 
customers,  the  high  rollers. 
But  last  year,  casino  opera¬ 
tor  Harrah's  Entertainment 
Inc.  filed  a  lawsuit  in  Placer 
County,  Calif,  Superior  Court  charging 
that  a  former  employee  had  copied  the 
records  of  up  to  450  wealthy  customers 
before  leaving  the  comp>any  to  work  at 
competitor  Thunder  Valley  Casino  in 
Lincoln.  Calif. 

The  complaint  said  the  employee 
was  seen  printing  the  list  —  which  in¬ 
cluded  names,  contact  information  and 
credit  and  account  histories  —  from  a 
Harrah’s  database.  It  also  alleged  tbar 
he  tried  to  lure  those  players  to  Thun¬ 
der  Valley.  TTie  employee  denies  the 
charge  of  stealing  Harrah’s  trade  se¬ 
crets,  and  the  case  is  still  pending,  but 
many  similar  cases  have  been  fUed  in 
the  past  20  years,  legal  experts  say. 
While  savvy  companies  are  using 
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b\i>i;u  ss  niti  liiui-jico  .mJ  tKM 
t^  TTi'  ii-  iJoiiiitv  thvif  most  pr»'l1ijhio 

wUstomiTs.  tlwro's  .1  i:«'niiinc  of 

Hut  inlorniorioii  |jllin>:  into  ihc  \\n^tl^: 
ti-»f1v1s  I<r»MJor  .ivVoss  i»i  ilu»sf  .ippljca- 
tions  inJ  the  tronJ  tou.ud  omplouvs 
'vvitihini:  jobs  niorc  frcqut’niK  h.no 
prorci  tiiiL’  ousionuT  lists  jn 
wen  jiriMter  prloritv. 

K*rtun.nek.  tlien*  .ire  nun.ijrcri-il. 
Ifjiil  .inJ  »eehnolo^ic.il  steps  you  e.in 
t.ike  to  helppre\er»t.i>rat  kuM  dtse«iur- 
aye.  Jepaniny  emploseos  from  uutkin>: 
out  the  diHu  \\  ith  this  \it.il  uiiornutum. 

Legal  Steps 

K'r  starters.  or):.mi/-cli*>ns  should  in.ike 
sure  (hat  eert.un  empUnei*s.  p.inieiilar- 
l\  Hu»sc  with  frvNjuent  access  to  cus¬ 
tomer  information,  siijn  nondisclosure, 
noncompete  and  nonsoheit.iiuvn  agree¬ 
ments  that  spcsirieallv  mention  eus- 
lomer  lists  J  hrouiih  these  documents. 

•  tnplou'cs  -.leknowleJye  that  they  will 
he  introduced  li»  this  iniormatioit  and 
j):ree  not  to  disvl<»se  it  i*n  Jepariun.* 
troin  the  oTtipanv.’  ssi\s  'su/.inne 
i  ahrit  ap.iriiu  r  .it  turn  Sliutts^^ 
lt-»'.<cii  1  1  J'  ni  West  Halm  Heaeh.  Ha 

Airmuijih  iru*st  >i.«es  h.ive  enacted 
ir.ide  M...reis  I  sos..  I  ..frit  s.i\s  they  ha\e 
Jitfer\-ni  .ittitudi-sah.iin  cnioremt:  these 
'  I'vs  itli  rt-’j'.irJ  |o  I  usiomer  lists  -Hm 
.IS  isjannic  pomt  ,ii  lyast  w*uh-ive 
this  unJersi.i'vl-ne  (with  empIo\ees] 
th.i!  ilu  .^usionier  in!otm.iii»»n  is  homy 
trt‘,!i*  d  .IS  i.intlderifui."  I  ahrii  s.i\s. 

I  'un.  tf  in  emplosi  e  haves  f*  u,irk 
lof  t  i.onipciiior  m.j  Uses  this  protect¬ 
ed  4  usjomei  d.ita.  the  emplover  will 
mori'  iik  -.%  he  ahic  h*  lake  lejj.il  action 
tostopthi  aetnitv  ‘If  you  don’t  tre.nl 
It  as  Minfklentul  inform.oion  incernal- 
lv,"siv,  S.JVS,  ihv.  iSiiiri  will  not  treat  it 
is  cortiiJwiii.d  mfonuation  4  iiluo 
It  s  als.'  important  to^-Jucate  eriiplov 
.is.  .iK.’jt  the  cofinjenttjhtv  ofuu- 
toTTivT  lists  tHvause  mam  pesiple  wronp- 
K  issiime  they’re  publit  information, 
sav-*.  ■)  im  Meadlcv.  .t  partner  at  the 
ih.ustoo  law  firm  of GarJere  \V‘\  nne 
sewell  I  Lr  ".Most  people  think  they 
can  take  the  lists  w  ith  them.  ’  he  say v 
'You  have  to  show  that  >Mu'\e  kept  it  a 
sesTel  and  told  etnploxvcs  it’s  a  v.ikiablc 
ssCTot.  (Customer  lists)  are  at  the  core 
of  how  you  bring  n.-\enue  into  the  com¬ 
pany.  These  are  the  decision  makers 
who  are  wilJini:  to  buy  your  product.” 

Headley  recommends  that  managers 
inform  employees  about  court  case's 
involvini*  stolen  customer  lists  and  »»c-  ' 
casionally  warn  them  that  the  compa¬ 
ny  will  prosecute  any  one  w  ho  steals 
trade  secrets.  “Companies  should  have 
periodic  lunchnutm  mc'eiings  just  to 
remind  people"  about  irade-scvrei 


ANY  WHICH  WAY 

Customer  lets  could  leak  out  in  a 
printout  or  e-mail  message,  on  a 
diskette  or  memory  stick,  or  even 
in  an  employee's  own  memory. 
Washington  state's  Supreme  Court 
ruled  that  s  customer  list  that  was 
memorized  by  departing  employees 
could  be  considered  a  trade  secret 
(NowogroskI  v.  Rucker.  1999). 


policies.  Headley  says. 

If  a  company  suspects  that  an  ex- 
employee  who  signed  .1  nondisclosure 
•tgreement  h.is  given  its  custv>mer  d.it.i 
to  a  compel iu»r.  L.ihrit  recommends 
taking  ^uick  .iction.  That  includes  ob¬ 
taining  .1  temporary  restraining  order 
to  prevent  the  employee  from  using 
the  information.  Hie  m.iin  reason  is 
for  the  employer  to  get  relief,  she  s.iys. 
but  the  move  al.so  sends  a  message  to 
other  empkvyees  that  the  activity  won't 
be  tolerated.  "If  you  don’t  do  11.  the 
next  lime  someone  gets  ready  to  go. 
they'll  think  they  c.ingei  aw.!y  with  it.” 
I.jbnt  s.tys. 

Management  Moves 

I  rom  a  management  and  priKVss 
standpoint. iirg.ini/.Ht4»ns  should  try 
to  Jimii  .iccs'ss  III  eusionuT  lists  to  tuily 
enipl»'\ce>.  sueh  .is  viles  represent.! 
lives,  will*  need  the  informainm  to  Jo 
their  iohs.  ’’If  you  make  it  broadly 
.uail.ibk-  to  employees,  then  it's  not 
considered  conHJentlal,''  s.i\s  l.abril. 

I'hy steal  securilv  should  als4t  be  con¬ 
sidered.  i. ahrit  s.iyv  \'isitorN  such  as 
vendors  shouldn't  be  permitted  to 
roam  free  in  the  hatlw  ays  v«r  into  coii- 
lerenev  rvHHiis.  .And  security  fH*lu-K*s.. 
such  as  a  reguirement  that  ail  cvmipui 
er  systems  have  strong  pa.ssvvord  pr«i- 
lection.  should  be  strictly  enforced. 

l.ttmpanies  should  instantly  shut 
d«*vvn  acci-ss  lo  computers  and  tn-tworks 
when  empkiyees  leave,  whether  the 
reason  is  a  layulT  or  a  min  e  to  a  new- 
job.  At  the  exit  interview,  the  employee 
should  be  reminded  ivfany  signed  agree-  I 
ments  and  corporate  policies  regarding  ' 
customer  lists  and  other  confidential 
information,  bmployecs  should  be  told  ' 
to  turn  o\  er  anything,  including  data.  I 
that  Kdtmgs  to  the  comp;iny. 

In  .iddiiion.  empkiyers  should  track 
the  activities  of  employees  who'v  e  giv¬ 
en  notice  but  will  be  around  for  a  few 
wwks.  This  includes  monitoring  sys¬ 
tems  to  see  if  the  employee  is  e-mail-  ' 
ing  company -vnv  ned  diKuments  out-  ^ 

side  the  company. 

liome  oiyanizjlioas  rely  on  technol-  | 
ivgy  to  help  prevent  the  loss  of  cus- 


'  t«>mer  lists  .ind  lUher  critical  dai.i. 

'  Inllow  Inc.,  a  IVnver-baseJ  provider 
ol  managed  Web  hvisting  services,  uses 
;  ,1  product  from  Opswarc  Inc.  in  Sunny  - 
(  vale,  tlalil..  that  lets  managers  cimtrol 
I  access  to  specific  systems,  such  as 
databases,  from  a  central  location. 

The  company  also  uses  an  e-mail- 
;  scanning  service  that  .ilhwvs  it  to  ana- 
I  ly/e  messages  that  it  suspects  might 
contain  pmprietary  files,  says  1  onny 
Monsour.  general  manager  ofapplica- 
I  lion  hivsling  and  management.  Inllow 
I  combines  the  use  of  this  technologv 
,  with  practices  such  as  monitoring  eni- 
'  ployees  who  have  .iccess  to  data  con- 
1  sidered  vital  to  the  company. 

*  major  financial  serv  ices  pnwider 
is  using  a  firewall  from  San  brancisco- 
based  Vtvniu  Inc.  that  monitors  out¬ 
bound  e-mail,  Webmail.  Web  posts  and 
instant  me.ssages  to  ensure  that  no  eon- 
tideniial  data  k'avs's  the  ci*mpany.  The 
softw  are  includes  search  algorithms 
i  and  can  he  customi/ed  to  autom.iiic.iI- 
ly  detect  specific  types  ofj.ita  such  as 
lists  on  .1  spreadsheet  or  ev  en  some¬ 
thing  as  granular  as  a  custi'mer's  Social 


GRAY  AREAS 

Customer  lists  are  a  holly  conte^  area 
of  Irade'secret  law.  in  part  because  emo- 
tiorts  run  high  when  an  employee  leaves 
lo  start  a  compebng  business  and  tries 
to  steal  the  ex-employer's  customers. 

But  that's  not  necessarily  UleQti.  le¬ 
gal  experts  say,  because  customer  fists 
aren1  automabcally  considered  a  trade 
secret  Courts  generally  look  at  the  lol- 
lowing  factors  in  determining  whether  a 
customer  list  is  a  trade  secret 
•  bit  reply  aacrar?lt's  not  a  trade 
secret  itfdess  you've  taken  reasonable 
steps  lo  keep  It  secret,  such  as  markino 
It 'conUentiar  and  keeping  it  in  a 
lockadbcityorinapassword-prDiect' 
edcompulersyslemwilhaccessoon* 
troRed  on  a  need-to-know  basis. 

■  liltreilyvaiiirideTIl’snota 
b|Kle  secret  if  you  can  easily  colect  the 
irtformatkm  from  telephm  book  or 
pubfidy  avaBsbie  sources.  The  more  ef¬ 
fort  or  money  the  owner  spends  to  de¬ 
velop  the  infotnoPor)  -  and  the  rnote 
that  Irtformalion  provides  a  cornpetjOve 
advantage  -  tha  more  Rhsly  it  wtl  be 
considared  a  trade  secret 
So.  8  report  iderdliylng  the  compa¬ 
ny's  most  proflabie  customers  -  ex¬ 
tracted  frorn  a  weHecued  CRM  sys- 
tem  and  marked ‘confidenbaT  -  hs  a 
good  chance  of  quaWytng  as  a  bade  se¬ 
cret  legal  experts  say. 

-kttctiBelts 


Security  number.  The  firm  began  using 
the  product  after  it  went  through  lay¬ 
offs  m  20(il)  and 

"l  osing  customer  injormation  w.is  .1 
primary  ci>iuvrn  of  ours."  s.iys  the  firm's 
chief  inlorm.uion  securilv  officer,  who 
.iskcd  to  not  be  iJenrified.  "We  were 
concerned  about  people  leaving  .md 
sending  e  mail  1*1  their  home  .ic 
coiinis.  "  In  fact,  he  s.iys.  belore  using 
the  lirew.ill,  Ihe  eompatn  had  trouble 
with  Jep.irting  employees  i.iking  intel- 
lectu.il  property  and  using  it  in  their 
new  jobs  at  riv.il  firms,  w  hieh  sume 
times  led  to  lawsuits. 

Ik'yond  its  desire  u*  protect  competi¬ 
tive  information,  the  fin.incial  services 
firm  is  hound  by  leder.il  regulations 
to  safegu.irJ  the  integrity  of  ceri.iin 
types  of  information.  "We  re  consi.int 
ly  Hooking)  for  things  th.ii  c*'uU  be  vi 
ohiting  laws.*  the  exeeiiiivv  says.  Mill, 
he  s.!ys.  the  rirs-w.ill  isn't  .i  eurc-all.  The 
firm  also  uses  n»»nc4»mps-ie  .and  nondis¬ 
closure  jgre-ements  .IS  deterrents  to 
ste.iling  inhirm.itiivn 

Rising  Risk 

Vijay  Sonry.  ehiel  teehnology  offiier  at 
.idvertising  fimi  l-.'oiet  tuiecs  Ikiding 
Wivrldvvide  in  New  York,  says  losing 
customer  inforni.ni.m  to  competitors 
is.i  growing  concern,  partieularlv  m 
industries  where  emnp.mies  go  .tfier 
many  of  Hu-  -sjoie  clients. 

“We  h.ive  .1  lot  of  .iccount  e.xecuiivi-s 
who  are  very  close  to  the  vlients  .md 
h.ive  aecs'Ss  to  elieiii  lists."  Soniv  says. 
"If  an  ;K-eoiim  executive  le.nes  t**  join 
a  competitor,  lie  e.in  take  all  this  confi¬ 
dential  infonn.ition."  Phe  widespread 
stijring  i»f  corporate  data,  such  as  eus- 
tomereont.tet  inf«>rmaiion.  h;is  made  it 
e.i.sier  for  jv^iple  to  d»»  their  j»ibs,  hut  it 
has  also  increased  the  risk  of  losing 
confident i.il  data,  .Sonry  say.s. 

He  says  the  firm,  which  mandates 
that  some  empkiyoi-s  sign  noncompete 
agreements,  is  kniking  into  policies 
and  guidelines  rejuirding  the  proper 
u.se  of  customer  information,  as  well  as 
audit  trails  to  see  who's  accessing  eus- 
I  Uimer  ll.sts.  "I  think  it  makes  good  busi¬ 
ness  sense  to  take  precauiion.s  and 
steps  to  prevent  this  from  happening." 
Sonty  says.  ”We  could  lose  a  lot  of 
money  if  key  people  leave."  O  47821 


VioUno  is  a  freelance  writer  in 
Massapequa  Park.  S.Y.  Contact  him 
at  bvioliniiaapionhnc.net. 
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business  intelligence  and  CRM  sys¬ 
tems  to  identify  their  most  profitable 
customers,  there’s  a  genuine  danger  of 
that  information  falling  into  the  wrong 
hands.  Broader  access  to  those  applica¬ 
tions  and  the  trend  toward  employees 
switching  jobs  more  frequently  have 
made  protecting  customer  lists  an 
even  greater  priority. 

Fortunately,  there  are  managerial, 
legal  and  technological  steps  you  can 
take  to  help  prevent,  or  at  least  discour¬ 
age,  departing  employees  from  walking 
out  the  door  with  this  vital  information. 

Legal  Steps 

For  starters,  organizations  should  make 
sure  that  certain  employees,  particular¬ 
ly  those  with  frequent  access  to  cus¬ 
tomer  information,  sign  nondisclosure, 
noncompete  and  nonsoUciCation  agree¬ 
ments  that  specifically  mention  cus¬ 
tomer  lists.  Hirough  these  documents, 
employees  -acknowledge  that  they  will 
be  introduced  to  this  information  and 
agree  not  to  disclose  it  cm  departure 
from  the  cctmpany,*'  says  Suzanne 
Labrit.  a  partner  at  law  firm  Shutts  & 
Bowen  LLP  in  West  Palm  Beach,  Fla. 

Although  most  states  have  enacted 
trade-secrets  laws.  Labrit  says  they  have 
different  attitudes  about  enforcing  these  ' 
laws  with  regard  to  customer  lists.  “But 
as  a  starting  point,  at  least  you  have 
this  understanding  [with  employees) 
that  the  customer  information  is  being 
treated  as  confidential"  Labrit  says. 
Then,  if  an  employee  leaves  to  work 
for  a  competitor  and  uses  this  protect¬ 
ed  customer  data,  the  employer  will 
more  likely  be  able  to  take  le^  action 
to  stop  the  activity.  “If  you  don't  treat 
it  as  confidential  information  internal¬ 
ly."  she  says,  "the  court  will  not  treat  it 
as  confidential  information,  either." 

It’s  also  important  to  educate  employ¬ 
ees  about  the  confidentiality  of  cus¬ 
tomer  lists  because  many  people  wrong¬ 
ly  assume  they’re  public  information, 
says  Tun  Headley,  a  partner  at  the 
Houston  law  firm  of  Gardere  Wynne 
Sewell  LLP.  "Most  people  think  they 
can  take  the  lists  with  them."  be  says. 
Tou  have  to  show  chat  you’ve  kept  it  a 
secret  and  told  employees  it’s  a  valuable 
secret.  [Customer  lists]  are  at  the  core 
of  bow  you  brii^  revenue  into  the  com¬ 
pany.  These  are  the  deciston-makers 
who  are  wiliing  to  buy  your  product." 

Headley  recommends  that  managers 
inform  employees  about  court  cases 
involving  stolen  customer  lists  and  oc¬ 
casionally  warn  them  that  the  compa¬ 
ny  win  prosecute  anyone  who  steals 
trade  secrets.  "Companies  should  have 
periodic  lunchroom  meetings  hist  to 
renrind  pec^le”  about  trade-secret  I 
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policies,  Headley  says. 

If  a  company  suspects  that  an  ex¬ 
employee  who  signed  a  nondisclosure 
agreement  has  given  its  customer  data 
to  a  competitor.  Labrit  recommends 
taking  quick  action.  That  includes  ob¬ 
taining  a  temporary  restraining  order 
to  prevent  the  employee  from  using 
the  information.  The  main  reason  is 
for  the  employer  to  get  relief  she  says, 
but  the  move  also  sends  a  message  to 
other  employees  that  the  activity  won’t 
be  tolerated.  "If  you  don't  do  it,  the 
next  time  someone  gets  ready  to  go. 
theyll  think  they  can  get  away  with  it," 
Labrit  says. 

Management  Moves 

From  a  management  and  process 
standpoint,  organizations  should  try 
to  limit  access  to  ewitomer  lists  to  only 
employees,  such  as  sales  representa¬ 
tives.  who  need  the  information  to  do 
their  jobs.  "If  you  make  it  broadly 
available  to  employees,  then  it’s  not 
considered  confidential."  says  Labrit. 

Physical  security  should  also  be  con¬ 
sidered.  Labrit  says.  Visitors  such  as 
vendors  shouldn’t  be  permitted  to 
roam  free  in  the  hallways  or  into  con¬ 
ference  rooms.  And  security  policies, 
such  as  a  requirement  that  all  comput¬ 
er  systems  have  strong  password  pro¬ 
tection,  should  be  strictly  enforced. 

Companies  should  instantly  shut 
down  access  to  computers  and  networks 
when  employees  leave,  whether  the 
reason  is  a  layoff  or  a  move  to  a  new 
joK  At  the  exit  interview,  the  employee 
should  be  reminded  of  any  signed  agree¬ 
ments  and  corporate  policies  regarding 
customer  lists  and  other  confidential 
informatioa  Employees  should  be  told 
to  turn  over  anything,  including  data, 
that  belongs  to  the  company. 

In  addition,  employers  should  track 
the  activities  of  employees  whoVe  giv¬ 
en  notice  but  will  be  around  for  a  few 
weeks.  This  includes  monitoring  sy$. 
terns  to  see  if  the  employee  is  e-mail¬ 
ing  company-owned  documents  out¬ 
side  the  company. 

Some  organizations  rely  on  technol¬ 
ogy  to  help  prevent  the  loss  of  cus¬ 


tomer  lists  and  other  critical  data. 
Inflow  Inc.,  a  Denver-based  provider 
of  managed  Web  hosting  services,  uses 
a  product  from  Opsware  Inc.  in  Sunny¬ 
vale.  Calif.,  that  lets  managers  control 
access  to  specific  systems,  such  as 
databases,  from  a  central  location. 

The  company  also  uses  an  e-mail- 
scaruiing  service  that  allows  it  to  ana¬ 
lyze  messages  that  it  suspects  might 
contain  proprietary  files,  says  Leniry 
Monsour.  general  manager  of  applica¬ 
tion  hosting  aixl  mani^ment  Inflow 
combines  the  use  of  this  technology 
with  practices  such  as  monitoring  em¬ 
ployees  who  have  access  to  data  con¬ 
sidered  vital  to  the  company. 

A  major  financial  services  provider 
is  using  a  firewall  from  San  Francisco- 
based  Vontu  Inc.  that  monitors  out¬ 
bound  e-mail  WebmaU,  Web  posts  and 
instant  messages  to  ensure  that  no  con¬ 
fidential  data  leaves  the  company.  The 
software  includes  search  algorithms 
and  can  be  customized  to  automatical¬ 
ly  detect  specific  types  of  data  such  as 
lists  on  a  spreadsb^t  or  even  some¬ 
thing  as  granular  as  a  customer's  Social 


Security  number.  The  firm  began  using 
the  product  after  it  went  through  lay¬ 
offs  in  2000  and  2001. 

’’Losing  customer  information  was  a 
I  primary  concern  of  ours."  says  the  firm’s 
chief  information  security  officer,  who 
asked  to  not  be  identified.  “We  were 
concerned  about  people  leaving  and 
sending  e-mail  to  their  home  ac¬ 
counts."  In  fact,  he  says,  before  using 
the  firewall  the  company  had  trouble 
with  departing  employees  taking  intel¬ 
lectual  property  and  using  it  in  their 
new  jobs  at  rival  firms,  which  some¬ 
times  led  to  lawsuits. 

Beyond  its  desire  to  protect  competi¬ 
tive  information,  the  financial  services 
firm  b  bound  by  federal  regulations 
to  safeguard  the  integrity  of  certain 
types  of  infortnatiorL  "We’re  constant  • 
iy  [looking]  for  things  that  could  be  vi¬ 
olating  laws,"  the  executive  says.  Still, 
he  says,  the  firewall  isn't  a  cure-all  The 
firm  also  uses  noncompete  and  nondis¬ 
closure  agreements  as  deterrents  to 
'  stealing  information. 

RisiiigRisk 

Vijay  Sonly.  chief  technology  officer  at 
advertising  firm  Foote  Cone  &  Belding 
Worldwide  in  New  York,  says  losing 
customer  information  to  competitors 
b  a  growing  concern,  particularly  in 
industries  where  companies  go  after 
many  of  the  same  clients. 

"We  have  a  lot  of  account  executives 
who  are  very  close  to  the  clients  and 
have  access  to  client  lists,"  Sonty  says. 
"If  an  account  executive  leaves  lo  join 
a  competitor,  he  can  take  all  thb  confi¬ 
dential  information."  The  widespread 
sharing  of  corporate  data,  such  as  cus¬ 
tomer  contact  information,  has  made  it 
easier  for  people  to  do  their  jobs,  but  it 
has  also  increased  the  risk  of  losing 
confidential  data.  Sonty  says. 

He  says  the  firm,  which  mandates 
that  some  employees  sign  noncompete 
agreements,  b  looking  into  policies 
and  guidelines  regarding  the  proper 
use  of  customer  information,  as  well  as 
audit  trails  to  see  who’s  accessing  cus¬ 
tomer  lists.  "I  think  it  makes  good  busi¬ 
ness  sense  to  take  precautions  and 
steps  to  prevent  this  from  happening." 
Sonty  says.  could  lose  a  lot  of 
money  if  key  people  leave."  O  47B21 

Violino  b  a  freelance  writer  in 
Mossqpequo  Pork.  NY  Contact  him 
at  bviolino@optonline.net 
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technical  competence:  yet  another  reason  to  outsource  with  spi 


au  cious  endings 


Any  IT  project  can  get  off  to  a  great  start.  But  SPI  has  the  methodologies,  standards,  tools  and  technical 
savvy  to  deliver  successful  endings,  too.  Our  global  delivery  model  includes  CMMI  Level  5  (in  progress). 
Six  Sigma  and  ISO  9001:2000  certifications.  And  if  you  like  our  operational  capabilities,  you'll 
really  appreciate  our  grasp  of  your  industry,  and  how  closely  we  align  our  business  with  yours. 
To  learn  more,  contact  us  at  678-921-7654  or  sales@spiPortal.com.  Visit  us  at  www.spiPortal.com. 
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Asset  Management 
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CompGaiwe  in  IT 
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Innovation 

Convergence 
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BARBARA  GOMOLSKI 


The  Sickly 
rr  Recovery 


HERE’S  AN  ALL-TOO-FAMILIAR  scenario: 

The  CIO,  who  cut  10%  of  the  annual  IT 
budget  last  year,  meets  with  the  CFO  and 
the  CEO  to  do  early  budget  planning. 

The  executives  look  at  the  current  IT 
budget  and  aimounce  that  further  IT  cuts  may  be  in  or¬ 
der.  “Based  on  what?”  the  CIO  dares  to  ask.  Based  on 
an  arbitrary  feeling  on  the  part  of  the  other  top  execu¬ 
tives  that  further  reducing  IT  spending  will  have  no 
negative  impact  on  the  company. 


Welcome  to  the  IT  recov¬ 
ery.  In  case  you  hadn’t  no¬ 
ticed,  this  so-called  IT  re¬ 
covery  looks  a  lot  like  the 
IT  recession  of  the  past  few 
years.  How  can  that  be?  The 
stock  market  is  improving, 
corporate  earnings  are  up, 
and  jobs  are  being  created. 

After  two  years  of  technol¬ 
ogy  cutbacks,  shouldn’t  IT 
be  in  the  money? 

Make  no  mistake:  thii^ 
are  better  than  they  were 
iust  six  months  ago  in  the 
IT  sector.  The  pickup  in  the 
technology  industry  is  evi¬ 
denced  in  the  improved  performance 
of  stalwarts  like  Intel,  Oracle  and  HP. 
(It*s  still  a  tough  road  for  smaller  play¬ 
ers,  as  organizations  seem  increasingly 
uninterested  in  dealing  with  more 
than  a  short  list  of  key  suppliers.) 

Indeed,  many  IT  executives  will  ac¬ 
tually  see  incremental  (3%  to  S%)  in¬ 
creases  in  their  budgets  in  the  next 
year.  However,  the  IT  hangover  that 
many  firms  experienced  earlier  rhi< 
decade  has  left  a  tasting  impression 
on  those  who  control  the  IT  purse 
strings.  The  result:  IT  executives  are 
not  going  to  get  enough  money  to  pur¬ 
chase  all  the  mueb-n^ed  in&astruc- 


I 


hire  upgrades  or  to  make 
all  the  desired  application 
investments.  Instead, 
tight-fisted  top  executives 
will  continue  to  watch 
every  dollar,  and  justify¬ 
ing  an  IT  investment  will 
feel  like  rolling  a  large 
rock  uphill 
Pm  troubled  by  what 
appears  to  be  a  growing 
drumbeat  among  oon-IT 
executives  that  keeping  IT 
investments  at  bay  won’t 
hurt  the  organization. 
(These  are  the  same 
execs,  by  the  way,  who 
were  dumping  heaps  of  money  into 
e-businesses  a  few  years  ago.  throwing 
caution  to  the  wind.) 

What  can  we  do  about  this?  A  few 
things  would  help: 

■  We  need  to  fece  this  IT  credibility 
gap  bead-on.  Instead  of  continuing  to 
plug  away  and  hope  that  the  business 
sees  how  IT  contributes,  we  need  to 
talk  about  the  value  contribution  of  IT 
on  a  regular  basis.  This  means  having 
a  structured  set  of  operational  and 
business  metrics  that  everyone  agrees 
capture  the  essence  of  IT  value. 

■  We  need  to  recognize  that,  to  a 
laige  extent,  the  day-to-day  operations 


of  IT  have  become  a  utility.  Stop  look¬ 
ing  to  these  areas  as  a  means  to  justify 
further  IT  investment.  Ensure  that 
your  IT  organization  is  a  hi^-quality. 
low-cost  utility  provider,  either 
through  insourcing  or  outsourcing.  Fo¬ 
cus  the  bulk  of  your  energies  on  the 
areas  where  IT  can  have  the  most  im¬ 
pact  on  the  business:  applications  and 
innovation. 

■  We  need  some  innovation  in  the 
industry.  We  need  the  next  big  thing 
—  the  must-have  technology  that  will 
once  again  bring  great  enthusiasm  for 
IT.  There’s  not  much  that  consumers 
of  IT  or  businesses  can  do  to  propel 
this.  As  IT  leaders,  we  must  k^  pro¬ 
viding  vendors  with  the  feedback  they 
need  to  make  innovative  products  and 
services.  Also,  keep  IT  innovation 
alive  in  your  own  organization,  be¬ 
cause  many  IT  innovadons  are  born 
in  unlikely  pla<^ 

As  for  the  future  of  IT.  those  who 
say  it's  just  a  utility  may  be  underesti¬ 
mating  the  power  of  IT  innovations 
to  disrupt  the  way  we  live  and  work. 
Maybe  Fm  optimistic  because  Fm  old 
enough  to  remember  woiidng  in  a 
world  where  there  was  no  World  Wide 
Web  and  where  most  people  actually 
looked  things  up  in  big  books  instead 
of  on  the  Internet.  Maybe  that’s  why  I 
don’t  believe  we'll  really  get  out  of  the 
FT  slump  until  the  industry  delivers 
the  next  wave  of  innovation. 

But  I  have  confideoce  that  the  inno¬ 
vators  of  the  IT  industry  aren’t  going 
to  sit  back  and  say,  "Well,  we’ve  con¬ 
quered  business  with  FT;  shall  we 
go  pursue  a  career  in  blotech.>"  I  be¬ 
lieve  that  IT  innovations  will  come 
along  —  innovations  that  we  can't 
even  imagine.  O  47796 
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THE  BEST-RUN  BUSINESSES  RUN  SAP 


Imagine  I  T.  ihat  s  flexible  emnigh  to  help  you  reach  your  business  goals  quickly  and  efficiently.  The  S.\?  NetWeaver  platform  speeds  integration 
and  makes  the  job  of  managing  applications  a  lot  more  manageable.  So  you  can  make  changes  and  implement  new  strategies  faster  than  eser. 
V  isit  sap.com  neiweaver  or  call  800  880  1727  to  seize  oppiirtunities  as  they  arise. 


Introducing  IronPort  Virus  Outbreak  Filters 

Today’s  email  borne  viruses  propagate  globally  in  hours  or  minutes,  much  I 
faster  than  traditional  defenses  can  react,  leaving  you  exposed  to  the  “reaction 


Today’s  email  borne  viruses  propagate  globally  in  hours  or  minutes,  much 
faster  than  traditional  defenses  can  react,  leaving  you  exposed  to  the  “reaction 
time  gap?  IronPort’s  Virus  Outbreak  Filters™  stop  viruses  4  to  6  hours  before 
traditional  virus  definition  files  are  available,  literally  predicting  virus  attacks 
before  they  cause  harm.  Predict  your  future  at  www.ironport.coin/cw 


iFOnPort's  A/VI  techncMo^ 
IS  a  senes  of  atgonthms 
tnat  process  oata  from 
SenderBase:  the  worM's 
largest  email  traffic 
monitoring  network  . 


I  ))  IRONPORT" 


Rebuilding  the  World’s  Email  Infrastructure. 


www.ironport.com/cw 


YbuCoRrst 

Many  CIOs  like  to  stay  a 
version  or  two  behind  their 
vendor's  latest  e-mail  offering, 
waiting  untU  the  ROI  for  an 
upgrade  is  clear.  RASE  40 


Suite  Dilemmas 

Big  companies  like  the  simplicity  and 
integration  of  collaboration  suites. 

At  Minnesou  Life  Insurance  CIO 
Jean  Delai^  Nelson  (left)  says 
standardizing  on  Notes  improved  the 
quality  of  commimications.  RAGE  36 
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OPINION 

The  End  o(  E*fnail 

Can’t  live  without  e-mail? 
C:olumnist  Mark  Hall  thmkt  you 
can  —  and  will  —  in  the  near 
future,  when  it  becomes  more 
trouble  than  it's  worth.  RAGE  44 


rr  managers 
face  choices 
about  collabora¬ 
tion  suites  and 
when  to  upgrade 
e-mail  systems. 


Big  Decisions 


IT  WAS  AN  EXCfnn  TME  when  I  got  my  MCI 
Mail  account  more  than  10  years  aga  But  to¬ 
day,  provocative  headlines  say  that  e-mail  is 
dead  or  dying  thanks  to  the  dual  curses  ctf 
viruses  and  spam  [C^iicklink  44143]. 

They^ie  certainly  caused  big  produc- 
tivity  hits  and  m^  e-mail  a  lot  less 
fun.  My  colleague  Marie  Hall  cleveriy 
makes  that  case,  too  (see  pt^  44). 

But  there’s  another  sdiool  of 
thought  that  says  e-mail  is  a  mission-critical  • 

business  tool  —  one  so  vital  that  big  business-  * 
es  will  hardly  even  consider  outsourdiig  their  * 
e-mail  systems  because  they  couldn’t  bear  kts-  * 
ing  control  (see  page  38).  Looked  at  this  way,  • 
e-mail  isn’t  dying  at  aU,  de^e  the  annoy-  • 


EDITOR’S  NOTE 

ances.  In  disaster  recovery  situations,  some 
users  say  e-mail  is  the  first  system  they  want 

restored!  And  the  20%  of  e-mail  that  isn't 

qiam  can  be  dam  important  —  just  ask  an  IT 

9  administrator  dealing  with  posi¬ 
tives  caugbt  in  the  spam  ftlter. 

I  suspect  the  future  lies  somewhere 
in  the  middle.  E-mail’s  role  is  receding 
into  the  bad^round;  it’$  becoming  Just 
another  element  of  broader  collabora¬ 
tion  suites,  alongside  instant  messagmg  and 
Web  conferencing.  Eventually  e-mail  will 
show  up  in  a  desktop  "activity  center,"  mixed 
in  with  digital  voice  mail,  duit.  documents 
and  cdlaboration  screens,  all  txganized  by 
whatever  {WDfect  you're  working  on.  And 


Goc^e-Iike  search  engines  will  rntm*  e-mail 
archives,  where  a  k>i  of  institucicmal  memory 
resides. 

In  that  case,  e-mail  will  be  a  still-vital  yet 
unexciting  ingredient  in  the  electronic  soup. 


Mitch  Betts  is  C^omputerwortd 's  features 
editor.  Contact  him  of  imtch_bens@ 
computerworidxom. 
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ESSAGING  SOFTWARE 
has  become  so  criti¬ 
cal  that  it's  hard  to 
hn^ine  businesses 
functioning  without 
it  Online  coUabora- 
don  products  have 
also  becmne  vitaL  The  question  is. 
should  you  buy  a  mess^ing/coUabora- 
don  suite  6om  one  vendor  or  purchase 
individual  products  for  e-mail  and  col- 
laboradon  from  several? 

There  are  pros  and  cons  to  both 
strat^es,  industry  analysts  and  IT 
managers  say.  But  more  organizadons 
seem  to  be  choosing  the  suite  opdoa 
Fm  most  software  implementations, 
there's  typically  a  50-50  split  between 
cmnpanies  that  buy  best-of-breed  ap¬ 
plications  and  those  that  purchase  all- 
in-ooe  suites.  But  fr>r  messaging  and 
collaboration  applications,  it's  more 
like  70%  to  80%  favoring  suites,  says 
I  Nate  Root,  an  analyst  at  Forrester 
Research  Inc 

The  suite  preference  can  be  largely 
attributed  to  the  market’s  growth.  The 
biggest  players.  IBM  and  Microsoft 
Corp.,  DOW  account  for  about  two- 
titirds  of  product  sales,  and  customers 
feel  comfortable  enough  with  the  ven¬ 
dors  and  their  products  to  fork  over 
wdiat  can  amount  to  hundreds  of  thou¬ 
sands  of  dollars. 

Anotb^  big  selling  point  is  that 
everything  is  already  integrated.  Indi¬ 
vidual  products  might  not  work  well 
tc^ther  and  often  need  custom  coding 
for  integration.  “Some  of  the  most  im¬ 
portant  features  today  are  identity 
management,  corporate  directories 
and  security  poUdes."  Root  says.  “It's 
becoming  increasii^  important  that 
you  get  those  services  from  a  central 
platform,  where  everything  is  woven 
for  you.*  Such  a  platform  can  help  en¬ 
sure  that  only  authorized  users  have 
access  to  applications  such  as  e-mail 
and  instant  messaging. 

Minnesota  life  Insurance  Co.  had 
been  (grating  a  dual  environment  of 
Lotus  Notes  and  Microsoft  Exchange 


until  about  four  years  ago,  when  the  St 
Paul-based  company  decided  to  stan¬ 
dardize  on  Notes  for  e-mail  and  collab¬ 
oration,  says  Jean  Delaney  Nelson,  vice 
president  and  CIO. 

But  the  transition  from  Fvchangp 
wasn't  without  hardships,  she  says. 
Many  employees  bad  grown  accus¬ 
tomed  to  using  one  system  or  the  oth¬ 
er,  and  some  Exchange  users  were  hes¬ 
itant  to  make  the  switch,  says  Nelson. 

“We  couldn’t  build  a  consensus 
[among  end  users]  on  which  way  to 
go,  so  we  had  some  resistance,”  she 
says. 

A  Way  to  Simplify 

One  of  the  biggest  deciding  factors  for 
Minnesota  life  was  the  need  to 
e-mail  records  retention  easier,  a  con¬ 
cern  related  to  compliance  with  regu¬ 
lations  such  as  the  Health  Insurance 
Portability  and  Accountability  Act. 
There  are  just  three  major  vendors 
that  woric  well  with  more  than  one 
e-mail  system,  but  a  company  standard¬ 
izing  on  one  platform  has  many  more 
vendor  choices.  And  archiving  from 
two  platforms  also  has  the  potential  to 
drive  up  overall  costs,  says  Nelson. 

Minnesota  Life  also  needed  a  stan¬ 
dardized  messaging  system  that  could 
improve  the  quality  of  communica¬ 
tions.  Prior  to  the  switch,  different  di¬ 
visions  used  different  e-mail  systems. 
There  wasn't  always  a  clean  exchange 
of  messages,”  she  says.  “Now  we’re  all 
on  the  same  platform,  and  we  can  en¬ 
sure  that  messages  are  going  through 
in  an  understandable  format  " 

It's  now  easier  to  collaborate  on 
business  projects  by  sharing  informa¬ 
tion  on  databases.  Nelson  adds.  “We 
use  [the  software]  extensively  for  proj¬ 
ects  and  collaborative  purch^s,”  she 
says.  Before  the  switch,  the  insurer 
couldn't  use  its  e-mail  systems  to  share 
mformation  in  cross-division  projects 
such  as  product  development  and 
product-line  acquisitions  from  other 
companies. 

Minnesota  Life  has  also  found  the 


M^y  big  comj^es  like  the  simplicity  and  int^tion  of  collaboration 
suites,  though  they  get  someless-than-ideal  components.  By  Bob  Violino 

Suife  Hemmas 
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single-platfono  approach  to  be  more 
cosl-eflfective.  It  now  relies  on  just 
one  group  for  support,  rather  than  a 
different  support  staff  for  each  envi¬ 
ronment.  The  company,  which  has 
2,600  Notes  users,  is  saving  about 
$1  million  a  year  by  standardizing  on 
one  e-mail  system.  Nelson  says.  Cost 
reductions  stem  from  support  staff 
savmgs.  decreased  downtime  and  oth¬ 
er  factors,  she  says. 

Single  Point  of  Contact 

About  a  year  and  a  half  ago.  Temple 
University  in  Philadelphia  consoUdat- 
ed  all  of  its  e-mail  messaging  hardware 
and  software,  says  Timothy  OKouite, 
vice  president  for  computer  and  infor- 
matioo  services.  The  university  had 
been  operating  U  e-mail  systems,  in¬ 
cluding  a  Unix-based  appUcation.  Ex¬ 
change  and  Novell  Idc.'s  GroupWise. 
E-mail  systems  varied  among  the 
schools  within  the  university  system 
and  administrative  offices. 

When  O’Rourke  took  his  current  po¬ 
sition  at  Temple  in  September  2002. 
the  university  was  looking  for  yet  an¬ 
other  e-mail  system.  He  says  be  want¬ 
ed  to  invest  in  a  single  system  that 
would  provide  central  management  of 
all  e-mail,  spam  rdtering,  shared  calen¬ 
daring  and  collaboration  for  the  entire 
organization. 

Temple  opted  for  a  messaging  plat¬ 
form  from  Mirapoint  Inc.  that  included 
all  of  those  components.  Among  the 
major  benefits  is  unproved  reliability. 
O'Rourke  says.  “In  the  past,  the  biggest 
complaint  was  that  e-mail  was  always 
down  or  messages  were  not  going 
through.”  he  says.  The  new  platform 
has  addressed  Aose  problems. 

Like  Miiuiesota  Life.  Temple  has  re¬ 
alized  cost  savings  from  more  efficient 
support,  including  reallocating  three 
full-time  support  people.  Whenever  a 
problem  crops  up  with  e-mail  or  other 
components,  the  university  now  Hoatc 
with  one  vendor  rather  than  several 
But  there  are  drawbacks  to  the  suite 
approach.  O'Rourke  acknowledges. 

Some  of  the  functions,  such  as  collabo¬ 
ration  and  shared  calendaring,  aren’t 
as  robust  as  they  might  be  with  prod¬ 
ucts  devoted  to  those  functions.  But 
the  vast  majority  ofTerople’s  45.000 
users  need  only  messagmg  and  simple 
calendar  capabilities.  O’Rourke  says. 

The  suite  “doesn’t  meet  all  the  needs 
of  everyone."  be  adds.  "It’s  an  out- 
standii^  messaging  system  but  needs 
[work]  00  the  groupware  side." 

Suites  provide  adequate  compo¬ 
nents.  but  not  the  best  ones  available, 
agrees  Root.  "As  with  any  all-encom¬ 
passing  suite,  you  pay  a  lot  of  money 


Hare's  a  look  it  tha  mMHgkig/ 
colaboratkM  aofhaara  padogaa  from 
iaadfog  vandore,  haaad  on  ^Dduct 
•Miwtfom  by  Forreatar  Raaaareh 
Inc.lnllwch200«: 

•  IBM  Inlua  Nolaa  and  Oomkio 
fi.6.1  The  latest  Lotus  cdaboiation  piai- 
lomi  provides  integrated  (youpMare.  Vk!^ 
conferencing,  instant  messaging  and  doc- 
umani  management.  The  software  also  n- 
dudes  IBM  Lotus  Team  Wwfqilace.  wtech 
dravides  both  Web  and  ^kMe5  inteflaces  to 
spectallzed  team  colaborabon  databases 
that  support  docunere  sharinQ.  threaded 
discifisom  and  workflow.  IBM  Lotus 
Oomino  Docurnent  Management  supports 
more  advanced  features  such  as  check-in/ 
checkoutanditersioncontroLThernni- 
mumkcensecostforasingieOPUdeploy- 
mentsupporttngX)us8rsisS6.224.n- 
duding  a  per-user  variable  coet  of  S276. 

The  cost  for  tOOO  users  and  10  CPUs 
isS300.000. 

■McmftCorp.'aWIndoMSorv 
tr  SyUMH  and  Oflioo  SyMMu  2003. 

Majex  cornponente  ncfoiM  Exefange  Serv¬ 
er  20(^  for  enterprise  e-mai.  schediding 


Product  Roundup 


and  task  managemenUjvB  Communica¬ 
tions  Server  2003  and  Wndows  Messen¬ 
ger  for  enterproe  instant  messaging;  Mi- 
OQsoftORiceLfveMBetingtorWbbcon- 
fwBncvtg.  appkcalion  sharing  and  chat 
and  McrosofI  Office  SharePM  Axial 
Server2003forcommunity-basedc(idab- 
oration.  doaxnent  rnanagemem  and  shar¬ 
ing.  and  threaded  discussiorB.  Clent  Out¬ 
look  provides  an  online  and  ofl-ine  inter¬ 
face  to  e^schedukngwdtBks  The 
minxnumlicensecost8$28.3501orasin- 
gte-server  archrtectere  supporting  10  users 
for  one  jtear ,  Deidoyment  on  faidl-toler»d 
servers  for  100  users  costs  more  th»i 
S100.000. 

■  NoveTe  eraupWlet  8.5.  Aovides 
e-maiandscheddxigcapabiltes.inciud-  : 
mg  sophtsixatad  message  ttervig  ml 
online  access  and  an  instant  messagng 
cornponent  caled  Novel  QrmgiWtee  Mes¬ 
senger.  Olfwr  components  nctude  besK 
doaanent  menagernerd  ktni  wShin  the 
e-mad  and  srhediing  ckent  cornmurety 
colatxxation  (tepabiltes;  and  ffovel 
d  Office,  which  provides  bfowsw  based 
cobboiaiicm  kwb  such  as  docuneni  shar- 


upfront  for  a  lot  of  very  good  but  not 
best-of-breed  services."  be  says. 

For  example,  Root  says,  some  of  the 
instant  messaging  features  built  into 
suites  don't  match  stand-alone  IM 
products  in  performance,  especially 
for  messaging  outside  the  enterprise 
firewall  that  irtvolves  multiple  IM 
clients.  “Big  suites  tend  to  be  very  loy¬ 
al  to  their  own  brand  and  ignore  the 
fact  that  ocher  companies  have  differ¬ 
ent  IM  software,"  he  says. 

Eric  Goldforb,  CIO  at  financial  ser¬ 
vices  firm  PRG-Schultz  IniematiooaJ 


Inc,  has  used  both  approaches  and 
sees  the  advantages  of  each.  At  the 
Atlanta-based  financial  services  firm, 
which  has  3.200  employees,  a  suite 
makes  more  sense  because  it's  more 
scalable  and  cost-effeaive  for  large 
organizations.  PRG  uses  Lotus  Notes 
as  its  standard  for  messagmg  and 
collaboration. 

But  the  mulcivcndor  strategy  can 
make  more  sense  for  smaller  and  mid¬ 
size  con^tanics.  Goldfarb  says.  When 
he  was  OO  at  Global  Knowledge  Inc. 
4n  IT  education  and  training  firm  with 


ina  threaded  dBcussons  and  detegated 
•kwtesbalion.  A  dient  nottbcatxxi  pro- 
giamcaledGraivWiseNotifyinonloisin- 
cdmnge-fnad  and  calendar  events  The 
pn)dudcosteSt21.127.in(hjdingasingle- 
leer  license  of  6rtR«Wise  6.5.  me  NimI 
eOrectory  8.7.3  user  license,  one  Novel 
exteNd  Enteiprse  Sule  enj  icense  md 
hve  user  licenses  of  Novel  NetWare  6.5. 

*  t^ade  Corp.*s  CoiiboriMoo 
StitteRelaaie^Aowdesbascenter- 
pnse  emM  features  through  a  biMhki  VWb 
mteriace.  Web  conteieiicxiu.  voice  and  to 
ntegrabon.  and  base  gromeani  features, 
but  not  instani  messaiyng  Tto  product 
lacks  an  e-mail  ckenl  so  most  customers 
use  Mnosoft  Outlook  as  a  frorii  end.  OCS 
luns  on  the  Orade  9  Appfecahon  Stfve 
wfKh  includes  B»0nde9iASF^  Tto 
portd  ncbjdes  feetues  such  as  document 
shamg.  fWcgalpd  aiknwstrtoon  otI 
polino.OradeiAbbConieiencxignte- 
gtoes  with  CoUoration  State  to  provide 
Wab  conterencmg  capabMes.  ntoftig 
aP(>lication  shanng.  wfteeboanl^ 
sentabon  fflukcastng.  poing  and  vee- 
greled  dot.  The  suite  costs  360  par  UBS 


1.500  employees,  the  Cary,  N.C-based 
company  used  a  combination  of  Ex- 
chai^  for  e-mail  and  products  from 
multiple  vendors  for  functions  such  as 
calendaring  and  document  sharing. 

“We  cobbled  together  a  set  of  pack¬ 
ages  to  achieve  this  overall  collabora¬ 
tive  workspace,  and  it  worked  well,” 
Goldforb  says.  Because  the  compo¬ 
nents  were  focused  on  specific  ia«k5. 
they  provided  greater  functionality 
than  was  available  from  suite  products, 
he  says.  For  example,  a  document  man¬ 
agement  product  from  an  rndependeni 
vendor  can  provide  a  finer  dr^ree  of 
detail  for  records  management  than  a 
suite  can. 

However.  Goldfarb  adds,  the  multi- 
vendor  af^roach  would  be  more  costly 
for  a  larger  organization. 

Root  agrees  that  buying  individual 
applications  might  be  the  best  option 
for  small  and  midsize  con^ianies. 
“Smaller  companies  don't  need  most  of 
the  uduz-bang  features  of  the  big  plai- 
forms,”  he  says.  “Many-  don't  use  nniity* 
group  scheduling  and  caleitdanng.  and 
they're  perfectly  happy  using  public 
instant  messaging  services  and  e-mail 
that's  built  into  Linux  or  another  (^>en- 
source  platform."  O  47576 


Vtolino  is  ayiveiance  writer  tn 
Massapequa  Park.  SY.  Contaa 
him  at  bviolino^optonlinejiet. 
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The  market  for  hosted  e-mail  hasn’t  taken  off 
like  the  indus  try  expected.  Many  IT  managers 
say  ^mail  is  siinply  too  business-critical  to  turn 
over  to  an  outsourcer.  Bv  Todd  R.  Weiss 


YOU  MAY  BE  WONDEKINC  if 
your  company  can  benefit 
by  outsourcing  its  messaging. 
For  most  organizations,  h 
all  comes  down  to  how  vital 
e-mail  is  to  their  daily  operatioos. 

"y/t  have  [news  and  information] 
content  we  pass  around  the  globe.* 
says  Aggie  Cotrooe.  senior  director  of 
desktop  operations  and  messaging  at 
New  York-based  magazine  pubUsber 
1106  Inc.  ‘It's  all  rapid-nre.  There  are 
dozens  of  magartnes.  all  different 
deadlinrs  and  all  difierent  product  cy¬ 
cles.  There  are  reporters  all  over  the 
world  literally  every  day.” 

Cutrone  says  Hoe  h^'t  considered 
moving  e-mail  to  an  outside  vendor 
because  it  is  so  crucial  to  its  opera¬ 
tions  and  14.000  worldwide  e-mail  ac¬ 
count  users.  1b  ensure  that  e-mail  is  al¬ 
ways  available,  the  coo^tany  owtfinuef 


to  operate  those  critical  systems  on  its 
own.  says  Cutrone. 

That’s  not  unusual  In  foct.  cus¬ 
tomers  haven’t  embraced  e-mail  out¬ 
sourcing  over  the  past  few  years  as 
vendors  hoped  th^  would,  says 
Robert  Mahowald,  an  analyst  M IDC 
Customers  tend  to  outsource  their 
whole  coll^joration  applications,  in¬ 
cluding  e-mail  as  a  component  rather 
than  outsourcing  e-mail  as  a  stand- 
afone  appUcatioa.  For  some  customers, 
hosted  e-mail  alone  *didn‘t  w*alr«« 
from  a  privacy,  management  and  secu¬ 
rity  standpoint*  he  says. 

One  indicator  of  that  trend  is  the  de¬ 
clining  number  of  Microsoft  Corp.  cer¬ 
tified  partners  ofierii^  hosted  Ex¬ 
change  e-mai]  services.  In  2000, 30 
partners  were  available.  Mahowald 
says.  In  2001  that  munfaer  dropped  to 
11.  and  today  it's  just  sevea  ’Ihe  market 


hasn't  taken  off  because  ’‘some  large 
(user]  companies  have  just  not  trusted 
the  model.  It’s  really  a  complex 
process  to  integrate,”  Mahowald  says. 

Controlling  What’s  Critkai 

IVro  years  ago.  when  Tune  moved  its 
e-mail  systems  from  cc:Mail  to  Ex¬ 
change  2000  and  Outlook,  obsolete 
equipment  was  replaced  and  the  entire 
system  was  revamped.  But  operations 
were  kept  in-house  to  mainrain  systems 
management  and  control  because  of 
e-mail’s  critical  nature,  says  Cutrone. 

She  says  she's  not  against  outsourc¬ 
ing.  In  fact.  Tune  does  outsource  some 
a^Ucations.  But  those  decisions  are 
made  system  by  system.  Cutrone  says. 
“For  us.  we’d  never  even  consider  (out¬ 
sourcing  e-mail).  It’s  not  that  we  don’t 
look  at  outsourcing  at  all.  We  do  it 
where  it  makes  sense."  she  says. 

But  Hadley  Reynolds,  an  analyst  at 
Delphi  Group,  says  the  desire  to  main¬ 
tain  tight  control  over  e-mail  shouldn't 
automatically  rule  out  outsourcing. 

“It’s  not  the  issue  of  where  the  proc- 
essii^  gets  done  physically,  it’s  the 
whole  issue  of  setting  policies,”  which 
can  also  be  tightly  maintained  by  an 
e-mail  hosting  provider,  he  says.  “It 
doesn’t  matter  where  it  is.  That'c  what 
service-level  agreements  and  out¬ 
sourcing  management  agreements  are 
all  about  Ibcfanical  deployment  issues 
are  the  least  of  the  problem.” 

David  Ferris,  an  analyst  at  Ferris  Re¬ 
search  Inc.,  says  companies  that  out¬ 
source  are  usually  smaller  and  wel¬ 
come  the  chance  to  offload  their  com¬ 
plicated,  management-intensive  e-mail 
systems.  “Larger  companies  don’t  want 
to  outsource  their  e-n^,”  Ferris  says, 
particularly  because  the  systems  are 
too  important  to  their  operations  and 
they  don’t  want  to  give  up  direct  over- 
sight  Other  reasons  are  tpchnifai,  fv- 
change.  for  example,  requires  high  data 
rates  for  off-site  mail  servers,  which  in¬ 
creases  costs  and  comfdexity,  be  says. 

HosUng  Through  a  Bad  Raich 

One  organization  that  chose  outsourc¬ 
ing  is  the  Cystic  Hbrosis  Foundation  in 
Betbesda,  Md.  a  nonprofit  that  sup¬ 
ports  more  than  US  cystic  Hbrosis  care 
centers  nationwide.  CFF  outsourced  its 
e-mail  function  several  years  ago  be¬ 
cause  tike  organization’s  internal  IT  de¬ 
partment  was  In  shambles,*  says  CIO 
Greg  August 

CFF  has  about  6S0  e-mail  accoums, 
but  those  users  are  spread  throughout 
approximately  80  offices  and  some  200 
hospitals,  making  its  e-mail  infrastruc¬ 
ture  complicated.  August  says  tus  pre¬ 
decessors  chose  to  outsource  to  US- 


Top  Tier 

A  samplno  of  the  players  in  the 
e-mai  outsourcine  martoL 

Apptti 

■www.apptix.com 

Provides  service  automation  software  for 
the  outsoixced  messaging  and  desktop 
services  market,  induding  a  packaged  mar¬ 
keting  and  sales  program. 

USAiMInc. 

■www.usanet 

l^ovides  e-mail  and  messaging  outsourcing 
for  businesses  and  Web-based  messaging 
services  for  individuals  and  businesses. 

EquurtNV 

•www.eguant.com 

Provides  gidial  data  network  operations, 
induding  LAN-to-LAN  interconnections, 
WAN  connectivity,  dedicated  Internet 
access,  virtual  private  networks  and  Web 
site  and  application  hostrig. 

USintBmetwoildng  Inc. 

■www.usi.net 

Provides  hosted  applicatioris  via  the  Inter¬ 
net  for  e-commerce,  customer  support  hu¬ 
man  resources  axl  financiat  management, 
and  messaging  and  enterprise  applicahons. 

MuncEs  MooveiiscoH  company imesiics 


internerworidng  Inc.  in  Annapolis. 
Md.,  “because  of  a  lack  of  confideDce 
in  the  IT  staff”  But  while  August  says 
he’s  been  happy  with  the  arrangement 
with  USinternetworking.  ongoing  im¬ 
provements  in  his  IT  staff  and  rising 
costs  for  outsourcing  will  likely  have 
him  reviewing  whether  he  will  renew 
the  contract  in  about  18  months.  “It's 
served  us  pretty  well”  says  August. 
“It's  just  a  completely  different  land¬ 
scape  now.  We’re  ri^t  on  the  brink  of 
bringing  some  things  back  in-house.” 

For  many  companies,  maintaining 
control  of  e-mail  with  in-house  staff  is 
more  appealing  than  turning  h  over  to 
a  vendor,  says  Mahowald.  In  a  multistte 
organization  with  more  than  5,000 
users,  “don't  even  bother  to  look  at 
[outsonrcingl*  he  says.  “You  are  going 
to  find  that  it's  going  to  be  more  of  a 
headache  than  it's  worth.”  But  be 
adds,  smaller  oiganizatioos  should 
“absolutely  give  it  a  try.”  O  47582 


KUrnUBtflD 

Som  csn«aniM  hM  backn  c«ns  specific^ 
deagwdto  a— waccees  to  thaffrtr^  systems  n 


HP  can  help  you  predict  the  business  benefits  of  a  large-scale  wireless  solution  without  large-scale  risks. 

When  you  envision  your  ideal  enterprise-wide  wireless  solution,  whot  do  you  see?  No  doubt  security,  monogeobility,  scolobility  ond  flexibility 
lump  immediately  into  focus.  HP  con  now  offer  you  o  glimpse  into  your  wireless  future  by  helping  you  develop  □  wireless  pilot  designed  for  your 
business.  Our  service  professionals  will  help  you  build  on  end-t<«nd,  secure  wireless  network  using  HP  open-stondords  technologies.  These 
work  in  conjunction  with  o  wide  ronge  of  tested,  best-of-breed  solutions  from  our  strotegic  softwore  portners,  so  you  ore  not  confined  by  o 
limited  selection  of  proprietory  products.  HP  pilots  offer  o  unique  opportunity  to  tolly  the  business  benefits  of  o  well-plonned  wireless  network 
before  you  move  to  o  full-scale  implementation.  And  of  course,  we'll  provide  o  wealth  of  choices,  so  you'll  be  assured  your  pibt  is  a  perfect 
fit  for  your  business.  Demand  canfidence  in  wireless  technologies.  Demand  proven  cost-efficiency.  Demand  HR 


HP  recommends  Microsoft*  Windows*  XP  Professionol  for  Mobile  Computing. 
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HOW  DO  YOU  DECIDE  that  it’s  time  to 

upgrade  your  company's  e-mail  system? 

If  you’re  like  a  very  few  CIOs,  you  up¬ 
grade  every  time  your  vendor  releases  a 
f»ew  version.  Or,  conversely,  you  may  bang 
onto  an  older  version  even  after  the  vendor  stops 
supporting  it.  But  more  likely,  you  prefer  a  balanced 
approach  like  that  used  by  Eric  Goldfarb.  CIO  at 
PRG-Schultz  International  Inc.,  a  $376  million  recov¬ 
ery  auditing  firm  in  Atlanta. 

Before  giving  the  go-ahead  to  upgrade  his  compa¬ 
ny’s  e-mail  system  from  Lotus  Notes  5.0.3  to  6.5.1, 
Goldfarb  compiled  what  he  calls  the  '‘David  Letter- 
man  Top  10"  reasons  to  upgrade.  “1  wait  until  things 
pile  up.  Then  I  look  at  that  pile  and  ask.  'What's  it 
worth  to  us?* "  be  explains.  “There's  a  cost  to  move 
[Domino]  applications,  so  I  want  to  make  sure  I’m 
going  to  gel  a  good  return  on  investment.  With  an  in- 


M:ui\'  CIOs  like  to  sta\’  a 
version  or  two  behind  their 
vendors  latest  e-mail  offering, 
until  the  ROI  for  an  upgrade 
is  clear.  By  Sue  Hiloreth 


h 
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cremental  upgrade.  I'm  not  going  to  get  a  good  ROL" 
That  payback,  which  Goldfarb  expects  to  achieve  six 
months  after  the  upgrade  is  rolled  out.  will  come  in 
three  areas:  features  that  increase  productivity 
among  the  company’s  3.200  users,  fixes  for  software 
bugs  that  had  burdened  his  help  desk,  and  adminis¬ 
trative  improvements  in  security,  stor^e  and 
archival  capabilities. 

Goldfarb's  view  is  typical  Many  CIOs  see  an 
e-mail  upgrade  as  inevitable  but  not  something  to 
rush  into.  Among  Notes  users,  75%  of  organizations 
were  still  on  some  version  of  IBM’s  Domino/Notes 
5.x  as  of  late  2003,  according  to  estimates  from  Ferris 
Research  Inc.  in  San  Francisca  And  as  for  users  of 
Microsoft  Corp.  products,  in  a  Ferris  siurey  of  45 
organizations  in  January.  37%  of  the  respondents  said 
they  were  using  Exchange  Server  5.5.  while  63%  had 
Exchange  2000  and  just  35%  had  Exchange  2003. 
(Multiple  responses  were  allowed  because  large 
companies  often  have  mixed  environments.) 

“For  the  last  couple  of  upgrades  of  Microsoft  and 
Lotus,  there’ve  been  many  customers  who’ve  said 
there's  not  enough  features  to  justify  an  upgrade.  So 
now  people  are  moving  from  Exchange  5.5  to  2003. 
and  a  fair  amount  of  Notes  people  going  from  4  to  6," 


The  Upgrade  Budget 

Here's  a  breakdown  of  the  typical  costs  ol  8 
major  e-mail  system  upgrade: 
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Lee  Lovig,  who  was  chief  IT  architect  at  a  5.000- 
user  financial  services  firm  in  the  Midwest  until  last 
month,  says  his  former  company's  upgrade  to  Lotu^ 
Notes  6.5  —  required  because  of  a  merger  —  was  dif- 


Mys  analyst  David  Via.  He  estimates  that  a  ma-  ficult  because  over  half  of  the  end  users  were  stUl  on 
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jor  upgrade,  such  as  from  Exchange  5.5  to  2000  or 
2003,  typically  costs  $100  to  $175  per  user,  whereas 
minor  upgrades,  such  as  Exchange  2000  to  2003, 
cost  $40  to  $90  per  user. 

One  factor  that  scared  some  IT  managers 
from  upgrading  to  Exchange  20(X)  and 
2003,  says  Via,  is  the  need  to  move  to  Ac¬ 
tive  Directory,  a  significant  ar-  _ 

chitectural  change.  Such  was  the  IHiTAyV  Itf* 
case  for  the  government  of  Mia-  W 

mi-Dade  County.  Fla.,  which  will  MIIIPaUDE 
be  upgrading  from  Exchange  5.5  It  look  three  i 

to  2()03  over  the  next  18  to  24  Ihe  5.000ns 
months.  The  need  to  convert  50 
departments  and  15.000  e-mail  ^  5^ 
users  to  Active  Directory  added  ^  ^ 

months  to  the  timeline,  says  Chief  wwwxampi 

Techrmlc^  Officer  Ruben  Lopez.  - 

Another  factor  that  has  delayed  some  up¬ 
grades  is  the  economy,  says  Shruti  Yadav.  an 
analyst  at  Nucleus  Re^arch  Inc.  in  Welles¬ 
ley.  Mass.  “E-mail  upgrades  have  had  to 
compete  with  other  IT  projects,"  she  says. 


00  or  Notes  4J.  “We  waited  too  long."  says  Lovig,  who's 
,  whereas  now  an  independent  consultant  in  Grimes.  Iowa, 
o  2003,  There's  a  lot  more  bells  and  whistles  in  6.5.  The 
client  is  tremendoudy  different,  and  we  [were] 
anagers  spending  a  lot  of  time  and  money  on  training." 

and  On  the  other  hand,  you  don't  want  to  rush  to  im- 

to  Ac-  plement  the  latest  release  and  find  yourself  the  un- 
- 1 -  witting  beta  tester  of  the  vendor's  newest 

ANATOMY  OF  technology.  Ideally,  you  should  wait  until 
m/mknr  identif>'  obvious  benefits  from 

M  n^NUt  making  the  switch.  The  benefits  might  be 

teas  to  upgrade  new  features  chat  increase  user  produc- 
'^duce  IT  administrative  hassles  or 


The  Wal-Traveled  Path 

But  waiting  too  long  to  upgrade  can  increase 
the  cost  and  complexity  of  the  project.  "The 
longer  you  wait,  the  more  work  you  wind  up 
having  to  da  You  may  find  that  the  messag¬ 
ing  piece  is  out  of  date,  and  the  network  in- 
ftastructure  b  out  of  date,"  says  Sara  Radi- 
cati,  CEO  of  The  Radicati  Group  Inc.,  a  market 
research  firm  in  Palo  Alta  Calif. 


YouGoRrst 


rivity.  reduce  IT  administtalive  hassles  or 

ceuticais  Here's  wi  in-depth  “nprove  business  operations  such  as  cus- 
caae  study  Corner  sales  and  service  in  the  field. 

OQuidilMiS7266  That  desire  to  achieve  ROI  without  tak- 
wMwxamaaterarerUxam  ing  unnecessary  risks  b  why  Gold^rb 
I  prefers  to  stay  in  the  middle  of  an  appli- 

ome  up-  cation's  product  cycle  —  not  ancient,  but  not  bleed- 

'adav.  an  ing-edge,  either.  "1  ride  the  middle  of  the  curve,  not 
Welles-  in  the  front  of  it,"  he  says.  Robert  Ashby,  support 

i  to  manager  at  Miami-Dade  County,  has  the  same  senti- 
c  says.  raent:  “It's  not  that  I  want  to  stay  back,  it's  just  I’d 
rather  see  everyone  else  upgrade  first.” 

Alan  Boehme,  CTO  at  Best  Software  Inc  in  Irvine, 
increase  Calif.,  and  formerly  CTTO  at  GE  Power  Systems,  also 
ct.  "The  advocates  a  middle-of-tbe-pack  position.  Boehme 
windup  says  Best  b  upgrading  from  Exchange  S.5  to  2003  but 

nessag-  expects  to  slick  with  2003  for  at  least  three  years, 
ork  m-  "until  we  see  what  happens  with  Longhorn  [the  code 
Radi-  name  ofthe  next  version  of  Windows]." 
narket  In  hb  view,  there's  rarely  a  competitive  need  to 

tnaintain  a  leading  edge  in  e-mail  technology.  "Com¬ 
panies  tend  to  overspend  on  e-maU,"  asserts  Boehme. 

(“Instead,  think  of  e-mail  on  a  1-5  scale,  with5  being 
the  best  e-mail  system  in  the  world.  Then  ask  your¬ 
self  if  you  really  need  to  be  aS.  I  think  most  organiza- 
tioos  can  get  by  being  a  3."  O  4738B 

Hildreth  is  afieelance  joumaiist  tn  Waltham,  Mass. 

She  can  be  reached  at  SueJnidrethi^comcast.net. 


Learn  How  to  Achieve 
Data  Center  Management  Success 


September  12-15,  2004  ■  Philadelphi 


lie  Marriott  ■  Philadelphia,  Pennsylvania 


Learn  How  to  Achieve  Data  Center 
Management  Success 

Get  a  Contemporary  Overview  of  Today's  Data  Center  Issues  and  Opportunities 
See  How  to  Implement  and  Deploy  the  Latest  m  Data  Center  Management  Technologies 

•  Hear  the  Latest  in  Enterprise  Security 

•  Learn  from  Best  Practices  and  Case  Studies 


iVniMwtrictav  pnMwns* 

JohnOMb 
ChitfnMBfCh  Officer 
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What  You’ll  Learn 

In  this  executive-forum  setting,  you'll  hear  direct!) 
They  II  address  a  wide  variety  of  today's  burning  i 

Managing  the  Distributed  Enterprise 

•  Framewofhs 

•  Operating  System  ang  Server  Managernent 

•  Automation  and  Provisioning 

•  Utility  Computing 

'  Asset  Management  and  Resource  Opt-mi^ation 
'  Monitoring  and  Control  Tools 

•  Quality  of  Service  and  Service  Level  Agreements 

Network  and  Communications  Management 

•  Network  Operating  Systems 

•  Local  Area  Networks 
-  Wide  Area  Networks 

•  Metropolitan  Area  Networks 

•  Storage  A'ea  Networks 

•  Voice  Over  Ip 


nnanagers  m  user  comoanies 


Compliance  and  Regulatory  IT 

•  PuOi'c/Private  Parinersn.ps 
'  Sareanes  Oxiey  Act 

•  Heaitn  insurance  PortaCii-ty  and  Accountability  A 
(HIPAA) 

•  Securities  A  Exchange  Commission 

•  Standards 

•  Strategies 

•  Risk  Management 

Data  Center  and  Infrastructure 
Considerations 

•  Operating  System  Platforms 

•  Grid  Computing 

'  Bandwidth  Reau'rements 

•  Scale-out 

■  Business  Continuity 

•  Busmess-Side  Expectations  ano  Requirements 

•  Outsourcing 

Systems  Integration  and  Interoperability 

•  Management  Model 

•  Web  Service  Protocols  and  Se'vicesOnented 
Architecture 

Software  Developer  Toots  ana  Stanoards  for 
’-■tegration  of  Enterprise  Business  Applrcatiors 
'  Databases 

•  Management  Inf-asfructure 

Return  on  Investment  (ROD 
and  Total  Cost  of  Ownership  (TCO) 

■  Key  Issues 

•  Procurement  Tips 

•  Service  Level  Agreements 

•  Case  Studies  with  Oemoristrated  and  Measurable 
Results 

Managing  Deployment  of  Emerging 
Technologies  and  Standards 

•  Procurement/ Actual  Products 

•  Project  Management 

•  Implementation 

•  Education 

•  Management  Policies 

•  Long-Term  Managemert  and  ROi  Expectations 


'The  DMTF  is  responding 
to  a  critical  need  for  usable 
models  and  common, 
interoperable  standards 
resurting  in  technologies  that 
converge  to  address  end-to- 
end  management  needs." 

Heather  Kreger 
IBM 

Co-chair,  OASIS  Web  Services 
Distributed  Management 
Techncal  Committee 


•  Service  Providers 

•  Wireless 

•  Firewalls  and  Security 

-  Convergence  of  Data/Voice/ViOeo 

■  Protocol  Standards 

■  High  Availability  and  Resiliency 

•  Bandwidth  and  Service  Level  Agreements 

Networked  Server  and  Storage  Management 

•  Server  Consolidation 

•  Storage  Area  Networks 

•  Network  Attached  Storage 

•  Content  Addressed  Storage 

•  Deployment 

•  Data  Migration  and  Management 

-  Scaiab'l'ty 

'  Interoperability 

•  Disaster  Recovery  and  Business  Continuance 

•  Information  Lifecycle  Management 

-  BladeServers 

Enterprise  Security  Management 

•  Identity  Management 

•  Directory  Services 

•  Authentication 

•  Federation 

•  Governance  and  Policy  Deployment 
'  Standards 

CTO  A  CIO  Insights 

•  ImplementatiorrTips 

•  Roadmaps  for  Success 

■  Product  Features  Users  Need  to  Know  to  Make 
Decisions 


Conference  At  -  a  -  G I  a  n  c  e 


(subject  to  change) 


For  details,  updates,  and  to  register  visit  www.emmsa.com/cw 


SUNDAY.  SEPTEMBER  12 


1 :00pm  -  5:30pm  Pre-Conference  Developer  and  Analyst  Tracks 
7:00pm  -  9:00pm  Welcome  Reception 


MONDAY.  SEPTEMBER  13 


7:00am  -  8:00am 
8:00am  -  12: 15pm 
12:15pm-  1;30pm 
1:30pm  -  5:30pm 
1:30pm  -  5:30pm 
3,45pm  -  5:15pm 
5:30pm  -  8:30pm 


Breakfast 

General  Conference  Sessions 
Luncheon  Sessions 
General  Conference  Sessions 
Concurrent  Developer  Tracks 
End  User  Case  Study  and  Analyst  Tracks 
Expo  with  Dinner 


TUESDAY,  SEPTEMBER  14 


7:00am  -  8:00am 


Breakfast 

General  Conference  Sessions 
Expo  with  Lunch 
General  Conference  Sessions 
Concurrent  Developer  Tracks 
End  User  Case  Study  Track 
Gala  Evening 


8:00am  -  Noon 
Noon  -  1:30pm 
1:30pm  -  5:00pm 
1:30pm  -  5:00pm 
4:00pm  -  5£)0pm 
6:00pm  -  8:00pm 


JASON  GLAZIER 

SVP4CTO 

&  Ctimt  E-Commerce  OKeer 
bncoln  Fmencitf  <Voup 


SASAN  HAMIDI 

cso 

Interval  lntem*tior« 


WEDNESDAY,  SEPTEMBER  15 


7:30am  -  8:30am 
8:30am  -  1 1 :45am 
1 1:45am 


Breakfast 

Developer  Track  and  Vendor  Tracks 
Conference  Concludes 


MARK  RAMSEY 

Orrectof  of  Data  Arcfiitectore 
FedEi  Services  Corooration 


Philadelphia 

Philadelphia.  Pennsylvania 

Hotel  Reservations 

and  Travel  Services  TiAVEL  SEaVICEti 

IDG  Travel  is  the  official  travel  company  for  Enterprise 
Management  World.  They  are  your  one-stop  shop  for 
exclusive  discounted  rates  on  hotel  accommodations. 

To  reserve  your  accommodations,  visit: 

www.etcentrat.com 

You  can  also  call  our  conference  housing  line  at: 

1*800-340*2262  (or  1-508-820-8686) 


Accepting  Nominations  for 
this  Year's  “Best  Practices 
in  Enterprise  Management” 
Awards  Program 

Submit  your  nomination  today 

at  survey:computerwor1d.com/ 
surveys/EMW/EMWBestPrac.html 

or  email  Nanette  Jurgelewicz  at 
nar>ette_jurgelewicz@computerworld  com 


WENDELL  BROWNE 

SSIS  Enterprise  Manager 
DetartT»«ni  pf  Human  Services 
M  nnesota  State  Department  of 
HoT^an  Serv^es  -  SSIS  Dv-sron 


September  120S.  2004 
PMMalpMa  hlarrion 
PMUdetpht*.  PMDcytvanie 


Application  for  Conference  Registration 


Fa*  ms  eompletad  appneafion  to  1>S08«8204254.  Or  apply  online  at  wMniKemwiisa.com/cw 


If  net  indicated  on  your  business  card,  please 
provide  the  foliowing  required  Information; 


Need  accommodations? 
Reserve  t*'err  at  wwwetcentraixom 

Please  call  1-800-340  2262 
or  email  everi;hou5i''g<?i(3g.corri 


Questions?  Call  1-800-883-9090 


Your  business  card  Is 
REQUIRED 

to  process  your  application 


wwM  computerworld  com 


KHBWlEHeE  CENTER  EHAIL/eRflUPWMt 
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BV  RUBSCLL  KAV 

IN  MANY  WAYS,  computers 
make  collaboration  more 
awkward  than  we  want.  Go 
into  any  meetii^  carrying 
a  piece  of  paper  and.  barring 
lai^uage  problems,  you  know 
that  other  people  in  the  room 
can  read  it.  mark  it  up.  pass  it 
around  and  file  it  away. 

Life  isn't  nearly  so  simple 
with  efectronic  documents. 

It’s  corisiderably  harder  to 
mark  up  a  Web  page  or  to  use 
the  same  filing  system  for 
e-mail  and  other  documents 
—  and  even  if  you  can  Jo 
those  things,  your  systems 
may  not  work  well  or  be  readi¬ 
ly  accessible  to  other  applica¬ 
tions.  whether  located  on  your 
PC  or  on  someone  else’s. 

Even  thoi^  there  are  many 
collaboration  and  document¬ 
sharing  applications  on  the 
market,  it’s  still  true  that  for 
the  most  part,  the  way  we 
share  files  is  to  e-mail  them 
back  and  forth  as  attachments. 
While  this  has  been  surpris¬ 
ingly  productive  for  many 
people,  it’s  a  long  way  from 
collaboration. 

In  fact,  this  isn't  significant¬ 
ly  different  from  the  “sneaker- 
net’'  days  of  hand-carrying 
floppy  disks  from  one  desk  to 
another. 

Network  Not  Enough 

Even  though  networked  com¬ 
puters  allow  higfa-s(>eed  com¬ 
munications  and  the  fast  and 
easy  exchange  of  data  and 
documents,  it’s  still  remark¬ 
ably  difficult  for  a  group  of 
users  to  work  together  on  a 
project  from  separate  comput-  I 
ers.  Doii^  so  requires  all  in-  I 


Collaboration 

Software 


DEFINITION 

Collaboration  software,  also  called  groupware,  helps  in¬ 
tegrate  work  on  a  single  project  performed  by  several 
concurrent  users  at  separate  computers.  Collabora¬ 
tion  software  tj^ically  includes  tools  for  communica¬ 
tion,  conferencing  and  administrative  functions. 


volved  parties  to  install  a  vari¬ 
ety  of  programs  and  utilities 
on  their  PCs. 

All  that  started  to  change 
back  in  1989,  when  Ray  Ozzie 
at  Lotus  Development  Corp. 
brou^t  forth  Notes,  the  first 
program  that  attempt¬ 
ed  to  integrate  a  num¬ 
ber  of  communication, 
scheduling  and  data¬ 
base-driven  activities 
into  a  single  software 
package  that  was  de¬ 
signed  from  the  start  to  live  on 
a  network. 

In  the  years  since,  many 
other  companies  have  at¬ 
tempted  to  produce  and  mar¬ 
ket  collaboration  software,  us¬ 
ing  very  different  models  and 
approaches.  Bui  no  one  has 
yet  reached  the  goal  of  seam¬ 
less,  transparent,  hassle-free 


collaboration  between  groups. 

Collaboration  can  be  done 
formally,  from  the  top  down, 
through  established  proce¬ 
dures  and  processes,  or  it  can 
be  done  informally,  from  the 
bottom  up.  as  communities 
and  project  teams 
collaborate  in  an  ad 
hoc  way. 

Some  large  organi¬ 
zations  may  be  con¬ 
cerned  about  the  pro¬ 
liferation  of  project- 
based  collaboration  software, 
and  they  are  likely  to  want  a 
cohesive  plan  for  supporting 
(Le..  managing  and  control¬ 
ling)  collaboration  across  the 
enterprise. 

Colaboration  Tod  KK 

Collaboration  software  gener¬ 
ally  involves  several  types  of 


tools  in  three  categories: 

Electronic  cotnrounicabon  toots 
fodlitate  information  sharing 
by  enabling  people  to  send 
one  another  messages,  files, 
data  or  documents.  They  in¬ 
clude  the  following: 

B  P-mail 

■  Instant  messaging 

■  Fax  machines 

■  Voice  mail 

■  Web  publishing 

Electronic  csnhrandng  toots 

enable  a  more  inieracttve  way 
of  sharing  information.  The 
roost  common  forms  of  elec¬ 
tronic  conferencing  are  tele¬ 
conferences  and  videoconfer¬ 
ences,  but  new  techoolc^es 
are  emerging. 

■  Data  co^erencing  lets 
networked  PCs  share  and 
view  a  common  whiteboard, 
and  each  user  can  add  to  the 


board  during  discussions. 

■  Electronic  meeting  sys¬ 
tems  generally  involve  confer¬ 
ence  rooms  equipped  with 
large-screen  digital  projectors 
linked  to  multiple  PCs. 

■  Discussion  forums  and 
chat  rooms  facilitate  and  man- 

I  age  online  text  messages. 

Coftaborativa  mmapamanl  toob 
simplify  the  management  of 
group  activities. 

■  Electitmtc  group  calen¬ 
dars  make  it  easier  to  schedule 
events  and  meetings  with  mul¬ 
tiple  people,  and  they  can  au¬ 
tomate  reminders  and  alarms 
for  group  members. 

j  ■  Workflow  systems  help 
manage  tasks  and  documents. 

■  Pn^ect  management  sys¬ 
tems  help  schedule,  trade  and 
chart  the  steps  in  a  project. 

■  Knowledge  and  content 
management  systems  make  it 
possible  to  collect,  organize, 
manage  and  share  information 
in  a  variety  of  formats. 

047912 


Kay  is  a  Computerworid  con- 
trihuring  writer  in  Wbreester, 
Moss.  Tou  can  contact  him  at 
nisdcojngxharterjiet. 
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To  taad  fflofe  atod  USB  lesetance  to 
cofatnrgBon.  wa  OB  Websae 
QvkMJnlt  49102 


Whm  to  Smb:  frv  a  tal  of  cotaboritari 
9oitwa(evendois.«ed 
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Aie  thee  tedniiGOes  a  osues  iQu'd  lt« 
to  Bari  about  n  OuKkSuffi  Sent  TOB 
deastoqBcfcslBBbccwioutarwgMaari 


16 IM  a  corpteit  an^  of  OB 
OvekSiudBs  goofineto 


Roots  of  Digftal 
Collaboration 

The  red  Tandtattier  of  siectronK 
adabotaltonlscorripuiBfpionwr 
OouQ  Digeliart.  In  the  19^  hb 
labontforyattheSlinfDfdREf' 
seerehlnsBMecreelBdttfebuirf- 
ino  blocks  wed  in  virtualy  el  mod¬ 
em  ootabordion  software:  data 
structures  (^Oertsxt).  user  Mer- 
faces  fwindewino  aydm 
anilcalions  (groupware). 

In  1^  Engdbert  Bwad  Brooks 
HdlinSanFianciscoiDdomorr 
strale  the  oompuler  mouae.  hyper 


madia  and  othscreen  wthn  lete- 
coniarencino. 

Engdbart  beinred  ihd  because 
socidy’s  pfobtams  are  scaftng  d 
unorecedwted  rates.  aotuBons 
need  to  sede  d  tie  same  rate  if  we 
are  to  aurvwe.  Used  properly,  com¬ 
puters  can  hate  us  gd  cdaciMy 
smarter.  (For  more  baderound.  go 
to  wumJiootBtVJXQ^  read  ^ 
gebarfs  19C  paper. 'Augmenting 
HtewanbdelBctAConoeidal 
Framework.*) 

However,  notoino  mud)  more 
happened  to  colahnrdlonurdi 
lotus  Notes  was  hunched  to  1969 
Notes  deptoymente  grew  dowly. 


and  to  the  199CIS.  MioDsofl  and 
o9)ers  entered  toe  corporate  e-fliai 
market 

In  toe  hie  19906  and  into  toe 
rtew  miennun.  totemd  e-mai. 
corporate  ininneb  «)d  a  growmg 
vAarest  in  knemtedge  manaoemert 
sparked  renewed  totemst  to  and 
devdopment  of  folabordton  eoft- 
were.  Ibitey's  rnatkd  hdtites 
compmies  such  as  Open  lad 
Corp.  tolraapect  Softm  Inc., 
eftoom  ledirioiogy  Inc.  (eoqured 
byOooenBnlumlnc.}.6RXNeNef- 
workslnc..VM£)(Coriffiurac8' 
Hons  Inc.  and  Centra  Software  toe 
-fbjsBttHgf 


cwmaMU  Mia.M4 
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Ihe  Almanac 


An  eclectic  collection  of  research 
and  resources.  Bv  Mitch  Betts 


TaMna  the  Politics 
Outofligratians 

Sometunes  top  executives  decide  to 
change  e-mail  platforms  against  the 
wishes  of  IT  administrators.  Or  compa¬ 
nies  with  different  e-mail  systems 
merge  —  and  one  has  to  ga  Sometimes 
one  division  wants  to  switch  e-mail  ven¬ 
der  and  another  doesn't  Religious 
wars  between  the  pro-Microsoft  and 
pro-Lotus  factions  are  common. 

The  way  to  depoliticize  e-mail  mi- 
giaiioos  is  to  base  the  decision  more 
on  facts  than  on  emotional  outbursts, 
says  Andrew  Wolff,  vice  president  at 
Wellesley.  Mass.-based  DYS  Analytics 
Incn  which  makes  software  for  analyz¬ 
ing  e-mail  traffic  and  helps  companies 
with  e-mail  conversions.  Objective 
toetrics  about  total  cost  of  ownership 
and  performance  can  help  settle  dis¬ 
agreements  about  whether  the  current 
system  needs  to  be  replaced,  he  says. 

Voice  Memos  Sent  as  E-Mal 

Nextel  Communications  Inc.  in  Res- 
lon.  Va..  recently  announced  NextMail. 
an  application  that  allows  Nextel  sub¬ 
scribers  to  record  voice  messages  on 
their  mobile  phones  and  sctmI  them  to 
any  e-mail  address. 

Nextel,  known  for  the  Direct  Con¬ 
nect  walkie-talkie  feature  on  its  mobile 
phones,  is  charging  SZSO  per  month 
for  the  service.  The  subscriber  selects 
a  recipient's  e-mail  address,  presses 
the  talk  button, 
speaks  into  the 
phone  to  record  the 
MP3  voice  cness^ 
and  then  releases  the 
button,  which  sends 
an  e-mail  with  the 
MPS  link  or  attach- 
roem.  The  service 
can  also  send  conAr- 
mation  that  the  mes¬ 
sage  was  received. 

The  market?  Nex¬ 
tel  says  it's  ideal  for 
consmiction.  real  es¬ 
tate,  insurance,  prop- 


erty  management  and  other  industries 
where  field  workers  normally  call  into 
headquarters  throughout  the  day  with 
status  reports  or  work  orders. 

‘Sfiim' Attacks 

Hcm  many  tinm  par  weak  do  you  receive 
instant  messaoing  spam,  or  “apim*? 

2-5  per 
week:  4% 


r 

L 


MerethanS 

par«mak:0% 


Bk  132  enJusefsc  North  Amman  b 


CRM  and  E-mail; 

Headed  for  Merger? 

The  combination  of  CRM,  knowledge 
management,  social  networking  and 
e-mail  technologies  is  a  powerful  one 
at  Chicago  law  firm  Much  Sbelist 
Freed  Denenberg  Ament  &  Ruben- 
stein  PC. 

The  85-lawyer  firm  is  starting  to  use 
IntcrAction  CRM  software  from  Inter¬ 
face  Software  Inc.  in  Oak  Brook,  IlL. 
which  is  t^htly  integrated  with  Micro¬ 
soft  Corp.'s  Outlook.  For  example, 
when  Outlook  users  get  an  e-inaU.  they 
can  click  a  ''Who’s  this  contact?"  button 
and  get  a  profile  of  the  sender,  if  he's  a 
contact  in  the  CRM  database.  Important 
e-mails  and  documents  are  accessible 
and  organized  in  an  activity  log.  so 
teams  of  lawyers  working  on  complex 
cases  can  see  "who’s  doing  what  with 
whom."  says  attorney  Daniel  L  Liutikas. 

Tlie  knowledge  base,  which  has  pro¬ 
files  of  clients,  referral  sources  and  out¬ 
side  contractors,  has  become  a  central 
bub  for  managing  cases  and  marketing, 
he  says.  The  software's  social  network¬ 
ing  technology  helps  with  developing 
new  business,  or  "rainmaking."  because 


kwMbu  to  yoH?  A  huge  fractioo 
rd  esdmate  60%  to  70%  — 
have  migrated  from  their  old 
systems  to  the  new  release.  So  it's 
not  frustrating  to  me  at  alL  Every 
customer  has  a  cycle  of  u{^rades 
. . .  and  we  want  to  make  sure 
their  hardware  upgrade  cycle  is 
consistent  with  our  softwtue  up¬ 
grade  cycle.  So  our  message  to 
them  is  to  do  it  at  the  right  time, 
but  do  it  when  you’re  doing  [the 
hardware  upgrade].  For  example, 
if  you're  doing  a  server  consoli- 
datioD  project,  go  ahead  and  do 
the  e-mail  project  as  well  When 
people  move  from  Notes  5  to 
Notes  6.  we*ve  seen  server  con¬ 


solidation  requiring  as  mtich  as 
S0%  less  hardware,  so  there's  a 
significant  cost  advantage.  That’s 
the  right  time  to  do  U. 

The  pna  Itoi  na  haiAMi  Anl  «M 
dsito  af  rail  haeiMH  af  vtoM  and 
apaN,lMafhyavvtoia7 _ 

The  news  ab^  die 
demise  of  e-mail  is  ex¬ 
aggerated.  I  dmit  think 
the  rbusioess)  world 
can  survive  without 
e-mail  these  days.  Yes, 
viruses  and  spam  are 
hurting  the  productivi¬ 
ty  of  users.  But  cus¬ 
tomers  are  choosing 
IBM  because  we  are  frr 
more  secure  and  vinia- 


it  shows  which  lawyers  have  contacts 
inside  potential  client  companies,  Liu¬ 
tikas  adds  [QuickLink  45456]. 

Patent  Watch 

■  E-mal  priority  dart  service.  This  sys¬ 
tem's  autodialer  calls  a  designated  tele¬ 
phone  number  when  the  e-mail  server 
receives  a  message  from  a  high-prior¬ 
ity  sender,  such  as  an  important  client. 
This  would  be  useful  for  people  who 
infrequently  turn  on  their  computers 
but  need  to  know  about  important 
e-mail  messages,  iiivemoi  Qinghong 
Cao,  Uai^  |in,  Wenzhe  Luo  and  ]ian 
Wu,  for  Murray  Hill,  N.J.-based  Lucent 
Technologies  Inc.  —  U.S  Patent  No. 
6.74^230,  issued  June  I 

■  Detoctino  unwanted  e-mefl  properties. 

We  usually  want  e-mail  delivered 
rapidly,  but  this  scheme  delays  suspi¬ 
cious  e-mails  for  a  certain  period  of 
time  so  they  can  be  properly  tested 
for  viruses  and  spam  before  delivery. 

■Hsniof*.  Lee  Codel  Lawson  Tarbotton, 
Daniel  Joseph  Wolff  and  Nicholas  Paul 
Kelly,  for  Network  Associates  Technol¬ 
ogy  Inc.  in  Santa  Clara.  Calif  —  US. 
Potent  No.  6,757,830.  issued  June  29 

yOKKSOURCESONUIIE 

Gel  the  latest  news  and  advics  about  e-maA  topics  at 
our  E-MaA/Groupware  Knowledge  Center 
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immune  than  competitors. 


IBM  Loins  Amni/|  Gi>yal 


Itom  to  roMl,  or  to  R  totoir  iMhn? 

Absolutely,  huge  innovation  is 
about  to  come.  E-mail  is  becom¬ 
ing  a  place  where  people  are  start¬ 
ing  to  manage  their  activities.  So 
why  wouldn't  we  think  in  terms  of 
activities  first,  and  e-mail  as  just 
one  part?  We  showed  at  the  last 
Lotosphere  something 
called  Activity  Explor¬ 
er,  where  e-maU,  in¬ 
stant  messaging  and 
document  exchanges 
are  all  captured  in  a 
single  activity,  so  you 
can  see  the  cooqflete 
chain  of  vriiat  has  gone 
on.  not  just  e-mail  It 
will  change  the  way 
we  think  about  e-maiL 

0*mr 
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Consider  the  dots  connected.  TTie  end-to-end  voice  over  IP  solution  we  designed 
for  Crate  and  Barrel  features  a  unified  IP  messa^g  platform  and  the  most  advanced 
hardware  avaiabie.  "Rie  new  system  wi  save  them  a  bundte  on  maintenance,  m^j^ement 
and  wiring,  while  easing  the  cost  and  complexity  of  addif^  features  or  employees.  And 
ift  already  improving  productMhr.  heipir^  over  400  associates  make  m*ons  of  customers 
feel  right  at  home.  To  find  out  more,  go  to  sbc.corrvijots.  GOMG  BEYOND  THE  CALI.* 
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MARK  HALL 


SNAPSHOTS 


E-Mail  Encryption 

Does  you  organization  currently  have 
secure  messagmocap^Nlity.  in  which 
users  can  send  eno^nited  messages? 


Spam  Breakdown 

Ofleis  ol  cheap  software  are  up. 
but  heatth-reiated  pdches  are  sli 
the  biggest  Gregory  of  spam. 


IMvs. 

Telephone  Calls 

What  has  been  the  overall  nipad 
oi  nstani  messaging  on  your  use 
of  the  telephone? 
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Hie  End  of  E-mail 

Has  it  happened  to  you?  Yout  phone  rings,  and  a  business  contact  asks 
whether  you  received  his  e-mail.  You  say  no.  You  check  your  spam  filter, 
and  there  it  is.  Or,  you  send  an  important  document  electronically  to  a 
colleague  who  calls  you  later  and  asks  you  to  fax  it  because  his  network  no 
longer  accepts  attachments.  For  many  of  us,  these  time-wasting  events  are 
now  happening  daily. 

I  won’t  bother  to  ask  if  you’ve  been  a  victim  of  a  virus,  a  worm,  spyware  or  some  oth¬ 
er  bit  of  unsavory  code  that  hitchhiked  its  way  into  your  PC  via  your  e-mail  queue.  You 
have.  And  why  waste  my  breath  asking  whether  you  get  more  real  mail  than  spam?  You 
don’t  (see  “Dual  Curses:  Viruses  and  Spam,”  CJuickLink  44143). 


PC-based  e-mail  is  rapidly  becoming  one  of  the 
most  unreliable,  unsafe  and  unpleasant  modes  of  com¬ 
munication  at  our  disposal  It  won't  be  loi^  before  we 
abandon  it. 

Not  only  is  e-mail  becoming  increasin^y  irritating 
to  many  of  us,  but  it’s  also  becoming  more  expensive 
for  companies  to  manage.  Much  more. 

IT  departments  in  large  organizations  spend  millions 
of  dollars  annually  to  manage  incoming  and  outgoing 
e-mail.  Antispam  and  antivirus  appliances  and  Hlters 
aren't  cheap,  and  they  generally  need  ongoing  support 
from  subscription  services  to  keep  current  in  the  fight 
against  the  creeps  who  persist  in  attacking  our  net¬ 
works  [Quicklink  41896). 

Companies  concerned  about  the  implica¬ 
tions  of  sexual  harassment  lawsuits  and  in- 
tellectual  property  losses  are  investing  in 
pricey  message-management  technology 
that  inspects  the  contents  of  every 
Compliance  issues  are  forcing  companies 
to  add  sophisticated  information  life-cycle 
management  tools  to  their  mass  storage 
systems  to  properly  archive  e-mail 

In  addition  to  buying  the  products,  you 
need  to  train  IT  staff  to  deploy  and  manage 
them.  Of  course,  you  could  outsource 
everything,  but  t^t's  not  cheap,  ant^you 
never  really  know  how  secure  it  is.  ■ 

All  these  headaches,  for  what?  So’  work¬ 
ers  can  chew  up  your  corporate  bandwidth  e-mailing 
SpongeBob  movie  trailers  to  their  friends? 

So-called  realists  out  there  will  dismigt  these 
lamentations  by  saying  that  despite  all  of  its  problems, 
PC  e-mail  is  too  popular  to  be  abandoned.  Pertiaps. 

But  those  old  enough  to  remember  Usenet  know  that 
even  a  good,  useful  conununicattons  to(^  can  be  aban¬ 
doned  once  it  becomes  overrun  by  hucksters,  pomog- 
raphers  and  other  pond  scum  floating  around  the  In¬ 
ternet  Usenet  is  still  out  there,  but  its  popularity  is 
nearzera 

Well  the  so-called  realists  will  counter,  e-mail  is 
still  for  too  useful  for  companies  to  abandon.  Thai’s 
what  these  same  folks  said  about  IBM’s  Selectric  and 


the  floppy  disk  drive.  Technolc^  is  abandoned  when¬ 
ever  cost-benefri  evaluations  determine  it's  no  longer 
worth  keeping  around.  And  we’re  getting  mighty  close 
to  the  day  when  PC-based  e-mail  is  determined  to 
have  a  bigger  downside  than  upside. 

OK  then,  the  realists  will  say,  what’s  going  to  re¬ 
place  e-mail?  After  all  technology  needs  to  be  re¬ 
placed  with  another  technology.  Agreed. 

In  the  case  of  the  Selectric.  it  took  a  combination  of 
keyboards,  monitors,  printers,  storage  media  and,  of 
course,  the  PC  motherboard  to  supplant  those  elegant 
machines.  And  that’s  what  I  predict  will  happen  with 
PC-based  e-mail 

I  believe  a  mix  of  new  tools  vrill  emerge  around 

handheld  devices  like  the  Palm,  the  Black- 
Berry  and  your  smart  cell  phone.  These 
products  are  becoming  more  powerful, 
making  it  possible  to  do  more  than  just 
send  and  receive  messages.  They're  adding 
crisper  displays  and  better  input  capabili¬ 
ties,  whether  with  bigger  onboard  key¬ 
boards  or  external  ones. 

Alsa  with  these  devices,  there’s  no  un- 
deriying  monthly  like  Windows  that  so- 
cfopathic  programmers  can  write  viruses 
for.  Spam  isn’t  a  big  problem  for  today’s 
handheld  users.  And  by  the  time  PC  e-mail 
is  jettisoned  in  the  next  few  years,  vendor- 
embraced  antispam  standards  and  ac¬ 
tion  against  spammers  will  make  it  a  nonissue. 

Instant  messaging  is  another  technology  that  could 
help  move  PC  e-mail  into  the  dustbin  of  history.  It’s 
hard  to  spoof  an  IM  user  because  incoming  messages 
by  definition  come  from  someone  on  your  whitelist. 
And  tracking  and  management  tools  exist  to  protect 
your  company  and  empkiyees  from  intellectual  prop¬ 
erty  theft,  harassment  and  dangerous  attachments. 

Sure,  there’s  no  perfect  replacement  for  PC  e-mail 
But  there  wasn't  one  for  IBM’s  Selectric  either.  It  had 
the  greatest  keyboard  ever,  one  the  PC  industry  hasn't 
come  close  to  replicating  in  a  quarter  century.  But 
somehow,  we've  managed  to  get  by.  just  as  we  will 
when  PC  e-mail  disappears.  O  47SZ6 
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WatchGuard*  Hrebox*  X  Is  the  only  Integrated  security  appliance  that  you  can  upgrade  to  any  higher  model 
In  the  line  with  a  license  key.  Buy  the  model  that  fits  your  husiness  today.  Easily  up^ade  when  you  need  more 
firewall  and  VPN  throughput,  expanded  features  or  services.  No  new  hardware,  no  hassles,  no  forklifts.  It'S  the 
security  you  need,  when  you  need  it  Visit  www.watchguard.com/cw71904 
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IT  rareers 


Axlvvrtiuig  Supptomeni 


The  good  news  over  the  past  quarwr  hasbeenadropmjobartsm 
the  information  technology  world,  and  an  increase  in  hiring. 
Gaining  fewer  headlines  is  where  a  good  portion  of  information 
technology  careers  can  be  found  -  with  the  U.S.  government. 

Postings  on  the  Office  of  Personnel  Management  website  and 
usajobs-opm.gov  -  include  more  than  5,000  listings  ter  jobs  that 
range  from  the  most  senior  levels  to  entry  level  posrtiorts.  In  addition, 
there's  rnformalion  on  how  to  get  scholarships  for  studies  that  will 
qualify  you  for  the  positions. 

Three  dynamics  are  driving  the  hiring  by  federal  agencies.  First  <s  the 
transfer  to  £*Gow  -  a  management  initiative  to  streamline  and 
automate  everything  from  Social  Security  and  Veieram  Affairs  to  the 
business  enterprise  systems  that  drive  the  literally  hundreds  of 
departments  operated  by  the  government. 


IT  Careers:  The  Feds  Want  You! 


Cohen  says  that  in  the  down  cycle  of  hirmg  among  technology 
companies,  the  federal  government  has  become  more  attractive  as  an 
employer  *rt’$  easier  to  change  positions  from  one  federal  agency  to 
another,  he  says  "The  job  seomty  and  predictability  of  federal 
emptoyment  has  become  much  more  appealmg  to  (T  professionals' 

The  ITAA  study  found  that  the  federal  agencies  are  in  need  of  some 
fairfy  specific  cipertise  and  experience 

•  Certified  program  managers. 

•  Information  security  and  authenocabon. 

•  Large-scale  data  management 
and  repository  devefopment. 

•  Enterprise  softwwe  implementation,  aifo 


The  second  is  the  transformation  of  the  U.S.  intefligence/security/defense  operations. 
Increasingly  the  security  and  defense  of  the  country  from  natural  disasters  as  well  as 
outside  threats,  ts  driven  by  data  gathered  by  federal  agencies 

A  third  issue  is  the  agmg  of  the  government  workforce.  According  to  an  intemal  survey 
conducted  by  the  Federal  CIO  Council,  76%  of  the  federal  IT  workforce  is  over  age  40  and 
less  than  5%  b  younger  than  30;  most  have  worked  for  the  government  for  more  than  20 
years  and  plan  to  retire  in  the  next  decade 


•  Enterprise  architecture  development 

Cohen  says  the  opportunitws  aren't  second^lass  oflenngs  In  fact,  several  federal  agenoes 
made  the  Washingtonian  maguine's  Annual  Great  Places  to  Work  list  for  the  metro  «ea 
Fannie  Mae  and  Freddie  Mac  among  them.  Others  making  the  fist  that  work  with  or  ter  the 
government  mcfode  Boot  Alien  Hamilton.  Number  Six  Software.  FGM  fsoftwareisystems 
engineering).  SRA  Irrtemational,  Terrapin  Systems  Acumen  Solutions  New  Media 
Strategies  Johns  Hopkins  Urwersity  Applied  Physics  Laboratory,  and  Mitretek  Systems 


■Mud.  of „„  tatoal  II  iofcs  ia  hiun,  n«  mraod  hun  colie*-  sa,.  Bob 

Cohen,  »nioc  vice  pcesidem  of  the  Infomiafion  technology  Aaodahon  of  ta»hca,  vAch  800762.2977  '  ^  Recruitment  Adverteing 

rec^compleled  its  tatt  annual  Federal  CIO  Survey  The  federal  govenmeni  has  500  Old  Connetticut  Path.  Framingham  MA  01701 
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Sarb-Ox 

Great  Plains  software  until  the 
spring  of  2005  in  order  to  help 
it  meet  Sarbanes-Oxley  re- 
quirements  that  kick  in  when 
its  fiscal  year  ends  Dec.  31, 
Thompson  said. 

Crown  Media,  which  is  us¬ 


ing  system  on  Jan.  1.  Thomp¬ 
son  noted.  ‘'Because  Sarbanes- 
Oxley  is  so  important  to 
everybody,  we  didn’t  want  to 
I  take  the  chance."  he  said. 

Analysts  said  Crown  Media 
isn't  alone  in  making  such  de¬ 
cisions.  “[’ve  seen  many  com¬ 
panies  postpone  projects." 
said  Tun  Welu.  CEO  of  Paisley 
Consulting  Inc.,  a  Cokato, 


ing  software  from  Movaris  Inc.  I  Minn.,  firm  that  does  consult- 


to  test  its  FT  and  financial 
controls,  plans  to  complete  all 
remediation  and  testii^  of  its 
systems  by  Dec.  1.  Thompson 
said  external  auditor  KPMG 
LXP  will  then  test  the  systems 
to  determine  if  further  revi¬ 
sions  are  needed. 

If  Crown  Media  M  ■  ^ 
didn't  have  to  hV  ^ 

meet  the  Sar-  HI  m  U 


ing  work  and  develops  soft- 
ill  ware  for  managing  audits  of 
s  both  IT  and  financial  controls. 
1  "Most  companies  Pm  deal¬ 
ing  with  are  trying  to  put 
IS  everything  in  the  end  of 
September.  And  If  they  can't 
do  it  by  then. 

We  went  they’re  postpon- 

*Kr»..rA  ing  until  Q1 

mrougn  2005."  saw  Mar- 


banes-Oxley  com-  wholS  fOpriOT”  >os  Damianidcs.  a 


pliance  deadline, 
it  would  have  in¬ 
stalled  the  Great 
Plains  applica¬ 
tions  this  year  in 
order  to  have  a 
clean  cutover  to 
the  new  account¬ 


-e  IT  consultant  at 

llUdtiOn  of  iT  Emsl&Young 

projects  for '04.  uj>toNrwYori< 

. . .  and  intematioDal 

MARK  THOMPSON.  SCNIOR  president  of  the 
VICE  PRESIOEHT  OF  FINANCE  Information  Sys- 
AND  IT.  CROWN  MEDIA  terns  Audit  and 

HOLDINGS  INC  Control  Associa¬ 


tion  in  Rolling  Meadows.  Ill. 

Joseph  Puglisi,  CIO  at  Em- 
cor  Group  Inc.  in  Norwalk, 
Conn.,  said  the  looming  Sar¬ 
banes-Oxley  deadline  prompt¬ 
ed  the  construction  services 
firm  to  limit  the  initial  rollout 
of  an  upgraded  ERP  system  to 
some  of  the  units  in  its  facili¬ 
ties  services  division.  The  new 
system,  which  is  based  on 
PeopleSoft  Inc.'s  applications 
for  midsize  companies,  was  in¬ 
stalled  in  March. 

In  order  to  facilitate  its 
compliance  initiative.  Emcor 
decided  to  wait  until  next  year 
to  add  functionality  such  as 
the  human  resources  manage- 
mem  software  that’s  in  the 
PeopleSoft  EnterpriseOne 
product  line.  It's  also  holding 
off  on  converting  other  pans 
of  the  facilities  services  divi¬ 
sion  that  continue  to  run  on 
older  versions  of  the  People- 
Soft  software  or  other  types  of 
ERP  applications.  Puglisi  said. 

5arbanes-Oxle>'  "has  creat¬ 
ed  enough  of  an  extra  burden 
on  our  accounting  staff  to  ef¬ 
fectively  eliminate  the  possi-  > 


n  [Sarbanes- 
Oxley]  has 
created  eriough  of  an 
extra  burden  on  our 
accoiuiting  staff  to 
effectiveiyeliniinate 
the  possibility  of 
moving  foiw^  with 
some  accounting 
systems  initiatives. 

JOSEPH  Pueusf. 

00  .  EMCOR  GROUP  NC 


biiicy  of  moving  forward  with 
some  accounting  systems  ini¬ 
tiatives."  he  added. 

In  some  cases,  companies 
have  fast-forwarded  systems 
instaOatioRS  in  order  to  add 


needed  functionaliry  and  still 
meet  the  compliance  deadline. 

Hilton  Hotels  Corp.  m  late 
March  finished  installing  a 
homegrown  sales  reporting 
system  that  was  written  in 
Visual  Basic  .Net  and  runs  on 
Windows  2000  and  SQL  Serv¬ 
er.  said  Damien  Bean,  vice 
president  of  corporate  systems 
at  the  Beverly  HUls,  Calif.- 
^  based  company.  "We  made 
plans  last  November  not  to 
have  any  Saihanes-related  sys¬ 
tems  installed  during  the  sec¬ 
ond  half  of  2004,"  Bean  said. 

Even  though  companies  will 
halt  new  systems  installations 
this  faU,  they  still  plan  to  pro¬ 
ceed  apace  on  IT  development 
woik.  said  Oamianides.  Fur¬ 
thermore.  the  impact  on  IT 
spending  is  expected  to  be 
negligible  because  most  com¬ 
panies  plan  to  spend  hinds 
that  were  allocated  for  project 
rollouts  in  different  arras 
within  IT.  he  added. 

"Fra  seeing  a  fairly  consis¬ 
tent  spend."  he  said.  "It’s  more 
a  redistribution  of  funds." 
048200 
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Boeing _ 

tion,  Cisco  will  provide  Boe¬ 
ing  with  its  Cali  Manager  soft¬ 
ware.  gateways  and  network- 
traffic  trunking  devices. 

Boeing  and  Cisco  wouldn’t 
disclose  the  expected  value  of 
the  deal,  but  several  analysts 
said  it  could  easily  surpass 
S150  million  based  on  an  aver¬ 
age  cost  of  $1,000  per  worker 
for  VoIP  phones  and  related 
software.  The  price  tag  could 
be  much  higdier  depending  on 
how  much  of  Boeing's  under¬ 
lying  network  infrastructure  is 
replaced,  said  Elizabeth  Ussh- 
er,  an  analyst  at  Meta  Group 
Inc.  It’s  pcKsible  to  spend 
$1,500  to  $1,700  per  worker  on 
such  projects,  she  added. 

The  size  of  the  planned  de¬ 
ployment  imprest  Ussher 
and  other  analysts  who  view 
Boeing's  project  as  another  in¬ 


dicator  of  a  recent  uptick  in 
the  adoption  of  VoIP  technol¬ 
ogy  by  corporate  users. 

"We're  finally  starting  to  see 
the  floodgates  open,"  said 
Kathryn  Korostoff,  president 
of  Sage  Research  Inc.  in  Nat¬ 
ick,  Mass.  "Every  compan>' 
knows  VoIP  is  the  wave  of  the 
future,  but  it's  been  a  mancr  of 
when  it  will  take  off." 

Increased  Interest 

Korostoff  said  the  increased  | 
interest  is  partly  the  result  of 
two  developments:  The  cost  of 
VoIP  phones  has  started  to 
drop,  and  many  traditional 
voice  switches  are  aging  and 
need  to  be  replaced. 

Other  large  installatioas 
that  are  under  way  include  a 
project  at  IBM,  which  in 
March  outlined  plans  to  pro¬ 
vide  VoIP  phones  to  about 
400XKK)  employees  and  con¬ 
tractors  over  the  next  five 
years.  IBM  b  using  a  combina¬ 


tion  of  gear  flom  Avaya  Inc.. 
Cisco  and  Siemens  AG 
{QuickLink  45248). 

Boeing  officials  said  the  Cis¬ 
co  phones  and  switches  will 
replace  devices  made  by 
Avaya.  Lucent  Technologies 
Inc.  and  Nortel  Networks  Ltd. 
The  contract  with  Cisco  cov¬ 
ers  a  five-year  period  and 
could  be  extended  if  needed, 
according  to  Terrill  He  said 
Cisco  already  is  the  primary 
supplier  of  the  more  than 
1.000  WAN  routers  and  5.000 
LAN  switches  that 
Boeing  has  on  its  glob¬ 
al  data  network. 

Cliff  Naugbton.  di¬ 
rector  of  netwoik  ser¬ 
vices  at  Boeing,  said 
the  company  expects 
to  get  cost  efiiciencies 
by  running  a  con¬ 
verged  network  for 
voice,  video  and  data 
traffic,  but  he  wouldn't 
elaborate.  There  is  a 


poyback  in  operating  expens¬ 
es,"  Naughtoo  said.  "It  met  our 
own  internal  rate  of  return." 

Both  Terrill  and  Naughton 
repeatedly  used  the  word 
"journey"  in  describing  the 
planned  rollout,  pointing  out 
several  concerns  they  have 
had  about  VoIP  technology  —  ! 
some  of  which  have  yet  to  be 
fully  resolved. 

For  example.  Boeing  has  run 
a  VoIP  pilot  program  for  the 
past  thiW  years  with  4.500 
C4SCO  phones  at  operations  in 
four  states.  Terrill  said 
the  tests  have  shown 
that  voice  quality  is 
lessened  for  home- 
based  workers  who 
use  cable  modems  or 
Digital  Subscriber 
Line  connectiotts,  as 
well  as  for  employees 
with  PC -based  IP 
phones,  which  arc 
known  as  soft  phones. 
All  of  those  devices 


lack  quality-of-scrvice  capabil¬ 
ities  that  can  give  voice  traffic 
priority  on  networks  to  pre¬ 
vent  disruptions  in  calls  or 
videoconferences.  For  now. 
TVrrill  said,  "we're  being  very 
conservative  with  soft  phone 
implemeniaiions."  Nau^ion 
added  that  Boeing  b  starting 
to  implement  quality-of-ser* 
vice  technology  on  broadband 
cofuicctions  used  by  employ¬ 
ees  who  work  at  home. 

One  big  corporate  culture 
challenge  that  Boeing  faces  b 
bringing  together  Us  voice  and 
data  networking  staffs  to  make 
the  VoIP  project  woriL  The 
company  has  partly  dealt  with 
that  by  hiring  for  the  projea  a 
group  of  about  10  traditional 
voice  network  ertgineers.  who 
have  also  been  trained  to  un¬ 
derstand  IP  so  they  can  deal 
with  Cbco  and  subcontractors 
ui  making  technical  deebions 
about  the  noUoul  Naughton 
said.  0  48181 
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Scary  Message 

SCARY  STUFF,  these  numbers  from  a  new  survey  by  the 

American  Management  Association  and  the  ePolicy  Insti¬ 
tute;  20.1'’o  of  companies  surveyed  say  they’ve  had  e-mail 
and  instant  messages  subpoenaed.  A  bit  more  than  13% 
ha\  e  been  sued  over  employee  e-mail.  Only  6%  archive  IM, 
and  35.1%  have  an  e-mail  retention  policy.  Nearly  37%  of  employees 
aren't  sure  which  messages  should  be  saved,  and  6%  have  sent  or  re¬ 
ceived  a  sc.xual,  romantic  or  pornographic  instant  message. 

Yeah,  these  numbers  are  scary  —  but  not  scary  enough  to  get  your 
top  management  to  budget  more  for  proper  e-mail  and  IM  policy 
training  and  enforcement,  are  they? 


.\nJ  no  woiulur.  Ilio  numhor'-  JimVi  add  up. 

Jt  s  hard  viuaniil\  ilu-  rl<k  of  -.i.u'k 
ni.ma}:cmont.  fwn  uiih  the  possibility  oi  lau- 
suits  or  rij:ulaior>  .iction.  And  it  s  often  cheap¬ 
er  to  pav  a  fine  th.tn  it  is  ti'  obey  the  law.  loo 
often,  that's  v>hat  drivs-s  management's  spend¬ 
ing  deei.sion.s. 

Is  that  a  j;t>od  thing?  No.  But  it's  reality. 

Remember  back  in  iXvember  w  hen 
five  Wall  Street  Hrms  got  slapped  with  fines  of 
Sl4>5  million  each  bivause  their  systems  for 
arehixing e-mail  were  inadeijuate?  1  chalked 
that  up  management's  failure  to  recognize 
the  price  of  not  investing  in  its  systems. 

But  as  readers  I4*IJ  me  later,  it  could  be  that 
management  was  thinking  about  the  big  poten¬ 
tial  legal  costs  of  having  that  c-mail  easily  ac¬ 
cessible  in  a  lawsuit  —  like  the  \*ne  that  had  just 
«  ost  another  investment  firm  a  SlOtt  million 
fine,  largely  as  a  result  of  ev  idenee  in  e-mails. 
As  gme  reader  put  it.  “It  didn't  lake  these*  guys 
long  to  figure  out  how  to  save  themselves 
S'W..^5  million." 

So  g*iod  e-mail  and  IM  policies  might  actual¬ 
ly  be  riskier  than  lame  policies.  No  matter  how 
cynical  that  calculation  may  be.  it 
will  feed  into  the  budget  decision. 

Add  the  fact  that  good  policies 
h.ive  real  etists  —  serums  training 
for  users  to  learn  them,  e.vtra  w»)rk 
for  managers  to  enforce  them  and. 
yes.  hardware  and  softw  are  to  make 
them  all  work  —  and  it's  pretty  clear 
why  scare  tactics  won't  get  manage¬ 
ment  ofT  the  dime.  There  are  just 
loti  many  dollars  on  the  other  side- 

ne-Y*  -  expensive,  perhaps,  but  nec¬ 


essary.  A  day  will  come  when  our  organizations 
will  need  archived  e-mails  and  IMs  to  defend 
agfiinst  lawsuits,  get  rid  of  bad-apple  employees 
and  solve  real  business  problems. 

But  lln*se  are  all  potential  future  benefits. 
Htnv  do  We  make  a  business  ease  for  good  mes¬ 
saging  policy  right  now? 

By  using  it  to  get  rid  of  re.-jl  di*llars  we're 
spending  right  now. 

No.  we  can't  quantify  the  potential  cost  4»f 
employees  behaving  badly  on  e-mail  and  IM. 

But  our  help  desk  li»gs  can  tell  us  the  cost  of 
solving  e-maii-  and  IM-re!ated  pniblems.  Spam, 
v  iruscs  and  worms  cost  both  IT  and  users  time 
—  and  sometimes  downtime.  User  training  can 
cut  tht)se  costs.  'That  puts  a  hard  dollar  value  on 
e-mail  and  LM  training. 

And  it  turns  training  into  a  cost-reduction 
pnvieci.  which  is  more  appealing  to  budgeieers. 

Then,  when  we've  nailed  a  solid  R(  )I  f«>r 
teaching  users  how  lo  use  e-mail  and  IM  cor¬ 
rectly.  it’s  cheap  to  tack  on  explanations  of  legal 
issues.  regulat4>ry  requirements,  best  practices 
and  g«Hid  manners.  The  benefits  may  be  unquan- 
linable.  but  at  least  the  incremental  cost  is  small. 

And  once  we’ve  gv»i  p<iljcy  train¬ 
ing  in  hand,  we’ve  undercut  those 
cynical  calculations  about  the  risks 
of  e-mail  and  IM  retention. 

Sure,  top  management  should 
push  for  gtvod  e-mail  and  IM  poli¬ 
cies.  But  that  won’t  happen.  it’s 
up  t«i  I  T.  Why?  Because  that’s  our 
job.  Because  we're  n»>t  cynical.  But 
mainly  because  we’ll  actually  show 
it  w  ill  cut  ctxsis.  When  it  e«»mes  to 
making  this  business  case,  we’re 
the  4«nly  ones  wh»>  can. 

Now  there’s  a  scary  thought,  eh? 

0  48173 


Enlightenment 

This  soon-to-graduate  pilot  fish  is  interviewing  for  a 
technical  sales  job.  and  she's  sure  the  hiring  manager 
6  impressed  with  her  communication  skills.  '3ut  the 
company  owner  wasn't  too  sure  about  how  techie  a 
female  could  be."  fish  says  "Then  the  power  went  out 
~  a  road  crew  had  sliced  a  cable.  Being  the  true  grrl 
geek  that  I  am.  I  pulled  my  Mini  Maglite  from  my  purse 
and  turned  it  on  and  calmly  continued  the  interview. 
They  looked  at  me  with  astonishment,  so  I  said.  'Hey,  I 
may  be  a  gid.  but  I  am  an  engineer.  Of  course  I  have  a 
flashlight.'  They  told  me  I  had  the  job." 

AiiftHM  IcouWlwar 

ITs  long  ago.  and  QUARK  themtrying 

this  pilot  fish  dis-  totypecom- 

covtrs  that  the  |  ANK^k  nunds.  After 
electricians  who  about  five  mm- 

built  custom  power  ca-  :  utssihaardabigsigh. 


bles  for  his  company's 
monitors  soldered  them 
instead  of  crimping 
them.  So  the  slectrkians 
return  to  make  ttiingi 
right,  and  Ash  teats  the 
results. '3  turned  on  a 
monHor,”  says  fish,  “and 
got  a  light  show  of  frying 
ewcoonKs.  necnecKs 
tha  cocmector.  and  H 
fails  not  just  mna,  but 
damp  >  as  though  the 
cabla’s  piaatic  covering 
hasmellid.'llfouldwi- 
ter  do  thtf?”  asks  the 


"After  we  soUered 
them,  they  were  eo  hot 
that  we  ripped  them  in 
water  to  cool  them  off." 

Gee.  Why  Not? 

New  eorponte  poHcy 
says  ewryone  must  uee 
ths  help  daak.  so  to  stay 
in  compKance.  fT  plot 
lab  call  whan  he  has  a 

aa.  by  rareola  control, 
thay  do  al  the  troubte- 
shooting  ha  has  already 
tried.  "Than  I  noticad 
theywsnttoacommarNl 
prompt  and  typed  V 
conllg/M•aaa.'fal^• 
big  tha  oormoction,'' fish 
says.  "Over  the  phone. 


and  I  decided  to  tel 
them  I  would  type 
’ipconlig  /renew'  to  let 
them  beck  on  my  sys¬ 
tem,  stnee  remote  admin 
worked  through  TCfVIP. 
rve  since  decided  not  to 
cal  them  anymore.” 

But  other  Than 
That,  H's  Fine 

Back  when  a  mainframe 
disk  drive  unit  was  a 
huge  box  sMng  on  tha 
floor,  plat  fish's  data 
canter  initiiifna,  and 
everyaeng  aaama  10  Di 
working  propariy.  Bui 
evarynowandlhan.op- 
eralors  hear  a  beep  from 
the  araa  of  tha  drive  unL 
Ho  one  coidd  figure  out 
what  H  was.”  says  Wl 
Computer  room  slaHars 
check  the  manuals,  took 
for  error  indicatofs  and 
avan  cal  In  the  vendor's 


talas  the  dtafc  drive  unil 
apart  bid  eanlM  da 
probtem.  Rnaly.  same- 
one  managas  to  track 
dmm  ths  oauaa.  *11  was 
a  smoke  detector  above 
lhsdtefcdrive.*fish 
sighs.  H  was  baaping  to 
noflfy  the  owner  to 
chan^  the  battery.” 


OCHAME  IK  UPl  Send  your  true  tale  of  IT  He  to 
sharky^compidwworllcom.  Ybu  snag  a  sriazzy 
Shark  shirt  if  I  use  il  And  check  out  the  daily  feed,  browse 
the  Sharkives  arxl  sign  up  for  Shark  Tank  hotrte  delivery  at 
cofnputenior1d.eoin/ehaifcy. 
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Scary  Message 


SCARY  STUFF,  these  numbers  from  a  new  survey  by  the 

American  Management  Association  and  the  ePolicy  Insti¬ 
tute:  20.1%  of  companies  surveyed  say  they’ve  had  e-mail 
and  instant  messages  subpoenaed.  A  bit  more  than  13% 
have  been  sued  over  employee  e-mail.  Only  6%  archive  IM, 
and  35.1%  have  an  e-mail  retention  policy.  Nearly  37%  of  employees 
aren’t  sure  which  messages  should  be  saved,  and  6%  have  sent  or  re¬ 


ceived  a  sexual,  romantic  or  pornographic  instant  message. 

Yeah,  these  numbers  are  scary  —  but  not  scary  enough  to  get  your 
top  management  to  budget  more  for  proper  e-mail  and  IM  policy 
training  and  enforcement,  are  they? 


And  no  wonder.  The  numbers  don’t  add  up. 
It’s  hard  to  quantify  the  risk  of  slack  messaging 
management,  even  with  the  possibility  of  law¬ 
suits  or  regulatory  action.  And  it’s  often  cheap¬ 
er  to  pay  a  fine  than  it  is  to  (^>ey  the  law.  Too 
often,  that’s  what  drives  management’s  spend¬ 
ing  decisions. 

Is  that  a  good  thing?  Na  But  it’s  reality. 

Remember  back  in  December  2002.  when 
five  Wall  Street  firms  got  slapped  with  fmes  of 
$1.65  million  each  because  their  systems  for 
archiving  e-mail  were  inadequate?  I  chalked 
that  up  to  management’s  failure  to  recognize 
the  price  of  not  investing  in  its  systems. 

But  as  readers  told  nte  later,  it  could  be  that 
management  was  thinking  about  the  big  poten¬ 
tial  legal  costs  of  having  that  e-mail  easily  ac¬ 
cessible  in  a  lawsuit  —  like  the  one  that  had  }ust 
cost  another  investment  firm  a  $100  million 
fme.  largely  as  a  result  of  evidence  in  e-mails. 
As  one  reader  put  it,  “It  didn’t  take  these  guys 
long  to  figure  out  how  to  save  themselves 
$98  J5  millioa" 

So  good  e-mail  and  IM  policies  might  actual¬ 
ly  be  riskier  than  lame  policies.  No  matter  how 
cynical  that  calculation  may  be.  it 
will  feed  into  the  budget  decision. 

Add  the  fact  that  good  policies 
have  real  costs  —  serious  training 
for  users  to  learn  them,  extra  work 
for  managers  to  enforce  them  and. 
yes,  hardware  and  software  to  make 
them  all  work  —  and  it’s  pretty  clear 
why  scare  tactics  won't  get  manage¬ 
ment  off  the  dime.  There  are  just 
too  many  dollars  on  the  other  side. 

Unfortunately,  that  makes  it 
toi^  for  IT  We  know  good  e-mail 
and  IM  man^ment  is  good  busi¬ 
ness  —  expensive,  perhaps,  but  nec¬ 


essary.  A  day  will  come  when  our  organizations 
will  need  archived  e-mails  and  IMs  to  defend 
against  lawsuits,  get  rid  of  bad-apple  employees 
and  solve  real  business  problems. 

But  those  are  all  potential  future  benefits. 
How  do  we  make  a  business  case  for  good  mes¬ 
saging  policy  r^t  now? 

By  using  it  to  get  rid  of  real  dollars  we’re 
spending  right  now. 

No,  we  can’t  quantify  the  potential  cost  of 
employees  behaving  badly  on  e-mail  and  IM. 
But  our  help  desk  logs  can  tell  us  the  cost  of 
solving  e-mail-  and  IM-related  problems.  Spam, 
viruses  and  worms  cost  both  IT  and  users  rim<» 
—  and  sometimes  downtime.  User  training  can 
cut  those  costs.  That  puts  a  hard  dollar  value  on 
e-mail  and  IM  training. 

And  it  turns  training  into  a  cost-reduction 
project,  which  is  more  appealir^  to  budgeteers. 

Then,  when  we’ve  nailed  a  solid  ROI  for 
teaching  users  how  to  use  e-mail  and  IM  cor¬ 
rectly,  it’s  cheap  to  tack  on  explanations  of  legal 
issues,  regulatory  requirements,  best  practices 
and  good  manners.  The  benefits  may  be  unquan- 
tifiable,  but  at  least  the  incremental  cost  is  small 
And  once  we’ve  got  policy  train¬ 
ing  in  hand,  we’ve  undercut  those 
cynical  calculations  about  the  risks 
of  e-mail  and  IM  retendon. 

Sure,  top  management  should 
push  for  good  e-mail  and  IM  poli¬ 
cies.  But  that  won’t  happen.  So  it’s 
up  to  IT.  Why?  Because  that’s  our 
job.  Because  we’re  not  cynical  But 
mainly  because  we’ll  actually  show 
it  will  cut  costs.  When  it  comes  to 
making  this  business  case,  we’re 
the  only  ones  who  can. 

Now  there’s  a  scary  thought,  eh? 
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EMC  HELPS  YOU  MEET  NEW  COMPLIANCE  DEMANDS.  The  cause,  tompl.ance  regulanors  Ir.  . 

•  ••  •--.  upon  IT  resources.  Now.  if  regulators  request  vout  data  m  :?4  hours,  you  can  deliver,  rro  questions  .tskt^i: 
••••anon  iifecvcle  management,  you  can  easily  retrieve  archived  e-mail,  and  manage  vast  amour-'s  ot  oata 
•••■  broadest  family  of  informalion-rTian.ageroent  platfornrs.  software,  services,  and  soilj:il’'-s 
•  “’i  ,inv  IT  challenge.  Ti)  le.T"  mo'e.  visit  WWW. E M(  com  compliance 
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Oracle  Database  lOg 


$149  Per  User 


Standard  Edition  One 
One  CD 

17  minute  install 
Easy  to  use 


First  class  database . . .  economy  price 


oracle.com/standardedition 
or  call  1.800.633.0753 


«f 


Terms,  restrictions,  and  limitations  apply  Standard  E(Jition  One  is  available  witb  Named  User  Plus  licertsinp  at  $149  per  user  with  a  minimum  of  five 
users  or  $4995  per  processor.  Licensing  of  Grade  Standard  Edition  One  is  permitted  only  on  servers  that  have  a  meximum  capacity  of  2  CPUs 
per  server.  17  minute  install  is  based  upon  testing  on  a  system  with  1x866MH2  Intel  CPU,  512  Mb  RAM  running  Red  Hat  Linux  2.1.  Actual 
install  limes  will  very  and  are  dependent  on  system  configurations.  For  more  information,  visit  orscle.conVstanderdedition 


ConmsM  C  IMS.  Ondt  CorperMion.  M  ngMi  m>fv«d.  Ontit »  *  ngiWiwd  ndiinot  of  OtkI*  Cstponbon  wCiw  M  imiM. 
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Lifc'cycle  leap:  EMC  to  announce  wliat  its  acquisition  of  Docunienlurn  has  yielded 
Rational  idea:  IBM  will  provide  deeper  integration  in  the  next  version  of  its  tools  suite. 


COMPinERWDRLD 

TUF  voier  nc  lY  UAMtAeueuT  .  • 


THE  VOICE  OF  IT  HANAOEMENT  •  WWW  COMPUTERWORLD  COM 


JUITM.  2004  •VOL.  38  •NO  30*»/C0fY 


EDUCATING 

- ^YOUR — 


Business  execs  have 
learned  just  enough  about 
IT  to  be  dangerous,  so 
smart  CIOs  are  furthering 
their  education  to  turn  them 
from  adversaries  to 
allies.  Here’s  how. 

Page  31 
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Future  of  HP  User 
Events  Uncertain 

Independent  user  groups  say  vendor’s  proposal  to 
consolidate  conferences  thrMtens  revenue,  voice 


In  a  development  that  direat- 
ens  the  continued  existence  of 
independent  HP  user  groups, 
Hewlett-Packard  Ca  intends 
to  “coatesce"  three  user  con¬ 
ferences  into  one  ‘technical 
solutions  conference"  begin¬ 
ning  next  year.  - 

Some  user  group 
ofTicials  said  the  plan, 
which  may  mark  the  , 

endofHPWorid.  I 

threatens  the  groups'  I 

major  sources  of  rev¬ 
enue  and  their  reasons  to  ex¬ 
ist.  And  they’re  worried  that 
the  plan  would  replace  user- 
focused  conferences  with  a 
vendor-sponsored,  market¬ 
ing-driven  event 
The  10.000-member  En¬ 
compass  user  group  has  en¬ 
dorsed  the  plan.  But  ITUG 
(formerly  the  Tandem  user 
group),  Open  View  Forum  In¬ 
ternational  and  the  100.000- 


member  Interex  group  are 
voicing  concerns. 

“If  you  surrender  your  pre¬ 
mier  event  what  is  your  pur¬ 
pose  in  life  beyond  that?" 
asked  Denys  Beauchemin, 
president  of  Sunnyvale,  C^alif.- 
based  Interex,  whidi  co-pro- 
duces  HP  World  annually 
with  Encompass.  In¬ 
terex  leaders  and  mem¬ 
bers  are  assessii^  the 
impact  of  HFs  prc^ios- 
al  on  Interex’s  “very 
existence ...  if  we  did 
not  have  HP  World," 

I  Beauchemin  said, 
j  There  is  something  of 
value  lost  when  a  conference 
is  run  by  a  vendor,"  added 
Chris  Koppe,  an  Interex  board 
member  and  marketing  direc¬ 
tor  at  Speedware  Corp.  in  St 
Laurent.  (Quebec.  "It  is  the 
vendor's  interest  that  is  put 
foremost  and  there  is  a  nega¬ 
tive  impact" 

HP  Events,  page  14 


Supply  Chain  System  Failures 
Hampered  Army  Units  in  Iraq 


Because  of  the  failure  of  auto¬ 
mated  supply  chain  manage¬ 
ment  and  tracking  systems  in 
Iraq,  Uil  Army  con^t  units 
fighting  there  last  year  had 
to  resort  to  c^turing  key 


MORE  ONLINE 


supplies  such  as  lubricants 
and  e3q>losives  from  enemy 
stockpiles,  according  to  a  re¬ 
view  of  the  war  that  was  writ¬ 
ten  by  military  analysts. 

In  addition,  food  supplies 
barely  met  demand,  and 
stocks  of  ammunition  and 
spare  parts  were  nearly  de¬ 
pleted  during  combat,  wrote 
analysts  at  the  Center  for 
Army  Lessons  Learned,  a  mil- 
Army  in  Iraq,  page  IS 


EffortAfootto 
AchkessE-VDling 
AtConvention  flr 


mao  from 
Presidem 
George  W. 
Boih'shome 
stmeplmstD 
pot  the  israe  of  deoronic 
voting  security  and  integrfry 
in  the  qmdight  at  tfak  week’s 
Democratic  Nmioiiat  (Dott- 
veodoD. 

Ahhou^  she  iso*t  schcd- 
ufedto^jeakattbecooven- 
tioo  in  Boston,  Texas  Rep. 
Eddie  Bernioe  Johnson 
call  on  prominem  Democrats 
to  help  raise  voter  awareness 
about  the  challenges  fedng 
the  security,  reliability  and 
integrity  of  electroQk  voting 
systems,  a  spoilsman  for  her 
office  said. 

T  can't  imagiiie  h  not  be- 
E-voting,page4S 


1.  Increased  ATM  activity  detected  instantly. 

2.  identities  confirmed  securely. 

3.  Online  banking  increases  dramatically. 

4.  IT  resources  optimized  dynamically. 

5.  Bank  serves  customers  easily. 
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MIDDLEWARE  IS  IBM  SOFTWARE.  Powerful  software 
likeTivoli"  and  WebSphere*  And  it's  at  the  heart  of  solving 
what  analysts  call  the  key  issue  of  2004:  automation. 
IBM  middleware  Is  open  and  can  deliver  It  all  at  a  pace 
to  match  your  needs.  It  anticipates  problems,  responds 
to  change  and  optimizes  resources.  And  it  all  leads  to 
meeting  business  goals.ThatS  ON  DEMAND  BUSINESS. 
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Electronic  Arts  makes  beautiful  video  games.  Since  this  entertainment 
powerhouse  switched  its  data  transport  from  ATM  to  IP  with  Sprint, 
coupled  with  Electronic  Arts'  technotagy.  network  performance  has  improved 
dramatically.  Gigabytes  of  game  code  and  digital  assets  that  took  8-10  hours 
to  send  now  take  less  than  20  minutes.  Thanks  to  shortened  data  transport 
times  and  the  ability  to  host  digital  assets  in  one  place,  the  process 
of  developing  games  is  now  both  quick  and  highly  collaborative,  with 
information  sharing  amongst  more  than  40  countries.  And  since  switching 
to  Sprint.  Electronic  Arts  saves  roughly  $100,000  a  month.  With  Sprint. 
ElMtronic  Arts  is  reliable,  faster  and  more  effective  -  in  a  word,  beautiful. 
With  Sprint,  business  is  beautiful.'' 

>  Visit  Sprint.com/beautiful  for  case  studies  or  call  877-777-5568  > 


®200SSpr«f  Alt  rights  reserved  Sprmterwl  the  rJierrw*!  logo  are  traderiwks  of  Sprint  Co^ 
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Stretch  Your  Talent 

In  the  Manageinent  section:  Stretch  assign- 
ntents  can  boost  enip!o>'ees'  IT  skills,  career 
prospects  and  morale.  But  be  careful;  Stretch 
your  workers,  don’t  break  them.  Page  33 


Thick  and  Thin 

In  this  week's  Technology  section:  There  has  bera 


—  - in  tiUn-cUent  tech¬ 

nology.  But  most  companies  that  use  thin-client  serverware  typically  deploy  it  across  a 
portion  of  all  desktops  and  use  it  to  access  only  a  select  group  of  applications.  Pane  t9 


6  EMC  integrates  document 
and  storage  management  with 
its  Documentum  software. 


24  Matters  of  Trust.  The  man  in 
charge  of  Microsoft’s  Trust¬ 
worthy  Computing  initiative 
describes  how  the  company' 
views  security. 

25  Integration  Imperatives.  An 

industry  group  offers  a  solu¬ 
tion  to  application  integration 
failures. 


8  On  the  Mark:  Mark  Hall 
writes  about  ways  to  avoid 
EMC  storage  and  Notes  ex¬ 
penses.  plus  wireless  viruses 
and  ethical  e-cotnmerce. 


7  The  Health  and  Human  Ser¬ 
vices  Department  announces 
a  plan  to  create  a  health  infor¬ 
mation  infrastructure  that  in¬ 
cludes  nationwide  use  of  etec- 
tronic  health  records  systems. 

7  SAP  broadens  a  software 
maintenance  program  that 
was  announced  in  March  to 
cover  all  new  releases  of  its 
business  applications. 


16  Maryfran  Johnson  figures 
you  already  know  that  CIOs 
have  to  be  business  communi¬ 
cators.  educators  and  guides 
for  CXOs;  what  you  need  are 
practical  tips  on  how  to  play 
those  roles. 


26  Future  Mtetch:  Producing  the 
Future.  Some  of  the  most  im¬ 
portant  things  in  IT  today, 
such  as  Unix  and  the  Internet, 
have  roots  at  MIT. 


16  Virginia  Robbins  has  wit¬ 
nessed  the  anxiety  that  out¬ 
sourcing  is  causing  for  one  IT 
manager  on  the  ftont  lines. 


10  IBM  promises  deeper  integra¬ 
tion  in  the  next  verston  of  its 
Rational  tools  suite. 


26  Security  Manager's  Journal: 
FTP  Server  Offers  Illicit 
Goods.  A  check  of  an  FTP 
server  reveals  an  illegal  distri¬ 
bution  copy  of  Windows  at 
Mathias  Thurman's  company. 


uavid  Moscnella  sees  signs 
of  important  changes  in  the 
industry  in  the  implosion  of 
Comdex. 


Load  Testing  Dons  RighI 

ItfEB  SITE  MAMMSIENT:  Poor  testiiig  proce¬ 
dures  may  be  to  blame  for  scmie  highly  ptddi- 

ctxed  Web  site  crashes.  Keynote  Systons' 
John  Kltnke  explains  bow  to  test  the  right 
way.  OQiMlM  drat 


10  Q&A:  IBM  Rational’s  Mike 
Devlin  says  modeling  is  the 
best  practice  for  service- 
oriented  architectures. 


Kooert  L.  Mitchell  says  ncw' 
recycling  initiatives  from  HP 
and  Dell  target  consumers  but 
may  benefit  business  as  well. 


12  IRS  systems  face  security 
risks  because  of  insufficient 
oversight  of  contractors  and 
unauthorized  use  of  handheld 
devices,  auditors  say. 


31  Educating  Your  CXOs.  With 
tighter  budgets,  a  demand  for 
guaranteed  ROI  and  business 
execs  who  know  just  enou^ 
about  technoli^  to  be  dan¬ 
gerous.  smart  CIOs  are  using 
education  to  turn  CXOs  from 
adversaries  to  allies. 


Don’tBelaftintheD«1( 

DISASTER  RECWtitV:  Ax  Ag  firm  atimniitr. 
sary  of  the  "Great  Blackout  of 200r  ap¬ 
proaches,  Randy  MacCieary:  general  manag¬ 
er  trfTJPS  Busing  at  Lidiert  North  America, 
offien  steps  your  coo^iaiiy  can  take  to  keep 

business  runninf  during  a  pnwKi 

OQHieMJMt  47844 


38  Sue  Young’s  experience  has 
been  that  subpar  employees 
can  be  motivated  if  you  tell 
them  that  their  help  is  valued 

46  Frankly  Speaking:  Frank 

Hayes  thinw  Daimler- 
Chrysler’s  legal  victory  over 
SCO  could  have  implications 
for  software  use  beyond  the 
Linux  battle. 


12  SCO  loses  a  roimd  in  court 
against  DaimlerChiysler. 

14  The  Contsfrt  World  trade 
show  is  canceled  after  oiga- 
ntzers  fail  to  land  vendors  to 
sponsor  the  event 

15  Los  Alamos  National  Lab 

confirms  that  classified  infor¬ 
mation  was  sent  through  a 
nonsecure  e-mail  system. 

16  Outsourcing  and  broadband 

issues  are  on  the  Democratic 
Party’s  platform  at  this  week's 
national  convention. 


34  Art  You  Annoying?  it  work¬ 
ers  have  their  share  of  irritat¬ 
ing  behaviors.  Letting  your 
conduct  run  amok  can  wreak 
havoc  in  the  worlqilace  and 
even  derail  your  career. 

36  Carter  Watch.  How  to  dig  out 
ftom  an  IT  infrastructure  dis¬ 
aster  big  bonuses  for  IS  direc¬ 
tors;  and  where  companies 
are  putting  their  sofhvare 
dollars  in  2004. 
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NEWS 


12,  Manugistics 
Changing  CEOs 

SuMy  cMr  Mftwira  vendors  12 
TochnotogiM  Inc.  and  Mwiugii- 
tica  Oraup  Inc.  are  both  changino 
(hair  top  ttacutfvea.  Oalas-baaad 
12  aaM  foundir  SmiIK  Sid^  wiR 
siapdo«masC£Ooncoanplaoo- 
mont  Is  hbsd.  aWMugh  ha 
Slay  on  at  Chatman.  MMwgMcs 
named  Joo  Cowan  lo  talB  over  as 
CEO  froin  Qregory  Owens,  who 
abe  wtl  eontinuo  as  chakman. 
Cowan  previouaty  was  CEO  at 
EXE  Tachnotogies  Inc.  in  Dallas. 

Sun  Puts  Opteron 
In  Fbur-CPU  Server 

Sun  WerDsystams  Inc.  today 
plans  to  announce  an  Oplar^ 
baaed  server  that  mns  Solaris 
andaupperisuptoleurCnis.ac* 
cerdtog  to  Msmalion  pasted  on 
a  Wab  alto  tor  Rs  bualneta  pari* 
nars.  Sim  decinad  to  comment 
about  the  annoencomont  which 
tolews  HewtoW  Patkaid  Co.‘s 
ndtoul  of  a  toumrocaesor 
Optoron  mstora  in  April 

MwosoftSal^ 
iVdHs  Up  Again 

lAeraMfl  Cofp.  said  rmnut  iB- 
enwad  ^  o«w  yMr  in  Hb 

•ntt  quartv,  ndddi  MdMiJm 
M.PrallinM«nb.aidCM 
FiMndnl  DHek  Mn  Cmnon 
nMildlMkntoll'tpndKl  I 
—  dt  dn<  nrirtilinni. 


EMC  Links  Document 
Management,  Storage 
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‘•innilir  flwrlilni  lidiiiinlliiii 
■lli>c.iinoilndgnt-qiiHtart- 
nndnl  raMb  dal  am  Mlv 
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dbt  amdd  ta  Mrtw  dill  mondi. 
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int  I  mneb  Mil  raima  of 
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OMo  mlKM  b  to  *3.7  bflon 
tomimitordalidlim. 


Adds  software  for 
d  moving  data  to 
different  devices 

BV  LUCAS  MSARIAN 

EMC COBP.’S  Oocumen* 
mm  division  today 
will  announce  its  first 
product  offering  that 
lies  together  document  and 
storage  management  through 
the  use  of  software  designed 
to  automatkaily  migrate  un* 
structured  content  to  different 
tiers  of  storage  devices. 

EMC  officials  last  week  said 
the  new  Document  Content 
Storage  Services  software  runs 
in  conjunction  with  Documcn- 
turn’s  content  management 
applications  and  includes  a 
policy  engine  that  IT  man¬ 
agers  can  use  to  direct  corpo¬ 
rate  documents  to  primary, 
secondary  or  archil  storage. 
The  policy  engine  can  take 
into  account  factors  such  as 
the  age  of  documents  and  the 
value  they  have  to  a  company. 

The  software  can  also  move 
data  throughout  multivendor 
storage  installations,  accord¬ 
ing  to  EMC.  The  company  said 
Document  Content  Storage 
Services  works  with  its  own 
storage  subsystems  and  with 
hardware  sold  by  rivals  IBM, 
Hewlett-Packard  Ca,  Hitachi 
Data  Systems  Corp.  and  Net¬ 
work  Appliance  Inc 

Changing  dassHicalians 

Document  Content  Storage 
Services  provides  a  frame¬ 
work  for  classifyir^  docu¬ 
ments  from  a  storage  stand¬ 
point  at  the  time  they're  creat¬ 
ed  and  then  modifying  the 
classifications  throughout  the 
life  cycles  of  the  documents. 

For  example,  an  insurance 
contract  or  product  invoke 
would  be  stored  on  a  high¬ 
speed  disk  array  while  being 
processed,  said  Neville  Let- 
zerich,  a  product  marketing 
director  at  EMC.  Bui  after  be¬ 
ing  finalized,  the  document 


could  be  migrated  to  lower- 
cost  disk  storage  and  eventual¬ 
ly  to  a  tape  archive,  he  added 

Wayne  Aiella  vice  presi¬ 
dent  of  e-bustness  services  at 
EMC  user  Corporate  Express 
Inc.  in  Btoomfieid,  Colo.,  said 
the  office  products  distributor 
will  likely  roll  out  Document 
Content  Storage  Services  next 
year.  Aiello  said  he  hopes  the 
software  will  help  Corporate 
Express  save  money  by  allow¬ 
ing  him  to  migrate  some  of  the 
company's  25  million  product 
order  invoice  documents  to 
lower-end  storage,  freeing  up 
more  primary  storage  for 
transactional  data. 

“Depending  on  the  a^  of 
the  document,  it’s  very  impor¬ 
tant  for  us  to  understand  how 
to  store  it,"  Aiello  said.  “Obvi¬ 
ously.  we  doni  want  to  store 
all  25  million  invoices  on  high- 
end  storage.  It's  not  cost-effec¬ 
tive  for  us." 

Last  year.  Corporate  Ex¬ 
press  took  in  about  S1.S  billion 
of  its  $4.4  billion  in  North 
American  sales  through  its 
Web  site.  The  company  is  just 


Document 
Content  Storage 
Services 

Hut  triggws  ad  hoc  or  bstdi 
noGutlonofstoragiillaca- 
HoniMbdwatMMoro 
added  to  syxtom 

OFFERS  hull  tor  creatins 
and  aKaring  sterago  poldos, 
plus  audtt  capaMMN  and 
■vent  toga  tor  raperUng  and 
chargabadt  uaas 

PROVIDES  APIs  ' 

the  poHcy  an^  to  slerags 
<tovtoashemElllC.HP.BM, 
MtacM  Data  Systems  and 
Network  AppRince 

beginning  to  use  Oocumen- 
turn's  content  management 
tools  to  archive  Web  content, 
according  to  Aiello 
He  also  expects  Documen- 
turn's  software  to  help  Corpo¬ 
rate  Express  as  well  as  its  cor¬ 
porate  customers  comply  with 
the  financial  reporting  man¬ 
dates  of  the  Sarbanes-Oxley 


Act  “Customers  are  asking  us 
because  of  [Sarbanes-Oxley] 
to  maintain  their  order  history 
—  who  ordered  it,  who  ap¬ 
proved  it,  when  it  was  ap¬ 
proved  —  and  to  keep  t^ 
notes  put  on  it,"  he  said.  "It’s 
a  financial  record  for  them.” 

Defining  the  storage  poli¬ 
cies  that  are  needed  to  auto¬ 
mate  document  life-cycle 
management  will  be  an  ardu¬ 
ous  task,  Aiello  acknowledged. 
But  he  said  he’s  looking  for¬ 
ward  to  setting  up  those  poli¬ 
cies  in  Documentum's  soft¬ 
ware  instead  of  having  to  build 
"a  lot  of  scripts  on  the  hard¬ 
ware  side.” 

IDC  analyst  BUI  North  said 
developing  automated  storage 
migration  polkies  for  existing 
documents  will  be  a  nearly 
impossible  task  for  users,  un¬ 
less  they  already  run  Oocu- 
mentum’s  content  manage¬ 
ment  tools.  This  is  great  for 
companies  using  Documen- 
lum,  but  it  doesn't  do  anything 
for  the  larger  population  out 
there,"  North  said. 

EMC  said  E>ocument  Con¬ 
tent  Storage  Services  is  avail¬ 
able  now.  but  it  couldn’t  pro¬ 
vide  pricing  information  on 
the  new  product  last  week. 
Documentum’s  flagship  Docu¬ 
ment  Content  Server  software 
starts  at  about  $50,000. 
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EMC  Has  Strong  Q2-hi<  Not  Symmetriic  and  Documanlum 
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HHS  Sets  Plan  for  Adoption 
Of  Electronic  Medical  Records 


Claims  technology  will  save  money, 
but  upfront  IT  costs  likely  will  be  steep 


BY  BOB  BRSWIW 

The  Department  of 
Health  and  Human  Services 
last  week  unveiled  a  lO-year 
plan  to  create  a  new  health  in¬ 
formation  infrastructure  that 
will  include  electronic  health 
records  for  all  Americans  and 
a  nationwide  network  that 
doctors  could  use  to  access 
those  patient  EHRs. 

At  a  health  care  IT  summit 
held  by  the  agency  in  Wash- 


Dr.  Brent  fames.  vic«  presi¬ 
dent  of  research  at  Intermoun¬ 
tain  Health  Care  Inc.  in  Salt 
Lake  City,  said  he  thinks  the 
savings  from  streamlining  the 
U.S.  health  care  system  with 
EHR  technology  could  eventu¬ 
ally  amount  to  S400  billion  per 
year.  Intermountain  maintains 
EHRs  for  about  I  million  pa¬ 
tients  at  its  facilities. 

But  generating  those  savings 
won't  happen  without  a  heft>' 


ington.  HHS  Secretary  Tommy  upfront  price  tag.  according  to 
Thompson  estimated  that  the  Mike  Kappel.  senior  vice  pres- 


adoption  of  EHR  systems  na- 
tionunde  could  lower  the 
country’s  annual  $17  trillion 
health  care  bill  by  10%.  He 
also  said  the  use  of  EHRs 
would  better  protect  health 
care  records  and  help  reduce 
medical  errors. 


ident  of  strategic  planning  at 
McKesson  Corp.,  a  San  Fran- 
cisco-hased  pharmaceuticals 
distributor  and  health  care  IT 
vendor.  Kappel  said  that  he 
'Vould  not  find  it  impossible 
to  believe"  that  the  cost  of  de¬ 
veloping  a  national  EHR  sys- 


SAP  Unifies  Its  Software 
Maintenance  Programs 


BY  MARC  L.  SONOINI 

SAP  AG  last  week  said  it's  ex¬ 
tending  an  eight-year  software 
maintenance  program  intro¬ 
duced  for  its  ERP  suite  in 


an  additional  markup  (see 
box).  Thereafter,  users  will 
have  to  negotiate  maintenance 
contracts,  SAP  said. 

Uwe  Hommel  senior  vice 


March  to  all  of  its  business  ap-  president  of  SAFs  Active 
pUcaiions.  The  move  is  aimed  Global  Support  division,  said 


at  replacing  a  mix  of  support 
oflTerir^  for  different  products. 

SAPaiuiounced  that  its  so- 
called  S-1-2  maintenance  plan 
will  now  be  offered  across  the 
board  on  rtew  releases  of  ap¬ 
plications  built  on  top  of  the 
company's  NetWeaver  mid¬ 
dleware  technology.  The  new 
maintenance  scheme  initially 
was  avaibble  only  for  its  flag¬ 
ship  mySAP  ERP  software. 

The  plan  provides  for  five 
years  of  mainstream  mainte¬ 
nance  after  applications  are 
released.  That  will  be  fol¬ 
lowed  by  an  initial  year  of  ex¬ 
tended  maintenaiKe  at  a  high¬ 
er  price  and  two  more  years  at 


the  company  is  try’ing  to  en¬ 
able  its  customers  to  "plan  in  a 
very  safe  way  how  to  deploy 
the  software,"  he  said. 

Driven  by  User  Demand 

Hommel  added  that  the  ex¬ 
pansion  of  the  mainietunce 
plan  was  driven  by  demaitd 
from  users  who  wanted  more 
definitive  information  about 
support  so  they  could  do  mi¬ 
gration  plannti^ 

The  5-1-2  offering  could  po¬ 
tentially  be  of  use  for  planning 
future  upgrades,  said  Gerrard 
Rutter,  vice  president  of  infor- 
nution  services  at  software 
vendor  Adobe  Systems  Itrc.  in 


tem  could  hit  $10  billion. 

Kappel  added  that  the  fed¬ 
eral  government  has  budgeted 
only  $50  million  this  fiscal 
year  and  $100  million  for  the 
next  one  for  health  care  IT. 


meaning  much  of  the  cost  bur 
den  for  the  envisioned  new 
systems  may  be  pushed  out  to 
doctors  and  hospitals. 

David  Barnhart.  CIO  at 
Wuesihoff  Health  System  in 
Rockledge.  Fla.,  said  HHS 
needs  to  find  a  way  to  “inccn- 
tiviae"  health  care  providers 
to  embrace  EHR  technology. 
For  example,  it  might  speed 
adoption  if  insurers  paid  a 
premium  to  doctors  and  hos- 


go 
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San  Jose.  However,  it  won't  be 
relevant  for  Adobe  anytime 
soon  because  the  company  al¬ 
ways  installs  new  versions  of 
SAP’s  software,  he  added. 

"Our  approach  is  to  stay 
current  at  all  times,”  Rutter 
said.  Adobe  runs  the  R/3  En¬ 
terprise  release  of  SAP's  ERP 
applications  plus  its  CRM  and 
data  warehousing  sofrvrare. 


HOW  IT  WORKS 


The  decision  to  offer  a  con¬ 
sistent  software  maintenance 
plan  follows  SAP’s  announce¬ 
ment  earlier  this  year  that  il 
would  synchronize  upgrades 
of  the  NetWeaver  products, 
which  include  an  integration 
broker  as  well  as  SAP  Busi- 


ir-  pitals  that  agreed  to  take  part 
in  the  new  network.  Barnhart 
:o  suggested. 

Id  its  "Framework  for 
Strategic  Action"  plan.  HHS 
recognized  the  need  for  such 
incentives.  According  to  the 
I-  plan,  the  Centers  for  Medicare 
&  Medicaid  Services  is  con¬ 
sidering  authorizing  extra 
payments  to  health  care  pro¬ 
viders  that  use  EHRs.  as  well 
as  other  steps  designed  to 
stimulate  adoption. 

The  HHS  plan  also  calls  for 
development  of  standards- 
B  based  EHR  systems,  and  three 
industry  groups  representing 
health  care  providers,  insurers 
and  IT  vendors  announced  a 
joint  initiative  to  certify  EHRs. 
Taking  pan  are  the  American 
^  Health  Information  Manage- 
I  meni  Association,  the  Health- 
care  Information  and  Manage- 
^  men!  Systems  Society  and  the 
National  Alliance  for  Health 
j  Information  Technology. 

^  James  said  vendors  to 
^  pay  strict  attention  to  stan- 
dards  for  the  use  of  EHRs  to 
become  widespread.  He  added 
that  they  also  need  to  iinpn>vc 
existing  interfaces  beiwetm 
-  EHRsystemsandotbcrappli- 
cations.  Currently,  users  can 
spend  as  much  money  devel¬ 
oping  their  own  system-to- 
s>'stcm  links  as  it  costs  to  buy 
EHR  software,  fames 
Terry  Hsu,  CIO  at  Ever¬ 
green  Healthcare  in  Vancou¬ 
ver.  Wash.,  also  called  for  bet¬ 
ter  u.«icr  interfaces  on  EHR 


ness  Intelligence  and  Its  portal  systems,  saying  the  ones  now 
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software  K^ickLink  454091 
Gartner  Inc.  analyst  Brian 
Zrimsek  said  SAP  is  reflecting 
a  trend  among  ERP  vendors  to 
treat  users  more  as  owners  of 
software,  nc4  just  as  product 
buyers.  For  example,  People- 
Soft  tnc.  last  year  launched  an 
initiative  dubbed  Total  Own¬ 
ership  Experience  that's 
aimed  at  simplifying  the  in¬ 
stallation  and  nuintenance  of 
its  applications,  be  noted 
SAP’s  plan  lets  users  decide 
whether  they  want  to  pay  for 
the  extended  maintenance  or 
migrate  to  newer  releases. 
Zrimsek  said.  "I  think  it's  a 
must  —  clarification,  commu¬ 
nication  and  fonnalization  for 
the  longer  term."  he  added. 
048326 


being  offered  by  vendors  "are 
not  quite  there  yet.” 

Elizabeth  Prewin.  a  lobbyist 
for  the  American  College  of 
Physicians,  said  a  bill  intro¬ 
duced  last  Wednesday  by  Rep. 
Patrick  Kennedy  (D-R.L) 
would  go  a  long  way  toward 
helping  to  pay  for  EHR  instal¬ 
lations.  The  bill  calls  for  $5  bil¬ 
lion  in  funding  for  health  care 
IT  from  fiscal  2005  through 
2008,  with  roughly  half  of  that 
allocated  to  development  of 
infonnatiDn  exchanges  based 
on  EHR  systems.  O  46367 
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EOS  to  Integrate 
Banks' Networks 

Etoetrank  Dita  Systems  Corp. 
saM  N  has  lignad  a  nsw  fT  ser¬ 
vices  contract  aritti  Bank  of  Amsr* 
icaCorp.caHnotorEDStointf 
grata  tho  bank's  voice  and  data 
natMik  vdth  the  connunicadone 
■nfnstruetura  of  FleslBosaBn 
Fbianciaf  Coriu  «Mck  Bw*  of 
America  bougM  in  Aprl  Iho  now 
daalaitandialB-yatf.SdJSU- 
ion  agraemant  signed  earty  last 
par.  rs  nmv  vahisd  at  S1.1  bHHon 
over  eight  and  a  hair  pars. 


Hyperion  Shuffles 
Its  Top  Two  Execs 

Nypirto  SduHam  Corp.  gam 
CluinMn  Hri  CEO  Roddi 
Hw  Ma  ol  tncuttw  cMniian 
and  naiMd  Oodlrair  SuBnii,  who 
graiiiaialy  anad  a  diW  ap•ra^ 
Ing  aMor.  to  ngtacn  Rodtil 
CEO.Sunriala.Caf.-taMdHr 
paftan  ilB  aid  k  hH  agraad  to 
bngQIQSotaltoniny^gdintop- 
a  ■!  and  aa  ilat6ii»d  aH- 
a«n  to  Sgdaag.  diaMto.  Hb 

tmd  m  Wanton  aiWl  Itoilili.  go 
to  oa  Wlab  alto:  (kddlM  483111 


Nortel  Sues  User 
Over  Switch  Deal 

Norlal  Nstvporfcs  Ltd.  said  It  has 
Wad  a  repyrigW  Intrlnmiiaiit 
I— suBagakrteidhieinariiah 
gfaoe  ArfekiaHhealianp  tacM  Ml 
aaekanga  in  Now  Bruawteii.  fU., 
that  IMS  NarWs  swMws.  Dm 
adt  fled  ia  UJ.  Dhrtrict  Court  in 
Vir^  dahns  tlwt  Artkwt  is 
using  Nsrtd  software  without 
authortzatien  and  that  k  faflod  to 
buy  al  tha  Mitohaa  R  eontractod 
for.  Arbinat  dacBaod  to  eommant. 


Siwrt  Takes 

»BM  won  a  atpn  yaar  daaf  to 
managa  and  davalv  syatanM  for 
too  UX  •Bvammonl's  Dsgartnwnt 
tor  Emdroaniant.  Food  and  Rural 
Afhin. . . .  Batooft-faaaad  MEANT 
INC  aaMKhaBacgulradtat 
Track  HaUtaga  Udn  a  BrflWi  frm 
IkWraaw^ihrgaStf  presets. 
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Save  Big  Bucks 
^Switching... 


...  B'iriaR  systorns,  avan  If  you  end  Up  running  two  messag' 
ing  appicalioftk.  That’s  the  conclusion  of  an  analyst 
who  has  compared  the  costs  of  using  IBM’s  Notes 
and  Microsoft  Corp.’s  Exchange  with  that  of  using 
the  system  from  upstart  Mirapoint  Inc  in  Sunnyvale, 
Calif.  Tomorrow,  Mirapoint  will  start  shipping  its 
Enterprise  Suite  to  compete  against  the  big  boys. 

Sara  Radicatt.  CEO  of  The 


Radicati  Group  Inc.  in  Palo 
Alto,  Calif,  claims  that  com¬ 
panies  can  save  more  than 
S300  per  user  per  year  by 
adopting  Mirapoint’s  messag¬ 
ing  technology.  “It’s  simpler 
for  administrators  to  use  be¬ 
cause  it's  an  applian^”  she 
explains.  “It’s  tuned  to  work 
on  the  hardware,  and  it  comes 
preconfigured."  And  end 
users  don't  even  have  to  learn 
to  use  a  new  mail  client.  They 
can  still  use  Outlook  and  syn¬ 
chronize  it  as  well  as  their 
handheld  devices  with  Mira¬ 
point’s  calendarii^  program. 
Radicati  adds  that  even  if  you 
have  custom  applications  for 
a  subset  of  your  users,  you 
can  leave  them  on  Notes  and 
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move  everyone  else  to  Mira- 
poinr's  appliance  and  still  re¬ 
alize  cost  benefits.  Part  of  the 
savings  comes  fnsm  the  com¬ 
pany’s  inclusion  integrated 
security  tools,  such  as  spam 
filtering  and  virus  protection. 
Bui  most  of  it  comes  foom 
Mirapoint’s  aggressive  pric¬ 
ing  model  According  to  }eff 
Brainard,  senior  product  mar¬ 
keting  manager  at  Mirapoint. 
companies  with  5.000  users 
or  more  pay  just  $100  per 
user  per  year,  which  includes 
the  cost  of  the  hardware.  Can 
you  say,  "price  war"? 

Avoid  EMC 
Storage  Expenses... 

. . .  wMi  PrafRar  for  Catorra, 

which  ships  this  week  from 
Tek-Tools  Inc.  in  E>aUas.  The 
S3.000  siora^  management 
application  gives  you  detailed 
trending  data  on  types  for 
EMC  Corp.'s  Celerra  Data 
Movers  wdio’s  using  them 
bow  and  when.  Those  babies 
start  at  S1S.OOO  a  pop  and  are 
the  heart  of  EMC's  network- 


attached  storage  system. 
Getting  a  better  handle  on 
how  to  forecast  the  purchase 
of  your  next  Data  Mover  is  a 
big  step  toward  “cost  avoid¬ 
ance,"  claims  Tek-Tools  CEO 
Ken  Barth.  You  guessed  It.  It’s 
buy  now  and.  maybe,  save 
now,  toa 

Enemy  Awaits  in 
Wireless  WtorM... 


with 

r,  .iM 
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RtotwdWDng. 

He's  the  gen¬ 
eral  manager 
ofOpenwave 
Systems  Inc.'s 
messaging 
and  ami- 
abuse  divi¬ 
sion,  and  he's 
seriously 
concerned 
about  Cabir, 
a  virus  that  spread  last  month 
via  Bluetooth.  It’s  proof  of 
concept  that  other  wireless 
protocols,  such  as  S02.11g,  can 
propagate  vicious  sofhvare. 
“Four  or  five  months  ago.  1 
would  not  have  thought  it 
possible,"  Wong  says.  He 
would  have  argued  that  oper¬ 
ating  system  fragmentation 
on  wireless  devices  “Nras  a 
natural  defense,"  unlike  Mi¬ 
crosoft’s  Windows  virus  mag¬ 
net.  Cabir  changed  his  think¬ 
ing.  He’s  concerned  that  a 
single  virus  might  carry  a 
payload  that  could  infect  one 
or  more  of  the  major  wireless 
operating  systems,  such  as 
Symbian  or  Palm  OS,  and  cre¬ 
ate  havoc.  However,  better 
defenses  may  emerge.  Wong 
suggests,  when  the  Message 
Anti-Abuse  Working  Group 
wraps  up  a  code-of-conduct 
and  patb-of-escalatioo  docu¬ 
ment  that  will  be  submitted 
for  adoption  by  Internet  ser¬ 
vice  providers  and  vendors 
that  handle  the  messaging 
needs  of  more  than  lOO  inil- 
lion  wireless  and  wired  users. 
For  example,  with  that  agree¬ 
ment,  Internet  service  pro¬ 
viders  will  have  processes 
for  things  such  as  shutting 


up  spanuners  and  shutting 
down  zombie  machines  dur¬ 
ing  deniai-of-service  attacks. 
They'll  also  have  better  ways 
to  react  to  new  viruses  such 
as  Cabir.  Wong  predicts  that 
will  happen  on  Aug.  30.  He 
ought  to  know.  He  chairs 
the  group. 

‘EDiical’ 

E-commencelsKey... 


hits.  That’s  the  advice  of 
Garry  Grant.  CEO  of  Search 
Engine  C^tunization  Inc. 
in  Carlsbad.  Caljf  He  boasts 
that  his  company  tunes  your 
Web  pages  ‘Wvith  every  ethi¬ 
cal  (means  to)  do  what  a 
search  engine  wants,  which  is 
to  deliver  h^hly  relevant  re¬ 
sults."  He  says  search  engines 
from  Google.  Yahoo.  MSN 
and  others  axe  constantly 
refining  their  algorithms  to 
locate  respectable  pages  and 
ignore  sites  created  by  spam¬ 
mers,  pornograpbers  and  oth¬ 
er  lowlifes,  who  are  constant¬ 
ly  trying  to  trick  the  engines 
into  ranking  them  high.  But 
those  algorithm  changes  also 
afiect  honest 
commercial 
sites.  More 
than  one 
e-conuxterce 
site  has  found 
itself  out  in 
the  cold  after 
an  update  of 
Google’s  en¬ 
gine.  One 
way  to  stay 
oothegoc^ 
side  of  a  search  engine,  he 
advises,  is  to  carefully  and 
constantly  review  its  usage 
guidelines.  Gram  says  be  reg¬ 
ularly  searches  patent  appli¬ 
cations  for  his  clients  b^use 
that’s  where  search  compa¬ 
nies  file  their  new  techniques 
to  either  avoid  spam  or  im¬ 
prove  Web  seardies.  which 
be  can  then  use  to  improve 
his  clients’  success  rate.  “An 
ethically  architected  site  can 
succeed,"  be  says.  Let’s  hope 
sa048M5 
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Get  the  HP  ProLiant  BL20p  bundle 
orkd  )«u'll  sove  big  compared  to 
the  cost  of  buyirtg  the  two  servers 
ond  occessories  separately. 


HP  ProLiant  BL20p  BLADE 

server  bundle 


$8,999 

•  (2)  6L20p  Blade  Servers 
Eoch  Blade  Server  indudes: 

-  (2)  Intel*  Xeon*-  processors  3.06GHz-SI2l( 

-  (3)  lQ/100/1000  NICs  +  (IJ 10/100  aO  NIC 
I  -  1G8  DDR  wemory’ 

j  *  p-Ooss  blade  ertdosute 

*  p-Ooss  single  phase  power  enclosure 
I  with  2  power  supplies 

;  *  Mirri  bus  bar  kit 
'  *  (6|  Rapid  Deployment  Pod  Icenses 


XEON 


Dewnlood  (nformaHpn  about  HP  Blode  servers. 

Read  a  while  poper  highlighting  total  cost  ol  ownership  ond  the  Focfivo  ond 
iSoofce  cose  studies  demonshoting  ROI. 


me  sn)  or  tne  lesss  term  am  dereganjing  eny  oiarges  esysDM  dr  i 
sanart  HPF5C  documentsBotf  Other  resmctioiK  may  «ptr  HKSC 
F«tcampmwarranlyaaMs.cell'S00-34S-1S18(U.S)  MH.liWI 


CALL 

1-877-726-8116 

CLICK 

hpxein/ge/blcKles4 

MHnnm  MriLtiM 


NEWS 


IBM  Pledges  Better 
Tools  Integration 


Upcoming  oflFerings  will  let  users  drag 
and  drop  information  benveen  tools 


Blue  cross  and  Blue 
Shield  of  Florida  uses 
IBM’s  Rational  Rose 
tool  for  building  visu- 
al  models  and  RequisitePro 
for  managing  application  re- 
quirements.  But  the  company 
must  manually  build  links 
when  it  wants  to  share  infor¬ 
mation  between  the  two. 

That's  due  to  change  by  the 
end  of  the  year,  when  IBM 
pledges  to  provide  deeper  in¬ 
tegration  between  all  of  its 
tools  through  the  3.0  version 
of  the  open-source  Eclipse 
framework  that  it  turned  over 
to  an  independent  manage¬ 
ment  body.  With  the  new  edi¬ 
tion.  users  won't  have  to 
launch  each  tool  separately. 
They  will  be  able  to  park 
themselves  in  a  single  user  in- 
lerface  while  they  work  whh 
IBM  Rational's  tools,  and  they 
can  cusiomiae  the  setup  to  sec 
only  what  they  need. 

Not  only  will  the  workspace 
took  better,  but  users  will  also 
be  able  to  drag  information 
from  one  tool  and  drop  it  into 
another  without  having  to 
write  scripts  and  export  and 
import 

■TUghi  now.  they’re  not  as 
tightly  integrated,  so  you  have 
to  iump  between  tools."  said 
Brian  Harrington,  an  IT  proj¬ 
ect  manager  at  Blue  Cross  and 
Blue  Shield  in  Jacksonville,  Fla. 

Many  Bridges  to  Cross 

Carl  Zetie,  an  analyst  at  For¬ 
rester  Research  Inc.,  said  Ra¬ 
tional  has  done  a  better  job  of 
integration  than  other  tools 
vendors.  But  he  likened  the 
scenario  to  the  city  of  Venice. 
"It  looks  like  one  city,  but  boy 
do  you  have  to  cross  a  lot  of 
bridges  to  get  around."  be  said. 

IBM  boosted  its  integration 
efforts  after  acqtiiring  Ratio¬ 


nal  Software  Corp.  last  year. 
But  the  sort  of  integration  it's 
promising  with  the  next  ver¬ 
sion  of  the  Rational  tools, 
code-named  Atlantic,  is  much 
richer.  That's  largely  because 
the  tools  share  a  common 
"metamodel'*  that  will  allow 
them  to  exchange  information, 
said  Eric  Naiburg,  maiicting 
manager  of  IBM  Rational's 
desktop  products. 

“The  metamodel  doesn't 
have  to  understand  the  code.” 
Naiburg  said.  "It  just  has  to 
understand  what  happens." 

For  example,  a  RequisitePro 
user  might  store  text-based  re¬ 
quirements  for  an  application 
in  the  tool's  repository.  The 


metamodel  for  the  require¬ 
ment  can  be  dragged  onto  the 
Atlantic  modeling  surface,  be¬ 
cause  the  modeling  and  re¬ 
quirements  management  tools 
run  in  the  same  framework, 
which  is  shared  on  a  common 
metamodel.  A  traceability  link 
connects  from  the  visual  mod¬ 
el  back  to  the  RequisitePro 
database  for  the  requirement 
information. 

A  Different  Approach 

Naiburg  said  IBM  is  no  longer 
integrating  tools  but  rather  is 
buildii^  on  lop  of  the  Eclipse 
framework.  That’s  a  subtle  but 
important  distinction,  he  said, 
because  it  allows  for  the  use  of 
the  more  abstract  metamod¬ 
els.  eliminating  the  need  for 
each  tool  to  have  lo  parse  the 
code  or  information  Imported 


I  from  another  tool  It  also 
I  brings  a  common  shell  and 
look  and  feel  to  the  tools,  he 
said. 

“A  lot  of  the  same  ideas  are 
going  into  [Microsoft's]  Visual 
Studio  2005  for  the  same  rea¬ 
sons."  said  Zetie. 

Carmen  Powers,  a  Des 
Moines-based  business  analyst 
at  Nationwide  Insurance  Co., 
said  the  potential  created  by 
the  new  Atlantic  offering  is 
exciting  because  it  links  soft¬ 
ware  development  to  the 
analysis  work  the  company 
had  already  been  doing. 

Powers  said  he  recognizes 
that  the  approach  will  require 
some  degree  of  cultural 
change.  But.  he  added,  "we 
are  lost  without  that  personal 
communication,  so  this  is  go¬ 
ing  to  help  with  that.” 

Edward  Karim,  a  manager  in 
quality  assurance  at  Starwood 
Hotels  and  Resorts  Worldwide 
Inc.  in  White  Plains,  N.Y.,  said 
he  had  to  call  the  help  desk 
to  be  able  to  produce  reports 
drawing  information  from 
Rational's  TestManager  and 


Devfire  Modeling  bBestPfactice  for  S(^ 


Bnki.  gananl  iMiiiiv 
oiafURptanlnllinccM- 
■tan.a«>moikingka«dri 
sik)  kr  ny  WKMy  biMg 


'Wk\«<la«lenaeiMciin 

nnimtickinimrini* 

•MagfilDiMMtop^krin 


cMactn.DHfei«ola 


•boiilcMii|vtn*k 

kMnnkltaifWDnl 

SaftnIkwkpiinW 

UwCinlimlanL 


li  iMf  On  oonr 

MntNhIatcaanAint 


iMkcmndin—fulm- 


kUAiWannnw- 


Mraiaakinclln.1Mi 

nk  rrr  mm  imi  iimiiiiiii 
■toMMBlInMiiclim 

lii«nincHt..hlalidh 

iktmr— .lawtiiTipi, 
ankranndadneman 
Mttofaokk'kntoiikina 
iM  mtyn'tnifi**  TMi 
mr.n'oanlnkAilnAia 


ni|rBanMbt,in 

AMkpMntaoM 
pnallmMnr.Bi««nn 
•UalnnlilklOTMAglai 
M.  DnWnrt  mdiM  to 
ito»Jtoil»k)i«n»»n« 

■•rfoNttomp. 


kMktongi 


•■idMiooi 


imiMntoidtonttMlna 

Mlimytltotttalwri* 

utoAMnnaaiiomofto 


ftnkcnilohtiMikMi 
«ton  I.  BM  toa  toy  an  of 
tancaiMoltoanMKaaa 

naaMdin^talaitkiin 
tal  kamMoMtaoto.  un- 
fktotoktoyitaBtoyia 
toiatoptoaMMigk 


towfapaaDantei—kH- 

etoktotoiftadatii. 


aUaatoaMktftol 
anmaatoirORtoatod- 
Mktolna'taUolUMi 
MlbrtondtoinwM* 
ktoWamaum  ABafto 


iwiWUnntoepki^ 

laaaAlkAnytoft«ani«» 


I  Requisite  Pro.  So  the  improved 
I  integration  will  be  welcome. 

I  But  Felicia  Hong,  a  software 
manager  at  Noveilus  Systems 
Inc.,  said  the  San  Jose-based 
semiconductor  company  al¬ 
ready  has  put  a  lot  of  work 
into  customizing  the  Rational 
suite  of  tools  it  has  been  using 
since  2000.  "The  capabilities 
are  great  for  new  users.”  she 
said.  "But  it's  late  for  us.” 

Companies  that  don't  use 
the  whole  Rational  suite  may 
not  have  as  great  a  need  for 
the  new  capabilities.  David 
Pennington,  a  development 
manager  at  The  Home  Depot 
Ioc„  said  his  company  likely 
won’t  use  the  full  suite  be¬ 
cause  it  prefers  to  select  best- 
of-breed  tools  and  get  them  to 
work  together.  The  Atlanta- 
based  retailer  has  a  team  de¬ 
velopment  product  from  Doc- 
umentum  Inc.  048365 
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Fed  Auditors  Slam  IRS 
For  FT  Security  Wsks 


Reports  hit  lax  oversight  of  contractors, 
unauthorized  use  of  h^dheld  devices 


ev  LtMOA  ROSCNCKAMCE 

Al'ditors  from  fbe 
Departmenc  of 
the  lYeasury  have 
i&sued  two  reports 
about  IT  security  risks  at  the 
Internal  Revenue  Service,  one 
saying  that  contractors  work¬ 
ing  on  IRS  systems  “commit¬ 
ted  numerous  security  viola¬ 
tions'*  and  the  other  taking  the 
agency  to  task  over  unautho- 
riaed  use  of  handheld  devices. 

The  security  violations  by 
IT  contractors  “signiftcanily 
increased"  the  potential  for 
the  spread  of  viruses  and 
unauthorized  disclosures  of 
taxpayer  informatiort,  accord¬ 
ing  to  auditors  in  the  office  of 
the  Treasury  Inspcaor  Gener¬ 
al  for  Tax  Administration.  The 
auditors  said  contracting  offi¬ 
cers  and  IT  managers  at  the 
IRS  didn't  do  enough  to  en¬ 
sure  that  the  contractors  ad¬ 
hered  to  the  agency’s  security 
procedures. 

For  example,  the  auditors 
found  that  contractors  from 
one  firm  were  given  obsolete 
PCs  that  couldn't  support  the 
IRS’s  sccuri^'  settings.  The 
contractors  were  also  able  to 
add  unauthorized  software  to 
the  computers,  according  to 
the  report,  which  was  issued 
internally  on  March  22  but  has 
yet  to  be  publicly  released. 

Correciian 
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Cwnpuierworld  obuined  a 
copy  of  the  report  last  week 
from  the  Washington-based 
National  Treasury  Employees’ 
Union,  which  was  given  an 
edited  version  after  filing  a 
Freedom  of  Information  Act 
request  Before  releasing  the 
report  to  the  group,  which  op¬ 
poses  the  shift  of  federal  ioik 
to  private  contraaors,  Trea¬ 
sury  officials  removed  the 
names  of  contractors  and  oth¬ 
er  sensitive  data. 

The  auditors,  who  conduct¬ 
ed  their  review  from  March  to 
September  of  last  year,  recom¬ 
mended  that  the  IRS  limit  the 


computer  access  privileges  of 
contractors  to  only  what  they 
need  to  do  their  jobs.  In  addi¬ 
tion.  they  said  IRS  officials 
should  monitor  the  activities 
of  contractors  via  system  au¬ 
dits  and  ensure  that  contract¬ 
ing  officers  and  security  ad¬ 
ministrators  carry  out  their 
oversight  responsibilities. 

IRS  officials  didn’t  return 
phone  calls  seeking  comment 
by  Computerwori<f&  publica¬ 
tion  deadline.  In  a  written  re¬ 
sponse  that  was  included  in 
the  report,  the  IRS  disagreed 
with  the  findings  and  said  it 
hadn't  received  enough  evi¬ 
dence  to  support  the  auditors' 
conclusion  that  contractors 
put  its  systems  at  risk. 

But  IRS  officials  said  they 


"A  contractor's 
employees  committed 
numerous  security  vio¬ 
lations  that  placed  IRS 
equipment  and  tax¬ 
payer  data  at  fisk.  In 
some  cases,  conlr.ac- 
tofsblatantlycifcum- 
venledlRS  policies 
and  procedures  even 
when  security  person¬ 
nel  identified  inappro¬ 
priate  practices," 


agreed  with  the  report’s  rec¬ 
ommendations  and  promised 
that  they  would  take  “correc¬ 
tive  actions"  to  limit  contrac¬ 
tors'  system  access  privileges 
and  track  their  activities. 

The  report  about  the  use  of 


SCO  Loses  a  Round  in  Court 


lud^*  dismisses  most  of  vendor’s  claims 
against  DaimlerChry  sler  in  Linax  case 


A  Michigan  judge  last  week 
threw  out  most  of  the  claims 
made  by  The  SCO  Group  Inc. 
in  a  Linux-related  lawsuit 
that  it  filed  against  Daixnler- 
Chrysler  AG  in  March. 

A  spokesman  for  the  Circuit 
Court  for  the  County  of  Oak¬ 
land.  Mich.,  said  judge  Rae 
Lee  Chabot  granted  Daimler- 
Chrysler’s  motion  for  a  sum¬ 
mary  judgment  dismissing  the 
suit,  except  for  a  charge  that 
the  automaker  didn't  respond 
quickly  enough  to  a  request 
from  SCO  for  certification 
that  it  was  complying  with  a 
Unix  license  agreement. 

DatmlerChrysler  argued  in 
coun  that  it  filed  the  neces¬ 
sary  certification  in  April  even 
thou^  company  officials 
didn't  think  it  was  required  to 
do  so.  since  it  hadn't  used  the 
software  covered  by  the  Unix 
license  with  SCO  for  more 
than  seven  years,  '^e’rc 


pleased  with  the  judge's  rul¬ 
ing.  and  we  look  forward  to  fi¬ 
nally  resolving  the  one  open 
issue,"  said  DaimlerChrysler 
spokeswoman  Mary  Gauthier. 

SCO  spokesman  Blake 
Stowell  said  the  Lindon.  Utah- 
based  vendor  is  reviewing  its 
legal  options  based  on  the 
judge’s  decision.  He  added  that 
the  lawsuit  could  have  been 
avoided  if  DaimlerChrysler 
had  responded  to  SCO's  re¬ 
quest  for  a  compliance  ccnlfi- 
cation  within  the  allotted  30 

provided  any 
evidence  out  there 
to  convince  IT  man¬ 
agers  that  Linux  vio¬ 
lates  its  intellectual 
property  rights. 

OiON  CORNETT.  ANALTST.  DECATUR 
JONES  EQUITY  PARTNERS  UC 


days,  "It’s  a  little  unfortunate 
that  it  took  a  lawsuit  for  them 
to  respond  to  what  was  a  real 
simple  letter  asking  them  to 
certify."  he  said. 

DaimlerChrysler  is  one  of 
two  Linux  users  that  SCO  has 
sued  as  part  of  its  legal  cam¬ 
paign  against  backers  of  the 
open-source  operating  system. 
The  other  user  is  automotive 
pans  retailer  AutoZone  Inc., 
which  is  accused  of  running 
versions  of  Linux  that  contain 
Unix  code  copyrighted  by- 
SCO  [QuickLink  452491. 

Jeffrey  Norman,  a  sofrware 
lawyer  at  Kirkland  &  Ellis  LLP 
in  Chicago,  said  the  ruling  in 
the  DaimlerChrysler  case  has 
essentially  squashed  SCO’s  ef¬ 
forts  to  convince  Linux  users 
that  they  could  face  legal  con¬ 
sequences  if  they  ignore  its  re¬ 
quests  for  compliance  certifi¬ 
cations.  "I  think  that  strategy 
has  failed,"  Norman  said. 

The  judge  just  son  of  saw 
through  whai  SCO  was  doing, 
particularly  Us  public  com¬ 
ments  around  copyright  viola¬ 
tions.”  said  Dion  Cornett,  an 
analyst  at  Chicago-based  De¬ 


handheld  devices  was  posted 
on  the  Treasury  Department's 
Web  site  July  16.  In  that  report, 
the  auditors  said  the  IRS  has 
bought  about  425  handhelds 
that  support  data  encryption 
and  are  certified  as  secure.  Bui 
they  added  that  more  than 
2,000  uncertified  handhelds 
purchased  by  business  units 
without  the  IT  department’s 
approval  pose  “significant" 
security  risks,  including  unen¬ 
crypted  data  and  the  creation 
of  networit  back  doors  that 
could  be  used  to  bypass  secu¬ 
rity  controls. 

In  response,  IRS  officials 
said  they  will  take  action  to 
ensure  that  handhelds  con¬ 
nected  to  the  agency’s  net¬ 
work  comply  with  security 
controls.  They  added  that  they 
also  will  install  security  soft¬ 
ware  with  password  and  en¬ 
cryption  capabilities  and  es¬ 
tablish  a  process  for  removing 
or  replacing  all  uncertified  de¬ 
vices.  048391 


catur  Jones  Equity  Partner; 
LLC.  “SCO  hasn't  provided 
any  evidence  out  there  to  con¬ 
vince  IT  managers  that  Linux 
violates  its  intellectual  proper¬ 
ty  rights.” 

DaimlerChrysler  didn't  re¬ 
spond  to  SCO's  certification 
request  until  after  the  vendor 
had  filed  its  lawsuit.  But  in 
court  fiUi^  submitted  in 
April,  DaimlerChrysler  argued 
that  it  had  “provided  SCO 
with  the  only  certification  re¬ 
quired  under  the  license”  be¬ 
tween  the  two  companies. 

The  filings  referred  to  two 
letters  dated  April  6  that  were 
sent  to  SCO.  One  of  the  letters 
said  (hat  DaimlerChrysler  wa.<t 
no  longer  using  the  suftwarc. 
which  originally  was  licensed 
under  a  1990  agreement  be¬ 
tween  Chrysler  Motors  Corp. 
and  Unix  System  Laboratories 
Inc.  In  the  other  letter,  Oaim- 
lerChryslcrCIO  Susan  Unger 
said  that  SCO  had  no  right  to 
seek  such  a  certification  in  the 
first  place.  O  48371 

KADIMIEMUNE 

Fof  tiA  ctHwage  ol  SCO's  legal  fighi 
againsi  Unix,  go  lo  as  Wfeb  srte 
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Frotiles  in  Business  Mobility  Versatility 


Why  carry  two  devices  when  you  can 
carry  just  one? 


T^Noldo  6820  Messaging  Device 


jj|L  If  your  employees  are  often  out  of  the  offi^^^'ng  customers,  yet 
they  always  need  to  stay  connected,  the  Nokia  6820  Messaging 
Device  is  the  right  call.  A  full  messaging  keypad  makes  email  fast 
and  easy.  A  color  screen  enhances  readability.  And  because  Nokia  business 
mobility  offerings  go  beyond  phones  to  enable  sophisticated  back-end 
secure  mobile  connectivity,  you  can  give  your  workforce 

NoUaseojtiryapplionce 

the  advantage  of  mobile  access  to  critical  data  such  as  sales  numbers, 
inventory  levels,  financials,  and  more.  When  you  think  about  it  with  the 
Nokia  6820  Messaging  Device  and  business  mobility  solutions,  who 
needs  an  office?  Email,  voice,  data— everi  calendar  and  contacts— 
are  always  right  where  your  people  need  them:  at  their  fingertips. 


Learn  how  to  mobilize  your  team  and 
increase  business  productivity.  Download 
“The  Anytime,  Anyplace  World"  white  paper. 
nokiaforbusiness.com 


NOKIA 

Connecting  People 
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BRIEFS 


Sun  Benefits  From 
Microsoft  Deaf . . . 

Sun  Wcrosystans  bic.  npoftMl  a 
praimlnanf  feurtlHiuwlar  profit 
of  STfiS  mifen,  tIiMks  to  (ts  ioeaJ 
MtllinMnt  wMh  Mcrowft  Cool  in 
A|intQuii*Unii459SnSun 
rocordod  a  $L6  UNon  BMn  from 
tha  aoMamant  In  tha  quarter, 
artikfi  andad  Juna  90.  Aavanua 
talalad  S3.ff  bMen.  up  4fib  yaar 
owar  yaar.  Sun  said  tha  reaute 
aran*l  final  baeauaa  if  a  tmWng 
for  tfM  U.S.  SacurWaa  and  Ei- 
ehangaCowmiaaton  to  confirm  its 
aceounUng  of  fha  aatfiamani 


...And^lBM. 
Intel  Chips  for  OS 

During  a  totoconfaranca  abort 
fiia  financial  raauHa,  JonatliM 
ScfnaartE.  Sun’a  praridan<  and 
ddof  aparating  efficar.  aaU  tha 
company  is  looldng  at  portng 
SoMa  to  syalama  bull  areund 
Wfa  ItonMf  ndcroproriQaaom 
and  tow  Corp.‘a  itonium  cMpa. 
Iba  goal  anndd  ba  to  drtoa  mora 
aNpmanlsoflhaoponlingsyt- 
tom,baaaid.Sun«auldn*leom* 
mart  torthar  abort  iia  porta. 


Del  Gels  Modified 
Notebook  Adapters 

MoMIto  Etoetranica  toe.  to  ScoQs* 
dato.  aaU  ft  haa  raaumad 
atopmorta  al  notebook  PC  powar 
adaptoritoDriitae.aflareomptol- 
tog  a  rauamp  that  tatocfci  ttw  uoo  of 
Wrd-party  ponmr  conk.  Oal  tote 
monto  raealod  abort  38,000 
adaptora  aoU  wito  fia  LaHudo  and 
Impiran  ayrtame  aaytog  tort 
toirdpartycordieertdcauBoatec- 
trteaJ  ahochs  (QidddJnk  479621. 


Short  Takes 


WCfKISOFT  Iia  lay  S20  miHoii 
to  aotfia  a  tradomark  diipute  With 
San  Wogn  hand  Undowa  toe., 
atoteb  agnod  to  ehanga  Ml  ruuno 
to  Unapka  toe. . . .  ORACLE  CORP. 
aaM  R  wfl  faly  aupport  an  Aston 
voraton  of  Una  JeMiy  davrtopad 
by  a  CMnaoa  vendor  and  a  i^an- 
aao  cortpany  ttirt'a  mtoorfiy- 
ownad  by  Onrtia. 


Continued  from  page  I 

HP  Events 


The  company  will  announce 
its  plans  for  the  unnamed 
technical  solutions  conference 
ai  next  month's  HP  World 
in  Chicago,  said  David  Par¬ 
sons.  vice  president  of  HP 
Americas. 

Parsons  said  the  four  user 
groups  will  likely  co-produce 
the  new  conference  and  work 
with  HP  officials  on  a  steering 
committee  that  will  choose 
conference  content  and  ven¬ 
dors  that  rent  booth  space  at 
the  show. 

But  exactly  how  much  pow¬ 
er  the  user  groups  will  have  in 
controlling  the  content  and 
how  much  money  they  will 
make  from  the  conference  are 
questions  that  haven't  been  an¬ 
swered.  Parsons  said  each  user 
group  would  be  able  to  regis¬ 
ter  members  and  earn  mem¬ 
bership  fees,  as  well  as  cam 
proceeds  from  booth  sponsor¬ 
ships  from  other  vendors. 

Potential  Benefits 

The  idea  of  a  single  confer¬ 
ence  is  a  response  to  requests 
by  HP  customers  for  compre¬ 
hensive  information  about 
hardware  and  software  tech¬ 
nologies.  Parsons  said. 

One  purpose  of  the  confer¬ 
ence  would  be  to  train  HP  em¬ 
ployees  alongside  panners 
and  customers  in  new  tech¬ 
nologies.  be  said.  The  com¬ 
pany  would  also  be  able  to 
“briiig  the  full  brunt  of  HP  re¬ 
sources"  to  the  new  event,  in¬ 
cluding  appearances  by  top 
executives  to  describe  HP 
strategy,  direction  and  focus, 
he  added. 

Parsons  said  HP  has  sent 
letters  to  or  held  discussions 
with  leaders  of  all  four  user 
groups.  He  said  be  expects  to 
get  feedback  from  the  groups 
by  the  end  of  this  month. 

HP  recognizes  the  need  to 
support  the  user  community's 
independence  and  ability  to 
offer  qtulity  input.  Parsons 
said,  niic  last  thing  we  want 
is  user  groups  that  have  lost 
that  ability  to  communicate." 
he  said. 

Parsons  said  some  of  the 
user  groups  might  opt  to  keep 


their  own  conferences  alive, 
and  he  didn't  rule  out  some 
le\'cl  of  support  for  those 
efforts. 

But  on  the  marter  of  whether 
the  single-conference  plan 
might  result  in  fewer  user 
groups.  Parsons  indicated  that 
it  could  eventually.  “In  the 
context  of  the  bigger  picture, 
at  some  point  one  luser 
group!  is  always  better  than 
four  or  two,”  be  said. 

Chicago-based  ITUG.  which 
is  also  known  as  the  Inter¬ 
national  HP  NonStop  Users 
Group,  plans  to  continue  its 
annual  conference  despite  the 
HP  plan. 

Users  “would  much  rather 
go  to  the  boutique,  focused 
show  than  be  lost  in  the  crowd 
at  one  of  these  general  Comdex- 
likc  shows,"  said  ITUG  Chair¬ 
man  Richard  Buckle,  who  is 
also  a  consultant  at  Insession 
Technologies  Inc.  in  Boulder. 
Colo. 

If  HP  pulled  its  support  for 
the  annual  ITUG  Summit, 
which  this  year  is  being  held 
in  October  in  San  Jose,  “it 
would  be  a  imancial  bit  but 
wouldn't  spell  the  end,"  Buck¬ 
le  said 

Open  View  Forum  Interna¬ 
tional  is  still  deciding  how  to 
respond  to  HP's  proposal  and 
wants  more  inibrmaiion  on 
furtding  and  how  the  voices  of 


Hlfyousurren- 
(toyourpr^ 
mier  event,  what  is 
your  purpose  in  life 
It? 

DENYS  BEAUCHEMIN  PftESlOENT 
IN1ERCX  USER  GROUP 

it.s  members  would  be  heard, 
said  Henry  Wojcik,  president 
of  the  8,000-member  group. 
Wojcik  expressed  reservations 
about  the  effect  of  HP's  plan, 
noting  that  a  single  conference 
might  be  of  greater  value  to 
hardware-  and  cq>erating-sys- 
cem-cemric  user  groups  than 
it  would  be  to  Open  View  soft¬ 
ware  users. 

Chicago-based  Open  View 
Forum  remains  independent 
of  HP  but  works  with  the  ven¬ 
dor  to  produce  the  Software 
Forum,  which  was  held  last 
month  in  Montreal.  It  operates 
on  an  annual  budget  of  about 
SI  million,  nearly  all  of  which 
is  raised  at  the  annual  event. 
Wojcik  said 

Mixed  Resfxxisss 

"I  don't  think  HP  waius  to  htm 
us  with  this  proposal,  and 
that's  why  they  are  contacting 
us."  added  Sandra  Potter,  exec¬ 
utive  director  of  Open^ew 
Forum. 


“Our  event  is  much  m«)rc  of 
a  people- networking  event 
than  HP  World,”  she  said.  “We 
are  worried  about  the  dilution 
of  that  people-networking 
role,  and  wc  have  to  consider 
the  fmancial  impact." 

But  the  idea  of  having  a  tech¬ 
nical  solutions  conference  was 
welcomed  by  members  of  En¬ 
compass.  said  Kristi  Browder, 
president  of  the  organization 
that  has  its  roots  in  the  Digital 
Equipment  Corp.  user  group. 

“We  don't  feel  like  we’re 
going  to  be  shortchanged  in 
it  at  all,"  she  said.  “It’s  our 
responsibility  to  help  them 
as  much  as  it  is  for  them  to 
help  us."  HP  will  develop  a 
revenue-sharing  plan  that 
meets  Encompass'  needs, 
Browder  predicted. 

However  users  view  it,  HP’s 
proposal  probably  isn't  intend¬ 
ed  to  marginalize  user  groups, 
said  one  analyst 

“It  would  be  a  tough  transi¬ 
tion  to  ofve  conference,  but  1 
see  lots  of  reasons  to  do  it." 
said  Mary  Johnston  Turner,  an 
analyst  at  Sununti  Strategies 
Inc.  in  Winchester.  Mass. 

With  a  bigger  conference  that 
covers  a  range  of  tt^ics.  she 
said.  HP  might  be  able  to  lure 
higher-level  executives,  in¬ 
cluding  QOs.  and  help  cut 
doum  on  the  need  for  users  to 
travel  €1 48350 


Content  World  Show  Bites  the  Oust 


FYomotefs  of  the  4-vear'iiU 
Content  WbrU  bade  fliww  said 
last  week  toat  the  evert  is  being 
canceled  Ihls  yav  due  to  "de¬ 
creased  exhtofior  and  sponsor 
interest" 

The  cancelation  comes  less 
than  a  month  after  the  grand- 
daddy  of  al  IT  trade  shows, 
Com^  was  canoeted  be¬ 
cause  of  ehat  Mos  deserted 
as  a  lack  of  industry  support 
ontheaxhWftoofJftiicilink 
47727]. 

John  P.Nooa  manager  of 
Contort  World  LLC.  the  Svato- 
ga.  Caft-based  company  that 
heU  toe  show,  said  tfto  year’s 
event  is  being  shut  down  after 
twoslraigMyeartof‘seriousde- 
dtoee  in  sales  and  profits."  A  k^ 


:  probtam.  he  said,  was  trying  to 
garner  interest  from  vendors  to 
sponsor  toe  even 
Noon  said  toe  test  show  to 
May  2000  had  a  "nsspectahie 
shemina*  and  attenttance 
tnpledto200lBtitaftBrtoetBr- 
mitetatlteda  of  Sept  n.  2001. 
there  VOS  a  huge  drop  to  ui. 
travel  and  a  decine  to  toe  num¬ 
ber  of  people  wMng  to  pay  to  at¬ 
tend  trade  conferences.  Noon 
stedAndwtlhasouringtochnot- 
ogy  econotny  and  cuts  to  IT  and 
tiaintog  budgets.  It  was  No  a 
perfect  storm"  tort  halted  toe 
show’s  progres.  he  said 
There  were  about  1,200  at¬ 
tendees  at  Content  World  to 
2001.  That  number  dropped  to 
rtioul  800  attendees  to  each  of 


:  toe  2002  and  2003  everts, 
i  bested 

Anotoer  probfem.  Noon  said 
:  Is  that  whielha  content  man- 

-  agemart  segment  of  the  ndus- 
tiyramtened  fterfyhaaltoy 

;  through  2002.  toe  "market  has 
:  not  realy  found  llseiL' User 
compenias  haven't  yet  creeled 
•  enough  demand  acroes  tel  seg¬ 
ments,  leaving  vendors  wlhoul 
enough  money  to  sponsor  and 
eihUattoeahow.hesaid. 

AI  hopes  for  rewvino  the 
evert  arenl  dead.  Noon  said 
But  he  sll  pfera  to  sel  some  of 
toe  company  aasals.  todudtog 
.  seveiteWib  site  addresses  such 
as  Contantmanaoementcom 

-  andCortentnet 

-  T(MR.  Wsss 


www.comcuitefworld.com 
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Los  ./Uamos  Confirms 
E-mail  Security  Holes 


Latest  problem  at  nuclear  lab;  Woriccrs 
sent  classified  messages  insecureh' 


BY  Tooo  B.  WEISS  coultUi’t  Comment  on  the 

SECURITY  TROUBLES  at  number  of  ciasufied  e-mails 
Los  Alamos  National  that  were  sent  over  the  unclas- 
Laboratory  continued  sified  e-mail  system  but  that  it 

last  week  as  ofncials  was  “a  very  srnall  number." 
confirmed  that  workers  re-  “We'd  like  to  get  that  to 

cently  sent  out  an  undisclosed  zero,"  he  saicL  “But  you’ve  got 
number  of  classified  e-mails  to  understand,  you  can’t  legis- 

over  a  nonsecure  system.  late  perfection  on  people.  AU 

The  disclosure  came  less  you  can  do  is  tell  them  in  se- 
than  two  weeks  after  the  New  curity  briefings  and  reiterate 
Mexico-based  lab  announced  it  evety  time  you  talk  about 
that  two  removable  computer  security” 
disks  containing  classified  nu-  Earlier  this  month,  the  Ub 
clear  we^>ons  data  were  miss-  suspended  most  activities 
mg  [QuickLink  48226].  That  while  continuing  the  investi- 
incident  marked  at  least  the  gation  into  the  missing  disks, 

third  time  since  2000  that  Security  experts  and  ana- 

storage  media  containing  das-  _ 

sified  infonnatioa  has  been 

*  lost  at  the  facility.  Continued  from  page  1 

Los  Alamos  spokesman  j|  •  ■ 

Kevin  Roark  last  week  con-  AriTiy  III  lloCl 

firmed  that  the  lab  recently  - : - 

discovered  new  incidents  of  itaiy  think  unk  that's  spon- 
classified  information  being  sored  by  the  U3.  Department 
sent  through  a  nonclassified  of  Defense  and  based  at  R>rt 

e-mail  system.  "We  have  had  Leavenworth.  Kan. 
occurrences  recently,  yes."  he  After  studying  the  Iraq  war 
said.  “We  have  had  ^m  in  the  up  to  the  fall  of  Baghdad,  the 


Continued  from  page  1 

Army  in  Iraq 

itaiy  think  tank  that's  spon¬ 
sor^  by  the  U3.  Department 
of  Defense  and  based  at  Fort 
Leavenworth.  Kan. 

After  studying  the  Iraq  war 


past  It’s  anticipated  we  will 
have  them  in  the  future." 


Questionabie  Judgment  “barely  above  subsistence  1 
Roark  said  the  incidents  oc-  eL"  in  Urge  part  because  of 
curred  sriien  scientists  at  the  problems  with  software  bai 
lab,  wdiich  employs  about  on  radio  ftequeiKy  idendfii 

12.000  people,  incorrectly  tion  technology  (RFID)  am 
judged  information  as  being  networic  communications, 
classified  versus  unclassified  The  logistics  problems  w 
and  sent  it  without  asking  for  among  the  findings  detailec 
assistance  in  categorizing  the  a  S42-page  book  that  resulu 
content  of  their  e-mails.  Such  from  the  review  of  the  war. 

incidents  are  always  promptly  w4iich  was  commissioned  by 
reported  to  the  U.S.  Depart-  the  Army’s  chief  of  staff.  The 
ment  of  Energy  and  other  agen-  book,  titled  On  Ifoirtf,  was  pub- 
cies,  as  required  by  law,  be  said.  Ushed  by  the  Army  in  Ute 
When  sudi  incidents  recur.  May.  It  is  posted  on  CALL’S 
employees  are  given  addition-  Web  site  but  can’t  be  printe 
al  training  to  remind  them  of  downloaded  or  copied 
the  proper  procedures.  Roark  There  is  no  one  answer  to 


CALL  analysts  found  that  the  * 
performance  of  logistics  and 
supply  chain  operations  were  .  * 

“barely  above  subsistence  lev- 
eL"  in  Urge  part  because  of 
problems  with  software  based 

on  radio  frequency  idendflca-  my  assessment,  the  biggest : 
tion  technology  (RFID)  and  gle  problem  was  the  commu 
networic  communications.  cations  issue." 

The  logistics  problems  were  The  supply  chain  system 
among  the  findings  detailed  in  worked  as  expected  until 
a  S42-page  book  that  resulted  combat  began  in  Iraq,  after 


my  assessment,  the  biggest  sin¬ 
gle  problem  was  the  communi¬ 
cations  issue." 

The  supply  chain  systems 


Web  site  but  can’t  be  printed, 
downloaded  or  copied 
There  is  no  one  answer  to 


said.  The  problem  is  that  there  why  die  logistics  feilures  oc- 
are  “vagaries  in  the  cUssifIca-  cuned  said  Gregory  Fontenot, 


tion  rules”  that  can  make  it 
difficult  to  determine  what's 
classified  Roark  said  that  he 


a  retired  Army  colonel  who 


which  the  Army's  network 
was  quickly  stretched  too  thin, 
according  to  Fontenot.  “In  a 
civilian  organizatioo.  you  es¬ 
tablish  connectivity  b^ore 
you  move."  he  said  "Wc  didn’t 
have  that  luxury." 

The  Army  did  stress-testing 
on  its  banlefield  systems  be¬ 
fore  the  war,  but  Ifontenot  said 
nothing  could  have  fully  pre¬ 
pared  them  to  deal  with  fest- 


lysts  expressed  varied  opin¬ 
ions  on  the  recent  security  in¬ 
cidents  at  Los  Alamos. 

Scott  Larson,  a  managing  di¬ 
rector  at  Stroz  Friedbcrg  LLC, 
a  New  Yoric-based  consultancy 
that  specializes  in  computer 
forensics,  acknowledged  that 
accidental  releases  of  sensitive 
information  using  nonsecure 
e-mail  systems  are  unavoid¬ 
able.  But  be  was  critical  of  the 
lab’s  position  that  such  inci¬ 
dents  are  mostly  attributable 
to  human  judgment. 

“The . . .  throwing-your- 
hands-up  approach  is  unac- 
cepublc  for  this  kind  of  infor¬ 
mation."  Larson  said.  Classi¬ 
fied  and  nonclassified  e-mail 
systems  must  be  completely 
separate,  and  the  pet^le  wte 


use  them  must  be  trained  to 
know  the  difference,  he  said. 

Nathaniel  Palmer,  a  security 
analyst  at  Delphi  Group  in 
Boston,  called  the  security 
lapses  “scary.”  Palmer  said 
he’s  amazed  that  a  nonsecure 
e-mail  system  is  even  used  in 
the  lab.  when  instead  one  sys¬ 
tem  could  be  used  by  every¬ 
one  and  all  correspondence 
could  be  bener  monitored. 


was  one  of  the  three  co-authors  moving  combat  operations  in- 
I  of  the  book.  But  he  added,  “in  I  vohong  150.000  troops  and 


I  several  million  supply  items. 

The  Army  is  alr^y  work¬ 
ing  to  replace  its  13  core  logis¬ 
tics  systems,  which  include 
several  thousand  applications, 
with  a  version  of  SAP  AG’s 
software  tailored  for  defense 
operations.  Lt.  CoL  Forrest 
Burke,  a  logtstks  network  task 
force  leader  in  the  Army  ’s  G-4 
logistics  inibnnation  branch, 
said  the  custom  systems  now 
in  use  date  to  the  )960s  and 
1970s  and  weren’t  written  to 
be  network-friendly. 

Source  of  FnBtratkm 

If  SAP’s  iqiplicatioos  had  been 
in  place  {^ior  to  the  start  of 
the  war  in  Iraq,  the  Army  sim¬ 
ply  could  have  installed  an  ^ 
RFID  module  and  “we’d  be  in  ^ 
business,*  Burke  said  But  he 
added  that  the  cwnmunica- 
tions  inftastnicture  in  Iraq 
was  poor  when  the  war  began. 
“Probably  our  greatest  frustra¬ 
tion  was  the  inability  to  con¬ 
nect  all  these  legacy  comput¬ 
ers  to  the  network."  he  said 
In  addition,  the  Army  was 
unable  to  start  deployi^  ' 
transmitting  devices  with 
satellite  dishes  and  readers 
that  can  pull  information  ftom  | 
RFID  tags  attached  to  supplies 


Other  analysts  were  more 
forgiving. 

Pete  Undstrom.  an  analyst 
at  Spire  Security  LLC  in  Mal¬ 
vern.  Pa.,  said  it’s  possible  that 
the  Los  Alamos  fecility  experi¬ 
ences  DO  more  security  lapses 
than  other  clasrified  govern¬ 
ment  facilities  but  that  offi¬ 
cials  there  are  more  willing 
to  discuss  problems  pubUdy. 
048364 


until  just  before  the  US. 
launched  hs  attack  As  a  re¬ 
sult,  the  ability  of  logistics 
managers  to  track  supplies 
plummeted  after  the  goods 
reached  Iraq.  Burke  said 
Supply  chain  visibility  has 
improved  since  then,  accord¬ 
ing  to  Burke.  He  said  that 
about  100  transminers  are 
now  in  place  as  part  of  RFID 
systems  supplied  by  Savi 
Technology  Inc  In  Sunnyvale, 
(^f.  In  addition.  IP-has^ 
satellite  long-haul  connectioos 
have  been  installed  at  all  of 
the  Army’s  supply  warehouses 
in  Iraq,  and  most  of  the  RFID 
dau  traffic  related  to  logistics 
is  being  moved  to  secure  wire¬ 
less  LANs  that  are  connected 
to  the  satellite  Itnks- 
Anotiier  problem  was  that 
the  logistics  systems  weren't 
flexible  enough  to  deal  with 
exceptions  and  glitches.  Burke 
said  For  example,  if  a  combat 
unit  unexpectedly  changed  its 
location,  there  was  no  way  to 
reroute  its  supplies.  The  Ann>- 
is  discussing  a  possible  resolu¬ 
tion  of  that  problem  that 
would  involW  the  installation 
of  a  customized  verstoo  of 
SAP’s  CRM  applications,  said 
Burke.  048348 


MARYFRAN  JOHNSON 


Educate  ^ur  CXOs 


I  WAS  CHATTING  UP  the  CIO  of  a  large  man¬ 
ufacturing  company  recently,  and  we  got  on 
the  subject  of  who  really  runs  his  IT  organi¬ 
zation.  He  singled  out  two  key  IT  executives, 
one  in  charge  of  the  infrastructure  side  —  all 
the  hardware,  networking  and  moving  parts  —  and 
one  in  charge  of  the  software  side,  where  the  data 

pracrical  tips  on  how 
CIOs  can  pull  it  off.  I 


managenicnt.  enterprise 
applications  and  business 
logic  live. 

Yet  the  goals  for  his 
dual  managers  were 
worlds  apart  The  infra- 
struemre  expert  was 
charged  with  finding 
ways  to  tamp  down  costs 
and  do  everything  “better, 
cheaper  and  faster."  as  the 
CIO  put  it.  His  software 
manager,  on  the  other 
hand,  was  encouraged  to 
experiment  with  new  applications 
and.  ultimately,  to  spend  some  of 
those  savings  from  the  hardware  side 
on  new  stuff  that  could  advance  the 
business. 

So.  with  the  major  bases  covered, 
what  exactly  was  left  for  this  CIO  to 
do?  (I  just  had  to  ask.)  "Ah.”  he  said, 
with  a  big  grin  and  no  offense  taken. 
"Fm  in  executive  sales." 

V^liat  he  meant,  of  course,  was 
that  his  time  is  spent  in  the  role  that 
all  successful  CIOs  master  —  that  of 
business  communicator,  educator 
and  guide  for  the  so-called  CXOs 
(that  senior  business  lineup  of  CEOs. 
CFO,  COOs,  CMOs  and  so  forth).  If 
the  chief  technologist  isn’t  regularly 
playing  Pygmalion  with  this  bunch, 
the  IT  group  is  destined  for  a  leader¬ 
ship  ch^ge. 

I  realize  that  by  this  point  in  your 
career,  you’ve  heard  and  read  —  ad 
nauseum,  even  —  plenty  of  well- 
tneanif^  advice  abKHJt  the  impor¬ 
tance  of  educating  business  col* 
le^ues  and  speaking  their  language 
when  you  do  it  But  what  I  look  for 
when  this  subject  comes  up  are  de*  i 
tailed  examples,  actual  tactics  and  I 


found  plenty  of  that  kind 
of  useful  advice  in  our 
“Educating  Your  CXOs" 
story  (on  page  31,  and 
online  at  (^ickLink 
47887)  —  including  a 
exo  "syllabus"  from  a 
business  professor  with 
a  sense  of  humor. 

"They  really  do  need 
to  have  a  clue."  says 
Mark  Jeffery,  a  professor 
at  the  Kellogg  School  of  Manage* 
ment  at  Northwestern  University,  re¬ 
ferring  to  the  future  MBAs  in  his 
classes.  His  students  hear  about  the 
real-world  complications  of  ERP  sys¬ 
tems.  the  dangers  of  botchij^  a  secu¬ 
rity  backup  system,  how  tech  trends 
in  XML  or  CRM  can  affect  manage¬ 
ment  thinking,  and  the  risks  involved 


in  an  IT  project  (failure  being  the 
biggest  one). 

Our  story  also  digs  into  a  few  real- 
world  scenarios  where  CIOs  are 
turning  CXOs  into  knowledgeable 
allies. 

"As  a  CIO.  I  always  have  an  agenda. 
You’re  crazy  if  you  don’t."  says  Rob 
Tabb  of  Ecolab.  a  S3  billion-plus  de¬ 
veloper  of  cleaning  and  repair  prod¬ 
ucts.  He  describes  using  both  formal 
and  informal  approaches  to  this  fine 
art  of  educating  CXOs,  including 
one-on-one  chats  during  coffee 
breaks  and  business  lunches  in  addi¬ 
tion  to  the  more  standard  manage¬ 
ment  council  meetings.  "You  have  to 
think  of  it  as  a  campaign,"  Tabb  told 
us.  Tou  have  an  end  state  you’re  try¬ 
ing  to  get  to.  and  you  think.  ‘How  am 
I  going  to  educate  this  group  of  exec¬ 
utives  to  get  them  to  a  common  point 
of  understanding  over  time?' " 

That  "over  time”  part  is  a  particu¬ 
larly  important  point.  The  IT  educa¬ 
tion  of  your  business  colleagues  is  a 
journey  of  1,000  conversations,  not  a 
destination  arrived  at  after  one  big- 
bang  strategy  briefing.  Your  home¬ 
work  assignment  is  to  think  about 
where  you  are  today  on  that  journey. 
Are  you  ready  to  be  in  "executive 
sales"?  O  48322 


't5MT  OO  A  Ltfllg  pW?" 


VIRGINIA  ROBBINS 

The  Ragged 
Edge  of 
Outsourcing 

As  I  APPROACHED  my 
neighborhood  sushi 
restaurant,  the  friend  I 
was  meeting  for  dinner  called. 
He  wouldn’t  be  able  to  make 
it;  he  had  to  take  part  in  yet 
another  conference  call  with  India.  But 
he  promised  to  make  it  up  to  me  some¬ 
how  if  I  could  please,  please,  pick  up 
dinner  and  bring  it  to  his  place. 

He  Mfas  himgry  and  wired  when  I  ar¬ 
rived  at  his  door.  "American  firms  just 
don’t  understand  what  outsourcing 
does  to  a  company."  he  ranted  as  he 
tore  open  the  package  and  began  mix¬ 
ing  wasabi  into  his  soy  sauce.  His  day 
had  started  with  a  conference  call  with 
India  at  8  a.m.  and  had  finally  ended  at 
9:20  p.m.  with  the 
follow-up  conference 
call  that  had  scram¬ 
bled  our  dinner 
plans.  "It’s  not  that 
the  work  is  better  or 
worse;  it’s  the  time 
that  it  lakes  to  com¬ 
municate  with  a 
team  of  individuals 
half  a  world  away." 

For  various  rea¬ 
sons.  his  company 
has  faced  extreme  fi¬ 
nancial  difficulties 
during  the  past  few 
years.  Employees  in  all  areas,  including 
IT.  have  bwn  let  go  as  the  company 
has  struggled  to  match  costs  with  its 
shrunken  revenue.  Under  pressure 
from  the  CFO,  and  desiring  to  retain 
some  development,  a  new  CIO  recom¬ 
mended  outsourcing  overseas. 

(^  the  remaining  IT  manners,  a 
small  group  was  selected  to  manage 
the  outsourcing  project.  A  respected 
international  consulting  group  was 
chosen  to  assist.  Because  only  those 
who  had  the  strongest  track  records 
and  the  most  positive  attitudes  were 
selected,  my  friend  felt  honored  to  be 
on  the  team.  Nine  months  later . . . 

“Business  owners  still  aren’t  happy 
with  the  fact  that  application  design 
meetings  need  to  be  held  at  7  ajn,"  he 
said.  jaU)ing  his  chopsticks  into  the 
pickled  ginger.  “Projects  are  taking 
three  and  four  times  longer  because 
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overseas  workers  don't  understand  our 
business  the  same  way  my  old  employ¬ 
ees  did.  It's  not  that  one  group  of  de¬ 
velopers  is  smarter  than  the  othen  it's 
that  my  old  group  had  more  experi¬ 
ence  on  the  existing  applications  than 
the  new  one  does.  In  a  couple  more 
years,  it  will  probably  be  OK.  but  for 
now.  it's  a  disaster.” 

I  spent  my  undergraduate  years 
studyii^  economics  along  with  com¬ 
puter  science  and  mathematics,  and  1 
understand  the  benefits  that  global¬ 
ization  brings  roe.  I  like  my  set  of  $1 
made-in-China  porcelain  bowls,  and  I 
love  commuting  in  my  Volkswagen 
letta,  which  was  made  in  Mexico  from 
parts  manufactured  around  the  world. 
And  while  it's  probable  that  one  of  the 
sushi  chefs  who  prepared  our  dinners 
is  in  the  U.S.  on  a  temporary  visa,  it’s 
certain  that  about  a  fifth  of  my  staff 
was  bom  outside  the  U5. 

Yet.  as  an  economist.  I  couldn’t  help 
but  think  about  the  real  value  of  the 
decision  implemented  by  my  friend's 
CIO.  On  one  level,  it  appears  to  be  a 
very  good  choice.  Development  is  still 
going  on,  and  the  CFO  can  confirm 
that  less  cash  is  being  spent  than  be¬ 
fore.  However,  the  business  owners  arc 
very  unhapp>-.  With  productivity  three 
to  four  times  lower,  the  total  value 
added  by  IT  is  a  fraction  of  what  it 
used  to  be,  and  the  average  value  of  IT 
goods  and  services  produced  per  aver¬ 
age  dollar  spent  is  lower  than  before.  1 
wonder  which,  in  the  long  term,  will  be 
replaced  first,  the  CIO  or  the  outsourc¬ 
ing  solution.  O  482f7 


DAVID  MOSCHELLA 

Why  Comdex 
Doesn’t 
Matter 

Much  has  been 
written  about  the 
recent  postpone* 
ment  (and  possible  demise) 
of  Comdex,  A  few  years  ago. 
the  same  forces  that  built 

what  became  the  biggest  conf^ence  in 
any  industry  —  critical  mass,  celebrity 
glitz  and  momentum  —  all  shifted  into 
reverse,  with  predictable,  familiar  and 
cumulative  effects. 

But  to  me.  the  story  is  much  more 
interesting  than  the  implosion  of  a 
once  extravagant  industry  event.  In 


many  ways,  Comdex  is  em¬ 
blematic  of  some  important 
changes  in  our  industry, 
with  significant  implica¬ 
tions  for  the  way  the  IT 
business  sees  itself  and 
speaks  to  the  outside  world. 

Think  about  it:  What  was 
the  focal  point  of  Comdex? 

While  a  lot  of  business  was 
done  on  and  off  the  exhibit- 
hall  floors,  it  was  the  key¬ 
note  addresses  that  drew 
the  most  media  attention, 
with  people  such  as  Bill 
Gates.  L^ry  Ellison. 

Michael  Dell.  Scon  Me-  - 

Nealy  and  Cariy  Fiorina  usually  play¬ 
ing  the  industry  leadership  roles. 

No  offense  to  these  enormously  suc¬ 
cessful  executives,  but  who  is  really  lis¬ 
tening  to  them  anymore?  There  is  no 
better  example  of  this  than  Microsoft. 
There  was  a  time  when  the  introduc¬ 
tion  of  a  Windows  95  or  98  was  front¬ 
page  news,  not  fust  in  the  IT  pres.s,  but 
also  in  the  major  business  magazines 
and  even  in  local  newspapers. 

But  how  many  people  just  can't  get 


enough  information  about 
Longhorn  or  Tablet  PCs? 
Dino  for  the  latest  prod¬ 
ucts  from  Oracle.  Dell.  Sun 
and  Hewlen-Packard.  The 
reality  is  that  very  few 
products  are  especially 
ncwswonh>‘  these  days. 
This  Isn't  the  fault  of  the 
vendors:  it's  simply  the 
case  that  the  IT  industry’s 
center  of  gravity  has  shift¬ 
ed.  Only  in  the  consumer 
market  are  gai^ts  still  ex¬ 
citing,  and  the  Consumer 
Electronics  Slum'  is  the 
place  to  go  for  that  stuff. 

In  die  business  market,  it’s  what  you 
do  with  IT  that  matters.  This  is  a  sign 
of  industry  maturity,  and  it's  a  good 
thing.  Wc  can  look  back  and  see  our 
business's  traditional  focus  on  prod¬ 
ucts  as  an  cariy  phase  in  which  we  pri¬ 
marily  deployed  enabling  technology. 
We  diould  be  happy  to  have  outgrown 
that  phase,  even  though  many  of  us 
will  miss  the  glitz  of  the  annual  Com¬ 
dex  carnival  —  at  least  a  little  bit. 

Of  course,  once  you  start  talking 
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about  what  we’re  doing  with  IT.  things 
become  much  more  complicated,  frag¬ 
mented  and  diffuse.  IT  is  used  for  a  zil¬ 
lion  things  these  days,  and  there  are 
major  differences  by  sector.  That's  why 
1  don’t  think  the  IT  industry  will  see 
another  Comdex  for  the  foreseeable 
future.  Our  needs  are  better  served  by 
more  focused,  less  glamorous  events. 

But  that  doesn't  mean  the  IT  indus¬ 
try  doesn’t  need  a  new  generation  of 
spokespeopic.  TTie  product  compa¬ 
nies  have  carried  their  share  of  the 
burden  and  now  need  some  energetic 
reinforcements.  These  new  \*oiccs 
should  come  from  the  major  IT  ser¬ 
vices  companies  ( IBM.  Acceonirc, 

EDS,  CSC),  the  dot-com  giants  (Google. 
Amazon.com.  eBay,  Yahoo)  and  even 
from  cwitomers  themselves  (business¬ 
es,  governments,  schools).  The  result 
will  be  a  much  more  diverse,  com¬ 
pelling  and  represenutive  IT  industry. 

48240 


WANT  OUR  OmON? 
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Why  the  Offshore  Backlash  WiN  Dissipate 


OF  COURSE  the  oebBls  and  the 
backlash  about  otfshorrig  wi 
go  away  sometime  in  the  future 
CGartner;  Baetdash  Againsi  Off- 
shonngtoVanishby2006.*Qu(ck- 
Unk  47550].  Why?  Because  aN 
ttiose  aflecM  who  couldnl  find  a 
new  IT  )ob  wi  be  loo  busy  fltpomg 
burgers,  working  cash  regstere. 
sweeping  floors  or  beggmo  on 
street  comers  to  be  concerned 
about  «d)a(  <s  gong  on  in  Rie  IT 
field. 

ThomttZabal 

Software  engineer 
(unemployed). 

Da^js,  zabeU^aentorg 

AS  IF  I  WASrr  FEEUM  m- 
s«rHficanl  and  depressed 
enough  after  having  my  job  trans¬ 
ferred  lo  Irekanearfyayearago. 
Now  it's  otfioai  - 1  am  part  of 
*an  irsignificant  issue  (hat  witl 
go  away  * 

After  20  years  of  workmg  hard 
in  this  Hidu^.  I  now  cannot  find 
fuif'time  employment  in  my  chosen 
career.  Between  the  offshmng 
and  the  leftover  H-TBs  from  the 
Y2k  ’crisis*  still  here  undercut¬ 
ting  me  on  salary.  I  feel  fortunate 


when  I  can  fmd  a  contract  of  any 
duration 
Andrew  Union 
Darobose  odmintsiraror. 
Amsferdom.  N.Y. 

IFIMD  THE  ACCUSATTCN  by  Craig 
B^  of  Gartner  that  Amerkan  IT 
professMMiais  are  racist  aid  xeno¬ 
phobic  to  be  unfounded.  No  one  D 
this  industry  thaR  I  am  aware  of  en¬ 
joys  the  idea  thaHT  fobs  are  leawng 
our  country,  but  that  has  nothing 
to  do  wdh  racism  and  xenophotxa 
and  everythng  to  do  with  the  desire 
to  renain  gaintuly  employed  m  the 
fieU- 

Rebart  Manning 

Software  erigineer. 

Storuon.  Calif, 
StobertM782tg>aoLcom 


Me  on  the  fine  or  even  hs  fob  a! 
nsk  Make  no  tnstahe  :  What  (hey 
accomphshed  wes.  in  some  esses, 
remarkable  and  mowative.  But  It 
wss»1  heroic. 

Garafd  Ooaewehr 
WarrenvUle,  IQ. 


PMBpA.Kriay 

Systems  manager.  A&gfwny 
Ludban  CUrrp.,  Renfrew.  Pa. 


Leaders  Aren't  the 
Same  as  Heroes 

COMPVTEmNMLO’S  defmlion 
of  8  hero  6  far  apart  from  mine. 
I  found  no  heroes  among  the  2004 
CornputenwofkJ  Honors  fmahsts 
nr  Heroes  Think  Bia*  QuehUnk 
48504].  I  found  no  one  who  put  his 


No-Bud  Approach 
Gets  Thumbs  Up 

I  QUOTED  READIM  GopM  K.  Ka¬ 
pur's  colifnn  Tffl  OfC  the  BuN  Is 
OaatTIQuKkLmk  47139].  which 
(by  de^T)  foOowed  the  formal  of 
he  advice  n  that  he  started  wNh  a 
succinct  statement  of  the  message 
he  wanted  to  debvet.  proceeded  to 
flesh  it  out  and  ended  wRh  the  ex¬ 
planation,  wiech  was  dustrated  by 
a  bnRiant  example  .  I  have  to  won¬ 
der.  thou(^  What  happened  with 
Kapur's  son.  the  car  he  was  dnwng 
andthebul? 

SImMugirf 
TVbrcester.  Moss.. 
nmgiri(S>necscapejiet 

That  WAS  A  GREAT  Wteartide. 

I  eqieciaRy  fiked  Kapur's  wife's 
fine.  *1his  s  one  of  your  punch-fine 
thmgs.  enl  N?*  She's  pretty  good 
at  cuBfiig  to  the  chase  too! 


Booth  Cost  Is 
Comdex's  FVoblem 

The  ANSWER  k)if«  Comdex 
probfem  WK  n  the  story  fUser 
fivfflerencefkffts  Chances  of  Com- 
dex  RevMal.' OtickUrA  47782] 
When  icndors  don't  purchase  booth 
spaceandnsteadpretertodabus- 
ness  m  lhar  holef  rooms,  than  the 
booRicostisloofegh. 
OamiiRaiay 

F1irU.MidL. 

shonedri^stNgfohal.n«f 

COMPUTEfTWORLD  wWcotnes 
cammonis  from  Ns  readars.  latlers 
wi  be  edted  for  brevity  and  darRy. 
They  should  be  addressed  to  Jarrae 
Eckie.  tetters  edRor.  Computarwortd. 
PO  Box  917).  500  Old  Connecticut 
Path  Franwigham.  fifass.  0T701. 
Fac(S0e)B794B43 
E-mad  leftersdcotnpiaerwortd  com 
Include  an  address  vid  phone  iifT)- 
ber  lor  immediaie  venkahon 


^FarmoreWknonthaevi} 
atwrtapes  go  to 


Limited  Time  Offer 


Foundry  leads  the  way. 
!□  Giqabit  Ethernet. 


t,* 

FOUNDRY 

NETWORKS 
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Integration  Imperatives 

An  industry  group  is  pushing 
the  Global  Integration  Frame¬ 
work  to  stem  the  tide  oT  failed 
EAI  projects.  Page  25 


FUTURE  WATCH 

Producing  the  Future 

Some  of  the  most  important  things  in  IT  to¬ 
day.  such  as  Unix  and  the  Internet,  have  roots 
at  MIT.  More  innovations  are  likely  to  follow, 
says  MIT  CIO  Jerry  Grochow.  Page  28 


SECURITY  MANAGER’S  JOURNAL 

FTP  Server  Offers  Illicit  Goods 

A  random  check  of  a  public  FTP 
server  uncovers  an  illegal  distribu¬ 
tion  copy  of  Windows  at  Mathias 
Thurman’s  company.  Page  28 


While  thin-client  computing 
serverware  programs  such  as  Citrix’s 
MetaFrame  are  gaining  ground, 
for  most  companies  the  technology 
is  still  a  road  less  traveled. 

By  Robert  L  Mitchell 


CHARLES  REDDING  needed  a  way  of  MetaFrame  Presentation  Serv- 

better  way  to  deploy  a  suite  er.  thm-client  computing  software 
of  43  line-of-business  appli-  from  Citrix  Systems  Inc.  in  Fort  Laud- 
cations  to  his  rapidly  grow-  erdale,  Fla. 

it^  list  of  remote  offices.  Now  when  a  new  store  comes  on- 

Reddmg  is  CIO  at  Masco  Contractor  line,  Masco  can  immediately  provide 
Services,  a  Daytona  Beach,  Fla.-based  secure  access  in  an  encrypted  session 
division  of  Masco  Corp.  that  provides  for  any  client  with  a  Web  browser  and 
contractor  installation  services  to  busi-  a  network  or  Internet  connection.  “We 
nesses  and  consumers.  With  11.000  go  back  and  standardize  equipment, 
employees  in  260  field  locations  and  but  fix»m  Day  1  that’s  not  a  mandator.- 
acquisitions  that  have  kept  the  compa-  thing,”  Redding  says, 
ny  growing  at  a  25%  aiuiual  clip,  he  de-  Providuig  branch  office  access  to 
cided  to  centralize  and  provide  virtual-  key  line-of-business  applications  is 
ized  access  to  those  applications  by  Continued  on  page  22 


PUT  IT  IN  THE 
SERVER  ROOM. 

FEEL  IT  IN  THE 
BOARDROOM. 


Meet  the  IBM  eServer"  p5  system  -  the  game-changing  UNIX*  server  that  can  bring  instant  agility  to  your  business. 

With  advanced  IBM  Virtualization  Engine”  technology  options,  the  eServer  p5  system  is  the  only  UNIX  server  with  breakthrough 
Micro-Partitioning”  capabilities.  It  can  automatically  balance  resources  among  virtual  partitions  in  milliseconds.'  On  demand. 
It  configures  and  adapts  on  the  fly.'  Add  apps.  Add  users.  Add  capabilities.  At  any  time.  And  gain  business  agility  just  like  that. 
You  need  to  learn  more.  More  about  all  the  benefits  of  eServer  p5  systems  at  Ibm.com/eserver/boardroom 

_ 5  reasons  why  IBM  eServer  p5  systems  with  Power  Architecture  technology  rule  in  UNIX  computing.  \ 


Flexible,  fifth-generation 
POWER  processors. 


Capacity  on  Demand.^ 


Runs  IBM  AIX  5L 
and  Linux. 


Advanced  system 
utilization. 


Virtual  servers  as  small 
as  1^0  of  a  processor. ' 
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..'V  .*i  thinviicnt  computing 

\  lik 

v .'  v«Miipu?!n{j  4*r  \  irtual  usi-r  inevr- 

•  .  V'ir!u.ili/,ui«m  makes  ihi- 

dcskt«’ps  easier  by 
mi:  appHeaiions  to  a  baek-end 

•  r\er.  1  o\\  iuvriiead  requirements  «>n 
!!u  elient  .illow  11  to  delay  TCup 
ytt.iJes  or  move  to  VVindims  terminaN. 

\'!rtualt/atior«  also  impntves  seeuri- 
fv  by  keepiny;  data  eentrali/ed  —  only 
wreen  updates  and  ks'ysrri»ke  int'orma- 
tjon  pass  between  the  thin  client  and 
server  The  s\ stems  haw  also  added 
support  tor  .mlhentieaicd  rem«>ie  aivess 
and  Seeure  ’^vkeis  I,»yer  tSSl.teiKryp- 
iion  so  users  ean  sceurely  aev\-ss  appli- 
e.tiions  \ij  the  \Seb- 

I'hose  te.itures  have  st«»ked  renewed 
interest  :n  thin-clieni  teehnidoyty  as  a 
wav  toMilve  speeifle  problents.  Yer 
nitisi  Lompanies  that  iis<-  thtn-elient 
M'rverware  depU»y  it  across  t>nly  a  por¬ 
tion  oI  all  desktops  arid  usv'  it  only  to 
aei.-ss  a  si  Us  i  jrrottp  o|  applications, 

\N'UI  **if  ••  oi  !-.irlune  l.iuMi  eompa- 
nies  have  deployi-d  applications  tisiny: 
teehnoloeies  such  .i'  Metahranu- or 
Mienoi'tu  orp  s  lermnial Server. but 
most  have  insi  lilej  it  *'11  only  K>”  to 
l.s  oi  ai  skiops  sj\s  Havid  I  ritdlan- 
Jer.  all  analyst  at  hirresi.-r  Keseareh 
Ins  Dta*  I  ri  nd  »s  unlikely  to  ehanije 
any i»me  soon  s.iy  loers  and  analysts 

Limiting  Factors 

It  si'ems  *har  users  and  .idmitiistraiors 
at.  'tiii  more  eomlort.ible  with  a  ^jt 
silent  Kansas!  Jtv.  .M.^-Kised  Amerieo 
I  111  Itu  which  li-is  virtnali/ed  nearly 
.ill  't  Its  'O  jpplUation>  (III  .'d  Meta- 
Jr.u.ie  servers.  siil)  gives  its  ssyr  useTsa 
.m:  I't  'It  gives  me  ihe|le\ibility  to 

•  '  "  run  apphealions  loeally  if  I  ewer 

•  fvou.  J  need  to  do  Mi.'*s.iys  t’lO  Kandy 
1  unes  Kill.  knedlatiderpsMnts  out. 
lh..t  nii-ans  the  I’L  s|ill  needs  m  K- 

fr..in,.ged  and  pate  he’d  ‘ 

Me.inwhlle.  impniveniems  in  soh- 
w  ire  deplov  meni  and  desktop  maniige- 
ment  t(M»ls  have  K»were‘il  the  e'osts  of 
managing  rradiliotul  Windows  de’sfc- 
tops  reduenv  the  relative  Ivnefitsui 
thin-ehetit  s\  stents  in  i  Ins  aixM. 

ISWVeT  iise'ps  still  iren't  j  good  fit 
for  thin  e-lieivis.  fve-n  with  today  's  fast 
se-rverv  resource  tningrv  .tpphe  jiions 
sui  b  .js  computer-aided  di  sign  system.s 
still  Work  better  on  stand  alone  ma¬ 
chines.  For  some  mobile  users,  the 
need  fiira  eoniinuiius  nerwork  eoiinee- 
tion  has  limited  the  tvehnologv  s  .ip- 
peal.  And  older  applie.nions  i  m  suffer 
e»*mparibility  pMblenis  e.iuse  ilu-  ap- 
pliealion  must  be  hosted  on  a  Win¬ 
dows  server  running  MelaFratiH  or 


other  thin-eiient  serverware.  "We  ve 
had  some  problems,  and  most  of  it  w  as 
speeiali/eJ  leg.iey  stulT,  applications 
running  offt obol."  says  Redding. 

ITie  evolution  vif  the  Web  has  given 
users  aiuilherthin-elieni  alternative.  As 
eompatiies  move  toward  Web-enabling 
internal  applications  and  enterprise 
software  vendors  increasingly  provide 
Weh-enabled  software,  users  can  ae 
ees>  line-ol-business  applications  by 
way  of  Web  ponals  and  SSI  Yl’Ns. 

Thinning  Ranks 

f  itrix's  MelaFrame  has  long  been  the 
leader  in  thin-elient  serverware.  and  .if 
ter  a  wave  of  consolidations  in  the  past 
tw  o  years,  .idmimsiraiors  h.ivc  fewer  al¬ 
ternatives.  i  iti  i\  holds  about  r5'“ii  of  tlie 
market,  w  iih  the  rest  split  among  Mi- 
erosott,  r.irantella  liie.  and  a  few  others 
‘v.iies  of  the  technology  .letually 
dipped  in  d(UC.  but  interest  has  picked 
up  .ig.iin.  lairix  has  broadened  its  of¬ 
ferings  and  pivsilioned  its  products  as  a 
way  111  provide  a  single  jM*int  of  .leeess 
to  a  mix  of  application  types.  Its  .Ae- 
eess  suite  includes  an  SM  S'I'N  prod 
uet.  single  sign-on  soi'tvv.ire  and  a  con¬ 
ferencing  tool.  Rut  the  bulk  of  Cilrix's 
business  remains  with  .MeiaFrame  Pre 
scniation  'Server,  which  ii  promotes  as 
.ineasy  wav  to  Wi-b-enable  applisM- 
rions  without  rewriting  them 

Microsivfi  has  .idded  features  to  Ter- 
imnal  Vrver  such  .is  improved  sealabil- 
iiy  ind  a  faster  version  of  the  Remote 
iVsktop  I’rvUiKol elient  tluit  m.ikeit  an 
.iltr.ictive  —  and  less  expi-nsiv-f  —  al¬ 
ternative  to  .MetaFrame-  Hut  Latrix  still 
leads  the  pack  with  the  most  enter- 
piiv-cUss  features,  including  scalabil¬ 
ity.  load  balancing  and  f.mli  tolerance. 

-It's  improved  to  the  point  where 
you  can  have  data  centers  in  different 
regions  publishing  the  same  applica- 


Thin-Client 
Serverware  by 
The  Numbers 

■  90%  of  Fortune  1,000  compa  - 
mes  run  viriualued  applications  on 
UelaFrame  or  Terminal  Server 

•  10%  of  aJt  PCs  in  those  compa 
nies  use  the  technology,  on  average 

■  H)%  fo  15%  of  thin-ciient  users 
corvnect  from  Windows  CE  lermi- 
nab  or  other  thin-diefTt  hardware 

■  85%  to  90%  of  deployments 
that  use  tradrtiona)  Windows  desk¬ 
tops  or  laptops  as  the  thin  client 
also  run  applications  localfy. 


Thin  Client,  Fat  Computer 

Oklahoma  Heart  Hosplal  practices  a  diteenl  |  shpclure.  The  sislem  consists  ot  HP's 
lanrt(rtlhmi*efflaimo(j|lng.ai™cal  start  ItSOOOsenesthlndlenlandaPCbladeai. 
iwrti  at  what  looks  like  a  hipicalWIrakivB  thin  j  chUeckire  based  on  Eirtcion  CPUs  horn 
teimlnal  hem  Aoslin-based  OeaiCube  Inc.  j  Transmeta  Corp. 
Bulinsteadolconnecliniiloasaiverninnino  |  Bade  PCs  safeliad  Jones' need  to  have  a 

TennmalSeiveraMelaFtanie,Badiatlaches  I  Irtmlnjiitendcaoableolsuooortinoaia- 
lo  a  dedicated  Wade  PC  In  the  hospitars  data  j  souiceHolensiveapplicatjoo.  Buthesaysihe 
canIBf. -We  gel  the  fteMbility.  quietness  and  ,  post  oTIhe  setup  was  about  twice  what  he 
rtectloncoetral  [because  the  unit  has  no  |  wpuldbavepaidkiracemparaWeOeaPC.A 

Ians  and  Iheretoredoesnl  spread  microbesj  I  complete  system  frem  HP  costs  about  SI  AOO 
andallbesewondartulciualtllesolaWlndows  j  pers(Mtloial.CI(Xhiseyconll(|t»ation. 

I  tefminal.bulwBhavere0lPCsandhafihiere.*  |  The  approach  doesnT  mate  sense  to 
says  Jeff  Jones,  lead  systems  engineer.  I  Randy  James.  00  at  Americo  Life.  Mich 

As  with  traditional  thin  cSents,  only  key-  I  uses  Windows  CE  terminals  and  MetaFrame 
sfrotes.  mouse  dicks  and  screen  updates  !  Thefe’s  an  enormous  amount  of  procesang 
are  transmitted  to  the  blade.  PC  system  \  power  wasted  in  that  [and]  you  sti  have  the 
hardware,  programs  and  data  are  ceraralfy  i  same  number  of  operating  systems  and 
located,  making  (teasief  to  manage  and  se-  |  everything  to  manage.  I  don't  think  there 
cure.  The  blades  have  enough  horsepower  to  !  needs  to  be  a  one-to-one  relationship  be- 
handle  resource-mlensive  applications  that  {  tween  users  and  PCs.* 
might  bog  down  a  Terminal  Server  back  end.  I  But  vendors  remain  upbeaLTtcouW  be 
Andihevcanbecontigwedtofailoveftoa  |  15%  to  25%  of  the  commercial  PC  business 
new  Wade  when  a  Wade  crashes,  j  in  three  to  five  years.' says  Keith  LeFebvre 

Recently.  Hewletl-Packard  Co.  entered  |  vice  president  of  HP  business  desktops, 
the  market  with  itsConsolidatedCIrenI  Infra-  I  •HobertLMitcMI 


III  ms  .iiid  failing  ovvr  tu  each  uihcr 
•kCMmlcssly."  sjys  Mary  Mungus.  natiun- 
al  Jirevtur  nf  iwhnulogy  ai  sysiems  in- 
tvgraior  N'lvtor  I  Sl’  Inv.  in  Houston. 

T  hill  was  J  criiival  fcaturt’  for  Toron- 
io-b.iM\l  Voiiahank.  which  put  ’tl.DiHi 
users  and  l,()(M)  bank  branches  on  a 
MciiiFramc  server  farm  Iasi  |uly.  It  hiis 
two  50-scrv\T  sites  lo  prov  idc  fail-over 
support  for  .^5  branch  office  .ipplica- 
iii>ns,  s;iys  l.I>  s.ivage.  the  bank's  senior 
vice  president  of  systems. 

Svimerfield  Stores  Ltd.  in  Bristol. 
England,  goi  around  the  pniblem  of 
luitt  to  h«*si  <«lder  applications  by 
chtHising  J  product  that  din’sn't  require 
them  to  reside  on  the  same  sysiem  as 
the  servenvarv’.  Rather  than  host  appli¬ 
cations  directly,  a  Secure  (ilob.il  l>csk- 
lop  server  from  Santa  Cruz.  Calif.- 
based  raraniella  acts  as  a  middleware 
layer,  presenting  a  virtual  user  inter¬ 
face  to  the  end  user  while  comniuni- 
caiing  to  the  back-end  servers  using 
each  system's  native  proiocvil. 

TTie  griH’cry  chain  used  Tarantella's 
product  to  bring  .intiquiited  ij.it.ihasc 
applic-iiions  running  in  some  raHi  stores 
into  the  Jala  center.  Tlial  improved  per 
formance  w  hile  giving  SonierfielJ  lime 
to  design  a  ikav  dal.iKise,  s.iys  lolin 
IVlIing.  head  ot  IT  services.  Ilie  new 
system  p.iid  for  itself  in  ).*  months  by 
allowing  lheconip.inv  to  defer  the  costs 
of  buying  and  deploy  ing  store  liardw.ire 
and  software  upgrades,  he  .says. 

T  he  most  common  a-ason  I  T  man¬ 
agers  cite  for  using  thin-eliem  server- 


ware  is  to  save  the  lime  .iiid  expense-  of 
maint.iining  and  n’pl.icing  I't:s  distrib¬ 
uted  ;ii-ross  multiple  locations.  “Wc 
can  deploy  a  new  applicaiion  to  5(KI 
users  in  an  hour."  s;iy  s  .Amcrico's  lames. 

But  IVHing  and  other  JT'  managers 
also  say  they  want  to  \Veb-en;ible  all  of 
their  applications.  As  applications  be¬ 
come  more  WVb-centric.  people  arc 
likely  to  nuwe  to  portal  software,  says 
1  Ian  Kusnetsky.  an  analyst  at  IDC,  But 
most  companies  fuivc  hundreds  or  thou¬ 
sands  of  applications,  most  of  which  are 
unlikely  to  he  rewritten  .inytime  scMin. 

Thin-clieni  sc-rverware  is  unlikely  to 
broadly  replace  fat  l*Cs.  Kusnetsky 
adds,  but  it  will  continue  to  play  a  role 
in  managing  desktop  access  for  specif¬ 
ic  applications. 

James  says  he  thinks  companies  are 
missing  vmi  by  not  deploy  ing  the  tech¬ 
nology  more  widely.  He  says  centraliz¬ 
ing  desktop  applications  and  data  has 
made  it  much  easier  to  comply  w  iih 
the  Sarbanes-Oxlcy  Act  and  has  re¬ 
duced  desktop  administration  prob¬ 
lems  to  the  point  where  his  staff  spends 
of  its  lime  on  new  projects.  "For 
the  typical  IT  shop.  of  their  lime 
would  be  consumed  just  kwping  the 
place  running."  he  s.tys.  "1  don't  know 
why  more  pisiple  don't  Jo  it."  O  47953 

AVOIDiNeAPPUCATIONCONFUCTS 

Sottricity's  SoftOrid  eluTNnalK  diHXicatton  contlos 
by  cieafmg  a  vi»tua)i/e<t  enwonnwoi  te  each  anc 
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Continued  from  page  19 
lust  on«  use  of  thin>ciieDt  computing 
scrverware,  abo  known  as  server- 
based  computing  or  virtual  user  inter¬ 
face  software.  V'irtualizadon  makes  the 
maivagemeni  of  desktops  easier  by 
moving  applications  to  a  back-end 
server.  Low  overhead  requirements  on 
the  client  allow  IT  to  delay  PC  up¬ 
grades  or  move  to  Windows  terminals. 

Virtualization  also  improves  securi¬ 
ty  by  keeping  data  cent^ized  —  only 
screen  updates  and  keystroke  informa¬ 
tion  pass  between  the  thin  client  and 
server.  The  systems  have  also  added 
support  lor  authenticated  remote  access 
and  Sectire  Sockets  Layer  (SSL)  encryp¬ 
tion  so  users  can  securely  access  appli¬ 
cations  via  the  Web. 

Those  features  have  stoked  renewed 
interest  in  thin-client  technology  as  a 
way  to  solve  specific  problems.  Yet 
most  companies  that  use  thin-client 
serverware  deploy  it  across  only  a  por¬ 
tion  of  all  desktops  and  use  it  only  to 
access  a  select  group  of  applications. 

About  90%  of  Fortune  1.000  compa¬ 
nies  have  deployed  applications  u.sing 
technologies  such  as  MetaFrame  or 
Microsoft  Corp.'s  Terminal  Server,  but 
most  haw  installed  it  on  only  10%  to 
15%  of  desktops,  says  David  Fricdlan- 
der.  an  analyst  at  Forrester  Research 
Inc.  That  trend  is  unlikely  to  change 
anytime  soon,  say  users  and  analysts. 


Limiting  Factors 


It  seems  that  users  and  administrators 
arc  still  more  comfortable  with  a  fat 
client.  Kansas  City.  Mo.-based  Amcrico 
Life  Idc,  which  has  virtualized  neari>' 
all  of  Us  SO  applications  on  32  Meta- 
Frame  servers,  still  gives  its  550  users  a 
full  PC.  "It  gives  me  the  flexibiUty  to 
still  run  applications  locally  if  1  ever 
should  need  to  do  so."  says  CIO  Randy 
lames.  But.  Friedlandcr  points  out. 

"that  means  the  PC  still  needs  to  be 
managed  and  patched." 

Meanwhile,  improvements  in  soft¬ 
ware  deployment  and  desktop  manage¬ 
ment  tools  have  lowered  the  costs  of 
managing  traditional  Windows  desk¬ 
tops.  reducing  the  relative  benefits  of 
thin-client  systems  in  this  area. 

Power  users  still  aren't  a  good  fit 
for  thin  clients.  Even  with  today’s  fast 
servers,  resource-hungry  applications 
such  as  computer-aid^  design  systems 
still  work  better  on  stand-alone  ma¬ 
chines.  For  some  mobile  users,  the 
need  for  a  continuous  networic  connec¬ 
tion  has  limited  the  technology's  ap¬ 
peal  And  older  applications  can  suffer 
compatibility  problems  because  the  ap¬ 
plication  must  be  hosted  on  a  Win-  j 
dows  server  running  MetaFrame  or  I 


other  thin-client  serverware.  "We’ve 
had  some  problems,  and  most  of  it  was 
specialized  legacy  stuff,  applications 
running  off  Cobol.”  says  Redding. 

The  evolution  of  the  Web  has  given 
users  another  thin-client  alternative.  As 
companies  move  toward  Web-enabling 
internal  applications  and  enterprise 
software  vendors  increasingly  provide 
Web-enabled  software,  users  can  ac¬ 
cess  line-of-business  applications  by 
way  of  Web  poitals  and  SSL  VPNs. 

Thinning  Ranks 

Citrix's  MetaFrame  has  long  been  the 
leader  in  thin-client  serverware,  and  af¬ 
ter  a  wave  of  consolidations  in  the  past 
two  years,  administrators  have  fewer  al¬ 
ternatives.  CUrix  holds  about  75%  of  the 
market,  with  the  rest  split  among  Mi¬ 
crosoft.  Tarantella  Inc.  and  a  few  others. 

Sales  of  the  technology  actually 
dipped  in  2002.  but  interest  has  picked 
up  again.  Citrix  has  broadened  its  of¬ 
ferings  and  positioned  its  products  as  a 
way  to  provide  a  single  point  of  access 
to  a  mix  of  application  types.  Its  Ac¬ 
cess  Suite  includes  an  SSL  VPN  prod¬ 
uct.  single  sign-on  software  and  a  con¬ 
ferencing  tool.  But  the  bulk  of  Citrix’s 
business  remains  with  MetaFrame  Pre¬ 
sentation  Server,  which  it  promotes  as 
an  easy  way  to  Web-enable  applica¬ 
tions  without  rewriting  them. 

Microsoft  has  added  features  to  Ter¬ 
minal  Server  such  as  improved  scalabil¬ 
ity  and  a  faster  version  of  the  Remote 
Desktop  Protocol  client  that  make  it  an 
attractive  —  and  less  expensive  —  al¬ 
ternative  to  MetaFrame.  But  Citrix  siUl 
leads  the  pack  with  the  most  enter¬ 
prise-class  features,  including  scalabil¬ 
ity.  load  balancing  and  fault  tolerance. 

“It’s  improved  to  the  point  where 
you  can  have  data  centers  in  different 
regions  publishing  the  same  applies- 
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tions  and  failing  over  to  each  other 
seamlessly."  says  Marc  Mangus,  nation¬ 
al  director  of  technology  at  systems  in¬ 
tegrator  Vcaor  ESP  Inc.  in  Houston. 

That  was  a  critical  feature  for  Toron¬ 
to-based  Scotiabank,  which  put  20.000 
users  and  1,000  bank  branches  on  a 
MetaFrame  server  farm  last  July.  It  has 
two  50-server  sites  to  provide  ^I-over 
support  for  35  branch  office  applica¬ 
tions,  says  J.P.  Savage,  the  bank’s  senior 
vice  president  of  systems. 

Somerfield  Stores  Ltd.  in  Bristol. 
England,  got  around  the  problem  of 
how  to  host  older  applications  by 
choosing  a  product  that  doesn’t  require 
them  to  reside  on  the  same  system  as 
the  serverware.  Rather  than  host  appli¬ 
cations  directly,  a  Secure  Global  Desk¬ 
top  server  from  Santa  Cruz,  Calif.- 
based  Tarantella  acts  as  a  middleware 
layer,  presenting  a  virtual  user  inter¬ 
face  to  the  end  user  while  communi¬ 
cating  to  the  back-end  servers  using 
each  system’s  native  protocol 

The  grocery  chain  used  Tarantella’s 
product  to  bring  antiquated  darahase 
applications  running  in  some  600  stores 
into  the  data  center.  That  improved  per¬ 
formance  while  giving  Somerfield  time 
to  design  a  new  database,  says  John 
Pelling,  head  of  IT  services.  The  new 
system  paid  for  itself  in  13  months  by 
allowing  the  company  to  defer  the  costs 
of  buying  and  deploying  store  hardware 
and  software  upgrades,  be  says. 

The  roost  common  reason  IT  man¬ 
agers  cite  for  using  ihlD-cUent  server- 


ware  is  to  save  the  time  and  expense  of 
maintaining  and  replacing  PCs  distrib¬ 
uted  across  multiple  locations.  "We 
can  d^loy  a  new  application  to  500 
users  in  an  hour."  says  Americo’s  James. 

But  Pelling  and  other  FT  managers 
also  say  they  want  to  Web-enable  all  of 
their  applications.  As  applications  be¬ 
come  more  Web-centric,  people  arc 
likely  to  n>ovc  to  portal  software,  says 
Dan  Kusnetsky.  an  analyst  at  [DC.  Bui 
roost  companies  have  hundreds  or  thou¬ 
sands  of  applications,  most  of  which  arc 
unlikely  to  be  rewritten  anytime  soon. 

Thin-client  serverware  is  unlikely  to 
broadly  replace  fat  PCs,  Kusnetsky 
adds,  but  it  will  continue  to  play  a  role 
in  managing  desktop  access  for  specif¬ 
ic  applications. 

James  says  he  thinks  companies  are 
missing  out  by  not  deploying  the  tech¬ 
nology  more  widely.  He  says  centraliz¬ 
ing  desktop  applications  and  data  has 
made  it  much  easier  to  comply  with 
the  Sarbanes-Oxley  Act  and  has  re¬ 
duced  desktop  administration  prob¬ 
lems  to  the  point  where  his  staff  spends 
60%  of  its  time  on  new  projects.  “For 
the  typical  IT  shop.  90%  of  their  time 
would  be  consumed  just  keeping  the 
place  running."  he  says.  “I  don't  know 
why  more  people  don’t  do  it."  O  47953 
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SAN  Connectivity  Kit^*^  for 
Windows  Server*^  2003 

Everything  you  need  to  get  a  SAN  up  and  running 
is  inciuded  in  the  QLogic®  SAN  Connectivity  Kit  for 
Microsoft®  Windows  Server  2003. 


Easy  to  buy  -  with  fully-tested 
and  interoperable  components  all 
pre-packaged 

Easy  to  manage  -  across  the 
SAN  from  a  central  console 

Easy  decision  -  at  just  $5999 
visit  www.qlogic.com 
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Turnkey  Storage  Area  Network 


SIMPLE  LOW  COST  SANS 
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Matters 

OfTrust 

Producing  secure  pnxfcjcts  has  beo^ 
consideration  at  Microsoft,  says  the  leader  of  the 
company’s  Trustworthy  Cornputing  initiative. 


r 

Title: 

Compaiiy. 

BacKground; 

As  Microsoft  Corp.  's  chief 
Trustworthy  Computing 
strategist.  Scott  ttarwcy 
can  escoiote  his  concerns 
directly  fo  the  senior  leadership  team 
headed  by  Bill  Cates  and  Steve  Ballmer. 
Chomey,  aybrmergovemmenf  prosecu- 
tor.  also  spearheads  the  company's  Se* 
cunry  StFotes*^  Group,  which  worfcs  ro 
advance  the  cause  of  secure  products 
and  services.  Durir^g  a  recent  visit  fo 
Boston,  Chomey  met  with  Computer- 
world's  Carol  Sliwa  and  Robert  L 
Mitchell  to  talk  about  how  Microsoft 
does  security. 

At  Mferaa^  much  of  the  dseWort-making 
power  roots  wMi  the  product  groups  that, 
le  «mo  ortwit,  ndgM  hovo  compoCm  Intof- 
esls  wtth  what  you’re  tryfeiQ  to  do.  How  rmich 
power  do  you  Iwvo  to  affact  tho  diMpas  you 
need  to  mate?  The  Thrstworthy  Com¬ 
puting  iniriative  was  announced  by  BUI 
Gates.  And  Steve  Ballmer  is  behind  h.  I 
And  Craig  Mundie.  my  boss,  is  kind  of  | 
the  father  of  Trustworthy  Computing. 

He  sits  on  what’s  called  the  senior 
leadership  team,  which  is  BUI  and 
Steve  and  Craig  and  lira  Allchin,  who 
owns  the  Windows  platform,  and  Jeff 
Raikes.  who  owns  the  Office  platform. 

As  a  practical  matter,  at  the  highest 
levels  of  the  company,  there  is  a  com¬ 
mitment  to  doing  this.  And  if  I  see  an 
issue  and  I  say  I’m  going  to  make  sure 
this  is  being  handled  the  right  way.  my 
boss  is  Cra^  So  my  escalation  path  is 
very  short,  and  the  people  who  I  esca¬ 
late  to  actually  run  the  company. 

There  are  always  competing  inter¬ 
ests,  no  matter  what  your  Une  of  work 
may  be.  The  company’s  publicly  held. 

We  have  an  oblation  to  shareholders. 
But  security  is  now  good  business  and 
very  much  aligned.  So  that  tension,  to 
some  extent.  post-WU,  has  been  re¬ 
duced  dramaticaUy. 

tei'l  ttera  toraion  betwwo  tte  InsinMB  and 

as  aay  as  pohMs  to  UM  vwwa  twtehig  to 
mate  thsm  ss  ascurs  M  you  can?  There  is 
tension  there.  To  some  extent,  one  of 
the  ways  to  do  it  is  to  try  to  make  the 
security  as  easy  as  possible  and  trans¬ 
parent  to  Che  user  so  they  get  the  secu¬ 
rity  without  having  to  actually  manapr* 
it  or  have  it  impact  their  experience. 

On  the  other  hand,  there  are  times 
when  the  technology  is  fust  not  ready. 

A  smart  phone  is  a  great  example.  It 
allows  me  to  resync  my  cal^tviar  and 
my  mail  From  a  security  perspective,  a 
lot  of  people  Ickse  these  in  taxi  cabs  and 
leave  them  behind  at  restaurants.  So 
maybe  one  of  the  things  we  should  I 
think  about  is  encrypting  everythii^  on  I 


this  device  to  protect  the  consumer 
who  mi^t  lose  this  device.  Tve  had 
this  discussion  wHh  the  mobile  device 
people.  And  what  they've  said  is,  This 
is  a  small  device,  very  competitive  mar- 
keL"  They’ve  got  price  points  in  the 
consumer  market  that,  if  they  passed 
them,  then  people  won't  buy  the  prod¬ 
uct.  Moreover,  as  a  practical  matter, 
people  like  the  calendar  and  the  e-mail, 
but  they  also  want  to  make  phone  calls- 
If  you  encrypt  everythii^  on  this  de¬ 
vice.  every  time  anyone  accesses  any¬ 
thing  like  a  contact,  you  have  to  de¬ 
crypt  it  axMl  then  when  you  close  that 
screen,  it’s  got  to  be  re-encrypted.  If 
you  encrypt  and  decrypt  every  piece  of 
information  in  every  e-mail  on  the  fly. 
you  wiU  have  two  minutes  of  talk  time. 
And  the  reason  for  that  is  the  battery. 
There  have  been  no  maior  advance- 


I  meats  in  battery  life.  So  right  now. 
we’re  not  going  to  encrypt  this  device, 
even  though  it’d  be  great  for  security, 
because  the  device  becomes  unusable. 

For  security  to  be  embraced,  it  has  to 
work.  People  understand  that  security 
creates  a  drag  on  productivity.  The  fact 
that  you  have  to  enter  your  password 
before  you  can  sign  on  takes  two  or 
three  seconds.  People  have  acceptable 
levels.  It  takes  a  minute  or  two  to  lock 
your  door  when  you  leave  your  apart¬ 
ment  and  open  it  when  you  come  hack. 
I  think  most  people  say.  “Locking  my 
door  is  an  acceptable  amount  of  time.” 

Now  you  have  to  rhinit  about  func¬ 
tionality  in  the  same  way.  You  have  to 
figure  out  how  to  provide  this  func¬ 
tionality  in  a  secure  way.  and  rhen  I 
figure  out  how  to  do  this  security  in  a 
way  that  doesn’t  undemune  the  fime- 


1  tionality  or  so  degrade  the  user  experi¬ 
ence  that  they  turn  it  off. 

The  key  thing  is  that  as  you  try  and 
balance  these  things.  What  you  don’t 
have  anymore  that  you  used  to  have  is. 
“I  don’t  want  to  talk  about  security.  I 
don't  want  to  have  to  do  security.  It's 
not  important”  Now,  at  every  level  of 
the  company,  whether  it  be  a  develop¬ 
er.  an  architect,  it’s  like.  “OK.  How  can 
we  balance  these  competing  interests, 
because  they’re  all  important?" 

How  have  you  maasursd  progms  Oft  the 
Trustworthy  Computing  Mttotivo?  There 
are  different  metrics  that  we  use  in  dif¬ 
ferent  ways.  Very  often  you  look  for 
proof  points,  and  some  are  specific 
and  some  are  more  general.  For  exam¬ 
ple.  one  of  the  things  we  have  now  is 
the  security  piish  and  review  process. 
There  are  things  that  we  can  measure 
internally  about  the  number  of  compo¬ 
nents  that  have  gone  through  this  per¬ 
centage  of  large  products  and  all  of 
that  Then  you  get  the  external  mea¬ 
sures  —  the  number  of  bulletins  you 
release. . . .  Ultimately,  the  goal  is  to 
make  the  customer’s  Ufo  easier  and 
make  security  more  manageable.  So 
you  look  at  Sasser.  For  Windows  Serv¬ 
er  2000,  jfou  had  to  download  this  crit¬ 
ical  patch.  For  Windows  Server  2003.  it 
was  a  nonevent.  When  you  look  at  that, 
you  go,  ’TVell,  2003  went  through  a  se¬ 
curity  push.”  Someone  designed  a 
worm  and  this  product  was  not  affect¬ 
ed.  *n)e  customers  who  had  upgraded 
to  that  product  didn’t  have  to  deal  with 
it  at  all  This  is  cleariy  better  than 
where  we  were  two  years  aga 


Did  you  estobfch  spacMc  ftwlrics?  We 
didn’t  set  targets.  We  didn't  say  we 
hope  to  get  down  to  x  vulnerabilities 
in  X  years.  We’re  measuring  where 
'  we’re  better  than  we  were  before  and 
where  we’re  not  Whenever  we  have  a 
critical  or  an  important  vulnerability, 
we  do  a  root-cause  analysis.  And  the 
root-cause  analysis  is  designed  to  fig¬ 
ure  out  OK,  bow  did  h  coroe  to  pass^ 
Is  it  just  a  question  of  training,  ap¬ 

plication.  b^  development  tools,  bad 
testing  tools?  You  can  figure  out  how 
you  can  improve  the  process.  You  keep 
trying  to  make  it  better  and  better.  And 
you  measure  your  current  state  com¬ 
pared  to  your  old  state _ Zero  vul¬ 

nerabilities  would  be  our  target.  It’s 
also  not  a  realistic  one.  O  46109 
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The  Leading  Executive 
Conference  for 

•  Enterprise  IT  Management 

•  Data  Center  Management 

•  Networked  Server 

and  Storage  Management 

•  Network  and  Communications 
Management 

•  Infrastructure  and  Data  Architects 

•  Systems  Integration  Specialists 

•  Enterprise  Security  Management 

A  User  Focused  Agenda  on: 

•  Distributed  Management 
Technologies 

■  The  Data  Center 

•  The  Communications 
Infrastructure 

To  register  or  for  more  information, 
visit  wwwemwusa.com/cw 


For  sponsorship  opportunities, 
call  1-888-239-4505 
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IT  spending  will  con- 
tirxje  to  grow  this  year  driven  by 
an  improvtog  global  economy 
arxj  the  need  for  users  to 
resohe  infrastructure  prcfolems" 
John  Gantz 

Chief  Research  Officer 
IX 


Learn  How  to  Achieve  Data  Center 
Management  Success 

•  Get  a  Contemporary  Overview  of  Today's  Data  Center  Issues 
and  Opportunities 

•  See  How  to  Implement  and  Deploy  the  Latest  m  Data  Center 
Management  Technologies 

•  Hear  the  Latest  m  Enterprise  Security 

•  Learn  from  Best  Practices  and  Case  Studies 


Why  You  Should  Attend 

Are  you  resoonsible  for  managing  your  company  s  data  center  assets’  Want  to  e>icr'ange  mnova- 
t've  deas  and  strategies  witt'  other  executives  wnp  share  the  same  objectives?  Then  attend 
Enterprise  Management  World,  where  you  n  network  witri  and  learn  from  renowned  experts  and 
the  nation's  top  user  executives. 


‘The  DMTF  is  responding 
to  a  critical  need  for  usable 
models  and  common, 
interoperable  standards 
resulting  in  technologies  that 
converge  to  address  end-to- 
end  management  needs." 

Heather  Kreaer 
IBM 

Co-chai'  OASIS  Web  Services 
Distributed  Management 
Technical  Committee 


What  You’ll  Learn 

In  this  executive-forum  setting,  you'll  hear  d'recty 
Pies  They'll  address  a  wide  variety  of  today's  burn- 

•  Managing  the  Distributed 
Enterprise 

•  Network  and  Communications 
Management 

•  Networked  Server  and  Storage 
Management 

•  Enterprise  Security 
Management 

■  CTO  &  CIO  Insights 

•  Compliance  and  Regulatory  IT 


from  execut  ves  and  managers  m  user  compa 
mg  issues  ''ke 

•  Data  Center  and  Infrastructure 
Considerations 

•  Systems  Integration  and 
Interoperability 

•  Return  on  Investment 

and  Total  Cost  of  Ownership 

•  Managing  Deployment  of 
Emerging  Technologies 
and  Standards 
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Nominate  Your 

Case  Study! 

Submit  your  nomination  today 

at  survey.computerworld.com/ 
surveys/EMW/EMWBestPrac.html 

or  email  Nanette  Jurgelewicz  at 
nanette_jurgelew;cz^computerworid  com 


Philadelphia  Marriott 

Philadelphia.  Pennsyivar  3 

Hotel  Reservations  ^ 
and  Travel  Services  t.7,h  .inviVr! 

IX  Travel  rs  the  official  travel  company  for  Enterprise 
Mar^agement  World.  They  are  your  one-stop  shop  for 
exclusive  discounted  rates  on  hotel  accommodations. 

To  reserve  your  accommodations,  visit 

www.etcentral.com 

You  can  also  call  our  conference  housing  line  at 

1-800*340-2262  (or  1-508-820-8686) 
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•  CIM  Basics:  CIM  Using  and  Extendino 
CIM  Schama 

'  WBEM  Inlraslructu'c  Basics  and 
Integration:  What  is  a  MOF  and  Hew 
to  Write  Models 

SMI-S  and  CIM  for  Storage;  Server 
Management  with  WB£M/CIM  and  CIM 
CU:  EHP  CIM-based  Directory;  and 
Management  ot  Communications 
Infrastructure  w«i  SAF,  AIS  HPt  wid  DMIF 
IPv6;  CIM  Enabled  Nigh  Availability 
Sohfttons:  and  Gnd  Computing  with  CIM 


What  You  Need  to  Know  About 
Compliance 


MONDAY _ 

■The  Compliance  12-step' 

SOA  Roadmap  -  The  Principles  tor  a 
Successful  Incremental  Implementation 

Effective  Data  l^luation  for  Optimized 
Disaster  Recovery  Efforts 
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Enterpnse  Lmui  Commodity  Clusters 
and  Qnds  -  A  to  Z:  What  They  Are.  How 
They  Work.  How  They  Pay  Off,  and  Who's 
Doing  Them  Today 
The  Critical  Value  of  Software  Asset 
Management  Through  Benchmarking 
Information  Lfecycle  Management. 
Managing  Information  Not  Data 


MONDAY.  SEPTEMBER  13 


Opening  Keynote 
End  User  Case  Study 

Industry  Leader  Presentation 

End  User  Case  Study 

Industry  Leader  Presentation 
CTO  Insights  Panel 
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VP  4  CO 
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Opening  Remarks 
Opening  Keynote 

End  User  Case  Study 

Industry  Leader  Presentation 

End  User  Case  Study:  WAN  Optimization 
Technology  FacAtales  EiAerpnse  Aoolicalion 
Deptoymenl  for  Global  Corporation 

Industry  Leader  Presentetion 
DMTF  Overview 


Service  Level  Agreement  High 
Availability.  Asset  Management 
'  SANs:  Servers;  Diagnostics 
•  DMTF  Command  Line  Interlaces: 
WMI  Mapper 
End  User  Case  Study 
Industry  Leader  Presentation 
End  User  Case  Study:  Operational 
Management  Across  a  State  wide 
Enterprise 


Panel;  Enterpnse  Security  ArctMtecUire  - 
A  Methodology  for  Managing 
Information-security  Risks 
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JASON  GLAZIER 

SVPCTO 
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Panel:  CIO  Insights 


Managing  Truly  Global  Enterprises 

•  rr  Program  Success  from  the  CXO 
Perspective 

'  IOC  Analyst  Briefing 

•  Utility  Computing;  Security  and  Identity 
Management:  A^ication  QoS 

'  Management  Networlung: 

Gnd  Computing 
WBEM:  Pegasus 

End  User  Case  Study.  Managing  the 
Distributed  Computing  Environment. 

The  Paradigm  Shift 


Integrating  and  Autpmabng  W>ur  Business 
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'  Appllcalion  Modeling: 
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Solutions  With  SAML  and 
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Application  for  Conference  Registration 


Fax  this  completed  application  to  1-506-620-6254.  Oi 

'  apply  online  at  www.emwusa.com/cw 

Your  business  card  is 
REQUIRED 

to  process  your  application 

Please  aHix  your  Dusmess  card  to  this  space  prior  to 
Submitting  your  application  Applications  submitted 

Wi’hout  business  cards  will  not  be  orocessed 

Questions?  Call  1-800-a83-9090 

1  If  not  indicated  on  your  tMisiness  card,  please 
provide  the  lollowing  required  infomiation: 

Registration  questions? 

Cali  1  800  803  905k]orern3.,emvv>egaca'n3.,tc'AO'Clcc 

Need  accommodations? 

..vem  j-  wwvKetcentraLcom 

Piea«  :a  ’  800  340  2262 
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LJ  ^  ****  ®  Qualified  mambar  of  tha  press*  ^  can  verrfy  my  press  credentials 
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Please  fax  this  completed  application 
to  1-508-820-8254 
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As  a  sponsor,  you  n»ay  6e  tfigible  to  attend  usmg  a  registration  orovrded  with  your  sponsorship  (If  th 
aPo^ )  See  the  current  t«t  of  sponsors  si  wwwemwusa  com  Ouesl«y«’  Call  I  -800-883-9090  or 


isigned/usad  men  you  may  register  at  tne  prevailing  ra 


Q  I  am  a  raprasanMIva  of  a  Non-Sponsoring  rr  Vendor  Company 

^  TaclMiical  rinteaainnal  Packsee’  □  $5,000  Business  Development  Protassional  Peckspe 

excludes  Sales.  Marketing  and  Bos-ness  Development  Professonais  for  Sales  Marketing  and  Business  Oevetooment  Professionals 

I  vKtuOes  Ganere  Olerene*  Seseons  tw  M»a«  4  0«c.D1«r>s>  i  5.r,rai  Coni^e-e*  S«seor«  £xpo  U.a>s  4  Beceotons  l 

lO  W  2  regstnrts  cer  cixroif'y 

Ve^  are  encouraged  to  particoate  m  Enterpr.se  Management  WforW  through  sponsorsrvp  ( Deta.is  are  avai  abie  oy  cai-irig  Leo  Leger  at  600-820-0212 )  Alternatively  vendors  (as  well  as  other 
■hon-fT  end-user  professKXiais  as  defined  by  ComputenaofW)  may  apply  for  registration  at  me 'non  sponsor  ng  vendor' rate  of  $5,000  Determiriation  of  nhat  constitutes  a 'non-soonsonno  ven¬ 
dor’  registration  «  made  exckismeiy  Oy  Computerwood  Please  ca«  888-239-4606  «.m  guestions 


Q  I  am  an  IT  End-Uaor* 


■  IT  End-Users  are  defined  as  those  who  are  attending  Enterprise  Management  World  with  an  mtent  (andan  iT  spend.ng  budget )  to  potentially  boy/iease  hardwafe/software/sennces.  etc  from 
our  corrferenee  sponsors  and  are  not  themsehes  an  IT  vendor  As  such  account  representatives  bus-nessoevetopr^ent  personnel  analysts,  consultants  and  anyone  etse  attending  who  does  not 
have  IT  purchasHvg  inBuerae  withm  me.r  orgam/abon  are  excluded  from  the  TT  End-User'  des-gnaton  tnterpretahon  and  enforcement  of  this  poncy  are  at  the  swe  Oiscfet-on  of  Computemvorld 
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(General  Conference  Package 
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□  S99S  ahe-Juiy  16  20O4i 
CSenerai  (Conference  Package 

1  "tijoes  Genera' Corfer*nc*S»«sons  E*pa-Me»s  SBeceohomt 


1  am  a  Fkwncial/EQuity  Analyst  and/or 
Vantura  Capital  Professional 


□  S79S  (througn  July  IS  20041 
General  Conference  Package 
li"cki<fc«  General  Conterence  Sessions  Eipc 
Meah  4  Becechonv; 


□  $995  (after  Jv>,  T8  2004^ 

General  Conference  Package 

(e<iui]esGc*.e<aiConftr«nuSe«s«ne  Eioo 
Meat  4  Beceolicinsi 


□  $795 

General  (Conference  Package 

(inckioes  General  (Conference  Sesscx-s  Expo  Uea's  4  Bececiont  > 


□  $995 

General  Conference  Package 

'mclirOK  General  Conference  Sesaens  Eioo  Mesh  4  Beceof^r-s) 


Payment  Method 


J  American  Express  J  VtSA  J  MasterCard 
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JOHN  hCHMtOT 


One  industry  group  has  put  together 
a  framework  of  standards  and  prac¬ 
tices  to  stem  the  alarming  failure  rate 
of  application  integration  projects. 

BYTomiYPnasiiN 


ness  side  looks  at  ihe  IT  community,  [these  failed 
proiects]  are  one  of  the  things  that  get  questioned, 
and  that  undermines  our  credibility, "  he  says. 

The  consortium’s  remedy  for  the  situation  starts 
with  the  GIF  repository  containing  deuUed  informa¬ 
tion  about  proven  methodologies,  most  prominently 
Johnson  &  Johnson’s  Total  Business  Integration  ini¬ 
tiative.  The  approved  methodologies  in  the  reposito¬ 
ry  are  supported  by  a  formal  data  model  for  Integra- 
tioD  metadata.  The  repository  also  provides  access 
to  an  enterprise  architecture  development  model  in 
the  form  of  The  Open  Group  Architecture  Frame¬ 
work,  or  TOGAF.  an  integration  design  and  software 
framework  for  standardizing  interfaces  that  was  de¬ 
veloped  by  the  Avalanche  Consortium. 

But  the  1C  doesn’t  define  itself  as  merely  a  clear¬ 
inghouse  of  information  or  a  band  of  industry  evan¬ 
gelists.  It’s  developing  a  three-year  road  map  chat  in¬ 
cludes  training  and  certincation  programs  for  prod¬ 
ucts  and  procedures  that  comply  with  the  GIF  or 
GlF-a(^roved  standards. 

The  consortium  points  to  its  focus  on  end  users  and 
their  concerns.  It  emphasizes  that  the  GIF  is  vendor- 
neutral,  but  like  most  similar  industry  groups,  it 
courts  vendor  participation  and  financial  support. 
Maik  Tempelmeyer  of  IBM  is  co-chairman  of  the  IC 
along  with  Kuhbock.  The  consortium  membership 

also  includes  Oracle  Corp.  atMd  BEA 
Systems  Inc.,  as  well  as  smaller 
players  such  as  Soak  Software 
Corp..  Fiorano  Software  Inc.,  Soft- 
ware  AG  and  Informatica  Corp. 

So.  can  one  more  industry  orga- 
nizatioD.  no  matter  how  ambitious 

or  well-meaning,  male  s^ficam 
progress  toward  rationalizing  the 
q>plicatk)n  integration  process  in 
lai^  businesses? 

*There’s  certainly  value  in  what 
Che  consortium  is  trying  to  do  — 
creating  a  dialogue  between  ven- 
dors  and  users  on  emerging  tech- 
oology,"  says  Gordon  Van  Huizen, 
chkfiechDologyofTicef  atSonk 
Software.  *Tbe  global  framework  is 
very  ambitious  but  may  be  overly 
spe^c  at  this  point”  O  48120 


START  WITH  ONE  STATISTIC,  and  it’s  easy  to  un¬ 
derstand  the  mission  of  the  Integration  Con¬ 
sortium  (IC):  95%  of  all  application  integration 
pR^ects  fail  according  to  a  2003  study  by  The 
Standish  Group  International  Inc.  in  West 
Yarmouth.  Mass.  That  is,  the  IT  staffs  assigned  to 
such  projects  significantly  blow  their  budgets,  ex¬ 
ceed  their  schedules  or  fall  far  short  of  the  goals. 

In  an  effort  to  stem  that  tide  of  frustration,  the 
consortium,  a  130-member  alliance  of  users,  vendors, 
systems  integrators  aitd  academic  institutions  based 
in  Calgary,  Alberta,  this  spring  launched  the  Global 
Integration  Framework.  The  GIF  is  an  attempt  to 
codify  and  disseminate  best  practices  based  on  con¬ 
solidated  standards  and  to  provide  the  technical  sup¬ 
port  necessary  to  make  the  practkes  work. 

Standards  groups  perform  a  necessary  function, 
but  separate  groups  often  produce  warring  standards 
that  complicate  rather  than  stream- 
line  integration  projects,  says  IC 
President  fohn  Schmidt  is 
also  Best  Buy  Ca’s  leader  of  sys- 
terns  integration  and  middle^t^. 

The  need  for  a  more  effective, 
broad-based  approach  is  urgent 
because  all  those  f^ed  application 
integration  projects  add  up  to  plen- 
ty  of  wasted  money,  according  to 
1C  co-chairman  Michael  Kuhbodc. 

Indu^  studies  peg  the  cost  of 
application  im^ration  at  3S%  or 
more  of  ali  IT  project  costs,  which 
can  translate  into  SlOO  million  a 
year  for  big  companies,  says  Kuh- 
bock,  who  is  also  CEO  of  Ground- 
swell  Revolution  Inc,  an  integrator 
and  enterprise  application  integra- 
tion  consultancy  in  Calgary.  The  IC 
says  that  using  the  GIF  could  easily 
cut  the  application  integration  por- 
tion  of  total  IT  costs  in  half. 

There’s  a  price  beyond  dollars 
for  unsuccessful  integration  pioj- 
ects.  says  Schmidt  ’'When  the  busi¬ 
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chow  earned  three 
degrees  from  MIT. 
including  a  Ph.D.  in 
management.  He's  responsible  for  an 
IT  budget  of  S50  million  and  manages 
250  people  in  academic  and  adminis¬ 
trative  computing.  He’s  also  the  for- 
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age  Foliofn  Inc. 
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Tni  tieltTogf-neous  r*nvironnietit!i  you  ■•Hlwll* 

«nil  -ridry  f.ompdnw.  opeialt;  ui  ivill 
il'jiftr  only  'non;  n*;tt:")qertjou'j.  Aon't  liu  y'’ 


Wi'al  technical  bulutions  uDijld 
there  bn’’  '  • 


047894 


Mrr  Spawns  FF  Innowitions 


iQCi  CTSS  (Compatible  Time-Sharif>g  System):  MfTs  Project  MAC 

■  v\JI  develops  one  of  the  first  time-sharing  operating  systems  and 

one  of  the  first  to  allow  electi  onic  mail. 

1Qli7  mac  develops  the  successor  to  CTSS,  which 

■  vwf  becomes  the  first  high- availability  operatmg  system. 

1(17^  TCP/IP:  MTTs  David  («lark  and  a  team  from  the  Laboratory  for 
^  Convoter  Science  irnplemeirt  TCP/IP  for  PCs.  resoltj^ 
tremendous  growth  of  the  bitemet. 


IQ  /  /  RSA  algorithm:  MfT  msearchers  Ron  Rivest  Adi  Shamir  and 
l^f  f  Leonard  AdMnianinverrt  the  first  workable  pubik-key  crypto¬ 

graphic  system. 

1QQQ  Project  Athena;  MIT  deploys  a  large  network  of  engineering 
l^vKJ  w^rtetatkms,  inckiding  a  centralized  workstation  managem^ 

scheme  today  known  as  the  “network  PC."  the  Kerberos  au¬ 
thentication  system  and  the  X  Window  SyWem. 

IC^Q^^  World  Wide  Web:  MIT s  Laboratory  for  Computer  Science  forms 
and  hosts  the  Wwtd  Wide  Web  Consortium,  led  by  Tim  Berners- 
Lee.  inventor  of  the  Web. 

OQQQ  Project  Oxygen:  MIT  develops  technotogies  for  human-centered 
computing  and  communications. 

O  For  FTxxe  Ofi  MIT  lechnoioov  proiecls.  go  to  QuckLifiks  a4790  and  a4810  or  our  Web  site 


THE  PAPER  AND  INK  USED  IN  THE  ORIGINAL 
PUBLICATION  MAY  AFFECT  THE  QUALITY  OF 
THE  MICROFORM  EOmON, 
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rr  pragmatists  in  the  corporate  world 
wwuier  what  they  could  learn 
frxmt  the  eg^ieads  in  academia.  The  an¬ 
swer  is.  quite  a  lot  —  such  as  how  to  se¬ 
cure  systems /rom  all  sides  —  says 
MTTs  Jerry  Grodurw.  He  recently  told 
Coinputerworid’5  Gary  H.  Andies  how 
MIT  contributes  to  the  Jiiture  of  IT. 

Whil  his  MIT  don*  for  the  eomputar  vorU? 

Going  back  to  the  1960s.  Project  MAC 

—  which  I  woriied  on  as  a  grad  student 

—  developed  Mutiics,  which  spawned 
Unix.  The  principles  of  Multics  exist  in 
every  nujor  operating  system  today. 
MIT  was  one  of  the  leaders  in  Arpanet 
technology  and  the  invention  of 
TCP/IP.  Then  there's  Project  Athena 
from  the  t980s  that  develc^ed  Ker* 
beros,  a  security  protocol  that  Micro¬ 
soft.  Apple  and  Sun  use.  We  have  had 
some  interest  recently  in  our  informal 


Kerberos  alliance  from  a  number  of 
Wall  Street  firms. 

What’s  hippoiing  on  campus  now  that 
migM  hM  an  oHoct  on  IT  in  the  future? 
There’s  research  going  on  in  Internet 
protocols  beyond  TCP/IP.  We  may 
have  IP  forever,  but  there  may  be  dif¬ 
ferent  things  ridii^  on  top  of  it  beyond 
TCP  that  have  diftereot  characteristics 
for  very  low  latency,  which  is  a  big  is¬ 
sue  when  you  ship  big  data  around  the 
network.  We’ve  got  Dave  Clark,  who’s 
been  a  senior  researcher  for  many 
years  in  Internet  protocols. 

How  wH  MIT  deal  with  the  Mormation  ex¬ 
plosion?  We  are  in  the  process  of  up¬ 
grading  the  networic  backbone  on  cam¬ 
pus  from  a  gigabit  per  second  to 
lOGbit/sec..  the  h^hest  commercially 
viable  speed  at  this  point.  Physicists 
are  now  doing  experiments  sending  a 
half  terabyte  from  here  to  CERN  (in 
Geneva]  and  back  again  and  wanting  to 
do  it  in  near  real  time. 

What  lessons  might  the  corporate  world 
(haw  from  MIT?  We  are  the  ultimate 
in  the  heterogeneous  environment. 
Maybe  corporations  think  they  can  en¬ 
force  being  an  all-Microsoft  shop,  for 
example,  but  there  are  always  some 
Macs  around  and  always  some  Unix 
machines  around,  and  now,  of  course, 
there  are  a  lot  of  Linux  machines. 

So  how  havo  you  dealt  with  saeurily.  for  ex- 

tenpla?  Universities  are  not  places 
where  you  put  up  a  ftrewaU  on  the 
front  end  of  the  network  and  assume 
you  have  security.  Threats  are  as  likely 
to  come  from  the  inside  as  the  outside. 
We  have . . .  intrusion-detection  sys¬ 
tems  that,  interestingly,  point  both  | 
ways  —  outward  but  also  inward.  And 


that  is  what  major  corporations  are 
finding  they  need  to  do.  We  have 
adopted  security  structures  that  are 
more  application-based  and  role-based 
rather  than  firewall-based.  We  have 
Kerberos  security,  where  every  person 
on  campus  has  a  security  ID  that  is  rec¬ 
ognized  and  interrogated  by  each  appli¬ 
cation  in  a  consistent  way,  and  where 
people  have  different  roles  with  regard 
to  different  applications.  The  Roles  sys¬ 
tem  is  an  additional  capability  that  we 
developed  on  top  of  the  basic  Kerberos 
structure.  Several  other  universities 
have  expressed  interest  in  that.  CIOs 
also  are  looking  at  what  will  be  the 

next  generation  in  security  ar-  _ 

chitecture  that  will  protect  from 
the  inside  as  well  as  the  outside. 


that  work,  but  also  security  issues  and 
other  kinds  of  things.  We  have  to  look 
pretty  expansively  in  the  future  at  the 
kinds  of  computing  devices  people  are 
goii^  to  have  and  carry  around  and 
embed  in  their  clothes. 

H  sounds  Be  corporate  IT  win  have  to  have 
very  strict  standards.  Corporations  may 
be  able  to  say  everybody  will  have  the 
same  kind  of  computer  and  the  same 
operating  system,  but  arc  they  also 
telling  people  what  cell  phones  and 
PDAs  to  use?  When  computing  devices 
are  embedded  in  their  clothes,  will 
they  tell  them  how  to  dress? 


The  heteragerwous  artvironmenls  you 

andmanycompwiasoporateinwM  - 

grow  only  more  heterogeneous,  woni  they? 

I  don't  think  we  can  predict  which  de¬ 
vices  will  become  computing  devices 
and  which  kinds  of  services  they  will 
want.  I’m  wearing  a  new  Microsoft 
watch,  and  it  gets  a  sub-FM  band  trans¬ 
mission  of  weather,  sports,  news  and 
stock  market.  It  also  connects  via  the 
Internet  to  my  Outlook  calendar,  so 
when  my  secretary  makes  a  change  to 
my  calendar,  it  actually  shows  up  on 
my  watch.  That's  a  computing  device. 
There  are  technical  issues  to  making 


FUTURE 
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What  technical  solutions  could 
tharaba?  (MIT  is]  doii^  work 
vnth  a  variety  of  devices  and 

_  technologies,  such  as  RFID. 

to  allow  computing  environ¬ 
ments  to  change  based  on  who  is  pre¬ 
sent.  as  determined  by  their  ID  d^ice, 
which  might  be  embedded  in  their 
handheld  or  in  their  clothes.  For  exam¬ 
ple,  one  of  the  problems  with  the  cur¬ 
rent  [Microsoft]  watch  is  that  I  have  to 
go  to  a  Web  site  to  tell  it  when  I  am 
going  to  another  city  or  else  1  still  get 
the  weather  from  my  hometown.  Mak¬ 
ing  it  work  everywhere  automatically 
would  require  a  much  more  sophisti¬ 
cated  technology,  akin  to  the  current 
cellular  phone  system.  047BM 
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Laugh  at  your  jokes.  Loan  you  money.  Start  a  foundation 
in  your  memory  and  help  change  the  world. 

Yeah,  that's  what  friends  do. 


broadcasts  live  from  the  Cox  Classic  and  Don  Imus  will  be  participating  in  the  Imus  Teed  Off  Celebrity  Challenge 

2004  Honoraiy  Chairs:  Mark  Messi«’  and  Donald  J.  Tnuni 


Each  year  the  circle  of  friends  at  the  AT&T  Steven  A.  Cox 
Charity  Classic  keeps  growing.  After  losing  him  to  cancer 
^  in  1991,  friends  of  Steve  Cox  started  the  event  as  a  way 
to  remember  his  life  and  help  others  battling  the  disease. 

On  September  20th,  some  800  golfers  wiU  be  a  friend  of  Steve's, 
whether  they  knew  him  or  not,  by  raising  over  $700,000  in  the  fight  against  childhood 
cancer  and  sudden  infant  death.  Proving  real  friendship  has  no  limits.  To  join  over  150 
companies  as  a  corporate  sponsor,  visit  www.coxcharityclasslc.com 
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TP  Server  Offers 

B  B  ®  B  I  ^0**^5  from  the  public  can  be 

BBB^^BV  ■  directed  only  to  the  incoming 

BBBB^aBB  mJI  BB  Bfl  B^^  directory.  The  only  people 

who  can  upload  to  the  outgo* 


A  random  check  of  a  public  FTP  server 
turns  up  an  illegal  distribution  copy  of 
Windot^  By  Mathias  Thurman 

I  WAS  BATTLING  yet  aiwtber  i  a  file  that  contains  the  corn- 
worm  infestation  this  week  plete  image  of  a  CE>-ROM.  We 


■  when  it  came  to  my  atten¬ 
tion  that  our  FTP  server 
might  be  allowing  visitors  to 
download  illegal  copies  of 
Windows. 

As  for  the  worms,  we've  had 
one  after  another,  and  all  of 
them  so  far  have  taken  advan¬ 
tage  of  a  well-knowm  Win¬ 
dows  vulnerability  for  which 

Microsoft  has  already  - 

issued  a  patch.  Unfor-  npn-, 
cunately,  until  we  de- 
ploy  an  effective 
patch  management  WWW 
infrastructure  to  the  Jfll|||| 
entire  organization 
and  panition  off  net- 
work  segments  that  can't  be 
patched  In  a  timely  manner 
(specifically  our  engineering 
labs),  well  continue  to  have  to 
attend  to  these  outbreaks. 

Eventually.  I  hope  to  con¬ 
vince  upper  management  to  . 
support  my  proposed  patch 
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often  use  image  files  when 
transferring  CD  images  over 
the  (ncemet,  and  they  can  be 
used  to  make  software  distrib¬ 
utions  available  for  download. 

Once  you  have  the  .iso  im- 
age.  it’s  easy  to  restore  the  im¬ 
age  to  a  CD-ROM.  Doing  that 
with  the  cn-win2k-proiso  file 
would  essentially  create  a  pi- 

- rated  Windows  dis- 

gmy  trihution  CD-ROM. 

Ill  All  you  need  then  is 

ICVO  a  license  key  to  turn 

it  on.  Not  good. 
I^Q  I  walked  over  to 

_ the  offices  of  our 

Unix  FTP  server 
systems  administrators  and 
asked  one  of  them  to  log  on 
for  me.  Sure  enough,  the  file 
was  residing  in  the  outgoing 
directory.  Its  size,  at  about 
420MB.  matched  the  size  of  a 
Windowrs  2000  Professional 
distribution  copy.  The  pres- 


manageroent  and  network  seg-  cncc  of  such  an  image  could 


mentation  deployment.  But 
we're  so  busy  fighting  the 
worms  that  we've  had  little 
time  to  document  their  nega¬ 
tive  effects.  And  until  we  gath¬ 
er  some  meaningful  historical 
data,  it’s  difficult  to  build  a  de¬ 
cent  business  case. 

Piracy  Suspected 

This  week,  an  alarming  e-mail 
from  one  of  our  product  mar¬ 
keting  managers  also  took  up 
quite  a  bit  of  my  time.  He 
had  nocked  a  file  named  en- 
win2k-proiso  in  the  public, 
outgoing  directory  on  one 
of  our  file  transfer  protocol 
servers.  The  file  name  ap¬ 
peared  to  be  an  installation 
image  of  the  Windows  2000 
Prpfessiooal  operating  system. 

The  iso  extension  indicates 


get  my  company  into  hot  wa¬ 
ter  for  illegally  distributing 
Ikensed  software. 

The  public  could  freely 
download  the  image,  but  the 
FTP  server  was  configured  in 
such  a  way  that  external  users, 
who  access  the  server  as 
anonymous  users,  couldn’t 
have  uploaded  the  file.  Up- 


I  dkin't  expect  that 
this  was  the  work  of 
an  outside  hacker.... 
Most  iely,  this  was 
ansitemaljob. 


loads  from  the  public  can  be 
directed  only  to  the  incoming 
directory.  The  only  people 
who  can  upload  to  the  outgo¬ 
ing  directory  are  users  with 
valid  administrative  accounts 
on  the  server.  That  meant  that 
an  employee  or  hacker  had 
uploaded  the  image. 

Following  our  protocol  for 
such  incidents,  I  asked  the  ad¬ 
ministrator  to  create  an  image 
of  the  entire  file  system  in 
order  to  preserve  the  state  of 
the  server  before  we  started 
changing  things.  1  didn’t  ex¬ 
pect  that  this  was  the  work  of 
an  outside  hacker,  since  our 
FTP  server  configuration  and 
the  firewall  rules  protecting  it 
are  pretty  strong.  Most  likely, 
this  was  an  internal  fob. 

Tracing  the  User 

With  the  image  complete,  I 
asked  the  administrator  to 
move  the  .iso  image  to  a  non- 
public  directory.  Then  I  asked 
for  the  FTP  tracer  logs  and 
read  this:  20040601/fip. 
mycompaiTy.com/icfer. 
2004060I.203Idl  \  S//pub// 
outgoing/en-Mnn2k'pro.iso, 
support.  192J6&5J2J..  OK. 

(Dn  June  1.  an  internal  user 
originating  from  [p  address 
192.168.SJ21  uploaded  the  en- 
win2k-praiso  image  to  the 
outgoing  directory  using  a 
common  internal  ‘’support’’ 
account.  This  account  is 
shared  by  many  administra¬ 
tors  and  technical  support 
people,  who  use  it  to  upload 
product  updates  and  customer 
data.  To  find  the  user,  wc  had 
to  trace  the  TP  address. 

With  that  information  in 
hand.  1  went  to  the  Windows 
help  desk  manager  and  had 
him  pull  up  the  server  logs  to 
see  which  user  was  assigned 
the  192.168.5.121  address  on 
that  day. 

Unfortunately,  he  had  to 
pull  the  logs  from  backup 
archives  because  we  use  dy¬ 
namic  addressing,  and  the 
addresses  had  been  renewed 
since  June  L  In  many  cases, 
users  retain  the  <am«»  ip  ad¬ 
dresses  after  they  expire.  But 


we  had  to  be  sure  of  who  held 
the  address  in  question.  It 
took  a  few  hours  to  properly 
restore  the  log  file  for  the  pre¬ 
vious  month,  but  we  were  abh 
to  obtain  it. 

User  “jkeaton”  (not  his  real 
name)  had  been  issued  that 
address  on  May  10.  Since  ad¬ 
dresses  don’t  expire  for  30 
days,  1  could  safely  assume 
that  jkeaton  was  the  user 
I  was  looking  for.  I  then 
searched  our  employee  data¬ 
base  and  came  up  with  only 
one  person  with  the  last  name 
Keaton.  He  works  as  a  help 
desk  technician  on  the  swing 
shift.  That  made  sense,  since 
the  file  had  originally  been 
uploaded  at  830  pm. 

I  was  almost  ready  to  call 
human  resources.  But  before 
doing  so,  I  wanted  to  be  ab¬ 
solutely  sure  that  Jkeaton  had 
been  assigned  the  IP  address 
on  June  1.  so  1  had  our  Snort 
intrusion-detection  systems 
administrator  puli  the  IDS 
logs  for  June  1  and  search  for 
the  suspect  IP  address. 

I  didn't  need  to  be  a  Snort 
guru  to  see  the  date  of  the  in¬ 
cident  and  the  username  and 
IP  address  within  the  long 
string  of  output  text  But  there 
was  still  one  last  detail  Was 
the  file  in  question  truly  a 
Windows  distribution  image? 

I  restored  the  .iso  ima^  to  a 
CD-ROM  to  be  sure.  It  was 
indeed  an  illkit  copy  of  Win¬ 
dows  2(X>0  Professional,  but 
fortunately,  it  wasn't  bound 
to  our  license  key. 

Nonetheless,  it’s  still  illegal 
to  distribute  this  software. 

Now  IVe  given  all  this  in¬ 
formation  to  HR.  It's  up  to 
them  to  talk  to  the  employee 
to  see  what  his  intentions 
were.  Maybe  hell  get  hts  hand 
slapped,  or  maybe  they'll  let 
him  go.  Either  way.  I'm  sure  he 
won’t  do  it  again.  And  Pm  re¬ 
lieved  to  know  that  it  wasn't 
the  worit  of  a  backer.  I 

NUTNYIITHi? 

Ihsweafc'siourrvIsvirinmbyBrealsecun- 
^manager. '14athia5  Pwinan.*  whose 
nanw  and  employer  hm  been  degu^  lor 
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AT&T  Launches 
UMTS  Data  Service 

Arar  Winlan  Svvicn  Inc.  In 
Rxtoiond.  Wnti.,  last  waali  In- 
Iroducad  a  Ngh.s|]asd  cdMar 
<laU  sanlca  that  opanta  at 
avaads  of  220K  to  32(IKblt/iac. 
ThocompanyioMoiittliaaar- 
vlca  in  Ootnilt,  San  Franclsca 
and  SaatSa  and  plans  to  daploy 
d  In  Dabs  and  San  (Sago  by  the 
and  of  this  year.  Tho  sarvica. 
nhkh  Is  baaad  on  the  Uidvsfsal 
Mobila  Telacofnmunlcations 
System  slandaid.  Is  priced  at 
S79.B9  for  uidbidtad  data. 

Uaara  wW  naod  to  pundiaaa  a 
Morfin  520  PC  card,  davafopad 
by  Ucanl  Tachnologies  Inc. 
and  NtmaM  Wboloss  bK..  for 
SU9.99. 


PBopleSoft  Updates 
Supplier  Offering 

fbiplaSolt  he.  In  Pbaaanton. 
CaM„  has  uptpadod  its  a.liro- 
ciiramonl  appicallon  by  prmM- 
Ing  otjl.pf^ha-bos  conoactrrity 
lothoindapsndantaappaornst- 
anrii  ollatid  by  Lia's  Stanmit. 
NJ..baiad  Mict  Commarca 
bic.  Psrfact  Commaica  Open 
Suppler  Nansoik  Connact  for 
f^opfaSoO  ahM  tapIsSoft 
customars  to  M  la  op  In  IMMO 
supplorsandniarathan2lma- 
■onsloch-haapintunilsofcan- 

bnnHsae^iManwy. 


Tandberg  Releases 
SIP-based  Products 

iMdbirg  be.  Mrtar  iMimonlh 
announMd  tti  UXP  toehnalogy 
for  impnMing  vfdM  Md  MMlo 
quilly  Hid  celiteration  aUMas 
in  tevUioeanfiraneino  produda. 
lOPiibMMionlhnSnHianM- 
tedon  Pretoed  and  «di  lin  uMd 
to  thrw  iww  pnducb  «  wil  M 
th*  Mow  Wi  bnnnd  campany's 
oMinB  ofhrinp.  Tht  IhMtn 
UP.  priBid  d  $25,490.  Md  Iht 
60O0IIXP.priMdd$«.9e0. 
are  dndimd  to  bn  OMd  in  Ivgi 
tonhrenearenwiandhenrd 
raoini,  and  flit  9000  MXP. 
prteadatSBsSOO.IitoruMbi  I 
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ROBERT  L.  MITCHELL 

Get  Ready  for  E-cycling 


Last  week,  Hewlett-Packard  and  Dell  dis¬ 
covered  a  new  competitive  weapon  in  the  PC 
wars:  Both  of  the  h^dware  vendors  launched 
recycling  promotions  for  obsolete  comput¬ 
ers  and  other  electronic  equipment.  One  can 
t^e  the  cynical  view  that  these  well-publicized  initia¬ 
tives  are  simply  an  attempt  by  each  company  to  gain 
market  share  by  “out-greening"  the  other.  But  they’re 


aiso  a  response  to  the  small 
but  growing  awareness  of 
e-waste’s  potential  toxicity 
and  the  need  for  more  re¬ 
sponsible  disposal  practices. 

Electronic  equipment  of¬ 
ten  contains  toxic  metals, 
fire  retardants  and  other 
carcinogenic  substances 
that  can  pollute  the  air  and 
water  when  sent  to  landfills 
or  incinerated  [Quickliok 
43804 J.  Yet  many  business¬ 
es  and  consumers  continue 
to  simply  throw  out  unwanted  equip¬ 
ment.  Gartner  analyst  Frances  O’Brien 
calls  business  ignorance  about  e-waste 
the  "single  largest  problem  for  the  in¬ 
dustry." 

As  public  perception  of  the  problem 
continues  to  rise,  however,  vendor 
practices  are  facing  increasing  scrutiny 
by  activist  groups.  By  taking  the  lead  on 
recycling  prt^rams,  PC  makers  hope 
to  head  off  further  negative  publicity. 
And  corporate  ITs  disposal  practices 
are  also  likely  to  come  under  scrutiny. 

Both  Dell's  and  HP’s  new  programs 
take  aim  at  consumers  and  small-busi¬ 
ness  users.  Dell’s  program  lets  con¬ 
sumers  who  buy  new  PCs  return  their 
old  systems  for  recycling  at  no  charge. 
After  receiving  a  new  system,  the  cus¬ 
tomer  sin^>ly  packs  the  old  one  in  the 
same  box  and  ships  it  back.  Mean¬ 
while,  HP  announced  a  joint  program 
with  Office  Depot.  Customers  can 
drop  off  almost  any  dectronics  item  at 
one  of  the  retailer’s  850  stores.  Office 
Depot  will  collect  aaid  ship  the  equip¬ 
ment  to  one  of  two  HP-owned  recy¬ 
cling  Acuities  for  free. 


Both  programs  are 
short-term  promotions. 
HP’s  offer  ends  Sept.  6. 
and  Dell  says  its  program 
will  run  for  a  "limited 
time."  Both  vendors  typi¬ 
cally  charge  $15  to  S46 
to  recycle  computer  equip¬ 
ment. 

One  reason  for  running 
these  programs  is  to  help 
jump-start  the  e-waste  re¬ 
cycling  market.  Ultimately, 
vendors  hope  to  increase 
the  supply  of  recyclable  materials  and 
create  demand  for  recycled  content  by 
incorporating  it  into  new  products. 

"It's  about  helping  develop  the  infra¬ 
structure  to  facilitate  recycling,"  says 
Walt  Rosenberg,  a  vice  president  at 
HP.  And  that  would  benefit  businesses 
as  well  as  consumers. 

Currently,  the  nascent  e-wasfe  recy¬ 
cling  market  is  dominated  by  small,  re¬ 
gional  vendors.  Since  shipping  equip¬ 
ment  is  expensive,  large  companies 
that  want  to  recycle  often  must  woric 
with  different  local  vendors  at  each  of 
their  branch  offices.  Increased  de¬ 
mand  should  encourage  larger  players 
capdile  of  servicing  every  location  to 
enter  the  market. 

Free  promotions  to  consumers  are 
good  publicity  for  PC  vendors,  but 
for  corporate  IT,  cost  remains  the  b'^ 
barrier  Spending  an  average  of  $30 
per  unit  to  pn^>erly  dispose  of  UXK) 

PCs  —  a  process  that  typically  in¬ 
cludes  wiping  the  hard  disk,  providing 
a  documented  chain  of  custody 
shipping  —  lo(^  pretty  steep  when 
compared  with  the  cost  of  a  30-yard 


I  E>umpster.  As  recycling  technology 
I  and  eco-friendly  product  designs 
I  improve,  however,  those  costs  could 
I  godowa 

But  the  real  problem  is  that  busi¬ 
nesses  underestimate  the  risks  of  im¬ 
proper  disposal.  By  placing  recycling 
front  and  center.  HP,  Dell  and  others 
arc  educating  the  public  about  the 
problem.  TTiat  increased  awareness 
will  also  heighten  the  risk  of  negative 
publicity  when  equipment  that  has 
been  inappropriately  discarded  is 
traced  back  to  a  business.  Organiza¬ 
tions  lacking  a  clear  end-of-life  equip¬ 
ment  strategy  will  ftice  stiff  fines  as 
the  confusing  patchworic  of  restrictive 
state  regulations  expands.  But  the  real 
damage  may  be  to  a  company’s  reputa¬ 
tion  and  brands. 

On  the  positive  side,  the  publicity 
from  recycling  initiatives  is  also  likely 
to  increase  top  corporate  manage¬ 
ment’s  understanding  of  the  problem 
~  and  the  true  value  of  establishing 
proper  disposal  practices.  In  some 
cases.  IT  managers  might  even  get  a 
call  from  the  CEO  asking  what  the 
company  is  doing  with  its  equipmenL 
Bui  don't  count  on  it  just  ycL 

HP  includes  computer  take-back 
'  programs,  when  asked,  in  customer 
RFPs.  In  the  first  six  months  of  this 
year,  the  total  value  of  RFPs  that  in¬ 
cluded  social  or  environmental  re¬ 
quirements  amounted  to  $3  billion  — 
about  what  HP  received  for  all  of  2003. 
But  much  of  that  came  from  compa¬ 
nies  in  Europe,  with  U.S.  businesses 
far  behind.  Still,  Rosenberg  says, 

*Ve*ve  seen  interest  on  the  corporate 
side  increase  dramatically.  TXvo  years 
ago.  that  wasn't  even  measurable." 

The  day  is  coining  when  throwing 
e-waste  in  landfills  will  sound  as 
strange  as  allowing  smoking  on  air¬ 
planes.  IT  organizations  will  need  to 
decide  soon  vriietber  they  want  to  get 
in  ftont  of  the  trend,  or  follow  it  and 
risk  becoming  an  example.  O  48235 

WMTimniN? 

OFv  Roe  colam  Me  ID  ou  go  to 


Are  You  Annoying? 

Everyone  is  annoying  at  times,  ^  '' 
and  IT  workers  have  their  share 
of  irritating  behaviors.  But  letting 
your  conduct  run  amok  can  wreak 
havoc  in  the  workplace  and  even 
derail  your  career.  Page  34  ^ 


MUUIIEMENT 


Career  Watch 

How  to  dig  out  from  an  IT 
infrastructure  disaster:  big 
bonuses  for  information  sys¬ 
tems  directors;  and  where  com¬ 
panies  are  putting  their  software 
dollars  in  2004.  Page  38 


OPINION 

Turning  Around  the  Hard  Case 

Discouraged  by  subpar  employees 
who  just  don’t  seem  to  care?  Don't 
despair,  says  consultant  Sue  Young. 

It  may  be  easier  than  you  think  to 
motivate  them.  Page  38 
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i  Smart  CIOs  are  turning 
!  business  executives 
from  potential  adver¬ 
saries  into  staunch  allies. 

By  Mary  Brandel 


EDUCATING 

YOUR^'%i 


John  Wade  was  bus>-  this  past  May.  lining 
up  his  ducks  for  St  Luke’s  Health  System 
Inc.’s  annual  planning  meeting.  For  the  second  year 
in  a  row,  the  senior-level  executives  at  the  health 
care  facility  in  Kansas  City.  Ma.  would  be  gathering 
for  a  half  day  to  set  business  goals  for  the  coming 
year  and  determine  how  those  agreed-upon  objec¬ 
tives  would  realign  technolt^  priorities. 

Wade  would  be  attending  less  as  a  strategist  how¬ 
ever.  than  as  an  educator.  “I  need  to  give  the  manage¬ 
ment  team  some  appreciation  for  what  can  and  can’t 
be  done  with  technology  today,”  he  says.  Wade’s  real¬ 
ity  checks  would  include  telling  his  colleagues  what's 
possible  with  radio  frequency  identifkation  and 
whether  voice  recognition  technology  is  affordable. 
’’The  idea  of  physicians  walking  down  a  hallwa>'  and 
havii^  their  conversation  instantly  transformed  into 
a  medical  record  —  that  ain’t  going  to  happen  any¬ 
time  soon,"  he  says.  Wade  even  invited  an  outside 
consultant  to  help  him  with  his  presentation. 

CIOs  have  always  played  a  role  in  educating  non¬ 
technical  managers.  But  today,  with  titter  budgets, 
tougher  questions,  a  demand  for  guaranteed  return 
on  investment  and  CXOs  wlio  know  enough  about 
technology  to  be  dai^rous.  smart  CIOs  are  turning 
the  tables  by  creating  stronger,  more  knowledgeable 
advocates  out  of  potentially  distrustful  adversaries. 
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nt  !.•  ivhinj:  rule  iiic-ludcN  i-wruhini:  t'rum  .iilvis- 
XOum.MK'w  tcchni'lopv  l«'r  •air.itc^k- ,tj\an- 
•  .vr  .iiij  cvpbinin^  tth\  an  oUit  iiu'ra'atriuiurc 

ru  rjs  a  rotroxh  to  adding  lcchn\«lo>:y  roalitios  lo  .1 
buMnoss  Jisoussittn. 

\nJ  educating  tkXOs  is  (.‘ssoniial.  gnon  a  rivoni 
’n.'nJ  obscr\  L'd  lohn  t  ut/.  ^  iev  presidom  ol'on- 
-Icmand  sales  at  IHM  More  (  ,\t  »>  are  sittinji  along¬ 
side  i;U)s  at  eustomor  hriefines.  he  s.n  s.  •‘I  he\  n- 
mst  Jiflereni  kinds  .i|\ats  than  the  pre\  lous  I'enera- 
tion  -  not  as  irslimidaleJ  b\  ieehno!.»e\."  1  iit/  s.i\s 


Hut  don  I  start  passing  iiut  the  p<‘ekei  proteeiors 
Ss'nior  exeeutiNes  still  don't  want  ti*  hear  about  the 
rel.iti%e  nieritM'l  Net \ersus  t  or  even  tablets 
» iTsus  handhelds.  •  It's  not  a  teehnolojix  eonx  ersa- 
fton:  It  s  ,1  soliiii.in  eonxersaitott,'  saxs  Sieei  Iluehes. 
head  oi  business  eonsultini:  at  i  ompass  Manajte- 
menr  i.onsult.ine\  int'hteaeo 
Jt'v.H)  want  to  tntroduee  Web  si-rx  kes  into  > our 
ontpanx.  tiU  insfanee.  11  xx»*uld  be  better  to  talk 
ibout  hoxx  mli-uraiinu  general  ksJiter  and  aeeounfs 
p.ixabii  sv  stems  will  result  in  an  invoice- pros essin>: 
iX-x  environment  than  to  diseuss  stv-M»or  NMI. 

Hiai  s  xvhai  the  i  bt'  needs  t«i  kiuwx."  Hughes  s.i\s. 
Or.  as  Wade  puts  it.  If  I'm  ail  executive,  xvh.it  are 

the  thisj>:s  I  need  to  knoxx.  xxuh»>ut  be- _ 

eomm)j  j  propeller  head,  to  better  run 
mv  business'"  That  informatitin  results 
in  a  better  .»ppreciati»tn  •it  xx  hat  11'  is  up 
.ij:ainsi.  in  terms  of  both  iwhnoUv^y  and 
liindmi;  levels,  "You  want  the  man.ige- 
ment  team  in  k»ek  step  rather  than  let- 
einjt  the  M  jtuv  explain  .ixxav  the  budget 
xvhen  people  start  to  grouse."  Wade  says. 

A  crucial  pan  of  the  CIO’s  h»b  is  un¬ 
derstanding  what  <  :XOs  need  to  km»w  1 
and  the  best  wax  to  teach  them.  .And  ' 
there’s  no  one-si/e-ilts-all  ansxver. 
says  Rxsb  Tabb,  CIO  at  F.etilab  Ine..  a  I 
S.<  biJlion-plus  developer  of  eleaning 
and  repair  products  in  Si.  Paul.  Minn. 

When  Tabb  xxanis  to  help  C-!evel  execs  under- 
•tand.  fx>r  example,  how  mobile  technology  s'ould  im¬ 
prove  pnvJuctiviiy  and  customer  serx  kv.  as  well  as 
the  technology’s  costs,  capabilities  and  deployment 
.  ch.i;ienge-s.  he  uses  b»»ih  formal  and  informal  com¬ 
munications.  The  informal  venues  are  at  least  xs  im¬ 
portant  as  the  lormal  ones.  In  addition  lo  business 
advisor)-  board  and  setmu  man.agement  council 
meetings.  Tabb  loi»ks  for  oppxirtunities  at  business 
lunchv's  .ind  I'uesdax  mxxrning  coffees  held  for  senior 
executives.  "CItis  have  to  be  extremely  sensitive 
jb»>ui  whai  all  the  opponunities  are."  he  says. 

Tabh  finds  most  t aNIK  want  tt»  go  one  level  deeper 
than  the  1  me  at  xx  hk  h  they  operate  day  to  Jay.  h»r  in¬ 
stance.  h»>W'  sl.iMe  is  the  'echnology  ?  How  easy  is  it 
to  use?  What  is  its  expected  life  span,  and  w  ill  there 
be  cost  escalatmns  oxer  time? 

i  )ne-on-nne  conversatt<-r  *  the  colfees  are  par- 
ticuiarlx  effectixe  for  freeix  evpi.  riug  potenii.>tK 
'hreatening  subiects.  Tabb  says.  You  have  it»  think  of 
It  as  a  campaign.”  he  explaias.  "You  has  e  m  end  state 
■-'•u  re  trying  m  get  to.  and  you  think.  Ho-.x  »m  I  go¬ 
ing  to  educate  this  group  of  executives  to  gv  1  them  to 
1  ^  ommx»n  point  of  understanding  over  lime*’  ’’ 


As  a  CIO. 

I  always  have 
an  agenda. 
You're  crazy 
if  you  don’t. 


I  h.it's  XX  In  l.ibb  .iKxaxs  has  a  li.st  in  his  head  of 
people  to  •  onl.iel  and  isNUi-s  to  discuss,  whether  xiver 
coflee  or  kiiieh  or  .11 .1  meeting.  ’’.As  a  (dO.  1  alwavs 
h.iv  e  an  .igeiida  Voii’rc  erj/\  if  you  don't."  he  says. 

Intiiriii.il  conversations  are  alsv>  a  g«iod  opportuni- 
IV  tort'  level  executives  to  ask  questi«>ns  they  other- 
n  ISO  vvoiildn  t-  ’Yiiu  can't  teach  the  CKO  in  .i  way 
ih.ii  vxonIJ  be  embarrassing, "  s.iys  Iknig  Ne.il,  .i  re- 
se.irch  fellow  .11  (  •imputer  Sciences  (airp.'s  Research 
.ind  -Advisorv  Serviivs  in  FI  Segundo.  Calif.  "You  can 
.ilso  i.tkc  their  personal  assistant  aside  and  make  sure 
they  kniuv  more  th.ni  the  boss  Joes  so  they  can  an- 
sxver  some  of  the  (  M  *'s  questions." 


''onietiities  the  most  important  thing  to  teach  is  not 
technology  hut  the  complexities  of  managing  tech¬ 
nology  projects  "Vnior  execiilives  don’t  have  a  gut 
Icelitig  fi»r  how  hard  this  is."  s.iys  lelTW’iseman.  vice 
presiJetu  and  *»ffieer  for  technology  and  informatics 
,it  1  -Kus  l’harmaceulic.ils  Inc.  in  Blue  Bell,  P.i.  "When 
you  ask  them  for  S.'  millitm  for  a  project,  they  haw 
no  context  for  say  ing.  ’  I'hat's  reasonable:  let's  do  it.'  ’’ 
Rob  .Austin,  a  fellow  at  t-aiHer  Consort iuni  in  .Ar- 
lingtim.  Mass.,  suggests  the  visual  approach  of  writ¬ 
ing  down  all  yxmr  current  I  T  projects  sticky  notes 
and  posting  them  on  a  conference  room  wall.  When 
a  customer  comes  up  with  an  urgent 
problem,  you  add  it  to  the  wall  but  als*) 
remove  one  of  the  sticky  notes.  "It's  a 
painfully  obvious  wax  of  showing  them 
th.it  the  project  you  were  working  on 
isn’t  going  t«'  get  done."  he  says. 


Sometimes  the  best  way  to  gel  the  atten¬ 
tion  of  C-level  executives  is  u>  take  them 
off-site.  Getting  away  can  have  a  mind- 
brxiadening  effect  with  hands-on  appeal. 
When  Wade  wanted  to  educate  the  chief 
medical  xifficer  at  St.  Luke's  on  remote 
heart-mx*nitoring  icchnolixgy  several 
years  agt\  he  took  him  to  a  pilot  site  to 
see  the  technology  at  work.  "It  got  him  to  the  point 
where  he  said.  ’ITiis  is  a‘aL'  "  VV’aJe  says. 

.Another  good  reality  chi*ck  is  to  bring  end  users 
into  the  picture.  Ben  Harris,  deputy  secretary  of  op¬ 
erations  and  technology  at  the  Florida  department  of 
('hildren  and  Families,  recently  wanted  to  use  Web 
services  to  integrate  data  from  disparate  mainframe 
systems.  A  demo  shoxx'cd  the  CEO  how  much  value 
would  be  gained  from  adopting  Web  services,  but  the 
testimxmy  of  end  users  sealed  the  deal.  Harris  says. 
"Do  the  high-level  education  on  the  technology  side, 
but  make  the  end  user  sell  it.”  be  says. 

In  the  end,  says  Bart  Perkin.s.  managing  partner  at 
Leverage  Partners  Ine.  in  Louisville.  Ky..  and  a  Com- 
pufenvor/d  columnist.  IT  isn't  a  spectator  sport,  and 
the  best  participants  are  educated.  "There  are  those 
who  say.  ’You  fix  it:  call  me  xvhen  it’s  done.’  and  th«»se 
guys  end  up  K-ing  unhappy  xx  ith  the  results."  he  says. 
"You  have  to  K-  pan  of  the  team  that’s  doing  IT.  be¬ 
cause  it's  changing  the  business."  O  47887 

Wnmdef  i.su  Cximputerworldconifibtjftngxi'rifer 
in  CruniiRupiii.v.Mi'ch.  A'oucian  ivinract  her  uf 
marv  brundel  a  comcu.sr.nef . 


A 

Syllabus 

Educating  your  CXO  is  'incredibly  important.” 
says  Mark  Jeffery,  assistant  professor 
at  Ihe  Kellogg  School  of  Management  at 
Northwestern  University.  His  MBA  class,  called 
'Enterprise  Technology  for  General  Man¬ 
agers.”  aims  to  give  tx^ness  executives 
enough  technotogy  smarts  to  "not  shoot  them¬ 
selves  in  the  foot.'  he  says.  They  really  do 
need  to  have  a  due.' 

HIS  BASIC  SYLLABUS  FOR 
THE  EDUCATED  CXO: 

What  can  happen  H  you  don*t 
nxanage  technology  well.  The  cl^ 

hears  stories  like  this:  In  1999.  Hershey  Foods 
Corp.  went  live  with  an  B^ORM/supply 
chain  system  the  month  before  Halkw^. 

The  system  failed,  crippting  sales  and  causing 
a  35%  stock  hit  [Qui^nk  a4780} 

The  language  of  technology. 

They're  not  going  to  be  Java  programmers, 
but  they  need  lo  kriow  what  barKfwidth  6:  not 
how  a  nehwork  works  but  enough  to  under¬ 
stand  why  you  need  one;  and  why  the  invest¬ 
ment  in  infrastnicture  is  so  incredibly  impor¬ 
tant  to  the  cornpetitivBness  of  the  frrrn.*  says 
Jeffery. 

CorporatewWe  ^rstems  like 
ERP  and  CRM:  The  dass  learns 
they  are.  xdiat  they  do  and  that  they  are  “very, 
very  complicated.' he  says. 

Why  eXOs  need  risk  manage¬ 
ment  skills.  Sinoe  72%  of  targe  profeds 
arelate.overbudQetordontdeliverartfdpat' 
ed  vdue.  Jeffery  says.  If  you're  a  sponsor  of  a 
project  you've  got  a  28%  chaKe  of  success. 
Thai's  why.' 

What  can  happen  If  you  botch 
eeourtty.  When  Tte  Bank  (rf  New  \brk 
Ga  s  dab  center  and  piimaiy  badtip  center 
were  wiped  out  on  9/T1.  the  batik's  secondary 
backup  center  in  New  Jersey  MSS  oven 
whelmed.  It  coukkil  process  transactions, 
and  Ns  stock  took  a  beabna' he  says.  Th^ 
need  to  learn  the  liTiportance  of  redundarKY 

Technology  trends  such  as  Web 
services.  }ML  data  warehousino  arid  analytic 
CRM.  They  need  lo  understand  how  those 
trench  wiH  impact  managernent  decisions.' 
Jeffery  says. 

‘  K^hleen  Mefymuka 


The  teaching  role  includes  everything  from  advis¬ 
ing  CXOs  on  a  new  technology  for  strategic  advan¬ 
tage  and  explaining  why  an  older  infrastructure 
needs  a  refresh  to  adding  technology  realities  to  a 
business  discussion. 

And  educating  CXOs  is  essential  given  a  recent 
trend  observed  by  John  Luta.  vice  president  of  on- 
demand  sales  at  IBM.  More  CXOs  are  sitting  along¬ 
side  CIOs  at  customer  briefings,  he  says.  "They’re 
just  different  kinds  of  cats  than  the  previous  genera¬ 
tion  —  not  as  intimidated  by  technology."  Lutz  says. 

Nerdville  It’s  Not 

But  don't  start  passing  out  the  pocket  protectors. 
Slenior  executives  still  don't  want  to  hear  about  the 
relative  merits  of  .Net  versus  J2EE  or  even  tablets 
versus  handhelds.  "It’s  not  a  technology  conversa¬ 
tion:  it’s  a  solution  conversation,"  says  Nigel  Hughes, 
head  of  business  consulting  at  Compass  Manage¬ 
ment  Consultancy  in  Chicago. 

If  you  want  to  introduce  Web  services  into  your 
company,  for  instance,  it  would  be  better  to  talk 
about  how  integrating  general  ledger  and  accounts 
payable  systems  will  result  in  an  invoice-processing- 
free  environment  than  to  discuss  SOAP  or  XML. 
That’s  what  the  CEO  needs  to  know."  Hughes  says. 

Or.  as  Wade  puts  it,  "If  I'm  an  executive,  what  are 
the  things  I  ne^  to  know,  without  be¬ 
coming  a  propeller  bead,  to  better  run 
my  businessr  That  information  results 
in  a  better  appreciation  of  what  IT  is  up 
against,  in  terms  of  both  technology  and 
binding  levels.  "You  want  the  manage¬ 
ment  team  in  lock  step  rather  than  let¬ 
ting  the  IT  guy  explain  away  the  budget 
when  people  start  to  grouse,"  Wade  says. 

A  crucl^  part  of  the  CIO’s  job  is  un¬ 
derstanding  what  CXOs  need  to  know 
and  the  best  way  to  teach  them.  And 
there's  no  one-size-fits-all  answer, 
says  Rob  Tabb,  CIO  at  Ecolab  lnc„  a 
S3  biOion-plus  developer  of  cleaning 
and  repair  products  in  St.  Paul.  Minn. 

When  Tabb  wants  to  help  C-level  execs  under¬ 
stand.  for  example,  how  mobile  technology  could  in>- 
prove  productivity  and  customer  service,  as  well  as 
the  technology's  costs,  capabilities  and  deployment 
challenges,  be  uses  both  formal  and  informal  com¬ 
munications.  The  informal  venues  are  at  least  as  im¬ 
portant  as  the  formal  ones.  In  addition  to  business 
advisory  board  and  senior  management  council 
meetings,  Tabb  looks  for  opportunities  at  business 
lunches  and  Tuesday  rooming  coffees  held  for  senior 
executives.  "CIOs  have  to  be  extremely  sensitive 
about  what  all  the  opportunities  are,”  he  says. 

Tabb  finds  most  CXOs  want  to  go  one  level  deeper 
than  the  one  at  which  they  operate  day  to  day.  For  in¬ 
stance,  how  stable  is  the  technology?  How  easy  is  it 
to  use?  What  is  its  expected  life  span,  and  will  there 
be  cost  escalations  over  time? 

One-on-one  conversations  at  the  coffees  are  par¬ 
ticularly  effective  for  freely  explorii^  potentially 
threatening  subjects,  Tabb  says.  "You  have  to  think  of 
h  as  a  campaign,"  he  explains.  "You  have  an  end  state 
you're  trying  to  get  to.  and  you  think.  ‘How  am  I  go¬ 
ing  to  educate  this  group  of  executives  to  get  them  to 
a  common  pcdnt  of  understanding  over  time?' " 


That’s  why  Tabb  always  has  a  list  in  his  head  of 
people  to  contact  and  issues  to  discuss,  whether  over 
coffee  or  lunch  or  at  a  meeting.  "As  a  CIO.  I  always 
have  an  agenda.  You’re  crazy  if  you  don't."  he  says. 

Informal  conversations  are  also  a  good  opportuni¬ 
ty  for  C-level  executives  to  ask  questions  they  other¬ 
wise  wouldn't.  "You  can't  teach  the  CEO  in  a  way 
that  would  be  embarrassing."  says  Doug  Neal,  a  re¬ 
search  fellow  at  Computer  Sciences  Corp.’s  Research 
and  Advisory  Services  in  EJ  Segundo.  Calif  Tbu  can 
also  take  their  personal  assistant  aside  and  make  sure 
they  know.'  more  than  the  boss  does  so  they  can  an¬ 
swer  some  of  the  CEO’s  questions." 

It’s  Not  Easy  Being  IT 

Sometimes  the  most  important  thing  to  teach  is  not 
technology  but  the  complexities  of  managing  tech¬ 
nology  projects.  “Senior  executives  don’t  have  a  gut 
feeling  for  how  hard  this  is,"  says  Jeff  Wiseman,  vice 
president  and  officer  for  technolc^  and  informatics 
at  Locus  Wiannaceuticals  Inc.  in  Blue  BeU.  Pa.  “When 
you  ask  them  for  S3  million  for  a  project,  they  have 
no  context  for  saying.  That’s  reasonable;  let’s  do  it.’ " 

Rob  Austin,  a  fellow  at  Cutter  Consortium  in  Ar¬ 
lington,  Mass.,  suggests  the  visual  approach  of  writ¬ 
ing  down  all  your  current  IT  projects  on  sticky  notes 
and  posting  them  on  a  conference  room  svalL  When 
a  customer  comes  up  with  an  urgent 
problem,  you  add  it  to  the  wall  but  also 
remove  one  of  the  sticky  notes.  "It's  a 
painfriUy  obvious  way  of  showing  them 
that  the  project  you  were  working  on 
isn’t  going  to  get  done,"  he  says. 

Keep  It  Real 

Sometimes  the  best  way  to  get  the  atten¬ 
tion  of  C-Ievel  executives  b  to  take  them 
off-sfte.  Getting  away  can  have  a  mind- 
broadenii^  effect  wtith  hands-on  appeal 
When  Wade  wanted  to  educate  the  chief 
medical  officer  at  St  Luke's  on  remote 
heart-monitoring  technology  several 
years  ago,  be  took  him  to  a  pilot  site  to 
see  the  technology  at  work.  “It  got  him  to  the  point 
where  he  said.  This  is  real'  “  Wade  says. 

Another  good  reality  check  Is  to  bring  end  users 
into  the  picture.  Ben  Harris,  deputy  secretary  of  op¬ 
erations  and  technology  at  the  Florida  Department  of 
Children  and  Families,  recently  wanted  to  use  Web 
services  to  integrate  data  from  disparate  mainframe 
systems.  A  demo  showed  the  CEO  how  much  value 
would  be  gained  from  adopting  Web  services,  but  the 
testimony  of  end  users  sealed  the  deal  Harris  says. 
"Do  the  hi^level  education  on  the  technology  side, 
but  make  the  end  user  sell  it."  be  says. 

In  the  end.  says  Bart  Perkins,  managing  partner  at 
Leverage  Partners  Inc.  in  Louisville,  Ky.,  a  Com- 
puferworld  columnist.  IT  isn't  a  spectator  sport,  and 
the  best  participants  are  educated.  There  are  those 
who  say,  Tou  fix  it:  call  me  when  it’s  done,'  and  those 
guys  end  up  being  unhappy  with  the  results,"  he  says. 
“You  have  to  be  part  of  the  team  that’s  doing  IT,  be¬ 
cause  it's  changing  the  business."  O  47887 


firamtef  is  <x  Computerworld  contributing  writer 
in  Grand  ftc^nds,  Mick.  You  can  contoct  her  at 
mary.brondel(S)conicastJtet. 


A'^ 

-ICIO 

1  -li'.V 

ay-,  t^ave 

.nr'i. 

yr>ii 

'r>  :Tazv 

i  v'lJLifI:  '"'l. 

www.computefwofid  com 


IIIAIIA6EMENT 


tMwmwMMaaii  33 


Stretch 

YOUR  TALENT 


Challenging  your  IT  staff  with 
growth-oriented  assignments 
can  be  a  win  for  everyone  -  if 
you  do  n  right.  By  Steve  Ulfeider 


“STRETCH  assign¬ 
ment"  is  one  re¬ 
quires  a  worker  to 
take  a  leap  beyond 
his  comfort  zone  and.  in  the 
process,  pick  up  new  skills. 
Long  used  in  business  as  a  ca¬ 
reer  development  tool  stretch 
assignments  are  gainii^  popu¬ 
larity  among  corporate  IT 
managers. 

The  idea  is  to  help  promis¬ 
ing  staffers  round  out  their  r^ 
sumcs  by,  for  example,  expos¬ 
ing  them  to  a  hot  technology 
or  placing  them  on  a  team  of 
hl^-profile  end  users.  In  the¬ 
ory,  both  the  oiganization  and 
the  employees  win  —  the  lat¬ 
ter  through  enhanced  career 
prospects,  the  former  through 
the  development  of  more  ca¬ 
pable  workers. 

In  practice,  though,  stretch 
assignments  are  "fraught  with 
periL"  says  Ron  Jeffries,  a  vet¬ 
eran  programmer  and  consul¬ 
tant  based  in  Ann  Arbor. 

Mich.,  who  is  also  editor  of 
XProgTamnung.com,  an  online 
resource  for  programmers. 
Jefiries  adds  that  while  the 
concept  is  sound,  IT  managers 
too  often  slap  the  label  on  im¬ 
possible  projects  —  only  to 
blame  the  staffer  when  the  as¬ 
signment  fails.  Telling  a  pro¬ 
grammer,  i  bet  you  can't  im¬ 
plement  this  compiler  by 
Thursday.’  is  not  a  legitimate 
stretch  pjaL"  Jeffries  says. 

So  what  is?  IT  managers  say 
stretch  assignments,  when  han¬ 
dled  property,  can  be  a  valuable 
management  tool.  Their  expe¬ 
rience  has  taught  them  some 
valuable  do’s  and  donts. 


The  first  key  to  a  successful 
stretch  assignment  is  to  de¬ 
cide  who  can  handle  one.  Ac¬ 
cording  to  Murray  Horwitz, 
CIO  at  Waukegan,  IlL-based 
Ulinc  Shipping  Suj^lies.  likely 
candidates  are  “people  who’ve 
done  the  same  t^g  for  a 
while  and  are  getting  bored." 

Horwitz  says  UUne  actively 
pursues  stretch  assignments 
for  workers,  with  several  no¬ 
table  successes.  For  example, 
the  company's  lead  Web  pro¬ 
grammer  began  as  a  second- 
shift  AS/400  operator.  Man¬ 
agers  marked  him  as  a  worker 
with  talent  and  ambition,  and 
he  was  challenged  to  learn 
HTML  and  Visual  Basic. 

AGentlenBli 

For  IT  staffers,  the  payoff  for  a 
successful  stretch  is  a  richer 
r^m^  which  could  lead  to 
higher-paying  jobs.  While  it 
might  seem  that  any  employee 
would  leap  at  such  an  oppor¬ 
tunity.  some  workers  need 
prodding,  and  some  are  sim¬ 
ply  not  able  or  witlir^  to  tack¬ 
le  new,  possibly  uncomfort¬ 
able  assignments. 

Horwitz  recalls  another 
stretch  candidate  who  needed 
a  gentle  shove.  “We  had  an  ex¬ 
tremely  smart  PC  lech.  He 
could  fix  any  hardware  prob¬ 
lem."  Horwitz  says.  But  in 
order  to  better  leverage  the 
technician's  time,  managers 
wanted  him  to  learn  to  write 
scripts  for  remote  PC  manage¬ 
ment  tools  such  as  PatchLink 
Corp.'s  Update. 

“He  didn't  want  to  do  H." 
Horwritz  says.  The  tech’s  com¬ 


fort  zone  was  one-at-a-time 
PC  fixes,  and  he  balked  at  the 
stretch  assignment.  Horwitz 
persuaded  him  by  pointing 
out  the  logicaJ  advantage  of 
updating  dozens  of  PCs  at 
once.  Implication;  Uline  need¬ 
ed  more  productivity  in  that 
area.  "I  fold  him  he  should  do 
it  for  his  career."  Horwitz  says. 
The  employee  saw  the  light 
and  successfully  learned  the 
necessary  script-writing  skills. 

Making  H  Work 

Once  you’ve  chosen  a  likely 
stretch  candidate,  you  need  a 
legitimate  stretch  assignment 
—  not.  as  is  often  the  case,  an 
impossible  task  with  an  opti¬ 
mistic  label.  “If  1  were  coach¬ 
ing  a  [programmer  or  devel¬ 
oper).  I  would  try  to  sense  a 
gap  in  their  skill  set  —  some¬ 
thing  they'd  benefit  from 
learning."  leflfrics  says.  Then 
rd  try  to  challenge  them  with 
a  project  that  would  sound  in¬ 
teresting  to  them  and  be  diffi¬ 
cult  but  doable." 

Stretchers  should  be  provid¬ 
ed  tools  and  support  to  in¬ 
crease  their  ch^cs  of  suc¬ 
cess.  Otherwise,  you're  not 
helping  them  stretch,  but 
rather  practicing  sink-or-swim 
management,  an  age-old  but 
inglorious  tradition  in  IT. 

That  support  sometimes 
comes  from  peers.  An  IT  man¬ 
ager  who  works  in  a  division 
of  General  Electric  Ca  says 
that  when  be  was  offered  a 
stretch  assignment  to  spear¬ 
head  the  drive  to  comply  with 
the  Sarbanes-Oxiey  Act.  be 
leaned  on  more  than  two 
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dozen  peers  from  other  GE  di¬ 
visions.  “We  had  all  these  oth¬ 
er  *SOX'  managers  with  more 
experience,  and  contacting 
them  was  encouraged."  says 
the  manager,  who  requested 
anonymity.  One  vehicle  for 
this  peer  support  was  an  inter¬ 
nal  portal  calkd  Suppon  Cen- 
traL  where  “you  can  have  a 
community  about  anything." 
be  adds. 

Stretchers  should  also  be  as¬ 
signed  a  mentor,  says  Diane 
Morello,  an  analyst  at  Gartner 
Inc.  The  mentor  should  be 
outside  the  person’s  oonnal 
reporting  stnicturc."  Morello 
says,  because  the  mentor  may 
need  to  discuss  the  stretcher’s 
weaknesses  —  such  as  a  lack 
of  interpersonal  skilb  —  in  a 
way  that  would  be  difficult  for 
a  direct  manager  to  da 

FalurelsanOptkNi 

The  GE  manager  says  that  in 
his  division,  every  IT  employ¬ 
ee  is  expected  to  stretch;  in¬ 
deed.  the  company  has  lot^ 
been  known  as  a  pioneer  and 
leading  practitioner  of  the 
stretch.  They  call  it  a  stretch 
goal"  the  manager  says,  “but 
you’re  expected  to  complete 
them."  He  says  his  stretch 
projects,  whUe  difficult,  have 
been  a  vital  way  to  learn  new 
skills,  make  contacts  outside 
his  immediate  group  and 
boost  his  career  prospects. 

Nevertheless,  some  believe 
that  OB'S  streteb-or-stagnate 
approach  is  a  mistake.  They 
argue  that  IT  workers  must 
understand  that  failing  in  a 
stretch  projea  b  not  a  career- 
breaker.  "We’ve  had  failures." 
says  UUne's  Horwitz.  When 
that  happens,  be  says,  "you’ve 
got  to  assess  whether  be  failed 
because  he's  not  capable,  or 
because  be  didn't  want  to  ex¬ 
tend  beyond  fab  comfort 
zone."  In  Horwhz’s  experi¬ 
ence.  the  latter  b  usually  the 
reason,  and  it's  important  to 
let  the  worker  know  he's  still  a 
valued  contributor. 

That  way.  he  retains  elastici¬ 
ty  —  and  may  someday  stretch 
again.  0477W 


UlftUitr  b  a  Compuierworid 
contributing  writer  in  South- 
boro,  Mass.  Conrorr  him  at 
sulfeideTy^charterjtet. 
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HIH 

Irritating  behaviors  not 
only  annoy  your  co-workers,  but  they  can 
also  compromise  your  effectiveness  and 
even  derail  your  career.  By  Alan  1  Horowitz 


Do  YOU  rm  IT  insider  jokes 
chat  users  don't  understand? 
Do  you  sprinkle  technical 
jU^n  through  disniwtiniK 
with  business  people?  Do 
you  find  that  you've  usually 
got  the  right  answer  to  any 
problem  and  you  let  everyone  know  it? 
If  so,  you  may  be  someth^g  you  didn't 
think  you  were:  annoying 
Everytme’s  annoying  some  of  the 
time,  says  Kimberly  Alyn,  a  corporate 
trainer  and  co*auChor  o(  Annoying 
People  and  Why  Ybuye  One  of  Them 
(Llumina  Press,  2003).  But  annoying 
behavior  can  have  serious  conse¬ 
quences  in  IT,  where  it  can  compro¬ 
mise  your  eflectivcaess,  wreak  ^voc 
with  projects  and  even  derail  your 
career. 


Annoying  behaviors  are  tricky  be¬ 
cause  what  annoys  one  person  may  sail 
by  another.  "You  can  say  the  same 
thing  the  same  way  to  two  people,  and 
one  person  will  say.  'Damn,  that’s  an¬ 
noying'  and  the  other  person  will  not 
think  anything  of  H.*  says  E>an  Bent, 
CIO  at  Benefit  Systems  Inc.  in  Iitdian- 
apolis.  an  administrative  services 
provider  to  health  care  plans. 

But  annoying  behavior  in  IT  sends 
ripples  through  the  whole  business. 
Gary  Langer,  associate  vice  president 
for  academic  technology  at  Chicago’s 
Roosevelt  University,  explains  that 
when  IT  support  people  are  annoying 
''people  lose  cooHdei^  and  they  just 
give  up.  They  stop  asking  questions.'* 

Bent  concurs.  You’re  always  com¬ 
municating  with  other  peopl^  and  if 


you’re  annoying  them,  it  reduces  the 
likelihood  your  message  will  get 
across,"  he  says. 

Projects  may  also  suffer.  Jackie 
Palmer,  a  senior  product  manager  at 
CRM  software  maker  E.piphany 
Inc.  in  San  Mateo.  Calif.,  tells  of 
participating  at  a  meetii^  for  a 
large  insurance  company  that  in¬ 
volved  implementing  process 
I  change.  "The  only  way  to  do  it  is 
get  [users]  to  buy  in  themselves," 
says  Palmer.  But  a  consultant  at 
the  meeting  began  to  dictate  what 
would  happen.  “The  users  became 
very  combative,"  she  recalls.  It  took 
several  weeks  of  meetings  to  resolve 
the  issues,  and  the  project  fell  behind 
schedule. 

If  you  think  that  you  can't  be  annoy¬ 
ing  because  you  often  work  alone, 
think  again.  You  still  deal  writh  people 
for  suppon,  advice  and  information, 
as  well  as  to  get  a  promotioa  notes 
Gini  Graham  Scott,  author  of  A 
Survival  Guide  for  Working  With 
Humarxs  (Amacom,  2004). 

For  the  worst  offimders.  the 
consequences  of  being  annoying 
are  potentially  dire. 

“Say  someone  comes  to  you  and 
asks  you  a  questton  today,  and  they 
find  you  annoying”  says  Bent  “Maybe 
the  next  time,  they’ll  ask  someone  else. 
Soon  people  stop  coming  to  you  and 
asking  you  things,  and  you  end  up 
without  a  job." 

The  IT  Niche 

IT  has  its  own  annoying  quirks.  Langer 
says  some  IT  people  label  users  as 
neophytes  and  then  blame  them  for 
any  difticulties.  ‘Tike  user  insists  their 
e-mail  doesn’t  woric.  and  the  IT  person 
says,  ‘My  e-mail  works  perfectly,’  and 
assumes  the  user  is  the  problem.  Users 
really  fukd  this  annoying"  he  says. 

Some  IT  people  are  so  sure  clUy 
know  what  the  problem  is  that  th^ 
don’t  even  listen  to  the  user,  says 
Katherine  Spencer  Lee.  executive  di¬ 
rector  at  IT  staffing  firm  Robert  Half 
Technology  in  Menlo  Park,  ralif 
IT  people  expect  users  to  always 
know  what  they  want,  and  they  can  get 
exasperated  wten  they  don’t  "Busi¬ 
ness  people  have  a  right  to  change 
their  minds,  because  the  business 
changes,"  says  Ellen  Gottesdiener, 
principal  consultant  at  EBG  Consulting 
in  Carmel,  Ind. 

And  IT  folks  often  require  the 
“righr  decision,  says  G«iy  McCart¬ 
ney,  CIO  at  the  Univmity  of  Pennsyl¬ 
vania's  Wharton  School  in  Philadel¬ 
phia.  iTbey]  have  difficulty  between 
shades  of  gray.”  be  says.  "Sometimes 
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there  are  a  lot  of 'lightish'  answers." 
and  insisting  that  there’s  just  one  can 
be  annoying 

The  Cure 

To  be  less  aimoying  take  care  with  how 
you  communicate  technical  concepts  to 
nontechnical  people,  says  Lee.  "It's  not 
only  how  good  your  code  is  or  how  well 
you  can  fix  a  computer,  but  how  well 
you  communkate."  she  says.  “T^t’s  a 
skill  set  IT  people  have  to  have." 

TVy  to  understand  the  type  of  person 
you’re  dealing  with,  says  Steve  Smith,  a 
technical  business  consultant  in  Seat¬ 
tle  for  storage  maker  EMC  Corp.  "If 
I'm  dealing  with  a  [nonintuitive]  per¬ 
son,  I  need  to  put  things  in  concrete 
lai^uage.  This  person  doesn't  want 
abstractions." 

TVy  to  understand  the  other  person's 
frame  of  reference,  says  Bent.  And 
don’t  malK  assumptions,  adds  Lee. 
Listen  to  what  people  have  to  say. 

Ask  for  help.  For  example,  if  you 
have  a  tendency  to  blurt  things  out  and 
interrupt  people,  tell  your  listeners 
they’d  ^  helping  you  by  pointing  out 
every  time  you  do  that,  recommends 
Naomi  Karten  at  Karten  Associates,  a 
customer  satisfaction  consultant  and 
seminar  leader  in  Randolph.  Mass. 

Use  peer  reviews  to  help  curb  an¬ 
noying  habits,  says  Greg  Walton.  CIO 
at  health  care  provider  Carilion  Health 
System  in  Roanoke,  Va.  “If  [IT  work¬ 
ers]  are  annoying  customers,  they're 
probably  annoying  their  peers,"  be 
says.  The  peer  reviews  let  everyone 
know  who  is  beii^  annoying  and  bow. 

Finally,  realize  that  it^  o^asionally 
OK  to  be  annoying  "If  you  move  your 
institution’s  agenda  forward  and  you 
have  to  irk  someone  to  do  so^  it’s  a 
good  thing"  says  McCartney.  Just  don't 
do  it  without  a  good  reason.  0  47880 


Horowitz  is  a  freelance  writer  in 
Soft  Lake  City.  Contact  him  or 
oi<zn@ahorowfrzxom. 


Got  Questions  About 
Network  Consolidation? 

Computerworld’s  IT  Executive  Summit  Has  the  Answers 


If  you're  an  IT  executive*  in  an  end-user 
organization,  apply  to  attend  Computerworld’s 
upcoming  complimentary  half-day  summit 
on  Network  Consolidation. 

CIOs  and  senior  IT  executives  are  finding  that 
consolidating  high-performance  networks  can 
play  a  key  role  in  Improving  business  applica¬ 
tion  performance  while  significantly  reducing 
operational  costs. 

The  proliferation  of  network  capacity  and  relat¬ 
ed  storage  and  server  infrastructure  presents  a 
daunting  challenge  for  today's  enterprises, 
many  of  which  are  positioning  themselves  for 
growth  yet  still  seeking  to  reduce  IT  costs 
where  feasible. 

By  leveragirtg  the  knowledge  of  ir>dustry 
experts  and  the  real-world  experience  arvj 
advice  of  your  IT  peers,  this  IT  Executive 
Summit  will  provide  an  overview  of  effective 
strategies  for  consoliderting  and  connecting 
networks  and  data  center  applications. 

•Complimentary  registration  is  restricted  to 
qualified  IT  executives  only. 


Streamlining  Networks  and  Data  Centers: 

The  Business  Benefits  of  Consolidation 

San  Francisco  •  August  5,  2004 

San  Francisco  Four  Seasons  Hotel  •  757  Market  Street 
7:45am  to  8:15am  Registration  and  Networking  Breakfast 
8 15am  to  8:45am  Rebuilding  the  FT  Foundation 

Marytran  Johnson,  Editor  tn  Chief,  ComputerNwrlcf 

8:45am  to  9:15am  Consolidation  and  the  Data  Center: 

Boosting  Business  F^rformance 
and  Application  Availability 

Matt  Eastwood.  Research  Director.  Global  Enterpnse 
Server  SokJlHXts,  IDC 

9;15am  to  9:45am  Perspectives  from  the  Chicago 
Mercantile  Exchange 

Steve  Goldman.  Director.  Network  Architecture. 

Chicago  Mercantile  Exchange 

Refreshment  and  Networking  Break 

User  Case  Study 

Alejandro  Lopez.  System  Archiiect,  University  of  California 
Davis  Medical  Center 

10:45am  to  11:15am  Customer  Challenges  and  Solutions: 

Real-Life  Scenarios  Connecting  Data 
Centers  Over  Distance 

Steve  Adolph.  CTO.  Enterprise  Solutions  Group.  OENA 

11:15am  to  noon  ^nel:  Overcoming  Management  Baniets  - 
Making  the  Case  for  Consolidation 

Panel  Moderator:  Marytran  Johnson,  Editor  in  Ch«f 
Computerworld 

^nelsts:  Joe  FUgIsi,  OO.  EMCOR.  Stephen  Monn.  CJO. 
TAC  WDTidwide,  Rank  Enfanto.  Vice  President.  Operations 
Delivery  &  Information  Secunty,  Blue  Cross  Blue  Shield  of 
Massachusetts.  Alejandro  Lopez,  System  ArcNtect 
University  of  California  Davis  Medical  Cerrter 

Program  Concludes  ' 


Selected 

speakers 

include: 


9:45am  to  10:15am 
10:15am  to  10;45am 


Apply  for  registration  today 

For  more  information  or  to  apply,  visit 
www.itexecutivesummit.com/nc 


This  program  will  also  take  place  in:  Chicago  •  August  25.  2004 

Dallas  •  September  22.  2004 
53rmofeinformationonrheselocations.cali880-299-Ot55 
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Follow  the  Money 

How  companies  plan  to  spend  Iheir  softw^  dolars  is  a  key  indicate 
ot  the  n*  sltis  theyl  require  to  implefTient  and  run  the  new  systems. 
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rm  a  new  fT  manapar  wftMn  a 
departmant  of  a  beat  govern* 
ment  agency.  I  have  walkod  into 
an  IT  Mrastnicture  <8sastori 
How  do  I  navigate  the  sHuatkNi 
and  the  politics  to  put  together  a 
now  and  effective  fT  infrastruc¬ 
ture?  your  letter  was  light  on  details, 
but  I  will  assume  that  your  position 
affords  you  the  opportunity  to  be  a 
change  agent. 

Rrst  and  foremost,  a  complete, 
thorough,  unbiased  assessment  is 
needed.  Because  many  of  your  co* 
workers/staff  were  prcdiably  involved 
in  creating  the  “mess' you  describe,  it 
is  difficuH  for  you  to  rely  on  their  eval¬ 
uation.  There  are  several  outside  firms 
that  can  conduct  these  assessments. 
The  cost  may  be  higher  than  you 
might  like,  but  the  assessment  be¬ 
comes  the  rationale  for  changes  you 
will  propose. 

Second,  I  suggest  that  you  boil 
down  the  findings  to  a  few  key  prob¬ 
lems.  Show  the  assessment  ^  short 
list  to  serw  business  leaders  in  your 
organization.  In  addition  to  gaining 
pofentialiy  good  input,  this  process 
helps  est^ish  you  as  a  knowledge¬ 
able.  can-do  person.  Building  credibil¬ 
ity  with  these  folks  will  be  very  benefi¬ 
cial  when  you  undertake  the  changes 
you  envision. 

Third.engageyourstaff.&vecon- 
skterable  thought  to  potential  emo¬ 
tional  responses  and  push-back. 

Then,  offer  a  draft  agenda  of  the  con¬ 


cerns  you  have  identified  based  on 
the  ot^tive.  unbiased  assessment. 
Balance  this  with  your  vision  ot  what 
the  environment  will  look  like  down 
the  road.  The  discussion  should  be 
less  about  why  the  IT  infrastructure  is 
lacking  and  more  atxMt  what  it  could 
become.  Establishing  a  shared  vision 
with  your  team  is  critical  because  the 
buy-in  of  the  team  Is  necessary  to 
drive  the  ^nges  you  propose.  I  can't 
stress  this  point  enough. 

Finally,  after  getting  your  agenda 
through  your  staff  and  managem^t. 
It's  time  to  start  the  hard  work.  Going 
from  a  conceptual  plan  to  a  real 
action  plan  is  the  next  step.  Be  judi¬ 
cious  in  your  selection  of  projects. 

The  projects  should  be  of  very  short 
duration,  with  dear  benefits  to  both 
the  IT  group  and  the  business.  Keep 
the  team  focused. 

Here  are  e  few  suggestions: 

■  Vbu  cent  have  enough  eommunt- 
cation;  talk  to  anyone  who  will  listen. 
Make  these  meetings  valuable;  Be  a 
take-charge  person  with  an  agenda, 
and  stress  the  benefits  that  will  result 
from  changes.  Be  realistic  about  risks, 
but  balance  risks  with  benefits. 


■  Attheveryleastadopitheruil- 
ments  of  soH  profaet  managamenL 

Have  a  budget,  a  project  plan  and  a 
governance  structure  along  with  a  list 
of  expected  downstream  benefits. 


■  ftevide  ragutar  feedbecfc  to 
Ifw  impiemeigation  town.  Keep 
the  shared  vision  aUve.  Build  the 
team's  personal  objectives  around 
the  initiatives  on  which  you’ire  elected 
to  focus. 


■  ReeW  the  urge  to  take  on  more 
than  yeu  can  hande.  Tm  sure  there 
are  a  hundred  things  to  fix.  But 
having  too  broad  an  agenda  dilutes 
resources:  results  take  too  long  to 
notice  and  the  outcome  can  be  disas¬ 
trous.  Uss  is  more. 

Companies  and  agencies  hire 
strong  IT  managers  because  of  the 
problems  the  organizations  are  fac¬ 
ing.  Ybur  value  in  the  marketplace 
now  and  in  the  future  wffl  be  largely 
based  on  your  ability  to  gd  a  critical 
project  agenda  in  pi^  to  motivate 
your  team  and  to  execute  flawlessly.  It 
takes  personal  leadership,  yet  you 
can’t  go  it  alone.  O  48046 
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QUICK  HITS 


IT  Security 
Strategies 


How  companies  protect 
against  mtefnal  wiretess 
commumcatton  eiposufes 


Scsn  ths  n0tM)fk  (0 
tdenttfjf  rogue  Mraiess 


tssueenployeegurie- 

inesfQruseofVMf) 

(nstHule  security  policies 
leialBd  to  organoMianal 
Mrefessuse 


Security  strategies 
currently  deployed: 


Oeinedsecuny 

stmdants 

ftMcysUentents 

Intrusiorvdeledion/ 
prevention  systems 

Access  management 


AtMsnniiQ  systems 
Otrectories 


Security  strategies  to 
be  depioyed  over  ttie 
next  tB  months 


SUE  YOUNG 

Turning  Around 
The  I&d  Case 


How  DO  YOU  HANDLE  chronic  mistake- 
makers  —  especially  those  who  treat 
their  mistakes  as  something  to  be 
laughed  at  and  overlooked?  How  can  you 
get  such  people  to  recognke  that  there  is 
a  problem  they  need  to  correct? 

As  a  self-motivated  manager,  you  may  wonder  at  sub¬ 
ordinates  who  don’t  hold  themselves  to  the  same  stan¬ 
dards  you  do  or  even  notice  that  there’s  a  problem  with 
their  work.  How  can  a  competent  worker  consistently 
underperform,  as  if  he  just  doesn’t  care?  When  nothing 
you’ve  tried  makes  a  difference,  what  do  you  do? 


1  once  worked  with  a  de¬ 
velopment  team  whose 
only  quaUty  assurance  guy 
didn't  make  test  plans  and 
hardly  tested  at  ^  The 
manager  called  him  into 
his  office  several  times  and 
even  threatened  to  fire 
him.  Nothing  changed  the 
QA  guy's  behavior. 

Then  one  of  the  coders 
pulled  the  QA  guy  aside 
and  said,  “Hey.  I  need  your 
help.  My  code  is  due  to¬ 
morrow.  and  if  it  breaks  on 
the  users  one  more  time. 

I’m  in  deep.  1  can’t  test  it  mysel£  Will 
you  stay  late  tonight  and  help  me  out?” 

The  QA  guy  stayed  late  and  tested. 
Thoroughly.  The  coder  thanked  him 
profusely  and  told  him  how  much 
everybody  else  on  the  team  needed 
him.  too. 

There  were  no  more  problems  with 
that  QA  guy.  He  tested  his  backlog, 
then  proactively  asked  his  teammates 
if  they  needed  anything  from  him. 

This  experience  taught  me  that,  as  a 
manager,  you  can  take  the  following 
steps  to  help  a  subordinate  realize  that 
a  chronic  problem  needs  his  attention 


and  develop  an  eagerness 
to  fix  it  (Although  if  the 
problem  involves  routinely 
missing  deadlines,  you 
may  have  unrealistic 
schedules.) 

Ash  for  Ms  help'  Sincerely 
say,  “I  need  your  help.”  By 
doing  that,  you're  showing 
the  worker  that  he's  impor¬ 
tant  and  valued,  which 
may  surprise  him.  People 
like  to  be  needed,  valued 
and  respected,  and  when 
they  feel  they  are,  it’s 
amazing  bow  quickly  they 
can  change  and  rise  to  the  occasion. 

Captain  why  ffisrs’s  a  Msd  to  changs.  You 
may  think  it’s  obvious  why  what  has 
happened  in  the  past  can’t  continue. 
But  the  person  may  think  that  what 
has  happened  is  acceptable  because 
it  has  happened  so  many  times. 

Even  if  you  think  be  understands, 
show  the  employee  how  imponant  his 
role  is  and  why  his  work  is  vital  to  the 
project  Again,  you  may  think  it's  obvi¬ 
ous.  But  this  person  may  not  see 
things  as  you  do. 

AafcforhiaraciNWMmtationa.  Remind 
the  worker  that  this  is  his  area  of  ex¬ 


pertise  and  that  he  probably  knows 
more  about  it  than  you  do.  and  then 
ask,  “What  do  you  recommend  we  do 
in  the  future  to  improve  this?"  Your  at¬ 
titude  is  key.  Show  that  you  sincerely 
value  the  person's  input. 

If  the  subordinate  doesn't  answer,  or 
if  he  evades  the  question,  go  back  to 
the  first  two  steps.  If  this  person  feels 
that  no  one  listens  to  him,  it  may  take 
a  while  to  convince  him  you're  serious. 

Oeate  a  stratogy.  When  be  gives  you 
suggestions,  keep  prompting  him  \mtil 
he  comes  up  with  a  viable  strategy. 

Verify  that  there  wasnl  any  mtacommunt* 
catkm.  Say.  To  make  sure  we’re  both 
on  the  same  page  and  we  don’t  forget 
anything,  let’s  write  this  down.”  Write 
it  down  together  —  r^t  away,  not  lat¬ 
er.  Agree  on  the  steps  that  will  be  tak¬ 
en.  when  they  will  be  taken  and  by 
whom.  Now  you  both  have  a  plan  that 
he  has  created  and  agreed  ta  There's 
no  question  what's  expected. 

RainforcahoMrnMdad.  importont  and 
trusted  the  person  is.  Even  if  you  don’t 
need  reinforcement  and  don't  under¬ 
stand  why  anyone  else  would,  It  never 
hurts  to  applaud  specific  efforts  that 
you  want  to  see  more  of. 

Show  him  you  rely  on  him.  Tell  the 
worker,  "Fm  counting  on  you  to  make 
this  change  by  the  end  of  the  quaner. 
Otherwise.  I’m  in  hot  water  b^use 
no  one  else  can  do  IL"  If  you  want  sub¬ 
ordinates  you  can  rely  on,  show  them 
you  trust  and  rely  on  them. 

And  remember  Hold  a  high  image 
of  employees  in  your  mind  that  you 
expect  them  to  live  up  to  —  just  as  you 
do  for  yourself.  O  47^ 
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E-voting 

ing  an  issue  at  the  convention. 
But  if  it’s  not.  Rep,  Johnson 
certainly  plans  to  make  it  one," 
said  John  B.  Townsend,  a 
spokesman  for  the  congress- 
woman. 

However,  speaking  on  con¬ 
dition  of  anonymity,  an  IT  in¬ 
dustry  source  who  met  last 
week  with  members  of  Sea 
John  Kerry’s  staff  said  the  Ker¬ 
ry  campaign  is  considering  a 


gress  that  has  refused  to  force 
voting-system  vendors  to  open 
their  software  to  inspection 
and  verificatioa 
■m»e  Republicans  have  an 
interest  in  not  doing  anything 
about  electronic  voting  securi¬ 
ty."  said  Townsend. 

Rut  some  analysts,  along 
with  liberal  organizations,  said 
that  although  security  of  the 
systems  and  the  integrity  of 
the  software  used  are  rc^  con¬ 
cerns.  the  rhetoric  surrounding 
the  debate  could  actually  hurt 
voter  turnout  And  that  could 


move  to  pull  back  from  the  po-  backfire  on  the  Democrats. 


sition  taken  by  the  _ 

Deniocratic  Na-  TtUM! 

tional  Committee  ..  „ 

and  Howard  Dean’s 
Democracy  for  TTnir  roim 

America  organiza-  - 

tioa  Dean  and  the  DNC  have 
endorsed  the  voter-verifiable 
paper  ballot  requirement  for 
c-voling  systems  —  something 
that  only  the  state  of  Nevada 


TMMSNWN 

E-vD(ino  6  reiBCted  m  Oho 

OOuickUA  48248 


-  "We’re  worried 

about  voters  being 
MmOho  scared  off.- said 

12249  Tanya  Clay,  direc- 

m«rid.cani  tor  of  public  policy 

-  at  Wa^ington- 

based  People  for  the  American 
Way.  “It’s  one  thing  to  push  for 
security  in  all  voting  ma¬ 
chines.  but  it's  another  thing 
to  scare  people  into  thinkir^ 


has  planned  for  November.  Ac-  it's  useless  for  them  to  go  and 
cordir^  to  the  ofHciaL  the  Ker-  vote.  We  cant  allow  this  issue 
ry  campaign  is  considering  to  hijack  the  election." 
support  for  verification  of  the 

final  vote  uiiy  through  some  Oamage  Control 
form  of  encryptioa  But  the  e-voting  security  dc- 

For  many  Democrats,  how-  bate  may  have  already  dam- 
ever.  the  issue  boils  down  to  a  aged  the  mist  of  some  Ameri- 

Republican-controlled  Con-  cans  who  will  vote  electroni¬ 


cally  this  November  One  rea¬ 
son  for  that  is  the  appearance 
of  a  possible  conflict  of  inter¬ 
est  stemming  in  pan  from  a 
comment  made  publicly  last 
August  by  Dicbold  Election 
Systems  CEO  Walden  O’Dell 
that  be  was  "committed"  to  de¬ 
livering  Ohio's  electoral  votes 
to  President  George  W.  Bush. 

In  additioa  Federal  Election 
Commission  records  reviewed 
by  Computerworld  show  that 
between  1997  and  2003.  O’Dell 
contributed  $10,465  of  his  own 
money  to  Republican  cam¬ 
paigns. 

t^id  Bear,  a  spokesman  for 
Diebold.  said  O’Dell  immedi¬ 
ately  expressed  regret  for  hav¬ 
ing  made  the  comment  and 
has  curtailed  all  personal  po¬ 
litical  activity.  Bear  also  noted 
that  Dicbold  has  since  intro¬ 
duced  a  company  policy  ban¬ 
ning  employees  from  partici¬ 
pating  in  the  political  process 
beyond  voting. 

In  another  case,  Aldo  Tesi, 
CEO  of  Omaha-based  Election 
Systems  6c  Software  Inc.,  con¬ 
tributed  S1.200  to  Republican 
candidates  in  1999  through 
the  Commercial  Federal  Bank 
political  action  committee. 

Meghan  McCormick,  a 
spokeswoman  for  ES&S.  said 


H  We  can’t 
allow  [the 
e^yoting]  issue  to 
hijack  the  election. 

TANYA  CLAY.  0«ECT0R  OF 
PUBLIC  POLICY,  PEOPlf  FOR  tHC 
AUFR1CAN  WAY 

the  PAC  in  question  makes 
contributions  to  candidates  of 
both  parties  and  noted  that 
Tesi  made  the  contribution  as 
a  member  of  the  board  of 
Commercial  Federal  Bank  and 
not  on  behalf  of  ES&S. 

“We  understand  and  appre¬ 
ciate  the  sericNis  responsibility 
we  have  in  the  democratic 
process."  McCormick  *aiH 
"ES&S  company  policy  pro¬ 
hibits  associates  from  making 
political  contributions  for  any 
candidate  or  political  party  for 
or  on  behalf  of  the  company." 

Still,  such  activity  fuels  the 
debate  about  the  int^Tity  and 
security  of  e-voting  systems. 
Clay  insisted.  "You  don't  have 
to  be  a  conspiracy  theorist  to 
connect  the  dots  on  this  is¬ 
sue."  she  said. 

Clay  also  cited  the  lengthy 
process  involved  in  Congress 
passing  the  Help  America 


Platfonn  FKUses  on  Outsourcing,  Access  to  Broadband 


Tht  gmnmnl  diouU  tocus 
on  praUcling  US.  wntan' jots 
and  cnaHig  inmai  accoos  In 
braadband  aatvicaa,  acoontng 
lo  tie  Oamocndlc  Paily'a  2004 
plattonn. 
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And  Of  corapaniee  can  keep  and 
ciaala  jute  in  Aimiica  witboul 
saotliigcempadliveiiiBa.- 
Mia  John  Kny  hianl  been 
InwMInnnnylecbnakigylS' 
SHiUnghia  Senate  caieer. 
Detnooek  tidjdad  a  handU  ol 
krtiKiIngy  ndutptinlii.lntie 
dVpags  pWom.  Sam  lasM, 
tidudinptapiily^iadwiacyaf 


antipamamitiBatntiand 
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1  Vote  Act  of  2002.  which  pro¬ 
vided  $3.ft6  billion  to  replace 
'  pufich  card  and  Icver-bascd 
I  systems  with  new  touch- 
'  screen  systems. 

"It  took  two  years  to  pass 
HAVA,  despite  the  fiasco  of 
2000,"  said  Clay,  referring  to 
voting  system  malfurtctions  in 
the  last  presidential  clectioa 

“There  were  a  lot  of  people 
who  didn't  want  that  bill  be¬ 
cause  they  had  nothing  to  gain 
from  it."  she  said.  "Why  would 
you  want  to  change  an  elec¬ 
tion  process  that  has  pul  you 
in  office?  And  that’s  what’s 
happening  with  clectromc 
voting  machines." 

Avi  Rubia  the  Johns  Hop¬ 
kins  University  computer  sci¬ 
ence  professor  at  the  center  of 
the  debate  over  e-voting  secu¬ 
rity.  last  week  told  members  of 
a  House  subcommittee  that  it 
would  be  "irresponsible"  to 
move  forward  with  the  No¬ 
vember  election  without  ad¬ 
dressing  the  legitimate  securi¬ 
ty  problems  identified  to  date. 
Townsend  said  Johnson  shares 
thai  view. 

"Votii^  is  not  like  other  ap¬ 
plications,"  Rubin  said  in  an 
interview.  There  is  no  reason 
why  anyortc  should  trust  a 
vendor."  O  46368 
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SCO  Gets  KO’d 


DIDJA  see  what  HAPPENEH  last  week  in  that  Michigan 
courtroom?  Sure,  Judge  Rac  Lee  Chabot  threw  out  vir¬ 
tually  all  of  The  SCO  Group's  lawsuit  against  Daimler- 
Chrysler  (see  story,  page  12).  But  that's  not  the  really 
interesting  part.  What’s  really  interesting  is  that,  for  the 
first  time,  a  corporate  Linu.\  user  stood  up  to  SCO  —  and  won. 

And  DaimlerChrysler’s  lawyers  didn’t  just  beat  SCO.  They  kicked 
SCO  up  one  side  of  the  courtroom  and  down  the  other.  They 
stomped  all  over  SCO’s  famous  law  firm.  They  demolished  SCO’s 
overblown  claims  and  threats. 

And  they  didn’t  depei)d  on  IBM  or  Novell  or  Red  Hat  to  do  their 
legal  brawling  for  them,  They  did  it  for  themselves. 


Thai  wasn't  in  the  script.  It  ccnainly  wasn't 
what  SCOoxpccicJ  when  it  sued  Daimler- 
t  ihrsslcr  and  AutoZone  in  March.  These 
weren't  btg  vendors  with  l.inu.v  businesses  ii« 
lose.  The\  were  user  companies.  They  were 
supVHvsed  u»  be  lawsuit-shy  and  ri-sk-aversi*. 
ITiev  were  supposed  to  be  on  the  det’ensive, 
And  defensive  is  prettv  much  how  .AutoZone 
has  played  it  A  week  before  the  Paimler- 
(■hr^^ler  decision.  .Au^*/one's  lawyers  con¬ 
vinced  a  iudjte  in  Nev.id.»  fo  put  the  lawsuit 
.t)jainsr  it  on  hold  until  atyrtrrtain  key  issues 
are  settled  in  SCX>'s  .suit  aftalnst  IBM. 

Nt*  shame  irrVhat  —  it  was  (j»*od  lawyerinp. 
5410  had  accused  AutoZone  tu'  breaking  copy  • 
ripht  law  by  usinp  Linux.  IB.M  has  spent  the 
past  year  proving:  that  [,inux  dtK'sn't  violate  .my 
s(X>  Copyrights.  Letting  IBM  do  the  heav’x  lift¬ 
ing  just  mj-Je  sense  But  that  delay  leaves  .Autn- 
/••ne  •»pi'n  to  the  possibility  that  SCO  will  get 
an  injunctnin  to  st»'p  it  from  using  Linux  while 
ihe  case  is  on  hold.  It's  a  long  shot  for  SCO  — 
but  it's  still  a  risk  for  .AutoZone. 

Daimlert'Ihry  sler’s  legal  team  did 
"omegtHHi  law  yering,  too.  Hut  they 
did  it  IX*troil-style. 

There  was  nothing  defensive  in 
the  way  they  ripped  apan  SCO's 
argument.s.  There  was  no  request 
for  a  stay  4ir  delay,  no  ItKikinp  for 
help  from  any  vendor,  no  angling 
f4*r  a  split  decisitin. 

rherc  was  siimething  jiiyous. 
siimcthing  gleefully  vici4ius.  in  the 
DaimlerChrysIcr  legal  filings.  They 
didn’t  just  <K>ze  confidcn4  e  —  they 
exploded  with  it. 

The  DaimlerChrysIcr  lawyers 


went  after  everything.  Every  SCO  claim.  Every' 
SCO  representation.  They  even  tried  to  get 
thoroughly  routine  depositions  tossed  out. 

And  w’hen  they  w'alked  into  the  courtroom 
last  Wednesday  morning,  they  were  visibly 
more  conlldent  than  SCO's  lawyers,  according 
to  observers,  rhey  knew’  they  had  it  nailed. 

They  were  right. 

Things  have  been  going  even  worse  than  usu¬ 
al  laiely  for  SCt).  loisi  m4mih.  Novell  got  SCO's 
lawsuit  against  it  di.smisscd.  although  SCO  has 
since  refiled.  IBM  is  currently  waiting  for  a 
judge’s  decisMin  4»n  a  request  to  declare  that  Lin¬ 
ux  d4K‘sn’i  infringe  on  any  SCO  copyrights  —  a 
move  that  holds  no  risk  for  IBM  if  it  fails  but 
will  gut  SCTO's  other  lawsuits  if  it  succeeds. 

Even  Red  Mat,  whose  lawsuit  against  SCO  in 
Delaware  has  been  «>n  hold,  is  now  working 
hard  to  convince  the  judge  that  SCO's  strategy 
is  to  damage  Red  Hal's  Linux  business  by  delay¬ 
ing  rcs4)lution  of  the  case. 

And  now.  corp4aratc  users  —  who  were  sup¬ 
posed  to  be  easily  intimidated,  who  were  sup¬ 
posed  to  pay  up  instead  of  fighting 
when  they  got  threatening  ictiers 
from  SCO  —  are  punching  back. 
Hard.  And  they’re  winning.  Big. 

For  SCO.  that  means  trouble.  For 
DaimlcrChryslor  and  every  other 
big  corporate  IT  user,  it  mi^ans  a 
lot  more  than  that. 

It  just  may  mean  the  end  of  the 
software  business  as  wc  know  it. 
Because  once  corporate  software 
customers  figure  out  how  much 
leverage  they  have  when  they  flex 
their  muscles,  this  industry  will 
never  be  the  same.  O  48324 
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Almost,  but  Not  Quite 

User  complains  to  support  pilot  fish  that  he  can't  get 
his  laptop's  e-mail  to  worK  and  while  he  can  surf  the 
Web.  he  can't  get  to  any  of  the  company's  pnvate 
Web  sites.  Once  fish  gets  to  the  user’s  desk,  it  doe^'t 
take  tong  to  figure  out  why.  ‘He  wasn't  using  our  inter¬ 
nal.  cabled  LAN.‘  fish  says,  '^e  had  Ns  unsecure 
home  wireless  card  installed  -  and  he  was  using  a 
neighboring  company's  unsecured  wireless  LAN.* 
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SCO  Gets  KO’d 


DIDJA  see  what  happened  last  week  in  that  Michigan 
courtroom?  Sure,  Judge  Rae  Lee  Chabot  threw  out  vir¬ 
tually  all  of  The  SCO  Group’s  lawsuit  against  Daimler- 
Chrj^ler  (see  story,  page  12).  But  that’s  not  the  really 
interesting  part.  What’s  really  interesting  is  that,  for  the 
first  time,  a  corporate  Linux  user  stood  up  to  SCO  —  and  won. 

And  DaimlerChrysler’s  lawyers  didn’t  just  beat  SCO.  They  kicked 
SCO  up  one  side  of  the  courtroom  and  down  the  other.  They 
stomped  all  over  SCO’s  famous  law  firm.  They  demolished  SCO’s 
overblown  claims  and  threats. 

And  they  didn’t  depend  on  IBM  or  Novell  or  Red  Hat  to  do  their 
legal  brawling  for  them.  They  did  it  for  themselves. 


That  wasn’t  in  the  script.  It  certainly  wasn’t 
what  SCO  expected  when  it  sued  Daimler- 
Chrysler  and  AutoZone  in  March.  These 
weren’t  big  vendors  with  Linux  businesses  to 
lose.  They  were  user  companies.  They  were 
supposed  to  be  lawsuit-shy  and  risk-averse. 
They  were  supposed  to  be  on  the  defensive. 

And  defensive  is  pretty  much  how  AutoZone 
has  played  it  A  week  before  the  Daimler- 
Chrysler  decision,  AutoZone’s  lawyers  con¬ 
vinced  a  judge  in  Nevada  to  put  the  lawsuit 
against  it  on  hold  until  after  certain  key  issues 
are  settled  in  SCO’s  suit  against  IBM. 

No  shame  in  that  —  it  was  good  lawyering. 
SCO  had  accused  AutoZone  of  breaking  copy¬ 
right  law  by  using  Linux.  IBM  has  spent  the 
past  year  proving  that  Linux  doesn't  violate  any 
SCO  copyrights.  Lettii^  IBM  do  the  heavy  lift¬ 
ing  just  made  sense.  But  that  delay  leaves  Auto¬ 
Zone  open  to  the  possibility  that  SCO  will  get 
an  injunction  to  stop  it  from  using  Linux  while 
the  case  is  on  hold.  It’s  a  long  shot  for  SCO  — 
but  it's  stiU  a  risk  for  AutoZone. 

DaimlerChrysler’s  legal  team  did 
some  good  lawyering,  toa  But  they 
did  it  Detroit-style. 

There  was  nothing  defensive  in 
the  way  they  ripped  apan  SCO’s 
arguments.  There  was  no  request 
for  a  stay  or  delay,  no  looking  for 
help  ftom  any  vendor,  no  angling 
for  a  ^lit  decision. 

There  was  stxnething  joyous, 
something  gleefully  vicious,  in  the 
DaimlerChrysJer  legal  filings.  They 
didn’t  just  ooze  conHdence  —  they 
exploded  with  it 
The  DaimlerChrysler  lawyers 


went  after  everything.  Every  SCO  claim.  Every 
SCO  representation.  They  even  tried  to  get 
thoroughly  routine  depositions  tossed  out. 

And  when  they  walked  into  the  courtroom 
last  Wednesday  morning,  they  were  visibly 
more  confident  than  SCO’s  lawyers,  according 
to  observers.  They  knew  they  had  it  nailed. 

They  were  right 

Things  have  been  going  even  worse  than  usu¬ 
al  lately  for  SCO.  Last  month,  Novell  got  SCO’s 
lawsuit  against  it  dismissed,  although  SCO  has 
since  refiled.  IBM  is  currently  waiting  for  a 
judge’s  decision  on  a  request  to  declare  that  Lin¬ 
ux  doesn't  infringe  on  any  SCO  copyri^s  —  a 
move  that  holds  no  risk  for  IBM  if  it  faiU  but 
will  gut  SCO’s  other  lawsuits  if  it  succeeds. 

Even  Red  Hat,  whose  lawsuit  against  SCO  in 
Delaware  has  been  on  bold,  is  now  working 
hard  to  convince  the  judge  that  SCO’s  strategy 
is  to  damage  Red  Hat’s  Linux  business  by  delay¬ 
ing  resolution  of  the  case. 

And  now,  corporate  users  —  who  were  sup¬ 
posed  to  be  easily  intimidated,  who  were  sup¬ 
posed  to  pay  up  instead  of  fitting 
when  they  got  threatening  letters 
from  SCO  —  are  punching  back. 
Hard.  And  they're  winning.  Big. 

For  SCO,  that  means  trouble.  For 
DaimlerChrysler  and  every  other 
big  corporate  IT  user,  it  means  a 
lot  more  than  that. 

It  just  may  mean  the  end  of  the 
software  business  as  we  know  it 
Because  once  corporate  sofhvare 
customers  figure  out  how  much 
levera^  they  have  when  they  flex 
their  muscles,  this  industry  will 
never  be  the  same.  04*324 
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SAS.  the  leader  in  business  intelligence  software,  chalienges... 


Comply  with  Sarbanes-Oxley  now. 

Or  prepare  for  the  consequences  over  time. 
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SUPPLIER  INTEUlGENCe 
ORGANIZATIONAL  wtiluqeice 
CUSTOMER  WTEUJGENCC 
INTELUGENCE  ABCHfitcruRE 


Wtf.  Sari«„e.-Oxley  compliance  deadlines  less  ihan  a  year  away,  .here  is  an  urgency  «,  deliver  financial 
and  CKianonal  nansparency-  one  clean,  consolidaied  and  mnhfirl  venion  of  dam  for  all  your  disclosum 
counts  and  procedures.  SAS*  Corpomte  Compliance  softwam  pmvides  audiiable.  seamfiable  pmeess 
and  document  contml  solutions.  So  you  can  piepare  now,  while  creating  a  system  that  won’t  be  outdated 
when  the  next  new  legislation  is  enacted.  Our  intuitive  interfaces  are  designed  for  usem  of  any  skill  level 
with  a  centtal  point  of  control  to  manage  across  all  envircaunents  ^  and  an  open,  adaptable  aichitectuie 

I  n  ^  “  “>"fi<fcntly  comply  with  SatbanesOxley.  iiKluding  Section  404.  call  us 

toll  free  at  1  866  270  5729  or  visit  our  Web  site. 


www.sas.com/sox 
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Direct^  aflecled  or  not  IT  managers  are  wary  ol  M.crosotfs  product  delay  piopensity 
SoHw^are  vendors  may  be  gelling  less  aggressive  aboul  conducting  audits. 
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Accenture IT 
System  Under 
Fire  in  Ontario 

Upgrade  needed  to  calculate  welfere  benefit 
changes;  inquiry  soi^t  into  deal  with  vendor 


BV  MABC  L.  SONOtNI 

Questions  about  the  cost,  sta¬ 
bility  and  usability  of  a  con¬ 
troversial  $213.8  million  wel* 
payments  system  being 
used  in  Ontario  continue  to 
plague  IT  services  firm  Ac¬ 
centure  Ltd.,  which  devel(^>ed 
the  system  for  the  province’s 
Ministry  of  Communi¬ 
ty  and  Social  Services. 

In  the  most  recent 
development,  an  On¬ 
tario  legislator  is  call¬ 
ing  on  the  province’s 
attorney  general  to 


nee’s  I  Acc 

■ 


open  a  formal  inquiry  into  the 
contract  with  Accenture,  in¬ 
cluding  an  investigation  of 
whether  the  province  did  suf¬ 
ficient  due  dil^ence  before 
awarding  h  and  whether 
there  were  any  improprieties 
during  the  bidding  process. 

Accenture  is  currently 
billing  the  province 
neariy  $1  n^on 
(U.S.)  to  tweak  the 
mainframe-based  sys¬ 
tem  so  it  can  calculate 
a  3%  across-the-board 
Ontario,  page  12 


One  Year  Later, 
rrPreparesfbr 
Next  Disaster 

BY  LUCAS  MCARIAN 

AsifTHirji,  CIO  at  Ameritrade 
Holding  Coip.,  said  his  busi¬ 
ness  continuity  plan  for  the 
company’s  Jersey  City.  N.J., 
data  center  woriced  flawlessly 
when  the  lights  went  out  in 
much  of  the  Northeast  last 


August  Well,  almost  flawless¬ 
ly.  Ameritrade  had  36  hours’ 
worth  of  diesel  fuel  in  its 
backup  generators,  and  the 
main  power  grid  wasn’t  fully 
restored  for  two  days. 

Ameritrade  has  since  in¬ 
creased  the  amount  of  diesel 
fuel  it  ke^  on  hand,  and 
Hirji  has  made  other  changes 
in  response  to  the  blackout 
"We  learned  a  bunch  of 
things  because  in  every  plan, 
Btackout,pagel2 
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WHEN  A  VENDOR’S  SOFT¬ 
WARE  FALLS  SHORT  IN  A 
KEY  AREA.  OR  ITS  BLOATED 
AND  TOO  EXPENSIVE.  MAV¬ 
ERICK  IT  SHOPS  BUCK  THE 
TREND  TOWARD  OFF-THE- 
SHELF  IWCKAOES  AND 
WRITE  IT  THEMSELVES. 


High-Tech  Bunker  Monitors 
Convention  Security  24/7 

Cold  fecility  equipped  with  new  IT 

systems  to  ensure  delegates’  safety  in  Boston 


For  the  first  time  in  26  years, 
the  Massachusetts  State 
Emergency  Operations  Cen¬ 
ter  —  an  underground  bunker 
built  during  the  hei^  of  the 
C<rfd  —  last  week  began 
round-the-clock  operations. 
The  purpose  was  to  ensure 
the  security  of  the  Demo¬ 


cratic  National  Conventioa  by 
means  of  newly  deployed  IT 
systems. 

Tie  facility,  built  in  1963  as 
the  nation’s  first  underground 
HOC  designed  to  withstand 


a  nuclear  blast,  last  week 
gained  the  ability  to  commu¬ 
nicate  in  real  time  wHb  hun¬ 
dreds  of  businesses  in  aiul 
around  Boston.  It  also  initiat¬ 
ed  the  use  of  a  Wiri>-enabled 
medical  emergency  manage¬ 
ment  system. 

On  July  29,  the  final  and 
most  security-intensive  day  of 
the  convention.  Computer^ 
world  was  given  access  to  the 
facility,  located  30  feet  below 
a  nondescript  plot  of  land  on 
state  Route  9.  The  EOC  was 
aglow  with  wall-mounted 
large-screen  displays  showing 
real-time  data  feeds  on  poten- 
DNC  Security,  page  43 
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Make  a  name  for  yourself 
with  Windows  Server  System. 


Windows  Sprver  System  -  tncliides  theat  pioduits 

S'^fverOS  Windows  Set  ./ef ’ 

Operations  Inftasuutture  Systems  Managentent  Serve 

Appltcdt*on  Centfi 
Operations  Manager 
Intenet  Seurity  &  Acceteration  Server 
W:r>dows  Storage  Server 
Application  Intrasticicture  SQL  Server  ’ 

BizTalk  Server 
Commerce  Server 
Content  Management  Server 
Host  Integration  Server 

InJormatJon  Work  Infrastructure  Exchange  Server 

Office  StiarePomt "  Portal  Server 
Office  Live  Communications  Server 


Mcfosoft 

Your  potential.  Our  passion." 


Microsoft  Windows  Server  System  makes  Motorola's 
infrastructure  easier  to  manage.  Here’s  how:  using 
Microsoft  Systems  Management  Server  and  SQL  Server, 
powered  by  Windows  Server,  Motorola  conducts  system 
inventory  of  their  65,000  desktops  from  one  location, 
identifies  necessary  system  updates,  then  deploys  those 
applications  across  the  enterprise  automatically.  It's 
software  that  helps  you  do  more  with  less.  Get  the  full 
Motorola  story  and  a  hands-on  management  tool  at 
microsoft.com/wssystem 


"We  performed  over  807,000  successful 
software  deployments  to  65,000 
desktops  in  2002  alone  and  saved 
over  247,000  administration  hours." 


Steven  Bramson 

Senior  Systems  Architect,  Motorola 


MOTOROLA 


Mr.  5,000  Desktops 
Updated  with  the 
Latest  Engineering 
App  in  10  Minutes 


Goodbye 

Hackers 


The  right  management  should  do  more  than  just  protect. 

It  should  also  enable. 

eTrust”  Security  Management  Software 

With  eTrust  security  management  software,  your  Information  isn't  just  safeguarded  from  internal  and  external  threats. 
We  provide  authorized  customers,  partners,  and  employees  with  appropriate  access  that  can  help  your  business  grow. 
In  addition  to  securing  data.  eTrust  also  provides  a  single  view  of  your  security  environment,  so  you  can  make  real-time 
decisions  based  on  comprehensive  information.  If  you're  looking  for  ways  to  minimize  risk  while  maximizing  your 
potential,  or  to  get  a  white  paper,  go  to  ca.com/security. 
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Covering  ttie  Waterfront 

E--  In  •t>»T«dinoloBlf>«aiofl:rr  is  playing  a  growing 

J  role  in  protecting  the  nation  s  ports  and  the  more 
than  2  billion  tons  of  cargo  that  pass  through  them 
annually.  But  many  projects  are  slow  to  roll  out.  and 
port  security  remains  a  work  in  progress.  Page  19 
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||h>  Prudent  Pruning 

h  the  Haitagmnt  ndiom  IT  applications 
Bro*  like  weeds,  and  unchecked  growth 
can  lead  to  sluggish  performance.  Smart  CIOs 
know  that  selecUve  pruning  can  reinvigorate  your 
systems.  Here’s  how.  Page  31 
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4  Microsoft  delays  releases  of 

Windows  XP  Service  Pack  2 
and  Service  Pack  1  for  Win¬ 
dows  Server  2003  because  of 
security  work  on  XP. 

5  Two  large  supercomputers 

bought  by  the  VJS.  Navy  and 
NASA  demonstrate  that  the 
market  for  high-powered  sys¬ 
tems  is  growing. 

5  Sun  plans  to  make  its  Java 
Enterprise  System  available 
for  Windows  and  HP-UX  by 
year’s  end- 

8  MCI  Increases  performance 
guarantees  for  its  IP  network 
users  in  a  bid  to  retain  their 
confidence  as  a  possible  buy¬ 
out  looms. 

8  Banks  prapare  to  fight  an 

information-sharing  provision 
in  a  California  privacy  law. 

10  Cellular,  Wi*Fi  convergence 

comes  closer  with  the  arrival 
of  new  mobile  devices. 

10  Red  Hat  broadens  its  offer¬ 
ings  beyond  Linux  by  launch¬ 
ing  a  Java  application  server. 

11  Vandors  stow  audits  of  soft- 

ware  licenses,  partly  in 
response  to  increased  self- 
examination  by  customers. 

t1  Ongoing  compliance  needs 

under  Sart>ams-Oxley  will 
drive  new  IT  investments  by 
users,  analysts  predict. 

43  The  call  for  an  e-voting  paper 
audit  trail  is  renewed  by  some 
Democrats  at  the  party's 
national  convention. 
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22  Ematging  Tachnotogtos: 
UHrawideband;  A  Batter 
Bluetooth.  UWB  oBem  huge 
bandwidth  over  short  dis¬ 
tances.  but  regulatory  hurdles 
and  a  fierce  standards  battle 
could  slow  its  introduction. 

24  QuicliStudy:  R>rm  Factor. 
ftwTn^ijcfor  refers  to  the  over¬ 
all  dimensions  and  compo¬ 
nent  layout  of  a  device  —  in 
other  words,  its  physical  size 
and  packaging. 

26  SocurftyManagar's  Journal: 
Singing  the  TLS  Protocol 
Blues.  Roger  Fbix’s  effort  to 
provide  secure  e-mail  ixing 
TVansport  Layer  Security  runs 
into  one  stumbling  block  after 
another. 

MMIMQIEIIT 

29  Roll  Your  Own.  why  do  some 
companies  continue  to  devel¬ 
op  their  own  software  appli¬ 
cations.  even  when  an  in¬ 
creasing  number  of  off-the- 
shelf  packages  could  do  the 
job?  We  look  at  some  IT  shops 
that  are  bucking  the  trend 
toward  off-the-shelf  and  learn 
what’s  in  it  for  them. 

32  Think  Tank.  Why  call  centers 
need  to  be  ready  for  the  cam¬ 
era-phone  generation;  ups  and 
downs  in  IT  services  spend¬ 
ing:  and  how  the  IT  economy 
is  “snick  in  first  gear." 

33  Carvar  Watch.  How  to  attract  ; 
and  retain  women  in  IT: 
where  and  where  not  to 
recruit  top  talent;  and  the 
CIO/CFO  connection. 


6  On  the  Mark;  Mark  Hall  notes 

that  open-source  boosters  and 
CIOs  don’t  always  speak  the 
same  language  and  that  Linux 
2.6-based  servers  are  coming 

14  Maryfran  Johnson  is  sur¬ 
prised  that  high-level  thinking 
about  n*  direction  is  rarely 
done  well,  if  it's  done  at  all. 

14  Dan  Gillmor  thinks  that  blogs, 

even  ones  written  by  execu¬ 
tives.  can  add  a  human  voice 
to  corporate  Web  sites. 

15  Pimm  Foi  sees  another  side 
to  the  feel-good  story  about 
Microsoft  returning  billions 
of  dollars  to  investors. 

27  Paul  A.  Strassmann  also 
takes  a  look  at  Microsoft  and 
concludes  that  users  would  be 
wise  to  reduce  their  depen¬ 
dence  on  its  software. 

34  Paul  6len  notes  that  as  we 
move  higher  in  the  organiza¬ 
tion,  it  becomes  more  impor¬ 
tant  to  find  the  right  ques¬ 
tions  than  the  best  answers. 

44  Frankly  Speaking:  Frank 
Hayes  asked  readers  wbat  the 
CIO  of  California's  Contra 
Costa  County  could  have 
done  to  keep  sensitive  e-mails 
from  being  misrouted  to 
Sweden.  Plenty,  it  turns  out. 
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A  Matter  of  Life  or  Death 

STORAGE:  Consultant  Steve  rhiplrwrir 

discusses  the  roles  —  both  good  and  bad — 
thatsto^agetechDologyplayedinhiscallcer 
treatmenL  O  QuiekLMt 46437 

A  Bit  of ‘Geek  Haawen' 

MOBILE/WIRELESS:  Cort^tOerworid  Web 

developer  Peter  Smith  got  his  hands  on  the 
new  AirPon  E^>ress  wireless  access  point 
^4  was  surfing  and  streaming  anisic  before 
he  knew  H.  O  OtrieklM  46417 

Bfegsat  the  Convention 

eOYCRKMEIIT:  The  quesdoo  -Are  bloggers 

realjottmalistsrmisseswfaat'sinastmter- 
csting  about  new  media  in  politics,  writes 

online  managing  editor  Shanm 
OQiMiLink  46473 

RSSFMs 

Get  news  higblights  delivered  to  your  desk¬ 
top  with  our  free  RSS  feeds.  Subscitoe  to 
top  news  headlines,  popular  futures  like 
QuickStudy  and  Shark  Thnk  and  doaetts  of 
technology  topics,  like  security  and  operat¬ 
ing  systems.  O  OukMJnk  a4«oa 
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AT  DEADLINE 


Microsoft  Releases 
Patch  for  Browsers 

HjcniwB  Cofp.  iilMild  M  aut- 
Dl-cyek  siAinra  pridi  lo  Ih 
Dm  Mcwily  holH  ki  takiM 
Eohtw.  Mdi  gIvM  •  imrity 
nuns  d  *ci«icaL'  Mcrewtl. 
■Ml  Inicilly  inuM  pddiai 
nuMHy.  »gpd  iMn  Id  Iratal  Ihi 

lHWIDmowiMpODtlllllllD- 

cam  d  pomuily  Mrious  iWa 
poMd  by  Vm  naai.  Om  bdi  has 
dnady  bMD  laad  a  ai  attach 
cdM  OoaailaadJacI  Ihd  aaa 
laachad  by  hachara  to  Juna. 


EOS  Sees  Bit 
Loss  on  Navy 

ElaGlfDdcDalaSyalamCarD.to- 
ciaaaad  ttik  yaar’s  prdadad  toss 
onllsSSJIbaoniraDdanitta- 
Itoo  cadrad  aWi  tta  Navy. 
cilto«  antor  datofiab  ad  towar- 
bun-aipaclai  paynails.  EDS 
atoosddilhasaiiaarftoandan- 
dhacanlractwilhaiunhtoiili- 
M  carponta  aaa.  EDS  rafmlad 
a  aacDDd-aianar  praM  d  S270 
nhNonaaiavasaadSSJhbM- 
■on.  dthaagh  h  toat  SIC  inaton 
Irani  ai  oparattnp  atai^idM. 


SCO  Qroup  Seeks  to 
Revive  Unix  Name 

Ltodon.Ulih-baasCT)MSCO 
Braup  toe.  canCnmil  Hial  C  baa 
appCsd  hr  a  badanah  on  Cm 
nana  Itoia  Syatam  laborato- 
itoa,'  aiNdl  amdd  raslva  Cm 
nana  d  Cm  tornar  ATCT  Carp, 
itott  CM  ones  oamaC  Cm  rlgMs  to 
Unis.  Bd  Tha  Opan  Qroop  oon- 
sarttam  add  C  nfl  obiact  'atrani- 
ovdy*  la  SCO's  appicatton  an  Cm 
graunds  Cm  H  vnwid  canflki  adCi 
Cm  canaarlfani's  Unto  tradanah. 


Short  Takes 

IBM  laU  N't  bvyina  CyMM  Sys- 
torm  Cotp^  M  (Mnd.  COf.- 
bnsd  VMidor  of  parformMca 
monitorifig  took  for  VIM>-basad 
Miplcatto*«....HEWLfTT- 
PACXAM)  CO.  todoy  wM  anneunco 
a  dMi  arviir  But  can  support 
SCSI  and  Sartal  ATA  drfm  bs- 


Microsoft  Confirms 
More  Product  Delays 


XI’ SP2, 64-bit 
Extended  System.s 
slated  for  2005 


BV  CAROL  BCIWA 

Marshaling  re¬ 
sources  to  finish 
off  the  security- 
focused  Service 
Pack  2  for  Windows  XP  is 
having  a  trickle-down  effect 
on  other  Microsoft  Corp. 
products. 

TTie  company  confirmed  last 
week  that  tfie  first  service  pack 
for  Windows  Server  2003  is  be¬ 
ing  delayed  to  the  first  half  of 
2005.  lust  weeks  ago,  the  ven¬ 
dor  had  said  it  would  be  ready 
in  the  second  half  of  this  year. 

Also  being  delayed  to  the 
first  half  of 2005  are  versions 
of  Windo>vs  Server  2003  and 
XP  designed  to  run  on  Ad¬ 
vanced  Micro  EAevices  Inc.s 
64-bit  Opteron  chips  and  Intel 
Corp.’s  Xeoo  EM64T  proces¬ 
sors.  Service  Pack  1  for  Win¬ 
dows  Server  2003  forms  the 
basis  of  the  new  Windows  for 


64-bit  Extended  Systems  re¬ 
leases. 

A  Microsoft  spokeswoman 
said  the  development  cycle  is 
driven  by  quality  “rather  than 
an  arbitrary  date"  to  ship 
products.  However,  Microsoft- 
today  plans  to  release  a  beta 
for  the  AMD  and  Intel  chip 
sets,  according  to  Dennis 
Oldroyd,  director  of  the  Win¬ 
dows  Server  business  group. 

Several  IT  managers  said 
the  delays  won't  affect  their 
companies,  although  some  of 
them  expressed  concerns 
about  the  pattern  that  Micro¬ 
soft  is  increasingly  demon¬ 
strating.  “It  won't  affect  us.  but 
if  there  arc  fixes  that  rcflea 
additional  security/error  cor¬ 
rection.  1  would  like  to  have  it 
now  —  not  tomorrow,"  said 
Zeke  Duge,  CIO  at  Smart  & 
Final  Inc.  in  Commerce,  Calif. 

“We  are  always  anticipating 
increased  security  fixes  for 
Microsoft  products.  While  we 
a^ree  that  a  solid  solution  is 
bener,  and  we  arc  willing  to 
wait,  there  arc  always  con- 


HI  don't  likB  the 
idea  that  new 
stuff  that  I  was  not 
waiting  for  is  being 
sprung  on  me.  More 
fluff,  less  meat. 

ZEKE  OME  CIO. 

SMART  &  FINAL  INC 

cems  about  weakness  in  the 
operating  system."  said  Les 
McCarter,  IT  inftrastnicture 
and  operations  director  at 
Hawaiian  Electric  Co.  in 
Honolulu. 

Charles  Emery,  senior  vice 
president  and  CIO  at  Horizon 
Blue  Cross  Blue  Shield  of  New 
Jersey  in  Newark,  said  he’d 
like  Microsoft  to  start  hitting 
its  stated  target  dates  because 


Microsoft  Scant  on  Longhorn  Specifics 


RfDMOBiD  WASH 

Mcrasoft's  chief  firitfidal  offi¬ 
cer.  JofwiConnots.  last  wB8k 
lafodtgitheInnoMtivepipe- 
kte*  that  Bii  ensue  that  new 
products  and  tadvNilogy  keep 

rolnootA  in  the  future. 

And  *fuiifle’ was  the  opera¬ 
te  word  at  the  annual  financial 
analyst  mealing  here  when  it 
came  to  the  nexj  niafor  version 
ol  Windows,  becatse  that  was 
theeidenfofffiedetadsifero- 
soft  prowded  atxMt  the  fir^  stop 
date  tor  the  release,  code- 
named  Umghom 

IMe'va  made  realy  good 
progresa  In  the  last  year.  The 
next  mlestone  for  us  is  gettno 
the  beta  out  aometime  next  year, 
and  than  be  the  point  at  adiich 
the  ieoiure  set  and  the  schedide 


wi  realy  be  pieUy  much  focked 
dmm.*S8idBB6ates.MicrD* 
soft's  cheimwn  and  chief  soft¬ 
ware  archItocL  Ts  a  reiaase 
tftaTs  (fiiven  by  the  breakthrough 
laabfles.  and  wal  have  a  strong 
serwa  of  exactly  gets  in 
and  wfot  tha  schedula  looks  Ifiie 
aswagattheibelaouiaonw 
time  in  the  next...  wefUlM 
yew  sometime.* 

Gates  ddnl  say  the  beta 
would  be  released  in  the  first  heR 
of  next  yaw.  as  the  company  had 
said  prior  to  last  weak.  If  the 
beta  should  dp  to  the  secorvi 
half  of  2005,  that  could  have  a 
snowtMl  effect  and  push  the 
proebefs  Aral  ship  (tote  beyond 
the  2006  target  dtet  the  compa* 
nyhaa  banded  about 
'fi's  a  big  reteeae.  and  puffing 


together  that  many  piacas  n  an 
integrated  faetoon.  rs  bigger 
than  anytfiing  we’ve  ever  done.* 
saidCEOSteveBaftner.*lal- 
ways  td  ou  people  (that)  rela¬ 
tive  to  ou  scalB,  rs  8  tat  more 
■teWMowa  1.0.  maybe  ao. 
than  anything  wteVe  done  betore 
It's  a  wholB  new  devefopmant 
plalfonn,  and  gaffing  the  vdnie 
rww  developmerrt  ptattorm  done 
is  harder  than  just  making  incre¬ 
mental  improvements  In  uaer 
and  admirisstretion  toalur^ 
We're  working  hard  at  R.* 

•CWSiM 
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it  would  help  his  department 
to  plan  more  efficiently. 

So  far.  companies  with  ex¬ 
ceptionally  large  databases 
have  been  the  primary  users 
of  64-bit  appli^tions.  and  the 
delay  isn’t  expected  to  bother 
such  companies  because 
they’ve  already  sought  out 
other  64-bit  systems.  Bob 
Crownhart,  director  of  infra¬ 
structure  at  Premera  Blue 
Cross,  said  the  Mountlake  Ter¬ 
race.  Wash. -based  insurance 
company  uses  servers  from 
Unisys  Corp.  to  run  its  64-bit 
SQL  Server  data  warehouse. 

Oldroyd  said  Microsoft 
has  yet  to  see  mainstream 
adoption  of  Windows  for  64- 
bit  systems  but  expects  that 
to  happen  within  12  to  36 
months.  “We  sec  a  lot  of  eval¬ 
uation  from  customers  now." 
he  said-  “They  want  to  figure 
out  where  th^  can  use  it.“ 

One  Microsoft  product  up¬ 
date  that  did  ship  last  week 
was  Service  Pack  1  for  Office 
2003.  The  new  edition  bundles 
not  only  bug  and  security  fix¬ 
es  but  also  feature  enhance¬ 
ments  for  OneNote  (such  as 
improved  integration  with  Of¬ 
fice)  and  InfoPath  (including 
enhanced  support  for  man¬ 
aged  code,  digital  signatures 
and  form-sharing  via  e-mail). 

Mixed  FBBings 

But  users  have  mixed  feelings 
about  adding  features  in  ser¬ 
vice  packs,  which  have  histori¬ 
cally  been  restricted  to  bug 
and  security  fixes.  Crownhart 
said  be  views  it  as  a  positive 
option  to  deliver  pockets  of 
features  earlier  to  customers 
so  they  don’t  have  to  wait  for 
major  releases. 

“If  the  features  are  fully 
tested.  1  see  no  reason  to 
wait,"  Emery  said. 

But  Roben  Rosati.  CIO  at 
Werner  Ca  in  Greenville,  Pa., 
said  be  doesn't  like  the  trend. 

“If  Microsoft  wants  to  add 
new  features,  they  should  call 
it  something  else  —  perhaps 
‘feature  pack.’  Service  packs 
should  just  fix  bugs  and  secu¬ 
rity  issues."  he  said. 

"I  don’t  like  the  idea  that 
new  stuff  that  1  was  not  wait¬ 
ing  for  is  being  sprung  on  me." 
Duge  added.  "More  fluff,  less 
meat"  OxasBB 
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NASA,  Navy  Buy  Massive  Supercomputers 

MaAet  is  growine  l  about  $50  mUlion.»mewhal  I  andiasindu«ri«  _ _  _  . 


MaAet  is  growing 
for  high-powered 
systems,  IDC  says 

BV  PATRICK  THIBODEAU 

U,S.  govenunent  ^encies  an¬ 
nounced  purchases  of  two 
large  supercomputers  last 
week,  including  a  massive 
10.240-processor  system  for 
use  by  NASA  that  will  likely 
be  ranked  among  the  world's 
most  powerful  computers. 

The  NASA  system,  from  Sil¬ 
icon  Graphics  Inc.,  is  based  on 
Itanium  2  processors  running 
Linux.  The  other  system,  an 
IBM  supercomputer  purchased 
by  the  U.S.  Naval  Oceano¬ 
graphic  Office  uses  2.944  Pow- 
cr4*  processors  and  runs 
IBM’s  ADC  version  of  Unix. 

The  Navy  declined  to  dis¬ 
close  the  value  of  its  deal  with 
IBM.  NASA's  system  will  cost 


about  $50  million,  somewhat 
of  a  bargain  price  because  In 
tel  C^orp.  and  SGI,  among  oth¬ 
er  vendors,  will  be  studying 
the  system  as  part  of  a  re¬ 
search  agreement,  a  NASA 
spokesman  said. 

The  two  sales  may  prompt 
IDC  to  slightly  increase  its 
high-performance  technical 
computing  market  numbers 
in  its  next  forecast,  said  Chris 
Willard,  an  analyst  at  the 
Framingham.  Mass.-based 
research  company. 

IDC  last  week  said  that  the 
market  for  systems  used  in 
research  and  technical  com¬ 
puting  grew  14%  to  $5.6  billion 
last  year  and  will  keep  grow¬ 
ing  at  an  anntial  rate  of  6S% 
through  2008.  when  the 
market  is  expected  to  reach 
S7A  billion.  Commercial  users 
aK  typically  in  the  automo¬ 
tive,  pharmaceutical,  and  oil 


and  gas  industries. 

But  the  market  for  the 
lar^t  systems,  such  as  those 
purchased  by  NASA  is  due  to 
grow  only  2%  annually  until 
2008,  from  $771  million  to 
$849  million.  There  is  only  so 
much  money  the  world  is  will¬ 
ing  to  spend  on  this  class  of 
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computers,"  said  Willard. 

The  NASA  system,  which 
will  be  used  for  space  explo¬ 
ration  and  global  wanning  re¬ 
search.  is  a  very-iarge-node 
cluster,  made  up  of  512-proces¬ 
sor  systems  with  shared  mem¬ 
ory  and  a  single  instance  of 
the  Linux  operating  system. 

InTiniBand 
I/O  technology 
is  being  used  to 
connect  the  20 
512-processor 
systems  that 
make  up  the  su¬ 
percomputer, 
which  v^l  be 
housed  at  NASA's 
Ames  Research 
Center  in  Moffen 
Reid.  Calif  It’s 
expected  to  be 
operational  in 
November. 

The  Navy’s 
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IBM  supercomputer  is  a  clus¬ 
ter  of 368  IBM  eServcf  p655 
systems.  It's  slated  to  go  on¬ 
line  in  September  and  will  al¬ 
low  the  military  to  run  larger 
and  more  detailed  weather 
and  ocean  models,  including 
one  that  depias  the  earth's 
surface.  The  supercomputer 
wUJ  also  be  able  to  handle 
more  disparate  data  generated 
by  buoys,  satellites  and  other 
sources,  said  Steve  Adamec 
director  of  the  Naval  Oceano¬ 
graphic  Office's  Major  Shared 
Resource  Center  at  the  John  C 
Stennis  Space  Center  in  Mis¬ 
sissippi 

U.S.  government  agencies 
tend  to  buy  a  variety  of  super¬ 
computing  systems,  and  Sten- 
nis  Space  Center,  where  the 
IBM  system  will  be  housed,  is 
indicative  of  that  diversity.  In 
addition  to  running  older  IBM 
systems,  the  center  has  sys¬ 
tems  made  by  Cray  Incu.  Sun 
Microsystems  Inc.  and  SGL 
048S2S 


Sun  Aims  to  Attract  HP-UX, 
Windows  Users  to  JES 


Some  users  hail 
pricing  model; 
others  not  so  sure 

av  PATRICK  THIBODEAU 

In  an  effort  to  broaden  its 
reach  as  a  middleware  vendor. 
Sun  Microsystems  Inc.  plans 
to  make  its  lava  Enterprise 
System  available  on  Windows 
and  Hewlett-Packard  Ca's  HP- 
UX  by  the  end  of  the  year. 

Sun’s  pricing  model  for  the 
integrated  software  stack  of  14 
back-end  services  —  $100  per 
employee  per  year  —  is  partic¬ 
ularly  appealing  to  comfianies 
(hat  provide  hosting  services 
to  large  mimbers  of  external 
users.  Canada's  Saskatchewan 
Telecommunications  Holding 
Coep.,  which  has  about  3J600 
employees,  is  one  example. 

Curt  Smith,  general  manag¬ 
er  of  the  Regina-based  tele¬ 
communications  provider, 
said  the  pricing  model  allows 
him  to  provide  JES-based  ser¬ 
vices  such  as  messaging  and 
calendaring  functioos  to  ex¬ 


ternal  customers  on  a  hosted 
basts,  without  having  to  piay 
additionaj  software-licensing 
costs  to  Sun.  Smith’s  cost  re¬ 
mains  fixed  based  on  the  num¬ 
ber  of  employees  at  his  com¬ 
pany.  so  external  customers 
can  tap  into  fES  services  at  no 
extra  charge. 

Smith  said  that  his  company 
was  attracted  to  JES  because  it 
provided  integrated  and  tested 
services,  and  the  pricing  mod¬ 
el  is  an  added  benefit  because 
it  fixes  his  costs.  The  price 
works  for  us.  and  the  model 
'  works  for  us."  he  said. 

But  that  isn't  true  for  the 
TTie  Mltmta  foumal'Constitu- 
titm.  The  newspaper  is  a  Sim 
hardware  shop  but  is  using 
BEA  Systems  Inc’s  Web  appli¬ 
cations  SMver. 

Bnice  Bowles,  a  lechnolog>' 
manager  at  the  newspaper, 
said  he  met  with  his  Sun  rep¬ 
resentative  about  six  months 
ago  and  discussed  |ES.  Bowles 
said  he  asked  bow  the  ven¬ 
dor’s  per-employee  pricir^ 
would  account  for  all  of  his 


I  part-time  workers,  who  bring 
his  workforce  total  to  about 
10,000  people,  but  be  never 
I  got  an  answer. 

A  Sun  spokeswoman  said 
that  JES  pricing  applies  only 
to  full-time  employees,  not 
part-time  or  contract  workers. 

The  pricing  model  for  the 
bundled  applications  "is  a 
great  idea,  but  that  pricing 
model  b  not  necessarily  going 
to  work  for  every  business," 
said  Bowles.  Re^less.  he 
added.  “I'm  not  going  to  re¬ 
place  my  investment  in  BEA" 


JUST  THE  FACTS 


Java  Enterprise 
System 

■  STACK  INCLUDES:  VM 
and  application  services,  nel- 
work  KtenWy  services,  portal 
services,  communication  ml 
collaboration  servees.  avaiiabiTi- 
tysarvtces.  security  services 

•  SUPPORT: 

Current:  Solaris  on  Sparc. 
Opteran  and  Xeoa  Linux 

By  end  of  year  Windows. 
HP-UX  on  PA-ftlSC _ 

•  PRICE:  S100  per  employee 
pery«ar 


Analysts  said  Sun  had  no 
choice  but  to  extend  its  JES 
model  to  indude  support  for 
Windows  and  HP-UX.  The 
stack  currently  operates  on 
Solaris  and  Linux  systems,  and 
Sun  is  considering  making  JES 
open-source. 

"Sun  needed  to  port  to  ocher 
operating  systems  if  they  were 
ever  going  to  be  a  serious  con¬ 
tender  in  the  middleware 
space,"  said  Shawn  Willett,  an 
analyst  at  Current  Analysis 
Inc.  in  Sterling.  Va.  The  abUit>* 
of  JES  to  operate  on  other  sys¬ 
tems  is  “pretty  much  a  re¬ 
quirement  for  Urge  corporate 
sites,  who  can’t  all  be  running  , 
Solaris  everywhere,"  be  said. 

One  lES  user.  Fbtis  Karonis. 
director  of  IT  and  telecommu  • 
nications  at  the  Athens  Inrer- 
'  national  Airport  in  Greece,  is 
running  Solaris  systems  on  64- 
bit  Sun  hardware.  Karonis  said 
he  sees  both  advantages  and 
disadvantages  in  running  JES 
on  Wintel  systems. 

Advantages  include  lower- 
cost  hardware,  leveraging  the 
existing  Windows  expertise  of 
systems  administrators,  and 
uniformity  in  hardware  a»vi 
operating  systems  administra¬ 
tion.  be  said.  But  amoc%  the 


disadvantages  are  duplicate 
technical  suppon  in  running 
JES  in  two  environments  and 
Windows  security  concerns. 
Karonis  added. 

Karonis  said  the  stack  is 
meeting  his  expectations.  “JES 
offers  a  rich  and  open  devel¬ 
opment  environment  where 
we  can  integrate  most  of  our 
airpon-spedfic  applications 
and  he  said.  Regard-  - 

ing  making  JES  open-source. 
Karonis  didn’t  seem  to  think  it 
would  matter.  "JES  is  already 
open  enough  for  developers," 
he  said. 

Whether  Son’s  pricing  mod¬ 
el  makes  sense  for  users  de¬ 
pends  on  a  number  of  vari¬ 
ables.  including  which  appli¬ 
cations  the)'  use  in  the  middle¬ 
ware  stack,  said  Thomas  Mur¬ 
phy.  an  analyst  at  Meta  Group 
Inc  in  Stamfonl  Conn.  If  an 
IT  shop  is  inicrested  only  in 
Web  devdopmciu  tools,  for 
instance,  then  it  may  want  10 
go  with  IBM’s  Web^here  or 
use  the  opcn-sourcc  Apache 
Tomcat. 

In  any  case.  Sun's  JES  pric¬ 
ing  model  does  ‘shake  up  the 
market"  and  is  something  IT 
managers  should  consider. 
Murphy  said  O  48621 
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Insurer  Hands  Off 
AppsWorktoCSC 

ZMridi  InwranM  Co.  siW  it's  oul> 
mrcino  OMifeitiQn  dMolopmont 
and  maintmaiKtt  mik  h  ttw 
U.S..  tho  UJC.  Swibwlomi  and 
0W1NMV  to  CofBputar  SdMcos 
Cofp.  About  1 JOO  FT  anrtm*  urii 
bo  oMM  to  CSC  tMi  yoar 

and  to  2005  ao  part  of  tbo  dool. 
wtdcb  to  Mtood  at  up  to  SLS  Uh 
ton  ovor  atom  yoara.  Last  faH. 
Zurich  eutsourcod  PC  support  to 
DM  and  sfpnod  Equant  NV  to 
managt  votoo  and  data  notanrio. 


Nortel  to  Announce 
Additional  Cuttiac^ 

Nortol  Notworhs  Ltd.  plans  to  an* 
nounco  mors  cost-cutting  Ktions 
lator  thto  month,  along  wWi  pro- 
tontoary  lingndal  roaufis  tor  this 
yoar's  find  and  ascend  quanors. 
M  Damns,  prasWant  and  CEO  of 
Brampton.  Ontario-based  WertoL 
saM  ba  atil  oxpaeta  rovonua  to 
grow  fastor  than  lha  nolnorliing 
marhal  thto  year.  But  tbs  compa¬ 
ny  isn't  maa^  tts  oparating  cost 
targals.  Oimna  added. 


Design  Snafus  Must 
End,  Says  Intel  (XO 

to  an  totoraai  memo,  intol  Corp. 
CEO  Craig  Banaft  anote  that  the 
chip  maker  noods  to  do  a  better 
ieb  of  bringtog  products  to  mar- 
hat  Tho  momo.  dated  Jidy  2t.  toi- 
towed  a  amios  of  dashpi  probtom 
and  dotoys.  *Thto  to  not  the  totol 
wo  al  know,  and  that  tonolac- 
captabto,"  Bam«  wrote.  But  to 
another  dtom.  total  said  ra  post¬ 
poning  iMpmento  of  a  4-6Hz 
Ptotium  4  by  up  to  three  months, 
to  Iba  first  quarter  of  next  year. 


Short  Takes 


MKROSOn  COUP.  ralMMd  a  ac- 
ondbsta-toatvartoenofBsda- 
toyod  SQL  Sarwr  2005  database. 
...  The  Eoropaon  Union't  ascend- 
highael  court  aat  a  hoartog  data  of 
Sipt  SO  on  Mcreaofl't  roguist 
that  andtnot  rimodtoo  bapoood  in 
March  by  Bnopaon  ofHdato  bo 
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HOT  TECHNOLOOY  TRENDS,  NEW  PRODUCT 
NEWS  AND  INDUSTRY  ODSSIP  BY  MARK  HALL 
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Boosters  Lick .. . 

...  a  fid  n  vocahAary  when  dotting  up  CWs.  That's  what 
Robert  Lefkowitz  told  an  audience  of  nearly  2.000 
hackers  at  the  O’Reilly  Open  Source  Convention 
(Oscon)  in  Portland,  Ote.,  last  week.  Although 
Lefkowitz  is  vice  president  of  enterprise  data,  sys¬ 
tems  and  architecture  at  AT8cT  Wireless  Services 


Inc.  and  dresses  like  a  natty 
Wall  Street  executive,  he's  got 
lots  of  credibility  with  the 
open-source  crowd,  given  his 
history  with  open-source  at 
AT&T.  Merrill  Lynch  and 
elsewhere.  Plus  he's  got  a 
coot  online  handle.  ROML 
(pronounced  "Rommer),  that 
his  admirers  used  relentlessly 
at  Oscon.  He  ai^es  that 
when  a  CIO  is  thinking  about 
the  ‘'source"  of  a  corporate 
application,  he's  not  just  con¬ 
sidering  endless  screens  of 
lava  or  other  languages 
typed  by  a  programmer.  The 
CIO  is  also  thinking  about  the 
application  requirement  doc¬ 
uments,  modeling  work,  vali¬ 
dation  procedures,  testing, 
administration  and  much 

more.  He  cites 
the  book  Soft¬ 
ware  Assess¬ 
ments.  Bench- 
marks.and 
Best  Practices, 

I  by  Capers 
I  Jones  (Addi- 
son-Wesley 
Professional. 


18% 

Portion  code 
contriMes 
to  a  business 
appItcatMn. 
says  author 
C^apersJones 


20(K».  which  shows  that  less 
than  one-fifth  of  an  applica¬ 
tion's  effort  is  irude  up  of 
code.  "Source  doesn't  mean 
code,"  says  Lefkowitz.  “In 
fact,  the  whole  movement  in 
software  engineering  is  away 
from  code  to  more  abstract 
thinking  about  the  applica¬ 
tion."  In  effect,  he  says,  a  CIO 
looks  at  an  application  like  a 
meal,  the  preparation  of 
whkb  involves  a  kitchen, 
utensils,  a  recipe  and  ingredi¬ 
ents.  But  all  the  open-source 
advocates  see  are  the  ingredi¬ 
ents.  Lefkowitz  suggests  that 
if  open-source  proponents 
can  learn  the  (^O's  lingo, 
they  will  better  advance  their 
cause  in  the  data  center. 

Nwwll's  Enterprise 
Server  9  Draws... 

...  big  crowds  of  hadan  at 
Oseea  They  wanted  to  see 
what  will  likely  be  the  first 
release  of  an  enterprise-class 
server  software  with  the  Lin¬ 
ux  2.6  kernel  As  yet  unan¬ 
nounced.  but  widely  expected 
to  ship  in  the  next  two 


2,000 
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months.  Enterprise  Server  9 
for  multiprocessor  Intel- 
based  machines  gets  oohs 
and  aahs  from  Liimx  lovers 
for  its  ooounifbrm  memory 
access  technology,  which 
makes  the  computers  excep¬ 
tionally  fast  Linux  aficiona¬ 
dos  also  give  high  marks  to 
the  stability  of  the  beta  now 
in  the  field  and  the  improved 
security  features.  Novell  Inc. 
in  Waltham.  Mass.,  is  certify¬ 
ing  third-party  software  on  Its 
SUSE  Linux  16  release.  Once 
enough  applications  have 
been  blessed,  expect  some 
big  news. 

Microsoft  Pushes 
Middle  Ground . . . 

. . .  to  ttw  opm-aourcu  debate. 

Jason  Matusow,  director  of 
Microsoft  CIorp.'s  shared- 
source  initiative,  points  to 
two  trends  that  he  hopes  will 
bring  a  happy  middle  ground 
for  IT  users  who  like  the  idea 
of  open-source  products  but 
still  worry  about  who's  ulti¬ 
mately  responsible  for  the 
code.  First,  Matusow  says, 
virtually  every  major  vendor, 
including  his  company,  is 
contributing  to  the  open- 
source  movement.  He  claims 
that  Microsoft's  shared- 
source  programs  and  open- 
source  work  so  f^  are  "just 
the  tip  of  the  iceberg"  and 
that  much  more  will  be  com¬ 
ing.  He  also  gives  credit  to 
IBM.  Sun  Microsystems  Inc., 
Apple  (Computer  tne,  Real¬ 
Networks  Inc.  and  others  that 
are.  to  varying  degrees,  re¬ 
leasing  proprietary  source 
code  into  the  hands  of  users. 
The  second  trend  be  high¬ 
lights  is  that  open-source  de¬ 
velopers  such  as  MySQL  AB. 
Red  Hat  Inc..  Zend  Technolo¬ 
gies  Ltd.  and  others  are  build¬ 
ing  prontabie  businesses 
around  specific  open-source 
products.  He  calls  the  two¬ 


pronged  trend  a  “move  to  the 
middle  where  the  value  is" 
for  both  users  and  vendors. 
He  does  acknowledge  that  it's 
ITs  “voting  with  their  pock- 
etbook"  that's  forcing  this 
shift  to  the  middle  ground  by 
vendors.  So  vote  early  and  of¬ 
ten.  if  you  want  to  fu^  more 
goodies  in  the  middle. 

Wyse  Readies 
Linux  Thin  Client... 

...basqilontlwhofnqw2.6lwr- 
nel  of  the  oparattog  ayitom.  The 

5150SE  from  Wyse  Technolo¬ 
gy  Inc.  will  ship  early  in 
and  cost  you  a  mere  S399.  It's 
the  first  thin  client  for  the 
new  Linux  kernel  and  it's  the 
first  using  a  chip  set  designed 
for  thin-client  Unux  from  Ad¬ 
vanced  Micro  Devices  Inc., 
claims  Mike  DeNeffe,  a  senior 
director  at  Wyse.  DeNeffe 
says  the  Linux  thin-client 
market  is  a  “growth  opportu¬ 
nity"  for  the  company,  and 
the  5150SE  will  be  added  to  its 
other  Linux  thin  clients,  the 
5455  and  5125.  The  new  ma¬ 
chine  runs  twice  as  fast  as  its 
predecessors  and  improves 
video  performance,  according 
to  the  San  Jose-based  compa¬ 
ny.  Junaid  (^urashl  a  Wyse  se¬ 
nior  product  manager,  teasts 
that  his  company  has  added 
thin-client  features  such  as 
stateless  configuration  to  the 
Linux  2.6  kemeL  'That  means 
IT  administrators  don't  have 
to  set  up  each  machine  on  the 
network  because  each  5150SE 
autodiscovers  its  server  and 
configures  itself.  O  48606 
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Electronic  Arts  makes  beautiful  video  games.  Since  this  entertainment 
powerhouse  switched  its  data  transport  from  ATM  to  IP  with  Sprint 
coupled  with  Electronic  Arts'  technology,  network  performance  has  improved 
dramatrcally  Gigabytes  of  game  code  and  digital  assets  that  took  8-10  hours 
to  send  now  take  less  than  20  minutes.  Thanks  to  shortened  data  transport 
times  and  the  ability  to  host  digital  assets  in  one  place,  the  process 
of  developing  games  is  now  both  quick  and  highly  collaborative,  with 
information  sharing  amongst  more  than  40  countries.  And  since  switching 
to  Sprint.  Electronic  Arts  saves  roughly  $100,000  a  month.  With  Sprint, 
Elwtronic  Arts  is  reliable,  faster  and  more  effective  -  in  a  word,  beautiful. 
With  Sprint,  business  is  beautiful.' 

>  Visit  Sprint.com/beautiful  for  case  studies  or  call  877-777-5568  > 
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MCI  Ups  Performance 
Pledges  to  Retain  Users 


Guarantees  faster  transmissions  on  IP 
network  as  possible  buyout  bid  looms 


BY  MATT  HAMBLBM 

MCI  INC  last  week 
announced  new 
performance 
guarantees  for 

users  of  its  IP  network,  anoth¬ 
er  in  a  series  of  network  ser¬ 
vices  enhancements  that  the 
company  is  promising  to  its 
business  customers. 

The  continuing  effort  to 
boost  customer  cooTidence  in 
MCTs  services  comes  as  the 
company  faces  a  possible  buy¬ 
out  bid  by  Leucadia  National 
Corp.  On  July  12,  MCI  said  it 
had  received  a  notice  from 
Leucadia  that  the  New  York- 
based  investment  ftnn  intends 
to  seek  clearance  from  federal 
authorities  to  buy  a  majority 
of  MCTs  common  stock.  Leu- 
cadia  ofTicials  wouldn't  com¬ 


ment  about  the  company’s 
plans  last  week. 

Colleen  Boothby,  an  attor¬ 
ney  who  represents  dozens  of 
large  companies  in  contract 
negotiations  with  telecommu¬ 
nications  carriers,  said  the 
MCI  users  she  works  with 
don't  appear  to  have  any  plans 
to  abandon  the  vendor.  But, 
she  added,  some  do  wonder  if 
the  buyout  proposal  could 
spell  the  end  of  MCI  as  a  sepa¬ 
rate  company,  which  could  re¬ 
sult  in  less  competition  for 
network  services  contracts. 

’The  big  end-user  concern 
is  whether . . .  MCI  and  AT&T 
will  exist  in  a  year  or  two,” 
said  Boothby.  who  works  at 
Levine,  Blaszak,  Block  & 
Boothby  LLP  in  \^hmgton. 
“Every  day.  it  looks  more  like¬ 


Banks  Balk  at  Info-Sharing 
Provision  in  Privacy  Law 


Claim  compliance 
with  Calif.  SB  1 
will  raise  IT  costs 


BV  JAIKUMAB  VlaAVAN 

Banks  doing  business  in  Cali¬ 
fornia  are  planning  to  appeal  a 
recent  federal  court  decision 
that  lets  the  sute  enforce 
tough  new  provisions  related 
to  the  sharing  of  cxistomcr  in¬ 
formation  with  affiliates. 

The  provisions  are  part  of 
California's  Financial  Informa¬ 
tion  Privacy  Act,  known  as  SB 
1.  which  went  into  effect  July  1. 
Tile  law.  which  b  hugely  un¬ 
popular  among  financial  ser¬ 
vice  providers,  nequircs  banks 
to  give  customers  the  opportu¬ 
nity  lo  opt  oui  of  cross-mar¬ 
keting  programs  in  which  their 
infomuckM  b  shared  with  af¬ 
filiates  such  as  mortgage  and 
credit  card  companies. 


Most  financial  companies  in 
the  state  had  expected  that  the 
affiliate  sharing  provisions  in 
SB  1  would  be  preempted  by 
exbting  guidelines  in  the  fed¬ 
eral  Fair  Credit  Reporting  Act 
of  1996,  under  which  no  such 
permission  b  required. 

An  attempt  by  the  American 
Bankers  As^iaiion,  the  Fi¬ 
nancial  Services  Roundtable 
and  the  Consumer  Bankers 
Association  to  legally  block 
the  affiliate  sharing  provisions 
of  SB  I  was  rejected  by  a  Cali¬ 
fornia  Federal  Dbtrict  Court 
judge  in  late  June. 

“We  were  certainly  disap¬ 
pointed  by  that  ruling.”  said 
Harvey  Radio,  a  spokesman 
for  Bonk  of  America  Corp.  in 
New  York.  “The  deebion  real¬ 
ly  makes  it  harder  for  our  cus¬ 
tomers  lo  do  business  with 
us.”  IT  expenses  associated  i 
with  maintaining  and  process-  I 


ly  that  they'll  be  gobbled  up." 
She  said  MCFs  ability  to  keep 
service  levels  high  will  deter¬ 
mine  whether  the  company, 
which  emerged  from  Chapter 
11  bankruptcy  protection  in 
April,  can  retain  customers  in 
the  coming  months. 

Nortec  Inc.  in  Providence, 
RJ..  has  another  year  left  in  a 
two-year,  $4  million  contract 
under  which  MCI  provides 
network  services  to  about 
10,000  employees  at  35  loca¬ 
tions  in  the  U.S.  Gary  Rosen¬ 


berg.  director  of  telecommun¬ 
ication  services  at  Nortec, 
said  MCfs  service  quality  re¬ 
mained  high  throughout  the 
bankruptcy  process. 

Rosenberg  added  that  he 
has  seen  a  marked  improve¬ 
ment  in  MCTs  billing,  which 
previously  was  problematic. 
But  the  Leucadia  move  “puts 
MCI  in  play,  and  eventually 
somebody  will  gobble  them 
up,"  he  said. 

Getting  Better 

An  rr  manager  at  a  large  MCI 
customer  in  the  transportation 
field  said  the  possible  buyout 
“doesn’t  have  us  loo  worried 
right  now."  The  user,  who 
asked  not  to  be  named,  said  he 
experienced  service  problems 
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Math  MCI  last  year  but  has 
seen  “a  pretty  good  turn¬ 
around"  in  recent  month-s.  The 
improvement  has  been  en¬ 
couraging  enough  for  his  com¬ 
pany  to  consider  giving  MCI 
part  of  its  future  network  ser¬ 
vices  business,  he  added. 

MCTs  new  Internet  service 
gtiarantees  include  reductions 
in  transmission  latency  world¬ 
wide.  with  a  guarantee  of  20% 
faster  transmission  in  North 
America,  said  Ralph  Monefort. 
the  company's  director  of  In¬ 
ternet  access  services.  MCI  is 
also  guaranteeing  that  Inter¬ 
net  service  will  be  100%  avail¬ 
able.  with  North  American 
users  automatically  receiving 
credits  for  free  service  lime  if 
outages  occur  (sec  chart). 

MCTs  business-related  IP 
services  revenue  declined  18% 
fast  year,  according  to  Steven 
Harris,  an  analyst  at  IDC  in 
Framingham.  Mass.  But  he 
said  MCfs  Internet  serrice- 
level  agreements  are  among 
the  most  impressive  being 
offered  by  network  operators. 
“SLAs  are  an  awful  area  that 
carriers  are  trying  to  im¬ 
prove.”  Harris  said.  O  4^04 


ing  customer  preference  infor¬ 
mation  could  contribute  to  in¬ 
creased  costs,  he  added. 

Under  the  law,  companies 
have  to  send  notices  to  all  Cal¬ 
ifornia-based  customers  and 
give  them  a  chance  to  opt  out 
of  affiliate  sharing  They  must 
wait  45  days  for  replies.  Dur¬ 
ing  that  time,  ewitomer  rec¬ 
ords  have  to  be  quarantined 
and  can't  be  shared  with  oth¬ 
ers.  Companies  that  share  in¬ 
formation  with  nonaffilfatcd 
third  parties  also  need  to  get 
separate  opt-in  permissions. 

Contgiiancs  Headaches 

From  an  IT  standpoint,  com- 
plyii^  with  the  requirements 
means  creating  new  database 
tables  for  recording  informa¬ 
tion  about  when  notices  were 
sent  out.  when  they  were  re¬ 
lumed  and  a  customer’s  pref¬ 
erence,  said  Arshad  htoor. 

CEO  of  StrongAuth  Inc„  an 
identity  and  compliance  man¬ 
agement  company  in  Cuperti¬ 
no,  Calif.  I 

ft  also  means  putting  poll-  I 


cies  in  place  “that  spell  out 
what  business  divisions  need 
to  do  and  a  process  for  ensur¬ 
ing  that  they  check  this  table 
before  sharing  any  informa¬ 
tion  with  affiliates”  and  third 
parties.  Noor  said. 

“Companies  are  making  a 
huge  effort  to  comply  with  the 
law.  It  caught  a  lot  of  them  by 
surprise,”  said  Fritz  Elmen- 
dorf,  vice  president  of  com¬ 
munications  at  the  Consumer 
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Bankers  Association.  A  lot  of 
that  group's  members  have 
“simply  shut  down  cross-mar- 
keting  activities"  because  they 
have  not  yet  gone  through  the 
process  of  sending  out  notices, 
he  said 

Notating  the  opt-out  and 
opt-in  selections  on  customer 
files  “becomes  complicated 
time-consuming  and  expen¬ 
sive.”  given  the  separate  sys¬ 
tems  that  banks  often  main¬ 
tain  for  mortgages,  credit 
cards  and  deposit  accounts. 
Elmendorf  said.  "Meters  of¬ 
ten  complicate  this  and  com¬ 
pound  it  where  there  may  be 
multiple  systems  in  multiple 
states.”  he  said 

“We  remain  fully  confident 
that  we  will  prevail  on  ap¬ 
peal”  said  Tom  Dresslar.  a 
spokesman  for  California  At¬ 
torney  General  Bill  Lockyer. 

“I  can  understand  why 
[banksj  were  taken  by  sur¬ 
prise.”  Dresslar  added 
"They’ve  been  on  a  long  win¬ 
ning  streak  on  these  kinds  of 
issues.”  O  48524 
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Mobile  Devices  Move  Wi-Fi, 
Cellular  Closer  to  Convergence 


HP,  Motorola  products  let  users  roam 
between  netwoiics  but  have  limitations 


Wt-FJ  AND  cellular 
network  tech¬ 
nology  finally 
lied  the  knot 

last  week,  as  Hewlett-Packard 
Ca  and  Motorola  Inc.  each  in¬ 
troduced  mobile  devices  that 
can  roam  between  the  two 
technologies.  But  both  prod¬ 
ucts  have  limitations. 

Motorola  said  its  CN620 
phone  can  function  as  a  voice- 
ovcr-IP  phone  on  Wi-Fi  wire¬ 
less  LANs  and  as  a  cellular 
phone  on  Global  System  for 
Mobile  Gsmmunications  net¬ 
works.  The  CN620  also  sup)- 
ports  data  communications  on 
both  networks.  Motorola  said, 
adding  that  handofis  between 
the  Wi-Fi  and  GSM  networks 
will  be  handled  by  technology 
developed  by  Avaya  Inc.  and 
ProximCorp. 

HP  and  T-Mobile  USA  Inc. 
announced  an  iPaq  handheld 
computer  that  can  roam  with¬ 
out  dropping  a  signal  between 
T-Moblle  s  802.11b  Wi-Fi  hot 


spots  and  GSM  cellular  data 
network.  The  iPaq  6315  can 
also  operate  as  a  voice  phone 
on  the  T-Mobile  GSM  network, 
but  it  works  only  in  data  mode 
when  used  in  both  Wi-Fi  and 
GSM  modes. 

Rick  Roesier.  vice  president 
of  handheld  maiketing  at  HP. 
said  his  company  and  Bellevue. 
Wash-based  T-Mobile  view 
the  development  of  a  com¬ 
bined  Wi-R/GSM  device  that 
would  support  VoIP  as  a  “very 
interesting  possibility.  But  he 
didn't  disclose  specific  plans 
for  offering  such  a  product. 

No  802.11b  Support 

Motorola's  new  phone  also 
has  a  potential  drawback.  The 
CN620  doesn't  support  the 
well-entrenched  802ilb  Wi-Fi 
standard,  meaning  users 
would  be  required  to  tn<rall 
WLAN  equipment  based  on 
the  newer  802.11a  technology. 

Several  IT  managers  hailed 
the  potential  of  a  combined 
Wi-Fi/cell  phone,  but  they 


balked  at  the  cost  of  installing 
new  WLANs  to  support  the 
CN620. 

For  example.  FedEx  Corp. 
has  already  deployed  an  ex¬ 
tensive  802dlb  infrastructure 
at  its  fiKilities  worldwide.  Ken 
Pasley.  director  of  wireless 
business  development  at 
FedEx,  said  he  doesn't  see  any 
cost  justification  for  upgrad- 
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Red  Hat  to  Launch  Java  App  Server 


Vendor  extends  its 
reach  beyond  Linux 

BV  JAMES  mCCOLAI 

Red  Hat  Inc.  plans  to  release 
its  first  lava  application  server 
at  the  UmixWorld  conference 
in  San  Francisco  today,  broad¬ 
ening  its  business  beyond  the 
Linux  operating  system,  in¬ 
dustry  sources  said. 

Red  Hat  Application  Server 
will  be  sold  on  a  subscription 
basis  with  services  and  sup¬ 
port.  under  a  pricing  model 
similar  to  what  Red  Hat  uses 
for  its  Linux  operating  system, 
according  to  the  sources. 
Pricing  is  likely  to  also  be 
announced  today. 


The  software  is  based  on 
Jonas,  or  Java  Open  Applica¬ 
tion  Server,  an  open-source 
application  server  developed 
by  the  ObjectWeb  Consor¬ 
tium.  a  France-based  nonprof¬ 
it  group.  It  incorporates  Tbe 
Apache  Software  Foundation's 
Tomcat  Java  servlet  engine 
and  Struts,  a  software  frame¬ 
work  for  building  Java  Web 
applications,  the  sources  said. 

Raleigh.  N.C.-based  Red 
Hat  said  last  August  that  it 
would  work  with  ObjcctWeb 
to  offer  a  Red  Hat-branded  ap¬ 
plication  server.  A  beta  ver¬ 
sion  was  released  in  Decem¬ 
ber.  Representatives  for  Red 
Hat  and  ObjectWeb  declined  i 
to  comment  last  week  on  any  I 


I  upcoming  announcements. 

I  Red  Hat  Application  Server 
I  is  expected  to  compete  with 
proprietary  offerings  from  the 
likes  of  BEA  Systems  Inc.,  IBM 
and  Oracle  Corp. 

One  effect  of  opeo-sourcc 
products  has  been  to  apply 
pricing  pressure  on  propri¬ 
etary  vendors,  analysts  have 
said.  Sun  Microsystems  Inc., 
which  has  struggled  to  boost 
its  middleware  business,  offers 
a  low-end  version  of  its  appli¬ 
cation  server  for  free. 

Red  Hat  said  last  year  that 
it  would  also  release  cluster¬ 
ing  software  to  link  groups 
of  servers  and  programming 
toob  based  on  the  open-source 
Eclipse  project  Along  with 


ing  the  Memphb-based  com¬ 
pany's  WLAN  infrastructure 
to  gain  the  savings  on  cellular 
time  that  the  CN620  promises 
when  used  as  a  VoIP  phone. 

“It's  hard  to  spend  yourself 
into  savings,"  Pasley  said,  not¬ 
ing  that  the  cost  of  using  cell 
phones  continues  to  go  down. 

Milton  “Mac"  McClurkan. 
CIO  at  Bronson  Healthcare 
Group  Inc.  in  Kalamazoo, 
Mich.,  said  he  wants  to  take 
advantage  of  combination  de¬ 
vices  that  can  opwrate  on  bb 
company's  extensive  WLANs, 
which  are  based  on  a  mix  of 
802.Ub  and  802.Ug  technology. 
Therefore.  McClurkan  said,  he 
views  HP's  new  iPaq  as  a 
“more  significant"  product 
than  (he  CN620. 

A  Motorola  spokeswoman 
said  the  company  built  its 
combination  phone  around 
the  802.11a  standard,  which 
supports  raw  data  rates  of  up 
to  54Mbit/sec.  in  the  5-GHz 
band,  because  it  has  more  ca¬ 
pacity  for  voice  phone  calls 
than  802.Ub  does.  The  latter 
technology  provides  data  rates 
of  up  to  UMbit/sec.  in  the  2.4- 
GHz  band.  Cl  48522 


the  application  server,  the 
products  comprise  what  it 
caUs  its  Open-Source  Archi¬ 
tecture.  a  collection  of  server 
software  that  runs  on  its  Linux 
operating  system. 

ObjectWeb  was  founded  in 
2002  to  foster  the  develop¬ 
ment  of  open-source  middle¬ 
ware.  Along  with  Red  Hat,  its 
members  include  Bull  SA. 
France  Telecom  SA  and  the 
French  National  Institute  for 
Research  in  Computer  Science 
and  Control.  Cl  48617 
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Pac6  of  Vendor  Audits  Said  to  Be  Slowing 

Users  increase  self-auditine  of  softwair*  I  “inpaiiiK  dunn*  uk  1  rester  analyst  lohn  Rvmcr. 
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Users  increase  self-auditing  of  software  ‘‘“™« <•»  reaer  analyst  joim  Rymcr. 

licenses;  vendors  seek  to  avoid  conflicts  S“etaT^„“ 
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Thafslantelv  because  usert  _ a  '!'« tby  vendors),  said  For-  "Al  that  time.  I  was  getting 


BY  THOMAS  HOFFMAN 

0\'er  the  past  few  months.  Mi 
crosoft  Corp.  and  other  soft¬ 
ware  vendors  have  become 


- -  miuL  ou  wiui  mat  m  tne 

less  aggressive  about  threaten-  back  of  your  mind,  1  think  ifs 


avoid  COniliCtS  said  there  had  been  more  au- 
dits  at  their  companies. 

said  Clayton  Bretschneidei;  a  But  the  survey  also  found 
ne^ork  engineer  at  StUes  Ma-  that  more  audits  were  being 
chinery  Inc.  in  Grand  Rapids.  driven  by  internal  factors  than 
Mich.  “So  with  that  in  the  •  ... 


ing  customers  with  audits  to 
gauge  whether  they're  com¬ 
plying  with  their  li^nse  con¬ 
tracts.  according  to  analysts. 

That's  largely  because  users 
have  become  more  diligent 
about  conducting  self-exami¬ 
nations  with  license-cracking 
tools  to  defend  themselves 
against  audits.  IT  managers 
and  analysts  said  last  week.  In 
addition,  vendors  such  as  Mi¬ 
crosoft  have  shifted  toward  re¬ 
solving  licensing  issues  with 
users  uistead  of  running  the 
risk  of  ieopardiztng  customer 
relationships  by  doing  audits. 

“We're  not  feeling  any  di¬ 
rect  pressure  from  vendors, 
but  you  bear  stories  from  peo¬ 
ple  whose  companies  have 
gotten  dinged  for  a  couple  of 
hundred  thousand  dollars.” 


I  forcing  the  record  keeping  in 
I  our  IT  department  to  be  a  lot 
titter  than  it  was  se>^ral 
years  aga” 

StUes,  which  makes  wood- 
panel  saws  and  other  equip¬ 
ment.  last  year  began  using  a 
Web-based  tool  developed  by 
CDW  Corp.  to  track  its  use  of 
software  products,  including 
Microsoft  Office.  The  tracking 
software  is  hosted  by  Vernon 
HUls.  llL-based  CDW.  and 
Bretschneider  said  he  can  ac¬ 
cess  information  about  his  li¬ 
censes  via  a  Web  browser. 

According  to  a  report  that 
was  issued  July  23  by  Forrester 
Research  Inc.,  only  two  of  the 
41  IT  executives  who  respond¬ 
ed  to  a  March  survey  said  they 
had  seen  a  decrease  in  the 
number  of  audits  conducted 


by  vendors  (see  chart).  “We 
were  getting  indications  diu- 
iitg  the  budget  cycle  in  the 
fourth  quarter  of  2003  that 
there  was  heavy  activity  In  au¬ 
dits  (by  vendors)."  said  For- 


IT  Managers  Brace  to  Meet  Ongoing 
Sarbanes-Oxley  Compliance  Demands 


Documentation, 
workflow  apps 
are  in  demand 

av  THOMAS  HOFFMAN 

IT  managers  at  several  large 
companies  said  last  week  that 
the  software  they  now  have 
should  help  them  meet  the 
Sarbanes-Oxley  Act's  internal 
documentation  requirements 
on  an  ongoing  basis.  But  ana¬ 
lysts  think  many  corporate 
users  aren't  so  well  prepared. 

Companies  that  free  year- 
end  deadlines  for  complying 
with  Section  404  of  Sarbanes- 
Oxley  have  spent  a  lot  of  mon¬ 
ey  this  year  on  consulting 
services  in  an  effort  to  help 
themselves  “focus  on  their  im¬ 
mediate  needs  and  get  their 
arms  around  what  they  need 


to  automate  later.”  said  Cathy 
Hotka.  principal  at  Cathy  Hot- 
ka  &  Associates,  a  retail  IT 
consultancy  in  Washington. 

Section  404  requires  compa¬ 
nies  to  document  their  finan¬ 
cial  and  IT  controls  and  attest 
to  the  effectiveness  of  the  con¬ 
trols  on  an  annual  basis.  Hotka 
and  other  consultants  <aid 
they  believe  that  startup  next 
year,  companies  will  have  to 
b^in  investing  more  heavily 
in  technologies  such  as  work- 
flow.  doctiment  management 
and  identification  manage¬ 
ment  tools  to  help  them  auto¬ 
mate  some  of  their  Section 
404  compliance  processes. 

Compliance  work  isn't  a 
one-year  project,  noted  John 
Hagcrty.  an  ^analyst  at  AMR 
Research  Inc  in  Boston.  “It 
may  not  be  y2k  every  yean 


but  it's  an  ongoing  process 
that's  hanging  over  people's 
heads.”  he  said 
The  biggest  challenge  is  to 
get  software  that  frctlitates 
Sarbanes-Oxley  certification.” 


said  Ross  Wescon,  chief  IT 
auditor  at  Portland  General 
Electric  Co,  an  electric  utQit>- 
in  Portland  Ore.  “If  wc  leave 
it  all  to  manual  paperwork 
or  Excel  spreadsheets,  the  ef¬ 
fort  Mrill  soon  become  too 
cumbersonve." 

Existing  Systems  Capable 

But  Wescon  added  that  he 
thinks  Portland  General's  ex¬ 
isting  ERP  system  —  which 
includes  software  from  SSA 
Global  Technologies  Inc.  and 
PcopleSoft  Inc  —  plus  other 
tools  it  nms  are  capable  of 
handling  the  company's  on¬ 
going  controls  documentation 
and  testing  requirements. 

In  some  cases,  though,  “if 
you  try  to  force-fit  Sarbanes- 
Oxley  requirements  into  exist¬ 
ing  technologies  you  have  in- 
house,  it  doesn't  always  work.”  ! 
said  Karl  Kispert.  a  director  at 
Jefferson  Wells  International 
Inc,  a  Brookfield,  Wis.-based 
risk  management  consultancy, 
added  that  be  expects 


quite  a  few  customer  calls 
about  audits,  and  it's  only  in 
the  last  three  or  four  months 
that  acthriry  has  started  to 
drop  off"  said  Gartner  analyst 
Jane  Dtsbrow. 

Sound  Processes 

"I  think  we've  avoided  the 
need  for  auditing  because  of 
the  processes  we  have  in 
place,"  said  Ron  Ellis,  an  IT 
manager  at  Northrop  Grum¬ 
man  Corp.  in  Dallas.  'Hiosc 
practices  mdude  using  license¬ 
tracking  software  from  Macro- 
vision  Corp.  in  Santa  Clara. 
Calif,  Ellis  said,  adding  that 
the  technology  helps  the  com¬ 
pany  tnomtor  compliance  with 
licensing  agreements. 

A  few  months  ago.  Micro¬ 
soft  began  a  formal  push  to 
conduct  fewer  audits  of  cor¬ 
porate  users  in  the  U.S.  In¬ 
stead,  It's  woricing  with  users 
to  help  them  better  under¬ 
stand  their  license  terms,  ^id 
Ffeiih  Beeman.  Microsoft's  di¬ 
rector  of  worldwide  license 
compliance.  There  are  still 
situatioos  where  we  audit  cus¬ 
tomers.  but  ideally  we're  try- 
mg  to  avoid  audit  situatioas.* 
be  said.  O  48526 


most  companies  to  increase 
their  Saihanes-Oxley  technol¬ 
ogy  budgets  next  year. 

Some  companies  have  been 
more  forward-looking.  For  in¬ 
stance.  Bresier  &  Reiner  Inc. 
purchased  Web-based  soft¬ 
ware  called  the  SOAx  Toolkit 
from  Orlando-based  Axena 
Inc.  in  June  2003.  Prior  to  buy¬ 
ing  the  software,  executives  at 
the  Rockville,  M<i-ba$ed  real 
estate  investment  trust  decid¬ 
ed  that  they  wanted  to  devel¬ 
op  a  10-year  plan  for  Sarbanes- 
Oxley  compliance,  said  Eric 
Clarie.  Bresier  &  Reiner's  in¬ 
ternal  audit  director. 

Clarke  said  Bresier  &  Reiner 
is  using  Axena's  technology 
not  only  to  document  and  test 
its  intenial  controls,  but  also 
to  assess  the  ongoing  risks  it 
frees.  “We've  gone  through 
S200  million  in  acquisitions 
over  the  last  six  months,  so  we 
have  to  constantly  assess  what 
are  rigm/lcant  ri^  under 
Section  404."  CUarice  said. 
048529 
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Ontario 

tor  wcUaro  rccipi- 
I'm*-  The  upgrjJi*  is  cxpoctcJ 
ti'  v'vcniudtlv  cosi  the  pr»'\  ipcc 
.« orS7.5  million,  w  liich 
includes  the  ctKiiriL  work  and 
ths‘  creation  of  a  specialized 
icsttn^:  system,  accordinj:  to  a 
spokeswoman  for  the  social 
sef\  ices  m»ntstr^ 

I  ejtisl.uor  IVter  Kormos 
last  week  said  the  disclosure- 
that  the  sssteni  couldn't  han¬ 
dle  the  increase  m  payments 
prompted  him  to  seek  an  in¬ 
quiry  into  tlie  .-\cceniure  con¬ 
tract.  -Not  heiny  able  to  in¬ 
crease  welfare  pay  nienis 
w  ithout  moJ'fytnji  tlu*  .system 
"is  like  buy  iny:  a  s-ar  w  ithout  a 
steertnj!  wheel  and  ('.eneral 
.Motors  IS  talking:  aKiut  it  .is 
an  optional  aeeess«>ry,"  said 
K«»nnos.  who  leads  a  small 
opposition  party  inDniarios 
leitislativc  j.s.sembK 
The  eustom-developeU  svs- 
leni  was  oriirimtlly  slated  to 
c\‘stSL^5  5  million.  I'hepro^- 


t.'<inimued/mm  pa^e  I 

Blackout 

no  matter  how  giuHl.  there  is 
s<*me  little  detail  you  ft'rpor." 
he  said  last  week  a.s  the  one*- 
year  anniversary  of  the  outayte 
approaehed. 

The  hlac-koui.  which  struck 
last  Auyi.  14  and  left  more  than 
5(t  million  people  vvithiiut 
power  for  days,  has  ysiven 
many  I  T  manayters  iimd  for 
thought  over  the  past  year  In 
intervH'ws  last  week,  a  half- 
dozen  IT  e\ecuini>s  said  they 
have  modilled  their  business 
continuity  plans  in  the  wake  of 
the  bhk  koui.  investing  in  proj¬ 
ects  such  as  reinforcing  their 
networks  and  increasing  the 
.iniounr  of  resting  they  do. 

I'tvw  HiUz.depuiv  CIO  at 
t  -IK  Ixrs  North  America  Iik.. 
said  the  New  Vork-based  .issei 
management  company  experi¬ 
enced  a  communications  meli- 
dowD  tor  two  days  os  a  result 
of  the  blackout.  In  lune.  CDC 
Ixis  eomplvti-d  a  blackout- 
driven  deployment  of  a  SotK-t 
ring  that  ctmncvts  multiple  of¬ 


incc's  goal  was  to  create  a  real¬ 
time.  Web-enabled  .application 
that  embedded  some  «00  rules 
governing  eligibility  for  social 
services  payments  and  that 
could  help  the  province  pre¬ 
vent  fraud,  reduce  caseloads 
and  improve  service. 

The  new  system,  which  is 
based  on  a  mainframe  ninning 
l^S  rcpbcedeighi  incom¬ 
patible  applications.  Fnd  users 
access  d.ita  via  Internet  F\- 
plorer.  using  Microsoft  Corp.’s 
Active  Server  Pages  technolo¬ 
gy.  The  system  also  includes 
Business  Dbiects  S.A's  report¬ 
ing  tools  and  is  supported  bv  a 
network  built  around  equip¬ 
ment  from  Cisv'o  Systems  Inc 

Users  Complaints 

Development  work  started  in 
bwr.  and  the  system  went  live 
provincewidc  in  lanuarv'  20(>2. 
But  critics  have  charged  that 
the  technology  is  difficult  !o 
use  and  requires  time-con¬ 
suming  work-arounds. 

"It’s  Uio  cumbersome."  said 
Heather  .MacVicar.  general 
manager  of  social  services  for 


the  city  of  Toronto.  Her  2.000- 
member  staff  uses  the  Aceen- 
ture-written  software  to  proc¬ 
ess  payments  for  67000  wel¬ 
fare  recipients.  .Although 
MaeV'icar  acknowledged  that 
the  new  system  has  a  more 
user-friendly  interface  than 
the  prcvuius  one  used  in 
Toronto,  she  added  that  it  s 
■'hugely  more  complex." 

For  instance,  the  system's 
design  divsn't  let  end  users 
skip  steps  built  into  business 
priKcsses.  sometimes  dou¬ 
bling  the  time  required  to  do 
simple  tasks,  according  to 
•MacVicar.  "We  would  like  the 
flexibility  to  bypass  certain 
things."  she  said,  adding  that 
frying  u>  get  Accenture  to 
make  such  changes  has  been 
"an  ongoing  process." 

According  to  a  report  issued 
by  the  Ministry  of  Community 
and  SiH'ial  Services  itself, 
downtime  on  the  system  cost 
Oniarkt  S1.6  million  in  lost 
worker  productivity  last  year. 
But  the  downtime  was  p.artly 
caused  by  hardware  and  batch 
processing  issues,  not  just  by 


AT-A-OLANCE 


Ontario’s  Business 
Transformation 
Project 

■  The  new  system  WMtHvs 
•cron  Ontario  It  the  start 
of  2002.  repiacviO  eight  older 
applications  that  were  unable  to 
share  welfare  case  data. 

^  •  It  indudes  a  canlnl  data- 

I  baaa,  can  anfianga  data 
wWi  an  Maractlva  voica 
rasponae  system  and  lats 
wofham  usa  third-party 
sourcas  to  verify  applicant 
mlormation. 

■  AccoidirigtoOntmoofftcbIs. 
tha  system  has  cost  S213.8 
mWcin  thus  far  -  58%  more 
than  the  amount  that  was  origi- 

'  nalybudgeted. 


'  the  software,  the  report  noted. 
!  In  his  ?uly  7  letter  request- 
'  ing  an  inquiry.  Kormtis  de- 
'  scribed  the  deal  with  Accen¬ 
ture  as  "an  obviously  had  con¬ 
tract"  and  chatted  that  On¬ 
tario  officials  had  been  “thor- 


fices  in  New  A'ork  and  New 
lersey  at  OC-48  port  speeds, 
".A\  .1  result  of  the  blackout, 
the  central  office  Ivad  signifi¬ 
cant  prrrblems."  Hiltz  said. 
“Their  equipment  fried.  "  The 
company  is  using  the  Sonet 
ring  not  only  for  data  links  but 
also  tor  voivv  communications, 
which  Hiltz  said  has  helped  in¬ 
crease  communications  re¬ 
siliency.  In  addition,  the  com¬ 
pany’s  IT  staffers  havx-  workvsJ 
with  Verizon  (lommunU'ations 
Inc,  to  reposition  circuits  st» 
they  can  suppvirt  different  of¬ 
fices  around  Manhattan. 

Hiltz  wouldn't  say  how 


much  the  Sonet  ring  cost  to 
install.  It's  more  expensive 

I  than  the  T3  lines  that  CVtC 
Ixis  had  before  the  blackout 
but  less  costly  based  on  the 
amount  spent  per  megabit  of 
bandwidth,  according  to  Hiltz. 

'  And  ofTicbls  felt  they  had  no 
chiuce.  "Resilience  is  some¬ 
thing  we  couldn’t  ignore  any¬ 
more."  he  said. 

Bill  MiKirc.  iclecommunica- 
tions  manager  at  the  Museum 
of  Modern  Art  in  New  York, 
said  all  of  the  museum's  IT 
and  building  operations  sys¬ 
tems  went  down  during  the 
hbckoui.  At  the  lime,  the  mu¬ 


seum  was  undergoing  a  major 
renovation  and  expansion,  so 
IT  staffers  asked  Verizon  to 
j  in-siall  two  points  of  presence 
j  for  redundancy.  They  also 
,  added  the  museum's  data  and 
telecommunications  center  to 
its  main  Kickup  generator 

Moore  said  that  before  the 
blackout,  the  museum  had 
only  battery-powered  uninter¬ 
ruptible  power  supplies  to 
temporarily  keep  its  comput¬ 
ers  up  and  running. 

Lessons  Learned 

Dan  Morreale.  CIO  at  North 
Bronx  Healthearo  Network  in 
New  Yivrk.  said  one  lesson  he 
learned  was  that  he  needed  to 
rethink  and  expand  his  emer¬ 
gency  testing  procedures. 

The  blacktmt's  only  impact 
on  North  Bronx  Healthcare's 
IT  operations  w'as  a  downed 
server  and  the  loss  of  lights 
in  the  stairwell  leading  to  it.s 
basement  data  center,  Mor- 
rcalc  said.  But  after  seeing 
other  companies  suffer  mil¬ 
lions  of  dollars  in  productivity 
lossv's.  he  decided  he  couldn’t 
afford  to  simply  assume  that 


I 


I  j  oughly  bilked  by  Accenture.  ” 

I  I  A  spokesman  for  Attorney 
I  Genera!  Michael  Bryant  de- 
!  dined  to  comment  about  Kor- 
[  mos'  request.  The  spokes- 
I  woman  for  the  social  services 
’  ministry  also  wouldn't  com- 
,  ment  about  the  request  or  the 
use  of  the  new  system. 

I  In  a  case  .study  posted  on  its 
I  Canadian  Web  .site.  Accenture 
said  the  system  has  helped  the 
I  province  save  S521  million  .so 
I  far.  A  spokeswoman  for  the 
j  consulting  firm  said  that  it  has 
!  been  paid  S181  million  based 
on  the  system’s  performance. 
The  company  "would  not  have 
[  received  a  dime  had  it  not 
■  generated  savings."  she  said. 

Regarding  (he  concerns 
about  the  sy.siem's  rigidity,  the 
Accenture  spokeswoman 
I  pointed  to  Ontario’s  desire  to 
I  have  a  centralized  set  of  wel¬ 
fare  policies.  She  described 
the  SI  million  price  tag  for  the 
application  update  needed  tt> 
support  the  increase  in  wel- 
I  fare  payments  a.s  a  “reasonable 
amount"  given  the  scope  of 
the  system.  O  48520 


the  systems  would  keep  run¬ 
ning  if  another  disaster  struck. 
.As  a  result.  North  Bronx 
Healthcare  began  testing  its 
backup  generators  every 
month  instead  tif  once  a  year. 
IT  staffers  alsvi  started  testing 
the  generators  under  a  full 
sy.stems  li>ad.  Morrv*ale  said. 

Grv*gg  Therkalsen.  vice 
president  of  business  continu¬ 
ity  st>lution.s  at  EM(,’  Corp.. 
said  the  blackout  has  pushed 
many  companies  to  e.xpand 
their  data  center  infrastruc¬ 
tures  to  support  data  replica¬ 
tion  between  two  or  even 
three  IT  facilities  —  one  of 
which  may  be  located  on  a 
separate  power  grid. 

One  side  effect  of  the  black¬ 
out  has  been  a  shortage  of 
power  generators,  because 
vendors  can't  keep  up  with  the 
demand,  according  to  Ken 
Brill,  executive  director  of  The 
Uptime  ln.stituie  Inc.  in  .Santa 
Fc.  N.M.  Brill  said  a  combitu- 
tittn  of  the  blacktiui  and  new 
regulations,  .such  as  the  Sar- 
banes-Oxlcy  Act.  has  created  a 
2()-day  wailing  period  for  gen¬ 
erators  nationwide.  O  48528 


Continued  from  page  I 

Ontafk) 

increase  for  welfore  recipi- 
ems.  The  upgrade  is  expected 
to  eventually  cost  the  province 
a  total  of  $7.5  milljon,  which 
includes  the  codix^  work  and 
the  creation  of  a  specialized 
testing  system,  according  to  a 
spokeswoman  for  the  social 
services  ministry. 

Legislator  Peter  Kormos 
last  week  said  the  disclosure 
that  the  system  couldn't  han¬ 
dle  the  increase  in  payments 
prompted  him  to  seek  an  in¬ 
quiry  into  the  Accenture  con¬ 
tract.  Not  being  able  to  in¬ 
crease  welfare  paymenu 
without  modifying  the  system 
"b  like  buying  a  car  without  a 
steering  wheel  and  General 
Motors  b  talking  about  it  as 
an  optional  accessory."  said 
Konnos.  who  leads  a  small 
opposition  party  in  Ontario’s 
iegblarive  assembly. 

The  custom-developed  sys¬ 
tem  was  originally  slated  to  I 
cost  $135.5  million.  The  prov-  I 


ince’s  goal  was  to  create  a  real¬ 
time.  Web-enabled  application 
that  embedded  some  800  rules 
governing  eligibility  for  social 
services  payments  and  that 
could  help  the  province  pre¬ 
vent  fraud  reduce  caseloads 
and  improve  service. 

The  new  system,  which  b 
based  on  a  mainframe  running 
OS/390.  replaced  eight  incom¬ 
patible  applicatioirs.  End  users 
access  data  vb  Internet  Ex¬ 
plorer.  using  Microsoft  Corp.’s 
Active  Server  Pages  technolo¬ 
gy.  The  system  also  includes 
Business  Objects  SA’s  report¬ 
ing  toob  and  b  support^  by  a 
network  built  around  equip¬ 
ment  from  Cisco  Systents  Inc. 

Users  Coniplaints 

Development  work  started  in 
1997,  arid  the  system  went  live 
provincewide  in  January  2002. 
But  critics  have  charged  that 
the  technology  b  difficult  to 
use  arrd  requires  time-con¬ 
suming  work-arounds. 

"It’s  too  cumbersome,"  said 
Heather  MacVicar,  general 
manager  of  social  services  for 


the  city  of  Toronta  Her  2.000- 
member  staff  uses  the  Accen¬ 
ture-written  software  to  proc¬ 
ess  payments  for  67,000  wel¬ 
fare  recipients.  Although 
MacVicar  acknowledged  that 
the  new  system  has  a  more 
user-friendly  interface  than 
the  previous  one  used  in 
Toronto,  she  added  that  it's 
"hugely  more  complex." 

For  instance,  the  system's 
design  doesn't  let  end  users 
skip  steps  built  into  business 
processes,  sometimes  dou¬ 
bling  the  time  required  to  do 
simple  tasks,  according  to 
Ma^icar.  “We  would  like  the 
flexibility  to  bypass  certain 
things,"  she  said,  adding  that 
trying  to  get  Accenture  to 
make  such  changes  has  been 
"an  ongoing  process." 

According  to  a  report  issued 
by  the  Minbtry  of  Community 
and  Social  Services  itself, 
downtime  on  the  system  cost 
Ontario  $1.6  million  in  lost 
worker  productivity  last  year. 
But  the  downtime  was  partly 
caused  by  hardware  and  batch 
processii^  issues,  not  just  by 


the  software,  the  report  noted. 

In  hb  July  7  letter  request¬ 
ing  an  inquiry.  Konnos  de¬ 
scribed  t^  d^  with  Accen¬ 
ture  as  "an  obviously  bad  con¬ 
tract"  and  charged  that  On¬ 
tario  ofTiciab  had  been  "thor¬ 


oughly  bilked  by  Accenture.” 

A  spokesman  for  Attorney 
General  Michael  Bryant  de¬ 
clined  to  comment  about  Kor¬ 
mos'  request.  The  spokes¬ 
woman  for  the  social  services 
minbtry  also  wouldn't  com¬ 
ment  about  the  request  or  the 
use  of  the  new  system. 

In  a  case  study  posted  on  its 
Canadian  Web  site,  Accenture 
said  the  system  has  helped  the 
province  save  SS21  million  so 
far.  A  spokeswoman  for  the 
consulting  ftmi  said  that  it  has 
been  paid  $181  million  based 
on  the  system's  performance. 
The  company  '^uld  not  have 
received  a  dime  had  it  not 
generated  savings,"  she  said. 

Regarding  the  concerns 
about  the  system's  rigidity,  the 
Accenture  spokeswoman 
pointed  to  Ontario’s  desire  to 
have  a  centralized  set  of  wel¬ 
fare  policies.  She  described 
the  $l  million  price  tag  for  the 
application  u{^te  needed  to 
support  the  increase  in  wel¬ 
fare  payments  as  a  ‘reasonable 
amount"  given  the  scope  of 
the  system.  O  48520 


Cbnrinued  from  page  I 

Blackout 


no  matter  how  good,  there  b 
some  little  detail  you  forgot." 
be  said  last  week  as  the  one- 
year  anniversary  of  the  outage 
approached. 

The  blackout,  which  struck 
last  Aug.  14  and  left  more  than 
50  milUon  people  without 
power  for  days,  has  given 
many  IT  managers  food  for 
thought  over  t^  past  year.  In 
interviews  last  week,  a  half- 
dozen  IT  executives  said  they 
have  modified  their  business 
condnuity  plans  in  the  wake  of 
the  blackout,  investing  in  proj¬ 
ects  such  as  reinforcing  tl^ 
networks  and  increasing  the 
amount  of  testing  they  da 
Drew  HUtz,  deputy  CIO  at 
CDC  Ixb  Nonb  America  Inc., 
said  the  New  York-based  asset 
mam^ment  company  experi¬ 
enced  a  communications  melt¬ 
down  for  two  days  as  a  result 
of  the  blackout.  In  June,  COC 
Ixb  completed  a  blackout- 
driven  d^ioyment  of  a  Sonet 
ring  that  connects  multiple  of¬ 


fices  in  New  York  and  New 
Jersey  at  OC-48  port  speeds. 

"As  a  result  of  the  blackout, 
the  centra]  office  had  signifi¬ 
cant  problems."  Hiltz  said. 
■Tbeir  equipment  fried."  The 
company  b  using  the  Sonet 
rii^  not  only  for  data  links  but 
also  for  voice  conummications, 
which  Hiltz  said  has  helped  in¬ 
crease  communications  re¬ 
siliency.  In  addition,  the  com¬ 
pany's  IT  stafters  have  worked 
with  Verizon  Communications 
Inc.  to  reposition  circuits  so 
they  can  support  different  of¬ 
fices  around  ManhattaiL 

Hiltz  wouldn't  say  bow 


much  the  Sonet  ring  cost  to 
install  It’s  more  expensive 
than  the  T3  lines  tlut  CDC 
Ixb  had  before  the  blackout 
but  less  costly  based  on  the 
amount  spent  per  megabit  of 
bandwidth,  according  to  Hiltz. 
And  officiab  felt  they  had  no 
choice.  "Resilience  b  some¬ 
thing  we  couldn't  ignore  any¬ 
more."  he  said. 

Bill  Moore,  telecommunica¬ 
tions  manager  at  the  Museum 
of  Modem  An  in  New  Yoric. 
said  all  of  the  museum's  IT 
and  building  operations  sys¬ 
tems  went  down  during  the 
blackout  At  the  time,  the  mu¬ 


seum  was  undergoing  a  major 
renovation  and  expansion,  so 
IT  staffers  asked  Verizon  to 
install  two  points  of  presence 
for  redundancy.  They  also 
added  the  museum's  data  and 
telecommunications  center  to 
its  main  backup  generator. 

Moore  said  that  before  the 
blackout,  the  museum  had 
only  battery-powered  uninter¬ 
ruptible  power  supplies  to 
temporary  keep  its  comput¬ 
ers  up  aiKl  running. 

Lessons  Lsanied 

Dan  Morreale,  CIO  at  North 
Bronx  Healthcare  Network  in 
New  York,  said  one  lesson  he 
learned  was  that  be  needed  to 
rethink  and  expand  his  emer¬ 
gency  testing  procedures. 

The  blackout’s  only  impact 
on  North  Bronx  Healthcare's 
IT  operations  was  a  downed 
server  and  the  toss  of  lights 
in  the  stairwell  leading  to  its 
basement  data  center.  Mor¬ 
reale  said.  But  after  seeing 
other  companies  suffer  mil¬ 
lions  of  dollars  in  productivity 
losses,  be  decided  he  couldn’t 
afford  to  simply  assume  that 


the  systems  would  keep  run- 
nii^  if  another  disaster  struck. 
As  a  result.  North  Bronx 
Healthcare  began  testing  its 
backup  generators  every 
month  instead  of  once  a  year. 
IT  staffers  also  started  testing 
the  generators  under  a  full 
systems  load,  Morreale  said. 

Gregg  Tbericalsen,  vice 
president  of  business  continu¬ 
ity  solutions  at  EMC  Corp.. 
said  the  blackout  has  pushed 
many  companies  to  expand 
their  data  center  infrastruc¬ 
tures  to  support  data  replica¬ 
tion  between  two  or  even 
three  IT  facilities  —  one  of 
which  may  be  located  on  a 
separate  power  grid. 

One  side  effect  of  the  black¬ 
out  has  been  a  ^rt^  of 
power  generators,  because 
vendors  can’t  keep  up  with  the 
demand,  according  to  Ken 
Brill,  executive  director  ofThe 
Uptime  Institute  Inc.  in  Santa 
Fe,  N.M.  Brill  said  a  combina¬ 
tion  of  the  blackout  and  new 
regulations,  such  as  the  Sar- 
bai>es-Oxley  Act,  has  created  a 
20-day  waiting  period  for  gen¬ 
erators  nationwide.  O  48S2B 


VV.I-.  .-H 


COMPUTERWORLD  HAS  BEEN  NAMED 
MAGAZINE  OF  THE  YEAR  FOR  2004. 

I  \  I'l'V  \  L\ll'  till'  pi\'sti;.;i(U!.s  .XnU'l'icjIl 
'^ik'iotv  ol  Hiisinc'-s  l’ublii,-atioii  I-Jiioi's 
•  I  si'bv'i''  oiiL'  publi^aition  \\  ith 

.SiU'Od  til'  '^iibsai'ibai's  to  roooiw 

1  hi''  lop  honof.  1  ho  ,i\\  ai\]  o.iii  po  to  tm\ 
biisitii.'ss  j'liblioaiioii  ill  am  iiiJiisir\ 
o.i[i.'por\,  and  w  t'  \\  on!  W  i.'  ai'o  pi'on  J 
ill. It  oui'  oiipoinp  ooniiiiitiiioiit  to 
oJitorial  iiuopiatx.  .iiiJionoo  foous 
.imi  m-Jopth  oo\  or.ipo  h.is  boon 
iwopin.'oj  b\  thiv  .iiispioioiiv  aw  ,u\i. 


COMPUTERWORLD 

THE  VOICE  OF  IT  MANAGEMENT  ' 


14 


OPINION 


w  compulerworld.com 


MARYFRAN  JOHNSON 


ITs  New  Balance 


I  SPENT  A  DAY  LAST  WEEK  listening  to  a 

group  of  CIOs  and  IT  executives  trade  ideas 
on  how  to  solve  their  biggest  problems  with 
governance,  regulatory  compliance  and  out¬ 
sourcing.  This  trio  of  hot  topics  kept  the  con¬ 
versations  cooking  at  an  executive  education  pro¬ 
gram  at  Ohio  State’s  Fisher  School  of  Business. 

uberboard  of  decision- 
maicers. 


Nobody  had  solved 
all  the  mysteries  of  life 
by  day's  end,  bot  every¬ 
body  walked  away  with 
new  ideas,  as  well  as  the 
kind  of  insight  that  only 
peers  can  provide.  For 
these  were  totally  frank, 
safely  off-the-record, 
egos-checked-at-the- 
door  discussions.  Barely 
a  word  was  spoken  about 
specific  products  or  tech¬ 
nologies.  Rather,  most  of 
the  talk  was  about  managing  people 
—  from  IT  department  staffers,  busi¬ 
ness  users  and  compliance  auditors, 
to  external  customers,  top  executives 
and  CEOs.  It  was  about  communica¬ 
tion  and  expectations,  about  convey¬ 
ing  the  value  of  IT. 

Most  important,  it  was  about  find¬ 
ing  the  right  balance  between  what 
the  business  demands  and  what 
technology  can  deliver. 

One  IT  leader  from  a  car  manufac¬ 
turer  described  his  tough-love  ap¬ 
proach  to  drtvii^  quality  metrics 
and  more  professional  project  man¬ 
agement  into  an  international  opera- 
lioa  He  communicated  IT  progress 
and  accomplishments  by  translating 
it  into  carmaker  jargon  that  his  exec¬ 
utive  colleagues  could  readily  grasp. 
He  underscored  the  need  to  negoti¬ 
ate  very  specific  service-level  agree¬ 
ments  between  IT  and  the  business 
units  (which  led  to  the  best  quote  of 
the  day:  “If  your  SLA  is  'hairiness,' 
you're  dead.*)  His  approach  to  IT 
governance  is  a  highly  customized 
one.  with  smaller  steering  commit¬ 
tees  set  up  based  on  dedicated  busi¬ 
ness  functions  (such  as  marketing) 
rather  than  concentrated  in  one 


The  executives  also 
look  turns  acting  as  IT 
consultants  in  residence, 
diagnostic  one  another's 
management  woes  and 
prescribing  new  ap¬ 
proaches.  One  CIO  de¬ 
scribed  a  deteriorating 
relationship  with  other 
top  executives  at  his  in¬ 
surance  company  in  the 
wake  of  some  rapid 
growth  and  the  imposition  of  more 
disciplined  IT  procedures  that  users 
disliked.  His  IT/busincss  alignment 
had  clearly  lost  its  balance. 

The  advice  he  got  was  classic, 
practical  and  focused  on  dousing  the 
fire  of  dissatisfaction  with  IT.  Start 
by  interviewing  the  CEO  and  other 
company  officials  about  what  they 
think  is  wrong  with  IT.  his  peers  sug¬ 
gested.  Do  a  lot  of  listening  and  very 


little  talking.  Seek  out  the  IT  cham¬ 
pions  on  staff  to  get  their  informal 
advice  too.  TT»en  craft  the  next  steps 
to  regain  that  lost  balance. 

The  assembled  execs  agreed  that 
the  most  vital  element  in  any  IT 
governance  or  business  alignment 
plan  is  the  decision-making  process 
Itself  —  meaning  who's  involved  and 
how  much  clout  they  have  to  get 
things  done.  It  seems  like  such  a  no 
brainer  to  ensure  that  this  kind  of 
high-level  thinking  about  IT  direc¬ 
tion  happens,  but  it’s  still  surprising 
ly  rare  to  find  it  done  well.  Or  even 
done  at  all. 

A  few  weeks  ago,  we  ran  some 
rather  discouraging  survey  results  in 
a  special  report  about  IT  governance 
IQiuckLink  48025).  The  Pricewater- 
houseCoopers  study  showed  that  de 
spite  the  fact  that  76%  of 335  CEOs 
and  CIOs  said  they  knew  of  IT  prob¬ 
lems  that  could  be  resolved  with  a 
formal  governance  framework,  fewer 
than  half  of  the  respondents  (42%) 
said  they  had  plans  to  create  any¬ 
thing  like  an  executive-level  steering 
or  board-level  strategy  committee. 

So  shortsighted,  and  such  a  shame. 

So,  how’s  the  balance  between 
IT  and  business  at  your  company? 

If  you  haven’t  thought  about  it  m  a 
while,  take  a  moment  to  do  so.  Then 
start  the  conversation.  O  48486 
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DAN  GILLMOR 

Executive 
Blogging  for 
Fun  and  Profit 

SOMEONE  I  know  posted 
an  intriguing  item  on  his 
weblog  the  other  day.  It 
began:  “It’s  tough  to  compete 
agaimt  a  social  movement  Especially 
one  in  ^^ch  you’re  a  beUever." 

The  blogger  was  Jonathan  Schwartz, 
president  and  chief  operating  officer  of 
Sun  Microsystems.  When  it  comes  to 
the  expanding  blogospbere.  he's  a  wel¬ 
come  addition. 

Schwartz  is  among  a  small  number 
of  senior  executives  in  corporate 
America  to  adopt  the  blog  format  for 
explaining  his  views.  He’s  already  one 
of  the  best  at  it  and  other  executives 
could  learn  something  from  him. 

The  average  corporate  Web  site  has 
much  in  common  with  the  aven^  an¬ 
nual  report.  Both  are 
loaded  with  informa¬ 
tion.  loo  much  of 
which  is  hidden  or 
disguised  in  an  effort 
to  minimize  prob¬ 
lems  and  maximize 
what’s  going  right.  To 
that  end,  particularly 
in  the  case  of  compa¬ 
nies  with  problems, 
such  sites  seem  de¬ 
signed  to  thwart  the 
casual  visitor  who 
wants  to  look  deeply 
into  a  corporation 
^  its  doings. 

The  least  interest¬ 
ing  feature  of  a  cor¬ 
porate  Web  site,  with 
few  exceptions,  is  the 
typical  ’Tetter  From  the  Chief  Execu¬ 
tive"  a  content-free  missive,  most  likely 
written  by  a  committee  of  lawyers  and 
marketing  people  that  does  nothing  to 
reveal  the  character  either  of  the  com¬ 
pany  or  its  leader.  Creating  an  impres¬ 
sion  of  openness  isn’t  the  same  as  actu¬ 
ally  being  open.  Establishing  a  corpo¬ 
rate  weblog  can  change  that 
What  the  best  blogs  tend  to  have 
in  common  b  voice:  They  clearly  have 
been  written  by  human  beings  with 
genuine  ideas  and  a  passion  for  whai 
they're  saying. 

Schwartz  isn't  the  first  high-ranking 
executive  to  have  started  a  bkig.  That 
honor  may  belong  to  Groove  Net- 
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works'  Ray  Ozzie.  whose  intermittent 
blog  ~  he  sometimes  goes  for  months 
without  posting  anything  —  nonethe¬ 
less  has  been  enlightening  at  times. 

He  says  the  blog  gives  him  “a  com- 
munjcations  channel  under  my  con¬ 
trol,"  where  he  can  say  what  he  wants 
(within  limits,  such  as  keeping  trade 
secrets  secret),  and  he  has  the  ability 
to  post  quickly  and  without  limits  on 
length. 

"I  feel  as  though  there’s  a  conversa¬ 
tion  —  many  conversations  —  going  on 
out  there,"  Ozzie  says.  “It  lets  me  feel 
like  Fm  part  of  that  conversation,  and 
when  I  get  calls  and  e-mails,  there’s 
confirmation  that  Fro  pan  of  the  con¬ 
versation." 

My  favorite  senior-executive  blog 
comes  from  Internet  billionaire  Mark 
Cuban,  owner  of  the  NBA's  Dallas 
Mavericks.  His  "Blog  Maverick"  at¬ 
tracted  instant  attention  when  he 
launched  it  in  March,  and  no  wonden 
He  took  on  sportswriters  and  offered 
pungent  commentary  on  spons  and  in¬ 
vesting.  It’s  great  stuff. 

Corporate  lawyers  are  undoubtedly 
having  miniscizures  over  their  out¬ 
spoken  executives’  public  sutements. 
But  sensible  rules  for  corporate  blog¬ 
gers  can  prevent  public  relations  or 
legal  problems. 

IT  needs  to  understand  how  blogs 
work,  especially  the  third-party  soft¬ 
ware  most  bloggers  now  use.  Security 
matters.  You  really  don't  want  a  hacker 
to  put  words  in  your  CEO’s  mouth,  for 
example. 

I  don’t  think  corporate  blc^ging  is  a 
fad.  'The  blog  brings  a  human  voice  to 
the  enterprise.  It's  not  iust  good  mar¬ 
keting.  It's  good  business.  O  48406 


PIMM  FOX 

Microsoft 
Entering  a 
New  Phase 

GOOGLE'S  initial  public 
offering  ought  to 
quicken  the  pulse  of 
even  the  most  hardened  in¬ 
vestors.  With  shares  expected  to  trade 
at  S108  to  $13S,  (joogle  could  raise 
enough  money  to  value  the  company 
at  a  whopping  $36  billion. 

C^ot^  won’t  see  that  much  cash, 
but  if  investors  snap  up  the  shares  — 
and  they  are  expected  to  do  so  ~  the 
company  will  net  about  S3  btllioa  Of 


course,  the  early  venture-  - 

capital  investors  will  re¬ 
ceive  a  tidy  sum  as  well. 

But  there’s  something 
contrary  in  all  this. 

Microsoft  recently  an¬ 
nounced  that  it  would  re¬ 
turn  a  boatload  of  cash  to 
shareholders,  increase  its 
annual  dividend  and  buy  ' 

back  some  shares.  The 
move  indicates  that  Micro-  I 
soft  doesn’t  have  a  better  I 

use  for  the  money,  including 
following  a  strategy  of  growing 
through  acquisitions.  Yes.  after  the 
buyout.  Microsoft  will  still  have  $20 
billion  in  reserve  to  play  around  with, 
but  technology  companies  are  sup¬ 
posed  to  be  investing  in  the  future. 

What  does  it  tell  us  when  chip  maker 
Intel  begins  debating  what  to  do  with  a 
cash  hoard?  Intel  could  give  some  of 
the  money  back  to  investors  and/or 
buy  back  some  of  its  shares. 

These  possibilities  make  me  wonder 
what  technology  companies  are  all 
about. 

I’ve  always  thought  that  investors 
poured  money  into  technology  compa-  I 
nies  because  innovation,  research  and  I 


expansion  into  new'  mar¬ 
kets  take  capiul  Technolo¬ 
gy  investors  placed  their 
bets  on  growth  and  capital 
appreciation. 

But  that  seems  to  be 
changing. 

Stalwan  technology 
leaders  arc  returning  mon¬ 
ey  to  their  investors  be¬ 
cause  their  shares  are  lan¬ 
guishing  and  because  they 
can’t  convince  thcir.shaTe- 
holders  that  the  future  will 
be  better  than  today. 

Google  appears  to  be  an  exceptional 
case  right  now.  The  premier  search  en¬ 
gine  company  doesn’t  seem  to  be  hav- 
ii^  any  problems  raising  cash 
Meanwhile,  Microsoft  has  said  it  in¬ 
tends  to  sell  Slate,  its  online  magazine. 

It  has  failed  to  match  Google  in  the 
search  engine  business,  and  it  has  tak¬ 
en  hits  from  Apple’s  iPod  in  the  world 
of  music  downloads.  i 

The  truth  is,  Microsoft  makes  mon-  i 
ey  the  old-fashioned  way:  with  recur¬ 
ring  cash  streams  that  businesses  are 
forced  to  cough  up  because  fust  about 
everyone  uses  the  company’s  operat¬ 
ing  system,  which  comes  bundled  with  I 


most  PCs.  In  other  words,  it  isn't  inno¬ 
vation  that  drives  Microsoft's  future; 
it’s  an  ability  to  make  good,  old-fash¬ 
ioned.  hardball  business  decisions. 

Indeed,  you  could  say  that  Micro¬ 
soft  is  merely  reacting  to  changes  in 
accounting  procedures,  since  it  has 
cut  back  on  granting  employees  stock 
options  that  would  cost  the  company 
lots  of  money.  Because  Microsoft's 
share  price  hasn’t  budged  much  over 
the  past  12  months,  those  employees 
who  do  own  shares  (Bill  (^tes  being 
the  biggest  shareholder)  will  reap  a 
tremendous  reward  when  the  com¬ 
pany  pays  a  special  dividend,  increas¬ 
es  the  annua)  payout  and  buys  back 
shares- 

But  that  leaves  technology  investors 
wondering  where  they  ought  to  place 
their  bets  in  the  future. 

There's  nothing  wrong  with  banding 
excess  cash  back  to  investors.  But  it 
makes  me  think  that  Microsoft's  days 
as  a  leader  are  coming  to  an  end 
048416 
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l)on't  (kKMxde  the  [)esktop  to  Microsoft 


I TS  TRUE  that  converting  a 
I  company  Id  open-source  appH- 
cabonsisdifficultlhecostofre- 
nstaMation  and  retranng  is  hard  to 
lustity  rOpen-Source  Apps  Lofing 
OesMop  Battle  With  Mterosoft.* 

^  (kicHjnk  47772].  Thvefore.  we 
can't  expect  quick  adoption  of 
open-source  destdops  m  the  corpo- 
t  rale  world.  But  Mark  HaR  neglected 
lomenitontwoplaceswhereopen- 
sourceapplicationswdIgaaitnR- 
lion.  The  first  is  new  companies, 
Stah'Ups  don't  have  ens&ng  tnira- 
structure  to  wony  about,  and  they 
are  typicaVy  very  pnee-sensitive.  so 
the  rero  cost  of  open-source  soft¬ 
ware  will  appeal  to  them  Oncea 
few  start-ups  grow  up  into  targe 
companies,  there  w4  be  a  base  of  , 
experienced  advocates  for  open- 
source  desktop  applications. 

The  second  is  the  nonprott  world. 
Nonprofits  Typcaly  ha^  an  abun¬ 
dance  of  vdunteer  labor  (inefoding 
peapteauadaUetotostalnewapoli- 
cabors)  but  a  shortage  of  cash  to 
buy  softvwe.  FWased  Moosoft 
software  tsnT  open-source  soft¬ 
ware's  compeUnn  for  nonproflls' 


business;  they  genetaly  don't  have 
thecashfobuythestuftThecompe- 
ttbon  s  pirafed  Microsofi  software 
Recent  MierDSOft  anflpvaliig  etfcyts 
will  actually  accet^e  open-souroi 
adoption  iv  the  9oup: 
lllarkJ.Oideay 
Dorchesfer,  Massn 
inarfoS>burrFry.org 

Open-source  is  nowhere  to 

be  found  on  the  desktop  cur¬ 
rently.  I's  true,  tut  that  e  only  part 
of  the  total  pictutft  Complies 
madetheswMchloMicnKoftappk- 
cabons  for  the  ssne  reason  that 
every  company  bougN  IBM  prod¬ 
ucts  in  an  eaiker  tme:  Tbu  can't  be 
blamed  for  buyng  products  from  the 
bigsupplier.Companiesandotgant- 
zaboRs  that  ob  use  products  bom  al¬ 
ternative  sotfces  may  have  seem 
advantages  i«  not  b«ng  plagued 
by  worms  and  viruses  aimed  at  the 
product,  but  if  the  altemaiive 
product  has  a  bua  I's  eaaer  to 
btame  the  IT  manager.  Sina  the 
managersarenTrewardedforreduc- 
ng  overal  risks,  they  reduce  ther 
prNale  risks  And  sti  too  many  m 


upper  management  take  pnde  n  not 
knowing  anytteng  useful  about  fT.  so 
lor  them  the  deosnn  IS  easy 
FrMkCtarlfo 

Proyerf  manager, 

Mechelen.  Belgium. 
frotAxlanjstg>tiscalLbe 

IOUESSyoudon'Ipeyattentxin 
to  events  overseas.  The  Mundi 
rnuncipal  govemnent  is  oonvertng 
to  open-source  desktop  applica¬ 
tions,  and  the  French  govemmem 
6  evaluebng  a  complete  conversnn 
of  al  government  desktop  appta- 
tions  to  save  money  Chnatsag- 
gressnety  pushing  open-soiace 
desktop  applications 
The  real  esue  wth  desktop  apps 
encNsomuchloialcostolowner- 
sh«  as  4  IS  fostration  wAh  the  up¬ 
grade  treadml  that  Mioosoft  forces 
users  to  follow 
Atso.asusersandfTdepon- 
ments  lose  trust  in  Microsoh  over 
its  comnual  security  falutes.  they 
are  begmng  to  setiouMy  thtok 
about  abandoning  the  monocul¬ 
ture  of  Microsott  appbcatKm 

AApficarion  devefoper, 
Montgornery,  Ala. 


A  VAX  Aitemative 

F  OR  those  seeking  a  VAX  aHer- 
natwe  other  thvi  CharonWAX. 

I  strongly  recommend  giwig  the 
open-source  SllWf  VAX  enxAator  a 
try  ("VAX  Users  See  the  Wrting  on 
the  WaL'QuckUnk  47934]  Tie 
SMI  VAX  eneilator  can  be  com¬ 
piled  and  run  on  both  Windows  and 
fjruxvMhease  Benefits ndude a 
tree  emutofor  that  can  be  nx)  on  a 
Lm  PC.  wdh  full  funebonakty 
Androw  Robert 
Sysfrrm  archirvet.  Masso- 
chusetn  Flnonciaf  Services, 
fiosron.  oroberrt&fii^xom 

COMPUTERWORLO  welcomes 
comments  from  Hs  readers.  Letlem 
wi  be  edtied  for  brevey  «id  ciarty. 
They  should  be  addressed  to  Jme 
&Mb.  letters  edior.  Cotnpulerwarld. 
PO  Box  9171. 500  Old  Connecticut 
Framngham.  Mass  017D1 
Fax  (508)879-4843 
E-mal:  tetters^computerwondcom. 
fodude  an  address  and  phone  num¬ 
ber  for  enmediale  vwtiication 

OFar  ffoe  Mm  on  (hsi  and 
aeartoaGs.ooto 
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reliable  IBM  eS^ef  xSenes  365  system  -  with  powetful  Inter  Xeon~  processors  -  can  make  your  woric,  and 

II  ^  ^  ^  ®  comprehensive  monitoring  ol  key  ranpa^  ifs 

aboi^ uptone.  So  you  get  outstanding  reliability  when  running  mission-cntical  ERR  coHaboration  and  database  applications 
The  w^.  Management  is  easier,  too.  You  can  have  around-theK*xk  remote  access,  on  demand.  And  system  status  can  be 
available  even  when  powered  oft.  For  more  on  highly  avalMe,  manageable  xSeries  senrers,  go  to  ■murom/ese.ver/advantage 


Scale  1-16  way  with  select 
models.  Pay  as  you  grow. 


IBM  Director  systems 

Linux-ready  through 

1  Mainframe-inspired 

management. 

1  the  entire  tine. 

technologies. 

24/7'365  optk>r}al  onsite 
hardware  support. ' 


@  server’ 


The  easy  choice.  Dependability. 
IBM  eServer  xSeries  365  system. 


AddmonaitStafljes  apply.  Standinl  support  «lude6n»M)usiness-day  response  ei  SOW  eounws  IBM  a 

Business  Machines  Corporthon  m  the  Urano  Stales  and^Of  other  countnes  Intel.  Ireel  Inside,  the  Intel  I 
United  States  and  othei  couranes  Other  company,  product  and  service  names  may  be  tradenwiis  or « 
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With  SAS*  software’s  new  Intelligence  Platform,  you  can... 
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Drive  the  value  of  your  investment  in 
operational  software.  Once  and  for  all 


y 


SAS  mtnxiuces  a  software  breakthrough  for  sharing  mission<ritical  intelligence,  in  just  the  right 
context,  with  everyone  from  executives  to  knowledge  workers.  And  for  increasing  the  value  of  your 
IT  investment  every  step  of  the  way-  from  aggregating  and  ensuring  the  quality  of  data,  from  any 
source,  to  transforming  that  data  into  predictive  insight  using  the  worldk  best  analytics.  Can  one 
intelligence  platform  truly  fit  all  your  needs,  within  FT  and  across  your  enterprise?  Let  us  prove  it. 
Call  toll  free  1  866  791  3183  or  visit  our  Web  site. 

www.sas.com/itbreakthrough 
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EMERetNO  TECHNOLOGIES 

Ultrawideband: 

A  Better  Bluetooth 

UWB  offers  huge  bandwidth  over  short 
distances  without  wires,  but  regulatory 
hurdles  and  a  fierce  standards  battle 
could  slow  its  introduction.  Pagg22 


QUICKSTUDY 

Fonn  Factor 

Formfcictor  refers  to  the  overall  dimensions 
and  component  layout  of  a  device  —  in  other 
words,  its  physical  size  and  packaging.  The  term 
covers  technical  specs  and/or  general-purpose 
descriptors  for  hardware  components.  Page  24 
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Information  technolopy  is  playing  a  bigger  role  in 
protecting  the  nation  s  ports,  but  many  projects 
have  yet  to  fullyroli  out.  byimimrosencriuice 


HIPPING  PORTS  are  gateways 
to  international  and  domestic 
trade  in  the  U.S.,  but  they  are 
also  tempting  targets  for  ter¬ 
rorists.  U.S.  ports  and  water¬ 
ways  handle  more  than  2  bil¬ 
lion  tons  of  domestic  and  im¬ 
port/export  cargo  annually,  a  volume 
that’s  expected  to  triple  by  202a  accord¬ 
ing  to  the  American  Association  of 
Port  Authorities  in  Alexandria,  Va. 

Before  the  Sept.  11  terrorist  attacks, 
officials  at  U.S.  ports  focused  on  mov¬ 
ing  cargo  from  one  place  to  another  as 
cost-effectively  as  possible.  Now  those 
officials  are  just  as  concerned  with 
protecting  ports  and  meeting  federal 
and  international  mandates  for  in¬ 
creased  security.  As  a  result,  informa¬ 
tion  technology  is  playing  a  bigger  role 
in  keeping  ports  safe. 

In  June,  Homeland  Security  Secre¬ 


SECURITY  MANAGER'S  JOURNAL 

Singing  the  US 
Protoobl  Bines 

Roger  Foix  runs  into  one  stumbling  block 
after  another  when  he  tries  to  secure  e-mail 
at  a  client’s  company  using  the  TYansport 
Layer  Security  protocol  PAq*  26 


tary  Tom  Ridge  said  that  most  seaports 
would  comply  with  the  July  1  deadline 
for  security  under  the  Internationa] 
Ship  and  Port  Facility  Security  Code 
and  the  Maritime  Ikansportation  Secu¬ 
rity  Act  (MTSA),  which  requires  ports 
and  vessels  to  control  access,  monitor 
activity  and  screen  personnel  haggag«» 
cargo  and  vehicles. 

Yet  while  all  U.S.  ports  are  trying  to 
improve  security,  for  most  it’s  still  a 
work  in  progress,  and  the  role  IT  plays 
'  varies  widely.  Here's  how  six  ports  are 
using  IT  to  address  security. 

■  CORPUS  CHRISTI 

The  Port  of  Corpus  Christi  in  Texas  is 
implementing  a  security  plan  to  pro¬ 
tect  27  miles  of  waterfront  property.  As 
part  of  the  first  phase,  it's  installing  35 
surveillance  cameras,  including  ther¬ 
mal  cameras,  infrared  cameras  and 


20 


CMPUTEIWMIS  JUfitsi}.  2004 


nCHNOlOSY 


Hot  Technologies  for  Port  Security 


auCiSb  CONTftOl  bVSTFM’. 


color  cameras;  intrusion'dciectlon 
oiul  motion-detection  icchnologv*: 
plus  fencing  sensors  and  an  access 
control  s>stem. 

These  systems  will  be  linked  b>-  a 
fiber-based  network,  and  the  informa¬ 
tion  they  collect  will  be  sent  to  .t  secu¬ 
rity  command  center,  sass  Gustavo  Es¬ 
pinosa.  the  p<»rt's  manager  of  intorma- 
lion  systems.  Omaha-based  Adesta  LLC 
ha.s  been  awarded  a  S^.‘>  million  con¬ 
tract  —  part  of  SLt.2  million  in  federal 
grants  made  to  the  pi>rt  —  to  provide 
and  integrate  the  s>  stems,  he  sass. 

That  pnMcct  includes  the  purchase 
of  aicrt-notiflcation  software  from 
V'isiaScape  Securits-  Systems  Ct»rp. 

The  .Atlanta-based  vendor’s  Securits' 
Data  Manaj».*mcni  System  automates 
threat  detection  through  real-time 
analysis  i«f  \  ideo  generated  by  surveil¬ 
lance  camenas.  sr).M.S  analyzes  images 
lo  detect  security  v  iolatums  and  alerts 
security  pers«>nnel  of  .abnormal  move- 
nvnts  or  objects.  The  Miftware.  built 
on  Nherosoft  Corp.’s  .Net  archik'ciure 
and  opi'n  sLindards.  also  prox  ides  data 
and  security  sensor  integration. 

L’sjng  V'ista-Scape’s  sofixvare  and 
hardware,  the  p<*rt  will  integrate  all  the 
X  jdex  •  cameras.  Espimtsa  says.  "We  can 
display  i»ne  x  iexx  or  a  hundred  viexvs. 

VVe  hax’c  tw«»  consoles,  and  each  one 
c**uld  select  any  camera  viexx  it  xxants 
ti*  see-  "  be  say's, 

l'spin»>sj  tapped  Tideland  Maritime 
Systems.  ,i  Houston-based  division  of 
manne  navigation  .aids  supplier  Tide- 
land  signal  Corp..  for  its  Vessel  Tralfic 
InfnnnjtH»n  SysK-m.  The  VTIS  consists 
of  camera  surxeillanie.  two  radar  i 

tracking  sx  stems,  an  automated  identi¬ 
fication  system  and  a  ship-to-shore  mi¬ 
crowave  communicjtiom  link.  , 

The  port  XX  ill  use  the  Vessel  Traffic  I 
Management  and  Information  Systems 


I  5060  from  Norcontrol  FT  AS  in  Honen. 
I  Norway,  to  collect,  integrate,  assess 
and  display  data  from  a  variety  of  sen¬ 
sors  to  pmvide  a  comprehensive  viexv 
of  vessel  traffic. 

I  ‘‘For  the  \TIS.  we  are  going  to  u.se  a 
'  combination  of 'Tl.  wireless  and  fibiT  to 
transmit  the  radars  and  xideo  imaging 
to  the  security  center."  Espinosa  says. 
■‘Wc  are  also  planning  to  imstall  check¬ 
points  throughout  the  Corpus  Christi 
ship  channel  to  receive  the  signal  from 
vessels  and  transmit  it  to  the  security 
I  center  and  harbor  master’.s  office." 

But  the  V'TIS  and  security  system 
are  independent  of  each  other,  so  the 
port  is  trying  to  find  a  xvay  to  integrate 
the  txx’o.  he  says. 

■  NORTH  CAROLINA 

The  North  Carolina  State  Ports  Au¬ 
thority.  xvhich  manages  the  seaports  in 
Wilmington  and  Morehead  City,  is 
mox'ing  forward  on  maj«>r  SLi-urity  up¬ 
grades.  says  l>oug  Cjmpcn.  security  di¬ 
rector  for  the  port  authority,  Campen 
is  planning  to  deploy  IP-based  video 
sun-eillance  cameras  ,tnd  im»tion-detec- 
tion  technologies,  as  xvell  as  an  ID  card 
system  that  xx  ill  be  compatible  xviih 
the  Transportation  Worker  Identifica¬ 
tion  Credential  (TWIC I  system.  That 
Transportation  Security  Administra¬ 
tion  ITS.AI  pilot  program  aims  to  cre¬ 
ate  a  uniform  ideniifii.’ation  credential 
f»*r  all  transportaikm  workers  who  re- 
\tuirv  unesc»«ned  access  to  federally 
regtilativj  transportation  facilities. 

The  port  authority  also  hired  an  engi-  I 
necring  firm  to  de.sign  an  integrated  se¬ 
curity  sx  stem.  Campen  says.  "Noxx.  we 
don !  hax  e  any  ID  systems  or  any  sur¬ 
veillance  systems  or  RFID  tags.  And 
thatjs  giHid.  because  xve  c.in  start  I 
fresii."  Campen  says.  "A  lot  of  seaports  | 
I’ve  talked  to  are  trying  to  integrate  the  ' 


I  old  with  the  nevx-.  and  they're  having 
I  pn>blems." 

■NEW  YORK 

Belhann  Rooney,  manager  of  port  se¬ 
curity  for  the  Port  Authority  of  New 
York  and  Nexv  Jersey,  says  her  agency 
is  ftKused  on  the  physical  security  of 
the  port. 

As  part  ofa  federally  funded  pilot 
pri'gram  called  Operation  Safe  Com¬ 
merce.  Rooney  says,  the  port  authority 
is  working  xvith  private  industry  to 
identify  supply  chain  vulnerabilities 
and  develop  improved  methods  and 
technologies  to  ensure  the  security  of 
cargo  entering  and  leaving  the  U.S. 

Under  the  program,  the  agency  is 
testing  various  technologies,  including 
electronic  seals  that  secure  container 
doors  and  detect  and  report  tamper¬ 
ing.  as  well  as  RFID  tags  that  can  de¬ 
termine  whether  a  container  has  been 
tampered  with,  Rooney  says, 

■SEATTLE 

The  Port  of  Seattle,  which  is  also  par¬ 
ticipating  in  Operation  Safe  Com¬ 
merce.  has  iastituted  an  access  control 
system  at  its  headquarters  using  ID 
badging  technology  from  Goddard 
Technology  Corp.  in  Greenville.  S.C.. 
an  access  control  system  from  jtihnson 
Controls  Inc.  in  Milxvaukce  and  smart 
card  printers  from  Fargo  Elcctronic.s 
Iric.  in  Minneapixlis. 

Employees’  fingerprint  images  are 
recorded  and  cncixded  on  smart  card 
identity  badges,  and  readers  at  st‘cured 
entrances  compare  the  encoded  finger¬ 
print  image  tm  an  emploxw’s  smart  card 
to  the  fingerprint  placed  on  the  reader.  , 
A.S  a  landlord  port,  the  Port  of  Seat¬ 
tle  leases  out  terminals  to  private  com-  ^ 
panics  that  operate  them,  says  Jim 
!  Sherill.  dirccu»r  of  seaport  security  at 
I  the  agency.  The  Coast  Guard,  which  is 
responsible  for  ensuring  that  ports 
j  comply  with  the  MTSA.  requires  ter¬ 
minals  to  hax'e  acce-s-s  cxxntrol  .systems  I 
and  surx'eillancc  monitoring  systems. 

'  and  progress  is  being  made  in  that  i 
'  area,  he  says.  1 

The  seaport,  which  to  date  has  re¬ 
ceived  SIO  million  in  grants  from  the 
TSA.  also  uses  browser-based  soft¬ 
ware  from  Seattle-based  V’igilos  Inc. 
to  record  and  manage  surxeillance 
camera  data.  TFie  integrated  system  i 

c.in  auionxaiically  notify  the  port  and 
allow  officials  to  view  video  via  the 
Internet. 

■  OAKLAND 

The  lN>rt  of  Oakland  in  Calilbmia 
has  installed  an  automated  pedestrian 
acevss  control  system  that  includes 


turnstile  gates  and  an  ID  card  reader 
system  that  checks  the  identity  of  peo¬ 
ple  entering  the  port,  says  Ray  Boyle, 
general  manager  of  maritime  opera¬ 
tions  .and  designated  port  security  offi- 
L'er.  The  system  is  designed  to  comply 
with  the  TSA's  specifications  fi»r  ac¬ 
cess  control  and  the  implementation  of 
TWIC  smart  cards,  he  says. 

■  SAN  DIEGO 

The  Pi>rt  of  San  Diego  is  in  the  process 
^  of  completing  its  Operations  Centcr. 

!  A  ecntral  command  and  control  cen¬ 
ter.  the  operations  center  will  merge 
I  data  from  local  and  federal  monitoring 
j  and  surveillance  systems  and  be 
I  monitored  around  the  clock.  All  stake¬ 
holders  located  xx  ithin  the  port  xx  ill 
I  have  real-time  access  to  the  informa- 
I  lion,  according  to  San  Diego  Harbor 
I  Police  Capt.  lessica  Cummins,  xxho 
I  is  responsible  for  homeland  security 
at  the  port. 

Uncommon  Standards 

Because  security  varies  xx  idely  among 
ports  and  there  is  no  federal  mandate 
detailing  the  type  of  security  systems 
ports  should  impicmx'nt.  members  of 
the  National  Safe  Waterways  and 
Seaports  Aliianee  in  Alcoa,  Tcnn..  are 
j  exmeernod  that  many  pons  don't  really 
I  know  xxhat  they  need  to  do.  or  hoxv  to 
do  it.  They  also  xx'orry  that  ports  don’t 
test  the  systems  the>’  do  install 
thoroughly  enough. 

The  group  believes  that  more  feder¬ 
al  oversight  is  needed.  “The  govern- 
meni  is  going  to  have  to  set  higher 
goals  and  xxbjectivos.  but  the  ports 
themselves  and  port  associations  can 
get  together  and  refine  the  system  a  lot 
better  to  meet  not  only  their  security 
needs,  but  their  operational  needs," 
says  the  organization's  chief  operating 
offievr.  John  Widdenburg. 

Jay  Grant,  director  of  the  Washing¬ 
ton-based  Port  Security  Council  of 
America,  sax-s  his  group’s  main  Rwus  is 
funding,  but  members  arc  also  con¬ 
cerned  about  technology  issues. 

"We’re  working  to  make  sure  that 
xxe  move  forxxard  in  that  direction."  he 
says.  "With  the  MTSA  gtiing  into  ef¬ 
fect.  xxe  certainly  haxe  increasLxl  the 
manpoxver  and  the  fcnce.s  and  the  cam¬ 
eras.  but  icchmxkigx-  is  a  priK'ess  th.it’s 
going  to  lake  some  time-."  O  48054 
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color  ouneras;  ifitrurioo-detectioa 
and  mocioo-detection  technology; 
phis  fencing,  sensors  and  an  access 
control  system. 

These  systems  will  be  linked  by  a 
nber>ba$ed  network,  and  the  informa¬ 
tion  they  collect  will  be  sent  to  a  secu 
rity  command  center,  says  Gustavo  Es¬ 
pinosa.  the  port's  manager  of  informa¬ 
tion  systems.  Omaha-based  Adesta  LLC 
has  been  awarded  a  $2.9  million  con¬ 
tract  —  part  of  S13.2  million  in  federal 
grants  made  to  the  port  —  to  provide 
and  imegr»e  the  systems,  he  says. 

That  prelect  includes  the  purchase 
of  alert-notincation  sofhvare  from 
VistaScape  Security  Systems  Corp. 

The  Atlanta-based  Yegor's  Security 
Data  Management  System  automates 
threat  detection  through  real-time 
analysis  of  video  generated  by  surveO- 
lance  cameras.  SDMS  analyzes  images 
to  detect  security  violations  and  alcns 
security  personnel  of  abnormal  move¬ 
ments  or  objects.  The  software,  built 
on  Microsoft  Corp.'s  .Net  architecture 
and  open  standards,  also  provides  data 
and  security  sensor  int^ration. 

Using  VistaScape's  software  and 
hardware,  the  port  will  integrate  all  the 
video  cameras.  Espinosa  says.  “Wc  can 
display  one  view  or  a  hund^  views. 
We  have  two  consoles,  and  each  one 
could  select  any  camera  view  it  wants 
to  sec."  be  says. 

Espinosa  upped  Tidelaod  Maritime 
Systems,  a  Houston-based  division  of 
marine  navigation  aids  supplier  Tide- 
land  Signal  Corp..  for  its  Vessel  Traffic 
Information  System.  The  VTIS  consists 
of  camera  surveillance,  two  radar 
tracking  systems,  an  automated  identi- 
fication  system  and  a  $hip-to-$bore  mi¬ 
crowave  communications  link. 

The  port  will  use  the  Vessel  Traffic 
Management  and  Information  Systems 


5060  from  Norcontrol  IT  AS  In  Horten. 
Norway,  to  collect,  integrate,  assess 
and  di^lay  data  from  a  variety  of  sen¬ 
sors  to  provide  a  comprehensive  view 
of  vessel  traffic. 

"For  the  VTIS,  we  arc  going  to  use  a 
combination  of  Tl.  wireless  and  fiber  to 
transmit  the  radars  and  video  imaging 
to  the  security  center,*  Espinosa  says. 
"We  are  also  planning  to  install  check¬ 
points  throu^ut  the  Corpus  Chrisd 
ship  channel  to  receive  the  signal  from 
vessels  and  transmit  it  to  the  security 
center  and  harbor  master’s  office." 

But  the  vns  and  security  s)rstero 
are  independent  of  each  other,  so  the 
port  is  trying  to  find  a  way  to  integrate 
the  two,  he  says. 

■  NORTH  CAROUNA 

The  North  Carolina  State  Ports  Au¬ 
thority.  which  manages  the  seaports  in 
Wilmington  and  Morehead  City,  b 
moving  forward  on  major  security  up¬ 
grades.  says  Doug  Campen,  security  di- 
^or  for  the  port  authority.  Campen 
b  planning  to  deploy  IP-baUd  video 
surveillance  cameras  and  motion-detec¬ 
tion  technok^es,  as  well  as  an  ID  card 
system  that  will  be  compatible  with 
the  Ttansportation  Worker  Identifica¬ 
tion  Credential  (TWIC)  system.  That 
Ttansporution  Security  Adminbtra- 
tlon  (TSA)  pilot  program  aims  to  cre¬ 
ate  a  uniform  idmtification  credential 
for  all  transportation  workers  who  re¬ 
quire  unescorted  access  to  federally 
regulated  transporution  f^Uities. 

The  port  authority  also  hired  an  engi¬ 
neering  firm  to  des^  an  integrated  se¬ 
curity  system.  Campen  says.  “Now.  wc 
don’t  have  any  ID  systems  or  any  sur¬ 
veillance  systems  or  RFID  tags.  And 
that’s  good,  because  we  can  start  , 
fresh."  Campen  says.  "A  lot  of  seaports  I 

Tve  talked  to  are  trying  to  integrate  the  I 


old  with  the  new.  and  they’re  having 
problems." 

■NEW  YORK 

Bethann  Rooney,  manager  of  port  se¬ 
curity  for  the  Port  Authority  of  New 
York  and  New  Jersey,  says  her  agency 
is  focused  on  the  physical  security  of 
the  port. 

As  part  of  a  federally  funded  pilot 
program  called  Operation  Safe  Com¬ 
merce,  Rooney  says,  the  port  authority 
b  working  with  private  industry  to 
identify  supply  chain  vulnerabilities 
and  develop  improved  methods  and 
technologies  to  ensure  the  security  of 
cargo  entering  and  leaving  the  U.S. 

Under  the  program,  the  agency  b 
testing  various  technologies,  including 
electronic  scab  that  secure  container 
doors  and  detect  and  report  tamper¬ 
ing.  as  well  as  RFID  tags  that  can  de¬ 
termine  whether  a  container  has  been 
tampered  with.  Rooney  says. 

•SEATTU 

The  Port  of  Seattle,  which  b  also  par¬ 
ticipating  in  Operation  Safe  Com¬ 
merce,  has  instituted  an  access  control 
system  at  its  headquarters  using  ID 
badgittg  technology  from  Goddard 
Technology  Corp.  in  Greenville.  S.C., 
an  access  control  system  from  Johnson 
Controb  Inc.  in  Milwaukee  and  smart 
card  printers  from  Fargo  Electronics 
Inc.  in  Minneapolis. 

Employees'  fingerprint  images  are 
recorded  and  encoded  on  smart  card 
identity  badges,  and  readers  at  secured 
entrances  compare  the  encoded  fity»r. 
prim  image  on  an  employee’s  smart  card 
to  the  fingerprint  pbK%d  on  the  reader. 

As  a  landlord  port,  the  Port  of  Seat¬ 
tle  leases  out  terminab  to  private  com¬ 
panies  that  operate  them,  says  Jim 
SheriU,  director  of  seaport  security  at 
the  agency.  The  Coast  Guard,  which  b 
responsible  for  ensuring  that  ports 
comply  with  the  MTS  A,  requires  ter- 
minab  to  have  access  control  systems 
and  surveillance  monitoring  systems, 
and  progress  b  being  made  in  that 
area,  he  says. 

The  seaport,  which  to  date  has  re¬ 
ceived  $10  million  in  grants  from  the 
TSA,  also  uses  browser-based  soft¬ 
ware  from  Seattle-based  Vigilos  Inc. 
to  record  and  manage  surveillance 
camera  data.  The  integrated  system 
can  automatically  notify  the  port  and 
allow  officials  to  view  video  via  the 
Internet. 

OAKLAND 

The  Port  of  Oakland  in  California 
has  installed  an  automated  pedestrian 
access  control  system  that  includes 


turnstile  gates  and  an  ID  card  reader 
system  that  checks  the  identity  of  peo¬ 
ple  entering  the  port,  says  Ray  Boyle, 
general  tnana^r  of  maritime  opera¬ 
tions  and  designated  port  security  offi¬ 
cer.  The  system  b  designed  to  comply 
with  the  TSA's  specifications  for  ac¬ 
cess  control  and  the  implementation  of 
TWIC  smart  cards,  he  says. 

■SAN0IE60 

The  Port  of  San  Diego  b  in  the  process 
of  completii^  its  Operations  Center. 

A  central  command  and  control  cen¬ 
ter.  the  operations  center  will  merge 
data  from  local  and  federal  monitoring 
and  surveillance  systems  and  be 
monitored  around  the  clock.  All  stake¬ 
holders  located  within  the  port  will 
have  real-time  access  to  the  informa¬ 
tion,  according  to  San  Diego  Harbor 
Police  Capt.  Jessica  Cummins,  who 
b  responsible  for  homeland  security 
at  the  port. 

Uncommon  Standards 

Because  security  varies  widely  among 
ports  and  there  b  no  federal  mandate 
detailing  the  type  of  security  systems 
ports  should  implement,  members  of 
the  National  Safe  Waterways  and 
Seaports  Alliance  in  Akoa.  Tenn..  are 
concerned  that  many  ports  don’t  really 
know  what  they  need  to  do,  or  how  to 
do  it  They  also  worry  that  ports  don’t 
test  the  systems  they  do  install 
thoroughly  enough. 

The  group  believes  that  more  feder¬ 
al  ovenigbt  b  needed.  The  govern¬ 
ment  b  going  to  have  to  set  higher 
goals  and  objectives,  but  the  ports 
themselves  and  port  associations  can 
get  together  and  refine  the  system  a  lot 
belter  to  meet  not  only  their  security 
needs,  but  their  operational  needs.” 
says  the  organization’s  chief  operating 
officer,  John  Wlddenburg. 

Jay  Grant,  director  of  the  Washing¬ 
ton-based  Port  Security  Council  of 
America,  says  hb  group's  main  focus  b 
funding,  but  members  are  also  con¬ 
cerned  about  technology  issues. 

"We’re  working  to  sure  that 
we  move  forward  in  that  direction,"  he 
says.  “Wth  the  MTSA  going  into  ef¬ 
fect.  We  certainly  have  increased  the 
manpower  and  the  fences  and  the  cam¬ 
eras.  but  technology  b  a  process  that’s 
going  to  take  some  time."  O  48054 
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Got  Questions  About 
Network  Consolidation? 

Computenworld’s  IT  Executive  Summit  Has  the  Answers 


IT  EXECUTIVE  SUMMIT 


Exclusively  sponsored  by; 


Streamlining  Networks  and  Data  Centers: 

The  Business  Benefits  of  Consoiidation 

Chicago  •  August  25,  2004 

Chicago  Four  Seasons  Hotel  •  120  East  Delaware  Place 
7:45am  to  8:15am  Registration  and  Networking  Breakfast 
8:15am  to  8:45am  Rebuilding  the  IT  Foundation 

Maryfran  Johnson,  Editor  m  Chief,  Compulefworid 

8;45am  to  9:15am  Consolidation  and  the  Data  Center: 

Boosting  Business  Performance 
and  Application  Availability 

Richard  V^llars.  Vice  PresKJeoi.  Storage  Systems 
Research.  IDC  -w 

9.15am  to  9:45am  ConsoHdation  Strategies  for  a  New  Media  Wbrld 


Selected 

speakers 

include: 


1 

Moryfrm  Johnson 
BdilormCU^. 


Andri  Uttuies 
I  CU^Tkchnolny 
I  /novrotiM  Officer. 

ns 


10:15am  to  10:45am  Perspectives  from  Oppenheimer  Funds 
Tim  Qertach.  Mar^ager,  Telecommunications. 

Oppenheimer  Funds 

10:45am  to  11 :15am  Customer  Challenges  and  Solutions; 

Real-Ufe  Scenarios  Connecting  Data 
Centers  Over  Distance 

Steve  Adolph,  CTO,  Enterprise  Solutions  Group  CIENA 

11:15am  to  noon  Overcoming  Management  Barriers  - 

Making  the  Case  for  Consolidation 

Panel  Moderator:  Julia  t^r>g.  Natior\al  Correspondent 
Computenworld 

Panelists:  Raul  Bergamo,  Chief  Technotogy  Offtcer 
Liberty  Mutual.  Stephen  Monn,  Chief  Information  Officer 
TAG  WbfWwide  Companies;  Pond,  Director  of 
information  Servfces.  The  Schmtzer  Group  of  Companies 

Program  Concludes 


StfveAdoipfi 
CTO.  FWMfyiut 
Soliitioiis  Gm^ 
CIENA 


Richard  Villan 
VKvPmideK. 


This  program  will  also  take  place  at  the 
Renaissance  in  Dallas  on  September  22.  2004 

For  more  information  on  these  tocations.  call  888-299-0155 


If  you're  an  IT  executive*  in  an  end'user 
organization,  apply  to  attend  Computerwortd's 
upcoming  complimentary  half-day  summit 
on  NeiVvork  Consolidation, 

CIOs  and  senior  IT  executives  are  finding  that 
consolidating  high-performance  networks  can 
play  a  key  role  In  improving  business  applica- 
tton  performance  while  significantly  reducing 
operatbnal  costs. 

The  proliferation  of  network  capacity  and  relat¬ 
ed  storage  and  server  infrastructure  presents  a 
daunting  challenge  for  toda/s  enterprises, 
many  of  which  are  positioning  themseh/es  for 
growfo  yet  still  seeking  to  reduce  IT  costs 
where  feasible. 

By  leveraging  the  knowledge  of  industry 
experts  ^d  the  real-world  experience  arrd 
advice  of  your  IT  peers,  this  IT  Executive 
Summit  will  provide  an  overview  of  effective 
strategies  for  consolidating  and  connecting 
networks  and  data  center  applications. 

•Complimentary  registration  is  restricted  to 
quaJified  IT  executives  only. 


Apply  for  registration  today 

For  more  information  or  to  apply,  visit 
www.jtexecutivesummlt.com/nc 
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icchnulo^  has  boen 
called  "BIucltHith  on 
steroids."  Like  Bluetooth, 
its  personal-area  network 
(PAN)  cousin,  UWB  is 
designed  to  replace  ca¬ 
bles  with  short-range,  wireless  connec¬ 
tions.  but  it  offers  the  much  higher 
bandwidth  needed  to  support  multi- 
media  data  stre.tms  at  ver\'  low  power 
le\els.  And  because  UVV’Bcan  commu¬ 
nicate  both  relative  distance  and  posi¬ 
tion.  it  can  be  used  for  tracking  equip¬ 
ment.  containers  or  other  objects. 

In  a  recent  technologv'  demonstra¬ 
tion.  Freescaie  Semiconductor  Inc. 

in  Tempe.  Ariz..  showed  a _ 

I  WB  device  that  trans-  piarwA 

mitted  at  a  data  rateof  FMFRnl 
1 10Mbit  sec.  at  a  range  of  Tmilll 
up  to  10  meters.  That  band-  I  tWillli 

width  —  100  times  faster  - 

than  Bluetooth  and  twice  the  capacity 
»if  the  tastest  Wi-Fi  networks  —  is 
enough  to  pump  three  concurrent  video 
streams  over  a  single  L'WB  connection.  , 
Vendors  are  promising  UWB  products 
that  support  speeds  up  to  1Gbit  see. 

Waiting  for  UWB 

'While  the  pn>spect  of  lOOMbit  sec. 
data  transfers  is  c.vciting.  LIWB  is 
probably  three  or  more  wars  away  from 
widespread  adoption,  especially  for 
busines.s  use.  according  to  chip  makers 
and  analysts.  Government  regulators 


EMERGING^ 

TECHNOLOGIES 


j  outsiue  tne  u.i..  Haven  t  approved  the 
!  of  UWB,  and  .standards  bodies  arc 
I  arguing  over  the  final  specification.  I 
'  Craig  Mathias,  an  analyst  at  Farpoini  ' 
I  Group  in  Ashland.  Mass.,  predicts  that 

,  the  first  products  with  UWB  chip.s.de-  i 

signed  for  home  theater  applications. 

,  will  debut  next  year.  Mass  adoption  of 
the  technology  won’t  come  until  2007, 
he  says. 

Business  applications,  when  they 
come,  will  center  on  UW'B  as  are-  ' 

,  placement  for  the  Universal  .Serial  Bus 
standard,  says  Ken  Dulaney,  an  analyst 
at  Gartner  Inc.  in  Stamford.  Conn. 

,  UWB  could  be  used  to  easily  connect 
several  laptiips  to  a  single  projector  to 

-  -  handle  video  or  slide  pre- 

sentations.  or  it  could  be 
WU  9  used  to  back  up  large  files 
II  quickly,  he  says.  Eventual- 

FLUUIM  1^,  .workers  could  carry  a 

ponable  storage  device 
equipped  with  a  system  image  and 
UWB  connectivity.  Users  would  be'  ' 
able  to  sit  down  at  any  workstation, 
connect  via  UWB  and  start  working 
"It’s  very,  very  significant  technol¬ 
ogy.  and  UWB  is  a  guaranteed  win," 
add-s  Mathias,  noting  that  50  compa¬ 
nies  are  making  UWB  chips,  including 
heavyweights  like  Intel  Corp.  But 
vendt)rs  have  yet  to  agree  on  a  stan¬ 
dard.  Intel  is  backing  one  camp,  while 
another  industry  giant.  Motorola  Inc. 
(through  its  Freescaie  subsidiary),  is 
backing  the  other. 


UWB  Standards 
Face  Off 


The  Multiband  OFDM  AHiance's  spedfica- 
(ion  gets  its  name  hoin  the  tact  that  it  dh 
vides  UWB's  7500-Mtb-wide  fretjuency 

range  between  3.1  GHz  and  10.6  6Hz  irto 

smaltef.  529-MHz  segments.  A  mandatory 
mode  supported  by  all  MBOA  devices 
uses  three  bands  beiow  5  GHz. 

Orthogonal  Frequency  Division  Multi¬ 
plexing  transmits  data  in  312.5  nano¬ 
second  time  slots,  altemtfina  among 
three  frequency  bands.  Spraaiing  inh^ 
tion  across  rtxjttipte  bands  allows  the  tech¬ 
nology  to  be  very  efticient  offering  high 
barKtwidth  at  low  power  levels,  accordng 
to  Srinivasa  Somayaziiu.  a  senior  staff  re¬ 
searcher  at  Intel. 


0S4fWB 

The  UWB  Fbfum-s  DS-UWB  technology 
transmits  data  at  a  rate  exceeding  1  billion 

pulsespersecondandspreadsthebans- 
missions  across  the  widest  possible  fre¬ 
quency  band.  Forum  members  are  also 
promotkig  acceptance  of  what's  caHed 
the  Cornmon  Signal  Mode,  which  works 
as  a  kind  of  traffic  cop  among  the  differ¬ 
ent  UWB  standards,  says  Freescale's 
Martin  Rofteart 


UlbBwideband: 

A  Better  Bluetooth 

Outlook;  Ilk-  \\  irolcss  |\TMin;il-:nv:i  network  teehiiolo'w 
IS  nioiv  ilwii  10(1  limes  Insier  ili;in  Bluetooth,  but  business 
.ipplicatuius  are  siill  a  Ion-  \\a\  oli!  By  Matt  Hamblen 
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LTRAWiDEBAND  wireless 
technology  has  been 
called  “Bluetooth  on 
steroids.”  Like  Bluetooth, 


outside  the  U.S.  haven’t  approved  the 
use  of  UWB,  and  standards  bodies  are 
arguing  over  the  final  specification. 
Craig  Mathias,  an  analyst  at  Farpoint 


- ivuiuud.»,  dll  dnaiysi  at  rarpoint 

Its  personal-area  network  Group  in  Ashland.  Mass.,  predicts  that 
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(PAN)  cousin,  UWB  is 
designed  to  replace  ca¬ 


tions,  but  it  offers  the  much  higher 
bandwidth  needed  to  support  multi- 
media  data  streams  at  very  low  power 
levels.  And  because  UWB  can  commu 
nicate  both  relative  distance  and  posi¬ 
tion,  it  can  be  used  for  tracking  equip¬ 
ment.  containers  or  other  objects. 

In  a  recent  technology  demonstra¬ 
tion,  Freescale  Semiconductor  Inc. 

in  Tempe,  Ariz.,  showed  a  _ 

UWB  device  that  trans- 
mined  at  a  data  rate  of 
llOMbit/sec.  at  a  range  of  TTPIIi 
up  to  10  meters.  That  band-  •  Cvtll 

width  — 100  times  faster  - 

than  Bluetooth  and  twice  the  capacity 


the  first  products  with  UWB  chips,  de¬ 
signed  for  home  theater  applications, 
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—rr  , - v.«-  :>igneu  lor  nome  ineater  applications, 

bleswth^ort-range,  wireless  connec-  wiU  debut  next  year.  Mass  adoption  of 
tions,  but  it  offers  the  much  higher  the  technology  won’t  come  until  2007, 

hanHwiHrh  _..u:  ■ _  ' 
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I  he  says. 

Business  applications,  when  they 
come,  will  center  on  UWB  as  a  re¬ 
placement  for  the  Universal  Serial  Bus 
standard,  says  Ken  Dulaney,  an  analyst 
at  Gartner  Inc.  in  Stamford,  Conn. 
UWB  could  be  used  to  easily  connect 
several  laptops  to  a  single  projector  to 

- handle  video  or  slide  pre- 

jH  sentations,  or  it  could  be 

used  to  back  up  laige  files 
LOMFS  £ventual- 

h  WILW  jy.  workers  could  carry  a 
portable  storage  device 
equipped  with  a  system  im^e  and 
UWB  connectivity.  Users  would  be 


of  the  fastest  Wi-Fi  networks  -  is  UWB  connectivity.  Users  would  be 

enough  to  pump  three  concurrent  video  able  to  sit  down  at  any  workstation, 
stre^  over  a  single  UWB  connection,  connect  via  UWB  and  start  working 
Vendors  are  promising  UWB  products  “It’s  very,  very  significant  technol- 


that  support  speeds  up  to  IGbit/sec. 

Watting  lor  UWB 

While  the  prospect  of  lOOMbit/sec. 
data  transfers  is  exciting.  UWB  is 


“It’s  very,  very  significant  technol- 
c^,  and  UWB  is  a  guaranteed  win," 
adds  Mathias,  noting  that  50  compa¬ 
nies  are  making  UWB  chips,  including 
heavyweights  like  Intel  Corp.  But 
vendors  have  yet  to  agree  on  a  stan- 


_ .  . .  ..  - - liuvc  yei  lo  agree  on  a  stan- 

probably  ^  or  more  years  away  from  dard.  Intel  is  backing  one  camp,  whUe 
widespread  adoption,  especially  for  another  industry  giant,  Motorola  Inc. 
business  use.  according  to  chip  makers  (through  its  Freescaie  subsidiary),  is 
and  analysts,  (kwemment  regulators  backing  the  other. 


yibBwideband: 

A  Better  Bluetooth 

Outlook:  wireless  personal-area  networic  technology 

is  rnore  than  100  times  faster  than  Bluetooth,  but  business 
applications  are  still  a  long  way  off  By  Matt  Hamblen 
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Learn  How  to  Achieve 
Storage  Networking  Success 


October  25-28,  2004  ■  JW  Marriott  Grande  Lakes  Resort  ■  Orlando  Florida 
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Confaianca  for 

'  n*  Management 

*  Storage  Architects 

*  IT  infrastructure  Professionais 

*  Business  Continuify  Ptanning  Experts 

*  Data  Managernem  Speciatists 

*  Network  Professionals 

To  register  or  for  more  information, 

visit  wiMKjrnnMxom/be 
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Learn  How  to  Achieve 
Storage  Networking  Success 

•  Get  a  Contemporary  Overview  of  Today’s  Storage  Networking  Issues  and  Opportunities 

•  See  How  to  Implement  and  Deploy  the  Latest  in  Storage  Networking  Technologies 

•  Hear  the  Latest  in  Enterprise  Security 

•  Learn  from  Best  Practices  and  Case  Studies 


Why  You  Should  Attend 

Are  you  responsible  for  managing  your  company's  storage  assets  and  strategies?  Want  to 
exchange  innovative  ideas  and  strategies  with  other  executives  who  share  the  same 
objectives?  Then  attend  Storage  Networking  World,  where  you'll  network  with  and  learn 
from  renowned  experts  and  the  nation's  top  user  executives. 


Conference  At-a-Glance  (subject  to  change) 

For  details,  updates,  and  to  register  visit  www.snwusa.com/cw 

MONDAY,  OCTOBER  25 _ 

9  00am  to  930am  Breakfast 


l-SNIA 


STORAGE 

NEnmiiioiie 

WORLD 

coMraiawNiD 


9  30am  to  10  25am 


Addressing  High 
Density  Ceeiing  of 
Storage  Networking 
Equipment  et  the 
Facility  Level 
Donald  Beity  ^ourxjer  & 
President.  DLB  Associates 


10.35am  to  1 1  30am  Role  of  Server  Blades 

and  Vbtualizelion  in  Next 
Generation  Data  Center 

Arun  Tane)A  Founder  and 
Consulting  Analyst.  Taneja  Group 


Storage  Basks 
and  Trends 

Dennis  Martin.  Senior  Analyst, 
and  Greg  Sdiulz.  Senior  Analyst. 
Evaluator  Group 


Why  Tape  Continues 
to  Make  the  Grade 

Richard  Haiatu.  President.  Tape 
Technology  Council 


Power  Statements, 
Questions  and 
Ansvrers  Techniques 

Howard  Gpidstem.  Founder 
Hpeerd  Goldstein  Associates  irt 


1 1  30am  to  1  00pm  Luncheon 


HDC 


SNlATcMfM  SesekMS  ■  IOC  BrWInt  fiwten  : 

1«)pmto6*0pm  |  1 0Ojv-i  Id  frOOpm 


■  Oats  Lifecycle 

-  Virtualization  A 
Securing  Tbur  Storage 

-  Focus  on  Networking 
Vour  Storage 

-  Focus  on  Storage 

■  SAN  Martagement 

-  Veka  of  tha  Usar 
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7'OOpm  to  9:00pm  Welcome  Reception 


October  25-28.  2004  -  JW  Marriott  Grande  Lakes  Resort  ■  Orlando.  Florida 


www.snwusa.com/cw  or  call  1  *800-883 


TUESDAY,  OCTOBER  26 

7  ’5amio8  15a:r  Breakfast 


?°"  Benoonei  testsellioj  Aulhor  of  T)»  KoteO  CcrBcrMior, 

Gromng  Lfp  Digital  and  Paradigm  Shift 

■Hie  Future  of  Knowledge  Management 

jo'rHaan.a  MO  CiQ  CafeG-oupH^an"  System  B-a-.s-a  mm, ca  Scnoo. 

Kevin  Rollins,  President  A  COO,  Dell 


Keith  Glennan.  VP  «  CIO,  Northrop  Grumman  IT 
Shinjiro  Iwata.  CEO.  Hitachi  Data  Systems 


Industry  Presidents'  Roundtable  and  Market  Outlook 


General  Networking 
Luncheon 

OitheJWUwr 


CorKunant  Lurtcheon 
Session 

■  Sine  Di«lesge.  Pounder 

iSenoAfiilysl 
Ertle^yiee  Storage  &0U0 


Cerrcunartl  Luncheon 
Session 

Orchard  Sneoer,  kiterUivty 
Sroue 


>  SNW  is  a  great  vwHie 
for  peer  discussion an 
opportunity  to  provide 
feedback  to  vendors  on 
what  users  need  from  them ,. 
I  sat  down  with  my  key 
vendors  and  shared 
information 

»John  Greer 

Director,  IT  Infrastructure 
Pacific  Gas  &  Electric 


I  Cohen.  VP,  Technology  Architecture  Group.  Merrill  Lynch 
Greg  Reyes.  Chairman  A  CEO.  Brocade  Communications  Systems 

Rod  Mueller,  Manager  of  Technology  and  Infrastructure 
International  Paper 

CTO  Insights  Panel 

M  WJI:.  jor  Togo.  Fouixlet  To-go  Partners  Intefiatonal 


Expo  W’fh  Dinner  /  Interoperability  A  Solutions 


WEDNESDAY,  OCTOBER  27 


Breakfast 

Opening  Remarks 

HNick  Carr,  former  Executive  Editor  of  the  Han 
and  author  of  Does  IT  Matter? 

End  User  Case  Study 
Industry  Leader  Presentation 

V|J  Michael  Prince,  CIO,  Burlington  Coat  factory 


Chairman  A  CEO,  AOIC 


iW  Marriott 
Grande  Lakes 
Resort 

Orlando.  Florida 

Hotel  Reservations 
and  Travel  Services 


1 1  SOamto  12  ISpr* 

12  ibdri’  to  1  45pm 

1  45Dm  to  2  ISpm 

2  ISpm  to  2  45pm 
245pm  to  3  30pm 


Panel;  End  Users  Speak  Out 
Expo  A  Luncheon 
End  User  Case  Study 
Industry  Leader  Presentation 

a  Analyst  Roundtable  Panel 

UodefA'of  Jon  Wiliam  Togo  Founoer 


345pm  to5.15pm 


THURSDAY,  OCTOBER  28 


7.30am  to  8  30am 
8:30am  to  Noon 


Breakfast 


COMCUPRENT  TECHHICAl  t  BUSINESS  TUTORIALS 


Conference  Corrcludes 


•  IDG 


lOG  Travel  IS  the  official 
travel  company  for  Storage 
Networking  Wtorld.  They 
are  your  one-stop  shop 
for  exclusive  discounted  rates  on 
hotel  accommodatioris. 

To  reserve  your  accommodations,  wsil 

www.etcentral.com 

fbu  can  also  call  our  conference  hoosmg  Une  at 

1-800-340-2263  (or  1-50t-62046K) 


Application  for  Conference  Registration 


Fa*  this  completed  application  to  1  •508-820'B254  or  apply  online  at 


wwMsnwu5a.com/cw 


Q I  am  an  IT  End-User* 

(Ce«nW»f  MMiMm  PreW* 


Your  business  card  is 
REQUIRED 

to  process  your  application 


Questions?  Call  1-800-8a3-9090 


If  not  indicated  on  your  business  card,  please 
provide  the  following  required  information: 


Registration  questions? 

Cali  ’  800-883-9090  or  email  srw'eg&roiT'pute'wor'flcofr 

Need  accommodaborts? 

Resef.«tbem  at  wwwetcentraUom 
P'easecaii  1-800-340-2362 
or  email  even|t'OuSing«i(Jgcom 
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■'•t»«aCiXO*aeoirt9i»«Mj«iai-^Brr«e.*^saBB<eof»<wicj»»»Y  '  JOOS  '  »-ppen  n..  . .--1  rr . -/rva^s^aa^,^. , r-n.^po,  w>g(-e 

Attoodrieip^:  must  t*  comoleteo  bf 'T  Ena-r^s  ana  Channel  Partners/l.tegrah«/Ccnwiantsor,  («„or.ai  '(y  cine-  «  proceH  war  aooncator 

J  5l«i»ir/T,ae,4iia;«-«r  J  J ‘.•-•-.•et^r,.;ra«  CanMM. imm >•  ina m«nmi  eMtar'JeiMU'nhi^ 
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Q  My  company  is  Sponsoring/  □  5ms  (tNoognSeWe-bet  '4  2004) 

Exhibiting  at  SNW  General  Conference  Package  (October  26  4  27) 

l•ne'l^esG*"•’»  Conference  Si*»C"5  Eioo  Ue»s4  Oec«iensi 


U  SSM  (tr^Se«embe--4  :^,  □  $1.M5  aterSefe-b.. 2W: 

Co"fa."c.  P.c«9.  (toot.,  26  S  27) 

W -  “n  -“r^.  (Oc»«.  25, 26,  27,  28) 
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Q  i  am  a  rapresantative  of  a  Non-Sponsoring  IT  Vendor  Company 

□  58,000  auMwM  Dmiopnwni  Professional  Psckaoe  for  Sales  Mareetuig  ar^d  Bus-n 
■’*^?Tr?(y5”'’**»»*'Sl()nyNeNen^W»utNouyf^^ 

y?*^^”^'***"'****'  -^niWsiasnea  as oWer  non  IT «nd  jeer  areNswnabas  oeimea^Ci»n(,<ier>^ 

may  aeoy  >er  rBTarunr  at  me  nor  TOW'?  «n08i  ■  raN  of  $6  COO  Defen-uyBion  (K  «n»  a»)5H«lei  a  ■-O)  »»<»#« 

wr«»  regiWtor6maaeeiiL»<ii.e4b,Cofrx>ulen«yafte^  2H9  4K» nxm  auesKTR 

Q  I  am  a  Financial/Equity  Analyst  and/or  Vonture  Capital  Professional 

3  $1400  (tNougn  SeoNmee- 14  2004)  □  $1,*00 'after  Sewen^e- 14  20O4  i 

General  Conference  Package  General  Conference  Package 

'•K-uOesGenersConferenceSessKinsEiqK  ' -oudes General Confe-ence Sessens  Ewo 

MeaK4Ricept«sn$i  Meals  *  Recedensj 

CJ  i  P  quallflad  mambar  of  tha  prass.  i  can  verriy  my  press  credentials 
Press  snouW  call  EnnKeeie  at  l  701  915  5009  to  register 

Please  fax  this  completed  application 
to  1-508-820-8254 


5  Development Professorais  imu 


iJene-B'  Confernrce  Se»*om,  Ew  Mea'sS  Receptor, 


_  Payment  Method 
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Hease  ser^a  caneei'aiion  requests  via  email  to  snyuregUcomoiiterywriocom 


www.compotefwortd.coni 
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UWB  faces  serious  regulatory  hur* 
^es  as  weU.  “so  it’s  hard  for  it  to  move 
forward."  Mathias  says.  The  U.S.  is  the 
only  country  to  approve  spectrum  for 
use  by  UWB  radios.  Regulators  worry 
that  UWB  will  interfere  with  a  range  of 
other  wireless  devices  that  operate  in 
the  same  spectrum,  including  cell 
phones,  says  Steven  Wood,  a  strategy 
planner  at  Intel. 

Opposition  by  foreign  chip  makers 
and  foreign  governments  might  be  less¬ 
ening.  however,  says  Gary  — 
Anderson,  a  delegate  in  the 
International  Telecommu¬ 
nications  Union  (ITU).  He 
says  tests  shown  recently 
to  regulators  from  the  Eu¬ 
ropean  Union  demonstrat¬ 
ed  that  interference  is  not 
a  problem. 

“UWB  is  here  to  stay, 
and  within  the  new  six 
months  we’U  see  a  great 
warming  in  the  interna¬ 
tional  community  for 
OWB."  says  Anderson,  who  is  CEO  of 
Boston-based  Uraics  Communications 
Inc.,  a  developer  of  UWB  devices.  The 
rru  is  moving  toward  a  UWB  mandate 
that  should  be  ready  in  less  rh^n  a 
year,  be  adds. 


UWB  )b 
here  to  stay 
and  within  thi? 
nenf  SIX  months 
we'll  .see  a  great 
warming  m  the 
international  com¬ 
munity  tor  UWB 


Standards  Deadlock 

Unfortunately,  at  the  Institule  of  Elec- 
trical  and  Electronics  Engineers  Inc., 
the  matter  of  reaching  a  UWB  Stan- ^ 

dard  is  still  “politically  deadlocked." 
according  to  Wood  and  others. 

The  IEEE  study  group  for  the 
802 JSJa  PAN  dr^  standard  b  at  a 
stalemate  as  the  two  vendor  groups 
push  competing  specifications.  Intel  is 
aligned  with  the  MO-roember  Multiband 
OFDM  Alliance  (MBOA),  which  advo¬ 
cates  the  Orthogonal  Frequency  Divi¬ 
sion  Multiplexing  (OFDM)  standard, 
while  Freescale  and  the  30-member 
UWB  Forum  are  pushing  for  Direct  Se¬ 
quence  UWB  (DS-UWB)  technology. 
UWB  won’t  progress  until  the  two 
sides  reach  a  compromise  —  some¬ 
thing  neither  appears  ready  to  do. 

Martin  Rofheart.  director  of  UWB 
operations  at  Freescale.  says  DS- 
UWB  has  a  ‘two-year  time-to-market 
advantage“  over  MBOA  approaches. 
Freescale  has  demonstrated  a  chip  set 
called  XtremeSpectrum,  which  it  ex¬ 
pects  to  appear  in  home  wireless  digi¬ 
tal  video  applications  thb  feU,  be  says. 
Freescale  says  the  chip  will  support 
speeds  of  up  to  IGbit/scc.  over  2  me¬ 
ters  and  will  be  available  by  the  end 
of  next  year. 

Intel's  Wood  says  Rofbeart’s  claim  of 

a  two-year  lead  time  over  MBOA  b  “lu¬ 


dicrous"  Intel  and  other  MBOA  ven¬ 
dors  will  “make  it  a  real  contest"  for 
DS-UWB  vendors,  and  the  MBOA  has 
nearly  five  times  as  many  vendors  as 
the  UWB  Forum,  he  add^ 

Mathias  says  he  wouldn’t  want  to 
choose  which  approach  b  better  or 
which  will  win  out  “It’s  still  early,  but 
the  amount  of  innovation  by  all  the 
companies  involved  b  indicative  of  the 
great  potential  UWB  bolds,”  be  says. 
WAWB  doesn’t  catch  on.  other  tech¬ 
nologies  in  the  fast-mov¬ 
ing  wireless  arena  could 
lake  the  lead.  For  example, 
a  nascent  Wi-Fi  wireless 
tAN  standard.  IEEE 
B02.11ii,b  expected  to  of-  , 
fer  bandwidih^l^ 200Mbit/ 

sec  Some  analysts  say  it's 
possible  that  by  the  time 
UWB  products  arrive, 
802.Un  devices  may  be 

available,  providing  higher  I 
throughput  than  first-  ^ 

- —  generation  UWB  devices. 

Although  the  technology  most  likely 
would  require  more  power  than  UWB. 
one  research  firm  predicts  that  it  will 
leap  ahead  of  UWB  for  home  use.  That 
might  slow  UWB’s  momentum  for  busi-  i 

ness  use  as  well -but  don’t  count  on  it  | 

'^^e  some  vendors  are  already 
touting  802.Un  compliance,  that’s  "a 
clearly  mbieading  claim.-  according  to 

Gartner’s  Dulaney,  who  categorizes  the  I 

standard  as  “embryonic"  ' 

Ultimately,  the  success  of  UWB  will 
also  depend  on  its  cost.  That’s  still 
an  unknown,  although  chip  vendors 
predict  that  volume  prices  will  eventu¬ 
ally  drop  to  about  $5  -  the  same  as 

was  predicted  for  Bluetooth.  Yet  the 
promise  of  Bluetooth  as  a  universal  ca-  i 
ble  replacement  didn’t  come  to  pass  be¬ 
cause  the  benefits  of  adding  the  tech¬ 
nology  weren’t  seen  as  compelling 
enough  to  justify  the  incremental  cost 
for  tow-end  peripheral  devices  such  as 
keyboards,  mice  and  even  printers. 

Wth  its  higher  bandwidth.  UWB  may 
offer  a  more  compelling  reason  to 
adopt  wireless  PANs  In  the  enterprise 
—  and  eclipse  Bluetooth  in  the  process. 

“Bluetooth  b  a  loser.”  Mathias  says. 

The  Bluetooth  Special  Interest  Group 
claims  that  the  industry  b  shipping 
2  million  chips  per  week,  but  “who 
uses  it?“  he  asks.  “With  UWB.  the  eco¬ 
nomic  potential  b  so  great  that  it’s 
hard  to  imagine  it  wcm't  move  for¬ 
ward."  04SPM 
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Ultrawideband  vs.  Bluetooth 
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Where  Ultrawideband  Fits 
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Taking  a  UWB  Test  Drive 


UWB  h  gWhig  anHriy  Mrigiica  int 
WInInllxnmSWMiCnIwforCiim- 
PUUr  Sdanct  It  Oil  Unimtiiy  of  Ihoii 

•IIMwu'OliMipilBnMngnolBigl- 

"Mrino.  11m  UUng.  aMdi  ofimd  Xml 
30.  mfl  hm  UWB  iman  IratnM  In 
<««1ngb|r*ignM.tai0HtwlMlllgrta- 
■wknocn.  ais  miHMir  Roir  CmuiM. 

UWB  anna  ami  Ingi  hmi  UWoMM 
LU.  in  Cnmliriilgt.  EntfaW.  mW  bn  and 
Id  UtnUlir  Km  loabnn  ol  dM  MadMn 
md  ibidnfits  who  WMT  dNin.  Spndal 
aoBwn  Mfl  pIniaiM  wch  bnftrfdurn 
localloolnlhniiibw. 

HHinlmnibrinifatmMnaonin- 
aotcb  pralocl  caM  eWik  kMi  Iwoh, 
bnn  An  NMbawl  SdniKt  FaundUion, 

•a  riaaign  a  ndddaown  apanUna  ajo- 
lam  M  nanaoa  laanitcaa  naad  bxnill- 
arainllHiibit. 

Canwhal  aaia  aaiwnl  Maaa  bo  aWH 


I  cations  of  UWB  hnabaanBoatad.0na 
xodd  hnnlvn  dminiiing  a  war  u  nwbn 
.  adocwnanIrnadaUtnhanauaarkasll 
I  Aaoadafnloeatianbullnawltanoypl' 
ad  whan  Aa  dnaaiMol  la  raad  atnawlHR. 

dmtiMranaddlaiorainMaAapar- 
dodar  biAAba  aubonalicalE.  gbAw  bbo 
acswaa  to  caitain  Mat  nr  aiMiGaAMa.  h 
tiwl  cast,  Um  Ubfanmn  Ag  otidd  bigtnr 
anautoffloticiaquancaalainliniaolbo- 
tiratinnt.  and  a  Mdao  cainara  crndri  ari- 
fy  tiwl  tiw  uaar  awnfine  Hm  tag  MM  bs- 
daadtiw  right  paraon. 

In  Aa  nMdhwl  ant,  Ann  m  Ml 


batr  b  tntht  noa  patianA  aftnl  Wl  A 
«McatAbc.Tiinpbalaapt.Bididlt- 
MMir.htadds.UWB'tuocaaaMgp- 
ptnd  on  *1iaa>  chtap  yu  nan  nwha  Iht 


24 


www.compuMfwortd-coni 


Form  Factor 

*  DEFINITION 

Form  factor  refers  to  the  overall  dimensions  and  compo¬ 
nent  layout  of  a  device  —  in  other  words,  its  physical 
size  and  packaging.  The  term  covers  technical  specifi¬ 
cations  and/or  general-purpose  descriptors  for  different 
hardware  components. 


•VmiMCIXIUY 

WHEN  we  refer  to 
the  size  of  a  com¬ 
puter  or  compo¬ 
nent.  we  might  be 
talking  about  its  capacity, 
speed  or  connectors.  Or  we 
could  be  talking  about  its  di¬ 
mensions  —  bow  much  physi¬ 
cal  space  it  occupies  on  the 
desktop,  inside  the  PC  box.  in 
a  server  rack  or  in  a  brieftase. 
We  apply  the  term  form  factor 

w  the  latter  interpre-  - 

tadon.  to  describe  size 
and  packaging. 

Like  much  comput¬ 
er  terminology,  jbm 

factor  began  as  techni-  _ 

cal  shorthand  but  later  was 
adopted  as  a  marketing  term 
as  well  Thus,  in  many  cases, 
form  factor  refers  U>  a  strict, 
technological  deHnition  while 
in  others  it  is  a  vague  and  non¬ 
standard  promodonal  term. 

Here,  we  offer  a  quick  run¬ 
down  of  common  form  factors 
fhi^U^ted  in  italics)  for  var¬ 
ious  types  of  products. 


Disk  Drives 

For  disk  storage,  form  factor  is 
pretty  much  synonymous  with 
the  diameter  of  the  disk  plat¬ 
ter.  Nowadays,  the  stand^d 
form  factor  for  optical  drives 
is  £25  in.  (in  a  1.75-in.-thick 
package  that  used  to  be  called 
half-hei^  but  is  now  the  stan¬ 
dard).  and  for  de^(^  hard 
drives  it's  ^  in.  (but  starting 
to  move  to  2.5 in.).  For  note¬ 
book  computers,  for  many 

-  years  the  standard 

form  factor  has  been  a 
2.5-ia  drive,  but  small 
notebooks  are  moving 
to  smaller  drives  — 

-  i.8  in..  1.0  in.  and  now 

even  0.85  in.  Drives  for  note¬ 
books  are  also  characterized 
by  their  thickness  or  height, 
usually  X7, 12.5  or  9mm. 

Flash  Memory/ 

Disk  Drives 

Memory  cards  used  in  note¬ 
book  computers,  digital  cam¬ 
eras.  handheld  devices,  music 
players  and  other  portable  de¬ 


vices  are  described  based  on 
their  capacity,  in  megabytes, 
and  their  coanguratiom  In  or¬ 
der  of  decreasing  physical  size, 
these  form  foctors  include 
PCMCIA  (also  PC  Card  and 
(CardBus):  Compact  Flash  Type 
fifand  the  thiimer  TVpeif: 
Memory  Stick  and  Memory 
Stick  Pro;  SmartMedia;  the 
physically  identical  MMC 
(Multimedia  Card)  and  SD  (Se¬ 
cure  Digital)  Card:  the  Mini- 
SD:  and  the  newest.  XD-Pic- 
ture  Card.  (To  keep  the  record 
straight,  most  of  these  form 
factors  are  also  used  for  I/O  or 
ocher  nonmemory  devices.) 

None  of  those  form  foctors. 
of  course,  includes  the  more 
recent  wave  of  “keychain" 
flash  memory  cards  that  plug 
directly  into  a  USB  port  Curi¬ 
ously.  no  single  name  or  form 
foctor  descriptor  has  emerged 
for  these  USB  devices. 

Desktop  PC  Endosures 

How  big  (and  what  shape?)  is 
the  box  that  holds  your  PC? 


FC  Cases 


t  n*  aarvir  (20.6  in.  higK  10  dme  bays)  2.  Supar  mMloiMr  (20  3  in. 
high  10  dnva  bays)S.  Sii^  nMtoanr  (16.re  in.  high,  nine  dnva  bays) 
4.  ifcdkiw  06.6  in.  h»^.  eight  dtwe  bays)  5.  Qaaktop  (525  la  hi^. 
sawi(lnvebays)B.tllrraiimnikilluiaa»  (or  mwi  desktop:  12.75  in.  high 
or  16  n.  high,  thrae  dma  bays)?.  McroXfX  cuba  (7.9  in. 
high,  four  drive  bays). 


Besides  referring  to  the  type 
of  motberboard(s)  a  case  is 
designed  to  accept,  we  also 
describe  the  case  as  a  tower 
(sometimes  fidl  tower,  with 
the  biggest  capacity  for  multi¬ 
ple  disk  drives),  midtower  or 
minitower  (same  basic  shape, 
but  shorter);  microtower 
(smaller  still,  usually  capable 
of  handlii^  only  a  single  flop¬ 
py  drive  and  optical  drive); 
the  superfUt  pizza  box:  and 
finally  the  oU-in-one  (combin¬ 
ing  monitor,  storage  and  elec¬ 
tronics  in  a  single  package). 

A  somewhat  confusing  term 
these  days  is  small  form  /actor 
(sometimes  abbreviated  SFF). 
which  usually  refers  to  a 
small,  near-cube-shaped  box 
that  may  require  proprietary 
components,  best  exempUfled 
by  Shuttle  Computer  Inc. 
computers  m  the  Aria  case 
from  Antec  Inc.  Small  form 
factor  is  also  used  to  describe 
the  smallest  enclosures  in  a 
given  maker’s  line,  regardless 
of  shape. 

Server  Racks 

Servers,  routers  and  many 
other  back'office  IT  devices 
are  designed  to  mount  in  steel 
racks  that  are  19  in.  wide. 

In  this  case,  form  factor  de¬ 
scribes  the  height  of  a  com¬ 
ponent  in  multiples  of  U  (or 
1.75  in.).  Thus  we  might  have 
a  lU  server,  a  2U  patch  panel 
or  a  6U  housing  for  server 
blades.  The  standard  rack  is 
42Uhigh. 

Portable  Computers 

For  notebooks,  we  talk  about 
desktop  replacement  (meaning 
big,  havy  and  relatively 
cheap),  multimedia  (bigger, 
heav^,  not  cheap),  thin  and 
light  (topping  out  at  about  1  in. 
thick  and  no  more  than  4  to 
5  lbs.),  and  uitraihm  or  u/tra- 
/ight  (under  4  lbs.,  sometimes 
under  3).  Then  there's  the 
Tkblet  PC.  Microsoft  Corp.'s 
spec  for  ink-enabled  touch¬ 
screen  computers  that  in¬ 
cludes  two  form  foctors:  the 
simpler  state  (no  attached  key- 
boa^  and  designed  to  be  at¬ 
tached  to  a  docking  station) 
and  the  heavier  but  more  ver¬ 
satile  comwrtihte.  with  an  inte¬ 
grated  keyboard. 

For  handheld  PCs  (HPC  be¬ 


ing  another  Microsoft  spec) 
and  PDAs,  no  clear  set  of  form 
factors  has  emerged,  aJtfaou^ 
some  smart  phones  with  PDA 
capability  (such  as  PalmOne 
Inc.’s  IVeo  600)  are  now  de¬ 
scribed  as  having  a  smalt  PDA 
form  ^for. 

CPUs 

For  microprocessors,  form 
factor  generally  refers  to  the 
physical  interfoce  between 
the  CPU  and  the  mother¬ 
board.  We  speak  of  generic 
form  factors  or  technologies, 
such  as  FC-PGA  (flip  chip  pin 
grid  array),  where  chips  are 
turned  upside  down  and  at¬ 
tached  using  a  matrix  of  sol¬ 
der  balls  instead  of  wires.  The 
layout  or  contact  mechanism 
might  be  further  character¬ 
ized  as  PPGA  (plastic  pin  grid 
array).  TCP  (tape  carrier 
package)  or  CPGA  (ceramic 
pin  grid  array). 

Another  type  of  CPU  form 
faaor  is  the  name  of  the  at¬ 
tachment  mechanisot.  such  as 
Socket  478  (the  numeral  refers 
to  the  number  of  contact 
points).  Slot  J  or  Slot  A. 

Memoty  Chips 

For  dynamic  RAM  chips,  the 
most  common  form  factor  is 
the  168-pin  dual  inline  memory 
module,  or  DIMM,  where 
RAM  chips  are  located  on 
both  sides  of  a  small  circuit 
board  that  plugs  into  a  desig¬ 
nated  socket  on  the  mother¬ 
board,  These  are  too  large 
for  many  notebook  comput¬ 
ers.  however,  which  use  a 
smaller  type  of  module  called 
SODIMM.  or  Small  Outline 
DIMM,  with  either  72  or  144 
pins.  048285 


Kay  is  a  (3omputerwoiid  con- 
rributing  writer  in  Worces»r, 
Moss.  You  can  contact  him  at 
russkay@charter.net. 
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S^^Zlnrdet  ’"k 
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Singing  the  TLS 
Protocoi  Blues 


Oepkiying  secure  e-mail  using  transport 
layw  security  turns  out  to  be  more  problem¬ 
atic  than  it  looks.  By  Roger  Foix 


This  WEEK  I'm  dealing  tocol,  however,  the  devil  is  in 
with  secure  e-mail,  and  the  details,  and  the  details  of 
in  particular  the  Trans-  TLS  have  been  bedeviling  me 
port  Layer  Security  for  quite  some  time  now.  One 
(TXS)  protocol  problem  is  that  TLS  secures 

The  financial  services  com*  only  the  link  between  the  two 
pany  for  which  Tm  consulting  e-mail  servers.  It  provides  no 
is  setting  up  secure  e-mail  protection  after  the  message 
links  with  several  customers  has  reached  the  destination 
to  protect  messages  contain-  server,  so  your  confidential 
Lng  sensitive  financial  data.  e-mails  are  still  unprotected 
The  traditional  approach  to  on  another  company’s  server. 

e-mail  security  is  to  - 1 -  My  client  is  sei- 

a  desktop  encryp-  '‘P  secure  links 

tion  product  that’s  uCvUHTY  customers,  so 

compliant  with  one  ^  luxury 

of  the  two  common  of  jusi  adding 

standards:  S/MIME  JOURNAL  O  caveats  to  our  coo* 
or  C^nPGP.  These  tracts  to  mitigate 

are  ideal  if  you  have  a  '  ’  that  risk.  But  several 

small  lech-sawy  user  base.  of  our  customers  arc  question- 
but  as  you  scale  up.  you  start  ing  how  they  will  know  that 
to  encounter  problems  around  their  messages  are  still  secure 
usability,  certificate  manage-  after  reaching  us.  None  of 
ment.  per-user  license  costs  them  has  found  a  good  answer 
and  so  on.  yet,  but  a  few  have  spent  a  lot 

j.  A  money  on  auditors  and  se- 

I  Ld  lUl  curity  reviews  to  convince 

My  employers  are  taking  a  dif-  themselves  of  our  security, 

ferent  approach:  ITiey’re  Then  there’s  the  issue  of 

sending  their  e-mail  using  digital  certificates:  Like  any 

TLS.  which  is  essentially  the  good  encryption  protocol  TLS 
latest  incarnation  of  the  Se-  uses  them  to  prove  the  identity 
cure  Sockets  Layer  protocol  of  the  sender  and  the  receiver 

You  can  use  TLS  to  open  se-  In  our  case,  each  e-mail  server 


SECUHTY 

MNUliEirS 

jounuia 


cure  channels  between  e-mail 
servers.  Once  two  e-mail 
servers  start  talking  TLS  to 
each  other,  they  can  then  pass 
all  their  normal  e-mail  traific 
over  that  secure  channel 
Votid!  Every  message  between 
those  two  companies  is  auto¬ 
matically  encrypted  and  de¬ 
crypted  without  any  effort  on 
the  part  of  the  end  user.  And 
because  TLS  support  is  built 
into  most  e-mail  gateway  soft- 
vrare,  there's  usually  no  extra 
cost  to  use  it  You  can  see  why 
my  client  likes  ft. 

As  with  any  encryption  pro¬ 


uses  a  digital  certificate  to  au¬ 
thenticate  itself  to  the  other 
e-mail  server.  ITm;  problem  b 
that  most  certificates  are  de- 


IfaTLScfient 
reconfigures 
Hse-malservere 
and  the  ns  Ink 
stops  walking, 
youre-mal 
wi  be  sent 
unenciyptod. 


signed  for  SSL  connections  on 
Web  servers,  which  make  up 
the  bulk  of  the  market.  Web 
servers  tend  to  use  only  server 
authentication:  When  you 
connect  to  the  server,  it  gives 
you  its  certificate  to  prove 
that  you've  come  to  the  right 
Web  server.  Few  servers  both¬ 
er  to  ask  clients  to  prove  their 
identity  by  presenting  their 
o«m  digital  certificate,  since 
most  users  have  never  both¬ 
ered  to  obtain  a  digital  certifi¬ 
cate.  So,  while  client  authenti¬ 
cation  is  an  option  in  SSL,  it's 
rarely  used. 

Not  so  with  TLS.  Client  au¬ 
thentication  is  an  important 
part  of  e-mail  security.  If 
someone's  sending  you  an 
e-mail  that  looks  like  it’s  from 
the  CEO  at  your  biggest  client, 
you  want  to  know  that  it  really 
is  coming  from  the  CEO,  not  a 
hacker  who  knoMrs  how  to 
forge  e-mail  addresses.  When 
you’re  buying  certificates  for 
your  new  TLS-enabled  e-mail 
servers,  check  that  your  cer¬ 
tificate  authority  provides  cer¬ 
tificates  that  support  client 
authentication.  Most  seem  not 
to,  at  least  not  by  default 

Tacking  Enforcement 

Then  we  hit  the  enforcement 
issue.  You  can  set  your  e-mail 
servers  to  one  of  two  modes: 
opportunistic  ’TLS,  where  the 
servers  try  to  negotiate  a  TLS 
connection  with  other  servers 
but  resort  to  unencrypted 
e-mail  if  they  can’t;  or  en¬ 
forced  TLS,  where  your  e-mail 
servers  use  only  *rLS  and 
refuse  to  talk  to  another  com¬ 
pany's  e-mail  servers  if  they 
don't  support  the  protocol 
Opportunistic  TLS  is  sim¬ 
pler  to  do.  but  if  a  client  sud¬ 
denly  reconfigures  Us  e-mail 
servers  (as  happened  to  us 
three  times  last  week)  and  the 
TLS  link  stops  working,  then 
all  of  your  confidential  e-mails 
will  be  sent  unencrypted  over 


the  Internet.  Oh,  and  unless 
you've  set  up  sonte  custom  re¬ 
porting.  you'll  never  know 
about  it. 

If  you  go  for  enforced  TLS. 
on  the  other  hand,  then  the 
same  changes  mean  that  e- 
mail  suddenly  stops  flowing  to 
and  from  your  client. 

After  resolving  those  prob¬ 
lems,  we  hit  on  e-mail  routing 
issues.  Routing  is  based  on  the 
use  of  mail  exchange  (MX) 
records,  which  specify  the 
e-maii  servers  that  should  be 
used  for  a  particular  domain. 
When  you  send  an  e-mail  to 
president@whitehouse.gov. 
your  server  looks  up  the 
MX  record  for  whitehouse.gov 
and  sends  your  message  to 
the  server  mailhub-wh2. 
whitebouse.gov.  TLS  uses  the 
same  mechanisms,  so  there 
should  be  no  problems. 

Then  we  came  across  a 
client  of  my  firm  who’s  still 
using  old  e-mail  servers  that 
don’t  support  TLS.  Instead, 
the  company  had  set  up  a  ded¬ 
icated.  unlisted  e-mail  server 
for  TLS  connections.  Another 
client  had  backup  servers  list¬ 
ed  in  its  MX  records  that  don’t 
support  TLS. 

In  those  cases,  you  have  to 
stop  using  MX  lookups  and 
start  specifying  which  servers 
to  use  for  which  domain.  That 
task  is  easy  enough,  but  it 
takes  time  to  manage.  Howev¬ 
er.  if  a  company  changes  its 
e-mail  systems,  it  also  changes 
its  MX  records,  but  you  won't 
i  notice  because  you’re  not  us¬ 
ing  MX  lookups  any  more.  In 
that  case,  e-m^  stops. 

Soon  rU  be  incorporating  an 
outsourced  antivirus  service 
into  the  TLS  architecture.  I 
know  a  fellow  consultant 
who's  working  on  exactly  that 
and  looking  quite  stressed. 
Given  what  Tve  been  through 
so  far,  1  think  Fd  better  go  buy 
him  a  beer  and  find  out 
I'm  letting  myself  in  for.  I 

WIUTIIOYIOIIMK? 

TbewMk'SjoumalswnttBnbyacealsecun- 
ty  manager. 'fteger  Fba'wtUM  name 
employar  have  been  dsgueed  for  obvious 
rMsons.  Contact  hm  at  roger.fou9 
hushmal.com.  or  )ofn  the  ducussion  m  out 
forum:  QuiddMieM 
To  hn)  a  complele  arefim  (rf  our 
Security  Manager's  Journals,  go  online  to 
O  carnputarwerUxam/eecfeunMl 
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Verbatim  RoUs  Out 
New  Storage  Media 

Corp-  fut  Intndiicad  a 
naw  aal  of  S.25Hn.  Util  DansKy 
Optical  mrilt-oiKa  and  raaa«M 
tnatla.  Hm  sloraoa  davtoaa  an 
daaignadlopnNldaniaUa.lang- 
tann  ainraga.  aocordhg  to  ttw 

Ohailotla,  N.C.Hiaaad  conpany. 

MaMkn-taoeB.dualnldad 
UOO  madb,  aiMcIi  auppoit  UOO 
drim  and  optical  jidHiiaioB  Irani 
HaarialHtaclianlCoLandnn- 
moo  Coip..  «•  ba  aoiMila  IMo 
nninlhitartingalMO. 

New  IM,  E-mail 
Manag«nent  Tools 

[nrs*nalKlcahc.addadlhaaliil- 
•y  la  log  and  atcMyn  InatMl  mao- 
aagaa  In  in  Coniral  caiabo- 
ndon  managamaM  appfcallon. 
TbaWalaaloy.lhoa  baiadtuiii- 
pany  taU  II  alaa  addad  braadar 
a-mal  ImiAig-aiialyiia  leek  la 
ill  Eniat  ConM  praducL  1)w 

updalad  appfc  aliaiia.  addeh  an 

aaiMda  tar  Mcraaoll  Eictana 
and  m  labia  coMionllon 
pndueb,  an  analaMa  naw  and 
alaitaH2S,Oao. 

IT  Monitoring 
Software  Debuts 

Mha  Inc.  annoiaaiad  Aa  a>^ 
aMby  ol  IMoMy.  Dn  aollMBa 
niaaaiaaairaanipalanliavari- 
ancadbyuaanalapgieatlona 
anand  tta  dock.  laMng  nola  Id 
IT  inkaabicbaa,  iMaaiki  aid 
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Web  Tools  Project 
Announced 

Tin  Edpaa  Fraadabon  A  Una- 
kibn,CaK.andAaOt|octWWi 
conaaiAan  ta  Sakd  hadar  Cadaa. 


PAUL  A.  STRASSMANN 

Depend  on 
Microsoft? 


WE  ARE  ALL  dependent  on  Microsoft, 
One  way  of  demonstrating  that  is  to 
imagine  a  devious  attack  in  which 
one  of  the  company’s  frequent  up¬ 
dates  was  rigged  to  destroy  Micro¬ 
soft  software  everywhere.  The  information  economy 
would  coUapse.  Millions  of  workers  would  be  instantly 
depnved  of  their  capacity  to  function.  The  economic 

daina0«>  wrauM  (ar  _  _  ... 
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damage  would  far  surpass  — 
the  stock  maiicet  vaiuatkm  of 
Microsoft  shares. 

Early  in  July.  CEO  Steve 
Ballmer  sent  out  a  memo 
to  each  of  Microsoft’s  57,000 
employees  stating  that  the 
company  will  annual 
costs  by  $1  billirm  following 
a  sharp  rise  in  ^>ending  over 
the  past  three  years.  'Those 
of  us  have  bought 
matioo  technologies  from 
RCA,  GE,  Honeywell  or 
Amdahl  are  rather  sensitive 
about  such  announcements. 

After  serving  as  Xerox’s  CIO 
through  the  ups  and  downs 
of  that  stellar  ftnn.  I  am  particularly 
touchy  about  them.  Are  they  harbingers 
of  decline,  or  are  they  reassertions  of 
vigor? 

One  way  to  judge  a  company’s  viabili¬ 
ty  is  to  check  out  tretbds.  From  I95t9. 
when  Microsoft’s  price  per  share 
peaked,  through  2003,  when  its  latest  fi- 
Mocial  report  was  published,  several  of 
Microsoft’s  costs  grew  faster  than  its 
revenue:  Overhead  costs  grew  by  15%, 
the  cost  of  goods  by  34%  and  employ- 
nient  by  12%.  Measure,  growth  in  prof¬ 
its  was  37%  lower  than  revenue  growth. 
Actually,  that  in  profits  is  worse  than 
it  appears  because  15%  of  the  revenue 
was  from  investment  nupome  and  not 
from  sales  of  software.  The  numbers 
confirm  that  Ballmer  was  right  to  insti¬ 
tute  massive  cost  reductiems. 

There  is  another  way  to  check  Micro¬ 
soft's  performance.  'The  Economic  \^ue 
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Added  reflects  the  enor¬ 
mous  accumulation  of  ri»^h 
chat  belongs  to  shareholders 
but  awaits  profitable  invest¬ 
ment  From  the  sharehold¬ 
ers’  standpoint  the  EVA  is 
equal  to  profit  minus  pay¬ 
ment  for  shareholder  equity 
attfae  shareholder’s  valua¬ 
tion  of  the  worth  of  invest¬ 
ments  in  Microsoft.  If  the 
EVA  is  negative  while  there 
is  ample  cash,  it  suggests 
that  management  has 
stopped  Innovating.  M^U, 
the  EVA  numbers  (in  mil¬ 
lions  of  dollars)  tell  that  sto¬ 
ry:  It  was  S1.225  in  1999,  - 
Sl,788  in  2000.  -$2,794  in  2001.  -$176  in 
2002  and  -$998  in  2003.  Altogether,  these 
indicators  don’t  tell  a  pretty  story. 

As  a  remedy.  Microsoft  has  just  decid¬ 
ed  to  unload  most  of  its  cash  as  a  way  of  | 
improving  its  EVA.  That’s  a  sure  sign 
that  the  company  is  unable  to  find  suffi¬ 
ciently  attractive  opportunities  to  create 
added  value  for  its  customers. 

We  shouldn't  be  pleased  with  this 
analysis.  Microsoft  has  been  a  leader  in 
asserting  the  U,S.’s  global  primacy  in  IT. 
Microsoft  has  provided  the  de  facto 
standards  that  have  made  it  possible  for 
a  significant  share  of  hardware  and  soft¬ 
ware  to  become  interoperable. 

If  Microsoft  wobbles  (as  IBM  did  in 
the  eariy  1980$),  we  will  aU  incur  heavy 
costs  in  migrating  to  other  vendors. 

The  cost  of  replacing  Microsoft-embed¬ 
ded  systems  will  rise  as  the  company 
tries  —  by  every  legally  permissible 


j  means  —  to  reinforce  the  dependency- 

on  its  “TDonoeulture"  (see  (^ukkiink 
a4830>. 

What  to  do?  Tm  not  ready  to  give  up 
Word  and  Excel  I  would  struggle  to 
Ainction  as  an  author  and  researcher  if  I 
did.  However,  the  steady  stream  of  secu¬ 
rity  and  program  updates  upsets  me  J 
have  nude  53  updates  for  the  Windows 
XP  operating  system  in  less  than  a  year. 
To  that  I  must  add  patches  for  Internet 
Explorer  (five  in  the  past  60  days)  and 
several  for  Word.  Every  time  I  make  any 
change,  my  Windows  registry  and  pro¬ 
gram-integrity  checks  show  errors  that 
require  roe  to  rerun  diagnostic  routines 
and  take  elaborate  security  and  backup 
precautions.  I  can  only  imagtoe  what  the 
systems  operators  at  big  organizations 
must  suffer  making  patches  to  Exchange 
servers  and  other  Microsoft  software. 

(^mfocius  said,  “Do  not  enter  a  bouse 
if  you  do  not  know  how  to  exit"  That’s 
good  advice  for  anyone  who  is  tempted 
to  install  systems  from  which  it  would 

be  costly  to  migrate.  In  the  short  run, 

continuing  with  an  aU-Microsoft  envi¬ 
ronment  will  always  be  the  most  attrac¬ 
tive  option.  Nevertheless,  users  should 
avoid  using  software  components  that 
are  so  tightly  coupled  that  any  future  mi¬ 
gration  could  require  wrecking  much  of 
the  systems  architecture.  Explore  all  op¬ 
tions  to  avoid  the  monoculture  perils. 

I  have  been  successfully  using  a  ntm- 
I  Microsoft  e-mail  package  for 

I  and  I  have  avoided  much  grief  because 

intrudets  couldn’t  readily  find  my  ad¬ 
dress  book.  I  have  just  switched  happily 
from  Explorer  to  the  perfectly  ftinctioDal 
Mozilla  browser.  That  is  just  one  easy 
way  to  preserve  diversity  while  minimiz¬ 
ing  risk.  When  you  re-examine  your  ar¬ 
chitecture  policies,  you  mi^t  want  to 
add  a  diversity  advocate  to  your  to 
examine  wdui  it  would  cost  you  to  mi¬ 
grate  from  Microsoft  in  you  must 
dosa  OkMOk 
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1.  List  of  new  leads  e-maHed  pre-takeoff. 

2.  Prototype  specs  updated  securely. 

3.  New  specs  modified  in  showroorn. 

4.  Modified  specs  accessed  via  PDA. 

5.  ftoposato  sent  to  nmr  leads  pre-deadline. 


MIDDLEWARE  IS  IBM  SOFTWARE.  Collaborative 
software  from  Lotus  that  creates  one  unified  platform 
between  employees,  partners,  customers  and  vendors. 
Building  off  of  existing  tools,  it’s  flexible  and  dynamic. 
It’s  software  that  can  increase  productivity  by  enabling 
on  demand  business.  On  virtually  any  kind  of  device. 
Everywhere  around  the  globe.  Everywhere  in  between. 
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MAHAGEMENT 


Career  Watch 

How  to  attract  and  retain 
women  in  IT;  where  and 
where  not  to  recruit  top  tal¬ 
ent;  and  when  CIOs  talk,  do 
CFOs  listen?  Pige  33 


Think  Tank 

Why  call  centers  need  to  be  prepared 
for  the  camera-phone  generation;  ups 
and  downs  in  IT  services  spending; 
and  how  the  IT  economy  is  “stuck 
in  first  gear.”  Pagt  32 


At  a  national  sales  meeting,  the 
president  of  Reliant  Pharmaceuti¬ 
cals  Inc.  rose  to  ask  if  there  were 
any  questions.  “Throw  anything  at 
me,"  he  said  to  the  salespeople  as¬ 
sembled,  Someone  immediately  asked,  “When 
are  we  getting  automated?" 

“Never,”  the  president  answered.  “I  want  you 
out  selling  our  products  to  physicians,  not  play¬ 
ing  with  computers.” 

Everyone  in  the  room  cheered. 

“They  didn't  want  sales  force  automation,” 
explains  Reliant’s  CIO,  Ron  Calderone,  because 
they  didn’i  watit  to  have  to  carry  a  laptop  or  a 
PDA  or  some  other  handheld  data-<ntry  device 
that  such  systems  typically  require. 

Nevertheless,  Liberty  Comer.  N.J.-based  R^ 
liant  n^ed  a  system  to  keep  track  of  the  activi¬ 
ties  of  its  growing  sales  force.  Although  there 


I  were  many  commercial  packages  available,  user 
resistance  led  the  company  to  develop  its  own 

I  sales  force  automation,  or  SFA,  system,  one  that 

eliminated  the  data  entry  device  in  &vor  of  sim¬ 
ple  telephone  input  to  a  speech-recognition  front 
end.  “Oddly  enough,  they  didn’t  view  that  as 
SFA,"  Calderone  says. 

Accommodating  the  ^jecial  needs  of  users  is 

lust  one  reason  why  companies  continue  to  de- 
velop  their  o»m  applications.  IT  shops  are  buck¬ 
ing  the  trend  toward  ofif-the-shelf  applications 
Md  are  opting  to  use  custom-developed  systems 
m  the  following  situations: 

■A  package  foils  short  in  one  or  two  crucial  re¬ 
spects  and  is  bloated  with  unneeded  features. 

■  Companies  can  develop  their  own  system 
more  cheaply,  especially  when  they  have  deep 
subject-matter  expertise. 

■An  application  is  of  strategic  importairce,  and 


■  ■  despitethe 

■  ■  _  ■  ■  PROUFERATION 

1 1  OFGOODOFF-THE- 
r  ^11  SHELF  SOFTWARE. 

■  m  ■  ll  ■  SOME  SHOPS  STILL 

I  prefer  TOBUILD 

■  I  I  itthemselves. 

^  .  HERE^WHY. 

M  BYGARYH.ANTHES 
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OPINION 

Questions  Trump  Answers 

IT  is  full  of  answer  people,  but  Paul  Glen 
says  good  answers  can  get  you  only  so  frr. 
At  some  point  you  need  to  start  coming 
up  with  great  questions.  Pme  34 
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ih«  company  wants  to  control  every  aspect  of  it 

■  The  vendor  is  too  slow  or  is  unwilling  to  adapt 
its  package  to  changing  user  needs. 

■  The  package  doesn't  integrate  well  with  erisring 
systems  or  with  the  company's  IT  infrastructure. 

■  Support  and  maintenance  costs  arc  too  high. 

Simple  and  Easy 

It  wasn't  user  considerations  alone  that  drove  Re¬ 
liant’s  roU-your-own  strategy,  Calderone  says.  He  es¬ 
timates  that  a  commercial  SFA  package  would  have 
cost  the  company  S4  million  to  S6  millioo  for  hard¬ 
ware.  softwa^  customization,  help  desk,  telecom¬ 
munications  and  training.  “I  have  eliminated  a  num¬ 
ber  of  these  costs."  he  says.  "For  example,  1  have  no 
need  for  a  help  desk  because  the  system  is  so  easy 
and  simple  —  it's  really  just  people  answering  ques¬ 
tions  over  the  phone."  He  says  his  SFA  system  cost 
less  than  of  the  amount  be  would  have  spent  on 
a  full  commercial  package,  albeit  with  fewer  features. 

Cardinal  Health  Inc.  in  Dublin,  Ohio,  also  devel¬ 
oped  its  own  SFA  tools  —  Web-based  applications 
wrinen  in  Visual  Basic  Because  the  company  bad  a 
long  history  of  working  with  these  kinds  of  tools,  K 
knew  exactly  what  h  wanted  and  saw  in-house  devel¬ 
opment  as  low-risk  and  low-cost.  In  addition,  says 
Rich  Gins,  CIO  in  Medical  Products  and  Services, 
ongoing  maintenance  and  support  costs  for  a  com¬ 
mercial  product  would  have  been  far  greater. 

Explams  Gius.  "Our  homegrown  tool  integrates  di¬ 
rectly  with  our  common  data  warehouse,  but  a  tool 
from  the  outside  would  have  required  a  replicatioo 
of  our  data  warehouse  into  their  own  tablets],  so  the 
integration  cost,  the  data  management  and  cleansing 
costs  would  have  been  significant" 

Ghts  says  that  the  build-vs.-buy  decision  should  be 
made  on  a  case-by-case  basis  but  that  more  compli¬ 
cated  applications  generally  should  be  purchased. 

"In  the  case  of  a  warehouse  management  system,  we 
would  prefer  to  build  on  the  collective  knowledge  of 
vendors  and  benefit  fo>m  their  software  that  reflects 
the  sum  of  all  their  other  customers’  needs,"  be  says. 
"And  rd  never  build  an  £RP  or  an  inventory  control 
system  or  an  order  fulfillment  system.  There's 
enough  compedtion  in  the  marketplace  now  that  Pd 
be  co^ortable  we  could  get  a  reasonable  prke." 

Sub>ective  evaluanon  criteria  should  be  supple¬ 
mented  with  more  rigorous  financial  analyses,  says 
Ghts.  Cardinal  evaluates  projects  based  on  a  number 
of  metrics,  including  return  on  investment  and  dis¬ 
counted  cash  flow  [Quicklink  46832).  "If  s  evolved 
into  more  of  an  economic  value-added  model  to  take 
into  account  the  weighted  cost  of  capital."  be  adds. 

KAI  Depends 

IT  execudves  generally  say  it  makes  little  sense  to 
develop  your  own  comittocUty.  or  utility,  system,  such 
as  payroll  or  general  ledger.  But  one  company's  utili- 
cy  can  be  another’s  strategic  asset.  Choice  Homes 
Inc.  a  S7S0  million  house-builder  in  Arlington.  Texas, 
chose  to  develop  its  own  suite  of  accounting  systems 
—  general  ledger,  accounts  payable  and  accounts  re¬ 
ceivable  —  even  though  many  mature  commercial 
chokes  are  available.  It  was  the  only  way  to  get  the 
extremely  flexible  reporting  necessary  fo  satisfy  the 
needs  of  autonomous,  remote  construction  man¬ 
agers.  says  CIO  Andrew  Brimberry. 


"I  actually  believe  that  our  general  ledger  does 
give  us  a  competitive  advantage,  because  we  can 
close  our  books  at  tbe  end  of  the  month  in  two  days 
and  at  tbe  end  of  tbe  year  in  four  days."  Brimberry 
says.  ‘So  we  know  very  quickly  what  money  we  are 
making  and  where  we  n^  to  adapt.” 

If  s  even  possible,  be  says,  to  look  at  profit  and  loss 
data  in  the  middle  of  the  month  at  various  levels,  all 
the  way  down  to  a  single  house  under  construction  — 
something  he  says  commercial  packages  can’t  match. 

Another  bit  of  conventional  wisdom  that  Brim¬ 
berry  rejects  is  the  notion  that  by  buying  software, 

IT  shops  can  leave  tbe  uiqileasani  support  and  main¬ 
tenance  chores  to  tbe  vendor.  He  says  he  spends 
more  time  fixing  his  payroU  and  human  resources 
systems  —  the  only  applications  he  hasn’t  developed 
internally  —  than  any  others.  Their  standards  of  de¬ 
velopment  aren’t  as  hi^  as  [outs].”  be  explains. 

Indeed,  for  some  companies,  tbe  ongoing  system 


costs  and  maintenance  issues  are  more  important 
than  tbe  initial  procurement  costs.  Chris  Hjelm,  chief 
technology  officer  at  Chicago-based  online  travel 
company  Orbitz  LLC.  developed  a  contract  manage¬ 
ment  system  in-house  for  tbe  bargain-basement  price 
of  $50,000,  and  he  says  that  supporting  it  requires 
just  a  quarter  of  one  person’s  time.  Because  the  sys¬ 
tem  is  simpler  than  comparable  commercial  pack¬ 
ages,  and  because  it's  better  integrated  with  other 
Orbitz  systems,  ifs  easier  to  maintain,  he  says. 

And.  Hjelm  says,  for  a  fast-changing  online  compa¬ 
ny  like  Orbitz,  software  vendors  are  just  too  slow. 
Their  timelines  tend  to  be  measured  in  six-month  to 
one-year  increments  at  best,  but  when  we  do  soft¬ 
ware  innovation  for  our  commercial  Web  site,  we  do 
it  in  two-week  increments." 

Competitive  Advantage 

Reinsurance  Group  of  America  Inc.  in  Chesterfield. 
Mo.,  developed  its  own  "enterprise  admimstration 
system"  that  manages  customer  data,  contracts  and 
policies,  calculates  premiums  and  performs  other 
back-office  functions.  Azam  Mirza.  vice  president  of 
global  software,  says  he  would  have  bad  to  buy  six  to 
eight  commercial  packages  to  do  all  of  those  things. 

But  an  even  more  important  consideration.  Mirza 
says,  was  that  by  rolling  its  own  $35  million  s^tem. 
Reinsurance  Group  was  able  to  include  international 
functions  such  as  currency  conversions  and  multiple 
languages.  That's  a  huge  competitive  advantage  for 
us,"  he  says.  "Everybody  in  the  reinsurance  industry 
is  trying  to  build  a  global  administration  system,  but 
they  are  two  to  flve  yean  behirul  us." 

Mirza  rejected  the  option  of  working  with  a  soft¬ 
ware  vendor  to  add  global  functions  to  an  existing 
product  "We  didn’t  want  to  end  up  with  a  commer¬ 
cial  package  that  others  could  buy  that  we  helped 
build.”  be  says.  "It  would  have  been  a  custom  s^tem 
for  us.  and  then  a  package  for  all  of  our  competitors." 

VbdonQuest  National  Ltd.,  which  provides  inter¬ 
vention  services  for  at-risk  youth  and  has  offices  in 
Pennsylvania  and  Arizona,  installed  an  ERP  package 
but  found  that  its  billing  module  couldn’t  ha^le  the 
complex  contracts  that  VisionC^est  had  with  its  cus¬ 
tomers.  So  it  hired  consultants  to  help  build  a  billing 
module  compatible  with  the  rest  of  the  ERP  package, 
says  Greg  Se^  CIO  and  vke  president  for  IT. 

"They  tried  to  force-fit  us  into  the  [package],  using 
a  variety  of  creative  approaches,  and  we  just  couldn't 
get  it  to  work.”  Se^  says.  Tbe  consultants  finally 
wrote  the  billing  system  from  scratch,  aiKl  contract 
programmers  devdoped  a  custom  child-tracking  sys¬ 
tem  as  well.  Both  efforts  proved  difficult  ’We  went 
throu^  two  sets  of  consultants  before  our  third  set 
finally  finished  tbe  child-tracking  system,"  Seyk  says. 

Seyk  offers  thb  advice  to  those  who  decide  to  de¬ 
velop  systems  using  contract  developers:  "Qualifying 
consultants  is  a  huge,  huge  task.  You  can  get  refer¬ 
ents  and  do  reasonable  due  diligence,  but  when  the 
rubber  meets  the  road,  tbe  consultants  may  not  have 
tbe  skills  to  do  the  custom  programming."  Cl  47884 
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IT  STSTEMS  BROW  LIKE  KUDZU. 

It's  “almost  an  inevitable  &ct  of  IT," 
says  Tony  lams,  an  analyst  at  DJt 
Brown  Associates  Inc.,  a  technoic^ 
research  firm  in  Port  Chester.  N.Y.  And 
once  built  or  bot^t.  systems  tend  to 
stay  around  by  default  “Administrators 
are  a^d  of  getting  rid  of  things,"  says 
Randall  Palm,  director  of  IT  at  IT  trade 
association  CompTlA.  “We've  all 
teamed  the  hard  way  not  to  unplug  a 
server  we  think  iai't  being  used" 

But  smart  CIOs  know  that 
growth  can  lead  to  duplication  and 
sluggish  performance,  while  prudent 
pruning  can  keep  an  IT  environment 
vital  and  re^nshre.  Here  are  12  I 

telltale  s^ns  that  it's  pruning  time:  I 


IWbw  sifstMi  Ws  VML  If  old  appU- 
catioDs  keep  you  from  re-engineer- 
ing  your  business  processes  to  keep 
ahead  of  the  competition,  it's  time  to 
prune,  says  David  Sommer,  vice  presi¬ 
dent  of  e-commerce  at  Oakbrook  Ter¬ 
race.  UL-based  CompTIA.  He  tells  of 
one  company  whose  wide  variety  of  I 


I  systems  made  it  too  inflexible  to  inter- 
’  face  with  its  customers  for  business- 
I  to-business  e-commerce.  ITjat  con¬ 
vinced  the  IT  group  to  start  snipping. 

2Tht  iKMonr  ha  mm  Mlw 

“The  application  may  be 
great,  but  the  technology  is  dy- 
says  Art  Data,  vice  president  of 
IT  at  International  Truck  and  Engine 
Corp.  in  WarrenvUle.  IlL  Sure,  every¬ 
one  loves  the  old  word  processor,  but 
I  if  it  runs  only  on  DOS.  move  on. 


nPRUDENT 

nuning 

Cutting  back  your  systems  can 
keep  your  IT  environment  vital  and 

rosponsnre.  By  Alan  S,  Horowitr 


OpoM.  “How  many  image  process¬ 
ing  systems  do  I  have?  Why  is 
that?"  asks  Data.  If  your  rampany  has 
lots  of  autonomous  business  units,  du¬ 
plication  is  jtistifiable,  but  generally, 
duplicate  systems  should  be  deleted. 


4<P|iiritioiu  am  undamisd.  Look 
for  applications  in  your  portfolio 
that  are  occupying  space  but  not 
being  used,  says  Byron  Millet,  an  ana¬ 
lyst  at  Forrester  Research  Inc.  in  Cam¬ 
bridge.  Mass.  Also.  ask.  “How  much  is 
it  being  used?"  says  Eric  Goldfarb,  CIO 
and  executive  vice  president  at  PRG- 
Schultz  International  Inc.,  a  recovery 
auditing  company  in  Atlanta.  You 
might  find  that  changes  in  business 
processes  have  made  some  functions 
or  applications  obsolete. 

—  UMrsMhrttMttwy  Mad  K. -Dust 

users,  but  verify.  Goldfarb  once 
woiked  at  a  company  that  gener¬ 
ated  L200  reports.  Asked  which  were 
really  needed,  users  vouched  for  virtu¬ 
ally  all  of  them.  So  Goldfarb  took  away 
atxess  to  all  the  reports  and  waited  for 
users  to  complain.  Mostly,  they  didnt. 
aiKl  he  trimmed  UOO  reports  to  100. 

sauT  opgrida.  "Systems  that 
are  too  complex  to  upgrade  gen- 
*  *  erally  fall  out  of  favor,"  says  lams. 

I  If  you  have  some  systems  you  can't  get 

up  to  speed,  pull  out  the  shears. 

used  to  try  to  keep  old  systems 
runnir^  for  as  long  as  possible, 
but  he  found  they  would  invariably  fail 
at  critical  times,  forcing  him  to  upgrade 
even  though  he  would  have  preferred  to 
replace  them.  Now  Pratt,  an  IT  managpr 
at  Coastal  IVansportatioo  Inc,  a  com¬ 
mon  canter  in  Seattle,  has  stopped  try¬ 
ing  to  keep  struggling  systems  alive.  He 

prunes  them  and  buys  something  new. 


the  components  are  no  longer  support¬ 
ed  by  the  vendors  who  produce  them.” 
notes  john  Montgomery,  chief  technol- 
ogy  officer  at  Embarcadero  Systems 
Cterp.  in  Oakland.  Calif,  which  pro¬ 
vides  software  for  seaports. 

JTha  syvtMi  is  MaBpMd.  If  the  old 

system  just  doesn’t  fit  with  re¬ 
engineered  business  processes, 
it’s  time  to  prune,  says  Sommer. 

III  **ik.  The  ongoing  costs  of  a 
■  W  “bargain"  system  can  be  more 
than  they’re  worth.  "Most  companies 
look  at  wdiat  [an  application]  cost  ini¬ 
tially,"  says  John  Pariunson,  chief  tech¬ 
nologist  for  the  Americas  region  of 
Capgeminl  a  consultii^  and  systems 
integration  firm.  "The  cost  of  owning 
should  be  based  on  the  cost  of  keeping 
[the  system]  running." 

i|K|  Thn  nBtn  is  krsrrigaii.  Have  a 
■  I  three-year  plan,  and  get  rid  of 
■  ■  the  systems  that  are  least  cost- 
effective  and  most  difficult  to  integrate 
into  that  plan,  says  CompTIA’s  Palm. 

O  addid  a  mm  lystMiL 

I  ^  Establish  a  strategy  that  re- 
"  quires  taking  away  a  system 
for  each  one  you  add.  says  Parkinson. 
“After  a  couple  of  cycles  of  this,  you 
can  really  start  attacking"  the 
growth,  he  says.  “ITreally  works." 
048003 

Horowitr  is  Qfmlmcv  business  and 

recftnofogy  writer  in  Soft  fake  Ci^. 

Conroct  him  at  alan@ahorowitz.com. 
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tarn.  "A  good  indication  that  it’s  I 
time  to  retire  a  system  is  when  I 


UuTu  L)’’.  . 

Here's  why  you  need  a  data  cleans¬ 
ing  effort.  On  a  typical  morning 
between  9  and  11  o’clock: 

•  firms  will  move 

-  businesses  wilt  change 

their  phone  numbers 
companies  will  change 
their  names 

businesses  will  shut  down 
firms  will  file  a  bankruptcy 
petition 

company  will  change  ownership 


Antivirus 


firewall 


Monitoiing 


Intrusion  detection 


Biometrics 
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The  IT  Economy 

■  IT  spendno  is 'stuck  in  fimt  gear.' 
accordng  to  a  (OfUfl  by  The  Gokknan 
Sachs  Group  Inc.  in  Nw  After 
months  of  steacfily  more  optimistic 
reports,  a  June  sunrey  of  KX)  CIOs 
shoufi  that  their  capital  spendnQ  fore¬ 
casts  tor  2004  hove  fidtened  out  at 
2.39b  growth.  The  analysis  note  that 
there's  a  widenino  gap  between  ttte 
CIOs' spendng  plans  «id  VM  Street's 
consensus  9.^  revenue  growth  lore* 
cast  tor  IT  vendore  -  a  sign  Ihd  Wan 
Street  may  be  too  optimistic  about  the 
techrecovery.Thetopspendingpriori- 
tyintheJunesiMywasaectfitysoft- 
were.  unchanged  from  the  April  survey. 
CIOs  seem  io  be 'content  with  laltat  is 
onendy  on  Mr  (Me.  rerninding  us 
that  there's  not  yat  a  new 'must  have' 
teehrwioqythalistWBningliJychar^ 
ing  the  lo  do’ isL*  lie  report  concludes. 


Camera  Phones 
Become  an  IT  Issue 


“Instead  of  trying  to  describe  an  obiect  us¬ 
ing  words,  consumers  will  send  snapshots," 
the  authors  say.  which  will  give  a  service 
agent  a  better  idea  of  the  customers  needs 
A  customer  can  send  a  picture  of  the  environ¬ 
ment  in  which  the  product  will  be  used,  such 
as  a  yard.  room,  office  or  workshop,  which 
can  help  the  service  agent  sell  Ihe  right  prod¬ 
ucts  A  senes  of  photos  (or  a  short  video) 
could  even  capture  how  a  customer  is  using 
or  assembling  a  product,  so  the  agent  could 
correct  or  tram  the  customer  on  the  proper 
procedure.  Consumers  could  also  use  cam¬ 
era  phones  to  document  damage  or  repairs. 

But  managing  this  influx  ol  images  will 
reguire  "a  substantial  redesign  of  customer 
service  processes  and  systems.'  the  re¬ 
searchers  predict.  -Mitch  Betts 


have  been  a  huge  suc¬ 
cess  -  IDC  estimates  that  more  than  600  mil¬ 
lion  will  be  muse  by  2007- because  people  ■ 
car  easily  send  and  receive  snapshots 
What  does  this  have  to  do  with  corporate 
IT”^  Plenty,  according  to  an  article  m  Accen¬ 
ture  Ltd.'s  online  tournal  Ouiloc*.  Pant  of 
Vieu  Researchers  Andrew  fano  and  Anatole 
Gershmanat  Accenture  Technology  Labs  say 
that  as  people  grovr  comfortaWe  using  cam¬ 
era  phones,  they'll  begin  to  use  them  to  inter¬ 
act  with  Dusmesses  So  customer  contact 
centers  will  need  to  be  able  to  hantSe  incom¬ 
ing  instant  photos 


Ups  and  Downs 


(Kiev  Act.  whicli  stiitcs:  "Whoever 
know  in^ly  alters,  destroys,  mutilates. 
eiTpeeal-s.  covers  up.  falsities  or  makes 
a  false  entry  in  any  record . , .  with  the 
intent  to  . . ,  obstruct  la  federal  investi¬ 
gation!  , . .  shall  bo  fined.  imprL«>ned 
nor  more  than  20  yrars.  or  both." 

Suddenly,  records  manajicment 
seems  important! 

fhis  book  is  a  practical  guide  —  full 
ol  ehecklists  and  sample  polieies  —  to 
‘help  keep  yi»ur  company  out  of  hot  wa¬ 
ter.  -And  that  seems  like  Munething  a 
chief  informatiiin  officer  ought  to  do. 

—  Mitch  Hctis 

Too  Many  Chiefs? 

Chief  financial  officers  are  fine.  So  are 
chief  legal  officers  and  chief  adminis¬ 
trative  ofTieers.  But  some  companies 
are  going  ti>o  far  by  adding  more  CXIH 
to  the  organizational  chart,  says  David 
Silverstein,  president  and  (>EO  of 
Breakthrough  Management  Croup  Inc. 
in  l.ongmom.  Colo.  He  draws  the  line 
.u  the  trend  toward  having  a  chief  risk 
officer  and  a  chief  ethics  officer.  Those 
roles  should  be  squarely  on  the  shoul¬ 
ders  of  the  CEO.  Silverstein  says,  be¬ 
cause  delegating  them  to  another  chief 


sends  bad  sjgn.nis  to  employees  and 
sharehiilders. 

What  about  the  CK)'  Silverstein  s;!\-s 
the  IT' chief  is  here  to  stay  and  will  be¬ 
come  even  more  important  as  the  CIO 
evolves  to  become  the  ’‘systems  arehi- 
teel  of  the  business"  and  the  “master  of 
information  flows."  O  48239 


The  most  useful  parts  of  recent  business 
and  IT  management  books 

Information  Nation;  Seven  Keys 
to  Information  Management  Compliance,  by 

^  - 1  Randolph  A.  Kahn 

tHfOfUlllATION  I  and  Barclay  T.  Blair 
4A11M.  20(14). 


I'm  not  sure  about 
the  appn>priaceness 

of 

I  ti""  Vufion.  but  this 
/  ix  an  eye-opening 
bo4»k  .ibitDt  (he  legal 
issues  of  information  and  e-nruil  man¬ 
agement.  Did  you  know  that  a  voice¬ 
mail  mc*svige  fr»>m  a  federal  regulator 
could  he  a  vital  ret-ord  that  should  be 
pri*served?  Did  you  know  that  an  in¬ 
stant  message  about  a  business  eon- 
tract  might  need  to  be  retained  for  le¬ 
gal  purpose's?  Before  your  eyes  gla/c 
over  at  the  word  /egu/.  consider  that  al- 
Ic-gations  of  records  destruction,  mis¬ 
management  and  falsification  have 
brought  down  huge  corporations  like 
Enron  and  Andersen.  And  (hat's  why 
w-c  have  Section  802  of  the  S.irbancs- 


Security  Plans 

fWiiMlnUihwifciiDl 


Send  them  m 


pifches  avumputerworld.com. 
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NUMBERS  WOBTH  NOTING 


Fwr  out  of  10  companies  expect  to  increase  tWino  between  now  antt  the 

endoltteiiear  actordmotoaJune 2004 soiveyol  104 menibercomp^^ 

by  the  National  Association  for  Business  Economics. 

Six  out  of  10  CEOs  say  their  companies  don't  account  tor  wolktorce  aOng  In  thee 
•“  ”"™"  !*“«»«  Management 

The  fastest-growing  segment  of  the  worWorce  isthe&I^ 

64-yeaf^  segment,  according  to  the  U.S.  Bureau  of  Labor  Statistics.  The  number  ol 
between  35  and  44  years  oW  is  dedining  by 

25-to-34-year-old  segment  of  woriceis  . 

at  8%  armualfy.  according  to  the  Bureau  Of  Ijbor  Statistics 


r 


'  ^  l  E  Executive  vtce 
president,  ooerations 

'  iWOAN'  Earth- 
Unk  Inc..  Atlanta 

wHtT  She  does 

^  _  Over  the  course  of 

11^  A  her  20-vear  career  in 
UQl^  IT.  Linda  Beck,  who 

^  started  out  as  a  com¬ 

puter  programmer  anti  now  holds  the 
lop-rankmg  IT  post  at  EarthLink.  has 
been  an  avid  rnentor  to  other  women  in 
rr  careers.  Women,  she  says,  make 
natural  and  standout  managers  m  tech¬ 
nology  organizations  because  of  their 
much-practiced  communication  and 
people  skills.  Prior  to  joining  EarthLink. 
Beck  managed  engineering  and  tech- 
notogy  organizations  at  Sybase  Inc.. 

GTE  Corp.  and  Amdahl  Corp. 


Statistics  show  that  wmnen  are  less  attracted 
than  men  to  IT  careers.  Why  is  that?  When 
choosing  a  mator  in  college,  a  lot  of  women  look 
lust  at  the  entry-level  positions  [available  after 
graduation].  They  don't  see  past  software  engt- 
neenng  and  coding  and  sitting  at  a  computer  all 
day  to  the  more  interesting  IT  rotes,  such  as  proj¬ 
ect  manager,  where  you  interact  with  people 

How  can  CIOs  and  fT  recruiters  attract  more 
women  to  IT  careers?  By  changing  the  nature  of 
entry-level  jobs  A  lot  of  companies  post  program- 


,  mer  and  nerwork  engineer  Do&tions  as  entry-ievei 

:  fobs  and  assume  that  all  managemeniopooftunT- 

i  ties  will  grow  oui  of  these  lObs  H  you  think  more 
I  creatively  about  how  you  put  together  career  paths, 

,  youcancomeopw'thdifferententrypoints.like 

associate  profect  manager  and  rotes  that 
;  are  more  appealing  lo  women  at  the-emry  level 

J  Are  you  saying  that  women  prefer  IT  roles 

that  involve  more  communication  and  inter¬ 
action?  That  was  certamiy  the  way  I  felt  i  started 
out  m  a  programming  role  where  1  wasn  i  inieract- 
ing  with  anyone  or  anything  but  a  computer  I 
didn'1  enjoy  that  I  liked  if  much  better  yyher  I 
moved  on  to  more  coordination-  and  irrtegraiion- 
oriented  rdes.  I  thmk  women  do  a  better  kjO  m  a 
lot  ol  the  technology  management  rotes  because 
those  roles  reouire  good  commumcalKirt  meoia- 
tion  and  facilitation  skills,  and  lots  of  women  do 
all  of  these  things  all  ol  their  lives  m  their  larf.iiies 

What’s  your  advice  to  women  who  are  tooh- 
ing  to  move  up  in  their  IT  careers?  Don't  nave 
realty  ngid  expectations  about  how  your  career 
path  should  progress  Migrate  toward  the  things 
you're  good  at  and  vokinieer  to  do  them  Ivoiun- 

leered  for  jobs  nobody  else  wanted  like  Integra 
tion  jobs,  and  I  moved  up  from  there  I  toonrf  ti 
pretty  easy  to  move  up  because  there  ts  such  a  : 
shortage  of  people  m  very  technical  positions 
who  want  to  manage  and  are  good  at  managing  ; 
There  s  also  a  confidence  thing  Women,  m  jrieit 
communication  style,  fend  not  to  take  credit  for 
things  In  IT  a  tot  of  times  you  re  the  only  woman  - 
*n  the  room  and  you  have  to  be  confidefTi  what 
you're  saying  and  not  be  mtimidaled  O  48230 
-MiaHirm- 


C:iOs  Lind  CFOs:  Qm  We  Tlilk? 


How  would  you  describe  the 
communication  between  your  CIO  and  or 
CTO  and  your  companv's  CFO? 

Pretty  good:  4t%  Good:  31% 


How  H’t'/f  does  vour 
CIO,  'CTO  sell  fechno/o^»y  protects 
fo/Fnanoiai  manu^ers.^ 

Fairly  well:  40%  VVell-  2 


Exec  Talent  Search 

H'huf  wi//  6i*  the  most  important 
attribute  needed  for  un  m-cutivc  f«i  be 
successful  oiHT  fht'  nfjrr  rTv-t*  wurs- 


Ability  to  work  with 
multiple  cultures 
and  marfiets;  44% 


Understandirvg  ol 
how  to  motivate 
people:  38% 


K  USED  IN  THE  ORIGINAL 
AFFECT  THE  QUALITY  OF 
3FORM  edition 


(JUlft 

Ini: 


mucii  uiiicl' 
Dfopx'  -.A  I'-, 


jcricnqf.,.' 
ttriii  jnrt  t 

nolctjv  O'gjnifjlions  jl  Svba^i-  li 
GTE  Coip  amt  Amdahl  Corp 


IN  THE  OfTlG' 
[  imE  ij'.lfiL'’’ 


mer  atxj  network  engineer  posibons  » 
jobs  and  assume  that  al  management  opportune 
ties  wi  grew  out  of  these  jobs.  If  you  think  mom 
creatively  about  how  you  pu  tog^  COTff  pafts. 
you  ctfi  rame  up  with  dilterent  eriby  points,  to 
assooate  project  manager,  and  other  roles  that 
are  more  appealing  to  women  at  the  entry  level. 

Art  you  aaylno  that  vnomen  prefer  n*  roles 
that  invoto  inert  cowrniwicaiien  Md  inter- 
artlon?  That  was  certainly  the  way  I  Wt.  I  started 
out  in  a  protpanvrwH}  role  where  I  wasril  interact¬ 
ing  with  tfiyone  or  anything  but  a  cornputer.  I 
didn1  enjoy  that.  I  tod  it  rnuch  better  when  f 
moved  on  to  nxire  coordnatw-  and  integration- 

oriented  roles.  I  think  wornen  do  a  job  in  a 
lot  of  the  technology  manageriient  roles  because 
those  roles  rerwre  good  comrnunic^.  medu- 
tion  and  faaktation  sMIs.  and  lots  of  women  do 
al  of  these  things  a*  of  thev  lives  in  thee  taritos. 

What's  yaw  advto  to  wmian  who  ve  bok- 

ino  to  mows  up  in  thalr  fT  earaars?  Don't  have 
realy  rigid  expectatioiis  about  how  your  cveer 
pato  shorM  progress.  Migrate  toward  the  things 
you’rego(xlatandvokeiteertodolhern.lvolijn- 
teeredforjohsnobodyebewonted.tointegfa- 
bon  jobs,  and  I  rnoved  up  from  there.  I  found  it 
pretty  easy  to  move  up  becftfie  there  is  such  a 
shortage  of  peopte  «  very  lecleiicat  positions 
who  want  to  manage  and  are  good  at  managnxi 

There's  also  a  confidence  thing.  Women,  n  thee 
cornnwiication  styte.  tend  not  to  Ito  credft  for 
hings.  In  IT.  a  lol  of  times  you're  the  only  woman 
in  the  room  and  you  have  to  be  confident  s)  whti 
you're  saying  ^  not  be  ntimdated.  O  48230 

-jUb/Cng 


SiMMif  I  liiiisii  swiiiwi  we  lees  ittaUeil 

thn  imn  to  rr  earaars.  Why  is  thri?  When 
choosing  a  major  in  colege.  a  lot  of  wornen  look 
fosi  at  to  eritry-levef  positions  [awtoble  after 
lltofoation].  They  don't  see  past  softwve  engi¬ 
neering  and  co(^  and  sitting  at  a  computer  al 
day  to  to  more  erteresting  IT  roles,  such  as  proj¬ 
ect  manager,  where  you  interact  with  people. 

Hew  can  CIOs  and  rr  recrutors  attract  more 

woman  to  IT  earsars?  By  changing  to  nature  of 
entry-level  jobs.  A  lot  of  companies  post  program¬ 


CIOs  and  CFOs:  Can  TMk?  I  Exec  Talent  Search 


What  will  be  the  most  important 
attribute  needed  for  an  executive  to  be 
successful  over  the  nextjfive  years? 

Abyy  to  gyh  with  Understanding 

howtomolim 

and  marfats:  444b  39 


How  would  you  describe  the 
communication  between  your  CIO  and/or 
CTO  and  your  company’s  CFO? 


How  well  does  your 
CIO/CTO  sell  technology  projects 
to  /iruincial  managers? 

Faii1ywai:40%  WMk: 


Pretty  good:  41% 


m 
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SL  John  Joins 
3Com  Board 

JUUC  ST.  JOMI  has  iolMd  scorn 
Corp.'s  board  of  dhactan.  She 
odl  alao  sor«  on  ttia  company's 
audd  and  finanea  commUas.  St 
John  is  eurrantty  encutiva  Sica 
praiidanf  and  CW  for  tfia  Entar 
prfia  Systoms  and  Opartfons 
dMaion  at  \MahinotofH>asad 
FanniB  Mae.  Ihfftoro.  Maas.- 
baaad  3Com  mahas  voioa  and 
data  natworMno  pnahjcts. 


CA  Names  Kern 
CK).  Senior  VP 

KEVW  KBM  hn  bwnnamal  M- 
tdor  vioa  pnaUant  and  CIO  at 
softMammakarComputarAaso- 
data  bdamalkinai  Inc.  In  tr 
landia.  N.V.  Kam  is  ra^wnsida 
hn  CA's  (dobai  fT.  indudhg  sys* 
tarns  and  appicadons.  data  can* 
tars,  bMd  ha^  daris  and 
daaktop  support  Ha  praviouafy 
aarvadtttdcapraaMamforman- 
agad  aarvicaa  daaign  and  dafemry 
atHawdalt  f*aclard  Co.  and  ba- 
fora  that  ana  CX>  lor  Compaq 
CofflpulBr  Corp.^  Europa,  bH^ 
East  and  Africa  organization. 


Rainmaker  Taps 
SchorktoLjaadrT 

lAMfV  W.  SCHOfM  baa  iobiad 
Rainmakar  Syatama  Inc.  aa  vtea 
pnwidwd  of  tadmoiogy.  Pravl- 
oudy,  Schorfc  waa  vlea  praaidant 
and  ganaral  mnnaoar  of  fT  at 
liwdGkMdlnc.andCIOall«alrl- 
com  Inc.  and  Rattonf  Softvrara 
Corp.  Scons  Valov.  CdH.-baaad 
Rainmahar  provMas  outsouread 
sales  and  marhatinQ  aarvicas. 


Vetrano  to  Head 
Cosi  nr  Operatkm 

JOE  VETRANO  «i  join  Coal  Inc., 
a  New  ^fork'^naad  raataurant 
chabi,  aa  tdca  proiMant  for  fT.  Ha 
tafl  be  raaponaUa  for  alpiing 
CoaTs  IT  infraskuctura  milfi  its 
^oarth  ptami  for  both  oorporala 
and  rastamt  sydams.  ftivl* 
oualy.  ha  aarvad  aa  CM)  d  S£. 
Johaaon  A  Son  Inc. 


PAUL  GLEN 


Questions 
Tmrnp  Answers 


NFORMATION  TECHNOLOGY  people  tend  to  be 
answer  people.  When  users,  managers,  family 
members  or  even  random  people  from  the  Inter¬ 
net  have  questions,  we’re  right  there  with  the  an¬ 
swers,  because  we’re  always  the  smart  people. 


One  of  the  first  things 
we  learn  in  school  is  that 
being  smart  means  having 
the  answers.  The  teacher 
asks  the  class  a  question, 
and  the  smart  kids  reach 
for  the  sky.  But  just  having 
a  hand  in  the  air  isn’t 
enough.  To  become  known 
as  the  smartest  of  the 
smart,  you've  got  to  get 
that  hand  up  l^ter  than 
anyone  else.  It’s  the  origi¬ 
nal  arms  race.  (We  all 
know  how  popular  this 
made  u&) 

And  that  lesson  gets  re¬ 
inforced  throughout  life. 

The  questions  keep  com¬ 
ing.  and  we  are  rewarded 
for  answering  correctly.  There  are 
quizzes,  exams,  word  problems,  stan¬ 
dardized  achievement  tests.  PSATs, 
SATs,  GMATs  and  j<A  interviews  — 
each  one  reinforcing  the  notion  that  be¬ 
ing  smart  means  answering  correctly. 

Eventually,  we  enter  the  workforce, 
and  when  the  boss  asks,  we  answer. 
Our  peers  query,  and  we  reply.  The 
better  our  responses,  the  better  our 
raises,  the  more  impressive  our  titles 
and  the  more  sincere  the  admiration 
of  our  peers. 

But  as  often  happens,  those  things 
that  we  do  to  get  ahead  eventually 
fail  to  serve  us  well.  What  makes  us 
successful  at  one  level  limits  our 
progress  at  the  next  So  it  is  with  ques¬ 
tions.  At  some  point,  just  answering 
them  is  insufficient  to  make  collective 
projects  successful  and  individual  ca¬ 
reers  soar.  This  happens  for  a  couple 
of  key  reasons. 


As  we  move  higher  in 
the  organization,  we  begin 
to  grapple  with  questions 
that  have  no  correct  an¬ 
swers.  Being  smart  isn’t 
enough.  It  becomes  more 
important  to  evaluate  the 
validity  of  competing  re¬ 
sponses  than  to  find  a  cor¬ 
rect  one. 

But  beyond  that,  it’s 
even  more  important  to 
find  the  right  questions 
than  it  is  to  find  the  best 
answers.  Great  answers  to 
unimportant  questions  are 
still  unimportant. 

Successful  groups  grap¬ 
ple  with  important  ques¬ 
tions.  not  trivial  ones.  IT 
projects  and  organizations  are  very 
sensitive  to  the  quality  of  the  ques¬ 
tions  that  are  asked.  If  the  questions 
you  examine  are  even  slightly  less  im¬ 
portant  than  the  ones  you  should  be 
considering,  your  results  may  be  dra¬ 
matically  poorer  than  you  might  ex¬ 
pect. 

Many  IT  projects  remind  me  of  one 
of  my  favorite  scenes  from  the  old 
Pink  Panther  movies  that  starred  Peter 
Sellers  as  the  bumbling  Inspector 
Clouseau.  At  one  point  in  77ie  Pink 
Panther  Strikes  Again,  Clouseau  sees  a 
small  d(^  and  aslu  the  neaihy  hotel 
clerk.  “Does  your  dog  bite?" 

“No,"  replies  the  clerk. 

Clouseau  bends  down  to  pet  the 
pooch  and  is  immediately  bitten  by  the 
snarling  mutt.  Clearly  upset,  he  turns 
to  the  cleric  and  exclaims.  “I  thought 
you  said  your  dc^  did  not  bite!” 

That  is  not  my  dog,"  the  clerk 


replies  dryly.  Accurate  responses 
to  the  wrong  questions  often  lead 
us  astray. 

Every  project  begins  with  a  scries  of 
unanswered  questions.  So  bow  do  you 
know  if  you're  doing  a  good  job  with 
yours?  Here  are  a  few  of  my  rules: 

i  Prioritize  your  questions.  Not 
every  question  requires  or  deserves  a 
response.  Ask  and  grapple  with  the 
most  important  ones  first.  Good  risk 
management  demands  that  you  handle 
the  most  threatening  things  first,  and 
fundamental  questions  are  usually 
more  important  than  nitpicky.  detailed 
ones. 

2.  Why  questions  should  precede 
what,  how,  who  and  when  questions.  If 
you  look  at  your  priority  list  of  open 
questions  and  most  of  the  top  ones 
start  with  words  other  than  why.  you 
may  be  starting  at  the  wrong  place. 
Never  assume  that  you  know  why  a 
project  is  important.  Way  too  many 
projects  deliver  great  technical  solu¬ 
tions  to  low-priority  problems  just  be¬ 
cause  someone  requested  it  and  no 
one  asked  why. 

3.  If  your  questions  come  with  mul¬ 
tiple-choice  answers,  ntake  sure  you 
have  included  a  complete  array  of 
choices.  One  of  the  most  powerful 
ways  to  control  a  conversation  and 
limit  creativity  is  to  pose  multiple- 
choice  questions  with  constrained  re¬ 
sponses.  When  we  see  a  menu,  we  nat¬ 
urally  assume  that  it  includes  all  possi¬ 
ble  choices.  Rarely  is  that  true. 

If  you  want  to  further  your  career 
and  make  your  organization  more  suc¬ 
cessful  start  thinking  more  about  ask¬ 
ing  good  questions  rather  than  offer¬ 
ing  great  answers.  Your  influence  will 
expand,  and  you  can  demonstrate 
something  more  important  than 
smarts.  You  can  display  wisdom. 
048052 
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IT  Careers:  Best  Companies  for  Blacks  in  Technology 


Hw  is  the  ftsf  in  a  ftw-parf  series  about  _  Marriott  along  with  other  companies 

organiiahons  chosen  hr  the  Black  Data  operating  globally  noted  the  diversity  that 

Processmg  Association's  Best  Companies  hr  erists  throughout  their  operations  -  numbers 

Blacks  in  Technology  Survey.  The  top-ranked  L  _ J  gj  countries  where  located,  number  of 

comp^  will  be  named  this  wee*  during  the  i  lartquaoes  beino  spoken  arKi  ethnicity 

8DPA  s  nafwW  amerrudn.  fT  Careen  win  /— - * - /— - ■ - r— - » - - - v  represented.  The  effort  involves  ensuring 

bX  DIvwrpIty  Diversity  Diversity  opponuni„fo,bted,«npioye«.bmai«,fo. 

-KxOk  _ ^ ^ ^  I.  all  amployees.  -Blaclcwell  looks  diverse.' 

.ortfeor,  aod  KMcgy  proles.  ^  Sllado«ll,  piesWent  and  ctilel 

Black  Data  Processing  Association  reports  that  there  are  300.000  African  Americans  in  .  operating  officer  at  Blackwell  Consulting. 

the  technology  profession.  Knowing  where  black  technology  professionals  are  Bladiwell  to  be  the  best  for  people  in  general, 

socceeding  and  «l>y  is  one  ol  the  BDfA's  lop  goat  A,  „sbc  ^  3  pl3£3  i^p,,  gp,  3^33,,  ^ 

Milt  Haynes,  loimer  BOPA  national  president  and  rfiaitman  ot  this  yeai's  awards  program,  90«l  «wdi  "We'ie  an  oeganrtation  where  you  can  prove  youiself  says  Mike 

says  the  organization  eramines  statistical  data  lot  hiring,  retention,  praiessional  and  Vlioodward,  vice  president  ol  human  resources. 

promotions  ^can-Ame,^  when  id^ng  the  top  A,p„3„  „g„3„  ,1^  ^  p,|„  ,,3  3^3 

romnani««  C»U<tMt  fnr  7nna  anrl  anfwVKVAH  rtiM  umoaS  at  RriPA'c  natinn^  rnmaiAntiAn  tars  -  .  ..  ,  ~ 


IZ^^t  I  ^  0^  P®' ««  <»9a"lk«iO"  is  the  horohe.  ol  AMcan  Amencatis  who  ace  In 

ledirtology  and  Sennees  (lonnedy  Household  Ihtemahonal),  Macnott  and  Merck.  g,„„g,  ,,  ,^3,  level,-  he  says  pointing  to  Shirley  Bridges,  the  senior  wee  president  lot 

In  its  second  year,  Haynes  said  the  survey  was  more  thorough  and  competitive  than  a  year  operatforts,  as  an  example. 


^  The  compames  taken  the  nme  l^ig  deep  and  proide  ttoroogh  A,  ^^,3,3  ot.  Robin  R.  Richmond,  assistant  vice  prosident  lo.  protection  technology,  says 

h^  IhemaiorcfMlIehgestemamHteanw  -buildihglhehumheroiAIncan  one  (H  the  most  important  IniluHives  undertaken  by  the  InsoroTin  being  a  Best  C^iSy 
Amencans  in  senior  management  tanks  and  soppliet  divereity.  is  to  wort  closely  with  its  BORA  chapter »  bring  technology  io  the  community  -  allowN.^ 

'Companies  now  have  a  bogey  -  they  know  where  the  bar  is.  We  have  people  in  place  to  rnembers  lo  develop  leadership  and  influence  skills  that  can  theo 

share  best  practices  with  companies  who  are  serious  about  making  improvements.*  ^  ^  careers.  Now.  the  company  is  looking  at  its  data  and  future  goals  - 

ifKluding  leadership  development  for  an  organization  that  is  comprised  of  60%  vromen 
The  Best  Compar>ies  share  some  cominon  approaches  to  aeating  an  environment  that  and  29%  minorities. 


'Companies  now  have  a  bogey  -  they  know  where  the  bar  is  We  have  people  in  place  to 
share  best  practices  with  companies  who  are  serious  about  making  improvements.* 


supports  professional  development  artd  growth.  Common  efforts  indude  affinity  groups  or 
networks  mentoring  artd  coaching,  and  continuous  learning  in  technology,  leadership  and 
business.  'Diversity  is  not  an  event*  says  George  Hall,  senior  vice  president  of  Information 
Resources  Human  Resources  at  MarrioiL  The  )R  group  headcount  has  dropped  by  14%  in 
the  tough  eomoeny  for  the  hospitality  industry:  at  the  same  time,  minonty  representation 
actually  increased  by  S%. 
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Dean,  Other  Dems  Sound 


BV  PAUL  ROBERTS  i 

BOSTON 

Former  Vermont  gov¬ 
ernor  and  onetime 
presidential  hopeful 
Howard  Dean  joined 
fellow  Democrats  at  their  par¬ 
ty’s  national  convention  here 
last  week  to  spotlight  the  need 
for  secure  voting  systems  that 
can  be  audited 
Dean  joined  Rep.  Rush  Holt 
(D-N.J.)  and  others  at  a  news 
conference  to  draw  attention 

!»«<>»  ■"anda.tag  a  paper  trail 
P^  s  2004  platform  thal  for  votes  cast  using  electronic 
calls  for  voting  systems  to  be  voting  machines. 

-awssible  independently  au-  “We  can  spend  millions  on 

toabfe  accurate  and  secure."  security:  surely  we  can  do  iust 
The  Democrats  took  tbe  occa-  as  much  to  safeguaid  the  cen- 
SKM  to  esconate  Republicans  iral  piece  of  reptesenlative 
in  Congi^  and  state  govern-  government  —  the  votioB 
ments  who  have  blocked  legis-  process.-  Holt  said. 


CoRfimiedyhMn  page  I 

PNC  S^rity 

tial  security  incidents,  reports 
from  the  US.  Secret  Service 
and  stale  law  enforcement 
agencies  and  live  video  feeds 
from  police  helicopters  and 
fixed  cameras  positioned 
around  the  city. 

Peter  Judge,  a  spokesman 
for  the  HOC  said  representa¬ 
tives  from  more  than  30  state 
and  local  agencies  have  been 
staffing  the  center  around  the 
dock  since  July  25.  “We're  able 
to  handle  and  manage  any 
DNC-relaied  emergencies  that 
cascade  beyond  downtown 
Boston."  said  Judge.  “We’re 
like  the  ‘411*  for  community 
emergency  managers." 

The  convention  marked  the 
first  time  that  the  EOC  includ¬ 
ed  a  representative  from  the 
Northeast  Disaster  Recovery 
Information  X-Change 
(NEDRIX).  a  private-sector 
organization  of  more  than 


1.000  security  and  disaster  re¬ 
covery  officials  from  business¬ 
es  of  all  sizes  throughout  the 
Boston  metropolitan  area. 

Companies  can  now  report 
disturbances  or  security 
threats  directly  to  the  EOC. 
which  can  immediately  dis¬ 
patch  the  appropriate  man¬ 
power  to  deal  with  the  situa¬ 
tion.  said  Chris  Glebus,  head 
of  the  public/jprivate  sector 
coordination  committee  of 
NEDRIX. 

"Preparing  for  the  conven¬ 
tion  has  almost  been  like 
preparing  for  a  mini-Y2k."  said 
Glebus.  "There’s  been  six 
months  of  heavy  preparation  I 

under  way  in  the  private  sec-  I 
tor.  and  we're  still  working  on 
data  protocols." 

NEDRIX  has  rolled  out  a 
Web-enabled  tool  called 
EnvoyProfiles  that  allows  cor¬ 
porate  security  executives  to 
send  and  receive  alerts  and 
collaborate  online,  rather  than 
having  to  rely  on  e-mail  And 
the  EOC  has  deployed  its  own 


Dean  said  he  initially  heard 
about  security  problems  with 
e-voting  machines  while  run¬ 
ning  for  the  Democratic  nomi¬ 
nation  and  dismissed  the  com¬ 
plaints  as  coming  from  “con¬ 
spiracy  whackos."  A  closer 
look  convinced  Dean  of  the 
seriousness  of  tbe  issues, 
which  be  said  threaten  to  un¬ 
dermine  democracy  in  the 
U.S.  if  left  unaddressed. 

“If  people  don’t  think  votes 
count,  the  first  thing  they'll  do 
is  stop  voting.  And  when  peo¬ 
ple  stop  voting,  cleaed  offi¬ 
cials  will  stop  caring  about 
ItbemJ."  he  said. 

In  perhaps  the  most  impas¬ 
sioned  presentation.  Rep. 

Marcy  Kaptur  (EK)bio)  railed 
against  resistance  within  | 
•  Ohio’s  Republican-dominated  ! 

I  Web-enabled  coromand-and- 
contro)  application  known  as 
Web-EOC  The  Web-EOC 
screen  last  week  displayed  re¬ 
ports  of  suspicious  packages 
and  rowdy  protesters. 

Johanna  Meyer,  the  center's 
geographic  information  sys¬ 
tem  manager,  look  reports 
streaming  in  through  the  Web- 
EOC  application  and  plotted 
event  locations  on  a  large- 


I  state  government  and  at  tbe 

federal  level  to  address  tbe  is¬ 
sue  of  voting  security.  She  said 
that  the  Bush  administration 
has  underfunded  or  ignored 
key  elements  of  the  Help 
Americans  Vote  Act  of  2002. 
which  SCI  aside  almost  S4  bil¬ 
lion  for  states  to  a'place  out¬ 
dated  voting  machines. 

In  addition,  many  state  elec¬ 
tions  officials  misunderstood 
the  provisions  of  that  Law  and 
rushed  to  buy  expensive  c-vot- 
ing  machines  pushed  by  ven¬ 
dors  like  Diebold  Inc.  before 
concerns  about  security  could 
be  addressed,  she  argu^. 

Underpressure 

Mercer  County.  N.J.,  Executive 
Brian  Hu^ies  seconded  many  I 
of  Kaptur’s  points,  saying  that 
his  county  faced  tremendous 
pressure  from  e-voting  vendor 
Sequoia  Voting  Systems  in 
Oakland,  Calif.,  to  purchase 
systems  by  the  end  of 2003. 

He  noted  that  the  county  still 
hasn’t  received  updates  to  tbe 


systems  to  produce  voter-veri¬ 
fiable  paper  receipts,  which 
the  county  agreed  to  pay  for 
ISequoia]  had  local  lobby¬ 
ists  working  for  them,  and 
they  were  offering  us  hun¬ 
dreds  of  tboujiands  of  dollars 
in  discounts  to  close  by  the 
end  of  2003.”  he  said. 

To  confront  vote-tallying 
problems.  Kaptur  said.  De¬ 
mocrats  in  Ohio  arc  preparing 
teams  of  legal  and  technology 
experts.  They  will  act  as  "cir¬ 
cuit  riders"  on  Election  Day  to 
monitor  voting  and  document 
reports  of  problems  with  vot¬ 
ing  or  electronic  votir^  ma¬ 
chines.  she  said.  O  46518 

Roberu  writes  for  the  IDG 
Newsservice. 
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agloks  wilti  rtjii  .-nouFitPd  vcf^nn:,  dispUy-nQ 
flala  on  ootenliai  .irtufty  ntcKleni},,  incliiO 
tng  vfdeo  leeCs  from  police  hehcoplers 


screen  map  display  powered 
by  a  3TB  image  ar^ve  that 
officials  have  been  building 
for  the  past  six  months.  Pro¬ 
testers  and  march  organizers 
who  gathered  on  the  streets  of 
Boston  were  unaware  that 
stale  police  helicopters  were 
feeding  live  digital  video  to 
the  EOC.  Their  actions,  and 
those  of  thou-sands  of  pedes¬ 
trians  and  highway  com¬ 
muters.  were  cap¬ 
tured  by  a  multitude 
of  fixed  cameras  that 
were  linked  to  the 
EOC  specifically  for 
convention  security 
operations. 

“Behind  every  data  ' 
layer  is  a  full  at¬ 
tribute  table  that  has 
everything  ftom  facil¬ 
ity  ID  number,  map 
coordinates  and  loca¬ 
tions  of  windows  and 
esdts  that  we  can  use 
to  assist  first  respon¬ 
ders,"  said  Meyer. 
Likewise,  all  of 


Boston’s  area  hospitals  have 
been  linked  into  the  EOC 
through  a  new  application  that 
got  its  first  real  test  during  the 
convention.  Twice  a  day.  hos¬ 
pitals  automatically  reported 
their  status  to  the  EOC 

And  according  to  Nancy 
Ridley,  the  Massachusetts  De¬ 
partment  of  Public  Health's 
liaison  to  the  EOC  "anything 
that  can  be  counted”  at  area 
hospitals  is  monitored. 

“This  has  been  very  hdpful 
in  our  ability  to  tell  in  real 
time  where  we  have  surge  ca¬ 
pacity  for  medical  emergen¬ 
cies,"  said  Ridley.  “We  can  tell 
bow  man)'  ventilators  a  facility 
has  or  how  much  Cipro  they 
have  in  stock  and  control  the 
flow  of  ambulances." 

EOC  officials  were  clearly 
pleased  with  the  performance 
of  tbe  systems.  “The  bebuty  of 
this."  said  David  Martincau. 
the  EOC's  deput)’  operations 
chief,  “is  that  it’s  usable  tech- 
nolt^y  —  not  technology  for 
its  o»7i  sake.”  O  46S23 
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www.computerwor1d.com 


■  "We  do  not  send  sensitive  data  in  e-mails. 
Instead,  we  save  data  in  restricted-access  fold¬ 
ers  on  an  internal  server  and  send  a  link  to  the 
file  in  the  e-mail  If  the  recipient  of  the  e-mail  is 
authorized  to  receive  sensitive  e-mails,  he  will 
already  have  the  credentials  required  to  access 
the  folder." 

■  "Some  companies  block  all  outbound  at¬ 
tachments  except  to  whitelisted  organizations. 

It  allows  e-mail  traffic,  just  not  attachments." 

■  “What  Contra  Costa  County  could  have 
done  was  monitor  ail  their  outgoing  mail  with  a 
program  that  scanned  for  keywords.  They 
could  have  then  embedded  keywords  in  their 
Word  and  Excel  documents  that  contained  per¬ 
sonal  information." 

■  "The  easiest  solution  may  be  to  tag  nonsen¬ 
sitive  e-mail  at  the  source  and  disallow  e-mail 
directed  outside  the  private  network  that  does 
not  carry  the  requisite  tag." 

■  “D  Never  send  sensitive  data  via  e-mail.  2) 
When  you  break  Rule  1.  encrypt  the  data.  Any 
other  system  is  broken  by  design,  is  it  not?” 

■  "What  if  Mr.  Whittington  established  a  pol¬ 
icy  and  iniirastructure  to  support  the  encryp¬ 
tion/decryption  in  electronic  communications? 
If  someone  sends  sensitive  data  that  is  not  en¬ 
crypted  and  it  gets  misdirected,  you  now  have  a 
policy  to  deal  with  the  event." 

■  “Financial  data  and  private  em¬ 
ployee  information  should  never  be 
sent  through  public  e-mail  without 
being  encrypted.  You  can  write  pro¬ 
cedures  to  automate  the  process  in 
Perl  on  both  Windows  and  Unix 
platforms,  and  you  can  probably  do 
it  in  VBScript  on  Windows.  The 
platform  isn’t  the  issue:  it’s  a  matter 
of  thinking  through  a  process  in¬ 
stead  of  clicking  through  it." 

■  "The  financial  information  and 
personal  information  should  have 
been  sent  as  an  attachment  that  was 


created  in  an  application  that  can  password- 
protect  the  information." 

■  “The  e-mail  address  architecture  should 
have  been  set  up  differently.  If  the  two-letter 
department  abbreviations  in  e-mail  addresses 
are  eliminated,  there  is  a  smaller  chance  of 
e-mail  being  sent  to  an  unintended  recipient." 

■  "If  there’s  a  technological  solution,  I'd  be 
surprised.  If  I  were  Whittington,  I’d  be  investi¬ 
gating  why  all  the  Swedish  e-mails  warning 
about  the  problem  were  ignored.  Looks  to  me 
like  a  cultural  issue:  lots  of  employees  thinking 
it’s  someone  else’s  problem.” 

■  "All  e-mails  sent  to  addresses  not  on  a 
whitelist  could  have  a  footer  appended  with  an 
c-mail  address  and/or  hyperlink  for  recipients 
to  use  if  the  e-mail  was  not  intended  for  them. 
We  should  make  it  easy  to  report  the  problem 
to  somebody  who  will  actually  attend  to  it.” 

■  "An  outsourced  account  that  1  work  with 
had  a  similar  problem.  We  were  sending  status 
reports  and  various  other  items  24/7,  and  we 
didn't  know  there  was  a  problem  until  we  got  a 
truckload  of  tickets  with  missing  reports,  ^es 
not  e-mailed,  etc.  It  turns  out  that  the  solution 
was  to  use  only  the  server  address  book  and  ig¬ 
nore  the  local  copy." 

■  “I  think  the  issue  is  the  political  environ¬ 
ment.  When  the  replies  arrived, 
either  the  employees  didn't  know 
who  to  notify  or  they  were  afiaid 
to  say  anythii^  or  someone  want¬ 
ed  power  and  control  over  IT.  Un¬ 
less  you  have  witnessed  it,  you  can¬ 
not  even  begin  to  comprehend  the 
level  of  turf  fighting  that  occurs  in 
large  governmental  agencies,  and 
it’s  not  just  with  IT." 

Thanks  to  you  all  for  your  ideas. 
They  may  not  solve  every  e-mall- 
leak  problem  —  but  they  give  us 
all  a  better  chance  of  keeping  them 
from  happening.  O  48488 
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E-mail  Answers 


FRANK  HAYES  ■  FRANKLY  SPEAKING 


I  ASKED,  YOU  ANSWERED.  A  few  weeks  ago,  I  wrote  about 
Tom  Whittington,  CIO  for  Caiifomia’s  Contra  Costa  County, 
where  a  giitch  in  an  e-mail  address  book  sent  hundreds  of 
messages  with  confidential  information  to  a  company  in  Swe¬ 
den  over  a  two-year  period  [QuickLink  48030],  I  asked  what 
he  —  and  the  rest  of  us  —  can  do  to  keep  something  like  that  from 
happening  again.  Readers  responded  with  far  too  many  good  ideas 
to  print  in  this  space.  Here’s  a  sampling: 
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Contktor  the  dots  connected.  The  end-to-end  voice  over  IP  solution  we  designed 
for  Crate  and  Barrel  features  a  unified  IP  messaging  platform  and  tt>e  most  advanced 
hardware  available.  The  new  system  wi  save  them  a  bunde  on  maintenance,  marw^ement 

and  wiring,  white  easing  the  cost  arKi  cornptexity  of  adding  features  or  ernployees.  And 
ift  already  improving  productivity,  heteing  over  400  associates  rnate  ml«^ 
feel  right  at  home.  To  find  out  more,  go  to  sbc.convdots.  GOMG  BEYOND  THE 


Oracle  Database  lOg 


$149  Per  User 


Standard  Edition  One 
One  CD 

17  minute  install 
Easy  to  use 


Rrst  class  database . . .  economy  price 


ORACLE 


oracle.com/standardedition 
or  call  1.800.633.0753 


Terms,  restrictions,  and  limitations  apply.  Standard  Edition  One  is  available  writh  Named  User  Plus  licensing  at  $149  per  user  with  a  minimum  of  five 
users  or  $4995  per  processor.  Ucensing  of  Orecte  Standard  Edition  One  is  permitted  only  on  servers  thet  have  a  maximum  capacity  of  2  CPUs 
per  server.  17  minute  instali  «  based  upon  testirtg  on  a  system  with  1x866MH2  Intel  CPU,  512  Mb  RAM  running  Red  Hat  Unux  2.1.  Actual 
install  brrwe  will  vary  and  are  dependent  on  system  configurations.  For  more  information,  visit  orsde.com/startdardedition 
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Online  Data  a  Gold 
Mine  for  Tenorists 

rr^  high-alert  respor^  i  looted  by  rr  and  security 
ON^eriocrfcSOOtpcxatesiteS  managers  who  ie^)Ooded 


AMO  UfCAO  OICAIMAN 

TTie  widegiread  avatlahiltiy 

sensitive  informacioo  cm 
corporate  Web  sites  appears 
to  have  been  largely  over¬ 


looted  by  IT  and  security 
managers  who  responded 
last  week  to  die  Dqiartment 
of  Homeland  Security's  warn¬ 
ing  of  a  heightened  ternwist 
threat  against  die  financial 
services  sector. 

Freely  available  on  the 
Web,  fte  example,  are  3-D 


models  of  die  exterior  uid 
limhed  pottioos  of  the  interi¬ 
or  of  the  Citigroi^  Inc.  head- 
quaitets  buildh^  in  Manhat¬ 
tan  —  one  of  the  shes  qiedfi- 
caliy  named  in  the  latest  ter¬ 
ror  advisory  issued  by  the 
DHS.  Likewise,  details  of  the 
Cidgroiq)  building’s  history 
structural  design  weaknesses, 
including  its  susceptibility  to 
toppling  over  in  hi^  wiz^ 
the  construction  (rf  its  central 
sigiport  a^umn  and  the  fire 
rating  of  the  materials  used  in 
the  budding,  are  readily  avail¬ 
able  on  the  Web. 

A  Citi^oup  spokeswoman 
declined  to  comment,  refer¬ 
ring  the  matter  to  the  build¬ 
ing  owner.  Boston  Proper- 
I  ties  Inc 

^  Similarty.  die  Wri>  site  of 
the  Oncago  Board  (tfltede 
includes  1^10- 
tografdisof 
chefedlity's 
underground 
parking  ga- 
OntineDota, 
pngeld 


‘Breakthrough’ 
VoIP  Project 
Breaks  Down 

8V  PATWICK  THIBOOCAU 

In  2001,  *nie  Dow 
Ca  unveiled  plans  to  create  a 
voice-over-IP  network  that 
would  also  provide  data  and 
video  capabilities.  In  a  chest- 
thumping  announcement. 

Dow  said  its  converged  net¬ 
work  would  be  a  “break¬ 
through  solution”  that  would 


be  “setting  the  standard  for 
other  Fortune  100  companies.” 

What  a  different  three 
years  can  mate.  Lead  contrac¬ 
tor  Electronic  Data  Systems 
Corp.  is  DOW  off  the  pn^ect, 
replaced  last  week  by  IBM, 
udiich  is  being  tasked  with 
building  what  Midland.  Mkh.- 
based  Dow  expected  to  be 
stfostamially  completed  by 

Dow.  page  16 
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I  Still  bu'OefiedO*  N  MCI  EOS  .i 
I  ln»rmo»«:  oic»l>‘ffr contract 
I  (Isleocon 


Corporate  America  Slow  to 
Adopt  Biometric  Technologies 


Growth  stalled  due  to 
cost,  interoperability 
and  reliability  issues 

BY  JAIKUMAA  VIJAVAN 

Biometric  autfaentkation  tech¬ 
nologies,  which  were  expect¬ 
ed  to  be  widely  adopted  fol¬ 


lowing  the  Sept  11  terrorist 
attacks,  are  still  struggling  to 
gain  broad  acceptance  in  cor¬ 
porate  America. 

Despite  the  mucb-touted 
benefits  of  technologies  sudi 
as  rmgerprint  voice,  iris  and 
fecial  recognition  systems,  the 
Biometrics,  p4ge  45 
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Beaten  down  by  budget  cuts.  IT  is  at 
risk  of  being  intimidated  into  an  order¬ 
taking  role.  But  Julia  King  shows  how 
CIOs  like  Michael  H.  Hugos(right)ofNet- 
\work  Services  Co.  overcarne  resistarice 
to  their  brilliant  but  unsolicited  ideas. 
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"We  got  to  market  six  months  faster,  and 
saw  14  percent  in  cost  savings  over  Linux, 
using  \MrKlows  Server  System?*" 

— Owen  Flynn,  Chief  Technology  Officer 
Equifax  Inc. 


Equifax,  a  leading  provider  of  consumer  and  commercial  credit  information,  chose 
Windows  Server  System  because  it  allowed  them  to  deliver  new  and  improved  services 
with  a  14  percent  savings  in  total  cost  of  ownership.  With  their  new  Windows-based 
supercomputer  cluster,  Equifax  is  able  to  manage  its  database  of  over  six  billion  data 
components  with  dramatic  increases  in  performance  and  efficiency.  To  get  the  full  case 
study,  other  case  studies,  or  third-party  findings,  visit  microsoft.com/getthefacts 


Microsoft* 

Windows 
Server  System 
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The  right  management  should  do  more  than  just  protect. 

It  should  also  enable. 

eTrust"  Security  Management  Software 

With  eTrust  security  management  software,  your  information  isn't  just  safeguarded  from  internal  and  external  threats. 
We  provide  authorized  customers,  partners,  and  employees  with  appropriate  access  that  can  help  your  business  grow. 
In  addition  to  securing  data,  eTrust  also  provides  a  single  view  of  your  security  environment,  so  you  can  make  real-time 
decisions  based  on  comprehensive  information.  If  you're  looking  for  ways  to  minimize  risk  while  maximizing  your 
potential,  or  to  get  a  white  paper,  go  to  ca.com/security. 
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Controffing  Content  Chaos 

In  thi  Tadmology  snetion:  IT  managers  like  Herman  Bau¬ 
mann  of  the  American  Hospital  Association  (left)  are 
feeling  increased  pressure  to  careftiUy’  track  and  consoli¬ 
date  their  organizations’  key  content,  and  they’re  looking 
to  content  management  software  for  help.  Pa^  25 


08.09.04 


Cigna  Goes  Virtual 

Abo  ki  the  Technology  saction:  A  simple  server  consolida¬ 
tion  project  has  grown  into  much  more,  as  rigna  moves 
aggressively  to  new  operating  systems.  64-bit  processors 
and  nascent  “virtualization"  software  from  IBM  and 
Microsoft,  says  CTO  Marcus  Shipley  (left).  23 


NEWS 


6  'niroe  HP  user  groups  will 
hold  their  own  conferences 
next  year  despite  the  vendor’s 
effort  to  consolidate. 

7  Linux  on  the  desktop  is  no 

longer  a  laughing  matter,  say 
some  attendees  of  the  Linux- 
World  Conference  &  Expa 

8  The  Pentagon  should  adopt 
the  private  sector’s  procure¬ 
ment  practices  for  its  business 
systems,  says  the  GAO. 

8  SSA  upgrados  Baan  apps 

and  converges  them  with  two 
other  ERP  lines. 

to  The  plans  to  expand  its 

use  of  computer-based  trading 
to  better  compete  against  all- 
electronic  rivals  like  Nasdaq. 

10  A  British  bug  hurrtar  says  he 
found  34  flaws  in  Oracle  soft¬ 
ware,  but  customers  defend 
the  vendor’s  security  record. 

12  QAA:  SCO's  CEO  claims  his 
company  will  win  its  Linux 
l^al  battle  —  and  the  hearts 
and  minds  of  IT  managers. 

12  Unbys  supports  Linux  on 

high-end  Intel-based  servers. 

14  EDS  hopes  to  rtvorsa  its  for¬ 
tunes  by  adopting  an  "agile 
enterprise**  business  strategy. 
But  it*s  stil)  saddled  with  the 
troubled  N/MCI  contract. 

14  IBM  and  Ibo  M^fo  Clinic  say 
they've  developed  a  way  to 
mine  information  from  a  data¬ 
base  of  patient  records  and 
use  it  to  fine-cune  treatment 
procedures. 


TECHN0L06Y 

2B  FifturoWitcft;  User  Inter- 
faces:  The  Next  Qoneratimi. 

User-interface  technologies 
may  one  day  enable  a  wider 
range  of  human-computer 
interaction  than  is  possible 
with  mice  and  keyboards. 

30  Security  Manager's  Joivnat: 
Merger  Interrupts  $arb-0x 
ProM.  An  acquisition 
prompts  a  last-minute  securi¬ 
ty  audit  but  fails  to  derail 
Sarbanes-Oxley  compliance 
efforts  at  Mathias  Thurman's 
company. 

HmSEyENT 

33  Show  Some  Initiative!  Beaten 
down  by  years  of  cost-cutting 
and  dismal  business/TT  align¬ 
ment.  IT  is  at  risk  of  being  in¬ 
timidated  into  an  order-taking 
role.  But  companies  need  IT 
to  take  the  ie^.  Learn  how. 

35  IT  Mmlon  Utlml  Warn  to 
build  better  systems?  Former 
IT  manager  Dick  Lefkon  says 
the  key  is  to  really  listen  to 
what  users  have  to  say. 

36  Q6A:  Securing  the  Corpora¬ 
tion.  Four  CSOs  discuss  Inter¬ 
net  vulnerabilities  and  back 
doors  that  can  be  created 
through  outsourced  applica¬ 
tion  development,  among  oth¬ 
er  topics. 

37  Caroor  Watch.  Navigating  the 
move  from  a  purely  technical 
job  to  the  business  side  of  the 
organization;  why  fewer  stu¬ 
dents  are  studying  computer 
science;  and  best  and 
worst  places  to  recruit  CIOs. 
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18  Maryfran  Johnson  says  that 
the  "buy  vs.  build"  debate  may 
last  forever,  but  "simple  and 
inexpensive"  are  the  magic 
words  associated  with  the 
best  in-house  application 
projects. 

18  Michaet  H.  Hugos  describes 
six  skills  that  are  essential  for 
successful  project  leadership. 
Among  other  thii^  be  says, 
you  need  to  be  decisive,  know 
how  to  communicate  and  act 
with  energy  and  focus. 

19  Thornton  A.  May  has  found 
that  n*  leaders  don’t  know 
much  about  telecom.  It's  time 
for  them  to  do  their  home¬ 
work.  he  says. 

31  Daniel  J.  Woltznor  is  touting 
the  transparency  revolution  in 
the  enterprise.  As  we  collect 
ever  more  information,  it’s  be¬ 
coming  easier  to  just  keep  it 
all  than  to  figure  out  what  to 
delete. 

38  Bart  Porkins  laments  that 
vendor  consolidation  has 
made  objective  advice  on  IT 
strategy  a  rarity.  But  be  has 
tips  on  bow  you  can  still  get  it 

46  Frankly  Speaking;  Frank 
Hayn  tfai^  we  all  should 
party  like  it’s  1969  as  the 
Arpaoet/Internet  turns  35. 
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So  Much  Infcnraiion, 
SoLitdeRelewince 

WEB  SITE  MAMSeUBIT:  Euly  efforts  mighi 
have  come  short  but  effective  Web  site 
perstmalization  implementations  are  finally 
starting  to  bear  ftuit  says  ChokeStream’s 
Steve  Johnson.  O  QukMM 46464 

MakingLomonade 

FromaiaamoflGLBinons 

IT  MAIIA6EMENT:  Project  Bryan  K. 

Beveriy  assesses  a  team  of  16  misfits  and 

tries  to  come  up  with  the  best  way  to  utilize 
each  one  —  even  Bad  Luck  Bob  and  Incom¬ 
petent  Ernie  ^  to  get  the  jc4i  done. 

CIQMgUMi 48466 

Conirol  Access  to  Vbw  Natanth 

SECUMTY:  Steve  Gml.  CEO  alThlsnd 
Network  Technologies,  provides  five  t^ 
for  enforcing  access  control  and  improvix^ 
security  around  critica]  assets. 

OOufeMM  47271 

Planning  a  Oepartmantai  SAN 

ST0RA6E:  Emulex's  Mike  k»b^ 

some  oftbe  options  available  for  expanding 

storage  capacity.  O  QWcUMi 46460 

Googingfcr  Security  Holes 

SECURITY;  Malicious  hacken  can  use  search 
engines  tt>  parse  through  a  Web  site’s  source 
code  and  find  openings  that  are  vulnetable  to 
attack.  0QMM464M 
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hiiiwiiii:ii  HP  User  Groups  Forge 
Ahead  With  Conferences 
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^  Stnrica  Pack  2  lo  manulictw* 
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Will  hold  their  own  events  next  year 
despite  vendor’s  effort  to  consolidate 


IRS  to  Cut  IT  Staff 
At  Processing  Sites 
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SV  MATT  HAMBLEN  AND 
HATNICH  THIBODEAU 

Three  Hewlett- 
Packard  Co.  user 
groups  confirmed 
last  week  that  they 
will  continue  to  bold  indepen¬ 
dent  user  conferences  despite 
HP's  drive  to  consolidate  the 
events  into  a  new  technology 
conference  to  be  held  in  Sep¬ 
tember  2005. 

1  The  three  user  groups  had 
{  been  invited  to  collaborate 
with  HP  in  the  unified  event, 
currently  being  called  the  HP 
Technology  Forum  Expa  A 
fourth  invited  user  group.  En¬ 
compass,  said  last  month  that 
it  will  support  the  new  HP 
conference  (QukkLink  48350). 

Last  week.  Interex,  the 
largest  HP  user  group,  with 
100,000  members,  said  its  de¬ 
cision  to  continue  to  hold  its 
HP  World  event  in  2005  is  in 
the  best  interests  of  its  mem¬ 
bership.  "We  just  believe  that 
being  fully  independent,  yet 
loyal  to  our  vendor  of  choice, 
would  be  best  for  everyone  in¬ 
volved."  said  Denys  Beau- 
chemin,  president  of  Sunny¬ 
vale.  Calif -based  tnterex. 

Open  View  Forum  Imcma- 
tioniu  (OVFl).  a  group  of 
8.000  HP  software  users,  will 
proceed  with  plans  to  hold  its 
Software  Forum  conference  in 
Denver  in  June  2005,  ofTiciab 


said.  And  mjC.  the  former 
Tandem  user  group,  plans  to 
continue  holding  its  ITUG 
Summit,  next  scheduled  for 
October  in  San  Jose. 

When  the  HP  plan  for  a 
new  conference  surfaced  last 
month,  some  users  viewed  it 
as  a  competitive  challenge  to 
user  group  conferences,  a  ma¬ 
jor  source  of  their  revenue.  HP 
said  (hat  the  idea  for  a  single 
conference  was  to  “coalesce" 
the  content  of  the  user  group 
events  and  that  it  came  in  re¬ 
sponse  to  requests  by  HP  cus¬ 
tomers  for  comprehensive  in¬ 
formation  about  hardware  and 
softMwe  technologies. 

Support  Questians 

But  some  user  group  members 
argued  that  a  conference 
sponsored  by  the  vendor 
would  be  marketing-driven,  as 
well  as  a  threat  to  the  groups' 
independence.  HP  has  provid¬ 
ed  fuTtding  to  the  user  group 
conferences,  usually  throu^ 
sponsorships.  It’s  unclear 
whether  or  how  HP’s  contri¬ 
bution  to  those  events  will 
change. 

David  Parsons,  vice  presi¬ 
dent  of  HP  Americas,  said  HP 
*^viU  continue  to  support  our 
groups"  as  they  hold  confer¬ 
ences.  •TVe’vc  not  decided  the 
level  of  support,  but  clearly 
there  will  be  some  level  of 


User  Group  Funding 
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I  support  as  we  go  forward,  and 
I  those  relationships  Iwith  user 
groups]  are  key."  Parsons  said. 

Parsons  said  the  decision  of 
the  three  user  groups  to  forge 
ahead  with  their  own  confer¬ 
ences  will  have  no  bearing  on 
HP's  plans  for  its  new  technol¬ 
ogy  conference. 

OVFI  plans  to  participate 
in  the  new  HP  conference  in 

2005  and  is  unsure  how  that 
conference  will  affect  its  own 

2006  plans  for  Software  Fo- 

’  I  rum.  said  OVn  President  Hen¬ 
ry  Wojcik.  OVFI  “is  a  UtUe  bit 
concerned  about  our  hiture." 
he  said.  "In  2006,  the  success 
of  their  2005  conference  dic¬ 
tates  what  happens  to  u$.“ 

While  OVFI  and  HP  “have  a 
friendly  relationship . . .  that 
we'd  like  to  continue."  Wojcik 
said,  “our  membership  likes 
our  independence  as  a  group, 
and  our  openness." 

Beauchemin  said  that  if 
Interex’s  participation  in  the 
new  HP  technology  event  is 
deemed  to  be  wor^while  by 
Its  members,  then  Interex  will 
be  there.  “We’re  open  to  (in¬ 
volvement  with  the  new 
event],  but  our  main  focus  is 
on  HP  World."  he  said.  "This  is 
an  extremely  b%;  decision  for 
us,  to  continue  our  show.  We 
took  a  long  time  to  decide  and 
polled  our  members." 

Parsons  said  the  date,  loca¬ 
tion  and  formal  name  of  HP’s 
new  show  will  be  announced 
within  three  weeks.  Tbe  big 
idea  is  that  there  will  be  a 
deep-dive  technical  focus  on 
products  and  solutions  and 
hands-on  labs,  with  a  primary 
focus  on  technical  training  [to 
meet  the]  needs  of  customers, 
partners  and  HP  employees," 
be  said. 

Parsons  said  HP  doesn’t 
want  to  appear  to  be  in  com¬ 
petition  with  the  user  groups. 

In  meetings  with  them  about 
bolding  a  unified  conference, 
be  said.  “I  learned  there  is  a 
lot  of  passion  around  the  inde¬ 
pendence  of  these  groups." 
046848 
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IT  Manager  Eye  Desktop  Linux,  l 
But  Migration  Challenges  Remain 


LinuxWoild  attendees  weigh  potential 
cost  savings  vs.  technology’s  immaturiU' 


BY  TODOR.  WEISS 

SAN  FRANCISCO 

The  idea  of  using  Linux  on 
coqjorate  desktops  was  a 
laughing  matter  when  the 
open-source  operating  system 
began  infiltrating  data  centers 
a  few  years  ago.  But  at  last 
week’s  LinuxWorld  Confer¬ 
ence  &  Ejtpo  here,  many  IT 
stalTers  said  their  companies 
aren’t  laughing  anymore. 

That  doesn't  mean  ail  the 
potential  hitches  facing  desk¬ 
top  Linux  migrations  have 
been  eliminated,  according  to 
nine  attendees  and  two  ana¬ 
lysts.  Nonetheless.  IT  man¬ 
agers  such  as  Dan  Pritchard 
said  they’re  eyeing  Linux  as  a 
possible  alternative  to  Win¬ 
dows  on  end-user  PCs. 

Pritchard,  director  of  IT  at 
Foster  City.  Calif. -based  Eole- 
los  Inc.,  said  the  life  sciences 
company  likely  will  move  its 
90  users  to  a  desktop  release 
of  Linux  when  its  Windows 
maintenance  contract  comes 
up  for  renewal  —  provided 
that  the  open-source  software 
works  better  with  Research  In 
Motion  Ltd.'s  BlackBerry  mo¬ 
bile  devices  at  that  point  than 
it  does  now. 

“Usually  where  it  all  fails 
apart  is  linking  it  to  (Black- 
BerriesI,"  Pritchard  said.  But 
be  added  that  the  cost  savings 
promised  by  desktop  Linux  arc 
alluring.  "It’s  the  money  that 
will  get  the  executives  to  sign, 
given  that  Microsoft  continues 
to  do  more  and  more  mainte¬ 
nance  IfeeJ  increases,"  he  said. 

Burlington  Coal  Factory 
Warehouse  Corp.  runs  about 
3,000  Linux-bas^  PCs  in  its 
corporate  offices  and  its  360 
retail  stores,  said  Matt  Fahrn- 
er.  manager  of  network  ser- 


MOKFIOVUIRWORID 

Newt's  CTOtalks  atxxil  Ihe  company’s 
mtagrafion  of  SUSE  Lnux  and  Ximian  rnio 


vices  at  the  Burlington.  N.J.- 
based  company.  The  retailer 
gives  its  Linux  users  Sun  Mi¬ 
crosystems  Inc.’s  StarOffke 
applications  or  the  OpenOf- 
ficc.org  software  suite  instead 
of  Office,  “^ost  of  what  we 
need  to  do.  we  can  do  (with 
those  applications]."  Fahmer 
said.  “It’s  not  a  handicap." 

Different  Paths 

IT  managers  at  two  other 
large  companies,  who  asked 
not  to  be  identified,  voiced 
differing  expectations  about 
the  likelihood  ofdeployit^ 
Linux  on  their  desktops. 

A  vice  president  for  IT  at  a 
grocery  store  chain  said  his 
company  will  start  using  Linux- 
based  servers  within  the  next 


three  months  for  a  pilot  pro¬ 
ject  invoK'ing  in-store  cus¬ 
tomer  marketing  pre^rams. 
But  the  company  isn't  likely  to 
move  to  Linux  on  the  desktop 
because  it  gets  heavily  dis¬ 
counted.  long-term  pricing  on 
Windows  and  Office  from 
Microsoft  Corp.,  he  added. 

However,  a  Linux  systems 
engineer  at  a  bank  with  more 
than  100J)00  users  said  that 
desktop  Linux  b  very  much  a 
topic  ofdtscusskm  internally 
because  of  its  promised  cost 
savings.  "In  the  banking  envi¬ 
ronment.  it’s  always  about 
money."  he  said.  The  bank 
plans  to  run  a  desktop  Linux 
pilot  project  next  year. 

Desktop  Linux  news  was 
sparse  at  the  conference.  Nov¬ 
ell  Inc.  showed  a  demo  copy 
of  a  new  desktop  release  of  its 
SUSE  Linux  sofiware  and  said 
it  will  announce  detailed  plans 


thb  fall.  Hewlett-Packard  Co. 
unveiled  a  notebook  PC  that's 
preloaded  with  Linux. 

During  a  panel  discussion, 
speakers  offered  suggestions 
for  companies  contemplating 
migrations  to  desktop  I  inii< 
First,  there  has  to  be  a  solid 
reason  to  make  the  switch, 
they  said.  In  addition,  needed 
applications  must  be  available 
on  Linux.  Driver  support  and 
interoperability  with  systems 
that  run  Windows  is  at<r>  itn- 
poriant,  as  b  making  sure  that 
the  IT  support  team  b  expert- 


HP  Exec  Calls  for  Fewer  Open-Source  Licenses 

SAM  FRAMCtSCO  /VN  b _ a _ 


SAN  FRANCISCO 

The  large  number  of  licenses 
thal  sohvvare  wndors  are  using 
to  retoase  open-source  code  is 
becoming  a  SHjnificanl  issue  for 
devetopm  and  IT  managers,  ac¬ 
cording  to  Hewfed-Packard  Co.'s 
lop  Linux  execudve. 

*A  lol  of  people  don't  realize 
that  today  there  are  dozens  and 
dozens  of  open-soume  licenses.' 
Martin  Fink,  vice  president  of 
Linux  at  HP.  said  in  a  speech  al 
UnuxWorfcL  Fink  added  that  he 
had  counted  a  total  of  52  differ¬ 
ent  open-source  licenses  and 
predietBd  that  the  number  would 
likdy  moaase  by  the  end  of  the 
conference. 

Opervsourceicensesareap- 
prmedbytheOpenSoiffcelnilia- 
five  (OSO.  a  nonprofi  comptfiy 
ihaihascertifiBdllcensesfromor- 
garuabons  as  dneise  as  NASA. 
MT  and  Apple  Computer  Inc. 

The  issue  of  whether  there  are 
too  many  licenses  has  attracted 
Ihe  attention  of  the  OSI  botfd 
and  has  the  potential  to  become 
a  sertous  topic  of  discusson. 


said  OSI  f^esident  Eric  Ray¬ 
mond.  There  is ’a  strong  chance' 
that  the  organization  w«  become 
rnore  restrictive  in  the  number  of 
licenses  (t  certifies,  though  it  has 
not  pm  such  a  pokey  fi  place  yet 
he  sad  in  an  e-mail  interview. 

Ihe  matonty  of  OSl-certified 
hcenses  are  used  n  a  very  smal 
number  of  open-soiace  profects. 
Raymond  added  *AI  bm  a  dozen 
of  these  are  vanity  ttcenses.  usu¬ 
ally  (wTittBn]  by  a  corporate  legal 
department  with  loo  much  time 
on  its  hands  [and]  used  on  exact¬ 
ly  one  profed.' he  sad. 

But  Fink  contended  that  the 

llfevery- 

_ one  sort  of 

opted  out  of  the 
licensing  game, 
it  would  nuke 
everyone’s  Me 
a  Mtle  easier. 
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number  of  (gien-souroe  licenses 
is  already  out  of  hand.  "Thm 
realty  s  no  value.' and  there  is 
only  confusion  in  hawng  that 
many  licenses.' he  sad 
To  dale.  HP  hasn't  seen  the 
need  to  create  a  new  bcense  for 
its  own  open-sotfce  contrftu- 
tions.  choosdg  instead  to  re¬ 
lease  as  software  under  sxeling 
licenses.  Fmfi  sad.  1  approve 
on  average  three  to  five  open- 
source  protects  and  contribu¬ 
tions  every  single  week.*  he  sad. 
directly  addressmg  other  vendois 
at  the  conference.  If  i  have  nev¬ 
er  had  to  create  a  new  license.  I 
haveaiealfyhardtimeurder- 
standng  why  you  think  you  do* 
Any  confusion  brought  on  by 
the  prolileraUon  of  open-source 
licenses  6  probabiy  a  bigger  is¬ 
sue  for  software  vendors  than  a 
is  for  fT  managers,  sad  Chiis 
Hieim.  chief  technology  officer  at 
online  travel  services  f^  OtNtz 
LLC.  Vendors  need  lo  ensure  that 
the  lOKXs  products  they  sei 
doni  have  ncompatible  kcertses. 
f^elm  noted. 


enced  with  Linux,  the  pan¬ 
elists  said. 

Craig  Manning,  manager 
of  IT  at  Cisco  SyMems  Inc., 
said  that  one  of  the  biggest 
challenges  to  its  desktop  Lin¬ 
ux  plans  b  a  lark  of  support 
for  applications  from  indepen¬ 
dent  software  vendors.  He 
noted  that  a  system  Cisco  uses 
to  track  technical  support  re¬ 
quests  runs  well  on  Windows 
but  not  as  well  on  t  .inn* 
“That's  where  we're  having  a 
lot  of  trouble,  with  the  ISVs," 
Manning  said.  O  40671 

Butheaddedthallheexpand- 
ngnumberofheansesdoesd- 
fed  conxiames  such  as  Chicago- 
based  Ortxtz.  which  uses  a  van- 
ely  of  open-soiste  software  'll 
evenmne  sort  of  opted  out  of  the 
teertang  game,  d  wodd 
everyone's  He  a  Mfe  eascr.* 

Hieim  sad. 

Orbttz  s  orenily  usmg  a  tool 
developedbyWallharn.Mas5.- 
based  Bbck  Duck  Software  Inc. 
to  audit  Us  ntemal  open-source 
code.TheproductcalBdProlex- 
P.  lets  IT  managers  track  Ihe 
oper^sounx  corfttxjtioris  of  thev 
software  developers  and  help  en¬ 
sure  that  iher  companiss  compfy 
w«h  Qpervsouce  kensng  terms 
'Ihe  promee  6  tiiat  Iheyl  mot- 
age  this  complexdy,"  sad 

For  software  veixiors  loyng 
with  the  idea  of  adding  to  the 
plefhora  of  open-some  besnses. 

Fmk  offered  some  Inal  words  of 
adveen  he  speech  *tfyDu're 
out  there  and  you're  a  vendor 
and  you're  pfovnng  lo  create  a 
new  bcense  -  Slop.' he  sad 
■Reasedonl* 

-  Robert  tidHUv. 
fOBAfews  Senve 
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Sun  Builds  Linux 
Code  Into  Solaris 
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Ing  aaRaara  calad  Jana  Hal'a 
daalpad  to  aala  H  aaalat  hr 
laaca  to  nn  Una  aanlcaHon  on 
Sotaiia  ayatona  hdR  araand  aHH 
pracaaaatt.  Da  naa  oada  aril  ran 
MdaHaSahrhlanalaidaap- 
aaR  aadcaHona  aiRton  far  Rad 
Hat  tac.*a  rarafan  ol  Unii,  Sun 
aaid.  Jana  to  dua  to  ba  Incfadad 
In  Salarfa  W.  abfak  to  adadufad 
toriafaaaabaaaai'aand. 

SEC  May  Charge 
Business  Ofaiects 

Buabaaa  Obfaeto  S*  add  R  ato 
naWad  Had  Ha  Its.  SacviHaa 
and  frrbama  Caaindadoa'a  atoR 
plana  to  lacananand  a  dad  auHan 


Pentagon  Urged  to  Fix 
Procurement  Processes 
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GAO  says  Defense  Departoent  should 
copiy  corporate  IT  on  business  systems 


I  «V  MAltC  L.  OOMINt 

The  U.S.  Govenunent 
Accountability  Of* 
r>ce  (GAO)  is* 
sued  a  call  for  the 
Department  of  Defense  to  re* 
form  its  business  system  pro- 
I  curement  policies  and  aijgn 
them  with  corporate  project 
management  practices. 

In  a  report  that  was  sent  to 
’  Congress  on  july  3a  the  GAO 
made  14  recommendations 
aimed  at  strengthening  the 
Pentagon's  acquisition  policies 
for  business  systems  as  well  as 
its  controls  for  ensuring  that 
proper  procedures  are  fol¬ 
lowed.  The  GAO  warned  that 
if  its  recommendations  aren't 
heeded,  future  IT  investments 
by  the  DOD  will  be  put  at  risk. 

And  the  financial  conse* 
quences  could  be  huge,  the 
C^O  claimed.  Of  the  S28  bil¬ 
lion  in  IT  funding  that  the 
Pentagon  requested  for  the 
government’s  current  fiscal 
year.  S19  billion  will  go  toward 
operations,  maintenance  and 
moderruzatioD  of  business 
systems  as  opposed  to  military 
command*  and-control  sys¬ 
tems,  according  to  the  GAO. 

The  GAO.  then  called  the 
General  Accounting  Office, 
was  asked  late  last  year  by  the 
U.S.  Senate’s  subcommittee  on 
military  readiness  and  man¬ 
agement  support  to  evaluate 
the  Pentagon's  latest  procure¬ 
ment  guidelines  to  see  if  they 
were  cooststent  with  private- 
sector  best  practices  and  in- 
duded  sufficient  controls  on 
DOD  units. 

The  GAO  report  said  recent 
revisions  by  the  DOO  do  in¬ 
corporate  many  procedures 
followed  by  corporate  users, 
such  as  the  need  to  economi¬ 
cally  justify  systems  invest¬ 
ments  and  to  continually  mea¬ 
sure  projects  against  ftnmcial 
I  baselines.  But  it  added  that  the 
I  Pcfttagon  left  out  ocher  best 


praaices.  most  notably  ones 
related  to  rollouts  of  packaged 
applications. 

DOD  officials  told  the  GAO 
that  more  best  practices  will 
be  added  by  Sept.  30  to  the 
procurement  guidelines, 
which  are  officially  called  the 
5000  series  of  documents.  But 
there  are  oo  documented 
plans  for  doing  so.  the  GAO 
said,  and  the  required  person¬ 
nel  haven't  been  assigned  yet 
“due  to  higher-priority  needs." 

Among  the  recommenda¬ 
tions  made  by  the  GAO  is  a 
suggestion  that  the  DOD  cre¬ 
ate  a  fonnai  plan  to  incorpo¬ 
rate  missing  best  practices. 

The  report  also  c^s  for  the 
Pentagon  to  discourage  modi- 


fication  of  third-party  applica¬ 
tions  and  develop  plans  to 
evaluate  systems  integrators 
based  oo  their  ability  to  install 
commercial  applications. 

Another  hole  involves  risk 
management  processes  for 
identifying  potential  problems 
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SSA  Mixes  Baan  Apps, 
Two  Other  ERP  Lines 


BV  MAnC  L.  8OM0INI 

After  a  delay  of  nearly  a  year, 
SSA  Global  Technologies  Inc. 
last  week  released  a  Web- 
based  upgrade  of  its  Baan  ERP 
applications  and  said  it  also 
plans  to  ofler  the  software  as  a 
castration  platform  for  users 
that  run  two  of  its  ocher  man¬ 
ufacturing  applkatioQ  suites. 

Chicago-bued  SSA  said  the 
new  SSA  ERP  LN  6J  software 
was  des^ned  to  cater  to  all  of 
its  discrete  manufacturing 
customers,  including  Baan's 
installed  base  and  users  of  the 
company’s  ManMan/HP  and 
MK  product  lines. 

The  LN  suite  is  the  first  of 
two  new  offerings  SSA  is  de¬ 
veloping  to  converge  the  vari¬ 
ous  ERP  applications  it  has 
acquired  over  the  past  three 
years.  Early  next  yean  the  ven¬ 
dor  plans  to  add  SSA  ERP  LX. 
which  will  be  aimed  at  users 
of  its  BPCS,  PRMS.  Prism  and 
Infinhun  MM/PR  applkatioos 


for  process  manufacturers. 

S^  ERP  LN  6.1  includes  a 
Web-based  user  interface  and 
incorporates  Web  services 
technologies  that  were  devel¬ 
oped  by  the  former  Baan  NV, 
which  became  a  subsidiary  of 
SSA  in  July  2003. 

As  of  Ian  September.  Baan 
had  spent  about  SlOO  million 
developing  the  next  genera¬ 
tion  of  its  software,  code- 
named  Gemini  which  was  due 
for  release  that  month.  But 
SSA  put  shipments  oo  hold 
because  of  shortcomings  rhar 
included  a  lack  of  integration 
with  Baan’s  CRM  and  logistics 
applications  (QuickLink  41^1 
In  addition,  SSA  nffiriak 
I  wanted  to  consolidate  similar 
I  applications  into  unified  oSer- 
ings  (QuickLink  416711  They 
eventually  decided  to  combine 
Gemini  and  the  converged  dis¬ 
crete  manufKtuiing  software 
into  a  single  release,  said  Cory 
Eaves,  vice  presklent  of  str¬ 


and  creating  plans  for  dealing 
with  them,  the  GAO  said. 
Without  such  oversight  capa¬ 
bilities,  it's  "likely  that  acquisi¬ 
tion  risks  will  become  cost, 
schedule  and  performance 
problems,"  the  GAO  said. 

The  DOD  didn't  respond  to 
requests  for  comment  on  the 
report  by  Computerworlds 
publication  deadline.  In  a  let¬ 
ter  to  the  GAO  that  was  in¬ 
cluded  in  the  report,  the  Pen¬ 
tagon  said  it  agreed  with  some 
of  the  recommendations.  But 
it  disagreed  or  only  partially 
concurred  with  others. 

For  example,  the  GAO's  call 
for  a  detailed  plan  for  beefing 
up  the  business  system  poli¬ 
cies  is  unnecessary  and  "inap¬ 
propriate,"  the  DOD  said  in  its 
letter,  which  was  rigned  by 
Deputy  Assistant  Secretary  of 
Defense  John  R,  Landon. 

Landon  also  said  that  the 
Pentagon  doesn’t  see  the  need 
to  incorporate  risk  manage¬ 
ment  processes  into  the  IT 
procurement  guidelines  be¬ 
cause  it  already  has  sufficient 
processes  in  place.  O  48635 


tions  management  and  re¬ 
search  at  SSA. 

Eaves  added  that  SSA  is  also 
readying  migration  tool  kits  to 
help  Baan.  ManMan/HP  and 
MK  users  automate  dur¬ 
ing  upgrades  to  SSA  ERP  LN. 

SSA's  convergence  moves 
are  welcome  news  for  Marsha 
WUliams,  vice  president  of  IT 
at  Sorin  Group,  a  Milan,  Italy- 
based  medical  products  con¬ 
glomerate.  "As  users  of  BPCS. 
we  are  eagerly  awaitiz^  the 
convergence  of  the  LN  and  LX 
platforms,  which  will  truly 
create  a  best-in-dass  offering" 
Williams  said  via  e-maiL 
The  new  release  shows  that 
SSA  wants  to  be  more  than  a 
graveyard  for  its  ERP  acqutsi- 
rions,  said  John  Moore,  an  ana¬ 
lyst  at  ARC  Advismy  Group 
Inc  Moore  said  the  migntioo 
paths  SSA  is  offering  should 
I  breathe  "new  life  into  what 
were  a  series  of  increasingly 
monbund  solutions.”  Ck  4I86B 


rou're  invtted. 

(downtime,  excess  cost  and  human  errors  are  not) 


■ 


From  Houston  to  Hong  Kong,  smart  fT  managers  everywhere  are  tradmg  in 
legacy  data  canter  design  for  a  more  available,  agHe,  scalable  approach. 
Finally,  racks,  power,  cooling,  and  management  can  become  a  competitive 
edge  that  moves  as  fast  as  your  business,  rather  than  an  expensiveheadache. 
The  opportunity  to  make  a  difference  is  real,  artd  you  can  see  it  working  at  a 
site  near  you.  Come  and  see  the  future! 

Food  and  thought 

You're  invtted  to  represent  your  company  at  an  ARC  Real-time  InfraStruXure  * 
Award  Dinner,  coming  to  a  city  near  you.  There,  not  only  will  you  discover  the 
latest  innovations  in  data  center  physical  infrastructure,  but  you'll  enjoy  a  good 
meal  on  us.  shared  with  some  of  the  most  advanced  thinkers  in  the  industry. 
What  better  way  to  learn  how  your  peers  are  keeping  pace  with  InfraStruXure. 
on-demand  architecture  for  network-critical  physical  infrastructure  than  to  see 
it  firsthand? 

Highly  available.  Adaptable.  Lower  cost. 

Scalable,  modular  InfraStruXure  architecture  includes  power,  cooling,  racks  and 
physical  structure,  security  and  fire  protection,  and  cabling,  as  well  as  the  man¬ 
agement  and  servicing  of  these  elements.  InfraStruXure  leaves  you  poised  to 
quickly  adapt  to  change  and  increase  system  availability  -  all  at  a  lower  cost  and 
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lnfraStru/\ure' 


On-tfentand  architecture  for  netarork- 
crihcal  physicat  ntrastructure 


I 


With  fewer  hasles  than  legacy  design.  It's  a  rare  win-win  situation  -  you  save 
both  money  and  time,  allowing  you  to  invest  more  in  the  applications  that  drive 
real  competitive  advantage  for  your  company.  After  all.  is  your  next  proftfotion 
really  coming  from  your  choice  of  battery  vendors? 

Join  the  crowd. 

Don't  miss  this  opportunity  to  see  industry  best  practices  in  action.  See  first¬ 
hand  how  companies  worldwide  are  reaping  the  benefits  of  InfraStruXure’s 
standardized,  pre-tested  approach  to  data  center  design  Because  this  exclusive 
event  is  limited  to  IT  professionals,  there  are  only  a  limited  number  of  available 


Register  today! 

Events  fill  quickly,  and  if  we  are  unable  to  book  your  attendance  at  your  first 
choice,  we  will  do  our  best  to  accommodate  you  as  quickly  as  possible 


No  wires,  no  smoke  and  mirroro  -  just  higher  availability  and  lower  costs. 
See  a  live  InfraStruXure"  installation  near  you  today.* 

To  Register  Online  -  Go  to  http'J/promo^pcxom  and  enter  key  code  s535y  A 
By  Phone  -  Call  1-888-289-APCC  (2722)  x3214  l, 

*Registration  is  required.  Qualified  IT  professionals  will  receive  e-mail  confirmation. 


Legendary  Reliability* 


62004  AiT«„can  Power  Coorars.on  Cocporatiorr.  All  Trarfenarks  are  lire  oroperty  of  therr  owners.  Eyoarl:  esooCOrtOapr*  com  .  132  FoirgrrxrrrOs  Road.  West  Angslon,  Rl  02892  LISA  ISX304EF.US 
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NYSE  to  Upgrade, 
Expand  E-trading 

DIono  rr  *  ,  . 


Plans  IT  changes  to  support  accelerated 
shift  from  manual  transaction  processes 


ev  LUCAS  MCAMtAN 

The  NEW  YORK  Stock 
Exchange  last  week 
announced  a  plan  to 
expand  its  use  of 
computer-based  trading  in  an 
attempt  to  better  compete 
against  all-electronic  rivals  like 
Nasdaq  Stock  Market  Inc.  and 
Archipelago  Holdings  IXC 
The  NYSE  filed  a  request 
with  the  U.S.  Securities  and 
Exchan^  Commission  seek¬ 
ing  approval  for  the  proposed 
change  to  its  operations,  which 
would  shift  more  transactions 
away  from  the  manual  atiction 
system  that  now  dominates 
the  exchange's  trading  floor. 

But  the  NYSE  said  that  the 
expansion  of  its  3-ycar-old 
NYSE  Direct*  order  execution 
system  likely  won't  stan  to 
be  phased  in  for  another  12 


months  or  so.  In  addition 
to  waiting  for  regulatory 
approval  from  the  SEC.  the 
exchange  noted,  its  IT  staff 
needs  to  modif>’  the  order- 
routing  sofrwarc  within  the 
Direct*  system. 

Analysts  who  follow  IT  is¬ 
sues  in  the  financial  services 
industry  said  they  think  the 
NYSE  will  also  have  to  add 
more  systems  and  increase  its 
network  bandwidth  to  keep  up 
with  the  expected  increase  in 

The  New  York 
—  ^od(&- 
change  is  bringing 


WAYNE  LEE.  SPOKESMAN  NASDAQ 


electronic  trading  volumes. 

Direct*  offers  subsecond 
trade-processing  speeds,  said 
NYSE  spokesman  Raymond 
Pellecchia.  In  comparison,  it 
takes  an  average  of  about  14 
seconds  to  complete  trades  via 
the  exchange's  manual  ap¬ 
proach.  in  which  so-called 
floor  traders  take  stock  order 
tickets  that  are  given  to  spe¬ 
cialists  and  then  typed  into 
the  exchange's  systems  by  an¬ 
other  floor  trader. 

Currently,  though,  only 
about  10%  of  the  NYSE’s  daily 
trading  volume  is  executed 
electronically  through  Direct*, 
according  to  Pellccchia.  In  ad¬ 
dition.  individual  trades  are 
limited  to  1.099  shares  at  a 
lime.  Pellccchia  declined  to 
say  how  much  of  the  trading 
volume  is  expected  to  shift  to 
Direct*  after  the  system  ex¬ 
pansion  work  is  completed. 

The  price  of  upgrading  the 


Direct*  system  Is  not  some¬ 
thing  we've  costed  out  yet,”  he 
added.  “But  it  won't  be  an  ob¬ 
stacle  ...  to  doing  it." 

Along  with  making  modifi¬ 
cations  to  the  Direct*  software 
to  allow  an  unlimited  volume 
of  stocks  to  be  traded  elec¬ 
tronically.  the  NYSE  plans  to 
give  its  floor  traders  new 
handheld  computers  that  they 
will  be  able  to  use  to  enter  or¬ 
ders  directly  into  the  system. 

Nasdaq  spokesman  Wayne 
Lee  said  officials  at  the  New 


York-based  stock  market  don’t 
see  the  NYSE’s  initiative  as 
something  that  will  put  Nas¬ 
daq  at  a  competitive  disadvan¬ 
tage.  “We  just  simply  think  the 
New  York  Stock  Exchange  is 
bringing  its  trading  system 
into  the  modern  era."  Lee  said. 

Robert  Haggerty,  an  analyst 
at  TowerGroup  in  Needham. 
Mass.,  said  investors  have 
been  pushing  the  NYSE  for 
years  to  remove  its  volume 
caps  on  electronic  trades.  But 
the  tradition  of  writing  out 
trade  tickets  has  been  hard  to 
overcome,  he  added. 

■'The  other  reason  there  was 
so  much  resistance  is  that  it 
does  take  away  the  floor  bro¬ 
ker’s  ability  to  interact  with 
the  orders  and  thereby  make 
money  off  those  transactions." 
H^erty  said.  But  now  the 
NYSE  is  “taking  a  run  at  Nas¬ 
daq."  he  said.  “It's  a  dogfight.'’ 

NYSE  CEO  John  Thain  said 
the  exchange  will  continue  to 
offer  trades  via  floor  brokers 
because  they  add  a  “human 
judgment"  to  the  process.  But. 
he  noted,  NYSE  officials  "are 
seeking  to  upgrade  signifi¬ 
cantly  our  use  of  lechnolc^ 
to  execute  securities  transac¬ 
tions."  O  48^4 


British  Bug  Hunter  Rnds  34  Raws  in  Oracie  Adds 

■W  jAikiimaa  UI  .  _i_: 1  -  -  •  ® 


av  JAIKUHAN  VMAVAN 

Oracle  Corp.'s  ongoing  effort 
to  portray  itself  as  a  vendor  of 
“unbreakable"  tcchnolc^  re¬ 
ceived  a  setback  last  week 
when  a  British  bug  hunter  dis¬ 
closed  that  he  bad  found  34 
security  vulnerabilities  in  the 
database  vendor’s  produas. 

The  flaws  include  several 
that  could  allow  malicious  at¬ 
tackers  to  gain  complete  ad¬ 
ministrative  control  of  com¬ 
promised  database  servers, 
claimed  David  Litchfield, 
managing  director  of  Surrey. 
England-based  Next  Genera¬ 
tion  Security  Software  Lid. 

■Tltey  include  buffer  over¬ 
flows,  SQL  injection  issues 
and  a  whole  range  of  other  mi¬ 
nor  issues."  said  Litchfield.  He 
said  that  he  reported  them  to 
Oracle  in  January  and  Febru¬ 
ary  following  his  discovery. 

“Some  of  them  can  be  ex¬ 


ploited  without  a  user  10  and 
password,  while  others  re¬ 
quire  them."  Litchfield  said. 
He  refused  to  provide  frinher 
details  of  the  flaws,  citing  his 
concern  that  doing  so  before 
patches  are  distributed  could 
pose  a  security  risk  for  users. 

Some  users  defended  Ora¬ 
cle's  security  record. 

“Pm  always  very  concerned 
about  any  flaws,"  said  Howard 
MufTier.  director  of  enterprise 
services  at  Embry-Riddle 
Aeronautical  University  in 
Daytona  Beach.  Fla.  But  the 
university,  which  licenses  a 
wide  range  of  Oracle  prod¬ 
ucts,  has  had  few  security  is¬ 
sues  with  them  so  for.  Muffler 
said.  "Oracle  has  always  done 
a  very  good  job  of  addressing 
security  flaws  and  addressing 
them  swiftly."  he  said. 

Oracle  is  ‘Incredibly  quick 
to  respond  to  any  security  is¬ 


sue."  agreed  Rich  Niemicc, 
former  president  of  the  Inter¬ 
national  Oracle  Users  Group 
and  CEO  of  TUSC,  a  Chicago- 
based  consultancy.  "There  will 
.-itways  be  issues  that  arise, 
given  the  complexity  of  the 
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software."  but  Oracle  has  been 
diligent  in  finding  and  fixing 
them,  he  said. 

According  to  Litchfield.  Ora¬ 
cle  told  him  that  patches  were 
available  to  fix  the  problems  a 
few  months  aga  But  the  com¬ 
pany  appears  to  be  watting  for 
an  updated  patching  process 
to  become  ready  before  re¬ 
leasing  the  fixes,  he  said. 

"If  is  tny  opinion  that  they 
could  have  run  the  old  patch¬ 
ing  process  up  until  the  time 
that  the  new  patching  proce¬ 
dure  was  ready.  There  really  is 
no  point  in  exposing  users  to 
unnecessary  risks,"  he  said. 

Oracle  last  week  confirmed 
the  existence  of  the  flaws  but 
refused  to  provide  any  further 
details.  A  company  spokes¬ 
woman  said  Oracle  had  fixed 
the  flaws  and  would  issue  a 
security  alert  “soon." 

“Security  is  a  matter  we  take 


seriously  at  Oracle,  and  while 
wc  stand  firmly  behind  the  In¬ 
herent  security  of  our  prod¬ 
ucts,  we  are  always  working  to 
do  better.”  she  said. 

News  of  the  latest  flaws 
came  about  two  months  after 
Oracle  warned  users  of  a 
major  flaw  in  its  Oracle  Hi 
E-Business  Suite  and  Oracle 
Applications  11.0  that  could  let 
attackers  take  control  of  the 
underlying  database. 

Even  so.  Oracle's  database  is 
by  “leaps  and  bounds"  more 
secure  than  competing  prod¬ 
ucts,  said  Don  Burleson,  presi¬ 
dent  of  Burleson  Consulting  in 
Kittrell,  N.C..  and  author  of 
several  books  on  the  security 
of  Oracle  products.  He  said 
the  newly  disclosed  flaws  are 
unlikely  to  pose  an  immediate 
threat.  "Litchfield  has  made  it 
his  life’s  mission  to  find  flaws 
in  Oracle's  technology,"  Burle¬ 
son  said,  adding  that  most  of 
the  flaws  are  obscure  and  not 
easy  to  find.  O  48664 


HP  Blades,  now  in  a  bundle,  which  is  exactly  what  you'll  save. 


Sove  over  30%  with  our  blode  bunrJIe  featuring  two  HP  ProLiant  BL20p  BlorJe  Servers,  powered  by  Intel*  Xeon'“  processors  ond  get  tbe 
power  to  moke  network  management  simple  ond  affordable.  You’ll  save  on  deployment  l,me  too,  tbonks  to  th.s  reody-togo  pockoge 
Sure,  modulor  design  leoves  room  to  expond  loter,  but  HP  Blode  Servers  con  olso  moke  o  big  impoct  on  your  totol  cost  of  ownership  ,n 
meont,me.  Our  monogement  softwore  boosts  productivity  ond  cuts  reconfigurotion  efforts  from  doys  to  minutes.  And  becouse  your  time 
IS  money,  the  BL20p  feotures  fully  redundont  technologies  to  reduce  costly  downtime.  While  our  #1  ronking  in  Intel -bosed  servercustomer 
sotisfoction  IS  one  reason  we  recently  became  the  first  to  sell  over  1 00.000  blode  servers,  there's  more  thon  one  reason  You  olso  get  the 
advice  and  support  of  HP  and  our  local  portners-well  before  and  long  after  you  buy.  Even  when  you  buy  at  more  than  30%  off 


Save  33  m 


n 


Get  the  HP  ProUont  BL20p  bundle, 
and  you'll  sove  big  compored  to 
the  cost  ol  buying  the  two  servers 
otkd  occessories  seporotefy. 


HP  Proliant  BL20p  BLADE 
SERVER  BUNDLE 


58,999 


M2)  B120p  Blade  Servers 
I  Eoeb  Blode  Server  mdudesi 

-  (2)  Intel*  XoDn**  precessors  3-06GHz-512k 
(3)  10/100/1000  NICs  *-  (1)  10/100  itO  NIC 

-  1GB  OOP  memory 

*  p-Ooss  blode  ertclosute 

*  p-Ooss  single  phose  power  enclosure 
with  2  power  supplies 

*  Mini  bus  bor  kit 

*  (8)  Rapid  Deploytnenl  Pock  licenses 
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SAP  Expands  Its 
Workfom  in  India 

SAP  AO  announcad  plans  to  in- 
craasa  the  mimbar  of  softwara 
davalopars  at  Its  fodiity  in  Banga- 
tora.lntfa.  to  about  1.500  by 
yaar's  and  and  to  3,000  by  the 
and  of  2006.  Dm  SAP  todia 
fadlty  now  has  about  1,100  am- 
phiyaos.  CCO  Hanning  Kagennann 
said  SAP  aho  plans  to  team  with 
itoidantrfiad  Imlan  IT  firms  to  of¬ 
fer  software  sarvieas  in  an  effort 
to  towar  costs  for  its  users. 

Apple  CEO  Jobs 
Has  Cancer  Surgery 

Apple  Computer  Inc.  CEO  Steve  i 
Jobs  said  in  an  e-mail  message  to  j 
employees  that  ho  had  a  cancer-  | 
ous  tumor  removed  from  his  pan¬ 
creas.  Dm  cancer  was  “a  vary 
rare  form”  that  won't  requirt 
chemotherapy  or  radiation  treat¬ 
ments,  Jobs  wrote,  addtog  that 
he  plans  to  retaim  to  werli  next 
month.  Dmothy  Cook,  who  heeds 
sales  St  Apple,  will  run  day-to-day 
operations  in  Jobs’  absance. 


McBride  Vows  SCO 
Will  Win  Legd  Fight 


CEO  says  no  plans 
for  more  lawsuits 


WHEN  The  SCO 
Group  Inc.  held 
its  SCO  F<)rum 
2004  user  con¬ 
ference  here  last  week, 
much  of  the  focus  re¬ 
mained  on  the  Unix 
software  vendor’s  legal 
banles  against  IBM  and 
other  Linux  backers. 

Dari  McBride,  president 
and  CEO  of  Lindon. 
Utah-based  SCO. 
struck  a  defiant  tone  I 
during  his  keynote  and 
in  a  subsequent  interview 
with  Computerworld.  saying 
that  he  expects  his  company 
to  evcnttially  prevail  in  court 
and  win  over  many  of  its  crit¬ 
ics.  Lxccrpis  from  the  inter¬ 
view  follow. 


to  your  keynote  address,  you  said 
you  believe  the  IT  community  will 
“embrece”  SCO’s  legal  position 
after  all  the  evidenea  to  the  IBM 
case  is  made  pubic.  But  IT  man¬ 
agers  to  geiMral  have  reacted 
negatively  stoce  you  sued  IBM. 
Why  do  you  tMrdt  their  view  will 
chMige?  I  think  that  what  will 
happen  here  is  when  the  truth 
is  on  the  table  and  peo¬ 
ple  really  understand 
what  happened  in  the 
case,  there  will  be  a  big 


IBM  as  well  as  Novell,  AutaZofte 
and  OatoiterChryeler.  mafor  IT 
vendors  continue  to  unveil  Linux- 
based  offerings,  Unisys  being  the 
latest  example  {see  story  below]. 
Are  there  more  lawsuits  to  come 
against  additional  Linux  vendors 
or  iMers?  We  came  out  and  put 
our  claims  in  front  of  the 
courts.  Wc  look  forward  to 
getting  a  resolution  to  those 
issues.  When  those  issues  are 
fully  resolved,  we’ll  go  from 
there.  We’ve  got  our  hands 


swing  in  the  public  per-  full  right  now.  From 


ception  about  this  spcctivc.  w 

small  company  that  got  reservoir  fi 

clobbered  by  this  big  worry  abou 

bully.  Pm  goii^  a  year  ing  out  the 
out  and  saying  that  be-  don't  want  i 

tween  nowand  then.  thinly  by  ta 

when  the  tnith  gets  out  in  the  the  world  I  > 

public  filings  and  people  know  term  game, 

what  we  know,  people  are  go¬ 
ing  to  view  us  in  a  much  more  Isn’t  H  possib 

positive  light.  hava  auognt 


spcctivc.  we’re  fine  to  let  the 
reservoir  fill.  I  jter  on.  we’ll 
worry  about  the  wafer  flow¬ 
ing  out  the  other  side.  Wc 
don't  want  to  be  spread  too 
thinly  by  taking  on  the  rest  of 
the  world  I  now].  It’s  a  long- 


OaspHa  tba  pendtog  cases  against 


Isn’t  H  possibla,  as  some  critics 
hava  auggestsd,  that  IBM  could 
buy  SCO  to  a  setttertwnt  and 
close  the  company  down?  The 


notion  is  that  SCO  loses  either 
way  —  that  IBM  buys  us,  or 
we  lose  in  court.  We  didn't 
gi>  into  this  thing  to  try  to  go 
out  of  business.  We’re  trying 
lo  reclaim  the  business  that 
was  improperly  taken  from 
us.  A  settlement  to  me  would 
be  to  restore  what  was  taken 
from  us  so  that  we  can  stay  in 
business. 

In  June,  SCO  reported  that  Unix 
licensing  revenue  through  its 
SCOsource  division  totaled  fust 
S11.000  to  the  quarter  that  ended 
April  30  “  a  09%  drop-off  from 
S8.2S  million  in  the  same  quarter 
last  year.  What  happened  there? 
In  the  day-to-day  business,  wc 
have  some  speed  bumps  that 
come  up  from  our  ( intellectu¬ 
al  propcnyl  issues.  In  the  pre¬ 
vious  quarter,  wc  had  several 
large  licensing  deals,  but  you 
can’t  repeal  those  every  quar¬ 
ter.  It’s  not  really  as  brutal  as 
people  might  expect. 

048606 

^HHEONUNE 

In  h6  loynole  speech.  McBrxie  saxt  that 
Una  isn’t  gotfig  a»ov  and  that  SCO  fcmams 
I  a  product  company 
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AOL  Certifies  Tools 
For  Corporate  IM 

America  (Mtoe  toe.  said  it  has 
cartified  integntion  tool  Uts  from 
thrw  vendors  for  btoUing  fis  in- 
stanl  rtMssagina  todmology  into 
corporate  appiwttons.  AOL  s^ 
in  February  that  it  was  worktop 
with  IMIogic  toe.  and  stoct  Hwn 
has  teamed  up  with  FacoTmw 
»  Communications  Inc.  and  Akonlx 
he.  Dm  move  foBows  AOL's  re¬ 
cent  dsdslon  to  drop  its  M  gate¬ 
way  softwars  [QutefdJrtk  47684]. 

Short  Takes 

COHnmRUSOCVOESWTBI- 
NATIONU.  HC.  ninud  iH  logrei 
database  under  «  opan-sourco 
iicanae  and  saM  tfM  next  version 

ia  due  by  SapL  30 _ Dm  FED- 

ERALCOMMUMKADONSCOMWS- 
SfONvotadtoexaminathapei- 
CMSiModad  to  anauri  that  voice-  j 
over-IP  service  providers  comply  I 


Unisys  Offers  Unux  on 
High-End  Intel  Servers 


I  av  prren  sAven 

I  Unisys  Corp.  is  now  support¬ 
ing  Unux  on  its  ES7000  series 
high-end  servers,  the  company 
announced  last  week. 

Blue  BeJL  Pa.-bascd  Unisys 
already  ofTcred  Linux  on  two- 
or  four-way  servers  ba.scd  r>n 
Intel  microprocessors  and  is 
now  adding  support  for  Linux 
on  a  range  of  rnultiprocessor 
machines  containing  up  to  32 
Intel  32-  or  64-blt  processors, 
it  said. 

Unisys  will  offer  two  dLstri- 
buttons  of  Linux  on  its  ES7000 
servers:  SUSE,  from  Novell 
Inc.  and  Red  Hat.  from  Red 
Hat  Inc.  SUSE  Unux  will  nm 
on  up  to  32  processors,  and 
Red  Hat  Unux  on  up  to  16.  ac- 
cordir^  to  Steve  Rawsthom. 
Unisys’  vice  president  of  sales 


and  marketing  for  systems  and 
technology  in  Europe,  the  Mid¬ 
dle  East  and  Africa  ( EMEA ). 
For  support  and  service.  Uni¬ 
sys  will  provide  the  main 
point  of  contact  and  handle 
first-line  support,  he  said. 

Rawsthom  stressed  that 

Unisys  is  in  no  way  - 

turning  its  back  on 
Microsofi  Corp„  sup¬ 
plier  of  the  Windows 
operating  systems 
that  previously 
shipped  on  all 
ES7000  models, 

"We  see  this  as  an 
incremental  revenue 
opportunity  for  us 
with  Linux.  We  don’t 
see  it  detracting  from 
what  wc  do  with  Mi-  DmIM 
crosofi.”  Rawsthom  Saifoa.  A 


said.  The  company  was  pre- 
in  vented  from  bidding  for  some 
contracts  because  it  didn’t 
MM  support  Linux,  he  said. 

I  ^  Unisys  said  some  organiaa- 
tion.s  arc  already  running  Un- 
ms  and  ux  on  ES7000  machines,  in- 
hc  Mid-  eluding  Pennsylvania  State 
lEA ).  University  and  the  Florida  I>e- 
e.  Uni-  partmeni  of  Children  &  Fami- 
lin  lies.  These  early  adopters  had 

ndle  •^re^y  little"  help  from  Unisys 
lid.  in  doing  so.  Rawsthom  said, 
hat  One  area  where  Unux  may 

have  a  leg  up  on  Mi¬ 
crosoft's  operating 
system  is  in  its  sup¬ 
port  for  dynamic  par¬ 
titioning.  If.  for  ex¬ 
ample.  an  ESTOOO 
machine  is  running 
one  application  in  an 
instance  of  l  inn* 
across  16  processors 
and  another  applica¬ 
tion  in  a  different  in- 
_  stance  across  another 
Dm  Itoisifi  ESTOOO  blockofl6proces- 
Sariaa.  Arias 520  sors.  dynamic  parti¬ 


tioning  allows  processors  to 
be  taken  away  from  one  appli¬ 
cation  and  given  to  another  as 
the  workload  changes  and 
while  the  application  contin¬ 
ues  to  run. 

ESTOOO  hardware  has  been 
ready  for  dynamic  partitioning 
for  years,  but  no  curating  sys¬ 
tem  has  been  able  to  maln»  use 
of  it.  according  to  Andy  Carter, 
Unisys  server  product  manag¬ 
er  for  EMEA.  *Tfou  won’t  have 
that  in  Windows  until  Long¬ 
horn  comes  along."  he  said. 

ESTOOOs  with  Linux  arc 
available  now,  Unisys  said.  Of¬ 
ficials  could  not  immediately 
provide  pricing.  The  hardware 
will  cost  the  same  regardless 
of  the  operating  system,  Raws¬ 
thom  said,  but  the  cost  of  the 
software  licenses  and  service 
contracts  will  vary  between 
the  Windows  and  Linux  ver¬ 
sions.  046628 
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Maximum  mobility  equals  maximum  productivity. 

And  Intel  Centrino  mobile  technology  is  designed  from  the 
ground  up  for  mobile  computing.  It  enables  extended  battery 
life  in  a  new  generation  of  thin,  light,  wireless  laptops. 
And,  Intel  works  closely  with  industry  leaders  to  support  a  wide 
range  of  wireless  security  solutions.  It’s  all  about  mobility. 
Unwire  your  company  at  intel.com/business. 
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EDS  Plots  to  Avoid 
‘Problem  Contracts’ 


Cx)mpany  moves 
to  ‘a^e  enterprise’ 
business  strategy 

w  CMN  VEirroM 

LECTRONIC  Data 
Systems  Corp.  has 
launched  a  major 
overhaul  of  its  busi¬ 
ness  strategy  in  an  effort  to  re¬ 
move  (he  term  pnblem  con¬ 
tracts  from  its  lexicon.  Bur  the 
Ann’s  most  important  con¬ 
tract,  the  beleaguered,  rouJti- 
billion-doUar  Navy/Marinc 
Corps  Intranet  <N/MCI).  con¬ 
tinues  to  be  an  anchor  tied 
around  the  company's  neck. 

Dtuing  Plano.  Texas-based 
EOS’S  latest  eanungs  confer¬ 
ence  call  with  analysts,  on 
July  28,  CEO  Michael  Iordan 


announced  an  “agile  enter¬ 
prise”  business  strategy:  a 
network-centric  utility  com¬ 
puting  model  based  on  ’^•st- 
of-breed  alliances.” 

However,  the  most  critical 
aspect  of  the  new  strategy  is  a 
major  revamp  of  EDS’s  entire 
services  delivery  structure, 
said  Jordan.  This  will  result 
in  significant  con.solidation  of 
solution  centers  (andj  data 
centers,  and  change  the  way 
we  approach  the  application 
development  business.”  he 
said.  “This  is  how  we’re  going 
to  achieve  the  next  $3  billion 
in  cost  savings.” 

And  that  part  of  the  compa¬ 
ny’s  strategy  for  economic  re¬ 
vival  may  already  be  at  work 
supporting  the  N/MCI  con¬ 
tract,  a  $6.9  billion  deal  award¬ 


ed  in  2000  that’s  now  valued 
at  $8.8  billion  as  a  result  of  a 
two-year  exiensioa 
After  completing  an  internal 
review  of  N/MCl  program 
'  management  in  January,  the 
company  put  in  place  “very 
rigorous  contract  review  proc¬ 
esses”  focusing  closely  on 
“our  ability  to  deliver  what  wc 
propose  in  the  contract,  which 
we  did  not  do  as  well  in  earlier 
years,"  said  Jordan. 

SLA  Changes 

In  addition.  EDS  recently  an¬ 
nounced  a  joint  commitment 
with  the  Navy  to  implement 
commercial  service-level 
agreements  by  Sept.  L  It  is 
also  about  to  sign  a  contract 
performance  modification 
that  will  allow  EDS  to  bill  the 


Navy  for  services  it  is  per¬ 
forming  but  that  aren't  cov¬ 
ered  by  the  contract. 

“We  recognized  the  need  to 
make  the  SLA  process  more 
reflective  of  commercial  best 
practices,"  said  Navy  Capt. 
Chris  Christopher,  deputy  di¬ 
rector  for  future  operations 
and  business  initiatives.  He 
stressed  that  the  StAs  are  be¬ 
ing  refocused  on  efficiency 
and  are  not  being  adjusted  so 
they're  easier  to  achieve. 

Christopher  also  confirmed 
plans  to  modify  the  N/MCI 
contract  to  add  a  range  of  ap¬ 
plication  hosting  services,  in¬ 
cluding  server  management, 
network  management,  security 
services,  storage  services,  and 
hardware  and  software  sup¬ 
port.  He  added  that  the  change 
would  also  enable  the  Navy  to 
order  hosting  services  from 
standard  packages  rather  than 
customizing  them  for  every 
N/MCl  user  organization. 

EDS  has  a  lot  riding  on  the 
changes.  According  to  Robert 
Swan.  EDS’s  chief  financial  of- 


IBM,  Mayo  Clinic  Take 
Next  Data  Mining  Step 


I)B2-based  system 
contains  records 
on  4.4M  patients 

BV  BOB  BBEWIN 

IBM  and  the  Mayo  Clinic  last 
week  said  they  are  moving 
into  the  second  phase  of  a 
technology  partnership  aimed 
at  using  a  database  of  patient 
records  to  foster  what  Dr. 

Nina  Schwenk,  who  heads 
Mayo's  IT  operations,  gati<  the 
Holy  Grail  of  medicine:  indi¬ 
vidualized  patient  ueatment. 

IBM  and  the  Mayo  Founda¬ 
tion  for  Medkal  Education 
and  Research,  the  formal 
name  for  the  Rochester, 

Mitm. -based  nonprofit  health 
care  organization,  announced 
that  they  were  teaming  up  to 
early  2002  fQuickLink  283951. 
After  initially  putting  the  med¬ 
ical  records  of  about  4A  mil¬ 
lion  patients  treated  at  Mayo’s 
three  clinics  into  a  DB2  data¬ 


base.  IBM  and  Mayo  have 
spent  the  past  two  years  devel¬ 
oping  and  testing  a  method- 
o]<^  for  mining  the  data. 

Now  they  want  to  analyze 
information  about  patients  in 
new  ways  and  compare  indi¬ 
vidual  medical  records  to  data 
about  other  patients  who  have 
similar  disease  characteristics 
and  genomic  makeups,  said 
Schwenk.  IBM  and  Mayo  hope 
to  use  the  results  to  fine-tune 
treatments,  she  added. 

For  example,  a  doctor  treat¬ 
ing  a  patient  for  cancer  could 
use  the  data  mining  system  to 
discover  the  results  of  treat¬ 
ments  given  to  the  last  500 
patients  who  had  cancers  that 
were  located  in  the  same  spot 
and  had  identical  genetic 
characteristics. 

The  individualized  care 
made  possible  by  such  infor¬ 
mation  could  one  day  replace 
current  blanket-treatment  ap¬ 
proaches  based  on  standard 


diseases,  said  Drew  Flaada. 
IBM's  director  of  the  partner¬ 
ship  with  Mayo.  He  added  that 
Mayo  researchers  will  use 
Blue  Gene  to  do  “deep  com¬ 
puting  and  deep  science.”  in¬ 
cluding  mathematical  model¬ 
ing  and  a  simulation  of  gene 
structures  to  help  predict  the 
behavior  of  diseases. 

The  Blue  Gene  system, 
which  is  located  at  an  IBM 
facility  in  Rochester  near 
Mayo's  headquarters,  has  a 
theoretical  computing  capac¬ 
ity  of 360  trillion  floating¬ 
point  operations  per  second. 
IBM  and  Mayo  are  doing  de¬ 
velopment  work  on  an  IBM 
p650  Unix  server  that's  owned 
by  the  clinic,  and  they  use  a 
higher-end  p690  machine  as 
the  production  system  that 
stores  the  patient  records  in 
DB2.  The  servers  are  based 
on  IBM's  Power4  processors 
and  run  its  AIX  operating 
system. 

Schwenk  wouldn’t  disclose 
the  investments  being  made 
by  IBM  and  Mayo,  but  she  said 
the  amount  of  funding  is  “sig- 
nifleant  —  a  lot  of  zeros  on 
both  sides."  O  40668 


medical  protocols,  according 
to  Schwenk.  Instead  of  treat¬ 
ing  cancer  patients  with  a 
common  stew  of  chemother¬ 
apy,  drugs  could  be  tailored  to 
fit  specific  cases,  she  said. 

IBM  plans  to  use  its  Blue 
Gene  supercomputer  on  the 
project  to  do  advanced  molec¬ 
ular  modeling  for  researching 


fleer,  the  N/MCl  deal  “contin¬ 
ues  to  be  a  drag:"  on  the  firm, 
with  a  $12  million  reported 
drop  in  revenue  compared 
with  last  year  due  to  a  decision 
earlier  this  year  not  to  defer 
construction  costs  related  to 
the  contract  In  addition,  Jor¬ 
dan  acknowledged  that  contin¬ 
ued  ■\mcertainty”  surrounding 
the  deployment  of  N/MCI 
seats  at  the  Navy’s  Bureau  of 
Medicine  and  Surgery  yielded 
a  $100  million  negative  cash 
flow  setback  this  year. 

Lorrie  Scardino^  an  analyst 
who  covers  EDS  and  N/MCI 
at  Gartner  Inc.  in  Stamford, 
Conn.,  said  the  changes  indi¬ 
cate  that  the  company  is  mov¬ 
ing  in  the  right  direction  but 
that  challei^es  remain  ahead. 

“I  don’t  think  that  EDS  is 
out  of  the  woods  yet  by  any 
stretch  of  the  imagination.” 
said  Scardino.  The  financial 
issues  loom  large.  Any  IT  ser¬ 
vices  provider,  especially  one 
the  size  of  EOS.  has  to  have 
stable  financials."  she  said. 

The  termination  last  week 
of  what  the  company  called  its 
"other  commercial  contract" 

—  the  troubled  deal  with  TTie 
Dow  Chemical  Co.,  which 
EDS  declined  to  identify  by 
name  during  the  July  28  earn¬ 
ings  call  —  is  another  positive 
sign,  said  Scardino  (sec  story, 
page  1).  However,  she  said 
EDS  faces  an  uphill  battle, 
since  IBM,  which  took  over 
for  EDS  on  the  Dow  contract, 
and  Hewlett-Packard  Ca  are 
the  leaders  in  the  utility,  or 
adaptive,  computing  market 
048668 


MLB.com  knows  the  power  of  SAS*  software... 


How  does  IVILB.com  give  fans 
the  ultimate  baseball  experience? 

\ 

Allan  H.  "Bud  Selig,  i.  • 


Millions  of  fans.  Thirty  teams.  One  passion.  And  24/7  access  to  it  all  through  MLB.com.  At  the  official  site 
of  Major  League  Baseball,  fans  can  experience  baseball  in  a  whole  new  way  -  from  live  ballgames  to  stats 
in  real  time,  from  history  to  fantasy,  across  the  league  or  by  conneeting  to  individual  club  sites.  MLB.com  is 
the  richesL  deepest  source  of  original  baseball  news  and  highlights  on  the  Internet.  SAS  is  proud  to  protide 
the  staterof-the-art  data  management,  predictive  analytics  and  marketing  automation  software  that's  helping 
Major  League  Baseball  enrich  the  interactive  experience  for  the  hundreds  of  millions  of  visitors  who  make 
MLB.com  such  a  big  hit.  To  find  out  more  about  SAS,  visit  our  Web  site  or  call  toll  free  I  866  887  1363. 

www.sas.com/mlb 
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Online  Data 

rages,  floor  plans  of  office 
suites,  and  concaci  names  and 
phone  numbers  for  the  tele¬ 
communications  service  pro¬ 
viders  that  serve  the  building. 

Maria  Gemskic.  a  spokes¬ 
woman  for  the  Chicago  Board 
of  Trade,  said  the  exchange 
could  not  comment  publicly 
about  specific  security  pre¬ 
cautions  being  put  in  place. 
But  she  stressed  that  “all  as¬ 
pects  of  security  are  taken 
very  seriously  and  we  are 
looking  into  [our  Web  con¬ 
tent]  as  well" 

But  information  like  that 
posted  on  the  cxchan^'s  Web 
site  can  be  a  gold  mine  for  ter¬ 
rorists.  security  experts  said. 

A  senior  intelligence  official  at 
the  DHS,  speaking  on  condi¬ 
tion  of  anonymity,  said  the 
recent  capture  of  al-Qaeda 
computer  expert  Muhammad 
Nacem  Noor  Khan  in  Pakistan 
yielded  a  computer  filled  with 


photographs  and  floor  dia¬ 
grams  of  buildings  in  the  U,S. 
that  terrorists  may  have  been 
planning  to  attack. 

“Not  thinking  through  the 
security  Implications  of  some 
of  the  information  put  online 
can  be  a  very  dangerous  mis¬ 
take,"  said  Amit  Yoran.  direc¬ 
tor  of  the  National  Cyber  Se¬ 
curity  Division  at  the  DHS. 
“The  Pentagon  has  looked 
very  closely  at  this  issue,  and 
certainly  corporate  America 
should  do  the  same."  In  fact. 
Yoran  said  the  situation  is  se¬ 
rious  enough  that  the  DHS 
may  need  to  look  into  publish¬ 
ing  best-practices  guidelines 
for  companies  to  follow. 

Unheeded  Wanmgs 

Eric  Fricdberg.  managing 
director  of  New  York-based 
security  firm  Stroz  Friedbcrg 
LLC.  said  (he  warnings  about 
sensitive  Web  site  postings 
that  his  company  took  to  the 
private  sector  two  years  ago 
have  "fallen  on  deaf  ears" 
iQuickLink  270591. 


MacDonnell  Ulsch,  manag¬ 
ing  director  of  [anus  Risk 
Management  Inc.  in  Marlboro. 
Mass.,  said  making  this  type 
of  information  available  is  in¬ 
excusable. 

“It  may  make  it  easier  for 
contractors  and  service  pro¬ 
viders  to  do  their  jobs,  but  the 
risk  may  exceed  the  benefit,” 
said  (Jlsch.  “A  well-trained  en¬ 
gineer  can  easily  discern  the 
greatest  points  of  vulnerabili¬ 
ty  in  a  building  by  analyzing 
the  design.  Making  this  infor¬ 
mation  available  is  a  funda¬ 
mental  mistake  with  deadly 
comurqucnces." 

According  to  Ulsch,  what 
companies  do  or  fail  to  do  in 
response  to  a  threat  is  a  direct 
result  of  their  understanding 
of  the  risk.  Consequently, 
when  companies  are  told  to 
beware  of  terrorists  driving 
truck  bombs  into  or  r»ear  their 
buildings,  they  deploy  con¬ 
crete  barriers,  he  said 

And  that  seems  to  be  exact¬ 
ly  what  has  happened  m  the 
aftermath  of  the  latest  threat- 


security  im^ica- 
tionsofsoineof 
the  infbnnation 
put  online  can  be 
averydangatxis 
mistake. 


I  AMIT  YORAM.  OIRECTOfi. 

'  NATIONAL  CYBER  SECURITY 
DIVISION  OF  THE  DHS 

level  increase,  with  most  firms 
focusing  on  redundancy  and 
recovery  while  paying  very  lit¬ 
tle  attention  to  countersurveil- 
lancc  and  information  control 
Sylvain  Pendarics.  CIO  at 
CDC  Ixis  North  America  Inc. 
in  Manhattan,  said  previous 
terror  alerts  have  loosened  the 
purse  strings  of  executives  in 
his  company,  enabling  him  to 
complete  disaster  recovery 
plans.  CIK:  Ixis  in  February 
completed  an  upgrade  to  its 


communications  network, 
moving  from  two  T3  lines  to  a 
Sonet  ring  that  connects  sites 
in  New  York  and  New  Jersey 
at  OC48  port  speeds. 

While  an  increased  focus  on 
disaster  recovery  is  necessary, 
Yoran  said  the  lack  of  focus  on 
blocking  cybersurveillance  ac¬ 
tivities  stems  from  a  discon¬ 
nect  between  the  terrorist 
alert  system  and  the  role  of 
cybersecurity  in  homeland  de¬ 
fense.  “In  practical  terms,  tun¬ 
ing  a  firewall,  changing  para¬ 
meters  on  antivirus  software 
and  advocating  more  frequent 
password  changes  don’t  really 
line  up  with  the  different 
threat  levels,"  he  said. 

Michelle  Petrovich,  a 
spokeswoman  for  Robert  Us- 
couskl  assistant  secretary  for 
infrastructure  protection  at 
the  DHS.  said  that  while  com¬ 
panies  have  the  right  to  post 
whatever  information  they 
want,  the  DHS  encourages  all 
companies  to  add  Web  site  re¬ 
views  to  their  list  of  preventive 
security  measures.  O  48682 
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Dow 


now:  a  VoIP  network  serving 
its  46,000  employees  in  63 
countries. 

“It  was  really  the  pioneer 
days  in  2001,"  said  Jim  Slaby, 
an  analyst  at  The  Yankee 
Group  in  Boston.  Dow  “is  one 
of  these  unfortunate  casualties 
of  living  out  on  the  edge.” 

IBM  officials  said  they 
don't  know  how  much  of  the 
prior  work  will  be  useful  The 
company,  in  its  discussions 
with  Dow.  foctised  on  setting 
requirements  and  not  on  pri¬ 
or  work.  “We’re  not  obligated 
by  any  previous  architecture 
and  design.”  said  Todd  Kirt- 
ley.  general  manager  of  the 
industrial  sector  at  IBM  Glob¬ 
al  Services. 

All  Kirtley  would  say  about 
the  prior  work  was  that  Dow 
”did  not  get  (be  traction  they 
were  hopir^  to  get.” 

IBM’s  seven-year  outsourc¬ 
ing  ^^ment.  which  it  de¬ 
clined  to  value,  covers  opera¬ 
tion  of  Dow's  global  IT  infra¬ 
structure.  Tliat  includes  sup- 
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porting  servers,  desktops 
and  e-mail:  prov'iding  storage 
I  and  network  bandw  idth  un¬ 
der  a  utility  pricing  model; 

I  and  building  the  converged 
network. 

The  odds  truy  have  been 
against  Dow  from  the  sian. 
Analysts  say  it  was  just  too 
far  ahead  of  its  time.  In  2001, 
“people  didn’t  understand  all 


the  issues”  involved  in  deploy 
ing  a  converged  network,  said 
Bob  Hafncr.  an  analyst  at  Gar 
net  Inc.  And  some  core  tirch- 
nologies  were  unavailable.  Fo; 
instance,  “we  didn’t  have  the 
tools  to  do  network  certifica¬ 
tion,"  Hafner  said. 

A  third-party  consultant 
who  worked  on  the  DowNET 
VoIP  project,  who  spoke  on 
condition  of  anonymity,  said 
the  project  ran  into  delays  be¬ 
cause  replacing  legacy  sys¬ 
tems  proved  to  be  very  diffi¬ 
cult.  and  there  were  unantici¬ 
pated  problems.  For  instance, 
security  systems  that  used 
analog  technology  didn't  nec¬ 
essarily  work  on  a  VoIP  net¬ 
work.  “There  was  definitely  a 
lot  of  poor  planning,”  the  con¬ 
sultant  said. 

Moving  On 

EDS.  Dow  and  Cisco  Systems 
Inc.  —  the  main  technology 
provider  under  the  original 
contract  ^  all  declined  re¬ 
quests  for  interviews  to  dis¬ 
cuss  the  projccL 
How  much  was  lost  by  any 
of  those  companies  is  difficult 
I  to  determine.  On  July  28  EDS 


said  it  had  reached  an  agree¬ 
ment  to  terminate  a  commer¬ 
cial  contract  that  it  didn’t 
identify  and  reported  a  $13.5 
million  pretax  termination- 
related  charge. 

But  whatever  problems 
EDS  encountered  with  the 
Dow  project,  they  apparently 
haven’t  affected  its  outsourc¬ 
ing  deal  Wfiih  Bank  of  America 
Corp.  Indeed,  that  relationship 
was  recently  expanded.  EDS 
and  Bank  of  America  are 
buildmg  a  converged  network 
that  appears  to  be  bigger  than 
I  Dow’s,  serving  about  180.000 
employees. 

Last  month,  EDS  signed  a 
Sl.l  billion  outsourcing  deal 
with  the  bank,  which  is  an 
addendum  to  a  2002  outsourc¬ 
ing  agreement  valued  at  S4.S 
billion  that  was  intended  to 
integrate  FleetBoston's  com¬ 
munications  infrastructure 
with  Bank  of  America’s.  Char¬ 
lotte,  N.C.-based  Bank  of 
America  announced  its  merg¬ 
er  agreement  with  Fleet¬ 
Boston  last  year. 

Steven  Venezia,  managing  I 
director  of  the  network  com-  I 
puting  group  and  network  ser-  I 


'  vices  at  Bank  of  America,  said 
the  bank  is  thoroughly  plan¬ 
ning  and  testing  every  aspect 
of  the  network  project. 

“I’m  confident  (because] 
nothing  will  forge  ahead  un¬ 
less  it’s  proven.”  said  Venezia, 
noting  that  the  bank  has  mul¬ 
tiple  pilots  in  pr(^res.s.  If  all 
goes  according  to  plan,  the 
bank  could  have  an  initial 
rollout  at  selected  locations 
next  year. 

Venezia  said  EDS  has  met 
97%  to  98%  of  the  bank's  ser¬ 
vice  delivery  requirements. 

048668 


CtailfluNiDn 

hlla  rtny 'Eliott  Moot  lo 
Mdns  EAMng  at  Connniion' 
in  our  ioaue.  M  nporlod 

ttiat«lota.C8)atEloction 
Syrtom  A  SafhMrtB  tnc.  con- 
MXodtUOOIoouglillie 
COnmdoi  tvdml  Brt*  pol- 
WcaliOlonconnnK  Kstarti 
benoMVallortinodotheoan- 
mtiJlui  In  Mori  1999.  Hior 
lo|oMnoeS9SonNov.tol 

iritori. 


1 


MHIiniUb|rtl.!N4 


OPINION 


WWW  computerworld  com 


MARYFRAN  JOHNSON 


Roll  \bur  Own  Future 


Now  HERE’S  A  REAL  CLASSIC  on  the 
comeback  trail:  developing  your  own 
applications.  Sounds  so  retro,  doesn’t 
it?  The  kind  of  thing  start-ups  do 
when  the  CEO  doubles  as  the  chief 
product  engineer  and  surrounds  himself  with  a 
cabal  of  MIT  grads  writing  code.  So  what’s  going 
on  when  large  pharmaceutical  companies,  insurers, 
hotel  chains,  health  care  providers  and  online  pow- 


erhouses  like  travel  finn 
Orbitz  are  found,  in  this 
day  and  age,  productively 
rolling  their  own? 

Computerwor/d  re¬ 
porter  Gary  H.  Anthes  an¬ 
swered  that  question  last 
week  in  his  cover  story 
about  the  many  sensible, 
cost-savii^  and  even  sur- 
prisii^  reasons  why  com¬ 
panies  build  their  own  ap¬ 
plications  rather  than  buy¬ 
ing  into  more  packaged 
software  [“RoU  Your  Own."  Quick- 
Link  47884].  What  he  uncovered  flics 
in  the  face  of  conventional  wisdom 
that  buying  is  better  than  building  — 
a  belief  assiduously  promoted  by 
software  vendors  of  all  sizes. 

And  no  wonder  The  lifeblood  of 
so  many  software  companies  increas¬ 
ingly  flows  directly  from  their  main¬ 
tenance  and  support  fees,  which  have 
risen  to  nosebleed  levels  of  18%  to 
25%  annually  to  ofiset  the  economic 
drag  of  lower  sales  in  recent  years. 

Take  Oracle  as  Exhibit  A.  When 
the  database  maker  posted  its  finan¬ 
cial  results  in  mid-June,  the  single 
biggest  factor  cited  as  offsetting  its 
slow-moving  application  sales  was 
rapidly  growing  revenue  from  those 
fat  fees  for  software  maintenance. 
That  revenue  is  increasiog  nearly 
twdee  as  fast  as  new  license  revenue. 
CEO  Larry  Ellison  said. 

But  it’s  not  fuse  the  high  cost  of 
applications  and  their  hefty  annual 
fees  that  are  driving  development  of 
homegrown  applications.  Ranking 
high  as  reasons  for  this  approach  are 
dissatisfaction  with  complacent  ven¬ 


dors  that  don’t  respond 
quickly  enough  to  user 
needs,  and  dismay  over 
soffware  suites  over¬ 
loaded  with  features  and 
fiendish  complexity.  At 
Reinsurance  Group  of 
America,  for  example,  a 
$35  million  global  enter¬ 
prise  administration  sys¬ 
tem  that  was  developed 
in-house  not  only  fueled 
a  competitive  leap  past 
the  company's  rivals  but 
also  was  vastly  preferable  to  the  night¬ 
mare  alternative  of  integrating  more 
than  a  half-dozen  commercial  pack¬ 
ages  to  provide  similar  capabilities. 

Yet  the  greatest  reason  of  all  to 
roil  your  own  is  the  ability  to  tailor 
rr  to  your  business,  to  control  the 
fate  of  appUcations  too  vital  to  trust 
to  outside  developers.  It’s  about  en- 


I  abling  (may  Nicholas  Carr  forgive  us 
I  here)  a  competitive  edge  that  really 
does  matter. 

At  Reliant  Pharmaceuticals,  for  ex¬ 
ample,  CIO  Ron  Calderone  wisely 
heeded  user  resistance  to  complicat¬ 
ed  sales  force  automation  tools  and 
built  a  relatively  simple  system  using 
speech  recognition  technology  for 
the  field  agents.  A  packaged  SFA  sys 
tern  would  have  cost  S4  million  to  $6 
million,  Calderone  reckoned,  but  he 
delivered  just  what  his  business  com 
rades  needed  for  about  15%  of  that 

“Simple  and  inexpensive"  are  of¬ 
ten  the  magic  words  associated  with 
the  best  in-house  application  proj¬ 
ects.  We’re  hearing  that  mantra  more 
often  these  days,  particularly  as 
open-source  software  carves  inroads 
at  the  enterprise  level  As  Orbitz 
(TTO  Chris  Hjelm  put  it  in  our  story, 
“We  are  largely  an  open-source  shop, 
so  when  we  think  about  buying  soft¬ 
ware.  there’s  a  general  aversion  to  it" 

The  “buy  vs.  build"  debate  will  no 
doubt  go  on  forever.  But  the  combi¬ 
nation  of  open-source  software  with 
sophisticated  development  tools  and 
standardized  Web  services  is  dra¬ 
matically  changing  the  face  of  that 
aigument.  When  companies  go  look¬ 
ing  for  technical  creativity,  innova¬ 
tion  and  a  competitive  edge,  they 
won’t  be  buyii^  that  off  anybody's 
shelf  but  their  own.  O  48^ 
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MICHAEL  H.  HUGOS 

The  Systems 
Builfc  as 
Leader 

IN  MY  COLUMN  last  month 
[QuickLink  47673],  I  de¬ 
fined  systems  builder  as  a 
person  who  is  central  to  the 
success  of  any  systems  devel¬ 
opment  project.  This  person 
possesses  skills  in  two  main  areas: 
designing  systems  and  leading  projects 
to  build  systems.  I  then  looked  at  the 
five  basic  skills  needed  for  designing 
systems.  This  month.  I'll  discuss  the 
six  practices  that  are  the  basis  for  suc¬ 
cess  in  leading  projects. 

In  my  years  of  experience  in  devel¬ 
oping  systems  and  watching  others  do 
so,  1  have  found  these  skills  to  be  the 
essence  of  project  leadership.  The 
more  accomplished  the  systems 
builder  is  in  these  ar¬ 
eas.  the  higher  the 
success  rate. 

1.  Ba  an  effaettw  com- 
municalorindiwgotift- 
tor.  The  systems 
builder  as  designer 
collaborates  with 
others  to  create  a 
compelling  system 
vision.  The  systems 
builder  as  leader 
communicates  this 
vision  in  a  way  that 
attracts  people  and 
motivates  them  to 
act.  This  means 
clearly  describing 
a  system’s  features 
and  benefits  to  a 
business  and  a  tech¬ 
nical  audience  and  showing  how  de¬ 
velopment  will  progress  from  vision  to 
realiry.  Systems  builders  may  not  all  be 
great  public  speakers  or  have  outgoing 
personalities,  but  they  And  ways  to  use 
the  talents  they  do  have  to  get  the  mes¬ 
sage  across  and  win  support. 

2.  Sat  high  atandanla  nd  VMt  npacUi^ 

People  want  to  participate  in  projects 
that  they  believe  will  improve  their 
skills  and  bring  them  recognition  and 
rewards.  So  the  systems  builder  sets 
high  standards  for  performance  and 
helps  people  to  attain  them.  The  sys¬ 
tems  builder  also  paints  a  picture 
highlights  all  the  great  things  the  proj- 
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ect  will  bring  aboui.  As  Daniel  Bum- 
ham.  the  great  Chicago  architect,  said. 
“•Make  no  small  plans.  They  have  no 
magic  to  stir  men’s  blood." 


3.  Detegate.  d 


o.<Me0ate.  All 


well-defined  proiects  have  a  set  ©fob 
jeetives  or  milestones  that  must  be 
reached  in  order  to  finish  the  project. 
The  systems  builder  delegates  the  ac¬ 
complishment  of  these  objectives  to 
the  qualified  people  who  have  been 
attracted  to  the  project.  (If  no  quali¬ 
fied  people  have  been  attracted,  then 
stop  the  project.)  Along  with  delegat¬ 
ing  responsibility  to  achieve  objec¬ 
tives,  the  systems  builder  also  works 
to  provide  people  with  the  resources 
they  need  to  do  their  jobs.  In  this  re¬ 
spect.  the  systems  builder  becomes 
the  servant  of  the  people  working  on 
the  project. 

4.  BearaiUils.  Delegating  work  does 
not  mean  delegating  ultimate  responsi 
billty  for  the  project.  Systems  builders 
stay  actively  involved.  They  hold  regu¬ 
lar.  weekly  project  meetings  that  are  a 
forum  for  honest  discussions  about  is¬ 
sues.  and  they  have  an  open-minded 
approach  to  resolving  the  problems 
that  arise.  Systems  builders  leant  that 
in  most  cases  their  people  already  have 
or  can  quickly  come  up  with  good  an¬ 
swers  to  problems  if  they  are  able  to 
discuss  the  situatioo  and  get  the  sys¬ 
tems  builder's  thoughts  to  help  them 
in  their  own  thinking. 

5.  BedKahn.  Key  leadership  decisions 
often  involve  the  allocation  of  re¬ 
sources  to  achieve  project  objectives. 
When  a  development  team  runs  into 
an  obstacle  that  demands  the  realloca¬ 
tion  of  resources  or  the  redefinition  of 
an  objective,  the  systems  builder  must 
get  directly  involved.  The  systems 
builder  includes  the  appropriate  peo¬ 
ple,  does  the  best  analysis  within  the 
time  available,  makes  decisions  and 
moves  on.  If  the  systems  builder  isn’t 
wilting  to  make  the  tough  decisions 
when  necessary,  then  no  one  else  will 
cither,  and  the  project  will  lose  mo- 
meruum  and  start  to  drift. 

6.  Act  wMi  MMigy  and  focus.  As  a  projea 
progresses,  constant  effort  is  required 
to  sell  the  project  and  its  benefits.  The 
systems  builder  constantly  encourages, 
cajoles  and  assists  people  to  keep  up 
the  pace  of  work  needed  to  finish  on 
lime  and  cm  budget.  Leaders  lead  by 
example.  They  lead  from  the  front 
The  systems  builder's  presence  and 
demeanor  sets  the  tone  for  the  whole 
project  and  is  a  large  part  of  triut 
keeps  people  motivated  and  focused 
00  the  wo^  that  needs  to  be  done. 
047872 
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Telecom: 

Opportunity, 

Frustration 

WHAT  does  telecom¬ 
munications  mean 
to  you?  For  most 
C-level  IT  managers,  it’s  the 
greatest  source  of  short-to-imennedi- 
ate-ierm  cost  reduaions.  the  sector  of 
greatest  long-term  strategic  confusion, 
their  seif-acknowledged  zone  of  great¬ 
est  ignorance  and  the  source  of  their 
biggest  all-around  tactical  day-to-day 
administrative  frustration. 

These  are  the  conclusions  of  a  sur¬ 
vey  and  a  series  of  interviews  conduct¬ 
ed  at  the  most  recent  CIO 
Solutions  Gallery  at  Ohio 
State  Univcrsiiy’s  Fisher 
Collie  of  Business. 

A  fretuy  of  contract  rene¬ 
gotiations  is  delivering  cost 
reductions  that  could  make 
even  the  most  frugal  CFO 
almost  feel  guilty.  Those 
pricii^  improvements,  com¬ 
bined  with  a  trend  within 
companies  of  standardizing 
the  equipment  installed  in 
their  networks  and  consoli¬ 
dating  their  network  ser¬ 
vices  to  fewer  carriers,  is 


putting  many  telecom  suppliers  in  a 
tough  situation.  As  one  CIO  explained. 
"Prices  are  dropping  ail  over  ilw  pbce. 
I  am  always  re-evaluating  my  technol¬ 
ogy  stack.  I  am  always  squeezing  my 
providers.  I  am  currently  of  the  mind 
that  short  contracts  are  generally  in 
your  favor,  and  negotiating  a  contract 
midcontract  Is  a  good  thing  to  do." 

Meanwhile,  a  general  rethinking  of 
telecommunications  is  under  way  and 
contributing  to  the  strategic  confo- 
sion.  enable,  wireless  and  fixed-line 
telephone  carriers  are  rapidly  entering 
one  another's  businesses.  What  previ¬ 
ously  were  nondecisions  are  suddenly 
up  for  grabs.  Who  will  provide  ser¬ 
vices  to  us.  and  what  will  they  supply? 
Phones  have  become  much  more  than 
phones.  Handsels  take  photos,  access 
the  Web.  and  send  and  receive  e-mail. 
Some  even  serve  as  PDAs.  More  tran¬ 
sition  is  inevitable,  with  the  arrival 
of  the  potentially  game-changing 
technologies  of  wireless 
and  VoIP.  Where  shottld 
wise  IT  leaders  place 
their  bets? 

And  then  there's  the  ig¬ 
norance  and  frustration 
that  telecom  causes.  De¬ 
signing.  operating,  engi¬ 
neering  and  troubleshoot¬ 
ing  very  large  IP-converged 
netwoAs  is  growing  more 
difttcult,  and  the 
needed  to  do  all  that  are 
becoming  increasingly 
scarce.  IT  leaders  are  the  ' 
first  to  admit  that  they  I 


RUDERS' LETTERS 


don’t  possess  deep  technical  in 
the  telecommunications  area.  At  the 
CIO  Conference  in  Pebble  Beach. 
Calif,  last  month.  1  asked  140  execu¬ 
tives  (via  an  interactive  electronic 
polling  system)  how  they  would  de¬ 
scribe  their  understanding  of  telecom: 
2flS  said  they  had  an  “excellent"  un¬ 
derstanding.  53**  said  “average."  and 
19%  said  "poor." 

But  the  responses  were  very  differ¬ 
ent  wrhen  I  followed  up  with  a  more 
specific  inquiry.  When  asked.  “If  your 
board  of  directors  asked  you  to  explain 
the  lii>c-itcm  detail  of  your  monthly 
iclecommunications  bill  would  you  be 
able  to  do  so?"  29%  said.  “No  worries: 
let’s  go  have  a  beer,"  32%  said  they 
were  “a  liilie  worried."  and  39%  said 
they  would  be  “in  a  world  of  hurt." 

One  CTO  summed  it  up  this  way: 
“There  are  no  telecomm  unications 
vendors  today  that  are  doing  a  great 
job:  they  all  need  to  be  closely  man¬ 
aged.  (Operational  performance  leaves 
much  to  be  desired,  and  billing  perfor¬ 
mance  is  even  worse." 

We  are  at  a  pivotal  point  in  the  man¬ 
agement  and  deployment  of  tciecom- 
muiucation  services.  Future-focused 
IT  leaders  would  be  well  advised  to 
spend  a  little  more  time  with  the  ven¬ 
dors  in  this  area,  do  some  homework 
and  put  together  a  plan  for  the  future. 
048S56 
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Ask  the  Right  Questions  When  Hiring 


W  HUE!  certainly  agree  wilh 
Paul  Glen  $  condusiORS  in  his 
colutnn'TheWro«TQSttrfr|()uick- 
link  47608 1. 1 ttank  there  is  a  larger 
problern  than  the  ones  he  crjveied. 
When  w«  hire  peopiB.  we  ask  the 
wrong  questions.  We  act  like  game- 
show  hosts,  hiring  petvie  MIed  with 
technical  trivia  We  need  to  hire 
people  who  know  how  to  use  the 
informafion  they  have  and  fmd  the 
inlormaiion  they  don't.  More  impor¬ 
tantly,  we  need  people  who  under¬ 
stand  that  software  development  is 
riiuthdiscgilinary  and  who  can  do 
whatever  It  tak^  even  when  the 
soidlon  is  far  from  programming. 
OavUDougiaea 
Technologtes  coRsuitonr. 
Bfoomirtgdale.  NJ^ 
david_douglass@ieeexirg 


The  big  questions  lo consider 
are:  can  a  firni  hire  good 

people  if  its  screening  process  is 
runbypeoptewhodon'lknowmy- 
thng  aboU  the  skBs  they  are  trying 
lo  screw?  How  can  you  lure  good 
people  if  your  HR  screeners  are  loo 
lazy  to  read  the  rgsurnes? 
deny  Masters 
Programsner/analyst. 

CUnton.  Miss. 

AS  someone  who  has  been 
lookno  for  work  lor  Ihe  past 
three  yews.  I  can  say  (hai  the  IS  the 
fust  afticie  I  have  read  that  exactly 
descrties  the  simess  of  the  hinng 
processtodayFacedwtfithou- 
sands  of  resumes,  how  can  hirng 
managere  scan  them  one  by  one 
and  vnagme  the  potentiaf  of  every 


cancMete?  They  cant,  so  by  seftng 

up  tight  raqiarements  they  hope 

that  Ihey  wi  hear  from  only  a  lew 

candidaies 

A.Laung 
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Customer  Councils 
Help  Govern  IT 

GREATarhcleonlhelTgover- 
nanceprocesspITGover- 
nancetsonlheHotSeat.'Ouck- 
Unk  48025}.  with  sad  statistics  on 
those  who  are  stM  hokkng  out  on 
lomiatzmglherpnicasses  Some¬ 
thing  your  readers  mght  wttit  to 
consider  is  Ihe  customer  counc4 
concepLCustomercoundharecre- 
atedatthetusmessuntoThne- 
tional-area  leief  and  are  Me  nni  IT 
steering commiHees  Theyreview 
(he  baridog.  vabdale  proiects  and 


requests  pnontize  and  are  even 
held  accountable  for  pwcas  of  the 
process  Hw  approwl.  budget  and 
testing  My  company  has  found 
much  success  wah  such  counols 
Carol  A,  Fawcett 
Vicr  presufmr  aftS. 

Quesr  Software.  Irvine.  Coiif. 

C()MPirrERW(MLO  welcornes 
comments  from  1(5  readers  Leders 
w4  be  edried  for  brewily  and  daray. 
They  should  be  adtksssed  to  Janee 
EcMs.  letters  eiMar.  CkimputBrwQrkl. 
PO  Box  9171. 500 Old  ConnectiQui 
^  Frammgham.  Mass.  OlTDt 
Fbl  (508]  879^843 
E-malf.  lettersigoomputerwuild  com 
fnekide  an  address  and  phone  num¬ 
ber  for  mnedHle  verifcaticn. 
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PUT  IT  IN  THE 
SERVER  ROOM. 

FEEL  IT  IN  THE 
BOARDROOM. 


Meet  the  IBM  eServer  •  p5  system  -  the  gameKthanging  UNIX”  server  that  can  bring  Instant  agility  to  your  business 
With  advanwd  IBM  Virtualization  Engine'  technology  options,  the  eSeiver  p5  system  is  the  only  UNIX  server  with  breakthrough 
Micro-Partitioning-  capabilities.  It  can  automatically  balance  resources  among  virtual  partitions  in  milliseconds.'  On  demand 
It  configures  and  adapts  on  the  fly.'  Add  apps.  Add  users.  Add  capabilities.  At  any  time.  And  gain  business  aglity  just  like  that. 
You  need  to  learn  more.  More  about  all  the  benefits  of  eServer  p5  systems  at  ibrn-comifeserver/boardroom 

_ ^  reasons  why  IBM  eServer  p5  systems  with  Power  Architecture'-'  technology  rule  in  UNIX  computing. 


Flexible,  fifth-generation 
POWER  processors. 


Capacity  on  Demand.-  Runs  IBM  AIX  SL" 
and  Linux. 


Advanced  system 
utilization. 


Virtual  servers  as  small 
as  V10  of  a  processor.' 


EMC  HELPS  YOU  MEET  NEW  COMPLIANCE  DEMANDS.  The  cause,  compt.ance  reguMn-  .  t-  . 

.  ••PSS  upon  IT  resources.  Now.  if  regulators  request  your  data  in  24  hours,  you  can  deliver,  no  quesiiuns 

■  ■  a^ion  lifecycle  management,  you  can  easil/  retrieve  archived  e-mail,  and  manage  vast  amount*,  fi!  o.jih 
■■  *■'  broadest  family  of  information-management  platforms,  software,  server".,  ,inri 
any  IT  challenge.  To  learn  more,  visit  www.EMC.rom  cr^mpirancp 
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Controiling 
Content  Chaos 

As  documents  and  Web  sites  mul¬ 
tiply  at  dizzying  rates,  companies 
are  turning  to  content  manage¬ 
ment  software  for  help.  Page  25 


SECURITY  MANA6ER'S  JOURNAL 

Merger  Interrupts  Sarfa-Ox  Project 

An  acquisition  prompts  a  break  for  a  last 
minute  security  audit  but  fails  to  slow  Sar 
banes-Oxley  compUance  efforts  at  Mathias 
Thurman’s  company.  Page  30 


FUTURE  WATCH 


User  Interfaces:  The  Next  Generation 


A  slew  of  emergii^  interface  technologies 
promises  to  enable  a  wider  range  of  human-computer 
interaction  than  is  possible  today.  But  don’t  throw 
away  that  mouse  and  keyboard  just  yet.  Page  28 


^IT  WAS  OBVIOUS  AS  2002  drew  to  a 
^  close  that  C^na  Corp.  would  have 
to  cut  costs.  Sales  at  the  Philadel¬ 
phia-based  health  insurance  bene¬ 
fits  company  had  risen  for  the  year,  to  $19  billioa 
but  earnings  had  plunged  from  $1  bUlion  a  year 
earlier  to  a  loss  of  almost  $400  million. 

For  Cana’s  IT  organization,  one  area  for  savings 
stood  out.  The  company  had  more  than  3.000 
servers  and  was  bringing  in  new  ones  by  the 
dozen,  but  server  utilization  was  inefficient.  “If 
you  had  a  new  application  project,  you  got  your 
own  boxes,  bou^t  your  own  servers  and  put  in 
your  own  software,”  says  Cigna  Chief  Technology 
Officer  Marcus  Shipley.  “Everything,  all  the  way  up 
the  applications  stack,  was  a  one-off  just  for  you, 
and  boxes  would  run  at  10%  to  15%  utilization.” 

The  way  to  get  more  out  of  its  servers.  Cigna 
realized,  was  by  virtualizing  them  —  enabling  a 
single  server  to  run  multiple  operating  systems,  ap¬ 
plications  or  versions  of  an  application  —  and  by 
enabling  dynamic  load  balancing  of  those  applica¬ 
tions  across  server  farms.  Cigna  hoped  virtualiza¬ 
tion  would  reduce  the  number  of  its  fUe-and-print. 
database,  application  and  Web  servers  by  25%. 

But  the  company's  multifaceted  virtualization 
program  became  much  more  than  a  simple  server 
consolidation  project.  It  included  aggressive  oper¬ 
ating  system  upgrades;  moves  to  new  hardware,  in¬ 
cluding  64-bit  processors,  blade  servers  and  stor¬ 
age-area  networks:  and.  most  important,  adoption 
of  nascent  virtualization  software  from  IBM  and 
Microsoft  Corp.  “It’s  based  on  the  ‘on-demand’ 
concept  of  IBM,  or  concepts  of  grid  computing," 
says  Benjamin  Flock.  Cigna’s  vice  president  for  ap¬ 
plication  frameworks  and  virtualiMtion.  “It’s  the 


The  insurer’s  cutting-edge  virtual  server 
I  deployment  is  on  track  to  cut  server  oper- 

X<L^ating  costs  by  25%.  By  Gary  H.  Aiithes 

^GOES  VIRTUAL 


CMraravmii  iqistijni 


Mpjrjiion  of  the  appliojtion  and  the  hostinj!  sen  ice.  | 
v*  Tve  irot  an  application,  and  as  lonj:  a.s  I  have  a  ser- 
V  ice  level  deilned  and  I  manjfte  that  service  level. 

It  shi'uld  be  transparent  where  it  runs."  Fk>ck  saiis  i 
C-iftna  is  on  track  to  reach  the  ftoal  of  a  J5^ii  reduction 
in  sener  opi'ratinji  espen.ses  by  vear  s  end.  and  he 
expects  additional  savings  in  sub.sequent  xears. 

Insurance  companies  aren't  known  for  pushing;  the  | 
edtte  »'f  the  IT  emekipe.  and  until  d003  Ci^na  was  no 
exception.  Then  the  pressure  to  cut  costs  and  the 
iremendouv  promise  of  several  emeriting  technolo¬ 
gies  propelled  the  company  into  beta,  alpha  and  even  | 
prealpha  pilot  projcsts  with  IBM.  Microsoft  and  Intel 
Corp  "We  tend  to  be  on  the  trailing  side,  but  now. 
with  these  activities,  we've  been  on  the  leading 
s'dge."  Flock  sa>s.  I  i 

Microsoft  Migration 

In  .Jtior.  (.tuna's  s\ stems  built  around  .Microstifi  ^ 

products  were  'in  dis,irrj\.''  says  (^hris  (lox.  an  ents'r-  2 
pri.se  architect  "We  had  two  versions  of  Visual  Basic  ^ 
ih.ii  people  were  des eloping  with.  di/Tercni  versions  i. 
of  dat.i  access  components,  different  versions  of  f 

database  tcchnoli^k-s.  Since  c\cryK»dy  had  their 
•  n  nuchincs.  they  just  used  vc  hat  they  vs  ere  accus-  E 
tomeJ  to  using  .\nd  the  pnvJuction  environment  I 
h-idewn  ro*.sible  combinatiivn. "  a 

''••v-.irlv  last  vear.  Cigna  kicked  otT an  aggressive  ti 
miurjtion  to  MicroMifi  W  mJows  Server  ’IHI.C  That  ii 
pro.i.  t  bet:  in  even  before  the  final  version  of  the  tip-  d 

I  r.it.ne  sy-tiTii  was  n.‘leaseJ,  cdgn.i  signed  on  to  o 

Micr-'-ojt's  Kapid  .Adoption  I'r«*gram  .ind  in  the  c 

pn'ci  's  reduced  its  interna!  server  ccrtillcation  time 
•Tom  IJ  months  to  iust'*Kt  d.i\s  j, 

W  tnJows  Server  2i>4.5  bring-,  .ipplication  partition-  b 
ing  .itij  i-Miiurion  capabilitk^v  lo  the  Net  Framework  C 
development  .ind  marugcmeni  tools,  allowing  t:igna  K 
lo  run  sever.il  similar  spplic.itMinv  concurrently  on  a  m 
single  se.-ver.  Its  t  .tiM  ■  feature  isolates  versions  of  a 
I  oDtponeni  '!•  they  c.in  run  sioiuhancously  on  one 
.  server  md  it  jIIoivs  v'lgn.i  to  install  multiple  applica-  T 
uoHsor  vt-fvions  on  the  s.ime  sen  t-r  w  iihout  having  pi 

to  upgr.iJi  each  i«ne  and  then  test  it  for  the  new  en-  h; 

viP‘li’tun!  It  also  enables  Web  appiieation  "piuijing.^ 
vuilfi'  rnet  lnlorm.ition  Si-rvices  n.  for  running  mul-  (f 

iipit  W.  p  ..pplic.itions  mdepe-ndeiitly.  ni 

F.iil.i  r  sjv  or  more  servers  might  bv  dedic.iied  to  a  er 
->i;t  ill -tl  pd.  ation  one  each  for  Jtveloptneni.  unit  of 
ti  siiru:  'V  -teni  testing.  enJ-uscr  acceptance  testing,  vo 
prcpr.»Jucrion  mJ  production.  W  ith  partitioning.  "ri 
m.iny  oj  those  iuncti>>ns  c.in  be  periortrii  j  on  a  sin-  w  i 
glc  server  •«  lur  entire  server  em ironini-nt  will  be  wi 
built  out  to  Windows  Server  2iN>t  by  th«-inJofthe  th 
>•  .If  Ili.it's  .»  big  deal.  Flock -sivs  hu 

In  a  sc-sonJ  lltat«>r  thrust,  early  this  vear  <  .ign.i 
.oiiied  MuTosoft's  |oini  I  »e\cl»*p/ni-nt  Program  lor  TI 
\  irtti.il  sirvc-r  2nos  That  prcsluci  i.ikes  .1  s^iftw.irc  Si 
ippn>ach  to  pariiiioniiig  th.n.  with  W  indows  server  <  i 
’"“.V  will  let  t:ign.i  run  multiple  instances  of  the  it  1 
opcTiiing  sv  stem  simultaneously  on  one  machine.  W. 
"It  jlliivts  us  to  split  the  hardware  into  logical  parti  Se 
(ions  like  we  .Jo  on  the  maini'ramv."  explains  Larry  \i>. 
Hrandolph.  enterprise  technical  architeci  at  Cigna.  inj 
“Vou  get  a  bo-se  Os,  then  \'irtual  .Sener  on  top  (T 

ol  that,  and  three,  four  or  livc'gucst  m.ichines'  on  (0 
t'*p  tiftlui." 

( jgrui  IS  testing  a  beta  version  of  V'irtual  Server  ser 
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THE  PAPER  AND  INK  USED  IN  THE  ORIGINAL 
PUBLICATION  MAT  AFFECT  THE  QUALITY  Of 
THE  microform  EDtTION. 


2005  and  is  using  an  alpha  version  of  the  V'irtual 
Serv  er  Migration  Tinilkit  to  migrate  its  applications 
to  virtual  machines.  Micnisoft  says  it  will  ship  both 
products  later  this  year. 

Extending  WebSphere 

In  parallel  w  ith  its  Microsoft  migration.  Cigna  began 
an  aggressiv  e  move  from  IB.M's  WebSphere  Applica¬ 
tion  Scrv  or  ?  to  Version  5.  "WV  decided  to  go  direct 
to  \crsi«*n  s  bec.nise  of  its  clustering  and  centralized 
dcpl»>y  mem  and  its  belter  isolation  and  management 
ol  applications  in  a  shared  services  model. "  Flock 
cxpl.iiijs. 

•And  early  last  year.  Cigna  bcg.in  working  with  IBM 
in  its  High  IVrforinancc  i)n  l>em.ind  'volutions  lab  to 
help  Jefine  requirements  for  s«>ftware  codc-named 
Cay  uga.  Soxc  .1  beta  product  called  WebSphere  f-x 
tended  IVpliryment  i.\l»>.  it  can  partition  jobs  .icross 
multiple  processors,  dat.ibascs  and  .application 
sc-rvers. 

(  igna  is  now  using  XI>  in  a  prooi'-of-conccpt  test. 
The  company  hopes  it  will  pnw  iJo  utility  like  eom- 
pute  cycles  on  demand  sx*  that  every  server  doesn't 
have  to  be  conllgured  to  handle  peak  loads. 

As  head  xil  systems  testing  and  quality  control, 
(lerald  Mchonald  is  instrumental  in  proving  out  the 
new  virtiializati.vii  concepts  at  (  igna.  But  as  the  own¬ 
er  *il  servers,  he  also  we.irs  a  usi-r  hat.  Some  .<()B 
of  his  Windows  :iHUi  and  W  indows  \7  servers 
would  have  to  be  repLiced  in  the  coming  year  at  a 
"refresh  cost  ii|  almost  S'l  million,  he  says.  Now. 
with  K-tler  uiilizaiioii  »if  his  01  K> other  servers,  he 
w  ill  h.nc  to  buy  far  fewer  replacements.  "Up  until 
(he  virtiiali/iition.  we've  never  had  any  alternative 
but  to  repia\.e  tho.se  machmes.'  .MclV>n.ild  savs 

The  Next  Big  Thing 

Sow  on  (rack  to  meet  its  s^-rver  consoliJ.iiion  gixiis. 
Cigna  is  Living  pl.ms  for  the  next  big  phase-,  in  which 
It  w  ill  augment  the  sh.ired  sen  icvscap.ibiliiies  in 
WebSphere  5.  W  indowsServerdlUt.^and  Vinual 
Server  2(H)5  with  new  technologies  for  dynamic  pro- 
V  isitining  .ind  on-demand  computing.  Cigna  is  Imik- 
ing  hard  at  IBM  s  Pivoli  Intelligent  Orchcstraior 
(TlOi  and  Microsoft's  Dynamic  Systems  Initiative  j 
t  nsi  >.  Nnh  of  which  promise  u»  "virtiwiize  the  data 
center,  as  Fhwk  puts  it,  The  idea  is  to  make  .ill  ! 

sen  ers  available  to  all  appllcaiion-v  with  excess  ca-  i 


pacity  anywhere  acting  as  a  buffer  against  unexpect¬ 
ed  demand  peaks. 

TIO.  for  example,  would  sit  on  top  of  all  Cigna  sys¬ 
tems  —  mainframe,  midrange  and  distributed,  both 
IBM  and  non-IBM  —  spanning  multiple  boxes  and 
subsystems.  It  would  monitor  the  efficiency  of  the 
network  and  constantly  balance  the  workload  by 
sending  peak  workloads  to  underused  hardware  and 
softw’arc. 

As  for  DSl,  "Microsoft  has  not  evolved  that  into  a 
product  strategy  yet.  but  since  we  have  worked  very 
closely  with  Microsoft  and  done  a  lot  of  work  apply¬ 
ing  Virtual  Server.  Windows  Server  2003  and  .Net 
technology  to  build  out  shared  capabilities,  we'll 
probably  be  one  of  the  early  adopters  in  that  space." 
Flock  says. 

Corey  Ferengul,  an  analyst  at  Meta  Group  Inc.  in 
,  Stamford.  Conn.,  says  Cigna  is  a  virtualization  pio- 
j  neer.  "Most  organizations  in  the  next  three  to  five 
j  years  will  be  using  virtualization  in  some  major  part 
of  their  organization,  he  says.  "Most  are  deploying  it 
,  in  test  and  QA  environments,  and  it's  just  beginning 
to  make  its  way  into  production  env  ironmenis. " 

But  there  are  risks  for  early  adopters.  "The  biggest 
le.ir  is  that  as  you  layer  on  diflercnt  virtualization 
technologies,  there  are  no  clear  interfaces  between 
them.  Management  of  the  physical  layer  is  pretty 
much  figured  out.  but  the  v  iriual  Liyer  is  still  black 
magic."  says  Ferengul.  '  rhey  need  tt«  think  very  care¬ 
fully  about  how  to  do  root-cause  analysis,  change 
nuinagcmcnt  and  so  on." 

Cigna's  Shipley  says  I  T  initiatives  usually  focus  on 
either  ■•infrastructun-  efficiency"  or  "business  solu¬ 
tion  eflcciivencss."  but  nut  both.  Cigna  is  try  ing  to 
address  both  objectives  .ti  once  in  its  virtualization 
program,  he  says.  Vendors  like  IBM  and  Microsoft 
.«v  helping  by  integrating  their  application  develop¬ 
ment  .md  system  nuinagement  oiYerings.  he  adds 
.Still.  Shipley  says  he  wi»rrics  about  his  abilltv  to  in¬ 
tegrate  systems  management  s«»ftvvarc.  sus-h  as  the 
tools  from  IB.M  Tivoli,  with  software  in  the  Web¬ 
Sphere  .md  .Net  appiieation  suites.  "I  know  when  a 
server  is  down,  and  I  can  have  an  enginwr  respond 
to  that,  he  says.  "But  that  engineer  doesn't  know  that 
the  server  is  part  ofyotir  most  critical  business 
priHcss.  If  I  can  instrument  the  business  process,  and 
I  know  that  claims  processing  is  down,  ihwv  I  can 
make  .1  real  good  dccisum.  Voii've  got  to  move  bs'- 
vonJ  just  instalment ing  the  box." 

Cigna’s  new  software  can  do  that,  and  Shipley  is 
likely  lo  get  more  help  from  XI)  and  TIO.  XD  can 
give  processing  prUirity  to  W  ebSphere  applicatiiuts 
has  .-d  on  their  designated  importance  or  the  priority 
ol  classes  of  users.  .And  TIOs-an  do  the  same  things 
across  all  applications  in  the  enterprise'. 

‘'ihipley  oilers  this  advice  to  someone  embarking  on 
a  big  virtualization  project:  "Look  lor  inicgr.«cd  pn»d- 
us't  offerings,  look  for  gi>«)d  vendor  p.irtnerships.  and 
don  t  be  bashful  about  giving  them  vvHjr  requirements. 
Definitely  don't  try  to  roll  it  yourself."  O  48172 

MORE  ON  THIS  OMUHE 

The  Future  of  Virtualization:  Eioerts  at  MterosoH  and  IBM  exolain  *hat 
inrtuaieeiion  lecrnoiosv  xas  to  0%  QuickLink  48189 

Thanks  for  the  Memory:  Cigria  hopes  to  consoiKtate  a  SOL  seivei  Oy 

O  levereging  64  bit  memory  caosbiHies  QuickLink  48193 
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sepancton  of  the  application  and  the  hosting  service. 
So  Fve  got  an  application,  and  as  long  as  I  have  a  ser* 
vice  level  defined  and  1  manage  that  service  level, 
it  should  be  transparent  where  it  runs."  Flock  says 
Cigna  is  on  track  to  reach  the  goal  of  a  25%  reduction 
in  server  operating  expenses  by  year's  end.  and  he  | 

expects  additional  savings  in  subsequent  years. 

Insurance  companies  aren’t  known  for  pushing  the 
edge  of  the  IT  envelope,  and  until  2003  Cigna  was  no 
exceptioo.  Then  the  pressure  to  cut  costs  and  the 
tremendous  promise  of  several  emer^ng  technolo* 
gies  propelled  the  company  into  beta,  alpha  and  even 
preaipha  pOot  projects  with  IBM,  Microsoft  and  Intel 
Corp.  ‘'We  tend  to  be  on  the  trailing  side,  but  now, 
with  these  activities,  we’ve  been  on  the  leading 
edge,”  Flock  says. 

Mcrosoftliigration 

In  2002.  Cigna’s  systems  built  around  Microsoft 
products  were  "in  disarray."  says  Chris  Cox,  an  enter¬ 
prise  arcfaitecL  ’TAte  had  two  versions  of  Visual  Basic 
that  people  were  developing  with,  diiferent  versions 
of  data  access  components,  diiiereot  versions  of 
database  technologies.  Since  everybody  had  their 
own  machines,  they  just  used  what  they  were  accus¬ 
tomed  to  using.  And  the  production  enWonment 
had  every  possible  combinatiotL" 

So  early  last  year.  Cigna  kicked  off  an  aggressive 
migration  to  Microsoft  Windows  Server  2003.  That 
project  began  even  before  the  fmal  version  of  the  op¬ 
erating  system  was  released.  Cigna  signed  on  to 
Microsoft’s  Rapid  Adoption  Program  and  in  the 
process  reduced  its  internal  server  certification  time 
from  12  months  to  fust  90  days. 

Windows  Server  2003  brings  appUcatkm  partition¬ 
ing  and  isolation  capabilities  to  the  .Net  Framework 
development  and  management  tools,  allowing  Cigna 
to  run  several  similar  applications  concurrently  on  a 
single  server.  Its  COM*  feature  isolates  versions  of  a 
component  so  they  can  run  simultaneously  on  one 
server,  and  It  allows  Cigna  to  install  multiple  applica¬ 
tions  or  versions  on  the  same  server  without  having 
to  upgrade  each  one  and  then  test  it  for  the  new  en* 
vironmenL  It  also  enables  Web  application  “pooling." 
via  Internet  Information  Services  6.  for  running  mul¬ 
tiple  Web  applications  independently. 

Earlier,  six  or  more  servers  might  be  dedicated  to  a 
small  application  —  one  each  for  development,  unit 
testing,  system  testing,  end-user  acceptance  testing, 
preproduction  and  production.  With  partitioning, 
many  (rf  those  functions  can  be  performed  on  a  sin¬ 
gle  server.  “Our  entire  server  environment  will  be 
built  out  to  Windows  Server  2003  by  the  end  of  the 
year.  That’s  a  big  deal,"  Flock  says.  1 

In  a  second  major  thrust,  early  this  year  Cigna 
joined  Microsoft's  Joint  Development  Program  for 
Virtual  Server  2005.  That  product  takes  a  software 
approach  to  partitioning  that,  with  Windows  Server 
2003,  will  let  Cigna  run  multiple  instances  of  the 
operating  system  simultaneously  on  one  machine. 

“It  allows  us  to  split  the  hardware  into  logical  parti- 
tiotts  like  we  do  on  the  mainframe,"  explains  Larry 
Brandolph.  enterprise  technical  architect  at  rigna 
■^ou  get  a  base  OS.  then  Virtual  Server  on  top  ( 

of  that,  and  three,  four  or  five  ’guest  machines’  on  ( 
top  of  thaL**  c 

Cigna  is  testing  a  beta  version  of  NTutual  Server  s 


2005  and  is  using  an  alpha  version  of  the  virtual 
Server  Migration  Toolkit  to  migrate  its  appUcations 
to  virtual  machines.  Microsoft  says  it  will  ship  both 
products  later  this  year. 

Extending  WebSphere 

In  parallel  with  its  Microsoft  migration,  Cigna  began 
an  aggressive  move  from  IBM’s  WebSphere  Applica¬ 
tion  Server  3  to  Version  S.  “We  decided  to  go  direct 
to  Version  5  because  of  its  clustering  and  centralized 
deployment  and  its  better  isolation  and  management 
of  applications  in  a  shared  services  model."  Flock 
explains. 

And  early  last  year.  Cigna  began  working  with  IBM 
in  its  High  Performance  On  Demand  Solutions  lab  to 
help  defme  requirements  for  software  codc-named 
Cayuga.  Now  a  beta  product  called  WebSphere  Ex¬ 
tended  Deployment  (XD).  it  can  partition  jobs  across 
multiple  processors,  databases  and  application 
servers. 

Cigna  b  now  using  XD  in  a  proof-o^oncept  test 
The  company  hopes  it  will  provide  utilitylike  com¬ 
pute  cycles  on  demand  so  that  every  server  doesn’t 
have  to  be  configured  to  handle  peak  loads. 

As  head  of  systems  testii^  and  quality  control, 
Gerald  McDonald  b  instrumental  in  proving  out  the 
new  virtualization  concepts  at  Cigna.  But  as  the  own¬ 
er  of 900  servers,  he  also  wears  a  user  bat.  Some  300 
of  hfa  Windows  2000  and  Windows  NT  servers 
would  have  to  be  replaced  in  the  coming  year  at  a 
“refresh"  cost  of  almost  S9  million,  he  says.  Now. 
with  better  utilization  of  hb  600  other  servers,  he 
will  have  to  buy  far  fewer  replacements.  “Up  until 
the  virtualization,  we’ve  never  had  any  alternatiN*c 
but  to  replace  those  machines.”  McDonald  says. 


The  Next  Big  Thii^ 

Now  on  track  to  meet  its  server  consolidation  goab, 
Cigiu  b  laying  plans  for  the  next  big  phase,  in  which 
it  will  augment  the  shared  services  capabilities  in 
WebSphere  5.  Windows  Server  2003  and  Virtual 
Server  2005  with  new  technologies  for  dynamic  pro- 
vbioning  and  on-demand  computing.  Cigna  b  look¬ 
ing  hard  at  IBM’s  HvoU  InicUi^nt  Orchestntor 
(TIO)  and  Microsoft’s  Dynamic  Systems  Initiative 
<DS1).  both  of  which  promise  to  “virtualize  the  data 
center.”  as  Flock  puts  it.  The  idea  b  to  mair^  all 
.servers  available  to  all  applications,  with  excess  ca¬ 


pacity  anywhere  acting  as  a  buffer  against  unexpect¬ 
ed  demand  peaks. 

no,  for  example,  would  sit  on  top  of  all  Cigna  sys¬ 
tems  —  mainframe,  midrange  and  distributed,  both 
IBM  and  non-IBM  —  spanning  multiple  boxes  and 
subsystems.  It  would  monitor  the  efficiency  of  the 
network  and  constantly  balance  the  worklc^  by 
sending  peak  workloads  to  underused  hardware  and 
software. 

As  for  DSI,  “Microsoft  has  not  evolved  that  into  a 
product  strategy  yet.  but  since  we  have  worked  very 
closely  with  Microsoft  and  done  a  lot  of  work  apply¬ 
ing  Virtual  Server,  Windows  Server  2003  and  .Net 
technology  to  build  out  shared  c^>abilities,  well 
prtfoably  be  one  of  the  early  adopters  in  that  space," 
Flock  says. 

Corey  FerenguL  an  analyst  at  Meta  Group  Inc.  in 
Stamford.  Conn.,  says  Cigna  b  a  virtualization  pio¬ 
neer.  “Most  organizations  in  the  next  three  to  five 
years  will  be  using  virtualization  in  some  major  part 
of  their  organization,"  he  says.  “Most  are  deploying  it 
in  test  and  environments,  and  h’s  just  beguuiing 
to  make  its  way  into  produedon  environments.” 

But  there  are  risks  for  early  adopters.  "The  biggest 
fear  b  that  as  you  layer  on  different  virtualization 
technologies,  there  are  no  clear  interfaces  between 
them.  Management  of  the  physical  layer  b  pretty 
much  figured  out.  but  the  virtual  layer  b  still  black 
magic."  says  Ferengul.  “They  need  to  think  very  care¬ 
fully  about  how  to  do  root-cause  analysis,  chari^ 
management  and  so  on." 

Cigna’s  Shipley  says  IT  initiatives  usually  focus  on 
either  “infrastructure  efficiency"  or  “business  solu¬ 
tion  effectiveness,"  but  not  both.  Cigna  U  trying  to 
address  both  objectives  at  once  in  its  virtualization 
program,  he  says.  Vendors  like  IBM  and  Microsoft 
are  helping  by  integrating  their  application  develop¬ 
ment  and  system  marugement  offerings,  he  adds. 

Still.  Shipley  says  be  worries  about  hb  ability  to  in¬ 
tegrate  systems  management  software,  such  as  the 
toob  from  IBM  Tivoli,  with  software  in  the  Web¬ 
Sphere  and  J>Iet  application  suites.  ‘I  know  wiien  a 
server  b  down,  and  I  can  have  an  engineer  respond 
to  that."  he  says.  “But  that  en^eer  doesn't  know  that 
the  server  b  part  of  your  most  critical  business 
process.  If  I  can  instrument  the  business  process,  and 
I  know  that  claims  processing  b  down,  now  I  can 
make  a  real  good  deebioa  You've  got  to  move  be¬ 
yond  just  instrumenting  the  box" 

Cigna’s  new  software  can  do  that,  and  Shipley  b 
likely  to  get  more  help  from  XD  and  TIO.  XD  can 
give  processing  priority  to  WebSphere  applications 
based  on  their  designated  importance  or  the  priority 
of  classes  of  users.  And  TIO  can  do  the  same  things 
across  all  applications  in  the  enterprise. 

Shipley  offers  thb  advice  to  someone  emharking  on 
a  big  virtualizatioo  project:  "Look  for  integrated  prod¬ 
uct  offerings,  look  for  good  vendor  partnerships,  and 
don’t  be  bashful  about  giving  them  your  requirements. 
Definitely  don’t  try  to  roll  it  yourself."  O  48172 
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BEST  OF  BREED  vs.  SUITES 


Bechtel  Group  has  relied  on  the  Documentum  content 
management  platform  for  the  past  decade  to  manage 
its  huge  collection  of  blueprints,  material  specifica¬ 
tions  and  operating  manuals  stored  in  repositories 
around  the  world. 

So  when  the  company  needed  to  add  digital  asset 
management  and  records  management  capabilities. 
Bechtel  manager  Darrell  Oelahousaye  looked  first  to 
Documentum.  “We  wanted  something  that  would  plug 
in  fairly  transparently  into  our  existing  ECM  environ¬ 
ment."  says  Oelahousaye. 

The  same  can  be  said  for  Britannia  Airways  Ltd.  in 
London,  which  bought  Open  Text's  Uvelink  to  stream¬ 
line  documentation  used  by  pilots  and  crew  members. 
Britannia  wanted  some  basic  workflow  and  document 
management  capabiiities.  with  out-of-the-box  integra¬ 
tion  of  all  functions.  “We  wanted  something  that  would 
integrate  as  a  single  package.  We  knew  that  meant  we 
might  not  get  best-of-breed  class  in  all  functions,  but  it 
would  save  us  doing  the  integration  ourselves."  ex¬ 
plains  John  Gough,  programs  manager  at  Britannia. 

However,  while  platforms  offer  the  comfort  and  con¬ 
venience  of  being  able  to  pick  all  your  content  manage¬ 
ment  capabilities  from  the  same  vendor  and,  theoreti¬ 
cally.  integrate  them  into  the  existing  system  with  min¬ 
imal  fuss,  there  are  a  couple  of  potential  downsides. 

One.  says  Robert  Markham,  an  analyst  at  Forrester 
Research,  is  that  not  all  of  these  modules  actually 
work  well  together;  many  have  been  acquired  and 
therefore  have  a  different  code  base  and  repository.  It 
takes  lime  for  a  new  acquisition  to  be  integrated  into 
a  vendor's  platform. 

Second,  you  may  be  missing  out  on  some  great 
capabilities  from  a  best-of-breed  product  in  a  niche 
market.  Paul  Szemplinski.  president  of  systems  inte¬ 
grator  Integrated  Document  Technologies  Inc.  in  Itas¬ 
ca.  III.,  says  he  believes  companies  often  do  better 
buying  best  of  breed  rather  than  a  suite.  “Putting  all 
your  eggs  into  one  basket  is  risky.  I  have  concerns 
about  any  vendor  that  claims  they  can  do  it  all.  be¬ 
cause  I  haven't  seen  that."  he  says. 

But  if  you  need  out-of-the-box  integration  among 
the  components  or  prefer  to  deal  with  a  single  vendor 
for  all  content  management  needs,  then  a  suite  may  be 
your  best  bet. 

-Sue  Hildreth 
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from  both  sides.  These  were  stored  on  cassette  tapes 
in  a  warehouse.  If  the  case  went  to  court,  somebody 
bad  to  go  find  the  tapes,  transcribe  them,  then  put 
them  back,"  explains  Valentine,  noting  that  other  de- 
partnvents  kept  documents  on  micronche  and  mlcro- 
fUm.  as  well  as  in  good  old-fashioned  tiling  cabinets. 

Valentine  evaluated  several  products  in  terms  of 
imping,  workflow,  and  document  and  records  man¬ 
agement  capabilities.  Grange  ultimately  purchased 
the  IBM  Content  Manner  application,  with  an  IBM 
DB2  database,  and  Input  Accel  from  Captiva  Soft¬ 
ware  Corp.  in  San  Diego  for  scanning  documents. 

Now  audio  statements,  along  with  doctunents  such 
as  claims  forms  and  insurance  applications,  are 
stored  in  Content  Manager.  'Hte  system  is  consoli¬ 
dated  in  a  single  data  warehouse,  with  22  cache 
servers  located  at  branch  offices  so  that  large  or  fto- 
quently  used  files  don't  have  to  go  back  and  forth 
across  the  networic. 

The  Emargenca  of  ECM 

£CM  systems  like  those  selected  by  the  AHA  and 
Grange  Mutual  combine  a  variety  of  niche  content 
management  products:  those  that  manage  Web  con¬ 
tent.  records,  documents,  digital  assets  and  images, 
plus  collaboration  tools.  ECM  software  alms  to  pro¬ 
vide  organizations  with  a  single  platform  for  in¬ 
putting.  storing,  searchii^  editing,  tracking,  sharing 
and  distributing  all  forms  of  content. 

ECM  has  also  gotten  a  boost  from  recent  government 
regulations  such  as  the  Health  Insurance  Portability 
and  Accountability  Act  (HIPAA).  the  USA  Patriot 
Act,  the  Sarbanes-Oxley  Act  and  a  flurry  of  other  less- 
well-known  regulations  in  individtial  indtistries. 

These  regulati^  include  requirements  that  organiza¬ 
tions  store  documents  for  specified  periods  of  time; 
make  them  available  in  port^Ie,  d^tal  formats;  and. 

in  some  cases,  track  employee  e-mails  that 
relate  to  liot  button"  legal  issues  as 

Securities  and  Exchange  Commission  re-  ' 
quiremcnts  or  employee  discrimination. 
Keeping  up  with  tlw  myriad  regulations  has 
driven  increasing  numbers  of  IT  managers 
to  purchase  content  management  software, 
which  can  help  automate  compliance. 

All  of  this  helped  push  sales  of  ECM  applications 
—  which  typically  start  at  $Z00.000  for  an  enterprise 
license  —  to  $2.6%  billion  last  year,  with  $3,175  bil¬ 
lion  prtHected  for  2005,  according  to  Joshua  Duht,  an 
anal^  at  IDC  in  Framingham.  Mass. 

■ntegtatkm  Is  Essential 

What  do  you  need  from  an  ECM  system?  For  staners, 
integration  is  important,  not  only  between  content 
management  components,  but  also  between  data¬ 
bases  and  other  applications.  Also,  if  you  plan  to  use 
a  portal  other  than  the  ECM  vendor’s,  "make  sure 
your  ECM  vendor  has  a  relationship  with  your  portal 
vendor,"  advises  Robert  Markham,  an  analyst  at  For- 
resmr  Research  Inc.  in  Cambridge,  Mass. 

When  the  Houston  Independent  School  District 
(HISD)  evaluated  ECM  products  in  early  2002,  it 
looked  for  cme  that  supported  Microsoft  Cofp.*s  SQL 
Server  database  and  provided  adapters  to  Microsoft 
Exchangp,  SAP  and  IVsopleSoft.  That's  because  the 
H15D  wanted  to  create  a  portal  to  give  employees  ac¬ 
cess  to  e-maU.  payroll  and  benefits  information  and 


to  aftow  students  u>  view  grade  and  attendance  data, 
with  all  of  it  residing  on  back-end  applications. 

Finding  support  for  PeopleSoft  and  SAP  was  easy, 
but  support  for  SQL  Server  was  less  common,  says 
Marie  Hill,  interim  manager  of  applications  for  the 
HISD  and  a  vice  president  at  consulting  finn  Tren- 
dec.  “Oracle  would’ve  been  easier."  he  says.  “It 
seemed  [SQL  Server]  was  a  challenge  for  some  of  the 
vendors."  The  HISD  ultimately  selected  Vignette 
Corp.’s  Vignette  v6  product  and  Enterprise  Applica¬ 
tion  Portal 

Fmd  the  Right  Rt 

ECM  products  offer  a  range  of  functions,  and  users 
need  to  match  the  available  features  to  their  needs. 

The  first  step  is  to  determine  the  functionality  you 
need  —  records  man^ment,  document  manage¬ 
ment,  digital  asset  management,  e-mail  management. 
coUaboratioo  or  something  else.  Also  consider  verti¬ 


cal-industry  expertise.  Many  products  offer  capabili¬ 
ties  tailored  to  specific  industries  and  their  unique 
regulatory  requirements.  Documentum  in  Pleasanton. 
CaliL.  for  example,  has  versions  for  the  health  care,  fi¬ 
nancial  services,  retail  and  manufacturing  industries. 
Stellent  Inc.  in  Eden  Prairie.  Minn.,  offers  versions  of 
its  software  specifically  for  the  insurance,  real  estate, 
media  and  entertainment  sectors.  Open  Text  Corp.  in 
Waterloo,  Ontario,  also  has  several  products  for  verti¬ 
cal  industries,  including  the  automotive,  education, 
energy  and  telecommunications  fields. 

Documentum’s  certifkation  by  the  U.S.  Depart¬ 
ment  of  Defense  for  complying  with  the  5015.2  stan¬ 
dard  for  records  management  was  important  to 
Bechtel  Group  Inc.,  a  global  engineering  firm  based 
in  San  Francisco.  The  5015l2  standard  sets  functional 
requirements  for  records  management  systems  used 
by  government  ^ncies  and  private  companies  that 
do  business  with  the  government  For  instance,  it  de¬ 
fines  the  required  system  interfaces  and  search  crite¬ 
ria  and  the  minimum  records  management  require¬ 
ments.  For  an  individual  organization  to  attempt  to 
implement  the  requirements  itself  would  involve  a 
tremendous  amount  of  work.  "Documentum’s  being 
on  the  list  of  5015-certified  applications  means  we 
don’t  have  to  worry  about  it."  says  Darrell  DeU- 
bousaye,  engineering  procurement  and  construction 
systems  portfolio  manager  at  Bechtel 

Likewise,  finding  a  package  that  would  aid  compli¬ 
ance  with  HIPAA  was  important  to  the  Surgical  Plan¬ 
ning  Laboratory  at  Bright  and  Women's  Hospital  in 
Boston.  The  lab  first  considered  open-source  options, 
such  as  Zope,  but  instead  opted  for  a  commercial 
product  ftom  IQrthos  Software  Inc.  in  San  Francisco, 
which  offered  the  sort  of  security  controls  —  such  as 
levels  of  authorization  and  logging  to  track  who’s  ac¬ 
cessing  which  files  —  that  HIPAA  requires. 

“Xythos  has  a  ticket  mechanism,  so  you  can  allow 
someone  without  an  account  to  have  limited  access 
to  files,"  says  Michael  Halle,  director  of  technology 
development  at  the  lab.  Also,  because  the  lab’s  re¬ 
searchers  need  to  share  documents  with  colleagues 
Inside  the  hospital  and  around  the  world,  it  needed  a 
product  that  supported  standard  technologies  — 
such  as  a  Java  application  programming  interfoce  and 
the  WebDAV  network  file  management  protocol 

The  AHA’s  Baumann  mostly  needed  a  system  that 
could  expand  with  the  organization’s  needs  and  had 
a  wide  range  of  features,  such  as  collaboration  tools 
and  support  for  audio  clips.  Because,  as  its  earlier  ex¬ 
plosion  of  Web  sites  bad  shown,  its  members  were 
hungry  for  new  technologies  to  help  them  share  in¬ 
formation.  “We  knew  we  were  going  to  grow  into 
new  areas,  but  we  didn’t  know  what  those  areas 
might  be.  so  we  wanted  everything  to  be  highly  con¬ 
figurable  and  flexible,”  says  Baumann.  “We  looked  at 
(the  Interwoven  ECM  system]  as  something  that 
would  go  wherever  we  needed  to  take  it.”  O  48330 
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Timely  Tech  Titles 

They  re  not  t>picd  summer  reading,  but  these  books  will 
^  proMde  useful  information  on  the  job.  By  Tommy  fetetson 


We  Qccasienatty  taltt  brief 
note  of  boobs  on  teehnof* 
ogy  that  seem  particularly 

- usefdbecauseofthetiiiif 

Hneaa  d«  their  suNacts  and/or  the  quafity  of 
the  information  presantecL  These  three  titlee 
offer  comprahensfvo  yet  reasonably  concise 
treatments  of  their  tofrice. 

Enterprise  Service  Bus.  by  David  Chappell 
(OHaMy  Meda  Inc.  2004;  247  pages,  pa¬ 
perback,  S39.95).  ChappeU  has  man¬ 
aged  to  capture  many  of  the  virtues  of 
both  a  primer  and  a  practical  hand¬ 
book  for  workii^  professionals  in  En¬ 
terprise  Service  Bus.  The  author  pro¬ 
vides  a  foundation-level  introduction 
to  ESB  techno}(^.  including  plenty  of 
context  about  the  nascent  ESB  market 
and  the  state  of  enterprise  application 
integration  in  general.  Key  terms  and 
concepts  are  highlighted  in  boxes  with 
headings  like  “What  Are  Standards/ 
Exactly?”  and  “To  I2EE.  or  .Net  to  Be.” 

The  book  also  provides  enough  gran¬ 
ular  detail  practical  advice  and  case 
^ ^  studies  to  make  it 


services  develop¬ 
ers  and  security 
administrators, 
along  with  some 
aOs  and  CTOs. 
With  users  and 
tysts  reporting 
t  security  con- 
ems  are  the 

barrier  to 
the  adoption  of 

Web  services  by  large  companies. 
Rothenbeig  and  Remy  have  worked  to 
defuse  a  hot  topic.  Their  approach  is 
practical  and  methodical  going  step 
by  step  through  complex  topics  like 
combining  XML  encryption  with  the 
use  of  XML  signatures.  The  authors 
also  recognize  that  IT  initiatives  can 
rarely  be  undertaken  in  one  big  gulp, 
and  they  suggest  incremental  strate¬ 
gies  for  ratcheting  up  Web  services 
security.  I 


Enterprise 
Service  Bus 


%  audience, 

^  m  ^^happell  and  his 
^editors  have  done 

~  — _ f  a  ^lendid  job  in 

presenting  remarkably  straightforward 


les  enough  gran-  ReaNert  Storage  lietivoritt.  by  Brag  Schub 
viceandcase  (Ebavior  Digital  Press.  2004;  441  pagaa. 

idles  to  r^e  it  papsrbadi.  S49.9S).  Even  considering 
worth  the  time  of  that  it’s  almost  450  pages  long.  Re- 
IT  professionals  stlienr  Storuge  Networks  covers  an  ex- 
who  are  already  traordinary  amount  of  ground  in  sur- 

with  ESB  prising  detail  Schulz  first  considers 
Hcbnology.  And  the  importance  of  data  availability  and 
?all  segments  of  then  marches  tfarou^  descriptions 
•  audience,  and  assessments  of  all  the  major  net- 

appell  and  his  worked  storage  technologies.  After 
itors  have  done  taking  a  look  at  storage  man^ement 
pleridid  job  in  tools  and  security  strategies,  he  con- 
straightforward  eludes  with  chapters  describii^  the  is- 

■aHAPc  umitl.1  Ka  _ A  _ . 


•  - - wun  enapeers  oesctiouw  tne  IS- 

and  useful  diagrams.  Readers  would  be  sues  involved  in  creating  various  sizes 

harri-nrAccMt  fn  fS./1  «  1....:^ _  _ j  ...  ^ 


hard-pressed  to  find  a  mcne  lucid  or 
helpful  book  on  a  technology  tc^ic. 

Saojring  Wib  Sandeaa  WMh  WS-Saewi^ 
by  Jottiy  Roaanbofg  Md  OwU  Ramy  (Sams 
PlMahing.  2004: 378  p^ot.  paparbadi. 
S39.99X  Tbou^  this  book  opens  with 
the  assertion  that  Web  services  are  a 


services  are  a  gency.  tspecially  useful  are  the  lists  ol 

•tra^nnational”  technology  for  inte-  questions  for  inftastructure  architects 

tratine  informarinn  An  nnt  _ _  ..  .. 


v«uiuu»  sizes 

and  types  of  stor^  networks,  along 
with  detailed  des^  recommendations. 

Schulz  presents  information  in  di¬ 
gestible  pieces,  relying  heavily  on 
bulleted  li^  short  seedems  within 
chapters  and  diagrams  that  match  those 
in  ChiqipeU’s  book  for  clarity  and  co¬ 
gency.  Especially  useful  are  ^  lists  of 


grating  information,  do  not  fear,  gentle 
reader.  Rosenberg  and  Remy  go  ^ 
beyond  the  hype  and  live  up  to  B 
their  subtitle,  “Demystifying  WS-  Q 
Security.  WS-Policy,  SAMI,  XML  P 
Signature,  and  XML  Encryption.”  I 
Securittg  Web  Services  With  II 

W5-Securiiy  breezes  through  a  It 

few  basics,  but  its  target  audience  F 
is  readers  who  are  already  im-  U 
mersed  in  the  technology  —  Web  I* 


-  storage  managers  to  ask  themselves 

a  embark  on  par- 
projects, 
book  is  aimed 
at  inftastructure 
rtsandman- 
ut  it’s  good 
for  anyone  who 
>  learn  more 
or^  techno-  I 
1^48682  I 


We  wrote 
the  book  on 

Email 

Security. 


Get  your  FREE  book  and  ieam  how  your  company 
can  manage  the  startling  growth  in  email 
volume— and  withstand  the  massive  flood  of  spam,  viruses 
and  fraud  that  threaten  your  email  communication  system. 

To  order  your  free  copy  of 
GET  THE  MESSAGE: 

A  Business  Guide  to  Surviving  the  Email  Security  Crisis, 
visit  www.ironport.com/book  or  call  toll  free  866.882.8658 
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THE  NEXT  GENERATION 

KL'N'boanis  :uid  mice  will  face 
competition  fkim  motion-sensing, 
gesture  recognition  and  haptic 
technologies,  by  jaikumar  vmayan 


PDAS  and  smart 

phones  are  great 
for  keeping  the 
road  warrior  con¬ 
nected  to  the  ex¬ 
tended  enterprise,  but  the 
technology  have  always  of¬ 
fered  only  limited  data  input 
capabilities,  especially  for 
typing-intensive  applications. 

San  )ose-based  Canesta  Inc. 
thinks  it  may  have  lust  the 
thing  to  address  the  problem. 

The  company  has  developed 
a  prototype  technology  that 
lets  users  of  PDAs  and  similar 

mobile  devices  put  data  _ 

into  their  handheld  sys^  CimMr 
terns  by  simply  typing  ilflUtt 
on  an  image  of  a  Stan-  WATdlQ 
dard-size  keyboard  IWBIIHIH 
projected  ooto  a  de^- 


top  or  ocher  surface.  The  'elec¬ 
tronic  perception’*  technology 
captures  the  user’s  finger  mo¬ 
tions  via  emitted  light  photons 
that  form  3-0  real-time  imagges 
that  are  then  processed  and 
translated  into  keystrokes. 

The  technology  can  be  inte¬ 
grated  into  any  handheld  device 
and  includes  a  3-0  sensor  mod¬ 
ule,  a  keyboard-pattern  projec¬ 
tor  and  an  iniiaz^  light  source. 

Canesta  ha*  much  more  in 
mind-  “Any  situation  in  whkfa 
a  marhirx*  or  a  digital  device 
needs  to  understand  its  sur¬ 
roundings  is  a  great  applica¬ 


tion  for  electronic  perception 
technology.**  says  fim  Spare,  a 
vice  president  at  the  company. 
For  example,  be  says,  a  future 
application  could  be  an  intelli¬ 
gent  car-airbag  system  chat 
can  sense  the  size  and  posi¬ 
tion  of  an  occupant  to  prevent 
injury  upon  deployment 
And  Spare  says  his  projec¬ 
tion  keyboard  heralds  the  way 
to  much  more  powerful  user 
interfoces  that  are  based  on 
hand  gestures.  '*We*ll  be  able  to 
navigate  through  databases, 
especially  when  you  have  dif- 

_  ferent  sets  of  data  with 

complex  relationships,’' 
be  says.  ‘?fou  could 
open  up  a  filing  cabi¬ 
net  and  pick  up  a  file 
and  sift  throu^  it  with 


your  fingers,  using  gestures 
from  your  hands  as  if  you 
were  actually  picking  it  out  of 
the  file  cabinet" 

Canesta's  technology  b  part 
of  a  growing  list  of  emerging 
user-interface  technologies  that 
are  being  designed  to  enable  a 
wider  range  of  boman-coniput- 
er  interaction  than  b  possible 
with  traditional  mouse- and 
keyboard-based  systems. 

Elroadly  q>eaking,  such 
technologies  are  designed  to 
allow  computers  to  accept 
gestures,  motions,  speech  and 
futial  expressions  as  data  in¬ 


put  methods  along  with  the 
mouse  dicks  and  keystrokes. 

Many  of  these  technologies 
are  coming  from  small  compa¬ 
nies  and  are  fust  developed 
for  highly  specialized  applica¬ 
tions.  But  as  the  technology 
matures  and  costs  come  down, 
expect  to  see  it  break  into 
broader  maikets.  vendors  say. 

One  example  b  a  gesture 
recognition  system  developed 
for  the  U.S.  Department  of  De¬ 
fense  by  Cybernet  Systems 
Corp.  in  Ann  Arbor.  Mich.  The 
technology  was  developed  to 
facilitate  silent  troop  commu¬ 
nication  during  combat.  It  al¬ 
lows  users  to  stand  in  front  of  a 
camera-mounted  monitor  and 
manipulate  images,  data  and 
application  windows  by  using 
specific  hand  mov^nents  from 
a  lexicon  of  roughly  80  ges¬ 
tures  recognized  by  the  system. 
A  San  Antonio-based  TV  sta¬ 
tion  b  using  a  commercial 
version  of  the  product,  called 
GestureStorm.  to  control  com¬ 
puterized  visual  effects  in  its 
weather  reports. 

In  the  future,  the  technology 
could  be  used  to  enable  many 
new  applications,  says  Charles 
Cohen,  Cybcmet’s  CEO.  A 
drive-up  ATM  where  users 
could  carry  out  transactions 
with  simple  hand  gestures  in¬ 
stead  of  leaning  out  of  win¬ 
dows  and  physically  touching 
buttons  b  one  example,  he 
says.  Gesture  recognition 
could  be  used  to  control  appli¬ 
ances  at  home  —  for  instance, 
a  TV  could  turn  off  automati¬ 
cally  if  it  sensed  the  riewer  in 
front  of  it  was  asleep. 

Thb  tecfaxK>logy  b  not  about 
replacing  the  keytxKud  and  the 
mouse  but  to  supplement 
them,"  Cohen  says.  "In  20 
years,  gesture  technolt^^  will 
be  as  common  as  the  mouse." 

San  Jose-based  Immersion 
Corp.  makes  medical  simula¬ 
tors  that  give  users  tactile 
feedback  while  theyTe  doing 
surgical  Tr*  Lap- 

Sim  simulator  re-creates  not 
just  the  sights  and  sounds  of 
the  procedure  but  also  how  a 
surreal  instrument  actually 
foeb  in  the  hands  of  the  sur¬ 
geon  perfonning  the  surgery. 

*Tou  have  many  very  realis¬ 
tic  simulamts  that  doot  pro¬ 
vide  any  feedback  on  how  to 


IN  THE  LABS 


cut  through  soft  or  hard  tissue 
or  what  needles  might  feel 
tike  when  you  are  pushing  it 
through  skin,"  says  Dean 
Chang,  chief  technology  offi¬ 
cer  at  Immersion. 

Over  the  next  few  years, 
expect  to  see  such  tactile 
feedback,  or  "h^>tic.**  technolo¬ 
gies  find  applications  in  other 
areas  as  well.  Chang  says.  For 
example,  cell  phones  could 
generate  different  vibration 
signatures  to  tell  users  who 
was  calling  or  if  the  batteries 
were  low. 

Haptics  could  also  enable 
all-in-one  medical  simulators 
that  would  allow  doctors  to  do 
incredibly  realbtic,  patient- 
specific  rebearsab  of  con^>Iex 
surgical  procedtires  before 
perfonning  them,  be  says. 

Automobile  dashboards  pre¬ 
sent  another  future  opportuni¬ 
ty  for  haptics,  Chang  says. 


Touch  screens  that  generate 
tactile  feedback  when  images 
of  buttons  are  depressed  could 
allow  users  to  control  enter¬ 
tainment  and  climate  systems 
more  efficiently  than  they  can 
with  today’s  knobs  and  but¬ 
tons,  he  says. 

But  getting  there  will  take 
some  doing,  the  vendors  ac- 
knowled^.  In  a  few  cases,  the 
base  capabilities  already  exist 
but  lack  of  investor  interest  b 
holding  back  further  develop¬ 
ment  "If  someone  is  prepared 
to  give  me  the  funding  I  can 
deliver  some  of  these  things  in 
a  year’s  time."  Cohen  says.  Im¬ 
mersion  has  licensed  its  hap¬ 
tics  technology  to  a  major  cell 
phone  manufacturer  but  ex¬ 
pects  it  will  take  at  least  five 
years  before  the  technology  is 
broadly  integrated  into  the 
company’s  products. 

In  other  cases,  the  technol¬ 
ogy  needs  to  mature.  Cohen 
says.  For  gestxue-recognition 
ATMs  to  become  a  reality,  more 
work  needs  to  go  into  making 
systems  that  can  work  well  in 
outdoor  environments  with 
hi^tiy  cluttered  backgrounds. 
Similarly.  Chang  says,  imping 
technol^es  have  to  mature  a 
great  deal  more  before  the  ul- 
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Got  a  business 
intelligence  solution 
so  good  it’s  worthy 
of  an  award? 


Nominate  it  for  Computerworid’s 
“Best  Practices  in  Business 
Inteiiigence”  Awards  Program! 

Computerworld  is  seeking  IT  user-organization  case  study 
submissions  for  consideration  and  recognition. 

Computerworld's  Business  Intelligence  Perspectives  Conference  is  seeking  IT  user-organization 
case  study  submissions  for  its  "Best  Practices  in  Business  Intelligence"  Awards  Program. 

Awards  imII  be  presented  in  each  of  the  following  five  categories: 

Creating  a  Bl  Vision  and  Strategies  for  Improved  ROI 
■  Planning,  Designing  and  Building  the  Bl  Infrastructure 

•  Information  ReMeval  and  Reporting  by  Leveraging  Off-the-Shelf  Enterprise  Software 

•  Data  Visualization,  Prediction  and  Presentation  by  Leveraging  Customized  Solutions 

•  Managing  and  Enhancing  Bl  Applications  and  Infrastructure 
Nominations  are  welcomed  from: 

'  IT  Users/Implementers 
'  Systems  Integrators/Consultants 

rr  Vendors  (on  behalf  of  customers,  or  their  own  in-house  deployment) 

'  PR  Firms  (on  behalf  of  clients) 

Multiple  submissions  of  case  studies  describing  different  deployments  per  company/organization  will  be 
considered.  Ten  IT  end-u^r  award  winners  will  be  honored  at  Computerworld's  Business  Intelligence  Perspectives 
Conference,  ^ptember  27-29,  2004,  at  the  JW  Marriott  Desert  Springs  Resort  in  Palm  Desert,  California 
with  two  awards  presented  in  each  of  the  five  categories.  An  honorable  mention  will  also  be  recognized  in  each 
category.  Winners  will  be  recognized  on  the  event  website,  in  an  event  press  release  and  will  be  4tured  in  a 
special  magazine-sized  supplement  to  Computerworld. 

Submit  your  nomination  oniine! 

You’ll  find  the  nomination  form  and  iearn  more  about 
Business  inteiiigence  Perspectives  at:  www.biperspectives.com 

But  hurryl  The  deadline  is  Monday,  August  16th  at  9:00pm  Eastern  time. 
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Merger  Interrupts 
Sarb-Ox  Inject 


A  last-minute  security  audit  for  a  sudden 
acquisition  briefly  puts  a  rnajor  push  toward 
Sarbanes-Oxley  compliance  on  hold. 

By  Mathias  Thuiman 


The  first  e-mail  I  got  top  IP  address  space. 

this  week  was  a  meeting  We  had  only  a  few  hours  to 
invite  with  the  suhiect  conduct  our  worli.  so  I  priori- 
line  “Emergency  discus-  rized  and  started  on  the  nei- 
sion  of  merger  and  acquisition  work  scans.  I  got  a  listing  of 


items  for  recent  acquisition.**  their  f 
Once  again,  the  company  -  Nessu 
made  an  acquisition  and  in-  scaniw 
formed  the  IT  organization  corpoi 

only  alter  the  deal  was  signed.  The 
We  understand  that  these  coocer 

deals  need  to  be  kept - 

under  wraps  for  le^l  nrjuHim# 
reasons.  The  problem  otGlIlQI  | 
is  that  if  we  discover  yauayya 
an  issue  that  might  af-  HRHMU  U 
feet  the  deal,  it's  difTt-  ^ 

cult  to  go  back  and 
change  the  agree- 

ment.  And  dealing  with  issues  slons  o 
related  to  the  acquisition  cure  SI 

meant  we  had  to  temporarily  some  u 


their  IP  address  space  and  used 
Nessus.  a  freely  available  port 
scanner,  to  run  a  scan  of  the 
corporate  desktop  addressc.s. 

The  results  were  of  some 
concern.  Most  Windows  dcsk- 

-  tops  hadn't  been 

patched  in  almost 
111  months  an 

jWyC  eternity  for  Win- 

dows  systems.  In  ad- 
O  several  Linux 

_ desktops  were  run¬ 
ning  vulnerable  ver¬ 
sions  of  applications  like  Se¬ 
cure  Shell  and  Sendmail.  And 
some  users  were  running  Tel- 


stop  working  on  our  Sarbanes-  I  net.  an  insecure  remote-acccss 


Oxley  compliance  project. 

Griping  aside,  we  took  part 
in  the  conference  call  and 
•  learned  that  the  acquired  firm 
has  fewer  than  50  employees, 
all  of  whom  work  in  one  loca¬ 
tion.  and  it  does  no  sofhvare 
development  outside  the 
country.  This  definitely  made 
life  a  lot  easier  for  me. 

The  most  important  order 
of  business  was  to  get  the  new 
employees  configured  so  they 
could  access  our  intranet,  use 
e-mail  and  sign  up  for  benefits 
and  payroll  From  a  security 
perspective,  before  we  provid-  ' 
ed  VPN  client  software  or  cre¬ 
ated  a  point-to-point  VPN 
tunnel,  we  had  to  make  sure 
that  we  wouldn’t  be  introduc¬ 
ing  malicious  code  or  activity 
from  their  environment  into 
ours.  We  accomplisbed  this  by 
reviewing  desktop  configura¬ 
tions,  ensuring  that  they  were 
using  anthrinis  software  and 
conductii^  a  scan  of  the  desk- 


utility.  Since  we  were  short  on  pliance  work  boring  and  did 
time,  we  gave  the  company’s  have  much  to  report.  But  no 
IT  manager  our  Linux  security  I  have  an  update:  We  hired 


source  code,  a  woricstaiion 
housing  the  company’s  finan¬ 
cials  and  HR  files,  and  backup 
tapes,  which  were  being 
stored  at  an  employee’s  home. 

In  general,  the  acquisition 
assessment  went  well  Other 
than  the  desktop  environment. 
I  didn't  find  any  glaring  secu¬ 
rity  holes  or  issues.  It  took 
about  six  hours  to  get  all  the 
desktops  to  a  point  where  wc 
'  felt  comfortable  giving  them 
access  to  our  network.  But  this 
is  just  an  interim  step.  In  a 
month  or  so.  all  employees  in 
the  acquired  company  will  be 
relocated  to  our  corporate  of¬ 
fices.  where  they’ll  receive  our 
corporate-standard  desktop 
hardware  and  software  image. 

BacktoSarb-Ox 

I’ve  received  many  e-mails  re¬ 
garding  the  status  of  our  Sar- 
bancs-Oxley  Act  compliance 
efforts.  I  didn’t  mention  the 
worit  in  my  last  column  simply 
because  I  find  audits  and  com¬ 
pliance  work  boring  and  didn't 
have  much  to  report.  But  now 


guidelines  and  a  copy  of  the 
assessment  report. 

For  the  Windows  desktops, 
we  had  users  install  the  latest 
patches  and  our  corporate 
antivirus  software.  Our  other 


one  of  the  Big  Four  consulting 
firms  to  assist  us  in  the  prepa¬ 
ration  work  toward  our  com¬ 
pliance  efforts.  It's  not  the 
firm  that  will  actually  audit  us 
later  this  year,  since  Sarbanes- 


immediate  goal  was  to  identify  Oxley  precludes  us  from  using 
and  take  control  of  critical  as-  the  same  firm  for  both  tasks. 


sets.  This  included  a  content 
versionii^  system  repository 
containing  the  company's 


Most  Windows 
desktops  hadn't  been 
patched  in  almost 
ninenianths- 
an  eternity  Ibr 
Windows  syknns. 


The  Sarbancs-Oxley  guide¬ 
lines  are  vague,  and  wc  had  no 
experience  in-house.  So  we 
figured  that  if  wc  got  a  big- 
name  consultancy  to  assist  us, 
things  would  be  done  in  a  way 
that  would  be  acceptable  to 
the  Big  Four  accounting  firm 
that  will  be  doing  the  audit. 

Having  this  assistance  has 
helped  us  tremendously. 

We’ve  gotten  to  the  point 
where  we’ve  identified  our 
key  controls  —  those  areas 
that  management  felt  were  im¬ 
portant  to  ensure  the  integrity 
of  the  IT  infrastructure.  At  the 


end  of  the  day.  management 
will  attest  to  the  effectiveness 
of  the  IT  controls  as  they  re¬ 
late  to  the  financial  systems  — 
and  they  will  be  the  ones  who 
could  face  legal  consequences 
if  the  audit  doesn't  go  well 
The  auditors  and  a  couple 
of  members  of  our  audit  and 
compliance  department  devel¬ 
oped  a  series  of  tests  that  cor¬ 
respond  with  the  key  controls. 
For  example,  one  of  the  con¬ 
trols  is  that  only  database  ad¬ 
ministrators  can  migrate  code 
to  a  production  Oracle  appli¬ 
cation  server.  The  rest  for  this 
would  be  to  obtain  a  list  of  the 
database  administrators  and  I 
ensure  that  only  they  have  the 
proper  permissions  to  execute 
the  utility,  which  is  used  to  mi¬ 
grate  code  and  include  bug  fix¬ 
es.  patches  and  script  changes 
on  the  Oracle  database  serv¬ 
ers.  This  would  be  accom¬ 
plished  by  getting  screenshots 
of  the  password  files  and  file 
permissions  for  certain  code- 
migration  utilities. 

I've  been  spending  a  fair 
amount  of  time  going  through 
the  tests  to  ensure  that  they’re 
valid  and  identifying  gaps  or 
errors.  So  far.  we've  i^ntified 
several  For  example,  in  the 
database  code-miration  con¬ 
trol  wc  discovered  that  ad¬ 
ministrators  use  a  shared  ac¬ 
count  that  gives  everyone  in 
the  administrators  group  per¬ 
mission  to  execute  the  utility 
that  migrates  code.  Because 
we  can’t  control  or  prove  who 
has  access  lo  the  shared  ac¬ 
count.  this  shared  account  is  a 
gap.  That  and  other  problems 
either  need  to  be  fixed  or 
deemed  an  acceptable  risk  by 
management. 

Although  the  database  mi¬ 
gration  issue  is  an  easy  fix. 
others  may  not  be.  It  will  be 
interesting  to  see  what  man¬ 
agement  wants  fixed  and  what 
theyll  be  willing  to  live  with 
as  wc  go  forward.1 
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Axena  Ships 
Sarb-Ox  Tool  Kit  i 

Ax«nahic.i>  shipping  its  SOAx  { 

TooRdt.  software  that’s  designod 
to  provMo  companies  with  up*  , 

dates  on  their  intomal  contrds 
environment  to  help  them  satisfy 
the  reouirwTiants  of  the  Sarbanes- 
Oxley  Act  The  browser -based 
eoftwwesupportsmultipieitti- 
guaoss.accQrdingtoOriando- 
based  Aaena.  Pricing  starts  at  ! 

$25,000  for  25  seats.  I 


•  Netwoih  Monitoring 
Software  Updated 

Wrtworfc  InstnifPwiU  LLC  ha. 

•mound  ObMfw  X).  •  M- 
onrt  mutnuM.  uulyn  •ltd 
Owddoilmlng  tool  hr  000  with 
ramoto  iMluortB.  vktoto  LMh 
md  «Mtao  Mtonlis.  WHi  dto 
now  nnhii.  nohmti  monitoring 
aowolaoandyhoindprocoos- 
hg  m  nthmli  dato  h  cnnductod 
It  dw  taMduol  piolM  hMl.  ac- 
cordtog  to  Hu  Mtantonoao-bosad 
compmy.  Plicing  lor  (Xnarw 
•toftooinas. 

BEA  Upgrades 
Oevelopm  Portal 

BU  Smtoun  Inc.  h  aigandho  nt 
0a.2d»  doMkiHr  mrtil  dm  to 
hdoda  tododcol  oontoni  from 
Hu  Jam  Gomnoidly  and  OTtoMy 
IMilnc.ColnbNa)lnc.laiin>- 
vMng  Hu  Idnalnieton  to  makn 
HuHtomoraIntoracHiu.'nuon- 
hund  pnrW  h  adadidad  to  bn 
uwadad  in  Octabar,  BEb  taU. 


Oime-a-MnjieVIfeb 
Conterendng  Added 
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ladngton,  ilaaa.-baaad  Conwin. 
ASAP  aha  aim  uaan  to  dabd 
Hu  praaanaa  af  lain  an  oHur 
M  apatonu  and  todto  Hum  to 
padhipda  h  Gbd  aoadona. 


TECHIIOLIHIY 


mwmiiBHapdttwi  31 


DANIEL  J.  WEITZNER 


The  perfect  storm  of  transparency  is 
gathering  over  today’s  enterprise  comput¬ 
ing  environment.  Today  we  are  seeing  the 
gradual  demise  of  stovepipe  applications,  a 
rapid  decline  in  the  cost  of  enterprisewide 
(and  Webwide)  queries  and  a  stunning  proliferation  of 
data  from  sensor  networks  inside  and  outside  the  en¬ 
terprise.  Add  to  this  the  fact  that  storage  costs  seem  to 

be  approaching  zero,  and 


you  have  the  maku^ofa 
transparent  enterprise. 

In  a  transparent  enter¬ 
prise.  we  will  be  able  to 
know  more  about  the  dis¬ 
parate  data  sets  that  we 
create,  find  unexpected 
connections  in  previously 
unconnected  pieces  of  data 
and  sec  more  information 
about  individuals,  whether 
they  are  customers  or  em¬ 
ployees.  Transparency  will 
emerge  through  business 
intelligence  systems,  in 
buildings  whose  security 
systems  record  and  log 
the  identity  of  anyone  in 
the  facility  at  any  given 
moment,  and  in  collections  of  tele¬ 
metry  data  from  various  private  and 
public  wireless  networks  that  tell  us 
the  location  of  individual  devices  and 
their  users. 

Consider  the  enterprise  data  store 
that  not  only  has  detailed  sales  transac¬ 
tions  but  also  trawl  expense  reports 
such  as  rental  car  records,  cell  phone 
billing  details,  meal  receipts  and 
perhaps  even  electronic  toU-booth 
records.  Of  course  sales  managers  will 
be  able  to  determine  which  sales  rep 
has  the  most  efficient  sales-to-e^tpense 
ratia  But  managers  may  also  be  able  to 
figure  out  that  an  employee  ^tceeded 
the  speed  limit  because  he  wrote  a 


sales  invoice  in  Albany. 
N.Y.,  lust  two  hours  and 
10  minutes  after  leaving 
M  Burlington,  Vt  Rental  car 

■  records  and  MapQuest  will 

f  confirm  that  it  should  take 

two  hours  and  18  minutes 
to  driw  that  distance  at  the 
legal  speed  limit 
If  you’w  got  a  database 
integration  or  business  in- 
telli^ce  project  that’s 
behind  schedule,  you’re 
probably  skq>tical  about 
whether  this  magic  that 
rw  dubbed  transparency 
will  ewr  arrive.  L<x>king 
past  near-term  sticking 
points,  we  can.  however, 
be  confident  that  it  will 
We’re  collecting  more  and  more  infor¬ 
mation.  and  it’s  easier  to  just  keep  it  all 
than  it  is  to  figure  out  what  to  delete. 
Structured  data  formats  such  as  XML 
and  ROF  are  making  it  possible  to 
mine  this  growing  vohiroe  of  dau  for 
new  information.  Perhaps  most  impor¬ 
tant,  the  systems  we  buUd  today  will 
one  day  support  queries  that  we  didn’t 
even  andcipaie. 

Changes  in  the  public  policy  envi¬ 
ronment  are  also  leading  us  toward 
greater  transparency.  Regulatory  re¬ 
quirements  such  as  the  Sarbanes- 
Oxley  Act  and  a  California  law  requir¬ 
ing  disclosure  of  security  incidents 
demand  greater  systems  transparency. 


I  Privacy  advocates  such  as  science  fic¬ 
tion  writer  David  Brin  are  even  calling 
for  increased  transparency  of  stirveil- 
lance  systems  to  safeguard  privacy. 

While  transparency-producing 
systems  don’t  require  that  we  plan 
(}ueries  in  advance,  it  behooves  us  to 
prepare  for  the  impact  of  this  new¬ 
found  power.  Do  we  have  any  idea 
how  woik  styles  will  change?  Wfill  the 
ability  to  discover  new  relationships 
in  competitively  sensitive  data  create 
new  security  risks?  Who's  in  charge  of 
taking  advantage  of  the  power  of  trans¬ 
parency.  and  who  sets  the  ruks  for 
what’s  acceptable?  Do  we  fiavc  privacy 
policies  to  deal  with  the  flood  of  re¬ 
vealing  personal  location  information? 
Are  we  evohfing  social  conventions  to 
help  people  deal  with  their  increased 
exposure  wisely?  How  do  employees 
feel  about  all  of  this?  Peihaps  the  key 
question  is.  are  we  doing  the  best  job 
of  leveraging  an  increasingly  transpar¬ 
ent  environment  to  our  enter¬ 

prises  more  eflicient  and  productive? 

I’ll  be  exploring  individual  facets  of 
the  transparent  enterprise  in  future 
columns.  But  why  write  about  this 
here,  in  the  pages  of  Compurerworid? 

I  believe  that  CIOs  and  other  IT  pro¬ 
fessionals  are  on  the  forefront  of  the 
transparency  revolution,  like  it  or  not 
You  know  the  great  breadth  of  data 
available  to  you.  and  you  see  the  grad¬ 
ual  (sometimes  painftiliy  gradual)  in¬ 
tegration  of  systems  across  the  enter¬ 
prise.  You're  transparency  experts  al¬ 
ready.  It’s  the  rest  of  the  worid  that  has 
to  catch  up.  What’s  your  experience 
with  enterprise  transparency?  How 
is  your  organization  adapting?  Is  it  the 
boon  or  bane  of  your  existence,  or  am 
1  just  imagining  all  of  this?  1  look  for¬ 
ward  to  bearing  from  you.  O  48674 
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Got  Questions  About 
Network  Consolidation? 

Computerworld's  IT  Executive  Summit  Has  the  Answers 


If  you’re  an  IT  executive*  in  an  end-user 
organization,  apply  to  attend  CompMjtervvorld’s 
upcomir>g  complimentary  half-day  summit 
on  Network  Consolidation. 


CIOs  and  senior  IT  executives  are  finding  that 
consolidating  high-performance  networks  can 
play  a  Key  role  in  improving  business  eipplica- 
tion  performance  while  significantly  reducing 
operational  coste. 


The  proliferation  of  network  capacity  and  relat¬ 
ed  storage  and  server  infrastructure  presents  a 
daunting  challenge  for  today’s  enterprises, 
nr^any  of  which  are  positioning  themselves  for 
growth  yet  still  seeking  to  reduce  IT  costs 
where  feasible. 


By  leveraging  the  knowledge  of  industry 
experts  and  the  real-world  experience  and 
advice  of  your  IT  peers,  this  IT  Executive 
Summit  will  provide  an  overview  of  effective 
strategies  for  consolidating  and  connecting 
networks  and  data  center  applications. 


•CompHmentary  registration  is  restricted  to 
qualified  IT  executives  only. 


Apply  for  registration  today 

For  more  information  or  to  apply,  visit 
www.itexecutivesummit.com/nc 


Streamlining  Networks  and  Data  Centers: 
The  Business  Benefits  of  Consolidation 
Chicago  •  August  25,  2004 


Chicago  Four  Seasons  Hotel  *  120  East  Delaware  Place 


7:45am  to  8:15am 
8:15am  to  8:45am 


8;45am  to  9:15am 


9;15am  to  9-45am 


10:45am  to  11:15am 


11:15am  to  noon 


Noon 


Registration  and  Networking  Breakfast 


Rebuilding  the  IT  Rxjndation 

Maryfran  Johnson,  Editor  in  Chief,  Computerwodd 


Consolidation  and  the  Data  Center 
Boosting  Business  Performance 
and  Application  Availability 

Richard  Villars,  Vice  President.  Storage  Systems 
Research,  IDC 


Consolidation  Strategies  for  a  New  Media  World 

Andre  Mendes,  Chief  Technology  Integration  Officer,  PBS 


9:45am  to  10:15am 
10:15am  to  10:45am 


Refreshment  and  Networking  Break 


Perspectives  from  Oppenheimer  Funds 

Tim  Gertach,  Manager,  Telecommunications, 
Oppenheimer  Funds 


Customer  Challenges  and  Solutions: 
Real-Life  Scenarios  Connecting  Data 
Centers  Over  Distance 

Steve  Adolph,  CTO,  Enterprise  Solutions  Group.  CIENA 


Panel:  Overcoming  Management  Barriers  — 
Making  the  Case  for  Consolidation 

Panel  Moderator  Julia  King.  National  Correspondent. 
Computerworid 


Panelists.  F^ui  Bergamo,  Chief  Technology  Officer, 
Liberty  Mutual,  Stephen  Morin,  Chief  Information  Officer. 
TAC  V^rldwide  Companies,  Fred  Pond,  Director  of 
Information  Services.  The  Schnitzer  Group  of  Companies 


Program  Concludes 


Selected 

spe£^rs 

include: 


Morjifnin  Johnson 
Editor  in  Cl^f, 
Computerworid 


Andri  Mendes 
Chi^TMmology 
Integration  (^Jker, 
PBS 


Steve  Adolph 
CTO,  Enterprise 
Solutions  Groupk 
CIENA 


Kicfiord  Villars 
Vice  Presidmt 
Storage  Systems, 
IDC 


JuBa  IGng 
National 
Correspondent, 
Computerworid 


This  program  will  also  take  place  at  the 
Renaissance  in  Dallas  on  September  22.  2004 

For  more  information  on  these  locations,  call  888-299-0155 


Exclusively  sponsored  by: 


CKENA 


WSiniMMIl 

IT  EXECUTIVE  SUMMIT 
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QAA 

Securing  the  Corporation 

Internet  vulnerabilities  and  back  doors 
that  can  be  created  through  outsourced 
application  development  were  just  a  few 
of  the  security  issues  fielded  in  a  panel 
discussion  with  four  CSOs.  Page  36 


Career  Watch 

Navigating  the  move  from  a  purely 
technical  job  to  the  business  side  of 
the  organization;  the  effect  of  fewer 
computer  science  grads  entering  the 
workforce:  and  the  best  and  worst 
places  to  recruit  CIOs.  PAge  37 


IT  MENTOR 

Listen! 

Former  IT  manner  Dick  Lefkon 
says  the  key  to  getting  better  require¬ 
ments  for  IT  projects  is  to  teach  your 
business  anal^ts  to  interview  users 
properly.  Here’s  how.  Page  35 


08.09.04 


WHEN  CIO  Michael  H. 

Hugos  approached  his 
compan/s  top  business 
executives  with  an  idea 
for  building  a  collabora¬ 
tive  forecasting  system 
for  ctistomers.  the  execu¬ 
tives  immediately  became  uneasy^d 
suspicious. 

“The  finance  people  were  worried 
I’d  commit  [them]  to  a  multimillion- 
doilar  project,  and  the  sales  people 
ww  worried  I’d  stir  up  a  hornet’s  nest 
with  their  customers."  says  Hugos. 

CIO  at  Networic  Services  Co,  a  $6.8 
billion  distribution  cooperative  in  the 
Chicago  suburb  of  Mount  Prospect. 

But  Hugos  persisted.  He  created  a 
brief  PowerPoint  presentation  explain- 
ii^  his  plan  for  a  relatively  simple  and 
inexpensive  online  database  that  both 
customers  and  NSC  employees  could 
access  to  view,  correct  and  update  a 
single  set  of  forecast  numbers.  He  took 
it  back  to  NSC’s  vice  president  of  sales. 
Dave  Smith,  with  whom  he  is  chummy, 
and  to  the  head  of  customer  service. 
Tc^ther,  they  showed  it  to  one  o( 
NSC’s  top  customer  companies,  which 
gave  it  an  enthusiastic  thumbs  up. 

“Mike  is  a  great  salesman."  says  Jen¬ 
nifer  Jackolin.  NSC’s  direaor  of  cus- 
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t»>iniT  '^■r\  "I  .iKv.iw  thought  ot  tiim 
IS  t  s.iK'sni.in  vlisjiutsfJ  .is  .<  <  Ii ».  I  k-  is 
I  icrnric  ciWI.iKu.iior  .iivj  idi-j  in.in.'’ 

I  luj:i>s  IS  ,i|si*  .iiiionj:  .in  oliti-  finnip 

•  •!  pro.utivi- 1 1  k'.ulcrs  who  h.won’t 

Ivi-n  iniifniJ.iivJ  hx  Ku  t  lo  Ku  k 
>o,irs  i>i\ost  V  iiiriiit;.  sl.islu'j  buJi:ffs 
•11.)  di'iii.ij  business  II  ,ilij;iinii-nt 
'voros.btM.iKh.  I  [Mitri  ’tm 

V  >v.  i.'nis-omtb  siirvoxoJbx  IVloitic 

*  ••nsiih.do  it.J  11 K  .  I\v  si-.iroti  Vn  ices 


:  iii.ii  Thv-ir .  .'Jtii-.tiiu-s  ii.ivo 
<’> A-n  'MW  V  'sf'.il  .i!  .ihenniu  1 1  w  iih 
.orpi-rn.  it.-;civs, 

s.-iTii  .•»  US  h.oo  teit  be.ti  up.  .uivl 
\o  Kikei*  .1  p.issui'  pi<snion  lu  ihe 
II  pr-'K's.oll,'  s.W  s  Muuos.  v\ho  IS  ;1 
<  onipuf,-r>v,»r/j  oolunmisi  I'h.it  llt.ikes 
M  I  MSN  !o  t.iil  mu.  (he  tr.ip  oi  u.iiun}: 
.iK'iiiiJ  lo  iv  lolJ  wh.n  i»»  Jo.  ‘I  think 
»xe  h.i\e  slipped  into  (his  out  ot .» Jeten- 
si\e  'i'  wiion.  .ind  now  n  s  time  to  brush 
MUfsw'kesvifl  .Hill  tr\  .ij!.iin."  he  suvs 
Hert' s  sonic  .iJ'.ive  from  i  ltis  who 
sUiccssiulk  pushed  ihn*ui:h  their  un¬ 
solicited  iJe.(s.  s.i\  inu  or  eurninii  their 
vonipujiics  millions oi  doll.irs  in  the 

proi." 


Knowledge  Is  Power 

Kni*w  mj:  the  business  inside  .md  out 
is  ’he  best  jnd  Ustest  \\.i\  1 1  e.in  ^.iin 
k  iCkiH'ilitN  lor  its  honu->!roun  ideas  for 
.iddressiH)!  business  ihvJs.  I  h-ti's  vtin 
Bill  Ik'nia.  t  1<>  at  H.iniiviforJ  Bros,  t  .o.. 
I  l.?B-Nt(ire  Kr*H.ery  ehain  Kised  in 
i'ortijtiJ.  M.iine.  fills  1  r  postlions  w  ijh 
ps'ople  who  h.ive  worked  «m  the  froiit 
lines.  "I’nless  yotr%e  worked  in  .i  store. 
\otj  e.in't  eeperienee  all  of  die  issues 
that  pv’ople  ihere  run  up  .ijaiinsi.''  s.(ys 
Homa.  H.innakird  s  head  \if  ix-lail  sys- 
lenis,  for  evainple.  w.isa  store  ni.inajter 
for  1.''  %e.ifv 

rh.»l  business  espefience  Wvis  the 
iinehpm  in  vviniun):  o\er  eseeunw 
si|pfs*n  l«*r  an  I  T  proposal  to  eijuipall 
s|i.n-s  with  wireless  leehnolofry.  Homa 
sats  lodav.  all  orderiii}:.  invent<*r\  .md 
product  la>out  aetivities are  perlormed 
in  stores  V  ia  handheld  w  ireless  devices 
with  aeeesv  to  a  i\Ml-fime  tmline  data- 


14  Unless 
you've 
worked  in 
a  store,  you 
can’t  experi¬ 
ence  all  of 
the  issues  that  people 
there  run  up  against.  TT 


Bill  HOMA.  . 


TO  SHOW  SOME  INITIATIVE 

Know  your  company's  customers, 
markets  and  compelilors  -  and  their 
IT  capabilities 

Read  the  trade  publications  that 
your  CFO  and  CEO  read 

Buddy  up  wrth  re^ionai  sales 
manapers.  They're  your  window  lo 
what's  happening  on  the  front  lines 
of  the  business 

Always  seek  to  relieve  confhcl  and 
drudgery  in  busmess  processes. 

When  feasible  lei  IT  employees 
tesl-drrve  your  ideas  first. 

Base  your  suggestions  on  your  TT 
department's  strengths 

Build  credibility  with  guick-hrt, 
easy-payback  protects.  Recruit  aflies 
in  furKtionai  business  depanments 
and  gt  t  them  to  fund  such  projects. 


Ktsc  Ilf  purchasing  and  pniJuct  hlstors. 
"When  siimciinc  in  the  Mi»rc  i>  order¬ 
ing  .1  product,  wc  can  prompt  them 
with  what  wc  think  they  should  order 
based  on  that  store's  previous  week's 
sales  as  well  as  their  s.ileN  for  the  same 
week  of  the  previous  year."  Ilonw  e\ 
pl.tinv  A  single  .ipplication  for  m.irking 
down  perisIwMe  me.it  .ind  pouJirv  h.is 
paid  a  ItMV'..  return  on  H.mn.iford's 
Sd  million  investment  in  w  ireless  infra¬ 
structure.  which  now  supports  11  Jif- 
fereiii  applications,  Homa  says. 

Other  (!IOs  recommend  otyani^ing 
the  IT'  department  so  that  a  team  of 
stalYers  Ls  dedicated  exclusively  lo 
stay  ing  current  on  all  business  issues. 

At  ('alpine  tairp..  an  energy  pmduc- 
er  in  Vm  lose.  t.TO  Dennis  l  ishKick 
has  ere.Tled  an  IT'  leam  whose  sole 
job  is  to  study  the  m.irkeis  in  which 
llalpine  operates.  Kishback  s.»ys  it's  all 
part  of  his  philosophy  and  drive  to 
have  IT  '  tr.tnsform''  the  business 
rather  than  simply  help  or  impnwv  il 

•The  people  we  have  in  IS  in  m.tny 
casi*s  are  energy  professioruils  first 
.mJ  1 1  specialists  second."  I-ishhack 
viys.  Indeed,  it  was  IT  —  .isopp.>sed 
lo  brokers  or  rmanei.il  executives  -- 
that  conceived  the  idea  and  pushed  for 
the  creation  of  .i  set  of  real-time  inier- 
f.ites  to  several  ens'rgy  markets.  Since 
-(N>2.  ( lalpine's  Sl^n.OOi)  investment  in 
the  interfaces  has  helped  generate  or  ' 
protect  millions  of  dolLirs  in  revenue. 
jcc»*rding  to  1-ishhaek. 

"Nobody  from  the  business  came 


) 


and  asked  us  for  ihcsc  real-time  inter¬ 
laces."  l  ishback  strc.sses.  "We  I  in  riT 
reeogni/ed  the  need.  IT'  h.is  to  he 
proactive.  You  have  to  undersumd  tlie 
I  business.  It's  more  iniport.mt  th.in  un¬ 
derstanding  ihc  technology." 

Sell  Your  Strengths 

IT'  services  giani  .Accenture  I  (d  for 
I  nialh  reviews  and  updates  its  I  T  str.il- 
egy  every  two  ye.irs.  It  was  during -me 
of  tiu'se  reviews  thai  <  It  >  Frank  MoJ- 
ruson.  formerly  .i  consultaiil  .ii  the 
company,  decided  to  compare  his  ow  n 
list  of  internal  rrsirengtlis  with  the 
poritolio  of  IT  services  Accenture  sells 
itithi’ m.irket, 

•'Infernally,  we  h.id  a  strength  in 
j  m.inaging  and  archiiecling  1 1'  infra- 
I  strucluie.  yet  that  was  ni>l  a  service  we 
'  were  iifferiri^  in  the  inaiket.  "  Modru- 
son  recalls.  Accenture  had  also  just  mi 
■  grated  SD.OOO  ot  its  dw  u  users  from 
j  I  otus  Notes  t*'  Microsoft  e-mail,  yet 
I  Mierosofi  niiegraium  vv.is  aniuher 
I  key  strength  that  was  not  «m  thes’om- 
pany's  list  ot  revenue-generating  ser¬ 
vice  offerings. 

Working  with  the  executive  steering 
commitiee,  Modruson  pushed  for  the 
eixmpaiiy  to  offer  both  services,  which 
it  now  sells.  .-Xecenture  also  entered 
joint  venture  with  Microstifi 
Corjv  to  create  Avaii.ide  Inc.,  a  global 
technology  integration  company  dedi- 
caied  to  Microsoft  sofiw-arc.  LiuncheJ 
in  .April  JiHMI.  Seattle-based  Avaiiade 
now  boa.sts  mt»re  than  l.tHKf  customers 
and  J.tKlO  eniphiyees. 

"‘The  business  is  reaching  mu  to  the 
(TO  to  drive  more  (innovation  J."  Mod- 
I  ruson  says.  Even  though  he  has  seen 
budget  cuts  and  .in  overall  Jow  n  econ¬ 
omy  force  many  IT'  organizations  into 
"order-taking  mode.”  TI  needs  to  be 
pro.ictive.  lie  says.  "TTiat's  vvTtat  we  tell 
our  clients  they  should  be  doing.  ti*o." 

Try  This  at  Home 

.At  .Marcus  ix  Millichap  Real  bsuite 
Investment  Brokerage  Oo.  m  Fncino. 
('alii.,  "inything  that  comes  out  of  my 
depaitmem  has  lo  m.ike  brokers'  jobs 
more  etficient."  says  ( TO  Kick  I’eliz. 

Me  often  tests  ideas  in  IT'  before  bring- 


4‘  You  can 
be  a  reactive 
order-taker, 
or  a  business 
process 
change  agent. 

DENNIS  FISHBACK.  OO  CALPl^f  CORP 


44  Anything 
that  comes 
out  of  my 
department 
has  to  make 
brokers’  jobs 


more  efficient.  ’T 


RICK  PEITZ.  CIO  MARCliS  A  MiiuCHAP 


ing  them  to  the  business. 

l-or  ex.imrle.  before  llo.iting  his  pro- 
pos.il  to  evjiiip  the  eornpany  s  StU)  bro¬ 
kers  w  ith  w  ireless  Bl.ickBerry  Je\  ices 
.IS  a  w.w  ti.  si.iy  current  wilh  e-m.iil,  he 
decided  to  iry  them  first  in  his  own  de 
partniem.  which  readily  embraced  ilie 
lechnt'logy.  (tiven  I  Ts  positive  re¬ 
sponse,  Ivltz  knew  the  BlackBerries 
were  righi  for  busy  .igenis  looking  to 
st.iy  ill  coriMct  with  clients  w  ithoul 
lugging  .inuind  llieir  l.iptop  eompuiers. 

lie  w.is  right.  More  than  l(»(i  .igenis 
■‘fiiK'ked  lo  the  technoiogy  within  file 
first  two  months."  he  says. 

T'h.u  gave  IVIlz  and  the  I  T  depart¬ 
ment  the  credibility  and  the  SI  million 
in  funding  needed  to  build  and  I.iunch 
a  Vl'eb-based  marketing  application 
that  lets  agents  create  a  customized 
marketing  presentation  —  with  thi- 
look  and  fed  of  a  I’owerl'oint  presen¬ 
tation  —  using  information  that  is 
stored  in  templates  and  accessible  via 
the  Internet.  With  the  previous  mar¬ 
keting  application,  .igents  had  to  be 
on  the  company  intranet  to  acccs-s  the 
information  they  needed  for  presen- 
t.itions. 

"Il  was  a  fixed  solutittn.  If  they  de¬ 
cided  to  work  on  the  wwkend  at 
home,  they'd  have  lo  re-enter  all  of  the 
information."  IVllz  viys.  “We  hooked 
them  on  this  new  applic.ilion"  bee.iuse 
it  simplified  and  shortened  the  ere 
at  ion  of  marketing  p.ukages.  he  s.iyv 

What  Users  want  from  IT.  IVliz  ex¬ 
plains.  is  "a  w.iy  Co  streamline  pnv- 
esses  .ind  support  to  make  a  new  proc¬ 
ess  easy."  Ilie  best  way  to  do  that,  he 
•idds,  is  to  first  uw  the  technology 
you’re  proposing  interailly  and  then 
decide  whether  the  benefits  are  truly 
there. 

The  K>tiom  fine,  .says  Calpine’s  Kish- 
back.  is  that  (TOs  c.in  take  one  of  two 
paths;  "You  can  be  a  reactive  order- 
taker.  or  a  business  process  change 
agent."  he  says.  If  you  allow  yourself  to 
be  an  order-laker,  "yoirre  a  prime  can¬ 
didate  for  outM»urcing."  he  explains.  "If 
you  really  want  to  make  a  value-added 
contribution  to  your  company,  you 
have  to  be  proactive."  O  48047 
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Listen! 

Want  to  build  better  systems?  Teach  your 
people  to  conduct  better  user  interviews. 

By  Dick  Lefkon 


ASK  NEARLY  ANY  IT  MANAGER  how  helpful 
business  users  are.  anJ  ho  will  eventu¬ 
ally  say  something  like.  "I  know  it's  not 
their  fault,  hut  when  I  expend  re- 
s4*urees  to  jutther  predesign  informa¬ 
tion  frtun  the  business  users,  they  tell 
us  only  half  of  what  we  need  to  know 
and  then  give  me  trouble  .it  sign-ftlT 
when  we've  built  e.xaetly  what  ihe> 
asked  for." 

That  may  be  true.  But  why? 

Maybe  it’s  beeauM.-  the  business  ana¬ 
lysts  who  question  the  users  aren’t 
nmtinely  given  real  training  on  how  to 
e«)nduet  an  interview  and  d*m't  receive 
feedback  on  their  performance.  ’ITiey 
may  be  scinioled  in  how  to  distill  the 
vital  facts  into  UMl.  product  templates 
but  not  in  how  U)  get  the  valid  facts 
fn)m  users  in  the  first  place. 

Halt  the  solution  is  to  uxmstruct  and 
require  regular  use  4>f  a  user  interview  | 
f«*nn.  Kvery  IT  unit  shtmld  have  such  a  j 
lorm  for  gathering  systems  planning  i 


information  betivre  specifications  are 
written.  Dust  it  olT.  distribute  it  to  your 
best  advisers,  and  discuss  it.  Then  de¬ 
velop  a  plan  for  improving  and  reim- 
plementing  it.  That  way.  y«>u’ll 
be  sure  that  all  the  important 
questions  you  come  up  with  in 
advance  w  ill  get  asked  in  the 
first  interview,  This  will  go  a 
long  way  toward  producing  a 
well-dc.signed  system. 

But  this  works  only  if  the 
business  analyst  is  really  lis¬ 
tening  to  the  answers.  Ytm 
can  teach  him  to  listen 
through  a  simple  tracking-and-feed- 
back  pn»tocol.  and  that's  the  second  in¬ 
gredient  for  getting  better  business 
facts  int»i  your  design  specifications. 

How  the  System  Works 

Here's  h«»w  it  wttrks:  A  supcrvistir  or 
business  analyst  mentor  tags  along 
with  the  business  analyst  to  the  user 
interview.  At  the  user  .session,  both  the 
active  business  analyst  and  the  silent 
mentttr  write  on  copies  of  the  standard 
user  interview  form.  But  while  the  ana¬ 
lyst  captures  business  facts,  the  men¬ 
tor  uses  the  form  to  rc’cord  sequences 
«>f  ctkle  letters  plus  occasional  key¬ 
words  to  fiieilitate  later  review  of  the 
,  session.  The  user  ntvdn'l  bo  l4»l  J  that 
the  mentor  is  "grading"  the  analyst's 
interviewing  skills. 

I  Using  a  simple.  HJ-!eiter  mnemonic 
I  c«>dc  (svv  box  at  right ).  the  mentor 
luues  what  he  stvs  and  hears  every  few 
seconds  during  the  interview,  hven  if 
the  menu*r  luus  never  befoa-  coded  or 
analy  zed  interviews,  the  process  is 
easy  to  learn  and  can  K*  quickly  huer- 
nali/ed  with  a  little  practiw. 

Here’s  how  a  nu  nior  might  employ 
the  code  to  record  a  few  .seconds  of  an 
interview: 

■  ANALYST;  What  process  difficullies  have 
you  had  with  the  current  bond  trading  sys¬ 
tem?  (Mentor:  Q...0)  USER:  \\\‘\l  we’ve 
been  Nioking  styrips  and  zero  ct'uptin 
bonds  as  very  long-term  T-bills,  but 
Mvmeiimes  the  results  reverse 
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I  credit.s  and  debits  and  also  come  '  'ul 
I  much  bigger  than  the  trader  expected. 

'  Me . .  A  \  \.  . 

■  ANALYST;  So  you're  saying  T-bills  lasting 
many  years  sometimes  have  their  profits 
and  losses  reversed  and  have  an  unexpect¬ 
edly  large  magnrtude?  (Mentor:  B 

USER:  Come  to  think  of  it.  I  just  re- 
,  called  s«)me  real  bookkeeping  prob- 
!  iems  the  such-and-such  system  caused 
last  year.  •  Mentor  N  .\  - 

■  ANALYST:  Yes,  I  remember  about  book¬ 
keeping  very  well.  You  know.  I  got  all  A's 
and  B's  in  it  at  Wharton.  (Mentor:  X  ..X.  X  j 

l  ater,  the  ment«>r  and  analyst  sh»»utd 
meet  i«)  go  over  the  mentor’s  notated 
user  interview  ft»rm.  and  the  mem»*r 
can  e.xplain  how  the  analyst  enixmr- 
aged  or  discouraged  the  user's  infor¬ 
mation  flow  during  the  sesskrn. 

The  analyst  should  easily  discern 
where  impnnements  are  needed  from 
the  raw  counts  as  well  as  the  se¬ 
quences  of  the  c«Hle  letters,  for  in¬ 
stance.  pnhlucing  lots  of  QA 
and  QN  sequences  is  giH»d.  j 

_  even  with  intervening  S'v  But  ' 

frequent  or  XXti’s  | 

may  mean  that  the  interviewer  is  wast-  ' 
ing  time  by  overexplaining  questkms. 

Usually.  busirK*ss  amilysts  readily  i 

accept  a  mentor’s  guidance  and  keep  ' 
the  10  letters  in  mind  at  subsv'queni 
user  inierv  lews.  You’ll  find  that  they 
become  better  Interviewers  through 
practice,  followed  by  a  half-hvmr  cri¬ 
tique  in  which  real  ixtunis  of  the  letter 
codes  afv  reviewed  in  eonie.Nt. 

Sot»n.  your  design  .<4>ecifieaiions  will 
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Self  Test 

Try  categorung  aach  of  these 
phrases  with  one  of  the  X)  codes 

1. [  ]FtMsed(saUe  your  phone  ringw. 

2.  [  ]  That  made  us  bse  a  big  diwit. 

3.  (  ]  Which  buildings  wN  they  be  in? 

4.  (  ]  Your  reports  are  easy  la  read. 

5.  (  )  We’re  upgradrig  the  mal  saner. 

6. [  JBusirwss  user  searches  for  foUw. 

7.  (  ]  Users  seMom  describe  needs  wet. 

8.  [  1 1  can  see  why  you  got  angry. 

9.  [  ]  Would  an  audit  trai  prevent  that? 

10. (  ]  BO  dertes.  but  only  20  at  a  time. 

Answers  1-0. 2-N.  3-  Q.  4-P  5-X  6-S 
7-J:8-C,9^;lO-A 


be  written  frtjm  more  and  K’tter  bust- 
nes.s-user  input.  O  48290 

/  e/kon  hiafonru’rlT  monugiTuf  Smith 
Hamiy  and  EquituWe  Capita/  who  rem- 
crMMu/f.s/iir  financiufxervices'comfmntes. 
Contuet  himaf  aifp.^»«  a  hntmaU.com. 

This  is  the  first  in  an  occasionai  series 
of  columns  written  by  IT  numagers  for 
IT  managers. 
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tomcr  service.  “I  always  thought  of  him 
as  a  salesman  di^is^  as  a  CIO.  He  is 
a  terrific  collaborator  and  idea  man  " 

Hugos  is  among  an  elite  group 
of  proactive  IT  leaders  who  haven't 
been  intimidated  by  back-to-back 
years  of  cost  cutting,  slashed  budgets 
and  dismal  business/TT  alignment 
scores.  In  March,  a  paltry  10%  of  200 
executives  jointly  survej^  by  Deloitte 
Consulting  and  IDG  Research  Services 
reported  that  their  companies  have 
been  successful  at  aligning  IT  with 
corporate  strategies. 

“Some  of  us  have  felt  beat  up.  and 
we've  taken  a  passive  position  in  the 
IT  profession.”  says  Hugos,  who  is  a 
Computerworld  columnist.  That  makes 
it  easy  to  fall  into  the  trap  of  waiting 
around  to  be  told  what  to  do.  "1  think 
wc  hove  slipped  into  this  out  of  a  defien- 
sive  reaction,  and  now  it's  time  to  briisb 
ourselves  off  and  try  again,”  be  says. 

Here's  some  advice  horn  CIOs  who 
successfully  pu.shed  through  their  un¬ 
solicited  ideas,  saving  or  earning  their 
companies  millions  of  dollars  in  the 
process. 

Knowledge  b  Power 

Knowing  the  business  inside  and  out 
is  the  best  and  fastest  way  IT  can  gain 
credibility  for  its  homegrown  ideas  for 
addressing  business  needs.  That's  why 
Bill  Homa,  CIO  at  Hannalbrd  Bros.  Co., 
a  l2(>-storr  grocery  chain  based  in 
Portland.  Maine,  fills  IT  positions  with 
people  who  have  worked  on  the  from 
lines,  “Unless  you’ve  worked  in  a  store, 
you  can't  experience  all  of  the  issues 
that  people  there  run  up  against,”  says 
Homa.  Hannaford's  head  of  retail  sys¬ 
tems.  for  example,  was  a  store  manager 
for  IS  years. 

That  business  experience  was  the 
linchpin  in  winning  over  executive 
support  for  an  IT  proposal  to  equip  all 
stores  with  wireless  technology,  Homa 
says.  Today,  all  orderif^  inventory  and 
product  layout  activities  are  performed 
in  stores  via  handheld  wircl^  devices 
with  access  to  a  real-time  online  data- 
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base  of  purchasing  and  product  history. 
“When  someone  in  the  store  is  order¬ 
ing  a  product  wc  can  prompt  them 
with  what  we  think  they  should  order 
based  on  that  store’s  previous  week’s 
sales  as  well  as  their  sales  for  the  same 
week  of  the  previous  year."  Homa  ex¬ 
plains.  A  sit^  application  for  maiidng 
down  perishable  meat  and  poultry  ha.s 
paid  a  100%  return  on  Hannaford's 
$2  million  inv^iment  in  wireless  infra¬ 
structure.  whi^  DOW  supports  11  dif¬ 
ferent  applications.  Homa  says. 

Other  CIOs  recommend  organizing 
the  IT  department  so  that  a  team  of 
staffers  is  dedicated  exclusively  to 
staying  current  on  all  business  issues. 

At  Calpine  Corp.,  an  energy  produc¬ 
er  in  San  lose.  CIO  Deiuits  Fishback 
has  created  an  IT  team  whose  sole 
job  is  to  study  the  markets  in  which 
Calpine  operates.  Fishback  says  it’s  all 
part  of  his  philosophy  and  drive  to 
have  IT  “transform"  the  business 
rather  than  simply  help  or  improve  it. 

The  people  wc  have  in  IS  in  many 
cases  are  energy  professionals  first 
and  IT  specialists  second,”  Fishback 
says.  Indeed,  it  was  IT  —  as  opposed 
to  brokers  or  financial  executives  — 
that  conceived  the  idea  and  pushed  for 
the  creation  of  a  set  of  real-time  inter¬ 
faces  to  several  energy  markets.  Since 
2002,  Calpine's  $136,000  investment  in 
the  interfaces  has  helped  generate  or 
protect  millions  of  dollars  in  revenue, 
according  to  Fishback. 

'nobody  from  the  business  came 


and  asked  us  for  these  real-time  inter¬ 
faces."  Fishback  stresses.  "Wc  {in  ITl 
recognized  the  need.  IT  has  to  be 
proactive.  You  have  to  understand  the 
business.  It's  more  important  than  un¬ 
derstanding  the  technology." 

SeN  Your  Strengths 

IT  services  giant  Accenture  Ltd.  for¬ 
mally  reviews  and  updates  its  IT  strat¬ 
egy  every  two  years.  It  was  during  one 
of  those  reviews  that  CIO  Frank  Mod- 
ruson,  formerly  a  consultant  at  the 
company,  decided  to  compare  his  own 
list  of  internal  IT  strengths  with  the 
portfolio  of  IT  services  Accenttirc  sells 
in  the  market. 

“Internally,  wc  had  a  strength  in 
managing  and  architecting  IT  infra¬ 
structure.  3ret  that  was  not  a  service  wc 
were  offeriitg  in  the  market,"  Modru- 
son  recalls.  Accenture  had  also  just  mi¬ 
grated  80.000  of  its  own  users  from 
Locus  Notes  to  Microsoft  e-mail,  yet 
Microsoft  integration  was  another 
key  strength  that  was  not  on  the  com¬ 
pany’s  list  of  revenuegenerating  ser¬ 
vice  offerings. 

Working  with  the  executive  steering 
committee.  Modruson  pushed  for  the 
company  to  offer  both  services,  which 
it  now  sells.  Accenture  also  entered 
into  a  joint  venture  with  Microsoft 
Corp.  to  create  Avanade  Inc.,  a  global 
technology  integration  company  dedi¬ 
cated  to  Microsoft  software.  Launched 
in  April  2000,  Seattle-based  Avanade 
now  boasts  more  than  1,000  customers 
and  2.000  employees. 

“The  business  is  reaching  out  to  the 
CIO  to  drive  more  [innovation]."  Mod¬ 
ruson  says.  Even  though  he  has  seen 
budget  cuts  and  an  overall  down  econ¬ 
omy  force  many  IT  organizations  into 
“order-taking  mode,”  IT  needs  to  be 
proactive,  he  says.  "That’s  what  we  tell 
our  clients  they  should  be  doing,  toa" 

Tiy  This  at  Home 

At  Marcus  MUlkhap  Real  Estate 
Investment  Brokerage  Ca  in  Encino. 
Calif.,  "anything  that  comes  out  of  my 
department  has  to  make  brokers’  jobs 
more  efficient."  says  CIO  Rick  Peltz. 

He  often  tests  ideas  in  IT  before  bring- 
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I  ing  them  to  the  business. 

For  example,  before  floating  his  pro¬ 
posal  to  equip  the  company's  800  bro¬ 
kers  with  wireless  BlackBerry  devices 
a.s  a  way  to  stay  current  with  e-mail,  be 
decided  to  try  them  furst  in  his  own  de¬ 
partment,  which  readily  embraced  the 
technology.  Given  IT’s  positive  re¬ 
sponse.  Peltz  knew  the  BlackBcrries 
were  right  for  busy  a^nts  looking  to 
stay  in  contact  with  clients  without 
lugging  around  tbeir  laptop  computers. 

He  was  right.  More  than  100  agents 
"flocked  to  the  technology  within  the 
first  two  months,"  be  says. 

That  gave  Peltz  and  the  IT  depart¬ 
ment  the  credibility  and  the  $1  million 
in  funding  needed  to  build  and  launch 
a  Web-based  marketing  application 
that  lets  agents  create  a  customized 
marketing  presentation  —  with  the 
look  and  feel  of  a  PowerPoint  presen¬ 
tation  —  using  information  that  is 
stored  in  templates  and  accessible  via 
the  Internet.  With  the  previous  mar¬ 
keting  application,  agents  had  to  be 
on  the  company  intranet  to  access  the 
information  they  needed  for  presen¬ 
tations. 

"It  was  a  fixed  solution.  If  they  de¬ 
cided  to  woric  on  the  weekend  at 
home,  they’d  have  to  re-enter  all  of  the 
information,"  Peltz  says,  "^e  hooked 
them  on  this  new  application”  because 
it  simplified  and  sborteoed  the  cre¬ 


ation  of  marketing  packages,  he  says. 

What  users  svani  from  IT,  Peltz  ex¬ 
plains.  is  “a  way  to  streamline  proc¬ 
esses  and  support  to  make  a  new  proc¬ 
ess  easy."  The  best  way  to  do  that,  be 
adds,  is  to  first  use  the  technology 
you’re  proposing  internally  and  then 
decide  whether  the  benefits  are  truly 
there. 

The  bottom  line,  says  Calpine’s  Fish- 
back.  is  that  CIOs  can  take  one  of  two 
paths:  "You  can  be  a  reactive  order- 
taker,  or  a  business  process  change 
agent,"  he  says.  If  you  allow  yourself  to 
be  an  order-taker,  “you’re  a  prime  can¬ 
didate  for  outsourcing.”  he  explains.  If 
you  really  want  to  make  a  value-added 
contribution  to  your  company,  you 
have  to  be  proactive.”  O  480^ 
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Listen! 

Want  to  build  better  systems?  Teach  your 
people  to  conduct  better  user  interviews. 

By  Dick  Lefkon 


ASK  HEAIHT  ANT  IT  MANANU  how  helpful 
business  users  are,  and  he  will  eventu¬ 
ally  say  something  like.  “I  know  it’s  not 
their  fkult,  but  when  I  expend  re¬ 
sources  to  gather  predesign  informa¬ 
tion  from  the  business  users,  they  tell 
us  only  half  of  what  we  need  to  Imow 
and  then  give  me  trouble  at  sign-off 
when  we’ve  built  exactly  what  they 
asked  for.” 

That  may  be  true.  But  why? 

Maybe  it’s  because  the  business  ana¬ 
lysts  who  question  the  users  aren't 
routinely  given  real  training  on  how  to 
conduct  an  interview  and  don't  receive 
feedback  on  their  performance.  They 
may  be  schooled  in  how  to  distill  the 
vital  facts  into  UML  product  templates 
but  not  in  how  to  get  the  valid  facts 
from  users  in  the  first  place. 

Half  the  solution  is  to  construct  and 
require  regular  use  of  a  user  interview 
form.  Every  IT  unit  should  have  such  a 
form  for  gathering  systems  planning 


mformation  before  ^ecifications  are 
written.  Dust  it  off.  distribute  it  to  your 
best  advisers,  and  discuss  it.  Then  de¬ 
velop  a  plan  for  improving  and  reim¬ 
plementing  it  That  way.  youl! 
be  sure  that  ail  the  important 
questions  you  come  up  with  in 
advance  will  get  asked  in  the 
first  interview.  This  will  go  a 
long  way  toward  producing  a 
;U-designed  system. 

But  this  works  only  if  the 
business  analyst  is  really  lis¬ 
tening  to  the  answers.  You 
'  can  teach  him  to  listen 
through  a  simple  tracking-and-feed- 
back  protocol,  and  that’s  the  second  in¬ 
gredient  for  getting  better  business 
frets  into  your  design  specifications. 

How  the  System  Woilis 

Here’s  bow  it  works:  A  supervisor  or 
business  analyst  mentor  tags  along 
with  the  business  analyst  to  the  user 
Ibterview.  At  die  user  session,  both  the 
active  business  analyst  and  the  silent 
mentor  write  on  copies  of  the  standard 
user  interview  form.  But  while  the  ana¬ 
lyst  captures  business  frets,  the  men¬ 
tor  uses  the  form  to  record  sequences 
of  code  letters  plus  occasional  key¬ 
words  to  facilitate  later  review  of  the 
session.  The  user  needn't  be  told  that 
the  mentor  is  "gradii^’'  the  analyst’s 
interviewing  skills. 

Usii^  a  simple.  lO-letter  mnemonic 
code  (see  box  at  right),  the  mentor 
notes  what  he  sees  and  hears  every  few 
seconds  during  the  interview.  Even  if 
the  mentor  has  never  before  coded  or 
analyzed  interviews,  the  process  is 
easy  to  learn  and  can  be  quickly  inter¬ 
nalized  with  a  little  practice. 

Here’s  how  a  mentor  might  employ 
the  code  to  record  a  few  seconds  of  an 
interview: 

■  ANALYST:  Wlhat  proem  dMieuHiK  hart 
you  had  wMi  the  eurroiN  bond  traiKf«  sys- 

tm?  (Mentor  a..Q)  USQb  yfeli,  we’ve 
been  booking  styrips  and  zero  coupon 
bonds  as  very  Icmg-term  T-bills.  but  . 
sometimes  the  P6cL  results  reverse  I 
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credits  and  debits  and  also  come  out 
much  bigger  than  the  trader  expected. 
(Menton  A_A.-A...A) 

■ANALYST:  Se  you're  saying  T-hMsteting 
mwty  yeara  someiiniaB  have  their  profits 
aodloseesroveraedendhaveaniawiiMet- 
wty  Iwge  megnilude?  (Msntor 

USER:  Come  to  think  of  it,  I  just  re¬ 
called  some  real  bookkeeping  prob¬ 
lems  the  such-and-such  system  caused 
last  year.  (Mentor  N..J«) 

•ANALYST:  Vk,  I  refnarabereboui  book¬ 
keeping  very  weflltou  know.  I  got  y  A's 
and  0*8  in  It  at  \Nherton.  (Mentor  X.,X.  JO 

Later,  the  mentor  and  analyst  should 
meet  to  go  over  the  mentor's  notated 
user  interview  form,  and  the  mentor 
can  explain  how  the  analyst  encour¬ 
aged  or  discouraged  the  user's  infor¬ 
mation  flow  during  the  session. 

The  analyst  should  easily  discern 
where  improvements  are  needed  from 
the  raw  counts  as  well  as  the  se¬ 
quences  of  the  code  letters.  For  in¬ 
stance.  producing  lots  of  C^A 
and  ()N  sequences  is  good, 
even  with  intervening  S’s.  But 
frequent  or  XXCJIs 

may  mean  that  the  interviewer  is  wast¬ 
ing  time  by  overexplaining  questions. 

Usually,  business  analysts  readily 
accept  a  mrator's  guidance  and  ke^ 
the  10  letters  in  mind  at  subsequent 
user  interviews.  You’ll  find  that  they 
become  better  interviewers  throufdi 
practice,  followed  by  a  half-hour  cri¬ 
tique  in  which  real  counts  of  the  letter 
codes  are  reviewed  in  context  j 

Soon,  your  design  specifications  will  I 


be  written  from  more  and  better  busi¬ 
ness-user  input.  O  48290 

Lefkon  is  a  former  tT  manager  at  Smith 
Barney  and  Etjuitable  Capited  who  now 
nonsuits  fijr  financial  services  companies. 
Contact  him  at  <dtp368^totmaiLcom. 
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Four  chief  security  officers  discuss  the 
steps  they’ve  taken  to  saf^uard  their 
organizations’  IT  infrastructures  fern 
internal  and  external  threats. 


Bade  doors  by  software  developers. 
These  are  some  of  the  primary  chai- 
tenges  that  corporate  t^ief  security  of- 
ftcers  ore/adng  these  days,  /n  May.  Computerworld’s 
Thomas  Hoj^’man  moderated  a  poTiei  discussion  with 
four  CSOs  who  explored  these  topics  at  a  meetir^  of 
the  New  Jersey  ctuipter  of  the  Society  for  Inftjrrruttion 
Mar\ttgemera. 

The  paneiists  who  participated  in  the  discussion  at 
the  meeting  in  Morristown  were  Stephen  Foater.  global 
chief  irformation  security  oj^icer  of  Avaya  Inc.  in 
Sasictng  Ri4ge.  N/.*  Don  Barvay,  chief  security  officer  at 
Chubb  Grotq)  of  Insurance  Companies  in  Warren,  N.J.; 

Bnray.  chi^security  officer  at  Cartrur  Inc.  in 
Stamford,  Corot:  and  JmtfiM  Zwena  head  of^obal 
infrastructure  strata^  plaitning,  benchmarking  and 
information  systems  security  at  i4ventis  Pharmaceuti¬ 
cals  Inc.  in  Bridgewater.  NJ. 


ilhmaniauroigmiUlian'stepaKurittGoncmmtodaf. 
and  wlM  atep*  ara  you  ttMno  te  adtem  tiMm? 

BARI^:  One  of  the  things  that's  emerging  is  the 
dependence  on  the  Internet  infrastructure.  TWo  or 
thm  years  ago,  if  Internet  access  was  lost  for  a  cou¬ 
ple  of  days,  it  would  be  [merely]  inconvenient  unless 
you  were  in  an  online  business. 


But  if  a  terrorist  group  or  a  group  of  hackers  want¬ 
ed  to  take  the  Internet  out,  you  could  really  alTect  the 
US.  economy  today,  and  1  don’t  thiitk  it’s  that  diffi¬ 
cult  to  da  Executives  don't  realize  just  bow  depen¬ 
dent  they  are  on  that  infrastructure,  and  we  need  to 
sit  down  with  them  and  start  to  build  a  strategy 
around  how  we  would  conduct  our  business  if  the 
Internet  were  disrupted. 

ZWMO;  One  of  the  concerns  that  I  have  right  oow 
is  what  1  call  cybervandals  —  basically,  kids  who 
have  nothing  better  to  do  than  to  create  worms  and 
viruses.  I  see  a  disturbing  trend;  that  it's  starring 
to  escalate  to  organized  crime  and  move  toward 
cyberterrorism. 


MM  an  soHM  of  the  kfy  securRy  chaNnoss  posed  through 
butenmprooeos  or  rr  outeourdng? 

POSTBR:  One  of  the  problems  w  ith  outsourcing  is 
ensuring  the  quality  of  work.  A  lot  of  development 
worit  is  being  sent  o6Esbore  to  India  and  Asia.  But 
what  controls  are  in  place  to  ensure  quality  of  ser¬ 
vice.  confidentiality  of  information,  protectioo  of 
pre^rietary  assets,  [and]  proper  background  investi¬ 
gations  for  employees  working  with  your  informa¬ 
tion?  You’re  potentially  giving  the  keys  to  the  king¬ 
dom  to  an  outsotircer.  and  you’re  relying  on  them  to 
provide  good  security. 


We  have  to  push  back  with  our  executives  and  ad¬ 
vise  them  that  the  sectirity  risks  might  outweigh  the 
cost  savings  through  outsourcing. 

2B0RAV:  The  Gartner  culture  has  always  been.  “Do 
it  now  and  then  find  out  who  you  were  supposed  to 
ask.”  The  problem  is  that  we  had  some  staffers  out¬ 
side  of  headquarters  who  were  acquiring  Web  ser¬ 
vices  that  we  didn't  know  about,  and  the  security 
state  of  those  sites  was  unverified. 

I  can  remember  once  when  our  CIO  called  me  and 
asked,  “What  the  heck  happened  to  our  Web  site?” 
None  of  us  in  IT  knew  what  he  was  referring  ta  Af¬ 
ter  some  digging,  we  ftmnd  that  one  of  our  business 
units  had  acquired  Web  services  through  a  service 
provider  and  then  that  outsourced  site  was  hacked. 

What  worked  for  us  was  teaming  up  with  the  con¬ 
tracts  people,  since  they  have  more  leverage  than  we 
do  in  IT.  As  a  result,  all  external  acquisitions  have  to 
be  passed  through  filters  to  ensure  that  technologies 
and  online  services  we  utilize  have  the  appropriate 
security  controls. 


How  do  you  mate  sum  there  arMT  any  back  doors  in 
software  that  has  been  outsowced  for  developnwnt  or 
maintenance? 

FOSm  The  only  real  assurance  that  back  doors 
have  not  been  coded  into  an  application  is  to  con¬ 
duct  code  reviews.  [That]  can  be  almost  as  expensive 
as  the  development  costs.  If  you  had  to  do  code  re¬ 
views  on  all  overseas  development,  it  would  offset 
the  cost  benefits  of  offshoring  your  development 
work.  One  answer  is  to  conduct  more  proactive 
scans  of  your  network  to  look  for  such  attacks. 

ZMMNB;  You  have  to  apply  multiple  techniques, 
such  as  monitoring  what  comes  into  and  goes  out  of 
your  organization.  Make  sure  that  you  test  access 
points  into  your  environment  to  see  if  experts  can 
break  in. 


How  do  you  comminicate  to  ytwr  chtef  flnanetel  officer  the 
stops  you’m  taking  to  addroas  the  eocurity  requirments  of 
rsgutelians  such  as  tha  Saibanes-Oiloy  Act? 

2MMB;  You  have  to  ask,  “Who  is  the  real  owner  of 
a  business  process?”  and  then  work  with  them  to 
gather  those  security  requirements. 

PDSm  Everything  can’t  be  solved  by  technology 
or  IT  controls.  We  have  to  challenge  business  execu¬ 
tives  to  make  sure  we  are  requiring  all  business  own¬ 
ers  to  have  better  process  controls  in  place. 


What  are  tte  hay  shortcomings  you  would  Mta  to  saa 
aacurityaaftwara  vendors  address? 

OAMEV:  Vendors  have  been  playing  catch-up  in  in¬ 
formation  sectirity  for  years.  Vendors  need  to  spend 
more  time  meeting  with  customers  to  find  out  what 
their  challenges  are  instead  of  dealing  with  that  vul¬ 
nerability  after  a  couple  of  years. 

ZMMIft  One  of  the  biggest  boles  we  have  right  now, 
which  is  just  starting  to  be  addressed,  is  device  and 
data  authentication.  It’s  not  going  to  be  a  Holy  Grail 
or  a  silver  bullet,  but  it  should  be  one  of  the  broadest 
jumps  that  we  can  make,  to  know  where  the  device  b 
that’s  connected  to  our  environment,  who  it  belongs 
to  and  where  the  data  b  coining  from.  O  48286 
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nCMOTMOFTNElMinitogybub- 
lilt  aid  honur  iiDijn  abaul  unempkqmnl 
and  oMna  ouhoRiig  <d  Isdi  M  law 
danpaned  aludnds' Wirast  In  conpuhr 
cams  and  Ued  a  23%  dadne  to  con- 
pula  acance  prognnti  aainanls  a  OS. 
unnisaiBsbatoHan20a2and2aaaac- 
codtog  to  iKM  Fspoit  to  Ha  tsAvafea 
nias  Jainna  Fannla.aaaocaladaaiol 
da  IMwiatir  ol  Cdhnda.  Sai  nano. 
SclioololEjigtoaatog.toldlannwiapa 
MtaitotogiaUaosralatoroompWaacl- 
eiaas  and  spaMns  anriyala  OHcla  paa 
kaiinn-anddaaccotopniilngaalai 
<daataiiaa.bQnuaasaidpdnianaatos- 


drendlfBlappaitogpElasU&oonpa- 
niaa  an  on  la  (uap  d  a  Nrinp  naumance, 
nftchtononpitogconoenadiaataacata- 
ly  dl  donaslto  todi  pnhaaonale  aa  aal  B 
a  aMtog  d  achatoglcal  tonnBtoa 
Tha  US.  OapalnartdLdnrinaask 
46%gnMlhtolanunibadidatorcom- 
pda  sdimn  angaaas  Mman  2002 
and  2012. 
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Apiigori.  4d  .  ..  T4-yv.,r 
.eiefan  ot  AflO  a  Ijuvncss 
pioteas  tiot'aourcing  Curinjay 
thj*  oHpfj  a  <vi0f  range  'jfr- 
v*ce5  mr.luiiing  oata  entry  i^ll 
Center  suppo't  anc  document 
ant)  for-rns  managtmienl.  all  ol 
which  aif-  perlormed  and  deliy 
e/ea  by  employees  who  wtirti  m 
Iheir  homes.  Outing  hrs  caiear 
with  the  company  he  has  held 
a  yarifty  of  positions  working 
hi5  way  up  trom  a  cor»sultiag 
tOl«  to  CIO  and  then  moving 
into  his  Current  COO  post 
He  spoke  with  CompLlerwo'lt} 
about  hts  experiencirs  as  ar>  iT 
professional  mowing  between 
the  ipchrtical  and  business 
sides  0*  the  enterprise 


Whit  WM  your  first  job  in  n?  I  Started 
as  a  database  axisultant  wortonQ  with 
snial  comparties.  EveritualyJ  iTKtved  to 
ARO  and  into  a  UHime  position  pro- 
grammng  datab^  applications  vound 
apredicbve  dialer  application  the  comoa- 
ny  had  purchased 

How  dU  you  mate  the  move  to  the 
buBnes8side7W»itaor*dualtran- 
stttei.  or  did  you  mate  a  ciMr*cut 
tenp  out  of  heads-dewn  tecMcal 
worfi  to  a  busbiesVstralagy  role?  The 
move  trom  a  strictly  IT  job  to  operations 
was  gradual,  smee  we  had  to  write  and  in¬ 
tegrate  other  programming  to  support  the 
predictive  dialer  appbcation.  I  worked  my 
way  up  to  CK).  Eventually  I  was  making 
more  and  more  deasions  about  opera¬ 
tions,  since  IT  6  the  framework  for  bund¬ 
ing  a  rnore  ethcaeni  and  coa-eflective  op- 

eration.  As  a  result  of  a  person  departing 
from  the  operations  position.  I  assuned  a 
dual  rote  of  OO/COO.  In  an  organization 
that  has  less  then  S10  million  m  sates,  a 
pasoncanpteybothfotesveryeffecJTve- 
ly.  But  as  we  grew,  my  C30  rote  eventually 
Iras  too  much  with  the  COO  role.  »)d  a 
separate  ao  was  htred. 


WWt  more  and  more  fT  wofh.  such  as 
pntgramniiiy  and  appication  support 
and  maManance,  moving  offshore, 
doyouseottenoedforpuelylachni- 
cai  sUs  on  tte  dedine  here  in  the 
U.S.?  I  tfvnk  techricdl  ab*fy  ^one 

win  krmt  your  |ob  choices.  However,  with 
somebusinessandoper^ionsback- 
grottfuj.  you  can  be  pwt  of  the  leWT)  that 
manages  any  offshore  activiry 

in  your  opMon.  are  there  other  non¬ 
technical  ridb  an  rr  profasaionai 
shouldhonatoensurecontinuadca- 
raarsucGaasTlobtamedanMBAatUm- 
versi^  d  lhno«.  specializing  in  both  IT 
and  finance.  I  believe  that  more  and  more 

IT  involves  making  operations  and  mar 

keting  decisions.  A  person  who  can  srt 
down  with  markelinQ/tinance/accounting 
departments  and  speak  iher  language 
tfid  overtay  this  to  IT  s  very  valuable  to 
organizations. 

What  advantages  does  your  fT  baefc- 
ground  and  eipariance  afford  you  in 
your  rote  as  COO?  Seven  years  ago.  I 
spearheaded  our  move  to  a  virtual  busi¬ 
ness  model  tor  or  customer  service  and 
busmess  process  outsourcing.  Back  ttten. 
a  virtual  customer  reteionstap  manage¬ 
ment  model  was  very  cutting  edge  wfo  sbU 
ts  seven  years  later.  lAWi  my  fT  back¬ 
ground.  I  was  abie  to  calculate  nsk  on  de¬ 
cisions  that  were  being  made.  I  coupled 
this  fT  background  with  my  business  and 
telecom  knowledge  to  develop  a  business 
modelforantf-virlualBPOsenricescorn- 
pany.  1  see  many  operations  managers  at 
the  mercy  d  fT  Iwhch  is]  telng  them  lhal 
this  cannot  be  done  or  that  carmol  be 
done.  Instead.  I  tel  rny  FT  managers  what 
be  done  iMth  a  lol  of  confidence. 

WhatadvKadeyouhaveterfTpro- 
fassionate  looking  to  move  Mo  a  hy¬ 
brid  position  that  requires  buainaas 
sidk?  I  wodd  suggest  tateng  some  grad¬ 
uate  courses  m  marketing,  finance  and 
operations.  These  courses  wi  teach  you 
how  to  become  more  wea  rounded  in 
busmess.  Ttou  wiH  understand  that  IT  « 
not  the  center  of  the  universe  Instead, 
productsandservioesgrowanotganza- 
bon.  You  can  have  the  bast  enterpnse 
network  wxi  syslerns.  but  tMihoul  grow¬ 
ing  revenue  from  customers,  you  have 
nothing  .  An  IT  professional  who  can  think 
like  a  marketing  person  V)  an  IT  shell  wiH 
be  a  great  asset  to  many  tusmesses 
across  many  ndustnes.  O  48416 
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Easy  Marks  and  Tough  Targets 


V1frTUAU.VEVBnr  Fortune 
100  company  boads  its  share 
of  talented  executives.  But  the 
amount  of  effort  It  takes  to  re- 
emit  them  away  from  their  cur¬ 
rent  employers  can  vary  greatly, 
according  to  executive  search 
firm  Morgan  Howard  World¬ 
wide.  The  Stamford.  Conn.- 


:  based  recruter  recently  com- 
I  piled  a  list  of  the  easiest  and 
I  hardest  companies  to  crack 
I  when  it  comes  to  recruiting  key 
I  talent.  Among  the  easiest 
I  marks:  farmie  Mae,  American 
I  Intemafional  Group  and  \fen- 
I  zon  Communications.  Execu- 
1  tivestendtostayputatWal- 
Mart.  General  EJecbic  and  The 
Home  Depot,  says  Morgan 
Howard  Presideni  Marc  Lews. 

'Cash,  bonuses  and  other 
comp^isation  components  are 
only  one  factor  in  detennning 
whether  a  company  is  at  risk  of 
losing  its  top  talenL' says 
Lews.  Other  key  fedots  in¬ 
clude  the  (^OsabiWy  to  con¬ 
nect  with  company  leaders  and 
comnuncate  his  vision,  the  ex¬ 
istence  ot  an  organization^ 
structure  that  recognizes  and 


rewards  lop- performing  talent, 
identificdion  ot  clear  career 
tracks  for  executive-level  posi¬ 
tions,  and  leaders  who  are  al¬ 
lowed  sufficienl  autiwomy  to 
develop  their  own  ideas. 

The  companies  on  the  easy- 
target  bst  were  weak  on  ai  lea^ 
two  and  often  three  of  those 
factors.  Lewis  says. 
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Easy  Marks  and  Tough  Targets 


VIRTUAllVEVtRVFonune 

!00  comyany  boasis  ilsshaie 
of  laiented  executives  But  the 
amount  ot  effort  it  takes  lo  ro- 
cniit  tt»em  away  from  their  cur- 
mni  employers  can  vary  o'ealty 
accordmi]  to  executive  search 
firm  Morgan  Howard  World 
Wide  IheStaroford.Conn 


■caw*  Ik. 
■FMIblwCo. 
■4DnTCofv. 


■aaMkCafp. 


Iwsed  recfiiiter  recently  com¬ 
piled  rt  list  of  the  easiest  and 
tiarricstcomDaiiieslocrack 
when  If  comes  lo  reciuilmg  key 
talent  Among  the  easiest 
marks  fanmeMat-  Amercan 
lirfernational  Group  and  Ven  • 
/on Communications  Execu¬ 
tives  lend  to  stay  put  at  Wal- 
Mart.  Gerxrial  Electric  and  The 
Home  Depot  says  Morgan 
Howard  President  Marc  Lewis 
"Cash,  bonuses  and  other 
compensation  components  are 
only  one  factor  in  determining 
wfioiher  a  company  is  at  risk  ot 
losing  iisfop  talent."  says 
Lewis  Other kcyfaciorsin- 
dude  the  CEO'sabiiitv  to  con¬ 
nect  with  company  leaders  and 
communicate  his  vision,  the  ex¬ 
istence  of  an  organizational 
stiucture  that  lecognizes  and 


rewards  lou-pcrlorm'ng  latent, 
idenidicalion  nl  clear  uj'eer 
tracks  for  excculivf  -leveinosi 
lions,  and  leaders  who  .ire  al¬ 
lowed  sufftciEo!  aiito'Kvny  to 
devpfppthcirown  ideas 
The  comparries  or  the  r‘.asv 
tanjel  list  were  weak  on  at  least 
iwoandotten  three  of  those 
faciuts.  Lewis  says 
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Career  Clip 

THE  BURSTING  OF  THE  technology  bub¬ 
ble  and  horror  stones  about  unemptoymenl 
and  offshore  outsourcing  of  tech  jobs  have 
dampened  students'  interest  in  computer 
careers  and  fueled  a  23%  decline  m  com¬ 
puter  science  program  enrollments  in  U.S. 
umversities  between  2002  and  2003,  ac¬ 
cording  to  recent  reporl  in  the  Los  Ange/es 
Times-  Jeanne  Ferrante.  associate  dean  of 
the  University  of  California.  San  Diego, 
School  of  Engineenng.  told  the  newspaper 
that  the  rising  lobless  rate  for  computer  sci¬ 
entists  and  systems  analysts  over  the  past 
few  years  -  and  the  accompanying  erosion 
of  salaries,  bonuses  and  other  amenities  * 
have  discouraged  students  The  enrollmenf 


drop-ofl  is  happening  just  as  U.S.  compa¬ 
nies  are  on  the  cusp  of  a  hinng  resurgence, 
which  ts  prompting  concerns  about  a  scarci¬ 
ty  of  domestic  tech  professionals  as  well  as 
a  stifling  ot  technoloQical  innovation. 

The  U.S  Department  ot  Labor  forecasts 
46%  growth  m  the  number  of  jobs  for  com¬ 
puter  software  engineers  between  2002 
and  2012. 
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Amtgoni.  44.  is  a  14  year 
veteran  of  ARO.  a  business 
process  outsourcing  company 
that  offers  a  w»0e  rar>9e  of  ser¬ 
vices.  inciuding  data  entry.  caN 
center  support,  and  document 
and  forms  management,  all  of 
which  are  performed  and  detiv- 
•red  by  emptoyees  who  work  in 
their  hemes.  During  his  career 
with  the  company,  he  has  held 
a  variety  of  positions,  working 
his  way  up  from  a  consuftirtg 
rote  (0  CIO  and  (hen  moving 
into  his  current  COO  post. 

He  spoke  with  Compurerwonld 
about  his  experiencet  as  an  (T 
professional  moving  between 
the  technical  and  business 
sides  of  the  enterprise. 


What  was  your  first  iob  in  IT?  I  Parted 
as  a  database  consuiiani  working  -Atth 
smaN  comparnet  Eventually  I  moved  to 
ARO  and  into  a  full  time  D(Kil.tir  pio 
gtammmg  database  anokcations  .voutnl 
a  piedriivi}  diatei  doplicahat  the  compa 
ny  had  puicltased 


How  did  you  make  the  move  to  the 
business  side?  Was  it  a  gradual  tran¬ 
sition.  or  did  you  make  a  d^-cut 
jump  out  of  heads -down  technical 
work  to  a  business/strategy  rote?  Th.- 
move  from  a  stncfly  IT  iub  to  operalior' 
was  gradua'.  smco  »vi‘  had «."!••  .jiv  ■ 
fegtafi?  oftiei  utog'ammim]  to  suouo'i  n-r 
puKtirtivp  dialer  aopHCiitidn  i  Aorktp  -m 
wav  up  to  CIO  £v(‘niudil»iv*.i;-nvi»‘-vi 
mom  and  mo'e  det  iwyn:,  .i5k\jt  opc-ia-  - 
Hons  srnci-  IT  « itie  fTarrv'ttt/i.  tp-  Plivj 
mg  a  moTt  tiificit-ni  jt>d  cost  etietine  • ;  ' 

etaiioti  As.iiesiilTufaperso'idrtia-i--y 
fiom  the  oiter.ttio'b.  Dositwjn  t  a-.4j»i*M  a 

dual  rote  ot  CIO  COO  Inai  u'u.jf'i/atk''* 
tfial  ft.is  less  then  S10  •mii.o'’  i"  ui’crs  a 
ptnstin  can  olay  fioth  mies 
ly  But  as  we  gicw,  'ny  OO  ••ven’u  ii^ 
was  too  much  with  tfie  COO  rolp  and  a 
sepal  ale  OO  was  hired 


With  moie  and  more  IT  work,  such  as 
programming  and  apiriication  support 
and  mamlCTance.  moving  offshore, 
do  you  see  the  need  for  purely  techni¬ 
cal  skills  on  the  decline  here  m  the 
:  U.S.?Ve« 

;  -.V'l:  iri't  yOi.t  t»*i  HWi‘r,»  ^ 

;  sumi-  tAJVtr^  a'  <3  -K'-V  i-  .  u»> 

I  Orounil  v:i-  'lo-i  Ot-  o,i'I  ,  I  ’n..  r.  .  - 

i  In  your  opinion,  are  there  other  non- 
j  technical  skils  an  IT  professionai 
!  should  hone  lo  ensure  continued  ca- 
'  reer  success?  i  olitavK’d WfiA  j- 1. 

,  verviy  p'  l•-•>s.  sptrcia.''/i'ig  btar  ‘ ' 

I  and  tinanc'  !  n<*lipvr- -»rt'  .--vt 

I  IT  iHvoIrt".  nvttui'g  op(-d5irir-j-  ang  nji 

;  kflffig  Api-'yj- .'.n,-  ...t 

•  duw"  Will- l-i.vc  ,■  nu-if.*-.; 

I  iv-a*  •  .t  ■< 

J  anduneidv’n'MuiI  1'..  .1  ’ 

I  What  advantages  (tees  your  IT  back- 
:  ground  and  experience  aHord  you  m 
i  your  rote  as  COO?  &>vefi  ag.?  • 

-01  amfedorst  ^.l  .j  jx: 

new  mode'  ‘o*  *•  •  •  .  .  t  ji^J 
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Objectivity: 
Don’t  Settle  for  Less 
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ODAY,  IT'S  VERY  DIFFICULT  to  get  objec¬ 
tive  advice  regarding  IT  direction  and 
strategy.  Many  of  the  firms  that  used  to 
speciali2e  in  IT  strategy  work  are  now 
owned  by  large  systems  integrators  or 


computer  manufacturers. 

To  make  maners  worse, 
many  IT  suppliers  now  of¬ 
fer  referral  fees  to  firms 
that  recommend  their 
products  and  services.  So 
much  for  objectivity. 

Years  ago.  there  was 
much  more  market  frag¬ 
mentation:  Strategy  firms 
dispensed  advice,  systems 
integrators  built  systems, 
outsourcers  ran  data  cen¬ 
ters.  and  manufacturers 
delivered  hardware  or  soft¬ 
ware.  There  was  no  “one- 
stop  shopping."  On  the  pos¬ 
itive  side,  the  customer  got 
objective  advice.  On  the 
negative  side,  since  the 
strategy  firms  didn’t  have  delivery  ex¬ 
perience.  their  time  and  cost  estimates 
were  sometimes  inaccurate.  In  addi¬ 
tion.  poor  communication  among  the 
companies  involved  often  result^  in 
misinformation,  much  like  the  old 
game  of  “telephone."  These  discon¬ 
nects  could  cause  expensive  mistakes. 

All  parties  believed  that  tighter  link¬ 
age  would  offer  benefits: 

•  Customers  felt  that  they  were 
more  likely  to  have  new  systems  deliv¬ 
ered  on  time,  on  budget  and  with  high 
quality  if  the  people  who  built  the  plan 
were  also  responsible  for  executing  it. 

■  Strategy  firms  wanted  to  grow. 
They  saw  that  systems  integration 
companies  were  getting  10  to  20  times 
as  much  revenue  for  implementing  the 
plan  as  they  were  for  building  the  plan. 

■  Systems  integration  firms  felt  that 
if  they  worked  with  senior  executives 
to  establish  the  strategy,  they  would 


1 


get  more  implementation 
work. 

■  Manufacturers  viewed 
systems  integration  as  a 
new  line  of  business  that 
^  would  help  them  sell 
m  more  of  their  traditional 
IT  products. 

End-to-end  int^ation 
appeared  to  meet  every¬ 
one's  objectives.  Therefore, 
some  of  the  manufacturers 
and  systems  integrators 
began  to  acquire  strategy 
firms:  CSC  acquired  Index, 
EDS  picked  up  AT.  Kear¬ 
ney.  and  Nolan,  Norton  & 
Ca  was  acquired  by  KPMG 
Peat  Marwick.  Other  com¬ 
panies.  such  as  Andersen 
Consulting,  started  their  own  strategy 
groups.  IBM  did  both. 

Large  companies  that  have  their 
own  strategy  groups  often  use  IT 
strategy  and  planning  projects  as  loss 
leaders.  They  offer  to  do  the  planning 
work  (worth  hundreds  of  thousands  of 
dollars)  at  minimal  cost  in  order  to  get 
millions  of  dollars  of  hardware  sales  or 
systems  integration  work.  Unfortu¬ 
nately,  these  plans  often  specily  partic¬ 
ular  hardware,  database  software  and 
application  packages  or  services  that 
can  be  performed  only  by  their  own 
company.  So  much  for  objectivity. 

As  a  result  of  the  industry  consoli¬ 
dation.  there  are  very  few  firms  that 
can  dispense  mUy  independent  ad¬ 
vice,  but  they’re  out  there  if  you  look 
hard  enough.  When  searching  for 
objectivity,  keep  these  tips  in  mind: 

■  Look  for  an  independent  “bou¬ 
tique."  Although  sometimes  difficult 


to  find,  these  still  exist.  They  are  best 
found  through  referrals  from  people 
you  trust. 

■  Draw  a  clear  line  between  strategy 
and  implementation  contracts.  To  en¬ 
sure  objectivity,  make  the  firm  that  de¬ 
velops  the  strategy  ineligible  to  bid  on 
the  implementation.  If  you  can’t  find 
an  independent  boutique,  hire  a  big 
company  but  specify  contractually 
that  it  will  not  be  allowed  to  bid  for 
resulting  implementation  projects. 

■  Demand  contractual  indepen¬ 
dence.  In  all  cases,  put  language  in  the 
contract  specifying  that  the  firm  de¬ 
veloping  the  strategy  and  plan  is  not 
allowed  to  receive  any  referral  or 
other  fees  from  the  suppliers  they 
recommend. 

■  Monitor  progress  objectively.  For 
large  programs,  consider  retaining  an 
independent  firm  to  periodically  mon¬ 
itor  prepress. 

My  dad  taught  roe  to  “measure 
twice:  cut  once."  That  applies  here  as 
well,  but  on  a  much  grander  scale.  If 
you  already  have  an  IT  strategy  from 
a  large,  multipurpose  company,  or  if 
your  CEO  requires  you  to  use  a  com¬ 
pany  for  political  reasons,  hire  an  in¬ 
dependent  firm  to  provide  a  second 
opinion.  A  mistake  in  today’s  market¬ 
place  is  prohibitively  expensive:  an  in¬ 
dependent  opinion  is  well  worth  the 
cost.  Just  make  sure  the  firm’s  staff  is 
senior  enou^  to  have  the  breadth  and 
depth  of  experience  needed  to  accu¬ 
rately  assess  the  validity  of  your  IT 
strategy.  Don't  hire  a  firm  that  will  cut 
costs  by  using  a  horde  of  recent  col¬ 
lege  graduates. 

Your  IT  strategy  has  an  enormous 
impact  on  your  business.  It  deserves 
and  demands  objective  decisions  as  its 
foundation.  Leverage  your  decision¬ 
making  process  by  soliciting  objective 
outside  advice.  O  48294 
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Gateway  PCs  to  Get 
New  Chassis  Design 


ST  WATT  NAWBLEH 

Gateway  Inc.  as  pan  of  its 
plans  to  focus  more  on  busi¬ 
ness  users,  last  week  detailed  a 
desktop  PC  that’s  due  in  the 
fall  and  could  be  the  lust  sys¬ 
tem  released  with  Intel  Corp.’s 
new  BTX  chassis  design. 

BTX  is  expected  to  eventu¬ 
ally  replace  the  lO-year-old 
ATX  design  that’s  now  widely 
used  in  PCs.  The  new  chassis 
technology  realigns  compo¬ 
nents  to  maximize  cooling 
Among  other  things,  it  fea¬ 
tures  a  fiont  fan  that  is  50% 
larger  than  the  one  on  current 
PCs  but  runs  more  quietly,  said 
Ken  Loyd,  director  of  bu^ness 
marketing  at  Gateway. 

The  primary  driver  for  the  ! 


Continued  from  page  J 

Biometrics 

private  sector  has  been  slow 
to  deploy  them,  mainly  be¬ 
cause  of  cost,  reliability  and 
standards  issues,  according  to 
a  newly  released  report  from 
Burton  Group. 

‘‘Over  the  next  two  to  three 
years,  biometrics  wrill  remain  a 
niche  solution  in  enterprises 
rather  than  a  technology  that 
is  deployed  to  the  masses."  the 
report  said.  And  many  users 
appear  to  agree. 

"1  think  in  time,  use  of  this 
technology  in  the  private  sec¬ 
tor  will  grow."  said  David  Sta¬ 
cy.  global  IT  security  director 
at  SL  lude  Medical  Inc.,  a 
SI.9  billion  maker  of  cardio¬ 
vascular  equipment  in  St 
Paul.  Minn.  "1  think  a  lot  of 
companies  are  waiting  for  the 
prices  to  come  dowm.  and 
there  is  a  sense  among  securi¬ 
ty  professionals  that  these 
products  have  not  been  per¬ 
fected  yet* 

Providence  Health  System 
in  Seattle  has  examined  bio- 


dcvelopment  of  BTX  is  the 
fact  that  the  processors  used  in 
PCs  generate  four  times  more 
heal  than  they  did  10  years  ago. 
while  the  heat  produced  by 
graphics  cards  is  as  much  as  20 
times  greater  than  it  orvee  was. 
Loyd  said. 

He  added  that  Poway, 
Calif.-based  Gateway  will  of¬ 
fer  PCs  built  around  the  new 
chassis  design  to  consumers 
in  September  and  to  corporate 
users  in  mid-October  ur>dcr 
an  E-6300  Series  name.  Pric¬ 
ing  is  expected  to  be  less  than 
current  ATX  models,  which 
range  from  S889  to  S1.269. 

Usmg  the  BTX  design  is  one 
in  a  series  of  changes  that 
Gateway  is  making  to  reach 


metric  technology  "a  bit  in 
the  past,  somewhat  casually." 
said  David  Rymal,  the  compa¬ 
ny’s  director  of  techtwlogy. 
Providence  was  looking  at 
biometric  products  primarily 
as  an  alternative  to  the  tokens 
it  uses  for  two-foctor  authen¬ 
tication  for  remote  users,  Ry¬ 
mal  said.  But  "the  largest  bar¬ 
rier  to  us  has  been  interoper- 
abiltiy.  especially  since  our 
users  arc  faced  with  multiple 
applications,  and  we  haven’t 
made  much  prt^ress  with  sin- 
I  gle  sign-on."  be  explained 
I  Midvale,  Utah-based  Burton 
Group’s  assessment  comes  at  a 


Slow  Growth 


out  to  business  users  after 
closing  all  180  of  its  retail 
stores  in  March,  said  Roger 
Kay.  an  analyst  at  market  re¬ 
search  firm  IDC 

’The  company  imploded 
when  they  closed  the  stores, 
but  they  have  have  been  insti- 
tuiirtg  a  lot  of  financial  disci¬ 
pline."  Kay  said  "They've 
done  most  of  the  trashing  and 
burning  and  can  rise  again." 

Kay  said  h’s  “bold"  of  Gate¬ 
way  to  go  to  market  with  BTX- 
based  products  early,  and  he 
predicted  that  users  will  make 
the  ctwversioo  rapidly,  espe¬ 
cially  with  Intel  prcunoiing  the 
new  chassis  design. 

In  addition  to  its  PCs,  Gate¬ 
way  is  now  oflferit^  a  range  of 
other  products  designed  to  en¬ 
tice  corporate  IT  managers, 
from  servers  to  switch»  and 
wireless  access  points.  For  ex¬ 
ample.  Gateway  announced 
last  week  that  it  plans  to  offer 


time  when  adoption  of  bio¬ 
metric  technologies  has  been 
increasing  in  the  public  sector, 
thanks  to  programs  such  as 
the  United  States  Visitor  and 
Immigrant  Status  Indicator 
Technology  (known  as  US- 
VISIT).  the  Transport  Work¬ 
ers  Identity  Card  and  ‘gimiiar 
initiatives. 

Tljere  was  a  big  bump  in 
interest  in  these  technologies 
after  the  terrorist  attacks," 
said  Gerry  Gable,  author  of 
I  the  Burton  Group’s  report. 

But  so  fat,  that  interest  ha.s 
failed  to  generate  even  half  the 
predicted  uptake  of  these 
technologies  in  the  private 
sector,  experts  said.  In  fj^t. 
only  about  one-third  of  the 
biometric  industry’s  $719  mil¬ 
lion  in  revenue  in  2003  came 
from  the  private  sector,  ac¬ 
cording  to  the  International 
Biometric  Group  (IBG)  in 
New  York. 

The  upfront  cost  of  buying 
and  int^rating  the  need^ 
hardware,  software  and  mid¬ 
dleware  has  been  one  maior 
reason  for  the  slow  adoption  in 
the  private  sector.  Gable  said. 


''•jI.i-i  Q-r  D.i1  oiiiPti*'  f'unl 
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Intel's  new  Xeon  processor 
I  with  64-bit  support  in  its  dual- 
CPU  servers.  The  rounded 
line  will  help  there.”  Kay  said. 

David  Kirkland,  IT  director 
at  MasterCrafr  Boat  Co.  in 
Vonore,  Ibim..  said  be  al¬ 
ready  has  several  of  Gate¬ 
way’s  E-Series  desktop  PCs 
and  plaiu  to  find  out  more 
about  the  upcoming  BTX- 
based  products.  MasterCrafr 
annually  repbees  about  50 


According  to  analysts,  per¬ 
user  costs  can  easily  exceed 
$200  on  |ust  the  hardware  and 
middleware  technologies,  de¬ 
pending  on  the  teclmology. 

“While  there  are  security 
concerns  in  the  private  seaor, 
the  ftindit^  is  not  there  yet" 
for  biometric  products,  said 
Donald  Fisch,  an  analyst  at 
IBG.  "It  wU)  take  proven  suc¬ 
cess  of  the  technologies  be¬ 
fore  private-sector  businesses 
deploy." 

More  work  also  needs  to  be 
done  in  terms  of  interoperabil¬ 
ity  with  existing  enterprise 
user  authentication  technolo¬ 
gies.  analysts  said. 

HohingOff 

The  Unrversity  of  Wiscon- 
sio-Madison  has  done  some 
"limited  piloting"  of  biometric 
devices,  but  there  arc  no  im- 
medbte  plans  to  implement 
thent  said  Kim  Milford,  infor¬ 
mation  security  manager  at 
the  university's  department  of 
information  technology.  Some 
of  the  challenges  were  inter- 
operability,  cost  and  high  er¬ 
ror  rates.  "In  addition,  there’s 


I  PCs  and  might  consider  the 
new  systems,  he  said. 

The  company  has  also 
I  bought  laptops  and  servers 
*  from  Gateway,  as  well  as  two 
I  plasma  dispbys.  "It  helps  that 
they  provide  a  range  of  de¬ 
vices,”  Kirkbnd  said,  adding 
that  Gateway  also  "blows 
away”  competitors  on  price  by 
as  much  as  10%  to  15%. 

This  summer.  Winoiu  State 
Univenity  in  Winona.  Minn., 
is  rolling  out  about  4.(X)0 
Gateway  laptops  for  students 
and  bculty  as  part  of  a  seven- 
year  contract  valued  at  $40 
million,  said  foe  Whetstone, 
the  school's  vice  president  of 
IT.  Gateway  woonhe  contract 
over  other  vendors  primarily 
because  it  seemed  to  be  the 
most  willing  to  adapt  to  the 
school’s  needs.  They  don’t 
say.  This  is  what  we've  got, 
take  it  or  leave  it’ "  Whetstone 
said.  048865 


the  human  challenge  [in]  help¬ 
ing  users  to  understand  the 
technology  and  to  overcome 
their  concerns  about  privacy." 
she  said.  "Biometric  evalua¬ 
tion  still  seems  to  be  too  intru¬ 
sive  to  many  people." 

"Because  of  the  hype  after 
WIL  pet^Ie’s  expectations  of 
the  technology  br  exceeded 
the  reality."  said  Maxine  Most, 
president  of  Acuity  MariuH 
ImeUigertce  in  Boulder.  Cola 
"Biometrics  got  pulled  into 
the  public  eye  prematurely." 

In  the  long  term,  though, 
the  stronger  identity  assur¬ 
ance  and  user  convenience  en¬ 
abled  by  biometric  technolo¬ 
gies  will  drive  increased  en- 
I  (crprise  use.  said  Tarvinder 
SembhL  director  of  product 
management  at  Indian  Tech- 
nolc^ics  Inc.,  a  vendor  of  iris 
recognition  technologies  in 
Mooresiown.  N.f. 

"We  are  seeing  some  early 
adopters  that  have  deployed 
iris  recognition  to  ensure  that 
only  the  right  people  have  the 
rifdtt  access"  to  protected 
health  infonnatiOQ.  Sembhi 
said  04aa63 
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Net  Party  Time 


Thirty-five  years.  It  seems  like  about  a  century, 

doesn’t  it?  But  it  was  35  years  ago  this  month  that  the 
Arpanet  —  the  initial  piece  of  today’s  Internet  —  began 
to  go  live.  Sure,  that’s  a  fuzzy  way  of  saying  it.  But  it 
took  a  while.  On  Aug.  30, 1969,  the  first  Arpanet  node 
was  set  up  at  the  University  of  California,  Los  Angeles.  The  second 
node  wasn’t  ready  at  the  Stanford  Research  Institute  until  Oct.  1. 
And  the  first  attempt  to  log  on  across  the  Arpanet  didn’t  happen  un¬ 
til  Oct.  29.  (For  the  record,  it  crashed  the  network.) 

Go  ahead  —  party  from  now  until  Halloween.  The  Net  is  worth  it. 


was  j  iircat  year  for  technology,.  Kon 
Thompson  at  ATo^Ts  Bell  I.ahs  w  rojo  the  Hrst 
\ersion  of  Unix  that  >car.  Ted  Uodd  defined  the 
relatictnal  database.  Three  IB.M  researchers  — 
Charles  tioidtarb,  Kdward  .\Josher  and  Ra\- 
m»>nd  Lorie  —  lent  their  initials  to  G.ML.  the  an- 
ee-tor  of  (oda\  s  HT.MI.  and  NMl..  .And  Xerox's 
G.try  Starkvy  eather  combined  photyK;»»pier  tech- 
m'logy  with  laser  imaging  to  .  reaie  the  first 
lasiT  printer. 

Thev  all  changed  the  face  of  IT  —  and  the 
wax  IT  is  used  in  business.  But  none  has  had  as 
dramatic  an  impact  as  the  Arpanet, 

The  rest  changed  how  we  do  w  hat  we  do. 

The  Net  changed  the  paradigm. 

Wait.  slop,  don't  leavel  That's  mn  just  the 
Usual  buzzspeak.  The  .Arpanet's  impact  really  t.s 
qualitatively  dilTereni  fmm  those  of  the  other 
iechn«>K)gies. 

Unix,  relational  databases,  markup  languages 
and  laser  printers  proved  their  x  alue  b>  replac¬ 
ing  existing  operating  systems,  databases,  text¬ 
coding  schemes  and  printers.  They  let  us  do  the 
same  things  as  before,  only  better. 

But  the  Arpanet  —  and  the  Internet  — 
changed  the  way  we  think. 

With  the  Net.  IT  went  from  being 
about  number  crunching  and  data 
pr»KVssing  to  being  about  commu¬ 
nications  —  betxxeen  machines  and 
between  people. 

After  .^5  years,  the  network  isn't 
juM  the  computer,  as  Sun  Microsys¬ 
tems  used  to  say.  With  Web  ser¬ 
vices.  the  netxxofk  is  the  applica- 
litin.  With  network-attached  stor¬ 
age.  it's  the  disk  drixe.  U'ith  voice 
over  IP.  it's  the  telephone. 

Add  the  \N'eb.  and  the  network  is 
the  radio  and  the  TV  It's  the  confer¬ 


ence  room  and  the  office,  it's  the  retail  store 
and  the  research  librarx. 

It's  not  just  hoxx  xxe  Jo  IT.  Increasingly,  it's 
ho\y  the  world  does  business. 

The  dark  side?  Sure,  it's  there.  With  the  Net. 
physical  ctillocation  is  no  longer  required,  and 
physical  security  is  no  longer  enough.  And  off¬ 
shoring  of  information  jobs  becomes  possible. 
.And  criminals  halfxxay  around  the  world  attack¬ 
ing  «iur  systems  became  inevitable.  .And  on  the 
Web.  every  design  tlaxv  in  our  systems  is  ex¬ 
posed  to  customers,  with  no  sales  clerks  or  cus¬ 
tomer  service  agents  to  cover  for  us. 

But  the  Net  also  lets  our  companies  do  busi¬ 
ness  with  customers  they  xvould  never  h.ix'e 
approached  before.  It  opens  up  new  xxays  of 
cutting  COSTS  and  adding  x-alue.  It  has  dragged 
IT  out  of  the  back  office  and  the  glass  house 
and  made  it  indispensable  to  every  step  in  the 
business  process  —  from  supply  chains,  logis¬ 
tics  and  manufacturing  to  sales,  cross-market¬ 
ing  and  customer  care. 

.After  .^5  years,  the  Net  really  has  brought  us  a 
long  way.  But  not  quite  far  enough. 

After  all.  we  still  don't  quite  get  it.  Sure,  we 

buy  things  on  eBay  and  search  xvith 
Google.  Wc  check  our  e-mail  and 
load  our  iPods  oxer  the  Internet. 

But  xx  e  still  talk  about  writing  ap¬ 
plication  code  instead  of  wiring  tx>- 
gether  Web  services.  Wo  think  in 
terms  of  data  centers  instead  of 
neixxork -attached  everything. 

IXm't  worry  —  we'll  master  if. 

Old  habits  of  thinking  are  just 
tough  to  break. 

But  until  wc  do.  xse’ll  have  to 
celebrate  the  Arpanet's  birthday 
the  old-fashioned  xxay. 

And  party  tike  it's  P>69.  O  48489 


Don't  DO  Ihati 

If  s  years  ago  at  this  busy  circut-board  rronufact^^ 
facMy.  arid  the  new  comporieriHnserb^ 
gees  bonkers  one  morning.  It  wes  sbcklrto  capacity 
and  resistors  everywhere  but  where  they  beloriged.* 
says  IT  piot  fish.  What  charrged  overnight? ''MaM 
nance  drought  sonwone  rnight  trip  over  a  data  cable.* 
fish  groarrs.  *So  they  nafled  It  to  tl«  concrete  floor  * 
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dene  unit  in  die  deaert. 
lUne  d^r.  out  of  the 
blue,  e  eoidor  oflleer 
who  hae  no  ralitieneNp 
to  the  eperadeo  wiIb 
Md  the  tent  and  an- 


toe  many  eloetrteal 


md  itarts  dbeemoedno 
dm,”  tape  a  plel  fiafa 
on  duty.  "Bght  fteure 
and  few  hard  drtvaa  let* 
or.  the  lyrtmie  are  up 
and  running  again.  And 
the  aanior  NCO  who  is 
aleodwsyiadminiifh 
niRy  eaim  enough  to  got 
Me  weapon  back.” 

Not  Exactly 
UowtelihahidMkpflol 
Ml  dwt  wten  aha  re¬ 
boots  dm  aarvar,  tt  aaye 
that  It  *cm^  IM  aeme 
mves.  NUMMiOvirai 
MbiulaiofeMitae. 
ooacMng  and  caieing  to 
gothartoraarfuiaGtly 
what  the  maaeapi  rally 
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Priorities 

At  this  plot  M*s  com¬ 
pany,  peumruaars  gal 
new  hfgh*and  machinas, 
and  their  oU  PCs  go  to 
won  nddi  iowor  rsmbe* 
monls  who  an  uss  ths 
upgrads.”Myraosen- 
a^nowPCwosschsd- 
ulsdtobsmgradod.bul 
thootdandbmlysds- 
quatobaofdwguy 
nnttomo.whodUths 
ssrm  progrmunini  I  dU, 
wwn^”Mistors.Wliy 
not? '*11wy  woidtoi'l  up- 
grads  Ms  PC  booMMil 
wmn'lsuffidsntfsrte 
nssdi  of  anyent  atos  in 
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AltordurndtoiafiNv 
tagaMmamptain  • 
aboutaamaltadw 
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OSHMKV  dMNn  HtON  MEAT  Send  your  true 
of  IT  Me  to  me  at  dalqideamdanMrtdmiii.  \bu 
snag  a  enazzy  Shark  sfdrt  if  I  ua  1  And  dwdt  out  the  daiy 
faed.  briMse  the  Shart^  and  siiyi  up  for  Shark  Tmk 
home  delivery  at  anpatonartiaonyUatv, 
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FRANK  HAYES  -  FRANKLY  SPEAKING 


Net  Party  Time 


Thirty-five  years.  It  seems  like  about  a  century, 
doesn’t  it?  But  it  was  35  years  ago  this  month  that  the 
Arpanet  —  the  initial  piece  of  today’s  Internet  —  began 
to  go  live.  Sure,  that’s  a  fuzzy  way  of  saying  it.  But  it 
took  a  while.  On  Aug.  30, 1969,  the  first  Arpanet  node 
was  set  up  at  the  University  of  California,  Los  Angeles.  The  second 
node  wasn’t  ready  at  the  Stanford  Research  Institute  until  Oct.  1. 
And  the  first  attempt  to  log  on  across  the  Arpanet  didn’t  happen  un¬ 
til  Oct.  29.  (For  the  record,  it  crashed  the  network.) 

Go  ahead  —  party  from  now  until  Halloween.  The  Net  is  worth  it. 


1969  was  a  great  year  for  technology.  Ken 
Thompson  at  AT&T’s  Bell  Labs  wrote  the  first 
version  of  Unix  that  year.  Ted  Codd  defined  the 
relational  database.  Three  IBM  researchers  — 
Charles  Goldfarb,  Exlward  Mosher  and  Ray¬ 
mond  Lorie  —  lent  their  initials  to  GMU  the  an¬ 
cestor  of  today’s  HTML  and  XML  And  Xerox’s 
Gary  Starkweather  combined  photocopier  tech¬ 
nology  with  laser  imaging  to  create  the  first 
laser  printer. 

They  all  changed  the  face  of  IT  —  and  the 
way  rr  is  used  in  business.  But  none  has  had  as 
dramatic  an  impact  as  the  Arpanet 

The  rest  chan^d  bow  we  do  what  we  do. 

The  Net  changed  the  paradigm. 

Wait,  stop,  don’t  leave!  That’s  not  just  the 
usual  buzzspeak.  The  Arpanet's  impact  really  is 
qualitatively  different  from  those  of  the  other 
technologies. 

Unix,  relational  databases,  maricup  languages 
and  laser  printers  proved  their  value  by  replac¬ 
ing  existing  operating  systems,  databases,  text¬ 
coding  schemes  and  printers.  They  let  us  do  the 
same  things  as  before,  only  better. 

But  the  Arpanet  ~  and  the  Internet  — 
changed  the  way  we  think. 

With  the  Net,  IT  went  from  being 
about  number  cnmching  and  data 
processing  to  being  about  commu¬ 
nications  —  between  machines  and 
between  people. 

After  35  years,  the  network  isn’t 
just  the  computer,  as  Sun  Microsys¬ 
tems  used  to  say.  With  Web  ser¬ 
vices,  tlK  network  is  the  applica¬ 
tion.  With  network-attached  stor¬ 
age,  it's  the  disk  drive.  With  voice 
over  IP.  it’s  the  telephone. 

Add  the  Web,  and  the  network  is 
Che  radio  and  the  TV.  It’s  the  confer¬ 


ence  room  and  the  office.  It’s  the  retail  store 
and  the  research  library. 

It’s  not  just  how  we  do  IT.  Increasingly,  it’s 
how  the  world  does  business. 

The  dark  side?  Sure,  it’s  there.  With  the  Net, 
physical  collocation  is  no  longer  required,  and 
physical  security  is  no  longer  enough.  And  off¬ 
shoring  of  information  jobs  becomes  possible. 
And  criminals  halfway  around  the  world  attack¬ 
ing  our  systems  became  inevitable.  And  on  the 
Web,  every  design  flaw  in  our  systems  is  ex¬ 
posed  to  customers,  with  no  sales  clerks  or  cus¬ 
tomer  service  agents  to  cover  for  us. 

But  the  Net  also  lets  our  companies  do  busi¬ 
ness  with  customers  they  would  never  have 
approached  before.  It  opens  up  new  ways  of 
cutting  costs  and  adding  value.  It  has  dragged 
IT  out  of  the  back  office  and  the  glass  house 
and  made  it  indispensable  to  every  step  in  the 
business  process  —  from  supply  chains,  logis¬ 
tics  and  manu&cturing  to  sales,  cross-market¬ 
ing  and  customer  care. 

After  35  years,  the  Net  really  has  brought  us  a 
long  way.  But  not  quite  far  enough. 

I  AfteraU,  we  still  don’t  quite  get  it  Sure,  we 
buy  things  on  eBay  and  search  with 
Google.  We  check  our  e-mail  and 
load  our  iPods  over  the  Internet 
But  we  still  talk  about  writing  ap¬ 
plication  code  instead  of  wiring  to¬ 
gether  Web  services.  We  think  in 
terms  of  data  centers  instead  of 
network-attached  everything. 

Don’t  worry  —  we’ll  master  it 
Old  habits  of  thinking  are  just 
tough  to  break. 

But  until  we  do,  we'll  have  to 
celebrate  the  Arpanet’s  birthday 
the  old-fashioned  way. 

And  party  like  it’s  1969. 0  48488 


2004 


Circuit  City  Chooses  Unux  for 
Cash  Registers  in 600 Stores 


HP  says  'disruplive'  SAP  supply  chain  migration  contributed  to  revenue  shortlall 
HtA  Systems  copes  with  lowered  earnings  and  high-profile  resignations. 
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THE  VOICE  OF  IT  MANA6EMENT  •  WWW  COMPUTERWORLD  COM 

U.S.  Banks  Balk  at 
Data  Classification 

Odn^dinn  initistivc  for  l  and  chief  information  security 

security  leads  the  way  officer  at  Toromo-based  Bank 
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BV  JAIKUMAH  VI  JAVAN 
AND  LUCAS  MEARIAM 

An  initiative  by  several  lead¬ 
ing  Canadian  banks  to  develop 
standards  for  data  clas¬ 
sification  has  shined  an 
unwanted  spotlight  on 
U.S.  banks,  which  ap- 
p>ear  to  be  unwilling  to 
follow  suit. 

A  working  draft  of 
Canada’s  common  data-sensi- 
tivity  classification  scheme 
is  expected  to  be  released  by 
year’s  end,  said  Robert  Garigue, 
coordinator  of  the  initiative 


and  chief  information  seciuity 
officer  at  Toronto-based  Ranir 
of  Montreal. 

The  goal  is  to  come  up  with 
a  standard  that  “embodies  a 
minimum  set  of  expectations 
around  information  classifi¬ 
cation  and  controls,"  he 
explained. 

But  there  is  no  simi¬ 
lar  effort  under  way 
in  the  U.S,,  despite  a 
growing  recognition  of 
the  need  for  a  common 
standard  for  data  labeling  here 
as  well,  several  analysts  said. 

Standards  for  infonnation 
classification  will  not  only 

US.  Banks,  page  49 


I!  Retailer  cites  total  cost 

;  of  ownership,  desire 

for  less  customization 


BV  CAROL  BLIWA 

Circuit  City  Stores  Inc.  last 
week  buck^  the  trend  of  te- 
tailers  opting  for  W^dows- 
based  point-of-sale  systems 
when  it  announced 
plans  to  migrate  to  IBM 
SurePOS  300  cash  reg¬ 
isters  running  Linux  at 
its  600  stores. 

Less  than  5%  of  the 


installed  base  of  North  Ameri¬ 
can  cash  registers  run  r.iniiv, 
according  to  Franklin,  Tenn.- 
based  IHL  Consulting  Group, 
But  the  open-source  operating 
system,  which  has  been  strug- 
gjing  to  gain  traction  on  cor¬ 
porate  desktops,  is  seeii^  a 
slow  uptick  in  usage  among 
retailers  upgrading  their  POS 
systems. 

Another  major  re- 
taifor  that  recently  an¬ 
nounced  a  move  to 
Linux-based  IBM  rach 
Linux  POS,  page  49 
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When  your  data  needs  the  ultimate  level  of  security, 
trust  Fujifilm’s  full  line  of  1/2"  data  storage  tape. 

Fof  nearty  40  years,  Fujifilm  has  proven  itself  as  a  leading  manufacturer  of  reliable,  high  quality 
data  storage  media.  Our  full  line  of  1/2-  tape,  including  UO  Ultrium  1.  LTD  Ultrium  2.  Super  DLTtape™ 
and  DLTtape~IV  provides  secure  and  durable  data  storage  with  built-in  quality  assurance  Specify 
Fujifilm  for  your  next  media  order  and  youll  know  your  data  is  locked  up  in  maximum  security. 
To  find  out  more  about  our  complete  line  of  data  storage  media,  visit  us  at  www.fujifilm.com 
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CCNrEKIS 


Getting  Personal  (^ain) 

In  tho  Tschnology  section:  Personalization  tech¬ 
nologies  never  measured  up  to  their  hype  during  the 
dot-com  boom,  but  IT  managers  like  Schwan  Food’s 
Glenn  Bader  (left)  are  giving  them  another  look  as  a 
way  to  serve  customers  more  effectively.  Page  23 


08.16.04 


Budgetary  Black  Holes 

In  tin  Manioaiiniit  snctlon:  Tliat  giant 
sucking  sound  is  your  IT  project  budget 
going  down  the  tubes.  Here  are  10  prime 
mistakes  that  can  cost  you  big  time  — 
and  how  to  avoid  them.  Page  29 


NEWS 


OPINIONS 


6  HP’s  faltering  financials  get 
three  executives  fired. 

7  New  Hampshire  agency  tries 
again  to  revamp  a  troubled 
criminal-offender  system. 

7  The  Athens  Games  deploy 
tight  network  security. 

8  BEA  Systems'  viability  is 

questioned  as  revenue  drops 
and  key  executives  leave. 

to  The  Linux  job  market  grows, 

with  experience  more  valu¬ 
able  than  certification. 
Dtce.com  statistics  show. 

12  IBM  tells  internal  users  not  to 
install  the  Windows  XP  update. 

12  Afghans  receive  health  data 

via  ‘talking  book”  technology. 

14  EOS  again  Wins  a  $750  miUion 

HUD  contract,  over  Lockheed 
Martin’s  objections. 

16  Novell  bundles  ttie  JBoss 

application  server  in  its  SUSE 
Linux  development  kh. 

17  New  Mexico  county  pioneers 

a  courthouse  Wi-Fi  service. 
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Breaking  News 
OQuicttMalSIO 


NewsMer  Subscnptions 
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20  Maryfran  Johnson  disagrees 
with  those  who  say  we  aid 
terrorists  when  we  write 
^out  corporate  Web  sites 
that  reveal  sensitive  informa¬ 
tion.  And  she  thinks  those 
sites  are  a  problem  that  IT 
must  pay  attention  to. 

20  Michael  Gartenberg  takes  a 
look  at  the  current  roster  of 
portable  devices,  noting  that 
connectivity  is  the  whole 
ballgame. 

21  Pimm  Fox  isn’t  convinced  that 
technology  initiatives  like  bio¬ 
metric  passports  hold  the  key 
in  the  fight  against  terrorism. 

25  Robert  L  Mitchell  thinks  it 
should  be  left  to  users  to  de¬ 
cide  whether  their  cell  phone 
numbers  should  be  available 
in  a  national  directory. 

32  Barbara  Gomolskl  is  enjoying 
the  dog  days  of  August  with 
some  light  summer  reading. 
Her  list  of  titles  you're  not 
likely  to  find  on  Amazon.com 
anytime  soon  is  sure  to  stir 
the  techie  within. 

50  Frankly  Speaking:  Frank 
Hayes  has  a  message  for  those 
ndio  hate  Microsoft’s  bloat¬ 
ware:  Stop  buying  h.  and 
maybe  you'll  be  offered  XP 
Lite  too 
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OQiMiJM(a2420 
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WEBSERVICES 

WebSeniicesHunles 

In  this  special  report,  we 
take  a  sober  look  at  the  chal¬ 
lenges  of  implementing  ser¬ 
vice-oriented  architectures, 
including  security, 

I  governance  and 
I  reliability. 

PIICMaE  BE6INS  ON  M6E  33. 

34  HimoIbs  Um  BiMnig  BIwkt. 

get  the  benenu  promised 
by  scnrice-oriemed 
architectures,  you 
need  a  carefully  de¬ 
fined  repository  and 
a  governance  proc- 
1  ess  BO  you  can  find. 

I  manage  and  reuse 
I  the  code. 

I  aSMtnaoe 

RactM?  Comps- 
^  nies  that  require 
ahighd^reeof 
'  reliability  from  Web 


services  are  learning  customize 
their  own  coding  and  build  in  lay¬ 
ers  of  redundancy. 

37  TfouU*  In  Transit  The  ssme 

design  Chat  lets  users 
easily  exdiange 
data  with  Wi^ 
services  also 
opens  holes 
for  hackers. 

Companies  are  Ba!Vl 
findingthat 
safeguarding 
that  Hafa 
exchange  is 
complicated. 

38  QuidcStiidy;  This  primer  ofiers  a 
history  of  COM,  or  Component 
Object  ModeL  a  language-inde¬ 
pendent  architecture  that  lets  de¬ 
velopers  build  aj^lkatioQs  from 
reusable,  binary  software  cnmprv- 

nents.  Developed  by  Microsoft  in 
the  1990s.  COM  is  stiD  alivt  and 
_  well  today. 

41  OpIniMi:  XML 
is  tetrific,  says 
ct^uranist  Mark 
Hall  So,  why  is  it 
'  soslowPAndwhy 
can't  ft  deal  with 
opaque  data? 
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tezms,  coortesy  of  the 

WxldWkkm 

ContoctiiiiD. 

0^ULM«48BO 

.Ex- 
plaMdoosofwha 
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Stevena  of  Cadent 
tees  great  pwisefo 
Web  services,  bw  not 
until  the  poNkUDDI 
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Google  Be^ 
Stod(  Auction 

Googfe  Inc.  opaiMt  tfw  wetion  for 
its  mudHantieipilad  Mttal  pubic 
oftarInB  on  FridbE.  wNh  ptans  to 
mnounoo  tht  priiAig  of  Mi  slocfc 
thii  onok.  eoogio  hn  atfmatod 
thUBodiaroswaboprieodbo- 
hMon  Sm  Md  m  OKh.  Tho 
start  of  iN  auction  camo  a  «Mok 
•flar  tbo  company  rovoaM  that  K 
may  haw  viotaM  as.  aoewIBos 
laM  by  iMulna  langMarod 
sharostoomployoaaandcanauh 
tanh.  Tlia  company  has  ofhrod  to 
buy  bach  too  ihafio  in  qiMflon  in 
tot  hopt  of  ractifying  too  manor. 


Petition  Fled  Against 
E-Vbting  System 

BgM  Ifaiylnd  Mn  lu  mdi 
iM  ID  (MMli  court  10  tom 
llioMiiyl—ISIologoinlotBoc- 
Horn  (S^  lo  oMraoo  rtbgcd 
■oourilyiWaloinclicliniiccol- 
ici  mocMm  lyrton  aid  pmMc 
o»olcr»irtllodnoirmidortnt 
•tcrtioiio.  Tho  tom  M  noHono 
to  fora  <10  SK  to  III  ilogod 
prayom  uilli  la  o-UDlIni  oiolom 
odd  la  dio  lira  by  DtoMd  Inc. 


AOL,  Yahoo  Step  Up 
Antispam  Efforts 

Amorfea  Ontow  Inc.  and  tWun 
toe.  plan  to  uao  tochnetogy  to 
varffy  too  aiunt  of  aiaal  mao* 
sapos  as  a  maans  of  flpMtag 
spam,  to  Saptambor,  AOL  wM 
varify  too  soma  of  tooomtog 
a-mai  uatog  a  eamponant  of  Mh 
croton  Cofp.‘tSandBrParchllac 
tort.  YUna  ««  uao  to  Oomato- 
Kayo  autoanttealion  toofmotopy  to 
lito  ai  a-mai  coming  from  to 
mail  sarrnrs  by  yoor't  and. 


Short  Takes 

0€U  MC.  posted  aacand-guartar 
ravanua  of  $tL7  btoon.  20% 
Mphar  than  in  too  aama  quarter  a 
yaar  ago. ...  Erie  Banhomou  wM 
rasignasdiairfBaoflIMLII- 
S0Um:EMC.an0cl28.Mm- 
Smra  aaid  ha  is  a^aeted  to 
conitouo  in  his  rate  aa  eftaiman 
of  sister  company  PALMONE  MC. 


HP  World  Opens  as 
Key  Exec  Heads  Roll 


Faltering  financial 
results  trigger 
three  dismissals 


BV  PATmCK  rHiaOOEAU 

S  HP  WORLD  opens 
in  Chicago  this 
week,  the  buzz 
among  the  expected 
7,000  attendees  will  no  ^ubt 
be  about  the  disappointing  fi¬ 
nancial  results  that  sent  some 
lop  Hewlett-Packard  Ca  exec¬ 
utives  packing. 

A  key  problem  for  HP  is 
the  principal  focus  of  many 
attending  the  conference:  en¬ 
terprise  hardware.  Enterprise 
stoi^e  and  server  revenue  fell 
5%  to  S3.4  billion,  while  over¬ 
all  revenue  for  the  company 
grew  9%  to  S18.9  billion. 

in  particular,  HP's  Alpha 
server  line  was  dovm  32%, 
and  NonStop  servers  fell  25%. 
There  was  also  a  23%  decline 


Tlie  management  shufilc 
"deflects  criticism"  away  from 
Fiorina,  said  Moran.  "She  has 
bought  herself  some  time,"  he 
added.  Fiorina  isn't  scheduled 
to  speak  at  HP  World. 

Product  announce¬ 
ments  expected  at  the 
show  include  expand¬ 
ed  virtualization  ca¬ 
pabilities  in  the  Itani- 
um-hased  Integrity 
server  tine.  A  new 
version  of  Global 
Workload  Manager 
will  now  be  able  to 
haiMlle  Linux  as  well 
as  HP-UX,  and  man¬ 
age  hundreds  of 
servers  and  parti¬ 
tions.  It's  now  limited  to 
20  partitions. 

HP  is  also  introducing  sub- 
CPU  partitioning  on  the  In¬ 
tegrity  line,  which  will  allow 
users  to  divide  the  CPU  up  to 


20  ways  and  run  HP-UX  and 
Linux  on  the  panitions. 

There  are  currently  two 
versions  of  HP-UX:  one  for 
the  Alpha-based  HP  9000,  and 
the  other  for  Integrity.  But  in 
October.  HP  will  de¬ 
liver  a  unified  version. 

*TTus  is  in  response 
to  customer  demand." 
said  Don  Jenkins,  vice 
president  of  marketing 
for  HPs  business-criti¬ 
cal  servers.  "Many  cus¬ 
tomers  want  to  manage 
one  release,  patch  up¬ 
date,  etc.,  across  their 
environment." 

HP  will  also  an- 
rtounce  Alpha  chip 
improvements  that  will  boost 
performance  by  16%,  officials 
said.  But  H  is  still  encouraging 
users  to  move  to  Itanium. 

Seattle-based  Boeing  Em¬ 
ployees  Credit  Union  recently 


moved  from  Alpha  servers  to 
the  Integrity  line.  Scott  Wolfe, 
BECU’s  IT  enterprise  archi¬ 
tect,  said  that  because  of  in¬ 
creasing  batch  processing  de¬ 
mands,  the  company  had  to  ei¬ 
ther  upgrade  its  Alpha  servers 
or  move  to  an  alternative. 

An  Alpha  upgrade  “was 
a  perfectly  viable  option." 
and  something  the  company 
debated  until  the  end.  said 
Wolfe.  “I  don't  second-guess 
anyone  who  wants  to  continue 
with  Alpha,"  he  said.  But  since 
BECU  planned  to  move  to  Ita¬ 
nium  at  some  point  anyway, 
now  was  better  than  later, 
he  said. 

The  upgrade  to  faster 
processors  allowed  BECU  to 
reduce  the  number  of  proces¬ 
sors  needed  from  16  to  eight. 
That  boosted  performance 
and.  because  of  per-processor 
licensing,  cut  the  cost  of  its 
Oracle  Corp.  software  in  half, 
said  Wolfe.  O  468t3 
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HP  Puts  Part  of  the  Blame  on  SAP  Migration 


in  storage  systems  revenue. 

Bill  Moran,  an  analyst  at 
D.H.  Brown  &  Associates  Inc. 
in  Port  Chester.  N.Y,  said  the 
decline  in  Alpha  revenue  like¬ 
ly  reflects  falling  customer  in¬ 
terest  in  a  system  that  HP  will 
stop  producing  in  2006  but 
will  continue  to  support  until 
20U.  Tbe  NonSlop  decline 
may  indicate  that  customers 
arc  waiting  for  HP  to  complete 
its  transition  from  the  MIPS 
processor  to  Uanitun.  said 
Moran. 

Management  Shuffle 

HP  CEO  Carly  Horina  fired 
Peter  Blackmore,  executive 
vice  president  of  HP's  Cus¬ 
tomer  Solutions  Group.  He 
was  replaced  by  Mike  Wink¬ 
ler,  who  had  been  with  Com¬ 
paq.  Jim  Milton.  CSG  senior 
vice  president  and  managing 
director  of  the  Americas  re¬ 
gion.  and  Kasper  Rorsted,  i 
CSC  senior  vice  president  and 
managing  director  for  Europe, 
the  Middle  East  and  Africa, 
were  also  dismissed. 


HoatoUf^ckawlsaldtastWBek 
that  pari  oi  the  bkvTM  tor  the 
rmnua  toorltol  In  to  enterprise 
serversandskngeonwpnst- 
ad  on  a  pntolernailc  mknfion  to 
an  SAP  AG  orderincassng 
and  sugptir  chain  aystem. 

HP  Carly  Fkirtna  said  the 
ptohtems  coat  the  group  about 
S400  fiiAon  in  rewnue  and 
S275  mSon  in  operating  proAb. 

IMe  exBOAed  poorly  on  the 
migtation.*  Tiorina  said  Whie 
the  profatontt  primariy  ha  HTs 
industry-standard  server  busi¬ 
ness,  they  also  affected  the 
business-crttical  and  storage 
busnesses. 

Although  the  company  worked 
to  ensure  product  avato^.  HP 
sti  tost  sales  and  was  forced  to 
fuffil  drect  orders  through  chan¬ 
nel  partners  and  expedSe  other 
orders  via  air  fihptnents.  Those 
moyee  cut  into  the  comptoiy's 
gross  margns. 

HPisactosepartnerwito 


SAP  and  oftote  spectobed  con- 
attong  sarvkas  around  SAPs 
sitoply  chten  and  ERP  aotowe. 

HPhasa'sIrongandptoduc- 
th«ietotonahto(wahSAP].ftol 
aa  a  cuBtomer  and  aa  a  sbatogic 
partwr."  said  SAP  Amertoaa  Ina 
spohasmen  Wfam  Woti  The 
relafionship  continues  to  expand 
even  todey.  as  taaiiB  talt  about 
deepening  that  customer  rate- 
ttonsNp. 

*We  cani  talc  specdicaly 
ahat's  happening  in^ 
HP."  WoN  added.  But  he  noted 
that  in  HP’s  statements,  no 
blame  for  the  probtoms  has  been 
attributed  to  SAP's  software. 

HP  is  a  highly  decentraized 
corttoany  whose  various  dm- 
skins  m^  their  own  decisions 
around  implemenling  software 
andordermanagementprocess- 
es.notedOavidDobrm.anana- 
lysl  at  62B  Analysts  Inc.  in  Cam¬ 
bridge.  Mass.  After  its  previous 
imptomemations.il  would  seem 


logtoatlhaHPshouidhive 
known  how  such  rafauls  can 
craato  probtoms  aewre  onoui^ 
to  aftoct  sales  and  prepared  R- 
salaccordtogty. 

"EvenItHPdoeen'thme 
the  insiautionat  memory,  you 
wodd  think  that  SAP  woiAL' 
he  added. 

This  case  of  a  Ni^lech  com¬ 
pany ‘choWng  on  Hs  own  dog 
foo^  was  Rkeiy  caused  by 
hunanerrorduringlhaaRacu- 
tion  of  the  project  and  not  by 
the  softwere  i^.  said  Joshla 
&8enbaum.  an  analysl  at  Enter¬ 
prise  AppRcattons  Consulting 
in  Berkeley.  Cabf  .  T  was  im¬ 
pressed  HP  fired  managemeni 
and  dklnl  nail  SAP  to  the  waB.* 
he  said. 

However,  it's  surprising  that 
"good  software  could  take  a 
companydowniikBthis.*6ieen- 
baum  added.  It  doesrrl  get 
more  embanassino  than  that* 
-MarcLSongn 
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N.H.  Agency  to  Revamp 
Criminal  Offender  Systems 


Move  follows 
years  of  struggle  to 
overcome  glitches 


BV  MARC  L.  SONOtNI 

The  New  Hampshire  D^art- 
ment  of  Corrections  (DOC) 
hopes  to  retire  a  legacy  crimi¬ 
nal  offender  field  management 
system  with  a  long  history  of 
troubles  as  part  of  an  effort  to 
rectify  shortcomings  in  the 
agency’s  IT  infnutnicture. 

The  original  system,  de¬ 
signed  to  help  with  the  case 
management  of  criminal  of¬ 
fenders  on  probation  or  pa¬ 
role,  was  to  have  been  built  by 
Computer  Associates  Interna¬ 
tional  Inc. 

Tlte  custom  application  was 
also  supposed  to  handle  finan¬ 
cial  transactions,  including  the 
payment  of  fines  to  the  state 


and  of  restitution  money  to 
victims.  But  after  worki^  on 
the  system  for  more  than  two 
years  and  spending  $240,000. 
the  state  bad  little  to  show  for 
its  efforts  [QuickUnk  28102J. 
The  DOC  and  CA  severed  all 
ties  in  August  2002.  As  part  of 
a  negotiated  settlement,  c:a 
reminded  the  money  that  the 
DOC  had  paid,  according  to 
Ron  Cormiec,  a  protect  man, 
ager  at  the  agency. 

MakesMft  System 

After  the  effort  £uled.  in- 
bouse  staffers  tinkered  with 
the  existing  parole  and  proba¬ 
tion  management  system,  cre¬ 
ating  a  striF^>ed-down  version 
of  the  application  to  handle 
restitution  and  fine  payments. 

By  writing  code  around  a 
“very  old  and  outdated”  Infor¬ 
mix  database,  the  DOC  was 


able  to  put  together  a  system 
that  allows  it  to  issue  restitu¬ 
tion  checks  to  victims  every 
30  days  —  down  from  the 
original  90-day  processing 
cycle.  Cormier  said. 

While  chat  system  now  han¬ 
dles  restitution  accounts  ade¬ 
quately.  it  lacks  the  case  man¬ 
agement  features  the  ageivcy 
needed  when  it  hired  CA.  said 
state  Rep.  David  Welch,  chair¬ 
man  of  the  Criminal  (ustice 
Committee  that  has  oversight 
of  the  DOC. 

“It's  a  basic  system  that 
doesn’t  fulfill  our  needs,”  he 
said.  The  system  that  was  en¬ 
visioned  would  have  let  police 
or  field  correction  officers 
easily  access  the  full  records 
of  probationers  caught  com¬ 
mitting  crimes. 

As  a  result,  the  DOC  plans 
to  retire  hs  two  Unix-based  of- 


'-"'tj-r.tionj.  fjctiitw:,  ithe  fliit.  one  iii  Bi-n,n  m<'I 

^tting  d  new  cfinufuil  offeodef  f«ld  fnaiMgement  syitcfr 


fender  man^ment  systems 
and  replace  them  with  a  single 
application  running  on  a 
Microsoft  Cotp.  S<iL  Server 
database.  The  agency  issued 
a  request  for  proposals  earlier 
this  year  and  is  awaiting  ap¬ 
proval  from  the  governor's  of¬ 
fice  before  moving  forward 
with  its  plans. 

The  DOC  wants  a  Web- 
based  system  that  will  sup¬ 
port  the  payment  of  fines  and 
parole  management,  as  well  as 
the  prison  facility  and  man¬ 
agement  processes  associated 


Tight  IT  Security  in  Place  at  Athens  Games 


Strategy  keys  in  on 
attack  prevention 
and  containment 


BV  JAIKUHAR  VUAVAM 

The  Otynqiics  got  under  way 
in  Athens  last  week  amid 
some  of  the  tightest  security 
in  the  history  of  the  Games  — 
not  just  on  the  physical  side, 
but  on  the  IT  side  as  welt 
Fears  of  a  cyberattack  on 
the  networks  and  systems 
that  support  the  event  have 
prompt^  the  Olympic  Games' 
technology  integrator.  Atos 
Origin  in  France,  to  imple¬ 
ment  a  multilayered  defense 
focused  both  on  attack  pre¬ 
vention  and  containment 

At  its  core  is  a  s^roentation 
strategy  under  which  the  main 
network  has  been  carved  up 
into  multiple  virtual  networks, 
said  jean  ChevaUier.  vice  pres¬ 
ident  of  Atos  OrigiD's  Olym¬ 
pics  Games  program. 

Each  of  Che  Olympic  venues 
sits  on  Us  own  LAN  segment. 


Networks  serving  TV  broad¬ 
casters  and  print  reporters,  for 
instance,  are  isolated  from  the 
ones  serving  athletes  and  the 
Olympic  committee.  Users  on 
one  network  don't  have  access 
to  another  network. 

“The  idea  is  containment,” 
ChevaUier  said.  “If  we  have  a 
problem  on  one  network,  we 
can  contain  that  issue  to  that 
network." 

AU  of  the  10.500  PCs,  900 
servers,  2,500  terminals  and 
4,000  printers  that  are  con¬ 
nected  to  the  Olympic  net¬ 


work  have  been  assigned 
unique  identifiers  that  also  tie 
them  to  q>ecific  locations  on 
the  network. 

A  machine  that's  discon¬ 
nected  from  its  assigned  net¬ 
work  location  will  not  be  per¬ 
mitted  access  again  without 
administrator  intervention: 
the  port  is  shut  down  to  pre¬ 
vent  unautborixed  systems 
from  logging  on.  ^h  of  the 
machines  has  also  been  locked 
down  into  one  of  218  hardware 
and  software  configurations. 

The  precautions  are  needed 
because  many  of  the  machines 
are  accessible  in  public  areas 
in  Che  Olympic  venues,  said 
(ChevaUier. 

Software  ftom  Computer 
Associates  International  Inc. 
will  monitor  the  networks  for 
intrusions  and  other  security 
breaches.  Months  have  been 
spent  scripting  filters  to  en¬ 
sure  that  only  significant 
security  events  reach  admin¬ 
istrators,  (ChevaUier  said 

Each  core  system  has  its 


I  own  backup,  and  the  main 
data  cemer  is  mirrored  at  a  re¬ 
mote  location  200  miles  out¬ 
side  Athens  to  ensure  high 
availability  and  disaster  recov¬ 
erability.  ChevaUier  said 

For  the  past  two  months, 
the  networks  and  systems 
have  also  been  subjected  to  a 
series  of  simulated  worm  and 
virus  attacks,  malicious  hacks 
and  itetwork  failures.  “In  fact, 
about  80%  of  our  time  has 
been  spent  testing  this  out." 
ChevaUier  said. 

During  the  a  team  of 
400  IT  professionals  wiU  mon¬ 
itor  systems  in  61  Olympics- 
related  venues  from  a  central 
technok^  operation  center 
located  in  the  main  Olyn^cs 
complex  in  Athens.  An  addi¬ 
tional  3,000  IT  volunteers  wiU 
provide  support  O  46815 
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with  handling  New  Hamp¬ 
shire's  2,500  inmate  And 
7.000  offenders  who  are  on 
parole  or  probation. 

Cormier  said  the  system 
WiU  be  written  to  Microsoft 
•Net  programming  q>ecifica- 
(ions  and  aUow  prison  facili¬ 
ties  and  field  service  officers, 
for  example.  u>  share  data. 

“When  an  offender  comes 
into  the  system,  his  entire  stay 
would  be  tracked  through  un- 
tU  he's  on  parole,  including  the 
financial  processes."  said 
Oarmier. 

Lesson  Learned 

Although  details  about  the  up¬ 
grade  ate  stOI  confidential 
pending  the  governor's  ap¬ 
proval.  the  D(X:  hopes  to 
launch  the  implementation 
this  October  and  wrap  up  the 
project  by  AprU  2006. 

Cormier  doesn't  know  how 
much  it  cost  the  sutc  to  create 
the  restitution  database  now 
in  place,  but  be  said  the  DOC 
has  learned  from  its  overaU 
experience  with  the  data 
warehouse  project. 

'We  wanted  the  initial 
system  to  be  built  from  the 
ground  up.  and  in  the  require¬ 
ments  phjue  of  the  project 
[DOC  officials]  ask^  for  a 
lot  instead  of  ensuring  they 
got  minimal  fonctionaUty 
and  building  onto  that," 
Cormier.  Ultimately,  he  said, 
“we  learned  we  needed  to  ask 
for  a  base  system,  then  build 
off  that” 

Because  of  the  negotiated 

settlement  benwen  the  0(X 

and  CA,  Cormier  couldn't 
elaborate  on  wby  the  project 
went  awry.  CA  offidals 
weren't  available  for  cocn- 
ment  0  48793 
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Symantec  Ljowers 
Revenue  After  Glitch 

Synanlae  Corp;  laci  WMil  redoMd 
ill  raportad  nwwM  hr  tta  Bnt 
«iarhr  of  fheaf  2005  by  $20  ndh 
Ion  afhr  fiacovarina  that  it  had 
incortacih  eonAgurad  an  inhmaly 
davatapad  accaunting  tool  Tha  ar 
rof  inwhad  aaftwara  uaad  to  cM- 
culaladahnadaubacripitanrav 
anuafrafnOynianlac'iMamafiarH 
al  ratal  hurintaa  and  had  naaffact 
on  Symantae’scaih  poaMha 


Cisco  Posts  Record 
(VirfitofSI^inQA 

Chee  Syatams  he.  last  ataak  rf 
portad  raeard  fourth-auartar  nal 
hcema  of  $14  bnen.  a  aignlicant 
loapbaninatineomeol$982nil- 
bon  in  hat  yaar'i  hurth  vnrtar. 
Tho  ptaft  earaa  an  not  saha  of 
$5.9  bMon.  up  Iram  $4.7  Mhn  h 
tlia  yaar-aarlar  quartar.  Chao  CEO 
John  Chafnban  said  lha  company 
phna  to  add  1000  amptayaaa  by 
yaar^  and.  a  maiarity  of  lham  h 
raaaarch  and  daaalBpmafit 


IBM  Lands  Linux 
Mainframe  Deal 

BM  aM  M  «Mk  M  Enkw. 
Hauaar  (totoniattonal)  Holdtog  AO 
hOamanyiaeonaoldatIngits 
SAP  AO  syitoma  onto  too  aSarvar 
zSoriaa  000  mahdramoa  nmliB 
UnuuBMian'Idhchahgttia 
dnaTs  aataa,  bat  a  eompaoy  rapro' 
aantattva  said  that  ana  aarvar  fiOy 
Matpatod  hr  Ihw  ganofaly  coats 
toout  $122.400  par  pniraaaw. 

Tha  mahinniaa  EmhaaB  «  Hauaar 
purchaaad  hato  98  pracaaaon 
oach,  wMch  anadri  put  tho  dears 
vahia  at  afMRd  $8J  mBon. 


Short  Takes 

MOTOI«)LAMC.stod»«iwh- 
hnnod  by  tha  US.  bilamal  Bar 
anuB  Soraha  that  tt  nihr  oon  ihoul 
$500  mflon  h  adOthnai  toaa  hr 
tt88-2000....AtoitoHodMd 
tonar-prtood  aaraton  of  MKftOSOR 
COftP.'b  toWowa  XP  «■  ba^ 
aNpptog  OB  now  PCs  h  Matoyaia. 
hdonatoo  and  Ihaland  in  Octobar 


Turmoil  at  BEA  Casts 
Cloud  Over  Its  Future 


Revenue  drop,  exec 
departures  raise 
viability  questions 


av  CAROL  SLIWA 

Questions  coocin- 
ued  to  swirl  last 
week  about  BEA 
Systems  Inc.’s  iong- 
term  viability,  as 
the  company's  second-quarter 
revenue  fell  short  of  expecta¬ 
tions  on  the  heels  of  the  resig¬ 
nations  of  $on>e  top  executives. 

Although  BEA's  $263.2  mil¬ 
lion  in  revenue  was  up  7%  from 
$245  million  for  the  second 
quarter  last  year,  the  figure  fell 
short  of  the  initial  projeaion 
of  $265  million  to  $275  million. 
It  was  also  the  second  straight 
quarter  that  BEA  failed  to  meet 
license  revenue  expectations. 

lust  a  week  earlier,  Scott 
Dietzen  left  his  position  as 
chief  technology  officer  at  the 
San  Jose-based  sofhvare  maker. 


Dietzen  had  joined  BEA  with 
its  1998  acquisition  of  Weblog- 
ic  Inc.,  maker  of  the  applica¬ 
tion  server  that  became  the 
company’s  main  product  line. 

Dietzen  was  the  second 
I  technology  visionary  to  depart 
in  le.ss  than  two  weeks.  Adam 
Bosworth,  the  chief  architect 
responsible  for  longer-term 
initiatives,  took  a  senior  engi¬ 
neering  role  at  Google  Inc.  af¬ 
ter  leaving  BEA  on  July  23. 

gone  is  Scott  Edging- 
ton,  vice  president  of  world¬ 
wide  channels  and  alliances, 
who  went  to  Voltage  Security 
Inc.  in  Palo  Alto.  Calif.  Rick 
Jackson,  senior  vice  president 
of  product  marketing,  left  to 
become  chief  marketing  offi¬ 
cer  at  Borland  Software  Corp. 

“There  may  be  some  further 
changes.*  said  BEA  CEO  Al¬ 
fred  Chuang,  during  a  confer¬ 
ence  call  last  week  to  report 
the  financial  results.  But  he 
said  BEA  has  “taken  those  into 


BEA-Ting  Feet 


account  in  our  planning.  This 
is  a  very  strong  company  with 
more  than  3.000  employees." 

But  David  Rudow,  a  senior 
research  analyst  at  Piper  Jaf- 
fray  &  Ca  in  Minneapolis, 
predicted  more  depanurcs 
over  the  next  month.  “With 
these  high-profile  people 
leaving,  you’ve  got  to  wonder 
about  the  future  vision  of  the 
firm  and  what  customers  are 


Some  Users  Unfazed  by  BEA  Woes 


BEA  Systems' revenue  shortfall 
and  lecert  eseoAive  resigne- 
tions  are  causno  speculabon 
about  the  company's  future.  But 
some  USSR  are  unfa^ed  by  (he 
tumofmanbi 
Ifartct  share  comes  and 
goes.  They  have  a  huge  cus¬ 
tomer  baee.  and  I  find  i  hanJ  to 
befieve  they  Maid  just  go  away.* 
sato  Chrs  Ifielm.  CTO  at  Oitiilz 
Lie  in  Qac^. 'The  worst  case 
s  somebody  ptete  them  up.’ 

Hieim  said  he's  not  overly 
concerned  atoul  BEA's  future, 
n  pert  because  Orbitz  he  the 
flodbifily  to  swAch  to  a  (Ifterent 
application  serw  if  necessary. 

im  Kina  a  pnied  manager 
at  The  SenfeeMBBtar  Co.  in 
Downers  Grove,  t.  sred  Ns  com¬ 
pany  upped  Is  oommAmenl  to 
BEA.  signino  an  aoreement  Net 
month  to  w  WMLoglc  PbHorm. 
ServiceAtasiBr  previoudy  used 
BEA's  appicalion  sarvBR  tor 


e-asi«nerc8  and  backiiffice 
businee  appficabons  but  now 
plans  to  add  WfebLigic  fM  vto 
integration.  *The  cohesiveness 
we  appeatoig  to  us.' he  said. 

KfinesardServiceblestar 
MosnT  anare  of  the  various  BEA 
executive  departures  and  rev¬ 
enue  forecasts  when  making  its 
decBion.  But  he  said  he's  not 
concerned.  If  they  don1  fil  the 
void,  toen  I  would  become  a 
worry.' ha  said. ‘But  here's  a  lot 
of  smart  people  at  BEA.' 

'Wb  have  corAtence  In  the 
products,  and  we  anticipate  no 
changes  M  this  time.*  sard  an¬ 
other  BEA  customer,  bfichaei 
Jones.  CIO  at  CtroM  Qty  Stores 
Inc  .  in  Richmond.  Vb. 

One  of  BEA's  prohlenB  has 
been  users  who  are  stow  to 
movetoWeUjogic8.1.andl- 
censerevenuehastanedAna- 
hsls  said  the  praUem  isn’t 
BEA's  technology,  which  re¬ 


mains  toiHxAch.  and  there's  no 
reason  to  think  ihat  he  recent 
woes  result  In  dire  conse¬ 
quences,  gwen  BEA's  cash  re¬ 
serves  and  customer  base. 

But  since  the  application 
server  marfel  has  become  eorrb 
modtozed.  BEA  needs  to  fiffther 
differentiate  Itsetf  to  achieve 
(gowhandwAhstandhein* 
creasingpressieefroml^Or- 
aefe  Corpi.  fiberoBoft  Corp.  and 
opetr-sotfcecompelllori  Some 
also  have  speculBled  hat  BEA 
w8  buy  a  comparry  or  be  ac¬ 
quired,  potent^  by  Oracte  or 
ftowtoo  RtofardCo. 

TTwre  is  no  reason  for  any 
rash  acton*  by  BEA  custnnere. 
said  Vefim  Nabs,  an  anatyst  at 
Bartner  he.  "But  users  should  be 
watchho  cateUy  and  daley  aiy 
maaeivesAategic  inveslmenis 
wib  BEA  unti  hair  longHatm 
bustoees  strategy  is  ctaried.* 


going  to  do.“  he  added. 

"An  awful  lot  of  enterprise 
customers  have  questioned 
me  recently  about  the  long¬ 
term  viability  of  BEA."  said 
Anne  TTiomas  Manes,  an  ana¬ 
lyst  at  Midvale,  Utah-based 
Burton  Group.  “That's  a  signif¬ 
icant  issue  if  enterprise  cus¬ 
tomers  are  saying.  ‘Is  it  safe 
for  me  to  buy  from  them?' " 

Kevin  Faulkner,  vice  presi¬ 
dent  of  investor  relations  at 
BEA.  insisted  that  the  compa¬ 
ny  is  “strong  financially."  with 
$1.6  billion  in  cash.  He  also 
noted  recent  changes  that  BEA 
thinks  will  help  going  forward. 

For  example.  Tom  Ashbum, 
who  joined  BEA  tvro  years 
ago  after  a  33-year  career  at 
Hewlett-Pack^  Co,  assumed 
the  newly  created  position  of 
executive  vice  president  of 
woiidwide  field  operations. 
Ashbum  will  oversee  the 
sales,  services  and  marketing 
•operations  that  are  being  uni¬ 
fied  under  one  umbrella  “for 
better  coordination  of  those 
functions,"  Faulkner  said. 

Faulkner  also  cited  the  im¬ 
portance  of  updated  priorities 
set  by  BEA’s  reorganized  prod¬ 
uct  leadership  team,  now  head- 
I  ed  by  Chuang.  I^riorities  in- 
I  elude  hardening  WebLogic  8,1 
'  to  in^rovc  scalability,  reliabili¬ 
ty  and  performance;  building  a 
special  application  server  edi¬ 
tion  for  telecommunications 
customers;  improvii^  features 
in  the  portal  and  integration 
products;  and  shipping  the 
core  9i)  WebLogic  Platform  in 
the  first  half  of  next  year. 

“You  should  expect  to  see 
BEA  become  more  focused 
and  aggressive."  said  Faulkner. 
"There  will  be  people  who  like 
that  program,  agree  with  that 
program  and  are  on  board  to 
execute.  And  there  will  be 
people  who  disagree,  and 
they’ll  move  on." 

Mark  Carges.  a  key  force  be¬ 
hind  BEA’s  Tiixedo  software, 
replaced  Dietzen  as  CTO. 
Dietzen  couldn’t  be  located  for 
commenL  Bosworth  declined 
comment,  citing  a  quiet  period 
at  Google.  040814 
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Certification  Rarely  Required 
As  Linux  Job  Market  Grows 


Experience  often  more  highly  valued 
than  book  learning  in  potential  hires 


BV  TOOD  R.  WeiSB 

Employers  appear  to 
be  looking  for  more 
and  more  workers 
with  Linux  IT  skills, 
but  they’re  not  necessarily 
seeking  those  with  Linux  ccr- 
dfication,  according  to  statis¬ 
tics  from  online  IT  job  board 
Dice-com. 

Of  the  approximately  49,000 
IT  job  notices  listed  on  Dice.- 
com  in  the  past  few  weeks, 
about  2,200  wanted  applicants 
with  Linux  experience,  said 
Scot  Meliand.  CEO  and  presi¬ 
dent  of  the  New  Yort:-based 
company. 

“TTiat’s  up  190%  from  a  year 
aga  It  qualifies  as  a  hot  skill 
set  that's  really  growing  in  de¬ 
mand.”  be  added. 

More  than  half  of  the  Linux- 
related  jobs  being  advertised 
are  developer  or  progranmung 
positions,  and  about  a  third 
are  located  in  California. 

Practjcal  Knowledge 

Perhaps  more  importantly  for 
job  seekers  with  Linux  skills, 
employers  don't  usually  re¬ 
quire  that  they  be  certihed  in 
Linux.  Meliand  said.  “Linux 
certification  has  not  taken  off* 
as  a  must-have  skill  for  em¬ 
ployers  looking  over  job  can¬ 
didates.  he  said.  “I  re^y  don’t 
know  if  it  wilL" 

Instead,  employers  seem  to 
prefer  real-world  knowledge. 
"The  mantra  for  the  past  12  or 
24  months  has  been  experi¬ 
ence.”  Meliand  sakL 
While  the  most  popular  Lin¬ 
ux  certification  mentioned  in 
Dtcexrom's  job  listings  is  for 
Red  Hat  Ccitifred  Engineers, 
only  10  of  the  2.200  Linux  job 
listings  referred  to  the  certifi¬ 
cation.  be  said.  ”I  would  say 
pretty  much  that  that’s  pretty 
low;”  Meliand  said. 

Chris  Hjetm.  chief  technol¬ 
ogy  officer  at  Chk^o-based 


online  travel  service  Orbitz 
LLC,  said  that  “a  candidate's 
ability  to  learn,  solve  complex 
problems,  apply  their  experi¬ 
ence  and  possess  solid  inter¬ 
personal  skills  and  team  fit 
are  more  relevant"  than  certi¬ 
fications. 

“There  is  an  extensive  tech¬ 
nical  interview  process,  and 
the  depth  of  Linux  screening 
varies,  depending  on  the  posi¬ 
tion,”  Hjelm  said.  "It  works 
well,  given  that  I  haven’t  seen 
a  recent  hire  leave  due  to  ncR 
having  the  requisite  technical 
skills.” 

loe  Poole,  technical  support 
manager  at  Boscov’s  Oepart- 
ment  Store  LLC  in  Reading. 


In  Demand 


Pa.,  said  that  when  his  compa¬ 
ny  hires  IT  staffers,  Linux  cer¬ 
tification  may  help  get  an  ap¬ 
plicant  into  an  interview  more 
quickly,  but  it’s  not  mandatory. 

The  department  store  chain 
is  a  big  Linux  user  in  its  opera¬ 
tions,  from  its  stores  to  its 
mainframe  and  servers  in  its 


data  center. 

The  reason  Linux  certifica¬ 
tion  isn’t  a  must,  he  said,  is 
that  “if  you’re  hiring  from  the 
outside,  you  really  don’t  know 
[if  applicants  are  qualified], 
even  if  they’re  certified." 

Getting  a  Orilling 

“Book  learning  and  practical 
experience  are  two  different 
things,"  Poole  said.  To  find  out 
more  about  an  applicant's 
training  durii^  an  interview. 
Poole  said  he  will  have  the 
potential  new  hire  talk  to  IT 
technicians  inside  the  compa¬ 
ny  so  they  can  gauge  the  appli¬ 
cant's  actual  experience.  “You 
can  see  whether  that  gener¬ 
ates  nods  of  approval  or  blank 
stares."  he  said. 

Brian  Dewey,  a  network 
engineer  at  Uvennore,  N.Y.- 


based  Raymour  &  Flanigan 
Furniture,  which  uses  Linux  in 
its  operations  and  data  center, 
agreed,  saying  his  company 
doesn’t  require  certification  in 
Linux  or  any  other  operating 
system  for  its  IT  hires. 

Instead  of  requiring  certifi¬ 
cation,  applicants  are  grilled 
with  technical  questions  in  an 
effort  to  trip  th^  up  and  sep¬ 
arate  the  qualified  candidates 
from  the  rest,  he  said. 

Jonathan  Eunice,  an  analyst 
at  lUuminata  Inc.  in  Nashua. 
NJi..  said  that  while  employ¬ 
ers  want  to  hire  only  qualified 
woikcrs,  certification  isn't 
typically  a  prerequisite  be¬ 
cause  it  doesn't  always  guar¬ 
antee  that  the  applicant  has 
the  necessary  skills.  “It’s  a  nice 
proxy"  thou^  he  said.  “It 
does  give  people  an  additional 
feeling  of  confidence”  when 
hiring.  O  46818 
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Antiphishing  Tool  Adopted  by  eBay 
Now  Available  to  the  General  Public 


■V  JAIKUMAR  VMAVAM 

EBay  lnc.’s  popularity  clearly 
has  a  downside.  The  company 
has  become  a  prime  target  for 
“phishing"  attacks  by  online 
perpetrators  who  e-mail  un¬ 
suspecting  users  and  set  up 
Web  sites  in  the  guise  of  the 
popular  online  auctioneer. 

One  of  the  weapons  eBay  is 
using  to  fight  back  is  a  prod¬ 
uct  from  WholcSecurity’  Inc. 
called  Web  Caller-ID,  which 
allows  users  to  verify  the  au¬ 
thenticity  of  a  Web  site.  This 
week,  Austin-based  Whole- 
Security  is  making  Web 
Caller-ID  generally  avaiU^le 
to  other  users  as  welL 

The  browser-based  software 
has  been  embedded  in  the  Ac¬ 
count  Guard  feature  of  the 
eBay  tool  bar  since  January.  It 
not  only  detects  fake  sites  in 
real  time  but  also  prevents 
users  from  accessing  them. 

“No  technology  is  going  to 


solve  100%  of  the  phishing 
problem,”  said  Howard 
Schmidt.  eBay's  chief  informa¬ 
tion  security  officer  and  a  for¬ 
mer  White  House  cybersecu¬ 
rity  adviser.  "But  thb  has  pro¬ 
vided  an  additional  layer  of 
protection  for  users.” 

The  product  uses  a  unique 
behavior-based  detection 
method  to  identify  spoofed 
Web  sites,  said  Scott  Olsen, 
a  senior  vice  president  at 
WholeSecurity. 

Unlike  products 
that  woric  by  black¬ 
listing  sites  that  are 
already  known  to  be 
fraudident.  Wri> 

Caller-ID  evaluates 
every  site  the  user 
accesses  for  suspi¬ 
cious  behavior, 

Olsen  said.  Rages  are 
analyzed  and  scored 
using  a  proprieury 
rating  system  that 


determines  \ritether  a  page  is 
valid  or  spoofed. 

Users  are  alerted  and 
blocked  when  they  attempt 
to  launch  such  pages  or  enter 
confidential  information 
into  them.  Olsen  said.  Whole- 
Security  declined  to  release 
pricing  information. 

The  technology  is  effeaive 
at  detecting  new  and  unre- 
ported  spoof  sites  that  are  of¬ 
ten  used  in  phishing  scams, 
said  Avivah  Litan.  an  analyst 
at  Stamfemj,  Conn.- 
based  Gartner  Inc. 
“It's  a  big  jump  over 
blacklist  technol¬ 
ogy,”  she  said. 

But  there  are 
caveats. 

To  be  protected, 
users  need  to  dowm- 
ioad  plug-ins  that 
are  integrated  into 
browsers  or  cool 
bars.  Currently,  only 


very  large  sites,  like  those  of 
eBay  and  Yahoo  Inc.,  have 
such  tool  bars.  Litan  said. 
Users  would  also  need  to 
download  multiple  tool  bars 
as  more  companies  stan  using 
the  technology,  she  said. 

WholeSccurity's  technology 
is  being  released  at  a  time 
when  phishing  attacks,  which 
use  spoofed  e-mail  and  Web 
sites  to  fool  users  into  di¬ 
vulging  petsonal  infornution. 
are  rising. 

The  Anti-Phishing  Working 
Group  reported  1.422  unique 
phishing  attacks  in  june,  up 
19%  over  May.  For  the  12- 
month  period  that  ended  in 
ApriL  phishing  attacks  cost 
victims  $L2  billion,  with  U5. 
companies  bearing  most  of  the 
costs,  Gartner  said. 

The  trend  has  resulted  in  a 
“growing  sense  of  urgency" 
to  implement  steps  to  combat 
the  problem,  according  to 
Gartner. 

Other  vendors  offering  anti- 
phishing  tools  include  Cyota 
Inc  in  New  York  and  Mark- 
Monitor  Inc  in  Boise.  Idaho 
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IBM  Tells  Internal  Users  Not 
To  Install  Windows  XP  Update 


Cites  compatibility  problems  with  SP2 


■Y  JOniS  EVCKS 

Developers  at 
Microsoft  Corp. 
may  be  celebrating 

that  they  finished 
work  on  Service  Pack  2  for 
Windofws  XP  (QuickLink 
48694),  but  IT  departments 
around  the  world  now  &ice  the 
question  of  whether  they 
should  update  their  systems. 

IBM,  for  one.  1$  holding  off 
on  installing  the  security- 
focused  update  for  Windows 
XP.  In  a  note  headlined  To 
patch  —  or  not  to  patch."  post¬ 
ed  Aug.  6  on  its  corporate 
intranet,  IBM  told  employees 
not  to  download  SP2  when  it 
becomes  available  because  of 
compatibility  issues.  A  copy  of 


the  note  was  obtained  by  IDG 
News  Service. 

“While  this  patch  may  be 
good  news  for  other  Microsoft 
Windows  XP  owiters.  IBM 
is  directing  XP  users  not  to 
install  SP2.*  the  note  states. 
With  close  to  400.000  desk¬ 
tops.  IBM  is  a  very  large 
Microsoft  customer. 

“IBM’s  large  number  of  Web 
applications  will  need  to  be 
tested  and  some  modified  to 
work  correctly  with  SP2.  Cur¬ 
rently.  some  high-profile,  busi¬ 
ness-critical  applications  are 
also  known  to  conflict  with 
SP2,"  IBM  said  in  the  note. 
"When  the  current  issues 
and  concerns  have  been  ad¬ 
dressed,  IBM  will  deploy  a 


customized  version  of  SP2. 

An  IBM  spokeswoman  de¬ 
clined  to  comment  on  internal 
n*  issues. 

A  Microsoft  spokesman  said 
the  company  believes  IBM’s 
recommendation  to  its  em¬ 
ployees  is  prudent. 

“Microsoft  would  expect 
any  well-run  IT  organization 
to  make  the  same  recommen¬ 
dation,"  he  said.  The  company 
has  “recommended  aU  along 
that  customers  thoroughly  test 
SP2  before  deploying  it”  to  en¬ 
sure  compatibility  and  avoid 
unforeseen  problems,  he  said 

IBM  alerted  its  users  on 
the  same  day  Microsoft  an¬ 
nounced  the  release  to  manu¬ 
facturing  of  the  service  pack. 
The  Windows  XP  update  will 
be  available  soon  through 
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downloads,  retail  distribution 
and  free  CDs.  as  well  as  on 
new  PCs.  A  network  installa¬ 
tion  package  will  be  available 
for  enterprise  users. 

SP2  for  Windows  XP  is 
more  than  the  usual  package 
of  bug  fixes  and  updates. 
Microsoft  has  made  a  trade¬ 
off.  focusing  on  security  at  tin 
expense  of  compatibility.  As  a 
result.  SP2  can  render  existing 
applications  inoperable. 

Broad  Chpptges 

IBM  isn’t  the  only  company 
showing  evidence  of  compati¬ 
bility  problems  with  XP  SP2: 
Microsoft’s  own  software  b 
also  affected.  The  vendor  re¬ 
cently  released  an  update  for 
Microsoft  CRM  U  because  SP2 
will  prevent  the  original  appli¬ 
cation  from  running  correctly. 

Becau.se  of  Microsoft’s  bro^ 
changes,  analysts  have  com¬ 
pared  the  XP  service  pack  to  a 
Windows  upgrade  rather  than 
a  simple  update.  Business  users 
typically  take  much  longer  to 
install  a  new  version  of  Win¬ 
dows  than  a  service  pack  be¬ 
cause  of  compatibility  testing. 

Thomas  Smith,  manager  of 
desktop  engineering  at  a  large 
Houston-based  company  that 
be  asked  not  be  identiff^  said 
he  hopes  to  equip  his  5,000 
desktops  with  a  customized 
version  of  the  service  pack  be¬ 
fore  Microsoft  pushes  it  out 
on  Windows  Update. 

Many  of  the  desktops 
Smith  manages  are  scattered 
throughout  North  America 
and  use  common  high-speed 
Internet  connections  such  as 
DSL  or  cable.  Altbou^  the 
company  uses  a  remote  man¬ 
agement  tool  supplied  by  Al- 
tiris  Inc.,  Smith  he  relies 
on  Windows  Update  for 
patching.  If  the  standard  Win¬ 
dows  XP  SP2  distribution  is 
applied  to  his  machines,  it  will 
bl^k  access  to  several  corpo¬ 
rate  Web  applications,  he  said. 

Microsoft  will  help  users  in 
Smith’s  position,  said  Barry 
Goffe,  a  group  manager  in  Mi- 


n  Microsoft 
would  expect 
anyweH-ninrr 
organization  to 
the  same 
recommendation. 
[We’ve]  recom¬ 
mended  all  along 
that  customers 
thoroughly  test  SP2 
before  deploying  it. 


A  MICROSOn  SPOKESMAN 

crosoft’s  Windows  group.  The 
software  maker  plans  to  offer 
simple  ways  to  set  a  unique 
re^try  k^  on  XP  desktops 
that  will  instruct  the  systems 
to  skip  SP2  but  still  download 
other  critical  updates  through 
Windows  Update  and  Auto¬ 
matic  Update.  Goffe  said.  “We 
want  to  give  ctLstomers  some 
breathing  room."  he  said. 

Nevertheless,  Microsoft  is 
urging  all  users  to  install  SP2 
as  soon  as  they  can,  Goffe 
said.  This  is  not  about  fun 
and  games."  he  said.  “SP2  is 
about  improving  the  security 
of  our  customers’  infrastruc¬ 
ture.  We  have  spent  a  lot  of 
time  making  sure  that  this  de¬ 
livers  a  lot  of  value  lo  all  our 
customers.  We're  urging  all 
I  customers  to  deploy  SP2  as 
'  soon  as  possible." 

Business  users  obviously 
need  to  test,  but  Microsoft 
can’t  be  blamed  if  users  are 
now  unpleasantly  surprised  by 
SP2.  said  Michael  Cherry,  an 
analyst  at  Directions  on  Micro¬ 
soft  Inc.  in  Kiridand.  Wash. 

“Microsoft  has  been  more 
than  forthcoming  about  the 
number  of  changes  in  this  ser¬ 
vice  fiack  and  making  it  avail¬ 
able  for  testing,"  Cherry  said. 

“I  would  say  to  IT  depan- 
ments  that  they  want  to  get 
their  testing  done  quickly  be¬ 
cause  there  are  significant  im¬ 
provements  in  this  service 
pack,  and  I  am  not  sure  you 
would  want  to  forgo  those." 
048777 


Evenwritesfor  the  IDG  News 
Service.  Computerworid's  Tbdd 
R.  Weiss  contributed  to  this  story. 


OUR  KNOWLEDGE  OF 
WHAT  CIOs  NEED  GOES  BACK 

and  forward 

A  LONG  WAY. 


While  the  title  of  CIO  may  not  have  existed  65  years 
ago.  that’s  how  long  Fujitsu  has  been  developing 
innovative  technology  solutions  for  the  world’s 
leading  companies. 

Today,  we’re  leveraging  our  multi-billion  dollar 
annual  R&D  budget  to  give  CIOs  the  powerful  new 
enterprise  solutions  they  need  to  automate  even 
the  most  complex  business  infrastructures.  Our 
customers  and  business  units  work  closely  with  our 
research  teams  to  guide  new  product  development. 
TTiis  teamwork  ensures  our  discoveries  make  it  out  of 
the  lab  and  into  the  enterprise. 

Of  course,  there's  a  lot  more  to  a  $4S-billion 
company  than  just  R&D.  Our  high-performance  mobile 
computers,  scaiable/reliabie  servers,  and  managed  and 
professional  services  also  give  CIOs  alt  the  tools  they 
need  for  a  world-class  IT  partnership.  For  deoils  go  to 
us.fujitsu.com/computersorcall  I -800-83 1 -3 1 83. 
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Seagate  Says  Rival 
Can’t  Gel  Ex-wad(er 


HUD  Again  Awards  EDS 
$750M  Services  Contract 


Hard  driva  makar  Samati  Tack' 
nofagy  lie  iatailufiga  court  in- 
junc^  to  pravaM  a  formar  affl' 
piojM.  Rato  Goffia,  from  working 
tor  Waartam  Dtgltai  Corp..  saytog 
Gegla  knows  too  much  about 
Saagala's  hard  drtoa  raadtog  and 
writing  tochnotogy  to  work  tor  a 
compalltor.  Gegla.  who  worknd 
at  Saagato  tor  f7  yoars,  was  most 
racantiy  asacHtiva  dractor  of  its 
racardtog-haad  oparatlon. 


FTC  Settles  With 
Pop-up  Spammer 

SanOiegii-tmilDSqiBradSolii- 
lin  UC.  wMdi  ihgaciir  uHd  a 
banagaofpop-iwidilDialaiw- 
ua  IMiing  Mtham.  ia  bamd 
traia  anpbylng  lliai  lacHc  la  Hit 
hrimundaraaattlanNiilHi- 
noHicad  laal  tnak  by  Ihe  Maiil 
Trada  ConiaiWon.  D  Squvid  al- 
legidy  load  Mndoos  Maaaangar 
Sandcatoaaadpapt/palhttap- 
paarad  aa  fraqaandy  aa  avaiy  10 
ndndaa.  aorardtag  la  da  FTC. 


Lockheed  Martin  had  filed  a  complaint 
over  the  original  S860M  bid  last  year 


SV  TOOO  n.  WEISS 

OR  TilE  SECOND  TIME 
in  a  year,  the  De¬ 
partment  of  Housing 
and  Urban  Develop¬ 
ment  has  awarded  a  disputed 
IT  services  contract  worth 
more  than  S750  million  to  Elec¬ 
tronic  Data  Systems  Corp.  in¬ 
stead  of  to  the  vendor  that  pre¬ 
viously  provided  the  services. 

HUD  again  awarded  the 
contract  to  EOS  on  Aug.  6, 
after  a  seven-month  review 
that  began  after  the  current  IT 
services  vendor.  Lockheed 
Martin  Simulation.  lYaining 
and  Support  (LMSTS).  filed 
a  protest  last  year  again.st  the 
contract  award.  In  its  com¬ 
plaint.  LMSTS  alleged  that  the 
government  agency  misevalu- 
ated  the  business  proposals 
from  the  two  companies  and 
"made  an  irration^  source- 
selection  dectsioa” 


An  audit  by  the  Govem- 
mcm  Accountability  Office 
in  response  to  the  complaint 
agreed  and  dcrermined  that 
HUD'S  decision  to  award  the 
ci>ntract  to  EDS  was  unrea¬ 
sonable  and  should  be  rebid 
IQuickUnk  *3933].  The  con¬ 
tract  was  originally  valued  at 
about  S860  million. 

After  a  new  review,  how¬ 
ever.  the  agency  again  award¬ 
ed  the  HUD  Information  Tech¬ 
nology  Systems  (HITS)  con¬ 


tract  to  Plano.  Texas-based 
EDS.  Under  the  deal.  EDS  will 
provide  the  staff,  hardware, 
software,  telecommunications, 
facilities  and  services  needed 
to  deliver  HUD's  basic  IT 
functions  to  about  18,000 
woriters  in  more  than  80  of¬ 
fices  nationwide. 

The  contract  has  a  base  pe¬ 
riod  of  four  months  plus  nine 
option  years,  with  a  total  po¬ 
tential  value  of  $750  million. 

Nettie  R.  Johnson,  a  spokes¬ 
woman  for  LMSTS.  said  in  a 
statement  that  the  latest  HUD 
decision  is  “even  more  sur¬ 
prising  than  its  first  award“  of 


HUD  Contract  Timeline 
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the  contract.  “While  we  are 
disappointed  at  this  outcome, 
we  have  requested  a  debrief 
and  look  forward  to  learning 
how  HUD  made  its  selection 
of  EDS  for  the  critically  im- 
ponani  10-ycar  HITS  pro¬ 
gram.  We  will  not  have  any 
further  comment  on  this  mat¬ 
ter  until  we  receive  our  de¬ 
briefing  from  HUD,”  she  said. 

HUD  spokesman  Jercon 
Brown  said  he  had  no  further 
comment.  “I  can't  go  into 
specifics,”  Brown  said. 

lira  DufFey,  vice  president  of 
global  sales  at  EDS.  said  that 
despite  the  delays,  the  compa¬ 
ny  is  eager  to  get  back  to  work 
on  the  HUD  IT  project.  "It  has 
been  a  long  and  arduous  proc¬ 
ess,  but  the  new  award  by 
HUD  reafrirm.s  that  EDS  of¬ 
fered  the  superior  solution  — 
twice,"  he  said. 

TTie  IT  services  will  include 
enterprisewide  data  process¬ 
ing  and  management  from 
mainftame  to  the  desktop,  in- 
fonnation  security,  icchnolog)' 
refresh  services,  help  desk 
support,  user  supiport.  disaster 
recovery,  printing  and  distrib¬ 
ution.  networking  services, 
wireless  services,  TV/video¬ 
conferencing  and  Web  admin¬ 
istration.  OM772 


Zurich  Rnancial  Outsources 
App  Development  to  CSC 


MdUw  Updates 
E-Business  Server 
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Due  on  Thursday 
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BY  LUCAS  MCAHUN 

Zurich  Financial  Services,  one 
of  the  world's  largest  insurers, 
has  signed  a  seven-year.  SL3  bil¬ 
lion  outsourcing  agreement 
with  Computer  Sciences  Corp. 
to  hand  off  new  application 
development  and  the  manage¬ 
ment  of  more  than  4.000  exist¬ 
ing  applications. 

ZFS’s  server  inirastructurc 
will  continue  to  be  managed 
in-bousc,  but  the  deaL  signed 
late  last  month,  will  transfer 
about  1.600  of  the  Zurich- 
based  company's  5.000  IT  em¬ 
ployees  to  El  Segundo.  Calif.- 
based  CSC.  About  650  of  the 
employees  being  transferred 
are  U.S.-based,  ZFS  said. 

US  employees  and  person¬ 
nel  in  the  UJC  and  Switzer¬ 
land  are  expected  to  transfer 


to  CSC  in  the  fourth  quarter, 
and  employees  in  Germany 
arc  expect^  to  make  the  tran¬ 
sition  during  the  second  half 
of2005i 

Expected  Benefits 

“We're  getting  a  very,  very 
flexible  framework,  where  we 
can  redeploy  our  skills  and  re¬ 
sources  almost  to  any  needs 
we  want.”  said  Michel  Para- 
vicini.  ZFS's  chief  information 
technology  officer.  “Secondly, 
it's  about  productivity.  It's 
about  leveraging  the  expertise 
CSC  has,  making  sure  we  can 
streamline  our  applications 
landscape  and  reduce  the 
number  of  platforms  and  sys¬ 
tems  in  it" 

Paravicini  said  ZFS  expects 
I  to  reduce  costs  by  about  20% 


by  employing  CSC.  “We  (ex¬ 
pect  to}  get  to  3  very  reason¬ 
able  benefit  early  on  in  the 
contract,  which  is  very  impor¬ 
tant  to  me."  he  said. 

ZFS's  global  organization 
has  traditionally  been  a  geo¬ 
graphically  oriented  opera¬ 
tion.  in  which  each  region 
runs  on  its  own  unique  busi¬ 
ness  applications.  Paravicini 
said.  Last  year,  in  a  move  to 
standardize  opera¬ 
tions  and  cut  costs, 
the  company  fin¬ 
ished  consolidat¬ 
ing  its  physical  in¬ 
frastructure  into 
two  data  centers, 
one  for  European 
and  Asia-Pacific  operations 
and  one  for  U.S.  operations. 

About  85%  of  ZFS's  applica¬ 
tions  are  homegrown,  accord¬ 
ing  to  Paravicini  who  said  the 
company  will  likely  choose  to 
standardize  on  some  of  its  ex¬ 
isting  platforms  instead  of  de¬ 


veloping  or  buying  new  ones. 

Bill  Bradway.  an  analyst  at 
Framingham.  Mass.-based 
Financial  Insights,  said  the  in¬ 
surance  industry  as  a  whole 
is  five  to  seven  years  behind 
banking  and  brokerage  firms 
in  consolidating  IT  infrastruc¬ 
tures  and  standardizing  plat¬ 
forms.  Paravicini  agreed  with 
that  assessment. 

Paul  Defuria.  chief  technol¬ 
ogy  officer  for 
CSC's  Financial 
Services  Group, 
said  his  company 
will  focus  primarily 
on  ZFS's  bread- 
and-butter  applica¬ 
tions  of  insurance 
underwriting  and  claims. 

"Certainly,  they  have  an  In¬ 
credibly  lar^  insurance  port¬ 
folio  with  millions  of  policies," 
Dcftiria  said.  “Policy  adminis¬ 
tration,  fust  by  the  sheer 
weight  of  it,  is  important" 
048780 
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Novell  Bundles  JBoss  App  Server 


Red  Hat  launches 
app  server  as  well 


ev  CAIIOC  SLtWA 

Novell  inc  earlier 
this  month  bundled 
the  open-source. 
I2E£-i;ompUant 
JBoss  Application  Server  with 
its  SUSE  Linux  Enterprise 
Server  9.  giving  application 
developers  a  built-in  deploy¬ 
ment  option. 

Novell’s  SUSE  Linux-JBoss 
offering  includes  a  sofhvare 
development  kit  with  docu¬ 
mentation  and  tools  that  aim 
to  make  developers  more  pro¬ 
ductive.  Technical  support  is 
being  provided  by  Novell  with 
backing  fiom  Atlimia-bascd 
JBoss  Inc.,  which  announced 


Enterprise  Server  9  supports 
the  2.6  Linux  kernel  patches 
that  fix  the  threading  model, 
he  said. 

“That  will  lead  to  better 
performance  and  scalability 
for  Java  virtual  machines,  so 
now  Linux  can  be  a  very  seri¬ 
ous  enterprise-level  choice 
when  it  comes  to  deployment 
platforms.”  Floury  said.  "Nov¬ 
ell  is  doing  the  ri^t  things  to 
make  SUSE  Linux  the  best 
Linux  platform  to  run  Java.  I 
certainly  hope  to  see  Red  Hat 
step  up  with  a  2.6  enterprise 
shipment  of  Linux." 

Red  Hat  Inc.  has  incorporat¬ 
ed  some  of  the  2.6  kernel  fea¬ 
tures  into  its  current  Red  Hat 
Enterprise  Linux  3  release. 
Version  4.  due  early  next  year, 
will  be  built  around  the  new 


JBoss  User  Profile 


last  month  that  its  open-source  kernel.  Red  Hat  spokeswoman 
application  server  passed  Sun  Leigh  Day  said. 


Microsystems  Inc’s  compati¬ 
bility  test  suite  for  Java  2  En¬ 
terprise  Edition  14. 

JBoss  CEO  Marc  Fleury  said 
Java  virtual  machine  (JVM) 
performance  had  been  ham¬ 
pered  on  Linux  due  to  limita¬ 
tions  with  the  kernel  thread¬ 
ing  model  But  Novell’s  SUSE  I 


At  the  recent  Linux  World 
Conference  in  San  Francisco, 
Novell  also  announced  that 
the  next  major  release  of  its 
exteNd  application  suite,  due 
in  late  20(^  will  be  bundled 
with  /Boss  Application  Server 
4jc  rather  than  the  exteNd  Ap¬ 
plication  Server  it  acquired  in 


2002  from  SilvcrStream  Soft¬ 
ware  Inc. 

A  maintenance  release  of 
exteNd  will  support  the  JBoss 
application  server  by  year’s 
end.  according  to  Ashish  Lar- 
ivec.  a  director  of  product 
marketing  at  Novell. 

Continued  Support 

Even  though  Novell  will  no 
lunger  ship  new  releases  of  its 
application  server,  it  pledged 
to  continue  support  for  the 
product,  as  well  as  for  IBM's 
WebSphere.  BEA  Systems 
Inc.'s  WebLogic  and  Jakarta 
Tomcat. 

“We  have  been  looking  at 
supporting  open-source  proj- 


Oracle  Gives  CRM  Another  Shot 


BV  MARC  L.  &OWOIHI 

Oracle  Corp.  is  counting 
on  the  latest  revision  of  its 
E-Business  Suite,  aimed  large¬ 
ly  at  improvmg  sales  process¬ 
es,  to  Anally  give  it  the  elusive 
traction  it  has  sought  in  the 
CRM  market  for  years. 

The  company  today  is  ex¬ 
pected  to  announce  Oracle 
CRM  ULIO,  an  upgrade  that 
includes  a  revamp  of  its  sales, 
marketing  and  partner  rela¬ 
tionship  management  mod¬ 
ules.  T^  new  CRM  applica¬ 
tion  is  part  of  an  ongoing 
E-Busincss  Suite  upgrade  that 
earlier  this  month  yielded  Ver¬ 
sion  UllO  of  its  Supply  Chain 
Management  application. 

Tuned  for  release  as  corpo¬ 
rations  are  expected  to  be 
willing  to  once  again  invest  in 
custoiner-£u:ii^  applications. 


I  CRM  Ui.l0  is  designed  to  en¬ 
able  the  alignment  of  sales 
activities  with  company  goals, 
boost  the  cffectiveikcss  of  in¬ 
dividual  salespeople  and  bol¬ 
ster  collaboration  between 
in-house  and  indirect  sales 
forces,  said  John  Wookey.  Ora¬ 
cle's  senior  vice  president  of 
applications  development. 

Among  the  new  tools  in 
CRM  ULlO  is  the  Oracle  Audi¬ 
ence  Woricbcnch.  which  can 
access  data  from  the  Oracle 
saJes  and  marketing  modules 
and  present  it  in  a  sii^le  screen 
to  help  managers  identify  the 
best  customers  to  target  for 
upselling  or  cross-selling. 

In  addition,  managers  can 
now  craft  compensation  pack¬ 
ages  that  reward  salespeople 
who  fulAll  corporate  objec¬ 
tives. 


Accordmg  to  Wookey.  ana- 
lyticaJ  tcchrology  will  enable 
managers  to  track  sales  by 
product  or  other  categories 
and  create  a  "holistic  view"  of 
companywide  CRM  activities. 
Users  can  access  sales  status 
information,  do  historical  and 
predictive  analyses,  and  report 
on  potential  deals,  Oracle  said. 

MaUng  Inroads 

The  cross-selling,  analytical 
and  marketing  integration  en¬ 
hancements  arc  of  particular 
interest  to  Aftina.  a  customer 
service  company  in  Peoria.  IlL 
Victor  Burgess,  vice  president 
and  genera]  manager  of  alli¬ 
ances,  said  the  company  will 
be  able  to  offer  the  upselling 
and  cross-selling  technology 
to  its  customers  as  part  of  Us  I 
contact  center  service.  Affuia  I 


I  ccts  and  products  wherever  it 
makes  sense  within  our  prod¬ 
uct  portfolio,  and  an  applica¬ 
tion  server  is  pretty  much  a 
commoditized  part  of  the  plat¬ 
form.”  Larivee  said.  "We  first 
investigated  trying  to  open- 
source  our  application  server, 
but  because  of  licensing  re¬ 
strictions.  we  were  unable  to 
do  so.  TTie  next  option  wa.s  to 
look  at  the  most  popular  open- 
source  application  server,  and 
JBoss  was  the  clear  choice." 

Novell  plans  to  provide  a  se¬ 
ries  of  white  papers  and  tech¬ 
nical  guides  to  help  custom¬ 
ers.  but  the  company  expects 
migration  issues  to  be  minimal 
since  JBoss  is  J2E£-compliant. 

“This  is  a  good  thing  for 
both  Novell  and  /Boss,”  said 
Anne  Thomas  Manes,  an  ana¬ 
lyst  at  Midvale.  Utah-based 
Burton  Group.  “It’s  a  waste  of 
time,  effort  and  money  for 
Novell  to  continue  to  invest  in 
this  commodity  J2EE  applica¬ 
tion  server  technology  when 
there  are  freely  available, 
high-quality  app  servers  that 
they  can  embed  for  their  prod¬ 
uct  instead.” 

Also  at  Linux  World.  Red 


currently  runs  Oracle’s  E-Bus¬ 
iness  Suite  1119  CRM  and  ap¬ 
plication  server  software. 

The  CRM  lli.10  release  is 
the  latest  of  several  attempts 
by  Oracle  to  gain  share  in  the 
CRM  market  —  an  effort  that 
so  far  has  yielded  few  results, 
said  Erin  Kinikin,  an  analyst  at 
Forrester  Research  Inc. 

By  building  in  features  that 
help  salespeople  save  time  and 
make  more  money,  the  suite 
might  be  appealing  enough  to 
ease  their  historical  aversion 
to  CRM  software.  Kinikin  said. 
However,  she  noted,  “we  need 
to  see  some  customer  refer¬ 
ences  and  retum-on-invest- 
ment  results." 

All  Oracle  CRM  UUO  mod¬ 
ules  will  be  available  within 
the  next  eight  weeks.  Pricing 
per  module  starts  at  $3,995  per 
user,  subject  to  conditions  in 
Oracle's  E-Business  Suite  pric¬ 
ing  schedule.  O  48800 


Hat  announced  the  availability 
of  its  lightweight  application 
server,  which  is  bas^  on  the 
opcn-source  Jonas  application 
server  from  the  ObJcctWeb 
Consortium.  Raleigh.  N.C.- 
based  Red  Hat  said  it  plans  to 
test  the  application  server  to 
ensure  that  it  interoperates 
with  J2EE  platforms  from 
BEA,  IBM  and  Oracle  Corp. 

Red  Hat  Application  Server 
is  tested  and  supported  on  alt 
major  commercial  JVMs,  in¬ 
cluding  those  from  BEA,  IBM 
and  Sun.  according  to  the 
company.  Plans  also  call  for  it 
to  be  tested  and  certified  with 
leading  database  management 
systems,  including  those  ftom 
Oracle.  IBM  and  Sybase  Inc 

Tom  Murphy,  an  analyst  at 
Meta  Group  Inc.,  predicted 
"a  flurry  of  activity"  around 
opcn-source  application  serv¬ 
ers  such  as  Red  Hat,  Novell's 
releases  and  others. 

“Just  like  it  took  the  forma¬ 
tion  of  Red  Hat  to  really  get 
Linux  going  and  then  the 
backing  of  IBM  to  make  cor¬ 
porations  comfortable,  we  are 
seeing  a  similar  era  non-  for 
opcn-source  middleware."  he 
said.  048796 

Reporter  Tbdd  R.  Weiss  co/i- 
rrifauted  to  fWs  story. 
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New  Mexico  County  Pioneers 
Courthouse  Wi-R  %rvice 


av  BOB  BREWtN 

Bernalillo  County,  N.M.,  has  adopted 
Wi-Fi  technology  to  support  Internet 
access  for  judges,  lawyers  and  jurors  in 
its  courthouse.  The  service  also  pro¬ 
vides  wireless  voice-over-IP  phone 
service  for  security  personnel. 

Jim  McMillan,  principal  court  tech¬ 
nology  consultant  at  the  National  Cen¬ 
ter  for  State  Courts  in  Williamsburg. 
Va.,  called  Bernalillo  county  a  pioneer 
in  the  use  of  Wi-Fi  service  and  Wi-Fi 
VoIP  phones  in  courts.  McMillan  said 
the  Bernalillo  courthouse  is  one  of  the 
first  in  the  country  to  offer  free  Wi-Fi 
service  to  jurors. 

Paul  Roybal,  CIO  of  the  Metropolitan 
Court  in  Bernalillo  county,  which  en¬ 
compasses  greater  Albuquerque,  said 
the  court  this  month  kicked  off  the  sec¬ 
ond  phase  of  a  $150,000  Wi-Fi  deploy¬ 
ment  that  began  in  February.  It  will  pro¬ 
vide  both  Wi-Fi  VoIP  and  data  services 
throughout  the  10-story  courthouse. 

The  Wi-Fi  network  is  intended  to 
reduce  juror  frustration  with  waiting 
to  be  called  for  cases.  Roybal  noted. 

The  network  hardware  includes  two 
BeaconMaster  Layer  3  routers  ftom 
Chantry  Netwoiks  Inc.  in  Waltham. 

Mass.  Once  the  project  is  completed, 
the  network  will  have  65  Chantry  Bea- 
conPoint  802 Jla/b/g  access  points, 
Roybal  said. 

Addressing  Security 

The  VoIP  phone  service  will  replace 
a  dedicated  900-MH2  phone  system 
that  had  trouble  operating  in  some 
areas  of  the  steel  and  concrete  struc¬ 
ture.  The  VoIP  service  will  al  w  get 
around  a  ban  on  using  cell  phones  in 


the  courthouse,  according  to  RoybaL 

Luc  Roy.  senior  director  of  product 
management  at  Chantry,  said  the  Bea¬ 
conMaster  routers  used  in  the  Bernalillo 
courthouse  segregate  traflfic  and  subject 
it  to  a  firewail  through  virtual  private 
network  connections.  Each  router  is 
capable  of  supporting  50  VPNs. 

Roy  said  network  managers  can  con¬ 
trol  access  to  subnetworks  by  assign¬ 
ing  different  sets  of  Wi-Fi  service  set 
identifiers,  the  header  broadcast  by  an 
access  point.  Client  devices  must  use 
the  same  SSID  as  the  one  broadcast  by 
the  access  point,  and  judges,  lawyers 
and  jurors  will  all  be  assigned  different 
SSIDs  in  the  courthouse. 

The  network  uses  two  BeaconMas¬ 
ter  UOO  routers,  which  can  support 
up  to  100  access  points  each  and  are 
priced  at  $22,000  apiece.  The  Beacon- 
Point  access  points  cost  $395  each. 

Roybal  said  he  has  equipped  the 
court  security  force  with  36  Netlink 
Wi-Fi  VoIP  phones  from  SpectraLink 
Corp.  in  Boulder,  Colo.  Ben  Guderian. 
director  of  marketing  at  SpectraLink. 
said  the  phones  cost  $595  each.  Al- 
thou^  that  might  seem  high  com¬ 
pared  with  the  price  of  basic  cell 
phones,  which  go  for  around  $100, 
Guderian  said  mobile  VoIP  users  save 
on  monthly  oists  for  airtime. 

McMillan  said  the  Bernalillo  instal¬ 
lation  is  the  beginning  of  a  trend  in 
Wi-Fi  deployments  at  courthouses  na¬ 
tionwide.  T^  state  of  North  Carolina 
plans  to  install  Wi-Fi  in  all  100  of  its 
courthouses,  while  New  York-based 
Courtroom  Connect  has  installed  fee- 
based  Vfi-Fi  netwoiks  in  21  state  and 
municipal  courts.  O  48737 
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Security  Blind  Spot 


OME  OF  OUR  READERS  objected  Strongly 
last  week  to  Dan  Verton’s  front-page  story 
about  the  potential  dangers  of  sensitive 
company  information  posted  on  corporate 


Web  sites  ("Online  Data 
a  Gold  Mine  for  Terror¬ 
ists."  Quicklink  486621. 

They  fell  it  was  irrespon¬ 
sible  to  call  attention  to 
the  problem  and  accused 
us  of  showing  poor  judg¬ 
ment  in  identifying  spe¬ 
cific  examples  from  cor¬ 
porate  Web  sites. 

“Please,  spread  the 
fear."  one  reader  sarcas¬ 
tically  suggested.  “Is 
this  C€mputenvorld  or 
Fox  News?" 

“You  do  more  harm  than  good,' 
wrote  another  manager.  “If  there  are 
people  out  there  that  didn't  know 
about  it  before,  they  do  iww!” 

“Although  it  raises  some  aware¬ 
ness,”  said  a  systems  engineer,  “now 
youVe  added  some  details  and  hy¬ 
perlinks  that  allow  the  terrorists  to 
see  more  data.  Something  to  think 
about." 

I  certainly  agree  it's  worth  think¬ 
ing  aboat.  But  I  still  believe  it's  far 
better  to  recognize  potential  dan¬ 
gers  than  to  ignore  them.  The  De¬ 
partment  of  Homeland  Security 
thinks  so,  too.  Amit  Yoran,  director 
of  the  National  Cyber  Security  Divi¬ 
sion  at  the  DHS,  encouraged  our  re¬ 
porter  to  write  about  this  issue.  “Not 
thinking  through  the  security  impli¬ 
cations  of  some  of  the  information 
put  online  can  be  a  very  dangerous 
mistake.”  Yoran  said.  Another  senior 
intelligence  official  at  the  DHS  gave 
us  a  real  example  of  that  danger, 
pointing  to  the  recent  capture  of  an 
aJ-Qaeda  computer  engineer  whose 
laptop  conuined  photographs  and 
floor  diagrams  of  U5.  buildings. 

Unfortunately,  this  story  could 
have  been  headlined  ‘Online  Data 
Still  a  Gold  Mine  for  Terrorists,” 
since  we  called  attention  to  the  ex¬ 
act  same  issue  more  than  two  years 


ago  [“Web  Sites  Seen  as 
Terrorist  Aids."  Quick- 
Link  27059}.  In  that  story, 
we  cited  a  security  audit 
that  turned  up  startling 
amoimts  of  sensitive  in¬ 
ternal  information  made 
available  on  coiporate 
Web  sites,  such  as  build¬ 
ing  plans  and  schemat¬ 
ics,  elevator  system 
specs,  wireless  network 
details  and  infrastruc¬ 
ture  diagrams. 

Why  on  earth  does  the  public 
Web  site  for  Entergy  Corp.'s  Indian 
Point  nuclear  power  plant  still  post 
details  about  its  reactor  design 
(QuickX^nk  4867S],  including  the 
thickness  of  the  reactor's  various 
layers  and  the  types  of  steel  rein¬ 
forcement  bars?  For  school  science 
projects? 

Not  surprisingly,  security  ana¬ 
lysts  and  consultants  lined  up  in 
favor  of  calling  attention  to  such 
lapses.  “I  thought  the  piece  on  the 
building  plans  was  great,”  one  secu¬ 
rity  consultant  wrote  to  our  reponer. 


I  “This  is  an  area  that  just  does  not 
get  considered." 

But  the  issue  isn’t  restricted  to 
I  corporate  entities.  One  security 
'  manager  at  a  technical  services 
company  in  the  Midwest  wrote  in 
about  a  U.S.  government  Web  site 
that  freely  distributes  a  software 
package  that,  in  his  view,  could  help 
terrorists  plot  “a  chemical  or  biolog 
ical  weapons  attack."  The  software 
is  actually  intended  for  emergency 
response  teams,  be  said,  “bur  after 
seeing  it.  I  would  say  it  could  be 
used  by  terrorists  quite  easily." 

The  problem,  of  course,  is  that 
most  of  us  think  like  the  good  guys, 
not  the  bad  guys.  We  don't  look  at  a 
sharpened  pencil  on  a  desk  and  see 
a  deadly  weapon.  Who  wants  to  live 
that  way? 

There’s  also  an  aigument  to  be 
made  that  this  isn’t  an  IT  problem  at 
all.  The  content  of  most  large  com¬ 
pany  Web  sites  is  usually  managed 
by  marketing  and  communications 
departments,  and  they're  more  wor¬ 
ried  about  presenting  a  good  im^e 
than  about  the  implications  of  post¬ 
ing  a  photo  of  the  underground 
paricing  garage. 

So  you  tell  roe:  If  IT  and  security 
managers  don’t  pay  attention  to  this 
corporate  security  blind  spot,  who 
wiU?  048782 
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MICHAEL  GARTENBERG 

When  Mobile, 
Connectivity 
Is  Everything 

IT  WOULD  BE  GREAT  to 
have  a  unified  architec¬ 
ture  for  mobile  digital 

content,  applications  and  devices,  an 
architecture  that  would  let  me  link 
my  efforts  at  work  with  my  content 
and  information  at  home  seamlessly.  I 
could  be  mobile  and  still  access  any 
critical  information  that  was  contextu¬ 
ally  relative. 

Althou^  the  unified  platform  doesn't 
exist,  an  emerging  crop  of  portable  de¬ 
vices  does,  thankfully,  grant  me  greater 
flexibility  in  synchronization  and  con¬ 
nectivity.  While  the  PDA  started  a  rev¬ 
olution  years  ago.  the  need  for  discon¬ 
nected  PDAs  is  rapidly  declining.  In 
fact,  a  few  years  ago.  I  predicted  that 
most  portable  devices  sold  on  the  mar¬ 
ket  would  have  at  least  two  forms  of 
connectivity  built  in. 

That  proved  to  be 
correct,  and  today 
connectivity  should 
be  a  primary  driver 
when  you're  lookup 
into  mobile  device 
purchases  for  busi¬ 
ness  use.  There  are 
several  factors  that 
come  into  play  in 
makii^  the  purchas¬ 
ing  decision. 

First,  you  need  to 
decide  how  many  de¬ 
vices  you  (or  your 
users)  warn  to  carry. 

For  most  users,  it 
will  be  no  more  than 

three,  with  two  being 
the  sweet  spot  Form 
factor  is  important  as 
well  — ■  there's  a  huge 
difference  between  a 
dwee  that's  truly  pocketable  and  some- 
ihir^  that  needs  to  go  into  a  case  with  a 
laptop.  And  pay  attention  to  battery  life. 

No  matter  iW  small  the  device  Is.  once 
the  battery  goes,  it's  a  brick. 

Then  focus  on  the  importance  of  pri- 
m^  and  secondary  functions.  If  voice 
is  important,  you  m^t  want  a  small, 
dedicated  cell  phone  that's  separate 
from  other  functions  and  therefore  al¬ 
ways  available.  If  e-mail  or  messaging 
is  important,  make  sure  a  keyboard  is 
available  for  the  device.  (A  good  rule 
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of  thumb  when  it  comes  to  mobile 
messaging  is  that  the  worst  keyboanl  is 
better  than  none  at  all)  If  you  need  to 
access  other  information,  make  sure 
the  device  is  compatible  with  Micro¬ 
soft  Office  applications  so  you  can 
read  attachments  when  on  the  road. 

Fuially  and  most  importantly,  re¬ 
member  that  the  key  these  days  is  con¬ 
nectivity.  For  phone-centric  devices  or 
Bluetooth  is  a  must  so  you  can 
connect  them  to  other  devices  or  head¬ 
sets.  For  e-mail-ccntric  devices, 
sure  coverage  areas  match  your  usage 
pattern.  The  best  products  on  the  mar¬ 
ket  offer  Wi-Fi  in  addition  to  WAN  or 
Bluetooth,  which  is  great  for  connec¬ 
tivity  at  home,  on  campus  networks 
and  via  hot  spots  on  the  road.  Unless 
you're  sure  about  where  the  device  will 
be  used,  you  will  want  connectivity  op¬ 
tions  that  give  you  more  flexibility  for 
staying  connected  —  and  in  the  end. 
that’s  what  it’s  all  about.  A  Wi-Fi-only 
device  won’t  do  if  there’s  no  networic;  a 
GSM/GPRS  device  might  have  connec¬ 
tivity  problems  indoors. 

A  handful  of  products  meet 
criteria  well  For  tvro-piece  connectivi¬ 
ty.  a  good  combo  is  a  small,  Bluetooth- 
enabled  cell  phone  and  a  Bluetooth 
PDA  For  e-mail  centridty,  the  venera¬ 
ble  BlackBeny  is  a  great  choice.  For 
all-around  PDA  functionality  with  tele¬ 
phony.  the  Treo  600  is  an  excellent 
tool  For  flexibUity,  nothing  beats  the 
HP  6300,  which  combines  telephony. 
GPRS,  Wi-Fi  and  Bluetooth,  all  in  a 
tiny  form  factor.  There’s  no  one  killer  I 
device  that’s  right  for  everyone. 

Next  month.  I'll  be  taking  a  close 
look  at  some  of  the  best  of  these  de¬ 
vices  in  a  more  in-depth  review  of  how 
well  they  work  for  the  mobile  profes¬ 
sional  O  486M 

PIMM  FOX 

Technology 
Not  the  Answer 
To  Terror 

Is  TECHNOLOGY  going  to 
be  able  to  foil  terrorists? 

It's  doubtful  Consider  the 

case  of  those  biometric  passports 
you  may  have  read  about  a  couple  of 
years  aga 

In  2002,  Congress  passed,  and  Presi¬ 
dent  Bush  signed,  the  Enhanced  Bor¬ 
der  Security  and  Visa  Entry  Reform 
Act  One  of  the  features  of  this  slab  of 
legtsladon  is  the  requirement  that  27 


foreign  governments  insti¬ 
tute  new  passports  with 
biometric  features  that  sup¬ 
port  facial  recognition. 

These  27  nations  arc  partic¬ 
ipants  in  the  Visa  Waiver 
Program,  which  lets  some¬ 
one  from  the  U.K..  for  ex¬ 
ample.  visit  the  U5.  without 
a  visa. 

When  this  law  was 
passed,  the  deadline  for  the 
newfangled  passports  was 
set  for  OcL  26  of  this  year. 

Although  technically  U.S.  passports 
don't  have  to  have  the  new  biometric 
chip,  the  State  Dci:«rtment  decided  it 
wouldn't  be  fair  if  wc  demanded  that 
other  countries  adopt  the  new  pass¬ 
ports  without  us  leading  the  way. 

But  guess  what  -  Maura  Harry,  as¬ 
sistant  secretary  of  sute  for  consular 
affairs,  told  the  Senate  Judiciary  Com¬ 
mittee  on  lune  15  that  this  scheme  is 
too  complicated  to  be  up  and  running 
by  Halloween.  Indeed,  there  aren’t 
even  passports  with  the  special  bio¬ 
metric  chips  available  for  testing  yet. 

The  U.S.  government  settled  on  fa¬ 
cial  recognition  because  the  Interru- 
tkmal  Civil  Aviation  Organization 
adopted  that  standard  in  May  2003.  I 


For  biometric  passports  to 
worii,  you  need  globally  in¬ 
teroperable,  contactless 
chips.  I  almost  fell  out  of 
my  airplane  seat  when  1 
heard  that  one.  Gtobalty 
and  interopemble  shouldn’t 
be  allowed  in  the  same  sen¬ 
tence.  never  mind  In  one 
chip  design. 

Harty  said  the  U.S.  won’t 
begin  receiving  large  ship¬ 
ments  of  the  64KB  chips  for 
use  in  passports  until  next 
sprite  at  the  eariiest.  None  of  the  larg¬ 
er  countries  in  the  Visa  Waiver  Pro¬ 
gram.  such  as  the  UJL.  Japan.  France, 
Ireland,  Italy,  Spain  and  Germany,  has 
started  to  roll  out  the  new  biometric 
passports,  though  the  U.K.  is  switching 
to  the  biometric  system  next  year,  and 
Japan  should  be  well  along  by  2006. 

As  a  stopgap  measure,  visitors  who 
arrive  via  the  Visitor  Waiver  Program 
must  enroll  in  the  US-VISIT  program, 
which  is  designed  to  track  the  entry 
and  exit  of  foreigners  using  electroni¬ 
cally  scanned  fingerprints  and  pho¬ 
tographs. 

TT>c  Slate  Department  has  asked 
Congress  to  extend  the  deadline  by 
two  years  so  everyone  has  more  time 


to  get  on  the  biometric  bandwagon. 
The  Judiciary  Committee’s  rhairman 
Sen.  Orrin  Hatch  (R-Utah).  has  pro¬ 
posed  a  one-year  extension. 

Without  shifting  this  deadline.  U.S. 
embassies  and  consular  ofliices  will  be 
swamped  by  on  estimated  5  million 
applications  for  visas.  That’s  a  70^  in- 
crease  in  the  nonimmigrant  visa  work¬ 
load.  according  to  the  State  Department. 

Of  course,  all  of  the  poUcicai  blather 
over  using  technology  to  make  us 
more  secure  is  irrelevant.  It’s  worth 
noting  that  there’s  evidence  that  once 
I  these  biometric  passports  are  in  place, 
they  could  easily  be  thwarted,  for  ex¬ 
ample.  b>'  1  terrorist  who  got  Botox  in* 
iectioRs  just  before  traveling.  Besides, 
the  recent  report  on  the  ^  suicide  at¬ 
tacks  makes  it  dear  that  poor  commu¬ 
nication  among  the  FBI.  CIA  and  local 
law  enforcement  may  have  pres'ented 
officials  from  foiling  the  attacks. 

We  don’t  need  more  technology.  Wc 
need  to  learn  how  to  use  the  teleolo¬ 
gy  we  have,  and  we  need  some  com¬ 
mon  sense.  O  4870$ 
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Pentagon  Misuse 

MT  JOB  In  the  Navy  reserves 
nos  to  admnstar  and  operate 
the  Itottvatto  Syslern.  vrhi* 
had  been  (kMioped  for  the  Army 
based  on  a  manual  system  fSAO. 
JVrtaoon  IT  Msmanaoement 
Wastes  BiMns.*  QuickU* 

48055].  The  software  dd  Mb 
more  than  sornewhat  autornate  tlw 
manual  S)Stam.  AAhouoh  data  entry 
screens  were  almost  a  dupficate  of 
the  old  paper  forms  and  toKMtedge 
ol  speotal  codes  MBS  sti  reqi^ 
the  system  was  loiMd  as  advanced 
software  to  Simplify  the  Invenlory 
andmattnaHransfaroperabonsin' 
voMd  in  operatno  a  sfappmo  l»rt 

and  warehouse. 

I  saw  something  smilar  in  the 
Naborial  Guard.  It  was  difficull  lor 
me  10  use  these  systems  as  they 
were  wMe  Ignomg  my  then  15 
years  oleKpertencen  IT.  since  both  I 
systems  coM  have  easdy  been  I 

written  from  scratch  uang  proper 
database  and  application  design 
iechraques.  Instead  of  tryii^i  to  du¬ 
plicate  paper-based  ^sterns  that 
predate  \Atorid  W»  I.  the  Pentagon 


should  do  whai  every  company  n  the 
country  does  -  tee  technology  to 
mate  Its  systems  more  efhoem. 
Aaron  HCutehal 
Systems  analyst, 

ELSA  LLC.  Elwood,  IruL 


f^aper  Forever 

Mtetua  OAfnaoEin  wrote 
ft  a  recent  artide  (*No  Tumng 
Back  From  Olgiial  Age.*  QucHjnk 
48042]  that  using  paper  lor  data 
storage  mates  no  sense,  fm  no 
LuddOe.  but  I  disagiBe.  Many  ol  our 
wilQrscarTVQne-fnalcorTespon- 
denoewllhsocial,polticalandHer- 
ary  authors  of  greet  siteure  whose 
boots  wf  be  read  and  kves  studed 
for  decades.  How  do  we  tnanage 
theardwesforthsconespon- 
dence?  I  can  gather  («  fldftors' jst 
files  from  Outlook  and  ship  them  off 
to  ox  atdvve  partners  at  Colurnbia 
University,  but  are  they  going  to  be 
able  to  hM  a  lesearchar  20  or  30 
years  tram  now  noon  that  fie  nio 
whatever  wi  pass  tor  an  e-rral 
diant  in  the  future?  Most  ih^  not. 

Technotogystandardscha^- 
alreedy.  in  the  switch  Irom  Outlook 


for  Mac  OS  9  to  the  archwe  Me  tor- 

mat  m  Entourage  Ni  OS  X  the  .pst 

hiehasbeenreplacedbylhemcom- 

pakblemtx»filefore-marianh>v 

ng.Theeas«tithmgiodoloen- 

sire  that  someone  can  road  the 

correspondence  m  the  tuhn  IS  to 

get «  on  paper.  Besidei  f1  take  IM 

glow  of  a  cande  over  a  CRT  any  day. 

JeeWolBk 

Senior  user  analyst 

WW.  Norton  &  Co,  New  York 


KeepItCoinpetitive 

IN  A  JULY  t»  letter  ['Apple’s  kite' 
grabon  ProUerrs.’ QucUjnk 
47^].  James  Kunya  stated.  1 
persoitaRy  no  longer  see  a  need  to 
support  two  types  of  hvdwve  and 
operatng  systams  on  the  corporate 
desktop  *  Most  of  the  conaunes 
Tve  worked  tor  have  recognized  (he 
wiue  of  a  competane  markeloiace 
Shoe  the  aariy  19805.  it  has  been 
common  lor  vary  large  companies 
to  use  an  Amdahl  processor  or  two 
h  addrtion  to  (her  IBM  models  to 
apply  compettiw  pressure  to  Bv 
Blue.  I  have  seen  companws  nstall 
software  products  that  they  twdll- 


lle  or  no  mention  of  uang  m  ordw 
10  gel  svndcant  once  concasBtons 
fromthervendorofehoee-Simiar- 
fy.  even  with  onty  a  3%  mahal 
share.  Apoie's  presence  «i  the  mar- 
ketplaceprovilesacrucialcounier- 
batanoe  to  Moosotl  But  lor  some 
reason.  Kunysz's  roesorwg  ssems 
to  be  wNlespraad  when  it  comes  to 
fhedeskiopVi^BrepeoplegO' 
mHoroaknlhBlIifcrosoflBarro- 
nopoiy  made  by  them  *id  that  I  wf 
contmue  to  be  unlllhay  (not  the 
gcwernmenl)  do  sarnettwig  dnui  I? 
Catty  Taddai 
Portland,  Ore 

COMPtfTEItWORtll  wetcomas 
comments  from  esroadars  LsBars 
wi  be  edied  for  bieviy  and  dvty. 
They  staid  be  addressed  toiamie 
EcMe.  ieltBis  adilor.  CornoutanKhd. 
PO  Box  9171 500  Old  Connactcul 
TMi.  Frammohem.  Maas.  01701 
Fax(50e)679^a4a 
E-mail:  lelleisicomputenvDrld.com 
Include  an  addnes  and  Dtrone  run- 
bar  tor  mmadate  venficaaon 


i  FornaaUlBBDnlhMeand 
'  othwtupMLgein 
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v'v  ;  • 

E*K  OARHON*  CHANGES  THE  WAY  YOU  THINK  ABOUT  STORAGE.  AnTOmchw  9i»  cifflTOKMw 
WHIi  the  mulity  and  higti  anallabllity  that  CtARliotf  Is  known  felna  smaUerpackage  that’s  right  fof  " 
any  husiiwss.  IfS  powerful,  yet  simple  to  manage.  SAN  ready  User  instahable.  With  repllcatioheod 
management  functionality  Ail  at  a  price  thaft  equally  smaH,  ^rting  at  SS.99St  To  team  more,  vbti ' 

miMr.EMC.com/backup.  call  l-866w^4*7381.  .  v  . 

RndMauttwM  EMC  Vektcfly*  Partner  at 
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TECHNOLOGY 


_^anleO  customers  personalized  expenencbs  with  ihe  company  to  extend  to  its  Web  site. 


-Bettin 

Person 


Personalization  technologies  didn’t  live 
up  to  their  hype  during  the  dot-com 
boom,  but  some  companies  are  taking 
another  look  bv  kym  gilhoou 


HEN  MARVIN  SCHWAN  decided 
to  bolster  his  family’s  dair>' 
business  by  seliii^  ice  cream 
door  to  door  more  than  50 
years  ago,  he  quickly  developed 
relationships  with  the  cus¬ 
tomers  on  his  route.  He  must  have  been  doing  some¬ 
thing  right:  Since  then,  privately  held  The  Schwan 
Food  Co.  has  grown  into  a  frozen-good  giant,  with 
5  million  customers  in  48  states  and  estimated  rev¬ 
enue  of  $4  billion.  It  sells  into  homes  through  its 
Schwan’s  Home  Service  Inc.  division  as  well  as  into 
retail  locations. 

When  Schwan's  depided  a  few  years  ago  to  lever- 
^e  the  Web  as  a  key  customer  sales  channel  execu¬ 
tives  wanted  to  translate  the  personalized  experi¬ 
ence  customers  get  in  their  homes  and  through  the 
call  center  into  the  online  experience,  according  to 
Glenn  Bader,  director  of  e-commerce  and  emerging 
chanitels  at  the  Marshall,  Mmn. -based  company.  Do¬ 
ing  so  required,  among  other  efforts,  centralizing 
^ta  from  the  customer  master  file  and  other  sources 
in  a  dedicated  data  mart  and  finding  personalization 
software  that  could  recommend  an  individualized 
mix  of  products  and  offer  personalized  incentives  to 
site  visitors.  For  its  personalization,  campaign  man¬ 
agement  and  marketing  analytics  needs,  Schwan's 
chose  Interaction  Advisor  from  San  Mateo.  Calif- 
based  E.piphany  Inc. 

Personalization  technologies  came  on  the  scene  to 
much  fanfare  during  the  d<H-com  craze,  but  for  a 
number  of  reasons,  they  didn't  live  up  to  the  hype. 
Based  on  concepts  such  as  one-to-one 
personalization  tried  to  treat  all  customers  as  unique, 
but  the  numerous  business  rules  required  to  do  so 
were  difficult  to  maintain  and  greatly  affected  online 
system  performance.  Moreover,  many  businesses 
found  that  the  majority  of  their  customers  simply 
weren’t  different  enough  to  justify  the  expenditures. 

Nonetheless,  many  large  companies  today  are  see¬ 
ing  significant  returns  from  personalized  marketing, 
sales  and  customer  service  efforts  through  CRM 
strategies  that  combine  a  host  of  factors.  They  use 
appropriate  personalization  algorithms  and  sophisti¬ 
cated  analytics  for  understanding  behavior  and  focus 
on  a  smaller  group  of  customers  —  typically  high- 
value.  frequent  customers. 

For  example,  Harrab’s  Entertainment  inc.  in  Las 
Vegas  has  bolstered  highly  segmented  customer  data 
used  for  its  casino  customer  base  with  a  personaliza¬ 
tion  strategy  for  its  premier  100,000  customers  — 
who  generate  30%  of  its  revenue.  Harrah’s  uses  the 
Clienteling  product  ftom  Blue  Martini  Software  Inc. 
in  San  Mateo.  Calif,  to  implement  the  program. 

Daily  or  even  more  frequently,  managers  est^lish 
contact  priorities  for  Harrah's  service-oriented  hosts 
by  running  Cognos  queries  against  a  Teradau  ware¬ 
house  to  identify  appropriate  segments  and  then 
feedi^  results  into  the  Clienteling  data  mart.  Blue 
Martini's  personalization  ermine  generates  contaa 
names  and  reward  offers  appropriate  to  the  current 
promotional  campaign  of  Harrah's.  Ipr  example,  if 
an  event  oa  a  certain  night  isn’t  filled,  hosts  can  tar- 


CONSUMERS  WANT 
PERSONALIZED  CONTENT 
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get  specific  customers  and  make  a  personalized  offer 
based  on  behavior  and  preferences. 

“We’re  able  to  be  highly  customized  with  Blue 
Martini’s  (personalization  engine).  Managers  dictate 
more  of  the  prioritization  and  are  able  to  generate 
the  r^i  names,"  says  David  Norton,  senior  vice 
president  of  relationship  marketing.  Thanks  to  this 
effort,  says  Norton,  Harrah's  has  increased  revenue 
from  its  premier  customer  segment  by  28%  over  the 
past  two  years,  while  its  other  segments  have  experi¬ 
enced  modest  growth  rates. 

PERFORMANCE  ANXIETY 

When  Schwan  developed  its  personalization  strategy, 
according  to  Bader,  the  company  paid  attention  to 
factors  that  have  historically  caus^  failures  in  such 
efforts:  performance  problems,  databases  with  con¬ 
flicting  customer  data,  lack  of  integration  among 
channels  and  unreliable  personalization  techniques. 

Because  Schwan  had  deployed  the  analytics  and 
campaign  management  components  of  the  E.piphany 
platform  before  the  personalization,  the  company 
had  already  done  a  significant  amount  of  work  on  its 
data  mart.  Database  work  was  greatly  eased  by  the 
fact  that  field  reps  had  been  using  DOS-based  hand¬ 
helds  since  the  1980s  that  fed  a  customer  master  file, 
from  which  they  populated  the  data  mart,  says  Bader. 

Also  key.  says  Bader,  was  making  personalization 
contextually  relevanL  an  area  where  efforts  often  fall 
short.  Doing  so  requires  personalization  strategies 
that  don't  rely  on  just  one  technique  such  as  collabo¬ 
rative  filtering  or  rules-based  algorithms  but  com¬ 
bines  them  to.  for  example,  make  a  purchase  recom¬ 
mendation.  While  exploring  other  food  sites  to  pre¬ 
pare  for  Schwan’s  personalization  effort,  Bader  had  a 
personalization  engine  recommend  an  onion  and  a 
bottle  of  wine  for  a  family  dinner,  and  be  was  deter-  I 
mined  to  avoid  similar  problems.  I 


“If  you’re  going  to  use  (collaborative  filtering)  to 
upseD,  there  have  to  be  business  rules  that  go  around 
i(  for  specific  situations."  be  says.  Bader  rejected  pure 
rules-based  software  as  well  as  pure  collaborative 
filtering  pbtfonns  “because  they  didn’t  have  a  lot 
of  ability  to  build  rules  around  them."  Ultimately. 
Schwan  added  business-specific  rules  within  the 
E.piphany  system,  and  those  that  the  system  couldn’t 
accommodate  were  built  outside  of  it. 

As  for  the  site’s  performance,  “we  were  obviously 
concerned  about  tapping  into  a  technology  where 
there  were  questions  about  whether  it  would  scale  or 
perform,  particular!)’  with  our  traffic  and  sales  vol¬ 
ume,"  says  Bader  But  the  cache-driven  nature  of 
Epiphany's  personalization  engine  has  thus  far  alle¬ 
viated  concerns.  There’s  an  element  of  real  time 
where  (the  technology]  captures  new  information  as 
to  where  customers  are  going,  but  when  it's  making  a 
call  into  the  personalization  engine  itself,  it’s  not 
querying  to  figure  things  out  —  it’s  a  cache-driven 
operation,"  he  says. 

The  personalization  engine  takes  into  account  ele¬ 
ments  such  as  a  user’s  purchase  history,  pages  vbit- 
ed.  demographic  data  and  profile  to  make  recom¬ 
mendations.  Not  only  has  the  personalization  effort 
improved  Schwan's  upsell  rates  at  online  checkout, 
but  it  has  also  improved  overall  conversion  rates  and 
increased  order  frequency,  says  Bader. 

•  Performance  was  also  a  concern  for  A&E  Televi¬ 
sion  Nctworics  when  it  decided  to  better  target  cus¬ 
tomers  by  offering  separate  online  stores  for  its  AfitE 
Television.  History  Channel  and  Biography  Channel 
merchandise,  says  So  Yout^  Park,  director  of  e-com¬ 
merce  at  the  New  York-based  company. 

A&E  abandoned  its  earlier  e-commerce  platform, 
in  part  because  it  couldn't  scale,  and  rearchitected  its 
site  —  a  tribranded  effort  behind  which  sit  the  sepa¬ 
rate  siorcftonts  —  based  on  Art  Technology  Group 
Inc.’s  Commerce  Suite  and  its  Dynamo  personaliza¬ 
tion  technology.  Now,  depending  on  preferences  de¬ 
fined  during  a  registration  process  and  based  on  past 
behavior,  customers  get  individualized  content  and 
store  promotions  specific  to  each  channel.  If  they 
have  opted  to  receive  e-mail  content,  they  receive 
targeted  messages  based  on  their  profiles. 

Due  lo  limited  IT  resources,  A&E  opted  to  use 
ATG’s  packaged  personalization  “scenarios"  —  rules- 
based  “if-then"  processes  that  deliver  recommenda¬ 
tions  based  on  user  interests,  history  and  so  on. 

The  company  uses  SiteCatalyst  Web  analytics  from 
Orem,  Utah-based  Omniture  Inc.  to  analyze  how  its 
Web  page  tags  are  working. 

A&Fs  personalization  strategy  has  helped  it  brand 
the  individual  stores,  which  together  have  5,500 
products.  “Among  ocher  things,  it’s  unproved  conver¬ 
sion  up  to  50%.  While  our  earlier  [combined]  store¬ 
front  might  have  converted  3%  of  visitw’s.  our  individ¬ 
ually  branded  storefronts  convert  an)rwhere  from  5% 
to  8%.  It’s  helped  obviously  from  a  merchandising 
and  sales  perspective,  but  also  branding,"  says  Park. 

Before  a  company  undertakes  any  person^ization 
effort,  say  experts,  they’ve  got  to  determine  the  value 
to  customers.  Ultimately,  if  you  give  appropriate  con¬ 
trol  to  customers,  they’re  much  more  likely  to  remain 
loyal,  says  Chris  Selland,  an  analyst  at  Aberdeen 
Group  Inc. 

“Customers  should  be  managing  you  in  a  relation¬ 


ship.  rather  than  you  managing  them,”  Selland  says. 
"Personalization  used  to  be  all  about  marketing  and 
pushing  offers  in  people’s  faces.  Now  it’s  almost  be¬ 
come  personalization  as  a  customer  service  toot 
rather  than  a  marketing  tool  It's  about  establishing 
preferences  as  to  how  and  what  customers  like  to 
buy  and  how  they  want  to  be  communicated  with.” 
048557 


Gifhooly  is  a/reelance  writer  in  Falmouth,  Maine. 
Contact  her  at  kymg@maine.rrxom. 
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Autodesk  Updates 
Design  Software 

Autodesk  Inc.  in  San  Ralaal. 
CaW..  has  aimouncnd  a  new 
releast  of  Autodesk  Buzzsmv. 
design  software  thM  helpB  keep 
buikkng.  manutactwing  and  in* 
ftestnictm  profeelB  on  time  and 
on  budget  Buzzaw  6.  awaflable 
now.  indudas  prelect  porttoAo 
management  reports  on  sched¬ 
ule,  budget  and  proiect  status, 
as  wol  as  a  dashboard  with  key 
performance  Micetort  for  a 

prelects  tfurt  are  under  way. 
Autodesk  aaM.  hidng  starts 
atSSO.OOO. 


Veritas  Upgrades 
Repfication  App 

MIh  SollMra  Cn*.  IMi  monDi 
mancal  Slanai  Ripkatar 
3.0.  KAnn  ataMd  pratKlIiig 
nnnii  oAln  dm  thw^  rad- 
Om  dm  npicmin.  Stow 
e>pfcmr  aims  ontodallora  to 
canltalB  btda«  aiMnul  dto- 
ntotog  laaiaal  taraar  otatadns. 
II  doaa  IM  by  lapialtag  lannto 
afOoa  dm  am  M  IP  coiaiadtan, 
aMtoroortkanatoyaronaidad- 
idad  bam.  to  a  c«iM  taodton 
adian  ■  can  ba  laimy  badm 
upandatorad-acconlngtoltofl- 
toL  Ihe  aolban  toaatohbk  new 
and  com  $1,406  fat  Wfadam 
Samar  aad  diKancad  Samar. 


VMX  Tool  Monitors 
Linux,  Unix  dents 

Vtototabic.toUaton.Utoh. 
baa  annoncad  Oial  ntai  Vhitoh 
ManagamaM  Eatoaatoaa  to  m 
ncar  aaillbli  Tba  artonaloai 
aioai  Unto.  Uan  aad  Mac  OS  X 
cbanb  to  ba  atoiigad  and  monl- 
toad  naltoaly  haia  aWibi  Mkre- 
acO  Syatona  Manniainm  Sam¬ 
ar  2003.  accaritag  to  Mmln. 
VMXtOtotoiadadntobtotanccn- 
am  inapto  and  dm  to  SSB 
bMtanlwaandtoltollaiaiadnto. 
tobaben  and  laaoagantonl  laidi 
tana,  ba  cdngnnr  am.  VMX 
atom  to  SU06.  taebdto  inkn- 
oennHraDon  weniMnni 
and  lh«  msfagsd  wortaMlee 
IconsB. 


ROBERT  L.  MITCHELL 
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Wireless  World 
Needs  a  Directory 


switched  carriers  and 
been  issued  a  new  phone 
and  telephone  number.  I 
couldn't  get  that  number 
to  save  my  life,  which  is 
too  bad.  since  sometimes 
a  phone  call  is  a  life-and- 
deatb  matter. 

Today,  there  is  no  public 
nationwide  directory  of  cell 
phone  numbers,  no  nation¬ 
al  411  service  and  no  white 
pages  that  include  every¬ 
one's  cell  numbers.  Even  if  _ 

you  know  the  person's  cellular  carrier, 
it  won't  help.  No  matter  what  you  say, 
the  customer  service  representative 
won’t  release  the  number.  I  said  every¬ 
thing.  tried  every  angle,  but  to  no  avail. 

This  situation  might  have 
sense  in  1993.  when  the  16  million  cell 
phones  in  use  were  treated  like  handy 
accessories.  In  2004,  however,  the  in¬ 
dustry  has  some  160  million  subscrib¬ 
ers.  according  to  the  Cellular  Tele¬ 
communications  &  Internet  Associa¬ 
tion  (CTIA),  and  an  mcreasing  num¬ 
ber  of  those  customers  use  the  cell 
phone  as  thdr  primary  communica¬ 
tions  medium.  Today,  not  having  a 
public  mechanism  to  look  up  con¬ 
sumer  and  business  cell  phone  num¬ 
bers  is  lust  plain  ridiculous. 

Like  wireline  customers,  wireless 
users  have  phones.  They  have  phone 
numbers.  But  since  they  choose  wire¬ 
less  as  the  underlying  medium,  the 
game  changes.  Their  names  just  disap¬ 
pear  from  phone  books,  online  white 
pages  and  national  calling  directories. 

The  technology  to  create  a  nadon- 
wide  cellular  phone  number  database 


HE  OTHER  DAY.  I  needed  to  reach  my 
elderly  parents,  who  were  traveling,  on 
an  urgent  matter.  Not  to  worry,  I  thought: 
They  have  a  cell  phone.  There  was  just 
one  tiny  problem;  They  had  recently 


has  always  been  available. 
The  problem  is  that  the 
competitive,  fragmented 
wireless  industry,  with  its 
Byzantine  service  contract 
and  billing  models  and  a 
general  sense  of  paranoia, 
has  conspired  to  prevent 
such  a  directory  from 
being  created.  The  think¬ 
ing  is.  Who  wants  to  re¬ 
ceive  telemarketing  ralk 
when  you're  paying  by  the 
minute  for  incoming  calls? 
In  a  competitive  market,  what  carrier 
wants  to  share  its  customer  list  with 
other  vendors  for  the  sake  of  creating 
a  directory? 

Now  the  industry  is  finally  pushing 
ahead  to  create  a  nationwide  directo¬ 
ry-assistance  daubase.  It  wUl  be  less 
inclusive  than  traditional  directories, 
limited  to  listing  only  those  who  ask  to 
be  included.  There  be  no  charge 
to  be  listed,  and  vendors  have  pledged 
not  to  sell  or  publish  the  data.  The  ef¬ 
fort  is  a  good  example  of  how  to  use 
technology  to  give  people  dioices. 

But  you  wouldn’t  know  that,  given 
all  the  ruckus.  Privacy  advocates,  con¬ 
spiracy  theorists  and  folks  who  just 
don’t  like  the  idea  of  carriers  possibly 
profiting  by  distributing  ivireless  user 
data  are  (Ejecting.  It's  not  enou^  that 
they  don't  need  to  do  anything  to  keep 
their  own  names  out  of  the  directory 
-  they  don't  want  yours  in  one,  either. 

Surprisingly,  one  of  the  most  vocal 
opponents  is  Verizon  Wireless.  CEO 
Denny  Scrigl  called  the  initiative,  led 
by  the  CTIA  and  a  consortium  of  frve 
major  wireless  carriers,  a  "dumb  idea.*  I 


He  claims  to  be  defending  his  cus¬ 
tomers'  privacy  and  says  that  users 
don't  want  such  a  directory.  This  argu¬ 
ment  is  a  bit  disingenuous,  to  say  the 
least  Verizon  already  publishes  and 
shares  my  wired  phone  number  and 
address  information.  If  I  don't  like  it,  I 
have  to  pay  them  to  stop  the  practice 
by  making  my  number  unlisted.  But 
for  some  reason,  wireless  should  be  a 
special  case,  they  argue. 

Some  businesses  don't  like  the  idea 
of  havmg  employee  plume  numbers 
appear  in  a  4U  database,  fearing  tele¬ 
marketing  calls.  But  businesses  can 
protect  those  wireless  phones  just  as 
they  would  any  wired  line.  They  can 
choose  fXM  to  list  the  number. 

Every  cell  phone  today  has  Caller  ID 
to  screen  calls.  Call  blocking  is  avail¬ 
able.  And  users  can  demand  new  fea¬ 
tures  such  as  one  that  allows  only 
on  an  approved  phone  list  throu^ 
while  blocking  otbcis  or  routing 
them  to  voice  mail  Or  users  can  turn 
the  damned  things  off  when  they're 
driving  or  don't  want  to  be  interrupt¬ 
ed.  Certainly  plenty  of  technical  solu¬ 
tions  exist  if  the  industry  wants  to 
implement  them. 

It's  time  to  stop  thinking  about  wire¬ 
less  as  the  special  case  and  treat  it  as 
just  another  phone.  The  fact  is.  it's  just 
another  option  in  a  world  of  telephony 
technologies  that  are  rapidly  converg¬ 
ing.  Verizon's  own  move  toward  con¬ 
verged  service  offerings  that  mix  local, 
long-distance  and  wireless  plans  in  a 
single  package  is  evidence  of  this 
trend.  Not  to  offer  users  a  choice  is  to 
do  them  a  disservice.  Instead  of  telling 
customers  what  they  want,  telephony 
service  providers  should  offer  nation¬ 
wide  4U  service  and  users  decide 
for  themselves.  O  4802 
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PUT  IT  IN  THE 
SERVER  ROOM. 

FEEL  IT  IN  THE 
BOARDROOM. 


MMt  the  IBM  eServer '■  p5  system  -  the  game^hanging  UNIX’  server  that  can  bring  instant  agility  to  your  business 

T  H  hT  T  .  resources  among  virtual  partitions  in  milliseconds.'  On  d3d 

T  r  ^  <^*es.  At  any  Sme.  And  gain  business  agility  just  like  that 

You  need  to  learn  more.  More  about  all  the  benefits  of  eSetver  p5  systems  at  ibrn-com/eserver/boardroom 

fmaso^  erhy  IBM  eServer  pS  systems  with  Power  Architecture'  technology  rule  in  UNIX  compuling. '  ^ 


Flexible,  fifth-generation 
POWER  '  processors 


Capacity  on  Demand. 


Runs  IBMAIXSL' 
and  Linux.' 


Advanced  system 
utilization. 


Virtual  servers  as  small 
as  V10  of  a  processor.  ‘ 


(©server 


The  IBM  eServer  p5  system  delivers 
agility,  company-wide. 


oommunications  systems  based  on  outmoded  analog  technologies.  Must  be  fully  adept  at  -potchkying- 
together  solutions  that  appear  to  do  new  things.  Facility  with  answering  the  question,  'Why  can  t  l?-a  plus.  Job  Description  2;  T^a  comoanvwvide 
'"'P'®™'’'  videoconferencing,  global  work  teams  and  business-resilience  strategies.  AnsviJthnLltion 

How  d  you  do  that?  with  aplomb.  CISCO  IP  COMMUNICATIONS.  BECAUSE  PHONES  CAN  DO  MORE.  Learn  more  at  www.c^  com/domor 


Cisco  Systems 


THIS  IS  THE  POWER  OF  THE  NETWORK.  ROW. 
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10  mistakes  that 
can  suck  the  funds 
out  of  your  IT 
project  budget -and 
how  to  avoid  them. 

ByMaryBrandel 


IT  PROJECTS  ARE  NOTORIOUS  for  being 
over  budget.  In  fact,  Gopal  Kapur, 
president  of  the  Center  for  Project 
Management  in  San  Ramon,  Calif.,  es¬ 
timates  that  77%  of  projects  blow  their 
budgets,  with  an  average  cost  overrun 
of  169%.  As  for  the  remaining  23%, 
Kapur  doesn't  have  a  lot  of  faith  in 
those  project  managers.  “They  just  lie 
about  it,”  he  says. 

Perhaps  if  project  managers  knew 
where  the  biggest  money  wasters 
were,  these  statistics  would  improve. 
With  that  in  mind,  we  spoke  with  ex¬ 
perienced  project  managers  and  other 
experts  to  find  out  where  the  black 
holes  of  project  management  are  and 
how  to  avoid  them. 


1 


Scope  creep.  It  can  begin  early,  at 
the  requirements  definition  stage. 
“People  say.  "We’re  spending  the 
time  and  money  anyway,  let's  add 


this  and  this,’ "  says  Mark  Reilley, 
director  of  IT  at  the  Corporation  for 
Public  Broadcasting  in  Washington. 
“This  eiqiands  the  scope  way  beyond 
what  you  can  accomplish  or  really 
need.” 

Even  well-planned  projects  expand 
up  to  2%  on  their  own  each  month 
throughout  a  project’s  duration,  says 
Capers  Jones,  founder  and  chief  scien¬ 
tist  of  Software  Productivity  Research 
LLC,  a  consultancy  in  Marlboro,  Mass. 
One  reason  is  ‘"technical  gold-plating.” 
explains  Gregory  Bouquet,  a  consul¬ 
tant  at  Ouellette  &  Associates,  a  con¬ 
sulting  firm  in  Bedford,  Nil.  “It‘s 
where  well-intentioned  programmers 
add  features  and  functioiulity  that 
haven’t  been  specified  but  are  neat  or 
slick,"  he  says.  “It  eats  away  at  produc¬ 
tivity  and  introduces  difficulties  in 
testing.”SOIimON:Ke8ptocorefunctton- 
afity  by  defining  roquireriwnts  as  “must 
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hams,”  *sh(N*l  hcMs’  and  ‘nice  to  haves.” 
To  keep  •ie\-eiopers  in  check.  Fbuquet 
advises  rigorously  speci^ing  must- 
have  requirements  and  tracking  them 
through  the  development  process. 
"This  U  trickier  for  project  managers 
who  come  from  the  business  side  and 
don't  understand  technical  complexi¬ 
ties."  he  says.  For  these  managers, 
enlist  the  help  of  a  good,  credible  IT 
person.  RciUey  also  suggests  lowering 
user  expectations  by  releasing  some¬ 
thing  small  in  scope  that  you  can  add 
to  later.  "Usually  Version  1  is  the  proto¬ 
type.  and  when  users  see  it.  it's  good 
enough."  be  says. 

2Buildkig  a  too-sopMsticatod  GUI  too 
•arly  in  Iht  project  Most  graphical 
user  interfaces  change  dramati¬ 
cally  from  the  requirerocnis  defi¬ 
nition  st^  to  the  final  release,  says 
Inhanna  Rothman,  president  of  Roth¬ 
man  Consulting  Group  Inc.  in  Arling¬ 
ton.  Mass.  Act)  yet  developers  are  al¬ 
ways  tempted  to  perfect  the  GUI  in 
electronic  form  at  early  stages  in  the 
project.  SOUmOM:  Start  wWi  low-tach 
GUI  prototypes.  Rothman  suggests 
representing  the  user  interface  with 
either  a  paper  prototype,  using  col¬ 
ored  pens  and  yellow  sticldes.  or 
through  a  drawing  program  or  soft¬ 
ware  such  as  Photoshop.  "If  you  start 
off  with  an  electronic  repnsentation 
of  the  GUI.  it's  incredibly  expensive." 
she  says.  Don't  do  it  until  you've  frozen 
the  final  plan. 

3  Lack  ot  nogodalion  iWb.  Few  proj¬ 
ect  managers  get  formal  educa¬ 
tion  in  how  to  negotiate  the  best 
prices  for  software  or  contract  la¬ 
bor.  They  are  like  lambs  waiting  to  be 
fleeced."  Kapur  says.  SOLUTKW;  Oavalop 
haale  akfc.  At  the  Center  for  Project 
Management.  Kapur  asks  project  man¬ 
agers  to  give  him  an  offer  for  a  new 
and  a  used  car.  He  checks  to  sec  if  they 
use  the  Web  to  research  accident  his¬ 
tories  and  Kelley  Blue  Book  values, 
as  well  as  how  many  dealers  they  con¬ 
tact  and  bow  much  they  find  out  about 
financing  terms.  "I  like  to  see  the 
process  they’ve  gone  through,  and 
most  have  just  not  learned  it.”  he  says. 

Negotiation  skills  are  also  coinmuni- 
catkm  skills.  For  instance,  after  you've 
made  an  ofler.  Kapur  says,  don’t  say  a 
word.  "Instead,  [silently]  count  or  re¬ 
cite  the  names  of  people  you  know."  he 
says.  "Most  people  can't  handle  that.” 
Kapur  also  suggests  that  project  man¬ 
agers  q>end  a  week  in  the  procurement 
depanment  to  learn  bow  negotiatioos 
are  bapdled.  For  instance,  purchasing 
software  at  the  last  minute  can  be 


I  three  to  five  times  more  expensive 
I  than  buying  if  in  advance. 

4  Ntrt  understanding  project  finance, 
which  is  dWarant  from  project  ac¬ 
counting.  "People  just  don't  under¬ 
stand  what  money  means  ->  like 
if  I  add  money  to  this  project,  another 
project  can’t  be  done,"  Kapur  says. 
SOUiTKM:  A  short  course  in  financtel  con¬ 
cepts  and  tenninology.  Particularly  for 
complex  projects  (hat  last  longer  than 
six  months.  Kapur  advises  project 
managers  to  educate  themselves  and 
their  teams  on  concepts  such  as  inter¬ 
nal  rate  of  return  and  net  present 
value.  [Quicklink  46832J  "We're  not 
making  people  experts,  but  they 
should  have  enough  knowledge  to  rec¬ 
ognize  both  the  problem  and  the  solu¬ 
tion."  he  says. 

Shnpiwnanting  large,  big-bang  projscts. 
Research  shows  that  per-person 
productivity  decreases  as  the 
project  size  goes  up  says  William 
Roet^eim,  founder  of  Cost  Xpert 
Group  Inc.  in  Rancho  San  Diego.  Calif. 
Additional  communication  overhead, 
more  formal  requirements,  more  de¬ 
tailed  design  and  the  increased  num¬ 
ber  of  meetings  all  add  expense.  With 
small  projects.  Roetzheim  says,  the 
tunc  spent  implementing  the  project  is 
60%  of  the  total  versus  8%  to  10%  on 
very  large  projects.  "The  rest  of  the 
time  b  spent  on  coordinating,  commu¬ 
nicating  and  additional  testing,"  he 
says.  SOlUTION:  Broakt^  projKlB  kilo 
amalar.  mer*  managaaiila  piKss.  Studies 
have  shown  a  correlation  between  high 
failure  rates  and  Urge  projects.  Roetz- 
bcim  says,  but  smaller  projects  are  also 
more  cost-effective. 

eOvwtaittng.  We’ve  all  heard  of 
analysts  paralysis.  Reilley  suggests 
that  there’s  also  a  phenomenon 
called  testing  paralysis.  “Maybe 
it's  because  you’ve  had  a  bad  experi¬ 
ence  in  the  past  with  bugs  popping  up 
at  the  last  moment,  so  you  keep  testing 
and  testing,"  he  says.  Or  developers 
could  just  be  playing  with  fonts  to 
impress  users.  The  result:  overshot 
deadlines  and  a  waste  of  resources. 
SOLUTION:  Accapt  tt:  There  are  going  to  be 
bupi.  At  some  point,  you  have  to  say. 
"Enough  is  enough.”  Reilley  says.  Tell 
the  users  that  there  will  be  bugs  and 
that  the  team  will  work  them  out 
Shoot  for  80%  perfection,  not  100%. 


Oupicato  V  overtappino  tarioL  Partic¬ 
ularly  in  large.  dl^>ersed  compa¬ 
nies  with  DO  centnd  IT  deport¬ 
ment,  you  might  not  know  that 
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you  could  borrow  ideas  or  perhaps 
even  a  system  from  another  group  that 
already  addressed  the  same  challenge 
you’re  f^ing.  SOLUTION:  A  sawch^N 
project  library.  Kapur  suggests  building 
a  simple  word-processor-based  sys¬ 
tem  that  tracks  all  projects  undertak¬ 
en  in  the  company,  with  standard 
naming  conventions  and  keyword 
searches. 

8ftwr  estimsting.  If  costs  and  sched¬ 
ules  aren’t  well  understood  in 
the  beginning  of  the  project, 
when  problems  arise,  it's  often 
too  late  to  reallocate  IT  resources  ef¬ 
fectively,  Roetzheim  says.  The  worst- 
case  scenario  is  when  a  manager  real¬ 
izes  halfway  into  a  project  that  it's 
behind  schedule,  a^  he  throws  more 
developers  or  testers  on  the  job.  Roth¬ 
man  says.  These  latecomers  don't  un¬ 
derstand  the  problems  or  how  the 


application  works,  so  they  can’t 
come  up  to  speed  quickly.  Thai’s  com¬ 
pletely  a  waste  of  money,"  she  says. 
SOLUTXM:  Cut  your  tosses,  and  next  time. 
UM  an  estimating  tool  The  best  thing  to 
do  when  you  realize  that  you  didn’t 
estimate  resources  properly.  Rothman 
says,  is  to  figure  out  the  minimum  re¬ 
quirements  for  finishing  the  current 
project  and  immediately  begin  plan¬ 
ning  another  project  in  which  you 
can  use  your  money  more  effectively. 
Roetzheim  also  suggests  estimating 
tools  as  a  means  to  predict  costs  and 
schedules. 

gLackofeost-to-dateandsstimate- 
to  compteto  d8ta.Too  often,  team 
members  are  completely  unaware 
of  whether  they’re  cm  track  with 
the  project  budget.  At  Comdex  one 
year.  Kapur  asked  160  people  in  one  of 
his  sessions  to  tell  the  people  seated 
next  to  them  what  their  project  bud¬ 
gets  were  and  the  costs  to  date,  round¬ 
ed  to  the  nearest  thousand  dollars. 

Only  7%  were  able  to  do  it  SOLUnON: 
Oev^  atto  monitor  cost  ritahrign  ttM- 
obto.  Kapur  uses  a  process  where  the 
sponsor  and  the  project  manager  joint¬ 
ly  define  cost  thresholds.  He  also  rec¬ 
ommends  telling  the  sponsor  that  cost 
overruns  will  come  out  of  his  own 
budget  or  even  his  paycheck  as  a  wake- 
up  call  to  track  costs. 

^  A  The  prajad  shMdd  nmr  hiM  bom 
^11  aottwrizad.  Prefects  can  get  as- 
I II  Signed  that  have  little  business 
I  toto  justification  or  just  don't  pass 
the  "smell  test,"  as  Ouellette’s  Fbuquet 
puts  it.  How  do  you  avoid  setting 
something  in  motion  that's  destined  to 
be  a  true  money  pit?  SOLUTION:  Rugot 
the  poMcs;  stop  too  protocL  At  the  very 
least,  says  Reilley.  “everyone  should  be 
able  to  answer.  'TTte  purpose  of  the 
system  is  btank.’  If  you  can’t  describe  it 
in  a  few  words,  maybe  your  focus  is 
too  broad." 

It’s  the  project  manager’s  obligation 
to  validate  a  project’s  legitimacy.  Fbu- 
queC  says.  "It’s  what  distinguishes  a 
professional  project  manager  from  a 
hack,"  he  adds.  For  instance,  if  you  re¬ 
alize  halfway  through  the  project  that 
there’s  no  business-side  commitment 
to  a  training  plan,  stop  the  project  ad¬ 
vises  Bob  Benson,  a  senior  consultant 
at  Cutter  Consortium  In  Arlington, 

Mass.  Adds  Benson,  “Project  managers 
have  to  be  willing  to  call  it  bad  news 
when  it’s  bad.“  O  48381 


Brondel  is  a  Computerworid  contribuf- 
iqg  writer  in  Grand  Rapids.  Mich.  Con¬ 
tact  her  at  naryJ>randel@cotncastJieL 


custorner  celationships:  yet  another  reason  to  outsource  with  spi 
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It  s  easy  to  see  that  SPI  is  aligned  with  your  business  and  objectives.  You  can't  help  but  notice  that  our  project 
managers  are  onsite,  PMl  certified,  and  totally  attuned  to  your  needs.  We're  always  making  a  spectacle  of 
our  progress  via  spi  Project,™  our  unique  project  management  technology.  As  for  quality?  It's  obvious.  Our 
global  delivery  model  includes  certifications  for  CMMI  Level  5  (in  progress).  Six  Sigma  and  ISO  9001:2000. 
To  learn  more,  call  toll-free  866-316-5774,  write  sales@spiPortal.com  and  visit  www.spiPortal.com. 
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Software  Paraijigms  International 

The  Offshore  Portal  for  Your  Business"’ 


APPLICATIONS  OEVELWIlEXI/MAIXTEIIAIICE/BAXiGEMEXI  I  INFRASTNUCTUPE  MANA6EVENT  I  BUSINESS  PROCESS  OUTSOURCINC/BANAGEKENT  I  SYSTEMS  INTEGRATION  I  IT  BUSINESS  CONSULTING 
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Oracle  User  Group 

■  S«L2tNmMi 
Sponnr  Mm  VbiIi  Onde  UMn 
Oramlne. 

New  %k  Metro  Area  Oracle  User 
GnM>  Oay  ndudes  database  ad- 
ininistrator.  developar.  application 
and  woftehop  trades.  Topics  in- 
dude  performance  opOmiZBtion. 
CRM.  setf-servK^  modties.  Web 
applications  and  upgradino.  Mon 
WeniMflew.  tmw.nyouo.org 


Emerging 

Technologies 

■  SapL2»^ 

SpOOMT  r«cMQ0rAMiM 

The  2nd  Annual  Bnerging  Tech* 
nolooies  Conference  at  MfT  show¬ 
cases  technologies  that  are  poised 
to  mate  a  drarn^  BTipact  on  the 
Mdd.  Topics  inefude  the  pewline 
probteni  nanotechnology  and  ener¬ 
gy.  next-oenerahon  search,  synthet¬ 
ic  biology  and  the  tech  |ob  di^. 
More  WnrniiQit  m¥w.tretc.com 


Network  Security 

■  SipL20-OeL4. 

SponeorSANSinMIluto 

Network  Security  Conference  2004 
oHets  instructional  trainino  and  se¬ 
curity  certificaticins.  Tracte  include 
bool  carnps;  Intrusion  detection: 
hackertechraquesisecuringWin- 
dcMs.  Unix  and  UnuK  auditing  net¬ 
works,  penmeters  and  systems; 
system  forensics:  mf  secure  com- 
nunications.  MmMDRnrefan: 
www.sans.org/ns2004 


Data  Center  World 

■  0cL9«.Alteita 
SpennrAPCOM 

Data  Center  World  oDers  tutorials 
and  educational  sessnns  on  data 
center  nanagemeriL  facities.  best 
pracbcesandctmengencyplan' 
rang.  Topics  iKkide  secunly:  man¬ 
aged  storage  services;  threats, 
viruses  and  worms;  utity  comput- 
ng  and  dtra^iigh-density  racks 
and  blade  servers.  Mwitetenw 
Ik  www.afcofn.cont 


BARBARA  GOMOLSKI 


Summer 

Reading 


I  STRUGGLED  TO  FIND  a  meaningful  topic  this 
month,  which  is  unusual  for  me.  Then  it  oc¬ 
curred  to  me;  It’s  summer,  and  I’ve  been  on  vaca¬ 
tion.  That  explains  why  my  mind  is  less  focused 
on  IT  management  topics  and  more  focused  on 
summer  reading.  Since  we’re  in  the  summer  doldrums, 

I  thought  I’d  have  a  little  fun.  (I  promise  to  return  to 
the  serious  business  of  IT  management  next  month.) 
I’ve  created  a  summer  reading  list  that  only  an  IT  per¬ 
son  could  appreciate.  Unfortunately,  this  is  a  book  list 
we  aren’t  likely  to  see  anytime  soon. 


Rkh  rr  Ouy.  hor  IT  duy.  For¬ 
get  what  your  father  told 
you.  Those  of  us  who 
choose  careers  in  IT  rarely 
get  rich  doing  it  If  it’s 
wealth  you’re  looking  for. 
check  out  another  title: 

Bringing  Down  the  House: 

The  Inside  Story  of  Six  MIT 
Students  Who  Took  Vegas 
Jbr  Millions,  by  Ben  Mez- 
rich  (Free  Press,  2003). 

The  Da  Wnd  Codir.  A  Har¬ 
vard  professor  and  amateur 
programmer  snunbles  on 
something  even  more  elu¬ 
sive  than  the  Holy  Cjrail  when  he  man¬ 
ages  to  effectively  block  spam  from  his 
Outlook  in-box  while  on  vacation  in 
Paris.  Follow  the  twists  and  turns  as 
our  indomitable  hero  encounters  un¬ 
expected  and  deadly  resistance  from 
a  cadre  of  computer  industry  execu¬ 
tives.  These  IT  industry  titans,  it  turns 
out.  will  go  to  any  ieng^  to  keep  their 
secrets  intact. 

Sm  lUto  ol  HWdy  anzy  ITSMif 

PMph.  While  the  last  person  you  prob¬ 
ably  want  to  chink  about  on  your  sum¬ 
mer  vacation  is  an  IT  salesperson,  thu 
book  is  worth  your  time.  The  bait-and- 
switefa.  the  byperex^geration.  the 


high-pressure  sate  and,  of 
course,  the  blatant  lie  are 
all  covered  in  this  must- 
read.  Learn  bow  to  recog¬ 
nize  some  of  the  worst  be¬ 
havior  you’ve  ever  encoun¬ 
tered  from  some  of  the 
best-looking  and  best- 
dressed  people  you  will 
ever  meet. 

Tht  One-Minute  Prograni- 
mer  Analysi  Sure,  it  would 
be  great  to  spend  hours 
listening  to  your  business 
management’s  requests, 
needs  and  ideas.  But 
who  has  that  kind  of  time?  This 
classic  handbook  will  show  you  how 
you  can  become  more  popular  with 
your  co-workers  while  significantly 
reducing  the  amount  of  time  you 
spend  actually  listening  to  them. 
Guaranteed  to  make  you  more  pro¬ 
ductive  at  your  fob.  so  you  can  move 
on  to  what’s  really  important:  surfing 
the  Web  at  work. 

WhoMoMdMyCteUds?  How  to  stay 
flexible  and  happy  in  a  world  where 
your  cubicle  —  and  your  job  —  are 
likely  to  wind  up  overseas.  This  is  part 
of  a  series  that  includes  the  wildly  suc¬ 
cessful  Who  Moved  My  Call  Oncer? 


Huds  OcMm:  Hmr  to  Avoid  ttw  ArrhM  of 
New  Managomont  While  I  would  be  the 
last  person  to  “dis"  the  heads-up  ap¬ 
proach  to  career  management,  there  is 
a  real  ait  to  keeping  one's  bead  down. 
This  quick-moving  narrative  is  an  IT 
person's  guide  to  detaching,  disengag¬ 
ing  and  simply  avoiding  the  interac¬ 
tion  involved  in  management  up¬ 
heaval  The  book’s  central  theme  is 
spot  on:  Why  look  up?  In  six  months, 
there  will  be  a  new  leader  and  a  new 
strategy  anyway. 

R  Is  for  Rnfg.  Our  favorite  sleuth  is  at 
it  again.  This  time,  she’s  chasing  after 
the  genius  who  thought  up  the  latest 
IT  management  shake-up.  This  well- 
meaning  strategist  has  mysteriously 
disappeared,  along  with  a  whole 
bunch  of  the  company’s  money.  The 
problem  is  that  nobody  noticed  the 
disappearance  or  seems  to  care.  Can  a 
woman  who  drives  an  old  car.  eats  at 
McDonald’s  and  uses  common  sense 
outwit  a  savvy  management  theorist? 
You  betcha. 

The  Cara  and  Fwiing  of  Usore.  Your  re¬ 
lationship  with  users  is  in  bad  shape, 
and  guess  what  —  it’s  pretty  much  all 
your  fault.  This  book  will  make  you 
feel  guilty,  undeserving  and  incompe¬ 
tent  However,  I  am  confident  that 
by  Chapter  5,  you  will  have  your  prior¬ 
ities  in  order  and  everybody  will  like 
you  again 

The  South  Baach  ftivainmar’s  Olit  You 

may  not  lose  weight  on  this  diet  rich 
in  pizza,  late-night  snacks  and  fuU- 
throttie  soft  drinks,  but  your  produc¬ 
tivity  is  guaranteed  to  soar  (at  least  for 
an  hour  a  day).  Includes  a  recipe  book 
of  microwave  favorites  and  a  sticker 
book  so  you  can  label  your  goodies  in 
the  company  fridge.  O  48886 
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OPINION 

Blurry  Wfeb  Services 

XML  is  terrific.  It’s  sliced  bread  on 
stilts,  says  columnist  Marie  Hall.  So, 
why  is  it  so  slow?  And  why  can’t  it 
deal  with  opaque  data?  RAGE  41 


Message  Received? 

Companies  that  require  a  high 
degree  of  reliability  from  Web 
services  are  learning  to  customize 
their  own  coding  and  build  in 
layers  of  redundancy.  RAtf  36 


Trouble  in  Transit 

The  same  design  that  lets  users  easily 
exchange  daU  with  Web  services  also 
opens  holes  for  hackers.  Companies 
are  finding  that  safeguarding  that  data 
exchange  is  complicated.  PAGE  37 


EDITOR'S  NOTE 


Last  year,  we  boldly  predicted  a  Web 
services  tsunami  [QuickLink  38153], 
with  XML  and  SOAP  changing  a  wide 
swath  of  IT  development  OK,  so  it’s 
really  more  like  a  rushing  river  rhan  a  tidal 
wave  But  the  river  is  still  swelling.  A  recent 
IDC  survey  of  197  IT  managers  shows  that 
about  a  third  of  the  respondents  have  com¬ 
pleted  one  or  more  Web  services  projects, 
and  more  than  a  third  are  either  evaluating 
the  technology  or  doing  a  pilot  project 
Much  of  the  activity  involves  employee  por¬ 
tals,  e-commerce,  back-office  applications 
and  even  mission-critical  worit  IDC  says. 
But  a  tsunami  it’s  not.  Why?  As  usual,  the 
technology  is  more  difficult  to  implement 
than  the  vendors  would  have  you  believe. 
Pilot  projects  aren't  so  bad,  but  even  well- 
funded  adopters  in  the  financial  services  in- 
dustry  have  found  it 
tricky  to  come  up  with 
a  service-oriented  ar- 
chhecture  (SOA)  for 
the  whole  company. 

So  we're  taking  a 
more  sober  look  this 
year.  Our  first  story 
about  the  challei^es 
of  SOA  granularity, 
repositories  and  gov- 
ernance  (page  34). 

IDC  says  the  top  barriers  to  Web  services 
adoption  are  a  simple  lack  of  money  and  a 
not-so-simple  lack  of  security.  We  can’t  help 
you  with  the  bud^t,  but  we  do  have  an  up¬ 
date  on  the  security  issues  (page  37).  We 
also  cover  the  topic  of  message  reliability, 
which  doesn’t  rank  as  a  burning  issue  yet, 
but  IDC  says  it  will  become  one  as  the  vol¬ 
ume,  scale  and  complexity  of  projects  grow 
(page  36).  048317 


Services 


Developing  a  service-oriented 
architecture  is  full  of  challenges,  such 
as  governance  security  and  reliability. 


Mitch  Betts  is  Conqniterworld ’s  features 
editor.  Contact  him  at  mitch^betts@ 
computerworhLcom. 
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OTuld  have  hundreds  ofWeb 
services.  Here’s  how  to  make  sure 
you  can  organize,  catalog,  find  and 
reuse  them.  By  Carol  Sliwa 


Danske  bank  a/s’s  trail- 
blazing  woric  to  build  a 
service-oriented  archi¬ 
tecture  had  gotten  so 
advanced  that  it  ex¬ 
posed  more  than  1.000 
services  from  its  mainframes  and 
application  servers.  But  the  Copen¬ 
hagen-based  bank  found  itself  in  a 
Mistrating  predicament 
“We  couldn’t  find  them."  says 
Claus  Torp,  the  company’s  chief 
architect. 

The  problem  threatened  to  wipe 
out  one  of  the  main  benefits  of  ser¬ 
vice-oriented  architectures  (SOA) 
—  reuse.  So  Danske  set  about  revis¬ 
ing  its  concept  of  a  service,  refining 
its  repository  and  establishing  a 
governance  process  to  enforce  best 
practices. 

The  result  was  a  collection  of  140 
services  that  is  ^  more  manageable. 

An  in-depth  look  at  several  SOA 
pioneers  shows  that  the  steps  Danske 
Bank  took  are  key  to  a  company's 
ability  to  reuse  code,  build  applica¬ 
tions  with  greater  speed  and  effi¬ 
ciency  —  and  ultimately  save  money. 

But  it's  not  easy,  and  the  imple¬ 
mentation  sequence  is  important. 
Sun  Microsystems  Inc.,  for  instance, 
built  a  registry  and  set  up  an  archi¬ 
tecture  review  board.  But  the  IT  de¬ 
partment  is  just  now  circling  back  to 
do  a  closer  examination  of  Sun’s  80 
to  100  Web  services. 


Karen  Casella,  an  IT  director  at 
Sun,  recommends  that  a  company 
starting  down  the  SOA  path  first 
look  at  its  business  requirements 
and  identify  which  Web  services  are 
needed.  “We  learned  the  hard  way,” 
she  says.  “We  put  some  of  the  infra¬ 
structure  in  place  before  we  com¬ 
pletely  understood  what  we  needed 
to  have  in  play.” 

The  Services 

Companies  need  to  figure  out 
which  business  processes  can  be 
turned  into  services,  carefully  de¬ 
sign  and  define  the  services  and 
distinguish  them  from  components. 

When  Danske  Bank  began  build¬ 
ing  standard  interfaces  to  expose  its 
legacy  programs,  it  defined  a  ser¬ 
vice  as  “one  function."  Now  it  de¬ 
scribes  a  service  at  a  higher  level,  as 
a  logical  grouping  of  fimctionality 
and  data,  such  as  "customer”  or 
“account.” 

The  company's  140  services  are 
each  composed  of  about  10  “opera¬ 
tions,”  or  components,  that  are  es¬ 
sentially  more  granular  services. 
There  are  currently  more  than  1365 
operations.  Danske  expects  to  even¬ 
tually  have  250  services. 

How  well  a  company  can  break 
down  its  business  processes  and 
application  functions  into  services 
will  determine  the  level  of  flexibili¬ 
ty  and  reuse  it  gets,  Torp  says. 


www.computerworld  com 


HIOWLEDGE  CENTER  WB  SHMCFS 


Danskc  uses  raodeUng  tools  to  de¬ 
velop  logical  maps  of  the  functional 
building  blocks  and  business  process¬ 
es.  Then  it  matches  the  business 
processes  to  the  services  to  maki>  sure 
it  has  solved  the  right  problem. 

"A  lot  of  doing  service-oriemed  de¬ 
velopment  is  making  sure  you  can  run 
different  business  processes  on  top  of 
the  same  service  building  blocks,”  says 
Torp.  “If  you  want  to  be  effective,  you 
have  to  make  sure  there  is  only  one 
place  to  do  the  same  function.” 

Cendant  Corp.'s  Travel  Distribution 
Services  division  spends  a  consider¬ 
able  amount  of  time  determining  the 
optimal  granularity  of  its  services  and 
service  components,  according  to 
Chief  Technology  Officer  Robert 
Wiseman.  A  service  is  something  that 
can  be  called  externally  through  Cen- 
dant's  business  domain  model,  dubbed 
Rosetta  Stone.  A  service  component, 
such  as  togging;  is  called  only  internally. 

So  a  “get  hotel”  service  might  call 
several  low-level  services,  such  as  a 
latitude/longimde  “destination  fmder” 
that  the  company  makes  available  to 
customers.  But  Cendant’s  curreiicy 
converter  is  a  component,  since  it  cur¬ 
rently  isn’t  exposed  to  customers. 

Certdant  expects  an  ongoing  protect 
to  extract  components  from  monolith¬ 
ic  applications  to  have  a  big  payoffi 
Wiseman  says.  For  instance,  passenger 
name  record  (PNR)  is  a  basic  unit  of 
data  used  by  booking  engines  and 
global  dbtribution  systems  such  as 
Cendant’s  Galileo.  By  making  “Super 
PNR"  available  as  a  service,  the  IT  de¬ 
partment  won’t  have  to  maintain  six  or 
seven  instances  of  PNR  in  different 
applicatiotks. 

The  Hartford  Financial  Services 
Group  Inc.  built  pockets  of  Web  and 
other  services  over  three  years  ago.  but 
its  enterprise-scale  SOA  work  didn’t 
start  until  18  months  ago. 

A  good  candidate  for  an  enterprise 
service  is  one  that  two  or  more  appli¬ 
cations  need,  says  Beniamin  Moreland, 
manager  of  af^Hcation  infrastructure 
delivery  at  the  Connecticut-based  in¬ 
surance  company.  “But  not  everything 
should  be  a  service,"  Moreland  warns, 
noting  the  potential  performance  hit 
from  exposing  services. 

EstaUshing  the  Registry 

Vendors  may  have  expected  Internet- 
based  registries  based  on  the  Universal 
Description.  Discovery  and  Integration 
(UDDI)  standard  to  spread  like  wild¬ 
fire.  But  early  SOA  adopters  care  more 
about  internal  registries. 

Tluit  doesn't  mean  UDDI  is  dead, 
though.  UDDI  was  so  important  to 


Four  Challenges 


IUNOCRSTANDMO  which  process¬ 
es  can  be  turned  into  services. 

ZBUNJMNQatoundtyoiappka- 
tion  processes  TNswW  come  ir^ 
creasinply  (rom  buaness  applications 
that  are  (fesigned  asa  set  of  services 

aESTABUSHWO  thegranulanly 
of  services  at  the  right  level  to 
ensure  that  services  are  efiectivefy 
reusable.  Too  much  granulanty  makes 


services  too  specific  to  be  used,  too  little 
gmianiy  makes  them  too  general  to 
be  used 

4  fostering  a  reuse  cuifuie  s 
essential  to  consBtent.  repeatable 
success  in  captunng  wid  using  business 
processes  If  enaUes  an  orgwiiztton  lo 
(Mver  processes  as  a  wel-dehned  set  of 
services  and  to  make  those  services 
easily  avadable  to  developeis. 


The  Hartford  that  it  chose  its  registry 
based  on  the  product’s  conformance 
to  UDDI  5.0.  (Officials  declined  to 
name  the  product  due  to  a  company 
policy  against  endorsing  vendors.) 
The  registry  includes  metadata  de¬ 
scribing  the  services  and  the  means 
to  connect  to  services  via  particular 
transports. 

But  the  UDDI  registry  isn't  meant 
for  everything.  Departs^ts  continue 
to  maintain  local  registries  for  some 
services  they  create,  because  The 
Hartford  is  selective  about  what  goes 
into  its  enterprise  registry. 

“We  don't  want  to  create  a  funk 
drawer  of  services.”  says  Moreland. 
"What  we  feel  should  be  in  the  enter¬ 
prise  UDDI  are  services  that  will  give 
us  leverage  and  flexibility  across  the 
enterprise." 

I  Providence  Health  System  uses  the 
I  Infravio  Inc,  management  framework 
for  its  service  library,  and  much  to  the 
surprise  of  company  skeptics,  its  devel¬ 
opers  are  actually  reusing  services, 
now  that  they  can  find  the  Web  Ser¬ 
vices  Description  Language  (WSDL) 
files  defining  the  interfaces. 

“We  commonly  refer  to  this  as 
’Google-uing’  Web  services."  says 
Michael  Reagin,  Providence  Heath's 
Portland,  Ore.-hased  director  of  re¬ 
search  and  development.  "They  can 
reuse  services  with  minor  modifica¬ 
tions  in  a  couple  of  hours.  People  arc 
more  productive.  Everyone's  happy." 

Proridence  Health's  greater  con¬ 
cern  these  days  is  managing  its  grow¬ 
ing  number  of  Web  services  and  SOA 
framework  from  an  operational  stand¬ 
point.  *rbe  company  has  dose  to  50 
composite  services,  each  one  com¬ 
prising  one  to  20  more  granular  sub¬ 
services. 

Early  adopters  that  couldn’t  find  a 
registry  to  suit  their  needs  built  their 


own.  Danske  Bank  maintain*  separate 
repositories  for  components  from  Hs 
mainframes  and  |2EE-  and  Microsoft 
-Net-based  application  servers.  The 
repositories  replicate  between  each 
ocher,  forming  one  logical  repository 
that  essentially  is  a  superset  of  a  UDDI 
registry,  adding  operational  parame¬ 
ters  for  functions  such  as  load  balanc¬ 
ing.  says  CIO  Peter  Schlcidt.  A  service 
integrator  agent  dynamically  selects 
the  most  efficient  way  to  call  a  service, 
using  SOAP  over  HTTP  or  more  effi- 
dent,  proprietary  protocols. 

Danske  also  h^  a  structured  library 
for  its  services  and  their  correspond¬ 
ing  interfrices.  The  library  al*n  bouses 
information  about  the  relationships 
between  its  functional  and  process 
models.  There's  even  a  librarian  that 
developers  can  call  for  help.  But  the 
library  didn't  launch  until  a  year  ago  — - 
“a  lot  later  than  we  should  have  been 
doing  that,"  Schleidt  says. 

Governance 

When  push  comes  to  shove,  a  gover¬ 
nance  body  can  help  a  company  stick 
to  its  SOA  prindples.  Danske  Bank  has 
steerii^  committees  in  18  different 
business  areas  for  product,  process 
and  IT  dcvelopmenL  But  when  busi¬ 
ness  managers  are  anxious  to  beat  the 
competition,  they’re  sometimes  tempt¬ 
ed  to  forgo  the  generic  SOA  approach 
if  it  takes  longer  to  complete. 

"Ybu  need  a  governance  process 
where  you  can  handle  situations  like 
that."  says  Schleidt.  "TVe  always  have 
the  time  to  change  things  afterwards, 
so  why  not  try  to  turn  it  around  and  do 
it  rig^t  the  firat  time?" 

The  quick-hit  approach  can  have 
long-term  consequences.  Danske 
now  has  two  personalization  engines, 
four  interactive  customer  communi¬ 
cation  services  and  four  payment¬ 


handling  applications.  Torp  says. 

T^o  years  ago.  The  Hartford  formed 
a  central  group  called  the  Property  and 
Casualty  Architects  CoUeettve  to  ex¬ 
amine  bow  it  would  adopt  a  SOA 
across  the  enterprise.  The  group  put 
together  a  reference  architecture  out¬ 
lining  recommended  approaches,  prac¬ 
tices  and  products  m  be  used  in  a  par¬ 
ticular  context 

“It’s  about  shared  architectural 
thought  and  reuse  of  thought  process¬ 
es  That's  where  the  hard  work  and  val¬ 
ue  is."  says  fames  McGovern,  an  enter¬ 
prise  architect  at  The  Hartford. 

A  separate  application  infrastnicture 
delivefy  group  is  responsible  for  se¬ 
lecting  and  implementing  the  manage¬ 
ment  platform,  business  process  en¬ 
gine  and  UDDI  registry,  as  well  as 
making  sure  the  WSDL  files  used  to 
describe  service  interfaces  conform  to 
standards.  An  architect  not  involved 
with  a  particular  profect  reviews  the 
project's  application  design  to 
sure  services  aren't  duplicated. 

At  Cendant,  project  managers  have 
that  responsibility.  The  service  name 
and  input  and  output  frelds  are  acces¬ 
sible  through  an  XML-based  layer  in 
its  Rosetta  Stone  business  domain 
model.  A  single  group  is  responsible 
for  updating  the  business  domain 
model 

"This  is  bow  wc  control  reuse.” 
Wiseman  says. 

If  a  business  domain  owner  spots  a 
service  already  in  the  registry,  the  ser¬ 
vice  b  flagged  as  a  candidate  for  reuse. 

A  SOA  governance  board,  largely  con¬ 
sisting  ofIT  managers,  then  takes  over. 
Developers  need  not  apply. 

“The  programiDcr  b  the  last  person 
that  should  make  the  decision.*  says 
Wiseman.  They  will  always  want  ro 
write  something  new.”  O  46250 


We  don't 
want  to  create 
a  junk  drawer  of 
services.  What  we 
feel  should  be  in 
the  enterprise  UDDI 
are  services  that 
will  give  us  leverage 
and  flexibility  across 
the  enterprise. 
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Message  Received? 


Q)mp;inies  that  require  highK 
reliable  Web  services  are  builiing 
in  their  own  guarantees. 

B\  iV1ar\’  Brandel 


WHEN  PLACfNG  AN  ORDER  OVCT  the  Web. 

it's  not  unusual  for  the  site  (o  lock  up 
during  the  transaction  —  it's  all  pan  of 
the  Web  experience,  and  customers 
know  to  call  a  customer  service  rep  to 
see  if  the  order  went  through.  But  take  the  human 
&Ktor  out  of  the  equation,  as  in  a  Web  services  trans- 
actioii.  Who's  100^  sure  that  their  messages  got 
through.  undupUcated  and  in  the  right  order?  After 
all,  you’re  relying  on  two  applications  to  communi¬ 
cate  with  each  other  to  complete  the  order,  using 
standards  such  as  XML,  HTTP  and  SOAP. 

“HTTP  is  a  nice,  lightweight  mechanism  to  send 
HTML  or  almost  any  type  of  format.  The  problem  is, 
there's  no  guarantee  that  the  message  will  get  delh  - 


jungle  with  a  machete,"  says  Ron  Schmeinter.  an  ana¬ 
lyst  at  ZapThink  LLC.  Thc-se  users  build  reliability 
into  the  business  logic  of  the  application  or  employ  a 
mature  messaging  platform  such  as  IBM's  MQSeries. 

Once  Isn’t  Enough 

SbopNBC  is  one  organization  that  has  given  Web 
services  reliability  a  lot  of  thoughL  according  to 
Steve  Craig,  chief  technology  officer  and  vice  presi¬ 
dent  of  IT  development  at  the  shopping  network, 
which  is  broadcast  into  56  million  homes. 

ShopNBC  relies  on  Web  services  to  fulfill  cus¬ 
tomer  orders  over  the  Web  and  to  receive  real-time 
pricing  updates  from  its  participating  merchants. 
Because  it’s  such  a  mission-critical  endeavor.  Craig 
and  his  group  structured  a  three-layer  system  that 
supports  three  types  of  Web  services  messaging:  real 
lime,  near  real  time  and  periodic  Each  layer  rein¬ 
forces  the  others  to  create  message  redundancy  in 
case  the  first  message  doesn't  get  through. 

“If  a  real-time  transaction  fired  and  was  missed, 
there'd  be  another  fob  downstream  to  cover  that 
need,"  Craig  explains.  Say.  for  example,  a  merchant 
system  sends  a  message  to  the  Web  services  system 
at  ShopNBC  to  take  a  10%  markdown  on  a  product 
that’s  airing  on  TV.  If  the  real-time  message  wasn't  re¬ 
ceived.  another  message  sent  to  another  server  would 
eventually  lower  the  price  —  maybe  not  while  the 
product  was  airing,  but  on  the  next  database  sync. 

Another  example  is  when  customers  order  prod¬ 
ucts  over  the  Web.  The  Web  server  attempts  to  com¬ 
mit  the  order  in  real  time  with  the  back-end  server, 
but  if  the  server  doesn’t  respond,  the  order  is  sent  to 
a  separate  server  to  be  synced  up  later. 

Bum.  Don't  Add 

As  ShopNBC  demonstrates,  reliability  must  be  con¬ 
sidered  from  the  very  beginning  "You  never  add  reli¬ 
ability  to  .something  after  the  fact  —  it’s  not  some¬ 
thing  you  can  just  slap  on  top  of  the  application." 
says  Don  Reeves,  vice  president  of  cngineeriiig  at 


cred,"  says  Anne  Thomas  Manes,  an  analyst  at  Bunon  Black  Pearl  Inc.  in  San  FrancLsca 


Group  in  Midvale.  Utah.  "It  offers  92%  to  96%  relia¬ 
bility.  but  if  you  need  99.9%  reliability,  or  at  the  very 
least  notificatioo  if  a  message  doesn't  get  there. 
HTTP  won't  do  that  for  you." 

Although  analysts  don't  think  reliability  a  the  only 
problem  impeding  Web  services  adoption,  it  certain¬ 
ly  casts  a  pall  of  uncertainty  over  the  idea  of  building 
anything  mission-critical  on  such  a  platform. 

Some  users,  such  as  Peter  Osbourne,  director  of 
Internet  research  and  development  at  Dollar  Thrifty 
Automotive  Croup  Inc.  in  TiUsa.  Okla.,  say  they  do 
just  fine  with  TCP/IP  and  HTTP.  "Wc  use  Web  ser¬ 
vices  extensively  (for  Web-based  car  reservations! 
but  have  not  encountered  message  reliability  prob¬ 
lems."  he  says.  Dollar  has  mechanisms  to  detect  mes¬ 
sage  bottlenecks,  but  Osbourne  says  tbe  company 
hasn't  lost  any  messages. 

At  companies  that  need  a  higher  degree  of  reliabil¬ 
ity.  it's  a  matter  of  “hacking  their  way  through  the 


Black  Pearl’s  B4  platform  uses  Web  services  to  col¬ 
lect  data  from  disparate  sources  to  provide  real-time 
customer  profiles  and  data  analysis.  For  instance,  it 
sends  financial  services  agents  daily  Uses  of  high- 
priority  prospects.  3$  well  as  real-time  alerts  on  prod¬ 
ucts  that  might  interest  particular  customers.  The  sys¬ 
tem  needs  to  collect  data  from  a  variety  of  sources, 
such  as  legacy  customer  daubases.  marketing  cam¬ 
paign  systems  and  live  data  feeds  on  stock  prices. 

Reeves  estimates  that  half  the  code  that  makes  up 
B4  is  aimed  at  functionality,  and  half  b  intended  for 
error  checking  “Whenever  you  connect  to  a  data 
source,  you  have  to  assume  it  wiU  fail  and  have  a 
planned  response."  he  says. 

Another  approach  is  to  employ  a  reliable  transport 
protocol,  such  as  a  message  queuing  (MQ>  service, 
rather  than  using  HTTP  to  transmit  Simple  Object 
Access  Protocol  (SOAP)  messages.  The  dominant 
Mtiscrvice  is  IBM's  WebSphere  M(i,  which  acts  as  a 


9  mediator  to  guarantee  delivery  by  storing 
messages  locally  until  it  receives  delivery 
acknowledgment. 

“You  can  send  it  over  SMTP  or  FTP  or  an 
B  M(i system.  Web  services  is  completely  inde¬ 
pendent  of  the  underlying  protocol."  Manes 
says.  The  trouble  is,  MQ. systems  arc  proprietary  — 
IBM’s  WebSphere  MQ  doesn’t  talk  with.  say.  Sonic 
Software  Corp.'s  M(^  system.  This  is  less  of  a  prob¬ 
lem  if  you're  just  using  Web  services  internally,  but 
even  then,  it's  an  expensive  proposition.  According 
to  Manes.  MQ  deployments  can  reach  seven  figures. 

Using  Your  Header 

To  get  beyond  dependence  on  a  proprietar>'  protocol, 
companies  will  have  to  code  specifications  into  their 
SOAP  headers,  Schmeltzer  says  —  such  as  having  a 
system  try  to  resend  a  message  if  an  acknowledg¬ 
ment  of  receipt  isn't  received  within  300  milli¬ 
seconds. 

Today.  Schmeltzer  points  out.  individual  compa- 
nie.s  need  to  do  this  sort  of  coding  themselves,  which 
can  be  extremely  difficult.  However,  this  coding  will 
eventually  be  built  into  standards  such  as  WS-Relia- 
bility  and  WS-ReliabIcMessaging  (see  box  below). 

In  the  midst  of  this  industry  confusion,  the  lack  of 
a  reliable  messaging  specification  is  pretty  far  down 
the  list  of  what's  stopping  people  from  implementing 
Web  services,  says  Dwight  Davis,  vice  president  of 
Summit  Strategies  Inc.  in  Kirkland,  Wash.  "There's  a 
lot  of  baggage  that  comes  Into  play  on  the  list  of  fac¬ 
tors."  he  says,  including  the  relative  newness  of  the 
technolt^y  and  the  need  to  focus  on  day-to-day  crises 
rather  than  long-term  architectural  change,  just  the 
same,  before  mission-critical  Web  services  applica¬ 
tions  enter  the  mainstream,  reliable  messaging  will 
have  to  become  less  complex  and  costly.  O  48176 

Brondel  is  a  freelance  writer  in  Grand  Rapids,  Mich. 
Contact  her  at  maryd)mndel<§>coincast.net. 

Rival  Standards  " 

Tm  nbbto  mooglng  vKMcallofB  in 
mriling  IMr  way  Mo  Ua  Musty: 

Wri)  Senfcn  IMitOly  WS.|taUilHy): 

ASOAPtased  protocol  lor  (»changno  SOAP  mes¬ 
sages  wuh  guaaiUM  (Mmy.  no  duplicates  and 
guatanliM  message  oiderino  Spotuiors;  Sun  Mkio- 
syslems  Inc.,  Fuytsu  Ud,  HUacN  Ud..  Oracle  Corp. 

NEC  Coro,  and  Sonic  Software  Core. 

WS-ReftaNsMensging:  A  ftanspon-lndeoen- 
dent  prolDcol  mat  allows  messages  to  be  delfvered 
ratably  between  (fstiftued  aodtcalions  in  Ifte  event 
ol  software  cornoonenl.  system  or  networ*  lailures. 

Spomora;  BM.  Microsoft  Corp.  BEA  Systems  Inc 
and  rtco  Softmre  Inc. 

ft's  si*  oncortam  *nvji  scocltcabon  wIB  become 
me  ndifitry  standard,  aftbough  Anne  Ibonias  Manes, 
an  analyst  at  Btvion  Groep.  6  advlsiig  ctarUs  lo  bel 
on  WS-MablaMessaglng  because  il'sbacked  by 
mere  indusliynea«ywalglits.Useis  can  also  begvi 
usmoWS-RoliaUeMessaglngasaialcninimSan 
FranosoHissed  Cape  Clear  Software  Inc.  as  wal 
as  inUX-l)asadSystanalUd.'sSyslanel  Server. 
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Trouble 

InTtansit 

Web  services  put  mote  of  yxiur 
company's  data  into  the  ether, 
offering  more  chances  for  some¬ 
one  to  snatch  it.  Bv  Bob  Violino 


A  TRANSPORT  COMPANY'S  TRUCKS  are  sched¬ 
uled  for  bcjgus  pickups.  A  financial  services 
firm’s  investment  data  is  given  away  for 
free.  A  health  insurance  provider’s  private 
patient  data  is  exposed.  These  are  the  disas¬ 
trous  situations  that  can  occur  when  Web  services 
data  is  nefariously  snatched  midstream. 

The  shareable  design  of  Web  services,  which  gives 
companies  the  benefit  of  easily  exchanging  data  and 
applications  with  business  panners,  also  makes  them 
vulnerable  to  security  breaches.  Hackers  have  found 
ways  to  tweak  the  XML  code  used  to  tag  the  data  so 
activity  that’s  actually  an  attack  appears  to  be  valid. 

“XML  standards  are  being  constructed  in  bits  and 
pieces,  and  that’s  the  kind  of  event  that  leads  to  boles 
that  someone  didn’t  think  about,"  says  Randy  Hefiher. 
an  analyst  at  Fonester  Research  Inc. 

According  to  experts,  hackers  have  three  method.^ 
for  breaching  Web  services  and  XML  security:  iden¬ 
tity-based  attacks,  in  which  a  hacker  poses  as  an 
authorized  user  to  gain  access  to  Web  services:  mali¬ 
cious-content  attacks,  in  which  an  intruder  forces  a 
Web  server  to  perform  an  unauthorized  activity;  and 
operational  attacks,  in  which  a  hacker  manipulates 
an  XML  message  to  tie  up  server  resources.  But  ai- 
thou^  the  methods  are  known,  safeguarding  Web 
services  is  difilcult  because  multiple  elements  must 
be  locked  down  —  the  servers,  the  messages  and  the 


ij  applications.  Companies  must  first  secure  their  Web 

I  servers  and  then  decide  which  business  partners  and 

||  employees  will  have  access  to  them,  how  the>  ’ll  coo- 

I  neci  to  them  and  which  authentication  method  to  use 

NoSmaHTask 

Defense  manufacturer  Northrop  Grumman  Corp. 
experienced  that  diflicult>-  firsthand  Web  services 
are  a  major  component  of  its  Myngc.com  portal, 
which  was  expected  to  take  about  six  months  to 

complete.  But  because  of  securit>'  require-  - 

ments  such  as  user  authentication,  the  proj¬ 
ect  took  three  times  as  long,  says  Thomas 
Shelman,  vice  president  and  CIO. 

The  portal  gives  Los  Angeles-based 
Northrop  Grumman  a  way  to  efficiently 
share  orderii^  and  billing  data  with  cus¬ 
tomers  and  partners,  he  says.  But  while 
Myngc.com  provides  greater  data  access  to 
more  people,  it  also  creates  vulnerabilities 
because  many  users  outside  the  organiza-  I 
lion  have  access  to  business  applications.  I 
■■[The  portal)  was  a  significantly  larger 
task  than  we  thought  going  into  it."  Shelman  says.  “J 
know  a  lot  of  companies  that  are  implementing  the 
same  sort  of  thing,  and  they  don't  address  the  security 
I  aspects.  They're  leaving  themselves  very  vulnerable." 
“The  need  for  security  goes  up  exponentially  as 
you’re  trying  to  expose  applications  to  your  business 
partners,  adds  Raphael  Holder,  vice  president  of 
shared  services  (H>erauons  at  Northrop  Grummaa 
He  says  the  company  first  grappled  with  how  to  pro¬ 
vide  secure  remote  access  to  Web  services  applica¬ 
tions  for  internal  employees  and  ensure  that  all  users 
entering  the  portal  were  authenticated. 

It  sounds  simplistic,  but  we’re  providing  more  ca¬ 
pability  here  than  we  have  through  remote  access  in 
general,  says  Holder.  “We’re  providing  access  to 

portlets  that  touch  business  data,  not  just  e-mail " 

To  secure  its  data,  Northrop  Grumman  deployed  a 
public-key  infrastructure  system  from  RSA  Security 
Inc.,  issuing  tokens  to  all  employees  authorized  to  ac¬ 
cess  the  portal  Tokens  will  also  be  issued  to  appro¬ 
priate  partners  and  customers  for  different  levels  of 
access.  Holder  says.  Evemually.  the  portal  will  have 
more  than  120,000  u.scrs. 

Even  with  the  current  technology  in  place.  Holder 
acknowledges  that  there  are  security  risks  with  Web 
services.  ’TVe  will  have  to  manage  (the  portal]  very 
closely,  and  access  will  be  done  on  a  business-case 
basis  with  those  partners  we  highly  trust."  he  says. 

Exploring  the  Options 

I  As  it  explores  Web  services.  Wyndham  International 
Inc.,  a  Dallas-based  hospitality  company,  is  also 
looking  closely  at  bow  it  can  provide  ti^t  security. 
Wyndham’s  research  shows  that  it  endured  more  than 
W  million  attempts  at  information  security  breaches 
from  May  2003  through  May  2004.  They  included 
hacker  attacks.  Web  site  defacements  and  viruses. 

“Obviously,  security  is  a  huge  concern  of  ours."  says 
Mark  Hedley.  the  company’s  senior  vice  president 
and  chief  technology  or»cer.  He  says  Wyndham  plans 
to  ^  Web  services  from  its  provider  of  central  reser¬ 
vation  systems  technology,  Micros  Systems  Inc, 
using  industry-standard  protocols.  Hedley  says  his 
company  expects  Web  services  to  make  it  easier  for  I 


customers  to  obtain  reservations  and  for  Wyndham 
to  .s^  data  with  suppUers,  Wyndham  plans  to  final¬ 
ize  hs  sccurif)'  plan  and  implement  Web  services  by 
the  first  quarter  of 2005. 

Hcflher  notes  that  there  are  several  ways  to  ap¬ 
proach  Web  services  security.  One  of  the  most  com¬ 
mon  is  to  secure  applications  at  the  traniqxin  layer, 
with  two-way  Secure  Sockets  Layer  connections  or  a 
dedicated  virtual  private  network  linL  SSL  can  indude 

I  mutual  authentication  such  as  client  certificaies.  An¬ 
other  option,  which  Hefiher  sa>'5  ts  more 
suitable  for  corniecting  with  multiple  part¬ 
ners,  is  to  use  XML  security  gateways. 
These  are  network  appliances  that  protect 
XML  and  Web  services  from  attaci^  They 
feature  XML  encryption,  digital  signatures, 
access  control  and  other  capabilities.  Manj 
in  the  industry  expect  that  new  standards 
will  also  help  bolster  security. 

Heffner  saj's  Web  services  security  is 
improving  because  of  new  standards  and 
products.  “XML  security  gateways  prmide 
better  solutions  for  attack  protection  than 
existed  a  year  aga"  he  says. 

Security  concerns  shouldn't  get  in  the  way  of  Web 
services  implementations,  says  Heffner.  "Tfou  may 
have  to  spend  more  now  on  security  than  in  three 
years,"  when  more  safeguards  arc  built  into  Web  ser¬ 
vices  products,  he  says.  "The  bottom  line  is.  if  tfaere's 
business  value  for  Web  services  now.  you  shouldn't 
be  holding  it  up.”  P  48177 

Vioiino  is  a  freelance  writer  in  Massapequa  ParK  N.Y. 
Contact  him  at  bvioltno@optonline.net 

Help  on  the 
Horizon 

A  new  inifcHttry  slandvd  is  raWng 

l^sarvioMSKwitylnAiiriOASlSfOremza- 

lionfoflheAthBncanertdStniefag^ 

Standards),  a  global  standarth  consorts 
Mass.,  announced  that  fh  membeis  had 
Web  Sorvteas  Seeurity  \foriion  t.O.  a  status  that 
stgnibes  the  highest  levef  of  (cttifctton. 

WSS  bidds  on  secunfr  technologKS  such  as  XIA. 

Digital  Sviaturo.  XML  Enovptan  and  X.S0^ 
cates  to  proMde  a  standard  May  of  seamg  VWb  sv- 
vices  message  exdianges  The  standard  provides  a 
frameiwrklof  companies  to  apply  seortytedwof 
oges  such  as  aulhenticanon  tfid  authorization  n  a 
Web  services  environfnent.  WSS  has  garnered  broad 
support  from  vendors.  «id  omoonents  say  A  Mi  toad 
ID  increased  adoption  ol  Web  servtcas 
IWSSjwAbecomeastandardlormoslWebsv- 
Mcee.*  says  Ray  Wagner,  an  anafrst  at  Gtftner  Inc.  *) 
have  suggested  that  organizations  dnefopng  strale^ 
gc  Web  services  begn  usmg  (the  starrivdl  even  d 
they  have  no  current  security  requremerrts.  Tie  imI 
sea  the  stage  for  aasdy  addng  seomly  as  the  proMe  ol 
the  service  changes.* 

Raphael  Holder,  vice  presrierd  ol  shared  services 
operations  at  Northrop  Gnjmman.  says  he  company 
Blracfong  the  standard. 
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KNOWlEOeECEMTER  WEB  SERVICES 


BV  iruSSELI.  KAV 

IN  A  WORLD  OF  intercon¬ 
nected  networks  and  Web 
services,  computing  work¬ 
loads  are  increasingly  be¬ 
ing  split  among  clients  and 
servers  that  are  far  apart  in 
both  distance  and  functionali- 
t>'.  This  means  it's  essential  for 
computers  to  be  able  to  talk  to 
one  another  and  use  data  gen¬ 
erated  by  another  machine  as 
inpuL  This  isn't  a  new  situa¬ 
tion:  in  fact,  it's  the  logical  ex¬ 
tension  of  how  applications 
have  been  developed  for  years. 

In  their  attempts  to  achieve 
greater  interoperability  and 
efficiency,  developers  have 
created  subroutines  and  pro¬ 
cedure  calls,  object-oriented 
programming  and  libraries  of 
reusable  software.  If  they  can 
avoid  it,  developers  rarely  cre¬ 
ate  applications  from  scratch. 
Instead,  they  try  to  take  ad¬ 
vantage  of  existing  hardware 
infrastructure,  tools  and  soft¬ 
ware.  as  well  as  previously 
created  software  components, 
all  to  rein  in  the  time  aitd  cost 
of  development  and  deploy¬ 
ment.  While  these  approaches 

go  by  many  different  - 

names,  wcTI  refer  to  AIHI 

them  as  "component  UWl 

software."  Indeed,  one 
can  think  of  Web  ser-  Will 

vices  as  fust  a  more  - 

widely  distributed  form 
of  component  software. 

Because  Windows  has  be¬ 
come  the  primary  desktop  op)- 
craiing  system,  and  because 
Microsoft  Corp.  has  tried  to 
extend  that  monopoly  to  the 
server  world,  it's  har^y  sur¬ 
prising  that  the  company  has 
for  years  offered  its  own  set 
of  products  and  standards  for 
component  software.  Among 
the  oldest  of  these,  and  thus 
the  most  widely  used  and 
best-known,  is  the  Component 
Object  Model  (COM)  and  its 
nerwork-sawy  offspring,  dis¬ 
tributed  COM.  or  DCOM. 

COM’s  Binary  Essence 

The  real  value  of  component 
software  fcH*  developers  was 
that  it  allowed  them  to  use  bi¬ 
nary  (Le..  machine-code)  mod- 


[DEFINITION 

Component  Oi^  Model  (COM)  is  a 

Microsoftsieveloped,  language- 
independent  architectiu’e  created 
in  the  1990s  that  lets  developers 
build  applications  from  reusable, 
binary  software  components. 

programming  interface  that  al-  i  Iroduced  to  succeed  VBX. 


lowed  diverse  components 
to  interact.  As  long  as  com¬ 
ponents  used  a  Microsoft- 
specified  binar>'  structure, 
they  could  be  written  in  differ- 
,  ent  languages  and  still  inter¬ 
operate  after  they  had  been 
compiled.  COM  enabled  the 
>  development  of  application 

services  using  com- 
111^0  pound  documents,  cus- 
'Ivll  A  tom  controls,  interap- 
IHIY^  plication  scripting,  data 
WIf  I  transfer  and  other  types 

of  software  interactions. 

What's  in  a  Name? 

The  history  of  Microsoft  com¬ 
ponent  softMrare  b  complex 
because  the  company  tends  to 
change  its  approach  and  struc¬ 
ture  every  few  years,  renam¬ 
ing  and  rebranding  technolo¬ 
gies.  Here's  a  quick  rundown 
on  how  component  software 
has  changed  over  the  years: 

Wc  begin  with  a  technology 
for  compound  documents 
called  Object  Unking  and  Em¬ 
bedding  (OLE),  which  was 
built  on  top  of  Dynamic  Data 
Exchange  and  Visual  Basic  Ex¬ 
tension  (VBX)  controls  from 
Visual  Basic  1.0.  (The  abun¬ 
dance  of  acronyms  is  an  un¬ 
fortunate  bypr^uct  of  this 
subject.) 

In  1992.  Microsoft  intro¬ 
duced  Windows  3.1,  and  OLE 


At  that  time,  Microsoft  stated 
that  OLE  was  the  name  to  be 
used  for  all  of  its  component 
technologies. 

However.  Microsoft  soon  re¬ 
named  some  parts  of  OLE  that 
related  to  the  Internet  as  Ac¬ 
tiveX,  a  moniker  that  gradual¬ 
ly  subsumed  all  the  compo¬ 
nent  technologies.  OLE  then 
reoccupied  its  role  as  a  com¬ 
pound  document  technology. 


used  mainly  in  Microsoft  Of¬ 
fice.  COM  was  first  imple¬ 
mented  in  Windows  95. 

In  1996.  as  networking  and 
networkable  applications  grew 
in  importance,  Microsoft  an¬ 
nounced  its  DCOM  alternative 
to  the  Common  Object  Re¬ 
quest  Broker  Architecture,  or 
CORBA.  DCOM  first  appeared 
in  Windows  NT  4.0  with  tools 
to  help  build  client/server  ap¬ 
plications  that  spanned  both 
the  corporate  network  and  the 
Internet.  In  September  1997, 
Microsoft  once  again  changed 
the  name  of  its  entire  compo¬ 
nent  framework  —  to  COM. 

A  couple  of  years  later,  when 
it  introduced  Windows  2000. 
Microsoft  renamed  COM  to 
COM*,  signifying  substantial 
changes.  COM*'s  main  attrac¬ 
tion  was  that  IT  could  run  it  in 
component  farms  managed  by 
Microsoft  Transaction  Ser\'er. 

A  properly  made  component 
could  be  reused  by  making 
new  calls  to  its  initializing  rou¬ 
tine  without  having  to  unload 
it  from  memory.  Components 
could  also  be  called  from  an¬ 
other  machine,  which  was  pre¬ 
viously  possible  only  with 
DCOM,  so  Microsoft  pretty 
much  dropped  DCOM  as  an 


COM  and  DCOM  in  Action 


ules,  not  source-code  libraries,  came  with  it  onto  every  desk- 


as  was  the  case  with  most 
development  environments. 
COM  defined  an  application 


I  top.  This  was  followed  the 
next  year  by  OLE  2.  and  In 
1994.  C)CX  controls  were  in- 
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independent  concept. 

But  not  even  COM*  had 
much  longevity.  Microsoft  soon 
launched  its  .Net  initiative,  a 
hasty  (and  often  hazy)  frame¬ 
work  that  almost  entirely  re¬ 
placed  the  COM  technology. 
There  is  limited  backward 
compatibility  —  .Net  can  use  a 
COM  object  by  implementing 
uiiat’s  called  a  "wrapper"  — 
but  Microsoft  made  it  clear 
that  for  new  systems,  COM 
was  to  be  dropped  entirely  in 
favor  of  .Net. 

.Net  includes  "smart"  client 
application  software  and  oper¬ 
ating  systems,  smart  devices. 
Web  services  that  can  be  com¬ 
bined  with  other  Web  services 
or  used  directly  with  smart 
client  applications,  a  server  in¬ 
frastructure  and  an  environ¬ 
ment  (Visual  Studjo.Net)  that 
directly  supports  a  number 
of  development  languages 
through  .Net’s  Common  Lan¬ 
guage  Runtime. 

Recent  Changes 

Despite  their  disavowal  in  fa¬ 
vor  of  .Net,  the  technologies 
of  COM  and  DCOM  arc  stUl 
alive  and  well  even  at  Micro¬ 
soft.  tn  the  forthcoming  Ser¬ 
vice  Pack  2  for  Windows  XP. 
for  example.  Microsoft  will 
implement  two  big  changes  to 
DCOM.  It  introduces  comput¬ 
erwide  restrictions  that  pro¬ 
vide  an  additional  access 
check  against  an  access- 
control  list  each  time  a  COM 
server  is  activated,  called  or 
launched.  SP2  also  introduces 
more  granular  COM  permis¬ 
sions,  giving  administrators 
greater  flexibility  in  control¬ 
ling  a  computer's  permission 
policy.  O  48251 

Kay  is  a  Corapulerworld 
confrtburi/^  writer  in  Worces¬ 
ter,  Moss.  Contact  him  at 
nissla^/(^harter.n€t. 
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For  more  about  how  COM  vnerfaces  wvK. 
visit  our  Web  site. 
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Are  there  technologies  Of  Gsues  you'd  like 
10  learn  about  in  OuckSludy?  Send  ycu 
kkas  to  guckstudygeonxMSenvor^ 

To  find  a  compiele  arciwe  of  our 
^ickSludies.  go  online  to 


Can  you  see  it? 


1.  Star  footballer  heads  it  in  at  buzzer. 

Z  Fans  call  rival  fans  to  gfciat. 

3. 300%  mofe  calls  flood  nelMnrtL 

4.  rr  systems  sense  and  respond  insteidy. 

5.  lUecom  scores  big  with  customers. 


MIDDLEWARE  IS  IBM  SOFTWARE.  Its  software 
that  automates  your  fT  systems  to  align  with  your  unique 
business  goals.  Open,  flexible,  end-to-end  solutions 
that  help  you  keep  up  with  customer  demands  on  your 
infrastructure.  It's  how  to  a\/oid  costty  interruptions  in 
service  arxj  fulfill  your  service  level  agreements.  Itfe  how 
to  stay  on  top  of  your  game,  no  matter  what  size  you  are. 
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Got  an  enterprise 
management  solution 
so  good  it’s  worthy 
of  an  award? 


Nominate  it  for  Computerworid’s  rx 

“Best  Practices  in  Enterprise  ^ 

Management”  Awards  Program! 

Computerworld  and  the  DMTF  are  seeking  IT  user-organization  ly  ci 
and  data  center  case  study  submissions  for  recognition. 

Awards  will  be  presented  in  each  of  the  following  five  categories: 

•  Distributed  Systems  and  Infrastructure  Implementation  AWA 

•  Security  and  Risk  Management 

'  Industry  Regulation  Compliance  and  Corporate  Governance 

■  Managing  to  Improve  TCO/ROI 

•  Innovation  and  Promise 

Nominations  are  welcomed  from: 

■  IT  Users/Implementers 

■  Systems  Integrators/Consultants 

•  IT  Vendors  (on  behalf  of  customers,  or  their  own  in-house  deployment) 

•  PR  Firms  (on  behalf  of  clients) 

Multiple  submissions  of  case  studies  describing  different  deployments  per  company/organization  will  be 
considered.  All  qualified  IT  user  nominees  will  be  provided  with  complimentary,  VIP  event  registration. 

Ten  IT  end-user  award  winners  will  be  honored  at  Enterprise  Management  World.  September  12-15,  2004, 
at  the  Philadelphia  Marriott,  with  two  awards  presented  in  each  of  the  five  categories.  An  honorable  mention 
will  also  be  recognized  in  each  category. 

Winners  will  be  recognized  on  the  event  website  and  provided  with  promotional  opportunities 

Submit  your  nomination  oniine! 

You’ll  find  the  nomination  form  and  learn  more  about 
Enterprise  Management  World  at:  www.emwusa.com 

But  hurry!  The  deadline  is  Monday,  August  23rd  at  9:00pm  Eastern  time. 
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Web  Services 


IN  THE  SUMMER  BLOCKBUSTER  Spider-Man  2,  the  director  signals  to  the  audi¬ 
ence  that  Peter  Parker  (a.k.a.  Spider-Man)  has  or  doesn’t  have  his  superhero  pow¬ 
ers  based  on  the  character’s  ability  to  see  with  his  eyeglasses.  When  a  powerless 
Peter  Parker  looks  through  them,  his  vision  is  clear.  When  his  alter  ego.  the  newly 
recharged  Spider-Man,  puts  them  on.  his  vision  is  cloudy. 


XML  proponents  claim  that  developers  of  Web  ser¬ 
vices  applications  are  as  powerful  at  exchangii^  infor¬ 
mation  between  systems  as  Spider-Man  is  at  swinging 
from  skyscraper  to  skyscraper.  Bui  increasii^y,  these 
developers  roust  feel  like  Spider-Man  wearing  Peter 
Parker’s  glasses.  Their  XML  world  becomes  so 
gummed  up  with  opaque  information  that  XML 
Tusi  can't  handle  it. 

These  di0ictilt  bits  of  data,  called  opaque  data,  are 
binary  attachments  that  XML  can't  tag  effectively. 
These  obstinate  files  include  thinge  digital 
signatures  and  compressed  multimedia  data,  such 
as  MPEG  files,  and  are  likely  to  become  a 
big^r  problem  for  developers  in  our  me¬ 
dia-rich,  security-conscious  Web  services 
application  woiid. 

This  file-attachment  problem  is  the  latest 
to  let  the  air  out  of  the  XML  hype  balloon 
that  preceded  its  arriva]  in  the  late  1990s. 

Larger  fUe  sizes  and  vertical-market  speci¬ 
fications  added  performance  and  complexi¬ 
ty  problems  for  XML  users.  Still,  the  hype 
hasn't  died  down.  Today,  vendors  tout  their 
products’  ability  to  output  data  in  XML 
formats  as  if  that’s  all  you  need  to  exchange 
information  between  programs.  They  give 
product  buyers  a  false  sense  that  inter¬ 
operability  issues  in  the  Web  services 
world  have  evaporated  with  XML's  arrival  That’s  fust 
not  true. 

As  a  general  definition  for  how  information  can  be 
structured.  XML  is  a  giant  step  forward.  But  it’s  not  as 
simple  as  most  vendors  would  have  you  and  your 
bosses  believe.  They  want  executives  to  feel  warm  and 
fuzzy  when  they  hear  that  their  software  uses  XML 
They  want  them  to  think  that  their  products  will  be 
compatible  with  everything  already  running  in  your  IT 
shop.  Integration,  they  imply,  will  he  a  snap  for  devel¬ 
opers  to  implement  Return  on  investment  they  sug¬ 
gest.  happens  almost  as  sotm  as  you  unwrap  the  soft¬ 
ware’s  CDs  or  download  the  files.  Given  the  hype,  ex¬ 
ecutives  might  ccmclude  that  any  integration  problems 
might  just  be  your  fault  not  the  vendors'. 

XML’s  cross-i^plicatioo  compatibility  hit  its  first 
stumbling  block  in  situations  where  bandwidth  was 
an  issue.  Accordii^  to  James  Kobielus,  an  analyst  at 
Burton  Group.  "XML  can  be  a  bad  thii^  when  you’re  I 


trying  to  secure  or  speed  the  flow  of  traffic."  It  bloats 
dau  transmissions  having  to  send  10  times  as  many 
bits  as  a  non-XML  data  transfer. 

To  get  the  transparency  offered  by  XML"  he  says, 
“you  have  to  sacrifice  greater  performance." 

Then  the  little  vertical  problem  cropped  up.  as  each 
industry  developed  more-precise  taggii^  instructions 
to  assure  more  complete  communications  among  Web 
services  running  throughout  the  supply  chain.  The 
dwmical  industry  developed  a  version  of  XML  the  re¬ 
tail  industry  created  a  different  one  and  so  on.  XML 
variants  spread  quickly,  and  users  now  have  to  learn 
when  and  where  to  apply  filters  to  distin¬ 
guish  which  ones  apply  to  their  markets. 

Now  vendors  are  fKing  up  to  the  prob¬ 
lem  of  opaque  data  in  Web  services  devel¬ 
opment.  The  good  news  is  that  there's  a 
serious  effort  to  standardize  the  way  XML 
works  urith  opaque  dau.  The  bad  news  is 
that  there  are  five  different  approaches 
under  consklenuion.  each  with  its  own 
strengths  and  weaknesses.  Eventually.  I 
suspect,  vendors  will  resolve  the  problem, 
either  by  agreeing  to  a  single  standard  or 
by  supplying  XML  parsers  that  can  handle 
all  the  existing  standards. 

XML’s  stret^th  is  its  ubiquity.  And  that's 
great,  unless  the  most  important  issue  for 
your  application  is  performance,  or  you  have  a  com¬ 
plex,  multiple-industry  supply  chain,  or  your  applica¬ 
tion's  usefulness  depends  on  t^que  data.  Then  XML’s 
pervasiveness  won't  solve  your  problem.  It  may  help, 
but  it  won’t  eliminate  one  of  the  oldest  problems  in  IT: 
software  interoperability. 

The  promise  of  Web  services  is  that  it  will  remove 
roost  of  the  stumbling  blocks  that  exist  between  ven¬ 
dors'  software.  Yet  the  most  basic  building  block  of 
Web  services.  XML  continues  to  trip  up  vendors  and 
users. 

That's  not  to  say  th^  XML  hasn’t  helped  bridge 
many  gaps  among  products  on  the  market  today.  Nor 
docs  it  obviate  Web  services*  promise  to  vastly  im¬ 
prove  vendor  software  interoperability.  But  the  new 
power  these  tools  put  at  your  fingertips  doesn't  elimi¬ 
nate  your  application  integration  problems.  Yon  still 
need  to  don  your  developer  supeitero  outfit  and  fight 
those  battles  one  villain  at  a  rim<»  O  48222 
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MARK  HALL 

Blurry 

Web  Services 


IN  THE  SUMMER  BLOCKBUSTER  Spider-Man  2.  the  dircclor  signals  B.  the  ;mdi 
once  that  Peter  Parker  (a.k.a.  Spider-Man)  has  or  doesn't  have  his  superhero  pow¬ 
ers  based  on  the  charaeter's  ability  to  see  with  his  eyeglasses.  When  a  powerless 
Peter  Parker  looks  through  them,  his  vision  is  elear.  When  his  alter  egi>,  the  newlv 
recharged  Spider-Man,  puts  them  on,  his  vision  is  cloudy. 

XMI.  pruponcms  claim  that  developers  oT  Web  mt- 
viecs  applivations  are  as  powerful  a<  exehaniiinji  infor¬ 


mation  between  systems  as  Spidex-Man  is  at  sw  inging: 
from  skyscraper  to  skyscraper,  lint  inerisisinglv.  these' 
devel(*pers  must  feel  like  Spider-Man  wearing  iVter 
Marker's  glasses.  ITieir  XML  wtirld  becomes  m* 
gummed  up  with  opaque  information  that  XMI 
just  can’t  handle  it. 

I  hese  difficult  bits  of  data,  called  opaque  data,  .ire 
binarv-  attachments  that  XMI  can't  tag  elToctively. 
These  obstinate  files  include  things  like  digital 
signatures  and  compressed  multimedia  data,  such 
as  MPKt'i  files,  and  are  likely  to  become  a 
bi^er  problem  for  developers  in  our  me¬ 
dia-rich.  security-conscious  Web  servici's 
application  world. 

I  his  file-attachment  pn)blcm  is  the  latest 
to  let  the  air  out  of  the  XMI.  hype  balloon 
that  preceded  Us  arrival  in  the  late  1‘WOs. 

Larger  file  sizes  and  vertical-market  speci- 
fieaiitms  added  performance  and  complexi¬ 
ty  problems  for  XML  users.  Still,  the  hype 
hasn't  died  down.  Today,  vendi'rs  tiiut  their 
pniducts'  abilitv-  to  output  data  in  .XMI 
formats  as  if  that's  all  you  nevd  to  exchange 
information  between  programs.  They  give 
product  buyers  a  false  sense  that  inter¬ 
operability  issues  in  the  Web  serx  iees 
world  have  evaporated  with  XMI  's  arrival.  That's  just 
not  true. 

As  a  general  definition  for  how  information  can  be 
-Structured.  .XML  is  a  giant  step  forward.  Hut  it's  not  as 
simple  as  most  vendors  would  have  you  and  vour 
bosses  believe.  They  want  executives  to  feel  warm  and 
fuzzy  when  they  hear  that  their  software  use's  .XML. 
They  want  them  to  think  that  their  pn»dueis  w  ill  be 
eompaiible  with  everything  already  running  in  your  I  T 
shop.  Integration,  they  imply,  w  ill  be  a  snap  for  devel¬ 
opers  to  implement.  Return  on  investment,  they  sug¬ 
gest.  happcn.s  almost  as  siH>n  as  you  unwrap  the  Mvfl- 
ware's  CIH  or  download  the  files.  (.Jiven  the  hype,  ex- 
ceutives  might  conclude  tluit  ai^'  integration  problems 
might  just  be  your  fault,  not  the  vendors'. 

XML's  cross-application  compatibility  hit  its  first 
stumbling  block  in  situations  where  bandwidth  was 
an  issue.  According  to  James  Kobielus.  an  analv'si  at 
Burton  Group.  "XML  can  be  a  bad  thing  when  you're 


irx  ing  to  secua'  or  spexxl  the  llovv  nf  iriffic"  It  bloats 
data  transmissions  by  h.iving  to  s<nd  10  times  as  nwnv 
bits  .IS  a  non-XMl.  data  transfer 

"  Toget  the  transpari-nev  offea*d  b\  X.Ml  .'*  he  s.ivs. 
"\t*u  have  to  sacrifice  greater  performance. ' 

ITicn  the  little  vtTtical  problem  cropped  up.  .is  each 
indiistrv  develops-d  nmn'-precisc  tagging  insiructkms 
to  .issure  more  coinpk'ic  communicaiions  .imong  Web 
ssTvices  running  thrivughout  the  supply  chain.  Ihc 
chemic.ll  indusirv  diweloped  a  version  of  XML.  the  re 
tail  itidustn,  created  a  different  one  and  so  on.  XMI 
varuints  spre.id  qiiicklv.  and  users  now  h.ive  to  learn 
w  hen  .inJ  where  to  appK  filters  lo  distin¬ 
guish  which  i>ns*s  apply  to  their  markets. 

Now  Vendors  .ire  f.icing  up  to  the  pri>b- 
leni  of  opaque  data  in  W  eb  serv  ks*s  dev  el¬ 
opment.  The  g>HKl  news  is  that  there's  a 
serious  cfi'ori  to  standardize  the  wav  .XMI 
works  with  op.ique  data.  The  bad  news  is 
that  there  are  five  different  approaches 
under  consideration,  eac'h  w  ith  its  ow  n 
Strengths  and  w  eaknc'ssv-s.  Lveniually.  1 
suspect,  vendors  will  res<*lve  the  problem, 
either  by  agrexung  to  a  single  standard  or 
by  supplying  X.ML  parsers  Hut  can  handle 
all  the  existing  st.ind.»rds- 
X.ML's strength  is  iisubiquiiy.  And  that’s 
great,  unless  the  most  imp*»n.int  issue  for 
your  applic.ilion  is  pertorm.tjue.  .»r  vou  haveaeom- 
ple.x.  multiple-industry  supply  eh.nn.  or  your  applica¬ 
tion’s  usefulm'ss  depends  on  op.ique  Jai.i.  Then  X.ML’s 
pervasiveness  won't  solve  your  problem,  h  nuiy  help, 
but  it  won't  elimiitiieoneof  the  oldest  problems  in  I  T: 
solfvvare  interoperability. 

ITie  promise  of  Web  sen  tecs  is  ih.ii  it  w  ill  remov  e 
most  of  the  stumbling  bhvks  ih,it  exist  betw xvn  ven- 
d«irs  stitiware.  Yet  the  most  Kisic  building  bUvk  of 
Web  sen  iees,  XMI ,  coiiiimit*s  lo  trip  up  vendors  and 
users. 

Thai's  not  lo  say  that  XMI  h.istTt  Ju-lpi’d  bridge 
many  gaj's  among  products  on  the  market  today.  Nor 
diK's  it  obviate  Web  sen  iecs'  promise  to  vastly  im¬ 
prove  vendor  software  interoperability.  But  the  new 
power  these  tiHils  pul  at  your  fingertips  dvH'sn'i  elimi¬ 
nate  your  application  iniegraiHin  problems.  Vou  still 
need  to  don  your  developer  superhero  outfit  and  fight 
those  battles  one  villain  at  a  time.  C  48222 
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Me-cyde  devetopment.  Leg¬ 
acy  and  clienbserver  sys¬ 
tems  Interested  applicants 
please  submit  resume  to  AOn 
MR  Dept  .  Information  Tech¬ 
nology  Resources.  1355 
Peachtree  Si..  NE  Suae  110 
AUarita.  GA  30309 


cormecl  A  UNIX  Shell  saving 
KORN.  PERL  A  WAP  lecnn  BS 
Comp  So  *  2  yr  exp  job  duties 
OR  no  BS  *  S  yeers  etp  In  SW 
itov  MusibeiBMCeriiftedasd'b 
aomm  •  t  yr  exp  In  WAP  tocfi 
Apply  OSi.  4005  WindMeo  Pla¬ 
za,  e  550.  AiphareOa.  GA  30005 


OH  ins.  CO  seeks  Systems 
Analyst  to  assist  m  prepanng 
detailed  technical  specs,  de¬ 
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mated  busmess  systems  Mm 
leq  Bachelor  s  in  Engineer¬ 
ing  or  eqv  A  3  mcK  ai  job  or 
I0ti  related  exp  including 
XML.  UML.  Visio.  V5S.  Jave- 
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U.S.  Banks 


help  service  providers,  but  will 
also  allow  banks  to  more  effi¬ 
ciently  retrieve  dau  for  r^ula- 
tors  —  something  that  today 
is  an  arduous  and  expensive 
process,  said  Richard  DeLotto, 
an  analyst  at  Gartner  inc. 

The  question  is,  “How 
would  you  pull  that  oflf  in  the 
U,S.?“  said  Steven  Schutze. 
director  of  e-strategics  at  the 
American  Bankers  Association 
in  Washmgton. 

The  Canadian  initialive  will 
give  banks  and  third  parties, 
such  as  market  research  com¬ 
panies  and  check-processing 
Hrms,  a  standard  way  of  label¬ 
ing  aiul  protecting  public,  is- 
temal,  regulated  and  hi^dy 


sensitive  data.  Garigue  said. 

Unlike  in  Canada,  where  the 
country’s  five  major  banks  are 
regulated  only  by  the  federal 
government,  dozens  of  major 
U.S.  banks  fall  under  the  regu¬ 
latory  purview  of  state  and 
federal  agencies,  making  it  lar 
more  difHcult  to  develop  stan¬ 
dards.  DeLotto  said. 

An  executive-level  source 
within  a  large  U3.  financial 
services  co|ksoittum.  who 
spoke  on  condition  of  anon¬ 
ymity.  said  the  topic  of  a 
common  data-classification 
scheme  has  been  widely  dis¬ 
cussed  within  the  hanking  iiv. 
dostry  over  the  past  year.  But 
be  said  banks  are  unwilling  to 
speak  openly  ^>out  it  for  fear 
that  regulators  will  take  over 
the  inidadve  and  force  h  on 
the  industry. 


“Having  standards  in  securi¬ 
ty  practices  between  our  in¬ 
dustry  and  service  providers 
is  something  that's  viewed 
pretty  universally  as  an  area 


that  needs  to  advance.”  the 
sottree  acknowledged. 

“It  doesn’t  seem  to  me  that 
the  financial  sector  here  would 
embrace  a  single  standard  un¬ 
less  it  was  something  mandat¬ 
ed  by  the  government."  said 
Adam  Stone,  a  security  man- 
agement  analyst  who  asked 
that  his  company  nor  be  named 

Bob  Foster,  staff  direaor  for 
the  House  Financial  Services 
Committee,  said  it’s  likely  that 
the  issue  of  data  classification 
for  banks  will  be  debated  once 
Congress  is  back  In  session 
next  month.  “It’s  safe  to  say  if 
we're  talking  about  consoli¬ 
dating  oversight,  then  we’ll  be 
talking  about  the  mechanisms 
to  do  that.”  Foster  said. 

The  compliance  obliga¬ 
tions  that  banks  will  have  as  it 
relates  to  managing  and  roea- 
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suring  operational  risk  under 
Basel  0"  international  finan¬ 
cial  regulations  make  it  a  good 
idea  to  have  a  data  classifica¬ 
tion  standard.  Stone  said. 

According  to  Garigue.  an 
agreed-upon  industrywide 
data-classification  scheme  will 
enable  better  interoperability, 
integrated  services  and  use  of 
data.  For  example,  common 
bustness-to-business  applica¬ 
tions  across  several  banks  can 
be  standardized  with  respect 
to  password  management  and 
role-based  access  to  client  in¬ 
formation.  be  said. 

“We  know  a  lot  of  banks 
also  have  a  lot  of  problems 
getting  their  ICRM]  profpams 
together  because  of  bad  data 
hygiene.”  DeLotto  said,  which 
makes  data  classification  stan¬ 
dards  a  necessity.  0  48610 
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UnuxPOS 


registers  is  The  Pep  Boys.  The 
Philadelphia-based  automo¬ 
tive  retail  and  service  chain  in 
June  disclosed  plans  to  part¬ 
ner  with  IBM  and  Austin- 
based  360Co{nxnerce  Inc.  on 
Linux-based  POS  systems  at 
its  595  stores. 

Michael  Jones,  CIO  at  Rich¬ 
mond,  Va.-based  Circuit  City, 
said  hb  conqiaiiy's  decision  to 
migrate  to  IBM  hardware  md 
360Commerce  POS  software 
running  on  Linux  was  based 
on  total  cost  of  ownership  and 
a  desire  to  move  to  a  less- 
customized  POS  system  from 
a  single  vendor. 

Jones  said  IBM  recom¬ 
mended  Novell  lnc.’s  SUSE 
Linux  for  its  POS  hardware, 
which  can  also  run  Windows 
and  IBM’s  4690  operating  sys¬ 
tem.  He  said  IBM  will  handle 
any  dealings  with  Novell,  as 
well  as  the  collaboration  with 
360Cominerce  and  Yantra 
Corp..  which  is  providing  the 
integration  engioe.  IBM  Busi¬ 
ness  Consulting  Services  will 
help  Circuit  City  plan  the 
migration. 


Since  1999,  Circuit  City  bad 
been  transitioning  from  the 
homegrown  proprietary  POS 
systems  it  had  b^t  m  the 
mid-1980s  to  Hewlett-Packard 
Ca  hardware  running  Micro¬ 
soft  Corp.*s  Windows  XP  Em¬ 
bedded  and  a  heavily  cus¬ 
tomized  version  of360Com- 
raerce’s  POS  software. 

But  five  years  into  the  proj¬ 
ect,  the  retailer  had  migrated 
to  the  Windows-based  HP 
hardware  at  <mly  100  stores,  or 
roughly  2,000  of  its  12,000  reg¬ 
isters.  Circuit  City  IT  execu¬ 
tives  said  the  impetus  to  switch 
to  IBM  hardware  had  nothing 
to  do  with  dissatisfaction  with 
HP  or  Microsoft,  both  of  which 
the  company  comimies  to 
woric  with  on  other  projects. 

“The  previous  solution 
would  work  and  did  work,  but 
in  five  years,  a  lot  of  advance¬ 
ments  had  occurred,  and  we 
didn’t  need  the  customized 
POS  environment,”  said  BiU 
McCorey.  vice  president  of 
business  applications  at  Circuit 
City.  “Fhre  years  ago,  Linux  was 
a  test  environinent  Now.  it’s 
truly  production-ready.” 

“It's  a  TCO  evaluation,”  said 
Jones.  He  estimated  that  sup¬ 
port  and  postdeployment 


costs  frill  be  cut  by  at  least 
30%  with  the  new  system. 
“Our  TCO  has  been  signifi¬ 
cantly  reduced,  and  we  owe 
the  organization  and  the 
shareholders  that.'  he  said. 

MaMaMng  Focus 

Jones  said  Circuit  City  wants 
to  move  to  a  more  “vanilla” 
version  of  the  latest  edition  of 
360CoffliDerce’s  POS  software 
so  It  can  focus  on  its  retail 
business  rather  than  on  soft¬ 
ware  development.  Instead  of 
customizing  the  360Com- 
oserce  software.  Circuit  City 
plans  to  sit  on  the  vendor’s  re¬ 
tail  standards  advisory  com¬ 
mittee  to  try  to  influence  the 
future  dtrectioD  of  the  com¬ 
mercial  product. 

Seeking  to  reduce  annual 
support  costs,  Circuh  City  is 
exploring  the  possibOrty  of 
running  the  360Conunerce 
software  on  central  servers  and 
distributing  if  through  gateway 
servers  located  closer  to  or  at 
the  stores.  The  cash  roisters 
will  access  the  POS  application 
from  the  server  —  a  significant 
change  over  the  existing,  thick¬ 
er  client  footprint. 

Circuit  Ct^  isn’t  worried 
about  the  servers  or  network 


going  down,  since  the  cash 
registefs  will  be  able  to  run 
and  store  information  locally 
in  the  event  of  a  problem.  The 
retailer  also  plans  m  eventual¬ 
ly  have  wireless  handheld  de¬ 
vices.  but  it  hasn’t  decided  on 
the  technok^jes. 

With  planning  assistance 
from  IBM  Business  Consulting 
Services,  Circuit  City  hopes  to 
complete  its  migration  to  the 
Linux-based  IBM  POS  hard¬ 
ware  within  18  months. 


POSSMpmanb 
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Interestingly,  another  major 
retailer.  Sears.  Roebuck  and 
Co.,  recently  opted  for  the 
IBM  SurePOS/360Conunerce 
combination,  but  it's  in  the 
process  of  finalizing  a  deal 
with  Microsoft  for  the  operai- 
ing  syBiem.  CIO  Gary  Kelly 
said  IBM  gave  SUSE  i  itmx  “a 
good,  strong  push.”  but  his 
company  chose  Windows  XP 
Embedded  for  security,  stabili¬ 
ty  and  its  overall  capabtltty. 

Althou^  Window  takes 
hhs  on  the  security  front.  Kel¬ 
ly  said  Microsoft  has  been  im- 
jnoving  hs  response  to  vul- 
ner^Uities.  He  added  that  he 
thinks  Linux  will  ultimately 
become  a  target  too.  Kelly  also 
cited  the  prospea  of  legal  dis¬ 
putes  as  another  factor  against 
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Jones  said  a  half-day  meet¬ 
ing  with  an  IBM  attorney  con¬ 
vinced  him  that  intellecmal 
pn^rty  will  not  be  an  issue. 
And  where  security  is  con¬ 
cerned,  Circuit  City  thinks  it's 
on  safer  footing  with  l  inn* 
To  date,  you  don't  have 
quite  the  security  risks  and 
concerns,”  said  McCorey. 

The  Microsoft  environment 
is  the  laigest  taiget  for  hack¬ 
ers.”  048812 


Lite  a  Fire 


ITS  OHUCIAI :  You're  now  paying  much  more  for  Microsoft 
Windows  than  some  of  your  potential  competitors.  Last  week, 
Microsoft  confirmed  that  starting  in  October,  it  will  offer  Win¬ 
dows  XP  Starter  Edition,  a  cheaper,  scaled-down  XP,  to  PC 
customers  in  Malaysia,  Indonesia  and  Thailand,  with  two  oth¬ 
er  not-\eI-named  countries  soon  to  join  that  list  [QuiekLink  48757]. 

How  much  cheaper?  Microsoft  won't  say  yet,  but  published  re¬ 
ports  quote  retail  prices  of  S40  for  a  still-very-functional  version  of 
Windows  XP.  The  version  t  ou're  using  retails  at  S499. 

.Are  you  getting  hosed?  Maybe  so.  But  it  is  the  right  thing  for 
Micri)sott  to  do.  And  \'t)u  should  be  glad  it’s  happening. 


\«.  v'orJiiiu  1. 1  Midrt'stttt,  this  'Nl'  I  iry  "  is  buih 
iiii'K'  .iiItTvi.ibU  .Hid  f.isivT  ii>  Use  .jhJ  siippt*ri 
•li.in  n-vular  XI'.  Ji  h.KiJle  imiltiplc  user 
neivNorkiiiji.  prlincr 

shjniK'  or  iM\  loe  utiliniik'J  u  itiJous  open  ji 
onee.  It  w  ill  support  Web  hrttwsiii}:  .mJ  seeurit\ 
''ound  like  stuiietliin^'  uni  umld  use?  YiUi 
.'.in  t  h.»\e  it.  \\  In '  Ht.-e;iuse  >oij're  w  illinij  to 
p.iv  lor  t\ili-l'lo«  n  Xr.  ihiifs  v\h\. 

I  t*ok  -  MuTitsoM  has  viid  I'or  \e.irs  that  it 
n«>ulJn  t  otTera  Windtuvs  Lite  It  s  doino  Ml  u«iv\ 
onh  K.-e.iuse  people  in  some  markets  sinipK 
iren't  hu\  ittjt  \VinJtn\s  XP.  \\  ith  liie  thre-at  that 
1  itiux  eoulJ  Stan  displaoini:  V\  injous  m  tlu'se 
c  irkets,  .MieiMsott  had  to  dt»  something  raJiejI. 
W  (It  it  workr  It  mav.  ihoityth  there's  no  guar- 
•lU  >  Ki  ntemher.  XP  Lite  isn't  someihinji  Mi- 
.  rosoft  s  eustomers  deni.tnded,  Mierosorr's  eits- 
'outers  wc‘re  atre.jdy  buying  XP.  XP  Lite  was 
•TeateJ  beeuuse  of  people  who  uvren'f  Micro- 
soft  s  eustoinerv.  Ii\  refusing  to  bui.  they  forced 
Mien  -soft's  hand. 

MicfosoM  w  isely  did  what  ihi-  market 
'Apairt  d  inen  though  those  couM-he  eus- 
Toini  Ts  s/iW  ni  1%  not  go  lor  .XP  I  iie. 

!'  '  .» ij.(mble  tiiat  might  not  pa\  off. 

Hi.  s.r  Mier'  -son.  ti  s  wonit  .1  shot, 
h  i'  JiK's  that  nu-.in  for  the  rest 

'  h.ilf.i  vu.rld  awav' Well,  jf  you 
'gainst  companies  tn 
'  1-1  i.  Indonesia  or  Thailand.  Jt 

' competitors  iusi  got  an 

•  I.'  -1 1  r  you;  .1  cheaper,  sim- 

•  ■  '  't  WttiJows  XP.  If  m.iy 

. U  int.ige.  but  in  a  glob- 

•mv.  oM-ry  little  bit  m.it- 
'  b-inside. 
that  Mier»»sofi  is 
e*i.ir  Mas  iHiev  unthink¬ 


able:  (rimming  don  n  a  product  to  what  users 
need.  Alter  two  decades  ot  bK>ating  Windows 
and  insisting  that  one  si/e  fits  cieryoiie,  Micro- 
soil  is  linally  acknowledging  that  not  all  users 
reciuire  all  that  expensive  complexity. 

.-\nd  that's  cause  for  optimism,  even  if  it's 
based  on  something  that  exists  only  on  the  oth¬ 
er  side  ot  the  globe,  .\ficr  all.  if  .Microsoft  de- 
hloated  its  software  for  them,  why  not  for  us? 

You  already  know  the  answer  to  that  ejues- 
lion.  XP  Lite  happened  only  because  Mterosiift 
was  l’«>reed  into  it  by  people  who  wouldn't  buy 
the  existing  product. 

And  as  long  as  you're  still  willing  to  buy  w  hat 
Microsoft  is  selling,  that's  wh.ii  you'll  get. 

So  if  you  want  products  like  XP  Lite  — 
tighter,  less  expensive,  and  easier  to  train  for. 
Use  and  manage  —  you'll  have  to  demand  them. 
.And  you'll  have  to  hack  up  that  demand  by  re- 
tusing  to  buy  software  that  isn’t  what  you  want. 

fhai  may  mean  pulling  off  that  next  round  oi 
upgrades.  Or  vising  open-sotiree  software.  Or 
getting  products  irom  vcnd*>rs  st>  desperate  for 
s-iles  that  they’ll  deliver  what  eustomers  need. 

Or  building  smaller,  more  targeted 
jpplie.itions  yourself.  It  won't  be 
easy,  and  it  could  get  ugly. 

Hut  we've  been  lamenting  bloat¬ 
ware  for  y  ears.  Now.  fmallv.  we're 
sevine  the  first  moves  toward 
cleaner,  more  affordable  Mierosoi'i 
software.  It  may  not  offer  much 
hope,  but  it's  worth  .1  shot. 

Alter  all.  people  in  Malaysia. 
Indiuiesia  and  J'hailand  got  Micro¬ 
soft  to  listen  to  what  they  need. 
Who  knows?  If  we  work  hard 
emtugh  at  it.  nuiybe  Microsoft 
will  listen  to  us.  ukk  C  46783 


Unclear  on  the  Concept 

This  user  wants  the  latest  upgrade  he's  read  about, 
and  he  wents  tt  now}  Help  desk  pilot  fish  explains  that 
it's  a  maintenance-onty  release,  that  it  won't  improve 
his  performance,  that  the  upgrade  is  already  on  the 
sc^tedule  -  but  the  user  howls  that  he’s  got  to  have  it 
or  he’ll  have  fish's  head  The  help  desk  pnontizes 
problems  from  1  -  most  urgent  -  to  4.  so  fish  asks, 
“What  pnority  do  you  want  for  this?  The  scale  runs 
from  a  1  all  the  way  up  to  a  4."  Gimme  a  4!  user  de¬ 
mands.  Says  fish.  -Thafs  what  he  got." 

Help! 

•imiiMwIy  lAnH^ 
hired  IT  pHol  fish 
about  how  so  many 
users  are  lacking  in  ba¬ 
sic  knowledge  about  the 
software  they  use. 
many  questions  about 
Microsoft’s  operating 
systems  and  applica¬ 
tions  can  be  solved  with 
a  press  of  the  FI  key.” 
fish  comments  -  to 
which  the  siqwrvisor 
replies, ‘^What  does  the 
FI  hey  dor 

Emergency. 

Redenned 
TMs  server  ktstaHalioniB 
an  emergency,  plot  fish 
is  tdd.  so  he  flies  1.000 
mfies  ovsrnigbt  to  get  It 
set  up  Monday  mornino. 

”1  found  the  server  and 
assoctatod  software  with 
no  protaism.  then  asked 
where  the  server  was  to 
be  located  and  where 
the  Token  Ring  hubs 
would  go.”  fish  reports. 

”My  contact  pokiM  to 
a  blank  wan  and  stod. 

*Thoy1l  be  instaHed  there 
in  atiout  two  months  * 
when  the  union  electri¬ 
cians  put  the  office  on 
their  schedule.'" 

In  a  Word.  Yss 
Systems  analyst  asks 
sttoport  pilot  fish  to 
make  a  configuration 


change  on  her 
PCbuttelb 
fish  she's 
abouttoleave 
for  lunch.  1  ex¬ 
plain  that  I  will  remoMy 
control  her  PC  to  make 
the  change.”  fish  says. 
Her  response?  "She 
asks  if  I  wilt  stM  be  able 
to  see  the  screen  if  she 
turns  off  the  monitor.” 

Time  for  a  More 
Formal  Password 
Policy,  Maybe? 

User  to  support  pilot 
fish: '?IVhat  did  your 
T-shirt  say  yesterday?” 
Pilot  fish: ‘myr  User 


password,  and  rve  for 
gottsn  it” 

Probably  Not 

Business  studsnt  asks 
IT  insbuetor  why  fiber 
optic  networking  cable 
isn't  uMd  everywhere. 
"Is  H  because  glass  is 
sobreMtafalerheasks. 
No,  fiber  is  quite  flexible, 
fish  says.  Would  you  like 
to  see  a  sample? ‘That’s 
OK.”  student  says  confi- 
denlfy.”1  have  a  fiber 
optic  Christmas  tree.” 
When  fish  brings  in  a 
sample  (rf  fiber  cable, 
student  is  puzzled. 
That's  not  what  my 
Christmas  tree  looks 
Hitt.”  he  tols  fish.  T 
must  have  a  coaxial 
Christmas  tree.” 


O  MAKE  IT  CHRISTMAS  M  AUGUST.  Send  me  your 
true  taie  of  rriife  at  sharkyficompularwaridxom.  I’ll 

send  a  festive  Shark  shirt  if  I  use  it  And  check  out  the  daily 
teed,  browse  the  Sharkives  and  sigri « for  Shark  Tank 
hoine  delivery  ai  cornputerworld.eein^h«ky 
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FRANK  HAYES  •  FRANKLY  SPEAKING 

Lite  a  Fire 


IT’S  OFFICIAL:  You’re  now  paying  much  more  for  Microsoft 
Windows  than  some  of  your  potential  competitors.  Last  week, 
Microsoft  confirmed  that  starting  in  October,  it  will  offer  Win¬ 
dows  XP  Starter  Edition,  a  cheaper,  scaled-down  XP,  to  PC 
customers  in  Malaysia,  Indonesia  and  TTiailand,  with  two  oth¬ 
er  not-yet-named  countries  soon  to  join  that  list  [QuickLink  48757]. 

How  much  cheaper?  Microsoft  won’t  say  yet,  but  published  re¬ 
ports  quote  retail  prices  of  $40  for  a  still-very-functional  version  of 
Windows  XP.  The  version  you’re  using  retails  at  $499. 

Are  you  getting  hosed?  Maybe  so.  But  it  is  the  right  thing  for 
Microsoft  to  do.  And  you  should  be  glad  it’s  happening. 


According  to  Microsoft,  this  “XP  Lire"  is  both 
more  affordable  and  easier  to  use  and  support 
than  regular  XP.  It  won’t  handle  multiple  user 
log-ins.  PC-to-PC  home  networking,  printer 
sharing  or  having  unlimited  windows  open  at 
once.  It  wiH  support  Web  browsing  and  security. 

Sound  like  something  you  could  use?  You 
can’t  have  it  Why?  Because  you’re  willing  to 
pay  for  full-blown  XP,  that's  why. 

Look  —  Microsoft  has  said  for  years  that  it 
wouldn't  o6fer  a  Windows  Lite.  It’s  doing  so  now 
only  because  people  in  some  markets  simply 
aren’t  buying  Windows  XP.  With  the  threat  that 
Linux  could  start  displacing  Windows  in  those 
markets.  Microsoft  had  to  do  something  radical. 

Will  it  work?  It  may.  though  there’s  no  guar¬ 
antee.  Remember.  XP  Lite  isn’t  something  Mi¬ 
crosoft's  customers  demanded.  Microsoft’s  cus¬ 
tomers  were  already  buying  XP.  XP  Lite  was 
created  because  of  people  who  weren’t  Micro¬ 
soft’s  customers.  By  refusii^  to  buy.  they  forced 
Microsoft’s  hand. 

And  Microsoft  wisely  did  what  the  market 
required  —  even  though  those  could-be  cus¬ 
tomers  sritf  may  not  go  for  XP  Lite. 

It’s  a  gamble  that  mi^t  not  pay  off. 

But  for  Microsoft,  it’s  worth  a  shot 
What  does  that  mean  for  the  rest 
of  us,  half  a  world  away?  Well,  if  you 
compete  against  companies  in 
Malaysia.  Indonesia  or  Thailand,  it 
means  those  competitors  just  got  an 
advantage  over  you:  a  cheaper,  sim¬ 
pler  version  of  Windows  XP.  It  may 
be  a  small  advantage,  but  in  a  glob¬ 
alized  economy,  every  little  bit  mat¬ 
ters.  That’s  the  downside. 

The  upside  is  that  Microsoft  is 
now  doing  what  was  once  unthink¬ 


able:  trimming  down  a  product  to  what  users 
need.  After  two  decades  of  bloating  Windows 
and  insisting  that  one  size  fits  everyone,  Micro¬ 
soft  is  finally  acknowledging  that  not  all  users 
require  all  that  expensive  complexity. 

And  that’s  cause  for  optimism,  even  if  it’s 
based  on  something  that  exists  only  on  the  oth¬ 
er  side  of  the  globe.  After  all.  if  Microsoft  de- 
bloated  its  sof^are  for  them,  why  not  for  us? 

You  already  know  the  answer  to  that  ques- 
tioa  XP  Lite  happened  only  because  Microsoft 
was  forced  into  it  by  people  who  wouldn’t  buy 
the  existing  product. 

And  as  long  as  you’re  still  willing  to  buy  what 
Microsoft  is  selling,  that’s  what  you’ll  get. 

So  if  you  want  products  like  XP  Lite  — 
tighter,  less  expensive,  and  easier  to  train  for, 
use  and  manage  —  you’ll  have  to  demand  them. 
And  you’ll  have  to  back  up  that  demand  by  re¬ 
fusing  to  buy  software  that  isn’t  what  you  want. 

That  may  mean  putting  off  that  next  round  of 
upgrades.  Or  using  open-source  software.  Or 
getting  products  from  vendors  so  desperate  for 
sales  that  they’ll  deliver  what  customers  need. 

Or  building  smaller,  more  targeted 
applications  yourself.  It  won’t  be 
easy,  and  it  could  get  ugly. 

But  we’ve  been  lamenting  bloat¬ 
ware  for  years.  Now,  finally,  we’re 
seeing  the  first  moves  toward 
cleaner,  more  affordable  Microsoft 
software.  It  may  not  offer  much 
hope,  but  It’s  worth  a  shot 
After  all.  people  in  Malaysia. 
Indonesia  and  Thailand  got  Micro¬ 
soft  to  listen  to  what  they  need. 

Who  knows?  If  we  work  hard 
enough  at  it.  maybe  Microsoft 
will  listen  to  us.  toa  O  487B3 


Comider  the  dots  connected.  The  end-to-end  votce  over  tP  sotuhon  we  designed 
for  Crate  and  Bartel  features  a  unified  P  messaging  platform  and  ftie  most  advanced 

tadirare  avalable.  The  new  system  wl  save  Itiem  a  bundte  on  mainlenance,  man^ement 

and  wiring,  wMe  easing  the  cost  and  complexi^  of  adding  features  or  ertfeloyees.  And 

ift  steady  improviig  productwily,  hetwg  over  400  associales  rnake  rniions  of  cusloniBS 
'  '  •sefnghtathome.Tbfindoutmore.gotoshc.corivaots.GOtlGBeYOHDUeCAli: 
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Oracle  Application  Server 


More  Features 


ORACLE 

BEA 

Web  Services  ^ 

✓ 

Enterprise  Portal  Y 

✓ 

Workflow  ^ 

✓  1 

Integration  ^ 

^  i 

Grid  Ready  ^ 

Wireless  >/ 

_ 

Clustered  Web  Cache  *  ^ 

_ 

Advanced  Java  Cache  ^ 

_ 

Integrated  Identity  Management 

— 

Business  Intelligence  ^ 

— 

Open  J2EE  Framework  ^ 

— 

BPEL  Run  Time  ^ 

— 

At  Half  the  Price 


oracle.com/more 
or  call  1.800.633.0759 


Oracle  Application  Server  lOg  is  haif  the  price  of  BEA  WebLogic  Piatform  8.1. 

-**“f**  o"  Application  Server  lOp  Enterprise  Edition  «vith  Oracle  BPEL  Process  Manager  Option 
ar>d  Oracle  Developer  Suita  lOp  vs.  BEA  WebLogic  Platform  8.1.  Pricing  reflects  usage  for  1  CPU  and  1  DeveSp^ 

- - - -rr-tiin.  .  n.m... 
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IT  challenges  could  trump  Ihe  benefits  of  consolidating  U.S  mlelligence  agencies 
A  lawsuit  tiled  by  former  client  BSkyB  could  give  EDS  another  black  eye. 
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The  new 
802,11i  security 


I 


standard  will  help,  but 
protecting  wireless  LANs 
remains  a  very  complex  )ob. 
Here's  why. 


J.D.  Edwards  Users  Still  Aren^ 
Sold  on  PeopleSoft’s  Takeover 


Customer  base  cites 
'mixed  bag’  one  year 
into  new  ownership 

BV  MABC  L.  SOHOINt 

Twelve  months  alter  it  paid 
$1^  billion  to  buy^  business 
applications  rival  )i>.  Edwards 
&  Co..  PeopIeSoft  Inc.  has  yet 
to  get  a  big  sales  boost  from 
the  deal  or  anythii^  close  to 
the  kind  of  acclaim  it  had 
hoped  to  receive  from  the 
users  it  inherited. 


Based  on  interviews  with  IS 
JT>.  Edwards  users  and  an  in* 
formal  poll  of  48  IT  managers 
that  was  conducted  last  week. 
PeopleSofr  is  far  from  winning 
over  its  new  customer  base. 

Five  of  the  users  who  were 
interviewed  said  unequivocal¬ 
ly  that  life  with  PeopleSofr  is 
better  than  it  was  under  JJ). 
Edwards.  But  several  said  it*s 
worse  in  at  least  some  aspects, 
and  the  others  indifatftd  that 
they’re  still  on  the  fence  about 
the  acquisition. 
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The  poll  of  Computerworld 
subscribers  reflected  even 
sharper  attitudes  toward  the 
buyout,  which  PeopleSofr 
completed  last  Aug.  29  by  pur¬ 
chasing  the  remainii^  J.D.  Ed¬ 
wards  shares  that  it  didn't  al¬ 
ready  own.  Twenty-one  of  the 
)JD.  Edwards  users  who  re¬ 
sponded  said  PeopleSofr's 
takeover  has  had  a  negative  ef¬ 
fect  on  them,  while  six  said 
the  deal  has  been  positive. 

In  addition,  29  of  the  respon¬ 
dents  said  they  would  have 
preferred  that  fJD.  Edwards  re¬ 
main  independent  Ten  voiced 
support  for  the  company  be¬ 
ing  acquired. 

‘Ifs  a  mixed  bag,"  said  )D. 
Edwards  user  Fredrick  Pond, 
referring  to  PeopleScA’s  own¬ 
ership.  "They  are  our  key  ven- 
PwpleScft.pageB 


HP  Rushes  tD  Ex 
Order  System, 
Reassure  Users 

Vendor  says  ‘woi^  is  behind  as'  on  shipment 
snafiis  caused  tA'  rollout  of  supply  chain  apps 


BV  PATmCK  TMIBOOEAU 

CHICAGO 

Hewlett-Packard  Co.  engag<»H 
in  damage  control  at  HP 
World  last  week,  telling  users 
it’s  workii^  in  "war  room" 
fashion  to  fix  the  order-proc¬ 
essing  problems  that  haw  af¬ 
fected  its  shipments  of 
servers  and  storage  de¬ 
vices.  HP  also  said  its 
weak  third-quarter  re¬ 
sults  aren’t  a  harbinger 
of  any  changes  in  its 
technology  road  map. 

Joe  Nadler,  a  director  in  HP’s 
enterprise  systems  unit,  told 
customers  at  one  COTference  fo¬ 
rum  that  the  company  eiq)ect5 
its  server  and  storage  su{^ly 
chain  "to  be  just  about  frUly  re¬ 
covered  by  the  end  of  August." 

"There’s  aggressive  plans  in 


place  to  make  sure  we  catch 
up  on  late  customer  orders, 
and  unforttmately,  we  did  have 
some  significant  delays." 
Nadler  said.  But  be  added  that 
the  problems  have  been  iden¬ 
tified.  "We’re  now  completing 
the  he  said 

Among  the  users  on 
the  receiving  end  of 
the  order-processing 
problems  was  Patrick 
Slattery,  a  systems 
manager  at  IDX  Sys¬ 
tems  Corp.  in  South 
Buiiington.  ^  Slattery  or¬ 
dered  two  Intel-based  Pro¬ 
Liant  servers  from  HP  last 
month.  But  IDX.  which  devel¬ 
ops  software  for  health  care 
providers,  is  still  awaiting  the 
delivery  of  the  systems. 

HPWorid,page4l 


Utility  to  Make 
FT Framework 
Open-Source 

Hopes  other  users 
will  improve  its  work 

BV  CAfrOL  SUWA 

Duke  Penver  Ca  plans  to  go 
6x>m  consumer  of  <^>en- 
source  software  to  contributor 
on  Sept.  1  by  making  an  inter¬ 
nally  developed  application 
framewoik  available  to  other 


companies  through  the 
SourceForgemet  Web  she. 

The  Cbariotte;  N.C.-based 
power  company  ^nt  about 
IXNX)  hours  over  ^  course  of 
a  year  building  its  framework, 
aliich  supports  development 
of  applicabons  built  around 
Microsoft  Corp.'s  .Net  tech¬ 
nology.  By  turning  the  frame¬ 
woik  over  to  the  open-source 
commuiiiTy.  Duke  hopes  that 
other  corporate  developers 
will  improve  on  hs  work. 

"This  is  somewhat  of  an  ex¬ 
periment  to  see  bow  much 

Duke,pqge9 


Presenting  the  new  Xserve-  G5,  a  wickedly  fast, 
extremely  compatible  and  refreshingly  affordable  lU 
server  from  Apple; 

With  dual  2GH2  64-bit  G5  processors,  it  achieves  blazing 
speeds  of  up  to  30  gigaflops.  It's  so  powerful,  in  fact,  that 
the  US.  government  is  deploying- 1 ,566  Xserve  G5  servers  to 
create  one  of  the  world's  fastest  supercomputers,  capable  of 
up  to  25  trillion  calculations  per  second. 

And  it  comes  complete  with  Mac  OS'  X  Server,  Apple's 
UNIX-based  operating  system  that  provides  a  complete  suite 
of  standards-based  network  services  with  no  per-client  fees. 
So  whether  you  have  Mac;  Windows,  UNIX  or  Linux  clients, 
Xserve  is  ideal  for  cross-platform  file  sharing,  hosting 
dynamic  websites,  streaming  audio  and  video  and  running 
powerful  J2EE  applications  -  right  out  of  the  box. 

Of  course,  its  most  impressive  feature  may  be  its 
price,  starting  at  just  $2,999:  The  new  Xserve  G5. 
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Baddng  Up  the  Edge 

In  tha  Tadmology  sacikin:  Thanks  to  data  repli- 
cation  and  disk-to*disk  backup  technologies, 
rr  is  increasingly  redirecting  remote  office 
backups  to  the  data  center,  wliere  they  can  be 
more  easily  and  reliably  managed.  Page  22 
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Rx  for  Success 

In  lit*  MtnagMinnt  Motion;  Why  do  doctors 
resist  hospital  safety  technoit^?  Because  it 
disrupts  workfiow  and  slows  them  down. 
Here's  how  to  get  safety  systems  r^t  and 
motivate  doctors  to  give  them  a  try.  Papa  27 
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6  Intelligence  agencies  need 

a  technology  blueprint  and 
better  systems  integration  if  a 
proposed  overhaul  is  to  suc¬ 
ceed,  officials  testify  during 
congressional  hearings 

7  Hurricane  Charley  didn't 
catch  IT  managers  unpre¬ 
pared.  but  recovery  e^rts 
were  complicated  by  telecom¬ 
munications  deficiencies. 

7  Ford  abandons  an  Oracle 

procurement  system  after  four 
years  in  fovor  of  a  “proven" 
set  of  custom-developed 
mainframe  applications. 

8  EOS  gets  sued  by  the  U.K.'$ 
largest  satellite  TV  broadcast¬ 
er  over  a  CRM  development 
deal  that  was  terminated  in 
2002.  But  the  IT  services  firm 
says  it  will  file  a  countersuit 

6  Hewlett-Packard  plans  to 
offer  a  service  to  help  IT 
managers  scan  and  remediate 
security  vulnerabilities  in 
network  devices. 

9  Motorola  completes  the  latest 
phase  in  a  rollout  of  informa¬ 
tion  Ufe-cycle  mana^meot 
software  in  its  PCS  unit’s 
North  American  operations,  as 
part  of  an  effort  to  cut  the  size 
of  its  production  databases. 

12  Many  IT  contracts  fall  to 
include  performance  criteria 
and  “guarantees"  from  vendor 
sales  pitches,  say  experts. 

12  Mlcrasoft  tries  to  appeal  to 
mainframe  and  iSeries  users 
with  an  upgrade  of  its  Host 
Integration  Server  software. 


TECHN0L06Y 

19  Wi-Fi  Plays  Defense.  The 
new  802.Ui  wireless  LAN 
security  standard  is  a  big  step 
forward,  but  Wi-Fi  LANs  still 
have  some  vulnerabilities. 

24  Future  Watoh:  Software  Flight 
Plan.  *aul  D.  Nielsen  used  to 
run  a  S3  billion  research  lab 
for  the  U,S.  Air  Force.  In  his 
new  role  as  CEO  of  Carnegie 
Mellon's  Software  Engineer¬ 
ing  Institute,  the  retired  gen¬ 
eral  explains  how  his  eiq>eri- 
ence  will  benefit  the  SEI’s 
development  projects. 

25  Socurlty  Manager’s  Joumak 
Antivirus  Sorvice  Troubled  by 
TLS.  A  complex  Transport 
Layer  Security  deployment 
gets  messier  when  an  antivirus 
service  is  added  to  the  mir 

MmSEMENT 

30  IT  Survival 
Ouida.  Forty 
years  in  IT 
have  taught 
Ace  Hardware 
CIO  Paul 
Ingevaidson  a  thing  or  two, 
and  in  this  valediction,  be 
shares  some  nuggets  with  his 
IT  colleagues. 

31  No  Freo  Luitch.  Open-source 
software  is  free  —  m  is  it?  It 
comes  with  rights  and  obliga¬ 
tions.  and  attorney  Larry 
Rosen  says  IT  managers  need 
to  understand  both. 

32  Carotr  Watch.  Leveraging 
your  skills:  how  project  lead¬ 
ers  really  get  picked;  and  IBM 
hits  college  campuses. 
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10  On  the  Mark:  Mark  Hall  looks 

at  automated  testing  process¬ 
es  for  remote  users  and  a 
managed  service  for  indus¬ 
trial  controls  monitoring 

14  Maryfran  Johnson  distills  all 
of  the  IT  management  advice 
you’ll  ever  hear  into  three 
simple  mantras. 

14  Virginia  Robbins  dislikes 
companies  that  are  out  to 
make  as  much  money  as  pos¬ 
sible  in  the  short  term. 

15  David  Moschella  sees  ramifi¬ 
cations  for  workplace  IT  now 
that  employees  can  gel  better 
gear  on  their  own. 

26  Tommy  Petarson  thinkc  a  fed¬ 
eral  attempt  at  consolidating 
Americans’  electronic  health 
records  is  a  worthy  cause  — 
and  a  daunting  project. 

33  Edward  Smith  advises  against 
reacting  to  security  threats 
defensively,  because  adding 
technology  without  a  strategy 
can  leave  your  organization 
more  vulnerable. 

42  Frankly  Speaking:  Frank 
Hayes  notes  that  wdten  it 
comes  to  negotiating  with 
vendors,  if  you  can’t  walk 
away  from  the  table,  you  have 
no  leverage  at  alL 
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XPSP2:  What  VbuNaedto  Know 

SOFTWARE;  Vfindows  XP  Service  Fade  2 
could  have  some  unexpected  effects  on  your 
company's  an>licatioiis,  tiioMle  workers  and 
more. ’TWo  Avasade  coosultants  offer  advice 
OP  how  to  prepare.  OQMcMkdr  40161 

SmHaUlsofMghly 
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OECORIIV:  Tbese  identity  managemest 

nmst-haves  can  be4>  you  dwose  the  best 
system  for  your  company,  says  Cmz^wter 
Amodates’ Bilhar  Mann.  O  48WS 
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Nortel  Plans  Job 
Cuts.  SAP  Rollout 

Nortii  IMwerfci  IM  rvporM  cs- 
tinulad  fimneW  mufti  for  Um 
first  ImH  of  thii  yotr  and  mM  ft 
iwR  Iq' eft  10%  el  ito  worWorca. 
or  about  3.S00  impleyoH.  To 
further  aft  ooali.  Nortel  piara  to 
Instil  SAP  A6*s  bwinaaa  i9plh 
cihone  throughout  ite  oparations 
and  dhuftiata  ewna  of  the  WO- 
piui  lyslm  H  new  uaae.  Tfa 
ompany  ate  said  CIO  Afeart 
fttdnoch  new  raportiilractfy  to 
PmidMit  Md  CCO  n  Owens. 

Brvnpkm.  Mario-hasad  Nor* 
tai.  which  is  roataOng  Ns  earnings 
bach  to  2001,  s^  M  expects  to 
Mi  fuR  financial  rsporti  for  ths 
Am  two  quartan  of  2004  and  ra* 
etaad  flgurea  for  al  of  hart  yaar  by 
tha  and  of  Saptambar.  Hit  net- 
worfdng  MMpmenl  vendor  alao 
dadaaad  that  N  haa  flrad  aavan 
finaoea  etMorthna  and  that  tha 
Noyal  Canadtan  Mounlad  Mca  ia 
launching  a  criminal  bwastigatlon 
bile  Hs  accounting  pracflcas. 

Oracle  to  Adopt 
Monthly  Patching 

(hacit  Cerp.  aaM  ffa  moving  to  a 
monthlyralaaaaeyeliferaoft* 
ware  patchaa,  limlar  to  the  ap¬ 
proach  that  hicrcaoft  Corp. 
adaplad  lait  M.  In  a  ststarmrit 
awninidng  tha  plan.  Oradn  aaM 
that  awftci^  to  a  more  pra- 
dtetaUa  patching  aehaduia  %  tha 
right  Mag  for  oir  euatomors.” 

Tha  company  dhtn*!  say  whan  N 
eipacis  la  b^  tha  monthly 


Short  Takes 

SAP  today  wfl  armeunce  that  the 
U.S.  Psalal  Sarviea  plana  to  bi- 
stal  Ns  humwi  raseurcas  soft- 
wara  to  support  tha  agsney's 
700.000  werhMS.  The  SAP 


IT  Hurdles  Complicate 
Intelligence  Ovemaul 


Technology  blueprint,  better  integration 
needed  to  support  melding  of  agencies 


Bv  OAN  veirroM 

Approximately  one 
year  after  the  forma¬ 
tion  of  the  Depart¬ 
ment  of  Homeland 
Security  —  which  was  the 
largest  reorganization  of  the 
federal  goverrunent  in  50 
years  —  the  U.S.  intelligence 
community  is  facing  a  similar 
overhaul  that  some  fear  could 
threaten  the  meager  progress 
made  so  far  on  information 
sharit^  and  IT  integration. 

The  recently  released  iVU 
Commission  foporr  outlines  a 
stinging  indiament  of  the 
government’s  information- 
sharing  efforts  and  calls  for 
the  appointment  of  a  national 
intelligence  direaor  with  full 
budgetary  authority  over  the 
country's  15  intelligence  agen¬ 
cies  and  departments.  A  series 
of  congressional  bearings  last 
week  focused  on  the  long¬ 
term  impaa  that  major  orga- 
nizationju  changes  might  have. 
In  conjunction  with  the  pos- 


I  sible  creation  of  a  Cabina-lev- 
el  intelligence  direaor's  post, 
the  Bush  administration  is 
preparing  to  establish  a  Na¬ 
tional  Counter  Terrorism  Cen¬ 
ter.  which  could  incorporate 
the  CIA’s  Terrorist  Threat  In¬ 
tegration  Center  and  other 
personnel  from  that  agency. 
But  questions  about  lines  of 
authority.  IT  systems  integra¬ 
tion  and  a  host  of  other  issues 
have  TTIC  Director  John 
Brennan  concerned. 

Any  information-sharing 
system  must  be  “based  on  a 
clear  understanding  of  who  is 
responsible  for  what,”  Bren¬ 
nan  told  members  of  the 
House  Selea  Committee  on 
Homeland  Security.  There 
also  has  to  be  an  overall  blue¬ 
print  for  IT  investments,  in¬ 
cluding  strategic  prioritiza¬ 
tion.  interoperable  hardware 
and  software,  and  role-based 
data  access.  Brennan  said. 

Even  without  the  confusion 
that  might  arise  from  organi- 


Two  Remits  Criticize  DHS 
For  Lad(  of  Progress  on  IT 


syutMoa  llwl  are  2S  yaars  aH . . . 
ORACLE  aaU  A  opMto  wNhto  tha 
aadthreamoirthatoralaulada' 
toyad  aal  ol  butonasa  appicatiom 
toloreft  far  nUtoa  urere  In  ftw 
USh  Tha  aaftwart  wwa  britfiRy 
duatotoilptoatyaar. 


Aa  Ibe  dabato  about  addtoo  8  na¬ 
tional  jntoNpBnce  dbador  pro* 
ceadi  tvto  gmummant  nports 
are  ahaddno  new  IgM  on  an 
■daano  dNrama;  If  OHS  CX) 
Steren  Cooper  can't  wrasRe  that 
agency's  apraadno  bureaucracy 
jntoaubntoaion.cananyfTrean- 
agar  ba  eqwetod  to  twip  Rx  the 
nation's  praUens  wih  ftaring  of 
MormaBon  about  tarmtori? 

In  Jdy.  tfto  DHS  bapector 
Oanaito  laatod  a  report  conclud¬ 
ing  diat  Coopar  ddiT  hava  the 
poUlaitctomni^lodBtatop 
anonlatpilBeirchftBcItoteftB- 
gitobiQ  the  IT  ayatonia  of  the  22 
agancteiwtfeinOtoOHS. 

Cooper  %  not  a  maaifaBral 
dto  senior  manaoernant  toam 


wtti  aulhoniy  to  stntogicaly 
nwnaga  daparbnanMde  toch- 
notogy  anets  and  proonma,* 
tha  Mapedor  ganeraTs  report 
sabLkaddadthafthereknofcv- 
mairepomngrataabraHpbe- 
twaan  Cooper  and  the  dOa  of 
rmforOHSdMftons. 

In  another  report  tvi  was 
atornKlad  to  Contpaai  on  Aug.  6 
and  fliadi  puUto  last  wbNl  dia 
GoremrnetdAcoounlaMy  Oh 
AGs(6AO)fowd  that  fto  DHS 
*doaa  not  yat  have  d«  naoaaaary 
archAadunlhluapiMtoefiBc- 
bvety  guhto  aid  oonabato  ito 
ong^  biBlnaaa  banafornitoion 
afforta  and  da  fwidradi  of 
rnSone  of  dolaa  d«t  I  iilmael- 
tog  nauppoifho  totomtoNon 


:  zational  changes,  homeland 
security  and  intelligence  agen 
cies  are  struggling  to  over¬ 
come  IT  problems,  Brennan 

added.  'The  issues  he  _ 

cited  include  “a 
plethora  of  legacy 
information  systems 
and  networks . . . 

[that]  impede  inter¬ 
operability." 

Brennan  noted 
that  TTIC  analysts 
use  22  federal  net¬ 
works  that  are  divid¬ 
ed  into  “sanctums.*' 
which  let  them  ac¬ 
cess  data  only  on  a 
need-to-know  basis. 

Smashing  organizational 
stovepipes  is  important,  but 
“it’s  not  suflident  to  share 
hard-copy  information."  he 
said. 

Some  members  of  Congress 
also  fear  that  the  proposed 
changes  might  complicate  the 
DHS’s  ongoing  effort  to  con¬ 
nect  state  and  local  officials  to 
the  new  Homeland  Security 
Information  Network. 

'IVo  weeks  ago,  the  DHS 
hosted  a  gathering  of  more 


technology  flpsels.* 

Accord  to  the  GAO.  the 
DNS's  IT  UuBprlnl  Is  miaBbio 
moil  of  the  contort  ftooeasiry  to 
biconrtderedawrihMnedir- 
chitoctore.‘T1ie6AOdo8o1)adil 
asThorenkofanantolginit- 
Hon  of  d«  oMing  McNtocturaB 
thit  sevnl  of  OHS^  pndeoM- 
soragandaiabndyhad.' 

In  1  wiilton  faponai  to  the  in- 
apector  gmanTs  report.  DH6 
deputy  aacntary  AdPR.  Janw 
Uydaiqreadwdhdienoan)- 
mandallDn  dal  Coopv  ahoiAj  ba 
part  of  dll  Hrtor  eneudw  tavn 
reporting  dbvdy  to  hbB.  The  ao 
to  ”11111^  an  bdrepto  mnter  al 
each  leirel  of  da  IT  bwHbnert 
mtowprDGM,‘lBy<braf& 
HaOHSadmdiMda 
probfenawMitoarttopitoav- 
cNtocbii  to  a  itoponn  to  da 
GAO^a  report  Gut  da  agency 


than  300  state  and  local  offi¬ 
cials  in  Washington  to  train 
them  to  handle  classified  fed¬ 
eral  information  that  will  be 
made  available  on  the  na- 
work.  said  Patrick  Hughes,  as¬ 
sistant  seaeiary  for  informa¬ 
tion  analysis  at  the  DHS.  The 
network  is  currently  beti^  de¬ 
ployed  and  should  be  fully  in 
place  by  year's  end.  he  added. 

Even  so.  "I  don’t 
think  we  have  licked 
the  problem  of  com¬ 
plete  coordination 
between  the  federal 
government  and 
with  the  state  and  lo¬ 
cal  government  and 
private-seaor  cus¬ 
tomers  for  finished 
intelligence."  said 
committee  chairman 
Rep.  Christopher 
Cox  (R-Calif.). 

At  the  FBI.  there  is 
still  a  basic  need  for  secure 
communicatioos.  said  Mau¬ 
reen  Baginski,  the  agency’s 
executive  assistant  director 
for  intelligence.  “Our  biggest 
need  is  secure  communica¬ 
tions  to  our  field  offices  and 
for  secure  [communications 
fKilities]."  she  said.  “In  order 
to  join  this  large  intelligence 
community  and  be  a  healthy 
node  on  this  network,  we  have 
to  be  able  to  operate  in  the  en¬ 
vironment.'*  048S63 


added  IMIheBAOM  mar 
9fadlbpragraaeagBlnat^am- 
afedc'Bdieclaaamofheiacom- 
mhenalM  tie  tm  aanlan  0*  da 
anMackatmuidba. 

SMadiUratannrCIOal 
Ann  noducta  he.  and  6ananl 
Mokn  Conx'd  Eunpaan  opata- 
Am,  ok)  da  ladaal  gownh 
aanldiapaieWrnadaaculkf' 
aldaiineLlala,<dBleiMnnan 
id  San  Joartaaad  n  aatvkaa 
tmetabalOnSyahnaUS*. 
nM  dal  ha  haa  aain  da  aana 
pratihim  h  da  pMa  aachr. 

1  have  aaan  hninnhla  ea- 
anvhaciddaoigadDltanal 
inMaehadnnh|riaiga«gr 
idzadoa,  and  I  Imalsii  aaen 
aome  Inad)  aidiM  hnn  da  tap 
whfchhpnttaddapiiiUBin.* 
ha  OU. -nua  b  hPI  an  IT  pnh 
Ion.  I  k  a  ouduta  pnHtaii' 

-ChnMilon 
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In  Storm’s  Wake,  Ra. 
IT  Managers  See  Need 
For  Telecom  Upgrades 

Communications  problems  complicate 
recover)'  efforts  after  Hurricane  Charley 


BY  LUCAS  MEARIAN 

As  Hurricane  Charley  blew 
through  Port  Charlotte.  Fla., 
on  Aug.  13.  Kathleen  Russell  , 
stood  in  a  dark  closet  15  miles 
away  with  a  flashlight  in  one 
hand  and  a  cell  phone  in  the 
other.  She  was  trying  to  find 
out  if  the  databases  at  the 
insurance  agency  where  she 
works  could  be  restored  in 
time  to  handle  claims  from 
its  15.000  customers. 

Russell’s  company,  Key 
A^ncy  Inc.  in  Engl^ood. 
Fla.,  had  contracted  with  a  dis¬ 
aster  recovery  services  firm  to 
replicate  its  customer  data  to  a 
backup  facility  in  Massachu-, 
setts.  Workers  there  were  able 
to  restore  the  agency's  data 
within  10  hours.  That  to  me 
just  boggles  the  mind,”  said 
Russell.  Key’s  office  manager. 

IT  mana^rs  in  the  areas  bit 


by  Charley  said  last  week  that 
although  storm  took  an 
unexpected  path  through  the 
center  of  the  state,  they 
weren't  wholly  unprepared 
because  of  lessons  learned 
from  Hurricane  Andrew  12 
years  earlier.  For  example, 
they  said,  Andrew  taught  them 
to  geographically  disperse 
their  data  center  operations. 

But  Charley  taught  some 
new  lessons,  such  as  the  need 
to  improve  communications. 

Dennis  Klinger,  CIO  at 
Florida  Power  &  Light  Co.  in 
Juno  Beach,  said  800.000  of 
the  utility's  4.1  million  cus¬ 
tomers  in  western  and  south¬ 
ern  Florida  were  without  pow¬ 
er  last  week.  Recovery  opera¬ 
tions  were  going  remarkably 
smoothly  b^use  of  an  abun¬ 
dance  of  planning  and  past  ex¬ 
perience,  Klinger  added. 


But  there  were  some  things 
that  Klinger  hadn’t  counted 
on.  "We  use  various  cell  and 
wireless  providers.”  be  said. 
"All  of  them  experienced  some 
very  serious  damage."  Broken 
connectivity  between  cellular 
towers  hampered  the  ability  of 
the  utility’s  emergency  crews 
to  communicate,  he  said. 

Florida  Power  &  Light’s  800 
IT  workers  had  several  means 
of  communication,  including 
radios,  cell  phones  and  satel¬ 
lite-based  phones.  But  Klinger 
said  they  experienced  band- 
width-clogging  traffic  levels, 
particularly  with  the  satellite 
phones.  “We  need  to  look  at 
more  reliable  and  wider-band- 
widlh  satellite  communica- 
tiorts  that  we  can  implement 
more  quickly."  he  said. 

Marvin  Shumacher.  director 
of  information  systems  at 
Heart  of  Florida  Regional 
Medical  Center  in  Davenport, 
just  outside  Orlando,  said  last- 
mile  network  issues  affected 
communications  at  the  hospi- 
taL  The  electric-powered  cop¬ 
per  wires  running  into  the 
building  were  knocked  out  of 
service  by  the  storm,  he  said. 

But  the  hospital's  network, 
data  center  and  radiology 
imaging  systems  remained 


Ford  Abandons  Oracle  Procurement  System 

Switches  back  to  j  mainframe  applications.  “We 
completed  an  evaluation  of  all 
the  production  and  nonpro¬ 
duction  procurement  systems 
and  made  the  decision  to  tran¬ 
sition  back  to  the  proven,  cur¬ 
rent  system."  Wood  said. 


mainframe  apps 


BV  MABC  L.  SOMOmt 

Ford  Motor  Co.  is  pulling  the 
plug  on  a  4-year-oid  procure¬ 
ment  system  based  on  Oracle 
Corp.’s  software  and  switching 
all  purchasing  operations  back 
to  the  mainframe  applications 
that  the  newer  technology  was 
designed  to  replace. 

Ford  has  invested  unspeci¬ 
fied  millions  of  dollars  in  the 
system,  which  was  dubbed 
Everest  and  built  around  Ora¬ 
cle’s  databases  and  business 
applications.  But  Ford 
spokesman  Paul  Wood  last 
week  confirmed  that  the  au¬ 
tomaker  has  decided  to  shut 
down  Everest  and  return  the 
purchasii^  processes  that 
were  being  run  on  the  system 
to  a  set  of  custom-written 


Dot-Coin  Era  Origins 

The  development  of  Everest 
began  in  1999,  at  the  height  of 
the  dot-com  era.  According  (o 
Wood,  the  project  was  sepa¬ 
rate  from  Covisint  Inc.,  a  Web- 
based  business-to-business  ex¬ 
change  for  the  automotive  in¬ 
dustry  that  Ford  and  Oracle 
helped  create.  Covisint  is  now 
owned  by  Compuware  Corp. 

Wood  said  Ford  staned  to 
go  live  with  the  system  in 
2000.  He  declined  to  say  how 
many  suppliers  or  internal 
business  units  the  system  sup¬ 
ports,  but  he  iK)ted  that  the 
teefanoU^  is  widely  used  in 


some  form  throughout  Ford. 

Wood  also  wouldn’t  com¬ 
ment  ^ut  any  problems  with 
the  system.  But  sources  indi¬ 
cated  that  Everest  was  ham¬ 
pered  by  poor  performance. 

Ford  now  pl^  to  migrate 
some  features  from  Evetest  to 
its  mainframe  system,  using 
in-house  developers.  Wood 
said  the  company  had  contin¬ 
ued  to  run  the  malnfiame- 
based  procurement  software 
in  tandem  with  Everest. 

Oracle  issued  a  terse  state¬ 
ment  about  Ford’s  decision  to 
send  Everest  to  the  scrap 
heap.  “Oracle  continues  to 
suppon  Ford  on  its  back-to- 
basics  strategic  initiatives  and 
IT  projeas.”  the  statement 
said.  “Given  our  desire  to  hon¬ 
or  a  nondisclosure  agreement 
in  eflect,  it  would  be  inappro¬ 
priate  for  Oracle  to  comment 
on  any  specifics."  O  48898  ! 


„ICI.,  .....  Pori  Cbaflone  anil  ainerwrls 

01  riofida  and  letl  up  to  I  million  peooia  wrihotil  power 


online,  running  off  of  rack¬ 
mounted  battery  units  from 
American  Power  Conversion 
Corp.  in  West  Kingston.  R.1, 
while  backup  power  genera¬ 
tors  kicked  in. 

Heart  of  Florida’s  parent 
company.  Health  Management 
Associates  Inc.  in  Naples.  Fla» 
also  operates  Charlotte  Re¬ 
gional  Medical  Center  in  Pun- 
ta  Gorda  —  the  area  that  was 
hit  hardest  by  Charley. 

Because  of  the  storm’s  er¬ 
ratic  path,  the  Charlotte  facili¬ 
ty  didn't  have  time  to  evacuate 


73  patients  or  its  staffbefore  it 
hit.  Shumacher  said.  Charlotte 
Regional  lost  power  as  well  as 
its  roof  and  the  windows  on 
its  second  and  third  floors. 

But  Health  Management  As¬ 
sociates  replicates  data  from 
its  hospitab  to  backup  data 
centers  in  Atlanu  and  Boul¬ 
der.  Colo.,  according  to  Shu¬ 
macher.  Company  workers 
used  the  baclmp  dau  and 
portable  generators  to  restore 
Charlotte  Regionsf's  systems 
by  tbe  middle  of  last  week,  he 
said.  04S95B 
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Broadcaster  Sues  EDS 
Over  CRM  Contract 


U.K.  satellite  TV  com|>any  claims  firm 
failed  to  fulfill  system  development  deal 


BVMAftC  L.  SOMSINt 

The  U.fS  LARGE5T 
satellite  TV  broad¬ 
caster  sued  Elec¬ 
tronic  Data  Systems 
Corp.  last  week  over  a  S109 
million  CRM  development 
contract  that  was  signed  in 
late  2000  and  then  terminated 
two  years  ago. 

London-based  British  Sky 
Broadcasting  Group  PLC 
said  it  had  filed  a  legal  claim 
against  EDS  for  “deceit,  negli¬ 
gent  misrepresentation  and 
breach  of  contract"  during  the 
implementation  of  a  CRM  sys¬ 
tem  designed  to  support  oper¬ 
ations  at  BSkyB’s  call  centers. 

A  company  spokesman  de¬ 
clined  to  disclose  the  amount 
of  money  that  BSkyB  is  seek¬ 
ing  from  EOS. 

BSkyB  severed  its  relation¬ 
ship  with  EDS  in  early  2002 
after  the  IT  services  firm 
“fiuied  to  perform  its  contrac¬ 
tual  obligations."  according  to 
a  statement  issued  by  the 
broadcaster  last  week.  After 
the  deal  was  ended.  BSkyB 
subsidiary  Sky  Subscribers 
Services  Ltd.  took  over  inte¬ 
gration  work  on  the  CRM 
protect,  which  is  expected  to 
be  completed  “in  the  near  fu¬ 
ture,"  the  company  said. 

Contract  Tniiiiiles 

The  lawsuit  b  another  poten¬ 
tial  black  eye  for  EDS.  which 
has  been  struggling  with  prob¬ 
lematic  contracts  such  as  iu 
intranet  deal  with  the  IJS. 

Navy  and  an  agreement  to  de¬ 
velop  a  voice-over-IP  network 
for  The  Dow  Chemical  Ca 
Dow  and  EDS  agreed  to  end 
their  contract  in  July,  and  Dow 
this  month  named  IBM  to  take 
over  as  lead  contractor 
[QuickLink  48668}. 

EDS  spokesman  Malcolm 
George  said  the  Plano.  Texas-  i 
based  company  had  yet  to  re-  ! 
cetve  BSkyB’s  lawsuit.  But  he 


I  added  that  EDS  denies  its  for- 
!  mcr  client’s  claims  and  is 
ready  to  fight  in  court.  “We're 
going  to  vigorously  defend  our 
position,  and  there  will  be  a 
counterclaim  in  the  several 
millions  of  (British]  pounds 
for  unpaid  bills,"  George  said. 
“It's  absolutely  outrageous." 

BSkyB  said  it  filed  the  law¬ 
suit  after  settlement  discus¬ 
sions  between  the  two  compa¬ 
nies  foiled.  At  issue  is  a  system 
that  was  to  be  built  around 
hardware  from  Sun  Microsys¬ 
tems  Inc.  and  CRM  software 
from  Cupertina  Calif-based 


I  Chordiant  Software  Inc., 

'  which  specializes  in  business- 
to-consumcr  applications. 

The  BSkyB  spokesman  con¬ 
firmed  that  the  Chordiant 
software  is  still  being  used, 
but  he  declined  to  offer  fur¬ 
ther  details  about  the  project. 
When  the  deal  with  EDS  was 
announced  in  2000,  BSkyB 
said  it  planned  to  use  the 
CRM  system  to  integrate  dis¬ 
parate  data  sources  aivd  create 
more  comprehensive  cus¬ 
tomer  profiles.  In  addition,  the 
company’s  subscribers  would 
be  able  to  access  information 
such  as  account  and  billing 
data  via  phone  calls,  the  Web 
or  interactive  TV  services. 

Although  the  contract  with 


EDS  was  valued  at  SI09  mil¬ 
lion.  BSkyB  said  in  its  state¬ 
ment  that  it  has  spent  a  total 
of  S310.8  million  on  software, 
s>'stcms  integration,  inira- 
structure  costs  and  a  revamp 
of  its  call  center  focUities.  The 
company  expects  to  spend  an¬ 
other  S91  million  during  the 
next  four  years  to  finish  the 


Tools  to  let  users 
find,  fix  flaws  in 
network  devices 

•V  JAIKUMAn  VMAVAN 
AND  PATKICK  TMIBOOCAU 

Hewlett-Packard  Ca  last  week 
said  it  plans  by  year’s  end  to 
offer  a  security  vulnerability 
scanning  and  remediation  ser¬ 
vice  that’s  designed  to  help 
companies  identify  and  fix 
weak  spots  on  their  networks. 

The  as-yet-unnamed  service 
will  be  based  on  technology 
called  Active  Countermea¬ 
sures.  which  HP  has  been  test¬ 
ing  internally  for  more  than 
two  years,  according  to  Tony 
Redmond,  vice  president  and 
chief  technology  officer  at  the 
HP  Services  business  unit. 

The  scanning  tools  will  al¬ 
low  IT  managers  to  identify 
flaws  in  any  devices  on  their 
netvforks,  including  servers. 
PCs  and  "transicnify"  con¬ 
nected  products  such  as  hand¬ 
held  computers.  Redmond 
said.  It  can  also  protect  net¬ 


works  via  measures  such  as 
installing  patches,  imposing 
network  access  restrictions  or 
quarantining  vulnerable  or  in¬ 
fected  systems. 

The  move  by  HP  will  put  it 
in  a  crowded  field.  IBM.  Com¬ 
puter  Associates  international 
Inc.  and  IT  security  vendors 
such  as  Iniemet  Security  Sys¬ 
tems  Inc.  and  Quafys  Inc.  offer 
similar  services  or  products 
for  automated  vulnerability 
assessment,  discovery,  reme¬ 
diation  and  reporting. 

Whether  HP  would  have  an 
advantage  over  its  rivals  will 
I  depend  on  the  specifics  of  its 
offering,  said  Rusty  Robinson. 


HP  is  among  the  larger  ven¬ 
dors  to  offer  such  a  service 
is  noteworthy,  said  David 
Krauthamer,  director  of  infor¬ 
mation  services  at  Advanced 
Fibre  Communications  Inc.,  a 
maker  of  telecommunications 
equipment  in  Petaluma,  Calif 
The  maiket  has  been  pretty 
niched  so  for."  Krauthamer 
said.  “HP  can  certainly  bring 
their  clout  and  scale  to  the 
market." 

Broad  Access  Needed 

But  the  "foirly  wide  access"  to 
internal  systems  that  HP  or 
other  providers  of  such  ser¬ 
vices  would  need  makes  the 


- vices  woura  neea  maxes  tne 

a  technical  manager  at  Intrado  offering  a  no-go  at  Danfoss 
Inc.,  a  Longmont.  Colo.-based  I  A^  said  Brian  Andersen,  a 
provider  of ‘>-1-1  systems  progra 

infrastnicturesys-  Jf  UP _  mcratthcDen 

terns  and  services.  nr  mark-based  ma 

HP  “would  just  be  ■  #towax  ufocturer  ofhy- 

one  more  compa-  umhia  in  ftio  draulic  systems 

ny  in  the  market-  anUTOnemine  compressors  at, 
place  10  g«  those  SBCUIIty  SpaCB.  other  industrial 
services  from," 
be  said. 

Thefoct  that 


PETC  uNDsntoy. 

ANALYST.  SPIRE  SECURITY 


systems  program¬ 
mer  at  the  Den¬ 
mark-based  man- 
ufocturer  of  hy¬ 
draulic  systems, 
compressors  and 
other  industrial 
equipment  Oan- 
foss  does  its  own 
vulnerability  test- 
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rollout  and  maintain  the  CRM 
system  for  its  subscriber  base, 
which  now  stands  at  about 
7  million.  O  40922 
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HP  to  Offer  Vulnerability  Scanning 
Service  as  Part  of  IT  Security 


ing.  a  job  it  wants  to  keep  in- 
house  "so  we  knqw  ourselves 
what's  going  on  and  how  to  fix 
it."  Andersen  said. 

The  new  service  isn't  HP's 
first  foray  into  IT  security. 
Since  last  September,  it  has 
bought  security  tools  through 
acquisitions  of  Baltimore 
Te^ologies  Inc^  Novadigm 
Inc.  and  IVuLogica  Inc. 

But  so  far.  HP  has  done  a 
poor  job  of  articulating  how  it 
plans  to  use  the  technologies 
to  benefit  users,  said  Pete 
Lindstrom.  an  analyst  at  Spire 
Security  LLC  in  Malvern,  Pa. 

“HP  could  probably  be  a  for- 
I  midableplay^  if  they  wanted 
ta"  Lindstrom  said.  But.  he 
added,  “HP  seems  to  wax  and 
wane  in  the  security  space." 
Less  than  a  year  after  the  Bal¬ 
timore  Technologies  purchase, 
for  instance,  “you  just  don’t 
hear  about  the  technology 
anymore,”  he  said 

Raymond  said  HP  plans  to 
roll  out  a  suite  of  identity 
management  tools  next  year 
based  on  technology  from  Bal¬ 
timore  and  TVuLogica.  It  alw 
is  settii^  up  a  'lYusted  Com¬ 
puting  initiative  designed  to 
deliver  securely  configured 
hardware  and  software  to 
users,  be  said  O  48967 
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Motorola  Uses  ILM  Tools  to  Control  Database  Growth 


Software  migrates  data  otT  its  sen'ers  to 
cut  capacity  needs,  boost  performance 


•V  LUCAS  MCARIAN 

Motorola  Inc.  last  week  said  it 
has  completed  the  second  of 
four  phases  in  a  planned  com- 
pan)n<nde  rollout  of  informa* 
lion  life-cycle  management 
(ILM)  sof^re  that  has  cut 
the  size  of  production  data¬ 
bases  by  as  much  as  50%  in 
some  business  units. 

The  database  reductions  are 
enabling  Motorola  to  stave  off 
additional  server  and  storage 
purchases  as  the  company 
consolidates  its  hardware  in¬ 
frastructure  by  moving  sys¬ 
tems  from  remote  locations  to 
a  data  center  in  Chicago,  said 
Bill  Brewer,  global  IT  configu¬ 
ration  manager  at  Motorola’s 
Personal  Commimications 
Sector  (PCS)  business  unit. 

The  ILM  rollout  should  also 
help  Motorola  better  meet  the 
financial  reporting  require¬ 
ments  of  the  Sarbanes-Oxley 
Act  by  keeping  dau  online 
and  easily  accessible  without 
eating  up  space  on  application 
servers,  according  to  Brewer. 

He  declined  to  disclose  the 
cost  of  the  project,  other  than 
to  say  that  it's  a  multimiUion- 
doUar  initiative. 

Schaumburg,  llL-based  Mo¬ 
torola  is  using  OuterBay  Tech¬ 
nologies  Inc.’s  Application 
Data  Management  software  to 
manage  data  growth  in  ERP 
systems  built  around  Oracle 
Corp.'s  databases  and  E-Busi- 


Reasons  for  adopting 
ILM  and  database 
archiving  tools 


ness  Suite  applications.  Brew¬ 
er  said.  Historical  customer 
account  information  is  auto¬ 
matically  migrated  from  pro¬ 
duction  databases  running  on 
Sun  servers  to  EMC  Corp.’s 
Symroetruc  disk  arrays. 

“As  Oracle  applications  ma¬ 
ture,  you  use  more  disk  space 
...  so  you  will  be  taxing  your 
database  at  a  higher  level.” 
Brewer  said.  “There’s  only  so 
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Duke 


I  value  can  be  gained  from  the 
open-source  community."  said 
Charlie  Ward,  the  utility’s 
manager  of  technical  architec¬ 
ture.  He  added  that  because 
Duke's  developers  have  been 
active  users  of  open-source 
software,  they  now  want  to 
give  something  back  to  open- 
source  devel(^>ers. 

It's  dilHcult  to  gauge  how 
many  other  user  companies 
have  turned  signiftcant  appli¬ 
cation  development  initiatives 
into  open-source  projects. 

Patrick  McGovern,  director 
ofSourceForge.net,  said  the 
site  gets  about  70  new  open- 
source  projects  each  day.  but 
it  doesn't  track  their  lineage. 
He  said  what  Duke  is  doing  is 
“certainiy  not  unique."  but  he 
couldn’t  provide  an  estimate 
of  how  many  similar  protects 
have  been  launched 

Eariier  this  year.  Brunswick 
CQrp.'s  Web  Den  Interactive 
(WDl)  technology  subsidiary 
used  SourceForgenet  to  re¬ 
lease  an  open-source  business- 
integration  engine  that  it  had 
built  to  help  connect  WDl’s  in¬ 
dependent  dealers.  But  Vernon 
HiUs.  DL-based  WDI  has  now 
released  its  application  inte¬ 
gration  tool  as  a  commerciaJ 
product,  called  Redberri  said 
a  WDI  spokesman. 

Mark  Driver,  an  analyst  at 
Gartner  Inc,  said  be  heard 
about  individual  programmer* 

gening  permission  ftom  their 


much  tuning  you  can  do.  So 
it’s  either  rip  the  data  out  or 
do  something  else." 

Motorola  has  set  the  ILM 
software's  policy  engine  to 
migrate  data  that  hasn't  been 
accessed  by  end  users  for  15 
months.  The  IHDS  business 
unit  initially  rolled  out  Cuper¬ 
tino.  Calif.-based  OuterBay's 
software  in  its  China  opera¬ 
tions  in  2001  and  was  able  to 
cut  database  sizes  in  half 
there. 

The  company  completed 
the  North  America  rollout  of 


employers  to  make  software 
components  available  under 
open-source  licenses.  But  Dri¬ 
ver  said  he  hasn’t  seen  any  ma¬ 
jor  companies  make  significant 
portions  of  their  ctistom  devel¬ 
opment  work  open-source. 

Many  companies  have  been 
hesitant  to  rdease  their  work 
on  an  (^>en-source  basts  be¬ 
cause  of  intellecTuai  property 
concerns.  Driver  said.  He 
added  that  service  and  support 
are  also  issues  because  open- 
source  projects  require  com¬ 
mitment  of  time  and  money. 
"What  doesn’t  woric  is  just 
dumpily  the  software  onto  a 
I  developer  portal.”  he  said. 

Thomas  Murphy,  an  analyst 
at  Meta  Group  Iix:..  also  said 
that  lots  of  companies  have  re¬ 
leased  pieces  of  their  code  to 
the  open-source  comraunicy. 
But  he  doesn’t  think  many  will 
push  out  ftameworks  like  the 
one  Duke  is  releasing.  “Shar¬ 
ing  your  competitive  differen¬ 
tiators  normaliy  ts  seen  as  a 
bad  idea  in  commercial  enti¬ 
ties."  Murphy  said. 

Seeking  Support 

But  Duke  doesn’t  view  the 
framework  as  a  competitive 
advantage.  “Duke  Power  is  not 
a  software  company.  We’re  an 
energy  company."  Ward  said. 
“We’re  more  interested  in  get¬ 
ting  continued  support  from 
the  cq>en-source  community 
to  improve  our  software." 

The  idea  for  the  open-source 
contributioo  took  shape  as 
Duke  began  to  define  an  enter¬ 
prisewide  architoctute  to  sup- 


the  software  in  mid-July  and 
plans  to  fmish  similar  projects 
in  European  and  South  Ameri 
can  operations  by  the  end  of 
2005,  Brewer  said 
He  added  that  the  rollout 
in  North  America  has  boosted 
performance  on  the  PC:S  unit's 


Oracle  database  servers  by 
62%.  mostly  as  a  result  of  the 
reduction  in  data. 


At  the  Bleeding  Edge 

Ray  Paquet,  an  analyst  at 
Stamford.  C^ona-ba^  Gan- 
ner  Inc.,  said  database  archiv- 


port  its  business  needs  and  re¬ 
duce  development  costs,  ac¬ 
cording  to  Ward.  Duke  wanted 
a  common  frameworic  to  en¬ 
force  consistency,  reduce  the 
amount  of  wort  its  developers 
need  to  do  and  help  them 
transition  ftom  Microsoft’s 


Visual  Basic  6  to  the  object- 
oriented  development  tools 
they  will  use  with  the  newer 
Visual  Studio  J4et  technology. 
The  framewort  that  Duke 


will  release  under  the  open- 


source  Common  Public  Li¬ 
cense  includes  a  data  abstrac¬ 
tion  and  data  access  layer 
exception  logging  (built  on 
Log4oei  open-source  technol¬ 
ogy);  EncrypcionHelper, 
which  aids  in  encapsulating 
encryptimiAlecryption  se¬ 
quences;  XMLHelper  for  seri¬ 
alization  and  deserialization  of 
objects  to  and  from  XML  and 
XML  schema  validation:  Secu- 


rityHelper.  for  authenticating 
and  authorizing  against  an  Ac- 


cwwniwi  9 


ing  products  from  companies 
such  as  OuterBay.  Princeton 
Softech  Inc  and  Appiimation 
loc.  are  still  on  the  bleeding 
edge  of  technology.  But 
they're  prompting  a  flood 
of  inquiries  from  prospective 
users,  he  added. 

Slow  database  throughput 
due  to  a  glut  of  data  is  “a  busi- 
ttess  problem,  not  a  technol¬ 
ogy  problem.”  Paquet  said. 

IT  maiiagers  r>eed  to  get  the 
business  side  involved  cariy 
^  on  to  decide  issues  such  as 
what  data  should  be  archived, 
herw  long  it  should  be  kept  and 
who  can  access  it  Paquet  ad¬ 
vised.  O  4M44 


tive  Directory  domain:  and  an 
XMLMessage  object. 

In  addition,  Duke  will  re¬ 
lease  modeb  and  Unified  Mod¬ 
eling  1  -angiij^p*  diagram^  that 
describe  bow  the  pieces  can  be 
used  with  JMet  applicatioQs. 
Demonstration  applications 
will  also  be  inchidifo.  as  will 
Microsoft’s  freely  available 
S(^L  Helper  Data  Access  tool 

To  spread  Uic  word  about 
its  open-source  contribution. 
Duke  platis  to  make  a  presenta¬ 
tion  next  month  before  the 
TSO-member  Enterprise  Devel¬ 
opers  Guild  in  Charlotte.  Marc 
Ginns,  a  lead  application  devel¬ 
oper  at  Duke,  said  the  company 
already  has  received  four  pages 
of  suggested  additions  and 
changes  to  the  frainewort  from 
guild  members. 

Bill  Jones  president  of 
the  guild  and  a  software  archi¬ 
tect  at  CJurlotte-based  Meta- 
Logix  Inc,,  said  a  group  of  de¬ 
velopers  in  the  local  Microsoft 
community  are  excited  about 
the  Duke  project’s  potential  to 
increase  productivity.  He  said 
the  "reference  architecture' 
will  let  the  developers  focus 
on  business  logic  instead  of 
low-level  plumbing. 

They’ve  put  together  sev¬ 
eral  key  components  common 
to  most  pnHects,  whether  Web 
Of  Windows,"  Jones  said  about 
Duke.  “They  worked  out  the 
architecture  and  thought 
through  bow  things  should 
wort  together.  I  won’t  say 
they've  solved  every  problem, 
but  they've  solved  a  lot  of  the 
big  ones."  O  48860 
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Microsaft  Delays 
Sre  Updates... 

Wcimtl  Cmv.  posHnnsd  Dm 
itwt  o<  automMic  dMbulion  of 
MMoin  XP  SonNco  Pack  2  Id 
corpofafa  iiaaci  aftar  IT  maiiaoora 
loU  Ika  (ondor  Dial  Ihor  noaM 
mora  Ikaa  to  canfigura  ayafoina  la 
hloek  llio  igatala  Many  campa- 
niaa,  aicfadtog  MM.  nam  la  dalay 
inMadaHona  of  SP2  anU  Ifiay  can 
laol  Ha  campaHHHy  vMi  diak 
appHcadona  (QiddilHi  daTTTl 
Mcnaafl  paaliad  back  Dm  laandi 
of  aalooialad  SP2  apdataa  far 
Wbabaai  XP  Praia  iilunal  from 
Hag.16lolMa«IMnoaday. 

. . .  And  Oisdoses 
PossMeApp  Issues 

MicfoaofI  bas  aka  pabHabad  a  Hat 
of  naaily  90  appicafloni  and 
pamoa  lhal  nay  naf  anib  praporty 
aflar  aaan  biataa  SPZ.  Iba  Hal  bi- 
cbidla  MkraaafI  pradacfa  Back 


HOT  TECHNOLOGY  TRENDS,  NEW  PRODUCT 
NEWS  AND  INDUSTRY  GOSSIP  BY  MARK  HALL 
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hic.  Tba  canMcfa  bnalva  a  Ibawat 
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CABuysPestPatrol 
To  Tar^  Spyware 

Conpalar  Aoaadataa  aald  R 
baa  aeqalrad  PialPalial  he.,  a 
Caifafa.  Pa.'baaod  danlapar  of 
aodapymro  aaflwara.  ba  an 
undheloaod  prha.  Cb  plana  la  h- 
caipoiala  MteaTa  pradacta 
hla  Ha  oTiaal  Ibraal  Man^ 
nionlaaflHaraBiHa.nHiidiln- 
cbidaa  laola  daifpoad  la  ptatacl 
caiparalanalaiorhaagabialvlrao- 
aa.  apam  and  happropriala  iM  of 
dia  Wab  by  amplayaaa. 

McAfee  to  Acquire 
IT  Security  Vnidor 


adian.  McMaa  he.  h  Santa  Clam. 
CaM„  aafd  ra  hipng  Faandalona 
he.  hr  SM  mOton  h  caak.  Mh- 
Man  Mala.  CaM.-haaad  ftmdalono 
■aOilldbaiialorilalacIhpandia-  I 


Rumote  App  Testing 
Comes  Home .. . 

...  far  Starwood  Hoteh  and  Resorts  Worldwiita  1^^ 

is  in  the  first  phase  of  automating  software  testing 
for  remote  users  of  its  homegrown  and  commercial 
applications.  According  to  Mark  Badcau.  manager 
for  enterprise  his  quahty  assurance  team  was 

"chailenged  by  the  testing  environment.”  That’s  an 


undersutement.  Sofhvare 
that  was  created  or  integrat¬ 
ed  centrally  at  the  White 
Plains,  N.Y.*based  company 
often  was  destined  to  oper¬ 
ate  remotely  at  one  of  the 
7S0  properties  in  80  coun¬ 
tries  that  Starwood  manages 
Gentry  the  end  users  to  put 
the  programs  through  their 


reset  the  system  for  the  next 
operation.  Reconfiguring  and 
preparing  a  computer  for  a 
test  once  took  hours  but  now 
takes  iust  a  moment  or  two. 
he  says.  Surgient  CEO  Bill 
Daniel  says  chat  later  this 
year  or  early  ne.xt,  Starwood 
and  others  can  use  an  up¬ 
graded  VQMS  with  out-of- 


•  V'  - - .-p..  vx.***-'  '*UII  UU(*UI* 

paces  without  major  logistics  the-box  integration  with  test 


hassles  was  a  pain.  Enter 
Austin-based  Sui^ent  Inc. 
Its  VQMS  technology  lets  re¬ 
mote  users  access  and  work 
with  an  application  through 


ing  tools  from  Seque  Soft¬ 
ware  Inc..  IBM’s  Rational  di¬ 
vision  and  Mercury  Interac¬ 
tive  Corp.  Pricing  starts  at 
around  S25.000.  But  think 


a-r  — - — OUl  minx 

a  browser  as  if  the  code  were  of  the  money  you  save  by 


running  locally.  Pam  Thorn¬ 
ton,  Starwood’s  director  of 
software  engiDeering.  says 
she  “was  comfortable  work¬ 
ing  with  a  young  company 
because  they  had  seasoned 
folks  who  understood  and 
leveraged  best  practices  for 
testing."  In  addition  to  the 
remote  user  access.  Badcau 
praises  VQMS  because  it  lets 
him  provision  a  test  machine 
and  lock  it  down,  run  the 
tests  and  then  automatically 


not  having  to  reprovision 
machines  for  every  test. 

And  those  hotel  bills  from 
end  users  visiting  the  testing 
center  will  disappear. 

Apple's  Resuraence  in 
Life  Sdences  May... 

...poMRsInagabirWall 
Straet  IT  umts  That’s  a  sce¬ 
nario  painted  by  Jeff  Augen. 
CEO  of  Turbo  Worx  Inc.  in 
Shdion,  Conn.  He  contends 
that  Apple  Computer  Inc.’s 


i  high-end  -  - 

I  Macs  have  “a 
I  (echnological 
T  head  start” 
i  over  Intel- 
based  ma¬ 
chines  be¬ 
cause  they’re 
fiilly  bA-bit 
and  “really.  I 

really  &st."  I 

That  head  ' 

start  appeals  to  oiganizations 
that  demand  high-perfor¬ 
mance.  clustered  systems.  In 
the  life  sdences  market.  Au¬ 
gen  foresees  dusters  of  Macs 
(and  Linux  systems)  using  bis 
company's  TbrboWorx  Enter¬ 
prise  technoic^  displacing 
multiprocessor  Unix  servers 
from  Sun  Microsystems  Inc 
and  IBM.  Michael  Swenson, 
an  analyst  at  Life  Sdences  In¬ 
sights.  an  IDC  company  in 
Framingham.  Mass.,  agrees. 
"We  see  an  uptick  in  interest 
in  Apple"  among  life  sdences 
users,  he  says.  But  Augen 
thinks  Apple  might  leverage 
one  success  for  another.  He 
claims  that  financial  services 
companies  with  high-perfor¬ 
mance  computing  ne^  are 
showing  serious  interest  in 
TurboWorx  Enterprise  to  de¬ 
ploy  and  manage  CPU-cycle- 
sucking  applications  —  even 
on  dusted  Macs  with  the 
Unix-based  OS  X  curating 
system.  That  doesn't  surprise 
Tom  Bartoa  He’s  the  CEO  of 
Rackable  Systems  Inc.  in  Mil¬ 
pitas,  Calif.,  whose  clustered, 
high-performance 
computers  appeal 
to  the  technic^y 
sophisticated 
users  on  Wall 
Street  Aird  while 
he  doesn't  have  a 
deal  now  for  Macs 
to  be  used  in  his 
advanced  low- 
power,  thermal - 
managed  racked 
systems,  he  “sees 
an  opportunity  to 
cooperate  with 
Apple  for  the  fi-; 
nandal  market" 


Industrial  Controls 
Meet  IT... 

...  in  a  new  managed  service 
from  Betruetad  inc.  The  New 
York-based  security  service 
provider  is  teaming  with 
mdustriaJ  controls  morutor- 
ing  company  Verano  Inc.  in 
Mansfield.  Mass.,  to  offer  the 
letter's  Industrial  Defender 
as  a  managed  service.  Indus¬ 
trial  Defender  is  a  security- 
hardened  Linux  appliance 
that  monitors  the  health  of 
industrial  machinery  such  as 
turbines.  Verano  CEO  Brian 
Ahem  says  speculation  about 
a  ‘‘combination  WU  plus  the 
East  Coast  blackout  is  more 
than  a  bad  dream."  He  argues 
that  the  nation’s  critical  infra¬ 
structure  splfers  from  "a  gap 
as  to  who’s  responsible"  wbra 
industrial  control  systems  can 
be  sabotaged  over  the  Inter¬ 
net.  Is  it  plant  operations  per¬ 
sonnel  or  staff  in  the  IT  data  , 
center?  Ahem  suggests  com-  ^ 
bining  the  roles  through  a 
managed  security  service. 

"nie  int^radon  of  Industrial 
Defender’s  data  and  alerts  into 
Betrusted’s  10  global  data  cen¬ 
ters  wiU  be  complete  in  <^. 

RackaUe  Scales  Out .. . 

. . .  Rs  aaraar  Hna  wHh  up  b  184 
S4-bR  laM  CPUs  bi  a  Uagb  neb. 
Late  this  month,  the  Scale  Out 
Server  Scries  from  Rackable 
Systems  will  add  Intel  Ck>rp.'s 
XeoD  64-bit  dual-processor 
chip  sets  to  the  32-bit  Xeon 
processors  from  Intel  and 
the  64-bit  Opteron 
chips  from  Ad¬ 
vanced  Micro  De¬ 
vices  Inc.  that  are 
already  available. 
Rackable’s  unique 
cooling  technology 
through  the  center 
of  the  rack  lets  you 
pack  more  proces- 
»ors  per  system 
than  most.  Pricing 
starts  at  S2.800. 
048696 
facfcibfe'sIMiMl- 


HP  Blades,  now  in  a  bundle,  which  is  exactly  what  you^ll  save, 


Sove  over  304  w,th  our  blade  bundle  leohrring  two  HP  ProLiont  BL20p  Blode  Servers,  powered  by  Intel*  Xeon“  processors  ond  get  the 
power  to  moke  network  monogement  simple  ond  offordoble.  You'll  sove  on  deployment  time  too,  thonks  to  this  reody.ogo  pockoge 
Sure,  modubr  design  leoves  room  to  expond  loter,  but  HP  Blode  Servers  con  olso  moke  o  big  impoct  on  your  total  cost  of  ownership  in  the 
meonhme  Our  monogement  softwore  boosts  productivity  ond  cuts  reconfigurotion  efforts  from  doys  to  minutes.  And  becouse  your  time 
.s  money,  the  BL20p  feotures  fully  redundont  technologies  to  reduce  cosrty  downtime.  While  our  #1  ranking  in  Intel’.bosed  servercustomer 
sahsfoctio,,  ,s  one  reoson  we  recently  become  the  first  to  sell  over  1 00,000  blade  servers,  there's  more  thon  one  reoson.  You  olso  get  the 
odvice  ond  support  of  HP  ond  our  locol  portners-well  before  ond  long  ofter  you  buy.  Even  when  you  buy  ot  more  than  30%  off 


Save  33% 

Gel  the  HP  ProLiont  BL20p  burndle, 
and  you'll  save  big  compared  to 
the  cost  of  buying  the  two  servers 
and  occessories  seporotely. 


J 


HP  ProUant  BL20p  BLADE 
SERVER  BUNDLE 


$8,999 


(2)  BL20p  Mode  Servers 
Each  Blode  Server  includes: 

■  (2)  Irtef*  Xeon-  processors  3.06GH2-512k 

-  (3)  10/100/1000  Nia  +  (1)  10/100  ao  nic 

-  1GB  DOS  memory’ 

*  p-Goss  blode  enclosure 


with  2  power  supplies 

*  AAini  bus  bor  kit 

•  (8)  Rapid  Deployment  Rick  licenses 
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SAP  Warns  Users 
About  Phony  CaJk 

S*PM<nrmdiano(ll>wpi- 
c«ii«  iM  la  pmMi  cadIdMtW 
FT  InfafimHon  la  paoala  wIm  cal 
Han  cWaHif  la  aarii  hr  Id 
■acMcal  auppait  tnaiii.  An  SDf 
apekaananHMaaaaialctia- 
dmaralMraealndchbaaak- 
iag  data  aidi  aa  lyadin  aecaaa 
cadaa.aalkainnhalliaillialn- 
Aainalan  naa  aaadad  d  oarrad 
ITpfaUaaia.HaialdSAPhaaH- 
Id  IndnaaHan  abad  (ha  calKa. 


IBMAsksJucteto 

OisfnissSCOCIami 

■Bn  aalad  a  OdMcl  Caul 
MudUdhddhnidihaddi- 
alcadiauctiamia  dial  Tha  SCO 
6faaaliic.niadalnlliaUiai- 
raladd  taiaaal  I  Had  agataat 
BM  dal  laar.  Undan,  Udk-baaad 
SCO.  adddicUna  dial  BH 
braaabadalMaSiiilaniVIcana- 
ing  daal,  dth)*!  ratura  call  aaali- 

lag  canmaid.  h  Man.  BM  aalad 
Dm  hdga  d  dandaa  a  daiai  dial 
I  had  ahlalad  Unta  cagirigMa 
laid  by  SCO;  a  dacMan  an  dial 
nqaaallaadlaandbia. 


Gartner  Lowers 
PC  Sales  ForeoBt 

Bardar  he.  ladaiad  Idiaaild- 
adda  PC  aMamad  hracaal  hr 
dila  yaar.  aayiag  that  Iba  markM 
amlgraaraanaicbaadhadpra- 
Hcddhacauaaafcanlinuliigaca- 
nandc  caaoania  In  da  (LS.  and 
adar  ragdaa.  Oailnar  naai  ai- 
pacta  ahhnanb  d  dcraaaa 
<S-#'b  yaar  awr  yaar.  daaiB  barn 
da  araiHaia  yrahcdan  at  0.4% 
inaadL  Rhal  aaarbal  raaaarch 
•na  BC  aaM  d-a  add  bracaadiig 
tS.5%  graaidi  d  PC  aMyrnanb. 


Short  Tates 

lOM  aaM  d  haa  agiaad  d  buy  taa 
Daahh  IT  aandaa  drtna  aa  pail 
af  a  aarha  at  daab  dal  indudaa 
a  Hhaa  IT  cManaalng  eaabad 
addiOanabaednlAShCapan- 
hagan. ...  NETSCAPE  CQMMUM- 
CATIONS  CORF.  lahaaad  daraian 
7.2g|ld«hblinwiar. 
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Attorney  Says  Sloppy  IT 
Deals  All  Too  Gammon 

Final  contracts  often  don’t  include 
‘guarantees’  made  during  sales  pitches 


BY  TMOMAS  HO^FMAM 

new  voAK 

Most  IT  contracts 
“are  atrocious, 
poorly  written 
and  stort  on  de* 
tails,”  according  to  attorney 
Mark  Grossman.  In  short,  he 
said  at  a  conference  here  last 
week,  “they're  a  breeding 
ground  for  litigation." 

The  breakdown  in  writing 
effective  contracts  b  largely 
the  fault  of  technology  buyers, 
said  Grossman,  chairman  of 
the  technology  law  group  at 
Becker  &  Poliakoff  PA  in  Coral 
Gables,  Fla.  He  added  that  IT 
and  contract  managers  often 
fail  to  apply  critical  negotia¬ 
tion  techniques,  such  as  en¬ 
suring  that  system  perfor¬ 
mance  promises  m^  by  ven¬ 
dors  in  response  to  requests 
for  propos^  (RFP)  are  in¬ 
cluded  in  final  agreements. 

Grossman  led  several  ses¬ 
sions  on  the  legal  aspects  of 
IT  C(Hitracts  at  the  conference, 
which  was  held  by  Share  Inc., 
a  Chicago-based  user  group 


whose  membership  b  primari¬ 
ly  drawn  from  IBM's  main¬ 
frame  customer  base. 

Part  of  the  problem  b  that 
vendors’  responses  to  RFPs 
are  usually  drafted  by  their 
sales  forces  to  help  clinch 
deals  with  users,  Grossman 
said.  Performance  and  support 
guarantees  offered  during  the 
RFP  process  are  often  omitted 
from  contracts  written  by  the 
legal  stafh;rs  of  vendors,  he 
noted. 

Vendor  Advantage 

It’s  a  common  occurrence, 
agreed  several  IT  managers. 

“We  do  it  all  the  time.”  said 
Earl  Johnson,  an  application 
programming  manager  for  the 
city  of  Dallas,  referring  to  the 
failure  to  fully  incorporate 
RFP  terms  into  contracts.  The 
main  reason  that  happens,  he 
said,  “b  the  need  for  expedi¬ 
ency  and  to  maintain  good  re¬ 
lations  with  the  vendor." 

Software  Ikensing  man¬ 
agers  and  other  tectoology 
buyers  usually  are  less  pre¬ 


pared  for  negotbtions  than 
vendors  are,  said  William  Sny¬ 
der.  an  analyst  at  Meta  Group 
Inc.  "If  you’re  in  negotiations 
with  a  software  vendor,  in  75% 
of  the  cases,  they  know  more 
about  your  company  than  you 
do."  Snyder  said. 

Grossman  said  it  doesn't 


What'Vbu 
Should  Do 

Confmics  ipMfcws  and 
attMidMi  effsrad  tte  foluwkig 
nspottaangg^ 

•ARgRtiMllMiZattMOl 

coMnds  w«lh  the  end  of  ven¬ 
dors' fiscal  quarters  to  get  the 
best  deals  possible. 


■  fndudeprmWonstDraecap' 
tance  lading  to  ensue  thaff 
products  mod  perfomtance  and 
functKmality  expectations. 

■  fifatowrathdaoftwM 
tkMV)^  contain  inteiectual 
property  that's  owned  by  another 
vendor  and  ent  bcertsed. 


■  Put  in  arrMng  thd  aeorea 
coda  Riuat  be  accessible  to  you 
company  though  a  source-code 
escrow  fimi. 


help  that  most  companies 
begin  n^tiations  at  an  im- 
medbte  disadvantage  because 
contract  drafts  are  typically 
crafted  by  vendors,  unless  the 
customer  b  a  Fortune  100 
company  with  considerable 
purchasing  clout 

‘We’ve  taken  a  different  ap¬ 
proach,"  said  an  IT  manager 
at  a  major  auto  manufacturer 
who  requested  anonymity. 

Last  year,  hb  company  hired 
Gartner  Inc  to  create  a  master 
service-agreement  template 
that  it  has  begun  using  in  ne¬ 
gotiations  with  a  group  of  four 
offshore  application  develop¬ 
ment  vendors. 

"Historically,  our  15  applica¬ 
tion  develc^ment  managers 
each  had  the  authority  to  ne¬ 
gotiate  such  deab  on  their 
own,”  the  IT  manager  said. 

I  The  master  service  agreement 
"should  give  us  more  unanimi¬ 
ty  on  contracts,"  he  added. 

But  the  new  approach  hasn’t 
been  a  siher  bullet,  the  IT 
manager  cautioned.  Since  the 
offshore  vendors  returned  the 
contract  proposab  with  sug¬ 
gested  chan^  five  months 
ago.  Ihtle  progress  has  been 
made  toward  finalizing  the 
agreensents. 

The  IT  department  b 
ready  to  ga"  be  said,  but  he 
added  that  a  busy  workload 
for  the  company's  contracts 
and  legal  team  b  "holding  up 
the  whole  process."  O  48923 


Microsoft  Tries  to  Cozy  Ik)  to  Makiframe,  iSeries  Users 


Al  the  Shm  oocilmna  M 
»gellMlcniaallCorti.an- 
muiced  HI  uraradi  0*  lb  Host 
Inbgnlan  Sarar  sobmn  Ini'! 
doIgnadloinitolMilertor 
urns  b  M  WIndOM  sysbiiB 
wlh  GM*!  imiilrinK  and  & 
absmlilaiigasanga. 

HoMMagnllonSanarZOCM 
ndudasnawTiaffiacInilnlr 
grab,  dMloiiniml  bob  dal  an 
nb|iM*l  obi  Wcmaaira  JM 
Fwibmli  and  VbuM  Sub) 

JM  tadnabgba.  Tin  bob  can 
bn  land  b  ban  maMliim  and 
ISedKapiiicilmlnbllML- 
tiaHdWil)amlcgB.ddlwl 
(radud  naragar  Sbvgn  Ikitb 

Ihg  uggndi.  Mkmaoiri  fea 


:  b tail iinn.b dun Sm land 
«i  be  Mlabb  b  bolli  anted 
and  gntapibB  adbons.  nidng  Is 
S2499  nr  pnoagao,  far  In 
aanted  adben  and  18.999  n, 
CPUbrInantepreencbaoe. 

•Mdi  bdubs  U  aunt  br 

Timadbn  bdngiaor  plus  a 
budge  bstnesn  Mmiaull's 
beesagsiTueiaig  aoRnm  end 
BiraWbbSptemMOprgduct 
MndbemdalininuBare 
bokpeilbi'hlglHaudi'ba- 
bg  pngnn  «Ms  odan  betel 
beta  vaaons  a  In  icgnda 
Ikn  a  In  bglHooch  ueeis 
MB  bm  Tagitenig.  a  plafcnn 
•<MeciaFlsavLaMaK.a 
Kbg  a  Pluaeb.  PS.-baned  If*  a 


Fberv  he.  Ini  aefc  aaiMn  for 
InaubnnblBbancbgtadue- 
ly. -Our  bteea  b  In  pradua  b 
pdnaiy  for  lb  sppicabn  bb- 
gmoncspablteBMIiCICS 
tedralagy' he  and.  rebnbg  b 
on  a  BN’S  mnaclbn  man- 
egemenlayetem. 


laaSmemSeiTaceehc. 
(TSYS).  edikli  pnMdn  ebdnn- 
e  nymnl  prucaang  aanbae. 
uaea  HM  bbgnlbn  Sana  b 
provide  up  b  4.000  anphygea 
sHi  accaiB  b  nablnin  data 
onMrWndUMPCiTbiKely. 
dnebr  a  dbMuiad  tacbnao- 
gbealSy&aldlaMbb- 


aabn  capabBbe  bu*  tab  da 
new  leleag  la  la  CaunbuB. 
Oa-biaBd  conpany ‘apoa  ou, 
apnbbWnWngniainliann- 
baaaddatitanalNg.' 

Hoa  btoipabn  Semr  has 
beansabe^taMcnaara 
Praduclinbuibbsomtag 

monlntesabgwBilnup- 

ondniaidmaCyKaly.anana- 

lyaaBubnftoupbMklMb 

LMillaadBtanataaluaa 

'naynabagbmrous.ba 

lnyTglmpo,tel.'lniaid. 

CnWyaddsdliabaaigncls 
VnybaaAhyoanpanbo'be- 
Inaen  Mcnnai  and  an  nhid) 
aibn  abia  fanctanby  b  Ita 
MhSphanpraibiabn. 
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Continued  from  page  I 

People^ft 

dor.  and  our  business  depends 
on  them,  but  there  is  still  a  lot 
of  evolution  for  the  merged  or¬ 
ganization  that  has  to  go  on." 

Pond  is  director  of  informa¬ 
tion  services  at  Schnitzer  Steel 
Industries  Inc.  in  Portland. 
Ore.,  and  the  new  president  of 
Quest  International  Users 
Group,  an  independent  orga¬ 
nization  for  J.D.  Edw'ards  cus¬ 
tomers.  He  said  the  customer 
support  and  software  develop¬ 
ment  operations  for  the  appli¬ 
cations  he  uses  are  running  at 
about  the  same  levels  as  they 
did  under  J.D.  Edwards. 

However,  like  some  other 
users.  Pond  has  had  to  change 
sales  representatives  and  has 
raised  concerns  about  People- 
Soft's  software  licensing  poli¬ 
cies  [QuickLink  477781. 

Differences  in  corporate 
culture  have  also  affected  user 
perceptions  about  PeopIeSoft, 
according  to  Pond.  “J.D.  Ed¬ 
wards  was  very  relationship- 
oriented  —  almost  to  a  fault," 
Pond  said,  adding  that  he 
thinks  PeopIeSoft  is  more 
sales-oriented. 

“The  tvann.  fuzzy  feeling  is 
gone,"  said  Mari  }o  Moody, 
manager  of  customer  support 
at  BatesvUle  Casket  Co.  in 
BatesvUie,  Ind.  She  added  that 
her  company  has  lost  some  of 
the  prominence  it  had  with 
).D.  Edwards,  which  catered  to 
midsize  users  such  as  Bates- 
ville  Casket  “We  used  to  have 
a  dose  connection  with  f.D. 
Edwards,  but  now  we’re  no 
longer  the  big  fbh  in  the 
pond,"  Moody  said. 

Despite  such  comments. 
PeopIeSoft  sees  the  acquisitioo 
as  a  big  success,  said  Ram  Gup¬ 
ta.  the  vendor's  vice  president 
of  products  and  technology 
and  its  point  man  on  the  inte¬ 
gration  of  the  two  companies. 

"My  experience  in  16  acqui¬ 
sitions  tells  me  that  in  12 
months,  this  acquisition  has 
gone  absolutely  pretty  much 
as  planned  or  better."  Gupta 
said.  “We’ve  added  more  prod¬ 
ucts,  increased  the  research 
and  development,  and  are  get¬ 
ting  cxiltural  benefits  from  the 
companies’  similarity,  and 


wwiawi  lapaa.MM 


choice  (now).  On  the  product 
side,  we  increased  research  aid 
devekipmerrt  in  the  World  line  by 
K)%.  In  the  second  quarter,  we 
got  done  shippino  the  latest  re¬ 
lease  ol  (he  &TterpriseOne  Ian* 
ty  with  16  new  products  and  250 
aihancements.  In  (he  last  12 


wrereonaftve-day^jy-eight- 
hours  support  model  for  their 
rneintenance.  The  J.O.  Edwads 
users  got  migfated  upward  to  a 
seven-dayhy  24-hoijr  model. 

For  the  htiancial  dimension, 
we  paid  S1.6  biflion  and  sti  put 
S89  mtton  in  the  bank  (in  the 


second  quarterT.  and  we're 
clearly  the  No.  2  applications 
provider  alter  SAP. 

Some  lU).  Edwanb  cus- 
tafiMrs  complain  that  they're 
being  forced  to  mipata  to 
PMptoSefrs  leansino  odMirM 
or  bee  prldno  poneMae.  to 
that  tiM?  You  can  have  a  value- 
based  or  user-based  Icense  ^ 
didn't  force  customers  to  choose 
any  model.  That'snottheobiec- 
bve.  and  that’s  an  absoMeiy 
documented  policy. 

AnoHMriiser  eefBptoinl  to  fhet 
fteptoSefl  to  a  more  aavee' 
atoe  company  than  JJl  ^ 
vmrdowK.  I  think  that's  ai 
intoresting  obsarvaboa  unfortu¬ 
nately,  that  leads  some  to  decide 
that  f%optoSolt  B  a  s^  and 


marketing  macheie.  when  we 
spend  a  iagher  amount  of  re¬ 
search  and  devetopmeni  ddais 
as  a  peroentage  ol  tolal  revenue 
thanOacieorSAP.arJJ).^- 
wards  did  for  that  mattw. 

F^sopteSolt  6  a  mote  busi- 
nessbhe  and  proiessionaly  rui 
cornpany.  Our  customer  proMe 
was  lend  of  bigger,  and  they 
needed  a  dlferent  kind  of  atten¬ 
tion  when  we  veitod  them  Wtol 
Street  or  bantang  OOs  wanted 
people  n  suits  and  ties.  10.  Ed¬ 
wards  had  smaler  customers  ’  a 
S200  rnifeon  manufactunng 
plant  n  Idaho,  for  eiample 

^MptoSeft  had  a  had  quartor. 

to  (toadf  *i  tatoovor  tod  dator 
big  purcfiaaes?  Yhs.  it  does 
make  seing  a  litife  more  chal¬ 
lenging,  as  in  the  tost  quarter, 
bid  look  at  the  numbers.  We 
sgned  160  new  customers  in  the 
lastquarter.lfindthtooidstand- 
ng  tor  a  sales  organzation  in 
such  a  lough  environmenl 

-ktaicLSongm 


Users  Have  More  Choices,  Better 
Support,  PeopIeSoft  Exec  Says 

AsvicepreadBilofpnKkjcls  mwats.  madded  more  pinl- 

andlechiMlooyalPtooteSolt.  uctstoEmeninseOnelhan  ms 

Raneupialiasmdredveiy  done  in  die  tm  yews  before  the 

closely  on  the  inleoraBon  of  its  mefoef.Wfe  look  the  Total  dm- 

ershipExperienceinitia- 
tivegoinooninthePeo- 
pleS^  side  of  the  house, 
and  that’s  available  to 
10.  Edwards  customers 
in  terms  of  better  sid)' 
portability  and  a  higher 
Quality  of  code. 

On  the  support  side 
before,  a  lar^  number  of 
J.O.  Edwards  customers 


sottviore  developed  by 
ID.  Edwards.  He  spoto 
with  Computeneorid 
this  month  about  the 
merger  of  JD.  Edwards 
intoftoopleSoft. 

Deyoavtowthemerp- 
arasaauGCMsTThe 
cxBtomer  has  more 
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we're  adding  better  support." 

Gupta  acknowledged  that 
PeopIeSoft  is  "a  more  busi¬ 
nesslike  company"  than  I.D. 
Edwards  was.  But  he  said  that 
approach  is  necessary  because 
PeopIeSoft  has  many  banks 
and  other  large  companies  in 
its  user  base  (see  interview 
above). 

Users  said  one  plus  is  that 
PeopIeSoft  has  upheld  Us  com¬ 
mitment  to  continue  enhanc¬ 
ing  the  product  lines  devel¬ 
oped  by  jJ).  Edwards,  includ¬ 
ing  its  World  green-screen  ap¬ 
plications.  PeopIeSoft  has  re¬ 
leased  new  versions  of  both 
the  Worid  software  and  the 
more  modem  T.D.  Edwards  5 
applications,  which  are  now 
called  EnterpriseOne. 

"As  a  World  user,  life  is  infi¬ 
nitely  better  under  PeopIeSoft 
than  it  was  during  the 
days  of  ).D.  Edwards,"  said 
Dave  Hyzy,  direaor  of  IT  at 
Benderson  Development  Co., 
a  real  esute  developer  in  Buf¬ 
falo.  N.Y.  “World  is  now  a  vi¬ 
able  software  product  again." 

But  a  huge  lift  has  devel¬ 
oped  between  Quest  and  Peo¬ 


pIeSoft.  which  decided  not  to 
take  part  m  the  Lexington.  Ky.- 
based  user  group's  confer¬ 
ences  after  talks  between  the 
two  broke  doum  late  last  year. 

There  also  is  the  looming  is¬ 
sue  of  Oracle  Corp.'s  hostile 
takeover  bid  for  PeopIeSoft. 
which  was  launched  in  appar¬ 
ent  response  to  the  deal  with 
(.D.  Edwards.  PeopIeSoft  fell 
short  of  both  its  initial  revenue 
forecast  and  a  subsequent  re¬ 
duced  target  in  this  year’s  sec¬ 
ond  quarter,  a  showing  it 
blamed  primarily  on  publicity 


about  the  U.S.  Department  of 
Justice's  attempt  to  block  Ora¬ 
cle’s  bid. 

“tWthoul  a  doubt,  the  world 
would  have  been  vastly  diflfer- 
ent  for  PeopIeSoft  without  the 
Oracle  (offcrl,"  said  Josh 
Greenbaum.  an  artalyst  at  En¬ 
terprise  Applications  Ck)nsult- 
tng  in  Berkeley.  Calif.  “Had 
they  been  more  free  to  operate, 
there  would  have  been  much 
more  hand-holding  and  more 
careful  atteotion  to  the  details 


PeopIeSoft  has  shown 
promise  but  remains  on  "pro¬ 
bation."  said  David  Hnmer,  di¬ 
rector  of  IT  at  GrafTech  Intcr- 
Tutional  Ltd.  in  Wilmington. 
DeL  Hilmcr  will  be  paying 
close  attention  to  P^leSoft 
at  its  (^nneci  2(X)4  user  con¬ 
ference  next  month  in  San 
Francisco.  Tm  still  watching 
to  be  sure  I'm  serviced  and 
supported  as  a  customer  and 
have  the  commitment  from 
this  comparry  like  1  had  from 
)J3.  Edwards,"  he  said. 

OABMS 


that  would  have  made  the  Ji). 
Edwards  customers  happy." 


Saptember:  BeopteSoft 
upgrades  J.O.  Ethwds' 
ftooshipapplicapons.noiv  | 
caRed  EnterpriseOne. 


April:  Tvm  of  Quest  's 
speoaf  interest  gnups  I 
delect  to  ftooph^'s  [ 
userorganaaihons. 


-  ^  JmancItieQuesi  Mwdclknifc-  I  JulrPuptaSo*i 
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MARYFRAN  JOHNSON 


Checklist  for  Success 


Agio  friend  of  mine  once  confessed, 
somewhat  sheepishly,  that  he  simply 
can’t  resist  a  good  checklist.  Whenever 
and  wherever  he  comes  across  a  num¬ 
bered  list  of  any  kind  (a  lineup  of  check 
boxes  is  a  particular  thrill),  he  has  to  stop  and  read 
it.  Tips,  tactics,  random  advice  —  almost  any  top  10 
list  is  grist  for  his  mental  mill.  “Most  of  the  time  1 
know  all  the  stuff  on  the  list;  often  it’s  just  common 
sense,”  he  admits.  “But  every  now  and  then  I  find  a 
really  great  idea.” 


I  was  thinking  of  that 
list-hungry  CIO  as  I 
looked  over  our  “IT  Sur¬ 
vival  Guide'’  (page  30. 
and  online  at  Quicklink 
48479).  It’s  not  a  compli¬ 
cated  or  daunting  list  by 
any  means,  coming  as  it 
does  from  that  cheerful 
guy  holding  the  shovel, 

Ace  Hardware  CIO  Paul 
Ingevaldson.  What’s  his 
claim  to  fame?  He  not 
only  lasted  at  Ace  for  25 
years  (“a  long  time  in  this  day  and 
age  of  the  portable  CIO.*  be  notes); 
he  also  logged  four  decades  in  IT. 
Imagine  being  able  to  boil  down  40 
•years  of  IT  experience  to  10  core 
pieces  of  advice. 

But  no  matter  how  fine  a  list  it  is. 
you  won’t  remember  10  things.  So 
I've  boiled  them  down  further  into 
three  enduring  truths  about  IT  and 
business.  Almost  any  list  you'll  ever 
encounter  about  IT  management 
could  be  parsed  into  the  following 
mantras; 

1  Whalmr  conoMti  rr  RMTc  dosafy  to 
the  bwtoMiii  worth  dotog.  The  first 
piece  of  advice  Ingevaldson  offers  is 
to  get  out  of  the  IT  department  and 
work  in  a  business  unit,  a  recom¬ 
mendation  I’ve  heard  echoed  by  so 
many  management  consultants  that 
rve  lost  count  But  coming  from  a 
CIO  (and  one  who’s  rooting  for  you 
Co  return  to  IT),  it  carries  substan¬ 
tially  more  weight. 


E  once  confessed,  applications,*  operating  IT  as  a  utili- 
-.  that  he  simply 

ecklist.  Whenever  about  it  is  worth  repoetng.  (Read  that 

leS  dCrOSS  3  nuiri’”  again.)  TTiIs  is  one  of  the  toughest 

r  c  i_  1  sells  to  introverted  IT  folks  because 

(a  lineup  Ot  check  it  entails  talking  up  (a.kA,  market- 
to  Stop  and  read  users. 

anv  fon  in  <•«'  "Kans  actually  speaking  lo 

umost  any  top  lU  those  people.  “Don’t  keep  IT  in  the 
ist  of  the  time  I  closet,*  Ingevaldson  says.  “Spread 
it’s  just  common  aacitement  and  con- 

I  r-  j  vmce  people  to  get  on  the  IT  band- 
and  then  I  find  a  wagon.*  (There’s  got  to  be  at  least 

one  extrovert  in  your  IT  department, 
right?  Put  her  to  work.) 

He  also  stresses  the  im-  3.  Whatevw  •ncouragas  good  IT  man- 
portance  of  grasping  the  agenwMpracticos  to  worth  trying.  Using  a 
corporate  business  strate-  hands-off  management  style  with 
gy  and  then  mobilizing  IT  smart,  motivated  staffers  (“Get  out  of 
to  support  it.  Not  iust  im-  their  way")  is  another  of  IngevaJd- 
plementing  a  strategy,  he  son’s  tips,  alongside  classics  like 
warns,  but  getting  IT  in-  learning  to  delegate  and  setting  high 

volved  as  part  of  the  proc-  expectations  for  meeting  project 
ess.  And  to  all  those  com-  dates  and  budgets.  “Missed  deadlines 
panies  trying  to  charge  and  busted  budgets  are  the  things 
out  IT  as  a  business-unit  that  give  IT  a  bad  name.”  he  notes, 
expense,  this  veteran  CIO  Of  course,  after  40  years  of  dealing 
says  to  cut  it  out.  “Op^r-  with  end  users,  this  CIO  knows  there 
ate  it  as  an  expense  cen- .  wiU  be  simply  god-awful  days  when 

ommends.  explaining  that  none  of  his  management  mantras 
less  execs  arc  part  of  the  will  help.  That’s  when  he  gets  really 

5  process,  they’ll  know  sensible:  “Tough  days  are  why  they 
working  on  the  important  invented  single  malls."  O  48927 


plemenfing  a  strategy,  he 
warns,  but  getting  IT  in¬ 
volved  as  pan  of  the  proc¬ 
ess.  And  to  all  those  com¬ 
panies  trying  to  charge 
out  IT  as  a  business-unit 
expense,  this  veteran  CIO 
says  to  cut  it  out.  “Oper¬ 
ate  it  as  an  expense  ceh-. 
ter,"  he  recommends,  explaining  that 
if  top  business  execs  arc  pan  of  the 
prioritizing  process,  they’ll  know 
that  IT  is  •forking  on  the  important 
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VIRGINIA  ROBBINS 

NotAU 
Employers 
Play  Fair 

Recently,  my  extend¬ 
ed  family  joined  me 
for  an  all-too-brief 
summer  get-together  in  San 
Francisco.  On  one  particularly 
foggy  day,  Samantha,  my  12- 
year-old  niece,  turned  to  her  20-ycar- 
old  cousin.  Matthew,  and  announced 
that  while  they  were  waiting  for  hinch 
they  would  play  keep-away.  Speaking 
with  a  great  deal  of  authority.  Saman¬ 
tha  announced  the  rules  that  would 
make  the  game  fair.  Six-foot-three 
Matthew  would  need  to  sit  on  the  car¬ 
pet  in  the  middle  of  the  room,  while 
she  would  ^  to  the  other  end  of  the 
room  and  kneel  Kathryn,  age  6.  would 
stand  by  the  door  with  plenty  of  room 
to  throw,  and  Ashley, 

4.  would  sit  in  the 
big  chair  by  the  door 
and  catch.  Matthew, 
having  met  his  equal 
in  the  world  of  keep- 
away.  agreed.  Saman¬ 
tha  began  by  tossing 
the  green  Nerf  ball 
over  Matthew's  bead 
to  her  sisters,  and 
the  girls  managed  to 
keep  the  ball  away 
from  him  until  the 
PB&J  and  chocolate 
milk  were  ready. 

As  I  prepared  the  sandwiches  in  the 
next  room.  I  couldn't  help  but  think 
^out  Samantha’s  view  of  &imess.  The 
game  was  clearly  equalized,  with  tall 
skinny  Matthew,  seat  plastered  to  the 
carpet,  straining  to  reach  the  ball.  I  was 
impressed  with  Samantha's  ability  to 
command  a  room  and  keep  the  game 
fim  for  her  little  sisters.  And  I  had  to 
smile,  since  as  an  adult  1  know  that  life 
isn’t  fair,  no  matter  how  well  we  com¬ 
mand  the  room. 

When  it  comes  to  outsourcing, 
whether  that  involves  shipping  work 
elsewhere  in  the  U.S.  or  overseas,  the 
employers  that  we  choose  to  work  for 
don't  always  seem  to  play  fair.  Of 
course,  what’s  fair  to  you  may  not  be 
fair  to  me.  so  to  illustrate  what  I  think 
is  fair.  I  will  use  words  that  rely  on  a 
time-based  viewpoint  I  will  define  ^ir 
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as  a  balanced,  long*(enn  perspective, 
and  unfair  as  a  short-term,  less-bal¬ 
anced  perspective. 

Sbort-term  companies  are  those  that 
focus  on  how  much  money  can  be 
made  as  soon  as  possible.  In  the  most 
extreme  cases,  short-term  companies 
are  only  about  today's  cash  position. 
For  these  companies,  outsourcing,  es¬ 
pecially  overseas  outsourcing,  isn't  an 
investment  —  it's  a  way  to  cut  costs  to¬ 
day.  For  employees  working  in  these 
companies,  it's  sometimes  frightening¬ 
ly  obvious  that  domestic  workers  are 
an  undesired  expense. 

Other  companies  have  a  long-term 
perspective  and  sec  costs,  including 
employee  costs,  as  an  investment. 
These  companies  may  still  choose  to 
outsource,  but  if  they  do.  they'll  struc¬ 
ture  the  work  and  the  agreements  to 
^  reflect  a  long-term  strategy,  developing 
disciplined  processes  over  time  that 
change  in  response  to  their  experi¬ 
ences.  If  you've  worked  only  in  short¬ 
term  companies  and  are  curious  as  to 
what  attributes  a  long-term  company 
displays,  read  Jim  Collins’  books  Good 
fo  Great  and  Built  to  Last. 

Some  believe  that  short-term  think 
Ing  is  what  capitalism  is  all  about.  As 
an  economist.  1  don't  agree.  A  free 
market  allows  companies  to  look  to  the 
short  term  and  to  profit  or  not  accord¬ 
ingly.  It  also  allows  those  that  look  to 
the  long  term  to  profit  or  no*  as  welL 
It’s  fabulous  that  we  live  in  a  country 
that  allows  companies  and  employees 
to  choose,  and  then  to  act  accordingly. 
Life  isn't  hit.  but  that  doesn’t  mean 
you  need  to  woik  for  someone  focused 
only  on  the  short  term.  O  48832 

DAVID  MOSCHELLA 


DO  THE  EMPLOYEES 
in  your  organization 
ever  complain  that  they 
have  better  technology  at 
home  than  in  the  olHce?  Do 
you  require  them  to  access 
corporate  systems  via  a  dedicated  PC 
as  opposed  to  any  Internet-connected 
browserf  Do  they  ever  use  their  per¬ 
sonal  internet  e-mail  accounts  f(x 
business  and  laugh  at  the  limitations  of 
Mkrosofl  Exchange  or  Lotus  Notes? 

Do  they  sometimes  shake  their  heads 


wondering  why.  if  they  can 
set  up  a  wireless  LAN  at 
home  in  a  few  hours,  corpo¬ 
rate  IT  says  wireless  sys¬ 
tems  in  the  office  are  too 
complex  and  risky? 

While  IT  professionals 
can  often  give  perfectly 
valid  answers  to  these  and 
similar  questions,  you  know 
before  you  give  them  that 
they  will  mostly  fall  on  deaf 
ears.  The  reality  is  that  em¬ 
ployee  expeaations  of  IT 
are  now  being  shaped  out¬ 
side  of  the  workplace.  It’s  all 
part  of  the  increasing  con- 
sumcrization  of  corporate  IT. 

Consumerization  is  happening  in 
two  main  ways.  First,  many  employees 
are  now  active  consumers  of  IT. 
They’re  becoming  increasingly  famil¬ 
iar  with  broadband,  multimedia  appli¬ 
cations.  wireless  systems,  digital  cam¬ 
eras.  fmait  phones  and  browser-based 
computing.  They’re  also  becoming 
increasingly  intolerant  of  workplaces 
that  still  treat  them  as  passive  users. 
Moreover,  the  laptops  and  mobile 
phones  they  cany  are  almost  always 
dual-purpose  devices  used  extensively 
for  both  business  and  personal  appli¬ 
cations. 

The  ramifications  of  this  are  now 
becoming  clear.  IT  departments  have 


become  accustomed  to 
treating  employees  like 
children  who  must  be  told 
what  they  can  and  cannot 
da  But  many  employees 
want  to  be  treated  like  con¬ 
sumers,  given  choice  and 
flexibility  in  their  use  of  IT. 
If  thc>-  are  going  to  work  at 
home  and  lug  around  dual- 
use  work/personal  devices, 
these  devices  will  have  to 
meet  their  personal  stan¬ 
dards,  not  just  for  func¬ 
tionality  but  increasingly 
for  style  and  ^hion  as 
well.  Requiring  every  em¬ 
ployee  to  accept  the  same  generic  IT 
capabilities  will  become  almost  as  ab¬ 
surd  as  requiring  that  every  employee 
drive  the  same  car. 

The  second  aspect  of  consumeriza- 
tion  will  in  the  long  run  prove  even 
more  important  and  disruptive.  In¬ 
creasingly.  the  public  mftastructures 
that  are  emerging  to  support  con¬ 
sumers  will  be  fundamentally  better 
than  the  private  infrastructures  that 
companies  have  traditionally  built  for 
themselves. 

lust  look  at  the  pricc4>erformance  of 
today's  consumer-oriented  Wi-Fi. 
videoconferencing,  storage,  messaging. 
Internet  telephony  and  broadband  ser¬ 
vices.  While  Google’s  advertising- 
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based  plan  to  give  consumers  a  free 
gigabyte  of  e-mail  storage  won’t  be 
for  everyone,  it  is  certainly  indicative 
of  the  enormous  service  improvements 
to  come. 

Similarly,  while  large  enterprises 
have  generally  looked  askance  at  the 
idea  of  utility  computing,  the  reality  is 
that  this  is  the  way  most  of  the  mariiet 
already  works.  Consumers  and  many 
small  businesses  already  buy  their  net¬ 
working.  storage,  hostile  and  telepho¬ 
ny  capacity  by  the  month,  based  on 
what  sort  of  service  requirements  they 
expect  to  have.  They  don't  build  infra¬ 
structure;  they  simply  use  it. 

Therefore,  the  big  question  is 
whether  large  organizations  will  con¬ 
tinue  to  have  their  own  unique  style  of 
computing,  with  a  heavy  emphasis  on 
their  own  private  infrastructures  and 
the  rules  needed  to  suppon  them,  or 
whether  at  some  point  consumer  and 
business  computing  will  efFcctively 
merge,  with  everyone  increasingly 
sharing  a  common  public  infrastruc¬ 
ture.  Thai’s  the  long-tenn  promise  of 
CDnsumcrization.  and  althou^  it's  still 
a  long  way  oO;  that’s  the  direction  the 
market  is  moving  in.  O  48646 
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EAoofiiedl^ojects 
Are  Nothing  New 

yAWM  Another  IT  project  de- 
T  iaiied  or  doomed  fAustraban 
Pern  Wresdes  With  ERP  Delays. 

Sn  5M  Overrun.*  Quidljnk  48068] 
*Dog  titles  man*  would  be  a  more 
newrsworthy  story.  If  there  were 
fraud  or  other  malfeasance,  there 
mi(^  be  some  reason  to  run  a  smaV 
piece  on  this.  Bui  if  this  is  just  moth¬ 
er  level-zero  ofitomer  de^  wNh  8 
level-zero  contractor  tantlmg  atong 
andhopinotoevenlualyhaclito- 
some  software  system,  why 
bother  Ming  a  tree  tor  if?  Whai  the 
readers  of  CbrryaAWrwonbshoiAd  be 
told  is  the  root  cause  of  dns  problem. 

In  the  same  Issue,  the  story  TT 
Governance  is  on  the  Hof  Seat* 
(OuickUnk  48025)  echoes  the 
sarrwproblerrLftjrtloliornBnaoe- 
ment  B  roubne  in  wel-fun  compa¬ 
nies,  h  is  jusi  an  extension  of  (aoj- 
ed/provam  management,  and  un¬ 
less  the  company  B  eioepbonally 
large,  there  should  be  no  need  for  a 


sepaiaie  committee  In  a  truly  large 
company,  an  ntegraied  pnxijct 
team,  or  tfT.  as  these  comminees 
are  commonly  caled.  woidd  be  a 
routne  part  of  normal  decsion 
processes.  Such  team  consider 
not  only  the  cost  and  value  added 
but  also  the  imcacis  on  other  areas. 
They  consider  constraints  such  as 
budgetsanddetaystootherprof 
ectsifsharedresoucesarediv^- 
ed.  in  short  they  mehe  decBions 
that  WfiN  opunize  the  enterprse 
widUn  the  real-world  ccRstrairrts  ol 
time  and  budget. 

WHMiAdm 
Consufumt.  Springfietd,  Va. 


Waiting  for  What’s 
NextinE-inaN 

MAMHAU’SeOUMN’The 
End  of  E-maT  IQuicMjnk 
47526]  was  inteigent.  factual, 
readable  and  made  compteie  sense 
Hal  wi  be  attacked  by  Ihe  teches. 
but  they're  no  difiereni  horn  the 
people  who  said  that  the  Pony 


Exprasswesthegieaiesioom- 
muracabon  tool  that  would  ever  be 
developed. 

AnfrewflOlaon 

Managing  director. 

TEAM  Iniemational  Group, 
G<tiflesvi/Ie,  FTa 

IKEPTNAmiieloririepurKhbv 
VI  Mark  HaTs  column,  but  I  was 
left  high  and  dry.  Mhafis  going  lo 
repiacee-maHVOfcoursermssag- 
mg  w4  evokm.  as  It  has  tram  news- 
groups  to  e-mai  But  I  disagree  that 
il  wi  evolve  because  of  spam  and 
wuses.  N  evoke  because  a  new 

aftematrve  wi  be  eeser.  more  reb- 
able  and  more  flaabte 
Ifs  true  dial  handhelds  don't 
have  the  problems  commonpiace  V) 
e-mail,  but  those  problenB  arase 
only  wten  usage  levels  made  It 
worthwhie  for  spammers.  When 
handhelds  catch  up.  you  can  be 
sure  that  the  spam  marfotars  and 
virus  afiooivados  w8  reset  ther 
sights  on  that  next-ganeratnn  mass 
plattorm.  Thais  also  a  natkf^evo-  i 


ItAon.  For  handhelds  (or  whatever 
Ihe  next  generahon  b)  10  catch  tg). 
ther  ardtfactures  wl  have  to  be¬ 
come  more  open  to  enable  Herd- 
party  develoormil  to  provide  appb- 
cations.  dalafinfornmxin  and  other 
■ntegraboa  and  those  are  die  same 
tools  that  enable  spammers  «xt 
hackers  to  thrive  .  And  then  the  cycle 
wMbegmagani 
Dan  taiehtanadilag 
CTO.  Dietsxom. 

Drei^efd  Beach.  Fla. 
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need  to  write,  freeing  you  up  to 
think  big  thoughts. 

Think  big.  Visual  Studio*  .NET  2003 
delivers  higher  productivity  by  taking 
care  of  the  small  stuff,  so  you  can 
concentrate  on  bigger  things.  Just  ask 
HP.  "On  our  consumer  application 
project  Visual  Studio  .NET  really  lowered 
the  technical  barriers  to  doing  great 
work,"  says  an  HP  Technical  Lead.  "We 
developed  the  application  faster  than 
we  could  have  with  other  technologies 
due  to  the  better  tool  set  capabilities." 
To  find  out  how  Visual  Studio  .NET  2003 
can  help  you  concentrate  on  big  ideas, 
visit  msdn.microsoft.com/visual/think 


Visual  Studio 
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Is  Grid  Computing  Ready 
for  Your  Enterprise? 

Compifterworld’s  rr  Executive  Summit  Wili  Guide  Your  Decision 


If  you  re  an  IT  executive*  in  an  end-user  organization, 
apply  to  attend  Computerworld's  upcoming  complimentary 
half-day  summit  on  Grid  Computing. 

When  done  well,  grid  computing  can  lower  hardware 
costs,  reduce  development  and  operational  expenses 
and  result  m  more  effective  systems  management 
and  use  of  processing  resources.  As  grid  moves  from 
the  realm  of  science  and  research  into  business 
applications,  what  are  the  risks,  tradeoffs,  and  key 
considerations?  How  have  other  businesses  evaluated 
the  opportunities  to  use  grid?  Most  importantly. 

IS  this  emerging  style  of  computing  finally  ready 
for  your  enterprise? 

By  leveraging  the  knowledge  of  industry  experts  and 
the  real-world  experience  and  advice  of  your  IT  peers, 
this  IT  Executive  Summit  will  provide  an  overview  of 
effective  strategies  for  assessing  and  implementing 
grid  tephnologies- 

•  Compiimentafy  registration  is  restncted  to 
Qualitied  IT  executives  only. 


Apply  for  registration  today 

For  more  information  or  to  apply,  visit 

wwwiilexecutfvesunmiitcofn 


Grid  Computing:  Assessing  the 
Reality  and  the  Potential 
Philadelphia  •  September  15,  2004 

Philadelphia  Marriott  -  1201  Market  Street  •  Independence  Ballroom 

7;45am  to  8: 1 5am  Registration  and  Networking  Breakfast 


8:15am  to  8:45am 


8:45am  to  9:15am 
9:15am  to  9:45am 


9:45am  to  10:15am 
si..  »■ 

10:l5atjyo  10:45am 
10:45am  to  1 1:15am 


1 1:15am  to  noon 


From  Cutting  Edge  to  Corporate  Stage: 

Grid  Computing  and  the  Enterprise 

Maryfran  Johnson,  Editor  in  Chief.  ComputerworkJ 

Industry  Analyst  Perspective 

Virtualization  at  CIGNA  Corp.:  Balancing 
Tactical  IT  Goals  with  Business  Strategy 

Ben  Flock.  VP  of  Virtualization  and  Application  Frameworks.  CIGNA 

Refreshment  and  Networking  Break 

Update  from  the  Enterprise  Grid  Alliance 
The  View  of  Grid  Computing  from  Iron  Mountain 

Bill  Olsen,  VP  of  Engineering,  Iron  Mountain 

Key  Considerations  in  Grid  Computing 
Projects:  An  IT  Executive  Roundtable 

Panel  Moderator:  Patrick  Thibodeau,  Senior  Editor, 
Computerworld 

Program  Concludes 


Maryfran  Johnson 
Editor  in  Chief, 
Con^naerworld 


\  Ben  Flock 
I  VP  of  Virtualuation 
I  and  Application 
Frametvorks, 

CIGSA 


Patrick 
Thibodeau 
Senior  Editor, 
Computerworld 


This  program  will  also  take  place  at  the 
State  Room  (60  State  Street)  in  Boston 
on  September  21,  2004 

For  more  information  on  these  locations,  call  888-299-0155 


Exclusively  sponsored  by: 

Or?ACLS’ 
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FUTURE  WATCH 

Software  Right  Ran 

Paul  D.  Nielsen,  the  new  CEO  of  Carnegie 
Melon's  Software  Engineering  Institute,  ex¬ 
plains  how  his  experience  running  a  $3  billion 
military  research  lab  will  help  the  university 
develop  commercial  applications.  Paga  24 


OPINION 

Here's  to  Your 
(Electronic)  Health 

The  U.S.  Health  and  Human  Services  depart¬ 
ment’s  initiative  to  consolidate  Americans’  elec¬ 
tronic  health  records  is  a  worthy  cause  —  and  a 
daunting  project,  says  Tommy  Peterson.  Page  26 


SECURITY  MANAGER'S  JOURNAL 

Anthrinis  Service 
Troubled  by  TLS 

A  new  antivirus  service  runs  afoul 
of  Roger  Foix’s  all-too-complicated 
Transport  Layer  Security  e-mail 
encryption  configuration.  Page  25 


Wl-R  PLAYS 


The  new  802.Tli  wireless  LAN  security  standard  is  a  step  forward, 
but  Wi-R  LANs  still  aren’t  impervious  to  attacks,  bv  joane  wexler 


Unbounded  by  the  physical  constraints 
of  cabling  and  walls,  wireless  LANs 
have  proved  tricky  to  secure.  Now  that 
the  long-awaited  802.Ui  standard  for 
enhanced  WLAN  security  has  been 
ratified,  can  IT  assume  that  WLANs  have  grown  as 
secure  as  their  cabled  counterpart? 

Hardly. 

It  will  take  time  for  vendors  to  migrate  their  prod¬ 
ucts  to  802.1U.  approved  in  June,  and  for  IT  organiza¬ 
tions  to  adopt  them.  And  the  Wi-Fi  Alliance  won't 
even  start  interoperability  testing  of 802.11i  products 
until  next  month. 

More  important.  802.111  represents  just  the  finish¬ 
ing  touch  to  a  series  of  steps  in  wireless  security 
standards  development.  Much  of  it  has  already  been 
available  for  about  18  months  in  an  802.11i  subset 
called  Wi-R  Protected  Access  (WPA).  And  while 
standards-based  security  technology  plays  a  big  part 
in  protecting  enterprises,  the  issues  reach  beyond  a 
signed  set  of  technical  specs. 

For  example,  there's  a  broad  installed  base  (^spe¬ 
cialized  client  devices,  such  as  bar  code  scanners, 
that  run  the  MS-DOS  operating  system.  They  are  not 
upgradable,  even  to  eariier  versions  of  authentica¬ 
tion  and  encryption,  let  alone  to  802,111  which  re¬ 
quires  Advanced  Encryptioo  Standard  protection. 
AES  will  require  hardware  upgrades  —  even  (or 
far  newer  products.  As  enterprises  expand  their 
WLANs,  these  legacy  devices  might  well  become 
the  weakest  link  in  the  wireless  security  rhatn 
And  some  administrators  lack  confidence  in  their 
ability  to  properly  implement  the  various  pieces  of 
WLAN  security,  particulariy  since  new  attacks  regu¬ 
larly  make  headlines. 

Asserts  Pete  I>avis,  assistant  network  engineer 
for  the  Spring  Independent  School  District  in  Spring, 
Texas.  "It  requires  much  time  and  effort  to  deter¬ 
mine  what's  real  and  what's  market-speak.  There’s 
a  lot  of  FUD  [fear,  uncertainty  and  doubt]  being 
spread  about  wireless  security." 

Technology  Headway 

The  formal  802.111  standard,  which  includes  WPA. 
does  bolster  the  confidentiality  and  integrity  of 
WLANs.  Tom  Hagin.  vice  president  of  the  wireless 
business  practice  at  integrator  NetXperts  Inc.  in 
San  Ramon,  Calif.,  says  the  standard  has  taken  Wi-Fi 
secunty  “from  prepuberty  to  just  past  puberty." 

"In  the  past  six  months,  we  haven't  had  anyoite  say 
they  weren't  going  to  install  wireless  because  it  isn't 
secure.  Prior  to  that,  we  did."  he  says. 

WPA,  available  in  many  WLAN  network  interfru^ 
cards  (NIC)  and  access  points  (AP),  was  developed 
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after  university  researchers  demonstrated  the  ease 
with  which  hackers  could  break  static  encryption  keys 
in  the  802.U's  Wired  Equivalent  Privacy  (WEP)  mech¬ 
anism  in  2001.  WPA  requires  products  to  rotate  en¬ 
cryption  keys  on  a  per-packet  basis  so  they  are  much 
harder  to  crack.  WPA  also  uses  the  industry-standard 
802dx  framework  for  strong  user  auihcntication. 

And  AES.  the  U.S.  gu\‘cmmcnt  block-cipher  stan¬ 
dard  for  128'bit  data  encryption,  replaces  the  RC4 
stream-cipher  encryption  that  WEP  and  WPA  use. 

Still,  “WPA  will  he  good  for  three  to  five  years 
before  those  sman  kids  who  broke  WEP  break  RC4. 
Then  everyone  will  need  A£S.“  says  Michael  Disaba- 
to,  an  analyst  at  Burton  Group  in  Midvale,  Utah. 
802.Ui  also  specifies  a  way  to  achieve  fast  secure 
handoftfs  among  APs  (in  the  2S*msec  range)  and  a 
simpler  authentication  scheme  for  small  WLANs. 

Practicai  Umits 

But  technology  can  solve  only  so  much.  Through 
2006, 70%  of  successful  Wi-Fi  attacks  will  occur  as  a 
result  of  the  misconfiguration  of  APs  and  client  soft¬ 
ware.  according  to  Ganrter  Inc. 

This  b  why  the  Betbesda,  Md.-bascd  SANS  Insti¬ 
tute.  which  offers  information  security  training  and 
certification,  rttcommends  regular  wireless  audits. 
“AES  b  great."  says  Joshua  Wright,  deputy  director 
of  training.  “But  if  people  don't  audit  their  networks, 
(bey  might  not  know  that  a  misconflgured  AP  bn't 
using  it.  Thb  b  low-hanging  fruit  for  attackers.” 

Conducting  audits  requires  tasks  both  on  the 
wired  and  wireless  sides  of  the  networic.  First,  says 
Wright,  adminbtrators  should  regularly  download 
each  AP's  configuration  and  make  sure  it  accurately 
reflcas  the  organization's  internal  security  policies. 

For  example,  if  an  enterprise  has  adopted  802.1x 
and  has  selected  Protected  Extensible  Authentication 
ProtocoL  one  of  several  available  authentication 
methods,  networic  administrators  should  regularly 
check  that  all  APs  are  indeed  configured  for  PEAP. 

In  addition,  airborne  packets  should  be  regularly 
examined  using  a  wireless  protocol  analyzer  to  verify 
(hat  they  are  actually  using  the  EAP  method  selected. 
“Sometimes  senings  on  APs  have  not  been  applied 
and  do  not  kick  in,"  Wright  says. 

Another  recommend^  practice  b  treating  the 
WLAN  as  an  untrusted  network,  like  the  Internet, 
and  putting  a  ftrewali  or  gateway  where  wireless  and 
wired  networks  meet.  Thou^  thb  b  a  wcU-estab- 
Ushed  guideline,  “a  lot  of  companies  don’t  do  it," 
observes  Davis. 

The  Spring  school  district,  however,  has  deployed 
the  internal  firewalling  capabilities  in  Aruba  Wire¬ 
less  Networks  lnc.*s  WLAN  switches. 

“We  have  an  apartment  complex  behind  us,  and 
outsiders  could  poach  on  our  Internet  connection 
(without  the  firewallj,"  Davb  notes.  “Our  dbtrict 
could  be  held  accountable  if  they  did  nefarious 
things  using  our  source  network  address.” 

Davis  says  the  setup  also  lets  him  use  an  access 
control  Ibt  to  determine  which  network  resources 
are  available  to  each  user  in  the  26700-student.  2S- 
school  dbtrict.  Wireless  gateways  from  companies 
such  as  Bluesocket  Inc.  and  Vernier  Networks  Inc. 
provide  similar  access  control  list  functions. 

h  b  not  obvious  to  all  network  implementcrs  how 
to  ghte  the  many  available  security  mechanbms  to- 


THREATS 

TO  WATCH 

Even  wWi  the  range  of  WLAN  Mcurity 
technologies  aniahb  today,  risks  remain. 
Bewara  of  thaaa  thraa  threats: 

IDENTIFY  THEFT 

■  Merwyn  Andrade,  a  contnbutor  to  the  802.11i 
security  spectficalion  ard  chiel  techrs^ 
cer  al  Aruba  Wkeiess  Networks,  warns  that 
identity  Iheft  could  become  a  problem  for  en¬ 
terprises  usinQ  WLANs.  For  exanple.  users 
with  BO2.II1  wireless  phones  migfti  save  thee 
passwords  and  PINs  on  the  phone  tor  conve¬ 
nience.  "This  would  be  hke  keeping  your  keys 
to  your  house  ai  your  walei  and  then  temg  the 
w^ ,*  he  says.  *0nce  602.tTi  is  pervasive, 
people  mighf  mss  that  they  have  to  worry 
about  authenficaboa* 


DEAUTHENTICATE  OENIAL- 
OF-SERVICE  (DoS)  ATTACKS 

■  Toob  Uce  Vbidn  software  can  flood  a  client 
with  drauthenticabon  packets.  In  effect  Idling 
clients  that  thereareloomanyusersassocial* 
ing  with  an  AP  and  to  seek  another  one.  Re¬ 
pealed  hooding  of  such  legitimate  802.11  mes¬ 
sages  could  sustain  a  DoS  aback  on  dents 
mdefmrtely. 


MESSAGE  INTEORfTY  CHECK 
(MIC)  DOS  ATTACKS 


■  In  tle8Q2.I1i  spedficatnn.  the  MIC  protocol 


compares  MAC  headers  when  tiansmlRed  and 
when  received.  If  Ihey  (Mfer.  they  are  deemed 
spoofed,  so  the  packet  IS  dropp^  However,  if 
thb  happens  twwe  within  a  rnmute.  the  WLAN 
AP  tels  the  entire  ndvrark  to  fog  off  and  stop 
accepting  traffto  for  a  minide.  Repeded  double 
MIC  changes  could  resull  in  prolonged  DoS 
attacks. 


getber.  “Wi-Fi  security  is  not  something  that  you  can 
set  and  forget."  says  Boris  Shubin,  director  of  IT  at 
Dunkin'  Donuts  Inc.,  which  recently  deployed  a 
wireless  specch-recognitioo-bascd  picking  system  in 
Us  Swedesboro,  N.J..  warehouse  using  centralized 
WLAN  switches  from  Atrespscc  Inc.  "APs  ship  wide 
open.  WLAN  security  b  iffy:  U’s  a  very  high-touch 
standard.” 

Dunkin’  Donuts  uses  media  access  control  address 
filtering  to  keep  suspicious  packets  off  its  network. 

If  a  MAC  client  source  addr^  bn’t  on  an  approved 


ibt  in  the  switch,  it  bn’t  allow-ed  access. 

Disabato  says  MAC  filtering  works  but  isn’t  scal¬ 
able.  “You  have  to  change  your  system  if  a  card 
breaks.  If  a  guest  leaves,  you  have  to  remember  to 
remove  their  MAC  address."  be  says.  Such  labor- 
intensive  approaches  tend  to  be  less  .secure  simply 
becau.se  they  are  error-prone. 

Even  the  world  s  largest  WLAN  operator  —  Micro¬ 
soft  Corp.  —  bn’t  using  WPA  yet  on  its  4.500-AP 
WLAN,  built  on  APs  from  Cisco  Systems  Inc.  Many 
of  Microsoft’s  older  APs  are  first-generation  technol¬ 
ogy  and  arc  not  WPA-capable. 

Microsoft  b  poised  to  make  a  wholesale  change  to 
its  global  WLAN  infrastnictiire,  which  supipurts 
about  100,000  unique  mobile  devices.  “Ui  is  our  main 
goaL  but  we  can't  move  to  it  yet  because  no  NICb 
suppon  iC  says  Don  Berry,  the  wireless  network  en- 
gineer  who  has  overseen  Microsoft's  global  WLAN 
implementation  since  1999. 

“We’re  asscs-sing  what  the  various  EAP  security 
strengths  are."  he  says.  “What  will  It  take  to  live 
day  to  day  using  a  particular  method?  How  many 
servers  would  each  type  require?  What’s  the  security- 
strength  of  each?" 

Which  EAP? 

Most  enterprises  will  select  an  EAP  authentication 
method  ba^  on  the  type  of  database  they  have,  says 
Dave  Halasz,  who  chaired  the  802.111  Task  Group  and 
is  manager  of  software  systems  in  Cisco's  wireless 
networking  business  unit.  "If  you  don’t  already  have 
a  certificate  database  for  authenticating  users,  you 
might  not  put  one  in  fust  for  wireless."  be  says. 

In  fact,  notes  Kevin  Tseng,  senior  wireless  engi¬ 
neer  at  NetVersam  Solutions,  a  systems  integrator  in 
Seattle,  “most  companies  do  not  run  a  public-key  in¬ 
frastructure."  which  b  required  for  using  EAP  meth¬ 
ods  that  use  client- and  server-side  certificates,  such 
as  EAP-TVansport  Layer  Security. 

Cisco's  broadly  deployed  Lightweigbt.EAP 
supports  ea$ier-to-manage  usemame/password 
schemes  but  b  prone  to  off-line  dictionary  attacks 
in  shops  that  can't  enforce  strong  password  policies. 
LEAP  also  supports  mutual  authentication,  an 
802.111  recommendation,  as  do  PEAP  and  another 
common  method.  EAP-T\inneled  TVanspott  Layer 
Security. 

“But  these  are  mostly  supported  in  smart  clients 
such  as  laptops."  says  Tseng.  "Scanners  for  tracking 
inventory  don’t  support  them."  He  estimates  that 
less  than  30%  of  devices  in  the  field  arc  outfitted 
with  mutual  authentication  today,  leaving  many 
deployments  exposed. 

SitlL  WLAN  security  has  come  a  long  way.  says 
Disabato.  'TNvo  years  ago,  people  who  hadn’t  been 
antenna-hcads  for  very  long  didn’t  even  understand 
that  walb  don’t  stop  stgnab.  Now  that  people  arc 
thinking  of  oetymrks  radiating  in  a  360^egree 
sphere,  they’re  doing  much  better."  O  483^ 


Wexfer  b  a  freelance  writer  in  Silicon  Valley.  Contact 
heratioame@iwexlerxom. 
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Got  Questions  About 
Network  Consolidation? 

Computerworld’s  IT  Executive  Summit  Has  the  Answers 


If  you’re  an  IT  executive*  in  an  end-user 
organization,  apply  to  attend  Computerworld’s 
upcoming  complimentary  half-day  summit 
on  Network  Consolidation. 

CIOs  and  senior  IT  executives  are  finding 
that  consolidating  high-performance  networf<s 
can  play  a  key  role  in  improving  business 
application  performance  while  significantly 
reducing  operational  costs. 

The  proliferation  of  network  capacity  and 
related  storage  and  server  infrastructure 
presents  a  daunting  challenge  for  toda/s 
enterprises,  many  of  which  are  positioning 
themselves  for  growth  yet  still  seeking  to 
reduce  IT  costs  where  feasible. 

By  leveraging  the  knov^Hedge  of  industry 
experts  arxl  the  real -world  experience  and 
advice  of  your  IT  peers,  this  IT  Executive 
Summit  will  provide  an  overview  of  effective 
strategies  for  consolidating  and  connecting 
networks  and  data  center  applications. 

•Complimentary  registration  is  restricted  to 
qualified  IT  executives  only. 

Apply  for  registration  today 

For  rrtore  information  or  to  apply,  visit 
www.itexecutivesummit.com/nc 


Streamlining  Networks  and  Data  Centers: 
The  Business  Benefits  of  Consolidation 
Dallas  •  September  22,  2004 

Renaissance  Dallas  •  2222  Stemmons  Freeway 
7.30am  to  8;00am  Registration  and  Networking  Breakfast 


8:00am  to  8:15am 


8:15am  to  8:45am 


8:45am  to  9:15am 


9:15am  to  9:45am 


9:45am  to  10:15am 
10;15am  to  10:45am 
10:45am  to  11:15am 


11:15am  to  noon 


Rebuilding  the  IT  Foundation 

Marytran  Johnsor>,  Editor  in  Chief.  Computerworio 

Consolidation  and  the  Data  Center: 

Boosting  Business  Performance 
and  Application  Availability 

Richard  Viliars,  Vice  President,  Storage  Systems 
Research,  IDC 

User  Case  Study  — 

Hilton  Hotels;  Considenng  the  Next 
Generation  Network 

Damien  Bean,  Vice  President,  Corporate  Systems. 

Hilton  Hotete 

User  Case  Study  —  MasterCard  Intematnnal 

Jerry  McElhafton.  Senior  Executive  Vice  Presideni, 

Global  Technology  and  Operations,  MasterCard  International 


Selected 

speakers 

include: 


Mary^TWi  Johnson 
Eduor 

CamputerworU 


Refreshment  and  Networking  Break 

End-User  Case  Study 

Customer  Challenges  and  Solutions: 
Real-Life  Scenarios  Connecting  Data 
Centers  Over  Distance 

Steve  Adolph.  CTO,  Enterprise  Solutions  Group,  QENA 

Panel:  Overcoming  Management  Barriers  — 
Making  the  C£tse  for  Consolidation 

Panel  Moderator  Don  Tennant.  News  Editor,  Computerworld 
Ranelcsts  Damien  Bean.  Vice  President.  Corporate  Systems, 
Hilton  Hotete.  Rank  Enfanto.  Vce  President,  Op^tions 
Delivery  &  Information  Security,  Blue  Ooss  Blue  Shieio  of 
Massachusetts;  Steve  GrMdman,  Owector,  Network 
Architecture.  Chicago  Mercantile  Exchan^.  Ron  Kifer, 

Vice  President,  Program  Management.  IDHL  Express. 

Jerry  McElhatton.  Senior  Executive  Vice  President. 

Global  Technology  and  Operatioos,  MasterCard  Internationa! 

Program  Concludes 


Exduslvefy  sporrsored  by: 
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••  • 


Jerry  McElhatton 
Senior  Ennrtivr 
Vice  PresulenL 
do&al  recknokigy 
and  OpfTDtiORs. 
MasterCard 
IrtterTiatianol 


Steve  Adolph 
CTO,  £M0prur 
.SohifioM  Groap, 
CtESA 


Corporate  Systems. 
Hinoa  Hotels 


Richard  VUlars 
Vice  Ptesidem. 
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TECHNOlOliY 


Mike  lucas.  IT  director  at 
Hogan  &  Hartson  LLP.  had 
bad  enough.  The  ^^^hmg• 
ton*based  law  firm  was 
paying  S30,000  a  month  to 
back  up  data  on  more  than  400  servers 
located  in  27  offices  worldwide  and 
store  the  tapes  off-site.  Lucas  says  he 
couldn't  stomach  the  cost  of  buying 
more  tape  drives  to  back  up  every  new 
print,  file  or  application  server. 

Along  writh  the  increasing  costs,  the 
tape-based  infrastructure  created  ad¬ 
ministration  issues,  including  the  need 
to  sometimes  rely  on  nontechnical 
staffers  to  swap  out  tape  cartridges  in 
each  remote  office  every  night  and 
take  them  off-site. 

Then  there  were  the  software  glitch¬ 
es.  “We'd  have  trouble  from  time  to 
time  with  a  tape  getting  hung,  having 
to  do  a  reboot  of  a  server  during  off 
hours.  We  were  at  risk  of  not  having  a 
backup.'*  Lucas  says,  adding  that  re¬ 
trieving  tapes  for  restoring  data  in  an 
emergency  could  take  more  than  a  day. 

Data  protection  executed  at  remote 
sites  is  often  a  hit-or-miss  scenario 
because  “no  one  knows  if  the  backup 
actually  happened  or  if  a  restore  can 
occur.'*  says  Arun  Tane^a,  an  analyst  at 
Taneja  Group  Inc.  in  Hopkinton,  Mass. 


Those  frtistrations  led  Lucas  to  use 
a  remote  backup  strategy  that  brings 
backup  data  into  the  data  center,  where 
it  can  be  centrally  managed.  Vendors 
offer  a  variety  of  network-based 
schemes  that  pull  data  across  a  WAN 
to  a  central  repository.  These  systems 
are  simpler  to  manage  and  more  cost- 
effective  than  local  tape  backups,  ana¬ 
lysts  say. 

Most  include  software  and  appli¬ 
ances  that  replicate  data  from  branch 
offices  to  the  data  center,  where  it  is 
backed  up  to  a  disk  device  and/or  tape 
library.  This  model  eliminates  the  need 
for  media  handling  or  IT  support  at  re¬ 
mote  sites  and  offers  greater  security, 
since  backup  data  is  centralized. 

The  increasing  popularity  of  these 
systems  is  starting  to  affect  sales  of 
entry-level  tape  drives  commonly  used 
to  back  up  direct-attached  storage. 

IDC  in  Framingham,  Mass.,  is  forecast¬ 
ing  a  20%  decline  this  year  as  adminis¬ 
trators  increasii^ly  decide  not  to  back 
up  branch  servers  locally. 

The  Options 

Vendors  offer  several  approaches  to 
remote  backup.  Software  such  as 
Veritas  Software  Corp.‘s  Storage  Repli¬ 
cator  and  CYA  Technologies  Inc.'s 


I  HotBackup  first  execute  a  complete 
'  backup  ofdirect-attached  storage  on 
each  remote  server  or  network-at¬ 
tached  storage  appliance  and  then 
move  incremental  or  “delta”  changes 
over  the  WAN  to  the  data  center. 

Some  organizations  with  branch  of¬ 
fices  that  host  multiple  servers  are 
choosing  to  first  consolidate  backups 
to  a  local  disk-backup  appliance  before 
replicating  data  across  the  WAN.  The 
appliance  can  complete  server  backups 
quickly  across  a  LAN  and  then  stream 
updates  over  the  slower  WAN  connec¬ 
tion  to  the  data  center,  where  it  can  be 
archived  to  tape. 

For  workstation  backups,  some 
storage  administrators  are  creating 
virtual  drives  on  remote  end-user  PCs 
and  mapping  those  to  a  file  server 
back  in  the  data  center.  To  avoid  per¬ 
formance  problems  over  the  WAN. 
administrators  install  a  local  data- 
cachii^  appliance  that  gives  users 
access  to  their  files  at  LAN  speeds 
while  updates  stream  in  the  back¬ 
ground  to  the  back-end  appliance  in 
the  data  center. 

Lucas  contracted  with  DS3  Data 
Vaulting  LLC,  a  service  provider  in 
Fairfax.  Va..  for  his  network  backup 
system,  which  includes  disk-based  ap- 
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Thanks  to  remote  data  replication  and 
disk-based  backup  technologies,  the  data 
center  is  reasserting  control  over  branch- 
office  backups.  BY  LUCAS  MEARIAN 
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pliances  and  software  from  Asigra  Inc. 
in  Toronto.  Asigra's  Televaulting 
DS-Client  software  runs  on  servers, 
desktops  and  laptops  connected  to 
each  remote  office  LAN  and  automates 
the  backup  of  about  JTB  of  com- 
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Learn  How  to  Achieve 
Storage  Networking  Success 

■  Get  a  Contemporary  Overview  of  Todays  Storage  Networking  Issues  and  Opportunities 
•  See  How  to  Implement  and  Deploy  the  Latest  m  Storage  Networking  Technologies 

Hear  the  Latest  m  Enterprise  Security 

■  Learn  from  Best  Practices  and  Case  Studies 


Why  You  Should  Attend 

Are  you  responsible  for  managing  your  company's  sforage  assets  and  strategies’  Want  to 
exchange  innovative  ideas  and  strategies  with  other  executives  who  share  the  same 
obiectrves’  Then  attend  Storage  Networking  World,  where  you'll  network  with  and  learn 
from  renowned  experts  and  the  nation's  top  user  executives. 


ADp  Ruhr*  Cantor 
(hARCL  and  fonnar  Chef 
Scienbst  XeroK 


Conference  At-a-Glance  fsvr,;ec„oct..np.j 

For  details,  jpdates.  aod  to  register  veil  www.snwusa.com/cw 

MONDAY.  OCTOBER  25 


Density  CooNng  of 
Storage  Networking 
Equipment  at  the 
FacHtty  Level 

Donald  Beaty  Founder  & 
PresTdeift,  DLB  Asaociates 


Storage  Basics 
and  Trends 

Deonts  Martin.  Senior  Analyst. 


Power  Statements, 
Questions  and 
Answers  Techniques 
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10  35am  to  11  30am  Rote  of  Server  Blades 
and  Virtuaibstton  in  Next 
Generation  Beta  Center 

Aron  Taneia.  Founder  and 
Consulting  Analyst.  Taneja  Group 


1  30am  to  1  00pm  Luncheon 


-  Date  Lifecycle 

‘  Virtualization  A 
Securing  tour  Storage 

-  Focus  on  Networking 
Tour  Storage 

-  Focus  on  Storage 

-  SAN  Manegerrtertt 
■  toice  of  the  User 


Why  Tape  Continues 
to  Make  the  Grade 

Richard  Harada.  Presideni  Tape 
Technology  Council 


In  IM  last-paced  sessiOR.  CCs 
no  stgr  age  ana^  M>  eiamne 
cemparkos'  groitong  interest  m 
deotoymg  tered  storage  aoMnns 


fi^pre-  I  SPONSOREOBY 

r:rlQ»«ntum 

at  the  Rei  CaitMn  Gaft  CUi  kicateO 
aOiaeent  to  the  JW  Uan«n  Grame 
Lakes  Raaort «  com(*iTiant»y  (a 
S1?&  itthie)  (or  regotered  IT  end 
uaers  (Other  partic«ants  nckiOing 


700pm  to  9  OOpm  Welcome  Reception 
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^OMTTO^ information  and  to  register,  visit  www.snwusa.com/cw  or  call  1-800-883-9090 


COHCURRCNT  LUNCHEON  SESSIONS 


TUESDAY,  OCTOBER  26 


General  Sessions  Begin 


Don  TapscotU  Renowned  Bestselling  Author  of  The  Naked  Corporation. 
Growing  Up  Digital  and  Paradigm  Shifl 
The  Future  of  Knowledge  Management 

Johi'  Mdtj'Tikd  MD  C  It  I  Cj'eG'oup  HpjrTh  w.-  j . 

Kevin  Rollins,  President  A  COO.  Dell 


9  45am  to  10  tbam 


1030am  to  1 1  00am 


Keith  Glennan,  VP  &  CIO,  Northrop  Grumman  FT 


Elevating  the  Art  of  Storage 


1 1  30arn  to  noon 


Industry  Presidents’  Roundtable:  A  Market  Outlook 

Mofleratoi  Doo  Tapscoft  Author  ol  The  Naked  Co'poralion  Gtomng  Up  Digital  i 


Luncheon 

On  the  Valencia  Lawn 


Measuring  the  \Mue 
of  IT  lnvestiT>ents 

VRrehard  Sneider. 
Managing  Partnei. 
WterUncty  Grouo 


1  30pm  to  2  00pm  End  User  Case  Study;  Best  Practices:  Data  Center  Consolidation 


SNW  IS  a  great  venue 
for  peer  discussion  «  an 
opportunity  to  provide 
feedback  to  vendors  on 
what  users  need  from  them 
I  sat  down  with  my  key 
vendors  and  shared 
information 


Greg  Reyes.  Chairman  &  CEO.  Brocade  Communications  Systems 


End  User  Case  Study:  Evaluating  Options  for  Business 
Continuity/Disaster  Recovery  Plans 


3  00pm  to  345pm 


CTO  Insights  Panel 

Mu.»idt(y  JohWtiiiaih  T3.q 


00pm  to  30pm 

5  30pm  to  8  30pm  E»po  with  Dmner  /  Interoperability  S  Solutions  Demo  Open 


John  Greer 
Director.  IT  Infrastructure 
Pacific  Gas  &  Electric 


WEDNESDAY,  OCTOBER  27 


8,30am  to  9: 1 5am  Nick  Carr,  former  Executive  Editor  of  the  Harvard  Busirtess  Review 

m  and  author  of  Does  IT  Matter? 

9i5amto945am  End  User  Case  Study 

945am  to  10.15am  Industry  Leader  Presentation 

10  30am  to  1 1  00am  Ef>d  User  Case  Study:  Realizing  the  Vision  of  Management  Simplicity 

and  Improved  Business  Processes  in  a  Demanding.  Distributed, 
High-Performance  Environment 

W.  i,je  VP  i  ^  ajiM.jt-.  .  • 

1 1  00am  to  1 1  30am  The  Half-Life  of  Storage  Trends 

FVli-.ani^oper  Cha  irinr,  S  CEO  AD'. 

1 1  30am  to  13  I5pm  Panel:  End  Users  Speak  Out 

Mhflhidtu'  .loh^Oc*  £(|torrrO"e'  V*:'- 

12.15pm  to  1-45pm  Expo  &  Luncheon  ■|i..j:.'.!=.J:M=l!l.»gWBW 

I  45pm  to  2  15pm  End  User  Case  Study  ^gQQ|S|||l|M|||| 

2.15pm  to  2  45pm  Industry  Leader  Presentation 

245pm  to  3:30pm  Analyst  Roundtable  Panel  A 

UoOih jtoi  JOh  WIMn  ^oga  CEO  &  TpunOe’  lugo  Pdilwii  ntema'ic'wx  ^^JbSSs 


JW  Marriott 
Grande  Lakes 
Res<Kt 

Olando  Ftonoa 


Hotel  Reservations 
and  Travel  Services 

IDG  Travel  is  the  offoal  I  i 

iravei  tompanj  for  Storage  I  IL/V. 

Networking  They  I 

are  your  one  stop  Shop 

tor  exclusive  discounted  rates  on 

hotel  accommooalions 

To  reserve  your  accommodations  visit 

www.etcentraLcom 

You  can  aiso  ca*l  our  conference  housing  line  at 

1-800-340-2262  (or  1-508-a20-$686) 


3.45pm  to  5. 15pm 
5:15pm  to  7- 15pm 
7-30om  1o  9  00pm 


Expo  and  Reception  i 

Gala  Evening,  Dinner  aM  Entertainment 


THURSDAY,  OCTOBER  28 

7  30am  to  8;30am  Breakfast 
S'SOam  to  Noon 


Conference  Concludes 


3  $*95  Genera'  Conference  Package  (Ocwoer  26  4  27) 

-  c '-oes  3e"e'4'  5«»>oni  £.oc  Mea  sis^wep'r^s 

□  $1,290  Toiai  4-Day  Pac«age  (Octooer  25  26  27  28) 


3  Sl,29S  General  Con'erence  Packaoe 

■'^■uoea  5ef,*ra'  Cc-'f-snce  Eipc  l»ea  s  4  Recepi^- , 

3  $1,^  'olai  4-Day  Package  (October  25,.  26  27  28) 


.000  7ota‘ 4-Day  Pacnaoe  (October  25  26  27  28' 
.»  »  1  .  V--:»  i-ae-vissfriK-s 


3  $3,300  Total  4 -Day Package  (Ocfober  25  26  27  28) 

O',  W'-i  r  aS.s'.eM  r.,^.4 

orai^M  T,io.  4-5  S'Ji*  Cf -1  <.c»r<.'  Te^'  <?ea<j.  -  i 


Payment  Method 


3  American  Express  J  VISA  3  MasterCard 


U I  am  an  IT  End-  User* 

(CompMt  AnanOM  ProfUe  belowt 


Q  I  am  a  Channel  Partner/  I  3  $3 


Imegrator/Consultant 


Of  oviceu'^  '  SUV's  Cnir,^  ^f~,e 
^  'iT*  te^-itnrct  ninn  -‘—par,  ^  « 

SlkU  jr«  MOe  e  FVMC  «  s.  JOB  jiirwT  v>c« 


Please  fax  this  completed  application 
to  1-508-820-8254 


Q  My  company  is  Sponsoring/ 
Exhibiting  at  SNW 


ife’ei-ce  Package  (October  26  &  27; 


a>  Conference  Package  (Ocfobe’  26  4  27) 


^  Total  4^ Package  (October  25  26  27  28) 


Q  I  am  a  representative  of  a  Non-Sponsoring  IT  Vbndor  Company 
□  $9,000  ausMess  Development  Professional  Package  for  Sares  Ma'.ef  ng  me  Bus.nt 
vvr«»sare*xart9eo»par*ic»»'-SitrsgfNM«c»,,,rgvS^tw»^  CVfi.rfsr«»,a.*,etp,  -.4r'«Ar" 

He-S«S0e-e30a667'Aetr,WNe,.meBr;.««^ 

■*'>*■  '•pSt'J'O'  «  ”■«*  eic’.i9i«>  6>  C9-o<liniiiena  rtias*  J'  }  »v  <¥6  »r  '  «sws  ^ 


Q  I  am  a  Financial/Eqiiity  Analyst  and/or  ^fenture  Capital  F^essional 


□  $1390  •nrp.ijh  Sesrer-ber  Ik  20C4i 
General  Confererree  Package 

ir'C'utni  Gmerjr  Ccr'*ef*'c«  Sessoni  Eo: 

8  AKesr^'t 


□  $1,690  »*?p' S«it»r-t4. '4  2004 , 
General  Cor>fe>ence  Package 

•'  UJM  C  'wee  S«j»cri  E-cr 
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I  am  a  qualified  member  of  the  press.  i  can  venfy  my  press  ctedeniiais 
Press  should  call  Enr»  Keefe  at  t  -781  915  5009  to  register 
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Application  for  Conference  Registration 


F«  this  completed  application  to  1-508-820-8254  or  apply  online  at  vw8fw.snwusa.com/cw 


Your  business  card  is 
REQUIRED 

to  process  your  application 


Questions?  Call  t-800-883-9090 


H  not  indicated  on  your  business  card,  piease 
provide  the  following  required  information: 


Registration  questions? 

Cal  '-800-983  SOOGorerna.  sr'W’eo^Jco'^c^erywjQco' 

Need  accommodations? 

Rese'.e  tne-^.  a!  wwwetcentral.com 

Please  ca"  ^  800  340-22S2 


www-compirteniwjrld.com 
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pressed  data  from  local  backup  appli¬ 
ances  in  10  olTices  over  the  WAN  to  an 
ATOT  data  center. 

After  completing  an  initial  full  back¬ 
up.  the  remote  appliance  provides  up¬ 
dates  only  for  changed  data  blocks.  It 
eliminates  duplicate  Tiles,  encrypts  the 
data  and  compresses  it  at  a  2-1  ratio  be¬ 
fore  automatically  sending  it  across 
the  WAN  on  a  scheduled  basis. 

Lucas  expects  a  two-year  payback 
on  his  investment.  The  initial  system 
installation  in  Hogan  &  Hartson’s  cen¬ 
tral  office  cost  about  $13,000.  He  has 
deployed  10  offices  to  date  and  is  con¬ 
tinuing  to  roll  out  the  technology. 

Caching  Up 

Companies  such  as  Actona  Technolo¬ 
gies  Inc.  (recently  acquired  by  Cisco 
Systems  Inc.).  Riverbed  Technoli^ 

Inc..  Oisksites  Inc.  and  Tacit  Networks 
Inc.  use  appliances  at  both  the  remote 
site  and  the  central  data  center  for 
global  file  sharing.  The  appliances 
speed  up  access  to  shared  files  in  part 
by  removing  the  overhead  associated 
with  fUe-serving  protocols  such  as  the 
Ck>mmon  Internet  RJe  System  and 
Network  Rle  System. 

Mukesh  Shah,  director  of  network 
services  at  The  Associated  Merchan¬ 
dising  Corp.  (AMC)  in  Plainfield,  N.J, 
is  in  charge  of  file-sharing  operations 
among  40  remote  locations  in  a 
worldwide  network  that  includes 
dau  center  hubs  in  Hoi^  Kong 

and  New  Jersey. 

AMC  uses  MetaFrame  serverware 
from  Fort  Lauderdale,  Fla.-based  Citrix 
Systems  Inc.,  which  gives  Windows  XP 

Iind  wireless  devices  virtual 
in-clieiu  access  to  applications 
luming  on  back-end  servers.  It 
also  uses  the  New  Jersey  data 
center  for  global  fUe  sharing 
of  Excel  spreadsheets,  Micro¬ 
soft  Word  documents  and 
other  Tiles. 

But  users  in  Asia  and  Eu¬ 
rope  were  waiting  more  than 
two  minutes  for  remote  files 
to  open.  'Hk  system  also  lacked  1 
equate  fUe-locking  safeguards  ] 

r  some  shared  files.  Users  were  i 

ufte  unhappy.”  Shah  says. 

Eight  months  ago.  Shah  began  I 
Joeing  a  caching  appliance  from  i 
Tuth  Plainfield,  N.j.-based  Ihcit  i 
Networks  in  his  New  Jersey  data  i 
enter.  File-access  times  dropped  s 
•om  an  average  of  122  seconds  t 
:» 11  seconds  on  fust  access  and  I 
liminated  the  end-user  wait 


BACKING  UP  THE  BRANCH  OFFICE 

In  A  KtfWal  •  - 


In  a  typical  remote  office  scenano. 
PCs  and  application  servers  in  branch 
offices  rurining  badojp  dienl  pro¬ 
grams  are  backed  up  throughout  the 
day  to  3  local  disk  appliance.  From 
there,  data  is  automatically  repbeated 
across  a  WAN  link  to  another  appli¬ 
ance  m  the  data  center  The  data  is 
then  streamed  to  a  tape  Umy  for 
arclaving. 


OBwaaoQip 
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altc^ther  on  subsequent  attempts 
after  the  Tile  was  loaded  into  the  local 
appliance's  cache. 

“Tacit  has  a  process  where  you  can 
push  files  to  a  local  cache  on  a  sched¬ 
uled  basis."  Shah  says.  “So  when  users 
go  to  access  the  file,  it's  already  there." 

When  users  change  and  save  the 
file  back  to  the  cache,  it's  also  saved 
on  the  main  file-sharing  server  in 
New  Jersey,  where  AMC  staffers  back 
it  up.  “AU  restores  can  be  done  cen¬ 
trally.  whereas  if  we  had  to  substitute 
the  cache  appliance  with  a  file  server, 
we'd  have  the  complexity  of  backups 
and  restores  at  the  remote  office  level." 
Shah  says. 

Outsourcing  It  AR 

Overworked  IT  organizations  that 
don't  have  the  time  or  resources  to  set 
up  a  remote  backup  system  can  con¬ 
sider  similar  offerings  from  service 
providers. 

Brian  Asselin,  IT  director  at  Harbor- 
side  Healthcare  Corp.,  a  Boston-based 
long-term  care  company,  oversees  op¬ 
erations  ft»r  55  locations  and  8.500  em¬ 
ployees,  but  he  says  he  has  only  one  IT 
person  for  each  of  the  nine  states  in 
which  fiurilities  arc  located. 

Harborside  had  been  using  direct- 
attached  tape  backup  for  its  remote 
application  servers,  but  Asselin  says 
ensuring  that  backups  occurred  and 
performing  restores  were  a  nightmare. 

“Our  people  working  in  the  facilities 
are  definitely  technically  challenged," 
be  says.  "Logically,  it  would  be  im¬ 
possible  to  restore  with  the  people 
I  have." 

What’s  more,  the  Health  Insurance 
Portability  and  Accountability  Act 
requires  greater  security  around  pa¬ 
tient  infonnation  than  Harborside’s  IT 
infrastructure  can  provide.  Asselin 
says.  ‘There’s  just  a  slew  of  security 
that  needs  to  be  in  place  by  2005  for 
HIPAA."  be  says. 

Instead  of  building  a  central  data 


center  where  data  could  be  replicated 
for  disaster  recovery  purposes  and  fur¬ 
ther  burdening  his  IT  siafif,  Asselin 
chose  service  provider  AmeriVault 
Corp.  in  Waltham,  Mass.,  to  host  back¬ 
up  data  storage  and  handle  daily  repli¬ 
cation  from  the  remote  sites. 

AmeriVault  installed  its  C^entral- 
Control  software  on  Harborsidc's 
desktops  and  an  agent  on  each  of  its 
servers.  After  completing  an  initial  full 
backup  of  all  data,  the  vendor  per¬ 
forms  daily.  incremeDtaL  encrypted 
backups  over  the  Internet  to  U$  disas¬ 
ter  recovery  centers. 

In  an  emergency,  administrators  at 
Harborside  can  perform  data  restores, 
even  from  home,  using  a  point-and- 
click  application  on  AmeriVaulc's  Wrt» 
portaL  Alternatively,  data  can  be 
shipped  on  tape  for  large  restores. 

Asselin  says  AmeriVault  has 
“processes  and  procedures"  that  are 
HIPAA-compliam,  which  relieves  his 
staff  from  having  to  set  up  its  own 
compliance  program.  And  Asselin 
says  he  also  reduced  labor  costs  b>‘ 
outsourcii^  his  remote  backup  and 
recovery  architecture  because  “we 
don’t  have  to  have  people  running 
around  dedicated  to  the  task  of 
backup." 

But  while  the  remote  backup 
technology  made  processes  more 
efficient,  the  outsourcing  approach 
wasn't  necessarily  cheaper. 

I  “In  terms  ofactxiaJ  backup  cost, 
it’s  pretty  much  a  wash.  Whim  you 
con^der  bandwidth  and  license 
payments  for  software,  it's  pretty 
much  even  with  other  backup  solu¬ 
tions,"  Asselin  says. 

Tony  Asaro,  an  analyst  at  Enter¬ 
prise  Storage  Group  Inc.  in  Mil¬ 
ford.  Mass.,  says  the  costs  of  ed^ 
network  backup  technologies  are 
continuing  to  drop,  and  as  targe 
companies  investigate  using  these 
systems,  big  vendors  are  stepping 
in  with  new  products. 


Asaro  points  to  EMC  Corp.'s  entry- 
level  Clariion  AXIOO  array,  which  can 
be  directly  attached  to  its  NetWin  UO 
NAS  (^eway  or  bought  as  a  precon¬ 
figured  storage- area  netwotk  with 
backup  and  storage  management  soft¬ 
ware  for  remote  office  backup. 

And  EMC's  Legato  RepliStor  replica¬ 
tion  software  is  bundled  with  switches 
from  Brocade  Communications  Sys¬ 
tems  Inc. 

"I  don't  think  it's  a  bd,“  Asaro 
says.  "I  think  more  people  are  going 
to  adopt  this  technology  because  it's 
cost-effective."  <•  48547 
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The  SEI  is  already  involved  in  two  of 
the  most  important  per\asive  areas  in 
soltware  engineering:  prinress  im¬ 
provement  for  software  and  system 
development,  and  network  security. 

Tm  convinced  that  increased  elTons 
in  st*flw'are  architectures  could  help  in 
software  quality,  productivity  and  se¬ 
curity.  We  need  to  boost  our  efforts  in 
this  area. 

In  Department  of  Defense  s>  stems 
and  in  e«*mmereial  systems,  we  are  in- 
cre.vsingly  seeing  the  challenges  and 
dilTiculties  associated  with  higher  and 
higher  levels  of  integration. 

We  also  see  the  great  benefits  to 
hori7ontal  integration  across  systems. 


Aietired  Aii  Foicc 
general  aims  to  L  ':::  ■ 
military  discipline 
to  software 


On  Aujj. Ketired  L'„S. 

fonv  <;en.  Paul 
D.  Nielsen  beeome  CfO 
ani/djreeforof<,drn<’gie  i 
MeWon  Onhvrsify's -Sofr- 
uvre  fngineering  Insti¬ 
tute  in  I'irtsburgh.  Before  i 
assuming  his  nme  fob. 
Nielsen  talked  to  C«)rn- 
puterw\»rld's  iinda 
/fosencranee  about  whuf  ' 
his  H'orfc  in  the  mi7itary  mcHtn.v  for  the  I 
future  of  IT  and  ahi>ut  his  agenda  for 
the  SEI. 

Whal  are  some  leading-edge  IT  research  i 
areas  in  the  miStary?  How  couM  they  be  ap-  I 
plied  to  the  commercial  world  in  the  future?  , 
The  military  leads  in  l3rgc-*sc3le  inte¬ 
gration.  In  the  past,  we  had  eommuni-  I 
cation  netw-orks  that  operated  at  differ-  I 
cm  frequencies  that  made  it  hard  for  I 
people  to  talk  to  someone  who  was  on  ! 
j  dilTercnt  frequency  or  a  different 
kind  of  a-ceiwr.  So  we’re  trying  to  in¬ 
tegrate  all  those  systems  so  people  can  I 
Jo  cross-banding  —  a  person  who  ' 
has  a  L'HI-  radio  ultimately  can  net-  | 
work  into  a  trunk  that’s  maybe  at  satel¬ 
lite  frequency  back  to  the  States  and 
them  talk  to  sonwone  and  get  informa-  . 
tion  back.  I 

I  think  that's  an  application  the  j 
ettmmercial  world  could  benefit  fn*m. 
UTicn  you  think  that  there  is  one  satel- 
Ine  providing  cable  TV’  u>  the  entire  i 
ccust  of  the  U_S..  losing  a  satellite  | 

cinild  be  a  terrible  thing.  But  if  you 
v>tuld  do  st^mc  of  this  cn>s.s-K»nding.  , 
cross-networking,  you  tnighi  have  [ 

some  ways  to  workaround  issues  like 


that  and  Ica-se  .serv  ices  on  some  other 
satellite  to  st.in  to  provide  services  to 
people  tlut  you've  U'st. 

Ancuher  project  in  the  miiit.iry  is 
speech  enhancement . . .  where  we’re 
dtung  si»me  unique  kind  of  work. 

Eor  example,  when  linguists  listen  in 
t*n  people  around  the  world,  often  the 
links  that  they  li.stcn  to  arc  rather 
n«»isy.  .So  we’ve  had  to  work  over  the 
years  to  take  out  the  noise  in  the  sys¬ 
tems  so  the  linguist  has  a  better  shot 
at  understanding  what’s  going  on. 

Because  some  noise  get.s  conducted 

through  your  body  —  thrinigh  _ 

your  bones,  mu  just  your 
eardrums  —  w'c're  startirtg  to 
look  at  whether  we  can  do  active 
eanecllation  of  noise  that  cou¬ 
ples  into  your  body  through 
your  bones.  In  the  three-tt>-five  year 
range,  (reducing  that  noise)  will  help 
airline  pilots,  because  it’s  really  based 
on  [current  iechnok>gy|,  and  it’s  just 
extending  it  to  dilTercnt  frequencies 
and  pi>wer  levels. 

What  are  the  top  research  projects  on  the 
SEI's  agenda  for  the  next  three  to  five  years? 


ware  is  predominantly  the  glue  that 
holds  these  systems  together.  So  the 
tine  between  g»>od  software  enginwr- 
ing  and  goinl  systems  engineering  is 
blurring-  SEI  has  to  work  with  the  in¬ 
dustrial  base,  the  at'ademic  community 
and  the  gin  emment  to  Improve  the 
state  of  sy  stems  engineering  in  the 
United  Slates. 

Iliere  are  other  important  areas; 
formal  validation  and  verification. 
UOTS  (commercial  ofT-the-shelfl 
reuse,  software  supportability,  anti- 
tamper  technologies  for  software,  the 
growing  issues  of  w  ireles,s 
I  networks!. 

I’d  also  like  to  k>ok  at  ultra- 
secure  systems  for  certain  ap¬ 
plications  and  what  arc  the 
software  implications  of  nan«v- 
sysiems.  advanced  ri>botic  systems  and 
software  in  health-related  systems,  in¬ 
cluding  prosthetics. 

What  would  you  hope  those  projects  will  lead 
to.  and  when?  My  hope  is  that  we  could 
make  significant  contributions  in  all  of 
these  areas  over  the  next  three  to  five 
years.  SEJ  docs  not  have  to  Jo  thus 
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Title: «,  }-()  .uid  Jircv  ti >1 

Organization:!  'I.mi  I.  ■  siiU’s'  w 

I-nuiiiffriri!:  lustiiuie 

Background:  Nu-Im'ii  is  .» jjr.u.iu.u«'  <*|  ihv'  ( ',s  Air  I . u,  r 

.\c .idi‘in\  ( Ii'  h.i*s  (.'.trill'd  I lirt'c  Jfui ei  s.  iru  luvi i ti^  .1 

I’h.I ).  in  pl.iMii-i  pip  Ml  s  In 'I  II  [(ii  l’iii\rrsn\  iT!  .ilili  t 
ni.i,  1  ),}\-is.  1.  ntil  iwi.muK'.  hr  u .r-  ttnmii.indrr  id' dir  Air 
{•orrr  Krsr.itvh  1  .ihi-r.iion  .ii  Wriiihi  I'.iifrrsoii  .-Xii 
i  orrr  Hd'^r  in  ( >hio,  whrrr  hr  ni.iiuiurd  .in  .innu.il 
hudpr!  of’miijr  lii-in  s.^  hillmn. 


Taming  Unruly 
Syi^ems 

AsampierofSQproiects 
lhat  are  under  way; 
FforeSretto-QiiilhtCngiHWiluil 
Prafocl  is  drtnino  ways  to  develop  systems 
wito  shiflino  ttounderies  end  users,  uncer¬ 
tain  (Xns  sohMre.  unpredUable  tailures 
and  lack  of  control. 

FuneNen  EiNieSM  Aefoel  is  exploring 
I  ways  to  predict  the  behavior  of  large. 

!  complex  programs. 

'  IrHrwinn  flww  ffoilpftelirts 

dehning  tools  for  idenMying  and  impfenw^ 
ing  system-survivabity  strategies. 

VMdor  IM  AnMmani  and  Thfwd 
FwiMiMi  h  B|||.|  Is  developing  methods 
I  tor  assessing  vendor  capabibesns  indica- 

fors  of  product  qualRy. 

!  ftrenciil  Wtiefcimnie  Profoct  s 

developing  semarto-besed  rnethods  to 
prove  contingency  planning  and  analysis  to 
,  deal  wito  physical  attacks  artocyberattocks. 

COTlfciHdfyaiwiPliiimis 

developinQ  principles  and  practices  lor 
integrtfing  and  evoMng  systems  from 
previously  bidl  and  cornnieraNly  available 
ctxnponertts. 

work  alone.  Wc  do  it  in  conjunction 
with  the  broad  scientific  community  in 
the  U.S.  and  throughout  the  world. 

How  will  the  technology  for  these  projects 
get  transferred  to  the  commercial  sector? 
Since  we  work  with  the  broad  commu¬ 
nity.  improvements  and  breakthroughs 
j  will  transfer  based  on  their  mcrii.s. 

We  also  work  with  the  standards 
bi»dics  to  bring  some  consistency  to 
the  software  "battlefield.”  and  clearly 
major  governmental  sponsors  like  the 
DOD  and  the  Department  of  Homc*- 
land  Security  help  transition  some 
efforts  by  bringing  their  substantial 
weight  behind  some  efforts. 

How  win  rt  help  the  corporate  IT  depart¬ 
ment?  Corp<»rale  IT  departments  are 
an  important  market  for  software  engi¬ 
neering  technology,  even  though  those 
same  technologies  are  also  very  impor¬ 
tant  to  corporations  for  their  external 
markets.  Corporate  IT  departments 
need  quality  systems  that  arc  afford¬ 
able.  sustainable,  reliable,  evolvable 
and  sccua-.  Isn’t  this  the  heart  of  all 
the  efforts  on  software  engineering? 

Improvements  in  the  quality  of  the 
software,  the  supportability  of  the  sys¬ 
tems  and  especially  the  security  of  cor¬ 
porate  systems  are  crttcial  for  corpo¬ 
rate  IT  departments.  O  407t1 
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A  retired  Air  Force 
general  aims  to  bring 
military  discipline 
to  software 


BOi  Aug.  i,  Retired  US. 

Air  Force  Mai.  Gfn-  PSui 
0.  fMMn  became  CEO 
and  director  of  Carnegie 
Meilon  University’s  Soft¬ 
ware  Enpneering  Insti¬ 
tute  in  Pittsburg  Before 
assuming  his  rww  job, 
Nieisen  talked  to  Com- 
puterwortd's  Linda 
Rosencrance  about  what 
his  Hwrfc  in  rte  military  means  for  the 
future  of  IT  and  about  his  agenda  for 
theSEJ. 


IT 

•  ii  lh»  mHtey?  Haw  couU  tfity  be  ^ 
pM  to  ttw  emnNKW  world  bi  tha  fulm? 

The  military  leads  in  large-scale  inte¬ 
gration.  In  Ae  past,  we  had  communi¬ 
cation  networks  that  operated  at  differ¬ 
ent  frequencies  that  made  it  hard  for 
people  to  talk  to  someone  who  was  on 
a  different  frequency  or  a  different 
kind  of  receiver.  So  we’re  trying  to  in¬ 
tegrate  all  those  systems  so  people  can 
do  cross-banding  —  so  a  person  who 
has  a  UHF  radio  ultimately  can  net¬ 
work  into  a  trunk  that's  maybe  at  satel¬ 
lite  frequency  back  to  the  Sutes  and 
then  talk  to  someone  and  get  informa¬ 
tion  back. 

I  think  that’s  an  application  the 
commercial  world  o^d  benefit  from. 
When  you  think  that  there  is  one  satel¬ 
lite  providing  c^le  TV  to  the  entire 
coast  of  the  U3..  losing  a  s^Uiie 
could  be  a  terribie  thing  But  if  you 
could  do  some  of  this  cross-banding, 
cross-networking,  you  might  have 
some  ways  to  work  around  issues  like 


that  and  lease  services  on  some  other 
satellite  to  start  to  provide  services  to 
people  that  you've  lost 

Another  project  in  the  military  is 
speech  enhancement . . .  where  we're 
doing  some  unique  kind  of  woik. 

For  example,  when  linguists  listen  in 
on  people  around  the  world,  often  the 
links  that  they  listen  to  are  rather 
noisy.  So  we’ve  had  to  work  over  the 
years  to  take  out  the  noise  in  the  sys¬ 
tems  so  the  linguist  has  a  better  shot 
at  understanding  what’s  going  on. 

Because  some  noise  gets  conducted 

through  your  body  —  through  _ 

your  bones,  not  just  your  niiimj 

eardrums we're  starting  to  rUIUK 

look  at  whether  we  can  do  active  Vf  ATTU© 
cancellatioD  of  noise  that  cou-  WWIWIdik 

pies  into  your  body  through 


The  SEI  is  already  involved  in  two  of 
the  most  important  pervasive  areas  in 
software  engineering:  process  im¬ 
provement  for  software  and  system 
development,  and  network  security. 

I’m  convinced  that  increased  efforts 
in  software  architectures  could  help  in 
software  quality,  productivity  and  se¬ 
curity.  We  need  to  boost  our  efforts  in 
this  area. 

In  Department  of  Defense  systems 
and  in  commercial  systems,  we  are  in¬ 
creasingly  seeii^  the  challenges  and 
difficulties  associated  with  higher  and 
higher  levels  of  integration. 

We  also  see  the  great  benefits  to 
horizontal  integration  across  systems. 


your  bones.  In  the  three-to-five  year 
range,  (reducing  that  noise]  will  help 
airline  pUots.  because  it’s  really  bas^ 
on  (current  technology],  and  it’s  just 
extending  it  to  different  frequencies 
and  power  levels. 

Whit  an  ttw  top  rwaarch  profacts  on  the 
SETi  aosnda  hr  toa  nari  toraa  to  fin  yaws? 


across  enterprises.  In  most  cases,  soft 
ware  is  predominantly  the  glue  that 
holds  these  systems  together.  So  the 
line  between  good  software  engineer¬ 
ing  and  good  systems  engineering  is 
blurring.  SEI  has  to  work  with  the  in¬ 
dustrial  base,  the  academic  community 
and  the  government  to  improve  the 
state  of  systems  engineering  in  the 
United  States. 

There  are  other  important  areas: 
formal  validation  and  verification. 
COTS  (commercial  off-the-shelf] 
reuse,  software  supportability.  anti- 
tamper  technologies  for  software,  the 

-  growing  issues  of  wireless 

[networits]. 

rd  also  like  to  look  at  ultra- 
secure  systems  for  certain  ap¬ 
plications  and  what  are  the 
software  implications  of  nano- 


systems.  advanced  robotic  systems  and 
software  in  health-related  systems,  in- 
cludii^  prosthetics. 

Whto  wdiM  ytu  hope  those  proiech  wtt  lud 

to,  and  vdien?  My  hope  is  that  we  could 
make  significant  contributions  in  all  of 
these  areas  over  the  next  three  to  five 
years.  SEI  does  not  have  to  do  this 


work  alone.  We  do  it  in  conjunction 
with  the  broad  scientific  community  in 
the  U3.  and  throughout  the  virorld. 


How  wW  the  tochnotogy  for  these  protects 
pet  transferred  to  the  commerdel  sector? 

Since  we  work  with  the  broad  commu¬ 
nity.  improvements  and  breakthroughs 
will  transfer  based  on  their  merits. 

We  also  work  with  the  standards 
bodies  to  bring  some  consistency  to 
the  software  “battlefield."  and  clearly 
major  governmental  sponsors  like  the 
DOD  and  the  Department  of  Home¬ 
land  Security  help  transition  some 
efforts  by  brii^ing  their  substantial 
weight  behind  some  efforts. 

How  wW  Khdp  the  corporate  rr  depart- 
loent?  Corporate  IT  departments  are 
an  important  market  for  software  engi¬ 
neering  technolr^,  even  though  these 
same  technologies  are  also  very  impor¬ 
tant  to  corporattons  for  their  external 
markets.  Corporate  IT  departments 
need  quality  systems  that  are  afford¬ 
able.  sustainable,  reliable,  evoivable 
and  secure.  Isn’t  this  the  heart  of  all 
the  efforts  on  software  engineering? 

Improvements  in  the  quality  of  the 
softurare,  the  support^ility  of  the  sys¬ 
tems  and  especially  the  security  of  cor¬ 
porate  systems  are  crucial  for  corpo- 
rwe  IT  departments.  O  48711 
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the  U3.  to  a  server  in  France, 
you’ve  got  to  send  the  mail  be¬ 
fore  9-JO  a.m.  if  you  want  a  re¬ 
ply.  So  every  test  tends  to  take 
at  least  a  day  because  we  have 
to  wait  for  people  in  all  the 
time  zones  to  report  back. 

Then,  fust  when  we’d  gotten 
it  all  working,  we  crashed  the 
production  mail  servers.  I 
won't  go  into  exactly’  how  we 
did  it  —  it  gets  embarrassing 
—  but  1  will  say  that  it  turned 
out  to  be  an  obvious  error. 

We  also  took  a  lot  of  flak 
from  our  sales  staff  about  cut¬ 
ting  off  their  e-mail  links  to 
clients.  One  sarcastic  sales¬ 
man’s  comments  hit  home.  He 
said.  “Remind 


Getting  Transport  Layer  Security  encryp¬ 
tion  up  and  mnning  is  difficult  enough 
without  having  to  migrate  it  to  work  with 
an  antivirus  service.  By  Roger  Foix 


sure  it's  working  on  every 
server.  But  so  far,  about  95%  of 
the  project  time  is  being  spent 
dealing  with  the  Utile  TLS 
pix^lems  caused  by  the  mi¬ 
gration.  The  antivirus  people 
aren’t  happy  that  their  project 
seems  to  be  getting  derailed, 
and  I'm  not  happy  that  I'm 
spending  roost  of  my  time 
dealing  with  a  project  that  was 
supposed  to  take  10  minutes  of 
my  time. 


IN  MY  LAST  cou'MN.  1  ex¬ 
plained  my  experiences 
setting  up  Transport  Layer 
Security  and  how  compli¬ 
cated  it  could  get.  Unfortu¬ 
nately.  I’ve  since  discovered 
that  it  gets  a  lot  worse. 

TLS  is  a  wonderful  protocol 
that  can  be  used  to  encrypt 
e-mail  between  two  compa¬ 
nies  very  easily.  Most  modem 

e-mail  gateway  soft-  - 

ware  comes  with  TLS 
support  built  in.  but  3cCll 
there’s  a  lot  involved  y^yj 
in  setting  it  up  as  I  MAH 

disctissed  last  time  JQ|||M 

[QuickLink  482371. 

This  week,  we’ve 
been  making  things  more 
complex  by  adding  antivirus 
services  to  the  mix. 

A  strategic  decision  was 
made  that  it  would  be  better 
to  make  sure  viruses  never 
reach  our  infrastructure,  and 
Gloucester,  England-based 
MessageLabs  Ltd.  was  chosen 
as  the  service  provider.  Nor¬ 
mally.  I’m  cynical  about  the 
abilities  of  vendors’  technical 
staffs.  But  after  working  with 
MessageLabs.  for  the  first  time 
in  years  I  can  say  I’m  im¬ 
pressed  with  a  vendor. 

Ten  Minutes  to  Trouble 

1  was  invited  to  the  initial 
meeting  with  MessageLabs 
as  an  afterthought.  My  col¬ 
leagues  thought  1  didn’t  need 
to  get  involved,  but  they  invit¬ 
ed  me  to  be  polite.  After  all. 

1  was  dealing  with  secure 
e-mail,  so  tl^  figured  I  might 
as  well  be  along  at  the  start 
to  agree  that  I  didn’t  need  to 
be  involved.  The  meeting 
would  take  only  10  minutes, 

I  was  cold. 

Unfortunately,  1  did  need  to 


be  involved.  I  was  concerned 
about  one  throwaway  com¬ 
ment  at  the  end  of  the  Mes¬ 
sageLabs  people’s  presenta¬ 
tion.  They  were  asked.  “How 
do  we  ensure  that  all  our  e- 
mail  goes  throi^  your  ser¬ 
vicer  They  answered.  “We 
just  change  your  MX  record  to 
point  to  our  servers  instead.” 

Mail  exchange,  or  MX. 

-  records  are  the  rout- 

11^  tng  pan  of  the  mail 

11 1 1  service:  Tho’ tell 

the  world  whidi 
^7^.^  servers  should  han- 
Uy,  Q  die  e-mail  for  a  par¬ 

ticular  domain.  By 
changing  our  MX 
record  to  point  to  its  servers, 
MessageLabs  ensures  that  all 
of  our  mail  goes  through  its 
servers,  where  it  can  be 
scanned  for  viruses. 

That’s  a  simple  and  quick 
solution.  But  by  changing  our 
MX  records,  MessageLabs  is 
suddenly  rerouting  all  our 
TLS  connections  as  weU.  and 
we’ve  got  about  30  of  them. 

Technically,  this  shouldn’t 
present  a  problem.  Their 
servers  can  do  TLS.  ours  can 
do  'TLS,  all  our  clients’  servers  J 
can  do  TLS.  and  so  it  should  I 
just  be  a  matter  of  making  I 


tnc.  isn't  securi¬ 
ty  all  about  making  sure  that 
e-mail  keeps  working?  Doesn’t 
that  make  it  somewhat  tFooic 
that  you’re  the  ones  who  arc 
crashii^  Ur 

It’s  always  hardest  to  deal 
with  the  truth. 

While  I’m  on  the  subject  of 
embarrassing  moments,  the 
worst  bit  about  working  with 
MessageLabs  is  that  its  people 
seem  to  know  what  they're 
doing.  At  our  technical  meet¬ 
ings.  our  experts  spend  20 
^  minutes  discussing  whether 
an  idea  will  work,  whether 
we'll  be  able  to  do  it  with  our 
software,  who's  actually  going 
to  do  it.  and  so  on. 

Then,  when  we  ask  Mes¬ 
sageLabs,  Xan  you  do  this.^ 
we  get  the  immediate  re¬ 
sponse.  “Absolutely,  no  prob¬ 
lems."  Twenty  minutes  for  us. 
three  seconds  for  them. 

So  my  advice  for  those  of 
you  looking  to  use  TLS  with  a 
managed  antivirus  service  is 
to  make  absolutely  sure  that 
your  TLS  environment  is  as 
simple  as  possible  before  you 
try  to  migrate  it  Better  still, 
get  the  managed  antivirus  ser¬ 
vice  in  placx  before  you  set  up 
those  ITS  conneaions.  Be¬ 
lieve  me.  you’ll  save  yourself  a 
great  deal  of  stress.  I 


The  Big  Holdup 


Truth  be  told,  much  of  the  de¬ 
lay  is  really  my  group's  fault: 
We  had  a  bizarrely  nonstan¬ 
dard  set  ofTlS  connections. 
Some  of  our  more  important 
clients  have  decided  to  do 
thii^  their  own  way.  and  we 
have  to  follow  their  lead.  As  a 
result,  all  of  our  TLS  connec¬ 
tions  seem  to  have  ended  up 
beii^  subtly  different-  One 
uses  strong  encryption,  one 
uses  weak:  one  uses  MX  rxHit- 
ing,  another  uses  static  one 
does  one  type  of  authentica¬ 
tion.  another  uses  none  at  all: 
and  so  on. 

All  that  gives  us  quite  a 
complicated  TLS  environment 
that  must  be  extensively  test¬ 
ed  and  migrated  to  Message- 
Labs.  But  there  are  two  prob¬ 
lems.  First,  much  of  the  testing 
must  be  done  on  our  produc¬ 
tion  systems  because  our  test 
environment  isn’t  extensive. 

Second,  testing  TLS  connec¬ 
tions  on  our  clients  requires 
the  co<^ration  of  our  clients' 
IT  stafE.  We  must  deal  with  30 
IT  stafib  working  for  30  clients 
on  six  continents  in  nine  time 
zones,  with  12  .•lets  of  holidays 
and  ei^t  native  languages. 

The  tests  themselves  arc 
easy  ~  send  an  e-mail  to  our 
clients,  get  them  to  reply  to  it, 
and  then  quickly  check  the 
routing  to  make  sure  it  was  all 
encrypted.  Bui  when  you’re 
sending  an  e-mail  from  a  mail 
server  on  the  West  Coast  in  > 


Pm  not  happy  that 
Tm^ienclngniostof 
my  lime  dewig  with 
a  project  that  was 
supposed  to  take 
10  minutes  of  my  time. 
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Hewlett-Packard’s 
Itaniuin  server 
roadmap? 
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NOTE:  Margin  of  error  6  pbs 
or  tons  4%. 
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of  350 members.  JU|r  2004 


TOMMY  PETERSON 


Here’s  to  ^ur 
(Eleetronic)  Health 


I  HAD  MY  annual  physical  last  week,  and  there 
were  no  surprises.  The  standard  admonitions  to 
watch  my  diet  and  get  more  exercise  were  ac¬ 
companied  by  the  usual  depressing  reassurances 
that  all  of  those  little  aches,  pains  and  minor 
bodily  dysfunctions  were  merely  normal  signs  of  aging. 

health  care  administration 
and  the  elimination  of  re¬ 
dundant  care  range  as  high 


Also  as  usual,  my  prima 
ry  care  physician  imparted 
this  advice  and  information 
while  shuffling  through  a 
bulging  maniia  folder,  look¬ 
ing  in  vain  for  notes  from 
specialists  and  test  results 
that  either  had  never  been 
sent  or  had  been  inadver¬ 
tently  tucked  into  an  EKG 
printout  from  five  years 
ago.  That  maniia  folder  is 
as  close  to  a  comprehen¬ 
sive  medical  record  as  ex¬ 
ists  for  me.  And  I’m  much 
better  off  than  most  people,  since  Tve 
been  going  to  the  same  intenust  for 
20  years. 

This  country's  medical  records  sys¬ 
tem.  or  lack  thereof  is  just  one  of  the 
things  desperately  wrong  with  the  way 
we  deliver  health  care  in  the  U.S.  The 
good  news  is  that  the  federal  govern¬ 
ment  has  a  plan  to  use  information 
technology  to  fix  this  aspect  of  the 
medical  mess.  The  bad  news  is  that 
the  plan  will  take  so  long  and  cost  so 
much  to  execute  that  it’s  haid  to  have 
confidence  that  it  will  ever  come  to 
fruition. 

Last  month,  the  U.5.  Department  of 
Health  and  Human  Services  (HHS)  re¬ 
leased  its  10-year  road  map  for  the  cre¬ 
ation  of  a  ‘health  information  infra¬ 
structure.*'  The  aim  is  to  create  a  con¬ 
solidated  electronic  health  record 
(EHR)  for  every  American  and  to 
build  a  nationwide  network  for  secure¬ 
ly  transporting  those  records  to  health 
care  providers. 

The  potential  benefits  of  the  system 
are  enormous.  Estimates  of  financial 
savings  resulting  fiom  streamlined 


as  nearly  half  a  trillion  dol¬ 
lars  a  year. 

Beyond  monetary  con¬ 
siderations.  a  single  EHR 
for  every  citizen  would 
translate  into  improved 
care.  Access  to  more  infor¬ 
mation  means  that  doctors 
and  other  providers  will 
make  fewer  mistakes.  Di¬ 
agnoses  and  treatment 
plans  would  be  more  likely 
to  be  made  in  the  context  of  the  pa¬ 
tient's  overall  health  and  medical  his¬ 
tory.  rather  than  just  in  response  to  in¬ 
dividual  symptoms.  In  this  case,  tech¬ 
nology  would  actually  promote  a  more 
holistic  practice  of  me«iicine. 

So.  if  the  potential  benefits  the 
health  information  mfiastructure  are 
so  great,  why  isn’t  it  on  a  faster  track? 

A  decade  is  a  long  time  to  wait. 

Looking  beyond  the  delays  endemic 
to  political  maneuvering  and  en¬ 
trenched  bureaucracies,  the  sticking 
points  are  money  and  technology. 

While  the  system  will  lead  to  enor¬ 
mous  savings  once  it’s  implemented, 
upfront  costs  will  be  hefty,  and  the 
largest  portion  of  them  aren't  covered 
in  the  federal  budget  When  the  HHS 
plan  was  announced,  Mike  KappcL 
vice  president  of  strategic  planning 
at  health  care  IT  vendor  McKesson 
Corp..  told  Computerwortd  that  its 
price  tag  could  reach  $10  billion 
[QuickLink  48367].  With  the  feds  allo¬ 
cating  just  $50  million  for  health  care 
IT  this  fiscal  year  and  $100  million 
for  next  year,  there's  a  big  funding  gap 


for  hospitals  and  doctors  to  fill. 

Administration  will  incur  a  big 
chunk  of  those  aists.  but  the  technolo¬ 
gy  challenges  in  the  project  are  com¬ 
plex  and  expensive.  An  EHR  is  a  virtu¬ 
al  entity,  not  a  collection  of  informa¬ 
tion  that  will  reside  in  a  single  reposi¬ 
tory.  Pieces  of  the  EHR  will  be  scat¬ 
tered  among  a  variety  of  systems, 
locations  and  media.  Authorization  to 
access  the  network  infrastructure  con¬ 
necting  them  will  be  delegated  by  the 
patient,  who  will  have  been  assigned  a 
cradle-to-grave  ID  number  and  be  re¬ 
quired  to  use  two  forms  of  authentica¬ 
tion,  such  as  a  security  token  and  a 
thumbprint.  Single  sign-on  capability 
will  be  crucial  for  providers,  if  the  sys¬ 
tem  is  to  succeed  at  its  main  mission: 
making  it  easier  for  them  to  get  a  pa¬ 
tient’s  complete  history. 

The  EHR  system  will  have  to  main¬ 
tain  a  complete  audit  trail,  tracking 
who  accessed  a  patient's  record  and 
when.  Electronic  document  manage¬ 
ment  and  workflow  tools  must  be  inte¬ 
grated  into  the  system,  and  providers 
will  need  to  secure  plenty  of  band¬ 
width  to  move  images  —  Higitj7fd 
X-rays  and  CT  and  MRI  scans  and 
so  on  —  around  the  network. 

There  are  standards  battles  and 
certification  skirmishes  to  be  fought. 
Vendors  have  lots  of  woric  to  do,  roost 
critically  on  their  software  interfaces. 
Interoperability  is  what  the  project  is 
about.  And  nobody  knows  how  long 
funding  will  last,  or  if  the  powers  that 
be  will,  as  they  say  in  Washington,  stay 
the  course  on  the  project 
But  despite  the  complexity  and  un¬ 
certainty,  few  federal  projects  in  re¬ 
cent  memory  have  been  as  worthwhile 
as  this  one  is.  Who  knows,  if  the  LI.S. 
can  provide  EHRs  for  each  of  its  citi¬ 
zens,  someday  it  might  be  able  to  give 
them  all  access  to  health  care  as  well. 
0486Z7 
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WHEN  CIO  JOHN  HUMMEL  tried  to  comput¬ 
erize  the  way  doctors  write  prescriptions 
for  patients  at  Sutter  Health,  a  networic  of 
26  California  hospitals,  he  came  smack 
up  against  an  immovable  obstacle:  physi¬ 
cian  resistance. 

“We  tried  to  implement  computer  physician  order 
entry  four  or  five  different  ways,"  says  Hummel.  “We 
tried  four  different  vendors.  We  tried  PCs,  t^lets 
and  PDAs.”  In  every  case,  technology  slowed  the 
process  for  the  physicians.  A  prescription  that  took 
five  seconds  to  order  on  paper  took  two  to  three 
minutes  on  the  system.  ITte  doctors  were  frustrated 
over  the  cripplii^  effect  on  their  productivity.  Hum, 
melsays. 


MANAGEMENT 


IT  MENTOR 

rr  SurvivaJ  Guide 

Forty  years  in  IT  have  taught  Ace 
Hardware  CIO  Paul  Ingevaldson 
a  thing  or  two,  and  in  this  valedic¬ 
tory  he  shares  some  nuggets  with 
his  colleagues.  Pftge  30 


Q«A 

No  Free  Lunch 

Open-source  software  is  free  —  or 
is  it?  It  comes  with  ri^ts  and  obliga¬ 
tions,  and  attorney  and  author  Larry 
Rosen  says  it's  important  for  IT  man¬ 
agers  to  understand  both.  Page  31 
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Career  Watch 

Leveraging  your  skills: 
how  project  leaders 
really  get  picked;  and 
IBM  hits  college 
campuses.  Pagg32 


SreathospiM  safety  sydensarealaim^ 
getting  the  basks  rW  -  and  blowing 
motnates  doctors.  BY  CJ  RHOADS 


The  result:  "Even  with  the  [improved]  system  we 
finally  implemented,  it  takes  about  a  year  for  a  physi¬ 
cian  to  recover  to  90%  of  their  origina]  producrivity," 
he  explains,  and  less  than  20%  of  the  doctors  use  it  “I 
would  have  to  label  the  attempt  a  resounding  failure." 

User  resistance  is  nothing  new  in  IT  projects,  but 
in  a  hospital  setting,  the  stakes  are  high<»r.  and  life¬ 
saving  projects  can  be  doomed  by  recalcitrant  doc¬ 
tors.  Still,  user  opposition  is  justified  if  new  safety 
systems  steal  precious  time  and  disrupt  workflow. 


The  best  way  to  win  doctors  over  is  to  follow  the 
same  rules  that  guide  any  good  IT  system  implemen¬ 
tation:  Start  with  strong  executive  support  and  realis¬ 
tic  expectations:  understand  your  processes  and  how 
the  system  will  aflfect  them;  anchor  the  system  with 
an  efficient,  bug-free  back  end:  build  a  user-friendly 
front  end;  find  committed  users  to  lure  in  the  rest: 
and  provide  good  technical  support  But  most  impor¬ 
tant  understand  what  really  motivates  your  users. 

Failed  Front  Ends 

Hospital  safety  systems  arc  doomed  to  fail  if  the 
physician-facing  front  end  isn’t  tied  to  an  efficient 
and  responsive  back  end.  and  the  back  end  needs  to 
be  built  first,  says  Chris  Giglio.  director  of  the  Accel¬ 
erated  Solutions  Center  at  Center  Corp,  a  Kansas 
City.  Mo. -based  vendor  of  hospital  automation  sys¬ 
tems.  “The  physician  changes  should  be  implement¬ 
ed  last.”  he  says.  The  system  must  have  a  flawless 
workffow  before  it's  put  in  physicians'  hands  so  that 
the  effect  on  them  is  minimized. 

fayashree  Raman.  CIO  at  The  Reading  Hospiui 
and  Medical  Center  in  IVnnsylvania.  is  following  that 
ordet  Last  year,  she  installed  a  back-end  medication 
administration  records  (MAR)  system,  which  en¬ 
ables  clinicians  to  match  a  patient's  bar  code  to  the 
bar  code  on  a  prescription  drug  before  it’s  adminis¬ 
tered.  "The  MAR  is  designed  to  ensure  the  five 
rights:  right  patient,  right  drug,  right  time,  right 
dosage,  right  route."  Raman  explains. 

She  also  plans  to  implement  a  computerized  physi¬ 
cian  order  entry  (CPOE)  system,  but  that  will  take 
time,  “ft  is  a  complicated  project  affecting  multiple 
departments."  Raman  says.  "TVe  arc  woriting  through 
the  process  issues  and  anticipate  having  a  working 
model  in  the  next  few  rounth.s.“ 

Tomorrow  wouldn't  be  soon  enough  for  Terrence 
Cescon.  a  doctor  at  Berks  Hematology-Oncology 
Associates  Lid„  who  worits  with  Reading.  "Reading 
Hospital  is  in  the  Stone  Age."  says  Oscon,  who 
trained  at  Hahnemann  University  Hospital  Inc.  in 
Philadelphia,  where  a  CPOE  system  had  already  been 
implemented.  Because  he’s  familiar  with  the  technol¬ 
ogy.  ordcrirtg  a  prescription  online  is  quicker  for  him 
than  writing  it  by  hand,  he  says. 

Back-End  Basics 

But  Hummd  maintains  that  the  back-end  MAR  sys¬ 
tems  are  even  more  important  than  the  front-end 
physician  systems. 

“It’s  pop^  to  point  the  finger  at  doctors’  horrible 
handwriting."  he  says,  referring  to  the  1999  Institute 
of  Medicine  report  that  estimated  that  as  many  as 
98,000  patients  die  each  year  as  a  result  of  prevent¬ 
able  medical  errors  in  hospitals.  But  more  recent 
studies  have  shown  that  only  U%  of  the  errors  are 
due  to  poor  lumdwriting.  he  says.  Eleven  percent  are 
introduced  at  the  pharmacy,  and  a  full  50«t.  of  the  er¬ 
rors  are  made  at  the  bedside. 

"You  can  spend  millions  trying  to  avoid  a  physi¬ 
cian’s  handwriting,  but  it  won’t  make  that  much  dif¬ 
ference."  he  says.  “Hospitals  can  make  a  much  bigger 
unpaa  with  bar  coding.“ 

Even  so.  MAR  systems  alone  aren’t  good  enough, 
says  Claire  Turner,  director  of  communications 
for  The  Leapfrog  Group,  a  Washington-based  con¬ 
sortium  of  companies  that  provide  health  care  to  I 


35  million  Americans.  “Implementing  only  the  back¬ 
end  process  doesn’t  deal  with  the  real  issue.”  she 
says,  “The  earlier  in  the  process  you  catch  the  errors, 
the  better." 

Turner  compares  a  fully  automated  electronic 
health  record  system  (which  includes  both  CPOE 
and  MAR )  to  safety  systems  in  a  car.  “ Wc  need  a  seat 
belt,  an  airbag  and  aniUock  brakes."  she  says. 

John  Glaser  has  had  experience  at  both  ends.  At 
Partners  Healthcare  System  Inc.,  a  nonprofit  network 
of  10  hospitals  in  the  Boston  area,  he’s  implementing 
CPOE  systems  at  several  of  his  leaching  hospitals. 

■’It’s  a  bear  —  very  complicated,  highly  invasive  of 
workflow,  constantly  ertcouniering  challengc-s,"  he 
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HT  daptopafespectadanalardatBiileil  Sanity 
bdaloomucbbosoon.andaplalnalioullrade- 
offe.  aucb  an  dme  sans  acoeaa  b  tnfomaOoe 

FM  on  meaauaideitaHy  and  safety  goals  IM 
rsMe  b  sating  Iwe  Oral  Im  an  InanclalB  or 
Bbecf  da  syebm  b  Sam  money. 

-Cjmout! 


says.  But  unlike  Hummel,  he  doesn't  use  the  term 
failure.  “No  projeet  is  a  complete  success  or  a  com¬ 
plete  failure."  he  says.  "It's  a  maner  of  degrees.  All 
projects  have  problems." 

For  example.  Glaser  tcils  of  rocky  limes  during  a  pi¬ 
lot  of  an  MAR  project.  The  wireless  PDAs  and  the  net- 
wort  weic  flaky;  they  just  didn't  wort  teliably."  he  says- 
“Plus.  we  didn't  really  think  through  the  workflow." 

Wbrfcflow  Reworked 

Workflow  problems  can  sabotage  a  hospital  safety 
system  because  doctors  won’t  stand  for  the  disrup¬ 
tion.  “If  you  do  it  right,  implementing  a  whole  system 
is  like  ripping  out  the  backbone  of  a  hospital  and  re¬ 
placing  it,"  says  Paul  Ruflin,  CEO  of  Eclipsys  Corp-  a 
provider  of  hospital  medical  record  software  in  Boca 
Raton.  Fla.  “It  is  pervasive  technology." 

"The  challenge  is  redesigning  the  entire  work- 
flow."  says  Jacque  Dailey,  CIO  at  Children’s  Hospital 
of  Pittsburgh.  “Success  is  based  upon  process  im¬ 
provement.  not  the  tcchnolt^." 

And  process  improvement  requires  strong  support 
—  from  both  executives  and  IT.  Dennis  Baker.  CIO 
at  Sarasota  Memorial  Hospital,  a  community  hospital 
in  Florida,  has  been  learning  about  that  since  1999, 
when  he  implemented  a  CPOE  system  without 
enough  support  from  either  group.  "For  years,  we 
only  had  25%  of  the  orders  placed  online,"  he  says. 

Executive  backing,  although  belated,  made  all  the 
difference.  ’TVe  finally  got  the  CEO  involved."  Baker 
says.  The  CEO  sent  a  letter  to  all  the  physicians, 
mandating  the  use  of  the  system  within  a  year.  “Now 
we  are  proceeding  floor  by  floor  with  extra  support 
for  the  clinicians  using  iC  he  says.  "Wc  are  up  to  50% 
and  expect  to  get  to  80%  by  the  end  of  the  year." 

Although  automated  hospital  systems  arc  expen¬ 
sive  and  disruptive  and  doaors  complain  about  lost 
productivity  in  the  early  phases,  helping  everyone 
focus  on  the  big  picture  can  improve  the  outcome. 
"You  have  to  do  this  for  the  right  reasons."  Hummel 
says,  "and  return  on  investment  isn't  one  of  them." 

Hummel  says  that  motivation  can  make  all  the  dif¬ 
ference  in  physicians’  acceptance  of  a  new  system, 

I  recalling  a  project  designed  to  ensure  that  specially 
trained  doctors  called  intensivists  monitor  critical- 
care  unit  patients.  "We  implemented  a  video  system 
so  that  intensivists  can  monitor  50  beds  at  a  time  in¬ 
stead  of  10."  Hummel  explains. 

Because  there  are  only  a  few  intensivists  available, 
they  were  thrilled  to  be  able  to  monitor  more  people 
during  each  shift.  “We  decreased  fatalities  by  25%." 
he  says.  "We  proved  that  it  works.  The  cost  is  over 
SS.0O0  per  bed  per  month,  but  we  saved  lives." 

Jocelyn  Benes,  vice  president  of  quality  control 
at  Children's  Hospital  of  Pittsburgh,  says  that  when 
the  hospital  implemented  a  CPOE  system,  “Ve  didn’t 
even  measure  financial  benefits.  Our  focus  on  quali¬ 
ty  was  one  of  the  reasons  we  were  successful." 

Bcncs  says  that  appealing  to  users’  dedication  to  the 
job  is  the  key  to  getting  their  buy-in.  "Clinicians  are 
more  recep^  to  doii^  what’s  best  for  the  patient 
than  they  are  to  saving  money"  she  explains.  "We 
were  successful  in  decreasing  errors,  and  that’s  all 
that  mattered  to  the  patients  and  the  staff."  O  48395 


Rhoads  is  afiveUmce  writer  in  the  Pftiladelpftia  area 
Contect  her  at  CfRhoads@ETMAssociatesxom. 
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IT  SURVIVAL 

GUDE 

RETIRING  CIO  PAUL  INGEVALDSON 
OFFERS  10  TIPS  FOR  SURVIVING  - 
AND  PROSPERING  -  IN  THE  IT  JUNGLE. 


DEAR  COLLEAGUES: 

I’ve  been  in  IT  for  40  years,  and  I  plan 
to  retire  at  the  end  of  this  year.  Yes.  fm 
retiring  as  the  CIO.  and  I’m  not  being 
downsized,  forcibly  replaced  or  Hred. 
I’ve  been  at  my  current  company. 

Ace  Hardware  Corp.,  for  25  _ 

years.  That's  a  long  time  in 
this  day  and  age  of  the  port¬ 
able  CIO.  In  £act.  Computer- 
wortdcom  rqmrted  Dec.  22  that  the 
averse  CIO  tenure  is  18  to  36  months. 

Over  the  past  40  years  in  technok^. 
I’ve  develof!^  some  practices  chat  have 
served  roe  well  Perh^  they  can  also 
help  you  survive  in  the  treacherous 
worid  of  IT.  So  here  are  Ingevaldson's 
top  10  ways  to  survive  the  IT  fui^e: 

WOonI  be  afraid  to  Imm  IT.  It's  a 
great  experience,  and  you’ll 
probably  coroe  back.  And  you 
will  come  back  as  a  more  well-rounded 
executive.  You  will  also  experience  IT 
from  the  outside  in  and  better  under¬ 
stand  people’s  true  feelings  about  IT 
within  the  corporation. 

And  there  is  nothing  more  fun  and 
more  daunting  than  trying  to  make  the 
revenue  line.  Most  of  us  managt*  ex¬ 
penses  well  but  that  revenue  Une  is 
really  a  challenge.  Believe  me.  you  will 
gain  renewed  respect  for  your  users. 

90an1  Imp  IT  ki  tha  dosat  Spread 
the  word,  create  excitement  and 
convince  people  to  get  on  tlw  IT 
bandwi^n.  We  are  in  a  very  exciting, 
dynamic  profession  chat  is  changing 
the  life  of  everyone  on  the  planet.  You 
may  sometimes  think  we  are  selling 
reports  and  screens,  but  remember 
We’re  creating  business-changing 


IT  MENTOR 


and  life-changing  systems. 

8Nevwthinkyouknowifal.bacause 
you  don’t  But  even  if  you  do.  it 
will  change.  Read  voraciously, 
and  know  what's  going  on.  Read  out¬ 
side  of  your  expertise  so  you  can  see 
the  world  on  a  bit  larger 
st^.  I  love  Harvard  Busi¬ 
ness  Review.  The  £conomist 
and  MTT  Technology  Re¬ 
view,  along  with  all  the  other  tecb- 
n(^ogy  magazines  and  newspapers. 

7  UndoritMdIht  corporate  ohttooyMd 

nwMht  IT  te  aupport  it  Be  sure 
you're  part  of  process,  not  just 
the  implementer.  This  is  a  high  priori¬ 
ty.  and  you  must  make  yourself  tteces- 
sary  in  the  strategy  meetings.  This 
requires  that  you  think  in  company 
terms,  not  IT  terms.  This  is  really  a 
stretch  for  some  of  us,  and  it's  u^re 
the  rubber  meets  the  road. 

6Duwiop  a  “cheop'*  knagi.  For  some 
of  us,  especially  a  Norw^ian 
like  me.  this  is  easy.  IT  is  an  ex¬ 
pensive,  misunderstood  area  that  is 
clouded  by  mistrust  and  arcane  con¬ 
cepts.  The  last  thing  you  need  to  do 
is  flaunt  your  image  and  act  like  a 
know-it-all  IT  savant.  Get  rid  of  the 
Armanis  and  the  pinkie  rings.  Be 
down  to  eanh  and  talk  business-speak, 
not  IT-speak. 

SOon'tovarmanagalTparaanmLOur 

business  is  exciting  and  self- 
motivating.  Provide  the  proper 
tools  and  environment,  set  the  ri^t 
strategy,  and  get  out  of  the  way.  Re¬ 
member  when  you  were  a  prt^raro- 
mer.  and  bow  the  worst  thing  was  to 


have  someone  looking  over  your 
shoulder. 

4EipMtyourpnptetoinaka<tetesand 

biidgste  OR  projects.  Do  this  by  man¬ 
aging  the  lock-in  dates  for  both 
and  by  minimizing  specification  creep. 
Missed  deadlines  and  busted  budgets 
give  IT  a  bad  name,  and  they  are  often 
caused  by  uninvolved  users.  Be  sure  — 
no  demand  —  that  you  have  user  in¬ 
volvement  in  projects.  Be  strong  and 
vigilant.  Sure,  some  projects  will  go 
over,  but  that  should  be  the  exception, 
not  the  rule. 

aOonl  charge  out  IT.  Operate  it  as 
an  expense  center.  I  feel  very 
strongly  that  the  need  to  ch^e 
out  is  an  indication  that  the  company 
doesn't  support  IT.  If  you  have  a  proc¬ 
ess  where  top  executives  make  the  pri¬ 
oritization  decisions,  then  IT  is  work¬ 
ing  on  the  important  applications. 
There  is  no  need  to  charge  out. 

If  you  decide  to  charge  out  and  thus 
operate  IT  like  a  utility,  then  it  will 
never  be  strategic  Nicholas  Carr  will 
be  r^t  (Quicklink  37990).  Having 
electricity  in  the  wall  won't  give  you 
a  strategic  advantage.  It’s  just  a  cost 
of  entry  into  the  game.  Besides,  the 
charge-out  system  is  a  big  system  that 
requires  a  huge  amount  of  processing 


time  and  data  input,  and  it  results  in 
much  disagreement  with  the  very 
users  we  are  trying  to  nurture. 

2Laam  to  dategate.  If  you’re  answer¬ 
ing  too  many  easy  questions, 
you're  not  delating  enough. 
Sure,  it  makes  you  feel  good  that  you 
still  know  the  answers,  and  that  is  a  big 
thii^  for  an  ITer.  If  you  delegate  the 
easy  ones  and  get  only  the  hard  ones, 
you’U  have  a  tougher  day,  but  your 
people  will  feel  more  engaged  and  the 
department  will  move  faster.  Besides, 
tough  days  are  why  they  invented  sin¬ 
gle  malts. 

IFnrca  IT  onto  the  plate  of  al  senior  exac- 
tAhm.  They  can  handle  it.  Ifs  part 
of  their  job,  just  like  finance,  mar¬ 
keting  and  all  the  other  major  depart¬ 
ments.  Just  mention  that  you  spend  be¬ 
tween  1%  and  7%  of  corporate  revenue 
and  you  want  to  get  them  more  in¬ 
volved.  What  are  they  going  to  say? 
You’ll  be  surprised  by  bow  much  they 
really  want  to  understand  technology. 

That's  my  list.  It  has  helped  me 
avoid  some  of  the  pitfalls  that  are  out 
there,  and  I  hope  it  helps  you.  Good 
luck  and  have  ftm.  You're  in  a  great 
business.  048479 

— Pouf  ingevoldson 
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Open-source  software  comes  with 
rights  and  obligations.  Here’s  what  that 
license  is  really  all  about. 


Nothing  in  life  Is  really  free*  says  Larry  Rosen, 

and  that  mctudes  open-source  software.  As  opern 
source  gains  traction  in  business,  it's  increasin^y  im¬ 
portant  to  understand  the  licenses  under  wbicb  if  ^ 
used.  Rosen,  whoftrrmeriy  taught  programmirtg  and 
database  design  of  Sfor^rd  C/niversify,  is  also  aftMnd- 
ing  partner  of  Rosenlaw  &  Einschtag,  a  technology  law 
firm  in  Zjm  Altos  HUls  and  Ukiah,  Calif.,  and  the  author 
of  Open  Source  Licensing;  Sofhi^  Freedom  and 
Intellectual  Property  Law  (Prentice  Hall  PTR.  2004). 
He  foifced  wit*  Computerworid  %  Kdf/iieen  Melymuka 
about  rtgbfs  and  obiigofions  under  open-source. 


I  Cinysughsneansan|risaftaHi*«iafti^cNGli 

a  company  by  aurpriu?  The  one  that  most  people  are 
I  concerned  about  is  if  you  create  a  derivative  work 
I  and  distribute  h.  you’re  required  to  disclose  your 
-  changes  and  distribute  it  under  the  same  [open* 

I  source]  license. 

I  ThMlcan'IiMoparamifdGBrtMBtetRyo^ 

■  MIS?  You  can  For  internal  uses,  It’s  your  business. 

I  But  if  you  dKMKe  to  share  it  with  some  other  compa* 
I  tty,  your  obligation  under  some  licenses  is  to  main*  it 
•  available  under  the  same  license. 


As  an  IT  manapar.nliydolnaedtDlmeiirorcartaboutopan- 

sountlcBnabig?  Because  you  or  your  company  is,  or 
soon  will  be,  using  open-source  software. 

InMwiMMMIenMvtMBevmMiaauebicpMh 
sourcB.  Why  do  I  nMd  a  ieanas  for  semsMng  Hat’s  frw? 


I  So  I  cant  silit?Na  That’s  what  people  think.  You  can 
try  to  sell  it.  but  if  you're  required  to  distribute  it  un* 
I  der  the  same  license,  that  license  allows  people  to 
I  make  copies  for  free,  so  you  have  to  tell  them  they 
.  can  also  have  it  for  free. 


Because  of  the  prc^lem  with  the  word  .free. 
It  means  too  many  different  things  in  the 
language.  Birds  are  free  to  fly.  Is  open- 
source  software  free  in  that  sense? 

Than  what  dots  M  naan?  It  means  you  are  giv* 
en  the  freedom  to  do  certain  rhtngy  with 
the  software  —  things  like  use  h.  cc^  it. 
change  it.  combine  it  with  other  stufL  Be¬ 
cause  of  that,  what’s  important  is  the  license 
under  which  those  freedoms  are  protected. 


Wal  is  the  OaanI  Puftfc  Ucansa  aid  ivliy 
ahadd  I  cam?  The  GPL  is  the  archetype,  the 
first  and  best  and  most  popular  and  nwysf 
mfltiential  of  all  open-source  licenses.  It  is 
the  license  under  vriiicfa  Linux  is  distrib¬ 
uted  and  many  other  software  packages 
that  are  extremely  important  in  open- 
source.  About  70%  of  all  open-source  is 
licensed  under  the  GPL  So  it's  important 
to  understand  it  and  its  legal  effects,  its 
strengths  and  its  weaknesses. 


MMamialByMaptolaahlorbianapanwcaleaart? 

What  you  need  to  look  for  is  ’’What  am  I  being  li¬ 
censed  to  do?"  and  ‘What  are  the  conditions  that  Fm 
accepting  when  I  take  that  license?"  And  iberein  lies 
a  tale. 

AwttamanydMlbrMhOTliiwdlpriilyiiilrhwtfif? 

What  you  need  to  look  out  fr>r  is  what  you  give  up 
What  are  the  conditions,  because  nothing  is  really 
free  in  Hie.  What  you  have  to  give  iqi  can  be  expen¬ 
sive.  It  depends  on  the  license.  You  may  have  an  oblig¬ 
ation  to  expose  your  own  source  code,  take  a  risk,  dis¬ 
tribute  it  under  the  same  license.  It’s  not  just  fr^ 


OMrbwaAwam?  People  sue  over  intellectual  property 
I  becatise  it  is  property  and  because  the  stakes  are  so 
I  hi^  and  because  the  legal  consmicts  are  not  black 
I  dnd  white,  and  so  licenses  get  interpreted  and  side 
■  agreementsget  made  between  companies.  Lawsuits 
I  are  usually  ^people  who  don't  wan^t  to  be  free  — 

I  who  want  to  it  back  up  again.  Ast|]f$^-sb!urcebe- 

*  comes  successful  people  are  going  to  wanffrt  fry  to 
I  make  h  proprietary,  to  claim  ownership  over  things 
I  they  don’t  have  ri^its  to.  People  wffi  sue  over  what 
g  they  have  sued  about  since  the  fust  case:  money  and 
I  pn^>eTty.  O  46482 


Intellectual 

Property 

There  B  nuh  more  (0  software  ttm  ttc  K 

cornes  oa  As  ar»  Caifornia  ooift  wrale  in  1948. 
proper^  fe  a  miy  broad  concafA  fiat  incfodes  CM 
ordy  ftt  tangbte  bU  also ‘emry  intangUe  benefit 
andprerogatMauscaptUiafposseBsnnardspos- 
lion  *  Coripuler  soflNve  s  Ms  kind  of 
property  because,  infer  f»  law.  it  oonee  wih  spe¬ 
cific  biA  intangUe  benelb  and  prerogathes  fat  cvi 
be  separately  owrad  and  dspo^  d. 

Software  6  a  product  of  lunan  irtalecL  aid 
farefomilisaMndofffaBlactualproperty.lnWtoc- 
tual  property  is  a  mhobfa  property  nteresL  aid  fa 
law  alows  its  mmer  to  poasess  and  control  I.  The 
progarnnar  wries  software  -  a  fa  cotnpsny 
that  hires  fat  person  to  wrie  soHwere  *  is  deemed 
tobethefrstowrarofinlelectudpropertyeritood- 
ad  to  that  software.  That  owner  nay  exercise  domin¬ 
ion  over  that  inteiBCtual  property.  Ito  can  ghe  1 
away,  sell  or  license  others  to  use  it  That  owner 
hastheprerogatwetoaiatecopiesoffatotoledu- 
al  property,  and  he  or  she  nay  prevent  others  bom 
making,  using  or  seino  fuse  copas. 

Because  of  these  partly  tangUe  and  ptffy  iriMh 
gUe  aspects  of  oompuler  software.  I  is  poestoto  to 
lam  dflerenl  owners  own  (1)  a  tangUe  copy  of  soft¬ 
ware  purdasad  to  a  cornpiAer  Store  or  downloaded 
from  a  Web  sia.  and  (2)  the  totolectual  property  em- 
bodad  to  fito  software. 

Never  oontose  fase  two  aspects  of  nielectoto 
property,  for  the  laws  apply  (Merenfy  to  each 
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CLOSE-UP:  IT  Project  Leaders 


Which  has  (he  most  effect 
on  the  motivation  of  software 
project  team  members? 


Team  peers 
Project  manager 


In  your  organuation. 
how  are  team  leaders 
.usually  selected? 


t  4^ 


Bytraintng 
By  technical  acumen 


SOURCE. C^XF'Ci/KO'Wr  ir.-r/Kr.  \trA  ?0(M 


Grooming  Next-Gen  IT  Pros 


in  a  2004  ISM  survey  of  450  global 
CEOs.  75%  citod  education  and  a 
lack  of  qualified  candidates  as  the 
issues  that  will  have  the  greatest 
effect  on  their  businesses  over  the 
next  three  years. 

IBM  is  akning  to  better  prepare 
graduates  for  tomorrow's  IT  iobs  by 
provwing  colleges  and  univwsities 
with  a  wide  range  of  education  bene¬ 
fits  and  programs  designed  to  teach 
students  open  standards  skflk.  In  ad¬ 
dition  to  offering  40  software  pro¬ 
grams  free  of  charge  through  a  Web- 
based  portaL  the  company  is  offering 
educators  a  special  rate  on  hardware. 
Under  the  new  IBM  Academic  hiitia- 
tive.  the  vendor  wM  abo  assign  tech¬ 


nical  teams  to  various  universrties  to 
assess  their  IT  curricula  and  provide 
special  training  and  skills  transfer  for 
faculty  and  staff. 

Universities  participating  in  the 
pilot  program  include  the  University  of 
Houston-Clear  Lake.  Indiana  State 
Universitv.  Worcester  Polytechnic  in' 
stitute  and  Universidade  de  Brasilia. 
IBM  says  it  developed  the  program  in 
response  to  the  need  for  IT  profes¬ 
sionals  with  skills  in  open-standards- 
based  products.  Lima,  for  example,  is 
the  fastest-growing  operating  ^rstem. 
according  to  IOC.  Jaim.  meanwhile,  is 
used  by  more  than  70%  of  all  enter¬ 
prises.  according  to  Gartner  Inc. 

-JuSaKing 


Roy  E.  Lowrance 


TITLE  Chief 

||H^B  I  technology  officer 

A  COMPANY  Capital 

MK  Orw  Financral  Corp.. 

^  McLean.  Va. 

AO  A  Lowrance  is  this 

month's  guest 

*  Premier  100  IT 

Leader,  answering  readers'  ques- 
tiofts  about  job  skills  and  career 
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I  am  currently  a  junior  in  college,  focused 
on  networking.  But  my  school  isn't  very 
strong  in  that  field.  What  can  I  do  on  my 
own  to  develop  skills  that  will  make  me 
competitive  with  students  from  other 
schools?  There  are  niany  things  you  can  do 
to  make  yourself  >  lore  marketable  First  ot  all, 
make  sure  you  take  adyaniage  of  every  oddo'- 
tanity  to  get  a  kveii-rounded  educalion  Having 
strong  expertise  in  one  or  more  specialized  ar¬ 
eas  is  important,  but  most  employers  are  inter¬ 
ested  in  candidates  with  diverse  skills  and 
knowledge  m  many  different  lields. 

In  additior'  to  technology  courses,  lake 
classes  that  will  help  you  develop  strategic  and 
cniical  thinking  skills.  If  you  can  think  strategi¬ 
cally  and  understand  business  issues,  you  will 
be  better  able  to  position  yourself  as  a  valued 
technology  resource  rather  than  |ust  a  com¬ 
modity  To  develop  your  networking  skills,  keep 
current  with  the  latest  trends  by  reading  books 
and  trade  lournals  artd  utilizing  Internet  re¬ 
sources.  Also  look  for  opportunities  to  apply 
and  expand  your  technology  experience 
through  part-time  work.  Ihtemships  or  even 


volunteer  work.  II  you  are  fairly  certain  you 
want  to  pursue  a  career  in  networking,  you 
might  want  to  consider  transferring  to  a  school 
that  has  a  strong  reputation  in  that  held 

How  can  I  exploit  my  in-depth  knowledge 
of  both  software  engineering  and  bio¬ 
technology  while  hedging  bets  against 
job  outsourcing?  Combining  a  spectaity 
{such  as  software  engineering)  with  m-depih 
knowledge  of  a  growth  industry  {like  biotecti- 
nology)  is  a  great  strategy  To  enhance  you' 
marketability,  keep  up  with  innovation  in  noth 
your  specialty  and  industry  In  addition  look  lot 
ways  to  provide  unique  value  to  your  future  em¬ 
ployer  This  requires  keeping  current  wilh 
what's  happening  m  the  IT  marketplace  so  you 
don’t  find  yourseli  in  a  role  that  is  viewed  as  a 
comoioflity  At  Capital  Ore  we  choose  soft¬ 
ware  engineers  archiiecis  who  can  take  j 
strategic  view  of  not  only  tne  IT  oryimzalion 
but  also  the  company  as  a  wno'e  Tnp  wider 
view  enables  them  to  creafy  belter  a'chtfec- 
tures  and  better  systems  tor  the  company 

Should  I  plan  to  leverage  (he  portfolio  of 
white  papers.  audKs.  analyses  and  case 
studies  I  have  created  in  my  career  when 
interviewing  for  a  director  or  CIO  posi¬ 
tion?  Some  argue  that  writing  skills  are 
irrelevant  to  the  CIO  position  because 
verbal  and  leadership  skills  are  more  im¬ 
portant.  Strong  writing  skills  ate  valuable  re¬ 
gardless  what  career  path  one  takes  Effective 
leadership  requires  being  able  to  convey  infor¬ 
mation  and  strategies  to  people  m  a  clear,  con¬ 
cise  and  persuasive  manner,  whether  verbally 
or  in  writing  A  strong  portfolio  that  demon¬ 
strates  your  ability  to  communicate  effectively 
through  a  variety  of  writing  styles  will  make  a 
favorable  impressqn  on  most  hiring  managers 
More  and  more,  business  leaders  are  looking 
for  IT  professionals  who  can  be  strategic 
thinkers  and  truly  understand  the  nuts  and  bolts 
of  business  dynamics  Being  able  to  demon¬ 
strate  your  strengths  in  writing  is  an  added  tool 
in  your  arsenal.  Don't  forget  to  make  sure  your 
resume  casts  you  m  the  best  light  O  48706 
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The  Changing  Face  of 
Information  Security 


security  challenges  organ! 
zations  face.  All  the  ways 
we  have  allowed  data  to  be 
shared  have  made  unde¬ 
tected  theft  of  sensitive  in¬ 
formation  exponentially 
easier.  While  efforts  to  ex¬ 
tend  data  to  the  edge  of  the 
organization  for  productiv¬ 
ity's  sake  have  succeeded 
beyond  our  expectations, 
attempts  to  secure  that  data 
have  failed  miserably. 

We  arc  starting  to  realize 
that  information  security  is 
a  process  in  support  of  the 
organization,  requiring  an 
understanding  of  the  forces  that  drive 
business  both  internally  and  external¬ 
ly.  A  security  pn>gram  can  be  designed 
to  effectively  withstand  business 
change  only  when  the  organization  and 
the  IT  departnwnt  work  cooperatively. 

Security  Blunders 

Organizations  usually  react  to  threats 
b>'  implementing  some  new  piece  of 
defensive  technology-,  but  while  that 
may  appear  to  be  the  quick  soiutitm.  it 
is  often  the  last  thing  you  should  do. 
Technoli>g\  without  proper  strategy 
and  business  value  can  actually  leave 
you  more  vulnerable. 

One  publicly  traded  company  re¬ 
designed  and  replaced  its  firewalls  be¬ 
fore  it  acquired  another  publicly  trad¬ 
ed  ettmpany.  The  parent  company  was 
focused  on  shoring  up  Its  infrastruc¬ 
ture.  but  it  failed  to  concern  itsedf  with 
the  new  organization's  environment 
prior  to  purchase. 

In  this  case,  the  first  dollar  the  pur¬ 
chased  company  transacted  after  the 


ACKING.  CRACKING,  global  worms  and 
viruses,  netspionage,  social  engineering, 
internal  theft,  employees  with  malicious 
intent,  physical  terrorism  and  cyber¬ 
terrorism  —  these  are  just  some  of  the 
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merger  put  the  parent 
company  at  risk.  All  the 
parent  company's  security 
precautions  were  in  vain, 
since  it  had  not  taken  into 
consideration  the  security 
contnds  of  the  company  it 
was  acquiring.  And  the 
CEO  and  CFO  were  liable 
for  all  nuncompliance  is¬ 
sues  in  both  companies. 

Buildi^  a  Compliant 
Organization 

The  introduction  of  merg¬ 
ers  or  mandates  like  the 
Sarbancs-Oxicy  Act  com- 
j  plicate  security,  and  organizations 
need  to  develop  programs  that  take 
them  into  account.  With  compliance 
taking  a  big  bite  out  of  IT  budgets, 
companies  need  to  make  sure  that 
ever>'  dollar  spent  on  tcchnoU^gy-  gets 
them  closer  to  their  compliance  goals. 
Business-driven,  top-down  strategies 
are  far  better  than  the  typical  ground¬ 
up  approach  of  reacting  to  iha'ats. 
Here  are„some  tips  for  doing  this  right; 

•  Understand  and  ftilly  interpret  the 
gtnvmance  and  LX>mpliance  issues  >x>u 
arc  faced  with  today.  Realize  tluu  vim 
m,iy  be  sublect  to  muliipk*  miindales 
(Sarbancs-OxIcy.  HIPAA  and  Califor¬ 
nia's  SH  B8<».  for  e.xample)  and  that  it's 
impimant  to  understand  ail  of  them  be¬ 
fore  planning  to  address  any  single  one. 

■  Employ  an  external  organization 
to  provide  a  Kiseline  or  “gap"  studv  of 
your  envinmmeni  that  includes  re¬ 
viewing  your  compliance  drivers,  un¬ 
derstanding  your  security  envin>n- 
ment  as  it  stands  tttday  and  prioritiz¬ 
ing  recommendations.  Engaging  a  ctm- 


iractor  to  do  this  sidesteps  internal 
politics  that  could  get  in  the  way  of  ex¬ 
posing  security  gaps. 

■  Once  a  gap  is  identified,  have  a 
conversation  with  management  about 
how  IT  will  deliver  process  and  tech¬ 
nology-  to  address  the  bu.siness  i.<suc  of 
compliance.  Get  management  buy-in. 

■  Create  a  compliance  road  map. 
Specifically  add^*ss  how  best  to  solve 
each  compliancT  problem  through  the 

I  chiMicn  cfimbination  of  technology, 
processes  and  dt*cumentation- 

■  Build  incident  detection,  monitor¬ 
ing  and  response  progrjm.s.  realizing 
that  the  optimal  setnirity'  envirymment 
starts  with  a  clean  slate,  not  yvith  the 
addition  of  more  technology-  to  an 
existing  mcs,s. 

■  Develop  security  awareness  and 
training  pryigrams.  then  prepare  all 
empkyyees  to  undersiand  their  securi¬ 
ty  responsibilities. 

,  Closing  the  Gap 

Hovy  will  the  changing  face  i»f  informa¬ 
tion  security-  alTect  the  corporation,  and 
how  do  we  establish  an  effective  busi¬ 
ness  strategy  to  help  it  eyolve?  You 
must  realize  that  technology  alone  w  ill 
solve  nothing  and  rcc«>gni/v  that  sevu- 
rity  tvquiremenis  have  evt»lved  from  a 
lechntkkygy  issue  to  a  business  issue 
This  change  requia-s  challenging 
and  rethinking  thy*  traditional  ap- 
pixwch  to  security.  (Trg.inizaiions  need 
to  see  security  as  a  bu.siness  I'bjective. 
or  ey  en  as  an  enabler  of  new  (echn«>kv 
gy  initiatives,  rather  than  as  something 
foreed  upon  them.  This  requirc-s  com¬ 
munication  among  business  units  to 
de\clop  an  enyironment  that  is  ct*tu- 
pliant-readv^and  a  y*u)lu^•  that  is  secu¬ 
rity-aware.  (TnK  by  taking  a  proactiye 
appridch  that  recognizes  ih.n  w.*curity 
extends  beyond  IT  will  ct'mpanies  stay- 
ahead  vtf  g.imc  O  48649 
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volunteer  work.  If  you  are  fairly  certain  you 
want  to  pursue  a  career  in  networking,  you 
might  want  to  consid^  transferring  to  a  school 
that  has  a  strong  reputation  in  that  field. 

How  can  I  exploit  my  in-depth  knowledge 
of  both  softw^  engineering  and  bio¬ 
technology  while  hedging  bets  against 
fob  outsourcing?  Combining  a  specialty 
(such  as  software  engineenng)  with  in-depth 
knowledge  of  a  growth  industry  (like  biotech- 
noiogy)  e  a  great  strategy.  To  enhance  your 
marketability,  keep  up  with  innovation  in  both 
your  specialty  and  in^try.  In  addition,  look  tor 
ways  to  provide  unique  value  to  your  future  em¬ 
ployer.  This  requires  keeping  current  with 
what's  happening  in  the  IT  marketplace  so  you 
don't  find  yourselt  in  a  role  that  is  viewed  as  a 
commodity.  At  Capital  One.  we  choose  soft¬ 
ware  engineers/archrtects  who  can  take  a 
strategic  view  of  not  only  the  IT  organization, 
but  alM  the  company  as  a  whole.  The  wider 
view  enables  them  to  create  better  architec¬ 
tures  and  better  systems  tor  the  company. 

Should  I  plan  to  leverage  the  portfolio  of 
white  papers,  audits,  anaiysas  and  case 
studies  I  have  created  ki  my  career  when 
interviewing  for  a  (firactor  or  CX)  posi¬ 
tion?  Some  argua  that  writing  sUtts  are 
irrelevani  to  the  CIO  position  because 
verbal  and  leadership  skills  are  more  im¬ 
portant.  Strong  writing  skilts  are  valuable  re¬ 
gardless  what  career  path  one  takes.  Effective 
leadership  requires  being  able  to  convey  infor¬ 
mation  and  strategies  to  people  in  a  clear,  con¬ 
cise  and  persuasive  manner,  whether  verbally 
or  in  writing.  A  strong  portfolio  that  demon¬ 
strates  your  ability  to  communicate  effectively 
through  a  variety  of  writing  styles  will  make  a 
favorable  impression  on  most  hiring  managers. 

More  and  more,  business  leaders  are  looking 
for  IT  professionals  who  can  be  strategic 
thinkers  and  truly  understand  the  ruts  and  bolts 
of  business  dynamics.  Being  dile  to  demon¬ 
strate  your  strengths  in  writing  is  an  added  b)ol 
in  your  arsenal.  Don't  forg^  to  make  sixe  your 
rOsumd  casts  you  in  the  best  light.  O  48706 
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I  am  currently  a  junfor  in  college,  focused 
on  networking.  But  my  school  isn't  very 
strong  in  that  field.  What  can  I  do  on  my 
own  to  develop  skfUs  that  will  make  me 
competitive  with  students  from  other 
schools?  There  are  many  tNngs  you  can  do 
to  make  yoursdf  more  marketable.  Rrst  of  all. 
make  sure  you  take  advantage  of  every  oppor¬ 
tunity  to  gel  a  well-rounded  education.  Having 
strong  expertise  in  one  or  more  specialized  ar¬ 
eas  is  important,  but  most  emplcr^  are  inter¬ 
ested  in  candidates  with  diverse  skills  and 
knowledge  in  many  different  fields. 

In  addition  to  te^nology  courses,  take 
classes  that  will  help  you  develop  strategic  and 
critica)  thmking  skills.  If  you  can  thmk  strategi¬ 
cally  and  understand  bu^ness  issues,  you  wHI 
be  better  able  to  position  yourself  as  a  valued 
technology  resource  rather  than  just  a  com¬ 
modity.  To  develop  your  networking  skills,  keep 
current  with  the  latest  trends  by  reading  books 
and  trade  journals  and  utilizino  Internet  re¬ 
sources.  Also,  look  for  opportunities  to  apply 
and  expartd  your  technology  experience 
through  part-time  worK  internships  or  even 
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The  Changing  Face  of 
Information  Security 


Hrir. 
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terr 

security  challenges  organi¬ 
zations  face.  All  the  ways 

wehaveaUoweddautobe  parent  cnmpanys  security 

shared  have  made  unde-  precautions  were  in  vain, 

tweeted  theft  of  sensitive  in-  since  it  had  not  taken  into 

formation  exponentially  consideration  the  security 

easier.  While  efforts  to  ex-  controls  of  the  company  it 

tend  data  to  the  edge  of  the  was  acquiring.  And  the 

organization  for  productiv-  CEO  and  CFO  were  liable 

ity-s  sake  have  succeeded  for  all  noncompUance  is- 

beyond  our  expectations.  sues  in  both  companies, 

anempts  to  secure  that  data 

have  biled  miserably.  Buldng  a  Compfiant 

We  are  starting  to  realize  OrQaniBrtion 

that  information  security  is  Theintroductionofmetg- 

a  process  in  support  of  the  ers  or  mandates  like  the 

organization,  requiring  an  Sarhanes-Oxley  Act  corn- 

understanding  of  the  forces  that  drive  plicate  security,  and  organizations 

business  both  intemaUy  and  external-  need  to  develop  programs  that  take 
ly.  A  security  program  can  be  designed  them  into  accounL  With  compUance 
to  effectively  withstand  business  taking  a  big  bite  out  of  IT  budgets, 

change  only  when  the  organization  and  companies  need  to  make  sure  that 
the  rr  department  work  cooperatively,  every  dollar  spent  on  technology  gets 


ACKING.  CRACKING,  global  worms  and 
viruses,  netspionage,  social  engineering, 
internal  theft,  employees  with  malicious 
intent,  physical  terrorism  and  cyber- 
terrorism  —  these  are  just  some  of  the 

merger  put  the  parent  I 
company  at  risk.  All  the  I 


Security  Bkmders 


them  closer  to  their  compliance  goals. 
Business-driven,  top-down  strategies 


Organizations  usually  react  to  threats  are  far  better  than  the  typical  ground 
by  implementing  some  new  piece  of  up  approach  of  reacting  to  threats. 


defensive  technology,  but  while  that 
may  appear  to  be  the  quick  solution,  it 
is  often  the  last  thing  ^>u  should  do. 
Technology  without  proper  strategy 
and  business  value  can  actually  leave 
you  more  vulnerable. 

One  publicly  traded  company  re- 


Here  are  some  tips  for  doing  this  right: 

■  Understand  and  fully  interpret  die 
governance  and  con^liance  issues  you 
are  faced  with  today.  Realize  that  you 
may  be  subject  to  multiple  mandates 
(SarbanesOxley,  HIPAA  and  Califor¬ 
nia’s  SB  1386,  for  example)  and  that  it's 


desiped  and  replaced  its  firewalls  be-  important  to  understand  all  of  them  be¬ 
fore  it  acquired  another  publicly  trad*  fore  planning  to  address  any  gingb*  one. 


ed  company.  The  parent  company  was 
focused  on  shoring  up  its  infiastnic- 


■  Employ  an  external  organization 
to  provide  a  baseline  or  “gap"  study  of 


ture.  but  it  foiled  to  concern  itself  with  your  environment  that  includes 
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the  new  organization’s  envirorunent 
prior  to  purchase. 

In  this  case,  the  first  dollar  the  pur¬ 
chased  company  transacted  after  the 


viewing  your  compliance  drivers,  un¬ 
derstanding  your  security  environ¬ 
ment  as  it  stands  today  and  prioritiz¬ 
ing  recommendations.  Fngagiwg  a  con- 


[  tractor  to  do  this  sidesteps  internal 
politics  that  could  get  in  the  way  of  ex¬ 
posing  security  gaps. 

;  ■  Once  a  gap  is  identified,  have  a 

conversatiOD  with  management  about 
how  IT  Mfill  deliver  process  and  tech¬ 
nology  to  address  the  business  issue  of 
compliaiKe.  Get  management  buy-in. 

■  Create  a  compliarKe  road 
Specifically  address  how  best  to  solve 
each  compUance  problem  through  the 
chosen  combination  of  technology, 
processes  and  documentation. 

>  Build  incident  detection,  monitor¬ 
ing  and  response  programs,  realizing 
that  the  i^timal  security  environment 
starts  with  a  clean  slate,  not  with  the 
addition  of  more  technology  to  an 
existing  mess. 

■  Develop  security  awareness  and 
training  programs,  then  prepare  all 
employees  to  understand  their  securi¬ 
ty  responsibilities. 

Closing  the  Gap 

How  will  the  changing  foce  of  informa¬ 
tion  security  affect  the  coiporation.  and 
how  do  we  establi^  an  effective  busi¬ 
ness  strata  to  help  it  evolve?  You 
must  realize  that  te^ology  alone  will 
solve  nothing  and  recognize  that  secu¬ 
rity  requirements  have  evolved  from  a 
technology  issue  to  a  business  issue. 

This  change  requires  chaliengii^ 
and  rethinking  the  traditional  ap- 
I  proach  to  security.  Organizations  need 
^  to  see  security  as  a  business  objective, 
or  even  as  an  enabler  of  new  technolo¬ 
gy  initiatives,  rather  than  as  something 
forced  upon  them.  This  requires  com¬ 
munication  among  business  uniu  to 
develop  an  environment  that  is  com¬ 
pliant-ready  and  a  culture  that  is  secu¬ 
rity-aware.  Only  by  taking  a  proactive 
approach  that  recognizes  that  security 
extends  beyond  IT  will  companies  stay 
ahead  of  game.  O  48S49  , 
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IT  Careers:  Illinois,  Chicagoland  Bridge  Old  to  New  Industry  Age 


In  an  era  past.  Chicago  and  the  state  of  Illinois 
claimed  fame  In  meat  packing,  transportation, 
heavy  machinery,  brewing,  and  com.  Today's 
economy  is  based  squarely  on  technology  with  more 
than  7.000  IT-speafic  companies  and  a  hwt  of  heavy 
IT  users  ranging  from  Baxter  International  to  Argonne 
Natkmal  Laboratory. 

While  most  Illinois  technology  companies  wwe 
hiring  in  the  hundreds  in  the  1990s,  2004  shows 
listings  in  much  smaller  numbers  --  40  to  50 
speaalized  professionals  for  larger  firms  and  five  to 
10  for  dozens  of  smaller  companies  -  for  entry  level 
and  senior  management  IT  jobs.  Allstate  Insurance, 
long  a  leader  In  information  technology  use,  has 
better  than  40  IT  jobs  listed  on  its  websrte,  while  food 
giant  Archer  Daniels  Midland  has  listings  that  include 
broinformatics.  application  support,  analysis  and 
opportunities  for  academic  interns 

Among  the  coups  for  Illinois  and  Chicago  was 
the  announcement  in  fall  2009  that  Chicago's 
McCormick  Place  will  host  the  2006  Biotechnology 
Industry  Organization  International  Conference 
and  Exhibition.  State  leaders  point  to  the  win  as  host 
site  as  an  indicator  of  leadership  in  biomedical  device 
development,  pharmaceuticals  agri-science,  bio 
remediation,  and  research  and  development 
innovation. 

Howevo;  the  region  is  also  known  for  a  heavy 
load  of  consulting  talent,  ranging  from  giants 
Accenture.  Mercer  and  Hewitt  to  locally  operated 
firms  Crain's  Chicago  Business  lists  its  technology 


who's  who  as  Michael  Birck.  soon-to-retire  CEO  of 
Tellabs;  Roben  Blackwell  Sr..  CEO  of  Blackwell 
Consulting  Services,  John  Edwardson,  CEO  of  COW 
Corp.,  Richard  A.  Forsythe.  CEO  of  Forsythe 
Technology  Inc.  Gale  E.  Sayers  (yes  the  football 
great).  CEO  of  Sayers  Group  LLC,  and  Judith  A 
Sprieser.  CEO  of  titree-year-oid  data  synchronization 
firm  Transora  Inc  In  addition  to  these  home-grown  IT 
and  software  development  groups  the  listing 
includes  Carol  Potts  area  vice  president  for  Hewlett- 
f^ard,  and  Allan  Duffy  Gaynor,  a  global  business 
segment  leader  for  IBM. 

The  trend  with  these,  and  others  such  as  Allstate 
Insurance.  Archer  Daniels  Midland,  Motorola  and 
Baxter  International,  is  in  hiring  people  with  specific 
advanced  skills  such  as  IT  architecture,  analysis 
development  and  disaster  recovery,  as  well  as  IT 
support  -  In  smaller  numbers  but  still  hiring. 

The  jobs  are  clustered  In  the  Chicago  area, 
Springfield  and  east  of  St  Louis  as  well  as  a  software 
development  core  that  is  scattered  throughout  rural 
Illinois  including  the  Carbondaie/Southem  lltmois 
Universtty  region.  According  to  John  Elarr,  profea 
manager  for  the  IT  Cluster  in  Illinois'  Department 
of  Commerce,  the  stale's  IT  strength  is  in 
hardware/netwofking.  software  and  data  services 
Software  has  grown  at  the  fastest  pace,  with  total 
employment  increasing  by  better  than  90%  in  the 
past  decade  driven  by  grosvth  wth  companies  such 
as  Platinum  Techr>ology,  SPSS^  SoftNet  Technologies 
and  Spyglass 


INFORMATION 

TECHNOLOGY 

ESTABLISHMENTS 

•  Data  Processing 

•  Hardware  & 
Networking 


source: 

State  of  Illinois  DCOE 

SHOMEX,  long  known  for  its  diversity  job  fairs  is 
launchit>g  a  new  regionai-focused  product  to  meet 
technology-hiring  requirements.  The  first  show, 
according  to  Cris  Levy,  vice  president  of  marketing,  is 
Jan.  19  at  the  Navy  Pier  in  Chicago.  More  than  30 
companies  are  expected  to  participate  in  the  job  fair. 

For  more  information  about  IT  Careers  advertising, 

please  contact  Nancy  Perdval 

Vice  President  Recruitment  Advertising 

600.762.2977 

500  Old  Connecticut  Path 

Framingham,  MA  01701 

Produced  by  Carole  R.  Hedden _ 
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HPWbrid 

"They  haven't  shown  yet," 
Slattery  said.  Normally,  the  sys¬ 
tems  would  have  arrived  within 
five  days,  according  to  Slattery. 
He  said  that  when  they  didn’t, 
he  called  HP  and  was  told  the 
servers  were  back-ordered. 

Slattery  added  that  he  didn't 
know  what  was  causing  the 
shipment  delay  until  he  heard 
HP  executives  discuss  the  or¬ 
der-processing  problems  here 
at  the  HP  World  conference, 
which  was  sponsored  by  the 
independent  Interex  and  En¬ 
compass  user  groups.  "I  never 
put  it  down  to  the  supply 
chain  mess,"  be  said. 

Kees  denHartigfa  had  a  dif¬ 
ferent  type  of  problem  with  an 
HP  hardware  delivery.  A  sys¬ 
tems  and  network  analyst  at 
the  University  of  Alberta  in 
Edmonton.  denHartigb  placed 
an  order  with  HP  last  spring 
for  new  equipment  that  includ¬ 
ed  Opteron-based  servers  and 
a  storage  array.  He  said  that  not 
one  but  two  deliveries  showed 
up  at  the  school  in  June,  lead- 
ir^  him  to  call  HP  as  well 


jMcndt-tr.  i.li.-i.w  out  rm  Uk-  -ijiow  flow. 


“They  were  right  upfront 
about  it,"  denHartigb  ^id 
“They  were  merging  the  ERP 
systems  between  Compaq  and 
HP,  and  they  bad  some  issues 
with  duplication  of  the  whole 
process.  So  the  order  went  in 
at  two  places.*  The  extra 
equipment  is  still  boxed, 
awaiting  its  return  to  the  ven¬ 
dor,  be  added 
HP  officials  have  said  chat 
the  supply  chain  problems 
stemmed  from  a  poorly  exe¬ 
cuted  migration  to  a  i>ew 
order-processing  system 
based  on  SAP  AG’s  ERP  appU- 


I  cations  (QuickUnk  48819). 

HP’s  overall  revenue  rose 
9%  in  its  third  quarter,  which 
ended  July  3L  But  its  enter¬ 
prise  server  and  storage  busi¬ 
ness  fell  5%,  prompting  CEO 
Carly  Fiorina  to  fire  three  ex¬ 
ecutives  because  of  what  she 
called  "unacceptable  execu¬ 
tion"  within  that  unit 

Mark  Gonzalez,  vice  presi¬ 
dent  of  enterprise  server  and 
stor^  sales  for  HP  Americas, 
said  the  troubles  began  over 
the  July  4  weekend  when  HP 
went  live  with  the  SAP-based 
system  to  replace  three  order¬ 


processing  applications  that  it 
had  after  Its  2002  acquisition 
of  Compaq  Computer  Corp. 

"It's  systems  talking  to  sys¬ 
tems,"  Gonzalez  said  “It  just 
did  not  quite  work  out"  He 
added  tlut  customers  should 
no  longer  experience  delays 
on  storage  products  or  Unix 
servers.  Prwessing  of  Pro¬ 
Liant  server  orders  is  “pretty 
much  back  on  track,  with  the 
deception  of  a  couple  of  com¬ 
plex.  configure-to-order  type 
things,"  Gonzalez  said  “The 
worst  is  behind  us." 

At  the  conference,  HP  offi¬ 
cials  were  also  adamant  that 
the  company  won’t  any 
changes  in  its  technology  dirK- 
tkm  because  of  the  poor  third- 
quarter  results.  But  that  didn’t 
stop  users  such  as  Paul  Gerke, 
systems  administrator  for 
Clark  County  in  Vancouver. 
Wash.,  from  voicing  concern 
about  the  possibility  that  HP 
could  alter  some  of  its  system 
development  plans. 

‘(^larterly  news  can  change 
very  quickly."  said  Gerke,  who 
manages  HP-UX  systems.  Re¬ 
ferring  to  HP’s  det^ioo  to 
phase  out  its  HP  3000  mini- 
I  computer  tine,  he  said  "You 
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hav^  lo  wonder,  if  we  start  see¬ 
ing  declining  results  for  lint, 
is  that  the  neat  thing  (lo  go]?“ 
(ohn  Hohenfeld,  operations 
manager  al  the  5S«IO-snident 
Cuyahoga  Conununity  College 
in  Cleveland,  said  HP's  finan¬ 
cial  results  “made  roe  wonder 
a  little,  but  I  think  they  ate 
very  safe”  as  a  vendor. 

Safe  for  users,  perhaps.  But 
when  Denys  Beauchemio. 
chainnan  of  Inierex's  board  of 
directors,  opened  the  floor  for 
questions  during  a  panel  ses¬ 
sion  featuring  HP  eaccutives. 
he  invited  attendees  to  "file 
away"  with  their  questions. 

That  choice  of  words 
prompted  one  HP  official  on 
the  panel  to  quickly  retort, 
■ddon'l  file  away."  drawing 
laughter  from  the  audience. 
OABBee 

Robert  McMillan  o/the  fDG 
News  Service  comrilNited  to 

this  story. 
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The  Power  of  No 


Ir  WAS  lUST  LAST  YEAR  that  the  London  borough  of 

Newham  couldn't  afford  to  upgrade  its  aging  Microsoft  Ex¬ 
change  5.5  server.  Then  Newham  contacted  an  open-source 
consulting  firm.  Netproject,  for  a  study  to  sec  whether  Linux 
desktops  would  be  a  workable  option  for  the  local  govern¬ 
ment.  By  November,  there  was  a  credible  Linux  plan  set  for  adop¬ 
tion.  subject  to  further  negotiations  with  Microsoft. 

Last  week.  Newham  announced  a  new  10-year,  S9  million  deal 
with  Microsoft.  The  local  government  that  couldn’t  afford  an  Ex¬ 
change  upgrade  will  now  get  that,  plus  up-to-date  desktop  software, 
plus  a  batch  of  tablet  PCs  for  the  borough's  social  workers. 

Now  that’s  bargaining  power. 


OtFicwlly.  NVu  ham’s  decision  uas  based  in 
laryc  pan  on  a  Cap>'cmini  study,  commissioned 
by  Microsolt.  that  concluded  that  Newham 
would  not  only  save  a  bundle  by  staying  with 
Windows,  but  would  al.so  have  fewer  security 
problems.  Yeah,  right. 

Unoftlcially.  and  much  more  believably,  the 
deal  went  do\s  n  like  this:  New  ham  had  a  viable 
l  inux  alternative  ti'  Windows  land  a  lot  «»f 
press  attention  for  being  a  highly  visible  Linux 
pooler  child).  .Microsoft  negotiated.  Newham 
ended  up  with  a  truckload  of  gm'dics  that  it 
ci^uldn't  afford  before. 

Pretty  slick,  eh?  True,  the  Linux  advocates  say 
they  lee!  used.  They’re  right  —  they  weri-  used. 
.Ml  the  available  e\  idence  .suggests  that  New¬ 
ham’s  IT  boss.  Richard  Steel,  never  really  want¬ 
ed  to  go  through  the  expense  and  trouble  of 
dumping  Windows  and  all  the  other  Microsoft 
pr»>ducts  New  ham  was  using  in  favor  of  Linux 
and  open-source  alternatives. 

But  when  Steel  went  to  negotiate  the  deal 
w  ith  Micn.-isoft.  that  competing 
''pen-source  proposal  was  on  the 
table.  It  meant  Steel  could  walk 
aw  ay  from  .Microsoft  if  he  had  iiv 
He  had  the  p»mer  to  say  no  ui  any¬ 
thing  short  of  the  Jea!  he  wanteJ. 

Was  it  a  blutT?  Only  Steel  knows, 
and  he’s  not  saying.  But  Microsoft 
believed  New  ham  could  go  w  iih 
Linux.  Microsoft  wasn’t  willing  to 
take  that  chance.  .-XnJ  that  got 
Newham  one  heck  of  a  deal. 

Think  you  can’t  possibly  get  that 
kind  of  leverage  in  your  own  deal¬ 
ings  with  software  vendors?  You’re 
probably  right  —  chances  aa*.  you 


don’t  want  that  much  publicity  htr  any  IT-relat- 
ed  negotiation. 

But  can  you  take  a  few  lesstms  from  the 
Newham  deal?  Sure. 

Stan  by  remembering  that  if  yt>u  can't  say  no. 
if.s  not  a  negotiation.  If  you  can't  walk  away 
from  the  tabic,  you  have  no  leverage  at  all. 

So  be  sure  you  always  have  a  viable  alterna¬ 
tive  when  you  sit  down  with  a  vendor.  Maybe 
that  means  one  or  more  competitors’  products. 
Maybe  it  means  open-source.  Or  a  homegrown 
system.  Or  just  standing  pat.  But  make  sure  you 
can  say  no. 

Then  forget  about  being  a  nice  guy.  Use  those 
competitors  against  one  another.  Somebody  in 
this  deal  is  going  to  lose.  Make  sure  It’s  not  you. 

Know  what  you  want  to  get  from  the  deal, 
what  your  bottom  line  is  and  how  much  it  will 
take  to  get  you  to  say  yes.  Bui  don't  say  ye.s  until 
the  other  guy  has  run  out  of  things  to  offer. 

Take  your  time  -•  the  Newham  deal  took 
months  to  finalize.  Keep  upper  management  in 
the  loop,  so  you  won’t  he  undercut 
when  somebody  gets  unhappy  at 
how  things  are  going. 

And  when  the  time  come's.  do 
the  deal  and  damn  the  conse¬ 
quences.  The  losers  will  howl  be¬ 
cause  they  lost.  The  winners  w  ill 
mt>an  because  you  squeezed  them 
so  hard.  That’s  OK  —  you  don't 
work  for  them. 

For  the  organization  you  do  work 
for.  you  may  not  get  a  Ne^vham- 
size  advantage.  But  if  Newham  can 
do  it.  you  can  too.  And  these  days, 
you  need  all  the  bargaining  power 
you  can  get.  O  4B930 


nuMMcm.  CotRtxrfar- 
worAtf’s  senior  news  colum¬ 
nist.  has  covered  IT  for  more 
than  20  jmts.  Contact  him  at 
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’That  Would  Explain  It 

Help  desk  staffer  compiains  that  her  voice-over-IP 
phone  calls  are  breaking  up.  So  the  network  team 
puts  a  sniffer  on  the  line  and  tracks  down  something 
on  the  network  that's  using  a  tot  of  bandwidth.  "The 
bandwidth  hog  is  listening  to  an  Internet  radio  station.' 
says  a  pitot  fish  on-scene.  'And  it’s  the  caller's  own 
PC.”  Her  response?  "Ohhhhh.  I  did  notice  it  started 
about  the  time  I  started  listening  to  thal  radio  station  ‘ 


**''*'®*  nilinu  Wi0t?V0U? 

SlUmK  Th.print» 

didsplliMter  Tl||||^  imtworidno 

in  his  keyboard.  lAllIlm  forlMsauto 


But  ha  has  dried 
it  out  pretty  wal.  he  tafls 
help  desk  pilot  fish.  StiU. 
when  he  tries  to  typo 
using  one  of  the 
that  got  wet.  the  system 
acts  up  or  reboots.  Is  R 
tMcauee  the  koyboerd  Is 
stMl  damp?  "I  eipleinod 
that  by  hitting  e  hey.  he 
waseaueinganileotrb 
cal  chadt  to  dose,  but 
became  of  the  water, 
he  wee  doabig  muMpie 
drcuHa  and  earning  had 
signals  to  thi  comput¬ 
er.*  ttofsfiah.Uaar*8 
reply:  "Norm  net  rm 
justtyptog.” 

The  Front  Page 

ThlBuoarisfurtous- 
kiferroaban  is  ffliadng 
from  an  kwentory  report 
«d  aka  noadsR  fight 
away.*!  stay  toto  into 
the  ni^  poitag  through 
code  tor  tMsconpiBat- 


'Tbialy,  at  10  pja.,  I  nm 
the  report  tnyeeif  and 
find  that  the  intonneliun 
aha  was  aridng  about  to 
fnthorwnrt'Onthi 
firatpoge.  In  fact  Next 
moratog.  fish  aska  to  sae 
fheueer*aeopyaBddto- 
eoveri  thto  the  top  page 
ai»8“2oftI7.—Oh.* 
user  tods  heh.  "I  must 
have  toft  hge  Ion  the 


mechanic,  so 
SAipport  pHot  fish  watos 
him  throuidi  the  usuai 
guesfions:  to  tt  pkigged 
in?Cahtocannectodto 
the  printor?  Any  atorm 
lights?  "Vtat  do  you 
think  rm  an  Mtotr  me¬ 
chanic  snaps.  Nsact  fish 
stops  mechanic  through 
too  precots  of  prtoOng  a 
tost  pagt.  DU  anything 
prtoleulTftohaUiahIm. 
"Notyefsaysmacharh 
ic.'ljlmsputpaparin 
RfhsL* 

Nope.  Not  Me 

iratoainid-1960s.and 

this  ndMary  unit  to  fust 

fltortlngtoaandllaa 

alectronicaly  from  baaa 

tehiaitoimftiwi.*Tha 

only  probtom  was  that 

wahadtoeonnset 

through  a  awHdtooard.* 

saysapfiotltohwhowaa 

thsn.'lftoaoparator 

woidd'phtoin’telston. 

an  arrer  wouU  hi  gsnar 

aladintoadato.*Ftoli 

amtofriatototolheopv- 

tov- hut  too  nait  lima 

htounttassdidtoa.toa 

arrert  art  bach.  "Wa 

eaRadtosopmtarind 

aaUdwtweaUiadhar 

tonotlitonintotot 


reports.  "Har  reply?  1 
dUn'tRrtanhdBaahtos. 
RwMjmtatotofbaapa 
«d  notoa  anyway.*  * 


OSHAIKV IMMNTS  DATto  NOT  MXSt  Send  TO 

lnniatedlTlfeattoMri[ye«MMiye»iM»4ei^  If 

I  use  it  iRxil  snag  a  snazzy  Shark  tost  A(U  cinck  out  the 
(tody  feed,  brewm  the  ShariMS  and  sign  up  for  Siwk  Tato 
hofnodatrefyatcornputofewUxamtoiwrfcy. 
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FRANK  HAYES  ■  FRANKLY  SPEAKING 

The  Power  of  No 

IT  WAS  JUST  LAST  YEAR  that  the  London  borough  of 

Newham  couldn’t  afford  to  upgrade  its  aging  Microsoft  Ex¬ 
change  5.5  server.  Then  Newham  contacted  an  open-source 
consulting  firm,  Netproject,  for  a  study  to  see  whether  Linux 
desktops  would  be  a  workable  option  for  the  local  govern¬ 
ment.  By  November,  there  was  a  credible  Linux  plan  set  for  adop¬ 
tion,  subject  to  further  negotiations  with  Microsoft. 

Last  week,  Newham  announced  a  new  10-year,  $9  million  deal 
with  Microsoft.  The  local  government  that  couldn’t  afford  an  Ex¬ 
change  upgrade  will  now  get  that,  plus  up-to-date  desktop  software, 
plus  a  batch  of  tablet  PCs  for  the  borough’s  social  workers. 

Now  that’s  bargaining  power. 


Ofitcialiy.  Newham’s  decision  was  based  in 
lar:ge  part  on  a  Capgemini  study,  commissioned 
by  Microsoft,  that  concluded  that  Newham 
would  not  only  save  a  bundle  by  staying  with 
Wndows,  but  would  also  have  fewer  security 
problems.  Yeah,  right 

Unofficially,  and  much  more  believably,  the 
deal  went  down  like  thiyr  Newham  had  a  viable 
Linux  alternative  to  Windows  (and  a  lot  of 
press  attention  for  being  a  highly  visible  Linux 
poster  child).  Microsoft  negotiated.  Newham 
ended  up  with  a  truckload  of  goodies  that  it 
couldn’t  afford  before. 

Pretty  slick,  eh?  True,  the  Linux  advocates  say 
they  feel  used.  They’re  right  —  they  were  used. 
All  the  available  evidence  suggests  that  New¬ 
ham’s  IT  boss,  Richard  Steel,  never  really  want¬ 
ed  to  go  through  the  expense  and  trouble  of 
dumping  ^^mdows  and  all  the  other  Microsoft 
products  Newham  was  using  in  &vor  of  Linux 
and  open-source  alternatives. 

But  when  Steel  went  to  negotiate  the  deal 
vfith  Microsoft,  that  competing 

open-source  proposal  was  on  the - 

table.  It  meant  Steel  could  walk 
away  from  Microsoft  if  be  had  ta 
He  had  the  power  to  say  no  to  any- 
thii^  short  of  the  deal  he  wanted. 

Was  it  a  bluff?  Only  Steel  knows, 
and  he’s  not  saying.  But  Microsoft 
believed  Newham  could  go  with 
Linux.  Microsoft  wasn't  willing  to 
take  that  chance.  And  that  got 
Newham  one  heck  of  a  deal 
Think  you  can't  possibly  get  that 
kind  of  leverage  in  your  own  deal¬ 
ings  with  software  vendors?  You're 
probably  right  —  chances  are.  you 


don’t  want  that  much  publicity  for  any  IT-relat¬ 
ed  negotiation. 

But  can  you  take  a  few  lessons  from  the 
Newham  deal?  Sure. 

Start  by  remembering  that  if  you  can’t  say  no, 
it’s  not  a  negotiation.  If  you  can’t  walk  away 
from  the  table,  you  have  no  leverage  at  all. 

So  be  sure  you  always  have  a  viable  alterna¬ 
tive  when  you  sit  down  with  a  vendor.  Maybe 
that  means  one  or  more  competitors’  products. 
Maybe  it  means  open-source.  Or  a  homegrown 
system.  Or  just  standing  pat.  But  make  sure  you 
can  say  no. 

Then  forget  about  being  a  nice  guy.  Use  those 
competitors  against  one  another.  Somebody  in 
this  deal  is  going  to  lose.  Make  sure  it’s  not  you. 

Know  what  you  want  to  get  from  the  deal, 
what  your  bottom  line  is  and  how  much  it  will 
take  to  get  you  to  say  yes.  But  don’t  say  yes  until 
the  other  guy  has  run  out  of  things  to  offer. 

Take  your  time  —  the  Newham  deal  took 
months  to  finalize.  Keep  upper  management  in 
the  loop,  so  you  won’t  be  undercut 
when  somebody  gets  unhappy  at 
bow  things  are  going. 

And  when  the  time  comes,  do 
the  deal  and  damn  the  conse¬ 
quences.  The  losers  will  howl  be¬ 
cause  they  lost.  The  winners  will 
moan  because  you  squeezed  them 
so  hard.  That's  OK  —  you  don’t 
woric  for  them. 

For  the  organization  you  do  woik 
for,  you  may  not  get  a  Newham- 
size  advantage.  But  if  Newham  can 
do  it,  you  can  too.  And  these  days, 
you  need  all  the  bargaining  power 
you  can  get  O  40880 
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Learn  How  to  Achieve 
Data  Center  Management  Success 


COMPUTERWORLD 


SOLUTIONS  FOR  TH 
DATA  CENTER 
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Inboducing  the  new  WatchGuard  Rrebox*  X  Edge.  A  tough  firewall  and  VPN  endpoint  lor  real  protection  at  your  vulnerable  perlmelar.  h  to  any 
Fltehoa  X  appliance  and  gat  real-tinie  central  management  and  monttoting  at  no  additional  charge.  Itt  smart  Ita  modol-uppadeablo.  Itt  the  security 
you  really  need,  for  mote  Information  and  availability,  visit  www.watchguaid.csffl/lnfo/8cw23 


Defending  the  Remote  Office: 
Which  VPN  Technology  is  Best? 

FREE  Small-  to  Mid-Sized  Business  Guide 
Download  now!  mni/.watchguard.com/§o/8cw23 
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On  Ihe  Mark,  A  neans  of  preventing  insider  data  Iheff  arrives  from  Russia. 

^^e  certain  you  re  aware  of  the  rights  and  obligations  of  open-source,  says  Maryfran  Johnson 


I 
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Is  Ynr  Data  Safe  OMore? 


V\fe  went  to  India  and  China,  the  two  hottest  offshore  out¬ 
sourcing  destinations,  to  find  out.  Our  on-location  coverage 
from  Bangalore  and  Shanghai  begins  on  page  6. 


Key  Financial  Rrms  Compare 
Notes  on  Disaster  Recovery 


8V  LUCAS  HeAllUN 

A  group  of  top  financial  ser* 
vices  companies  confirmed 
last  week  that  their  IT  execu¬ 
tives  have  met  to  share  cur¬ 
rent  disaster  recovery  schemes 


and  discuss  future  technology 
recovery  strategies.  And  i^t 
they  found  was  that  they  had 
a  lot  in  common  —  including 
headaches. 

"To  start  with,  I  found  out 
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I  Tm  not  alone.  All  banks  are 
struggling  with  this,"  said 
Todd  Baumann,  director  of 
enterprise  business  continuity 
at  Huntington  Bancshares  Inc. 
in  Columbus,  Ohia 
The  Technology  Recovery 
Pn^ect  involved  an  informa¬ 
tion  exchange  among  ei^t 
banks  (see  list,  page  14).  IBM. 
Microsoft  Corp.  and  Veritas 
Software  Corp.  also  participat¬ 
ed  in  the  {Koject,  vriiich  was 
organized  by  the  New  York- 
based  Rnancial  Services  Tech¬ 


nology  Consortium  and  took 
place  between  November 
2003  and  June  of  this  year. 

The  banks  and  bank  holding 
companies  looked  at  main¬ 
frame.  open  systems  and  stor- 
DisasterPlanSrpagelA 
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I  App  Tests  for 
WinXPSP2 
Burden  Users 

Most  delay  installing 
XP  security  update 


■■MM  BY  CAROL  SLI.A 

>  Hini^S  Microsoft 
'  Corp.’s  Service 

j  Pack  2  is  an  im- 

i  portant  securi- 

ty-focused  up¬ 
date  for  corporate  users  run¬ 
ning  Windows  XP.  But  in  the 
three  weeks  since  its  release, 
it's  been  a  tou^  pill  for  many 
to  swallow,  as  they  struggle  to 
test  tens,  hundreds  and,  in 
some  cases,  at  least  1.000  ap¬ 
plications  against  it. 

Only  two  of  32  IT  managers 
who  responded  last  week  u>  a 
Computerworid  survey  con¬ 
ducted  via  e-mail  and  tele¬ 
phone  said  their  companies 
had  deployed  SP2.  and  in  both 
cases  they  did  so  as  pan  of 
Microsoft  eariy-adoptcr  pro¬ 
grams.  The  majority  said 
they’re  still  testing  SP2  to 
determme  its  compadbilicy 
with  the  applications  their 
companies  run. 

"As  we  get  closer  to  the  bt^i- 
days.  we  don’t  make  changes 
of  this  significance  because 
we  don't  want  to  disrtipt  our 
eimronment  so  close  to  our 

SP2,page45 


Can  you  afford  to  change? 


Tile  lime  has  come,  they  say,  to  transform  your  fT.  But  how? 
On  what  scale?  As  a  technofogy  company,  HP  creates— as 
no  finoTKiol  institution  con— opportunities  you  otKe  thought 
impossible,  and  lets  you  change  without  (mc  HP  consultants 
help  you  identify  the  hardware,  software  and  services  you’ll 
need.  Then  HP  FirKtncial  Services  helps  you  finorKe  global 
migration  and  manage  the  technology  over  its  lifespan,  while 
minimizing  financial  risks.  Once  you  can  afford  change,  you 
might  even  embrace  it.  www.hp.com/info/hpfs 
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Windows 
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12  The  SEC  has  postponed  by 

one  year  a  Saii)anes-Oxley 
Act  deadline  for  swifter  filing 
of  annual  corporate  reports. 

13  U.S.  Army  payroll  systems 

have  been  pushed  past  their 
breakup  point  by  the  war  in 
Iraq,  causing  prc^lems  for 
reservists,  says  the  GAO. 

13  The  TSA  plans  tests  of  new 

airport  security  technologies, 
but  lawmakers  and  industry 
executives  are  frustrated  by 
the  slow  pacx  of  deploymenL 

15  Wrelass  WANs  move  beyond 
fixed  points  as  Washington 
State  Ferries  plans  to  oflfer 
Wi'Fi  service  on  its  vessels. 


33  Petite  Portfoiio.  Several  small 
projects  can  add  up  to  big 
risks.  Managing  them  effi¬ 
ciently  requires  a  blend  of 
rigor  and  common  sense. 


38  Who's  Who  in  IT:  The  Thrill  of 
Crisis.  You  may  think  data¬ 
base  admmistration  is  a  ^kiti, 
but  DBA  Gary  Rue  knows  it's 
an  art  In  his  world,  a  crisis  is 
always  just  around  the  comer. 


37  Book  Reviews:  From  IT 
Bovemence  to  HeckJng. 

These  new  books  can  help 
you  survive  as  a  CIO,  set  up 
effective  IT  governance,  prof¬ 
it  from  «^e  project  manage¬ 
ment  and  outwit  hackers. 
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Who  Owns  the 

In  the  Mansgement  section: 

When  busir^s  units  fight  for 
control  of  the  corporate  Web 
site,  the  company  loses.  Pape  31 
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Security  Eyiectations, 
Rise  in  India 


INCREASIN6LY  T0U6H  DEMANDS  FRDM  U.S.  CLIENTS  SPARK  CHAN6E. 
BY  JAIKUMARVIJAYAN  BANGALORE 


AMVurc!^  ihi-  pcrimftc-r 

j:ics'  mjin  compus  in 
H.inp.tlorc  s  HcL-tmnif  Ajt\. 
InsiJi'.  ju*-r  bi-hinJ  the  slidinj: 
'^locl  is  a  chockpuint 

«  here  stvurii\  personnel 
issue  phnto-II>  bjJKes  lo 
.lit  \  tsilors. 

(L.irJ  ke>s  anJ  biometrie 
.mJheniie.ilion  de\  ices  conirol 
access  lii  Llie  various  develop¬ 
ment  centers  in  sleek  build¬ 
ings  dotting  the  landscaped 
campus  Adosed-circuit  TV’s 
provide  constant  surveillance. 
At  the  same  time,  an  invisi¬ 
ble  perimeter  of  event  logging 
and  monitoring  tools,  intru¬ 
sion-detection  systems,  fire¬ 
walls  and  enervption  technolo¬ 
gies  pn*teets  the  company’s 
information  infrastructure. 

Such  measures  are  what’s 
needed  lo  allay  security  con¬ 
cerns  for  U.S  client.s  outsourc¬ 
ing  work  Wipro.  said  |.  t*3z- 
hamalai.  information  security 
manager  at  the  51  billion  IT 
services  vendor  "[>aia  security 
and  privacy  used  to  he  an  after¬ 
thought."  Parhiimatai  said. 

^  "Now  customers  are  talk- 
ing  aSiut  it  right  at  the 
RbP  stage  itself.  They 
want  a  sccuritv  plan  with 
the  proposal  " 

VV'iproand  other  Indi- 
n  outsourcing  vendors 
are  bolstering  their  se- 
cuhiv  and  privacy 
prietivcs  in  response 
to  L'  S.  cimeerns  stem¬ 
ming  from  the  eipmpli- 
ance  requirements 
of  l.iv\  s  vueh  as  Sar-  ' 
Kir.es  ( '\J(.-v.  (.ramm- 
l  e.ich-KcIev  and 
llH'AA.  nit  kev 
thfe.it'  irii  Iiide  unau¬ 


thorized  data  access,  acciden¬ 
tal  inform.ition  loss  and  sabo¬ 
tage.  loss  of  intellectual  prop- 
ertv.  and  damage  from  worms 
.md  viruses. 

.A  growing  number  of  com¬ 
panies  "are  staking  stringent 
contractual  guarantees  rekited 


VIDEO  MONITORING  is 
used  extensively  by  Indian 
service  (iroviders. 


to  the  security  .ind  privacy  of 
I  data  that  could  he  remoielv 
J  accessed  as  p.irt  of  I  T  applic.i- 
I  tion  dcvehvpment.  testing  or 
[business  process ouisoure- 
'  ingj."  said  Rusi  Hrij.  CEOof 
I  Hevnvare  Technologies  Ltd.. 

;  a  Mumbai-based  service  pro- 
\  idcr  w  ith  f.ieilities  in  Banga¬ 
lore.  "  rhev-  .ire  demanding 
^  documented,  auditable  proce¬ 
dural  controls." 

Regulatory  compliance  is 
what’.s  driving  much  of  the 
need  for  such  measures,  agreed 
j  Ram  Mouli.  vice  president  of 
:  technology  planning  and  de¬ 
velopment  at  T.  Rowe  Price 
(Iroup  Inc.  The  Baltimore- 
I  b.ised  investment  manage- 
I  ment  firm,  which  manages  as¬ 
sets  worth  more  than  S20(ibil- 
lion.  has  outsourced  severM 
application  development  proj- 
I  eets  to  India. 

j  "New  reguLitions  from  the 
I  SbX;  and  other  regulatory 
:  agencies  have  created  a  need 
j  for  several  intern.il  controls 
)  for  application  development. 

change  control  and  mainte- 
:  nance."  Mouli  said.  “These  I 
controls  have  to  be  extended  I 
I  offshore  .ind  monitored."  I 

1  The  result  is  "tremendous  ' 

scrutiny  right  now  on  data  se- 
I  curity.  access  controls  and  pri- 
j  v.icy"  related  lo  offshore  wurk. 
said  the  chief  technology  offi¬ 
cer  of  a  Chicago-based  service 
provider  for  the  financial  in- 


A  Painfully  Slow  Process 


JOLLY  TECHNOLOOIES  INC  .  a 
San  Cark>$,  Calif.,  maker  of 
labeling  products  for  the 
printing  industry,  is  fincNng 
out  the  hard  way  just  how 
tough  H  can  sometimes  be  to 
enforce  InteHectual  property 
(IP)  protections  in  India. 

lay,  the  company  set  up 
H  software  deveiop- 
:enter  in  Mumbai. 
Among  the  approiimatefy  20 
people  ft  hired  in  the  western 
India  city  was  a  software  en- 
oinMr  who  in  mid- Juiv  was 


to  her  Yahoo  personal  e-mail 
account. 

The  woman,  who  admitted 
the  theft,  was  immediately 
fired,  and  a  complaint  was 
hied  with  the  Mumbai  police 
department  soon  afterward, 
said  Brett  Changus,  Jolty's 
chief  financial  officer. 

“Unfortunately,  that’s 
pretty  much  where  things 
are.  even  now,"  Changus  said 
last  week.  “The  police  there 
appear  to  be  having  a  hard 
comprehending  what 
and  how  important  it  is 


HThe  ability  for 
employees  to 
carry  data  out  of  the 
facility  is  minimized 
to  what  they  can 
carry  in  their  heads. 


SUNIL  GUJRAL.  VICE  PRESCENt  OF 

TECHNOLOGV  WIPRO SPECTRAMINO 

dustr>  who  spoke  on  condi¬ 
tion  of  an<*nymity.  "S»ime  of 
our  customers  have  asked  us 
to  till  out  extraordinarily  de¬ 
tailed  questionnaires  in  which 
they  ask  u.s  to  attest  tc*  our  se¬ 
curity  controls  so  they  in  turn 
can  include  that  in  their  com¬ 
pliance  documents."  he  said. 

The  trend  is  resulting  in  a 
much  greater  focus  by  both 
U.S.  companies  and  their  Indi¬ 
an  vendors  on  issues  such  as 
security  certifications  and 
audits,  identity  man.igcmcnt 
and  appIieMtion  provisioning, 
and  on  detailed  event  logging 
and  monitoring  activities  (sec 
"Security  Checklist."  page  7>. 

There's  no  question  ihat  se¬ 
curity  expectations  have  risen 
•sharply,  said  S.  Gopalakri.sh- 
nan.  chief  operating  officer  at 
Bangalore-based  Inftwys  Tech¬ 
nologies  Ltd.,  one  of  India's 
brgesi  IT  services  vendors, 
with  revenue  of  more  than 


As  a  result,  more  than  a 
month  after  the  complaint 
was  filed,  no  action  has  been 
taken  against  the  woman. 
Changus  said.  In  frustration, 
the  company  earlier  this 
month  decided  to  file  a  law¬ 
suit  against  the  Mumbai  po¬ 
lice  department  over  Hs  al¬ 
leged  failure  to  take  action  in 
the  case. 

“There  are  IP  protection 
laws  there,  but  so  far.  we 
have  received  zero  protec¬ 
tion."  Changus  said. 

The  Mumbai  police  could 
not  be  reached  for  comment. 

The  irtekfem  has  prompted 
Jolly  to  reassess  its  Irxlia 
strategy.  Charxgus  said.  *^6 
obviously  took  whatever  pre- 
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PHYSICAL  SECURITY  measures  at  maiw  outsourctnQ 
service  providers  indtide  guarded  entrances. 


SI  billion,  ‘it's  become  a  lot 
more  explicit  now.  We’ve  had 
to  improve  »m  and  formalize  a 
lot  of  things"  from  a  data  secu¬ 
rity  standpoint,  he  said. 

One  example  is  a  backup 
storage  site  that  lnfos\-s  recent¬ 
ly  established  outside  India  in 
nearby  Mauritius.  All  client 
backup  tapes  are  shipped 
weekly  to  the  site  as  a  precau¬ 
tion.  In  addition,  each  client 


has  been  assigned  a  standby 
backup  facility  in  an  alternate 
liKation.  (jopalakrishnan  said. 

Indian  business  process  out- 
Mmrcing  I  c«impanics. 
which  typically  handle  a  lot 
more  sensitive  information 
when  servicing  their  clients 
than  pure  IT  dcvcUipmcnt 
shops,  take  extra  precautions. 

Wipro  Spcctramind.  a  S‘>5 
million  BPO  subsidiary  of 


cautions  we  could.  But  H  we 
can’t  protect  our  IP,  there  is 
no  way  we  can  do  business 
Ihere,”  he  sai±  "People  have 
to  know  that  they  iust  can't 
steal  confidential  information 
and  get  away  with  rt." 

India's  IT  trade  organiza¬ 
tion,  the  New  Delhi-based 
National  Association  of  Soft¬ 
ware  and  Service  Companies 
(Nasscom),  is  acutely  aware 
that  the  country’s  flourishing 
IT  industry  could  be  damaged 
H  data  protection  can't  be 
enforced. 

The  organization  recently 
launched  an  education  cam¬ 
paign  aimed  at  judicial  and 
police  authorities  as  well  as 
the  ministries  of  IT  and  law. 


association  vice  president 
Sunil  Mehta  said.  The  idea  is 
to  create  a  much  broader 
awareness  of  the  need  for 
enacting  legislation  that  can 
be  more  easily  enforced. 

Nasscom  is  also  working 
with  IT  companies  to  buBd  a 
database  that  verxlofs  can 
use  to  more  quickly  and  reli¬ 
ably  verify  an  employee's 
professional  education  and 
other  background  informa¬ 
tion.  Mehta  said. 

The  global  database  will  be 
compiled  with  input  from 
Nasscom 's  members  but 
won't  be  used  as  an  instru¬ 
ment  for  blackiisting  employ¬ 
ees.  he  said. 

-  Jaikumar  K/iayan 


Wiprn,  prohihiiv  empinwes 
from  L'arrv  ing  mnbilo  phonvs 
r  pens  anJ  p.ipi.T  tn  thoir 
"rk  .irv.is.  ••  Thv  .ibilin  fur 
.■mplnycL-s  t»>  varrv  data  <un 
»f  the  faciliu  is  minimized  t<' 
hat  ihe\  van  varry  in  their 
heads."  said  Sunil  (iujr.il.  viee 
president  uf  (eehn»lv»gy, 

.As  w  ith  other  BI'O  outfits 
and  m.inv  IT  development 
shops,  at  Speetramind,  ain 
ports  and  de\  ii.es  that  e.in  be 
Used  to  suire  <*re*'py  dat.i  are 
dis.ibled  »in  all  PCs  and  note- 
biM'ks  th.n  employ  ivs  might 
.'ed  to  use  l»‘  deliver  serviee-^ 
for  I  '.S,  elients.  A  majority  of 
its  call  eentcr  agents  aeeess 
•usfomer  systems  via  bare- 
K»nes  Citrix  Systems  Ine.  ter 
minals  that  provide  no  .iv  enue 
tor  data  to  be  stored  or  vx*pied. 

"I  Speetramind  i  only  has  the 
ability  m  v  iew  lourl  data."  said 
Chris  l  .arsen,  CI-O  of  I  -1  oan 
Ine..  a  Pleasanton.  Calif.-based 
online  prov  Ider  of  consumer 
,  loans  that  h.is  outsourced  a 
pinion  of  its  baek-ofrtee 
home-esiuiiy  underwriting 
tuns'tions  to  Speetramind. 

:•  "'niey  d«i  not  have  the  ability 
to  store,  share,  print  or  retain 
data  in  their  India-Kised  com¬ 
puters  and  sy.sicm.s." 

l->Lo.nn  also  uses  a  v-arieiy  of 
technologies  fmm  companies 
I  such  as  Tripwire  Inc.  and 
open-source  tiHils  like  Nagios 
to  monitor  and  log  iK’tivity  at 
Spcctramind.  I  arsen  added. 

Ongoing  Risks 

Despite  the  measures  to  bol- 
I  ster  security,  the  a’lative 
dearth  of  security  profession- 
'  als  in  India,  the  breakneck 
I  growth  of  its  IT  industry  and 
an  onerous  legal  system  con¬ 
tinue  to  pise  risks  that  must 
not  be  overliHiked.  cautioned  ' 
Samir  Kapuru.  an  analyst  at 
a  stake  Ine..  a  Cambridge. 

Mass. -based  consultancy.  i 

Much  of  the  growth  in  Indi- 
I  an  IT  jobs  over  the  pa.st  few 
I  years  has  been  in  areas  such  as 
i  application  development  and 
I  maintenance,  rather  than  in  a 
“niche  job"  such  as  IT  securi- 
'  ly.  Kapuria  noted.  I 

On  paper  at  least.  India  has 
I  several  laws  that  cover  data  se-  | 

I  curity  and  privacy  issues.  The  ‘ 

.  most  prominent  one  is  the  In¬ 
dian  Information  Technology 


Act  itf ’(10(1.  which  in.ikes 
the  unautlmrized  UM  ofd.it.t 
.1  punishable  olTcnse  Bin  time 
ly  enforcement  of siieii  l.m-. 
could  prove  diflTeuli.giM-ii  the 
evcruei.itingly  skm  p.uvol  ilu- 
country ’s  Ii-g.il  sy  stem.  rh.ii 
pises  .1  signine.mt  threat  from 
an  intelleetu.il  prop-rty  proi,  . 
tion  standpoint.  K.ipiiri.i  vnd 

Moreover,  the  dist.inv».  i.k 
tor  can  lielp  conceal  risky  pne 
tiees.  espeei.illy  when  dealing 
with  smaller  tlrnis.  IoreN.im 
pie.  .1  fast -gn»w  ing  Bl‘i>  eom 
p.my  that  was  recently  moving 
to  .1  Lirger  i.ieility  decided  to 
nnwe  s,*me  of  its  >i-rvers  to  .i 
ne.irb\  Internet  c.ife.  where  it 
conneeieJ  to  its  L’.'s.  elk-nis, 
l'ei..iii>i-  of  a  delay  in  (lie  open¬ 
ing  of  its  m-w  faeility. 

•And  .ilthough  the  practice 
.ippears  to  Iv  r.ire.  Indian  firms 
h.ive  bivn  kiuwvn  to  suK  on- 
tract  work  out  to  conipank's  m 
other  amntrics  without  ihc 
knowledge  of  ilu- 1,  .s  client 
and  vviili  none  of  the  seeuritv 
measures  th.it  might  luveKvn 
viriginaily  agreed  upon. 

But  the  reputable  providers 
appear  to  have  gotten  the  se¬ 
curity  message  from  their 
clients.  It's  no  longer  enough 
lor  Indian  evimpanies  to  “sim¬ 
ply  say  they  are  addressing 
the  issJjc.~tiopa!akrishnan 
acknowledged,  "'niey'vv  got 
to  be  able  to  show  hvwv  they 
are  addressing  it."  O  49098 
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■  RcQUlRE  Indian  vendors 
to  have  thek  development 
centers  audited  by  estab¬ 
lished  firms  or  be  cerirtied 
under  internationai  data  se¬ 
curity  and  audit  standards 
such  as  BS7799  or  SAS70 
Many  companies  also  re¬ 
serve  the  right  to  do  spot 
audits  and  checks. 

■  the  use  of  encryp¬ 
tion.  firewalls  and  intrusion- 
detection  systems  to  deal 
with  malicious  attacks.  To 
watch  for  insider  threats, 
companies  have  begun 
mandating  content-fiHermg 
tools  and  event  logging  and 
monitoring  techrotogies  on 
the  networks  connecting 
U.S.  clients  with  thee  Indian 
providers. 

■  CONDUCT  rigorous  back¬ 
ground  checks  on  employ¬ 
ees  and  require  them  to 
sign  conhdMtialitY  agree¬ 
ments  prohibiting  the  dis¬ 
closure  of  proprietary  infor¬ 
mation  when  they  leave  the 
company. 

■  FOCUS  on  physical  secu¬ 
rity  and  access-control  sys¬ 
tems.  business  continiiity 
and  disaster  recoverability. 
Many  companies  insist  on 
off-sHe  storage  and  alter¬ 
nate  sites. 


AT  W(PR0  i  foriihw3  physicaJ  owimetiH^  s  comotemertM)  by  an  invtsr- 
W«  perimetei  ot  mtnisioo-OelBction  systems,  lirewalfa  and  encrypper 
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Secwity  Expectations, 
tospensellise  in  India 
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TALL  ELECTRIC  FENCE 
secures  the  perimeter 
AA  of  Wipro  Technolo* 

S  gies'  main  campus  in 
Bangalore’s  Electronic  City. 
Inside,  just  behind  the  sliding 
steel  gates,  is  a  checkpoint 
where  security  personnel 
issue  photO'ID  badges  to 
all  visitors. 

Card  keys  and  biometric 
authentication  devices  control 
access  to  the  various  develop¬ 
ment  caters  in  sleek  build¬ 
ings  dotting  the  landscaped 
campus.  Closed-circuit  TVs 
provide  constant  surveillance. 

At  the  same  time,  an  invisi¬ 
ble  perimeter  of  event  logging 
and  monitoring  tools,  intru¬ 
sion-detection  systems,  fire¬ 
walls  and  encryption  technolo¬ 
gies  protects  the  company’s 
information  infrastructure. 

Such  measures  are  what's 
needed  to  allay  security  con¬ 
cerns  for  U3  clients  outsourc¬ 
ing  work  to  Wipro.  said  J.  Paz- 
•  hamalai.  information  security 
I  manager  at  the  51  billion  IT 
I  services  vendor.  "Data  security 
!  and  privacy  used  to  be  an  after¬ 
thought,”  Pazhamalai  said. 
“Now  customers  are  talk- 
ii%  about  it  ri^  at  the 
RFP  stage  itself.  They 
want  a  security  plan  with 
the  proposal” 

Wipro  and  other  Indi¬ 
an  outsourcing  vendors 
are  bolstering  their  se-  I 
curity  and  privacy 
practices  in  re^>onse 
to  U.S.  concerns  stem¬ 
ming  from  the  compli¬ 
ance  requirements 
of  laws  such  as  Sar- 
banes-Oxley.  Gramm- 
Leach-BIUey  and 
HIPAA-Thekey 
threats  iitcItKle  unau¬ 


thorized  data  access,  acciden¬ 
tal  information  loss  and  sabo¬ 
tage.  loss  of  intellectual  prop¬ 
erty,  and  damage  from  worms 
and  viruses. 

A  growing  number  of  com¬ 
panies  “are  seeking  stringent 
contractual  guarantees  related 


to  the  security  and  privacy  of 
data  that  could  be  remotely 
accessed  as  part  of  IT  applica¬ 
tion  development,  testing  or 
(business  process  outsourc¬ 
ing].”  said  Rusi  Brij,  CEO  of 
Hexaware  Technologies  Ltd. 
a  Mumbai-based  service  pro¬ 
vider  with  facilities  in  Banga¬ 
lore.  "They  are  demanding 
documented,  auditable  proce¬ 
dural  controls.” 

Regulatory  compliance  is 
what’s  driving  much  of  the 
need  for  such  measures,  agreed 
Ram  Mouli.  vice  president  of 
technology  planning  and  de¬ 
velopment  at  T.  Rowe  Price 
Group  Inc.  The  Baltimore- 
based  investment  manage¬ 
ment  firm,  which  manages  as¬ 
sets  worth  more  than  $206  bil¬ 
lion,  has  outsourced  several 
application  development  proj- 
I  ects  to  India. 

"New  regulations  from  the 
SEC  and  other  regulatory 
agencies  have  created  a  need 
for  several  internal  controls 
for  application  development, 
change  control  and  mainte¬ 
nance.”  Mouli  said  These 
controls  have  to  be  extended 
ofiEsbore  and  monitored.” 

Ute  result  is  “tremendous 
scrutiny  right  now  on  data  se¬ 
curity,  access  controls  and  pri¬ 
vacy"  related  to  offshore  work, 
said  the  chief  technology  offi¬ 
cer  of  a  Chicagobased  service 
provider  for  the  financial  in- 


A  Painfully  Slow  Process 
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Sar*  Carlu'i.  Caiif  nio*'Lr  ji 
labeling  pioduulr.  lor  th.-; 
prioliiHj  industry,  is  finding 
out  the  l»dfil  w,»y  No* 
lough  I?  can  somi;limcs  b<r  to 
enfoicf  intellectual  prop«Tiy 
(IP)  piotttlions  in  India 
In  May.  the  company ■  i. 
a  snidll  sollwviHC  Ucvclnp 
menl  centi.o  m  Mumbai 
Among  the  api)iu»im,it(,'iv  ?0 
people  it  hired  in  the  WL*',f»ori 
India  city  was  a  sollw.jre  on 
qineer  who  m  mid- July  wa-. 
f;aughi  uploading  subrdantiul 
I. hunks  of  Jolly  source  cmJc 


.U'liiunl 

Ihe  Vni''i,iu.  who  .idiiKlti’d 

liif  iiiefi  was  irniriHdiali.-lv 
lited  and  a  complaint  w.r. 
filed  With  tin-  Mijmbai  pol'i  i 
di-priftnirriil  -.(lon  ,jHi.Tw.i>ri 
said  Brel!  Changus  J.iliy 
lupf  ti'iai’Lidl  olficet 
■Unfd'tunalely  Ih.if  . 
uietly  iiiuLh  whnre  things 
are  even  now  '  Chunqu',  in! 
last  week  "Thi:  puliCe  tl’,<r<‘ 
Joptar  to  life  having  .1  tiam 
hme  tomprehendinq  wt>.it 
IP  !•.  anij  how  intporhin!  il  1 . 
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H  The  ability  for 
employees  to 
carry  data  out  of  the 
facilny  is  minimized 
to  what  they  can 
carry  in  their  heads. 
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dustry  who  spoke  on  condi¬ 
tion  of  anonymity.  “Some  of 
our  customers  have  asked  us 
to  fill  out  extraordinarily  de¬ 
tailed  questioimaires  in  which 
they  ask  us  to  attest  to  our  se¬ 
curity  controls  so  they  in  turn 
can  include  that  in  their  com¬ 
pliance  documents,”  be  said. 

The  trend  is  resulting  in  a 
much  greater  focus  by  both 
US.  companies  and  their  Indi¬ 
an  vendors  on  issues  such  as 
security  certifications  and 
audits,  identity  mana^raent 
and  application  provisionmg. 
and  oa  detailed  event  logging 
and  monitoring  activities  (see 
“Security  Checklist,"  page  7). 

Th«e's  DO  question  (hat  se¬ 
curity  expectations  have  risen 
sharply,  said  S.  Gopalakrisb- 
nan.  dtief  operating  ofiker  at 
Bangalore-based  Infosys  Tech¬ 
nologies  Ltd.,  one  of  India’s 
largest  IT  services  vendors, 
with  revenue  of  more  than 
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$1  billion.  "Vs  become  a  lot 
more  explicit  now.  We've  had 
to  improve  on  and  formalize  a 
lot  of  things'*  frmn  a  data  secu¬ 
rity  standpoint,  be  said 
One  example  is  a  backup 
storage  site  ^t  Infosys  recent¬ 
ly  established  outside  India  in 
nearby  Mauritius.  All  client 
backup  t2^>es  are  shipped 
weekly  to  the  site  as  a  precau¬ 
tion.  In  addition,  each  client 


has  been  assigned  a  standby 
backup  facility  in  an  alternate 
location,  Gopalakri^inan  said 

Indian  business  process  out- 
sourcii^  (BPO)  companies 
which  typically  handle  a  lot 
more  sensitive  information 
when  servicii^  their  clients 
than  pure  IT  development 
shops,  take  extra  precautions. 

W4>ro  Spectramind  a  $95 
million  BPO  subsidiary  of 
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Wipro.  prohibits  employees 
from  carrying  mobile  phones 
or  pens  and  paper  to  their 
woric  areas.  "The  ability  for 
employees  to  carry  data  out 
of  the  facility  is  minimized  to 
what  they  can  carry  in  their 
heads,**  said  Sunil  Gujral,  vice 
president  of  technology. 

As  with  other  BPO  outfits 
and  many  IT  development 
shops,  at  Spectramind  any 
ports  and  devices  that  can  be 
used  to  store  or  copy  data  are 
disabled  on  all  PCs  and  note¬ 
books  that  employees  mi^c 
need  to  use  to  deliver  services 
for  U.S.  clients.  A  majority  of 
its  call  center  agents  access 
customer  systems  via  bare- 
bones  Citrix  Systems  Inc.  ter¬ 
minals  that  provide  no  avenue 
for  data  to  be  stored  or  copied. 

iSpectramindJ  only  has  the 
ability  to  view  [our]  data,**  said 
Chris  Larsen.  CEO  of  E-Loan 
Inc.,  a  Pleasanton.  Calif-based 
online  provider  of  (X>nsumer 
loans  that  has  outsourced  a 
portion  of  its  back-office 
home-equity  underwriting 
functions  to  Spectramind. 

“They  do  not  have  the  ability 
to  store,  share,  print  or  retain 
data  in  their  India-based  com¬ 
puters  and  systems."  I 

E-Loan  also  uses  a  variety  of  I 
technologies  from  companies  | 
such  as  Tripwire  Inc  and 
open-source  tools  like  Nagios 
to  monitor  and  log  activity  at 
Spectramind.  Larsen  added. 

Ongoing  Risks 

Despite  the  measures  to  bol¬ 
ster  security,  the  relative 
dearth  of  security  profession¬ 
als  in  India,  the  breakneck 
growth  of  its  IT  industry  and 
an  onerous  l^al  system  con¬ 
tinue  to  pose  risks  that  must 
not  be  overlooked,  cautioned 
Samir  Kapuria,  an  analyst  at 
@stake  Inc.,  a  Cambridge. 
Mass.*based  consultancy. 

Much  of  the  growth  in  Indi¬ 
an  IT  j<^  over  the  past  few 
years  has  been  in  areas  such  as 
application  develc^ment  and 
maintenance,  rather  than  in  a 
"niche  |ob*  such  as  IT  securi¬ 
ty.  Kapuria  noted. 

On  paper  at  least.  India  has 
several  laws  that  cover  data  se¬ 
curity  and  privacy  issues.  The  j 
most  prominent  one  is  the  In-  | 
dian  Information  Technolc^  I 


j  Act  of  2000.  which  makes 
j  the  unauthorized  use  of  data 
'  a  punishable  offense.  But  time- 
'  ly  enforcement  of  such  laws 
I  could  prove  difTtcult,  gb-en  the 
!  excruciatingly  slow  pace  of  the 
country's  leg^  system.  Thai 
j  poses  a  s^nifreant  threat  from 
j  an  inteUectuaj  propert>'  protec- 
'  tion  standpoint.  Kapuria  said. 

I  Moreover,  the  distance  fac- 
I  tor  can  help  conceal  risky  prac¬ 
tices.  especially  when  deaUi^ 
j  with  smaller  firms.  For  exam- 
j  pie,  a  f^t-growing  BPO  com¬ 
pany  that  was  recently  moving 
j  to  a  larger  facility  decked  to 
I  move  some  of  its  servers  to  a 
nearby  Internet  cafe,  where  it 
connected  to  its  U.S.  clients. 

1  because  ofa  delay  in  the  open- 
,  ingofhs  new  facility. 

I  And  although  the  practice 
I  appears  to  be  rare,  Indian  firms 
'  have  been  known  to  subcon¬ 
tract  work  out  to  companies  in 
j  ocher  countries  without  the 
j  knowledge  of  the  U5.  diene 
I  and  with  none  of  the  securit>- 
measures  that  might  have  bc«n 
originally  agreed  upon. 

But  the  reputable  providers 
appear  to  have  gotten  the  se¬ 
curity  message  from  their 
clients.  It’s  no  longer  enough 
I  for  Indian  companies  to  "sim- 
I  ply  ^  they  are  addressing 
I  the  issue,"  Gopalakrishnan 
acknowledged.  "They’ve  got 
!  to  be  able  to  show  bow  they 
are  addressing  h.”  C  49096 
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Security 

Checklist 


■  REQUIRE  Indian  vandon 
to  have  their  devaleproant 
canters  audHod  by  estab¬ 
lished  firms  or  be  certified 
under  kitemationai  date  se- 
curttyandaudBstandartts 
such  as  BS7799  or  SAS70. 
Many  companies  abo  re¬ 
serve  the  right  to  do  spot 
audits  and  checks. 

a  ENSURE  the  uw  of  encryp¬ 
tion,  firewbb  and  kitrusion- 
datoction  ^rstems  to  dab 
wWi  maficious  attacks.  To 
watch  for  kakter  thretes, 
companies  have  begun 
mandating  eontent-Wfieriiig 
tools  and  event  logging  Md 
monfioring  technologies  on 
the  notworki  comoding 
U.S.  diante  with  their  Indan 


■  CONOUCTrigorousback- 
(Foundchacksenempioy 
ees  and  require  them  to 
sigi  rnnfiiiiwfibRy  agree-  < 
manteproMbiHngthedte- 
docure  of  proprietary  infor¬ 
mation  whan  they  leave  the 
company. 

■  FOCUS  on  pbybeal  secu¬ 
rity  and  accees^oafrei  sys- 
toms,  business  continuity 
and  dteaster  recoMrabMly. 
Many  compMias  Mst  on 
off-aHa  storaga  and  alter- 
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^  ^  _ _ j _ _ J  B  I  secrets  and  business  data." 

I  III Al^  Vl|  A  group  vice 

l^milimi  I|||b  presidentandchieftechnolo- 

V  W  III  UUIIIIIIII  Ulv  I  gyomceratNeusoftCroup 

H  [  Ltd.,  a  Chinese  software  com* 

_  ®  ^^1  I  pany  based  in  the  northeast- 

Piracy  Stigma  in  China 

•  '  Nctisoft  allocaies  separate 

buildings  for  major  clients 
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WALK  into  the  access- 

controlled  room  ftiil  of 
software  developers  at 
Bleum  Inc.'s  headquar- 
'  ters  here  and  you  can't  miss 
I  the  slogan  written  in  large 
;  blue  and  black  letters  that 
I  stretches  across  the  far  wall: 

“Protect  our  customer." 

I  The  message  is  there  to 
serve  as  a  constant  reminder 
for  Bleum's  team  of  English- 
speaking  software  engineers 
I  of  the  importance  of  keeping 
I  clients' software  code  secure. 

<  said  Eric  Rongley.  the  out- 
^  sourcing  service  provider's 
[  founder  and  CEO. 

,  Concerns  about  the  protec- 
'  tion  of  intellectual  property 
I  and  proprietary  corporate 
'  data  are  hardly  unique  to  Chi¬ 
na.  But  the  sectmty  risks  are 
I  greater  here  than  in  locations 
I  such  as  India  or  Eastern  Eu- 
'  rope.  Rongley  said.  “It’s  defi¬ 
nitely  in  the  interests  of  a 
I  company  here  to  overcompen- 
I  sate  for  it."  he  said. 

China’s  poor  reputation  for 


I  intellectual  property  proiec- 
j  tion  stems  largely  from  the 
widespread  availability  of  pi¬ 
rated  DVD  movies  and  soft¬ 
ware.  Last  month,  the  Business 
Software  Alliance  in  Washing¬ 
ton  estimated  that  92%  of  soft¬ 
ware  used  in  China  during 
2003  was  unlicensed  and  ille¬ 
gal  That  figure  tied  the  coun¬ 
try  with  Vietnam  for  the  dubi¬ 
ous  distinction  of  having  the 
world’s  highest  piracy  rate. 

But  a  hi^  piracy  rate  for 
packaged  applications  doesn't 
mherently  place  outsourced 
software  development  proj¬ 
ects  at  risk,  said  Chen  Ling- 
sheng.  vice  president  of 
greater  China  at  BcaringPoini 
Inc.,  calling  security  concerns 
in  China  overblown.  Out- 
j  sourcing  projects  to  compa- 
I  nies  in  China  can  be  as  secure 
I  as  it  b  anywhere  else,  he  said. 

I  “We  had  a  major  financial 
I  client  from  the  U.S.  come  over 
here  to  do  a  security  audit  be¬ 
fore  they  would  give  us  a  proj¬ 
ect.  and  we  passed  the  audit." 
Chen  said,  noting  that  Bcar¬ 
ingPoini  follows  the  same  se¬ 
curity  procedures  in  China 
that  it  uses  in  the  U.S. 

In  addition  to  conducting 
security  audits,  those  proce¬ 
dures  include  strictly  enforc¬ 
ing  nondisclosure  agreements 
and  restricting  development 
work  to  facilities  that  require  a 
keycard  for  access.  ^ 

BearingPoint  and  other  out¬ 
sourcing  service  providers  in 
China  are  willing  to  go  even 
further  to  meet  their  cus¬ 
tomers'  security  demands.  For 
example.  BearingPoint  devel¬ 
opers  have  access  only  to  code 
and  project  documeniation. 

“As  an  outsourcing  service 
provider,  we  take  it  very  seri¬ 
ously  to  protect  our  clients’ 


I  Alpine  Electronics  Inc-  and  it 
I  restricts  access  to  the  huild- 
I  ings  to  staff  working  with 
those  companies.  Fang  said. 

On-site  offices  are  available 
to  each  client’s  project  man¬ 
agers.  and  Neusoft  can  pro- 
I  vide  them  with  individual 
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phone  lines  rather  than  com¬ 
pany  extensions,  be  said. 

Aside  from  physical  securi¬ 
ty  measures.  Fang  said  tVireign 
companies  can  build  effective 
legal  protections  into  their 
contracts  with  outsourcing 
providers  in  China.  For  exam¬ 
ple.  Neusoft’s  contracts  with 
Hs  Japanese  clients  arc  typi¬ 
cally  designed  to  be  enforce¬ 
able  in  both  Japan  and  China 
while  offering  an  avenue  for 
arbitration  with  a  third  party 
under  Hong  Kong  law.  he  said. 

For  companies  that  want 
to  keep  a  closer  eye  on  out- 


I  sourced  development  projects. 
I  BearingPoint  has  offered  to  in- 
I  stall  video  cameras  to  monitor 
work  in  project  rooms  at  its 
facilities  in  Shanghai  and  the 
northeastern  Chinese  city  of 
Dalian,  Chen  said. 

At  Bleum's  highest  level  of 
security.  Rongley  said,  the 
company  offers  a  "shadow 
group"  of  developers  who  are 
given  financial  incentives  to 
uncover  vulnerabilities  in  soft¬ 
ware  developed  by  the  lead 
development  team. 

The  shadow  developers  ex¬ 
amine  the  code  for  security 
holes  such  as  back  doors  or 
opportunities  for  buffer  over¬ 
flows  that  would  allow  attack¬ 
ers  to  run  executable  code. 


While  these  and  other  mea¬ 
sures  may  help  to  guarantee 
the  security  of  a  customer's 
code  and  data,  the  best  way 
to  improve  intellectual  prop¬ 
erty  protection  in  China  b 
to  change  cultural  attitudes, 
according  to  Rongley.  He 
noted  that  service  providers 
can  advance  the  cause  through 
training  sessions  and  staff 
meetings. 

And  even  slogans  on  the 
wall.  049092 

Lemon  b  the  iZ>G  News  Service 
corre^ndenrin  Tai^i 


J.jikuina>  Vij'iyan  • 

Jvilii;  Quinn  ■  Don  Tennant 


Toiorito.  Onldiio,  Canada 
September  8 
Los  Angeles.  September  is 
Boston,  September  21 
Minneapolis,  Octobei  s 
Sao  Paulo,  Brazil 
October  s 

Alli-iid.ini  !■  I',  tRtf  .  Iirl 

Sf.ils  ,111-  lirnitcd.  Ri-visi.-,  : 


At  an  EMC  Forum,  see  how  today's  storage  and  information  management 

STRATEGIES  CAN  HELP  YOU  SOLVE  YOUR  BIGGEST  IT  CHALLENGES. 
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Out  of  Longhorn 

MtefOMW  Corp.  innoutifd  Ridty 
a  chMot  in  piam  for  tht  nut  ma¬ 
im- raiMM  ol  WIndowt,  ivMeh  It 
codt-namad  Langhora  TIm  MW 
Mndowt  sforaga  aubaystam, 
coda  naiTiadWfofS.wpn1ba  part 
of  tha  Longham  dant  as  pipvi- 
OMsiy  piannad.  HIcnMofl  add 
WinR  wil  ba  dailtfarad  aftar  tha 
Longhorn  raiaiaa.  Tha  company 
aarid  (ha  Lsnohom  dam  it  targat- 
ad  tar  ganaraHy  avaftaMKy  in 
2009.  It  aaid  K  aapacta  tha  Lnng- 
horn  aarvar  ralaaaa  (a  ba  avadabia 
in  2007. 


Cisco  Warns  of 
Two  Security  Flaws 

CiBOo  Syttama  Inc.  laat  wash 
wanwd  about  aacurify  hotas  in 
twa  producta  that  pradta  uam 
■dhanticatfon  and  amberitatton 
aarvieat:  (ho  Cfaee  Saeura  Accan 
Contral  Sorwar  tar  ¥Mowb.  and 
the  Qaco  Saaaw  Aocau  Controi 
Sarvm  SoMion  Engbia.  (^aoo  rae- 
ommaadad  dial  ouatomars  wNh 
aonrkaoanlraetsoblainthaigi- 
dataasatagteCtacoftoduetOp- 
grada  Tool  m  by  confaeting  its 
TachniBal  Anatatmea  Cantar. 

Oracle  A|^  Moves 
Offer  for  Peopldoft 

Orada  Corp.  oB  Thmdiy  (lad  an- 
ottiar  artanaion  in  Ms  hoade  S7.7 
bMan  bid  to  acquira  hoptaSoft 
IbCm  ttiis  dma  pushing  (ha  daad* 
ino  ahaad  two  waofit  to  SapL  10. 
Orada  said  M  now  hat  21.7  mWon 
tandarad  aharaa  •  6%  o(  Paopla- 
Sefft  outatandfog  tetaL 

UJt.  Agency  Adopts 
Sun’s  Java  Desktop 

ThaUJL'tNatimdHadthSar- 
viea  laat  waak  add  I  purdiaaad 
S.OOO  irtnaii  for  Sun  Mcraaya- 
tana  taB.'t  Jaw  OatUap  SyatM 
»  aa  dtaraadw  to  WImtawa.  Tha 
NHSiaapandtagSObHontoup- 
gradattan'hilraatnictura.lilw- 
gan  aaduaitag  tha  uaa  of  Son’s 
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HOT  TECHNOLOGY  TRENDS,  NEW  PRODUCT 
NEWS  AND  INDUSTRY  OOSSIP  BY  MARK  HALL 


Wiws  to  Steal... 

. . .  critical  corporate  infonnation.  So  warns  Gartner  Inc. 
in  a  report  detailing  how  data  crooks  can  use  port¬ 
able  music  players  like  Apple  Computer  Inc.’s  iPod 
to  rob  you  blind  [Quicklink  47983].  Vladimir  Cher- 
navsky,  CEO  of  AdvancedForce  InfoSecurity  Inc,  in 
San  Ramon,  Calif.,  amplifies  that  concern  by  includ¬ 
ing  Bluetooth  devices,  floppy  disks,  CDs  and  virtu¬ 


ally  anything  that  can  store 
data  and  use  a  pair  of  legs  to 


I  runs  S3S  for  a  single  license, 
but  that  price  can  fall  to  less 


leave  the  premises.  “Someone  than  S7  when  you  get  1,000  or 
carryir^  a  hard  drive  out  of  a  more  licenses.  Think  of  it  as  a 


building  would  be  suspicious, 
but  carrying  an  iPod  is  not,” 
he  observes.  “Now  everyone 
is  potentially  James  Bond."  As 
you  would  expect,  Chemav- 
sky  has  a  solution:  E>evice* 
Lock.  His  company  has  the 
exclusive  North  American 
rights  to  sell  the  sofhvare 
from  its  Russian  authors  at 
Smaitline  Inc.  DeviceLock 
is  designed  to  prevent  data 
from  being  written  to  any 
device  type.  But  it’s  flexible  ; 
enoi^  t^t  you  can.  for  ex-  ' 
ample,  permit  Universal  Seri¬ 
al  Bus  keyboards  to  be  used, 
but  not  USB  storage  systems. 

A  new  release  coming  in 
November  will  let  you  cen¬ 
trally  the  flies  that  you  do 
permit  to  be  written  to  a  mo¬ 
bile  device,  so  you’ll  know 
whether  an  executive  is  up¬ 
dating  his  Bluetooth  unit’s 
contact  list  or  downloading 
your  entire  customer  flle.  It 


little  something  from  Russia 
with  love. 

KM  Spam  Before .. . 


your  network. 

That’s  the 
wisdom  from 
Scott  Petty, 
chief  technol¬ 
ogy  officer 
and  founder 
ofPostinJ 
Inc.  in  Red¬ 
wood  City, 
Calif.  He 
claims  that  his  service  stops 
50%  of  the  400  million 
e-mails  destined  for  his  cus¬ 
tomers’  networks  every  day, 
because  they’re  ^>am.  “If 
you’re  blockiog  them  at  your 
gateway,  it’s  much  more  ex¬ 
pensive,"  he  says.  He  argues 
that  service  providers  such 
as  Postini  are  more  efficient 
because  they  can  see  “the 


SMTP  conversation"  on  the 
Internet  and  quickly  identify 
and  remove  spam-  and  virus- 
laden  messages.  Petty  says 
privately  held  Postini  is  prof¬ 
itable.  growing  at  close  to 
180%  this  year  and  looking  to 
acquire  companies  in  what  be 
expects  will  be  a  rapidly  con¬ 
solidating  market  over  the 
next  year. 

Event'Driven  Data 
Gets  Wished .. . 

. . .  to  (MTS' acnens  wtih  publsh- 
and-aubacriba  tool  KnowNow  3 
from  KnowNow  Inc.  in  Sun¬ 
nyvale,  Calif.,  eliminates  the 
need  for  end  users  to  request 
reports  on  data  generated 
across  the  HTTP-based  net¬ 
works.  The  server  software 
“dual  posts"  requested  data 
and  immediately  directs  it  to 
a  user’s  screen  or  to  an  appli¬ 
cation.  For  example,  upon 
completing  an  online  form,  a 
Web  %isitor  can  be  instantly 
sent  to  an  available  customer 
service  agent,  or  sales  data 
entered  in  an  ERP  system  can 
be  immediately  sent  to  a  sales 
executive’s  desktop  spread¬ 
sheet  Version  3.  which  ships 
at  the  end  of  next  month,  in¬ 
cludes  a  new  module  for  Mi¬ 
crosoft  SharePotnt  systems, 
more  granular  event  filtering 
and  added  database  support. 
Pricii^  starts  at  $15,000. 

Tech  Support 
GoesRmwIe... 

. . .  wM  a  haiM  aantaa  from 
CKrbi  Systama  he.  GoToAssist 
6.0.  which  is  set  for  release  on 
Sept  14,  lets  your  technical 
service  reps  remotely  view 
and  control  the  PCs  of  end 
users  who  are  baffled  by  the 
behavior  of  their  Windows 
machines.  The  upgrade  in¬ 
cludes  nifty  improvements 
such  as  giving  technicians  the 
ability  to  remotely  reboot  a 
machine  and  then  retain  the 


link  to  the  user’s  PC  after  the 
restan  in  case  the  problem 
persists.  There’s  no  need  for 
the  troubled  end  user  to  have 
client  software,  so  customer 
support  can  be  handled  on  an 
ad  hoc  basis.  Each  session  is 
12B-bit  encrypted  for  secure 
communications.  The  service 
works  for  both  desktops  aiKl 
servers,  and  Citrix  is  planning 
Linux  and  Unix  support  in 
the  coming  months.  Pricing 
starts  at  $325  per  month  per 
tech-support  agent,  with  a 
one-time  start-up  charge  of 
$700.  There  are  no  session 
fees  or  end-user  time  limits 
for  the  GoToAssist  service. 

Forget  Centralized 
Otrectoiy  Efforts... 


There  are 
lust  too 
many 

sources  with 
too  many 
methods  and 
schemas 
scattered 
throughout 
your  compa¬ 
ny  to  get  under  control  So. 
should  you  just  give  up? 
Maybe  not  Michel  Prompt 
CEO  of  Radiant  Logic  Inc.  in 
Novato,  Calif,  claims  that  a 
virtual  directory  is  the  solu* 
tioa  “TVying  to  centralke 
and  create  the  Qberdirectory 
has  been  a  big  failure."'he 
says.  “But  virtualization 
works."  In  effect,  your  users 
query  the  virtual  directory, 
which  handles  the  protocol 
and  other  differences  amoi^ 
the  various  directories  linked 
to  it  Radiant  One  4.0,  which 
ships  this  week,  can  even  vir¬ 
tualize  Web  services.  By  Oc¬ 
tober.  when  44  ships.  Radiant 
will  release  federated  securi¬ 
ty  services  that  will  authenti¬ 
cate  users  and  their  rights 
across  multiple  direaories. 
Expect  to  pay  about  $50,000 
to  sidestep  nonvirtual  doom. 
04W96 


There  is  no  one, 
single  solution 
to  security. 


But  there  is  one 
source  for  ongoing 
security  guidance. 


Go  to  the  Security  Guidance  Center  at  inicrosoft.com/security/IT 
to  see  the  newest  additions,  inciuding: 

Mkrasoft  Windows*  XP  Service  l>>ck  2  Download  and  evaluate  the  latest  updates  for 
increased  system  control  ar>d  proactive  protection  against  security  threats. 

Free  Online  Self  Assessment  Complete  this  free,  Web-based  self  assessment  to  help 
you  evaluate  your  orgacuzation  s  security  practices,  and  indentify  areas  for  improvement. 


Free  Updetes  end  E-rneM  Alerts  Stay  on  top  of  the  latest  security  issues  quickly  and 
I  easily  by  signing  up  for  free  Microsoft  Security  Communications. 

Free  Security  Tools  React  more  effectively  to  potential  security  threats.  Take  advantage  of 

free  tools  and  technologies  like  the  Microsoft  Baseline  Security  Analyzer  and  Software  Update  Services. 

Visit  the  Security  Guidance  Center  regularly  for  the  latest  security  developments.  It  s  continually  updated 
so  you  can  find  the  tools  and  training  you  need  to  help  better  protect  your  company,  all  at  one  centralized 
resource.  For  proartive  protection  and  ongoing  guidance,  visit  mkrosoftcom/security/IT  today. 
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HP’s  Virus  Throttler 
Service  Is  Shelved 

Sh  months  after  unveiling  tech¬ 
nology  designed  to  chote  oH 
the  spread  of  viruses.  Hewlett* 
Packard  Co.  is  shelving  the  proj¬ 
ect.  The  company  won't  be  re¬ 
leasing  a  security  service  called 
Virus  Throttler  because  it  reguires 
operating  system  changes  that 
are  incompatible  with  Windows. 
HP  said  last  week. 

Cisco  to  Purchase 
P-CubeforS200M 

Cisco  Systems  Inc.  said  last  week 
rt  has  agreed  to  acquire  Sunny¬ 
vale.  Caltf  -based  software  devel¬ 
oper  P-Cube  Inc.  in  a  deal  that 
Cisco  valued  at  $200  million. 

Cisco  plans  to  continue  selling 
P-Cube's  software,  which  helps 
service  providers  analyze  and 
control  network  traffic,  as  stand¬ 
alone  products.  The  company  said 
it  will  also  work  on  incorporating 
the  technology  into  rts  own  hard¬ 
ware  and  software. 

II.S.  Forest  Service 
To  Cut  500  IT  Jobs 

The  U.S.  Oeparlment  of  Agricul¬ 
ture  Forest  Service  is  cutting  the 
egurvalent  of  500  tufl-time  fT  fobs 
in  a  reorganization  of  rts  IT  de¬ 
partment  Forest  Service  employ¬ 
ees  won  a  competitive  sourcing 
csnpact  to  manage  the  fT  depart¬ 
ment.  The  workers  had  bid  against 
undisclosed  private  companies  for 
the  contract,  which  is  valued  at 
S295  million.  The  Forest  Service 
eapects  to  save  approximately 
S100  million  over  the  five  years 
the  agreement  is  m  place. 

Short  Takes 

The  *  signed 

a  S35  miHion  contract  with 
-MtPiCA'hf  fora  Web-based 
human  resources  application. . . . 
WCPOSO*' said  it  has  fin¬ 
ished  work  on  Microsoft  Opera- 
tiorks  Manager  2005.  a  maior  up¬ 
date  to  rts  MOM  2000  perfor¬ 
mance  management  software. 


SEC  Deadline  Delay 
Signals  Sarb-Ox  Relief 


should  help  c;iso 
ir.insition  to  iil-w 
ivporiinu  ni;ind;ilos 


Thj  I  -  Nil  1  KiniNand 
fwh.in^ct.ummiv 
Ni*iii  i.iNt  Uivk  .m- 
ni'uiKvd  ih.»  it  will 
.m  .iccvleratcd  jvri- 
•  kI  lor  .miui.d  reports  —  j  move 
e\jveled  to  help  hijj  ^-ompjnieN 
ir.tnMUon  more  e.isilv  to  yeur- 
end  reporting  revjuiremeniN 
under  the  S.irKiiieN-(l\lev  .Act. 

In  JOiO.  the  •'I  t!  mude  j 
eh.inge  to  the  VeiiritieN  f  \- 
vh.inge  Vt  ih.it  Nhori- 

eneJ  the  .mmunt  <>1  time  e«»m- 
p.iniev  Would  luve  lo  tile  iheir 
cju.irier)v  .ind  .mnuiil  reports 
liter  the  end  of  .i  fise.il  jvriod. 

I'he  niing  requirements  for 
entiipjiiies  with  J  market  e.ipi- 
t.ili/aiion  of  S75  mtllion  or 
more  shr.ink  from  ‘M*  days 
VMihin  the  eK>se  of.i  husiiiess 
eyele  to  75  days  this  year,  ti 
was  scheduled  to  be  cut  fomt 
d.ivs  ne\l  ycjr. 

Hut  vourees  eli>M  to  the  is¬ 
sue  siiiJiheSht'  was  being 


What  happened:  j.  a 
What  ft  means; 

fi-  ‘  ■ 

Why  it  matters; 


pressured  by  big  accounting 
linns  to  maintain  the  75-djy  fil¬ 
ing  requirement  f«n  one  more 
ye.ir  to  help  big  ei'mpank-s 
m.vke  their  fifNi  tr.msiiion  ii»a 
year-end  sarbanes-iTvtey  dead¬ 
line  L  nder  the  Sh:  propositi 
issiii  d  hist  week,  the  current 
de.idlme  for  so-s-alled  aeeel- 
eraied  filers  would  remain  at  75 
da\N  for  .mnual  reports  and  M) 
day  s  jor  quarterly  reports.  The 
.leeelcraled-filing  phase-in  pe¬ 
riod  would  resume  for  reports 
filed  for  ris«,-iil  years  ending  «*n 
or  after  Dec.  15.dt>n5.  Stx:  reg¬ 
istrants  have  -M)  d.!)  s  to  e«»in- 
iiictn  on  the  prvip»>sal. 


Regulatoiy  Demands  Put  Spotlight 
On  Asset  Management  Practices 


Bresler  &  Rarer  (nc  has  found 
itself  placing  8  iol  mote  emphasis 
on  IT  asset  managemeni  prac¬ 
tices  as  a  result  of  pressing  regu 
(alot>  compliance  demands 

Earlier  this  year  the  Rockville. 
Md  -based  real  esJate  investment 
trust  installed  an  industry-specif- 
c  accounting  software  package 
that's  used  by  its  vanous  pioper- 
ty  management  companies 
Die  package  was  supplied  by 
Beaverton.  Ore  -based  Timber- 
line  Sofrware  Corp-  said  Enc 
Clarke.  Bresler  &  Reiner's  inter 
nal  audit  director. 

To  help  meet  regulatory  re¬ 
quirements  such  as  the  Sat- 


banes-Oxley  Act,  "we  want  lo 
make  sure  financial  information 
on  our  software  and  servers  is 
adequately  safeguarded  and  that 
we  have  an  adequate  disaster 
recovery  plan  m  place  for  each 
site."  Clarke  said 

Indeed,  regulatory  require¬ 
ments  are  forcing  IT  managers  to 
irack  then  IT  assels  more  closely, 
said  Jane  Disbmw  an  analysi  al 
Gartner  Inc  'Ifyou  don't  know 
where  all  your  laolops  and  soft¬ 
ware  are  located,  how  can  you 
tell  regulalory  bodies  that  cus¬ 
tomer  informalion  is  being  kepi 
pnvaie?"  she  said. 

17  asset  managemeni  con¬ 


Under  SixTion  4f)4  of  the 
S.irb;mcsXTNlcy  .-Vt  of  201)’, 
liirge  ainipanit-s  miiM  doeu- 
ment  in  their  annual  reports 
the  nnanetalanj  IT  cv'ijirvib 
they  have  in  place  f*>r  fiscal 
years  that  end  on  or  afier 
Nov.  15.  2004. 

Big  Four  Weigh  In 

The  nation's  Big  Four  aecouni- 
ing  firms  recently  asked  the 
SFC  ’'thai  they  not  push  [the 
filing  requirement)  UKH)  days, 
.it  least  for  the  moment,  to 
help  companies  de.il  with 
these  current  pressures.'  siiid 
Marios  Damianides.  interna- 


cerns  are  lust  making  their  way 
onto  Zebra  Technologies  Corp.'s 
regulalory  radar  screen.  IT  asset 
managemeni  “is  somelhing  lhat 
IS  on  our  Sarb-Ox  Its!  a  month 
Of  so  into  the  future."  said  Todd 
Naughlon.  vice  president  and 
controller  at  the  pnnl  compo¬ 
nents  supplier  in  Vernon  Hills,  til 
Sadtanes -Oxley  is  having  a 
two-pronged  affect  on  IT  asset 
management  practices  Under 
Section  404  of  the  act.  compa¬ 
nies  are  required  lo  attest  to  the 
internal  controls  that  are  used  for 
financial  reporting.  These  mdude 
IT-relaled  controls  thal  firms  have 
in  place  lo  effectively  track  and 
monitor  hardware,  plus  software 
used  to  support  finanoai  report¬ 
ing.  Companies  are  also  required 
under  Sarbanes-Oxley  to  dis- 


lional  president  of  the  Infor¬ 
mation  Systems  Audit  and 
[  Control  AssiK'iation  and  the 
Inlormatum  Technology  Gov¬ 
ernance  Institute,  both  in 
i  Rolling  Me.idows.  111. 

For  the  past  few  weeks,  ru- 
mors  have  been  swirling  that 
I  the  SEC  might  extend  the 
j  deadline  for  public  companies 
to  meet  Section  404  require- 
I  menis.  But  sources  said  those 
;  rumors  are  unfounded  and 
!  were  based  on  misinterpreta¬ 
tions  of  recent  comments 
made  by  SEC  officials:  Section 
404  enforcement  delays  aren’t 
anticipated.  .An  SEC  spt»kes- 
man  declined  to  comment. 

iThe  SEC  hasj  already 
postponed  Section  404  dead¬ 
lines  tw  ice.  If  they  keep  back¬ 
ing  dow  n  and  do  it  a  third 
time,  people  are  going  to  ques¬ 
tion  their  credibility."  said  Tim 
Welu.  CEO  of  Paisley  Con.suli- 
ing  Inc.,  a  cv*mpany  in  Cokato. 
Minn.,  that  develops  software 
for  managingaudiisof  both  IT 
and  financl.al  controls. 

"I  think  they’d  only  e.xiend 
the  accelerated  filing  period." 
said  Eric  Clarke,  internal  audit 
direv'torat  Bresler  Cx  Reiner 
Ine..  a  Rockville.  Md. -based 
real  esiaie  investment  trust. 

“If  they  keep  extending  the 
deadline  for  meeting  Section 
404  requirements  it  vvon'l  do 
anything  for  investor  confi¬ 
dence."  O  49101 


close  to  regulators  all  maienal 
financial  exposures  they  have, 
mcludtno  IT  equipment  leases 
and  licensing  agreements,  which 
have  to  be  tracked  closely. 

A  soon-lo-be-pubitshed  sur¬ 
vey  of  220  IT  decision-makers 
by  Boston-based  AMR  Research 
Inc.  found  that  companies  that 
consider  regulatory  compliance 
the  top  business  issue  affecting 
Iheir  security  spending  cite  the 
need  to  invest  in  auditing  and 
asset-tracking  tools  as  their 
No  1  security  budget  priority. 

-  Thomas  Hoffman 
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HPsVnjsThrottier 
Service  is  Shelved 

8h  months  aftsr  unvsiing  toch- 
noiotnr  dtaignod  to  diolis  off 
lhta(iriodofviruaoa,How(att- 
Pockinf  Ce.tsstaMnetheprof'  | 
set  The  company  won't  bo  rt-  | 
loosing  a  aocwitysorvteocoRsd  I 
WrwTfirottlorbocansoilroquires  I 
oporahnosystomehonoosthat  j 
art  incompaiiblo  wKh  Windows,  j 
HPsaMlastwooiL 


Cisco  to  Purchase 
P-CubeforS200M 

Cisco  Systems  Inc.  soM  lost  woeh 
it  has  agrood  to  acguiro  Sunnr 

volt.  CaW.-hosod  soflwaro  dovtP 
opor  P-Cubo  Inc.  in  a  doai  that 
Cim  vahiod  at  S200  ifWIon. 
CiMO  plans  to  continuo  saMng 
P-Cubo's  soffwart,  srfiich  fwips 
sorvico  protWars  analyzt  and 
control  notwofh  traffic,  as  stand- 
alont  products.  The  company  said 
It  wM  also  work  on  ineorpor^ing 
tho  technology  Mo  its  own  hard¬ 
ware  and  soffwart. 


U.S.  Forest  Service 
To  Cut  500  fT  Jobs 

ThtU.S.DaptrtmantefAgricul' 
tort  Forest  Sanrict  is  cutUng  the 
tgufvalinl  of  500  ful-tinit  rr  lobs 
in  a  rterganiiatien  of  its  fT  do- 
partmenLFonslStrvictamploy- 
aaa  won  a  compotWvs  sourcing 
contract  to  manage  tha  IT  dspari- 
mant  Tha  dterhars  had  bid  against 
undtoctond  prrvoto  companias  for 
tho  coatraet,  wMeh  la  tekjad  at 
$295  mMan.  Tito  ForasI  Sartfet 
npocla  to  itea  appmMatoly 
$100  mMen  Otar  tha  Bus  years 
ths  agroanwnt  is  in  plact. 


Short  Takes 

The  (U.  POSTAL  SERVKCiivwd 
a  $55  mMton  contract  wM)  SAP 
*B«OCAWC.feraMtobbaaad 

hwaiaw  reaaureaa  ippBration _  | 

MCBOSOFTCONP.atedllilMfirr- 
iahod  work  an  IBcfOioft  Opera- 
Bam  Managar  2005,  a  mWer  up¬ 
date  to  Ba  MOM  2000  partor- 
wancamanagamantsoftwari.  I 


SEC  Deadline  Delay 
Signals  Sarb-Ox  Relief 


Whdl 

Whv  ii  . 


Should  help  ease 
transirion  to  nesv 
reporting  mandates 


SV  THOMAS  HOFFMAN 

HE  U.S.  SECURITIES  And 
Exchange  Commis¬ 
sion  last  week  an¬ 
nounced  that  it  will 
delay  an  accelerated  Hliog  peri¬ 
od  for  annual  reports  —  a  move 
expected  to  help  big  companies 
transition  more  easil)'  to  year- 
end  reporting  requirements 
under  the  Sarbanes-Oxley  Act 
In  2002.  the  SEC  made  a 
change  to  the  Securities  Ex¬ 
change  Act  of  1934  that  short¬ 
ened  the  amount  of  time  com¬ 
panies  would  have  to  file  their 
quarterly  and  annual  reports 
after  the  end  of  a  fiscal  period. 

The  filing  requirements  for 
companies  with  a  market  capi¬ 
talization  of  $75  million  or 
more  shrank  from  90  days 
within  the  close  of  a  business 
cycle  to  75  days  this  year.  It 
was  scheduled  to  be  cut  to  60 
days  next  year. 

But  sources  close  to  the  is¬ 
sue  said  the  SEC  was  being 


pressured  by  big  accounting 
firms  to  maintain  the  75*day  fil¬ 
ing  requirement  for  one  more 
year  to  help  big  companies 
make  their  first  transition  to  a 
year-end  Sarbanes-Oxley  dead¬ 
line.  Under  the  SEC  proposal 
issued  last  week,  the  current 
deadline  for  so-called  accel¬ 
erated  filers  would  remain  at  75 
days  for  annual  reports  and  40 
days  for  quarterlj'  reports.  The 
accelerated-filing  phase-in  pe¬ 
riod  would  resume  for  reports 
filed  for  fiscal  years  ending  on 
or  after  Dec.  15. 2005.  SEC  reg¬ 
istrants  have  30  days  to  com¬ 
ment  on  the  proposal. 


Under  Section  404  of  the 
Sarbanes-Oxley  Act  of 2002, 
large  companies  must  docu¬ 
ment  in  their  annual  reports 
the  financial  and  IT  controls 
they  have  in  pla(%  for  fiscal 
years  that  end  on  or  after 
Nov.  15. 2004. 

Big  Four  We^  In 

The  nation’s  Big  Four  account¬ 
ing  firms  recently  asked  the 
SEC  ’’that  they  not  push  [the 
filing  requirement]  to  60  days, 
at  least  for  the  moment,  to 
help  companies  deal  with 
these  current  pressures,"  said 
Marios  Damianides.  interna¬ 


tional  president  of  the  Infor¬ 
mation  Systems  Audit  and 
Control  Association  and  the 
Information  Technolc^  Gov¬ 
ernance  Institute,  both  in 
Rolling  Meadows.  111. 

For  the  past  few  weeks,  ru¬ 
mors  have  been  swirling  that 
the  SEC  might  extend  the 
deadline  for  public  companies 
to  meet  Section  404  require¬ 
ments.  But  sources  said  th<»e 
rumors  are  unfounded  and 
were  based  on  misinierpreta- 
rions  of  recent  comments 
made  by  SEC  officiais;  Section 
404  enforcement  delays  aren't 
anticipated.  An  SEC  spokes¬ 
man  declined  to  comment. 

ITbe  SEC  has]  already 
postponed  Section  404  dead¬ 
lines  twice.  If  they  keep  back¬ 
ing  down  and  do  it  a  third 
time,  people  are  going  to  ques¬ 
tion  their  credibility."  said  Tim 
Welu.  CEO  of  Paisley  Consult¬ 
ing  Inc.,  a  company  in  Cc^to. 
Minn.,  that  develops  software 
for  managing  audits  of  both  IT 
and  financial  controls. 

“I  think  they'd  only  extend 
the  accelerated  filing  period." 
said  Eric  Clarke,  internal  audit 
director  at  BresJer  &  Reiner 
Inc.,  a  Rockville.  Md.-based 
real  estate  investment  trust. 

"If  they  keep  extending  the 
deadline  for  meeting  Section 
404  requirements,  it  won't  do 
anything  for  investor  confi- 
deiKe."  O  48101 


Regulatory  Demands  Put  Spotlight 
On  Asset  Management  Practices 


Bresler  &  Reiner  Inc.  has  found 
Itself  placing  a  lot  mom  emphasis 
on  IT  asset  management  prac¬ 
tices  as  a  resuB  of  pressing  regu¬ 
latory  compliance  demands. 

Ealer  tfi6  year,  the  Rodwide. 
Md-based  reel  estate  investment 
trust  instaled  an  Mustry-speoi- 
ic  accounbng  software  package 
that's  used  by  Its  various  proper¬ 
ty  management  companies 
The  package  was  supplied  by 
Beaverton.  Ore.-based  Timber- 
Itne  Software  Cotp..  said  Eric 
Qarka  Bresler  &  Reiner's  mter- 
nafaudldlrBclor. 

To  hefp  meet  regiiatory  le- 
guiremenls  such  as  the  Sv* 


banes-Oidey  Act.  ’we  want  to 
sue  financial  ntormation 
on  our  softMore  and  servers  IS 
adequately  safeguarded  and  that 
we  have  an  adequate  disaster 
recovery  plan  in  place  for  each 
site.*  CM  said. 

fndeedreguiatoryreguire- 
mento  are  forcing  IT  manageis  to 
track  thee  fT  assets  more  dosefy. 
said  Jane  Disbrow,  an  analyst  at 
Gartner  he.  *lf  you  don't  loKiw 
where  afl  your  laptops  and  soft¬ 
ware  are  located,  how  can  you 
telreguiatoryboiBesthatcus- 
tonw  hlormation  is  being  kept 
priteteT*  she  said. 

IT  asset  management  con¬ 


cerns  are  iusl  making  their  way 
onto  Zebra  Technologies  Corp.'$ 
regulatory  radar  screen.  IT  asset 
management  "is  something  that 
is  on  our  SartKh  let  a  month 
or  so  inlo  the  future,”  said  Todd 
Reughlon.  vice  president  end 
controller  at  the  prtnf  compo¬ 
nents  supplier  in  Vernon  His.  H. 

Sartanes-Oxley  is  having  a 
tvtoininged  affect  on  FT  asset 
managemerk  practices.  Under 
Section  404  of  the  act  compa¬ 
nies  are  required  to  attest  to  the 
intemal  controls  that  are  used  for 
finandel  reporting.  These  indude 
fT-reialed  oontrois  that  firms  have 
in  place  to  efiacbvefy  track  and 
moniior  hardware,  pkfi  software 
usediDsupportfhandBlrepQfl- 
ing.  Companies  are  also  requred 
under  Sarbanee-Oidey  Id  dis- 


doee  to  regufalots  M  matMal 
financiaf  expoereas  they  have, 
inckiding  IT  equipment  leases 
and  licensing  agreements,  which 
have  to  be  tracked  closely. 

A  soon-toteiwtilshed  sur¬ 
vey  of  220  fT  dedston-fnakers 
by  Boston-based  AMR  Resaoch 
Irta  found  that  companies  that 
consider  regulaloiy  comptence 
the  top  buahess  issue  affechng 
their  security  spending  dte  the 
need  to  hvesi  in  awSthg  and 
asset-tracking  toofs  as  their 
No.  1  security  budget  priority. 

-  ThomasH^fman 
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Legacy  Army  Payroll  Systems 
Buckle  Under  Weight  of  War 


GAO  audit  finds  that  95%  of 348  active 
rescnists  have  had  problems  with  pay 


BVMARC  L.  SONOINI 

The  war  in  Iraq  has  helped 
push  antiquated  U.S.  Army 
payroll  systems  past  their 
breaking  point,  leading  to  wide¬ 
spread  problems  for  reservists, 
according  to  a  U.S.  Govern¬ 
ment  Accountability  Office 
report  issued  this  month. 

So  severe  are  the  problems 
caused  by  the  aging,  stand¬ 
alone  Cobol-based  mainframe 
systems  that  the  GAO  audit 
f^d  that  95%  of 348  mobi¬ 
lized  reserve  soldiers  had  at 
least  one  payroll  problem.  The 
glitches  included  both  over¬ 
payments  and  underpayments, 
as  well  as  delayed  disburse¬ 
ments.  Some  troops  had  nu¬ 
merous  payroll  problems,  and 
it  took  more  than  a  year  to 
correct  some  of  them. 

Both  the  system  itself, 
called  the  Defense  Joint  Mili¬ 
tary  Pay  System-Reserve 
Component  {DJMS-RO.  and 
the  attendant  human  process¬ 
es  are  “so  error-prone,  cum¬ 
bersome  and  coraplex“  that 
the  soldiers  affected  can't  be 
assured  of  timely  and  accurate 
payment  for  duty  served,  said 
the  GAO  study.  The  result  has 
been  a  “profound  adverse  af¬ 
fect  on  individual  soldiers  and 
their  families,"  it  said. 

System  Limitatians 

One  major  weakness  stems 
from  a  lack  of  integration  be¬ 
tween  the  DJMS-RC  and  relat¬ 
ed  U.S.  Army  personnel  appli¬ 
cations.  The  payment  system 
was  also  hampered  by  proc¬ 
essing  limitations,  requiring 
“significant  manual  effort"  to 
make  up  for  the  shortcomings. 

The  GAO  cited  one  case  in 
which  a  soldier  received  an 
overpayment  of  S24.000  when 
a  revocation  of  his  mobiliza¬ 
tion  status  wasn't  automatical¬ 
ly  reported  to  the  payroll  sys¬ 
tem  due  to  the  gaps  between 
the  personnel  system  and  the 


DJMS-RC.  And  because  of  the 
DJMS-RC's  computational 
limits,  accounting  for  vari¬ 
ables  such  as  hardship  duty  re¬ 
quires  manual  input. 

The  Defense  Finance  and 
Accounting  Service  (DFAS), 
which  oversees  the  DJMS-RC. 
has  acknowledged  that  the 
system  is  “aging,  unrespon¬ 
sive,  fragile  and  a  major  im¬ 
pediment  to  efficient  and 
high-quality  customer  ser¬ 
vice,"  according  to  the  GAO. 

Increased  Risk  of  EiTor 

A  DFAS  spokesman  said  the 
DJMS-RC's  limitations  were 
exacerbated  by  the  war  in 
Iraq:  prior  to  the  war,  the  sys¬ 
tem  primarily  handled  pay  for 
drilling  exercises  and  not  for 
the  12-  or  IS-montb  deploy- 


The  Transportation  Security 
Administration  last  week  an¬ 
nounced  a  series  of  pilot  tests 
of  IT-based  programs  to  bol¬ 
ster  airport  security.  And  TSA 
Administrator  David  M.  Stone 
said  the  agency  is  only  "days 
or  weeks"  away  from  deploy¬ 
ing  a  revamped  version  of  its 
controversial  passenger- 
screening  system. 

The  TSA  selected  two  addi¬ 
tional  airports  —  the  Norman 
Y.  Mineta  San  Jose  Interna¬ 
tional  Airport  and  the  Helena 
Regional  Airpon  in  Montana 
—  to  participate  in  its  Access 
Cont^  pilot  program.  That 
brings  the  total  number  of  air¬ 
ports  in  the  program,  which 
began  in  April,  to  JO. 

The  pilot  program  will  test 
a  wide  range  of  technologies, 
including  radio  frequet>cy 
identification  (RFID)  systems, 
antipiggybacking  systems,  ad- 


mcnis  no)A'  lakti^  place  in  the 
Middle  East.  “Anytime  a  sys¬ 
tem  requires  human  interven¬ 
tion.  you  increase  the  risk." 
the  spokesman  said. 

Acknowle<%ing  the  system's 
limitations,  the  Defense  De¬ 
partment  has  launched  a  train¬ 
ing  program  for  support  per¬ 
sonnel  and  is  reding  out  an  im¬ 
proved  payroll  system  based 
on  PeopleSoft  lnc.’s  PeopIcSoff 
Enterprise,  which  will  begin  (o 
go  live  next  spring. 

Once  in  place,  the  applica¬ 
tion  will  integrate  the  pay 
processes  for  reservists  and 
active  Army  personnel  and 
end  the  need  for  manual  work¬ 
arounds  while  improving  sta¬ 
bility  and  eliminating  many  of 
the  problems  identified  by  the 
GAO,  said  the  spokesman. 

That  system  will  later  be 
phased  out  in  favor  of  the  larg¬ 
er  Defense  Integrated  Military 
Human  Resources  Systems 


vanced  video  surveillance 
technology  and  various  bio¬ 
metric  systems.  The  goal  of 
the  tests,  which  will  run 
through  the  end  of  the  year,  is 
to  identify  technologies  that 
allow  only  authorized  airpon 
personnel  and  vehicles  to  ac¬ 
cess  secure  areas  of  an  airport. 

The  announcement  was 
welcomed  by  members  of 
Congress,  who  e.xpresscd  frus¬ 
tration  with  the  pace  of  tech- 


(DIMHRS).  Mrhich  was  first 
announced  in  August  2001  and 
is  also  built  on  PeopleSoft 
((^uickUnka4940l.  Eventually, 
the  human  resources  and  pay¬ 
roll  applications  will  function 
as  a  single  integrated  system, 
although  progress  on  the 
DIMHRS  implementation  has 
been  slow  IQuickLink  41815). 

While  “significant  design 
work  has  been  completed"  on 
the  DIMHRS  project,  exten¬ 
sive  testing  will  be  required 
before  implementation  can  be- 


nology  efforts  to  support 
homeland  security.  At  a  hear¬ 
ing  of  the  House  Transporta¬ 
tion  and  Infrastructure  avia¬ 
tion  subcommittee  last  week, 
lawmakers  urged  Stone  not  to 
let  a  desire  to  find  the  perfect 
technology  delay  the  deplo)  - 
mem  of  something  that  is 
“good  enough"  for  now. 

Some  lawmakers  and  airline 
industry  executives  argued 
that  TSA  programs  have  been 
hindered  by  a 
lack  of  standards 
for  biometric 
technologies  and 
a  govemmeoi  bu¬ 
reaucracy  that 
remains  inca¬ 
pable  of  sharing 
information  and 
setting  priorities 
three  years  after 
the  Sept.  U.  2001. 
terrorist  attacks. 

“Many  airports 
are  willing  to  de¬ 


gin.  said  Norma  Sc.  Claire,  a 
DOD  director  of  joint  require¬ 
ments  and  integration.  De¬ 
ployment  to  the  Army,  the 
first  branch  to  go  online,  will 
start  in  the  first  quarter  of 
2006,  she  said.  Sl  Claire  added 
that  while  the  DOD  wants  the 
software  to  be  as  "vanilla"  as 
possible,  “sometimes  there  are 
mission  requirements  chat  are 
not  supponed  by  the  commer¬ 
cial  product,  and  a  few  mod¬ 
ifications  will  be  needed." 
049106 


ploy  biometric  technologies 
but  are  reluctant  to  <io  su  until 
the  Depanment  of  Homeland 
Security  issues  guidance  and 
makes  clear  what  types  of  bio¬ 
metric  systems  will  meet  its 
staiMiards  in  the  future."  said 
Rep,  John  Mica  (R-Fla.).  chair¬ 
man  of  the  House  Aviation 
subcommittee.  "Someone  at 
DHS  just  needs  to  make  a  de¬ 
cision.  and  the  rest  will  fall 
into  place." 

CapL  Ehiane  Woerth.  presi¬ 
dent  of  the  Air  Line  Pilots  As¬ 
sociation.  said  that  when  his 
organization  began  wotking 
with  the  rr  industry  and  the 
government  to  establish  a  bio¬ 
metric  standard,  it  expected 
the  effort  to  take  about  six 
months. 

“Every  airline  employee 
[had  his]  background  checked 
and  was  fingerprinted  three 
years  ago."  said  Woerth. 

I  "Three  years  later,  we  don't 
'  have  anything.  Three  years 
j  later,  we're  told  we  m^t 
j  have  a  pilot  program.  Thai’s 
I  unacceptable."  O  49109 
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Cost  Pressures 
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!  Participating  Banks 


increase  ol  ir'V  a  year. '  (.iarcia 
said.  "There's  a  very  concert¬ 
ed  elfort  in  the  banking  indus¬ 
try  to  got  a  better  handle  on 
risk  management  spending  at 
the  operational  level  " 
t.harles  Wollmcn.  manag¬ 
ing  executive  director  of  the 
bSTC's  business  cimtiniiiiv 
standing  cvmmittee,  said  there 
were  several  revelations  from 
the  project,  for  example, 
banks  s,}id  thev  are  m<‘rc 
tighilv  integraiing  recovery 
aciiviiics  into  IT  systems  de¬ 
sign  and  inciirporating  tlu  tn 
into  J.n -lo-dav  proJucihm 
practices.  I’ompanies  arc  also 
mov  irie  lowarJ  more  .lutorna- 
Iion  to  rediivc  rv'C»*verv  times 
.ind  eliminate  human  error 
tiarcia  agieed  with  those 
linJings,  ^.1%  mg  banks  .»rc 
quickh  moving  awav  from 


Key  Project  Findings 


•  Banks  are  increasingiy  using  higher  levels  of  automation  to  mini- 
mge  recovery  compteiity. 

■  Market  dynamics  are  denMUMlifig  that  lige  firms  provide  fast^ 

recovery  capabilWes  at  lower  cost  and  with  less  risk. 

■  Ri^ial  firms  are  increasingly  integrating  technology  recovery^ 
capabilities  into  systems. 

•  Banks  are  giving  increased  conskteratkin  to  larg^-yrHie 

and  are  mitigating  risks  leith  muitipie.  wide-area  recovery  locations. 

■  Bar^  are  moving  toward  internal  recovery  centers  and  away 
from  third-party  recovery  centers. 


tape  backups  and  chmising 
Jisk-to-di.sk  mirroring  of  data 
over  wide  geographic  areas. 

Firms  .ilso  said  they're  miw- 
ing  toward  internal  bunker 
data  centers  and  awav  from 
third-p.irtv  recoverv  service 
prov  iders  sueli  as  >un(.iard 
Ifit.i  sv stents  Inv.  and  IBM 


The  companies  all  said  ihcv 
want  to  spread  their  primary 
and  backup  data  centers  far¬ 
ther  apart  tiv  deal  with  region¬ 
al  power  outages.  "H.aving  ihe 
data  centers  five  miles  awav  is 
not  giung  ti'  be  good  enough." 
Wollmen  said.  "Thev  d  like  to 
. .  have  data  centers  farther 


CA  Shareholders  Back 
Management  on  Bonuses 


X  Ionov  paid  to 
tdnnor  oxociitivos 
wyin  t  Iv  revoked 

BV  STACEY  COWL6V 

t.ompuicr  .Associates  Interna' 
tiona)  Inv.  avoided  a  revolt  at 
it'  annual  meeting  last  week, 
when  shareholders  voted 
down  a  proposal  requesting 
that  the  company's  board 
.tJopi  apolicv  of  revoking  cXt 
ccutjve  bonuses  paid  based  on 
financial  results  that  are  later 
rev  iscJ. 

Submitted  by  Amalgamated 
H.ink  I  ongVievv  Collective  In 


to  recoup  those  bonuses.  .\'ot 
doing  so  would  be  “3  serious 
omission."  the  fund  argued. 

.At  the  meeting.  7l>'’n  of  votes 
cast  sided  w  ith  ('A.  which  v>p- 
posed  the  proposal. 

L  nlike  recent  iinancial  scan¬ 
dals  ji  other  companis*s.  i^Vs 
didn't  invi'lve  llcliiiou.s  rev¬ 
enue.  Bather,  to  mwi  the  ana- 
Ksi  and  investor  expectations, 
the  company  prematurely  rec¬ 
ognized  sales  that  should  have 
been  biHiks'd  later.  Fkised  on  tar¬ 
gets  that  later  weren't  met.  LA 
awarded  bonuses  to  lop  sales 
and  management  exei'ulives. 


-Amalgamated  faced  long 
I'Jds  on  w  inning  passage  of 
ihe  proposal.  .A  sm.ill  number 
ol  investors  hold  a  signiJlcant 
percentage  ofL.A's  shares  and 
traditionally  vt*te  with  the 
company 's  management. 

-Al.so  at  l.,A's  meeting,  com¬ 
pany  chairman  Lewis  H.inieri 
said  CA  is  considering  interim 
CKO  Kenneth  (Iron  for  tlu’ 
permanent  spot.  Cron  initially 
said  he  wouldn't  be  a  s'andi- 
daie  in  the  company  's  (ILil 
search. 

t:.A  is  unlikely  to  fill  itsCH) 
vacancy  belorc  it  resolves  the 
continuing  government  inves¬ 
tigation  ol  its  acc«>unting 
fraud,  rhe  company  has  now 
e-xpellcd  every  executive  im¬ 
plicated  in  the  fraud  as  well  as 


apart  and  still  he  able  to  do 
I  the  backups  and  not  lose  data. 
1  It's  more  the  issue  of  you  warn 
your  cake  and  eat  it  too." 

One  idea  floated  by  the 
'  banks  in  conjunction  with 
longer-distancc  replication  of 
data  was  u*  share  physical  dis- 
;  aster  recovery  facilities  in  re- 
I  mote  locations,  which  would 
I  spread  out  the  cost  of  building 
and  running  hot  sites.  "But  the 
,  other  issue  i.s  that  you  have  so 
,  much  at  stake  in  these  large 
data  centers. "  Wollmcn  .said. 

'll  sharing  1  f  increases,  then 
risk  wnuld  be  a  concern.  So 
it's  a  balancing  act  involving 
risk  .md  cost," 

The  FS  re  plans  to  meet 
againonOci.  0  to  further  div- 
cuss  disaster  recovery  initia¬ 
tives  needed  in  the  llnanci.il 
sen  iees  industry .  O  49106 


those  in  top  management  roles 
.«  the  time  criminal  activity 
Was  perpetrated,  but  it  re¬ 
mains  subjevt  to  lines  or  other 
s.inciions  the  gov  ernment  mav 
impose  as  penalty  for  the  cor¬ 
porate  wrongdoing. 

R.inierl  said  he  is  continuing 
to  work  with  the  government 
iiwvard  a  settlement,  tarlier 
this  yvar.  CA  odcred  SlO  mil¬ 
lion  to  settle  the  charges 
against  it.  but  the  company 
h.isn'i  commented  on  the  gov¬ 
ernment's  response  to  the  of¬ 
fer.  Ranieri  also  said  CA  is  re¬ 
viewing  the  issue  of  compen¬ 
sation  paid  to  "certain  offi¬ 
cers"  in  prior  y  ears.  O  49102 

(-'ow’/ey  writes  for  the 
llXi  .Vews  SereiiX'. 


vestment  Fund,  the  pn»posal 
V amc  in  the  wake  ol  an  ae- 
soufiting  scandal  that  devas- 
tJicd  CA's  nianagenK-ni  ranks 
and  forced  the  company  to  re¬ 
state  Sd.  ’  billion  of  revenue 
The  .Amalgamated  B.ink 
fund  cited  the  s«.-jndjl  in  a  reg¬ 
ulatory  filing  supporting  its 
propAisal.  The  fund  ti>ok  issue 
with  the  millions  paid  to  exec¬ 
utives  —  specillcally.  to  for¬ 
mer  Cfo  Sanjay  Kumar,  who 
served  as  f 'A’s  president  and 
chief  operating  officer  at  the 
lime  the  Iraud  •ncurred  —  and 
with  CA's  hoard’s  silence 
about  whether  it  w  ill  attempt 


EMC  Unveils  NAS  Devices 


BY  LUCAS  MEARIAN 

EMt.;  Corp.  today  antM'uneed 
several  network-atuched  stor- 
.ige  t  NAS  I  devices  that  can  be 
Used  for  backing  up  serv  ers 
over  tthernei  using  Internet 
S(-SI-  t.M(,  said  it  has  boosted 
the  periormance  on  its  NAS 
devices  and  impixivcd  ease 
of  use  of  its  graphical  user 
interfaces. 

Tony  .Asaro.  an  analyst  at 
Fnicrprise  Strategy  (iroup 
Inc.,  said  the  rev  i.sed  inter¬ 


faces  make  the  NS  family  of 
NAS  servers  easy  to  manage, 
"even  for  nontechnical  users." 

That  point  wasn’t  k»st  on 
l-orie  Beam,  director  of  IT  at 
law  firm  Smith.  .Anderson. 
Blount.  Dorseii.  Mitchell  & 
lemigan  LLP  in  Raleigh.  N.I.. 
"If  you  have  less  technical 
people,  bur  you  have  a  need 
for  them  to  manage  things.  It 
cenainly  helps.  ’  she  said. 

The  NAS  devices  are  certi¬ 
fied  as  iSCSI  targets  by  Micro¬ 


soft  Corp..  which  allows  ad¬ 
ministrators  to  consolidate 
their  servers  running  Micro¬ 
soft  server  products  and 
Linu.x. 

Asaro  lauded  EMC  for  its 
introduction  of  the  iSCSI  pro¬ 
tocol  on  its  boxes,  noting  that 
NAS  is  better  than  a  storage- 
area  network  for  certain  file¬ 
sharing  applications.  "And 
iSCSI  makes  sense  in  conjunc¬ 
tion  w  ith  NAS  because  they 
both  use  the  same  Ethernet 
infrastructure."  he  said,  "mak¬ 
ing  it  easy  to  install  and  eosi- 
elTective.  C  49100 
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WAN  iechnol(»g>-  beyond  fixed  loca¬ 
tions.  W'ashinyton  State  Ferries  plans 
to  offer  free  Wi-Fi  service  to  passen¬ 
gers  on  ferr>  boats  on  its  high-traffic 
Seattle-area  routes  this  fall. 

IT  director  Jim  Long  said  the  ferr\- 
system  recently  finished  testing  Wi-Fi 
service  on  the  Af  •  V'  A'licfcifaf  on  the 
Port  Tow  nsend-Keystone  route,  which 
connects  the  Olympic  Peninsula  to 
Whidbey  Island,  about  43  miles  north¬ 
west  of  Seattle.  Long  said  he  would 
eventually  like  to  have  all  25  boats  in 
the  fleet  cimneetcd  to  a  wireless  WAN 
that  treats  each  "individual  ferry  biwt 
like  an  office  building”  h«H)kcd  up  to  a 
wired  WAN,  The  fleet  carries  2(>  mil¬ 
lion  passengers  per  year  between  20 
pi>rts  of  call. 

Thafse.xactly  what  Mobilisa  Inc.. 
n»m-  running  a  nearly  yearlong  test  of 
W  i-Fi  tor  Washington  State  Ferries,  is 
delivering,  according  to  Nelson  Lud¬ 
low.  CEO  of  the  Port  Townsend-based 
eompany.  Mobilisa'has  installed  a  wire¬ 
less  W  AN  that  treats  about  400  square 
miles  of  Puget  Sound  "like  one  big 
WAN.”  with  Wi-Fi  service  and  wireless 
connectivity  to  the  Internet  available 
on  ferryboats  operating  anj-where  in 
the  area.  The  Mobilisa  tests  are  being 
funded  by  a  SI  million  grant  from  the 
Federal  Transponation  Administration. 

Coverage  Configuration 

Ludlow  said  Mobilisa  has  installed  a 
two-stage  wireless  system  to  provide 
coverage  to  Washington  State  Ferries. 
The  first  stage  pro\-ides  connectivity 
from  the  shore  to  the  boats,  with  point- 
to-multipoint  wireless  gear  from  Sun¬ 
nyvale.  Calif.-based  Proxim  Corp.  oper¬ 
ating  in  the  unlicensed  5.8-GHz  band. 

Proxim's  Tsunami  MPlla  system 
supports  mobile  roaming,  which  is  key 
to  ensuring  uninterrupted  connertivity 


from  the  bc>ats  as  they  move  from  the 
coverage  area  of  the  fixed-link  wireless 
antennas  installed  on  one  side  of  a 
route  to  antennas  on  the  other  side.  The 
Port  Town-send-Keystone  run  d«x‘sn‘t 
allow  line-of-sight  coverage,  so  it  re¬ 
quired  the  installation  of  two  antennas 
on  the  Keystone  side.  Ludlow  said. 

Mobilisa  also  had  to  develop  its  own 
switching  algorithms  for  the  handoffs 
between  the  fixed-wireless  shore  sta-  ( 
tions.  so  the  signal  from  the  vessel 
I  could  bounce  from  one  shore  antenna 
to  another  throughout  its  run.  Ludlow 
Mid  Mobilisa  experienced  few  outages 
,  in  its  tests  with  the  KUckuat.  which  be¬ 
gan  in  April:  an  aircraft  carrier  blocked 
the  signal  on  one  day. 

The  Proxim  equipment  on  the  Kuts 
connects  to  Bcact)nPoint  Wi-Fi  access 
points  from  Chanir>-  Networks  Inc.  in 
Waltham.  Mass.  TTie  BeaconPoints  of¬ 
fer  Wi-Fi  connections  using  the  802.11a 
standard,  which  operates  in  the  5-(iH7 
unlicensed  band,  and  the  802,11b  g 
standards,  which  use  the  2.4-GHz  band. 

•Mobili.sa  has  also  tmtfiited  the  ferr>- 
docks  with  Wi-Fi  BeaconPoints.  allow¬ 
ing  passengers  to  use  the  sen-ice  while 
waiting  fora  boat.  The  Port  Townsend 
access  point  also  covers  restaurants 
near  the  fcrr>-  dix*k.  Ludlow  said.  i 
I  The  BeaconPoints  are  htwked  into 
I  Chantry's  BcaconMaster  wireless 
switch,  which  allows  Mobilisa  to  con- 
,  trol  all  the  BeaconPoints  on  all  the 
boats  from  the  Mobilisa  network  oper-  i 
I  ations  center  in  Pon  Townsend, 
j  The  BcaconMaster  130.  priced  at  , 

I  S12.995,  is  a  Layer  3  sw'itch  that  allovs-s  | 

'  passengers  to  roam  from  dock  to  boat 
,  and  to  the  dock  again  without  initiat- 
I  ing  a  new  Wi-Fi  session,  said  Luc  Roy.  I 
1  senior  director  of  product  marketing 
I  and  management  at  Chantry.  ; 

'  The  ferry  system  plans  to  issue  a  re-  i 
I  quest  for  bids  on  a  ferry  wide  system 
once  the  trials  end  next  March.  Long 
said.  Because  of  the  infrastructure 
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In  a  devclopnx’iu  that  extends  wireless 


costs  involved,  he  said  he  expects  any 
permanent  W'i-Fi  system 
to  be  fee-based. 

Although  the  trial  is 
focused  on  providing 
W'i-Fi  service.  Long  said 
he  anticipates  using  the 
network  to  support 
cre\vs,  including  provid¬ 
ing  them  with  wireless 
voice-over-IP  phone 
serx'ice,  since  cellular 
coverage  for  the  boats 
is  spotn-.  O  49055 
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Disaster  Plans 


age  networking  environments. 

Firms  were  asked  what  re¬ 
covery  strategies  (hey  use, 
what  they  consider  to  be  best 
practices  and  what  cost/risk 
trade>o£k  and  regulations  are 
driving  their  strategics.  They 
were  also  asked  what  invest¬ 
ments  in  disaster  recovery 
they  will  make  in  the  ne«  year. 

For  security  reasons,  the 
banks  were  unwilling  to  share 
specific  strategies  publicly, 
but  Baumann  said  a  common 
concern  was  the  need  to  find  a 
dau  recovery  tnethodolog)' 
that's  efficient  and  scalable 
and  meets  the  needs  of  inter¬ 
nal  customers. 

"We’d  all  like  to  have  an 
open  checkbook  to  do  every- 
iWng  right  now.  We’d  like  to 
do  it  at  a  price  t^  our  compa¬ 
nies  are  willing  to  spend."  Bau¬ 
mann  said.  “It’s  not  so  much 
getting  the  money.  It's  putting 
together  the  right  business 
case  to  say.  ’Here’s  why  we 
should  be  doing  this.’ " 

Cost  Pressures 

\^(rgima  Garcia,  an  analyst  at 
TowciGfoup  in  Needham. 

Mass.,  said  the  discussion  is 
unique  among  financial  ser¬ 
vices  firms,  which  have  been 
squeamish  about  sharing  IT 
data  because  they  consider  it  a 
competitive  advantage. 

But  with  disaster  recovery 
spending  totaling  1%  to  2%  of 
financial  firms’  budgets  — 
that's  roughly  S2  billion  per 
year  for  U.S.  banks  —  building 
business  continuity  through 
best  practices  is  becoming  a 
necessity. 

“This  spending  is  growing 
well  into  double  digir^  _  an 


increase  of  17%  a  year."  Garcia 
said.  There’s  a  very  concert¬ 
ed  eflfbrt  in  the  banking  indus¬ 
try  to  get  a  better  handle  on 
risk  management  spending  at 
the  operational  level" 

Ctmles  Wollmcn,  manag¬ 
ing  executive  director  of  the 
FSTC’s  business  continuity 
standing  committee,  said  there 
were  several  revelations  from 
the  project.  For  example, 
banks  said  they  are  more 
tightly  integrating  recovery 
activities  into  IT  systems  de¬ 
sign  and  incorporating  them 
into  day-to-day  production 
practices.  Companies  are  also 
moving  toward  more  automa¬ 
tion  to  reduce  recovery  limes 
and  eliminate  human  error. 

Garcia  agreed  with  those 
findings,  saying  banks  are 
quickly  moving  away  from 


Key  Project  Findings 
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tape  backups  and  choosing 
disk-to-disk  mirroring  of  data 
over  wide  geographic  areas. 

Firms  also  said  they're  mov¬ 
ing  toward  internal  bunker 
data  centers  and  away  from 
third-party  recovery  service 
,  providers  such  as  SunGard 
i  Data  Systems  Inc.  and  IBM. 


The  companies  all  said  they 
want  to  spread  their  primary 
and  backup  data  centers  far¬ 
ther  apart  to  deal  with  region¬ 
al  power  outages.  "Having  the 
data  centers  five  miles  away  is 
not  going  to  be  good  enough," 
Wollmen  said.  "They'd  like  to 
. . .  have  data  centers  farther 
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Computer  Associates  Interna¬ 
tional  Inc.  avoided  a  revolt  at 
its  annual  meeting  last  week, 
when  shareholders  voted 
down  a  pn^sal  requesting 
that  the  company’s  board 
adopt  a  policy  of  revoking  ex¬ 
ecutive  bonuses  paid  based  on 
financial  results  that  arc  later 
revised. 

Submitted  by  Amalgamated 
Bank  LongView  Collective  In¬ 
vestment  Fund,  the  proposal 
came  in  the  wake  of  an  ac¬ 
counting  scandal  that  devas¬ 
tated  CA's  management  ranks 
and  forced  the  company  to  re¬ 
state  $2-2  bUlion  of  revenue. 

The  Amalgamated  Bank 
fund  cited  the  scandal  in  a  reg¬ 
ulatory  filing  supporting  its 
proposal.  The  fund  took  issue 
with  the  millions  paid  to  exec¬ 
utives  —  specific^y.  to  for¬ 
mer  CEO  Sanjay  Kumar,  who 
served  as  CA%  president  and 
chief  operating  officer  at  the 
time  the  fraud  occurred  —  and 
with  CA's  board's  silence 
about  whether  it  will  attempt 


to  recoup  those  bonuses.  Not 
doing  so  would  be  “a  serious 
omission,"  the  fond  argued. 

At  the  meeting.  76%  of  voles 
cast  sided  with  CA,  which  op¬ 
posed  the  proposal. 

Unlike  recent  financial  scan¬ 
dals  at  other  companies,  CA’s 
didn't  involve  fictitious  rev¬ 
enue.  Rather,  to  meet  the  ana¬ 
lyst  and  investor  expectations, 
the  company  prematurely  rec- 
ogniaed  sales  that  should  have 
been  booked  later.  Based  on  tar¬ 
gets  that  later  weren't  met,  CA 
awarded  bonuses  to  top  sales 
and  management  executives. 


Amalgamated  faced  long 
odds  on  winning  passage  of 
the  proposal  A  small  number 
of  investors  bold  a  significant 
percentage  of  CA’s  shares  and 
traditionally  vote  with  the 
company's  management. 

Also  at  CA's  meeting,  com¬ 
pany  chairman  Lewis  Ranieri 
said  CA  is  considering  interim 
CEO  Kenneth  Cron  for  the 
permanent  spot.  Cron  initially 
said  he  wouldn't  be  a  candi¬ 
date  in  the  company’s  CEO 
search. 

CA  is  unlikely  to  fill  its  CEO 
vacancy  before  it  resolves  the 
continuing  government  inves¬ 
tigation  of  its  accounting 
fraud.  The  company  has  now 
expelled  every  executive  im¬ 
plicated  in  Che  fraud  as  well  as 


apart  and  still  be  able  to  do 
the  backups  and  not  lose  data. 
It’s  more  the  issue  of  you  want 
your  cake  and  eat  it  too," 

One  idea  floated  by  the 
banks  in  conjunction  with 
longer-tiistance  replication  of 
data  was  to  share  physical  dis¬ 
aster  recovery  facilities  in  re¬ 
mote  locations,  which  would 
spread  out  the  cost  of  building 
and  running  hot  sites.  “But  the 
other  issue  is  that  you  have  so 
much  at  stake  in  these  large 
data  centers."  Wollmen  said. 

“If  sharing  IT  increases,  then 
risk  would  be  a  concern.  So 
it’s  a  balancing  act  involving 
risk  and  cost." 

The  FSTC  plans  to  meet 
again  on  Oct  6  to  further  dis¬ 
cuss  disaster  recovery  initia¬ 
tives  needed  in  the  financial 
services  industry.  O  49N)6 


;  those  in  lop  managemenkroles 
at  the  time  criminal  activity 
was  perpetrated,  but  it  re¬ 
mains  subject  to  fines  or  other 
sanctions  the  government  may 
impose  as  penalty  for  the  cor¬ 
porate  wrongdoing. 

Ranieri  said  he  is  continuing 
to  work  with  the  government 
toward  a  settlement.  Earlier 
this  year.  CA  offered  $10  mil¬ 
lion  to  settle  the  charges 
39^inst  it,  but  the  company 
hasn't  commented  on  the  gov¬ 
ernment's  response  to  the  of¬ 
fer.  Ranieri  also  said  CA  is  re¬ 
viewing  the  issue  of  compen¬ 
sation  paid  to  “certain  offi¬ 
cers"  in  prior  years.  O  49102 

Cowley  writes  for  the 
nXjNewsSer^ce. 


EMC  Unveils  NAS  Devices 


av  Lucaa  mcarian 

EMC  Corp.  today  announced 
several  network-attached  stor¬ 
age  (NAS)  devices  that  can  be 
used  for  backing  up  servers 
over  Ethernet  u.sing  Internet 
SCSI  EMC  said  it  has  boosted 
the  performance  on  its  NAS 
devices  and  improved  ease 
of  use  of  Hs  graphical  user 
interfaces. 

Tony  Asaro.  an  analyst  at 
Enterprise  Strategy  Group 
Inc.,  said  the  revised  inter¬ 


faces  make  the  NS  famUy  of 
NAS  servers  easy  to  manage, 
"even  for  nontechnical  users.” 

That  point  wasn’t  lost  on 
Loric  Beam,  director  of  IT  at 
law  firm  Smith,  Anderson. 
Blount,  Dorsett.  Mitchell  & 
lernigan  LLP  in  Raleigh.  NXl 
“If  you  have  less  technical 
people,  but  you  have  a  need 
for  them  to  manage  things,  it 
certainly  helps."  she  said. 

The  NAS  devices  are  certi¬ 
fied  as  iSCSI  targets  by  Micro¬ 


soft  (^rp.,  which  allows  ad¬ 
ministrators  to  consolidate 
their  servers  running  Micro¬ 
soft  server  products  and 
Linux. 

Asaro  lauded  EMC  for  its 
introduction  of  the  iSCSI  pro¬ 
tocol  on  its  boxes,  rwting  that 
NAS  is  better  than  a  storage- 
area  network  for  certain  file- 
sharii^  applications.  "And 
iSCSI  makes  sense  in  conjunc¬ 
tion  with  NAS  because  they 
both  use  the  same  Ethernet 
infrastructure."  be  said,  "mak¬ 
ing  it  easy  to  install  and  cost- 
effective."  O  49100 
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JA^ington  State  Ferries  Expands 
Wi-R  Service  for  Passenger  Use 

*?*'*''**  .  I  *tie  boats  as  they  move  from  the 


WAN  technology  beyond  fixed  loca¬ 
tions.  Washington  Sute  Ferries  plans 
to  offer  free  Wi*Fi  service  to  passen¬ 
gers  on  ferryboats  on  its  high-traffic 
Seattle-area  routes  this  faU. 

IT  director  Jim  Long  said  the  ferry 
system  recently  finished  testing  Wi-Fi 
service  on  the  MA^KKckUat  on  the 
Port  Townsend-Keystone  route,  which 
connects  the  Olyn^ic  Peninsula  to 
Whidbey  Island,  about  43  miles  north¬ 
west  of  Seattle.  Long  said  he  would 
eventually  like  to  have  aU  25  boats  in 
the  fleet  connected  to  a  wireless  WAN 
t^t  treats  each  '‘individual  ferry  boat 
lite  an  office  buildup”  booked  up  to  a 
wired  WAN.  The  fleet  carries  26  mil¬ 
lion  passer^ers  per  year  between  20 
ports  of  caU. 

That's  exactly  what  Mobilisa  Tnc  . 
now  nmnii^  a  nearly  jvarlong  test  of 
Wi-n  for  Washington  State  Ferries,  is 
delivering,  according  to  Nelson  Lud¬ 
low,  CEO  of  the  Port  Townsend-based 
company.  Mobilisa  has  installed  a  wire- 
lew  WAN  that  treats  about  400  square 
miles  of  Puget  Sound  “like  one  bis; 

U7AVTM _ 1-i.  .  .  .  .  . 


WAV-withOTTc*  ing  passengers  to  use  the  service  wiule 

^AN.  wthWi-Fi  service  and  wireless  waiting  for  a  boat  The  Port  Townsend 
connectivirv  to  tho  _  .  n  lownsena 


,  . . .  •••  •  •  dliu  wueie 

connectivity  to  the  Internet  available 
on  ferryboats  operating  anywhere  in 
the  area.  The  Mobilisa  tests  are  being 
funded  by  a  $1  million  grant  from  the 


antennas  installed  on  one  side  of  a 
route  to  antennas  on  the  other  side.  The 
Port  Townsend-Keystone  run  doesn’t 
allow  line-of-sight  coverage,  so  it  re¬ 
quired  the  installation  of  two  antennas 
on  the  Keystone  side.  Ludlow  said. 

Mobilisa  also  had  to  develop  its  own 
switching  algorithms  for  the  handofik 
l^tween  the  fixed-wireless  shore  sta¬ 
tions,  so  the  signal  from  the  vessel 
could  bounce  from  one  shore  antenna 
to  another  throughout  its  run.  Ludlow- 
said  Mobilisa  experienced  few  outages 
in  its  tests  with  the  Klidrftaf.  which  be¬ 
gan  in  April;  an  aircraft  carrier  blocked 
!  the  signal  on  one  day. 

The  Proxim  equipment  on  the  boats 
connects  to  BeaconPoim  Wi-Fi  access 
points  from  Chantry  Networks  Inc.  in 
Waltham,  Mass.  The  BeaconPoints  of¬ 
fer  Wi-Fi  connections  using  the  802.Ua 
standard,  which  operates  in  the  5-CHz 
unlicensed  band,  and  the  802.Ub/g 
standards.  w*ich  use  the  2.4-GH2  band. 

Mobilisa  has  also  outfitted  the  ferry 
docks  with  Wi-Fi  BeaconPoints,  allow¬ 
ing  passengers  to  use  the  service  while 


access  point  also  covers  restaurants 
near  the  ferry  dock,  Ludlow  said. 
The  BeaconPoints  are  hooked  into 
Chantry’s  BeaconMaster  wireless 


Chzntry;  BeaconMaster  wireless 

i-ederal  TYansportation  Administration,  switch,  which  allows  Mobilisa  to  con- 
CavaraaeCimlinuntinn  all  the  ^conI>oin«  on  all  u.e 


Coverage  Configuration 

Ludlow  said  Mobilisa  has  installed  a 
two-stage  wireless  system  to  provide 
coverage  to  Washington  State  Ferries. 
The  first  stage  provides  connectivity 
from  the  shore  to  the  boats,  with  point- 
to-fflultipoint  wireless  ^ar  from  Sun¬ 
nyvale.  Calif-based  Proxim  Corp.  oper¬ 
ating  in  the  unlicensed  S.B-GHZ  band. 

Proxim's  Tsunami  MPUa  system 
supports  mobile  roaming,  which  is  key 


boats  from  the  Mobilisa  network  oper¬ 
ations  center  in  Port  Townsend. 

The  BeaconMaster  130.  priced  at 
$12,995,  is  a  Layer  3  switch  that  allows 
passengers  to  roam  from  dock  to  boat 
and  to  the  dock  again  without  initiat¬ 
ing  a  new  Wi-R  session,  said  Luc  Roy, 
senior  director  of  product  marketing 
and  management  at  Chantry. 

The  ferry  system  plans  to  issue  a  re¬ 
quest  for  bids  on  a  ferrywide  system 


- quest  tor  OKIS  on  a  ferrywide  system 

IQ  enamng  umniemipted  connectiviiy  once  the  trtaU  rad  next  March.  Long 
said.  Because  of  the  infrastructure 
costs  involved,  he  said  he  expects  any 
permanent  Wi-R  system 
to  be  fee-based. 

Aithou^  the  trial  is 
focused  on  providing 
W-FI  service.  Long  said 
be  anticipates  using  the 
network  to  support 

A  wMms  wan  including  provid- 

pnrriiliiOT  n  log  them  with  wireless 
swvIm  Md  In-  voice-over-IP  phone 
tornat  eonanc-  service,  since  cellular 
tMlytofirTy  coverage  for  the  boats 
PMangai.  is  spotty.  0  49055 
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OPINION 


MARYFRAN  JOHNSON 


Open-Source  Obligations 


SOMEONE  in  the  open-source  community 
should  send  a  nice  bottle  of  champagne 
to  Charlie  Ward,  manager  of  technical  ar¬ 
chitecture  at  Duke  Power.  What’s  worth 
celebrating?  The  way  Ward  and  his  crew 
of  developers  poured  1,000  hours  into  building  a 
firework  to  support  application  development  on 

Microsoft’s  .Net  technology,  then  turned  their  work 

_  _  .  _ 


over  to  the  open-source 
conununity  ("Utility  to 
Make  IT  Framework 
Open-Source,"  (^uick- 
Link  48960). 

What  made  this  front¬ 
page  news  for  us  last 
week  was  the  signiHcant 
size,  relative  rarity  and 
potential  impact  of  this 
corporate  embrace  of 
open-source.  It’s  one 
thing  for  developers  to 
turn  over  a  few  sanc¬ 
tioned  pieces  of  corporate  code  to 
their  open-source  playmates.  It's 
quite  another  for  a  major  utility  to 
throw  open  the  doors  to  the  results 
of  a  costly,  complex  software  project. 

Open-source  just  climbed  up  an¬ 
other  rung  on  the  enterprise  ladder. 

This  is  somewhat  of  an  experi¬ 
ment  to  see  how  much  value  can  be 
gained  from  the  open-source  com¬ 
munity.”  Ward  said.  Building  a 
framework  for  application  develop¬ 
ment  doesn't  give  an  energy  compa¬ 
ny  any  panicular  competitive  ad>^- 
tage,  he  observed,  but  getting  contin¬ 
ued  support  and  improvements  do¬ 
nated  by  a  dedicated  conununity  of 
developers  is  clearly  a  benefit. 

The  appeal  of  open-source  is 
rolling  rapidly  across  the  corporate 
landscape.  More  than  60%  of  140 
companies  surveyed  thi«g  spring  by 
Forrester  Research  said  th^  were 
either  usmg  or  planning  to  use  open- 
source  products  —  everything  ftom 
databases  and  development  tools  to 
Web  servers  and  desktop  software. 
And  now  the  feds  are  ofifrcialty  en¬ 
couraging  open-source  adoption 
across  all  government  ^encies. 


‘Open-source  is  just 
a  more  eftlcient.  effective 
software  business  mod¬ 
el.”  says  John  Roberts, 
founder  of  SugarCRM, 
one  of  the  first  open- 
source  business  applica¬ 
tion  companies  to  attract 
venture  frinding.  "It’s 
more  than  just  cheaper 
software.  It’s  a  shift,  a 
movement  reshaping  the 
dynamics  of  a  modem 
software  company.” 

I  think  he's  right  about  those  fun¬ 
damental  shifts,  which  are  also 
changing  —  and  further  complicat¬ 
ing  —  the  landscape  of  software  li¬ 
censing.  For  example,  even  at  com¬ 
panies  where  open-source  products 
aren't  in  evidence  yet  the  lines  of  re¬ 
sponsibility  are  blurring  as  vendors 
fold  portions  of  open-source  code 
into  their  own  proprietary  products. 


One  CTO  I  spoke  with  last  week 
had  just  encountered  a  novel  situa¬ 
tion  with  a  new  software  package 
from  a  major  vendor.  His  developers 
found  a  flaw  in  the  code  and  alerted 
the  vendor,  which  denied  responsibil¬ 
ity.  saying  that  the  piece  of  code  con¬ 
taining  the  flaw  was  open-source. 
The  customer  argued  for  the  fix  and 
ultimately  got  it  —  but  the  experience 
raised  a  red  flag  for  the  CTO. 

It  should  do  the  same  for  you.  IT 
executives  need  to  educate  them¬ 
selves  about  the  rights  and  obliga¬ 
tions  involved  in  open-sour^  — 
even  if  it’s  not  in-house  yet. 

"What  you  need  to  look  out  for  is 
what  you  give  up”  as  well  as  what 
you  gain  in  an  open-source  licensing 
agreement,  says  Larry  Rosen,  author 
of  Open  Source  Licensing:  Software 
Freedom  and  /nteUectuai  Property 
Law  (see  “No  Free  Lunch.”  ()uick- 
Link  48462).  If  you  choose  to  share 
your  open-source  development  with 
other  companies,  for  example,  you 
may  be  obligated  to  use  the  same  li¬ 
cense  with  everyone. 

It  will  be  fascinating  to  watch  how 
Duke  Power  proceeds  with  its  open- 
source  experiment,  its  licensing 
arrangements  and  the  business  value 
that  comes  from  it.  Here's  hoping  it’ll 
be  worth  another  bottle  of  cham¬ 
pagne.  0  49072 


DAN  GILLMOR 

Microsoft 

Security's 

^\feakLink 

WINDOWS  XP  Ser¬ 
vice  Pack  2  is  now 
making  its  way  onto 
computers.  This  major  update 

is  a  step  forward  for  a  company  that 
has  had  an  abysmal  record  on  security, 
and  we  should  be  happy  for  that  much. 

But  it’s  only  one  overdue  action. 
Users  should  also  install  more  capable 
firewalls,  antivirus  software  and  anti- 
spyware  applkaiions.  But  the  service 
pack  also  reminds  us  of  a  situation 
that  Microsoft  has  never  properly  ad¬ 
dressed:  the  rctail/computer  security 
problem. 

If  you  buy  a  new  Windows  PC  for 
your  home  and  book  it  up  to  a  DSL 
service  or  a  cable-modem  hne  without 
first  installing  a  hard¬ 
ware  or  software  fire¬ 
wall.  your  computer 
could  well  be  com¬ 
promised  by  hackers 
before  you’ve  even 
had  time  to  install 
Microsoft's  “critical" 
security  updates. 

The  PC  may  be 
turned  into  a  spam¬ 
mer’s  toy,  a  zombie 
spewing  thousands 
of  mail  messages  per 
day.  some  of  which 
could  clog  corporate 
networks.  Or,  worse, 
it  may  now  have  a 
keystroke  logger  in  place,  snarfing  up 
personal  and  corporate  log-ons  and 
passwords  and  sending  them  who 
knows  where. 

This  is  a  clear  and  present  danger 
to  corporate  networks.  If  an  infected 
home  PC  gets  connected  to  the  corp¬ 
orate  netwoit.  via  a  VPN  or  other 
means,  all  the  work  IT  does  internally 
to  keep  things  safe  could  be  wrecked. 

Yet  this  is  reality.  Why?  Because 
Microsoft  doesn’t  require  computer 
makers  and  retailers  to  sell  their  PCs 
with  totally  updated  operating  sys¬ 
tems.  The  computers  likely  will  have 
XP  with  the  most  recent  service  pack, 
but  no  subsequent  updates. 

The  same  is  true  if  you  buy  the  Win¬ 
dows  XP  software  by  itself,  in  the  box. 

It.  too,  will  probably  need  updating  to 
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be  even  remotely  safe.  In  other  words, 
despite  monopoly  profits  and  lemons 
of  talented  programmers.  Microsoft 
continues  to  allow  retail  versions  of 
Windows  to  go  out  the  door  with 
known  defects.  Why? 

Yes,  there  are  complications  in  the 
retail  channel.  Microsoft  and  the  man¬ 
ufacturers  would  have  to  put  in  a  great 
deal  more  effort,  and  some  added  ex¬ 
pense.  to  do  the  right  thing  Given  the 
wafer-thin  margins  in  PC  retailing,  you 
can’t  expect  the  manufacturers  or  re¬ 
tailers  to  voluntarily  take  this  oa 
Thai's  why  Microsoft  should  step  in 
and  do  it  for  them. 

At  last  count.  Microsoft  had  more 
than  SSO  billion  in  <~a«h  It  plans  to  give 
some  of  that  back  to  shareholders. 

Fine.  But  how  about  using  some  of  it  to 
make  sure  that  computers  sold  at  retail 
have  the  latest  update  of  the  operating 
system,  with  the  nrewall  turned  on? 

Microsoft  will  never  do  that  volun¬ 
tarily.  Its  track  record  shows  it  to  be  a  i 
company  that  offloads  as  many  costs  as 
possible  onto  captive  manufacturing 
“partners"  that  have  no  alternatives. 

The  logical  people  to  intervene  in 
this  situatioD  are  state  and  federal  con¬ 
sumer-protection  officials.  They'd  nev¬ 
er  allow  auto  companies  to  sell  cars 
with  serious  known  defects.  Why  do 
they  permit  Microsoft  and  the  PC  mak¬ 
ers  to  do  so? 

IT  should  be  yelling  from  the  roof¬ 
tops  about  this,  llte  situation  is  getting 
better  only  at  the  margins,  and  t^t’s 
not  nearly  good  enough.  O  48980 


PIMM  FOX 

Keeping  the 
Skies  ^e 
FnomTMdy 


WHATEVER  your  po¬ 
litical  stripes,  you 
would  probably 
agree  that  Sen.  Edward  Ken¬ 
nedy  (D-Mass.)  is  not  a  terrorist. 

But  when  he  tried  to  board  a  US  Air¬ 
ways  flight  at  Reagan  National  Airport 
near  Washington  this  past  spring,  he 
was  stopped  because  his  name  ap¬ 
peared  on  the  government's  secret 
“no-fly^  list. 

This  database  is  supposed  to  be  one 
of  the  many  weapons  in  the  country's 
fight  against  terrorism.  And  alehou^ 
the  list  hasn't  led  to  any  arrests,  h  has  i 
caused  approximately  aso  U,S.  citizens  I 


to  either  be  delayed  or  de¬ 
nied  the  ri^i  to  travel.  The 
FBI  won’t  reveal  who  is  on 
the  list  which  is  maintained 
by  the  Tran.spoitation 
Security  Administration,  a 
branch  of  the  U.S.  Depart¬ 
ment  of  Homeland  Security, 
which  is  run  by  Tom  Ridge. 

After  that  first  inddent. 

Kennedy,  who  you'd  think  is 
recognizable,  was  stopped 
repeatedly,  even  after  bis 
aides  called  the  TSA  to  clar¬ 
ify  the  maner. 

His  name  was  removed  from  the  list 
only  after  be  personally  phoned  Ridge. 

The  reason  Kennedy  was  on  the  list 
in  the  first  place?  Apparently,  the  name 
T.  Kennedy"  has  bwn  used  by  a  sus¬ 
pected  terrorist  as  an  alias. 

Is  that  all  it  takes? 

Is  this  the  level  of  sophisticated 
technology  being  deployed  to  fight  the 
war  on  terror?  You  inight  as  well  digi¬ 
tize  the  phone  book. 

Of  course,  the  airline  says  it's  the 
TSA’s  problem,  and  TSA  officials  say 
they're  rust  doing  their  rob  and  that 
glitches  —  well  they  just  happen.  And, 


yes.  they're  going  to  get  a 
bigger,  better  system. 

And  while  the  govern¬ 
ment  says  the  TSA  will  is¬ 
sue  a  letter  for  those  who 
are  mistakenly  on  the  list, 
how  will  you  know  you 
need  the  letter  unless 
you’re  stopped  at  some  air¬ 
port  or  border  crossing? 

I  have  an  English  friend 
who  possesses  a  valid  U,S. 
green  card  and  has  worked 
legally  to  the  U.S.  for  years. 
A  technology  professional  who  regu¬ 
larly  (ravels  from  London  to  Seattle,  be 
was  stopped  by  U.S.  immigration  offi¬ 
cials  because  he  had  a  U  JC.  address  on 
ooe  of  his  documents.  When  he  tried 
to  explain  that  he  goes  back  and  forth 
on  business,  he  was  ushered  into  a 
small  room  and  grilled  by  officers,  who 
made  it  clear  that  they  didn’t  believe  a 
word  of  what  he  was  saying. 

Finally,  after  a  rather  nerve-rattling 
experience,  a  supervisor  was  called  to 
the  scene,  inspected  the  documents 
and  let  my  friend  proceed. 

Technology  is  often  touted  as  savior 
OT  scoundrel  when  it  comes  to  big  gov¬ 


ernment  projects.  The  government  is 
spending  boatloads  of  borrowed  cash 
to  install  massive  databases  designed 
to  link  all  soru  of  lists,  from  tallies  of 
delinquent  student  loans  or  driver’s  li¬ 
censes  to  flight  manifests.  It's  an  inter- 
csting  idea  to  build  a  web  of  interiock- 
mg  information  to  trap  terrorists.  But 
the  execution  is  a  duw  contradiction 
to  the  openness,  freedom  and  common 
sense  that  characterizes  civil  society. 

The  moral  of  this  story  isn’t  that 
technology  is  the  culprit.  Usii^  IT  to 
I  make  the  govenunem  more  effident 
more  transparent  and  more  accessible 
to  more  people  is  a  liberating  and  pou*- 
erful  concept  Every  day,  individuals 
click  through  the  business  of  renewing 
driver’s  Licenses,  e-mailing  elected  offi¬ 
cials  or  checking  on  government  pro¬ 
grams.  using  the  sublime  magic  of  the 
microchip. 

Bui  technology  that's  misused  is  a 
problem.  TTie  no-fly  list  is  a  no-win  in 
the  fight  against  terror.  O  48872 
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READERS’  LEHERS 


Critics  Fire  Back  at  ITAA  Over  E-voting 


ACCOKOMenttwartidelTAA 
fires  Back  at  Cribes  of  E-vot- 
ino*  [(kMkbnk  482101.  a  recent 
surveybyheInfomiationTechnokr 
in  Association  of  Ibnerica  showed 
77%  of  regelered  voters  M 
unconcerned  about  the  security  of 
e-voling  systems."  arid  ITAA  Presi¬ 
dent  Hans  Miller  believes  that 'crit¬ 
ics  tibo  daim  to  be  concerned 
about  the  security  of  e-votmo  sys¬ 
tems  are  retfy  ussiQ  the  issue  to 
push  a  political  agenda  on  behalf  of 
the  open-source  community  * 
r  m  ptedy  sure  those  same  77% 
of  regslered  voters  aren  1  concenred 
about  the  seosity  of  ther  home  PCs. 
gnrer^  the  widespread  probtem  of 
worms,  vffuses  and  spyware 
If  asking  proponents  erf  open- 
source  software  to  comment  on  the 
sectfily  of  efectranic  voirg  sys¬ 
tems  B.  as  MIer  says.  "He  a^  a 
bunch  of  ciergymen  what  they  thrik 
of  premantal  sex."  then  asking  end 
users  about  computer  security  s 
like  aslong  a  bunch  of  prostitutes 
what  they  dank  of  famrfy  values 
Joe  SealMch 
LAN  administmior. 

Pittsburgh  I 


IteCMK  M  TNE  fT  sednn  of  a 
bank,  and  if  we  were  to  go  about 
our  normaf  operations  Hidhout  any 
hanhxipy  autW  trab.  the  federal 
gorernrneni  vreuld  shut  us  down  in 
a  haarlbeaL  How  is  It  that  some¬ 
thing  as  important  as  seiectrig  the 
man  who  win  run  end  represent  our 
country  doesn’t  warrant  the  same 
scrutiny  as  processing  otf  money? 
FraakThonas 
Pittsburgh. 

/^tomas@comcast.net 

The  ilM'S  vrews  and  statistics 
are  a  smokescreen  Thse-vol- 
ing  Gsue  has  nodwig  to  do  with 
operr-some  vs.  propnelaty.  and  all 
to  do  with  reKabttty.  security  «rd 
auditability.  I  belong  to  an  e-vohng 
wAchdog  group  in  North  Carolina, 
and  I  voted  say  90%  ol  the  mem¬ 
bers  have  no  idaa  what  open-source 
6.  They  Nfit  went  a  verifcabie  eiaciion 
Jm  Franz 

Programmer.  GreenAoro.  S£. 

THEriM'SstatementBndicu- 
kMSiOidthesutveyrespon- 

dentsknowwhat’seortyofewot- 
mg  systems' means?  The  n  a  world 


where  95%  of  the  peopie  cannot 
program  ther  VCRs.  My  guess  n 
thatmostvoterswoteddvnkapo- 
kcemanallhepolngplaceconstr- 
tutfls  good  seorty  for  the  e-vobng 
systerm  Read  Cornputermrkfs 
SharkTanktogefabeiierunder- 
standmg  of  the  level  of  computer 
knowle^  out  there 
S.  Duffy 

Senior  system  malyst. 
Mitmeapobs 

IF  E-voTlMBas  flawed  as  the 
fogc  Vi  HamsMIer'sfusliiicatian. 
Ihenweneedtoburytheideavn- 
tnediatoly  .  The  percOTlage  of  peo¬ 
ple  unviformed  about  an  Bsue  does 
nolhuig  to  condemn  or  defend  1 
Chuck  finUe 
Nbusfon 

Many  PEOPIE  1  have  known  m 
my  27  years  VI  the  wkstry 
hM  no  due  about  what  a  secure 
computer  system  mvteres.  Tve  even 
had  a  conversahon  with  someone 
who  wiaes  software  lor  the  tniemel 
as  a  professon  who  bekeves  that 
svnpiy  restnclffo  traffic  to  Port  80 
wik^yoir  server  safe 
ft  77%  of  ragsterad  voters  be¬ 
gan  to  keep  up  with  die  SBavRy 


patches  on  ttwir  PCi  stepped 
opening  e-mafe  and  esecuiing  at- 
tadimenfs  from  unknown  sources 
then  maybe  I  woted  begin  to  trust 
tee*  opmon  on  a  secure  computer 
system  IM  teen,  the  BMe  is  not 
open-soivce  vs.  propnety  software: 
4's  abate  the  abMy  to  audi  die  sys¬ 
tem.  INi  maKM  stndes  are  mule  In 
canvteer  SBCtf«y.  viciudNig  geteng 
nd  of  unelhicaf  prople  from  tee 
computer  professon.  a  paper  irarf 
w8  be  a  requvement  to  gtararriee 
the  accuracy  of  a  volmg  system 
MtefiaMOtegtey 
Systems  antUysL' 
programming  coordiruttor. 

New  Knoxville.  Ofno 

COMPUTERWOftU)  wtecorres 
comments  from  as  readers,  lifters 
wi  be  edited  tor  breviiy  and  cterfty. 
They  shoted  be  addressed  to  Jame 
bkle.  tetters  edrfor.  Compteerworid. 
PO  Boi  9171. 500 Old  Connedicul 
Rath.  Franvifdiam.  Mass  01701 
Fax  (5061 87»4843 
E-mal  leners8computerworid  com 
indude  an  address  and  cbone  num¬ 
ber  tor  immedale  veribcabon 
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Double  your  productivity  with  Scan^  technology. 


The  best  way  to  stay  ahead  is  to  double 
your  productivity.  Introducing  Scan^ 
S  C  ®  n  ^  technology  From  Sharp.  Sharp's  Digital 
Imagers  with  Scan'  technology  are  designed  to  scan  two- 
sided  documents  in  a  single  pass. 

Now  your  training  manuals  and  white  papers  can  be 
scanned.  cop«d.  emailed  and  digitally  distributed  quicker 
than  ever  before 


In  fact,  it’s  115%  faster  than  any  other  product  in  its  class. 
Not  only  is  it  like  having  double  the  help,  it  will  also  allow 
you  to  accomplish  more  tasks,  in  dramatically  less  time. 
Together  with  Sharp's  integrated  network  management 
software  and  security  features,  your  digital  information  is 
safe  and  workflow  is  fully  optimized. 

Visit  sharpusa.com/scan2  or  call  1-800-BE-SHARP  for 
more  information. 


TheAPMSSO.  AP-M^ondAP-MTQO: 

•  Operate  at  55. 62  TOpagei-per-minute 

•  Fulfy  integrated  network  ready  digital  copier/printers 

■  Include  neiwofk  monogement  xiftwore  and  document  filing  capability 
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Directory  Assistance 

Virtual  directories  provide  applica¬ 
tions  with  a  single  point  of  access 
to  user  data  when  the  information 
requested  is  located  in  more  than 
one  directory.  Pape  24 


QUiCKSTUDY 

Fu^  Logic 

While  Boolean  logic  solves  problems 
with  a  binary,  yes-or-no  answer, 
fuzzy  logic  solves  problems  when 
data  is  vague  or  imprecise.  Page  26 


SECURITY  MANASER’S  JOURNAL 

Company  Secrets  Hit  the  Exits 

Mathias  Thurman  discovers  that  a  lax  policy 
has  allowed  executives  who  are  leaving  his 
company  to  depart  with  laptops  loaded  with 
sensitive  e-mail,  applications  and  data.  Papa  27 


Once  the  work  of  vandals,  viruses  and  other  malwarB  are  now 

being  launched  by  criminals  looking  for  profits.  BY  DAN  VERTON 
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Directory  Assistance 

V'irtual  directories  provide  applica¬ 
tions  with  a  single  point  of  access 
to  user  data  when  the  information 
requested  is  located  in  more  than 
one  directory.  Page  24 


QUICKSTUOY 

Fuzzy  Logic 

While  Boolean  loyic  solves  problems 
with  a  binary,  yes-or-no  answer, 
fuzzy  logic  solves  problems  when 
data  is  vague  or  imprecise.  Page  26 
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SECURITY  MANAGER'S  JOURNAL 

Company  Secrets  Hit  the  Exits 

Mathias  Thurman  discovers  that  a  las  poliev 
has  allow  ed  executives  who  are  leav  ing  his 
company  to  depart  with  laptops  loaded  w  ith 
sensitive  e-mail,  applications  and  data.  Page  27 


Once  the  work  of  vandals,  viruses  and  other  malware  are  now 
being  launched  by  criminals  looking  for  profits.  BY  DAN  VERTON 


Antivirus  researchers  have 
uncovered  a  startling  increase 
in  organized  virus-  and  worm¬ 
writing  activity  that  they  say  is 
powering  an  underground  economy 
specialidng  in  identity  theft  and  spam. 

“The  July  outbreak  of  MyDoom.O 
was  yet  aimther  reminder  that  spam¬ 
mers  are  now  using  sophisticated, 
blended  threats  that  miic  spam,  viruses 
and  denial-of-service  attacks,”  accord¬ 
ing  to  Andrew  Lochart.  director  of 


product  marketing  at  Postini  Inc.,  an 
e-mail  security  services  provider  in 
Redwood  Chy.  Calif.  In  July  alone, 
Postini’s  customers  reported  more 
than  16  million  directory  harvest  at¬ 
tacks,  which  are  attempts  by  spam¬ 
mers  to  hijack  a  company's  entire 
e-mail  directory. 

The  link  between  viruses,  worms 
and  the  underground  criminal  econo¬ 
my,  however,  goes  back  to  long  before 
the  latest  version  of  MyDoom,  says 


Mikko  Hypponen,  antivirus  research 
director  at  F-Secure  Corp.  in  Helsinld, 
Finland.  Starting  with  the  initial  out¬ 
break  of  MyDoom  in  January.  Hyppo- 
nen  began  to  notice  that  what  had  pre¬ 
viously  been  considered  little  more 
than  a  rogue  vinis-wridng  subculture 
actually  had  a  signiftcant  link  to  orga¬ 
nized  efforts  to  use  malicious  code  to 
make  money. 

“MyDoom  got  press  coven^  be¬ 
cause  of  the  denial-of-service  attack  it 


launched  against  SCO  and  Microsoft 
Corp,"  says  Hypponen.  “But  nobody 
was  paying  attention  to  what  was  hap¬ 
pening  behind  the  scenes." 

And  what  was  happening,  according 
to  Hypponen.  was  the  beginning  of  a 
concerted,  unabashed  effort  to  turn 
virus  and  worm  infections  into  cash. 

Eight  days  after  MyDoofiLA  hit  the 
Intemec.  somebody  scarmed  millions 
of  IP  addresses  looking  for  the  back 

Continued  on  poge  22 
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3®5  sys*«"  -  **«'  powerful  InteT  Xeon~  processors  -  can  make  your  work,  and 
IT  e^lon  pio^,  easier.  With  three  levels  of  memory  protection  and  a  comprehensive  monitoring  of  key  components,  it's 
^  about  uptime.  So  you  get  outstanding  reiiability  when  running  mission^:ntical  ERR  collaboration  and  database  applications 
The  works.  Management  is  easier,  too.  You  can  have  around-the^Ax*  remote  access,  on  demand.  And  system  status  can  be 
available  even  when  powered  oft.  For  more  onhighly  available,  manageable  xSeries  senieis,  go  to  ■iinxon./eserver/advantage 

5  reasons  more  and  more  businesses  are  turning  to  IBM  esirver^Series  systems  wirn  Intel  Xeon 


Scale  1~16  way  with  select 
models.  Pay  as  you  grow. 


IBM  Director  systems 
management. 


Linux-ready  through 
die  entire  line. 


Mainframe-inspired 

technologies. 


24  7'365  optional  onsite 
hardware  support. ' 
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Continued  from  page  19 
door  left  by  the  worm,  said  Hypponen. 
The  attackers  searched  for  systems 
with  a  Ttojan  horse  called  Mitglieder 
installed  and  then  used  those  systems 
as  their  spam  engines.  As  a  result,  mil¬ 
lions  of  computers  across  the  Internet 
were  now  for  sale  to  the  underground 
spam  community. 

Of  course,  spamming  viruses  aren’t 
new.  Security  professionals  have  been 
dealing  with  them  for  years.  However, 
the  appearance  of  MyDoom  and  more 
recent  viruses  and  worms  signaled  the 
beginning  of  much  larger  pr^lems. 
says  Hypponen. 

By  the  end  of  January.  Internet  users 
were  busy  dealing  with  the  Bagle  mass 
mailer.  And  although  the  first  version 
wasn’t  particularly  successful,  at  least 
a  dozen  variants  soon  followed,  includ¬ 
ing  variants  that  carried  Mitglieder. 

But  the  real  clues  that  organized 
gangs  were  using  Bagle  and  MyDoom 
to  sell  spam  proxies  ^  as  well  as  links 
to  phony  Web  sites  that  exist  only  to 
harvest  identities  and  personal  ftnan- 
cul  information  —  came  when  the 
vrriter  behind  NetskyJl  posed  a  direct 
challenge  to  the  so-called  professional 
virus  writers. 

In  addition  to  attempting  to  remove 
Bagle  and  MyDoom  ftom  infected 
computers.  Netsky  conducted  a  deniaj- 
of-service  attack  against  Web  sites 
known  to  be  fronts  for  identity  thieves, 
according  to  Hypponen. 

When  F-Secure  analysts  decoded  the 
encrypted  messages  hidden  within  a 
subsequent  version  of  Bagle  (Bagie.J). 
they  discovered  a  threat  of  a  virus  war 
if  the  Netsky  author  continued  to 
“min”  the  “business"  of  the  profession¬ 
al  vims  writers. 

“We  have  information  that  the  writ¬ 
ers  of  both  MyDoom  and  Bagle  may  be 
Ru.ssian  immigrants  living  in  various 
European  countries."  says  Hypponen. 

Whoever  is  behind  it.  they  are  orga¬ 
nized  and  mnning  a  thriving  business, 
says  Hypponen. 

Brian  Dunpby.  director  of  global 
analysis  operations  at  Symantec 
Corp.'s  Security  Operations  Center  in 
Alexandria.  Va..  acknowledges  that  it's 
difficull  to  discern  the  intent  behind 
many  vimses  and  worms  in  the  wild. 

In  addition  to  planting  back  doors, 
some  worms,  such  as  the  latest  My- 
Do<im  variant,  have  embedded  peer- 
lo-pccr  updating  capabilities,  he  says. 

“What  we  used  to  see  are  worms 
and  viruses  that  did  not  have  a  reacH- 
back-and -call-home  capability,”  says 
Dunphy.  “What  we  saw  with  MyDtmm.  | 
however,  was  that  infected  systems  i 
were  aware  of  other  infected  systems. 


and  they  automatically  built  a  peer-to- 
peer  networit  of  sorts." 

In  fact.  Symantec's  analysis  of  the  re* 
cent  MyDooraM  outbreak  discovered 
a  mechanism  that's  used  to  mamtam  a 
list  of  all  known  infected  systems  and 
permits  the  worm's  author  to  update 
all  MyDoom.M-mfected  systems  with 
new  arbitrary  malicious  code  with  lit¬ 
tle  risk  of  hs  network  being  hijacked 
by  rival  worm  authors,  says  Alfred 
Huger,  senior  director  of  Symantec 
Security  Response. 

In  addition  to  propagating  spam 
proxies  and  setting  up  peer-to-peer 
networks,  viruses  and  worms  are  heing 
used  to  install  Web  servers  on  vulnera¬ 
ble  systems.  Those  Web  servers  are 
then  used  to  host  everythii^  from 
pornography  and  pirated  software  ' 


sites  to  fake  banks.  Hugos  says. 

UndergToimd  bartering  and  selling 
is  conducted  on  Web  rites  such  as  a 
Russian  site  that,  among  other  things, 
sells  subscription  services  to  compro¬ 
mised  computers. 

Various  other  Russian  and  Chinese 
message  boards  exist  for  the  sole  pur¬ 
pose  of  selling  spam  hosts.  Accepted 
payment  methods,  shown  clearly  on 
the  Web  pages,  include  £-gold  trans¬ 
actions  and  WebMoney  and  Western 
Union  money  transfers.  Ironically, 
organized  e-criminals  don't  accept 
credit  cards. 

FbrSaleiViourlD 

Viruses  and  worms  carryir^  Trojan 
horse  code  are  also  powering  massive 
identity  theft  rings. 

At  sites  like  www.oemccLbiz.  www. 
mego-oem.l>iz.  http://huge^les.info 
and  www.<ulantkmisr6ank.com. 
among  hundreds  of  others,  users  arc 
presented  with  the  opportunity  to  buy 
popular  software  at  tremendous  dis¬ 
counts.  sometimes  at  one-tenth  the  re¬ 
tail  price.  And  while  these  sites  look 
authentic,  H3rpponeo  offers  a  word  of 
caution. 

“The  one  thing  all  of  these  sites  have 
in  common  is  that  none  of  them  exist.” 
he  says.  “If  you  buy  something  from 
them,  you’ll  get  oothir^  and  they  will 
never  charge  your  credit  card.  But 
what  they  will  do  is  steal  your  identi¬ 
ty."  In  fact,  identities  and  bulk  credit 
card  “dumps"  are  available  to  the  high¬ 
est  bidder  at  some  sites. 

Tracking  down  virus  writers  and 
other  online  criminals  can  be  more 
dUTtculi  than  anybody  ever  imagined. 

It's  particulariy  difficull  in  the  case  of  I 
fraudulent  domain-hosting  schemes. 


which  often  use  IP  addresses  that  ex¬ 
pire  every  two  minutes,  Hypponen 
says. 

“If  you  refresh  these  sites,  the  do¬ 
main  name  points  to  a  different  IP  ad¬ 
dress  every  two  nunutes.“  he  explains. 
“And  then  if  you  look  at  the  IP  address¬ 
es,  you'll  see  that  they  are  in  places  like 
Japan,  Portugal,  Brazil,  Canada  and 
elsewiicre." 

Hackers  and  malicious-code  writers 
are  increasingly  automating  the  Inter¬ 
net  shell  game  that  keeps  many  of 
them  one  step  ahead  of  law  enforce¬ 
ment  The  Kuwaiti  hacker  group 
Q8See  is  a  case  in  point. 

On  March  8.  a  Russian  source  re¬ 
ported  to  F-Secure  analysts  the  exis- 
tence  of  a  lYojan  horse  created  by 
^See  called  Slacke.  But  what  made 
Slacke  unique  was  the  extraordinary 
lengths  to  which  its  authors  went  to 
hide  their  tracks  and  the  mystery  that 
remains  about  the  group's  intent 
First,  the  worm  downloaded  code 
from  a  Web  rite  hosted  in  Sao  Tom^ 
and  Principe,  a  small  island  rution  lo¬ 
cated  off  the  Atlamic  coast  of  Africa. 
Analysis  by  F-Secure.  however,  showed 
that  the  domain  rights  for  the  Web  site 
had  been  sold  to  a  company  in  Sweden. 

I  But  registration  information  listed  the 
I  company  name  as  JordanChat  and  the 
I  location  as  Irbid,  Jordan.  The  contact 
name  was  TeROr. 

As  thousands  of  infected  computers 
downloaded  the  malicious  code  from 
the  Web  server  in  Sio  Tom^  and 
Principe,  they  were  then  linked  to  an 
Internet  Rela^  Chat  system  operated 
by  CNN  in  Atlanta 
Once  logged  into  CNN’s  IRC  server, 
the  systems  connected  to  an  IRC  chan¬ 
nel  in  Mexico  called  Noticias.  And 
when  Hypponen  and  his  analysts  stud¬ 
ied  the  channel,  they  were  astonished 
at  what  they  saw. 

There  were  20,000  clients  just  sil¬ 
ting  on  the  channel  doing  nothing. 

They  looked  like  people,  but  they  were 
bots,"  be  says,  referring  to  programs 
that  perform  repetitive,  automated 
functions. 

The  bots.  however,  weren't  alone. 
According  to  Hypponen.  three  Kuwaiti 
users,  presumably  members  of  QSSee, 
were  sitting  on  the  channel  and  send¬ 
ing  commands  to  the  bots  to  scan  vari¬ 
ous  ranges  of  IP  addresses-  And  while 
CNN  eventually  shut  down  the  chat 
server,  nc^>ody  knows  for  sure  what 
the  hackers  were  doing. 

“We  may  never  know."  .says  Hyppo¬ 
nen.  “Whether  or  not  this  is  traditional 
organized  crime  doesn't  matter  —  be¬ 
cause  they  are  organized,  and  what 
they  are  doing  is  criminal."  O  487B4 
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The  BOEING  CO  has  a 

diverse  directory  infra¬ 
structure  that  includes 
products  like  Sun  ONE. 
Microsoft  Active  Directo¬ 
ry  and  Oracle.  Having  a 
heterogenous  directory 
infrastructure  in  a  company  the  size  of 
Boeing  is  a  practical  necessity,  but  it 
also  creates  headaches  for  the  aero¬ 
space  company,  which  has  900  directo¬ 
ry-enabled  applications  that  serve 
some  150.000  employees. 

The  problem  is  that  most  identity 
management  systems,  Web  portals  and 
other  directory -dependent  applica¬ 
tions  are  designed  to  access  just  one 
directory,  but  the  data  each  requires 
may  reside  in  many.  Even  when  re¬ 
quested  data  is  available  in  a  single 
repository,  it  may  not  be  structured  in 
the  way  the  application  wants  to  see  it. 

As  a  result,  getting  each  application 
to  work  with  the  directory  infrastruc¬ 
ture  can  become  a  big  project,  says 
Marty  Schleiff.  a  cyberidentity  special¬ 
ist  at  the  Boeing  Shared  Services  Group. 

“Every  requirement  means  changing 
an  existing  directory  without  breaking 
it  for  existing  clients  or  setting  up  a 
new  directory.”  Schleiff  says.  A  third 
option,  customizing  the  application, 
can  be  costly.  Unlike  with  internal  ap-  I 
plication  development  projects,  the 
money  spent  customizing  a  commer¬ 
cial  application  can't  be  leveraged  by  1 


other  applications,  and  customization 
adds  to  the  amount  of  code  that  must 
be  maintained,  he  says. 

To  solve  the  problem,  Schleiff  is 
turning  to  virtual  directory  software, 
an  emerging  class  of  products  that  he 
says  offers  a  more  flexible  approach  to 
providing  applications  with  access  to 
user  account  data  and  other  anributes. 

Boeing  has  piloted  and  is  ready  to 
begin  a  phased  rollout  of  Virtual  Di¬ 
rectory  Engine  from  OctetString  Inc. 
in  Schaumburg.  III.  To  the  application, 
the  virtual  direaory  looks  just  like  the 
target  directory  it  expects  to  see.  It 
takes  requests  for  data  from  the  appli¬ 
cation,  retrieves  it  from  the  back-end 
directories,  performs  any  transforma¬ 
tions  needed  and  presents  it  to  the  ap¬ 
plication  in  the  formal  required.  No 
modification  to  the  application  or  tar¬ 
get  directories  is  needed. 

“We’re  deploying  it  to  suppon  many 
client  applications.  We're  trying  to  cre¬ 
ate  a  shared  service."  Schleiff  says. 

The  Virliial  Difference 

Virtual  directories  are  similar  to  an¬ 
other  took  metadirectories.  Both  can 
access  user  data  from  different  reposi¬ 
tories.  Metadirectories,  a  core  element 
of  user  provisioning  tools,  copy  dau 
into  a  new  repository  that  must  be  cre¬ 
ated.  maintained  and  synchronized. 

The  need  to  keep  data  updated  can  be 
a  headache  when  data  in  sotirce  direc- 
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V irtual  dir ectories  offer  a  fast  and  efficient  way  to  get 
identity  management  software  and  other  directory- 
dependent  applications  online.  By  Robert  L.  Mitchell 
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tones  changes  frequently.  Some  busi¬ 
ness  units  may  also  object  to  the  idea 
of  creating  a  second  repository  for 
customer  data  that  will  be  outside  of 
their  control,  citing  regulatory  or 
strategic  concerns. 

In  contrast,  virtual  directories  access 
the  attributes  requested  from  each  di¬ 
rectory  or  database  on  the  fly.  The  soft- 


I  ware  uses  a  cache  to  speed  performance 
but  typically  doesn't  store  data  locally. 

Virtual  directory  deployments  can 
cost  substantially  less  than  alternative 
strategies.  The  software,  licensed  by 
the  server,  may  cost  SIO.OOO  to  several 
hundred  thousand  dollars  for  a  large 
project.  But  that’s  a  small  price  to  pay 
compared  with  the  cost  of  rebuilding 
an  enterprise  directory  or  reworking 
each  appUcatioa  says  Schleiff.  "Any¬ 
time  you're  considering  spending  mon¬ 
ey  to  customize  an  application  so  that  it 
can  use  your  directory,  you  should  look 
at  virtual  directory  te^ology."  be  says. 
The  technology  can  even  help  appli¬ 
cations  that  aren't  sophisticated 
enough  to  deal  with  more  complex  di¬ 
rectory  mechanisms  such  as  Light¬ 
weight  Directory  Access  Protocol 
(LDAP)  referrals.  A  virtual  directory 
can  follow  the  reference  to  locate  the 
data  and  return  it  to  the  application. 

But  virtual  directories  alw  have  a 
few  drawbacks.  Although  they  don't 
create  an  additional  repository,  they 
do  create  another  layer  of  complexity 
because  they  require  applications  to 
access  information  indirectly  through 
the  virtual  directory  server  rather  than 
going  to  the  directory  that  actually 
holds  the  data. 

“There’s  a  discomfort  with  adding 
another  layer  of  infrastructure.  If 
something  happens  to  our  Web  single 
sign-on.  our  critical  applications  are 
down."  says  Schleiff.  "Virtual  directo¬ 
ries  . . .  both  simplify  and  make  the 

I  service  offering  more  complex.” 

Another  potential  weakness:  Virtual 
directories  are  only  as  good  as  the  di¬ 
rectories  behind  them.  If  a  directory 
tends  to  go  down  frequently  or  offers 
poor  response,  a  mctadirector)'  that 
has  its  own  data  source  may  be  a  better 
choice.  But  users  say  virtual  directo¬ 
ries  have  advantages  here.  too.  They 
have  load-balancing  and  fail-over  fea¬ 
tures  that  can  be  configured  to  redirect 
a  request  to  an  alternative  data  source. 

If  the  connection  drops  in  the  middle 
of  a  request,  for  example,  the  virtual 
directory  retries  another  repository 
and  returns  the  rest  of  the  data. 

Starting  Small 

Boeing  is  one  of  the  first  companies  to 
make  the  virtual  directory  an  integral 
part  of  its  directory  service,  but  pro- 
granuners  and  directory  specialists  at 
many  large  companies  have  been  qui¬ 
etly  using  the  tools  for  several  years 
for  specific,  one-off  applications  or 
departmental  development  projects. 

leffSobel.  a  senior  analyst  at  New 
York  Independent  System  Operator 
(NYISO),  a  wholesale  electricity  pro- 
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vider  in  Albany,  was  building  a  Web 
application  to  let  customers  place  bids 
over  the  Internet.  He  chose  RSA  Secu¬ 
rity  lnc.'s  ClearTrust  access  manage¬ 
ment  software  to  authenticate  users, 
but  the  product  could  point  to  only 
one  LDAP  directory.  His  user  data 
resided  in  an  Oracle  database  and  an 
LDAP  directory.  At  RSAs  suggestion, 
be  brought  in  RadiantOne  virtual  di¬ 
rectory  software  from  Radiant  Logic 
Inc.  in  Novato.  Calif.  Sobel  says  he  had 
the  software  up  and  running  within  a 
month.  “It’s  not  a  long  cycle  time  to  get 
it  running,”  he  says. 

NYISO  wasn't  always  sold  on  virtual 
directories,  however.  The  company 
looked  at  the  tools  a  year  ago  and 
decided  that  most  weren’t  mature 
enough.  Although  a  few  virtual  direc¬ 
tory  tools  have  been  around  since  the 
late  ’905,  they’ve  improved  significant¬ 
ly  since  then,  says  Gerry  Gebel,  a  Fair¬ 
fax.  Va.-based  analyst  at  Burton  Group. 
Several  vendors  have  added  graphical 
point-and-click  user  interfaces  to  the 
tools  that  make  setting  them  up  much 
easier  than  the  previous,  text-based  in¬ 
terfaces  and  conftguration  files.  “But 
you  still  have  to  understand  LDAP, 
database  structures  and  thii^  of  that 
nature,"  Gebel  cautions. 

The  manager  of  directory  services  at 
a  large  family  entertainment  comparry, 
which  he  asked  not  be  named,  says  a 
virtual  directory  made  sense  for  his 
application  for  both  political  and  tech¬ 
nical  reasons.  The  company  uses  a  flat 
directory  structure,  but  its  identity 
management  software  expects  user 
data  to  be  organized  hierarchically. 
Using  a  metadirectory  to  transform  the 
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I  data  was  out  because  management 
“really  put  the  hammer  down  about 
replicating  data  to  different  business 
umts,"  he  says.  Rebuilding  the  source 
directory  would  have  required  eight 
months,  versus  just  one  month  to  de¬ 
ploy  a  virtual  directory.  The  technol¬ 
ogy  provided  a  hierarchical  view  of  the 
data  “without  provisioning  our  data  all 
over  again,”  be  says. 

Choosing  a  virtual  directory  means 
looking  at  very  small  vendors,  since 
the  big  directory  players  have  yet  to 
offer  full-blown  virtual  directory  prod¬ 
ucts.  The  virtual  directory  vendors  — 
about  a  half-dozen  in  all  —  are  typical¬ 
ly  small,  privately  held  firms  with  few-  I 


I  er  than  30  employees  and  anywhere 
from  five  to  50  or  more  customers.  Yet 
the  vendors  count  many  of  the  world’s 
Urgest  companies  among  their  cus¬ 
tomers.  "Tlte  larger  and  more  complex 
the  organization,  the  more  need  th^ 
have  for  this  technology."  says  Gebel. 

One  way  to  mitigate  the  risk  of  going 
with  small  vendors  is  to  leverage 
agreements  they  have  with  identity 
management  software  vendors  and  in¬ 
tegrators.  Radiant  Logic  has  agree¬ 
ments  Mrilh  RSA  and  Accenture  Ltd., 
for  example,  while  Octetstring  has  al¬ 
lied  itself  with  Oblix  Inc.  Users  can 
take  other  steps  as  well  says  Gebel.  "If 
you're  implementing  something  that  is 
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higher  risk,  you  need  to  take  measures 
I  such  as  getting  source  code  in  escrow  or 
I  going  through  a  larger  vendor."  he  says. 

Another  potential  concern  is  scala- 
I  bility,  says  Gebel.  although  vendors 
I  disagree.  While  the  products  have  been 

shipping  for  several  years,  they’re  evolv¬ 
ing  and  have  yet  to  prove  themselves  in 
I  many  large-scale  deployments,  he  says. 

I  But  those  concerns  don't  bother 
I  NYISO’s  Sobel.  He  says  he  plans  to  use 
the  technolog>'  as  pan  of  a  broader. 

[  singte-sign-on project  involving  mote 
I  than  a  half-dozen  directories.  "Because 
I  we  aren’t  tied  down  to  a  true  director>' 

I  •••H'seasiertoaddrepositoriesasiiroe 
I  moves  on."  048758 
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Vidor  in  Albany,  was  buildinjj.i  VScb 
application  lo  let  customers  place  bids 
ov  er  the  Internet,  He  chose  HSA  Secu¬ 
rity  Inc.  s  (.dear  Trust  access  manage¬ 
ment  software  to  authenticate  users, 
but  the  pmduct  could  p<*int  tt)  only 
one  I  nAI'directory.  Mis  user  data 
resided  in  an  Oracle  database  and  an 
I  H.\P  directory.  .yi  RSA's  sujt^esiion. 
he  brought  in  RadiantOne  \  irtual  di¬ 
rectory  s«>fl\vare  from  Radiant  I  o^ic 
Inc.  in  N.u.uo.  tialif.  Si.bel  s;iys  he  had 
the  software  up  and  runninji  within  a 
month.  "It's  not  a  loni;  cycle  lime  to  get 
it  running.  '  he  says. 

NVISO  wasn't  .ilways  sold  on  virtual 
direeiories.  however.  The  eompanv 
looked  at  the  tools  a  year  ago  and 
decided  that  most  weren't  mature 
cntmgh.  .Although  a  few  virtual  direc¬ 
tory  fo»»ls  have  been  around  since  the 
late  ‘‘LOs.  they  ve  improved  signillcani- 
ty  since  then,  saysyierry  (.ebel,  a  lair- 
tax.  \a.-based  analyst  at  Hurton  (iroup. 
Several  vendors  have  added  graphical 
point-and-elicfc  user  interfaces  to  the 
tools  that  make  setting  them  up  nnieh 
easier  than  the  previ«>us.  text-based  in- 
lertaecs  and  c«mfiguration  (lies.  "But 
yt)u  still  have  ti>  understand  THAI*, 
database  structures  and  things  of  that 
nature."  (iebel  cautions. 

Tile  miinager  of  direc*t(*ry  sen  lees  at 
.1  large  lamily  cmieriainment  company, 
which  he  .isked  not  be  named,  savs  a 
virtual  directory  made  sense  for  his 
application  for  hnh  political  and  tech¬ 
nical  reasiins.  The  Company  uses  a  ilai 
directory  structure,  but  its  identity 
management  software  expects  user 
data  lo  be  organized  hierarehically. 
Using  a  metadireeiory  to  transform  the 


VENDORS  OF  WRTUAL  DIRECTORY 
SOFTWARE  are  gwieraily  small  compa¬ 
nies  wftth  30  employees  or  less  and  a  cus- 
lomer  base  measured  irt  tens  ol  users.  Some 
vendors  offer  only  a  virtual  directory,  while 
othets  otter  a  ma  of  products  and  services 
Here's  how  they  difterentiaie  themselves 

Radiant  Logic  and  Trondheim.  Norway- 
based  MaXware  Inc.  offer  both  mefadirec- 
tory  and  virtual  directory  products  and  pro¬ 
mote  integration  features  between  the  two. 

The  MVD  MaXware  Virtual  Directory  offers  a 
flexible  and  easy-to-use  interface,  says  Bur¬ 
ton  Group's  GenyOebei  RadiantOne  adds  a 
■persistent  cache."  blumng  the  distinction 
between  its  meladirectory  and  virtual  direc-  , 
lory  products  Both  BEA  Systems  Inc  and 


BMC  Software  Inc.  indude  Radiant  Logic's 
technology  in  their  product  lines,  while 
MaXware  has  partnered  with  Hampshire 
England-based  integrator  BT  Syntegra. 

Octetstring  started  with  a  Java  LDAP 
directory  that  il  transformed  into  its  Virtual 
Directory  Engine.  The  product  has  flexible 
loinmg,  mapping  and  translofmaiion  fea¬ 
tures  and  a  newly  released  30  vefswn 
adds  features  that  make  the  product  easier 
to  use.  ObJix  resells  the  technology  with 
Its  Core©  product 

Symlabs  SA  m  Lisbon,  Portugal,  is  the 
smallest  vendor  m  the  group,  it  focuses  on 
high-performance,  (arge-scafe  deploy- 
menis.  Telecommunications  companies  are 


J.u.i  was  Dut  bov.iusv  managcnii-nt 
"rx'aliv  put  the  hammer  Ji*w  ii  .iNmi 
replicating  data  in  different  business 
units,  he  s;iys.  Rebuilding  the  siiuree 
direeltiry  would  have  required  eight 
months,  versus  just  one  month  to  de¬ 
ploy  a  virtual  Jireetory.  The  leehnol- 
ogv  provided  a  hierarchical  view  of  the 
d.tta  “vvithtmt  provisioning  our  data  ail 
overag.»in."  he  says. 

( ihmtsing  a  virtual  direetorv-  means 
liHiking  at  very  small  v  endors.  simv 
the  big  direetorv  plavers  have  yet  iti 
offer  full-blown  vinual  directory  prod¬ 
ucts.  I'he  virtual  direetorv  vendors  — 
about  a  halt-dozen  in  .ill  —  are  typical¬ 
ly  small,  privately  held  llrms  with  few¬ 


er  than  .*()  ernphivees  and  anvwhere 
Irom  live  to5ti  or  iTn*re  eusti'mers  Yet 
the  vendors  count  manv  of  the  world's 
largest  eompjiiii*s  .imong  their  cus¬ 
tomers.  "  I'he  larger  and  more  cvimples 
the  «‘rg.»nization.  the  more  need  thev 
hav  e  for  t his  t eehm *logv .■*  sav  s  ( iebei. 

L>ne  wav  to  tnitigiite  the  risk  <if  going 
w  iih  small  vendv*rs  is  to  leverage 
agreements  thev  have  with  ideniitv 
man.igemeni  s*iftware  vendors  and  in¬ 
tegrators.  Radiant  I.ogie  has  .igree- 
ments  with  KSA  .md  Accenture  I  id., 
for  ex.-imple.  while  t)eietString  has  al¬ 
lied  itself  with  t>bii\  Ine  Users  can 
take  other  steps  .is  well,  sav-s  (iebel.  "If 
you're  implementing  something  ih.»t  is 


among  the  earty  aeJopters  <>l  Its  Otfect»v 
Exiender  product  Pans-basec  Catendri  s 
Directory  Mar«ger  includes  a  compiefe 
development  environtneni  and  workflow 
component  The  vendor  has  experience  in 
developing  Yfelfow  Pages-rype  applicatioas 
says  6^1 

Persistent  Systems  Pvt.  an  established 
software  devewpmenf  outsewreer  m  Pune. 
India.  IS  by  far  the  largest  vendor  m  the 
group  Hhasexpenencebuildingrnetadirec- 
lory  connectors  for  other  vendora  It  has 
about  1 000  employees,  although  only  about 
30  suppoflenOuire  Virtue  Directory  That 
product,  part  of  the  enOorr e  Wentity  Server, 
also  supports  a  persistent  cache 

-  Robert  L  AAfchei/ 


higher  risk.  vv»u  need  to  take  measurv*s 

such  as  gettirrg  stmreeeiKle  in  e*<T»'W  nr 
giiing  through  .i  l.irgvr  vendor,  he  sjvs 
Another  p«vtenii.il  eonct-rn  is  v.ihi- 
bililv.  vivs  t,ebeL  aithiuigh  vv-nJors 
dis.igrtv  While  the  products  have  Kvn 
shipping  i«‘r  weral  vears.  they'te  evolv  • 
inganJ  h.ive  vei  to  prove  ihemselvi*s  in 
m.in\  large-scale  depl«>v  meniv  he  savs 
Hut  ihtKv-simeems don’t  Nuher 
SA  IM  t  vS'bel.  Ilesjvs  be  plans  lo  u.se 
the  leehnoRigv  .is  pan  of  a  hro.i4^-r. 
single-sign-»»n  pronvt  imolv  ing  tiuwe 
th.in  .1  hall-dozen  direef«*rit’s  "Beeaus<- 
we  .iren't  lied  dow  n  to  a  true  direetorv 
- .  it  s  vM>|iT  add  repositories  .estime 
miwesoiv  C46758 
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Fuzzy  Lc^c 


Fuzzy  logic  is  an  extension  of  classic  Boolean  logic 
designed  to  work  with  imprecise  or  vague  data,  with 
the  concept  of  partial  truth.  Where  classical  reason¬ 
ing  requires  yes  and  no  values,  fuzzy  logic  can  han¬ 
dle  concepts  such  as  “maybe,"  "nearly"  and  “very." 


8V  RUSSELL  KAV 

Tn  I  M  computing: 
«oriJ  is  huilt  on  .1  struc- 
lurc«*f  H‘*<'ioan  iogit 
appIicJ  t.*bin.*r>  vj|uy.> 
—  •Mic  »»r  /cru,  yvv  «*r  nu.  in  i»r 
I'ui  Hut  this  poucn'ul  struc  ¬ 
ture  IS  .1  L’H'ss  lUv’rsimpJuiea- 
ii»*n  >'t  thi  rvjl  wurid. »  hero 
'n.iMV  sh.iJosiii  ^ra\  cmm  be¬ 
tween  bJjek  .ind  w  hue.  In 
e\  er\dji  iile.  \\  e  use  ^uast 
metric  ntiii4«n>  thai  areete.irK 
related  t»'  numerical  eeneepts 
<*r  values  but  Lek  prei  jsii  tn  "r 
Jefnareafiitn, 

U  hat  tune  is  it-  It  l  m  a 
server  fime-sunipinv  tht»u 
saiicis  t»i  files,  Jiuita)  cvrtin 
cates  i»r  tf.in.saciitins.  1  need 
verv  fine  dtstinctinns  Hut  it 
I  m  jskin):  a  c»»-w»»rKer 
what  tjtne  it  is.  J.t  | 
realiv  c.ire  that  tt's 
1I:4‘>:54  .i.m  t  astern 
IUvlit»ht  nme>i>r  Jit 
I  lust  want  to  lcn■•v^  n' 
it  s  time  tor  lunch  \ct' 
i  Ir  taia.-  the  wc.tther  If  it’s 
Je«rei*N  I  ibretiheit  •■ii  a 
fulv  Jjv.  that  s  5if'  tor  Mjsvt- 
thuseits  but  milJ  J>tr  \n/i.nj, 

A  total  or>evctj:  iiiCftes  nt 

rain  that  month  .nuuht  consti 
tute  j  JrouL'ht  u.  M..ss.k  hu- 
se’tts  but  .1  wi  ic.irni  relict 
fmm  one  in  An/Mn.i 


guicKi 

STUDY 


Get  Fuzzy 

I  he  real  world  simplv  doesn’t 
map  Well  to  birurv  Jtstitic- 
tions.  and  nutTieric'jl  precisMii 
ts  otien  unhelptui  m  making; 
ijualitativv  statements,  f  u/.rv 
lojtie  ttives  us  a  wav  to  deal 
with  such  situations. 

Infuz/v  systems,  values  are 


indicated  bv  a  number  (called 
a  truth  value)  in  the  range 
from  0  to  1,  where  0.0  repre¬ 
sents  absolute  lalseness  and 
1.0  represents  absolute  truth. 
While  this  range  evokes  the 
iJe.i  ol  probabilitv.  inyiy  logic 
and  fu//v  sets  operate  i^uite 
JitlerentK  from  probabilitv 
It  I  tell  voii  that  mv  height  is 
r  ft.  o  tn  lor  loKenii.  you  mav 
have  to  ihmk  j  bit  before  de¬ 
ciding  whether  \ou  consider 
me  short  IT  not  short  (i.e.. 
tall).  .\1  oreover.  \ou  might 
reckon  me  short  tor  .1  man  but 
tali  tor  .1  wom.in.  No  let  s  make 
the  statement  'Kussell  is 
short.’  and  give  that  a  truth 
Value  of  O  Tti. 

It  o  To  represented  a  pioba- 
biiilv  value,  we  would 
rc.ij  it  as  •  I  here  is  .1 
•  chance  that  Rus 
sell  is  short.”  meaning 
that  we  still  believe 
that  Kussc'll  is  either 
short  or  not  short,  and 
we  have  a  70“i'  eh.ince  of 
know  ing  vv  Inch  group  he  K-- 
iongs  to.  Hut  fu7zv  lerminolo* 
g\  realiv  translalesio  "Kus- 
sc  ll’s  degree  of  membership  in 
the  set  ol  short  people  is  ii.TV.' 
b\  which  we  mean  that  if  we 
l.ike  all  the  ( fuziv  set  oft  short 
people  and  line  them  up.  Rus¬ 
sell  is  positioned  rt)”..ttf  the 
wav  to  the  shvintwi.  In  conver¬ 
sation.  we  would  sav  Ru.vse!l  is 
"kind  of"  short  and  recognize 
that  there  i.s  n<»  definite  do- 
marcaiion  between  short  and 
tall.  We  can  state  this  maihe- 
matically  as  mSHORfl  Rus-  ' 
sell  >  0.70.  where  tn  is  the 
membership  function. 


Another  ditterence  becomes 
V  isible  when  we  look  at  some 
logical  operatKvns.  particularly 
or  and  and.  In  probability,  vve 
calcul.ile  the  jnd( intersec¬ 
tion  i  of  two  independent 
events  bv  multiplying  their  in¬ 
dividual  probabilities  together 
and  the  or  (or  union)  as  the 
sum  ol  individual  probabilities 
less  their  product,  for  lu//y 
logic,  we  evaluate  or  as  the 
maximum  of  individual  truth 
values,  w  hile  and  is  the  mini¬ 


mum  of  those  values.  As  vve 
incorpvirate  more  factors  into 
the  mix.  even  those  with  high 
values  —  the  overall  probability 
continues  to  drop,  eventually 
approaching  0,0.  For  fuzzy  log¬ 
ic,  however,  the  truth  value  re¬ 
mains  high.  Similarly  for  the  or 
operator,  incorporating  more 
factors  increases  probabilitv 
I  to  near  1.0.  while  adding  more 
I  fuzzy  sets  doesn’t  raise  the 
I  eombined  value  at  all.  and  the 
,  limit  will  be  the  largest  of  the 
,  individual  membership  values. 

Hedging  Your  Bets 

One  thing  that  makes  fuzzv 
systems  useful  is  the  ability 
to  define  "hedges."  or  descrip¬ 
tive  modifiers,  to  represent 
fuzzy  values.  This  keeps  the 
v'perations  of  fuzzy  logic  clos¬ 
er  to  natural  language  and  al¬ 
lows  us  to  generate  fuzzy 
statements  through  mathe¬ 
matical  calculations. 

lYefining  hedges  and  the  op¬ 
erations  that  use  them  is  u  sub¬ 
jective  process,  and  it  can  \ ary 
from  project  lo  project.  But 
the  system  lets  us  use  opera¬ 
tors  and  produce  compound 
results  using  the  same  formal 


melhtKis  as  classic  logic. 

For  example.  let's  change 
I  the  statement  "Bob  is  old"  to 
'  “Bob  is  very  old."  Here  we’re 
using  "verv  "  as  a  hedge  or  de¬ 
scriptor.  and  this  particular 
(  hedge  is  often  defined  as 
!  equivalent  10  the  square  of 
I  the  base  value.  Therefore  if 
mOl.D(Bob)  0.80.  then 
'  mV'ERYOUHBob)  0.64. 
lYther  hedges  include  "more 
or  less."  •■somewhat."  “rather" 
and  "sort  of."  All  have  subjec¬ 
tive  definitions  but  transfvirm 
membership'truth  values  in  a 
systematic,  reliable  manner. 

0  48634 


Kay  is  a  (aimputerworld  con- 
friburing  writer  in  Worcesu-r, 
Mass.  You  can  contact  him  at 
russfeay  a  chartcr.net. 
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SEVEN  TRUTHS  OF  FUZZY  LOGIC 


1  Fiszy  logAc  ini  fuzzy.  Rizzy  logic  ml  inlrinsF 
atf  invvBcise.  doesn’t  Moiate  common  sense  and 
Dnxkices  iftambigiMs  resUHs.  Tiassl^ 
logNk  in  fact  6  merely  a  speciai  case  of  hizzy  logK;. 


logic  handte  al  the  Mertociong  dagmes  of 
Them  syslerns  are  taidaledfnuchte 
systsrm.  but  tuning  ttiern  is  (maty  rmich  sirnpler. 


2.  Fuzzy  logic  ts  dtfferent  from  probaMfty.  V 
probability.  «ve'ie  trying  to  deterrnne  some¬ 
thing  about  the  polenUsI  outcome  ol 
de^  defined  events  Ihei  may  occur 
at  random  With  iuzzy  logic,  we're 
trywg  to  determine  somelhmg 
about  the  nature  of  the  event  R- 
self.  Fuzziness  is  attm  expressed 
as  ambigiitv.  not  nvrecision  or 
wcertainty.  it's  a  charaderisbc  of 
perception  as  wel  as  concept. 

3.  Designing  fuzzy  sets  is  easy. 

Fuzzy  seb  reflect,  in  a  general  way.  how 
people  actually  think  about  a  problern.  I's  ust^ 
(Mcfc  and  easy  k)  rough  oU  the  approxiinate  dim  ^ 
a  fuzzy  eel  UMr  oa  after  some  teehng  or  eigwrtence. 
we  can  adlst  fis  precise  charaderistics. 

4.  Fuzzy  syslMis  are  slaMe  and  eMiy  tuned 
«id  CM  be  wHdM.  rsfastar  and  easier  to  aide 
fuzzy  sals  and  buld  a  hazy  system  tfian  fi  is  to  oeale 
cotiMnlonal  tnowtedgrbaead  systole 


5.  Fuzzy  systems  arenl  neural  networks.  A 
hazy  ^8tem  attempts  to  find  the  wtersedion.  union 
or  compietTieffi  of  the  fuzzy  control  vwobles. 
Whie  fins  is  somewhal  analogous  to 
both  neural  nehirorks  and  bnear  pro- 
w  \  QtVTvning.  fuzzy  systems  approach 

_ _ ^  these  problems  Aflerenity. 

\<;  6.  Funy  logic  is  more  than 

•^'  procaas  control  Although  some 

people  view  hizzy  logic  mainly  as 
a  tool  for  process  control  and  signal 
/  analysis,  that  nlerpretaiionte  too 

linating.FuzzylQgici8awByofrapm- 
sentirto  arto  aiul)0ng  inforrnaoori 
dent  of  specific  aoplicalions. 

7.Fuzzyietfciearegraeematier^andriMew 
MHl  proceae.  Fuzzy  logic  is  a  poweitol  and  versallB 
tod  for  representirto  imprectee  am^^ 

Norriafioa  M  cin1  sahe  al  probtatns.  but  I  helps  us 
rnodd  (Moiit  even  MraciMte  probtems. 

’AdapMtom  HmSamNetk  Ttutae/Fuay 
^>fiidGEa:(tontoi4vOteian.>%»f0B? 
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Rizzy  Logic 

[DEFINITION 

Fuzzy  logic  is  an  extension  of  classic  Boolean  logic  I 
designed  to  work  with  imprecise  or  vague  data,  with  I 
the  concept  of  partial  truth.  Where  classical  reason-  I 
ing  requires  yes  and  no  values,  fuzzy  logic  can  han-  I 
die  concepts  such  as  “maybe,”  “nearly”  and  “very.”  I 
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indicated  by  a  number  (called 
a  truth  value)  in  the  range- 


worid  is  built  on  a  strue-  from  0  to  1.  where  0.0  repre- 

ImreofBoolean  logic  sems  absolute  frlseness  and 
applied  to  binary  values  1.0  represents  absolute  truth, 
one  or  zero,  yes  or  no.  in  or  While  rhK  range  evokes  the 

out.  But  this  powerful  strue-  idea  of  piobabiUty.  fuzzy  logic 

turetsagrossoversimplifica-  and  hiz^  sets  operate  quite 
tion  of  the  real  world,  where  differently  from  probability, 

many  shades  of  gray  exist  be-  If  I  tell  you  that  my  height  is 

tween  black  and  white.  In  5  ft.  6  in.  (or  168  cm),  you  may 

everyday  life,  we  use  quasi-  have  to  think  a  bit  before  de¬ 
metric  notions  that  are  clearly  ciding  whether  you  consider 

related  to  numerical  concepts  me  short  or  not  short  (ie,. 

or  values  but  lack  precision  or  tall).  Moreover,  you  might 

demarcation.  reckon  me  short  for  a  mati  but 

What  time  is  it?  If  I'm  a  tall  for  a  woman.  So  let’s 
server  time-stampii^  thou-  the  statement  “Russell  is 

sands  of  files,  digital  certifi-  short."  and  give  that  a  truth 
cates  or  transactions.  I  need  value  of  0.70. 
very  fme  distinctions.  But  if  lf0.70  represented  a  proba- 

fm  asking  a  co-worker  - 1 -  bility  value,  we  would 

what  time  it  is.  do  1  Aniiu#  read  it  as ’There  is  a 

really  care  that  it’s  llllinf  «  70%  chance  that  Rus- 

11:4954  a.m.  Eastern  sell  is  short."  meaning 

Daylight  Time?  Or  do  2lin||T  that  we  stUl  beUeve 
I  just  want  to  know  if  that  Russell  is  either 

it  s  time  for  lunch  yet?  j  short  or  not  short,  and 

Or  take  the  weather.  If  it’s  we  have  a  70%  chance  of 
90  degrees  Fahrenheit  on  a  knowii^  which  group  he  be- 
luly  day.  that  s  hot  for  Massa-  longs  to.  But  fuzzy  terminolo- 
chusetts  but  mild  for  Arizona.  gy  really  translates  to  “Rus- 
A  total  of  several  inches  of  sell’s  degree  of  membership  in 
rain  that  month  might  consti-  the  set  of  short  people  is  0.70." 

tute  a  drought  in  Massachu-  by  which  we  mean  that  if  we 

setts  but  a  welcome  relief  take  all  the  (fuzzy  set  of)  short 
from  one  in  Arizona.  people  and  line  them  up,  Rus- 

f^Fiirwu  sell  b  positioned  70%  of  the 

UW  rtlOy  to  the  shortest  In  conver- 

Tbe  real  world  simply  doesn't  sation.  we  would  say  Russell  b 
map  weU  to  binary  distinc-  “kind  or  short  and  recognize 
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dons,  and  numerical  preebioo  that  there  b  no  definite  de- 


b  often  unhelpful  in  making 
qualitative  statements.  Fuzzy 
logic  gives  us  a  way  to  deal 
with  such  situations. 

In  fuzzy  systems,  values  are 


marcadon  between  short  and 
tail  We  can  state  thb  mathe¬ 
matically  as  mSHORT(RuS' 
sell) » (X70,  where  m  b  the 
membership  function. 


Another  difference  becomes 
vbible  when  we  look  at  some 
logical  operations,  particularly 
or  and  and.  In  probability,  we 
calculate  the  and  (intersec¬ 
tion)  of  two  independent 
events  by  multiplying  their  in¬ 
dividual  probabilities  together 
and  the  or  (or  union)  as  the 
sum  of  individual  probabilities 
less  their  product.  For  fuzzy 
!c^.  we  evaluate  or  as  the 
maximum  of  individual  truth 
values,  while  and  b  the  mini¬ 


mum  of  those  values.  As  we 
incorporate  more  factors  into 
the  mix.  even  those  with  high 
values  —  the  overall  probability 
continues  to  drop,  eventually 
approaching  0.0.  For  fuzzy  log¬ 
ic,  however,  the  truth  value  re¬ 
mains  h^h.  Similarly  for  the  or 
operator,  incorporating  more 
factors  increases  probability 
to  near  1.0,  while  adding  more 
fuzzy  sets  doesn’t  raise  the 
combined  value  at  all.  and  the 
limit  will  be  the  largest  of  the  1 
individual  membership  values. 

Hedging  Ybur  Bets 

One  thing  that  makes  fuzzy 
systems  useful  b  the  ability 
to  define  “hedges,"  or  descrip¬ 
tive  modifiers,  to  represent 
fuzzy  values.  Thb  keeps  the 
operations  of  fuzzy  It^c  clos¬ 
er  to  natural  language  and  al¬ 
lows  us  to  generate  fuzzy 
statements  through  mathe¬ 
matical  calculations. 

Defining  hedges  and  the  op¬ 
erations  that  use  them  b  a  sub¬ 
jective  process,  and  it  can  vary 
from  project  to  pro>ect.  But 
the  system  lets  us  use  opera¬ 
tors  and  produce  compound 
results  using  the  same  formal 


methods  as  classic  logic. 

For  example,  let's  change 
the  statement  “Bob  b  old"  to 
“Bob  b  very  old."  Here  we’re 
using  “very^  as  a  hedge  or  de¬ 
scriptor,  and  thb  particular 
he^^  b  often  defmed  as 
equivalent  to  the  square  of 
the  base  value.  Therefore  if 
raOLD(Bob)  =  0.80,  then 
mVERYOLD(Bob)  =  0.64. 

Other  hedges  include  “more 
or  less,"  "somewhat,"  “rather" 
and  "sort  of."  All  have  subjec¬ 
tive  definitions  but  transform 
membership/truth  values  in  a 
systematic,  reliable  manner. 
048B34 

Kay  is  a  Computerworid  con- 
rrihuring  writer  in  Worcester. 
Mass,  You  can  confact  him  at 
russkay@charter.net. 
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good  to  worry  about  hacker 
departing  executives  are  free 


data.  By  Mathias  Thurman 


The  othes  day.  I  found 
out  that  an  executive  in 
my  company  was  leav¬ 
ing.  Nonnalty.  that 
wouldn’t  be  a  big  A/ter 
all,  in  a  large  company  people 
come  and  go  all  time.  But 
this  executive's  employment 
comract  included  a  clause  that 
lets  him  keep  his  laptop.  As  a 
security  manager.  1  Tind  this 

alarming,  but  it’s  a  - 

common  practice 
when  hiring  execu- 
rives  here. 

While  executives 
have  always  departed 
with  their  computers, 
until  r*ow  no  one  has 
bothered  to  erase  the  sensitive 
programs  and  data  on  those 
machines.  Computers  in  the 
sales  and  marketing  group, 
for  example,  contain  customer 
contact  lists,  confidential 
price  lists,  e-mail  correspon* 
dence,  aiwl  merger  and  acqui¬ 
sition  mfonnatiorL 
The  e:mcutive  in  question 
was  part  of  an  inquiry  a  few 
months  ago  that  required  ob¬ 
taining  an  image  of  his  lap¬ 
top’s  hard  disk  drive.  A  mem¬ 
ber  of  the  legal  department, 
hearing  of  his  placed  depar¬ 
ture.  remembered  that  inquiry 
and  called  roe.  This  person 
was  leaving  the  company  un¬ 
der  good  terms,  he  said. 

Nonetheless.  I  asked  for  his 
laptop  ri^  away  so  that  we 
could  take  another  mirror  im¬ 
age.  wipe  the  drive  and  then  in¬ 
stall  the  standard  baseline  im¬ 
age  on  it.  To  my  surprise  and 
dismay,  my  request  was  met  by 
a  considerable  amount  of  resis¬ 
tance  from  management.  But  in 
the  end.  less  chan  24  hours  be¬ 
fore  the  employee’s  departure, 

I  finally  rccetv^  his 
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In  the  wake  of  this  episode, 
the  CIO  established  a  policy 
that  any  laptop  leaving  with 
an  employee  must  have  its 
di^  wiped  The  policy  state¬ 
ment  will  be  included  in  fu¬ 
ture  offer  letters  whenever  re¬ 
tention  of  any  company-issued 
computer  equipment  is  part  of 
the  employment  agreement. 
^^^h  that  problem  behind 

-  me.  I  turned  my 

attention  to  anoth¬ 
er  pressing  issue. 
Except  for  certain 
enterprise-class 
applications,  such 
as  PeopleSoft  Ora¬ 
cle  and  SiebeL  my 


company  develops  in-house 
almost  all  of  the  software  it 
uses.  Prior  to  deployment,  any 
application  we  develop  must 
enter  our  protect  life  cycle, 
which  includes  many  reviews. 
Most  of  the  items  I  am  con¬ 
cerned  with  relate  to  access 
control,  encryption,  server 
and  application  security,  and 
proper  network  segregation. 

Unfortunately,  this  process 
is  fairly  new  and  is  always  be¬ 
ing  refined.  We’ve  ortly  recent¬ 
ly  mandated  IT  security  repre¬ 
sentation  at  the  various  stages 


WMe  executives 
have  ahmo/s  departed 
with  their  computers, 
(fitlnowiioonehas 
bothered  to  erase  the 
sensilm  programs 
and  data  on  those 
machines. 


of  projects.  Now.  soiireonc  in 
my  group  attends  the  project 
plarining  meetings  and  all 
technical  and  critical  design 
review  boards.  But  sometimes 
smaller  programming  projects 
can  slip  by. 

A  .'ew  months  ago.  I  en¬ 
countered  an  application  that 
lets  a  user  create  and  publish 
surveys.  Since  the  program 
was  designed  for  a  group  that 
was  using  the  application  for 
the  one-time  collection  of 
nonsensirive  data  from  the 
sales  organixation.  we  decided 
not  to  run  it  throt^  the  proj¬ 
ect  life-cycle  process.  But  I  re¬ 
member  mentioning  at  the 
time  that  I  was  afraid  other 
departments  would  find  out 
abwt  the  survey  tool  and  try 
to  use  it  for  gathering  more- 
sensitive  information. 


Fears  Reabed 

Since  then,  just  as  I  feared, 
several  departments  have  ex¬ 
pressed  an  interest  in  this  ap¬ 
plication.  After  getting  wind 
of  this,  I  insisted  that  if  the  ap¬ 
plication  was  to  be  used  in  a 
production  environment  for 
collecting  more-sensitive  data, 
it  had  to  go  through  the  formal 
project  life-cycle  path. 

As  part  of  the  sectirity  re¬ 
view.  we  conduct  a  variety  of 
security  assessments.  We  as¬ 
sess  both  the  application  and 
the  server  on  which  it  will  re¬ 
side.  In  addition,  we  review 
the  application’s  architecture, 
which  typically  involves  un¬ 
derstanding  which  ports  the 
application  must  use  and  any 
relationships  between  the  ap¬ 
plication  and  other  production 
servers.  We  don’t  want  one 
compromised  system  to  lead 
to  the  compromise  of  others 
by  way  of  trust  relationships. 
We  also  ensure  that  the  appro¬ 
priate  firewall  rules  are  de¬ 
fined  and  that  cmly  the  neces- 
I  sary  services  are  allowed. 

TTie  survey  tool  consists  of 
I  a  stand-alone  application  that 
I  creates  a  survey.  The  survey  is 
then  pushed  to  a  Web  server 
via  an  encrypted  session.  To 
I  enable  that,  firewall  rules 


must  allow  only  (he  server 
containing  the  stand-alone  ap¬ 
plication  to  communicate  with 
the  Web  server.  We  also  need¬ 
ed  rules  to  allow  only  Web 
traffic  to  the  Web  server  and 
to  our  networic  operations 
center  to  monitor  the  server. 

To  conduct  the  server  and 
application  assessment,  we 
used  the  open-source  Nessus 
scanning  program  and  Web 
Inspect  from  Atlanta-based 
5PI  Dynamics  Inc.  In  addi¬ 
tion,  we  used  scripts  and  oth¬ 
er  techniques  as  time  permit¬ 
ted  to  further  interrogate  the 
server  and  the  application. 
Any  discrepancies  in  either 
must  be  fixed,  or  mitigating 
controls  must  be  put  in  place. 

For  the  survey-tool  applica¬ 
tion.  the  server  assessment 
came  out  perfect.  Thai's  be¬ 
cause  we  have  a  top-notch 
baseline  system  image  that  has 
been  hardened  and  patched. 

But  the  application  assess¬ 
ment  reveled  a  few  items  of 
concern,  including  a  cross-site 
scripting  vulnerability  that 
could  be  exploited  to  cause 
the  user  to  execute  malicious 
code  when  viewing  the  survey. 
Once  these  vulnerabilities  are 
fixed  or  mitigated,  we  plan 
to  give  the  green  light  to  the 
project  leader  to  deploy  this 
application. 

Next.  Fm  back  to  trying  to 
find  an  automated  way  to  de¬ 
tect  rogue  wireless  access 
points.  We’re  testing  Cisco 
Systems  Inc.'s  trianguUtion 
feature.  If  configured  properly, 
it  can  detect  an  AP  within  a 
10-foot  radius. 

The  problem  is  that  the  AP$ 
are  often  hidden,  and  we  still 
have  to  find  iheov  So  we’re 
woiiting  on  a  way  to  automati¬ 
cally  trace  media  access  con¬ 
trol  addresses  from  our 
switches  back  to  network 
jacks  in  individual  offices.  It’s 
still  not  an  ideal  approach,  but 
it's  definitely  a  start.  I 
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Encryption  Must 
Move  Beyond  SHA 


At  the  Crypto  2004  conference  in  Santa 
Barbara,  Calif.,  this  month,  researchers  an¬ 
nounced  several  weaknesses  in  common 
hash  functions.  These  results,  while  mathe¬ 
matically  significant,  aren’t  cause  for  alarm.  But  even 
so,  it’s  probably  time  for  the  cryptography  community 
to  get  together  and  create  a  new  hash  standard. 


One-way  hash  functions 
arc  a  cryptographic  con¬ 
struct  used  in  many  appli¬ 
cations.  They  are  used  with 
public-key  algorithms  for 
both  encryption  and  digital 
signatures.  They  are  used 
in  integrity  checking.  They 
are  used  in  authentication. 

They  have  all  sorts  of  ap¬ 
plications  in  a  great  many 
different  protocols.  Much 
more  than  encryption  algo¬ 
rithms,  one-way  hash  func¬ 
tions  are  the  workhorses  of 
modem  cryptography. 

Ron  Rivest  invented  the 
MD4  and  MD5  hash  functions  in  the 
early  1990s.  Then  the  National  Securi¬ 
ty  Agency  published  a  similar  hash 
function  c^ed  the  Secure  Hash  Algo¬ 
rithm  (SHA).  followed  by  SHA-l, 
which  today  is  the  most  popular  hash 
function. 

One-way  hash  functions  are  sup¬ 
posed  to  have  two  properties.  First, 
they’re  one-way.  Tl^  means  that  it’s 
easy  to  take  a  message  and  compute 
the  hash  value,  but  it’s  impossible  to 
take  a  hash  value,  and  re-create  the 
original  message.  (By  “impossible"  1 
mean  “can't  be  done  in  any  reasonable 
amount  of  time.")  Second,  they're  col¬ 
lision-free.  This  means  that  it’s  impos¬ 
sible  to  find  two  messages  that  ha<h  to 
the  same  hash  value.  The  cryptograph¬ 
ic  reasoning  behind  these  two  proper¬ 
ties  is  subtle,  and  I  invite  curious  read¬ 
ers  to  learn  more  in  my  book.  Applied 
Cryptagrop/iy  (Wiley.  1995). 

Breaking  a  hash  function  means 


showing  that  either  —  or 
both  —  of  those  properties 
aren’t  true.  Cryptanalysis 
of  the  MD4  family  of  hash 
functions  has  proceeded  in 
fits  and  starts  over  the  past 
decade  or  so.  with  results 
against  simplified  versions 
of  the  algorithms  and  par¬ 
tial  results  against  the 
whole  algorithms. 

This  year.  Eli  Biham  and 
Rafi  Chen,  and  separately 
Antoine  joux,  annoimced 
some  impressive  crypto¬ 
graphic  results  against 
MDS  and  SHA.  Collisions 
have  been  demonstrated  in  SHA- And 

there  are  rumors,  unconfirmed  at  this 
writing,  of  results  against  SHA-I. 

The  magnitude  of  these  results  de¬ 
pends  on  who  you  are.  If  you’re  a 
cryptographer,  this  is  a  huge  deal 
While  not  revolutionary,  these  results 
are  substantial  advances  in  the  field. 
The  techniques  described  by  the  re¬ 
searchers  are  likely  to  have  other  ap¬ 
plications,  and  we’U  be  better  able  to 
design  secure  systems  as  a  result  This 
is  how  the  science  of  cryptography  ad¬ 
vances:  We  learn  how  to  design  new 
algorithms  by  breaking  other  algo¬ 
rithms.  Id  addition,  algorithms  from 
the  NSA  are  considered  a  sort  of  alien 
technology:  They  come  frx)m  a  superi¬ 
or  race  with  no  explanations.  Any  suc¬ 
cessful  cryptanalysis  against  an  NSA  I 
algorithm  is  an  interesting  data  point 
in  the  eternal  question  of  bow  good 
they  really  are  in  there. 

As  a  user  of  cryptographic  systems 


—  as  I  assume  most  of  you  are  —  this 
news  is  important,  but  not  particularly 
worrisome.  MDS  and  SHA  aren’t  sud¬ 
denly  insecure.  No  one  is  going  to  be 
breaking  digital  signatures  or  reading 
encrypted  messages  anytime  soon 
with  these  techniques.  The  electronic 
world  is  no  less  secure  after  these  an¬ 
nouncements  than  it  was  before. 

But  there’s  an  old  saying  inside  the 
NSA:  “Attacks  always  get  better  they 
never  get  worse."  These  techniques 
will  continue  to  improve,  and  probably 
someday  there  will  be  practical  attacks 
based  on  these  techniques. 

It’s  time  for  us  all  to  migrate  away 
from  SHA-L 

Luckily,  there  are  alternatives.  The 
National  Institute  of  Standards  and 
Technology  (NIST)  already  has  stan¬ 
dards  for  longer  —and  barder-to-break 
—  hash  functions:  SHA-224,  SHA-256. 
SHA-384  and  SHA-512.  They’re  already 
government  standards  and  can  already 
be  used.  This  is  a  good  stof^p,  but  I’d 
like  to  see  more. 

rd  like  to  see  NIST  orchestrate  a 
worldwide  competition  for  a  new  hash 
function,  like  it  did  for  the  new  encryp¬ 
tion  algorithm.  Advanced  Encryption 
Standard,  which  replaced  the  Data  En¬ 
cryption  Standard.  NIST  should  issue  a 
call  for  algorithms  and  conduct  a  series 
of  analysis  rounds  where  the  commu¬ 
nity  reviews  the  proposals  with  the  in¬ 
tent  of  establishing  a  new  standard. 

Most  of  the  hash  frmetions  we  have 
and  all  the  ones  in  widespread  use  are 
based  on  the  general  principles  of 
MD4.  Clearly,  we’ve  learned  a  lot 
about  hash  functions  in  the  past 
decade,  and  we  can  start  applying  that 
knowledge  to  create  something  even 
more  secure. 

Better  to  do  it  now,  when  there’s  no 
reason  to  panic,  than  years  from  now, 
when  there  might  be.  O  48821 
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Is  Grid  Computing  Ready 
for  Your  Enterprise? 

Computerworld’s  rr  Executive  Summit  Wili  Guide  Your  Decision 


If  you  re  an  IT  executive*  in  an  end-user  organization, 
apply  to  attend  Computerworld's  upcoming  complimentary 
half-day  summit  on  Gnd  Computing. 

When  done  well,  grid  computing  can  lower  hardware 
costs,  reduce  development  and  operational  expenses 
and  result  in  more  effective  systems  management 
and  use  of  processing  resources.  As  grid  moves  from 
the  realm  of  science  and  research  into  business 
applications,  what  are  the  risks,  tradeoffs,  and  key 
considerations?  How  have  other  businesses  evaluated 
the  opportunities  to  use  grid?  Most  importantly, 

IS  this  emerging  style  of  computing  finally  ready 
for  your  enterprise? 

By  leveraging  the  knowledge  of  industry  experts  and 
the  real-world  experience  and  advice  of  your  IT  peers, 
this  IT  Executive  Summit  will  provide  an  overview  of 
effective  strategies  for  assessing  and  implementing 
grid  technologies. 

•  Complimentary  registration  is  restricted  to 
qualified  IT  executives  only 


Apply  for  registration  today 

For  more  information  or  to  apply,  visit 

www.itexecutfvesummit.com 


Grid  Computing:  Assessing  the 
Reality  and  the  Potential 
Philadelphia  •  September  15,  2004 

Philadelphia  Marriott  ■  1201  Market  Street  •  Independence  Ballroom 


7;45am  to  8;15am 
8;15am  to  8;45am 

8:45am  to  9:15am 
9;  15am  to  9;45am 

9:45am  to  10:15am 
10:15am  to  10:45am 
10:45am  to  1 1:15am 

11:1 5am  to  Noon 

Noon 


Registration  and  Networking  Breakfast 

From  Cutting  Edge  to  Corporate  Stage: 

Grid  Computing  and  the  Enterprise 

Maiyfran  Johnson,  Editor  in  Chief,  Computerworld 

Industry  Analyst  Perspective 

Virtualization  at  CIGNA  Corp.;  Balancing 
Tactical  IT  Goats  with  Business  Strategy 

Ben  Flock.  VP  of  Virtualization  and  Application  Frameworks.  CIGNA 

Refreshment  and  Networking  Break 

Update  from  the  Enterprise  Grid  Alliance  (EGA) 
The  View  of  Grid  Computing  from  Iron  Mountain 

Bill  Olsen.  VP  of  Engineering.  Iron  Mountain 

Key  Considerations  in  Grid  Computing 
Projects:  An  IT  Executive  Roundtable 

Panel  Moderator:  Patrick  TTubodeau.  Senior  Editor 
Computerworld 
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Exclusively  sponsixed  by 

ORACLe' 


'  •••• 


COMlinEliWIMLD 

IT  EXECUTIVE  SUMMIT 

SHDCoimmiie 


Achieve  Business 
Intelligence  Success! 


INTELU6ENCE 

PERSPECTIVES 


The  leading  executive  conference  for: 


September  27-29.  2004  •  JW  Marriott  Desert  Springs  Resort  •  Palm  Desert,  California 


Visionary  &  FBatured  Speafcara 


ANDREAS  S.WEI6END.Ph.D. 

femier  Chie!  Sdentist,  Amazon.com 
FVofessor.  Stanford  Unrversfty 


STEVE  BANDROWCZAK 

SVPandCtO 
E)HL  Express 


DR.  JAN 

ROWLAND.  PhJ). 

VP 

Dm  A  Btadstreel 


RMNeTYlfR 

McaPMdMandCIO 

QiatarChmcN 


Attendees  will  see  solutions  from  companies  including  these  Platinum  Sponsors: 

ORACLE 

(asofWZeW) 

Ssaa 

Media  Sponsors:  MfllBHHl  '"EtoSf.alus 

_ 

For  more  information,  visit  www.biperspectives.com/cw  or  call  1-800-883-9090 

For  sponsorship  information  contaci  Loo  Leqer  at  1-508-820-8212  or  leo.legpi  ■  compiitcrworlci.con 


0830.04 


MUMEMEIIT 


WHO’S  WHO  IN  IT 

The  Thrill  of  Crisis 

You  may  think  that  database 
administration  is  a  skill,  but  DBA 
Gary  Rue  knows  it's  an  art.  In  his 
world,  a  crisis  is  always  just 
around  the  comer.  hioese 


OPINION 

Intelligent  Disobedience 

Executives  with  half-baked  and  hare¬ 
brained  ideas  can  doom  projects  from  the 
start,  and  scope  creep  threatens  the  rest. 
What’s  a  project  manager  to  do?  Gopal  K. 
Kapur  has  the  answer  Just  say  no.  Page  38 


Who  Owns 

m 

When  business  units  fight  to  control  the 
corporate  Web  site,  the  company  loses. 

By  Mary  K.  Pratt 


WORKERS  at  Excel  Switching 
Corp.  spent  months  studying 
successful  Wdj  sites,  mapping 
out  a  strategy  and  implement¬ 
ing  their  own  Internet  vision. 
But  the  plannii^  couldn’t  eliminate  a 
common  problem:  internal  debates. 

For  example,  engineers  at  the  Hyan- 
nis.  Mass.,  company,  which  sells  hard¬ 
ware  to  the  communications  carrier  in¬ 
dustry.  wanted  graphics  and  informa¬ 
tion  to  dominate  the  site,  while  mar¬ 
keters  wanted  a  more  streamlined  ap¬ 
proach.  “There  is  that  push  and  puU,” 
says  Bill  Kelly.  Excel  Switching's  direc¬ 
tor  of  marketing  programs,  adding  that 
the  company  takes  a  democratic  ap-  ' 
proach  in  those  struggles.  “Whoever 
has  the  most  influential  argument, 
we'll  go  with  iC  he  says. 

Technolc^  experts  and  business 
leaders  alike  say  ownership  of  corpo¬ 
rate  Wd>  sites  is  often  up  for  grabs,  as 
departments  fight  for  placement,  space 
and  functionality.  Marketing  uses  the 
Web  site  for  branding,  sales  uses  it  to 
sell,  and  customer  service  uses  it  to 
minimize  inbound  phone  calls.  IT  is 
•  k  foft  to  support  all  the  demands 
—  within  budget,  of  course. 

But  internal  bickering  comes 
at  a  price  —  lost  leads,  delayed 


Petite  Portfolio 

Big  projects  get  all  the  anention. 
but  several  small  projects  can  add  up 
to  big  risks.  Man^ng  them  efficiently 
requires  a  careful  balance  of  rigor  and 
common  sense.  P^33 


launches  aitd  budget  overruns  —  that 
can  cost  the  company  sales,  brand 
recc^ition  and  customer  satisfaction. 

A  2004  report  from  Jupiter  Research 
in  New  York  highlights  the  problem: 
"Often  there  is  neither  an  incentive  for 
units  to  work  together  to  accommo¬ 
date  each  other's  objectives,  nor  a  gov¬ 
ernance  mechanism  to  inaTimiy<»  the 
overall  value  of  the  Web  site  as  a  cor¬ 
porate  asset." 

“The  Web  represents  a  confluence 
among  different  parts  of  the  company." 
says  Jupiter  Rese^h  senior  vice  presi¬ 
dent  David  Schatsky.  who  wrote  the 
report.  He  points  to  a  well-known  cwi- 
sumer  travel  company  that  also  serves 
businesses.  The  company’s  business  di¬ 
vision  wanted  to  promote  its  business- 
oriented  products  on  the  Web  she,  but 
other  divisions  thought  that  would 
puzzle  the  company's  core  clients:  in¬ 
dividual  consumers.  “In  that  situation 
you  need  a  higher  authority  who  can 
make  a  decisimi.”  Schatsky  advises. 

The  Cost  of  DjssensNMi 

Jackie  DiGiovannl  vice  president 
of  marketing  and  -•  .  com¬ 
munication  for  U.S.  iJliJ  Group 
RenskmsatToronR)-  based 
Manulife  Financial  Corp.. 


Pieces  of  Web  Pie 


iojows  bow  costly  those  debates  can 
be  Wben  her  division  redesigned  its 
Web  she  last  year,  the  internal  audit 
department  wanted  last-minute 
changes  to  the  security  features.  Other 
departments  disagreed  with  the  pro¬ 
posal  to  assign  new  numbers  and  ac¬ 
cess  codes  to  the  i.2  million  partici¬ 
pants  who  would  use  the  site,  but  audit 
got  its  way.  DiCiovannl  says. 

The  change  was  a  disaster,  prompt¬ 
ing  fhistrat^  plan  sponsors  and  par¬ 
ticipants  to  bombard  Manulife’s  cus¬ 
tomer  service  department  with  faiu 

‘’What  inlemaj  audit  wanted  ideally 
was  not  work^le  in  the  real  world*’  Di- 
Giovanni  says.  Manulife  ^>cot  SSD0.000 
and  six  months  resotvii^  the  problem. 

Now  ^  tells  team  members  to  bring 
such  disagreements  to  the  attention  of 
the  next  level  of  management.  ‘’We're 
more  aware  of  needing  to  identify  the 
conflicts  and  take  more  to  the  steering 
committee  and  let  it  get  hashed  out  at 
that  level.”  she  says. 

Web  steering  committees  are  typical 
at  more  sophisticated  companies. 
Schatskysays.  A  financial  institution,  for 
pgunplfe  might  have  leaders  from  IT.  the 
mortgage  unit,  the  credit  card  divisioo 
and  custmner  service  on  the  committee, 
with  the  chairman  reporting  to  a  se¬ 
nior  executive. 

&ii  Rick  Swanborg.  president  of 


I  leex  Inc.,  a  research  and  content  man- 
I  agement  firm  in  Boston,  says  simply 
forming  a  steering  committee  isn't 
enough.  The  companies  that  have 
done  a  better  job  at  it  have  really  put  to¬ 
gether  a  specialixed  group  with  people 
from  FT.  marketing  [and]  maybe  some 
people  from  human  resources  who  can 
think  through  the  best  way  to  build  the 
corporate  Web  site."  Swanborg  says. 

He  .suggests  that  a  company  form  an 
entity  that’s  focused  only  on  the  Web 
site  and  that  holds  ultimate  responsi¬ 
bility  and  authority. 

lupiter  Research’s  report  recom¬ 
mends  appointing  "a  single  executive 
with  responsibility  for  maximizing  the 
value  of  the  company’s  Web  site  over¬ 
all."  That  executive’s  job  would  be  to 
make  sure  decisions  support  the  whole 
company's  objectives  rather  than  the 
goals  of  an  individual  department. 

Companies  also  need  to  define  a  pri¬ 
mary.  high-level  purpose  for  their  sites. 
“It’s  crucial  to  getting  to  the  next  step." 
which  is  to  maximize  the  Web  site's  re¬ 
turn  on  investment.  Scfaatsky  explains. 

When  developing  its  initial  site  in 
2001.  New  York-based  Verizon  Com¬ 
munications  Inc.  defined  it  first  as  a 
single  door  to  the  corporation  and  sec¬ 
ond  as  customer-focused,  says  Maria 
Malicka.  executive  director  of  e-com- 
merce  and  call  management  "We 
gained  alignment  around  that,  so  we 
didn’t  experience  infighting  or  major 
disagreements.”  she  explains. 

Verizon  also  institute  an  e-com- 
mcrce  council  of  vice  presidents  and 
directors  to  address  corporate- level 
questions  and  develop  high-level 
strategies  for  the  site.  And  the  compa¬ 
ny  has  stakeholder  forums,  so  leaders 
from  difTereni  departments  can  hear 
and  weigh  in  on  proposed  Web  site 
j  changes,  “Everyone  was  at  the  table 
,  from  the  beginning."  Malicka  says. 

These  steps  haven’t  eliminated  all 
debates  about  the  Web  site,  she  says. 

But  they're  crucial  to  resolving  depart¬ 
mental  conflicts  so  that  the  outcomes 
are  best  for  the  company. 

"We  are  all  in  alignment  on  its  goals, 
and  if  there  are  any  disagreements,  we 
have  forums  for  discussion  and  negoti¬ 
ations.  And  when  we  focus  on  goals 
and  customers,  we  don't  have  any  Is¬ 
sues  that  we  can't  resolve,"  she  says. 

A  Clear  Strategy 

Randy  Gravlin,  president  of  Business 
Innovation  Inc,,  a  technology  consult¬ 
ing  firm  with  oflices  in  Woburn.  Mass., 
and  Montreal,  says  that  without  a  clear 
strategy,  companies  end  up  with  "dus¬ 
ters"  such  as  IT.  business  and  market¬ 
ing  that  ulrimately  have  to  come  to- 


Rrst  Among  Equals 

Companies  often  put  functionality  or  tme 
to  market  hrst  «hen  it  comes  to  their  cor¬ 
porate  Web  sites,  but  they  should  put  se- 
curity  at  the  log  of  the  list,  says  Jonathan 
6.  Gossefs.  pnmdeni  of  SystemExperts 
Corp..  a  Sudbury.  Mass  -based  provider  of 
network  security  catnsuttmo  services  with 
nine  offices  throughout  the  U.S. 

That  means  the  seorty  team  must 
rank  as  a  maior  stakeholder  as  Sites  are 
burft  and  revised. 

'Security  should  be  pan  ol  the  overall 
plan  That's  early:  thals  before  anything 
has  been  written.*  Gossels  says. 

CornpaniK  should  have  gwdtngprrno- 


pies  when  it  comes  lo  IT  security,  and 
those  prinaples  must  apply  to  Vteb  sites, 
says  Bala  Iyer,  an  assislant  professor  n  Ihe 
mkirmatlon  systems  department  at  Boston 
Unrversrty's  School  of  Management. 

Wthoul  those  guiding  pnnaples.  com¬ 
panies 'could  drop  the  ball  on  security*  as 
they  build  their  Web  systems.  Iyer  says. 
Still,  he  bekeres  marry  companies  push 
security  down  on  their  list  of  pnorlhes. 

Gossels  recommends  that  companies 
empower  workers  to  Wow  the  whistle 
when  something  isn't  being  buH  seemly. 
The  ownership  of  sacurmo  the  firm  6 
shared  by  everybody  m  the  firm  &iery- 
body's  reputation  suffers  It  the  cargo  goes 
out  without  shutting  the  door  * 

-kbfyKPrati 


getber  to  build  a  successful  Web  site. 
■'We've  heard  it  many  times:  This  is 
going  to  be  very  hard.  How  do  you 
bring  these  groups  together  to  build  a 
consensus?*  But  it  is  doable.”  be  says. 

Business  Innovation  worked  with 
Sl  Louis-based  Upbeat  Inc.  wben  the 
company  spent  oeaiiy  SI  million  re¬ 
vising  its  Web  site  earlier  this  yeat 
Carla  M.  Russa  Upbeat's  vice  presi¬ 
dent  of  material  management  and  MIS. 
says  the  site  was  reworked  to  integrate 
it  with  back-oflice  functions,  collect 
better  data  and  drive  more  trafllc. 

The  marketing  department  at  Up¬ 


beat.  which  manufactures  and  markets 
indoor  and  outdoor  products  for  busi¬ 
ness  and  government  properties,  con¬ 
trolled  the  Web  site  prior  to  its  re¬ 
design,  Russo  says.  But  marketing  also 
oversaw  the  production  of  5  million 
catalogs  aimually,  and  the  Web  site 
had  to  compete  for  limited  resources. 
Sometimes  that  meant  Russo  and  the 
webmaster  were  overruled. 

Russo  remembers  one  in«an.^ 
where  she  pushed  for  photos  to  corre¬ 
spond  with  each  item  available  for  sale 
on  the  site,  arguing  that  customers 
want  to  see  exactly  what  they’re  buy¬ 
ing.  Marketing  said  no.  citing  limited 
time  and  resources. 

But  with  the  redesign.  Upbeat’s  CEO 
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agreed  with  Russo  and  ordered  new 
I  photos.  Russo  sees  this  as  one  sign  of 
'  the  company's  new  focus  on  the  Web. 

"Prior  to  this  redesign,  the  Web  was 
there,  but  I  don't  know  if  anyone  was 
really  treating  it  as  a  channel"  she  says. 
There  was  no  clear  marketing  plan, 
and  there  were  no  specific  goals,  “No¬ 
body  was  really  driring  it,"  Russo  says. 

Russo  now  sees  IT  and  maricecing  as 
having  more  equal  standing,  which 
means  better  decisions  for  the  compa¬ 
ny  overall.  Upbeat  even  plans  to  add  a 
new  position  staffed  by  someone  who 
has  both  a  tech  background  and  mar¬ 
keting  know-how  to  help  bridge  the 
two  departments  that  run  its  site. 

"Unlike  other  channels  that  can  be 
owned  by  one  department,  the  W^ 
site  b  a  unique  animal  It  just  plays  too 
interactively  into  other  areas,”  she  says. 
"It’s  the  one  channel  where  there  has 
lo  be  a  clear  collaboration."  O  48606 
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Portfolio 

Managing  small  projects  requires 
a  careful  balance  of  rigor  and 
flexibility.  By  Thomas  Hoffman 

PKOIECT  MANAGEMENT  areassuchasteslingandqualityassur- 

eEpertswiUteUyouthatlT  ance,  says  Voitadon.  And  even  if  IT 
depaitmnBare  doinga  departments  have  fairly  mature  project 
better  )Ob  thM  *ey  used  management  disciplines  in  place.  They 
to  tn  delhremur  Kio  nmi.  _ ^ u  .  .a  ^ 


PROJECT  MANAGEMENT 

eqjerts  will  tell  you  that  IT 
departments  are  doing  a 
better  job  than  they  used 
to  in  delivering  big  proj¬ 
ects  on  time  and  within  budget  But 

shift  the  discussion  to  smaller  perfects 

—  those  valued  at  $250,000  or  less  — 
and  their  confldence  starts  to  dwindle. 

“There's  a  gap  when  ft  comes  to  small 
projects  and  the  due  diligence  that 
should  be  applied  to  them."  says  Margo 
Visitadon.  an  analyst  at  naTnhriHg.n 
Mass.-based  Forrester  Research  Inc. 

With  small  projects,  IT  project  man¬ 
agers  often  spend  less  time  on  critical 


areas  such  as  testmg  and  quality  assur¬ 
ance,  says  ^^tsitacion.  And  even  if  IT 
departments  have  fairiy  mature  project 
management  discipline  in  place,  “they 
apply  the  practices,  but  the  rigor  goes 
down,"  she  says. 

Other  tasks  that  IT  managers  rend 
to  downplay  on  small  projects  include 
documenting  the  business  objectives, 
dennii^  requirements  and  managing 
changes,  consultants  say. 

While  individual  small  projects  may 
seem  less  signiftcant.  they  add  up.  This 
year,  for  example,  the  U.S.  Food  and 

Drug  Administration  has  28  projects  ft 

defmes  as  "major"  tm  tap  that  cost  at  I 


least  $5  n^on  per  year  or  $20  million 
over  the  life  of  the  project  But  the  50 
to  60  “norunajor"  projects  in  the  pipe¬ 
line  this  year  represent  $40  million  of 
the  agency’s  $200  million  IT  project 
budget  says  Rod  Bond,  director  of 
strategy  and  planning  at  the  FDA  in 
Rockville.  Md. 

What  to  Keep 

Project  managers  understand  that  they 

can  be  more  flexible  with  small  proj¬ 
ects  but  critical  requirements  remain. 

I  At  Capital  One  Financial  Corp., 
effective  small-project  management 
starts  with  defining  the  criteria  for 
a  small  project  —  those  valued  at 
$50,000  or  less  —  and  establishing  a  set 
of  requirements  that  have  to  be  met 
For  instance,  the  manager  of  a  wwaii 
project  at  McLean.  Va.-based  Capital 
One  will  place  greater  emphasis  on 
how  changes  directly  affect  end  users 

and  focus  less  on  technical  change  I 

management  issues,  says  Ray  Frigo, 
vice  president  of  corporate  technology 
management  at  the  credit  card  issuer. 

Since  it  began  refining  its  project  de¬ 
livery  approach  three  years  ago.  Capi- 
tal  One  has  scaled  back  documentation 
requirements  for  smaller  projects  so 
they  don’t  become  too  cumbersome  to 
manage,  says  Friga  The  tailored  small- 
project  methodology  has  helped  the 
company  ounplete  projects  10%  to  15% 
Caster  this  year,  he  says.  . 

The  FDA  uses  IT  portfolio  manage*  | 
ment  software  from  Portland,  Ore.-  j 
based  ProSight  Inc.  to  help  ensure  that  1 
Mnail  projects  go  through  much  of  the 

rigor  that  bigger  projects  da  Project  i 
managers  design  a  work  breakdown  t 

schedule  and  a  budget  plan  for  each  c 
phase  ofevery  project,  says  Bond.  $ 

WhattoOrop  ^ 

But  Other  big-project  requirements.  q 

such  as  documenting  ea^  step,  can  be  p 
waived.  “For  a  $25,000  project  you'd  si 

spend  more  time  documenting  tKnn 

you  would  building,"  Bond  explains.  n 

At  Russell/MeUon  Analytical  Ser-  al 

vices  LLC  managers  prioritize  and  o 

rank  projects  ofall  sizes  with  the  help  tl 
ofa  project  management  office  (PMO)  pi 

that  was  created  four  years  aga  says 
I  Tammy  Reuter,  manager  of  strategic  sz 

initiatives  at  the  Tacoma.  Wash.-  ci 

based  provider  of  investment  ag 

analysis  services.  ^ 

Tte  PMO  mandates  that  project  aw 

managers  develop  a  business  case  for  _ 
each  effort  r^anlless  of  size,  M 

want  to  make  sure  that  the  smaller  ^ 

projects  we  pick  are  the  most  critical,"  ^ 

says  Reuter,  whose  group  uses  portfo- 
Ik)  management  software  from  Belle-  V 
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vue,  w^-based  Pacific  Edge  Soft¬ 
ware  lac. 

But  certain  efforts  don't  meet  the 
threshold  for  projea  rigor.  Fot  exam¬ 
ple,  if  the  company  has  a  $20,000  soft¬ 
ware  enhancement  to  complete.  'Ve 
don’t  do  much  management  of  that 
ocher  than  determining  which  tweaks 
I  will  be  done  flrst*' Reuter  says. 

A  business  case  also  has  to  be  made 

for  projects  of  all  sizes  at  Brown  Broth¬ 
ers  Harriman  &  Coi.  a  private  bank  in 
New  York.  The  difference  is  that  a 
smaller  project  tnigbt  not  require  the 

same  amount  of  detail  "Maybe  a  two- 
page  business-requirement  document 

instead  of  a  50-page  document."  says 
Rick  Berk,  the  hank’s  dO. 

The  bank's  senior  management 
monitors  all  projects  using  a  combina¬ 
tion  of  weekly  and  monthly  reports 
developed  with  portfolio  management 
software  finm  Redwood  Cfty.  Calif- 
based  Niku  Corp. 

Urge  projects  still  command  more 
quality  assurance  staffers  than  fawaii 
projects.  Berk  says.  But  to  ensure  that 
smaller  projects  are  held  to  a  consis¬ 
tent  standard,  the  bank's  IT  staff  has 
written  test  scripts  for  them.  That  en¬ 
ables  the  bank  to  perform  futer  and 
more  automated  regressiem  testing 
that’s  less  of  a  burden  for  smaller 
projects."  says  Berk. 

IT  shops  vary  in  their  approach  to 
small  projects,  but  Forrester’s  Visiu- 
cion  says  sman  project  managers 
agree  on  one  thing:  “You  can  scale 
down  the  rigor,  but  you  can’t  throw 
away  the  requiranents."  O  48660 

araifaii 

ClwMtt  MNaii,  itai*  cm  njor 
to  proiBcis  of  Sly  size: 


MIDDLEWARE  IS  IBM  SOFTWARE.  Fans,  broadcasters, 
even  players,  are  accessing  every  shot  at  PGA  TOUR* 
events  online  -  in  real  time.  The  scalable  multiplatform 
technology  of  IBM  DB2  integrates  and  manages 
information,  allowing  SHOTLink.  the  PGA  TOUR’S  ball¬ 
following  technology,  to  uplink  and  downlink  every  shot, 
run  all  the  numbers  and  tell  the  entire  story  -  hole  by  hole. 


1.  Player  anempts  30-foot  chip. 

2.  Curator  measures  distance. 

3.  Stats  entered  into  PDA. 

4.  SHOTLink  truck  transmits  data. 

5.  Broadcaster  broadcasts  a  “birdie!” 
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Of  Crisis 

■  DBAs  are  often  the 
last  to  be  involved  in 
planning  but  the  first  to 
be  called  when  things  go  wrong. 


THIS  IS  THE  fIRST  IN  A  PEfflQOIC  SERIES  EXPlORINO  HOW  n  PEOPLE  SEE  THEIR  JOBS 


What  h  «  datahtt*  administrator? 

Someone  who  maintains  and  supports 
the  database  engine.  In  database  ad¬ 
ministration.  there  are  the  people  on 
the  design  and  architecting  of  the  data¬ 
base  —  the  logical  side  —  and  then 
there's  the  physical  component,  where 
we  take  the  logical  and  make  it  into  the 
physical  and  administer  the  database 
after  it's  up  and  running.  The  area  that 
1  manage  is  more  on  the  production 
and  physical  side  of  database  support. 

Whit  it  ttM  meet  importairt  centribtrtion 
makm,  and  hew  do  you  make  it?  Our 

most  important  contribution  is  to  keep 
the  database  running.  It’s  an  on-call 
function;  you  never  know  what  might 
happen.  Half  the  branch  was  up  all 
night  last  night  restoring  a  database  be¬ 
cause  of  a  failure.  Data  recovery  is  very 
important,  and  so  is  performance  tun¬ 
ing  and  problem  solving.  In  IT.  you  tend 
to  start  at  the  back  end  and  work  out  to 
see  where  the  problem  lies,  so  general¬ 
ly.  we’re  one  of  the  first  areas  that  will 
be  contacted  when  a  problem  occurs. 

What  is  tht  mo«t  important  IT  skin  or 
aptHudo  you  nood  to  do  your  job?  We 

need  to  understand  how  the  database 
engine  works.  We  need  to  understand 
the  technical  components  of  the  appli¬ 
cation  environment,  the  processes 
within  the  environment  and  the  rela¬ 
tionships  of  ail  the  people  surrounding 
the  environment.  TTiere's  science,  but 
there's  art  as  well. 

What  is  tho  moot  important  “soft"  sUM  or 
porsonaWy  eharaetoriitk  you  flood  to  do 

yooriak?  We  have  to  be  good  sounding 
boards.  We  have  to  help  others  identify 
and  solve  their  own  problems.  They  tell 
us  what  they  think  is  wrong,  but  we  have 
to  get  them  to  see  outside  of  where  they 
think  the  problem  is,  because  if  they 
really  knew-,  they  wouldn't  be  ulking  to 
us  in  the  first  place.  A  good  database 
administrator  has  to  see  the  relation¬ 
ships  among  the  technology  pieces,  the 
people,  the  systems.  We  have  to  see  the 
bigger  picture  and  relate  it.  Sometimes 
wc  have  to  take  a  very  technical  piece 


and  translate  it  to  people  at  all  levels  of 
technical  knowledge.  That’s  hard  to  do. 

What  is  tht  Uggast  misconeuptom  about 

vfhat  you  do?  We’re  a  very  tactical 
group  —  we  have  to  be.  But  there's  a 
strategic  part  of  what  we  do  so  we  can 
apply  the  tactical  parts  appropriately. 
For  example,  a  developer  says,  “Create 
these  tables."  But  for  us  to  really  do  a 
good  job,  we  need  to  know  why.  We 
need  to  know  how  and  when  those 


tables  are  going  to  be  accessed.  We 
need  to  understand  the  system  so  we 
can  apply  appropriate  security.  We  also 
have  to  understand  what  type  of  data 
recovery  scenarios  we  need  to  address, 
how  and  when  to  do  the  backups  and 
where  they  will  be  stored.  And  we 
need  to  go  through  all  types  of  scenar¬ 
ios  to  adequately  recover  that  daubase. 

Whtf  do  you  Ikt  b«t  about  yuur  iob?  The 

people  we  work  with.  The  systems  peo¬ 


ple.  developers  —  they're  all  problem 
solvers.  TTiey’re  all  smart,  creative  IT 
people.  And  being  in  support,  a  crisis  is 
always  just  around  the  corner.  1  like  the 
thrill  of  the  crisis.  I  like  being  put  on  the 
spot  to  find  a  way  to  solve  a  problem. 

What  do  you  liko  loost?  I  don't  like  to 
take  care  of  problems  that,  if  I'd  gotten 
enough  information  upfront  or  the 
right  information,  we  could  have  dealt 
with  it  then.  I  don't  like  to  put  some¬ 
thing  in  production  and  then  have  to 
fix  it  because  future  possibilities  hadn't 
been  considered. 

What  shouM  IT  paopia  know  about  your 
rolo?  Today's  developers  have  data¬ 
bases  on  their  desktops,  so  they  think 
they're  mini-DBAs.  When  we  get  in¬ 
volved,  it’s  always  after  the  implemen¬ 
tation.  Lots  of  issues  could  have  been 
addressed  if  we  had  been  involved  ear¬ 
lier  in  the  development  process.  Also, 
we  do  have  a  recovery  role,  and  we 
should  be  asked  about  the  recoveiy- 
possibilities  when  a  database  goes 
down.  IT  people  sometimes  think  they 
know  how  to  recover,  so  generally  we 
get  brought  into  it  because  they  have 
recovered  incorrectly. 

What  ihouM  businass  paopia  tuiow  about 
your  rolo?  Business  people  think  IT 
can  do  anything,  but  they  need  to  know 
that  there  is  a  cost  associated,  and 
sometimes  the  cost  is  too  high  to  im¬ 
plement  cenain  features.  There  are 
still  priorities  you  have  to  set. 

What  wouM  anabk  you  to  do  your  job 

bottor?  Having  more  database  tools 
and  early  interaction  during  the  devel¬ 
opment  process. 

H  you  wort  not  a  data  architocL  what 
would  you  bo?  A  detective.  Trying  to 
dig  information  out  of  people,  the  abili¬ 
ty  to  look  at  disparate  pieces  of  infor¬ 
mation  and  apply  them  appropriately 
to  determine  how  an  event  happened 
—  you  have  to  be  a  little  bit  of  a  detec¬ 
tive  as  a  DBA. 

How  dooa  tho  futuro  look  for  your  rolo? 

1  think  of  us  as  the  hub.  The  business 
user,  the  developer,  the  operations  per¬ 
son.  the  systems  person  —  they  all  re¬ 
late  to  the  database  in  some  way.  Our 
job  changes  slightly  with  new  technol¬ 
ogy,  but  I  think  a  DBA  will  be  a  very, 
very  important  role  for  years  to  come. 
And  besides,  everybody  needs  some¬ 
one  to  point  the  finger  at.  CT  40695 


Interview  by  Kathleen  Melymuka. 

Rue  can  be  contacted  at  gary.nje@Jty.gov. 
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lists  such  as  ‘Ten  Questions 
the  CIO  Must  Ask  the  CEO." 

Schubert’s  work  draws  upon 
insights  from  several  leading 
management  gurus,  including 
Han'ard  Business  School’s 
Clayton  M  Christensen  and 
tom  Seely  Brown.  This  book 
■  a  good  read  for  am  CIO 
^  ho's  trs-ing  to  thrive  or  .sim¬ 
ply  surs'ive. 


Kriow  Your  Enemy:  learning 
About  Security  Threats 

by  The  HoneynetPwteaiA(3^-^- 
Wesley  2004  768 pages.  S4999) 
Founded  in  October  1999. 

The  Honeynet  Project  (w-ww. 
honeynet.ofg)  is  a  nonprofit 
research  organization  of  secu- 
riri'  professionals  who  built  a 
computer  network,  wired  it 
with  sensors,  put  it  up  on  the 
Internet  and  recorded  whar 


size  them  as  core  principles. 

Instead.  Highsmith  effec¬ 
tively  cites  forward-thinking 
project  management  princi¬ 
ples  that  have  been  espoused 
by  his  peers  and  pulls  them 
into  a  cohesive,  usable  ap¬ 
proach.  He  also  goes  to  great 
lengths  to  explore  the  single 
most  critical  component  of  ef¬ 
fective  project  management: 
people. 


Recent  man¬ 
agement  books 
provide  tips 
on  IT  gover¬ 
nance,  CIO 
survival,  agile 
project  man¬ 
agement  and 
understanding 
hackers. 


IT  Governance:  How  Top 
Performers  Manage  IT 
Decision  Rights  for  Superior 
Results,  by  Peter  Weill ar)d  Jeanne 
W.  Ross  (Harvard  Business  School 
Press.  2004: 269 pages.  $35) 

IT  governance  is  a  pressing 
issue  these  days,  particularly 

since  technolog\’  _ 

spending  accounts  for 


IT  governance  committee. 

While  the  authors  acknowl¬ 
edge  that  there  is  no  one-size- 
fits-all  approach  to  effectit’e 
IT  governance,  their  research 
finds  that  companies  that  are 
focused  on  either  profits  or 
growth  tend  to  have  similar 
governance  models. 

The  book  is  aimed 
at  for-profit  compa¬ 
nies,  but  it  has  a  chap¬ 
ter  devoted  to  govern¬ 
ment  agencies  and 
not-for-profits.  This  is  highly 
recommended  reading  for 
anyone  who's  struggling  with 
these  issues. 


up  to  half  of  all  capital  BOUimP 


I  CIO  Survival  Ouid«:  The 
j  Roles  and  Responsibilities  of 
the  Chief  Information  Of^ 

by  Kart  D.  Schubert  (John  W4eyi 
Sons.  2004. 294 pages  $45)  This 
up-to-date  how-to  book  is 
useful  for  seasoned  CIOs  as 
weU  as  newcomers  who  have 
recently  transitioned  into 
the  role. 

Schubert,  a  former  chief 
technical  officer  at  Dell  Inc 
who’s  currently  chief  operat¬ 
ing  officer  at  network  storage 
provider  Zambeel  Inc.,  offers 
readers  a  logical  approach  to  i 
the  CIO’s  role  and  challenges.  I 
including  tips  on  building  re¬ 
lationships  with  company  ex-  ' 
ecutives.  business  partners  I 

and  other  key  constituents.  I 

Particularly  useful  are  check-  ' 


expenditures  at  many  Qn 
companies.  But  few  >U1 

managers  can  accu-  - 

rately  describe  IT  governance 
within  their  companies,  much 
less  quantif>'  the  impact  of 
good  governance  on  their  bot¬ 
tom  lines. 

Weill  and  Ross,  research  sci¬ 
entists  at  the  Center  for  Infor¬ 
mation  Systems  Research  at 
MIT's  Sloan  School  of  Man¬ 
agement.  do  just  that  and 
more.  For  in- 

a  stance,  a  CISR 

global  compa¬ 
nies  reveals  that 

companies  with 
top-DOtch  IT 


AgHe  Project  Manaoement: 
Creating  Imovatlve  Products 

byJimHighsnm(Adtison-Wesley. 
2004. 277 pages  $34.95).  Al¬ 
though  agile  software  devel¬ 
opment  has  been  practiced 
for  ses’eral  years,  many  com¬ 
panies  continue  to  be  ham¬ 
pered  by  process-laden,  top- 
dowm  project  management 
approaches.  Enter  agile  proj¬ 
ect  management,  a  more 
responsive  and  flexible  ap¬ 
proach  to  project  manage¬ 
ment.  This  approach  places 
more  authority  in  the  hands  of 
project  leaders  and  line  work¬ 
ers  who  are  doing  the 


happened.  (The  actual  IP  ad¬ 
dress  isn't  published  and 
changes  regularly.)  Hackers’ 
activities  are  recorded  as  the>- 
occur  how  they  tr>'  to  break 
in.  when  they're  successful 
and  what  they  do  once  the>’ 
break  in. 

This  is  a  fairly  technical  read 
with  quite  a  bit  of  information 
about  how  honc>-nets  work  and 
what  goes  into  both  Unix  and 
Wmdows  computer  forensics. 
But  the  authors  also  provide  a 
detailed  sociological  analysis 
of  the  while-hat  and  black-hat 
hacker  communities,  includ¬ 
ing  an  extensive  examination 

r  their  motives.  O  48699 

—  T?K>fmis  Hoffman 


execut- 
while  concentrating  on  de¬ 
livering  customer  value. 

Don't  assume  that  agile 
project  management  is  “PM 
Hte."  In  Highsmith's  view, 
agile  project  management 
doesn't  dismiss  the  impor¬ 
tance  of  effective  quality  as¬ 
surance.  documentation  or 
testing,  but  it  does  de-empha- 


be  authors 
ighly  de- 
what  IT 


^preaches  used  to 
govern  IT  and 
offer  advice  on 
how  to  set  up  an 
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EXEC  TRACK 


CXONamesCTO 

ALOKBcnUhttbMnriMTwd 
cMaf  technology  officar  at  CXO  I 
Systems  in  WaMham.  Mas.  In  his  ' 
provtowrateasyteapmsidontof  j 
angmaring.  Batri  M  the  dtvai- 
opnwnt  of  tha  company’s  man- 
agamant  dashboard  products.  Ha  ; 
oHoundad  Dashboard  Systems.  , 
which  is  now  CXO  Systems. 


Transplace  Picks 
Cashman  for  CTX) 

mr  CASMUN  hu  lolMd  Trans- 
piaca  he.  as  CTO.  Plano.  Taias- 
basad  Tranapfaca  is  a  trsnsporta- 
tten  iogislica  fflanagamant  pro- 
<ddir.  ftwdouafy.  Cashman  was 
CIO  at  Ruan  Transportation  Mvf 
agsmant  Systems. 


Carver  to  Head  IT 
Unit  at  Dana  Corp. 

BRUCE  C.  CARVER  te  now  CtO  at 
Dana  Coip..  M  aiitemotteo  prod¬ 
ucts  mmifacturir  in  Tofado. 
OMo.ft«idoiaiy.Carvirwasdtei- 
•ion  CIO  lor  ftptiCo  BoviragM 
and  Foods,  a  unN  of  hpaCo  he., 
and  CIO  at  Tha  RayneUa  and 
fhynofds  Co.,  a  providar  of  auto- 
mottraaoRwara. 


Certoma  to  Lead  rr 
At  Wachovia  Unit 
sow  caniMt  hM  Mnd  Chw- 

htte  llC.-basad  Whchovla  Corp. 
asOOofttteeampany'soorpo- 
rateandlnyaglniinthawh.Pra¥f 
oualy.  ifw  was  a  \det  praoMtnt  in 
tha  gUtel  adaa  technohgy  orga* 
fdaion  al  eoUman  Sachs  4  Co. 


Hoieman  Moves 
To  Sentient  Jet 


aMDHOiaiMta.b>nnmd 
■fen  piaMml  of  IT  it  SmiM 
lnc,nlfenn«l;Miii  hnndpii- 
IK  annfen.  IWtnM  oti  bi 
rontnnfeUn  for  ipnefelly  lidinol- 
o«irinoNlaiKirCIMinde,l 
cortoilocbnofeiir.HoMoprafe- 
oilolyCWotllonlloraniuiiln 
ConMtife  Mioo. 


GOPAL  K.  KAPUR 


Intelligent 

Disobedience 


Discussions  with  project  managers  about 
the  key  causes  of  failed  and  challenged  proj¬ 
ects  always  raise  two  primary  issues:  half- 
baked  or  harebrained  ideas  becoming  proj¬ 
ects,  and  excessive  scope  creep. 

Traditionally,  senior  management  is  charged  with 
conceiving  ideas  that  will  drive  the  organization  to- 


ward  profitability  and  in 
dustry  leadership.  Hence, 
there  is  immense  pressure 
on  executives  to  deliver  in¬ 
novative  ideas  that  can  be 
turned  into  products  and 
services  for  profit  and 
competitive  advantage.  Un 
fortunately,  these  visions 
are  often  intertwined  with 
any  number  of  hal  f-baked 
and.  at  times,  harebrained 
ideas.  When  half-baked 
and  harebrained  ideas  get 
communicated  to  them, 
many  project  managers 
don’t  object  because  of  a 
culture  of  not  questioning 

the  senior  people.  The  gen-  _ 

era!  thinking  is.  “How  could  they  be 
wrong?" 

Another  big  contributor  to  failed 
and  challenged  projects  is  the  in¬ 
evitable  scope  creep.  We  all  know  that 
at  times  customers  can  be  unreason¬ 
able  and  unrealistic  in  their  expecta¬ 
tions,  but  they’re  also  subject  to  exter¬ 
nal  pressures  they  can’t  control  ~ 
government  regulations,  competitive 
positioning,  emerging  opportunities 
and  the  classic  “silver  buUet"  syn¬ 
drome,  also  known  as  Management  by 
Magazine.  (This  occurs  when  the  cus¬ 
tomer  reads  an  article  on  an  airplane 
while  35,000  feet  over  Kansas  and 
forms  a  new  vision.) 

But  forcing  the  team  to  agree  to 
continuous  scope  creep  is  clearly  not 
the  solution.  A^  you  get  hit  with  a 
double  w^ianuny  when  projects  are 
built  around  half-baked  ideas.  A  half- 


baked  idea  that  turns  into : 
project  with  extensive 
scope  creep  is  a  nightmare 
What  can  project  man¬ 
agers  do  to  minimize  these 
problems?  Simply  stated: 
Learn  to  say  no. 

Of  course,  project  man¬ 
agers  may  feel  that  they 
don’t  have  the  ability  or 
wherewithal  to  say  no  and 
that  their  only  option  is  to 
do  as  they’re  told,  even 
though  they  know  that  the 
outcome  ntay  harm  the  or¬ 
ganization.  This  begrudg¬ 
ing  compliance  is  an  unfor¬ 
tunate  attitude  in  any  cir¬ 
cumstance.  In  the  extreme 
case,  it  can  lead  to  disaster. 

This  is  where  the  concept  of  intelli¬ 
gent  disobedience  comes  into  play.  In¬ 
telligent  disobedience  is  a  trait  clearly 
illustrated  by  guide  dogs  for  the  blind: 
At  an  intersection,  based  on  traffic 
sounds  and  a  general  sense  of  safety, 
the  blind  person  initiates  the  move  to 
cross  the  street,  giving  a  signal  to  the 
dog.  If  traffic  is  blocking  the  cross¬ 
walk.  however,  the  guide  dog  will  dis¬ 
obey  the  move-forward  command.  In 
guide-dog  training  lingo,  intelligenc 
disobedience  is  the  dog’s  response 
when  It  senses  that  the  path  ahead  is 
dangerous.  It  disobeys  even  though 
the  owner  wants  to  proceed. 

Now  consider  a  different  scenario: 
The  dog  disobeys  the  owner’s  com¬ 
mand  because  it  sees  traffic  blocking 
the  intersection,  “rhe  dog’s  owner  pun¬ 
ishes  the  dog  for  its  disobedience  until  ' 


the  dog  finally  proceeds.  You  can 
imagine  the  consequences. 

It’s  important  to  note  that  dog  own¬ 
ers  are  trained  to  trust  their  guide 
dogs  because  the  two  have  to  work  as 
a  team  for  the  protection  and  safety  of 
the  owner. 

The  essence  of  the  intelligent  disobe¬ 
dience  behavior  as  it  applies  to  project 
managers  is  to  say  a  firm  “no"  to  the 
demands  of  executives  and  customers 
when  such  demands  will  put  the  proj¬ 
ect.  and  hence  the  organization,  in 
harm’s  way.  Humans  are  supposed  to 
be  smarter  than  dogs,  but  it’s  amazing 
how  difficult  it  is  to  teach  humans  to 
exercise  intelligent  disobedience. 

Intelligent  disobedience  requires 
empowermeni  and  trust.  It’s  important 
that  project  managers  be  well  trained 
in  reading  the  danger  signals  and  em¬ 
powered  to  push  back  when  they  be¬ 
lieve  that  a  proposed  project  will  put 
the  oiganization  in  harm’s  way  or  that 
the  requested  scope  creep  will  create 
undue  risk.  Project  sponsors  and  cus¬ 
tomers  have  to  learn  to  trust  their 
project  managers  to  do  the  right  thing. 

Unforttinately.  project  managers 
can't  change  the  culture  on  their  own 
because  many  lack  the  political  chips 
and  the  skill  to  negotiate  with  over¬ 
bearing  executives  and  unreasonable 
customers.  They  need  the  sponsor's 
help  and  support 
For  intell^grat  disobedience  to  be¬ 
come  accepted,  sponsors  must  work  to 
establish  an  environment  of  open  and 
forthright  communication  with  mist 
and  respect  for  their  project  managers. 

Whether  project  managers  react 
with  intelligent  disobedience  or  be¬ 
grudging  compliance  largely  depends 
on  the  organization’s  culture.  Are  proj¬ 
ect  managers  in  your  oiganization  en¬ 
couraged  to  practice  intelligent  dis¬ 
obedience?  <1 48678 
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Got  Questions  About 
Network  Consolidation? 

Computerworld’s  IT  Executive  Summit  Has  the  Answers 


If  you’re  an  IT  executive*  In  an  end-user 
organization,  apply  to  attend  Computerworld’s 
upcoming  complimentary  half-day  summit 
on  Network  Consolidation. 

CIOs  and  senior  IT  executives  are  finding 
that  consolidating  high-performance  networks 
can  play  a  key  role  In  improving  business 
application  performance  while  significantly 
reducing  operational  costs. 

The  proliferation  of  network  capacity  and 
related  storage  and  server  infrastructure 
presents  a  daunting  challenge  for  today’s 
enterprises,  many  of  which  are  positioning 
themselves  for  growth  yet  still  seeking  to 
reduce  IT  costs  where  feasible. 

By  leveraging  the  knowledge  of  industry 
experts  and  the  real-world  experience  and 
advice  of  your  IT  peers,  this  IT  Executive 
Summit  will  provide  an  overview  of  effective 
strategies  for  consolidating  and  connecting 
networks  and  data  center  applications. 

•Complimentary  registration  is  restricted  to 
qualified  IT  executives  only. 


Apply  for  registration  today 

For  more  information  or  to  apply,  visit 
www.itexecutivesummit.com/nc 


Streamlining  Networks  and  Data  Centers: 

The  Business  Benefits  of  Consolidation 

Dallas  •  September  22,  2004 

Renaissance  Dallas  •  2222  Stemmons  Freeway  •  Grand  Ballroom 

7:30am  to  8  00am  Registration  ana  Networking  Breakfast 

8:00am  to  8:15am  Rebuilding  the  IT  Foundation 

Maryfran  Johnson  Editor  m  Chief  Cornputerwo^'o 

815am  to  8  45am  Consolidation  and  the  Data  Center; 

Boosting  Business  ^rformance 
and  Application  Availability 

Richard  Vtliars,  Vice  President,  Storage  Systems 
Research.  IDC 


8  45am  to  9 15am  User  Case  Study  —  Hilton  Hotels: 

Considering  the  Next  Generation  Network 

Damien  Bean,  Vice  l^esideni.  Corporate  Systems 
Hilton  Hotels 


9 15am  to  9  45am  User  Case  Study  -  MasterCard  International 

Jerry  McEl^’atton,  Senior  Executive  Vice  Presdent, 

Global  Technology  and  Operat'orrs  MasterCard  international 

9'45am  to  10.15am  Refreshment  and  Networking  Break 

10 15am  to  10:45am  Infrastructure  Makeover: 

Moving  the  U.S.  Air  Force  Toward 
Network-Centric  Services  Delivery 

Brigadier  General  Brad  Sutler.  Deputy  Chief  information 
Officer,  U  S  Air  Force 


Selected 

speakers 

include: 
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Maryfran  Johnson 
Editor  in  Chttf, 
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Jerry  McElhonort 
Senior  Exeeurivt 
Vkv  President 
Ghbat  Ttdmology 
and  Opensions. 
hfasterCord 
International 


10.45am  to  11;15am 


11 15am  to  Noon 


Customer  Challenges  and  Solutions; 
Real-Life  Scenarios  Connecting  Data 
Centers  Over  Distance 

Steve  Adolph  CTO.  Enterprise  Soiutons  Group.  OENA 

Panel;  Overcoming  Management  Barriers  — 
Making  the  Case  for  Consolidation 

Panel  Moderator  Don  Tennant,  News  Editor  Computerwortd 
“^nefists  Damien  Bean,  Vice  President,  Corporate  Systems 
Hiiton  Motels.  Frank  Enfanto.  Vice  President  Operations 
Delivery  &  Information  Security,  Blue  Cross  Blue  ShieiO  of 
Massachusetts,  Steve  Goldman,  Director,  Network 
Architecture,  Chicago  Mercantile  Exchartge.  Ron  Kifer 
Vice  President.  Program  Management,  DHL  Express, 

Jerry  McElhatton,  Senior  Executive  Vee  Presideni, 

Global  Technology  and  Operations.  MasterCard  intemationai 

Program  Concludes 
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Vke  President. 
Corporate  Systems. 
HiltM  Holeis 


Steve  Adolph 
CJO.  Enterprise 
Sofurtoit}  GrtM^ 
CIESA 


Excfusiveiy  sponsored  by: 


CIENA 


COMPVTQIWIIILD 

IT  EXECUTIVE  SUMMIT 


IKIWIKCIIIBIUMTION 


Noon 


IT  l  arcci's 


IT  (  a  I'ct  ■  I  S. ion  I 


Computerworld  •  IntoWorld  •  Network  World  •  August  30.  2004 


IT  Cc)  rt"(' j's.i't  )i 1 1 


IT  raj'ct^i'.s 


IT  rarcery 


IT  ra iX'crs.L'uni 


Sg^.lTrSlffS 


W  :>?!»£  jljSw 


[ai:r:£'Ji»li.' 


^lSlj;5i5-ArSiS  I 


Let  IT  Careers  focus  and 


direct  your  recruitment 
message  by  using  three 


IT  Careers  Wants  unique  IDG  publications: 
You! 


Take  the  hassle  out  of 
job  searching  and 
check  us  out  at 
www.itcareers.com. 
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Rate  Your  Experience  With  SP2 
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take  most  companies  four  to 
six  months  to  complete  the 
certincatkm  and  engineering 
process  to  prepare  for  the  roll¬ 
out.  ‘^P2  is  mandatory.  You 
don't  have  a  choice,’*  he  said. 
"Anything  in  the  futiire  is  go¬ 
ing  to  be  built  on  SI^." 

Yet  the  aprplicatkm  compati¬ 
bility  problems  that  some  com¬ 
panies  are  encotmtering  can  be 
difficult  to  worit  through.  John 
LaBrue,  a  team  leader  in  dis¬ 
tributed  computing  at  OGE  En¬ 
ergy  Corp.  in  Oklahoma  City, 
said  some  applications  that  the 
IT  department  test¬ 
ed  broke  because  of 
tbe  new  Windows 
FtrewalL 
*TT»ere  are 
methodologies  in 
place  to  disable  the  firewall, 
and  we  have  deployed  those  in 
our  test  environment  We  are 
$dU  having  issues,”  LaBrue 
said.  **$0  it’s  not  alleviating  the 
problems  we  are  experiendi^” 
LaBrue  said  OGE  also  has 
several  custom  applications 
for  mobile  data  t^  are  in  a 
’’broken  state."  Us  Citrix  Sys¬ 
tems  Idc.  application  also 
failed,  but  staffers  stumbled 
upon  a  fix  that  worked,  even 
though  it  wasn’t  designed  for 
that  problem. 

In  addition  to  concerns  about 
application  incompatibiUcy 


and  firewall  issues.  DHL 
Worldwide  Network  SA/NV  is 
worried  about  SP2’s  size  mak¬ 
ing  it  cumbersome  to  deploy 
to  users  who  may  be  connect¬ 
ed  via  slower  network  links, 
according  to  Meg  Plummer, 
director  of  front-end  services 
at  tbe  international  courier. 

The  full  5P2  package  checks 
in  at  about  265Mfi,  according 
to  Microsoft  The  average 
download  is  expected  to  be 
much  smaller  becatise  of 
“smart  download"  technology 
that  installs  only  what  users 
need.  For  XT  ProfessionaL  tbe 
SP2  download  is  expected  to  be 
about  lOOMfi,  Microsoft  said. 

Preemptive  Moves 

Some  companies  have  had  to 
disable  Automatic  Update  to 
make  sure  users  don’t  down¬ 
load  SP2  before  they've  had  a 
chance  to  test  their  applica¬ 
tions.  John  Foley,  a  network 
planning  analyst  at  Werner  Ca 
in  Greenville.  Pa.,  said  that 
even  though  his  company  dis¬ 
tributes  security  updates 
throu0i  an  internal  server,  he 
made  a  change  to  tbe  group 
policy  setting  in  Active  Dim- 
tory  to  block  users  from  down¬ 
loading  SP2  via  Automatic  Up¬ 
date  or  Windows  Update. 

Companies  that  rely  on  in¬ 
structing  users  to  disable  Auto- 


peak  season."  said  Mike  Jones, 

CIO  at  Circuit  City  Stores  Inc 
"While  I’m  happy  to  see  that 
Microsoft  has  put  out  SP2  in 
response  to  known  issues  and 
weaknesses  over  time,  it  just 
doesn’t  work  out  timing-wise 
for  us." 

Jones  said  the  Richmond, 

Va. -based  retailer  won’t  deploy 
SP2  until  the  first  or  second 
quarter  of  next  year  And  be 
was  hai^  alone  in 

determining  that  IMEIi. _ 

tbe  SP2  deployment  Ifea  our  )PSP2  special 
will  have  to  %vait  at  paoe  online: 

least  four  months.  OftiieMJnh  a4910 

Fiftetnoflhc26 
respondents  who  now  have  at 
least  some  XP  in  their  desktop 
environments  indicated  either 
that  they  would  wait  until  next 
year  or  that  they  had  no  near- 
term  or  set  plans  for  SP2.  The 
remainder  said  they  plan  to 
deploy  SP2  when  they  com¬ 
plete  testing,  with  th^  of 
them  saying  they  expect  that 
will  be  within  two  months  and 
another  within  four  months. 

"We  are  very  concerned 
about  this  service  pack  break¬ 
ing  some  of  our  applications,” 
said  Bill  Lewfcowski,  CIO  at 
Metropolitan  Health  Corp.  in 
Grand  Rapids,  Mich.  "In  fact, 
we  had  one  of  our  veiMiors 
give  us  notice  that  their  appli¬ 
cations  would  not  work." 

That  vendor  was  McKesson 
Corp..  a  San  Francisco-based 
proper  of  health  care  appli¬ 
cations.  be  said.  Lewkowski 
added  that  be  isn't  sure  when 
Metropolitan  will  fmish  test¬ 
ing  SP^  since  it  will  need  re¬ 
sources  and  money  that  hadn't  , 
been  budgeted.  He  said  tbe  IT 
department  will  wort;  with  its 
more  than  400  vendors,  but  be 
isn’t  sure  it  will  ever  get  u>  the 
point  where  it  can  deliver  SP2 
to  its  users. 

But  Steve  Kleynhans.  an  an¬ 
alyst  at  Meta  Group  Inc,  said 
his  firm  is  advising  companies 
to  roll  out  SP2  as  fast  as  they 
can.  He  said  be  expects  it  will 


So  fitf.  Greg  Lavigne.  an  All¬ 
state  systems  consultant,  has 
already  observed  that  the  in¬ 
surer’s  WRQ  Reflection  termi¬ 
nal-emulator  software  has 
been  flagged  by  Microsoft  on 
a  Web  page  carrying  the  head¬ 
line  “Some  programs  seem  to 
stop  woricli^  after  you  install 
W^ows  XP  Service  Pack  Z" 
Jon  Murchinson,  a  Win¬ 
dows  client  product  manager 
at  Microsoft,  said  customers 
should  take  advantage  of  SPZ's 
enhancements  right  away. 

But  the  company  also  recog¬ 
nizes  tbe  oe^  for  application 
con^atibility  testing,  be 
and  it  recommends  rhat  cus¬ 
tomers  test  SP2  in  a  closed 
environment  bcRve  rollup  it 
out  to  their  entire  enlerprises. 
C»49tM 


experiencing  hustrating  conse¬ 
quences.  According  to  a  source 
at  a  manufacturing  firm  who 
requested  anraymity.  two  users 
tbere  downloaded  5P2,  desf^e 
messages  instructing  them  not 
to  inst^  it  Now  tbe  marbrno^! 
won't  boot  and  must  be  fixed. 

But  SP2*s  timing  will  work 
well  for  some  companies.  All¬ 
state  Insurance  Ca  expects  to 
start  rolling  out  Windows  XP 
on  Aftfil  1  next  year,  so  tbe 
company  is  doing  SP2  and  XP 
application  compatibility  test¬ 
ing  at  the  same  time. 

StilL  that's  no  small  under¬ 
taking.  Kevin  Rutheiford.  a 
workstation  stratum  at  the 
Northbrook,  IlL-based  compa¬ 
ny.  said  Allstate  has  about 
I4XK)  applications  to  test. 
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Shred,  Bum,  Erase 

How  DO  YOU  DEAL  WITH  the  sensitive  data  on  your 
high-tech  junk?  One  way  is  to  send  your  old  PCs  to  a 
company  that  makes  a  business  of  handling  decom¬ 
missioned  corporate  computers.  These  days,  they’ll 
charge  you  an  extra  SIO  to  S30  just  to  make  sure  the 
hard  disks  are  completely  erased  [QuickLink  49063]. 

Sure,  that’s  more  than  you  want  to  spend.  But  it’s  a  bargain  com¬ 
pared  with  what  a  lawsuit  might  cost  if  sensitive  customer  informa¬ 
tion  leaks  out  of  your  company  on  the  unerased  hard  disk  of  a  dis¬ 
carded  PC.  It’s  a  small  price  to  pay  for  peace  of  mind. 

But  if  w  hat  you  want  is  peace  of  mind,  it’s  nowhere  near  enough. 

I'licv  ihiil  sound  a  link-  paranoid:-  Maybu  it  i.,.  poini  of  failun.-  of  one  disk-wipinp  session. 


But  fvo  purchased  thrift-sturc  PCs  and  junk 
shop  hard  disks.  And  \es.  I've  scanned  ihrou^h 
their  ct«ntenis  before  repan  it  iuninj.’  the  drives. 
I've  seen  personal  letters  and  business  corre- 
spcindenee,  etintracts  and  legal  papers.  Social 
Security  numbers  and  other  customer  data.  Alt 
\ou  need  is  to  scan  a  few  recycled  hard  disks  to 
gain  a  healthy  parantJia  aNmt  junkers  that  a>n- 
tain  valuable  Infomution.  I’ve  scanned  doyens. 

I’ve  also  seen  the  results  t»f  projects  by  re¬ 
searchers  such  as  Sini-sim  Garfinkel  at  Sand- 
stiirm  Knterprises.  who  ft>und  high-tevh  vendor 
source  code,  financial  inlormation  from  invest¬ 
ment  firms,  thousands  of  credit  card  numbers 
and  even  internal  Micros4)rt  e-mails  on  second¬ 
hand  hard  disks  he  bought  at  swap  meets  and 
used-computer  stores  and  on  eBay. 

So  my  pcace-of-mind  threshold  is  pretty  high 
when  it  comes  t«>  data  on  high-tech  junk.  Maybe 
ytmrs  sh4*uJd  be.  too. 

-■\fier  all.  that  Pi'  recycler  may  do  a  highly 
pmiessnmal  j*»b  of  wiping  your  junked  PCs’ 
hard  disks.  But  before  that  happens,  those  PCs 
w  ill  Ml  ■  >n  y4)ur  loading  duck  —  then  on  a  truck, 
then  on  the  rccycler’s  holding  dtK’k, 

There  may  be  plenty  of  opportuni- 
lit-s  for  Mimeime  to  walk  off  with 
lour  dat.c 

How  you  keep  it  safe  unlil 
it's  wiped?  nie  simplest  answer 
l.'sc  a  S5li  commercial  software 
package  i‘i  w  ipe  the  disks  yourself, 
before  they  gii  to  your  !i»ading 
d<K-k.  Then  pay  the  P(.  recycler's 
fee  lo  have  them  w  iped  again.  Sure, 
that's  j  beli-and-suspenders  ap- 
pOMch.  but  it  cuts  the  ri.sk  of  a 
stolen  junker  exposing  sensitive 
data  It  alsav  elitninaies  the  single 


nuMHim.  CommOef- 
mvAf  s  sanior  news  coAum- 
ntst.  has  covered  IT  lor  more 
than  30  years.  Cofltacl  him  at 


But  that's  not  the  only  small  price  you'll  have 
to  pay  to  protect  your  data.  There’s  probably 
data  hiding  on  other  high-tech  junk.  too. 

Backup  tapes  arc  easy  on(»ugh  to  deal  with. 

You  ore  using  a  SlOO  bulk  eraser  to  w  ipc  them 
before  you  trash  them,  right? 

You  can  also  use  that  to  handle  many  kinds  of 
recordable  media  that  users  copy  sensitive  data 
with.  7  hat  means  floppy  disks.  Zip  disks  and 
cartridges  for  lots  of  other  removable-media 
magnetic  drives. 

Then  there  are  recordable  CDs  and  DVDs, 
the  bane  of  any  IT  shop  that’s  try  ing  hard  to 
keep  from  leaking  data.  They’re  high-capacity, 
unerasable,  tough  to  destroy  and  easy  t<»  drop 
into  the  wastebasket  —  which  makes  them  easy 
pickings  for  anyone  who  decides  to  dig  through 
your  Dumpster. 

I  l4»w  can  you  get  rid  of  them?  There’s  no 
simple,  standard  answer.  People  have  tried 
microwaving,  burning,  sanding  ofl'the  surface, 
even  dissolving  them  in  acetone.  The  easiest 
may  be  U)  run  the  disks  through  a  heavy-duty- 
paper  shredder  —  that  will  run  ytiu  $500  or 
more,  but  your  office  prifbably 
already  has  one. 

But  before  yem  can  shred  those 
CDs  or  erase  those  Zip  dUks.  you 
have  to  collect  them  from  users. 

They  may  think  y»»u’rc  a  little  para¬ 
noid  for  trying  to  track  down  every 
piece  of  high-tech  junk  that  might 
contain  sensitive  data. 

Just  remember;  All  it  takes  is  one 
large  dollop  tif  that  data  in  the  wrong 
hands  to  make  your  worst  fears  a 
reality.  Compared  to  that,  users 
thinking  you’re  paranoid  really  is  \ 
a  small  price  to  pay.  C  4907J 


Just  Keeping  His  Options  Open 

For  this  online  sales  fonn.  there  are  60  pages  of  specs 
identifying  whether  fields  are  rtsquited  or  optional.  *8ut 
Airino  beta  testing,  the  VP  of  sales  goes  ballistic  be* 
cause  we  doni  let  them  subrnA  a  qtjote  without  the 
required  fields.’ says  developer  plo4  fIsE  ^^e  tefe  « 
that  the  fields  are  only  requited  if  the  tfier 
infonTialion  -  otherwise  otrtional.’ How  can  IT 
know  0  the  user  knows  the  inforrriation? ’He  repfies 
that  he’s  fist  tesponsiiie  for  the  requirements.' ^ 
says,  ft's  our  job  to  figure  out  how  to  do  II’ 

A......  JustUke 

SHARK 

IMwMipM  Tiyu  AtAI 

MliWoll.  lARR^  riil.|it,,l. 

htUHkon- 

knnMibaMiMh*  j  malTlorlwkiiito 
thoddhrWttwpMiifo 
who  «rii  do  Ml  lob.  But 
thoytaMlthgtlhort- 
mainiBg  itaHwi  taww 
olttoyModtoliiNw. 

*7)110.’ aififWi.’aifc 
thorn  how  to  chango  ttio 
oarverfoom  oombint- 
tion  lock.*  Tumi  out  m 
ono  knows.  Than  wftol 
dothobeMaedo7*Ihey 
cdbddwbuldtogfMM- 
fiso  iroup  to  chongo  dw 
cambinMiofK.”fiihte)is. 

*ntorcoul(ln1flgmlt 
out  So  Ihoy  agant  B72S 
tohMoofiiwioGfcin- 
MaM  *  al  JuM  to  avoW 


Just  What  Pits 
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FRANK  HAYES  ■  FRANKLY  SPEAKING 

Shred,  Bum,  Erase 


How  DO  YOU  DEAL  WITH  the  sensitive  data  on  your 
high-tech  junk?  One  way  is  to  send  your  old  PCs  to  a 
company  that  makes  a  business  of  handling  decom¬ 
missioned  corporate  computers.  These  days,  they’ll 
charge  you  an  extra  $10  to  $30  just  to  make  sure  the 
hard  disks  are  completely  erased  [QuickLink  49063], 

Sure,  that’s  more  than  you  want  to  spend.  But  it’s  a  bargain  com¬ 
pared  with  what  a  lawsuit  might  cost  if  sensitive  customer  informa¬ 
tion  leaks  out  of  your  company  on  the  unerased  hard  disk  of  a  dis¬ 
carded  PC.  It’s  a  small  price  to  pay  for  peace  of  mind. 

But  if  what  you  want  is  peace  of  mind,  it’s  nowhere  near  enough. 

Does  that  sound  a  little  paranoid?  Maybe  it  is.  i  point  of  failure  of  one  disk-wiping  session. 


Does  that  sound  a  little  paranoid?  Maybe  it  is. 
But  Tve  purchased  thrift-store  PCs  and  junk- 
shop  hard  disks.  And  yes,  Fve  scanned  through 
their  contents  before  repartitioning  the  drives. 
I*ve  seen  personal  letters  and  business  corre¬ 
spondence.  contracts  and  legal  papers.  Social 
Security  numbers  and  other  customer  data.  All 
you  need  is  to  scan  a  few  recycled  hard  disks  to 
gain  a  healthy  paranoia  about  junkers  that  con¬ 
tain  valuable  information.  IVe  scanned  dozens. 

Fve  also  seen  the  results  of  projects  by  re¬ 
searchers  such  as  Simson  Garfinkel  at  Sand¬ 
storm  Enterprises,  who  found  high-tech  vendor 
source  code,  financial  information  from  invest¬ 
ment  firms,  thousands  of  credit  card  numbers 
and  even  internal  Microsoft  e-mails  on  second¬ 
hand  hard  disks  be  bought  at  swap  meets  and 
used-computer  stores  and  on  eBay. 

So  my  peace-of-mind  threshold  is  pretty  High 
when  it  comes  to  data  on  high-tech  junk-  Maybe 
yours  should  be.  too. 

After  all,  that  PC  recycler  may  do  a  highly 
professional  job  of  wiping  your  junked  PCs’ 
hard  disks.  But  before  that  happens,  those  PCs 
will  sit  on  your  loading  dock  ~  then  on  a  truck, 
then  on  the  recycieris  loading  dock. 

There  may  be  plenty  of  opportuni¬ 
ties  for  someone  to  walk  off  with 
your  data. 

How  do  you  keep  it  safe  until 
it’s  wiped?  The  simplest  answer 
Use  a  $50  commercial  software 
package  to  wipe  the  disks  yourself, 
before  they  go  to  your  loading 
dock.  Then  pay  the  PC  recycler’s 
fee  to  have  them  wiped  again.  Sure, 
that’s  a  belt-and-susfienders  ap¬ 
proach,  but  it  cuts  the  risk  of  a 
stolen  junker  exposing  sensitive 
data.  It  also  eliminates  the  ■tingle  ! 


But  that’s  not  the  only  small  price  )^u’ll  have 
to  pay  to  protect  your  data.  There’s  probably 
data  hiding  on  other  hi^-tech  junk.  too. 

Backup  tapes  are  easy  enough  to  deal  with. 
You  ore  using  a  $100  bulk  eraser  to  wipe  them 
before  you  trash  them,  right? 

You  can  also  use  that  to  handle  many  kinds  of 
recordable  media  that  users  copy  sensitive  data 
with.  That  means  floppy  disks.  Zip  disks  and 
'  cartrid^s  for  lots  of  other  removable-media 
magnetic  drives. 

Then  there  are  recordable  CDs  and  DVDs, 
the  bane  of  any  IT  shop  that’s  trying  hard  to 
keep  from  leaking  data.  They’re  high-capacity, 
unerasable,  tough  to  destroy  and  easy  to  drop 
into  the  wastebasket  —  which  makes  them  easy 
pickings  for  anyone  who  decides  to  dig  through 
your  Dumpster. 

How  can  you  get  rid  of  them?  There’s  no 
simple,  standard  answer.  People  have  tried 
microwaving,  burning,  sanding  off  the  surface, 
even  dissohdng  them  in  acetone.  The  easiest 
may  be  to  run  the  disks  through  a  heavy-duty 
paper  shredder  —  that  will  run  you  $500  or 
more,  but  your  oftice  probably 
already  has  one. 

But  before  )^u  can  shred  those 
CDs  or  erase  those  Zip  disks,  you 
have  to  collect  them  from  users. 
They  may  think  ^u’re  a  little  para¬ 
noid  for  trying  to  track  down  every 
piece  of  high-tech  junk  that  might 
contain  sensitive  data. 

fust  remember  All  it  takes  b  one 
large  dollop  of  that  data  in  the  wrong 
hands  to  make  your  worst  fears  a 
reality.  Compared  to  that,  users 
thinking  you're  paranoid  really  b 
a  small  price  to  pay.  O  M071 


They  multifunction,  multitask  and  multi-simplify 
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With  SAS*  software's  new  Intelligence  Platform,  you  can... 


Drive  the  value  of  your  investment  in 
operational  software.  Once  and  for  all. 


INTELLICeNT  '-ooagf 


SAS:9 


SAS  introduces  a  software  breakthrough  for  sharing  mission-critical  intelligence,  in  just  the  right 
context,  with  everyone  from  executives  to  knowledge  workers.  And  for  increasing  the  value  of  your 
IT  investment  every  step  of  the  way -from  aggregating  and  ensuring  the  quality  of  data,  from  any 
source,  to  transforming  that  data  into  predictive  insight  using  the  world’s  best  analytics.  Can  one 
intelligence  platform  truly  fit  all  your  needs,  within  IT  and  across  your  enterprise?  Let  us  prove  it. 
Call  toll  free  1  866  791  3183  or  visit  our  Web  site. 

www.sas.com/itbreakthrough 


The  Power  to  Know, 
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IBM  mil  try.  try  again  with  a  disk  array  built  around  iSCSI  technology 

U.K.-based  CP  Ships  learns  some  unpleasant  truths  Irom  its  SAP  finance  applications. 
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CIOs  Foresee 
Modest  Boost 
Li  FT  Spending 

New  investments  beii^  eyed  for  2005 
aim  to  cut  infiastructure  and  lalx)r  costs 


BY  THOMAS  HOFFMAN  ViflllVPH 

As  tbe  IT  budget  season 
heats  up.  CIOs  inter¬ 
viewed  last  week  said 
they’re  guardedly  opti¬ 
mistic  about  their  2005 
spending  plans.  But  many  IT 
managers  are  expected  to  in¬ 
crease  spending  on  hardware 
and  outsourcing  primarily  in 
response  to  pressure  from  cor¬ 
porate  executives  to  cut  IT  in¬ 
frastructure  and  labor  costs. 

For  instance,  a  survey  of  195 
North  American  CIOs  released 
last  week  by  Forrester  Re¬ 


search  Inc.  indicated 
that  companies  plan  to 
increase  their  overall  FT 
spendii^  1^  an  average 
of  7%  next  yean  Spend¬ 
ing  on  hardware  is  ex¬ 
pected  to  jump  by  14%  over 
this  year’s  levels,  it  said. 

However,  some  of  the  antic¬ 
ipated  hardware  growth  is  be¬ 
ing  driven  by  investments 
companies  are  making  in  less 
expensive  machines  that  are 
expected  to  produce  opera¬ 
tional  cost  savii^  over  tbe 

IT  Spending,  page  14 


Spendng  Increases  Not  Ukaly 
To  TricMe  Dowm  to  Ibch  Wofkm 


Analysts  last  week  offered  wonts 
of  caution  to  fT  staffers;  Ooni 
transtda  next  year's  expected 
gnwth  to  IT  spendtog  irto  vi¬ 
sions  of  fattarwalets. 

TheividsspreadMriabity 
of  torcosl  labor  overseas  htt 
meant  faiirer  bonuses  and  raises 
for  technology  profeatoonals  to 
the  US.  said  Barbara  Gomolsid. 


an  anabet  at  Bartner  Inc.  and  a 
CoRtoidariiQitfcoiian^ 
ttoi  toll  liB^  to  change,  ac* 
cordtog  to  BornoWd  and  otoer 
matItowBichara. 

Forrester  Roaoarch  estimates 
that  companies  wi  increase 
the  head  oounts  of  their  US.  IT 
staffs  by  lust  5%  behvean  now 
Tedi¥Mm.pao8l4 
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Gone  today;  back 
tomonow.  Some 
IT retirees  ae 
returning  to  woik 
on  their  own  tenns. 
Julia  iOngrepoits 
on  \A4iy  smart  ootn- 
paniesaeenoaur- 
agingthem-NKS 


Many  Users  Are  Unfazed  by 
ScalM-BackLer^hom  Plan 


But  some  \vant  WinFS 
instead  of  3-D  graphics 

BY  CAROL  SLIWA 

The  next  major  Windows  re¬ 
lease.  code-named  Longhorn, 
is  due  to  arrive  so  far  into  tbe 
future  that  many  corporate 
users  aren’t  particul^y  both¬ 
ered  by  Microsoft  Corp.’s  plan 
to  scale  back  the  product. 

Prior  to  its  late-August  an¬ 
nouncement,  the  company  had 


pledged  that  Longhorn  would 
feature  three  innovative  new 
elements:  the  Avalon  graphics 
subsystem,  boasting  special 
3-D  effects;  the  Indigo  com¬ 
munications  subsystem  for 
building  advanced  Web  ser¬ 
vices;  and  the  WinFS  stor^e 
subsystem,  which  aims  to  pro¬ 
vide  advanced  data  organiza¬ 
tion  and  management  capabil¬ 
ities  and  make  it  easier  to 
search  for  information. 


But  in  order  to  hit  its  targets 
for  delivering  the  Longhorn 
client  in  2006  and  the  server 
operating  system  in  2007,  Mi¬ 
crosoft  said  it  won't  include 
WinFS.  The  storage  subsystem 
will  be  in  beta  testing  when  the 
Longhorn  client  is  released, 
the  company  noted. 

'‘It  isn’t  that  big  of  a  deaL" 

Lon^iom.  page  S3 
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kKcrosoft 


"We  got  to  market  six  moriths  faster,  and 
saw  14  percent  in  cost  savings  over  Linux, 
using  Windows  Server  System?* " 


— Owen  Flynn,  Chief  Technology  Officer 
Equifax  IrK. 


Equifax,  a  leading  provider  of  consumer  and  commercial  credit  information,  chose 
Windows  Server  System  because  it  allowed  them  to  deliver  new  and  improved  services 
with  a  14  percent  savings  in  total  cost  of  ownership.  With  their  new  Windows-based 
supercomputer  cluster,  Equifax  is  able  to  manage  its  database  of  over  six  billion  data 
components  with  dramatic  increases  in  performance  and  efficiency.  To  get  the  full  case 
study,  other  case  studies,  or  third-party  findings,  visit  microsoft.com/getthefacts 


Microsoft* 

Windows 
Server  System 


C  200^icrosoft  Corpo«t«Hi.  Al(  rjghts  rwefved.  Mkrosoft  Windows,  the  Windows  logo,  and  Windows  Server  System  are  erther  registered  trademarts  or  trademarks  of 
Microson  Corporation  in  the  United  States  and/or  other  countries.  The  names  of  actual  companies  arxf  products  mentioned  herem  may  h^trartoinarittiifthiiffcp>ytkjafi.,»»y^ 


The  right  management  should  do  more  than  just  protect. 

It  should  also  enable. 

eTrusr-  Security  Management  Software 

With  eTrust  security  management  software,  your  information  isn't  just  safeguarded  from  internal  and  external  threats. 
We  provide  authorized  customers,  partners,  and  employees  with  appropriate  access  that  can  help  your  business  grow. 
In  addition  to  securing  data,  ©Trust  also  provides  a  single  view  of  your  security  environment,  so  you  can  make  real-time 
decisions  based  on  comprehensive  information.  If  you're  looking  for  ways  to  minimize  risk  while  maximizing  your 
potential,  or  to  get  a  white  paper,  go  to  ca.com/secunty. 
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Have  Jini,  Will  Travel 

In  the  Technolooy  section:  While  other  compa¬ 
nies  have  shied  away  from  Sun’s  Jini  technolo¬ 
gy.  at  Orbitz.  it  plays  a  central  role  in  the  travel 
Web  site's  online  reservations  system,  explain 
Chris  Hielm  and  Leon  Chism,  21 


Awking  Armageddon 

Abo  in  the  Technology  section:  Finding  near-Earth 
olHects  —  the  type  that  could  cause  catastn^hic 
damage  if  they  hit  our  planet  —  will  involve  large 
amounts  of  data,  plus  search  and  storage  technol¬ 
ogy  on  scales  never  seen  before.  Page  30 
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6  IBM  re-enters  the  SCSI-based 
storage  maritei  and  rolls  out 
two  entry-level  disk  arrays. 

6  HP  and  Sun  plan  to  resell  a 

new  h^h-end  di^  array  from 
Hitachi  Data  Systems. 

7  IBM  has  consolidated  several 
applications  used  at  the  US. 
Open  tennis  tournament  onto 
a  single  iSeries  server. 

7  A  “war  drive"  revealed  wire¬ 
less  security  holes  in  the  vicin¬ 
ity  of  the  Republican  National 
Convention  in  New  York. 

8  Nortel's  CEO  remains  opti¬ 
mistic.  despite  cutbacks,  but 
he  says  the  company  needs  to 
improve  its  marketing. 

8  SAP  ERP  applications  uncov¬ 
ered  $41  million  in  accounting 
errors  at  a  British  shipper. 

9  A  system  built  by  EOS  for  the 
U.K.  government  is  filled  with 
flaws,  according  to  a  report  by 
a  Parliament  committee. 

9  Software  pnAlems  are  limit¬ 
ing  use  of  an  IRS  data  security 
system,  a  Treasury  Depart¬ 
ment  audit  finds. 

12  Rivals  F5  and  Redline  offer 
software  upgrades  designed 
to  improve  app  performance. 

12  BMC  unveils  a  tool  for  track¬ 
ing  batch-processing  jobs. 

14  A  healtii  care  company  hopes 
to  curb  its  printing  costs  by 
standardizing  on  HP  equip¬ 
ment  and  slashing  the  number 
of  printers  it  uses. 
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24  Agents  of  Chango.  Autono¬ 
mous  agents  promise  to  make 
everything  from  supply 
chains  to  telecommunications 
networks  more  efficient.  But 
for  now.  most  new  applica¬ 
tions  remain  in  R&D  labs. 

28  Sunriwl  of  the  FHtost.  A  re- 
gression-based  analytic  tech¬ 
nique  called  survival  analysis 
is  moving  from  life  sciences 
and  engineering  into  main¬ 
stream  business  applications. 

32  Security  Manager's  Journal: 
Socuro  E-mail  Stops  at 
Coq>orata  Borders.  Securing 
internal  e-mail  is  one  thing, 
but  Roger  Fbix  finds  there  are 
few  good  options  for  ensuring 
the  security  of  messages  once 
they  reach  business  partners. 
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37  Staying  Power.  There’s  a  new 
breed  of  IT  retiree.  See  why 
smart  companies  are  luring 
them  back  to  work. 

40  Think  Tank.  Instant  messag¬ 
ing  isn't  just  for  idle  chatter;  it 
can  provide  a  competitive  ad- 
vant^.  Plus,  woridwide  hot 
spots  for  IT  spending,  and  the 
most  overtiyped  technologies. 

42  QAA:  Stop  Wasting  Time. 
Michael  C  Mankins  explains 
how  to  save  time  and  make 
faster,  better  team  decisions. 

43  Career  Watch.  Hiring  new¬ 
bies  and  promoting  from 
within;  the  executive  recruit¬ 
ment  outlook;  and  postgrad 
business  boot  camps. 
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10  On  the  Mark:  Mark  Hall  asks. 

Do  you  really  want  a  Web 
hosting  company  whose 
sysadmins  are  all  tucked 
into  bed  at  night? 

16  Maryfran  Johnson  explains 
changes  at  the  top  of  Compur- 
erworids  editorial  ranks. 

16  Michael  H.  Hugos  wants  you 
to  stop  spouting  the  latest 
three-letter  acronyms  so  you’re 
not  distracted  from  great  op¬ 
portunities  for  your  company. 

17  Thornton  A.  ««a»  is  optimistic 
about  the  future  for  IT  leaders 
because  he  knows  that  niles- 
based  drudge  work  isn't  all 
that  IT  can  offer. 

34  Paul  A.  Strassmann  says  IT 
will  only  grow  in  importance 
as  business  systems  become 
more  data-centric. 

44  Paul  Olen  has  found  that 
when  managers  say  “account¬ 
ability.'  they  often  mean 
“blame.'  But  knowing  the  dif¬ 
ference  between  the  two  can 
make  you  a  better  manager. 

54  Frankly  Speaking:  Frank 
Hayes  notes  that  users'  appre¬ 
ciation  of  IT  is  on  the  rise, 
and  he  concludes  that  it’s  be¬ 
cause  IT  has  gotten  better  at 
understanding  their  needs. 
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SuccaedngVMIhOpen-Sauce 

SOFTWARE:  In  this  book  excerpt,  Bernard 
Golden  ofiers  advice  on  bow  to  evaluate  an 
open-source  ^rplkacioo  for  possible  use  in 
your  organizatiock  O  QMdAMi  48146 

Mohle  Interfaces. 

An  End-User  Parspadive 

HOeilE/WmCLESS:  A  budnsi  mwlcr 
armed  with  a  lapmp  wonders  vdiy  he  can't 
sui^>iy  dick  on  an  qrpBcation  wl^  on 
the  road  and  get  some  work  done. 

OOMeUMi 48234 

MotiaOirecteryRingsTnie 

IT  MANAOEHEMT:  Coluiniust  fay  says 
the  proposed  directory  of  cellular  phone 
numbers  includes  all  of  the  privacy  controls 
h  needs.  O  QMcMJakdMi 

Trial  Close' at  Ybir  Neat  bitervtew 

CAREERS:  Columnist  fay  Litton  •niggrni  that 
you  earn  the  confidence  of  pocendal  employ¬ 
ers  and  reduce  their  risk  by  offering  them  a 
90-day  guarantee.  O  QiMAM4W8l 

Hot  Topics 

SOT'S  Linux  battle,  o&horing,  Windows 
XP  Service  Pack  2  and  more.  See  Contputer- 
worid.com’s  coUectioD  of  coverage 
pages,  hi^lighttng  news,  analysis  md 
opinions  on  today’s  top  IT  issues. 
OQaicUJW(a4800 
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AT  DEADLINE 


IBM  Recalls  22Sk 
Notebook  Adapters 

IBM  i*  racMfaig  about  225.000 
AC  powar  adMwrs  for  to  fiolo- 
book  cowputBfi  baeauM  of  con* 
corm  about  Rro  and  electrical 
shocli  hizarto.  Tfta  compMy 
iolnOy  announced  the  recal  wWi 
tfMU.S.ConaMMrftoductSafe- 
ly  Comndesion.  which  has  re- 
colMdallaaBtalireportsofover- 
hontlno  inddents  imohdno  the 
edtoten.  By  said  M  wN  replace 
tho  dovkae.  which  were  soU  in 
t999  and  2000. 


Oracle  Releases 
Software  Patches 

Oracle  Corp.  issued  patches  do* 
stoiad  to  tdug  nearty  three  dean 
sacurity  vuinorabybes  in  to  data* 
bases.  appficBtion  aorvsr  soft* 
ware  and  Enterprise  yanagor 
took.  The  heiss  were  roportad  to 
(hade  early  this  year  by  security 
researcher  David  Utchflald  and 
cams  to  ight  in  July  (QuichLink 
A8693].  Oracle  gevB  sonw  of  the 
flaws  a ‘Idgb*' rish  rattog  Md  said 
there  are  no  work-arounds  that 
wll  fuly  addraas  tha  problants. 

Intel  Lowers  Hs 
03  Sales  Forecast 

Citiog  WMh  eatos,  total  Corp.  cut 
to  third-iiuartar  raeanoa  forecast 
and  said  tha  fourth  guartor  way 
be  tough  an  wil.  *Oiir  currant 
outioeh  for  Ihs  third  qusrlar,  and 
the  remainder  of  tha  ysr.  refUcts 
a  weahar  marhst  than  we  had  es* 
psetad.*aaidChtofFin«icialOffh 
ear  Andy  Bryant  total  aspects 
fsvenus  of  bftwssn  S8J  bilion 
and  S8.6  toMon  tNs  uusflor. 


KeyCorp  Taps  USAA 
ExwtoBeHsCK) 

Ctovotond-fawd  KeyCorp  named 
Stove  Ttea  OO.  flftoctivo  toot  ^ 
day.  Ytoas  had  bsan  protidsnt  of 
USAA  tofsimukw  Tochnotogy 
Co.,  the  IT  eorvieos  arm  of  San 
Antonin  bwad  USAA.  Ha  raplacos 
fbbart  fttehart  who  iafl  KayCorp 
in  lato  July  to  bscomt  tha  CB)  of 
ahoalMi  care  reiatod start-up. 


I  IBM  Rolls  Out  Arrays, 
Tries  Again  on  iSCSI 


Re-enters  storage  device  market  based 
on  low-cost  data-transport  protocol 


BV  LUCAS  MEABIAN 

8M  ANNOUNCED  3  pair  of 
entry-level  workgroup 
disk  arrays  last  week, 
including  a  scaled-down 
reincarnation  of  an  iSCSI- 
I  based  device  that  the  company 
dropped  two  years  ago. 

IBM's  new  offerings  include 
the  iSCSI-based  TntalSiorage 
DS.^.  as  well  as  the  DS400.  a 
Fibre  Channel  array  that 
scales  up  to  S.8TB  and  is 
priced  from  $5,000  to  $7,000. 
Both  arrays  can  be  managed 
by  IBM’s  ScrveRAID  tools  and 
support  remote  data  mirroring 
and  copying  fusions,  the 
company  said.  They’re  also 
the  first  new  products  to  be 
sold  under  tbe  E)S  brand  name, 
which  will  eventually  be  ex¬ 
tended  to  all  of  IBM’s  arrays. 

The  OS300  is  a  native  iSCSI 
array  similar  to  the  200i.  which 
IBM  first  offered  in  2001  and 
withdrew  a  year  later  after  sell¬ 
ing  fewer  than  500.  Tbe  200i 
was  the  first  iSCSI  array  on 
the  market:  at  the  time.  IBM 


said  it  was  stopping  develop¬ 
ment  of  iSCSI-based  arrays 
and  instead  pursuing  partner¬ 
ships  that  would  let  its  other 
products  use  the  low-cost 
data-transport  protocol  via 
gateways  iQuickLink  30960]. 

When  the  200i  wa.s  intro¬ 
duced.  "it  really  wasn’t  as 
cost-effective  as  it  needed  to 
be  for  the  market  space  we 
were  going  after."  said  Cindy 
Crossman.  IBM's  director  of 
storage  marketing.  "I  think  it 
was  ahead  of  Us  time,  frankly." 
But.  she  added.  IBM’s  sales 
teams  have  been  hearing  more 
and  more  demand  from  users 
for  a  low-cost  iSCSI  array  to 
consolidate  data  stored  on 
Windows  and  Linux  servers. 

The  DS300  is  priced  from 
S3i,000  to  $4,600  and  can  store 
up  to  2T6  of  data,  compared 
with  the  3.5TB  capacity  that 
wa.s  offered  on  the  2001. 

A  nctwoik  coordinator  at  a 
laige  insurance  firm  in  Califor¬ 
nia  said  that  given  a  slowdown 
in  IT  spending  at  his  company. 


iSCSI  makes  for  a  cheap  alter¬ 
native  to  Fibre  Channel  stor¬ 
age.  as  long  as  applications 
with  high  I/O  rates  aren't  in¬ 
volved.  ’'ISCSI  isn't  good  for 
that  because  of  the  TCP/IP 
overhead  and  bottleneck 
caused  by  Elbemet,"  he  said. 

The  neiwoik  manager,  who 
asked  not  to  be  named,  said  he 
has  been  using  a  l.STB  iSCSI 
array  from  SioneFly  Networks 
Inc.  in  San  Di^  for  the  pa.st 
year  to  store  data  ^m  three 
Compaq  ProLiant  servers.  The 
systems  were  using  about  90% 
of  their  internal  storage  space 
before  the  addition  of  the  ar¬ 
ray.  which  cost  about  S2S.OOO 
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HP,  Sun  to  Resell  New 
High-End  Hitachi  Airay 


•v  LUCAS  MEABUN 

Hewlett-Packard  Co.  and  Sun 
Microsystems  Inc.  both  plan 
to  aimounce  tomorrow  that 
they  will  resell  a  high-end  disk 
array  being  introduced  by 
Hitachi  Data  Systems  Corp. 

Hitachi  declined  to  com¬ 
ment  on  its  new  array  in  ad¬ 
vance  of  a  press  conference 
it’s  holding  in  New  York.  But 
Shebly  Seyrafl,  an  analyst  at 
Merrill  Lynch  &  Co.,  said  Hi¬ 
tachi  plans  to  unveil  tbe  third 
generation  of  its  Lightning  ar¬ 
ray.  ratcheting  up  its  competi¬ 
tion  with  EMC  Corp  in  tbe 
higb-end  storage  market. 

Hitachi  launched  its  first 


Lightning  array  in  2000  and 
followed  that  two  years  later 
with  its  current  Ughining 
9900V  models.  EMC  lost  mar¬ 
ket  share  to  Hitachi  after  both 
product  announcements, 
Seyrafl  said.  But  early  last 
year,  EMC  launched  a  new 
Symroctrix  DMX  high-end 
line.  "We  do  not  foresee  EMC 
losing  as  much  share  as  in  pri¬ 
or  Lightning  announcements, 
as  it  has  a  much-improved 
product,  but  we  do  expect 
some  share  loss,"  Scyrafi  said. 

HP  said  it  plans  to  market 
the  new  array  as  its  Storage- 
Works  XP12000  model.  The 
XP12000.  which  starts  at 


$4SOJ>00.  can  scale  up  to 
I65TB  of  capacity  across  five 
cabinets,  accordii^  to  HP  offi¬ 
cials.  It  can  also  be  integrated 
with  previous  XP-model  ar¬ 
rays  through  an  external  stor¬ 
age  tool  kit,  they  said. 

Sun  confitTiNKj  that  it  will 
also  resell  the  new  Lightning 
device,  but  the  company  de¬ 
clined  to  comment  further  un¬ 
til  tomorrow's  announcement. 

The  Next  Phase 

IOC  analyst  Robert  Gray  said 
the  high-end  arrays  that  HP 
and  Sun  now  offer  are  made 
by  Hitachi,  “so  all  they’re  do¬ 
ing  is  rolling  over  to  the  next 
technology." 

HP  said  it  has  added  soft¬ 
ware  to  the  XP12000  that  will 
support  clustering  and  fail¬ 
over  functionality.  “If  you  have 


and  look  one  hour  to  install 

"It’s  proved  to  be  dynamic," 
he  said,  describing  one  situa¬ 
tion  in  which  a  server  went 
down  and  IT  staffers  at  the  in¬ 
surer  were  able  to  use  Micro¬ 
soft  Corp.’s  iSCSI  initiator  dri¬ 
ver  to  reconnect  the  array  to 
another  server  and  then  attach 
it  to  the  company’s  databases. 

Enterprise  Strategy  Group 
Inc.  in  Milford.  Mass.,  esti¬ 
mates  chat  there  arc  about 
1.500  tSCSl-based  storage-area 
networks  in  use  now  and  that 
the  number  will  exceed  2.000 
by  year's  end.  Tony  Asaro,  an 
analyst  at  the  firm,  said  tbe 
use  of  iSCSI  is  quickly  ramp¬ 
ing  up  because  of  its  cost- 
effectiveness.  Users  who 
adopt  iSCSI  don’t  have  to  in¬ 
vest  in  more  expensive  Fibre 
Channel  disks,  host  bus 
adapters  or  switches,  he  said. 

Asaro  added  that  the  num¬ 
ber  of  iSCSI-based  products 
oflered  by  vendors  has  steadi¬ 
ly  increased  over  the  past  two 
years,  helping  to  validate  the 
technology  for  users. 

IBM  also  replaced  its  FAStT 
midrange  storage  brand  with 
the  05  name  last  week  and 
said  it  will  do  the  same  with 
its  Enterprise  Storage  Server 
high-end  arrays  later  this  year. 
"We  wanted  to  start  building  a 
lot  more  commonality  in  our 
storage  server  line,"  Grossman 
said.  0  49230 


a  power  outage  in  a  building 
or  experience  some  other 
man-made  or  natural  disaster 
. . .  you  can  seamlessly  fall 
over  to  another  data  center  up 
to  100  kilometers  away."  said 
Kyle  Fitze,  HFs  director  of 
marketing  for  online  storage. 

HFs  existing  midrange  and 
high-end  arrays,  the  XP128 
and  XP1024,  scale  up  to  18TB 
and  149TB  of  capacity,  respec¬ 
tively.  In  addition  to  the  ca¬ 
pacity  boost  that  the  XP12000 
will  provide,  the  new  array  is 
less  of  a  monolithic  system 
than  the  XPI024  is.  Fitze  said. 
He  noted  that  the  XPI2000 
also  adds  support  for  external 
storage,  cache  partitioning  and 
continuous  access  journaling, 
which  ensures  that  data  being 
mirrored  between  two  arrays 
is  synchronized.  O  492S1 


U.S.  Tennis  Association  Nets  Cost 
Savings  From  Server  Consolidation 

IBM  combines  scoring,  Web  publishing 
apps  for  tournament  on  iSeries  system 


BY  THOMAS  HOFFMAN 

HEW  VOAK 

Andy  Roddick's  152  mph  serve 
wasn't  the  only  power  move 
on  display  last  week  as  the 
U3.  Open  tennis  tournament 
began  its  two-week  run  here. 
From  an  IT  perspective,  all 
ey«  were  on  a  new  iSeries 
server  that  was  put  in  place 
for  the  tournament  by  IBM. 

The  company,  which  man¬ 
ages  computer  operations  for 
the  United  States  Tennis  Asso¬ 
ciation.  last  month  completed 
a  consolidation  of  the  Inter¬ 
net-based  scoring,  data  staging 
and  Web  publishing  applica¬ 
tions  used  during  the  U.S. 
Open  from  three  of  its  xSeries 
servers  onto  a  single  iS  520 
system  that  runs  Ungx 

The  server  consolidation 
was  finished  on  Aug.  20  and 
has  helped  IBM  reduce  the 
USTA’s  cost  per  end  user  by 
40%  compared  with  last  year’s 
tournament,  thanks  to  reduced 


disk  requirements  and  more 
efficient  workload  processing, 
said  IBM  profect  manager 
lohn  Kent  He  noted  that  the 
iSeries  machine  can  automati¬ 
cally  move  woridoads  from 
one  server  partition  to  anoth¬ 
er,  providing  more  processing 
flexibility  than  the  xSeries  sys¬ 
tems  did. 

Tlie  i5  520  is  located  at  the 
U.S.  Tennis  Center  in  the 
Flushing  Meadows  section  of 
Queens.  The  USOpen.org  Web 
site  is  supported  by  another 
ISeries  machine  at  an  IBM 
dau  center,  and  Web  publish¬ 
ing  data  is  sent  to  two  other 
IBM  facUides  for  workload 
provisioning  and  data  redun¬ 
dancy.  IBM  declined  to  dis¬ 
close  the  locations  of  its  data 
centers. 

When  a  point  is  made  dur¬ 
ing  a  match,  the  chair  umpire 
uses  an  IBM-branded  Palm 
handheld  computer  to  enter 
the  score.  The  data  is  then  fed 


into  IBM's  DB2  Universal 
Database  software,  which  is 
installed  on  one  partition 
within  the  iS  520  server.  A 
group  of  30  USTA  writers, 
editors,  producers  and  audio/ 
video  engineers  process  infor¬ 
mation  for  the  tournament's 
Web  site  using  a  Linux-based 
x365  system  that  runs  IBM's 
WebSphere  Portal  content 
publishing  software. 

A  staging  server  runs  in  an¬ 
other  i5  520  partition  and  com¬ 
bines  data  from  the  Internet 
scoring  system  and  the  con¬ 
tent  publisher  to  create  the 
USOpeaorg  Web  pages. 

Meeting  Demands 

IBM's  on-demand  computing 
approach  has  helped  the  ten¬ 
nis  association  handle  wide 
swings  in  processing  de¬ 
mands,  according  to  USTA 
officials. 

‘This  [tournament]  is  like 
our  Super  Bowl."  said  Ezra 
Kucharz.  managing  director 
of  interactive  media  for  the 
USTA  in  While  Plains.  N.Y. 
"Our  information  needs  here 


are  50  times  what  they  are  the 
other  50  weeks  of  the  year,  so 
it  doesn't  make  sense  for  us  to 
invest  in  that  kind  of  infra¬ 
structure  on  an  annual  basis." 

Haverty  Furniture  Cos.  is 
another  IBM  customer  that 
said  it  has  benefited  from  a 
server  consolidation  project 
involving  the  iSeries,  previ¬ 
ously  called  the  AS/400.  The 
Atlanta-based  company,  which 
has  about  100  retail  outlets  in 
the  southeastern  U3n  convert¬ 
ed  from  nine  AS/400s  to  three 
iSeries  machines  in  January 
to  support  its  core  applica¬ 
tions,  including  point-of-saie 
operations,  customer  service 


and  home  deliveries. 

Haverty  CIO  J.  Edward 
Clary,  who  attended  an  IBM 
press  briefing  at  the  tourna¬ 
ment.  declined  to  quantify  the 
company’s  cost  savii^  from 
the  server  consolidation  proj¬ 
ect  But  be  said  the  effort  has 
freed  up  some  of  Haverty's  50 
IT  staffers  to  help  support 
technologies  such  as  Domina 
Linux  and  WebSphere. 
O4S2S0 


INIEIIUE 

\As4  oi»  HanMaie  knowtedije  Center  tor 
addnoral  nsM  M  nlvniBan 
(WcUMt  12200 
WMMrjowiBilteriBfM.com 


“War  Drive’  Reveals  New  York’s  Hidden  Security  Raws 


BY  OAN  VEBTON 

NEW  VORK 

While  physical  security  was 
tightened  to  unprecedented 
levels  here  last  week  for  the 
Republican  National  Conven¬ 
tion,  IT  security  researchers 
uncovered  an  unsettling  num¬ 
ber  of  unencrypted  wireless 
devices  chat  th^  said  created 
a  potential  information  securi¬ 
ty  nightmare  for  convention 
organizers  and  delates. 

During  a  two-hour  "war 
drive"  around  the  site  of  the 
RNC  as  well  as  Manhattan's 
financial  district,  security  re¬ 
searchers  from  Boston-based 
Newbury  Networks  Inc.  dis¬ 
covered  more  than  7.000  tvire- 
less  devices,  1,123  of  which 
were  located  within  blocks  of 
Madison  Square  Garden,  in¬ 
cluding  a  network  named 
“Wireless  for  Kerry.”  More 


important.  67%  of  those  de¬ 
vices  were  access  points  that 
didn’t  have  any  built-in  en¬ 
cryption  protection. 

During  the  war  drive,  to 
which  Computerworld  was 
granted  exclusive  access. 


Newbury  technicians  set  up 
an  HfM^eci'red  wireless  “honey- 
pot"  that  masqueraded  as  a 
Unksys  access  point.  Accord¬ 
ing  to  a  log  analysis  of  New¬ 
bury’s  WiFi  Watchdog  moni¬ 
toring  system,  a  wireless  de¬ 


vice  attempted  to  automatical¬ 
ly  connect  to  the  boneypot 
every  90  seconds. 

The  findings  underscore 
that  while  New  York  contin- 
i  ued  to  focus  on  physical  secu¬ 
rity  for  the  convention,  the 
large  number  of  open,  unse¬ 
cured  wireless  networks  rep¬ 
resented  a  serious  threat  to 
the  city's  hard-wired  infra¬ 
structure.  said  Newbury  CEO 
Michael  Maggio. 

"A  wireless-enabled  note¬ 
book  computer  powered  up 
inside  Madison  Square  Gar¬ 
den  by  a  conventioneer  or  me¬ 
dia  representative  could  auto¬ 
matically  associate  with  wire¬ 
less  networks  outside  of  the 
building,"  said  Maggio.  noting 
that  such  a  security  gap  could 
allow  an  attacker  to  gain  ac¬ 
cess  to  the  wired  network  in¬ 
side  the  facility.  "All  the  secu¬ 


rity  policies  in  the  wortd  can't 
st<^  a  wireless  intruder  from 
accessing  an  open  network 
signal  emanating  from  a  Wi-Ft 
access  point  or  network  card." 

The  two-hour  drive  around 
Manhattan  also  revealed  as 
many  as  2J61  access  points 
and  821  client  devices  broad¬ 
casting  unique  service  set 
ideotiflers.  Tbe  SSIDs  bea¬ 
coned  by  clients  is  really  a 
valuable  list  for  ao  attacker." 
said  Brian  Wangerien,  senior 
product  manager  at  Newbury. 
"Once  the  anacker  knovrs  that 
a  client  is  beaconing  for  a  par- 
I  ticular  SSID.  be  can  change 
I  the  SSID  ofhis  (access  point] 
and  trick  the  client  into  con- 
I  nectii^  to  the  attacker's  ac- 
I  cess  poiDL"  O  49249 
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Nortel’s  CEO  Remains  Optimistic  in 
The  Face  of  Cutbacks,  Competition 


Struggling  vendor  needs  to  improve  its 
marketing  capabilities.  Owens  says 


Despite  nortel  Nei- 
woriu  Ltd.'s  recent 
announcement  of 
more  workforce 
cuts  and  executive  rirings. 
CEO  Bill  Owens  last  week  said 
the  struggling  vendor  is  still 
investing  heavily  in  research 
and  development  and  is  look¬ 
ing  forw'ard  to  havit^  a  “pretty 
exciting  hiture.” 

But  in  a  roundtable  discus¬ 
sion  with  reporters.  Owens 
also  expressed  concerns  about 
future  consolidation  in  the 
networking  equipment  market 
and  new  competition  from 
China-based  vendors  such  as 
Huawei  Technologies  Co. 
Owens  predkfed  that  compa¬ 
nies  like  Huawei  will  create 
downward  pricing  pressures 
on  all  networking  vendors. 

3Com  Corp.  has  set  up  a 
Hong  Kong-based  joint  ven* 
ture  with  Huawei  and  Owens 
said  Nortel  is  considering  dif¬ 
ferent  ways  of  protecting  itself 
against  the  new  competition, 
including  the  possibility  of 
fonnii^  its  own  partnerships 
or  joint  ventures.  “Everybody 
{in  the  industry)  is  talking  to 
everybody."  be  said. 

Martoting  (mprovements 

According  to  Owens,  Nortel 
devotes  about  half  of  its  work¬ 
force  to  engineering  and  still 
spends  as  much  per  employee 
on  R&D  as  its  rivals  da  But. 
be  added.  Nortel  is  trying  to 
in^rove  its  marketing  and  has 
appointed  a  board-level  busi¬ 
ness-development  executive 
to  help  out  with  that  effort 
“None!  is  not  particularly 
good  at  marketing . . .  and 
that’s  one  of  the  reasons  I’m 
here,"  said  Clent  Richardson, 
the  Brampton.  Ontario-based 
company’s  vice  president  of 
global  marketing.  Richardson 
also  look  part  in  the  round- 


table  along  with  Owens. 

Zeus  Kerravala,  an  analy'st 
at  Detwiler.  Mitchell.  Fenton 
&  Graves  Inc.  in  Boston,  said 
Nortel  has  long  been  known 
for  “good  engineering,  poor 
marketing."  However.  Iter- 
ravala  said  that  the  financial 
reporting  problems  now  plagu¬ 
ing  Nortel  haven’t  been  a  big 
concern  for  the  company's 
customers. 

John  Haltom,  network  direc¬ 
tor  at  Erianger  Health  System 
in  Chattanooga.  Temu.  said  he 
hasn't  seen  any  impact  from 


the  latest  reorganization  at 
Nortel  but  added  that  he  re¬ 
grets  the  additional  layoffs. 
Erianger  is  installing  network¬ 
ing  gear  and  1.700  voice-over- 
IP  phones  from  Nortel  and 
Haltom  said  he  thintu:  that 
sticking  with  the  vendor  ts 
paying  off  as  Nortel  adds  fault 
tolerance  and  other  advanced 
capabilities  to  its  products. 

Haltom  noted,  though,  that 
he's  bemused  by  Nortel’s  plan 
to  change  the  name  of  its  Suc¬ 
cession  4  voice  switch  as  part 
of  the  marketing  improvement 
effort.  Nortel  will  b^in  using 
the  name  Communication 
Server  1000  in  the  fall  —  a 
change  that  marks  the  fourth 


SAP  ERP  System  Uncovers 
$41M  in  Accounting  Errors 


Shipper  restates 
earnings;  rollout 
gets  part  of  blame 


•V  mahc  l.  sonoini 
An  ongoing  installation  of 
SAP  AG's  financial  software 
at  a  London-based  container 
shipping  Ann  has  exposed 
flaws  in  its  legacy  accounting 
systems,  forcing  the  company 
to  lower  its  earnings  over  the 
past  three  years  by  a  total  of 
$41  million. 

OfTicials  at  CP  Ships  Ltd. 
said  the  SAP  rollout  itself  con¬ 
tributed  to  the  need  for  the 
restatement,  which  was  an¬ 
nounced  last  month.  Demands 
placed  on  business  units  while 
the  software  was  beit^  in¬ 
stalled  early  this  year  led  to 
delays  in  transferring  infonna- 
tion  between  shipping  opera- 
liOQs  and  the  fmance  depan- 
meni.  making  it  hard  to  up¬ 
date  cost  estimates  in  a  time¬ 
ly  manner.  The  proccs.sing  of 
actual  cost  data  was  also  de¬ 
layed.  CP  Ships  said. 

On  the  plus  side,  the  compa¬ 
ny  said  the  SAP  applicatioRs 


have  delivered  new  visibility 
into  its  financial  operations. 
The  installation  “revealed 
some  deficiencies  in  former 
systems  and  related  business 
and  accounting  processes,  for 
which  corrective  action  has 


H  We  will  be  pure, 
aspureaslcan 
make  this  company. 

WLl  OWENS. 
NofitIprasUsntaadCEO 

time  the  switch  has  been  re¬ 
named  since  Erianger  began 
using  it  several  years  ago. 
according  to  Haltom.  “They 


are  starting  to  wear  me  out 
with  name  changes."  he  said. 

Nortel  which  is  restating  its 
financial  results  back  to  2001, 
last  month  said  it  would  lay 
off  about  3.500  of  its  35.000 
workers.  It  also  fired  seven  fi- 
nance  executives,  continuing  a 
series  of  management  changes 
that  began  when  Owens  was 
named  president  and  CEO  in 
April  [(^uickLink  46579]. 

Owens  said  last  week  that 
he’s  appointing  a  vice  presi¬ 
dent  of  ethics  and  compliance, 
but  he  denied  that  there's  an 
entrenched  culture  of  wrong¬ 
doing  at  Nortel 
"We  will  be  pure,  as  pure  as 
I  can  make  this  company.”  he 
said.  O  49207 

REPOITHKDEUY 

Nortel  again  postpones  the  filing  oi  its 
restated  Imancial  results 
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been  taken  and  continues."  CP 
Ships  said  in  a  statement. 

The  use  of  the  software  has 
also  improved  financial  con¬ 
trols  on  transactions  and  ac¬ 
count  balances,  particularly 
ones  involving  different  inter¬ 
nal  operating  units,  said  CP 
Ships.  That  helped  executives 
identify  $8  million  in  erro¬ 
neous  account  babnees  that 
had  been  reported  as  pan  of 
the  company’s  financial  re¬ 
sults  for  2003  and  this  year’s 
first  quarter. 

CP  Ships  rolled  out  the 
SAP-based  system  to  five  of 
its  seven  lines  of  business  in 
January,  Chief  Financial  Offi¬ 
cer  Ian  Webber  said  during  a 
webcast  briefing  about  the  re¬ 
statement  and  the  company’s 
second-quarter  results.  Web¬ 
ber  noted  that  the  software 
has  also  allowed  CP  Ships  to 
improve  its  financial  reconcil¬ 
iation  procedures. 

The  company  is  working  to 
strengthen  its  accounting  op¬ 
erations  through  steps  such  as  ' 
using  the  SAP  applications  to  j 
speed  up  the  processii^  of  fi-  | 
nancial  data  and  customer  in¬ 
voices.  Webber  said. 

'The  applications  are  sched¬ 
uled  to  be  installed  at  the  oth¬ 
er  two  business  units  by  early 
next  year,  w^ch  would  put 


the  entire  company  on  com¬ 
mon  operational  and  account¬ 
ing  systems.  CP  Ships  said  it 
doesn't  expect  the  last  phase 
of  the  rollout  to  result  in  "any 
significant  transition  issues" 
at  the  remaining  units,  one  of 
which  b  already  running  an 
earlier  version  of  SAP’s  finan¬ 
cial  software. 

Officials  at  the  company  de¬ 
clined  requests  for  more  infor¬ 
mation  al^t  the  SAP  project 
including  the  cost  of  the  roll¬ 
out.  “We're  still  in  the  process 
of  completing  the  implemen¬ 
tation."  said  a  spokeswoman, 
adding  that  fiirther  comment 
would  be  “a  bit  premature." 

CP  Ships  Chairman  Ray 
Miles  said  during  the  wetost 
that  the  company's  numbers 
appeared  to  be  valid  until  July, 
in  part  because  of  the  delays 
in  processing  cost  data. 

To  ensure  that  the  new  fig¬ 
ures  were  accurate,  there  was 
a  “huge  amount  of  activity"  by 
the  company’s  audit  commit¬ 
tee  to  invest^te  and  nail 
down  the  actual  results.  Miles 
added.  04S22S 
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^blems  Bedevil  EDS  Case  Management 
Project  for  U.K.*s  Child  Support  Agency 


$8063M  system  should  be  unplugged  if 
flaws  aren’t  fixed,  says  legislative  report 


BV  MABC  L.  BQWOlNt 

A  chiid'support  case  iBaoage- 
ment  and  telephony  system 
that's  expected  to  cost  the 
UX  govemiDent  S806^  mil¬ 
lion  over  10  years  is  in  danger 
of  being  unplugged  if  the 
agency  overseeing  the  proicct 
can't  fut  technical  and  opera¬ 
tional  problems  within  the 
next  few  months. 

The  implementation  in¬ 
volves  a  lava-based  ai^lica- 
tion  that  was  developed  by 
Electronic  Data  Systems  Corp. 
for  the  UX’s  Child  Support 
Agency  (CSA),  which  over¬ 
sees  the  assessment  and  col¬ 
lection  of  child-support  pay¬ 
ments  from  parents  who  have 
separated.  Tlic  project  also  in¬ 
cludes  a  companion  call  cen¬ 
ter  system  built  by  BT  Group 
PLCs  consulting  and  systems 
integration  unit. 

The  mixed  system,  which 
went  live  18  rr>onths  ago.  was 
the  subject  of  a  damning  re¬ 
port  issued  in  July  by  the 
British  Parliament's  Select 
Committee  on  Work  and  Pen¬ 
sions,  the  legislative  body 
that’s  charged  with  oversight 
of  the  CSA. 

The  complaints  about  the 
system  include  missed  rollout 
deadlines,  an  inability  to  add 
new  cases  and  migrate  exist¬ 
ing  ones  to  the  system,  and  an 
"appalling  level  of  service"  on 
telephony,  the  report  said.  It 
noted  that  about  170.000  child- 
support  cases  need  to  be  en¬ 
tered  into  the  system  and  that 
the  backlog  is  growing  by 
30,000  cases  each  quarter. 

The  report  added  that  the 
case  management  and  tele¬ 
phony  systems  don't  woi^ 
well  together,  resultmg  in  calls 
"being  routed  to  the  wrong 
place  and  cases  disappearing 
from  the  caseworker’s  screen 
as  staff  try  to  answer  a  tele¬ 
phone  inquiry." 

In  the  report,  the  committee 
recommend  that  the  tele¬ 
phony  system  be  abandoned 


and  replaced  if  it  isn’t  fully 
functional  by  May. 

The  panel  also  said  that  a 
contingency  plan  should  be 
readied  if  the  application  built 
by  EDS  can't  Adty  process  new 
cases  by  Dec.  1  and  the  CSA 
can't  guarantee  the  ability  to 
migrate  existing  cases  by  May. 

The  CSA  b  part  of  the  De¬ 
partment  for  Work  and  Pen¬ 
sions  (DWP),  which  has  two 
months  to  respond  to  the  rec¬ 
ommendations.  said  Rob  Mar- 
ris,  a  member  of  the  parlia¬ 
mentary  committee.  That 
deadline  b  flexible,  Marris 
said,  but  he  added  that  the 
re^nse  will  likely  be  issued 
next  month. 


**We  are  not  saying  the  sys¬ 
tem  should  be  abandoned 
come  December."  Marris  said. 
"What  we  are  saying  b  the 
government  should  draw  a 
line  in  the  sand  if  DWP  cannot 
come  up  with  a  guarantee.” 

Continuing  kiPwaM 

Because  of  the  technical  prob¬ 
lems,  the  CSA  b  continuing  to 
run  its  older  applications  in 
parallel  with  the  new  system, 
which  b  known  as  CS2.  Some 
of  the  agency’s  workers  still 
rely  solely  on  the  old  system, 
which  bn't  fully  autonuted 
and  requires  heavy  use  of  pa¬ 
per  documents.  Other  em¬ 
ployees  have  been  migrated  to 
the  new  one. 

Marris  said  the  troubles  on 
the  CS2  project  illustrate  a 
general  problem  with  con- 


Federal  Audit  Raises  Doubts 
About  IRS  Security  System 


BV  LINOA  BOBCNCBANCE 

Software  performance  and 
functionality  problems  con¬ 
tinue  to  pla^e  a  system  de¬ 
signed  to  detect  hacking  and 
other  unauthorized  activities 
on  computers  at  the  InternaJ 
Revenue  Service,  according  to 
auditors  within  the  ILS.  De¬ 
partment  of  the  Treasury. 

The  problems  are  limiting 
the  ability  of  business  man¬ 
agers  and  IT  security  workers 
at  the  IRS  to  identify  improper 
uses  of  new  applications  that 
provide  online  tax  services 
and  information  about  re¬ 
funds,  the  auditors  said  in  a 
report  issued  last  month  by 
the  Office  of  the  Treasury 
Inspector  General  for  Tax 
Administration. 

The  auditors  themselves 
have  also  been  unable  to  use 
the  Security  Audit  and  Analy- 
sb  System  (SAAS)  to  check 
whether  IRS  employees  are  ac¬ 
cessing  taxpayer  data  without 
authorization,  according  to  the 
Treasury  Department  report 

It  added  the  problems 
call  into  question  whether  the 


IRS  should  f>roceed  with  Us  IT 
modernization  plans. 

“Not  having  an  effective 
audit-trail  review  process  b  a 
significant  security  weakness 
that  diould  wei^  heavily*  on 
whether  to  accredit  future 
modernization  applications,” 
the  report  said. 

According  to  the  report,  the 
auditing  system  collects  infor¬ 
mation  about  application  us¬ 
age  and  stores  U  in  a  central 
database.  Users  should  then  be 
able  to  tap  the  audit  trail  data 
to  generate  reports  and  run  ad 
hoc  queries  in  order  to  deter¬ 
mine  whether  any  improper  i 
activity  has  taken  plan  arid  re-  I 
construct  how  it  happened.  I 


tracts  between  government 
agencies  and  IT  services 
firms.  "You  don’t  have  enough 
experts  (within  agencies],  so 
you  can’t  know  about  and  po¬ 
lice  what  the  outside  supplier 
b  doing."  he  said. 

A  spokeswoman  for  the 
DWP  confirmed  via  e-mail 
that  there  “have  been  techni¬ 
cal  problems  with  the  IT  and 
telephony  systems,  which  we 
are  working  on  with  our  sup¬ 
plier,  EDS." 

Plano.  Ihxas-based  EDS  de¬ 
clined  to  comment  last  week, 
except  to  reiterate  a  statement 
it  issued  in  late  July.  “While 
there  have  been  problems  with 
several  aspects  ttf  tbc  program, 
the  DWP-EDS  team  b  execut¬ 
ing  a  joint  plan  to  resolve  the 
outstanding  IT  and  business  b- 
sues."  Tom  Warst^,  managing 
director  of  the  DWP  account 
for  EDS,  said  in  the  suiemenL 
The  rr  system  b  now  deliver¬ 
ing  a  robust  service  and  b  ctm- 
stantly  improving."  Cl  49046 


The  slow  pace  of 
processing  new 
claims  is  also  un¬ 
acceptable  and 
represents  a  very 
disappointing 
level  of  service. 

. . .  The  present 
performance  falls 
some  way  short 
of  what  most 
people  would 
describe  as  the 
proper  sense  of 
working.' 


SAAS  was  developed  for 
the  IRS  by  Computer  Sciences 
Corp..  which  delivered  an  ini¬ 
tial  version  of  the  system  in 
late  2002.  But  the  software 
problems  are  preventing  users 
from  accessing  the  database, 
the  Treasury  Department  au¬ 
ditors  said  in  their  report. 

Aware  of  the  ProUems 

The  in^iector  geoeral's  office 
claimed  that  the  IRS  was 
aware  of  the  problems  from 
the  outset  but  accepted  deliv¬ 
ery  of  SAAS  with  the  stipula¬ 
tion  that  CSC  would  address 
the  deficiencies.  The  prob¬ 
lems  still  haven't  been  folly  re¬ 
solved.  the  report  said,  adding 
that  the  IRS  also  hasn't  devel¬ 
oped  internal  operatii^  proce¬ 
dures  for  reviewing  the  ^ta 
collected  by  SAAS. 

However.  Daniel  Galik, 


A  Taxing  Situation 


chief  of  mbsioa  assurance  for 
the  IRS,  said  in  a  written  re¬ 
sponse  to  the  report  that 
SAAS  met  all  deflned  require¬ 
ments  and  passed  all  tests  be¬ 
fore  it  was  accepted. 
wrote  that  the  IRS  b  taking 
steps  to  correct  the  system 
problems  and  expects  all  the 
major  components  of  SAAS  to 
be  folly  fonctiooal  by  the  end 
of  October. 

He  deflected  a  recommeo- 
darion  by  the  iiiq>ec(or  gener¬ 
al’s  office  that  the  IRS  develop 
alternatives  for  reviewing  ap- 
plication  audit  traib  in  case 
the  problems  with  SAAS  can’t 
be  fixed.  The  agency  b  pre¬ 
pared  to  commit  more  re¬ 
sources  to  ensure  that  tbc  sys¬ 
tem  can  be  used  effectively. 
Galik  wrote. 

The  SAAS  document  was 
the  third  repon  about  IT 
shortcomings  at  the  IRS  b- 
sued  by  the  inSpeaor  gener¬ 
al's  office  in  recent  months 
(QuidtLink  48391 J. 

An  IRS  spokesman  said  the 
agency  had  no  comment  be¬ 
yond  Galik’s  response.  El  Se- 
gundo.  Calif-based  CSC  the 
prime  contractor  for  IT  mod- 
ernizatioo  projects  at  the  IRS. 
decUsed  to  comment  on  the 
SAAS  report,  fl  49206 
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Problems  Bedevil  EDS  Case  Management 
Project  for  U.K.’s  Child  Support  Agency 


S8()6.5M  system  should  be  unplugged  if 
flaws  aren't  fixed,  stiys  legislatiw  report 


ev  MARC  L.  SONOINt 

A  child-support  case  manage¬ 
ment  and  telephony  system 
that's  expected  to  cost  the 
U.K.  government  $80().5  mil¬ 
lion  over  JO  years  is  in  danger 
of  being  unplugged  if  the 
agency  overseeing  the  project 
can't  fix  technical  and  opera¬ 
tional  problems  within  the 
next  few  months. 

TTie  implementation  in- 
valve's  a  Java-based  applica¬ 
tion  that  was  developed  by 
Electronic  Data  Sj-stems  a>rp. 
for  the  U.K.'s  Child  Support 
Agency  (CSA).  which  over¬ 
sees  the  assessment  and  col¬ 
lection  of  child-support  pay¬ 
ments  fnim  parents  who  have 
separated.  The  project  also  in¬ 
cludes  a  companion  call  cen¬ 
ter  s>  stem  built  by  BT  Group 
I'l-t ;'s  ci*n.sulting  and  systems 
integration  unit. 

The  mixed  system,  which 
went  live  18  months  agtx  was 
the  subject  of  a  damning  re-  | 
port  issued  in  July  by  the  i 

British  I’arliament's  Select  j 

Committee  tm  Work  .md  iVn-  I 
sU>ns.  the  legislative  body  I 

that's  charged  with  mersighi  i 
of  the  CSA.  I 

The  c«»mpl:iints  about  the 
system  include  missed  rollout  ! 
deadlines,  an  inability  to  add  ' 
new  cases  and  migrate  exist-  I 
ing  inies  to  (he  system,  and  an  ' 
■'app.tlling  level  of  service"  •>!) 
lelephiim.  the  repi>rt  s;iij.  tr 
noted  that  jbt*ui  rtUUK)  child  | 
suppitn  cases  need  l«»  he  en¬ 
tered  into  the  system  and  that 
the  backlog  is  growing  by  I 
.s(UM)(I  cases  each  qu-irter.  ' 
The  report  .iddcd  th.g  the 
case  m.inagetiicni  .ind  tele- 
phom  systems  di*n'i  work 
well  together,  resulting  in  c.ills 
"heing  routed  to  the  wn*ng 
place  and  cases  disappearing 
fri*m  the  caseworker's  scavn 
as  slalT  try  to  answer  a  tele¬ 
phone  inquiry. " 

In  the  repon.  the  committee 
recommended  that  the  tele¬ 
phony  system  be  abandoned 


and  replaced  if  it  isn’t  fully 
functional  by  May. 

The  panel  also  said  that  a 
contingency  plan  should  be 
readied  if  the  application  built 
by  EDS  can't  fully  process  new 
cases  by  Dec.  J  and  the  CSA 
can't  guarantee  the  ability  to 
migrate  existing  cases  by  May. 

The  CSA  is  part  of  the  De¬ 
partment  for  Work  and  Pen¬ 
sions  (DWP).  which  has  two 
months  to  respond  to  the  rec¬ 
ommendations.  said  Rob  Mar- 
ris.  a  member  of  the  parlia- 
mentar>'  ci»mmittee.  That 
deadline  Is  flexible.  Mams 
said,  hut  he  added  that  the 
response  will  likely  be  issued 
next  month. 


"We  are  not  saying  the  sys¬ 
tem  should  be  abandoned 
come  December,"  Marris  said. 
“What  we  are  saying  is  the 
government  should  draw  a 
line  in  the  sand  if  DWP  cannot 
come  up  w'iih  a  guarantee." 

Continuing  in  Parallel 

Because  of  the  technical  prob¬ 
lems.  the  CSA  is  continuing  to 
run  its  older  applications  in 
parallel  with  the  new  system, 
which  is  known  as  CS2.  Some 
of  the  agency's  workers  still 
rely  sttlely  on  the  old  system, 
which  isn’t  fully  automated 
and  requires  heavy  use  of  pa¬ 
per  documents.  Other  em¬ 
ployees  have  been  migrated  to 
the  new  ime. 

Marris  said  the  troubles  on 
the  CS2  project  illustrate  a 
general  problem  with  am- 


Federal  Audit  Raises  Doubts 
About  IRS  Security  System 


BV  LIMDA  ROSENCRAMCE 

Software  performance  and 
functionality  problems  con¬ 
tinue  to  plague  a  system  de¬ 
signed  to  detect  hacking  and 
other  unauthori/ed  aitivirics 
on  computers  at  the  Internal 
Revenue  Serviee.  according  In 
auditors  w  ithin  the  US.  De¬ 
partment  of  the  I  reasury. 

The  problems  are  limiting 
the  ability  o|  busirw'ss  man¬ 
agers  and  IT  security  workers 
ai  the  IRS  to  identify  improper 
use's  of  new  applicationsihat 
pnw  ide  online  tax  service's 
and  information  about  rc- 
fund.s.  the  auditors  said  in  a 
report  i.ssueJ  last  month  by 
the  Office  of  the  Treasury 
Inspc'ctor  General  for  lax 
.Administration. 

Tile  auditors  ihemselve*s 
have  alst*  been  unable  i«*  use' 
the  Security  Audit  and  Analy¬ 
sis  S\ste*m  (.SAAS»  to  check 
whether  IRS  employees  are  ac¬ 
cessing  taxpayer  data  without 
authorization.  aca)rding  !«>  the 
Treasury  Ik-partment  rcfsirt. 

It  .added  that  the  problems 
call  into  question  whether  the 


IHS  should  pniceed  with  its  IT 
m<kJemi7.iiion  plans, 

"Not  having  an  effective 
audit-trail  review  pntcess  is  a 
significant  security  we.akitcss 
(hat  should  weigJi  heavily  on 
whether  Ui  accredit  future 
modcrni/aiion  applications." 
the  report  said. 

According  to  the  rcfsin.  the 
auditing  system  sullcsis  infor- 
ntation  about  application  us 
age  and  si»*n.'s  it  in  a  centr.il 
database.  Users  should  then  be- 
able  to  tap  the  audit  trail  data 
to  generate  reports  and  run  ad 
hoc-  quericTi  in  i»rder  (o  deter¬ 
mine  whether  am  impnipcr 
activity  has  taken  place  and  re- 
cortstruct  hc*w  it  happenc'd. 


tracts  between  gov  ernment 
agencies  and  IT  serv  ices 
firms.  *'Aou  don't  have  enough 
experts  I  within  agenciesj.  so 
you  can't  know  abvmi  and  po¬ 
lice  what  the  outside  supplier 
is  dtiing."  he  said. 

A  i^vkeswoman  for  the 
DWP  confirmesl  via  e-mail 
that  there  “have  been  techni¬ 
cal  problems  with  the  I  T  and 
telephviny  systems,  which  wv 
are  working  on  with  our  sup¬ 
plier.  EDS.  ’ 

Plano.  Texas-based  EDS  de¬ 
clined  to  aimment  last  week, 
except  to  reiterate  a  statement 
it  issued  in  laic  July.  "While 
thea-  have  btvn  problems  with 
several  aspects  of  the  program, 
j  the  DWP-E1>S  team  is  exccut- 
i'  ing  a  joint  plan  to  resolve  the  ^ 
j  outstanding  IT  and  business  is-  I 
sues."  Tom  Warsop.  managing 
director  ofihe  DWI»  account 
j  for  EDS.  said  in  the  statement.  ) 
I  "  rhe  IT  system  is  n«m  deltWT-  ; 
I  ii^  a  robust  service  and  is  coo- 
siantly  improving"  C  49246 

SAAS  was  dev  eloped  for 
the  IKS  by  Computer  Sciences 
(^>rp..  which  delivered  an  ini¬ 
tial  version  oi  the  system  in 
I  late  2(k)2.  But  the  software 
pniblcms  are  preventing  usits 
from  aivcssing  the  J.i(ahase. 

^  the  Treasury-  iVpartnu'ni  au 
ditorssaid  in  their  reptvrt 

Aware  of  the  Problems 

The  inspector  general's  oifice 
claimed  that  the  IRS  was 
aw.-ire  of  the  problems  tr«»m 
the  outset  hut  .u-vepted  deliv  • 
erv  of  SA.Ax  with  the  stipub 
lion  that  (  St.:  would  .iddn-s> 
the  Jefiv'icneiev  'ITic  prob¬ 
lems  Mill  haven't  K-en  fullv  re 
Mvlved.  till-  rep4in  saij.  adding 
th.li  the  IRs  als»>  h.isn'i  dcvel 
»»ped  internal  o|‘cta(tiig  proce 
duri's  for  a-viewmg  Uk-  d.iia 
colitvied  bv  SAA** 

However.  Daniel  t.jlik. 


A  Taxing  Situation 


rftdiiBtiMMmbBcaMtBorttiB-, _ _ 

MS  MMMB  cani  tM  SAAS  to  Klenlify  quesnonable  acMes  on 

the  agenqt's  e^arytew  and  Internet  Rekrid  1^  of  Fing  appBcatere 

«Mon  h  te  RS^  OoMpBlar  SoGMllv  taeUMt  Re^enae  C 

unaiile  lo  accatt  tfie  atstem  to  deled  possite  network  niniaons. 


OepeitaMl  esAafe  cani  use  the  system  to  irwestigtte 
whether  latadhottzed  IS  e^l^llo^(Bes  haw  accagBdta«pR|iifinlnn»iftion 


chief  of  mission  assuranc-e  fur 
the  IRS.  s.iid  io  a  written  rc 
spouse  to  the  report  that 
NA.AS  met  all  defined  require 
mv-nts  and  passed  all  it-sis  be 
Aire  it  was  accepted.  Galik 
vvrtne  that  the  Iks  iv  i.iking 
steps  i«»  convci  the  sv  Mem 
probU'ms  and  expects  all  the 
major  c»*mp.ineni.s  of  SA.AS  ii> 
be  fiillv  fuottional  bv  ihe  end 
“ftktviK'r 

He  deflecicd  .v  recommen 
dal II  m  by  the  inspec{«»f  gener 
•il's  office  thai  (he  IRs  develop 
alternatives  fur  renew  ing  ap¬ 
plication  audit  trails  io  case 

the pnvblcnis  with  sAVs  t.vn't 

he. fixed-  rbc  agchv'V  is  prv 
p.jreJ  l«i  commit  more  rc- 
-Murccs  toi  nwire  iliat  ihcsv^ 
fi-ni  can  Iv  usv  dcffeeiiveb. 
lijlikwrviic 

I  he  s  A.\s  JiK'ument  was 
Ihi'  ihir.l  report  .iN«iit  I! 
sh.-rtc.»imr.L's  .11  flic  IRs  is¬ 
sued  Pv  liic  insJVttOf  xvJieJ 
.il'Mifl'u.i  m  rweiii  monrhs 
[V^lIKkl  ink  4HVt\, 

.An  IRs  spoki-snun  s,itd  tiu- 
agenev  luJ  no  Lxmunent  be- 
vond  l.alik's  n.'sponsc  H  sr 
gimdo.  t  all!  -basi'd  i  st ihe 
[  Time  coniravlor  lor  IT  n»od- 
ertn/ation  projects  at  the  IRS. 
declined  to  comment  on  the 
SAAS  report.  O  49206 
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Two  Flaws  Found 
In  Keitefos  Code 

T1»  Kgrtwros  dtMlopmwM  tMin 
■I  liT  ralMsad  softiMn  pitdm 
dtaipMd  to  plug  «  pair  o<  Moirity 
iiolM  in  lilt  nttomfc  lulfwnttca- 
Hon  protoooL  Hm  nmrdMrs 
Om  « 'crtteaT  Hvtrfty  rating 
to  tnt  of  tot  iMt.  a  to-^tfad 
toMWHraa  wjInarafaWy  toal  at> 
taciwi  canid  vaa  to  aaacwto  code 
on  qstom  nmning  liT  Kartoarot 
9.  Tha  otoar  Hmv  ooiiU  bt  uaad  to 
toundi  danfaf-ofoarvlca  altada 


Veritas  to  Acquire 
Archiving  Vendor 

Mritaa  Sollmra  Carp,  said  it  has 
agrand  to  pay  $22S  mMon  in 
cash  to  buy  KVauK  SoflHva  Ud. 
(KV8).  a  UJC-baaad  vondor  of 
rmal  arcMving  appSeadons  for 
Eichanga  usars.  Tho  daal  wl  ba 
compfotod  tois  month,  said  Moun¬ 
tain  Wow.  CaH.-baaad  Varitat. 
KVSw  adiieh  had  raaanuo  of  $23 


AMD  Shows  Off 
Dual-Core  Chips 

Advancnd  Mkro  Davtoas  Inc. 
donumtoratod  Hsflrsl  daal-cora 
procaiaars  and  said  toay  shouid 
bo  aMlabto  for  uaa  in  aarmrs  by 
niid'2005.  Iho  daaicas.  which 
put  hao  pracaaaor  carts  on  a 
cMp,  adi  ft  into  systams  built 
around  MKTs  Optoran  pracas- 
aofs.  Tha  damonsfralion  pracadad 
this  waak’s  bilaf  Davafopar  Fa* 
njm.wharalnlaiCorp.wMdii' 
cuss  Ms  plans  for  duai-eoro  chips. 

IBM,  Intel  Open 
Specs  for  Bbdes 

Btt  and  hfol  said  thayYa  opaning 
up  toa  daaipN  ipadfieallBns  for  a 
iaintfy  damtapad  tow  of  bfoda 


[WTWMMK 


HOT  TECHNOLOOV  TRENDS,  NEW  PRODUCT 
NEWS  AND  INDUSTRY  GOSSIP  BY  MARK  HALL 


Pop  by  Your  Service 
novider  in  the . . . 

...  tooe  houre  of  the  morning  to  prevent  a  data  disaster. 
Good  advice,  especially  when  it  comes  from  the 
CEO  of  a  Web  hosting  company  who  thinks  your 
mission-critical  online  operations  are  at  risk  if  you 
use  offshore  services  or  even  U.S.-based  ones  that 


Bui  otonr  eompaaiea  MM  cant 
cfona  toa  bfoda  aMvart.  which 
BM  tail  aa  to  BfodaConlar  Iw. 


clock  out  after  sunset.  “Go 
visit  your  hosting  company  at 
3:00  in  the  morning  and  sec  if 
someone  answers  the  door.” 
suggests  Mitch  Gervis,  the 
top  executive  at  Dallas-based 
NeoSpire  Inc.  “Do  it  before 
you  have  a  disaster."  If  your 
Web  site  delivers  critical 
business  functions  24  hours  a 
day,  the  last  place  you  want  it 
is  someplace  whose  systems 
administrators  are  all  asleep 
in  their  beds  at  night,  says 
Gervis,  whose  company  hosts 
sites  for  Lowes  Cineplex  The¬ 
atres  Inc..  United  Way  of 
America,  the  Federal  Reserve 
Bank  of  Daila.s  and  other 
users.  Gervis  argues  that  all 
the  sophisticated  remote  di¬ 
agnostic  and  management 
tools  in  the  world  can’t  sup¬ 
plant  a  smart  human  on  the 
premises.  He  adds  that  users 
shouldn’t  fust  demand  that 
data  be  backed  up  and  re¬ 
stored  for  free,  which  he  says 
NeoSpire  does.  They  actually 
should  request  backups  to 
verify  that  the  hosting  com¬ 
pany's  procedures  work. 
NeoSpire  does  five  to  10  data 


I  restores  a  week  at  the  request 
I  of  users,  for  example.  And  be¬ 
ing  a  Southerner  steeped  in 
the  region’s  tradition  of  hos¬ 
pitality.  Gervb  invites  you 
to  drop  by  his  data  center  — 
anytime. 

Protact  Vbur  IP 
Fiwn  OHshore . . . 

. .  .developers 
who  slip  open- 
source  coto 
into  your  appli¬ 
cations.  It’s 
not  that  Indi¬ 
an,  Chinese 
or  other  pro¬ 
grammers 
based  outside 
the  U.5.  have 
malkious 
undermining 
of  your  intellectual  property 
in  mind,  says  Sridhar  Balaji, 
CEO  of  SourceSentry  Inc.  in 
Houston.  It's  just  chat  it's  so 
easy  to  do.  “Oftentiiiies,  de¬ 
velopers  just  grab  something 
on  the  Web  and  put  it  tn  their 
code,"  Balaji  says.  His  compa¬ 
ny  has  run  scans  of  applica¬ 
tions  and  discovered  open- 


'  source  elements.  Inserting 
I  open-source  code  could  upset 
^  your  Ucensing  plans,  particu- 
I  larly  if  you  intend  to  distrib- 
;  ute  your  software  but  keep 
the  source  code  proprietary. 
SourceSentry  offers  its  Biz- 
Century  Methodology  tem¬ 
plates  for  ensxuing  that  your 
of&hore  team  follows  strict 
security,  privacy  and  best- 
practices  procedures  that  go 
beyond  standards  such  as  BS 
7799  (QaickLink  49098].  BaJ- 
aji  claims  that  there  are  thou¬ 
sands  of  start-up  outsourcing 
companies  in  India  alone, 
most  of  which  need  better 
controls.  So  choose  wisely. 

Payingfor 

Middleware  Is  Soon .. . 

^  —  ...  to  be  ■  Ms* 

tent  memory. 
That's  if 
Marc  Fleury 
gets  his  way. 
He's  the  CEO 
of  Atlanta- 
based  JBoss 
Group  Inc., 
which  offers 
an  epony¬ 
mous  open- 
source  application  server  that 
competes  with  BEA  Systems 
inc.’s  WebLogic,  IBM’s  Web¬ 
Sphere  and  other  commercial 
products.  "Everything  is 
game  in  middleware  infra¬ 
structure,"  he  says.  Such  as? 
Portals,  workflow  tools,  con¬ 
nectors.  messaging  technolo¬ 
gy  and  more.  He  claims  that 
JBoss  will  soon  supply  open- 
source  tools  across  the  entire 
middleware  spectrum.  What 
happens  then?  The  market 
can’t  sustain  both  open- 
source  and  pn^rietary  tech¬ 
nologies,"  Fleury  says.  And 
you  can  guess  which  one  he 
thinks  will  win.  Some  venture 
capitalists  obviously  agree. 

They  just  poured  SIO  million 
into  JBoss,  something  that 
wouldn’t  have  happened  a 
few  years  aga  Fleury  recalls 
that  when  be  presented  the 
same  ideas  to  a  venture  capi-  . 
talist  in  2000.  he  was  told  it  I 


was  “not  just  a  bad  business 
plan  —  it  was  a  horrible  one." 
He  now  laughs  at  the  memo¬ 
ry  —  all  the  way  to  the  bank. 

JBoss,  Tomcat 
MySQL  Edipsa,  Ant . . . 

. . .  and  B5  ottor  ogan-sourca 

technologies  can  be  automati¬ 
cally  installed.  con%ured,  in¬ 
tegrated  and  maintained  by 
BlueGlue  from  OpenLogic 
Inc.  in  Highlands  Ranch. 

Colo.  The  GUI-based  too!  is 
sold  for  $399  per  system  as  a 
subscription  service.  It  needs 
to  be  installed  on  each  ma¬ 
chine,  but  the  company  says 
a  new  version  due  in  the  first 
quarter  of 2005  will  be  able  to 
be  deployed  aerbss  multiple 
machines  from  a  single  con¬ 
sole.  The  tc^  100  open-source 
tools  are  fully  evaluated  to 
ensure  complete  integration, 
and  tested  u|>dates  are  sup¬ 
plied  to  users  through  the 
service.  OpenLogic  says. 

Software  Seeks  to 
Stop  Spyware  at... 

. . .  ^  sewcu  by  cwtifytng  that 
Web  sites  and  downloads  are 
free  of  the  insidious  pro¬ 
grams.  Rkk  Carlson,  presi¬ 
dent  Aluria  Software  LLC 
in  Lake  Mary.  Fla.,  says  that 
the  company  on  Friday  will 
unveil  its  certification  pro¬ 
gram  for  spyware-free  soft¬ 
ware  to  assure  users  that 
what  they  download  from 
your  site  doesn’t  contain  key- 
loggers,  adware  and  other 
nasty  code.  The  certification 
prt^ram  is  free  and  works 
like  those  from  VeriSign  Inc. 
and  Thiste.  which  give  online 
visitors  confidence  about  a 
Web  site’s  integrity.  Carlson 
claims  that  ^>yware  is  more 
than  a  nui¬ 
sance  to  IT 
and  is  the  Na 
1  reason  for 
poor  PC  per¬ 
formance  and 
crashes.  Join 
now  while  the 
price  is  right 

CI482«1 


Microsoft 

Your  potential  Our  pasiion 


Mak*  a  nama  for  yoursatf  wHh  Windows  Sarver  Systam?'  Microsoft  Windows  Server  System  makes  it  easier 
to  manage  the  infrastructure  at  K2  Sports.  Here's  how:  By  using  Windows  Server”" 2003  with  Active  Directory* 
and  Exchange  Server  2003,  K2  Sports  consolidated  from  17  to  13  servers  and  now  manages  all  of  its  end  users 
from  one  location.  This  reduced  the  amount  of  time  their  IT  staff  spends  on  administration  by  40  percent,  and 
gave  them  time  to  plan  and  implement  new  projects.  Software  that's  easier  to  manage  is  software  that  helps 
you  do  more  with  less.  Get  the  full  K2  Sports  story  at  mkrosoftcxsmAvssystem 


am 

Microsofp 

Windows 
Server  System 
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SCO  Reports  Loss, 
Caps  Legal  Costs 

TYw  SCO  Group  inc.  raperted  a 
S7.4  mMon  loss  for  Iti  third  quv* 
tor  and  saM  R  h«  aignod  a 
to  cap  the  lagal  costs  o(  ita  anti- 
Umu  campaign  at  S31  mMion. 
“Tha  Mioatkn  buaintsa  ii  now  in 
control  from  a  cost  standpoint.* 
said  CEO  Owf  McBrida.  Tho  cap 
agroowont  botwoOT  Lindofi.  Utah- 
basad  SCO  and  Armonk.  HY.' 
baaod  Boias.  Sehflar  A  Ftainar 
LLP  afMWss  tha  law  Ann  to  a 
larger  parcantaga  of  Miysattie- 
manl  or  award  that  SCO  gets 
from  Ks  lawsuit  against  IBM. 

Manugisiics  Shows 
Preside  the  Door 

M  a  Mng  Id  the  ILS.  SacurWes 
and  Enhanga  Commiasion. 
ManugiiUci  Broup  Inc,  said  it 
tambialad  the  amploymard  of 
ftiiidant  Jarawy  Coots  affaettya 
last  Tuaaday.  The  move  came 
just  a  month  attar  RockvMa.  Md.- 
baaad  Manugistics  Mrsd  Joa 
Cosmn  as  CCO.  Coola  jolnsd  the 
supply  chain  aofhraro  vendor  In 
Juno  2003  aflar  wertdng  at  SAP 
ABaodSloMSystamsbic. 

Verisign  Files  New 
Suit  Against  ICANN 

Aftar  loabig  a  ftadarai  court  batHo 
to  lha  bitwnal  Corporation  for 
Aatognad  NanMaand  Numbars, 
IMStga  lac.  has  Mod  a  broach* 
of-coalracllawaidlagMnst  ICANN  I 
in  laa  Angelas  Supartor  Court.  | 

VsrtSIpi  eWiM  that  ICANN  via* 
latod  Iht  torms  of  an  agrosmant 
giving  Verisign  eontnl  of  the 
.com  domain  ragtotm.  ICANN  da* 
cBnad  to  comment  on  the  stiiL 

Del  Adds  Color 
To  Its  Printer  Line 

Dal  Inc.  announoad  Ns  first  aalf- 
brandod  cotor  iHar  printors. 
addtog  tfirat  modala  to  the  prod¬ 
uct  Iwa  R  roBad  aul  mofilha 
ago  to  an  oflart  to  iura  imars  away 
frowHandatt  Pa{haniCo.Pricas 
rmga  from  S440  to  SBBO. 


F5,  Redline  Expand  Technology 
For  Speeding  App  Performance 


'  SoftvN'are  upgrades  work  with  switches 
I  to  increase  throughput  for  end  users 


rHAwoLCN  delivery  in  February,  said  Ray- 

s  NETWORKS  INC  plans  mond  Williams  Sr.,  a  network 
I  1  _j  to  announce  an  up-  developer  at  the  real  estate 
I  I*  grade  of  its  application  listing  service. 

traffic  management  The  service  has  been  using 

[  software  tomorrow,  the  same  Btg-lP  Version  AS  for  three 
I  day  that  rival  Redline  Net-  years,  but  Williams  said  a  new 
works  Inc.  is  due  to  release  a  user  interface  in  Version  9 
j  tool  that‘$  designed  to  help  IT  should  simplify  administra* 

I  managers  limit  the  need  to  tioo  "by  far."  And  with  20.000 
install  more  application  and  real  estate  agents  in  Washing- 
I  Web  servers.  ton  state  using  the  service 


Both  products  fall  into  a  cat-  via  the  Internet,  the  upgrade 
egory  that  analysts  call  “Web-  could  help  him  set  up  rules  to 


enabled  application  delivery" 
or  “application  front  ends."  F5. 
Redline  and  other  vendors  of¬ 
fer  appliances  that  usually 


I  make  sure  certain  applications 
get  high  priority.  In  a^ition. 
a  new  function  called  iRulcs 
could  make  it  possible  to  en- 


consist  of  specialized  switches  |  sure  that  the  largest  broker- 


,  running  software  that  can 
speed  up  applications  and 
make  them  more  secure. 

PS's  software  upgrade, 
called  Big-IP  Version  9  and 
code-named  Bufi^o  jump 
during  development,  took 
nearly  three  years  to  develop 
and  includes  a  new  traffic 
management  operating 
system,  said  Erik  Giesa.  vice 
president  of  product  market¬ 
ing  at  the  Seattle-based  com¬ 
pany.  The  software  runs  on 
three  new  appliances  that  are 
priced  from  $17,000  to  S3S.OOO. 

Setting  Priorities 

Big-IP  supports  traffic  man¬ 
agement  functions  such  as 
data  compression,  load  bal¬ 
ancing  and  Secure  Sockets 
Layer  acceleratioa  New  fea¬ 
tures  In  Version  9  offer  "rate 
shaping*  capabilities  that 
should  help  IT  managers  maki* 
sure  bandwidth  is  available  for 
high-priority  applications. 

Giesa  said. 

Northwest  Multiple  Listing 
Service  in  Kirkland.  Wash., 
has  seen  a  demonstration  of 
the  upgraded  software  and 
plans  to  buy  two  of  PS’s  new 
h^-end  6400  Series  IP  Appli¬ 
cation  Switch  appliances  for  I 


ages  get  gtiaranteed  access  to 
the  listings.  Williams  said. 

The  application  delivery 
products  now  on  the  market 
have  been  far  too  complex, 
said  users  and  analysts.  But 


expertise  needed  to  run  them 
__  is  increasing,"  Fabbi  said. 

rS  Networks  CampbeU.  Caur-based  Red- 

ISiinn  CariAc  ID  ^ 

e  ^  L  software  offloads  frequently 

^)P  Switch  used  data  from  servers  to 

■  Runsthecompany-sBig-IP  speed  up  processing.  The  soft- 

sofhuirtandfnMbesnwanijfii  ware  si^s  at  SSXKX)  and  runs 
data  throughput  of  20fri(/BDC  tm  Redline's  E/X  ^SO  appli- 

■  Includes  16  OgtMEUwnM  which  rosis  *33,000. 

cogpef  pods,  plus  two  siandaeJ  F5  and  Rcdlinc  compete  with 

and  n«popliona)6b«  porta  maior  switch  maltcni  like  Cisco 

.lsl>asedppdp.ipn».s-  ' 

s<»andpeMleslhn.dp(.  works  Ud,  as  wcli  as  smilct 
hffW  add-in  catds  ones  such  as  Radware  Ud  m 

— -  Mahwah.  NJ.  and  Nclscalcr 

■  Plica:  *35.000  Inc.  in  San  lose.  Fabbi  said 

woridwide  sales  of  the  applica¬ 
tion-boosting  technology  ex¬ 
ceeded  SSOO  million  la«6r  year. 

Officials  at  Redline,  Rad¬ 
ware  and  Nctscaler  alt  said 

FTs  focus  on  a  simpler  user  in-  they  offer  functions  that  FS  is 


terface  doesn't  mean  its  new  introducing  in  its  new  prod- 
offerii^  are  any  less  complex,  uct.  although  Lynn  Nye.  an 
said  Mark  Fabbi,  an  analyst  at  analyst  at  APM  Advfaors  in 
Gartner  Inc.  “These  devices  Portland,  Ore.,  said  Radwar 
do  an  increasing  amount  of  still  provides  the  features  In 
functions,  and  the  amount  of  separate  boxes.  O  49229 


Portland,  Ore.,  said  Radware 
still  provides  the  features  in 
separate  boxes.  O  49229 


BMC  Adds  Tool  to  Track  Batch  Jobs 


■V  MATT  MAMM.cn 

Management  tools  vendor 
BMC  Software  Inc.  tomorrow 
will  unveil  an  application  de¬ 
signed  to  help  IT  managers 
identify  and  respond  to  prob¬ 
lems  in  batch-processing  jobs. 

The  Batch  Impact  Manger 
software  tracks  batch  data 
flows  and  can  notify  data  cen¬ 
ter  workers  of  potential 
delays,  said  Gur  Steif,  director 
of  application  management  at 
Houston-based  BMC.  Ifbatch 
processes  foil.  IT  managers 
can  restart  the  ones  that  are 
most  important  flrst. 

Cambridge  Integrated  Ser¬ 
vices  Group  Inc  in  Cranbury. 
N.).,  has  been  using  Batch 
Impact  Manager  for  the  past 
three  weeks,  primarily  to 
help  process  woricers’  com¬ 
pensation  claims,  said  Laurie 
Kenley,  the  company's  produc¬ 
tion  control  coordinator.  i 


IT  staffers  have  to  ensure 
that  batch  jobs  for  check  proc¬ 
essing  and  data  warehousing 
are  completed  within  a  tight 
schedule  mandated  by  ser¬ 
vice-level  agreements  be¬ 
tween  Cambri<%e  and  its 
customers,  Kenley  said. 

“Long  runtimes  and  delayed 
start  times  can  throw  our 
whole  production  cyde  out 
of  whack,  and  it  can  be  very 
difficult  to  catch  this  before 
our  deadlines  will  be  missed.* 
she  said,  noting  that  Cam¬ 
bridge  also  faces  fines  if  it 
fails  to  meet  state  government 
deadlines  for  workers' 
compensation  checks. 

Batch  Impact  Manager  runs 
on  top  of  BMC’s  Control-M 
batch  man^ement  software, 
which  Cambridge  already 
used.  Coatrol-M  gives  Cam¬ 
bridge’s  IT  staffers  insights 
about  individual  batch  iobs, 


but  Kenley  said  Batch  Impact 
Manager  can  monitor  multiple 
batch  data  flows.  She  added 
that  h  “helps  me  correct  an  is¬ 
sue  that  was  driving  me  nuts: 
How  the  beck  do  you  monitor 
for  ‘what  if?  Now  I  can.* 

“It's  not  at  all  unusual  to 
have  many  batch  jobs  that 
must  finlidi  on  time,  and  if 
there’s  somethii^  wrong  early 
in  a  10-hour  processing  win¬ 
dow.  you  can  have  a  real  prob¬ 
lem,"  said  Rich  Ptak.  an  ana¬ 
lyst  at  Ptak,  Noel  &  Associates 
in  Amherst.  RH. 

He  added  that  large  banks 
and  insurers  often  use  custom 
software  to  provide  function¬ 
ality  similar  to  what’s  in  Batch 
Impact  Manager.  Users  would 
need  to  weigh  whether  con¬ 
vening  from  their  current 
software  to  BMCs  would  be 
cost-effective,  Ptak  said 
048219 
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Health  Care  Firm  Aims 
To  Curb  Printer  Costs 


Expects  three-year, 
$1^  deal  with  HP 
to  yield  efficiencies 

■V  Tooo  m.  wciss 

LEVELAHD-BASED 

University  Hospitals 
Health  System  last 
week  said  it's  wrap¬ 
ping  up  a  proiect  with  Hew¬ 
lett-Packard  Co.  that  will  re¬ 
duce  the  number  of  printers  it 
uses  by  more  than  60%  and 
slash  the  total  count  of  dUTer- 
ent  models  its  IT  staff  has  to 
support  ftom  78  to  fust  12. 

The  printer  consolidation 
moves  are  being  done  under  a 
three-year,  $15  million  contract 
that  HP  and  UHHS  signed  ear¬ 
ly  this  year.  UHHS  opects  to 
lower  hs  printing  ai>d  imaging 


costs  by  $1  million  to  S2.8  mil¬ 
lion  per  year,  according  to 
Marc  Richards,  a  divisional  in¬ 
formation  ofRcer  who  is  re¬ 
sponsible  for  the  health  care 
provider’s  IT  infrastructure, 
including  its  data  centers.  PCs 
and  peripherals. 

UHHS,  which  operates 
more  than  ISO  medical  facili¬ 
ties  in  northern  Ohio,  had  an 
installed  base  of  about  3  JOO 
printers  for  its  U,000  users  be¬ 
fore  the  consolidation  protect 
began,  Richards  said. 

He  added  that  the  company 
was  using  printers  from  HP 
and  U  other  vendors,  causing 
nightmares  for  its  technical 
support  and  help  desk  staffs 
and  complicating  efforts  to 
keep  replacement  cartridges 
and  parts  in  stock. 


An  audit  conducted  by  HP 
found  that  too  many  printers 
were  being  used,  increasing 
operating  costs  and  workloads 
for  support  staffers,  Richards 
said.  He  said  that  over  the  past 
eight  months.  UHHS  has  stan¬ 
dardized  on  HP  printers  and 
chopped  the  number  it  has  in 
place  to  about  1,250. 

A  daunting  Task 

The  number  of  facilities  that 
UHHS  owns  made  the  task  a 
daunting  one.  and  Richards 
said  it  wasn't  easy  to  get  ap¬ 
provals  throughout  the  com¬ 
pany  for  replacing  all  of  the 
existing  printers. 

‘'It  took  a  long  time  to  gain 
acceptance  within  the  opera¬ 
tional  units,"  he  ttoted.  "Had 
HP  not  done  their  education 


with  us.  we  would  never  have 
been  to  this  point.  On  our 
own,  to  set  up  an  operation 
like  this?  No  way." 

The  new  hardware  includes 
multifunction  devices  sup¬ 
porting  both  printing  and 
copying,  monochrome  and 
color  HP  LaserJet  workgroup 
printers,  and  print  server  ap¬ 
pliances.  according  to  the  two 
companies.  IT  administrators 
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at  UHHS  are  using  software 
utilities  built  into  HFs  print¬ 
ers  to  remotely  monitor  and 
control  the  printing  systems 
and  automatically  reorder 
supplies  only  when  they’re 
needed. 

HP.  which  also  provides 
desktop  computers  and  stor¬ 
age  devices  to  UHHS.  formed 
its  Total  Print  Management 
services  unit  about  18  months 
I  ago.  Last  spring,  the  vendor 
announced  a  printer  outsourc¬ 
ing  deal  with  Ford  Motor  Co., 
which  hopes  to  reduce  its 
printing  costs  by  as  much  as 
30%  [Quicklink  46749]. 

"Most  customers  don’t 
know  bow  many  printers  they 
have,”  said  Dave  Arndt,  worid- 
wide  program  manager  for 
print  management  services  at 
HP.  “We're  really  at  the  begin¬ 
ning  of  this  —  kind  of  where 
PCs  and  servers  were  about 
eight  years  ago.  when  people 
would  buy  them  and  didn't 
think  of  managing  them.” 
049252 
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IT  Spending 

next  18  to  24  months,  said  For¬ 
rester  analyst  Tom  Pohlmann. 

"Many  CIOs  are  coming 
around  to  see  chat  it  takes 
some  investments  in  better 
price/perfbrmance  platforms, 
such  as  new  blade  server  tech¬ 
nologies  that  are  starting  to  bit 
the  market,  to  cut  costs  over 
the  long  hauL”  Pohlmann  said. 

Robert  Schwartz,  CIO  at 
Matsushita  Elearic  Corpora¬ 
tion  of  America's  Panasonic 
division  in  Secaucus.  N.],  said 
that  some  companies  seem  to 
be  more  willing  to  invest  in  IT 
as  the  econoin>‘  shows  sigms  of 
improvement.  He  added  that 
he  thinks  corporate  executives 
are  also  startmg  to  get  past 
concerns  that  their  companies 
overinvested  in  technology 
during  the  dot-com  boom  and 
the  Y2k  remediation  effort 
"TTiis  will  fuel  some  level  of 
growth,  but  it  trill  be  tem¬ 
pered  by  selecting  only  those 
initiatives  which  meet  ROl  re¬ 
quirements,"  Schwartz  said. 

Panasonic's  fiscal  year  begins 
April  1,  and  the  company 


won’t  fmalize  its  IT  budget  for 
the  next  one  until  December. 
Schwartz  estimated  that  its  IT 
spending  could  grow  by  as  lit¬ 
tle  as  4%  or  as  much  as  7%. 

Spending  predictions  by 
market  researchers  for  next 
year  are  also  mixed  (see  chart). 
•TVe’re  not  seeing  CIOs  be¬ 
coming  more  optimistic  about 
revenue  growth  and  IT  spend¬ 
ing.”  said  Howard  Rubin,  an 
executive  vice  president  at 
Meta  Group  Inc  "No  one 
wants  to  be  hamstrung  and 
spend  more  on  IT  aiKl  then 
have  the  economy  collapse." 

Instead,  Rubio  said,  users 
are  shifting  around  their  IT  in¬ 
vestments.  Last  year,  emopa- 
nies  spent  an  average  of  about 
65%  of  tbrir  IT  budgets  on  i 


"run  the  business"  work  and 
the  remainder  on  new  proj¬ 
ects.  according  to  Rubin.  "This 
year,  many  have  tried  to  lower 
IT  infrastructure  costs  to  clos¬ 
er  to  50%  of  their  budgets  and 
pump  more  money  into  new 
projects,  he  said.  "Companies 
aren’t  spending  more  on  IT; 
they’re  just  spendii^  it  differ¬ 
ently."  Rubin  said. 

Hilton  Hotels  Corp.  still  al¬ 
locates  slightly  more  than  65% 
of  its  IT  budget  to  supporting 
business  operations,  said 
Damien  Bean,  vice  president 
I  for  corporate  systems  at  the 
!  Beverly  Hills.  Calif-based 
lodging  company. 

Hilton's  IT  budget  is  likely 
to  grow  5%  next  year.  Bean 
said,  although  that  includes 
the  costs  of  supporting  the 
planned  opening  of  more  than 
140  new  hotels.  He  added  that 
savings  Hilton  has  achieved 
throu^  IT  eCHciency  gain* 
this  year  will  be  channeled 
into  sales  systems  and  security 
technologies  next  year. 

But  Bean  said  Hilton  has 
standardized  most  of  hs  hard¬ 
ware  on  Intel-based  systems  i 
and  has  "already  captured  the  I 
benefits  of  conunodity  hard-  I 


ware  and  oonproprietary 
maintenance  fees,  all  of  which 
makes  our  cost  structure  ex¬ 
tremely  competitive  but  limits 
year-over-year  savings." 

IT  spending  at  The  Guard¬ 
ian  life  Insurance  Company  of 
America  is  expected  to  grow 
3%  next  year,  driven  by  a  9% 
increase  in  infrastructure  in¬ 
vestments  to  accommodate 
upgrades  to  the  New  York- 
based  insurer's  disaster  recov¬ 
ery  and  security  capabilities. 


CIO  Dennis  S.  Callahan  said. 

J.  Edward  Clary.  CIO  at 
Haverty  Furniture  Cos.  in  At¬ 
lanta,  said  be  won't  know  what 
his  IT  budget  will  be  for  2005 
until  mid-November,  when  the 
company's  board  makes  its  fi¬ 
nal  approvals.  But  be  does 
know  that  the  budget  won't  be 
smaller  than  it  is  this  year.  "It 
would  be  too  hard  for  us  to  re¬ 
cover  if  wc  tried  to  cut  batk 
on  our  infrastructure  invest¬ 
ments."  Clary  said.  O  49247 
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Embracing  Change 


I  DID  THE  CRAZIEST  DAMN  THING  last 

week.  I  quit  this  wonderful  job  as  Computer- 
world’s  editor  in  chief  and  signed  up  to  be  the 
top  editor  for  an  emerging  business  unit  at 
another  publishing  company.  As  I  sit  here 
writing  my  last  editorial.  I’m  almost  as  stunned 


about  it  as  my  staff  is.  I 
feel  like  Fm  living  that 
sardonic  Dilbert  one- 
liner.  'Change  is  good. 

You  go  first.” 

( just  never  thought  I 
would. 

Tve  spent  15  very  happy 
years  at  Computerworid. 
the  past  five  as  its  chief 
editor.  Fve  traveled  a  path 
from  reporter  to  News 
editor  to  executive  editor 
to  editor  in  chief  and 
company  executive,  and 
throu^out  it  alt  I've  been  a  relent¬ 
less  cheerleader  for  our  venerable 
brand,  our  editorial  integrity  and  our 
award-winning  staff.  Always  the 
,  biggest  fan  of  our  readers.  Always 
loving  what  we  do  here. 

None  of  that  affection  has  changed. 
But  along  came  change  itself  in  the 
guise  of  an  unexpected  opportunity 
to  create  something  entirely  new. 

And  I  found  I  couldn't  resist  the  invi¬ 
tation.  1  suddenly  had  to  go  first,  de¬ 
spite  my  sorrow  about  leaving  such  a 
great  publicatioa  There  was  some 
joy.  however,  in  seeing  that  new  jobs 
and  opportunities  are  flourishing 
once  again  in  the  IT  publishing  in¬ 
dustry.  which  has  limped  along  with 
the  technology  sector  as  we’ve  all 
endured  the  economic  downturn. 

Chan^  is  unsettUi^  but  it  really 
can  be  a  good  thing.  I  offer  as  Exhibit 
A  the  way  it  opened  up  new  oppor¬ 
tunities  for  several  talented  Conyyut- 
erworld  editors  last  week. 

Our  new  editor  in  chief  is  Don 
Tennant,  whom  many  of  you  already  , 
know  as  the  accomplished  modera¬ 
tor  of  CIO  discussion  panels  at  sev¬ 
eral  of  our  past  Premier  100  IT  Lead¬ 


ers  conferences.  You've 
also  seen  the  results  — 
each  week  in  these  pages 
•—  of  Don's  work  as  our 
outstanding  News  editor. 
Under  his  direction,  our 
reporters  have  earned 
more  than  100  journal¬ 
ism  awards  from  the 
American  Society  of 
Business  Publication 
Editors,  including  the 
ASBPE’s  Magazine  of  the 

_ Year  award  earlier  this 

summer. 

With  Don’s  promotion  comes  a 
chai^  for  assistant  News  editor 
Craig  Stedman  —  a  legendary  re¬ 
porter  in  our  newsroom,  perhaps 
best  known  for  his  unrelenting,  in- 
depth  covera^  of  failed  ERP  proj¬ 
ects  in  the  late  '90s.  Craig  now  takes 
over  as  News  editor. 

Also  taking  on  a  new  position  here 
is  our  Features  editor,  Mitch  Betts, 


who  last  week  was  promoted  to  ex¬ 
ecutive  editor.  This  change  expands 
Mitch's  responsibilities  to  oversight 
of  News  operations  as  well  as  our 
Technology  and  Management  fea¬ 
ture  sections.  Those  of  you  who  are 
fans  of  our  monthly  Knowledge  Cen¬ 
ters  have  seen  Mitch’s  fine  work  as 
the  chief  architect  of  this  ongoing 
series  of  in-depth  technology  and 
business  special  reports. 

Finally,  we  ha\«  a  new  editorial 
leader  for  Computerworlds  Premier 
100  conference  in  Julia  King,  whose 
distinguished  work  as  our  national 
correspondent  has  consistently 
made  its  mark  on  our  management, 
career  and  outsourcing  coverage.  Ju¬ 
lia  has  also  played  a  key  role  in  the 
development  and  growth  of  the  Pre¬ 
mier  100,  now  entering  its  sixth  year 
as  the  largest  IT  executive  confer¬ 
ence  in  the  industry. 

As  news  of  my  departure  spread 
last  week  (a  minor  tempest  in  our 
media  teapot),  1  was  flattered  to  hear 
from  so  many  of  our  readers  and 
friends  throughout  the  industry 
(some  humorously  inquiring  about 
my  mental  health).  But  not  to  worry. 

I  know  our  paths  will  cross  again, 
and  I  leave  you  in  very  good  hands. 

Change  is  good.  I’ll  go  first. 
049216 
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Something 
Bigger  Than 
Tne  Next 
Big  Thing 
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N  THE  PAST  YEAR  or  SO, 
an  idea  has  been  steadily 
.working  its  way  from  the 
back  of  my  mind  to  the  front. 
This  idea  is  starting  to  seri¬ 
ously  influence  the  way  I  see 
my  job  as  well  as  my  partici¬ 
pation  in  the  IT  profession. 

It  starts  with  an  observation: 
We  in  IT  are  still  playing  that 
goofy  game  of  inventing  TLAs 
(three-letter  acronyms).  The 
problem  with  this  is 
that  the  prolifera¬ 
tion  of  TLAs  just 
distracts  us  from  ap¬ 
preciating  a  larger 
opportunity  and 
draws  us  down  nar¬ 
row  alleys  in  search 
of  the  next  insanely 
great  new  thing. 

TLAs  — BPR. 

GUI,  OOP.  ERP. 

CRM  —  and  great 
new  things  domi¬ 
nated  IT  in  the 
1990s.  Some  of 
those  TLAs  hit  the 
big  time,  and  lots  of 
money  changed 
hands  because  of 
them. 

But  that  time  is 
over.  I  don’t  use  TLAs  in  conversation 
with  my  C-level  peers,  or  with  any¬ 
body  outside  of  rr  for  that  matter.  Five 
or  six  years  ago.  sprinkling  our  conver¬ 
sation  with  TLAs  might  have  made  us 
sound  important;  today,  it  just  makes 
us  sound  like  dorks. 

Because  TLAs  cause  us  to  obsess 
over  relatively  small  pieces  of  the  total 
picture,  we  don’t  see  the  incredible  op¬ 
portunity  that's  staring  us  in  the  face. 
Let’s  imagine  that  we  do  some  BPR  and 
then  we  support  those  new  workflows 
with  systems  that  use  £AI  and  SOA  to 
tap  into  the  functionality  of  existing 
E^.  CRM  and  other  systems.  New  sys¬ 
tems  built  this  way  can  be  assembled 


ww^compulwworldcom 


very  quickly.  Next  we  apply  BPM  or 
BAM  to  those  new  systems  and  work- 
flows.  Now.  movii^  beyond  the  acro¬ 
nyms,  a  truly  amazing  thing  can  occur. 

If  done  right,  these  systems  enable 
people  to  see  their  world  in  real  time. 
Suddenly,  they  know  what's  going  on 
day  to  day.  They  don't  have  to  wait  un¬ 
til  two  weeks  after  the  monthly  close 
to  get  good  numbers.  And  because 
they  can  see  clearly,  they  can  act  effec¬ 
tively.  As  they  act.  the  systems  send 
back  real-time  pictures  of  the  results 
of  their  actions.  Then  they  act 
And  so  on. 

This  sets  up  a  powerful  feedback 
•  loop  where  people  Jeam  fast  and  get 
better  and  better  at  what  they  da  This 
phenomenon  is  at  the  heart  of  what 
is  called  "the  real-time  enterprise." 
Organizations  that  start  operating  as 
real-time  enterprises  become  like  ath¬ 
letes  who  get  more  skillful  as  they  play 
the  game. 

The  real-time  enterprise  is  to  the 
information  economy  what  the  assem¬ 
bly  line  was  to  the  industrial  economy. 
It  will  be  the  great  generator  of  wealth 
in  the  21st  century.  Think  about  It:  In¬ 
dustrial  tcchnolo^  was  in  wide  use 
by  the  mid-lBOOs,  but  the  idea  of  using 
it  lo  support  a  certain  woihflow  proc¬ 
ess  called  the  assembly  line  didn't 
catch  on  until  the  early  1900s.  After 
companies  did  begin  to  organize  pro¬ 
duction  using  the  assembly  line,  the 
resulting  productivity  gains  drove 
much  of  the  economic  growth  in  the 
20th  century. 

Infontuiion  technology  has  been 
widespread  for  the  past  40  years  or  sa 
The  technology  itself  is  no  longer  a 
source  of  advantage.  But  the  technolo¬ 
gy  can  be  used  to  support  a  process 
called  the  real-time  enterprise. 

The  real-time  enterprise  builds  upon 
the  efticieocies  of  the  assembly  line 
and  then  goes  fv  beyond  what  an  as¬ 
sembly  line  can  da  It  gives  companies 
the  ability  to  learn  faster  and  respond 
more  effectively  than  ever  before. 

In  a  world  of  constant  change,  the 
organizations  that  are  the  best  at  con¬ 
stantly  adapting  and  improving  are  the 
ones  that  will  thrive.  They  are  the  ones 
that  will  define  the  economy  of  the  21st 
century. 

But  we  aren't  going  to  convince 
management  of  this  larger  opportuni¬ 
ty  by  telling  them  what  we’re  going  to 
do  with  BPR  and  SOA  and  ERP  and 
CRM.  Instead,  we  need  to  show  them 
how  IT  can  put  all  the  technology  to¬ 
gether  and  lead  in  the  creation  a^  op¬ 
eration  of  systems  that  enable  the  re^- 
time  enterprise  to  come  into  beii^ 
04a0S2 


THORNTON  A.  MAY 

Bright  Skies  or 
Path  for 
FT  Leaders? 

CURRENT  THINKING 
on  the  future  career 
path  of  IT  leaders  is 
polarized.  The  Lawson  Soft¬ 
ware-sponsored  “Habitat 

Report"  has  identified  two  ftindamen- 
lally  different  expected  career  outlooks 
for  executives  leading  IT  otganizations. 
One  uxoario,  dubbed  "Bright  Skies," 
predicts  an  enlarged  and  increasingly 
admired  role  in  the  enterprise.  The 
"Dark  Path"  scenaria  on  the  other 
hand,  predicts  that  IT  leaders  will  face 
tou^  sledding  in  the  years  to  come. 

Those  in  the  Dark  Path  camp  posit 
that  the  role  of  the  IT  leader  is  dimin¬ 
ishing  in  importance.  This 

school  of  thought  bolds  that  - 

computational  ftinctionaUty 
is  becoming  (or  has  already 
become)  a  commodity  that 
can  be  purchased,  provi- 
stoned  and  managed  via 
rules-based  logic.  Dark 
Patbers  forecast  a  bleak  fu¬ 
ture  for  IT  in  which  rules- 
based  work  is  outsourced 
and  the  managing  of  rules- 
based  work  is  automated  via 
ClO-in-a-box  artificial  intel¬ 
ligence  systems  at  the  order 
of  chief  financial  officers. 


The  few  carbon-based  life  forms  left  m 
place  will  oversee  outsourcing  con¬ 
tracts.  apolc^ize  for  unmet  service- 
level  agreements  and  go  to  jail  for  cat¬ 
astrophic  system  failures.  In  the  minds 
of  Dark  Pathers,  IT  leaders  are  losing 
power  vis-a-vis  the  CFO. 

The  dau  about  whom  CIOs  repon 
to  b  ambiguous: 


1  CEO 

CFO 

OTHEft  1 

II  3e°o 

280.: 

34»,  II 

380o|I 

Taken  at  focc  vahie.  tbe  fact  that 
fewer  IT  leaders  today  report  to  CEOs 
might  lead  one  to  believe  that  IT  pow¬ 
er  b  diminishing,  but  I  tend  to  at¬ 
tribute  the  chai^  in  thb  number  to 
two  things:  the  e-commerce  frenzy  at 
the  turn  of  the  decade,  and  a  chan^  in 
top-of-bouse  management  styles.  In 
1999,  the  CEO  managed  a  series  of  one- 
to-one  relationships  with  hb  direct  re¬ 
ports.  In  tbe  new  model,  because  of  on 
increasii^  interconnectedness  among 
all  functions,  the  CEO  manages  the  ex¬ 
ecutive  team.  Those  on  the 
executive  team,  of  which 
the  IT  leader  b  one  mem¬ 
ber.  manage  relationslups 
among  themselves.  Tod^, 
there  b  a  growing  tenden¬ 
cy  for  the  CIO  lo  report  to 
the  chief  operating  officer. 

Bright  Skiers  acknowl¬ 
edge  and  applaud  the  trend 
toward  automating  and 
outsourcing  mles-based  IT 
wortc  The  Bright  Skies  sce¬ 
nario  b  driven  by  the  as-  ' 
sumption  that  the  ever-  I 
expanding  computational  I 


READERS’  LEHERS 


functionality  identified  by  Moore's 
Law  will  affect  what  work  gets  done 
and  bow.  Their  hopeful  outlook  b 
predicated  on  the  principle  that  realiz¬ 
ing  the  full  potential  of  technology  in¬ 
vestments  requires  that  tw-o  things  get 
done.  The  first  of  these  b  reorganizing 
existing  work  into  rules-based.  becn- 
there-done-that  Six  Sigma  routines. 
The  second  b  implementing  new  pat¬ 
terns.  In  other  words,  working  in  un¬ 
charted  territory  b  the  hjgh  ground  for 
IT  leaders  of  the  future. 

In  their  brilliant  new  book  The  htew 
Division  of  tabor  How  Computers  Are 
Creating  the  Next  Job  MaHtet  (Prince¬ 
ton  Universiry  Press).  Frank  Levy  and 
Richard ).  Mumane  write  that  the  fu¬ 
ture  belongs  to  people  who  excel  at 
expert  thinking  (solving  problems  for 
which  there  are  no  rules-based  striu- 
tions)  and  complex  communication 
(interacting  with  people  to  acquire  in¬ 
formation.  understand  what  that  infor¬ 
mation  means  and  persuade  others  of 
its  implications  for  action). 

Daric  Pathers  are  working  off  the 
flawed  assumption  that  most  IT  activi¬ 
ty  b  mles-bascd.  It  b  not.  The  IT 
leader  of  the  future  b  going  to  be  a 
world-class  workplace  dia^ostician 
who  b  facile  at  understanding  work 
and  will  strip  pieces  of  work  best  done 
by  computers  (the  rules-based  drudg¬ 
ery)  out  of  the  hands  of  humans, 
streamline  operations  and  imagine 
new.  higb-cnatgin  things  lo  do  with 
computational  ftinctkmalit>’.  O  49126 
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Offshoring:  UnMrise  or  Simph  hievitafa^ 

THAMtraukxVirgmiaRottiRs'  i  they  Hank  it  is.  the  software 
ffiierBstino  side  "The  Raooed  I  neanngprDlessunffiAtnflncamay 
nokm^eiBL 


I  inierBstino  side  "The  Raoged 
Edge  of  (kitsoiffcing'' ((XacMJnk 
46^.  As  a  former  seraor  software 
engineerwho.becausealoul' 
sourcinawasforcadtntoamtddb- 
agecaieerchange.lfinditrefresh' 
ino  to  see  someone  question  the 
wasdom  of  outsourcing.  The  Bureau 
of  Labor  Slattshcs  recently  reported 
a  dedne  of  131.(X)0  employed 
computer  software  engneers  m  the 
second  quarter  compared  w4h  the 
lest  quarter,  bringing  toe  total  to 
fust  725.000 

What  6  partnAarly  gating  e  that 
by  toe  tme  (XDs  and  CIOs  reakzB 
Ifwl  oulSDWCtng  bnT  the  psnacea 


MV  ADVICE  to  the  authors  of  ll« 
thieelenersonJuly26be- 
moarang  offshoring  is  to  get  over  it 
and  move  on.  Ofhhored  lobs  wfi  no 
morecomebackthandeceasedrel- 
atoies.  in  tacL  we  can  expect  even 
more  IT  tabs  to  be  offshiirad  in  the 
very  near  hjiure.  i  am  S3  years  ohf 
witoCyearsoflTeiperiBnceBe' 
bmen  2000  and 2002. 1  worked  on 
the  average  ss  months  per  year, 
and  between  2002  and  2004.  otVy 


four  months.  I  have  not  worked  at  al 
the  year.  Altar  feehng  angry,  frus¬ 
trated  and  betrayed.  I  relumed  to 
graduate  school,  where  I  am  now 
iwsung  a  raster’s  in  laadvo 
Engksh  as  a  second  language 

Gtabalration  has  made  educa¬ 
tion  a  booming  industry,  espeoaly 
ri  toe  ThNd  World.  I  hope  to  teach 
EnghshinChvie.wh0relheecono- 
myisazzingandtoeiobopportum- 
ties  for  End^  teachers  are  red  hoL 
ThepayisgoodbyChnesestan- 
dartb.  and  If  I  do  not  Be  a  dm.  i 
wi  more  on  lo  another  country. 

Here  in  Chcago.  most  of  toe 
people  in  my  neighborhood  are  for 
eton-bom  There  are  lileiaVymAons 
of  legal  and  iagai  immigranls  m  ties 
country  seeleng  work.  Wry  cani  we 


Americans  do  Beime  and  look  be¬ 
yond  our  bonlers  for  opportiaiiiies? 

JufasTakacs 

ChicqgD 

fufius.  Tofcocwaihorniailconi 

COMPUTERWOfflJl  wbcornes 
comments  from  as  readers  LMers 
wi  be  edited  lor  brevity  and  danty. 
They  shobd  be  addressed  to  Jame 
Edda.  leliBfs  editor.  ConipulBrwaikl. 
PO  Box  9T71 SOO  OU  Cormeciicul 
F^.  Fianwigham  Mass.  0T7D1. 
^(506)879-4843 
E-mat  teBere^computarworklcom 
Indude  an  address  and  phone  rxan- 
bar  iv  mitodate  venfeabon 

OFa  nnre  Mm  OR  there  and 
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PUT  IT  IN  THE 
SERVER  ROOM. 

FEEL  IT  IN  THE 
BOARDROOM. 


Il^t  the  IBM  eSenrer-  p5  system  -  the  game^hanglng  UNIX*  servef  that  can  bring  instant  agility  to  your  business 
With  a^anoed  IBM  Virtualization  Engine'  technology  options,  the  eSeiver  p5  system  is  the  only  UNIX  server  with  breakthrough 
Micro-Partitioning'  capabilities.  It  can  automatically  balance  resources  among  virtual  partitions  in  milliseconds.’  On  demand.  I 
It  configures  and  adapts  on  the  fly.’  Add  apps.  Add  users.  Add  capabilities.  At  any  time.  And  gain  business  agility  just  like  that.  ‘ 
You  need  to  learn  more.  More  about  all  the  benefits  of  eServer  p5  systems  at  ibm.coiii/bserver/boardroom  ' 


5  reasons  why  IBM  eServer  pS  systems  with  Power  Architecture^  technology  rule  in  UNIX  computing. 


1  Flexible,  fifth-generation 
POWER"  processors. 

Capacity  on  Demand.^ 

Runs  IBM  AiXSC 
and  Linux. 

Advanced  system 
utilization. 

Virtual  servers  as  small 
■  as  1/10  of  a  processor.’  \ 

Open  Group  «  me  Umted  Slates  and  osier  cowrtnes  L«a  «  a  (rademarhol  Linos  TorvaUsm  me  United  Sates,  omercoixUnes,  or  bom  Omerconvany  oroduciand' 

rrarhs  o(  omers.  w  2004  IBM  Corporation  Al  nghis  reserved  ^ 
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ROBUST  OBJECTS 
AND  ROBUST  SQl 


A  FREE  OFFER  TO  lOOK 
RFARErnRORIRRASE 


For  your  next  generation  of  applications, 
move  to  the  next  generation  of  database 
technology.  We’re  offering  a  free,  fully  funcrionaJ, 
non-expiring  copy  of  Cache,  the  post-relational 
database  that  uniquely  combines  advanced 
objects  and  high  p>ertbrmance  SQL. 

With  Cache,  no  mapping  is  required  between 
object  and  relational  views  of  data.  Which 
means  huge  savings  in  both  development  and 
processing  time. 

Applications  built  on  Cache  are  massively 
scalable  and  lightning-fast.  Plus,  they  require 
minimal  or  no  database  administration. 

More  than  just  a  database  system.  Cache  has 


a  development  environment  that  dramatically 
reduces  the  time  to  build  and  modify  Web 
,  applications. 

reliability  of  Cache  has  been  proven  in 
“life-or-death”  applications  at  thousands  of  the 
world’s  largest  hospitals.  With  its  high  performance 
and  low  maintenance.  Cache  delivers  your  vision 
of  a  better  DBMS. 

We  are  InterSystems  -  a  specialist  in  data  manage¬ 
ment  for  over  twenty-six  years,  providing  24x7 
sup^rt  to  4  million  users  in  88  countries.  Cache  is 
available  for  Windows,  OpenVMS,  Linux  and  major 
UNIX  platforms,  and  it  is  deployed  on  systems  rang¬ 
ing  from  two  to  over  10,000  simultaneous  users. 

InterSystems  ^ 


Make  Applications  Faster 

Thr  a  better  Milase.  Ftr  frae. 

Download  a  free,  faUy-fbncdonal,  non-expiring  copy  of  Cache  or  request  it  on  CD  at  www  InterWen,.  con. /n... 
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Agents  of  Change 

Autonomous  agents  promise  to  every¬ 
thing  from  supply  chains  to  telecommuni¬ 
cations  networks  more  efficient  But  for 
now.  most  new  applications  remain  in 
R8tD  labs  and  testbeds  such  as  NASA’s 
Earth  Observing-!  satellite.  f^Qe  24 


Survival  of  the  Fittest 

A  regression-based  analytic  technique 
called  survival  analysis  is  moving  from 
life  sciences  and  engineering  into  main¬ 
stream  business  applications  such  as 
CRM,  enabling  companies  to  predict  the 
behavior  of  their  customers.  Pioe  27 


SECUKITY  MANAOER'S  JOURNAL 

Seure  E-mail  Stops 
At  Corporate  Bordm 

Providing  internal  e-mail  security  is  one 
thing,  but  Roger  Foiz  Hnds  there  are  few 
good  options  for  securing  the  e-mail  that’s 
exchanged  with  business  partners.  PSQA  32 


JiNi  was  still  being  marketed  as  a 
networking  technology  for  ccm- 
sumer  appliances  such  as  DVD 
players  and  televisions  when  start¬ 
up  Orbitz  Inc  made  the  radier  bold 
decision  to  build  its  business  on 
the  fledgling  Java-based  speciflcatioa 
Forged  in  2000  by  five  airiines,  Chicago-based 
Orbitz  had  a  blank  technology  slate  vrtien  it 
elected  to  lo(A  beyond  Sun  Microsystems  Iiic.'$ 
consumer  hardware  pimh  and  explore  flni’s  po¬ 
tential  as  a  distributed  computing  fiamework  for 
its  online  travel  services.  Oibixz  architects  knew 
that  few  companies  were  ugmg  jini,  bm  they 
were  comforted  to  learn  that  one.  Raytheon  Co., 
was  exploring  the  technok^  for  systems  on  U3. 
Navy  destroyers. 

“If  it’s  good  enough  to  protect  lives  and  coun¬ 
tries,  maybe  it’s  good  enough  to  sell  tickets  on," 
says  Leon  Chism,  Orbitz's  ei^th  employee 
now  chief  Internet  architect 

ACORBAARsmative 

Skilled  in  building  large-scale  systems  based  on 
the  Common  Object  Request  Brcdcer  Architec¬ 
ture,  the  Orbitz  development  team  saw  Jini  as  a 
CORBA  alternative  that  would  provide  a  mecha¬ 
nism  for  acknowledging  the  effect  the  network 
has  on  how  a  system  is  designed  anH  runs  in  pro¬ 
duction,  says  Chism. 

-You  had  a  group  of  people  that  felt  technically 
capable  and  qualified  to  fnak#»  it  work."  adds 
CUef  Technology  Officer  Chris  Hjelm,  srtio 
joined  Orbitz  from  eBay  Inc.  in  July  2003. 

They’ve  always  been  independent  thinkers,  and 
they  wanted  to  control  their  own  destiny." 

Orbitz  also  considered  using  the  emerging  En- 

-  terprise  JavaBeans 

(EJB)  tedinology  but 
soon  scrapped  ^t 
idea  because  of  con¬ 
cerns  about  perfor¬ 
mance,  management 
and  cost  Company  ar¬ 
chitects  figured  they 
wooldn't  require  the 
transactioiial  capabili¬ 
ty  of  ^  and  decided 
that  dynamically  i>et- 
wocked  Jini  services 
would  be  a  better  fit 
"If  you  compare 


I  I  A\  /I  Orbitz  put  Sun’s  underappreciat- 
r-H  /  \\  /  I—  edtechnologyatthecoreofthe 
I  l#AW  Li_  distributed  compiling  frame- 
M  M  H  H  vvorkthat  powers  its  online  reser- 
■  ■  ■  ■  vation  systems.  BY  CAROL  SLiwA 

JINI.  WILL 

TRAVEL 


bow  (o  define  and  access  an  EfB  remotety  versus 
bow  to  do  that  in  Jini.  it‘s  orders  of  magnitude  di^r- 
ent  in  terms  of  lines  of  code  and  complexity  of  the 
code*  says  Chism. 

*1  think  I  can  actually  publish  a  Jioi  service  in 
about  three  lines  of  code.  And  accessing  it  is  proba- 
bly  two  lines  of  code."  says  Steven  Hoffman,  princi¬ 
pal  software  engineer  at  Orbitz.  "Most  of  the  people 
that  actually  know  and  need  to  know  about  the  jlni 
infrastructure,  you  can  count  them  on  your  hand. 
Everybody  can  focus  on  the  real  work  at  hand.  The 
plumbing  doesn’t  get  in  the  way." 

Building  a  service-orienied  architecture  to  get  dis¬ 
parate  systems  to  interoperate  isn’t  such  a  new&n- 
gled  idea  today,  but  at  the  time  OihiQ  decided  to 
break  up  applications  into  services,  its  architects 
weren’t  ^miliar  with  the  terminology.  They  fuat 
knew  that  customers  would  need  to  book  flints,  ho¬ 
tels  and  cars.  To  enable  that,  they  needed  to  connect 
to  a  maior  mainframe-based  global  distribution  sys¬ 
tem  (GDS)  for  booking  and  ticketing  flights  and  cars. 
For  hotels,  they  had  to  link  to  a  system  from  Pegasus 
Solutions  Inc  And  they  knew  tb^  had  to  build  a  sys¬ 
tem  that  wouldn’t  go  down. 

Under  the  Orbitz  architecture,  a  customer  request 
to  book  an  airline  ticket  passes  to  a  Java  servlet  con¬ 
tainer  ~  the  Jini  client  —  runnii^  on  BEA  Systems 
Inc*k  WebLogic  af^Ucation  server  (see  box  above). 
’The  Jini  diem  uses  the  fini  discovery  protocol  to 
find  a  ftni  lookup  service,  which  sends  a  proxy  back 


to  the  Jini  client  Through  the  proxy,  the  Jini  client 
uses  the  lookup  service  to  find  a  Jini  service  that  can 
do  what  it  needs.  The  lookup  service  then  delivers 
the  Jini  service  proxy  hack  to  the  Jini  client,  and  the 
client  uses  the  proxy  to  communicate  directly  with 
the  Jini  service. 

Orbitz  registers  its  U32  Jini  services  on  multiple 
instances  of  lookup  services  for  redundancy,  so 
there’s  never  a  sin^e  point  of  failure  in  the  event  of  a 
power  supply  or  hard  drive  foilure.  It  also  builds  re¬ 
dundancy  into  the  servlet  containers  and  the  ser¬ 
vices  themselves,  scaling  horizontally  through  Intel- 
based  dual-processor  PCs  running  Linux.  The  PCs 
act  as  servers  in  the  Orbitz  environment  “It’s  not 
lust  redundancy;  it’s  also  capacity,"  says  Hofihnan. 

If  you  need  to^  10  boxes  to  service  a  particular 
request  and  your  traffic  doubles,  we  can  Just  add  10 
more,  and  it’s  not  only  handling  twice  the  capacity 
but  it’s  now  twice  as  redundant  as  it  was  before." 

It’s  also  a  less  costly  way  to  scale.  “It’s  literally 
plugging  a  commodity  PC  with  a  minimal  amount  of 
purchased  software  and  some  t^ien-source  software 
into  (he  network,"  says  Htelm.  “It’s  less  than  $5,000 
and  continuing  to  come  down." 

Orbitz  runs  two  types  of  services  —  those  that  talk 
to  other  services  and  those  that  talk  to  third-party 
mainframe  hosts.  On  the  back  end,  Orbitz  builds  Java 
inlerfoces  to  the  third-party  mainframes,  such  as 
those  of  WorldSpan  Technologies  Inc  or  Pegasus, 
transforming  their  content  into  Jini  services  that  reg¬ 
ister  with  the  lookup  services.  'The  Java  virtual  ma¬ 
chine  and  the  Jini  service  interfaces  run  on  Orbitz 
servers.  "All  the  carriers  had  to  do  was  give  us  their 
custom  protocols  to  communicate  with  their  main¬ 
frames."  says  Chism.  "We  did  the  rest" 

The  company  gains  access  to  its  non-Java  low-fore 
search  engine  from  ITA  Software  Inc  in  Cambridge, 
Mass.,  in  a  similar  fashion.  Orbitz  also  books  some 
hotel  rooms  and  entertainment  tickets  through  its 
own  systems  via  allotments  from  the  vendors. 

To  reduce  GDS  fees,  Orbitz  developed  technology 
called  Supplier  Link  to  provide  direct  links  to  the  in¬ 
ternal  reservations  systems  of  participating  airlines, 
including  American  Airlines.  Alaska  Airlines.  Ameri¬ 
ca  West  Airlines,  (^ntinental  Airlines, 

Northwest  Airlines  and  US  Airwaj^  Cus¬ 
tomers  booking  tickets  with  those  airlines 
are  directed  to  the  Orbitz  Next-Genera¬ 
tion  Booking  Engine,  which  uses  Jini 
lookup  services  to  find  the  optimal  way  to 
book  the  ticket 
Only  if  Supplier  Link  connections  are  down  or  the 
itinerary  foils  to  meet  qiecific  criteria  are  they  con¬ 
nected  to  GDS  vendor  WorldSpan,  vriiich  gets  a  big¬ 
ger  cut  of  the  transaction. 

"Rule  Na  1  is  book  the  ticket  Rule  No.  2  is  book  it 
on  Supplier  link  if  you  can."  says  Chism. 

One  benefit  of  the  multiiayen^  ^proach  is  that 
Orbitz  can  add  more  air  services  for  a  ^lecific  carri¬ 
er.  such  as  Alaska  Airlines,  without  having  to  deploy 
a  new  instance  of  the  overall  application.  The  staff 
simply  gets  a  new  PC,  installs  Linux  and  Java  on  it 
and  configures  it  as  an  instance  of  the  Alaska  Air¬ 
lines  service.  *rbe  service  is  immediately  registered 
with  the  Jini  lo^oq)  service  without  Orbitz  having  to 
take  down  any  part  of  the  application. 

"We  literally  turn  on  Alaska  Air  without  the  appli¬ 


cation  layer  even  knowing."  says  Hjelm.  That’s  an 
enormous  amount  of  flexibility.  It  really  allows  you 
to  focus  skills  and  the  efrbn  of  your  sraff"  Hjelm  says 
less  than  10%  of  the  nearly  100  developers  at  Orbitz 
are  responsible  for  working  on  the  back-end  Jini  ser¬ 
vice  interfaces  and  systems.  The  rest  concentrate  on 
the  customer-focing  Wieb  applications. 

"What  you’re  trying  to  do  is  manage  down  the 
complexity  of  building  applications  and  have  those 
scale  over  time."  says  Hjelm.  "One  of  the  great  ques¬ 
tions  is:  Why  do  many  development  shops  start  to  i 

slow  down  as  they  get  larger  code  bases  and  more 
and  more  people?  The  reason  generally  is  that  they 
don’t  follow  good  architectural  practices." 

Orbitz  continues  to  create  new  customer  offerings 
that  essentially  assemble  or  repackage  existing  prod¬ 
ucts.  For  instance,  h  can  aggregate  air  and  hotel 
offerings  into  a  dynamic  service  with  no  recoding 
required,  according  to  C^iism. 

“Ail  the  discoveries  are  dynamic  at  runtime."  be 
I  says.  "Tfou  do  your  logic  and  you  make  the  rails  out 

j  when  you  need  to.  and  it  dynamically  finds  the  ser¬ 
vices  that  it  needs  in  the  production  enviromneni." 

Hidden  Ifedue 

Jennifer  Kotzen,  who  beads  Jini  marketing  efforts  at 
Sun,  says  the  technology's  main  appeal  for  corpora¬ 
tions  has  been  its  dynamic  networking  capability, 
wherein  a  distributed  system  can  bener  accommo¬ 
date  change  in  the  runtime  environment. 

There’s  been  a  shift  in  our  understanding  of  the 
value  proposition  with  Jiiu."  she  says.  "It's  not  just 
how  to  let  devices  talk  to  each  other." 

Kotzen  says  there  have  been  a  "good  number"  of 
deployments,  particularly  in  the  financial  services  in¬ 
dustry.  But  many  users  decline  to  speak  publicly 
about  Jini,  and  Sun  has  no  accurate  way  to  track  the 
nunfoer  of  installations,  she  says. 

pni  also  continues  to  be  placed  by  a  number  of 
lingering  misconceptions,  according  to  Kotzen.  One 
is  that  all  the  code,  services  and  clients  need  to  be 
wrinen  in  Java  and  that  there  needs  to  be  a  Java  vir¬ 
tual  machine  everywhere.  Kotzen  says  that’s  not  true; 

Java-based  interfoces  to  a  legacy  system  and  the  Java 
virtual  machine  can  run  on  a  "smrogaie" 
machine. 

Another  hurdle  is  that  the  independent 
software  vendor  community  around  Jini 
remains  Umited.  Only  eight  vendors  rnaito 
commercial  products  targeted  at  Jini  de¬ 
velopers.  according  to  Kotzen. 

But  Orbitz  no  longer  fircts  over  the  lack  of  vendor 
backing.  “I  was  worried  when  we  started,  but  the 
community  has  been  more  than  helpful,"  says  Chism. 

“The  guys  wdio  wrote  the  product  are  very  accessi¬ 
ble.  You  have  questions,  you  have  problems,  the/U 
get  back  to  you." 

So  why  hasn’t  Jini  caught  on?  Hjelm  thinks  it  might 
have  been  too  complex  for  the  average  software  shop 
that’s  used  to  more  simple  tot^  Cliisni  says  Sun  mis- 
marketed  Jini  to  the  ha^ware  market  when  it  should 
have  been  going  after  the  software  market  But  where 
Orbitz  is  concerned,  he  has  no  regrets. 

"I  was  very  confident  in  the  decision  then,  and  Tm 
very  confident  in  the  deciskio  now,"  says  Chiwn  -j 
wouldn’t  change  it  I  don’t  think  we’d  be  sdiere  we 
are  today  if  it  weren’t  for  Jini”  O 
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Time  Zone  Tim  might  be  sieep  deprived, 
but  he’s  never  network  deprived. 


NAME:  Time  Zone  Tim 
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CHALLENGE:  Aiways  traveling,  yet  aiways  needs  real-time 
access  to  critical  corporate  data,  email,  and  more.  Also 
needs  to  stay  awake. 

NOKIA’S  ANSWER  FOR  I.T.:  Nokia  One  Business  Server 


MEETS  HIS  NEEDS  by  providing 
secure  access  to  corporate  email, 
attachments,  calendars,  contacts, 
intranet  and  HTML-enabled  applications  from 
any  small-screen,  browser-enabled  device- 
like  his  Nokia  6820  messaging  device.  Also 
allows  him  to  work  while  waiting  in  line  for 
really  strong  coffee. 

MEETS  HIS  COMPANY’S  NEEDS  by  helping  Tim  stay 
productive  no  matter  where  business  takes  him. 

Learn  how  to  mobilize  your  team  and  increase  business 
productivity.  Download  “The  Anytime,  Anyplace  World"  white 
paper  at  nokiaforbusiness.com 


IMOKIA 

Connecting  People 


24 


CMPITinflint  S<flnt«l.!M4 


ncHNOLoev 


WWW  computerwofldcom 


ASEMIS 

CHANGE 

Autonomous  agents  are  still  in  the  labs  but  could 
eventually  play  a  critical  role  in  areas  ranging  from 
setting  market  prices  to  creating  more  resilient 
networks. 
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MR  nil-  I'AsJ  Yt.\K 

NASA  hj*;  been  up- 
[  K»ading  Miftwjre  injo 
j  the  Earth  Obser\  inp-l 
I  satellite,  turning  it 
into  a  ti'stK'd  for  auto¬ 
nomous  .ipenis.  The 
-  JKvnts  —  stvfiuare 

programs  that  are  able  to  learn  and  can 
furu.-tion  independently  —  are  used  to 
.  manage  e'tpi-rimenis  .md  operate  the 
^  spaeeera/t. 

The  eftort  is  part  »if  j  teehnohigy 
initiative  that  researchers  say  will  n.*- 
shape  I  r  over  the  course  of  many 
vears.  Aut«*niinH>us  agents  have  the  po¬ 
tential  to  become  .m  extraiTditurih 
powi-rful  technolugy.  with  the  eapaeily 
T"  iearn.  evperiment  .ind  act  indepen¬ 
dent  o|  hum.m  contnd-  Agents  could 
ultim-Ueh  improSe  pr»»Jucfi\iiy.  in¬ 
crease  sottuare  reliabililx  and  change 
■Uv  •ir.  rjr...no|  market',  parlkularly 
•urpl^  Jriiiis 

Managing  Complexity 

A  ‘  ant«'nMin.'iis  .»ecni>« 

-  It  .ii’jk  .ir  -iniple  Eiij  in 

•mpli  ,  l-  r  I  s  .nipli, 
■■kT.-Iim  aii'Mr.o 


Like  many  pitigrams.  agent  s«»ftware 
I  and  related  algorithms  arc  often  coded 
I  in  lava.  What  makes  them  different  i.s 
I  that  the  designs  also  incorporate  disei- 
I  plines  such  as  game  theory.  Agent  de- 
j  sigrters  tend  to  draw  frxim  a  variety  of 
j  areas,  such  as  economics  and  psycholo- 
I  gy.  in  an  effort  to  create  programs  capa- 
'  bic  of  handling  complex  interaction.s. 

I  Programmers  ate  adept  at  building 
j  systems  that  respond  to  a  certain  set  of 
j  “if-fhen“  circumstances.  Hut  NASA’s 
agents  are  model-based,  designed  ht 
1  achieve  the  goals  and  intentions  of  the 
designers,  not  merely  to  respond  to  a 
given  es'cnt-  That  means  they  can  react 
to  unimagined  events  and  still  ensure 
that  the  spacecraft  does  not  waste  fuel 
while  keeping  i«*  its  mission. 

-At  NASA,  sxiftware  agents  are  per- 
lorming  work  previously  handled  by 
gri>und  controllers.  But  the  cost-saving 
potential  of  agents  is  something  "we 
Joti  t  emphasize,  because  nobody  likes 
their  budget  reduced.”  says  (!hien.  In- 
sre.id.  tht-  fm'Us  is  on  the  additional 
'» it-min*'  rese.ircli  cre.ued  by  the  use 
ot  agent  based  suftw.ire. 

-Making  markets,  supply  chains. 


tciccommumeations  and  other  systems 
more  efficient  through  the  use  of 
agents  is  a  subject  of  intense  interest. 
Some  800  researchers  recently  gath¬ 
ered  at  Columbia  University  for  the 
Third  International  Joint  Conference 
on  Autonomous  Agents  &  Multi-Agent 
Systems,  the  leading  cimferencc  on  the 
technology.  In  addition  to  people  from 
universities  and  government  agencies, 
the  event  attracted  researchers  from 
defense,  telecommunications  and  soft¬ 
ware  development. 

The  ctinference  stressed  both  ab¬ 
stract  concepts  and  practical  applica¬ 
tion  of  the  technology.  Most  presenta¬ 
tions  detailed  the  latest  research  in  a 
wide  variety  of  areas,  such  as  machine 
learning,  which  involves  creating 
agents  that  have  the  ability  to  discover 
interactions  and  respond  to  them.  Oth¬ 
ers  addressed  the  behavior  of  multiple 
agents:  how  they  work  together,  e.x- 
change  information,  set  priorities  and 
negotiate  with  one  another. 


Putting  It  to  the  Test 

Negotiation  was  one  of  the  key  agent 
capabilities  tested  at  the  conference’s 
Trading  Agent  Competition.  In  one 
contest,  computers  ran  simulations  <tf 
agents  assembling  PCs.  The  agents 
j  were  operating  factories,  managing  in- 
!  ventorics.  negotiating  with  suppliers 
I  and  buyers,  and  making  decisions 
I  based  on  a  range  of  variables,  such  as 
the  risk  of  taking  on  a  big  order  even  if 
ail  the  parts  weren’t  avaibblc.  If  an 
I  agent  made  an  error  in  ludgmeni.  the 
company  could  face  financial  penalties 
and  order  cancellations. 

Kesearchers  say  there  i.s  no  optimal 
agent  design,  and  the  contest  stTves  as 
I  a  performance  testbed.  “If  you  have  a 
better  strati'gy  th.m  your  competitor, 
you  re  in  a  nw're  adA  .intageous  pi*siiion 
in  the  marketpl.iee."  says  Niefc  |cn- 
nings.  who  he.ids  the  .luionomous 
.igeni  rrogr.mi  .ii  the  I'nixersity  of 
Soinh.iinrion  in  1  ngbnd. 

IhvisK'n  nt.ikmg  software  is  already- 
used  in  Im.iru  iiil  ni.irkef.s  lor  funeiitms 
siieh  .IS  .iin.im.iied  tr.iding,  but  those 
pr.K-esxes  .til  simpler  th.m  the  hiisi 
ness  In  t'usiiu  sx  irativielit'ns  th.»t 
agem  revaii  hers  .ire  testing.  Inste.iJ 
ot  dealing  wrih  ll\«  d  prices,  resk-.irch- 
ers  .ire  looking  ii  secn.irios  where 
jgenis  must « onsi.mtly  negori.iie  tlu- 
best  prit  es  w  nh  .i  \  ariety  .  if  suppliers 
In  SI.  doing,  thi  y  must  take  inui.ic 
conni  ch.mging  m.irkel  eonditions 
white  alsno'iisidering  inventors,  pro 
.hicti.in.  laelorv  i.ipaeitv  .mdoiher 
IsSUl'S 

■’thir  si  .-n.irio  presume'  .lutom.iiioii 
beyond  the  ilegtve  that  eurr«-nily  e\ 


Autononraus  Agents 


- ^.toareprogramsca- 

|Mbfedin(lBpendemactton.M(istmde- 
signed  to  respond  to  IHhen*  acantfios. 
tiut  more  (xmptex.  modsHnsed  agenb 
tnr  to  achisire  goals  such  as  mainMniriQ 
specific  pertonnanca  ietreli  in  a  s^steni 
SomearecapabieotniaGMaalM- 
iivTheycanexDerlmenLtestwIousn- 
teradions  and  lato  corrective  actions  to 
address  silualions  never  imagined  by 
their  designers. 

As  tor  apptaiMia  rmich  of  the  focus 
is  on  designing  agenb  capafato  of  negotb 
ating  other  aganto  tor  etarranercs 

and  supply  d«inappicalton6.Syst8ms 
admIniBliatiuH  is  another  area  of  interest. 


ists.  but  1  think  things  are  going  in  that 
direction.”  says  Michael  Wellman,  pro¬ 
fessor  of  commercial  science  and  di¬ 
rector  of  the  artificial  intelligence  lab¬ 
oratory  at  the  University  of  Michigan. 

IBM  is  building  agent  technology  to 
support  its  autonomic  computing  sys¬ 
tems.  which  have  the  intelligence  to 
reconfigure  themselves  in  response  to 
changing  conditions,  according  to  Jef¬ 
frey  Kephart.  manager  of  agents  and 
emergent  phenomena  in  the  computer 
sciences  department  at  IBM’s  T.J.  Wat¬ 
son  Research  Center. 

•Agent  researchers  “are  working  to¬ 
ward  a  world  some  years  hence  where 
these  automated  decisions  are  going  to 
be  used.  Those  pei>ple  in  industry  who 
I  are  really  thinking  about  this  know 
that  they  are  going  to  need  technology 
I  of  this  nature,  in  supply  chains."  Kep- 
I  hart  siiy  s.  The  research  work  so  far 
bodes  well  hir  that  future,  he  adds. 

Agents  may  changi-  the  nature  of 
distributed  computing  environments. 
Inslead  of  centralized  control  systems, 
.igents  could  independently  operate 
p.irtsot  .1  network  but  .ilso  have  the 
ability  to  take  over  other  functions  if 
problems  arise  Interest  in  building 
survivable  systems,  where  .igents  re- 
gcner.tte  lost  capabilities  ineommuni- 
e.iiiiMis  networks,  is  of  interest  to  the 
I' s.  defense  rese.irchers  .uid  setentists 
.It  t  .imbriJge.  Masx.-Kised  HHN  leeh 
nologies.  part  oi  Wri/on  <  ommunic*a 
rions  Inc. 

.Agent  researchers  x.iy  the  leehnolo- 
gy  won’t  arrive  in  big  King  f.ishion. 

But  sluw  ly,  over  lime,  agent  fiineiioiis 
will  begin  turning  up  in  systems.  Iliis 
leeluiologv  is  •going  to  he  revolution- 
.iry.”  s.iys  kieh.ird  1  azarus.  m.mager  of 
the  enterprise  ..rehiieeiures  group  .it 
BBS'. -but  it  w  ill  occur  uu  rementallv.” 
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CHANGE 

Autonomous  agentsare  Still  in  the  labs  but  could 
eventually  play  a  critical  role  in  areas  ranging  from 
setting  m^t  prices  to  creating  more  resilient 
networks,  by  Patrick  thibodeau 


OVEN  THE  PAST  YEAR. 

NASA  has  been  up¬ 
loading  software  into 
the  Earth  Observing-l 
satellite,  turning  it 
mro  a  testbed  for  auto* 
nomous  agents.  The 
agents  —  sofhfvare 

programs  that  are  able  to  learn  and  can 
function  independently  ^  are  used  to 
manage  experiments  and  operate  the 
spacecraft 

The  effort  is  part  of  a  technology 
initiative  that  researchers  say  will  re¬ 
shape  IT  over  the  course  of  many 
years.  Autonomous  agents  have  the  po¬ 
tential  to  become  an  extraordinarily 
powerful  technolt^.  with  the  capacity 
to  learn,  experiment  and  act  indepen¬ 
dent  of  human  control  Agents  could 
ultimately  improve  productivity,  in¬ 
crease  software  reliability  and  change 
the  i^ratlon  of  markets,  particularly 
supply  chains. 

Managing  Complexity 

■  NASA  uses  autonomous  agents  to 
•  handle  tasJts  that  appear  simple  but  are 
actually  quite  complex.  For  example, 
one  mission  goal  handled  by  autono- 
mtms  agents  is  simply  to  not  waste 
fuel.  But  accomplishing  that  means 
balancing  multiple  demands,  such  as 
slaying  on  course  and  keeping  experi¬ 
ments  running,  as  well  as  dealing  with 
the  unexpected. 

“What  happens  if  you  run  tntt  of 
power  and  >*au're  on  the  dark  side  of 
the  planet  and  the  communications 
systems  is  having  a  problem?  It's  all 
those  combinations  that  make  life 
exciting,"  says  Steve  Chicn,  principal 
scientist  for  automated  planning  and 
scheduling  at  the  NASA  Jet  Propulsion 
Laboratory  in  Pasadena.  Calif. 


Like  many  programs,  agent  software 
and  related  algorithms  are  often  coded 
in  Java.  What  makes  them  different  is 
that  the  des^ns  also  incorporate  disci¬ 
plines  such  as  game  theory.  Agent  de¬ 
signers  tend  to  draw  from  a  variety  of 
areas,  such  as  economics  and  psyc^io- 
gy.  in  an  effort  to  create  programs  capa¬ 
ble  of  handling  complex  interactions. 

Programmers  are  adept  at  building 
systems  that  respond  to  a  certain  set  of 
“if-then"  circumstances.  But  NASA’s 
agents  are  model-based,  des^ned  to 
achieve  the  goals  and  intentions  of  the 
designers,  not  merely  to  respond  to  a 
given  event.  That  means  th^  can  react 
to  unimagined  events  and  still  ensure 
that  the  spacecraft  does  not  waste  fuel 
while  keeptr^  to  Us  mission. 

At  NASA,  software  agents  are  per¬ 
forming  work  previously  handled  by 
ground  controllers.  But  the  cost-saving 
potential  of  agents  is  something  “we 
don’t  emphasize,  because  nobody  likes 
their  budget  reduced,"  says  Chien.  In¬ 
stead.  the  focus  is  on  the  additional 
scientific  research  created  by  the  use 
of  agent-based  software. 

Making  markets,  supply  chains. 


telecommunications  and  other  systems 
more  efficient  through  the  use  of 
agents  is  a  subject  of  intense  interest 
Some  800  researchers  recently  gath¬ 
ered  at  Columbia  University  for  the 
Third  Internationa]  Joint  Conference 
on  Autonomous  Agents  &  Muld-i^nt 
Systems,  the  leading  conference  on  the 
technology.  In  addition  to  people  ftom 
universities  and  government  agencies, 
the  event  attracted  researchers  from 
defense,  telecommunications  and  soft¬ 
ware  development. 

The  conference  stressed  both  ab¬ 
stract  concepts  and  practical  applica¬ 
tion  of  the  technolt^.  Most  presenta¬ 
tions  detailed  the  latest  research  in  a 
wide  variety  of  areas,  such  as  marhity* 
learning,  which  involves  cieatiog 
agents  that  have  the  ability  to  di^mver 
interactions  and  respond  to  them.  Oth¬ 
ers  addressed  the  behavior  of  multiple 
agents;  how  they  work  together,  ex¬ 
change  information,  set  priorities  and 
negotiate  with  one  another. 

AittingIttotheTest 

Negotiation  was  one  of  the  key  agent 
capabilities  tested  at  the  conference’s 
Trading  Agent  Competition.  In  one 
contest,  computers  ran  simulations  of 
agents  assembling  PCs.  The  agents 
were  operating  Stories,  managing  U). 
ventories.  negotiating  with  suppliers 
and  buyers,  and  making  decisions 
based  on  a  range  of  variables,  such  as 
the  risk  of  taking  on  a  big  order  even  if 
all  the  parts  weren’t  available.  If  an 
agent  made  an  error  in  judgment,  the 
company  could  face  financial  penalties 
and  order  cancellations. 

Researchers  say  there  is  no  optimal 
agent  design,  and  the  contest  serves  as 
a  performance  testbed.  “If  you  have  a 
better  strategy  than  your  competitor, 
you’re  in  a  more  advant^eous  position 
in  the  marketplace."  says  Nick  Jen¬ 
nings,  who  heads  the  autonomous 
agent  program  at  the  Univerrity  of 
Southampton  in  England. 

Decision-making  software  is  already 
used  in  financial  markets  for  functions 
such  as  automated  trading,  but  those 
processes  are  simpler  than  the  busi- 
ness-iO‘busine$s  transactions  that 
agent  researchers  are  testing.  Instead 
of  dealing  with  fixed  prices,  research¬ 
ers  are  looking  at  scenarios  where 
agents  must  constantly  negotiate  the 
best  prices  with  a  variety  of  suppliers. 

In  so  doing,  they  must  take  into  ac¬ 
count  changing  market  conditions 
while  also  considering  inventory,  pro¬ 
duction.  foctory  capacity  and  other 
bsucs. 

"Our  scenario  presumes  automation 
beyond  the  degree  that  currently  ex¬ 


ists,  but  I  think  things  are  going  in  that 
direction,"  says  Michael  Wellman,  pro¬ 
fessor  of  commercial  science  and  di¬ 
rector  of  the  artificial  mtelligeoce  lab¬ 
oratory  at  the  Universtty  of  Michigan. 

IBM  is  building  agent  technology  to 
support  its  autonomic  computing  sys¬ 
tems,  which  have  the  intelligence  to 
reconfigure  themselves  in  response  to 
changing  conditions,  according  to  Jef¬ 
frey  Kephart,  manager  of  agents  and 
emergent  phenomena  in  the  computer 
sciences  department  at  IBM’s  T.J.  Wat¬ 
son  Research  Center. 

Agent  researchers  "are  working  to¬ 
ward  a  world  some  years  hence  where 
these  automated  decisions  are  going  to 
be  used.  *rhose  people  in  industry  who 
are  really  thinking  about  this  know 
that  they  are  going  to  need  technology 
of  this  nature,  in  supply  chains."  Kep¬ 
hart  says.  The  research  work  so  far 
bodes  well  for  that  future,  he  adds. 

Agents  may  change  the  nature  of 
distributed  computing  environments. 
Instead  of  centralized  control  systems, 
agents  could  independently  operate 
parts  of  a  network  but  also  have  the 
ability  to  take  over  other  functions  if 
problems  arise.  Interest  in  building 
survivable  systems,  where  agents  re¬ 
generate  lost  capabilities  in  communi¬ 
cations  networks,  is  of  interest  to  the 
U.S.  defense  researchers  and  scientists 
at  Cambridge,  Mass.-ba.scd  BBN  Tech¬ 
nologies,  part  of  Verizon  Communica¬ 
tions  Inc. 

Agent  researchers  say  the  technolo¬ 
gy  won’t  arrive  in  big-bang  fashion. 

But  slowly,  over  time,  agent  functions 
will  begin  turning  up  in  systems.  This 
technology  is  “going  to  be  revolution¬ 
ary,"  says  Richard  Lazarus,  manager  of 
the  enterprise  architectures  group  at 
BBN.  "but  it  will  occur  incrementally." 
046862 
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WHAT’S  IN  A  NAME?  Well,  if  you've  got  a  lot 
of  them  on  your  voice  and  data  equipment, 
moving  to  IP  without  breaking  the  bank  can 
seem  pretty  daunting.  Avaya  makes  it  easy  for 
you  to  jump  right  in.  efficiently,  reliably,  and 
securely.  As  the  world  leader  in  enterprise  IP 


telephony,  our  solutions  are  specialty  designed 
with  industry  standards-based  technolc^  and 
open  architecture.  They  layer  right  on  top  of  your 
existing  network  and  work  with  almost  every 
other  brand.  So  with  Avaya,  you  can  keep  up  to 
85%*  of  your  current  Investment.  Avaya  can  also 


Contact  Center 


turn  your  call  center  into  a  strategic  IP  contact 
center,  easily  and  seamlessly.  We  help  you  go  to 
IP  right  away,  no  matter  what  names  are  on  your 
list.  To  learn  how  we  can  work  with  what  you 
have,  see  "Best  Practices  for  IP  Deployment  in  a 
Multi-Vendor  Environment"  at  avaya.conVseehow. 

Services 


Doedn't  matter  what  their  name  id, 

AVAYA  IP  TELEPHONY 
SOLUTIONS 
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Lina/vsiv  refers  lo  a  faniili  of 
time  10  event"  predielioii  lev  hiuijues 
iiiathematiealK  >:eared  i>>  problems 
w  ith  the  foHovs  me  characteristics- 

•  They  deal  wdh  discrete  events  that 
wHI  occur  to  some  but  not  all  members  of 
a  given  population.  Certain  patients  will 
die.  some  disk  drives  will  fail,  ;j  certain 
number  of  prescriptions  for  \';]liiini 

vv  ill  be  vs  ritten.  and  some  of  uiur  best 
ctisjoiners  vv  ill  de.scri  you. 

•  They  invoNe  time-dependent  out¬ 
comes.  Is  that  key  eust«*merjioln^  to 
cut  up  his  charjie  card  loniornnv  (bet¬ 
ter  v-nll  him  todayt.  ncM  quarter  (send 
him  math  or  m«t  in  the  next  five  years 
(leave  him  be)? 


SURVIVAL 


Survival  analysis  has  bG0n  usgcI  for  vGars 
to  predict  cell  death.  Now  It  can  forecast 
customer  attrition,  by  gary  h.  anthes 
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MOUTHS  AFTER  lOTALTY  OFFER 


•  The  outcomes  of  interest,  or  ■’depen¬ 
dent  variables.”  aren’t  continuous  -  like  in¬ 
come.  height  or  10  -  but  are  dichotomous. 

I  it  her  the  patient  will  die  within  sis 
months  or  he  vvon  i  Vi*ur  eiistumer 
w  ill  le.ive  this  \e.ir  or  he  won’t. 

•  Outcomes  often  can  be  anticipated 
by  trigger  events,  such  as  customer  com¬ 
plaints. 

Kandy  Colliea.  a  senior  analvst  .n 
Hewlet«-l’aek.ird  t  io.  says  usenfsur 
vival  mimni:  to  underst.ind  and  predict 
V  ustomer  behavior  ha.s  sprunji  up  in  the 
past  couple  of  yc.irs.  He  says  it's  really 
just  an  esiensitm  ofolJer  practices  in 
which  a  company  would  i.ike  its  most 
recent  customer  »lata,  tir  Jal.i  from  a 
time  slice  such  as  a  quarter  or  ye.ir,  .jnd 
try  to  preiliel  .Jttrition  based  on  that. 

Hut  surv  )v  j|  mininp  puts  time  itself 
into  the  .maly  sis  as  .1  v  ariable.  “It  is  a 
superset  technique."  Cullic.i  says.  “In- 
cluJinij  time  as  an  element  is  .kKlinp 
that  much  more  information." 

Choosing  a  Technique 

Software  for  surv aval  analy-sis  iiMst  of¬ 
ten  UM*s  some  kind  of  re)ires>ion  tech¬ 
nique.  notably  loijisiie  regression  or  a 
kind  ot  reyiression  called  (Zon  prop«)f- 
lion.il  ha/iirds  modeling:.  In  .iddilion. 
some  vi  ndors  sell  products  th.u  di» 
lime-tu-eveni  predieiinyi  usin):  neural 
networks  or  y-enelic  alyorilhms. 

bor  example.  SAS  Institute  Inc.  has 
survival  prediction  capabilities  in  sev  ¬ 
eral  of  its  products.  Accordini:  to  Anne 
I  l-illey.  manager  tifanalyiicsirafejtv  at 
'  SAS.  deciding:  which  product  or  lech- 
,  nique  is  appropriate  depends  on  how 
,  the  problem  is  formulated,  the  type  of 
I  output  desired  and  users’  ability  t»> 

I  code  and  prepare  data. 

New  York-based  investment  firm 
The  Hreyfus  0>rp.  used  SAS's  lotii.stie 
regression  routines  to  heat  down  cus¬ 
tomer  fund  redemption  rates  from 
more  than  20''..  a  year  to  less  than  A.. 
"Assets  were  going  out  of  the  comple.x. 
and  we  didn't  know  why.’’  <>ays  Prasan* 
na  Dhore.  an  executive  vice  president. 

First  Dreyfus  u.sed  -surx  ival  analysis 
lo  help  it  understand  the  factors  that 
wore  leading  customers  to  cash  out. 

The  company  organized  terabytes  of 
customer  history  along  three  dimen¬ 
sions:  customer  life  stage  (e.g..  ytiung 
married,  peak  earnings  age.  retired), 
past  investor  K-havior  and  basic  demo-  [ 
graphics,  such  as  education. 

"Then  we  asked  if  we  could  predict 
behavior."  Dhore  says.  "What’s  the 
probability  that  ('ustomer  A  is  going  to 
lake  the  money  out  in  the  next  two 
years,  for  example?  rhen.  what  does  it 
take  to  extend  his  life  with  us?" 

1  he  answers  it»  those  questions  var* 


THE  PERILS  OF 

Prediction 


Because  survival  analysts  is  by  definition 
time-dependent.  The  Dreyfus  Cotp  has 
h^  to  ensure  that  data  Irom  many  differ¬ 
ent  sources  across  long  time  hori^ 
matches  up  correcfly.  Timing  ts  of  utmost 
importance.'  says  executive  vice  presi¬ 
dent  F^asanna  Dhore. 

Take  a  holtstic  view  of  your  custorner.* 
advises  Genalytics  CEO  Doug  Newell. 
'Everythirig  you  know  about  them  must  be 
brought  to  bear.' 

Improperty  accounting  for  'fime- 
dependent  covariance’  is  a  frequent  rras- 
lake.  says  WA  Potts,  a  statistical  consul¬ 
tant  at  Data  Miners  inc.  m  Bostoa  Cus¬ 
tomer  attributes  change  over  time,  and  a 
certain  event  may  be  lik^  now  not  be¬ 
cause  of  current  values  of  predictors  but 
because  of  earlier  values,  he  says 
Edward  Malthouse,  a  marketing  com¬ 
munications  professor  at  Norihvvestern 
Univetstty.wamsthataswilhmoslore- 
dlclive  techniques,  survi^  analysis  can 
base  its  predictions  only  on  prior  experi¬ 
ence.  *Vdu  are  really  kx^ng  in  a  rearview 
mirror  with  surrival  analysis.  (I*s  depen¬ 
dent  on  what  you  did  lo  the  customer  in 
the  past  So  if  you  have  a  bold  new  idea- 
say,  a  new  loyafty  program  -  you  are  not 
going  lo  see  the  effects  of  that ' 

-  GafyH.  Anthes 

iod  bv  L'usiomvr  type,  bur  example,  the 
analysts  showed  that  eusiumers  identi- 
'  Tied  as  ’'sireci  savants"  would  redeem 
w  ithin  three  months  of  a  fund’s  perfor¬ 
mance  slump.  "So  if  you  can  call  him  up 
and  give  him  other  tipponunities.  he  can 
'  he  kept  in  the  Dreyfus  family  and  we 
can  extend  his  life  amither  six  months, 
a  year  or  two  years,"  Dhore  says. 

I  Catholie  Relief  Serx'ices  uses  soft¬ 
ware  from  Genalytics  Inc.  in  Newbury- 
I  pi>n.  Mass.,  to  "find  needles  in  a  h.ny- 
j  stack  "  says  Kevin  Whoinm.  director  of 
'  direct-response  fundraising.  Thtisc  are 
I  donors  who  will  not  simply  make  one¬ 
time  gifts  in  response  to  an  emergency 
such  as  a  hurricane,  but  w'ho  will  keep 
on  giving  thereafter.  TTie  software  uses 
genetic  algorithms  that  loam  over  time 
in  order  to  produce  "self-adjusting 
models,”  Whorton  says. 

For  example,  one  model  showed  that 
Hispanic  donors  havea  far  higher  attri- 
1  tion  rate  than  non-Hlspanic  donors,  a 
I  spL'cial  concern.  Whiirton  says,  because 
I  by  2025.  Hispanics  v\  ill  accvHini  for  half 
'  ofall  Catholics  in  the  U.S.  "So  now  we 
,  can  do  more  with  these  people  at  the 
I  four-to-six-month  point  in  the  rekitum- 
ship,"  Iw  siiv’s.  O  48775 


I 
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SURVIVAI  ANALYSIS 
could  help  you  pre¬ 
dict  that  one  of  your 
best  customers  is 
about  to  jump  ship 
for  a  competitor.  Or 
it  could  help  you  de¬ 
cide  whether  that  costly  promotion  is 
really  going  to  be  worth  it.  Or  it  could 
help  you  tailor  that  next  catalog  mail¬ 
ing  and  double  your  rettuti. 

The  aptly  named  analytic  technique, 
also  called  survival  data  mining,  has 
been  used  by  doaors  for  decades  to  pre¬ 
dict  the  life  expectancy  of  heart-trans- 
plant  patients  and  by  biologists  to  assess 
the  probability  that  a  cell  invaded  by  a 
virus  will  die  within  24  hours.  Engineers 
have  long  used  it  to  estimate  the  mean 
time  to  failure  of  a  disk  drive  or  a  robot¬ 
ic  welder.  More  recently,  sociologists 
and  psychologist  have  started  using  it  to 
predict  when  certain  types  of  people 
wUl  divorce  or  seek  help  for  deptessioa 
But  until  recently,  anempts  to  apply 


survival  analysis  to  business  problems 
have  been  mostly  university  projects, 
says  Edward  Malthouse.  a  marketing 
communications  professor  at  North¬ 
western  University.  “Now  it's  really 
taking  oflfin  the  database  mariceting 
world  —  for  credit  cards,  hotels,  air¬ 
lines.  catalogs  and  so  on."  he  says. 

Survival  analysis  refers  to  a  family  of 
“time  to  event"  prediction  techniques 
mathematically  geared  to  problems 
with  the  following  characteristics: 

■  They  dial  with  dfscrttoavenls  that 
wi  occur  to  loma  blit  not  al  Riambare  of 
a  given  population.  Certain  patients  will 
die.  some  disk  drives  wrill  fail,  a  certain 
number  of  prescriptions  for  Valium 
will  be  written,  and  some  of  your  best 
customers  will  desert  you. 

■  Involve  tima-depandont  out¬ 
come*.  Is  that  key  customer  going  to 
cut  up  his  charge  card  tomorrow  (bet¬ 
ter  call  him  today),  next  quarter  (send 
him  mail)  or  not  in  the  next  five  years 
(leave  him  be)? 


■  The  outcomes  of  interest,  or  "depen¬ 
dent  vviaMes,”  aren't  continuous  -  like  in¬ 
come.  height  or  IQ  -  but  are  chchotiMnous. 
Either  the  patient  will  die  within  six 
months  or  he  won’t.  Your  customer 
will  leave  this  year  or  he  won't. 

•  Outcomes  often  can  be  anticipated 
by  trigger  events,  such  as  ootomer  com¬ 
plaints. 

Randy  Collka,  a  senior  analyst  at 
Hewlett-Packard  Co„  says  use  of  sur¬ 
vival  mining  to  understand  and  predict 
customer  behavior  has  sprung  up  in  the 
past  couple  of  years.  He  says  it’s  really 
just  an  extension  of  older  practices  in 
which  a  company  would  take  its  most 
recent  customer  data,  or  data  from  a 
time  slice  such  as  a  quarter  or  year,  and 
try  to  predict  attrition  based  on  that. 

But  survival  mining  puts  time  itself 
into  the  analysis  as  a  variable.  “It  is  a 
superset  technique,"  CoUica  says.  "In¬ 
cluding  time  as  an  element  is  adding 
that  much  more  information." 

Choosing  a  Technique 

Software  for  survival  analysis  most  of¬ 
ten  uses  some  kind  of  regression  tech¬ 
nique.  notably  logistic  regression  or  a 
kind  of  regression  called  Cox.  propor¬ 
tional  haz^s  modeling.  In  addition, 
some  vendors  sell  products  that  do 
time-to-cvent  predicting  using  neural 
networks  or  genetic  algorithms. 

For  example,  SAS  Institute  Inc.  has 
survival  prediction  capabilities  in  sev¬ 
eral  of  its  products.  Accordii^  to  Anne 
Lilley.  manager  of  analytic  strategy  at 
S^.  deciding  which  product  or  tech¬ 
nique  is  appropriate  depends  on  bow 
the  problem  is  formulated,  the  type  of 
output  desired  and  users’  ability  to 
code  and  prepare  data. 

New  York-based  investment  firm 
The  Dreyfus  Corp.  used  SAS’s  logistic 
regression  routines  to  beat  down  cus¬ 
tomer  fund  redemption  rates  from 
more  than  20%  a  year  to  less  than  7%. 
"Assets  were  going  out  of  the  complex, 
and  we  didn’t  know  why,"  says  Prasan- 
na  Dbore.  an  executive  vice  president 
First  Dreyfus  used  survival  analysis 
to  help  it  understand  the  factors  that 
were  leading  customers  to  cash  out 
TTie  company  organized  terabytes  of 
customer  history  along  three  dimen¬ 
sions:  customer  life  stage  (e.g.,  young 
married,  peak  earnings  ^;e.  retired), 
past  investor  behavior  and  basic  demo¬ 
graphics.  such  as  education. 

Tben  we  asked  if  we  could  predict 
behavior."  Dhore  says.  ’What’s  the 
probability  that  (Customer  A  is  going  to 
take  the  money  out  in  the  next  two 
years,  for  example?  Then,  what  does  it 
take  to  extend  his  life  with  us?" 

The  answers  to  those  questions  var¬ 


SURVIVAL 


Survival  analysis  has  been  used  for  years 
to  predict  cell  death.  Now  it  can  forecast 
customer  attrition,  by  Gary  h.  anthes 


ied  by  customer  type.  For  example,  the 
anal3rsis  showed  that  customers  identi¬ 
fied  as  "street  savants"  would  redeem 
within  three  months  of  a  fund’s  perfor¬ 
mance  slump.  "So  if  you  can  call  him  up 
and  give  him  other  (^>portuiuties,  be  can 
be  kept  in  the  Dreyfus  family  and  we 
can  extend  his  life  another  six  months, 
a  year  or  two  years,"  Dbore  says. 

Catholic  Relief  Services  uses  soft¬ 


ware  from  Genalytics  Inc  in  Newbury- 
port.  Mass.,  to  "find  needles  in  a  bay- 
stack,"  says  Kevin  Wborton,  director  of 
direct-response  fundraising.  Those  are 
donors  who  will  not  simply  make  one¬ 
time  gifts  in  response  to  an  emergency 
such  as  a  hurricane,  but  trim  will  keep 
on  givu^  thereafter.  The  software  uses 
genetic  algorithms  that  learn  over  time 
in  order  to  produce  "self-adjusting 
models,"  Wborton  says. 

For  example,  one  model  showed  that 


Hispanic  donors  have  a  for  higher  attri¬ 
tion  rate  than  non- Hispanic  donors,  a 
special  concern.  Wborton  says,  because 
by  202s.  Hispanics  will  account  for  half 
of  all  Catholics  in  the  U3.  “So  now  we 
can  do  more  with  these  people  at  the 
four-to-six-month  point  in  Ae  relation¬ 
ship."  be  says.  O  40775 
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Predicting 
asteroid  impacts 
will  require  super¬ 
computers  and 
petabytes  of  data 
By  Patrick 
Thibodeau 

The  computers  at 
thcMiiMr  Ptanct 
Center  recently 
sorted  through 
some  1(X.OOO  obser* 
vatioDs  of  astro* 
nomic  phenomena  and  deemed 
a  handful  as  deserving  follow¬ 
up  because  they  were  either 
rvewly  discovered  or  on  a  path 
^  fn  Earth's  general  vicinity. 

The  preliminary  trajectories 
plotted  by  the  MPC  were 
based  on  too  few  observations 
to  be  acciuate,  but  unbe¬ 
knownst  to  center  officials, 
the  computer  bad  found  one 
object  on  a  collision  path  with 
Earth.  The  discovery  was 
posted  on  the  Web  late  in  the 
day  on  Jaa  13. 2004. 

Alert  amateur  astronomers 
in  Europe  first  noticed  the 
problematic  path  of  (he  near- 
Earth  object  (NEO).  and  a 
Yahoo  message  board  used  by 
astronomers  began  to  fill  with 
activity  about  tlW  bogy. 

Mapping  the  Cosmos 

In  some  ways,  scientists  were 
lucky  to  haw  found  rhU  po¬ 
tential  threat,  because  finding 
NEOs  today  is  literally  a  hit- 
or-miss  activity. 

The  first  warning  of  an  as¬ 
teroid  or  comet  impact  may 
come  fiom  calculations  per¬ 
formed  by  some  old  worksta¬ 
tions  clustered  together  at  the 


MPC  at  the  Smithsonian  Astro- 
physical  Observatory  at  Har¬ 
vard  University. 

These  systems  aren't  large 
enough  to  map  the  sky  and 
provide  scientists  with  a  com¬ 
prehensive  view  of  everything 
that  could  do  serious  damage. 
But  that's  changing.  Some  big 
prefects  are  under  way  to  at¬ 
tempt  to  find  as  many 
threatening  objects  as 
possible.  These  sky- 
mapping  efforts  will 
create  extraordinarily 
large  data  sets  and  re¬ 
quire  new  searching  and 
processing  approaches. 

One  ambitious  project  is 
the  Large  Synoptic  Survey 
Telescope  (LSCT),  a  public/ 
private  partnership  based  in 
Tbeson.  Ariz.,  intended  to  pro¬ 
vide  3-D  maps  of  the  universe. 


coverii^  a  very  wide  area. 

When  it's  in  operation  in 
2011  at  a  site  still  to  be  deter¬ 
mined,  the  telescope  being 
built  for  the  LSST  project  will 
collect  data  at  a  rate  of  about 
6GB  (equivalent  to  one  DVD) 
per  10  seconds,  generating 
many  petabytes  of  data  over 
time.  One  petabyte  equals 
roughly  100  times 
the  printed  contents 
of  the  Library  of 
Congress. 

The  LSST  project 
“pushes  forward  data¬ 
base  technology  dramatically.'' 
says  Philip  Pinto,  a  physics 
professor  at  Steward  Observa¬ 
tory  at  the  University  of  Ari¬ 
zona  and  a  member  of  the 
LSST  project’s  board  of  direc¬ 
tors.  ‘The  LSST  database  will 
probably  be  the  largest  known 


nonproprietary  database  in 
the  world." 

Because  operation  of  the 
telescope  lies  some  seven  to 
eight  years  out,  the  scientists 
working  on  it  are  hopeful  that 
processing  capabilities  and 
storage  densities  will  increase 
enough  to  handle  this  data,  but 
they  can  still  imagine  a  super¬ 
computer  system  of  l.(X)0  or  so 
systems  networked  together. 

Work  on  the  software  has 
already  started,  however.  "It's 
not  entirely  dear  how  you  do 
It,"  says  Jeff  Kantor,  a  computer 
scientist  in  charge  of  data 
management  on  the  project. 

I  He's  developing  algorithms  for 
handling  the  data,  such  as  de¬ 
termining  from  multiple  obser¬ 
vations  whether  a  particular 
dot  in  the  sky  is 
the  same  object 
moving  from 
frame  to  frame. 

A  second  ef¬ 
fort,  called  Pan- 
STARRS  (Pan¬ 
oramic  Survey 
Telescope  and 
Rapid  Response 
System),  is  being 
developed  by  the 
University  of 
Hawaii's  Institute 
for  Asirorwmy. 

Instead  of  a  large  telescope, 
the  Pan-STARRS  project  will 
use  four  smaller  ones  that 
combine  image  data  and  gen¬ 
erate  data  on  a  scale  similar  to 
that  of  the  LSST.  These  multi¬ 
ple  systems,  further  delineated 
by  64  detectors  in  each  of  the 
four  cameras,  will  be  well 
suited  to  parallel  processic^ 

But  instead  of  the  CPU  par¬ 
allelization  common  in  hi^- 
performance  technical  com¬ 
puting.  researchers  in  Hawaii 
are  working  on  data  paral¬ 
lelization  in  which  every 
processor  worits  on  different 
data  but  executes  the  same 
insmietton  at  the  same  time. 

“A  lot  of  techniques  have  been 
explored  in  that  particular 
realm,"  says  Eugene  Magnier, 
image-processing  pipeline 
technical  lead.  Pan-^ARRS 
is  expected  to  be  operational 
by  2008. 

Scientists  hope  that  LSST 
and  Pan-STARRS  will  help 
them  identify  most  of  the 
NEOs  that  may  threaten  Earth 


and  locate  those  on  a  danger¬ 
ous  path  loi^  before  they 
strike.  They  hope  that  injfonna- 
tion  will  give  them  time  to  de¬ 
velop  ways  to  deflect  the  NEO. 

These  system  developments 
will  happen,  of  course,  only  if 
the  Earth  isn't  first  destroyed 
by  a  comet  or  asteroid. 

Predictive  Processes 

Among  those  following  the 
activity  on  the  Yahoo  message 
board  back  in  January  was 
Alan  Harris,  a  senior  research 
scientist  at  the  Space  Science 
Institute  in  Boulder.  Cola 
Harris  ran  some  calculations 
and  found  that  the  object 
was  “headu^  straight  for  us 
at  around  ISkm/sec."  and 
would  hit  in  26  hours. 

The  NEO  was 
estimated  to  be 
about  30  meters 
in  diameter. 
Depending  on 
its  composition, 
it  could  have  dis¬ 
integrated  in  the 
atmosphere  or 
hit  the  Earth. 

(The  mile-wide. 
57'0-foot  Bar¬ 
ringer  Meteorite 
Crater  in  Ari¬ 
zona  was  created 
by  a  45-roeter  iron  object.) 

Harris  was  nonetheless 
skeptical  about  the  object's 
preliminary  path.  The  MPC 
trajectory  was  based  on  only  a 
few  c4>servations  —  enough  to 
help  astronomers  find  it,  but 
not  accurate  enough  to  deter¬ 
mine  its  actual  course. 

At  8:30  p.m..  Bruce  Mars- 
den,  director  of  the  MPC.  got  a 
call  from  NASA’s  Jet  Propul¬ 
sion  Laboratory.  The  NASA 
official  "sort  of  was  wonder¬ 
ing”  about  the  path  of  the  ob¬ 
ject.  Marsden  recalls. 

Marsden  ordered  further 
observations,  and  the  bogy 
was  determined  not  to  be  on  a 
threatening  path  after  all 
In  the  aftermath  of  tiiis  inci¬ 
dent,  the  MPC  changed  the 
computer  program  that  pro¬ 
vides  the  preliminary  path  of 
an  NEO.  Next  time  the  com¬ 
puter  forecasts  an  "impacting 
solution.”  as  astronomers 
call  it,  the  program  will  alert 
staffers  before  the  data  is  post- 
I  ed  on  the  O  48928 
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Searching  for  new  storage 
solutions  that  work? 

See  multi-vendor  interoperability  at  work  at  the 
world’s  largest  storage  solutions  demonstration! 
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I  Uniting  the  World  of  Storage  I 


October  25-28,  2004 
JW  Marriott 
Grande  Lakes  Resort 
Orlando,  Florida 


The  Storage  Networking  World  (SNIA)  multi-vendor  Interoperability  &  Solutions  Demo, 
taking  place  October  25-28, 2004,  in  Orlando,  offers  you  the  opportunity  to  see 
interoperability  in  a  collaborative  and  vendor-neutral  setting.  Whatever  your  needs  - 
whether  it  is  managing  storage  with  SNIA  SMI-S,  building  on  top  of  a  Information 
Lifecycle  Management  foundation,  or  selecting  the  right  building  blocks  to  meet 
industry  regulations  -  this  is  the  place  to  see  feature  sets,  supported  solutions 
and  interoperability. 

Theme  Areas  in  the  SNW  Interoperability  &  Solutions  Demo: 

•  Storage  Management  Solutions  (SMI-S) 

•  IP  Storage  Solutions 

■  Storage  Infrastructure  Solutions 

•  Virtualization  Solutions 

•  Business  Continuance  and  Disaster  Recovery  Solutions 

•  Backup  and  Recovery  Solutions 

•  Solutions  for  Regulatory  Compliance  and  Security 
'  tnfomwdto^eeycle  Mj^gement 
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Secure  E-mail  Stops 
At  Corporate  Borders 


Providing  end-to-«iid  e-maii 
sectMity  wiDi  business  partners  is 
difficult  at  best  By  Roger  Fc^ 


Lik£  any  other  company, 
my  current  cUeot  does 
not  woric  in  a  vacuum. 
The  company  a  small 
insurance  Hnn  —  has  many 
partners,  clients,  suppliers  and 
regulators  with  whom  it  ex¬ 
changes  information  on  a  reg¬ 
ular  basis.  Much  of  that  infor¬ 
mation  is  highly  confidential. 

So  fax.  IVe  tadcled  intcmal 
e-mail  security.  Now  Tm 
working  on  a  tougher  issue: 
How  do  you  know 
that  the  information 
remains  confidential 
when  it  reaches  its 
destination?  E-maii  is 
not  only  easy  to  for¬ 
ward  to  the  wrong 
person;  it's  also  vul¬ 
nerable  to  any  security 
breaches  in  your  partners’  sys¬ 
tems.  If  you  send  confidential 
business  e-mail  to  a  client  and 
the  client  suffers  a  security 
breach,  that  company  could 
expose  your  confldratial  data 
as  well  as  its  own.  vyou  are 
very  dependent  on  your  trad¬ 
ing  partners'  IT  security  to 
safeguard  your  information. 

I  looked  into  the  possibility 
of  using  digital  rights  manage¬ 
ment  (DRM)  software,  which 
can  offer  control  over  your 
documents  once  they're  out  of 
your  system  by  restricting  to 
whom  a  document  can  be 
sent,  automatically  deleting  it 
and  so  on. 

However,  ray  diem's  securi¬ 
ty  team  doesn't  believe  DRM 
will  work.  So  the  obvious  next 
step  is  to  find  some  way  to  get 
assurance  about  the  security 
of  its  trading  partners'  sys¬ 
tems.  If  we  know  a  partner's 
security  is  relatively  good, 
we  have  some  assurance  that 
data  will  be  protected  appro¬ 
priately.  There  are  severd 
ways  to  gain  that  assurance. 


but  they  all  have  drawbacks. 

One  is  to  rely  on  the  Inter¬ 
national  Staodiuxls  Organiza¬ 
tion’s  ISO  17799  ceittfication. 
This  security  management 
standard  isn’t  bulletproof — 
just  because  you’re  compliant 
doesn't  mean  you  won't  get 
hacked  —  but  if  a  partner  was 
compliant  with  the  standard, 
we  would  at  least  have  a 
warm,  fuzzy  feeling  that  it  was 
doing  the  right  thing.  The  only 
drawback  is  that,  as 
far  as  we  can  tell, 
none  of  our  partners 
is  compliant  with 
ISO  17799. 

Notone. 

ft's  not  that  we’re 
dealing  with  a  par¬ 
ticularly  unsecure  set  of  com¬ 
panies;  ifs  nx>rc  the  case  that 
ISO  17799  compliance  takes 
time,  effort  and  money.  And 
once  companies  earn  that 
compliance  certification,  they 
have  little  to  show  for  their  ef¬ 
fort,  so  few  companies  bother. 

A  second  option  is  to  send 
in  the  auditors.  For  major  trad¬ 
ing  partners,  my  diem  often 
sends  a  team  of  auditors  to 
crawl  all  over  their  systems 
and  make  sure  they're  doing 
things  right.  The  auditors  nor¬ 
mally  cover  a  whole  range  of 
things  in  addition  to  security. 


Asferaswe 
can  tel,  none  of 
our  partners  is 
conulantwith 
1^17799. 

Notone. 


and  it  gives  my  client  more  as¬ 
surance  than  it  can  get  any 
other  way.  The  drawback  is 
that  auditing  is  a  stow  and  ex¬ 
pensive  process.  And  as  with 
any  audit,  what  you  get  is  only 
a  snapshot:  Two  years  from 
now,  its  partners'  systems  and 
security  will  have  changed 
dramatically,  so  my  client  will 
have  to  reaudit  regularly. 

A  third  option  is  to  rely  on 
security  and  confidentiality 
clauses  in  contracts.  My  client 
includes  such  clauses  in  every 
contract  it  sends  out,  but  I 
don’t  have  much  faith  in  such 
things.  First  of  all.  contractual 
clauses  about  security  are  a 
reactive  measure:  Th^’re 
only  effective  after  a  problem 
occurs.  This  company  really 
needs  a  measure  that  stops 
problems  from  happening  in 
the  first  place. 

Second  while  contractual 
clauses  enable  my  diem  to 
sue  a  trading  partner  for  dam¬ 
ages  after  a  security  breach. 

IT  security  litigation  is  expen¬ 
sive  and  unreliable,  since  it’s 
rarely  easy  to  prove  how  a 
particular  piece  of  confiden¬ 
tial  data  leaked  out. 

As  I  walked  through  these 
options  with  members  of  my 
client's  staff.  I  could  see  their 
faces  dropping  steadily.  Un¬ 
fortunately.  I  didn’t  have  a 
better  solution  to  offer  them. 

Paper-based  Process 

We’re  now  implementii^  a 
j  paper-based  process.  Basically, 
wc  ask  my  client's  partners  a 
few  pertinent  questions,  re¬ 
view  their  security  policies 
and  see  if  we  get  a  nice  feeling 
about  them.  We  have  no  way 
of  checking  that  the  answers 
are  accurate  —  when  a  compa¬ 
ny  has  over  600  trading  part¬ 
ners  and  a  small  security  bud¬ 
get,  there's  no  cost-effective 
way  to  verify  anything. 

Still,  it  does  help  us  identify 
the  companies  that  need  clos¬ 
er  attention  and  target  them 


for  audits.  When  you  get  an 
e-mail  back  from  a  supplier 
saying.  *We’U  send  you  our 
security  policy  in  a  couple  of 
weeks,  since  the  guy  who’s  got 
it  is  on  holiday  at  the  mo¬ 
ment,”  you  get  a  very  strong 
feeling  indeed  After  all,  if 
only  one  person  in  the  compa¬ 
ny  has  a  copy  of  the  policy,  it's 
unlikely  that  anyone  else  is 
following  it 

Another  supplier  boasted 
of  its  extensive  wireless  net¬ 
working  and  then,  in  answer 
to  the  question  "Make  and 
model  of  main  firewalls,”  put 
down  the  name  of  an  antivirus 
checker.  That  worried  us. 

What  we  ended  up  with  is  a 
paper-based  system  that  cant 
be  relied  upon  to  be  accurate, 
can  only  scratch  the  surface  of 
our  partners'  security  and 
goes  out  of  date  very  quickly. 
But  as  far  as  1  can  see.  that's 
the  best  option  available  for 
checking  security. 

What  I’d  like  to  see  is  the 
creation  of  an  independent 
agency  that  measures  and  re¬ 
ports  on  companies*  informa¬ 
tion  security,  in  much  the 
same  way  that  analysis  give 
financial  risk  ratings  to  com¬ 
panies.  If  Moody's  Investor 
Service  gives  a  AAA  rating  to 
a  company,  you  can  be  confi- 
dent  that  the  company  isn't 
going  to  go  into  Chapter  11 
bankruptcy  before  it  gets 
around  to  paying  you. 

All  we  need  is  an  agency  to 
'  step  up  to  the  plate  and  start 
providing  security  risk  ratings 
for  companies.  That  would  act 
as  a  great  facilitator  to  c-com- 
merce,  and  it  would  provide 
customers  with  a  valuable  way 
of  assessing  how  well  suppli¬ 
ers  are  looking  after  their  con¬ 
fidential  data. 

In  the  interim,  if  you  have 
any  ideas,  fd  like  to  hear  them. 
Send  me  an  e-mail  or  post 
your  message  in  the  Security 
Manager's  Journal  forum.  I 
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Xcel  Deploys  Peace 
Software  System 
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Four- Way  Server 
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Why  rr  Will 

Continue  to  Matter 


The  cost  squeeze  is  on.  Automobile 
companies  are  racing  to  get  slimmer.  Ac¬ 
cording  to  The  New  York  Times,  automak¬ 
ers  are  now  ranked  according  to  how  few 
hours  they  spend  building  a  car.  For  in¬ 
stance,  General  Motors  claims  to  be  the  leader,  with 
only  35.2  hours  per  vehicle.  Chrysler  puts  in  37.42 
hours.  Ford  takes  38.6  hours.  They’re  all  keeping  an  eye 


on  the  efTidencies  of  Toyota, 
which  assembles  cars  in  Fre¬ 
mont.  CaU£,  in  only  21.92 
hours  while  gaining  market 
share. 

Every  company  in  the 
world  is  now  engaged  in  a 
race  to  reduce  costs.  The 
bours-per-car  statistics  are 
revealing  because  they  re¬ 
flect  the  extent  to  udiid)  out¬ 
sourcing  takes  place.  GM 
looks  good  because  it  out¬ 
sources  more  than  Ford:  I 

76.2%  of  revenue  vs.  70.2%.  I 

You  can  always  show  an  im-  I 
provement  in  productivtty  by  getting 
others  to  do  your  woik.  Fbr  instance,  the 
current  claim  by  GM  that  it  reduced  IT 
costs  as  a  percentage  of  revenue  doesn't 
necessarily  attest  to  the  company’s  iro- 


Ufe-cycle  total  costs  of  own¬ 
ership.  In  the  case  of  a 
$30,500  automobile,  that  re¬ 
quires  adding  the  costs  of 
distribution  and  the  cus¬ 
tomer's  five-year  expenses 
for  taxes,  insurance,  financ¬ 
ing.  registration  fees,  ntain- 
tenaoce.  ref>airs.  oil  and 
fiicL  That  raises  the  con¬ 
sumer's  cash  costs  of  an  av¬ 
erage  GM  car  to  at  least 
$73,600. 

As  I  calculate  the  con¬ 
sumer’s  life-cycle  costs  of 
$73,600. 1  find  that  IT  can’t 
account  for  more  than  6%  of  the  total  ex¬ 
penses.  The  costs  of  information  man¬ 
agement  would  be  about  30%  if  added 
up  for  suppliers,  manufocturing,  man¬ 
agement,  dealers  and  the  consumer’s 


— - — ucaicn  aoa  me  consumer  s 

proved  rfHcieiKy.  It  only  proves  that  GM  owncrahip.  As  nunufictuteis  shift  costs 
shninlc  its  value-added  and  therefore  to  suppliers,  as  management  shifts  costs 
doesn’t  need  to  spend  more  on  IT.  '  ' 


to  manufacturing  and  as  customers  shop 


a  - -  UlMMUmera  501 

Calculating  the  cost  of  CM’S  35.2  hours  around  for  the  best  deal,  every  reshuf- 


per  vehicle  raises  a  more  interesting 
question.  CM’S  average  labor  cost,  which 
includes  managerial  and  executive  com¬ 
pensation,  is  $3330  per  hour.  That 
means  GM  puts  SU72  of  labor  into  a  car 
that  It  sells,  on  average,  for  $30300.  Even 
after  paying  for  depredatioo  and  taxes 
and  making  an  allowance  for  relatively 
slim  profits  (another  $6,067).  this  leaves 
$23341  of  purdiases  to  be  managed  for 
greater  effldency. 

Thking  a  purely  intneompany  view  of 
the  scope  of  IT  would,  however,  be  a 
mistake.  The  emphasis  in  ^obal  compe- 
titkm  is  DOW  shifting  from  the  costs  of  a 
con^any's  products  to  the  consumer’s 


fling  of  how  money  is  spent  ultimately 
affects  all  others.  ’The  cost  of  parts  will 
influence  maintenance  and  insurance 
costs.  *11)6  cost  of  the  car  will  tnfliie>w;»^ 
taxes  and  depredation. 

In  t^  gk)l^  marketplace,  all  costs  be¬ 
come  interdependencies,  often  involving 
hundreds  of  businesses  to  delivera  sin¬ 
gle  product  Therefore,  the  management 
of  IT  over  the  next  few  decades  will  be 
shaped  by  the  need  to  extend  the  bound¬ 
aries  of  corporate  information  systems 
from  the  traditioDal  corporate-centric 
orieotation  to  delivering  consumer-cen¬ 
tric  services.  For  ino^mr.  in  the  case  of 
an  automobile,  this  will  teqaiie  setting 


up  lifetime  configuration  management 
databases  for  preventive  maintenance, 
repairs,  parts,  upgrades,  warranties,  fi¬ 
nancing.  registration,  insurance  and  fuel 
management. 

The  concept  of  global  life-cycle  sup¬ 
port  of  products  and  services,  as  seen 
from  the  consumer  standpoint,  will  be¬ 
come  the  dominant  theme  of  IT  roanage- 
mentThis  will  require  an  architecture 
that  assures  data  interoperability  over 
the  entire  value  chain,  ^r  instance,  the 
reliability  of  parts  must  be  traceable 
over  a  complex  chain  of  ever<hanging 
suppliers.  Preventive  maintenance 
records  will  have  to  travel  as  a  vehicle 
passes  from  owner  to  owner.  Accident 
records  will  have  to  be  integrated  with 
insurance  and  repair  records. 

Identical  reasoning  also  applies  to 
pharmaceuticals,  medical  services,  food. 

I  banking,  refrigeration  and  airplanes.  The 

!  CIOs  who  succeed  will  extend  the  posi¬ 
tioning  of  rr  from  the  corporate  back 
office  (an  overhead  cost)  to  a  customer 
life-cycle  support  view  (a  company’s 
core  competency). 

The  current  introspective,  function- 
centric  and  process-centric  systems  ar¬ 
chitectures  will  have  to  be  replaced  by 
data-centric  designs  that  assure  interop¬ 
erability  of  data  that’s  independent  of 
technology,  location  or  organization. 


In^leroenting  such  a  transition  will  be 
tbe  challenge  for  alllT  executives  in  the 
future.  Meanwhile,  the  IT  industry,  the 
CIOs  and  all  of  tbe  naysayer  gurus 
should  be  put  oo  notice  chat  die  best  of 
IT  is  yet  Co  come.  O  4tll8 
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THE  LEADER  IN  CUSTOMER 
ANALYTIC  APPLICATIONS  BRINGS 
YOU  A  NEW  GENERATION 
OF  ENTERPRISE  Bl  SOLUTIONS. 


Cutthroat  competition.  Intense  profit  pressure.  Price  erosion.  Declining  loyalty.  Business  today 
dictates  working  not  just  harder,  but  smarter.  Meeting  these  new  business  demands,  and 
overcoming  the  inherent  challenges,  requires  a  new  generation  of  Bl  solutions  unavailable  from 
traditional  Bl  vendors. 

Siebel,  the  leader  in  customer  analytic  applications,  brings  you  Siebel  Business  Analytics -Bl 
solutions  that  empower  everyone  with  actionable  real-time  insight  from  the  largest  data 
warehouses  and  across  enterprise  sources.  With  a  mission-critical  architecture  that  supports 
multi-terabytes  of  data,  thousands  of  users,  and  24s7  availability.  And  proven  application 
solutions,  with  built-in  industry-specific  best  practices  that  are  flexible,  quickly  implemented, 
integrate  with  your  infrastructure,  and  provide  low  TCO. 

Our  innovative  Bl  solutions  have  catapulted  Siebel  into  the  leadership  position  in  analytic 
applications  for  sales,  marketing,  service,  and  senior  management,  with  over  75%  of  our  customers 
using  Siebel  Business  Analytics  beyond  CRM  and  across  a  full  range  of  enterprise  sources. 

why  the  most  analytically  sophisticated  companies  rely  on  Siebel.  Attend 
Siebel  Bl  Summit,  Lc»  Angeles  on  October  3-6.  Visit  www.siebel.com/newgen 


Business  Analytics 

CUSTOMER  INSIGHT  .  ENTERPRISE  INTELIIGENCE 


Is  Grid  Computing  Ready 
for  Your  Enterprise? 

Computerworld’s  FT  Executive  Summit  Wiii  Guide  Your  Decision 


If  you  re  an  IT  executive*  in  an  end-user  organization, 
apply  to  attend  Computerworld’s  upcoming  complimentary 
half-day  summit  on  Grid  Computing. 

VN^n  done  well,  grid  computing  can  lower  hardware 
costs,  reduce  development  and  operational  expenses 
and  result  rn  more  effective  systems  management 
and  use  of  processing  resources.  As  grid  moves  from 
the  realm  of  science  and  research  into  business 
applications,  what  are  the  risks,  tradeoffs,  and  key 
considerations?  How  have  other  businesses  evaluated 
the  opportunities  to  use  grid?  Most  importantly, 
is  this  emerging  style  of  computing  finally  ready 
for  your  enterprise? 

By  leveraging  the  knowledge  of  industry  experts  and 
the  real-world  experience  ind  advice  of  your  IT  peers, 
this  IT  Executive  Summit  will  provide  an  overview  of 
effective  strategies  for  assessing  and  implementing 
grid  technologies. 

*  Complimentary  registration  is  restricted  to 
qualified  IT  executives  only. 


Apply  for  registration  today 

For  more  information  or  to  apply,  visit 

www.rtexecutivesummitcom 


Grid  Computing:  Assessing  the 
Reality  and  the  Potential 
Boston  •  September  21,  2004 

The  State  Room  •  60  State  Street  •  33rd  Floor 

Registration  and  Networking  Breakfast 


7:45am  to  8:15am 
8:15am  to  8:45am 

8:45am  to  9:15am 
9:15am  to  9:45am 

9:45am  to  10:15am 
10:15am  to  10:45am 
10;45am  to  1 1:15am 

1 1:15am  to  Noon 


From  Cutting  Edge  to  Corporate  Stage: 

Grid  Computing  and  the  Enterprise 

Julia  King.  Executive  Editor.  Events,  Computerworld 

Industry  Analyst  Perspective 

John  Humphreys.  Research  Manager,  Enterprise  Computing.  IDC 

rr  Executive  View: 

One  User’s  Experience  Implementing  Grid 

Chris  Bennett  Technical  Team  Leader,  Warkflow  Technology 
Group,  Acxiom 

Refreshment  and  Networking  Break 

Update  from  the  Enterprise  Grid  Alliance  (EGA) 
The  View  of  Grid  Computing  from  Iron  Mountain 

Bill  Olsen,  VP  of  Engineering,  Iron  Mountain  Digital  Archives 

Kay  Considerations  in  Grid  Computing 
Projects:  An  IT  Executive  Roundtable 

Rinel  Moderator  Patrick  Thibodeau.  Senior  Editor. 

Computerworld 

Panelists:  Ben  Flock.  VP  of  Virtualization  and 
Application  Frameworks.  CIGNA  Mark  Forman.  Executive  Vice 
President  WarWwide  Services.  Cassatt  Bill  Olsen,  VP  of 
Engineering.  Iron  Mountain  Digital  Archives 

Program  Concludes 


Selected 

speakers 

include: 


/ulia  JGrt^ 
Extaitivt  Editor. 
Eveitt, 

Computerworid 


BenFlock 
VPofVirtuaiuprion 
and  Appdeation 
Framewwki, 

CIGNA 


John  Htunphnys 
keteorck  Manager, 
enterprise  Confuting, 

nx 


Patrick  Thibodeou 
Senior  £dilor. 
CompaUrwortd 


This  program  will  also  take  place  at  the 
Philadelphia  Marriott  in  Philadelphia,  Pennsylvania 
on  September  15,  2004 

For  more  informatioo  on  these  locations,  calf  888-299-0155 


Exclusively  sponsored  by: 

ORACLG' 
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ITmikTank 

Instant  messaging  isn't  just  for  idle  chat¬ 
ter.  Chip  Ganassi  Radio’s  Mark  Paxton 
(left)  is  using  IM  on  the  racetrack  to  pro¬ 
vide  a  competitive  edge.  Plus,  worldwide 
hot  spots  for  IT  spending  and  the  most 
overhyped  technologies.  Plige  39 


Smart  companies  arc  enticing 
their  older,  wiser  IT  workers 
to  remain  on  the  job  a  little  bit 
longer.  By  Julia  King 


Norma  veta.  74.  an  it  retiree  from  The  Aerospace 
Corp.  in  El  Segundo,  Calif.,  spends  two  da^  a  week 
helping  her  son's  family  and  maiuging  several  rental 
properties.  The  other  three  days,  she  returns  to  Aero¬ 
space  to  work  on  special  IT  projects.  After  40  years 
with  the  R&D  and  engineering  services  company,  ^ 
knows  the  payroll  and  benefits  systems  almost  as  well 
as  the  faces  of  her  three  grandchildren. 

Nine  months  after  retiring  from  a  28-year  career  as  an  IT  in¬ 
frastructure  specialist  at  Hartford  Technology  Services  Ca  in 
Hartford,  Conn.,  Ken  Klein,  62,  is  taking  sailing  lessons,  spending 
months  at  a  time  traveling  with  his  wife,  exploring  volunteer  op¬ 
portunities  with  Habitat  for  Humanity,  collecting  a  pension  and 
still  workii^  20  hours  a  week  on  IT  projects  at  the  subsidiary  of 
The  Hartford  Financial  Services  Group. 

Welcome  to  the  21st  century’s  version  of  retirement,  an  in¬ 
creasingly  longer  stretch  of  life  that  for  many  IT  professionals  is 
just  as  likely  to  include  new  technology  training  and  mentoring 
assignments  as  tango  lessons  or  road  trips. 

“People  used  to  think  of  retirement  as  a  five-  or  lO-year  period, 
but  now  people  see  they'll  have  as  much  as  30  years  and  are 
looking  at  how  to  spend  those  years  incorporating  some  plement 
of  what  we'd  call  woric."  says  Tamara  Erikson,  a  consultant  at 
The  Concours  Group  in  Kingwood.  Texas,  and  co-author  of  a 
forthcoming  book  on  the  effect  of  demographic  shifts  on  the 
workplace. 

According  to  recent  research  by  the  American  Association  of 
Retired  Persons  in  Washington, 
80%  of  baby  boomers  plan  to 
worit  at  least  part  time  during 
their  retirement  Most  have  no 
desire  to  work  full  rimp,  how¬ 
ever.  They  want  flexible  work¬ 
ing  arrangements,  project-based 
assignments  and  part-time  sta¬ 
tus  that  enables  them  h>  travel, 
volunteer  and  pursue  their 
leisure  interests  while  remain¬ 
ing  ei^aged  in  challenging  work 
with  colleagues. 

Human  resources  profession¬ 
als  say  companies  offering  such 
arrangements  benefit  by  retain- 


OU 

Stop  Wasting  Time 

Consultant  Michael  C. 
Mankins  explains  how 
to  save  time  and  make 
faster,  better  team 
deciskms.  Pm  40 


OPINION 

Accountabiirty  vs.  Blame 

When  managers  say  “accountability." 
they  often  mean  “blame."  says  Paul 
Glen.  Knowing  the  difference  between 
the  two  can  improve  your  perfor¬ 
mance  and  that  of  your  team,  PaQt  44 


At  age  74  Norma  Ueta  stilt  vvorks  three  days  a  week  at  The  Aerospace  Co't 


Stavinj 


ing  skilled  and  knowledgeable  workers 
longer.  This  is  especially  critical  now, 
as  the  population  betw^  the  ages  of 
35  and  44  —  the  prime  executive  devel* 
opment  years  —  is  actually  decUnii^ 
according  to  the  U.S.  Bureau  of  Labor 
Statistics.  Moreover,  the  fastest-grow¬ 
ing  segment  of  the  workforce  is  the 
over-55  set. 

For  IT,  there's  a  double  whammy. 

The  LosAngeks  Times  recently  report¬ 
ed  that  23%  fewer  students  are  en¬ 
rolling  in  computer  science  programs 
that  would  prepare  them  to  cake  over 
key  IT  posicioos.  Meanwhile,  the  U,S. 
Dq^artment  of  Labor  is  forecasting  a 
46%  increase  in  the  number  of  lobs  for 
cooqmter  software  engineers  between 
2002  and  2012. 

Both  trends  coincide  with  the  demo¬ 
graphic  fact  that  over  the  next  15  years, 
one  out  of  four  U,S.  workers  will  hit  his 
60s  and  likely  begin  contemplating  re¬ 
tirement. 

‘Ttedrement  is  goit^  to  have  a  big 
impact  in  terms  of  bow  much  of  the 
workforce  b  avail^le  over  (he  years 
ahead.*  says  Bob  Morison.  research 
director  at  The  Concours  Group. 

What's  more.  'Svhat  walks  our  the 
door  cant  be  replaced  by  a  23-year-old 
coming  in  the  door,"  be  adds.  If  more 
people  decide  to  wmk  longer,  it  would 
have  a  very  signiftcant  [and  positive] 
impact  on  the  workforce  shonage.” 

Keeping  Key  Talent 

That’s  htqtpening  at  The  Mitre  Corp.. 
which  operates  three  federal  IT  devel¬ 
opment  centers.  Mitre  credits  its  re¬ 
tirement  and  postretirement  programs 
with  helping  to  keep  its  employee 
turnover  rate  at  a  rock-bottom  level  of 
4%.  The  average  age  of  the  company's 
5300  employees  is  46. 

Mitre  has  no  mandatory  retirement 
age.  but  workers  over  55  are  eligible  for 
phased  retirement,  which  allows  them 
to  continue  working  part  time  while 
drawing  on  a  portion  of  their  retire¬ 
ment  benefits.  “It's  an  option  for  peo¬ 
ple  yeho  want  to  stick  tbeir  big  toe  in 
the  retirement  waters  without  taking  a 
big  leap."  says  Bill  AUbrigfat,  director, 
quality  of  worklife  and  benefits. 

Un^  a  Mitre  program  called  Re¬ 
serves  at  the  Rea^.  workers  who  have 
retired  can  return  on  a  part-time,  con¬ 
tractual  basts,  choosing  their  own 
hours  and  (majects. 

Chuck  Sanders,  73,  ofiidally  retired 
from  his  role  as  director  of  incemation- 
ai  tntegratkm  programs  in  200L  but  be 
coocinoes  to  work  LOGO  hours  per  year 
in  the  same  role.  ‘^Challenging  woric  is 
why  rm  here,”  says  Sanders,  who  has 
worked  at  Mitre  since  1958.  ‘It’s  a  com¬ 


bination  of  interesting  work  and  flexi¬ 
ble  hours,  which  provides  opportuni¬ 
ties  ft>r  other  things.* 


Both  programs  also  help  keep  criti¬ 
cal  knowledge  in  house  and  better 
orchestrate  the  transfer  of  that  knowl¬ 
edge  to  younger  workers. 

Monsanto  Co.,  a  S3.4  billion  Sl 
Louis-based  agricultural  products  and 
pharmaceuticals  company,  offers  a 
similar  program  called  the  Resource 
Re-entry  Centec  Developed  in  1991,  it 
lets  employees  who  leave  the  company 
in  good  standing  return  and  work  pan 
time  and  on  temporary  assignments 
in  IT  and  other  Irey  areas. 

These  individuab  know  our  culture 
and  our  language  and  can  begin  work 
with  a  minimum  of  on-boarding  from 
us,"  says  Deb  Rogers,  director  of  exter¬ 
nal  relations,  who  is  in  charge  of  the 
program.  About  300  former  Monsanto 
employees  are  signed  up  for  the  pro¬ 


gram,  with  ITS  on  active  assignments 
in  12  company  locations. 

The  Aerospace  Corp.  offers  a  “try- 
on*  retirement  option,  allowing  older 
woricers  to  take  a  leave  of  absence  to 
help  them  decide  whether  they  really 
want  to  retire.  The  company  also  has  a 
Retiree  Casual  program  that  enables 
retirees  to  return  to  work  part  time. 
The  program  has  about  500  partici- 
pants.  including  one  90-year-old.  with 
between  200  and  250  actively  working, 
says  Charlotte  Lazar-Motrison.  princi¬ 
pal  director  of  human  resources. 

Few  and  (^Between 

Device  these  pioneering  examples, 
nehber  the  indisputable  demographic 
evidence  of  a  shrinking  workforce  nor 
Che  obvious  advantages  of  retaining 
mature  workers  has  convinced  more 
than  a  small  minority  of  companies 
to  actively  woric  to  retain  their  older, 
wiser  talent. 

“A  large  proportion  of  baby  boomers 
envision  themselves  workii^  well  into 
their  70s.  but  on  the  whole,  companies 
are  not  prepared  {to  accommodate 
them].”  says  Deborah  Russell,  manager 
of  economic  security  and  work  at 
AARP. 

The  top  three  things  on  companies' 
to-do  lists  should  be  to  assess  their 
own  worker  demc^rapfaics  and  map 
out  their  retirement  treads,  then  figure 
out  what  incentives  theytl  offer  people 
to  get  them  to  stay  and  how  they  plan 
to  transfer  knowledge  from  these  ex¬ 
perienced  workers  to  new  workers,"  I 
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AFTCR  STUDVWe  THE  ISSUE  for  a  hi 
researchers  at  The  Concon  Gro^ 
canislothealanTwigbulirrefuiabiecorh 
ciusion  that  USi  corripatms  are  on  a  colli¬ 
sion  course  their  demographic  destiny 
Asmorebabyboomersapproachreiire- 
rnent  age.  contpanies  are  facing  a  stKytfall 
of  at  least  10  rniion  workers  by  2010.  Sti. 
few  erivioyers  are  workng  to  recrut  and/ 
or  r«ain  older  talent. 

The  reasort?  TCs  the  old  boiling  frog 
diemma.  where  there's  a  dangerous  ac¬ 
ceptance  d  skMrmoMng  trends.’ says 
Conoours  research  director  Bob  Uortson. 
afodmg  to  (he  wel-known  experlmeni  in 
which  frogs  subteded  to  stowty  hcreaang 
water  temperature  Med  to  notice  the 
chwige  in  tine  to  save  themsehes. 

DemographiB  move  at  the  ^leed  of 
He.  so  the  probtems  accumutate  iowtr.* 


I  he  says.  "There's  no  cfisB  yet  and  crises 
I  are  what  govern  the  ecortomics  at  a  lot  ol 
I  companies  '' 

Concours'  goal.  Morison  says,  is  to 
■"sound  the  alarm  without  being  atanoBL' 
Speciiicatly.  he  says  companies  need  to 
address  the  foNowmo  seven  challenges  if 
they  are  to  fTwiirazB  the  negative  mpad  of 
a  graying  worWorce: 

1.  ftoaurtng  young  workers. 

2.  Keeping  midcareer  workers  engaged. 

3.  Transcendng  age  bias  to  leverage  the 
expertise  of  older  workerx^ 

4.  Bribraciig  flexible  work  arrangements. 

5.  Identtfyirg  and  tiling  skis  gaps  and 
mastering  training  chalenges. 

6.  Abgning  compensation  «id  benefits. 

7.  Anticip^dermigrBphicaily  driven 
labor  shortages. 


Russell  says. 

And  they  should  do  those  things 
immediately,  says  Beverly  Kaye,  co¬ 
author  of  Love  'Em  or  Lose  ’Em:  Getting 
Good  People  7b  Stay  (Bennet-Koehler. 
1999).  "When  a  company  has  a  bad 
quarter  or  decides  to  reorganize  — - 
when  the  sands  shift  —  anyone  think¬ 
ing  about  leaving  will  leave,*  Kaye 
says.  That’s  why  this  kind  of  inter¬ 
vention  has  to  be  on  the  radar  screen 
now." 

Specifically.  Kaye  recommends  that 
companies  their  focus  from  tradi¬ 
tional  exit  interviews  to  "stay  inter¬ 
views."  Ask  the  workers  you  want  to 
keep  what  they  would  require  to  stay  a 
little  longer,  she  recommends. 

Companies  also  may  need  to  refocus 
their  befits  programs  to  entice  more 
older  workers  to  remain,  says  Valerie 
I^aganeili,  senior  retirement  consultant 
at  Watson  Wyatt  Worldwide,  a  human 
resources  and  risk  management  con¬ 
sulting  firm  in  V^^shington. 

And  employees  should  speak  up. 
Don't  watt  to  announce  your  plans  to 
retire  until  a  month  or  two  before  a 
chosen  date.  If  you  would  like  to  have 
a  more  flexible  working  arrangement, 
make  it  known  to  your  manager.  Kaye 
suggests. 

At  The  Hartford,  where  25%  of  the 
company’s  30.000-person  workforce 
will  be  retired  or  eligible  for  retire¬ 
ment  within  the  next  six  years,  all 
woricers  are  encouraged  to  present 
[  flexible  working  arran^ments  to  man¬ 
agement.  The  company's  Web  site  ad¬ 
vises  workers  about  how  to  develop 
and  submit  proposals  and  advises 
managers  about  how  to  evaluate  and 
approve  workers'  plans.  Currently.  12% 
to  16%  of  the  company’s  entire  work¬ 
force  is  on  some  kind  of  flexible  work¬ 
ing  arrangemenc. 

“We’ve  found  that  situations  are 
very  individual.*  says  John  Madtgan, 
vice  president  of  corporate  staffing 
and  education.  “Someone  might  want 
to  phase  in  retirement;  another  wants 
to  telecommute  or  work  part  time." 

The  bottom  line:  “When  we  lose 
talent  in  the  agii%  IT  person,  we  lose 
wisdom,"  says  Kaye.  “We  lose  tacit 
knowledge,  not  just  explicit  knowl¬ 
edge,  and  we're  letting  that  go  all  too 
easily.  We  need  to  be  asking  workers 
what  it  would  take  to  have  them  stay 
and  then  offering  them  intriguing 
ways  to  do  that.”  O  48720 
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Data  Center  Management  Success 
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Visit  the  DEtTF  Tochwology  SltowcAsa! 
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No  Respect 

The  loHowng  companies  were  at  the  bottom 
ol  the  list  of  too  U.S  companies  ranked  by 
how  well  they  treat  their  online  customers 
The  index  covers  factors  such  as  Web  site 
usability,  privacy  and  responsrveness 
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SOURCE:  The  Cuslomer  Resoecl  Group  hie 
Betevue.Wash  June  2004 


The  IT  Economy 

■  The  tech  recovery  seems  to  be  sput- 
tenng,  as  analysts  fhm  their  IT  spend¬ 
ing  forecasts  and  IT  vendors  such  as 
Cisco  Systems  Inc.  make  cautious 
statements  about  the  third  quarter.  ‘IT 
spending  will  likely  grow  slowly  in  the 
third  quarter,  followed  by  seasonal 
strength  in  the  fourth  quarter,"  says  a 
bulletin  by  The  Goldman  Sachs  Group 
Inc.  in  New  York.  One  bright  spot  con¬ 
tinues  lo  be  spending  on  IT  security. 
But  customers  want  IT  products  in 
which  security  is  embedded  -  not  an 
endless  stream  of  add-on  products. 
Goldman  Sachs  analysts  said. 


Chat  Provides 
Competitive  Edge 


the  crews  to  coordinate  the  v 

timing  of  pit  stops,  exchange 
engine-tuning  strategies. 
estimate  fuel  mileage  and 
share  the  drivers'  radioed 
comments.  For  example,  a 
pit  crew  may  adjust  the  tire 
pressure  and  then  get  driver  »* 
feedback  on  whether  it's 
helping.  "It's  better  than  ra- 
dio.  because  it's  difficult  to 
find  a  radio  channel.  ' says 
Marh  Paxton,  an  R&D  engi- 
neer  for  Chip  Ganassi.  Plus. 
ladio  Chatteris  hard  to  hear 
through  the  background 
noise  of  the  racetrack,  and  IM  eliminates 
the  need  for  runners  to  relay  messages 
to  other  pit  locations 
Why  aren  l  other  racing  teams  using 
IM  at  the  track^  Carbone  and  Paxton  say 


We  tend  to  thmn  of  instant  messaging  as 
the  not-wery-imporiant  electronic  chat¬ 
ter  of  teenagers  and  white-collar  work¬ 
ers  But  an  innovative  auto-racing  team 
is  proving  that  chat  can  be  a  powerful 
rooi  jutsidgthc  office. 

The  NASCAR  and  Indy  Racing  League 
teams  jl  Ch-p  Ganassi  Racing  use  IM 
to  .icn.evi-  lastr;.'  ana  mote  productive 
Mt  ilou,-  7h*r  teams  pitcn-wsuse 
.abi»;t  P^  .-I''  •Mcryp*eo  wireless  LAN 
j  ’C  M  C-i'O 's  L'.e  Communica¬ 
tions  Sef-.'®:  ?C03  to  exchar'ge  hand- 
Aftren  nctei  IT  manager  Michael 
Carbone 

Prttsti'v  ur  aast-d  Chip  Ganass’  Racing 
may  have  mror  t.vs  -i  a  ' jce  IM  allows 


Hot  Spots: 


The  percentage  of  IT  executives  world¬ 
wide  who  expect  their  companies'  IT 
spending  to  increase  in  the  next  six 
months,  by  region: 


they're  aren’t  sure,  but  maybe  the  other 
teams  aren't  willing  to  make  the  upfront 
IT  investment  or  lack  the  culture  of  inno¬ 
vation  O  48980 

-  Mitch  Betts 


Asia-Paciti(. 


Europe 


>’u'  Cj’"  ■  'Trcn'raismi-si 
agemcnl  boii«-. 

S'  '.plrB»tle'  W'-yrungand 

Hfep'ng  Customers  by 
Dri'tt-r.nq  Whdt  M,it 
tei:  Mas: 


Overhyped 

Which  of  the  following  technologies 
has  promised  the  most  and  delivered 
the  least  for  your  company? 


Wireless  LANs 


Remote  access 


IP  telephony  Lfflo 


Storage 


Sysco  Corp. 

Pfizer  Inc. 
Weyerhaeuser  Co, 
Johnson  Controls  Inc, 
Supervalu  Inc. 


ConHMtftive  Edge 


■ii  Till 


■“21 

"232111 

M.r-  P.jJ'i:'.  ,  ,.  -,  ,r  •.ifl-:  PC 
diifl  mst.idl  messdynwj  at  Ihf  racelMix 
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Best  Bits 

Tk>  mM  umM  pvis  a<  raanl  hiiinMi 


TWBOOK^^OMkr 

Krnpkiiamonmahi 

I  simnlul  ®**"*'» 

I  I  mltMl  by  Patrick 

!  Better  I  and  Sean 


V  For  the  past  decade, 
gums  have  said  the 
way  to  win  and  keep  customers  is 
to  think  "outside  the  box"  and  offer 
unique  products  that  set  you  apart 
from  the  competitioa  But  the  authors 
of  this  hack-to-basics  book  say  that's 
hogwash;  the  key  is  to  ask  customers 
what  really  matters  and  then  deliver  it 
reliably.  For  example,  customers  at  a 
gas  station  want  to  refuel  at  a  reason- 
able  cost,  get  in  and  out  f^  and  have  a 
dean  bathroom  —  not  necessarily  a 
great  cappucdna 


MiM  «f  i»  imlndt.  and  M 

mtrnrnn  liiii  I  mhii  Hai 
MHiiaMrCiftaMadtadBiiav 


Technology  can  play  a  role  in  deliv-  process  experienced  by  the  customer." 
ering  the  simply  better  service.  UK.  the  authors  conclude.  Amen  to  that, 
grocery  chain  Tesco  PLC  has  succeed-  —Mitch  Betts 

ed  in  the  online  grocery  business - - 

(where  Webvan  failed)  by  focusing  on  GOT  ANY  BRIGHT  IDEAS?  Send  them  to 
how  to  make  it  easier  for  Lynne  PuUam  pUches@c(miputerworULcom. 

—  a  busy  mother  of  three  who  was  _ 

Tesco’s  no-nonsense  Internet  consul¬ 
tant  —  to  shop  for  groceries.  Now 
Tesco.com  accounts  for  about  10%  of 
all  online  retail  commerce  in  the  UJL 
Cemex  SA.  a  huge  cement  company 
in  Mexico,  also  listened  to  hs  cus¬ 
tomers.  The  foreman  at  a  constmction 
site  needs  to  know  when  the  cement 
tmck  will  arrive.  Normally,  cement 
ordered  one  day  will  be  delivered  the 
next  day  within  three  hours  of  the 
scheduled  time.  But  Omex  guarantees 
same-day  delivery  vrithin  20  minnfes  of 
the  scheduled  time  in  designated  areas, 
regardless  of  weather  conditions  and 
traffic  jams.  How?  C^mez  uses  a  satel¬ 
lite-  and  Web-based  tmck-dispatcb  sys¬ 
tem  to  speed  and  mcmitor  deliveries. 

"The  lesson  from  Omex  is  to  think 
throu^  the  vriiole  purchase  and 


China 


INDUSTRY  AVERAGE  6.2 


Got  Questions  About 
Network  Consolidation? 

Computerworid’s  IT  Executive  Summit  Has  the  Answers 


If  you’re  an  IT  executive*  in  an  end'user 
organization,  apply  to  attend  Computerworld's 
upcoming  complimentary  half-day  summit 
on  Network  Consolidation. 

CIOs  and  senior  IT  executives  are  finding  ‘ 
that  consolidating  high-performance  networte 
can  play  a  l«y  role  in  improving  business 
application  performance  while  significantly 
reducing  operational  costs. 

The  proliferation  of  network  capacity  and 
related  storage  and  server  infrastructure 
presents  a  daunting  challenge  for  today’s 
enterprises,  many  of  which  are  positioning 
themselves  for  growth  yet  still  seeking  to 
reduce  IT  costs  Mhere  feasible. 

By  leveraging  the  knowledge  of  industry 
experts  arwl  the  real-world  experiertce  arxj 
advice  of  your  IT  peers,  tfiis  IT  Executive 
Summit  will  provide  an  overview  of  effective 
strategies  for  cor^lidating  and  connecting 
networks  and  data  center  applications. 

•Complimentary  registration  is  restricted  to 
qualified  IT  executives  only. 

Apply  for  registration  today 

For  more  information  or  to  apply,  visit 
www.itexecutivesummit.com/nc 


Streamlining  Networks  and  Data  Centers: 

The  Business  Benefits  of  Consolidation 
Dallas  •  September  22,  2d04 

Renaissance  Dallas  •  2222  Stemmons  Freeway  •  Grand  Ballroom 


730am  to  8:00am 
8:00am  to8;15am 

8:15am  to  8  45am 


8:45am  to  9:15am 

9 15am  to  9  45am 

9:45am  to  10;15am 
10:15am  to  10:45am 
10:45am  to  11:15am 

11 15am  to  Noon 


Noon 


Registratron  and  Networking  Breakfast 

Rebiilding  the  FT  Fourxlation 

Don  Tenrtant.  &Jitor  *n  Cfwef.  Computervwxld 

Consolidation  and  the  Data  Center: 

Boosting  Busirtess  P^ormance 
and  Application  Availability 

Richard  Villars,  Vice  FVesident.  Storage  Svsterrs 
Research,  IDC 

User  Case  Study  —  Hilton  Hotels: 

Corisidering  the  Next  Ger>eration  Network 

Damief>  Bean.  Vice  President,  Corporate  Systems, 

Hilton  Hotels 

User  Case  Study  -  MasterCard  International 

Jerry  McElhatton.  Senior  Executive  Vice  PresKJeot, 

Global  Technology  and  Operations.  MasterCard  International 

Refreshment  and  Networking  Break 

Perspectives  from  an  End  User 

Customer  Challenges  and  Solutions: 
Real-Life  Scenarios  Conriecting  Data 
Centers  Over  Distance 

Steve  Adolph.  CTO.  Enterpnse  Solutions  Group.  CIENA 

Panel:  Overcoming  Management  Barriers  — 
Making  the  Case  for  Consolidation 

Panel  Moderator,  Don  Tennant.  Editor  m  Chief. 
Computefwortd 

Panelists  Damien  Bean.  Vice  Presidem,  Corporate  Systems, 
Hilton  Hotels:  Frank  Enfanio,  Vice  FVesident,  Operations 
Delrvery  &  Information  Security.  Blue  Cross  Blue  Shield  of 
Massachusetts,  Steve  Goldman.  Drecior,  Network 
Architecture.  Chicago  Mercantile  Exchange,  Ron  Kifer, 

Vice  f^esident.  FYogram  Management,  DHL  Express, 

Jerry  McElhatton.  S^ior  Executive  Vce  President. 

Global  Technology  and  Operations,  MasterCard  International 

Program  Concludes 


Exclusively  sponsored  by: 


Selected 

speakers 

irtclude: 


Don  Timant 
EdUormOtitf: 


/erry  Mc£lhafron 
Senior  Enntfive 
Vice  Ihttidem. 
GbAal  Ttdmotagy 
and  Opewrtoiu. 
MosOffCard 


Oomien  Been 
We  Prcsidm. 
Corporotr  Syaemy 
HUioKHotA 


Steve  AMph 
CTOl  Enleipru* 
Sotutions  Group. 
CIENA 
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WePreRdenr 
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CIENA 
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iTTie  tyj»cal  con^tany’s 
senior  executives  spend 
less  rhan  three  hours  a 
month  working  fo^her 
on  issu«3,  and 

those  hours  are  seldom 
weD  speru,  says  Mkihaai 
C.  Mwiuiis  in  September’s 
Harvard  Business  Re* 
view.  ManJuns,  a  San 
Frandsco*based  manag¬ 
ing  partner  at  consulting  fan  Marakon 
Associates,  told  Compurerworld's  Kath¬ 
leen  Mefymuha  wAor's  wrong  wirh  ream 
dedsion-mafa'ng  and  how  to  fix  it. 

ODtetMMquMyauadvantoforaeGtt- 
cennMMS  apply  avirihr  to  a  C»  and 
Mamamgamanttpafii? Yes.  The  best 
practice  is  for  a  company  to  have  agen¬ 
das  at  all  levels,  not  just  for  executive 
teams.  But  the  idea  is  to  be  aligned 
around  making  decisions  that  arc 
somehow  linked  to  the  long-term  value 
of  the  company.  The  CIO  has  a  lot  of 
decisions  that  impact  the  long-term 
value  of  the  company  directly,  like  “Do 
we  outsource  IT?"  (andl  "Which  ERP 
system  do  wc  implement?"  Those  are 
decisions  that  have  enormous  impact 
on  company  value  directly. 

fust  as  important,  eflmive  agenda 
management  depends  on  having  high- 
quality  information  in  executive  hands, 
and  the  CIO  has  to  get  engaged  in  that 
process,  so  it’s  a  dual  role. 

Why  do  mmgarnoRl  taans  spend  so  ittte 
hmo  on  stmlogic  ipMM?  The  good  rea¬ 
sons  are  that  executives  arc  obsessed 
with  operating  performance  and  spend 
a  huge  amount  of  time  —  roughly  half 
—  reviewing  operating  performance. 

Add  leadership  succession  and  em¬ 
ployee  issues,  and  it  leaves  little  time 
for  strategy.  It’s  not  an  excuse,  but  it's  a 
reason.  The  not-so-good  reason  is  poor 
agenda-setting.  You  get  a  review  of  op- 
eratioaa]  performance  scheduled  for 
the  first  half  [of  the  meeting],  and  it 
takes  up  three  quarters,  and  there  are 
four  more  items  to  get  done.  The  result 
is  that  strata  tends  to  be  one  of  those 
that  gets  squeezed  out 


STOP 

Wgtirg 

Time 


How  IT  management  teams  can 
make  better,  faster  decisions. 


How  do  manapamsnl  tsams  land  to  sal  apan- 

das?  Often,  there  is  no  individual  re¬ 
sponsible  for  setting  agendas,  so  a 
secretary  or  administrative  assbtant 
does  it.  As  a  result,  meetings  tend  to 
be  poorly  focused  and  misprioritized. 
There  are  three  main  ways  agendas 
gel  set  [The  first  one  is]  “first  ia  first 
on,"  where  the  crises  of  the  moment 
are  f^oed  in  just  before  the  meeting 
and  they  go  on  the  agenda.  Second  is 
historical  precedenL  Agendas  at  some 


very  large  companies  are  preset  based 
on  what  was  covered  last  year  at  that 
time;  May  is  HR.  June  is  the  advertis- 
it^  campaign.  Third,  and  probably 
a  growing  trend,  is  egalitarianism. 
Everyone  gets  time  to  speak. 

What’s  wrong  with  that?  The  result  of  all 
this  is  that  it  would  be  a  coincidence  if 
the  most  important  issues  got  the  n>ost 
time,  and  so  the  effectiveness  and  effi¬ 
ciency  of  decision-making  tends  to  go 
down.  Invariably,  the  urgent  crowds 
out  the  important.  Trivial  issues  on  top 
of  mind  tend  to  dominate.  We  found  a 
bank  where  the  executives  spent  more 
time  on  the  holiday  card  than  their  en¬ 
tire  strategy  for  Africa,  where  they  had 
made  large  investments.  Loud  voices 
tend  to  dominate  decision-making. 
There’s  no  process  for  getting  the  top 
issues  on  the  agenda  and  for  making 
decisions  when  they  do  get  on. 

Why  do  managerwot  mee^inya  fai  to  pro- 
duoa  rui  dwWons?  To  make  a  deebion, 
you  have  to  have  all  the  facts,  you  need 
real  alternatives,  you  need  to  ^  asked 
to  make  a  choice,  and  the  choice  needs 
to  be  embedded  in  some  form  of  con¬ 
tract.  Absent  that,  you  fail  to  produce 
important  deebions. 

Vu  racommmd  sppanling  opMitioml 
ciMiafw  from  sMiey  iriMliaBi.  Why? 

They  require  different  mind-sets.  Op¬ 
erating  reviews  are  all  about  "Did  you 
deliver  what  you  prombed?"  They’re 


looking  in  a  rearview  mirror.  Strategy 
b  about  creativity,  a  search  for  altema- 
trves.  a  dialogue  around  what’s  possi¬ 
ble.  It’s  about  rabing  eyes  to  the  hori¬ 
zon.  not  holdii^  noses  to  the  grind¬ 
stone.  It's  hard  to  have  both  mind-sets 
at  the  same  time. 

Voutalkaboiittfwneedtofeeusondscbion- 
making,  not  on  dscusslon.  but  how  doss  a 
managomoni  laam  actuaiy  do  that?  First, 
you  set  the  stage  for  what  the  meeting 
b  ail  about  You  make  It  clear  which 
items  on  the  agenda  arc  actually  for  a 
decision.  When  you  do  that,  people 
find  creative  ways  to  share  information 


outside  the  meeting,  so  more  time  is 
focused  on  deebion-making  and  ac- 
tioa  Then  you  set  common  standards 


for  decision-making:  If  you  want  to 
make  a  deebion,  you  have  to  have  facts 
around  why  an  issue  b  on  the  agenda, 
alternatives  that  are  wei^ted  as  to 
which  will  deliver  the  most  value  and 
why.  and  how  to  execute.  If  you  don’t 
have  that,  you  can't  make  a  decision. 

How  do  you  eomt  up  with  good  altsmattves? 

The  issue  needs  to  be  stated  in  a  way 
that  doesn’t  prescribe  a  course  of  ac¬ 
tion  but  instead  lends  itself  to  alterna¬ 
tives.  For  IT  execs,  “How  do  we  pro¬ 
duce  the  higfaest-quality  information  at 
the  lowest  cost  for  UnU  X?"  That  lends 
itself  to  alternatives.  But,  "Should  we 
outsource  IT?"  does  not.  That’s  a  bi- 
modal  deebion:  yes/no.  In  business, 
those  questions  get  answered  with,  “It 
depends."  But  questions  that  lend 
themselves  to  alternatives  lend  them¬ 
selves  to  choices.  Frame  issues  so  that 
they  have  to  be  resolved  by  looking  at 
alternatives.  You  also  need  good  infor¬ 
mation.  Good  facts  lend  themselves  to 
the  development  of  good  alternatives. 
And  you  need  the  right  sute  of  mind 
—  that  there’s  always  a  better  alterna¬ 
tive.  Never  say.  “We've  found  the  right 
strategy."  There’s  always  a  better  one: 
you  just  haven’t  thought  of  it  yet. 


What  b  a  common  dadslon  langume.  and 
how  anportant  ii  It?  A  lot  of  processes 
get  bogged  down  because  they  don’t 
know  what  the  choice  b  based  on:  It 
might  hurt  our  image;  we  won’t  be  per¬ 
ceived  as  a  technology  leader.  Those 
are  interesting,  but  none  b  a  choice 
erfterioa  Unless  everyone  has  the 
same  choice  criteria  in  mind,  it’s  really 
hard  to  get  focused  to  produce  the 
right  information  to  help  deebions  get 
made.  If  you  say  all  choices  will  be 
made  based  on  their  impaa  on  the 
long-term  value  of  the  company,  that’s 
the  ultimate  choice  criterion. 

Why  b  N  oflan  hml  to  mate  a  dedrion  sUck? 

Many  companies  don’t  actually  approve 
strategies,  so  the  organization  do^’t 
know  that  a  decisiem  has  been  made.  Or 
it’s  made,  but  at  so  abstract  a  level  that 
you  can't  do  anything  about  U.  Or  you 
don’t  know  who’s  accountable  for  doing 
what,  so  execution  gets  delayed.  Or 
there’s  no  consequence  to  not  execut¬ 
ing.  You  can  attack  all  four  causes:  Im¬ 
prove  your  strategies,  make  them  con¬ 
crete,  assign  accountabilities  clearly, 
embed  them  in  performance  contracts 
with  individuals,  and  ensure  conse¬ 
quences  for  failure  to  execute.  O  48S65 
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Executive 

Ouabok 

What  is  your  outlook  in  general 
for  the  executive  search  business 
over  the  next  six  months? 


tn  which  sectors  do  you  expect 
to  see  the  most  growth  in  the  next 
sir  months? 

BMMn^HnMcWMrviow  49% 
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S  edmetogetanintemshipprogramgono- 
Now  we  have  12  to  24  internstMps  each  sum¬ 
mer,  h  gives  interns  a  chance  to  try  out  the 
I  workplace  and  buiU  thee  rteumte.  For  16.^ 

;  a  chartce  to  look  at  these  people -to  see  if 
there's  a  fit.  When  we  do  hire  someone  ofl  an 
internship,  it  tends  to  be  a  strong  match  be¬ 
cause  we  [both]  know  what  M«'re  getting. 

Whet  are  the  MhiMtaoos  of  Nrino  entrr 

loeol  rr  e«r1m  and  TOwinB  talent  from 

wAMr?  One  of  die  pluses  of  entry-level  hir¬ 
ing  is  that  a’s  a  sbong  mothelor  to  people. 
They  know  that  if  dwy  work  han).  theylbe 
^  rewwded  based  on  dWperlonnance  and 
I  theylg^  the  first  shot  at  new  opportunities. 
Thu  also  grow  more  of  a  culture  within  the 
organization.  Since  you  grow  ntemaly.  you 
I  create  a  certain  culture  and  phiosophy. 

Any  dmvmidai?  One  of  the  risks  of  entry- 
lev^  hiring  is  lack  of  exposure  to  other  envi¬ 
ronments.  Without  this  exposure,  there  may 
not  be  enough  questioriing  and  chalenging  of 
dwst^quo.Wernitigatethisriskbyprovid- 
ing  exposure  to  user  groups  and  profesional 
organizabonsandthroughconferencepartio- 
pation.  We  feel  this  balances  the  downside  ot 
experierK»j  hiina  w4iere  assoctales  feel  they 


Hewhasyourmwikicioevltyidthecorit- 

panyMhianeedrTreGndlinantandrv- 

tantfonpoicles?rniabigproponentofin* 
temships.  It  was  as  a  result  of  my  own  intern¬ 
ship  that  I  decided  to  pursue  a  career  in  IS.  I 
was  a  math  major,  and  1  remember  being 
asked  what  I  was  going  to  do.  I  always  said 
*No  way'  when  computers  came  up.  Then  I 
camehereandwastfiintemtorasurnmer.lt 
was  such  a  positive  expenence  for  me.  tfid 
then  they  offered  mea  position.  That  motivat- 


byowopinlon.howimpartantiB}obsta- 
bMy  to  ovary  rr  amployw  nwralt  than 

d«ys?lnthepBsLjobstafaiitywasni:Nditfan- 
porlant  because  people  knew  they  could  gel  10 
other  IT  jobs  if  they  wanted  to.  Blit  since  Sept, 
n.  stability  has  moved  up  in  temis  of  what's 
importtfd  to  tnorala  tolowed  by  dw  opportunl 
ty  to  be  chalenged  tfxf  to  grow.  wfKh  ncludes 
baming.  F^ople  sti  went  the  opportinty  to 
grow  in  their  lobs.  the  opportunity  to  be  chal¬ 
lenged  and  to  advance.  O  AMN) 
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Delariey  Nelson 
joined  her  current  employer  more 
than  25  years  ago.  as  a  college 
mtern.  Over  the  past  two-plus 
decades,  she  has  filled  a  variety  of 
posts  rn  application  development, 
project  management  and  design, 
and  coordination  of  IT  training.  She 
was  named  CIO  in  2000.  She  gave 
CompulerworkT s  Julia  King  her 
perspective  on  the  advantages  ol 
hiring  entry-level  IT  professionals 
and  promoting  from  within  -  one  of 
the  hallmarks  of  IT  staffing  at  Min¬ 
nesota  Life,  where  the  IT  employee 
turnover  rate  this  year  is  4.7®o 


Neutral. 


Positive: 

74% 


ed  me  to  get  an  internship  prograrn  goirig 
Now  we  have  12  to  24  miemshiDS  each  sum¬ 
mer  It  gives  interns  a  chance  to  try  out  the 
workplace  and  build  then  tesumes.  For  us  it  's 
a  chance  fo  look  at  these  people  -  to  see  d 
there  s  a  fil  When  we  do  hire  someone  oh  ar 
internship.  il  lends  to  be  a  «rong  match  be¬ 
cause  we  [both]  know  what  we  re  getting 


What  are  ^  advantages  of  hiring  entry- 
level  IT  worhers  and  growing  talent  frocn 
within?  Ofie  of  Ihe  pluses  of  entry-ievei  hir¬ 
ing  IS  that  ifs  a  strong  motivalof  to  people 
They  know  that  if  they  work  hard.  Iheyl  be 
rewarded  based  on  fheir  oertormance  and 
they'll  get  the  first  shot  at  new  owxwtunities 
You  atso  grow  more  of  a  culture  wrthm  the 
organcation  Since  you  grow  miemally  you 
create  a  certain  culture  and  philosophy 


4«y  downsides?  One  of  the  nsks  of  entry- 
level  hiring  s  lack  of  exposure  to  other  envi- 
fonmenfs  Without  this  exposure,  there  rnay 
iK)l  be  enough  questioning  and  challenging  of 
Ihestatusguo  Wemtigatethisnskbyprovflj- 
mg  exposure  to  user  groups  and  professional 
organizations  and  through  conference  partei 
gallon  We  feel  this  balances  the  downside  oi 
experienced  hnmg.  where  assoaaies  lee!  they 
have  to  leave  the  organization  to  gel  ahead 


How  has  your  owm  iongevtty  al  the  com¬ 
pany  influenced  IT  recruitment  and  re¬ 
tention  policies?  I'm  a  big  o'oooneni  of  m- 
lemships.  II  was  as  a  resull  of  my  own  intern  - 
ship  that  I  decided  to  pursue  a  career  m  fS  i 
was  a  rnaih  major,  and  I  remember  being 
asked  what  I  was  going  to  do  I  always  said 
"No  way-  when  computers  came  up  Then  I 
came  here  and  was  an  mtern  fpt  a  summei  It 
was  such  a  positive  experience  for  nte,  and 
then  they  offered  me  a  position  Thaimoirvat- 


In  your  opinion,  how  important  is  job  sta- 
bitfty  to  overall  IT  employee  morale  these 
days?  In  the  past,  iob  stability  was  riot  thai  im- 
poflanf  because  people  krtewlhey  coutdgef  10 
other  IT  ©bs  if  they  wanted  to  But  since  Sepc 
H  st^ility  has  moved  uo  <n  terms  of  what's 
important  to  morale  followed  by  the  ooporiun* 
ty  to  be  challenged  and  10  grow  wt^n  ircuies 
Iraininq  People  sti  want  theoopodunev  to 
grow  in  Jhar  jobs,  the  •wohunty  to  be  chai- 
lenged  and  to  advance  O  48890 
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In  which  .sivfors  Jii  you  expect 
tn  .stv  the  rnosr^'rfm'fh  in  the  next 
six  months? 

Banking/financial  services  49% 

Manufacturfng  38% 

Pharmaceuticals/biotech  38% 

Consumer  products  3t% 

Health  care  28% 


W/iuf  is  your  outlook  in  ^’cntTaf 
for  f/n*  t’Xfcuf ivi’  search  business 
over  rhe  next  six  months.' 


FR0M,^CAMP 
TO  CORPORATE  HQ 
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loge  vadueftM  who  an  freeh  from  an 


Professional  services 
(law,  HR,  consufting.  etc.) 
Tefocommunications 
Retail 

MarhelinB/advertisinB/ 

communicathms 

(kvemment 

Education 

Transportation 

Medta/antertainmenl 

Hotoh/tourisin 


Negative:  1% 


Base  (toi  boin  chats)  162  global  eiecutive 
search  consultants 
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Chicago  Pubic 
Schools  Pick  Qber 

■  Cte  he.  hM  won  ■  eM*ac( 
irtk  Aa  CMcki  AMc  Sdwk  to 
«Mn*to  toa  adnhtoMkn  ol 
•pacW  tdaaallan  aankaa. /to  put 
oitoapntKtftaeraaaatoaillK- 
hoa.Coto.-baaadi|atonatatopa- 
kr  a«  tatotoaiaal  laanttog 
totomalnal  lac.'a  eatoWan,  a 
na«kfUto.1M*4aaidintoni>a- 

ton  iitotoia  toto  a«  la  and  tor 

touriMto.  toatoir  aiaatoan,  caaa 


Booz  Ahn  Expands 
Gebonics  Deal 


a  ea/nnica  NkIi /Inaftoa  la 
■Btoka,  Itoaa.  aid  Baai /ton 
HantotoahCLiniaaicadadaaa- 
na.  SiS  nMea  aankad  laida 
adMSalaidcaiatoafaiddsra- 

ndatopailidditoiKptocInab- 
gtoaiaadtoiBm/tonaiiidar 
aaa.Tlaeanlnclaipandiapra«i- 
na  artanaal  and  la  aapactod  to 
saaa  Baaa /ton  am  ton  2Stoi  In 
^  anaart  oaato  awr  torn  ynaa. 


Qwest  Signs  With 
KrispyKreme 

nthnatCananuntoaianatalBnia' 
tiaaa/ toe.  to  Danaa  anannoad  a 
towaanaitotnaalaWiKitoito 
Kiina  Ontonda  toe.  to  datoar 
dato  and  natoa  aandeaa,  tadndtag 
erMa  lauHd  nalmil  and  nal- 
wiil  lannaiaaad  aa  aln  and 
tongilainra  wlaaaiton, 


Reid  Museum 
'Does  Wireless 
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PAUL  GLEN 


Accountability 
Vs.  Blame 


I’VE  DISCOVERED  THAT  most  of  the  time,  when 
executives  tell  me  that  “what  we  need  around 
here  is  more  accountability,”  what  they  really 
mean  is,  “I  need  to  know  who  I  should  blame 
when  things  go  wrong.” 

The  sentence  that  usually  follows  implies  that  with¬ 
out  accountability,  no  one  will  do  what  it  takes  to  meet 
deadlines,  deliver  quality  products  or  succeed  in  gen¬ 
eral  Just  below  the  surface,  the  assmnption  behind  this 


thinking  is  that  fear  of 
blame  —  or  at  least  fear 
of  the  consequences  asso* 
dated  with  blame  —  is  an 
effective  motivator. 

If  your  goal  as  a  manager 
is  to  enforce  compliance 
with  well-artioilated  poli¬ 
cy  and  adherence  to  estab¬ 
lished  procedures,  this  may 
be  a  reasonable  way  to 
think.  But  for  most  of  us  in 
IT.  our  goal  is  to  help  our 
staffs  apply  their  knowl¬ 
edge  and  creativity  to  the 
broad  array  of  problems 
presented  to  them. 

Fear  isn’t  a  particulariy 
potent  motivator  when  it 
comes  to  inducing  creativi¬ 
ty.  If  it  were,  editors  would  simply 
threaten  to  lock  novelists  in  gulags 
until  they  produced  Pulitzer  Prize- 
winning  prose. 

As  a  manager,  you  must  understand 
the  difference  between  accountability 
and  blame. 

One  morning  back  when  I  was 
managing  a  group  of  consultants.  I 
received  a  call  from  Jim,  a  very  consd- 
entkms  senior  programmer.  Just  from 
the  way  be  said  hello,  I  could  tell  he 
was  in  a  state  of  near  panic.  Tve  got  a 
serious  problem.”  be  told  me.  ‘‘I  acci¬ 
dentally  deleted  the  entire  source- 


code  library  for  the  project 
I'm  woridng  on,  and  it 
Uims  out  that  the  client 
wasn’t  backing  up  the  disk. 
1  never  thought  to  ask. 
What  do  I  do?" 

I  asked  Jim  how  much 
work  be  had  lost,  and  he 
explained  that  he  had  been 
working  on  this  particular 
project  for  about  a  month. 

I  asked,  “Given  that  you’ve 
already  been  working  on 
this,  how  long  do  you  think 
it  will  take  to  re-create  the 
lost  code?"  He  said  he 
thought  it  would  take  a 
week,  and  then  be  asked 
agaia  “What  should  I  do?" 

1  told  him  to  do  two 
things.  “Go  tell  the  client  exactly  what 
happened  and  that  we  will  figure  out 
a  fair  way  to  take  care  of  the  conse¬ 
quences  of  the  problem  Get  to  work 
on  re-creating  the  code." 

Less  than  24  hours  later,  Jim  called, 
sounding  tired  but  relieved,  to  tell  me 
that  he  had  completely  re-created  the 
lost  code.  “Great,"  I  told  him,  “now  go 
do  two  more  things.  Update  the  client 
and  tell  them  that  we  won’t  charge 
them  for  the  lost  day,  and  make  sure 
that  they  start  backing  up  the  code 
library." 

There  was  a  long  pause,  and  finally 


I  Jim  asked  me.  “TTut’s  it?  You’re  not  go¬ 
ing  to  fire  me?"  I  told  him.  “I  don’t  fire 
people  for  making  mistakes.  I  fire 
them  for  making  the  same  mi«ita|f^ 
repeatedly.  Do  you  know  what  mis¬ 
takes  you  made?” 

•Yeah,"  he  said,  somewhat  tentative¬ 
ly.  “I  assumed  that  they  were  backing 
up.  but  I  didn’t  check,  and  1  deleted 
files  without  thinking." 

“Good,"  I  said.  “Now  don’t  mal«» 
those  mistakes  again  Next  time,  make 
better  ones." 

Nothing  more  was  ever  said  about 
the  incident,  and  Jim  remained  a  loyal 
and  productive  employee  for  many 
years. 

I  For  me,  this  event  helped  to  draw 
j  the  distinctions  between  accountabili¬ 
ty  and  blame.  In  my  mind,  account¬ 
ability  is  the  ability  to  discern  and  at¬ 
tribute  individual  and  collective  re¬ 
sults.  Blame  is  about  who  is  going  to 
pay  the  price  for  problems.  If  there’s 
no  clear  accountability  (and  even  if 
there  is),  you  can  blame  anyone  for 
problems.  But  fear  of  being  the  whip¬ 
ping  boy  isn’t  going  to  help  you  build  a 
productive,  learning  organization. 

That  day.  I  learned  that  I  didn’t  need 
to  blame  Jim.  With  clear  accountabili¬ 
ty.  he  learned  what  he  needed  to  learn 
fioro  his  mistake.  Beating  him  up  over 
the  error  would  only  have  made  him 
more  defensive  and  less  likely  to  learn 
from  the  situation. 

Both  accountability  and  blame  have 
roles  to  play  in  good  management  If 
you  think  carefully  about  the  distinc¬ 
tions  between  the  two,  your  responses 
to  problems  can  be  much  more  nu- 
anced  and  tailored  to  both  the  situa¬ 
tion  at  hand  and  the  needs  of  individ¬ 
ual  employees.  O  4B719 
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Can  you  see  it? 


MIDDLEWARE  IS  IBM  SOFTWARE.  It's  software 
that  automates  your  IT  systems  to  align  with  your  unique 
business  goals.  Open,  flexible,  end-to-end  solutions 
that  help  you  keep  up  with  customer  demands  on  your 
infrastructure.  It’s  how  to  avoid  costly  interruptions  in 
service  and  fulfill  your  service  level  agreements.  It's  how 
to  stay  on  top  of  your  game,  no  matter  what  size  you  are. 


1.  Star  fDOttMier  heads  it  in  at  buzzer. 

Z  Fans  eaH  rlwl  tans  to  gloet 
a  300%  more  caNs  flood  nelMOilc. 

4.  IT  ayatama  aenaa  and  respond  instantlyL 
aiWacom  scores  big  wHh  customers. 
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AtfvwHsing  Supptement 


Refnember  when  the  question  was  whether  e- 
busmess  would  ever  result  in  real  dollars  beirtg 
earned  by  anyone?  The  question  has  been  answered 
as  industries  have  turned  the  Internet  into  a  tool  that 
is  increasing  revenue  numbers. 

Amazon.com  and  eBay  have  reported  significant 
revenue  and  profit  growth.  Second  quarter  sales  for 
Amazon.com  were  up  26%  compared  to  a  year  ago. 
white  eBay  reported  a  quarterty  revenue  increase  of 
52%.  The  third  and  fourth  quarters  of  2004. 
traditionally  best  quarters  for  both  entities,  promise 
to  continue  the  trend. 

In  addition,  both  have  purchased  international 
market  share.  EBay  has  completed  the  acquisition 
of  Baazeecom,  addirtg  17  million  users  in  India 
to  its  presence.  Amazon.com  has  announced  the 
acquisftion  of  ioyo  UT,  and  its  access  to  80  million 
customers  in  China. 

A  cadre  of  other  businesses  using  e-business 
technologies  joins  the  traditioodi  e-tailers.  Airlines 
are  driving  down  overhead  costs  by  turning  to  online 
sates  of  tickets^  white  some  traditional  brick  and 
ntortar  retailers  are  combining  in-store  catalog  and 
online  technologies  to  bring  in  customers. 


IT  Careers  in  E-Business 


In  addition,  all  retailers  are  turning  to  the  use  of  radio  solutions  to  the  primary  question  -  how  to  sell  to  a 
frequency  identification  (RFID)  to  improve  operations  increasingly  picky  customer, 
supportirrg  those  sales.  IDC.  the  research  arm  of  IDG. 
estimates  that  RFID  expenditures  will  top  $1 J  billion 
by  2008,  wrtien  the  one-time  surge  will  return 
to  earth. 

Given  all  the  good  news,  the  priority  question  is  what 
this  means  to  IT  professionals.  The  growth  shows  in 
a  slow,  but  steady  inaease  in  jobs  as  well. 

Both  Amazon  and  eBay  list  a  variety  of  jobs  currently 
open  witfj  the  vast  majority  in  software  development 
and  analysis.  Amazon  is  shifting  approximately  40 
software  development  jobs  to  its  new  Software 
Development  Centre  In  Scotiand  during  the  second 
half  the  year,  but  will  maintain  staffing  in  San  Jose  as  I 
well.  EBay  similarly  has  job  postings  in  IT,  to  include 
software  engineering  and  systems.  The  requirement  , 
for  knowing  customers  and  individualizing 
market  to  specific  nkbe  groups  has  created 

additional  Information  technology  requirements  and  .  .  - ; 

_ I-  Tw-  »  -  I  _i  w  more  information  about  IT  Careers  advertisina 

staffing  needs.  This  categoni  includes  data  ple.^  contact  Nancy  Perdsial 

storage/management/mining.  customer  relationship  Vice  President  Recruitment  Advertising 
management  and  self-service  capabilities.  What  you  800.762.2977 
don't  see  are  core  jobs  in  web  development,  but  OW  Connecticut  Path 
iauK,  .k^  k  .  Frammgham,  MA  01701 

rathe,  jobs  that  span  the  operation  to  provide  Produced  by  Carote  R.  Hedden 


Chief  Information  Officer 


Compulerworid  •  InfoWotId  •  Network  World  •  September  9,  2004 


Computaiworld  •  InfoWorid  •  Nsiwtxli  Work)  •  Ssplember  S.  2004 


IT  (.-.irt'rrs 


IT  Cel  !'( '('  I's.ri  »M  I 


hnm  «Mt  tem  u» 

m  Jm.  JSP  Smttim.  EJB  X- 
W.  aingn'M.  c  C— 

me  imam  UKX.  Mh» 
MM  06  pmtd*  afMKMt 


or  «i 

C9  cr  EngwMiwg  [tm  tnrem) 
Mh  t  |r«Mn8MM  F/T  Tiar- 
^  •'MMtt  CiiwiWiii  MMy 
Rmmw  «  »«.  XU  CVMI- 

a.s^rsffir-’ 


by  Son  Obv  A  CwM.  Co 
Oign  4M0.  wMbwn  A  mpbix 
appbc*  using 

coeou«oo.  RPOMoo 

CLMOO.  OUCRVMOO  A  SOU 
•00  Jdi  ID  Ca  partortoad  n 
Cfacaga.  LA  vwiotB  imnsc- 

Raq  2  rm  mm  m 
pt  aPd.  40mm*.  Os^.  w. 

F  r>—pond«aC60.Fil9M>s. 
me..  906  mm  mamen  3L 
SM  1>231t.  CMcago  II 


Anafyzr  iMign  dt««0d  A 
dMtoy  Mb  at*  UMg  SOL 
S*Mf  OMsUmi  M€7 
Tscftwaiogii.  A  support  CAM 
Smmr/mb  (mom  appi  Um^ 
mml  Borne  COMOCOW. 
SOAP.  vtsMi  c*«.  yssoi 

Sarvw.  ASP  A  Jmm  S<r«it 
n*  BMMior  M  Conp  Set. 
Comp  Eng.Or  CIkmi 
•OlvM*  JetMonmt  sm 
FuSMon.  CA  SMd  fmmm  K» 
RMmco  MdiiiuiayiM  bw. 
•29D1E  ClaprtMi  Am  eSO. 
IFiAMow.  CAB283t 


^tomtsnance  aU  aspects 
of  installabon.  testing, 
and  managing  netsvodc 
systems  in  tt>e  busviess 
areaitesUng  of  con^KitaK 

Iwdware  and  supervts- 
■ng  of  its  instatlation. 
testing  of  computer  sys¬ 
tems.  and  related  equip¬ 
ment-  Resume  A-Soft 
Scientific.  P.O.  Box 
1270.  Roswell.  GA 
30077 


Orsoto  Fninoals  FiAtceon- 
m  CerauHant  Indhndual  to 
(Mwpr  M  Ma  cydp  mpip- 
mentstion  ol  Orpclp  E 
Businpu  SUMS  for  brm's 
cApnls  bsped  m  puowoen 
PhUa  A  other  locationt 
Omi  sppAcwtt  imai  pop. 
sen  es  n  AcoounSng.  Bus 
or  r*eM  IWtf  A  9)fS  M 

OraOt  imptementsiion  Con- 
HiAM.  Subm*  iw  A  jobs 
lefl '  tb  HR.  TbouehCHgiW. 
•nc..  56  Gont S*.  370. 
PHMw^  RA  1S2t9  No 


•0*  iMnw  M  MMyzs  daaign 
nwinein  ■cHaea  appi*  g$m 
JTEE.  Jsm.  JSP  asp.  HTML 
XML  Orsop  SQL  Swmt  «i 
WmooM/UMX  OS.  pwtonn 


gng.  doopnani.  maniwn  A  %th 
dM  uM  CMM.  Cm  omign. 
BPR  MMiM*.  apgiM  8S  w 
loi^  pqwv  M  C$/Engg(any 
brMcni  M  2S  MM  Mp  M  rr 
on  MS  m  CSCngg  (Any  oranchl 
■no  6  flweis  fi  IT  TriMi 
nrtXMd  F/T  poMon  Comp 
■Mart  naatana  a>  HR.  Oiia« 
•manca.  me.,  7i1  Eae  Oni»to 
era*  Sum  iSOO.  Chcago  IL 
90IM 


~SwilorSAPBICoMMMnP 
Entura  iugr>a«  ouaWy  SAP 

Buwmms  iMaeeinca  irMbinMn- 

taton  by  prowdrig  mpmtm  A 
VManoa  10  cBani  awMen  ax- 


wr  «aQ  es  ai  Comp  Sotma. 
Mis  or  fMaiAO  AaU  A  3 
SAP  mv  M  mueipla  MM  SAP 
BlaiiMiBiaAauii.  CompaObM 
Salary  Sand  immii  m 
Compandt  Alin  HR,  ISO  N 
Mmi0wi.Sia34<n.Oycaa>  L 


is  the  place  where  your 
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MAGAZINE  OF  THE  YEAR  FOR  2004. 
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Longhorn 

said  Roger  Wilding,  a  Port¬ 
land,  Ore.-based  senior  techni¬ 
cal  engineer  at  shipping  and 
supply  chain  services  compa¬ 
ny  CNF  Inc.  “It  would  be  nice 
to  have  IWinFSJ  in  the  next 
release  of  Windows  for  the 
desktop,  but  I  would  prefer  a 
clean,  stable  product.* 

Victor  Stutft,  an  Indianapo¬ 
lis-based  business  solutions  an¬ 
alyst  at  Sallie  Mae  Inc,  the 
change  in  plans  for  Lcmgfaom 
won't  affect  his  company  at  all. 
"We  don't  plan  on  using  things 
that  either  don't  exist  or  are 
merely  part  of  a  planned  future 
releas<%"  Stuart  said. 

ConUcUng  VtBiMS 

Rob  Rhodes,  a  rgrhntc^i  con¬ 
sultant  at  Louisville,  Ky.-based 
Kindred  Healthcare  Inc,  said 
the  decision  to  remove  WinFS 
from  Longhorn  sounded  rea¬ 
sonable,  since  he  thought  Mi¬ 
crosoft  was  “biting  off  quite  a 
bit”  Rhodes  said  he  even  likes 
the  idea  of  WinFS  potentially 
being  an  add-on  to  the  operat¬ 
ing  system,  since  that  would 
give  his  company  the  option  of 
not  using  the  technology  if  it 
adversely  affects  hardware  re¬ 
quirements  or  performance. 

Greg  SuDivaa  lead  product 
manager  on  Microsoft's  Win¬ 
dows  dient  team,  said  WinFS 
is  being  developed  indepen¬ 
dently  of  the  client  and  server 
operating  systems  and  will  be 
delivered  separately.  He  said 
that  when  Hnisbed.  WinFS 
could  be  applied  and  installed 
on  one  of  the  existing  operat¬ 
ing  systems. 

“WinFS  is  their  ticket  for 
next -generation  searching, 
and  it  also  contains  new  APIs 
that  could  potentially  compete 
against  the  Java  platform.  So 
there's  more  riding  on  this 
component  than  there  is  on 
Avalon  and  Indigo.”  said  a 
software  engineer  at  a  major 
pharmaceutical  company  who 
asked  not  to  be  named  “If 
something's  going  to  drop  off 


the  fust  release  on  Longhorn 
to  make  sure  they  get  it  right, 
it  should  be  this.” 

But  some  users  would  pre¬ 
fer  WinFS  over  other  new  fea¬ 
tures.  Jason  Glazier,  senior 
vice  president  and  chief  tech¬ 
nology  and  e-commerce  offi¬ 
cer  at  Lincoln  Financial  Group 
in  Philadelphia,  said  WinFS 
was  “one  of  the  more  signifi¬ 
cant  advantages”  of  Longhorn. 
He  said  its  removal  “definitely 
detracts  from  the  value  of  the 
Longhorn  release  and  it 
less  likely  we  will  move  when 
it  is  released” 

Walt  Smith,  chief  architect  at 
a  U.S.-based  financial  institu- 
tioa  said  that  be  would  like  a 
more  robust  server  environ¬ 
ment  as  soon  as  possible  and 
that  2007  “seems  a  bit  far  off 
fix  serious  planning  purposes.” 

He  added  that  be  would 
gladly  forgo  Avalon's  3-0 
I  gr^hicsinfovorofWlnFS. 

^  ‘Vs  unfortunate  that  Microsoft 
has  chosen  to  delay  the  deliv¬ 
ery  of  potentially  important 
improvements  in  the  way  that 
uiformation  is  managed  in  the 


H  [Removal 
ofWinPS] 
definileiy  detracts 
from  the  value  of  the 
Loni^iom  release. 

JASON  6LAZI».  SEPiOR 
VICE  PREStOENT.  CTO  AND 
ECOMMEKS  OFFICER. 
UNCOLNFINANCUL6ROUP 

enterprise  in  favor  of  deliver- 
tng  more  glitz  and  glamour  in 
the  front-end  graphics  subsys¬ 
tem  of  Loogbom,”  Smith  said 
Sullivan  said  there  will  be 
more  new  features  in  Long¬ 
horn  beyond  those  that  Micro¬ 
soft  laid  out  at  last  October's 
Professional  Developers  Con¬ 
ference.  He  said  Microsoft  has 
yet  to  detail  new  functionality 


Microsoft  Presents  Murlw 
PictuB  of  WinPS  S^ver  nan 


Mtxioofl  k  now  cUmlno  tfol 
WnFSwesnalpartotlheLino- 
hom  santer  pin  pnsenled  tet 
OdobarailsF^ofoBelDnkOe- 
voiooas  Confmnee  (POQ. 

it  W  out  deials  about  the 
next  msjor  \MndtM8  raiease. 

But  M's  not  0)8  several 
anai^  noolBct  dscuBiaRs  at 
thet  ttne.  Ifaraaid  lioasaA 
gwB  the  irapnaaion  thri  WirFS 
mmU  ba  part  of  bo0)  0ie  long- 
ham  cfianlni  saner. 

eregScftwn.  a  lead  product 
manaoaranMfcneoffsWn- 
doM  clard  turn,  said  lAcrosoft 
UhadabautMiFSaBa'Gieni- 
ofdy’tealunattbittime.lnOc- 
tote  2003L  *0we  were  no  plans 
Id  do  WinFS  on  tha  senar.”  he 
aaid.*rhenalontodoVWfSon 
the  server  wK  a  sufaequent 


decsoaTheplwiswaretoiA- 
nirielydoaWnFSnplBnienta- 
Hon  on  tie  servar.  but  not  unll  0« 
nadratassB.* 

BIGalas,McniBafrschar- 
man  and  cNef  sollMre  anMect 
said  in  a  pubfebed  Meniew  laae 
iast  rnordh  that  0«  company 
'nevar  lad  k)  0tt  ljjn|0Mm  pian. 
WWS  saver  areiport  Wb  were 
dear  aboU  tel  going  bKk  al  the 
way  to  the  PDC.*  A  Iftcreeoft 
spoheanan  ooninned  the  accu¬ 
racy  of  0w  quote. 

btanintarviewwitiConvx#- 
anrattf  in  August  2003.  about 
three  monife  before  the  PDC. 
Ertcfojdder.sereorvicepreai- 
denl  of  seneis  and  tods.  said.  1 
have  to  deiter  some  d  tte  Jtet 
todnoiogies  thd  are  kidUM  in 
Longhorn.  Ybu  know.  I  toduda 


that  will  appeal  to  business 
users  and  consumers. 

But  Thomas  Groves,  a  sys¬ 
tems  engineer  at  On^n  State 
University  in  Corvallis,  said 
WinFS  is  the  feature  that  in¬ 
terested  him  most,  with  its 
promise  of  greater  file  system 
speed,  less-ftequent  file  sys¬ 
tem  degradation,  tmprov^ 
dau  retrieval  and  seamless 
integration  between  network 
and  local  data. 

■TVtnFS  has  the  greatest  po¬ 
tential  to  revolutionize  Wm- 
dows,"  Groves  said. 

“Pm  not  surprised  that  they 
removed  promised  ftinctiooal- 
ity.  This  is.  to  me.  part  of  Mi¬ 
crosoft's  pattern,"  said  Ft  Kan 
Roberts,  an  application  archi¬ 
tect  at  Winterthur  North 
America  Inc.,  an  insurance 
company  in  Sun  Prairie,  Wis. 
They  continue  to  promise 
what  is  essentially  vaporware, 
and  it  allows  them  to  maintain 
their  dominant  position  be¬ 
cause  the  rest  of  the  industry 
stays  in  a  reactive,  rather  than 
proactive,  mode  of  operation. 
As  long  as  we  as  consumers 


:  somedtoastongetoefnoto- 
giae.ThifspartdIMnFS  Tlwt's 
iteoinL)n|^.*Heimreter- 
rmg  to  hk  foto  to  hekiing  VW 
Pook.  who  heads  tie  WMows 
efieni  buitoess.  to  be  swoeastoL 

Last  btoy.  Bob  M«lB.aenv 
vice  presidenl  d  the  IMidows 
aenrer  Moa  toU  CootodBr- 
wMlflhdlMnFSeafaeoiutely 
to  Lmdtom  server.' Mjdk  said 
tod  at  0n  tins  Lnnohom  ships, 
WnFS  fdaht  fld  be  d  toe  state 
d  scakblly  where  K  coiid  be 
wad  tor  coUnrabre  servicas  by 
hundredsdusarsbdtodacal- 
ng  to  tens  d  taers  would  be  no 
probkm. 

*WlyQuuae0asanenter- 
prise  Be  sdw  wNh  luidreds  or 
thousands  d  uBors  attached? 
Nobody  nd  to  toe  Innohom 
Ibnekana.ll'sprabdilysdne- 
toing  tod  oomes  a  kNe  kter  * 
Muffts  said  d  toe  tone. 

licraaoft  dd  nd  ckrfy  toe 


continue  to  put  up  with  it, 
they  have  no  incentive  to 
change.” 

If  the  Loo^ioni  client  ships 
in  2006.  that  will  mark  five 
years  since  the  2001  release  of 
Windows  XP.  If  the  Loc^horn 
server  makes  its  2007  projec- 
tion.  that  will  leave  a  f^-year 
gap  since  Windows  Server 
2003.  Coniracts  for  Microsoft’s 
Software  Assurance  mainte¬ 
nance  program,  which  includes 
product  upgrade  rights,  typi¬ 
cally  nm  for  three  years.  So 
that  means  some  customers 
won’t  get  upgrades  during 
their  contract  time  ftaxnes. 

Michael  Lebiedzinski  assis¬ 
tant  vice  president  of  IT  at 
Philadelphia-based  Delaware 
Investments,  said  Microsoft 
should  either  provide  the  next 
release  to  those  companies 
that  didn't  receive  one  or 
lengthen  the  contract  term 
and  spread  the  cost  over  more 
years.  “It's  obviously  not  fair 
to  charge  a  customer  software 
maintenance  when  new  re¬ 
leases  are  not  nude,”  be 
048244 


:  codlcdngsldanientsbyCbro- 
/Uansctokf  s  pdAedton  daad- 
Ine.  despite  repeated  requests 
torconmant 

SiAton  add  no  die  has  been 
sdtorAardBOBBdtoBWbfS 
technokigy.'^MnFSwioQmBaf- 
ter  the  longhorn  cfait'hasaid 
*WhatoBr  or  not  I's  after  toe  Long¬ 
horn  aemer  k  undetwratoed' 

Thomas  Msphy.  an  anafyd 
d  Mate  Ofiii<)  Inc.  sad  he  first 
heard  tod  WinFS  would  be  part 
of  toe  Longhorn  server  baton 
toe  POC.  during  prtvate  brieflnos 
wito  Mcroaoft. 

Steve  tOeynhana  anotoar 
Meta  anakist.  said  it  appeared 
did  WinFS  would  be  part  of  boto 
toe  lon^Kvn  Oteni  and  server. 
besadonpubicPDCpreaente- 
iiotB.  Buf  he  said  he  got  ahatchy 
answers  to  pmote  dscuBBtors 
wito  MtorosoH.  Diey  detot  have 
a  tot  of  ddal' he  said. 

-CiidShiia 
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Fruits  of  Labor 


IF  I  r  SFEMS  1  HIS  LAHOR  DAY  week  like  there’s  not  much 

good  news  tor  people  who  work  in  IT,  consider  this;  Accord¬ 
ing  to  a  new  survey,  most  users  think  IT  is  doing  a  pretty  good 
jt'l’  and  a  sizable  number  ot  non-IT  managers  actually  want 
more  IT  staff.  In  the  poll  of  1,200  US.  workers  by  staffing  firm 
Hudson  Highland  Group,  75%  of  users  who  have  a  tech-support 
group  rated  their  support  as  excellent  or  good.  And  21%  of  managers 
sur\e\ed  said  they  think  adding  more  IT  staff  will  improve  produc- 
ti\  ity.  And  nearly  half  ot  all  workers  (49®b)  believe  technology  up¬ 
grades  and  more  IT  training  will  improve  their  own  efficiency. 
Whaddt  a  know  —  users  think  IT  is  pretty  good  after  all. 


AnJ  th-ii  tjys  .i  lot  .il'out  !in«  IT  U\'rk  —  and 
I  I  Wiirkors  -  have  ohanjiv-J  o\t.'r  tlu-  past  Jew 
\carv  }  ven  rh*'uj:h  InjJjiois  have  been  nLi.sIu  J 
and  w<irklt>ad>  have  v  limbed,  vve'v  e  'tlill  made 
huj-'e  projrreNs  in  transiornhne  1 1  penple.  in  the 
mnidst.f  users,  from  a  buneh  oi  obno.Mmis. 
;mii>t>ei.il  pnipeller  head'-  to  a  itselul.  elYeetive 
le.ini  tJi.it  users  aeliullv  like  ha\  iii>i  anumd. 

How  did  that  happen.*  .\I.ivbe  it  started  with 
all  th.ise  e-cornmeree  Web  sites  we  had  to  build 
.uid  ni.iinta>ji  dunnyj  J'hetireai  Uoi-t.om  Scare. 
Fveryone  was  corn  ineed  that  if  we  didn’t  ^tet 
them  right,  vve'd  he  swept  awav  by  pure-plav 
c-iailers.  Mapaeemeni  had  to  bet  the  business 
v*n  IT  s  ability  to  deliver,  suddenly.  IT  was  erir- 
leal  to  the  business. 

.\nd  lust  as  suddenly,  we  eould  no  longer 
sount  on  users  to  pap«,T  over  ptH>r  application 
Ji'sign  and  performance.  \o  more  clerks  or 
telemarketers  s.iving  us  fnim  iturselves;  if 
something  wasn't  right.  eust<»mers  experienced 
our  failure  directly.  When  s.iles  were  lost,  it 
vvasn  I  any»>ne's  tauli  but  i  r’s.  We  siartvsj  to  un- 
ds‘rsiand  what  users  aeiually  d«».  We  started  to 
think  a  little  imire  like  users  —  .^nd  to  appreci¬ 
ate  them. 

1  hen  came  ^'dk:  an  impossible 
pr«*iect  on  .in  immovable  schedule. 

‘fills  lime,  we  knew  we  were  de¬ 
pending  on  Users  to  w»>rk  around 
anything  we  missed  or  s'ouldn’i  fi.x. 

Some  users  experienced  earh  Y2k 
pniblems  lor  themselves,  (lihers  sat 
through  testing,  wvirked  up  busi¬ 
ness-side  contingency  plans,  even 
stayed  up  late  on  J>ts-.  .^1.  IWJ.  just 
to  gel  a  head  st an  on  whatever 
might  go  w  rong. 

Users  got  .1  little  better  sense  of 
h«)W  much  biiMid.  sweat  and  ferrt»r 


goes  intt>  .in  I'l’  project  that  has  to-work.  .And 
ti'r  once,  we  really  had  .someihing  to  thank 
them  for. 

l  \er  since,  that  baek-and-lorth  has  ctmtin- 
ucd.  We  V e  helped  users  deal  w  ith  a  tidal  wave 
ot  spam  and  \  iruses  —  things  they  felt  theef- 
leets  of  directly.  We  also  loosened  up  a  little 
w  hen  ii  came  to  things  like  the  wireless  access 
points  Users  plugged  in  themselves.  iNoi  that 
wi*  had  .1  lot  of  ehiiiee;  w  e  didn’t  have  the  time 
or  manpower  to  he  full-time  Wi-l-i  cops.  So  we 
negotiated,  and  they  covtperated  —  mostly.) 

And  usvTs  have  seen  what  happens  when  help 
dv-sks  gel  downsized  or  »*uisourced.  They've 
watched  projects  and  upgrades  get  delayed  be- 
eause  there  w  eren’t  enough  11’  ptHtple.  They  vt 
had  to  Jo  more  1 1  U*r  themselves  and  have 
learned  that  (hat  truly  t.s'  doing  it  the  hard  way. 

Aes.  they  really  have  gotten  smarter  aKnit  IT 
and  about  what  I  T  people  do.  And  we  really 
have  llgured  out  that  they  km»vx'  more  than  us 
about  doing  the  business  that  pays  our  wages. 

Which  is  a  good  thing.  We've  ahvay  s  known 
they  need  us.  Now.  just  as  users  have  ciune  to 
understand  the  value  i»f  IT  people,  we  re  reali/ 
ing  that  we  need  them.  Without 
support  fn»m  users,  we  can't  do 
our  jobs.  And  without  pn»ject 
sponsvtrship  from  business  units, 
we've  got  no  jobs  to  do. 

rite  chkser  we  gel  to  users,  the 
better  if  is  for  ail  of  us. 

We’ve  all  heard  flun  claim  for 
years.  Now.  finally,  it's  not  just  a 
good  idea  —  it’s  becoming  a  reality. 
.And  both  I’l'  people  and  users  are 
seeing  the  benefits. 

Thi-s  Labor  Day.  for  the  people 
who  labor  in  IT.  that's  very  good 
news  indeed.  O  49213 


Doing  FT  the  Hard  Way 

After  this  custom  applicatior)  is  updated,  management 
IS  horrified  to  team  that  customers  are  receiving  nearly 
unreadable  messages,  "Any  text  manually  edited 
appeared  to  have  alt  spaces  stripped  out.  making 
sentences  appear  as  one  long  word.'  reports  an  on¬ 
scene  pilot  fish.  ‘After  an  intensive  bug  hurt  by  the 
entire  ft  staff  turned  up  zilch,  we  confessed  on  a  con¬ 
ference  call  that  we  couldn’l  solve  It.  You  can  imagine 
our  relief  when  we  were  told.  'Oh.  you  can  ignore  that 
one.  One  of  our  workers'  space  bar  is  broken.' " 


Sweet 

A  user's  PC  is 
acting  spooky  * 

inserting  random 
characters  or 
suddenly  typing  charac¬ 
ters  on  its  own.  Support 
pdot  fish  suspects  the 
keyboard  and  replaces  it. 
but  three  weeks  later, 
the  probtem  is  back.  "In¬ 
spiration  stnlces  when  I 
get  on-site  and  notice 
the  large  bowl  of  Her- 
shey's  Kisses  on  the 
desk."  hsh  says.  "A  Mast 
of  compressed  air  bito 
the  keyboard  releases  a 
ckNid  of  tiny  glittering 
fragments  of  conductive 
foil 


SHARK 

TANKti 


NoPets,nease 

"This  user  caded  and 
said  that  every  time  he 
booled  his  system,  he 
got  a  message  that  the 
system  was  doing  an 
amergencyshutifown.* 
help  dash  staffer  tels 
support  manager  pilot 
Ash.  "\Ate  discoverwd  the 
problem 'there  was  a 
dead  Izard  blocking  the 
bn  frora  tundng.  This 
was  forcbig  the  system 
to  shut  down  because  it 
detected  the  fan  not  nm- 
nkig.  He  is  now  checking 
to  make  sin  the  Izard 
dUnl  haw  any  fTtends." 


Priorities 

Plot  fish  gets 
acaHfroma 
user  who  ad¬ 
mits  that  she 
splM  coffee  on  her 
desk.  "She  was  proud  of 
the  fact  that  she  saved 
her  keyboard.**  Ash  says, 
"but  she  needed  her 
telephone  reptaoed.  That 
was,  urn,  gresL  The 
phone  cost  S4O0.  Her 
keyboard  was  $15." 


Still  Big  and  Red 
Whle  visiting  a  remote 
office  of  the  bank  he 
woria  for.  this  pilot  Ash 
gets  an  escort  to  navi¬ 
gate  throAigh  a  secured 
area.  "But  wfwn  I  was 
rBadvtoieaw.lwastDM 
i  codd  And  my  own  my 
oiit”Ashsaii«."The 
door  wouldn't  open, 
though.  I  was  told  I  had 
to  push  the  big.  red.  un- 
marked  button  that  was 
mounted  on  the  wtf. 
several  feet  to  the  left 
of  the  doorway.  Even 
tiNMigh  this  wasn't  a 
data  center  '  A  was  Just 
a  Aoor  wAh  ofAcos  and 
cubes  -  after  worfdng  In 
IT  for  owr  20  years,  do 
you  know  how  hard  A 
was  for  ma  to  Apk*  my¬ 
self  Id  push  a  big  red 
button  next  to  an  exit?" 


OOOOOeVES  ARE  HARD.  TOa  8ut  Sharky  wants 
to  say  so  kjrig  ID  departing 

Maryfran  Johnson,  who  played  a  big  part  in  rnaking  the 
Swk  T»ik  a  reality  five  years  ago.  Thanks,  kid  Now  gel 
outta  here  -  I've  sti  got  rny  hands  ful  lootong  for  true  tales 
SimdTiTTiintnihMlriffrmipiitofwiiilri  riw^ 
if  I  use  il  you  get  a  stylish  Shad(  shirt.  And  check  out  the 
daily  feed  browse  the  Sharkives  and  sgn  up  for  Shark  Tank 
horne  debv^  at  cornputsrwoddxan^diwky. 
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Fruits  of  Labor 


IF  IT  SEEMS  THIS  LABOR  DAY  week  like  there’s  not  much 
pod  news  for  people  who  work  in  IT,  consider  this:  Accord¬ 
ing  to  a  new  survey,  most  users  think  IT  is  doing  a  pretty  good 
job  and  a  sizable  number  of  non-IT  managers  actually  want 
more  IT  staff.  In  the  poll  of 1,200  U.S.  workers  by  staffing  firm 
Hudson  Highland  Group,  75%  of  users  who  have  a  tech-support 
group  rated  their  support  as  excellent  or  good.  And  21%  of  managers 
supeyed  said  they  think  adding  more  IT  staff  will  improve  produc¬ 
tivity.  And  nearly  half  of  all  workers  (49%)  believe  technology  up¬ 
grades  and  more  IT  training  will  improve  their  own  efficiency. 
Whaddya  know  —  users  think  IT  is  pretty  good  after  all. 


And  that  says  a  lot  about  how  IT  work  —  and 
IT  woiicers  —  have  changed  over  the  past  few 
years.  Even  though  budgets  have  been  slashed 
and  workloads  have  climbed,  we've  still  njade 
huge  prepress  in  transforming  IT  people,  in  the 
minds  of  users,  from  a  bunch  of  obnoxious, 
antisocial  propeller-heads  to  a  useful,  effective 
team  that  users  actually  like  having  around. 

How  did  that  happen?  Maybe  it  staned  with 
all  those  e-commerce  Web  sites  we  had  to  build 
and  maintain  during  The  Great  Dot-Com  Scare. 
Everyone  was  convinced  that  if  we  didn't  get 
them  right,  we'd  be  swept  away  by  pure-play 
e-tailers.  Management  had  to  bet  the  business 
on  IT's  ability  to  deliver.  Suddenly.  IT  was  crit¬ 
ical  to  the  business. 

And  lust  as  suddenly,  we  could  no  longer 
count  on  users  to  paper  over  poor  application 
design  and  performance.  No  more  clerks  or 
telemarketers  saving  us  from  ourselves:  if 
something  wasn't  ri^t.  customers  experienced 
our  failure  directly.  When  sales  were  lost,  it 
wasn't  anyone’s  fault  but  FTs.  We  started  to  un¬ 
derstand  what  users  actually  do.  We  started  to 
think  a  little  more  like  users  —  and  to  appreci¬ 
ate  them. 

Then  came  Y2k:  an  impossible 
protect  on  an  immovable  schedule. 

This  time,  we  knew  we  were  de¬ 
pending  on  users  to  work  around 
anything  we  missed  or  couldn't  fix. 

Some  users  experienced  eariy  y2k 
problems  for  themselves.  Others  sat 
through  testing,  worked  up  busi¬ 
ness-side  contingency  plans,  even 
stayed  up  late  on  Dec.  31, 1999,  just 
to  get  a  bead  start  on  whatever 
might  go  wrong. 

Users  got  a  little  better  sense  of 
how  much  blood,  sweat  and  terror 


goes  into  an  IT  project  that  has  to  work.  And 
for  once,  we  really  had  something  to  thank 
them  for. 

Ever  since,  that  back-and-forth  has  contin¬ 
ued.  We*ve  helped  users  deal  with  a  tidal  wave 
of  spam  and  viruses  —  things  they  felt  the  ef¬ 
fects  of  directly.  We  also  loosened  up  a  little 
when  it  came  to  things  like  the  wireless  access 
points  users  plugged  in  themselves.  (Not  that 
we  had  a  lot  of  choice:  we  didn't  have  the  time 
or  manpower  to  be  full-time  Wi-Fi  cops.  So  we 
negotiated,  and  they  cooperated  —  mostly.) 

And  users  have  seen  what  happens  when  help 
desks  get  downsized  or  outsourced.  They’ve 
watched  projects  and  upgrades  get  delayed  be¬ 
cause  there  weren’t  enough  IT  people.  They've 
had  to  do  more  IT  for  themselves  and  have 
learned  that  that  truly  is  doing  it  the  hard  way. 

Yes.  they  really  have  gotten  smaner  about  IT 
and  about  what  IT  people  do.  And  we  really 
have  figured  out  that  they  know  more  than  us 
about  doing  the  business  that  pays  our  wages. 

Which  is  a  good  thing.  We’ve  always  known 
they  need  us.  Now.  just  as  users  have  come  to 
understand  the  value  of  IT  people,  we're  realiz¬ 
ing  that  we  need  them  Without 
support  from  users,  we  can't  do 
our  jobs.  And  without  project 
sponsorship  from  business  units, 
we’ve  got  no  jobs  to  da 
The  closer  we  get  to  users,  the 
better  it  is  for  all  of  us. 

We’ve  all  heard  that  claim  for 
years.  Now,  finally,  it’s  not  just  a 
good  idea  —  it’s  becoming  a  reality. 
And  both  IT  people  and  users  are 
seeing  the  benefits. 

This  Labor  Day.  for  the  people 
w^o  labor  in  IT,  that’s  very  good 
news  indeed.  O  49213 
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Consider  the  dots  connected.  From  one  coast  to  the  other,  Transportation 
insurance  Brokers  are  serving  clients  n>ore  securely.  Sharing  data  more  quickly. 
Communicating  more  seamlessly.  And  doing  it  all  for  almost  $2,000  less  a  month, 
thanks  to  an  IP-VPN  solution  we  designed,  delivered  and  now  manage.  And  the 
strong,  reliable  backbone  of  the  SBC  network.  Find  out  more  about  how  we're 
helping  TIB  connect  the  dots  at  sbc.com/dots.  GOING  BEYOND  THE  CALL.* 
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Connecting  everything, 
everywhere,  all  the  time. 

Business  wkJ  IT  unite.  HP  (T  Sefvte /Vtanogement  (trSA^ 

combtnes  powerful  HP  OpenView  software  with  the 

Irnow^KJw  of  HP  consultants  to  OBolB  on  IT  infiastriictute 
thot  allows  you  to  measure  your  return  on  (T.  By  heepir® 
business  and  rr  aligned,  ITSM  makes  your  orgaiizalion 
more  responsive,  efficieni  and  prepared  Ibr  choi^. 
www.hp.coni/inlo/itsm 
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As  nurr.c.ines  Dd!te'  Flor.Ud  IT  eu-cs  try  to  keep  d  Udldnc.*;  between  optrationdl  and  employee  needs 
IbPSavvis  Common, cations  sees  the  light  and  starts  booting  spammers  off  of  .Is  networks 
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Virtual  Server 
Gets  Off  tea 
Late  Start 

Microsoft  chases  after 
VMware’s  technology 

BY  CAROL  SLIWA 

IT  managers  anxious  to  con¬ 
solidate  their  server  hardware 
will  finally  get  to  see  the  long- 
promised  virtual  marhin<» 
software  that  Microsoft  Corp. 
has  been  working  on  since  it 
acquired  the  technology  from 


Connectix  Corp.  more  than  18 
months  aga 

Microsoft  today  plans  to 
make  available  an  evaluation 
copy  of  its  \%tual  Server  2005 
software,  which  will  let  users 
run  multiple  distinct  copies  of 
an  operating  syaem  on  a  sin¬ 
gle  processor  within  a  server. 
The  final  product  is  due  to 
ship  Oct.  1,  Microsoft  said. 

But  Microsoft  is  late  to  the 
game.  VMware  Inc.,  its  top 
virtualization  competitor,  re¬ 
leased  the  initial  versions  of 
its  GSX  Server  and  ESX  Server 
software  in  2001.  And  those 
Virtual  Server,  page  64 


ERP  ^tem  Doesn’t 
Make  Grade  in  Indiana 


Problems  mar  university’s  PeopleSoft  rollout, 
leaving 3,000  students  without  financial  aid 


Hitachi  Data  Looks  for  E 
Over  High-End  Ston^ 

Userss^^misein  I 

Its  new  disk  array  line  Frank,  senior  dl 


eravais 


Hitachi  Data  Systems  Corp. 
last  week  announced  vastly  re¬ 
designed  versions  of  its  hi^ 
end  disk  arrays  and  said  the 
new  line  will  scale  to  hun¬ 
dreds  of  terabytes  of  capacity 
and  oflRer  advanced  functiond- 
ity  such  as  long-distance  data 
replication  and  migratiott. 

Several  eariy  adopters  and 
analysts  said  HDS 1^  set  a 
new  standard  for  high-end 
storage  technol<^  with  its 
IhginaStore  Universal  Storage 
Platfonn.  “rm  extremely  ex¬ 
cited  about  the  impact  this 


could  have  on  the  way  we 
manage  storage.”  said  Brian 
Frank,  seniof  director  of  archi¬ 
tecture  and  infrastructure  at 
United  Air  Lines  Inc. 

Ti^maStore  is  a  series  of 
three  disk  arrays  based  on  a 
switched  architecture  that  can 
support  up  to  332TB  of  inter¬ 
nal  storage  and  manage  up  to 
32  petabytes  of  external  stor¬ 
age.  including  data  stored  on 
boxes  from  HDS  rivals  IBM 
and  EMC  Corp.  At  a  press 
conference  here,  HDS  said  the  i 
TagmaStore,pqgieJ6  I 


BY  MA»C  L.  SONOINI 

Technical  glitches  in  a  SS2  mil- 
UoD  installation  of  PeopleSoft 
Inc.'s  ^plications  at  Indiana 
University  have  left 
thousands  of  students 
widiout  access  to 
promised  financial  aid 
and  forced  oflftcials  at  I 
the  school’s  eig^t  cam-  ' 
puses  to  implement  a  series  of 
stopgap  measures. 

University  officials  last  week 
said  staffers  are  scrambiing  to 


do  manual  work-arounds  as  a 
result  of  the  system  problems, 
which  became  an  issue  when 
classes  began  Ute  last  month. 
The  univeTsity  estimat¬ 
ed  that  about  3.000  of 
the  60.000  eligible  stu¬ 
dents  arriving  at  Us  flag¬ 
ship  campus  in  Hoom- 
ingtoo  and  other  loca¬ 
tions  were  denied  financial 
aid  by  the  new  system,  even 
though  the  money  had  been 
pledged  to  them.  The  ma|ority 


of  the  affected  students  anend 
Indiana  University-Purdue 
University  Indian^iolis. 

The  Indiana  sefa^b  have 
been  woiidng  since  1998  to  re¬ 
place  administrative  systems 
that  in  some  cases  are  more 
than  20  years  old  with  ver¬ 
sions  of  the  PeopleSoft  Enter¬ 
prise  product  line  tailored  for 
universities.  The  loan-proc¬ 
essing  problems  arose  follow¬ 
ing  the  installation  of  the  fi¬ 
nancial  aid  module  in  People- 
Soft’s  Campus  Solutions  8 
package  of  applications. 

ERP  System,  page  M 


COMPUTERWORLD 


ON  PAPER, 

IN  PRACTICE 


The  new  stud  on  the  server  farm. 


Presenting  the  new  Xserve'  G5,  a  wickedly  fast, 
extremely  compatible  and  refreshingly  affordable  lU 
server  from  Apple; 

With  dual  2GHz  64-bit  G5  processors,  it  achieves  blazing 
speeds  of  up  to  30  gigaflops.  It's  so  powerful,  in  fact,  that 
the  US.  government  is  deploying- 1 ,566  Xserve  G5  servers  to 
create  one  of  the  world's  fastest  supercomputers,  capable  of 
up  to  25  trillion  calculations  per  second. 

And  it  comes  complete  with  Mac  OS  X  Server,  Apple's 
UNIX-based  operating  system  that  provides  a  complete  suite 
of  standards-based  network  services  with  no  per-client  fees. 
So  whether  you  have  Mac;  Windows,  UNIX  or  Linux  clients, 
Xserve  is  ideal  for  cross-platform  file  sharing,  hosting 
dynamic  websites,  streaming  audio  and  video  and  running 
powerful  J2EE  applications  -  right  out  of  the  box. 

Of  course,  its  most  impressive  feature  may  be  its 
price,  starting  at  just  $2,999*.  The  new  Xserve  G5. 


>  With  Sprint,  Geek  Squad  at  Best  Buy  is  beautiful. 


Geek  Squad,  a  244toi'f  Computer  Suppon  Task  Force  found  at  Best  Buy 
depends  on  Spnnt  to  take  care  of  business  Armed  witb  Spnnt  PCS  Ready 
Imk"*  Phortes.  Agents  can  stay  linked  wrth  wvalkie-ialkie^le  communication 
And  when  they  need  more  detailed  technical  information,  Sprint  PCS 
Connection  Cards'^  provide  high-speed  wireless  access,  linking  them  to 
their  company  intranet  which  can  provide  the  same  data  access  theyd 
have  in  the  office  Sprint  technology  helps  Geek  Squad  expedite  solutions, 
improve  customer  service  and  efficientJy  handle  over  a  thousand  customers 
a  day  And  a  fast,  connected  Geek  Squad  is.  in  our  opinion,  beautiful 
With  Sprint,  business  is  beautiful.  " 

>  Visit  Sprint.com/beautiful  for  case  studies  or  call  877-777-5568  > 
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Innovation  Inside  Out 

In  th6  MnnAgsm^nt  sftctiont  rr  is  making  it  possible 
to  accelerate  the  pace  of  innovation  while  minimtyjng 
the  costs  and  risks.  Alph  Bingham  of  Lilly  Research 
and  others  tell  how  visionary  companies  are  harness¬ 
ing  the  talent  outside  their  own  R&D  labs.  Page  49 
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The  Goods  for  Grid 

Abo  in  ttM  Honogomont  soction:  rr 

workers  who  are  in  the  best  position  to 
lead  a  grid  project  have  broad-based 
experience  and  open  minds.  Pa0e  52 
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54  QAA:  Emotional  Intelligence. 

Burned  out?  You’re  probably 
working  at  cross-purposes 
with  your  emotional  wiring, 
says  Eugene  Kaluzniack>'. 
Harnessing  your  psycholt^- 
cal  strengths  at  woik  can  beat 
burnout  and  free  up  energy 
and  creativity. 

56  Career  Watch.  A  not-so- 
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ii^  scene  for  college  gradu¬ 
ates;  latter  paychecks  for  key 
IT  players;  and  keeping  your 
politics  to  yourself  on  the  job. 
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6  On  the  Mark;  Mark  Hall 
reports  that  Sarhanes-Oxley 
compliance  is  more  expensive 
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Protect  Ybur  htenial  Networks 

SECURITY:  PeiterMudge  Zatko  of  Intnisic 
Inc.  offers  four  steps  for  keeping  your 
systems  safe  from  outside  adversries. 
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RSS  Feeds 

Get  news  highlights  delivered  to  your  desk¬ 
top  with  our  ftee  RSS  feeds.  You  can  sub¬ 
scribe  to  news  headlines,  popular  features 
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Hayes  is  pleased  that  this 
year's  I'l.-\.\  job  survey  for¬ 
goes  the  rah-rah  bivosierism 
of  past  repkvris,  but  .i  closer 
lovik  reveals  j  picture  that’s 
less  than  pretty. 
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EDS  Expects  to  Cut 
Up  to  20,000  Jobs 

Electronic  OaU  Systems  Corp. 
eipects  to  lay  off  15.000  to 
20.000  employees  over  the  next 
two  years  as  part  of  an  effort  to 

slash  Its  annual  costs  by  S3  M- 
ton.  Chairman  and  CEO  Michaei 
Jordan  saw  during  a  qiMstiott' 
and-arBwersesiionataconfor* 
cnct  in  New  York.  The  new  re* 
duetioRs  wouM  be  in  addition  to 
the  5.000  lobe  that  EDS  has  cut 
since  June  2003.  Jordan  added. 

However,  an  EDS  spokas* 
woman  sWd  afterward  that  the 
prafected  number  of  lob  cuts  cited 
by  Jordan  was  »  estimats.  not  a 
firm  target  The  actual  number  of 
foyoffs  wdl  depend  on  the  prog- 
foss  of  the  Piano.  Texas-based  FT 
sesviees  fim's  ongoing  business 
hansformation  effort  accordirtg 
to  the  spohoswoman. 

Privacy  Group  Sues 
Supennarket  Chain 

DoPriractlllgMsCInrins- 
l»iM.  I  San  Oliga-InMd  advo¬ 
cacy  gtnip.  said  «  has  IM  a  prl- 
ncrntaladlaKiiidagahBlao-  i 
IWTOlia)  chain  Mwlaon'i  Inc.  | 
and  ill  SavOn.  Oacn  and  JbmI- 
Oacnphannacy  onus.  Iha  law-  I 
nat.  Had  in  San  Diago  County  | 
Supailor  Court,  cWma  that /U-  ^ 

hartaao's  iHagally  uaad  Um  pet- 
sonal  data  of  pharmacy  cua- 
Umara  to  conduct  targaM  mar- 
hating  campaigns  on  brfiaH  of  I 

iargn  drug  compantas.  Boiaa. 
Uaho-haiad  Afeartaon's  cahad 
Hie  aHogahona  “film  and  tmaHy 


Short  Takes 

The  EUROPEAN  COMMISSION 
approved  Hewie«-Paekard  Co.'s 
pisn  to  buy  Synsler  PLC,  •  Brack- 
nek  England-based  IT  services 
firm.  The  deal  won't  significanlly 
increase  HP’s  share  of  the  IT 
market  In  Europe,  the  commission  I 
saw. ...  HYPERION  SOLUTIONS  j 

CORP.  in  Swmyvale.  CaM..  this  I 

week  plans  to  launch  an  upgrade 
oi  ds  Essbase  online  anaiylical 
processing  software  foeturk^i  a  ' 
taster  oata  analysis  sngme. 


Florida  IT  Managers  Balance  Tech 
Needs,  Workforce  Issues  in  Storms 

m _ I 


j  FlexibiliU'  key 
I  in  ^rationi, 
staffing  strategies 

I  BV  THOMAS  HOI^FMAN 


MiAMi-OAriE  Coun¬ 
ty's  rr  operations 
center  serves  the 
largest  metropoli- 
j  tan  area  in  the  sutc  of  Florida 
I  and  is  siafFed  around  the 
clock.  Not  surprisingly,  its 
j  managers  have  had  to  come  up 
with  innovative  ways  to  bal¬ 
ance  the  county's  IT  require¬ 
ments  with  the  needs  of  the 
center's  workers  —  especially 
when  natural  disasters  such  as 
hurricartes  occur. 

Labor  Day  weekend,  when 
Hurricane  Frances  struck  the 
stare,  was  a  prime  example.  In 
order  to  continue  supporting 
vital  IT  services  such  as  the 
county's  VAX-based  911  sys¬ 
tem  and  its  police  and  fire  ra-  , 
dio  network  during  the  storm, 
the  operations  center's  650- 
person  staff  split  into  two 
groups  working  12-hour  ^ifis. 

And  to  keep  IT  workers 
close  to  their  loved  ones  dur¬ 
ing  the  hurricane,  families 
were  encouraged  to  camp  out 
in  the  Miami  data  center,  said 
Ruben  Lopez,  the  county's 
chief  technology  officer. 


“Wc  try  to  be  as  accommo¬ 
dating  as  possible  so  people 
can  be  with  their  families,  es¬ 
pecially  during  the  lockdown 
situation."  said  CIO  Judi  Zito. 
referring  to  the  IT  depart¬ 
ment’s  practice  of  not  allow¬ 
ing  anyone  to  enter  or  leave 
the  data  center  during  emer¬ 
gencies.  “I  wouldn't  want  to  be 
here  during  a  lockdcnvn  if  my 
elderly  parents  were  staying  at 
my  house."  she  added.  "I’d 
want  tobe  with  them." 

‘Juggling  Act’ 

Zito's  flexible  approach  to  bal¬ 
ancing  operational  and  staff 
needs  during  a  disaster  re¬ 
flects  the  kind  of  strategies 
that  many  IT  executives  have 
developed  durir^  their  tenures 
in  the  Sunshine  State,  which 
has  been  hit  by  two  hurricanes 
in  the  past  month  and  last 
week  was  bracing  for  a  third 
—  Hurricane  Ivan  —  that 
could  arrive  early  this  week. 

Staffing  during  hurricanes 
"is  certainly  a  juggling  act." 
said  David  Gawaluck.  CIO  at 
Lakeland  Regional  Medical 
Center  in  Lakeland.  Fla.  To 
help  support  critical  medical 
systems  during  the  height  of 
Frances,  the  medical  center 
had  eight  volunteers  from  its  j 
65-person  IT  department  stay  I 


was  »te  second  bofucjne  to  hit  FJo/ida  m  less  than  a  month. 


at  the  851'bed  facility.  “Fortu¬ 
nately.  we  have  lots  of  beds 
here."  Gawaluck  said  wryly, 
adding  that  other  IT  staffers 
stayed  at  home  so  they  would 
be  fresh  when  needed. 

“Wc  worry  about  our  peo¬ 
ple,  because  you  need  them  to 
come  back  into  work  and  they 
need  to  deal  with  their  fami¬ 
lies  and  homes."  said  Lew 
Temares,  CIO  at  the  Universi¬ 
ty  of  Miami.  The  university 
kept  10  IT  staffers  at  its  cen¬ 
tral  campus  in  Coral  Gables 
over  Labor  Day  weekend  to 
monitor  servers  and  commu¬ 
nications  systems  during  the 
storm.  Temares  said. 

The  school,  which  ranked 
second  on  Compuierworltfs 
2004  Best  Places  to  Work  in 


IT  list,  has  a  tight-knit  siafTof 
about  300  rr  workers.  One 
staffer  drove  to  the  home  of  a 
colleague  who  didn’t  have  wa¬ 
ter  to  deliver  ice,  according  to 
Temares.  Other  workers  who 
were  in  need  of  help  received 
food  and  other  supplies  from  a 
crisis  management  team  that 
the  IT  department  has  set  up. 

Bacardi  USA  Inc.,  the  U.S. 
importing,  marketing  and 
sales  ann  for  wine  and  spirits 
producer  Bacardi  Ltd.,  took  a 
different  tack.  It  shut  down  its 
Miami  and  Jacksonville  data 
centers  on  Sept.  2  and  trans¬ 
ferred  data  processing  activi¬ 
ties  to  an  IT  facility  in  Puerto 
Rico  for  five  days,  said  Doug 
Watson,  director  of  IT  for  the 
Americas.  0493S6 


ffShofjsfVepaiB  for  Wwtrt,  Suffer  Minimal  Disn^rt^ 


Hurricane  Frances  dtinped  near¬ 
ly  15  inches  of  tain  on  some  parts 
of  Flofida.  But  IT  managers  nter- 
vietMd  Iasi  week  said  thee  data 
centers  w«re  spared  mafor  dam¬ 
age  and  mainly  suffered  power 
(ksnigiions  that  led  them  to  refy 
on  diesef  generafois  to  keep  sys¬ 
tems  running. 

*l^'re  sti  padding  faster 
Ifan  the  waters  are  nsing.' said 
David  Gawaluck.  CIO  at  LNteland 
Re^cnal  Medical  Center.  Soak- 
rig  rains  knocked  out  power  to 
one  of  the  hospilBl's  nursng  units 
on  Sept  5.  forcing  the  IT  learn  to 


run  the  unit's  PCs  and  other 
equipment  on  generator  power 
for  four  hours.  Gawaluck  sfod. 

He  added  that  two  days  before 
Fiances  amved.  the  hos^  sent 
a  set  of  backup  storage  tapes  to 
an  Iron  Mountain  Inc.  data  center 
in  f^iiladelphia  as  a  precaution. 
AsittumedouLlakelandRe- 
gionars  data  cente  had  electrici¬ 
ty  throughout  the  storm. 

At  Lodrieed  Martin  Enterpnse 
Information  ^fstems.  help  desk 
cans  that  are  nonnaly  split  be¬ 
tween  ladliiies  in  Ortando  ml 
Denver  were  ail  routed  to  Denver 


over  the  Labor  Day  weekend, 
said  Barie  Hrisdaie.  dvactor  of 
communications. 

Company  officials  also  decid¬ 
ed  to  take  three  einaN  servers 
that  support  7.000-plus  Odando- 
area  workers  ofHine  before 
Frances  h«.  Hinsdale  said.  In  ad¬ 
dition.  they  took  down  nine  appli¬ 
cation  servers  across  the  state, 
including  one  m  Lakeland  that 
supports  a  significant  anount  of 
payroll  and  finance  processing. 
Fortunately.  Lockheed  Marlin's 
Orlando  data  center  didnT  suffer 
any  physical  damage,  she  said. 


The  Ikvversity  of  MierTM  dkin't 
Sidfer  any  IT  disruptions,  but  QO 
Lew  Temares  said  he  and  tW 
staff  teamed  a  valuabie  lesson. 

The  univeisily  runs  a  server- 
based  system  from  Oiebold  Inc. 
that  lets  studenls  use  combined 
identificaion  and  debit  cards  to 
pay  for  meals  and  gam  access  to 
various  buildings.  "We  lucked  out 
hecw  our  cenbai  generator 
didn't  go  down."  Tamvas 
'But  If  it  had.  we  could've  lost  ac¬ 
cess  to  the  system  tor  18  hours.' 
The  IT  team  now  plans  to  use 
servers  located  off-cantous  to 
back  up  the  system. 

-  ThomasHofhjwi 
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Under  Pressure,  ISP  Sawis  Agrees 
To  Boot  Spammers  Off  Its  Networks 


BV  JAIKUMAIt  VIJAVAN 

Antispam  campaigners  scored 
a  notable  victory  last  week 
when  they  helped  prod  Inter¬ 
net  service  provider  Sawis 
Communications  Inc.  to  agree 
to  pull  the  plug  on  40  custom¬ 
ers  that  the  company  acknowl¬ 
edged  were  using  its  networics 
to  send  out  e-mail  spam. 

St.  Louis-based  Sawis  also 
annotmeed  that  it  will  work 
with  The  Spamhaus  Project,  a 
London-based  antispam 
group,  to  identify  and  dJscon- 
nea  other  clients  who  engage 
in  spamming  activities. 

Spamhaus  CEO  Steve  Un- 
ford  said  the  moves  are  a  step 
in  the  right  direction  for 
Sawis,  which  has  customers 
in  more  than  40  countries  and 
claims  75  of  the  top  100  banks 
worldwide  among  its  client 
base.  Over  the  past  few 
months,  Sawis  had  emerged 
as  one  of  the  world's  largest 
hosts  of  spam  operators, 
according  to  Linford. 

But  the  companies  being 
given  the  boot  represent  only 
a  portion  of  the  137  spammers 
that  Spamhaus  has  identified 
as  being  hosted  by  the  service 
provider.  Linford  added.  ‘The 
40  that  Sawis  is  gettmg  rid  of 
arc  only  the  real  hard-core  ele¬ 
ments  of  the  spammer  com¬ 
munity  that  no  other  network 
will  touch,”  he  said. 

Sawis  CEO  Rob  McCor¬ 
mick  said  the  liming  of  the 
company's  announcement 
wasn't  driven  by  pressure 
from  Spamhaus  and  other 
antispam  groups  alone.  Sawis 
has  always  had  strong  spam- 
related  policies,  McCormick 
said,  adding  that  many  of  the 
recent  problems  involved  cus¬ 
tomers  the  company  inherited 
when  it  acquired  C^le  & 
Wireless  PLCs  US.  Web  host¬ 
ing  operations  in  January. 

“We  bou^i  a  new  company, 
and  we  were  focused  on  cut¬ 
ting  costs  and  getting  h  back 
to  profitability,”  McCormick 
said.  It  has  taken  time  for 
Sawis  to  figure  out  wdiich  of 
the  new  customers  didn’t 
meet  its  acceptable-use  policy. 


he  noted.  But  now  the  compa¬ 
ny  will  enforce  its  standard 
policies  with  the  former  Cable 
&  Wireless  customer  base. 
McCormick  said. 

Outside  Influence 

Sawis'  pledge  to  rid  its  net¬ 
works  of  spammers  is  an  indi¬ 
cation  of  the  pressure  that  anti- 
spam  groups  can  put  on  com¬ 
panies.  said  Peter  Christy,  an 
analyst  at  NetsEdge  Research 
Group  in  Los  Altos,  rjilif 
Several  antispam  groups, 
including  Spamhaus  and  the 
anonymously  run  Spam  Ihe- 
vention  Early  Warning  System 
(SPEWS),  h^  begun  blacklist¬ 
ing  entire  blocks  of  IP  ad- 


:  dresses  owned  by  Sawis. 
Adding  to  the  pressure  was 
the  fact  that  groups  such  as 
SPEWS  were  “overblocking" 
Sawis’  IP  addresses,  which 
results  in  even  nonspammers 
finding  themselves  on  anti¬ 
spam  blacklists. 

Several  internal  memos 
posted  on  a  whistle-blower 
Web  site  by  a  former  Sawis 
employee  suggested  that  the 
company  may  have  suc¬ 
cumbed  to  such  pressure.  In 
one  internal  memo,  a  Sawis 
executive  likened  SPEWS  to  a 
■Vigilante  organization  with  a 
diffuse  international  exis¬ 
tence."  In  another,  a  Sawis  ex¬ 
ecutive  cautioned  about  the 


business  problems  that  such 
extensive  blacklisting  can 
cause  and  questioned  Sawis' 
ability  to  continue  selling  its 
services  to  major  users.  Mc- 
Comtick  didn't  dispute  the 
authenticity  of  the  memos. 

Real-time  blacklists,  many 
of  which  are  freely  available, 
arc  widely  used  by  companies 
to  block  e-mail  from  known 
spammers.  For  instance.  Spam¬ 
haus  claims  that  its  blacklists 
are  used  by  an  estimated  260 
million  Internet  users. 

Christy  said  that  although 
many  antispam  groups  have 
high  standards  when  it  comes 
to  blacklisting,  others  are  run 
by  "overemhusiastic”  volun¬ 
teers  who  sometimes  “make 
judgments  that  may  or  may 
twt  be  a  reasonable  view"  of  a 
company's  e-mail  activities. 

€»  49353 
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Dell  Seeks  to  Improve  Services  Ihrough  Support  Hubs 

New  China  fecilitv 


opens:  more  due 
in  Asia  and  Europe 


ev  ,1UAN  CARLOS  PEREZ 

Dell  Inc.  is  pushing  ahead 
with  plans  to  open  a  series  of 
IT  support  hul»  worldwide  in 
an  effort  to  improve  its  ability 
to  serve  customers,  especially 
corporate  users. 

week.  Dell  opened  a 
support  facility  that  it  calls  an 
enterprise  command  center 
(ECO  in  Xiamen,  China,  to 
serve  users  in  that  country. 
That  facility  is  the  hardware 
vendor's  second  ECC  joining 
one  set  up  last  November  in 
Round  Rock.  Texas,  to  support 
customers  in  the  U.S..  Cranada 
and  Latin  America. 

Dell  said  that  later  this  year, 
it  plans  to  open  an  ECC  in 
Limerick,  Ireland,  for  its  Euro¬ 
pean  customers,  as  well  as  a 
fruity  in  Japan.  It  added  that 
it  expects  to  cut  the  ribbon  on 
another  ECC  in  the  Asia-Pacif¬ 
ic  region  early  next  year. 

“The  goal  here  is  to  have 
consistent  enterprise  support 
in  all  regions  of  the  world,” 
said  Jan  Uhrich.  vice  president 
of  enterprise  services  at  OelL 
Althou^  each  ECC  will  sup¬ 


port  only  the  country  or  area 
in  which  it's  located,  the  cen¬ 
ters  will  be  linked  in  order  to 
give  Dell  broad  visibility  into 
all  service  incidenis  involving 
customers  that  have  glc^  op¬ 
erations,  Uhrich  said. 

Regional  Focus  Woria 

Locating  customer  service 
hubs  in  specific  countries  and 
regions  is  a  good  move  for 
Dell  and  should  benefit  its 
user  base,  said  Patrick  Sayers, 
an  analyst  at  Technology  Busi¬ 
ness  Research  Inc.  in  Hamp¬ 
ton,  N  JT.  “You  get  the  client 
intimacy,  because  [ECC 
staffers]  don't  have  to  struggle 


to  overcome  the  customs  and 
culture,"  Sayers  said. 

Dell  b  known  as  an  innova¬ 
tor  in  making  its  business 
processes  more  efficient,  so 
it’s  not  surprisii^  to  see  the 
company  aggressively  mo\'ing 
to  improve  the  way  it  provides 
services.  Sayers  addetl  noting 
that  services  b  a  growing  bus¬ 
iness  for  Dell.  “What  they're 
doing  b  translating  the  suc¬ 
cess  they've  had  on  the  hard¬ 
ware  side  managing  their  sup¬ 
ply  chain  and  transferring 
those  techniques  to  the  ser¬ 
vices  side.”  be  said. 

The  ECCs  are  staffed  around 
the  dock  and  act  as  central 


I  repositories  of  customer  scr- 
I  vice  information  for  their  geo- 
I  graphical  areas.  Uhrich  said- 
OcU  plans  to  use  the  E(Xs  to 
continuously  moniioi,  track 
and  manage  service  jobs  from 
beginning  to  end.  she  added. 

For  example,  wdien  a  service 
call  comes  into  a  technical 
support  center  in  the  Amer¬ 
icas,  the  case  b  logged  into 
systems  at  the  Round  Rock 
ECC  and  tracked  from  there 
until  it's  resolved.  The  facility 
in  Texas  has  helped  Dell  sig¬ 
nificantly  improve  the  speed 
with  which  services  arc  deliv¬ 
ered  to  users,  Uhrich  said. 

“In  the  Round  Rock  ECC 
you  can  see  on  maps  where  all 
our  [service]  events  are  in  the 
Americas,  what  their  status  is. 
which  field  technicians  are 
on-site,  which  parts  arc  avail¬ 
able  to  a  particular  customer 
and  so  on,”  she  said.  Uhriefa 
noted  that  prior  to  the  focUi- 
ty's  opening.  DcU  had  services 
delivery  processes,  “bur  the 
people  were  in  different  orga¬ 
nizations,  buildings  and 
groups,  and  the  process  wasn’t 
as  ti^Uy  imegraied” 

04836B 


I  Perez  writes  for  the  (DG 
Newsservice. 


JMPITBm  Mii*.n.2IM 


NEWS 


www.computefworld.com 


Lexmark  Recafls 
Laser  Printers 

Umiwk  biternttfonal  Inc.  is  r»- 
ctfbig  about  39.400  tMor  print- 
on.  irwhidbig  mobals  that  tt  man- 
irfaclurod  tor  IBM  and  DaN  Inc. 
The  Laiington.  Ky.-hasad  eompa- 
iry  and  tha  U.S.  Conaumar  Prod¬ 
uct  Salaty  Commliaion  taamad 
that  the  prinlars  can  short-dreuit 
and  oxpoaa  users  to  a  patonhal 
electrical  shodL  The  racallad 
printars  wore  sold  from  May  to 
August  saM  Uzrnarfc.  which  is 
offering  to  replace  the  devices. 

Sun  Adds  Blades 
To  Hs  Netra  Line 

Sun  Mcraqium  Inc.  nut  yw 
plam  to  add  Uadi  mncn  Is  Us 
Naira  ina  nl  ayataraa  lat  usan  In 
dia  talacnniniunicaliona  Mualiy. 
Siai  art  oftar  nao  Naba  Uadas - 
a  Unm-haaad  da«ica  bull  around 
Advanced  Wcm  Osidcas  lnc.'s 
OpMron  procsaanr  and  amrlhar 
lialuaaiSolarlBandSun’sUlfra- 
Ssarc  cMsa.  Sun  said  Hia  ayatnma 
aril  lun  ibnlaf  pridni.  but  I 
dUnt  (fisdosa  datalo. 

Microsoft  Upgrades 
Keytxiards,  Mice 

MicreeefI  Cerp.  has  added  a 
curved  keyboard  with  the  same 
iiyeut  as  traditional  dovieoe.  H 
also  rntroduoad  a  wireleii  opticai 
mouse  for  notebook  PCs  and  a 
roadar  that  Ms  iMrs  scM  thab 

fingarpibito  Inrtsad  of  entsrtng 
log-bi  names  and  passerords 
wfwn  they  boot  up  PCa.  But  the 
company  racommandad  tfiet  cor¬ 
porals  usars  continus  to  uas 
strong  passwords  to  protact  data. 

Operations  Chief 
To  Leave  McAfee 

McAlaabie.aaidllialSla|ihan 
Riebards  plans  la  ralrs  tram  Ida 
lob  as  cbM  oparallng  officar  Md 
dual  Unandal  adlcar.  sMadlvs 
0ac.3l.TlMSanlaClan.CdK- 
baaad  esnpany  la  aaaiddag  for  a 
CFO  but  dsaanl  plan  lb  ama  a 
new  head  dcsaraalona. 


CMTKMini 


HOT  TECHNOLOOY  TRENDS,  NEW  PRODUCT 
NEWS  AND  INDUSTRY  GOSSIP  BY  MARK  HALL 


Sarb-OxDocs 
Cost  a  Lot  More... 

...  than  most  paople  think.  AMR  Research  Inc.  in  Bos¬ 
ton  estimates  that  the  average  company  will  blow 
through  about  $1  million  in  Sarbanes-Oxley  costs  per 
SI  billion  in  revenue,  just  to  do  what  analyst  John 
Hagcrty  calls  “a  document  exercise"  that  organizes 


everything  for  their  auditors.  companies  from  stock  cx- 
Worse.  unlike  Y2k.  which  was  chaises  could  be  a  popular 
a  one-time  crunch,  compli-  punishment  among  the  SEC 
aoce  with  the  Sarbancs-Oxle>  lawyers.  And  sending  execu 
Act  is  an  annual  event  like  tax  lives  to  fail  likely  will  contir 
preparations  —  but  possibly  I  ue  to  be  a  crowd  pleaser  wit 


even  less  fun.  What  con¬ 
tributes  greatly  to  the  cost, 
observes  Neal  Selvin.  chief 
marketing  olftcer  at  Vienna. 
Va.'based  Approva  Corp.,  is 
the  fact  that  “auditors  have 
homegrown  rule  books,  and 
they  don’t  have  to  tell  cus¬ 
tomers  what  they're  looking 
for."  So  companies  search 
hither  and  yon  for  every  con¬ 
ceivable  compliance-related 
document  beouse  they  don't 
want  to  get  into  hot  water 
with  the  Se¬ 
curities  and 
Exchange 
Commission, 
which  Sehrin 
predicts  “will 
make  an  ex¬ 
ample  of  a 
few  people  to 
prove  that 
SOX  has 
teeth."  How? 
Delisting 


punishment  among  the  SEC's 
lawyers.  And  sending  execu¬ 
tives  to  fail  likely  will  contin¬ 
ue  to  be  a  crowd  pleaser  with 
them.  If  you’re  not  already 
prepping  for  your  audit,  well, 
good  luck.  But  you  can  still 
call  Sehrin.  He  claims  that  his 
software.  BizRights  2.1.  is 
based  on  real  rules,  written 
by  real  auditors  whom  Ap¬ 
prova  has  lured  away  from 
PricewaterfaouseCoopers, 
Ernst  &  Young  and  other 
firms.  BizRights  currently 
works  with  any  SAP  installa¬ 
tion,  but  in  early  2005  Appro- 
va  will  add  PeopIeSoft’s  appli¬ 
cations  to  its  auditing  prow¬ 
ess.  Starting  at  $100,000. 
BizRights  isn't  cheap  ~  but  it 
costs  less  than  doing  it  your¬ 
self.  it  appears. 


!  ...togMyaursoflmreind 
hvdwara  asMto  in  ontor.  That 
might  be  the  strategy  some 
CIOs  are  taldqg,  given  the 
uptick  in  business  that  Altiris 


1  Inc.  is  attributing  to  reguJato- 
i  ry  compliance  requirements, 
j  Lindon.  Utah-based  Altiris 
I  makes  tools  to  centrally  man- 
5  age  rr  assets  ihrou^out  their 
life  cycles,  and  Chief  Technol¬ 
ogy  Officer  Dwain  Kingbom 
says  some  IT  executives  think 
ensuring  that  each  device  has 
the  right  software  configura¬ 
tion  and  is  secured  will  help 
them  pass  compliance  audits. 
For  example,  he  points  out 
that  handheld  computers  be¬ 
ing  used  in  the  field  need  to 
be  properly  accounted  for. 
with  all  end-user  rights  and 
privileges  assigned  by  and 
known  to  IT.  Plus,  you  have  to 
be  able  to  automatically  de¬ 
stroy  data  on  handhelds  if 
they’re  not  synchronized  reg- 
ulariy  with  servers,  in  case 
they  have  been  lost  or  stolen. 
Kinghom  says  these  security 
features  will  be  added  to  the 
Altiris  Client  Man^ment 
Suite  in  Q4. 

Browser  beta 
builds  buyer  trust. . . 

...  by  wifying  ¥tob  Site  authen¬ 
ticity.  Today,  GeoTrust  Inc.  in 
Wellesley.  Mass.,  releases  the 
beta  of  TrustWatch,  a  valida¬ 
tion  tool  that  runs  in  Internet 
Explorer  and  Netscape 
browsers.  TrustWatch  indi¬ 
cates  whether  GeoTrust  has 
verified  a  URL  address  as  that 
of  a  Intimate  Web  site.  Geo¬ 
Trust  and  VeriSign  Inc.  are 
the  two  leading  companies 
used  by  online  operations  to 
validate  that  their  transac¬ 
tions  are  secured.  GeoTrust’s 
new  program  is  free  to  any¬ 
one  who  downloads  the 
ActiveX  component  from 
www.fnisfwatcft.com.  Thist- 
Watch  creates  a  tool  bar  in  a 
browser  that  shows  whether  a 
Web  site  is  verified  as  authen¬ 
tic  or  not.  says  GeoTVust  CEO 
Neal  Creighton.  Blacklisted 
sites  such  as  known  phishing 


operations  draw  a  warning 
notice,  and  browsers  aren't 
permitted  to  point  to  them. 
Creighton  says  GeoTrust  and 
VeriSign  have  verified  "only” 
500.000  Web  shes,  less  than 
1%  of  the  total  number  — 
making  the  rest  of  the  Web 
potentially  untrustworthy 
territory. 

IBM’s  billkm-dollar 
question... 

...  is  whether 
itwiilship 
Oombio  7  sHtb 
DB2.  At  least 
that’s  what 
Steven  Birch- 
field.  CEO 
ofTUcson, 
Ariz.*based 
Automation 
Centre  LC  is 
asking.  He 
thinks  the  debate  inside  IBM 
is  whether  to  ship  a  scaled- 
down  version  of  DB2  with  the 
Domino  upgrade  (due  early 
next  year)  as  a  standard  data 
store,  in  addition  to  the  tradi¬ 
tional  Lotus  Notes  database. 
In  the  current  beta  of  Domino 
7.  DB2  is  offered  as  an  lotion. 
Btrchfield  aigues,  The  prob¬ 
lem  with  Notes  has  always 
been  gening  data  out  ofil 
into  other  applications."  Thai 
difficulty  has  forced  third- 
party  applications,  such  as  his 
company’s  Tracker  Suite,  to 
extract  the  data  to  an  external 
database.  "And  that’s  usually 
been  Microsoft  SQL  Server 
because  it  was  the  cheapest." 
he  says.  If.  as  be  suggests, 

DB2  is  the  underlying  data¬ 
base.  there's  no  need  to  port 
Notes  apps  to  SQL  Server. 

Plus,  with  the  Notes  installed 
base,  DB2  will  immediately 
eclipse  Oracle  as  the  world's 
top  database.  IBM  is  mum  on 
the  topic,  but  Birchfieid  spec¬ 
ulates  that  the  argument  rag¬ 
ing  inside  IBM  is  whether  the 
cnaricet-share  gains  will  out¬ 
weigh  the  revenue  from  sell¬ 
ing  DB2  as  an  option  to  the 
Domino  7  release.  Stay  tuned. 
049313 


Hiiu’ie  invited. 

(downtime,  excess  cost  and  human  errors  are  not) 
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From  Houston  to  Hong  Kong,  smart  IT  managers  everywhere  are  trading  in 
legacy  data  center  design  for  a  more  available,  agile,  approach. 

Finally,  racks,  power,  cooling,  and  management  can  become  a  competrdve 
edge  that  moves  as  fast  as  your  business,  rather  than  an  expensiveheadache. 
The  opportunity  to  make  a  difference  is  real,  and  you  can  see  it  working  at  a 
site  near  you.  Come  and  see  the  future! 

Food  and  thought. 

You're  invited  to  represent  your  company  at  an  ARC  Real-time  InfraStruXure' 
Award  Dinner,  coming  to  a  city  near  you.  There,  not  only  will  you  discover  the 
latest  innovations  in  data  center  physical  infrastructure,  but  you'll  enjoy  a  good 
meal  on  us,  shared  with  some  of  the  most  advanced  thinkers  in  the  industry. 
What  better  way  to  learn  how  your  peers  are  keeping  pace  with  InfraStruXure, 
on-demand  architecture  for  network-critical  physical  infrastructure  than  to  see 


Highly  available.  Adaptable.  Lower  cost. 

Scalable,  modular  InfraStruXure  architecture  includes  power,  cooling,  racks  and 
physical  structure,  security  and  fire  protection,  and  cabling,  as  well  as  the  man¬ 
agement  and  servicing  of  these  elements.  InfraStruXure  leaves  you  poised  to 
quickly  adapt  to  change  and  increase  system  availability  -  all  at  a  lower  cost  and 


InfraStri^vure 


On-demand  archoecture  for  networt- 
crXical  physical  infrastructure 


with  fewer  hasles  than  legacy  design  It’s  a  rare  win-win  situation  -  you  save 
both  money  and  time,  allowing  you  to  invest  more  in  the  applications  that  drive 
real  competitive  advantage  for  your  company.  After  all,  is  your  next  promotion 
really  coming  from  your  choice  of  battery  vendors? 

Join  the  crowd. 

Don't  miss  this  oppodunity  to  see  industry  best  practices  in  action  See  first¬ 
hand  how  companies  worldwide  are  reaping  the  benefits  of  InfraStruXure's 
standardized,  pre-tested  approach  to  data  center  design  Because  this  exclusive 
event  is  limited  to  IT  professionals,  there  are  only  a  limited  number  of  available 


Register  today! 

Events  fill  quickly,  and  If  we  are  unable  to  book  your  attendance  at  your  first 
choice,  we  will  do  our  best  to  accommodate  you  as  quickly  as  possible. 


No  wires,  no  smoke  and  mirrors  -  just  higher  availability  and  lower  costs. 

See  a  live  InfraStruXure"  installation  near  you  today.* 

To  Register  Online  -  Go  to  h1lf://pmmojaiKjconi  and  enter  key  code  t576y 

By  Phone  -  Call  1-888-289-APCC  (2722)  x3235  Legendary  Reliability* 


•Registration  is  required.  Qualified  IT  professionals  will  receive  e-mail  confirmation 
02004  American  Power  Conversion  Corporatx>n.  All  Tracfemarks  are  the  propertv  of  meir  owners.  E-mail:  esufXxxtOapcc  com 


132  Fairgrounds  Road.  West  Kingston.  Rl  02992  USA  ISXMHEF-US 
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New  Nortel  Switches 
Provide  SIP  Support 


( is  to  supcKirt 
■\  irtii;il  L'ntcrpriscs' 
for  ivniolo  users 


1^^  I  1  tJ- will  jn- 

I  itouni-f  .1  s^Tic' >•! 

-A.  ^  '“•Itw.if^*  upj;r.ides 

.inJ  ni'w  \*iitv  swiichc'-  .inJ 
phonos  th.it  moorporjto  iho 
V-sHin  IniiLition  Protocol 
standjrd  .ind  .iro  di*sij;nod  to 
help  romoic  wt»rkors  function 
js  p.in  of  inti-pr.ited  teams 
within  large companics- 

Wiih  si»  many  workors  now 
assigned  to  g»hs  outside  of 
iMrp«iraie  headquarters,  the 
demand  for  efficient  and  se¬ 
cure  communications  and 
collaboration  capabilities  is 
greater  than  ever,  said  Clent 
Richardson,  vice  president  of 
global  nurks'ting  at  Nortel, 
rhe  Brampton.  Ontario-Ktsed 
compam  plans  to  dirTerenu.iie 
itMj'lf  fr»»m  compi'iitors  by  us¬ 
ing  ‘ill’  to  support  virtual  en¬ 
terprises.  he  added. 

.•\m»‘ng  the  new  ••lYi  rings. 
Nortel  is  .umouncing  Release 
4iioftts(  Jtmmunieations 
Serwr  ItkHl  voice  switch, 
which  was  priwiousl)  called 
the  Suecc^ssion  ItMK)  Rich.irJ- 
S4»n  noted  th.it  the  vendtir  Is 
rniiving  to  adopt  product 
n.imi-s  that  better  describe 
what  Its  twhnologi  Jik‘s  "Wc 
have  funk)  names,  and  wi-  are 
in  the  midst  ofhrand  simplifi¬ 
cation."  he  said. 

I  he  <;s  ItMMI  upgrade  vvill 
integr.»te  the  product's  IP 


Correction 

A  Story  about  autonomous 
agents  that  ran  n  last  week's 
lechnologir  section  fAgenis  of 
Change*)  mcorrectly  described 
B8N  Technologies  as  a  text  of 
Venzon  Communcabons  Inc. 
Cambridge.  Mass.*b8sed  B6N 
became  an  indeoendent  com- 
Deny  last  March. 


\ oice-sw  itching  capabilities 
w  iih  slP-baseJ  voice,  data  and 
V  iJi-o  applications  supported 
h\  Noriel'v  Multimedia  Com- 
rmiiiic.itions  server  5h)(t, 
Kiehardson  said.  The  Mt.S 
>liHt  is  K  ing  upgraded  to  a 
Release  .^.0  ih.il  offers  com¬ 
bined  support  for  voice  prt*c- 


SIP  intcrnpi-r.ibility.  said  CIO 
loanne  Kossuth. 

The  increased  support  f»*r 
SIP  should  help  make  it  "as 
easy  as  possible"  fur  end  users 
to  connect  to  the  school's  net¬ 
work  and  lessen  development 
demands  as  Olin  considers 
adding  applications.  Kossuth 


essing.  call  management,  desk-  said.  She  added  that  the  up- 
ti>p  video  calling  and  collaKv-  graded  MGS  5100  will  also 


ration  tools,  such  a.s  instant 
messaging  software  and  Web- 
based  applications  for  sharing 
documents  m  real  time. 

b'ranklin  W.  Olin  College 
of  Engineering  in  Needham. 
Mass.,  vvill  upgrade  to  MGS 
5101^  .5,0  nc.\t  month  and  plans 
to  add  GS  1000  4.0  over  the 
Christmas  break  or  next  sum¬ 
mer  to  t.ike  advantage  of  the 


provide  a  single  point  of  pres¬ 
ence  for  end-user  acces.s  to 
instant  messaging  tools. 

The  225-student  college  has 
invested  more  than  S2.5  mil¬ 
lion  in  data  and  voice  commu¬ 
nications  prnduv'ts  from  Nor¬ 
tel  since  it  was  founded  in 
2002.  according  to  Kossuth, 
Olin  evaluated  the  major  nct- 
wiirking  vendors  and  chose 


Cisco  Melds  Add-on  Features 
into  Branch-Office  Routers 


BV  MATT  HAMBLEN 

Gisv'o  bvsienis  Ini.  tomorrow 
plans  to  announce  an  all-new 
line  «if  branch-office  routers 
that  integrate  basic  routing 
v.ipabiliiies  with  IP  voice  sup 
port,  seeuritv  timls  .md  <iiher 
funetionaiiiv. 

features  such  as  Jat.i  each 
ing  and  IPielephony  have 
bcen  available  as  add-ons  l«» 
tasco's  existing  branch  routers 
h»r  some  time.  But  the  add-ons 
severvlv  limited  iheKisic 
prtKVssing  abilities  of  ihe 
routers,  said  Jefl  Wils»»n.  an 
analyst  at  Intimi  ties  Research 
Iiie.  in  San  fose.  (asco  de¬ 
signed  the  new  routers  with 
increa.sed  memory  and  <  :PL' 
capacity  to  overcome  that 
problem.  Wilson  said. 

The  lnii“grated  Serv  ices 
Router  line  includes  siwen 
models  that  range  in  price 
from  S1..5y5  to  SI2.500.  said 
Dave  Frampton.  a  wnior  mar¬ 
keting  director  .it  Cisco.  Two 
of  the  routers  are  aimed  at 
corporate  branch  officios. 


while  four  were  Ji'signeJ  for 
sm.iller  branches  and  one  is 
intended  lor  use  by  small  busi- 
nesM-s.  .-Ml  are  due  early  next 
month,  f  rampton  s,ud. 

IP  Telephony  Support 

RB<-  l>.un  Rauscher  Ine..  a 
Mimicapi'lis-b.isi-d  brokerage, 
plans  to  deploy  Cisco's  new 
2H21  router  this  fall  at  five  I'.S 
branches  serv  ing  .i  total  ol'l.5|| 
workers.  If  the  pilot  rollouts 
are  successful,  the  broker.ige 
w  ill  install  the  routers  at  up  to 
1811  locations  and  convert  the 
offices  to  IP  telephony,  said 
Rich  Biasing,  managing  direc¬ 
tor  of  infrastructure  sen.  iws. 

"'I'his  router  product  is  ar- 


seven  new  routers 
are  due  early  next  month 
and  range  in  price  from 
$1,395  to  S13.500. 


Nortel  as  its  primary  .supplier 
partly  because  of  the  compa¬ 
ny's  commitment  to  standards 
such  as  SIP.  she  said. 

Olin  also  uses  voicc-over-IP 


chitecied  with  IP  telephony  in 
mind,  while  the  previous  at¬ 
tempts  were  add-on  modules  " 
Biasing  s-aid.  -fiollapsing  func¬ 
tions  on  one  box  is  a  big  fea¬ 
ture  becauH*  it  makes  things 
simpler  and.  from  a  support 
standpoint,  a  lot  cleaner.  " 

HeiMusc  the  2821  will  enable 
braneh-offitv  workers  to  move, 
add  and  change  IP  phones  on 
their  i  wvn,  network  operating 
costs  should  go  down  over 
time.  Blising  noted.  And  with 
the  routers  supporting  IP  tele¬ 
phony  in  the  branches.  RB(' 
Hain  Rauschcr's  annual  tele¬ 
communications  budget  is  ex¬ 
pected  to  drop  20“...  he  said, 
although  he  wouldn't  divulge 
cost  details. 

In  addition,  the  new  router 
will  help  support  centralized 
voice  mail  in  Minneapolis,  so 
the  brokerage  will  be  able  to 


phones  from  Nortel  and  Kos¬ 
suth  estimated  that  its  annual 
network  costs  of  S500.000 
would  be  more  than  doubled 
w  ithout  ViilP.  The  u.se  of  VoIP 
technology  supports  a  range 
of  applications  at  the  college, 
including  unified  messaging 
capabilities  that  allow  voice 
I  mail  messages  to  be  directed 
to  e-mail  accounts. 

Nortel  also  vvill  announce  a 
variety  of  other  hardware  and 
.software  products,  including  a 
new  I'ommunicatiotis  Server 
2101)  voice  switch  that  sup¬ 
ports  SIP  and  is  designed  for 
very  large  companies. 

The  new  offerings  show 
that  Nortel  is  "committed  to 
developing  products  for  the 
enterprise  business."  said  Zeus 
Kcrravala.  an  analy.si  at  rhe 
Yankee  Group  in  Boston.  Nor¬ 
tel  now  gels  just  22'Vof  its 
revenue  from  corporate  users 
but  should  K‘  able  to  increase 
that  figure  with  features  such 
as  its  support  for  SIP.  Kcr¬ 
ravala  added.  O  49325 


expand  and  shift  its  .sales  force 
with  more  flexibility.  Biasing 
said.  He  added  that  the  full  de¬ 
ployment  and  the  addition  of 
IP  telephony  could  be  com¬ 
pleted  wiihln  18  to  24  months. 

Wilson  said  Cisco  devel¬ 
oped  the  Integrated  Services 
Router  line  because  of  ix»m- 
petiiivc  threats  fn»m  venJtirs 
such  as  Juniper  Networks  Inc., 
which  acquired  Net.Screen 
leclmologies  Inc.  in  April  so 
it  could  integraie  NetSca-en’s 
security  capabilities  into  its 
routers.  But.  he  said,  "the 
fruits  of  that  acquisition  are 
yet  to  be  seen." 

D.tvid  Willis,  an  analyst  at 
Mi-ia  Group  Inc.,  agreed  that 
competition  pushed  Cisco  to 
release  the  new  routers.  But 
he  added  that  "the  idea  of  us¬ 
ing  a  single  mitdular  platform 
lust  makes  sense."  O  49327 
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Nortel's  Additions 


(lOal  is  to  support 
■%irtual  enterprises' 
for  remote  users 


I  voice-switching  capabilities  j  SIP  interoperability,  said  CIO 
with  SIP-based  voice,  data  and  Joanne  Kossuth. 


av  MATT  HAMBLEN 

Nurtfl  networks 
Ltd.  today  wUI  an¬ 
nounce  a  series  of 
software  upgrades 
and  new  voice  switches  and 
phones  that  incorporate  the 
Session  Initiation  Protocol 
standard  and  are  designed  to 
help  remote  woricers  function 
as  part  of  integrated  teams 
within  large  companies. 

With  so  many  workers  now 
as^gncd  to  jobs  outside  of 
corporate  headquarters,  the 
demand  for  eflicient  and  se¬ 
cure  communications  and 
collaboration  capabilities  is 
greater  jhan  ever,  said  Clent 
Richardson,  vice  president  of 
global  marketing  at  Nc^eL 
The  Brampton.  Ontario-based 
company  plans  to  differentiate 
itself  from  competitors  by  us¬ 
ing  SIP  to  support  viritial  en¬ 
terprises.  he  added. 

Among  the  new  offerir^ 
Nortel  is  announcing  Release 
4i)  of  its  Communications 
Server  1000  voice  switch, 
which  was  previously  called 
the  Succession  1000.  Richard¬ 
son  noted  that  the  vendor  is 
moving  to  adopt  product 
names  that  better  describe 
what  its  technology  does.  “We 
have  fonky  names,  and  we  are 
in  the  midst  of  brand  simplifi¬ 
cation.*'  be  said 
The  CS 1000  upgrade  will 
integrate  the  product's  IP 
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video  applications  supported 
I  by  Nortel’s  Multimedia  Com- 
'  munications  Server  5100. 
Richardson  said.  Hie  MCS 
5100  is  being  upgraded  to  a 
Release  3.0  that  offers  com¬ 
bined  support  for  voice  proc* 


The  increased  support  for 
SIP  should  help  make  it  “as 
easy  as  possible”  for  end  users 
to  connect  to  the  school’s  net¬ 
work  and  lessen  development 
demands  as  Olio  considers 
adding  applications.  Kossuth 


- - -  rkUSSUL 

essing.  cJl  muugcmcnl.  desk-  said.  She  added  that  the  up- 
top  video  calling  and  coUabo-  graded  MCS  5100  will  also 


:  ration  tools,  such  as  instam 
messaging  software  and  Web- 
based  applications  for  sharing 
documents  in  real  time. 

Franklin  W.  Olin  College 
of  Engineering  in  Needham, 
Mass.,  will  upgrade  to  MCS 
5100  3.0  next  month  and  plans 
to  add  CS  1000  4.0  over  the 
Christmas  break  or  next  sum¬ 
mer  to  take  advantage  of  the 


provide  a  single  point  of  pres¬ 
ence  for  end-user  access  to 
instant  messaging  tools. 

The  225-student  college  has 
invested  more  than  S2.5  mil¬ 
lion  in  data  and  voice  comrou- 
nicatiofis  products  from  Nor¬ 
tel  since  it  was  founded  in 
2002,  according  to  IGsssuth. 
Olin  evaluated  the  major  net¬ 
working  vendors  and  chose 


Cisco  Melds  Add-on  Features 
Into  Branch-Office  Routers 


BV  MATT  HAMBLEN 

Cisco  Systems  Inc.  tomorrow 
plans  to  announce  an  ali-new 
line  of  branch-ofTice  routers 
that  integrate  basic  routing 
capabilities  with  IP  voice  sup¬ 
port.  security  tools  and  other 
functionalit>-. 

Features  such  as  data  cach¬ 
ing  and  IP  telephony  have 
been  available  as  add-ons  to 
Cisco's  existing  branch  routers 
for  some  time.  But  the  add-ons 
severely  limited  the  basic 
processing  abilities  of  the 
routers,  said  Je^WUson.  an  , 
analyst  at  Infonetics  Research 
Inc.  in  San  Jose.  Cisco  de¬ 
signed  the  new  routers  with 
increased  memory  and  CPU 
capacity  to  overcome  that 
problem.  Wilson  said. 

The  Integrated-Services 
Router  line  includes  seven 
models  that  range  in  price 
from  SIJ95  to  S13.500,  said 
Dave  Fnunpton.  a  senior  mar¬ 
keting  director  at  Cisco  Two 
of  the  routers  are  aimed  at 
corporate  branch  offices. 


I  while  four  were  designed  for 
j  smaller  branches  and  one  is 
intended  for  use  by  small  busi¬ 
nesses.  All  are  due  early  next 
month.  Frampion  said. 

IP  Telefihony  Support 

RBC  Dain  Rauschcr  Inc.,  a 
Minneapolis-based  brokerage, 
plans  to  deploy  Cisco’s  new 
2821  router  this  fall  at  five  US. 
branches  serving  a  total  of  150 
workers.  If  the  pilot  rollouts 
arc  successful  the  brokerage 
will  install  the  routers  at  up  to 
180  locations  and  convert 
offices  to  IP  telephony,  said 
Rich  Biasing,  managing  direc¬ 
tor  of  infrastructure  services. 

This  router  product  is  ar- 
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Nortel  as  its  primary  supplier 
partly  because  of  the  compa¬ 
ny’s  commitment  to  standards 
such  as  SIP.  she  said. 

Olin  also  uses  voice-over-IP 


chiiected  with  IP  telephony  in 
mind,  white  the  previous  at¬ 
tempts  were  add-on  modules," 
Biasing  said.  “Collapsing  func¬ 
tions  on  one  box  is  a  big  fea¬ 
ture  because  it  makes  things 
simpler  and.  from  a  support 
standpoint,  a  lot  cleaner.” 

Because  the  2821  will  enable 
branch-office  workers  to  move, 
add  and  change  IP  phones  on 
their  own.  network  operating 
costs  should  go  down  over 
time.  Biasing  noted.  And  with 
the  routers  supporting  IP  tele¬ 
phony  in  the  hiimcbes.  RBC 
Dain  Rauscher’s  annual  tele¬ 
communications  budget  is  ex¬ 
pected  to  drop  20%.  he  said, 
although  he  wouldn’t  divulge 
cost  details. 

In  addition,  the  new  router 
will  help  support  centralized 
voice  mail  in  Minneapolis,  so 
the  brokerage  will  be  able  to 


phones  from  Nortel,  and  Kos¬ 
suth  estimated  that  its  annual 
network  costs  of  $500,000 
would  be  more  than  doubled 
without  VoIP.  The  use  of  VoIP 
technology  supports  a  range 
of  applications  at  the  college, 
including  unified  messaging 
capabilities  that  allow  voice 
mail  messages  to  be  directed 
to  e-mail  accounts. 

None]  also  will  announce  a 
variety  of  other  hardware  and 
software  products,  including  a 
new  Communications  Server 
2100  voice  switch  that  sup¬ 
ports  SIP  and  is  designed  for 
very  large  companies. 

The  new  offerings  show 
that  Nonet  is  “committed  to 
developing  products  for  the 
enterprise  business.”  said  Zeus 
Kerravala,  an  analyst  at  The 
Yankee  Group  in  Boston.  Nor¬ 
tel  now  gets  just  22%  of  its 
revenue  from  corporate  users 
but  should  be  able  to  increase 
that  figure  with  features  such 
as  its  suppon  for  SIP.  Ker¬ 
ravala  added.  C  48325 


expand  and  shift  its  sales  force 
with  more  flexibility.  Biasing 
said.  He  added  that  the  foil  de- 
!  ployment  and  the  addition  of 
IP  telephony  could  be  com¬ 
pleted  within  18  to  24  months. 

Wilson  said  Cisco  devel¬ 
oped  the  Integrated  Services 
Router  line  because  of  com¬ 
petitive  threats  from  vendors 
such  as  Juniper  Networks  Inc., 
which  acquired  NetScrcen 
Technologies  Inc.  in  April  so 
it  could  integrate  NetScreen’s 
security  capabilities  into  its 
routers.  But.  he  said,  “the 
fruits  of  that  acquisition  are 
yet  to  be  seen." 

David  WUlis.  an  analyst  at 
Meta  Group  Inc.,  agreed  that 
competition  pushed  Cisco  to 
release  the  new  routers.  But 
he  added  that  “the  idea  of  us¬ 
ing  a  single  modular  platform 
just  makes  sense.”  O  49327 


Over  a  million  IT  Professionals 
are  getting  ongoing 
security  guidance. 


Millions  of  your  peers  are  turning  to  the  Security  Guidance  Center  for  the  latest  in  security.  By  visiting  regulariy, 
th^  get  the  tools,  guidance,  and  training  needed  for  better  protection  against  viruses  and  other  security  threats. 
Visit  micro$oftcom/securfty/IT  today  and  see  for  yourself  the  newest  additions,  including: 


Microsoft*  Windows*  XP  Service  Pack  2  with  Advanced  Security  Technologies  Download  it  for  free 
arxl  evaluate  the  latest  updates  for  increased  system  control  and  proactive  protection  against  security  threats. 


Free  Online  Self  Assessment  Complete  this  free,  Web-based  self-assessment  test  to  help 
you  evaluate  your  organization's  security  practices,  and  identify  areas  for  improvement. 


Free  Updates  and  E-mail  Alerts  Stay  on  top  of  the  latest  security  issues  quickly  and 
easily  by  signing  up  for  free  Microsoft  Security  Communications. 


Free  Security  Tools  React  more  effectively  to  potential  security  threats.  Take  advantage  of 

free  tools  and  technologies  like  the  Microsoft  Baseline  Security  Analyzer  and  Software  Update  Services. 


Go  today  to  microsoft.com/security/IT 


C  2004  Mtcrosoh  Corporation  AH  nghtj  reserved  Microsoft  and  Windows  are  either  registered  trademarks ' 
Microsoft  Corporation  m  the  United  States  and/or  other  countries 
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Wall  Street  Execs  Detail 
Updated  Security  Plans 
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3Com  to  Expand 
Router  Offerings 
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Cisco  Buys  NM 
Monitoring  Tools 
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NYSE,  Other  firms  tell  Congress  about  Bonm  trades  per  dax  raid 

steps  they  have  taken  since  9/U  attacks 

^  penetration  tests.  As  a  resuh  of 

**“2?!^  faw-optk  the  tests,  he  said,  the  company 

A  nnga,  making  b  independent  of  reconfigiiied  one  ofits  key  b- 

STHaiT^^  aOotlmtelecoaiiminkDtiona  dlWes.  impfcraetited  bi^- 

a^atidconduita.Britz  ric  Kws..coi«rol  ayatems  and 

SeptUat^ap.  said,  nie  NYSE  and  SIAC  alao  -Ml  bm  eliminated  vbitor  ac- 

tecentiy  completed  vTOk  on  a  ettsa  to  our  operating  centera.- 

>«»>«eKnro*  operations  TCHalsod^^atei- 

oenterthatYdoelngoliyein  tiaiT  data  center  in  Mther 

physical  a^^  secunty  the  fet^qiaror.  part  of  the  country  that  b  billy 

measm^tconnnuclobc  Meanwhile.  John  R.  Mohs  equipped  loulieoKr  one^ 
return  help  protral^  csecutiye  yicc  president  of  tionl^aearingHo™r^ 

ciM  trading  systems  in  the  U.S.  The  Clearing  House  Associa-  Interbank  Ib^Ss  System 

(CHIPS)  tS^ThS^of  a 

aal  Services  Committee  bear-  mew  systems  firm  that  clears  simultaneous  fidhwe  of  the 

c^tZSSr^ty  othertwoCHIPSdmacentera. 

financial  institutions  in  New  “ 


TCH  also  developed  a  ter¬ 
tiary  data  center  in  anftthrr 
part  of  the  country  that  is  fully 
equipped  to  take  over  (^>era- 


said  Moht  Using  custom  data 
mirroring  sofhvare  q>eciany 
<*CTeloped  by  TCH,  CHIPS  was 
able  to  overcome  the  distance 
limitations  of  synchronous 
mirroring  technology  and  still 
achieve  recovery  consis¬ 
tent  wHh  synchronous  mirror¬ 
ing  ^iproaches.  he  said. 

Samuel  R  Gaer.  CIO  of 
New  York  Mercantile  Ex¬ 
change  Inc.  said  all  essential 
enqiloyees  at  his  organization 
have  issued  ceO  phones 
with  two-way  radio  cq»bflity 
and  portable  two-way  e-mail 
devices,  some  of  wfaidi  can 
be  used  to  make  emergency 
phone  calls.  The  woiken  were 
also  given  laptops  with  remote 
connectioD  software  and  cel¬ 
lular  modem  cards  to  wire¬ 
lessly  connect  to  the  ex¬ 
changed  system  resources 
anywhere  cellular  covgr^gy  is 
available,  Gaer  said.  0  48961 


Vbtk  described  the  efforts  that 
continue  to  go  into  bolstering 
security  for  the  nation's  criti¬ 
cal  financial  trading  systems. 

Since  Sept  U,  2001.  New 
York  Stock  Exchange  Inc  has 
spent  more  than  $100  million 
CO  boost  physical  and  cyber 
security  and  improve  r^un- 
dancy  and  business  continuity, 
said  Roben  G.  Britz.  the 
NYSE’s  president  and  co¬ 
chief  operating  officer. 

Among  the  improvements 
are  a  new  contingency  tradii^ 
floor,  an  expansion  of  the 
emergency  command  center 
operated  by  Securities  Indus¬ 
try  Automation  Corp.  (SIAC). 
a  remote  network  operations 
center  and  an  ongoing  effort 
to  establish  a  remote  national 
market  system  data  center. 

The  NYSE  has  also  de¬ 
ployed  a  get^phicaily  dis¬ 
persed  fiber-optic  routing 
backbone  that  would  allow  eq¬ 
uity  brokers  to  maintain  con¬ 
nections  to  the  markets  in  the 
event  of  another  VU-type  of  at¬ 
tack.  Called  the  Secure  Hnan- 
dal  Tiansaction  Inftastiucture 
(SFTI).  it  connects  more  than 
600  ftnanctal  services  firms. 

All  of  the  SFTId  equipment. 
cDfmectkMs.  power  supplies, 
network  links  and  access  cen¬ 
ters  are  redundant,  and  its  ar¬ 
chitecture  features  indepen* 


Sybi^  Offers  Free 
Database  fer  Linux 


•V  STACV  eOWLCT 
In  a  bid  to  expand  the  cus¬ 
tomer  base  for  its  database, 
Sybase  Inc.  last  week  released 
a  free  but  limited  version  of 
the  software  for  deployment 
on  Linux  systems. 

Sybase  Adaptive  Server  En¬ 
terprise  (ASE)  Express  Edition 
for  Linux  uses  the  same  tech- 
Do](^  as  Sybase's  flagship 
ASE  database,  which  has  teen 
losing  ground  to  products 
from  Oracle  Corp,  IBM  and 
Microsoft  Corp.  ASE  Express 
Edition  is  free  for  both  devel¬ 
opment  and  production  use, 
but  H's  limited  to  one  CPU 
2GB  of  RAM  and  SGB  of  total 
data  storage.  It  can  be  down¬ 
loaded  from  Sybase’s  Web  site. 

David  JacobMn,  Sybase's  se¬ 
nior  director  of  database  and 
tools  marketing,  said  the  com¬ 
pany  is  releasing  ASE  Express 
for  free  in  hopes  of  attracting 
customers  who  will  later  up¬ 
grade  to  Sybase's  ASE  Small 
Busine»  Edition,  which  has  a 
license  fee  of  $4.99S  per  CPU. 
or  Enterprise  Edition,  which 
has  a  fee  of  S24.995  per  proc¬ 
essor.  Support  plans  are  avail- 


JUST  THE  FACTS 

The  new  ASE 
Express  Edition: 


able  for  ASE  Express  starting 
at  S2.200  per  year,  but  cus¬ 
tomers  aren't  required  to 
purchase  one. 

Meeting  Demand 

“What  we've  found  is  that  a 
lot  of  customers  arc  turning 
to  open-source  databases  be¬ 
cause  of  tight  budgets.”  said 
^cobson.  “But  open-source 
databases  are  harder  to  use 
than  conventional  databases 
—  you  have  to  download, 
compile,  develop,  deploy  and 
manage  them." 

While  Sybase  ASE  is  avail¬ 
able  for  Windows.  Linux  and 
Unix,  the  company  is  releasing 


ASE  Express  only  for  f  inny 
Jacobson  said  that's  where 
Dublin,  Calil-based  Sybase 
sees  demand.  "Microsoft  has 
entry-level  products,  but  for 
those  moving  from  Unix  to 
Linux,  there's  a  gap,”  he  <aiH 
Forrester  Research  Inc.  ana¬ 
lyst  Noel  Yuhanna  said  the 
move  is  a  good  way  for  Sybase 
to  recapture  some  of  the  mar¬ 
ket  shaie  it  has  lost  in  recent 
years  to  the  big  three  database 
vendors.  “It's  definitely  a  good 
value  proposition  compared  to 
open-source  databases.”  he 
said.  "Sybase  is  a  very  mature 
database,  known  for  reliability, 
availability  and  performance.” 

Yuhanna's  chief  complaint 
about  ASE  Express  is  the  tight 
limitation  on  data  storage.  For 
most  customers,  SGB  isn't 
enough  —  projects  using  free 
open-source  databases  tend  to 
average  10GB  to  20Ga  be  said. 

Sybase  partner  Amit  Okhan- 
dlar,  president  of  consulting 
firm  mLt^ka  Inc.  in  Irvine. 
CaliL.  said  he  expects  to  use 
ASE  Express  on  several  up¬ 
coming  projects  for  cus¬ 
tomers.  "Opcn-source  is  a 
good  way  to  go,  but  down  the 
line,  as  [companies]  grow,  it 
becomes  an  issue,"  he  said. 

"The  problem  with  MyS(^L  is 
I  that  they  cant  sustain  them¬ 
selves  with  it”  O  48952 


MLB.com  knows  the  power  of  SAS‘  software... 


How  does  MLB.com  give  fans 
the  ultimate  baseball  experience? 


\ 


Allan  H.  'Bud"  Selig, 


EN'TERPRlSe  iVTEaiGENCE 
SUPPLIER  iwtellige>«:e 
ORGANIZATIONAL  IMEU.IGENCE 
CUSTOMER  INTELLIGENCE 
INTELLIGENCE  pi>tform 


Millions  of  fans.  Thirty  teams.  One  passion.  And  24/7  aceess  to  it  all  through  MLB.com.  At  the  official  site 
of  Major  League  Baseball,  fans  can  experience  baseball  in  a  whole  new  way  -  from  live  ballgames  to  stats 
in  real  time,  from  history  to  fantasy,  across  the  league  or  by  connecting  to  individual  club  sites.  MLB.com  is 
the  richest  deepest  source  of  original  baseball  news  and  highlights  on  the  Internet.  SAS  is  proud  to  provide 
the  sutc-of-the-att  data  managcmenL  predictive  analytics  and  marketing  automation  softwaie  that's  helping 
Major  League  Baseball  enrich  the  interactive  experience  for  the  hundreds  of  millions  of  visitore  who  make 
MLB.com  such  a  big  hit.  To  find  out  more  about  SAS.  visit  our  Web  site  or  call  toll  free  I  866  887  1363. 

www.sas.com/mlb 
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Judge  Rejects  Antitrust  Claims, 
Lets  Oracle  Pursue  PeopleSoft 


Says  DOJ  didn’t  show  that  acquisition 
would  hurt  competition  in  apps  m^et 


BV  MAiee  L.  SONaiMI 

A  federal  jud^  last  week 
cleared  the  way  for  Oracle 
Corp.  to  proceed  with  its  IS- 
month-old  hostile  takeover 
bid  for  applications  rival  Peo¬ 
pleSoft  Inc,  rejecting  the  U,S. 
Department  of  Justice's  effort 
to  block  the  S77 
biUlon  offer  on  an¬ 
titrust  grounds. 

In  a  164-page 
ruling  tssu^  late 
Thursday.  Chief 
Judge  Vaughan 
Walker  of  the  \JS.  District 
Court  in  San  Francisco  wrote 
that  the  DOps  attorneys  had 
foiled  to  prove  that  a  merger 
of  Oracle  and  PeopleSoft  ‘is 
likely  substantially  to  lessen 
cmnpetition"  in  the  business 
applications  market 

Oracle  immediately  request 
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ed  a  meeting  with  PeopleSoft's 
board  of  directors  and  called 
on  PeopleSoft  to  lift  the  vari¬ 
ous  poison-pill  mechanisms  it 
has  put  in  place  to  fend  off  the 
bid.  In  a  statement.  Oracle  de- 
claml  that  Judge  Walker’s  de¬ 
cision  ‘removes  a  significant 
roadblock  to  the  ac- 
quisidoo.” 

However,  the 
judge  stayed  his 
ruling  for  10  days  to 
give  the  DOJ  a 
chance  to  fUe  an 
appeal,  and  the  agency  said  it's 
considering  doing  so. 

are  disappoinied  In  the 
court’s  decision.”  R.  Hewitt 
I^te,  assistant  attorney  general 
in  charge  of  the  DOps  anUtrust 
division,  said  in  a  statement. 
“We  believe  the  focts  and  evi¬ 
dence  in  this  case  support  our 


position  that  Oracle’s  pro¬ 
posed  acquisition  of  People- 
Soft  would  result  in  a  substan¬ 
tial  lessening  of  competition  in 
the  markets  for  high-fonction 
hxunan  resources  management 
and  financial  management  sys¬ 
tems  software." 

Oracle  still  foces  an  ongoing 
antitrust  review  by  the  Euro¬ 
pean  Commission.  It  also 
needs  to  overturn  PeopleSoft's 
antitakeover  provisions,  which 
it’s  chaUenging  in  a  lawsuit 
filed  in  Delaware’s  Court  of 
Chancery.  The  trial  in  that  case 
is  scheduled  to  start  Sept  27. 

Battles  to  Come 

The  two  rivals  are  engaged  in  a 
legal  battle  in  California’s  Ala¬ 
meda  County  Superior  Court 
where  PeopleSoft  has  charged 
Oracle  with  unfair  business 
practices.  Oracle  coimtered 
with  a  con^>laint  claiming  that 
PeopleSoft  illegally  refused  to 
evaluate  its  bid  and  improperly 


created  a  "customer  assurance 
program*  to  make  an  acquisi¬ 
tion  more  costly  for  Oracle. 
That  case  is  scheduled  to  go  to 
trial  in  November. 

PeopleSoft  said  that  its 
board  would  review  Judge 
Walker’s  ruling  and  its  impli¬ 
cations,  but  the  company 
wouldn’t  disclose  when  the 
board's  ikext  meeting  is  sched¬ 
uled  to  take  place. 

Mitch  Myers,  vice  president 


of  operations  at  FWMurphy,  a 
PeopleSoft  user  in  TUlsa. 
Okla.,  said  he’s  waiting  to  see 
more  detailed  responses  from 
the  DOJ  and  PeopleSoft  before 
making  any  judgments  about 
the  ruling’s  potential  impact 
on  the  takeover  battle. 

PeopleSoft  won't  necessari¬ 
ly  throw  in  the  towel  yet,  said 
ftul  Hamerman.  an  analyst  at 
Forrester  Research  Inc.  'I 
wouldn't  underestimate  Peo- 
pleSoft’s  resolve  to  keep  this 
from  happening."  he  said.  But 
he  added  that  PeopleSoft. 
which  blamed  its  weak  sec¬ 
ond-quarter  sales  on  the  pub¬ 
lic  relatfoos  foUout  from  the 
trial  between  Oracle  and  the 
DOJ,  now  likely  will  find  it 
even  harder  to  close  deals. 

Andrew  Albarelie.  principal 
executive  officer  at  Denver- 
based  staffing  company  Remy 
Corp.,  said  he  would  be  com¬ 
fortable  buying  more  software 
from  PeopleSoft.  But  he  added 
that  he’s  OK  with  the  idea  of 
PeopleSoft  being  acquired  — 
just  not  by  Oracle.  0  49950 


Stacy  Cowfey  and  Joris  Evers 
of  the  IDG  News  Service  con¬ 
tributed  to  this  story. 


Continued  ftxm  page  I 

ERP  System 

"As  is  often  the  case  with  a 
systems  implementation  of 
tins  size  and  scope,  the  first 
tune  some  modules  have  been 
used  [has]  not  been  without 
complications,’'  Norma  Hol¬ 
land,  an  associate  vice  presi¬ 
dent  at  Indiana  Univenity, 
said  via  e-mail. 

Holland  said  the  glhches 
weren’t  caused  by  '^be  system 
proper"  but  apparently  sur¬ 
faced  ‘at  those  places  where 
fine-tuning  was  needed  to 
align  the  university’s  business 
processes  to  the  system  speci¬ 
fications  and  functionality." 
She  added  that  the  start  of 
classes  liimied  the  amount  of 
time  that  was  available  for 
comprehensive  testing  of  the 
financial  aid  softvrare  as  well 
as  end-user  training. 

To  compensate  for  the  unex¬ 
pected  shortfoll  of  fuiancial 
aid  funds  beii^;  disbursed  to 


students,  the  university  has 
had  to  dip  into  its  reserve  ac¬ 
counts  and  issue  no-interest, 
short-term  loans  to  help  cover 
tuition  and  other  expenses, 
said  spokeswoman  Sue  Will¬ 
iams.  School  officials  have  also 
taken  other  steps,  such  as  ask¬ 
ing  landlords  not  to  charge 
students  interest  on  late  rent 


payments  and  letting  students 
draw  money  from  the  bursar’s 
office  account  to  pay  for  text¬ 
books. 

The  exact  origins  of  the  fi¬ 
nancial  aid  processing  prob¬ 
lems  are  still  being  investigat¬ 
ed.  But  Williams  said  it  ap¬ 
pears  that  most  of  the  pr^ 
lems  were  caused  by  interface 


issues  between  the  PeopleSoft 
application  and  the  loan  sys¬ 
tems  at  lending  institutions 
such  as  the  Student  Loan  Mar¬ 
keting  Association,  better 
known  as  Saliie  Mae. 

The  university  previously 
deployed  PeopleSoft’s  human 
resources  sof^re  and  is 
using  that  without  any  appar¬ 
ent  difficulties.  But  Williams 
said  the  financial  aid  module 
is  as  big  and  complex  as  all 
the  other  modules  that  the 
university  has  installed  com¬ 
bined. 

'  It’s  also  more  "sensitive”  lo 
exceptions  than  the  universi¬ 
ty's  older  ftnaocial  aid  system 
was,  she  added.  For  instance,  if 
there  was  a  discrepancy  be¬ 
tween  the  amount  of  aid  that  a 
lending  institution’s  system 
said  should  be  issued  to  a  stu¬ 
dent  and  what  the  university 
itself  had  earmarked,  the  fi¬ 
nancial  aid  software  simply 
blocked  the  transaction. 

In  addition,  although  the 
system  is  centralized,  it  has  to 


take  inro  account  variables 
throughout  the  eight  campus¬ 
es,  including  the  differences 
between  part-time  and  full¬ 
time  students  and  whether  a 
campus  does  business  with 
more  than  one  lender. 

Despite  the  difficulties.  uni¬ 
versity  employees  have  been 
able  to  manually  clear  up 
about  300  accounts  per  day. 
and  they  hope  to  have  them  all 
corrected  within  three  weeks, 
according  to  Williams. 

PeopleSoft  remained  upbeat 
about  the  university’s  imple¬ 
mentation  of  its  software. 

"Indiana  University  is  a 
happy  customer,  and  they’re 
sayir^  it's  an  internal  issue 
and  not  a  problem  with  the 
software."  said  PeopleSoft 
spokesman  Steve  Swascy.  “It’s 
a  complex  rollout,  and  we’re 
woricing  very  closely  with 
them.  We  have  our  consulting 
group  in  there  and  will  contin¬ 
ue  to  support  them  in  every 
phase  of  the  implementation." 
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IBM  Adds  Self-Management 
Capabilities  to  DB2  Upgrade 

.1  .-1  1.  .>1 _  _  .J___  ? _ ?  -  »  •  .  _ *¥-.  t-_l_ _ ...  _ 


Says  tools  should  help  administrators 
streamline  complex  database  tasks 


■T  HARC  L.  AOMOtMl 

IBM  LAST  WEEK  said  it’s 
ready  to  ship  the  next 
version  of  its  DB2  Uni* 
versaJ  Database  software, 
which  offers  self-management 
c^abilitics  that  are  designed 
to  reduce  administrative  over¬ 
head  even  as  databases  con¬ 
tinue  to  grow  bigger. 

Code-named  Stinger,  the 
OB2  8.2  upgrade  has  been  in 
beta  testing  since  May  and 
will  become  generally  avail¬ 
able  this  week.  As  part  of 
IBM's  autortomic  computing 
push,  the  database  will  come 
with  new  self-monitoring  and 


self-tuning  features,  said  Jeff 
Jones,  the  company’s  strategy 
director  for  information  man¬ 
agement  The  utiUties  should 
help  database  administrators 
complete  complex  tasks  up  to 
seven  times  f^ter  than  they 
can  now.  accordii^  to  IBM. 

Autonudian  Fntures 

Tbc  new  functionality  in¬ 
cludes  a  tool  called  Design 


backup.  To  help  ensure  up¬ 
time,  another  tool  lets  end- 
user  PCs  automatically  fail 
over  to  a  backup  datat^e  if 
the  primary  DB2  server  goes 
down.  IBM  also  embedded 
its  Learning  Optimizer  tool, 
which  lets  the  database  moni¬ 
tor  and  record  query  response 
times  and  fmd  the  fastest 
route  to  data. 

Dallas-based  Credit  Union 
of  Texas,  which  oversees  about 
$1.6  billion  in  assets,  will  start 
testing  the  new  software  this 
month  for  a  potential  rollout 


Advisor  that  can  automatically  in  December.  Bruce  Moore, 
design  and  optimize  the  struc-  the  credit  union's  director  of 


hire  of  a  database,  plus  a  relat¬ 
ed  utility  that  automates  ad¬ 
ministrative  tasks  such  as 
tabic  maintenance  and  data 


busmess  intelligence,  said  De¬ 
sign  Advisor  could  help  speed 
up  database  configuratioD 
tasks  for  his  team. 


The  credit  union’s  data 
warehouse,  which  is  built  on 
DB2  8.1.  captures  60  months’ 
worth  of  customer  and  opera¬ 
tional  information  for  analysis. 

With  so  much  data  but 
only  a  small  staff  to  manage  it 
some  things  that  could  help 
boost  database  performance 
can’t  be  done  now.  Moore  said. 
He  added  that  he  thinks  De¬ 
sign  Advisor  could  reduce  the 
time  it  lakes  to  build  month- 
end  indexes  by  enabling  him 
to  use  summary  tables  and 
techniques  such  as  multi¬ 
dimensional  data  clustering. 

For  an  incremental  release. 
DB2  8.2  is  a  relatively  s^ifl- 
cant  rollout  because  of  its  new 
autonomic  and  integration 
capabilities,  according  to 


NEW  FEATURES 

DB2  Universal 
Database  8.2 


Charles  Garry,  an  analyst  at 
Meta  Group  Inc. 

“The  bottom  line  is  that  we 
are  moving  away  from  day-to- 
day  maintenance  of  the  data¬ 
base  as  a  resource  and  have  to 
trust  that  the  autonomic  func¬ 
tions  know  more  and  can  react 
more  proactively  than  a  hu¬ 
man  DBA  can.“  Garry  said 
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Continued  from  page  I 

TagmaStore 

three  Ti^maStore  models  also 
include  up  to  192  Rbre  Chan¬ 
nel  ports  that  can  be  split  into 
L024  virtual  ports  offering 
connectivity  to  an  equal  num¬ 
ber  of  host  servers. 

Using  new  software  called 
Universal  Replicator  and  Uni¬ 
versal  Virtualization  Layer, 
the  TagmaStore  arrays  can 
repUcaie  data  over  thousands 
of  miles  and  pool  storage  ca¬ 
pacity  from  HOS’s  existing 
Ughtnii^  and  Thunder  arrays 
and  from  rival  products. 
However,  the  replication  and 
storage-virtualization  fea¬ 
tures  won’t  be  available  until 
December. 

Users  who  have  been  beta- 
testing  w  reviewing  the  arrays 
said  they  have  high  hopes  that 
the  technology  will  offer 
greater  consolidation  and  au¬ 
tomation.  allowing  them  to  re¬ 
duce  manpower  needs  and 
their  total  cost  of  ownership 
for  storage. 

There’s  a  lot  of  different 
storage  that  we  have  in  place, 
and  we  can  consolidate  H  all 


under  one  beading.*  Frank 
said.  He  added  that  United  has 
bought  a  TagmaStore  array 
and  has  been  using  it  for  the 
past  month. 

HDS  said  it  also  enhanced 
its  HiCommand  management 
software  so  users  can  set  poli¬ 
cies  to  automate  migration 
of  dau  fix>m  high-end  Fibre 
Channel  disks  inside  the 
TagmaStore  arrays  to  lower- 
cost  ATA  storage  outside  the 
devices  and,  ultimately,  to  tape 
libraries. 

Tom  Fleissner.  a  storage- 
area  networii  architect  at  Pa¬ 
cific  Capital  Bancorp  in  Santa 
I  Barbara.  CaliL,  said  he  hopes 


I  TagmaStore's  information  life- 
I  cycle  ma^emeni  features 
will  let  him  automatically 
store  critical  data  on  high- 
performance  disk  drives  and 
shunt  less  important  data  to 
more  cost-efficient  technol¬ 
ogy.  Like  United.  Pacific  Capi¬ 
tal  has  already  installed  one  of 
the  new  arrays. 

Sun  Microsystems  Inc.  and 
Hewleu-Packard  Ca  have 
signed  agreements  to  resell 
the  T^snaStore  devices,  ex¬ 
panding  on  existing  high-end 
storage  marketing  deals  that 
they  have  with  HDS  [Quick- 
Link  492S1]. 

Tony  Asaro.  an  analyst  at 


TaipiaStore  Universd  Storage  Platf^ 

■)C«BWlD332rBofinlmal  .  ■WuaUPmiTpooingoieM 
slongiiandcanawort®  j  injaiCSBmliyyw'soid 
oeiabylesoieilemalcvireBy  I  — - — — . . . 


■SUPPORTS  nusi.  Eacon  and  nel- 
■ork-aRached  storage  cormecMy  ; 

■MCUBI8<jplo192FteChar^ 
ports  tfiat  can  tie  spM  into  1034 
wtuaf  ports 

■PRMiaeSGbtt/secrtemd 
cache  throughput 


■usrnnstadsat  $700,000 


Enterprise  Strategy  Group  Inc. 
in  Milford.  Mass.,  said  that 
TagmaStore's  scalability  is 
unique  and  that  its  upcoming 
viitualizaiion  capabilities  go 
well  beyond  what  other  stor¬ 
age  vendors  offer. 

"It’s  basically  a  large  virtual¬ 
ization  appliance,"  Asaro  said. 
“It  extends  all  the  software 
functionality  to  everything 
that’s  attached  behind  it." 

He  was  quick  to  point  out. 
though,  that  pooling  disk  ar¬ 
rays  from  other  vendors  be¬ 
hind  TagmaStore  could  void 
their  product  warranties. 

But  Jim  Grogan,  vice  presi¬ 
dent  of  alliances  at  SunGard 
E>ata  Systems  Inc.,  said  that  as 
storage  systems  from  vendors 
such  as  IBM  or  EMC  become 
obsolete,  he  sees  no  problem 
in  using  them  as  back-end  ca¬ 
pacity  for  TagmaStore  arrays. 
“You’re  getting  a  migration 
path."  Grogan  said. 

SunGard  stores 
148TB  of  internal  data 
and  ittfonnation  from 
its  disaster  recovery 
clients  on  older-mod¬ 
el  HDS  devices,  and 
Grogan  said  he’s  dis¬ 
appointed  that  Tig- 


maStore's  virtualization  fea¬ 
tures  aren't  ready  now.  The 
multiplatform  management 
piece  is  one  of  the  hallmarks 
of  this,"  be  said.  “If  they  slip 
on  that,  that  will  be  huge." 

Grc^an  added  that  Univer¬ 
sal  Replicator  could  save  hin) 
big  money  on  network  band¬ 
width.  Instead  of  caching  dau 
and  then  sending  it  across  IP 
networks  async^nously.  the 
new  tool  writes  the  data  to  a 
disk,  creates  a  time-stamped 
journal  and  replicates  the  in¬ 
formation  as  bandwidth  be¬ 
comes  available.  That  could 
free  SunGard  from  investing 
in  oetworits  that  cater  to  peak 
traffic  levels,  according  to 
Grogan.  The  difference  be¬ 
tween  an  OC96  and  a  T1  line 
is  dramatic  in  price.”  be  said. 

Users  also  can  divide 
T^maStore  anays  into  as 
many  as  32  logical  partitions 
in  order  to  dedicate  storage 
capacity  to  specific  applica¬ 
tions.  04n32 
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Is  Grid  Computing  Ready 
for  Your  Enterprise? 

Computerworld’s  IT  Executive  Summit  Wiii  Guide  Your  Decision 


If  you're  an  IT  executive*  in  an  end-user  organization, 
apply  to  attend  Computerworid's  upcoming  complimentary 
half-day  summit  on  Grid  Computino. 

When  done  well,  grid  computing  can  lower  hardware 
costs,  reduce  development  and  operational  expenses 
and  result  in  more  effective  systems  management 
and  use  of  processing  resources.  As  grid  moves  from 
the  realm  of  science  and  research  into  business 
applications,  what  are  the  risks,  tradeoffs,  and  key 
considerations?  How  have  other  businesses  evaluated 
the  opportunities  to  use  grid?  Most  importantly, 
is  this  emerging  style  of  computing  finally  ready 
for  your  enterprise? 

By  leveraging  the  knowledge  of  industry  experts  and 
the  real-world  experience  and  advice  of  your  IT  peers, 
this  IT  Executive  Summit  will  provide  an  overview  of 
effective  strategies  for  assessing  and  implementing 
grid  technologies. 

*  Complimentary  registration  is  restricted  to 
qualified  IT  executives  only. 


Apply  for  registration  today 

For  more  information  or  to  apply,  visit 

ww«Lftex«cutivesunmitt.com/9ridJ^ 


Grid  Computing;  Assessing  the 
Reality  and  the  Potential 
Boston  •  September  21,  2004 

The  State  Room  •  60  State  Street  ■  33rd  Floor 


7:30am  to  8:00am 
8:00am  to  8:15am 

8:15am  to  8:45am 

8:45am  to  9: 1 5am 


Registration  and  Networking  Breakfast 

From  Cutting  Edge  to  Corporate  Stage; 

Grid  Computing  and  the  Enterprise 

Julia  King.  Executive  Editor.  Events.  CompoterworkJ 

Dynamic  FT:  Grid  Computing  and  the 
Virtualization  of  Data  Center  Resources 

John  Humphreys.  Research  Manager.  Enterprise  Computing.  IDC 

Real-World  Grid  Computing:  Acxiom's  Adoption 
of  a  Grid-Based  Infrastructure 

Chris  Bennett,  Technical  Team  Leader  Workflow  Technology 
Group.  Acxiom 


9: 1 5am  to  9:45am  Preparing  for  Successful  Deployment  and 
Use ...  Lessons  Learned 

Mark  Forman.  Former  CK).  US  Government,  and 
EVP.  Worldwide  Services  Cassatt 
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speakers 

include: 


£x«citfTwr  Editor. 
fvcMO. 

Compuurmertd 


VP  of  VimintiiBhow 
and  AppUeotioK 
Fnmtmuki. 

CIGSA 


/ohn  Humphreys 

toeurck  Manager. 
Enterprise  Conmudiia 

me 


9:45am  to  10:15am 
10:15am  to  10:45am 

10;45am  to  1 1;15am 


Refreshment  and  Networking  Break 

Update  from  the  Enterprise  Grid  Alliance  (EGA) 

Shawn  Douglass  EMC  Board  of  Director  Representatrve. 
Technical  Steenng  Committee.  Enterprise  Grid  Alliance  (EGA) 

The  View  of  (arid  Computirtg  from  Iron  Mountain 

Bill  CHsen.  VP  of  Engineering.  Iron  Mountain  Digital  Archives 


Chris  Bennen 
TMMcallinm 
lender.  Obr^low 
Technology  Croiy. 
Aexifoat 


11;15am  to  Noon 


Key  Considerations  in  Grid  Computing 
Protects:  An  IT  Executive  Roundtable 

Panel  Moderator:  Patrick  Thibodeau,  Senior  Editor. 
Computerworld 

Panelists  Ben  Flock,  VP  of  Virtualization  and 
Application  Frameworks  CIGNA  Mark  Forman.  Former  CIO. 

US  Government  and  EW  WwWwide  Services.  Cassatt  Brit  Olsen. 
VP  of  Engineering,  Irori  Mountain  Digital  Archives 


Patrick  Tfiibodrau 
Senior  Editor. 
Compwerwarld 
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Your  data  takes 
two  sugars. 
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We  re  inspired  by  the  human  side  of  data.  His  next  big  breakthrough  a  masterti.i  cue; 
presentation  even  an  e-mah  rant  on  Italian  coffee  are  all  stored  as  data.  That  s  why  over  i.a 
.•  the  Ff'iine  100  use  Hitachi  storage  technologies  to  protect  their  data,  and  his  ooin.cn 
From  ttie  smallest  i.licromive  tn  the  largest  SAN  solution  Data  Storage  from  Hitachi. 


HITACHI 

Inspire  the  Next 


We  re  inspired  by  the  human  side  of  data.  Digital  music  is  more  than  lust  files  It  s  .*  heffr 
itiOuti  !ier  ne'suii.i.  s.  LiiiiJtiar.r.  in  ■luougrt  liead-banriina  rock  to  keep  her  on  pace  s  . 
‘■■'s'l-  ‘  r’.  n.nr  's'-  n  ive,  a^e  the  indiisirv  choice  for  MPS  players  a:.^,  • 

■  ,  a  •  'I,  :  iatgcst  SAN  solution  Data  Storage  from  Hitachi. 
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Digital  Document 
Security  and  IT: 
Everything  you 
need  to  know. 

WKdt  are  ih^  most  Significant 
•  digitat  copier  security  issues? 

A,  .'jr-  tVirttOnffOller^. 

•  .ne  Jitud'ly  ‘"at  fuiMii' 

jnj  oe'”‘a':.j<iry.  stcun  myUiCK? 

I*"*  •••»"'*  I'les  prc>u\l-ngrtClmrnrST>arni 
*•  »  *C  vTCx  umunts  At  3 

fT.viJ  t3,gira(  rrJTai'’ 

fl-<r  i.l‘t  OO-un-iont  processed  ^ortif 

evpn  rp».»ir>  muttiple  driCunient's 
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'orjirect  print  lOtK  wr-en  ine  crntpi .. 
C«-.>  or  lamrTied  rnaKir^  "disiniai  c’ 

•*r.  le' attacks  possctip 

Q,  How  ckies  S^arp  protect  the 
•  network  interface? 

tHj  -.riaiy  Etnerr^r  rj.,j  allows 
•  iammistrators  to  restrict 
^  lies'  an.j  disapie  unnecessary 
P'OtOCCiS  VVTh  this  rieiwr-rli  CJfO,  the 
“iharp 'iqiia' ropier  s  essentially 
protected  Cy  ifs  own  ^irewa*' 

Q,  How  can  you  be  sure  that 
•  security  products  actually 
perform  as  claimed? 

Tse  Orimon  C'lfens 
•  program— aam.rp.sigfecj  try 
'he  dS  National  Security  Aoencv  and 
tni*  Natonal  Institute  of  Standards 
•rri'j  Technology — evaluates  ‘.ecu'iiv 
«3iuficns  PSoducts  that  art?  vaiidatecj 
ur^ter  me  prograrr.  meet  security 
levels  Lonsister't  With  iSO  i  S4i% 
meriicctC'logv 

How  can  Sharp  improve  IT 
•  security^ 

A,  -haip '.•Ifersprir,!  O'tvol  r 

•  >olui'--»'5  des-gnt^j  ty  rgsti  .  ’ 
ir  aiiTty.i  ced  persCT'nH  frop'  'eeirnT 
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■  ari  pe  (.  ontmiieo  and  monitored 
.yniir  doCumer.TS  retained  m  punter 
'.'Cier'Scanneryf.u  mernery  ,,ti. 

■miTifdidleiv  cieaied  to  el'W  nate 
unauTherced  acct”!? 
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Sara  Lee  Wrestles  With 
RRD,  Looks  for  Benefits 


IT  e.xecutive  advi.ses 
peers  to  start  testing 
the  technology  now 


Sara  Ue  Corp.  is  resrirtg 

radio /retyuency  identifi¬ 
cation  tags  on  some 
product  cases  and  ship¬ 
ping  pallets  to  meet  a  mandate  that 
RFID  fechrto/pgy  be  used  on  goods  sent 
to  Wal-Mart  Stores  Inc.’s  Dallas-area 
disfnburiort  cenfers  starting  in  lanuary. 
Ray  Haoedom.  who  works  in  Cincinnati 
as  vice  president  of  6usiness  50/uftoas 
for  (he  IT  dirpanmenf  in  the  Sara  Lee 
Foods  division,  recenfiy  spoke  with 
Computerworld ’s  Caro/  Sliwa  about 
what  Sara  Lee  has  learned  about  RFID. 
Excerpts  follow: 

Which  applications  vwiR  maka  use  of  the 
data  that  you  Qather  through  RRD?  We  re 
a  maior  supplier  ho  Wal-Mart  I.  and  we 
had  to  focus  on  January.  If  we  goi  too 
caught  up  in  breaking  down  the  proc¬ 
esses  and  everything  else  like  that  at 
this  particular  juncture,  we  were  going 
to  waste  a  lot  of  time  prematurely.  So 
we  said.  “Let’s  narrow  our  focus.  Let’s 
leam  about  the  technolott>’" 

An  you  mostly  taking  a  "slap  and  ship" 
approach  now?  Absolutely.  And  if  every¬ 


body  would  be  honest  with  you.  that’s 
what  they're  doing. 

Are  tags  boino  road  at  the  accuracy  rates 
that  Wal-Mart  expects?  Yes.  At  a  case-by¬ 
case  basis,  as  I  go  down  through  our 
process,  I  validate  that  case.  A  tag  is  on 
it.  I  encode  the  tag  and  then  I  immedi¬ 
ately  validate  that,  and  I  capture  those 
statistics.  If  it  doesn't  read.  1  can  pull 
that  out  and  put  another  tag  on  until 
we  get  if  read.  That  gives  us  our  100%. 

H  sounds  time-consuming.  Oh.  absolutely. 

Wasn't  RRD  supposed  to  automate  the 
process?  It’s  not  ready  for  high  volume. 

What  advice  would  you  give  your  peers? 

It’s  early.  Don’t  make  huge  investments. 
Get  started,  pick  your  point,  leant  Pick 
a  partner  in  your  business  [operations], 
because  you  can’t  do  it  [all]  as  technol¬ 
ogists.  We  have  our  logistics  group 
very  involved  with  us  every  step  of  the 
way.  In  fact,  we  share  co-managemeni 
oflthc  RFID  project]. 

What  art  some  problems  with  RRO  tech¬ 
nology?  The  tags,  without  question. 

From  the  middleware  side,  this  is  still 
early  in  its  evolution.  There  are  many 
vendors  out  there  right  now  that  have 
middleware  that  is  integrated  into 


their  standard  offering  of  product,  and 
they  also  have  some  thirds  that  can 
work  with  someone  else’s,  like  a  ware¬ 
house  management  system  and  things 
like  that.  You  can  go  through  different 
research  or  consulting  groups  that 
give  you  a  short  list  of  things  that  you 
should  be  looking  for  in  a  middleware 
vendor.  But  don't  worry  about  it.  Your 
solution  provider  there  probably  is  not 
going  to  be  the  solution  provider  12 
months  down  the  road, 

Oo  you  have  any  idea  what  the  biggest 
benefit  is  going  to  be  for  your  company? 

No.  I  believe  there  is  value,  and  this  is 
predicated  on  good  information  flow¬ 
ing  back  to  roe  at  key  points  in  time, 
near  real  time,  that  our  planners  can 
use  to  better  plan  and  better  forecast 
—  allowing  us  to  shrink  safety  stock, 
for  example. 

When  do  you  think  you1l  start  to  see  value? 

I  even  hate  to  hazard  a  guess.  But  I 
would  say  we  would  be  really  looking 
for  things  to  dramatically  improve 
where  I  can  start  using  information 
flowing  back,  regardless  of  whether  it’s 
internal  or  external,  within  the  next  12 
months.  . .  You  first  look  at  where  you 
have  pain  points  for  information  accu¬ 
racy,  timing,  controls  or  whatever  the 
case  might  be.  And  if  you  say.  "Wow. 
I’ve  got  a  big  issue  here.  RFID  today 
can  make  a  vast  improvement"  —  go 
for  it.  We  just  haven’t  found,  in  our 
100,000-foot  fly-by.  any  of  that  that  im¬ 
mediately  jumped  out.  O  49245 


Intel  Mum  on  Dual-Core 
Desktop  and  Server  Plans 


Companx’  says  new 
devices  are  due  in  ’05 
but  won't  share  details 


SAN  FRANCISCO 


Intel  Corp.  last  week  outlined  a  plan  to 
develop  a  mobile  proces.sor  with  two 
CPU  cores,  but  the  company  remained 
silent  about  its  strategy  for  dual-core 
versions  of  its  Pentium  4  desktop  and 
Xeon  .server  chips. 

Intel  has  promised  that  a  dual-core 
Xeon  will  be  the  next  major  follow-on 
to  the  Nocona  chip  it  launched  last 
month,  and  company  President  and 
Chief  Operating  Officer  Paul  Otellini 
said  at  last  week’s  Intel  Developer  Fo¬ 


rum  (IDF)  that  the  vendor  plans  to  in¬ 
troduce  dual-core  devices  for  servers, 
desktop  PCs  and  notebooks  next  year. 

But  Abhi  Talwalkar,  general  manager 
of  Intel’s  Enterprise  Platforms  Group, 
said  he  wasn’t  ready  to  reveal  any  de¬ 
tails  about  the  next  Xeon  processor. 

’’We  want  to  make  sure  that  any  com¬ 
mitments  that  we  make  have  all  the 
right  levels  of  scrutiny.”  he  said.  “There 
are  multiple  considerations  that  we’re 
weighing  now,  everything  from  time- 
to-maricet  options  to  considerations 
around  the  [Nocona]  platform  that  we 
just  launched  into  the  marketplace.” 

BUI  Siu.  genera]  manager  of  the 
Desktop  Platforms  Group  at  InteL  took 
a  similar  tack  after  offhandedly  men¬ 
tioning  that  one  of  the  PCs  used  in  a 
demonstration  was  equipped  with  a 


dual-core  processor.  Siu  caUed  the  chip 
an  engineering  prototype  and  wouldn’t 
discuss  its  features,  its  release  sched¬ 
ule  or  even  its  code  name. 

Intel  has  been  plagued  by  a  series 
of  missed  shipment  deadlines  over  the 
past  year,  prompting  CEO  Craig  Bar¬ 
rett  to  issue  a  memo  in  July  calling 
on  the  company  to  change  its  ways 
[C^ickLink  48475].  A  desire  to  avoid 
funher  slip-ups  may  account  for  the 
lack  of  information  about  upcoming 
products  at  last  week’s  conference, 
said  Nathan  Brookwood,  an  analyst  at 
Insight  64  in  Saratoga.  Calif.  “Imel  has 
not  been  as  forthcoming  at  this  IDF 
with  details  of  their  road  map  as  they 
have  in  the  past.”  he  said. 

Company  executives  didn't  even 
disclose  full  architectural  details  about 
the  planned  dual-core  Pentium  M  mo¬ 
bile  chip,  which  is  code-named  Yonah. 
049315 


McMillan  and  Xrortf  write  for  the 
IDG  News  Service. 


Common  Criteru 


How  secure  is  your  digital  information? 

Protect  your  information  with  the  Data  Security  corporate  security,  we've  created  our  Data  Security 
Kit  from  Sharp.  Financial  facts,  personnel  records,  Kit.  It's  the  first  copier  and  printer  protection  to 
customer  lists:  networked  copiers/printers  process  be  validated  by  Common  Criteria,  a  government- 
sensitive  information  every  day.  Unfortunately,  their  sponsored  program,  and  it’s  available  only  with 
hard  drives  can  also  be  accessed  via  the  network,  our  Digital  IMAGER"'  series  of  copiers/printers, 
contributing  to  S60  billion  worth  of  information  Sharp's  Data  Security  Kit.  Enhanced  information 
theft  every  year.*  To  protect  this  weak  link  in  your  proteaion  at  your  fingertips,  sharpusa.com/security 
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SugarCRM  Of 

av  TODD  a.  WEISS 

Open-source  start-up  Sugar¬ 
CRM  Inc.  last  week  released 
the  first  commercial  version 

Fers  Open-Sour 

of  its  Linux-based  CRM  soft¬ 
ware,  promising  to  support 
corporate  users  through  a 
combination  of  in-bouse  tele- 

ce  Sales  App 

phone  lines  and  third-party 
service  calls. 

Sugar  Sales  Professional  1.5 
starts  at  $149  per  seat  for  the 

first  year,  which  includes  tech¬ 
nical  support  and  administra¬ 
tor  training.  The  software  runs 
natively  on  Linux  and  sup¬ 
ports  the  Apache  Web  server, 
MySQL  database  and  PHP 
programming  language.  But  it 

1 

Align  IT  with  Your  i 

1 

■ 

■  Business. 

1 

can  also  run  on  Mac  OS  X  and 
Windows  systems,  said  John 
Roberts,  co-founder  and  CEO 
of  Cupertino,  Calif. -based 
SugarCRM. 

The  company  will  provide 
telephone  support  and  bul¬ 
letin  boards  for  users,  as  well 
as  software  updates,  patches 
and  fixes.  It  also  plans  to  sign 
on  business  partners  to  handle 
field  service  work,  Roberts 
said.  “Yes.  it  is  open-source, 
but  a  real  company  is  there  to 
support  it,”  he  added. 

Chris  Le  Tocq,  an  analyst  at 
Guernsey  Research  in  Los  Al- 


Remedy  IT  Service  Management 
solutions  from  BMC  Software  help 
you  align  IT  with  your  business — 
whether  you  are  a  small,  mid-sized 
or  global  enterprise. 

Find  the  Remedy  solution  that  is  right 

for  you  at  www.r«fiMdy.cem/ltsm 


®  Remedy 


tos.  Calif.,  said  users  will  judge 
SugarCRM’s  offering  “on  the 
quality  of  the  support”  that 
the  company  provides.  “That’s 
going  to  be  up  to  Sugar  —  to 
keep  people  happy  [and  feel¬ 
ing]  that  their  support  is  blue- 
ribbon.”  Le  Tocq  said. 

Roberts  helped  start  Sugar¬ 
CRM  after  working  at  CRM 
vendor  E.piphany  Inc.  In 
April,  when  SugarCRM  re¬ 
leased  an  e^ly  version  of  its 
application,  there  were  just 
48  downloads  by  users.  Last 
month,  there  were  13,051 
downloads.  Roberts  said. 

License  Limits 

Sugar  Sales  Professional  is  li¬ 
censed  under  the  Sugar  Public 
License,  which  is  a  copy  of  the 
Mozilla  Public  License.  Users 
have  to  release  any  code 
changes  they  make  to  the 
open-source  community  only 
if  they  plan  to  distribute  the 
software  to  another  party,  said 
Roberts.  But,  he  added,  the  li¬ 
cense  prevents  companies 
from  selling  modified  code. 

Version  1.5  of  Sugar  Sales 
I  Professional  includes  a  plug-in 
^  that  lets  Microsoft  Outlook 
users  move  customer  e-mails 
into  the  CRM  application  with 
a  single  mouse  click.  Roberts 
said  it  also  provides  tools  for 
importing  data  ftom  propri¬ 
etary  CRM  tools,  including 
products  from  Salesforce.com 
Inc.,  Best  Software  Inc„  Sales- 
Logix  Inc.  and  Microsoft  Corp. 

After  the  $149  introductory 
price  for  the  first  year  of  use. 
Sugar  Sales  Professional  sub¬ 
scribers  will  have  to  pay  an  an¬ 
nual  fee  of  $239  for  continued 
support  and  services,  accord¬ 
ing  to  SugarCRM.  O  483M 


Perfected! 

Control  More  Computers  for  Less  Money,  in  Less  Space  and  in  Less  Time 
ujith  Tripp  Lite  KVM  Suiitches 

Tripp  Lite  KVM  Switches  offer  the  most  economical  and  convenient  solutions  available  for  controlling  up  to 
51 2  PCs  or  servers  with  a  single  keyboand/video/mouse  console.  Save  money,  space  and  time  by  eliminating 
unnecessary  consoles,  removing  cable  clutter  and  avoiding  the  need  to  move  between  multiple  consoles. 


MIKH  . 


16-Port  Rackmou  nt 

All-in-one  console  KVM  switch  includes  a  keyboard.  15"  LCD  screen, 
touch  pad  and  16-port  KVM  switch  in  an  easy-glide  1U  rack  drawer 
Built-in  on-screen  display  gives  you  control  over  all  ports 
Daisy-chain  capability  and  two-level  password  security 
2  models  available  (one  features  integrated 
console  KVM  switch  as  shown) 
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8-Port  1U  Rackmount _ _  | 

*  Slim  1 U  cabinet  design  with  daisy-chain  capability  ' 

*  On-screen  display  gives  you  control  over  all  ports 

4^ort  Desktop 

*  Comp>act  desktop  design  with  individual  port  selection  button 

*  Notebook  and  wireless-ready 

5-Port  [desktop  _ 

*  Compact  desktop  design  with  individual  port  selection  button 

*  Notebook  and  wireless-ready 

*  Includes  2  cable  kits 


For  more  Information  on  Tripp  Lite  KVM  suiitches, 
or  to  locate  a  reselleriiartner, 

visit  Tripp  Lite's  website; 
http!//wwwfc  tripplite.com 

Reseilers:  For  special  demo  unit  pricing,  call  Matt  Mulac  at  773-869-1091. 


Tripp  Lite 
KVM  Suiitches— 
The  Perfect  Toy  for 
Control  Freaks! 
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DON  TENNANT 


Living  for  This 


IF  THERE'S  ANYTHING  I  LOVE  more  than  a 
baseball  metaphor,  it’s  a  baseball  simile.  So, 
what  better  way  to  salute  my  predecessor? 

Following  Maryfran  Johnson  in  this  job  is 
like  following  Barry  Bonds  in  the  batting  or¬ 
der.  In  fact,  it’s  even  tougher  —  Barry  is  no  Mary¬ 
fran.  For  one  thing,  what  does  Barry  do  every  time 


be  hits  a  borne  run?  He 
stands  there  and  stares  at 
it  I  mean,  you  just  want 
to  smack  him  and  scream, 

*^t<^  watching  and  start 
running,  Barry!” 

Let  me  teU  you,  Mary¬ 
fran  was  never  a  stand- 
and-watch  player.  If  she 
hit  a  homer,  she’d  be 
sprinting  to  first  before 
the  sound  of  the  bat  hit¬ 
ting  the  ball  had  made  it 
past  the  pitcher's  mound. 

And  that  can't  be  easy  in  a  ' 
pair  of  Christian  Louboutin  sling¬ 
back  heels. 

So  the  order  to  fill  Maryfran’s 
shoes  is  taller  than  the  Green  Mon¬ 
ster.  And  not  just  because  I’d  look 
preposterous  in  a  pair  of  designer 
sling-backs. 

I  was  sitting  next  to  Maryfran  in 
the  ballroom  at  the  Waldorf-Astoria 
in  New  York  last  March  when  she 
was  announced  as  the  recipient  of 
the  first  Timothy  White  Award  for 
editorial  ethics  and  courage.  I  think 
so  highly  of  Maryfran,  I  probably 
wanted  to  hear  her  name  read  even 
more  than  she  did.  And  when  we 
did  hear  her  name  and  she  looked 
over  at  me  a  bit  stunned.  I  remem¬ 
ber  smiling  and  hoping  she  could 
see  the  admiration  and  respect  1 
have  for  her. 

Seeing  Maryfran  on  a  di/Tercnt 
team  is  going  to  be  as  tough  as  it  is 
semng  Notnar  in  a  Cubs  uniform.  But 
players  move  to  different  teams  all 
the  time.  You  just  have  to  suck  it  up. 
regroup  and  rededicate  yourself  to 
being  Che  best  And  you  need  to  con¬ 
sider  it  an  opportune  time  to  analyze 


your  game  plan  to  deter¬ 
mine  whether  anything 
needs  to  be  changed. 

Clearly,  when  you’re 
the  current  World  Series 
champion  —  in  our  case, 
holder  of  the  title  of 
Magazine  of  the  Year, 
awarded  by  the  Ameri¬ 
can  Society  of  Business 
Publication  Editors  — 
you’d  be  foolish  to  make 
any  sweeping  changes. 

So  you'll  see  us  proceed 
as  determinedly  as  the 
Big  Unit  going  for  chat  last  out  in 
the  ninth  —  delivering  the  usefuL 
unujue  information  you’ve  come 
to  rely  on  and  expect  in  print,  on¬ 
line  and  at  our  growing  number  of 
roundly  applauded  user-focused 
events. 

At  the  same  time,  it  makes  sense 


for  us  to  assess  whether  we  have 
any  resources  that  are  being  under¬ 
played.  TTie  fact  is,  the  international 
reach  Computerworld  has  as  the  hub 
of  the  world’s  largest  global  IT  me¬ 
dia  netwoik  and  as  the  flagship  pub¬ 
lication  of  International  Data  Group 
has  been  sitting  on  the  bench  far  too 
long.  That’s  going  to  change.  Virtual¬ 
ly  everyone  who  reads  this  publica¬ 
tion  works  for  a  company  that  has 
interests  outside  of  this  country.  We 
have  the  unparalleled  ability  to  pro¬ 
vide  you  with  the  information  you 
need  to  formulate  global  IT  strate¬ 
gies.  and  we’re  going  to  start  taking 
advantage  of  it 

We’re  going  to  be  covering  all  the 
IT  managen»ent  bases  you  need  to 
have  covered,  with  an  award-winning 
editorial  team  that’s  full  ofgold 
gloves.  And  anyone  who  tries  to 
match  our  coverage  of  those  bases 
will  find  us  stealing  them  more  ag¬ 
gressively  than  Pete  Rose  doing  a 
I  headfirst  slide. 

So  keep  your  expectations  high.  To 
borrow  that  cool  MLB  catchphrase;  I 
live  for  this.  O  49302 
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PIMM  FOX 

The  Color  of 
Microsoft’s 
Money 

IMAGINE  for  a  moment 
that  someone  gave  you  $5 
for  each  desktop  PC  in 
your  organization  that  was 
running  a  Microsoft  operating 
system  such  as  Windows  XP.  Not  bad. 

I  reckon. 

The  more  PCs  your  company  h^d. 
the  more  money  you  would  rake  in. 
Well,  that’s  called  a  kkkback,  and  it’s 
probably  illegal  If  it  isn't  illegal,  it 
could  ruin  your  reputation,  and  your 
co-workers  might  even  beat  you  up. 

But  that’s  exactly  the  kind  of  rela¬ 
tionship  Dell  appears  to  have  with 
Microsoft. 

Michael  Robertson  wrote  about  this 
in  his  Sept.  2  column  at  wwwJin^tre. 
com/Iirtdows__  michaelsmmutes.p^. 

According  to 
Robertson,  it’s  esti¬ 
mated  that  Microsoft 
pays  Dell  anywhere 
from  S2  to  $10  for 
each  computer  Dell 
sells  that  has  Win¬ 
dows  XP  installed. 

And  you  thought 
the  U.S.  Department 
of  Justice  had  rapped 
Microsoft  over  the 
knuckles  so  that  it 
would  play  nice  and 
offer  each  of  the  top  20  manufreturers 
its  curating  systems  at  the  same  price. 

WeU,  it's  not  too  surprising  that 
Microsoft  figured  out  a  work-around. 
Microsoft  pays  computer  makers  based 
on  the  number  of  computers  they  sell 
sort  of  like  an  incentive  program, 
thereby  getting  around  the  agreement 
it  signed  with  the  Justice  Department. 

OK.  1  know,  this  is  just  business,  and 
Robertson’s  complaint  sounds  like 
whining  But  the  advance  of  Linux  as 
an  alternative  desktop  operating  sys¬ 
tem  is  being  hamper^  not  because  of 
technology  but  because  of  a  sweet¬ 
heart  deal  between  the  giants  of  the 
hardware  and  software  markets. 

This  business  relationship  is  putting 
the  brakes  on  innovation.  It’%  a  severe 
impediment  to  millions  of  people  try¬ 
ing  J  Joitx  And  ifs  costing  you  money. 

Rr^rtson  says  that  when  two  top 
executives  from  Linspire  (yes,  he’s  the 
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CEO  of  that  Linux  vendor)  went  to 
visit  Dell  to  talk  about  what's  new  in 
open-source.  Dell  executives  canceled 
the  meetings  at  the  last  moment. 

Dell  sold  desktops  with  Linux  in¬ 
stalled  from  1998  to  2001.  And  the 
company  still  offers  workstations  and 
servers  with  Red  Hat  Linux.  But  that's 
a  far  cry  from  actually  making  it  popu¬ 
larly  available. 

Microsoft  also  pays  Dell  if  the  com¬ 
puter  maker  recommends  Microsoft 
Windows  XP  Professional.  I  found  the 
recommendation  on  almost  all  of  the 
Web  pages  I  visited  at  Dell's  site.  Why 
does  Dell  tic  its  fortimes  so  closely  to 
Microsoft?  Because  the  deal  makes 
Dell  lots  of  money. 

Is  Windows  really  the  best  operating 
system  available?  Haven't  we  moved 
beyond  being  spoon-fed  bundled  soft¬ 
ware?  rd  rather  be  allowed  to  make 
that  judgment  than  have  a  supplier 
offering  products  without  disclosing 
that  it  gets  paid  to  push  particular  op¬ 
erating  systems  or  sofhme. 

Of  course,  Dell  could  just  pass  that 
Microsoft  money  on  to  all  the  IT  and 
purchasing  departments  at  large  cor¬ 
porations. 

I  bet  that  money  could  buy  plenty  of 
machines  and  even  tutorials  so  work¬ 
ers  could  then  install  Linux  them¬ 
selves.  O  49271 


TOM  WEAKLAND 

Outsourcing 
Best  Practices  I 

COMPANIES  are  starting 
to  consider  their  out¬ 
sourcing  decisions 
strategically,  and  not  just  as 
cost-cutting  exercises. 

Companies  that  see  outsourcing  as 
a  short-term  cost-cutting  opportunity 
are  almost  always  disappointed  with 
the  results.  But  companies  that  ap¬ 
proach  outsourcing  as  one  element  of 
an  overall  business  strategy  are  apply¬ 
ing  some  spedfic  best  practices  to 
reach  their  goals  more  quickly  and 
with  fewer  roadblocks. 

Cemnuitading  opMhr  from  Oty  1  Com¬ 
panies  that  develop  candid  intii^ai 
communication  phuis  about  sourcing 
strategics  are  far  less  likely  to  experi¬ 
ence  employee  backlash  as  roles  begin 
to  move  offshore.  Eighty-four  percem 
of  the  buyers  of  outsourcing  services 
in  DiamondClusier’s  ‘*2004  Global  IT 
Outsourcing  Report”  said  they're  con¬ 


cerned  about  backlash  as  - 

jobs  are  lost  to  offshore 
outsourcers.  But  those  same 
companies  have  probably 
undere.<»timated  the  ripple 
effect  of  their  outsourcing 
decisions. 

At  a  major  financial  ser¬ 
vices  organization,  the  CIO 
and  his  direct  reports  con¬ 
ducted  a  six-week  series  of 
“town  hair  conference  calk 
with  the  global  IT  depart¬ 
ment  before  a  final  decision 
was  made  on  outsourcing. 

Those  events  gave  employees  the  op¬ 
portunity  to  vent  their  concerns,  raise 
issues  that  management  hadn’t  consid¬ 
ered  and  cut  down  on  potentially  dam¬ 
aging  rumors.  The  CIO  partly  credits 
keepmg  the  lines  of  communication 
open  for  a  decline  in  voluntary  staff  at¬ 
trition  following  the  announcement  of 
the  outsourcing  dectsitm. 

But  the  people  who  rely  on  the  ser¬ 
vices  that  will  be  outsourced  need  to  be 
pan  of  the  process  as  well  The  IT  de¬ 
partment's  internal  constituencies  want 
to  be  pan  of  the  process,  and  they  want 
guarantees  that  outsourcing 


Wi 


won’t  undermine  their  own 
goals  and  objectives. 

AdMy  managinB  attritian. 
Companies  that  don't  have 
a  policy  of  weeding  out 
their  Icfss  productive  per¬ 
formers  on  a  regular  basis 
develop  cultures  where 
forced  attrition  is  virtually 
nonexistent,  where  every¬ 
one  knows  there  is  dead 
weight  and  where  top  per- 
fonners  get  discouraged. 

Outsourcing  can  actually 
be  a  strategic  means  of 
jump-starting  a  managed  attrition  poli¬ 
cy  without  having  to  resort  to  drastic 
reductions  in  force.  A  Fortune  1.000 
service  provider,  for  example,  is  weed¬ 
ing  out  the  bottom  10%  performers  in 
its  IT  woritforce  and  filling  some  of 
those  roles  with  third-party  resources. 

InMrtnginaducilionandfilvMiM  It 
seems  counterintuitive,  but  the  best 
companies  keep  investing  in  IT  train¬ 
ing  even  as  they  outsource.  Imemal 
personnel  have  valuable  proprietary 
knowledge  about  the  company's  staff, 
processes  and  systems.  Growth-orient¬ 
ed  companies  are  beefing  up  internal 


training,  sending  people  lo  executive 
cd  programs  and  actively  supporting 
employee  effons  to  cam  ad^tionaJ 
cenificarioos. 

Mkaniang  irtmanded  comaquwtcaa. 

Companies  considering  outsourcing 
need  to  carefully  examine  how  short¬ 
term.  cost-driven  decisions  might  un¬ 
dercut  strategic  intent.  A  comprehen¬ 
sive  sourcing  strategy  helps  a  company 
identify  hidden  consequences. 

A  company  that  typically  hires  peo¬ 
ple  into  its  IT  department  from  under¬ 
graduate  univ'crsity  programs  almost 
learned  a  lesson  about  unintended  con¬ 
sequences  the  hard  way.  This  firm  has 
historically  promoted  its  top  perform¬ 
ers  from  programmer  to  IT  manager  to 
IT  executive.  It  was  considering  out¬ 
sourcing  virtually  all  of  its  application 
development,  but  then  it  realized  that 
such  a  decision  could  result  in  a  lack  of 
IT  maiugers  three  to  five  years  down 
the  road.  Now  it  may  scale  back  its  off¬ 
shore  plans.  O  489K 
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Make  or  Buy?  Don't  Forget  Staff.  Process 

THCBmiCTPOWTSinQary  i  thatoftenoutperfcnnthegeneral- 
K  Anihes  *RoK  Ybur  Own*  arfr-  gedcnmnorrMfnW-ifMt-AiJi 


I  KArthBs'*Ro«YburOwn'afft- 
dejCMdiljnk  47884]  ksttno  the 
siluattons  where  4's  best  to  biald 
were  excelenL  but  I  heve  t(ud 
there  is  mother  importaRt  posit 
prDcess.HereatCentatftNnlRDp- 
ertes.  we  evakiaied  end  defined 
0(x  business  processes  firsL  Then 
we  found  soitMwe  to  fit  our  needs. 

By  puthno  pmcees  ^  we  not 
only  produced  optimal  business 
practxss  (because  we  ddnl  have 
to  compronfese  them  for  an  easting 
sofmare  package),  but  we  dso  tod 
m  easier  buyftiuM  decision  to 
mato-WBhtoasofidselofiequre- 
ments  that  alomd  us  to  properly 
invesiigalB  packaged  applications, 
pirchase  the  ones  (tol  worked  and 
buU  the  ones  we  needed 
Scott  Ztomarman 
CfOl  CenttrPtkru  Rrppmies 
That,  Oak  Brook.  lU. 

MOOGtMDCVELOPHENT  tools 
Be  McrosoftVeu^  Studio 
(itet  technology)  m  tto  hands  of  a 
properly  trained  and  expenencad 
prograrnrner  can  produce  tigMy  tai¬ 
lored  solutions  in  a  very  short  tine 


that  often  oulperloRT)  the  general¬ 
ized  commercial  olf-lhe-deR 
(COTS)  sfliufions.  In  my  opinion,  the 
malevs -buy  decdon  often  de¬ 
pends  on  maregenwnfs  commil- 
ment  to  thee  rr  stetl  If  tfey  have 
developed  a  good  staff,  then  they 
wi  trust  that  staff  to  support  and 
rnainlam  the  In-house  appHcaboRs 
Otherwise,  they  wi  look  lo  COTS  as 
a  longHenn.  more  secure  sofiibon. 
FredRanbold 
Manager  qfIS, 

University  Virginia 
Foiolities  Managemmt 

Congress  kisses 
tUPBigPictiire 

PMMFOIISOQRISCTthal 
CongreB  should  get  out  of  try¬ 
ing  to  regutala  VdP  as  fi  does 
phone  service,  but  to  is  misseig  the 
big  ptetere  -  akhough  most  of  Con¬ 
gress  is.  toopHang  Upon  Con- 
m*  QukMJnk  48040}.  Thwe's 
no  mason  to  have  one  set  of  nfies 
for  phone  cafe  and  another  for 
broadcast  services.  South  Korea 
goti(tigM.and4has60%peneba' 
bon  in  broadband.  Compare  that  I 


w«h  27%  in  the  U.S.  What's  difier- 
ent  in  South  Korea?  No  separate 
rules.  TV  broadcasts,  fniemet  ac¬ 
cess,  voice  cafe  and  other  serwees 
are  offered  withoi^mulliple  tax-fee 
retMaiions  or  rules  tfnut  who  cm 
oiler  vAai  Ths  has  provNled  South 
Korea  wrth  Its  current  economic 
boom.  UntI  Congress  and  (he  F(X 
getaduBandscrapthecunentreg- 
ulatiors  and  start  tfwilang  ^Mut 
technology  fi  a  more  rattonal  wey. 
iheU-S  wi  continue  to  falbefmd 
the  rest  ol  the  workfeicomnwica- 
bors.  erfech  affects  everything  else 
we  do. 

Harry  Hoi 

^rsmru  engineer.  Mieflochion. 
harryhoUi^pnaiLcom 

NoMmBuN 

IN  RCFEilEliCt  TD  Sieve  Ifegrfs 
July  26  tetter.  "No-Bii  Approach 
Bets  Thumbs  Up*  (QuicMjnk 
476751.  In  which  he  wondered  what 
happened  lo  my  son  and  ito  tsi 
docussed  In  my  column  Tffl  OK: 
the  Bui  is  OeatT;  I  was  once  laid 
that  acconing  to  24n  phioaophy.  at 
the  end  of  a  discaurse  between  a 
teacher  and  a  student  the  student 
shexid  be  tell  wih  grasler  curiosity 


Ihm  what  he  had  at  the  Stan  of  the 
dscQurse 

Now  regarding  the  Pul:  My  son. 
Rat  (now  tto  EVP  of  our  company), 
was  dnvffig  fxxne  around  rradrxght 
whm  a  Texas  longhom  walked  onto 
the  road.  Uickiy  for  Rat.  the  biJ  got 
the  worst  of  the  cohsnn  Thecar's 
front  end  vtts  damaged.  txA  Rat  did 
not  have  any  njunes.  The  tarmer 
who  owned  the  property  and  the 
txB  reimbursad  our  auto  nsurarce 
company  for  the  damage  to  the  c». 
dopMICKapir 
Prcsdmt.  Center  for 
Protect  Management. 

Son  Romoa  Colif, 
gk<V>ur@c«nter4pm.£om 

COMPVTERWORLO  wetcomes 
comments  from  Its  readers  Letters 
wi  be  eitted  lor  brevity  and  danty. 
They  should  be  addressed  te  Janee 
EcMe,  tattefs  edior.  Computerworld. 
PO  Box  9171 500  Old  Comecbcul 
f^.  Framingham.  Mass  0T701 
fve  (506)  879-4843 
E-rnattettareicwgiuteiwuikUorn. 
Inckide  an  addres  and  phorw  run- 
berforittenedalevBnIicallon. 

OFor  rme  teOBs  on  twae  wtf 
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AVAVA 

a  higher  plane  " 
of  communication 


WHAT  S  IN  A  NAME?  Well,  if  you've  got  a  lot 
of  them  on  your  voice  and  data  equipment, 
moving  to  IP  without  breaking  the  bank  can 
seem  pretty  daunting.  Avaya  makes  it  easy  for 
you  to  jump  right  in,  efficiently,  reliably,  and 
securely.  As  the  world  leader  in  enterprise  IP 


telephony,  our  solutions  are  specially  designed 
with  industry  standards-based  technology  and 
open  architecture.  They  layer  right  on  top  of  your 
existing  network  and  work  with  almost  every 
other  brand.  So  with  Avaya,  you  can  keep  up  to 
85%*  of  your  current  investment.  Avaya  can  also 

ntact  Centers  Unified  Commit 


turn  your  call  center  into  a  strategic  IP  contact 
center,  easily  and  seamlessly.  We  help  you  go  to 
IP  right  away,  no  matter  what  names  are  on  your 
list.  To  learn  how  we  can  work  with  what  you 
have,  see  "Best  Practices  for  IP  Deployment  in  a 
Multi-Vendor  Environment"  at  avaya.com^eehow. 

~  Services 


Doedn't  matter  what  their  name  i6. 

AVAYA  IP  TELEPHONY 
SOLUTIONS 


^  Based  on  rtesioi>ca  ieso«*  i.'ovouai  rtwis  r^ay  vary  aepenong  -oor*  your  sce<ir<.  ei 


iSO-a- 


WE’RE  PUTTING  COMPUTER 
R&D  WHERE  IT  BELONGS. 

In  your  Business , 


Dancing  robots  and  Artificial  Intelligence  make  great  press 
release  material,  but  what  exactly  do  they  do  to  improve 
your  business? 

At  Fujitsu,  we're  concerned  with  R&D  that  helps 
CIOs  run  their  business  more  efficiently.  In  fact,  we  Invest 
biHions  of  dollars  annually  In  developing  technology  solu¬ 
tions  and  providing  the  right  products  for  our  customers 
to  achieve  maximum  enterprise  performance.  This  R&D 
effort  is  the  foundation  of  the  Fujitsu  PRIMEPOWEFT 
and  PRIMERGY*  server  lines,  which  deliver  mission-critical 
reliability,  avaifabilfor  ar>d  serviceabiK^. 

Thanks  to  our  real-world  R&D  philosophy,  we’ve 
become  a  company  that  offers  CIOs  the  high-performance 
mobile  computers,  scalable,  reliable  servers,  and  managed 
and  professional  services  they  need. 

If  you  are  looking  for  an  IT  partner  whose  R&D 
investment  actually  does  your  company  some  good,  visit 
us.fuiitsu.eom/compuCers/RD  or  call  l-MO-SSI-aiSS. 


FUJITSU 

THE  POSSIIIIITIES  IRE  IHFIIJTE 


PRIMEPOWER-  Servers 


LifeBook*  Notebooks 


Stylistic'  Teblet  PCs 


PRIMERGT  Servers 
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__£[i£^judler^ays^o^Seb  s  CS  SiteMandg^r  helped  Danshin  identity  Iht  areas  ot  ns  Web  site  (hat 


ool 


T  ONRAPER, 

innovative 

IN  PRACTICE 

When  put  in  the  hands  of  customers,  this  year’s  30  award¬ 
winning  technologies  realized  their  full  potential  for  cutting 
costs,  reducing  waste  and  increasing  productivity. 


[HlV 

li  Ei 

needed  the  most  improvemenl. 


AWARDS 


Apparel  Maker  Gets 
Instant  Feedback  With 
Online  Survey  Tool 

BVTODOR.WEtSS 

When  women's  dancewear  and  aaivewear  fnaif«.r 
Danskin  Inc.  created  a  Web  site  in  200U  it  didn’t 
exactly  set  the  dance  world  spinning  on  its  toes. 

Beginning  with  only  one  product  line  in  order 
to  avoid  conflicts  with  traditional  bric^-and- 
mortar  retailers,  the  company  set  out  to  gauge  the 
interest  of  customers  in  Imying  Danskin  products 
online.  Less  than  two  years  later,  in  January  2003. 

Ae  NfS(Jfork-based  company  made  the  move  to 
-•^XBjiid  its  sUpaad  online  product  offerings. 

But  simpjy^ding  more  merchandise  to  a  hasti¬ 
ly  a^mbled  trial  Web  site  wasn’t  exactly  a  great 
sales  strategy,  says  Eric  Nadler.  the  company’s 
vice  president  of  sales  operations.  “We  knew  die 
site  was  not  all  it  could  be."  he  says.  “It  wasn't 
done  in  an  aggressive  manner.  We  were  fust  a 
Yahoo  store,  just  trying  to  feel  the  waters  out." 

Nadler  and  another  _ 

executive  were  given 
responsibility  for  im¬ 
proving  the  site,  and 
they  quickly  felt  over¬ 
whelmed.  “We  knew  we 
had  graphics,  search  and 
site  problems,  but  we 
couldn’t  prioritize 
them,"  Nadler  says. 

At  an  online  retail 
trade  show  last  year, 
they  found  CS  SiteMan- 
ager.  a  Web-based  cus¬ 
tomer-satisfaction  ^>pli- 
cation  from  ForeSee  Results  Inc.  in  Ann  Aibor. 

Mich.  With  CS  SiteManager.  Danskin  ^an  get  in¬ 
stant  reactions  from  customers  about  whaf  s  good 
or  bad  about  its  Web  she.  and  that  feedback  can  be 
used  immediately  to  make  midcourse  corrections. 

The  product  runs  behind  the  scenes  and  gives 
random  customers  a  pop-up  window  containing  a 
brief  survey  to  get  input  about  their  shopping  ex¬ 
periences  at  Dan$kin.com. 

For  Danskin,  the  information  garnered  from  the 
FartSaa.  conrimied  on  page  32 
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TECHNOL06Y 


comcuterwofld 


Aiiititnr’i- 

>www-*mb»rpoint-com 
0«Mand.CAiil 
AppEicatnn  development 
ServKe  Level  Menaper 
ProvKies  predtclatulily. 
visibilitv  and  control  tor  Web  servKes  m 
production  environments  through  a  Web 
0*sed  user  mtertacc.  Offers  end-to-end 
'TMnaoement  for  operahonal  and  business 
data  nteracttORs 

BestBuy  Co.BT 
(xoupPLC.ColeNatKinaiCorD,  Motorola 
Inc..  TransCanada  Corp 

Atom."!.,.'  : 

•rvrx  aloiTu.com 

San  Bruno  CaM 
AppIrcalKin  development 
Alomr  Enterprise 
Combines  site  search 
and  content  managenrenl  to  improve  on- 
Unc  visitors'  eiperience. 

HiR  Bloch 

Inc  .  J  A  W  Seliqman  A  Co  .  Palm 
One  Inc 

BladeLoijk  i  : 

nrww  bladeiogic.com 
Wartham.  Mass 
Application  development 
Btadelogic  Operations 

Ma/iaper 

Data  center  automation 
software  that  helps  companies  provtsion. 
configure  and  manage  large  scale,  distnb- 
uled  server  ennrarunenls 

Priceime  com 

Inc  USAA.  Chicago  Mrfcanliic  Excfiange 
Inc .  HSBC  Group. 

WaJMaM.com  USALLC 


WWW  biuea/c  com 
San  ^>Dse 
Storage 

Frtan  SdiconServer 
Cortsolidaies  and  man 
ages  up  to  256TB  of  data  m  a  single  net 
work  storage  appliance 

AfteraCorp., 

BuRate.com,  C.O  R  E  Feature  Animation. 
Harvard  Unrversrty  Life  Sciences,  Mam 
frame  Enlertamrrieni  Inc 


ForeSee,  ninfiniji-i/  from 
•iiirvi’vv  lus  been  .1  gold  mine.  "Whai  it 
rcAlIv  does  is  jllow  us  in  ;m  anulvtie.il 
and  seicntitic  manner  to  learn  what  1 
satisfies  our  customers  and  what  their  j 
needs,  wants  .md  desires  are  in  ulili?-  1 
ing  our  \\  eb  site,"  Nadier  says.  "We  can  ! 
sec  what  change.s  we  can  make  that  will  [ 
ha\  e  the  biggest  bang  for  the  buck."  j 
Using  the  research  data  and  statisti-  I 
eal  methodologies  from  the  customer 
input  analyzed  by  ForeSee,  Danskin 
was  able  to  pinpoint  the  e-business 
areas  that  needed  work.  Nadier  says. 
“Customers  tor  the  most  part  want  to 
share  their  experiences  and  help  you 
build  a  better  site."  he  says. 

Within  six  weeks  of  incorporating 
CS  SiteManager.  Danskin  learned  that 
site  navigation  was  one  of  the  bigge.st 
sticking  point.s  for  customers.  After 
spending  15  minutes  making  site 
changes.  Danskin  immediately  began 
seeing  increased  online  sales.  Nine  I 
months  later,  incremental  sales  in-  I 
creases  were  apparent,  much  of  which 


were  altnbut.ibie  to  CS  SiteManager. 
Nadier  says. 

"It  was  looking  at  customer  service 
Irom  an  entirely  different  angle,  and 


I  th.it's  what  we  thought  was  cutting 
(  edge.'  Nadier  says.  "We  were  going 
j  to  be  able  to  do  our  jobs  better.  It  ab- 
I  solutely  has  paid  for  itself  O  46999 


URL:  www.fofeseefesulls.com 
LOCATION:  Ann  Arbor,  Mich. 
CATEGORY:  Web  site  managemeni 
TECHNOLOGY:  CS  SiteManager 
HOW  IT  WORKS:  ITie  pop-up  online 
survey  asks  Web  shoppers  about  their 
general  satisfaction  with  the  site's  function¬ 
ality,  whether  they  intend  to  return  to  the  site 
and  about  its  took  and  leel.  pricing  and  val¬ 
ue.  says  Larry  Freed,  CEO  and  president  of 
ForeSee  With  a  typical  customer-response 
rate  of  6%  to  12%.  a  company  can  gam 
critical  inlormation  Irom  users  to  increase 
sales  and  ROI.  according  to  Freed  'We 


help  diagnose  the  problem."  he  says.  CS 
SiteManager  uses  statistical  methodolo¬ 
gies  from  the  American  Customer  Satisfac¬ 
tion  Index  to  create  its  data. 

CUSTOMER  SAMPLING;  Tower 
Records,  Home  Shopping  Network, 

Cingular  Wireless,  Hallmark  Flowers  Inc., 
Forbes.com,  the  National  Hockey  League, 
DTE  Energy  Co. 

TIP:  Set  Web  site  investment  priorities 
around  direct  input  from  customers 
WHAT'S  IN  STORE:  'The  prospects 
(or  an  independent  company  that  surveys 
Websrte  users  and  provides  actionable 
advice  to  Website  builders  appear  bright." 
says  Michael  Dortch,  an  analyst  at  West- 
port,  Conn.-based  Robert  Frances 
Group  Inc 


Millipore  Takes  Fast  Track 
To  Asia  With  Globai  Network 


Millipore  Corp,  wanted  its  Japan-based 
customers  to  move  to  Web  ordering, 
but  first  it  had  to  convince  them  that 


using  the  Web  was  quicker  than  send¬ 
ing  a  handwritten  fax.  'ITiat  wasn't  nec¬ 
essarily  simple  to  do. 

The  corporate  IT  strategy  for  this 


I  Billerica.  Ma.ss.*based  bioseience  com¬ 
pany  is  to  keep  its  data  services  cen¬ 
tralized.  That  meant  customers  fmm 
Asia  would  be  connecting  to  Web 
I  seiners  halfway  around  the  globe.  And 
■  that  was  the  problem. 

The  round-trip  time  for  a  packet 
traveling  from  the  East  Coast  to  San 
I  Francisco,  for  instance,  is  about  .50  mil¬ 
liseconds.  The  travel  time  to  Tokyo. 

:  however,  can  be  as  much  as  200  milli- 
i  seconds.  While  that's  a  relatively  big 
I  difference,  it's  still  not  enough  to  cre- 
I  ate  a  headache  for  the  user. 

What  slows  Web  performance  is  the 
i  number  of  mund  trips  between  the 
I  host  and  user  that  are  needed  to  load  a 
Web  page,  Those  round  trips  can  total 
40, 50  or  more  and  add  significant 
amounts  of  time. 

In  Millipore's  case,  it  took  seven  to 
12  seconds  for  each  page  to  load  in 
:  lapan.  And  customers  there  felt  it  uxik 
)  longer  to  complete  the  Web  order, 
which  involved  loading  muJriple  pages, 
than  it  did  to  write  out  and  fax  an  or- 
I  der,  says  Jeff  O'Halloran.  manager  of 
I  Internet  services  at  Millipore.  "We 

NetU,  continued  on  page  M 


•  The  number  of  round  trips  between  the 
host  aiKt  user  was  reduced 
■  Web  page  loading  times  m  Japan  were 
reduced,  from  seven  to  12  seconds  to 
under  two  seconds. 


nCNNOlMY 


FpreSit,  confmued  from  page  31 
surveys  has  been  a  gold  mine.  “What  it 
really  does  is  allow  us  in  an  analytical 
and  scientific  manner  to  learn  what 
satisfies  our  customers  and  what  their 
needs,  wants  and  desires  are  in  utiliz¬ 
ing  our  Web  site.'*  Nadler  says.  “We  can 
see  what  changes  we  can  m^e  that  will 
have  the  biggest  bang  for  the  buck.” 

Using  the  research  data  and  statisti¬ 
cal  methodologies  from  the  customer 
input  analyzed  by  ForeSee.  Danskin 
was  able  to  pinpoint  the  e-business 
areas  that  needed  work,  Nadler  says. 
“Customers  for  the  most  part  want  to 
share  their  experiences  and  help  you 
build  a  better  she,”  be  says. 

Within  six  weeks  of  incorporating 
CS  SiteManager,  Danskin  learned  that 
site  navigation  was  one  of  the  biggest 
sticking  points  for  customers.  After 
spending  15  minutes  making  site 
chains.  Danskin  immediately  began 
seeing  increased  online  sales.  Nine 
months  later,  incremental  sales  in¬ 
creases  were  apparent,  much  of  which 


were  attributable  to  CS  SiteManager. 
Nadler  says. 

“It  was  looking  at  customer  service 
from  an  entirely  different  angle,  and 


ForeSee 
Results  Inc. 

URL:  www.foreseeresutts.com 
LOCATION:  Ann  ArtxK.  Mich. 
CATEOONY:  Wrt)  site  manaoement 
TECHNOLOOY:  CS  SiteManager 
HOW  IT  WORKS:  The  popijp  online 
survey  asks  Web  shoppers  about  their 
general  satisfaction  with  the  site's  function- 
alfty.  whether  they  intend  to  return  to  the  site 
and  about  its  look  and  feel,  pricing  and  val¬ 
ue,  says  Larry  Feed.  CEO  and  president  of 
ForeSee.  With  a  typical  customer-response 
rate  of  6%  to  12%.  a  company  can  gam 
critical  information  from  users  to  increase 
sales  and  ROI.  according  to  Freed.  “We 


that’s  what  we  thought  was  cutting 
edge.”  Nadler  says.  "We  were  going 
to  be  able  to  do  our  jobs  better.  It  ab¬ 
solutely  has  paid  for  itself.”  O  40999 


help  diagnose  the  problem.'  he  says.  CS 
SiteManager  uses  statisttcal  methodolo¬ 
gies  from  the  American  Customer  Satisfac¬ 
tion  Index  to  create  its  data 
CUSTOMER  SAMPLMe:  Tower 
Records.  Horne  Shopping  Network. 
Cingular  Wveless,  HaUmadt  Flowers  Inc.. 
F6rbes.com.  toe  National  Hockey  League. 
DTE  Energy  Co. 

TW:  Set  Web  site  investment  priorities 
around  direct  input  from  customers. 
WHAT'S  Hi  STORE:  The  prospects 
for  an  independent  company  flat  surveys 
Web  site  users  and  provides  actionabie 
advice  to  Web  site  builders  appear  bright.' 
says  Michael  Dortch,  an  analyst  at  West¬ 
port.  Conn.-based  Robert  Frances 
Group  Inc. 


Millipore  Takes  Fast  Track 
To  Asia  With  Global  Network 

W  WTRICK  THIBODEAU  using  the  Web  was  quicker  than  send- 

Milhpore  Corp.  wanted  its  Japan-based  ing  a  handwritten  fax.  That  wasn’t  nee 
customers  to  move  to  Web  orderii^  essarily  simple  to  do. 

but  first  it  had  to  convince  them  that  The  corporate  IT  strategy  for  this 


Billerica.  Ma$s.-based  bioscience  com¬ 
pany  is  to  keep  its  data  services  cen¬ 
tralized.  Hiat  meant  customers  ftom 
Asia  would  be  ctmnecting  to  Web 
servers  halfway  around  the  globe.  And 
that  was  the  problem. 

The  round-trip  time  for  a  packet 
traveling  from  the  East  Coast  to  San 
Francisco,  for  instance,  is  about  50  mil¬ 
liseconds.  The  travel  time  to  Tokyo, 
however,  can  be  as  much  as  200  milli¬ 
seconds.  While  that’s  a  relatively  big 
difference,  it’s  still  not  enough  to  cre¬ 
ate  a  headache  for  the  user. 

Wiat  slows  Web  peribnnance  is  the 
number  of  round  trips  between  the 
host  and  user  that  are  needed  to  load  a 
Web  page.  Those  round  trips  can  total 
40, 50  or  more  and  add  significant 
amounts  of  time. 

In  Millipore’s  case,  it  took  seven  to 
12  seconds  for  each  page  to  load  in 
Japan.  And  customers  there  felt  it  took 
longer  to  complete  the  Web  order, 
which  involved  loading  multiple  pages, 
than  it  did  to  write  out  and  fax  an  or¬ 
der,  says  Jeff  0*Halloran,  manager  of 

Internet  services  at  Millipore.  “We 
I  continued  on  page  34 


says  N.?tLi's  lechnology  helped  Millipore  speed  up  online  transactions. 


Kyocera’s  advanced  technology  makes  network 


administration,  updating,  and  training  a  snap.' 


•  Rated  #1  in  Performance/Reliability* 


•  Integrated  Wireless  Soludons 


Common  driva;  common  interface  makes  business  simple  and 
increases  prDductivit)t  And  NetYiew™  software  gives  you  one  tool 
to  manage  everything  If  you  'te  looking  for  the  best  in  class 
pcintets,  copiers,  MFPs,  and  network  solutions,  look  to 
Kyocera  for  an  exceptional  solution. 

MIS  Director 
Mkhiest 


•  Extremely  Low  Cost  of  Ownership 
•  Cartridge  Free  Drum  Design 


Hie  simple  idea  that’s  making  it  big  everywhere. 


t^KuacERa 


Document  Solutions 


r 


CMWEnmu  $4(1^11.  iiM 


TECHN0106Y 


CleaiS 

Net'.'.:, 

WWW  c(€arsi9htnet.cDr' 

S«n  Mateo,  Cjirl. 

Networking 

ClearSigtil  Analy;«>t 
Monitors  and  anatytes 
networks  and  netwotfc  appbcatiorts  m  real 
lima  Of  for  poslevent  (fo»ens»c)  analnra 
Valparaiso 

Broadband  Communicalion  Srstems  U  S 
Oeparlment  of  Transponation  Federal 
Hiatiway  Adminelfalion,  Electronic  Arts 
Inc  .  Prne  Mountain  Group  Inc  .  NTT  Labs 


WWW  computas.com 

Sammamish,  Wash 
Enterprise  systems 
Metis  3.4  Enterprise 
Software  for  creating 
visual  modets  of  emerprise  architectures 
and  ottier  systems  to  create  compre- 
hensrve  views  of  an  operation  For  use  in 
decisron  supoort  and  organuationai 
dovemance 

U  S  Geparlmenl 

of  CommefO!  U  S.  Census  Bureau  U.S. 
Foud  and  Drug  Adminrstratmn.  The  Boeing 
Co  .  NCR  Corp. 


WWW  aasyask  tom 
Marlboro  Mau 
Appiicalion  ileveiopm<‘nt 
EasyAsh  Enterprise  9 
A  search  and  intwma- 
tion-retrnrvaJ  ckaftomr  that  offers  smglr 
poirt  access  to  diHerenl  types  of  data 
regardless  of  format  or  data  tocalion 

Forbes  com  fnc  . 
Eerids  End  Inc..  Cetnliari  Human  Resource 
Sakilmrts.  E-Coan  he 


WWW  hypenon  LOfr 
^  Sunnyvale  Cant 

Enterprise  systeirw 
Hyper  Kin  Pwfonnance 

Surtr 

Prcividr-^  query,  analysr, 
arvl  reporting  capabulilies  withm  a  Web 
based  dashboard  interface  Lets  users  ac¬ 
cess.  artahr/e  and  distnbule  business  data 
City  of  San  Jose 
Dvact  Energy  Essential  Home  Services, 
H.S  Army  Recruilrno.  BAX  Global  Inc 


Netli.  confinued  from  pa^i<3^ 
wanted  to  make  sure  the  online  trans¬ 
action  process  was  as  last  or  faster 
than  it  would  take  to  handwrite  this 
page  and  tax  it  in."  O'Halioran  says. 

One  idea  was  to  build  and  maintain  a 
data  center  overseas  to  handle  Asia- 
based  Web  services,  but  it  was  rejected 
K-eause  of  the  expense.  Instead,  two 
years  ago.  Millipore  turned  to  Notl.i 
Inc.,  then  a  relatively  new  company 
with  a  technology-  for  speeding  Inter¬ 
net  connections. 

Palo  Alto.  Calif -based  NctLi  ad¬ 
dressed  the  chief  problems  ofWeb 
performance  —  the  TCP  and  HTTP 
Internet  protocols  —  by  building  a 
network  with  points  of  presence  in  the 
Asia-Pacific  region  and  Europe. 

When  customers  in  lapan  type  in  j 
Millipore  s  Web  address,  they're  rout¬ 
ed  to  a  NetLi  data  center,  which  uses 
a  protocol  the  company  built  for  opti-  j 
miring  Web  page  loading  and  reducing  I 
the  number  of  round  trips. 


URL:  www.nelli  com 
LOCATION:  Palo  Alto.  Calif 
CATEGORY:  Aoplicafion  development 
TECHNOLOGY:  NetLightmng 
HOW  IT  WORKS:  Specaiired  servers 
and  protocols  deployed  as  a  global  net¬ 
work  eltmmafe  the  Internet's  perfor¬ 
mance  limifations.  It  optfmizes  Web  page 
loading  with  a  protocol  that  overcomes 
problems  with  TCP  and  HTTP  to  exchange 
information  without  multiple  round  trips. 
The  company  couples  that  technology 
with  Its  own  points  of  presence  m  Asia 
and  Europe 


CUSTOMER  SAMPLING;  NetRatings 
Inc..  Hewlett-Packard  Co..  Thomson  Finan¬ 
cial,  Tektronix  Inc- 

WHAT'S  IN  STORE:  According  to  Peter 
Sevcik,  an  analyst  at  Charlottesville,  Va  • 
based  application  performance  measure¬ 
ment  firm  NelForecasi  Inc ,  NelLi's  technol¬ 
ogy  IS  unique.  He  says  it  helpsaddress 
growing  problems  in  delivering  applicaliofFS 
•  the  increasing  comptexiiy  of  Web  pages, 
coupled  with  longer  distances  as  a  result  of 
globalization 

"A  lot  of  people  think  if  s  about  band¬ 
width,"  saysSevcik  But.  in  fact,  the  prob¬ 
lem  IS  the  number  of  trips  involved  between 
the  user  and  host,  he  says. 


O'Halioran  says  the  serv  ice  has  cut  |  IT  infrastructure.  If  NctLi's  service 
Web  page  loading  times  in  Japan  to  were  to  fail,  the  worst  that  would  hap- 
well  under  two  seconds.  Implementing  i  pen  is  that  customers  would  be  routed 
tt  required  no  changes  to  Millipore's  i  directly  to  Millipore's  site.  O  49002 


Shell  Pipeline  Cuts  Paper  Sludge 
With  Mobile  Tracking  System 


•After  implementing  SAP  A(i's  ERP 
system  thmughoui  the  company  in 
20<)!.  Shell  Pipeline  Ox  needed  to  find 
a  way  to  improve  the  efficiency  of  its 
U.S.  pipeline  maintenance  operations. 


Houston-based  Shell  wanted  to 
eliminate  the  extra  time  and  work  it 
took  fur  its  pipeline  technicians  in  the 
field  to  write  up  inspection  and  repair 
reports  by  hand  —  which  was  some¬ 
times  done  on  the  backs  of  envelopes 


Attiirved  80*0  aaocrless  tMjsinns 
function 

SavlIS  two  lO  ttHtsV  hours  pur  WCCK  by 
eliminating  paper-  pfeparalior  time 
Efiminates  su  to  eight  hours  of  data 
cntr>  time  per  person  per  week  for 
reheying  of  work  orbei  information 


jpillllIJ:^ 


URL:  WWW  mfowave  com 
LOCATION:  Burnaby  British  Columbia 
CATEGORY:  Mobile-'wireless 
TECHNOLOGY:  Teiispark  Mobile 
Enleronse 

HOW  IT  WORKS:  This  packaged  mobile 
aDOkcanon  suite  draws  data  from  multiple 
back-end  systems  using  either  the  cus¬ 
tomer's  enterprise  application  integration 
architecture  or  Infowave's  own  APIs  to  de¬ 
liver  data  to  mobile  devices,  including  lap¬ 
tops  and  handhelds  Data  is  communicated 
back  to  the  enterprise  via  a  wireless  con¬ 
nection  or  a  'link  and  sync’  cradle  Info- 
wave  supports  data  systems  such  as  Ora¬ 
cle,  SAP,  Siebel.  MRO  Software  Inc 's 
Majumo  and  Indus  Corp 's  Empac 
CUSTOMER  SAMPLING:  Hydro 
One  Inc  -  Shell  Oil  Co .  Unilever,  the 
U.S  Navy 


TIP:  "Do  It  right  the  first  lime."  says  Jerry 
Meerkatz  CEO  and  president  of  Infowave 
"A  good  Dodton  ol  our  customers  toed  to 
build  a  sotulion  first  and  then  realized  that 
packaged  apps  are  easier,  faster  and  more 
cost-effeciive  to  deploy  They  ended  up 
wasting  cash  and  postponing  R0l.‘ 
WHAT’S  IN  STORE: 'Ongoing  research 
by  the  The  451  Group  strongly  indicates 
that  mobile  initiatives  are  rapidly  evolving, 
especially  in  such  fieW-force  areas  as  asset 
management,  where  mobile  companies 
such  as  Inlowave  are  focusing  panicular 
allemion.'  says  Tony  Rizro.  an  analyst  at 
the  New  York-based  firm 
This  year  is  a  bona  fide  breakthrough 
mobile  year,  with  many  mobile  players  see¬ 
ing  significant  enterprise  irtleresf .  Rather 
than  chasing  pitots,  the  stronger  mobile 
players  are  nowsecunng  real  business.'  he 
says  “Infowave  IS  finally  seeing  positive 
movement  in  its  pipeline  of  customers  and 
should  see  some  significant  new  deploy¬ 
ments  in  the  second  half  of  2004  * 


I  — and  then  return  to  the  oflficc  lo 
J  manually  input  the  data  into  the  SAP 
Preventive  Maintenance  application, 
says  Brian  Ashe,  former  manager  of 
I  measurement  and  quality  services  at 
j  Shell  Pipeline,  a  wholly  owned  sub- 
I  sidian’ofShellOilPjxiductsUS. 

Ttt-o  years  and  several  pilot  pro- 
[  grams  later.  Shell  decided  to  imple¬ 
ment  Infowave  Software  Inc.'s  Tell- 
'  spark  Mobile  Enterprise  suite  to  allow 
I  its  pipeline  technicians  to  better  track 
I  and  service  its  pipelines  as  well  as  im- 
j  prove  reporting  compliance,  according 
I  to  Ashe. 

:  “Before,  they  would  have  to  go 

through  27  to  29  different  screens  to 
input  each  piece  of  data,  and  they 
j  found  they  were  spending  more  screen 
!  lime  than  w  rench  time  in  the  field." 

I  he  says. 

I  Today.  Teiispark  enables  the  tech- 
I  nicians  in  the  field  to  enter  data  into 
i  handheld  devices,  which  lie  in  with 
*  the  SAP  application,  giving  them 
j  access  to  equipment  information 
I  and  work  orders  and  saving  time. 

I  O 49000 


TECHROlOliY 


IMUt  conrinued  from  page  32 
wanted  to  make  sure  the  online  trans¬ 
action  process  was  as  fast  or  faster 
than  it  would  take  to  handwrite  this 
page  and  ^  it  in.”  O'Halloran  says. 

One  idea  was  to  build  and  mainfain  a 
data  center  overseas  to  harutip  Asia- 
based  Wd>  services,  but  it  was  rejected 
because  of  the  expense.  Instead,  two 
years  ago,  Millipore  turned  to  NetLi 
Inc..,  then  a  relatively  new  company 
with  a  technology  for  speeding  Inter¬ 
net  connectioos. 

Palo  Aho,  Calif.-based  Netli  ad¬ 
dressed  the  chief  problems  of  Web 
performance  —  the  TCP  and  HTTP 
Internet  protocols  —  by  building  a 
network  with  points  of  presence  in  the 
Asia-Padfic  region  and  Europe. 

When  custonaers  in  Japan  type  in 
Millipore’s  Web  address,  they're  rout¬ 
ed  to  a  Netli  data  center,  which  uses 
a  protocol  the  company  built  for  opti¬ 
mizing  Web  page  loading  and  reducing 
the  number  of  round  trips. 


Netli  Inc. 

URL  www.nei.cofr 
LOCATMm:  Palo  Afto.  Calif. 
CAIEMRV:  Application  development 
TEGHMlMVtNetlJOhtnina 
HOW  IT  WORKS:  Speciakred  servefs 
and  protocols  deployed  as  a  global  net¬ 
work  eliminate  tfie  Interrtet's  perfor¬ 
mance  limilations.  ft  optimizes  Web  page 
loading  with  a  protocol  that  overcomes 
problems  with  TCP  and  HTTP  to  exchange 
information  without  nsitiple  round  trips. 
The  company  couples  that  technology 
with  its  own  points  of  presence  in  Asia 
and  Europe. 


CUSTOMER  SAMPUNO:  NetRatings 
Inc..  Hewfett-ftckard  Co..  Thomson  Rnan- 
cial,  Tektronix  Inc. 

WHATS  Rl  STORE:  According  to  f^er 
Sevik.  an  analyst  at  Charfottesvlfte.  V^.- 
based  awkcabon  performance  measure¬ 
ment  firm  Netforecast  Inc.,  Neli's  technol¬ 
ogy  is  unique.  He  says  it  helps  address 
growing  problems  in  delivedng  applications 
-  the  increasing  complexity  of  Web  pages, 
coupled  with  longer  distances  as  a  result  of 
globalization. 

’A  lot  of  people  think  It's  about  band¬ 
width.*  says  Sevcik.  But  in  tecL  the  prob¬ 
lem  B  the  nurnber  of  trips  Involved  between 
the  user  and  host  he  says. 


O’Halloran  says  the  service  has  cut 
Web  page  loading  times  in  japan  to 
well  under  two  seconds.  Implementing 
it  required  no  changes  to  Millipore’s 


IT  inftastructure.  If  NetLi's  service 
were  to  fail  the  worst  that  would  hap¬ 
pen  is  that  cxistoroers  would  be  routed 
directly  to  MiUipore’s  site.  O  49002 


Shell  Pipeline  Cuts  Paper  Sludge 
With  Mobile  Tracking  Sy^em 


BY  LINDA  ROSENCRANCC 

After  implementing  SAP  AG  s  ERP 
system  throughout  the  company  in 
^1,  Shell  Pipeline  Co.  needed  to  find 
a  way  to  improve  the  efficiency  of  its 
U.S.  pipeline  maintenance  operatirms. 


Houston-based  Shell  wanted  to 
eliminate  the  extra  time  and  work  it 
took  for  its  pipeline  technicians  in  the 
field  to  write  up  inspection  and  repair 
reports  by  hand  —  which  was  some¬ 
times  done  on  the  backs  of  envelopes 


Infowave 
Software  Inc. 

URLwwwjnlow8va.com 
UCAnolfc  Burnaby.  British  Colurnbia 
CWERORT:  Mobke/wiretess 
TECHHOUWY:  Tekspark  Mobile 
Emerprtse 

HOW  IT  WORKS:  This  packaged  mobile 
application  suite  (kaws  date  from  rndtipte 
back-end  systems  usmg  either  the  cus- 
lomer's  enterprise  applicalion  integration 

architectue  or  Infowave's  own  APIs  (0  de¬ 
liver  date  to  mobile  devicss.  including  lap- 
titos  and  hafKtiekte  Date  is  oxnrnuriicated 
backtotheenterprtseviaawitelesscon- 
necbonoralinkandsync’aadte.lnto' 
««ve  supports  data  systems  such  as  Gra¬ 
de.  SAP.  Siebel.  MRO  Software  ina's 
Maxirrro  and  Indus  Corp.^  Empac. 
CWnWBISAMPUM:HyikD 
0r»  Inc..  SheB  Of  Co..  Unilever,  the 
U.S.Navy 


TIP:  Do  it  right  the  first  time,*  says  Jerry 
Meerkatz.  CEO  and  presidenl  of  frifowBve. 
*A  good  portion  of  our  customers  tried  to 
buld  a  solution  first  and  then  reehzed  that 
packaged  apps  are  easier,  faster  and  more 
cost-effective  to  deploy.  They  ended  op 
wasting  cash  and  postponing  ftOI.* 
WlUrS  M  STORE:  Dngoing  research 
by  the  The  45t  Group  strongly  indicales 
that  riwbite  initiatives  are  rapidly  evoiving. 
especially  in  such  field-force  areas  as  asset 
managemenL  where  mobile  companies 
such  as  Infowave  are  focusing  particuiar 
attention.’  says  Tony  Rizzo,  an  analyst  at 
the  New  fork-based  firni. 

‘This  year  is  a  bona  fide  breakthrough 
motrie  year,  with  many  mobile  players  see¬ 
ing  significarrt  enterprise  rrnerest.  Rather 
than  chasing  pitote  thestrorigerrnobile 
playtes  are  now  securing  real  business. '  he 
*bifowaw  is  finaly  seeing  positive 
movement  in  its  pipeline  ofcustomers  and 
shoukfseesomesignificantnewdeploy 
ments  in  the  second  half  of 2004.” 


—  and  then  return  to  the  office  to 
manually  input  the  data  into  the  SAP 
Preventive  Maintenance  application, 
says  Brian  Ashe,  former  manager  of 
measurement  and  quality  services  at 
Shell  Pipeline,  a  wdmlly  owned  sub¬ 
sidiary  of  Shell  Oil  Products  US, 

IVo  years  and  several  pilot  pro¬ 
grams  later.  Shell  decided  to  imple¬ 
ment  Infowave  Software  Inc’s  Tell- 
spark  Mobile  Enterprise  suite  to  allow 
its  pipeline  technicians  to  better  crack 
and  service  its  pipelines  as  well  as  im¬ 
prove  reporting  compliance,  according 
to  Ashe. 

“Before,  they  would  have  to  go 
through  27  to  29  different  screens  to 
input  each  piece  of  data,  and  they 
found  they  were  spending  more  screen 
time  chan  wrench  time  in  the  neld,” 
he  says. 

To^,  Telispark  enables  the  tech¬ 
nicians  in  the  held  to  enter  dau  Into 
handheld  devices,  which  tie  in  with 
the  SAP  application,  giving  them 
access  to  equipment  information 
and  work  orders  and  saving  time. 
049000 
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Learn  How  to  Achieve 
Storage  Networking  Success 


• 

r  ■  -  A :  »  ^ 

P'  '  3 

19 

■L-'a  ^ 

[- 

1  I 

St 

■ 

1  1 

• 

'lb*  Uadtag  EwcuNm 
Cotdmnc*  for; 

'  IT  Management 

•  Storage  Architects 

•  IT  Infrastructure  PrnfaaOonili 

-  Business  Continuify  Flaming  6verti 

-  Data  Management  SgadaMs 
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Learn  How  to  Achieve 
Storage  Networking  Success 

•  Get  a  Contemporary  Overview  of  Today's  Storage  Networking  Issues  and  Opportunities 

•  See  How  to  Implement  and  Deploy  the  Latest  m  Storage  Networking  Technologies 

•  Hear  the  Latest  m  Enterprise  Security 

•  Learn  from  Best  Practices  and  Case  Studies 


Co  Owen  and  Rradurefl  o, 

cwiruMU 


Why  You  Should  Attend 

Are  you  responsible  for  managing  your  company's  storage  assets  and  strategies'’  Want  to 
exchange  innovative  ideas  and  strategies  with  other  executives  who  share  the  same 
objectives?  Then  attend  Storage  Networking  World,  where  you'll  network  with  and  learn 
from  renowned  experts  and  the  nation's  top  user  executives. 


Conference  At-a-Glance  o 

For  details  updates,  and  to  register  visit  www.snwusa.com/cw 

MONDAY,  OCTOBER  25 


(sub/ect  to  change) 


Addressing  ffigh 
Density  CooHrtg  of 
Storage  Networking 
Equipment  at  the 
Facility  Laval 
OonM  Beaty.  Founder  & 
President  DIB  Associates 


Dennis  Martin,  Senor  Analyst. 


Power  Statemants. 
Questtons  and 
Answers  Techniques 


^  Greg  SchuU,  Senior  Analyst.  twd  GoWstem, 


Honvd  QoUstem  Assocates.  Inc 


tOSBam  to  1 1  SOam  Role  of  Server  Bladas 
and  WtiMAntion  in  Next 


Arun  Tinet*.  Founder  and 
Consulting  Analyst  Taneja  Group 


Why  Tape  Continues 
to  Make  the  Qrada 

Riceard  HaradA  President.  Tape 
Technology  Council 


Communicatien  Skills 
for  the  rr  Techie 

BiU  PeUius.  Dvector  of  Storage 
Architecture.  GlassHovse 
Technologies 


STWIA6E 

NEiwnaiK 

WORLD 

CWnTElWNlD 


1 1  30am  10  l  OOpm  Luncheon 


-  Virtualization  A 
Securing  Vbur  Storage 

-  Focus  on  Networking 
Your  borage 

‘  Focus  on  Storage 

-  SAN  Menagement 
■  Vbice  of  the  User 


■hwpre-  I  SPONSOREDBV 

[Quantum 

at  the  RittCarttm  Gall  CU>  located 
aOfactnt  to  the  JW  Uamotf  Grande 
Lakes  Resort  e  comptmentary  (a 
S<95  •ahici'foi  regreteied  IT  end 
users  (Other  parkciptnls  ndudng 
SBonsors  end  lendor  represeniatnes 
may  piqr  on  v>  Vs  ewleol^  bass 
and  are  respone 
Meforalwiiilict- 
y.— “•Bi^oVing 


•  JW  Marriott  Grande  Lakes  Resort  •  Orlando,  Florida 


For  more  information  and  to  register,  visit  www.snwusa.com/cw  or  call  1*800-883-9090 


TUESDAY,  OCTOBER  26  General  Sessions  Begin 

8  30ain  to  9  1 5am  L  «  Don  Tapscott  Rertowoed  Bestselling  Author  of  The  Naked  Corporation, 

Grrming  Up  Digital  and  Paradigm  Shift  h 

9  15am.  to  The  future  of  Knowledge  Management  — 

Jor».  Hatar^hd  MD  C'O  Care&.our  Hea.tn  3  Wj  , 

9  46am  to  1 0  1 5am  Kevin  Rollins,  President  A  CEO.  Dell 

10  30am  to  1 1  00am  Keith  Glennan,  VP  «  CIO,  Northrop  Grumman  IT 

1 1  00am  to  1 1  30am  KM  Elevating  the  Art  of  Storage 

Stvijifc  'wata  CEC'  "-i.ta.mi  Data  System. 

1 1  30am  to  noon  Industry  Presidents'  Roundtable:  A  Market  Outlook 

Mooefatiy  Don  Taoscott  Autno*  o*  The  NtkeO  Corporation  Grovnng  Up  Digrt*/  anfl  Paradigm  SMI 


I  CONCURRENT  LUNCHEON  SESSONS 


General  Networking  Luncneon  session  Measuring  the  Value 

Luncheon  Slew  Oupiesse.  ^oundar  Of  IT  Investments 

On  tne  Valencia  Lawn  HH  &  Senot  Analyst.  MB  Richard  SneUer. 

Enterprise  Storage  Goi*  Managmg  Partner. 

InterLInity  Group 

Storage  and  More;  Is  Convergence  Ahead? 

NetwoMung,  security  and  storage  pros  ascuss  me»  technology  roadmaps,  spend»ig  Dians  aiv)  vendor  relatioosh 
<en  Male  CEO  A  Founder.  TheVitoPro  (TIP) 

1  30pm  to  2  00pm  End  User  Case  Study;  Best  Practices;  Data  Center  Consolidation 

David  Cohen  V®  Technology  Architecture  Group  Me— NLy-cn 

2  OOpm  to  2  SOpm  Gfeg  Reyes,  Chairman  A  CEO,  Brocade  Communications  Systems 

2'30pm  to  3  (X)pm  End  User  Case  Study:  Evaluating  Options  for  Business 

im  Continuity/Disaster  Recovery  Plans 

Rod  Mueller  Manage-  o*  Technology  irvj  intrast'oPtu'e  nte—alionii  Pipe’ 

3  OOpm  to  3  45pm  CTO  Insights  Panel 

Moderator  Jon  William  Torgg  CEO  &  Founder  Toigo  Partners  intematcma' 


I  CONCURRENT  SESSIONS 


5  30pm  to  8  30pm  Expo  wfh  Omnef  /  InteroperaPility  4  Solutions  Demo  Open  jj  J 


WEDNESDAY,  OCTOBER  27 


9.15am  to  9:45am 
945am  to  10'15am 


1 1  30am  to  12  l5pm 

12  iSpmlo  1  45pm 
1.45pm  to  2:15pm 
2  15pm  to  2-45pm 
2  45pm  to  3.30pm 


HNick  Carr,  former  Executive  Editor  of  the  Harvard  Business  Review 
and  author  of  Does  IT  Afaffar? 

End  User  Case  Study 
Industry  Leader  Presentation 

End  User  Casa  Study;  Realizing  the  Vision  of  Management  Simplicily  and  Improved 
1^^  Business  Processes  in  a  DemarKling.  Distribuled.  High4>erfonnance  Emironment 

Michael  Prince  VP  i  CO  Burlington  Coat  Facitri 

3  The  Half-Life  of  Storage  Trends 

Peter  van  Oooen  Chairman  S  CEO,  AOC 

H  Panel:  End  Users  Speak  Out 

Mpderalor  John  Du  Editor  m  Chie*  NelnrC’*  WotHl 
Expo  4  Luncheon 

End  User  Case  Study 

Industry  Leader  Presentation  . 

Analyst  Roundtable  Panel 

Moderator  Jon  WiSam  Toigo.  CEO  A  Founder  Tctgc  ^rtnar^  Inlernatianal  ^mBEBb 


I  CONCURRENT  SESSIONS 


3;45pm  to  5.i5pm 
5  15pm  to  7  15pm  Expo  and  Reception 
7:30om  to  9-OOpm  Gala  Evening,  Dinner  and  Entertainment 

THURSDAY,  OCTOBER  28 


«  SoMtoea  OaiM 

40-pka  SNA  mernter  cc 


SNW  is  a  great  venue 
for  peer  discussion  >  an 
opportunity  to  provide  ' 
feedl^ack  to  vendors  on 
what  users  need  from  them  - 
I  sat  down  with  my  key 
vendors  and  shared 
information 

fJohn  Greer 

Director,  IT  Infrastructure 
Pacific  Gas  &  Electric 


:  ONCURRENT  -EChNICAi  »  BUSINESS  TUTORIALS 


Cjtnference  Concludes 


JW  Marriott 
Grande  Lakes 
Resort 

Orlando  Florida 


Hotel  Reservations 
and  Travel  Services 

IDG  T-avei  is  the  official  j  t 
travel  company  for  Storage  i*^n  vITvSt'! 

hielworking  Wond  They  I - ! — !1!_ 

are  yoor  one-sloe  shop 

for  exclusive  discounted  'ates  on 

hotel  accommodations 

To  reserve  you'  accommodat-ons  v  y.t 

www.etcentral.coin 

Ibo  can  also  call  Our  con'etence  housing  I'e  ;• 

1-S00-340-2262  (or  1-50B-82G-8686) 


For  more  information  and  to  register,  visit  www.snwusa.com/cw  or  call  1-800-883-9090 


Application  for  Conference  Registration 


Octobar  2S-2t,  2004 
iWMwiMt 
CnMto  UliM  OvMft 


Fu  (Ms  completed  eppBcalion  to  1-508-820-8254  oi 

apply  onfine  afc  wnimsnwiisa.com/cw 

Your  business  card  is 
REQUIRED 

a  not  Indicated  on  your  business  card,  please 
provide  the  following  required  information: 

to  process  your  application 

Ctrpeyite  Emj-  Ajp-es^ 

CortK-V''  Aemrn 

Registration  questions? 

Can-8(X)-883-9090orerTai'w-j^.-  -t.....--,-,--, 

Queslions?  Call  1-800-883-9090 

Need  eccommodations? 

Reserve  them  at  wwwetcentiaicom 

Please  call  ^8C>0-340-2262 
or  email  eventhousmgis.dgcofn 

PI»«sochocfcOWgo>thtteteo>lng;  I  6«rt,»w 

I  am  an  fT  End>  Utar*  Q  $*0S  General  Conference  Package  (October  C 


"TH* -W r«u«»  C^rvato. 

Q  *  •*"  •  Channel  Partner/  I  □  $3,000  Total  4-Dty  Package  (October 
Integrator/Conaultam  General  Corrlef»ftce  Tecnrmai  »no  Bofcnejs 


°  ^  26  4  27)  I  □  $U0B  General  Conference  Package 

1-^  Gwe  Conrerenc  Se»cr«  E«e  M.«,  &  Reeeptens  l  (e^Wes  Ger^rel  Or^ece  S,s««5  E«o  Me«  4  Ret w«n»l 

°  TotaU-DayPacka9e(October25,26,27,28) 

t  r*  C9"‘e'<we.  te.®  Tkm<4,  jnj  BusKiess  T,ki.i 

SkM  prahjced  t,ta*s  SMA-CerW^fry.  -Test-Re.),-  Couraaj  |  SM*  proOucM  T.rto,«i  SNU  CenAcitor  -Test-RMcy  C(m»s) 


□  %3.(^  T^i4-Dty  Package  (October  25. 26. 27  28)  □  $3,300  Total  4  - Day  Package  (October  25  26  27  28) 

General  CorrterenceTecnrwaTwewinesiTr^-M 

SMA  prott^ea  Tu,o,*i  s»M  Orrrfcjrcn  Test  R*»«y-Coyrs«)  SNIA  Breireea  Tu,o,.aii  SNU  CerW«ai!^-^.B»edy-  clr*,) 


.  . .  ,  - -  l  ■in»ra«a.>MLerw«ai»«M*5t-Kt*ly-Co«r-_,. 

•gr  ui  coireiemc  peieK  rarneot  me,  ovi*  «  N  Ke  i*  T”  «»Wn»i  tornurr,  repreterMUnn  po  S695  Hci 


Q  My  company  ta  Sponsoring/ 
Exhibiting  at  SNW 


A»  a  uoneer  >o.  me,  p*  ei^oie  tp  ananj  ueoig  a  reg^tra'iotr  ^ 
»tn»rsar«rw«srn«ig«co«"  &u«t«ftjnCa»  I  600  883  9090 


O  $$$9  (mraggrrSeptemoer  u  ?004i 
(aenerai  Cortference  Package  (October  26  i  27) 

'inckidea  General  Corrlertoce  Sesvont  Ei«c  Meats  4  Recepl®r<s) 

□  $14»0  To!ai4-DayPackage(0clobef  25, 26.27.28) 

I  "c-viOe*  Geneve  Conference  plot  fecnnreai  tra  Buvness  Tratvs 
SNIA  oroducee  Tuiora«  SNIA  Onf^aior  -TesJ  Reao,-  Coums) 

^«o  nitn  tOf  woneorsn*  iif  tnose  reg«ifation»  nare  aireaOr  Seen  assignee/. 


*«»Hersar».»srn»o54C0."  CMWenj'Ca*  I  800  883  9090<)rerr».rsn»re9feo..W*»rv«riocom  -wr •»gneo/iise!l  mer  ,Oii  rr. 

Q  I  am  a  representative  of  a  Non-Sponsoring  IT  >fendor  Company 

□  $6,000  ButiNM*  O^rMopmmt  Prota.eoMl  PkIus.  (or  Sales  Marketmg  ar^J  Baseless  De«iocment  Professronais  (■> 


□  St.29S  lafterSe(nen«e' 14  9004> 

General  Conference  Package  (October  26  4  27) 

I  .neluOesGer<et»iCor*er«<ice  Sessions  Meals4  ReeepWmsJ 

□  $^000  Total  4.Day  Package  (October  25. 26, 27  28) 

I  nck«es  General  Cc"*er»nce  plus  Te<i>"<»  tne  Bus^ess  Tr»t»s 
StifU  prpdutee  Ta«or«s  SNIA  Cert.fcatesB  -Test  Ready-  Courses) 

inay  register  at  me  prevarhng  rates  above  ISe*  ttw  tiatent  ust  of 


’^f«>y«^2»seati<»i  a.  ><».  ta>«M<9  «r«r- rate  ot  85  ox  !>ier.r»^ 

<eOB -egslraiee  sr-eae  eitt«*y  cy  CornpuNrwirB  l^ease  ca«  888-539-4506  .lire,  aiesleris 

Q  I  am  a  Rnanciai^uity  Analyst  and/or  Viontiire  C^Mal  Professional 

3  $1^  (tHrougnSeptempe.  la  jooai  □  $1,M0  iaf)er  September  u  JOOA) 

General  Conference  Package  General  Conference  Package 

t-r^NOes  Genera.  Comerervee  Seswns  Eaob  vrtciuees  General  ConferetKe  Sess«r.s  Eapb 

MtaisiRecepliorrs)  MeeisiHeceoton*) 

Q  I  am  a  qualified  member  of  the  press,  lean  verify  my  press  credentials 
Press  shouW  can  Enn  Keefe  at  1  -781  -915-5009  ta  register 

Please  fax  this  completed  application 
to  1-508-820-8254 


Payment  Method _ 

?*•**''"*'=''* "’tfSfbe'ece.vefl By C)ctooer6  3U04  04yaD*e»  Cornoulerwid) 

Marl  to  Coewuierwond  Arfn  i^n  MairTMsic  SOOCwConnectculRatn  Pisringr^rr  VIA  0170' 

3  American  Express  3  VISA  3  MasterCard 

Accourrt  Number _ 

Enpr'airon  Date _  _  _ 

Card  Holder  Narr«  _ 

Srgnatureof  CardHoWer _  _ 

Cwe«tetOf»  Poiey  (Ail  0*  tte  totorvrng  reourre  written  noBficabon  ^ 

He  or  shemav  suBSMyre  s-orTw  at^rvSee  tpr  tr.scj.,«e. 

^  ^  ^ 5  WMt 

Hiease  send  caneeHalron  reguests  v.a  ema*!  to  enwregacomouterworidcom 


Congratulations  winners! 

Enterprise  Management  World,  in  conjunction  with  Computerworld 
and  the  Distributed  Management  Task  Force  (DMTF),  proudly  announces 
the  results  of  the  first  annual  “Best  Practices  In  Enterprise  Management” 
Awards  Program,  This  program  recognizes  case  studies  highlighting 
noteworthy  solution  implementation  projects  and  deployments. 

Winners  in  each  of  the  following  categories  are: 

Distributed  Systems  and  Infrastructure  Impiementation 

•  Northern  Trust  -  Chicago,  Illinois 

•  PACCAR  ITD  -  Renton,  Washington 

Henorabk  Mention:  Malmondles  Medical  Center  -  Bmokirn,  New  York 

Security  and  Risk  Management 

•  Guardian  Life  Insurance  Company  of  America  -  New  York,  New  York 

■  Marriott  International,  Inc.  -  Washington,  DC 

Honorable  Mention:  The  George  \tMshington  University  -  Washington,  DC 

Industry  Regulation  Compliance  and  Corporate  Governance 

■  CDC  Ixis  -  Boston,  Massachusetts 

■  El  Camino  Hospital  -  Mountain  View,  Caiifornia 

Honorable  Mention:  Directpointe,  Inc.  -  Undon,  Utah 

Managing  to  Improve  TCO/ROI 

•  Arizona  Pubiic  Service  Company  -  Phoenix,  Arizona 

•  Inflow^  Inc.  -  Thornton,  Colorado 

Honorable  Mention:  Prudential  Financial  -  Newark,  New  Jersey 

Innovation  and  Promise 

■  Allstate  Insurance  -  Northbrook,  Illinois 

■  Baxter  BioScience  -  Westiake  Viliage,  Caiifornia 

Honorable  Mention:  Philadelphia  Stock  Exchange  -  Philadelphia,  Pennsylvania 


AWARDS  PROGRAM 
EXCLUSIVELY  SPONSORED  BY: 

EMC 

where  information  iives 


L^CMWIBWI 
^  EXIDm  HiUUeEiniT  IINU 

Best  Practices 

INENTERPlilSEIliUUeEMEIIT 


Program  Judges’  Criteria  for  Evaluation: 

Judges  evaiuated  and  ranked  the  finalists  m  each  catego^  according  to  their  substantiated 
Enterprise  Management  solution  attnbutes  and  achievements  against  a  set  of  criteria  such  as: 

'  Financial  return  and  measurable  payback 

-  Strategic  importance  to  the  business 

-  Substantive  Customer  xnpect 

-  Positn*  impact  on  other  business/organization  units 

-  Addresses  system  and  dcpertment  interoperability  and  heterogeneous  platform  integration 

'  Provides  a  strategic  advantege 

'  Supports  efficient  and  rel«bie  data,  mformation  and  application  shanng 

-  Addresses  cfteHenges  of  data,  information  and  appkcation  security,  recovery  and  business  amhnuity 


AMfards  Program  Judges: 

Lawrence  Whittaker.  Hudson's  Bay  Company  -  vemon  Turner,  lOC 

Fred  Whettkng.  Bechtel  Corporation  •  Cory  Ferengu  META  Group 

Ron  Milton  Computerwork)  -  Meri  Ferguson,  Progress  Energy 

Bruce  Hoerd,  SNWOniioe  com  •  Brenda  Christenson  independent  Cor«uitant 

Rck  Bauer,  The  Hill  School 


nCHNOLOGY 


WWW  compulefworld.cotn 


WWW  ipjniDqisliCi  co"’ 

HclUod  Mich 
SiiOOlychjifi’ERP 

On  Oemand  TM5 
P'ovmJm  cjMcify  pfo- 
(.uirrmnt  shipmpni  optimi/jitor'.  piecu 
'•Iin  and  •rc.qhi  MlHe-menf 

O'jnqp  Gloinift 
PepstA/iiPficasInc  Bjt.Hj 
A:neT«;j  Inr  C>i>Qu'td  lr'lefrtAt«t>n- 


WWW  logicllp'jrv  LOT' 

PilisPu'ijn 

ABOhr.jti«ii  djivelou-'n-pM 
Loq(d«i 

Md[K  '^taltonsJiips 

w.iriq  u>f1warc  tlPvrloo">enl  df.i«-ts  and 
&UVT>^»^«,  l/tfiCfiSPi  U'<ry  lOPPOft  tc! 
'(j  ur.'O'n.;/'.  Tijragc  andfpos*  assets 
TriCove  CNA  !'• 

■  .iM-p  Chj.i..-  [j  A  Cn 

.^T^.,^n..nC...p  r.......u.p,.yArn.r,ca 


•  Ill  :  )••  nU'.*' Jfiond'  '.Idtf  til  a  nfl 

-.1  >.  .u  ,•  ,is  gninqlTrr.ir'aqi- 

ariTWi-j, .. 

Si i..j.nt.tTrrhnM, 

•  i-p-.ii  i  I  iP.Mr-.--.  M!  L!c}  Wa 
Ch©»M  Ci'llc  P"i  l-w 


Mic 


P11„ 


h. 


S-u-.til, 

^.d8i.:.-S00 

anti  B'  .'l-i.i'.  I 

aurl'..  ^jnjiyfT,pn' 

scace:.  and  i.rr‘,cjiin,i.  t'Lnnph.iir.i 

llveats 

NASAAt^riRf 
leafChCrn?..!  iniMr.ipi’:-, 
wav  Cn‘Cd<]i>SlX»>  - 


Documentum  Saves  Big  With  Web 
Conference  Software  for  Training 


Prior  to  2001.  Documentum  Inc.  had 
used  a  smattering  of  Web  conferencing 
platforms  to  support  internal  training, 
corporate  communications  and  out¬ 
bound  marketing  activities.  Problem 
was.  the  .Web  conferencing  systems 
were  becoming  increasingly  expensive 
to  run  and  placed  severe  restrictions 
on  the  number  of  people  who  could 
access  them. 

At  that  time.  John  Grubbs,  manager 
for  education  information  systems  and 
C'leaming  at  the  document  manage¬ 
ment  software  maker,  had  a  mandate 
fn>m  his  chief  financial  officer  not  to 
increase  Web  conferencing  ciists.  “We 
were  going  to  lose  of  the  service 
level  if  we  d  stayed"  with  one  Web  con¬ 
ferencing  vendor  at  the  dollar  amount 
the  CFO  had  allocated,  he  says. 

Enter  Cambridge.  .Mass-  based  Inier- 
wise  Inc.  To  stan.  Interwise  offered 
Pleasanton.  Calif.-based  Documentum 
a  hosted  Web  conferencing  platform 
called  ECP  Connect  that  supports  an 
unlimited  number  of  users  for  a 
575,000  flat-fee  annual  license.  In  com¬ 
parison.  bids  from  competing  vendors 
ranged  from  5290.000  toS360.00()  for 
300  concurrent-user  licenses. 

In  addition.  Interwise  wa.s  able  to 
provide  Documentum  w  ith  several 
technical  advances  that  other  vendors 
w-crenT  able  to  offer,  such  as  voice-  ' 
ovcr-IP  ( VoIP)  support,  editable 
recording  capabilities  and  integrated 
scheduling  for  Microsoft  Outlook. 
Documentum  has  achieved  other  ' 


•  Eiiminated  S45Q.OOO  in  Web 
conferencing  overage  charges 

•  Cut  nwte  than  $600,000  in  annual 
phone  bridge  and  other  eipenses 
through  VoIP  support  capabilities 


benefits  from  the  Web  conferencing 
system.  In  2000.  the  Iasi  year  that  the 
company  was  using  Web  conferencing 
technologies  from  other  vendors,  it 
paid  S450.000  in  overage  charges,  says 
Grubbs.  Those  fees  have  been  elimi¬ 
nated  through  the  flat-fee  agreement 
w  ith  Interwise. 

Moreover,  bec.iuse  the  other  Web 


conferencing  vendors  didn't  support 
VoIP.  Documentum’s  phone  bridge  and 
other  costs  swelled  to  more  than 
$600,000  in  2000.  Those  costs  have 
also  been  eliminated. 

More  important,  the  Interwise  sys¬ 
tem  has  effectively  supported  Docu¬ 
mentum’s  education  business.  After 
Sept.  11. 2001.  revenue  from  Documen- 
tum's  classroom  training  dropped  and 
then  flattened  out  when  customers  be- 
j  came  reluctant  to  fly  employees  for 
I  classroom  training,  says  Grubbs. 

I  However,  revenue  for  the  company's 
I  online  training  courses  supported  by 
j  the  lntenvi.se  system  have  grown 
i  steadily  since  they  were  launched  two 
and  a  half  years  ago  and  now  account 
I  lor  If^'n  of  the  division '.s  annual  sales, 
j  says  Grubbs.  In  fact,  the  last  quarter's 
revenue  for  the  North  American  edu¬ 
cation  division  was  approximately  S1.3 
million.  O  49001 


URL:  WWW  interwise  com 
LOCATION:  Santa  Clara.  Calif 
CATEGORY:  Enterprise  systems 
TECHNOLOGY:  ECP  Connect 
HOW  IT  WORKS:  Delivers  an  unlimited 
number  of  Web  meetings,  audio  confer¬ 
ences.  e-learning  courses  and  Web  semi¬ 
nars  lor  a  fined  price  A  disfnbuled-server 
afchifecfure  and  a  multimedia  conferenc¬ 
ing  bridge  provide  scalable  and  secure  in¬ 
tegrated  conterencing.  Windows  or  Java- 
based  clients  can  conf>ect  to  geographi¬ 
cally  distributed  communication  servers 
that  route  synchronized  real-time  or 


recorded  audio,  video  and  data  streams 
CUSTOMER  SAMPLING:  QAO  Inc 
Halliburton  Co .  Documentum,  Nestle  SA 
RWD  Technologies  tnc 
- ,  HP:  Integrate  the  system  with  other  key 

•  business  applications  and  processes 

[  (such  as  portals  or  CRM  systems)  so  It 
.  integrates  into  employees'  daily  work 
I  WHAT'S  IN  ST0R&  "One  of  the  trends 
I  1  see  IS  that  conferencing  is  becoming 
»  presence-enabled  -  itsmergingwiihin- 
J  stantmessaging.'saysLouLalham.an 
i  analyslat3artnerlnc.‘Alolofthesame 

•  vendors  are  offering  products  in  both 

j  spaces, andlseethelinesbeiweenthem 
I  starting  10  blur  " 


Intelsat  Stays  a  Step  Ahead 
With  Data  Management  Software 


8V  STEVE  ALEXANDER 
For  the  IT  department  at  Intelsat, 
the  telecommunications  firm  that 
launched  the  first  commercial  com¬ 
munications  satellite  in  1965.  the  chal¬ 
lenge  isn’t  reaching  for  the  stars  but 
trying  to  keep  up  with  the  pace  of  its 
own  business. 

When  it  needed  a  new  data  ware¬ 
house,  Bermuda-based  Intelsat  chose 
management  software  from  London- 
based  Kaiido  l.td..  in  the  hope  of  being 
able  to  rapidly  update  its  business 
models  to  cope  with  massive  corporate 
changes. 

Intelsat  needed  to  install  a  new  data 


SLf- 


I  warehouse  that  could  be  updated 

rapidly  as  a  result  of  big  changes;  In 
I  2001.  it  became  a  private  company  af- 
*  ter  37  years  as  a  quasigovernmentaJ  in- 
j  stitution.  It  then  launched  a  massive 
reorganization  and.  earlier  this  year, 
acquired  satellite  operations  from  Lo¬ 
ral  Space  and  Communications  Ltd. 

"When  we  went  private,  we  needed 
better  financial  information  because 
wc  needed  to  be  quicker,"  says  Pradip 
Sitaram,  director  of  IT  for  business  and 
operational  support  systems  in  Intel¬ 
sat's  ground  and  information  systems 
department. 

“Kalldo  said  if  wc  changed  our  basic 


'  data  model,  they  would  change  the 
.  data  warehouse  to  fit  us  "  Sitaram  says. 

,  “Asaproofofeoncept.  wewereablc 
I  to  automatically  link  our  revenue  and 
I  satellite  capacity  in  the  warehouse  in 
^  17  days,  which  allowed  us  to  analyze 
how  much  revenue  came  from  which 
j  region.  If  we  had  follow’cd  normal 
I  data-warehouse  technology,  this 
I  KalMo,  continued  on  page  40 


Autom.tlicdlly  linked  'evenoe  arid 
salHIile  capaciiy  m  the  waruhnose 
•n  17  days 

Data  warehouse  was  adapted  lo  a  majof 
cofpofate  irorgani/ation  in  seven  days 
Opeialronspfe  andposlacgoisition  can 
be  compared  in  fewer  than  30  days 


www.computeniigr1d.com 


Documentum  Saves  Big  With  Web 
Conference  Software  for  training 


BY  THOMAS  HOFFMAN 

Prior  to  2001.  Documentum  Inc.  had 
used  a  smattering  of  Web  conferencing 
platforms  to  support  internal  training, 
corporate  communications  and  out* 
bound  marketing  activities.  Problem 
was,  the  Web  conferencing  systems 
were  becoming  increasingly  expensive 
to  run  and  placed  severe  restrictions 
on  the  number  of  people  who  could 
access  them. 

At  that  time.  John  Grubbs,  manager 
for  education  information  systems  and 
e-learning  at  the  document  manage¬ 
ment  software  maker,  had  a  mandate 
from  his  chief  financial  officer  not  to 
increase  Web  conferencing  costs.  “We 
were  going  to  lose  30%  of  the  service 
level  if  we’d  stayed"  with  one  Web  con¬ 
ferencing  vendor  at  the  dollar  amount 
the  CFO  had  allocated,  he  says. 

Enter  Cambridge.  Mass.-b^d  Inter- 
wise  Inc.  To  start.  Interwise  offered 
l^asanton,  Calif.-ba$ed  Documentum 
a  hosted  Web  conferencing  platform 
called  ECP  Cotmect  that  supports  an 
unlimited  number  of  users  for  a 
$75,000  flat-fee  annual  license.  In  com¬ 
parison.  bids  from  competing  vendors 
ranged  from  $290,000  to  $360,000  for 
300  concuirent-user  licenses. 

In  addition.  Interwise  was  able  to 
provide  Documentum  with  several 
technical  advances  that  other  vendors 
weren’t  able  to  offer,  such  as  voice- 
over-IP  (VoIP)  support,  editable 
recording  capabilities  and  integrated 
scheduling  for  Microsoft  Outlook. 
Documentum  has  achieved  ocher 


benefits  from  the  Web  conferencii^ 
system.  In  2000,  the  last  year  that  the 
company  was  using  Web  conferencing 
technolt^es  from  other  vendors,  it 
paid  $450,000  in  overage  charges,  says 
Grubbs.  Those  fees  have  been  elimi¬ 
nated  through  the  flat-fee  agreement 
with  Interwise. 

Moreover,  because  the  other  Web 


interwise  Inc. 

URL  www.interwise.com 
LOCATMM:  Santa  Qara.  Calif. 
CATE0ORT:  Biterprise  systems 
TECNNOLOaVtECPConneci 
HOWITWORKStOellvefsan  unlimited 
number  of  Web  meetinos.  audio  confer¬ 
ences.  Heaming  courses  and  Web  semi¬ 
nars  for  a  fixed  price.  A  ttetributed-server 
architecture  and  a  muilirTiedia  conferee 
ing  bridge  provide  scalable  and  secure  in¬ 
tegrated  conferencing.  Windows  or  Java- 
based  ctents  can  connect  to  geographi¬ 
cally  (hstributed  communication  servers 
that  route  synchromad  real-time  or 


conferencing  vendors  didn’t  support 
VoIP,  Documentum's  phone  brid^  and 
other  costs  swelled  to  more  than 
$600,000  in  2000.  Those  costs  have 
also  been  eliminated. 

More  important,  the  Interwise  sys¬ 
tem  has  effectively  supported  Docu- 
mentum’s  education  business.  After 
S^rt.  U.  2001,  revenue  from  Documen- 
turn’s  classroom  training  dropped  and 
then  flattened  out  when  customers  be¬ 
came  reluctant  to  fly  employees  for 
classroom  training,  says  Grubbs. 

However,  revenue  for  the  company's 
online  training  courses  supported  by 
the  Interwise  system  have  grown 
steadily  since  they  were  launched  two 
and  a  half  years  ago  and  now  account 
for  15%  of  the  division's  annual  sales, 
says  Grubbs.  In  feet,  the  last  quarter’s 
revenue  for  the  North  American  edu¬ 
cation  division  was  approximately  $1 J 
million.  O  49001 


recorded  audio,  video  and  data  streams 
CUSTOMER  SAMPUNO:  QAO  Inc.. 
Halliburton  Co,  Documentum.  Nestle  SA. 
RWD  Technologies  Inc. 

TIP:  Integrate  the  system  with  other  key 
business  a(9iiC3tion$  and  processes 
(such  as  portals  or  systems)  so  it 
integrates  into  employees'  daily  work. 
WNATS  M  STORE:  *0ne  of  the  trends 
I  see  Is  that  conferencing  is  becoming 
presence-enabled  -  it's  merging  with  in¬ 
stant  messaging;  says  Lou  Latham,  an 
analyst  at  Gartner  Inc.  *A  lot  of  the  same 
vendors  are  offering  products  in  both 
spaces,  and  I  see  the  lines  between  them 
starting  to  blur.’ 


Intelsat  Stays  a  Step  Ahead 
With  Data  Management  Software 


BY  STEVE  ALEXANDER 

For  the  IT  departzoent  at  Intelsat, 
the  telecomiminicatiotts  firm  that 
launched  the  first  commercial  com¬ 
munications  satellite  in  1965,  the  chal¬ 
lenge  isn't  reaching  for  the  stars  but 
trying  to  keep  up  with  the  pace  of  its 
own  business. 

When  it  needed  a  new  data  ware¬ 
house,  Bermuda-based  Intelsat  chose 
management  software  from  London- 
based  Kalido  Ltd.,  in  the  hope  of  being 
able  to  rapidly  update  its  business 
models  to  cope  with  massive  corporate 
changes. 

Intelsat  needed  to  install  a  new  data 


warehouse  that  could  be  updated 
rapidly  as  a  result  of  big  dianges:  In 
ZOOt  it  became  a  private  company  af¬ 
ter  37  years  as  a  quas^ovemmental  in¬ 
stitution.  It  then  launched  a  massive 
reorganization  and,  earlier  this  year, 
acquired  satellite  operations  from  Lo¬ 
ral  Space  and  Communications  Ltd. 

“When  we  went  private,  we  needed 
better  flnandal  information  because 
we  needed  to  be  quicker;”  says  Pradip 
Sitaram,  director  of  IT  for  business  and 
(^lerational  support  systems  in  Intel¬ 
sat’s  ground  and  infonnation  systems 
department 

“Kalido  said  if  we  changed  our  basic 


data  modeL  they  would  change*  the 
dau  warehouse  to  fit  us."  Sitaram  says. 
“Asa  proof  of  concept  we  were  able 
to  automatically  link  our  revenue  and 
satellite  capacity  in  the  warehouse  in 
17  days,  which  allowed  us  to  analyze 
how  mudi  revenue  came  from  which 
region.  If  we  had  foUowed  normal 
data-warebottse  technology,  this 

KMMa.  continued  on  pqge  40 


Being  vigilant  helps  avoid  surprises, 
in  SANs  as  in  life. 

There  are  probably  things  happening  right  now  on  your  SAN  that  could  lead  to 
appalling  performance  or  a  complete  system  crash. 

You  don't  know  when  It  will  happen. 

You  don't  know  how  It  will  happen. 

But  when  it  does  happen,  you'll  wish  you  were  aware  things  were  building  up  to  give 
you  a  nasty  surprise,  an  expensive  surprise. 

Research  shows  that  SAN  downtime  can  cost  organizations  $100,000  per  minute, 
or  more.*  Finisar's  NetWisdom  and  Xgig  solutions  help  you  avoid  these  costs  by 
monitoring  your  SAN  to  stop  degradation.  CRC  errors  and  events  that  impact  your 
most  critical  applications,  business  data  and  transactions. 

F  i  n  is  ar 

View  our  web  seminar,  including  a  customer  case  study  and  demo  of  NetWisdom 
by  visiting  www.finisar.com/plan 

fnsm  has  been  speedeig  «  networks  and 

Avoid  nasty  surprises.  Monitor  your  SAN  and  hang  on  to  your  budget. 

detMmg  besKiFbreed  products  and  testing 
salubonssncel968.  PMSOAQ  FNSR 

*  Sowce;  Fat)ric  Convutme:  Beyond  Ow  N4er  Data  Center.  RBC  Capital  Reports  Oct  2003 

www.Antsar.com/plan 

planned  ahead...  someone  didn’t 


A.** 


someone 


INSERT 

SAVINGS. 


to  simplify  your  data  canter  and  mate  it  more  cost  effective?  Try  the  IBM  eServer  BladeCenter  HS20  system 
with  powerful  Intel*  Xeon”  processors.  Why?  It’s  from  the  #1  blade  server  vendor,  IBM.'  And  designed  to  integrate  the 
funch^  you  need  with  brilliant  simplicity.  Server,  network  and  storage  resources  are  rigorously  tested  to  enable  seam¬ 
less  inli^ration.  So  BladeCenter  HS20  systems  are  easy  to  manage  the  day  they  arrive  and  can  help  lower  TCO.  For 
more  information  about  the  most  in-demand  blade  servers  for  the  on  demand  world,  visit  ImLconiMserver/advantage 

5  reasons  more  ai^  more  businesses  are  turning  to  IBM  eServer~  BladeCenter  systems  with  Intel  Xeon  pi"~-TTPrT 


Scale  out  simply 
on  demand. 


IBM  Director  systems 
management 


Up  to  83%  fewer  cables 
than  stand-alone  servers. 


Malnfnme-inspiied 

^hrtologies. 


24/7365  optional  onsite 
hardware  supporV 


server* 


The  IBM  eServer  BladeCenter  HS20  system 
with  Intel  Xeon  processors  isn't  just  powerful 
and  scalable;  It'S  surprisingly  simple. 


Based  on  FY2003  ««orl»nde  Made 
some  countries  IBM  me  e-Ousates 
coimines  Iniei.  Intel  kwde.  me  Mei 
servKe  names  ee  irademarks  i 
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ww¥i  panasax  LOfr 
Fffmont  Can' 

Slntage 

Pjnasas  AtlivrScal?- 
S'o'jyc  Cluster 

Boosts  storage  o»r'<oT 
mjr>ce  lof  scalaCi)«  Li^ui  clustefs  and 
erhaf>i.es  mnnagcahility  iti  j  shared-tile 
syslerr 

NuTeC  Energy 
Se'v*t»^s  Int  Los  Aiar^of.  National  Labe 
•atliry  Ro(;licfel;.'i  Uni^efSi'y 


Kalido,  corifinut'd  from  pj^eMy 
would  have  taken  us  many  months. 

».  in  March  200.^.  the  company 
did  a  massive  reorganization,  but  we 
were  in  pniduction  with  the  new  data 
warehouse  model  in  a  week."  Sitaram 
says.  "I  don't  know  if  that  would  have 
been  feasible  in  the  past,  but  with  Kali¬ 
do.  it  took  us  less  than  30  days. 

‘The  hardest  thing,  normally,  is  that 
IT  can’t  move  fast  enough.  But  in  this 
data  warehouse  project,  the  reverse 
was  true."  Sitaram  says.  “The  business 
was  not  able  to  move  fast  enough  for 
us  in  IT."  O  49012 

Alexander  is  a  freelance  writer 
in  Edina.  Minn.  Contact  him  at 
sialexander00daol.com. 


URL:  wwwkalido.com 
LOCATIONS:  London,  with  U  S.  head- 
Quatters  m  Burlington.  Mass. 
CATEGORY:  Data  management 
TECHNOLOGY:  Kalido  Dynamic  Inlor- 
mation  Warehouse 

HOW  IT  WORKS:  This  data  warehouse 
He-cycle  management  software  uses 
technology  patented  in  the  U.K.  (patent 
pending  in  the  U.S ).  All  data  warehouses 
embed  information  in  tables  that  express 
relationships,  but  Kalido  has  dramatically 
reduced  the  number  of  tables  required 


and  cut  the  lime  needed  to  update  tables 
lor  a  new  business  model. 

CUSTOMER  SAMPLING:  BP  PLC 
Cladbury  Schweppes  PLC,  Georgia- 
Pacific  Corp..  Labatt  Breweries  of  Canada 
TIP:  Kalido’s  software  was  designed  for 
complex  projects  whose  total  cost  is  at 
least  $600,000. 

WHAT*S  IN  STORE:  'Although  Kalido 
has  many  differentiating,  if  not  unique,  fea¬ 
tures  that  greatly  facilitate  quick  data- 
warehouse  deployment,  the  company's 
pnmarv  challenge  is  not  its  technology,  but 
rather  its  visibility  [outside  Eurooe].“says 
analyst  Mike  Schiff  at  Current  Analysis  Inc. 


*«»>»  qovia  con; 

F'-fctcficK,  Mo 
Nerworking 

0o«a  VoIP  M.i-ictrjrinq 
"'d  Miinagemenl  Syslcfr 

Offers  hanfware  and 
-ufiwarp  .-nodules  10  monitor  and  rrianage 
toice  Over  IP  relepr»ony  systems  to  er* 
sure  yotce  quality  .ind  network  reliability 
Banks  Engineer 

mg  Inc  Ventura  (Calif.)  Unibed  School 
District.  County  oi  Nevada  (Caiif ),  Com 
puler  Associates  International  tnc  Ftnan 
c.ji  Computer  Svpporl  Inc  .  People  s  Bank 


www  secianty  corr 
Albugucique 
Security 
SiNic 

Provides  centrally 

managed  hardware-enlcircediundooint 
'irevvalb  peer  lo-j>eer  encryption  and 
aitdrting  across  a  network  wilhcontmu 
□us.  transparent  authentrcation  required 
lo«  data  access 
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•vwvi  sygale  com 
F'emont  Cah' 

Seruriiv 

Sygale 

Comftines  a  security 

agent  that  runs  on  each  clirnl  ime  or  oKi't- 
l»l*cy  mar.agefnent  servers  drslnbutea 
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Mellon  Gets 
Closer  to  Clients 
Through  Search 


Melkrn  Financ  ial  Corp.  spent  2002  wal- 
uaiing  search  engines  for  its  customer- 
facing  Web  site,  its  intranet  and  the 
sites  that  the  llnancial  .services  compa¬ 
ny  develops  for  corporate  clients. 

Edw.trd  r,\  mhalak,  a  vice  president 
and  product  manager  in  Mellon's  cor¬ 
porate  e-c'nmmerce  services  group, 
says  the  search  was  j  big  deal  because 
the  Pittsburgh  company's  centralized 
IT  group  standardizes  i>n  technology 
components,  dubbed  ‘•bricks.  "  that  are 
then  used  across  all  business  units. 

"We  settled  on  iPhrasc  as  our  Web 
search  brick."  ('ynibalak  says.  "It's  the 
standard  technology  we  use  for  search-  j 
ing  our  own  Web  sites  and  any  sites  we  i 
create  fi>r  customers."  j 

Beef  up  a  search  engine  to  make  it  a 
CRM  Hh)1.  and  you  gel  iPhrasc  Teeh- 
ni*li>gios  Inc.'s  DneSjep.  which  promis¬ 
es  u>  improve  seareh  capabilities.  The 
flashiest  benefits  are  to  be  found  in  re¬ 
tail.  where  CncStep  helps  businesses 
squeeze  more  revenue  out  of  online 
shoppers  by  calling  attention  Hi  prod¬ 
ucts  they  may  ni>i  find  rm  their  own. 

OncStep  consists  of  a  search  server. 


I  V'  'ici'l  I  ':i\  lvi(.  L 

■  Sea/ches  return  (ewer,  better -targeted 
hrts,  which  increases  productivity 

■  Adaptive  learning  engine  boosts 
cross-selling  and  upselltng. 


integration  hook.s  and  management 
tiMils.  An  adaptive  learning  engine  is 
the  star  of  the  show:  the  vendor  says 
OncStep  can  interpret  users'  natural- 
language  queries  to  bring  answers 
rather  than  a  list  of  links. 

Integrating  iPhrasc  has  been  a  piece 


of  cake,  Cymbalak  says:  Mellon  ha.s  de¬ 
ployed  it  in  si.\  Web  sites  so  far,  with 
another  three  in  progress.  O  49011 

t7lyWder  is  a  Computerworld  contribur- 
irtg  writer  in  Southbom.  Mass.  Contact 
him  at  sulfelderiii>charter.net. 


URL:  WWW  iphrase.com 
LOCATION:  Bedlord.  Mass 
CATEGORY:  CRM 
TECHNOLOGY:  OneSlep 
HOW  IT  WORKS:  This  advanced 
search  tool  seeks  to  improve  \lVeb-site  re¬ 
sponses  to  customer  queries.  Its  analytics 
compiles  data  on  what  language  cus¬ 
tomers  are  using  and  what  products  or 
services  they're  examining.  That  informa¬ 


tion  IS  then  used  to  fine-tune  the  search 
engine,  increase  self-service  and  provide 
a  profile  that  can  be  used  lo  upsell  and 
cross-sell  ■ 

CUSTOMER  SAMPLING:  Dell  Inc 
Netegnty  Inc..  Bank  One  Corp ,  Blue  Cross 
and  Blue  Shield  of  Massachusetts  Inc 
WHAT’S  IN  STORE:  Analyst  David 
Daniels  of  Jupiter  Research  says  that  in 
the  next  three  years,  products  like  iPhrase 
will  replace  today's  basic  site-search  mod¬ 
el  “with  [he  subtler  and  more  effective 
methodology  of  discovery  and  managed 
dialogue.' 


a.  MM 
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,  continued  fmm  page  36 
would  have  taken  us  many  months. 

"Then,  in  March  2003,  the  company 
did  a  massive  reorganizatioa  but  we 
were  in  production  with  the  new  data 
warehouse  model  in  a  week,"  Sitaram 
says.  "I  don’t  know  if  that  would  have 
been  feasible  in  the  past,  but  with  Kali- 
do.  it  took  us  less  than  30  days. 

"The  hardest  thing,  normally,  is  th^T 
IT  can't  move  fast  enough.  But  in  this 
data  Mtarehouse  project,  the  reverse 
Mtas  true,"  Sitaram  says.  The  business 
was  not  able  to  move  fast  enou^  for 
us  in  rr."  O  49012 

Alexander  ts  a  ^eelance  writer 
in  £dtna.  Mina  Contact  him  at 
sialexanderOO@aoicom. 


Kalido  Ltd. 

URL  www.kalido  .com 
LOCATIONS:  London,  with  U.S.  head¬ 
quarters  in  Burlington.  Mass 
CATEGORY:  Data  marragement 
TECtMOLOOV:  Kalido  Dynamic  Infor¬ 
mation  Warehouse 

HOW  IT  WORKS:  This  data  v^rehouse 
life-cycle  management  software  uses 
techrwiogy  patented  in  the  U.K.  (patent 
pending  in  the  U.S.).  All  data  warehouses 
embed  information  in  tables  that  express 
relatonships.  but  Kalido  has  dramaticaKy 
reduced  the  number  of  tables  required 


and  cut  the  time  needed  to  update  tables 
fora  new  business  model. 

CUSTOMER  SAMPUNO:  BP  PLC. 
(Cadbury  Schweppes  PLC.  Georgia- 
Pacific  Corp..  Labatt  Breweries  of  Canada 
TIP:  Kalido's  software  was  designed  for 
complex  projects  whose  total  cost  is  at 
least  S600.(XXI. 

WHArS  HI  STORE: 'Although  Kalido 
has  many  differentiating,  if  not  unique,  fea¬ 
tures  that  greatty  fecUrtate  quick  data- 
warehouse  deployment,  the  compos 
primary  challenge  is  not  Its  technology,  but 
rather  its  visibility  [outside  Europe].’  says 
analyst  Mike  Schiff  at  Current  Analysis  Inc. 


Mellon  Gets 
Closer  to  Clients 
‘nirough  Search 

BY  STEVE  ULFELOER 
Mellon  Financial  Corp.  spent  2002  eval¬ 
uating  search  engines  for  its  customer- 
facing  Web  site,  its  intranet  and  the 
sites  that  the  financial  servires  compa¬ 
ny  develops  for  corporate  clients. 

Edward  Cymbalak,  a  vice  president 
and  product  maruger  in  MeUon’s  cor¬ 
porate  e-coimnerce  services  group, 
says  the  search  was  a  big  deal  because 
the  Pittsburgh  company’s  centraliaed 
IT  group  standardizes  on  technology 
components,  dubbed  “bricks,"  that  are 
then  used  across  all  business  units. 

“We  settled  on  iPhrase  as  our  Web 
search  brick,"  Cymbalak  says.  “It’s  the 
standard  technology  we  use  for  search¬ 
ing  our  own  Web  sites  and  any  sites  we 
create  for  customers.” 

Beef  up  a  search  engine  to  malfp  it  a 
CRM  tool,  and  you  get  iPhrase  Tech- 
nolt^ies  Inc.*s  OneStep,  which  promis¬ 
es  to  improve  search  capabilities.  The 
flashiest  benefits  are  to  be  found  in  re- 
taU,  where  OneStep  helps  businesses  i 
squeeze  more  revenue  out  of  online  I 


shoppers  by  calling  attention  to  prod¬ 
ucts  they  may  not  find  on  their  own. 
OneStep  consists  of  a  search  server. 


integration  books  and  management 
tools.  An  adaptive  learning  engine  is 
the  star  of  the  show;  the  vendor  says 
OneStep  can  interpret  users’  natut^- 
language  queries  to  bring  answers 
rather  than  a  list  of  Units. 

Integrating  inirase  has  been  a  piece 


iPhrase 

Technologies  Inc. 

URLwww.iphrase.com 
LOCATION:  Bedford.  Mass. 
CAfEBORY:C»M 
TEGHNOLOeV:  OneStep 
HOW  IT  WORKS:  This  advanced 
search  tool  seeks  to  improve  Web-site  re¬ 
sponses  to  customer  queries.  Its  analytics 
compiles  data  on  what  language  cus¬ 
tomers  are  using  and  what  products  or 
services  they're  examining.  That  informa- 


of  cake,  Cymbalak  says;  MeUon  has  de¬ 
ployed  it  in  six  Web  sites  so  for,  with 
another  three  in  progress.  O  49011 


Ulfelder  is  a  Coinputerworld  contribut¬ 
ing  writer  in  Southboro,  Mass.  Contact 
him  atsul^Ider@cf)arter.net. 


tion  is  then  used  to  fine-tune  the  search 
engine,  mease  sell-service  and  provide 
a  profile  that  can  be  used  to  upsell  and 
cross-sel.  ' 

CUSTOMER  SAMPUNO:  DeN  Inc.. 
Netegrity  Inc.  Bank  One  Corp..  Blue  Ooss 
and  Blue  Stiirid  of  Massachusetts  Inc. 
WHAFS  M  STORE:  Analyst  David 
Daniels  of  Jupiter  Research  says  that  In 
the  next  three  years,  products  like  (Phrase 
wi  replace  today's  basic  site-search  mod¬ 
el 'with  (he  subtler  and  more  effective 
methodology  of  discovery  and  rnanaged 
dialogue.* 


THE  LEADER  IN  CUSTOMER 
ANALYTIC  APPLICATIONS  BRINGS 
YOU  A  NEW  GENERATION 
OF  ENTERPRISE  Bl  SOLUTIONS. 


•USINESS  SAP  SAS 


Cutthroat  compotition.  Intsnae  profit  proasuro.  Prico  erosion.  Deciining  ioyalty.  Business  today 
dictatoa  working  not  Juat  harder,  but  smarter.  Mooting  those  new  businsss  demands,  and 
overcoming  the  inherent  chaiisnges,  requires  a  new  generation  of  Bl  solutions  unavailable  from 
traditional  Bl  vandors. 

Siabel,  the  leader  in  cu.tomer  analytic  application.,  brings  you  Siobel  Business  Analytics -Bl 
solutions  that  ompowar  avoryona  with  actionable  real-time  insight  from  the  largest  data 
warshousss  and  across  enterprise  sources.  With  a  mission-critical  architecture  that  supports 
multi-tarabytas  of  data,  thousands  of  users,  and  24s7  availability.  And  proven  application 
solutions,  with  built-in  industry-specific  bast  practices  that  are  flexibis.  quickly  implamanted. 
integrate  with  your  infrastructuro,  and  provide  low  TCO. 

Our  innovative  Bl  solutions  have  catapulted  Siabel  into  the  leadership  position  in  analytic 
applications  for  sales,  marketing,  sarvica,  and  senior  management,  with  over  75H  of  our  customers 
using  Siebel  Business  Analytics  beyond  CRM  and  across  a  full  range  of  enterprise  sources. 

Learn  why  the  most  analytically  sophisticated  companies  rely  on  Siebel.  Attend 
Summit,  Los  Angeles  on  October  3-6.  Visit  www.siebel.com/newgen 

siebel. 

Business  Analytics 

CUSTOMER  [NSIGHT  •  ENTERPRISE  INTELLIGENCE 
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Implemenling  the  Vico  1QQQ  tool>  only  a  >ew  hours,  says  Ftrsl  American's  Noel  Levasseur. 


Bank’s  Mixed  Infrastructure  Gets 
Organized  With  Network  Tool 


With  fewer  than  20  IT  staff  members. 
First  American  Bank  "uses  a  lot  of 
(sofiwarel  packages  and  integration," 
says  Noel  Levasseur.  executive  vice 
president  of  technology. 

^  The  Elk  Grove  V'illage.  lll.-based 
bank  has  hosted  its  own  online  bank* 
ir»g  applications  since  1999.  "We've  ex¬ 
perienced  what  c\  er>  one  else  has  re¬ 
garding  platform  solutions  —  they're 
unreliable."  Lcvas.scur  says.  The  bank 
needed  to  gather  as  much  information 
as  possible  about  the  state  of  its  IT  in- 


-  IfrtUHatiofl  look  lusl  a  fev»  hours 
•  Existing  fTsUH  can  manage  Vieo 
without  outside  hetp  or  neyy  hires. 


frastructure  because  “with  self-ser\’icc 
[banking]  apps.  there's  no  longer  a 
spokesperson  between  you  and  your 
customer."  he  says.  "So  it's  important 
to  eliminate  negative  experiences." 

Levasseur  says  the  bank  faced  anoth¬ 
er  common  challenge:  Today's  Web 
and  application  servers,  databases  and 
load-balancing  tools  work  so  well  that 
j  "you  may  not  even  know  it  if  they're  in 
I  a  degraded  state." 

To  keep  track  of  things,  the  bank 
bought  a  Vieo  1000  application  infra- 
'  structure  management  appliance  from 
Vico  Inc.  The  Vieo  1000  plugs  into  a 
network  and  automatically  learns  what 
hardware  and  Web  applications  are 
present  and  studies  normal  usage  pai- 
I  terns.  With  a  Vieo  engineer  assisting. 

I  First  American's  implementation  took 
only  a  few  hours,  says  Levasseur.  I 


Hospital  Gets  Faster  Access  to 
Storage  With  iSCSI  Technology 


When  Johnson  Memorial  Hospital 
needed  to  replace  its  existing  storage- 
area  network  (SAN),  it  looked  for  a 
way  to  upgrade  without  spending  a  lot 
of  money  or  burning  out  its  two-per¬ 
son  IT  department. 

"Over  the  past  three  to  four  years, 
our  data  center  doubled  in  size  and  our 
user  population  expanded  about  30%, 
and  we  were  just  running  out  of  stor¬ 
age  space."  says  Mark  Rivard,  network 
systems  specialist.  His  IT  department 
serves  the  Stafford  Springs.  Conn.,  hos- 


I  pital  and  several  satellite  facilities, 
j  "We  will  be  bringing  in  scheduling 
j  systems  and  electronic  archiving  s>’s- 
I  terns,  and  we’re  heading  toward  paper- 
I  less  medical  records,  so  w'c  needed 
j  huge  amounts  of  storage,"  Rivard  says. 

I  At  the  same  time,  the  hospital  want- 


•  Savings  of  alwul  60%  on  total  SAN. 

•  SAN  cs  now  managed  by  m-bouse  staff 
rather  than  an  outsourcer. 


WINNER 


URL:  www.vteo.com 
LOCATION:  Austin 
CATEGORY:  Hardware 
TECHNOLOGY;  Vieo  1000 
HOW  IT  WORKS:  The  appliance 
plugs  intoa  corporate  network  and 
detects,  analyses  and  controls  service- 
delivery  problems  on  databases.  Web 
servers  and  application  servers.  It 
presents  its  findings  ina  single  dash¬ 
board-style  interlace. 

CUSTOMER  SAMPLING;  Burling 
ton  Coat  Factory  Warehouse  Corp . 
Santa  Clara  County  (Cakl.) 

TIP:  While  Vieo  hdpsdelermjne  the 
best  configuration  for  your  environment, 
you  may  want  to  customize  certain  poli- 
aes.  For  example,  dunrjg  business 
hours,  some  enterprises  might  increase 
the  phonty  level  of  an  online  store. 
WHArS  IN  STORE:  Jasmine  Noel 
an  analyst  at  Ptak.  Noel  &  Associates, 
says  the  Vieo 1000’s  ability  to  learn  net¬ 
work  patterns  is  innovative.  So  is  its 
modeling  capacity;  if  the  appliance  de¬ 
tects  a  service-level  problem,  "it  asks. 
TAfhat  would  happen  if  we  added  server 
capacity?’  It  doesn't  mst  blindly  throw 
more  hardware  at  it."  she  says. 


The  bank  had  looked  at  other  prod¬ 
ucts,  Levasseur  says,  "but  it  looked  like 
we’d  need  to  hire  somci^ne  to  keep  an 
eye  on  them.  Our  existing  staff  can 
manage  the  Vico.  ”  O49014 

L///efder  is  a  Computerworld  contribuf- . 
ing  writer  in  Southboro.  Mass.  Contact 
him  at  su//elderi^harter.ner. 


ed  to  abandon  an  existing  Fibre  Chan¬ 
nel  SAN  that  wasn’t  expandable.  That 
prompted  Rivard  to  look  at  Ethernet- 
based  SANs.  He  chose  PeerStorage 
Array,  an  Ethernet-based  product  from 
EqualLogic  Inc.,  which  he  estimated 
would  be  easy  to  configure  and  man¬ 
age  and  cost  about  a  tenth  as  much  to 
expand  as  a  Fibre  Channel-based  SAN. 

Rivard  says  he  expects  to  save  about 
60%  on  total  SAN  costs  as  a  result  of 
automating  administrative  functions, 
discontinuing  outsourcing  and  lower¬ 
ing  network  expansion  expenses. 

One  factor  that  swui^  the  deal  in 
EqualLogic's  favor  was  that  each  copy 
of  the  SAN  product  came  with  its  own 
software,  a  feature  aimed  at  eliminat- 
EqualLogie,  continued  on  page  44 


Hospital  Gets  Faster  Access  to 

Storage  With  iSCSI  Technolw 


BY  STEVE  ALEXANDER 

When  Johnson  Memorial  Hospital 
needed  to  replace  its  existing  storage* 
area  networlc  (SAN),  it  looked  for  a 
way  to  upgrade  without  spending  a  lot 
of  money  or  burning  out  its  two-per¬ 
son  IT  department 
“Over  the  past  three  to  four  years, 
our  data  center  doubled  in  si?e  and  our 
user  population  e:q»nded  about  30%. 
and  we  were  Just  running  out  of  stor¬ 
age  space."  says  Mark  Rivard,  network 
systems  specialist  His  IT  department 
serves  the  Stafford  Springs,  rntiti  hos¬ 


pital  and  several  satellite  facilities. 

“We  will  be  bringing  in  scheduling 
systems  and  electronic  archiving  sys¬ 
tems.  and  we’re  heading  toward  paper¬ 
less  medical  records,  so  we  needed 


huge  amourtts  of  storage.”  Rivard  says. 
At  the  same  time,  the  hospital  want- 


I  ed  to  abandon  an  existing  Hbre  Chan¬ 
nel  SAN  that  wasn’t  expand^le.  That 
prompted  Rivard  to  look  at  Ethernet- 
based  SANs.  He  chose  PeerStorage 
Array,  an  Ethernet-based  product  from 
EqualLogic  Inc.,  wdiicb  he  estimated 
would  be  easy  to  configure  and  man¬ 
age  and  cost  about  a  tenth  as  much  to 
expand  as  a  Fibre  Channel-based  SAN. 

Rivard  says  he  expects  to  save  about 
60%  on  total  SAN  costs  as  a  result  of 
automating  administrative  functions, 
discontinuing  outsourcing  and  lower¬ 
ing  network  expansion  expenses. 

One  factor  that  swung  the  deal  in 
EqualLogic’s  favor  was  that  each  copy 
of  the  SAN  product  came  with  its  own 
software,  a  feature  aimed  at  eliminat- 
EgHiBiiliB,  continued  on  page  44 


AT&T  BUSINESS  CONTINUITY  SERVICES.  Can  your  network  stay  strong  under 
the  face  of  disaster,  man-made  or  otherwise?  AT&T's  business  continuity  teams  des 
manage  secure,  self-healing  and-redundant  end-to-end  business  solutions  that  encompass  networks.  ' 
storage,  computers  and  applications.  With  our  intelligent  data  pathways,  proven  recovery  plans  and 
unsurpassed  security,  your  business  will  enjoy  nonstop  operations  -  no  matter  what  Mother  Nature 
decides  to  throw  at  it.  CAN  YOUR  NETWORK  DO  THIS? 


Can  your  network 
shield  you  from  disaster? 


AIIbT 

The  world's  networking  company- 


For  a  network  ttiai  can.  call  1*888-889-0234 

att.com/networking 


Businesses  today  need  to 
achieve  a  state  of  business 
continuity,  where  critical 
business  processes, 
applications,  data,  work 
centers  and  networks  are 
always  available.  Leveraging 
a  heritage  of  reliability  and 
recognized  continuity 
expertise,  AT&T  can  help 
identify  a  level  of  operational 
readiness,  business 
resumption  and  recovery 
capabilities  for  your  business. 
We  provide  you  with: 

•  Business  Continuity 
professionals  to  examine 
your  operations,  identify 
critical  processes  and 
services  and  recommend 
solutions. 

•  The  design,  deployment  and 
management  of  business 
continuity  solutions  to  meet 
your  business  application 
and  process  infrastructure 
requirements. 

•  Assured  business  continuity 
for  mission-critical 
applications  and  operations. 

•  24x7x365  performance 
management  and  monitoring 
backed  by  aggressive  Service 
Level  Agreements  (SLAs). 

•  The  ability  to  comply  with 
industry  and  government 
standards  for  information 
access  and  protection. 

•  Methods  to  mitigate  the 
financial  and  operational 
impacts  of  business 
disruption. 


AT&T  Business  Continuity  Solutions: 
protecting  your  business  assets 
before  you  have  to 

AT&T  can  mitigate  the  risk  within  your  enterprise  infrastructure  by  ensuring 
continuous  access  to  your  business  processes  and  applications.  The  AT&T 
business  continuity  portfolio  offers  options  for  security,  availability  and  recovery 
across  the  network,  storage  and  server  infrastructure  and  applications  layer. 
They  include: 

•  High  Availability  Networking  Services 

•  Managed  Storage  Services 

•  Enterprise  Recovery  Services 

•  Enterprise  Hosting  Services 

•  Professional  Networking  Expertise 


Business  Continuity  is  our  core  competency  applied  directly  to  the  unique 
demands  of  your  enterprise.  We  provide  you  with  the  continuity  services 
which  help  to  balance  risk  and  investment,  meeting  your  strategic  and 
operational  needs. 


WHAT  THE  INDUSTRY  IS  SAYING: 

"AT&T  offers  the  industry's  most  comprehensive  and  proven  array  of 
networking-related  business  continuity  services  to  help  businesses  protect 
invaluable  information  assets,  supported  by  one  of  the  industry's  best 
portals,”  —  Zeus  Kerravala,  Vice  President,  Enterprise  Computing  and 
Networking  —  The  Yankee  Group,  May  2003 


For  more  information,  contact  your  AT&T 
Representative,  or  visit  www.att.comAietworking. 


AT&T  Business  CixiSnurty  Sefvces.  0  2004  AT&T.  Al  R^ie  ResenM  PnntedrU.SA  AS0196 


Vortex  1 2004 

SETTING  THE  IT  AGENDA 


XMNGAliAMT 

A  Eijrtoful  Dirmor 
Nnwoifc  World 


VORTEX  2004:  SETTING  THE  IT  AGENDA  is  an  interactive  experience  showcasing  a  diversity  of  informed 
opinion  and  fresh  insights  on  the  future  of  the  nearly  $1  trillion  enterprise  IT  market.  VORTEX  is  an  immersive 
dialogue  among  chief  executives,  chief  information  officers,  leading  analysts  and  investors  on  issues  including: 

Msupng  onrosf  *  What  shape  wil]  the  post-client/server  IT  world  take^ 

TCC  Mnmn  LiC 

^  Microsoft,  Oracle,  SAP,  EMC,  HP,  Cisco,  and  others  positioning 
themselves  for  market  dominance  and  what  opportunities  are  created  for  innovators? 

■  Are  vendors  and  IT  executives  in  sync  on  key  issues  and  directions? 

•  How  can  early  adopters  create  competitive  advantage? 

«»«  oamw,  Thr‘’“g''  »  series  of  frank  one-on-one  interviews,  engaging  Q&As  and  spirited  panel  discussions,  John  Gallant  and 

Geoffiey  Moore  will  analyze  diverging  vendor  strategies  and  compare  their  visions  with  the  current  needs  of  IT. 

All  to  help  you  determine  what  you  need  to  design  and  buy  for  your  enterprise  to  prosper. 

For  more  information  and  to  register,  visit  WWW.vortex.netA^4ACW96  or  call  800-643-4668 

SOME  OF  THE  SPEAKESS  TOU-LL  HEAB  FROM  AT  VORTEX  2004  rNCLUDE; 

ShaiAgr^si  Member  of  foe  Executive  Boafo,  SAP  AG  -  Dr.  Francine  Berman  Director,  San  Diego  Supemomputer  Center  .  Jeff,., 

and  intellectual  Property,  Crowell  &  Moring  OP  •  Howard  Elias  EVP  Corporate  Markebng  «  Office  of  Technology,  EMC  Corporation  •  John  GaMx  SVP  *  Chief 
Pe^rch  Officer,  IDC  •  Umang  GupM  Chairman  A  CEO,  keynote  Systems  •  John  Hagei  i  Managemen,  Consuhan,  *  Aufoor .  Donald  A  Ha#.  CO  Fideiity 
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L  David  Passmore  Research  Drrector,  Network  and  Telecom  Strategies,  The  Burton  Group  •  Charles  E.  Phillips,  Jr.  President  A  Menfoer  of  foe  Board  Oracle 
Corporation.  Ron  Pondm  Executive  VP  A  CIO,  WellPoint  ■  Shane  V.  Robison  EVg  Chief  Strategy  A  Technology  Officer.  Hewlett-Packard  ■  Jcr,  Schomulorf  Parmer. 
Accel  Partners  •  Jonathan  Schwartz  President  A  COO,  Sun  Mkrosystenp  •  Stratton  Sdavns  Chairman  A  CEO.  WriSign  -  Steven  SSberamn  Managing  Director! 
Lehman  Brothers  ■  Peter  Sohrik  Managing  Director,  Sigma  Partners  •  Mike  Volpi  SVP  A  General  Manager,  Routing  Technology  Group,  Cisco  Systems,  Inc  •  Irving 
Wladawsky-Berger  I  VP  Technology  A  Strategy,  IBM  Corporation 
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EqualLogic,  cuniinuedfmm  pege  42 

when  a  SAN 
scaled  up.  It  works  by  using  more 
onirollcrs  to  connect  disk  arrays  to 

Another  factor  in  the  selection  was 
efficiency.  Rivard  says  he  was  im¬ 
pressed  by  EqualLogic's  approach  in 
storing  frequently  used  documents  on 
the  outer  part  of  the  disk  platter,  'vherc 
be  accessed  more  quickly  be¬ 
cause  the  disk  is  spinning  more  rapidly 
at  its  outer  edge.  Older,  less-frequently 
used  documents  are  stored  closer  to 
the  center  of  the  disk.  O  49009 

Alexander  is  a  freelance  writer 

in  Edina.  Afinn.  Confacf  him  at  1 

sjalexanderOOi^aoLcam.  \ 


EqualLogic  Inc. 

URL:  WWW  eQuallogic.com 
LOCATION:  Nashua.  N.H. 
CATIOORY:  Storage 
TECHNOLOGY:  EaualLogic  PeerSlor- 
age  Array  lOOE 

HOW  IT  WORKS:  It  conrtecis  SAN 
servers  via  Ethernet  and  automates  ad¬ 
ministrative  functions.  It  also  [vovides  a 
"virtualized"  view  ol  SAN  capacity,  so 
storage  appears  to  reside  on  one  drive 
even  though  it's  spread  over  many  drives 
Each  array  can  be  a  stand-alone  unit,  of- 
lenng  linear  performance  growth 


ADM  Fends OffThreats With 
Automated  Vulnerability  S^em 


Vulnerability  and  patch  management  is 
already  a  nightmare  for  most  IT  securi¬ 
ty  managers.  But  what  makes  it  worse 
is  the  added  challenge  of  trying  to  fig¬ 
ure  out  how  to  prioritize  remediation 
work  so  that  the  roost  critical  vulnera¬ 
bilities  get  fixed  ffrst. 

That  situation  led  Gary  Mruz,  direc¬ 
tor  of  technical  systems  at  Archer 
Daniels  Midland  Co.,  to  nCircte  Net¬ 
work  Security  Inc.  and  the  vendor’s 
1P360  vulnerability  management  appli¬ 
cation. 

Mruz  says  his  team  had  been  manag¬ 
ing  vuberabilitics  manually  and  was 
spending  an  inordinate  amount  of  time 
keeping  up  with  threats  and  applying 
patches.  It  was  a  recipe  for  disaster. 
"Even  if  we  had  unlimited  staffing  re¬ 
sources  to  loss  at  the  vulnerability  con¬ 
cern.  there  was  no  way  we  could  have 
hired  enough  people  to  do  a  thorough 
enough  job  or  respond  to  attacks  fast 
enough.”  he  says. 

The  company  needed  an  automated 
system  to  help  identify  and  prioritize 
security  vulnerabilities,  so  Mruz 
turned  to  nCtrcle.  Although  Mruz  says 
he  looked  at  other  tools,  most  were 
server-  and  agent-based  applications 
that  added  unneeded  complexity  to  the 
problem.  “What  came  to  the  surface 
immediately  with  nCircle’s  approach 
was  that  it  sat  outside  the  servers."  he 
says.  “We  didn't  have  to  modify  our 
servers  or  clients  to  make  it  work." 

The  other  aspect  that  caught  Mruz's 
attention  was  IP360's  centralized  re¬ 
porting  approach,  which  meant  he 


»  Centralized  reaorimg  approach  meant 
no  additional  staff  to  hire. 

■  Withstood  the  Blaster  woim  and  other 
recent  high-profile  Internet  threats 


wouldn't  have  to  increase  staff  just  to 
make  the  application  work. 

And  while  lP360’s  reporting  func¬ 
tion  doesn't  differ  much  from  other  ap¬ 
plications.  Mruz  says  the  key  differen¬ 
tiator  is  its  assessment  and  prioritiza¬ 
tion  capability.  ’'You  still  have  to  assess 
what  a  vulnerability  really  means  in 


I  CUSTOMER  SAMPLiNO:Solucient 

LLC,  Zenon  Environmental  Inc.,  Cypress 
Corp 

TIP:  F^erStorage  uses  iSCSI-based  stor¬ 
age  arrays  that  cost  less  than  Fibre  Chan- 
i  nel  but  also  provide  lower  pertoimance 
WHArS  IN  STORE:  "There  rsa  sub 
I  stantial  opportunity  for  low-end  servers  in 
corporations  to  be  connected  to  SANs,  but 
the  cost  has  prevented  that  up  to  now." 
says  Bob  F^ssmore.  a  Gartner  Inc  analyst 
"This  opportunity  lends  to  be  limited  to  the 
low  end  of  the  market  because  the  high 
end  1$  well  established  around  Fibre  Chan¬ 
nel  SANs* 


I  your  environment."  says  Mruz.  who 
credits  IP360  for  helping  Decatur.  III.- 
based  Archer  Daniels  Midland  with¬ 
stand  the  Blaster  worm  and  other  re¬ 
cent  Internet  threats. 

One  of  the  most  useful  features  of 
IP360.  Mruz  says,  is  its  ability  to  set  a 
baseline  for  vulnerability  remediation 
on  particular  servers.  “From  that  point 
forward,  new  vulnerabilities  show  up 
as  a  spike  in  the  reporting,"  he  says. 
“TTiese  alerts  will  show  us  very  quick¬ 
ly  where  we  have  new  issues  to  ad¬ 
dress.  and  it  automatically  points  you 
to  the  patch  or  the  fix.  And  the  good 
thing  is  that  it  might  not  be  a  new  vul¬ 
nerability  that  somebody  has  discov¬ 
ered.  but  it  might  be  something  that 
we  did  that  caused  a  potential  prob¬ 
lem.  In  essence,  it’s  always  there  look¬ 
ing  over  our  shoulders."  O  49013 


URL*  www.nclrcle.com 
LOCATION:  San  Francisco 
CATE00flY:Secuntv 
TECHNOli)0V:IP36O 

HOW  IT  WORKS:  The  nCircle  IP360 
VutneraMity  Management  System  uses  a 
highly  scdable.  secure,  applwce-based 
archilecture  (hat  consists  ot  two  compo¬ 
nents.  The  IP360  VnE  Manager  isa  hard¬ 
ened  appliance  that  serves  as  the  central 
data  repository  and  management  plat¬ 
form.  and  the  IP360  Device  Ftafder  is 
a  hardened,  diskless  appliance  that 
profiles  devices  and  securely  reports  Its 


findings  to  the  VnE  Manager 
CUSTOMER  SAMPLJNO:  Patelco 
Credit  Umon.  U.S.  Agency  tor  Internation¬ 
al  Devefopment.  Office  of  Naval  Intelli¬ 
gence 

TIP:  Tou  have  to  plot  and  decide  where 
the  devices  should  go.  and  you  have  to 
define  your  baselines  for  patching."  says 
Ardier  Daniel  Midland's  Gary  Mruz.  'Al¬ 
though  there's  no  way  to  avoid  this  initial 
evaluation,  you  never  have  to  do  it  again." 
WHArSM  STORE:  "NCircle's 
f^ctoredReasorang  raises  the  barm  the 
vulnerability  management  industry,  bnng- 
mg  more  thorough  vulnerability  Identifica¬ 
tion  and  lowering  the  false-positive  noise 
of  misidentitied  systems  and  vulnerabili' 
ties."  says  Dan  Keldsen.  an  an^l  at  Del- 
pNGroup  • 


More  on  page  47 


44 


EffmtLafliCt  continued  from  page  42 
ing  bottlenecks  that  occur  when  a  SAN 
is  scaled  up.  It  works  by  u<5tng  more 
controllers  to  connect  disk  arrays  to 
the  server. 

Another  factor  in  the  selection  was 
efficiency.  Rivard  says  be  was  im¬ 
pressed^  Equallxt^’s  approach  in 
storing  ftoquently  used  documents  on 
the  outer  part  of  the  disk  platter,  where 
they  can  accessed  more  quickly  be¬ 
cause  the  disk  is  spinning  more  rapidly 
at  its  outer  edge.  Older,  less-frequently 
used  documents  are  stored  closer  to 
the  center  of  the  disk.  O  49009 


Alexander  is  a  freelance  writer 
in  Edina,  Minn.  Contact  him  at 
sialejamderOO^aoicom. 


EqualLogic  Inc. 

UMj  www.equaBooic.coni 
LOOmON:  Nashua.  N.H. 
C«TC90IIV:Sto(aoe 
TCCmoUWY:  EqualLogic  PaerStor' 
ageAnaylOOE 

HOW  IT  WOmO:  it  connects  SAN 
servers  via  Ethenet  and  automates  ad- 
rninistralive  functions.  It  also  provides  a 
‘virtualized*  view  of  SAN  capacity,  so 
storage  appears  to  reside  on  one  drive 
even  though  it‘s  spread  over  many  drives. 
Each  anay  can  be  a  stand-alone  unit  of¬ 
fering  linear  performance  (yowth. 


CUSTOMEH  SAMPUNO:  Soiucieni 
LLC.  Zenon  Envkonmental  Inc.,  Cypress 
Corp. 

TIP:  f^erStorage  uses  iSCSI-based  stor¬ 
age  anays  that  cost  less  than  Fibre  Chan¬ 
nel  biB  aiso  provide  lower  performaKe. 
WtUrSMSnMKz'Thereeasuh 
stantial  opportinty  tor  krwend  servers  in 
cxirporations  to  be  connected  to  SANs,  but 
the  cost  has  prevented  that  up  to  now.' 
says  Bob  f^ssmore.  a  Gartner  Inc.  analyst 
'This  opportunity  tends  to  be  firrated  to  the 
low  end  ot  the  marfet  because  the  high 
end  is  wel  established  around  Fibre  Chan¬ 
nel  SANs.* 
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ADM  Fends  Off  Threats  With 
Automated  Vulnerability  Si^stem 


8YDANVERT0N 

Vulnerability  and  patch  management  is 
already  a  nightmare  for  most  IT  securi-  | 
ty  managers.  But  what  makes  it  worse 
is  the  added  challenge  of  trying  to  fig¬ 
ure  out  how  to  prioridae  remediation 
work  so  that  the  most  critical  vulnera¬ 
bilities  get  Hxed  first 

That  situadoQ  led  Gary  Mruz,  direc¬ 
tor  of  technical  systems  at  Archer 
Daniels  Midland  Co.,  to  nCircle  Net¬ 
work  Security  Inc.  and  the  vendor’s 
[P360  vulner^Uity  management  appli- 
cadon. 

Mruz  says  his  team  had  been  manag¬ 
ing  vulnerabilities  manually  and  was 
spending  an  inordinate  amount  of  time 
keeping  up  with  threats  and  applying 
patched  It  was  a  recipe  for  disaster. 
'Even  if  we  had  unUnuted  staffing  re¬ 
sources  to  toss  at  the  vulnerability  con¬ 
cern,  there  was  no  way  we  could  have 
hired  enough  people  to  do  a  thorough 
enough  job  or  respond  to  attacks  fost 
enough,*  be  says. 

The  company  needed  an  automated 
system  to  help  identify  and  prioritize 
security  vulnetabflities.  so  Mruz 
turned  to  oQrde.  Altbou^  Mruz  says 
he  k>oked  at  other  took,  most  were 
server-  and  agent-based  applications 
that  added  unneeded  complexity  to  the 
prohtem.  *What  came  to  the  surfice 
immediately  with  nCircIe's  approach 
was  that  it  sac  outside  Che  servers,*  he 
says.  *We  didn’t  have  to  modify  our 
servets  or  clients  to  make  it  work.* 

The  other  aspect  that  caught  Mruz’s 
attentioo  was  IP360's  centralized  re¬ 
porting  approach,  which  meant  he 


wouldn’t  have  to  increase  staff*  just  to 
make  the  application  work. 

And  while  IP360*5  reporting  func¬ 
tion  doesn't  differ  much  from  other  ap¬ 
plications.  Mruz  says  the  key  differen¬ 
tiator  is  its  assessment  and  prioritiza¬ 
tion  capability.  *You  still  have  to 
what  a  vulnerability  really  means  in 


nCircle 
Network 
Security  Inc. 

IWL  ww jcireJsxom 
UKOWfe  San  Fiancisoo 
CfnHOWfrSeaifty 
TCTI— Jtr.l>360 
HOW  IT  MMS;  The  nCMe  IP360 
VUneraWly  Management  System  uses  a 
Wt^scei^  secure,  epphnce-based 
ercMecttfelhalccneiitsoftiwcanvo- 
nents.  The  P360  VhE  Manager  is  a  hard¬ 
ened  appiance  tfwl  serves  as  the  cantral 
data  rapositoiy  and  management  plat- 
farm,  and  the  P360  Oevica  F¥oflar  is 
a  hardened.  deUess  applance  that 
prolfcn  dewcoi  ad  iwumly  reports  its 


your  environment.”  says  Mruz.  who 
credits  IP360  for  helping  Decatur.  UL- 
based  Archer  Daniels  Midland  with¬ 
stand  the  Blaster  worm  and  other  re¬ 
cent  Internet  threats. 

One  of  the  most  useful  features  of 
IP360.  Mniz  says,  is  its  ability  to  set  a 
baseline  for  vulnerability  remediation 
on  particular  servers.  ‘’From  that  point 
forward,  new  vulnerabilities  show  up 
as  a  spike  in  the  reporting,”  be  says. 
These  alerts  will  show  us  very  quick¬ 
ly  where  we  have  new  issues  to  ad¬ 
dress.  and  it  automatically  points  you 
to  the  patch  or  the  fix.  And  the  go^ 
thing  is  that  it  mi^t  not  be  a  new  vul- 
neralnUty  that  smnebody  has  discov¬ 
ered.  but  it  might  be  something  that 
we  did  that  caused  a  potential  prob¬ 
lem.  In  essence,  it’s  always  there  look¬ 
ing  over  our  shoulders.”  O  49013 


Bndfags  to  the  M  Manager. 
CUIfOm  SAIMI9:  Pfaeko 
CredlUnton.  U.S.Agenc)rtorlniemation- 
al  Development  Office  of  Naval  tnlei- 
gence 

TV:  *You  haw  to  ptal  and  decide  vvhere 
the  dmfaes  shoidd  ga  and  you  hive  to 
defirw  your  biselnes  far  pildiing.*  says 
Anher0anlelMklaKrs6«yMruz.‘AI- 
lhou(h  them's  no  iMy  to  avoid  tNs  Mbal 
ewtoaUon.  you  never  hive  to  do  I  again.* 
WtUnMSTWNCMes 
foctomdRaaianlng  raieas  the  bar  in  the 
vidnerabikfTianagBiwenlindMary.lirfag- 
ngnrnthoroui^wfoerafaityidentlflca- 
ttan  hMwirto  tfw  fals»i»eitive  note 

ofmtetongiedsysfarasandvulneratii- 
tfas.‘aa|s  Dan  KeUsen.  an  arafyst  at  Del¬ 
phi  Group. 


More  on  puge  4F 


Enterprise  Rent-A-Car  wanted  to  reduce  operational  costs. 
Xerox  found  the  key  to  success  was  helping  them  get  access  to 
2.4  million  vital  documents  a  month  over  their  intranet. 
There’s  a  new  way  to  look  at  it. 


Enterprise  Rent-A-Car  wanted  to  make  their  document  process  more 
efficient.  So  they  consulted  with  a  team  of  document  experts  from  Xerox. 
Working  together,  they  analyzed  the  document  process  across  thousands  of 
locaUons  worldwide,  and  initiated  systemic  improvements  in  key  aspects  of 
filing  and  retrieving  mission-criticai  documents.  By  implemenUng  a  Xerox 
Glohal  Services  Imaging  and  Retrieval  solution,  2.4  mUlion  critical  docu¬ 


ments  a  month  are  scanned  and  stored  into  an  electronic  repository, 
making  them  instantly  available  over  the  Enterprise  Intranet  whenever 
needed.  The  result:  Documents  are  managed  in  a  timely  manner. 
Redundancy  and  errors  ate  cut  way  back,  and  security  is  maximized.  To  find 
out  how  Xerox  can  bring  this  kind  of  Ume  and  cost-saving  expertise  to  your 
business,  simply  call  your  Xerox  represenutive  or  visit  our  website  today. 


Learn  more:  xeroK.com/learn  For  a  salea  rap:  I-POO-MK-XIHOX  ext.  LIMlia 


ki  t*  XEROK  CORPOWnON 


The  DOCUMENT  COMMNY 

XEROX. 


Transparency  -  the  New  Engine 
of  Growth  and  Greatness 

Critical  reading  for  IT  professionals  and  managers.  Succeed  by  learning 
how  the  Internet  and  open  IT  architectures  enable  companies  to 
become  open  enterprises  -  in  turn  competing  and  performing  better. 

Reaction  from  business  leaders  : - 

‘*E)on  Tapscott  and  David  Ticoll  hit  the  bulls-eye  with 
The  Naked  Corporation.  The  demand  for  openness  and  candor  has  never 
been  greater.  The  Naked  Corporation  is  a  leadership  toolkit  for  turning  the 
relentless  demand  for  transparency  from  threat  to  advantage.** 

—  A.G.  Lafley.  Chairman,  President  and  Chief  Executive,  Procter  &  Gamble 

‘‘They’ve  done  it  again.  Tapscott  and  Ticoll’s  capacity  to  combine  a  fresh 
and  authentic  perspective  with  real  world  data  has  once  again  opened  the 
aperture  on  our  emerging  networked  economy.  A  brilliant  work.” 

—  Dr.  Eric  Schmidt.  Chairman  and  CEO.  Google.  Inc. 

“A  rare  thing  these  days  -  a  business  book  with  a  profound  and 
important  new  idea.  The  Naked  Corporation  explains  bow  a  new  ftxce 
is  changing  the  corporation  and  competitiveness.  There  are  relevant, 
sometimes  jarring  insists  in  every  chapter.  And  what  a  great  read." 

—  IrKlra  Nooyi,  President  and  CFO  of  PepsiCo.  Ir>c. 

"Tapscoa  and  Ticoll  are  ahead  of  the  wave.  The  era  of  transparency  and 
all  its  implicatkms  are  about  to  crash  dovim  on  ct^porations  everywhere. 

The  Naked  Corporation  is  the  first  survival  guide." 

—  Paul  laaffe.  Chief  Executive  Officer.  Hill  &  Knowiton 

"A  well-researched  and  timely  book.  The  authors  show 
how  -  power^  by  b«>ad  corporate  transparency  -  isn’t  just  .  ^  Corporation  arqueS, 

about  ethics.  It  IS  about  success.  .  „  .  "  -..w.. 

-  John  Chambers.  President  and  CEO.  Cisco  Systems  DeautlTUlly  and  perSUaSIVCly,  that  there 

is  no  contradiction  between  good  business 
t^e  values  of  honesty  and  openness, 
not  only  the  rationale  for  a  transparent  OKpcHation  but  also  TnlS  DOOk  wlonQS  In  thG  brlGfCGSG  of  GVGry 

the  principles  of  leadership  in  an  open  world.”  right-thinking  manager  in  the  country." 

—  Klaus  Schwab.  Founder  and  President.  World  Economic  Forum  —Malcolm  Gladwell.  author  of  The  Tipping  Point 


"IMfiaaftwIiaBdcniiirlliiigtliem.  (lUs) ‘tiig  idea  cohenady  and  moM  i  “nhiiaGatt  aad  llcoll  produce  compeUn^ 

ladad  by  eome  petmaaive  evideace."  conviocingly,  oombmei  aa  aoalyiia  of  evideaoe  Ifaat  baupMeocy  it  an 

-BusinessWeek  the  leceot  aiaia  of  coqiotale  Aoerica  inevitable  social  phenomenoD  and  that 

j  with  a  cdebolian  of  Ite  tecbnological  |  such  tnnspaieiicy  ia  good.” 
revahitiao...aiirakeupcaIl.-  j  -Fast  Company 

-The  Economist 

Jolnte  dtowrion  on  harnessing  transparency^  power  with  Don  Ihpscott  at  wwwAgeofTransparerKyxom 


www.computefworid.com 
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Parts  Supplier  Boosts  Network 
Capacity  With  WAN  Cmpressor 


BYDANVERTOM 

Executives  at  automotive  parts  retailer 
O'Reilly  Automotive  toe.  thmight  their 
existing  12Mbit/sec.  dedicated  commu¬ 
nications  link  provided  all  the  perfor¬ 
mance  they  needed.  But  the  retailer 
soon  found  that  the  link  between  its 
headquarters  in  Springfield.  Mo.,  and 
its  disaster  recovery  center  in  Texas 
couldn't  transmit  large  amounts  of  data 
to  the  company's  fflM  iSeries  server 
during  the  replication  window.  That 
often  left  transactions  waiting  to  be 
transmitted  because  the  link  was  fully 
utilized.  If  an  outage  were  to  occur,  the 
pending  transactions  would  be  lost 

•We  were  using  a  DS-3  at  12Mbit/ 
sec.,  and  we  were  still  having  latency 
issues  and  congestion  problems,”  says 
Mark  Garton,  business  contiimity 
leader.  That  was  unacceptable  for  one 
of  the  largest  specialty  auto  retailers  in 
the  U.S.,  with  1,000  stores  and  11  distri¬ 
bution  centers.  Garton  says  he  tested 
WAN  compression  and  acceleration 
to  assess  the  fea^ility  of  curtailing 
connectivity  costs  wdiile  increasing  the 
reliability  and  frequency  of  backups. 

Expand  Networics  Idc.*s  Accelerator 
was  the  very  first  product  the  conqtany 
tried  And  m  the  retailer's  surprise. 


netwcok  capacity  was  immediately 
quadrupled  ”Expand’s  acceleration  re¬ 
sults  surpassed  ^  our  expectations,” 
says  Dave  Steinle,  systems  manage¬ 
ment  team  leader.  ”We  got  full  T3  ca¬ 
pacity  out  of  our  oversubscribed 
l2Mbit/sec.  link."  But  the  real  bonus 
was  the  cost  savings,  says  Steinle. 
"With  the  four  tinwx  increase  in  net- 
woric  capacity,  we  will  be  able  to  down¬ 
grade  our  link  to  6Mbit/sec.  and  save 
over  $32,400  annually,”  he  says. 

There  are  also  taxable  berofits 
from  a  performance  and  management 
p^'^>ective,  adds  Garton.  ”Expand's 
technology  is  caching  as  well  as  com¬ 
pression  technok^,  and  that's  a  per¬ 
fect  fit  for  us  because  the  nature  of  our 
data  is  that  there  are  a  lot  of  headers 
and  a  lot  of  repetitive  data,”  he  says. 
”Now,  we  pro^ly  average  9Mbit  to 
lOMbit/sec.  and  peak  at  about  40ldbit 
to  4SMbit/sec.  with  the  Expand  Accel¬ 


erators  in  place.”  O  4M0 


Expand 
Networks  Inc. 

URL  www.expand.com 
LOC«IIOII:Roseland.N.J. 
CAICMMV;  Network  management 
TGCNNOLOOV:  Accelerator 
HOW  IT  URMKSc  Accelerator  is  de¬ 
signed  to  improve  enterprise  appiicaton 
performartce  over  wide-area  networks  by 
using  next-generabon  WAN  compression. 
In  addition  to  increasing  WAN  capacity. 
Expands  quakty-of-service  technology, 
known  as  Instant  QoS.  groups  traffic 
types  and  eliminates  the  need  to  update 
and  maintain  the  quality-ot-service  con¬ 
figuration  each  time  a  new  application 
is  roled  out.  It  also  ertaUes  managers 
to  prioritize  bandwidth  allocation  among 
applications. 

CUSTOMER  MMWJWOt  Continental 
Airlines  Inc.,  U5  Environmental  (Elec¬ 
tion  Agency.  Federal  Aviation  Adrntnistta- 
liot).U.S  Marine  Corps 
TV:  *11  was  a  very  straightforward  instal- 


l^ion.*  says  Mark  Garton.  business  conti¬ 
nuity  leader  at  O'Reiy  Automotive.  “We 
nsteBed  it  between  the  switch  and  the 
nxder.  There  <ras  sorne  configuration 
work  that  had  to  be  done  on  the  Expand 
unil  but  they  w^ked  us  thrcxjgh  It.  And 
now  Expand  has  added  an  installaton 
wizard  that  makes  it  possible  for  a  non¬ 
technical  person  to  install.* 

WIUrSM  STORE:  Expand  “reflects 
the  market  tr^’ says  Lawrence  Orans. 
an  analyst  at  Gartner  Inc.  “By  adding 
more  appfication  performance  features  to 
thee  products,  they  ^  bhjrnng  fiK  lines 
between  straight  compression  and 
QoS  vendors  ' 

However.  Orans  cautions  that  a  very 
cornpetitlve  market  will  force  Eqiand  to 
continue  to  focus  on  improving  applica¬ 
tion  performance  and  technology  partner¬ 
ships.  “Biterprises  don't  want  to  put  mul- 
tipte  boxes  from  rnultipte  vendors  in  their 
branch  offices.*  he  says.  *Saiulions  wA 
need  to  be  more  broad-based  and  ad¬ 
dress  various  inefficietKies  across  proto¬ 
cols  and  packaged  applications.* 


We  wrote 
the  book  on 

Email 

Security. 


Get  your  FREE  book  and  learn  how  your  company 
can  manage  the  startling  growth  in  email 
volume — ^and  withstand  the  massive  flood  of  spam,  viruses 
and  fraud  that  threaten  your  email  communication  system. 

To  order  your  free  copy  of 
GET  THE  MESSAGE: 

A  Business  Guide  to  Surviving  the  Email  Sccurir>'  Crisis, 
visit  WTVw.ironportxora/book  or  call  toll  free  866.882.8658 


iRONPORr 


Rebuilding  the  World’s  Email  Infrastructure. 


We  get  it.  We  speak  it.  We  know  it. 


*  Because  we're  in  it. 


It's  time  to  hire  -  but  where  do  you  turn  to  find  the  right  fit?  At  Robert 
Half  Technology,  we  really  understand  IT.  Our  unsurpassed  knowledge  of 
the  technology  marketplace  allows  us  access  to  the  very  best  and 
brightest  in  the  industry.  And  we’ll  meet  your  requirements  quickly  and 
cost-effectively.  So  whether  you're  looking  for  someone  to  help  manage 
your  QA  in  application  rollouts,  upgrade  your  operating  system,  or  even 
secure  systems  that  prevent  viruses  -  relax.  Talk  to  us  today.  You'll  get 
the  right  person  for  the  job. 


m  ROBERT  HALF 

iffl  TECHNOLOGY’ 

Informstion  Technology  Professionals 


800.793.5533 


A  Robert  Half  International  Company 


£  Robert  Half  Technologv  EOE 


09.R04 


Q«A 

Emotional  Intelligence 

Burned  out?  You  may  be  working  at  cross-fnirposes  with 
your  emotional  wiring,  says  Eugene  Kahxzniacky.  author 
of  Managing  Psychological  Factors  in  Ir^onnation  Systems 
Work.  Harnessing  your  psychological  strengths  can  help 
beat  burnout  and  ftee  up  energy  and  creativity.  PlQt  54 
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Inside  Out 

rr  is  helpir^  visionary  oorrpani^  harness 
outside  talmt  to  boost  innovation  vdiile 
minirnizingcostsandrisks.ByGaryRAnthes 


A  ME!  IV  THE  MTIMCT  and  advanced  search 
techniques,  a  handful  of  companies  is  lead* 
mg  a  revolution  in  the  way  new  products 
are  designed  and  develops 
By  lotting  beyond  their  own  RficD  labs 
—  to  suppliers,  universities,  freelance  in¬ 
ventors  and  even  competitors  —  they  are 
accelerating  the  pace  of  innovation  while  sidestep¬ 
ping  the  costs  and  risks  of  in-house  research. 

‘'The  R&D  model  dtat  most  companies  are  fol¬ 
lowing  is  broken.**  says  Larry  Huston,  vice  president 
for  research  and  development  at  Procter  &  Gamble 
Co.  in  Ctncinnati.  **There's  a  drive  to  increase  inno- 
vadon  budgets  beyond  the  [revenue]  growth  of  the 
llrm.  That's  not  a  sustainable  business  model.** 

But  P&G.  which  spent  $L7  billion  on  last 

year,  has  found  a  new  model  called  open-market 
innovation.  Indeed,  the  consumer  prcducts  maker 
has  embraced  the  idea  so  enthusiastically  that  it  no 
longer  refers  to  its  product- 
innovation  process  as  RfitD;  |  ' 

it's  now  C&D,  for  “connect  1 
anddevelop.-  j 

P8cG  makes  the  connec-  i  CMBMCIMfci' 

tioDS  among  its  employees  •  ^ _ 

and  enema]  sources  with  a  {  iMRwInnHlBI 
variety  of  tools  and  tech-  I  uph 
niques,  including  an  in-  *  MM 

tranet,  Web  sites,  commer-  |  ^  ji»  ifiMM 
cial  and  homegrown  search  I  _ 
engines  as  well  as  several  j  . 

“innovation  networks”  —  | 

intermediary  companies  w— 

that  match  innovation  seekers  and  suppliers.  In 
fust  two  years,  the  company  has  boosted  the  per¬ 
centage  of  product  innovations  that  come  frtm  out¬ 
side  sources  from  less  than  20%  to  35%.  P&G’s  CEO 
wants  to  raise  that  to50%. 

“This  is  a  classic  ^plication  of  the  Internet,  go¬ 
ing  back  to  its  origms."  says  Darren  Carrdl  CEO  of 
InnoCentive  Inc,  one  of  the  innovation  matchmak¬ 
ers.  “For  those  of  us  on  Arpanet  in  the  beginning,  it 
was  all  about  scientists  and  engineers  «tharing  prob¬ 
lems  and  solutions." 

Innovation  Networte 

The  following  are  some  of  foe  resources  P0cG  uses 
to  connect  and  develop: 

•  iRMMlionllat  InnovationNet  is  an  intxanei  Web 
portal  for  18XKX)  P6fG  innovators  in  R&D,  engineer¬ 
ing.  market  research,  punfoasing  and  patents.  Nabil 
Sakkab,  a  senior  vice  president  for  R&D,  calls  k  a 
“global  hmchroom"  fix  the  exchange  of  ideas. 
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Lany  ^tetDn.  TO  pfBadenl  for  research  and  devetopment 
at  Procfar  &  Gamble,  inafres  the  case  for  out.of-lfMrTO 
smovalion: 

•  Pt6  has  7 jOO  iMnrahin  In  150  bnnchea 
o(  sdtnca.  (MMa  ol  KB.  IlNra  an  tS  mOhn 
a^naOif  piaWail  irhaMHi  around  the  mntfd. 
'So,  tar  asanr  panon  MS  haea,  Itian  m  200  on 
the  autahk,*  Hiiaion  aays. 


aMO  alaff  al  U.S.  camiiantaa  coat  tholr  amploysn 

MalowtlOO.OOOa  IMronawage. 
*Soinatad]r  bi  Ml  wMi  a  maalar't  dagna  in 
a  adanoa  prabaUy  atarla  at  about  SS.000  a 
yaaro'Hudonaayi. 


aPiOiaaSSIIWaii  rnimiii  miwbigateSblD 
7%  a  yaor.  ft  wairti  halt  of  al  ila  produd 
to  coma  horn  ailMTial  aoiavoa.  *Vmi  CM  do  tha 
mafli.*  ha  aaya.  *1f  50%  ia  coning  from  outai^  thd 
ia  over  a  SI  hMen  dMlaogo  to  bring  adaa  in  from 
the  cutaidathiuu^  connect  and  daaaiop  " 


■  haoCanttva.  Founded  by  Eli  Lilly  and  Ca  but  oper¬ 
ating  independently.  Andover.  Mass.-based  Inno- 
Centive  claims  to  be  the  “largest  virtual  laboratory 
in  the  world.”  It  posts  scientific  problems  from  its  30 
“seeker"  members  to  a  proprietary  network  of 70.000 
roistered  “sotvers”  around  the  world.  Fj>fh  posting 
includes  a  promised  cash  award  for  the  solution. 

(The  problems,  which  are  well  defined  and  typically 
have  proyably  correct  answers,  can  also  be  viewed  at 
www.in7iocenrivexoraAerv(ei3^roiect/Pn)fect/n^.po). 
"The  success  rate  so  far  has  been  around  50%."  Sak- 
kab  says.  “Not  bad  for  problems  we  failed  to  crack 
in-house." 

■  MtoaSigma  hie.  This  Cleveland-based  firm  helps  its 
SO  or  so  clients  prepare  technical  briefe  describing 
proiects  or  problems  they  are  trying  to  solve  and 
then  sends  the  briefs  —  without  identifying  the  or^- 
nating  companies  — -  to  thousands  of  researchers 
around  the  world.  The  idea  is  not  to  get  back  specific 
solutions,  as  InnoCentive  does,  but  to  identify  people 
most  likely  to  be  able  to  provide  solutions  on  a  con¬ 
tract  basis. 

■  %«€M«ra  tac.  An  Indianapolis-based  netwoik 
of  about  400  retired  scientists  and  engineers,  Your- 
Encore  was  created  10  months  ago  by  PCeG  and  Lilly 
but  DOW  (^>erates  independently.  It  matches  its  mem¬ 
bers  with  clients  for  specific,  short-term  iob  assign¬ 
ments  and  pays  them  their  salaries  at  retirement  plus 
30%  [QuickLink  48720 J. 

Rfsk-FreeR&O 

Indianapolis-based  Lilly,  another  pioneer  in  open- 
market  innovation,  supplements  its  internal  R&D 
resources  with  the  services  of  InnoCentive  and 
YourEncore.  Alph  Bingham  is  a  vice  president  at 
Lilly  Research  Laboratories  and  InnoCentive’s  chair¬ 
man.  He  says  that  a  company  like  Lilly  traditiooally 
would  look  on  the  outside  for  the  very  best  person 
perhaps  even  a  Nobel  laureate  —  to  solve  a  hard  re¬ 
search  problem.  But  ii  might  pay  that  person  S50.000 
for  six  months  of  work  and  still  not  get  a  solution. 


“Betting  on  the  Nobel  laureate  is  the  best  way  to 
go  if  I  have  to  bei  on  one  person,"  Bingham  says.  “But 
what  if  an  assistant  professor  at  Morgan  State  Uni¬ 
versity  is  actually  better  qualified  to  solve  that  par¬ 
ticular  problem,  at  that  moment,  than  anyone  else  on 
the  planet?  But  I  can't  find  him.  so  I  use  a  mechanism 
like  InnoCentive." 

InnoCentive  pays  its  award  money  —  typically  be¬ 
tween  SS,000  a^  SIOO.OOO  per  problem  —  only  when 
scuneone  comes  up  with  a  worl^le  solution.  “So  now 
the  second  reason  for  going  this  way  manifests  itself." 
Bingham  says.  “1  don't  pay  the  $50X100  until  I  know 
the  problem  was  solved." 

The  third  advantage  of  going  wth  an  externa) 
innovation  procurer  is  that  doing  so  preserves  the 
anonymity  of  both  buyer  and  seller,  so  there's  an 
intellectual  property  firewall  between  both  parties. 

It  gives  a  company  like  Lilly  the  ability  to  hide  its 
problems  in  plain  si^t."  Bingham  says.  “Someone 
can  look  at  our  problem  and  not  know  it’s  a  drug 
applicatioa  It  could  be  a  pesticide  application." 

Saarch  Magic 

Cutting-edge  search  technologies  are  essential  to 
the  connect-and-deveiop  approach.  NineSigma  cre¬ 
ates  a  unique  database  of  potential  respondents  for 
every  client  request  "The  databases  are  generated 
through  a  variety  of  searching  techniques,  some  of 
which  are  proprietary."  says  Shauna 
Bnimmet.  vice  president  for  operations 
at  NineSigma.  “It  goes  significantly  be¬ 
yond  Google,  and  the  techniques  are 
evolving." 

For  each  problem,  NineSigma  sends 
out  6X>00  bid  requests  on  average  and 
receives  10  to  100  responses.  Getting 
high-quality  responses  is  a  key  to  success,  says 
Richard  Swarz.  chairman  of  NineSigma.  aitd  that  re¬ 
quires  sophisticated  seardi  algorithms  to  build  lust 
the  right  mailing  list,  as  well  as  carefully  crafted  re¬ 
quests  for  proposals. 

InnoCentive  searches  its  database  of 70,000 
solvers  and  soroetimes  other  sources  as  well,  de¬ 
pending  on  the  problem.  “We  have  developed  some 
proprietary  algorithms  that  can  identify  with  a  higK- 
er  probability  the  folks  most  likely  to  participate  in  a 
ch^enge."  says  InnoCentive’s  CarrolL 
P&G  b  seeking  to  identify  what  it  caUs  “supercon- 
nected  giants"  in  the  networks.  They  arc  connected 
through  patent  literature,  they  are  publishing  a  lot. 


they  speak  at  conferences,  maybe  they  are  at  the  cen¬ 
ter  of  a  hub  as  department  head  at  a  major  research 
hospitaL"  Huston  says.  The  average  researcher 
knows  2.000  people;  the  superconnected  ones  that 
P&G  covets  know  10.000  i>eople.  he  says. 

The  Final  Connection 

While  companies  like  P&G  are  beginning  to  up  into 
opeo-maricet  innovation,  the  various  methods  of  do¬ 
ing  so  are  not  yet  well  integrated,  says  Navi  Radjou. 
an  analyst  at  Forrester  Research  Inc.  "The  laboratory 
management  systems  and  discovery  tools  that  scien¬ 
tists  use  must  provide  seamless  integration  with 
things  like  InnoCentive."  he  says.  "I  think  you'll  see 
that  happen  in  the  next  two  or  three  years." 

But  Lilly  bn't  waiting  for  software  vendors  to  step 
up  to  the  challenge.  It  recently  launched  a  project  to 
automate  the  internal  processes  surrounding  the  use 
of  InnoCentive  and  b  also  developing  interfoces  to 
InnoCentive’s  own  workflow.  “We  are  doing  the  IT 
design  for  an  internal  portal  to  these  [third-party] 
systems  so  that  h  becomes  part  of  the  scientist's  nat¬ 
ural  workflow,”  Bingham  says. 

For  example,  a  Lilly  scientist  today  seeking  help 
with  a  problem  would  first  have  to  know  InnoCen¬ 
tive  exbts  and  then  find  someone  at  Lilly  to  explain 
how  H  works,  fill  out  approval  forms  and  disclosure 
forms,  contact  the  relevant  person  at  InnoCentive 
and  so  on.  says  Bingham.  With  new 
workflow  automation  and  interfoces  to 
InnoCentive.  that  scientist  will  be  able 
to  accomplish  the  same  rhii^  with  a 
few  mouse  clicks.  And  once  the  prob¬ 
lem  definition  has  been  posted  by  Inno- 
Centive,  the  Lilly  scientist  will  be  able 
to  track  its  progress  online. 

Carroll  says  open-market  innovation  will  dramati¬ 
cally  expand  in  scope  over  the  next  five  years.  “You 
will  see  H  expand  into  sutistical  analysb  of  business 
problems,  graphics  design,  advertising  and  other  ser¬ 
vices  industries  where  thb  model  may  apply  even 
more  strongly."  be  says. 

Asked  about  the  future  of  (^>en-market  innovation 
at  P&G,  Huston  says.  The  current  business  model 
that  people  are  following  b  not  susuinable,  and 
more  and  more  companies  will  move  this  way.  It's 
going  to  become  even  more  important  as  we  face  a 
scientific  talent  shortage  in  the  U3. 

“Thb  is  the  future,"  he  says.  “People  just  don't  real¬ 
ize  it  yet"  O  48BM 
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Middleware  is  Everywhere. 


Kay 

1 

MIDDLEWARE  IS  IBM  SOFTWARE.  Coflaboratrve 
software  from  Lotus  that  creates  one  unified  platform 
between  employees,  partners,  customers'  and  vendors. 
Building  off  of  existing  tools,  it's  flexible  and  dynamic. 

It's  sofhware  that  can  increase  productivity  by  enabling 
on  demand  business.  On  virtually  any  kind  of  device. 
Every\Miere  around  the  globe.  Everywhere  in  between. 

1.  List  of  new  leads  e-malled  pte-takeoff. 

2.  Prototype  specs  updated  securely, 
a  New  specs  modHIed  In  showroom. 

4.  Modified  specs  accessed  via  PDA. 

5.  Proposals  sent  to  new  leads  predeedllne. 

Mkl(lewafef(xtheondemarKlworkllj«uniTK)reatfem«€M/middtevvarGAx)llaborate  ^DBMNDUMESS'  | 
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IT  disctpUnes.  a  flexible  man¬ 
agement  approach  and  accep¬ 
tance  of  new  ideas. 

But  resume  boasting  grid- 
specific  skills  and  accomplish¬ 
ments  remain  relatively  rare. 
Grid  is  not  widely  tau^t,  and 
n*  workers  with  hands-on  ex¬ 
perience  in  this  young  field 
are  tough  to  And. 

Still,  many  in  IT  have  the 
background  that  underpins 
grid  technology,  such  as  ex¬ 
perience  with  service-oriented 
archiiecnires,  componentixed 
sofhvare  and  distributed 


.NET 


computing. 

Here’s  a  look  at  the  talents 
you  need  to  play  in  grid  and 
how  some  IT  shops  are  bon¬ 
ing  them. 

Otfferant 

Approach 

Grid  romputing  applies  the  re¬ 
sources  of  a  netwoA  to  work 
on  a  single,  complex  problem 
or  set  of  problems.  One  fa¬ 
mous  example  is  the  SETI@ 
Home  protect,  the  search  for 
extraterrestrial  intelligence 
in  which  people  around  the 
world  share  their  PCs’  unused 
processing  cydes  to  analyze 
data  in  an  effort  to  identify 
signals  horn  outer  space. 

Implementing  a  ^id  takes  a 
variety  of  skills  and  an  open 
mind.  The  way  one  approach¬ 
es  the  applications  [with  grid] 
is  very,  very  difTerent  than  is 
traditionally  done  in  hi^-per- 
fonnance  computing  environ¬ 
ments,*  says  John  Hurley,  di¬ 
rector  of  grid  evaluation  and 
implementation  at  The  Boeing 
Co.  in  Chicago.  "Grid  comput¬ 
ing  is  very  different  because  U 
requires  you  to  took  at  things 
fiuriy  comprehensively.* 

Grid  requires  *somebody 
able  to  integrate  your  middle¬ 
ware,  your  developers,  your 
networking  and  your  v^ors. 
to  there  has  to  be  a  £uiiy 
extensive  balance*  of  sldlls. 
Hurley  adds. 

Grid  also  involves  sharing 
IT  resources,  iduch  may  mean 
a  loss  of  control  for  some  bust- 
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Grid 


Broad  IT  knowledge,  compre¬ 
hensive  experience  and  an  open 
mind  are  the  keys  to  harnessing 
the  power  of  grid  computing. 

By  Patrick  Thibodeau 


ness  units  and  IT  managers. 
Thai's  *a  disconcerting  foct 
for  a  lot  of  IT  managers:  it’s 
not  something  that  they  are 
ready  to  accept,*  says  Srinivas 
ffoushik.  global  chief  technolo¬ 
gy  officer  at  Columbus.  Ohio- 
based  Nationwide  FinaikciaJ 
Services  lac.  The  pushback 
from  traditional  thhiking  b  not 
something  we  are  underesti¬ 
mating.*  Grid  requires  a  new 
mind-set  where  people  can  tru¬ 
ly  trust  the  network,  he  adds. 

Vbung 

Technology 

Another  challenge  focing  grid 
implefflenters  is  ther  stan¬ 
dards.  ^plications  and  mid¬ 
dleware  are  immature.  *We 
still  don't  have  enough  stan¬ 
dards  where  we  can  simply 
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6M  ptamars  8^  M  broad  ff 
InMlBdQB,  «I  opan  mM  and  8 
>»angna«  to  kynaar  approach- 
aa  an  cMcaf  to  suocaea  SMb 
to  toa  fotoatoo  aaaaa  M  iIbo 
enalanipfvanlan  tar  grid: 


plug  and  play  with  these 
things;  we  have  to  glue  them 
together,"  says  Wolfgang 
Gentzsch,  who  is  leading  an 
effort  to  build  a  statewide 
bioinfonnatics  grid  in  North 
Carolina  for  MCNC  Grid 
Computing  &  Networking 
Services,  an  independent, 
nonprofit  IT  research  center 
in  Research  Triangle  Park. 
Gentzsch  says  recruiting 

Tou  need 
someone  who  not  only  has  ex¬ 
cellent  skills  in  distributed 
computing  but  who  ideally  has 
five  years’  experience"  with 
grid,  be  says.  "And  you  know 
grid  computing  is  not  five 
years  old."  be  adds  with  a 
laugh-  That’s  our  dilemma.” 

Grid-specific  training  is 
limited,  and  most  IT  workers 
graduated  from  college  with¬ 
out  it.  says  Hurley.  The  tradi¬ 
tional  computing  science  cur- 
riculums  iust  aren’t  preparing 
folks  to  deal  with  these  differ¬ 
ent  kinds  of  issues,*  he  says. 

Today,  vendors  have  most 
of  the  grid  expertise,  so  some 
companies  are  transferring 
those  skills  directly -to  their  IT 
stalb.  That’s  what  Nationwide 
is  doing  with  its  grid  vendor, 
DataSynapse  Inc. 

Koushik  says  be  has  been 
focusing  on  hiring  top-notch 
professionals  who  understand 
applications,  mkldieware  and 
security.  He  has  assigned 
some  of  those  employees  to 
work  with  the  vendor  to  learn 
about  the  grid  implementa¬ 
tion.  For  its  part  DataSynapse 
has  established  a  program  to 
teach  grid  technology  to  users. 

Tbny  Bishop,  chief  business 
architect  at  New  Yoric-based 
DataSynapse.  says  employees 
who  have  a  good  background 
for  undertaking  a  grid  project 
understand  J2EE.  .Net 
and  how  to  build  componen- 
tized  applications,  as  well  as 
systems  and  application  archi- 
tectufes.  Systems  administra¬ 
tion  and  business  analysis 
skills  are  also  helpful,  he  says. 

IT  professionals  who  under¬ 
stand  service-oriented  archi¬ 
tectures  and  distributed  com¬ 
puting  and  "bow  those  two 
mesh*  should  be  in  good  «kap»  j 
to  learn  grid,  says  Bishop.  I 
Because  grid  involves  muhi-  I 


SnrtMS  KousMt,  ^obal  CM 
tochnotag)!  oflicar  to  Nafion- 
Mde  Rranctal  Sartocas.  says 
the  best  way  to  comtoca  those 
Mho  doubt  grid’s  potonfito  is  to 
show  them  that  I  worts.  Na- 
tiomrtda  is  rurntog  nunaricaly 
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day«to26houR. 
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pedybyuitogeidBthgir 
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fautoneB.d8p8ndBonotisU- 
ty  to  look  to  data  and  make 
something  of  I.*  he  says. 
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pie  systems,  broad  IT  knowl¬ 
edge  is  also  desirable,  says 
Charlie  Catlett  chairman  of 
the  Global  Grid  Forum  (GGF) 
in  Lemont.  Ill.,  b  devel¬ 
oping  grid  standards  and  best 
practices.  "We  would  look  for 
people  vdK>  have  a  good  un¬ 
derstanding  of  10  things  in¬ 
stead  of  deep  knowlen^  on 
two  things,"  be  explains. 

Boeing  has  sent  employees 
to  a  two-week  GGF  program 
that  o6fors  a  mix  of  training 
that  appeab  to  the  technical 
guru  as  well  as  the  manager 
I  who  may  be  oxtre  interested  in 
I  developing  policies  for  sharing 
and  departmentalizing  infor¬ 
mation  on  a  grid,  says  Catlett 
Looking  toward  the  future. 
Gentzsch  b  working  with  edu¬ 
cational  institutions  in  North 
Carolina  to  develop  a  grid 
training  program.  He  sees  a 
need  for  more  people  with 
grid  skills,  particularly  to 
build  environiDeDts  tha> 
leverage  the  power  of  grid  by 
reaching  well  beyond  organi¬ 
zational  firewalls.  A  skiUs 
shortage  "will  hurt  the  ad¬ 
vancement  of  the  real  global 
grids,"  he  says,  and  that's 
"where  the  real  ghall^t^gf  15,'* 
C»4Cn9 


^In  his  new  book.  HiMgliii  Paydiaior 
tell  Fadara  hi  WiniialiM  SystMiM 
Vteftete  OrteaUtea  to  Emattente  In’ 

toHpnca.  Eugene  Kahmuacky  brings 
(Ogether  what  psychologists  know  about  personality 
and  learning  styles  with  what  IT  managers  know 
about  IT  workers.  The  result,  says  the  instructor  in 
the  Department  of  Applied  Computer  Science  and 
Administrative  Studies  at  the  University  of  Winni¬ 
peg  in  Canada,  is  just  the  first  step  toward  bringing 
IT  to  a  new  level  of  productivity  and  humanity. 
Kaluzniacky  told  Computerworid^  Kofliieen  Mely- 
muka  about  his  vision.  He  im'ites  feedback  and  col¬ 
laboration  at  eJcaluzniacky\§}uwinnipegj:a 
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IT.  Why  cohiWm  tin  hM  aaw?  Information  systems 
are  sociotcchnical  in  nature.  There's  a  technicaJ 
component  and  a  people-oriented  component. 
You  hear  a  lot  of  complaints  that  technical  people 
often  build  the  system  right  but  don't  build  the 
right  system.  More  recently,  there  has  been  a  lot 
about  burnout  among  IT  workers.  I  did  a  poll  on 
the  Internet,  and  about  48%  of 500 
respondents  said  they  were  close 
to  burnout.  So  that  could  become 
epidemic  in  new  few  years.  fT  is  a  Manatuj-,  C 
unique  area  in  that  you  have  to  ere-  Fart^!!^  ^ 
ale.  but  you  have  to  create  on  time  ^ 

and  be  precise  and  specific  and  it  Swtef 

has  to  work.  So  you've  got  preci- 
Sion,  deadline  and  creativity  at  the 
same  time.  That  doesn't  happen  in 
many  fields.  Also,  because  lechnol- 
ogy  has  proliferated,  more  is  possi- 
bie  and  more  is  expected  of  IT  pro- 
fessionals  —  sometimes  to  the  point 
of  not  being  realistic.  So  people 
need  more  tools  than  they  current¬ 
ly  have  to  work  in  this  profession. 


**i:"®j29Psychoiogicai| 
Information  I 
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Hm  can  an  indHdandtaf  af  aiMttend  faetara  hate 

M  IT  managar  anrii  man  affacttealy?  A  true  story  of 
how  personality  can  play  in  systems  development: 
In  a  financial  services  company,  two  ladies 
showed  up  the  same  on  thrW  dimensions  of  the 
Myers-Briggs  personality  inventory  and  different 
on  the  fourth,  which  measured  how  much  struc¬ 
ture  they  required  to  be  comfortable.  I  asked  them 
what  in  the  course  of  their  work  stressed  them  the 
most.  The  structured  person  said  she  became  very 
stressed  if  she  had  more  than  one  thing  on  her 
desk  at  once.  The  person  who  required  less  struc¬ 
ture  said  she  wras  really  stressed  if  there  was  only 
one  thing  to  work  on;  she  had  to  have  several  So  if 
a  person  is  wired  in  a  certain  way  and  you’re  hav¬ 
ing  him  or  her  do  things  that  stifle  them,  you're 
underutilizing  them,  and  they’re  burning  out  be¬ 
cause  you  don’t  understand  their  natural  style.  If 
a  manager  understood  the  personality,  thinking 
styles,  operating  styles  of  people,  it’s  incredible 
how  much  energy  could  be  fr^  up. 


M  thtoo  ymt'd  Wm  raadan  to  ttom  away 
fram  Mb  baak.  wlMl  woaU  If  bt? 

I  think  there's  a  lot  of  empower¬ 
ment  to  be  gained  from  awareness 
of  the  psychological  f^ors  in  the 
course  of  IT  work. 

1  wanted  to  state  a  vision  and 
bring  IT  to  a  new  level.  1  would 
to  see  this  book  as  a  first 
■|B  I've  already  created  a  Web 
wellness  in  IT  [http-y/ 
^Hftness.nc/ca}  and  I  will  build  a 
^P^aralc  component  for  com- 
Hents  and  questions  about  the 
Rook.  That’s  a  start.  There  will 
have  to  be  volunteers  for  the  next 
stage  (of  research),  and  I’m  look¬ 
ing  for  them.  O  48891 
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Eugene  Kakoniacky  is  on  a  mission  to  beat 
IT  burnout  and  boost  IT  energy  through  a  better 
understanding  of  what  makes  technologists  tick. 
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Tying  Styles  toTasks 
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Xerox  WorkCentre  Pro  advanced  multifunction  systems 
not  only  print  up  to  3x  faster  than  competition.  They’re  even 
smart  enough  to  give  your  productivity  a  colorful  new  twist. 
There’s  a  new  way  to  look  at  it. 


The  advanced  thinking  huilt  into  the  Xerox 
WorkCentre*  Pro  familj'  makes  them  the 
smartest  multifunction  citizens  working  on 
any  network.  They  don’t  just  scan,  copy,  fax,  and 
e-mail,  they  do  it  at  network  printing  speeds 
up  to  3x  faster  than  competition.  They  RIP  one 
job  while  printing  another,  so  work  gets  done 


faster.  .Xnd  their  Enhanced  Service  Program 
(ESP)  lets  you  fex  problems  before  they  happen, 
increasing  reliability.  And  now.  there’s  color.  The 
Xerox  WorkCentre*  Pro  40  prints  b&w  at  40  ppm; 
color  at  22  ppm.  It’s  one  more  way  our  full  line 
of  multifunction  systems,  printers,  and  digital 
copiers  help  you  get  more  out  of  your  network. 


more;  xerex.com/effflce/244  For  a  sales  rep:  1-800-ASK-XEROX  ext.  244 
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It’s  All  About 
The  Money 

For  experieflcod  fT  pros,  that  is.  By 
2006/2007.  fT  salaries  wriN  again  esca¬ 
late  as  the  economy  improves,  putting 
labor  costs  at  55%  to  60%  or  more  of 
the  rr  budget  vcording  to  Meta  Group 
inc.  As  the  ecormny  continues  to  im¬ 
prove  through  the  end  of  this  year  and 
into  2005.  key  IT  employees  will  start 
scanreog  the  horizon  for  better  employ 
ment  opportunities.  Meta  predicts.  To 
prevent  the  eiodus  of  top  employees. 
CIOs  should  pay  doser  attention  to 


human  capital  management  programs, 
mcluding  management  development, 
employee  welfare/morale,  and  recruit¬ 
ment  and  retention  programs,  as  well 
as  performance-based  incentives. 

CIOs  should  work  closely  with  human 
resources  staff  and  line-of-bu$iness 
managers  to  address  workforce  hiring 
trends  and  projected  IT  staffing  require¬ 
ments.  Meta  says.  They  should  also 
focus  on  selection  of  proper  outsourc¬ 
ing  strategies  and  try  to  keep  annual 
employee  turnover  rates  in  the  range 
of  4%  to  6%. 

-Julia  King 
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WHO’S  READING 
YOUR  E-MAIL? 

D  =  Companies  that  hire  staff  tof/ 
monitor  outbound  e-m»l  content  . 
Q  =  Companies  that  perform  regular 


audits  of  outbound  e-mail 

ofalCIOswfll 
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loe  Rich 


llJyii  WHAT  HE  DOES 
Having  just  sur¬ 
veyed  37U.S, 
n  companies  about  Ihetr  college 
recruiting  plans.  Rich  is  lukewarm 
at  best  in  his  optimism  about  new 
IT  graduates'  job  prospects  in  the 
U.S-  hrgh-tech  sector  The  mam 
reason:  Graduate  hiring  by  U.S 
high-tech  companies  this  year 
increased  by  a  mere  16%  over 
2003  Whafs  more,  although  the 
total  number  of  new  college  gradu¬ 
ates  has  increased,  most  U.S. 
high-tech  companies  hired  fewer 
college  graduates  this  year  than 
n  2003. 


What  is  the  near-term  IT  employment 
forecast  for  receitt  university  graduates? 

Hiring  is  modesily  up  but  remains  relatively 
'ow  In  2004  we  saw  oniy  about  3,600  or 
so  college  mres  m  a  sample  of  37  companies 
The  intereslirig  thing  is  that  among  the  com- 


Keep  Your  Politics 
To  Yourself 

Diat'sllwaiMc«olU2Ryan.>w)rii- 
plaa  oiait  inl  bunigr  and  iHihr  ol 
the  IMoridWIT,  an  onfint  discualon  fonan 
lor  anaian  ki  bualnaas  and  lachnlogy 
(intir.  WMAWTorg). -Qm  da  laat  ab 
to  alidd  mondK,  dw  naintiy  has  apM  Hha 

dia  San  dnkaaa  faidt  Nnw.  niidi  dds  hoc 
holalacdancnndngiv.taldngaboidpai- 
dcsnlwoilicannagadsnlylni-  ■■■ 
pact  iniircaraat.- Ryan  sain. 

-VMltoaaaraaniaonsakaln 
poanr  may  hold  a  dMaienl  ophdan  dm 
ynn.  an  da  bsat  ddng  Is  to  slay  am  ol 
da  pddcal  fray  and  hsap  da  dictaaton 
hancuous.  Hay  doni  naad  to  knoa  d 
yoi’ra  a  Kany  or  Bush  amyaitor.  d  aani 
hatp  you  pntoaahmady  to  tol  dan.- Ryan 
says.  Shnid  ^  managw  or  aonaona 
etas  at  wGih  ptaaa  yni  an  da  laaia.  dara 
an  giadouB  aaya  to  wiggto  am  at  da  con- 
yaraadon.  aha  adds.  Ryan's  pataonai  la- 


panies  thai  increased  rather  than  decreased 
staff,  (he  hiring  was  significant  m  that  they  in¬ 
creased  college  hinng  by  83%  Thosecom- 
panies  tend  to  be  in  networking  and  telecom¬ 
munications  and  software  and  services.  The 
companies  less  likely  to  be  hiring  are  m  the 
semiconoucior  and  hardware  space 

What  kind  of  degrees  do  new  hires  have? 

The  strongest  growth  m  college  hiring  is 
among  computer  science  degrees  with  an 
IS  emphasis  Overall,  the  number  of  hires  lor 
bachelor's  degrees  increased  68*^0  There 
was  a  141%  increase  lor  master  s  degrees 
and  a  100°o  increase  lor  Ph  0  s. 

How  does  today’s  college  hiring  compare 
with  the  pre-dot -corn-bust  days?  In  1999 
and  2000  we  were  seemg  closer  to  10.000 
new  college  graduates  hired  m  a  year 

Given  the  current  employment  picture, 
would  you  encourage  your  own  children 
to  pursue  a  degree  and/or  a  career  in  IT? 

IT  IS  a  less  secure  degree  and  career  than 
rt  was  10  years  ago  One  reasor'  is  that  we 
now  have  a  hole  m  the  bucket  When  we  do 
hue  employees,  they  can  come  from  ptaces 
other  than  me  U  S  -  China  lor  example  As 
demand  increases  among  U  S  ledinology 
firms  for  the  first  time  they  have  the  option  to 
go  and  get  those  employees  somewhere  oth¬ 
er  than  the  U  S  tf  I  were  advising  youngsters 
about  what  to  do  about  then  degrees.  I  d  ten 
them  to  follow  their  passion  O  49124 
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IN  BRIEF 


business  acuity:  yet  another  reason  to  outsource  with  spi 


our  sales  el 


For  a  company  our  size,  we  have  a  remarkable  number  of  ducks  in  a  row.  Our  global  delivery  model  includes 
certifications  for  CMMI  Level  5  (in  progress),  Six  Sigma,  and  ISO  9001:2000. Then  there's  our  industry  expertise. 
Companies  in  retailing,  financial  services,  transportation,  logistics,  insurance,  hospitality  and  software  publishing/reselling 
can  attest  that  SPI  is  totally  aligned  with  your  needs.  If  you  want  strength  and  flexibility,  we'll  get  along  swimmingly. 

To  learn  more,  call  toll-free  866-316-5774,  write  sales@spiPortal.com  or  visit  www.spiPortal.com. 
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^ur  Other  IT  Budget 


Fall  is  coming,  and  in  most  corporations, 
that’s  the  silly  season  of  budget  wars.  Getting 
your  budget  approved  requires  clear  commu¬ 
nication  and  mutual  understanding.  Unfortu¬ 
nately,  the  budgeting  process  is  organized 
around  financial  practices  (capital  and  operating  ex¬ 
penditures),  rather  than  the  way  IT  operates.  To  com- 
mumcate  the  needs  of  your  IT  organization  more  effec¬ 
tively,  forget  about  capital  and  operating  expenses  for  a 
while  and  consider  your  budget  from  the  perspective 
of  discretionary  and  nondiscretionary  spending. 


This  funds  the  operation 
and  maintenance  of  exist¬ 
ing  systems  and  infrastruc¬ 
ture.  It  includes  the  cost  of 
ninning  and  maintaining 
software  applications  as 
well  as  production  services 
(such  as  e-mail  desktop 
support  for  office  workers). 

This  is  analogous  to  operat¬ 
ing  a  car  after  you  buy  it'  In 
addition  to  buying  gasoline, 
you  need  to  change  the  oil. 
route  the  tires,  replace  the 
brake  pads  and  so  on. 

Your  nondiscretionary 
budget  is  more  than  just 
your  operating  budget  It 
includes  both  capital  and 
expense  items.  For  example,  capital¬ 
ized  hardware  and  license  fees  re¬ 
quired  for  infrastructure  support  arc 
nondiscretionary  items. 

The  CIO  has  ultimate  responsibility 
for  the  nondiscretionary  budget  and  is 
held  accountable  for  both  explaining 
and  minimizing  it  To  justify  its  size, 
you  need  to  know  how  your  unit  exists 
compare  with  industry  norms,  such 
as  per  seat,  per  PC  installation  or  per 
help  desk  c^.  Research  your  costs  be¬ 
fore  you  have  to  justify  them.  If  they 
are  below  industry  norms,  use  this  in¬ 
formation  to  deflect  budget  atucks.  If 
your  costs  are  above  industry  norms, 
get  them  down  in  the  following  ways; 

•  Simplify  your  architecture  to  re¬ 


duce  infrastructure  support 
costs,  and  use  commodity 
products  wherever  possi¬ 
ble.  It’s  easier  and  cheaper 
to  support  less  diversity. 

■  Comparison-shop  for 
this  year’s  deals,  especially 
for  application  packages 
and  telecommunications. 

■  Manage  your  vendors 
and  their  costs  closely. 

■  Consider  going  off¬ 
shore  when  it  won’t  com¬ 
promise  quality. 

Ofeerfefeinary  budget  This 
budget  is  used  to  frind  de¬ 
velopment  of  new  function¬ 
ality  and  replace  existing 
systems  or  parts  of  the  in¬ 
frastructure.  Discretionary 
projects  usually  enable  a  company  to 
do  at  least  one  of  the  following; 

■  Provide  financial  benefits,  such  as 
increased  sales  or  reduced  costs.  The 
benefits  of  a  project  are  usually  ex¬ 
pressed  in  terms  of  financial  return. 
These  days,  most  corporations  will 
fund  only  projects  that  provide  sub¬ 
stantial  flnancial  benefits. 

■  Meet  regulatory  requirements. 

•  Provide  significant  intangible  ben¬ 
efits.  For  example,  a  hospital  might 
fund  a  system  that  enables  it  to  deliver 
a  higher  quality  of  care,  regardless  of 
financial  return. 

Your  discretionary  budget  is  not  the 
same  as  your  capital  budget.  IRS  regu¬ 
lations  on  software  capitalixation  re-  I 


quire  that  cenain  pans  of  the  software 
development  process  be  capitalized, 
while  others  are  no  longer  eligible  for 
capitalization.  In  contrast,  the  discre¬ 
tionary  budget  contains  all  costs  relat¬ 
ed  to  specific  projects,  including  both 
capital  and  expense  items. 

For  discretionary  projects,  the  path 
to  budget  victory  is  an  effective  busi¬ 
ness  case.  Historically,  discretionary 
projects  have  depended  on  the  CIO  to 
justify  them,  but  this  responsibility  is 
largely  misplaced. 

The  business  executive  who  is 
pounding  on  your  door  demanding  a 
new  application  should  be  responsible 
for  developing  the  business  case  and 
accurately  quantifying  the  project’s 
business  benefits.  (The  purported 
benefits  should  be  included  in  the 
business  bead’s  performance  plan  to 
ensure  realistic  estimates.)  That  exec¬ 
utive  is  best  qualified  to  defend  the 
project’s  importance  and  should  lead 
the  charge  through  the  budget  battles. 
In  extreme  cases,  he  may  offer  to  con¬ 
tribute  dollars  from  his  own  budget  to 
fund  a  specific  program  rather  than 
have  it  cut. 

The  IT  organization  will  still  be  re¬ 
sponsible  for  providing  accurate  esti¬ 
mates  of  the  project’s  IT  costs.  In  or¬ 
der  for  the  project  to  survive  the  bud¬ 
get  wars,  the  CIO  and  the  business 
executive  need  to  jointly  prepare  and 
jointly  deliver  a  rigorous  and  compre¬ 
hensive  business  case. 

This  year,  to  get  maximum  leverage 
for  the  IT  budget  wars,  try  reassessing 
your  budget  from  the  perspective  of 
discretionary  and  nondiscretionary 
categories.  You’ll  still  have  to  recast 
your  budget  into  operating  and  capital 
expenses  for  the  finance  department, 
but  you’ll  be  (ar  better  prepared  to 
communicate  the  needs  of  your  IT  or¬ 
ganization.  Your  projects  will  have  a 
better  chance  of  surviving  the  budget 
wars,  and  this  time  you  won’t  be  on 
the  front  line  alone.  O  49035 
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Offshore  Tracker,  a  service  provtded  by 
TechsUnite.  reports  that  better  than 
240.000  fT  jobs  have  moved  offshore 
since  2000.  OuhrtQ  the  same 
timeframe,  more  than  700,000  fobs 
wwe  created  here  in  the  Urfrted  States. 

At  issue,  then,  is  where  the  jobs  are.  what  skills  are  needed, 
and  how  to  lartd  orw  of  those  jobs. 

Alistate  Insurancii  chosen  as  the  best  among  the  best  in 
the  BDPA/WorkpfaceOiversity  evaluation  to  identify  the  Top 
Company  for  Blacks  m  Technology,  turns  traditional 
professional  development  on  its  side  when  helping 
employees  develop  needed  skills.  Dr.  Robin  Richmond, 
assistant  VP  for  Allstate  Protection  Technology,  says 
sersding  IT  professionals  to  volunteer  in  the  community  is 
part  of  professioftal  development.  While  sewng  as  external 
ambassadors  for  Allstate,  the  entployees  also  learn  OciiK 
that  go  beyond  techrjology  -  team-building,  bnngmg 
diverse  groups  together  for  a  common  goal,  and 
communicating  in  a  non-tech  community. 


Greg  Tahvooen,  VP  of  human  resources  at  Delta  Airhnes, 
says  IT  professionals  do  best  when  they  vwrk  tn 
organizations  that  measure  performance.  'There's  no 
barrier  If  you  perform '  Tahvooen  says  mote  is  needed  m 
mterpersonal  skiffs  than  hartKore  tech  skills,  vrhkh  change 
in  definition  on  a  constant  basis.  Instead,  he  looks  for 
people  who  demonstrate  an  ability  to  learn,  who  have  the 
business  skills  of  sralysis  and  project  management. 

Whether  at  Blackwell  Cortsulting,  Merck.  Marriott  or  HSBC 
Technology  &  Services,  all  the  ftnalHts  in  the  Best 
Companies  for  Blacks  in  IT  cite  these  types  of  requfremerrts 
for  IT  workers. 

Their  input  is  critical  when  looking  at  the  laten  Information 
Technology  Association  of  America  Workforce  Development 
Swvey.  Despite  continued  focus  by  CIOs  on  ag^essive  and 


tlfrionstrated  ongoing  learning,  the 
500  hiring  managers  respondkig  to 
B  ^  ^ASA  telephone  poll  mdKated 

I  ^  they  first  look  at  related  e:iperieiKe 

g  acadermc  degrees  However. 

■  mterpersonal  skills  were  ranked  two 

^  bmes  higher  than  project 

management  or  team  buikfrng  skills 
I  m  hiring  corsideratiorts. 

Other  data  from  the  survey  released 
Sept.  6  projects  the  IT  workforce  wdl 
top  10,5  milfioo  workers  m  2004. 
from  tO.3  millton  in  2003.  Job 
growth  is  slowing,  however,  with 
hiring  managers  reporting  plans  to 
hire  230.000  people  in  2004  vs.  nearly  500.000  in  2003 

Almost  BCrtb  of  the  jobs  will  be  with  nori-fT  cornpanies.  with 

the  greatest  job  growth  -  5%  -  coming  in  the  Northeast 

More  IT  professionals  work  m  programming  than  any  other 
job  categoric  but  the  fMghest  job  growth  wiN  come  m 
technical  support  (with  a  projected  67.000  jobs)  and 
network  system  design,  followed  by  programming 
Information  security  is  forecast  to  be  the  job  area  of 
greatest  growth  over  the  next  three  years 
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Virtiiai  Server 

pfxxiucts  have  become  popu¬ 
lar  with  companies  that  are 
consolidating  underutilized 
servers,  streamlining  test  and 
development  environments, 
and  setting  up  disaster  recov¬ 
ery  systems. 

Eric  Kuzmack.  a  Silver 
Spring,  Md. -based  IT  architect 
at  Gannett  Co„  said  his  com¬ 
pany  was  looking  to  consoli¬ 
date  servers  in  2002  and  had 
no  interest  in  waiting  for  ^^r- 
tual  Server. 

But  that  wasn’t  the  only  rea¬ 
son  Gaimett  opted  for 
VMwarc's  technology.  Kuz¬ 
mack  said  he  prefers  the  ESX 
Server  architecture,  which  has 
a  built-in  host  operating  sys¬ 
tem.  In  contrast.  Microsoh's 
Virtual  Server  and  VMware's 
GSX  Server  need  a  host  oper¬ 
ating  system  to  run.  and  with 
Virtual  Server,  the  lone  choice 
for  the  host  operating  system 
is  Windows  Server  2003. 

"Even  with  the  sUmmed- 
down  version  of  Windows 
Server,  there’s  a  lot  of  extra 
stufT,"  l^izmack  said. 

Eric  Berg,  a  group  product 
manager  at  Microsoft,  said  the 
company  focused  on  capabili¬ 
ties  that  the  majority  of  users 
need,  and  most  of  them  cur¬ 
rently  use  virtual  machines  for 
testing  and  development  pur¬ 
poses.  He  said  the  company 
chose  Windows  Server  2003 
as  the  host  operating  system 
because  it  provided  the  best 
performance  and  most  secure 
base.  Berg  said  Microsoft  will 
look  into  additional  ftmetion- 
ality  in  future  products  based 
on  customer  l^back. 

Kuzmack  also  expressed 
concern  about  the  level  of 
patching  bis  company  mi^i 
need  to  do  with  Windows  and 
the  effect  that  the  downtime 
ufli  virtual  machines  would 
have  on  users  of  the  applica¬ 
tions  running  on  them. 

■‘With  ESX.  the  number  of 
patches  is  counted  in  single 


digits  per  year,  not  single  dig¬ 
its  per  month."  he  said. 

Kuzmack  added  that  with 
ESX  patches  can  be  applied 
without  requiring  the  applica¬ 
tions  to  be  taken  down.  Using 
an  add-on  called  VMotion, 
Gannen  is  able  to  move  the  vir¬ 
tual  machines  off  the  server  to 
another  physical  server  while 
patching  and  then  shift  the 
workload  back  when  finished. 

Customer  Needs 

Mark  Ewert,  director  of  sys¬ 
tems  architecture  and  engi¬ 
neering  at  Waltham.  Mass.- 
based  Integrated  Healthcare 
Information  Services  Inc.,  said 
ESX  provides  better  perfor¬ 
mance  and  more  fine-grained 
control  over  system  resource 
allocation  than  other  virtual¬ 
ization  products. 

"In  GSX  Server  and  similar 
products,  due  to  their  inter¬ 
action  with  the  underlying 
operating  system.  1  do  not 
have  that  control,"  Ewert 
said.  He  said  that  even  though 
ESX  is  more  expensive,  "it’s 


VMware  may  have  gotten  a 
ttvee-yearheadstarlonMcro- 
soft  MMlh  its  server  wtualraixm 
solMm.  Bui  Mkrasoft  is  aineng 
to  make  a  splash  based  on  price. 

*WsrBaly  Mart  lobe  the 
most  cost-eAectfve  soluUon 
where  people  are  usng  virtual 
machines  on  Windows  Server 
2003.*  said  Enc  Berg,  a  group 
product  managar  in  kberosotfs 
Windows  and  enterprise  mtti- 
agement  division. 

Barg  sax!  Mcrosoft  eveluales 
customers' needs  based  on 
worMoads.  focuemg  on  ttvee  ar- 
Ms:  software  tasting  and  devel- 
opronL  legacy  application  re¬ 
hosting  and  targeted  production 
wortdoads,  such  as  Active  Direc¬ 
tory  domain  conirolers.  net- 
workino  and  depanmeni^  appt- 
cations. 

*We  have  a  lot  of  tools  that 
wi  help  them.'  he  s^.  VirluBl 


cheaper  in  the  long  term." 

Bob  Armstrong,  director  of 
Internet  and  information  man¬ 
agement  at  Delaware  North 
Cos.  in  Buffalo.  N.Y..  said  he 
looked  at  Virtual  Server  when 
it  was  still  owned  by  Connec- 
tlx  When  Armstrong  took  a 
second  look  at  the  technology 
last  December,  he  said  he 
found  that  Microsoft  was  '‘still 
playing  catch-up  to  VMware’s 
current  technology." 

One  of  Armstrong’s  biggest 
concerns  was  that  Viitual  Serv¬ 
er  wouldn’t  allow  his  company 
to  run  its  casino  player  track¬ 
ing  system  on  more  than  one 
processor.  Virtual  Server  al¬ 
lows  users  to  carve  up  only  one 
processor,  whereas  ESX  Server 
supports  symmetrical  multi¬ 
processing  (SMP).  allowing  an 
application  to  use  mure  than 
one  processor. 

Berg  said  that  most  users  of 
virtual  machines  today  look  to 
subdivide  one  processor.  But 
Microsoft  will  look  at  multi¬ 
processor  support  in  the  next 
version  of  Virtual  Server. 


S^verisiustonetool.* 
BeqjsatoMcrosofthasa 
Component  Ofaied  Model  appit- 
cation  programming  irrterface 
that  can  be  used  to  create 
scripte  to  automallcalv  deploy 
new  server  builds  and 'great  in¬ 
tegration' «Mth  Its  server  man* 
agernem  tools,  so  Ofitomers 
dm't  have  to  buy  a  specific  tool 
to  manage  both  virlual  machines 
and  phy^  servers. 

Tom  Bittman.  an  analyst  at 
Bartner  Inc.,  predicted  that 
VMrare  rWI  keep  60%  market 
share  lor  (he  consoldation  of 
serws  to  run  production-ready 
aopkeations.  Bui  he  added  that 
Bartner  expects  Server  to 
command  at  best  50%  of  the 
market  tor  test  and  development 
iwxWoads  by  the  end  of  2006. 

'The  price  tMerentiaf  is  going 
to  kill  [VMwwej  unless  they 
change  ft.*  Bltbnan  said. 


Even  one  of  Virtual  Server’s 
contented  early  adopters,  Cur¬ 
tis  Bagwell,  manager  of  dis¬ 
tributed  computing  at  Ameri¬ 
can  National  Insurance  Co. 
(Anico).  said  he  would  like  to 
see  Microsoft  add  SMP  sup¬ 
port  to  its  product. 

Galveston.  Texas-based 
Anico  was  thrown  a  curvebaJl 
when  Microsoft  decided  to 
support  only  Windows  Server 
2003  as  the  host  operating  sys¬ 
tem  for  Virtual  Server.  Anico 
had  used  Windows  2000  for 
the  Virtual  Server  customer 
preview  and  had  to  upgrade 
to  Windows  Server  2003  for 
the  beta. 

But  Bagwell  said  Virtual 
Server  is  still  cheaper  for  his 
company  than  VMware’s 
products  (sec  chart).  And  the 
main  reason  Anico  opted  for 
Microsoft’s  offering  was  that 
VMware’s  recommended  ESX 
product  doesn't  suppon  his 
company's  storage-area  net¬ 
work  based  on  products  from 
Storage  Technology  Corp. 

Bagwell  said  he  has  been 


Michaei  Mulany,  presi¬ 
dent  of  marketing  at  VUwm. 
which  MS  acqiired  earlier  this 
year  by  EMC  Corp,.  ssd  only 
thalthiecompcny'afwayslis- 
(errs*  to  customers  on  prieng. 

Dan  Kusnebky.  an  analyst  at 
Imngham.  M8ss.-based  IOC. 
sato  the  underpinnings  of  what 
Microsoft  is  doing  are  dWerent 
than  what  VMware  is  doing.  He 
sM  MioDSOft  Is  using  fts  Vvlub 
Servertochnologytoheipcifi- 
tomers  running  older  Slacks  of 
appkeahorts  on  Wndows  NT  4 
mgrate  to  new  hardware  rather 
thw  continue  to  nfi  them  on 
separate  ntachines. 

Kusttetzky  said  VMware's  fo¬ 
cus  is  to  help  users  move  to  a 
higMy  vvtuaiiad  environrnerit 
*80  they  can  tune  what  they  do 
to  their  busness  needs’ arid 
assign  IT  resountes  as  needed 
-eWSfwa 


happy  with  his  decision.  He 
noted  that  Anico  was  able  to 
consolidate  205  servers  to  29 
dual-processor  boxes  in 
preparation  for  the  relocation 
of  its  data  center  from  Galve¬ 
ston  to  League  City.  Texas. 
Bagwell  said  the  software  has 
been  stable.  The  only  problem 
his  company  cncouniercd  in¬ 
volved  running  one  or  two 
DOS-based  applications  on 
Virtual  Server,  and  Microsoft 
helped  fix  those  problems. 

Likewise.  Allstate  Insurance 
Com  another  participant  in  Mi¬ 
crosoft’s  Technical  Adoption 
Program,  has  been  happy  with 
the  stability  and  performance 
of  Virtual  Server. 

Michael  Mark,  a  senior 
planning  consultant  at  the 
Northbrook.  IIL-based  insurer, 
said  Allstate  was  able  to  host 
up  to  70  images  on  a  single 
Hewlett-Packard  Ca  quad- 
processor  server  in  a  lab  envi¬ 
ronment.  He  said  the  company 
also  was  able  to  simulate 
about  1.500  users  through  a 
Web  server  that  was  running 
as  a  guest  on  Virtual  Server  at 
Microsoft’s  test  center. 

"We  have  had  nothing  but  a 
great  experience  with  the 
product  stability."  Mark  said. 

He  said  Allstate  is  looking 
to  have  about  115  virtual  ma¬ 
chines  for  testing  and  devel¬ 
opment  running  on  instances 
of  Virtual  Server  by  year’s  end 
and  250  virtual  machines,  in¬ 
cluding  applications  in  pro¬ 
duction.  by  the  end  of 2005. 

The  target  is  four  virtual  ma¬ 
chines  per  physical  server,  but 
Mark  said  Allstate  thinks  it 
can  exceed  that  goal  O  49355 
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FRANK  HAYES  ■  FRANKLY  SPEAKING 


[HE  ANNUAL  IT  WORKFORCE  STUDY  is  out  from  the 
Information  Technology  Association  of  America.  And 
for  once,  it’s  genuinely  useful.  Gone  is  the  rah-rah  boos 
terism  of  years  past.  Gone  are  the  million-new-jobs 


*  estimates  that  never  came  true  and  the  predictions  that 
most  new  IT  jobs  would  go  wanting  because  there  just  weren’t 
enough  U.S.  IT  people  to  fill  them. 

Instead,  it’s  a  sober  assessment  stuffed  with  information  of  value 
to  anyone  hiring  or  looking  for  work  in  corporate  IT.  Much  of  that 
information  is  clearly  presented  in  the  report,  which  you  can  get  at 

www.itaa.orgAvorkforce/studies/04wfstudy.pdf. 

And  then  there’s  the  stuff  that’s  hidden  between  the  lines. 

■  Whi  Wn*  of  iota?  Security  jobs  in  network- 
says  the  US.  IT  workforce  grew  about  2%  be-  ing  and  databases  wUI  be  hot.  Tech  support  will 

^il^r,  Ts  “n  ^  category  of  new  iobs,  ateut  30% 

V  i  *'  represented  nearly  half 

230«)0  IT  jobs  ^d  be  created  by  next  of  all  new  IT  jobs.  Web  development  and  the 

spring.  Techntt^  support,  netwotking  and  pro-  -digital  media”  category  -  the  people  who  ere- 
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■  Sun  stops  ipnoiing  networtc-attached  storage  technology  and  introduces  its  first  NAS  device  PAGE  6 

■  Boeirni  writ  give  its  suppliers  a  set  of  RnOstaiKtardsbirtwon-t  require  them  to  start  using  th^ 
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J.P  Morgan 
Scraps  $5B  FT 
Deal  With  IBM 

Hitiik  ainfimis  plans  to  cancel  outsoua  in;^ 

agrccnicnl.  brinf;  nOperations  hick  in-housc 

ay  ST«CY  cowLty  Adams.  Dimon  is  dm-  to  tako 

IBM  lost  one  <.f  its  highest-  over  as  CEO  i)f  J.I’.  Morgan  in 

profile  1 1  oulsoureint;  clients  and  Adams  now  heads 

last  week,  as  M*.  Morgan  IT  for  the  meiged  company. 

t.Iiase  Cv  (.o.  eonlirined  that  "We  hi.*Iieve  managing:  our 

it  s  caneelinjj  the  remainder  t'f  own  technology  infrastructure 
a  seven-year.  S.s  billion  con-  is  best  for  the  h>nj:-lerm 
tr.ict  that  the  two  ctnnpanies  growth  and  success  of  our 

signed  in  late  JOPJ.  aimpany."  Adams  s;iid  in  a 

Sources  told  t.’tjmpnfiT-  I  statement.  He  added  that  re- 
w’ttrM  last  spring  that  New  |  integrating  IT  t)perjtions  intt» 
^»'rk-based  |.P.  Morgan  !  the  bank  "will  give  us  eompet- 

plaiuied  to  bring  most  tfWfffffS  ‘five  advantages,  aceei- 
ot  the  I !  work  it  had  crate  innovation  .ind 

oulMHireed  to  IBM  back  Forum  enable  us  i»»  beciwne 

in  house  after  omplet-  more  streamlined  and 

iiig  its  S58  billion  acqui-  eOleiem." 

sition  of  Bank  One  -  I.P.  Morgan  and  IBM 

Corp.  in  luly  (t^uiekl  ink  «  ill  wind  down  their 

475(>Sl.  At  the  time,  a  cnintract  this  year,  and 

spt'kesman  for  I  P,  Morgan  ,  the  4.t)00  I  T  employees  and 
said  the  bank  e«>uldn’t  com-  |  contractors  who  were  shifted 
mcnl  "on  future  negotiations."  :  n>  IBM  after  the  deal  w.ts 
Past  week.  I.P.  Morgan  said  |  signed  will  be  transferred 
the  addition  ol  Bank  One  ere-  [  back  to  the  hank  in  Ianuar\. 
ated  a  larger  company  w  ith  The  IT  infrastructure  func- 

ihe  cap.icity  to  manage  the  i  tions  currently  being  handled 
technolog\  infrastructure  J  by  IBM  include  man.tgemem 
»>n  its  own.  The  merger  also  |  of  the  bank's  data  centers, 
bntiight  l-P.  Morgan  twti  prom-  help  desks,  distributed  ci>m- 
inent  advtvates  of  running  I  E  puling  systenjs.  and  data  and 
intern.illy:  Bank  One  t  \oice  nelwi*rks. 
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CDCriil  Vendors  rtrflieam- 
uiTvIAL  mg  something 
REPORT  users  have  always 

Known  CRM  m 
iinancial  services  is  very  flihereni 
from  CRM  m  riealth  caie  or  many 
faclunng  We  profile  seven  mdus- 
iries  and  Iheir  special  CRM  needs 


Our  new  Data  Points  collection  has 
CRM  lacloicts  to  aownload  tor  vour 
PowerPoint  presentations 
0uict(Linlia4%(] 


OT  itiwi  >  nAMtiLtw  s.ua  me  tinancul  ser^  tces 

’  *  *  ■  ■  s'ompany  reduced  the  number 

Server  consolidation  projects  ;  of  sc*rvers  it  has  fr«tm  about 
are  reducing  systems  manage-  .^(H)  to  llW)  over  the  past  >  ear 
mem  eomplevity  and  finding  that  end 

costs  in  many  data  cen-  HLKlPlfl  users  were  under 
ters.  n  managers  s;ud  ARwiagonertt  Ulili7ir4;  some  of  rbe 
at  a  conference  here  last  begna$?9QM  systems, 
wc-fc.  But  nou-J  IlMmaitoi.  addition  b.k-Ju.- 
that  ettnsolidations  may  ing  its  hardware  costs. 


not  be  easy  because  of  prob¬ 
lems  such  as  getting  end  users 
to  ciHiperate  and  dealing  vw«h 
displaced  IT  workers. 


In  addition  to  reduc¬ 
ing  its  hardware  costs. 
Lirieoln  has  reaped  significant 
savings  on  software  licenses 
by  lowering  the  number  of 
i*pcTating  system  images  in- 


For  example.  lason  Glazier,  i  stalled  on  its  servers  from  (HKI 


to  2lM}.  Glazier  said.  1  le  w .» 
one  of  the"  speakers  at  1  ntcr’ 
prise  M.miigenK'ni  World 
2tHM.  a  new  ctmference  spi*n- 
siwed  by  t'ompufi'rieorfj.ind 
Distributed  Management  I.tsk 
Force  Inc. 
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Server  Consolidation  Can  Cut 
Costs,  but  IT  Faces  Challenges 


2004 


Sun  stops  ignoring  network-attached  storage  technology  and  introduces  its  hist  NAS  device 
Boeing  will  give  its  suppliers  a  set  of  RFID  standards  but  won  t  require  them  to  start  using  the  technology 
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J.E  Morgan 
Scraps  FT 
Deal  With  IBM 

Bank  confirms  plans  to  cancel  outsourcing 
agreenient,  bring  IT  operations  back  in-house 


SEmiMEI  M.  2004  ■  VOL.  36  •  NO  36  •  SS/COPT 


BY  STACY  COWLEY 

IBM  lost  one  of  its  hi^iest- 
profUe  IT  outsourcing  clients 
last  week,  as  J.P.  Morgan 
Chase  &  Ca  confirmed  that 
it’s  canceling  the  remainder  of 
a  seven-year,  S5  billion  con¬ 
tract  that  the  two  companies 
signed  in  late  2002. 

Sources  told  Computer- 
world  last  spring  that  New 
York-based  ).P.  Morgan 
planned  to  bring  most 
of  the  IT  woric  it  had 
outsourced  to  IBM  back 
in-house  after  complet¬ 
ing  its  $58  billion  acqui¬ 
sition  of  Bank  One 
Corp.  in  July  K^ckLink  I 
47508J.  At  the  time,  a  ' 
spokesman  for  ).P.  Morgan 
said  the  bank  couldn’t  com¬ 
ment  "on  future  negtHiations.” 

Last  week.  J.P.  Morgan  said 
the  addition  of  Bank  One  cre¬ 
ated  a  larger  company  with 
the  capacity  to  manage  the 
technolc^  infrastructure 
on  its  own.  The  merger  also 
brought  J.P.  Morgan  two  prom¬ 
inent  advocates  of  miming  IT 
internally:  Bank  One  CEO 
James  Dimon  and  CIO  Austin 


Adams.  Dimon  is  due  to  take 
over  as  CEO  of  JJ*.  Morgan  in 
2006,  and  Adams  now  beads 
IT  for  the  merged  company. 

"We  believe  managing  our 
own  technology  infiastructure 
is  best  for  the  lot^-term 
growth  and  success  of  our 
company,"  Adams  said  in  a 
statement.  He  added  that  re¬ 
integrating  IT  operatioDS  into 
the  bank  “will  give  us  compet¬ 
itive  advantages,  accel¬ 
erate  iimovation  and 
enable  us  to  become 
more  streamlined  and 
efficient." 

J.P.  Morgan  and  IBM 
will  wind  down  their 
contract  this  year,  and 
the  4,000  IT  employees  and 
contractors  who  were  ^fted 
to  IBM  after  the  deal  was 
signed  will  be  transferred 
back  to  the  bank  in  January. 

The  IT  infirastmeture  fime- 
tions  currently  beii^  handled 
by  IBM  include  management 
of  the  bank's  data  centers, 
help  desks,  distributed  com- 
putii^  systems,  and  data  and 
voice  networks. 

JJ*.  Morgan,  page  16 
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Server  Consolidation  Can  Cut 
Costs,  tNit  FT  Faces  Challenges 


Streamlined  systems 
boost  utilization  rates 


Server  consolidation  projects 
are  reducing  systems  manage¬ 
ment  complexity  and 
costs  in  many  data  cen 
ters,  IT  managers  said 
at  a  conference  here  last 
week.  But  some  noted 
that  consolidations  may 
not  be  easy  because  of  pix^ 
lems  such  as  getting  ei^  users 
to  cooperate  and  dealing  with 
displai^  IT  woriiers. 

For  example,  Jason  Glazier. 


I  diief  technology  and 
merce  officer  at  Lincoln  Fi 


nancial  Group  in  PhiladelpEiia, 


said  the  financial  services 


company  reduced  the  nmnber 


of  servers  it  has  from  about 


I  300  to  100  over  the  past  year 


after  finding  that  end 


users  were  under 


utilizing  some  of  the 


In  addition  to  reduc 


mg  its  hardware  costs. 


Lincoln  has  reaped  significant 
savings  on  software  licenses 


by  lowering  the  number  of 


operating  system  images  in¬ 
stalled  on  its  servers  from  600 


tOhicCIO  Uftlbr 

stale  IS  consolKlaling  e-rruil  servers 


one  of  the  speakers  at  Enter 


pnse  Management  World 
2004,  a  new  conference  spon 
sored  by  Computerworid  and 


Distributed  Management  l^sk 
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reach 


JETBLUE  AIRWAYS  has  a  secret  weapon  in  the 
airline  competition:  a  virtual  reservations  center. 
As  in,  virtually  no  overhead  costs,  no  unhappy 
employees,  no  limits  to  growth.  Because 
JetBlue’s  600  agents  all  work  from  home. 

IP  Telephony 


In  the  state  of  Avaya,  our  contact  center  solution 
lets  every  agent  field  customer  inquiries  and 
book  reservations  in  real  time,  in  their  socks 
if  they  choose,  with  a  PC-based  soft  phone. 
Avaya  helped  JetBlue  get  off  the  ground  with 


Unified  Corr 


AVAVA 

a  higher  plane 
of  communication 

$4  million  In  revenue  from  10,000  reservations 
its  first  week  alone.  See  how  your  customer 
relationships  can  take  off  with  the  worldwide 
leader  in  multimedia  contact  centers  at 
avaya.com/cc.  Or  call  866-GO  AVAYA  today 
ication  Services 


AGENT  WORKS  FROM 


home,  sweet  home  with  the 

VIRTUAL  CONTACT  CENTER 


MESSAGELABS  ANNOUNCES  THE  BEGINNING 
OF  THE  END  OF  EMAILS  YOU  DIDN'T  ASK  FOR, 
FOR  THINGS  YOU  DON'T  WANT, 

FROM  PEOPLE  YOU  DON'T  KNOW, 


•-  om/he-re 


CntlENR! 


Taking  Stock  of  E-paper 

In  Die  Technology  section:  Analysts  have  long 
predicted  that  e-paper  would  set  the  stage 
for  the  paperless  office.  Developing  a  paper 
substitute  hasn’t  been  easy,  but  it’s  catching 
on  in  applications  like  e-books.  Page  23 
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The  Elastic  IT  Staff 

In  the  Managemont  section:  What  do  iust-in-time 
inventory  and  portfolio  maruigcment  have  to  do 
with  IT  staffing?  Plent>-.  according  to  CIOs  who 
are  applying  those  concepts  to  maximize  staff 
flexibility  while  minimizing  trauma.  Page  29 


NEWS 


OPINIONS 


6  Sun's  first  NAS  box  will  nil  a 
big  hole  in  the  vendor’s  stor¬ 
age  product  lineup. 

6  Q&A:  UPS  exec  David  Barnes 
says  RFID  technology  needs 
to  be  able  to  adapt  to  rapidly 
changing  standards. 

7  Boeing  readies  RFID  specs. 

but  it  won’t  require  its  suppli¬ 
ers  to  Stan  using  the  technol¬ 
ogy  right  away. 

7  IBM  offers  RFID  services  to 

manufacturers  and  midsize 
companies. 

10  PeopieSoft  faces  questions 

about  its  future  following  a 
judge’s  pro-Oracle  ruling. 

10  Users  say  Oracle  is  making 

progress  on  application  sup¬ 
port.  but  some  complain  that 
installing  updates  is  still  a 
problem- 

12  The  OHS  launches  initiatives 
aimed  at  gathering  more  real- 
world  data  from  companies 
about  cybersecurity  attacks. 

12  Microsoft  updates  its  Visual 
Studio  2005  release. 
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6  On  the  Mark:  Mark  Hall  says 
Wi-Fi  over  dial-up  is  looming. 
Does  it  represent  additional 
security  risks? 

20  Don  Tennant  takes  a  stroll 
down  memory  lane  as  he 
packs  up  for  Compurerworf<fs 
move  to  a  new  location. 

20  Virginia  Robbins  suggests 
thinking  small  the  next  time 
you’re  looking  for  a  job. 
because  small  businesses  arc 
likely  to  deeply  value  your 
contributions. 

21  Michael  Garlenberg  has 
found  that  the  best  way  to 
maintain  ubiquitous  connec¬ 
tivity  is  with  a  handheld  that 
offers  four  mobile  services. 

26  Keith  Spitz.  a  veteran  of  the 
CRM  front  lines,  reports  on 
failed  implementations  and 
details  how  to  do  them  right. 

31  Barbara  GomolskI  notes  that, 
modest  growth  aside,  the 
pressure  to  reduce  IT  costs 
isn’t  going  away.  She  predicts 
IT  spending  trends  for  2005. 

50  Frankly  Speaking:  Frank 
Hayes  says  RFID  tcchnolt^ 
isn’t  ready  for  prime-time  IT. 
But  if  you're  required  to  use 
it,  give  the  project  to  staffers 
who  arc  best  at  improvisation. 
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CRM  Goes  Vertical 

Managing  sates  and  cus¬ 
tomer  service  in  the  manu¬ 
facturing  sector  is  dramati- 
caiiy  different  from  CRM  for 
financial  services  or  health 
care.  So  in  this  special  re¬ 
port.  we  profile  seven  in¬ 
dustries  and  their  different 
I  CRM  needs. 
PACKAGE  BEOMS 
I  0NPAGE33. 

34  Bridging  th*  Data  Ohrida.  Auto¬ 
motive  CRM  tools  were  designed 
to  aid  the  exchange  of  data  be¬ 
tween  carmakers 
•  and  dealerships. 


;  36  Turning  DaU 
I  Into  OoHars.  Retail- 
'  ers  are  using  call 
center  and  data-gatbering  CRM 
toob  to  manage  millions  of  cus¬ 
tomer  relationships. 

38  Creating  Brand  Awareness.  Con¬ 
sumer  product  makers  don’t  sell 
directly  to  customers,  so  advanced 


analytical  CRM  tools 
that  evaluate  braad- 
efforts  are  key. 

39  Unifying  Cnstonw  Vlewt.  Finin- 
cial  services  CRM  b  taldog  frag¬ 
mented  dau  and  turning  it  into  a 
complete  view  of  customers. 

40  Gaining  Taxpayer 
Respect.  Govem- 
mem  agencies  are 
using  conventional 
CRM  software  to 
I  provide  improved 


'  services  to  dlizens. 

41  Preventing  a  Data  Overdose. 

Pharmaceutical  companies  took 
early  advantage  of  CRM  to  help 
manage  customer  data  and  com¬ 
plex  regulations. 

41  Building  Patimt  Loyalty.  Health 
care  CRM  attempts  to  cootain 
costs,  build  loyalty  amoi^  patients 
and  provide  bener  service  while 
adhering  to  regulations. 

42  Opinion:  CRM  and  personaliza- 

Etion  apps  are  becoming 
so  simple  to  put  in 
place,  marketers  don't 
need  much  help  from 
IT.  That  makes  Mark 
Hall  wonder.  What  can 
you  do  to  save  your  job? 


Editor's  PfekK  CRM. 

We  choose  the  most 
useful  CRM  articles 
from  Compiiterworld's 
archives,  including 
the  XRM  Readiness 
Quo.”  which  can 
help  you  figure  out 
whether  your  compa¬ 
ny  b  pr^ared  to  start 
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a  CRM  project. 

OQMekLMi4ara 

WailfalCmfcrsNo 

PnnCM.  Dougins 
IVtik.  co-author  of  the 
book  CRM  Ut^tbigged, 
explains  the  pros  and 
CODS  of  verti^  CRM 
packages,  and  why  so 


many  CRM  projects 
Eafl.  in  thb  Q&A. 

OQaWlMSBBM 

Book  E«c«pL  rips 

OB  assessing  a  CRM 
project  diat*s  heading 
for  dbastet,  from  Mr 
Enough  CRM. 
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Muminii'ii  Sun  Changes  Course, 
853,^  Releases  First  NAS  Box 


Wcrand  CoHL  sM  looMng  hr 
Kim  to  amk  coomlMy  aWi 
Da  dmhdn  o<  Opn  (Mn,  a 
■to  to  qiarragira  dMUop  ^pi- 


Drops  its  resistance  to  technolc^  as 
part  of  effort  to  fill  gaps  in  storage  line 


U  ri  aha  lawvtaa  tot  ilgM  to 
■uaOpaaOneaaaarsertotortou- 
toti,acaartongtoabgalatota- 
mato  btoaitaa  Mcttaoll  and  Sun 
Wcauaintomt  toe.  toto  Mt  litoMl 
to  ««i«  and  madt  auUc  hto  OTtoL 
(htntoStorOflGa,San'sooni- 
mareito  ttnton  to  Opan  Otllea.  act 
totoactod  fran  any  hgto  UMaa. 

Nortel  Lowers  Hs 
Revenue  Forecast 

Nartto  Nalnaifa  lid.  atod  R  a- 
pacto  toM-puartor  ravanua  to 
canto  to  ktonn  tot  SM  baton 
toto  tot  enmpany  rapoftod  an  a 
matontoanr  batoa  hr  tot  aacand 
waftor.TltoBiainpton.On(aito- 
baaadaandatatoaamlactodtoal 


hr  2004  adi  ba  to  toa  nddatagto 
dtoHa.  hartal  taM  a  toi  Otoly  haa 
marbtoahaaaaaraaidt 


USAirwamFiiing 

WlHurtBDSinQS 

Ehelraide  Data  Statons  Carp, 
atod  lb  tobd-«iattar  tamtopa  nh 
baaagatoitoyalhctodbyUSMr- 
nayierauptoc.'aSm.ebtodi- 
ntotcyHtop.aiShaaalnng.tann 
cantraet  to  pmrlda  IT  aarvlcaa  to 
USAInaaya.andtoaPlano.1aaaa- 
baaad  aandar  taM  to  a  flhg  to  toa 
U.S.SteuratotandEachanga 
Canmhahn  toat  a  aapacb  to  tat 
aaida  raaamaa  hr  up  la  127  ndl- 

■an  that  ra  aiaad  by  tot  tMbto. 

Short  Takes 

Bn  hat  apgradtd  tana  IMnb- 
Ctrdra  Pa  adto  ddpt  Imn  lU- 
TXMM.  SBaCONOUCTOf)  COUP, 
tom  atom  paanttorda.  eOpHal  car- 
OOcalta  and  tnciyplhn  baya. . . . 
S1MTUS  TECHNOtOOIES  PK.  to 
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t.  8T  LUCAS  MEAKIAN 

SUN  MICROSYSTEMS  Inc. 
tomorrw  plans  to  an* 
nounce  several  storage 
products,  including  its 
j  first  network-attached  storage 
^  (NAS)  box  and  a  midrange 
disk  array  that  uses  virtualiza- 
I  tion  technology  to  pool  stor¬ 
age  capacity  from  its  products 
and  rival  offerings. 

•  Sun  —  which  Gartner  Inc. 
rates  as  a  “promising"  vendor 
in  the  storage  hardware  mar¬ 
ket  —  is  trying  to  fill  gaps  in 
its  product  line  and  catch  up 
to  storage  leaders  such  as 
EMC  Corp.  and  IBM. 

The  foray  into  the  NAS  mar¬ 
ket  is  a  big  departure  for  Sun. 
which  previously  dismissed 
the  technology  but  found  itself 
losing  sales  to  vendors  such  as 
Network  Appliance  Inc.,  said 
Michael  Peterson,  an  analyst 
at  Strategic  Research  Corp.  in 
Santa  Barbara.  Calif  That's 
like  a  religious  epiphany"  for 
Sun.  he  said.  Tbey  fought 
against  NAS  for  a  long  time." 

Mark  Canepa,  executive 
vice  president  of  network 
storage  at  Sun,  disclosed  some 
details  about  the  products  in 
an  interview  last  week,  but 
pricing  wasn't  available. 

A  Growing  Market 

The  entry-level  StorEdgr  5210 
NAS  device,  which  scales  to 
STB  of  capacity,  allows  Sun  to 
dip  its  foes  into  a  growing 
market.  NAS  sales  grew  IS.2% 
from  the  second  quarter  of 
2003  to  the  same  quarter  this 
year,  according  to  IDC.  TV 
market  is  led  by  NeiApp,  with 
a  372%  revenue  share,  followed 
by  EMC.  with  IDC  re¬ 
potted  earlier  this  month. 

MNEMUE 

Sun  B  abo  eqMctHi  to  annoistcG  w 
aHMvwslaraoedwicc  ' 


Chuck  Sears,  manager  of  re¬ 
search  computing  at  Oregon 
State  University's  College  of 
Oceanic  and  Atmospheric  Sci¬ 
ences,  was  among  tlU  first  to 
beta-test  a  StorEdge  5210  NAS. 
with  a  L5TB  capacity.  Scars 
said  he  likes  how  well  it  inte¬ 
grates  with  his  other  Sun 
hardware  and  management 
software. 

“We  to<A  that  thing  out  of 
the  box.  and  without  going 
through  documentation ...  we 
rust  rolled  up  our  sleeves  and 
were  up  and  running  in  15 
minutes,"  he  said.  “It  fit  the 
existing  management  fire¬ 
work  we*ve  had  for  years." 

Sears  added  that  he  likes  the 
built-in  support  for  the  Net¬ 
work  File  System  and  Common 
Internet  Rlc  System,  which  al¬ 
lows  him  to  sec  all  of  his  high- 
end  Unix  and  low-end  Win¬ 
dows  servers  under  one  view.  ' 


Sun  will  also  announce  its 
latest  midrange  storage  array, 
the  StorEdge  6920.  which 
comes  with  high-end  features 
.such  as  the  ability  to  plug  in 
third-party  arrays  and  create  a 
pool  of  storage  that  can  be 
carved  into  1.024  separate  vol¬ 
umes.  each  capable  of  serving 
a  host  system.  The  box  comes 
with  up  to  60TB  of  storage 
capacity,  plus  the  abUity  to 
partition  the  array  into  14 
domains. 

lames  Dobson,  a  systems  ar¬ 
chitect  at  Dartmouth  College 
in  Hanover.  N.H.,  has  been 
beta-testir^  the  array  for  the 
past  six  months.  Dobson  said 
he  tikes  the  flexibility  of  the 
system  but  wants  Sun  to  certi¬ 
fy  Linux  and  other  server 
eratif^  systems  to  run  on  It. 

“It’s  important  for  us  to 
have  a  mix  of  operating  sys¬ 
tems  work  on  it,"  Dobson  said. 
“We  want  to  be  able  to  pool 
resources  and  coimcct  every¬ 
thing  in  the  data  center  to  one 
source.  Otherwise,  you  start 


Be  Cautious  on  Investments 
In  RFID,  URS  &ec  Advises 


■V  canoL  S4.IWA 

United  Parcel  Service  Inc.  is 
not  only  piloting  radio  fre¬ 
quency  identification  technol¬ 
ogy  for  internal  use.  but  it  also 
plans  to  provide  consulting 
and  services  to  help  its  bh 
customers  comply  with  Vll 
RFID  mandates  issued  II J 
by  Wal-Mart  Stores 
Inc,  other  retailers  and  the 
U5.  Depanment  of  Defense. 

In  an  interview  last  week. 

0«vld  Bamw,  a  vice  president 
of  information  services  at 
UPS,  spoke  about  some  of  the 
lessons  the  Atlanta-based 
company  has  learned  about 
RFID.  Excerpts  follow: 

Whal  sort  of  RFV  aarvkM  ii  UPS 
oAariBB  to  lb  ewtomori?  Cus¬ 
tomers  are  coming  to  us  on 


many  fronts,  back  to  that  sim^ 
pie  "slap  and  stick":  “Can  you 
help  us  meet  that  deadtiner 
and  “We  just  need  to  get  this 
done.”  And  there  are  cus¬ 
tomers  in  active  discussions 
with  us  about  "Can  you 
rust  take  it  over  and  do 
it  for  us?”  versus  “Can 
you  come  In  and  con¬ 
sult  and  help  us  do  it  becterr 

What  do  you  tol  (horn  about  what 
wortts  and  what  dooanl  work? 

If  you  go  into  some  of  the 
eariy-edition  readers,  a  lot  of 
these  did  not  have  the  ability 
to  be  updated  by  software.  One 
of  the  early  lessons  learned 
coining  out  of  this  is  to  be  cau¬ 
tious  of  what  you're  investing 
in.  Make  sure  it’s  adaptable 
to  rapidly  changing  scandanls. 


NEW  PRonurTS 
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creating  islands  of  storage." 

It’s  easy  to  create  new  vol¬ 
umes  on  the  StorEdge  6920  or 
change  the  size  of  existing 
ones  on  the  fly,  throu^  either 
a  Web  or  command-line  inter¬ 
face.  be  noted. 

Dobson  added  that  the  abili¬ 
ty  to  attach  third-party  arrays 
—  and  manage  it  all  through 
a  single  interface  —  means 
he  can  lake  advantage  of  less- 
expensive  ATA  disk  drives. 
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If  you're  buying  readers  and 
hardware  and  such,  make 
sure  things  can  be  backward- 
compatible  and  upgradable. 

How  many  of  your  customan  are 
daaWngwHhthomiddtowaroaa- 
poets  of  RFID  i!  this  oarly  staQs? 

'  From  what  we  have  heard  in 
discussions,  a  lot  of  customers 
have  chosen  middleware  and 
bought  that.  1  think  what 
they're  seeing  » that  it’s  rapid¬ 
ly  changit^  So  there’s  an  is¬ 
sue  of  “don’t  gel  too  close  to  it 
because  it’s  going  to  change 
rapidly  over  time."  But  mid¬ 
dleware  is  a  necessity  in 
It's  one  thing  to  buy  the  tag. 

It’s  another  to  encode  the  tag. 
It's  another  to  read  the  tag. 

But  once  you’ve  read  that  tag. 
you  have  to  have  middleware 
to  bring  that  back  to  some  ap¬ 
plication,  because  even  with 
the  DOD  or  with  Wal-Mart 
you  have  to  provide  the  infor¬ 
mation  backwards.  0  4M71 
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Boeing  Readies  RFID  Standards 
For  Release  to  Suppliers  in  2005 


But  aircraft  maker  won’t  mandate  usage 


The  Boeing  Ca  is  on  track  to 
issue  a  set  of  radio  frequency 
ideotincation  specifications  to 
its  suppliers  sometime  during 
the  first  half  of  next  year,  an 
executive  from  the  aircraft 
maker  said  at  the  Frontline  So¬ 
lutions  Conference  and  Expo¬ 
sition  here  last  week. 

The  specifications  will  spell 
out  Boeing’s  technical  stan¬ 
dards  relating  to  issues  such 
as  the  frequency,  memory 
capacity  and  size  of  RFID  tags 
and  labels.  Suppliers  that  ship 
parts  to  Boeing  will  eventually 
need  to  label  their  compo¬ 
nents  with  RFID  tags  that 
meet  the  specifications. 

However,  there  will  be  no 
mandate  fiom  Boeing  requir¬ 
ing  suppliers  to  implement 
RFID  t^ging  light  away,  said 
Daryl  Remily,  deputy  program 
manager  of  the  company’s 
Attto-ID  program. 

Boeing  also  hasn’t  decided 
which  of  the  thousands  of 
parts  that  go  into  making  an 
aircraft  it  wants  to  be  tagged 
first  Remily  said.  That  deci¬ 
sion  will  be  based  on  a  study 
of  several  ftKtors.  including 
the  cost  of  a  part  its  impor¬ 
tance  to  aircraft  operations 
and  how  easy  it  is  to  repair, 
he  added. 

Common  Standards 

Boeing's  plan  to  RFID-enable 
its  supply  chain  is  similar  to 
moves  being  made  by  compa¬ 
nies  such  as  Wal-Mart  Stores 
Inc.  and  Alrims  SAS,  Boeing's 
European  aircraft  rivaL  In 
Boeing  and  Airbus  are  work¬ 
ing  together  to  promote  com¬ 
mon  standards  for  the  use  of 
RFID  within  the  aviation  in¬ 
dustry  [QuickUnk  473S0]. 

One  issue  that  still  needs  to 
be  addressed  is  whether  sup¬ 
pliers  will  get  any  tangible 
paybacks  from  their  RFID 
investments.  "A  lot  of  people 
are  rushing  into  RFID  without 
a  clear  idea  of  what  their  busi¬ 


ness  case  is,"  said  Jeff  Woods, 
an  analyst  at  Gartner  Inc. 

But  companies  in  the  aero¬ 
space  and  defense  industries 
could  benefit  from  the  more 
efficient  marking  and  tracking 
of  parts  that  RFIO  technology 
makes  possible.  Woods  added. 
“The  trick  is  to  make  sure 
that  everyone  benefits  from 
it.  including  the  suppliers." 
be  said. 

Boeing  expects  the  use  of 
RFID  tags  to  lower  Its  receiv¬ 
ing  costs,  improve  its  ability  to 
track  parts  and  reduce  the  risk 
that  unapproved  components 
will  find  their  way  into  planes, 
according  to  Remily.  Potential 
benefits  for  suppliers  include 
lower  inventory  costs  as  well 


as  improved  configuration 
control  and  more  detailed 
repair  histories,  he  said. 

Boeing  and  Aiihus  plan  to 
use  The  Air  Transport  Associ¬ 
ation  of  America  Inc.'s  Spec 
2000  e-business  standard  for 
specifying  how  individual 
RFID  labels  need  to  be  con¬ 
structed  usii^  parts  nun^icrs. 
serial  numbers  and  manufac¬ 
turers'  codes,  Remily  said. 

Boeing  is  also  carrying  out  a 
series  of  tests  to  verify  the  us¬ 
ability  of  RFID  tag^  on  com¬ 
mercial  airplanes.  Eariicr  this 
year,  it  completed  a  90-day 
evaluation  ofl3.5(^MHz  pas¬ 
sive  RFID  labels  that  were  af¬ 
fixed  to  different  parts  of  an 
MD-10  freight  airliner  owned 
by  FedEx  Corp. 

The  10Kbit  labels  were  test- 


RFlO  !agi  miH  >n^>tuve  <t&  lo  tuck 


ed  for  their  potential  to  create 
electromagnetic  interference, 
as  well  as  for  adhesiveness, 
readability  of  data  and  the 
ability  to  write  data  into  them. 
According  to  Remily.  the  la¬ 
bels  showed  DO  detrimental 
environmental  effects  and 
didn't  cause  any  electromag¬ 
netic  problems  during  the  test. 

In  the  next  few  weeks,  simi¬ 


lar  tests  will  be  conducted  on 
RFID  tags  that  will  be  stuck  to 
the  engine  cowling  on  six  Boe¬ 
ing  757  aircraft  belonging  to 
Delta  Air  Lines  Inc..  Remily 
said.  0  49473 
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IBM  Broadens  Suite  of  RRD  Services 


Reaches  out  to 
industrial  and 
midmarket  firms 


BY  JUAN  CANLO«  PENCZ 

IBM  last  week  expanded  the 
consulting  and  implemenu- 
lion  services  that  it  offers  to 
companies  seeking  help  on  in¬ 
stallations  of  radio  frequency 
idcndfication  technolc^. 

Over  the  past  several 
months,  IBM  has  developed 
separate  sets  of  RFID  services 
for  industrial  and  midmarket 
companies.  Services  for  indus¬ 
trial  users  include  initial 
consulting,  business  case  de¬ 
velopment.  technical  proof- 
of-concept  work,  pilot  rollouts 
and  full  system  deployments. 
Services  for  midsize  business¬ 
es  include  project  develop¬ 
ment  workshops,  site  surveys 
and  testing,  IBM  said. 

Eric  G^rielson.  vice  presi¬ 
dent  for  RFID  at  IBM  Global 
Services,  said  companies  are 
exploring  RFID  for  reasons 
beyond  complyii^  with  man¬ 
dates  from  their  trading  part¬ 
ners.  He  noted  that  corporate 


executives  also  hope  to  get 
tangible  benefits  from  the 
technology,  such  as  improved 
business  processes  and  en¬ 
hanced  capabilities  for  collab¬ 
orating  with  customers. 

That’s  the  case  at  H.J.  Heinz 
Ca  Doug  Ostrosky,  Heinz's 
RFID  program  manager,  said 
the  Pittsburgh-based  company 
wants  to  see  how  the  business 
case  for  RFID  will  look  10 
years  out.  including  "where 
we  can  see  some  benefits 
[and]  where  we  can  sec  some 
cost  offeets." 

In  addition,  Heinz  wants  to 
extend  its  use  of  RFID  "from 
‘slap  and  ship.'  which  is  the 
200S  reuiler  mandate,  all  the 
way  out  through  tagging  items 

For  our 
product,  the 
technology  still 
isn't  wheie  we’d 
like  it  to  be. 

DOUe  OSTROSKY.  RFIO  PR06RAM 
MANAGER.  H.J.  HEMZCO 


in  a  production  environment." 
Ostrosky  said. 

For  now.  Heinz  is  focused 
on  getting  a  pilot  project  up 
and  running.  In  June,  it  hired 
IBM  to  help  with  the  project, 
which  is  slated  to  end  by  No¬ 
vember  with  the  installation 
of  RFIO  equipment  at  one  fa¬ 
cility.  Ostrosky  said  IBM  is 
helpif^  with  product  testing, 
drafting  a  business  case  and 
setup  of  the  pilot  facility. 

Vendor  Candor 

So  far.  Ostrosky  has  been  hap¬ 
py  with  IBM's  services,  partic¬ 
ularly  with  the  vendor's  can¬ 
dor  about  the  still-immature 
technology.  "If  they  don't 
know  an  answer,  they  don’t 
make  It  up,"  he  said.  "They 
find  the  right  source,  ask  the 
right  questions  and  come  back 
with  the  most  honest  answer." 

And  some  questions  simply 
don't  have  a  definitive  answer 
in  the  RFID  world  yet.  includ¬ 
ing  the  technology’s  acknowl¬ 
edged  difficulties  with  certain 
materials  and  padtaging.  One 
such  case  is  Heinz's  flagship 
ketchup  (Hoduct  and  its  con¬ 


tainers,  Ostrosky  said.  "We 
have  a  liquid  product  in  a 
sometimes  glass  or  plastic 
container  with  metal  or  plastic 
lids,  and  that  for  some  reason 
doesn't  lend  itself  to  100% 
(RFID)  readability  all  the 
time."  be  said.  "Rir  our  prod¬ 
uct,  the  technology  still  isn't 
where  we'd  like  it  to  be." 

Meanwhile,  midmarket 
companies  such  as  Kayscr- 
Roth  Corp.  in  Greensboro. 
N.C..  don't  want  to  be  left  be¬ 
hind.  Kayscr-Roth  isn’t  one  of 
Wal-Mart  Stores  Inc.’s  100 
largest  suppliers,  so  it  wasn't 
required  by  the  retailer  to 
suit  using  RFID  tags  on  some 
goods  by  January.  Neverthe¬ 
less.  the  apparel  maker  volun¬ 
teered  to  meet  the  deadline. 

Gary  SiegaH.  senior  FMoject 
manager  at  Kayscr-Rc^  said 
the  company  is  working  with 
IBM  on  a  pilot  project  to 
RFID-enable  a  distribution 
center  in  Burlington.  NXiL 
"Our  goal  is  to  use  IBM  to 
help  us  get  this  first  pilot  off 
the  ground  and  then  enable 
the  rest  ourselves  as  we  need 
ta"  be  said.  O  49472 
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Hot  %xrt  PtoUeni 
Gets  Hotter .. . 

. . .  w«h  a  iwniBct  6  02.  e02.m  Whfi  devk*  Mirt 

a  SRiiple  doHip  Ine  into  an  online  access  point  for  an 
UMbit/sec.  Ethernet  wireless  network.  The  WiFlyer 
from  Houston-based  start-up  Always  On  Wireless 
Inc.  will  up  the  ante  in  ease  of  Internet  access  when 
itshipsminkH>ctober.Thc  i  WIHyor  can  be  a  real  asset  by 
$149  device  creates  an  instant  making  it  possible  to  set  up 
wireless  LAN  that  connects  instant  workerouos  in  hotel 


up  ro  U  PC  or  Macintosh 
users.  It  can  use  its  two  Eth- 
emet  ports  to  connect  to  a 
broadband  network  or  its 
RJ-U  connection  to  link  to  an 
ISP  for  Internet  access.  This 
creates  potential  security  is¬ 
sues  for  IT.  though.  If  the  Wi- 
FlycT  »  connected  to  a  corpo¬ 
rate  LAN  inside  the  firewall 
by  some  enterprising  data 
thief  aiui  then  linked  to  the 
outside  world  via  an  unse- 


WiFlyer  can  be  a  real  asset  by 
making  it  possible  to  set  up 
instant  woricgroups  in  hotel 
aiKl  meeting  rooms  and  other 
locations  with  or  without 
broadband  access.  Just  anoth¬ 
er  technology  miracle  you 
need  to  worry  about. 

ReaHimeRFID 
data  capture... 

. . .  Mts  10,000  ewMits  par  sac- 
ond  with  the  Ot^ectStore 
RFID  Accelerator,  set  to  ship 
in  Q4,  from  ObjectStore.  a 
division  of  Progress  Software 


- — .  .a. .  M.  uivumn  or  i^rogress  bottwan 

cured  dial-up  line  (and  which  Corp.  in  Bedford,  Mass.  AI- 
ofyour  dial-up  connections  though  you  might  be  facing 
are  secure?),  it  could  be  a  way  mote  than  data-capture  hur- 
to  bypass  your  network  seen-  dies  in  your  RFID  exploits 


rity  systems.  On  the  other 
hand,  as  a  tool  for  teams  of 
corporate  road  warriors,  the 


I  (sec  “RFID  Adventure,"  page 
SO),  this  toot  is  at  least  based 
on  ObiectStore  technology 
that's  currently  used  for  gath¬ 
ering  data  about  high-speed 
events  in  financial  markets, 
such  as  stock  price  updates. 
The  stored  data  can  ^ 
queried  from  its  obfect  data¬ 
base  via  standard  XML  ex¬ 
pressions.  Pricing  starts  at 
S25k.  aiu]  the  software  runs 
on  Linux,  Solaris  or  Windows 
servers. 


Standard... 


...gwvade- 

1 

ttalopfnent 

tooitthat 

V 

mimic  the 
Notes/Domi- 

^  k. 

9 

no  program¬ 
ming  envi¬ 
ronment  but 

DE'.elril;  r(. 

retain  the 

Javj  ’>oi 

messagii^ 

N'kit'o 

and  caleitdar- 
ing  tools 

HOT  TECHNOLOGY  TRENDS.  NEW  PRODUCT 
NEWS  AND  INDUSTRY  GOSSIP  BY  MARK  HALL 


Systinet  Registry  5.0.  At  a  cost 
of  S2Sk.  the  companies  claim 
you’ll  save  up  to  $50k  in  SOA 
development  costs. 

SSL  traffic  breaches 
IDS/IPS  security... 

. . .  hfMtauaa  the  davica*  can’t 
"see"  the  encrypted  packets. 
That's  one  big  shortcoming  in 
the  false  security  offered  by 
intrusion  detection  and  pre¬ 
vention  systems.  An  IDS/IPS 
tool  reads  orJy  the  "clear 
text"  of  a  packeL  TYafnc  be¬ 
tween  a  server  and  a  browser 
client  that  uses  Secure  Sock¬ 
ets  Layer  technology  for  pro¬ 
tection  just  slides  through. 

You  think  hackers  don't  know 
that?  You  think  pop-up  pom 
purveyors  are  unaware? 

Think  agaia  The  problem  has 
been  that  IDS/IPS  appliances 
had  to  stop  and  decrypt  SSL 
packets  in  order  to  d^ermine 
their  safety,  thus  breaking  the 
flow  and  ending  the  secure 
sessioa  So  they  fast  let  them 
pass.  Until  now.  Breach  Secu¬ 
rity  Inc.  in  Carlsbad,  raiif, 
today  ships  a  Windows  ver- 
I  sion  of  Breach  View,  a  soft- 
'  ware  module  that  runs  on 
your  IDS/IPS  server,  mirrors 
SSL  traffic,  decrypts  it  using 
secured  keys  and  then  passes 
the  clear  text  to  the  IDS/IPS 
software  for  evaluation  —  all 
In  real  time.  If  the  IDS/IPS 
detects  a  problem,  it  can  shut 
down  the  session,  alert  a  sys¬ 
admin  or  do  whatever  it’s 
been  programmed  to  da  SSL 
technology  growth  is  explod- 
according  to  Infonetics 
Research  Inc.  For  some  appli¬ 
cations.  it’s  virtually  H)0%  of 
the  data  traffic.  And  it  makes 
little  sense  to  let  it  go  unmon- 
itored.  as  Breach  Secu¬ 
rity  CEO  John  Payne 
wryly  observes.  "After 
aU,"  be  says,  “your 
most  valuable  traffic  is 
what  you  put  in  SSL  in 
the  first  place.”  Pricing 
starts  at  SSk.  A  Linux 
version  of  Breach  View 
ships  mid-October. 
04Mi6 


need  not  be  moved  off  of 
IBM’s  popular  groupware 
technology.  So  promises  Peer 
Reinhard.  CEO  of  C^ity 
On-Line  Inc.  in  San  Diega  He 
brags  that  it’s  a  snap  to  port 
existing  Notes  apps  to  work 
with  his  100%  Java  program¬ 
ming  tools.  And  you  know 
that  Java-sawy  developers 
outnumber  those  with  Notes 
smarts,  wfaidi  could  be  a 
factor  in  your  decision  on 
whether  to  stay  the  Notes 
course.  (Quality  On-Line’s  ap¬ 
plication  control  system, 
called  Organization  Manager, 
and  its  Integrated  Process 
Control  worieflow  tool  are 
available  this  week.  The  com¬ 
pany's  Incident  Handling 
software  will  ship  next 
month.  Pricing  starts  at  $25k. 

Deal  boosts 
SOA  integration... 

.  ■ .  agill  bttatoM  HIM  ggcvtaDi 

registry  and  management 
technology.  Service-oriented 
architecture  projects  often 
get  hung  up  on  the  link  be- 
I  tween  the  UDDI  registry  of 
available  Web  services  and 
the  tools  necessary  to  manap. 
them.  That  can  hit  IT  budgets 

hard,  claim  Amber  _ 

Point  Inc  in  Oakland. 

Calif.,  and  Systinet  Inc 
in  Cambrid^.  Mass. 

So  the  two  today  are 
jointly  releasing  an 
SOA  starter  pack  that 
provides  a  preintegrat- 
ed  bundle  ^  Amber 
Point  Management 
Foundatioo  42  and 


Inloneiics 
Rese-arch's 
estimate  of 
cortKrate 
SSL  iraffre.  out 
of  total  packets 
•n  2004 


Consider  the  dots  connected.  From  one  coast  to  the  other.  Transportation 
••  Insurance  Brokers  are  serving  clients  more  securely.  Sharing  data  more  quickly. 

•••!•«•••••!!•!  Communicating  more  seamlessly.  And  doing  it  all  for  almost  $2,000  less  a  month, 

*••••*••••••«*  thanks  to  an  IP-VPN  solution  we  designed,  delivered  and  now  manage.  And  the 

*  **•♦*•**••  sti'ong,  reliable  backbone  of  the  SBC  network.  Find  out  more  about  how  we're 

*  helping  TIB  connect  the  dots  at  sbc.com/dots.  GOING  BEYOND  THE  CALL.* 

38C.tf«S8ClogflafidGOt(GS'*OCT>£C4iartf5gi$tewfraefr.afksaS&rKro«ecjeVe't/K  asatr  cs  aTNates  4  'g.*?- 
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PeopleSoft’s  Prospects 
Top  Agenda  at  Show 


I’rO'OmclL'  lo";il  ruliii”  rnisos  (.|iiostions 
jhout  wnclors  futiiro  ;is  users  tsither 


BVMARCL  SONOINI 

A.U.-.MOM  ts.  S 

(  nnru.a  ’IHW  o'tj- 
forciivv  m  s,ui  trail 
eisei»  ihis  Week,  the 
MttOiS are  vendor  is  t  \peeted 
t\»  taec  questions  }r«>ni  users 
about  its  .ibilifv  lo  fend  off 
t>r.ielc  Corp  s  hostile  take»*ver 
bid  and  remain  mdependent. 

The  user  eonterenee  eotnes 
iwii  weeks  after  a  federal 
ludee  turned  down  the  I’ S. 

I  Vp.inmenf  of  lu-ifiees  at 
tempt  to  bim-k  t  traele's  offer 
on  antitnisi  ttmunJslQuiek 
1  ink  4‘iwol,  IVopleSoft 
promptly  issued  a  letter  as- 
-iuriny  eusioriKTs  that  it  still 
has  a  number  of  opi  ions,  and 
whether  iVaele  will  sues'evd 
in  Its  l>-month'old  buyout 
quest  IS  an  open  questit-n 
But  IVople'soft  user  John 
Maii’Kki  Isn't  taking  any 
ehaneev  Maielski  is  deputy 
<  H»tonlu  v'iiv  ofDrIando 
whK'h  runs  fin.ineiaJ  applica 
lions  that  wetv  di-AelopeJby 
l-l)  I  Jw  irdsc\  t  o.  and  are 
iu*w  pan  of  iVopleSdfs 
hiterpriset  Ine  pr.iduet  line. 

Ia»t  Week.  Maielski  .ittetid 
t  Jthei  .'iiiuetion  I'oinj 
. .  ■nfi-rerKv  held  in  t  iri and. .  by 

ibi  ttrule  \ppJie.ili.iiis  I'sers 

•.roiipMiAlt.i  Uevitdhe 
w  lined  III  .isk  t  irai  le  users 
how  they  K\-i  about  iheir  ven 
dor.  It  s  ton  early  to  tell  what 
will  happen.  In-  nouvj.  'but  it 


Correction 

The  fiRl  name  o»  the  U  S.  Distnct 
Court  ijdge  who  ruled  aoainsl 
(he  US.  Oepartmenf  ol  Justice's 
efiort  lo  block  Orade  Corp 's 
takeover  bid  for  PeopieSoft  Inc. 
was  msspeled  m  a  story  m  last 
week's  News  section  r<kidge 
ReiedsAntibustClaens.L^  . 
Oracle  f^esuef^opteSoft*).  The 
judge's  name  s  \tejQhn 


we  bei  onie  part  tif  tirade.  I 
wanieJ  It*  do  (he  legwork." 

Maielski  also  plans  to  .ittond 
<  luineei  ’tUU  ti'  learn  more 
about  Pt-opleSofi’s  payroll  and 
human  resources  applieaiitms 
beeau.se  he's  considering  mi¬ 
grating  away  fnim  the  Intlni- 
uni  Software  products  he  now 
us..'s.  Intmiuni  was  acquired 
by  SSA  (dobal  Tcehm»logies 
Ine.  in  ’tHl2. 

In  addition.  Matelski  s;iid  he 
wants  to  examine  l*eopleS<ifrs 
loosely  contnillfd  network  of 
about  1711  small  u*a*r  groups 


that  .ire  <»rgani/ed  by  indusiry. 
,  product  or  regitni.  Maielski 
'  sits  on  ihe  board  of  Quest  In¬ 
ternational  L'sers  (in>up.  an 
independent  group  of  |,JX  kj- 
wards  users  that  has  had  a  ma¬ 
jor  fjlling-oul  with  IVopleSoft- 

IVopleSofi  jitTieials  declined 
(oe«m}ment  aboul  Drade's 
bid  during  a  briefing  aboiii  a 
human  resimrees  software 
upgrade  that's  due  lo  he  an- 
mmneed  at  Connect  tsee  bo\>. 

Pave  lly/y.  director  of  IT  at 
Bendersiin  IXwelopment  (av 
in  KulTalo.  N.Y..  said  he's  itm- 
eerned  ab<mt  the  possibility  of 
Oracle  buying  PenpleSofi.  '’Of 
OHirse  there  is  fear  and  trepi¬ 
dation  regarding  the  persis¬ 


tent  thought  of a  takeover  by 
'  l  arry  hllison."  Hyzy  said,  re- 
I  tVrring  to  Oracle’s  CHO. 

Henderson  uses  the  W«)rld 
software  that  I'eopleSofi  ac¬ 
quired  w  hen  it  bought  |.P.  l-  J 
wards.  Hy7y  said  the  real  es¬ 
tate  developer  “just  spent  the 
belter  part  of  a  year  gn>ping 
thrt>ugh  the  morass  of  changes 
w  roughi  by  the  I’eopleSofi 
aequisitiiin."  The  thought  of 
dealing  with  another  hiiviiui 
■’is  sobering."  he  added. 

I  On  (he  other  hand.  Peg 
,  Nicholson,  CIO  at  golf  equip¬ 
ment  maker  Aeushnet  Co.  in 
Kiirh.iven,  Mass,.  wa.s  stoic 
about  the  situation. 

"I  don’t  Worry  about  what  I 
can't  change.  n»>r  about  what 
has  not  happened  yet."  said 
Nicholson,  who  runs  Pe«*ple- 
Soft’s  flagship  Fnterprise  ap¬ 
plications.  “t>ne  day.  it  will  be 
resolved,  and  then  we’ll  de¬ 
cide  w  hat  options  we  have." 
-Several  Oracle  users  said  at 
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Oracle  Improves  App  Stability,  Support 

Ullf  likt'rv:  C'U' ri'irjOv  ..r  _ .  ...  . 


Hut  users  s:iy  pjiteh 
insinlluiion  proeess 
eoulil  be  easier 

8VMARCL  SONCINI 

t  tr.iele  t  a.rp.  is  expanding  the 
nijiugemeni  fiineiion.iliiy  of 
teres!  to  users  of  its  business 
•ipplic.itions  .iiiJ  is  working 
with  meniKTsol  the  indepen- 
d.  nt  Or.K  le  Yppheaiions 
L's4Ts(,roup  to  inipnwe  its 
tivhnical  suppnri  .ind  s.i|t 
ware  vleveloptneni  processes. 

rile  software  vendor  lus 
ni.ivie  strides  in  siabill/ing  its 
I  Itusiness  Sioie  applications 
tnd  nuking  them  e.isier  to  in 
siall  .ind  niaimain.  according 
to  OAl  (.members  who.ii- 
tended  the  user  group  s  Con- 
lit et ion  I\tini  JIHU  eimferenee 
here  last  week.  Hut  several  .it 
lendees  said  they  still  find  the 
installation  of  service  pack  up¬ 
dates  containing  bug  fixes  and 
other  modifications  to  be 
iime-ei>nsumingand  try  ing. 

OAL'C  Niard  member  Ar¬ 
thur  Hunt  said  f)raele  prefers 
to  release  large  sets  of  soft¬ 
ware  patches  and  updates  in¬ 


stead  I'f  incremental  fixes. 
Hunt,  w  ho  is  .i  manager  of  IT 
systems  at  Yale  I'niversiiy. 
n»>ted  that  Or.iele’s  approach 
requires.!  lot  ofregri*ssion 
testing  to  easure  th.ii  appliea 
lions  will  continue  to  function 
-iJ'ler  paielu's  are  deployed 

have  tounJ  it  hard,  but 
we  deal  with  i(.”sjid  Hum. 
whose  ri  shop  runs  Drade's 
I"  Husini'ss  Suili- 11.5.8  publie- 
sector  .ippticjiions. 

Nevertheless.  Hunt  .idjed 
that  rolloiiis  ofDr.»de's.ippli- 
»  alions  are  gelling  e.isier  and 
tbai  the  e.Mnp.iny  s  iechnie.il 
supjvori  gener.illy  isgiunl  —  as 
long  .IS  its  iniern.il  ir.iuble- 
sliooiers  have  the  necessary 
dtK'imteiiljiion.  He  also  imied 
that  Or.K  le  s  support  staff  mm 
can  .Kvess  Yale's  applications 
.ind  Jo  Jireei  diagnosins  in¬ 
stead  of  wailing  for  I'J'  work¬ 
ers  to  send  In  event  logs. 

Installing  update's  could  be 
ea-sier  if  the  various  pieces, 
such  as  bug  fixes  or  new  func¬ 
tionality.  were  broken  down 
and  issued  separately,  said  , 

Hrcnt  MiKKly,  .nn  analyst  for  I 

finanebl  and  administrative  ! 

sy.srcnis  at  Salt  Like  City- 


based  Imermountain  Health 
(;.ire  Inc.  'I'he  nonprofit  health 
care  provider  uses  Oracle's 
human  resources  software. 

lo  make  ihesiifiware  main 
lenanee  and  update  process 
easier.  I'l  staffers  at  Rochester 
Institute  of  leehnidogy  in 
New  ^’ork  use  Oracle  Applic.i- 
tii»n.s  M.m.iger.a  tool  that  runs 
scripts  .ind  is  designed  to  help 
users  identily  problems. 

Kimberly  Svnvers.  an  I'l  ser¬ 
vices  manager  at  KIT.  noted 
that  dr.icle’s  human  resources 
and  payroll  applications  ivften 


Integration  Plans 


Oade  said  the  increased  ties 
beiwewi  its  Applications  Manag¬ 
er  and  Grid  Control  tools  will; 

■  Bedeli¥eredaspavtofan 
E-Business  SuNetlLIO 
upgrade  due  withn  60  days. 

•  Let  FT  mMwoera  use  one 
coneolt  to  manage  mumple 
E-Bustness  Surte  systems 

■  Support  undsffyingdeta- 
biMandappiealion 
servers  n  addition  to  the 
business  appBcations 


I  the  OAUG’s  conference  that 
I  they  are  in  favor  of  the  merger. 
I  ’’It  w  ill  give  Oracle  the  ability 
to  be  more  competitive  in  the 
!  indu.stry," said  Pal  Hues..! 

'  projcel  officer  for  the  I.^i.s  \’e- 
^  g;is  city  manager’s  office  and 
I  president  of  the  OAU(..  "We 
see  a  eomplement  between 
I  Oracle's  products  and  iVople- 
'  Soft’s"  049474 


require  large  patches  for  legal 
compliance  reasons.  As  a  re¬ 
sult.  the  school's  IT  managers 
must  plan  ahead  si*  they  have 
enough  manpviwer  for  up¬ 
grades.  But.  she  added,  “at 
least  it  s  predictable.  ” 

Oracle  officials  didn't  re- 
sponvl  it>  requests  for  com¬ 
ment.  Two  weeks  .igo.  the 
company  s;iiJ  it's  increasing 
the  integration  between  Appli- 
e.ntions  Manager  and  a  sepa- 
r.iieiirid  Oonirol  iimvI  for 
managing  systems  with  a  mix 
of  its  soil  ware  and  products 
from  other  vendors  (see  box). 

In  addition.  Oracle's  inter¬ 
nal  eu-stonier  advisory  boards 
.ire  w  orking  with  the  OAIX;  to 
I  get  feedback  on  ways  to  im¬ 
prove  its  .ipplieatinns.  said 
OAlfG  Pix'sideni  Pat  Ilues.a 
piojeel  officer  lor  the  l.as  Ve- 
g;iseity  nunager's  office. 

And  for  three  mon(h.s.  se\  - 
.eral  OAUG  speeial-iniercsi 
groups  luive  been  piloting  a 
pitvcess  that  would  enabk* 
users  to  click  on  a  link  on  Ora¬ 
cle's  Metal.ink  support  Web 
site  to  request  stvftwarc  en¬ 
hancements.  Requests  would 
be  reviewed  by  OAUG  volun¬ 
teers  for  potential  submission 
to  Oracle’s  development  staff. 
Hunt  said.  C  49475 
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PeopleSoft’s  Prospects 
Top  Agenda  at  Show 


Pro-Oracle  legal  ruling  raises  questions 
about  vendor’s  future  as  users  gather 


mr  HARC  L.  SOHOINI 

At  peoplesoft  inc/s 
Connect  2004  con¬ 
ference  in  San  Fran¬ 
cisco  this  week,  the 
software  vendor  is  expected 
to  face  questions  from  users 
about  its  ability  to  fend  off 
Oracle  Cotp.^  hostile  takeover 
bid  and  remain  independent. 

The  user  conference  comes 
two  weeks  after  a  federal 
judge  turned  down  the  U.S. 
Department  of  Justice's  at¬ 
tempt  to  block  Oracle’s  offer 
on  antitrust  grounds  fQuick- 
Unk  493501.  PeopleSoft 
promptly  issued  a  letter  as- 
.suriftg  customers  that  it  still 
has  a  number  of  options,  and 
whether  Oracle  will  succeed 
in  its  IS-month-oid  buyout 
quest  is  an  open  question. 

But  PeopleSoft  user  John 
Matebki  isn't  taking  any 
chances.  Matelski  is  deputy 
CIO  for  the  city  of  Orlando, 
which  runs  financial  applica¬ 
tions  that  were  developed  by 
J.D.  Edwards  &  Ca  and  are 
now  part  of  PeopleSoft’s 
EnterpriseOne  product  line. 

Last  week.  Matelski  attend¬ 
ed  the  Connection  Point  2004 
conference  held  in  Orlando  by 
the  Oracle  Applications  Users 
Group  (OAUG).  He  said  he 
wanted  to  ask  Oracle  users 
how  they  feel  about  their  ven¬ 
dor.  It’s  loo  early  to  tell  what 
will  happen,  he  noted,  “but  if 


ThatarnmofteUSOisM 
CiMrt  |4ili  irfio  nM  igM 
Mi  US.  DigMiart  d  iaiBt'i 
Art  to  Hhcfc  (tell  CanL's 
rtefartaiiiSallne. 


we  become  part  of  Oracle.  I 
wanted  to  do  the  legwork." 

Matelski  also  plans  to  attend 
Connect  2004  to  learn  more 
about  PeopleSoft’s  payroll  and 
human  resources  applications 
because  he’s  considering  mi¬ 
grating  away  from  the  Infini- 
um  Softvore  products  he  now 
uses.  Infuiium  was  acquired 
by  SSA  Global  Technologies 
Inc.  in  2002. 

In  addition,  Matelski  said  he 
wants  to  examine  PeoplcSoft’s 
loosely  controlled  network  of 
about  170  small  user  groups 


that  are  organized  by  industry, 
product  or  region.  Matelski 
sits  on  the  board  of  Quest  In¬ 
ternational  Users  Group,  an 
independent  group  of  J.D.  Ed¬ 
wards  users  that  has  had  a  ma¬ 
jor  falling-out  with  PeopleSoft. 

PeopleSoft  officials  declined 
to  comment  about  Oracle's 
bid  during  a  briefing  about  a 
human  resources  software 
upgrade  that’s  due  to  be  an¬ 
nounced  at  Connect  (see  box). 

Dave  Hyzy.  director  of  IT  at 
Benderson  Development  Co. 
in  Buffalo.  N.Y.,  said  he's  con¬ 
cerned  about  the  possibility  of 
Oracle  buying  PeopleSoft.  “Of 
course  there  is  fear  and  trepi¬ 
dation  regarding  the  persis¬ 


tent  thought  of  a  takeover  by 
Larry  Ellison."  Hyzy  said,  re¬ 
ferring  to  Oracle’s  CEO. 

Benderson  uses  the  World 
software  that  PeopleSoft  ac¬ 
quired  when  it  bought  J  J).  Ed¬ 
wards.  Hyzy  said  the  real  es¬ 
tate  developer  “just  spent  the 
better  part  of  a  year  groping 
through  the  morass  of  changes 
wrought  by  the  PeopleSoft 
acquisition."  The  thought  of 
dealing  with  another  buyout 
“is  sobering."  he  added. 

On  the  other  hand.  Peg 
Nicholson,  CIO  at  golf  equip¬ 
ment  maker  Acushnet  Ca  in 
Fairbaven.  Mass.,  was  stoic 
about  the  situation. 

“1  don’t  worry  about  what  I 
can’t  change,  nor  about  what 
has  not  happened  yet."  said 
Nicholson,  who  runs  People¬ 
Soft’s  flagship  Enterprise  ap¬ 
plications.  “One  day.  it  will  be 
resolved,  and  then  wc’ll  de¬ 
cide  what  options  we  have." 

Several  Oracle  users  said  at 


Oracle  Improves  App  Stability,  Support 


But  users  say  patch 
installation  process 
could  be  easier 


BV  MAfIC  L.  SONOINI 

ORIANOO 

(Oracle  Corp.  is  expanding  the 
management  functionality  of¬ 
fered  to  users  of  its  business 
applications  and  is  working 
with  members  of  the  indepen¬ 
dent  Oracle  Applications 
Users  Group  to  improve  its 
technical  support  and  soft¬ 
ware  development  processes. 

The  software  vendor  has 
made  strides  in  stabilizing  its 
E-Business  Suite  applications 
and  making  them  easier  to  in¬ 
stall  and  maintain,  according 
to  OAUG  members  who  at¬ 
tended  the  user  group’s  Con¬ 
nection  Point  2004  conference 
here  last  week.  But  several  at¬ 
tendees  said  they  still  find  the 
installation  of  service  pack  up¬ 
dates  containing  bug  fixes  and 
other  modificaiimis  to  be 
time-consuming  and  trying. 

OAUG  board  member  Ar¬ 
thur  Hunt  said  Oracle  prefers 
to  release  large  sets  of  soft¬ 
ware  patches  and  updates  in¬ 


stead  of  incremental  fixes. 
Hunt,  who  is  a  manager  of  IT 
systems  at  Yale  University, 
noted  that  Oracle’s  approach 
requires  a  lot  of  regression 
testing  to  ensure  that  applica¬ 
tions  will  continue  to  function 
after  patches  are  deployed. 

"We  have  found  it  hard,  but 
we  deal  with  it."  said  Hum, 
whose  IT  shop  runs  Oracle’s 
E-Business  Suite  11.5.8  public- 
sector  applications. 

Nevertheless,  Hum  added 
that  rollouts  of  Oracle’s  appli¬ 
cations  arc  getting  easier  and 
that  the  company's  technical 
support  generally  is  good  —  as 
long  as  its  internal  trouble¬ 
shooters  have  the  necessary 
documentation.  He  also  noted 
that  Oracle’s  support  staff  now 
can  access  Yale’s  applications 
and  do  direct  diagnostics  in¬ 
stead  of  wailing  for  IT  woik- 
ers  to  K*nd  in  event  logs. 

instaliii^  updates  could  be 
easier  if  the  various  pieces, 
such  as  bug  fixes  or  new  func¬ 
tionality,  were  broken  down 
and  issued  separately,  said 
Brent  Moody,  an  analyst  for 
financial  and  administrative 
systems  at  Salt  Lake  City- 


based  Interroountain  Health 
C^re  Inc  The  nonprofit  heaitf; 
care  provider  uses  Oracle’s 
human  resources  software. 

To  make  the  software  main¬ 
tenance  and  update  process 
easier.  IT  staffers  at  Rochester 
Institute  of  Technology  in 
New  York  use  Oracle  Applica¬ 
tions  Manager,  a  tool  that  runs 
scripts  and  is  designed  to  help 
iLscrs  identify  problems. 

Kimberly  Sowers,  an  IT  ser¬ 
vices  manager  at  RIT.  noted 
that  Oracle's  human  resources 
and  payroll  applications  often 
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New  From  PeopleSoft 
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the  OAUG's  conference  that 
they  arc  in  favor  of  the  merger. 
“It  will  give  Oracle  the  ability 
to  be  more  competitive  in  the 
industry,"  said  Dues,  a 
project  officer  for  the  Las  Ve¬ 
gas  city  manager’s  office  and 
president  of  the  OAUG.  “We 
sec  a  complement  between 
Oracle’s  products  and  People- 
Soft’s."  O  49474 


require  large  patches  for  legal 
compliance  reasons.  As  a  re¬ 
sult.  the  school's  IT  managers 
must  plan  ahead  so  the)*  have 
enough  manpower  for  up¬ 
grades.  But,  she  added,  “at 
least  it’s  predictable." 

Oracle  officials  didn’t  re¬ 
spond  to  requests  for  com¬ 
ment.  Two  weeks  ago,  the 
company  said  it’s  increasing 
the  integration  between  Appli¬ 
cations  Manager  and  a  sepa¬ 
rate  Grid  Control  tool  for 
managing  systems  with  a  mix 
of  its  software  and  products 
from  other  vcrulors  (see  box). 

In  addition.  Oracle’s  inter¬ 
nal  customer  advisory  boards 
I  are  working  with  the  OAUG  to 
get  feedback  on  ways  to  im¬ 
prove  its  applications,  said 
OAUG  President  Pat  Dues,  a 
project  officer  for  the  Las  Ve¬ 
gas  city  manager’s  office. 

And  for  three  months,  sev¬ 
eral  OAUG  ^>ecial-intcrcst 
groups  have  been  piloting  a 
process  that  would  enable 
users  to  click  on  a  link  on  Ora¬ 
cle’s  MetaLink  support  Web 
site  to  request  soft^rc  en¬ 
hancements.  Requests  would 
be  reviewed  by  OAUG  volun¬ 
teers  for  potential  submission 
to  Oracle’s  development  staff. 
Hunt  said.  04M7S 


YOUR  NEXT-GENERATION  NETWORK 
COULD  BE  JUST  A  SWITCH  AWAY 

More  and  more  of  your  desktops,  notetxjoks  and  servers  are  equipped  with  Gigabit  Ethemet-but  are  your  switches  also  ready  lor  the 
increased  demands  of  real-time  business?  Broadcom's  highly  integrated  Gigabit  technology  is  designed  to  speed  the  cost-effective  migration 
from  Fast  Ethernet  to  Gigabit  Ethernet,  end-to-end.  That’s  why  the  top  5  switch  manufacturers  turn  to  Broadcom  when  they  need  high- 
performance,  field-proven  Gigabit  Ethernet  chips'  with  advanced  features  like  the  industry's  only  built-in,  real-time  cable  diagnostics  and 
correction.  So  whether  you’re  upgrading  your  entire  enterprise,  your  remote  offices  or  just  selecf  departments,  Bnradcom*  technology 
inside  your  switches  gives  you  what  you  need  to  complete  your  nerd-generation  network -today. 
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IBM  Opens  Speech 
Recognition  Code 

I6M  announctd  plans  to  rdMtt 
Mmt  of  to  spMch  recopriWon 
dtvitoprMni  tooto  ts  opon-sourco 
co4s.  Tho  company  saM  tt*s  gfv- 
ing  ttw  Apadia  Softwara  Founda* 
tton  control  of  Ms  Rausabio  Dialog 
Cempononte  todwiology.  a  sol  of 
buMmg  blocks  tor  adding  basic 
wica  anabtodfuncttonsteappih 
cations.  BM  is  also  donating  a 
sot  of  apoock  marlup  odKora  to 
Itw  EcMpoo  foundation. 


DHS  Seeks  Real-World 
Data  on  Security  Breaches 

Aol'r*  rT*  4..-.  •  J  .  1  _  .  .  - 


Asks  airporate  IT  to  detail  incidents  so 
researchers  can  test  effectiveness  of  tools 


Oracle  Adds  ISV 
Hosting  Services 

(kida  Cofp.  tauncM  •  Hi  o< 
wflmt  hosting  and  nanigt* 

nMnnicHfarnidonlliiidi- 
Hlv  pradueb  « lop  ol  tiitala- 
lHH  and  aMtetfon  Hnw  Ml- 
ndogir.  On*  Hid  tathpHdMd 
HdiHn  Hndon  «■  coMkiui  to 
Hppoil  Ihdr  ippicallais  fir 
un.  Bui  Oradp  ndiiiiii  m 
nanipHHiil  o(  lb  iBliMn  aid 
ubo  bib  iHponUly  kir  ap- 
pwllop  tfdrd-pbty  conponunb 


Sales.  Profits  Rise 
Owing  Oracle’s  Q1 

(kndunpoibdd?b|Mr-OMr- 
luw  boHH  b  riHnua  bid  •  IM 
mill  gbp  hr  lb  Ural  WbHr. 
•dddi  Hb*  «■«.  3L  Sbn  al  nw 
bdlwm  hbbH  ihp  ipH  tp  7<lli 
to  (S63  uiaiin.  Bb  Hht  b  lb 
hbluHi  ippli  bliiib  hd  bp  BBhi. 
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Short  Takes 
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royoRy  OB  totoro  aitoo  of  aoHM 
wMMPlMtoBdKlL 


ev  DAN  VERTON 

SAN  MATEO  CALIF 

The  U..S.  Department 
of  Homeland  Securi¬ 
ty  plans  to  launch 
several  pilot  projeas 
that  officials  at  the  agency 
hope  will  help  solve  one  of  the 
most  pressing  cybersecurity 
research  problems:  a  lack  of 
ri.'al-worid  data  about  attacks. 

The  cyber  community  has 
suiTered  for  years  from  the 
lack  of  good  data  for  testing.” 
Douglas  Maughan.  security 
program  manager  at  the 
Homeland  Security  Advanced 
Research  Projects  Agency, 
said  last  week  at  a  conference 
sponsored  by  the  U.S.  Secret 
Service.  That’s  why  the  DHS  is 
moving  ahead  rapidly  with  a 
new  program  called  Protected 
Repository  for  Defense  of  In¬ 
frastructure  Against  Cyber 
Threats.  Maug^n  said. 

The  program,  known  infor¬ 
mally  as  Predict,  began  last 
February  and  is  aimed  at  con- 
vincirtg  large  companies  to 
volunteer  data  about  actual  IT 
security  incidents. 

Layers  of  PnKeciian 

Security  researchers  would  be 
able  to  use  the  infomution  to 
test  product  prototypes,  said 
Maughan.  He  noted  that  the 
government  wouldn't  hold  the 
data  and  that  companies  taking 
part  in  the  program  could  have 
their  data  "anonymued.” 

Maughan  said  the  program 
will  rely  on  a  trusted-access 
process  that's  built  around 
written  agreements  with  data 
providers.  The  incident  infor¬ 
mation  will  be  stored  in  a 
data  repository  hosted  by  a 
third-party  company,  arKl  re¬ 
searchers  will  h^  to  apply 
to  take  part  in  the  program. 

Companies  submitting  data 
will  be  able  to  block  ^>eciric 
researchers  from  accessing 
their  in/bnrutioa.  Maughan 
said.  He  added  that  nearly 


two-dozen  organizations  have 
expressed  interest  in  the  pro¬ 
gram.  which  is  due  to  go  live 
after  Jan.  I.  However,  a  final 
budget  for  Predict  still  needs 
to  be  approved. 

The  DHS  is  also  spearhead¬ 
ing  the  creation  of  a  verwior- 
neutral  cybcrseoirity  testbed. 

H  Die  cyber 
community 
has  suffered  for 
years  from  ttie  lack 
of  good  data  for 
testing. 

DOUGLAS  MAUeHAM.  HOMflAND 
SECURITY  ADVANCEO  RESEARCH 
WJJECIS  AGENCY 


known  as  Deter,  that’s  de 
signed  to  help  vendors  develop 
next-generation  security  tech¬ 
nologies.  So  far,  $14  million  has 
been  earmarked  for  the  Deter 
pn^ram.  Maughan  said.  The 
OHS  plans  to  hold  an  industry 
day  on  Sept.  27  to  answer  ques¬ 
tions  about  the  program,  and 
it's  looking  to  award  pilot  proj¬ 
ect  contracts  in  January. 

In  addition,  the  DHS  has 
formed  an  ad  hoc  government 
and  industry  steering  commit¬ 
tee  to  develop  security  pilot 
projects  for  the  Iniemci’s  Do¬ 
main  Name  System.  Its  goal  is 
to  study  specific  threats  and 
vulnerabilities  to  the  DNS,  in¬ 
cluding  denial-of-servicc  at¬ 
tacks,  Web  site  hijackings  and 
a  loss  of  Internet  coherence 
resulting  from  unauthorized 
root  servers  and  top-level  do¬ 
mains.  Pilot  projects  arc  now 
being  planned  for  the  .us  and 
•gov  domains,  Maughan  said. 


Microsoft  Updates  Beta  for 
Visual  Studio  2005  Release 


•v  CAINH.  SLIWA 

Microsoft  Corp.  has  yet  to  re¬ 
lease  a  feature-complete  beta 
version  of  its  upcoming  Visual 
Studio  2005  development  tools. 
Bui  at  last  week’s  \^Uve  con¬ 
ference  bi  Oriando,  it  an¬ 
nounced  a  refresh  of  the  exist- 
uig  beta  release  and 
more  details  about  the  product. 

The  software  vendor  said 
the  Visual  Studio  20QS  Sun- 
dard  Edition  will  add  features 
for  building  Web  and  mobile 
^applications  and  bundle  all  of 
the  programming  langtiages 
that  the  tool  supports  —  Visu¬ 
al  Basic  J4ei.  C#.  J#  and  C**. 

The  standard  edition  of  the 
existing  Visual  Studio  .Net 
2003  release  Is  available  only 
in  language-^)eciric  editions, 
noted  Jay  Roxe,  a  Visual  ^udio 
product  manager  at  Microsoft. 

Microsoft  hasn't  announced 
pricing  for  the  Visual  Studio 
2005  Standard  Edition,  which 


Is  scheduled  to  ship  in  the  first 
half  of  next  yeat  There  will 
also  be  Express.  Professional 
and  Team  System  editions. 

The  update  of  the  first  Visu¬ 
al  Studio  2005  beta  relca.se 
adds  Microsoft's  modeling 
technology,  code-named 
Whitehorse,  and  new  ele¬ 
ments  of  the  company’s  Team 
Foundation  change  manage¬ 
ment  and  version  _ 

control  tools,  a 
Microsoft  spokes¬ 
woman  said. 

“We're  actively 
soliciting  feedback 
on  all  parts  of  the 


Security  Data 


The  DHS  today  is  scheduled 
to  hold  the  first  meeting  of  its 
Border  Gateway  Protocol 
steering  committee,  which  is 
preparing  a  series  of  projects 
to  develop  secure  protocols 
for  the  Internet  routing  infra¬ 
structure.  Maughan  said  the 
current  BGP  architecture 
makes  it  vulnerable  to  human 
error  as  well  as  to  malicious 
attacks  against  routers,  the 
links  between  routers  and  the 
management  stations  that  con¬ 
trol  the  devices.  O  49477 
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products  Roxe  said.  He  added 
that  users  can  log  suggestions 
and  report  software  bugs  on 
the  MSDN  Product  Feedback 
Center  Wlrf)  site. 

Also  last  week.  Microsoft 
announced  a  version  of  ^sual 
Studio  .Net  2003  that  includes 
the  tool's  professional  edition. 


developer  editions  of  Win¬ 
dows  Server  2003  and  SQL 
Server  2000.  and  Visual  Studio 
Tools  for  the  Microsoft  Office 
System.  Roxe  said  the  software 
bundle  is  priced  at  $749,  or 
$549  for  customers  who  arc 
upgrading  from  prior  versions 
of  the  tools. 

Visual  Studio  .Net  Profes¬ 
sional  2003  sells  for  $13)49.  but 
existing  customers  won't  be 
given  a  price  break  to  get  the 
extra  elements  that  come  with 
the  ^>edal  release,  according 
to  Microsoft.  The  bundle  “is 
-  targeted  at  the  peo¬ 
ple  who  haven’t 
upgraded  yet." 

Roxe  said. 

Meta  Group  Inc. 
analyst  Tliomas 

-  Murphy  said  Visual 

Sludk)  .Net  2003  wiU  be 
replaced  by  new  versions  in 
less  than  a  year,  “so  this  is 
kind  of  like  the  end-of-year 
model  blowout  sale.”  He  said 
Microsoft  is  trying  to  get  more 
users  to  upgra^  to  the  prod¬ 
ucts.  building  on  Windows 
Server  2003. 0  49467 
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Insurers  Use  Wireless  Systems 
To  Process  Hurricane  Claims 


Claims  adjusters  go  into  the  field 
armed  with  laptops,  wireless  modems 


BV  THOMAS  HOFFMAM 

INSURERS  increasingly 
arc  relying  on  technolo¬ 
gies  such  as  laptop  PCs 
and  wireless  networks 
to  speed  claims  processing  for 
cheir  policyholders,  including 
homeowners  and  businesses 
in  hurricane-ravaged  areas  of 
Florida. 

For  example,  claims  ad* 
lusters  for  The  Hartford  Fi¬ 
nancial  Services  Group  Inc. 
used  Global  Positioning  Sys¬ 
tem  equipment  to  pinpoint 
the  home  addresses  of  cus¬ 
tomers  in  Florida  who  were 
stranded  without  power  or 
telephone  service  after  Hurri¬ 
canes  Charley  and  Frances 
roared  across  the  state. 

Once  customers  were  locat¬ 
ed,  the  adju.stcrs  entered  in¬ 
formation  about  damage  to 
their  cars  into  Panasonic  CF- 
29  laptops,  along  with  tnsur-  i 
ance  claims  forms  and  digital 
photos  of  the  vehicles,  said 
Martin  Iverson,  vice  president 
of  auto  physical  damage  for 
the  Hartford.  Conn.-based 
insurer.  Wireless  modems 
buQt  into  the  laptops  were 
used  to  transmit  the  informa¬ 
tion  to  one  of  The  Hartford’s 
claims  ofTices. 

The  data  was  sent  via  land 
lines  to  a  company  in  Chicago 
that  helped  prepare  repair 
estimates.  TTic  Hartford  then 
sent  e-mail  messages  with 
approved  repairs  to  the 
adjusters,  who  could  write 
checks  to  customers  on  the 
spot.  The  entire  process  took 
a  matter  of  minutes,  accord¬ 
ing  to  Iverson. 

He  added  that  the  wireless- 
enabled  laptops,  which  The 
Hartford  rolM  out  to  187 
field  appraisers  in  June,  have 
helped  "enhance  our  ability  to 
respond  to  these  events." 

"As  the  speed  and  memory 
capacity  of  laptops  increases 
and  the  costs  haw  dropped. 


insurance  companies  have 
looked  at  them  as  a  pretty 
good  investment  for  their 
adiusters.-  said  John  Eager, 
senior  director  of  claims  at 
the  Property  Casualty  Insur¬ 
ers  Association  of  America  in 
Des  Plaines.  Ill.  “They  can  do 
estimates,  request  ch^ks  — 
they’re  almost  an  office  unto 
themselves.* 

Slate  Farm  Insurance  Cos., 
the  largest  insurer  of  homes  in 
Florida  and  across  the  U.S.. 
has  deployed  about  1.200 
wireless  modems  nationwide 
for  its  claims  adjusters  over 
the  past  eight  months.  And 


Bloomington,  lll.-based  State 
Farm  has  bought  another  1,000 
wireless  cards  for  indepen¬ 
dent  adjusters  contracted  to 
help  out  during  disasters  such 
as  Charley  and  Frances,  said 
I  Mark  Winland,  the  insurer’s 


I  •  'ii-iljliea  al  :i't 

13  moBile  claini*.  offices  >i 


director  of  claims  automation 
and  procedures. 

“The  [wireless]  coverage 
has  become  much  better,  and 
it’s  much  less  cost-prohibitive 
with  carrier  plans  that  offer 
all-you-can-eat  data  transmis¬ 
sion."  Winland 
said.  The  tech¬ 
nology  "has 
allowed  our 
w  tv  claims  repre- 
sentatives  to 
be  more  pro¬ 
ductive  for  our 
customers,"  be 
added. 

Although  he 
was  not  sure 
bow  much 
State  Farm  has 
spent  on  the 


IETF  P^el  Deals  Setback  to 
Microsoft’s  Spam  Proposal 


Patent  questions 
raise  red  flags 
about  Sender  ID 

BY  FAUL  noBCirrs 
An  antispam  technology  pro¬ 
posed  by  Microsoft  Corp.  as 
a  standard  way  of  identifying 
the  senders  of  e-mail  mes¬ 
sages  suffered  a  blow  this 
month  when  a  group  within 
the  Internet  Engineering  lisk 
I  Force  sent  it  back  to  Microsoft 
!  for  more  work. 

Members  of  the  lETFs  Mail 
Transfer  Agent  Authorization 
Records  in  Domain  Name  Sys¬ 
tem  working  group  voted  two 
weeks  ago  not  to  proceed  with 
the  Sender  10  standards  pro¬ 
posal  that  Microsoft  submit¬ 
ted  in  June.  The  group’s  mem¬ 
bers  reached  “a  rou^  consen¬ 
sus"  that  questions  about  in¬ 
tellectual  property  claims 
made  by  Microsoft  could  tor¬ 
pedo  deployment  of  the  tech¬ 
nology.  according  to  a  mes¬ 
sage  posted  to  a  discussion  list 
for  the  group. 


The  vole  by  the  working 
group,  which  is  known  infor¬ 
mally  as  Marid.  followed 
complaints  by  two  top  open- 
source  software  groups,  which 
said  they  wouldn’t  incorporate 
Sender  ID  into  their  products 
because  Microsoft’s  terms  for 
using  the  technology  violate 
the  provisions  of  their  licenses. 

Microsaft  Undaunted 

In  an  e-mail  statement.  Micro¬ 
soft  said  Marid's  vote  "does 
not  mean  Sender  ID  has  been 
rejected."  The  company  added 
that  it  accepts  Marid’s  plan 
to  look  for  other  mechanisms 
for  checking  whether  the  ad- 
<^res5es  used  by  senders  have 
been  spoofed. 

"While  we  would  have  pre¬ 
ferred  a  stifle  technical 
mechanism  as  the  standard, 
we  believe  this  proposal  to 
allow  multiple  scopes  in  the 
protocol  is  a  reasonable  ap¬ 
proach  to  provide  additional 
choice  and  flexibility."  Micro¬ 
soft  said. 

Sender  ID  was  designed  to 


help  users  identify  spammers 
who  are  faking  a  message’s 
originating  address.  The  tech¬ 
nology  works  partly  by  verify¬ 
ing  source  information  con¬ 
tained  in  the  message  "enve¬ 
lope"  against  so-called  sender 
policy  framework  (SPF) 
records  that  list  approved 
e-mail  servers. 

The  SPF  piece  was  devel¬ 
oped  by  Meng  Weng  Wong, 
founder  of  Pobox,  an  e-mail 
service  owned  by  Philadel¬ 
phia-based  IC  Group  Inc.  In 
May.  Microsoft  and  Meng 
agreed  to  create  Sender  ID 
by  merging  SPF  with  the  Mi¬ 
crosoft-developed  Caller  ID 

H  We’re  trying 
to  solve  ttw 
spam  problem 
together.  K  we  can’t 
do that  because 
people  have  short- 
siglited  vision,  then 
that  would  be  a  real 
tragedy. 

MEN0  WEM  WONe. 

fOUNOEft.  POBOX 


wireless  cards.  Winland  sard 
the  insurer  “has  more  than 
seen  the  returns  in  efficiency 
gains  and  returns  to  our 
policyholders." 

In  parts  of  Florida  where 
cellular  towers  were  damaged 
or  destroyed  by  the  storms. 
State  Farm  also  recently  de¬ 
ployed  13  mobile  claims  units 
equipped  with  satellite  dishes. 
Winland  said  that  the  mobile 
units  allow  adjusters  and 
claims  agents  to  connect  to 
regional  State  Farm  offices 
at  n  speeds,  enabling  them 
to  quickly  process  and  trans¬ 
mit  customer  claims. 

Insurance  companies  arc 
also  making  increased  use 
of  catastrophe  modeling  sys¬ 
tems  and  predictive  analytics 
to  help  forecast  the  cost  of  in¬ 
surance  losses  for  particular 
I  regions  after  disasters  occur, 
according  to  Jamie  Bisker. 
an  analyst  at  Needham. 
Mass.-based  TowerGroup. 
049476 


technology,  which  autbenli- 
caies  messages  by  checking  in¬ 
formation  In  the  e-mail  header. 

Meng  said  he  backs  the 
IETF  working  group’s  deci¬ 
sion  because  the  patent  threat 
was  too  big  an  unknown  to 
simply  pass  over.  He  said  he 
had  repeatedly  warned  Micro¬ 
soft  about  the  patent  issue. 

Such  criticisms  registered 
with  Marid  members.  In  a 
message  posted  to  the  group’s 
discussion  list,  Marid  co- 
chairman  Andrew  Newton 
wrote  that  questions  about 
Microsoft’s  unpublished 
patent  claims  in  Sender  ID 
could  not  be  ignored  and  that 
the  group  would  have  to  look 
at  alternatives  to  the  algo¬ 
rithms  offered  by  Microsoft 
The  IETF  could  And  itself 
caught  between  the  ideologi¬ 
cally  opposed  Microsoft  and 
open-source  camps,  Meng 
warned.  “At  the  end  of  the  day. 
we’re  trying  to  solve  the  spam 
problem  together,"  he  said.  "If 
we  can’t  do  that  because  peo¬ 
ple  have  shortsighted  vision, 
then  that  would  be  a  real 
tragedy."  0  49427 

lii^>erts  writes  for  the  IDG 
Newsservice. 
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Commercialization  of  Linux  Helps  Microsoft,  Exec  Says 


BV  CAROL  8LIWA 

Martin  Taytor  recently  marked 
his  one-year  anniversary  as 
Microsoft  Corp.’s  chief  Linux 
strategist.  Taylor,  whose  official 
title  is  general  manager  of  plat¬ 
form  strategy,  spoke  with  Com- 
puterworld  this  month  about 
the  insights  he  has  gained. 

What  are  some  of  the  lessons 
you’ve  learned?  I  initially 
thought  that  people  were  really 
linii^  up  Windows  and  Linux 
side  by  side,  and  they’d  say. 
“Hey,  Linux  gives  us  better 
TCO.”  Actually,  it’s  less  about 
that.  What  they  know  is,  "Hey, 
we  can  save  money  getting  off 
Unix  or  off  of  RISC.  So  the 
question  is,  do  we  go  to  Linux 
or  do  we  go  to  Windows?” 
That’s  where  more  of  the 
comparison  comes  from. 

When  I  talk  to  customers  and 
they  say.  “Hey,  we  can  get  bet¬ 
ter  TCO  with  Linux.”  they’re 
not  always  saying  better  than 
Windows.  They’re  saying  bet¬ 
ter  than  Unix. 

Any  other  surprises?  One  other  I 


thing  that's  come  up  more 
over  the  last  12  months  is  this 
notion  of  indemnification 
[^inst  patent  and  copyright 
claims].  More  and  more  cus¬ 
tomers  are  asking  us,  “Help 
me  understand  what  you  do 
from  an  indenmifica- 
tion  perspective  ver¬ 
sus  HP  or  IBM  or  Red 
Hat  or  NovelL" . . .  And 
I  began  to  say,  “Wow. 

We  really  stand  behind 
our  technology  in  a 
pretty  a^essive  way. 

We  should  make  sure 
that  we  get  credit  for 
that  compared  to  Linux  in 
many  ways."  And  it’s  actually 
been  something  that  tips  the 
scales  sometimes  when  peo¬ 
ple  are  on  the  fence. 

Another  thing  that  shocked 
me  this  year  was  the  commer¬ 
cialization  of  Linux  —  in  a 
good  way.  quite  honestly,  for 
roe . . .  because  it  allows  us  to 
talk  more  in  those  commercial 
terms.  When  you’re  getting 
something  for  free,  [vendors] 
get  a  lot  of  “get  out  of  jail  free" 
cards.  You  [hear  people  say¬ 


ing],  “Oh  weU.  We  didn’t  pay 
for  it.  so  we  shouldn’t  care  too 
much  about  security.  We’U  fix 
it  ourselves.  Oh,  there's  no  re¬ 
gression  testing.  Who  cares? 
We’ll  do  that  ourselves."  But 
once  you  start  writing  a  check. 
1  you  now  have  demands. 

‘  ^  and  rightfully  so. 

What’s  your  take  on  Nov 
ei?  They’re  in  this  in- 
between  period.  They 
want  to  be  platform- 
agnostic  a  little  bit,  be¬ 
cause  really  their  busi¬ 
ness  is  not  NetWare. 
Their  business  is  ZENworics 
and  all  the  stuff  that  runs  on 
top,  and  they  wanted  to  do 
that  on  Windows  and  on  Lin¬ 
ux  and  on  NetWare.  But  over 
time,  they’re  going  to  have  to 
really  get  committed  to  a  plat¬ 
form  and  further  invent  that. 

In  Toronto  in  July.  I  had 
12  top  Novell  resellers  from 
around  the  world  for  about 
four  hours  and  just  listened. 

I  really  have  to  understand 
what’s  happening  in  the  mar¬ 
ketplace.  And  Novell  is  push¬ 


ing  very  hard  obviously  to  get 
them  up  to  speed  on  SUSE 
[Linux] —  I  think  they  are  go¬ 
ing  to  outpace  Red  Hat  as  the 
preferred  Linux  distributioa 

So  m  the  kmg  t«mi.  NoveH  is  your 
oreatest  Unui  cornpebtor?  No 
questioiL  because  they  have 
the  best  point-to-point  stack 
from  the  kernel  through  to  the 
application  layer  and  things 
that  go  on  top  of  it 
Now  the  challenge  will  be 
[that]  they’re  going  to  need  to 
do  stuff  to  differentiate  them¬ 
selves  from  Red  Hat.  which 
then  means  that  they  need  to 
find  ways  to  basically  almost 
have  a  customized  distribu- 
tioiL  And  you  can  end  up  with 
Linux  not  beii^  Linux,  but 
Red  Hat  Unux  being  different 
than  Novell  SUSE  Linux,  De- 
bian  Linux  and  Mandrake,  or 
whatever  the  case  is. 

Micresoft  commissionBd  analyst 
firms  iQ  do  raporls  1o  Mp  you 
“got  out  tlM  facts"  about  Lnux. 
Are  you  sti  doing  that?  If  there 
are  facts  or  things  that  are 


needed,  Tm  going  to  hope  that 
1  can  entice  the  analyst  firms 
to  go  do  it  on  their  own  be¬ 
cause  they  think  it’s  also  im¬ 
portant  But  if  they  don't,  then 
I’ll  commission  it. 

If  you  coidd  twn  hack  tho  dock,  is 
there  anything  you  ivould  do  dfi- 
ferently?  If  I  had  orte  extra  arm 
or  24  hours  in  parallel  I  would 
have  spent  a  bit  more  time  on 
our  Unix  migration  activities, 
because  that’s  where  you  con¬ 
tinue  to  see  good  traction  from 
a  Linux  perspecth-e.  And  we 
have  a  pretty  good  story  to  telL 

Are  customers  stN  compiaMng 
about  liicrooofl’s  Icen^  pofi- 

dw?  1  spend  half  [as  mtich  of] 
my  time  on  licensing  than  I  did 
a  year  ago. . . .  [With]  all  my 
customers  over  the  last  two 
months,  I  mi^  have  discussed 
licensing  three  or  four  times, 
whereas  h  was  a  guaranteed 
conversatkm  a  year 
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Politically  Savvy  IT  Managers 
Key  to  Grid  Project  Success 


^ecutive  Summit  panelists  suggest  early 
intervention  to  head  off  user  resistance 


•V  PATKICK  THiaODCAU 

PHILAOEL^tA 

INFORMATION  tcchnology 
managers  embarking  on 
computing  projects 
couJd  get  some  tips  ftom 
the  candidates  in  this  election 
season.  That's  because  politi¬ 
cal  savvy  is  required  to  build 
support  for  grid  projects, 
which  tend  to  cover  wide  ar¬ 
eas  of  an  enterprise. 

“It’s  like  running  for  office." 
said  Ben  Flock,  vice  president 
of  virtualization  and  applica¬ 
tions  ffameworks  at  rigna 
Corp.,  a  Philadclphia-tesed 
health  insurance  benefits 
company.  “You’re  educating  a 
pretty  broad  community" 
Flock  said  IT  managers 
should  also  heed  the  advice  in 
Sun  Tzu’s  The  Art  of  War. 
“Keep  your  friends  close  and 
your  enemies  closer."  There 
may  be  pepple  who  feel  that 
a  grid  project  will  adversely 
affect  them,  he  said.  “If  you 
don’t  bring  them  to  the  table 
early,  they  can  act  like  a  sniper 
later  in  die  day."  Flock  said. 

Control  Issues 

Resistance  to  grid  projects  can 
stem  from  a  loss  of  “owner¬ 
ship,"  say  grid  experts  and  ear¬ 
ly  adopters.  By  virtualizing, 
pooling  and  centralizing  com¬ 
puting  resources  in  an  enter¬ 
prise,  a  grid  implementation 
can  lead  to  a  business  unit  los¬ 
ing  control  over  its  IT  re¬ 
sources,  and  that  could  fuel 
opposition  to  the  project 
Flock  was  a  panelist  at  a 
Computerworld  IT  Executive 
Summit  held  here  last  week. 
«*ere  IT  managers  shared  ex¬ 
periences  about  their  grid 
projects.  In  Flock’s  case,  Cigna 
is  undertaking  a  server  virtu¬ 
alization  implementation 
across  some  3,000  servers,  and 
that  effort  will  ultimately  lead 
to  grid  computing. 


Implementing  grid  projects 
takes  strong  senior  manage¬ 
ment  suppon.  clear  and  rapid 
deliverables,  and  partnerships 
to  keep  internal  resistance  at 
bay  —  steps  that  apply  gener¬ 
ally  to  all  kinds  of  IT  projects. 
Flock  said. 

Grids  are  different  in  some 


AT  A  GLANCE 

Grid  computing 
projects  must  have 
the  following: 


V.Ti  ■  - 


Continued  from  page  J 

J.P.  Morgan 

IBM  spokesman  James 
Sciales  said  IBM  will  still 
provide  hardware,  software 
and  services  to  several  J.P. 
Morgan  business  units,  in¬ 
cluding  its  investment  bank¬ 
ing  operations  and  its  retail 
bankii^  treasury  and  securi¬ 
ties  services. 

He  added  that  IBM  still  had 
been  investing  in  building  up 
the  resources  it  needed  to  sup¬ 
port  J.P.  Morgan’s  systems.  As 
a  result.  IBM  doesn’t  expect 
the  contract  cancellation  to 
negatively  affect  its  financial 
results  this  year.  Sciales  de¬ 
clined  to  comment  on  whether 
IBM  will  receive  a  termination 
fee  from  |.P.  Morgan. 

When  IBM  announced  the 
.  JP.  Morgan  contract,  it  bailed 
I  the  deal  as  a  groundbreaking 


key  respects,  though.  The  goal 
is  to  treat  all  IT  resources  dy¬ 
namically  and  allow  enterpris¬ 
es  to  shift  computing  power 
and  data  to  wherever  they’re 
needed.  Grids  are  enabled  by  a 
variety  of  technologies,  such 
as  virtualization,  blades  and 
storage-area  networks. 

However,  the  technologies 
that  support  grid  approaches 
aren’t  mature  yet,  ai^  early 
adopters  face  challen^^s. 
Among  them  is  the  prospect 
of  being  joined  at  the  hip  with 
a  vendor,  because  the  lack  of 
mature  standards  means  users 
will  likely  have  to  use  some 
proprietary  technologies. 

“I  wouldn’t  be  presuming 
that  there  are  global  standards 
that  are  tyii^  vendor  products 
in  the  grid  space,"  said  Jim 
Gray,  engineering  manager  at 
Iron  Mountain  Inc.,  a  Boston- 
based  data-protectioD  firm. 
Gray  said  be  will  ask  vendors 
about  their  standards  plans, 
but  at  this  early  stage,  he  isn't 
expecting  them  to  adhere  to 


development  standards. 

There  are  several  ongoing 
grid  standards  efforts,  includ¬ 
ing  a  vendor  group  called  the 
Enterprise  Grid  Alliance.  That 
organization  has  the  backing 
of  big  players  such  as  Oracle 
.Corp.,  Sun  Microsystems  Inc. 
and  Hewlett-Packard  Co.,  but 
IBM  and  Microsoft  Corp.  are 
missing. 

Competitive  Strategies 

Competition  among  vendors 
may  also  keep  them  from 
readily  adopting  grid  stan¬ 
dards,  panelists  ^reed. 

As  soon  as  a  vendor  is  hired, 
the  grid  project  team  mem¬ 
bers  should  start  getting  in- 
house  training  on  its  system, 
said  Gregory  Rhoney.  program 
director  at  San  Diego-based 
defense  contractor  Titan 
Corp.,  which  is  helping  the 
US.  Special  Operations  Com¬ 
mand  develop  a  grid  system. 
“Make  (training]  a  condition 
of  your  contract."  he  said.  , 

Rhoney  said  customers  I 


agreement  that  would  illus¬ 
trate  the  value  of  its  "on-de¬ 
mand"  strategy  for  sutHtpg 
flexibility  to  corporate  IT  in¬ 
frastructures. 

Changing  Needs 

ZapThink  LlC  analyst  Ronald 
Schmelzer  predicted  at  the 
time  that  the  deal  would  be 
IBM’s  "poster  child"  for  the 
on-demand  approach.  "Poster 
children  have  pluses  and  mi¬ 
nuses,"  Schmelzer  said  last 
week  after  the  cancellation 
was  announced.  He  added 


that  IBM  will  likely  avoid  any 
major  damage  to  its  reputa¬ 
tion  as  an  outsourcing  vendor 
If  the  termination  is  seen  by 
other  users  as  being  driven 
by  changing  needs  at  J.P. 
Morgan. 

There  are  a  lot  of  compa¬ 
nies  that  do  big  outsourcing 
deals,  but  IBM  is  really  in  a 
league  of  its  own."  Schmelzer 
said.  The  whole  on-demand 
computing  plan  is  unique  to 
them.  Whether  or  not  it’s  a 
long-term  success  depends  on 
their  ability  to  execute  and 


j  We  bdieve  managing 
'  our  own  technology 
■nfrastructure  is  best  for 
the  long-term  growth  and 
success  of  our  cominny. 


should  have  people  who  know 
the  vendor's  system  “inside 
and  out ...  so  if  something 
happens  in  the  future,  you  can 
protect  yoursel£" 

The  team  managing  a  grid 
project  should  be  diverse  but 
also  have  some  deep  special¬ 
izations.  panelists  said.  Cigna 
uses  a  "vimiai  team  model"  in 
which  employees  arc  pulled 
from  a  variety  of  areas,  de¬ 
pending  on  the  project.  A  grid 
project  may  include  people 
from  engineering,  project 
man^;emeni.  operations  and 
architecture  di^iplines.  "The 
trick  is  to  balance  all  those 
things,"  Flock  said.  O  49470 


demonstrate  returns  for  their 
customers." 

Bill  Bradway,  an  analyst  at 
Financial  Insets  in  Framing¬ 
ham.  Mass.,  said  the  changing- 
needs  explanation  for  the  con¬ 
tract  cancellation  is  believable 
in  this  case.  Bank  One  brought 
J  J*.  Morgan  a  much  larger 
retail-bankii^  presence,  and 
Adams  is  known  for  his  do-it- 
yourself  ethos,  Bradway  said. 

Bradway  doesn't  expect  the 
insourcing  move  to  sf^  a 
rip-and-replace  program  with¬ 
in  J.P.  Morgan's  IT  depart¬ 
ment.  “At  the  end  of  the  day, 
what’s  happening  is  that  4.000 
people  will  turn  in  their  IBM 
badges  and  get  JJ>  Morgan 
ones,"  he  said.  "Many  of  the 
systems  they're  working  on 
will  continue  to  be  the  same 
ones."  049478 
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Sun  Makes  IT  Services  an 
Integral  Part  of  Its  Offerings 


eV  PATRICK  THIBODEAU 

Sun  Microsystems  Inc.  is 
broadening  its  IT  services  of¬ 
ferings  in  an  attempt  to  be¬ 
come  more  competitive  with 
IBM  and  Hewlett- 
Packard  Co.  in  that 
area  {QuickLink 
43645).  The  company 
said  its  services  rev¬ 
enue  grew  7%  year 
over  year  and  topped 
the  $1  billion  mark  for 
the  first  time  in  its 
fourth  quarter,  which 
ended  June  30.  Marissa  Peter¬ 
son,  who  cook  over  as  execu¬ 
tive  vice  president  of  Sun  Ser¬ 
vices  in  March,  spoke  with 
Computerworld  about  the 
unit’s  strategies  and  plans. 

What’s  driving  the  growth  that 
you’re  seeing?  We’ve  worked 
very  closely  with  our  sales 
force  so  that  they  think  of  ser¬ 
vices  more  and  more  as  an 
integral  part  of  the  sale  versus 
just  an  add-on.  We’re  really 
focused  on  sellii^  solutions. 


and  services  is  kind  of  the 
wrapper  that  puts  it  all  togeth¬ 
er.  There’s  also  phenomenal 
market  growth  in  managpH 
services. 

Unlike  some  of  its  rivals, 
doesn’t  Sun  focus  on  ser¬ 
vices  that  support  only  its 
own  hardware  platfonns? 

For  [our  new  Sun  Pre¬ 
ventive  Services  offer¬ 
ing).  that’s  true.  But  for 
our  overall  support  and 
services  capability,  we 
have  been  offering  more  and 
more  the  ability  to  support 
third-party  equipment. 

Are  your  managed  services  users 
primarify  Sun  shops,  though?  I 

would  still  say  primarily  that’s 
the  case.  But  the  year-over¬ 
year  growth  of  third-party 
support  has  gone  up  25%.  I  do 
think  hetert^eneous  support 
is  the  game-chai^er  in  this 
industry.  But  what’s  going  to 
differentiate  us  uniquely  is  to 
really  support  Sun  equipment 


better  than  anyone  else.  So 
that  will  be  our  lead  strategy, 
surrounded  by  heterogeneous 
capability. 

in  terms  of  supporting  vertical 
indusMes.  where  do  you  feel 
you're  strong  or  week?  We  re 

very  focused  on  financial  ser¬ 
vices,  telecommunications, 
government  —  those  are  prob¬ 
ably  our  top  three.  And  we 
focus  on  education  as  well. 
Certainly,  we  want  to  go  after 
manufacturing  more.  We  have 
tried  to  get  into  retail  and 
health  care,  as  well  as  life  sci¬ 
ences.  but  we’ve  prioritized 
where  we  think  we  are  the 
most  capable  and  have  the 
partnerships  that  we  can 
build  upon. 

What  are  your  plans  over  the  next 
12  months?  My  focus  has  been 
on  delivering  new  services 
and  solutions.  For  instance, 
subscription  models  for  IT 
services  —  you’ll  see  us  offer 
that  more  and  more.  We’re  of¬ 
fering  a  storage  utility,  which 
is  a  pay-fbr-use  model  In  our 
offerings  today,  we  provide 
the  capability  via  our  partners, 
where  we  actually  put  equip¬ 


ment  m  our  partner’s  site  and 
our  partner  meters  and  bills 
the  customer  for  the  specific 
utility.  Going  forward,  you’ll 
see  us  offer  different  types  of 
compute  utilities. 

Will  your  partners  continue  to 


provide  these  utility  services? 
We'll  do  it  via  our  partners 
primarily,  but  well  be  willing 
to  host  it  ourselves  on  behalf 
of  our  partners.  We’re  in  the 
process  of  actually  building 
some  hosting  capabilities  so 
we  can  do  that  O  49401 


AStep  foward  Interoperabiity 

Sun  Mlcni^istems  and  Micro-  One  conference  h  late  June 


soft  Corp.  next  month  plan  to 
provide  more  detais  about  the 
joint  development  work  they’re 
doing  to  their  products 

more  irtteroperaUe. 

The  amouncement  wf  fo¬ 
cus  on  nteroperabity  in  the 
Web  services  and  directory 
servioe5areas.saidMarkMc- 
Qaia  wee  preadent  of  soft¬ 
ware  marketing  at  Sun.  during 
a  meeting  with  reporters  and 
analysts  at  Sun’s  offices  m 
Butngton.  Mass. 

Thetworh^aresfightlybe- 
hindscheduleonlhejntBmper- 
abity  work,  which  they  agreed 
to  as  pert  of  a  broad  legal  set¬ 
tlement  that  was  signed  in  Apnl 
(QuickUnk  45957).  Sixi  CEO 
Scott  McMealy  said  the  Jave- 


thatthecompenieswouidde- 
tai  their  milial  colaborairve 
work  during  the  sunmer. 

^’re  goiig  to  miss  that 
summer  target' a  Sun  spokes¬ 
woman  acknowledged  fast 
week. 'As  happers  when  large 
organizalioRs  are  wortong  to¬ 
gether.  things  take  a  bi  tonger.* 
Bulwhenthearmaunce- 
ment  is  made.  Sun  and  Micro¬ 
soft  wi  be  able  to  damonstrale 
at  least  some  of  the  planned 
nteroperabllty  between  heir 
respective  technologcs.  the 
spohasiMman  added. 

*We  wart  to  make  sure 
that  it's  a  sold  amouncemere.' 
she  said. 

-  Jons  E¥ets  and  Tom  KmH 
OGfikmSenKe 
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IT  Key  to  Patient  Care 
At  Hi^^ch  Hospital 

Heart  facilin  puts  PCs  in  e\'er\'  axim,  , 
uses  GE  softw-are  to  automate  records 


BV  TODD  B.  WEISS 

Y  BUiLDiiw  one  of  the 
world's  first  all-digital 
cardiac  care  i^iiities. 
St.  Francis  Heart  Hos¬ 
pital  in  TUlsa,  Okla..  has  made 
it  possible  for  doctors  to  access 
patient  data  from  anywhere  iri- 
sidc  the  hospital,  at  home  or 
ofT-site  via  a  wireless  network. 

The  hospital  which  opened 
in  April,  was  built  with  IT  sys¬ 
tems  in  mind  every  step  of  the 
way.  according  to  St.  Francis 
officials.  The  52-bed  facility 
has  installed  70  servers  and 
more  than  275  PCs.  and  each 
patient  room  is  equipped  with 
a  PC  and  Internet  access.  In 
addition,  the  hospital  has  12TB 
of  storage  available  for  data 
and  medical  images. 

Sl  Francb  announced  the 
details  of  its  IT  setup  last 
week  in  coniunction  with 
General  Electric  Ca’s  GE 
Healthcare  unit,  which  sup¬ 
plied  the  clinical  applications 
that  arc  being  used  to  inte¬ 
grate  patient  information  into 
electronic  medical  records 
and  automate  the  process  of 
prescribing  medications. 

The  hospital's  goal  is  (ess 
paperw-ork  and  better  patient 
care.  “By  using  ail  this  tech¬ 
nology.  we're  giving  doctors 
and  clinicians  their  time  back 
so  they  can  have  more  human 
interaction  [with  their  pa- 
tients].“  said  Robert  Schad,  an 
IT  team  leader  at  Sc.  Francis. 

Patient  Care  Concerns 

Hospital  ofTiciais  expect  the 
paperless  approach  to  help 
them  address  several  caue- 
related  problems,  including 
concerns  that  doctors  don’t 
spend  enough  time  with  pa¬ 
tients  and  that  illegible  hand¬ 
writing  on  charts  or  prescrip¬ 
tion  orders  could  lead  to  med¬ 
ical  errors. 

“We  had  an  opportunity  as  a 
brand-new  ^Uity  to  partner 


I  with  GE  and  face  both  of  these 
concerns."  said  St.  Francis  CEO 
Bob  Dolan.  He  added  that  doc¬ 
tors  have  said  they  can  make 
their  rounds  30%  faster  than 
they  can  at  facilities  with  less 
of  an  emphasis  on  IT. 

GE  Healthcare's  Cemricity 
Clinical  Information  System 
software  also  enables  the 
hospital  to  update  medical 
records  with  lab  test  results 
about  30  minutes  after  the 
tests  arc  taken.  Sl  Francis 
said.  In  addition,  the  admis¬ 
sions  process  is  fully  automat¬ 
ed  and  can  typically  be  com¬ 
pleted  W'ithin  10  minutes. 

Most  of  the  systems  in¬ 
stalled  at  the  hospital  run 


BV  LINDA  ROSENCRANCe 

Beth  Israel  Deaconess  Medical 
Center,  a  busy  hospital  in 
Boston,  needed  a  way  to  more 
efficiently  track  the  location 
of  costly  medical  equipment 
—  and  to  keep  tabs  on  patients 
and  its  mcdic^  staff. 

But  the  hospital  also 
wanted  to  leverage  an 
ongoing  investment  in 
wireless  networks  to 
avoid  any  technology 
redundaiuy. 

So  John  Halamka. 

CIO  at  parent  compa¬ 
ny  CareGroup  Inc.,  is 
turning  to  a  new  asset 
tracking  and  visibility 
system  built  around 
wireless  LANs  and  ra¬ 
dio  frequency  identification 
tags.  The  system,  which  was 
announced  last  week  by  Pan- 
Go  Networks  Inc.,  uses  an  in- 
ftastnicture  of 802.U  wireless 
access  points  as  its  reader  net¬ 
work.  That  eliminates  the 
need  for  single-use  RFID  read- 


Windows  2000  or  2003.  al¬ 
though  some  Linux  boxes  are 
also  in  use.  A  wireless  net¬ 
work  extends  throughout  the 
facility,  and  Sl.  Francis  also 
has  more  than  500.000  feet  of 
cabling  for  its  wired  networks. 

Brandon  Savage,  GE  Health¬ 
care’s  general  manager  of 
enterprise  solutions  for  clini¬ 
cal  information  technologies, 
said  the  vendor  also  equipped 
Indiana  Heart  Hospital  in  Indi¬ 
anapolis  with  its  digital  health 
care  systems  technology. 

Dr.  Thomas  Handler,  a  radi¬ 
ologist  who  works  as  an  ana¬ 
lyst  at  Gartner  Inc.,  said  the 
health  care  industry  has  been 
trying  to  move  to  more  fiilly 
automated  clinical  systents  for 
years.  But  it  has  been  hard  to 
do  because  of  high  costs  and 


ers,  according  to  PanGo. 

The  Framingham.  Mass.- 
based  vendor  said  its  PanGo 
Locator  system  provides  map- 
based  views  of  assets  that 
users  can  drill  down  into  on  a 
floor-by-floor  basis.  Users  can 
get  detailed  data  about 
individual  assets  by 
clicking  on  their  map 
images,  and  the  sys¬ 
tem  logs  and  stores  ac¬ 
tivity  data  for  report¬ 
ing  and  analysis. 

PanGo  is  offering  a 
version  of  its  technol¬ 
ogy  tailored  for  hospi¬ 
tals.  and  Beth  Israel  is 
one  of  the  pilot  sites. 
The  two-campus  hos¬ 
pital  “has  probably 
millions  and  millions  of  dol¬ 
lars  of  mission-critical  equip¬ 
ment,"  Halamka  said.  But  be¬ 
tween  S300.000  and  $400,000 
worth  of  the  equipment  disap¬ 
pears  each  year,  “because  in 
the  course  of  normal  care,  it 
gets  misplaced."  be  added. 


the  complexity  of  disparate 
systems,  he  added. 

This  is  a  wonderful  proof 
of  concept."  Handler  said.  He 
noted,  though,  that  the  spe¬ 
cialized  focus  on  cardiac  care 
at  St.  Francis  and  Indiana 
Heart  means  they  have  more 
money  to  invest  in  such  proj¬ 
ects  than  other  hospitals  do. 

In  addition,  one  potential 


“What  RFID  docs,  in  an  active 
way.  is  to  say  right  now  where 
our  equipment  is,” 

Beth  Israel  is  currently 
working  on  campuswide 
WLAN  deployments  to  pro¬ 
vide  wireless  voicc-over-IP 
and  location-based  communi¬ 
cations  services,  as  well  as  im¬ 
proved  data  connectivity,  said 
Halamka.  The  hospital  bought 
WLAN  technology  from  Cisco 
Systems  Inc.,  which  is  working 
with  PanGo  to  deliver  a  turn¬ 
key  system. 

installation  of  PanGo  Loca¬ 
tor  is  due  to  start  later  this 
month  at  Beth  Israel  said 
Richard  Barnwell.  PanGo's 
chief  technology  officer.  The 
hospital  initially  will  use  the 
geolocator  technology  in  its 
emergency  room  and  cardiac 
care  unit  to  track  mobile  med¬ 
ical  equipment.  Barnwell  said 
He  added  that  the  system 
will  also  monitor  the  locations 
of  medical  staffers  to  help  hos¬ 
pital  officials  analyze  work- 
flow.  During  the  pilot  phase, 
people  will  be  given  pagerlike 
devices  containing  the  RFID 
tags.  Later,  the  tags  could  be 
embedded  in  wristbaruls  or 


shortcoming  with  GE  Health¬ 
care’s  offerir^  is  that  the  ven¬ 
dor  obtained  much  of  its  tech¬ 
nology  through  acquisitions 
and  then  created  interfaces  to 
allow  the  different  systems  to 
work  together.  “From  a  CIO 
perspective,  that’s  a  fairly 
complicated  system  they’ve 
installed  in  that  place."  Hand¬ 
ler  said.  O  49409 


attached  to  neck  cords. 

Halamka  said  Beth  Israel 
also  plans  to  use  PanGo’s 
technology  to  track  the  where¬ 
abouts  of  patients.  As  part  of 
the  project,  the  hospital  will 
integrate  patient  location 
data  with  its  electronic  white¬ 
board.  a  50-in.  plasma  screen 
that  shows  detailed  informa¬ 
tion  about  each  patient  — 
although  only  initials  are  used 
to  protect  privacy. 

"Now.  we’U  not  only  be  able 
to  show  that  Mrs.  Smith  has 
had  this  lab  result  and  is  going 
to  be  admitted  to  cardiology 
but  (bat  the  patient  is  ourent- 
ly  in  radiology  receiving  a 
test.”  Halamka  said.  "There’s  a 
lot  of  workflow  optimization 
Just  making  your  emergence- 
room  work  better  because  you 
can  coordinate  all  the  care¬ 
givers  and  all  the  patients.” 

Halamka  said  Beth  Israel's 
investment  in  WLAN  infra¬ 
structure  was  a  big  f^tor  in 
its  decision  to  choose  PanGo’s 
system.  "1  can  say  the  wireless 
network  is  already  there,  and 
now  it  does  something  else.” 
he  said.  “Thafs  a  huge  win  for 
me  as  a  CIO.”  049436 


Boston  Hospital  Will  Track 
Assets  With  Wireless  System 
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Pentagon’s  Logistics  Agency 
Begins  $290M  IT  Consolidation 


HP  to  streamline 
^sterns,  centralize 
infiastructure 

BV  LINDA  R08ENCRANCE 

The  U.S.  Defense  Logistics 
Agency  (DLA)  last  week  said  it 
has  awarded  Hevrfett-Packard 
Co.  a  10-year,  $290  million  con¬ 
tract  to  install  and  manage  a 
unified  IT  infrastructure  that 
will  consolidate  the  agency’s 
data  centers,  servers,  applica¬ 
tions  and  storage  devices. 

The  Enterprise  Data  Center 
(EDO  program  is  designed  to 
create  a  streamlined  IT  setup 
agencywide  for  the  Fort  Bel- 
voir,  Va. -based  DLA,  which 
provides  supply  chain  support 
as  well  as  technical  and  logis¬ 
tics  services  to  the  U.S.  mili¬ 
tary,  several  federal  civilian 
agencies  and  some  foreign 
governments  and  intenution- 
al  organizations. 

Mark  Philip,  the  agency’s 
EDC  pn^ram  manager,  said 


I  the  IT  consolidation  initiative 
I  is  aimed  at  reducing  technolo¬ 
gy  costs  and  modernizing  the 
DLA's  systems  so  its  units  can 
operate  more  efllciently  and 
better  serve  their  customers. 

“We  looked  at  our  [IT}  op¬ 
erations.  and  we  found  there 
were  areas  we  could  make 
improvements  in."  Philip  ex¬ 
plained.  "We  weren’t  always 
optimizing  and  modemlzii^ 
the  infrastructure  across  the 
enterprise." 

Paring  Down 

The  EDC  project  will  pare 
about  2300  existing  servers 
down  to  400  machines,  Philip 
said.  Most  applications  and 
storage  devices  will  also  be 
consolidated  and  migrated 
with  the  servers  to  new  cen¬ 
tralized  IT  facilities  that  HP 
will  set  up  and  run  for  the 
DLA.  "To  do  that  will  save  a 
lot  of  money,"  Philip  noted. 

In  addition,  the  consolida¬ 
tion  project  is  expected  to  en¬ 


able  the  DLA  to  more  effec¬ 
tively  implement  information 
assurance  programs  and  ex¬ 
pand  its  disaster  recovery  and 
business  continuity  capabili¬ 
ties,  according  to  Philip. 

The  agency's  contract  with 
HP  covers  five  years  upfront 
and  includes  o(>tions  for  five 
one-year  extensions.  HP  will 
do  the  IT  consolidation  and 
migration  work  in  stages  in 


an  attempt  to  avoid  disrupting 
the  DLA’s  business  operations. 

The  first  migration  will  in¬ 
volve  systems  at  the  DLA's 
headquarters  and  several  field 
operations,  including  the 
agency’s  Defense  Energj’  Sup¬ 
port  Center  and  Defense  Lo¬ 
gistics  Information  Service. 
Consolidated  systems  for 
those  units  are  expected  to  be 
up  and  running  within  seven 
months,  the  DLA  said,  adding 
that  the  entire  IT  infrastruc¬ 
ture  makeover  is  due  to  be 
completed  by  August  2006. 

The  DLA  is  also  working  to 
modernize  its  business  sys- 


r^r 


IS  eipected  to  help  OLA  units  iihe  the  Defense 
Distribution  Center  in  New  Cumberland.  Pa.,  operate  more  efficiently. 


H  We  looked  at 
our  [IT]  opera¬ 
tions,  and  we  found 
there  were  areas 
we  could  make 
improvements  in. 

MARK  PHILIP.  EDC  PROGRAM  MAN 

ACER.  DEFENSE  LOGISTICS  AGENCY 

terns  through  a  $S(X>  million 
project  that  began  four  years 
ago  and  inclu<^  the  installa¬ 
tion  of  ERP,  supply  chain  and 
procurement  applications 
from  vendors  such  as  SAP  AG 
and  Manugistics  Group  loc. 

DLA  officials  said  a  “con¬ 
cept  demonstration"  phase 
that  began  in  mid-2(X>2  now 
involves  250,000  supply  items 
and  nearly  1,200  registered 
end  users.  The  agency  plans  to 
begin  full-scale  deployment  of 
the  applications  in  January, 
pendii^  approval  from  the 
secretary  of  Defeitse’s  office. 

By  September  2006.  the  mod¬ 
ernized  systems  are  expected 
to  support  management  of 
S3  million  items  by  more  than 
5,000  users.  O  49431 
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VIRGINIA  ROBBINS 


A  Moving  Experience 


I  'M  A  SENTIMENTAL  FOOL.  As  We  pack  up  to 
move  to  our  spacious  new  digs  a  few  blocks 
away,  it  seems  every  item  I  lovingly  place  in 
the  moving  crates  opens  another  floodgate  of 
fond  memories.  I  need  to  pack  everything 
very  carefully  because  my  colleagues  took  away 
my  packing  materials.  (I  think  they’re  just  jealous 
that  they  can’t  play  “She  Bangs”  with  a  piece  of 
bubble  wrap.) 


Here’s  the  “Speedo" 
nameplate  that  adorned 
my  cubicle  wall  through¬ 
out  my  tenure  as  News 
editor.  The  nidcoame 
stuck  after  I  issued  the 
disturbing  warning  early 
on  that  if  our  writers 
didn’t  nie  their  stories 
on  time  and  up  to  our 
exceedingly  high  stan¬ 
dards,  I  would  come 
into  the  office  wearing 
a  Speeda  It’s  amazing 
what  the  threat  of  seeing 
a  middle-aged  guy  in  a  bathing  suit 
will  do  for  newsroom  productivity. 
Can  you  say  ’’Magazine  of  the  Year*? 

What’s  this?  Ah  —  the  transcript  of 
my  April  2003  interview  with  Novell 
CEO  lack  Messman.  That  one  was 
nothii^  if  not  entertaining.  In  the  in- 


I  have  an  idea,  and  I’m 
absolutely  serious  here: 
Let’s  auction  it  off  to  the 
highest  bidder,  with  100% 
of  the  proceeds  going  to 
The  ALS  Association 
(www.alsa.org).  That’s 
ALS  as  in  amyotrophic 
lateral  sclerosis,  better 
known  as  Lou  (Oilrig's 
disease,  an  advanced  form 
of  which  has  afflicted  my 
dad.  who’s  a  really  good 
guy.  I  know  he’d  appre¬ 
ciate  it.  So  e-mail  your  bid 
to  me  by  Oct.  1.  I’ll  announce  the  top 
bid  in  the  Oct.  11  issue,  and  the  win¬ 
ning  bidder  will  get  the  book  upon 
providing  me  with  proof  of  a  con¬ 
tribution  to  the  ALS  Association  in 
the  amount  of  the  bid.  Deal? 


That  reminds  me  of  something  I 
just  have  to  share.  You  know  what 
kind  of  book  Gates  writes.  But  did 
you  ever  wonder  what  he  reads?  On 
that  boat  to  Hong  Kong.  I  noticed  that 
he  was  carrying  a  paperback,  and  be¬ 
ing  the  nosy  sort.  I  strained  to  see  the 
title.  It  was  a  book  of  tips  for  playing 
better  bridge.  I  asked  him  about  it, 
and  he  said  he  was  going  to  his  friend 
Warren  Buffett’s  house  that  weekend 
to  play  bridge  and  was  preppii^.  Can 
you  imagine?  If  I  was  a  billionaire, 
bridge  would  be  about  the  billionth 
thing  down  on  my  list  of  things  to  do. 

Speaking  of  to-do  lists,  I  know 
you  have  about  a  billion  things  on 
yours,  too.  But  I  would  still  encour¬ 
age  you  to  budget  a  few  minutes  to 
check  out  our  CRM  Knowledge  Cen¬ 
ter.  which  b^ns  on  page  33.  Our 
unique  coverage  of  how  CRM  chal¬ 
lenges  differ  across  seven  vertical  in¬ 
dustries  is  a  compelling  read,  regard¬ 
less  of  the  status  of  your  customer- 
facing  systems.  Check  it  out  and  let 
executive  editor  Mitch  Betts,  our 
Knowledge  Center  shepherd,  know 
what  you  think,  at  mitch_betts@ 
computerworld.com.  O  49M2 


lerview.  Messman  called  an 
“immanire  operating  system"  that 
needed  Novell’s  steady  hand  and 
hitheriy  guidance  to  help  it  grow  up 
into  a  robust,  enterprise-ready  OS. 
Within  a  few  days  he’d  received  so 
much  hate  mail  from  Linux  enthusi¬ 
asts  (I  woitld  say  “Linux  loonies."  but 
there’s  no  sense  in  generating  more 
hate  mail)  that  be  had  to  issue  an 
oops-what-I-real/y-meanc-to-say  apol¬ 
ogy  (QuickLink  37902].  What  a  boot. 

Well  what  do  you  know?  I  was 
wondering  where  this  was.  Here’s 
my  signed  copy  of  Bill  (dates’  book 
Business  @  the  Speed  o/77>o«g/tf.  I 
got  It  after  having  hooked  up  with 
the  Big  Guy  for  an  interview  on  a 
chartered  boat  from  Guangzhou  to 
Hong  Kong  a  while  back. 


I  Want  to  Be 
Valued?  Think 
Small  Business 

Lunch  was  fabulous. 
One  of  the  top  salesmen 
at  my  former  company 
had  called  to  ask  me  to  lunch 
because  he  wanted  me  to  meet 
the  CFO  at  his  new  company. 

I  was  thinking  we’d  have  a 
couple  of  salads  and,  if  I  was 
lucky,  dessert.  Instead,  he  had 
brought  me  to  one  of  the  best 
restaurants  in  town. 

The  carrot  soup  was  incredible,  the 
crab  awesome.  The  conversation  was 
even  better. 

My  former  colleague  is  now  working 
for  a  well-established,  privately  held 
and  publicly  regulated  company  that’s 
expanding  into  new 
markets.  ’The  com¬ 
pany  has  about  100 
employees  in  12  loca¬ 
tions.  annual  rev¬ 
enue  of  just  under 
SS  million  and  an 
IT  staff  of  two. 

To  support  the 
new  market  expan¬ 
sion,  the  company 
began  automating 
Its  key  processes. 

Five  major  auto¬ 
mation  projects  had 
been  completed  in 
the  past  30  months.  While  some  work, 
such  as  devclc^ing  a  new  Web  site  and 
e-eomroerce  fonctions.  had  been  out¬ 
sourced,  most  things  were  implement¬ 
ed  and  supported  by  the  two  IT 
staffers.  This  wasn’t  a  case  of  a  disap¬ 
pearing  IT  department.  This  small 
company  had  leveraged  an  extremely 
useful  and  focused  team  to  add  strate¬ 
gic  and  tactkal  value.  Every  part  of  the 
business  had  charged  since  the  new 
systems  had  been  implemented,  and  in 
the  CFO’s  mind,  they  had  changed  for 
the  better.  Processing  costs  were  lower, 
services  were  improved,  old  customers 
were  happier,  and.  in  general,  the  new 
stuff  woriced  most  of  the  time. 

Until  that  last  comment.  1  was  won¬ 
dering  why  the  salesman  had  invited 
me  to  lunch.  1  was  so  impressed  with 
their  efficiency,  I  felt  like  I  should  pick 
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up  the  tab.  But  the  CFO  needed  my  help. 
The  two  IT  staHers  couldn't  keep  the 
systems  running  reliably;  uptime  was 
OK.  but  not  good  enough  for  new  cus¬ 
tomers.  The  salesman  was  losing  sales. 

The  CFO  knew  this,  and  as  we  start¬ 
ed  talking  about  his  team  members  and 
their  challenges,  I  could  tell  that  he 
was  still  really  proud  of  what  they  had 
accomplished.  He  truly  valued  their 
contributions,  but  he  was  struggling  to 
avoid  the  expense  of  additional  staff. 
The  CFO  didn’t  want  to  spend  any 
more  than  be  absolutely  had  to.  As  he 
talked  about  what  he  could  expect  in 
the  company's  next  round  of  regulato¬ 
ry  reviews,  it  was  clear  he  suspected 
that  his  team  wouldn't  receive  satisfac¬ 
tory  ratings.  And  we  all  agreed  that  the 
two  IT  guys  had  put  so  much  of  their 
lives  into  launching  the  new  systems 
that  any  material  findings  would  make 
them  feel  like  failures. 

So  wc  talked  about  low-cost  ideas 
that  can  increase  uptime  and  reduce  the 
support  burden  on  a  small  IT  team.  We 
discussed  bow  to  foster  and  d^loy  de¬ 
partmental  power  users,  bow  to  launch 
brown-bag  training  sessions  for  staffers 
and  bow  to  increase  a  small  company's 
influeoce  by  volunteering  for  vendor 
testing  or  assisting  with  user  group 
conferences.  We  discussed  longer- 
term  strategies,  including  industry  aver¬ 
ages  for  staffing  and  expense  ratios  and 
for  capital  investments.  We  ended 
lunch,  and  the  CFO  left  thinking  of 
ideas  about  how  to  help  his  team,  in¬ 
cluding  possibly  adding  another  staffer. 

So  while  others  are  talking  about 
disappearing  IT  departments,  whether 
rr  matters  or  off^re  outsourcing, 
here  is  a  company  that  is  growing  and 
cares  about  its  IT  staff.  Next  time 
you’re  looking  for  a  fob.  think  small 
businesses.  You'll  need  to  be  ready  to 
work  hard,  but  your  contributions  will 
be  noticed  and,  in  most  cases,  deeply 
valued  O  48360 


MICHAEL  GARTENBERG 

iPaq  6315 
Connects  in 
Many  Ways 

Last  month.  I  dis¬ 
cussed  the  importance 
of  ubiquitous  connec¬ 
tivity  in  portable  devices. 
Hewlett-Packard  delivers  on 


this  vision  of  uberconnec- 
tivity  with  the  iPaq  6315, 
currently  available  from 
T-Mobile.  The  6315  is 
unique  in  that  it  provides 
no  fewer  than  four  methods 
of  connectiviry:  infrared. 

Bluetooth,  Wi-Fi  and  GSM/ 

GPRS.  No  other  device  cur¬ 
rently  offers  road  warriors 
such  a  collection  of  inte¬ 
grated  mobile  services. 

From  a  functional  perspec¬ 
tive,  the  6315  is  a  primary 
data  device  with  telephony 
capabilities  that  offers  max¬ 
imum  flexibility  for  connec¬ 
tivity.  If  voice  is  your  only 
critical  function,  you 
be  better  served  with  a 
small  cell  phone  combined 
with  a  Bluetooth-enabled 
PDA  or  a  separate  data- 
centric  device  like  a  BlackBerry  or  an 
all-in-one  unit  like  a  TVeo  or  Sidekick. 

The  iPaq  6315  is  smaller  than  it  looks 
in  photos  and  much  smaller  than  other 
Pot^t  PC  phone  devices.  It's  not  as 
small  as  the  TVeo  600  but  has  a  much 
more  usable  display.  Voice  reception 
is  excellent.  I  was  able  to  get  a  signal 
even  in  the  basement  of  my  home. 

But  the  key  to  this  unit  isn't  telepho¬ 
ny:  it's  everything  else  combined  Us¬ 
ing  Bluetooth.  1  was  able  to  mitigate 
the  feet  that  the  unit  is  more  of  a  PDA 
than  a  phone  by  using  a  Bluetooth 


headset,  and  I  was  a].so  able 
to  ditch  the  connectivity 
cradle  by  syncing  wireless¬ 
ly  with  my  laptop. 

On  the  road  1  used  a 
Navman  Bluetooth  GPS 
unit  linked  to  the  6315  to 
keep  me  on  course,  and 
a  full-size,  collapsible 
Bluetooth  keyboard  from 
Think  Out^e  for  writing 
lengthy  e-mails  and  report 
drafts. 

With  Wi-Fi.  I  could  con¬ 
nect  at  fest  speeds  when 
near  a  hot  spot  and  then 
use  the  skn^  GPRS  data 
connection  for  e-mail,  the 
Web  and  instant  messaging 
when  I  wasn't  near  a  hot 
spot.  The  unit  automatical¬ 
ly  detects  the  fastest  con¬ 
nection  and  uses  that  As  a 
bonus,  I  could  also  use  Wi-Fi  to  fnak<» 
calls  via  a  soft-phone  application  tied 
to  a  voice-over-IP  account  and 
and  receive  them  anytime  I  was  within 
reach  of  a  Wi-Fi  signal 
It's  this  level  of  communications 
flexibility  that  makes  the  63)5  ■Aine 
Add  in  push  e-mail  from  T-Mobile  (or 
the  ability  to  tie  in  with  corporate  Ex¬ 
change  systems)  and  the  inclusion  of 
instant  messaging  clients  for  all  the 
mafor  services,  and  you  have  the  most 
flexible  communications  platform  on 
tbemaiket. 


The  Pocket  PC  operating  system 
from  Microsoft  is  both  a  plus  and  a 
minus.  The  multitasking  flexibility', 
which  isn't  cturenily  available  on  the 
Palm  OS  platform,  meant  I  could  be 
writing  a  weblt^  posting  while  simul¬ 
taneously  downloading  RSS  feeds, 
updating  e-mail  and  k^ing  a  VoIP 
application  running  in  t^  back¬ 
ground  Thai  also  means  it’s  a  more 
complex  device,  and  there  were  times 
when  one  of  the  wireless  Subsystems 
shut  down,  necessitating  a  warm  re¬ 
boot.  There  were  a  few  other  small 
glitches:  The  unit  claims  to  support 
the  Bluetooth  HandsFree  profile,  but  I 
couldn’t  get  it  to  work  wi^  the  Blue¬ 
tooth  bxuit  into  my  car.  I  also  couldn't 
sync  over  Wi-Fi  (although  others 
claim  success  in  doing  so). 

The  6315  is  a  breakthrough,  thanks  m 
seamless  connectivity  and  clever  engi¬ 
neering.  1  suq>ect  that  by  the  end  of 
the  year,  there  will  be  some  contenders 
against  the  6315  from  a  variety  of  ven¬ 
dors.  At  the  moment,  the  ability  to 
have  mulrita^ktng  functionality,  seam¬ 
less  netwoik  switching,  great  coverage 
and  four  different  connectivity  solu¬ 
tions  in  one  device  ts  very  compelling, 
and  the  6315  has  this  market  all  to  it¬ 
self.  Cl  4S3f7 
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Damage  Control 

T  HE  MTICLE-ACXO  Syllabus’ 
IQukkUnk  47B88j  contained 
macoirale  mfomiation  regarding 
T?w  Bank  of  New  fork's  backup 
capabilities  for  critical  operations 
Our  company  is  often  cited  as  a 
leadermbusmessconttnuityplan- 
ning.fnfacLinreviewingourpre- 
9/11  plans.  IBM  concluded  that  we 
were  able  to ’conduct  one  of  the 
most  extensive,  successful  busi¬ 
ness  recovenas  ever  undertaken.’ 
Our  success  at  the  time  was  the  re¬ 
sult  of  detailed  deasler  plans  that 
were  carefully  folowed- 
Since  9/11  we  have  buM  new  fa- 
dtbes  and  expanded  existing  oper¬ 
ations  centers  and  luly  configured 
hot  sries  m  multiple  states  Oiv  geo¬ 
graphic  diversification  now  provides 
immedialebackupcapabitylorcnt- 
icd  operations  through  a  number  of 
key  facAbes  inning  1.000  mdes. 
Our  data  centers  are  separated 


frombusnesseverabonsanddedt- 
catedsoMytoprocessmgfunc- 
tnns  All  ertbeal  equipment  compo¬ 
nents  are  redundant  Weusere- 
rnole  iBai-tm  nwTormg  of  pro¬ 
grams  and  data.  Our  phlosopby 
cals  for ‘zero  data  kes’andconb- 
nmtyol  communications  and  busi¬ 
ness  operations  in  our  recovery 
processes  We  have  diversity  in  our 
telecommunications  cectiils  for 
confinuous  connectivtty  to  our 
clients  We  abo  hM  dual  dfveise 
Internet  connectoons  at  our  magx 
data  centers  and  access  to  aitema- 
tive  lelecomniunicalions  providers 
JeffrayKuhn 
Senior  vice  president, 
business  contirmty  planning. 
The  Bank  of  New  York  Ca 


sight  ink)  the  business  mteHigence 
world  m  his  column  *0(0)1)111  BT 
fOuicidjnk  469021. 1  would  go  so  far 
as  saying  ihA  f  pe^  can  mad  only 
one  amde  about  6L  this  should  be  1 
SaqibMauoof 
fil  manager,  Esuranoe, 

San  Francisco 


Bl  Believer 

iDOrTMANEAHAanotCOngml- 
uttimg  people  lor  8  job  weR  done, 
but  Mark  Hall  provided  amazing  in- 


Hands  Off 

The  STOtnrUser Interfaces  The 
Next  Generation' (QucMjnk 
48484}  brings  to  nwid  a  passage 
from  Douglas  Adams’ book  The 
HdcMker'sGudeiotheQataxy.ln 
iLhedescnbeshowihe'usermier- 
iace*  for  the  radio  had  progressed 
tar  beyond  the ’okf-tashionBd*  but¬ 
tons  and  levers.  Now  al  you  had  to 
dowaswaveyouhandmthedirec- 
bon  of  the  rack}  to  change  chan¬ 
nels.  The  msuM  was  tha  you  had  to 
sit  mlunalngty  sti  if  you  wanted  to 
continue  to  Islen  to  one  station.  I 
would  hope  the  folQ  (vorking  on 


new  compuler  rterfaces  keep  that 
n  mnd.  A  gesbfe-contraled  ATM 
exMd  easiy  leaiA  m  unmiended  ac¬ 
tions  Even  better,  who  a  goeig  to 
be  first  to  patent  a  hand  gesture? 
fou  doni  want  one  gesture  to  set 
off  hM  or  moie  home  apphances 
orappficalions 
KMHWick 

C/iitx  system  adminmnztor, 
Austin 

COMPUTERWOftLO  wekornes 
cxxnments  from  its  readers  Letters 
wA  be  edaed  for  breWy  and  danty. 
They  idxxikt  be  addressed  to 
jafneEcHeleltersedior.Com- 
puterworU.  PO  Box  9171.  ISpe^ 
Street  FranwK^iam.  Mass.  01701 
Fax  (508)  879-4843  E-m^: 
fetters^computerwadd  com 
kdude  an  address  and  phone 
number  for  fnmedBte  venhcalion 

OFormoKteflenanffcBemd 
other  to(K&  go  id 


SAS,  the  leader  in  business  intelligence  software,  asks... 


Could  your  IT  dollars  be  better  spent? 


N 


SERVICE  LEVEL  managcment 

RESOURCE  UAIWCEMENT 

CHARGE 

VALUE  UANACEUEN’ 


No  business  wants  to  believe  it’s  wasting  ptecious  IT  dollats.  So  if  executives  and  co-woikets  grumble 
about  IT  service,  and  you’re  convinced  those  services  could  be  put  to  bener  use,  let  SAS  help. 
With  SAS'  IT  Management  solutions,  you  can  measure,  manage,  understand  and  communicate  the 
quality  of  evety  IT  service  more  accurately.  You'll  know  precisely  how  your  business  is  using  IT 
resources.  Ensure  maximum  performance  and  response  times.  Predict  strategic  and  financial  trends. 
And  clearly  visualize  the  value  of  IT  from  business,  revenue  and  profit  perspectives.  Visit  our  Web 
site  to  learn  more  and  read  our  Iree  white  paper.  Align  IT  with  Business  and  Budget  SinUegies 
Or  call  us  toll  fiix  I  866  731  1364. 


www.sas.com/spent 


Aumr  Nicholas  Carr  and  top  business  inBuencers  tain  in  a  lively  discussion  about  his  controversial  baA,  Does  II  Matter? 
Check  out  our  Vveb  site  tor  more  on  this  informative,  on-demand  Web  seminar. 
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The  Power  to  Know. 


Ssaa 
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TECHNOLOGY 


1  lie  leehnolouN 
is  jiisi  Ix'uiiiiiiiie 
lounin  eroiinJ  (or 

ripplicnlions  such 
;isc  hooksunJ 
in  sioix' sipnnpc. 
hut  bronhor 
uses  h;i\c  \c[  to 
;ippc;ir. 


FOR  YEARS.  ANALYSTS  have 
been  predicting  that  elec¬ 
tronic  paper,  or  e-paper, 
would  set  the  st^  for  the 
paperiess  office.  Until  recently,  however,  develop¬ 
ing  a  ps^r  substitute  was  not  an  easy  proposition. 
And  even  today,  business  applications  of  the  tech- 
nolc^  reaaain  limited. 

E-paper  is  a  thin,  flexible  polymer  sheet  with  the 
look  of  paper.  But  e-paper  is  a  bit  thicker  than  reg¬ 
ular  paper  and  weighs  more  because  it  contains 
microscopic  electronic  ink  particles  sandwiched 
between  two  polymer  sheets  that  display  as  either 
white  or  black  in  response  to  an  electrical  charge. 

E-paper  is  reflective,  like  real  paper,  so  it  can  be 
read  in  any  li^t.  It  uses  no  backlighting,  as  LCDs 
do,  nor  does  it  use  an  emissive  light  source,  as  with 
a  CRT  monitor,  says  Tom  Ashley,  director  of  Piwtal 
Resources  USA,  a  Lexington,  Ky.-based  research 
firm  that  follows  the  digital  printing  market. 

E-paper  is  also  bi-stable,  which  means  that  the 
display  uses  power  only  to  change  the  content. 

Once  the  image  is  created,  it  stays  there,  even  when 
the  power  is  turned  oflf.  Ashley  says. 

“Those  two  main  characteristics  are  what  give  a 
paperlike  display  its  good  qualities  —  it’s  comfort¬ 
able  to  read  because  it’s  reflective,  and  the  bi-stable 
aspect  allows  you  to  have  low  power  and  light, 
we^t  batteries  so  the  whole  device  could  be  ex-  j 
tremely  thin  and  lightweight,”  Ashley  says.  j 

Several  companies  are  developing  commercial  I 
applications  of  e-paper  technology.  SmartPaper.  an 
e-paper  technolt^  from  Arm  Aiirar,  Mich. -based 
Gyricon  LLC,  first  appeared  in  an  e-paper  pricing-  I 


sign  system  for  retail  stores  in  May.  The  sign  is  con¬ 
trolled  by  software  that  links  it  wirelessly  to  in¬ 
store  pricing  daubases,  says  Robert  Sprague,  chief 
technology  officer  at  Gyricon,  a  vriioUy  owned  sub¬ 
sidiary  of  Xerox  Coip. 

“Well  replace  the  paper  pricing  sign*  on  each 
retail  rack  in  retail  stores  with  an  electrcmic  paper 
sign,  which  is  wirelessly  networked  to  the  store’s 
central  computer  so  the  price  on  the  sign  can  be 
updated  instantly.  And  it’s  always  the  same  as  the 
price  in  the  point-of-sale  database,”  Sprague  says. 

“This  gives  IT  departments  a  way  to  control 
a  lot  of  signage  and  information  around  an  entire 
building  or  campus  from  one  centralized  comput- 


Gyricon  s  e-paper  price  signs  receive  updated  pricing 
information  wirelessly  for  display  on  retail  store  sfielves. 


TAKING  STOCK  OF 
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Inside  E-paper 


|i^i«  ,  (|*v  ite«*  Ih.  look  ind  M  o(  pip«.  *  eailim  mtoow^ 
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mo  biiic  todoKloBl  Iho  oondon  000  io  #10  amo.  bat  oodi  Mioi  1  olgMIo  dmoiom  wroodi. 


ing  point,*  Sprague  adds. 

Gyricoo  ato  offers  SmartPaper  in  a 
line  of  dynamic  message  boards,  which 
it  sells  to  hotels,  conference  centers 
and  large  campuses,  he  says.  The  mes¬ 
sage  boards  sell  for  $1,295  each. 

The  E-book 

In  April,  Cambridge.  Mass.-based  E  Ink 
Corp„  Amsterdam-based  Royal  I%iltps 
Electronics  and  Tokyo-based  Sony 
Corp.  together  launched  their  ffrst- 
generadon  e-ink  display  in  Sony’s 
e-book  reader,  the  Librie,  in  Japan.  The 
e-book  incorporates  the  e-ink  technol- 
used  in  e-paper  into  a  traditional 
display. 

E  Ink’s  electronic  ink  is  a  proprietary 
material  that  is  processed  into  a  film 
fmr  integradon  into  electronic  displays. 

*For  the  Librie  product,  we  mako 
our  e-ink  as  a  Him.  a  sheet  of  plasdc 
that  gets  sold  to  Philips  Electronics. 
Philips  makes  the  display,  and  then 
the  display  is  sold  to  Sony  and  put 
into  an  electronic  reader.*  says  Darren 
Bischoff,  E  Ink’s  marketing  manager. 
*We’re  part  of  an  enabling  component 
for  maldng  that  a  paperlike  reading 
experience.* 

Currently,  users  can  download  and 
store  SOO  books  of  about  250  pages 
each  to  the  Librie  e-book  reader,  which 


is  similar  in  size  and  design  to  a  paper- 
hack.  The  cost  of  the  device  is  approxi¬ 
mately  $370,  but  Sony  has  no  plans  to 
release  it  outside  of  Japan. 

Both  E  Ink  and  Gyricon  have  devel¬ 
oped  electronic  shelf  labels  that  can 
change  prices  automatically.  E  Ink’s 
labels  are  wirelessly  tied  into  the 
store’s  pricing  system,  Bischoff  says. 

E  Ink’s  ultimate  viston  is  to  develop 
a  next-generation  smart  paper,  which 


E  Ink  calls  RadioPaper,  in  the  next  sev¬ 
eral  years.  “Now  we  can  make  some¬ 
thing  that  visually  looks  like  paper, 
but  we  want  something  that  feels  like 
paper  as  weU,"  Bischoff  says. 

E  Ink’s  current  e-paper  looks  like 
paper  in  terms  of  hi^  contrast  and  a 
reflective  sur&ce  that  can  be  read  at 
any  angle,  he  says. 

“The  majority  of  the  development 
to  create  something  that  is  closer  to 
the  feel  of  paper  has  to  happen  with 
materials  and  developments  other 
than  the  electronic  ink  component.* 
Bischoff  says. 

To  that  end,  E  Ink  is  working  with 
Wiilips’  research  department  to  create 
thin,  flexible,  tollable  e-paper. 

E  Ink  predicts  that  displays  made 
with  its  e-ink  technology  will  eventu¬ 
ally  appear  on  electronic  devices  rang, 
ing  from  handheld  computers  to  cellu¬ 
lar  phones,  calculators,  digital  watches 
and  car  dashboards. 

Fujitsu  Laboratories  Ltd  in  Kana- 
gawa.  Japan,  is  developing  a  paperUke 
display  that  it  says  could  be  used  with 
a  terminal  for  reading  business  docu¬ 
ments  downloaded  from  a  PC,  says 
^kesman  Isao  Hirana  The  paper 
should  be  in  production  by  2006,  and 
Fujitsu  is  bullish  on  its  prospects.  *We 
expect  that  this  invention  would  pave 


the  way  to  a  paperless  office  and  re¬ 
duce  paper  consumption,*  Hirano  says. 

Although  e-paper  technology  is  pro¬ 
gressing.  there  are  some  downsides. 
One  is  that  e-paper  lacks  color,  says 
Pivotal's  Ashley.  And  while  e-ink  has 
been  incorporated  into  displays  such 
as  the  Librie,  the  bi-stable  e-paper 
t^hnology  can’t  support  full-motion 
video  because  updating  or  rewriting 
a  page  takes  too  loi^,  according  to 
Kenneth  Werner,  editor  of  J/^rma- 
tion  Display  Magazine,  published  by 
the  San  Jose-based  Society  for  Infor¬ 
mation  Display. 

Today,  e-paper  Is  still  looking  for  a 
killer  applicatioD.  While  a  few  retailers 
are  experimenting  with  e-paper  pric¬ 
ing  labels,  the  technology  has  yet  to 
catch  on.  But  that  could  change 

“In  three  to  five  years,  we’ll  see  sec¬ 
ond-generation  technologies  from  the 
companies  that  are  launching  products 
now  that  will  probably  have  better 
characteristics,  reduce  costs  and  add 
flexibility  to  the  mix,"  Ashley  says. 
049387 
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The  tectaiotogy  to  stt  s&iWiy  to  fM  a  viable 
business  appicaiiQn: 

OQHkfetMi  49206 
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Geek  Squad  *  a  24Hour  Computer  Support  Task  Force  found  at  Best  Buy, 
depends  on  Sprint  to  t^e  care  of  business.  Armed  with  Sprint  PCS  Ready 
Unk*  Phones,  Agents  can  stay  linked  with  wakietalkiestvle  comrmncation. 
^  And  when  they  need  more  detailed  technical  information.  Sprint  PCS 

Connection  Cards'"  provide  high-speed  wireless  access,  linking  them  to 
>  their  company  intranet  which  can  provide  the  same  data  access  they'd 

have  in  the  office.  Sprint  technology  helps  Geek  Squad  expedite  solutoons. 
improve  customer  service  and  effici^  handle  over  a  thousand  customers 
a  day.  And  a  fast,  connected  Geek  Squad  is,  in  our  opinion,  beautiful. 
With  Sprint,  business  is  beautiful.” 

>  Visit  Sprint.com/beautiful  for  case  studies  or  call  877-777-5568  > 
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IBM  Offers  Powers 
Server  for  Umix 

BM IM  uMli  niaaiid  •  IWrt 

Mfw  wcMiaty  dmtainl  Igr 
UmlMaaiMViirtaWivNiN- 
il  hc-’s  SUSE  or  M  HM  Ik’s 
Uaa  oiJinlfng  Diilaim.  Ha 
systomalbtMlililsinalinr- 
a«  net  or  taar  lalkin.  m 
oaM  I  afl  MnAns  a  laaaay 
syMan  ti  Ha  Uni  M  0)  2009. 
PrtctloaailaililSOMO. 


IliingMagic  Unveik 
RFID  Tag  Reader 

ContrIdKiliii  liiiiJHaa- 
M«e  UC  lari  aMt  nlMed 
HataayOa.  an  aoMM  RFB 
nadir  ilmpiiJutaiaad  In 
IM  arMaa.  prial  and  apniy 
Mindnaa.  and  nHar  lyilaia  dal 
nad  and  arlla  m)  a  Ngh 
apaad.  Maraayda  can  road  any 
tao.  and  la  aohdadin  aiOM 
■awidaalanaapni(acala,ln- 
ohidng  EFC  Oaaa  1 0anaradon  2. 
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loadJbary  tiL  In  PIMiaai  and 
Saana  Sodaan  ta.  In  San  Hr 
•an,  CaH..  hnl  aaat  annoiacad 
daktavHHoolSatanannan- 
ataa  ta  JW  dangn  managr 
raad  aadam  nMi  lagUai  ta 
JM,  a  aodaan  davatapnanl  ar 
■H  daonaary  and  mapptig  angta 
farldriiiaidieotn’aJIatanyl- 
ranaad.  Oaaalapan  a*  ta  Hla 
la  maaoa  appicadoaa  aWanil 
laadaftta  Waal  State  JM  a 


Vloritas  Releases 
Storage  Foumfcrtion 
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KEITH  SPITZ 


Lessons  Learned  bv 
A  CI^  Vbteran 


■  HAVE  SPENT  much  of  the  past  eight  years  work¬ 
ing  with  CRM  systems  and  have  a  lot  of  faith  in 
the  promise  of  the  technology.  But  realizing  that 
promise  requires  a  commitment  that  many  com- 
.  panies  aren’t  prepared  to  make. 


At  a  previous  employer,  a 
software  development  com¬ 
pany,  I  was  actively  Involved 
as  a  software  engineer  in 
three  different  CRM  imple¬ 
mentations.  although  all 
three  used  the  same  product 

When  the  i»eed  for  a  CRM 
system  became  clear,  we  se¬ 
lected  a  product  that  had 
been  effectively  implement¬ 
ed  by  another  company  with 
a  similar  business  model. 

Our  first  protect,  which 
took  six  months,  included 
only  the  sales  department. 

Later  releases,  staggered  over  the  next 
year,  integrated  technical  support,  prod- 
u«  distribution,  fiiunce  and  —  to  a  less¬ 
er  degree  —  marketing. 

But  after  a  couple  of  years  of  working 
with  this  system,  we  realized  we  had  a 
model  that  was  flawed  in  two  key  areas. 

First,  it  focused  on  serving  individuaJs 
as  customers,  rather  than  companies  as 
customers.  1^118  became  a  problem  as 
our  business  strategy  changed  and  we 
entered  into  larger  deals  selling  software 
to  develc^ment  companies  rather  than 
to  individual  developers.  Second,  the 
overall  implementation  was  built  piece¬ 
meal.  focusing  on  the  needs  of  each  de¬ 
partment  The  resulting  system  didn't  al¬ 
low  us  to  smoothly  move  work  among 
departments.  So  we  tried  again. 

For  the  second  implementation,  my 
company  invested  significani  resources 
to  design  a  system  with  the  complete  In¬ 
volvement  of  all  current  and  potential 
client  groups. 

We  completed  a  design  that  met  the 
requirements  of  mariwting.  sales,  techni¬ 
cal  support  professional  services,  soft¬ 
ware  development  product  distribution 
and  finance.  And  it  met  the  needs  of  our 
U.S.,  European  and  Asian  (^wiadons. 


But  it  didn’t  take  long  to 
realize  that  we  hadn’t  built 
the  ultimate  system  we  bad 
envisioned.  The  overall 
complexity  of  the  product 
introduced  some  significant 
process  issues,  and  it  wasn't 
amenable  to  the  rapid 
changes  the  company  want¬ 
ed.  So  we  tried  yet  again 
For  the  third  implementa¬ 
tion.  we  tried  software  that 
was  as  "out  of  the  box"  as 
possible.  We  focused  the 
system  design  on  sales, 
where  we  had  experienced 
most  of  the  pain  with  the  existing  sys¬ 
tem.  We  upgraded  to  the  btest  version 
of  the  software,  which  significantly  im¬ 
proved  the  user  interface.  We  also 
vowed  to  adapt  our  processes  to  the 
product  to  minimize  customization. 

A  third-party  process  consultant  with 
significant  CRM  experience  vpas  brought 
in  to  help  us  design  a  woiiflow  that  met 
the  specific  needs  of  sales  and  would  fit 
well  with  the  strengths  and  weaknesses 
of  our  CRM  product 
Still  no  success.  The  new  software, 
though  more  user-friendly,  was  relative¬ 
ly  immature;  the  sales  process,  carefully 
designed  though  it  was.  wasn't  consis¬ 
tently  followed  And  the  out-of-tbe-box 
vendor  solution  simply  wasn’t  robust 
enough  for  an  implementation  of  our 
size  and  complexity. 

So  three  tries,  three  faUures.  What 
went  wrong?  I  have  identified  the  fol¬ 
lowing: 

Andoureftbits 
were  further  complicated  because  the 
people  involved  in  the  project  were 
spread  around  the  world 
Ljck^a^quiii  oIHm  and  btepHion 
— Although  this  is  due  in  large  part  to 
the  limitations  of  our  CRM  product,  it  is, 


I  believe,  a  problem  commonly  faced  by 
most  CRM  implementers. 

‘Hie  procMiMiManca  of  aafea  towns.  1 
don't  want  to  offend  my  sales  colleagues 
—  I  see  the  roots  of  this  behavior  in  the 
nonprocedural  and  independent  nature 
of  their  work. 

TfwrtoiofditorMtchangatypicalyaicaad- 
ino  ow  aURy  to  imptomml  d  Eventually,  this 
led  to  an  environment  in  which  IT  re¬ 
sisted  rather  than  embraced  change. 

ftior  data  qualhf  canbaL  My  company 
ditfo't  pay  nearly  enough  attention  to  en¬ 
tering  data  into  the  system  correctly  and 
maintaining  its  integrity. 

Tha  tofen  of  eanaanaua  daaign.  Our 
“design  by  representation"  ended  up  be¬ 
ing  built  by  representatives  without  suffi¬ 
cient  authority  and  influence  to  effective¬ 
ly  champion  the  proposed  desiga 
NhnofgelcyaniorcwnanL  A  CRM 
system  will  work  well  only  if  it’s  used 
consistently. 

Despite  ^  these  flaws,  it’s  possible  to 
implement  an  effective  CRM  system,  but 
only  under  the  following  conditions: 

■  The  benefits  expected  from  the 
CRM  must  be  clearly  identifled 

■  Consistent  processes  must  be  de¬ 
fined  (even  if  tbeir  granularity  is  coarse) 
and  enforced 

■  Sufficient  attention  must  be  dedicat¬ 
ed  to  dau  quality  control  Hus  is  one  of 
the  most  critical  —  and  most  easily  over¬ 
looked  —  keys  to  success. 

•  Process  and  tool  "rough  spots"  must 
be  recognized  and  resolved  quickly. 

■  CusiomizatioD  must  be  minimized 
Just  remember  that  there  is  an  ongoing 
maintenance  obligation  created  by  «ch 
line  of  customization  you  add 

No  two  CRM  implementations  will  be 
the  same.  But  many  aspects  of  CRM  de¬ 
sign  and  implementation  will  remain  the 
same  across  products  and  industries. 
Success  depends  much  more  on  your 
ability  to  think  broadly  anH  ^>eak  per¬ 
suasively  than  on  the  features  of  the 
CRM  system  you  select  and  the  techni¬ 
cal  skills  of  your  team.  04M21 
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business  acuity:  yet  another  reason  to  outsource  with  spi 


our  sales  el 


For  a  company  our  size,  we  have  a  remarkable  number  of  ducks  in  a  row.  Our  global  delivery  model  includes 
certifications  for  CMMI  Level  5  (in  progress),  Six  Sigma,  and  ISO  9001:2000. Then  there's  our  industry  expertise. 
Companies  in  retailing,  financial  services,  transportation,  logistics,  insurance,  hospitality  and  software  publishing/reselling 
can  attest  that  SPI  is  totally  aligned  with  your  needs.  If  you  want  strength  and  flexibility,  we'll  get  along  swimmingly. 

To  learn  more,  call  toll-free  866-316-5774,  write  sales@spiPortal.com  or  visit  www.spiPortal.com. 
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Smart  CIOs  are  applying  the 
lessons  of  just-in-time  inventory 
and  portfolio  management  to  IT 
staffing.  The  result:  maximum 
flexibility  and  minimal  trauma. 
By  Steve  lllf^er 


ten  or  hdiiig  an  agreement  widi  a  systems  integrated 
The  good  news  is  that  CIOs  today  have  a  weald) 
staffing  optXMis:  follHinre  enq>k)y^  part-diners, 
cratracton  and  outsourcers  —  bMh  GO- and  t^bbore. 

The  trick  is  to  leverage  these  elements  to  create  a 
smt  human  on-demand  IT  oiganizatkm  satis¬ 
fies  business  and  budget  requirements  while  provid¬ 
ing  career  growth  for  vroiken.  It^  a  chaHei^e.  but 

one  that  anait  IT  leaders  are  meeting. 

The  business 
i  realities  that 
I  have  created  this 
I  need  for  elastici- 
I  ty  are  fomiliar  to 

^1  IT  managers. 

I  Tbeti^bud- 
I  gets  dial  have 
I  ivevailed  for  sev- 
I  eral  years  pared 
I  downlT staffs 
I  and  increased 
f  tbedemandfor 
less-cq>ensive 

alternatives  such  as  contract  help  and  offihoring. 

Meanwhile,  day-to-day  business  operations  and  IT 

have  grown  so  tightly  intertwined  that  they  must  be 
treked  as  one  and  dte  same. 

“Whttt  Pm  bearing  from  hiring  managers  is, 
want  opdotts,’  *  says  Katherine  Spencer  Lee,  an  exec¬ 
utive  director  at  Ifobert  Hatflbclmology.  She  says 
that  CIOs  and  IT  managers  who  come  to  die 
firm,  a  dhriskm  of  Menlo  Park,  CaHL-based  Robert 
Half  IntematioBal  Inc,  seek  to  maintain  a  bedrodt 
staffoffull-timefs,ooittnctMBwbocan”flexstiate- 
gicall^  from  profect  to  project  and  an  o&faore  out¬ 
sourcing  rewopany  for  a  sm^  numh^r  of  commodity 
pn^e^ 

There  are  many  ways  to  meet  the  need  for  flexfoil- 


KATHERINE  SPENCER  LEE 
EXECUTIVE  DIRECTOR 
ROBERT  HALF  TECHNOLOGY 
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VBOORHMMOBBfTrirBeaBen- 
iai  to  haw  someone  vfho  can  Inck 
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WnmrnuCV^Mwneedto- 
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and  maintonance  of  secutty.) 
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haRfonpraiaGto. 
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ity  in  staffing.  Harrah's  Entertainment  Inc.,  for  exam- 
pie.  created  a  son  of  IT  SWAT  team  that  rotates 
quickly  from  projea  to  project,  depending  on  what 
the  Las  Vegas-based  gambling  and  entenainmcnt 
company  needs  to  accomplish. 

In  a  2002  reorganizatioa  Harrah's  divided  its  IT 
organization  into  groups  devoted  to  application  de¬ 
velopment.  operatkms  and  support.  A  fourth  group 
—  tbe  ‘’sohitioDS  management  group"  —  serves  as  a 
baison  between  IT  and  business.  This  setup  made 
IT  more  nimble  and  reqxMisive  to  user  and  lioe-of- 
btisiness  needs,  says  Heath  Daughtrey.  Harrah’s 
vice  president  of  IT  services.  However,  he  adds, 

■^ve  realized  a  key  component  was  missing;  flexibility 
We  needed  ifae  ability  to  scale  Tvarious  IT  groups] 
depending  on  business  and  markets." 


In  response.  Harrah's  pulled  30  full-time  program- 
mer/analysts  from  tbe  four  groups  and  created  a  flexi¬ 
ble  pool  devoted  to  what  the  company  calls  ’^pid- 
cycle  rotation"  —  intensive,  high-priority  projects 
that  last  no  more  than  six  months.  According  to 
Daughtrey.  the  team  has  been  successful  as  a  “rapid 
resource  delivery  model."  allowing  Harrah's  other 
four  IT  groups  “to  operate  as  lean  as  they  can." 

The  program  hasn't  been  without  speed  bumps, 
though.  “We've  seen  over  time  that  there  are  individ¬ 
uals  who  don't  necessarily  thrive  in  a  fluid  environ¬ 
ment."  Daughtrey  says.  Partly  as  a  result,  tbe  original 
team  of  30  has  been  pared  to  about  half  that  number. 

Bruce  Goodman.  CIO  and  chief  services  officer  at 
Humana  Inc,  is  a  noted  proponent  of  clastidty  in  IT. 
Humana's  efforts  to  make  its  technology  staff  more 
flexible  were  bom  of  near  desperation.  (Goodman 
jokes.  "A  few  years  back,  we  overhauled  IT  so  we 
could  better  support  the  business,"  he  says,  “and 
once  we  got  [business]  people  all  excited  about  tech¬ 
nology.  h  occurred  to  us  that  it'd  be  nice  to  be  able  to 
deliver  what  we'd  promised." 

Before  the  IT  makeover,  the  Louisville,  Ky.-based 
heal^  benefits  company  spent  30%  of  its  resources,  in¬ 
cluding  workers'  tune,  on  application  development 

and  70%  on  maintenance.  TTrat  ratio  - 

has  since  been  reversed  and  then 
some:  Goodman  says  B0%  of  re¬ 
sources  now  go  to  development  and 
only  20%  to  maintenance. 

Humana’s  rallying  cry  became 
“Partner  before  buy:  buy  before 
build."  he  says,  and  this  motto  applied 
not  only  to  applications  but  airo  to 
human  resources.  For  starters,  tbe 
company  began  moving  mainframe 
legacy  operations  and  maintenance 
to  an  outsourcing  firm  in  India. 

To  create  a  particularly  strategic 
application  —  which  it  hopes  to  not 
only  use  in-house  but  also  sell  to 
other  health  care  companies  —  Humana  turned  to 
Electronic  Data  Systems  Corp..  because  that  firm  had 
consultants  whose  specialized  skills  were  key  but 
won't  be  needed  oiKe  the  development  is  complete. 

Robert  HalTs  Lee  says  this  approach  makes  sense. 
“When  a  company  needs  specific  expertise  that  they 
lack  on  stalT.  theyll  bring  in  contractors  for  six  to  18 
months  just  to  get  that  project  done."  she  says.  “We 
see  that  a  lot  with  things  like  SAP  upgrades  that  arc 
^llenging  and  demand  hard-to-flnd  skills  but  aren't 
‘forever’  projects.  Contractors  give  you  that  elasticity." 

What’s  New? 

But  outsourcing  to  India  and  working  with  EDS 
aren't  exactly  revolutionary  practices.  What  is  it  that 
separates  a  truly  flexible  or  "elastic"  IT  group  from 
those  that  just  outsource  or  hire  systems  integraiors.> 
Goodman  says  tbe  difference  is  that  elasticity  de¬ 
mands  a  sweeping,  big-picture  approach  to  the  entire 
range  of  IT  tasks,  projects  and  services.  Elasticity  as¬ 
sumes  that '>ou  look  across  tbe  board."  be  says.  Tou're 

managing  a  portfolio  of  projects  and  findii^  the  cor¬ 
rect  cost-effective  approach  to  each  one,  all  within 
typical  [budgetary  and  service  delivery]  constraints." 
Goodman  is  describing  IT  portfolio  management  —  a 
practice  lilted  from  the  financial  investment  arena  — 


BRih  i  . 

CIO  HUM.'ihA  IN. 


whi^  involves  managing  the  suite  of  corporate  IT 
projects  as  if  it  were  a  financial  portfolio, 
riskier  projects  with  safer  ones  and  monitoring  the 
portfolio  to  ensure  an  acceptable  risk/reward  ratio. 

It’s  clear  that  while  its  components,  such  as  off¬ 
shoring  or  hiring  temps  or  contractors,  tend  to  be 
tactical  and  reactive,  true  elasticity  is  strategic  and 
anticipatory. 

The  Pkopie  Part 

If  strategic  thinking  is  one  pillar  of  FT  elasticity,  the 
other  is  true  commitment  to  tbe  bacUmne  of  the  or¬ 
ganization:  full-time  employees.  “If  1  were  a  CIO 
wanting  more  elasticity,  Fd  look  carefuUy  at  employ¬ 
ee  development  programs.”  says  Rick  Pt^pelL  an 
smalytt  at  People^  Inc.,  a  Gartner  Inc.  research  firm 
in  Bridgewater.  N.L  He  says  the  best  elastic  FT  groups 
are  broadening  staffers’  skills  to  move  them  from 
back-end  processes,  such  as  coding  and  maintenance, 
to  front-end  roles,  which  include  project  manage¬ 
ment  and  business  analysis  —  hj^-visibUity.  high- 
value  jobs  that  reflect  tbe  symbiotic  relationship 
between  technology  and  business. 

That  has  been  the  model  at  Harrah’s,  where  solu¬ 
tions  management  group  participants  develop  a 

bfoader-tban-usual  range  of  skills, 
according  to  Daughtrey.  “Rather 
than  predominantly  supporting  one 
[proprietary  applintion]  such  as 
casino  management,  they  work  on  a 
variety  of  projects;  e-business,  lodg¬ 
ing.  casino,  etc.,"  he  says. 

Humana  also  keeps  a  close  eye  on 
FT  staffers’  career  paths.  “Despite  our 
partnerships  and  outsourcing,  we 
make  it  clear  we  have  plenty  of  ca- 
teer  opportunities  [for  full-timers]." 
Goodman  says.  He  believes  the  key 
to  retention  is  to  offer  employees 
challenging;,  high-value-add  devel- 
oprnem  assignments  in  hot  areas 
such  as  data  mining,  wireless  and  Humana’s  intrancL 
Tim  Ramsay  agrees.  An  associate  vice  president  at 
the  University  of  Miami  in  Coral  Gables,  Fla.,  he  ad¬ 
vocates  elastic  FT  staffl^  which  he  says  is  relatively 
easy  in  a  university  environment,  where  uodergrads 
eagerly  tackle  thankless  jobs.  The  core  FT  staff  b 
happy  to  let  students  do  some  of  the  tedious  stuff, 
leaving  them  more  challenging  work."  be  says. 

In  the  end.  Poppell  says,  truly  elastic  IT  organiza¬ 
tions  are  easy  to  distingubh  from  those  that  are 
merely  plugging  boles.  The  companies  that  are 
doing  better  understand  the  business  drivers  behind 
IT,"  he  says.  They  have  a  formal  FT  plan  supported 
by  an  infrastructure  plan  that  looks  ahead  three 
This,  he  says,  allows  businesses  to  create  a 
“form^  FT  workforce  plan  that  asks.  ’Do  we  have  the 
capability  to  complete  our  various  projects?* " 

If  your  FT  group  lacks  such  strategic  planning, 
you’re  probably  not  yet  reaUy  elastic-  That  means 
you’re  most  likely  paying  a  premium  for  skUls  you 
could  have  developed  in-house,  and  tbe  only  thing* 
stretching  arc  your  budget  and  your  employees' 
patience.  O  48BM 


You're  man¬ 
aging  a  port¬ 
folio  of  projects  and 
finding  the  correct, 
cost-effective  ap¬ 
proach  to  each  one. 


U^frlder  b  a  Cofflputerworid  contributir^  writor  tn 

Southbonx  Mass.  Contact  him  at  su^tidj^i^charw.neL 
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West  Named  CIO 
At  H&R  Block 

HAR  Bloch  Inc.  in  Kama*  City, 
Mo.,  namad  MARC  WEST  sorAv 
vica  preaidant  and  CM).  Wast  pre¬ 
viously  sonmd  ai  gioM  dO  at 
Boctronlc  Arts  bi^  vvhare  ha 
provMad  Moh-voluma  systams 
and  Ifrtamat  capabMtiBa  for 
EA.com. 

MBI  Chooses  Steltz 
To  Be  Tech  Chief 

MVM  STELTZ  has  bean  appointed 
chWtoehnologyofficaratMad-i- 
Bani(lnc..aWiWiarR.Maaa.- 
baaod  mahar  of  reaHbna  pay- 
mant  software  auppertinB  am- 
ployw  banaftts  progrwna.  Previ- 
MsIy,  Slaltz  lad  appRcalion  da- 
vafopmanl  efforts  at  Thompaon 
FInanciPl.  nret  Data  Corp.  and 
The  Dm  A  Bradslreat 

Flynn  Named  CIO 
At  Furniture  Brands 

Fimhn  Brands  ManuMonil 
he.  aspoMsd  AMB  B.  am)  to 
ton  nendy  crahsd  msllion  oi  vies 
prasUsM  of  logMhi  and  OO. 
Rynn  DM  hmiariy  CIO  at 
Hiomaaiiaa  RanBura  toduitilas 
hc..aaidialdtoiyalStlnds- 
taaadFwdtonBrandahlarna- 
BonaLMortolaHnBnninas- 
vfla  h  1S9B,  Amas  saiflnd  h 


pracaas  ra-anglneaihg  a)  fnod 
ItonUC. 


StechertoLeadIT 
At  Conseco  Unit 

STEVEN  M.  STECHER  htt  iobied 
Conseco  bie.  in  CarawL  IncU  as 
exocutiva  vica  praeident  of  opera* 
tens  and  IT  for  Conaaca's 
snea  group.  For  the  past  two 
yaws.  Stochar  senred  as  senior 
vfeapreskbmtandCIOatOrixFi- 
nandai  Sarvicas  Inc.  Ms  insur¬ 
ance  industry  eiparfanca  includes  I 
seven  years  at  AXA  Suitable  Ufa 
bisuranca  Co.,  wtwre  ha  hold 
managamant  posMons  in  marbet- 
inp,  aponey  operations  and  bro- 
barapo  sales  managsmant  i 


Budget  2005:  Win 
Some;  Lose  Some 


Budgeting  is  an  exercise  that  many  IT 
managers  dread.  Because  IT  has  an  unpre¬ 
dictable  economic  model,  budgeting  accu¬ 
rately  can  be  difficult.  After  several  years  of 
cost  cutting,  modest  IT  budget  growth  re¬ 
turned  in  2004  and  is  expected  to  continue  into  2005. 
But  the  pressure  to  reduce  IT  costs  is  not  going  away. 


Here’s  a  look  at  the  major  - 

areas  of  IT  spendii^  and 
my  predictions  for  how 
these  categories  will  be 
treated  in  2005  IT  budgets. 

Hardware  costs,  which 
typically  represent  about 
20%  of  the  IT  budget,  in¬ 
clude  depreciation  on  hard¬ 
ware  assets,  leases,  ex¬ 
pensed  hardware  purchases 
and  maintenance  contracts. 

Although  unit  costs  of 
hardware  have  dropped 
in  recent  years,  hardware 
expense  as  a  percentage  of 
total  IT  budget  will  remain 
static.  This  is  because  companies 
are  buying  more  hardware  than  they 
did  in  the  past,  largely  as  a  result  of 
increased  data  storage  requirements. 
In  2005,  many  organizations  will  make 
hardware  purchases  that  had  been 
postponed  during  the  recession.  Con¬ 
sequently.  despite  the  drop  in  unit 
costs.  1  expect  that  most  organizations 
will  budget  about  the  same  for  hard¬ 
ware  as  they  did  in  2004. 

Softvrere  costs  have  increased  from 
9%  of  the  IT  budget  in  1998  to  about 
20%  today.  The  upward  trend  in  soft¬ 
ware  spending  won’t  continue,  how¬ 
ever.  Companies  are  buying  fewer 


acquisition  and  ongoing 
costs  of  software.  As  a  re¬ 
sult  of  these  factors,  1  be¬ 
lieve  that  most  companies 
won’t  increase  their  2005 
investments  in  software. 

IT  staff  costs,  which  in¬ 
clude  the  cost  of  internal 
employees  as  well  as  con¬ 
tractors.  have  declined 
during  the  past  few  years. 
There  are  several  reasons 
for  this.  First,  the  wide 
availability  of  ITlabor  has 
meant  fewer  bonuses  and 
raises  for  IT  professionals. 

Simply  put.  it’s  still  a  buy¬ 
er’s  market  when  it  comes  to  IT  skills. 
Second,  many  organizations  reduced 
the  number  of  contractors  they  use  in 
order  to  cut  costs  durii^  the  reces¬ 
sion.  Third,  increased  reliance  on  out¬ 
sourcers  has  resulted  in  smaller  staff 
budgets  for  many  companies. 

In  2005, 1  expect  IT  organizations  to 
budget  only  marginally  more  for  inter¬ 
nal  staff  and  contractors.  IT  hiring  has 
picked  up  only  sli^tly.  Even  if  de¬ 
mand  for  IT  talent  increases  in  the 
coming  months,  companies  will  stay 
cautious  about  expanding  head  count,  j 
Tdecammunicatens  costs,  which  in-  I 
elude  voice  and  data,  are  often  seen  as  ^ 


r - /—e oAiu  udui.  die  uiicii  been  as 

licenses  and  dropping  nice-to-have  but  the  low-hanging  fruit  for  oiganizations 


unessentiai  support  agreements.  Also, 
software  vendors  have  become  a  bit 
more  flexible  on  pricing.  Purchasing 
models,  such  as  application  hostii^ 
are  allowing  companies  to  reduce  the 


that  must  reduce  their  IT  budgets.  It’s 
true  that  most  oiganizations  can  save 
money  by  auditing  telecommunica¬ 
tions  bills  and  instituting  better  con¬ 
tract  management  procedures.  For  ex¬ 


ample.  one  way  to  save  money  is  to 
bring  together  all  telecommunications 
contracts  with  the  same  provider  un¬ 
der  a  single  overall  coniraa  for  total 
spending  recognition  and  more  effi¬ 
cient  admimstration. 

Telecommunications  costs  have 
gone  down  slightly  in  the  past  few 
years,  and  I  expect  that  trend  to  con¬ 
tinue.  Tight  competition  in  the  tele¬ 
communications  marketplace  and  a 
growing  interest  in  voice  over  II>  will 
enable  firms  to  continue  to  drive  these 
costs  dowa 

There  is  one  exception  worth  men¬ 
tioning:  wireless.  In  many  organiza¬ 
tions,  wireless  is  still  a  rogue  expense 
that  isn’t  centrally  managed.  As  a  re¬ 
sult.  corporate  costs  for  wireless  are 
often  disproportionately  high  in  com¬ 
parison  with  those  for  fixed-line  ser¬ 
vices.  Over  time,  more  organizations 
will  centralize  wireless  services  under 
the  IT  budget,  however,  and  IT  man¬ 
agers  can  expect  to  ’’inherir  the  wire¬ 
less  problem,  if  they  haven’t  already. 

Extamal  sarvioa  providers  include  all 
noQstaff  IT  labor,  except  contractors. 
There  has  been  a  lot  of  industry  hype 
about  outsourcii^  particulaiiy  off¬ 
shore  outsourcing,  but  hype  aside, 
dependence  on  external  service 
providers  is  growing.  As  a  result.  I  ex¬ 
pect  most  IT  organizations  to  spend 
more  on  them  in  2005  than  they  did  in 
2004.  In  particular,  there  appears  to  be 
growing  interest  in  application  devel¬ 
opment  and  imegration  services. 

The  pressure  to  reduce  IT  costs  is 
not  going  away.  Even  as  they  allocate 
slightly  more  money  for  hardware 
purchases  and  external  service  pro¬ 
viders,  oiganizations  arc  looking  for 
ways  to  reduce  -baseline"  or  ongoing 
IT  costs.  O  49156 
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THE  LEADER  IN  CUSTOMER 
ANALYTIC  APPLICATIONS  BRINGS 
YOU  A  NEW  GENERATION 
OF  ENTERPRISE  Bl  SOLUTIONS. 

•  $140M 


Cutthroat  competition,  intense  profit  pressure.  Price  erosion.  Declining  loyalty.  Business  today 
dictates  working  not  just  harder,  but  smarter.  Meeting  these  new  business  demands,  and 
overcoming  the  inherent  challenges,  requires  a  new  generation  of  Bl  solutions  unavailable  from 
traditional  Bl  vendors. 

Siebel.  the  leader  in  customer  analytic  applications,  brings  you  Siebel  Business  Analytics -Bl 
solutions  that  empower  everyone  with  actionable  real  time  insight  from  the  largest  data 
warehouses  and  across  enterprise  sources.  With  a  mission-critical  architectura  that  supports 
multi-terabytes  of  data,  thousands  of  users,  and  24x7  availability.  And  proven  application 
solutions,  with  built-in  industry-specific  best  practices  that  are  flexible,  quickly  implemented. 
Integrate  with  your  Infrastructure,  and  provide  low  TCO. 

Our  innovative  Bl  solutions  have  catapulted  Siebel  into  the  leadership  position  in  analytic 
applications  for  sales,  marketing,  service,  and  senior  management,  with  over  7S%  of  our  customers 
using  Siebel  Business  Analytics  beyond  CRM  and  across  a  full  range  of  enterprise  sources. 

Learn  why  the  most  analytically  sophisticated  companies  rely  on  Siebel.  Attend 
Siebel  Bl  Summit.  Los  Angeles  on  October  3-6.  Visit  www.siebel.com/newgen 
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Bridging  the  Data  Divide 

The  adversarial  relationship  between  auto¬ 
makers  and  new-car  dealerships  creates  a 
reluctance  to  share  information.  CRM  soft¬ 
ware  for  this  maricet  was  designed  with  this 
unusual  sales  channel  in  mind.  PAGE  34 


Turning  Data  Into  Dollars 

Retailers  are  using  call  center 
and  data-gathering  CRM  soft¬ 
ware  to  manage  millions  of 
customer  relationships  and 
make  more  sales.  PAGE  36 
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Personalize  Your  Job 

CRM  and  personalization  applications  arc 
becoming  so  simple  that  marketers  don't 
need  much  help  from  IT.  That  makes 
columnist  Mark  Hall  wonder.  What  can 
you  do  to  save  your  job?  PAGE  42 


CRM 

..Goes 

Vertical 


SPECIAL 

REPORT 


We  profile  seven 
industries  and  their 
different  CRM  needs. 


WELCOME  to  the  ‘Verticalization"  of 
customer  relationship  manage-  | 
ment.  Some  CRM  vendors  offer 
as  many  as  20  different  versions 
of  their  products,  each  geared  to 
a  different  industry.  Plus  there  are 
niche  software  vendors  in  various  sectors,  as  well 
as  systems  integrators  that  are  willing  to  do  as 
much  industry-specific  tailoring  as  you  can  afford. 

Is  this  a  good  thing?  Mostly.  It's  certainly  true 
that  CRM  for  manufacturing  is  dramatically  differ¬ 
ent  from  CRM  for  financial  services  or  health  care. 
The  big  advantage  of  an  industry-specific  CRM 
package  is  that  it  saves  companies  from  that  first 


EDITOR’S  NOTE 

layer  of  customization  and  provides  functionality 
that  the  business  can  recognize  and  use  immedi¬ 
ately.  The  ROI  should  come  a  bit  sooner,  too. 

Companies  will  still  need  to  tweak  even  these 
vertical  CRM  packages  to  match  their  actual  busi¬ 
ness.  “No  CRM  on  the  planet  doesn't  need  cus¬ 
tomization,"  says  Kathleen  Kennedy,  vice  president 
of  customer  development  at  Office  Depot. 

This  special  report  examines  the  unique  CRM 
needs  of  seven  key  industries.  But  a  few  words  of 
warning;  Beware  of  vendors  that  slap  some  indus¬ 
try  lii^  on  the  software  labels  and  database  i 
fields  without  addressing  the  underlying  industry  i 
processes.  And  don’t  be  seduced  into  thinking  ■ 


that  a  vertical  CRM  package  is  a  panacea  right  out 
of  the  box.  CRM  is  mostly  a  nontechnology  issue, 
requiring  a  clear  business  strategy,  user  buy-in 
and  a  level  of  maturity  that  many  companies  just 
don’t  have.  That’s  why  so  many  are  on  their  sec¬ 
ond  or  third  attempts  to  get  CRM  right.  O  48996 

Mitch  Betts  is  Computerworld's  executive  editor. 
Contact  him  at  mitch_betts@coniputerworld.cont 
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Automorive  CRM  helps  break  down 
walls  between  manufacturers  and 
dealers.  By  Steve  Ulfelder 


INTRODUCED  IN  2003.  Honda’s 

so>ug}y-it's-alinost-ntte  Element 
was  intended  to  attract  young, 
hip  consumers.  In  its  first  full 
year  of  production,  the  Element 
found  more  than  67,400  buyers, 
exceeding  expectations.  But  alas,  the 
SUV  has  gone  over  like  a  lead  surf¬ 
board  with  the  coveted  Gen  Y  crowd; 
R.L.  Polk  &  Co.  shows  that  buyers  are 
more  likely  to  have  anended  Wood- 
stock  than  the  X  Games. 


That  Honda  Motor  Co.  could  whiff 
so  badly  in  such  an  important  market 
segment  proves  that  automotive  indus¬ 
try  CRM  has  miles  to  ga 
One  reason  is  that  automakers  don't 
own  their  roost  important  customer- 
contact  points  —  new-car  dealerships. 
Indeed,  the  relationship  between  auto¬ 
makers  and  dealerships  is  frequently 
adversarial  This  unusual  sales  channel 
has  strongly  influenced  the  design  of 
CRM  software  for  the  industry. 


“In  your  business  rules  and  data 
structure,  you  need  to  pay  a  great  deal 
of  attention  to  hierarchies  and  visibili¬ 
ty  rules,"  says  Patrik  Riese,  director  of 
CRM  at  Saab  Cars  USA  Inc.  That's  be¬ 
cause  while  dealerships  are  happy  to 
accept  leads  and  prospect  information 
that  parent  company  Saab  (a  division 
of  General  Motors  Corp.)  takes  in 
through  its  Web  site  and  other  media, 
they  are  notoriously  reluctant  to  share 
any  information  they  glean  themselves. 

Tight-Lipped 

“When  I  worked  [in  CRM  at]  Nissan, 
anytime  we  talked  with  a  dealer  about 
CRM.  they  would  simply  shut  down  if 
there  was  to  be  a  sharing  of  information 
with  the  manufocturer,"  says  E>ouglas 
Tdrk.  who  is  now  an  analyst  at  consul¬ 
tancy  Inforte  Corp.  and  co-author  of  the 
book  CRM  Unpfug^d  (Wiley.  2004). 

Riese  says  this  odd  one-way  infor¬ 
mation  flow  is  now  designed  into  the 
Siebel  Systems  Inc.  CRM  automotive 
sofhvare  that  Saab  uses.  However,  in 
2000,  when  the  carmaker  first  used  the 
Siebel  application,  he  says,  “we  were 
one  of  the  first  automotive  customers 
and  had  to  do  a  lot  of  customization.” 

Like  Siebel  SAP  AG  offers  CRM 
tools  tailored  for  the  industry.  The  au¬ 
tomotive  version  of  MySAP  CRM  lets 
manufacturers  track  both  customers 
and  vehicles  throughout  their  life  cy¬ 
cles.  It  includes  tools  for  online  config¬ 
uration  and  pricing,  automatic  warran¬ 
ty  processing  and  vehicle  financing. 

Another  foct  of  automotive  industry 
life  that  CRM  vendors  roust  pay  atten¬ 
tion  to  is  ease  of  use.  The  turnover  rate 
among  dealership  salespeople  can  be 
as  high  as  150%  annually,  so  systems 
must  be  easy  to  leam.  Moreover,  many 
dealers  are  technology-averse  mom- 
and-pop  stores  in  which  even  the 
Rolodex  is  deemed  newfangled. 

“Only  10%,  maybe  20%  of  all  dealer¬ 
ships  ‘get*  technology."  says  Shaun 
Knissin.  director  of  Internet  sales  at 
Byers  Automotive  in  Columbus,  Ohia 

A  Template  for  Every  Task 

The  easily  strained  relationship  be¬ 
tween  manufacturers  and  dealerships 
has  given  rise  to  another  niche  — 

CRM  specifically  tailored  for  dealers. 
The  leader  here  is  The  Reynolds  and 
Reynolds  Ca  in  Dayton.  Ohia  Accord¬ 
ing  to  "nirk.  where  general  enterprise 
CRM  tends  to  be  focused  on  ”the  fun¬ 
nel"  —  the  process  by  \»iiicb  a  contact 
becomes  a  prospect  and  possibly  a 
customer  —  sofhvare  from  Reynolds 
and  Reynolds  is  more  likely  to  stress 
postsales  information  intended  to  at-  I 
tract  lucrative  service  business.  R)r  I 


CRM  MATURITY  LEVEL 


example,  Reynolds  and  Reynolds’  li¬ 
brary  of  foUow-up  letters  includes  a 
mind-boggling  3322  ten^lates. 

The  vendor  also  offers  a  feature  that 
allows  dealers  to  quickly  calculate  a 
half-dozen  or  more  payment  (^ions. 
Traditionally,  sales  reps  have  time  to 
run  only  one  or  two  possible  payment 
plans  for  prospects,  fearing  that  cus¬ 
tomers  may  grow  antsy  if  they  take 
any  more  time.  Byers  Automotive  is  a 
Reynolds  and  Reynolds  customer,  and 
Knissin  says  the  payment-options  fea¬ 
ture  improved  the  ^alership’s  per¬ 
centage  of  closed  sales. 

There  are  other  CRM  benefits  await¬ 
ing  manufacturers  and  dealers 
experts  say.  The  big  concern  in  the  in¬ 
dustry  is  to  get  away  from  incentives." 
says  TUrk.  Studies  show  that  con¬ 
sumers  have  grown  so  accustomed  to 
rebates,  financing  deals  and  other  in¬ 
centives  that  they  won't  shop  for  most 
brands  unless  such  ticklers  are  offered. 
“That  tends  to  mean  they're  not  sure 
who  their  real  consumers  are,"  Tlui 
adds.  “Now  they  need  to  grasp  their 
competitive  differentiation." 

On  the  dealership  side.  Knissin  says 
the  big  benefit  lies  simply  in  treating 
consumers  the  way  they’re  treated  by 
other  retailers.  “When  you  come  in, 

1  know  what  you’ve  bought  from  us. 
when  you  need  service,  when  you 
might  be  considering  your  next  pur¬ 
chase  —  it’s  basic  stuff,  but  so  many 
dealers  don’t  know  this."  O  48880 


Ulfelder  is  a  Computerwoiid 
conrriburi/tg  writer.  Coraact  him 
at  5ulfelder(^charter.net. 


"In  your  business  rules  and  data 
structure,  ynu  need  lo  pay  a  great  deal 
of  attention  to  hierarchies  and  visibili¬ 
ty  rules."  says  Patrik  Ricse.  director  of 
CRM  at  Saab  Cars  USA  Inc.  That's  be¬ 
cause  while  dealerships  are  happy  to 
accept  leads  and  prospect  information 
that  parent  company  Saab  fa  division 
ol  General  Motors  Corp.)  takes  in 
through  its  Web  site  and  other  media, 
they  are  notoriously  reluctant  to  share 
any  information  they  glean  themselves. 


VI  lUMII  II 


Automotiv  e  CRM  helps  break  down 
walls  betw  een  manufacturers  and 
dealers.  H\'  Steve  Llfelder 


IMKiMu  I  n*js  Hond.is 
st>-uglv  -ii’s-almost-i-ute  Element 
was  intended  to  attract  young, 
hip  consumers.  In  its  ftrsi  lull 
year  of  production,  the  Element 
found  more  ih.m  t*r.4i)(l  buyers, 
exceeding  e\pect.ui*»ns.  Hut  alas,  the 
SI  A  h.is  gone  oxer  like  a  lead  surf- 
NurJ  with  the  coveted  (ien  V  crowd: 
R.l .  P'llk  iJv  (’.«»-  shows  th.it  buyers  are 
mx«re  liKelv  lo  have  .nti-nded  Wnod- 
stiKk  than  the  .\  (lanio. 


That  Honda  Mou»r  Ct«.  could  whiff 
so  badly  in  such  an  important  market 
segment  proves  th.at  automotive  indus¬ 
try  (;km  has  miles  to  go. 

One  reason  is  that  automakers  don’t 
own  their  most  important  eusl«»mer- 
eontjcl  points  —  new  -car  dealerships. 
Indeed,  the  relationship  between  auto- 
miikers  and  dealerships  is  frequently 
adversarial.  This  unusual  sales  ch.innel 
has  stnmgly  influenced  the  design  of 
(;R.M  software  for  the  indusirv. 


Ught-Upped 

“When  1  worked  (in  CRM  at]  Nissan, 
anytime  we  talked  with  a  dealer  about 
CRM.  they  would  simply  shut  down  if 
there  was  to  be  a  sharing  of  information 
with  the  manufacturer."  says  Douglas 
Turk,  who  is  now  an  analyst  at  consul¬ 
tancy  Inforte  Corp.  and  co-author  of  the 
book  CRM  Unplugged  (Wiley.  2004). 

Riese  says  this  odd  one-way  infor¬ 
mation  flow  is  now  designed  into  the 
Siebcl  Systems  Inc.  CRM  automotive 
software  that  Saab  uses.  However,  in 
2000.  when  the  carmaker  first  used  the 
Siebel  application,  he  says,  “wc  were 
one  of  the  first  automotive  customers 
and  had  to  do  a  lot  of  customization." 

Like  Siebcl.  SAP  AG  offers  CRM 
tools  tailored  for  the  industry.  The  au¬ 
tomotive  version  of  MySAP  CRM  lets 
manufacturers  track  both  customers 
and  vehicles  throughout  their  life  cy¬ 
cles.  It  includes  tools  for  online  config¬ 
uration  and  pricing,  automatic  warran¬ 
ty  processing,  and  vehicle  financing. 

Another  fact  of  automotive  industry 
life  that  CRM  vendors  must  pay  atten¬ 
tion  to  is  case  of  use.  TTjc  lumovcr  rate 
among  dealership  salespeople  can  be 
as  high  as  150%  annually,  so  systems 
must  be  easy  to  learn.  Moreover,  many 
dealers  are  technology-averse  mom- 
^  and-pop  stores  in  which  even  the 
Rolodex  is  deemed  newfangled.  i 

"Only  10"u.  may  be  20“^>  of  all  dealer-  j 
ships  'get'  technology,"  says  Shaun  I 
Knissin.  director  of  Internet  sales  at  | 
Byers  Automotive  in  Columbus.  Ohio. 

A  Template  for  Every  Task  I 

■  The  easily  strained  relatumship  be¬ 
tween  manufacturers  and  dealerships  i 
has  given  rise  to  another  niche  — 

CRM  specifically  tailored  for  dealers. 

I  The  leader  here  is  The  Reynolds  and  * 
Reynolds  C(k  in  Dayton.  Ohio.  Accord-  i 
ing  to  Turk,  where  general  enterprise  I 
CRM  tends  u*  be  Rxeused  on  "the  fun¬ 
nel"  —  the  process  by  which  a  contact  j 
becomes  a  prospect  and  p«*ssibly  a  ' 

I  customer  —  software  from  Reynolds  i 
I  and  Rcymxids  is  more  likely  to  stress 
postsales  information  intended  to  at- 
'  tract  lucrative  service  business.  For  I 


example.  Reynolds  and  Reynolds'  li¬ 
brary  of  follow-up  letters  includes  a 
mind-boggling  3322  templates. 

The  vendor  alst>  oflTcrs  a  feature  that 
allows  dealers  to  quickly  calculate  a 
half-dozen  or  more  payment  options. 

:  Traditionally,  sales  reps  have  time  to 
rim  only  one  or  two  possible  payment 
plans  for  prospects,  fearing  that  cus¬ 
tomers  may  grow  antsy  if  they  take 
any  more  time.  Byers  Automotive  is  a 
Reynolds  and  Reynolds  customer,  and 
Knissin  says  the  payment-options  fea¬ 
ture  improved  the  dealership's  per¬ 
centage  of  closed  sales. 

There  arc  other  CRM  benefits  await¬ 
ing  manufacturers  and  dealers  alike, 
experts  say.  “The  big  concern  in  the  in¬ 
dustry  is  to  get  away  from  incenijve.C 
sa>'s  Turk.  Studies  show  that  con* 
-sumers  have  grown  so  accustomed  to 
rebates,  financing  deals  and  other  in¬ 
centives  that  they  won't  shop  for  most 
brands  unless  such  ticklers  arc  offered. 
"That  tends  to  mean  ihex-'re  not  sure 
who  their  real  con.sumcrs  are."  Turk 
adds.  “Now  they  need  !•)  grasp  their 
competitive  differentiation." 

On  the  dealership  side.  Knissin  says 
the  big  benefit  lies  simply  in  treating 
consumers  the  way  they’re  treated  by 
other  retailers.  "When  yt>u  come  in. 

1  know  what  you've  bought  from  us. 
tt  hen  you  need  serx  ice.  when  you 
might  be  cttnsidcring  your  next  pur¬ 
chase  —  it’s  basic  stuff,  but  so  many 
dealers  d»)n'l  know  this.”  O  4 


Ul/elder  is  a  t^omputerworld 
confrihufiryj  writer.  Contact  hint 
at  suf/e/tferm  •chartL'r.net. 
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COMPUTERWORLD  HAS  BEEN  NAMED 
MAGAZINE  OF  THE  YEAR  FOR  2004. 

1\  cry  \'L'ar  the  prestigious  Ameriean 
Societ\'  ot  Business  I’ublieation  Editors 
(.4SBPh)  seleets  one  publication  with 
80,000  or  more  subseribers  to  receive 
tltis  top  honor.  The  award  can  go  to  an\' 
business  publication  in  any  industry 
categor\'.  and  we  won!  W’e  are  proud 
that  our  ongoing  commitment  to 
editorial  integrity,  audienee  focus 
and  in-depth  co\  erage  has  been 
l  ecognized  b\’  this  auspieious  award. 
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Ai  rsio\jiK  .VI  ckv»ronics 
More  Best  Bu>  miyht  not 
recall  purchasint:  Shania 
Twain’s  hit  CO  Come 
on  Otvr  back  in  iwr.  but 
iho  S25  billion  retailer 
certainly  dws. 

In  fact,  since  Richrield.  Minn.- 
based  BcnI  Buy  Co.  has  been  coilectin}.' 
data  on  nearly  every  transaction  made, 
rain  check  is-suLsi  and  call  center  prob¬ 
lem  resohed  for  75  million  eustt*merv 
Now.  with  a  robust,  home^trown  data¬ 
base  of  customer  information.  Best 
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tohande  data  w#i  granular  detain  the  j 
k*ffe.ther8(aindi^hope5lele«er- 
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Buy’s  next  chalicnjie  is  to  leverajje  the 
data  into  competitive  advantayje. 

Thai’.s  the  challenge  faciny*  most 
laryte  retailers  today,  according  to  in¬ 
dustry  analysts.  The  retail  sector,  un¬ 
like  other  indusirie.s.  is  managing  rela¬ 
tionships  with  millions  of  consumers, 
compared  with  perhaps  dozens  of 
clients  in  husincss-to-busincss  scett>rs. 

Most  retailers  have  implemented 
call  center  and  data-g;uhcring  i:rm 
svd’iwarc  and  arc  beginning  to  wade 
into  analytics  and  custt>mcr  segmenta¬ 
tion.  which  may  someday  channel  spe¬ 
cial  offers  and  incentives  to  individuals  ' 
based  on  their  buying  habits. 

“Retailers  are  trying  to  get  to  where 
I  they  Were  in  BKI.V  explains  Calhy 
'  Hotka.  principal  at  retail  consulting 
lirm  Cathy  Hotka  &  AsstK'iates  in 
Washington.  "In  l‘)0.^.  the  pcrs«>n  who 
[  runs  the  store  kn<nvs  the  cusuimers.  , 

I  can  put  things  on  credit,  knetws  what 
will  sell  and  when,  and  knows  what  | 
not  to  buy,  W’hen  they  went  to  mass  I 
1  markets,  that  granularity  was  lost. 

I  Regaining  that  intim;Ky  with  the  audi¬ 
ence  is  very  JitTicult." 

A  Quantum  Leap 

The  process  of  mm'ing  from  quarterly 
business  intelligence  reports  to  real¬ 
time  customer  s^^gmeniaiion  is  dilTi- 
cult  because  large  retailers  are  collect¬ 
ing  highly  complex  and  granular  infor¬ 
mation  on  their  customers  that  can 
vary  greatly  from  business  to  business. 
'I'hat  requires  customized  applications, 
even  when  using  specialized  retail 
CRM  packages. 

When  Best  Buy  began  building  its 
(  CRM  capability  in  IWK.  packaged  ap¬ 
plications  weren’t  an  option.  "We 
needed  ut  customize  the  core  eapahili- 
'  ty  ourselves.  Nobody  knew  the  cus¬ 
tomer  data  as  well  as  we  did."  explains 
I  im  Anglum.  Best  Buy’s  direet»)r  of 
CR.M  from  IWH  to  April  2(M)4. 


At  Office  Depot  Inc.,  customers 
range  from  household  buyers  to  large 
corporations  through  its  stores  and 
S.^  billion  online  delivery  business.  Its 
CRM  database  holds  records  on  a  half- 
billit»n  iran.sactions conducted  each 
year,  ntc  Delray  Beach.  Fla.-based 
office  supplier  installed  sofmare  from 
Teradata  in  l*m  for  its  scalability,  but 
it  still  required  eustt>mizaiiun. 

"No  CRM  «»n  the  planet  doesn’t  need 
customization."  says  Kathleen  Kenne¬ 
dy.  vice  president  of  customer  devel-  , 

opmeni  at  OlTicc  Depot.  But  the  c«>re  ' 
database  technology  of  Teradata.  a  di-  j 
vision  of  NCR  Corp.  in  Dayton.  Ohio.  ' 
fit  the  bill.  Today.  Kennedy’s  team  is 
deveK»ping  a  cu.stomcr-centric  data  I 

warehouse  that  will  alh)w  the  retailer  I 
to  automatically  trigger  marketing  ' 


offers  to  individuals  based  on  buying 
paiicms. 

"That  will  be  (*ne  of  the  key  com¬ 
petitive  advantages  in  20(K)  —  to  nuwe 
quickly  and  respond  quickly  to  cus¬ 
tomers."  Kennedy  adds. 

Though  marketing  to  individuals 
is  years  .away,  retailers  are  closer  to 
putting  customers  into  several  general 
categoriev  "Chances  are  giH>d  they’ll 
dump  you  into  a  hopper  of  people  like 
you  —  male,  female,  age.  neighbor¬ 
hood."  says. 

Retailer.s  RadioShack  Corp.  and 
n>ys  R  Us  Inc.  have  been  stocking 
their  databases  with  customer  infor¬ 
mation  for  years,  she  says,  but  "they 
weren’t  doing  anything  with  it. 

They  re  trying  to  get  some  glimmers 
of  insight  into  customer  behavior.  But 
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Turning  Data 
Into  Dollars 

Retail  CRM  finds  the  payoff 
in  reams  ofeonsumer  data. 
lh'Stae\’("ollett 
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Tumina  Data 


Retail  CRM  finds  the  payoff 
in  reams  of  consumer  data. 
By  Stacy  Collett 


A  CUSTOMER  AT  electronics 
st(Me  Best  Buy  might  not 
recall  purchasing  Shania 
Twain’s  hit  CD  Come 
on  Over  back  in  1997,  but 
the  S2S  billion  retailer 
certainly  does. 

In  fact,  since  1996,  Rkhneld.  Minn.- 
based  Best  Buy  Ca  has  been  collecting 
data  on  nearly  every  transaction  made, 
rain  check  issued  and  call  center  prob¬ 
lem  resolved  for  75  million  customers. 
Now,  with  a  robust,  bonr^rown  data¬ 
base  of  customer  information.  Best 


Buy’s  next  challenge  is  to  leverage  the 
data  into  competitive  advantage. 

That’s  the  challei^  facing  most 
large  retailers  today,  according  to  in¬ 
dustry  analysts.  The  retail  sector,  un¬ 
like  other  industries,  is  managing  rela¬ 
tionships  with  millions  of  consumers, 
compared  with  perhaps  dozens  of 
clients  in  business-to^usiness  sectors. 

Most  retailers  have  implemented 
call  center  and  data-gathering  CRM 
software  and  are  beginning  to  wade 
into  analytics  and  customer  segmenta¬ 
tion.  which  may  someday  channel  spe¬ 
cial  offers  and  incentives  to  individuals 
based  on  their  buying  habits. 

‘'Retailers  are  trying  to  get  to  where 
they  were  in  1903."  explains  Cathy 
Hotka.  principal  at  retail  consulting 
firm  Cathy  Hotka  &  Associates  in 
Washington.  “In  1903,  the  person  who 
runs  the  store  knows  the  customers, 
can  put  things  on  credit,  knows  what 
will  sell  and  when,  and  knows  what 
not  to  buy.  When  they  went  to  mass 
markets,  that  granularity  was  lost. 
Regaining  that  intimacy  with  the  audi- 
I  ence  is  very  difficult.” 

A  Quantum  Leap 

The  process  of  moving  from  quarterly 
business  intelUgence  reports  to  real¬ 
time  customer  segmentation  is  diffi¬ 
cult  because  large  retailers  are  collect¬ 
ing  highly  complex  and  granular  infor¬ 
mation  on  their  oistomers  that  can 
vary  greatly  from  business  to  business. 

That  requires  customized  applications, 
even  when  using  specialized  retail 
CRM  packages. 

When  Best  Buy  began  building  its 
CRM  capability  in  1998,  packaged  ap¬ 
plications  weren’t  an  option.  “We 
needed  to  customize  the  core  capabili¬ 
ty  ourselves.  Nobody  knew  the  cus¬ 
tomer  data  as  well  as  we  did.”  explains 
Tiro  Anglum,  Best  Buy’s  director  of 
CRM  from  1998  to  April  2004. 


At  Office  Depot  Inc.,  customers 
range  from  household  buyers  to  lar^ 
corporations  through  its  stores  and 
$3  billion  online  delivery  business.  Its 
CRM  database  holds  records  on  a  half¬ 
billion  transactions  conducted  each 
year.  The  Delray  Beach,  Fla.-based 
office  supplier  installed  software  from 
Teradata  in  1999  for  its  scalability,  but 
it  still  required  customization. 

“No  CRM  on  the  planet  doesn’t  need 
customization.”  says  Kathleen  Kenne¬ 
dy,  vice  president  of  customer  devel¬ 
opment  at  Office  Depot.  But  the  core 
database  technology  of  Teradata.  a  di¬ 
vision  of  NCR  Corp.  in  Dayton.  Ohio, 
fit  the  bilL  Today,  Kennedy’s  team  is 
developing  a  customer-centric  data 
warehouse  that  will  allow  the  retailer 
to  automatically  trigger  marketing  I 
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offers  to  individuals  based  on  buying 
patterns. 

“That  will  be  one  of  the  key  com¬ 
petitive  advantages  in  2006  —  to  move 
quickly  and  respond  quickly  to  cus¬ 
tomers."  Kennedy  adds. 

Thoi^  marketing  to  individuals 
is  years  away,  retailers  are  closer  to 
putting  customers  into  several  general 
categories.  “Chances  are  good  they’ll 
dump  you  into  a  hopper  of  people  like 
you  —  rnale,  female,  age,  neighbor¬ 
hood,”  Hotka  says. 

Retailers  RadioShack  Corp.  and 
Toys  R  Us  Inc.  have  been  stocking 
their  databases  whh  customer  infor¬ 
mation  for  years,  she  says,  but  “they 
weren’t  doing  anything  with  it. 

They’re  trying  to  get  some  glimmers 
of  ins^ht  into  customer  behavior.  But 
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it  Still  doesn’t  have  a  thing  to  do  with 
individuals.” 

Though  the  number  of  packaged 
applications  is  at  an  all-time  high, 
that  doesn’t  mean  monster-size  main¬ 
frames  are  goii^  away.  Instead.  IT  de¬ 
partments  are  tying  in  new  databases 
and  pli^ging  in  campaign  manage¬ 
ment  systems,  e-mail  marketing  capa¬ 
bilities  and  analytical  software  that 
wasn’t  available  before. 

For  business  intelligence  applica¬ 
tions,  for  instance,  retailers  most  often 
look  at  software  from  Cognos  Inc.,  Hy¬ 
perion  Solutions  Corp.,  SAS  Institute 
Inc.  and  Business  Objects  SA.  accord¬ 
ing  to  Robert  Garf,  an  analyst  at  AMR 
Research  Inc.  in  Boston. 

For  real-time,  s^mentation  and 
’'customer  clustering”  software,  which 
offers  advanced  analytics,  retailers  are 
looking  at  Unica  Corp.,  SAS,  Teradata, 
E.piphany  Inc..  Blue  Martini  Software 
Inc.  and  Siebel  Systems  Inc.,  which  re¬ 
cently  purchased  nQuire  Software  Inc., 
a  maker  of  Internet-based  business 
analytics  software. 

‘The  important  piece  b  you  might 
use  separate  sofhrare  to  do  thb  but 
feed  t^t  info  into  operational  systems, 
like  the  loyalty  system,  point-of-sale 
and  mariceting  systems,”  Garf  notes. 

Future  Capabities 

What  CRM  capabilities  are  in  retail¬ 
ers’  immediate  future?  “Anything  that 
looks  like  optimization.”  Hotka  says. 
“The  use  of  statbtics  and  algorithms 
to  glean  information  from  data  on  who 
mi^t  buy  a  given  product.  They'll  use 
it  to  determine  bow  to  merchandise 
and  price  a  new  item,  or  how  far  to 
mark  down  an  item  that  won’t  sell. 
They’re  finally  getting  to  a  point 
where  theyll  know  to  maiit  down 


slow  sellers  by  50%.  not  just  25%.” 

But  althou^  IT  budgets  have  in¬ 
creased  in  the  retail  sector  thb  year 
and  interest  in  CRM  b  high,  most  re¬ 
tailers  won’t  jump  on  new  CRM  appli¬ 
cations  quickly,  predicts  Adam  Samer, 
an  analyst  at  Gartner  Inc.  “They're 


very  cheap,  and  sometimes  you’re  talk¬ 
ing  about  razor-thin  margins.”  he  says. 

But  retailers  should  also  be  looking 
over  their  shoulders. 

“Do  very  profitable  and  innovative 
retailers  wait?  No.  They  have  gone 
crazy  on  tech  spending  because 


they’ve  seen  return.  They  get  it."  says 
Hotka.  “You  don't  want  to  assume  your 
competitor  b  waiting  to  enhance  CRM 
capabilities.”  O  40816 
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Creating  Brand  Awareness 


('onsiimcr  t:(K)ds  C^RM 
tests  cimpaign  cftcctixc- 
ncss.  B\  .\  hire  I ..  Soii;j:ini 


C  \'  Mih  ..mills  manufaciurcrs  fact* 

unique » lulk-npcs  when  mliing  out  (JRM 
applications,  s'omparcd  with  other  induv 
tries  suvIj  as  insuMnee  or  finance. 

hir  one  ihinp,  they  don’t  typically  focus  j 
on  supporting  call  centers  or  remote  sales  force  au¬ 
tomation  pisvessc's.  hut  rather  on  buildinp  better  I 

marketing  and  sales  campaigns.  And  they  generally  I 
Jon  t  have  direct  contact  with  the  end  consumer,  but 
rather  deal  exclusively  with  a  middleman  retailer  or  ! 
pnxiuet  distributor  | 


I  I  his  coniple.N  s,iles  process  means  consumer 
'  piH'ds  m.inutaclurers  tend  to  locus  on  product 
I  branding  rather  than  on  direct  sales.  As  a  result. 

1  one  ot  the  industry  ’s  biggest  problems  is  getting 
j  advanced  analytical  CRM  look  that  can  decipher 
iust  how  well  each  branding  campaign  is  working 
I  at  each  outlet. 

E.RM  pn>ducis  tor  ir.idc  promotion  and  rudimen 
j  lary  cusl»*mcr  an.ilysis  have  been  around  lor  years, 

I  says  iToug  l  urk,  an  .inalyst  at  Inforte  Corp..  a  high- 
tech  consultancy  in  Chicago.  Hm  n«>w.  he  says,  the 
!  nia|»*r(  'RM  vendors,  such  as  .SAI'.Ati  and  San  .Mate... 
^  Calif, -based  Siebel  Systems  lne..  are  starting  to  sell 
specific  (  K.M  add-ons  lor  consumer  g.mds  manufac¬ 
turers  to  help  set  prices  for  marketing  campaigns  and 
I  brand  management,  forex.implc. 

Who’s  Buying  What 

H-I-  Heinz  (To.  wants  to  analyze  Its  product  promt 
I  liitns  in  greater  detail  using  a  more  systematic  ap- 
proach.  says  tieorge  Chappelle.  CIO  at  the  Pitts¬ 
burgh-based  food  prtHjucts  maker  The  company’s 
sjilcs.  finance  and  marketing  specialists  already  use 
Siebel  7.>  t«>  run  trade  promotion  campaigns.  The 
analytical  module  in  the  suite  lakes  feeds  from  FRl' 

and  supply  chainapplications.  allowingusersuislict 

^  and  dice  the  returns  and  e\pc*nses. 

I  SiHtn.  Heinz  wttuld  like  tt»  break  dow  n  each  mar¬ 
keting  campaign  to  determine 
I  r  -titability  by  each  retail  cus¬ 
tomer.  loward  that  end.  Heinz 
last  year  launched  a  project  ft> 
help  it  more  precisely  allocate, 
measure  and  account  for  all 
money  spent  during  a  cam¬ 
paign 

Chappelle  says  the  upgrade 
will  create  tighter  integration 
between  the  supply  chain  man¬ 
agement  system  and  Siebel 
applications  that  w  ill  enable  the 
exchange  .if  relevant  forecast¬ 
ing  information  and  Jeti\er  im¬ 
proved  service  and  inventory 
management. 

The  upgraded  system  w  ill 
als.1  integrate  various  pieces  of 
customer-related  data  to  deter¬ 
mine  profitability,  factoring  in 
variables  such  as  discounts, 
says  Chjppelle. 

Bi'siUes  the  lack  of  advanced 
analytical  capabilities,  there  are 
cultural  problems  that  can  pre¬ 
vent  a  smooth  flow  of  CRM 
information  back  and  fnnh 
through  the  supply  chain.  Man¬ 
ufacturers  have  to  rely  on  the 
retailers  to  collect,  record  and 
-send  them  the  .sales  data,  some¬ 
thing  the  latter  aren't  always 


w  illing  to  do.  according  to  )im  I’revo,  CRT  at  Waler- 
bury,  Vt.-based  (ireen  M.>untain  (Toffee  Roasters  Inc. 

If  retailers  and  suppliers  shared  more  dat.a,  they 
could  better  determine  the  right  mix  .>f  products  in 
the  sales  channel.  However,  supermarket  chains  of- 
'  ten  either  don’t  bother  to  gather  pertinent  sales  data 
or  are  reluctant  to  share  such  information  with  man- 
ulacturers.  preferring  to  sell  it  to  independent  re¬ 
search  firms. 

(•reen  M.*untain  (Toffee  Roasters  runs  I’eopleSnft 
(,RM  software  to  handle  its  monthly  e-mail  cam¬ 
paigns.  The  system  sends  the  company’s  retail  cus¬ 
tomers  messages  that  have  been  tail.ired  to  their 
specific  profiles  based  .»n  records  of  previous  buying 
habits,  says  ITevo,  All  customer  data,  including  or¬ 
dering  history  and  other  supply  chain  information, 
is  consolidated  in  a  central  database  to  create  an  in¬ 
dividual  protile  and  then  usi’d  to  power  the  market¬ 
ing  application. 

Access  to  Common  Questions 

ITie  situation  is  different  at  camera  and  digital  equip¬ 
ment  maker  Nikon  Inc.  in  Melv  ilJe,  N.Y..  which  uses  .-i 
hosted  .service  center  application  fr.»m  Right  Now 
Teehnologies  Inc.,  a  (TRM  vendor  in  B.izeman.  .Mont. 

I  he  application,  called  K-Serviee  (Tenter,  lets  both 
end  customers  and  dealers  access  the  most  common¬ 
ly  asked  technical  qm-slions.  according  ti*  I>avid 

Deniry,  general  mamiger  of  tech¬ 
nical  support  at  Nikon. 

The  software  tracks  inbound 
.service  calls  and  e-mail  and 
offers  customers  a  searchable 
databasi'  to  help  locate  relevant 
intvirmaiion.  Nikon  personnel 
can  see  which  customers  are  ac¬ 
cessing  the  site,  as  well  as  the 
sorts  *»f  information  they  are 
viewing,  and  they  can  run  re¬ 
ports  tvi  determine  if  a  gjven 
technical  article  needs  to  be  sup¬ 
plemented  or  replaced. 

Nikon  is  rolling  out  the  system 
globally,  which  will  allow,  for 
example,  a  Kuropean  technical 
manager  to  take  content  from  the 
U.S.  site  and  immediately  dupli¬ 
cate  it  on  his  t»wn  local  site.  It  has 
become  fairly  common  for  high- 
tech  electronics  manufacturers  t«> 
use  CRM  software  to  handle  cus¬ 
tomer  support,  notes  Dentry. 

CRM  is  a  key  URil. 

“I  think  the  foundation  <»f  c«iro- 
petition  is  understanding  your 
customers  and  making  purpose¬ 
ful  contact  with  them.”  says  Pre- 
va  ‘‘Any  tmils  that  help  compa¬ 
nies  accomplish  those  two  i*}cc- 
tives  arc  going  improve  c-ompeti- 
ttvcncss.”  O  48568 


Consumer  Goods 
Manufacturing 

CRM  MATURITY  LfVEL  Medium 
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I  Grade  based  on  poMneROi  in  case  stodsint'  I 
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SPECIAL  CHARACTERISTICS; 

Consurner  goods  manufacturere  don't 
sel  to  the  end  user,  so  they  have  to  influ- 
encetheiMaierslocanytheirpraducts.  | 
and  the  consumers  to  request  them.  Its 
alabout  branding  and  consumer  mar- 
kehng.  kidustty'toojsedC^ 
compleleconsunerrasponseGapabi- 
Kes.  Icy  account  managemenL  btand 
"■MTagemenl  trade  management  and 
retail  account  manegemeA 
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MARKET  WATCH:  IRbridMdeCRMI- 
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«)Hi  Ki  loM  L  un¬ 
derstands  com¬ 
plex  reliitionships- 
A  I'ornier  snk-s- 
mnn  and  now 
m.injj!inj:  director 
ofci>rporate  relationship  man- 
aitemi  nt  at  1110  Bank  of  New 
York  Co.,  loyce  completed  a 
(;KM  deploxmcnt  in  March 
that  ^ives  the  firm's  1.650  s;iles 
ernploxees  in  .TO  countries  a 
single.  c»msoliJated  view 
each  customer's  interactions 
with  the  hank. 

ITtis  all-encompassing  view 
is  typical  of  a  new  trend  de¬ 
signed  to  counteract  the 
effects  of  two  decades  of 
massive  eonM)lidation  in  the 
financial  ser\ices  industry.  A 
wave  of  mergers  and  acquisi¬ 


tions  fragmented  and  et»m- 
partmentali/ed  customer  m- 
formaiiiin.  making  it  difficult 
t»'  know  what  each  business 
unit  was  doing  or  to  track 
customer  interactions. 

In  the  relationship-driven 
business  of  financial  services, 
that  spells  trouble  A  narrow 
view  »>t  the  client  makes  inter¬ 
action  imperstmal.  and  when 
a  salesperson  doesn't  know  a 
eustomer's  bin  ing  habits,  it's 
far  more  diffic-ult  to  pitch  new 
products  that  speak  to  the 
customer's  needs. 

Full  Customer  View 

When  it  comes  to  CRM  soft¬ 
ware.  financial  services,  unlike 
manufacturing  or  retail  sales, 
is  a  completely  information- 


based  industry,  according  ti* 
Mindy  I’ropper.  an  analyst  at 
McI  can.  Va.-based  Hcaring- 
I’oint  Inc,  Buy  ing  preferences, 
family  needs  and  retirement 
plans  are  amvmg  the  many  bits 
of  information  that  must  be 
meticulously  tracked  su  finan 
eial  serv  ices  firms  can  tailor 
products  to  individual  needs. 

But  despite  huge  invest¬ 
ments  in  Llk.M.  very  few  re¬ 
sources  have  been  focused  on 
enhancing  the  customer  expe¬ 
rience.  according  lti  a  recent 
survey  of  financial  institutions 
by  Bcaringl\>int.  In  fact.  42‘'-. 
of  the  174  companies  surveyed 
still  interact  w  ith  their  cus¬ 
tomers  within  product  s»lo.s. 

Propper  says  much  of  the 
customer  disconnect  is  the  re¬ 
sult  of  developing  ('.K.M  proj¬ 
ects  fn»m  the  inside  out  and 
not  the  outside  in  —  in  other 
words,  disregarding  what  the 
customer  might  want  in  favor 
of  what  the  business  wants. 

'I'hai  was  what  Bank  v»f  New 
York,  a  S(>..T  billion  company, 
was  attempting  to  overcome 
with  its  SU)  million  CRM  proj¬ 
ect.  Over  the  past  decade,  the 
bank  has  made  more  than  80 
acquisitions,  w'hich  have  re¬ 
sulted  in  almost  xs  many  new 
prxxluct  lines,  joyce  says. 

Bank  of  New  York  had  10 
sales-tracking  systems,  the 
majority  of  which  consisted 
of  rudimentary  umls.  such  as 
handwritten  address  boi*ks. 
Lotus  Notes  programs  or 
Kxccl  spreadsheets. 

•'We  ended  up  w  ilh  a  slew  of 
disparate  sales  forevs  thr«*ugh- 
out  the  globe  in  different 
product  areas.  We  didn't  have 
one  place  where  w  e  could 
I  liK>k  to  see  what  we  were  do- 
[  ing  with  a  client  or  what  the 
j  oppvirtunitics  were  with  a  par¬ 
ticular  elieni."  loycc  says. 

The  Bank  of  New  Y«»rk 
chose  Sicbcl  Systems  Inc.'s 
cFinance  si>ftware  to  tic  that 
customer  information  togeth¬ 
er.  loyee  says  the  project  was  a 
success  because  he  spent  an 


■■inordin.!ie"  amount  »>f  time 
getting  user  buy-in.  Yet  there 
was  still  resistance  fmm  sales 
.inJ  business  man.igers.  whi» 
didn't  want  to  give  up  their 
eiist»uner  data  or  switeh  to  an¬ 
other  system  for  tracking  ii. 

The  important  pi>iiu  im 
liow  wc  got  .in 'und  th.it  issue 
W.IS  to  use  both  ihi  c.irrot  and 
the  stick."  loyee  s;iys.  He  also 
kept  the  projccl  fiKused  only 
im  the  sjivs  force,  w  iih  no  call 
ceiitvT  or  b.ick-office  adminis- 
iration  tic-ms.  in  order  to 
avoid  scope  creep. 

Data  Overload 

Kathleen  Khirallah.  an  analyst 
at  Tower<iroup  in  Needham. 
Mass.,  says  the  financial  ser¬ 
vices  industry  is  ahead  «>f  the 
curve  in  its  use  of  c;RM  soft¬ 
ware.  but  it  als»>  facv's  far 
greater  challenges  than  othv-r 
industries  in  gening  to  a  single 
view  of  the  customer  across 
the  entire  institution. 

"1  don't  think  they  're  pro¬ 
viding  lip  service  to  the  prin¬ 
ciples  of  CRM.  I  really  do 
think  hanks  understand  work¬ 
ing  with  customers  well  is 
critical  to  theirsuccevs.'* 
Khirallah  says.  '•It's  kind  of 
the  blv^vsing  and  the  curse. 
They're  gtnid  at  it.  but  there's 
just  so  much  that  they  h.nve  to 
CiHirdinate.  there  are  chal¬ 
lenges  along  the  way." 

Smaller  companies  might 
h;ive  an  internal  culture  that 
supports  customer  service, 
even  w  ithout  the  software  to 
.lUtomatc  those  services.  larg¬ 
er  financial  services  firms, 
however.  l\ave  to  use  software 
to  deal  with  far  more  informa¬ 
tion  to  give  the  illusion  of  a 
pcrsomil  touch. 

"Kealiy  large  institutions 
that  rv‘ly  on  Mvftware  and  have 
made  thi»se  investments  S4ime- 
limes  don't  have  that  service 
culture.  Si*  they  have  other 
challenge-s."  Khirallah  says. 

RoK'rt  Haggerty,  an  analyst 
at  TowerGroup.  says  firms 
that  perform  K*st  in  financial 
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HTvicc>  arc  onc^  that  cultivaic 
and  manage  rclaitonship>. 
Whether  ii'x  banking,  broker- 
.tge.  in\e<tmcni  management 
or  inxurance  Icon.  ii‘s  criti¬ 
cal  to  understand  and  retain 
infi>rmJtion  about  customers, 
he  *oys. 

ilaggeriy  say'>  automation 
of  dat.i  life-cycle  man-igement  • 
K  the  crucial  next  step,  when 
customer  reprv*seniattves  will 
be  automatically  alcned  to 
events  in  the  consumer's  life. 
cTnce  the  salespeople  have 
that  initial  information  abi*ui 
a  customer,  he  says.  "theyTl 
have  a  g<H*d  excuse  to  call  and 
get  a  sale  out  of  it  "  O  48975 


I-inancial  .services  ('R.Vl  helps 
create  a  complete  picture  of 
customers.  Hy  I  ueas  .\  learian 


UnHying  Customer  Views 


wwniinini«hra.ai4 


KINWUDIIE  CENTER  CRM 


Creab'ng  Brand  Awareness 


Consumer  goods  CRM 
tests  campaign  effective¬ 
ness.  By  Marc  L  Songini 


CONSUMER  GOODS  manufacturers  face 

unique  challenges  when  roQing  out  CRM 
applications,  compared  with  other  Indus* 
tries  such  as  insurance  or  finance. 

For  one  thing,  they  don't  typically  focus 
on  stq}porting  call  centers  or  remote  sales  ftwce  au- 
tomatioo  processes,  but  rather  on  building  better 
marketing  and  sales  campaigns.  And  they  generally 
don't  have  direct  contact  with  the  end  consumer,  but 
rather  deal  exclusively  wHh  a  middleman  retailer  or 
product  distributor. 


Thb  complex  sales  process  means  consumer 
goods  manufacturers  tend  to  focus  on  product 
branding  rather  than  on  direct  sales.  As  a  result, 
one  of  the  industry's  biggest  problems  is  ^tting 
^vanced  analytical  CRM  tools  that  can  decipher 
just  how  well  each  branding  campaign  is  working 
at  each  outleL 

CRM  prodticts  for  trade  pronmtion  and  rudimen¬ 
tary  customer  analysis  have  been  around  for  years, 
says  Doug  Turic,  an  analyst  at  Inforte  Corp.,  a  high- 
tech  consultancy  in  Chicago.  But  now,  he  says,  the 
major  CRM  vendors,  such  as  SAP  AG  and  San  Mateo, 
Calif-based  Siebel  Systems  Inc.,  are  starting  to  sell 
specific  CRM  add-ons  for  consumer  goods  manufac¬ 
turers  to  help  set  prices  for  marketing  campaigns  and 
brand  management,  for  example. 

Who's  Buying  What 

H.J.  Heinz  Ca  wants  to  analyze  its  product  promo- 
tioos  in  greater  detail  using  a  more  systematic  ap¬ 
proach.  says  George  Chappelle,  CIO  at  the  Pitts¬ 
burgh-based  food  products  maker.  The  company’s 
sales,  finance  and  marketing  specialists  already  use 
Siebel  75  to  run  trade  promotion  campaigns.  The 
analytical  module  in  the  suite  takes  feeds  from  ERP 
and  supply  chain  applications,  allowti^  users  to  sli<» 
and  dice  the  returns  and  expenses. 

Soon,  Heinz  would  like  to  break  down  each  mar¬ 
keting  campaign  to  determine  _ 

profitability  by  each  retail  cus¬ 
tomer.  Toward  that  end.  Heinz 
last  year  lauitcbed  a  project  to 
help  it  more  precisely  allocate, 
measure  and  account  for  all 
money  spent  during  a  cam- 
paign. 

Chappelle  says  the  upgrade 
will  create  tighter  integration 
between  the  supply  chain  man¬ 
agement  system  and  Siebel 
applications  that  will  enable  the 
exchange  of  relevant  forecast¬ 
ing  information  and  deliver  im¬ 
proved  service  and  inventory 
management. 

The  upgraded  system  will 
also  integrate  various  pieces  of 
customer-related  data  to  deter- 
,  mine  profitability,  factoring  in 
variables  such  as  discounts, 
says  Chappelle. 

Besides  the  lack  of  advanced 
analytical  capabilities,  there  are 
cultural  pit^Iems  that  can  pre¬ 
vent  a  smooth  flow  of  CRM 
information  back  and  forth 
throu^  the  supply  chaia  Man- 
ufiKturers  have  to  rely  on  the 
retailers  to  collect,  record  and 
send  them  the  sales  data,  some-  I 
I  thing  the  latter  aren't  always  I 
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willing  to  do.  according  to  run  Prevo,  CIO  at  Waier- 
bury,  Vt.-based  Green  Mountain  Coffee  Roasters  Inc. 

If  retailers  and  suppliers  shared  more  data,  they 
could  better  determine  the  ri^i  mix  of  products  in 
the  sales  channel  However,  supermarket  fhainc  of¬ 
ten  either  don’t  bother  to  gather  pertinent  sales  data 
or  are  reluctant  to  share  such  information  with  man- 
u^cturers.  preferring  to  sell  it  to  independent  re¬ 
search  firms. 

Green  Mountain  Coffee  Roasters  runs  PeoplcSoft 
CRM  software  to  handle  its  monthly  e-mail  cam¬ 
paigns.  The  system  sends  the  company's  retail  cus¬ 
tomers  messages  that  have  been  tailored  to  their 
specific  profiles  based  on  records  of  previous  buying 
habits,  says  Prevo.  All  customer  data,  including  or¬ 
dering  history  and  other  supply  chain  information, 
b  consolidated  in  a  central  database  to  create  an  in¬ 
dividual  proffle  and  then  used  to  power  the  market¬ 
ing  application. 

Acc^  to  Common  Questions 

The  situation  is  different  at  camera  and  digital  equip¬ 
ment  maker  Nikon  Inc.  in  MehriUe.  N.Y..  which  uses  a 
hosted  service  center  application  from  RigbtNow 
Technologies  Inc.,  a  CRM  vendor  in  Bozeman,  Mont. 
The  application,  called  E-Service  Center,  lets  both 
end  customers  and  dealers  access  the  most  common¬ 
ly  asked  technical  questions,  according  to  David 

Dentry,  general  manager  of  tech¬ 
nical  support  at  Nikon. 

The  software  tracks  inbound 
service  calls  and  e-mail  and 
offers  customers  a  searchable 
database  to  help  locate  relevant 
information.  Nikon  personnel 
can  see  which  customers  are  ac¬ 
cessing  the  site,  as  well  as  the 
sorts  of  information  they  are 
viewing,  and  they  can  run  re¬ 
ports  to  determine  if  a  given 
technical  article  needs  to  be  sup¬ 
plemented  or  replaced. 

Nikon  b  rolling  out  the  system 
globally,  which  will  allow,  for 
example,  a  European  technical 
manager  to  take  content  from  the 
U.S.  site  and  immediately  dupli¬ 
cate  it  on  hb  own  local  site.  It  has 
become  fiurly  common  for  h%h- 
tech  electronics  manufacturers  to 
use  CRM  software  to  handle  cus¬ 
tomer  support,  notes  Dentry. 

CRM  b  a  key  tool. 

"I  think  the  foundation  of  com¬ 
petition  b  understanding  your 
customeis  and  wolfing  puipose- 
fol  contact  with  them.”  says  Pre¬ 
vo.  "Any  toob  that  help  compa¬ 
nies  accomplish  those  two  objec¬ 
tives  arc  goit^  improve  competi¬ 
tiveness."  O  486BB 
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Robert  joyce  un¬ 
derstands  com¬ 
plex  relationships. 
A  former  sales¬ 
man  and  now 
managing  director 
of  corporate  relationship  man¬ 
agement  at  The  Bank  of  New 
York  Ca.  Joyce  completed  a 
CRM  deployment  in  March 
that  gives  the  firm’s  1.650  sales 
employees  in  30  countries  a 
single,  consolidated  view  of 
each  customer’s  interactions 
with  the  bank. 

This  all-encompassing  view 
is  typical  of  a  new  trend  de¬ 
signed  to  counteract  the 
effects  of  two  decades  of 
massive  consolidation  in  the 
financial  services  industry.  A 
wave  of  mergers  and  acquisi¬ 


tions  fragmented  and  com¬ 
partmentalized  ctistomer  in¬ 
formation.  making  it  difficult 
to  know  what  each  business 
unit  W3S  doing  or  to  track 
customer  interactions. 

In  the  relationship-driven 
business  of  financial  services, 
that  spells  trouble.  A  narrow 
view  of  the  client  makes  inter¬ 
action  impersonal,  and  when 
a  salesperson  doesn't  know  a 
customer's  buying  habits,  it’s 
far  more  difficult  to  pitch  new 
products  that  speak  to  the 
customer’s  needs. 

FuD  Customer  View 

When  it  comes  to  CRM  soft¬ 
ware,  financial  services,  unlike 
manufacturing  or  retail  sales, 
is  a  completely  information- 


Financial  services  CRM  helps 
create  a  complete  picture  or 
customers.  %  Lucas  Mearian 


based  industry,  according  to 
Mindy  Propp>er.  an  analyst  at 
McLean.  Va. -based  Bearing- 
Point  Inc.  Buying  preferences, 
family  needs  and  retirement 
plans  are  among  the  many  bits 
of  information  that  must  be 
meticulously  tracked  so  finan¬ 
cial  services  firms  can  tailor 
products  to  individual  needs. 

But  despite  huge  invest¬ 
ments  in  CRM.  very  few  re¬ 
source  have  been  focused  on 
enhancii^  the  ctistomer  expe¬ 
rience.  according  to  a  recent 
survey  of  financial  institutions 
by  BearingPoint.  In  fact.  42% 
of  the  174  companies  surveyed 
still  interact  with  their  cus¬ 
tomers  within  product  silos. 

Propper  says  much  of  the 
customer  disconnect  is  the  re¬ 
sult  of  develc^ing  CRM  proj¬ 
ects  from  the  inside  out  and 
not  the  outside  in  ^  in  other 
words,  disregarding  what  the 
customer  might  want  in  favor 
of  what  the  business  wants. 

That  was  what  Bank  of  New 
York,  a  $63  billion  company, 
was  attempting  to  overcome 
with  its  $10  million  CRM  proj¬ 
ect.  Over  the  past  decade,  the 
bank  has  made  more  than  80 
acquisitions,  which  have  re¬ 
sulted  in  almost  as  many  new 
product  lines.  Joyce  says. 

Bank  of  New  York  hki  10 
sales-tracking  systems,  the 
majority  of  which  consisted 
of  rudimentary  to<^  such  as 
handwritten  address  books, 
Lotus  Notes  programs  or 
Excel  spreadsheets. 

"We  ended  up  with  a  slew  of 
disparate  sales  forces  through¬ 
out  the  globe  in  different 
product  areas.  We  didn’t  have 
one  place  where  we  could 
lo(A  to  see  what  we  were  do¬ 
ing  with  a  client  or  what  the 
opportunities  were  with  a  par¬ 
ticular  client.*  Joyce  says. 

The  Bank  of  New  York 
chose  Siebel  Systems  Inc’s 
eFtnance  software  to  tie  that 
customer  information  togeth¬ 
er.  Joyce  says  the  project  was  a 
success  bemuse  he  spent  an  I 


“inordinate”  amount  of  time 
getting  user  buy-in.  Yet  there 
was  still  resistance  from  sales 
and  business  managers,  who 
didn't  want  to  give  up  dneir 
customer  data  or  switch  to  an¬ 
other  system  for  tracking  it. 

“The  Important  point  on 
how  we  got  around  that  issue 
was  to  use  both  the  carrot  and 
the  sridL."  Joyce  says.  He  also 
kept  the  projea  focused  only 
on  the  sales  force,  with  no  call 
center  or  back-office  adminis¬ 
tration  tie-ins.  in  order  to 
avoid  scc^  creep. 

Data  Overload 

Kathleen  Khirallah,  an  analyst 
at  TowerCroup  in  Needham. 

'  Mass.,  says  the  financial  ser¬ 
vices  industry  is  ahead  of  the 
curve  in  hs  use  of  CRM  soft¬ 
ware,  but  it  also  faces  far 
greater  challenges  than  other 
industries  in  getting  to  a  single 
view  of  the  customer  across 
the  entire  institution. 

1  don’t  think  they’re  pro¬ 
viding  Up  service  to  the  prin¬ 
ciples  of  CRM.  I  realty  do 
think  banks  understand  work¬ 
ing  with  customers  well  is 
critical  to  their  success." 
Khirallah  says.  "It’s  kind  of 
the  blessing  and  the  curse. 
They’re  good  at  it,  but  there’s 
just  so  much  that  they  have  to 
coordinate,  there  are  chal¬ 
lenges  along  the  way." 

Smaller  companies  might 
have  an  internal  culture  that 
supports  customer  service, 
even  without  the  software  to 
automate  those  services.  Larg¬ 
er  financial  services  firms, 
however,  have  to  use  software 
to  deal  with  far  more  informa¬ 
tion  to  give  the  illusion  of  a 
personal  touch. 

"ReaUy  large  institutions 
that  rely  on  software  and  have 
made  those  investments  some¬ 
times  don't  have  that  service 
culture.  So  they  have  other 
challenges."  Khirallah  says. 

Robert  Haggerty,  an  analyst 
at  TowerCroup.  says  firms 
that  perform  l^t  in  financial 
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services  are  ones  that  cultivate 
and  manage  relationships. 
Whether  it's  banking,  broker¬ 
age,  investment  management 
or  insurance  services,  it's  criti¬ 
cal  to  understand  and  retain 
information  about  customers, 
he  says. 

Haggerty  says  automation 
of  data  life-cycle  management 
is  the  crucial  next  step,  when 
customer  representatives  will 
be  automatically  alerted  to 
events  in  the  consumer's  life. 
Once  the  salespeople  have 
that  initial  information  about 
a  customer,  he  says.  *Tbey1I 
have  a  good  excuse  to  call  and 
get  a  sale  out  of  h."  O  48975 


Unifying  Customer  Views 
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Gaining 

Taxpayer 

Respect 

( icncrnnicnt  C'RM  has 
a  priNatc-scctorgoal: 
customer  siitisfliction. 

\aiiv.'  Ivi'i'i'- 


Amik  ^  Mk-  o»  t  K\i  jsa  poor 

fu  lor  the  public  scct»»r.  mdnv  i:o%vrn- 
mom  .tjroncio?.  arc  non  onthu>iaMicalI\ 
cmbr.icit>i.'  the  ivchniiU»^\. 

In  fact.  M>mo  analysts  sii\  tlto  uowrn- 
mom  si-otor  iv  the  hottest  i'r4iwiii  market 
tor  (IRM-  Barton  toWJonborit.  pn.'sjJont  oi'IsM  Inc., 
j  consultancy  in  Bothesd.!.  Md,.  says  he  expects  eov- 
cmmcni  spemdinj.’  4»n  CR.\t  sijftw'are  nil)  ^ron  hr'.i 
in  20cU.  reas'hinjf  up  to  S2  billion  in  sales. 

The  }t«»vemnicni.  of  c«>ursc.  dt*esn't  sell  many  prod¬ 
ucts  or  sen  ices.  and  m«*st  a^o'ncies  aren’t  usirn;  CRM 
m  irK'rcJsc  revvnue.  Hut  Goldenbcrji  says  several  of 
the  t«her  reasons  for  busines-scs  to  use  CRM  also  ap-  | 
ply  in  the  public  stvtor:  cost  reduction,  product  and 
serv  ice  improvement,  belter  customer  knowledge 
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and  higher  employee  morale,  to  name  a  len.  To 
achievi*  diess'  benehts,  agencies  are  often  using  con¬ 
ventional  software,  call  centers  and  the  kinds  of  tm- 
line  sen  ices  offered  by  major  retailers,  tven  though 
gmernmeni  agencies  aren’t  driven  by  profit,  rhev  do 
want  III  serve  ihe  public  better  and  Kvome  more  ef- 
lieienl.  In  this  sector.  (.’RM  is  closely  related  to  “e- 

governtnem'  —  using  techni>Iogy  tike  online  services 

to  make  it  easier  for  ta.spayers  to  get  services. 

On  the  Internal  Revenue  Serv  iee  Web  site,  for  ex¬ 
ample.  professional  tax  preparers  can  see  customers’ 
IRS  accounts,  file  returns  and  resolve  tax  problems, 
(.orporations  can  also  file.  Because  of  security  and 
privacy  concerns,  the  agency  isn’t  ready  to  give  tax- 
p.iyers  the  same  kinds  of  access.  But  more  than 
25.000  tax  professionals  are  using  IKS  •e-sv'rvices." 
says  Richard  Skomy,  the  agency ’s  deputy  associate 
(do  for  program  management. 

One  Stop  for  Answers 

State  and  focal  governments  are  also  jumping  on  the 
CR.M  bandwagon.  The  Dade  County.  Fla.,  gov  ern¬ 
ment  is  working  with  the  city  of  Miami  to  install  a 


that  seek.s  to  improve  responi^-s  to  eiii/ens  across  all 
the  agencies.  "It's  an  obligation  of  the  government  to 
serve  eiti/ens  in  ihis  manner,  ”  she  says.  "It  increases 
citizens’  confidence  in  their  government.  ” 

The  Mianii-Oade  Answer  Center  uses  Motorola 
Ine.  s  Customer  Service  Request  system,  which  is 
CRM  software  for  the  public  sector.  Motorola's  exper¬ 
tise  began  with  ‘>11  emergency  call  centers  and  dis¬ 
patch  systems.  In  many  government  (iKM  protects, 
the  vendors  are  mainstream  CRM  suppliers,  Fhe  IRS. 
for  example,  uses  IVopleSolt  CRM  lor  Government. 

lodJ  Sickles,  a  partner  in  the  federal  practice  of 
ninsiiUing  firm  Accenture  l  td,  in  Keston.  Va..  says  call 
centers  are  nothing  new  for  government,  but  in  manv 
eases  the  call  centers  are  silos  that  are  poorly  inte¬ 
grated  with  the  agencies'  other  business  priK-esses. 

ISM’s  Goldenberg  says  that  many  government  or¬ 
ganizations  are  reluctant  to  measure  service  delivery 
and  track  customer  interactions  because  oj  the  pub¬ 
lic  secttir’s  prevailing  risk-averse  culture,  where  a 
relatively  minor  dip  in  customer  satisfaction  can  be 
grist  for  a  heated  congrcssiorutl  hearing. 


Government 


CRM  MATURITY  LfVEL  U>w 


MaiwAy  fating  by  Barton  Ookfanbera 
BMIrc. 


Grade  basid  on  oosiieROIlncsastute 
anafyadbyMjctgualteewMnc 


joint  call  center  that  will  handle  all  nonemergency 
serv  ice  requests  beginning  in  November.  Residents 
will  be  .ible  to  dial  .^11  whether  they  want  to  apply  for 
a  business  permit  or  repon  an  abandoned  car.  a  stray- 
cat  or  a  pothole.  The  center  won't  merely  answer 
questions;  it  will  fill  out  work  orders  for  city  and 
county  emph'yecs.  dispatching  a  building  inspector 
or  dikgcalcher  as  needed. 

Ilie  .Miami-Uade  511  Answer 
(X'nter  will  be  the  nation's  first 
to  handle  calls  for  both  a  ciiv 
and  a  county,  says  |une  Randall, 
assistant  Jiretlor  of  the  sDunty’s 
enterprise  twhnology  services 
department.  I’rojeet  leaders 
hope  that  many  of  the  nearly 
three-dozen  municipalities  in 
DadeCiouniy  will  join. 

GKM  can  .ilso  improve  emirdl- 
nation  among  federal  agencies, 
w  here  peiiple  don't  know  whom 
to  call  jpout  passports  (the  Slate 
Department),  student  loans  iihe 
Department  ofKdueaiion)  or 
tooj  poisoning  ( the  KhkI  and 
Drug  .Administration).  If  a  citi¬ 
zen  calls  the  wrong  agency,  it 
can  take  many  more  calls  and 
transfers  to  find  the  right  one. 

■*  I’hey  often  get  on  that  carou.sel 
of  being  shunted  anmnd"  from 
I'lTicc  to  *»tfieo.  says  rheresa 
•Nasif.  director  «if  the  Federal  Cit¬ 
izen  Information  Center,  an  of¬ 
fice  of  the  (ieneral  Serv  ices  Ad- 
mmisiration. 

Nasifs  office  iiperates  the  fed¬ 
eral  g«>vernment’s  centra!  Web 
site,  www./trsrgovj.*ov.  and  the 
l-fHW-FFDINFO  call  center.  To¬ 
gether  (hey  will  receive  more 
than  2,^0  million  customer  con¬ 
tacts  this  year.  Nasif  als<*  heads  a 
program  c-illed  U.SA  .Services 


SPECIAL  CHARACTEinSTICS:CRir$ 
•ntegrationchalengesaremany- 
$to\«pioed  systems  ard  agencies,  seci^ 
rity  and  prwacy  concerns,  and  Ihe  preva¬ 
lence  ol  older  maffilrameHased  sys¬ 
tems.  But  agetKaes  are  ernbracirH]  CRM. 
particuiarly  coriventional  softMere  for  cal 
centers  and  online  services,  in  an  effort 
to  increase  citcen  satistaction. 


KEY  VENDORS:  Motorola  Inc..  Grade 
Cor^.  ReopieSofI  Inc.  SAPAG.Siebel 
Systems  Inc. 


MARKET  WATCH:  WirfcNnde  CRM 
license  revenue  for  nabonal  and  inler- 
national  governfnerits  is  predicled 
to  grow  from  S52  rrilion  in 2003  ft) 
S76miionin2008.ft)rlocalgovem- 
menis.  CRM  revenue  s  pretSded  to 
grow  from  S47  rniion  (0  S86  rnMon  in 
the  svne  period. 
6mr0«wM.MKrt20(M 


Better  Citizen  Service 

One  government  th;H's  using  CRM  as  a  performance 
improvemem  twi  is  the  city  of  BaUimiire.  which  uses 
its  .511  cal!  center  as  one  source  of  information  for 
its  award-winning  CitiStat  program.  Mayor  Martin 
O'Malley  uses  complaint  rates  and  many  iUher  pieces 
ol  data  to  rigonnisly  track  the  performance  of  city 
departments.  Matt  (Jallagher,  CiliStat's  director,  says 
Baltimore  gets  I  million  calls  a 
year  from  residents.  Many  of 
them  go  to  a  5U  call  center  run¬ 
ning  MoioroLTs  software. 

Another  difference  hetwci-n 
public-  ;ind  private-sector  CR.M 
programs  stems  from  citizens' 
coneern.s  aK>ul  the  government 
intruding  on  their  lives.  For 
example,  federal  agencies  are 
generally  forbidden  to  track  the 
online  activities  of  individual 
visitors  to  their  Web  sites.  How¬ 
ever.  Accenture's  Sickles  says 
privacy  safeguards  need  not  boa 
show -stopper. 

The  return  on  investment  is 
measured  differently  because 
CRM  is  likely  to  have  only  an 
indirect  effect  on  government 
revenue,  if  it  has  any  effect  at  alt. 
But  the  IRS  modernization  prt*- 
gram  is  based  on  the  notion  that 
efficient,  effective  ta.x  collection 
may  help  the  bottom  line. 

Goldenberg  suggests  that  ta.x- 
payers  who  have  had  a  good  ex¬ 
perience  in  their  interactions 
with  the  government  may  be 
more  willing  to  pay  taxes  and 
fees  for  the  services  government 
provides.  O  48976 


Ferris  is  a  freelance  writer  in 
Chevy  Chose,  Md.  Conruc f  her 
at  ferrisna'att.net. 
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Preventinga 
Data  Overdose 


Phamiacvutiails 
('RM  manages  multi¬ 
ple  tyjx’s  ofeustumers 
and  regulations. 

|i\  Alan  R.  i  arls 

AsKBOKls\tlM^KsoS.<ct-nior 

dircetor  of  infonnaiton  at  Urad- 
Icy  [’harmaecuticjls  Ine..  about 
(IRM.  and  you’ll  gel  an  carful. 
He’ll  tell  \i*u  aK*ul  the  hlecin»nie 
Hcc«>rds  and  Signatures  .Ael,  the  Pre¬ 
scription  Drug  Matieting  Act  and 
some  of  the  other  federal  regulations 
and  industry  best  practices  with  which 
I  his  company  must  comply. 

I  But  like  every  other  business,  the 
I  Malvern.  Pa.-based  provider  of  pre- 
seriptitm  dermatology  pntJuets  must 


jIm»  make  a  profit.  Meyers«*n  s;iys  his 
I  lirm  selected  software  from  Stayin- 
Front  Ine.  that’s  tailored  t«i  the  phar¬ 
maceutical  industry,  because  inaddi- 
tittn  {!>  the  eomplevity  »»f  regulations, 

;  "in  the  pharma  industry,  we  ha\e  threv 
layers  of  customers. '  which  necessi¬ 
tates  a  special  styk  ttf  ( :R  M. 

I  In  order  f«»r  a  ( .KM  s\Mim  to  work. 

I  it  must  eomhine  input  about  drug  s;iles 
from  pharmav-ies  with  simiiarJ.ua 
from  insurers  and  liospii.ik  and  then 
map  that  ag;tinst  advert  iNing  efforts 
and  promotional  aetiv  (til's  w  ith  specif 
ic  physicians.  s.i\s  Mi-u-rvui. 

ludy  Haiuwer.  an  .inalysi  .u  j  ii^  Si : 
ence  Insights  in  Kraniingh.un.  M.iss., 
says  CRM  is  different  in  this  iodustry 
bec.mse  of  the  nature  of  sales  and  the 
regulatory  requirements. 

"In  pharmaceuticals,  represent.uives 
Jo  not  write  orders;  they  work  with 
physicians  topnwide  information 
about  their  pmduets.  referred  to  as 
detailing."  she  says. 

Iliey  j|st»  m.iy  eolleet  .ind  report 
information  aK>ut  adverse  events 
and  or  reimbursement  issues,  which 
are  often  handled  by  spec  ial  call  cen¬ 
ters  c*onfigured  to  collect  and  assist  in 
these  tninsaeiionv"  s.iys  Hamwer. 


Pharmaceuticals 
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I  MatuWy  (Sing  tw  Barton  Gotdartow. 
tSMi^. _ 
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SPECIAL  CHAMCTEmsnCS. 

The  induslry  lequoes  a  cantaed  vew  of 
sales,  martaina  and  adMrtsng 
tan  tnom  pharmacies  and  physoars.  dtta 
aixiUatkrroeventsandfeanbtfsenMit 
issues,  and  regulalary  Gonviance  data 


KEY  VEPNKWS:  OerairttelnGOTalnMl 
kic..  SAP  A6.  SiM  SnsI^  Inc.. 
StayinFrort 


"Pharmaceulical  companies  h-ive 
generally  bevn  eariy  .idv»pters  of 
1  ,R.M."  s,iy s  1  lale  Hagemeyer.  .in  .iru- 
lyst  at  liariner  Ine.  "  niey  .ire  now  ma¬ 
ture  Users  vv  ith  wide  adoption  aen'^s 
the  industry,  sometimes  in  a  sienna- 
or  third-generation  implementation  " 
C  48978 


Building 

Patient 

Loyalty 

Health  care  ('.R.\l 
must  address  patient.s'. 
hospitals'  and  insurers' 
needs.  lA  .\l.in  R.  I  arN 


Wi 


■  I-  1M>\  I  iHi  CRM  in  the  das- 
j  sic  sense.'’  explains  [ohn 
Zimmer,  vice  president  of 
marketing  at  Toshiba  Amer¬ 
ica  Medical  Systems.  Although  the 
company's  customer  management  sys¬ 
tem  began  as  a  sales  force  automation 
project,  "we  have  moved  well  beyond 
w  hat  people  mean  by  (^RM."  he  says. 

Toshiba  America,  which  deals  in 
di.ignostic  imaging  systems  for  health 
care  pnwiders,  uses  a  custom-built  ap¬ 
plication  based  on  Cognos  Inc.'s  busi¬ 


ness  intelligence  wfiware  to  track  a 
!  wide  range  of  faeu»rs  such  as  customer  t 
I  satisfaction  indices,  changes  in  pereep- 
I  tion  about  its  products  and  long-term 
I  customer-retention  data. 

Zimmer’s  style  of  CRM  may  be 
'  unique,  but  the  challenges  he  faces  arc 
not  uncommon  in  health  care:  There  i>  , 
no  standard  way  of  doing  CRM  and  no  | 
clear  loader  among  the  vendors.  I 

Hospitals  have  Kt'n  slow  to  adopt 
'  CRM.  but  experts  say  the  need  to  con-  ' 


tain  costs,  build  loyalty  among  patients  j 
'  and  provide  better  service  has  spurred  • 

I  hospitals  to  l»H>k  at  varUius  aspects  of  ' 
CRM.  including  call  center  support  ' 

and  self-service  functions. 

Bui  the  health  care  industry  operates  ' 
under  a  heavy  di»s.ige  of  government  i 

I  and  industry  regulation,  .md  CRM  | 

I  Mvftware  isoften  i-uslomired  to  sup-  I 
I  ponihose requirements. plus reim-  ' 

bursement  priKVsses  and  call  centers. 
And  the  need  to  ensure  patient  privacy  i 
means  that  many  of  the  daia-sharing 
functions  of  irRM  aren't  acceptable.  j 

Joiinne  (iaiimi.  an  analyst  at  liartner 
Inc.,  says  neither  payer  organizations 
nor  health  care  providers  have  ad-  I 

vanecd  far  down  the  CRM  path;  both  I 
favor  tactical.  p«»int  solutions.  For  in-  ^ 
stance.  Galimi  says  she  sees  oi^ni/a- 
tiivns  trying  to  automate  s.iles  cycles  or 
improve  customer  service  and  suppi*n 
—  especially  through  implementing 
Web-based  customer  self-servicq,  ' 

So  w  hile  the  large  players  stiH’share 
a  big  pan  of  the  market,  niche  players 
are  having  a  field  day.  Galimi  says.  ] 
•TTtc  payers,  for  example,  tend  to  think  | 
the  bigger  software  players  are  pricey.  I 
But  that  will  change  as  these  organiza¬ 
tions  mature  and  begin  to  reconsider  ^ 
the  benefits  of  more  of  a  suite-based  I 

approach  to  CRM."  she  says.  O  48977  I 
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CRM  MAtWrTT  LEVEL  Medium 
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OndebecdonpoGtaeRQltiCL. . 
andptatvNuciBusReaeaRMncL 


SnCM.  CHARACTERISTICS;  CRM 
software  6  ohen  customoed  tor  the  av- 
dustiytosupportfagutaoryreqwe- 
ments.  reaitbutsemem  processes  and 
cal  centeis.  In  the  ndustry.  the  need  10 
ensure  patient  privacy  tscnbcal. 


KEY  VENDORS;  BMOiacieCorp.. 

PeopieSottlnc..SAPA6.Siebel 

Systerretnc 


MARKET  WATCH :  Woridwvfe  CRM 
icense  revenue  farthe  heath  caeprowdai 
ordu^  6  predeted  to  grow  from  Sn2 
mliDnin2003to$e0n«onby200e. 
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Earls  is  a/rei-/anee  writer  in  f  runWin. 
Mass.  Contact  him  uf  uluncur/s  o 
comciisf.ntf. 


Taxpayer 


Respect 


Government  CRM  has 
a  private-sector  goal: 
customer  satisfaction. 
Bv  Nancv  Ferris 


After  years  of  otSMissiNc  crm  as  a  poo 
fit  for  the  public  sector,  many  govern¬ 
ment  agencies  are  now  enthusiastically 
embracing  the  technology. 

In  fact,  some  analysts  say  the  govern¬ 
ment  sector  is  the  hottest  growth  market 
for  CRM.  Barton  Goldenberg,  president  of  ISM  Inc., 
a  consultancy  in  Bethesda.  Md.,  says  he  expects  gov¬ 
ernment  spending  on  CRM  software  will  grow  30% 
in  2004,  reaching  up  to  S2  billion  in  sales. 

The  government,  of  course,  doesn't  sell  many  prod 
ucu  or  services,  and  most  agencies  aren't  using  CRM 
to  increase  revenue.  But  Goldenberg  says  several  of 
the  other  reasons  for  businesses  to  use  CRM  also  ap¬ 
ply  in  the  public  sector  cost  reduction,  product  and 
service  improvement,  better  customer  knowledge 


and  higher  employee  morale,  to  name  a  few.  To 
achieve  these  benefits,  agencies  are  often  using  con¬ 
ventional  software,  call  centers  and  the  kinds  of  on¬ 
line  services  offered  by  major  retailers.  Even  though 
government  agencies  aren't  driven  by  profit,  they  do 
want  to  serve  the  public  better  and  become  more  ef¬ 
ficient.  In  this  sector,  CRM  is  closely  related  to  "e- 
govemmenr  —  using  technology  like  online  services 
to  make  it  easier  for  taxpayers  to  get  services. 

On  the  Internal  Revenue  Service  Web  site,  for  ex- 
ampJe.  professional  tax  preparers  can  see  customers' 
IRS  accounts,  file  returns  and  resolve  tax  problems. 
Corporations  can  also  file.  Because  of  security  and 
privacy  concerns,  the  agency  isn't  ready  to  give  tax¬ 
payers  the  same  kinds  of  access.  But  more  than 
25.000  tax  professionals  are  using  IRS  “e-services." 
says  Richard  Skomy,  the  agency's  deputy  associate 
CIO  for  program  management. 

One  Stop  for  Answers 

State  and  local  governments  are  also  jumping  on  the 
CRM  bandw^a  The  Dade  County.  Fla.,  govern- 
m^t  is  working  with  the  city  of  Miami  to  insull  a 
iotnt  call  center  that  will  handle  all  nonemergency 
service  requests  beginning  in  November.  Residents 
will  be  able  to  dial  3U  whether  they  want  to  apply  for 
a  business  permit  or  report  an  abandoned  car.  a  stray 
cat  or  a  pothole.  The  center  won't  merely  answer 
questions;  it  will  fill  out  work  orders  for  city  and 
county  employees,  dispatching  a  building  inspector 
or  dogcatcher  as  needed 
The  Miami-Dade  3U  Answer 
Center  wiU  be  the  nation's  first 
to  handle  calls  for  both  a  city 
and  a  county,  says  June  Randall, 
assistant  director  of  the  county's 
enterprise  technology  services 
department.  Project  leaders 
hope  that  many  of  the  nearly 
three-dozen  municipalities  in 
Dade  County  will  join. 

CRM  can  also  improve  coordi¬ 
nation  among  federal  agencies, 
where  people  don't  know  whom 
to  call  about  passpons  (the  State 
Department),  student  loans  (the 
Department  of  Education)  or 
food  poisoning  (the  Food  and 
Drug  Adminifitcatioo).  If  a  citi¬ 
zen  calls  the  wrong  agency,  it 
can  take  many  more  calk  and 
transfers  to  find  (be  right  one. 

They  often  get  on  that  carousel 
of  being  shunted  around"  from 
office  to  office,  says  Theresa 
Nasif.  director  of  the  Federal  Cit¬ 
izen  Information  Center,  an  of¬ 
fice  of  the  General  Services  Ad- 
ministratiorL 

NasiTs  office  operates  the  fed¬ 
eral  government's  central  Web 
site.  www,ff/stgov.gov.  and  the 
1-800-FEDINFO  caU  center.  To¬ 
gether  they  will  receive  more 
than  230  million  customer  con¬ 
tacts  this  year.  Nasif  also  h^aj5  a 
program  called  USA  S«vices 


that  seeks  to  improve  responses  to  citizens  across  all 
the  agencies.  “It's  an  obli^tion  of  the  government  to 
serve  citizens  in  this  manner,"  she  says.  "It  increases 
citizens'  confidence  in  their  government." 

The  Miami-Dade  Answer  Center  uses  Motorola 
Inc.'s  Customer  Service  Request  system,  which  is 
(ZRM  software  for  the  public  sector.  Motorola's  exper¬ 
tise  began  with  911  emergency  call  centers  and  dis¬ 
patch  systems.  In  many  government  CRM  projects, 
the  vendors  are  mainstream  CRM  suppliers.  The  IRS. 
for  example,  uses  PeopleSoft  CRM  for  Government. 

Todd  Sickles,  a  partner  in  the  federal  practice  of 
consulting  firm  Accenture  Ltd.  in  Reston.  Va..  says  call 
centers  are  nothing  new  for  government,  but  in  many 
cases  the  call  centers  are  silos  that  are  poorly  inte¬ 
grated  with  the  agencies'  other  business  processes. 

ISM’s  (^Idenberg  says  that  many  government  or¬ 
ganizations  are  reluctant  to  measure  service  delivery 
and  track  customer  interactions  because  of  the  pub¬ 
lic  sector's  prevailing  risk-averse  culture,  where  a 
relatively  minor  dip  in  customer  satisfaction  can  be 
grist  for  a  heated  congresslonaJ  hearing. 

Better  Citizen  Service 

One  government  that's  using  CRM  as  a  performance 
improvement  tool  is  the  city  of  Baltimore,  which  uses 
its  311  call  center  as  one  source  of  information  for 
its  award-winning  CitiStat  program.  Mayor  Martin 
O’Malley  uses  complaint  rates  and  many  other  pieces 
of  data  to  rigorously  track  the  performance  of  city 
departments.  Matt  Gallagher.  CidStat's  director,  says 


Baltimore  gets  1  million  calls  a 
year  from  residents.  Many  of 
them  go  to  a  311  call  center  run¬ 
ning  Motorola's  software. 

Another  difference  between 
public-  and  private-sector  CRM 
programs  stems  from  citizens' 
concerns  about  the  government 
intruding  on  their  lives.  For 
example,  federal  agencies  are 
generally  forbidden  to  track  the 
online  activities  of  individual 
visitors  to  their  Web  sites.  How¬ 
ever.  Accenture's  Sickles  says 
privacy  safeguards  need  not  be  a 
show-stopper. 

The  return  on  investment  is 
measured  differently  because 
CRM  is  likely  to  have  only  an 
indirect  effect  on  government 
revenue,  if  it  has  any  effect  at  alL 
But  the  IRS  modernization  pro¬ 
gram  is  based  on  the  notion  that 
efficient,  effective  tax  collection 
may  help  the  bottom  line. 

(ktidenberg  suggests  that  tax¬ 
payers  who  have  had  a  good  ex¬ 
perience  in  their  interactions 
with  the  government  may  be 
more  willing  to  pay  taxes  and 
fees  for  the  services  government 
provides.  O  48978 

Ferris  is  a  freelance  writer  in 
Chevy  Chase,  Md.  Corttact  her 
at/etTisn@att.net. 
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Preventinga 
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Riarmaceuticals 
CRM  manages  multi¬ 
ple  types  of  customers 
and  regulations. 

By  Alan  R.  Earls 

Ask  BORIS  MEYERSON.  senior 

dire«or  of  information  at  Brad¬ 
ley  Pharmaceuticals  Inc.,  about 
CRM,  and  you'll  get  an  earfuL 
Hell  tell  you  about  the  Electronic 
Records  and  Signatures  Act.  the  Pre¬ 
scription  Drug  Marketing  Act  and 
some  of  the  other  federal  regulations 
and  industry  best  practices  with  which 
his  company  must  comply. 

But  like  every  other  l^stness.  the 
Malvern,  Pa. -based  provider  of  pre¬ 
scription  dermatology  products  must 
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ness  intelligence  software  to  track  a 
wide  range  of  factors  such  as  customer 
satisfaction  indices,  changes  in  percep¬ 
tion  about  its  products  and  long-term 
customer-retention  data. 

Zimmer's  style  of  CRM  may  be 
unique,  but  the  challenges  he  faces  are 
not  uncommon  in  health  care:  There  is 
no  standard  way  of  doing  CRM  and  no 
clear  leader  among  the  vendors. 

Hospitals  have  been  slow  to  adopt 
CRM,  but  experts  say  the  need  to  con- 


Health  care  CRM 
must  address  patients’, 
hospitals’  and  insurers’ 
needs.  B\'  Alan  R  Earls 


WE  DONT  DO  CRM  io  the  clas¬ 
sic  sense,”  explains  John 
Zimmer,  vice  president  of 
marketing  at  Toshiba  Amer¬ 
ica  Medical  Systems.  Altbou^  the 
company's  customer  management  sys¬ 
tem  began  as  a  sales  force  automation 
project.  ”we  have  moved  well  beyond 
what  people  mean  by  CRM,”  be  says. 

Toshiba  America,  which  deals  in 
diagnostic  imaging  systems  for  health 
care  providers,  uses  a  custom-built  ap¬ 
plication  based  on  Cognos  Inc’s  busi- 
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also  make  a  profit.  Meyerson  says  his 
firm  selected  software  from  Stayin- 
Front  Inc.  that’s  tailored  to  the  phar¬ 
maceutical  industry,  because  in  addi¬ 
tion  to  the  complexity  of  r^ulations. 
“in  the  pharma  industry,  we  have  three 
layers  of  customers.”  which  necessi¬ 
tates  a  special  style  of  CRM. 

In  order  for  a  CRM  system  to  work, 
it  must  combine  input  about  drug  sales 
from  pharmacies  with  similar  data 
from  insurers  and  hospitals  and  then 
map  that  against  advertising  efforts 
and  promotional  activities  with  specif¬ 
ic  physicians,  says  Meyerson. 

Judy  Hanover,  an  analyst  at  Life  Sci¬ 
ence  Insights  in  Framingham.  Mass., 
says  CRM  is  different  in  this  industry 
because  of  the  nature  of  sales  and  the 
regulatory  requirements. 

“In  pharmaceuticals,  representatives 
do  not  write  orders;  they  work  with 
physicians  to  provide  information 
about  their  products,  referred  to  as 
detailing,”  she  says. 

“They  also  may  collect  and  report 
information  about  adverse  events 
and/or  reimbursement  issues,  which 
are  often  handled  by  special  call  cen¬ 
ters  configured  to  collect  and  assist  in 
these  transactions,”  says  Hanover. 


tain  costs,  build  loyalty  among  patients 
and  provide  better  service  has  spurred 
hospitals  to  look  at  various  aspects  of 
CRM.  including  call  center  support 
and  self-service  functions. 

But  the  health  care  industry  operates 
under  a  heavy  dosage  of  government 
aiKi  industry  regulation,  and  CRM 
software  is  often  customized  to  sup¬ 
port  those  requirements,  phis  reim¬ 
bursement  processes  and  call  centers. 
And  the  need  to  ensure  patient  privacy 
means  that  many  of  the  data-sharii^ 
functions  of  CRM  aren't  acceptable. 

Joanne  Galimi.  an  analyst  at  Gartner 
Inc.,  says  neither  payer  organizations 
nor  health  care  providers  have  ad¬ 
vanced  far  down  the  CRM  path;  both 
fovor  tactical,  point  solutions.  For  in¬ 
stance,  Galimi  says  she  sees  organiza¬ 
tions  trying  to  automate  sales  cycles  or 
improve  customer  service  and  support 
—  especially  through  implementing 
Web-based  customer  self-service. 

So  while  the  large  players  still  share 
a  big  part  of  the  mari^  niche  players 
are  having  a  field  day,  says. 

“The  payers,  for  example,  tend  to  think 
the  bigger  softv^aie  players  are  pricey. 
But  that  will  change  as  these  organiza- 
tioos  mature  and  begin  to  reconsider 
the  benefits  of  more  of  a  suite-based 
approach  to  CRM,"  she  says.  O  48077 


CRM  MATURITY  UVEl 


“Pharmaceutical  companies  have 
generally  been  eariy  adopters  of 
CRM."  says  Dale  Hagemeyer.  an  ana¬ 
lyst  at  Gartner  Inc.  “They  are  now  ma¬ 
ture  users  with  wide  adoption  across 
the  industry,  sometimes  in  a  second- 
or  third-generation  implementation.” 
046878 


Edris  is  o/reeionce  writer  tri  Frontiin, 
Mass,  Contact  him  at  aianearis@ 
comeastnet. 
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MARK  HALL 

Personalize 
Your  Job 


areer  opportunities  in  corporate  IT  are  under  siege.  What  with  threats  from 
fc  offshore  outsourcers,  infrastructure  service  providers,  marketing  depart¬ 
ments - Marketing?  You  bet.  The  same  men  and  women  who  eschew  pock- 

let  protectors  and  think  client/server  is  where  they  itemize  a  tin  to  a  waiter  on 


c 

^^^Met  protectors  and  think  client/server  is  where  they  itemize  a  tip  to  a  waiter  on 
an  expense  account  afrer  a  customer  lunch.  Yep,  they’re  afrer  your  job,  espe- 
ciaUy  if  you’ve  built  your  career  on  deploying  CRM  or  personalization  applications. 

It’s  not  that  marketing  folks  are  vicious,  career- 
obsessed.  money-hungry  evildoers  (well,  OK,  some  of 
them  arc);  it’s  just  that  an  IT  team’s  contribution  to  the 


value  of  how  a  company  reaches  customers  and  then 
maintains  those  relationships  is  diminUhing  Technol¬ 
ogy  isn't  the  problem,  so  you’re  not  the  solution. 

Last  month.  1  was  chatting  with  Del  Rose,  director 
of  global  e-commerce  at  InterContinental  Hotels 
Group,  at  the  company’s  U.S.  headquarters  in  Atlanta. 
He  was  telling  me  about  the  personalization  technology 
underpinning  Priority  Club,  the  online  service  for  fre¬ 
quent  guests  of  IHG’s  3.500  hotels  woridwide.  He  ex¬ 
plained  that  the  overall  system  is  complex. 

It  uses  a  personalization  ei^ine  from  Art 
Technolt^  Group  (ATG)  in  C:ambridge. 

Mass.,  and  links  it  to  U  back-end  systems 
to  serve  customers  in  six  langyi^iges. 

Sa  when  IHG  recently  rolled  out  a  ser¬ 
vice  that  permits  a  business  traveler’s  assis¬ 
tant  to  access  a  Priority  Club  member’s  ac¬ 
count  to  change  travel  plans,  a  whole  rtew 
role  had  to  be  created,  one  with  unique  au¬ 
thentication  rights  and  priWleges.  In  effect, 

IHG  had  to  create  a  personalized  profile  for 
a  user  who  never  traveled.  Whaf  s  more, 
the  new  account  had  to  be  flexible  enough 

to  suit  the  preferences  of  individual  cus-  _ 

corners  for  how  they  want  their  assistants  to  access 
and  use  their  private  accounts,  not  for  bow  IHG 
defines  those  rights. 

Sounds  like  a  daunting,  time-constuning  IT  project, 
but  that  didn’t  turn  out  to  be  the 
“What’s  most  costly  and  time-consuming  is  thmUng 
through  the  problem,”  Rose  observes. 

IHG’s  marketers  figured  out  everything  they  wanted 
to  do  and  then  went  to  IT  with  the  idea.  They  under¬ 
stood  the  complexity  of  the  systems,  but  that  didn’t 
slow  them  down  for  a  minmp, 

"The  good  news,"  says  Rose,  “is  that  technology  is 
rarely  the  limiring  foctor." 

Good  news  for  whom?  Not  you.  Not  if  you’re  hung 
up  on  the  details  of  establishing  solid  connections 
between  an  Oracle  database,  a  Siebel  system  and 


ATG’s  personalization  engine.  That's  been  done  hun¬ 
dreds.  even  thousands  of  times. 

Certainly,  it  will  need  to  be  done  again  and  again.  But 
how  Important  is  that  to  your  company?  Scott  Todaio. 
director  of  commerce  and  retail  product  marketing  at 
ATG,  argues  that  “IT  will  always  be  involved  in  a  per¬ 
sonalization  project  because  of  the  back-end  systems 
and  will  have  some  control  mapping  it  out,  but  [the 
project!  will  be  led  by  marketii^  or  customer  service." 

You  will  no  longer  tell  others  what  can  be  done;  you 
will  be  told  what  will  be  done. 

“Technology  is  not  the  hard  part.”  says  Rose.  The 
hard  part  is  thinking  through  the  require¬ 
ments  process." 

In  other  words,  if  you’re  not  involved  in 
the  requirements  process,  you  may  be  rele¬ 
gated  to  becoming  a  simple  order-taker. 

And  that's  not  much  of  a  career. 

Luckily,  that’s  not  inevitable.  Getting  in¬ 
volved  in  requirements  planning  is  simply 
a  matter  of  volunteering.  Yes,  h  means 
more  meetings,  but  it’s  also  a  way  to  see 
bow  marketing  thinks  and  to  help  shape 
your  company’s  thought  process. 

Or  you  can  help  refine  the  requirements 
process.  For  example.  IHG  conducts  exten¬ 
sive  usability  studies  before  implementing 
significant  changes  to  customer-facing  services  on  Pri¬ 
ority  Qub.  The  con^noy  tests  proposed  updates  to  per¬ 
sonalization  features.  IHG's  IT  team  gets  involved  to  en¬ 
sure  that  customers  have  the  best  experience  possible. 

That’s  because  this  is  where  ITs  hands-on  technol¬ 
ogy  skills  can  shine.  You  know  what  a  system  is  capa¬ 
ble  of  and  how  it  can  be  leveraged  to  be  more  intuitive 
for  users  so  the  company  can  achieve  its  gftaU 
Let’s  face  it.  when  the  marketing  depanment  can 
call  Salesforce.com  and  order  instant  CRM  for  hun¬ 
dreds,  even  thousands  of  users,  the  days  of  IT  being 
the  center  of  the  automation  universe  are  numbered. 

But  the  need  for  revenue-generating  application  re¬ 
quirements  never  ends.  Fbr  that,  you  can  be  as  effec¬ 
tive  as  anyone  in  a  suit  And  maybe  mak»  ooe  or  two 

maiketers  nervous  about  their  jobs.  O  48277 


Transparency  -  the  New  Engine 
of  Growth  and  Greatness 

Critical  reading  for  IT  professionals  and  managers.  Succeed  by  learning 
how  the  Internet  and  open  IT  architectures  enable  companies  to 
become  open  enterprises  -  in  turn  competing  and  oerformino  better 


Reaction  from  business  leaders 

Don  Tapscott  and  David  Ticoll  hit  the  buils-eye  with 
The  Naked  Corporation.  The  demand  for  openness  and  candor  has  never 
been  greater.  The  Naked  Corporation  is  a  leadership  toolkit  for  turning  the 
relentless  demand  for  transparency  from  threat  to  advantage.’* 

—  A.G.  Lafley,  Chairman.  President  and  Chief  Executive.  Procter  &  Gamble 

“They’ve  done  it  again.  Tapscott  and  Ticoll's  capacity  to  combine  a  fresh 
and  authentic  perspective  with  real  world  data  has  once  again  opened  the 


How  the  Age  ofTransparencr 
Will  Reyolutiooize  Business 


“The  Naked  Corporation  argues, 
beautifully  and  persuasively,  that  there 
is  no  contradiction  between  good  business 
and  the  values  of  honesty  and  openness. 
This  book  belongs  in  the  briefcase  of  every 
right-thinking  manager  in  the  country." 

—  Malcolm  Gladwell.  author  of  The  Tipping  Point 


Media  Baaction  ^ 

"This  is  a  &esh  and  oompeUing  thesis, 
backed  ig>  some  persuasive  evideooe." 

-  BusinesWbek 


‘Tapscott  and  ncoll  pmAioi.  on«ip^»i«g 
evkkace  that  tnmspapBncy  ia  an 
inevilaUe  social  hh 

such  tnospareocy  is  good." 

-Fast  Company 
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labyrinth  of 
job  hunting  by 
matching  the 
right  IT  skills 
with  the  right 
IT  position. 
Find  out  more 
at: 

www.itcareers.com 


Helping  You 
GET  ONE! 

Search  our  jobs  database 
and  post  your  resume  on 
www.itcareers.com! 
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Servers 

“It  was  not  a  painful  proc¬ 
ess."  Glazier  said,  noting  that 
“there’s  a  ton  of  low-hanging 
fruit"  in  potential  server  cost 
savings.  But  there  were  some 
downsides,  be  added  The 
biggest  was  that  many  soft¬ 
ware  products  lack  the  ability 
to  use  all  the  application  proc¬ 
esses  on  servers  simultane¬ 
ously.  Glazier  also  said  tools 
for  monitoring  servers  that 
run  multiple  applications  “are 
still  not  sophisticated  enough 
■ . .  and  need  to  grow  up." 

Kelly  Quinn,  an  IDC  analyst 
who  spoke  at  the  event,  said 
that  a  significant  majority  of 
Windows.  Unix  and  Linux 
servers  still  support  only  one 
application  and  that  their  uti¬ 
lization  rates  can  be  &r  below 
those  of  traditional  main¬ 
frames.  Quinn  and  several  oth¬ 
er  users  and  analysts  said  it 
isn’t  unusual  for  servers  to  be 
running  at  less  than  20%  of 
their  processing  capacity. 
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|g  griiater  bystt-nis  ijfficiency 

I  In  one  case  study  presented 

at  the  conference,  Dennis  Call¬ 
ahan.  CIO  at  'The  Guardian 
Life  Insurance  Company  of 
America  in  New  Yorit,  said 
that  the  insurer’s  server  uti¬ 
lization  rate  has  shot  up  from 
just  4%  in  some  cases  to  an 
average  of  nearly  50%  over  the 
past  18  months. 

The  improvement  was  ac¬ 


complished  by  stacking  as 
many  as  four  or  five  applica¬ 
tions  on  each  server  as  new 
systems  came  online,  Bob 
Mathers,  second  vice  presi¬ 
dent  of  IT  operations  at  Guard* 
ian,  said  in  an  interview  after 
Callahan’s  presentatioa 
Guardian  has  installed  new 
blade  servers  from  IBM.  and  It 
recently  signed  a  $1  miUion 
contract  to  buy  12  of  the  ven¬ 
dor's  eServer  ^  570  Unix  sys¬ 
tems  to  support  further  con¬ 
solidation  moves.  Thus  far.  the 
insurer  has  reduced  the  total 
number  of  its  servers  from 
1,100  to  900,  Mathers  said.  He 
estimated  that  Guardian  is 
saving  ‘Elions  of  dollars  a 
year"  in  IT  costs,  although  he 
has  yet  to  perform  a  formal 
financial  analysis. 

Seeking  Acceptance 

Mathers  said  it  wasn’t  difltcult 
to  manage  the  cultural  shift  in¬ 
volved  in  havii^  several  work¬ 
groups  share  a  single  server. 

But  other  attendees  warned 
that  user  acceptance  can  be  a 
significant  problem  because 


workgroups  and  other  busi¬ 
ness  units  often  want  to  keep 
their  own  application  servers. 

Brig.  Gen.  Brad  Butler, 
deputy  CIO  of  the  VS.  Air 
Force,  said  that  some  "social 
engineering"  has  taken  place 
there  over  the  past  three  years 
to  convince  users  to  agree  to 
turn  off  their  servers  in  the 
spirit  of  greater  IT  efficiency. 

Butler  said  4^000  systems 
were  eliminated  as  pan  of  a 
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Vendors  Push  SMASH  Protocol  for  Managing  Servers 
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consolidation  project,  resulting 
in  annual  ouintenance  savings 
of  about  $100  miUkm.  Air  Force 
IT  managers  now  find  that  de¬ 
spite  some  initial  resistance, 
users  realize  "they  didn’t  give 
up  control  as  much  as  they 
s  gained  efficiency."  be  added 
Greg  Jackson.  CIO  for  the 
state  of  Ohio,  said  his  IT  man¬ 
agers  are  consolidating  469 
e-mail  servers  that  are  cur¬ 
rently  supponed  by  44  sys¬ 
tems  administrators.  The  ini¬ 
tiative  is  aimed  partly  at  sav- 
mg  on  the  cost  of  paying  the 
Administrators,  JaclcMo  said 
He  added  that  the  state  has 
begun  a  program  to  retrain  the 
e-mail  systems  administrators 
and  officr  IT  workers  who 
have  been  dt^laced  ftom 
their  jobs  so  they  can  woik  in 
new  areas,  such  as  application 
deveiopmenL 
The  Universit)'  of  Pennsyl¬ 
vania  in  Philadelphia  is  testing 
four  Uoux-based  servers  for 
possible  use  to  consolidating 
systems  in  its  data  center,  said 
Raymond  Davis,  the  schooPs 
«teculivc  director  of  systems 
engineering  and  operations. 
*Tbe  cost  savings  could  be 
terrific  for  us,"  Davis  said 
Henry  Holcombe,  senior 
vice  president  and  chief  tech¬ 
nology  officer  at  New  York- 
based  hosting  services  pro¬ 
vider  Globix  Corp.,  said  server 
consolidation  can  spawn  other 
problems,  such  as  increases  in 
power  and  cooling  require¬ 
ments  inside  data  centers. 

“Everybody  wants  to  go  to 
blade  servers  to  get  more 
functions  in  less  space,  but 
I’ve  found  they  require  two 
times  as  much  power"  as  con¬ 
ventional  servers,  Holcombe 
said  adding  that  blades  also 
can  generate  more  heat  than 
expected  O  40440 
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NEWS 


RFID  Adventure 


HtRE'S  THE  STATE  OF  THE  ART  for  RFID  tagging:  “At 
a  case-hy-casc  basis,  as  I  go  down  through  our  proc¬ 
ess,  I  validate  that  case,  A  tag  is  on  it.  I  encode  the  tag 
and  then  I  immediately  validate  that,  and  I  capture 
those  statistics.  If  it  doesn't  read,  I  can  pull  that  out 
and  put  another  tag  on  until  we  get  it  read.” 

That’s  what  Ray  Hagedorn,  an  IT  e.xccutive  at  Sara  Lee  Foods,  told 
Computerworld  reporter  Carol  Sliwa  recently  [QuickLink  49245], 
And  it's  not  just  that  the  tags  are  unreliable,  Flagedorn  says.  The 
middleware  is  halt-baked,  the  consultants  aren’t  much  help,  and  a 
real  return  on  investment  is  nowhere  in  sight. 


See?  It’s  not  just  you.  Everybody’s  RFID  project  is  like  that. 


1  he  lechnoloti)  reylly  JiH'sn'f  Wftrk  the  \\u>  it 
'houlJ  Ynu  rciillv  i’jn'f  point  an  RHli  reader  ai 
a  pallet  and  he  >>ure  ot  yteitinp  a  response  I’rttm 
the  tayts  on  each  carton.  All  those  dreams  i»t' 
kUn  \  ijiionariv's  ma>  come  true  sotnedaN,  hut 
nni  in  time  tor  your  project.  KKD  just  doesn't 
U'lrkvet.  {'his  sfulV really  isn't  readk. 

So  if  you're  facinii  .m  Kl  IP  mandate  from 
UalM.irf  or  the  1  >ctensi'  l)epjnmeni  i*r  some 
other  hilt  t.iistomer.  tli.it  means  yt'u  ha\e  to 
make  a  choice. 

^ou  can  hiok  at  your  RJ  M>proieci  either  as  a 
death  march  —  **ras  an  adventure. 

This  i>  no<»rdtii;»ry  M  projeit.  One  m  Jive 
RUD  tayts  dies-  The  signals  are  hU>cked  by  met¬ 
al  in  products,  by  shiny  packaging,  even  by 
thick  liquids.  If  y\*u  expect  KFII)  ttv  work  as  aJ- 
\  crtiM.‘d.  your  project  will  be  a  long,  horrible 
uakmg  nightmare.  .-Vnd  it  will  fail.  .And  every¬ 
one  connected  with  it  will  want  to  kill  you  lor 
putting  them  through  it. 

But  you've  still  got  to  meet  that  manJatc- 
U  hut  can  you  dor  ^■ou  can  forget  about  this  as  a 
conventional  IT  project  and  tre^at  it 
like  what  it  is:  an  expedition  into 
the  unknown. 

So  don't  pick  a  team  of  pcrt'cc- 
tionisis.  Pick  spii-and-bailing-wirc 
tinkerers  and  shade-tree  mechanics. 

Want  them  in  advance  that  the 
hardware  is  unreliable  and  that  the 
problems  are  intermittent.  The  ones 
for  w  honj  failure  isn't  an  option  will 
run  aw  ay  screaming. 

I'he  ones  who  are  left  w  ill  see  it 
as  a  challenge.  Failure  will  be  their 
daily  companion  —  right  up  until  it 
turns  into  success. 


Y**u  know  these  people.  For  them,  this  won’t 
be  an  endless  nightmare.  It'll  be  a  ehallcnge. 

The  tags  don't  wurk  reliably  *  These  people 
w  ill  test  cm  as  they  go  and  keep  testing  until 
they  can  sniff  nut  the  bad  ones  early,  rhey'll 
.idd  checksums  and  redundant  data  to  the  tags' 
eimtenis  and  put  the  smarts  to  verify  and  do  er¬ 
ror  ei'rrection  intii  the  softwan*.  It  may  not  be  a 
pretty  solution,  but  they'll  get  it  working. 

The  signals  can  t  make  it  all  the  way  through 
a  palletload  oi  cartons?  Ihey  'll  wurk  amund  it. 
maybe  by  scanning  each  c;>rt»,in  as  it's  added  to 
the  pallet,  then  linking  all  that  RFll)  informa- 
liim  in  the  database.  That  way,  once  that  pallet 
is  w  rapped  and  strapped,  if  they  can  successful¬ 
ly  scan  even  one  tag.  they  can  identify  every¬ 
thing  on  tile  skid. 

The  middleware  isn't  up  to  the  job?  The  data¬ 
base  is  wrong  for  the  usk?  Here’s  where  you'll 
probably  have  to  rein  in  their  urge  to  kludge. 
Evenrually  RFIH  technology  wilt  work,  and 
when  that  happens,  you'll  need  a  database  that 
scales  up  and  middleware  that  hasn’t  been 
hacked  to  a  fare-thce-well. 

But  for  everything  else,  give  your 
RFU)  people  plenty  of  room  to 
experiment.  Their  brainstorming 
ideas  may  sound  off-the-wall.  But 
let  them  try.  If  they  discover  some 
oddball  trick  that  works,  you've  got 
a  competitive  .advantage.  Ifthey 
don't.  Well,  you  already  know  that  a 
conventional  approach  to  RFID  is 
diKimcd  to  grim  failure. 

You  don’t  need  another  death 
march,  not  now.  Don't  lee  your 
RFID  project  turn  ini<»  one. 

Make  it  an  adventure.  C  49441 
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What  a  Concept! 

Users  at  this  hospital  each  get  a  directory  on  a  file 
server,  mapped  to  the  1:  drive.  When  this  IT  pilot  fish 
notices  during  a  routine  audit  that  one  user's  I:  drive 
has  gotten  very  big.  he  investigates  and  finds  it  con- 
tains  several  hundred  megabytes  of  games  -  a  major 
no-no.  User's  explanation?  ‘I  just  got  this  computer  a 
few  months  ago.  and  the  games  were  on  it  when  I  got 
it!"  Sighs  fish.  "She's  still  having  trouble  grasping  the 
concept  of  a  network  drive." 
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ware  sufta.  using  the 
vendor's  local  rep  as  Ks 
intetpator.  But  one  com¬ 
ponent  seems  to  be 
missing.  "The  local  rep 
cant  remember  whether 
heirtstalladlt'*s8y$a 
pilot  fish  on  the  scene. 
"After  throe  weeks,  the 
rep  finally  confirms  that 
the  program  seems  to  be 
instafied  but  is  not  work¬ 
ing  properly  *  Why  not? 
askstheproiectmanag- 
V.  The  rep  replies,  "As 
this  was  not  a  require- 


TMsnowWsbappfica- 
tion  tests  out  fine  until 
existing  customer  data 
is  imported  without  any 
validatien.  Than  errors 
show  up  everywhere, 
says  programmer  pilot 
fislt  But  how  are  they 
dealt  wHh?  "Whenever 
an  entry  btow  up.  a  bug 
report  was  logg^" 
tpumbtos  fish.  *7his 
made  It  easy  to  track 
each'bug'andfiiM- 
by  fixing  the  data  on  a 
record-by-record  basisi" 


ment.  we  did  not  test  it" 


Slow  but  Happy 


What's  in 
A  Name? 


It's  the  1970s.  and  this 
pilot  fish  writes  the  first 
online  application  for  Ms 


After  the  IT  department 
migrates  this  designer 
piM  Rdi's  profoets  to  a 


company  8  makiframe. 
ft's  btezfogly  fast,  but 
boss  tsAs  fiih,  "Put  a 
loop  In  that  doss  nothing 
10,000  tfotes  before  dfo- 
playing  the  response 
screen."  Why  stow  it 
down?  fish  arils.  "Be- 


neweervar.oneprofoet 
vanfohes.  "The  folder 
named  *0010*  was 
gone,"  Wi  says,  "and  rr 
said  they  had  r»  back¬ 
ups  of  tfaiifoldir  and 
don't  briteveilevsrex- 
islsd."  Turns  out  "core" 


tfons  go  oflBne,  response 


ly  given  to  large  foes 
crifodeora  dumps  used 
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looger.  and  foe  users  wfo 
get  more  and  morabrF 
toted."  Ms  boMtals 
hka.  "This  way,  ws  can 
just  dacreaee  the  num¬ 
ber  etfonas  foe  empty 
loop  exacotos,  keep  re* 
sponMtiras  constant 


foriraublaaiMMting.and 
the  backup  progrwnW- 
tare  out  anything  with 
fori  name.  "Poof  goes 
foeprafoct.*righ8firii. 
"New  waVs  trying  to 
reoeverdriafromany- 
whareweeanfindit” 
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RFID  Adventure 


ERE'S  THE  STATE  OF  THE  ART  for  RFID  tagging:  “At 
a  case-by-case  basis,  as  I  go  down  through  our  proc¬ 
ess,  I  validate  that  case.  A  tag  is  on  it.  I  encode  the  tag 
and  then  I  immediately  validate  that,  and  I  capture 


those  statistics.  If  it  doesn’t  read,  I  can  pull  that  out 
and  put  another  tag  on  until  we  get  it  read.” 

That’s  what  Ray  Hagedorn,  an  IT  executive  at  Sara  Lee  Foods,  told 
Computerworld  reporter  Carol  Sliwa  recently  [QuickLink  49245]. 
And  it’s  not  just  that  the  tags  are  unreliable,  Hagedorn  says.  The 
middleware  is  half-baked,  the  consultants  aren’t  much  help,  and  a 
real  return  on  investment  is  nowhere  in  sight. 

See?  It’s  not  just  you.  Everybody’s  RFID  project  is  like  that 

The  technology  really  doesn  l  work  the  way  it  You  know  these  people.  For  them,  this  won  t 
should.  You  really  can’t  point  an  RHO  reader  at  be  an  endless  nightmare.  It'll  be  a  challenge, 
a  paUet  and  be  sure  of  getting  a  response  from  The  tags  don’t  work  reliably?  These  people 

the  tags  on  each  carton.  All  those  dreams  of  will  test  'em  as  they  go  and  keep  testing  until 

RRD  visionaries  may  come  true  someday,  but  they  can  sniff  out  the  bad  ones  early.  They’ll 

not  in  time  for  your  proiecL  RFID  just  doesn't  add  checksums  and  redundant  data  to  the  tags’ 
work  yet  TUs  stuff  really  isn't  ready.  contents  and  put  the  smarts  to  verify  and  do  er- 

So  if  you're  facing  an  RFID  mandate  from  ror  correction  into  the  software.  It  may  not  be  a 

Wal-Mart  or  the  Defense  Department  or  some  pretty  solution,  but  they’ll  gel  it  working, 

other  big  customer,  that  means  you  have  to  The  signals  can’t  make  it  all  the  way  through 

make  a  choice.  a  palletload  of  cartons?  They  ’ll  work  around  it. 

You  can  look  at  your  RFID  project  cither  as  a  maybe  by  scanning  each  carton  as  it's  added  to 
death  march  -  or  as  an  adventure.  the  pallet,  then  linking  aU  that  RFID  informa- 

This  is  no  ordinary  IT  project  One  in  five  tion  in  the  database.  That  way,  once  that  pallet 

RFID  tags  dies.  The  signals  are  blocked  by  met-  U  wrapped  and  strapped,  if  they  can  successftil- 
il  in  products,  by  shiny  packaging,  even  by  ly  scan  even  one  tag,  they  can  identify  every- 

hick  liquids.  If  you  expect  RFID  to  work  as  ad-  thing  on  the  skid. 

lertised,  your  project  wUl  be  a  long,  horrible  The  middleware  isn’t  up  to  the  job?  The  data- 

vaking  nightmare,  ^d  it  will  lail.  And  every-  base  is  wrong  for  the  task?  Here’s  where  you’ll 

me  connected  with  it  will  want  to  kill  you  for  probably  have  to  rein  in  their  urge  to  kludge, 

jutting  them  through  it  Eventually  RFID  technology  will  work,  and 

But  you’ve  sliU  got  to  meet  that  mandate.  when  that  happens.  you’U  need  a  database  that 
Vhal  can  you  do?  You  can  forget  about  this  as  a  I  scales  up  and  middleware  that  hasn’t  been 
onvendonal  IT  project  and  treat  it  hacked  to  a  fare-thee-weU. 

ike  what  it  is:  an  expedition  into  gut  for  everything  else,  give  your 

he  unknown.  rPjd  people  plenty  of  room  to 

So  don’t  pick  a  team  of  perfec-  experimenL  Their  brainstorming 

ionists.Pickspil-and-baiUng-wire  ideas  may  sound  off-the-wall.  But 

inkerers  and  shade-tree  mechanics.  let  them  try.  If  they  discover  some 

Yarn  them  m  advance  that  the  H  oddbaU  trick  that  works,  you’ve  got 

ardware  IS  unreliable  and  that  the  a  competitive  advantage.  If  they 

roblems  are  intermittent.  The  ones  don’t,  well,  you  already  know  that  a 

jr  whom  failure  isn’t  an  option  wiU  conventional  approach  to  RFID  is 

m  away  screaming.  doomed  to  grim  failure. 

The  ones  who  are  left  will  see  it  You  don’t  need  another  death 

i  a  challenge.  Failure  will  be  their  march,  not  now.  Don’t  let  your 

ally  companion -right  up  until  it  RFID  project  turn  into  one. 

irtts  into  success.  Make  it  an  adventure.  O  49441 
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Please  join  Samsung,  Sears 
and  Boomer  to  help  the  children 
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SAMSUNG 


MOOLEWARE  IS  IBM  SOFTWARE,  ftwerful  WebSptiere 
software.  It's  the  strong,  seamless  txtnd  that  can  unto  your 
business,  vendors,  partners  and  customers,  A  dynamic  link 
designed  to  make  your  entire  organization  more  efficient. 
More  responsive.  More  flexible.  On  demand  WebSphere 
connects  processes,  with  open  standards.  And  it's  easy 
to  manage,  too.  So  all  involved  get  a  better  night's  sleep. 


WebSphere 


1.  Guest  checked  in  wirelessly. 

2.  Staff  queries  guest  preferences. 

1  Vendor  services  integrate  seamlessly. 

4.  Supplies  are  procured  automaticaily. 

5.  Repeat  customers  increase  profits. 
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HP  CIO  Gilles  Buuctid’d  discusses  llic  causes  ol  Itie  company  s  Ismeo  SAP  sisicm  miuMlion 


Woolwollhs 
Deploys  .Net 
AppmJ2EE 

Uses  Mainsoft  tool  to 
mask  lack  of  Java  skills 

BV  CAROL  SLIWA 

Before  the  start  of  the  upcom¬ 
ing  holiday  season.  Wool- 
worths  Holdings  Ltd.  wanted 
to  improve  the  capabilities  of 
the  Java-based  data-monitor- 
ir%  and  alerting  system  it  had 
hired  an  outside  contractor  to 
build.  But  the  Cape  Town- 
based  retailer  had  a  problem. 
The  company  didn't  want  to 


spend  more  money  contract¬ 
ile  Java  developers,  who  are 
hard  to  find  and  expensive  to 
hire  in  South  Africa,  according 
to  Marius  Roets.  system  man¬ 
ager  of  integration  solutions  at 
Wooiworths.  And  the  retailer’s 
own  developers  were  skilled 
in  Microsoft  Corp.’s  develop¬ 
ment  tools,  not  Java  2  Enter¬ 
prise  Edition  technology. 

So  Roets  turned  to  a  new 
tool  from  Mainsoft  Corp.  thar 
promised  to  allow  the  develop¬ 
ers  to  work  in  their  frmiliar 
sual  Studio  .Net  environment 
yet  deploy  the  application  on 
Wooiworths'  J2EE  application 
and  enterprise  port^  server 
software  from  Sybase  Inc. 

Wooiworths,  page  J6 


E-bizSitesHItWilhTaigeted 
Attacks,  Extartnn  Threals 


Hackers  are  shifting 
strategy,  taking  aim  at 
specific  companies 

BV  JAIKUMAR  VIJAVAM 

A  distributed  denial-of-servicc 
attack  that  disrupted  Web- 
based  systems  at  credit  card 
payment  processii^  firm  Au- 
thorize.Net  Corp.  last  week  is 
indicative  of  a  sharp  increase 
in  the  number  of  cyberattacks 
being  targeted  at  specific 
companies  and  driven  by  prof¬ 
it  motives. 

The  DDoS  attack  against 
Authorize.Net  coincided  with 
the  release  of  a  report  by  IT 
security  software  vendor 


Symantec  Corp..  which  said  its 
analysis  of  network  anacks  in 
the  first  six  months  of  this 
year  shows  that  malicious 
hackers  appear  to  be  moving 
away  from  mass  attacks  to 
more  focused  ones  aimed  at 
e-commerce  sites. 

Other  security  vendors 
and  analysts  painted  a  similar 
picture. 

’’We're  seeing  a  big  escala¬ 
tion  of  attacks  targeted  at 
e-commeroe  companies,'*  said 
Attacks,  page  61 
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CATries  to  Avoid  Fallout 
AftCT  Kumar’s  Indictment 


BV  MATT  HAMBLEN  _ 

Last  week's  federal  I 
grand  jury  indictment  of  I 
former  Computer  Asso-  I 
ciates  International  Inc  I 
CEO  Sanjay  Kumar  for  I 
allegedly  orchestrating  I 
widespread  accounting  B 
fraud  at  CA  left  some  users 
concerned  but  undeterred 
about  continuing  to  use  the 
company's  software. 

“Obviously,  we'U  watch 


what  happens,  but  1 
don’t  feel  the  indict¬ 
ments  and  related  news 
will  have  any  effect  on 
our  use  of  CA  software 
or  our  confidence 
about  the  vendor."  said 
Alain  Paquette,  manag¬ 
er  of  distributed  servers  at 
Bombardier  Aerospace  in 
Dorval,  Quebec.  The  aero¬ 
space  division  of  Bombardier 
Inc.  uses  a  variety  of  desktop, 


I  network  and  server  manage¬ 
ment  tools  from  CA.  as  well  as 
its  help  desk  software. 

Kumar's  indktment  was 
announced  on  the  same  day 
that  CA  ^reed  to  pay 
million  to  reimburse  share¬ 
holders  for  the  alleged  fraud 
and  to  work  «ntb  the  govern¬ 
ment  to  help  recoup  compen¬ 
sation  from  accused  former 
executives.  In  return,  the  U5. 
Department  of  Justice  said  it 
wont  prosecute  CA  as  long 
as  Uie  company  abides  by 
the  terms  of  the  cooperation 
Kumar,  page  16 


Users  remain  in  company’s  camp  as  it  signs 
deal  with  DOJ;  former  CEO  pleads  not  guiltt' 
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Ltii'ju  that  wrten  d  laiti  wf  i'ooks  d  away 

In  afierce  battle  with 
other  onlinestock 
brokerages,  ETrade 
guaiarrtees  to  execute 
trades  in  two  seconds 
or  less.  Gary  H.  Anthes 
reports  on  the  open- 
source  systems,  arid 
the  obsession  with 
speed,  that  make  it 
possible.  Page  27 


ETRADE 

Beats  the  Clock 


Profiles  in  Business  Mobility  Security 

Be  cool,  Mr.  “I  Have  Security  Issues.” 
Nokia  has  you  covered. 


NAME:  Mr.  "I  Have  Security  Issues"  \  QUOTE:  “Is  it  safe?” 

CHALLENGE:  He  knows  that  always-on  connectivity  demands 
always-on  security.  Even  as  threats  change,  requests  for 
data  increase  and  budgets  get  tighter. 

NOKIA’S  ANSWER  FOR  I.T.:  Nokia  Firewall  Appliance 


K  MEETS  HIS  NEEDS  by  enabling  the  rapid 

M  deployment  of  security  application  from  Check 

Point  Software  Technologies  on  purpose- 
'B  built  Nokia  appliances.  Also,  with  a  track 
K.  record  of  over  100,000  Nokia  installations, 
it  keeps  his  blood  pressure  down. 

MEETS  HIS  COMPANY’S  NEEDS  by  improving 
productivity  through  better  security  and  data 
availability,  and  by  offering  leading  price/ 
performance.  Whew! 

Learn  how  to  mobilize  your  team  and  increase  busi¬ 
ness  productivity.  Download  "The  Anytime,  Anyplace 
World”  white  paper  at  nokiaforbusiness.com 

NOKIA 

Connecting  People 


CONIDnS 


The  Grand  Challenges  of  IT 

In  the  Technology  section:  Researchers  are 
evaluating  new  approaches  to  deal  with 
age-old  efforts  to  improve  processor 
performance,  shrink  the  size  of  chips  and 
make  computers  more  like  humans.  Page  32 


NEWS 


nCimilllNiY  !  OPINIONS 


6  PeopleSoft  offers  users  in¬ 
centives  to  upgrade  their  sys¬ 
tems  in  an  effort  to  close  more 
sales  and  help  it  fend  off 
Oracle's  takeover  bid. 

7  Sun  execs  acknowledge  that 

they  failed  to  recognize  corpo¬ 
rate  IT’S  push  toward  low-cost 
servers,  but  they  say  Solaris  10 
is  ready  to  take  on  Linux 

10  Storage  managers  look  for 

answers  to  their  data  backup 
dilemmas  at  Storage  Deci¬ 
sions  2004  in  Chicaga 

10  Offshoring  might  hurt  IT  em¬ 
ployment  —  but  the  data  is  in¬ 
complete.  says  a  GAO  report. 

12  Dual'Core  CPUs  may  double 
server  processing  power,  but 
they  could  also  double  soft¬ 
ware  licensing  fees. 

14  Q&A:  HP  CtO  Oilles  Bouchard 
opens  up  about  internal  issues 
that  plagued  his  company's 
migrations  to  an  SAP-based 
order  processing  system. 

14  A  PaopieSoft'basad  system 

crashed  at  the  start  of  a  uni¬ 
versity’s  school  year  and 
continues  to  experience 
periods  of  inaccessibilityr  ~ 

20  Q&A:  The  merger  of  Betrusted 
Holdings  and  TriiSecure  is  part 
of  a  trend  that’s  good  for  users, 
says  the  CEO  of  the  new  com¬ 
pany.  known  as  Cybertrust 

61  BearingPoint  wins  a  $229  mil¬ 
lion  contract  to  consolidate 
and  integrate  the  Department 
of  Homeland  Security’s  finan¬ 
cial  systems. 


27  Field  Report  ETrade  Beats 
the  Ciocli.  An  infrastructure 
built  on  open-source  tools 
powers  the  online  brokerage's 
electronic  trading  system. 

34  Case  Study:  Recollecting 
the  Customer,  a  three-year 
effort  to  create  a  unified  infor¬ 
mation  architecture  at  ING 
Americas  is  beginning  to  pay 
dividends. 

36  Security  Manager's  Journal: 

IP  Telephony  Changes  Secu¬ 
rity  Equation.  Mathias  Thur¬ 
man  sorts  out  the  ramiffca- 
tions  of  running  voice  traffic 
over  his  company’s  internal 
and  eiaemal  networks. 


46  How  to  KffI  an  rr  Project. 

Too  many  projeas  suck  up 
time,  energy  and  resources 
only  to  Fail  in  the  end.  Here's  a 
process  for  identifying  the 
losers,  pulling  the  plug  early 
and  getting  on  with  business. 

48  Career  Watch  .  The  economic 
bounce  is  bypassing  IT;  tech 
etiquette  blunders  are  on  the 
rise;  and  India  faces  a  -skilk 
gap  of  its  own. 


e  On  (he  Mark:  Mark  Hall 

reports  that  IBM  has  plans 
to  ease  the  process  of  putting 
Notes  and  Domino  informa¬ 
tion  into  relational  databases. 

24  Don  Tennant  uncovers  the 
most  valuable  lesson  IT 
professionals  can  learn  from 
HP's  recent  ERP  migration 
nightmare. 

24  David  Moschella  rmds  chat  rr 
pros  on  the  vendor  side  and 
customer  side  tend  to  be  very 
different  animals. 

25  Pimm  Fox  sees  signs  that  we 
haven’t  heeded  the  lessons  of 
the  2000  election  fiasco. 

38  Oanlol  J.  Wtltznor  acknowl¬ 
edges  that  spam  and  porn¬ 
ography  have  made  e-mail 
and  Internet  ffitering  essen¬ 
tial.  but  we  need  better  ways 
to  know  what  we’re  missing. 

50  David  L  Burkett  has  had 
it  with  ^plicant  tracking 
systems.  Ul-cooceived  job 
requirements  and  drunken 
interviewers.  Let  the  hiring 
managers  do  the  hiring, 
he  suggests. 

62  Frankly  Speaking:  Frank 
Hayes  says  the  simplest  an¬ 
swers  we  can  give  users  usual- 


ly  aren’t  the  b^t 

ones. 
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Putting  Out  Fires 

In  the  Management  section:  a  complex 
web  of  special  IT  systems  helps  the 
National  Interagency  Fire  Center  posi¬ 
tion  front-line  crews  and  resources 
before  a  forest  fire  breaks  out.  Pag*  41 
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hfosecurity  Career  Basks 

SECUItlTY;  Aspiring  information  security 
experts  fint  need  mainstreaffl  experience 
and  credibility  if  they  want  to  be  effective 
in  their  writes  coUimnist  Peter  H. 

Gregory  QoieMMi  46291 

Naw  Approach  to  AppicaBoiB 

DEVELOPMENT:  Consultant  fonathan  Sapir 
sees  a  shift  in  the  way  we  build  software,  to 
an  emphasis  on  meeting  the  of  a 

changing,  dynamic  business  envirrw^ina>nt 

OCMridMi4O0Qg 

Naws  Right  to  Vmt  In-bcK 

Between  tsaues  of  Compttterworld,  keep  up 
with  all  the  IT  news  you  need  to  know  with 
our  free  e-mail  newsletters.  Subscribe  at 

OQuMUMiaMSO 
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Fiorina  Disinisses 
rr  Spending  Jump 

SfwaUriB  «t  an  mvcstmant 
cofrfaranca  in  San  Francisco. 
Hnstett-Packard  Co.  CFO  Carty 
Fiorina  dismissod  the  idea  that 
corporate  budeafswpbseswiH  , 
drive  an  increase  in  IT  spending 
in  this  year’s  fourth  imarter.  Fio¬ 
rina  added  that  IT  buyers  have 
becoTM  mors  diseriniinating 
shout  purchasing  and  now  raalze 
that  spendIrK)  on  new  technology 
can  samedmas  be  “a  bad  tMng." 

Oracle  Extends 
PeopleSoft  Offer 

(hedt  Corp.  again  aitanded  Ks 
S7.7  biKon  hostite  tahaower  bid 
for  RnplaSoft  Inc.,  saying  that 
shareholdars  now  have  until  Oct 
8  Id  accept  its  purehisa  offer. 

The  ai-caah  efier  was  due  to 
opira  (aal  Friday.  Oracle  said 
that  about  6.5%  of  hopiaSofi's 
sharea  had  boon  tondorad  aa  of 
Friday,  down  from  7.2%  two 
weaks  oarhar.  lafMn  a  Moral 
iudga  ruM  that  Orada  could  pro- 
ctad  with  Ha  bid.  (Sae  ralatad 
story  at  right) 

Bankruptcy  Nears 
For  Commerce  One 

Conunarea  Ona  hic.  laM  off  56  of  | 
its  remaMno  62  worhars  and  said 
H  axpocts  to  Me  for  banknadcv 
protection.  Tht  San  Frand^ 
baaed  company  addad  that  M  was 
down  to  Ns  last  SSOO.OOO  In  op¬ 
erating  hsids  and  that  athanpts  to  I 
find  new  financing  hava  baan  un-  I 
successful  Commarca  One  was 
orte  of  the  businees  te*business  | 
software  vendors  thd  were  way¬ 
laid  by  the  dot-com  collapte. 

Short  Takes 

SAS  iNSmUTE  MC.  today  plans 
to  announce  an  autocnalod  fore¬ 
casting  tod  buM  on  top  of  its  SAS 
9  businees  intoWgenci  eoCtwara. 

...  The  LOS  ALAMOS  NATfONAL 
LABORATORV  tired  four  worhen 
for  theN  roles  in  recent  cecurity 
incidents,  including  the  disap- 
paarance  of  two  computor  dtoks. 


PeopleSoft  Seeks  Sales 
Boost  Via  Upgrade  Deals 


Offers  apps  users 
free  FT  services, 
SIOO.OOO  credits 


PEOPLESOFT  INC-  is  of¬ 
fering  users  of  its  ap¬ 
plications  a  series  of 
sweeteners  to  entice 
them  to  upgrade  their  sys¬ 
tems.  a  strategy  designed  to 
help  the  embattled  vendor 
close  more  sales  and  boost  its 
ability  to  Tight  off  Oracle 
Corp.'s  takeover  bid. 

Dubbed  PeopleSoft  Now, 
the  upgrade  initiative  was 
one  of  the  new  offerings  that 
PeopleSoft  announced  at  its 
Connect  2004  user  conference 
here  last  week. 

The  company  also  detailed 
an  expanded  sdes  and  devel¬ 
opment  partnership  with  IBM. 
Under  that  agreement  People- 
Soft  will  optimize  its  applica¬ 
tions  for  use  with  IBM’s  Web¬ 
Sphere  middleware  and  devel¬ 
opment  tools  and  resell  the 
IBM  technology. 

The  Now  program,  offered 
through  PeopleSoft's  Global 
Services  arm,  will  provide 
users  with  free  upgrade  work, 
application  management  ser¬ 
vices  and  access  to  online 
training.  PeopleSoft  also  said 


it  will  give  customers  SIOO.OOO 
credits  on  some  new  software 
purchases.  The  program  ap¬ 
plies  to  all  three  of  its  business 
application  product  lines  and 
is  due  to  expire  Dec.  31. 

David  Scott,  vice  president 
of  marketing  and  strategy  at 
PeopleSoft  Global  Services, 
said  Now  is  designed  to  help 
the  company  save  money  by 
reducing  the  need  to  maintain 
older  versions  of  its  applica¬ 
tions.  PeopleSoft  also  hopes  to 
sell  add-ons  to  users  who  de¬ 
cide  to  do  upgrades,  he  added. 

The  upgrade  offer  will  en¬ 
able  IT  managers  to  exploit 
the  ease-of-use  features  now 
being  embedded  in  applica¬ 
tion  releases  as  part  of  People- 
Soft’s  Total  Ownership  Expe¬ 
rience  initiative.  Scott  said. 
"Some  of  our  reasons  arc 
selfish,  and  some  arc  seiness." 
he  noted. 

Conference  attendee  Do¬ 
minick  Sabatino  said  he  ex¬ 
pects  his  company,  the  North 
Shore-Long  Island  lewish 
Health  System  in  Great  Neck. 
N.Y..  to  take  advantage  of  the 
upgrade  offer.  The  health  care 
provider  runs  PeopleSoft’s 
supply  chain,  human  re¬ 
sources  and  financial  applica¬ 
tions  but  is  several  versions 
behind  on  each  one. 

"We  had  planned  to  upgrade 


in  ^)05."  said  Sabatino.  the 
health  care  system’s  assistant 
vice  president  of  corporate 
human  resources.  ’TTiis  gives 
us  an  incentive  to  get  there 
sooner." 

"Free  IS  always  good,"  said 
Todd  Inlander,  CIO  at  Fleet- 
wood  Enterprises  Inc.,  a 
Riverside,  Calif. -based  maker 
of  recreational  vehicles  that 
uses  PeopleSoft  Enterprise- 
One  software.  Fleetwood 
plans  to  upgrade  early  next 
year  from  EnterpriseOne  73 
lo  8.10,  which  slrauld  provide 
improved  usability  features. 


PeopleSoft  M  Perfect  on  JJ).  Edwards  Deal,  CEO  Says 


j  andaoftNwenhmcwwnipol- 
taleSoftC£OCi«o  Conway  :  cfeswHh  the  JAEdavds  user 
tat  weak  totfied  the  hundreds  of  :  basa.For8Mvnpte.henofedth8t 
enhancements  made  in  the  past  ;  sameJJ).EdNwdBcuslQrTare 
IfeertodteMirUandEntareriBe-  *  were  efroneoueiycanMnoed  that 
One  appbeafiona  that  the  compe-  •  they  treidd  be  forced  to  abandon 
ny  inherited  when  k  bought  Jil  :  their  rtamethMrficeraes  in  favor 
EdMiRk&Co.fttfheeleoec*  :  of  f^opieSoft*stwenue  baaed 
knowtedged  that  PeopleSoft's  ;  model  and  wottf  end  up  paying 
handfetg  of  the  acquiGtoon  wasn't  :  more  than  they  had  prevtouMy. 


freeofgllches 


Concerns  about  f^tofeSotfs 


Dtiing  Ml  leynoie  speech  St  :  licensing  poficiei  were  a  mMa 
Corned  2004.  CoTMwy  said  that  •  bone  of  cordenbon  among  Ji). 
ffeoptoSoft  made  wel  Men-  •  Edwards  ueecs  who  attended  he 
tioned  errors  uMfe  trying  to  bn-  :  indapendeni  Oreet  IrdamationM 
ptamertfsomeofilsicansino  :  Uear  Gnat's  gtobM  conference 


in  June  [QiackUnk  47778]. 

The  pricing  issue  Ml  home 
with  Dave  dbector  of  rr  at 
Bendereon  Development  Co.,  a 
Bufleio.  N-Y.-besed  reef  eeiato 
devekiper  that  rm  the  Vttvld 
graen-eoeen  appbeabons. 

1  was  definilBly  concerned 
about  bcansing  when  I  heard 
about  he  new  model.*  Hyzy  said. 
HeaddedhaKhouthMwaaun- 
efearwheherPaopfeSoftorigr- 
ttoty  Mendad  to  let  boh  pricing 
modefccnealBt  or  changed  te 
tack  afferaeBing  ha  oegatfee  re¬ 
actions,  he  company  lied  he 


Inlander  said.  But  he  added 
that  the  Now  program  will  re¬ 
quire  due  diligence  before  the 
company  signs  on. 

The  U.S.  Navy  might  be  in¬ 
terested  in  using  Now  to  help 
fuel  an  upgrade  of  aging  pay¬ 
roll  applications  and  other 
software  from  PeopleSoft. 
said  Capi.  Valerie  Carpenter, 
joint  program  manager  for  the 
Pentagon's  Defense  Integrated 
Military  Human  Resources 
System  (DIMHRS)  project 
(QuickLink  418151. 

TTie  payroll  system  is  based 
on  PeopleSoft  Enterprise  83. 
and  Carpenter  said  an  upgrade 
to  Version  8.8  would  offer 
more  stability  and  enable  the 
system  to  be  seamlessly  inte¬ 
grated  with  DIMHRS.  which  is 
due  to  be  rolled  out  across  all 
branches  of  the  military  starl¬ 
ing  in  2006. 

PeopleSoft  fell  short  of  its 
second-quarter  revenue  target, 
a  result  it  blamed  on  the  diffi¬ 
culty  of  closing  deals  amid  the 
uncertainty  created  by  Ora¬ 
cle’s  15-month-old  takeover 
bid.  That  uncertainty  grew 
earlier  (his  month  when  a  fed¬ 
eral  judge  rejected  the  U3. 
Department  of  Justice’s  at¬ 
tempt  to  block  Oracle  on  anti¬ 
trust  grounds.  0  49650 

Srocy  Cow/ey  of  the  IDG  News 
Service  contributed  to  this  story. 

MORE  NEWS  OHUNE 

F^opleSofl's  new  deaf  witMBM  6  aimed 
8l  homo  up  ris  middeware  position 

OQuickUnk  49579 
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:  proUembyletlinocustomefs 
:  choose  eilhar  approach. 

ConiMy  also  said  hat  he 
:  shear  wiikane  of  new  aoftwwe 
:  funebonafity  offered  by  Ffeopfe- 
:  Soft  left  aomeJD.GdMMrds 
;  users  baffled  about  what  they 
I  were  getting.  Because  thve  was 
I  afearhelFfeoptoSoftwoukldo 
:  avreywihheJD.&KwrdBap- 
•  plications,  the  company  made  an 
:  extra  eflort  to  boost  dereloixnent 
:  andunleeshed'aHoodofen- 
:  hancements.'’ he  said  However. 

:  he  added  tMRBoMSofldU 
I  priMi  ill  poait  about  keapino  he 
:  appIcMionsabve. 

*'iWvct  Sonpinr 


Sun  Pushes  Solaris  10  as  Linux  Alternative 


Acknowledges 
that  it  ‘dropped 
the  hair  on 
low-cost  servers 


BY  PATRICK  THIBODEAU 

For  years.  Sun  Microsystems 
Inc.  ignored  Linux  or  dis¬ 
missed  it  as  iust  another  Unix 
variant.  But  company  ofTicials 
are  now  talking  bluntly  about 
their  failure  to  recognize  the 
corporate  IT  push  to  low-cost 
commodity  systems,  which 
Linux  has  helped  foster. 

Sun  "dropped  the  ball" 
whfle  customers  rushed  to 
Linux/Intel  computing;  said 
John  Loiacono,  executive  vice 
president  of  Sun’s  software 
group.  But  with  its  Solaris  10 
upgrade  due  by  year's  end. 
Sun  is  hoping  to  change  that 
perception  by  adding  a  list  of 
new  features  and  adopting  an 


believes  they  have  a 
need  for  their  own 
box."  he  said. 

Elecause  Solaris  10 
is  “lighter  weight," 
meaning  it’s  less  in¬ 
trusive  on  applica¬ 
tions.  performance 
has  improved.  Green- 
wade  said.  He  also  cit¬ 
ed  Sun's  new  TCP/IP 
stack  as  a  plus. 

The  Solaris  im¬ 
provements  are 
enou^  to  eliminate 
cost  as  a  deciding  factor  be¬ 
tween  Solaris  or  Linux.  Green- 
wade  said.  He  argued  that  Lin¬ 
ux  isn't  necessarily  inexpen¬ 
sive.  because  it  often  requires 
the  addition  of  third-party 
tools  to  match  fuiKtionality 
that's  built  into  Solaris. 

But  the  issue  is  complicated. 


The  national  lab  in 
Idaho  Falls  also  uses 
Linux  systems.  “Linux 
is  in  a  lot  of  people's 
hands."  Greenwade 
said,  and  all  the  users 
of  the  open-source 
operating  system  pro¬ 
vide  “a  depth  and 
breadth  of  feedback 
that  you  can't  get 
in  almost  any  other 
software  testing  pro¬ 
gram."  As  a  result, 
features  are  added  to 
Linux  more  quickly,  be  said. 

Bill  Morgan.  CIO  at  Phila¬ 
delphia  Si(^  Exchange  Inc., 
has  a  new  electronic  options- 
trading  system  that  runs  on 
Solaris  10.  which  be  said  has 
improved  trading  capacity  by 
36%.  Like  Greenwade.  he  cr^- 
ited  performance  improve¬ 


ments  to  the  TCP/IP  stack,  as 
well  as  improved  multithread¬ 
ing  support  and  a  nevs-  feature 
called  DTrace  (for  Oynamic 
Tracing)  that  runes  applica¬ 
tion  performance. 

Thanks  to  Solaris,  the  stock 
exchange  expects  to  reduce 
the  amount  of  new  hardware  it 
needs  to  buy  in  order  to  scale 
up  the  trading  system.  “You 
can  in  effect  scale  within  the 
same  machine,  as  opposed  to 
adding  servers,”  Morgan  said. 

But  Sun  may  still  have  work 
to  do  on  cost  issues  that  are 
important  lo  some  users. 

Gary  Westaway,  data  center 
operations  manager  at  Scars 
Canada  Inc.  in  Toronto,  man¬ 
ages  more  than  7S0  servers 
in  a  mixed  cnvironmeoi.  He 
called  Sun’s  technology  pro¬ 
prietary  and  its  licensing 


I  terms  costly.  For  instance, 
j  Westaway  said  Sun  informed 
I  him  that  bis  Sun  server  war- 
I  ranty  would  be  voided  if  he 
I  installed  the  servers  in  any¬ 
thing  other  than  a  Sun  rack, 
which  he  called  “the  most 
expensive  rack  on  the  face  of 
.  this  planet." 

I  However.  Sun  officials  said 
I  that  Lsnl  true  for  its  x86-based 
systems.  They  said  servers  can 
be  mounted  in  third-party 
racks,  provided  that  the  racks 
meet  certain  design  require¬ 
ments.  and  Sun  will  honor  the 
I  warranty.  O  49641 


Robert  S4cMiUan  of  the  IDG 
News  Service  contrAuted  to 
this  story. 
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open-source  model  that's  as 
good  as  or  better  than  the 
models  used  for  Apache. 
Mozilla  Linux  and  others. 
Loiacono  said. 

Last  week.  Sun  made  a  slew 
of  announcements  in  hopes  of 
luring  users  in  the  flnan^l 
services  industry  back  to  its 
camp  (see  story  at  right). 
Moreover,  the  company  is 
working  with  Advanced  Micro 
Devices  Inc.  to  build  low-cost 
Opteron-based  servers;  a  fijur- 
way  box  was  released  in  the 
summer,  and  an  eight-way  sys¬ 
tem  is  expected  next  year. 

Slicking  With  Solaris 

Although  Sun  is  supporting 
Red  Hat  Inc.'s  version  of  Linux 
and  Novell  Inc.’s  SUSE  Linux, 
its  preferred  operating  system 
is  still  Solaris.  And  some  early 
users  said  they  like  the 
changes  in  Solaris  10. 

Beta  tester  Eric  Greenwade. 
chief  IT  architect  at  the  Idaho 
National  Engineering  and  En¬ 
vironmental  Laboratory,  said 
the  new  version’s  use  of  con¬ 
tainers,  or  zones  —  a  provi¬ 
sioning  capability  that  isolates 
users  and  applications  on  a 
server  —  is  a  mafor  improve¬ 
ment.  "I  don’t  have  to  buy  a 
box  for  every  sinj^e  group  that 


Vendor  Tries  to  Regain  Footing  on  Wall  Street 


HEW  YORK 

Sun  MicrDS)6tem5  last  weak 
fired  off  a  bafiage  of  product 
promotions,  upgrades  and  ser¬ 
vice  announcements  here  in 
an  attempt  to  retake  is  tradr* 
tionaf  stronghold  n  the  financial 
convnunity. 

At  a  banquet  had  M  of  finan- 
ciai  aenaces  executives.  Sun 
FVesident  Jonathan  Schwartz 
made  the  case  that  Solans  offers 
better  computing  performance 
and  systems  managanent  tor 
lees  money  than  comparable  Lin* 
ux  operating  systems. 

Schwartz  acknowledged  that 
Siffi  laded  to  oftor  the  tovKost 
servers  that  WU  Street  users 
sougM  in  the  past  tow  years. 

IMa  didn'l  ham  much  to  detiver." 
he  said. ‘Now.  our  shelves  are 
hi.' 

'There's  no  question  that  Sun 
was  tremendously  successful  in 
the  fitancial  cornmuniy  when  it 
was  less  pnce-serciwe,  but  they 
then  lost  ground  to  Ljnux.' said 
GardonHafl.ananafystallfcmi- 
naia  Inc.  in  Nashua.  NK  who 
attended  toe  event 

toaneflorttolahebackcus- 
tomera  that  Sun  toet  to  Urut 


Schwartz  anrumcad  a  S0%  de- 
count  on  Solaris  right-to-use  I- 
censes  tor  cuslomais  upgradng 
from  Linux.  Promotions  gawed 
toward  financial  companies  in* 
dude  a  tradfrin  program  ofiemg 
cash  credte  to  uaars  switching 
from  servers  baaed  on  Inters 
XeonprocessorstoSunHresys* 
tens  wito  AMCTs  Opteron  chip& 
Sun  also  is  offering  a  free  tnal  of 
a  Sun  Rre  V20z  server  and  So* 
tore  X)  to  sated  customers. 

TMiCase 

Manyoftoeprodudamounoe- 
menis  weieni  realy  new.  Haff 
said,  addng  that  test  week's 
event  was  an  effort  by  Sun  offi¬ 
cials  to  show  toat 'Ih^  have 
comptelely  changed  toe  compa¬ 
ny's  strategy.  Ths  is  a  test  case 
tor  the  future.  They  need  to  sue* 
caed  here  on  MU  Street* 
Schwartz  has  affednnatoty 
referred  to  toe  financial  services 
ndusby  as  Ihe  swarrp  from 
which  we  spewnad.*  U  with  toe 
economic  downturn  that  began 
in  2000.  Sun's  cozy  relaBonship 
wffh  toe  indstry  coated,  and  toe 
company  found  itoell  on  toe  toe¬ 
ing  end  of  a  phcptoeriormance 


wer  against  LinuK  runmg  on  to- 
tel-bned  systems. 

Sun  wi  have  Is  work  cut  out 
torlwtientcomestoooiivinc- 
ing  the  financiat  induatiy  that  I 
canbaatowtoaiserver 
pnwidar.  said  Dan  Slivers.  CEO 
oi  Tbdis  IT  Conading  Ina  in 
Chicago. 'The  financal  ndustry 
as  a  wtooto  8  ml  buying  toe  lad 
that  there  is  a  better  cost  retun 
by  piling  fees  to  kkrosoft  or 
S(n.*hs8ad. 

For  some  uaers.  though  Prfc* 


.  ngsnT  the  whole  story. 

*We  have  to  took  d  the  whole 
wlue  propostoon.  though  of 
course  price  iteelf  6  vnportant* 

.  sad  Stowe  Rubinow.  chef  tech- 
notogy  otficer  at  Chicago-based 
AnfwMligo  HoldnoB  Inc.  which 
operatos  an  atoctionic  stock  ex- 
:  chanoB.*Vlcanmarageanen- 
wronmenl  of  (juat)  Sur>  servers 
and  awxl  support  headaches, 
runnmg  Sun  offers  an  advan¬ 
tage* 

Rufanow  said  that  Archpetego 
had  been  eyeing  Linux  systems 
but  toat  new  todrnotogws  such 
as  Sotans  10  ware  a  maior  factor 
to  keeping  toe  company  in  the 
Suncamp. 

The  Phdadelpha  Slock  Ex¬ 
change  is  evalUBttng  Lmx.  but 
a's  sbetong  with  Solans  n  Oder 
togetanewetodroncopbons- 
tra^  siatorn  up  md  running  « 
8h(fTy.*Mfealie^hadann- 
staled  beae  of  Sparc  and  Sobris. 
so  the  toing  tod  would  ervtoie  us 
to  gd  to  martoii  fistosi  was  to 
bidd  upon  etod  we  had.' sdd 
CIOBIMvom. 

-  Marc  Ferrank  and 

OS  Atone  Sarwbe. 
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SAP,  Kimbeiiy-Clarfc 
TeamUponApps 

SAP  A6  and  OaKtsHasad  Kim-  i 
berty-CtarA  Corp.  sM  ttwy’re  I 

ioMfy  davaloping  a  set  of  market-  | 
ing  appAcations  for  tnalwn  of  j 

constener  goods.  The  ‘martieting  : 
resource  management”  software  ; 
wW  expand  upon  SAP’s  CRM  ap-  I 
picattm  and  further  automate 
tasks  such  as  planning,  budgeting  i 
and  nMasiving  the  resiifts  of  mar-  ' 
hetkig  campaigns,  ttw  two  com¬ 
panies  saU.  SMpments  are  due 
within  the  next  12  months. 


Exphft  Code  Posted 
For  Microsoft  Flaw 

At  least  three  programs  that  seek 
to  exploit  a  JPC6-rolBtad  eecurity 
hole  in  nwny  of  Microsoft  Cerp.‘s 
products  h»e  boon  poetod  on  the  | 
IntornatAttadtors  could  UM  two  j 
oftheexpioilprogramitorun  | 
miictoisi  code  on  unpatched  sys¬ 
tems,  security  raaaarchars  said. 
Mteraoofi  again  urged  uasn  to  In¬ 
stall  a  patch  that  it  ratoasad  two 
weeks  ago  or  imptomni  a  set  of 
smrk-aroundi  that  K  alee  detailed.  | 


Microsoft  CFO  Says 
Purchases  May  Rise 

McroeofI  and  SAP  decided  earlier 
this  year  not  to  pursue  a  merger. 
But  John  Connors.  Mterosofl’s 
chlsf  financial  officer,  said  during 
a  speech  last  waek  that  the  num¬ 
ber  of  large  acquieilions  made  by 
the  software  vendor  is  fihety  to 
mcrease.  ”Thera  an  not  many 
SAPs  out  there,  but  there  is  the 
potential  that  we  couU  do  e  few 
big  ones.”  Connora  toU  an  audi¬ 
ence  in  Palo  Alto.  Cafif. 


Short  Takes 

IBM  and  THE  BOEING  CO.  said 
thay'ra  teaming  up  to  oompets  for 
government  sytoems  contracts  in-  j 
voMng  homsiand  security,  nsl- 
tarycammunicalionsandintolR- 
gsnea  ogsrattofis. ...  MICROSOFT 
fstoeeadaparaiansiitllxiaravir-  i 
tualprivato  networking  flMv  in  its  I 
Windows  XPSarvica  Pack  ^  I 


Cfm  TUC  ii  JIDI#  i  hot  TECHNOLOOV  TRENDS,  NEW  PRODUCT 
Un  InLllllUul  :  INDUSTRY  GOSSIP  BY  MARK  HALL 


IBM  to  Seduce,  Not 
Compel,  Notes  Users... 


...  to  adopt  0B2  as  the  primary  data  store  ki  Domino/Notes 
7  when  it's  released  In  next  ye^s  second  quarter.  Ken 

Bisconti,  vice  president  of  Lotus  and  software  portal 
products  at  IBM.  acknowledges  that  the  document¬ 
centric  object  store  built  into  Domino  and  Notes 


"has  not  been  readily  compati¬ 
ble  with  relational  databases." 
That's  putting;  it  mildly,  ac¬ 
cording  to  some  Notes  cx- 
pens  [QuickLink  493UI.  Get¬ 
ting  Notes  infonnaiton  into  a 
relational  database  has  been 
something  of  a  pain,  bpt  Bis¬ 
conti  says  that  pain  gpys  away 
with  Release  7.  An  optional 
DB2  data  store  can  fully 
integrated  with  Notes,  includ¬ 
ing  e-mail  and  calendaring 
applications.  Bisconti  empha¬ 
sizes.  though,  that  no  user  is 
going  to  be  force-marched 
to  DB2  land.  "The  additional 
capability  is  an  option,  not 
a  requirement,"  he  states  — 
repeatedly.  But  you  can  al¬ 
most  hear  the  wooing  in  Bis- 
Conti's  voice  when  he  touts 
the  advantages  that  Domino 
and  Notes  users  will  gel  from 
a  fully  integrated  database. 

It's  easier  for  DBAs  to  admin¬ 
ister  a  single-daia-store  archi¬ 
tecture,  he  says.  Plus,  you  can 
perform  Notes  replication 
functions  on  your  DB2  data- 


NUMBER  Of 
NOTESuSER's 


base.  And  you’ll  get  the  cool 
things  a  real  dat^ase  offers, 
such  as  stored  procedures, 
relational  joins  and  improved 
performance  on  ad  hoc 
queries.  Bisconti  acknowl¬ 
edges  that  Release  Ts  DB2 
integration  will  lack  some  of 
the  responsiveness  and  stor¬ 
age  capacity  of  a  Notes  data 
store  because  IBM  is  focusing 
on  getting  the  integration 
right.  Release  8  will  address 
those  shoncomings.  when  it 
I  ships  in  2007  or  so.  he  says. 

nfeusayloinato’. . . 

...  I  say  'a 
spharicalrtd 
fniif  lottoed 
wHhsmal 
seeds.'  **  With 
apologies  to 
Fred  Astaire, 
you  can't  call 
off  the  need 
for  a  complex 
naming  sys¬ 
tem,  especially  If  you’re  run¬ 
ning  an  online  catalog  that 
lakes  product  descriptions 
from  hundreds  of  hralth  care 
suppliers  and  presents  the  or¬ 
dering  data  to  1,700  not-for- 


profit  hospitals  nationwide. 
That’s  the  dilemma  Premier 
Inc.  CIO  Joseph  Pleasant  con¬ 
fronted  earlier  this  year  when 
he  loaded  into  his  “item  mas¬ 
ter”  1.S  million  product  de¬ 
scriptions  that  needed  to  be 
understandable  to  suppliers 
as  well  as  potential  buyers. 
They’re  not  always  speaking 
the  same  language.”  observes 
Pleasant 
from  Pre¬ 
mier’s  Char¬ 
lotte,  N.C., 
headquarters. 
“Suppliers 
use  unique 
branding  terms  that  they 
need  to  refer  to.  yet  it  must 
make  sense  for  hospital  buy¬ 
ers.  too.”  To  bridge  the  defmi- 
tion  chasm.  Pleasant  uses 
Perfect  Product  Suit?  from 
FullTilt  Solutions  Inc.  in 
Wayne.  Pa.  With  it.  he  can  put 
data  into  a  standard  format, 
cleanse  it  and  automatically 
present  the  information  to 
various  constituencies.  He 
says  the  FutlTiii  tool  has 
saved  Premier's  hospitals 
oodles  of  money  and  has  sig¬ 
nificantly  improved  the  or¬ 
dering  and  delivery  process. 
Early  next  month.  FullTilt  will 
release  Version  5.  which  will 
add  a  business  process  engine 
and  a  set  of  visual  process- 
design  tools,  among  other 
features.  The  improved  au¬ 
tomation  will  likely  be  appre¬ 
ciated  by  Pleasant,  especially 
since  be  plans  to  more  than 
double  the  number  of  prod¬ 
uct  descriptions  in  his  item 
master  list  by  the  end  of 2005. 


ONLME  ITEMS 
IN  PREMIER'S 
CATALOG  BY 
END  OF  2005 


Getthelowdowmon 

wnosustng... 

...  which  IT  assals  Yvhtft  and  tor 
how  long.  Thai’s  the  promise 
from  Evident  Software  Inc.  in 
Bloomfield.  N.J.  The  compa¬ 
ny's  Evident  Enterprise  soft¬ 
ware  can  track  group  or  indi¬ 
vidual  usage  of  disk  capacity, 
network  b^width,  applica¬ 
tion  resources,  CPU  cycles 
and  other  data  that  can  be 


computed  into  chargeback 
schemes  or  used  to  buttress 
application  consolidation  or 
deployment  projea  plans. 
Evident  Enterprise  5  is  set  to 
ship  in  mid-October  and  adds 
relational  database  support, 
visualization  tools  and  70 
predefined  reports  of  various 
usage  patterns.  It  will  also 
add  Linux  as  a  supported 
operating  system,  joining 
Solaris  and  Windows.  A  typi¬ 
cal  installation  runs  about 
$350,000. 


Breadth  of  mondoring 
ideal  for  catching... 

. . .  intofttopondeodes  aifwng 
systems.  Depth  isn't  as  neces¬ 
sary.  A1  Eisaian,  CEO  of  Pasa¬ 
dena,  Calif-based  Iniegrien 
Corp..  makes  that  argument 
to  network 
managers 
who  feel  the 
deployment 
of  large-scale 
management 
frameworks, 
such  as  Ti¬ 
voli  and  Uni- 
center,  “are 
overkilL"  He 
says.  “Scope 
is  much  more  important  than 
depth.”  That’s  because  you 
can  more  readily  detect  how 
problems  in  one  infrastruc¬ 
ture  area  can  affect  other 
pan.s  of  your  network.  Alive 
4.0,  which  ships  today,  uses 
agent-free  technology  to 
monitor  everything  fh>m  net¬ 
work  switches  and  routers  to 


the  operating  system  layer 
(though  not  if  you  run  Mac 
OS  X)  and  all  IP-based  appli¬ 
cations.  The  upgrade  adds 
two  views  of  the  state  of  your 
network  and  application  en¬ 
vironment:  a  transaction 


view,  which  gives  you  end- 
to-end  nwnitoring  of  IT 
processes,  and  a  profile  view, 
which  defines  the  domains 
of  systems  administrators.  A 
license  is  $650  per  IP  device, 
and  a  subscription  to  a  ser¬ 
vice  is  $75  per  monitored 
node.  O  49801 


"For  midsized  and  large  organizations,  a  significant 
Linux  deployment  will  neither  be  free  nor  easily 
accomplished.  In  fact,  respondents  at  large 
organizations  reported  that  a  wholesale  switch  to 
Linux  from  Windows*  or  Unix  would  significantly 
increase  TCO  for  the  forseeable  future." 

-Laura  DiDio,  The  Yankee  Group,  April 2004 
Linux,  Unix,  and  Windows  TCO  Comparison 


The  Yankee  Group,  a  global  research  and  consulting  firm,  concluded 
that  a  significant  switch  to  Linux  from  Windows  or  Unix  could  cost  three 
to  four  times  as  much  without  delivering  tangibly  better  performance  or 
business  value.  These  findings  are  based  on  a  non-sponsored  worldwide 
survey  of  1,000  IT  administrators  and  C-level  executives  in  midsized 
and  large  enterprises. 

To  get  the  full  study,  visit  microsoft.com/getthefacts 


hwein  may  be  the  trademarts  of  their  respective  owners 
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Storage  Managers  Seek 
Better  Backup  Methods 
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\  1 1  s  jV.’ni  ''i.T.igi-  k-ehnol- 
•  ‘  a>  Will  .isdiik  lo 

.h>k  b.iikup  uvlm.'!.»f’\, 

■'Ihsk  lo-Jnk  backup  phcs 
\<’V.  bvitcr  pcrfiirmanct-  acnisv 
the  \\  hole  i.rgtni/aiion."  he 
viiJ.  ‘ihir  >irij>'gle  right  novi 
!••  when  v.'u  get  thc-si-  ’OTH  to 
-M'  rit  database  uarehoiLsev. 

'll  don't  w.iiii  to  h.i\e  to  rc- 
»-over  [thi  daial  from  t.ipi  ." 

Matiriv  Ihm/o  |r..  a  senior 
isiiKtate  in  "s  \\  nperations 
al  i>iseo\er  J  inatu  i.il  Serxices 
In. ,  in  Kiverwoojs.  HI.,  said 
lie  s  Kntking  al  1 1  s  —  disk 

•irraxs  that  .ipjvar  to  be  t.ipe 
libraries  to  applieatitm  servers 
i.'  help  liitii  .!ddri SI-.,  om 
i.Ti!  ih.n  .tur  Ku  kiip  XX  mJoxx 
o  not  being  met '  mall .  ases. 

MiiroM.fl  I'orp  beeanu-lhe 
i.ii.  st  ve'iJoi  toiT’-n!!',  sup 
i  'Ti  loi  disk  b.isvd  baekiips. 

.iimo..!i.*nig  a  O’.'  voitierettc. 

•!...!  ii  pk.i.s rei.  isi  in 

<!ii .1  M  it  I  {'rote. Ill'll  s.  rv  ( I 
iii-.t  V.  If  I  M  .  ,t.»r\  t  lehli 
l*en'iis  vhr.et.ir.’t 

.  i.iirprisi- luTielur.  a!  He- 

t  111  V.  ill'.fes  luv  -ai  t  oliitii 

t'  .s  •  *>ti.i  h  IS  three  d.n  i  v.-n 
'. 's  .ai.i  IS  vxiTkine  i*.  tj-pli 


e.ite  intorinaiion  ain.viig  them 
NT  business  eonlinuitx  .ind 
disaster  reeiu  erx. 

-Moivre  said  he's  testing  \  Tl 
teehnologx  as  a  vxav  to  help 
Ketail  Wniures  migrate  from 
digital  linear  tape  Jrixes  ti> 
linear  t.ipe  ..pen  products. 

I  I  s  would  make  it  possible 
to  et.px  d.ila  front  the  l>l.r 
Jrix  es  i«>  disks  beftvre  mox  ing 
the  inlorm.Jtion  to  I.VO-b.iscd 
t.tpe  libraries,  he  vtid. 

i  r  man.tgers  .ilso  need  to 
luxe  .111 ess  to  suONient  int.ir- 
in.ition  abtnit  their  storage  sys¬ 
tems  Moore  s.nJ.  "Ifynu're  not 
getting  repivrts  on  data  sior.tge 
sx  stems  everx  d.ix.  xou  xegol 
d.n.i .»  nsk."  he  s.iid.  .Hiding 
lli.it  .in  audit  IS  K-ing  eonduet- 
eJ  xxiihin  his  eimtpanx  to  x.ili- 
d.!ti'  the  eh.iin  ofeusiojx  for 
.iit.i  .iiiioiig  end  users 

Mieh.iel  Silins.  .i  senior  sxs- 
t.  ms  I  ngiru  i-r  at  I  he  Inier- 
publie  (ir«»up  oft  'ompaiiies 
Ini  ni  Si-'x  \ork.  sud  he 
i  hose  iioi.ige  m.in.tgeineni 
tools  i>..m  t  '.iimiVault  Six- 
tents  hu  bi  i.iiise  the  built-in 

reporting  ..ipabilittcs  were 

a-.ips  and  bounds"  .»Ki\e 

otiii-r  proitu.  ts  0  49598 


Microsoft  Enters  Data  Backup  Arena 


CHICAGO 

Microsoft's  announcement  of  a 
disk-tO'disk  backup  application 
designed  to  consolidate  data 
backups  on  Windows  servers 
positions  the  company  to  com¬ 
pete  against  storage  manage¬ 
ment  stafwarls  sutdi  as  Veritas 
Software  Corp.  and  EMC  Corp.'s 
Legato  Software  division. 

At  last  week's  conference. 
Microsoft  said  its  Data  FVotec* 
tion  Server  software  is  due  for 
beta  testing  in  the  first  quarter 
of  2005  and  general  availability 
in  the  second  hall  of  next  year. 

’About  70%  of  backup  cost 
is  labor.  That  s  what  we're  ad¬ 
dressing.'  said  Jeff  Price,  se¬ 
nior  director  of  Microsoft's  Win¬ 
dows  Server  division.  By  set¬ 
ting  policies  to  automate  back¬ 
ups.  storage  administrators  will 
no  longer  have  to  manually 
start  the  procedures.  The  soft¬ 
ware  will  also  enable  end  users 
to  back  up  their  own  files  'with¬ 
out  involving  IT.’ he  said. 

Some  attendees  said  they 
would  consider  buying  Data 
Protection  Server  because  of 
the  ease  with  which  it  could 
be  integrated  with  Windows 

Jim  Gnsham.  a  chief  IT  ar¬ 
chitect  at  Northrop  Grumman 
Corp.  in  Los  Angeles,  said  the 


company's  IT  staffers  have  to 
:  meet  strict  data  recovery  dead¬ 
lines  and  must  be  able  to  re¬ 
cover  all  of  the  data  at  any  giv- 
•  en  time -standards  that  tape 
:  can't  currently  meet. 

Northrop  Grumman  plans  to 
;  install  disk-fo-disk  software. 

but  Grisham  said  he  would  like 
:  to  buy  an  application  that  re- 
;  quires  (he  least  amount  of 
;  training  for  Northrop  Grum- 
:  rnans  systems  administrators. 

:  ’Sometimes,  if  a  product 

■  makes  their  lives  easier,  it's 
;  worth  it.' he  noted. 

But  John  Blackman,  a  sys* 

.  terns  architect  at  a  West  C^t- 
:  based  bank  that  he  asked  not 
;  be  named,  said  proven  data 
backup  vendors  offer  far  more 
;  mature  products  than  Data  Pro- 

■  tection  Server.  Something  new. 

:  even  horn  Mtaosoft.  would  be 

-  a  hard  sell  inside  his  comparry. 

.  Blackman  said. 

Data  Protection  Server  IS 
:  built  on  top  of  Windows  Stor- 
:  age  Server  2003  and  Micro* 

:  soft’s  Active  Directory,  which 
works  with  the  backup  tool  to 
automatically  identify  file 
:  servers  and  install  software 
:  agents  that  kick  off  backups 
;  based  on  preset  pcriicies. 

-  Lucas  Meahan 


GAO  Says  Offshoring  Could 
Stymie  Tech  Job  Growth 


Hut  iigi'iiL  V  \\;irns 
th;il  liiiia  is  lackini: 

ay  PATRICK  THIBODEAU 
Viji-v  u  u-rnment  n-port  in 
IiCpIN’’*  jIj.i'  ’’iTshiTi-  ’nitMiUTL 
•nu  .  .<iiU  fiurt  n  i-m|-l«'xnii-rii 
t’nixxth  ’'x-T  thi-  noM  Jiv.idi 
Hut  th«-  stud}.  fi'IiMscd  1.1VI 
'XU  f.  t  >  till  •  .s 
.Xii'i’unt  ihilitx  (llTiii-.  is  sprin¬ 
kled  xxith  I  jvi'.iis  jnd  qujli 
iNTs  K’c.iu-n'of \xh.ii  ihi-ti.At » 
viid  IS  j  Ijck  <'i'sufniN-nt  Jjio. 

I  he  <j.\(  I  jekmm  jedged  in 
■  hi-  n-p'Ti,  which  wjs  request 
.  d  t  >  Iti’miH'Mls  in  the  Hou.se 
■V  rfos’.rtjtixes, rhatlhe 
•  1  I  i.t  > .  listing  Jjtj 


n't  I'Tox  ide  .»  ciunplete  pu 

'tlTl  "t'lltC  m!p.iel  Ol  olShtTi 
liil’nr  on  the  I  s.  leoiuiitn.  .\i 
hi-si.  the  .ixitiluble  d.itj  pro 
vide'-  onix  “some  elues”  (n  thi- 
extent  ot'otfshoring  .iclivitx. 
the  (..-V » s.i|d  f-urlher  etToris 
xx  ill  he  needed  to  undiTst.ind 
the  ■•sin.ill  hut  growing  trend." 
it  .iJJeJ. 

r  loxcrnmeni  projeetiojis  in- 
Jiciite  ihjt  1  r-rel.ited  occupj 
tions  jre  exjveted  to  grow 
faster  th,in  most  oeeiipations 
through  201’.  .leeorJing  to  the 
t  i.\i ).  Indeed,  seven  of  the  .^O 
Jastesi  -gr*  nvingoei-upations 
;ire  related  to  IT.  But  the  pro- 
jeeted  rate  of  growth  for  those 


.ig.'lioiis  for  the  perin.i 
imm  .’iHi.'  to  2(»1J  is  signin 
.-.uitlx  lower  tlvin  ilie  r.ite  pro 
jeeled  Iit  Jcmhi  to  Jolo,  rlie 
I  ,.\t  t  ri  porled. 

I  he  report  Joi-sn't  sax  with 
ii-rl.iinix  that  offshontig  is  to 
hJanie  fur  tJie  projei  ted  ihaiige 
in  IT  l.ihorgroxvth.  h  eiies 
the  reeessiun  earlier  in  this 
Jeeade.  the  bursting  of  the 
Jot-ixim  bubble  ot  the  late 
I'lxtOs  and  increases  in  pixKluc- 


IMM;N«tu\Xi. 

tuvlil 

I-.hj  I'iiamIi  Ijiiuii-il 
lii^.^l.,  .1  <.Ot'|.|„a„.. 


The  GAO  report  said  eiisting  data 
doesn't  provide  the  complete  picture. 


ttxitx  a*-  poteiiliai  contributors 
to  the  rev  tseJ  I'lb  loree.i<i. 

In  tLTttis  of  oftshoriiig  sef 
feet  on  L'  S.  workers.  fhe<i.\tl 
s.iid  the  ( hip.irtmeni  of 
I  abor's  suixex  on  mass  laxoffs 
shows  that  laxoffs.niribiitable 
to  the  shift  of  jobs  to  .»ther 
countries  have  inerx-awJ  since 
but  still  represent  a  small 
fraction  of  job  cuts.  Of  the  1.5 
ntillion  l.ixotl’s  reported  in 
2tXl)d.  just  (l.‘>"..  xxore  the  result 
o|  overseas  reloealion  —  and 
most  of  those  layoffs  were  in 
the  manufacturing  sertor  Hut 
ihe  (i.AO  sciid  the  survey  has 
shi*rtc«»mingv  because  it  C!iv- 
ers  only  large  companies  and 
ihv>se  that  laid  off  at  least 
petvple  in  a  fixe-w-eek  period. 

In  a  statement.  Rep.  |ay  Ins- 
lee  IH-VVash.)  called  the  re¬ 
port  "a  weleome  first  step"  in 


uuderst. Hiding  ihe  offshoring 
trend-  Hut.  he  s;iij.  "1  remain 
loiiii-rned  that  this  repxTt  is 
conspiitiouslv  ineonipleie." 
Iiisliv  added  that  if  needed 
d.ita  is  indeed  lackirjg.  •'iJu-ii  it 
is  imperatixe  lh.it  xve  push  fur¬ 
ther  studies  that  xx  ill  fill  the 
gap  between  raw  numbers  and 
public  policx." 

Marcus  ('ourtney,  president 
of  the  Seattle-based  W'.ishing- 
ton  -Mlianec  of  Technology 
Worke'rs.  said  the  tiAO  studx 
elcarlx  points  i»*  a  need  for 
belter  data.  "Tor  the  G.AO  to 
give  tiongress  policy  recom- 
menJatiivns,  they  need  belter 
informalii»n."  said  Ca»urtney. 
who  called  on  (Congress  to 
compel  companies  to  provide 
data  so  the  government  can 
"got  a  handle  on  the  trend." 

0  49643 
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Fa<;ei>  with  shrinking 
backup  windows  and 
continued  data  growth. 
IT  man^ters  said  at  a 
coohR'ence  last  week  that 
they're  trying  to  cope  by  con- 
*  solidating  storage-area  net¬ 
works  (SAN),  gening  a  better 
of  their  storage  in^- 
•^ructures  and  increasing  the 
^mount  of  online  disk  storage 
^1  their  disposal. 

4f^  Virtual  tape  libraries  (VTL> 

find  disk-co-disk  backup  sys- 
ems  topped  the  list  of  tech- 
•nologies  that  users  at  the  Stor¬ 
age  Decisions  2004  confer¬ 
ence  here  said  they're  rolling 
out  in  order  to  speed  up  their 
data  backup  and  recovery  pro¬ 
cedures. 

“We  keep  getting  more  pres¬ 
sure  to  bring  down  the  data 
recovery-  time,’*  said  Robert 
Stevenson,  a  technology  strate¬ 
gist  at  Nielsen  Media  Research 
Inc.  in  New  York.  Stevenson 


GAO  Says  Offshoring  Could 
Stymie  Tech  Job  Growth 

But  agency  warns 
that  data  is  lacking 


occupations  for  the  period 
from  2002  to  2012  is  signifi¬ 
cantly  lower  than  the  rale  pro- 
lecicd  for  2000  to  2010.  the 
GAO  reported. 

The  report  doesn’t  say  with 
certainty  that  offshoring  is  to 
blame  for  the  projected  change 
in  IT  tabor  growth.  It  cites 
the  recession  earlier  in  this 
decade,  the  burstii^  of  the 
dot-com  bubble  of  the  late 
1990s  and  increases  in  produc¬ 


tivity  as  potential  contributors 
to  the  revised  job  forecast. 

In  terms  of  offshoring's  ef¬ 
fect  on  US.  workers,  the  GAO 
said  the  U.S.  Department  of 
Labor’s  survey  on  mass  layoffs 
shows  that  layoffs  attributable 
to  the  shift  of  jobs  to  other 
countries  have  increased  since 
1999  but  still  represent  a  small 
fraction  of  job  cuts.  Of  the  1.5 
million  layoffs  reported  in 
2003.  just  0.9%  were  the  result 
of  overseas  relocation  —  and 
most  of  those  layoffs  were  in 
the  manulacturing  sector.  But 
the  GAO  said  the  survey  has 
shortcomm^  because  it  cov¬ 
ers  only  large  companies  and 
those  that  laid  off  at  least  50 
people  in  a  five-week  period. 

In  a  statement,  Rep.  Jay  Ins- 
tee  (D-Wash.)  called  the  re¬ 
port  "a  welcome  first  step"  in 


understanding  the  offshoring 
trend.  But.  he  said.  '*1  remain 
concerned  that  this  report  is 
conspicuously  incomplete." 
Inslee  added  that  if  needed 
data  is  indeed  Lacking,  “then  it 
is  imperative  that  wc  push  fur¬ 
ther  studies  that  will  fill  the 
gap  between  raw  numbers  and 
public  policy." 

Marcus  Courtney,  president 
of  the  Seattle-based  Washing¬ 
ton  Alliance  of  Technology 
Workers,  said  the  GAO  study 
clearly  points  to  a  need  for 
better  data.  “For  the  GAO  to 
give  (ingress  policy  recom¬ 
mendations.  they  need  better 
information."  said  Courtney, 
who  called  on  Congress  to 
compel  companies  to  provide 
data  so  the  government  can 
“get  a  handle  on  the  trend." 

Cl  49643 


can’t  provide  a  complete  pic¬ 
ture  of  the  impact  of  offshore 
labor  on  the  U3.  economy.  At 
best,  the  available  data  pro¬ 
vides  only  “some  clues"  to  the 
extent  of  offshoring  activity, 
the  GAO  said.  Further  efforts 
will  be  needed  to  understand 
the  “small  but  growing  trend,” 
it  added. 

(kivemment  projections  in¬ 
dicate  that  IT-related  occupa¬ 
tions  are  expected  to  grow 
(aster  than  most  occupations 
through  2012,  according  to  the 
GAO.  Indeed,  seven  of  the  30 
fastest-growing  occupations 
are  related  to  IT.  But  the  pro¬ 
jected  rate  of  growth  for  those 


av  MTRWN  THiaOOEAU 

A  new  government  report  in¬ 
dicates  that  ofi&hore  outsourc¬ 
ing  could  hurt  IT  employment 
growth  over  the  next  decade. 
But  the  study,  released  last 
eek  by  the  U5.  Govemroent 
.accountability  Office,  is  sprin- 
'  led  with  caveats  and  quali- 
ers  because  of  what  the  GAO 
lid  is  a  lack  of  sufficient  data. 
The  GAO  acknowledged  in 
the  report,  which  was  request¬ 
ed  by  Democrats  in  the  House 
of  Representatives,  that  the 
govemntent's  existing  data 


~DrtESN;d16NAL 


SCHOOL  OF  CWCAOO 


•  •••••••  «  ^^•****^  **••  connected.  Voice  over  IP  is  at  the  heart  of  The  Latin  School 

•»!••* •••«•••!•  .I*  Chicago’s  new  network.  Thanks  to  an  integrated  platform.  Web  site  and  phone 

••*•*••*«•*••••  system  information  is  easy  to  manage,  features  and  new  users  are  easy  to  add.  And 

*•••••!••••••*  IP  phones  in  classrooms,  it’s  easy  to  access  Important  WeW>ased  information. 

••  whether  the  day’s  lunch  is  gried  cheese  or  ravioli.  Find  out  more  about  how  we’re 

helping  Latin  School  connect  the  dots  ^  sbc.corrv'dots.  GOMG  BEYOND  TYC  CALL* 
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Orade  to  Support 
Unstructured  Data 

Oncls  Corp.  confiniMd  ttul  H 
plam  to  t««radt  its  Cdtaboritnn 
SuMi  loKwm  wWi  centpnt  cnan* 
•Qanwnt  capabMas  supporting 
tho  UM  of  tmslructurad  data,  but 
H  daelnad  to  prrnMo  any  doUils 
about  tho  now  todmology.  Lon* 
don-baaod  conwdting  ftnw  Owwn 
Ltd.  saM  11  a  roport  bauad  this 
month  that  tha  upprada  b  coda* 
namad  Tsunami  and  duo  to  ba 
announcad  in  the  fourth  quartor. 


SAP  Brmgs  Back 
Europe  Conference 

SAP  AQ  said  it  ptom  to  ravna  tha 
Ewopaoo  varsion  of  its  Sapphira 
uaar  confaranca  naat  April  Sap- 
pMra  &jrapa  was  dropped  aflar 
the  2002  avani  in  faimr  of  sraaA- 
ar.  mora  locafand  contarancas. 
But  an  SAP  voiMman  stod  users 
toU  tho  software  vendor  that  they 
"miesod  dw  opportunity  to  bdor- 
act  at  a  European  taval*Tha 
eofflpany  piona  to  held  the  can* 
faranoe  in  CoponhapwL 


Ford  Sm  Deal 
ForlPlelephony 

SBC  Conununications  Ine.  said  it 
wfi  dasipR,  biatal  and  manapa  an 
P  lalaphony  system  for  mora 
than  50.000  uaan  at  Ford  Motor 
Co.  Dm  systom  wN  bo  rolod  out 
evar  At  nest  flirao  yaars.  uaing 
networMng  aqidpment  and  IP 
phonoa  from  Ctow  Systonw  bic. 
Tho  rnmpaaiai  idnt  Aaclooo 
tho  profootod  ootl  of  Aa  roloiil. 

-  --«««  —  -  -  r- — ■»- 

wbkh  amo  ana  oemmrpa  ram  s 
votet.  data  and  video  natworto. 


Short  Takes 

MCROSOfTCORP.atodilwAof- 
far  govaramant  tmars  accaaa  to 
the  Bouree  cade  for  Office  System 
2003  under  Hi  Aarad’tourca 
Icsnsa  pragram. . . .  SIEIENS  AO 
aaM  rs  ndgraAia  ahaut  350.000 
aadimaratomertAanlOObuai- 
noaa  unte  from  Vtoaton  5.5  of 
HGiomin  •  cjBnanpi  laaaaapmg 
aoBware  to  Esehanpa  2003 
[QidciiLMABSMI. 


Users  Bemoan  Software  Price 
Increases  for  Dual-Core  CPUs 


Development  of  servers  with  two 
processors  leads  to  rise  in  license  fees 


The  ADVENT  OF  dual- 
core  processors  with 
two  CPUs  on  a  single 
chip  is  causing  many 
rr  mam^rs  to  wring  their 
hands  over  the  hefty  increases 
in  licensing  fees  sought  by  ma¬ 
jor  software  vendors. 

Users  and  analysts  at  Gart¬ 
ner  Inc.’s  IT  &  Software  Asset 
Management  Summits  here 
last  week  said  companies  that 
have  installed  servers  based  on 
dual-core  chips  or  that  have 
made  plans  to  do  so  are  being 
hit  b>*  vendors  such  as  IBM  and 
Oracle  Corpi  with  software  li¬ 
censing  fees  that  are  twice 
what  they  were  paying. 

Vendors  are  trying  to  justify 
the  increases  on  the  grounds 
that  the  application  and  data¬ 
base  servers  on  which  their 
software  runs  will  contain 
twice  as  many  processors 
when  they're  usii^  dual-core 
devices,  conference  attendees 
added.  Some  said  the  price 
increases  may  be  a  starting 
point  for  negotiations,  but 
they  reluctantly  acknowl¬ 
edged  that  their  companies 
will  likely  have  to  pay  more 
for  software  in  the  long  term. 

“We  started  negotiating 
with  Oracle  on  a  new  data¬ 
base  contract  last  month  and 
were  shocked  to  see  bow 
much  more  expensive  the 
software  was  than  we  expect¬ 
ed.”  said  an  IT  asset  manager 
at  a  large  catalog  retailer  who 


asked  not  to  be  identified. 

The  retailer,  which  is  in¬ 
stalling  a  Sun  Microsystems 
Inc.  server  that  uses  dual-core 
technology,  has  since  negotiat¬ 
ed  discounted  terms  with  Ora¬ 
cle.  “But  it's  still  more  expen¬ 
sive  than  we  anticipated,”  the 
asset  manager  said. 

In  April,  Oracle  clarified  in¬ 
formation  posted  on  its  Web 
site  to  inform  customers  that 
“a  multicore  chip  with  N  proc¬ 
essor  cores  is  treated  as  N 
processors"  for  software  li¬ 
censing  purposes.  "But  that's 
the  way  we’ve  always  charged,” 
said  Jacqueline  WcxkIs.  vice 
president  of  global  licensing 
and  pricing  strategy  at  Oracle. 

A  spokesman  for  IBM  con¬ 
firmed  that  it  plans  to  contin¬ 
ue  charging  users  based  on  the 
number  of  processors  on  their 
servers.  There’s  always  room 
for  negotiation,  but  one  proc¬ 
essor  is  the  basis  for  the  li¬ 
censing  cost.”  the  spokesman 
said.  “Whether  two  processors 
sit  on  the  same  piece  of  silicon 


Hit’s  a  lot  like 
mainframe- 
based  software 
pricing -you  pay 
more  for  larger 
processors,  but  you 
don't  get  any  more 
software  functional¬ 
ity  out  of  it. 

GREGORY  WOODS,  OKUHOMA 
DEPARTMENT  OF  HUMAN  SERVICES 

or  not,  we'll  still  charge  for 
those  two  processors." 

Gartner  analyst  Alvin  Park 
said  he  has  heard  from  Micro¬ 
soft  Corp.  users  that  they’re 
getting  similar  messages  about 
software  costs  for  systems 
with  dual-core  chips. 

But  Sunny  Jensen  Charle- 
bois,  product  manager  in 
Microsoft's  worldwide  licens¬ 
ing  and  pricing  group,  said  in 
an  e-mail  statement  that  the 
company  has  “nothing  to  an¬ 
nounce”  at  this  time.  Because 
of  the  complexity  of  the  issue. 
Microsoft  is  continuing  to 


gather  feedback  from  cus¬ 
tomers  and  business  partners 
“to  evaluate  how  they  will  use 
this  technology."  she  added. 

Not  surprisingly,  10  IT  man¬ 
agers  interviewed  at  the  con¬ 
ference  all  said  the  increased 
licensing  fees  are  unfair. 

“It’s  a  lot  like  mainftame- 
based  software  pricii^  —  you 
pay  more  for  lai^r  processors, 
but  you  don’t  get  any  more 
software  functionality  out  of 
it,"  said  Gregory  Wood,  direc¬ 
tor  of  critical  support  services 
for  the  IT  unit  within  the  Ok¬ 
lahoma  I>epartment  of  Human 
Services  in  Oklahoma  Oty. 

E>onnie  Rogers,  an  FT  sup¬ 
port  manager  at  AAI  Corp.  in 
Hunt  Valley.  Md..  hopes  that 
any  future  installations  of 
multicore  servers  won't  signifi¬ 
cantly  affect  the  defense  con¬ 
tractor's  licensii^  costs  for  at 
least  a  year.  AAI  runs  Oracle’s 
ERP  software  and  databases. 

"What  I  would  do  is  ask  Or¬ 
acle.  ‘What  can  you  do  to  keep 
me  in  my  operating  budget  for 
now  and  handle  any  software 
license  increases  on  an  incre¬ 
mental  basis?’  ”  Rogers  said. 
049B48 


IT  SMttches  From  Hardware  Leasing  to  Pinhasing 


*  vnUviHiiarof  ITumgin 
anriMigMrimMml 
sliWgiBlnIwardtBdiaing 
Pttid  wnm  fcdilotit- 
hg  tan  naiing  tDdMMB 

•  WMdt^ITtSoRwntagl 

MmgBMnt  Samis. 

OsitiistmilistriiiKSi 
OBrnisatltasNnisbalng 
drtnn  by  Inmmg  smM 
ntesmldmsianlnisnl 
among  uansAi  basing 
'gsUas.' such  as  ganHaa  lor 
WoistnasRlilBiagas. 

XonaaSssasaiklsgaal 
tB^sotgokgtoahfiioqap- 
nanlladilolabaaoroBiaa. 
andlmdatmtsconoiia: 
ssnstiBibiyia  satsaai  ori- 


ltd*,' aU  OBUan.  oho  sgota 
diaeonhwnca. 

OWau's  connaiiB  nap  aMi 
MbsckbumsswallTiiBn- 


Rir  balBws.  an  IT  acquWbn 
managar  at  a  (sms  phaniaoaui- 
ol  maaiiachsarM  iscanlly 
boiids  la  oonpanir  aha  aas 
araMng  krald  da  had  baan 
Mgaaipnant  But  diarlla 
acgubMnilarunlaalldiadlo 
a  wdaalngagonKh.  Hal 
aantegariytoiadialh 
laiaapmalimaaiiblKb- 
ndop  paacmawd  nadd  laid 
HaiaanasKahsidadfallD 
bsbM>ad.MlakpaBtdd- 
wn  byia  laoaS  Ids  Mong- 


WnbilBnaliaknahtadd. 

Fsraomtrdharallandeai. 
nadaaiign'aqulaiartm- 
maaahoabasaatuadL  FadanI 
Nona  loan  Mortapa  Cop. 
omducdspiadaam-laaat 
anah*  siaiy  B  nada, ‘and 
ai>aoanliiuadlDpiiEhaBB.’ 
aaidCMnllnbisa.ailTaaal 
nanBgarallaUdnan.«b.- 
haaadbnma  dantiig  uiiajai). 
bnnaiaaFMItMK. 

Thaoaraganyabaaaalngls 
laaol  hplop  1^  andlacoak 
dPBdgfaraoBchasandolar 
danagaaadrilBaa>d 


laaaaliVa 


adraslsapplaat.' 

-VmmHilkm 


''Vt>r«  *»sn't  do  much  more  than  compromise.  Hybrid  doesn't  do  seamless 

‘  ^o  if  it's  a  car,  go  hybrid.  If,  l«^«^s  a 

Be<aUISEPH^S«!^iJ!SMTZnm'^^*t*“'*  T  solution:  CISCO  IP  COMMUNICA-nONS. 

■>«n«MV9c  rm/iwa  uu  imorc.  Learn  more  at  www.cisco.com/domore. 
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HP’s  CIO  Points  to  Internal 
Issues  in  ERP  Project  Snaflis 


Eight  months  after  he 
became  CIO  and  exec¬ 
utive  vice  president  of 
global  operations  at 
Hewim-Packard  Co„  OMtes 
Bouchard  was  put  in 
about  as  unenviable  a 
position  as  an  IT  man¬ 
ager  can  Hnd  himself 
In  August.  CEO  Carly 
Fiorina  said  HP  had 
"executed  poorly"  on  a 
migration  to  an  order- 
processing  and  supply 
choin  system  based  on 
SAP  AG's  applications  (Quick- 
Link  48819],  She  partly  blamed 
the  problems  for  a  S400  mil- 
lioo  third-quarter  revenue 
sbort^  within  HP's  enterprise 
servers  and  storage  group.  In 
an  interview  thb  month. 
Bouchard  spoke  candidly  about 
what  it  was  like  to  be  on  the 
IT  hot  seat  Excerpts  follow: 

OivM  that  yw’re  dkaetty  mpon 
sBrie  for  iupfily  ehi^  and 
IT  syslomt.  whait  wn  yow  rdo  in 
Hm  foHod  OiP  migrotloR?  I  got 
this  job  in  December,  and  in 
the  following  four  or  five 
months,  what  I  didn't  want  to 
do  was  merge  business  and  IT 
just  at  the  corporate  level  I 
wanted  to  also  merge  it  in  the 
Held,  in  each  region  and  each 
country.  A  lot  of  the  pieces  of 
the  supply  chain,  order  man¬ 
agement  and  IT  [fonctions] 
were  in  different  businesses. 
Bringing  those  thirtgs  together 
into  one  operation  became  of- 
ActalonMoyL 
This  [ERP  migration]  prob¬ 
lem  broke  out  three  weeks  lat¬ 
er  In  the  Americas  regioa  It 
was  one  of  many  transitions 
we  bad  done,  and  are  still  do¬ 
ing.  where  we  simplify  our 
portfolio  of  ERP  [systems!. 

This  was  the  3Sth  transition  we 
had  dmie;  34  had  gone  well 
and  this  one  did  not  go  well. 

What  iMRl  wnNiQ?  It's  a  lot  of 
little  things  that  added  up.  Not 
oae  or  two  of  them  would 


have  created  the  problem,  but 
the  combination  of  them  cre¬ 
ated  a  bigger  problem  than  we 
expected.  We  had  planned  for 
three  weeks  of  disruption,  and 
there  were  six  weck& 

These  problems  are  in  three 
major  categories.  One 
we  call  "working  across 
silos."  The  team  that 
was  driving  this  pro¬ 
gram  had  to  work  with 
other  parts  of  the  com¬ 
pany.  And  working 
across  these  seams 
proved  difficult _ Sec¬ 

ondly.  there  were  a  lot 
ofdaia-integrity  [problems]. 
Orders  fell  out  between  the 
legacy  froot-end  system  and 
SAP  on  the  back  end.  which 
required  a  lot  of  manual  inter¬ 
vention —  The  third  element 
was  increased  demand.  This 
migration  had  to  do  with  our 
Intel-based  server  business. 
The  demand  really  increased 
for  those  products,  and  it's 


still  very  high  right  now, 
which  is  good  news.  But  it  put 
even  more  pressure  on  the 
whole  system.  We  should  have 
had  a  contingency  plan  for 
four,  five  or  six  weeks. 

HP  has  madi  It  dear  that  this 
W3S  an  implementation  problem, 
not  an  SAP  problam.  So  where 
exactly  does  SAP  m  into  the  mix? 
Clearly  there  was  an  SAP 
component  to  it.  but  the  issue 
that  created  the  problem  was 
not  the  SAP  [software)  itself 
It  was  the  set  of  business 
processes  that  went  around  it. 

Do  you  agree  with  Carly  FkMiiu's 
conclusion  that  HP  "executed 
poorly  on  the  migratkin?"  Yes. 
When  orders  fall  out  and 
there's  more  manual  interven¬ 
tion  and  there  are  data  integri¬ 
ty  issues.  I  would  call  those 
execution  issues. 

What  sfKNiM  you  have  done  dlf- 


ferenHy?  In  August,  we  went 
back  and  basically  polled 
everybody  involved  in  the  pro¬ 
gram  and  all  the  stakeholders 
and  tried  to  turn  this  into  a 
learning  experience.  We  just 
got  the  results  a  few 
weeks  ago. . . .  When 
you  consolidate,  by 
definition,  there’s  a 
lot  more  interdepen¬ 
dencies.  When  everybody^ 
got  their  own  ERP  (system!, 
they  can  all  work  within  their 
own  silos.  Now  there’s  a  lot 
more  commonality  and  a  lot 
more  sharing,  and  a  lot  of 
learning  in  terms  of  program 
management.  We’ve  invested  a 
lot  in  program  management. 

Fiorina  firod  thrat  managori  bt- 
cauaa  of  whal  happanod  in  the 
third  quarter.  How  did  you  ascapa 
the  guHlotlna?  Why  did  we  miss 
[our  numbers  in!  Q3?  It  was 
not  just  because  of  this.  We 
have  four  businesses  at  HP: 


PCs.  servers,  services  and 
printers.  In  Q3.  three  of  the 
businesses  met  their  goals  and 
did  well  and  one  missed.  And 
it  missed  for  three  reasons. 
One  was  the  SAP  transition, 
one  was  weakness  in  the  stor¬ 
age  business,  and  one  was 
some  channel  issues  in  Eu¬ 
rope.  What  Carly  did  is  she 
put  accountability  at  the  busi¬ 
ness  management  level  She 
took  people  out  who  were  in 
charge  of  those  busi¬ 
nesses. 

Art  tho  problems  fixad? 
Can  cwtomara  expect 
fbelr  ordars  on  dma?  The  de¬ 
mand  being  still  strong,  we 
have  some  product  shortages. 
So  you  might  find  a  customer 
with  a  lead  time  that's  longer 
than  ideal  but  that  has  noth¬ 
ing  to  do  with  what  happened 
in  Q3.  049604 
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University  Bedeviied  by 
Pbrtai  Roiiout  ^oblems 


PeopIeSoft  system 
crash  at  UMass  has 
lingering  effects 


BY  MABC  L.  SOMOlWI 

A  Student  information  system 
built  around  PeopIeSoft  Inc.*s 
applications  crashed  earlier 
this  month  at  the  University  of 
Massachusetts,  causing  seri¬ 
ous  disruptions  for  thousands 
of  students  and  forcing  the 
school’s  IT  staffers  to  limit  the 
use  of  a  turw  software  portal 
The  system  crash  occurred 
SepL  7  at  the  main  UMass 
campus  in  Ambefst,  and  uni¬ 
versity  spokesman  Ed  Blagus- 
zewski  said  there  are  still  peri¬ 
ods  when  the  student  admini¬ 
stration  applications  are 
bogged  down.  IT  workers  con¬ 
tinue  to  troubleshoot  the  sys¬ 
tem  in  an  effort  to  folly  re¬ 


solve  the  problems,  be  added. 

UMass  is  the  second  univer¬ 
sity  to  be  waylaid  by  glitches 
in  PeopIeSoft  installations  at 
the  start  of  the  new  school 
yeat  The  University  of  Indi¬ 
ana  disclosed  earlier  this 
month  that  problems  on  a 
PeopIeSoft  rollout  there  had 
temptoiarily  left  as  many  as 
3,000  students  without  access 
to  promised  financial  aid 
((^icklink  49349). 

At  UMass,  the  applications 
automate  tasks  su^  as  regis- 
tratiem.  financial  aid  services 
and  preparation  of  class 
schedules.  Blaguszewski  said 
t)ie  piobiems  arose  after  the 
school  replaced  a  homegrown, 
Web-based  ftont-end  applica¬ 
tion  with  PeopleSoft’s  portal 
software  in  July. 

Some  initial  bugs  were 
woriced  out  during  testij^  and 


the  new.  more  user-friendly 
ponal  went  live  in  time  for  the 
start  of  classes  in  early  Sep¬ 
tember.  At  first,  the  system's 
overall  performance  was  satis¬ 
factory,  despite  slowdowns  at 
times.  Blaguszewski  said.  But 
then  the  system  crashed,  and 
end-user  access  remained 
slow  and  intermittent  after  it 
was  restored. 

That  resulted  In  "significant 
confusion,  frustration  and  in¬ 
convenience  across  campus" 
when  classes  began  on  S^l  8, 
Blaguszewski  said.  Some  stu¬ 
dents  didn't  know  where  their 
classes  were  being  held.  Oth¬ 
ers  were  urtablc  to  add  or 
drop  classes.  The  problems 
prompted  school  officials  to 
use  e-mail  blasts  and  post 
more  data  online  to  provide 
information  to  students. 

According  to  Blaguszewski 
the  UMass  IT  staff  worked 
around  the  clock  to  fix  the 
problems,  with  help  from  a 
third-party  consultant  and 
PeopIeSoft  employees.  As  part 


of  an  interim  work-around.  IT 
made  configuration  changes 
and  staggered  portal  usage  by 
user  type,  requirir^  students 
and  faculty  members  to  I<^  on 
at  different  times  to  prevent 
another  crash. 

"The  university  community 
now  has  foil  access  to  the  sys¬ 
tem.  and  we  will  monitor  per- 
fonnaxvce  closely,”  Blaguszew¬ 
ski  said,  adding  that  the  cause 
of  the  system  crash  is  still  un¬ 
known.  He  noted  that  the 
school's  database  of  student 
information  remains  intact. 

PeopIeSoft  spokesman  Steve 
Swasey  said  the  problems 
weren't  caused  by  the  compa¬ 
ny’s  software  and  declined  to 
comment  further  on  the  situa¬ 
tion  at  UMass. 

Lori  Goss,  education  and 
government  marketing  direc¬ 
tor  at  PeopIeSoft.  also  de¬ 
clined  to  comment  about  the 
problems  during  an  interview 
at  the  software  vendor's  Gin- 
itect  2004  conference  in  San 
Francisca  04«632 
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<  tmtinui'd  from  puw  / 

Kumar 

.iurccmonj  oxor  thi-  mxt  JH 
niiinihs 

As  j  result  .>f  the  deterred- 
pr«>svvut»i*ri  de.il  hctvxeen  the 
eump.im  and  the  IX)?. “('A 
"ill  he  K’tter  olV,''  sjjJ  Ks'n- 
neth  Pand.ile<m.  a  senior  net 
uork  enitmecr  at  NH  TY  Jne.,  a 
Hohemia.  N.Y.-hased  maker  v>t' 
nutriiioiui  produets. 

Kumar  and  former  head  •»? 
worldwide  >.lles  Stephen 
Kiehards  both  pleaded  ni>i 
(iuiltx  t*»  10  ehaiyes.  including 
securities  fraud  and  obstruc¬ 
tion  of  justice,  in  l^S.  District 
f.ouri  in  Brooklyn.  N.Y..  last 
rhursdav.  one  skn  after  the  in¬ 
dictments  .tj^tinsi  them  were 
unsealed.  Bt»tb  men  were  or 
dered  b\  the  court  i«t  post  a 
S5  mUliitn  bond  and  surrender 
their  passports. 

Meanw  hile.  Stephen  Wofih 
in.  CA'-s  former  iieneral  ci»un- 
ss'l.  pleadk'd  cuiltx  to  similar 
ehar^ies  ftir  his  role  in  the  al- 


(  on/inued  from  pufiv  J 

Woolworths 

From  th.n  point  on.  the  m.i- 
|or  ehallenjic  for  Ktvis  be¬ 
came  cons  ineiiijt  skeptics  that 
the  Mainst>fl  produs'i  would 
\vt)rk.  “Our  own  di-selopers 
and  our  internal  systems  man 
JHers  didn't  K-liese  it  until  I 
sh*med  them  hiwv  it  wt>rks.“ 
he  said.  “They  siiid,  'That  w  ill 
not  bs-  optimi/vd.  and  there 
will  bi*  many  issuev' " 

Hut  K«ts'lss;iid  WiHitwonhs 
haseneounis'red  mi  major 
lechnohvy  pis iblems  since 
commeneiny'  the  project  in 
|ulv.  The  i\-tailer  plans  u*  de- 
ph'V  the  .ipplicjlion  in  a  pro¬ 
duction  environment  by  the 
end  t«f  ne\t  month.  To  ensure 
that  pertornianee  is  optima). 
Woolworths  kept  the  applica¬ 
tion  simple  and  let  the  |J?F.F 
.ipplieation  .ind  portal  sc-r\ers 
handle  Sivunty  and  data  re 
f  ri.'shes.  kiK'i.s 
^■.ue^w  t  a»hen.  i.FOof  s.in 
|.  isi-  based  Maiiisoh.  said  eus 
i.mi.  rs  eenecillv  experience  a 
'•  )  V  rli-rnian.  e  devtr.idJlion 

•M.;  .<i\  i  nil  fijtrxe  |.w.i 


lecied  accouniinj:  scheme, 
which  d.ites  to  !')•»•)  .mJ 

Kumar  left  t  A  in  (une,  two 
months  .liter  he  was  ousted 
from  his  positum  as  chairm.in 
.ind  (  H >  [l^uiek I  ink  47.t{.,S  |. 
Hie  indictment  ayiainst  him 
eh.ir}:es  that  under  his  leader¬ 
ship.  l  A  instituted  .1  systemic 
praiiiee  of  falsely  reeordirifj 
some  software  s.ilcs  within  a 
llscal  siuarter  even  though  the 
contracts  wereni  aeiually 
sijtned  during:  the  period. 

Alleged  Falsifications 

rhe  itovernment  claims  that 
Kumar  and  Richards  personal¬ 
ly  advanced  the  jtoals  of  the 
aceouniini:  praelice,  which 
was  built  around  a  so-ealled 
.\'-day  month.  For  example, 
the  indictment  says  that  <*n 
luh  K.  Kumar  was  flown 
on  the  (.'.A  corporate  jet  to 
Paris  to  nepxiaie  a  S.’’  million 
software  lieenstiij:  agreement, 
which  was  falsely  baekdaii'd 
t«i  lune  -h). 

The  nO|  said  CA  has  ae- 
eepteJ  responsibility  for  the 


alleged  illegal  conduct  of  its 
former  executives  as  pan 
of  the  cooperation  deal  that 
was  anmiunced  last  week.  The 
company  reached  a  simibr 
agreement  w  ith  the  L’.S.  Secu¬ 
rities  and  F.xelumge  Commis- 
sitin  Ui  settle  securities  fraud 
charges  that  the  SF;r  filed  in 
the  Hroi>klyn  eourt- 
“With  these  agreements. 


f:A  has  taken  a  critical  step  in 
closing  this  deeply  troubling 
chapter  in  its  history."  Lewis 
Ranieri.  the  company’s  chair¬ 
man,  viid  in  a  statement.  He 
added  that  l7.-\  officials  "fully 
support  the  government's  ef¬ 
forts  to  bring  all  responsible 
I  parties  to  justice." 

IDC;  analyst  Stephen  Ellhxt 
said  the  situation  at  CA  is  only 
pseudo  rs'solvod"  bevause  of 
the  IR-month  deferral  period 
for  possible  prosecution  of  the 
company.  Hut  Elliott  said  large 
CA  customers  shouldn't  be 
concerned  about  using  the 
company's  products.  He  added 
that  the  agreements  w  ith  the 
DO?  and  SEt2  should  improve 
CA's  ability  t(»  make  aequisi- 
tums  —  something  that  it  has 
had  to  "pul  on  hold"  in  recent 
months  because  of  the  federal 
investigations. 

The  mimlhs  of  unceriaimy 
alsi)  have  left  i;a  “a  bit  frvven 
I  internally  in  terms  of  making 
j  aggressive  and  imaginative 
moves  in  technology,”  said 
Rich  Piak.  an  analyst  at  Ihak, 


Noel  N;  Associates  Ine.  in 
Amherst.  N.Fl.  "Bui  they've 
done  a  pretty  good  job  overall.” 

t'A,  which  is  being  run  by  in¬ 
terim  CF.l)  Kenneth  Oon.  said 
it  expects  to  name  a  perm.'inent 
CFD  within  .X>  days.  0>mpany 
olTieials  wouldn't  comment 
j  on  the  p»>ssibillty  of  l.iyoffs. 

I  which  was  raised  by  several  fi- 
j  naneial  analysts.  Thousands  «if 
I  layoffs  are  "plausible"  at  DA. 
according  to  a  report  by  Fried¬ 
man.  Billings.  Ramsey  (iroup 
Ine.  in  New  York. 

Still,  the  indictments  of 
Kumar  and  Richards  arou.seJ 
the  most  interest  among  IT 
managers. 

"If  Kumar  goes  to  jail, 
maybe  Martha  Stewart  can 
I  decorate  his  cell."  said  Dou- 
I  glas  Spindler,  president  »ff  the 
j  San  Franeiseif  Networking 
Teehnologiv's  Users  liroup. 
which  includes  .tbout  3.500 
network  and  systems  man¬ 
agers.  "I  hfipe  the  truth  comes 
i»ui  in  this  whole  thing  and 
that  it  serves  as  a  wake-up  call 
to  business."  O  49647 


Woolworths  Case  Study 

PROJECT  Upgtacleol a  rweorowTim(XBiotrog.-3lertif\  system  fhai 
tuns  on  J2E£  based  servers 

PROBLEM  Wooiwortris  tJevetooment  start  was  sfched  in  the  Mcfosoti  tools 
environmenL  not  J2tE  teebnoiocy 

APPROACH  Th€  company  wrote  the  application  m  Visual  Basic  Net  using 
kfccrosoft  took  and  used  Mainsoh  s  Visual  Ma<iWin  foi  J2£t  to  recompile 
ihecodetoJavabyiecodeanddepioytheappiicai'ononaSytjaseaDoltca- 
bon  server  and  portal  server 


performance  But  he  said  his 
company's  goal  is  to  impriwc 
the  product  s*nis  perfornunce 
will  evcntiiallv  be  equivalent 
to  that  trfmuive  lava. 

Cohen  said  Visual  Main- 
Win  for  liFF  installs  on  lop 
of  Visual  Studio  .Net  and  e<»n- 
neels  Jirev’lly  to  ?3FF  applica¬ 
tion  servers.  Users  work  in 
Microsoft's  \'isual  Ha-sic  Net 
or  C-  languages,  and  the 
Mainsol't  tool  compiles  the 
code  to  java  b\  te  code.  The 
resulting  lava  class  files  arc 
packaged  into  lava  Arehivi- 
files  .ind  depUwed  on  a  I3FF- 
based  .ippitc.ition  server, 
he  said. 

MainsoM  is  targeting  Visual 
MainWin  at  development 
shops  that  have  a  mLx  of  13FI 
.ind  .Net  developers.  7'he  com- 
pam  is  rele.mng  Version  1..^  of 
the  product  next  week,  and  it 
is  also  working  to  promote  \'i- 
suat  MainWin  for  131  F  as  a 
means  to  allow  .Nei  cisle  to 
run  on  IBM's  cServer /Vries, 
according  to  t  ohen 

The  MainU'in  tool  comes 
bundled  with  the  open-source 
Idnieai  .ippKcation  server,  bin 
It  also  supports  IBM's  Ueb-  • 


Sphere.  BFA  Systems  Inc.’s 
Webt  ogie  and  (Boss  (iroup 
Inc.'s  open-source  olTering. 
t^ohen  s;iid.  Fhe  ptxiduei  sells 
forS.s.DOO  per  developer,  and 
thea-  are  no  fees  for  the  run¬ 
time  env  ironment,  he  noted. 

In-house  Savings 

Rods  said  that  Winilworths. 
w  Inch  operates  department 
stoles  in  Africa  and  the  Mid¬ 
dle  Fast,  saved  HO".,  of  the 
project  cost  by  opting  for  the 
Visual  MainWin  approach 
o\  er  potential  alternatives  of 
hiring  outside  help  or  retrain¬ 
ing  its  developers.  Although 
X'isual  MainWin  doesn't  sup¬ 
port  Sybase  servers.  Wool- 
wurths'  application  runs  fine, 
since  the  Syb.ise  software  is 
based  on  I3FF.  standards. 

In  addition  to  Visual  Main¬ 
Win.  Woolworths  considered 
the  ojvn-sourcc  Mono  tech¬ 
nology.  w  hich  Novell  Ine.  ac¬ 
quired  last  year  with  Nimian 
Ine..  and  Siryon  Inc.'s  iNct 
software,  which  enables  pro¬ 
grams  written  in  .Net  to  exe¬ 
cute  in  .my  )ava-en.ibled  envi¬ 
ronment.  But  Rods  said  the 
retailer's  developers  would 


have  needed  more  lava  knowl¬ 
edge  to  work  with  those  tools. 

('ohen  readily  aekrhtwl- 
edged  that  Visual  MainWin 
would  not  have  been  possible 
without  the  Mono  project,  to 
w  hich  Mainsoft  developers 
contribute.  The  Mainsoft 
product  rehosis  Mono  on  lop 
ofl’FF  and  is  designed  for  use 
in  server-based  applicainins. 
(lohen  said. 

Moiu>.  in  eonira.st.  can  also 
be  used  to  develop  desktop 
npplicatioas  that  run  on  l.inu.x 
or  I'nix  systems.  Uiunched  in 
3lH)|.  Mono  is  an  open-source 
version  of  Mierosiift's  .Net 
Framework  that  includes  a 
runtime  for  the  ( aimmon  I  an- 
guage  Infrastructure,  a  ( 


■  compiler  and  a  set  of  class 
j  librarii's. 

j  "Mimo  pnwides  a  .Net  emu¬ 
lation  on  Linux.  It  doesn't  port 
j-  .Net  applications  to  I2EF:.  as 
'  Mainsofi's  product  divs."  said 
Massimo  IV?/ini.  an  analyst  at 
'  (.artner  Inc.  Mainsoft's  loid  is 
I  "pretty  unique."  he  added. 

Yei  doubts  linger  about  Vi- 
j  sual  AlainWin  for  |3FE-  “If 
you're  going  to  develop  in 
Net,  especially  if  the  appliea- 
I  tion  gets  complex,  you’re  bei- 
'  tiT  off  deploying  it  as  .Net.” 
said  Thomas  Murphy,  an  ana- 
Ivst  at  Meta  l.roup  Inc-  “n  you 
want  to  be  on  lava,  you  have  to 
j  bite  the  bullet  and  take  on 
'  lava.  I  need  to  know  the  tevh 
nology  u*  use  it."  O  49645 
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Kumar 


agreement  over  the  next  18 
months. 

As  a  result  of  the  deferred- 
prosecution  deal  between  the 
company  and  the  DO).  “CA 
will  be  ^ter  off."  said  Ken¬ 
neth  Pandaleon.  a  senior  nct- 
worit  engineer  at  NBTy  Inc.,  a 
Bohemia.  N.y.-based  maker  of 
nutritional  products. 

Kumar  and  former  head  of 
worldwide  sales  Stephen 
Richards  both  pleaded  not 
guilty  to  10  charges,  including 
securities  fraud  and  obstruc- 
lk>D  of  justice,  in  U.S.  District 
Court  in  Brooklyn,  N.Y..  last 
Thursday,  one  after  the  in¬ 
dictments  against  them  were 
unsealed.  Both  men  were  or¬ 
dered  by  the  court  td* f^t  a 
SS  millton  bond  and  surrender 
their  pas^rts. 

Meanwhile.  Stephen  Wpgh- 
in.  CA's  former  general  coun¬ 
sel.  pleaded  guilty  to  similar 
chafes  for  his  role  in  the  al¬ 


leged  accounting  scheme, 
which  dates  to  1999  and  2000. 

Kumar  left  CA  in  June,  two 
months  after  he  was  ousted 
from  his  position  as  chairman 
and  CEO  IQuickLink  473681. 
The  indictment  against  him 
charges  chat  under  his  leader¬ 
ship,  CA  instituted  a  systemic 
practice  of  falsely  recording 
some  software  sales  within  a 
fiscal  quarter  even  though  the 
contracts  weren't  actually 
signed  during  Che  period. 

Alleged  FahHicalions 

The  government  claims  that 
Kumar  and  Richards  personal¬ 
ly  advanced  the  goals  of  the 
accounlii^  practice,  which 
was  built  around  a  so-called 
35-day  month.  For  example, 
the  indictment  says  that  on 
July  8, 1999.  Kumar  was  flown 
on  the  CA  corporate  jet  to 
Paris  to  negotiate  a  million 
software  licensing  agreement, 
which  was  falsely  backdated 
to  fune  30. 

The  DO|  said  CA  has  ac¬ 
cepted  responsibility  for  the 


alleged  illegal  conduct  of  its 
former  executives  as  part 
of  the  cooperation  deal  that 
was  announced  last  week.  The 
company  reached  a  similar 
agreement  with  the  U3.  Secu¬ 
rities  and  Exchange  Commis¬ 
sion  to  settle  securities  fraud 
charges  that  the  SEC  Hied  in 
the  Brooklyn  court. 

“With  these  agreements. 


CA  has  taken  a  critical  step  in 
closing  this  deeply  troubling 
chapter  in  its  history,"  Lewis 
Ranieri,  the  company's  chair¬ 
man.  said  in  a  statement.  He 
added  that  CA  officials  "fully 
support  the  government’s  ef¬ 
forts  to  bring  all  responsible 
parties  to  justice." 

IDC  analyst  Stephen  Elliott 
said  the  situation  at  CA  is  only 
“pseudo  resolved"  because  of 
the  18-month  deferral  period 
for  possible  prosecution  of  the 
company.  But  Elliott  said  large 
CA  customers  shouldn't  be 
concerned  about  using  the 
company's  products.  He  added 
that  the  agreements  with  the 
DOI  and  SEC  should  improve 
CA’s  ability  to  make  acquisi¬ 
tions  ~  something  that  it  has 
had  to  "put  on  hold"  in  recent 
months  because  of  the  federal 
investigations. 

The  months  of  uncertainty 
also  have  left  CA  “a  bit  ftozen 
internally  In  terms  of  making 
aggressive  and  imaginative 
moves  in  technology."  said 
Rich  Ptak.  an  analyst  at  Ptak, 


Noel  &  Associates  Inc  in 
Amherst.  NJI.  "But  they’ve 
done  a  pretty  good  job  overall* 

CA,  which  is  beir^  run  by  in¬ 
terim  CEO  Kenneth  Cron, 
it  expects  to  name  a  permanent 
CEO  within  30  days.  Company 
officials  wouldn't  comment 
on  the  possibility  of  layoffs, 
which  was  raised  by  several  fi¬ 
nancial  analysts.  Thousands  of 
layoffs  are  "plausible"  at  CA, 
according  to  a  report  by  Fried¬ 
man.  Billings,  Ramsey  Group 
Inc.  in  New  York. 

Stilt,  the  indictments  of 
Kumar  and  Richards  aroused 
the  roost  interest  among  IT 
managers. 

"If  Kumar  goes  to  jail, 
maybe  Martha  Stewart  can 
decorate  his  cell,*'  said  Dou¬ 
glas  Spindler.  president  of  the 
San  Francisco  Networking 
Technologies  Users  Group, 
which  includes  about  2400 
network  and  systems  man¬ 
agers.  *1  hope  the  truth  comes 
out  in  this  whole  thing  and 
that  it  serves  as  a  wake-up  call 
to  business  .-04M47 
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Woolworths 


From  that  point  on,  the  ma¬ 
jor  challenge  for  Roets  be¬ 
came  convincing  skeptics  that 
the  Mainsoft  product  would 
work.  “Our  own  developers 
and  our  internal  systems  man¬ 
agers  didn’t  believe  it  until  1 
showed  them  how  it  works," 
he  said  “They  said.  That  will 
not  be  optimized  and  there 
will  be  many  issues.’ " 

But  Roets  said  Woolworths 
has  encountered  no  major 
technology  problems  since 
commencing  the  project  in 
July.  The  retailer  plans  to  de¬ 
ploy  the  application  in  a  pro¬ 
duction  environment  by  the 
end  of  next  month.  To  ensure 
that  performance  is  optimal. 
Woolworths  kept  the  applica¬ 
tion  simple  and  let  the  J2EE 
application  and  portal  servers 
handle  security  and  data  re¬ 
freshes.  Roets  said 
Yaacov  Cohen,  CEO  of  San 
Jose-based  Mainsoft.  said  cus¬ 
tomers  generally  experience  a 
10%  performance  degradation 
compared  with  native  Java 


performance.  But  he  said  his 
company's  goal  is  to  improve 
the  product  so  its  performance 
will  eventually  be  cquivaicni 
to  that  of  native  Java. 

Cohen  said  Visual  Main- 
Win  for  J2EE  installs  on  top 
of  Visual  Studio  .Net  and  con- 
'  nects  directly  to  J2EE  applica- 
I  tion  servers.  Users  work  in 
Microsoft's  Visual  Basic  .Net 
or  C«  languages,  and  the 
Mainsoft  tool  compiles  the 
code  to  Java  byte  code.  The 
resulting  Java  class  files  are 
packaged  into  Java  Archive 
files  and  deployed  on  a  J2EE- 
based  application  server, 
he  said. 

Mainsoft  is  targeting  Visual 
Main  Win  at  development 
shops  that  have  a  mix  of  J2EE 
and  -Net  developers.  The  com¬ 
pany  is  relcasir^  Version  14  of 
the  product  next  week,  and  it 
is  also  working  to  promote  Vi¬ 
sual  Main  Win  for  J2EE  as  a 
means  to  allow  .Net  code  to 
run  on  IBM's  eServer  zSeries, 
according  to  Cohen. 

The  Main  Win  tool  comes 
bundled  with  the  open-source 
Tomcat  application  server,  but 
it  also  supports  IBM's  Web¬ 


Sphere.  BEA  Systems  Inc.'s 
WebLogic  and  JBoss  Group 
Inc.'s  open-source  offering, 
Cohen  said.  The  product  sells 
for  $5,000  per  developer,  and 
there  are  no  fees  for  the  run¬ 
time  environment,  he  noted. 

In-house  Savings 

Roots  said  that  Woolworths, 
which  operates  depanmem 
stores  in  Africa  and  the  Mid¬ 
dle  East,  saved  80%  of  the 
project  cost  by  opting  for  the 
Visual  Main  Win  approach 
over  potential  alternatives  of 
hiring  outside  help  or  retrain¬ 
ing  its  developers.  Although 
Visual  MainWin  doesn't  sup¬ 
port  Sybase  servers.  Wool- 
worths'  application  runs  fine, 
since  the  Sybase  software  is 
based  on  I2EE  standards. 

In  addition  to  Visual  Main- 
Win,  Woolworths  considered 
the  open-source  Mono  tcch- 
nol(^.  which  Novell  Inc.  ac¬ 
quired  last  year  with  Ximian 
IfK..  and  Stryon  Inc's  iNet 
software,  which  enables  pro¬ 
grams  written  in  .Net  to  exe¬ 
cute  in  any  lava-enabled  envi¬ 
ronment.  But  Roets  said  the 
retailer's  developers  would 


Woolworths  Case  Study 


have  needed  more  Java  knowl¬ 
edge  to  work  with  those  tools. 

Cohen  readily  acknowl¬ 
edged  that  Visi^  MainWin 
would  not  have  been  possible 
without  the  Mono  project,  to 
which  Mainsoft  dewlopcrs 
contribute.  The  Mainsoft 
product  rebosts  Mono  on  top 
of  J2EE  and  is  designed  for  use 
in  server-based  applications, 
Cohen  said 

Mono,  in  contrast,  can  also 
be  used  to  develop  desktop 
applications  that  run  on  Linux 
or  Unix  systems.  Launched  in 
2001,  Mono  is  an  open-source 
version  of  Microsoft’s  .Net 
Framework  that  includes  a 
runtime  for  the  Common  Lan¬ 
guage  Inftastructure,  a  C# 


I  compiler  and  a  set  of  class 
I  libraries. 

"Mono  provides  a  .Net  emu¬ 
lation  on  Linux.  It  doesn't  port 
.Net  applications  to  J2EE.  as 
Mainsoft's  product  does,"  said 
Masshno  Pezzini.  an  analyst  at 
Gartner  loc.  Mainsoft's  tool  is 
“pretty  uruque."  he  added 

Yet  doubts  liitger  about  NH- 
sual  MainWin  for  J2EE  "If 
you’re  going  to  develop  in 
.Net.  especially  if  the  applica¬ 
tion  gets  complex,  you're  bet¬ 
ter  off  deploying  it  as  J4et," 
said  Thomas  Murphy,  an  ana¬ 
lyst  at  Meta  Group  Iik.  "If  you 
want  to  be  on  Java,  you  have  to 
bite  the  bullet  and  take  on 
Java.  I  need  to  know  the  tech¬ 
nology  to  use  it"  O  49645 


AMD 
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Every  company  demands^" 

more 

and  flexibility. 

Some  of  them  actually  get  it. 


Five  of  Wall  Street's  most  prestigious  financial  institutions  knew  exactly  what  they  wanted  from  an  enterprise 
solution.  More  productivity,  to  keep  up  with  an  ever-changing  global  market.  And  real-time  flexibility,  to  go  from 
32-  to  64-bit  applications  without  disrupting  their  business.  They  found  both  in  the  AMD  Opteron™  processor 
with  Direct  Connect  Architecture.  It  powers  the  v^rld's  highest  performing  x86  2-way  and  4-way  servers.  And 


it  helps  speed  up  millions  of  financial  transactions  every  day  in  trading  stations  and  server  ferms.  At  AMD.  we  believe  it’s 


critical  that  technology  should  migrate  on  your  terms  to  help  )«u  realize  your  unique  vision.  It’s  one  of  the  reasons  why  HP. 


IBM  and  Sun  offer  enterprise-class  solutions  powered  by  AMD  Opteron  processors.  Would  you  like  to  learn  just  how  much 


of  a  difference  they  can  make  to  your  company?  Go  to  www.amd.com/enterprise 


MIDDLEWARE  IS  IBM  SOFTWARE.  Powerful  WebSphere 
software.  It's  the  strong,  seamless  bond  that  can  unite  your 


1.  Guest  chectod  in  wirelessly.  business,  vendors,  partners  and  customers.  A  dynamic  link 

Z  Staff  queries  guest  preferences.  designed  to  make  your  entire  organization  more  efficient, 

a  Mender  services  integrate  seamlessiy.  More  responsive.  More  flexible.  On  demand.  WebSphere 

4.  Supplies  are  procured  automatically.  connects  processes,  with  open  standards.  And  it’s  easy 

5.  Repeat  customers  increase  profits.  to  manage,  too.  So  all  involved  get  a  better  night's  sleep. 
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"^bmc  -  S  Remedy 


TruSecure,  is  scheduled  to  be¬ 
come  Cybertrust’s  CEO.  Becker 
spoke  with  Computerworld 
about  the  merger  and  competi¬ 
tion  in  the  IT  security  market. 

Who  drove  the  merger  -  Tm- 


Secure  or  Betrusted?  It  was  the 
customer,  actually.  Both  busi¬ 
nesses  themselves  were  very 
complementary.  Betrusted 
was  the  larger  entity  in  terms 
of  revenues,  but  both  had  a 
similar  outlook  in  the  security 
space.  We  also  had  some  con¬ 
tacts  historically.  Betrusted 
was  very  strong  in  Europe  and 
Asia  and  had  a  small  but  grow¬ 
ing  presence  in  the  US.  Tru¬ 
Secure  was  very  strong  in  the 
U.S  and  [had]  a  small,  growing 
presence  in  Europe  and  Asia. 
As  we  began  dealing  with  larg¬ 
er  and  larger  customers  that 
have  multinational  sites,  they 
were  looking  for  a  company 
with  more  [of  a  global  reach]. 

What  does  the  ongoing  consoli¬ 
dation  of  the  FT  security  market 
mean  for  users?  I  think  it's  a 
good  thing  for  the  user  com¬ 
munity.  They're  frustrated 
from  being  lK>mbarded  by  100 
different  vendors  all  pitching 
the  latest  firewall  technology. 
The  bottom  line  is.  the  differ¬ 
entiation  among  these  tech¬ 
nologies  is  not  great.  If  you’re 
a  large  organization  with  100 
sites  around  the  globe,  you're 
dealing  with  a  S3  million  com¬ 
pany  here  or  a  $5  million  one 
in  England.  It  doesn’t  give 
you  the  comfort  that  you  get 
wdien  woricing  with  a  trusted 
partner  that  you  know  and 
understand. 


What  do  you  think  tha  broadening 
sacurityafforlsofinajorfT  ven- 
dora.  audi  aa  BM.  Cisco  and  Mi- 
erosoft.iagolngtonManforpura- 
fbft  aacufily  vendors?  For  us, 
since  we  aren’t  a  product  ven¬ 
dor.  I  think  the  [trend]  is  com¬ 
plementary  to  our  business.  I 
believe  that  large  customers 
are  putting  more  pressure  on 
the  Ciscos . . .  and  Microsofrs 
of  the  world  than  on  people 
like  Symantec  or  Trend  Micra 
Customers  have  spent  an  aw¬ 
ful  lot  of  money  on  defensive 
technologies  that  are  just  not 
working.  So  they’re  putting 
pressure  on  these  vendors  to 
clean  up  things  on  the  net- 
wotk  and  the  endpoints.  In¬ 
evitably,  when  Microsoft  gets 
into  this  business,  they  won’t 
kill  the  Symantecs,  but  they 
will  put  pricing  pressure  on 
them.  O  <0603 


Cybertrust  CEO  Says  Merger  Driven  by  Users 

BV  JAIKUMAB  vuAYAN  they’re  merging  to  form  a  single  about  1,000  employees.  4,000 

Betrusted  Holdings  Inc.  in  New  IT  security  services  vendor.  The  clients  worldwide  and  $160  mil- 

YorkandlYuSecureCorp.m  new  company  will  be  called  lion  in  annual  revenue.  Mm 

Herndon,  Va.,  last  week  said  Cybertrustlnc.andwil}have  BMier,  chairman  and  CEO  of 


Congratulations  winners! 

^^COMraiBlWOllD 

WSHESSmaUOEIICEPBISKCTIVfS  Business  Intelligence  Perspectives  and  Computerworld. 
n  i  Q  ( ■  proudly  present  the  first  annual  “Best  Practices  in 

D6SI  r  rBClICGS  Intelligence”  Awards  Program.  This  program 

III  RIKiyPOS  lyTFI  I  IlSriirr  recognizes  case  studies  highlighting  noteworthy 
IH  DUOIWluO  IHlELUDuntt  solution  implementation  projects  and  deployments. 


Winners  in  each  of  the  foliowing  categories  are: 

Creating  a  Bl  Vision  and  Strategies  for  Improved  ROI 

•  American  Airlines  -  Fort  Worth,  Texas 

•  Yapi  Kredi  Bank  -  Istanbul,  Turkey 

Honorable  Mention:  Agilent  Technologies,  Inc.  -  Loveland,  Colorado 

Planning,  Designing  and  Building  the  Bl  Infrastructure 

•  Herbalife  International  -  Los  Angeles,  California 

•  McKesson  Pharmaceutical  (Business  Unit  of  McKesson  Corporation)  -  San  Francisco,  California 
Honorable  Mention:  Halliburton  ~  Houston,  Texas 

Information  Retrieval  and  Reporting  by  Leveraging  Off-the-Shelf  Enterprise  Software 

‘  Calpine  Corporation  -  Houston,  Texas 

•  DaimlerChrysler,  Chrysler  Group  -  Auburn  Hills,  Michigan 
Honorable  Mention:  Chase-Pitkin  Home  and  Garden  -  Rochester,  New  York 

Data  Visualization,  Prediction  and  Presentation  by  Leveraging  Customized  Solutions 

’  Quicken  Loans  -  Livonia,  Michigan 

•  State  of  Louisiana  Department  of  Social  Services  -  Baton  Rouge,  Louisiana 
Honorable  Mention:  IBM  -  Southbury,  Connecticut 

Managing  and  Enhancing  Bl  Applications  and  Infrastructure 

•  LexisNexis  -  Dayton,  Ohio 

•  United  States  Postal  Service  -  Washington,  DC 
Honorable  Mention:  Kaiser  Permanente  -  Downey,  Caiifomia 

AWARDS  PROGRAM 
SPONSORED  BY: 


CDCNQS 


Program  Judges'  Criteria  for  Evaluatiort: 

Judges  will  evaluate  and  rank  the  finalists  in  each  category  according  to  their  substantiated 

Business  Intelligence  solution  attnbutes  and  achievements  against  a  set  of  criteria  such  as: 

•  Producing  a  strategic  vision  for  success,  as  well  as  strategies  for  implementing  the  Bl  vision, 
risk  management  and  cost/benefit  justification 

•  Creating  an  infrastructure  that  allows  knowledge  workers  to  easily  access  data  of  all  types 

•  Strategically  deploying  enterprise  software  m  a  way  that  has  fundamentally  impacted  the  way 
information  is  accessed 

•  Customl^l^g  off  -the-shelf  Bl  software,  utilizing  tools  such  as  visualization,  prediction  and 
presentation  aides,  etc. 

•  Managing  a  Bl  environment  through  activities  such  as  managing  systems,  implementing  help  desk 
procedures  and  enhancing  Bl  applications 


THE  NEXT  LEVEL 
or  PERFORMANCE'* 


Awards  Program  Judges: 

Shaku  Atre,  Atre  Group 

Frank  Berhard,  OMNI  Research  Group  LUC 

Kevin  Downs.  Kids  Headquarters 

George  Fedel.  Wavera 

Keith  Gile,  Forrester  Research 

Julia  King.  Computerworld 

Ralph  Martino.  JP  Morgan  Chase  Credit  Card  Services 
Ron  Milton.  Computerworld 
Dan  Vesset.  tOC 

Bob  Zimmerman,  University  of  Arkansas 


Xerox  WorkCentre*  Pro  advanced  multifunction 
They’re  even  smart  enough  to  give  your  productivity 


The  advanced  thinking  built  into  the  Xerox  WorkCentre*  Pro 
family  makes  them  the  smartest  multifunction  citizens 
working  on  any  network.  They  don’t  just  scan,  copy,  fax,  and 


e-mail,  they  do  it  at  network  printing  speeds  up  to  3x  faster 
than  competition.  They  RIP  one  job  while  printing  another, 
so  work  gets  done  faster.  And  their  Enhanced  Service 


Learn  more:  xerox.com/offfice/244  For  a  sales  rep:  1-800-ASK-XEROX  ext.  244 

C  2004  «ROX  COOPORATION  All  rigte  reserved  XEROX.*  The  Docrrmem  Cmrrpany*  WbrlrCerilre*  anr)  There's  a  new  way  to  Irioir  el  it  are  trademarks  of  XEROX  CORPORATION 


^tems  not  only  print  up  to  3x  faster  than  competition, 
a  colorful  new  twist.  There’s  a  new  wav  to  look  at  it. 


Program  (ESP)  lets  you  fix  problems  before  they 
happen,  increasing  reliability.  And  now,  there’s 
color.  The  Xerox  WorkCentre'  Pro  40  prints  b&w 


at  40  ppm;  color  at  22  ppm.  it’s  one  more  way  our 
full  line  of  multifunction  systems,  printers,  and 
digital  copiers  help  you  get  more  out  of  your  network. 


THE  DOCUMENT  COMPANT 
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DON  TENNANT 


‘[Stuff]  Happens’ 


terns  are  fully  mirrored, 
only  to  hear  one  of  your 
sysadmins  comment  on 
how  much  larger  and 
more  airy  all  those  mir¬ 
rors  make  the  data  cen¬ 
ter  look? 

Or  how  about  this: 
watching  your  CEO  ex¬ 
plain  to  the  world  that  a 
poorly  executed  ERP  mi¬ 
gration  that  was  your 
baby  cost  S400  million  in 
lost  revenue  and  is  par¬ 
tially  to  blame  for  your  company’s 
disappointing  third-quarter  finan¬ 
cials.  Wait,  let’s  make  it  even  worse: 
Let's  say  the  CEO  fires  three  execu¬ 
tives  over  the  revenue  drop,  leaving 
you  to  explain  why  you  stiU  have  a 
job.  Hold  on,  let’s  just  go  for  broke: 
The  botched  ERP  migration  in¬ 
volves  SAP  systems,  and  your  com¬ 
pany  markets  itself  as  a  savvy  pro¬ 
vider  of  SAP  consulting  services. 
Now.  tell  roe  you  wouldn't  wake  up 
from  that  one  sweating  bullets. 

That  might  well  be  the  worst 
nightmare  of  GiUes  Bouchard.  CIO 
at  Hewlett-Packard.  But  unfortu¬ 
nately.  it  wasn’t  the  kind  be  could 
wake  up  from  —  it  was  his  reality. 

You've  probably  read  about  the 
ERP  consolidation  Aasco  that  HP 
CEO  Catiy  Fiorina  cited  last  month 
when  she  listed  the  reasons  behind 
the  5%  revenue  drop  suffered  by  her 
enterprise  servers  and  storage  group 
(Quicklink  48813].  But  what  you 
might  not  have  realized  prior  to 
reading  our  with  Bouchard  on 
page  14  is  that  HP  has  handled  what 
had  to  be  a  horribly  painful  and 
awkward  situation  with  about  as 
much  class  and  guts  as  a  company 
could  possibly  deroonstrale.  And  no 
one  deserves  the  credit  for  that 
more  than  Bouchard. 


HAT  IS  YOUR  worst  nightmare 
as  a  CIO?  Spilling  chocolate  milk 
in  your  zSeries?  Being  assured 
by  your  team  moments  before  a 
hvuricane  strikes  that  your  sys- 

Believe  me,  I  can  attest 
that  there  are  plenty  of 
other  executives  in  the 
IT  industry  who  would 
have  hidden  under  the 
covers  rather  than  con¬ 
front  the  media  under 
such  difficult  circum¬ 
stances.  And  tl^re  are 
countless  PR  people 
working  as  handlers  for 
those  executives  who 
would  have  done  every¬ 
thing  in  their  power  to 
either  block  access  to  them  or  con¬ 
trol  the  questions  we  pul  to  them.  I 
can’t  help  but  think  back  to  how 
Computer  Associates'  PR  machine 
tried  (in  vain,  of  course)  to  manipu¬ 
late  our  questioning  of  senior  CA 
executives  around  the  time  that  re¬ 
cently  indicted  former  CEO  Sanjay 
Kumar  was  booted  out.  It  was  as 
shameful  as  it  was  shameless. 

When  1  contrast  that  nonsense 
with  the  way  HP  has  handled  its  re¬ 
cent  PR  nightmare,  it  just  blows  me 


away.  Throughout  the  interview  that 
senior  editor  Patrick  Thibodeau  and 
I  conducted  with  him  earlier  this 
month,  Bouchard  never  hedged  for  a 
heartbeat  in  responding  to  a  single 
question,  including  those  awkwLd 
ones  about  wby  his  job  was  spared 
and  others  weren’t,  and  about  the 
impact  of  the  whole  mess  on  HP's 
credibility  as  an  SAP  services 
provider.  And  at  no  point  did  HP's 
PR  machine  make  an  attempt  to 
prevent  us  from  pursuing  a  line  of 
questioning  in  order  to  spin  the  sto¬ 
ry  to  HP’s  lUdng. 

Bouchard  summed  the  mess  up 
into  two  words:  “S—  happens."  He’s 
absolutely  right.  It  does.  And  when 
it  does,  good  CIOs  work  with  their 
teams  to  analyze  exactly  how  it  hap¬ 
pened  and  then  turn  it  into  a  posi¬ 
tive  learning  experience.  The  best 
CIOs  have  the  courage  and  profes¬ 
sionalism  to  share  that  experience 
with  their  peers,  no  matter  bow 
painful  or  embarrassing  it  might  be, 
so  that  they  can  learn  from  it  as 
welL  Of  all  the  lessons  you  can  learn 
from  HFs  nightmare,  that  one  —  by 
far  —  is  the  most  valuable.  O  ^607 
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Good  Better  Former 


DAVID  MOSCHELLA 

Vendors  Are 
From  Mars, 
Users  Venus 

Have  you  ever  won¬ 
dered  why  some  IT 
professionals  choose 

to  work  on  the  vendor  side  of  our  busi¬ 
ness.  while  others  prefer  the  customer 
side?  Most  IT  people  make  this  deci¬ 
sion  early  in  their  careers,  and  few  re¬ 
verse  it.  It’s  arguably  the  single  most 
important  fork  in  the  working  lives  of 
most  Computerworld  readers,  yet  it’s 
rarely  discussed  or  even  mentioned. 
Neveitheiess.  the  motivations  behind 
this  initial  decision  tell  us  a  lot  about 
the  dynamics  of  our  industry. 

It's  no  secret  that  IT  suppliers  and 
internal  IT  organizations  often  have 
very  different  cultures,  and  thus  they 
tend  to  appeal  to  very  different  sets  of 
IT  professionals,  consciously  or  sub¬ 
consciously.  My  firm  has  recently  been 
doing  a  lot  of  ps>'- 
chographic  work  on 
IT  executives,  and 
the  results  are  pretty 
clear.  Vendor  execu¬ 
tives  are  more  ori¬ 
ented  toward  compe¬ 
tition.  sales,  owner¬ 
ship  and  compensa¬ 
tion.  CIOs  and  other 
internal  IT  execu¬ 
tives  are  typically 
more  concerned 
with  softer  rewards 
such  as  knowledge, 
achievement  and 
coUaboration. 

In  many  ways,  this 
is  as  it  should  be.  CIOs  and  other  inter¬ 
nal  IT  professionals  don’t  fully  control 
their  own  destinies  and  need  to  get 
along  with  their  business  colleagues  if 
they  are  to  succeed.  There  isn’t  a  lot  of 
room  for  renegades,  because  there  isn’t 
a  lot  of  room  for  forming  start-ups  or 
demonstrating  other  forms  of  indepen¬ 
dent  behavior.  TTie  most  prestigious 
jobs  tend  to  be  in  large  companies, 
where  being  politic  is  essential. 

Tbe  contrasts  with  the  vendor  world 
couldn’t  be  more  staik.  When  the 
young  BUI  Gates  decided  to  drop  out  of 
Harvard.  1  doubt  he  spent  much  time 
debating  whether  to  start  Microsoft  or 
join,  for  example.  Citibank  and  become 
an  eariy  PC  evangelist  Ditto  for  the 
scores  of  other  IT  entrepreneurs  who 
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have  thrived  on  the  vendor  side  and 
never  spent  a  day  in  the  customer 
world.  They  wanted  the  hreedom  to 
do  their  own  thing  and  pursue  their 
own  dreams. 

If  all  this  seems  a  bit  mundane,  con¬ 
sider  that  few  other  industries  seem  to 
work  this  way.  In  what  other  sector  do 
people  of  comparable  expertise  make 
such  a  fundamental  career  split,  and  do 
it  in  roughly  equal  numbers?  It  would 
be  like  having  half  of  all  doaors  going 
to  work  for  medical  supply  companies. 
While  the  split  between  accountants 
who  work  in-house  and  those  at  exter¬ 
nal  accounting  firms  might  seem  to  be 
another  example,  that  situation  has 
more  to  do  with  two  types  of  employ¬ 
ers  competing  for  resources  than  it  is 
about  two  entirely  different  ways  of 
making  a  living. 

The  ramifications  of  all  of  this  are 
greater  than  you  might  think.  Internal 
IT  professtonals  are  often  accused  of 
lacking  business  vision  and  acumen  and 
of  being  too  cautious  and  risk-averse. 
While  to  some  extent  effeettve  IT  orga¬ 
nizations  need  to  be  this  way,  it  also 
seems  clear  that  many  of  the  roost  rest¬ 
less.  dhtrcpreneurial  and  daring  IT  pro¬ 
fessionals  probably  never  went  into  the 
customer  side  of  the  business  to  begin 
with.  This  suggests  that  there  may  well 
be  a  deep-rooted  reality  behind  what  is 
often  seen  as  an  unfair  stereotype. 

It  also  helps  explain  why  customers 
and  vendors  often  struggle  to  get  along 
with  each  other.  It’s  not  fust  the  typical 
tension  between  buyers  and  scUers; 
rather,  the  leaders  of  each  group  have 
ftmdamentally  different  attitudes,  val¬ 
ues  and  concerns.  In  more  ways  than 
you  might  initially  think,  vendors  real¬ 
ly  are  from  Mars,  and  users  are  from 
Venus.  049488 


PIMM  FOX 

Worrying 

About 

Election  Day 

U.S.  ELECTIONS  tend  to 
confound  most  for¬ 
eigners.  They  find  it 
Strange  that  our  politicians  crisscross 
the  country,  kiss  babies  and  eat  apple 
pie,  all  while  donning  a  wide  variety  of 
headgear. 

But  of  course,  what  they  truly  can't 
understand  is  how  we  have  managi-<i 
to  screw  up  the  actual  voting  process. 


We  can't  even  seem  to 
count  correctly.  How  is  it 
possible  that  a  nation  that  is 
able  to  debate  the  role  of 
Moore's  Law.  demand 
overnight  delivery  of  books 
and  CDs  ordered  online  arid 
simulate  nuclear  blasts  with 
a  computer  can’t  produce 
a  tamperproof  system  to 
count  voles? 

Paper  ballots  were  in 
widespread  use  until  the 
1890s,  when  the  mechanical- 
lever  system  started  to  come  into 
service.  The  machines,  widely  adopted 
in  the  1930s.  were  supposed  to  be  accu¬ 
rate  and  provide  privacy,  with  voters 
making  their  selections  behind  a  cur¬ 
tain.  When  the  lever  was  moved,  the 
vote  was  recorded  and  tallied 

Bui  it  was  soon  discovered  that  the 
counting  of  votes  was  subject  to  fraud. 
Thereby  bangs  the  tale  of  the  chad 
Punch'card  systems  were  introduced 
to  prevent  fraud  and  make  the  count 
more  accurate.  But  the  2000  presiden¬ 
tial  vote  produced  so  many  disputes, 
paniculairty  in  Florida,  that  Congress 
decided  to  spend  about  $4  billion  to 
upgrade  voting  systems. 

Passage  of  the  Help  America  Vote 
Act  of 2002  was  supposed  to  usher  in 
an  era  of  secure,  reliable,  computer- 
based  vote  tallying.  The  direct-record¬ 


ing  electronic  systems 
were  to  replace  punch 
cards,  optical  scanner 
ballots  and  hand -counted 
paper  ballots. 

Well,  it  is  sad  to  say  that 
with  the  election  just  five 
weeks  away,  about  one- 
third  of  the  ISO  million 
registered  voters  will  be 
using  machines  that  arc 
still  basically  in  beta  mode, 
and  that  most  of  the  money 
~  ~  that  was  supposed  to  go 
to  building  and  testing  the  machines 
hasn’t  been  spent 

In  California,  the  certificatian  of  the 
electronic  voting  machines  has  flip- 
flopped  tMficc.  TTiey  are  going  to  be 
available,  but  voters  who  prefer  to  use 
a  paper  ballot  can  still  do  sa 

In  Maryland,  the  new  electronic  ma¬ 
chines  made  by  Oicbold  Election  Sys¬ 
tems  use  a  Microsoft  operating  system, 
and  security  flaws  were  found  when  an 
independent  lab  tested  the  machines. 
The  issue  of  voter  fraud  is  such  a  big 
deal  that  both  the  Democrats  and  the 
Republicans  have  lined  up  teams  of 
lawyers  to  challenge  the  vote  counts 
in  close  elections. 

In  Nevada,  the  electronic  touch¬ 
screen  system  from  Sequoia  Voting 
Systems  also  produces  a  paper  record 
t^t  can  be  checked  But  other  states. 
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such  as  Kentucky.  Delaware  and  Ten¬ 
nessee.  received  a  failing  grade  from 
the  Free  Congress  Foundation  on  their 
ability  to  accurately  rely  on  electronic 
vote  processing.  New  Mexico  pit  a 
D-minus.  and  if  that  gives  you  the 
shakes,  Florida  snagged  an  F-plus. 
Ohio's  system  was  so  flawed  that  the 
secretary'  of  stale  stopped  an  upgrade 
from  the  good  old  punch-card  system 
because  of  security  concents. 


In  2003,  the  six  largest  electronic 
voting  machine  vendors  —  Advanced 
Voting  Solutions.  Dicbold.  Election 
Systems  6t  Software,  Hart  ImerCivic. 
Sequoia  and  UniLcct  —  formed  the 
Election  Technology  Council. 

But  according  to  a  report  on  the 
nonpartisan  Web  site  Elcctionlineorg. 
produced  by  the  Election  Reform  In¬ 
formation  Project  and  devoted  to  pro¬ 
viding  information  about  voter  reform 
in  the  U.S..  the  group  hasn't  really  done 
all  that  much  except  issue  press  releas¬ 
es.  And.  says  Electionlme.org.  the  >ink< 
between  the  vendors,  political  parties 
and  state  election  officials  are  both  fi¬ 
nancial  and  personal 

Cleariy.  there  ts  a  lot  of  work  yn  to 
be  done.  O  49S48 
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Fixing  the  Vote 

S  HAMM  MACHUS*  column  *A 
Rvmt  TraT  (QuKkLJnk 
479051  toads  to  one  questton:  If 
you  can't  inist  the  machine  to  cor¬ 
rectly  record  your  e-vote,  how  can 
youtrusithallhepeperreceipicor- 
reefly  shows  the  e^ole  that  was 
recorded?  WUh  ATMs  and  gasoline 
pumps,  users  get  an  immediale  re¬ 
ceipt  but  they  ^  get  a  monthly 
stalemwii  VAlh  a  secret  e-baflot. 
there  is  no  tolovNjp  accounting 
statement.  I  believe  the  best  ap¬ 
proach  to  make  die  voting  machine 
trustworthy  is  through  use  ol  open- 
sotfcecode.digItaiCQdesgina- 
tures.  machine  programnmg  with 
ROM  cartridges  (like  common 
video  game  sets),  pubke-ley  certifi¬ 
cates  for  authentication,  and  open 
ffrtertace  standards  so  that  authen¬ 
tication  bom  multiple  vendors  B 
possible.  But  this  sti  wouldn't  pro¬ 
vide  the  level  of  trust  commensu¬ 
rate  With  a  paper  baloL 
f^lnch-C8rd  technoiogy  B  lairfy 


weldeveloped  While  it's  true  fhat 
Fionda  emenenced  chad  probierns. 
dxs  could  be  teed  by  having  the 
electronic  voting  rnachine  puich 
thebaHolThevotercoiAlimmedi- 
alely  verify  the  punches,  and  the 
punched  card  would  be  retained  Itf 
possibfe  manual  recounting.  This 
approach  would  provide  all  the  con¬ 
venience  of  an  electFonic-voting 
user  interface  with  the  highest  level 
of  trust  provided  by  the  paper  balol 
Roberts.  Banin 
U5AXSEC,  Enterprise  Systems 
Engineering  Dtreaonue. 

Fori  Huachuca,  Ariz. 


Tenw  Response 

WM1£  THERE  may  not  be  one 
tochnobgical  scArtion  to 
catching  lerrortsts.  4’s  shvlsighRed 
and  self -detetfing  to  assfne  that 
technology  wfl  not  impnme  and 
help  In  the  effort  proportionaly 
pdchnology  Not  die  Amwer  to  Ter¬ 
ror.'  OuckUnk 48705].  Vnius 
torrns  of  blometnc  identificalion  can 


be  defeated  ndMdualy.  but  the 

more  seamiess  and  redundant  the 

bamers.lhemoreeffectrvethepre- 

venbonAndlhafSMiheretechno- 

logcal  improvement  plays  Its  part 

Fred  Lao 
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I A  Secure  India 

IWMKRMOWotnvsotnai 
development  gianfe  in  India  to 
vdech  a  lot  ol  rr  work  IS  outsourced 
by  compenias  n  Amenca  and  world¬ 
wide.  In  readng  the  artete  “Sectf- 
N^l  die  Corpotabon*  {(keckUnk 
482BS].IWllhailheCS05mler- 
viaved  were  fatally  biased  aganst 
non-Arnencans.  Indan  companies 
ltavei«YStrongprDcesskame- 
worfaandbusinessee«cs.TheiMar- 
malnn  available  to  one  fearo  worigng 
lor  a  pamcular  dieni  isn't  avaiaisfe  to 
anodier  team  woffeng  for  anodier 
cfientandsdlingfrideadlaDBitciiii- 
cte.Secunty.confidBntaRyandr- 
tegrtyoldlM  data  areourtopprior- 
ilRS  A  coupfe  of  the  CSOs  suggesi- 


I  ed  code  reveMs.  In  my  company,  the 
arerage  bugs  pneent  ffi  ihe  sottwore 
at  the  test  infernal  rewMS  b10%, 
wdach  6  vwy  beknv  the  ntusary 
standard,  and  the  cost  of  (fealiy  6 
around  40%.  whereas  the  nk^ 
standard  b  25%.  And  no.  the  cost 
of  oualty  is  not  charged  to  Bie  cAern 
biA  B  absorbed  by  the  organolian 
IMul  Oharwodhar 
TedmietU  analyst. 

IkxngatotT.  India. 
ntukuUStarMatSumofirnaiLctim 

COMPUTERWORU)  welcorriK 
comitwnts  horn  Ns  readers  leoers 
w8  be  edtied  lor  brevity  and  danty 
They  Should  be  addressed  to 
JanHEcWe.ietiersed««.Com- 
putenwNid.  PO  6o>  9171. 1  Speen 
Street  Framngham.  Mass.  01701 
Fax  (508)879-4843  E-ntf 
fettersfcofflpularworld  com. 

Indude  an  address  arid  phone 
number  lor  mrfedfete  verilicalion. 

O  For  mo*  Mars  m  Mae  and 
odiarlDpcsoDto 


ROBUST  OBJECTS 
AND  ROBUST  SQl 


WHY  DEVELOPERS 
ARE  EYEING  US 


For  your  next  generation  of  applications,  move 
to  the  next  generation  of  database  technolog>’. 

Cache  is  the  post-relational  database  that 
combines  high-performance  SQL  for  faster  queries 
and  an  advanced  object  database  for  rapidly 
storing  and  accessing  objeas.  With  Cache,  no 
mapping  is  required  benveen  object  and  relational 
views  of  data.  That  means  huge  savings  in  both 
development  and  processing  time. 

Applications  built  on  Cache  are  massively 
scalable  and  lightning-fast.  Plus,  they  require 
minimal  or  no  database  administration. 

MojCthan  just  a  database  system.  Cache 
incorporates  a  powerflil  Web  application 
development  environment  that  dramatically’ 


reduces  the  time  to  build  and  modify 
applications. 

The  reliability  of  Cache  is  proven  every  day 
in  “life-or-death”  applications  at  thousands  of 
the  world’s  largest  hospitals.  Cache  is  so  reliable, 
it’s  the  leading  database  in  healthcare  —  and  it 
powers  enterprise  applications  in  financial 
ser\’ices,  government  and  many  other  sectors. 

We  are  InterSystems,  a  specialist  in  data 
management  technology'  for  over  twenty-six 
years.  We  proy-ide  24x7  support  to  four  million 
users  in  88  countries.  Cache  is  available  for 
Windows,  OpenVMS,  Linux  and  major  UNIX 
platforms  -  and  it  is  deployed  on  systems  rang¬ 
ing  from  tyvo  to  over  10,000  simultaneous  users. 


InterSystems  ^ 

Make  Applications  Faster 


Try  a  better  Malnsa.  Fw  free. 

IV.wnioad  a  free,  Killy-tiinciPfmai.  non-expiring  version  of  Cache  or  request  it  on  CD  at  HwlnterSystems  com  /mh»o  7 
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CASE  STUDY 

Recollecting  the  Customer 

A  three-year  effort  to  create  a 
unified  information  architecture 
at  ING  Americas  begins  to  pay 

dividends  in  the  form  of  a 
view  of  customer  activity.  PaQA  34 


SECURITY  MANAGER'S  JOURNAL 

IP  Telephony  Changes 
Security  Efiuation 

His  company  wants  to  save  money  by  using  IP 
telephony,  but  Mathias  Thurman  must  sort  out 
the  ramifications  of  running  voice  traffic  over 
its  LANs  and  WANs.  PlQt  36 


OPINION 

The  Need  to  Know 
What  We're  Missing 


Spam  and  ponu^raphy  have  made  Internet 
filtering  essential,  but  users  in  a  transparent 
enterprise  should  know  what's  being 
filtered,  says  Daniel ).  Weitzner.  Page  38 


The  online  brokerage  built  itssystems 
around  open-source  to  support  Its  two- 
second  tradeguarantee-BYOAFYKAMTHES 


FIELD 

REPORT 


ETRADE  FINANCIAL 
^Corp.  and  other  online 
*  stock  brokerages  are  at 
war  over  how  fust  they 
can  execute  a  trade.  Ameritrade  Hold¬ 
ing  Corp.  kicked  off  the  execution 
promise  game  in  2001  by  guaranteeing 
a  turnaround  of  10  seconds  or  less. 
ETrade  countered  with  a  nine-second 
guarantee,  and  since  then  h  has  all 
been  downhill. 

Last  year.  Ameritrade  promised  to 
complete  trades  within  five  seconds, 
and  in  March.  ETYade  lowered  its 
pledge  to  two  seconds. 

ETrade  declines  to  say  how  many  of 
its  trades  fail  to  complete  in  two  sec¬ 
onds.  but  a  spokeswoman  says  it  will 
forgo  less  thm  SI  million  in  trading 


commissions  this  year  as  a  result  of 
the  guarantee.  The  company  collected 
$191  million  in  commissions  in  the  first 
six  months  of  this  year. 

ETrade  has  35  millioa  customer 
accounts  and  completes  more  than 
100.000  trades  day.  on  average. 
The  company  says  most  (^its  trades 
are  completed  in  less  than  a  second,  a 
remaikable  achievement  for  a  complex 
operation  that  ^>ans  multiple  comput¬ 
ers,  routers  and  applications,  not  all  of 
them  controlled  by  ETrade. 

“ETrade  has  a  sophisticated  infra¬ 
structure,"  says  Tun  Carpenter,  senior 
brokerage  analyst  at  GomezPro,  an  In¬ 
ternet  perfcumance  management  com¬ 
pany  recently  acquired  by  Watchfire 
Corp.  in  Wahham,  Mass.  They  are  not 


PERFORMANCE 

IMPROVEMENT 

PROJECT 
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bogged  down  by  trying  to  integrate 
with  a  legacy  infrasmicture.  like  an 
older  broker  that  moved  from  the  off¬ 
line  world  to  the  online  world.  They 
didn't  have  to  make  concessions." 

Excess  Capacity  Chesv 

The  company  has  gone  throu^  several 
raaior  IT  overhauls  since  1996.  when  h 
began  Internet-based  trading.  The 
most  important  cransttion,  one  that  is 
still  going  on.  has  been  a  cutover  from 
proprietary  products  to  o;>en-5ource 
components  —  principally  Apache 
Web  server  software.  Tomcat  applica¬ 
tion  server  software  and  the  l  imiT  op¬ 
erating  system  (see  diagram).  The 
move  from  Sun  Solaris/Sparc  to  Lin¬ 
ux/Intel  at  the  top  two  layers  of  the 
three-tiered  architecture,  in  particular, 


ETRADE 

Beats  the  Clock 


made  for  a  whole  new  economic  ball- 
game  for  ETrade. 

In  2001.  the  cost  of  pix^rietary  sys¬ 
tems  was  rising  while  the  cost  of  open 
systems  runnii^  on  Intel  processors 
was  falling,  says  Joshua  S.  Levine, 
ElYade's  chief  technology  and  admin¬ 
istrative  officer.  “And  it  wasn't  just  the 
price  of  the  dup;  h  was  memory,  peri¬ 
pherals,  everytUng.  We  said.  Tf  we 
stay  on  a  proprietary  architecture,  well 
always  be  trapped  Ip  the  rising  price  of 
proprietary  vendor  equipment'  “ 

With  the  savings  from  open-source 
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plication  availabiiity.  performance  and 
network  ucajre.  Route  adjustments  are 
made  usin^  open-standard  application 
projiramming  intertaces  on  routers 
and  <'ther  network  devices. 

■'It’s  a  commiin  m\th  that  >ou  can't 
manage  the  Internet."  savs  lJo%d  Taylor. 
lechnohiL-y  i  iee  president  at  Ke>  note 

stems  t.orp.  "Using  the  proper  mea¬ 
surements.  and  understanding  how 
routing  works  and  working  on  vour 
providers,  you  can  actually  control  a 
good  portion  of  the  performance." 

I'he  mo\e  to  Linu.\  Intel  servers  re¬ 
duced  trade  times  .Wa  and  enabled  the 
nme-see<*nd  trade  guarantee-  Getting 
Jow  n  to  two  seconds  required  other 
moves,  including  bringing  1 1  rade's 
system  for  routing  —  moving  trade  or¬ 
ders  to  the  proper  e.xchange  and  bring¬ 
ing  back  confirmatioas  —  in-house. 

K Trade  was  using  a  third-party  ser- 
viee.  but  u  saw  that  it  eould  improve 
reliability  .md  spi-ed  by  developing  its 
own  routing  software.  Its  internal  sys¬ 
tem.  RoutX.  eliminated  route  hi>ps  and 
optinti/ed  the  software.  l.e\  ine  says. 

Extreme  Measures 

(iomez  Inc.  and  Keynote  K'th  monitor 
KTr.ide  Internet  aeliviry  cttntinuously. 
Key  note  sends  test  transaction  suites 
e\ery  few  minutes  from  each  of  20  lo¬ 
cations  around  the  L’.S.  and  reports  the 
results  to  KTrade  every  15  minutes. 

Says  C^aldwell.  “Every  morning  we 
rev  iew  the  previous  day's  operations 
and  the  coming  day's  operations  w  ith 
the  operational  -staft'amund  the  world. 
W'hat  was  the  customer's  experience. 
hi»w  many  million  hits  did  we  have. 
hi>w  many  Web  em»rs  did  we  have, 
were  they  customer  Web  ernirs, 
did  our  kiad-balaneing  siiluiion 


rcmt»vc  them  in  time,  and  so  on." 

Greg  Framke,  an  c-sceuti\  e  vice  pres¬ 
ident  and  head  of  IT  at  ETrade.  says. 
"We  have  developed  a  rigor  around 
performance  and  availability  that  has 
realh  made  a  big  differenee.  Mea.sur- 
ing  reliability  and  performance  is  al¬ 
most  a  cult  with  Us." 

At  the  middle  byor  of  the  thn.*e-tiered 
trading  system.  ETrade  runs  BELA  Sys¬ 
tems  Inc.'s  Tuxedo  transaction  manag¬ 
er.  and  that  eould  he  the  next  target  for 
the  company's  move  to  open-source, 
Levine  says.  "We  are  very  interested  in 
lava  Message  Service  —  IMS.”  he  says. 

The  move  to  IMS  would  be  straight¬ 
forward.  and  its  benefits  would  be 
primarily  economic,  according  to 
Caldwell.  "Tuxedo  is  fairly  expensive 


on  a  per-CPU  basis."  he  explalas. 

While  the  t<*p  two  tiers  of  the  trad¬ 
ing  and  routing  systems  run  on  Linux, 
the  Sybase  databa.se  layer  remains  on 
Sun  Spare  systems  running  Solaris.  A 
move  to  Sybase  on  Linux  is  possible, 
but  that  would  require  a  significant 
system  redesign  and  have  an  uncs'rtain 
operational  impact.  Caldwell  says. 

Rather  than  making  an  intermediate 
move  to  Syba.se  on  Linux.  Framke  says 
ETrade  could  go  to  a  grid  database  con¬ 
cept  in  which  data  is  cached  at  various 
points  up  and  down  the  application 
Slack.  "If  I  could  put  data  closer  to  the 
user.  1  could  serve  it  up  faster."  he  says. 

That  could  improve  availability  a.s 
well.  “If  you  look  at  the  way  we  have 
architected  our  fnmi  end.  it  is  rare  — 
a  very  rare  event  —  to  have  a  user 
who  couldn't  on  the  second  click  get 
to  where  they  were  going."  Framke 
adds.  "And  that's  what  I  want  in  the 
database." 

Watchfire's  Carpenter  says  that 
many  ETrade  customers  are  not  ei*n- 
cemed  about  a  few  seconds  of  trade  ex¬ 
ecution  time.  But  for  "active  traders"  — 
those  making  hunda'ds  or  thous.inds  of 
trades  a  year  —  "e.xeculion  quality  and 
speed  are  of  the  utmost  importance." 

Says  Levine.  "What  I'm  most  proud 
of  is  that  we  itperate  at  100"u  eveiy-  day. 
24  hours  a  day.  .And  it's  out  there  for 
everyone  to  see  if  you  have  a  failure.  I 
mean,  my  career  could  end  right  now 
with  a  three-hour  outage."  O  49201 


ANATOMY  OF  A  TRADE 


Trader's  PC 

ETrade  s  customers  connect  to  the  company's  high-performance  trading  systems  m 
Alpharetta.  (5a..  via  the  Intemel.  1T»e  three-tier  trading  and  routing  architecture  uses 
open-source  Apache  and  Tomcat  servers  at  the  top  and  BEA  Tuxedo  middleware  at  the 
second  tier,  afl  on  Linux/Intei  machines.  At  the  bottom  sits  database  servers  running  Sybase 
and  Solans,  incoming  customer  requests  are  evenly  distributed  across  server  farms  by 
NetScaler  load-balancing  software,  while  transactions  flow  back  to  customers  over  routes 
optmwzed  m  real  tune  fay  route-oplirmzatlon  software  from  RouteScience. 


How  the  company  -  and  rts  technology  -  have  evolved 

OQuickLink  49200 
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products  came  the  luxury  of  being  able 
to  overprovision  by  buying  spare  capac¬ 
ity  for  every  conceivable  hardware  fail¬ 
ure  and  spike  in  demand.  ''When  you 
are  bu>'ing  servers  so  cheaply,  the  con¬ 
cept  of 'capacity'  drops  away."  Levme 
says.  “We  buy  a  machine  for  $3,900. 
and  we  don't  even  buy  maintenance  on 
it.  When  it  fails,  we  throw  it  away." 

ETrade's  three-tiered  architecture 
includes  a  server  farm,  which  it  con¬ 
tinues  to  btiild  out  horizontally,  with 
700  Linux/Intel  boxes  running  most  of 
the  time  at  some  small  fraction  of  their 
capacity.  Making  that  work,  and  mak¬ 
ing  it  easy  to  add  more  boxes,  requires 
software  that  can  ixMve  the  workload 
around  aikd  the  ability  to  swap  out  failed 
servers,  in  real  time.  ElYade  uses  load¬ 
balancing  software  from  Resonate  Inc.  I 
but  is  migrating  to  a  similar  tool  from 
NetScaler  Inc.  that  it  says  is  faster. 

Those  products  load-balance  within 
an  application,  so  if  trade  routing 
needs  more  horsepower  or  encounters 
a  hardware  failure,  for  example,  that’s 
addressed  automatically  and  immedi¬ 
ately.  El>ade  is  now  looking  at  ways  to 
create  a  virtualized  server  farm  for  use 
by  multiple  applications.  “How  do  you 
lump-start  or  repurpose  a  server?"  says 
Hartley  Caldwell,  vice  president  of  re¬ 
engineering.  “We  are  thinking  about 
that  in  the  future.” 

The  Right  Routes 

An  ElVade  customer  may  connect  to 
the  Internet  over  one  path.  But  ETrade 
then  finds  the  best  route  back  to  the 
customer  using  Adaptive  Networking 
Software  from  San  Mateo.  Calif-based 
RouteScience  Technolc^ies  Iik..  which 
can  ad|ust  traffic  in  subseconds  to 
meet  user-specified  policies  about  ap¬ 


plication  availability,  performance  and 
network  usage.  Route  adjustments  are 
made  using  open-standard  application 
prt^amming  interfaces  on  routers 
and  other  network  devices. 

“It's  a  common  myth  that  you  can’t 
manage  the  Internet."  says  Lloyd  Taylor, 
technology  vice  president  at  Keynote 
Systems  Corp.  “Using  the  proper  mea¬ 
surements,  and  understanding  bow 
routing  works  and  woiking  on  your 
providers,  you  can  actually  control  a 
good  portion  of  the  performance.” 

The  move  to  Unux/lntel  servers  re¬ 
duced  trade  times  30%  and  enabled  the 
nine-second  trade  guarantee.  Getting 
down  to  two  seconds  required  other 
moves,  including  bringing  ETrade’s 
system  for  routing  —  moving  trade  or¬ 
ders  to  the  proper  exchange  and  bring¬ 
ing  back  confirmations  —  in-house. 

ETrade  was  using  a  third-party  ser¬ 
vice.  but  it  saw  that  it  could  improve 
reliability  and  speed  by  developing  its 
own  routing  software.  Its  internal  sys¬ 
tem,  RoutX.  eliminated  route  hops  and 
optimized  the  software.  Levine  says. 

Extreme  Measures 

Gomez  Inc.  and  Keynote  both  monitor 
ETrade  Internet  activity  continuously. 
Keynote  sends  test  transaction  suites 
every  few  minutes  from  each  of  20  lo¬ 
cations  around  the  U5.  and  reports  the 
resiilts  to  ETrade  every  15  minutes. 

Says  CaldweU.  “Every  morning  we 
review  the  previous  day’s  operadoos 
and  the  coming  day’s  operations  with 
the  operatioaal  staff  around  the  world 
What  was  the  customer's  experience, 
how  many  million  hits  did  we  have, 
how  many  Web  errors  did  we  have, 
were  they  customer  Web  errors, 
did  our  load-balancing  solution 


remove  them  in  time,  and  so  on.” 

Greg  Framke.  an  executive  vice  pres¬ 
ident  and  head  of  IT  at  ETrade,  says, 
“We  have  developed  a  rigor  around 
performance  and  availability  that  has 
really  made  a  b^  difference.  Measur¬ 
ing  reliability  and  performance  is  al¬ 
most  a  cult  with  us.” 

At  the  middle  layer  of  the  three-dered 
trading  system,  ElVade  runs  BEA  Sys¬ 
tems  Inc’s  Tuxedo  transaction  manag¬ 
er.  and  that  could  be  the  next  target  for 
the  company's  move  to  open-sourcc 
Levine  says.  “We  are  very  interested  in 
Java  Mess^  Service  —  JMS,”  be  says. 

The  move  to  JMS  wrould  be  straight¬ 
forward,  and  its  benefits  would  be 
primarily  economic,  according  to 
CaldwelL  Tuxedo  is  feirly  expensive 


ANATOMY  OF  A  TRADE 
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on  a  per-CPU  basis,”  he  explains. 

While  the  two  tiers  of  the  trad¬ 
ing  and  routing  systems  run  on  Linux, 
the  Sybase  datab^  layer  remains  on 
Sun  Sparc  systems  running  Solaris.  A 
move  to  Syl^e  on  Linux  is  possible, 
but  that  would  reqtiire  a  significant 
system  redesign  and  have  an  uncertain 
operational  impact.  CaldweU  says. 

Rather  than  making  an  intermediate 
move  to  Sybase  on  Linux.  Framke  says 
ElVade  could  go  to  a  grid  database  con¬ 
cept  in  which  data  is  cached  at  various 
points  up  and  down  the  application 
stack.  “If  I  could  put  data  closer  to  the 
user.  I  could  serve  it  up  faster.”  be  says. 

That  could  improve  availability  as 
well  “If  you  look  at  the  way  we  have 
architected  our  front  end.  it  is  rare  — 
a  very  rare  event  to  have  a  user 
who  couldn't  on  the  second  elide  get 
to  where  they  were  going.”  Framke 
adds.  “And  that's  what  I  want  in  the 
database." 

I  Watdifue*8  Carpenter  says  that 
I  many  ETrade  customers  are  not  con¬ 
cerned  about  a  few  seconds  of  trade  ex¬ 
ecution  time.  But  for  "active  traders"  — 
those  making  hundreds  or  thousands  of 
trades  a  year  —  “execution  quality  and 
speed  are  of  the  utmost  importance.” 

Says  Levine.  “What  I’m  most  proud 
of  b  that  we  operate  at  100%  every  day. 
24  hours  a  day.  And  it’s  out  there  for 
everyone  to  see  if  you  have  a  &ilure.  I 
mean,  my  careo-  could  end  ri^t  now 
with  a  three-hour  outage."  O  49201 

AnEFHSTNYSFnUDE 

How  Itw  ramosny  •  aib  iM  lechnokH»  -  have 

OQukkLbk  48200 
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THE  LEADER  IN  CUSTOMER 
ANALYTIC  APPLICATIONS  BRINGS 
YOU  A  NEW  GENERATION 
OF  ENTERPRISE  Bl  SOLUTIONS. 

•  $140M 
e 
© 

•  !£|  $120M 
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<  w 
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•  UJ  $80M 
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BUSINESS  SAP  SAS 


Cutthroat  competition,  intense  profit  pressure.  Price  erosion.  Deciining  loyaity.  Business  today 
dictates  working  not  just  harder,  but  smarter.  Meeting  these  new  business  demands,  and 
overcoming  the  inherent  chailenges,  requires  a  new  generation  of  Bi  solutions  unavailable  from 
traditional  Bl  vendors. 

Siebel,  the  leader  in  customer  analytic  applications,  brings  you  Siebel  Business  Analytics -Bl 
solutions  that  empower  everyone  with  actionable  real-time  insight  from  the  largest  data 
warehouses  and  across  enterprise  sources.  With  a  mission-critical  architecture  that  supports 
multi-terabytes  of  data,  thousands  of  users,  and  24*7  availability.  And  proven  application 
solutions,  with  built-in  industry-specific  best  practices  that  are  flexible,  quickly  implemented, 
inte9rate  with  your  infrastructuro/  and  provide  low  TCO. 

Our  innovative  Bl  solutions  have  catapulted  Siebel  into  the  leadership  position  in  analytic 
applications  for  sales,  marketing,  service,  and  senior  management,  with  over  75%  of  our  customers 
using  Siebel  Business  Analytics  beyond  CRM  and  across  a  full  range  of  enterprise  sources. 

Learn  why  the  most  analytically  sophisticated  companies  rely  on  Siebel.  Attend 
Summit,  Los  Angeles  on  October  3-6.  Visit  www.siebel.com/newgen 


SIEBEL. 

Business  Analytics 

CUSTOMER  INSIGHT  •  ENTERPRISE  INTELLIGENCE 


TWENTY-THREE  YEARS  AGO,  WE  TOOK  YOUR  OESK  AWAY,  in  ,he  summer 

of  1981,  IBM  introduced  the  PC,  setting  the  standard  for  more  than  two  decades  of  business 
computing.  Incredible  data  crunching  power  could  now  sU  on  every  desk.  Unfortunately,  U 
didn't  leave  room  for  much  else.  Since  then,  PCs  have  become  fixtures  in  offices.  They’ve  also 
gotten  even  bigger.  Giant  beige  towers  with  droning  fans  dominate  the  landscape,  spinning 
dense  webs  of  cords  and  wires.  They're  loud  They’re  ugly.  They  crowd  you  out  of  your  own 
workspace.  And  in  a  way,  wefeeUesponsihle.  After  all,  IBM  created  business  computing.  IPe 
started  this  thing.  And  if  it  was  IBM  engineering  and  creativity  that  filled  up  your  office,  it 
should  be  those  same  things  that  dear  U  out.  TwentyAhree  years  ago,  we  took  your  desk  away. 


TODAY,  WE'RE  GIVING  IT  BACK. 

Introducing  The  New  Ultra  Small,  Ultra  Powerful  Desktop  from  IBM. 


^»«)«Kmn,vmrMauai.ybjLaioji^xio.6in.,3s 

(<^^‘Ur<jfaplm^hook).yat’dapectUU,teM^samahbw.Bm 

<>SlhmavaaM^lmd‘FMiWK‘4P,,,ctoorwUkHTT.d«^.Upcda 

mfiMmiJMukagpoucrwlOMm^cIngptijbnnaya. 

MMAITIHII  SECURITY,  7^  new  niinkCrntre  is  the  most  secure  desktop 

ytet  «tu  buy.  tharikt  to  aSTs  essdusuu!  Erubedded  Security  Subsnl^t 

^^kuoattealtyeruiypt  your Peu.b’stctulfyluMbU  to  retturte  barkers, 
dndyanyoue  Pies  to  tamper  with  it.it  makes  your  data  urueadabte. 

U(SE  THE  TIKMJOX.  flfeerf  w  gel  «ii*r  TWCenffe  i  Kni  enn  1^ 

Itifandsuapcompoueritsusthoutsouuukosascre^eromliou.euo.^ 
"'^‘‘"^'^tbeseoeTythtrigeasytofiad.Forrratulhelpdedtmarutgers. 
,  tnoi  am  mean  ihomantbt^expetuweman-^ioun  saved. 


WOTBCT  YOUR  MM.  Think  about  U.  How  much  of  your  is  on  your 

f’OfV^^^^avuiucrashetyourPCoOnebuaonheinyougetaUtfyour 

mved  data  back,  at  tf  the  crash  never  happened,  b 't  coiled  Rescue  and 
Recovery,  h's  Mai  peace  tf  mind.  And  it's  onfy  avaiiabtefrom  IBM. 

STF^  AND  SILENT,  h’s  where  you  keep  everything,  so  U  had  better  be 
tou^  A  metal  chattu  makes  this  machine  incndibfy  rugged  (we’ve  even 

reporters  to  stand  on  U).  And  smart  design  makes  a  inavdibfy  quiet. 
Yourdesktopisn’tatoy-U’tatooLhshouldactthatwey. 

affordable  to  all  Breakthrough  technologies  don't  have  to  break  the 
bank.  There  t  a  ThinkCentre  desktop  corfgured far  every  budget,  because 

noinnotHttionU  truly  great  untUtt'sc^ordabU  to  ab  From 
to  power  usm.  From  big  corporations  to  small  businesses.  Everyone. 


Ifen.COIR/tAtnEsma// 


WM  and  tw  eu  logo  «• 
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TECfllNlOSY 


www.computerworid.com 


Researchers  are  inventing  new 
ways  to  tackle  old  problems. 


GRAND 

CHALLENGES 

IT 


BY  THOMAS  HOFFMAN 


FUNDAMENTAL  RESEARCH 
ClfflJK  on  how  to  make  computer 
hardware  more  powerful 
WAIImjK  and  sofhvare  smarter  goes 

-  back  50  years  or  more,  but 

many  of  the  traditional  methods  have  near¬ 
ly  reached  their  limits.  Now,  researchers 
moving  in  bold  new  directions  may  be  set¬ 


ting  the  course  of  IT  for  decades  to  come. 

There  are  literally  dozens  of  grand  chal¬ 
lenges  that  scientists  and  economists  are 
attacking,  ranging  from  societal  issues  to 
technica]  advances.  Here,  we  take  a  look 
at  the  challenges  in  three  key  areas  of  IT 
research:  processor  performance,  chip 
miniaturization  and  artificial  intelligence. 
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WORLD 


Learn  How  to  Achieve 
Storage  Networking  Success 


October  25-28,  2004  •  JW  Marriott  Grande  Lakes  Resort  •  Orlando  Florida 

Vi 


COMPUTERWORLD 


Sm  and  Haw  Don  Tapacatt 

BooNWKon 

7H  a>wii^  (» 

mi  Hmtgm  Sm 

The  Leading  Executive 
Conference  for 

*  (T  Management 
•  Stor^  Architects 
•  IT  Infrastructure  Professionals 
’  Business  Continuity  Planning  Experts 
*  Data  Management  Specialists 
’  Network  Professionais 

To  register  or  for  more  information, 
visits 


Co-Owned  and  Endofsed  by' 

■’tjSNIA 


Co-Owned  and  Produced  by 

cwnnmu 
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October  25-28,  2004  ■  JW  Marriott  Grande  Lakes  Resort  ■  Orlando,  Florida 


Learn  How  to  Achieve 
Storage  Networking  Success 

Get  a  Contemporary  Overview  of  Today's  Storage  Networking  Issues  and  Opportunities 

•  See  How  to  Implement  and  Deploy  the  Latest  m  Storage  Networking  Technologies 

•  Hear  the  Latest  m  Enterprise  Security 

•  Learn  from  Best  Practices  and  Case  Studies 


SctontfetXMK 


Why  You  Should  Attend 

Are  you  responsible  for  managing  your  company's  storage  assets  and  strategies?  Want  to 
exchange  innovative  ideas  and  strategies  with  other  executives  who  share  the  same 
objectives’  Then  attend  Storage  Networking  World,  where  you'll  network  with  and  learn 
from  renowned  experts  and  the  nation's  top  user  executives. 


Conference  At-a-Glance  (subject  to  change) 

For  details,  updates,  and  to  register  visit  www.snvnisa.coin/cw 


MONDAY,  OCTOBER  25 


9  30am  to  10  25am 


INDUSTRY  PRIMER  1 


CAREER  DEVELOPMENT  TRACK 


Addressing  High 
Densdy  CeoHng  of 
Storsge  NetworUng 
Equipment  it  the 
FaciHty  Level 

OoruM  Buly  Founder  & 
FresidenL  DLB  Associates 


Storege  Basics 
snd  Trends 

Dennis  Uvln.  Senor  Analyst, 
and  Greg  Schulz,  Senior  Analyst. 
Evaluator  Group 


Power  Statements, 
Qussttonsand 
Answers  Techniques 

Howerd  Goldstein,  Founder, 


~YsSNIA 


ST0RA6E 

NnwMnK 

WORLD 


'%SNIA 

Ic,  CWiM  «i>a  PiflOuced  Ov 

CftTDWMU 


10  35am  to 


30am 


Reis  of  Ssrvsr  Btadss 
snd  Wrtuslietien  in  Nsut 
Gsnsretion  Data  Csntsr 

Arun  Tanqa.  FoLSiderand 
Consulting  Analyst  Taneja  Group 


Why  Taps  Continues 
to  Make  the  Grads 

Richard  Harada.  President  Tape 
Technology  Council 


Communicetion  SkHls 
forHterTTechis 

SHI  Reidzus.  Oeector  of  Storege 
Architecture.  GlassHouse 
Technologies 


1 1  SOam  to  100pm  Luncheon 


Afternoon 


SNIA  Tutorial  Sessions  I  IDC  Briefing  Session  I  IT  End-User  QoH  Outing 

lOOpmtoSAQpin _  ■  I00pmto400poi  I  noon  to  approximately  eOOpm 


-  Data  LHscycle 

-  Viftualtzstion  A 
Securing  Vhvr  Storage 

■  Focus  on  Networking 
Vbur  Storage 

-  Focus  on  Storage 

■  SAN  Management 

■  Vbice  of  the  User 


•  IDC 

ki  the  last-paced  sessen.  OCs 
top  storage  analysts  am  exarrune 
conipanes'  grpiamg  nttreg  n 
deployng  tiered  storage  solutons 
and  assess  Its  mpect  en  stoiage 
components  systems  netocrks 
management  end  strv<es 


The  pre  |  SPONSORED  SV 

\  Quantum 

at  the  Ritz-Carfton  Golf  Out  located 
ai^aceM  to  the /W  Uarrott  Grvide 
LAas  Resort  a  comptmenWy  (a 
Sl2Sialue)lGr  legsteredlT  end- 
users  (Other  partopmls.  mduding 
sponsors  and  vendor  representatnes 
may  play  on  an  to  aieilatile' bass 
andarerespona 
ble  lor  al  wpiKa. 
Mgolf  outing 

Id  lecwe  vote  spot, 
eoattei  Netaal  Meteedy  cl 
1-See-«30-85M. 


7  OOpm  to  9.00pm  Welcome  Reception 


October  25-28.  2004  •  JW  Marriott  Grande  Lakes  Resort  •  Orlando,  Florida 


For  more  information  and  to  register,  visit  vwvw.snwusa.com/cw  or  call  1-800-883-9090 


TUESDAY,  OCTOBER  26  General  Sessions  Begin 


I  Don  Tapscott,  Renowned  Bestselling  Author  of  The  Naked  Corporation. 
Groa/irtg  Up  Digital  and  Paradigm  Shift  J 

I  The  Future  of  Knowledge  Management  - 

JO— M:-  CiO  a  : -a-..-:  V- - 

I  Kevin  Rollins.  President  t  CEO,  Dell 

I  Keith  Glennan,  VP  A  CIO.  Northrop  Grumman  FT 


n  Elevating  the  Art  of  Storage 

Soi'-  ■  wa’d  CcO  H.'aco'  Ja'a 

Industry  Presidents'  Roundtable:  A  Market  Outlook 

V;9efjicf  3{>r  Taoscott  AoWo'  ol  The  Naked  Cwperaiion  Growrfig  Up  D/jrtal  ano  Paradigm  Stiih 


I  CONCUBBENT  LUNCHEON  SESSIONS 
!!■'! 


MMSurfng  the  tMue 

■  SiM  OucMse.  Foundw  Of  IT  Investments 

&  Semr  Analyst  RiOiard  SnMer. 

Entvpnse  Storage  Greuc  Msnagmg  Partner 

Wertlnrty  Group 

Storage  and  Mere:  Is  Convergence  Ahead? 

_ NeNvorOing.  sacuriiy  arW  Storage  prce  dtscusa  their  tectwoloay  roaBinips.  seenOng  plans  and  uendoi  relitionstvos 

ken  Male,  C£5^S  bonder,  ThelntoPro  (TIP) 

1  3Dpm  2  (X)o'r-  End  User  Case  Study:  Best  Practices:  Data  Center  Consolidation 

Ddvi3C-ne-  V=  A,  K,.,^t^re3,ooD  Me"  • 

2  OOpm  2  SOpm  m  Greg  Reyes.  Chairman  A  CEO,  Brocade  Communications  Systems 

2  SOo-"  to  3  OOorn  End  User  Case  Study:  Evaluating  Options  for  Business 

Continuity/Disaster  Recovery  Plans 

Pm  Manager  pi  'Kmorog)  arra  ''■♦'aMrur’-'e  •''ler'a’iona  Paoer 

3  OOpm  to  3  450""  gLJ  CTO  Insights  Panel 

^1^  MoJera-'or  Jor  *iuam  Tcwgo  CEO  A  'ounde-  '■p.goPai''WT5  intematnjnai 


■  CONCURRENT  SESSIONS 


5  SOom  to  8' 30pm  E»po  with  Dinner  /  Interoperafailify  &  Solutions  Demo  Open  Aiss  UODmipedOpm 


*_  SNW  is  a  great  venue 
for  peer  discussion an 
opporturiffyto  provide 
feedback  to  vendors  on 
what  users  need  from  them 
I  sat  down  with  my  key 
vendors  and  shared 
information 

VJohn  Greer 

Director,  IT  Infrastructure 
Pacific  Gas  &  Electric 


WEDNESDAY,  OCTOBER  27 


8  30am  to  9  15am  |||B  Nick  Carr,  former  Executive  Editor  of  the  Harvard  Business  Review 

and  author  of  Does  IT  Matter? 

9  1 5am  to  9  45am  End  User  Case  Study 
945am  to  10 15am  Industry  Leader  Presentation 

10  30am  10  1 1  00am  End  User  Case  Study:  Realizing  the  Vision  of  Management  Simpiidty  and  Improved 

Business  Processes  in  a  Demar>ding.  Distributed.  High-PerfomiaiKe  Environment 
M'cfdei  Pi'fice  VP  1  CiO  Bu'in'gw  Coit  Fitts', 

1 1  OOam  to  1 1  30am  The  Half-Ufe  of  Storage  Trends 

Pet«-  -ii-  Ooo»'  &  CEO  AOiC 

1 1-30am  to  12  ’5Dm  KS  Panel:  End  Users  Speak  Out 

McJeiitsi  JoNn  Dm  Editor  ,n  Ct'-el  Setwcx  vVs"j 

12  15pm  to  1  45pm  Expo  &  Luncheon  I 

i45pmto215pm  End  User  Case  Study  I 

2  15pm  to  2  45pm  Industry  Leader  Presentation  '  . 

2:45pm  to  3  30pm  Analyst  Roundtable  Panel 

Wo(lo>i>of  Jon  WHI<am  Togo.  CEO  S  Founder  Togo  Partner^  mternationii 


I  CONCURRENT  SESSIONS 


B:  1 5pm  to  7. 1 5pm  Expo  and  Reception 

7:30pm  to  9'OOpm  Gala  Evening.  Dmner  and  Entertainment 

THURSDAY,  OCTOBER  28 _ 

7  30am  to  8:30am  Breakfast 


I  CONCURUIM  TECHNICAL  &  BUSINESS  TUTORIALS 


IW  Marriott 
Grande  Lakes 
Resort 

Orlando  Fionda 


Hotel  Reservations 
and  Travel  Services 

IDG  Travel  %  the  offica:  i  1 
trave' companv for  Sicrage  I 

NeTwo'R  ng  Wo'io  Tne*  ' - — - - 

are  yoo>  one  stop  s'k® 

for  exclusive  discounted  -ares  on 

hole  accrmmodafiorrs 

To  reserve  vou*  ai'rorrmodations  L  St 

www.etcentrsl.com 

VtH*  can  also  ca'i  our  conlerenre  nouS'-io  >ne  at 

1-800-340-2262  (or  1 -soBaso-aess) 


Conference  Concludes 


For  more  information  and  to  register,  visit  www.snwusa.com/cw  or  call  1  -800-883-9090 


■‘iM 


Payment  Method 


^  oe  ’ecen«d  Oy  OOWjer  5  2004  cAaoe  tt  Conruierwnal 

Ma>io  Con|xter*M  Am  J^Ma-ngows.,  &XOdCerfl#tKjt  Pramt^  MA  51701 
□  AmwicaA  Exprtss  QVISA  □MasterCard 

Account  NgmDer _ 

Eipi'ation  Dale  _ _ 

CarflMCKiei  i^a^e _ 

S-gnaiure  ot  Ca/o  hohjc' _ 

CancaiMton  PoBey  (A^oft^ef(>o»l«gfe<3u»ellwit^erlno^ificaI(OrtoyOctcoer5  2OWJ  i 

'n  ine  event  o<  cance-iaton  me  reg  strant  nas  mcee  outcns  I 

■  ;  '^eo'S"e'nay«u«>sW.»teif«we«»tie-oe«ioiinBKifVencr  I 

3)  "'■*95"a<n<eew>ti«-e*jrdrtiena$350sev<ect»yeilw^-«ves-Ke»M»,Ocioos53gO*) 
Hease  send  canceiiaton  requests  via  ema.i  to  snwregecompuierwoHocom 


CLOSING  THE  GAP 

Resaaidws  *e  ftoeasataly  tocusno  ttier 
flttentCT  on  techrologBs  aimed  alopdrr^^ 
ttieedgeoltt«rMwQric 
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www.compulerworld  com 


RECOLLECTING 

THE 


By  Thomas  Hoffman  and  Lucas  Mearian 


v\M>N  IHJ  vt«»ck  market 
•slumped  in  midOOlX). 
movi  financial  sen  iccs 
firms  found  thcmsi-Ivcs 
stru^lin^  tk>  hold  onto 
clients.  INti  was  hvused  on  sc'llini: 
them  new  p^sJusts. 

"Not  onl>  must  larjie  companies  re¬ 
tain  cusu>mers.  but  t»>  increase  rev¬ 
enues.  they  Itjve  to  cross-sell  to  them 
more  effectively."  says  I  inJa  Marr. 
chief  know  leJite  officer  at  Atlanta- 
based  INCi  Americas,  a  division  of  Am¬ 
sterdam-based  INt;  (iroep  NV. 

To  help  it  draw  upon  customer  data 
jcruss  multiple  accounts  mt>re  effec¬ 
tively.  ING  embarked  on  a  massive 
data  intc-grahon  effort  in  !uty  2001 
aimed  at  creating  a  series  of  database 
“hubs”  ihot  t»>gether  form  a  unified  in¬ 
formation  architecture  for  its  seven 
L'.S.  business  units,  including  reinsur¬ 
ance.  pension  plans  and  mutual  funds. 

"The  hubs  are  for  centrally  struc¬ 
tured  data  . . .  enterprise  value  data 
that's  commonly  u.scd  acroM  all  lines 
of  business,  lincludingj  customer  in¬ 
formation.  a^trcemeni  information  and 
product  information.”  says  Chief  Tech- 
noh*gy  OfTicer  Raymond  Karrcnbaucr. 

lN(i.  which  has  27  lines  of  business 
worldwide,  has  completed  four  hubs 
and  has  10  more  under  construction. 
Thi>se  multiterabytc  databases  give 
business  units  a  comprehensive,  uni¬ 
fied  view  of  the  customer.  But  Karrcn- 
bauer  had  two  broader  goals  in  mind: 
create  a  reusable  architecture  to  drive 
costs  di'w  n  .tnd  mitigate  risk. 

lb  appreciate  the  immensity  of  this 
pn'jivt.  one  needs  only  to  walk  into 
ING's  project  ctmiroi  room  in  Atlanta. 
Tacked  along  the  walls  are  dozens  of 
st.-hematic  diagrams  that  illustrate  how 
the  financial  services  firm  is  simplify¬ 
ing  an  incredibly  complex  IT  environ¬ 
ment.  That  system  was  created  by  a 
tlurrv’  of  mergers  and  acquisitions  that 
ifU'kided  the  purchase  of  Barings  IM  (J 


in  l‘W5  and  ,-\etna  Financial  Services 
Inc-  in  20lHt. 

INIj  began  implementing  its  inte¬ 
grated  dat.i  environment  in  May  2005. 
The  strueturi'd  data  sits  in  a  set  »»f  par 
titioned  IBM  !>B2  Universal  DataKise 
FFE  databases.  Ke\  tt»  the  project  is 
daia-mapping  software  fnini 
Informatica  Corp.  in  Red- 
\viH»d  City.  c;alif..  that  allow  s 
IN'Ci  to  emss-refercnce  cus¬ 
tomer  information  among 
d.itubases  at  business  units. 

ING  alsii  uses  data  pn>ftl- 
ing  software  from  San  Fran- 
cisco-ba.scd  Fvoke  Sivftware 
Corp.  and  ad  hoc  reporting 
and  analytical  tools  fi\>m 
France-based  Business 
Objects  SA- 

In  just  11  months.  ING's 
staff  built  an  object-based  database  in¬ 
frastructure  that  melds  unstructured 
and  siruclua'd  data  fmm  2.000  data¬ 
bases  into  one  logical  view  of  cus¬ 


tomer  and  operational  information. 

Now.  when  an  ING  call  center  agent 
pulls  up  a  customer  record  in  the  new 
d.uabjse.  "it  will  retrieve  the  customer 
information  fr«>m  the  structured  data 
and  then  also  pn»vide  any  relative 
diK'uments  with  that  customer."  says 
Karrcnbaucr. 

ING  created  OB2  reposito¬ 
ries  to  aggregate  a  subset  of 
structured  data  from  each 
business  unit’s  database  that's 
of  interest  to  the  other  busi¬ 
ness  units.  Along  the  way. 
the  source  data  is  funneled 
thixHigh  a  hub  that  conducts  a 
series  of  transformation  and 
deduplication  steps. 

Unstructured  data  sits  in  a 
separate  repository.  Sitting 
above  that  is  an  architectural 
I  layer  that  uses  metadata  to  determine 
I  common  trails  between  structured  and 
I  unstructured  data,  says  Karrenhauer. 

I  Some  data  is  transferred  in  batch 


ING’s  Integrated  Data  Environment 
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I  mode,  but  ING  is  piloting  real-time. 

I  bidirectional  data  updates  between  the 
I  databases. 

I  The  source  databases  used  by  ING 
I  —  which  include  Ingres,  Sybase.  SQL 
j  Server.  Oracle  and  082  —  remain  in 
I  use  for  claims  and  statement  proccss- 
j  ing,  says  Karrcnbaucr.  Under  the  data 
I  integration  effort,  ING  merely  central- 
I  ized  some  of  the  stwree  data  from 
I  these  systems  and  classified  it  using 
I  common  terminology  so  information 
can  be  shared  across  business  units. 

Avoiding  Duplication 

I  Karrcnbaucr  places  the  hardware  costs 
'  associated  with  each  information  hub 
'  at  S2  million  to  S4  million,  but  he  says 
stimc  of  the  projects  have  yielded  an 
internal  rale  of  return  in  excess  of 
100"i>  by  avoiding  project  delivery  du¬ 
plication.  That's  because  ING  created 
a  standardized  project  delivery  model 
that  can  be  repeated  as  each  business 
unit  pursues  its  own  relational  data¬ 
bases.  according  to  Karrcnbaucr. 

.Mthvtugh  reusability  leads  to  lower 
costs,  "there’s  risk  mitigation  in  taking 
this  approach."  he  says.  “If  you  did 
one-offs  in  each  case,  the  ri.sks  are 
clearly  higher." 

And  as  other  ING  divisions  in  Brazil. 
Chile.  Canada  and  the  Netherlands 
apply  the  information-hub  approach 
adopted  by  INCj  Americas  as  a  tem¬ 
plate  for  their  own  data  integration 
efforts.  Karrcnbaucr  estimates  that 
they  can  reuse  50‘'o  to  65%  of  the  IT  ar¬ 
chitecture  that  his  division  created. 

ING’s  efforts  have  vvon  praise  from 
industry  observers.  "Fve  scon  other 
companies  trv'  to  stitch  u>gether  pieces 
of  applications  into  new  applications, 
but  ING  is  a  real  leader  in  its  formation 
of  an  integration  competency  center 
and  its  use  of  data  services."  says  Philip 
Russum.  an  analyst  at  Cambridge. 
Mass.-based  Forrester  Research  Inc. 

Marr  says  the  unified  IT  architec¬ 
ture  is  already  paying  off.  For  instance, 
she  points  to  recently  enacted  anti- 
spam  regulation  that  requires  financial 
services  comp.inics  to  offer  customers 
an  e-mail, opt -out  option.  By  now  hav¬ 
ing  all  of  its  customer  information  ac¬ 
cessible  from  a  single  environment, 
she  say's.  ING  is  about  to  comply  with 
the  regulation  “while  allowing  us  to 
continue  to  market  to  .md  support  our 
customers."  O  48402 
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RECOLLECTING 

™^CUST0MER 

INC  Group'’s  new  unified  information  architecture  pulls  data 
from  disparate  business  units’  databases  to  create  a  unified  view 
of  customer  activity.  By  Thomas  Hoffman  and  Lucas  Mearian 


WHEN  THE  Stock  market 
slumped  in  mid-2000. 
KrnrjM  most  financial  services 
firms  found  themselves 
struggling  to  hold  onto 
clients.  ING  was  focused  on  selling 
them  new  products. 

“Not  only  must  large  companies  re¬ 
tain  customers,  but  to  increase  rev¬ 
enues.  they  have  to  cross-sell  to  them 
more  effecttvely."  says  Linda  Marr. 
chief  knowledge  officer  at  Atlanta- 
based  ING  Americas,  a  division  of  Am¬ 
sterdam-based  ING  Groep  NV. 

To  help  h  draw  upon  customer  data 
across  multiple  accounts  more  effec¬ 
tively,  ING  embarked  on  a  massive 
data  integration  effort  in  July  2001 
aimed  at  creating  a  series  of  database 
“hubs"  that  together  form  a  unified  in¬ 
formation  architecture  for  Us  seven 
U5.  busmess  uiuts,  including  reinsur¬ 
ance,  pension  plaits  and  mutual  funds. 

“The  hubs  are  for  centrally  struc¬ 
tured  data . . .  enterprise  value  data 
that's  ccnnmonty  used  across  all  Hni»< 
of  business,  [including}  customer  in- 
forinatioo,  agreement  informatioo  and 
product  infonnatioa.''  says  Chief  Tech¬ 
nology  Officer  Raymoiul  Karrenbauer. 

ING.  which  has  27  lines  of  business 
worldwide,  has  completed  four  hubs 
and  has  10  more  under  construction. 
Those  multiterabyte  databases  give 
business  units  a  comprehensive,  uni¬ 
fied  view  of  the  customer.  But  Karren- 
bauer  had  two  broader  goals  in  mind: 
create  a  reusable  architecture  to  drive 
costs  down  and  mitigate  risk. 

To  appreciate  the  immensity  of  this 
project,  one  iteeds  only  to  walk  into 
ING's  project  control  room  in  Atlanta. 
Tacked  along  the  walls  are  dozens  of 
schematic  diagrams  that  illustrate  how 
the  financial  services  firm  is  simplify¬ 
ing  an  incredibly  complex  IT  environ- 
meoL  That  system  was  created  by  a 
flurry  of  mergers  and  acquisitions  that 
iitcluded  the  purchase  of  Barings  PLC 


in  1995  and  Aetna  Financial  Services 
Inc.  in  2000. 

ING  began  implementing  its  inte¬ 
grated  data  environment  in  May  2003. 
The  structured  data  sits  in  a  set  of  par¬ 
titioned  IBM  DB2  Universal  Database 
EEE  databases.  Key  to  the  project  is 
data-mapping  software  from 
Informatica  Corp.  in  Red¬ 
wood  City,  Cali£,  that  allows 
ING  to  cross-reference  cus¬ 
tomer  information  among 
databases  at  business  units. 

ING  also  uses  data  profil¬ 
ing  software  ftom  San  Fran¬ 
cisco-based  Evoke  Software 
Corp.  and  ad  hoc  reporting 
and  analytical  tools  from 
France-based  Business 
Objects  SA. 

In  just  U  months.  ING's 
staff  built  an  object-based  database  in- 
ftastructure  that  melds  unstructured 
and  structured  data  from  2,000  data¬ 
bases  into  one  logical  view  of  cus¬ 


tomer  and  operational  irffonnation. 

Now.  when  an  ING  call  center  agent 
pulls  up  a  customer  record  in  the  new 
database,  “it  will  retrieve  the  customer 
information  from  the  structured  data 
and  then  also  provide  any  relative 
document  with  that  customec,'*  says 
Karrenbauer. 

ING  created  DB2  reposito¬ 
ries  to  aggregate  a  subset  of 
structured  data  from  each 
business  unit’s  database  that’s 
of  interest  to  the  other  busi¬ 
ness  units.  Along  the  way, 
the  source  data  is  fimneled 
through  a  hub  that  conducts  a 
series  of  transformation  and 
deduplication  steps. 

Unstructured  data  sits  in  a 
separate  repository.  Sitting 
above  that  is  an  architectural 
layer  that  uses  metadata  to  detem^e 
common  traits  between  structured  and 
unstructured  data,  says  Karrenbauer. 
Some  data  is  transferxed  in  batch 
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mode,  but  ING  is  piloting  real-time, 
bidirectional  data  updates  between  the 
databases. 

The  source  databases  used  by  ENG 
—  which  include  Ingres,  Sybase,  SQL 
Server;  Oracle  and  OB2  —  remain  in 
use  for  claims  and  statement  process¬ 
ing.  says  Karrenbauer.  Under  the  data 
integration  effort.  ING  merely  central¬ 
ized  some  of  the  source  data  from 
these  systems  and  classified  it  using 
common  terminology  so  information 
can  be  shared  across  busmess  units. 

Avoiding  Duplicaiian 

Karrenbauer  places  the  hardware  costs 
associated  with  each  information  hub 
at  $2  million  to  $4  million,  but  he  says 
some  of  the  projects  have  yielded  an 
internal  rate  of  return  in  excess  of 
100%  by  avoiding  project  delivery  du¬ 
plication.  Thai’s  because  ING  created 
a  standardized  project  delivery  model 
that  can  be  repeated  as  each  business 
unit  pursues  its  own  relational  data¬ 
bases.  according  to  Karreiduuer. 

Although  reusability  leads  to  lower 
costs,  “there’s  risk  mitigation  in  taking 
this  approach,"  he  says.  “If  you  did 
one-ofis  in  each  case,  the  risks  are 
clearly  higher.“ 

And  as  other  ING  divirions  in  BrazU, 
Chile,  Canada  and  the  Netherlands 
apply  the  information-hub  approach 
adopted  by  ING  Americas  as  a  tem¬ 
plate  for  their  own  data  int^ration 
efforts,  Karrenbauer  estimates  that 
they  can  reuse  50%  to  65%  of  the  IT  ar¬ 
chitecture  that  his  division  created. 

ING’s  efforts  have  woo  praise  from 
industry  observers.  “Tve  seen  other 
companies  try  to  stitch  together  pieces 
of  plications  into  new  plications, 
but  ING  is  a  real  leader  in  its  formation 
of  an  integration  competency  center 
and  its  use  of  data  services,"  says  Philip 
Russom.  an  analyst  at  Cambridge, 
Mass.^)ased  Forrester  Research  Inc. 

Marr  says  the  unified  IT  architec¬ 
ture  is  already  paying  off.  For  instance, 
she  points  to  recently  enacted  anti- 
spam  regulation  that  requires  financial 
services  companies  to  offer  customers 
an  e-mail  opt-out  option.  By  now  hav¬ 
ing  all  of  its  customer  information  ac¬ 
cessible  from  a  single  environment, 
she  says,  ING  is  about  to  comply  with 
the  regulaticm  “while  allowing  us  to 
continue  to  market  to  and  support  our 
customers."  046402 
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ING’s  Integrated  Data  Environment 
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Mce  om  P  presenis  chafcfiges  in  prot^^ 
the  corporate  ne^MoiL  By  Manas  Thurman 


IN  AN  EFFORT  TO  CUt  COStS, 

my  company  has  decided 
to  migrate  from  private 
branch  exchanges  to  IP 
telephony.  By  muting  calls 
over  our  existing  IP  network 
and  using  voice-over-IP  links, 
we  can  signillcantly  cut  our 
telecommunications  costs,  es¬ 
pecially  since  we  have  signifi- 


code.  Fbrtinet  Inc.  in  Sunny* 
vale.  Calif.,  has  a  very  app^- 
ing  product  that  we’re  consid¬ 
ering  deploying.  This  device 
not  only  addresses  maliciot^s 
code,  but  also  supports  fire¬ 
wall.  VPN  and  intrusioa  detec¬ 
tion  and  prevention  functions. 

To  conduct  my  tests,  1  creat¬ 
ed  a  scaled-down  version  of 


cant  telephone  tralTic  between  the  new  IP  telephony  system, 
our  U.S.  oflTices  and  places  like  The  setup  included  several 


Europe  and  India,  as  well  as 
ocher  parts  of  Asia. 

The  bottom  line.  - 

however,  is  that  we’U 
have  phones  on  our  JEC 
desks  that  are  con¬ 
nected  to  the  net- 
work.  And  that  means  Jfll|| 
securing  the  tele¬ 
phone  network  will 
become  my  problem. 

The  tbou^t  of  IP  traffic 
with  voice  traversing  the  net¬ 
work  bothers  me.  since  our 
network  isn’t  as  secure  as  it 
could  be.  So  I  conducted  an  as- 


SECUHTY 


JOHMALa 


IP  phone  models,  a  call  man¬ 
agement  server  and  some  net- 

-  working  gear.  I  sian- 

ed  by  testing  the 
network  over  which 
the  voice  traffic 
--  ^  must  flow.  1  first 

ly,  Q  attached  my  Linux 

_  laptop  to  an  avail¬ 
able  Ethernet  port  to 
see  what  I  could  monitor  us¬ 
ing  the  free  dsnilT  and  cthcr- 
cap  tools. 

Once  I  recorded  some  net¬ 
work  traffic.  I  downloaded 
and  compiled  a  tool  called 


sessment  of  the  major  pieces  of  Voice  Over  Misconfigured  In- 


the  IP  telephony  infrastruc¬ 
ture.  Since  my  exposure  to  IP 
telephony  has  bera  limited,  I 
started  by  reading  up  on  the 
technology.  Most  of  the  vulner¬ 
abilities  discussed  focused  on 
the  ability  to  either  intercept 
network  traffic  or  conduct  im- 
personatioo  attacks  —  manipu¬ 
lating  a  phone  call  so  that  it 
appears  to  come  from  some¬ 
one  ebe. 

Since  1  didn’t  hove  a  lot  of 
time,  1  didn’t  focus  on  denial- 
of-service  attacks,  which  we 
can  address  with  our  regular 
network  gear.  For  example,  we 
use  Cisco  network  equipment, 
which  includes  sevei^  self- 
defense  features  within  the 
operating  system  to  address 
most  DoS  attacks.  In  addition, 
we  will  most  likely  deploy  an 
aU-in-one  device  to  mitigate 
the  threat  posed  by  malicious 


temet  Telephones,  which  goes 
by  the  horrible  acronym 
VOMIT  This  program  can 
take  captured  IP  telephony 
packets  and  reassemble  them 
into  a  form  that  you  can  play 
back  over  your  computer's 
speakers.  The  IP  phones  from 


The  thought  of  IP 
traffic  wM  voice 
traversing  the  net¬ 
work  bomers  me, 
sinco  our  network 
isnl  as  secure  as 
it  could  be. 


which  I  gathered  the  voice 
traffic  don’t  support  encryp¬ 
tion.  so  I  could  easily  play  the 
conversations.  Using  handsets 
that  encrypt  traffic  will  be  a 
requirement.  We'll  also  re¬ 
quire  that  IP  telephony  traffic 
be  separate  from  our  regular 
data  traffic.  Well  do  this  by 
creating  separate  virtual  LANs 
on  our  network  switches.  By 
segregating  the  traffic  in  this 
way.  we  can  thwart  users  on 
the  data  VLAN  from  sniffing 
voice  traffic. 

In  addition,  we  will  add 
firewall  rules  that  limit  access 
to  the  critical  IP  telephony 
devices  to  only  the  required  IP 
addresses.  For  example,  if  man- 
a^rs  are  on  a  separate  VLAN, 
we  can  crafr  rules  that  state 
that  only  certain  users  can  ob¬ 
tain  management  access.  We 
could  further  lock  down  the 
network  by  restricting  the  traf¬ 
fic  so  that  only  the  IP  phones 
can  contact  a  manager. 

Another  aspect  of  IP  tele¬ 
phony  is  the  PC  phone,  or 
”5011  phone,”  which  lets  any 
PC  with  a  headsrrt  or  micro¬ 
phone  and  speakers  work  like 
a  regular  telephone.  Until  we 
address  desktop  firewall  and 
patch  management  issues, 
however,  well  restrict  users 
from  using  these  applications. 

Integrity  Check 

Next  on  my  agenda  was  to  as¬ 
sess  the  integrity  of  the  cen¬ 
tralized  communications  serv¬ 
er,  or  call  manager,  which  sets 
up  and  manages  phone 
IP  ^lones  initiate  a  cal]  by  con¬ 
tacting  this  server.  While  the 
call  manager  plays  a  role  in  set¬ 
ting  up  calls,  once  the  coiuiec- 
tion  is  established,  the  phone 
conversation  occurs  directly 
between  the  two  IP  phones 
over  the  switched  IP  network. 

The  communications  server 
software  we’ll  most  likely  use. 
Cisco  CallManager.  runs  on 
Windows  2000  and  Internet 
Information  Server.  That's  not 


the  ideal  system  for  a  critical 
infrastructure,  but  Cisco 
claims  that  the  Windows  im¬ 
plementation  has  been  hard¬ 
ened.  that  unneeded  services 
have  been  disabled  and  that 
there  is  even  a  host-based 
intrusion-detection  system 
installed  on  the  server. 

If  I  could  hack  into  Call- 
Manager,  I  figured  that  I 
would  own  the  entire  phone 
system.  For  this  lest,  1  ran  a 
combinatioQ  of  Nessus,  a 
freely  available  port  scanner, 
and  Weblnspect  from  SPI  Dy¬ 
namics  Inc.  in  Atlanta  to  con¬ 
duct  a  comprehensive  applica¬ 
tion-layer  assessment  To  my 
surprise,  both  assessments 
identified  no  critical  vulnera¬ 
bilities.  Then  again,  my  test 
represented  an  assessment  for 
only  a  single  point  in  lime. 
More  testing  will  be  needed, 
and  patching  will  be  critical. 

As  soon  as  Microsoft  an¬ 
nounces  the  next  Windows 
vulnerability,  if  the  call  man¬ 
agement  server  isn’t  patched, 
it  may  then  be  possible  to  gain 
access  to  it 

Cisco  and  the  vendors  we 
approached  all  claim  that  they 
keep  up  with  all  patches  and 
security  issues  and  provide 
regular  updates  to  the  operat¬ 
ing  system  and  their  software. 

This  was  just  my  initial  look 
at  some  of  the  main  compo¬ 
nents  of  the  IP  telephony  in¬ 
frastructure.  1  still  need  to  ad¬ 
dress  DoS  issues,  and  we  have 
to  take  a  hard  look  at  the  ar¬ 
chitecture  of  the  entire  IP  tele¬ 
phony  infrastructure.  Several 
other  tests  we  conducted  pro¬ 
vided  a  comfortable  level  of 
assurance  that  we  can  deploy 
a  secure  IP  telephony  system. 

For  now.  it  seems  possible 
to  deploy  IP  telephony  in  a  se¬ 
cure  manner  with  the  proper 
architecture  and  planning  — 
and  by  taking  advantage  of  the 
available  security  configura¬ 
tion  c^tioos  of  the  devices.  I 
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SAS,  the  leader  in  business  intelligence  software,  asks... 


Could  your  IT  dollars  be  better  spent? 
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DANIEL  J.  WEITZNER 


The  Need  to  Know 
What  We’re  Missing 


The  internet  is  becoming  an  increasing¬ 
ly  filtered  medium.  At  the  same  time,  orga¬ 
nizations  depend  on  absolute  transparen¬ 
cy  when  it  comes  to  delivery  of  informa¬ 
tion  in  the  form  of  e-mail,  Web  pages  or 
from  other  applications.  Given  the  growing  reliance  on 


the  Internet  for  remote  work 
and  the  increased  need  for 
integration  with  external 
partners’  networits.  the  trans¬ 
parent  enterprise  depends  on 
open  networks  <—  both  inter¬ 
nally  and  across  the  entire 
IntemeL 

White  wc  think  of  the  In¬ 
ternet  as  the  ultimate  open 
communications  platform, 
it  may  not  be  as  open  as  we 
think.  The  twin  plagues  that 
sometimes  threaten  to  bring 
the  Internet  to  hs  knees  — 
spam  and  pornography  — 
may  be  undermining  this 
openness. 

More  than  a  decade  ago, 

Internet  architect  and  civil 
libertarian  John  Gilmore 
famously  declared.  “The  Net 
interprets  censorship  and  routes  around 
it"  Today’s  Internet  is  much  different. 

In  response  to  the  scourge  of  spam, 
many  filters,  some  of  which  are  largely 
invistble  to  enterprises  and  end  users, 
stand  between  e-mail  senders  and  recipi¬ 
ents.  Filtering  techniques  range  from 
trapping  messages  with  spoofed  domain 
names  to  content-based  filters  that  use 
sophisticated  machine-learning  tech¬ 
niques  to  spot  potential  spam  ISPs. 

Other  service  providers  are  filtering  lit¬ 
erally  billions  of  messages  per  day  and 
dumping  them  into  the  digital  void. 
Sometimes  this  happens  under  the  con¬ 
trol  of  the  enterprise,  and  some¬ 
times  it  doesn’t.  The  cumulative 
effect,  however,  is  very  hard  to 
assess  or  manage. 

The  latest  domain  authentica¬ 
tion  technique,  known  as  Sender 


ID.  is  somewhat  hung  up  in 
the  standardization  process 
because  of  possible  patent¬ 
licensing  problems  [Quick- 
Link  49427],  but  h  appears 
likely  that  some  form  of 
sender  authentication  will 
be  put  into  place  soon. 

Client-side  filters  operate 
under  user  or  local  enter¬ 
prise  control  and  offer  a 
considerable  range  of  con¬ 
figuration  options.  Those 
who  use  this  sort  of  spam 
filter  have  the  satisfaction 
of  seeing  far  fewer  prescrip¬ 
tion  drug  offers  and  fman- 
dal  scams,  but  it’s  very  hard 
to  know  whether  overillter- 
ing  is  weeding  out  messages 
that  we’d  actually  like  to 
see.  Our  only  options  are  to 
turn  down  the  filtering  rate  and  open 
our  in-boxes  to  more  spam,  or  to  actually 
wade  through  all  mail  tagged  as  spam 
and  manually  check  for  mistakenly  fil¬ 
tered  mess^ys.  Neither  option  is  partic¬ 
ularly  appealing,  so  it  seems  likely  that 
we’ll  get  used  to  the  idea  that  we  are  just 
going  to  miss  valuable  messages.  Not  ex¬ 
actly  the  model  of  transparency. 

Web  content  is  also  increasingly  fil¬ 
tered.  Enterprise  gateways  often  block 
URLs  that  appear  on  lists  identifying 
sources  of  pornographic  or  offensive 
material.  Other  sites  are  blocked  because 
they  arc  identified  as  sources  of  harmftU 
spyware.  Some  filters  also  block 
sites  that  seem  more  recreation¬ 
al  than  professional  (such  as 
those  providing  sports  scores). 
But  whose  judgment  is  used  to 
make  these  blocking  decisions?  I 


Beyond  choosii^  a  blocking  software 
vendor,  does  IT  or  anyone  else  in  your 
company  really  know  what  blocking  cri¬ 
teria  are  being  applied? 

Where  is  all  of  this  filtering  takii^  us? 
Are  we  missing  things  or  stopping  traffic 
that  should  be  getting  throu^?  How 
many  sales  leads  have  been  lost  to  fil¬ 
ters?  How  much  time  has  been  wasted 
researching  a  question  when  the  useful 
pages  were  mistakenly  blocked  from 
view?  A  more  tran^iareni  approach  to 
filtering  would  notify  users  when  (and 
perhaps  even  why)  pages  they  might  be 
looking  for  were  blocked. 

Policymakers  and  courts  are  turning 
increasing  attention  to  the  uses  and 
abuses  of  filteru^  Ckingiess  has  man¬ 
dated  the  use  of  content  filters  in  li¬ 
braries  to  protect  against  pornography. 
The  U5.  Supreme  Court  recently  struck 
down  an  Internet  censorship  statute  on 
the  grounds  that  client-side  content  fil¬ 
ters  installed  at  the  discretion  of  parents 
or  teachers  seem  likely  to  be  as  effective, 
if  not  more  so.  at  protecting  children 
from  harmful  content.  But  the  court  has 
also  asked  the  lower  court  that  tried  the 
case  originally  to  make  a  detailed  assess¬ 
ment  of  the  effectiveness  of  filters. 

On  the  other  hand,  a  court  in  Penn¬ 
sylvania  just  struck  down  a  law  that  re¬ 
quired  ISPs  to  filter  out  URLs  deemed 
to  point  to  child  pornography,  on  the 
grounds  that  the  law  ended  up  blocking 
scores  of  Web  sites  that  were  entirely 
benign. 

Don’t  misunderstand  me.  Filtering  is 
a  powerful  and  useful  tool  and  far  more 
effective  than  government  censorship. 
Whether  it’s  being  used  to  keep  porno¬ 
graphic  material  out  of  the  worb^Uce  or 
to  help  us  manage  the  torrent  of  spam, 
filtering  is  downright  essential,  given  the 
state  of  today’s  Internet.  But  periiaps  a 
bit  more  transparency  would  be  useful 
We  ought  to  know  w^t  we're  missinp 
049552 
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THE  FASTIRDN  EDGE 
^'SERIES  IGGbE  switches 


Network  Goes  Faster.  Budget  Goes  Farther. 


FOUNDRY 

NETWORKS 


Imagine  I  T  that's  flexible  enough  to  help  you  reach  your  business  goals  quickly  and  elSciently.  The  SAP  NetWeaver'  platform  speeds  integration 
and  makes  the  ,ob  of  managing  applications  a  lot  more  manageable.  So  you  can  make  changes  and  implement  new  strategies  faster  than  ever. 
Visit  sap.com/necweaver  or  call  800  880  1727  to  seize  opportunities  zs  they  zrise. 


A.M.  ON  A  DAY  in  mid-August, 
i  1%^  Rkk  Ocboa.  the  top  weather¬ 

man  at  the  National  Interagency  Fire  Center  (NIFC) 
in  Boise,  Idaho,  walks  into  a  brieflng  room  filled 
with  personnel  horn  the  multiple  federal  ^ncies  thar 
staff  the  center  As  he  does  every  morning  during  the 
peak  spring  and  summer  fire  season,  he  provides  a 
detailed  weather  report  for  the  entire  country  on  a 
floOT-m-ceiling  screen. 

But  unlike  the  forecasts  on  nightly  TV,  Ochoa's 
zeroes  in  on  weather  conditions  of  little  itit^re^t  to 
laymen  but  of  key  importance  to  Hre- 
fighting  ^encies.  He  talks  about  rela¬ 
tive  drought  and  the  presence  of  “dry” 
thimderstorms,  which  can  spiaiic  and 
then  help  spread  a  fire. 

When  Ochoa  finishes,  Kim  Chris¬ 
tensen,  a  U,S.  Department  of  Agricul- 
ttue  Forest  Service  enq>loyee  wto  man¬ 
ages  the  NIFCs  National  Interagency 
Coordination  Center,  reviews  major  for-  , 
est  fires  across  the  country.  This  sum¬ 


mer.  favoraUe  weather  has  held  forest  fires  in  check 
throu^KHit  much  of  the  continental  US.  But  the  fire¬ 
fighters  have  more  than  weather  in  their  favm.  Ad¬ 
vanced  information  management  systems  are  tw»tptng 
them  to  better  predict,  manage  and  contain  forest  fires. 

Planning  Ahead 

Up  until  the  late  1990$,  wildland  forest-fire  managers 
could  only  react  to  fires,  giving  nature  a  head  start 
But  today,  advanced  systems  for  predicting  weather 
and  fire  behavior,  combined  with  powerful  resource 
mana^^ment  systems,  enable  forest-fire 
managers  To  work  and  plan  ahead"  of 
a  fire,  says  Neil  Hitchcock,  a  Forest  Ser¬ 
vice  enqiloyee  vrtio  serves  as  the  NIFC’s 
deputy  director  of  fire  operations. 

The  center  has  also  developed  stan¬ 
dard  fire  management  policies  for  the 
multiple  agencies  that  battle  forest 
fires  across  the  country.  Moreover, 
these  agencies  —  the  Forest  Service, 
the  Bureau  of  Indian  Affiurs,  the  Bu¬ 


reau  of  Land  Management,  the  Fish  and  Wildlife 
Service  and  the  Natioaal  Park  Service  —  now  also 
use  common  software  systems  and  tools  to  solve 
common  problems,  Hitchcock  says. 

Weather  forecasting  plays  a  key  role  in  fire  man¬ 
agement.  according  to  Ochoa,  a  Bureau  of  Land  Man¬ 
agement  employee  who  manges  the  Nadonal  Fire 
Weather  Pit^ram  in  the  center’s  predictive  services 
divisioiL  Ochoa  and  his  colleagues  continually  moni¬ 
tor  conditions  duu  can  cause  or  affect  the  spread  of 
fires,  such  as  relative  bumidtt)'  and  wind  direction  and 
^>eed.  Much  of  this  infonnatioQ  —  including  satellite 
itoAgery  —  is  provided  by  the  National  Oceanic  and 
Atmospheric  Administration’s  (NOAA)  National 
Weather  Service,  which  has  a  presence  at  the  center. 

The  NIFC  also  relies  heavily  on  infornmion  provid¬ 
ed  by  LSOO  remote  automated  weather  stations,  which 
are  unstaffed  outposts  scattered  across  the  country 
that  transmit  data  on  wind  speed  and  direction,  air 
temperature,  and  humidity  to  the  center’s  computers 
over  a  NOAA  satellite. 

Confinued  on  page  44 
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Continued  fivm  page  41 

Ochoa  can  also  up  into  historical  fire  dau  through 
the  Weather  information  Management  System  data¬ 
base,  hosted  on  an  IBM  mainfirame  at  the  USDA 
National  Information  Technology  Center  (NITC)  in 
Kansas  City.  Mo. 

Fire  spreads  best  in  areas  where  dry  wood,  called 
fuels,  is  plentiful,  and  Ochoa  uses  fuel  moisture  and 
temperature  information  transmined  by  the  remote 
weather  stations  as  well  as  the  Web-based  Wildland 
Fire  Assessment  System.  That  system  provides  satel¬ 
lite  data  from  the  U.S.  Geolo^c^  Survey  on  current 
and  past  weather  and  on  types  and  moisture  concent 
of  live  and  dead  fuels  and  other  vegetation. 

Information  on  lightning  strikes  (bat  could  ignite  a 
forest  fire  is  provided  through  the  National  Light¬ 
ning  Detection  Network,  operated  by  VaisaJa  Inc.  in 
Woburn,  Mass.  The  nationwide  network  of  114 
6-fi.-tall  sensors  uses  triangulation  to  detect  light¬ 
ning  strikes.  Within  seconds,  the  sensors  transmit 
the  strike  information  to  Vaisala's  dau  center  in  Thc- 
son.  Aria.,  where  it’s  analyzed.  Then  data  on  the  loca¬ 


tion,  time  and  amplitude  of  each  strike  is  sent  to  the 
NIFC  and  accessed  via  Internet  from  a  desktop  PC. 

“Ninety  percent  of  all  forest  fires  are  started  by 
lightning.*  says  network  coordinator  Phil  Sielaff.  so 
the  strike  information  b  a  key  tool  in  helping  the 
NIFC  managers  predict  fires. 

Ochoa  uses  all  this  data,  as  well  as  regression  analy¬ 
sis,  to  develop  a  fire  danger  forecast  for  the  next  10  to 
15  days.  This  allows  wildland  fire  managers  around 
the  country  to  “stay  ahead  of  the  curve,*  he  says. 

The  predictions  also  allow  Christensen  at  the 
Forest  Service  to  position  resources  in  anticipation 
of  a  fire  instead  of  in  reaction  to  it.  Prepositionlng 
firefighters,  water  bombers,  equipment  and  top-level 
incident  management  teams  can  make  the  difference 
between  an  out-ofcontrol  fire  that  bums  for  weeks 
and  one  that’s  controlled  within  days,  she  says. 

Ochoa  recalls  that  predictive  services  truly  paid  off 
in  2001.  As  fires  threatened  forests  throughout  the 
Pacific  Northwest,  long-range  predictions  allowed 
the  center  to  preposition  a  variety  of  firefighting  re¬ 
sources.  ntough  the  fires  in  that  area  cost  $170  million 


to  suppress,  the  costs  could  have  hit  SI  billion  if  fire 
crews  hadn’t  been  in  place  ahead  of  time,  he  says. 

And  since  2003.  Christensen  has  bad  a  powerful 
Java-based  tool  to  manage  and  marshal  these  assets. 
The  Resource  Ordering  and  Status  System,  devel¬ 
oped  by  Lockheed  Martin  Corp.,  ties  into  Oracle 
databases  of  firefighting  resources  housed  on  IBM 
servers  at  the  NITC,  where  Web  services  are  provid¬ 
ed  by  public-domain  Apache  Web  server  software. 

Instead  of  spending  hours  on  the  phone  trackii^ 
down  the  resources  she  wants  to  position  at  the  site  of 
a  likely  fire.  Christensen  can  just  log  onto  the  resource 
system,  see  which  crews  and  resources  are  available 
and  dispatch  them.  "It's  changed  the  way  we  do  busi¬ 
ness,”  ^  says. 

Front-line  Use 

The  predictive  tools  and  resource-ordering  system  are 
also  used  by  federal  wildland  fire  manners.  Sielaff 
says  that  he  has  1,500  subscribers  to  the  lightning- 
detection  network,  and  some,  such  as  fire  truck  crews, 
are  on  the  front  lines  of  forest  fire  management. 

The  resource  management  system  has  been  in¬ 
stalled  at  400  fire-dispatch  centers  and  has  6,000 
users.  Bill  Waterbury.  assistant  director  for  fire  oper¬ 
ations  at  the  Southwest  Coordination  Center  in  Al¬ 
buquerque.  says  he  uses  it  for  quick  updates  on  the 
status  of  his  firefighting  assets.  For  example,  when 
Waterbury  consulted  the  system  in  mid-AugusL  he 
found  that  some  crews  from  his  region  were  unavail¬ 
able.  having  been  dispatched  to  British  Columbia. 

At  the  regional  level  weather  forecasters  and  fire- 
behavior  analysts  can  use  a  wealth  of  predictive  data 
from  the  national  center  as  they  develop  their  own 
fire  management  plans.  Fire-behavior  analysts  in  the 
field  use  laptops  to  tap  into  the  same  Web-based 
tools  used  by  the  NIFC  as  well  as  Windows-based 
systems  developed  by  the  Forest  Service.  One  such 
system  produces  detailed  graphic  and  tabular  fire- 
danger  sununanes.  With  this  information,  analysts 
can  help  incident  management  teams  plan  strategies 
and  tactics,  Waterbury  says.  The  analysts  can  also 
warn  of  impending  shifts  in  the  direction  of  a  fire  to 
get  crews  —  and  local  residents  —  out  of  harm’s  way. 

These  information  systems  have  forever  changed 
the  way  forest  fires  are  managed  in  the  U.S.,  says 
Hitchcock.  Every  fire  allows  firefighters  “a  window 
of  opportunity"  to  get  the  upper  hand,  he  says,  and 
these  tools  give  them  a  better  chance  to  seize  that 
opportunity.  O  49328 

Brewin  is  a  former  Computerworid  reponer. 


ioumouidn'iu' 
p«ct  to  find  «  wab- 
iMStor  «f  a  forest 

Are.  But  thanks  to 
Eric  Noftzel.  a 
USOA  Forest  Service 
webmaster,  on¬ 
scene  teams  manag¬ 
ing  maior  forest  fres  in  the  Southwest  wtS  soon 
have  thee  o«m  be^peede  Web  sites  to  provide 
tim^  ntonnalion  to  the  news  media  and  resi¬ 
dents  ol  commundies  near  a  fire 


Neitzti  began  creating  fire-specific  Web  srtes 
when  he  was  twed  by  the  Forest  Service  iast  year 
to  design  and  maintain  a  Web  Site  for  the  Apache- 
Sitgreave  National  Forest  north  of  Fhoenix. 

He  proved  the  power  of  the  Web  at  the  Willow 
Fee.  vdsch  burned  TI9.000  acres  near  F^yson. 
Ariz.,  ihis  summer.  Neteel  used  detailed  maps  and 
led  alerts  on  the  Willow  Fire  Web  site  10  help  local 
residents  and  business  owners  decide  vvhether  (0 
evacuate  Alerts  about  srnoke  and  wind  (frectiw 
on  the  VWti  site  ^  helped  people  dovvnwind  of 
the  fire  with  asthma  or  lung  diseases  assess 


I  whether  it  was  pnideni  to  go  outside,  he  says. 

I  Mary  ZabinsM.  fire  infonnation  coordinator 
f  attheSoulhwestCoordinationCenter.saysflre- 
•  specific  Web  srtes  can  provide  rnore  timely  infor- 
I  mation  than  sftt  would  have  at  her  office  hundreds 
I  of  miles  from  the  scene 
I  An  on-scene  webmaster  can  quicHy  gather 
I  inforniation- such  as  two-way  radio  rQX)rls  from 
I  hrefighfers- that  would  trickle  down  slowly  to  a 
I  rernole  webmaster.  Neitzel  says,  Al  the  Willow 
I  Fire,  ihis  included  timely  reports  of  fire  encroach- 
I  ing  on  a  key  road.  Neitzel  says  he  sometimes  up¬ 


dated  that  fre  Web  site  "every  couple  of  minutes* 

and  recorded  as  many  as  200.000  hits  a  day. 

(See  <^.fifeteam-5w.cofn/wNlney/w^ 
Neitzel  emphasizes  that  because  fire  learns 
often  operate  in  low-bandwidth  environments,  he 
leaves  out  animation  or  bandwidth-hogging  plug¬ 
ins  on  his  fire-specific  Web  sites. 

Now  Nertzel  IS  baming  three  webmasters  using 
Oreaniweaver  Web  sofhvare  from  MacroniedB 
Inc.  He  hopes  these  pioneering  efforts  can  serve 
as  a  model  for  other  ftre  coordination  centers. 
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VARIANCE  POINTS 


Schedule 
delay  (actual 
vs.  planned) 


<10% 

10%  to  20% 
>20% 


0  '  Unresolved 


no  issues 
del  notables 


High-probaMI-  13  risks 

ty.  high-impaet  4-5  risks 

riskevents*  6-7nsks 


Milestone 
delay  (actual 
vs.  planned) 


Costover  <10% 

budget  (actual  10%  to  20% 

vs.  planned)  >20% 


Disposition 
of  the  team 


10%  to  20% 
>20% 


Deliverable 
delay  (actual 
vs.  planned) 


<10% 

10%  to  20% 
>20% 


Resources  <10% 

shortage  (ac-  10%  to  15% 
tual  vs.  planned)  >15% 


hiy^-,mpact  risX  cui,  nsu/r  in  .1  loss  ..fbuJLHt  ,.r  .  _ _  ▼ 


The  sponsor  and  the  profoet 
manager  collaborate  to  develop 
and  deploy  a  recovery  plan  for 
the  project 


The  sponsor  reviews  the  project’s 

vital  signs  every  two  weeks  -  more 

frequently  if  vital  signs  breach  their 
thresholds. 


The  project's  vital  signs,  as  wel  a 
answers  to  Questions  1  through  6. 
are  routinely  monitored. 


The  sponsor  reviews  the  vital  signs 
and  Questions  1  to  6  to  ascertain 
the  project's  health. 


WWW  compulerwoflO  com 

MANA6EMEIIT 

V — 0 = — 

Close  to  40%  of  IT  projects  fail  or 
are  abandoned  before  completion, 
resulting  in  annual  financial  losses  of 
more  than  S100  billion  in  the  U.S. 
alone,  according  to  tiie  Center  for 
Project  Management  in  San  Ramon, 
Calif.  The  center  has  developed  a 
proc^  called  ProjectHALT  to  help 
identify  and  cancel  doomed  projerts 
early.  Here's  how  it  WDrlo. 

ProjectHALT  method/^ogy  is  ct^ryrighted  by  the  Center 
for  Project  ManagemerU  and  illustrated  with  permission. 
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Career 


MAIIA6EMEH! _ 

Tech  Etiquette’  Blunders  on  the  Rise 


H  you're  checking  e^nai  a«J  Instant  messages  a  stftepwwusly 

ing  business  meetings,  your  toss  Is  probably  on  to  you.  A  recent  survey  of  more  than  1 400 

U5.CK)s  by  recruting  firm  Robert  Half  Technotogy  in  MeitoParKC«..fou^ 

CX)5  consider  breaches  in  technology  eiKpelte  rnore  cornrnon  today  than  three  years  ago. 


Di5lraiJiuMtlirtpgmCIO»mortArtH|faurinessiiintti^ 


Instant  messaging 

80'’c 

Responding  toe-mail 

79'=u 

Working  on  laptops  while  others  are  speaking 

65^0 

The  AP  quoted  a  study  by  the  NationaJ 
Association  of  Srrftware  and  Services  Com¬ 
panies.  IrKfia's  top  IT  association,  projecting 
a  shortage  erf  262.000  IT professionals  by 
2012.  Kkan  Kamik.  presid^  of  Nasscom. 
said  the  group  has  begun  talks  with  IT  firms, 
universities  and  the  Indian  govemmerrt 
about  irriproving  curricula  to  prepare  stu¬ 
dents  for  outsourcing  and  fT  research  jobs, 
the  AP  said. 

Apparently,  the  missing  skills  are  not  just 


technical.  Karniksuggesled  that  introduc¬ 
ing  foreign  language  and  communications 
skiOs  would  help  dose  the  gi«). 

The  Nasscom  report  fellows  research  by 
Gartner  kic.  predicting  that  unless  India  de¬ 
vises  a  long-term  strategy  to  keep  ahead  of 
the  outsourcing  pack,  emerging  efforts  in 
Thailand.  Malaysia.  F#.  Mauritius,  the  Czech 
Republic.  Ffeland  and  South  Africa  could 
chip  away  almost  half  of  Its  current  80% 
share  of  the  market. 

According  to  the  Nasscom  report,  out¬ 
sourcing  contributed  29%  to  India’s  totd 
software  exports  and  posted  revenue 
growth  of  4^  in  the  fiscal  year  that  ended 
in  March 2004  Revenues  are  forecast  to 
grow  about  40%  m  the  current  fiscal  year, 
the  AP  reported.  Cl  49463 


v\&tc 


High^chBust 


TTw  aconomy  miy  tM  bouncing  back, 
butthorriobimrkoliilagoinolw- 
hM.  So  says  “Arovica’s  HVi  Toch 
Bust,"  a  Soptombor  2004  roporl 
from  tho  Cantor  for  (Mnn  Economic 
OamlopmantorthaUnlwrsilyofIK* 
nois  at  CMcago.  Authors  Snigdha 
SrhmstaM  and  Mk  Thoodore  found 
that  tho  dncrapancy  botaroan  tho 
rapidhr  growing  aconomy  and  ths 
shiggish  labor  markat  is  aspadaly 
pranouncad  In  tha  IT  industry. 

Nalionaly.  botwaan  March  2001 
and  Apil  2004.  tha  last  month  for 
which  data  was  aasishlB.  tha  fTin- 
Aistry  loot  a  orhopping  403300 
jobs,  200300  of  which  ibsappaarad 
aftortharocassionwasofRciMlyda- 
darsd  Qvor.  acconing  to  tha  raport 

WhNo  thorn  isn't  much  currant 


and  raHaUa  information  on  the 
extant  of  job  losses  rasulting  from 
ofhhoia  outsourcing,  there  is  Rttte 
doubt  that  it  has  contributad  to  soar* 
ing  unemployment  rates  in  tha  in¬ 
dustry,  the  report  states. 

To  support  that  contention,  tha 
authors  point  out  that  tha  national 
unamploymont  rMe  for  computer 
programman.  oneofthetopjobs 
sent  offshore  acconhng  to  the  Infor¬ 
mation  Technology  Association  <d 
Amsrica,  was  6.7%  in  2003.  up 
from  ^S%  in  2001. 

Oospite  recant  tpowth  in  tha  ag¬ 
gregate  number  of  new  jobs  par 
month,  there  is  Bttiaavktenca  of  sig- 
nincatd  job  expansion  in  tha  IT  in¬ 
dustry,  tile  raport  concludes. 

•KttNe&ilMymukM 


IT  Industry  Employment  Nationwide 
And  in  Key  Metrorxtlitan  Areas 


HIRING  PLANS 

Which  of  the  following  best  describes 
the  current  status  of  your  fuH-time  fT  staff? 


_ *  Owwislaiiiu  ■  Don't  know 


— 

NATION  BOSTON  CHICAGO  SAN  FRANCISCO 

■2 

— 

'n 

_ 

EMC 


EMC  HAS  EVERYTHING  YOU  NEED  TO  MANAGE  YOUR  INFORMATION  EFFECTIVELY.  Gel  r 


where  information  •, 


■|  fS 


->  systeTi^. 
iage  V".  ■ 


lUICK  HITS 


2005  IT  Budgets; 
Which  Direction? 

How  do  you  tt¥ik  your  company's  2005 
FT  spending  will  compare  with  thcs  year  s  ^ 


■  HIGHER  HFIAT  SLOWER 


BASE 


Hiring  Horrors 


EX'KN  in  this  EMPLOYERS’  JOB  MARKET, 
routine  IT  hiring  processes  often  result  in 
bad  matches  and  high  turnover.  That’s  be¬ 
cause  the  techniques  for  hiring  and  process¬ 
ing  technical  personnel  in  corporate  Ameri¬ 
ca  are  a  hodgepodge  of  unscientific  and  unprofessional 
rituals.  As  author  and  poet  Paul  Goodman  once  said, 
"Few  great  men  could  pass  personnel." 

As  an  independent  IT  consultant.  I’ve  sought  and  ob¬ 
tained  many  technical  and  leadership  positions  over 
the  years.  My  experiences  provide  examples  of  the 
errors  and  lailures  inherent  in  IT  hiring  practices. 


r.’  I't-irtri  il!;.  ihi 


■  "Resumes  without  salary 
history  will  notbe  considered." 

1'-  ■ 

■  "College  degree  required." 


DAV10 1.  BURREH  IS 

principal  consultant  at 
Oak  Business  Services 
■n  Marshfield.  Mo 
Contact  him  al 
i>avid.buftwtt$an.net 


.tilir  rill- . 

il  \otir  r..i 


IllJlll.ttl'  I'lH'J 

11. 


•  I  J.iii'i  i.t 
N«'  nIiiti' 


■  "Send  cover  letter  and  resume  (ASCII 
text)  to . . .  **  Althiiuuh  I  ii-.'.i.ilK  m-mJ  .i 
.  .'viT  Ictii-r  I  rc''.i  nr  I’cfnjj  ii> 

.b*  '«•.  Ai;.!  lAv  ui-rkc.l  lonu  .iiiJ  lurJ 
Ji  vi  bipiny  ni\  '  •«ii  prcM-nt.i 

whu  ti  is  ;..vt  in  AM  II  if\i  «ll‘ 
li».’  v\.>n'r  d.iiu’r  i.iir  runv.  scn'i-ii 
liiiii  •  >ui.  > 

I  111.'  .ipi'Iu’  Jill  '  ill  1  III  m.ituHi  js  St  ru 

Uiii/t  J  h\  -Il  ill<  i.ilisi.  .til  imcrii 
nr  .in  .IpplH  .lilt  ir.ifkinp  s\sk-m  r  Al  ''t. 
tiiinc  **l  'A  itii’li  h.is  ,1  rv.il  pra'p  of'.K  iu- 
,»1  technical  work.  The  Ilk  pcrsim 
UMi.nlly  h.iN  little  knuwlcdjic  nfihc  job 
tn  be  r»-Tl'‘'rmed  but  tries  in  vain  lu 
match  resume  infurmaiitm  tn  .i  com- 


pain-pnnkicci  job 
.Icscripiinii, 

[  lin.l  1!  tinsi’ttlmp  II.  11., Si¬ 
nn  liiiiire  c.iiivi,iyri.'J  x.i 
h.tph.i/.irdh, 

I  !u'  A I ''  looks  o\i  r  lit,- 

-ipplic.ini's  iniorni.iiion, 

.iTv  hine  till  tni//\\oi  J- 
•  i  -‘tlii-r  scl.’ctioii  I  rile 
I  -  I  Ills  m.i\  uoi’k  II  ilu’ 

I’-,  t'.-ii  ■.\l;o  sels  lip  tlic 
iei,iiiienienis 

t  -  liie  !iehiJie.»l  det.iiU 
:  p.-siiioii  .iiul  e.in 

pioper]\  eitvoJe  rheni  into 
the  sc.  titnerV  pi’ocr.iiii  Hut  i..t.orien. 
the  seannuic  criteri.i  h.uv’  noiiniiij  lo 
Jo  \\  ith  skills, 

1  o[  iiisi.iiK’c:  I  l.n  inc  iliree  lobs  in 
lue  \i-,irs  diMiii.iIifies  .i  canJiJaie. 

I  his  Si  rci'iiiiiL:  metric  is  lurremh 
Used  [>\  .1  lariji-  msurance  orciini/iiiitin 
'  known,  b\  iljc  w.i^.  tor  l.i\  in^  otY  1 1 
siallers  ;u  the  drop  of’.i  hat  1. 1  was 
hired  liiere  .is .» Injrh-knel  leeluiic.jl 
le.id  unK  alter  one  of’  the  e.Xeculhes 
oierniied  the  se.tnner.  He  knew  that 
some  ol’tlie  best  1 1  talent  chan^-es 
jobs  rreqviemh.  It  conies  witli  the 
lerritorw 

The  imer\  iew  process  can  be  de- 
>‘radinp  and  inluriaiin^.  I've  had  inter¬ 
viewers  arrive  late  witliout  apologies. 
I'\c  had  them  not  show  up  at  all.  I've 


watched  them  nod  off  during  my  hard- 
won  interview.  (I'm  sorry  that  my  em¬ 
ployment  story  is  so  dull!)  Twitv,  I've 
been  interviewed  b\  someone  w  ho 
w  as  obviously  drunk.  It’s  diftlcult  not 
to  become  cynical  about  the  w  hole 
hiring  process. 

HR  Blunders 

And  how  about  HR  foul-ups?  A  mis¬ 
placed  cheek  m.irk  can  he  dc\asiating. 
•At  a  (ihicago-based  comnuinicaiions 
provider.  I  resigned  .inj  gaie  the  usual 
iwo  weeks’  notice.  Tlie  HR  dcpari- 
meni.  ever  mindful  of  getting  .i  full 
vl.iv  s  work  for  a  full  d.i\  s  p.u.  selK-d 
uled  nn  e\tl  iiiier\ieu  .iftiT  quilting 
time.  1  met  w  iih  tlu-  HR  spi-i-i.ilist. 
signed  the  required  documents,  shook 
h.iiiJs  jiid  went  on  ni\  w.i\. 

Some  lime  filer  I  w.is  irv  mg  lo  get  ,i 
lu^i  lob  ,md  w.is  ii.iN  ing  liiiR-  suici-ss. 

I  liii.ilii  .iski  d  .1  friend  siil]  .u  the  eoin- 
p.m\  loiheck  nn  lefi-ren.  es.  Sure 
eiioaeh.  the  Hit  qvci.ilts!  li.id  clu  cked 
.1  bov  on  tin  terniin.itioii  foim  fli.n 
staled,  ’Not  eligible  tor  rehiii."  I  !iis 
W.IS  i  .msme  me  to  lu'  screened  out 
from  prospe.  live  opportiii-atK-s.  So 
imieh  for  qu.ilili.  .isstir.itiee 

liii-only  pel  son  i-i]|p,,wi'i’i  d  ti> 
change  the  il.imning  box  w.is  the  pei 
son  w  ho  had  londucteJ  the  exit  inier- 
\  lew,  .ind  she  w.is  ,>n  m.iiernif\  li-.i\e’ 

It  look  several  e.ills  to  .i  vice  president 
to  gel  this  str.iighlened  out. 

I  he  point  is  th.ji  ioda\  s  hiring 
processes  .ire  ill-conceivcd.  poorh  ex¬ 
ecuted.  disrespectful  and  error-prone, 
and  \ei  we're  supposed  to  entrust  our 
In  elihoods  .ind  careers  to  them. 

1  he  situation  could  be  immediatelv  ' 
impro\  eJ  h\  giving  the  liiring  m.in- 
agers  conirtil  o\er  hiring  processes 
and  m.iking  their  bonuses  dependent 
on  their  turmwer  statistics.  \\'h\  ntu 
let  the  managers  manage?  O  49558 


WANT  OUR  OPINION? 


I  For  inoie  cotunws  and  'if«s  to  oui  atcnivc-j  go  'ii 

”  wwwxaww)uteniwrld.conMopiniBns 


)*■ 


50 


tv.m 


MANAGEMENT 


iv.computerworfd.coni 


QUICK  HITS 


2005  rr  Budgets: 
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HMd»)njM(|eiroon|«^82005 
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■  HnHBO  BRJAT  BUIWER 


waMortiAMrannl 
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KM  100  bacut  at  ) 


DAVID  L.  BURKETT 


Hiring  Horrors 


Even  in  this  employers’  job  market, 
routine  IT  hiring  processes  often  result  in 
bad  matches  and  high  turnover.  That’s  be¬ 
cause  the  techniques  for  hiring  and  process¬ 
ing  technical  personnel  in  corporate  Ameri¬ 
ca  are  a  hodgepodge  of  unscientific  and  unprofessional 
rituals.  As  author  and  poet  Paul  Goodman  once  said, 
“Few  great  men  could  pass  personnel.” 

As  an  independent  IT  consultant.  I’ve  sought  and  ob¬ 
tained  many  technical  and  leadership  positions  over 
the  years.  My  experiences  provide  examples  of  the 
errors  and  failures  inherent  in  IT  hiring  practices. 


To  begin  with,  the  crite¬ 
ria  used  for  screening  can¬ 
didates,  while  often  inane, 
are  rigidly  enforced  by  cor¬ 
porate  human  resources 
gatekeepers.  Here  are  three 
examples: 

■ ‘Itesumte  without  salary 
history  wi /wf  be  coreidered.’' 

(That  goes  for  you  too. 

Peter  Drucker!) 

■  Xdege  degree  requved." 

In  what?  Do  the  duties  of 
the  job  really  require  this, 
or  is  it  merely  a  tool  to  re¬ 
duce  the  candidate  pool?  (1  don’t  care 
if  your  name  is  Bill  C^tes.  No  sheep¬ 
skin.  no  job.) 

■  "Send  cover  letter  and  rdsumd  (ASCII 
text)  to ...  *  Although  I  usually  send  a 
cover  letter,  I  resent  being  ordered  to 
do  so.  And  I’ve  worked  long  and  hard 
developing  my  “on  paper"  presenta¬ 
tion,  which  is  lost  in  ASCII  text.  (If 
he  won't  dance  to  our  nme.  screen 
him  out.) 

The  applicant's  information  is  scru¬ 
tinized  by  an  HR  specialist,  an  intern 
or  an  applicant  tracking  system  (ATS), 
none  of  which  has  a  real  grasp  of  actu¬ 
al  technical  work.  The  HR  person 
usually  has  little  knowledge  of  the  job 
to  be  performed  but  tries  in  vain  to 
match  resume  information  to  a  com¬ 


pany-provided  job 
description. 

I  fmd  it  unsettling  to  have 
my  futiue  considered  so 
haphazardly. 

The  ATS  looks  over  the 
applicant’s  information, 
scarchii^  for  buzzwords 
and  other  selection  crite¬ 
ria.  This  may  work  if  the 
person  who  sets  up  the 
scanning  requirements 
knows  the  technical  details 
of  the  position  and  can 
properly  encode  them  into 
the  scanner’s  program.  But  too  often, 
the  scanning  criteria  have  nothing  to 
do  with  skills. 

For  instance:  Havii^  three  jobs  in 
five  years  disqualifies  a  candidate. 

This  screening  metric  is  ciurently 
used  by  a  large  insurance  organization 
(known,  by  the  way.  for  laying  off  IT 
staffers  at  the  drop  of  a  hat).  I  was 
hired  there  as  a  high-level  technical 
lead  only  after  one  of  the  executives 
overruled  the  scanner.  He  knew  that 
some  of  the  best  IT  talent  changes 
jobs  frequently.  It  comes  with  the 
territory. 

The  interview  process  can  be  de¬ 
grading  and  infuriating.  I’ve  had  inter¬ 
viewers  arrive  late  without  apologies. 
I’ve  had  them  not  show  up  at  all.  Fve 


watched  them  nod  off  during  my  hard- 
won  interview.  (I'm  sorry  that  ray  em¬ 
ployment  story  is  so  dull!)  T^vice,  Tve 
been  interviewed  by  someone  who 
was  obviously  drunk.  It’s  difficult  not 
to  become  cynical  about  the  whole 
hiring  process. 

HR  Blunders 

And  how  about  HR  foul-ups?  A  mis¬ 
placed  check  mark  can  be  devastating. 
At  a  Chicago-based  communications 
provider.  I  resigned  and  gave  the  usual 
two  weeks'  notice.  The  HR  depan- 
ment,  ever  mindful  of  getting  a  full 
day’s  work  for  a  full  day's  pay.  sched¬ 
uled  my  exit  interview  after  quitting 
time.  I  met  with  the  HR  spec^st. 
signed  the  required  documents,  shook 
hands  and  went  on  ray  way. 

Some  time  later.  1  was  trying  to  get  a 
new  job  and  was  having  little  success. 

I  finally  asked  a  friend  still  at  the  com¬ 
pany  to  check  my  references.  Sure 
enough,  the  HR  specialist  had  checked 
a  box  on  the  termination  form  that 
stated.  “Not  eligible  for  rehire."  This 
was  causing  me  to  be  screened  out 
from  prospective  opportunities.  So 
much  for  quality  assurance. 

The  only  person  empowered  to 
change  the  damning  box  was  the  per¬ 
son  who  had  conducted  the  exit  inter¬ 
view.  and  she  was  on  maternity  leave! 

It  took  several  calls  to  a  vice  president 
to  get  this  straightened  out. 

The  point  is  that  today’s  hiring 
processes  are  ill-conceived,  poorly  ex¬ 
ecuted.  disrespectful  and  error-prone, 
and  yet  we’re  supposed  to  entrust  our 
livelihoods  and  careers  to  them. 

The  situation  could  be  immediately 
improved  by  giving  the  hiring  man¬ 
agers  control  over  hiring  processes 
and  making  their  bonuses  dependent 
on  their  turnover  statistics.  Why  not 
let  the  managers  manage?  O  4M58 
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EMC* 

where  information  lives 


a  wide  range  of  information  management  challenges 
To:  a  wide  range  of  software  to  overcome  them 


EMC  SOFTWARE  GIVES  YOU  MORE  OPTIONS.  MORE  CHOICES.  You  have  all  kinds  of  info-ma-  .. 
man^^nt  challenges.  EMC  has  the  software  •  .  overcome  the-  .  Whethe--  vou're  deahng  w’:  v,  -  . 

mauagemenf  or !  ••  •';  management.  So  yn  -■  growth,  n-' .  n.-Ar  ;nforma!iu-  ■■ 

'■nmoltance  and  :  s  continuity,  and  kg'  ^ ■  '  • ’  ■  •  .  .  • 

and  •  Now.  and  in  the  futuf'  •  -  * 


i  ijt  o'  5  o(  Forttinp  M3Qa;ine  s  mosi  prolitable  companies  . 

dtSearcn  ■-  .i-  -  -  •i-t  i  :c  -  • . 
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Instantly  Search 
Gigabytes  of  Text 
Across  a  PC,  Network,  Intranet  or  Internet 
hiMIrt  Lane  ll«ewiwt  Collectioiis  to  the  Web  or  to  CD/DVD 

*™i  "Oaitd,  MiMlenr.  IMM  t  Ml-M  samiToiiliiin 

HTIL  1  POrvMta  diiplqiyi  emli^  |Mb,  tormstbiig 

>  r^-  dtSearch  Revlmrs... 


Spider 
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■  desktop^ 

l^  Spidt., 

5*99  ,  _ _ - 

L4ia»^,  ,tii 

nticrfj 

-  Engine 

•ytmn  lor  Win;*  nfr 

PUBLISH  f  Network*  ■ 

for  CD  OVCK  Vith  Spider 

Ltl£!r&  ' 


The  Smart  Choice  tor 
Text  Retrieval  since  1991 


1-800-IT-FINDS 


See  www.dtsearch.com  for: 

♦  hunOreds  oi  developer  case  studies  S  reviews 

•  luliy-tunclionai  evaluations 
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THE  LAB 


Web  posting 


Dedicated  Hosting 


"Graat  for  Raeallere" 

Tha  Derwlopars  Oielca" 

*  f  NEE  Shopping  Cart 

*  FREE  CorWoi  Panar 
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IT  Careers;  Being  Brave  Part  of  Professional  Development 


Having  a  mentor  or  role  model  is  as  critxal  lor 
professionals  as  it  is  for  kids.  ThaTs  one  reason 
the  Society  for  the  Advancement  of  Chkanos  and 
Native  Americans  in  Science  (SACNAS)  larmcbed  a 
multi-year  project  to  record  autobiographies  for 
some  of  the  nation's  leading  Native  Afneric«i  and 
Hispanic  professionals  in  the  areas  of  math,  science 
and  technology.  A  quick  scan  of  the  life  stories  points 
to  careers  that  range  from  seismologist  to  zoologist, 
from  surgeon  to  statistician. 

With  support  from  the  Sloan  foundation,  the 
National  Institutes  of  Health  and  the  Verizon 
foundation.  SACNAS  gathered  together  women  and 
men  from  a  variety  backgrounds,  recording  how 
they  established  their  careers.  Just  as  telling, 
however,  is  what  they've  found  once  in  the 
workplace. 

Dr.  Ermelinda  DeLaVirta's  story  is  one  typical  of  marry 
Hispanic  professiorrals;  she  is  a  first  generation 
college  graduate  she  came  from  a  poor  household. 


understand  that  they  may  look  different,  but  that 
does  not  mean  they  are  less  capable  I  could  make 
myseff  stand  out  as  bemg  different,  but  when  it 
comes  to  my  area  of  expertise.  i‘m  realty  not  When 
M*  sit  at  lunch,  we  talk  about  our  dreams  goak 
and  ambitions  The  person  |  have  the  most  m 
common  with  o  a  white  man  who  also  grew  up 
poor. 

•There  are  external  fortes  that  can  make  you  feel 
different,  but  the  point  k  to  not  let  yourself  become 
different*  in  terms  of  what  you  are  doing,  she  adds 


In  addition  to  being  brave.  DelaVna  stresses  the 
importance  of  ongoing  learning,  parocufarfy  in 
areas  outside  of  math,  computer  science  and 
technology  ‘Academicalfy  that  may  mean 
choosing  a  minor  that  will  distinguish  you  from 
otberv'  she  says.  *We  used  to  say  that  this  made 
you  a  more  interesting  person,  in  this  day  «yj  age, 
«k~»»if5.mponant<o»t«l,ouaOMB,fc- 

statemsm  procass  begins  again  Since  flie  graduate  "I*  i*"  Mreer  steps  are  tong-lem  but  clear 

c^rncS;=?b:Sor"^^'-‘""'^^  ^^P.r^0eu.n»basc„..™*d..n..»cr.a.b, 

:Srng"r::rbet^L”utt-^S^r  OeU..«.^*C^.«n,„ru.er^adua.esd«daber 

African  aISLi.  2lrTntem^l  S  ***’‘^"» 

‘  traditional  Anglo  'One  of  the  dilliculbes  foe  E^ld  r 

Graffiti  The  program  generates  conjectures  in  madi.  similar  minorities  isthatwemavfeelthatwear«wrv  riiff^pm  nr  ^  °  CormoetJeut  Path 
tobowasdendbch^po^s^illbei^dacor^ 


the  baa  a*lce  is  to  have  a  wtllingness  to  tty  OeUVma,  who  dropped  out  of  undergraduate  school  alter 
something  new.  to  be  brave  about  It.  says  OelaVliia  who.  one  vear  and  returned  tow  m 


For  more  informatior)  about  IT  Careers  advertising. 
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Don’t  got  stuck  in  traffic* 
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in  Computer  o»  Electrical  Engineering  or  Computer  Science 
E*per»ence:  in  all  phases  of  software  development  tar  real¬ 
time  multi-laskir*  emoedded  systems;  with  C,  Cm-,  Visual 
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Confinued  from  page  I 

Attacks 

Tom  Com,  a  vice  president  at 
Mazu  Networks  Inc.,  a  Cam¬ 
bridge,  Mass.-based  vendor  of 
DDoS  mit^tion  technologies. 
Many  of  the  attacks  involve 
attempts  to  extort  money  horn 
the  targeted  companies.  Com 
added. 

The  plight  of  Bellevue. 
Wash.-based  Authorize.Net  is 
a  perfect  example.  The  compa¬ 
ny.  which  provides  payment 
processing  services  to  more 
than  100.000  mainly  small  to 
midsize  online  businesses,  was 
the  target  of  intermittent  but 


“large-scale"  DDoS  attacks  that 
began  on  Sept.  15.  said  David 
Schwartz,  the  company's  mar¬ 
keting  director.  The  attacks  re¬ 
sulted  in  periods  of  "brief  dis¬ 
ruptions"  for  Authori2c.Net's 
customers,  said  Schwartz 

The  ODoS  assault  was 
launched  a  few  days  after  com¬ 
pany  officials  refused  to  give 
in  to  an  extortionist's  demand 
for  “a  substantial  amount  of 
money."  Schwartz  said.  "It  was 
something  that  was  sent  to  our 
general  mailbox."  be  said, 
adding  that  the  FBI  and  other 
law  enforcement  authorities 
are  investigating  the  incident. 

This  isn't  the  first  lime  Au- 
thorize»et  has  found  itself  tar- 
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geted  by  cyberartackery.  bur  thi; 
scope  was  bigger  this  time.  "Wb 
have  been  attaeked  in  the  past, 
but  not  on  this  scale  and  with 
such  tenacity.'  Schwartz  said. 

FoNowing  the  Money 

[onah  Paransky,  a  senior  man¬ 
ager  at  Cupertino.  Calif.-based 
Symantec,  said  16%  of  the  at¬ 
tacks  against  c-commerce  sites 
that  the  company  analyzed 
were  identified  as  targeted.  In 
the  same  period  last  year,  only 
4%  of  the  attacks  on  e-com- 
merce  sites  were  thought  to  be 
aimed  at  specific  sites.  The  in¬ 
crease  suggests  “that  attackers 
are  turning  to  where  the  mon¬ 
ey  is,”  Paransky  said. 

A  jump  in  the  number  of 
remotely  controlled  "bot  net¬ 
works"  that  are  used  to  launch 
such  attacks  is  also  increasing 
the  seriousness  of  the  threat. 
Paransky  added.  Between  Jan¬ 
uary  and  June,  the  number  of 
bot  networks  monitored  by 
Symantec  rose  from  well  un¬ 
der  2.000  to  more  than  30.000. 
he  said.  Malicious  hackers 
have  also  been  getting  faster  at 
exploiting  new  vulnerabilities. 


In  addition,  the  attackers 
arc  becoming  more  sophisti¬ 
cated,  Com  said.  Increasingly. 
DDoS  attacks  are  being  "dy¬ 
namically  monitored"  by  their 
creators  and  modified  on  the 
fly  in  an  effort  to  get  around 
corporate  defenses,  he  noted. 

The  combination  is  creating 
havoc  for  IT  managers,  said 
Jon  Duren.  chief  technology 
officer  at  IdJcAire  Technolo¬ 
gies  Corp..  a  Knoxville,  Tenn.- 
based  provider  of  electrifica¬ 
tion  services  at  truck  stops. 

Despite  his  company's  best 
efforts,  its  network  keep  get¬ 
ting  infected  with  worms, 
viruses,  adware  and  spyware 
"Chat  render  machines  use¬ 
less."  Duren  said.  Too  much 
time  is  spent  fitting  a  battle 
“where  the  enemy  grows  in¬ 
creasingly  intelligent."  he  said. 

Contributing  to  the  problem 
is  that  tool  kits  for  developing 
and  launching  attacks  are  in¬ 
creasingly  readily  available  on 
the  Internet,  said  David  Giam- 
bruno,  director  of  strategic  in¬ 
frastructure  and  security  at 
Pitney  Bowes  Inc_  a  S4.5  bil¬ 
lion  mail  and  document  man-  ' 
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agement  firm  in  Stamford. 
Conn.  The  way  such  loob  sim¬ 
plify  the  process  of  launching 
attacks  “scares  me  to  death." 
he  said. 

Extortion  schemes  that  use 
attacks  like  the  one  against 
Authtmze.Nce  are  becoming 
more  common,  with  banks 
among  the  typical  taigcts.  said 
John  Pescatore,  an  analyst  at 
Gartner  Inc.  "They  are  defi¬ 
nitely  urgeied.  ransom-type 
attacks,  and  there’s  going  to  be 
a  lot  more  of  them."  he  said. 
049631 


BearingPbint  Wins  $229M  DHS  Contract 


DAN  VeiTTON 

The  US.  Department  of 
Homeland  Security  last  week 
awarded  BcaringPoint  Inc.  a 
S229  million  IT  contract  to 
help  consolidate  and  integrate 
the  agency's  vast  financial  re¬ 
sources  and  assets. 

The  contract,  known  as 
Electronically  Managing  En¬ 
terprise  Resources  for  Gov¬ 
ernment  Efficiency  and  Effec¬ 
tiveness,  or  eMerge^.  is  in¬ 
tended  to  help  the  DHS  gain 
control  of  accounting,  acquisi¬ 
tions,  grants,  asset  manage¬ 
ment  and  other  business  oper¬ 
ations  across  the  22  fbrmcriy 
independent  agencies  that 
now  make  up  the  DHS. 

“The  terrorists  are  coming, 
and  they’re  coming  by  land.  , 
by  air.  by  sea  and  by  cyber  | 
(meansj,"  said  Darryl  Moody.  I 
senior  vice  president  respon-  I 


sible  for  BearingPoint's  home¬ 
land  security  practice  in 
McLean.  Va.  "Therefore.  DHS 
needs  the  ability  to  know 
where  its  assets  and  resources 
are  so  that  it  can  move  and  ap¬ 
ply  them  where  tlie  highest 
threat  is  at  that  moment." 

llie  contract  is  a  series  of 
individually  negotiated 
orders,  the  first  one  being  a 
S3  million  “conference  room 
pilot"  The  pilot  program  will 
enable  the  DHS  to  test  the 
complete  system  designed  by 
BcaringPoint  using  business 
and  homeland  security  .scenar¬ 
ios  before  deciding  to  deploy 
it  across  the  entire  agency. 
Moody  said. 

The  effort  is  expected  to 
last  60  days,  and  the  entire 
rollout  wUl  likely  take  two  to  I 
three  years,  be  said 

While  some  reports  have  ' 


called  the  contract  an  ERP 
project.  Moody  said  it's  actual¬ 
ly  a  "transfornuiion  program" 
that  includes  a  very  large  ERP 
component.  "ERP  (sj'stcmsJ 
are  certainly  huge.  But  this  is 
bigger  and  more  strategic," 
said  Moody,  who  likened  it  to 
a  private-sector  ERI*  effort 
that's  lightly  linked  to  supply 
chain  managemcm. 

“With  the  award  of  this 
contract,  we  arc  one  step  clos¬ 
er  to  providing  improved  visi¬ 
bility  into  our  critkai  business 
information."  said  Andrew 
Manor,  chief  financial  officer 
of  the  DHS,  in  a  prepared 
statemenL  049642 

MK  DHS  NEWS 

AbisaelaiQncMmeUS  cvOnKutr 
dNcctor  from  (he  OKS  to  the  W>ue  House 

OQiMiLj*  4962S 

wwwxempstanMrlleon) 


www.compuierwodO.com 


NEWS 


■ 


THE  BACK  PA6E 


www.computefworW.com 


FRANK  HAYES  -  FRANKLY  SPEAKING 

Try  ‘Let’s  Talk’ 


WHAT’S  THE  EASIEST  ANSWER  to  give  to  a  user’s 
request?  No.  It’s  short,  it’s  to  the  point,  and  it  ends 
the  conversation.  It  gets  the  user  out  of  your  face 
and  lets  you  get  back  to  your  real  work.  Besides, 
saying  no  feels  so  good. 

What’s  the  second-easiest  answer  to  give  a  user?  Yes.  It’s  not  as 
short  and  sweet  as  that  powerful,  muscle-flexing  no,  but  it  does 
close  the  discussion  whether  you’re  giving  the  user  permission  or 
making  a  commitment  that  you  can  always  decide  later  not  to  keep. 

AnH  whaf’Q  tV>f»  hnrrfoct  onctifAi*?  “T  *’ 


And  what’s  the  hardest  answer?  “Let’s  talk, 

We  hate  that  kind  of  answer,  don't  we?  I  complexity 

No  and  yes  are  the  zero  and  one  of  business.  If  we  say  i 

We  IT  people  like  to  believe  we  think  in  zeros  We  can  try  c 
and  ones.  TTiat's  silly  —  we’re  capable  of  much  ,  but  they’ll  ju 
more  complex  thinking  than  that.  At  the  ver>’  |  spend  all  ou 
least,  we  can  think  in  strings  of  zeros  and  ones.  stead  of  putt 

But  we  do  love  that  binary  simplicity.  No  and  If  we  say) 
yes  ore  simple.  use  whateve 

That’s  why  they’re  practically  useless  to  us.  creating  a  tit 
Look,  the  business  and  technology  challenges  hands-off.  su 
we  face  today  are  way  too  complex  for  that.  We  That  way  tht 
don’t  control  technology  anymore.  We  can’t,  cations  they 

because  users  can  and  will  drag  in  whatever  a  help  desk  c 

consumer-grade  technolog)’  they  think  will  pends  on  a  si 

help  them  do  their  jobs.  guy  who  whi 

So  they  11  work  from  home  on  unsecured  net-  job  has  move 

works.  They’ll  smuggle  in  Wi-Fi  access  points.  Fix  it  —  now 

They’ll  copy  truckloads  of  confidential  data  to  That’s  wha 

handheld  computers  and  DVD-ROMs  and  Tell  me  wha 

memory  sticks.  it.-  And  “Her 

They’ll  download  and  install  and  come  to  de-  '  what  each  on 
pend  on  software  they  find  on  the  Intcmet-  might  work  b 

They’ll  build  their  own  critK'al  applications  in  a  Then  there 
spreadsheet  or  database.  They’ll  work  up  their  with  what  yo 
own  service-oriented  architectures  by  con-  those  problei 

siantly  accessing  outside  Web  sites 
for  information  and  functionality 
they  need. 

And  that’s  iust  regular  u,sers.  That 
doesn’t  include  the  Rube  Goldberg 
contrapiions  that  real  power  users 
‘an  string  together  nowadays  using 
— eeware  utilises,  cell  phones  .iii 
sie'SYiJs  and  whatever  hit  the 
snc'ves  iast  week  at  CompUSA  I 
Bes<  Buv  md  Circur  C'»v 

U'wr,  „,Hm  .w...,  j  1...  .  S 

'T  .hj.iv  Whn  a  means  jiie.Mi  -.*•  MSt.  tat  cevMd  IT  iar  nora 
H*Dieir  r’jmp  cxity  (s  wna>  w>‘ *>ip M yyt.  Corwict tail «t  ^ 
s'u-  K  w«  .1.  And  we  can  ■  era*  k  si 


complexity  with  a  simple  no  or  yes. 

If  we  say  no.  users  will  use  this  stuff  anyway. 
We  can  try  chasing  it  down  and  ripping  it  out. 
but  they’ll  just  get  better  at  hiding  it.  And  we’ll 
spend  all  our  time  playing  cops  and  robbers  in¬ 
stead  of  putting  IT  to  work  for  the  business. 

If  we  say  yes  —  if  we  give  them  permission  to 
use  whatever  high-tech  tools  they  want  —  we  re 
creating  a  time  bomb.  Sure,  we  can  establish  a 
hands-off.  support-it-yourself  policy  for  users. 
That  way  they’re  responsible  for  any  IT  compli¬ 
cations  they  create,  right?  But  one  day.  we’ll  get 
a  help  desk  call:  A  whole  department  now  de¬ 
pends  on  a  support-it-yourself  application.  The 
guy  who  whipped  up  this  mission-critical  hack 
job  has  moved  on.  The  app  has  just  gone  south. 
Fix  it  —  now  —  or  they  can’t  work. 

That’s  what  brings  us  to  “Let's  talk.”  And 
■’Tell  me  what  you  do  and  what  you  need  to  do 
it."  And  “Here  are  several  options,  along  with 
what  each  one  will  cost.  Which  do  you  think 
might  work  best?" 

Then  there's  'Here’s  what  1  think  is  wrong 
with  what  you’re  doing  and  how  we  might  solve 
those  problems.”  And  "Let  me  repeat  your  de¬ 
scription  back  to  you  in  m)’  own 
words,  so  you  can  tell  me  if  I’ve  got 
it  right.” 

Or  maybe  “You’ll  have  to  make 
some  choices  —  I  can  explain 
them,  but  you’ll  have  to  make 
them.”  Or  "Let’s  think  about  what 
might  happen  with  this  technology 
over  the  next  few  years," 

Or  —  and  this  one  really  works 
with  users  —  "I  don't  understand. 

Mt  cekim-  Show  me.  " 

i  lTly  fliofi  They’re  not  the  easiest  answers. 

or  rhe  simplest.  But  they’re  the  an¬ 
swers  we  ve  gill  to  give.  O  49609 
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They  multifunction,  multitask  and  multi-simi 


HP  multilunctional  products  con  moke  you  more  producti«e-our  (ree  MFP  strotegy  guide  shows  you  how.  Eoch  ol  these  workhorses 


.  - can  do  tSe  iob 

one.  Some  for  loo.  Using  HP's  Digitol  Sending  Sohwore  (optionol  on  the  HP  loserjet  9055mfp  and  HP 
ectly  to  e-mail  or  network  folders,  depending  on  the  model  Choose  from  o  w.de  range  ol  devices  to 
you  re  Q  smoll  office  or  large  department.  By  actively  mcnaging  your  overoll  fleet,  you  could  save  up  to 
time  on  maintenance  and  supplies  manogement  With  our  MFPs,  you  get  more  ihon  a  printer  or  coper 
3et  more  than  hardwore-you  get  service,  support  and  expert  advice.  How's  thot  lor  multilunctionolt 
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A  fr«e  MFP  strotogy  guide 

and  information  on  current 
offers  are  yours  for  the  osking. 
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Oracle  Customer  Data  Hub 


All  Your  Customer  Data 

In  One  Place 


Legacy 


All  your  applications  can  share  high  quality 
consistent  customer  data  in  real  time. 


ORACLe 


oracle.com/datahub 
or  call  1.800.633.0940 
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Chief  information 
security  officers 
are  gaining  an 
influential  seat  at 
the  executive 
table.  Regulatory 
compliance,  risk 
management  and 
turf  battles  are  all 
part  of  the  job, 
reports  Jaikumar 
Vijayan.  page  31 


Eaiiy  Adopters  Send  Mixed 
Messages  About  RFID 


Users  talk  up  benefits 
ofta^butROI 
remains  distant  goal 

8V  CAROL  SUWA 

BALTIMORE 

Companies  preparing  to  test 
or  equate  radio  frequency 
identification  technology 
didn't  get  any  easy  answers 
at  the  EPC^obal  U^.  Confer¬ 


ence  2004  here  last  week. 

Consumer  goods  manufac¬ 
turers  facing  RFID  compliance 
deadlines  from  retailers  such 
as  Wal-Mart  Stores  Inc.  and 
Target  Corp.  encouraged  other 
companies  to  begin  using  the 
technology.  They  also  spot¬ 
lighted  potential  benefits, 
such  as  the  ability  to  track  in¬ 
ventory  with  greater  precision 
and  keep  products  in  stock 


_  48103 

t0Z34573/W7t  012004400  001  4317 
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and  on  store  shelves. 

But  some  of  those  same  ear¬ 
ly  adopters  said  that  they’re 
still  trying  to  nail  down  busi¬ 
ness  cases,  that  the  technology 
isn’t  mature  and  that  RFID 
standards  remain  a  work  in 
progress.  In  addition,  the  cost 
of  RFID  tags  and  readers  has 
yet  to  drop  to  levels  that  will 
help  users  achieve  returns  on 
their  investments. 

“It’s  going  to  be  pure  cost  at 
the  beginning.  That’s  a  con¬ 
cern,  because  it  cuts  into  our 
profriability,”  said  Richard 
Siegfried,  manager  of  global 
data  synchronization  efforts  at 
Binney  &  Smith  Inc.,  a  sub¬ 
sidiary  of  Hallmark  Cards  Inc 
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PeopleSoft 
Ousts  Conway 
From  CEO  Job 

Board  cites  ‘loss  of  conf  ^dence'  in  top  exec 
some  users  applaud  move,  others  seek  answers 


BV  MARC  L.  SONBINI.  HEATHER 
HAVCMSTEIR  AND  TOOO  R.  WEtSS 

The  turmoil  surrounding  Peo- 
pleSofr  Inc  and  the  uncertain¬ 
ty  about  hs  future  both  in¬ 
creased  another  notch  on  Fri¬ 
day  after  the  software  vendor 
announced  that  its  board  had 
ousted  CEO  Cra^  Conway 
due  to  ‘a  loss  of  confidence*' 
in  his  ability  to  lead  the  em¬ 
battled  company. 

PeopleSofr’s  five  indepen¬ 
dent  board  members  voted 
unanimously  to  replace  Con¬ 
way  with  co-founder  Dave 
Duffield,  who  had  given  up 
the  CEO  job  to  Omway  in 
1999.  During  a  teleconfer¬ 
ence  after  the  move  was  an- 


HP  Drops 

MceyOtility 

Technology 

Pieces  of  UDC  will  be 
used  in  modular  line 

BV  MATT  HAMBLEN 

Hevriett-Packard  Ca  officials 
said  definitively  last  week  that 
the  vendor  is  retiring  its  Utili¬ 
ty  Data  Center  offering,  a  set  of 
data  center  man^ement  tools 
that  costs  more  than  SI  million 
and  was  described  by  analysts 
as  too  much  technology  for 
most  users  n>  swallow. 


nounced.  Duffield  said  that  be 
is  "here  for  the  loi^  term*'  and 
that  his  primty  will  be  return¬ 
ing  the  company  to  the  core 
values  00  which  it  was  found¬ 
ed.  "We  need  a  little  nx»re  in 
the  way  of  vision  and  strategy, 
and  I  think  Tm  very  good  at 
that  stuff"  he  said. 

Nonetheless,  some  People- 
Soft  users  were  cau^t  off 
guard  by  tbe  shakeup. 

"I  don't  know  bow  to  read 
this.  It’s  like  ^tting  hit  cold.* 
said  Mike  Ten  Eydt,  manager 
of  information  systems  at 
Texas  Christian  University  in 
Fort  Worth  and  president  of 
tbe  PeopleSoft  Hi^>er  Educa- 
PeopleSoiff  page  45 


But  HP  plans  to  incorporate 
pieces  of  UDC  into  a  scries  o : 
lower-cost,  modular  udltty 
computing  products  that  will 
be  sold  separately  in  an  effort 
to  attraa  more  users,  includ¬ 
ing  smaller  companies  that 
couldn't  afford  the  complete 
product  Tbe  company  an¬ 
nounced  four  modular  offer¬ 
ings  last  month,  including  one 
designed  to  centralize  tbe 
management  of  blade  servers. 

Rumors  of  UZX^'s  demise 
began  circulating  among  users 
last  June  at  tbe  HP  Software 
Forum  2004  conference  in 
Montreal.  Last  week,  Nick  Van 
der  Zweep.  director  of  virtual- 
UDCpage45 


The  right  storage  solution 
doesn't  just  give  you  better 
storage  control.  It  helps  you  nnake 
better  business  decisions. 

Storage  Management  Solutions 

The  first  step  in  making  better  business  decisions?  Deciding  to  be  in  control, 
CA's  Intelligent  Storage  Management  solutions  can  put  you  in  control  of  costs, 
resources  and  data  availability  like  never  before.  They  provide  you  with  a 
comprehensive  real-time  view  of  your  system's  storage  capabilities,  while  also 
providing  immediate  access  to  all  of  your  information.  As  a  result,  you  can 
manage  and  monitor  your  entire  storage  environment  with  ease  and  actually 
use  existing  data.  As  always,  it's  also  vendor-  and  device-neutral,  so  you  can 
maximize  your  current  storage  resources,  saving  time  and  money.  With  more 
automated  software  that  can  make  its  own  decisions  about  storage 
management,  you'll  have  the  information  you  need  to  make  better  business 
decisions.  To  find  out  more  or  to  get  a  white  paper,  go  to  ca,com/driver. 


Computer  Associates® 


Enterprise  Rent-A-Car  wanted  to  reduce  operational  costs. 

Xerox  found  the  key  to  success  was  helping  them  get  access  to 
2.4  million  vital  documents  a  month  over  their  intranet. 

There’s  a  new  way  to  look  at  it. 

Enterprise  Renl-A-Car  wanted  to  make  their  document  process  more  ments  a  month  are  scanned  and  stored  into  an  electronic  repository, 
elTicient.  So  they  consulted  with  a  team  of  document  experts  from  Xerox.  making  them  instantly  available  over  the  Enterprise  Intranet  whenever 

lurking  together,  they  analyzed  the  document  process  across  thousands  of  needed.  The  result:  Documents  are  managed  in  a  timely  manner, 
locations  worldwide,  and  iniUated  systemic  improvements  in  key  aspects  of  Redundancy  and  errors  are  cut  way  back,  and  security  is  maximized.  To  fmd 
tiling  and  retrieving  mission-criUcal  documents.  By  implemenUng  a  Xerox  out  how  Xerox  can  bring  this  kind  of  time  and  cost-saving  expertise  to  your 
Global  Services  Imaging  and  Retrieval  solution,  2.4  million  critical  docu-  business,  simply  call  your  Xerox  representative  or  visit  our  website  today. 

Laara  mora:  Karex.com/laarn  For  a  sales  rep:  I-SOO-ASK-XEIIOX  ext.  LEARM 

«  200«  Xtnw  CORPORATION.  Al  nghls  reserxM  XEROX*  Tha  Oocumam  Cofrwrtv*  EodThare's  a  new  vway  n  look  «  n  we  trademarks  Ol  XEROX  CORPORATION 
ErReronee*  «  a  trWemark  of  Emrensa  Reni-A-Cw  Carrxanv 


THE  DOCUMEIVr  COMPANY 
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Negotiating  Change 

In  th6  Managsment  sactton:  IT  investments 
will  get  your  company  nowhere  unless 
you  a%n  them  with  your  industry’s  change 
trajectory,  says  author  and  researcher 
Anita  McGahaiL  She  explains  how.  Page  36 


Blades,  Camera,  Action! 

In  the  Technology  section:  As  the  use  of 
special  elTects  explodes  on-screen,  visual 
effects  studios  are  trying  to  keep  up  by 
building  enormous  farms  ofblade  ser\-ers 
to  render  all  of  the  images.  Page  21 


NEWS 


6  EMC  bolstera  its  data  replica¬ 
tion  and  storage  management 
product  lines. 

6  Sun’s  new  Java  release 

focuses  on  ease  of  use,  per¬ 
formance  and  desktop  design 
capabilities. 

7  State  Street  Bank’s  invest¬ 
ment  management  unit  con¬ 
solidates  seven  SANs  into  a 
tiered  storage  architecture. 

7  A  storage-over-IP  project 

starts  to  provide  bmeHts  for 
brokerage  Edward  Jones. 

10  IT  helps  Rorhla  utilities 

respond  to  power  outages  af¬ 
ter  hurricanes,  but  the  sys¬ 
tems  have  some  limitations. 

to  Cybersecurity  standards  for 

the  private  sector  need  to  be 
encouraged,  not  mandated, 
government  officials  say. 

12  Business  intelligence  tools 
present  technical,  cultural  and 
internal  process  challenges, 
say  attendees  at  Computer- 
w^<f  s  B1  conference. 

14  A  former  CIO  promotes  a  rur¬ 
al  U.S.-based  alternative  to 
ofBshore  outsourcing. 

14  Compuware  adds  tools  to 

help  Visual  Studio  developers 
purge  bugs. 

16  Physical  and  IT  security  func¬ 
tions  should  be  converged, 
industry  professionals  say. 

17  Q&A:  Donald  Deutsch  of  the 
Enterprise  Grid  Alliance  tries 
to  lure  users  to  the  technology. 


TECHN0L06Y 


24  Automating  the  40  Monkeys. 

Many  companies  are  replac¬ 
ing  user  recruits  >nth  soft¬ 
ware  testing  tools  to  check 
new  applications  for  bugs  and 
potential  performaDce  prob¬ 
lems  before  they're  deployed. 

26  QuicfcStudy:  Topic  Maps. 
Based  on  XML,  topic  maps  are 
a  way  to  represent  knowledge 
structures  and  their  relation¬ 
ships  to  information  resources. 
Conceptually,  they’re  like 
book  indexes,  but  they’re 
more  powerful  and  inclusive. 

28  Saciirily  Manager's  Jounui; 
Expanding  Responsibility  for 
Incident  Response.  Roger 
Foix  makes  sure  to  include 
several  departments  in  an 
incident  response  plan.  That 
strategy  once  help^  him  nab 
a  mouse  responsible  for  an 
S8  million  security  breach. 

MANA6EMENT 


31  Rise  of  the  CISO.  Heightened 
attention  to  compliance  and 
quickly  evolving  threats  are 
raising  the  visibility  of  the  se¬ 
curity  function  and  investing 
it  with  greater  authority.  But 
challenges  remain. 

37  Think  Tank.  Forrester  Re¬ 
search  reveals  how  the  com¬ 
munication  gap  between  IT 
and  marketing  departments 
can  be  bridged. 

38  Carvar  Watch.  Hacking  for 
the  home  team;  how  politics 
shortchanges  federal  CIOs; 
tough  times  for  contractors: 
plus  of^oring’s  Top  10. 


OPINIONS 

8  On  the  Mark:  Mark  Hall 
writes  that  Xerox  scientists 
have  come  up  with  a  device 
designed  to  boost  color  con¬ 
sistency  on  printed  pages. 

18  Dmi  Tennant  finds  it  peculiar 
that  CA  b  so  readily  abandon¬ 
ing  former  CEO  Sanjay  Kumar 
following  his  indictment 

18  Dan  6illmor  rhinks  that  too 
many  ridiculous  patents  are 
granted  in  the  U3,  and  it's  a 
strain  on  innovation. 

19  Michael  H.  Hugos  says  it’s 
important  to  remember  that 
the  real-time  enterprise  is  a 
process,  not  a  technology. 

30  Paul  A.  Stfassmann  notes 
that  lots  of  companies  have 
failed  to  topple  Microsoft 
with  head-on  attacks,  but 
Google  is  using  a  whole  new 
rule  book. 

39  Paul  Olen  advises  that  just  be¬ 
cause  a  particular  approach  to 
work  is  good  for  you  doesn’t 
mean  it  will  be  equally  effec¬ 
tive  for  your  staff. 

46  Frankly  Speaking:  Frank 
Hayes  calls  it  “farmshoring.” 

It  may  keep  high-tech  jobs  in 
the  U.S..  but  it  could  send  you 
to  the  sticks  in  search  of  work. 
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SECMfTY:  Cohinmist  Douglas  Schweitzer 
outlines  12  key  mktakes  organizations  can 
make  when  trying  to  secure  their  networks. 
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Poised  for  Prime  Time 

6RtD  COklRUTINO:  Grid  pioneer  Ian  Foster 
outlines  what  is  needed  for  the  technology 
to  be  as  usefol  to  industry  as  it  now  is  for 
research  and  academia.  O  QuickUtik 48500 

Recognizing  Risk  h  Wireless 

MOBtLE/WIRELESS:  AirOeiense's  Anil  Kha- 
tod  reviews  the  problems  of  self-deploying 
wireless  devices.  O  QokkLink  49783 
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Negotiating  Change 

In  the  Management  section:  IT  investmonts 
will  get  your  company  nowhere  unless 
you  align  them  with  your  industry’s  change 
trajectory,  says  author  and  researcher 
Anita  McGahan.  She  explains  how.  Page  36 
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6  EMC  bolsters  its  data  replica¬ 
tion  and  storage  management 
product  lines. 

6  Sun's  new  Java  release 

focuses  on  ease  of  use.  per¬ 
formance  and  desktop  design 
capabilities. 

7  State  Street  Bank's  invest¬ 
ment  management  unit  con¬ 
solidates  seven  SANs  into  a 
tiered  storage  architecture. 

7  A  storage-over*IP  project 

starts  to  provide  benefits  for 
brokerage  Edward  Jones. 

to  IT  helps  Florida  utilities 

respond  to  power  outages  af¬ 
ter  hurricanes,  but  the  sys¬ 
tems  have  some  limitations. 

10  Cybersecurity  standards  for 

the  private  sector  need  to  be 
encouraged,  not  mandated, 
government  ofJicials  say. 

\2  Business  intelligence  tools 
present  technical,  cultural  and 
internal  process  challenges, 
say  attendees  at  Computer- 
world's  BI  conference. 

14  A  former  CIO  promotes  a  rur¬ 
al  U.S.-based  alternative  to 
offshore  outsourcing. 

1  Compuware  adds  tools  to 

help  Visual  Studio  developers 
purge  bugs. 

16  Physical  and  IT  security  func¬ 
tions  should  be  converged, 
industry  professionals  say. 

17  O&A  Donald  Deutsch  of  the 
Enterprise  Grid  Alliance  tries 
to  lure  users  to  the  technology. 


31  Rise  of  the  CISO.  Heightened 
attention  to  compliance  and 
quickly  evolving  threats  are 
raising  the  visibilir>-  of  the  se¬ 
curity  function  and  investing 
it  wi^  greater  authority.  But 
challenges  remain. 

37  Think  Tank.  Forrester  Re¬ 
search  reveals  how  the  com¬ 
munication  gap  between  IT 
and  marketing  departments 
can  be  bridged. 

38  Career  Watch.  Hacking  for 
the  home  team;  how  politics 
shortchanges  federal  CIOs: 
tough  times  for  contractors: 
plus  offshoring's  Top  10. 
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24  Automating  the  40  Monkeys. 

Many  companies  are  replac¬ 
ing  user  recruits  with  soft¬ 
ware  testing  tools  to  check 
new  applications  for  bugs  and 
potential  performance  prob¬ 
lems  before  they’re  deployed. 

26  QuickStudy:  Topic  Maps. 
Based  on  XML  topic  maps  arc 
a  way  to  represent  knowledge 
structures  and  their  relation¬ 
ships  to  information  resources. 
Conceptually,  they're  like 
book  indexes,  but  they’re 
more  powerful  and  inclusive. 

28  Security  Manager's  Journal: 
Expanding  Responsibility  for 
Incident  Response.  Roger 
Foix  makes  sure  to  include 
several  departments  in  an 
incident  response  plan.  That 
strategy  once  helped  him  nab 
a  mouse  responsible  for  an 
SB  million  security  breach. 

MANAGEMENT 


8  On  the  Mark:  Mark  Hall 
writes  that  Xerox  scientists 
have  come  up  with  a  device 
designed  to  boost  color  con¬ 
sistency  on  primed  pages. 

18  Don  Tennant  finds  it  peculiar 
that  CA  is  so  readily  abandon¬ 
ing  former  CEO  Sanjay  Kumar 
following  his  indictment. 

18  Dan  Gillmor  thinks  that  too 
many  ridiculous  patents  arc 
granted  in  the  US.,  and  it’s  a 
strain  on  innovation. 

19  Michael  H.  Hugos  says  it's 
important  to  remember  that 
the  real-time  enterprise  is  a 
process,  not  a  iechnolog>-. 

30  Paul  A.  Strassmann  notes 
that  lots  of  companies  have 
failed  to  topple  Microsoft 
with  head-on  attacks,  but 
Google  is  using  a  whole  new 
rule  book. 

39  Paul  Glen  advises  that  just  be¬ 
cause  a  particular  approach  to 
work  is  good  for  jtm  doesn’t 
mean  it  will  be  equally  effec¬ 
tive  for  your  staff. 

46  Frankly  Speaking:  Frank 
Hayes  calls  it  “farmshoring." 

It  may  keep  high-tech  jobs  in 
the  U.S.,  but  it  could  send  you 
to  the  sticks  in  search  of  work. 
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Blades,  Camera,  Action! 

In  the  Technology  section:  As  the  u.se  «>f 
special  effects  explodes  on-scrccn.  visual 
effects  studios  arc  trying  to  keep  up  by 
building  enormous  farms  of  blade  servers 
to  render  .ill  of  the  images.  Page  21 
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MOBILE/WIRELESS'  AirDcfiense’s  Anil  Kha- 
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OOJ  Wbn’t  Appeal 
Ruling  on  Oracle 

Tfw  U.S.  OepAftment  of  Justice 
saM  rt  Mnnt  appeal  a  federal 
judge's  ruling  that  allowed  Grade 
Corp.  to  proceed  with  its  hostile 
takeover  bid  for  PeopleSoft  Inc. 
Chief  .kidge  Vaughn  Walker  of  tfie 
U.S.  District  Court  in  San  Frands- 
CO  last  month  rejected  the  DOJ's 
effort  to  block  Oracle  on  arrtitrust 
grounds  [QuickUnk  49350). 
'‘While  we  disagree  with  the  Dis¬ 
trict  Court’s  (fisappointing  deci¬ 
sion.  we  resped  the  role  of  the 
courts  in  the  merger  review  proc¬ 
ess,”  Asdstant  Attorney  General 
ft  Hewitt  Pate  said  on  Friday. 

Yoran  Quits  DHS 
CyfaersMurity  Job 

Amit  Yoran.  the  government's 
cyhersecurity  chief,  resigned  last 
Thursday  after  one  year  at  the 
U.S.  Department  of  Homeland 
Security.  In  an  interview,  ^toran 
said  his  resignation  was  m  keep¬ 
ing  with  his  original  agreement  to 
take  the  job  for  a  year.  “Fm  not 
s  iong-lerm  goverrment  kind 
of  guy,”  said  VIoran.  a  former 
Symantoc  Corp.  esecutrve. 


EMC  Expands  Replication, 
Storage  Management  Tools 

»n  _ _  ^ _ 


Opc-n  Replicator  lets  users  copy 
Sxmmetrix  data  to  ri\al  disk  arrays 


CA  Says  It  Will 
Name  CEO  Soon 

Computer  Associates  Internation¬ 
al  Inc.  reiterated  that  it  expects  to 
name  a  new  CEO  wrtMn  the  next 
30  to  45  days.  But  the  software 
vendor  denied  a  published  report 
that  said  Leo  Apolheker.  head  of 
global  field  operations  at  SAP  AG. 
is  (he  preferred  choice  of  two  CA 
directors.  Apotheker  isn't  a  candi¬ 
date  tor  the  CEO  job.  blandia. 

N.V. -based  CA  said. 

Microsoft  to  Fight 
Patent  Decision 

*4ICTosott  Corp.  said  H  will  con¬ 
test  a  ruKng  by  the  U.S.  Patent 
and  Trademark  Office  that  invaii- 
daled  a  7-year-old  patent  on  its 
FAT  file  system.  The  patent  had  | 
been  chaBtnged  by  the  New  York-  I 
based  Public  Patent  Foundation.  I 


I  BV  LUCAS  MeARlAN 

EMC  CORP  today  plans 
to  announce  upgrades 
to  several  of  it.s-  soft¬ 
ware  pn>ducts.  tnclud- 
I  ing  the  integration  of  automat- 
'  cd  data  migration  lechnologv 
with  its  storage  management 
suite  and  the  release  of  a  data 
replication  tool  that  support.^ 
disk  arrays  from  rival  vendors. 

EMC  also  said  it  has  inte¬ 
grated  the  serv-er  virtualization 
.software  acquired  through  Its 
buyout  of  VMwarc  fnc.  earlier 
this  year  with  its  S>inmetriN 
Remote  Data  Facility  (SRDFi 
replication  tool.  That  will  en¬ 
able  users  to  asynchronously 
replicate  data  from  a  large 
number  of  servers  at  a  prima¬ 
ry  data  center  to  a  few  systems 
or  even  just  one  at  a  remote 
site  by  creating  multiple  in¬ 
stances  of  a  server  operating 
system  on  the  target  boxes. 

But  chief  among  EMC's 
upgraded  products  is  a  new 
version  of  the  replication  soft¬ 
ware  for  Its  Symmcirix  high- 
end  disk  arrays  called  EMC 
Open  Replicator.  The  tool  I 
»il!  allow  data  to  be  copied  to  | 
storage  dcsices  from  IBM.  Hi¬ 
tachi  Data  Sysienw  Corp.  and  I 
Hewlett-Packard  Co.  —  EMC's  | 
main  hardware  competitors.  i 
The  company  said  Open  | 

Replicator  is  due  for  relea.se  ^ 
in  next  year's  first  quaner.  | 


I  of  application-aware  tools  that 
I  the  company  inherited  when  it 
I  acquired  Legato  Systems  Inc. 

I  List  year.  Chuck  Hollis,  vice 
president  of  storage  platforms 
marketing  at  EMC.  said  the  in- 
,  tegraied  oflering  will  include 
I  Legato  Software's  EmailXtcn- 
dcr  for  Exchange  2003  and  Lo- 
*  tus  Notes  products,  as  well  as 
'  the  EMC  DatabaseXlcnder  for 
Oracle,  PeopleSoft  and  Sybase. 
Shipments  are  due  this  quaner. 

EmailXtendcr  identifies  in¬ 
frequently  used  e-mail  mes¬ 
sages.  and  DaiabascXtender 
searches  databases  for  old  or 
inactive  records.  Both  prod¬ 
ucts  can  move  the  older  data 
off  high-cosi  primary  storage 
devices  to  secondary  disk  sys 
terns  or  tape  drives. 

lohn  Haiamka.  CIO  at  Care 
Group  Inc.,  a  Boston-based 
company  that  operates  six 


ALSO  NEW  FROM  EMC 

SROf-  S; 

Replicates  data  to  iwu 
femote  sites  at  once. 

Due  for  release  in  Ql  of 
2005. 


^'A's  G.-.:,  . 

Migrates  files  to  Inwei 
cost  storage  devices 
Available  ni)v> 

L'vIC  . 
Suiuli."'  I  ■  F  , 

Comlj«r>es  a  Oanioo  di-jM  ar 
ray  wrth  EmanIXlentJer  and 
Replicatioo  Man.ioef  tools 
Available  now 


hospitaLv  said  he  plans  to  test 
the  new  ILM  offering.  “I  have 
to  keep  medical  records  for  30 
years,"  be  noted.  ‘Would  I 
love  to  invest  in  Symmetrix 


DMX  for  the  next  30  years? 
Sure.  Unfortunately.  I  can't 
afford  that." 

Haiamka  ha.s  been  experi¬ 
menting  with  ILM  for  a  year 
on  his  40TB  storage-area  net¬ 
work.  which  he  manages  with 
ControICcnier  and  backs  up 
using  EMC’s  SnapView  and 
TimcFinder  software.  He  said 
he  has  reached  the  point  w-herv 
he  can  automatically  migrate 
data  from  Symmetrix  boxes  to 
EMC’s  Clariion  midrange  ar¬ 
rays  or  tape  storage. 

“When  we  initially  went 
down  the  (ILM)  path,  the 
tools  to  do  all  of  this  business- 
rule-.  policy-driven  shuttling 
of  data  back  and  forth  didn't 
exist,"  he  said.  "Thej’  do  now." 

Haiamka  added  that  al¬ 
though  he  likes  the  additional 
upgrades  EMC  is  offering, 
“obviously,  there  is  still  work 
to  do,"  For  example,  he  said  it 
would  be  “nirvana”  if  the  time 
tickets  that  arc  used  to  gener¬ 
ate  payroll  checks  within 
CareGroup's  PeopleSoft  appli¬ 
cations  would  automatically 
movc  from  Symmetrix  to 
Clariion.  "TTiai’s  something 
PeopleSoft  has  to  work  on 
with  EMC."  Haiamka  said. 
049790 


Sun  Ships  Java  Upgrade 


Extended  Options 


"That's  great  stuff."  said  Bill 
'  North,  an  analyst  at  IDC  in 
I  Framingham.  Mass.  “It's  not 
!  unique.  But  if  you're  an  EMC 
;  cu.stomcr  and . . .  have  merged 
with  another  company  or  have 
regional  offices  with  different 
storage,  ytiu  can  now  haw 
greater  flexibility." 

On  (he  information  life¬ 
cycle  management  (ILM) 
front.  EMC  is  imegrating  its 
ControICcnier  storage  man¬ 
agement  platform  with  a  set 


Add.s  features  to 
I  biK)st  ease  of  use 

I  BY  HEATHER  HAVENSTEIN 
I  Sun  Micro.systcms  Inc.  last 
I  week  released  Java  2  Platform 
I  Standard  Edition  ()2SE)  5.0.  an 
'  upgraded  version  of  its  pro- 
I  gramming  language  with  more 
I  than  100  new  features  dc- 
I  signed  to  boLstcr  case  of  use. 
performance,  scalability  and 
desktop  development. 

I2SE  5.0.  which  was  code- 
named  Tiger  and  announced 
at  the  lavaOnc  ctinference  in 
lune.  includes  whal  Sun  offi¬ 
cials  claim  are  the  most  signif¬ 
icant  enhancements  to  the 
java  development  platform 
and  language  since  the  first 
release  almost  a  decade  ago. 

Sun  also  provided  a  peek  at 
J2SE  ii.0.  now  called  Mustang. 
Scheduled  to  be  available  in 


(he  spring  of  2006.  Mustang 
will  feature  increased  perfor¬ 
mance  and  .added  support  for 
j  XML  and  Web  services. 

I  "We  try  to  have  a  measure¬ 
ment  for  how  often  the  com- 
!  munity  wants  to  sec  updates." 
said  lames  Gosling,  the  father 
of  Java  and  chief  technology 
officer  for  Sun's  Developer 
Platforms  Group.  “The  [Mus¬ 
tang  release  date]  is  when  we 
think  the  community  Is  going 
to  be  ready  for  a  new  release." 

Developers  can  download 
f2SE  .s.O  from  Sun's  Web  site 
now.  The  company  said  new 
features  supporting  faster  and 
more  secure  coding  should 
help  boost  Java  programmer 
productivity.  The  upgrade  also 
supports  faster  start-ups  and  a 
smaller  memory  footprim. 

I2SE  5.0  is  an  important  step 
for  Java  in  its  ongoing  battle 
agaimu  Micro.soft  Corp.'s  Net 


I  development  environment. 

I  said  Stephen  O'Grady,  an 
analyst  at  RedMonk  in  Bath. 
Maine.  The  streamlined  start¬ 
ups  and  a  friendlier  graphical 
user  interface  should  be  espe¬ 
cially  welcome  additions  to 
Java  users,  he  added. 

“Particularly  for  Java  appli¬ 
cations  on  the  client,  it  has 
taken  a  while  for  them  to  start 
up."  O'Grady  said.  That  has 
been  a  problem.  Also,  from  a 
user’s  perspective,  (Sun)  has 
updated  the  look  and  fee).  It 
looks  good.  It's  cleaner,  and 
it's  more  modem." 

The  enhancements  in  )2SE 
5.0  reflect  demands  fn>m  cor¬ 
porate  users  for  enterprise- 
oriented  capabilities,  such 
as  the  ability  to  manage  and 
monitor  applications,  said 
Thomas  Murphy,  an  analyst 
at  Meta  Group  Inc.  He  added 
that  Sun  “certainly  is  trying  to 
make  a  big  push  to  come  back 
again  on  the  client  side." 
049706 
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AT  DEADLINE 


IX)J  Won't  Appeal 
Ruing  on  Grade 

Tbt  US.  OwpartnwnI  of  Juitica 
taUHwmt^faiMaMonl 
iudgi's  nribig  that  alowwt  Oracle 
Corp.  to  precMd  wWi  to  hoetie 
tatoom  bid  for  heitoSoft  Ik. 
ChW  Judge  Vwgim  WUtor  of  the 
U.S.  OiMrtct  Court  in  San  Raitcis* 
CO  lari  montti  rijoeted  (ho  OOJ's 
effort  to  bioefc  Oracle  on  antitruri 
(pounds  [QuiefcUnk  40350]. 
”Wlile  we  (Hsaipee  wWi  Ow  Die* 
tririCeurfsdkapgeintingded' 
stoi.  we  riagael  (to  role  ef  the 
cowls  In  the  awrger  roidow  proc* 
aes.*  toaUant  Attorney  Oenanl 
R.  Hewitt  Pale  eaM  on  Friday. 


Vbran  Quits  OHS 
Cybersecurity  Job 

Ainil  thran.  the  govanunent's 
cyharaacwity  fihiof,  rerignod  lari 
Thunday  iAw  OM  year  ri  the 
Depwlunt  gI  Heaialend 
Seeurily.  In  an  hUendew.  toran 
said  Ms  lasignniion  wn  in  keep' 
big  wMi  Mi  original  agrooawnt  to 
tahe  flia  iob  for  a  year.  Tib  net 
a  loag  goeorament  Mad 
of  gay  *  saM  Voran,  a  tarawr 


CASaysItWI 
Name  CEO  Soon 

Cootoutor  AaoociataB  tatornadon* 
al  Inc.  rriloratod  thri  R  aspects  to 
name  a  now  CEO  wNMn  the  nait 
30  to  48  days.  But  the  software 
vendor  denied  a  pubtohed  report 
that  said  Ue  Apothabar.  hood  of 
Qatari  fWd  oporatiens  at  SAP  AU 
is  the  prsferrad  choice  of  two  CA 
dbeetais.  Apeftelwr  toit  a  eandh 
dale  lor  the  CEO  Job.  Istoidto. 
H.Y.<baiodUsrid. 


RAcrosoft  to  Fight 
Patent  Decision 

Mkroeoft  Corp.  said  N  wri  can- 
tori  a  ndbig  by  the  U.S.  Patont 
and  Tradewarh  OfSea  that  bwaR- 
datod  a  7  year  rid  patont  on  to 
fXT  Me  syslom.  The  polanl  had 
bean  choiongad  by  the  New  Vorfc- 


EMC  Expands  Replication, 
Storage  Management  Tools 


Open  Replicator  lets  users  copy 
Symmetrix  data  to  rival  disk  arrays 


8T  LUCAS  MCAJIIAN 

EMC  CORP.  today  plans 
to  announce  upgrades 
to  several  of  its  soft¬ 
ware  products,  includ¬ 
ing  the  integration  of  automat¬ 
ed  data  migratioD  technology 
with  its  storage  manageroent 
suite  and  the  release  of  a  data 
replication  tool  that  supports 
disk  arrays  from  rival  vendors. 

EMC  also  said  it  has  inte¬ 
grated  the  server  virtualization 
software  acquired  through  its 
buyout  of  VMware  Inc.  earlier 
this  year  with  its  Symmetrix 
Remote  Data  Facility  (SRDF) 
replication  tool  That  will  en¬ 
able  users  to  asynchronously 
replicate  data  from  a  large 
number  of  servers  at  a  prima¬ 
ry  data  center  to  a  few  systems 
or  even  iust  one  at  a  remote 
site  by  creating  multiple  in¬ 
stances  of  a  server  operating 
system  on  the  target  boxes. 

But  chief  among  EMC's 
upgraded  products  is  a  new 
version  of  the  replication  soft¬ 
ware  for  its  Symmetrix  high- 
end  disk  arrays  called  EMC 
Open  Replicator.  The  too) 
will  allow  data  to  be  copied  to 
storage  devices  from  IBM.  Hi¬ 
tachi  Data  Systems  Corp.  and 
Hewlett-Packard  Ca  —  EMC's 
main  hardware  competitors. 
The  company  said  Open 
Replicator  is  dtie  for  release 
tn  next  year’s  first  quarter. 

Extended  Options 

That's  great  stufC"  said  Bill 
North,  an  analyst  at  IDC  in 
Framin^iam.  Mass.  “It's  not 
unique.  But  if  you're  an  EMC 
customer  and . . .  have  merged 
with  another  company  or  luve 
regional  offices  with  difterent 
storage,  you  can  now  have 
greater  flexibility.’' 

On  the  information  life¬ 
cycle  management  (ILM) 
front,  EMC  is  integrating  its 
ControlCenter  storage  man¬ 
agement  platform  with  a  set 


of  application-aware  tools  that 
the  company  inherited  when  it 
acquired  Legato  Systems  Inc. 
last  year.  Chuck  Hollis,  vice 
president  of  storage  platforms 
mailceting  at  EMC  said  the  in¬ 
tegrated  ofTerii^  will  include 
Legato  Software’s  EmailXten- 
der  for  Exchange  2003  and  Lo¬ 
tus  Notes  products,  as  well  as 
the  EMC  DatabaseXtender  for 
Oracle.  PeopleSoft  and  Sybase. 
Shipments  are  due  this  quarter. 

EmailXtender  identifies  in¬ 
frequently  used  e-mail  mes¬ 
sages.  and  DatabaseXtender 
searches  databases  for  old  or 
inactive  records.  Both  prod¬ 
ucts  can  move  tbe  older  data 
off  high-cost  primary  storage 
devices  CO  secondary  disk  sys¬ 
tems  or  tape  drives. 

John  Halamka.  CIO  at  Care- 
Group  Inc...  a  Boston-based 
company  that  operates  six 
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hospitals,  said  be  plans  to  test 
the  new  ILM  offering.  1  have 
to  keep  medical  records  for  30 
years,’’  he  noted.  “Would  I 
love  to  invest  in  Symmetrix 


DMX  for  the  next  30  years? 
Sure.  Unfortunately,  I  can't 
afford  that.* 

Halamka  has  been  experi¬ 
menting  with  ILM  for  a  year 
on  his  40TB  storage-area  net¬ 
work,  which  be  manages  with 
ControlCenter  and  backs  up 
using  EMC's  SnapVicw  and 
TlmeFinder  software.  He  said 
he  has  reached  the  point  where 
be  can  automatically  migrate 
data  from  Symmetrix  boxes  to 
EMC's  Clariion  midrange  ar¬ 
rays  or  tape  storage. 

“When  we  initially  went 
down  the  [ILM]  path,  tbe 
tools  to  do  all  of  this  business- 
rule-,  policy-driven  shuttling 
of  data  back  and  forth  didn’t 
exist,*  he  said  "They  do  now." 

Halamka  added  that  al¬ 
though  he  likes  the  additional 
upgr^es  EMC  is  offering, 
“obviously,  there  is  still  work 
to  da“  For  example,  he  said  it 
would  be  “nirvana"  if  the  time 
tickets  that  are  used  to  gener¬ 
ate  payroll  checks  within 
CareGroup's  PeopleSoft  appU- 
cations  w^d  automatically 
move  from  Symmetiix  to 
Clariion.  “That’s  something 
PeopleSoft  has  to  woik  on 
with  EMC  Halamka  said 
Cl  49790 


Sun  Ships  Java  Upgrade 


Adds  features  to 
boost  ease  of  use 


BT  HEATHER  HAVENSTSiH 

Sun  Microsystems  Inc.  last 
week  released  Java  2  Platform 
Standard  Edition  <I2SE)  10.  an 
upgraded  version  of  its  pro¬ 
gramming  language  with  more 
than  100  new  feattires  de¬ 
signed  to  bolster  ease  of  use, 
performance,  scalability  and 
desktop  development. 

J2SE 10.  which  was  code- 
named  Tiger  and  announced 
a(  the  JavaOne  conference  in 
June,  includes  what  Sun  offi¬ 
cials  claim  are  the  most  signif¬ 
icant  enhancements  to  tbe 
Java  development  platform 
and  language  since  tbe  first 
release  almost  a  decade  ago. 

Sun  also  provided  a  peek  at 
J2SE  6.0,  now  called  Mustang. 
Scheduled  to  be  available  in 


the  spring  of 2006,  Mustang 
will  feature  increased  perfor¬ 
mance  and  added  support  for 
XML  and  Web  services. 

try  to  have  a  measure¬ 
ment  for  bow  often  the  com¬ 
munity  wants  to  sec  updates," 
said  James  Gosling,  the  father 
of  Java  and  chief  technology 
officer  for  Sun’s  Developer 
Platforms  Group.  The  [Mus¬ 
tang  release  date)  is  when  we 
think  tbe  community  is  going 
to  be  ready  for  a  new  release." 

Developers  can  download 
J2SE 10  l^m  Sun's  Web  site 
now.  The  company  said  new 
features  supporting  faster  and 
more  secure  coding  should 
help  boost  Java  programmer 
productivity.  The  upgrade  also 
supports  fo^cr  start-ups  and  a 
smaller  memory  footprint. 

J2SE 10  b  an  important  step 
for  Java  in  its  ongoing  battle 
against  Microsoft  Corp.'s  i4et 


development  environment, 
said  Stephen  O'Grady,  an 
analyst  at  RedMonk  in  Bath, 
Maine.  The  streamlined  start¬ 
ups  and  a  friendlier  graphical 
user  interface  should  be  espe¬ 
cially  welcome  additions  to 
Java  users,  be  added. 

“Particularly  for  Java  appli¬ 
cations  on  the  clienL  it  has 
taken  a  while  for  them  to  start 
up."  O’Grady  said.  That  has 
been  a  problem.  Also,  from  a 
user’s  perspective,  [Sun]  has 
updated  the  look  and  feel  It 
looks  good.  It’s  cleaner,  and 
it’s  more  modern." 

The  enhancements  in  J2SE 
10  reflect  demands  from  cor¬ 
porate  users  for  enterprise- 
oriented  capabilities,  such 
as  the  ability  to  manage  and 
monitor  applications,  said 
Thomas  Murphy,  an  analyst 
at  Meta  Group  Inc.  He  added 
that  Sun  "certainly  b  trying  to 
make  a  big  push  to  come  back 
again  on  the  client  side." 
049788 
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Rnancial  Rrm  Consolidates  SANs  With  Eye  Towaid  ILM 


Installs  tiered  storage  network,  plans  to 
move  tovs'ard  automated  data  migration 


BT  LUCAS  MEARIAH 

State  Street  Corp.’s  uivestment 
tnana^ment  unit  has  complet¬ 
ed  the  rollout  of  a  tiered  stor¬ 
age  infrastructure  that  will  be 
used  to  consolidate  seven  stor¬ 
age-area  networis  (SAN)  and 
set  the  stage  for  the  eventual 
adoption  of  automated  infor¬ 
mation  life-cycle  management 
processes. 

The  movement  of  data 
amoi^  the  various  tiers  of  stor- 
agie  devices  is  still  done  manu¬ 
ally.  according  to  State  Street 
Global  Advisors,  which  fin¬ 
ished  the  muldmiUion-doltar 
installation  in  September  and 
announced  the  deployment 
last  week  along  with  storage 
switch  vendor  McData  Corp. 

But  the  process  will  be  auto¬ 
mated  over  time  and  driven  by 
predefmed  policies  based  on 
the  business  importance  and 
age  of  information,  said  Bob 


Shiim.  a  principal  in  the  IT  de¬ 
partment  at  State  Street  Glob¬ 
al  Advisors  who  is  responsible 
for  manning  the  unit’s  stor¬ 
age  systems.  “It’s  a  complete 
change  in  how  we  approach 
storage,"  he  said. 

State  Street  Globa]  Advi¬ 
sors.  which,  like  Us  parent 
company,  is  based  in  Boston, 
deployed  high-end  and  mid¬ 
range  disk  arT3y.s  from  EMC 
Corp.,  a  tape  library  from  Stor¬ 
age  Technology  Corp.  and  32 
of  McData 's  network  storage 
switches  as  pan  of  the  proiect. 

Shinn  said  his  team  also 
used  a  new  Eclipse  2640  SAN 
router  that  McData  introduced 
last  week  to  integrate  Brocade 
and  Cisco  switches  that  are 
part  of  Sutc  Street’s  SANs 
at  facilities  in  and  around 
Boston,  thereby  tying  together 
its  data  migration  pathways. 

Altogether,  more  than  1.000 


switch  ports  connect  applica¬ 
tion  sein  ers  to  the  storage  de¬ 
vices  on  the  central  SAN. 
which  was  installed  ai  a  new 
data  center  in  Boston.  Differ¬ 
ent  paths  10  the  devices  can  be 
dynamically  created  b>'  the 
McData  switches.  Shinn  said. 

Layered  on  top  of  the 
switched  networic  is  McData's 
SAN  Navigator  software, 
which  provides  topology  map¬ 
ping.  asset  tracking  and  auto¬ 
mated  discovery  of  storage 
hardware.  ‘The  point  is  to  ab¬ 
stract  [the  network!  to  create 
multiple  virtual  paths  back  to 
the  storage."  said  Patrick  Harr. 
McData’s  vice  president  of  di¬ 
rector  platforms. 

Bill  North,  an  analyst  at 
IDC.  said  he's  impressed  by 
State  Street’s  architecnire  but 
added  that  the  company’s  ap¬ 
proach  sounds  more  like  data 
life-cycle  man^ment  at  this 
point.  ‘*It’s  about  the  bits, 
bytes  and  buckets."  not  busi¬ 
ness  information  itself,  he  said. 

“When  you  have  particular 


classes  of  business  records 
that  have  to  be  stored  and  re¬ 
trieved  in  a  certain  way.  with 
certain  service  levels  .  then 
things  have  to  be  more  sophis¬ 
ticated."  North  added. 

The  netA-  SAN  has  2S0TB  of 
capacity  on  EMC's  Symmetriic 
DMX  and  Clariion  CX  arrays, 
plus  another  SOOTB  on  a 
PowderHom  tape  library 
from  StorageTck.  Shinn  de¬ 
clined  to  state  the  specific 
cost  of  the  project,  which  in¬ 
cluded  months  of  classifying 
data  sets  in  order  to  detennine 
the  appropriate  type  of  stor- 
age  for  tb^  But  be  noted 


that  the  price  of  storage  hard¬ 
ware  was  much  lower  than  it 
was  the  last  time  he  bought 
equipment.  “Wc  went  from 
the  tens  of  millions  of  dollars 
for  our  old  system  to  the  mil¬ 
lions."  he  said. 

Along  with  (he  addition  of 
the  switched  networic,  Shinn 
said  the  most  important  as¬ 
pect  of  the  project  was  the  hu¬ 
man  effort  involved  in  classi¬ 
fying  data.  “If  you  haven't 
done  that,  then  you  can't  move 
things  throughout  the  differ¬ 
ent  tiers."  be  said.  "Automated 
or  not  automated,  you  don't 
have  the  policies  and  informa¬ 
tion  to  be  able  to  judge  what 
should  go  where."  O  497B0 


State  Street’s  SAN  Setup 


Three-Year  Storage-Over-IP 
Project  Starts  to  Bear  Fruit 


BV  LUCAS  MEAmAN 

After  three  years  of  work,  bro¬ 
kerage  Edward  Jones  &  is 
beginning  to  see  some  benefits 
from  an  S80  miUioo  invest¬ 
ment  in  a  storage-over-IP  net¬ 
work  that  is  repUcatiitg  up  to 
700GB  of  data  daily  to  a  ftilly 
redundant  backup  site  located 
1,600  miles  away  from  its  main 
data  center  near  St.  Louts. 

Edward  Jones  CIO  Rich 
Malone  said  last  week  that  the 
Maryland  Heights,  Mo.-based 
company  is  still  "a  Im^  w^ 
from  being  where  we  need  to 
be”  on  the  project  But  over  the 
past  year.  Ed>A^  Jones  has  re¬ 
duced  its  overall  data  backup 
window  from  12  hours  to  four, 
while  more  than  doubling  the 
amount  of  information  it  repli¬ 
cates  to  its  secondary  data 
center  in  Tbmpe.  Ariz. 

"At  the  beginning  of  the 
year,  we  ran  96  hours  behind 
with  our  database  repUcation,” 
said  Bill  Hayden,  director  of 


data  services  at  Edward  Jones. 
“Four  days  b^iind  is  nowhere 
near  the  service  level  I  was 
expected  to  provide." 

Most  of  the  improvements 
over  the  past  year  have  come 
through  software  upgrades 
and  fine-umuig  the  systems  in 
the  two  data  centers,  be  said. 

According  to  Dianne  Mc- 


Adam.  an  analyst  at  Data  Mo¬ 
bility  Group  LLC  in  Nashua. 
N.H,.  it’s  still  rare  for  a  finan¬ 
cial  services  firm  the  size  of 
Edward  Jones  to  be  using  a 
storage-over-IP  network  and 
asynchronous  replication 
technology.  Most  large  broker¬ 
ages  continue  to  rely  on  syn¬ 
chronous  replication  “because 
they  can’t  afford  to  lose  any 
transactions  and  they  need 
the  performance  of  a  high- 
bandwidth  fiber  connectioa" 
McAdam  said. 


Edward  Jones,  which  began 
the  storage  project  in  2001 
[QuickLink  2S699I,  is  using 
the  IP-based  technolog>'  to 
link  a  storage-area  network 
(SAN)  in  its  headquarters  data 
center  to  one  in  the  Tempe  fa¬ 
cility.  The  network  is  built  on 
Fibre  Channel-over-lP  switch¬ 
es  from  CNT  Corp.,  plus  data 
replication  and  mirroring 
tools  from  EMC  Cforp.,  E-Net 
Corp.,  Quest  Software  Inc.  and 
Network  Appliance  Inc. 

The  project's  goal  is  to  en¬ 
able  Edward  Jones  to  shift  its 
transaction-processu^  activi¬ 
ties  from  St.  Louis  to  Tempe 
without  a  hiccup.  ’TVhen  vro 
get  to  where  we  want  to  go. 
[disaster  recovery]  will  be¬ 
come  a  thing  of  the  past."  Mal¬ 
one  said.  “It  becomes.  ‘OK. 

Pve  got  trouble  at  one  data 
center.  I'm  going  to  shift  the 
load  to  the  other  center.' " 

The  asynchronous  replica¬ 
tion  approach  has  prov^  to 
be  reliable.  Malone  said.  But 
some  technical  issues  remain. 
One  major  challenge  is  syn¬ 
chronizing  all  450TB  of  data 
at  both  sites  to  ensure  that  the 


information  is  fully  updated. 
"It’s  something  that  becomes 
more  difficult  when  you're 
sittii^  L600  miles  from  your 
backup  center."  Hayden  said. 

Another  problem  is  that  the 
company's  mainframe-based 
VSAM  flat  files  are  on  a  four- 
hour  replication  cycle,  match¬ 
ing  the  length  of  the  current 
backup  window.  “We  simply 
reached  a  limit  on  the  current 
technology."  Hayden  said, 
adding  that  the  bottleneck 
stems  from  Edward  Jones’  use 
of  older  versions  of  EMC's 
Symmetrix  disk  arrays  and 
replication  software.  Up¬ 
grades  by  the  fourth  quarter  of 
next  year  should  help  correct 
die  problem,  be  said. 

Malone  said  DB2  database 
replication  has  also  been  prob¬ 
lematic  because  the  replica¬ 
tion  engine  that  the  company 
uses  doesn't  allow  incremeD- 
tal  updates  on  the  target  data¬ 
base  and  supports  only  one 
update  at  a  time.  He  added 
that  he’s  considering  IBM’s 
upgraded  DB2  Propagator  tool 
to  help  speed  up  die  replica¬ 
tion  process.  0  48629 


CMflTtlWMlI 


NEWS 


KM  CONIWMAIIK 


CA  Plans  to  Trim 
Workforce  by  5% 

Cornpirter  Associates  Interna* 
tionaJ  Inc.  said  H  plans  to  cut 
000  iobs  workhiride  in  ttw  Itope 
ol  reducing  its  annual  operating 
costs  by  $70  milton.  Tlw  layoffs, 
which  were  predicted  two  weeks 
ago  by  financial  analysts  (Quicfc- 
Link  49647),  will  cut  the  com* 
pany’s  workforce  by  5%.  CA 
said  the  reductions  wiN  be  com* 
plated  this  month  and  include 
layoffs  in  its  developmem  group. 

Bank  to  Install 
180k  Cisco  Phones 

Cisco  Systems  Inc.  said  Bank 
of  America  Corp.  plans  to  install 
about  180,000  of  Its  IP  tale* 
phones  over  the  neit  three 
years.  The  deployment  by  the 
Charlotte.  N.C.*based  bank  will 
also  include  centralized  call 
control  and  vQiee*maii  systems 
from  Cisco.  Electronic  Data  Sys* 
terns  Corp.  will  work  with  the 
bank  on  tho  pro)ecL  Financial 
details  wereni  disclosed. 

Microsoft  Releases 
Open-Source  Code 

Mcrosoft  Corp.  continued  its 
fBrtahon  wHh  open-source  tech¬ 
nology  by  posting  the  source 
code  for  a  tool  called  FleiWiki 
on  the  SourcoFDrgB.rMrt  Web  site. 
The  release  was  its  third  contri¬ 
bution  of  open-source  code  but 
the  first  involving  an  actual  ap- 
plicaiion,  albeit  one  that  bnl  a 
corrsnercial  product  FlexWilu 
can  be  used  to  create  Web  sites 
caHed  wiMs.  which  let  users  mM 
and  edit  content. 

Intel  Drops  Plans 
For  WhR  in  Chips 

Citing  a  lack  of  mtenst  among 
PC  vendors.  Intel  Corp.  has 
dropped  plans  to  build  wireless 
access  point  technology  into 
the  Grantsdale  chip  sets  it  an¬ 
nounced  in  June.  Intel  said  the 
decision  wasn’t  related  to  any 
technical  issues. 


betting  on  color’s  long-term 
sueccs.s  to  continue  brighten¬ 
ing  Xerox's  balance  sheet  has 
some  potentially  dark  spots. 
Color  printing,  while  dramati¬ 
cally  cheaper  than  it  was  only 

- a  few  years 

ago,  still  costs 
more  than  the 
13  cents  per 
page  for  black 
and  white.  So 
that  means  | 
biLsinesscs  will 
likely  restrict 
the  use  of  col¬ 
or  to  de.sign- 
bcavy  docu¬ 
ments  and 
those  where  color  is  critical 
to  their  communications. 

Thea*  also  are  technical 
problems,  one  of  the  biggest 
being  color  consistency.  LK. 
Mestha,  principal  scientist  at 
Stamford,  Conn.-basi'd  Xerox, 
explains  that  even  in  the  best 
network  printers,  the  color  ^ 
saturation  on  a  page  can 
change  in  the  middle  of  a  print 
run.  So  he  and  other  Xerox 
scientists  have  invented  what 
they  call  a  spectrophotome¬ 
ter.  a  device  that  will  reduce 
the  time  it  takes  a  printer  to 


Addrlional 
cost  tof  a 
I  printed  color  | 
page  com- 
I  pared  a  | 
B&Wone. 
says  Xpto« 


automatically  check  the  color 
consistency  on  a  p^c  from 
24  seconds  to  less  than  one. 
The  device  is  beyond  the  pro¬ 
totype  stage  but  probably 
won’t  arrive  in  printers  until 
late  2005  at  the  earliest. 

Thin  clients 
‘same  as  Mac’  in . . . 

. . .  penetration  of  the  corporate 
desktop  market.  Which  is  pret¬ 
ty  good  news  for  Mike  Dcn- 
effe,  senior  director  of  the 
Winicrm  business  line  at 
Wyse  Technology  Inc.  in 
San  lose.  That  measly  2%  to 
3%  market  share  is  enough  to 
spur  Wyse  to  unleash  a  hand¬ 
ful  of  (hin-clicnt  systems  in 
the  coming  months. 

Available  this  week. 
the  Winterm  3150SE 
and  9150SE  offer  im-  , 
proved  performance 
over  the  company’s 
current  products. 

Deneffe  says.  The 
3150SE  costs  S309 
and  is  the  first  thin 
client  to  ship  with 
Windows  CE  5.0. 

Wyse  claims.  Priced 
Wyss’s  thinner 

thin  dwnl - •  ^ 
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For  Xerox,  the 
Color  of  Money . . . 

...  is  color.  Xerox  Corp.  has  seen  better  than  40%  growth 
in  unit  sales  of  its  color  printers  and  multifunction 
systems  (those  that  print,  fax  and  scan)  over  the  past 
12  months,  leading  to  a  24%  profit  growth  during  that 
period.  Not  bad  for  a  company  whose  name  is  syn¬ 
onymous  with  black-and-white  paper  copies.  But 
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at  S499.  the  9I50SE  ^ _ 

will  offer  Windows 
XP  Embedded  as 
its  operating  sys¬ 
tem.  Also  new  is 
a  $349  S-Class 
dev  ice,  which  is  lhi«fc*l.'sS3t16NASS«v»r 
about  a.,  big  as  a  VHS  video-  Rackable’s  late; 
cassette  and  uses  a  low-power  nework-attach 
CPU  fmm  AdvaiK'ed  Micro  vice.  The  S3II6 
Devices  Inc.  that  lets  it  run  ships  with  4TB 
without  a  nois>’  fan.  It  will  pacity  (expand, 
ship  next  month  running  Win*  plus  4GB  of  RA 

dows  CE  5.0.  and  a  Linux  ver-  IGbit/sec,  Ethci 

sion  is  due  in  December.  The  S3116  can  hand! 
slightly  larger  V-Class  thin  Unix  and  Wind 
client,  using  a  chip  from  out  of  the  box  a 

Transmeta  Corp.,  will  also  under  S20.000. 
ship  in  December  for  $449 
with  Linux.  CE  or  XPE.  Linux  Sfll6Si0rC6.C 
“is  the  fastest-growing  s<^-  targets  help 
meni  we  have."  DcNeffc  says.  ...  and  other  cus 


Control  access  to 
distributed  apps . . . 

...  via  SingleKey  3.0,  an  appli¬ 
ance  shipping  Oct.  15  from 
Bayshore  Networks  LLC  in 
New  York.  According  to  Gen¬ 
eral  Manager  Francis  Cian- 
frocca.  SingIcKey  lets  you 
establish  application  access 
policies  at  a  central  location, 
deploy  the  appliances  in  front 
of  application  servers  and 
manage  who  can  access  your 
software  assets.  You  can  also 
link  SingleKey  to  your  enter¬ 
prise  directory  to  ease  cre¬ 
ation  of  an  access-rights  data¬ 
base  on  the  appliance.  Ver¬ 
sion  3.0  adds  (he  Linux  2.6 
kernel  and  improved  perfor¬ 
mance.  Prices  start  at  $5,000. 

Serial  ATA  NAS 
appliances  appeal... 

...  to  ‘liighfy  sophisticated  i 
customers"  in  midsize 
to  large  companies, 

H  claims  Geoflh^y  Noer, 
H  senior  director  for 
H  storage  products  at 
'  H  Rackabic  Systems 
H  Inc.  in  Milpitas,  Calif. 
'H  Whether  urbane  so¬ 
il  phisticates  or  back- 
11  country  rubes,  most 
1 1  systems  administra- 
II  tors  should  appreci- 
ate  the  specs  for 


Rackable’s  latest  Serial  ATA 
netw'ork-aitachcd  storage  de¬ 
vice.  The  S3I16  NAS  Server 
ships  with  4TB  of  storage  ca¬ 
pacity  (expandable  to  lOOTB), 
plus  4GB  of  RAM  and  two 
IGbit/sec,  Ethernet  port.s.  Tire 
S3116  can  handle  Linux.  Mac. 
Unix  and  Windows  clients 
out  of  the  box  and  starts  at 
under  $20,000. 

Salesforce.com 
targets  help  desk . . . 

. ..  and  Other  customer  support 
applications  with  the  same  pay- 
as-you-go  software  mtxlcl  it 
successfully  used  to  attack 
licensed  CRM  programs  from 
the  likes  of  Sie^l  Systems  Inc. 
Supportforce.com  includes 
complete  ctistomcr  support 
and  help  desk  tools  as  well  as 
knowledge  management  ca¬ 
pabilities.  Web  self-service 
and  other  customer-support 
features,  says  Salesforce.com 
Inc.  It’s  available  in  11  lan¬ 
guages.  with  monthly  fees 
ranging  from  $17  to  $125 
per  user,  says  CEO  Mark  Bc- 
nioff.  Sheryl  Kingstone.  an 
analy.st  at  The  Yankee  Group 
in  Boston,  says  she  doesn’t 
expect  Supportforce.com  to 
compel  users  to  "rip  and 
replace"  customer  support 
tools  from  vendors  such  as 
Amdocs  Ltd.'s  Clarify  unit 
and  BMC  Software  Inc's 
Remedy  Corp.  division.  But, 
Kingstone  adds,  it  could  be 
ideal  for  companies  that  want 
to  place  customer  service 
agents  in  their  own  homes  or 
quickly  ramp  up  support  ca¬ 
pabilities,  because  there's  no 
softwan;  to  install  or  main¬ 
tain.  She  argues  that  it  could 
also  boost  ofl^hore  work, 
since  agents  in  India  or  else¬ 
where  won’t  need  local  appli¬ 
cation  infrastructures  to  get 
started.  049751 
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CA  Plans  to  Trim 
Workforce  by  5% 

Computer  iwocirtwi  btema- 
tlonallnc.  said  il  ptans  to  cut 
100  iota  teuriiNdda  In  the  hope 
of  reducing  llB  annual  operating 
coats  by  S70  itJion.  The  teyofts. 
tehich  wore  predictod  tm  taoeks 
age  bjr  Inan^  aitalytos  {Quick* 
link  496471.  wtt  cut  the  com¬ 
pany’s  emrirforca  by  5%.  CA 
sahItheradudiomNdibeoom- 
platod  thii  month  and  kichide 
hyefh  in  ito  dauelepment  group. 


Bank  to  Install 
180k  Gsgo  Phones 

dace  Systoma  kic.  saU  Bank 
of  Amaitoa  Carp,  plana  to  inatal 
abeal«O.OOOefitoVlale- 
pboMS  ever  the  nart  ttrae 
years.  The  daptoyment  by  the 
CMaOi.  N.C.*hMad  btoik  w« 
alao  bichidB  cantraKad  cal 
control  and  eeico-nial  syatama 
from  Cbeo.  Boctroaic  Data  Sys¬ 
toma  Corp.  «■  vierfc  «Mi  tha 
bank  on  fl»  pralact  FbuHKial 


Microsoft  Releases 
Open-Source  Code 

Hcrosafl  Carp.  conBnuad  Its 
Wbtitian  edit  span  SDurca  toch- 
Aetogy  by  poathg  too  aouree 
cede  far  a  tool  crfad  RairtlM 
an  toe  SoHroaFafga4Mt  Nbb  alto. 
Tha  rolaooe  MS  Ns  third  contri¬ 
bution  of  epatt-saurea  coda  but 
toalratinMhfhiBaiiacluWap’ 
piealian,  atooN  ana  thal  ini  a 
Gonenoraai  prooucL  riasmiB 
can  ba  oaad  to  craato  Vtob  aNas 
calad  wMs.  aMch  lal  aaan  add 


kite!  Drops  Plans 
For  Wi-R  in  Chips 

CMnB  a  tack  of  intorest  among 
PC  eendon,  bdol  Carp,  has 
ibwppidplmtohidhlwiroiaai 
acoaas  pabd  tochnolagy  bilo 
tooenotodalechlpaatoNM- 
iMunead  la  Juna.  Intol  aWd  toe 
dacWon  nana't  ralalod  to  any 
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For  Xerox,  the 
Color  of  Money .. . 

...  b  coktr.  Xenn  Corp.  has  seen  bettor  than  40%  growth 
in  unit  sales  of  its  color  printers  and  multifunction 
systems  (those  that  print,  fax  and  scan)  over  the  past 
12  months,  leading  to  a  24%  profit  growth  during  that 
period.  Not  bad  for  a  company  whose  name  is  syn¬ 
onymous  with  black-and-white  paper  copies.  But 


betting  on  color's  long-term 
success  to  continue  brighten¬ 
ing  Xerox's  balance  sheet  has 
some  potentially  dark  spots. 
Color  printing,  vriiile  dramati¬ 
cally  cheaper  than  it  was  only 
aiew  years 
ago.  s^  costs 
more  than  the 
LS  cents  per 
page  for  black 
and  white.  So 
that  means 
businesses  will 
likely  restrict 
the  use  of  col¬ 
or  to  design- 
heavy  docu¬ 
ments  and 
those  vritere  color  is  critical 
to  their  communications. 
There  also  are  technical 
problems,  one  of  the  biggest 
being  color  consistency.  LK. 
Mestha,  principal  scientist  at 
Stamford,  Conn.-based  Xerox, 
explains  that  even  in  the  best 
network  printers,  the  color 
saturation  on  a  page  can 
change  in  the  middle  of  a  print 
ran.  So  be  and  other  Xenuc 
scientists  have  invented  what 
they  call  a  ^>ectrophocome- 
ter.  a  device  that  will  reduce 
the  time  it  takes  a  printer  to 


automatically  check  the  color 
consistency  on  a  page  from 
24  seconds  to  less  than  one. 
The  device  is  beyond  the  pro¬ 
totype  stage  but  probably 
won’t  arrive  in  printers  until 
late  200S  at  the  earliest. 

Thin  clients 
‘same  as  Mac' in... 

...  pwwtration  of  the  corporate 
dtsktop  markoL  Which  is  pret¬ 
ty  good  news  for  Mike  Dcn- 
effo  senior  director  of  the 
Wintenn  business  line  at 
Wyse  Technolt^  Inc.  in 
San  Jose.  That  measly  2%  to 
3%  market  share  is  enough  to 
spur  Wyse  to  unleash  a  hand- 
fol  of  thin-client  systems  in 
the  coming  months. 

Available  this  week, 
the  Winterm  3150SE 
and  9i50SE  offer  im¬ 
proved  performance 
over  the  company’s 
current  products. 

OenefTe  says.  The 
31S0SE  costs  S399 
and  is  the  first  thin 
client  to  ship  with 
Windows  CE  5.0. 

Wyse  claims.  Priced 
WHM'stoknor 


atS499.the9150SE 
will  offer  Windows 
XP  Embedded  as 
its  operating  sys¬ 
tem.  Also  new  is 
a  $349  S-Class 
device,  which  is  rnrninin 
about  as  big  as  a  VHS  video¬ 
cassette  and  uses  a  low-power 
CPU  from  Advanced  Micro 
Devices  Inc  that  lets  it  run 
without  a  noisy  tauL  It  will 
ship  next  month  running  Win¬ 
dows  CE  SD.  and  a  Linux  ver¬ 
sion  is  due  in  December.  The 
slightly  larger  V-Class  thin 
client,  usmg  a  chip  from 
Transmeta  Corp.,  will  also 
ship  in  Decemt^r  for  $449 
with  Linux.  CE  or  XPE  Linux 
*1$  the  fastest-growing  seg¬ 
ment  we  have,”  DeNeffe  says. 

Control  access  to 
distribiitedapps. . . 

...yll8iiigM(a,3.0.  an  appU- 
ar>ce  shipping  Oct.  IS  from 
Bayshore  Networks  LLC  in 
New  York.  Accordirtg  to  Gen¬ 
eral  Manager  Francis  Cian- 
frocca,  SirtgieKey  lets  you 
establish  application  access 
policies  at  a  central  location, 
deploy  the  appliances  in  front 
of  application  servers  and 
manage  wbo  can  access  your 
software  assets.  You  can  also 
link  SingleKey  to  your  enter¬ 
prise  directory  to  ease  cre¬ 
ation  of  an  access-ri^ts  data¬ 
base  on  the  appliance.  Ver¬ 
sion  3J)  adds  Linux  2.6 
kernel  and  improved  perfor¬ 
mance.  Prices  start  at  $5,000. 

Serial  ATA  NAS 
appNances  appeal... 

..(•-MaMyniiMtflcatMl 

cuitomun*  in  midsixe 
to  large  companies, 
claims  Geofl^  Noer, 
senior  director  for 
storage  products  at 
Rackable  Systems 
Inc.  in  Milpitas,  Calit 
Whether  urbane  so¬ 
phisticates  or  back- 
country  rubes,  most 
systems  administra¬ 
tors  should  appreci¬ 
ate  the  specs  for 


’sSSmNASSra 

Rackable’s  latest  Serial  ATA 
network-attached  storage  de¬ 
vice.  The  S3116  NAS  Server 
ships  with  4TB  of  stora^  ca¬ 
pacity  (expandable  to  lOOTB), 
plus  4GB  of  RAM  and  two 
IGbit/sec.  Ethernet  ports.  The 
S3116  can  handle  Linux,  Mac. 
Unix  and  Windows  clients 
out  of  the  box  and  starts  at 
under  $20,000. 

Saiesforeexom 
targets  help  desk... 

. .  .andotoarcustofnarwpport 

■ppfcaHoiM  with  the  same  pay- 
as-you-go  software  model  it 
successfully  used  to  attack 
licensed  C^RM  programs  from 
the  likes  of  Sietel  Systems  Inc 
Supportforcecom  includes 
complete  customer  support 
and  help  desk  tools  as  well  as 
knowledge  management  ca¬ 
pabilities,  Web  self-service 
and  other  customer-support 
features,  says  Salesforce.com 
Inc.  It's  available  in  U  lan¬ 
guages,  with  monthly  fees 
ranging  from  $17  to  $125 
per  user,  says  CEO  Mark  Be- 
nioff.  Sheryl  Kingstone,  an 
analyst  at  The  Yankee  Group 
in  Boston,  says  she  doesn’t 
expect  Supportforce.com  to 
compel  users  to  Tip  and 
replace”  customer  support 
tools  from  vendors  such  as 
Amdocs  Ltd.’s  Clarify  unit 
and  BMC  Software  Ii>c.’s 
Remedy  Corp.  division.  But, 
Kingstone  adds,  it  could  be 
ideal  for  companies  that  want 
to  place  customer  service 
agents  in  their  own  homes  or 
quickly  ramp  up  support  ca¬ 
pabilities.  b^use  there’s  no 
software  to  install  or  main¬ 
tain.  She  argues  that  it  could 
also  boost  offshore  woik, 
since  agents  in  India  or  else¬ 
where  wont  need  local  appli¬ 
cation  infrastructures  to  get 
started.  O  49791 


Geek  Squad,**  a  244tour  Computm^  Support  Task  Force  found  a!  Best  Buy. 
depends  on  Sprint  to  take  care  of  business.  Armed  wito  Sprint  PCS  Ready 
link”'  Pftones,  Agents  can  stay  linked  with  waHuetalkiestyle  communication. 
And  when  they  need  more  detailed  technical  information.  Sprint  PCS 
Connection  Cards™  provide  high-speed  wireless  access,  linking  them  to 
their  company  intranet  which  can  provide  the  same  data  access  they'd 
have  in  the  office.  Sprint  technology  helps  Geek  Squad  expedite  solutions, 
improve  customer  service  and  efficiently  handle  over  a  thot^nd  customers 
a  day.  And  a  fast  connected  Geek  Squad  is,  in  our  opinion,  beautiful. 
With  Sprint,  business  is  beautiful.™ 

>  Visit  Sprint.com/beautiful  for  case  studies  or  call  877-777-5568  > 
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rr  Aids  Florida  Utility  Workers 


But  outage  management  applications 
may  fall  short  with  guest  repair  crews 


•V  TN«HM*  HOFFMAN 

Electric  utilities  in 
Florida  have  been  able 
to  leverage  IT  to  help 
them  respond  to  the 
widespread  power  outages 
caused  by  the  four  hurricanes 
that  have  hammered  the  state 
over  the  past  six  weeks.  But 
limitations  in  some  of  the  sys¬ 
tems  are  making  it  bard  to  ful¬ 
ly  automate  the  process  of 
coordinating  the  repair  work. 

For  instance,  most  power 
companies  b  the  Southeast 
have  installed  new  outage 
management  systems  since 
2000  to  help  them  identify  the 
equipment  that’s  causing  a 
specific  power  disruption  and 
dispatch  work  crews  to  the 
scene,  said  Rick  NicbolsoiL  an 
analyst  at  Meta  Group  Inc. 

But  when  a  hurricane  hits, 
the  cmnpmdes  often  recruit 
thousands  of  repair  workers 


from  across  the  US  and  Cana¬ 
da  for  assistance.  Because 
those  workers  rarefy  have  mo¬ 
bile  devices  that  are  compati¬ 
ble  with  a  utility's  outage  man¬ 
agement  system,  electronic 
worit  orders  typically  can't  be 
dispatched  to  them.  Nicholson 
said 

’That's  a  problem,  and  I’m 
not  aware  of  any  utilities  that 
have  adequately  solved  this.” 
said  Nicholson.  In  most  cases, 
power  companies  have  dis¬ 
patchers  call  guest  employees 
on  cell  phones  to  give  them 
their  work  orders,  be  said 

Dennis  Klii^ter.  CIO  at  Flori¬ 
da  Power  &  Light  Co,,  said  the 
Juno  Beach-based  utility  gives 
radio  systems  or  cell  phones 
to  transient  repairmen  if  they 
don’t  have  mobile  devices  that 
will  work  with  its  outage  man¬ 
agement  system. 

’’Sometimes  their  technol¬ 


ogy  is  compatible  with  us. 
sometimes  not.”  Klinger  said 
He  added  that  if  cellular  com¬ 
munications  have  been  dis¬ 
rupted  b  a  particular  area, 
guest  workers  fill  out  paper- 
based  woik  orders  and  return 
them  to  temporary  “stagbg 
sites"  set  up  by  FPfitL 
b  the  aftermath  of  a  majot 
storm  like  Hurricane  Jeanne, 


Panel  Prefers  Carrots  to 
Sticks  on  Cybersecurity 


WASHtNOTON 

Oe^te  the  indifference  that 
many  corporate  executives 
show  about  IT  security  threats, 
now  isn’t  the  time  for  the  U,S. 
government  to  mandate  cyber¬ 
security  standards  to  private 
industry,  a  panel  of  govern¬ 
ment  o^Uds  said  last  week. 

Instead  of  using  a  "stick” 
approach,  Congress  could  de¬ 
velop  some  "carrot”  incentives 
for  companies  looking  to  up¬ 
grade  cybersecurity  ef¬ 
forts.  said  Bob  Dix.  staff  direc¬ 
tor  of  the  tecfanolt^  and  b- 
fbrmatioo  policy  subcoounit- 
tee  of  the  House  Government 
Reform  Committee. 

The  subcommittee  is  con¬ 
sidering  several  incentives  for 
cybersecurity  efforts,  bchid- 
bg  an  invescmeni  tax  credit 
and  a  limit  on  liability  for 
companies  adopting  cyberse- 


curity  best  practices.  Dix  said. 

Even  though  Dix  and  Chrisan 
Herrod,  chief  security  officer 
at  the  Securities  and  Exchange 
Commission,  both  expressed 
concern  over  the  state  of  cy¬ 
bersecurity  b  the  U.S,.  they 
stopped  short  of  advocating 
government-defined  stan¬ 
dards.  Instead,  best  practices 
should  be  defined  by  the  pri¬ 
vate  sector,  Dix  said. 

Lack  of  Consensus 

Part  of  the  problem  b  that 
there’s  little  agreement  on 
what  cybersecurity  best  prac¬ 
tices  should  be,  Herrod  said. 

”I  don’t  think  it’s  possible  to 
mandate  something  when  you 
don’t  have  agreement  on  what 
that  something  is,”  she  said. 

One  industry  may  require 
different  standards  than  anotb- 
ei;  and  a  <man  business  may 
have  different  cybenecurity 


requirements  than  a  large  com¬ 
pany.  said  Laura  DeMartmo, 
legal  adviser  for  cybersecurity 
at  the  Federal  TVa^  Commis¬ 
sion.  "A  broad  Igovemment] 
mandate  may  not  be  needed 
for  a  company  that  doesn’t 
mabtab  sensitive  consumer 
infonnation.'*  she  said. 

Panelbts  said  many  CEOs 
still  don’t  view  cybersecurity 
as  an  important  corporate 
governance  issue.  Tlie  threat 
b  real  and  the  time  for  action 
U  now.”  DU  said.  % 

Herrod  said  she’s  *Very  db- 
appobted”  b  the  lack  of  effort 
anumg  businesses  and  the  gov¬ 
ernment  to  develt^  agreed- 
upon  best  practices. 

"It's  a  lot  of  talk  and  little 
demonstrable  action,”  she  said. 
"CEOs  b  corporate  America 
still  don't  get  it  —  they  still 
don’t  concern  themselves  with 
bformation  security ...  as 
much  as  you  would  think  they 
would.”  0497B3 


Gross  writes  far  tht  IDG 
Newsservice. 


the  Utest  to  plow  across  Flori¬ 
da.  "our  process  of  getting  b- 
formation  to  the  field  changes 
dramatically.”  said  Becky  Har¬ 
rison,  director  of  dbtribution 
services  at  Progress  Energy 
Inc.’s  operations  b  North  Car¬ 
olina  and  Florida.  ”We  know 
that  they’re  not  going  to  be 
able  to  get  orders  electronical¬ 
ly  b  a  storm  like  this.” 

After  Jeanne  moved  out  of 
Florida.  Raleigh,  N.C.-based 
Prepress  Energy  assigned 
“feeder  coordinators"  —  typi¬ 
cally,  local  repairmen  >>  to 
oversee  particular  areas  and 
dispatch  work  orders  to  visit- 
bg  crews,  using  bformation 
from  its  outage  management 
system,  Harrison  said. 

Tracking  Custonwrs 

The  system  that  the  company 
uses  b  Florida  b  driven  by  an 
Oracle  database,  and  Harrison 
said  it  has  been  "extremely 
valuable”  for  identifying  cus¬ 
tomers  who  bst  power  and 
tallying  the  percentage  of  cus¬ 
tomers  who  have  had  their 
electricity  restored.  About 
722,000  of  Progress  Energy's 
Florida  customers  lost  power 
as  a  result  of  Jeanne,  but  the 
utility  expected  to  have  all  of 
them  back  onlbe  by  the  end 
of  the  day  thb  past  Friday. 

Outage  management  sys¬ 
tems  have  other  strengths  as 
weU,  Harrison  said.  For  b- 
stance.  Progress  Energy  can 
use  hs  system  to  determine  an 
estimated  time  of  repair  for  a 
particular  area.  It  then  can  pro¬ 
vide  callers  to  customer  ser¬ 
vice  centers  with  an  automated 
response  telling  them  vdien 
power  should  be  restored. 

"One  of  the  things  we’ve 
found  very  critical  b  storms  b 
that  it’s  Just  as  important  to 
keep  customers  i^ormed 
about  restorations  as  it  b 
about  malring  the  restorations 
themselves,"  Harrison  said. 
049798 


FEMA  6  usina  a  new  niranel-tased  wslon 
Id  help  support  huricane  relief  efiorts 


Tpchflfliofly  Mowbs 
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SAS,  the  leader  in  business  intelligence  software,  asks... 


Could  your  IT  dollars  be  better  spent? 


N 


SERVICE  LEVEL  management 

RESOURCE  MANAGEMENT 

CHARGE  MANAGEMENT 

VALUE  PAANAGEMENT 


No  business  wants  to  believe  it’s  wasting  prwrious  IT  dollars.  So  if  executives  and  co-woiicers  grumble 
about  IT  service,  and  you’re  convinced  those  services  could  be  put  to  better  use,  let  SAS  help. 
With  SAS*  IT  Management  solutions,  you  can  measure,  manage,  understand  and  communicate  the 
quality  of  every  IT  service  more  accurately.  You’ll  know  precisely  bow  your  business  is  using  IT 
resources.  Ensure  maximum  performance  and  response  times.  Predict  strategic  and  financial  trends. 
And  clearly  visualize  the  value  of  IT  firmt  business,  revenue  and  profit  perspectives.  Visit  our  Web 
site  to  learn  more  and  read  our  free  white  paper.  Align  IT  with  Business  and  Budget  Strategies. 
Or  call  us  toll  free  1866  731  1364. 

www.sas.com/spent 


Author  Nk^hc^  Can  and  lop  busiressinfluerKmjovi  in  a  lively  discussion  abtxit  his  contrmersabo^ 

Check  out  our  site  for  more  on  fftis  informative,  on-demand  Web  seminar. 


sfisg 


The  Power  to  Know, 


5kSaa 


SASMi 
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Microsoft  Seeks 
Stay  on  Ruling 

Wcratofl  Corp.  ofcad  •  judgt  in 
Uminbouri  to  suspend  tfw  Euro- 
poin  CemniWon’s  antitrust  rul* 
ing  agsrat  the  oimpanv,  vguing 
that  any  todsdcai  laerots  R's 
lercod  to  twtmi  can't  bo  raUactsd 
M  an  appeal  sucooods.  IKcrosoft 
mads  *i  cass  durbu  a  hearing  at 
tho  Euraposn  Union's  second* 
highest  court  the  Court  of  Rrst 
Instance.  Ibe  court  Goidd  trto  up 
to  two  months  to  issue  a  dedsion. 


Red  Hat  Acquires 
Netscape  Software 

Rod  Hal  fete,  has  agreed  to  buy  the 
easels  of  Netscape  Conanunica* 
tiens  Corp.'s  Sacurily  Sokitions 
und  from  America  Onine  bic.  for 
up  to  S23  mMon  in  eaah.  The 
deal,  eddeh  is  due  Id  be  completed 
by  Nov.  30,  {nehtdei  Netscape's 
dfroctmy  eerwof  and  user  euthen- 
ticadon  bole.  RaWgh.  N.C.'froaad 
RsdHatsMdRwMaddIhaaofI* 
ewe  to  Rs  open-aeuree  product 
pertfoRo  wtlhin  sfrt  to  montfis. 


Munich  to  Proceed 
With  Linux  Rolout 

Oly  pfilciali  In  blunlch  him  da- 
ddod  to  go  ahond  wRh  a  destrtup 
Linux  migratioo  profact  frieehring 
t4.000  PCs.  das^  concama 
mai  Mpawnn  aang  oMMereo 
by  the  Bf  oouU  creala  patant- 
anmgananc  proomraa  nr  uaars 
ofopan  aourca  soHmre.  Tha  plan 
to  egalp  tho  dly  govenwnent  s 
PCs  wRh  Lima  and  opon'souroe 
dashtap  appRcaOons  had  boon  put 
on  hold  In  August 


Nortel  Trims  Plan 
For  More  Layoffs 

NoriM  Notworfrs  Ltd.  saM  R  has 
rsducod  tho  nunhsr  of  Mk  that 
wM  ha  cut  in  a  now  round  of  lay* 
ofit  from  3.500  to  3,250.  The 
cuthaeks  are  bw  to  compMod  by 
June  and  wl  afloct  about  MOO 
worfrars  bi  tho  U.S.  Md  950  fri 
Canada,  Ihi  Brampton,  Onlarlo- 
beaad  company  said. 


BI  Projects  Pose  Big 
Hurdles  for  Companies 


IT  execs  contend 
with  technical, 
cultural  challenges 


COMPANIES  can  use 

business  intelligence 
tools  to  make  big 
improvements  in 
their  operations,  but  numer- 
ous  technical,  cultural  and 
internal-process  challenges 
must  be  overcome  fust,  ac¬ 
cording  to  IT  managers  at 
Computerworfd's  Business  In¬ 
telligence  Perspectives  Con¬ 
ference  here  last  week. 

The  people  and  process  is¬ 
sues  can  be  even  more  daunt¬ 
ing  than  the  technical  ones, 
said  Bubba  l^ler.  CIO  at 
Quaker  Chemical  Corp.  in 
Conshohocken,  Pa.  For  the 
past  10  years.  Quaker  Chemi¬ 
cal  has  used  software  from 
SAS  Institute  Inc.  to  do  data 
analysis  and  reporting.  But  the 
project  wasn't  a  simple  matter 
of  installing  the  applications 
and  giving  workers  access  to 
them,  be  noted. 

“It  was  a  nine-  to  10-year 
process  and  a  heck  of  a  big  in¬ 
vestment  for  a  company  of  our 
size,”  said  Tyler,  who  spoke  at 
the  conference.  He  noted  that 
the  chemical  company  moved 
ahead  slowly  and  had  to  con¬ 
tinually  re-examine  the  BI 
model  it  was  putting  in  place. 

The  addition  of  the  SAS  8 
software  also  required  Quaker 
Chemical  to  collaborate  and 
share  information  on  a  global 
basis,  prontpting  it  to  tie  em¬ 
ployees'  pay  to  tbeir  level  of 
cooperation  on  the  project. 

In  addition,  the  company 
had  to  create  a  common  busi¬ 
ness  intelligence  language  —  a 
time-consuming  task  —  and 
speed  up  the  collection  of 
data,  Tyler  said.  It  also  devel¬ 
oped  a  homegrown  query  tool 
to  make  SAS  8  palatable  for 
widespread  use.  although 
Tyler  has  said  he  might  re¬ 
place  that  with  a  set  of  simpli¬ 


fied  user  interfaces  built  into  a 
SAS  9  upgrade  released  last 
spring  [QuickLink  45897). 

Dtuing  a  user  roundtable 
discussion.  Andy  George,  se¬ 
nior  vice  president  of  technol¬ 
ogy  at  ProfitUne  Inc.  in  San 
Diego,  recommended  that 
companies  phase  in 
their  BI  implementa¬ 
tions. 

ProfitLine.  which 
manages  billing  and 
other  administrative 
functions  for  tele¬ 
communications 
companies,  uses 
Business  Objects 
SA’s  Weblntelligence 
software  to  analyze 
and  audit  customer 
bills.  George  said 
that  during  ProfitLine’s  roll¬ 
out  ensuring  the  validity  of 
data  was  a  big  challenge  be¬ 
cause  so  many  people  were 
accessing  information  and  in¬ 
advertently  corrupting  it.  That 
prompted  the  company  to  put 
a  “data  czar”  in  charge  of 


maintaining  the  integrity  of 
data,  he  said. 

Information  security  was  a 
major  issue  for  the  municipal 
government  of  Falls  Church. 
Va.,  said  panelist  Shirley 
Hughes,  the  city's  chief  finan¬ 
cial  officer  and  general  man¬ 
ager.  When  Falls 
Church  moved  from 
2,200  separate 
spreadsheets  to  a 
more  consolidated 
business  intelligence 
system,  it  required 
all  employees  to 
read  and  sign  a  doc¬ 
ument  that  ex¬ 
plained  proper  pro¬ 
cedures,  such  as  not 
sharing  passwords. 
In  addition,  access 
to  the  BI  s^em  is  ‘Tightly 
controlled.”  Hughes  said. 

Proper  maintenance  of  data 
being  used  in  BI  applications 
is  so  crucial  that  companies 
should  seek  legal  advice  about 
what  can  and  can't  be  stored 
on  a  loi^-term  basis,  said  AI 


Brill,  senior  managing  director 
of  technology  services  at  Kroll 
OnTVack  Inc. 

The  Eden  Prairie,  Minn.- 
based  company  uses  home¬ 
grown  analytical  systems  lo 
help  collect  and  present  data 
to  lawyers  for  use  in  court.  But 
Brill  warned  of  “vampire"  data 
that  could  linger  in  a  system 
for  years  and  then  “come  back 
to  bite  you  in  the  neck."  As  an 
example.  Brill  cited  the  possi¬ 
bility  that  old  e-mail  messages 
could  be  subpoenaed  during 
litigation. 

End-user  access  to  BI  sys¬ 
tems  has  to  be  monitored  reg¬ 
ularly  and  kept  current.  Brill 
added,  noting  that  workers 
who  change  jobs  within  a  com¬ 
pany  might  retain  the  ability 
to  access  data  they  should  no 
longer  be  able  to  see. 

Brill  described  business 
intelligence  as  potentially 
the  roost  important  technolo¬ 
gy  investment  that  a  company 
can  make.  “It  deserves  the 
kind  of  planning  and  thinking 
that  a  project  that  potentially 
means  life  and  death  for  a 
company  should  have,”  he 
said  “I  don't  think  there  are 
any  recipes  for  success,  but 
there  are  a  heck  of  a  lot  for 
foilure  -0497W 


Usera  Seeldng  Ways  to  Analyze  Unstructurad  Data 


PALM  OeSCftT.  CAUP 

For  soma  ittHdiea  Rm  BusF 
nan  IMrfkNnn  FWspadNes 
Coniaanaa.IhantoltilgcW* 
lar^a  inuoNaa  tryhiQ  to  aapki 
various  lypK  ol  ungfruciured 
dtos  to  ha!)  fengnwe  carporale 
pertominceL 

SawnI  IT  mamoan  at  the 
avani  safe}  tfwy>i  pusulng  vMys 
of  ueino  inlonniton  such  S6  ga¬ 
per  doajmanto,  tort  Abb,  and 
frtnai  and  votemal  maasMs 
forbusfriessMatgancepur- 
poaes'evanIhouohtiaInfDr- 
malion  isn't  lonnatted  In  data 
warahousa  tables. 

For  eample.  Ms/Apex  6nwp 
Holc9i(p  pim  over  lha  next 
year  to  start  (Bing  SAS  Institute 
softMira  and  a  hofnegriMn  tool 
to  (nine  medcN  dates  lacxirds 
for  tetomialtaa  accordng  to 
Jody  ffonazzo.  dbactor  of  econo- 


fBatocridcafrataqyatthetrsup 
anca  farvfeaa  company  to 
ntecatOANJ. 

Tha  oomiHny  almady  UM8  a 
SASMbMadByrtimfafmih 
caRona  such  aa  craaRng  pri^ 
fflodelifartaataa>s.Bulftns- 
20  add  Bpaddly  fratead  stafNn 
how  to  manualy  cul  dMa  from 
madcal  dates,  sNch  can  ba 
hundreds  or  auan  thouaandB  of 
pagiB  tana  1b  dmpNy  that 
proceaa,  MN/Apat  la  daMtapteg 
a  tod  thte  wi  vMffr  vrilh  the  SAS 
softMora  and  Indudi  a  sat  of 
bdHi  lulaa  for  automdteo  the 
process  of  paiBteD  the  tefomta* 
ttontedateis. 

HftR  Block  fob's  Option  One 
UortgaoB  Carp,  subaidtary  ptans 
Id  cuslom-dewtop  a  fodm  that 
can  conwrt  inbound  and  out¬ 
bound  cdfr  Mo  saarchedB  data, 
said  Matt  Sfonaltar.  dbactor  of 


twfoaas  fofomtaiow  at  the 
kvkta.  Qjt-baaM  fondar. 

QpBon  Onaafnadyoaaa  a 
mb  of  aoRutofrlmvi  Otoda 
Carp,  aid  MiEnaafI  Cnpi  to 
ha^  aiRitoyiia  atoaas  and 
maraoi^  rUs  on  toana,  Slorr 
daradd.NoalaaildBd.1 
hopas  to  eoRMBrt  ifcoidfoBi 
pboiB  cate  foto  a  teal  tamal 
that  can  ba  uaad  to  abidy  tie  t«- 
harionl  ptttami  of  ddtaquani 
bommaR  and  fry  to  kfonify 
cuatomam  nfw  pNn  to  fte  towr 
suRs  agafrat  foe  company. 

Rnr  hulMicA  Rw  AppirAllafi 

viB  ba  abto  to  trade  how  many 
times  a  bomwia  aaiN  tte  word 
Hfoatoduriqiscdl  and  than 
help  QpBon  One  amptoyaeB 
Bears  tie  BiiMiood  that  ha  wi 
tale  the  compsny  to  court,  Stor^ 
aka  ate. 

-kbrcLSongti 
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Imagine  I.T.  that's  flexible  enough  to  help  you  reach  your  business  goals  quickly  and  efficiently.  The  S.kP  NetWearer'  platform  speeds  integration 
and  makes  the  job  of  managing  applications  a  lot  more  manageable.  So  you  can  make  changes  and  implement  new  strategies  faster  than  ctcr. 
Visit  sap.com/necweaver  or  call  800  880  1727  to  seize  opportunities  as  they  arise. 
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Ex-CIO  Promotes  Rural  U.S. 
Alternative  to  Offshoring  IT 


Low-cost  services 
firm  does  work  in 
Arkansas  facilities 


eV  MTmCK  THIBODEAU 

Kathy  BRiTTAtN 
White,  a  former 
big-league  CIO,  is 
capitalizing  on  her 
connections  to  win  clients 
lor  her  tiny,  rural  IT  services 
company,  which  she  hopes 
will  eventually  compete  with 
offshore  development  finns. 

White’s  Ann  is  getting  inter¬ 
est  and  IT  work  from  marquee 
companies  such  as  Mattel  Inc., 
Sansoff  Corp.  and  Cardinal 
Health  Inc.  where  White  was 
CIO  from  1999  to  March  2003. 

That’s  not  bad  for  a  year-old 
business  based  in  Jonesboro, 
AHl.  that  has  two  development 
centers,  each  with  15  employ¬ 
ees.  White,  founder  of  Rural 
Sourcing  Inc  (RSI),  is  a  long¬ 
time  supporter  of  using  low- 
cost  IT  workers  in  rural  areas 
of  the  U.S.  instead  of  sending 


technology  work  to 
India  or  China. 

People  who  know 
White,  such  a.<i  Rich 
Kurowski,  vice  presi¬ 
dent  of  IT  atClardi- 
nal  in  Oublin,  Ohio, 
said  her  IT  savvy 
^es  her  model  the  ^ ' 
potential  to  work. 

’’Kathy  can  make 
things  happen,  and 
does  make  things 
happen,”  he  said 

Kurowski.  who  is  consider¬ 
ing  a  pilot  IT  project  with  RSI. 
said  he  sees  White’s  model  as 
an  alternative  to  offshoring. 

’’She  knows  bow  high  the 
bar  is  for  really  putting  this  in 
place,”  said  Joe  Eckroth,  CIO 
at  Mattel.  ’’She  understands 
what  the  end  result  has  got  to 
be.”  White  is  on  the  board  of 
directors  at  the  El  Segundo, 
<2alif.-ba$ed  toymaker. 

While’s  approach  is  to  build 
development  centers,  linked 
to  local  universities,  that  are 
professionally  managed  and 


'  '’f>gcc*n,|  r  rjit^Tig.j 

to  n'o^iijp  a 
quality  product ' 


feature  rigorous  de- 
velopment  method- 
ologies  and  training. 
VB  "The  ongoing  chai- 
™  V  lenge  is  to  provide  a 
quality  product,  just 
like  any  company 

would”  White  said 
Cost  is  a  major 
consideration.  RSI 
charges  $38  to  $60 
per  hour,  depending 
on  the  skills  re¬ 
quired  Eckroth.  who  has  been 
using  RSI  workers  for  about  a 
year,  said  the  cost  is  about  a 
third  of  what  it  is  in  major 
metropolitan  areas.  He  said 
RSI  is  ideal  for  projects  that 
"you  want  to  keep  near  you, 
like  business  intelligence” 

Business  Connection 

In  the  past  few  weehs,  SamoflF 
CIO  Tim  Mitchell  assigned 
RSI  some  intranet  develop¬ 
ment  work  that  would  other¬ 
wise  have  gone  to  his  olhhore 
provider.  But  he’s  known 
White  from  professional  CIO 


Compuware  Expands  Analysis 
Tools  for  Visual  Studio  Users 


BY  HtATHeB  HAVENSTEIH 

Looking  to  help  Microsoft  de¬ 
velopers  purge  bugs  earlier  in 
the  development  cycle,  Cfom- 
puware  last  week  said  it 
plans  to  add  a  pair  of  tools  for 
eliminating  security  vulnera¬ 
bilities  irom  applications  and 
testing  their  ability  to  with¬ 
stand  processing  errors. 

The  unnamed  products  arc 
designed  to  work  with  Micro¬ 
soft  Ckirp.'s  Visual  Studio  de- 
velf^ment  tools  and  will  be 
released  as  part  of  Compu- 
ware’s  DevPartner  perfor¬ 
mance  analysis  softwrare  line. 
Compuware  also  said  the  next 
release  of  its  E>evPaitDer  Stu¬ 
dio  Professional  Edition  tool 
set  is  due  m  nud-2(X)^  after 
Microsoft’s  planned  launch 


of  Visual  Studio  2005. 

Peter  Vaihol.  DevPartner 
product  manager  at  Detroit- 
based  Compuware,  said  the 
plans  for  adding  new  function¬ 
ality  to  DevPartner  Studio 
haven't  been  finalized.  But,  be 
noted,  the  upcomii^  release 
will  provide  more  advanced 
performance  analysis  plus 
built-in  advice  for  improving 
application  performance. 

"We’re  taking  a  nwre  holis¬ 
tic  view  of  application  perfor¬ 
mance,”  Varbol  said.  ’TVc’re 
not  only  presenting  (develop¬ 
ers]  with  information  on  many 
different  aspects  of  their  ap¬ 
plications'  performance,  we’re 
also  advising  them  on  what 
they  can  do  about  it” 

Compuware's  first  new  tool. 


expected  to  be  available  by 
year’s  end.  will  simulate  at¬ 
tacks  on  applications  to  help 
developers  identify  security 
vulnerabilities.  The  second 
product  is  being  tailored  to 
help  developers  ensure  appli¬ 
cation  reliability  when  han¬ 
dling  errors,  something  that 
Varhol  said  is  typically  diffi¬ 
cult  to  test  That  tool,  expect¬ 
ed  to  be  out  early  next  year, 
will  leverage  fault  simulation 
techiKilogy  to  emulate  real- 
world  errors. 

The  new  products  are  de¬ 
signed  to  corral  application 
errors  early  in  the  develop¬ 
ment  process,  when  they  can 
be  fixed  at  less  cost  and  more 
quickly  than  if  they  move 
further  along  in  the  develop¬ 
ment  cycle,  said  IDC  analyst 
Melissa  Webster. 

Ormpuwarc  hasn’t  set  pric- 
ir^  for  either  of  the  upcoming 
products.  0  49001 


organizational  work,  and  that 
connection  opened  the  door. 

Mitchell  said  he's  especially 
interested  in  RSI  as  a  poten¬ 
tially  reliable  and  stable  source 
of  U.S.  workers,  a  requirement 
for  some  government  con¬ 
tracts.  Sarnoffis  a  Princeton, 
N.J.-based  defense  and  elec¬ 
tronics  company  and  the  suc¬ 
cessor  to  RCA  Laboratories. 

Wooed  by  state  officials, 

RSI  will  open  a  facility  in 
New  Mexico  in  January  and 
one  in  North  Carolina  by  June. 
White  said. 

Other  firms  are  trying  the 
low-cost  domestic  model,  too. 
leff  McCaskey,  president  and 
CEO  of  Aurora  Consulting 
Group  Inc.,  a  5)-employee  IT 
contractor  on  the  outskirts  of 
Buffalo,  said  pricing  below 
major-market  costs  "is  exactly 
how  we  survive.* 

McCa^ey  said  he  pays  his 
Web  developers  560,000  to 
$80,000  per  year,  while  simi¬ 
larly  skilled  workers  in  the 
New  York  metro  area  can  earn 
six  figures.  He  added  that  he’s 
convinced  be  can  compete 
with  offshore  firms.  Mattel’s 
Fisher-Price  division  is  among 
his  customers. 

Big  IT  services  firms  also 
use  workers  in  low-cost  areas 
of  the  U.S..  not  just  at  of&bore 
ntes.  Capgemini  U.S.  LLC  for 
instance,  operates  22  service 
centers  worldwide,  including 
a  SOO-etnployee  site  in  Kansas 
Dry.  Ma.  a  low-cost  area. 

Kansas  City  employees  sup¬ 
plement  offshore  development 
by  working  on  projects  that 
don't  require  additional  cus¬ 
tomer  interaction  and  rely 
heavily  on  repeatable  develop¬ 
ment  processes,  said  Terry 
lost,  vice  president  of  out¬ 
sourcing  services  at  Cap- 
gemini.  He  said  be  questions 
whether  a  rural  facility  can 
truly  scale  up  to  handle  big 
IT  projects. 

But  White  said  she  doesn’t 
see  a  problem.  She  noted  that 
a  recent  help-wanted  ad  for  a 


H-1B  Visas 
Nearly  Gone 
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granted  to  foreign  workers,  set 
at  65.(XX)  tor  the 2005  fiscal 
year  the!  began  Oct  t  B  ex¬ 
pected  to  be  rearbed  within 
weeks. 

Appficetions  can  be  filed  sbr 
tnonihs  before  the  fiscal  year 
begins,  and  by  August  the  U.S. 
(Citizenship  and  Inmigrabon 
Services  agency  had  recarved 
45,900  H-C  petitions.  Based 
on  that  pace,  immigralion  ex¬ 
perts  expect  the  cap  to  be 
reached  at  Its  aerii^  poM 
ever  in  the  fiscal  year. 

the  fiscal  2004  cap.  ^  set 
at  66.000.  wes  reach^  in 
about  five  months. 

There  has  baen  a  push  m 
both  houses  of  Congress  to  tn- 
creaseexemptfonlmAsforfor- 
eign-bom  nMduals  who  have 
earned  RiOs  or  mestar’s  de- 
(gees  from  U.S  universities. 
Butactionbeforethesched- 
uiedOcLScongressiondad- 
jcurvnent  is  seen  as  unirely. 

VicGoetanImmigrationai- 
tomey  In  Greanbeit  Md..  said  a 
quick  dosing  of  Ihe  cap  wodd 
leave  employees  unaUe  to  hire 
NgNyeducaledfoteignprdes* 
sfonals  for  naarty  a  year.  If  we 
are  mdong  fiiat  [educationaf] 
investment  we  need  to  reap 
the  telum  of  that  investment* 
Goeisaid. 

BulRiJSsHanison.iBgi5la- 
therepreeentairveforlheCEE- 
USA.  said  f  he  visa  progrsn 
‘crealBS  a  strong  ncantlve  to 
push  down  wages  and  dBcour- 
ages  employmerd  of  American 
workers.” 

-f^lrickThMedu 

program  manager  drew  360 
applicants  from  all  over  the 

"I  haven't  been  a  little  op¬ 
erator.”  White  said.  ”rve  been 
at  very,  very  big  companies.  I 
don’t  intend  to  stay  small” 
049796 
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^  CootMtr  tN  dots  connoctod.  Voice  over  IP  is  at  ttie  heart  of  The  Latin  School 

•••••••••«•••  Chicago’s  new  network.  Thanks  to  an  integrated  platform.  Web  site  and  phone 

SS*Sm**«**«SSS  system  interm^ion  is  easy  to  manage.  Features  and  new  users  are  easy  to  add.  And 

*S*****SS2**t*  ^  phones  «  classrooms,  it’s  easy  to  access  important  Wet>t>ased  information 

*  **••*•**••  Like  whether  the  day’s  lunch  is  gried  cheese  or  rawoi.  Rnd  out  more  about  how  we're 

hekmg  Latin  School  connect  the  dots  at  sbc.corVdots.  GOMG  BCYON)  THE  CAUJ 
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Physical,  IT  Security  Converging,  Users  Say 


Fa’nd  increases 
effectiseness,  cuts 
costs  at  comp;mic's 

BV  JAtKUMAH  VIJAVAN 

DALLAS 

HEKi  i.s  a  growing 
need  for  companies 
to  unify  the  manage¬ 
ment  of  IT  and  phys¬ 
ical  security  functions,  despite 
the  challenges  involved  in  do¬ 
ing  so.  said  users  and  analysts 
at  the  ASIS  International  30CM 
trade  show  here  last  week. 

A  closer  integration  of  the 
two  functions  can  yield  signif¬ 
icant  cost  benefits  and  im¬ 
prove  an  organization's  ability 
to  detect  and  respond  to  prob* 
lL*ms.  said  Lew  Wagner,  chief 
information  security  ofTiccr  at 
Clarian  Health  in  Indianapolis. 

"You  haw  cnhanL'ed  respon- 
sivcncs.s  (to  security  incidents! 
because  j’ou  don't  have  to  wor¬ 
ry  about  cross-coordinating 
your  efforts."  Wagner  said. 

The  increased  awareness 
and  information  sharing  that 
are  enabled  by  a  more  inte¬ 


grated  security  operation  also 
help  cut  costs  by  eliminating 
duplicate  efforts,  he  said. 

Underscoring  the  trend. 
Alexandria,  Va.-based  ASIS  In¬ 
ternational  and  the  Interna¬ 
tional  Information  Systems 
Security  Ccnificaiion  Consor¬ 
tium,  known  as  (ISC>^.  last 
week  announced  that  thc>' 
have  aga^cd  to  mutually  en¬ 
dorse  each  other's  profession¬ 
al  certifications.  ASIS  admin¬ 
isters  the  Certified  Protection 
Professional  credential,  which 
is  largely  for  physical  sccurity 
practitioners.  while  (ISO-  ad¬ 
ministers  the  popular  CISSP 
program  for  I'T  workers. 

Driving  the  need  for  unified 
security  management  is  the 
increasing  use  of  IT  in  physi¬ 
cal  security  products  and  ser¬ 
vices,  said  Greg  Holliday,  re¬ 
gional  director  of  security 
at  Crescent  Real  Estate  Equi¬ 
ties  Ltd.  in  Dallas. 

The  biggest  (rend  here  at 
the  show  Ls  how  computers 
and  IT  as  a  whole  are  impmv- 
ing  (he  delivery  of  security 
services."  Holliday  said. 


Improvements  in  computer 
memory,  storage,  networking 
and  processing  c.npabilities 
have  made  technok^ies  such 
as  physical  access  control  and 
video  monitoring  more  pow¬ 
erful  than  ever  before,  said 
Glenn  Sandford,  vice  presi¬ 
dent  of  Whelan  SFl,  a  prov¬ 
ider  of  physical  security  ser¬ 
vices  in  Columbia.  Md. 

"The  traditional  security 
folks  are  very  challenged  by 
the  rapid  pace  of  information 
technology  being  used  in 
physical  security  products  and 
services."  said  Ray  Bernard, 
principal  L'onsultani  at  Ray 
Bernard  Consulting  Services 
in  Lake  Forest.  Calif. 


Companies  also  increasing¬ 
ly  view  IT  and  physical  securi¬ 
ty  as  part  of  a  broader  set  of 
operational-risk  management 
issues  that  need  unified  over¬ 
sight.  said  Steve  Hunt,  an  ana¬ 
lyst  at  Forrester  Research  Inc. 
in  Cambridge,  Mass.  That 
trend  is  further  blurring  the 
traditional  tines  that  have  ex¬ 
isted  between  the  two  func¬ 
tions,  he  said. 

Areas  such  as  user  provi¬ 
sioning.  access  control  and  ac¬ 
cess  monitoring  in  particular 
can  benefit  from  the  integra¬ 
tion.  Bernard  said. 

Another  example  is  smart 
cards  that  use  identity  infor¬ 
mation  in  an  integrated  direc¬ 


tory  server  to  control  both  fa¬ 
cility  and  network  access, 
Wagner  said.  “Just  imagine 
the  number  of  keys  you 
wouldn't  have  to  worry  about 
losing  or  tracking  down." 
he  noted. 

But  companies  have  to  be 
"careful  in  defining  the  touch 
points  between  IT  and  physi¬ 
cal  security."  Sandford  said. 

Because  of  the  specialized 
nature  of  each  function,  the 
integration  has  to  take  place 
more  at  the  management  level 
than  at  the  technology  level, 
he  added. 

Departmental  turf  issues 
and  the  vastly  different  back¬ 
grounds  in  which  the  two  se¬ 
curity  functions  have  evolved 
also  pose  a  challenge  to  inte¬ 
gration.  Wagner  said. 

Bernard  agreed,  saying  that 
rather  than  letting  technology 
issues  be  the  focus  of  integra¬ 
tion,  it  is  more  important  to 
"collaborate  and  stratc^ze"  at 
the  management  IcvcL 

"The  technology  integration 
follows  where  it  fits  that  strat¬ 
egy."  he  said.  O  49788 
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in  Easton.  Pa.,  that  makes 
crayons  and  other  products. 

At  the  same  time.  Sit^ried 
noted  that  he's  optimistic 
about  the  long-term  ROI  po¬ 
tential  from  an  increased  flow 
of  information,  which  is  ex¬ 
pected  to  help  his  company 
improve  forecasting  and  plan¬ 
ning  with  iLs  suppliers. 

A  manager  of  e-commerce 
at  a  midsize  producer  of  con¬ 
sumer  goods  said,  "We  were 
looking  Ibr  some  more  defini¬ 
tive  ways  to  get  ROI.  The 
(speakers)  were  cither  keeping 
it  (o  themselves,  or  it's  not 
there  yet 

"We  see  benefits  to  this. 

We  see  it  coming.  But  it's  not 
there  yet,  and  we  don't  have 
the  resources  of  Procter  & 
Gamble."  added  the  manager, 
who  asked  not  to  be  named. 

Efrain  Barreiro,  director  of 


operations  at  Elan-Polo  Inc.  in 
Nashville,  said  the  footwear 
maker  and  distributor  faces 
a  January  2006  deadline  to 
comply  with  a  directive  from 
Wal-Mart  to  put  RFID  tags  on 
pallets  and  cases  shipped  to 
the  retailer's  Dallas-area  dis¬ 
tribution  centers.  He  said  the 
ability  to  press  a  burton  and 
get  an  accurate  inventory 
count  would  pren'ide  great 
benefits. 

High  Tag  Costs 

But  Barreiro  said  that  as  much 
as  70%  of  Elan- Polo's  shoe 
business  involves  high-volume, 
low-price  products.  When  he 
runs  the  numbers,  he  needs 
5<cnt  tags  to  make  the  RFID 
im-esement  pay  off. 

However.  Gartner  Inc.  ana¬ 
lyst  Jeff  Woods  estimated  that 
RFID  tags  typically  are  still 
selling  for  40  to  50  cents  apiece. 

In  many  ways,  the  pros  and 
cons  of  adopting  RFID  haven’t 
changed  substantially  since 


the  technolc^  became  a  hot- 
bution  issue  last  year,  after 
Wal-Mart  directed  that  Us  top 
100  suppliers  begin  tagging 
pallets  and  cases  by  the  start 
of 2005.  Tire  retailer  updated 
its  plans  in  June,  saying  it  ex¬ 
pects  the  next  200  suppliers 
to  be  on  board  at  the  start  of 
2006. 

'TTic  faster  payback  is  really 
going  to  be  upstream,  in  work¬ 
ing  with  our  raw  materials  and 
finishing-goods  suppliers  and 
looking  at  bow  we  manage  our 
materials  within  our  opera¬ 
tions,"  said  Mike  O’Shea,  di¬ 
rector  of  corporate  RFID 
strategics  and  technology  at 
Kimberly-Clark  Corp.,  which 
started  conducting  RFID  field 
trials  in  2002. 

But  an  ROI  isn't  expected 
for  a  few  years.  First  the  Irv¬ 
ing.  Texas-based  company  has 
to  do  the  business  process  re¬ 
engineering  necessary  for  it  to 
ta)^  advantage  of  the  informa¬ 
tion  gathered  through  RFID 


technology,  according  to 
O'Shea.  He  said  that  in  the 
near  term,  Kimberly-Clark 
views  its  RFID  work  as  a  re¬ 
search  and  development  effort 
with  DO  immediate  payback. 

fun  Flannery,  director  of 
global  custonKr  development 
at  Cincinnati-based  Frocter  & 
Ciamblc  Co.,  another  early 
adopter  of  RFID,  said  the  com¬ 
pany  is  still  figuring  out  which 
business  processes  to  change. 

'•We're  working  with  our 
trading  partners,  trying  to  fig¬ 
ure  out  where  to  get  value."  he 
said.  "What’s  clear  is  that  the 
business  cases  are  goii^  to  be 
different  based  on  different 
[product]  categories." 

Flannery  said  the  justifica¬ 
tion  is  more  apparent  in 
P&G's  pharmaceutical  busi¬ 
ness.  where  RFID  is  viewed  as 
a  technology  that  can  help 
curb  counterfeit  drugs  and 
bolster  consumer  safety.  But 
in  product  categories  that  are 
optimized  around  bar-code 


technology,  there's  more  work 
to  do.  Flannery  said. 

Despite  the  encouragement 
of  early  adopters,  launching 
RFID  pilot  projects  isn't  al¬ 
ways  possible.  Greg  Vick,  di¬ 
rector  of  distribution  systems 
and  Web  development  at  Uni¬ 
fied  Western  Grocers  Inc.,  a 
Ck»mmerce.  Calif.-based  food 
wholesaler  and  cooperative, 
said  he  went  to  the  conference 
to  try  to  find  a  manufacturing 
partner  with  which  to  pilot 
RFID  technology.  But  he 
found  no  takers. 

"The  reaction  was,  'No, 
we're  not  going  to  do  this 
because  it  costs  a  lot  of  mon¬ 
ey.'  and  ‘Wc'rc  only  doing  it 
because  we  have  to,’ "  Vick 
said.  "I  understand  the  lags 
are  expensive.  But  there's  a  lot 
of  talk  here  that  'we  don't 
want  to  do  slap  and  ship.  Wc 
want  to  look  upstream.  We 
w’ant  to  find  that  value.'  But 
people  aren't  ready  to  act  yet." 
Cl  49799 
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Physical, 

Trend  increases 
effectiveness,  cuts 
costs  at  companies 

SV  JAIKUMAR  VUAVAM 

OALCAS 

HEU  IS  a  growing 
need  for  companies 
to  unify  the  manage¬ 
ment  of  IT  and  phys¬ 
ical  security  functions,  d^ite 
the  challenges  involved  in  do- 
so.  said  users  and  analysts 
at  the  ASIS  International  2004 
trade  show  here  last  week. 

A  closer  integration  of  the 
two  functions  can  yield  signif¬ 
icant  cost  benefits  and  im¬ 
prove  an  organization's  ability 
to  detect  and  respond  to  prob¬ 
lems,  said  Lew  Wagner,  chief 
information  security  officer  at 
Clarian  Health  in  Indianapolis. 

'^ou  have  enhanced  respon¬ 
siveness  (to  security  incidents] 
because  you  don't  have  to  wor¬ 
ry  about  cross-coordinating 
your  efforts,”  Wagner  said. 

The  increased  awareness 
and  infonnation  sharing  that 
are  envied  by  a  more  inte¬ 


grated  security  operation  also 
help  cut  costs  by  eliminating 
duplicate  efforts,  be  said. 

Underscoring  the  trend. 
Alexandria.  Va.-based  A515  In¬ 
ternational  and  the  Interna¬ 
tional  Information  Systems 
Security  Certification  Consor¬ 
tium.  known  as  (ISCR  last 
week  announced  that  they 
have  agreed  to  mutually  en¬ 
dorse  each  other's  profession¬ 
al  certifications.  ASIS  admin¬ 
isters  the  Certified  Protection 
Professional  credential,  which 
is  largely  for  physical  security 
practitioners,  while  (ISC)^  ad¬ 
ministers  the  popular  CISSP 
program  for  IT  workers. 

Driving  the  need  for  unified 
security  management  is  the 
increasing  use  of  IT  in  physi¬ 
cal  security  products  ser¬ 
vices,  said  Greg  Holliday,  re¬ 
gional  director  of  security 
at  Crescent  Real  Estate  Equi¬ 
ties  Ltd.  in  Dallas. 

The  biggest  trend  here  at 
the  show  is  how  computers 
and  IT  as  a  whole  are  improv¬ 
ing  the  delivery  of  security 
services.”  Holliday  said. 


Improvements  in  computer 
memory,  storage,  networidng 
and  processing  capabilities 
have  made  technologies  such 
as  physical  access  control  and 
video  monitoring  more  pow¬ 
erful  than  ever  before,  said 
Glenn  Sandford,  vice  presi¬ 
dent  of  Whelan  SFI,  a  prov¬ 
ider  of  physical  securiry  ser¬ 
vices  in  Columbia.  Md. 

The  traditional  security 
folks  arc  very  challenged  by 
the  rapid  pace  of  information 
technology  being  used  in 
physical  security  products  and 
services.”  said  Ray  Bernard, 
prittctpal  consultant  at  Ray 
Bernard  Consulting  Services 
in  Lake  Forest,  Calif. 


Companies  also  increasing¬ 
ly  view  IT  and  physical  securi¬ 
ty  as  pan  of  a  broader  set  of 
operational-risk  management 
Issues  that  need  unified  over¬ 
sight.  said  Steve  Hunt,  an  ana¬ 
lyst  at  Forrester  Research  Inc 
in  Cambridge,  Mass.  That 
trend  is  further  blurring  the 
traditional  lines  that  have  ex¬ 
isted  between  the  two  func¬ 
tions.  he  said. 

Areas  such  as  user  provi¬ 
sioning.  access  control  and  ac¬ 
cess  monitoring  in  particular 
can  benefit  from  the  integra¬ 
tion.  Bernard  said. 

Another  example  is  smart 
cards  that  use  identity  infor¬ 
mation  in  an  integrated  direc¬ 


tory  server  to  control  both  fo- 
cility  and  network  access, 
Vagner  said.  “Itrst  imagine 
the  number  of  keys  you 
wotildn’t  have  to  worry  about 
losing  or  tracking  down.” 
be  noted. 

But  companies  have  to  be 
"careful  in  defining  the  touch 
points  between  IT  and  physi¬ 
cal  security,"  Sandford  said. 

Because  of  the  specialized 
nature  of  each  fonction,  the 
integration  has  to  take  place 
more  at  the  management  level 
than  at  the  technology  level, 
he  added. 

Departmental  turf  issues 
and  the  vastly  different  back¬ 
grounds  in  which  the  two  se¬ 
curity  functions  have  evolved 
also  pose  a  challenge  to  inte¬ 
gration.  Wagner  said. 

Bernard  agreed,  saying  that 
rather  than  letting  technology 
issues  be  the  focus  of  integra¬ 
tion,  it  is  more  important  to 
"collaborate  and  strategize"  at 
the  management  level 

"The  technology  integration 
follows  where  it  fits  that  strat¬ 
egy,”  he  said.  O  48788 
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in  Eastoa  Pa.,  that  makes 
crayons  and  other  products. 

At  the  same  time.  Siegfried 
noted  that  he's  optimistic 
about  the  long-term  ROI  po¬ 
tential  fiocD  an  increased  flow 
of  information,  which  Is  ex¬ 
pected  to  help  lUs  company 
improve  forecasting  and  plan¬ 
ning  with  its  suppliers. 

A  manager  of  e*cotnmerce 
at  a  midsize  producer  of  con¬ 
sumer  goods  said.  "We  were 
looking  for  some  more  defini¬ 
tive  ways  to  get  ROL  The 
(speakers]  were  either  keeping 
it  to  themselves,  or  it's  not 
there  yet 

"We  see  benefits  to  this. 

We  see  it  cotning.  But  it's  not 
there  yet  and  we  don’t  have 
the  resources  of  Procter  & 
Gamble.”  added  the  manager, 
vdio  asked  not  to  be  named. 

Efrain  Barreiro.  director  of 


operations  at  Elan-Polo  Inc.  in 
Nashville,  said  the  footwear 
maker  and  distributor  foces 
a  January  2006  deadline  to 
comply  with  a  directive  from 
Wal-Mart  to  put  RFID  tags  on 
pallets  and  cases  shipped  to 
the  retailer's  Dallas-area  dts- 
cribution  centers.  He  said  the 
ability  to  press  a  button  and 
get  an  accurate  inventory 
count  would  provide  great 
benefits. 

High  Tag  Cots 

But  Barreiro  said  that  as  much 
as  70%  of  Elan-Polo's  shoe 
business  involves  Ugh-volume, 
low-price  products.  When  be 
runs  the  numbers,  he  needs 
5-cem  tags  to  make  the  RFID 
investment  pay  off. 

However,  Gartner  Inc.  ana¬ 
lyst  Jeff  Woods  estimated  that 
RFID  tags  typically  are  stilJ 
selling  for  40  u>  50  cents  apiece. 

In  many  ways,  the  pros  and 
cons  of  adopting  RFID  haven't 
changed  substantially  since 


the  technology  became  a  hot- 
button  issue  last  year,  after 
1^-Mart  directed  that  its  top 
100  suppliers  begin  tagging 
paUets  and  cases  by  the  start 
of 2005.  The  retailer  updated 
its  plans  in  June,  saying  it  ex¬ 
pects  the  next  200  suppliers 
to  be  on  board  at  the  start  of 
2006. 

The  faster  payback  is  really 
going  to  be  upstream,  tn  work¬ 
ing  with  our  raw  materials  and 
fimshing-goods  su^^liers  and 
lotddng  at  bow  we  manage  our 
materials  within  our  opera¬ 
tions.”  said  Mike  O’Shea,  di¬ 
rector  of  corporate  RFID 
strategies  and  technology  at 
Kimberly-Clarit  Corp.,  which 
started  conducting  RFID  field 
trials  in  2002. 

But  an  ROI  isn’t  expected 
for  a  few  years.  First  the  Irv¬ 
ing.  Texas-based  company  has 
to  do  the  business  process  re¬ 
engineering  necessary  for  it  to 
take  advantage  of  the  informa¬ 
tion  ^thered  through  RFID 


technology,  acoirding  to 
O'Shea.  He  said  that  in  the 
near  term,  fOmberty-Ctark 
views  its  RFID  work  as  a  re¬ 
search  and  development  effort 
with  no  immediate  payback. 

Jim  Flannery,  dire^or  of 
global  customer  development 
at  Cincinnati-based  Procter  & 
Ganfole  Co.,  another  early 
adopter  of  RFID,  said  the  com¬ 
pany  is  still  figuring  out  which 
business  processes  to  change. 

"We're  working  with  our 
trading  partners,  trying  to  fig¬ 
ure  out  where  to  get  value.”  he 
said  "What's  clear  is  th^  the 
business  cases  are  going  to  be 
different  based  on  different 
(product]  categories.” 

Flannery  said  the  justifica¬ 
tion  is  more  apparent  in 
P&G’s  pharmaceutical  busi¬ 
ness.  where  RFID  b  viewed  as 
a  technology  that  can  help 
curi>  count^eit  drugs  and 
bobter  consumer  safety.  But 
h)  produa  categories  that  are 
optimized  around  bar-code 


technology,  there's  more  work 
to  do,  Flannery  said. 

De^ite  the  encouragement 
of  early  adopters,  launching 
RFID  pilot  projects  isn't  al¬ 
ways  possible.  Greg  Vick,  di¬ 
rector  of  dbtribution  systems 
and  Web  development  at  Uni¬ 
fied  Western  Grocers  Inc.,  a 
Commerce.  Calif.-based  food 
wholesaler  and  cooperative, 
said  be  went  to  the  conference 
to  try  to  find  a  manufacturing 
partner  whh  which  to  pflot 
RFID  technology.  But  he 
found  no  takers. 

The  reaction  was.  "No. 
we're  not  going  to  do  thb 
because  it  costs  a  lot  of  mon¬ 
ey,'  and  'We're  only  doing  it 
because  we  have  ta’  ”  Vick 
said.  "I  understand  Che  tags 
are  expensive.  But  there’s  a  lot 
of  talk  here  that  *we  don't 
want  to  do  slap  and  ship.  We 
want  to  look  upstream.  We 
want  to  find  that  value.'  But 
people  aren't  ready  to  act  yet” 
048798 
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Dynamic  IT 


Maximum  mobility 
equals  maximum  productivity. 

And  Intel  Centrino 
mobile  technology  is  designed 
from  the  ground  up  for 
mobile  computing.  It  enables 
extended  battery  life 
in  a  new  generation  of  thin, 
light,  wireless  laptops. 

And,  Intel  works  closely  with 
industry  leaders  to 
support  a  wide  range  of  wireless 
security  solutions. 

It’s  all  about  mobility.  Unwire 
your  company  at 
intel.com/business. 

inl^. 

>g  on  your  apeofic  twowan  and  asAwM  cor^guraiwna.  Sm  hapyMnwnw.convproduoaftanirnwrnbn  nte 
UnMd  SiaiBs  and  o«wr  countnaa.  Al  rpaarvad. 


TECHNOLOGY 


Integrated  wireless.  No  need 
to  deal  with  adapter  cards. 


Power  conserving.  Advanced 
technology  enables  extended 
battery  life. 


Thin,  light  designs.  Light 
briefcases  mean  happy  users. 


High  performance.  Power 
to  run  the  most  demanding 
applications. 
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unleashed  a  wave  of  business  innovation  -  in  ev  erything  from  the  w  av  eompanies 
deal  with  customers  and  suppliers  to  the  way  they  conduct  meetings,  count  paper 
clips  and  send  correspondence.  For  years  there  hav  e  been  questions  over  the 
degree  to  which  IT  actually  increases  business  prodiietiv  itv,  but  since  the  mid- 
1990s  it's  been  clear  that  the  contribution  is  substantial.  There  are  now  enough 
studies  to  fill  a  bookcase  on  the  impact  of  I  F  on  both  enterprise  and  country- 
level  produetivitv. 


Figure  I  .K'tually  show  s  the  cor 
rcspondcncc  hctwccii  U.S.  produc 
tisiDi  growth  and  IT  iincstniciu  as 
measured  h>  the  L’.S.  gosernment  - 
with  the  growth  in  I  T  investment 
shitted  by  three  vears  tin  the 
assumpti«»n  that  it  takes  some  time 
for  the  investments  to  pav  otf. 

As  you  can  see.  in  almost  everv 
instance  where  I  T  investment  has 
gone  up  (ordviwii).  pOKluciivitv 
growth  three  years  dt)wn  the  line 
has  h>llovved-  I  he  data  does  not 
prove  a  cause  and  eftect.  but  the 
c«>rres)sondence  is  clear.  Increased 


1 1  spending  and  increased  proeluc 
tivity  go  liand  in  hand. 

Of  course,  this  is  a  picture  of  the 
macrocosm.  In  the  micnjcosm.  we 
have  plenty  <ff  other  ev  idence  that 
1 1  lias  generated  improved  coi^io 
rate  perfttmiance. 

In  spring  2()()4,  ID(!  surveved 
500  CTX)s  and  C  IOs  on  the  rela 
lionship  between  IT  investment  and 
sales  performance.  That  studv  f«)und 


that  companies  with  high  sales  per 
Ibrmance  are  also  likely  to  be  lead 
ers  in  IT.  .Additionally,  these  busi 
nesses  tend  to  increase  IT  spending 
faster  than  the  market  average, 
w  hile  keeping  an  eagle  eye  on  costs. 
Moreover,  these  sales  and  techintlo- 
gv  leaders  concentrate  their  invest 
ment  in  areas  that  give  them  more 
insight  into  their  cu.siomers. 

I  ranslated  t«t  the  enterprise  envi 
ronment.  this  means  that  companies 
that  increase  investment  in  I  f 
should  see  an  increase  in  productivi- 
t\  and  perf(»rmance.  Hut  this  is  onlv 
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Dynamic  IT 

Riding  the  Next  Wave 

of  Business  Innovation 

and  Productivity 

Over  the  past  two  decades,  $  1 0  trillion  in  information  technology  investment  has 

unleashed  a  wave  of  business  innovation  -  in  everything  from  the  way  companies 

deal  with  customers  and  suppliers  to  the  way  they  conduct  meetings,  count  paper 

clips  and  send  correspondence.  For  years  there  have  been  questions  over  the 

degree  to  which  IT  actually  increases  business  productivity,  but  since  the  mid- 

1990s  it’s  been  clear  that  the  contribution  is  substantial.  There  are  now  enough 

studies  to  fill  a  bookcase  on  the  impact  of  IT  on  both  enterprise  and  country- 

level  productivity. 

Figure  1  actually  shows  the  cor¬ 
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true  if  they  invest  in  the  right  tech¬ 
nolog}'  at  the  right  time;  manage 
their  investment  and  implementation 
well;  and  manage  their  non-IT 
investment  to  maximize  their  IT 
investment. 

And  it  goes  without  saying  that 
companies  that  do  increase  produc- 
tivit)'  through  IT  do  not  do  so  in  a 
vacuum.  Their  peers  and  competitors 
will  be  investing  in  IT  as  w'cil.  You 
can’t  just  improve  a  business  process 
and  stop  there.  Innovation  needs  to 
be  ongoing. 

To  sustain  this  innovation  -  con¬ 
tinually  improving  business  processes 
while  simultaneously  engineering  out 
costs  -  IDC  envisions  a  new  genera¬ 
tion  of  information  tcchnolog}'  that 
wc  call  “dymamic  IT." 

The  concept  is  simple.  Dynamic 
IT  is  about  creating  a  high-perform¬ 
ance  IT  capability’  that  can  support 
the  rapid  pace  of  business  change. 
The  dynamic  IT  framework  untan¬ 
gles  the  patchwork  of  isolated, 
under-lc\craged  infrastructure,  data 
and  applications  chat  today  arc  com¬ 
mon  in  many  companies.  It  turns 
hard-wired  point  solutions  into 
shared  ser\ices. 

The  goal  of  dynamic  IT  is  not  to 
make  an  enterprise  merely  a  little 
more  responsive  to  changing  busi¬ 
ness  needs,  but  rather  an  order  of 
magnitude  more  responsis'c.  It’s  a 
lofry  goal,  to  be  sure,  but  as  we  will 
show,  many  of  the  technologies  and 
business  practices  required  to  meet  it 
are  already  here. 


Why  dynamic  IT? 

In  a  controversial  article  published 
in  the  May  2003  “Han’ard  Business 
Re\  iew,"  Nicholas  Carr  argued  that 
IT  is  now  a  commodity  that  no 
longer  offers  sustainable  competitive 
advantage.  Too  many  companies 
have  access  to  the  same  packaged 
solutions  for  any  IT-driven  advantage 
to  last  for  long.  IT,  Carr  contends,  is 
like  electricity  or  steel  -  critical  to  a 
company  but  not  a  source  of  difler- 
entiadon.  Business  and  IT  executives 


have  been  arguing  since  the  article 
appeared  with  Carr’s  basic  premise, 
but  they  agree  that  IT  is  critical  to 
business  (Figure  2). 

One  sign  of  the  importance  of  IT 
is  the  amount  of  time  linc-of-busi- 
ncss  executives  and  CEOs  spend  on 
IT  issues:  20%!  This  includes  plan¬ 
ning,  evaluating,  reviewing  and  test¬ 
ing.  Over  25%  of  respondents  expect 


their  involvement  with  IT  to  increase 
over  the  next  year  (none  thought  it 
would  decrease),  and  over  50%  sav 
their  company  should  be  more 
aggressive  in  using  IT  to  attack  busi¬ 
ness  problems. 

In  another  survey  of  large  U.S. 
enterprises,  top  business  and  IT 
executives  told  IDC  the  biggest 
problems  they  face  aren't  technologi¬ 
cal  in  nature.  Rather,  the  top  chal¬ 
lenges  arc  related  to  cutting  waste 
and  inefficiency  in  the  companv; 


reorganizing  to  better  lace  the  mar¬ 
ket;  and  doing  a  better  job  of  deal¬ 
ing  with  customers,  partners  and 
suppliers. 

Can  IT  help  address  these  busi¬ 
ness  problems?  How? 

This  is  where  dynamic  IT  comes 
in.  Even  if  author  Nicholas  Carr  is 
wrong,  it’s  clear  that  the  days  of 
long-lasting  market  stabilitv  and 


Figure  1.  Growth  in  U.S.  productivity  follows  growth  in  IT  investment 
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competitive  advantage  are  over  (if 
they  ever  existed  at  all).  Management 
priorities  are  increasingly  driven  by 
the  need  to  respond  quickly  to  fast- 
moving  market  dynamics.  A  sharp 
rise  in  oil  prices.  The  demise  of  a  key 
supplier.  An  acquisition.  A  new  law 
or  court  decision.  A  dock  strike. 
Offehorc  competitors. 

Indeed,  the  only  way  to  gain  sus¬ 
tainable  competitive  advantage  is  to 
continually  establish  and  re-establish 
temporary  competitive  advantage. 


ment  to  the  shopping  patterns  found 
in  individual  stores.  And  why  do  you 
think  Wal-Mart  is  pushing  radio  fre- 
qucnc)'  identification  (RFID)  so 
heavily?  It’s  all  in  the  quest  to  keep 
store  shelves  stocked  at  all  times. 

But  using  IT  to  support  such  real¬ 
time  adjustments  to  changing  busi¬ 
ness  conditions  is  no  easy  task.  While 
organizations  face  growing  pressure 
to  become  more  dynamic,  IT  has 
historically  responded  slowly  to  busi¬ 
ness  change.  In  many  industries,  the 


dancy;  and  improving  the  adaptabili- 
n’  of  business  operations  with  a  lay¬ 
ered,  service-oriented  IT  environ¬ 
ment  that  allows  changes  to  be  made 
in  individual  parts  of  a  business  solu¬ 
tion  without  impacting  the  rest  of 
the  solution. 

Adding  to  the  challenge  of  build¬ 
ing  dynamic  IT  is  business  execu¬ 
tives’  perception  that  IT  costs  are 
too  high  and  IT  asset  utilization  too 
low.  As  a  result  of  this  perception, 
much  of  the  build-out  of  dynamic  IT 
will  have  to  be  self-funded. 


Figure  2.  Over  79°o  of  business  executives  say  IT  is  critical  or  important 


How  much  of  a  factor  is  IT  operations  performance 
to  your  business  success? 

Not  at  all  a 
factor 
4.0% 

Minor  factor 
16.5% 


Important 
factor 
41.0% 

Source:  IDC»  LOB  ExetuttPr  Surrey.  200* 


That’s  why  companies  as  diverse 
as  3M  and  Best  Buy  are  continually 
searching  for  IT-bomc  advantages. 
3M  has  a  “2X/3X  initiative”  intend¬ 
ed  to  double  the  number  of  products 
it  creates  every  year  -  a  task  that 
leans  heavily  on  IT.  Best  Buy  has  a 
“customer-centric  stores  initiative” 
that  seeks  to  tailor  store  replenish¬ 


speed  of  business  cycles  outstrips  the 
speed  at  which  IT  can  react. 

Two  key  goals  of  replacing  the 
numerous  hard-wired  connections 
among  dedicated  IT  resources  with 
many  more  “virtual”  connections 
among  shared  resources  arc  improv¬ 
ing  operational  efficiency  through 
resource  sharing  and  reduced  redun¬ 


The  path  to  dynamic  IT 

IDC  sees  the  transformation  to 
dynamic  IT  unfolding  on  two  paral¬ 
lel  paths.  First,  there’s  business  strat¬ 
egy'  and  execution.  To  respond  faster 
to  changing  business  needs,  dynamic 
IT  needs  to  improve  the  organiza¬ 
tion’s  ability  to  develop  and  integrate 
applications,  data  and  workflow,  as 
well  as  to  monitor  business  perform¬ 
ance  and  speed  operational  adjust¬ 
ment  to  market  changes. 

The  second  path  is  IT  operations 
management  and  automation. 
Dynamic  IT  needs  to  deliver  on 
higher  service-level  performance  and 
lower  IT  infrastructure  costs.  It  must 
also  link,  monitor  and  manage  all  IT 
operational  elements  in  the  enter¬ 
prise.  The  latter  imperative  includes 
automating  labor-intensive  tasks; 
developing  end-to-end  management 
capabilities;  reducing  hard-wired 
inflexibility  through  virtualization; 
and  adopting  flexible  sourcing  and 


IDC  Outlook  on  ITs  Contribution  to  Business  Productivity 


Toshiba  recommends 
Microsoft  Windows  XP 
Professional  for  Business. 


/ 


nni  player 


Tecra  A2  notebook  series 


M,449 


with  Intel 
Centrino  Mobile 
Technology 


,  n  rjgg.  Qt  ,.5  DeoD'e 

ir-s  t'ley  OeoencJ 
:  A? 'io‘eDoo'<s  ^'•on^  Tosnioa  a'-- 
•  ■  a  C'ea^ec  soec  f  ca  > 

:  • ' .  ae  '*=■  at)  zo--s  stei^cy 
:  ■  -  . ■'ney  a’e  ^  gfi'>  fie»'D  -- 

''  g.  :  ‘a.  '^ee;  tre  -^eecs  c 
'  •  •  'ess  Anc  Keeve'^v  Tosi-c,-. 


TOSHIBA 


Volume  discounts  available. 

■  toshibadirect.con-i/idg 
800-998-8033 


SHORTLIST 

YOUR 

SHORTLIST 


AdMonal  charges  app^S»ooartsuppwiiochxJesne*l-business-<3ayfesp(y«flsofT«c^^  IBM.  the  e-busmess  logo  eServer.lheeSefverkjgoa«3»Senesafetra(lemafksorf«aiM*«<i- 
eaaefrBr»so(intefrai«>iaiBusnessMachtoesCofpwaiion«theUf^  Intel  Intel  inside  tt«  Intel  insiOetogo  and  Inwte^awiraaerrarwwregtst^ 


The  ultra  reliable  IBM  eServer  xSeries  365  system  -  with  powerful  Intel’  Xeon  “  prtwessors  -  can  make  your  work,  and 
IT  selection  process,  easier.  With  three  levels  of  memory  protection  and  a  comprehensive  monitoring  of  key  components,  ifs 
all  about  uptime.  So  you  get  outstanding  reliability  when  running  mission-critical  ERR  collaboration  and  database  applications. 
The  works.  Management  is  easier,  too.  You  can  have  around-the-clock  remote  access,  on  demand.  And  system  status  can  be 
available  even  when  powered  off.  For  more  on  highly  available,  manageable  xSeries  servers,  go  to  imi.com/esenrer/advantage 


5  reas^s  rno^e  and  more  bus/ne^s  are  turning  to  IBM  eServer  xSeries  systems  with  Intel  Xeon  processors. 


Scale  1-16  way  with  select  \ 
models.  Pay  as  you  grow 

IBM  Director  systems 
management. 

Linux-ready  through  i 
the  entire  line. 

Mainframe-inspired 

technologies. 

24  7  365  optional  onsite 
hardware  support. ' 

0*  Intel  Corporation  of «  soteidanes  m  fr*  Uniiea  Stales  and  ooier  coun*nes  0<hercon<i»iy  produa  aryJ  senflcs 
AM  righls  reserved 


'names  may  be  eademsrks  or  serves  nwks  of  outers  ’  2004  ISM  Corporahon 


A  Supplement  to  IDG  Publications 


1 


payment  options. 

The  real  payoff  will  come  when 
the  transformations  down  these  two 
paths  are  intimately  linked.  The  left 
side  of  Figure  3  illustrates  how 
dynamic  IT  debvers  value,  but  the 
right  side  shows  where  the  real  lever¬ 
age  comes  from. 

In  most  enterprises,  the  two 
domains  (business  strategy  execution 
and  IT  operations  and  management) 
have  historically  been  segregated. 

But  for  a  company  to  become  a  truly 
dynamic  enterprise,  it’s  vital  that 
these  barriers  be  breached.  Business 
executives  need  to  understand  how' 
IT  can  be  applied  to  improve  their 


employed  in  an  orchestrated  effort  to 
help  create  this  linkage. 

Hinge  technologies 

What  are  the  critical  building 
blocks  that  organizations  need  to 
create  a  dynamic  IT  capability.^  IDC 
has  identihed  12  specific  technolo¬ 
gies,  six  for  each  major  comfx>nent. 

We’ll  start  with  the  “business 
strategy  automation  and  execution” 
component. 

Business  monitoring  and  ana¬ 
lytics:  measuring  business  per¬ 
formance  to  trigger  dynamic 
change.  Think  management  dash¬ 
boards,  portals,  real-time  analytics. 


ness.  Business  process-focused  solu¬ 
tions  using  reusable  application  logic, 
business  rules  and  workflow  are  the 
order  of  the  day  -  not  large,  inflexi¬ 
ble  packaged  applications. 

Information  and  data  services: 
defining  and  accessing  relevant 
information  as  needed. 

Technologies  that  support  integra¬ 
tion,  transformation  and  quality  of 
information  in  a  time-sensitive  man¬ 
ner  arc  critical.  This  means  advances 
in  modeling  and  meta-data  manage¬ 
ment;  better  contextual  analysis  of 
data;  the  combination  of  structured 
and  unstructured  data;  advanced 
search  and  discovery;  and  federated 


Figure  3.  Dynamic  IT  delivers  value  in  both  the  business  realm  and  the  IT 
operational  realm.  The  real  payoff  comes  when  the  two  are  interconnected. 


Soorce:  IDC  2004 


Citations.  IT  personnel  need  to 
have  a  clear  view  of  the  entire  IT 
value  chain  and  how  it  supports  busi¬ 
ness  processes. 

These  may  seem  like  pic-in-thc- 
sky  goals,  but  there  is  no  doubt  that 
existing  technologies  can  be 


Think  store  reporting  systems  that 
automatically  trigger  supplier  ship¬ 
ments  of  hot  selling  items. 

Business  process  management 
and  applications  automation: 
quickly  configuring  applications 
and  workflow  to  support  the  busi- 


data  management. 

Integration,  event  and  deploy¬ 
ment  services:  connecting,  process¬ 
ing  and  managing  end-to-end 
messages,  events,  information  and 
application  logic.  This  technology 
supports  concurrent,  asynchronous 
and  synchronous  message  streams 
with  contextual  and  state  awareness. 
Discrete  technologies  include  agents 
and  brokers;  application  servers  for 
service  provisioning;  and  integration 
cools  that,  to  take  one  example,  can 
help  companies  gain  a  single  view  of 
their  customers. 

Collaboration  and  communica¬ 
tion  services:  supporting  human 
interaction  in  the  business  process. 
These  technologies  coordinate 
resources  for  interaction,  especially 
those  enabling  workforce  productivi¬ 
ty  and  linking  the  organization  to 
the  outside  world.  To  date,  many  of 
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these  technologies  have  led  to  appli¬ 
cations  that  remain  isolated  from  the 
automated  functions  of  a  business. 
That  must  change. 

Access  and  interface  services: 
providing  navigation  and  interac¬ 
tive  experience  inside  and  outside 
the  enterprise.  Given  the  growing 
complexity  and  tremendous  volume 
of  systems  and  sources  in  today’s 
computing  emironments,  navigating 
and  accessing  them  in  the  context  of 
role  and  function  has  become 
increasingly  difficult.  Consolidating 
sign -on  and  standardizing  proce¬ 
dures  is  just  a  first  step  in  addressing 
the  user  experience. 

Now  we’ll  note  technologies  sup¬ 
porting  the  “IT  operations  manage¬ 
ment  and  automation”  component. 

Service-level  management  and 
automation:  triggering  deploy¬ 
ment  of  IT  resources.  These 
include  the  emerging  automation  or 
orchestration  en^nes  that  trigger  the 
provisioning  of  enterprise  systems 
from  virtual  resource  pools. 
Automated  provisioning  is  what 
finally  achieves  “on-demand”  or 
“utility”  IT.  This  requires  the  setting 
of  service  level  agreements  and  set¬ 
ting  priorities  for  different  workloads 
and  services. 

Metering,  measurement  and 
chargeback:  charging  for  IT  use  by 
business  group  or  activity.  This 
area  is  frxrused  on  leveraging  meter¬ 
ing  metrics  for  usage  measurement 
and  billing  to  departments  and  cus¬ 
tomers  that  use  a  shared  resource 


pool  governed  by  ser\’ice-lc\-el  man¬ 
agement  and  automation. 

Security:  protecting  the  entire 
IT  environment.  Securin’  runs 
through  all  layers  of  dvmamic  IT  and 
ensures  privaq’  between  customers 
and  departments  in  a  shared-resource 
environment.  Its  many  facets  include 
authorization,  access,  protection  and 
managing  identity  throughout  and 
beyond  the  enterprise. 

Infrastructure  virtualization: 
creating  efficient  virtual  resource 
pools.  The  partitioning  of  servers  is 
the  most  commonly  used  aspect  of 
virtualization  today;  the  practice 
must  be  extended  and  refined  so  that 
all  enterprise  systems  can  be  allocat¬ 
ed  and  reallocated  to  diflercnt  work¬ 
loads  depending  on  service-level 
agreements  and  priorities. 

Infrastructure  provisioning: 
erubling  rapid  and  consistent 
deployment  of  IT  resources  with 
improved  change  control.  Here  are 
the  tools  that  provision  a  platform 
with  operating  systems,  patches, 
applications  and  services  that  allow  it 
to  be  a  resource  for  a  given  work¬ 
load.  Provisioning  tools  may  be 
automated  (and  therefore  controlled) 
by  the  service  level  management  and 


automation  engine;  altcmativciv. 
thq-  may  be  more  manual,  in  which 
case  thev’  may  help  IT  managers 
seeking  to  deploy  patches  or 
upgrades  to  groups  of  servers 
remotely. 

Platform  management  and 
monitoring:  enabling  system  mon¬ 
itoring,  inventory,  alerting,  group 
management  and  capacity  manage¬ 
ment.  These  technologies  contribute 
the  individual  node  and  group  svs- 
tems  management  that  lets  IT 
administrators  manage  the  hardware 
and  software  elements  of  storage, 
server  and  network  equipment. 

Making  dynamic  IT  happen 

Merely  knowing  what  technolo¬ 
gies  lead  toward  dynamic  IT  doesn’t 
ensure  their  implementation  will  go 
smoothly.  But  a  number  of  design 
principles  apply. 

For  one  thing,  point  products  or 
solutions  with  little  connection  to 
other  parts  of  the  IT  value  chain  arc 
clearly  of  limited  value.  A{^lications 
that  lack  business  rules  or  service 
level  requirements  as  key  design 
inputs  won’t  make  the  grade.  In 
turn,  service -oriented  architectures 
incorporate  layrrs  of  abstraction  that 
allow  for  the  rapid  changing  of  IT 
sv’stem  behavior  -  which,  in  turn, 
allows  for  ra(Md  re-architecting  appli¬ 
cations  and  solutions. 

Dynamic  IT  is  also  heavy  <hi 
modular  design,  the  use  of  standards 
when  possible  and  multiple  levels  of 
virtualization.  Dynamic  IT  simulta- 
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ncously  increases  the  number  of 
logical  connections  among  IT 
resources  and  cuts  (or  masks)  as 
many  physical  interdependencies  as 
possible.  While  virtualization  has 
been  available  within  IT  systems  for 
decades,  its  application  is  spreading 
to  a  much  broader  range  of  hard¬ 
ware  and  software  systems. 

Finally,  d>’namic  IT  comes  with  a 
flexible  intemal/extemal  sourcing 
model  and  a  flexible  operating  cost 
model.  One  major  benefit  of 
dynamic  IT  is  the  flexibility  it  brings 
to  internally  source  or  outsource 
x’arious  components  as  business 
conditions  require.  A  flexible  cost 
model  that  supports  usage-based 
pricing  or  on-demand  access  to 
resources  is  also  a  key  ingredient. 

Measuring  the  value 

Naturally,  enterprises  must  rigor¬ 
ously  track  both  the  cost  and  contri¬ 
bution  of  dynamic  IT.  This  can  be 
difficult  to  envision.  How  is  IT  sup¬ 
posed  to  improve  a  business  process? 
Faster  response  time?  Around-the- 
clock  coverage?  Fewer  errors?  How 
will  improvement  be  measured? 
What  did  the  IT  behind  that 
improvement  cost? 

Because  IT  investments  may  sup¬ 
port  multiple  business  processes,  and 
because  a  business  process  improve¬ 
ment  may  come  from  multiple  IT 
investments,  matching  costs  to 
improvement  is  a  challenge. 

We  find  that  getting  the  most  out 
of  dynamic  IT  requires  two  linked 


measurements: 

•  IT  costs  supporting  a  business 
function. 

•  Improvement  in  that  business 
function. 

The  linkage  must  come  from 
detailed  monitoring  on  both  sides. 
This  is  where  the  scr\ice  level  archi¬ 
tecture  and  metering  and  monitoring 
technologies  in  dynamic  IT  come  in 
-  dynamic  IT  helps  monitor  and 
report  on  itself  to  enable  optimal  use 
of  IT  resources.  The  same  goes  for 
business  monitoring  and  business 
analytics. 

IDC,  in  its  IT  Value  Metrics  and 
Measurement  research  practice, 
closely  studies  the  way  leading  U.S. 
and  global  companies  justify,  moni¬ 
tor  and  optimize  their  IT  invest¬ 
ments  (sec  sidebar)  -  but  let’s  face  it, 
there  arc  no  silver  bullets.  The  most 
important  requirement  is  that  there 


be  some  ongoing  monitoring  of 
improvement  and  costs. 

The  roadmap 

Building  a  dynamic  IT  capability 
is  a  large  and  complex  undertaking. 
Where  should  CIOs  start  the  jour¬ 
ney?  The  answer  will  vary  by  organi¬ 
zation,  but  in  a  recent  IDC  surs’ey 
of  U.S.  business  executives  it  w'as 
clear  that  the  dynamic  IT  areas  most 
directly  connected  to  enabling  busi¬ 
ness  process  improvement  (flexible 
applications;  integrated  data  and 
information;  and  improved  commu¬ 
nication  and  collaboration)  are  the 
most  urgent. 

On  the  other  hand,  dynamic 
infrastructure  investments,  largely 
invisible  to  business  executives,  are 
considered  lower  priority.  This  is  a 
big  challenge  (and  opportunity)  for 
CIOs,  w’ho  must  connect  the  dots 
between  infrastructure  investments 
and  business  performance. 

For  CIOs  trying  to  develop  and 
prioritize  steps  toward  a  dynamic  IT 
environment,  here  arc  some  key 
findings  from  our  research: 

•  Business  executives’  priorities 
will  focus  on  business  processes.  This 
seems  self-evident,  but  IT  execs  must 
remember  that  their  business  coun¬ 
terparts  will  always  see  IT  through 
the  lens  of  their  own  operations. 

•  There  arc  mixed  messages 
about  process  visibility.  In  surveys, 
real-time  monitoring  of  business 
ranks  low.  This  may  be  an  anomaly, 
but  it  may  reflect  a  growing  realiza- 
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don  that  visibilit\'  into  processes  - 
analytics  and  business  intelligence  - 
can  be  useless  without  the  where¬ 
withal  to  act  on  what's  learned. 

•  Infrastructure  improvements  arc 
less  urgent  to  line-of-business  execu¬ 
tives.  IT  inxestments  and  capabilities 
are  less  directly  visible  to  business 
cxccudves,  which  creates  an  internal 
marketing  challenge  for  CIOs. 

•  Connecting  the  dots  is  cridcal. 
CIOs  must  be  able  to  articulate  and 
measure  the  business  impact  and 
value  of  planned  investments. 

•  Improving  IT  capabilities 
trumps  lowering  IT  costs.  In  our 
research,  three  of  the  four  top-rated 
priorities  involved  improving  IT 
capabilities  (functionalitv',  speed,  flex¬ 
ibility);  only  one  involved  lowering 
costs.  Business  executives  are  not  so 
skeptical  of  IT  value  that  they  simply 
want  to  squeeze  down  costs.  This  is 
valuable  equity  that  IT  must  con¬ 
serve  through  well-managed  projects 
and  high-quality  service. 

With  dynamic  IT  applied  to  the 
process  of  measuring  its  own  impact, 
companies  can  get  a  jump  on  creat¬ 
ing  a  succession  of  temporarv’  advan¬ 
tages  that,  over  the  long  run,  equal 
sustainable  competitive  ad\’antage.4c 

This  supplement  was  commissioned  by 
IDG.  The  opinions,  analysis  and 
results  presented  herein  are  entirely 
IDC’s,  except  where  otherwise  noted. 

A  license  to  distribute  this  content  does 
not  constitute  an  endorsement  of  IDG 
or  its  advertisers. 
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With  SAS’  business  inteliigence  software 
and  inter  itaniunf  2-based  servers... 

Innovation  can  come 
from  anyone^  anywhere. 

With  the  ri^t  information,  at  just  the  right  time,  anyone  in  your  company  can  be  the  source  of  the  next  big 
idea.  That’s  why  SAS*9,  the  most  significant  software  release  in  SAS  history,  has  been  designed  to  take 
full  advantage  of  the  scalability,  reliability  and  performance  of  Intel'  Itanium*  2-based  servers.  All  made 
accessible  through  notebooks  based  on  Intel'  Centrino™  mobile  technology.  Through  one  ccnnmon  business 
intelligence  and  analytics  platform,  you  can  empower  everyone  to  drive  ideas  into  actions  that  increase  profits, 
align  strategies  and  transform  the  way  you  do  business.  To  experiwice  this  breakthrough  vision,  visit  us  at 

www.sas.com/golntel 
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Hyper-Threading  Technology 
from  Intel.  It’s  all  about  productivity. 

There's  no  magic  potion  to  get  a 
******  workforce  working  harder.  There  is, 
however,  the  power  of  PCs  built  upon  the 
Intel  Pentium  4  Processor  with  HT  Technology. 

Hyper-Threading  Technology  was  engineered 
to  let  users  run  two  applications  at  once."  So  security 
services  can  run  in  the  background  while  users 
stay  productive.  To  help  your  company  do  more, 
visit  intel.com/business. 


int^. 


^  Pentium*  4  Processor  with  HT  Technology  logo  which  your  system  vendor  has  verified  utilize  Hyper-Threadino 
‘depending  on  the  specific  hardware  and  software  you  use.  See  http://www.intel.com/info/hw>erthreadin(5 
fof  information.  02004  Intel  Coiptrabon.  Intel.  Intel  Inside,  the  Intel  Inside  logo,  and  Pentium  are  trademarks  or  registered  trademarks  of  Intel 
Corporation  or  its  subsidianes  in  the  United  States  and  other  countries.  All  rights  reserved. 
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Vendor  Group  Looks  to  Win 
Grid  Computing  Converts 


KV  WATWiCft  THISOOCAU 

T7ie  EtUerpnse  Grid  Al¬ 
liance  was /armed  su 
months  ago  by  a  gwup  of 
IT  vendors  to  accelerate 
the  adoption  of  grid  com- 
fecftnoictgy  by  cor¬ 
porate  users.  In  addition, 
the  EGA  is  now  develop¬ 
ing  standards  and  ^eci- 
fications  des^ned  to  moibe  it  easier  /or 
FT  manages  to  deploy  products  in  grid 
instaBations.  EGA  President  OaoM 
OadtKk,  who  is  vice  president  of  stan- 
dards  strategy  and  architecture  at  Ora- 
de  Corp.,  discussed  the  a//iance‘$  goals 
during  an  interview  with  Computer- 
worid  on  Sept  24. 

WiMl  faurintn  proUM  is  IlM  EBA  trying  to 

soivs?  The  EGA  is  focused  on  tMro 
classes  of  applications;  commercial  ap¬ 
plications  —  the  guts  of  foe  organiza¬ 
tion.  which  includes  highly  transac- 
tion-oiiented  applications  such  as  ERP, 


E-voting  Lawsuit 
Can  Proceed  in 
Fla.,  Judges  Rule 

■V  TODO  K.  weis« 

Whh  foe  presidential  election  just  a 
month  away,  a  federal  appeals  court 
last  week  ruled  that  a  challenge  to 
foe  use  of  some  electronic  voting  ma¬ 
chines  in  Florida  can  be  heard  by  a  U.S. 
District  Court  judge  there  —  even 
though  a  parallel  case  is  already  mov¬ 
ing  through  foe  state  court  system. 

fudge  James  Cohn  bad  aboaioed 
from  hearing  foe  case  earlier  rfci*  year, 
citing  foe  stato-couzt  fl^  as  foe 
for  Us  decision.  But  in  its  rulingi  a 
foree-judge  paod  at  foe  U3.  Court  of 
Appeals  for  foe  Eleventh  Circuit  in 
Atlwta  ruled  that  Cohn  had  ened 
The  federal  lawsuk.  Hied  in  March 
by  Rep.  Robert  Wexler  (0-FIa.)  and 
several  co-plaintifib.  alleges  that  15  of 
the  state's  most  populous  counties  use 
e-voting  machines  tiiat  don't  {Moduce  a 
paper  trail  of  foe  votes  being  cast  Ma¬ 
chines  in  S2  other  counties  do  generate 
paper  records  that  can  be  used  to  veri¬ 
fy  vote  totals  in  case  of  recounts.  The 
lawsuit  claims  that  by  usiz^  different  I 
types  of  machines  across  tbe  state,  I 


CRM.  general  letter  and  business  intel¬ 
ligence  —  and  a  second  class  of  applica¬ 
tions.  niuch.  for  a  lack  of  a  better  term, 
we  call  technical  applications.  These 
are  the  things  that  mi^t  not  be  as 
transaction-oriented  but  are  still  fon- 
damenial  to  foe  business,  such  as  port¬ 
folio  analysis  in  the  Hnancial  sector. 

The  aUMy  of  grid  todmotogy  to  Iwndia 
tocMcd  aggletoiom  to  wol  towm.  But  to 
tonm  of  apgiealtom  Bb  CRM  Md  BV>. 
whM  kind  of  roto  «a  grid  ptoy?  Grid  will 
play  a  fundamental  role.  These  compa¬ 
nies  came  together  because  foeir  prod¬ 
ucts  are  being  applied  today  to  address 
these  sorts  of  mainline  business  appli¬ 
cations.  They  recognized  it  as  a  busi¬ 
ness  opportunity.  They  came  together 
with  fundamental  purpose  of  boot¬ 
strapping  the  market. 

So,  to  liito  a  marlvting  orgaidiatton?  That 
is  an  interesting  question.  Clearly,  tbe 
objective  of  EGA  is  to  speed  up  the 


Florida  has  crewed  "a  nonuniform,  dif¬ 
ferential  standard"  that  violates  the 
constitutional  rights  of  due  process 
and  equal  protection. 

Wexler  and  his  fellow  plainti&  Hied 
a  separate  lawsuit  in  a  state  court  in 
January.  Tbe  appeals  panel  wrote  in  its 
ruling  that  the  parallel  proceedings  "do 
not  present  tbe  'undue  interference'  in 
state  court  proceedings"  that  judge 
Cohn  cited  in  his  abstention  defirion 
In  a  statement.  Wexler  applauded 
foe  ruling.  1  hope  that  as  a  result  of 
this  federal  lawsuit,  Florida  will  adopt 
the  most  secure  and  fedr  voting  proce¬ 
dures  possible,  so  that  a  means  for  a 
recount  is  available  and  that  every  vot¬ 
er  wQ]  know  that  their  vote  is  being 
accurately  counted,"  be  sakL 
Jenny  Nash,  a  spokeswoman  for 
Florida  Secretary  of  State  Glenda 
Hood,  called  the  appeals  court  ded- 
sion  a  procedural  step  and  said  the 
state  is  confident  that  its  e-voting  sys¬ 
tems  are  up  to  foe  job  at  hand.  "Vito 
continue  to  have  foe  highest  level  of 
confidence  in  the  voting  systems  being 
used  in  Florida,"  Nash  said, 

She  added  that  even  after  hit 
by  four  hurricanes  in  tbe  past  six 
wedcs.  tbe  state's  counties  have 
successfully  held  electkms  using  foe 
systems.  ‘*We  e^ect  no  less  in  tbe  gen¬ 
eral  election,"  site  said.  O  4B7S3 


time  to  market  for  grid  technology  and 
grow  a  market  to  foe  mutual  benefit  of 
the  founding  members.  Toward  >hat 
obfcctive.  EGA  is  focused  on  identify¬ 
ing  real  or  perceived  inhibitors  to  foe 
adoption  of  grid  technology  in  tbe  en¬ 
terprise  and  then  addressing  those  in¬ 
hibitors  in  whatever  way  is  required. 

If  this  requires  the  development  of 
specifications  and  creation  of  stan¬ 
dards,  then  EGA  will  do  that.  If.  in  feci, 
one  of  the  inhibitors  is  really  a  lack  of 
knowledge  in  tbe  maiketplaite  or 
maybe  a  misunderstanding  of  foe  cur¬ 
rent  state  of  technology,  then  EGA  is 
positioned  to  address  those  through 
marketing.  Is  EGA  a  marketing  or  stan¬ 
dards  technology  group?  My  answer  is 
it's  6(V40,  and  Tm  not  sure  which  is  60 
and  which  b  40.  because  h  depends  on 
what  people  identify  as  the  mhihitory 

Thera  aru  a  numbar  of  grid  itofidteds  af- 


forts,  such  as  the  Otobai  Brid  Fnrwa.  under 
wtor.  Won't  your  effort  erwto  conflcto? 

EGA  does  not  want  to  invent  some¬ 
thing  that  we  can  acquire  from  another 
consortium.  If  there's  a  solution  avail¬ 
able  from  another  forum  to  a  problem 
identified  by  EGA.  well  woik  with  that 
forum  to  ad<^(  their  solution.  In  the 
absence  of  such  a  solution,  if  there's 
another  forum  that  is  able  or  better 
able  to  create  a  solution,  we'll  establish 
a  relationship  with  that  organization  to 
assbi  them  with  that. 

There  are  eenw  big  compentoc  Rdseing 
from  your  fierabeieMp  bet  Can  you  be 
auccMuhd  witheut  IBM  Md  Mtoroeefl. 
for  iiBtance?  We  continue  to  talk  with 
Microsoft  and  IBM.  They  or  others 
can  decide  whether  it's  an  iqipropriate 
forum.  EGA  b  a  level-playing  organiza¬ 
tion,  [a]  one-company,  one-vote  orga¬ 
nization.  049752 
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DON  TENNANT 


the  US.  - 


NE  DAY  in  February  2002, 1  was  stand¬ 
ing  in  Sanjay  Kumar’s  modest  office  at 
Computer  Associates’  headquarters. 
The  then-CEO  of  CA  was  recounting  a 
story  about  his  first  day  of  school  in 
it  was  1977,  and  he  had  emigrated  with  his 

called  Kumar  a  “brilliant. 


family  from  Sri  Lanka  at 
the  age  of  14.  He  said  that 
when  be  went  to  the  cafe¬ 
teria  for  lunch,  he  found 
there  were  two  serving 
lines  —  one  full  of  black 
kids,  and  the  other  full  of 
white  kids.  The  problem 
was,  he  couldn’t  figure 
out  which  line  to  get  in. 

So  he  didn’t  eat.  That 
eN'cntng.  be  told  his  mom 
about  his  dilemma,  and  he 
asked  her  which  line  he 
should  choose.  His  mom  gave  him 
the  kind  of  sage  advice  only  a  moth¬ 
er  can  give:  "The  shorter  one." 

I  don't  know  why  this  country  just 
can't  seem  to  get  the  race  thing  right. 
But  I  do  know  one  thing:  Sanjay 
mar  ts  innocent.  That’s  right.  He’s  in¬ 
nocent  of  every  single  one  of  the  10 
chaises  brought  against  him  in  a 
grand  jury  indictment  two  weeks  ago 
[QuickLink  49647].  He’s  innocent  of 
securities  haud  and  of  obstruction 
of  justice.  How  do  1  know?  Because 
he  pleaded  innocent  to  all  of  the 
charges.  And  be  hasn’t  been  tried,  let 
alone  found  guilty.  That  means  he's 
innocenL  'That's  the  way  the  system 
works,  remember?  Thai's  one  thing 
this  country  has  gotten  right. 

That’s  why  it  strikes  me  as  pecu¬ 
liar  that  CA  has  abandoned  Kumar 
the  way  it  has.  Not  only  has  the  com¬ 
pany  revoked  some  of  his  benefits, 
but  it  appears  to  be  going  out  of  its 
way  to  distance  itself  as  far  from  Ku¬ 
mar  as  it  possibly  can.  And  all  of  this 
comes  less  than  six  months  after 
Mark  Barrenechea,  CA’s  executive 
vice  president  of  product  develop¬ 
ment,  defended  Kumar’s  shift  from 
CEO  to  chief  software  architect  and 


innovative,  motivating 
individual’’  whose  ser¬ 
vice  in  his  new  capacity 
was  “a  wonderful  thii^ 
for  customers"  [Quick- 
Link  46426]. 

Regardless  of  whether 
Kumar  is  eventually 
found  to  be  guilty  of 
wrongdoing,  the  fact  re¬ 
mains  that  CA  owes  him 
a  debt  of  gratitude  it  will 
never  be  able  to  ade¬ 
quately  repay.  As  many  of  the  CA 
users  we  have  interviewed  through¬ 
out  this  ordeal  will  attest.  Kumar  al¬ 
most  single-handedly  transformed 
that  company  from  what  was  unques¬ 
tionably  the  most  despised  software 
vendor  on  the  planet  to  one  that  rou¬ 
tinely  receives  accolades  for  its  cus¬ 
tomer-centric  focus.  There  was  a 
merciful  end  to  the  user-be-damned 


days  under  the  oppressive  hand  of 
Charles  Wang,  when  so  many  of  the 
customers  of  the  software  companies 
acquired  by  CA  were  left  dangling  in 
the  wind  with  no  support  or  upgrade 
path  for  their  products.  No  longer 
were  users  demanding,  as  a  condi¬ 
tion  for  doing  business  with  a  partic¬ 
ular  vendor,  that  they  would  be  paid 
three  times  the  value  of  the  contract 
if  the  vendor  was  ever  acquired  by 
CA-  An  almost  universally  feared, 
widely  hated  adversary  had  become 
a  trusted  business  partner.  All  under 
the  watch  of  Sanjay  Kumar. 

Tlie  real  tragedy  here  is  that  if 
Kumar  is  found  guilty,  that  monu¬ 
mental  contribution  to  the  better¬ 
ment  of  corporate  IT  will  be  largely 
forgotten.  I  have  a  hunch  that  his 
mom  gave  him  some  more  sage  ad¬ 
vice  when  he  was  a  kid:  If  you  goof 
up.  acknowled^  it,  make  amends,  be 
forgiven,  and  move  on.  if  you  didn't 
goof  up.  stand  up  for  yourself. 

So  if  Kumar  was  thinking  of  his 
mom  when  he  said.  “Not  guilty,"  I’ll 
believe  him.  And  CA  should  too. 
C497B1 
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DAN  GILLMOR 

A  Patent 
Strain  on 
Innovation 

SOME  THINGS  ARE 

patently  ridiculous.  One 
is  the  U.S.  patent  system, 
an  institution  in  desperate 
need  of  reform. 

The  reason  for  patents  is  to  encour¬ 
age  innovation.  We  give  inventors  ex¬ 
clusive  rights  to  their  creations  for  a 
limited  period,  after  which  the  inven¬ 
tions  enter  the  public  domain. 

In  the  real  world,  patents  are  also 
about  politics,  mismanagement  and 
slippery  behavior.  The  results  may  be 
damaging  to  our  economic  and  cultural 
health.  Patents  are  supposed  to  be  is¬ 
sued  for  actual  inventions  —  for  new 
methods  and  machines  that  are.  cru¬ 
cially.  not  obvious.  Too  many  patents 
arc  being  awarded  for  “inventions"  that 
aren't  new  or  are  bla¬ 
tantly  obvious. 

The  technology 
business  is  rife  with 
bad  patents.  A  cou¬ 
ple  of  years  ^o,  BT 
Group  claimed  to 
own  a  patent  on  hy- 
pcrlinldng,  a  concept 
that  long  predated 
the  company’s  appli¬ 
cation.  Ihis  bizarre 
notion  was,  thankful¬ 
ly,  shot  down  in  a 
U.S.  courtroom,  but 
not  before  SBC  Com¬ 
munications  spent  a 
lot  of  money  defend¬ 
ing  its  right  to  use 
the  technology. 

Microsoft  lost  a  trial  in  which  a 
small  Illinois  company.  Eolas  Tech¬ 
nologies,  claimed  to  own  ftmdamental 
technology  for  browser  plug-ins.  The 
U.S.  Patent  &  IVademaik  Office  (PTO) 
is  re-examining  that  case,  which  many 
in  the  Web  conununity  believe  is  an 
example  of  a  patent  that  should  never 
have  been  issued  in  the  first  place. 

Then  there  are  the  “business 
method"  patents  —  essentially,  online 
translations  of  analog  activities.  'The 
most  infamous  is  Amazon-com's  "one- 
click”  shopping  patent,  but  there  are 
lots  of  other  egregious  examples. 

There’s  plenty  of  blame  to  go  around 
on  this.  But  the  chief  culprits  are  the 
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PTO,  which  by  nearly  every  credible 
account  doesn't  sufllciontly  analyze 
the  applications  it  gets,  and  Congress, 
which  allows  this  to  persist. 

To  be  fair  to  the  PTO.  it  is  laboring 
under  handicaps.  For  example.  Con¬ 
gress  doesn't  let  the  agency  use  all  the 
money  it  generates  in  fees  to  improve 
the  patent  process.  But  the  PTO’s  atti¬ 
tude  has  been  compared,  accurately,  to 
that  of  a  polluter.  TTie  agency,  which 
considers  patent  applicants  —  not  the 
public  —  to  be  its  main  constituency, 
hands  out  patents  willy-nilly  and  lets 
the  courts  sort  out  the  mess  that  results. 

IT  has  a  serious  stake  in  this.  The  in¬ 
tellectual  property  dust-up  over  Linux 
seems  likely  to  be  the  tip  of  a  nasty 
iceberg,  with  patent  borers  (especial¬ 
ly  Microsoft,  I  suspect)  potentially  us- 
ii^  threats  about  ^eged  infringement 
to  scare  people  away  from  open-source 
software.  And  companies  developing 
their  products  are  increasingly  filing 
for  patents  on  everything  that  moves, 
mostly  for  defensive  reasons.  Wouldn't 
you  rather  see  high-tech  Anns  hiring 
engineers  instead  of  lawyers?  I  would. 

The  Electronic  Frontier  Foundation, 
working  with  universities  and  other 
organizations,  has  launched  the  Patent 
Busting  Project  lwww^.org/patent), 
aimed  at  persuading  the  PTO  to  invali¬ 
date  some  of  the  worst  patents.  IT 
should  support  this  in  the  short  term, 
and  it  should  lobby  for  serious  reform 
of  the  overall  system.  Innovation  needs 
everyone's  help.  O  49000 


MICHAEL  H.  HUGOS 

InRealTime 
Enterprises, 
Keep  It  Simple 

More  and  more,  I 
see  references  to  the 
“real-time  enter¬ 
prise"  or  the  “agile,  sense- 
and-respond  enterprise.”  It 
might  sound  like  just  another 
IT  fad,  but  I  think  it’s  actually  some¬ 
thing  big.  It's  where  IT  can  really  show 
its  value  to  business. 

So,  what  is  the  real-time  enterprise? 
At  its  core,  h  means  continually  im¬ 
proving  key  business  processes  and 
adapting  them  to  constant  change.  This 
way.  we  can  deiiver  bener  value  to  cus¬ 
tomers  and  more  profit  to  the  company. 


In  other  words,  the  real¬ 
time  enterprise  is  not  so 
much  about  any  specific 
technology  or  s^tem  as  it  is 
about  how  people  use  tech¬ 
nology  to  continually  deliv¬ 
er  business  improvements 
and  adapt  to  change. 

I  And  that  the  most  effec¬ 
tive  way  to  employ  real¬ 
time  technology  is  to  auto¬ 
mate  routine  transactions 
and  empower  people  to  deal 
with  all  the  exceptions.  In 
my  company.  I’m  keeping 
the  automated  systems  rela¬ 
tively  simple.  They  handle 
only  the  70%  to  90%  of 
business  transactions  chat 
are  standard  aiKl  well  de¬ 
fined.  I  don't  try  to  have 
automated  systems  handle  everything. 
Unnecessary  cost  and  complexity  are 
avoided  by  keeping  systems  simple. 
And  keeping  systems  as  simple  as  pos¬ 
sible  also  reduces  the  high  failure  rate 
that  plagues  IT  projects. 

"But  wait!"  you  say.  *"nK  world  is  a 
complex  place.  How  will  simple  sys¬ 
tems  help  me  deal  with  itr  liie  an¬ 
swer,  my  friend,  is  that  computer  sys¬ 
tems  are  better  at  hanrfling  the  simple, 
rote,  routine  work,  and  people  (not 


computers)  arc  better  at 
haixliing  the  complexity. 

I  don't  need  lots  of  fancy 
artiAdai  intelligence  (and 
complexity  and  expense)  in 
my  systems  if  1  use  the  nat¬ 
ural  inteUigcrcc  of  people 
instead. 

I  deAnc  complexity  as 
any  transaction  that's  an 
exception  (o  the  standard 
business  rules  built  into  m>- 
automated  systems.  When 
exceptions  occur,  the  auto¬ 
mated  s>'stem$  just  Aag 
them,  trap  the  related  data 
and  send  alerts  to  the  ap¬ 
propriate  people  to  exam¬ 
ine  this  data.  The  systems 
then  return  to  handling  the 
vast  majority  of  routine 
business  transactions. 

There  is  a  lot  of  power  in  handling 
complexity  this  way.  An  exception  to  a 
standard  set  of  rules  will  either  be 
because  of  an  error  in  the  data  or  be¬ 
cause  the  data  reAects  something  out 
of  the  routine.  The  people  who  are 
alerted  will  decide  whether  the  non¬ 
standard  data  is  the  result  of  an  input 
or  process  error  or  if  it  indicates  some¬ 
thing  new  in  the  environment.  Either 
way.  it's  best  to  have  people,  not  com¬ 
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plicated  and  hard-to-understand  com¬ 
puter  systems,  making  these  decisions. 

If  the  data  or  the  business  process 
shows  an  error,  people  do  root-cause 
analysis  (like  Six  Sigma)  and  Ax  errors 
at  the  source.  This  makes  the  standard 
business  processes  even  more  efficient, 
and  value  is  gained  from  that.  If  the 
data  shows  a  new  development,  then 
early  detection  allows  more  lime  to  cre¬ 
ate  business  proce»es  to  respond  effec¬ 
tively.  Big  wins  can  come  from  this. 

I've  begun  deploying  real-time  sys¬ 
tems  like  this  in  my  own  company.  The 
systems  are  relatively  cheap  and  quick 
to  build,  since  they're  designed  to  han¬ 
dle  only  the  standard,  routine  trans¬ 
actions.  And  people  now  have  time  to 
do  more  valuable  work.  They  aren't 
worn  down  doing  the  boring,  routine 
stuff,  and  they  have  time  to  focus  on 
the  exceptions,  learn  from  experience 
and  And  ways  to  increase  their  effi¬ 
ciency.  A  process  of  continuous  im¬ 
provement  is  starting  to  take  bold. 

Could  it  be  this  simple?  Am  I  miss¬ 
ing  something?  I'll  ke^  you  posted. 
048853 
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Electronic  Voting  k  More  Efficient  in  India 


A  8  AN  MOUN.  I  was  mildly 
amused  by  the  artide'EHort 
Afoot  lo  Addr^  E-voting  at  {^* 
vention'[(Xitckijnk  48368] 

As  you  may  be  aware,  Indahas 
just  had  an  sleclion  In  which  an 
votes  were  cast  usmg  electronic 
voting  machines  (EVM). 

The  election  was  hailed  by 
evetyone  as  being  free  and  i»r.  and 
voting  went  off  OTtoothly.  with  hard¬ 
ly  a  glltdi  in  the  equipment.  The  ef¬ 
fectiveness  and  efficiency  of  EVMs 
was  clearly  apparent,  since  the  le- 
suits  could  be  announced  much 
faster  and  administration  was  also 
easier. 

Reading  this  story  made  me  real* 
be  that: 

■  The  efectorate  (generally  con¬ 
sidered  to  be  iHiterate)  adapted  to 
the  new  technology  extrernely  well 
■Indian  political  parties  demon¬ 
strated  a  high  level  of  mahmty. 
since  diere  were  no  Questions 
raised  about  e-voting  as  such. 

■  The  Bection  Corrvnssion  and 
administrative  machinery  (generally 


thoughttobemeftoentandcor- 
mpOcarriedoultheexenaseltaw- 
lessly  and  took  the  new  technology 
indnde. 

I  would  have  thought  that  the 
U.S- with  Its  smaller  and  more  edu¬ 
cated  electorate,  better  technologi¬ 
cal  penetration  and  a  deaner  ookb- 
cal  system,  should  fmd  It  easwr  to 
handide-votng 

But  the  debate  gong  on  makes 
me  sense  one  more  oftehonng  op¬ 
portunity  for  Indian  IT 
Hemant  lieinkv 
5oijd  Bahwan  Croup, 

Muscat.  Oman, 
fumommainkizn^iyahoacom 


attack  pOnline  Data  a  Gold  Mne  for 
Temn^*  Quddjnk  48662] 
S.W.Brailey 
Dayton,  Ohio 

SowHATOoroupfioposrp 

That  the  teds  clamp  down  or) 
infonnafion  even  more?  Haven't 
we  lost  enough  freedom  as  a  soo- 
ety  already? 

JmItPardinas 

Miami 


Weighing  Freedom 
Against  Security 

(HAVE  FOUND  a  U5-  government 
Websiteaenedaiemergencyfe- 
sponse  leartB  that  freefy  distnbuies 
a  software  package  that  could  help 
terrorists  calculate  wmd  dispersion 
in  a  chemicai  or  biotogKal  weapons 


Review  the  RFP 
During  Negotiations 

ITtSANEKCaiENTsuggeston 
to  review  the  RFP  while  negoual- 
ngacontrad  to  make  sure  that  al 
topics  that  reflect  performvice  and 
milestones  are  discussed  again, 
sncethevendornowhassignili- 
candy  more  nfomiauon  lhan  4  (M 
when  it  wrote  the  RFP  response 
('Atiomey  Says  Sloppy  IT  Deals  All 
Too  Common.'  Quickljnk  46923] 
Inlormahon  that  is  revealed  dur¬ 
ing  the  negolations  can  materially 
change  {he  answers  that  vendors 


made  earlier  m  the  prooBss.  and  the 
sooner  that  these  dficrepancvB  are 
Klentified  and  (ksoissed.  the  belter 
the  relahonsho  w4  be  in  he  long 
term  NoteveryRFPhasthsprob- 
lem.butfnanyoftheoomo)exffn- 
ptemenlaiions  (hat  we  see  ft  IT  as¬ 
set  marttgement  sutler  from  this 
probtem. 

Jermy  Schucherl 

Vicr  pmadent  prx)gram 
development,  Imemational 
Association  of  IT  Asset 
Managers.  Pirtshurgh. 
/Sduichm«^iiai(amjorg 

COMPUTERWOffLO  welames 
comments  from  Its  readers  Letters 
w4  be  edited  for  brevity  and  daniy 
They  should  be  addressed  to 
Jam«Eckle.lettersedilor.Com- 
puterwodd.  PO  Box  9171. 1  Speen 
Street.  Framingham.  Mass.  01701 
Fu  (506)  679-4843  E-mtf 
tehers^computerworldcon) 

Inckide  an  address  and  phone 
number  (or  mmediate  venlication 

OFv  mom  <6116(3  on  itieae  M 
oe>eriopK5.9)to 
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Companies  odopting  HP  Integrity  servers,  powered  by  industry-leading  Intel*  Itanium*  2  Processors,  are  seeing  remarkable  gains  in  performance. 
The  momentum  is  building.  One  after  another,  companies  ore  choosing  HP  Integrity  servers.  Leading  software  and  technology  portners  such  as 
BEA,  Microsoft,'  Orocle,  SAP  and  Siebel  Systems  have  embraced  the  platform  as  an  industry  standard.  And  with  the  ability  to  manage  o  mixed 
environment  of  UNIX,  Microsoft'  Windows,'  Linux  and  OpenVMS,  HP  Integrity  servers  are  fost  becoming  the  ultimate  consolidation  tool.  Demand 
maximum  performance,  reliability  and  cost-efficiency  now,  on  a  platform  thot  will  corry  you  forward  into  the  future.  Demand  performance  that's 
real-world  proven,  and  get  it— with  HP  Integrity  server  solutions. 


Choosing  HP  Integrity  servers,  choosing  results. 


AIRBUS  UK: 

Running  HP-UX!  li  on  HP  Integrity 
servers,  20-30  wing  design 
simulations  that  used  to  toke 
weeks  ore  now  done  overnight. 


COMPUSA: 

Going  with  64-bit  architecture 
using  HP  Integrity  servers, 
they  cut  access  time  to  in%«ntory 
data  by  up  to  85%. 


FIAT  AUTO: 

Standardizing  on  64-bit 
infrastructure  using  HP  Integrity 
servers,  they're  integrating  and 
enhancing  sales  and  service  as 
well  as  streamlining  the  buying 
process  while  lowering  soles  cost. 


THE  KOEHLER  GROUP: 

Moving  to  an  environment 
composed  of  HP  Integrity  servers, 
they  gained  o  50%  improvement 
in  mission-critical  performonce. 


To  get  the  IDC  white  poper  outlining  the  performonce  of  HP 
Integrity  servers  with  Intel®  Itanium®  2  Processors, 

1-800-282-6672 

invent 

option  5,  mention  code  AQHF 

CLICK  hpxom/go/dmondliHogrityS 

te  Irademaiks  o>  r«g«MrM  DMemartis  tX  MM  Corpontion  w  rts  subSKMnes  m  tlx  United  Slates  and  other  countries  Microsoft  and  Wind 


re  either  registered  irademarlis  or  trademarks  of  Microsofi  Corporation. 
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Automating  the  40  Monkeys  quickstudy 


Companies  are  increasingly  using 
software  tools  instead  of  human 
users  to  test  applications  before 
they  are  deployed  in  actual  busi¬ 
ness  situations.  Page  24 
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Topic  Maps  The  Coming  Battle  of  the  Titans 

This  is  a  way  to  represent  knowledge  structures  Paul  A.  Strassmann  says  Google  is  using 
and  their  relationships  to  information  resources.  a  whole  new  rale  book  to  take  on  Micrt>- 
Based  on  XML,  topic  maps  are  related  in  concept  soft  in  the  battle  to  be  the  dominant 
to.  but  more  powerful  than  a  book  index.  Page  26  company  in  the  IT  industry.  Page  90 


Director  peter  jacksons  Lord  of  the  Rings  films  end  with 
an  epic  battle  on-screen.  Behind  the  scenes,  however,  an¬ 
other  straggle  was  under  way.  As  each  movie  in  the  trilo¬ 
gy  went  into  production,  visual  effects  studio  Weu  Digital 
Ltd.  scrambled  to  add  the  processing  power  needed  to 
render  an  increasing  number  of  computationally  intensive  special 
effects  shots. 

By  the  end  of  the  three-part  project,  the  Wellington,  New  Zealand- 
based  company  had  built  a  massive,  3,200-processor  3-D  rendering  scrv 
er  &rm  to  cope  with  the  load.  The  installation  is  ranked  on  the  TopSOO 
supercomputer  list  as  one  of  the  worid’s  largest  supercomputer  sites. 

With  some  2,400  of  those  processors  residing  on  blade  servers  (and 
the  remainder  on  lU,  or  l.^in.-high,  servers),  it*s  also  one  of  the 
most  compact 

Weta  and  other  visual  effects  studios  are  rapidly  turning  to  large 
clusters  of  blade  servers,  often  running  as  they  Kaiaryv.  the  need 

for  more  processing  power  with  the  desire  to  mmiTni7<»  costs  and  maxi¬ 
mize  the  use  of  valuable  floor  space. 

Special  effects  are  playing  an  increasingly  large  role  in  movies  be¬ 
cause  audiences  want  them,  says  Greg  Butler,  digital  computer  graphics 
supervisor  at  Weta.  “Film  audiences  expect  visual  effects  to  keep  blow 
ii^  them  away.  The  only  way  this  is  possible  is  throu^  the  constant 
upgrading  of  our  infrastructure.”  he  says. 

With  the  Lord  of  the  Rings  trilogy,  the  number  of  visual  effects  shots 
started  at  540  in  the  first  film  and  roughly  doubled  for  each  of  the  next 
two  movies.  Industrial  Light  and  Magic  (ILM)  in  San  RafaeL  faces  | 

similar  pressures.  “In  the  first /itrassic  Pork  movie,  we  did  75  shots.  Now. 

with  a  Star  Wan  movie,  every  shot  has  some  effect  in  h.”  for  a  total  of 
2,000  to  2,500  shots  per  film,  says  Chief  Technology  Officer  Cliff 
Plumer. 

The  processing  power  required  to  render  even  a  few  shots 
significant,  says  George  Johnsen,  chief  animation  and 
cal  officer  at  Threshold  Digital  Research  Lab  in  Santa  Mon- 


As  the  demand  for 
special  effects  in 
movies  soars,  studios 
are  turning  to  massive 
blade  server  farms  to 
render  the  images. 

By  Robert  L.  Mitchell 
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RENDERING 

ON  DEMAND 

FOR  THRE5HOU)  OnnAL  wd  other  vi¬ 
sual  eAacts  stwlos.  the  demand  (or  proc¬ 
essing  cycles  has  peaks  and  vQfcys  ^  fot* 
kMT  film  production  schedules. 
end  ol  a  protect  need  more  power.*  says 
chief  arwnaiion  and  technical  oflicer  GecKge 
Johnsen 

Rather  than  adding  blade  servers,  howev¬ 
er.  Threshold  recertify  began  expenmenting 
with  the  idea  of  renting  processor  cycles  as 


needed  from  (BM* s  Deep  Computmg  Capac¬ 
ity  on  Demand  center  in  Poughkeepsie.  MY. 
'On-den«nd  is  a  cool  thing,  especially  for  a 
cyclical  business  like  ous,' Johnsen  says. 

Under  the  arrangement.  IBM  dedicetes  a 
group  of  pteconfigured  blade  servers  to 
Threshold,  which  accesses  them  by  My  of  a 
virtual  private  rvehmtfi  connection  through 
the  Internet.  “We  have  a  dedicated  gateway 
and  a  core  group  of  processors.*  he  says.  *H 
we  need  more,  we  ask  for  more  *  IBM  then 
configures  addiliorkal  blades  to  the  studb’s 
specifications  on  the  fly  and  brings  them  on¬ 
line  as  needed.  *tt  gives  me  access  to  a 


tremendous  amount  ot  power  and  a  re¬ 
source  that  I  cai  schedule  ddferently' 
Johnsensays. 

VYith  Threshold  OigdaTs  workload  expect¬ 
ed  to  grow  25%  this  yev.  Johnsen  sti 
plans  to  add  more  Made  servers  to  the  ren¬ 
dering  lana  doubllrig  the  number  of  proces¬ 
sors  to  1.024.  But  with  a  server  room  mea- 
surmg  |U5l  15  by  20  feet,  space  IS  at  a  premi¬ 
um.  Outsourcing  of  processor  cycles  could 
solve  that  probtern.  *11  the  strata  works 
with  the  on-demand  center.  I  wont  need  a 
bigger  room.’ he  says. 

-  Robert  Lt^cheH 


ico.  Calif.  “In  the  visual  ufTocts  busi¬ 
ness.  there's  no  end  to  how  many  com¬ 
puters  you  can  use."  he  says.  A  single 
shot  can  range  from  .i  few  seconds  to 
several  minutc.s.  Each  second  of  film 
includes  24  frames,  each  containing  up 
to  4.996-by-3.ll2  pixels  in  32-  or  64-bit 
color  Separate  passes  must  be  made 
for  each  obiect  that  requires  rendering  i 
in  the  frame  and  for  attributes  such  as 
texture,  lighting  and  reflections. 

“in  the  {upcoming]  movie  Foodfight!, 
there  is  a  sccrur  with  13.000  extras,  and 
they  all  have  animation  cycles."  says 
lohnsen.  And  artists  often  repeat  the 
rendering  process  to  improve  quality. 

As  many  as  150  passes  may  be  required 
—  a  frame  can  be  processed  on  only 
one  CPU  at  a  time  and  takes  48  to  72 
hours  to  complete,  he  says.  Threshold 
Digital  already  has  512  processors  in  its 
render  farm  and  plans  to  double  that 
using  IBM  eServer  BladeCcmers 
equipped  with  dual-processor  HS20 
server  blades  in  the  next  three  months. 

The  move  to  blades  has  been  swift, 
like  many  other  studios.  ILM  was  us¬ 
ing  stand-alone  workstations  from  Sili¬ 
con  Graphics  Inc.  to  render  images 
three  years  ago.  Today,  it  has  a  2.000- 
processor  render  farm,  affcaionately 
named  Death  Star,  and  half  of  the  proc¬ 
essors  in  it  reside  on  blade  servers 
from  Boston-based  Angstrom  Micro¬ 
systems  Inc.  The  blades  are  "taking 
over  quickly,"  Plumer  says.  At  night,  all 
of  IlM's  desktop  computers  arc  added 
to  the  render  farm  as  well  "Our  proc¬ 
esses  are  working  24  hours  a  day.  seven 
days  a  week."  be  says. 

As  is  the  case  in  other  industric-s.  the 
studios  are  demanding  more  from  IT 
while  budgeting  less.  "Budgets  aren't 
what  they  were.  IHiades)  allow  us  to 
be  more  elTicieni."  say-s  lohnsen. 

Server  blades  are  also  more  efficient 
to  deploy  and  manage.  "We  can  get  a 
system  in-house  and  online  within  two 
days,  where  historically  it  would  take 
us  about  a  week  to  build  a  rack  of 
processors."  says  ILM’s  Plumer. 

While  working  on  The  Two  Towers,  I 
the  second  movie  based  on 
I.R.R.  Tolkien's  lord  of  the 
Rings  novels.  Weta  suddenly 
found  that  it  needed  more 
horsepower.  ‘We  put  in  .>00 
processors  in  about  three 
weeks,  mcluding  building  a 
new  machine  room. '  says  CTO 
Milton  Ngan.  Weta  uses  Blade- 
(U?ntcrs  running  dual-processor 
HS20  server  blades,  fbe  server 
racks,  fully  loaded,  hold  84 
blades,  or  168  processtirs  a 
significant  improvement  twer 
the  density  of  Weta's  lU  servers. 


Management  is  also  more  automated. 
•'With  previous  systenw.  we’d  have  to 
physically  go  to  each  machine,"  Ngan 
says.  The  management  .software  for 
IBM's  BladeCcnier.  IBM  Director,  lets 
Weta  use  scripting  to  remotely  config¬ 
ure  blades,  update  BIOSs  and  other 
firmware,  and  reboot  or  turn  individ¬ 
ual  blades  on  or  off  over  the  network. 

Powering  Up 

The  increa^  processor  power  and 
density  ofbladc  server  farms  has 
yielded  significant  benefits,  but  it  has 
also  presented  .some  unexpected  chal¬ 
lenges.  “We  packed  {the  blades)  in 
pretty  tight,  then  ran  into  power  and 
cooling  issues."  says  Plumer.  Individ¬ 
ual  blades  use  less  power  —  for  exam¬ 
ple.  IBM  says  its  HS20s  are  57%  more 
efficient  than  its  lU  servers  —  but  the 
bbdes  are  packed  in  much  more  dense¬ 
ly.  pushing  power  within  each  fully 
populated  rack  os  high  as  15  kilowatts 
for  the  RladcCenter  and  even  more  for 
some  other  blade  screer  designs. 

At  ILM.  more  reliable  blades,  more 
efficient  rack  desigres  and  the  ability  to 
spread  out  the  blades  to  better  balance 
the  heat  load  in  the  room  seems  to 
have  solved  the  problem,  I’lumer  says. 

Weta  has  dealt  with  hoi  spots,  but 
more  improvements  arc  needed,  Ngan 
says.  One  small  room  containing  1.000 


processors  has  a  concrete  floor  and 
a  low  ceiling  that  ruled  out  having  a 
raised  floor.  Weta  sealed  the  rack.s  to 
improve  airflow,  installed  three  air 
conditioning  units  and  piped  air  into 
the  fronts  of  the  racks  to  cool  the 
blades.  The  blades  no  longer  overheat, 
but  the  air  temperature  at  the  top  of  the 
rack  is  just  under  85  degrees  (75  de¬ 
grees  is  the  recommended  ma.\imum). 
“We  arc  building  a  new  machine  room 
that  will  be  better  equipped  to  deal 
with  blades."  Ngan  says. 

Threshold  Digital  has  a  rack  that 
uses  IBM’s  Calibrated  Vectored  Cool¬ 
ing  design  to  optimize  airflow.  Johnsen 
also  installed  an  air  conditioning  unit 
that  infects  air  into  the  top  of  each  rack 
and  exhausts  it  out  the  bottom. 

“We’ve  had  to  do  some  very  serious 
air  conditioning  to  fill  the  racks  up.  In¬ 
stead  of  feeding  the  room,  we're  feed- 
mg  the  racks,"  he  says.  "We’re  dumping 
five  tons  (60,000  BTTJs]  of  AC  into  the 
racks.”  The  power  requirements  sur¬ 
prised  (nhnsen.  but  "because  wc  have 
four  times  the  dcnsit>’  of  processors, 
that  was  a  fair  trade-off.”  he  .says. 

Ripple  Effect 

The  concentration  of  power  created  by 
migrating  to  blade  server  farms  has 
also  had  ripple  effects  on  the  rest  of 
the  .studios'  IT  infrastructures,  which 
were  designed  to  accommodate 
graphics  work.sution.s.  "The 
faster  processors  have  put  a 
strain  on  our  storage  systems, 
which  put  a  strain  on  the  backup 
^ilg  systems,  which  put  a  strain  on 
our  network."  5ays  Plumer.  "On 
an  average  day.  we  push  75TB  of 
data  acros-s  our  network."  ILM's 
new  data  center,  due  to  open 
next  year,  will  include  a  10  Giga¬ 
bit  backbone.  Weta  has  already 
moved  to  10  Gigabit  Ethernet. 

As  for  storage.  Weta  ha.s  more 
than  60TB  of  network-attached 


storage  (NAS)  on  1.100  disk  drives  un¬ 
der  the  control  of  17  filers.  But  process¬ 
ing  many  similar  frames  in  parallel  cre¬ 
ated  bottlenecks.  “When  you  have  a 
couple  of  hundred  processors  wanting 
(he  same  data,  a  single  file  server  can't 
handle  that.”  says  Ngan.  Weta  spreads 
the  files  across  multiple  filers  and  de¬ 
veloped  a  "virtualized  global  file  sys¬ 
tem"  to  improve  performance. 

Threshold  moved  to  a  Fibre  Channel 
storage  network  and  IBM’s  General 
Parallel  File  System,  a  high-perfor¬ 
mance  cluster  file  system  tlut  sup¬ 
ports  concurrent  file  access.  ILM  is  us¬ 
ing  a  combination  of  NAS  and  storage- 
area  network  devices  as  welt  as  near¬ 
line  storage  to  deal  with  the  large  vol¬ 
umes  of  data  that  move  on  and  off  the 
nctworic  with  each  project.  A  single 
shot  can  require  a  terabyte  of  storage. 
Plumer  says,  up  from  a  few  hundred 
megabytes  a  few  years  ago,  while  the 
work  on  a  single  film  may  generate  in 
excess  of  a  peubyte  of  data. 

All  three  studios  are  looking  for 
ways  to  get  cx'cn  more  out  of  render 
farnuL  ILM  plans  to  double  the  size 
of  its  data  center  to  more  than  12.000 
square  feet  next  year.  As  Weta  begins 
production  on  a  remake  of  Ki^g  Kong. 
Ngan  says  he  is  contemplating  phasing 
in  blades  that  use  Advanced  Micro 
Devices  Inc.’s  64-bit  Optcron  chips 
or  Intel  Corp.’s  Extended  Memory 
64  Technology.  He  expects  the  larger 
memory  space  afforded  by  the  64-bit 
CPUs  to  speed  processing  times. 

Threshold's  Johnsen  says  the  ulti¬ 
mate  goal  is  to  break  the  cycle  of  using 
one  priKcssor  to  render  each  frame. 
“The  is  why  wc  are  desperately  devel¬ 
oping  multithread  and  relational  grid 
strategics  for  our  rendering."  he  says. 

,  (ohnsen  secs  blades  as  a  key  part  of  the 
I  company’s  lO-ycar  plan.  "The  natural 
progre.Hsion  is  to  some  form  of  3-D 
I  gnd  computing ...  and  blades  are  the 
I  next  Ic^cal  step,"  he  says.  O  49526 
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ica.  Calif.  “In  the  visual  effects  busi- 
ness,  there’s  no  end  to  how  many  com¬ 
puters  you  can  use,"  he  says.  A  single 
shot  can  range  from  a  few  seconds  to 
several  minutes.  Each  second  of  film 
includes  24  frames,  each  containing  up 
to  4.996-by-3dl2  pixels  in  32-  or  64-bit 
color.  Separate  passes  roust  be  made 
for  each  object  that  requires  rendering 
in  the  frame  and  for  attributes  such  as 
texture,  lining  and  reflections. 

“In  the  [upcoming]  movie  Foodfi^t!, 
there  is  a  scene  with  13,000  extras,  and 
they  all  have  animation  cycles,"  says 
fc^rosen.  And  artists  often  repeat  the 
rendering  process  to  improve  quality. 
As  many  as  150  passes  may  be  required 
—  a  frame  can  be  processed  on  only 
one  CPU  at  a  time  and  takes  48  to  >7 
hours  to  complete,  he  says.  Tltresbold 
Digiial  already  has  512  processors  in  its 
render  form  and  plans  to  double  that 
using  IBM  eServer  BladeCenters 
equipped  with  dual-processor  HS20 
server  blades  in  the  next  three  months. 

The  move  to  blades  has  been  swiff. 
Like  many  other  studios,  IlM  was  us¬ 
ing  stand-alone  workstations  fforo  Sili¬ 
con  Graphics  Inc.  to  render  images 
three  years  ago.  Today,  h  has  a  2,000- 
processor  render  farm,  affectionately 
named  Death  Star,  and  half  of  the  proc¬ 
essors  in  it  reside  on  blade  servers 
ffom  Boston-based  Angstrom  Micro¬ 
systems  Inc  The  blades  are  “taking 
over  quickly.”  Ptumer  says.  At  night,  all 
of  ILM's  desktop  computers  are  added 
to  the  render  fam  as  well  “Our  proc¬ 
esses  are  woridng  24  hours  a  day.  seven 
days  a  week."  he  says. 

As  is  the  case  in  other  industries,  the 
studios  are  demanding  more  from  IT 
while  budgeting  less.  "Budgets  aren't 
what  they  were.  (Blades)  allow  us  to 
be  more  efitcieni."  says  Johnsen. 

Server  blades  are  also  more  efftcieni 
to  deploy  and  managg.  "We  can  get  a 
system  in-house  and  online  within  two 
days,  where  historically  it  would  take 
us  about  a  week  to  build  a  rack  of 
processors,"  says  ILM’s  Plumer. 

While  working  on  The  TSvo  Towers, 
the  second  movie  based  on 
IJtR.  Tolkien’s  Lord  of  the 
Rings  novels,  Weca  suddenly 
found  that  it  needed  more 
horsepower.  “We  put  in  500 
processors  in  about  three 
weeks,  including  building  a 
new  machine  room."  says  CTO 
Milton  Ngan.  Weta  uses  Blade- 
Centers  running  dual-processor 
HS20  server  blades.  The  server 
racks,  foUy  loaded,  hold  84 
blades,  or  168  processors  a 
signiTicanl  improveroeni  over 
the  density  of  Weta's  lU  servers. 
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processors  has  a  concrete  floor  and 
a  low  ceiling  that  ruled  out  having  a 
raised  floor.  Weta  sealed  the  racks  to 
improve  airflow,  installed  three  air 
conditioning  units  and  piped  air  into 
the  fronts  of  the  racks  to  cool  the 
blades.  The  blades  no  longer  overheat, 
but  the  air  temperature  at  the  top  of  the 
rack  is  just  under  85  degrees  (75  de¬ 
grees  is  the  recommended  maximum). 
"We  are  building  a  new  machine  room 
that  will  be  better  equipped  to  deal 
with  blades,"  Ngan  says. 

Threshold  Digital  has  a  rack  that 
uses  IBM’s  Calibrated  Vectored  Cool¬ 
ing  design  to  optimize  airflow.  Johnsen 
also  installed  an  air  conditioning  unit 
that  injects  air  into  the  top  of  each  rack 
and  exhausts  it  out  the  bottom. 

"We’ve  had  to  do  some  very  serious 
air  conditioning  to  fill  the  racks  up.  In¬ 
stead  of  feeding  the  room,  we're  feed¬ 
ing  the  racks,”  he  says.  "We're  dumpii^ 
five  tons  [60.000  BllJs]  of  AC  into  the 
racks.”  The  power  requirements  sur¬ 
prised  Johnsen.  but  “because  we  have 
four  times  the  density  of  processors, 
that  was  a  foir  trade-off."  he  says. 

Ripple  Effect 

The  concentratioo  of  power  created  by 
migratiog  to  blade  server  farms  has 
also  had  ripple  effects  on  the  rest  of 
the  studios'  IT  infrastructures,  whkh 


Management  is  also  more  automated. 
“With  previous  systems,  we’d  have  to 
physic^  go  to  each  machine."  Ngan 
says.  The  management  software  for 
IBM’s  BladeCenter,  IBM  Director,  lets 
Weta  use  scripcing  to  remotely  config¬ 
ure  blades,  update  BIOSs  and  other 
firmware,  and  reboot  m’  turn  individ¬ 
ual  blades  on  or  off  over  the  network. 

PmranigUp 

The  increased  processor  power  and 
density  of  blade  server  farms  has 
yielded  significant  benents,  but  it  has 
also  presented  some  unexpected  chal¬ 
lenges.  "We  packed  [the  blades)  in 
pretty  tight,  dien  ran  into  power  and 
cooling  issues."  says  Plumer.  Individ¬ 
ual  blades  use  less  power  ~  for  exam¬ 
ple.  IBM  says  its  HS20s  are  57%  more 
efficient  than  its  lU  servers  —  but  the 
blades  are  packed  in  much  more  dense¬ 
ly.  pushing  power  within  each  fully 
populated  rack  as  high  as  15  kilowatts 
for  the  BladeCenter  and  even  more  for 
some  other  blade  server  designs. 

At  ILM,  more  reliable  blades,  more 
efficient  rack  de»gn$  and  the  ability  to 
spread  out  the  blades  to  better  balance 
beat  load  in  the  room  seems  to 
have  solved  the  problem,  Plumer  says. 

Weta  has  dealt  with  hot  spots,  )mt 
more  improvements  are  needed,  Ngan 
says.  One  small  room  containing  LOOO 


storage  (NAS)  on  1,100  disk  drives  un¬ 
der  the  control  of  17  fliers.  But  process¬ 
ing  many  similar  frames  in  parallel  cre¬ 
ated  bottlenecks.  “When  you  have  a 
couple  of  hundred  processors  wanting 
the  same  data,  a  sir^  file  server  can't 
handle  that,"  says  Ngan.  Weta  spreads 
the  flies  across  multiple  fliers  and  de¬ 
veloped  a  “virtualized  global  file  sys¬ 
tem"  to  improve  pcrfbnnaoce. 

Threshold  moved  to  a  Fibre  Channel 
storage  network  and  IBM’s  General 
Parallel  File  System,  a  high-perfor¬ 
mance  cluster  flle  system  that  sup¬ 
ports  concurrent  flle  access.  ILM  is  us¬ 
ing  a  combination  of  NAS  and  stor^^ 
area  network  devices  as  well  as  near¬ 
line  storage  to  deal  with  the  large  vol¬ 
umes  of  data  that  move  on  and  off  the 
network  with  each  project  A  single 
shot  can  require  a  terabyte  of  storage, 
Plumer  says,  up  from  a  few  hundred 
megabytes  a  few  years  ago,  while  the 
work  on  a  single  film  may  generate  in 
excess  of  a  petabyte  of  data. 

All  three  studios  are  looking  for 
ways  to  get  even  more  out  of  render 
farms.  ILM  plans  to  double  the  size 
of  its  data  center  to  more  than  12,000 
square  feet  next  year.  As  Weta  begins 
production  on  a  remake  of  Ktng  Kong. 
Ngan  says  he  is  contemplating  phasing 
in  blades  that  use  Advanced  Micro 
Devices  Inc.’s  64-bit  Opteron  chips 
or  Intel  Coip.’s  Extended  Metnory 
64  Technology.  He  expects  the  larger 
memory  space  afforded  by  the  64-511 
CPUs  to  speed  processing  times. 

Threshold's  Johnsen  says  the  ulti¬ 
mate  goal  is  to  break  the  cycle  of  using 
one  processor  to  render  each  frame. 
“This  is  why  we  are  desperately  devel¬ 
oping  multithread  and  relational  grid 
strategies  for  our  rendering,”  he  says. 
Johnsen  sees  blades  as  a  key  part  of  the 
company’s  10-year  plan.  "Tte  natural 
progression  is  to  some  form  of  3-D 
grid  computing . . .  and  blades  are  the 
next  logical  step,"  he  says.  O  49526 


were  designed  to  accommodate 


graphics  woriistations.  "The 
faster  processors  have  put  a 
strain  on  our  storage  system.*;, 
which  put  a  strain  on  the  backup 
systems,  which  put  a  strain  on 
our  network,"  says  Plumer.  “On 
an  average  day,  we  push  75TB  of 
data  across  our  network."  ILM's 
new  data  center,  due  to  open 
next  year,  will  include  a  10  G^- 
bit  backbone.  Weta  has  already 
moved  to  10  Gigabit  Ethernet. 

As  for  storage,  Weta  has  more 
than  60TB  of  network-attached 
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^Ftve  of  Wall  Streets  most  prestigious  financiai  institutions  knew  exactly  what  they  wanted  from  an  enterprise 

^solution.  More  productivity,  to  keep  up  with  an  ever-changing  globai  market.  And  real-time  flexibility,  to  go  from 
32-  to  M-bit  applications  without  disrupting  their  business.  They  found  both  in  the  AMD  Opteron"  processor 
with  Direct  Connect  Architecture.  It  powers  the  world’s  highest  performing  x86  2-way  and  d-way  servers.  And 
it  heips  speed  up  millions  of  financiai  transanions  every  day  in  trading  stations  and  server  farms.  At  AMD.  we  believe  it’s 
criticai  that  technology  should  migrate  on  your  terms  to  help  you  realize  your  unique  vision.  It’s  one  of  the  reasons  why  HP. 
IBM  and  Sun  offer  enterprise-class  solutions  powered  by  AMD  Opteron  processors.  Would  you  like  to  learn  just  how  much 
of  a  difference  they  can  make  to  your  company'  Go  to  www.amd.com/enterprise 
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Increasingly,  companies  are  turning  to  software 
tools  for  pr^eployment  application  testing.  By  Sue  Hildreth 


SOME  CALL  IT  THE  40  MONKEYS  TEST,"  Others 
prefer  the  more  diplomatic  "Friday  night  piz¬ 
za  party."  Whatever  the  name,  it’s  the  tradi¬ 
tional  method  for  predeployment  software 
testing:  coercing  a  few  dozen  employees  to 
come  in  after  hours  and  beta-test  an  applica¬ 
tion  to  uncover  bugs  and  performance  problems 
before  it’s  rolled  out  to  customers  and  employees. 

Unfortunately,  it  doesn’t  always  work.  Tou  ask  a 
guy  to  run  a  hundred  tests,  he’s  eventually  going  to 
miss  something.”  says  Arthur  Povlot.  business  devel¬ 
opment  manager  at  Tescom  Software  Systems  Test¬ 
ing  Ltd.  in  London. 

It’s  also  virtually  unrepeatable.  "If  SO  people  find 
problems,  which  1  fix  and  then  want  to  do  another 
test . . .  weU.  it  just  isn’t  easy  to  get  everyone  back 
again."  says  Dave  WoUin,  managing  group  director 
of  IT  at  AXA  Financial  Inc.  The  New  Yo^-based 
ftnaoce  and  insurance  company  used  Mercury  Inter¬ 
active  Corp.’s  testing  tool  before  deploying  a  Web 
application  to  field  agents. 

The  desire  for  repeatability  and  accuracy  is  one 
reason  oiganizations  are  moving  to  automate  testing, 
both  to  uncover  bugs  and  ensure  that  they  meet  per¬ 
formance  standards. 

Melissa  Webster,  research  director  at  IOC  in  Fram¬ 
ingham,  Mass.,  says  worldwide  sales  of  automated 
testing  tools  rose  by  8.5%  in  2003  and  are  expected  to 
grow  at  an  annual  compound  rate  of  93%  through 
2007.  "This  sector  has  recovered  faster  than  the  over¬ 
all  IT  market,"  she  says. 

The  increasin^y  integrated  nature  of  IT  systems  is 
another  factor  pushing  companies  toward  automated 
testing.  Human  testers  can't  always  accurately  re¬ 
create  the  flow  of  transactions  between  applications. 
That’s  udiy  Varian  Medical  Systems  Inc.,  a  Palo  Alto, 
Calif, -based  maker  of  medical  devices,  opted  to  pur¬ 
chase  an  automated  functional  testii^  tool.  Silkiest, 
from  Segue  Softvrare  Inc.  last  year. 

"Our  applications  pass  data  like  treatment  and 
patient  information,  so  there  is  a  real-time  flow  be¬ 
tween  them.  We  could  only  test  the  whole  system 
effectively  with  automation."  explains  Asfai^  Ka- 
trekar.  quality  assurance  manager  at  VariaiL 
Also,  manual  testing  added  as  much  as  dx  months 
to  Varian’s  development  cycle,  seriously  lengthening 
the  time  to  market  for  its  products.  "Our  test  suites 
had  grown  so  big  that  we  couldn’t  nm  them  quickly. 
We  needed  automation  to  achieve  a  quicker  turnover 
of  products,"  says  Katrekar. 


Vendors  such  as  Mercury.  Segue  Software,  Com- 
puware  Corp.,  IBM's  Rational  unit,  RadView  Soft¬ 
ware  Ltd.  and  Empirix  Inc.  offer  products  for  testily 
client/server  and  Web-based  applications,  as  well  as 
mainframe  and  other  legacy  systems.  Most  of  these 
products  provide  an  interfoce  for  programming  test 
scripts,  as  well  as  a  capture-replay  tool  or  visual 
scripting  option  for  nontechnical  users.  Also  includ¬ 
ed  are  reporting  tools,  and  man>'  vendors  are  start¬ 
ing  to  offer  diagnostics  capabilities,  as  well  as  moni¬ 
toring  tools  for  tracking  application  performance 
afler  deployment 

Whntiltirtiintt 

Of  course,  mantial  testing  still  has  value,  particularly 
in  functional  testily  where  it’s  useful  to  have  an  ac¬ 
tual  user  try  out  an  application.  "If  you  are  using  an 
automated  test  tool  and  your  testers  don’t  lay  a  hand 
on  the  system,  your  users  will  be  turning  up  bugs  you 
had  no  idea  were  there  —  because  you  never  thou^t 
to  lest  for  them,”  observes  James  Lyndsay,  principal 
consultant  at  Workroom  Productions,  a  software  test¬ 
ing  and  development  company  in  London. 


Human  testers  may  also  be  appropriate  for  tests 
that  won’t  be  repeat^.  Automated  tools  take  time 
to  set  up  and  learn,  so  one-time  tests  are  often  done 
faster  manually.  But  for  repeated  use,  automation  is 
usually  quicker  and  more  accurate. 

For  instance,  NASA  uses  Empirix’s  e-Test  Suite  and 
^uSite  testing  service  for  regression  and  perfor¬ 
mance  testing  on  its  Web-based  grant  management 
applicatioa  There  are  always  new  rules  and  re¬ 
quirements,  so  this  is  not  an  application  that  well 
finish  and  never  touch  again,"  explains  Idriss 
Mekrez,  senior  software  quality  architect  for  NASA's 
Peer  Review  Services.  "Automated  testing  allows  us 
to  define  the  basic  functionality  the  system  needs  to 
deliver  and  test  those  processes  automatically." 

For  mission-critical  applications,  automated  test¬ 
ing  is  usually  well  worth  the  eflfbrt,  given  the  conse¬ 
quences  of  ^ure.  The  applications  that  most  need 
testily  are  those  with  the  biggest  impact  on  the  busi¬ 
ness."  says  Dan  Koloski,  product  man^r  at  Empirix. 
"If  an  application  is  customer-facing  ami  revenue- 
generating,  it  is  ripe  for  substantial  testing." 

While  function^  testing  tools  typically  cost  SS.OOO 
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(  to  $10,000.  perfonnance  tools  can  cost  $50,000  to 
$200,000.  Renting  a  performance  tool  is  less  expen¬ 
sive  —  around  $10,000  to  $20,000  for  a  couple  of 
weeks,  according  to  Povloi.  Some  tool  vendors  rent 
their  products,  as  do  testing  consultants. 

There  are  also  open-source  tools  available. 
“They’re  not  as  polished  as  commercial  tools,  and 
you  have  to  be  a  programmer  to  use  them,"  says  Elis¬ 
abeth  Hendrickson,  president  of  Quality  Tree  Soft¬ 
ware  Inc.,  a  testing  consultancy  in  Pleasanton. 

“But  anyone  doing  testing  ought  to 
know  bow  to  code  anyway.” 

I  Open-source  tools  aren't  as  mature  as 

commercial  products,  warns  Danny 
Faught.  owner  of  Tejas  Software  Con¬ 
sulting  in  Fort  Worth.  Tfexas.  However, 
he  says,  “if  somebody  has  programming 
e]q>ertise,  they  should  definitely  con¬ 
sider  open-source.  If  it’s  going  to  save 
you  $100,000  or  more,  it’s  worth  a  little 
work  upfront." 

ChNsniaTMl 

Regardless  of  whether  you  rent  or  buy, 
here  are  three  key  factors  on  which  to 
evaluate  any  tool 

I  *  Pralocol  ■ntott.  Not  all  tools  sup* 

I  port  every  platform  or  protocol  Some  support  a 

'  range  ofprotocols  but  charge  extra  for  each  one.  As 
Povlot  explains.  “Most  [of  the  tools]  handle  basic 
'  Web  applications,  but  the  selection  narrows  v*en 

I  you  look  at  the  different  operating  systems,  databases 

and  interfaces  that  are  included." 

That  was  a  deciding  &ctor  for  Time  Warner  Tnc 
when  it  evaluated  perfonnance  testing  tools  in  early 
2003.  “With  naost  of  the  tools,  if  you  wanted  to  test 
under  SSL,  ODBC  atKl  Oracle,  you  have  to  buy  those 
components  separately."  says  Robert  Caruso,  senior 
business  systems  analyst  at  Tune  Warner  in  New 
York.  The  company  decided  on  Compuware’s  QA- 
Center  Perfonnance  Edition,  whkb  bundled  all  of 
the  required  protocols  into  its  basic  suite. 

Protocol  suppon  was  also  a  consideration  for 
Apollo  Group  Incn  parent  company  of  Phoenix  Uni¬ 
versity.  •We  were  testing  EJBs,  RMI  [Java’s  Remote 
Method  Invocation],  Oracle.  PeopieSoft.  [BEA  Sys¬ 
tems’]  Tiixedo  transaction  monitor,  and  Web  appli¬ 
cations,"  says  David  Pinkus,  senior  director  of  soft¬ 
ware  at  Apollo  Group.  Pinkus  opted  to  go  with 
Mercury’s  tool  and  pay  extra  for  the  protocols  be¬ 


cause  he  felt  “they  had  a  richer  history  with  more 
diverse  protocols.” 

•  Maintainabllty.  The  ability  to  easily  update  scripts 
when  the  tested  application's  user  interfece  changes 
is  a  concern.  “MainlainabUity  is  a  huge  issue."  says 
Hendrickson.  “What  the  high-end  tools  do  is  provide 
a  GUI  map.  or  test  frame,  which  is  an  abstraa  layer 
between  fields  [on  the  interface]  and  the  test  script, 
so  that  if  the  name  of  a  field  is  changed,  then  you 
only  have  to  make  that  change  in  one  place  and  all 

of  the  scripts  will  work.  They  centralize 
the  references  to  the  user  interface  in 
one  place." 

Componetization  of  scripts  also 
helps.  If  one  part  of  a  script,  such  as  the 
log-on  process,  changes,  only  the  com¬ 
ponent  dealing  with  that  process  needs 
updating,  not  the  entire  script.  Mercury 
says  that  in  its  products,  that’s  part  of 
the  “business  process  testing"  feature 
for  creating  application  workflows  by 
assembling  the  process  components.  It 
also  enables  nontechnical  managers  to 
change  a  test  case  or  create  a  new  one. 

“When  a  business  process  changes, 
the  business  analyst  knows  immeiLate- 
ly,  whereas  a  QA  engineer  may  not. 

Now  the  analyst  can  just  create  a  new  test  case."  says 
Rajesh  Radhakrishnan.  senior  director  of  product 
maricetu^  at  Mercury. 

*  ComiMtlilly  with  your  applcation.  Just  because  the 
software  supports  your  protocols,  that  doesn't  guar¬ 
antee  it  wUl  work  with  the  software  you  need  to  test 
Hendrickson  recommends  bringing  competing  tools 
in-house  for  trial  tests  with  your  applications.  “Of¬ 
ten,  one  tool  will  talk  to  a  particular  application  bet¬ 
ter  than  another.  That’s  why  I  advise  a  hands-on  eval¬ 
uation,"  she  says.  “Give  it  a  small  set  of  representa¬ 
tive  tests  you  plan  to  run  " 

That  also  allows  you  see  bow  easy  the  product  is 
to  use.  When  Time  Warner  evaluat^  performance 
testing  tools,  it  invited  vendors  to  demo  products  us¬ 
ing  Time  Warner’s  applications.  *^0  wanted  to  see 
whether  we  could  take  it  out  of  the  box  and  get  h 
working."  says  Caruso.  “We  don't  have  a  dedicated 
QA  staff,  so  we  needed  something  our  developers 
could  bolt  onto  their  develc^ment  process." 

A  trial  also  lets  you  see  if  the  product  lives  up 
to  its  marketing  claims.  When  tte  Apollo  Group 
brought  two  load-testing  products  in  to  evaluate,  it 
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WididieadwnloliMBb3nilication5.oao(]leiaai- 
ized  they  coutd  monitor  hw  diey  nnk  iffider  laal 
usage.' says  Atthu  PovM.  biiSinesB  davaloiitnant 
manager  St  lascoro  Sothnars  Systems  lesl^ 
Many  concenies  dial  sen  ta^  toots  atoo  oAu 
roondoraig  products.  Manuy  MatadM  sefc  Us 
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Tnatsad  ot  haiAtg  to  wall  tor  aomaone  to  rsport  a 
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agement  appicatton.  H  gathers  stallEdcs  on  die 
partomanca  of  die  system.' he  says,  nottog  that 
downdma  can  have  serious  lapemueaons. 

AXA  Financial  uses  a  moUtoiing  tool.  Idgaz  horn 
Mercuy.  in  adddon  to  testing  tools  It  hatos  us 
mondot  how  dHse  appicadans  pertoim  Bvaiy  hou 
of  eveiy  day.' says  Oasa  WMIn.  manadno  group 
dnctoroffTatAXA. 

-SuiHUnti 


found  that  one  didn't  have  the  capabilities  that  were 
claimed  in  the  product  literature.  From  the  perspec¬ 
tive  of  the  ApoUo  Group,  the  product  “just  ^dn't 
worit."  says  Pinkus.  Doting  that  his  company  went 
with  the  tugher-priced  Mercury  product.  “At  the  end 
of  the  day.  if  it  doesn't  work,  who  cares  if  it's  cheaper, 
or  even  if  it's  fiee.' O  49648 


Hildreth  is  a  Wdlthum,  Moss -based freelance  journai’ 
ist.  She  can  be  reached  at  SueJliidreth^cofrtcast.net 
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to  SlO.OOO,  performance  tools  can  cost  S50.000  to 
S200.000.  Renting  a  performance  tool  is  less  expen¬ 
sive  —  around  $10,000  to  $20,000  for  a  couple  of 
weeks,  according  to  Povlot.  Some  tool  vendors  rent 
their  products,  as  do  testing  consultants. 

TTiere  are  also  open-source  tools  available. 
"They’re  not  as  polished  as  commercial  tools,  and 
you  have  to  be  a  programmer  to  use  them."  says  Elis¬ 
abeth  Hendrickson,  president  of  Quality  Tree  Soft¬ 
ware  Inc„  a  testing  consultancy  in  Pleasanton.  Calif. 
“But  anyone  doing  testing  ought  to 
know  how  to  code  anyw’ay." 

Open-source  tools  aren’t  as  mature  as 
commercial  products,  warns  Danny 
Faught,  owner  of  Tejas  Software  Con¬ 
sulting  in  Fort  Worth.  Texas.  However, 
he  says,  "if  somebody  has  programming 
e.xpertise.  they  should  definitely  con¬ 
sider  open-source.  If  it’s  going  to  save 
you  $100,000  or  more,  it's  worth  a  little 
work  upfront." 

Choosing  a  Tool 

Regardless  of  whether  you  rent  or  buy. 
here  are  three  key  factors  on  which  to 
e\'ajuale  any  tool: 

Protocol  support.  Not  all  tools  sup¬ 
port  every  platform  or  protocol.  Some  support  a 
range  of  protocols  but  charge  extra  for  each  one.  As 
Povlot  explains.  "Most  [of  the  tools]  handle  basic 
Web  applications,  but  the  selection  narnm's  when 
you  look  at  the  different  operating  systems,  databases 
and  interfaces  that  are  included." 

That  was  a  deciding  factor  for  Time  Warner  Inc. 
when  it  evaluated  performance  testing  tools  in  early 
2003.  “With  most  of  the  tools,  if  you  wanted  to  test 
under  SSL,  ODBC  and  Oracle,  you  have  to  buy  those 
components  separately."  says  Robert  Caruso,  senior 
business  systems  analyst  at  Time  Warner  in  New 
York.  TTie  company  decided  on  Compuware's  QA- 
Center  Performance  Edition,  which  bundled  all  of 
the  required  protocols  into  its  basic  suite. 

Protocol  support  was  also  a  consideration  for 
Apollo  Group  Inc.,  parent  company  of  Phoenix  Uni¬ 
versity.  ‘We  were  testing  EfBs,  RMI  [Java’s  Remote 
Method  Invocation],  Oracle.  PeopleSoft,  (BEA  Sys¬ 
tems']  Tuxedo  transaction  monitor,  and  Web  appli¬ 
cations."  says  David  Ptnkus,  senior  director  of  soft¬ 
ware  at  Apollo  Group.  Pinkus  opted  to  go  with 
Mercury’s  tool  and  pay  extra  for  the  protocols  be¬ 


cause  he  felt  “they  had  a  richer  histor>-  with  more 
diverse  protocols." 

Maintainability.  'The  ability  to  easily  update  scripts 
when  the  tested  application’s  user  interface  changes 
is  a  concern.  "Maintainabilit)'  is  a  huge  issue,"  says 
Hendrickson.  "What  the  high-end  tools  do  is  provide 
a  GUI  map.  or  test  frame,  which  is  an  abstract  layer 
between  fields  [on  the  interface]  and  the  test  script, 
so  that  if  the  name  of  a  field  is  changed,  then  you 
only  have  to  make  that  change  in  one  place  and  all 

of  the  scripts  will  work.  They  centralize 
the  references  to  the  user  interface  in 
one  place." 

Componetization  of  scripts  also 
helps.  If  one  part  of  a  script,  such  as  the 
log-on  process,  changes,  only  the  com¬ 
ponent  dealing  with  that  process  needs  j 
updating,  not  the  entire  script.  Mercury  | 
says  that  in  its  products,  that’s  pan  of  i 
the  “business  process  testing"  feature  I 
for  creating  application  workflows  by  | 
assembling  the  process  components.  It  i 
also  enables  nontechnical  managers  to  I 
change  a  test  case  or  create  a  new  one. 

“When  a  business  process  changes, 
the  business  analyst  knows  immediate¬ 
ly.  whereas  a  QA  engineer  may  not 
Now  the  analyst  can  just  create  a  new  test  case."  says 
Rajesh  Radhakrishnan.  senior  director  of  product 
marketing  at  Mercury. 

CompatStity  with  your  application.  lust  because  the 
software  supports  your  protocols,  that  doesn't  guar¬ 
antee  it  will  work  with  the  software  you  need  to  lest. 
Hendrickson  recommends  bringing  competing  tools 
in-house  for  trial  tests  with  your  applications.  "Of¬ 
ten.  one  tool  will  talk  to  a  particular  application  bet¬ 
ter  than  another.  Thai's  why  I  advise  a  hands-on  eval¬ 
uation."  she  says.  “Give  it  a  small  set  of  representa¬ 
tive  tests  you  plan  to  run.” 

That  also  allows  you  see  how  easy  the  product  is 
to  use.  When  Time  Warner  evaluat^  performance 
testing  tools,  it  invited  vendors  to  demo  products  us¬ 
ing  Time  Warner's  applications.  “We  wanted  to  see 
whether  we  could  take  it  out  of  the  box  and  get  it 
working,"  says  Caruso.  “We  don't  have  a  dedicated 
QA  staff,  so  we  needed  something  our  developers 
could  bolt  onto  their  development  process." 

A  trial  also  lets  you  see  if  the  product  lives  up 
to  its  marketing  claims.  When  the  Apollo  Group 
brought  two  load-testing  products  in  to  evaluate,  it 


MONITORING  TOOIS; 

The  Next  Step 

PREOCPLOYlBfT  TEST1N6  obviously  isn't  the  last 
ivord  in  ensunno  the  pertomance  o<  an  application 
After  deploiffnenl.  many  oroarwations  turn  to  moni- 
lohng  tools  to  keep  tra^  of  system  performance 
and  pinpoint  problems  faster. 

five  years  ago.  none  of  them  had  moralonng 
With  the  advent  of  Web  applications,  people  real¬ 
ized  they  ttouW  rnorwlor  how  they  work  under  real 
usage  ’  says  Arthur  PovloL  busviess  developmeni 
manager  al  Tescom  Software  Systems  Testing 
Many  companies  that  sell  testing  tools  ^  otter 
monitoring  products.  Mercury  Interactive  sefis  Ms 
Diagnostics  and  Monitoring  (lonnerty  Topaz  lor 
J^).  Emprix  has  its  OneSight  Web  apphcaiion 
performance  marugement  product  and  FarSne  ^ 
rnonitohnQ  service.  Segue  Software  has  the  SMk- 
Central  F^ormance  Manager,  and  Compuware 
sens  its  Vantage  products. 

‘Instead  of  having  to  wait  lor  someone  to  report  a 
problem,  we  catch  ft  very,  very  guickfy  with  the 
monitonng  tool.*  says  M^ubz.  senior  soft¬ 
ware  quality  architect  for  NASA's  Review  Ser¬ 
vices,  which  uses  Empmx  to  monitor  its  {parit  rnan- 
agement  appheabon.  ‘It  gathers  statistics  on  Ihe 
performance  of  the  system."  he  says,  notng  that 
downtene  can  have  senous  repercussions 
AXA  Firtancial  uses  a  momtormg  tool  Topaz  from 
Mero^.  n  addtoon  to  testing  tools.  "It  helps  us 
momlor  how  these  itopiicabons  perform  every  hour 
of  every  day.'says  Dave  Wolm.  managing  group 
dvectoroflTaiAXA. 

-SuertWah 


found  that  one  didn’t  have  the  capabiliiicx  that  were 
claimed  in  the  product  literature.  From  the  perspec¬ 
tive  of  the  Apollo  Group,  the  product  “just  didn’t 
work."  says  Pinkus.  noting  that  his  company  went 
with  the  higher-priced  Mercury  prudua.  "At  the  end 
of  the  day.  if  it  doesn’t  work,  w-ho  cares  if  h’s  cheaper, 
or  even  if  it’s  free."  O  49S48 


Hildreth  isa  Waltham.  Moss. -based  freelance  journal¬ 
ist.  She  can  be  reached  at  SucJffidrerh  q  ■comcost.ncr. 
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Topic  Maps 


Topic  maps  are  a  way  to  represent  knowledge  struc¬ 
tures  and  their  relationships  to  information  resources 
Based  on  XML,  topic  maps  are  related  in  concept  to 
but  more  powerful  and  inclusive  than  book  indexes. 
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rably  valuable  infi>r 
matton  rcsimtve.  but 
thejirowih  of  avail¬ 
able  informarion  has 
rendered  even  thtssc 
remarkable  tot*ls  far 
less  useful.  Goo^tJe  currently 
indexes  more  than  4  billion 
pages,  and  queries  often  re¬ 
turn  tens  of  thousands  of 
pages,  but  they  are  arranged 
in  no  discemabic  order. 

One  promising  appn)ach. 
still  in  its  infancy.  Ls  called 
topic  mapping. 

Con.sider  the  traditional 
nonfiction  book.  The  care  with 
which  its  index  is  created  can 
nuke  the  dilTercnce  between 
it  tunctiontng  as  a  reference 
wtirk  or  being  a  nearly  useless 
compilation  of  facts.  A  good 
index  shows  what  topics  arc 
covered,  where  to  find  them 
and  how  they  arc  organized: 
offers  subcategorics  and 
croNt-rcferenccs:  and  provides 
pointers  to  related  topics. 

But  even  the  best  such  in¬ 
dexes  have  limitations.  Each 
covers  just  one  work,  and 
books'  very  nature  restricts 
the  types  of  information  an  in* 
de.\  can  reference.  If  we  want 
to  encompass  more  than  the 
idca.s  in  a  single  book  —  say.  a 
company's  accumulated  store 


tif  diK'umcnts  and  its  knowl¬ 
edge  base  —  we  need  to  in¬ 
clude  more  than  words  on  pa¬ 
per.  We  can  find  pieces  of  this 
knowledge  in  e-mail  messages 
and  headers,  individual  calen¬ 
dars  and  schedules,  spread¬ 
sheets.  and  structured  ind  un¬ 
structured  documcnis  m  a  vn- 

_ _  nety  of  formats  Ir  can 

also  be  found  in  data¬ 
bases  and  data  ware¬ 
house’s  of  various 
types;  libraries  of  im¬ 
age’s.  including  audio 
and  video:  and  data 
and  business  rules  contained 
inside  application  programs 
and  data  file's.  And  we  must  al¬ 
ways  be  aware  of  soenirity  and 
privacy  concerns  —  who  can 
accL*ss  what  information? 
Where  do  wc  begin? 

In  contrast,  a  topic  map  is  a 
kind  of  data  structure,  just  a.s 
an  outline  or  a  set  of  categories 
is.  in  practice,  topic  maps  were 


Information 
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standardized  by  the  Interna¬ 
tional  Standards  Organization 
in  2000  (ISO/IEC  132.^0)  as 
XML  Topic  Maps,  or  XTM. 
XTM  provides  a  basic  model 
using  XML  tags  to  represent 
the  structure  of  information 
resource’s,  concepts  and  the 
rclaiionsnips  between  them. 

How  It  Works 

Let's  start  with  a  subiect.  a 
real-world  eniiiy  or  an  idea 
that  we're  representing  in  our 
map  bv  topic.  A  subject  can 
be  almost  anything,  from  an 
abstract  concept  to  a  specific 
document  section,  and  the 
terms  subiect  and  topic  arc 
often  used  interchangeably. 

The  topic  map  rntniel  lets  us 
attach  three  elements  {called 
characteristics)  to  any  given 
topic:  its  names,  its  associa¬ 
tions  with  other  topics  and  its 
tjce-urrenccs  (also  called  re¬ 
sources). 


Names  are  mainly  useful  to 
people  in  dealing  with  topics, 
and  a  topic  doesn't  actually 
need  a  name;  A  typical  cross- 
reference  (c.g..  "see  page  12") 
points  loan  unnamed  topic. 
Alst).  we  typically  group  top¬ 
ics  according  to  some  notion 
of  type. 

For  example,  if  we're  map¬ 
ping  an  IT  installation,  wc 
likely  have  topics  for  specific 
pieces  of  equipment,  home- 
grown  and  purchased  applica¬ 
tions.  data  storage  information 
and  the  like.  Thus,  our  map 
wtiuld  also  include  categorical 
topics  such  as  hardware,  soft¬ 
ware  and  data  structures. 

Associations  arc  the  con¬ 
ceptual  heart  of  topic  maps, 
indicating  how  one  topic  re¬ 
lates  to  another.  For  example. 
Book  A  (a  topic)  is  written  by 
(association)  Author  B  (an¬ 
other  topic). 

Occurrences  are  the  actual 
references  -  mnnters  to  rele¬ 
vant  information  resources. 
Occurrences  could  include 
articles.  btMiks.  images,  audio 
and  video  segments,  applica¬ 
tion  code  routines  or  even 
people.  Typically,  we  refer  to 
occurrence's  with  uniform  re¬ 
source  identifiers  (URl).  an 
Internet  Engineering  Task 
Force  standard  for  addressing 
and  referencing  resources. 

Web  address  URLs  are  a  type 
of  URL 

These  characteristics  of 
topics  aren't  universal.  They 
exist  within  a  limited  contc.xt 
(called  scope),  where  they  arc 
regarded  as  valid. 

The  final  concept  is  identi¬ 
ty.  Ideally,  there  should  be  one 
topic  for  each  subject,  and 
vice  versa,  (n  practice,  multi¬ 
ple  topics  can  represent  a  sin¬ 
gle  subject,  as  when  different 
topic  maps  are  molded.  And  in 
a  single  topic  map.  we  might 
find  "William  F.  Bonney"  and 
"Billy  the  Kid"  as  separate  top¬ 
ic  names  referring  to  the  same 
subject,  a  historical  person. 

But  the  topic  name  "Billy 
the  Kid"  might  also  refer  to 
the  ballet  about  the  outlaw's 
life  for  which  Aaron  Copland 
composed  the  music.  To  get 
aniund  these  problems,  we 
can  unambiguously  define 
the  identity  ofa  subject 
through  resources  called 


1  subject  indicators. 

I  The  promise  of  topic  m.ips 
'  Ls  clear.  Charles  Goldfarb,  one 
of  the  creators  of  (Generalized 
Markup  Language,  the  progen¬ 
itor  of  XML  and  all  of  today's 
markup  languages,  has  called 
topic  maps  "the  Cl’S  of  the  in- 
I  formation  universe." 

'  Unfortunately,  the  idea  of 
I  topic  maps  is  still  well  ahead 
I  of  its  time.  Tools  for  creating 
j  topic  maps  do  exist,  along 
I  with  some  implementations 
j  in  specific  subject  areas,  but 
I  these  are  primariK  orieni- 
I  ed  toward  representing  .ind 
organizing  content,  and  they 
I  don't  yet  adequately  address 
I  the  task  of  content  jrcation, 

I  The  biggest  job  m  building  .a 
'  topic  map  lies  in  defining  the 
j  set  of  topics  and  re'iaiionships. 

'  finding  the  rcicv.ini  occur¬ 
rences  and  then  examining  the 
data  for  cross-references, 
.aliases  and  other  nelptui  looLs. 
Whih-  some  pieces  of  this  iob. 
a.s  with  book  indexing,  can  be 
automated  tcspeciath  for 
structured  data)  the  biggest 
pan  still  requires  a  human 
im:tgination  to  son  out. 

But  in  a  few  more  vears.  as 
Moore's  Law  continues  to 
expand  our  computing  capa¬ 
bilities.  wc  may  well  see  topic 
maps  come  into  their  own.  An 
application  programming  in¬ 
terface  specification  for  topic 
maps  ihttp://xmlcoverpages. 
org/ni2004-04-09-<Lhtml)  was 
released  in  April,  so  develop¬ 
ment  in  (his  area  is  proceed¬ 
ing.  For  now.  topic  maps  arc 
something  to  be  aware  of. 
even  if  they're  not  quite  ready 
for  prime  time.  O  49527 

Kay  is  a  Computcrw  orld  con¬ 
tributing  writer  in  Worcester. 
Mass.  You  can  contact  him  at 
russkayia’charrernet. 
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Topic  Maps 
■ 

DEFINITION 

Topic  maps  are  a  way  to  represent  knowledge  struc¬ 
tures  and  their  relationships  to  information  resources. 
Based  on  XML,  topic  maps  are  related  in  concept  to 
but  more  powerful  and  inclusive  than  book  indexes. 


ST  SUSSCLL  KJkV 

COMPUTERS  have  so 
overloaded  us  with 
data,  it's  become  in* 
creasin^y  difftoilt  to 
find  the  information  we  seek. 
Beginning  in  the  1990s,  power¬ 
ful  search  engines  like  Yahoo. 
AltaVista  and  Google  made 

the  Web  an  incompa-  _ 

rably  valuable  infor¬ 
mation  resource,  but 
the  growth  of  avail¬ 
able  information  has 
rendered  even  those 
remarkable  tools  far 
less  useful.  Google  currently 
indexes  more  than  4  billion 
pages,  and  queries  often  re¬ 
turn  tens  of  thousands  of 
pages,  but  they  are  arranged 
in  no  discemable  order. 

One  promising  approach, 
still  in  its  infancy,  is  called 
topic  mapping. 

Consider  the  traditional 
nonfiction  book.  The  care  with 
which  its  index  is  created  can 
make  the  difference  between 
it  functioning  as  a  reference 
work  or  being  a  nearly  useless 
ccKnpilation  of  fiKts.  A  good 
index  shows  what  topics  are 
covered,  where  to  them 
and  bow  they  are  organized: 
offers  subcat^ories  and 
cross-references;  and  provides 
pointers  to  related  topics. 

But  even  the  best  such  in¬ 
dexes  have  Unutations.  Each 
covers  just  one  work,  and 
books’ very  nature  restricts 
the  types  of  informarion  an  in¬ 
dex  can  reference.  If  we  want 
to  encompass  more  than  the 
ideas  in  a  sii^e  book  —  say,  a 
company's  accumulated  store 


of  documents  and  its  knowl¬ 
edge  base  —  we  need  to  in¬ 
clude  more  than  words  on  pa¬ 
per.  We  can  find  pieces  of  this 
knowledge  in  e-mail  messages 
and  headers,  individual  calen¬ 
dars  and  schedules,  spread¬ 
sheets.  and  structured  and  un¬ 
structured  documents  in  a  va- 

_  riety  of  formats.  It  can 

also  be  found  in  data¬ 
bases  and  data  ware¬ 
houses  of  various 
types;  libraries  of  im¬ 
ages.  including  audio 
and  video;  and  data 
and  business  rules  contained 
inside  applicatioo  programs 
and  data  Hies.  And  we  must  al¬ 
ways  be  aware  of  security  and 
privacy  concerns  —  who  can 
access  what  information? 
Where  do  we  begin? 

In  contrast,  a  topic  map  is  a 
kind  of  data  structure,  just  as 
an  outline  or  a  set  of  eateries 
is.  In  practice,  tc^  maps  were 


standardized  by  the  Interna¬ 
tional  Standards  Organization 
in  2000  (ISO/IEC 13250)  as 
XML  Topic  Maps,  or  XTM. 
XTM  provides  a  basic  model 
using  XML  tags  to  represent 
the  structure  of  information 
resources,  concepts  and  the 
relationships  between  them. 

HowItWbrfcs 

Let's  start  with  a  subject,  a 
real-world  entity  or  an  idea 
that  we’re  representing  in  our 
map  by  topic.  A  subject  can 
be  almost  anything,  from  an 
abstract  concept  to  a  speciHc 
document  section,  and  the 
terms  subject  and  topic  are 
often  used  intercha^abiy. 

The  topic  map  model  lets  us 
attach  three  elements  (called 
characteristics)  to  any  giveo 
topic  its  names,  its  associa¬ 
tions  with  other  topics  and  its 
occurrences  (also  called  re¬ 
sources). 


Names  are  mainly  useful  to 
people  in  dealing  with  topics, 
and  a  topic  doesn't  actually 
need  a  name;  A  typical  cross- 
reference  (e.g.,  "see  page  12") 
points  to  an  unnamed  topic. 
Also,  we  typically  group  top¬ 
ics  according  to  some  notion 
of  type. 

For  example,  if  we’re  map¬ 
ping  an  IT  installation,  we 
likely  have  topics  for  speciHc 
pieces  of  equipment,  home¬ 
grown  and  purchased  applica¬ 
tions,  data  storage  information 
and  the  like.  Thus,  our  map 
would  also  include  categorical 
topics  such  as  hardware,  soft¬ 
ware  and  data  structures. 

Associations  are  the  con¬ 
ceptual  heart  of  topic  maps, 
in^cating  how  one  topic  re¬ 
lates  to  another.  For  example, 
Book  A  (a  topic)  is  written  by 
(association)  Author  B  (an¬ 
other  topic). 

Occurrences  are  the  actual 
references  —  pointers  to  rele¬ 
vant  information  resources. 
Occurrences  could  include 
articles,  books,  images,  audio 
and  video  segments,  applica¬ 
tion  code  routines  or  even 
people.  Typically,  we  refer  to 
occtirrences  with  uniform  re¬ 
source  identiHers  (URl).  an 
Internet  Engineering  Task 
Force  standard  for  addressing 
and  referencing  resources. 

Web  address  URLs  are  a  type 
of  URL 

These  characteristics  of 
topics  aren't  universaL  They 
exist  within  a  limited  context 
(called  scope),  where  they  are 
regarded  as  valid. 

The  final  concept  is  identi¬ 
ty.  Ideally,  there  should  be  one 
topic  for  each  subject,  and 
vice  versa.  In  practice,  multi¬ 
ple  topics  can  represent  a  sin¬ 
gle  subject,  as  when  different 
topic  maps  are  merged.  And  in 
a  single  tcqiic  map,  we  might 
Hod  ‘'WUlbm  F.  Bonney"  and 
"Billy  the  Kid*’  as  separate  top¬ 
ic  names  referring  to  the  same 
subject,  a  historical  person. 

But  the  topic  name  "Billy 
the  Kid"  mi^t  also  refer  to 
the  ballet  about  the  outlaw’s 
life  for  which  Aaron  Copland 
composed  the  music.  To  get 
around  these  problems,  we 
can  unambiguously  define 
the  identity  of  a  subject 
through  resources  called 


subjea  indicators. 

The  promise  of  topic  maps 
is  clear.  Charles  Goldfarb,  one 
of  the  creators  of  Generalized 
Markup  Language,  the  progen¬ 
itor  of  XML  and  all  of  today’s 
markup  Ullages,  has  called 
topic  maps  “the  GPS  of  the  in¬ 
formation  universe." 

Unfortunately,  the  idea  of 
topic  maps  is  still  well  ahead 
of  its  time.  Tools  for  creating 
topic  maps  do  exist,  along 
with  some  implementations 
in  specific  subject  areas,  but 
these  are  primarily  orient¬ 
ed  toward  representing  and 
organizing  content,  and  they 
don't  yet  adequately  address 
the  task  of  content  creation. 

The  biggest  job  in  building  a 
topic  map  lies  in  defining  the 
set  of  topics  and  relationships. 
Hndii^  the  relevant  occur¬ 
rences  and  then  exaimmng  the 
data  for  cross-references, 
aliases  and  ocher  beiptul  tools. 
While  some  pieces  of  this  job, 
as  with  book  indexing,  can  be 
automated  (especially  for 
structured  data),  (he  biggest 
part  still  requires  a  human 
imaginatioD  to  sort  out. 

But  in  a  few  more  years,  as 
Moore's  Law  continues  to 
expand  our  computing  capa¬ 
bilities.  we  may  well  see  topic 
maps  come  into  tbeir  own.  An 
application  programming  in- 
teifoce  speciHcation  for  topic 
maps  Ihttp'y/xmhcoveqxjges. 
ofg/Hi20(W-04-09-ahlml)  was 
released  in  ApriL  so  develop¬ 
ment  in  this  area  is  proceed¬ 
ing.  For  now.  topic  maps  are 
something  to  be  aware  of. 
even  if  they’re  not  quite  ready 
for  prime  time.  O  48627 


Kay  is  a  Computerworid  con- 
rribuftng  writer  in  Worcester, 
Mass.  You  can  contact  him  at 
rus^uty@dianer.net 
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Expanding  Responsibility 
For  Incident  Response 

Indudingotherdepartmentsinacompre- 
hensmplancanbecriticaltosuccess- 
and  bog  down  the  process.  By  Roger  Fbix 


I'VE  RECENTLY  been  work¬ 
ing  on  an  IT  sccuriry  inci¬ 
dent  response  plan  for  a 
multinational  financial  ser¬ 
vices  company.  A  good  plan 
helps  you  respond  calmly, 
carefiilly  and  quickly  to  a 
security  breach.  It  covers  how 
a  breach  is  detected  and  ana¬ 
lyzed.  how  the  response  work 
is  managed  and  communicat¬ 
ed.  and  how  to  learn  from 
the  breach  and  make  sure  it 
doesn't  happen  again. 

My  main  problem 
with  the  e>x>iving  plan 
is  that  the  nmre  I  think 
about  it.  the  more 
people  and  depan- 
ments  1  ask  to  be  in* 
volved.  which  mean.s 
more  input  roust  be 
included  in  any  response. 

Even  HR  is  in  the  picture. 

One  group  that  is  not  yet  on 
the  list  of  parties  to  call  after  a 
security  breach  —  but  perhaps 
should  be  —  is  the  facilities 
team.  That’s  because  in  my  fa¬ 
vorite  security  breach  ever,  it 
was  the  facilities  team's  pest- 
control  skills  that  fingered 
the  culprit. 

I’d  arrived  at  work  to  hear 
that  $8  million  in  unauthorized 
trades  had  been  executed  on 
the  foreign  exchange  markets 
at  3  a.m  The  terminals  that 
had  been  used  had  no  access 
control,  since  speed  is  of  the 
essence  in  that  type  of  trans¬ 
action.  Any  access  control  that 
slows  down  a  response  to  a 
trade  could  lose  us  large 
amounts  of  money.  The  trader 
had  failed  to  log  out  when  he 
left.  The  traders  know  the)' 
should  log  out.  but  most  res¬ 
olutely  Ignore  this,  and  they 
cam  far  too  much  money  to  be 
easily  forced  to  comply. 

Wc  investigated  everything: 
trading  system  logs,  system 
logs  for  surrounding  PCs,  net¬ 


work  traffic  to  those  trading 
systems,  cleaning  personnel 
who  had  been  nearby  at  the 
time,  closed-circuit  TV  tapes 
—  the  works.  But  nothing 
helped,  until  one  of  the  facili¬ 
ties  staff  noticed  mou.se  drop¬ 
pings  on  an  adfacem  desk,  liic 
only  answer  we  could  come 
up  with  was  that  a  mouse  had 
run  across  the  trader's  key¬ 
board  and  pressed  the  button 
to  accept  an  SB  million  trade. 
In  the  end.  the  mouse  was 

duly  trapped  by  the 
facilities  team,  chris¬ 
tened  For-Ex  Fred¬ 
die  and  kept  as  a  pet. 

The  worst  bit 
about  the  investiga¬ 
tion  was  that  the 
S8  million  worth  of 
trades  were  backed  out  that 
morning  by  the  dealers  for  a 
54,000  proni,  so  when  we 
asked  the  traders  to  stop  this 
sort  of  thing  from  happening 
again,  they  just  waved  the 
profit  figures  in  our  face  and 
laughed.  But  their  terminals 
did  get  upgraded  soon  after¬ 
ward  to  a  model  capable  of 
time-delay  log-outs. 

Having  several  departments 
involved  at  some  level  can  pay 
off  in  the  long  run.  and  every¬ 
thing  in  our  security  incident 
respoase  plan  is  there  for  a 
good  reason.  Bui  now  that 


We’re  told  that 
when  someone 
discovers  a  security 
breach,  they  should 
call  HR  first  and  IT 
security  second. 


wc  re  nearly  finished,  we  have 
an  extremely  large  document 
that  sets  out  a  great  theoreti¬ 
cal  approach  but  bears  no  re¬ 
semblance  whatsoever  to  how 
I've  successfully  dealt  with  se¬ 
curity  breaches  in  the  past. 

Adding  Complexity 

For  example,  there  is  the  issue 
of  forensics,  or  gathering  and 
preserving  evidence.  Foren¬ 
sics  is  a  specialized  area,  and 
the  more  we  research,  the 
more  we  find  that  needs  to  be 
done.  Take  into  account  the 
number  of  legal  jurisdictions 
this  multinational  company 
covers,  and  you  end  up  with 
an  extremely  complicated  set 
of  rules  to  follow  during  your 
response  work.  This  adds  a 
massive  extra  layer  of  com¬ 
plexity  to  the  response  at  a 
time  when  you  want  your 
technical  staff  to  be  able  to 
think  clearly  and  quickly.  If 
you  try  to  follow  forensics 
best  practices^  you  slow  down 
your  response  and  potentially 
expose  yourself  to  more  risk. 

If  you  don't  do  it  by  the  book, 
your  data  is  likely  to  be  of  lit¬ 
tle  use  if  you  ever  go  to  court. 

Many  people  address  this 
problem  by  calling  in  special¬ 
ists.  You  need  to  call  them  in 
early  if  they’re  to  be  of  much 
use.  but  you  need  them  only  if 
the  breach  is  likely  to  go  to 
court.  I’m  having  trouble  find¬ 
ing  people  willing  to  make  that 
decision,  since  it’s  a  hard  call 
to  make  early  in  the  process. 

Take  Clifford  Stoll's  semi- 
legendary  discovery  of  a  57- 
cent  discrepancy  in  his  IT  ac¬ 
counting  records,  detailed  in 
his  book  The  Cuckoo's  Egg.  A 
few  cents  seem  like  a  very 
small  concern  indeed,  and 
most  people  would  never  have 
bothered  to  investigate.  But 
Stoll  did.  and  he  unraveled  a 
(ale  of  international  espi¬ 
onage.  But  had  you  been  in  his 
shoes,  when  in  the  process 
would  you  have  decided  to 
I  call  in  the  forensic  specialists? 


If  you  did  so  when  you  first 
discovered  the  57-cciit  dis¬ 
crepancy,  you'd  get  laughed  at. 

Wc  also  have  an  ongoing  Is¬ 
sue  with  the  HR  department. 
TTicy  want  to  be  involved  in 
I  every  response,  right  from  the 
beginning,  in  fact,  we're  told 
that  when  someone  discovers 
a  security  breach,  they  should 
call  HR  first  and  IT  security 
second.  HR  reasons  that  every 
security  breach  involves  staff, 
so  their  expertise  is  essential. 

At  one  level  I  can  under¬ 
stand  this  argument,  and  in 
some  cases  their  help  is  in¬ 
valuable.  I  once  had  to  investi¬ 
gate  a  Swiss  employee  who 
was  searching  for  pedophile 
pom.  But  because  of  the  strict 
nature  of  Swiss  employment 
laws,  our  investigation  was 
hamstrung.  In  that  case,  the 
HR  department  stepped  in 
and  resolved  the  situation 
brilliantly. 

But  I’ve  also  had  HR  staff 
looking  over  my  shoulder 
while  we  were  trying  to  con¬ 
tain  a  virus  that  infected  our 
network  six  hours  before  the 
'  antivirus  companies  brought 
out  the  antivirus  signatures 
wc  needed.  Most  of  my  team 
in  that  incident  were  dyed-in- 
the-wool  techies,  with  the 
stereotypical  techie's  scathing 
disregajxl  for  the  HR  slaAT's 
rather  softer  skills.  Trying  to 
stop  the  two  camps  from 
fighting  took  up  more  time 
than  1  could  afford.  Hopefully 
we  can  find  a  middle  ground 
with  HR.  but  i  think  that's 
going  to  owe  more  to  internal 
politics  and  diplomacy  than  it 
will  to  common  sense. 

Despite  these  issues,  it's 
worthwhile  to  include  other 
departments  in  our  incident 
response  plan.  Indeed,  as  I  re¬ 
view  the  processes  and  proce¬ 
dures  we're  putting  in  place. 
I've  been  asking  myself  one 
question:  How’  would  this  have 
helped  us  deal  with  Freddie?  I 
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Expanding  Responsibility 
For  Incident  Response 


InckidingotfierdepartnentsinacoiniNB- 
hensiveplancanbBcriticaltosuccess- 
and  bog  dowm  the  process.  ^  Roger  Foix 


I 'VI RECCNTLY  been  woric- 
tag  OQ  an  IT  security  inci¬ 
dent  respcMise  plan  for  a 
multinational  nnandal  ser¬ 
vices  company.  A  good  plan 
helps  you  respond  calmly, 
carefully  and  qukUy  to  a 
security  breach.  It  covers  bow 
a  breach  is  detected  and  ana¬ 
lyzed,  how  the  response  work 
is  managed  and  communicat¬ 
ed.  and  how  to  learn  from 
the  breach  and  make  sure  it 
doesn't  happen  aga*" 

My  main  problem 
with  die  evolring  plan 
is  that  the  more  I  rhtub 
about  it,  the  more 
people  and  depart¬ 
ments  I  ask  to  be  in¬ 
volved,  which  means 
more  input  must  be 
included  in  any  response. 

Even  HR  is  in  the  picture. 

One  group  that  is  not  yet  on 
the  list  of  parties  to  call  after  a 
security  breach  —  but  perhaps 
should  be  —  is  the  facilities 
team.  That’s  because  in  fa¬ 
vorite  security  breach  ever,  it 
was  the  fscili^  team’s  pest- 
control  skills  that  fingered 
the  culprit 

rd  arrived  at  work  to  bear 
that  S8  miUioD  in  unauthorized 
trades  bad  been  executed  on 
the  foreign  exchange  markets 
at  3  ajD.  Tbe  terminals  that 
had  been  used  had  DO  access 
control  since  speed  is  of  tbe 
essence  in  that  type  of  tzans- 
actioQ.  Any  access  control  that 
slows  down  a  response  to  a 
trade  could  lose  us  large 
amounts  of  money.  The  trader 
had  failed  to  log  out  when  he 
left.  The  traders  know  they 
should  tog  out.  but  most  res¬ 
olutely  ignore  this,  and  they 
earn  tai  too  much  money  to  be 
easily  forced  to  comply. 

We  investigated  everything: 
trading  system  logs,  system 
logs  for  surrounding  PCs.  net¬ 


work  traftic  to  those  trading 
systems,  cleaning  petsoonei 
who  had  been  nearby  at  the 
time,  closed-circuit  TV  tapes 
—  tbe  works.  But  nothli^ 
helped,  until  one  of  the  facili¬ 
ties  staff  noticed  mouse  drop¬ 
pings  on  an  adjacent  desk.  'Hie 
only  answer  we  could  come 
up  with  was  that  a  mouse  had 
run  across  the  trader’s  key¬ 
board  and  pressed  the  button 
to  accept  an  S8  million  trade. 

In  tbe  end.  the  mouse  was 

duly  tr^ped  by  the 
facilities  team,  chris¬ 
tened  For-Ex  Fred¬ 
die  and  kept  as  a  pet. 

Tbe  worst  bit 
about  the  investiga¬ 
tion  was  that  the 
S8  million  worth  of 
trades  were  backed  out  that 
morning  by  the  dealers  for  a 
S4.000  profit,  so  when  we 
asked  the  traders  to  stop  this 
sort  of  thing  from  happening 
again,  they  just  waved  tbe 
profit  f^ures  in  our  face  and 
lauf^ted.  But  their  terminals 
did  get  upgraded  soon  after¬ 
ward  to  a  model  capable  of 
time-delay  log^mts. 

Having  several  departments 
involved  at  some  level  can  pay 
off  in  the  long  run.  and  every¬ 
thing  in  our  security  incident 
response  plan  is  there  for  a 
go(^  reason.  But  now  that 


VWs’re  told  that 
whm  someone 
discovers  a  security 
breach,  they  should 
cal  HR  first  and  IT 
security  second. 


we’re  nearly  finished,  we  have 
an  extremely  Urge  document 
that  sets  out  a  great  theoreti¬ 
cal  approach  but  bears  no  re¬ 
semblance  whatsoever  to  bow 
I've  successfully  dealt  with  se¬ 
curity  breaches  in  the  past. 

AddngComplenty 

Fbrexan^)le,  tbm  is  the  issue 
of  forensics,  m  gathering  and 
preserving  evidence.  Foren¬ 
sics  b  a  specialized  area,  and 
the  more  we  research,  the 
more  we  find  that  needs  to  be 
done.  Take  into  account  tbe 
number  of  legal  jurisdictions 
this  multinational  company 
covers,  and  you  end  up  with 
an  extremely  coo^Ucated  set 
of  rules  to  follow  during  your 
response  work.  This  adds  a 
massive  extra  layer  of  com¬ 
plexity  to  the  response  at  a 
time  when  you  want  your 
technical  staff  to  be  able  to 
think  clearly  and  quickly.  If 
you  try  to  follow  forensics 
best  practices,  you  slow  down 
your  response  and  potentially 
expose  yourself  to  more  risk. 

If  you  don’t  do  it  by  the  book, 
your  data  is  likely  to  be  of  lit¬ 
tle  use  if  you  ever  go  to  court. 

Many  people  address  thb 
problem  by  calling  in  special¬ 
ists.  You  need  to  call  them  in 
early  if  theyYe  to  be  of  much 
use,  but  you  need  them  only  if 
tbe  brea^  is  likely  to  go  to 
court  Tm  having  trouble  find¬ 
ing  people  willing  to  make  that 
decision,  since  it’s  a  hard  call 
to  make  early  in  the  process. 

Take  Clifford  Stoll's  semi- 
legendary  discovery  of  a  57- 
cent  discrepancy  in  his  IT  ac¬ 
counting  records,  detailed  in 
his  book  77te  Cuckoo’s  Egg.  A 
few  cents  seem  tike  a  very 
small  concern  indeed,  and 
most  people  would  never  have 
bothered  to  investigate.  But 
StoU  did,  and  be  unraveled  a 
tale  of  international  espi¬ 
onage.  But  had  you  been  in  his 
sho^  when  in  the  process 
would  you  have  decided  to 
call  in  tbe  forensic  specialists? 


SECniTY 

miNMors 


If  you  did  so  when  you  first 
discovered  the  S7-cent  dis¬ 
crepancy.  you’d  get  laughed  at 

We  also  have  an  ongoing  is¬ 
sue  with  the  HR  department 
They  want  to  be  involved  in 
every  response,  right  from  the 
beginning.  In  foct  we’re  told 
that  when  someone  discovers 
a  security  breach,  they  should 
call  HR  ftrst  and  IT  security 
second.  HR  reasons  that  every 
security  breach  involves  staff, 
so  their  e3q>ertise  is  essential 

At  (HK  1^1 1  can  under¬ 
stand  this  argument  and  in 
some  cases  their  help  is  in¬ 
valuable.  I  once  had  to  investi¬ 
gate  a  Swiss  employee  who 
was  searching  for  pedophile 
S>om.  But  because  of  tbe  strict 
nature  of  Swiss  employment 
laws,  our  investigation  was 
hamstrung.  In  that  case,  the 
HR  department  stepped  in 
and  resolved  the  situation 
brilliantly. 

But  I've  also  bad  HR  staff 
looking  over  my  shoulder 
while  we  were  trying  to  con¬ 
tain  a  virus  that  infected  our 
network  six  hours  beft>re  the 
antivirus  companies  brought 
out  the  antivirus  signatures 
we  needed.  Most  of  my  team 
in  that  incident  were  dyed-in- 
the-wool  techies,  with  the 
stereotypical  techie’s  scathing 
disregard  for  the  HR  staff’s 
rather  softer  Trying  to 
stop  tbe  two  camps  from 
Halting  took  up  more  time 
than  I  could  afford.  Hopefully 
we  can  find  a  middle  ground 
with  HR.  but  I  think  that's 
going  to  owe  more  to  internal 
politics  and  diplomacy  than  it 
will  to  common  sense. 

Despite  these  issues,  it’s 
worthwhile  to  include  other 
departments  in  our  incident 
response  plaa  Indeed,  as  I  re¬ 
view  the  processes  and  proce¬ 
dures  we’re  putting  in  place, 
Fve  been  asking  myself  one 
question:  How  would  thk  have 
be4>ed  us  deal  with  Freddie?  I 
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Aurema  Launches 
Tool  for  VMware 

Aurema  Inc.  in  Cupertirw.  CalK.. 
has  released  a  worMoad  manage¬ 
ment  product  for  VMware  hc.'s 
virtualization  software.  Aurema’s 
ARMTech  worlUoad  manaoement 
tool  helps  optimize  CPU  and 
memory  use.  The  price  is  S595 
per  CPU  for  servers  and  SS9.99 
per  seat  for  desktops  artd  work¬ 
stations.  No-cost.  30-day  evalua¬ 
tion  verskms  are  also  available. 


ADIC  Upgrades 
StorNext  Software 

Advanced  Digital  biformation 
Corp.  in  Redmond.  Wash.,  an¬ 
nounced  a  new  version  of  Stor- 
Next  PoiicHMsed  data  manage¬ 
ment  software  for  information 
life -cycle  mattagement  StorNext 
2.4  features  interoperabiSty  wHh 
an  expanded  range  of  operatirtg 
environments  and  storage  sys¬ 
tems  from  leadmg  vendors,  irv 
duding  Hewfett -Packard  Co.  and 
EMC  Corp.  A  fourxtierrt  system 
wNh  10TB  of  daU  S67.000. 


Cray  Unveils  XD1 
Supercomputer 

Seattie-fMsed  Cray  bic.  has  an¬ 
nounced  the  avaiabifity  of  Its  X01 
supercomputer  im.  which  starts 
at  $100,000.  Cray  added  the  X01 
system  to  3s  lineup  through  the 
acquisition  of  OctigaBay  last 
April,  ft's  aimed  at  the  computer- 
aided  engineering  market  and  is 
capable  of  running  more  than  23 
precertified  commercial  CAE  ap- 
pTications.  the  company  said. 


Centage  Updates 
Budget  Maestro 

Centage  Corp.  in  Houston  has  in¬ 
troduced  Version  5.8  of  its  Bud¬ 
get  Maestro  business  perfor¬ 
mance  management  software.  It 
mckides  a  comprehensive  library 
of  Crystal  Report  templates  and 
tighter  integration  with  Microsoft 
Excel  A  single-user  desktop  edi¬ 
tion  is  S2.49S;  the  enterprise  edi¬ 
tion  is  $12,995. 
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The  Comini 
Battle  of  theTiians 


History  teaches  us  that  a  challenge 
to  a  superior  power  can  succeed  only  by 
changing  the  rules  under  which  any  con¬ 
frontation  takes  place.  Head-on  attacks 
on  strong,  entrenched  positions  are 
easily  repelled.  That’s  why  RCA,  Honeywell,  Xerox, 


GE.  Burroughs.  Univac,  Am¬ 
dahl  and  many  others  failed 
when  they  tried  to  compete 
with  IBM.  Hut's  why  the 
computing  landscape  over 
the  past  IS  years  has  become 
littered  with  so  many  grave¬ 
stones  of  firms  overcome  by 
Microsoft. 

Now  a  new  Microsoft  chal¬ 
lenger  is  emerging  on  the 
horizon:  Google.  What 
makes  Google  different  is 
that  it  follows  innovative 
rules  as  it  carves  out  a  share 
of  the  IT  business.  Google's 
emerging  strategy  may  give  us  a  clue  as 
to  who  may  be  bidding  for  IT  leadership 
in  our  uncertain  industry  by  the  end  of 
this  decade. 

Microsoft’s  power  is  based  on  selling 
customers  software  that  becomes  a  se¬ 
quence  of  increasingly  sticky  entangle¬ 
ments.  Once  you've  installed  Microsoft 
operating  software  on  a  dcskn^p,  Liptop 
or  cell  phone,  the  steadily  increasing  in¬ 
clusiveness  of  features  will  raise  your 
aists  for  choosing  any  alternative. 
Go()glc.  tm  the  other  hand,  relies  on  a 
generic  browser  tt»  gain  access  U'  a 
rapid))’  growing  menu  of  services. 

Micr\>sotVs  business  model  is  based 
on  mass  distribution  of  seiftware.  where 
econiimics  of  sc.ile  generate  high  profit 
margins.  Revenue  growth  depends  on 
extending  software  funciH'nality..ind  the 
customer  pays  for  each  upgrade.  (»o«)gle‘s 
business  model  is  based  on  »>frering 
added  siTvices  Kised  on  economies  tif 
se-ale  in  i»pcr.tijons  and  on  innovatiim. 
Revenue  growth  results  friuii  extending 
the  Lvonomie  utilit)  «»f  services  that  the 
customer  can  add  at  low  cost. 


Microsoft’s  superior  prof¬ 
its  are  based  on  passing  on 
just  about  all  the  costs  —  in¬ 
cluding  those  of  support  la¬ 
bor  and  capital  —  to  the 
customer.  When  you  adopt 
the  Microsoft  environment, 
you  can't  ever  budget  for 
the  total  costs  of  ownership 
in  (he  long  run.  Google  is  a 
r>etwork  services  provider. 
Google  owns  and  operates 
perhaps  the  world's  largest 
computer  complex,  consist¬ 
ing  of  a  rapidly  growing 
population  of  100.000  serv¬ 
ers  that  manage  petabytes  of  data  with 
unprecedented  reliability*  and  response 
time.  Google  pays  for  ail  of  its  labor  and 
capital  out  of  its  pocket.  You  pay  only  for 
what  you  get. 

Microsoft  can  expand  its  bu.sincss  by 
leaving  to  the  customer  the  job  of  tend¬ 
ing  to  most  of  the  burdensome  tasks  of 
integrity,  interoperability,  reliability,  se- 
c'uriiy  and  maintainability.  These  tasks 
now  .ibsorb  perhaps  as  much  as  TS^*  of 
the  t<»tal  cost  of  user  ownership.  This 
overhead  baggage  is  slowing  down  the 
implementation  of  new  applications. 
Goi^tu  rcmovcs  the  customer  overhead 
altogether  by  delivering  defined  ser¬ 
vices,  with  a  prcxliciable  performance. 

Microsoft  leaves  the  m.anagemcnt  of 
know’ledge  capital,  which  is  represented 
by  the  data  and  the  files  spinning  on 
disks,  largely  in  the  liands  of  users.  En¬ 
terprise  knowledge  management  is  now 
almost  entirely  dominated  by  IBM  and 
Or.icle  (and.  arguably,  by  SAP).  Micro¬ 
soft  has  recognized  that  this  is  the 
source  of  its  grealc-si  competitive  vul¬ 
nerability.  It  has  now  targeted  the  exten¬ 


sion  of  its  dominance  from  desktops 
(where  it  has  a  near  monopoly)  to  domi¬ 
nance  over  servers  (where  it  is  behind). 
This  would  be  achieved  by  making  serv¬ 
er  and  desktop  software  functionally  in¬ 
separable. 

Google's  view  is  that  what  matters  is 
not  data  but  the  content  that  clusters  of 
information  arrayed  with  intcliigcncc 
may  convey.  Google  is  committed  to 
extracting  meaning  (not  data)  by  means 
of  nonproprietary  standards  from  files 
that  may  be  scattered  but  are  neverthe¬ 
less  accessible. 

The  transfer  of  data  from  pai>er  to 
computers  has  characterized  the  first  50 
years  of  computing.  The  next  era  will 
deal  with  the  transfer  of  intelligence 
from  computers  to  people.  The  prolifer- 
aiion  of  data  and  the  inability  to  extract 
information  from  it  is  the  problem  we 
must  overcome.  Consider  the  incflicien- 
cics  in  (he  prevailing  practices.  My  first 
computer  used  a  160KB  floppy  disk  to 
store  everything.  Now  I  need  two  I60GB 
disks  just  to  keep  up.  That  scales  up  by  a 
factor  of  a  million,  and  I  see  that  headed 
for  a  billion.  Yet  everything  I  put  on  my 
computers  prior  to  1997  has  been  lost  as 
1  migrated  hardware  and  software  con¬ 
figurations.  At  the  enterprise  level,  the 
losses  of  institutional  memory  arc  even 
more  severe.  This  sort  of  memory  failure 
ha.s  become  a  characteristic  of  all  com¬ 
puter-based  organizations,  as  millions  of 
disk  drives  fill  up  with  redundant,  and 
unrctrievable.  information  stashed  away 
in  pruprietaty  fi»rmais. 

As  we  evolve  toward  data-ccntric  ar- 
chitectuK's  (see  “WTty  IT  Will  Continue 
to  M.nter."  C^uicklink  49169).  the  man¬ 
agement  of  systems  for  collaboration 
and  for  knowledge  sharing  will  be  cen¬ 
tral  to  profitable  investments  in  IT.  Judg¬ 
ing  from  Google's  research  and  its  cur¬ 
rent  marketing  probes,  it  appears  to  be 
focused  on  competing  for  this  opportu¬ 
nity.  How  Microsoft  pniposcs  to  address 
this  challenge  is  yet  to  he  seen.  C  49697 


WANT  OUR  OPINION? 


I  For  more  oilurms  and  links  to  our  archives.go  to 

"  www.computeworld.eomAipMoBs 


* 


www.corTipuletwortd.co>n 


BRIEFS 


Ainma  Launches 
Tool  for  VMwaie 


RitHl  prate!  Iw  VIhMft  he.*! 
iteiiate  raftirara.  teami's 
wmNcn  iramoM  immoMiwni 
tehteapanteCPUte 
mmary  UM.  Ite  prin  it  S506 
ptf  CPU  fir  rarvira  te  SSe^ 
PIT  ml  hr  tehiDpi  te  mrii- 
iMim.  IlixMt,  3(Hftqr  Mter 


ADK  Upgrades 
StarNext  Software 

AdHMtd  Hiniwte 
Cira.hlMmnri.MMlL.«i- 


24  fi 


hat  ten  hteq  raters,  in* 
dtev  Hntehhdite  Co.  and 


««101B  of  ^h  167.000. 


CrayUnveisXm 

Supereomputef 

SatenteodCnvfae.te«i- 
•ooncod  te  Mtetey  of  Ih  XD1 
ouporconpohr  feio,  wMch  fliirti 
al  Sioaooo.  Cray  teid  *•  XD1 


April  teod  a  •»  eompulor 

■HB  on^Horvp  niirara  ano  ■ 
capaUi  of  nmdng  Mn  tel  23 


Centage  Updates 
Budget  Maestro 

Cairiop*  Corp.  in  Hoiten  has  h- 
MMd  VMon  54  al  ih  Bud* 


of  Cryihi  Aipart  ImphlaB  and 

VfWm  WHKfWUBn  wi  aaEnHn 


lion  is  S2460;  dw  anhrpriaa  a«- 
tehSt2486. 


PAUL  A.  STRASSMANN 

The  Comini 
Battle  of  the 


History  teaches  us  that  a  challenge 
to  a  superior  power  can  succeed  only  by 
changing  the  rules  under  which  any  con¬ 
frontation  takes  place.  Head-on  attacks 
on  strong,  entrenched  positions  are 
easily  repelled.  That’s  why  RCA,  Honeywell,  Xerox, 


GE  Burroughs,  Univac.  Am¬ 
dahl  and  many  others  failed 
when  they  tried  to  compete 
with  IBM.  That's  why  the 
computing  landscape  over 
the  past  15  years  has  become 
lifted  with  so  many  grave¬ 
stones  of  firms  overcome  by 
Microsoft 

Now  a  new  Microsoft  chal¬ 
lenger  is  emerging  on  the 
horizon:  Google.  What 
makes  Goo^e  different  is 
that  it  follows  innovative 
rules  as  it  carves  out  a  share 
of  the  IT  business.  Google’s 
emerging  strategy  may  give  us  a  chie  as 
to  who  may  be  bidding  for  IT  leadership 
in  our  uncertain  industry  by  the  end  of 
this  decade. 

Microsoft's  power  is  based  on  selling 
customers  software  that  becomes  a  se¬ 
quence  of  increasingly  sticky  entangle¬ 
ments.  Once  you’ve  installed  Microsoft 
operating  software  on  a  desktop,  laptop 
or  cell  phone,  the  steadily  increasing  in¬ 
clusiveness  of  features  will  raise  your 
costs  for  choosing  any  alternative. 
Google,  on  the  other  hand,  relies  on  a 
generic  browser  to  gain  access  to  a 
rsq>idly  growing  menu  of  services. 

Microsoft's  business  model  b  based 
on  mass  dbtribution  of  software,  where 
economies  of  scale  generate  high  profit 
margins.  Revenue  growth  depends  on 
extending  software  functionary,  and  the 
customer  pays  for  each  upgrade.  Goc^e's 
business  model  b  based  on  ofiering 
added  services  based  on  economies  of 
scale  in  operations  and  on  innovation. 
Revenue  growth  results  from  extending 
the  economic  utility  of  services  that  the 
customer  can  add  at  low  cost. 


Microsoft's  superior  prof¬ 
its  are  based  on  passing  mi 
just  about  all  the  costs  —  in¬ 
cluding  those  of  support  la¬ 
bor  and  capital  —  to  the 
customer.  When  you  adopt 
the  Microsoft  environment, 
you  can’t  ever  budget  for 
the  total  costs  of  ownership 
in  the  long  run.  Google  b  a 
network  services  provider. 
Google  owns  and  operates 
perfa^  the  worid’s  largest 
computer  complex,  consbt- 
ing  of  a  rapidly  growing 
population  of  100.000  serv¬ 
ers  that  manage  petabytes  of  data  with 
unprecedented  reliability  and  response 
time.  Google  pays  for  all  of  its  labor  and 
capital  out  of  Its  pocket.  You  pay  only  for 
w^t  you  get 

Microsoft  can  expand  its  business  by 
leaving  to  the  customer  the  job  of  tend¬ 
ing  to  most  of  the  burdensome  tasks  of 
integrity,  interoperability,  relubility.  se¬ 
curity  and  maintainability.  These  tasks 
now  absorb  perhaps  as  much  as  75%  of 
the  total  cost  of  user  ownership.  Hus 
overhead  baggage  b  slowing  down  the 
implementadoD  of  new  applications. 
Goc^e  removes  the  customer  overhead 
altogether  by  delivering  defined  ser¬ 
vices,  with  a  predictable  performance. 

Microsoft  leaves  the  management  of 
knowledge  capital,  which  b  represented 
by  the  data  and  the  files  spinning  on 
disks,  largely  in  the  hands  of  users.  En¬ 
terprise  knowledge  management  b  now 
almost  entirety  dominated  by  IBM  and 
Oracle  (and,  arguably,  by  SAP).  Micro¬ 
soft  has  recognized  that  thb  b  the 
source  of  its  greatest  competitive  vul¬ 
nerability.  It  has  now  targeted  the  exten¬ 


sion  of  its  dominance  from  desktops 
(where  it  has  a  near  monopoly)  to  domi¬ 
nance  over  servers  (udiere  it  b  behind). 
Thb  would  be  achieved  by  serv¬ 

er  and  desktop  software  ftmcUonalty  in¬ 
separable. 

Good's  view  b  that  vriiat  matters  b 
not  data  but  the  content  that  clusters  of 
information  arrayed  with  intelligence 
may  convey,  (joogle  b  committed  to 
extracting  meaning  (not  data)  by  means 
of  nonproprietary  standards  ftoro  files 
that  may  be  scattered  but  are  neverthe¬ 
less  accessible. 

The  transfer  of  data  from  paper  to 
computers  has  characterized  first  SO 
years  of  computing.  The  next  era  will 
deal  with  the  transfer  of  intelligence 
from  computers  to  people.  The  prolifer¬ 
ation  of  d^a  and  inability  to  extract 

informaticMi  from  it  b  the  pr^lem  we 
must  overcome.  Consider  the  ineffiden- 
cies  in  the  prevailing  practices.  My  first 
computer  used  a  160KB  floppy  du^  to 
store  everythii^  Now  I  need  two  160GB 
disks  pist  to  keep  up.  That  scales  up  by  a 
factor  of  a  million,  and  I  see  that  b^ded 
for  a  bUlioa  Yet  everything  I  put  on  my 
computers  prior  to  1997  has  been  lost  as 
1  migrated  hardware  and  software  con¬ 
figurations.  At  the  enterprise  level,  the 
losses  of  institutional  memory  are  even 
more  severe.  Thb  sort  of  memory  failure 
has  become  a  characteristic  of  all  com¬ 
puter-based  organizations,  as  millions  of 
disk  drives  fill  up  with  redundant,  and 
unretrievable,  information  stashed  away 
in  proprietary  formats. 

As  we  evolve  toward  data-centric  ar¬ 
chitectures  (sec  “Why  IT  Will  Continue 
to  Matter.”  C^cklink  49169),  the  man¬ 
agement  of  systems  for  collaboration 
and  for  knowledge  sharing  will  be  cen¬ 
tral  to  profitable  investments  in  IT.  Judg¬ 
ing  from  Google's  research  and  its  cur¬ 
rent  marketing  probes,  it  appears  to  be 
focused  on  competing  for  opportu¬ 
nity.  How  Microsoft  proposes  to  address 
thb  challenge  b  yet  to  be  seen.  O  49687 
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I  Fttnrncohjnra  arid  inks  fo  our  archives,  go  to 


Think  Tank 

It's  no  secret  that  IT  and  marketing  departments 
have  trouble  understanding  each  other.  But  For¬ 
rester  Research  says  the  communication  gap  can 
be  bridged  by  putting  IT  staffers  inside  the  maricet- 
ing  group  and  having  a  chief  marketing  oCncer  who 
sits  at  the  executive  table  with  the  CIO.  PaQS  37 


Career  Watch 

Hacking  for  the  home  team; 
how  politics  shortchanges 
federal  CIOs;  tough  times 
for  contractors;  plus, 
the  top  10  offshoring 
companies.  Page  38 


OPINION 

To  Each  His  Own 

nkere’s  no  IT  playbook  that  works  for 
everybody,  and  forced  uniformit>'  is 
counterproductive,  say’s  Paul  Glen.  His 
suggestion:  Let  IT  workers  find  their 
own  paths  to  productivity.  Pagt  39 
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I  Enc  Lit!  o'  General  Motors  is  one  of  a  small  but  growing  number  o'  _r 
I  enirusteo  with  more  influence  within  the  company  ihan  ever  before 


Chief  information  security  officers 
have  more  influence  -  and  greater 
challenges  -  than  ever  before. 


-  BY  JAiKUMAR  ViJAYAN  - 

AS  THE  chief  information  security  officer  at 
General  Motors  Corp.,  Eric  Litt  is  in  charge 
of  integrating  security  into  every  aspect  of 
the  company’s  vast  $186  billion  business. 

It’s  a  job  that  has  given  him  a  spot  at  the 
executive  table,  support  from  the  board  level  down 
and  a  chance  to  implement  far-reaching  decisions 
related  to  information  security  at  the  company. 


“I  get  plenty  of  attention,  which  is  a 
very  good  thi^"  Litt  says.  When  it 
comes  to  security  at  the  automaker, 
“resources  are  not  an  issue,”  he  says. 

Litt  is  one  among  a  small  but  growing 
number  of  executives  wdio  say  that  height¬ 
ened  concerns  are  driving  a  gradual  evolu¬ 
tion  of  the  security  function  and  investing 
it  with  more  influence  than  ever  before. 

“Security  folks  have  often  been  viewed 
as  a  necessary  evil  who  always  get  in 
the  way  of  your  doing  business.”  says 
Howard  Schmidt.  CISO  at  eBay  Inc.  in 
San  Jose  and  former  White  House  cyber- 
security  adviser.  But  r^ulatory  compli¬ 
ance  issues  and  the  increasing  losses  re¬ 
lated  to  worms,  viruses  and  other  hacker 
attacks  are  making  security  a  part  of  the 


core  business  process,  he  says. 

Kim  Milford  agrees.  “Security  is  now 
viewed  as  a  critical  requirement  in  the 
purchase,  design,  development  and  de¬ 
ployment  of  ai^lications  and  services,” 
says  Milford,  information  security  man¬ 
ager  at  the  University  of  Wisconsin- 
Madison.  “There  seems  to  be  a  shift  from 
the  emphasis  on  predominantly  techni¬ 
cal  controls  to  risk  assessment,  policies 
and  user  education,”  she  adds. 

For  instance.  Litt  has  crafted  a  model 
under  which  all  security  planning  at  GM 
starts  with  an  analysis  and  understand¬ 
ing  of  the  specific  threats  and  risks  faced 
by  a  bttsiness  unit  A  central  security 
team  evaluates  and  analyzes  everything 
from  regulatory  requirements  to  intellec- 


CISO 


tual  property  protection,  inappropriate  use,  access 
control  and  ilireais  such  as  denial*of-scr\‘ice  ati.ieks. 
worms  and  viruses. 

The  group  then  architects  a  detailed  security  im¬ 
plementation  requirement  for  each  of  the  business 
unit.s  based  on  its  specific  risk  profile.  Each  of  the 
business  units  Ls  respotcsiblc  for  implementing  the 
needed  technologx-  and  process  measures  and  is  peri¬ 
odically  audited  for  compliance  against  its  require¬ 
ments.  A  color-coded  security  dashboard  for  senior 
management  at  CM  rates  the  performance  of  each 
business  unit,  with  green  representing  full  compli¬ 
ance.  yellow  showing  partial  progress  and  red  indi¬ 
cating  a  total  lack  of  compliance. 

It's  an  evolving  holistic  approach  to  security  that 
includes  "the  people,  (he  organization,  governance, 
process  and.  lastly,  technology."  Lit!  says. 

Strategy,  Not  Tactics 


I  An  increasing  number  of  CISOs  are  being  asked  to 
participate  in  crucial  business  decisions  at  the  high¬ 
est  level.  cBays  Schmidt  says.  For  instance,  in  many 
cases,  the  CISC’s  input  and  approval  is  required  at 
the  very  inceptum  of  any  large  IT  project,  as  compa¬ 
nies  try  to  build  in  security  instead  of  bolting  it  onto 
business  processes  as  an  afterthought,  Schmidt  says. 
■‘There  arc  many  projects  that  just  don’t  kick  off 
without  security  guidance  in  the  requirements 
stage."  he  says. 

Bccau.se  responding  to  security  risks  Is  beginning 
to  be  viewed  as  a  cost  of  doing  business,  the  security 
manager  is  also  being  consulted  more  to  help  assess 
costs  and  benefits,  Milford  says.  And  security  fund¬ 
ing  is  aJso  getting  easier  to  come  by.  she  says,  point¬ 
ing  to  her  own  organization's  success  in  securing 
funds  for  an  array  of  worm  and  attack  mitigation 
technologies  soon  after  a  wave  of  malicious  attacks 
lost  year. 

"This  shift  has.  in  some  cases,  moved  the  security 
manager  function  into  the  highest  levels  of  the  IT 
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A  similar  focus  on  high-level  concerns  such  as  regu¬ 
latory  compliance,  digital  rights  management,  intel¬ 
lectual  property  protection  and  application  coding 
standards  defines  the  evolution  of  the  security  orga¬ 
nization  at  (he  Bank  of  Montreal  in  Toronto. 

"Implementing  firewalls  and  hardening  systems 
are  not  really  security  issues  any  longer  but  opera¬ 
tional  issues."  says  Robert  Gariguc,  the  bank’s  CISO. 
Those  are  being  approached  in  the  same  manner  that 
configuraiinn  management  or  capacity  management 
is.  he  says. 

Years  of  fending  off  worms,  viruses  and  hacker  at¬ 
tacks  have  allowed  Bank  of  Montreal  to  implement 
technologies  and  automate  its  responses.  The  bank  Is 
now  at  a  point  where  it’s  increasingly  offloading 
those  tasks  to  network  and  system  operations  teams. 

The  security  function  is  no  longer  just  about  “ex¬ 
ceptions  management"  and  responding  to  emergen- 
des,  Garigue  says.  The  focus  instead  is  “about  under¬ 
standing  where  the  new  risks  arc  coming  from  and 
not  getting  blindsided  by  them."  he  says. 

It's  a  task  that  requires  security  managers  to  wear 
several  hats,  says  Chrisiofer  Hoff,  director  of  enter¬ 
prise  security  services  at  Western  Corporate  Federal 
Credit  Union,  a  San  Dimas.  Calif.-based  company 
with  S2S  billion  in  assets.  It  means  being  a  “magician, 
oracle,  facilitator,  accountant,  psychiatrist,  stuntman, 
public  relations  consultant  and  prophet."  Hoff  says.  It 
requires  a  background  that  mel^  “ditch  digging  and 
trench  warfare  with  board  presentations  arid  busi- 
nes.s-based  strategy  planning."  he  adds. 

Much  of  the  organizational  influence  that  such  se¬ 
curity  managers  have  begun  to  gamer  is  tied  to  the 
business  value  delivered  by  the  information  security 
function.  Hoff  says.  There’s  a  growing  realization  in 
the  corporation  that  “information  security  is  not 
about  technology  [but]  about  rational  risk  manage¬ 
ment,"  he  says. 

That  shift  in  perception  is  resulting  in  more  au¬ 
thority  and  influence  being  invested  in  the  security 
manager  or  CISO  function.  University  of  Wisconsin's 
Milford  says. 


organization  chan  and  sometimes  even  completely 
outside  the  realm  of  IT."  Milford  says.  Although 
CISOs  typically  report  to  CIOs,  as  companies  begin 
taking  more  of  an  operational-risk  management  ap¬ 
proach  to  IT  security,  some  security  managers  have 
been  advocating  functional  parity  with  the  CIO,  It's 
not  unusual  to  find  CISOs  reporting  to  chief  finan¬ 
cial  officers  and  CEOs.  Milford  says. 

Lagging  Behind 

I  But  the  changes  aren’t  happening  at  all  companies. 

I  And  corporate  inertia  and  political  turf  battles  con¬ 
tinue  to  make  the  evolution  a  painful  one.  security 
managers  readily  acknowledge. 

At  many  companies,  the  security  organization  still 
remains  "out  of  sight  and  out  of  mind”  unless  there  is 
some  sort  of  a  cyber  emergency,  says  Dennis  Treece. 
director  of  corporate  security  at  the  Massachusetts 
Port  Authority  in  Boston. 

“Private-sector  managers  simply  want  what  they’ve 
always  wanted  from  their  security  program  —  keep¬ 
ing  the  company  out  of  trouble  and  Tout  of]  the  pa¬ 
pers  and  doing  it  for  as  little  money  possible,"  he  says. 

As  one  of  the  executives  in  charge  of  .securing 
Boston's  Logan  International  Airport,  three  seaports 
and  a  major  toll  bridge.  Trcccc  is  focused  primarily 
on  physical  infrastructure  protection-  But  he  over¬ 
sees  the  information  security  side  a.s  well. 

"The  physical  security  folks  still  don’t  know  much 
about  network  security,  and  network  people  who  arc 
given  the  security  mission  think  of  themselves  as  IT 
people,  not  sccurit)’  people,"  he  says. 

A  divide  also  exists  between  network  operations 
teams,  which  arc  focused  on  ensuring  optimal  per¬ 
formance.  and  network  security  teants.  which  arc  of¬ 
ten  viewed  as  a  barrier  to  that  goal,  Treece  says. 

A  more  powerful  security  function  also  raises  po¬ 
litical  issues  at  a  higher  level.  TVecce  says.  “Anytime 
there’s  a  new  player  at  the  table,  others  have  to  move 
aside  and  cede  a  little  turf,"  he  says.  And  the  person 
who  stands  to  lose  the  most  turf  in  the  battle  is  the 
CIO,  who  has  traditionally  been  responsible  for  secu¬ 
rity.  he  says. 

The  amount  of  authority  the  security  manager  has 
depends  a  lot  on  the  organizational  culture  and 
structure,  Milford  says.  In  top-down,  heavily  central¬ 
ized  organizations,  the  authority  stems  from  the 
CISC’s  placement  within  the  organization  and  who 
he  reports  to,  she  explains. 

"In  less  heavily  structured  organizations,  the  secu¬ 
rity  manager  must  gain  the  trust  of  the  decentralized 
management  and  technologists,”  Milford  says. 

Companies  that  have  adopted  process  maturity 
frameworks  such  as  the  Software  Engineering  Insti¬ 
tute’s  Capability  Maturity  Model  are  also  more  likely 
to  be  ready  culturally  to  integrate  security  into  every 
aspect  of  their  business.  Gariguc  says. 

And  Hoff  says,  "It’s  all  about  marketing.  If  you 
can't  demonstrate  your  worth,  long-term  survivabili¬ 
ty  is  compromised,  and  the  value  you  offer  the  orga¬ 
nization  remains  that  of  a  grudge  purchase  rather  than 
an  enabler. 

"Our  company  is  enlightened  to  the  value  we 
bring,  but  only  because  we  go  out  of  our  way  to  re¬ 
late  our  successes  in  business  terms"  by  showing  re¬ 
duction  of  risk  on  investment,  Hoff  saj-s.  "To  me.  it’s 
a  simple  play.”  O  49496 
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mal  property  protection,  inappropriate  use,  access 
control  and  threats  such  as  denial-of-service  attacks, 
worms  and  vinises. 

The  group  then  architects  a  detailed  security  ini' 
plementation  requirement  for  each  of  the  business 
units  based  on  its  specific  risk  profile.  Each  of  the 
business  units  is  responsible  for  implementing  the 
needed  technology  and  process  measures  and  is  peri¬ 
odically  audited  for  compliance  against  its  require¬ 
ments.  A  color-coded  security  dashboard  for  senior 
management  at  GM  rates  the  peifbnnance  of  each 
business  unit,  with  green  representing  foil  compli¬ 
ance.  yellow  showing  partial  progress  and  red  indi¬ 
cating  a  total  lack  of  compliance. 

It's  an  evolving  holistic  approach  to  security  that 
includes  *the  people,  the  oiganizatioa.  governance, 
process  and,  lastly,  technology,”  Lin  says. 

Strategy,  Not  Tactics 

A  similar  focus  on  h^-level  concerns  such  as  regu¬ 
latory  compliance,  digital  rights  management,  intel¬ 
lectual  property  protection  and  application  coding 
standards  brines  the  evolution  of  the  security  orga¬ 
nization  at  the  Bank  of  Montreal  in  Toronto. 

'‘Iroplemenring  firewalls  and  hardening  systems 
are  not  really  security  issues  any  longer  but  opera¬ 
tional  issues,”  says  Robert  Garigue.  the  bank’s  CISO. 
Those  are  being  approached  in  the  same  manner  that 
configuration  management  or  capacity  management 
is,  he  says. 

years  of  fending  off  wonns.  viruses  and  hacker  at¬ 
tacks  have  allowed  Bank  of  Montreal  to  implement 
teclmologies  and  automate  its  responses.  The  hank  is 
now  at  a  point  where  it’s  increasingly  oBloading 
those  taste  to  network  and  system  operations  teams. 

The  security  function  is  no  longer  just  about  “ex¬ 
ceptions  management”  and  re^>ondiDg  to  emergen¬ 
cies.  Garigue  says.  The  focus  mstead  is  “about  under¬ 
standing  udiere  the  new  riste  are  coming  from  aiKl 
not  getting  bltndsided  by  them,”  be  says. 

a  task  that  requires  security  managers  to  wear 
several  hats,  says  Christofor  Hoff  director  of  enter¬ 
prise  security  services  at  Western  Corporate  Federal 
Credit  Union,  a  San  Dimas,  Cali£-based  company 
with  S2S  billion  in  assets.  It  means  beii^  a  “magkdan. 
oracle,  facilhator,  accountant,  psychiatrist,  stuntman, 
public  telarions  consultant  and  prophet”  Hc^  says.  It 
requires  a  background  that  mel^  “ditch  digging  and 
trench  warfore  with  board  presentations  and  busi¬ 
ness-based  strategy  planning,”  he  adds. 

Much  of  the  organizational  influence  that  such  se¬ 
curity  managers  have  begun  to  garner  is  tied  to  the 
business  vahie  delhered  by  the  information  security 
function.  Hoff  says.  There’s  a  growing  realization  m 
the  corporation  that  ‘information  security  is  not 
about  technology  [but]  about  rational  risk  manage¬ 
ment.”  be  says. 

That  shift  in  perceptkm  is  resulting  in  more  au¬ 
thority  and  influence  being  invested  in  the  security 
manager  or  CISO  fonctioo.  University  of  \^scoD8in's 
Milford  says. 


An  increasing  number  of  CISOs  are  being  asked  to 
participate  in  crucial  business  decisions  at  the  high¬ 
est  level,  eBay’s  Schmidt  says.  For  instance,  in  many 
cases,  the  CISO’s  input  and  approval  is  required  at 
the  very  inception  of  any  large  IT  project,  as  compa¬ 
nies  try  to  build  in  security  instead  of  bolting  it  onto 
business  processes  as  an  afrerthought.  Schmidt  says. 
“There  are  many  projects  that  jtist  don’t  kick  off 
without  security  guidance  in  the  requirements 
stage,”  be  says. 

Because  responding  to  security  risks  is  beginning 
to  be  viewed  as  a  cost  of  doing  business,  the  security 
manager  is  also  being  consulted  more  to  help  awess 
costs  and  benefits.  Milford  says.  And  security  food- 
log  is  also  getting  easier  to  come  by,  she  says,  point¬ 
ing  to  her  own  organization’s  success  in  securing 
foods  for  an  array  of  worm  and  attack  mitigation 
technologies  soon  afrer  a  wave  of  malicious  attacks 
last  year. 

“This  shift  has.  in  some  cases,  moved  the  security 
manager  functioo  into  the  higbest  levels  of  the  TT 


Tlie  IT  Connection 


organization  chart  and  sometimes  even  completely 
outside  the  realm  of  IT,”  Milford  says.  Although 
aSOs  typically  report  to  CIOs,  as  companies  begin 
taking  more  of  an  operational-risk  management  ap¬ 
proach  to  IT  security,  some  security  managers  have 
been  advocating  functional  parity  with  the  CIO.  It’s 
not  unusual  to  find  CISOs  reporting  to  chief  finan¬ 
cial  officers  and  CEOs,  Milford  says. 

Lcigging  Behind 

But  the  changes  aren't  ha{^>ening  at  all  companies. 
And  corporate  inertia  and  political  turf  battles  con¬ 
tinue  to  make  the  evolution  a  painful  one,  security 
managere  readily  acknowledge. 

Ac  many  companies,  the  security  organization  still 
remains  “out  of  sight  and  out  of  mind"  unless  there  is 
some  sort  of  a  cyber  emergency,  says  Dennis  lYeece. 
director  of  corporate  security  at  the  Massachusetts 
Port  Authority  in  Boston. 

“Private-sector  managers  simply  want  what  tbeyVe 
ahvays  wanted  from  their  security  program  —  ke^ 
ing  the  company  out  of  trouble  and  (out  ofl  the  pa¬ 
pers  and  doing  it  for  as  little  money  possible,"  he  says. 

As  one  of  the  executives  in  char^  of  securing 
Boston’s  Logan  International  Airport,  three  seaports 
and  a  major  toll  bridge.  Tteece  is  focused  primarily 
on  physical  infrastructure  protection.  But  be  over¬ 
sees  the  information  security  side  as  weU. 

“The  physkal  security  folks  still  don’t  know  much 
about  network  security,  and  networit  people  who  are 
giveo  the  security  mission  think  of  themselves  as  IT 
people,  not  security  people,”  he  sa^. 

A  divide  also  exists  beWeen  network  operations 
teams,  which  are  focused  on  ensuring  optimal  per¬ 
formance,  and  network  security  teams,  which  are  of¬ 
ten  viewed  as  a  barrier  to  that  goal,  ’IVeece  says. 

A  more  powerful  security  function  also  raises  po¬ 
litical  issues  at  a  higher  level,  IVeece  says.  “Anytime 
there’s  a  new  player  at  the  table,  others  have  to  move 
aside  and  cede  a  little  tuif,”  be  says.  And  the  person 
who  stands  to  lose  the  most  turf  in  the  battle  is  the 
CIO.  who  has  traditionally  bera  responsible  for  secu¬ 
rity,  be  says. 

The  amount  of  authority  the  security  manager  has 
depends  a  lot  oo  the  organizational  culture  and 
structure,  Milford  says.  In  top-down,  heavily  central¬ 
ized  organizations,  tite  authority  stems  from  the 
050*$  placement  within  the  organization  and  who 
he  reports  to.  she  explains. 

“In  less  heavily  structured  organizations,  the  secu¬ 
rity  manager  must  gain  the  trust  of  the  decentralized 
management  and  technologists,”  Milford  says. 

Companies  that  have  adopted  process  maturity 
frameworks  such  as  the  Software  Engineering  Insti¬ 
tute's  Capability  Maturity  Model  are  also  more  likely 
to  be  lea^  culturally  to  integrate  security  into  every 
aspect  of  their  business,  Garigue  says. 

And  Hoff  says,  “It’s  all  about  marketing.  If  you 
can’t  demonstrate  your  worth,  long-term  survivabili¬ 
ty  is  compromised,  and  the  value  you  offer  the  orga¬ 
nization  remains  that  of  a  grudge  purchase  rather  than 
anenablet 

“Our  company  is  enlightened  to  the  value  we 
bring,  but  only  because  we  go  out  of  our  way  to  re¬ 
late  our  successes  in  Inmness  terms”  by  showing  re¬ 
duction  of  risk  on  investmeiu.  Hoff  says.  To  me,  it's 
a  simple  play.”  O  m06 
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Aligning  your  IT  investments  with  your  industr\'’s 
change  trajectory  may  be  the  ke\' to  success. 


•  Vfou  cant  make  tnfeHi- 
gent  mvcs^eros  within 
your  orsantzarion  unless 
you  imdentand  how 
your  whole  imfusfry  is 
c^angin^”  writes  Anita 
McGahan  in  October’s 
Harvard  Business 
Review.  McGahan. 
author  o/How  Indus¬ 
tries  Evolve:  Principles  for  Achieving 
and  Sustaining  Superior  Performance 
(Harvard  Business  School  Press.  2004), 
bases  her  theories  on  more  than  a 
decade  of  research  on  four  tnz/ectories 
of  industry  change  She  told  Kathleen 
Me^Fnuxfai  how  ^Os  can  aii^  IT 
investments  with  those  changes. 

Hew  do  I  racogniza  tfwt  my  Murtry  k 
iftdatgeing  raM  dianoi?  Radical 
change  occurs  when  everything  you  do 
is  eventually  going  to  become  urele* 
vant  because  of  some  new  technology 
or  way  of  doing  business.  Take  over¬ 
night  letter  delivery.  When  I  ask  stu¬ 
dents,  they  all  agree  that  it  will  be  gone 
in  100  years.  What  they  difler  on  is 
how  sooa  Another  example  is  land¬ 
line  telephone.  We  probably  could 
agree  that  in  100  years,  telephone  com¬ 
munication  will  not  occur  over  copper 
wire.  The  question  is  bow  long  that  in¬ 
frastructure  will  stay  around. 

Vm  say  prooraakva  change  k  tha  most  com¬ 
mon  typo.  What  deaa  that  took  fe?  Pro¬ 
gressive  change  is  occurring  in  many 
transportation  and  retail  industries. 
The  challenge  during  progressive 
change  is  understanding  that  the  way 
to  make  money  is  to  improve  incre¬ 
mentally  through  carchil  analysis  and 
reacting  h>  fieedback.  Unless  your  strat¬ 
egy  is  deeply  flawed,  the  Hail  Mary  at¬ 
tempt  to  achieve  breakthroughs  will 
tkot  work. 


Vtou  say  craattve  chwige  k  more  nuanced. 
T«N  mo  about  that  Creative  change  oc¬ 
curs  when  the  underlyii^  resources  or 
architecture  or  assets  in  a  business  are 
becoming  obsolete:  legacy  systems,  old 
database  architectures  that  don’t  allow 
you  to  connect  with  customers  as 
you'd  like  to.  Many  organizations,  such 
as  pharmaceutical  and  film  production 
companies,  are  also  challenged  with 
threats  to  their  resources.  Blockbuster 
drugs  go  off  patents,  and  revenue  is 
fundamentally  challenged  as  a  result. 
Or  you  need  a  new  hit  film  regularly. 
You  need  to  constantly  renew. 

So  soim  Mustrk*  by  tlMir  nahn  are  eon- 
standy  in  oiathw  donga?  Yes.  The  idea 
is  that  the  assets  that  lie  underneath 
the  revenue  structure  of  the  business 
are  constantly  being  challenged. 

How  does  that  cMer  from  radcai  changa? 
Under  creative  change,  the  customer  is 
satisfied  with  bow  you’re  dealing  with 
that.  The  difference  between  the 
movie  industry  and  the  overnight  let¬ 
ter  industry  is  that  the  movie  industry 
is  dealing  effeaively  with  renewal  of 
underlying  resources,  so  the  ctistomer 
is  not  looking  for  better  alternatives. 

That  brings  IB  to  intarmodiatinq  change. 
¥fhat*s  thet  al  about?  Under  intermediat¬ 
ing  change,  your  customer  relation¬ 
ships  are  threatened  but  your  a.ssets  re¬ 
tain  value.  It’s  harder  to  deal  with  than 
radical  change  because  you’ve  got  to 
figure  out  a  new  way  to  make  money 
out  of  assets.  If  you’re  running  a  tele¬ 
phone  service  provider,  you  know  that 
the  challenge  is  managing  down  the 
land-line  infrastructure.  But  if  you’re 
runnir^  an  organization  going  through 
intermediating  chai^  ~  like  an  auto 
dealership  —  you've  got  a  fundamental 
strategic  problem:  How  do  you  rede¬ 


ploy  assets  into  new  ways  of  doing 
business  for  which  you  can  get  paid 
while  ramping  down  your  commit¬ 
ment  to  an  old  way  of  doing  business? 
It’s  very  challenging,  because  often 
you're  making  more  money  under  the 
old  way,  and  that  may  continue  for 
many  years.  That  creates  civil  wars 
within  organizations. 

What  does  ai  thk  mean  to  me  as  a  CIO? 

The  IT  world  is  so  incredibly  complex. 
There  are  many,  many  different  trajec¬ 
tories  of  change  within  the  IT  sector. 
And  for  CIOs  in  non-FT  companies  — 
the  CIO  of  a  bookseller  is  facing  a  fun¬ 
damentally  different  challenge  then 
the  CIO  of  a  telephone  company.  If 
you’re  a  CIO.  the  right  way  to  use  this 
is  as  part  of  a  broader  strategic  process 
in  which  you  envision  bow  your  com¬ 
pany  is  going  to  compete  in  Hve  years. 
The  ri^t  way  to  ntanage  IT  depends 
on  how  your  organization  intends  to 
navigate  this  change. 

As  a  CIO  whose  industry  k  bi  radtoal  changs, 
what  sorto  of  bwestmanto  ehotdd  I  conkd- 

ar?  If  you're  running  an  overnight  let¬ 
ter  delivery  company  confronting  radi¬ 
cal  change,  you  might  want  to  augment 
your  systems  to  support  account  man- 
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agers  in  evaluating  which  customers 
are  willing  to  work  with  you  in  new 
ways  —  say,  in  document  management 
or  expanded  logistics  services  —  so 
you  can  diversify  from  overnight  letter 
services  into  related  businesses. 

What  if  Tm  a  CIO  in  progressive  change?  If 

you're  running  a  business  undergoing 
progressive  change,  like  Home  Depot 
or  Wal-Mart,  you  should  be  vigilantly 
focused  on  incrementally  expanding 
IT  services  for  efficiency,  and  strategic 
IT  would  deal  with  managing  links  to 
suppliers  and  customers. 

And  K  Fm  in  mtermedtohng  change?  The 
challenge  is  in  finding  new  ways  of 
transacting  business.  Developing  a 
sy-stem  for  capturing  information 
about  the  costs  associated  with  offer¬ 
ing  products  in  new  ways  is  going  to 
be  central  to  the  future  of  an  organiza¬ 
tion.  If  you're  an  auction  house,  for 
example,  how  do  you  deal  with  the 
stress  of  online  auctions?  Well,  you 
have  appraisal  capability;  bow  will  you 
sell  that  in  a  new  way?  Understanding 
how  much  it  costs  to  offer  appraisal 
services  to  sellers  on  eBay  is  an  exam¬ 
ple  of  how  IT  could  be  used  to  help 
you  deal  with  intermediating  chai^. 

How  dowfT  play  to  croilive  change?  The 

goal  under  creative  change  is  to  keep 
these  Hail  Mary  projects  isolated.  A 
pharmaceutical  company  developing  a 
new  drug  doesn’t  want  to  bring  down 
the  whole  company  if  the  drug  faiU. 
The  same  goes  for  a  movie  studio  or  a 
company  in  oil  and  gas  exploration, 
lliey  need  to  keep  projects  isolated. 
But  most  leading  companies  are  trying 
to  manage  risks  across  a  portfolio  of 
projects.  IT  is  effective  if  it  provides 
management  with  information  about 
programmatic  success  without  over- 
controUing  the  individual  programs. 

Vfhat's  the  haidest  thtog  about  gatttog  al 
thk  right?  Each  of  these  trajectories 
plays  out  over  decades.  And  even 
when  change  carries  the  potential  to 
blow  away  old  systems  a^  make  them 
obsolete,  often  in  the  short  run.  staying 
the  course  generates  a  higher  return 
on  investment.  So  the  hardest  part  is 
figurii^  out  how  to  take  these  insists 
about  the  trajectory  of  your  industry 
and  integrate  them  into  your  daily 
cisions  about  how  to  run  the  business. 
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Thought  Leader 

in  a  recant  interview  pubished  on  Gartner 
lnc.'s  Web  site,  Intel  Corp.  aO  Doug  Busch 

expresses  some  exasperation  with 
IT’s  reputation  for  boondoggles:  “IT 
has  been  the  poster  child  in  the  me¬ 
dia  for  failed  business  projects,” 

Busch  says.  “But 
name  another 
fimction  that’s 
done  better.  Ac¬ 
quisitions  deliver¬ 
ing  forecasted 
financial  return? 
New  products 
making  it  to  mar¬ 
ket  on  time  and  on 
budget?  Executive 
hires  who  turned 
out  as  anticipated?  IT  is  not  that  bad 
in  comparison.” 

Busch  also  says  in  the  wide-ranging 
interview  that  every  group  within  the 
IT  department  needs  to  have  “a  for- 
ward-lookii^  R&D  component  If  you 
don’t  look  downstream  at  opportuni¬ 
ties  in  front  of  you,  you  choke  ofif  the 
path  of  continuous  improvement.” 
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Things  to  Ponder 

■  Press  release:  “Judy  Ravin,  director 
of  English  Communications  Services 
LLC,  an  accent-reduction  firm  in  Ann 
Arbor,  Mich.,  has  produced  a  new  sys¬ 
tem  to  help  foreign  nationals  lose  their 
accents.  ‘Lose  Your  Accent  in  28  Days’ 
combines  a  CD-ROM  with  an  audio 
CD  and  a  book  to  help  professionals 
lose  their  accents  in  just  one  month." 

■  The  average  CIO  teniue  has  im¬ 
proved  from  18  months  to  30  months  in 
the  past  two  years,  says  Meta  Group 
Inc.  analyst  Jonathan  Poe. 

■  IT  spending  averages  7.4%  of  rev¬ 
enue  at  companies  where  top  execu¬ 
tives  view  IT  as  a  significant  enabler  of 
the  company’s  growth,  but  only  4.7% 
of  revenue  at  companies  where  execu¬ 
tives  view  IT  as  a  growth  inhibitor,  ac¬ 
cording  to  a  survey  of 203  executives 
by  New  York-based  Bain  &  Co. 

•  Forrester  Research  predicts  that  the 
next  boom  in  IT  spending  will  start  in 
2008  and  continue  through  2016. 

■  Enterprise  IT  architecture  typically 
focuses  on  technology  and  business 
processes  but  almost  never  focuses  on 
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the  social  aspects  of  work  and  the 
workplace,  says  Meta  Group  analyst 
Mike  Gotta.  So  in  the  near  future, 
companies  will  need  to  hire  “social 
architects”  to  find  out  how  people  re¬ 
ally  work,  communicate,  collaborate, 
innovate  and  solve  problems,  he  says. 
049502 
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“Vou  can'T  moke  ifiEWIt- 
^'rti  int't’xrmcnr.^  toilTiin 
your  ()rj;aniratton  unless 
you ufuiiTSTunJ hou- 
"  your  whole  industry  is 

[  changing:.''  writes  Anita 

I  McGahan  in  Ocroher's 
Han-ard  Business 
Review.  AfcGahon. 
durhoro/How  Indus¬ 
tries  Evolve:  Principles  for  Achieving 
and  Sustaining  Superior  Performance 
(Harvard  Business  School  Press.  2004), 
bases  her  theories  on  more  than  a 
decade  of  research  on  /bur  trafectories 
of  indusrr>*  chnngc-  .She  fold  Kathleen 
Melymuka  how  CIOs  can  align  IT 
investments  wifh  those  changes. 

How  do  I  reoo0nize  that  my  industry  is 
undergoing  radical  change?  Radical 
change  occurs  when  everything  you  do 
is  eventually  going  to  become  irrele- 
\'ant  because  of  some  new  technology 
or  way  of  doing  business.  Take  over¬ 
night  letter  delivery.  When  I  ask  stu¬ 
dents.  they  all  agree  that  it  will  be  gone 
in  100  years.  Wliai  they  differ  on  is 
how  soon.  Another  example  is  land¬ 
line  telephone.  We  probably  ci^uld 
agree  that  in  100  years,  telephone  com¬ 
munication  will  not  occur  over  copper 
wire.  The  question  is  how  long  that  in- 
fraMructure  will  stay  around. 

Viw  say  progressive  change  b  the  most  com¬ 
mon  type.  What  does  that  look  lice?  Pro¬ 
gressive  change  is  occurring  in  many 
transportation  and  retail  industries. 
The  challenge  during  prt>gressive 
change  is  understanding  that  the  way 
to  make  money  is  to  improve  incre¬ 
mentally  through  careful  analysis  and 
reacting  to  feedback.  Unless  your  strat¬ 
egy  is  deeply  flawed,  the  Hail  Mary  at¬ 
tempt  to  achieve  breakthroughs  will 
not  work. 


Vou  say  creative  change  is  more  nuanced. 
Tell  me  about  that.  Creative  change  oc¬ 
curs  when  the  underlying  resources  or 
architecture  or  assets  in  a  business  arc 
becoming  obsolete:  legacy  systems,  old 
database  architectures  that  don't  allow 
you  to  connect  with  customers  as 
you'd  like  to.  Many  organizations,  such 
as  pharmaceutical  and  film  production 
companies,  arc  also  challenged  with 
threats  to  their  resources.  Blockbuster 
drugs  go  off  patents,  and  revenue  is 
fondamenially  challenged  as  a  result. 
Or  you  need  a  new  hit  film  regularly. 
You  need  to  constantly  renew. 

So  some  industries  by  their  nature  are  con¬ 
stantly  in  creative  change?  Yes.  The  idea 
is  that  the  assets  that  lie  underneath 
the  revenue  structure  of  the  business 
are  constantly  being  challenged. 

How  does  that  differ  from  radical  change? 
Under  creative  change,  the  customer  is 
satisfied  with  how-  you’re  dealing  with 
that.  The  difference  between  the 
movie  industry  and  the  overnight  let¬ 
ter  industry  is  that  the  movie  industry 
is  dealing  effectively  with  renewal  of 
underlying  resources,  so  the  customer 
is  not  looking  for  better  alternatives. 

That  brings  us  to  intermediating  change. 
What’s  that  all  about?  Under  intermcdiai- 
ing  c  hange,  your  customer  relation¬ 
ships  are  threatened  but  your  assets  re¬ 
tain  value.  It's  harder  to  deal  with  than 
radical  change  because  you'x'c  got  to 
figure  out  a  new-  way  to  make  money 
out  of  assets.  If  you're  running  a  tele¬ 
phone  service  provider,  you  kn«>w  that 
the  challenge  is  managing  down  the 
land-line  infrastructure.  Rut  if  you're 
running  an  organization  going  through 
intermediating  change  —  like  an  auto 
dealership  —  you've  got  a  fundamental 
strategic  problem:  How  do  you  rede¬ 


ploy  assets  into  new  ways  of  doing 
business  for  which  you  can  get  paid 
while  ramping  dow^n  your  commit¬ 
ment  to  an  old  way  of  doing  business? 
It's  very  challenging,  because  often 
you’re  making  more  monex'  under  the 
old  way.  and  that  may  continue  for 
many  years.  That  creates  civil  wars 
within  organizations. 

Whaf  does  all  this  mean  to  me  as  a  CIO? 

The  IT  world  is  so  incredibly  complex. 
There  are  many,  many  dilTercnt  trajec¬ 
tories  of  change  within  the  IT  sector. 
And  for  CIOs  in  non-IT  companies  — 
the  CIO  of  a  bookseller  is  facing  a  fun¬ 
damentally  different  challenge  then 
the  CIO  of  a  telephone  company.  If 
you're  a  CIO.  the  right  way  to  use  this 
is  as  part  of  a  broader  strategic  process 
in  which  you  envision  how  your  com¬ 
pany  is  going  to  compete  in  five  years. 
The  right  way  to  manage  IT  depends 
on  how  your  organization  intends  to 
navigate  this  change. 

As  a  CIO  whose  industry  is  in  radical  change, 
what  sorts  of  IT  investments  should  I  consid¬ 
er?  If  you're  running  an  ox-ernighl  let¬ 
ter  delivery  company  confronting  radi¬ 
cal  change,  you  might  want  to  augment 
your  systems  to  support  account  man- 
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I  agers  in  evaluating  which  customers 
I  arc  willing  to  work  with  you  in  new 
I  ways  —  say.  in  document  management 
j  or  expanded  logistics  serx’ices  —  so 
I  you  can  diversify  from  overnight  letter 
j  services  into  related  businesses. 

What  if  I'm  a  CK)  in  progressive  change?  If 
you're  running  a  business  undergoing 
progressive  change,  like  Home  Depot 
or  Wal-Mart,  you  should  be  vigilantly 
focused  on  incrementally  expanding 
IT  services  for  efficiency,  and  strategic 
IT  would  deal  with  managing  links  to 
suppliers  and  customers. 

And  if  fm  in  intermediating  change?  The 
challenge  is  in  finding  new  ways  of 
transacting  business.  Developing  a 
system  for  capturing  information 
about  the  costs  associated  with  offer¬ 
ing  products  in  nexv  ways  is  going  to 
be  central  to  the  future  of  an  organiza¬ 
tion.  If  you're  an  auctixm  house,  for 
c.xamplc.  how  do  you  deal  with  the 
stress  of  online  auctions?  Well,  you 
have  appraisal  capability;  how  will  you 
sell  that  in  a  new  way?  Understanding 
how  much  it  costs  to  offer  appraisal 
services  to  sellers  on  eBay  is  an  exam¬ 
ple  of  hoxx’  IT  could  be  used  to  help 
you  deal  with  intermediating  change. 

How  does  IT  play  in  creative  change?  The 
goal  under  creative  change  is  to  keep 
these  Hail  Mary  projects  isolated.  A 
pharmaceutical  company  developing  a 
new  drug  doesn't  xvant  to  bring  down 
the  whole  company  if  the  drug  fails. 
The  same  goes  for  a  movie  studio  or  a 
company  in  oil  and  gas  exploration. 
They  need  to  keep  projects  isolated. 
But  most  leading  companies  are  trying 
to  manage  risks  across  a  portfolio  of 
projects.  IT  is  elTective  if  it  provides 
management  with  information  about 
programmatic  success  without  over¬ 
controlling  the  individual  programs. 

What's  the  hardest  thing  about  getting  all 
this  right?  Each  of  these  trajectories 
plays  out  over  decades.  And  even 
when  change  carries  the  potential  to 
bkiw  away  old  systems  and  make  them 
«>bsolctc,  often  in  the  short  run.  slaying 
the  course  generates  a  higher  return 
on  investment.  So  the  hardest  part  is 
figuring  out  how  to  take  the.se  insights 
about  the  trajectory  of  your  industry 
and  integrate  them  into  your  daily  de¬ 
cisions  about  how  to  run  the  business. 
C 49634 
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Building  Bridges: 
Marketing  and  IT 

h's  no  secret  that  the  IT  and  marketing 
departments  have  trouble  understand¬ 
ing  each  other.  That's  a  shame,  be¬ 
cause  marketers  are  striving  to  inte¬ 
grate  vast  sources  of  data,  present  tar¬ 
geted  messages  to  consumers  and  in¬ 
crease  the  measurability  of  marketing 
>  all  of  which  require  technology.  Yet  a 
study  conducted  by  Alpharetta.  Ga.- 
based  Aelera  Corp.  last  year  found  that 
only  61%  of  marketing  pn^ects  suc¬ 
ceed.  a  record  that  the  IT  services  firm 
says  could  be  improved  by  an  average 
of  15%  through  a  better  relationship 
between  marketing  and  IT. 

Marketers  typically  say  that  IT  is 


slow,  inflexible  and  clue¬ 
less  about  customers, 
while  technologists  say 
marketing  types  do  a  poor 
iob  of  explaining  vrhat  they 
need.  In  a  recent  bulletin, 

Etana  Anderson,  an  analyst 
at  Forrester  Research  Inc., 
went  so  far  as  to  call  the 
relationship  dysfunctional 
-  but  not  irreparable. 

Anderson  identified  the 
following  ways  bellwether 
companies  can  improve 
their  marketing/IT  relationships: 

■  Move  some  IT  staffers  into  the  mar¬ 
keting  group  for  dedicated  IT  support 
•  Create  a  marketing  services  team 
that  fulfilb  ad  hoc  requests  for  data 
and  custom  reports. 


W" 
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Thought  Leader 

In  a  recent  interview  published  on  Gartner 
lnc.'s  Web  site.  Intel  Corp.  CK)  Doug  Busch 

expresses  some  exasperation  with 
IT's  reputation  for  boondoggles:  “IT 
has  been  the  poster  child  in  the  me¬ 
dia  for  failed  business  projects." 

Busch  says.  “But 


name  another 
function  that's 

W  i^one  better.  Ac- 

quisitions  deliver¬ 
ing  forecasted 
financial  return? 
New  products 
making  it  to  mar¬ 
ket  on  time  and  on 
budget?  Executive 
hires  who  turned 
out  as  anticipated?  IT  is  not  that  bad 
in  comparison." 

Busch  also  says  in  the  wide-ranging 
interview  that  every  group  within  the 
IT  department  needs  to  have  "a  for¬ 
ward-looking  R&D  component.  If  you 
don't  look  downstream  at  opportuni¬ 
ties  in  front  of  you.  you  choke  off  the 
path  of  continuous  improvement.” 


Things  to  Ponder 

■  Press  release:  “Judy  Ravin,  director 
of  English  Communications  Services 
LLC,  an  accent-reduction  firm  in  Ann 
Arbor.  Mich.,  has  produced  a  new  sys¬ 
tem  to  help  foreign  nationals  lose  their 
accents.  'Lose  Your  Accent  in  28  Days' 
combines  a  CD-ROM  with  an  audio 
CD  and  a  book  to  help  professionals 
lose  their  accents  in  just  one  month." 

■  The  average  CIO  tenure  has  im¬ 
proved  from  18  months  to  30  months  in 
the  past  two  years,  says  Mela  Group 
Inc.  analyst  Jonathan  Poe. 

■  IT  spending  averages  7.4%  of  rev¬ 
enue  at  companies  where  top  execu¬ 
tives  view  IT  as  a  significant  enabler  of 
the  company’s  growth,  but  only  4.7% 
of  revenue  at  companies  where  execu¬ 
tives  view  IT  as  a  growth  inhibitor,  ac¬ 
cording  to  a  survey  of  203  executives 
by  New  York-based  Bain  &  Co. 

■  Forrester  Research  predicts  that  the 
next  boom  in  IT  spending  will  start  in 
2008  and  continue  through  2016. 

■  Enterprise  IT  architecture  lyTiically 
focuses  on  lechnolog)-  and  business 
processes  but  almost  never  focuses  on 


■  Make  technology  decisions  through 
a  cross-functional  committee. 

■  Have  a  chief  marketing  officer  who 
sits  at  the  executive  table  with  the  CIO. 

■  Develop  a  strategic  technology  road 
map  for  marketing. 

-  M/tc/i  Betts 


the  social  aspects  of  work  and  the 
workplace,  says  Meta  Group  analyst 
Mike  Gotta.  So  in  the  near  toture. 
companies  will  need  to  hire  “social 
architects"  to  find  out  how  people  re¬ 
ally  ttx>rk.  communicate,  collaborate, 
innovate  and  solve  problems,  he  sa>’s. 
O  49502 


Pain  Point:. 

Whtch  technology  areas  are  the 
greatest  sources  ol  pain  m  youi 
organization  today? 

I  Secunty 
'  Storage 

3  Software  license  managernent 
•1  Remote  access 

’  Network  pertomiance  managemefrt 
•  Wireless  LAN/Wi-R 

BASE 


The  IT  Economy 

■*naU<BMrafri)nM«yCtnk- 
laa'ktalMAaaiiiaeMInnMr 
Riimirtitiian.Fnnmgin». 
l«k^riMilwlamiofU&  IT 
kandnggraMliInZOIMioSnblmn 

ilMplniaof200Faoa9L'1l>nate- 
MpnrilTkinAiggrakIh  title 
U.S.  andC—rti  ntpu  ITlwtPagtr 
iKlcnitMtnollMpiicHaiifnH- 
mknuiMiwkiwUntawiWt.* 
rnmulMm  'WtlfcwnlliiccMlililk 
Ifcn  k  pkMng  op . . .  Iimalkinm 
twnaetioikiklllailorlTbuinto 
puelitar-kidgel-iIgnacMiir 
a»«ki)|»te.timcktytiwl»k..' 

k  Then  rmt  be  an  ititdi  ti  mrand 
ii|iendai(i.bUkaiecateiklerikk 
yeer'sITtpaniegtootedaitatken- 
mer.aaadngtoekcveyoflOOcoico- 
nae  QOb  by  The  Geidman  Sedk  6niui) 
Ina  a.  Naw  ttak.  Wkn  ekkd  ai  Auguk 
tartikrpn(fcaane.tkaOteaaltka 
IT  cepU  budgak  at  gnnr  oitr  19%  ai 
ZOO&akkqiiaapaanitkat'Ibkn- 
cast  tny  made  one  mndh  eerier. 


Year-End  Tech 
Spending  Spree? 

tMnen-eenfemeikBiiekrkeeel- 

■■■^bikkMikWIeeleiri^ 

beteneeneerearflnekteMkinkT 


Networkir>o 


Storage 


Software 


Send  them  to 

pitcheSsdcompufenvorld.com. 
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Haddng  for  the  Home  Team 
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Jason  Larsan.  31.  is  a  hacker  for  ttie  good 
guys.  AccordinQ  to  Reuters  Nevvs  Seivice. 
Larsen's  job  is  to  find  the  weaknesses  in 
the  security  of  America's  pipeknes.  rail¬ 
roads,  utihes  and  infrastmcture  as 

part  of  a  project  backed  by  the  Idaho  Na¬ 
tional  Engineering  and  Environmental 
Laboratory  HNSL)  in  Idaho  F^. 

The  tab.  sponsored  by  the  Department 
of  Energy,  twesexpert  hack^  to  test  vul¬ 
nerabilities. ‘I  am  confident  that  there  IS 
nosystem  connected  to  the  Internet  that 
can't  be  hacked  into.*  Laurin  Dodd,  who 
oversees  the  INEB.*s  nafional  security 
pmgrams.  told  Reuters. 

To  demonstrate.  Larsen  recently 
hacked  into  the  controls  of  a  nearby 
chemical  plant  and  found  an  online  video 
camera  inside  that  confirmed  ^  he  had 
pumped  up  a  pressure  value. 

*lt'sthechallenoe.‘Larsenexplained.  I 


*tt's  you  against  the  defenders." 

INEEL  officials  recaled  a  recent  visit 
by  an  hfaho  utility  executive  who  was  con¬ 
vinced  that  his  system  had  no  problems. 
Aftera  demonstration,  the  shaken  execu¬ 
tive  requested  a  comprehensive  review  of 
his  company. 

Larsenandhisemployersarectose- 
moufiied  about  his  background.  Ileamed 
my  hacking  back  when  it  wasa  cool  thing.’ 
he  tokf  Reuters.  IfiCQ.  officialsadded  that 
their  hackers  need  security  clearances 
and  can't  have  criminal  records. 

The  lab  is  part  of  the  Department  of 
Homeland  Security's  efforts  to  boost  de¬ 
fenses  against  possible  attacks  of  ail  kinds. 
The  chafenge.  the  MEB.  told  Reuters,  is 
toencouagecybersecuritywrttioutinspir- 
ing  nefarious  acts. 'Y/hat  you  don't  want 
to  do  is  increase  the  threat  by  advertising 
what  you  can  do.' Dodd  said. 


Tough  Times 
For  Contractors 

Of  firms  using  offshore  outsowdno. 
48%  have  cut  back  on  the  number  of 
contractors  they  employ,  according  to 
Forrester  Resaarch  Inc.  Even  with  de¬ 
mand  for  IT  profossfonab  up  afightfy 
this  year,  the  marhat  has  been  unable 
to  absorb  excess  contractor  talent. 
Most  hard-hit  are  contractors  with 
skilsinPsopIsSoflMdSiebelknple* 
mentations.  As  a  result,  failing  rates 
for  contractors  have  fsBen  dramaticai- 
ly,  Forrester  says. 


Executive  Checklist 


2004  IT  HEADCOUNT 
C0MPAnE0WITH2003 


Wait,  Wait, 

I’m  Not  Finished! 

The  average  tsnurs  of  a  CIO  in  the  fodoraf 
government  is  about  two  yaars.  But  many 
current  and  formar  federal  CIOs  say  that 
they  ready  need  three  to  five  years  to  be- 
come  effective,  accordbig  to  a  report  by 
the  Government  AccountabSty  Office. 
“Accordaig  to  some  current  CIOs,  high 
tinnover  is  a  problem  because  it  CM 
HmH  CIOs' ebilty  to  put  their  agendas  in 
place,”  the  GAO  says.  For  one  thing,  it 
takes  time  tor  a  CIO's  plans  to  show  <9  in 
an  agency’s  budgat  request  and  then  in 
conyeesionel  appropriations.  The  high 
turoovar  rate  is  a  result  of  the  pofiticd 
nature  of  the  fob  and  lower  pay  relative  to 
the  private  sector. 


Who  Does  What 

The  US.  Department  of  Labor's 
Buremi  of  Labor  Statistics  recently 
reported  these  worVWe  statistics 
for 2003: 

■  Employad  men  workad  about  an 
hour  more  per  day  than  emptoyed 
women -8  vs.  7.1 


■  Employed  adult  women  spent  about 
an  hour  more  per  day  than  emptoyed 
adult  men  doing  houeahoU  activities 
and  caring  for  household  members. 


■  One  in  five  employed  parsons  did 
somo  or  al  of  their  work  at  home. 


■  AduHs  in  households  without  chfiiben 
spent  about  14  hows  more  per  day  en¬ 
gaged  in  leisure  activities  than  those 
wmciMoren. 


www.coinEHitefworld.com 


EXEC  TRACK 


Lapore  Made  CEO 
At  Dnjgstore.coni 

DAMN  e.  UU*(ME  hM  aceaptwl 
th*  poeMon  ol  CEO  and  cMrrMn 
of  Onimtorixom  Ine^  an  ontne 
protddar  ol  pharmacy  products. 
Laporo  ia  curantty  vtea  chairman 
of  tochnology.  oparatfons  and  ad- 
mMitration  at  Tha  Cfiailos 
Schwab  Corp..  whsra  Mia  has 
sarMd  hi  a  tmrfaty  of  poMdoos. 
includhg  CIO.  ovar  a  parlod  of  21 
yoars.  Sha  «■  sl«  down  from 
bar  poaMana  at  Schwab  bafora 
Joining  Balania.  Wnh.-baaad 
Drugataraxam. 


Yates  Joins 
KeyCorp  as  CK) 

STEPWN  L  ms  hM  Jalnad 
KayCarp.  a  Oavatand-baaad 
llnaficial  sarvicaa  company,  as 
asaculiM  Moa  praaUaiit  and 
Cn,  raportfag  to  ChM  Adminii- 
tradva  ORicar  Tam  Stowans. 
Vatoa  moot  racandy  was  praai- 
dantofbihrmaUunlimhnoiop 
Con  a  unM  of  USU.  Batoft  that 
ha  ran  fT  dapartmants  at  Rock* 
wad  Automaton  toe.,  a  ANwau- 
hai  haiadiiiiainnoffbchwal 
Inter  naliynal 


Marvel  Taps  Cho 
ForCIOPM 

Minil  EnMfilM  Ik.,  a  Nn. 
Yin*  hfil  Kllitaiiaia  mm- 

pai«.  h«  KpoMad  own  CW 
K  CX).  Pmiiiuil.,  On  amad  ki 
MriouapoaHnalllialMniir- 
WCoa.iaNaai«irii.inMtag 
•takruktanMailoiaapIca- 
Uam  and  opanHona,  and  iKior 
»iaa  maridm  al  tadmologir  and 
conanunlcallnna. 


Claudio  to  Head  FT 
At  Align  Technology 

Alpi  IMnalanr  haL.  a  malar  ai 
danlal  aaalanen  In  Santa  On. 
Call..liKnaaiadcaaUkaAU- 
mo  iiln  naddaat  at  nlKmlng 
and  cn.  SNa  adi  lapait  la  CEO 
T1iamKM.naaanlLllaalra- 
aanSy.  aaada  nan  cn  al  Zialali 
FInanaWSanlaaa. 
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PAUL  GLEN 


To  Each  His  Own 


I  GIVE  A  FAIR  NUMBER  OF  SPEECHES  for  confer¬ 
ences  and  private  IT  department  meetings,  and 
there’s  almost  always  a  chance  for  questions  and 
answers  during  the  formal  presentation.  After¬ 
ward,  I  hang  around  and  frequently  get  different 
questions,  the  ones  that  no  one  wants  to  ask  in  front  of 
a  big  group. 

Among  the  most  common  are  those  about  the 
mechanics  of  how  I  write  and  prepare  for  speeches. 
“Where  do  you  get  your  column  ideas?”  “When  do  you 
write?”  “What  time  of  day?”  “Where?”  “Do  you  use  pa¬ 
per  or  a  word  processor?”  “Do  you  do  outlines?”  “Do 
you  rehearse?”  “Do  you  try  out  those  jokes  and  stories 
on  your  wife?”  The  permutations  are  almost  endless. 


In  many  ways,  these  in* 
quiries  are  quite  flattering. 

Someone  admires  what  I 
do  enou^  to  want  to  emu¬ 
late  it.  (Or  perhaps  they 
hate  it  so  much  that  th^ 
want  to  avoid  being  re¬ 
motely  similar.) 

But  I  always  answer 
these  questions  with  mixed 
feeling  I  know  that  Fm 
not  giviiig  the  interviewers 
any  truly  useful  informa¬ 
tion,  because  they’ve  asked 
me  the  wrong  questions. 

Rarely  do  they  realty 
want  to  know  where  I  sit  or 
how  I  work.  What  they  do 
want  to  know  is.  “How  can 
I  write  and  speak  in  my 
own  way?"  Or,  “How  can  I  express  my¬ 
self  in  the  pages  of  magazines  and  the 
platforms  of  meetings?" 

Unfortunately,  the  only  honest  an¬ 
swer  to  what  they’re  really  MUng  is,  “l 
don't  know  how  you  can  do  your  own 
version."  Just  knowing  how  I  work 
won’t  really  help  them  much. 

I  can  explain  the  workings  of  the 
publishing  industry.  1  can  tell  you 
about  the  mechanics  of  bow  speeches 


are  solicited,  bought  and 
sold.  But,  in  truth,  thi-c  will 
give  you  no  help  in  writing 
flinny  and  enli^tening 
articles  or  in  the  art  of  de¬ 
livering  entertaining  and 
perception-transforming 
speeches. 

No  one  can  tell  another 
person  bow  to  be  most  pro¬ 
ductive  when  it  comes  to 
creative  work.  The  meth¬ 
ods  are  hi^ily  personaL  If 
there  were  one  good  way, 
we  would  long  have 
developed  a  surefire 
process  for  writing 
Pulitzer  Prize-winning 
novels.  You'd  just  have  to 
follow  the  steps  (require¬ 
ments.  planning,  design,  writing,  edit¬ 
ing.  printing  and  so  on),  and  out  would 
pop  a  work  of  genius. 

It  is  critically  important  for  man¬ 
agers  of  technical  staffs  to  under¬ 
stand  this.  Most  technical  work,  de¬ 
spite  what  many  process  gums  will 
tell  you.  is  largely  a  creative  endeavor. 
You  can  slice  it  and  dice  it  any  way 
you  want,  but  in  the  end,  there's  al¬ 
ways  a  box  on  the  project  plan  that 


says.  “Magical  insight  happens  here." 

If  you  want  to  encourage  your 
staffers  to  operate  at  their  peak  poten¬ 
tial,  here  are  a  few  things  you  ought  to 
consider 

Oonl  try  to  bnpoae  your  «(mrfc  habito  on 
your  sttoonbnatas.  Most  managers  got 
where  they  are  by  being  great  produc¬ 
ers  (despite  the  DUbert  imagery).  But 
just  because  some  particular  approach 
to  work  is  good  for  you  doesn't  mean 
it’s  equally  effective  for  everyone  else. 
Just  because  you  keep  everything  in 
folders  and  have  a  clean  desk  at  the 
end  of  the  day  doesn’t  mean  that  some 
people  on  your  staff  won’t  be  much 
more  productive  with  a  blizzard  of 
paper  filling  the  room. 

Oonl  baleve  ton  there  ii  any  m 
way  to  de  eomaMng  Uniformity  for  uni¬ 
formity’s  sake  isn't  a  particulariy  good 
goal  It  may  be  comforting  for  you  as 
a  manager  to  know  that  all  of  your 
staff  operates  in  precisely  the  same 
way.  Thinking  of  people  as  inter¬ 
changeable  parts  makes  management 
relatively  simple,  but  it's  a  mistake. 
You’ll  be  giving  up  a  lot  of  the  value 
of  the  individuais  on  your  staff  if  you 
think  that  way. 

Enooinoe  yaw  stoffen  to  find  their  own 
peraonM  etytoa.  Most  technical  staff 
members  want  to  do  things  the  right 
way  and  are  constantly  on  the  bunt 
for  best  practices.  It’s  important  to  let 
your  people  know  that  variations  in 
style  are  normal  and  acceptable.  Oth¬ 
erwise.  they’ll  spend  lots  of  time  look¬ 
up  for  the  least-common-denomina¬ 
tor  approach,  and  that  saps  energy  and 
productivity. 

Giving  people  the  permission  and 
responsibility  to  find  their  own  work- 
styles  both  frees  them  to  search  for 
their  own  best  practices  and  sets  the 
expectation  that  they  will  produce  as 
best  they  caa  O  49487 


WMTMIIimM? 

Ofo  fnow  cohfnra  and  Ma  to  our  arcIWK,  go  W 
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Hacking  for  the  Home  Team 


Jason  Larsen.  3t.  is  a  hacker  for  the  good 
guys  According  to  Reuters  News  Service. 
Larsen's  loti  is  to  find  the  weaknesses  in 
the  secunty  of  America’s  Dipeiines.  rail¬ 
roads.  utilities  and  other  infrastructure  as 
oart  of  a  oroiect  backed  by  the  Idaho  Na- 
lionaf  Engineenng  and  Environmental 
Lattoratory  (INEEL)  m  Idaho  Falls 
The  lab.  soonsored  by  the  Oetiariment 
oi  Energy,  hires  expert  hackers  to  lest  vul- 
nerabililies  lamconiidentthal  thereis 
no  system  connected  to  the  Internet  that 
cant  be  hacked  into.'  Launn  Dodd,  who 
oversees  the  INEEL's  national  security 
programs  lokJ  Reuters. 

To  demonstrate.  Larsen  recently 
hacked  into  the  controls  of  a  nearby 
chemical  plant  and  found  an  online  video 
camera  inside  that  confirmed  thal  hehad 
purnped  up  a  pressure  value 
"It's  the  challenge. '  Larsen  explained 


“It’s  you  against  the  defenders  " 

INEEL  officials  recalled  a  recent  visit 
by  an  Idaho  utility  executive  who  was  con¬ 
vinced  that  his  system  had  no  problems. 
Attera  demonstration,  the  shaken  execu¬ 
tive  requested  a  comprehensive  review  ot 
his  company. 

Larsen  and  his  employers  are  close¬ 
mouthed  about  his  background  Ileamed 
my  hacking  back  vrhen  it  was  a  cool  thing.' 
he  loW  Reuters.  INEEL  of  licials  added  that 
their  hackers  need  security  clearances 
and  can't  have  criminal  records 

The  lab  IS  part  of  the  Department  of 
Homeland  Secunty'setfortsto  boost  de¬ 
lenses  agamsl  possible  attacks  of  all  kinds 
The  challenge,  the  INEEL  ioM  Reuters,  is 
toencourage  cybeoecunty  without  inspir¬ 
ing  nefarious  acts  "What  you  don't  want 
to  do  IS  increase  the  threat  by  advertising 
what  you  can  do.' Dodd  said 


TOP  10  IN  OFFSHORING 


«a»<ingto1«MJnlle.ag.aWAsite9pansatedby«ieC(mnn(alionWnlmdAii^ 
inJ  an  «»iMleoleaattshr<l«dinial»T^i>iyeeiiiocis.  251332  iots  haw  gone 
JanuaiyZOCn.iosUWglnHUaSliibsloslHerelsItsIslaflhetoplOoflshonngtaniDanles: 


COMPANY 

JOBS  OFFSHORED 

tStIMATEO  JOBS  LOST 

Elaclninic  Data  Systoim  Cerp. 

20.000 

2.750 

ConwgysCerp. 

U.OOO 

NN) 

GmrMEIadricCo. 

14,000 

UnavalMite 

AceentmUri. 

10.000 

UnavailaMe 

Conputar  Sdams  Corp. 

7.700 

5.400 

MCI  lac. 

7.500 

BOO 

Ddiinc. 

6.500 

5.700 

Standard  Chartared  PIC 

6.500 

UnavMUile 

SabraHoUtogiCerp. 

6.200 

6.200 

OaluAlrUwalne. 

6.200 

IMavailaUe 

Tough  Times 
For  Contractors 

Of  firms  using  offshore  outsourcing. 
48S  have  cut  back  on  the  number  of 
contractors  they  employ,  according  to 
Forrester  Research  Inc.  Even  with  de* 
mand  for  IT  professionals  up  slightly 
this  year,  the  marhet  has  been  unable 
to  absorb  excess  contractor  talent. 
Most  hard-hit  are  contractors  with 
skills  in  PeopleSoft  and  Siebel  imple¬ 
mentations.  As  a  result,  billing  rates 
for  contractors  have  fallen  dramatical¬ 
ly.  Rirrestersays. 


RETAmnW  TALENT 
ATOPyVORRy 

AAhoui^  Viere's  not  a  whole  M  o4 
hiring  goiio  on.  aOs  are  Mnttig 
hard  about  how  to  teep  ita  IT  talent 
they  have.  At  Hs  racant  SMpoeium 
inChicaoo.theSocle(yfDrlnforma- 
bon  Management  poM  160  senior 
IT  leaders  ateui  their  concerm  Re¬ 
taining  IT  profasaionals  came  In 
near  Ihe  top  of  the  IsL  aacond  only 
to  algning  IT  wlh  lha  buaineas. 


2004  IT  HEAD  COUNT. 
COMPARED  WITH  2003 


S8aie852003 
BASEtCOaemarmeadBrs 


Who  Does  What 

The  U.S.  Department  of  Labor's 
Bureau  of  tabor  Statistics  recently 
reported  these  work/life  statistics 
for  2003: 

■  Employed  men  worked  about  an 
hour  more  per  day  than  employed 
women -8  vs.  7.1. 

■  Employed  adult  women  spent  about 
an  hour  more  per  day  than  employed 
adult  men  doing  household  activities 
and  cwng  for  household  members. 

■  One  in  five  employed  persons  did 
some  or  all  of  their  work  at  home. 

•Adults  in  households  without  children 
spent  about  1.4  hours  more  per  day  en¬ 
gaged  in  leisure  activities  than  thc^ 
witfi  children. 
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BASE:  133  hunaniesouces  managers: 
muBple  responses  eflowed 

SQL(»Cf  WiOMT  WANACEWf  N'  COKSOt  tiNtS 
PK.c  ADCLPMiA  SEPUMBfRJOOa 

Wait,  Wait, 
I’mNotRnished! 

The  average  tenure  of  a  CIO  in  the  federal 
government  is  about  two  years.  But  many 
current  and  former  federal  CIOs  say  that 
they  really  need  three  to  five  years  to  be¬ 
come  effective,  according  to  a  report  by 
the  Government  Accountability  Office. 
“According  to  some  current  CIOs,  high 
turnover  is  a  problem  because  H  can 
limit  CIOs’  ability  to  put  their  agendas  in 
place."  the  GAO  says.  For  one  thing,  it 
takes  time  for  a  CIO's  plans  to  show  up  in 
an  agency's  budget  request  and  then  in 
congressional  appropriations.  The  high 
turnover  rate  is  a  result  of  the  political 
nature  of  the  job  and  lower  pay  relative  to 
the  private  sector. 

-  M//cA  Betts 


squi 

1NUE 


CONTINUES 

Spenlno  on  IT  staff  in  the  form  of 
salaries,  beneffts  and  overhead  is  Mcefy 
to  be  one  d  the  weakest  parts  of  the 
oveidl  IT  budget  diaing  the  next  five 
yevs.  acoordtog  to  a  recard  report  by 
Forrester  Research,  onshore  outsourc¬ 
ing,  automated  server  management  m 
thedata  cerderand 'ncraased  use  of 
packagedretherthancustomapplica- 
boTB  al  decrease  toe  need  tor  new 
Nresandkaepsalanesdown.  Forrester 
seys.  It  predtots  modest  growth  of  3% 
peryaarinmedtonITaalariesandben- 
eltoaftostaH-levelgriiwlhof<mly2% 
to3%thraudt200a  04tB68 
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Lapore  Made  CEO 
At  Drugstore.com 

DAWN  6.  LAPORE  has  accepted 
the  position  of  CEO  and  chairman 
of  Drugstorexom  Inc.,  an  online 
provider  of  pharmacy  products. 
Lepore  is  currently  vice  chairman 
of  technology,  operations  and  ad> 
ministration  at  The  Charles 
Schwab  Corp.,  where  she  has 
served  in  a  variety  of  positions, 
including  CIO.  over  a  period  of  2t 
years.  She  wHI  st^  down  from 
her  positions  at  Schw^  before 
joining  Bellevue.  Wash.-based 
Onigstore.com. 


Yates  Joins 
KeyCorp  as  CIO 

STEPHEN  E.  YATES  has  joined 
KeyCorp,  a  Qeveland-faased 
financial  services  company,  as 
eiecutive  vice  president  and 
CK).  reporting  to  Chief  Adminis¬ 
trative  Officer  Tom  Stevens. 
Yates  most  recently  was  presi¬ 
dent  of  Information  Technology 
Co.,  a  unit  of  USAA.  Before  that, 
he  ran  (T  departments  at  Rock¬ 
well  Automation  Inc.,  a  Milwau¬ 
kee-based  division  of  RodnvefI 
IntemationaL 

Marvel  Taps  Cho 
For  CIO 

Marvel  Enterprises  Inc.,  a  New 
Vorii-based  entertainment  com¬ 
pany,  has  appointed  OAVID  CHO 
as  CK).  Previously,  Cho  served  in 
various  positiMis  at  The  McOraw- 
Hni  Cos.  in  New  Ybrh,  including 
senior  vice  president  of  applica¬ 
tions  and  operations,  and  senior 
vice  preskW  of  technology  and 
communications. 


Claudio  to  Head  IT 
At  Align  Technology 

Align  Technology  Inc.,  a  maker  of 
dental  appliances  In  Santa  Clara. 
CalH..  has  named  CEaUA  CLAU¬ 
DIO  vice  president  of  engineering 
and  CIO.  She  win  report  to  CEO 
Thomas  M.  Prescott  Most  re¬ 
cently.  Claudio  was  CIO  at  Zurich 
Rnandal  Services. 


To  Each  His  Own 


I  GIVE  A  FAIR  NUMBER  OF  SPEECHES  for  confer¬ 
ences  and  private  IT  department  meetings,  and 
there’s  almost  always  a  chance  for  questions  and 
answers  during  the  formal  presentation.  After¬ 
ward,  I  hang  around  and  frequently  get  different 
questions,  the  ones  that  no  one  wants  to  ask  in  front  of 
a  big  group. 

Among  the  most  common  are  those  about  the 
mechanics  of  how  I  write  and  prepare  for  speeches. 
“Where  do  you  get  your  column  ideas?”  “When  do  you 
write?’  “What  time  of  day?”  “Where?”  “Do  you  use  pa¬ 
per  or  a  word  processor?”  “Do  you  do  outlines?”  “Do 
you  rehearse?”  ”Do  you  try  out  those  jokes  and  stories 
on  your  wife?”  The  permutations  are  almost  endless. 


In  many  ways,  these  in¬ 
quiries  are  quite  flattering. 

Someone  admires  what  I 
do  enough  to  want  to  emu¬ 
late  it.  (Or  perhaps  they 
hate  it  so  much  that  they 
want  to  avoid  being  re¬ 
motely  similar.) 

But  I  always  answer 
these  questions  with  mixed 
feelii^s.  I  know  that  Fm 
not  giving  the  mter\'iewers 
any  truly  useful  informa¬ 
tion,  because  they’ve  asked 
me  the  wrong  questions. 

Rarely  do  they  really 
want  to  know  where  I  sit  or 
how  I  work.  What  they  do 
want  to  know  is.  “How  can 
I  write  and  speak  in  my 
own  way?"  Or.  “How  can  1  express  my¬ 
self  in  the  pages  of  magazines  and  the 
platforms  of  meetings?" 

Unfortunately,  the  only  honest  an¬ 
swer  to  what  they’re  really  asking  is.  "I 
don't  know  how  you  can  do  your  own 
versiotL*  Just  knowing  how  I  work 
won’t  really  help  them  much. 

I  can  explain  the  woridngs  of  the 
publishing  industry.  I  can  tell  you 
about  the  mechanics  of  how  speeches 


are  solicited,  bought  and 
sold.  But.  in  truth,  this  will 

give  you  no  help  in  writing  i 

funny  and  enlightening  I 

articles  or  in  the  art  of  de-  | 

livering  entertaining  and  | 

perception-transforming 
speeches.  ^ 

No  one  can  tell  another  | 

person  how  to  be  most  pro-  I 
ductive  when  it  comes  to  i 

creative  work.  The  meth¬ 
ods  are  highly  personal.  If 
there  were  one  good  way.  ■ 

we  would  long  ago  have  ■ 

developed  a  surefire 
process  for  writing 
Pulitzer  Prize-winning 
novels.  You’d  just  have  to 
follow  the  steps  (require-  ' 


ing,  printing  and  so  on),  and  out  would 


pop  a  work  of  genius. 

It  is  critically  important  for  man¬ 
agers  of  technical  staffs  to  under¬ 
stand  this.  Most  technical  work,  de¬ 
spite  what  many  process  gurus  will 
tell  you.  is  largely  a  creative  endeavor. 
You  can  slice  it  and  dice  it  any  way 
you  want,  but  in  the  end.  there’s  al¬ 
ways  a  box  on  the  project  plan  that 


says,  “Magical  insight  happs*ns  hero  " 

If  yc*u  want  to  encourage  your 
si.anfers  to  operate  at  their  peak  pt>ien- 
tial,  here  are  a  few  things  you  ought  to 
consider: 

Don't  try  to  impose  your  work  habits  on 
your  subordinates.  Most  managers  got 
where  they  are  by  being  great  pnrduc- 
ers  (despite  the  Di/bert  imagery  ).  But 
just  because  some  particular  approach 
to  work  is  gcK»d  for  you  d<K*sn’t  mean 
it’s  equally  effective  for  es’cryone  else. 
Just  because  you  keep  everything  in 
folders  and  have  a  clean  desk  at  the 
end  of  the  day  doesn’t  mean  that  some 
people  on  your  staff  wtm'i  be  much 
more  pr»ducrivc  with  a  blizzard  of 
paper  filling  the  rot-jm. 

Don't  believe  that  there  is  any  one  right 
way  to  do  somethinQ.  Uniformity  for  uni¬ 
formity’s  sake  isn’t  a  particularly  good 
goal.  It  may  be  comforting  for  you  a.s 
a  manager  to  know  that  all  of  y’our 
staff  operates  in  precisely  the  same 
way.  Thinking  of  people  as  inter¬ 
changeable  parts  makes  management 
relatively  simple,  but  it’s  a  mistake. 
You’ll  be  giving  up  a  lot  of  the  value 
of  the  individuals  on  your  staff  If  you 
think  that  way. 

Encourage  your  staffers  to  find  their  own 
personal  styles.  Most  technical  staff 
members  want  to  do  things  the  right 
way  and  are  constantly  on  the  hunt 
for  best  practices.  It’s  important  to  let 
yovr  people  know  that  variations  in 
style  are  normal  and  acceptable.  Oth¬ 
erwise,  they'll  spend  lots  of  time  look¬ 
ing  for  the  least-common-denomina¬ 
tor  approach,  and  that  saps  energy  and 
productivity. 

Giving  people  the  permission  and 
responsibility  to  find  their  own  wt»rk- 
stylcs  both  frees  them  to  search  for 
their  own  best  practices  and  sets  the 
expectation  that  they  will  produce  as 
best  they  can.  O  49^ 
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IT  Careers:  ITAA  Report  Pinpoints  2004  Hiring  Trends 

I  fKfeeblite  there’s  even  more  competition  for  even  fewer  - 

jobs,  you’re  right  According  to  the  2004  Workforce 
Development  Survey  from  Information  Technology 
Assoctation  of  America,  hiring  martagers  will  recruit  )ust 
under  230,000  IT  professionah  this  year.  That’s  down 
2003  when  500.000  fT  workers  were  hired  with  a  net 


inaease  of  approximately  200,000  new  jobs. 

The  ITAA  report  echoes  the  latest  forecast  from  tech  hiring 
firm  Robert  Half  A  Associates  The  Robert  Half  survey  of 
1,400  chief  information  officers  reports  a  fourth-quarter 
hiring  increase  of  1%. 

Despite  the  continued  trend  of  holding  the  line 
on  QKt  and  productivity,  the  500  hiring 
managers  polled  by  ITAA  in  its  annual  survey 
did  have  sound  advice  and  data  to  help  IT 
professionats  look  at  their  own  career  plarts 

Whafs  Driving  the  Hiring 
Varied  trends  are  itiving  the  hiring  for  2004. 

They  include  the  opening  of  entirely  new 
markets  for  (T  produm  and  services  Opening 
tndte,  Gtina,  Africa  and  other  countries  to 
technologies  will  require  newly  defined 
products  that  meet  requirements  for  harsher 
enviroftments  -  from  lack  of  electricity  to 
illitti^.  At  the  same  time,  there  are  strident 
requirements  on  cost  as  the  developing 
countries  need  ochnotogy  that's  inexpertsive 
and  easily  used.  Other  trends,  identified  by  ITAA,  mdude 
the  need  to  push  technofogy  to  do  more  fw  business  and 
for  everyday  Init^  new  quality  and  value  expectations 
methods  to  simpli^  increasmgly  complex  capabilities  and 
new  demands  fte  national  and  business  security 


What  They're  looking  For 
According  to  the  ITAA  report  and  de^ite  repeated  focus  by 
CIOs  on  a  blend  of  educational  and  business  capability,  the 
most  important  requirements  for  landing  a  job  in  2004  are 
related  job  experiena  and  a  four-year  degree.  The  hiring 
managers  also  identified  certHkations  and  other  on-going 
learning  as  tickets  to  consideration,  for  the  first  time,  the 
managers  also  pointed  to  interpersonal  sidtis  as  critical  in 
landing  a  job  >  more  important  in  faa  than  team  building 
and  program  leadership 


*2004  IT  Workforce:  Job  Categories  as  a  Percentage  of  Total  IT  Workforce 


Digital 
Network  ,4^ 
Systems  7^ 


Specifically,  software  programmers  and  engineers  continue 
to  make  up  the  biggest  segment  of  the  job  market. 
Howevec  the  largest  increases  in  hiring  come  in  other  areas 
-  tedmical  support  network  systems,  artd  database 
development  and  mining.  The  hiring  managers  report  that 


tech  suppoa  long  the  focus  of  outsourcing,  indudes 
everyihing  from  call  center  support  to  installation  of  new 
equfomem  and  systems  to  replan  aging  technology. 

Where  the  Jobs  Are 

Just  as  important  as  the  right  mix  of  skills  and  personality 
is  the  ability  to  go  where  the  jobs  are.  The  ITAA  workforce 
survey  fourid  that  hiring  and  IT  populations  continue  to 
move  across  the  country,  bridging  the  two  asasts. 

The  South,  as  a  region,  has  the  most  IT  workers  with  3.1 
million.  In  2004,  companies  in  the  South  expect  to  hire 
71 ,199  adcktional  IT  professionals-  The  Midwest 
follows  dosely  with  hiring  managers  planning 
to  bring  on  60,413  workers. 

White  the  geographic  mix  is  fairly  strong,  so  too 
Is  the  mix  of  typies  of  businesses  and  services 
that  are  hiring.  According  to  the  ITAA  survey  72 
percent  of  the  jobs  will  be  found  in  small 
business  versus  rntd-sized  or  large  companies. 
And  just  under  80%  of  the  jobs  will  be  in  non- 
IT  companies. 

'Some:  ITAA  'Adding  Value... Growing  Careers 
Annual  WorkfcneOewtopmenl  Survey'  2004 


For  more  mformation  about  IT  Careers  advertising, 
please  calk  800.762.2977 
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Peopled 

tion  Users  Group.  “It  sounded 
to  me  Uke  (Conway]  had  the 
board's  confidence  in  the  past.” 

Andrew  Albarelle,  principal 
executive  officer  at  Denver- 
based  staffing  agency  Remy 
Corp.,  also  said  he  was  sur¬ 
prised  by  the  change  but  is 
hopeful  that  h  will  work  out 
for  the  best  The  shakeup 
came  just  one  week  after  Peo- 
pleSoff's  annua]  user  confer¬ 
ence.  where  Conway  made  the 
rounds  with  customers.  “I've 
spent  more  time  with  Craig 
in  the  past  week  than  I  ever 
bad  before,"  Albarelle  said. 

But  be  added  that  he  sees 
Duffield  as  a  good  leader  for 
the  company. 

Other  asers,  as  well  as  some 
analysts,  raised  the  possibility 
that  Conway's  Itring  could 
pave  the  way  for  PeopleSoff  to 
capitulate  to  Oracle  ^rp.'s  16- 
montfa-old  hostile  takeo^ 
bid.  Conway,  a  former  Oracle 
executive  himself,  had  vocifer¬ 
ously  opposed  even  entertain¬ 
ing  the  thought  of  selling  Peo- 
pleSoff  to  his  former  employer. 

“Sitting  on  the  outside,  tlw 
Hrst  question  is  if  Conway  was 


I  thrown  under  the  bus  to  pre¬ 
vent  further  erosion  of  the 
Oracle  bid  pnee,"  said  Robert 
Robinson,  business  systems 
supervisor  at  Durr  Industries 
Inc.,  an  automotive  supplier  in 
Plymouth.  Mich. 

But  during  PeopleSoff’s  tele¬ 
conference.  board  member 
George  “Skip”  Battle  said  the 
ongoing  struggle  with  Oracle 
had  nothing  to  do  with  Con¬ 
way’s  removal.  He  noted  that 
PeopleSoft's  transaction  com¬ 
mittee.  composed  entirely  of 
independent  directors,  hu 
unanimously  rejected  all  of 
Oracle's  offers  and  was  never 
at  odds  with  Conway  on  the 
takeover  issue. 

“The  very  simple  and  plain 
reason  is  that  over  time,  the 
board  has  been  concerned 
about  Craig's  leadership."  Bat¬ 
tle  said. ‘There  was 
no  smoking  gun.  no 
accoimting  irregu¬ 
larities," 

“Obviously,  orga¬ 
nizations  go  through 
stages,  and  I  think 
Craig  brought  some 
focus,  and  that  was 
needed,"  said  Jefiey 
Weilet;  chief  ffnao- 
cial  officer  at  Gwin¬ 
nett  County  Public 


Schools,  a  PeopleSoff 
user  in  Lawrence- 
ville.  Ga.  But  Weiler 
said  that  with  Duf- 
field  running  the 
company  again.  Peo- 
pleSoff  will  likely  be¬ 
come  more  cus¬ 
tomer-focused  than  it 
was  under  Conway. 

That  could  give  Peo- 
plcSoff  a  competitive 
edge  as  it  tries  to 
fend  off  Oracle's  bid.  be 
added.  “It  could  help  differen¬ 
tiate  them." 

Uncertain  Future 

Oracle  Co-President  Charles 
Phillips  declined  via  e-mail  to 
comment  about  the  chaises  at 
PeopleSoff,  which  also  pro¬ 
moted  Chief  Financial  Officer 
Kevin  Parker  and  Executive 
Vice  Present  Phil 
Wilmington  to  new 
positions  as  co-pres¬ 
idents. 

PeopleSoff  also 
said  on  Friday  that 
its  third -quarter 
software  license  rev- 
entte  topped  S150 
millioa  —  a  level 
that  pleasantly  sur¬ 
prise  some  finan¬ 
cial  analysts,  who 


had  expected  worse 
after  pepleSoft 
missed  its  second- 
quarter  sales  target 
and  Oracle  reported 
just  $69  million  in 
business  appUca- 
tiorts  revenue  in  its 
latest  quarter. 

But  Charles  Di 
Bona,  a  Wall  Street 
analyst  at  Sanford  C 
Bernstein  &  Ca  in 
New  York,  said  he  sees  contin¬ 
ued  prcfolems  at  PeopleSoff 
ones  that  go  deeper  than  the 
confusion  created  by  Oracle’s 
bid.  He  noted  that  the  $150 
million  in  software  revenue  is 
9%  lower  than  last  year’s 
third-quarter  sales  figure. 

“1  think  a  large  part  of  the 
loss  of  cooTidence  (in  Con¬ 
way]  really  is  more  around  the 
ITX  Edv^ds  situation  than 
Oracle,"  Di  Bona  said,  refer¬ 
ring  to  Pct^leSoft’s  problem¬ 
atic  iniegration  of  former  rival 
).D.  Edwards  &  Co.,  which  h 
acquired  last  year.  This  is  not 
a  growing  company;  this  is  an 
ailing  company." 

Paul  Hamerman.  an  analyst 
at  Forrester  Research  Inc,  sakl 
Conway  did  instill  a  more  bus¬ 
inesslike  attitude  at  People- 
Soft,  which  was  losing  money 


when  be  look  over  as  CEO.  But 
over  time,  Conway  focused  too 
mud)  on  the  bottom  line  and 
alienated  man)'  users,  Haroer- 
man  said.  He  added  that  after 
moves  such  as  increases  in 
software  maintenance  prices, 
“the  customer  tmtse  level  grew 
to  the  point  where  (Duffield] 
had  to  step  in." 

]im  Pre^  CIO  at  Green 
Mountain  Coffee  Roasters  Inc. 
in  Waterbury.  Vt.,  said  he's 
glad  to  have  Duffield  back. 

“He  made  me  feel  personally 
valued  by  PcoplcSoft."  Prevo 
said.  On  the  other  hand,  he 
added,  Conway  “seemed  to  be 
all  business." 

Duffield's  style  also  might 
help  reassure  PcoplcSoft  em¬ 
ployees  worried  about  job  se¬ 
curity.  said  Bruce  Richardson, 
an  analyst  at  AMR  Research 
Inc  Pe^leSoft  “needs  some¬ 
one  to  rally  the  employees."  he 
added.  Cl  49n9 
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UDC 


ization  and  utility  computing 
at  HP,  confirmed  that  the  “big 
UDC"  is  DO  longer  available. 

UDC  components  will  be 
sold  separately  to  “get  way 
more  sales ...  to  smaller  cus¬ 
tomers,”  der  Zweep  said. 
The  wrong  thing  to  think  is 
that  we  are  de-investing  in 
utility  computing  by  modular¬ 
izing  the  parts.“ 

However,  one  result  of  the 
shift  is  that  about  100  HP 
workers  tied  to  UDC  will  lose 
their  jobs,  with  another  100 
being  shifted  to  work  on  the 
modtUar  offerings,  be  said. 

TfP  reaUy  did  close  UDC 
down,  but  they  are  trying  very 


hard  to  ^in  it  otherwise,”  said 
Gordon  Haff,  an  analyst  at 
Nashua,  NJl.-based  Ulumina- 
ta  tnc.  They  are  concerned 
that  It’S  embarrassing  to  say 
UDC  is  closed  and  that  people 
will  take  the  news  as  meaning 
HP’s  virtualization  efforts  are 
a  fulure." 

Ahaaloflls'nma? 

To  the  contrary,  Haff  said  be 
believes  that  UDC  was  a  pio¬ 
neering  effort  in  utility  com¬ 
puting  technology  when  h  was 
introduced  in  2001  and  that 
HP  continues  to  have  solid 
offerings,  such  as  its  blade 
server  virtualization  systems. 

“UDC  as  an  all-singing  and 
all-dancing  product  was  really 
more  than  people  were  look¬ 
ing  for.  frankly.”  be  said. 


Tom  Retnsel,  president  of 
the  independent  Open  View 
Forum  Intcrnatkmal  user 
group  for  custonwrs  of  HP's 
enterprise  management  soft¬ 
ware.  said  he's  pleased  by  the 
company’s  chai^  in  strategy 
on  UDC  "Modularization  of 
UDC  is  good.”  said  Reinsel, 
who  is  also  CEO  of  Pe{^r- 
weed  Consulting  LLC.  an  Indi¬ 
anapolis-based  company  that 
resells  HFs  software  and  does 
systems  integration  work. 

Reinsel  said  many  cus¬ 
tomers  he  spoke  with  regard¬ 
ed  UDC  as  “a  visioiury  idea" 
but  weren't  inclined  to  'Yip 
out  all  their  hardware  and  put 
in  UDC."  Even  testing  the 
technology  was  expensive,  be 
said,  citing  his  experiences 
working  with  two  customers 


that  had  instaUed  UDC 

The  original  UDC  offering 
included  components  sudi  as 
a  network  operations  center,  a 
tack  of  management  tools  that 
monitored  available  data  cen¬ 
ter  resources,  capacity  plan¬ 
ning  and  optimization  soft¬ 
ware.  and  a  di^  array. 

Van  der  Zweep  said  HP  had 


H  UDC  as  an 
al-singingand 
aJhdancing  product 
was  realy  mote 
than  peo^  were 
looUng  for.  frankly. 


SMDON  HAFF.  ANALYST. 
iLLUMMMTAINC. 


“dozens"  of  UDC  customers, 
who  on  average  spent  between 
$1  milUon  and  $2  million  for 
the  technology. 

But  Haff  said  the  external 
user  base  was  probably  10  to  20 
customers,  witii  the  others 
consisting  of  units  inside  HP. 
“UDC  as  a  qweifle  product 
was  not  successful.*  he  said 
Tt  was  too  big  of  a  chunk 
for  people  to  bite  off  and 
chew."  said  Rich  Ptak,  an  ana¬ 
lyst  at  Ptak.  Nod  &  Associates 
in  Amherst.  Nil 
In  a  report  about  HP's  new 
strategy.  Gartner  Inc.  analysts 
Donna  Scott  and  Tom  Bittman 
said  the  company  “realized  it 
could  txK  make  a  a  positive  re¬ 
turn  on  its  investment  in  UDC 
without  changing  course." 
0497M 
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FR.ANK  HAYES  •  FRANKLY  SPEAKING 

Farmshore  Future 


Kathy  brittain  white  has  a  dream.  She  figures  if 
U.S.  CIOs  will  ship  programming  jobs  to  India  to  save 
money,  maybe  they’ll  ship  them  to  rural  Arkansas  in¬ 
stead.  So  White’s  company,  Rural  Sourcing,  is  setting  up 
outsourcing  centers  in  places  in  the  U.S.  where  the  cost 
of  living  is  low  —  not  as  low  as  in  Bangalore,  but  low  enough  to 
compete  with  the  total  cost  of  offshoring.  White  also  plans  to  get  her 
programmers  up  to  a  high  process-maturity  level  like  those  offshore 
programming  shops  (see  story,  page  14). 

Low  costs,  high  quality  —  and  it’s  onshore.  For  CIOs  thinking 
about  offshoring,  this  really  does  sound  like  a  dream.  For  program¬ 
mers  worrying  about  their  jobs,  welcome  to  your  new  nightmare. 


By  transplanting  the  offshoring  model  to  the 
U^.  boonies.  White  is  wiping  out  most  of  the 
emotionaJ  and  political  arguments  against  IT 
iiutsourcing  —  the  ones  anti-olTsboring  groups 
have  pinned  their  hopes  on.  These  U.S.  jobs 
aren't  being  shipped  overseas  —  they're  being 
shipped  to  the  U.S.  TTre  income  tax  revenue 
from  these  jobs  doesn't  disappear  —  it  just 
comes  from  a  different  state. 

Meanwhile,  on  the  business  end.  White’s  ap* 
proach  hits  the  competition  where  it  ain't,  re¬ 
solving  the  thorniest  offshoring  troubles.  And 
as  a  former  corporate  CIO  herself.  White 
knows  where  all  the  pain  points  are. 

Cross-cultural  confusion?  Transnational  legal 
questions?  Lack  of  direct  communication? 
Time- zone  differences?  TTrose  issues  are  pretty 
much  unavoidable  when  programming  work 
goes  out  of  the  country.  When  the  work  goes 
out  to  the  country,  those  issues  are  pretty  much 
nonexistent. 

These  problems  have  spurred  some  CIOs  to 
bring  IT  jobs  back  from  overseas.  They’re  not 
just  annoyances:  they  jack  up  the 
cost  of  offshoring  and  reduce  the 
chances  of  success  for  an  offshored 
software  project.  So  if  White’s  plan 
works,  it  will  be  a  real  alternative  to 
offshoring  —  an  alternative  that  ac¬ 
tually  gets  rid  of  some  of  the  grief 
offshoring  generates. 

Wait,  it  gets  better,  at  least  if 
you're  a  CIO.  If  White's  Rural 
Sourcing  is  successful,  it  will  ex¬ 
pand  and  spawn  imitators.  This  new 
■‘farmshorirjg"  crowd  will  start  to 
soak  up  the  outsourcing  business 
that  companies  in  India.  Russia. 


China  and  elsewhere  were  expecting  to  grab. 

The  offshore  companies  won’t  take  that  lying 
down.  They'll  beef  up  their  offerings,  improve 
their  quality  and  expand  their  services,  working 
to  make  offshoring  worth  the  trouble. 

That,  in  turn,  will  push  the  farmshorers  to 
improve  their  offerings.  And  the  cycle  will  con¬ 
tinue.  with  the  ante  raised  each  time.  That's  ex¬ 
actly  what  competition  is  supposed  to  create: 
more  choice,  better  deals,  a  buyer’s  market.  And 
it's  a  beautiful  thing  if  you’re  a  customer. 

Of  course,  it’s  not  so  beautiful  if  you’re  a  pro¬ 
grammer  whose  job  is  already  at  risk  of  being 
outsourced.  If  Rural  Sourcing  succeeds,  your  fate 
is  sealed.  Even  if  farmshoring  doesn't  make  send¬ 
ing  your  job  away  attractive  enough,  it  will  start 
a  race  that  will  eventually  make  your  situation 
impossible.  Keeping  most  pure  programming 
jobs  in-house  just  won’t  make  economic  sense. 

So  now  the  clock  is  ticking  for  you  to  make  a 
choice.  You  can  start  working  to  shift  away 
from  pure  programming  to  an  IT  job  that's  a  lot 
harder  to  outsource  —  for  example,  one  that  in¬ 
volves  lots  of  hands-on  work  or 
face  time  with  users. 

Or  you  can  move  up  the  stack  to 
a  job  that  involves  more  bu.sine$$ 
analysis,  so  you’re  writing  the 
specifications  those  farmshorers 
will  be  turning  into  code. 

Or  you  can  get  out  of  IT. 

Or.  just  maybe,  you  can  head  for 
the  country  and  look  for  your  next 
programming  job  there. 

That  may  not  be  what  you’ve 
always  dreamed  of.  But  it's  a  lot 
more  feasible  than  following  your 
job  to  Bangalore.  O  49758 


Starling  the  Day  RIgM 

This  sysadmin's  day  begins  w4lh  a  user's  e-mal 
ing  thal  Ms  user  10  has  been  deleted. ‘And  he  cc'd  a 
lot  of  management  types,*  says  Ish.  Then  the  phone 
rings,  and  fish  Ms  MmseM  In  conference  cel  viilh 
boss  end  ai  those  rnenagers.  Rsh  quicfdy  checks  the 
user's  status.  1  tel  them  the  user  only  \rasn1 

deleted:  he  had  riot  logged  on  in  three  morfihs,*  fish 
says. 'Ihen  he  used  the  wrong  pBSSAonj  five  tirnes. 
disabiinghisuserpiofiie.ir6aclivB4eandre80thjm- 
and  my  boss  says  I  no  longer  need  to  be  on  the  cal.' 
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FRANK  HAYES  ■  FRANKLY  SPEAKING 

Farmshore  Future 

Kathy  brittain  white  has  a  dream,  she  figures  if 
U.S.  CIOs  will  ship  programming  jobs  to  India  to  save 
money,  maybe  they’ll  ship  them  to  rural  Arkansas  in¬ 
stead.  So  White’s  company,  Rural  Sourcing,  is  setting  up 
outsourcing  centers  in  places  in  the  U.S.  where  the  cost 
of  living  is  low  —  not  as  low  as  in  Bangalore,  but  low  enough  to 
compete  with  the  total  cost  of  offshoring.  White  also  plans  to  get  her 
programmers  up  to  a  high  process-maturity  level  like  those  offshore 
programming  shops  (see  story,  page  14). 

Low  costs,  high  quality  —  and  it’s  onshore.  For  CIOs  thinking 
about  ofi&horing,  this  really  does  sound  like  a  dream.  For  program¬ 
mers  worrying  about  their  jobs,  welcome  to  your  new  nightmare. 


By  transplanting  the  offshoring  model  to  the 
U,5.  boonies.  White  is  wiping  out  most  of  the 
emotional  and  political  arguments  against  IT 
outsourcing  ~  the  ones  anti^offshoring  groups 
have  pinned  their  hopes  on.  These  U.S.  jobs 
aren't  being  shipped  overseas  —  they’re  being 
shipped  to  the  U.S.  The  income  tax  revenue 
from  these  fobs  doesn't  disappear  —  it  |ust 
comes  from  a  different  state. 

Meanwhile,  on  the  business  end.  White's  ap* 
proach  hits  the  competition  where  it  aint.  re> 
solving  the  thorniest  offshoring  troubles.  And 
as  a  former  corporate  CIO  herself.  White 
knows  where  all  the  pain  points  are. 

Cross-cultural  coniusioiL’  Transnational  legal 
questions?  Lack  of  direct  communication? 
Time-zone  differences?  Those  issues  are  pretty 
much  unavoidable  when  programming  work 
goes  out  of  the  country.  When  the  work  goes 
out  to  the  country,  those  issues  are  pretty  much 
nonexistent. 

These  problems  have  spurred  some  CIOs  to 
bring  IT  fobs  back  from  overseas.  They're  not 
just  annoyances;  they  jack  up  the 
cost  of  oSsboring  and  reduce  the 
chances  of  success  for  an  offshored 
software  project.  So  if  White’s  plan 
works,  it  will  be  a  real  alternative  to 
of&horing  ^  an  alternative  that  ac¬ 
tually  gets  rid  of  some  of  the  grief 
offshoring  generates. 

Wait,  it  gets  better,  at  least  if 
you're  a  CIO.  If  White's  Rural 
Sourcing  is  successfuL  it  will  ex¬ 
pand  and  spawn  imitators.  This  new 
“farmshorii^  crowd  will  start  to 
soak  up  the  outsourcing  business 
that  companies  in  India,  Russia. 


China  and  elsewhere  were  expecting  to  grab. 

The  ofi&hore  companies  won't  take  that  lying 
down.  They’ll  beef  up  their  offerings,  improve 
their  quality  and  expand  their  services,  working 
to  make  offshoring  worth  the  trouble. 

That,  in  turn,  will  push  the  farmshorers  to 
improve  their  offerings.  And  the  cycle  will  con¬ 
tinue.  with  the  ante  raised  each  time.  That’s  ex¬ 
actly  what  competition  is  supposed  to  create: 
more  choice,  better  deals,  a  buyer’s  market.  And 
it's  a  beautiful  thing  if  you're  a  customer. 

Of  course,  it’s  not  so  beautiful  if  you’re  a  pro¬ 
grammer  whose  job  is  already  at  risk  of  being 
outsourced.  If  Rural  Sotucing  succeeds,  your  fare 
is  sealed.  Even  if  farmshoring  doesn’t  make  send¬ 
ing  your  job  away  attractive  enough,  it  will  start 
a  race  that  will  eventually  make  your  situation 
impossible.  Keepii^  most  pure  programming 
jobs  in-house  just  won't  make  economic  sense. 

So  now  tl^  clock  is  ticking  for  you  to  make  a 
choice.  You  can  start  working  to  shift  away 
from  pure  programming  to  an  IT  job  that’s  a  lot 
harder  to  outsource  —  for  example,  one  that  in¬ 
volves  lots  of  hands-on  work  or 
face  time  with  users. 

Or  you  can  move  up  the  stack  to 
a  job  that  involves  more  business 
analysis,  so  you’re  writing  the 
specifications  those  farmshorers 
will  be  turning  into  code. 

Or  you  can  get  out  of  IT. 

Or,  just  maybe,  you  can  bead  for 
the  country  and  look  for  your  next 
programming  job  there. 

That  may  not  be  what  you’ve 
always  dreamed  of  But  it’s  a  lot 
more  feasible  than  following  yotu- 
job  to  Bangalore.  O  49758 
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Connecting  everything, 
everywhere,  all  the  time. 

Business  and  IT  unife.  HP  IT  Service  AAonogement  (TTS^ 
combines  powerful  HP  OpenView  sofhvore  with  the 
know-how  of  HP  consultants  to  create  on  IT  infrastatcture 
that  allows  you  to  measure  your  return  on  IT.  By  keeping 
business  and  IT  aligned,  IT^  makes  your  organization 
more  responsive,  efficient  and  prepared  for  dtange. 
www.hp.com/info/itsm 
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Hot  Servers  Not 
So  Cool  for  Data 
Center  Managers 


M 


Vendors  leap  ahead  with  dense,  6st  systems,  but 
cooling  issues  make  some  users  reluctant  to  buy 
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BY  PATIMCK  THiaOOeAU 
ATLANTA 

Low-end  server  technology  is 
racing  ahead  of  the  ability  of 
many  data  centers  to  keep  the 
increasingly  dense  and  fut 
systems  cool,  a  problem  chat's 
stopping  some  IT  managers 
from  usii^  the  new  machines. 

Users  may  have  to  invest  in 
new  cooling,  monitorii^ 
and  power  equipment, 
or  even  retrofit  their 
data  centers  or  build  I 

new  ones,  to  accommo-  | 
date  the  servers.  I 

Data  center  managers  ' 


who  gathered  here  last  week 
for  an  AFCOM  conference 
said  server  and  processor  ven¬ 
dors  need  to  shift  from  build¬ 
ing  denser  systems  to  maldng 
ones  that  use  less  power.  They 
also  need  to  set  up  develop¬ 
ment  partnerships  with  ven¬ 
dors  of  cooling  and  power 
products,  conference  atten¬ 
dees  said. 

The  server  makers 
have  “set  their  si^ts  on 
making  things  faster 
and  smaller,  and  that’s 
all  well  and  nice,  but 
Hot  Servers,  page  49 
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ILM  Projects 
Go  Forward, 
But  Slowly 

rr  execs  &ce  internal, 
technical  challenges 

BY  LUCAS  MEAIHAN 

LONS  BEACH.  CALIF. 

IT  manners  at  a  conference 
here  last  week  said  they  fece 
daunting  tasks  in  trying  to  im¬ 


plement  information  life-cyde 
management  approaches,  in¬ 
cluding  classifying  data  based 
on  its  business  value  so  it  can 
be  stored  on  different  types  of 
devices. 

Another  big  challenge  is 
changing  the  attitudes  of  busi¬ 
ness  units  that  are  used  to  get¬ 
ting  premium  storage  for 
every  byte  of  data,  accordii^ 
to  about  10  attendees  at  the  in¬ 
augural  ILM  Solutions  Confer¬ 
ence,  which  was  sponsored  by 
ILM  Projects,  page  16 
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JBossApp  Server  Gets  J2EE 
Compljance,  Draws  Iriterost 


Users  start  to  explore 
open-source  offerings, 
but  concerns  remain 

BV  CAROL  SUWA 

ffiM  and  BEA  Systems  Inc. 
hold  the  lead  in  the  applica¬ 
tion  server  software  matket, 
but  the  recent  release  of  the 
first  J2EE-compliant  open- 
source  offering  from  JBoss 
Inc.  could  spaik  more  corpo¬ 
rate  users  to  check  out  new 
options. 

A  half-dozen  users  of  lead¬ 
ing  commercial  offerings  told 
Cdroputerworfd  that  they're 


beginning  to  explore  open- 
source  alternatives  and  that 
Java  2  Enterprise  EditkHi  com¬ 
pliance  is  important  to  them. 
But  how  soon  or  hmv  serious¬ 
ly  open-source  appUcadon 
servers  might  chdleoge  the 
market  leaders  is  unclear. 

“We  will  eventually  imple¬ 
ment  open-source  servers  to 
help  minimize  costs,  but  our 


IBM  .innou'ices  >! 
WebSpbfrft  upqtjai- 
Ibai  fletfcl  system  utagf.. 
and  guiCKt,  srifi  tiansjtt'an 
WO'»lOdt1s  1ft  a'f'er*-r!  miLlun. 

to  nroimiie  flowntime 


Strategy  is  to  deploy  low-risk 
apps  to  them,'*  said  Gus  Tep- 
per.  vice  president  of  software 
development  in  the  interac¬ 
tive  division  at  First  American 
Title  Insurance  Ca  in  Santa 
Ana,  Calif. 

First  American’s  interactive 
division  currently  uses  BEA's 
WebLogic  plication  server. 
The  unit  is  considering  open- 
source  options  for  *^7611- 
established,  nonchangmg  ap- 
plicatioa$,“  according  to  Tep- 
per.  But  that  will  happen  only 
after  long  and  rigorous 
test  cycles,"  be  added. 

“Common  sense  tells  us  the 
future  of  reliability  and  scala¬ 
bility  comes  from  clusters  of 
commodity-based  hardivare 
/Boss, page  14 
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Capgemini's  cost-savings  plan  for  TXU  Corp.  means  layoffs  for  some  outsourced  IT  workers. 
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Hot  Servers  Not 
So  Cool  for  Data 
Center  Managers 

V'endors  leap  ahead  with  dense,  fast  sj'stems,  but 
ax)lingis.sues  make  some  u.sers  reluctant  to  buy 
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Low-end  server  technology  is 
racing  ahead  of  the  ability  of 
many  data  centers  to  keep  the 
increasingly  dense  and  fast 
systems  cool,  a  problem  that’s 
stopping  some  IT  managers 
from  using  the  new  machines. 

Users  may  have  to  invest  in 

new  cooling,  monitoring  - 

and  power  equipment, 
or  even  retrofit  their 
data  centers  or  build 
new  ones,  to  accommo¬ 
date  the  servers. 

Data  center  manners 


ILM  Projects 
Go  Forward, 
But  Slowly 

IT  execs  face  internal, 
technical  challenges 


rr  managers  at  a  conference 
here  last  week  said  they  face 
daunting  tasks  in  trying  to  im- 
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Mike  Scardina.  chief  financial  officer  of  IT  al  Allstate  Insurance 
says  he's  under  enormous  ores&ure  to  cost  lustrfy  IT  investments 


who  gathered  here  last  week 
for  an  AFCOM  conference 
said  server  and  processor  ven¬ 
dors  need  to  shift  from  build¬ 
ing  denser  systems  to  making 
ones  that  use  less  power.  They 
also  need  to  set  up  develop¬ 
ment  partnerships  with  ven¬ 
dors  of  cooling  and  power 
products,  conference  atten- 
~  dees  said. 

TTie  server  makers 
have  “set  their  sights  on 
making  things  faster 
and  smaller,  and  that's 
all  well  and  nice,  but 
Hot  Servers,  page  49 


plement  information  life-cycle 
management  approaches,  in¬ 
cluding  classifying  data  based 
on  its  business  value  so  it  can 
be  stored  on  different  types  of 
devices. 

Another  big  challenge  is 
changu^  the  attitudes  of  busi¬ 
ness  units  that  are  used  to  get¬ 
ting  premium  storage  for 
every  byte  of  data,  according 
to  about  10  attendees  at  the  in¬ 
augural  ILM  Solutions  Confer¬ 
ence.  which  was  sponsored  by  I 
ILM  Projects,  page  16  j 
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JBossApp  Server  Gets  J2EE 
Compliance,  Draws  Interest 


Users  start  to  explore 
open-source  olFeringji. 
but  concetTLs  remain 


IBM  and  BEA  Systems  Inc. 
hold  the  lead  in  the  applica¬ 
tion  server  software  market, 
but  the  recent  release  of  the 
first  J2E£-compliant  open- 
source  offering  from  JBoss 
Inc.  could  spark  more  corpo¬ 
rate  users  to  check  out  new 
options. 

A  half-dozen  users  of  lead¬ 
ing  commercial  offerings  told 
Computenvor/d  that  they’re 


beginning  to  explore  open- 
source  alternatives  and  that 
Java  2  Enterprise  Edition  com¬ 
pliance  is  important  to  them. 
But  how  soon  or  how  serious¬ 
ly  open-source  application 
servers  might  challenge  the 
market  leaders  is  unclear. 

“We  will  eventually  imple¬ 
ment  open-source  servers  to 
help  minimize  costs,  but  our 


IBM  announces  a 
WebSphere  upgrade 
that  can  deled  system  outages 
and  Quicidy  shift  transaction 
•vorhloads  to  diHetenl  machines 
to  minimue  downtime 


Strategy  is  to  deploy  low-risk 
apps  to  them.”  said  Gus  Top¬ 
per.  vice  president  of  softwaa' 
development  in  the  interac¬ 
tive  division  at  Ftrsi  American 
Tttlc  Insurance  Ca  in  Santa 
Ana,  Calif. 

First  American's  interactive 
division  currently  uses  BEA's 
WebLogic  application  server. 
The  unit  is  considering  open- 
source  options  for  “well- 
established,  nonchanging  ap¬ 
plications.'*  according  to  Top¬ 
per.  But  that  will  happen  only 
after  "very  long  and  rigorous 
test  cycles."  he  added. 

“Common  sense  tells  us  the 
future  of  reliability  and  scala¬ 
bility  comes  from  clusters  of 
commodity-based  hardware 
/Boss,  page  14 


Gin  you  afford  to  change? 


The  time  hos  come,  they  soy,  to  transform  your  ft  But  how? 
On  what  scale?  As  o  technology  company,  HP  creates— as 
rro  Hixmcial  institution  can— opportunities  you  once  thought 
impossible,  and  lets  you  change  without  fear.  HP  consultants 
help  you  identify  the  hardwore,  software  ond  services  you’ll 
need.  Then  HP  Financial  Services  helps  you  finance  global 
migration  and  manage  the  technology  over  its  lifespan,  while 
minimizing  financial  risks.  Once  you  can  afford  change,  you 
might  even  embroce  it.  wvirw.hp.com/info/hpfs 
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On-Demand  Collaboration.  Only  from  Polycom. 
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6  SiaM's  iww  CRM  strategy 

includes  less  monolithic  ap¬ 
plications  and  more  coordi¬ 
nated  services  offerings. 

7  Layoffs  boQin  for  some  TXU 
Corp.  IT  workers  whose 
jobs  were  outsourced  to  a 
C^>gemim  subsidiary  in  July. 

7  CA  buys  NetoQiity  to  boost  its 
presence  in  the  IT  security 
maricet.  But  analysts  see  a  sig¬ 
nificant  overlap  between  the 
two  companies'  products. 

to  IBM*s  app  soever  upgrade  is 

designed  to  cut  application 
downtime  by  shifting  work¬ 
loads  if  a  system  crashes. 

10  The  Navy  and  EDS  revamp 
the  $8.8  billioa  Navy/Marine 
Corps  Intranet  contract  to  in¬ 
clude  clearer  metrics  for  mea¬ 
suring  EDS's  performance. 

12  Companies  laufich  counter¬ 
attacks  against  phishing 
scams  to  stop  customer  con¬ 
fidence  from  waning. 

14  Attachmate  adds  new  tools 

to  help  software  developers 
more  easily  tap  into  main¬ 
frame  data  when  building 
Web-based  applications. 

16  SAPexpands  the  new  Java  and 
business  intelligence  capabili¬ 
ties  built  into  its  NetWeaver 
middleware  and  application 
integration  suite. 

19  The  DHS  isn't  doing  enough 
to  integrate  information 
stored  in  a  dozen  terrorist 
watch-list  databases,  accord¬ 
ing  to  a  new  report. 


32  Seeurity  Manager’s  Journal: 
Security  Review  Uncovers 
Rampant  Virus  Infections. 

Our  new  journal  writer.  “C.!. 
Kelly, "  discovers  that  the  only 
thing  worse  than  having  a  net- 
w<^  infected  by  viruses  is 
having  them  discovered  by  an 
outside  security  assessment 
team  during  an  audit 

MiimBEMENT 

37  The  Numbor  Crunchers.  Un- 

relentii^  cost  pressures  have 
pushed  so-called  CFOs  of  IT 
into  the  spotlight  But  they 
face  huge  challenges  as  they 
try  to  integrate  intangibles 
into  rigid  corporate  account¬ 
ing  systems. 

40  QAA:  Senate  CIO.  |.  Greg 
Hanson's  agenda  ranges  from 
e-mail  to  inaugurations  —  all 
in  the  national  limelight.  And 
talk  about  tough  customers. 

42  Career  Watch.  Making  career 
changes  and  dealing  with 
problem  employees:  top  busi¬ 
ness  schools  for  IT:  the  mor¬ 
phing  CIO;  and  snuU  compa¬ 
nies  take  the  lead  in  IT  hiring. 
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Grazing  the  Nanograss 

h  the  Twhnolagy  section:  A  marriage 
of  materials  science  and  electronics, 
nanograss  may  cool  computers,  improve 
batteries  and  put  a  zoom  lens  in  your  cell 
phone.  At  lefo  a  drx^  of  water  glides  across 
a  nanograss  surface.  Page  30 


TECHN0L06Y 

28  Exgnss  Oalivefy.  Application 
delivery  appliances  combine 
several  tectoologies  to  ensure 
fast,  secure  and  reliable  access 
to  Web-enabled  applications. 


Extendng  Identity 

Also  in  ttie  Technology  section:  Federated 
identity  management  technologies  promise 
cost  savings  and  improved  access  to  networks, 
but  companies  have  been  slow  to  adopt  them 
because  they  have  concerns  about  trtist  and 
interoperability.  Page  25 


OPINIONS 


8  On  the  Mark:  Mark  Hall  de¬ 
scribes  how  eBay  is  trying  to 
simplify  the  integration  of 
companies'  supply  chain  ap¬ 
plications  into  its  Web  site. 

20  Don  Tennant  suspects  that  the 
intolerant  mentality  of  Linux 
enthusiasts  is  hindering  the 
OS’s  adoption  by  perpetuating 
the  myth  of  its  immaturity. 

20  Thornton  A.  May  thinks  CFOs 
of  IT  will  play  a  big  role  in  the 
future,  and  the  data  that  he 
has  collected  shows  why. 

21  Pimm  Fox  bemoans  how  poli¬ 
tics  and  bureaucracy  are  tying 
up  funds  to  support  high¬ 
speed  Internet  and  phone  ser¬ 
vice  in  libraries  and  schools. 

34  Curt  A.  Monash  claims  that 
John  Kerry  has  the  edge  over 
George  W.  Bush  in  issues  that 
affect  IT  professionals. 

43  Bart  Perkins  says  ongoing  in¬ 
frastructure  and  support  costs 
for  new  developments  can 
throw  your  hard-won  budget 
out  of  whack.  Plan  carefully  to 
avoid  nasty  surprises. 

50  Frankly  Speaking:  Frank 
Hayes,  sitting  uncomfortably 
close  to  Mount  St  Helens, 
knows  just  how  PeopleSoft 
customers  feel 
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The  Testing  lime  Bomb 

DEVEU)PIIENT:Sure.youtesttfaef{uictioiul- 
ity  of  nav  code  that  you  add  to  your  soft¬ 
ware,  but  you'd  also  better  make  sure  that 
the  old  stuff  still  works  ri^it  says  columnist 
Linda  Hayes.  O  QuIoUJrii 48647 

CanddatesMBs 

ntwacyConcems 

OPWHM:  Columnist  Jay  Cliiie  says  George  W. 
Bush  or  John  Kerry  could  pkk  up  the  support 
of  iadepeodent-minded  voters  voicing 
dear  siqiport  for  upbolding  privacy  rights 
during  the  tight  against  terrorism. 
OOeklilliA  tmi 

■  TatoAdwntageotlonghom’sLag 

OPCRATIIM  SYSTEMS;  Two  Avanade  coosul- 
tants  outline  how  the  delay  in  Microsoft's 
next  operating  system  offm  you  some  time 
to  prepare  —  in  part  by  turning  to  often- 
underused  features  in  existing  versioiis  of 
Windows.  O  OMbUM 48750 

Howto  EvalualeaSecuriiy  Threat 

SECUItfTV:  Mark  Stevens  of  WafobGuard 
Tedisologies  often  a  cheddist  of  nine  ques¬ 
tions  to  ask  vrtten  gauging  the  seriousness  of 
a  new  threat  O  QMeMMk  4803 

Hands  On:  Storage  Rawanp 

ST(MA6£:  A  senior  systems  admlniscrator 
praises  and  pans  various  backup  products. 
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AT  DEADLINE 


Novel  P9stpones 
OES  Release  Plan 

NovtR  loe.  Slid  lb  Open  Enter- 
priM  Ssfw  soflwire  wM  sMp  in 
Mirusfy.  tm  months  blir  than 
tht  Oacontar  mbna  dab  it  Mt 
lab  Vrinp  {QuichUnk  45763]. 
OES  «■  run  on  tap  of  both  tha 
NolWaro  and  Lima  harnob.  and 
Nova!  saM  tt  daddod  to  watt  for  a 
earviea  pacii  far  tts  SUSE  Lima 
Entarprba  Sarvar  9  oparatino 
tystam  that's  duo  in  January. 


Sun,  Kodak  Agree 
To  Settle  Lawsuit 

Sun  kttoDsystams  tae.  said  llhas 
agruad  to  pay  $92  mtfon  to  soMa 
a  patant  Mrtaoanwnt  lawiutt  fltad 
by  Eastman  Kodak  Co.  in  2002. 
lita  satllofnwd  ama  annoMncod  sii 
days  aftar  a  tadarta  Jury  bi  Now 
Verb  rvlod  Otal  Sun's  Jaua  pro- 
wramniim  tangMsga  Infriniiad  on 
thraa  Kodtai  patonta  ralaMd  to  tho 
uaa  of  obfaet  bdmbopias.  Sun 
has  Icanasd  lha  pataflta  lor  uaa 
wtth  al  Ms  JM-bnod  products. 
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NMCfOSOn  lnOD6S 

Flaw  in  ASP.Net 

Mcroaoll  Corp.  said  fi  touasti- 
pbing  a  rapoilad  ndnarabAy  in 
Ml  ASPJIat  solhmri  that  eouU  al¬ 
low  an  attacfcar  to  bypass  sacurity 
taatoroB  on  a  Wab  aanmr  and  daw 
asnatttaa  oonlanL  N  also  providad 
atsbudionstarmNioalinglhosf- 
tacts  of  tha  wdnsr^Oty.  ASPJIat 
b  lha  lataot  vortaon  of  Wcrosofl's 
AcOmi  Sarmr  Fbgaa  tadnobgy. 


Del  Recals  990k 
Notebook  Adapters 

M  tac.  k  racaBiig  akoul 
9M.OOO  kKirial  adapin  M 
am  aaM  kon  Me  to  2002  hr 
uaa  aiMi  Ik  aalaMi  PCa.  Tka 
ticai  Mkaid  aaaan  lapotto  a< 
avarkaatoia  praMkaa  arito  Ow 
adapkti.  aktrh  kaia  laaiktoCW- 
aa  by  Mpal.  Waakkaaad  Daka 
Baakanka  tot  Iba  adaptor!  peaa 
a  iM  al  irt  ar  atoakteal  ahaak. 
Dal  aaM.  addtop  OM  K  a«  pro- 


For  Siebel,  New  Strategy 
Is  Next  Chapter  in 


Changes  approach 
on  development, 
technical  services 


TO  SOME  USERS  of 

Siebel  Systems  Inc.'s 
customer  relation¬ 
ship  management 
software,  a  "Chapter  2"  strate¬ 
gy  that  the  company  unveiled 
here  last  week  in  an  attempt  to 
revitalize  its  sagging  fortunes 
is  no  big  deal.  But  others  said 
they  were  buoyed  by 
the  new  approach 
that  Siebel  outlined. 

At  the  Siebel  User 
Week  conference 
here,  executives 
from  the  CRM  ven¬ 
dor  said  the  new 
direction  includes 
adding  a  compre¬ 
hensive  set  of  ana¬ 
lytical  applications, 
breaking  its  technol¬ 
ogy  into  components,  provid¬ 
ing  users  with  more  guidance 
on  deployments  and  better 
aligning  the  company’s  ser¬ 
vices  units.  Siebel  said  it  ulti¬ 
mately  wants  to  move  beyond 
being  seen  as  just  a  technolo¬ 
gy  vendor  and  become  more 
of  a  partner  to  its  users. 

'Tlie  first  generation  of 
CRM  was  about  a  product." 
Siebel  CEO ).  Michael  Lawrie 
said.  "It  was  about  the  tech¬ 
nology.  And  the  second  gener¬ 
ation.  Chapter  2.  is  about  val¬ 
ue."  He  added  that  the  compa¬ 
ny’s  new  strategy  is  built 
around  the  concept  of  "help¬ 
ing  the  customer  get  closer 
with  their  customer,"  Instead 
of  focusing  on  CRM  as  a  tech¬ 
nology. 

ASiopFMwanj 

Siebel’s  sales  have  declined 
sharply  over  the  past  few 
years,  partly  as  a  result  of 
sdffer  competition  from  high- 
end  rivals  such  as  SAP  AG  and 
smaller  vendors  such  as  Sales- 
force.com  Inc.  But  for  several 
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users  who  were  interviewed  at 
last  week's  conference,  the 
changes  made  by  Lawrie  since 
he  took  over  the  reins  from 
co-founder  Thomas  Siebel  in 
May  (Quicklink  46697]  are  a 
big  step  forward. 

There  is  a  clarity  of  vision 
and  strategy  there  now  that 
was  not  present  before,"  said 
Richard  Napier,  business  de¬ 
velopment  manager  at  InFact 
Group,  a  software  consulting 
firm  and  systems  integrator 
in  Plano.  'Texas.  InFact  uses 
Siebel's  hosted  CRM  On- 

Demand  service  to 
support  its  iDlerrtal 
operations  and  does 
Slebel-rebtcd  con¬ 
sulting. 

Napier  said  that 
SiebcTs  global  ser¬ 
vices  organization 
has  offered  more 
than  100  types  of  ed¬ 
ucational  or  consult¬ 
ing  services,  and  no 
one  at  the  software 
vendor  appeared  to  be  track¬ 
ing  which  particular  services 
were  being  proposed  to  which 
customers.  Now  Siebel  seems 


to  be  getting  more  of  a  grip  on 
"how  a  software  house  should 
deliver  services,"  he  said. 

"I  still  don't  think  they’ll  be 
100%  there,  but  they’re  on  the 
right  track,"  said  Roger  Mor¬ 
rell.  vice  president  of  IT  at 
Infonet  Services  Corp.,  an  El 
Segundo,  Calil-based  network 
services  firm  that  runs  Siebel 
75  to  support  its  order  entry 


and  management  processes. 
“I’m  more  comfortable  Iwith 
Siebel's  direction]  than  I  was  a 
year  ago."  Morrell  added. 

To  users  at  Pitney  Bowes 
Inc.,  though.  Chapter  2  isn't  so 
new.  “This  is  more  evolution¬ 
ary  than  revolutionary."  said 
Mark  Davis,  vice  president  of 
customer  service  at  Pitney 
Bowes.  The  Stamford,  Conn.- 
based  maker  of  mailing  and 
document  management  sys¬ 
tems  runs  Siebel’s  customer 
service,  call  center  and  sales 
force  automation  software. 

Kathleen  Banashak.  director 
of  customer  service  opera¬ 
tions  at  Pitney  Bowes,  added 
that  Siebel  had  already  proved 
itself  a  worthwhile  partner 
and  developed  a  strong  rela¬ 
tionship  with  people  inside 
Pitney  Bowes  before  the  com¬ 
pany  even  decided  to  buy  the 
applications. 

But  Ian  Jacobs,  an  analyst  at 
Current  Analysis  Inc  in  Ster¬ 
ling.  Va.,  said  the  plans  out¬ 
lined  by  Siebel  are  a  definite 
change  in  direction.  Jacobs 
said  the  company  essentially 
issued  a  mea  culpa,  acknowl¬ 
edging  that  for  many  users, 
its  portfolio  of  applications  is 
either  “too  complicated  to  im¬ 
plement,  too  complicated  to 
use  or  too  far  beyond  what 
their  actual  needs  are." 
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Siebel  Expands  Hs  Business  Intelligence  Apps 


LOS  ANeCLES 

in  addition  to  its  other  Charter  2 
initiatives.  Siebel  is  roHing  out  a 
more  extensive  set  of  business 
imettgence  offtaings. 

At  a  Business  kiteigence 
Sunanit  that  MB  heM  concur¬ 
rently  with  Siebel  User  Week, 
the  softave  veridor  announced 
the  rdease  of  20  anatyticat  ap- 
plicatioris.  The  oHerings  include 
a  tool  that  wf  dekver  Mushy- 
specific  customer  analysis  func- 
tiofs  spanning  cal  cenfer.  sales 
and  martfettog  operations.  AM 
beino  added  ia  francial  analysis 
soAvore  for  optimizing  tfto  use 
of  corporate  aBaats.8loolto 
halp  Mtthata  aupplan  and 
itnnlhtapnidiifllnriniiinrtio 


Siebdsaidthebusinessintei- 
ligerKX  applicatioris  wl  use  data 
integrallonlechnologyfromln- 
lormteica  Corp.  to  puN  in  data 
from  muibpte  sysM  and  deliv¬ 
er  it  jnied  time  to  end  users. 

LanyBarbetteoeneralman- 
ager  of  Siebel  analytics,  said  the 
new  software  wi  M  IT  man¬ 
agers  "democraticaly’ dsMbule 
mformatlon  ttvDughoiA  thee 
cornpanies.  Foretompte.  cal 
center  workars  mighi  not  need 
to  run  complex  raports  but  couU 
use  the  buBmeas  IntoBoence 
toote  to  quicMy  aee  whettier  a 
calar  la  a  vakM  cuatomar  and 
than  beat  him  acoofdlnaly. 

Thacuatofnaranaitteeaort- 
wara  aoiaM  "coii*  sted  Debra 
Ooniayaf.chieltodwflieg)iolfi- 


cer  at  CafsOeecLcom  Inc.,  an 
onine  a^omobie  r^ailer  in 
Sherman  Otec.  Calf,  that  uses 
SttbeTs  cd  center  and  sales 
applications. 

The  analysis  toot  could  make 
HeesiertodeliverreaHimeinfor- 
matton  to  vehde  matBis  texxjl 
the  configualions  that  shoppers 
are  seeking  when  th^  order  cars 
online.  Domeyer  said,  addteg 
that  such  a  capafaKy  could  help 
the  manuiacturars  toiprove  their 
Inveritory  managainanl  proceas' 
ai.  She  said  the  aollwere  could 
ateomakBlpoaafctetorCifs- 
DttadcomstelfBretoiapidyan- 
alyzethenaulteotistesprano- 
ttons  end  MMatiarteblae  such 
eaioMneltactoa. 
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Outsourcing  Vendor  Starts  to 
Cut  IT  Workers  at  Texas  Utility 


Cap^mini  plans 
layote,  shift  of  50 
apps  jobs  to  India 


BV  THOMAS  HOFFMAN 

Capgemini  Energy  LP,  which 
was  formed  in  July  to  manage 
IT  and  back-olTice  operations 
for  energy  conglomerate  TXU 
Corp.,  this  month  plans  to 
start  dismissing  alMut  230  for¬ 
mer  TXU  workers,  including 
50  to  75  technology  staffers. 

The  cuts  follow  the  Oct.  1 
expiration  of  a  three-month 
job  security  guarantee  for  the 
TXU  employees  and  include 
a  mix  of  layoffs  and  offshore 
moves.  For  example,  Capgemi- 
ni  Energy  CEO  Pryor  said 
last  week  that  about  SO  appli- 
cadoD  development  and  main¬ 
tenance  posidons  are  being 
shifted  to  a  facility  in  Banga¬ 
lore,  India,  that’s  owned  by 
parent  company  Capgemini. 

Pryor  added  that  Dallas- 
based  Capgemini  Energy  plans 
a  second  wave  of  downsizing 
at  TXU  in  February.  Although 
Pryor  declined  to  say  how 
many  positions  might  be  af¬ 
fected  at  that  time,  he  said 
some  IT  infrastructure  jobs 
will  eventually  be  transferred 
to  Bangalore  and  to  a  facility 
in  Krakow,  Poland. 

Stashing  Costs 

The  layoffs  and  offshore  trans¬ 
fers  are  part  of  Capgemini  En¬ 
ergy's  cost -savings  strategy  for 
TXU.  which  is  also  based  in 
Dallas.  Pryor  said  that  before 
TXU  turned  to  the  outsourc¬ 
ing  vendor  to  provide  IT.  call 
center  and  business  services,  it 
was  spending  more  than  $1  bil¬ 
lion  a  year  on  sales,  general 
and  administrative  functions. 

‘nrhere’s  a  recognition  that 
their  costs  were  just  too  hif^.” 
Pryor  said.  The  operations 
that  were  outsourced  account 
for  $500  million  of  TXITs 
SG&A  expenses,  he  added 
On  Sept.  1,  Capgemini  Energy 
submitted  a  plan  to  TXU 
spelling  out  steps  H  would 


take  to  reduce  the  costs  by 
30%  over  the  next  16  months 
while  improving  IT  and  busi¬ 
ness-process  service  levels. 

As  pan  of  the  outsourcing 
agreement,  Capgemini  Energy 
suppons  the  bulk  of  TXU’s  IT 
operations,  including  its  IT  in¬ 
frastructure  and  its  desktop 
computing,  application  devel¬ 
opment  and  software  mainte¬ 
nance  activities. 

Pr)'or  said  that  of  the  2,700 
TXU  employees  who  trans¬ 
ferred  to  Capgemini  Energy 
as  part  of  the  10-year.  $3.5  bil¬ 
lion  outsourcing  agreement, 
roughly  800  work  in  IT-related 


positions.  The  first  round  of 
layoffs,  which  Capgemini  ex¬ 
pects  to  complete  early  next 
month,  could  reduce  the  IT 
workforce  by  as  much  as  9%. 

Rick  Nicholson,  an  analyst 
at  Meta  Group  Inc.,  noted  that 
the  TXU/Capgemini  contract 
is  complex  and  was  pulled  to¬ 
gether  in  a  relatively  short  pe¬ 
riod  of  time  ~  in  only  about 
60  days,  from  w^t  he  was 
told.  "I  bet  there  are  a  number 
of  issues  that  will  pop  up  in 
the  fust  year  of  the  deal  that 
they*!!  have  to  work  through,” 
he  said. 

Nicholson  also  questioned 


•-  il  MCl'ker;.  anfl 

bach  yftitc  emoJoyses  face 
a  seco^id  round  ol  downsizing 
in  February,  said  Capgemini 


whether  the  plan  to  transfer 
jobs  that  support  the  regulated 
side  of  TXU's  business  out  of 
state  could  be  challenged  by 
the  Public  Utility  Commission 
of  Texas  or  by  state  legislators. 

But  Terry  Hadley,  a  spokes¬ 


man  for  the  Austin-based  utili¬ 
ty  commission,  said  there  are 
no  existing  laws  that  would 
prevent  Capgemini  Energy  or 
TXU  from  movir^  any  jobs 
out  of  the  state. 

Trey  Trainor.  chief  of  staff 
for  Stale  Rep.  Phil  King,  the 
chairman  of  the  Texas  Legisla¬ 
ture's  committee  on  regulated 
industries,  said  that  the  panel 
doesn't  have  any  hearings 
scheduled  and  that  the  legisla¬ 
ture  isn't  scheduled  to  meet 
again  until  January. 

Capgemini  Energy  is  negoti¬ 
ating  with  several  other  com¬ 
panies  and  hopes  to  sign  at 
least  one  more  contract  by 
next  spring.  Pryor  said.  The 
firm  b  ‘‘waiting  to  see  how 
adding  other  clients  affects 
us*  on  staffing  before  finaliz¬ 
ing  plaits  for  the  next  round  of 
cuts  at  TXU.  he  said.  O  499SB 


CABuysNetegrityto 
Expand  in  IT  &cuiity 


Product  overlap 
issues  could  affect 
users,  analysts  say 


BV  aAlKUMAM  VUAVAN 

Computer  Associates  Interna¬ 
tional  Inc.  last  week  said  it 
plans  to  buy  Netegrity  Inc.  in 
an  effort  to  boost  its  share  of 
the  maricct  for  identity  and  ac¬ 
cess  management  software. 
But  the  deal  may  result  in 
short-term  uncertainty  for 
users  because  of  what  analysts 
described  as  a  significant 
overlap  between  the  tools  sold 
by  CA  and  Netegrity. 

CA  said  it  has  agreed  to  pay 
$430  million  in  cash  to  acquire 
Waltham.  Mass.-based  Net¬ 
egrity.  which  offers  Web  ac¬ 
cess  control  and  end-user  au¬ 
thorization  software.  TIk  ad¬ 
dition  of  Netegrity  will  help 
CA  expand  its  eTIrust  portfolio 
of  n*  security  products,  said 
interim  CEO  Kenneth  Cron 
during  a  press  conference. 

But  users  and  analysts  react¬ 
ed  more  cautiously. 

A  “rather  complete  overlap" 
in  products  could  mean  major 
problems  for  users,  said  Jon¬ 


athan  Penn,  an  analyst  at  For¬ 
rester  Research  Inc.  For  in¬ 
stance,  Netegrity’s  SiteMinder 
software  b  a  direct  rival  to 
CA’s  eThist  access  manage¬ 
ment  suite,  Penn  said.  Similar¬ 
ly.  the  application  provision¬ 
ing  technology  that  Netegrity 
acquired  as  part  of  its  pur¬ 
chase  of  Business  Layers  Inc. 
last  December  overlaps  with 
CA's  provisioning  software, 
according  to  Penn. 

“I  think  there  b  going  to  be 
a  lot  of  near-term  confusion  as 
to  the  future  of  some  of  these 
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products.”  he  said. 

Giuseppe  Cimmino,  direc¬ 
tor  of  corporate  technology  at 
Discovery  Communications 
Inc.  in  New  York,  said  it's  still 
too  early  to  say  bow  the  acqui¬ 
sition  will  affect  him  and  oth¬ 
er  users.  Hb  company,  which 
owns  the  Discovery  Channel 
and  other  cable  TV  program¬ 
ming  outlets,  uses  SiteMinder 
and  the  eProvbioning  soft¬ 
ware  that  Netegrity  inherited 
from  Business  Layers. 

“Our  main  concerns  will  be 
which  products  survive  and 
whether  there  are  any  impaas 
to  Net^rity's  execution  of  the 
continued  integration  and  en¬ 
hancement  of  the  eProvUion- 
ing  producL”  Cimmino  said. 

A  user  at  a  large  financial 
services  firm  expressed  con¬ 
cern  that  Islandia.  N.Y.-based 
CA’s  purchase  of  Netegrity 
could  result  in  higher  prices 
for  produas  such  as  the  Iden- 
lityMindcr  software  that  hb 
company  uses. 

‘'Unfortunately,  my  opinion 
b  that  thb  b  a  very  bad  move 
for  a  pretty  decent  product.” 
said  ^e  user,  who  ^ed  not  to 
be  identified.  He  added  that 
CA  “consbtemly  overcharges” 
for  its  software  and  said  he 
also  expects  technical  support 
costs  to  "rise  dramatically" 
from  what  Netegrity  currently 
charges. 


It  can  take  years  for  CA  to 
fully  integrate  acquired  soft¬ 
ware  into  its  tightly  bundled 
product  suites,  said  |on  Oltsik. 
an  analyst  at  Enterprise  Strate¬ 
gy  Group  Inc.  in  Milford. 

Mass.  For  Instance,  five  years 
after  CA  bought  Platinum 
Technology  Iik:..  integration 
of  the  two  companies'  prod¬ 
ucts  remains  “a  work  in 
progress,”  Oltsik  said.  ”1 
expect  the  same  between 
Netegrity  and  cTVust,  so 
we're  likely  to  sec  nothing 
but  sUdewarc  for  a  while.” 

Toby  Weiss,  senior  vice 
president  of  eTVust  product 
management  at  CA,  said  the 
company  will  release  a  prod¬ 
uct  integration  road  map  after 
the  acqubition  b  completed, 
which  b  expected  by  year’s 
end.  In  response  to  the  con¬ 
cerns  about  overlapping  prod¬ 
ucts,  Webs  insisted  that  there 
arc  only  superficial  similari¬ 
ties  between  Netegrity’s  soft¬ 
ware  and  CA's  tools. 

Netegrity’s  strategic  focus 
on  Web  services  security  tech¬ 
nology  complements  CA's 
strengths  in  client/utrver  ac¬ 
cess  control  and  directory 
management.  Weiss  said.  ”1 
think  thb  merger  ukimatcly 
gives  users  the  deepest  and 
broadest  set  of  identity  man¬ 
agement  products,"  he  added. 
0499S9 
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Novell  Postpones 
OES  Release  Plan 

Novell  Inc.  said  its  Open  Enter¬ 
prise  Server  software  will  ship  in 
February,  two  months  later  than 
the  December  release  date  it  set 
last  spring  [QuichUnk  45763]. 

OES  will  run  on  top  of  both  the 
NetWare  and  Unui  kernels,  and 
Novell  said  H  decided  to  wait  for  a 
service  pack  for  its  SUSE  Unut 
Enterprise  Server  9  operating 
system  that's  due  in  January. 

Sun,  Kodak  Agree 
To  Settle  Lawsuit 

Sun  Microsyslems  Inc.  satd  H  has 
agreed  to  pay  $92  million  to  settle 
a  patent  infringement  iawsuH  filed 
by  Eastman  Kodak  Co.  in  2002. 

The  settlement  was  announced  six  , 
days  after  a  federal  jury  in  New 
Vd^  ruled  that  Sun's  Java  pro¬ 
gramming  language  infringed  on 
three  Kodak  patents  reiated  to  the  | 
use  of  obiect  lochnologies.  Sun  , 
has  licensed  the  patents  for  use  ' 
writh  all  its  Java-based  products.  \ 

Microsoft  Probes 
FlawinASP.Net 

Mlcnsoft  Corp.  said  it‘s  investi- 
gating  a  reported  vulnerablBty  in 
its  ASP.Net  software  that  could  al-  ' 
low  an  attacker  to  bypass  security 
features  on  a  Web  server  end  view 
sensitive  content  N  also  provided 
instrvctiortt  for  mitigating  the  ef¬ 
fects  of  the  vulnerabilfty.  ASP.Net 
is  the  latest  version  of  Microsoft's 
Active  Server  Pages  technology. 

Dell  Recalls  990k 
Notebook  Adapters 

OeN  Inc.  is  recaKng  about 
990,000  efectricai  adapters  that 
were  sold  from  1998  to  2002  for 
use  with  its  notebook  PCs.  The 
recall  foNowad  seven  reports  of 
overheatmg  problems  with  the 
adapters,  which  were  made  in  Chi-  : 
na  by  Taipei.  Taiwan  baaed  Delta 
Efectnmies  Inc.  The  adapters  pose 
a  rirt  of  Bfe  or  slectrlc^  shock. 

Dell  said.  adcSng  that  H  wH  pro¬ 
vide  free  replacemsfTts. 


For  Siebel,  New 
Is  Next  Chapter 


Strategy 
in  CRM 


t'hanges  approach 
on  dcN'cIopmcnt, 
technical  services 


To  SOMt  L’.SfRS  of 

Siebel  Systems  Inc.’s 
customer  relation¬ 
ship  management 
software,  a  “Chapter  2'’  strate¬ 
gy  that  the  company  unveiled 


users  who  were  interviewed  at 
last  week's  conference,  the 
changes  made  by  tjwrie  since 
he  look  over  the  reins  from 
co-founder  Thomas  Siebel  in 
May  [QuickLink  46697!  are  a 
big  step  forward. 

■‘There  is  a  clarity  of  vision 
and  strategy  there  now  that 
was  not  present  before."  said 
Richard  Napier,  business  de¬ 
velopment  manager  at  InFaci 
Group,  a  software  consulting 


here  la.st  week  in  an  attempt  to  firm  and  systems  integrator 
ri-vitalize  its  sagging  fortunes  in  Plano.  Texas.  InFact  uses 


is  no  big  deal.  Hut  others  said 
they  were  buoyed  by 
the  new  approach 
(hat  SicK'J  outlined. 

At  the  Siebel  User 
Week  conference 
hero,  executives 
from  the  CRM  ven¬ 
dor  said  the  new 
direction  includes 
adding  a  compre¬ 
hensive  set  of  ana¬ 
lytical  applications, 
breaking  its  tcchnol- 
i^y  into  components,  provid¬ 
ing  users  with  more  guidance 
on  deployments  and  better 
aligning  the  company's  ser¬ 
vices  units.  Siebel  said  it  ulti¬ 
mately  wants  to  move  beyond 
being  .seen  as  just  a  technolo¬ 
gy  vendor  and  become  more 
of  a  partner  to  its  users. 

“The  first  generation  of 
CRM  wa.s  about  a  produci." 
Siebel  CEO  I.  Michael  Lawrie 
said,  'it  wa.s  about  the  tech¬ 
nology.  And  the  second  gener¬ 
ation,  Chapter  2.  is  about  val¬ 
ue."  He  added  that  the  compa¬ 
ny's  new  straicg)'  is  built 
around  the  cx>nccpt  of  “help¬ 
ing  the  customer  get  closer 
with  their  customer.’*  instead 
of  focusing  on  CRM  as  a  tech¬ 
nology. 

A  Step  Forward 

Sicbcl's  sales  have  declined 
sharply  over  the  past  few 
years,  partly  as  a  result  of 
stifler  competition  from  high- 
end  rivals  such  as  SAP  AG  and  , 
smaller  vendors  such  as  Sales-  I 
force-com  Inc  But  for  several 
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J  MICHAEL  LAWRIE 
says  "Chaotef  2 
ts  about  value. 


Sicbcl's  httstcJ  CRM  On- 

Demand  service  to 
support  its  internal 
operations  and  docs 
Sicbtil-relaicd  con¬ 
sulting. 

Napier  said  that 
Sicbcl's  global  ser¬ 
vices  organization 
has  offered  more 
than  100  types  of  ed¬ 
ucational  or  consult¬ 
ing  services,  and  no 
one  at  the  software 
vendor  appeared  to  be  track¬ 
ing  which  particular  services 
were  being  proposed  to  which 
customers.  Now  Siebel  seems 


•  OKet  useri  a  less  ntonoMbic 
set  ol  CRM  aopitcalions  to 
breaii  itie  technology  inio  more 
fl»ge5ltt)iu  pieces 

•  Cirote  a  cusluinei  tiluep'mt 
pfograni  to  npip  gui<jf  usv's  an 
impiemisitationi. 

«  Streamline  its  lai  flung 
cuslomei  seivicr  uroani^alions 
M  use’s  can  mure  easily  iden¬ 
tify  i*n»jie  to  i}0  fill  help 

•  Wfirli  with  partne’s  to 
wtiie  cuilom  loflware  lo' 
companies  that  have  umau^ 
business  Teoiitrcmirnts 


to  be  gening  more  of  a  grip  on 
“how  a  software  house  should 
deliver  services,'*  he  said. 

“I  still  don’t  think  they'll  be 
100%  there,  but  they’re  on  the 
right  track.”  said  Roger  Mor¬ 
rell.  vice  president  of  IT  at 
Infonei  Services  Corp.,  .in  El 
Segundo,  Calif.-based  network 
services  firm  that  runs  Siebel 
7.5  to  support  its  order  entry 


I  and  management  proccs.ses. 

I  ‘Tm  more  comfortable  [with 
;  Sicbet’s  direction)  than  1  was  a 
year  ago.”  Morrell  added. 

To  users  at  Pitney  Bowes 
Inc.,  though.  Chapter  2  isn’t  so 
new.  "TTiis  is  more  evolution¬ 
ary  than  revolutionary."  said 
Mark  Davis,  vice  president  of 
customer  service  at  Mtncy 
Bowes.  The  .Stamford,  Conn.- 
based  maker  of  mailing  and 
document  management  sys¬ 
tems  runs  Sicbcl's  customer 
.service,  call  center  and  sales 
force  automation  software. 

Kathleen  Banashak.  director 
of  customer  service  opera¬ 
tions  at  Pitney  Bowes,  added 
that  Siebel  had  already  proved 
itself  a  worthwhile  partner 
and  developed  a  strong  rela¬ 
tionship  with  people  inside 
Pitney  Bowes  before  the  com¬ 
pany  even  decided  to  buy  the 
applications. 

But  Ian  Jacobs,  an  analyst  at 
Current  Analysis  Inc.  in  Ster¬ 
ling,  Va..  said  the  plans  out¬ 
lined  by  Siebel  arc  a  definite 
change  in  direction.  Jacobs 
said  the  company  essentially 
issued  a  mea  culpa,  acknowl¬ 
edging  that  for  many  users, 
its  portfolio  of  applications  is 
either  “too  complicated  to  im¬ 
plement.  loo  complicated  to 
use  or  too  far  beyond  what 
their  actual  needs  arc." 
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Siebel  Expands  its  Business  Intelligence  Apps 


In  addition  to  its  other  Chapter  2 
inilialives.  Sfdiel  is  rolling  out  a 
more  extensive  set  ot  business 
inielligerKe  oifenngs. 

At  a  Business  Intelligence 
Summit  that  was  held  concur¬ 
rently  with  Siebel  User  Week, 
the  softw^  vendor  announced 
the  release  of  20  anatylfcal  ap¬ 
plications.  The  offerings  include 
a  tool  that  will  delive  industry- 
specific  customer  analysis  func¬ 
tions  spanning  call  center,  sales 
and  marketing  operations.  Also 
being  added  6  financial  analysis 
software  for  oplimizirtg  the  use 
of  corporate  assets,  a  tool  to 
help  evaluate  suppliers  and 
another  product  iot  measuring 
employee  performance. 


Siebel  said  the  business  mlel- 
ligence  applications  will  use  data 
integration  technology  from  In- 
formatica  Corp.  to  pull  in  data 
from  multiple  systems  and  deliv¬ 
er  it  in  real  time  to  end  users. 

Larry  Barbetta.  general  man¬ 
ager  of  Siebel  analytics,  said  the 
new  software  will  let  ff  man¬ 
agers  'democratically'  distribute 
information  throughout  their 
companies.  For  example,  call 
center  workers  might  not  need 
to  run  complex  reports  but  could 
use  the  business  inieliigence 
tools  (0  quicMy  see  whether  a 
caller  is  a  valu^  customer  and 
then  treat  him  accorthngly. 

The  customer  analysis  soft¬ 
ware  sounds ‘cod.’ ^  Debra 
Domeyer.  chief  technofogy  offi¬ 


cer  at  CarsOirect.com  Inc.,  an 
online  automobile  retailer  in 
Sherman  Oaks.  Calif  .,  that  uses 
Siebel's  call  center  and  sales 
applications. 

The  analysis  tool  could  make 
it  easier  to  deiive  real-time  infor¬ 
mation  to  vehicle  makers  about 
the  configurations  that  shoppers 
are  seeking  when  they  order  cars 
online.  Domeyer  said,  adding 
that  such  a  capability  could  help 
the  manufacturers  improve  thor 
inventory  management  process¬ 
es.  She  said  the  software  could 
also  make  it  possible  for  Cars- 
DirecLcom  staffers  to  rapidly  an¬ 
alyze  the  results  of  sales  promo¬ 
tions  and  assess  variables  such 
as  regional  factors. 

•ItofcLSongin 
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Outsourcing  Vendor  Starts  to 
Cut  IT  Workers  at  Texas  Utility 


(.apgemini  plans 
la\offs,  sliift  of  50 
apps  jobs  to  India 

ev  THOMAS  HOFFMAN 

Capgemini  Energy  LP,  which 
was  formed  in  July  to  manage 
IT  and  back-office  operations 
for  eneigy  conglomerate  TXU 
Corp..  this  month  plans  to 
start  dismissing  about  230  for¬ 
mer  TXU  workers,  including 
50  to  75  technology  staffers. 

The  cuts  follow  the  Oct.  1 
expiration  of  a  three-month 
job  security  guarantee  for  the 
TXU  employees  and  include 
a  mix  of  layoffs  and  offshore 
moves.  For  example.  Capgemi¬ 
ni  Energy  CEO  Bob  Pryor  said 
last  w*eck  that  about  SO  appli¬ 
cation  development  and  main¬ 
tenance  positions  arc  being 
shifted  to  a  facility  in  Banga¬ 
lore.  India,  that's  owmed  by 
parent  company  Capgemini. 

Pryor  added  that  Dallas- 
based  Capgemini  Energy  plans 
a  second  wave  of  downsizing 
at  TXU  in  February.  Although 
Pryor  declined  to  say  how 
many  positions  might  be  af¬ 
fected  at  that  lime,  he  said 
some  IT  infrastructure  jobs 
will  eventually  be  transferred 
to  Bangalore  and  to  a  facility 
in  Krakow,  Poland. 

Slashing  Costs 

The  layoffs  and  offshore  trans¬ 
fers  are  part  of  Capgemini  En¬ 
ergy's  cost-savings  strategy  for 
TXU.  which  is  also  based  in 
Dallas.  Pryor  said  that  before 
TXU  turned  to  the  outsourc¬ 
ing  vendor  to  provide  IT.  call 
center  and  business  services,  it 
was  spending  more  than  $1  bil¬ 
lion  a  year  on  sales,  general 
and  administrative  functions. 

"There's  a  recognition  that 
their  costs  were  just  too  high," 
Pryor  said.  The  operations 
that  were  outsourced  aca>unt 
for  S500  million  of  TXU's 
SG&A  expenses,  he  added. 

On  Sept.  1.  Capgemini  Energy 
submitted  a  plan  to  TXU 
spelling  out  steps  it  would 


take  to  reduce  the  costs  by 
.Wai  over  the  next  16  months 
while  improving  IT  and  busi¬ 
ness-process  scr\’ice  levels. 

As  part  of  the  outsourcing 
agreement.  Capgemini  Energy 
supports  the  bulk  of  TXU's  IT 
operations,  including  its  IT  in¬ 
frastructure  and  its  desktop 
computing,  application  devel¬ 
opment  and  software  mainte¬ 
nance  activities. 

Pryor  said  that  of  the  2,700 
TXU  employees  who  trans¬ 
ferred  to  Capgemini  Encrg>’ 
as  part  of  the  10-ycar.  S3J  bil¬ 
lion  outsourcing  agreement, 
roughly  800  woik  in  IT-rclatcd 


Pnxluct  overlap 
issues  could  affect 
users,  analysts  say 

BV  JAIKUMAR  VUAVAN 

Computer  Associates  Interna¬ 
tional  Inc.  last  week  said  it 
plans  to  buy  Nctcgrity  Inc.  in 
an  effort  to  boost  its  share  of 
the  market  for  identity  and  ac¬ 
cess  management  software. 
But  the  deal  may  result  in 
short-term  uncertainty  for 
users  because  of  what  analysts 
described  as  a  significant 
overlap  between  the  tools  sold 
by  CA  and  Nctcgrity. 

CA  said  it  has  agreed  icxpay 
S430  million  in  cash  to  acquire 
Waltham.  Mass. -based  Nct- 
egrity.  which  offers  Web  ac¬ 
cess  control  and  end-user  au¬ 
thorization  software.  The  ad¬ 
dition  of  Nctcgrity  will  help 
CA  expand  itseTrusi  portfolio 
of  IT  security  products,  said 
interim  CEO  Kenneth  Cron 
during  a  press  conference. 

But  users  and  analysis  react¬ 
ed  more  cautiously. 

A  “rather  complete  overlap” 
in  products  could  mean  major 
problems  for  users,  said  |on- 


po.sitions.  The  first  round  of 
layoffs,  which  Capgemini  ex¬ 
pects  to  ct>mplctc  early  next 
month,  could  reduce  the  IT 
workforce  by  as  much  as 
Rick  Nicholson,  an  analyst 
at  Mela  Group  Inc.,  noted  that 
j  the  TXU'CapgemIni  contract 
I  is  complex  and  was  pulled  10- 
I  get  her  in  a  relatively  short  pc- 
I  riod  of  time  —  in  only  about 
;  60  days,  from  what  he  was 
j  told.  “I  bet  then*  are  a  number 
of  issues  that  will  pop  up  in 
I  the  first  year  of  the  deal  that 
I  they'll  have  to  work  through," 

I  he  said. 

'  Nicholson  also  questioned 


athan  Penn,  an  analyst  at  For¬ 
rester  Research  Inc.  For  In¬ 
stance.  Netegrity's  SiicMinder 
software  is  a  direct  rival  to 
CA's  cTrust  access  manage¬ 
ment  suite,  Penn  said.  Similar¬ 
ly.  the  application  provision¬ 
ing  technology  that  Netegriiy 
acquiasi  as  part  of  its  pur¬ 
chase  of  Business  Layers  Inc. 
last  December  overlaps  with 
CA's  provisioning  software, 
according  to  Penn. 

“I  think  there  is  going  to  be 
.1  lot  of  near-term  confusion  as 
to  the  future  of  some  of  these 


AT  A  OLAMCE 

What  Nelegnty  tinn^  to 
th£  table  ioi  CA 
■  A  variety  0*  Web  access  con 
t'ol  authonraiion  and  aoplica- 
tion  pi ovtr, toning  loots 

•  About  650  customers  in¬ 
cluding  more  than  50  Fortune 
too  comcanifs 

Rifvenue  ol  S78  4  millton  m 
2003  and  S47  4  million  m  the 
fir>t  hall  of  this  year 

'  A  distribution  netwiirK  that 
consists  of  more  than  300 
chanrifl  partners 


I  whether  the  plan  to  transfer 
jobs  that  support  the  regulated 
j  side  ofTXU's  business  out  of 
state  could  be  challenged  by 
I  the  Public  Utility  Commission 
'  ofTcxas  or  by  state  legislators. 
But  Terr)-  Hadley,  a  spokes- 


pritdocts.”  he  said. 

Gtu-seppe  Clmmino.  direc¬ 
tor  of  corporate  technology  at 
Discovery  Communications 
Inc.  in  New  York,  said  It's  still 
too  early  to  say  how  the  acqui¬ 
sition  will  affect  him  and  oih- 
j  er  userv  His  company,  which 
owns  the  Discovery  Channel 
and  other  cable  TV  program¬ 
ming  outlets,  uses  StieMindcr 
and  the  eProvisioning  soft¬ 
ware  that  Neiegrity  inherited 
fi\>m  Business  Layers. 

“Our  main  concerns  will  be 
which  products  survive  and 
whether  there  are  any  impacts 
to  Netegrity's  execution  of  the 
continued  integration  and  en¬ 
hancement  of  the  eProvision¬ 
ing  product."  Cimmino  said. 

A  user  at  a  large  financial 
services  firm  expressed  con¬ 
cern  that  islandla.  N.Y. -based 
CA's  purchase  of  Neiegrity 
could  re.sult  in  higher  prices 
for  products  such  as  the  Idcn- 
,  tUyMinder  software  that  his 
I  compan)  uses. 

"Unfortunately,  my  opinion 
is  that  this  is  a  ver)*  bad  move 
I  for  a  pretty  decent  pnvduct." 
said  the  user,  who  asked  not  to 
be  identified.  He  added  that 
CA  "consistently  overcharges” 
for  its  software  and  said  he 
also  expects  technical  support 
I  awit.s  to  “rise  dramatically" 

;  from  what  Nctcgrity  currently 
'  charges. 


man  for  the  Austjn-ba.scd  utili¬ 
ty  commission,  said  there  are 
no  existing  laMs  that  would 
prevent  Capgemini  Fnergs  or 
TXU  from  moving  .my  jobs 
oul  of  the  state. 

Trvy  Tminor.  chief  of  st.iff 
for  Stale  Rep  Phil  King,  the 
chairman  of  ihe  rc.xas  LcgisLi- 
turc's  committee  4in  re-gulaied 
industriL's.  said  that  the  panel 
diK*sn't  haw  jn\  iK'arings 
scheduled  and  that  the  legisla¬ 
ture  isn't  scheduled  to  meet 
again  until  (anuary. 

ijpgemini  Energy  is  negoti¬ 
ating  with  several  other  com- 
I  panics  and  hopes  to  sign  at 
least  one  more  contract  by 
I  nc.xi  spring.  I’ryxir  said.  The 
firm  is  “wailing  to  sec  h«iw 
j  adding  other  clients  affee'ls 
I  us"  on  staffing  bef<*re  finaliz- 
I  ing  plans  for  the  next  round  of 
curs  at  TXU.  he  said.  O  49958 


It  can  rake  years  for  CA  to 
fully  integrate  acquired  soft- 
u-are  into  its  tightly  bundled 
product  suites  said  Inn  Olt&ik. 
an  analyst  at  Enicrprise  Srraie- 
g)' Group  Itw.  in  Milford. 

Mass.  For  instance,  five  years 
;  after  CA  bought  Platinum 
I  Technology  Irw..  integration 
of  the  two  companies'  prod¬ 
ucts  renuins  “a  work  in 
I  progrevs."Ollsiksaid.“I 
expect  the  same  between 
,  Neiegrity  and  cTrusl.  so 
\s-c'a'  likely  to  see  nothing 
,  but  slideH'are  ftir  a  while.” 

I  Toby  Weiss,  senior  vice 
I  president  of  cTrusi  product 
I  managemeni  at  CA,  said  tl>e 
I  company  will  rt’lcase  a  prod¬ 
uct  integration  mad  map  after 
the  acquisition  U  eompleied. 
which  is  expected  by  year's 
'  end.  In  rt.'sptmsc  to  (he  con- 
I  cerns  about  overlapping  pmd- 
i  ucis.  Weiss  insisted  that  there 
I  are  only  superfic'al  similari- 
I  ties  between  Netegrity's  soft- 
I  ware  and  CA's  tools. 

Netegrity’s  strategic  focus 
J  on  Web  services  security  lech- 
,  nology  complements  CA's 
strengths  in  clicni/siTver  ac¬ 
cess  control  and  directory 
managemeni.  Weiss  said.  “I 
think  this  merger  ultimately 
gives  users  the  deepest  and 
broadest  set  of  identity  man¬ 
agement  products.”  he  added 
!  C49959 


CABuysNetegrityto 
Expand  in  IT  Purity 


flu's  former  ff  workers  and 
back -office  employees  will  face 
a  second  round  of  downsizing 
in  February,  said  Capgemtm. 
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SunGard  to  Undo 
Merger  Via  Spin-off 

SunOard  Data  Systems  Inc.  said  ft 
wil  spfit  into  two  companies  early 
next  year  by  spinning  off  Hs  disas¬ 
ter  recovery  unit  The  move  will 
undo  the  merger  that  creat¬ 
ed  SunGard.  althougti  the  Wayne. 
Pa. -based  company  said  the  dis¬ 
aster  recovery  unit  and  its  finan¬ 
cial  services  software  division 
have  operated  independently  of 
each  other  all  along.  No  layoffs 
are  planned.  SunGard  adiM. 

Former  Peregrine 
Execs  Face  Charges 

A  federal  grand  iury  in  San  Diego 
indicled  eight  former  executives 
of  ftregrine  Systems  bic.  on 
chargK  of  conspiracy  to  commit 
securities  fraud.  The  charges  cov¬ 
er  a  period  from  March  1999 
through  May  2002.  John  Mutdi. 
who  took  over  as  Peregrirw’s 
CCO  last  year,  said  the  San  Diego- 
based  software  vendor '‘fully 
cooperated  with  the  government 
in  Ms  investigations  «kI  wM  con- 
ttnue  to  do  so.” 


Sun  Details  Plans 
Far  Faster  CPU 

Sun  Mferosystams  Inc.  introduced 
a  new  UlraSparc  IV  processor 
designed  to  double  appteation 
porfortnance.  wMh  features  such 
as  muMthreading  and  expanded 
caches  and  buffers.  The  IMra- 
Sparc  IV«  wM  also  have  a  higher 
dock  speed  than  Sun's  existing 
chipe.  and  plans  cal  for  II  to 
reach  2  Gift  one  day.  Shipments 
are  due  to  start  bi  mid-2005. 

Short  Takes 

The  Rscal  2005  cap  on  H-18 
VISAS  for  foreign  workers  was 
r«achodonOct.tthedaylhetsd- 
aral  fiscal  year  began.  The  cap 
was  reached  even  faster  than  had 
been  expected  [QidekUnk 
49794). . . .  ADVANCED  MICRO 
DEVICES  INC  reported  that  its 
tMrd-guaftar  revsQue  was  below 
plan,  iMit  M  said  that  nderoproces- 
ser  sales  remamad  strong. 
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Web  Services  Rit 
EBay,  RiyP^  in . . . 

. . .  yoursupply  chain  pocket  Enterprises  like  Dell  Inc..  IBM 
and  the  state  of  Oregon  already  use  eBay  Inc.  and  its 
PayPal  Inc.  online  payments  division  to  profitably 
move  unwanted  capital  goods  that  are  gathering  dust 
on  their  shelves  into  the  hands  of  people  who  can 

actually  use  them.  But  eBay, 
which  gets  a  small  cut  from 
each  transaction  processed 


on  Us  site,  sees  a  huge  growth 
opportunity  if  it  can  m^e  it 
even  easier  for  companies  to 
leverage  its  global  buying 
community  within  their  sup¬ 
ply  chains.  Not  a  bad  idea, 
since  the  online  auc- 
tion  site  haxvdlcd  more 
than  S12  billion  worth 
of  transactions  last 
year.  So  San  Jose- 
based  eBay  is  bulking 
up  its  Web  services 
offerings  in  an  at¬ 
tempt  to  entice  third- 
party  and  corporate 
developers  to  more  tightly  in¬ 
tegrate  its  online  auction  and 
payment  technologies  into 
packaged  and  custom  appli¬ 
cations.  Mall  Ackley,  senior 
director  of  strategic  partner¬ 
ships  at  eBay,  points  to  the 
company's  development  of 
another  way  to  expose  its  ap¬ 
plication  programming  inter¬ 
faces.  through  a  Web  service 
called  Representational  State 
Transfer,  or  Rest.  The  tech¬ 
nology  is  designed  to  support 


P&rtion  of 
total  online 
sales  done  on 
eBay,  says 
Forrester 


secure  transactional  opera¬ 
tions  over  the  Web  and  is 
now  in  beta.  Ackley  is  cagey 
about  the  final  release  dale, 
but  he  says  it  won't  be  long. 
Greg  Isaacs,  eBay's  senior 
manager  for  platform  evange¬ 
lism.  says.  “We  didn't  origi¬ 
nally  look  at  Web  services  as 
a  competitive  advan¬ 
tage.  but  now  we  do.” 
'The  company  also  has 
struck  deals  with  Bor¬ 
land  Software  Corp. 
and  Microsoft  Corp.  to 
integrate  tools  for  pro¬ 
grammers  to  easily 
link  eBay  and  i*ayl>al 
into  applications  with 
their  respective  software  de¬ 
velopment  platforms.  A  ver¬ 
sion  of  Borland’s  IBuilder 
suite  for  Java  will  likely  ship 
with  eBay's  tools  in  early  '05. 
Isaacs  says.  Windows  devel¬ 
opers  won’t  need  to  wait  that 
long.  Borland  will  provide 
eBay  integration  for  .Net  ap¬ 
plications  when  it  releases  an 
update  to  its  Delphi  program¬ 
ming  environment  later  this 
month.  And  Microsoft  will  in¬ 
clude  similar  capabilities  in  a 


planned  release  of  Visual  Stu¬ 
dio  Express  early  next  year. 
Who  know's?  Maybe  the  new. 
used  and  simply  weird  stuff 
idly  depreciating  on  your 
company's  books  can  make 
some  money  alongside  all  the 
ElvLs  paraphernalia. 

Web  app  development 
demands... 

. . .  thinking  small.  That’s  the 
argument  Jason  Fried  makes. 
He's  the  founder  of  37  Signals 
LLC.  a  Web  development 
house  in  Chicago.  Fried  ap¬ 
plies  smallness  not  iust  to  the 
development  team,  but  to  the 
application  itself.  Don’t  make 
a  half-baked  product,  ’’make 
half  a  product."  he  says.  Re¬ 
jecting  end-user-friendly 
schools  of  thought.  Fried  says 
IT  developers  “ought  to  say 
no  by  default"  to  users'  re¬ 
quests  for  added  features. 

N<it  necessarily  to  their  faces, 
but  as  a  matter  of  internal 
policy.  The  point,  he  says,  is 
to  deliver  a  solid  product  as 
quickly  as  possible,  and  you 
can't  do  that  If  you're  con¬ 
stantly  throwing  in  new  re¬ 
quirements.  Plus,  the  hidden 
costs  of  adding  features  dur¬ 
ing  development  can  be  oner¬ 
ous.  For  example,  developers 
may  have  to  update  docu¬ 
mentation  and  modify  user 
interfaces.  Fried  thinks  a  bet¬ 
ter  idea  is  to  include  the  most 
sought-after  new  features  in 
an  update  as  soon  as  30  days 
after  you  release  an  applica¬ 
tion.  That  approach  builds 
goodwill  among  end  users 
and  reduces  the  chance  that 
you’ll  encounter  those  hidden 
costs,  he  claims. 

Protect  your  app... 

. . .  wHh  a  softwarg  Kcansing 
tool.  New  York-based  jPro- 
ductivity  LLC  will  ship  a  new 
version  of  its  Protection  li¬ 
censing  framework  that  lets 
developers  control  usage 
rights.  Alexander  Krivov.  the 
company’s  CEO.  claims  that 
even  corporate  IT  shops  need 
to  protect  their  intelieauai 


KRIVQV 
Adit  ltcL*ttsmg 
ngWs  to  cor¬ 
porate  apps 


property.  He 
says  that  in  a 
world  where 
Web  services 
and  Java  com¬ 
ponents  are 
intermingling 
in  applica¬ 
tions,  IT 
managers 
should  have 
more  fine¬ 
grained  con¬ 
trol  over  maintaining  their 
rights  to  code.  The  new  pro¬ 
fessional  version  of  I*rotcc- 
tion  ships  at  the  end  of  this 
month  and  supports  a  variety 
of  license  models.  Pricing 
starts  at  $299. 

Users  push  Plumtree 
onto  Java  train. . . 

. . .  with  the  company's  recent 
release  of  its  Enterprise  Web 
Suite  portal  According  to  Jay 
Simons,  vice  president  of 
product  marketing  and  strate¬ 
gy  at  Plumtree  Software  Inc. 
in  San  Francisco,  the  100% 

Java  product  was  necessary 
not  just  to  win  bids,  but  to 
compete  at  all  “This  opens 
up  opportunities  that  wc 
haven’t  been  able  to  compete 
for  because  some  companies 
have  an  ideology  about  pure 
Java.”  Simons  says.  The  soft¬ 
ware  runs  only  on  Solaris 
now.  but  expea  AIX  HP-UX 
and  Linux  releases  over  the 
next  six  months.  You  also 
might  want  to  look  at  Phim- 
tree's  6.0  release  of  its  Con¬ 
tent  Server  software.  Due 
next  month,  the  upgrade  lets 
you  use  Microsoft  Office 
applications  to  locate,  open, 
alter  and  save  files  In  your 
Plumtree  portal  Although 

that  was  pos¬ 
sible  before 
through  a  se¬ 
ries  of  menu 
choices.  Con¬ 
tent  Server 
6.0  makes  it 
a  point-and- 
click  fea¬ 
ture.  Cool. 
049907 
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SunGardtoUndo 
Merger  Via  Spin-off 

SunBwd  Dan  SintMm  bic.  sM  A 
aA  Mo  tuD  campanlw  aarty 

fwdyaarbyipMnaoflfticlaas- 
M  racofory  unft.  Themoye  ertt 
undo  iia  1M  nargar  that  craat- 
ad  SunDard.  aMurngh  lha  Wdyno, 
ft.-haaad  cofDpany  aaU  Iho  db- 
anar  rooawory  uaM  and  Hi  firiMf 
cM  aanicaa  aeAwan  dMMan 
hwo  oparalad  bidopandontfy  of 
aacfi  oNhar  al  atang.  Wa  tayoHs 
an  plannad.  SunOard  addod. 


Former  Peregrine 
Execs  ^ce  Charges 

A  fodanl  igand  )ivy  in  San  Diogo 
MMad  ai|M  fonw  anetfttvoa 
of  RMogrba  Sytfama  Inc.  an 
diaigoa  of  canaglncy  to  commit 
aacurittaa  Aaol  Tha  diargaa  cow 
ar  a  gofiod  from  Mardi  1999 
dvouAi  Mnr  2002.  Jofm  Mulch, 
who  tank  ovar  aa  Paravlna's 
CEO  Ml  yMT.  aid  lha  S«  Dfogo- 
haaad  aoflwan  ondor  lidfr 
coogarMad  wMi  tha  gouannaaiil 
in 

Mm  Id  do  ao.' 


Sun  Delals  Plans 
For  Faster  dPU 

Sun  MMooyManai  Ine.  Introduca 
a  now  MraSgaie  IV  graeaaaor 
doaf^iad  lo  daMia  oglcalion 


eahaaadhuflara.ThoUlfra* 
Sg«c  IV*  «•  iMo  Mm  a  Mghar 
daofc  Mind  than  Sm’o  oMing 
ehiga.  and  glana  cal  Mr  9  Id 
roach  2  Olb  ana  day.  SWpwianli 
andmtoaMtinndd’2005. 


Short  Takes 

TM  iaeai  2005  cap  on  H-16 
VBAS  far  fanipi  MVharo  WM 
ronchad  an  OeL  1,  IM  day  IM  fad- 
arai  fracai  yaar  bngan.  Ite  cap 
waa  macfrad  aoan  faalarthan  had 
baanaoaeMnidcilM 
49194]. ...  ADVANCED  MICRO 
DEVICES  MC.  lopartad  that  M 
Odrri'WMr  nmaM  wna  baiow 
plan.  Ml  I  aaM  iM  ndcmprocaa- 
aor  aain  romainad  alrang. 


[MIWMAIK 


HOT  TECHNOLOGY  TRENDS,  NEW  PRODUCT 
NEWS  AND  INDUSTRY  GOSSIP  BY  MARK  HALL 


Web  Services  Put 
EBay,  P^Pal  in . . . 

...  your  supply  chain  pocMt  Efitorprisn  HM  DoR  bic.,  m 
and  the  state  of  Oregon  already  use  eBay  Inc.  and  its 
PayPal  Inc.  online  payments  division  to  profitably 
move  unwanted  capital  goods  that  are  gathering  dust 
on  their  shelves  into  the  bands  of  people  who  can 
actually  use  them.  But  eBay, 
which  gets  a  small  cut  from 
each  transaction  processed 


on  its  site,  sees  a  huge  growth 
opportunity  if  it  can  make  it 
even  easier  for  companies  to 
leverage  its  global  buying 
community  within  th^  sup¬ 
ply  chains.  Not  a  bad  idea, 
since  the  online  auc- 
tion  site  handled  more 
than  $12  billioo  worth 
of  transactions  last 
yean  So  San  Jose- 
based  eBay  is  bulking 
up  its  Web  services 
offerings  in  an  at¬ 
tempt  to  entice  third- 
party  and  corporate 
developers  to  more  tightly  in¬ 
tegrate  its  online  auction  and 
payment  technologies  into 
packaged  and  custom  appli¬ 
cations.  Matt  Ackley,  senior 
director  of  strategic  partner¬ 
ships  at  eBay,  points  to  the 
company's  development  of 
another  way  to  expose  its  ap¬ 
plication  programming  inter¬ 
faces,  through  a  Web  service 
called  Representational  State 
Transfer,  or  Rest.  The  tech¬ 
nology  is  designed  to  support 


Portion  ot 
totAi  online 
Mies  done  on 
oBay 
foftester 


secure  transactional  opera¬ 
tions  over  the  Web  and  is 
DOW  in  beta.  Ackley  is  cagey 
about  the  final  release  date, 
but  be  says  it  won’t  be  long. 
Greg  Isa^  eBay's  senior 
manager  for  platform  evange¬ 
lism.  says,  “We  didn't  origi- 
nally  look  at  Web  services  as 
a  competitive  advan¬ 
tage,  but  now  we  da" 
'The  company  also  has 
struck  deals  writh  Bor¬ 
land  Software  Corp. 
and  Microsoft  Coip.  to 
integrate  tools  for  pro¬ 
grammers  to  easily 
Unk  eBay  and  PayPal 
into  applications  with 
their  respective  software  de¬ 
velopment  platforms.  A  ver¬ 
sion  of  Borland’s  JBuilder 
suite  for  Java  will  likely  ship 
with  eBay’s  tools  in  early  'C^ 
Isaacs  says.  Windows  devel¬ 
opers  won't  need  to  wait  that 
long.  Borland  will  provide 
eBay  integration  for  .Net  ap¬ 
plications  when  it  releases  an 
update  to  its  Delphi  program¬ 
ming  environment  later  this 
month.  And  Microsoft  will  in¬ 
clude  similar  capabilities  in  a 


planned  release  of  Visual  Stu¬ 
dio  Express  early  next  year. 
Who  (mows?  Maybe  the  new. 
used  and  simply  weird  stuff 
idly  depreciating  on  your 
company’s  books  can  make 
some  money  alongside  ail  the 
Elvis  paraphernalia. 


. . .  thMckig  smaN.  'That's  the 
argument  Jason  Fried  makes. 
He’s  the  founder  of  37  Signals 
LLC,  a  Web  development 
house  in  Chkaga  Fried  ap¬ 
plies  smallness  not  just  to  the 
development  team,  but  to  the 
application  itself.  Don't  make 
a  half-baked  product,  “make 
half  a  product."  be  says.  Re¬ 
jecting  end-user-friendly 
schoois  of  thought.  Fried  says 
IT  developers  “ought  to  say 
no  by  default"  to  users'  re¬ 
quests  for  added  features. 

Not  necessarily  to  their  faces, 
but  as  a  matter  of  internal 
policy.  The  point,  he  says,  is 
to  deliver  a  solid  product  as 
quickly  as  possible,  and  you 
can't  do  that  if  you're  con¬ 
stantly  throwing  in  new  re¬ 
quirements.  Plus,  the  hidden 
costs  of  adding  features  dur¬ 
ing  development  can  be  oner¬ 
ous.  For  example,  developers 
may  have  to  update  docu¬ 
mentation  and  modify  user 
interfoces.  Fried  thinks  a  bet¬ 
ter  idea  is  to  include  the  most 
sou^t-after  new  features  in 
an  update  as  soon  as  30  days 
after  you  release  an  applica¬ 
tion.  That  approach  builds 
goodwill  among  end  users 
and  reduces  the  chance  that 
youU  encounter  those  hidden 
costs,  he  claims. 

(intact  your  an*... 

. . .  wfth  •  iofMwD  Betnsing 
tool  New  Yoric-based  jPro- 
ductivity  LLC  will  ship  a  new 
version  of  its  Protection  li¬ 
censing  framework  that  lets 
developets  control  usage 
rights.  Alexander  Krivov,  the 
company's  CEO,  claims  that 
even  corporate  IT  shops  need 
to  protect  their  intellectual 


property.  He 
says  that  in  a 
world  where 
Web  services 
and  Java  com¬ 
ponents  are 
intermingling 
in  applica¬ 
tions,  IT 
managers 
should  have 
morerme- 
grained  con¬ 
trol  over  maintaining  their 
rights  to  code.  The  new  pro¬ 
fessional  version  of  Protec¬ 
tion  ships  at  the  end  of  this 
month  and  supports  a  variety 
of  license  models.  Pricing 
starts  at  $299. 

Users  push  Phimlree 
onto  Jinn  train... 

. . .  witb  IM  oompany's  recant 
releMe  of  its  Enterprise  Web 
Suite  portal.  According  to  Jay 
Simons,  vice  president  of 
product  mariceting  and  strate¬ 
gy  at  Plumtree  Software  Inc. 
in  San  Francisca  the  100% 

Java  product  was  necessary 
not  just  to  win  bids,  but  to 
compete  at  all  “This  opens 
up  opportunities  that  we 
haven’t  been  able  to  compete 
for  because  some  companies 
have  an  ideology  about  pure 
Java."  Simons  says.  The  soft¬ 
ware  runs  only  on  Solaris 
now,  but  expect  AIX  HP-UX 
and  Linux  releases  over  the 
next  six  months.  You  also 
might  want  to  look  at  Plum- 
tree's  6.0  release  of  its  Con¬ 
tent  Server  software.  Due 
next  month,  the  upgrade  lets 
you  use  Microsoft  Office 
applications  to  locate.  <:^}en. 
alter  and  save  files  in  your 
Plumtree  portal  Although 

that  was  pos¬ 
sible  before 
throughase- 
ries  of  menu 
chokes.  Con¬ 
tent  Server 
6i}  makes  it 
a  pomi-and- 
click  fea¬ 
ture.  Cool 
049907 


Microsoft 


Mr.  40%  Less 
Time  Spent  on 
Maintenance  and 
Administration 


'Instead  of  putting  out  fires,  we  now  focus 
on  ways  we  can  deploy  new  technologies 
that  benefit  our  customer  service." 


Manager.  Technical  Services.  PING 


Make  a  name  for  yourself  with  Windows  Server  System."*  Mkrosoft  Windows  Server  System 
makes  it  easier  for  golf  dub  maker  PING  to  manage  the  infrastructure  serving  their  400  end  users. 
Here's  how:  By  using  Windows  Server~2003  with  Active  Directory*  PING  rK>w  centrally  martages 
all  its  servers,  desktops,  and  end  users  from  one  location.  This  cut  annual  administrative  time  by 
800  hours.  Time  that  can  now  be  spent  developing  new  ways  to  support  customers,  partners, 
and  employees.  Software  that's  easier  to  manage  is  software  that  helps  you  do  more  with  less. 
Get  the  full  PING  story  at  mkrosoftconVwssystem 


Windows 
Server  Systemr 
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New  W'ebSplicre  a’Icase  can  detect 
outages,  shift  data  paxessing  workkxids 


BV  HEATHER  HAVENSTEIN 

IBM  LAST  \stFK  umviled 
an  upgrade  of  its  Web¬ 
Sphere  application  server 
software  that  includes 
ncH-  features  designed  to  pro¬ 
tect  applications  from  sy.siem 
downtime  and  boost  etTorts  by 
developers  to  create  .service- 
oriented  architectures. 

Version  6  of  the  WebSphere 
Application  Server  can  detect 
s>-stem  otitages  and  ensure 
that  transactions  arc  handed 
off  to  another  server  to  quick¬ 
ly  restore  processing  opera¬ 
tions  and  minimize  the  fman- 
ciai  impact  of  downtime,  said 
Bob  Sutor.  IBM’s  director  of 
WebSphere  foundation  soft¬ 
ware.  “If  these  transactions 
don't  take  place  or  are  stalled 
in  some  uay,  someone  is  going 
to  have  to  pay."  he  said. 

Sutor  added  that  instead  of 
ibreing  end  users  to  wait  while 
a  server  is  restaned.  Web¬ 
Sphere  can  document  what 
the  disabled  system  was  doing 
when  it  crashed  and  shift  the 
transaction  workload  to  a  fail¬ 
over  machine  in  the  same  data 
center  or  at  another  location 
—  ail  in  less  than  10  seconds. 

The  features  arc  designed  to 
meet  the  needs  of  large  com¬ 
panies  that  require  “a  lot  of  as¬ 
surances  and  a  lot  of  fault  tol¬ 
erance.'*  said  Shawn  Willett. 


CofTBction 

Due  to  naccurale  intormatiGn 
PtovnM  by  storage  swrtch  ven¬ 
dor  McOato  Cotp..  a  story  in  last 
week's  News  section  contaewd 
several  «rors  about  the  technol¬ 
ogy  bang  used  as  part  of  a  stor¬ 
age-area  network  proiecl  at 
Slate  Street  Corp.'s  nvestment 
management  undfFwancial 
Fern  Consahlales  SANs  Wth 
Eye  Towenl  UT)- A  corrected 
version  of  the  story  Is  on  oir  Web 
silealOuKkU*497BO 


an  analyst  at  Current  Analysis 
Inc.  in  Sterling,  Va.  “This  just 
.senses  things  and  doc.s  the  re¬ 
covery  automatically." 

Walt  Smith,  chief  architect 
in  IT  at  a  large  financial  insti¬ 
tution,  said  the  functionality 
developed  by  IBM  would  be 
very  appealing  if  it  works  as 
promised.  “We  have  many 
mission-critical  transactions 
that  could  benefit  from  the 
ability  to  perform  geographic 
fail-over  without  toss  of  in¬ 
flight  data."  he  said,  referring 
to  transactions  that  are  being 
processed  when  a  system 


problem  arise.s.  'The  caveat 
would  be  that  the  technology 
would  have  to  be  bulletproof, 
because  our  customers  would 
not  tolerate  any  failure  of  the 
backup  mechanism,"  added 
Smith,  who  asked  that  his  em¬ 
ployer  not  be  identified. 

Differentiation  Trend 

With  Version  6,  IBM  is  also 
standardizing  the  WebSphere 
programming  model  across 
the  entire  prtKluct  family  and 
continuing  a  shift  of  the  |2EE 
application  server  market  to¬ 
ward  differentiation  through 
proprietary  features,  said  Mas- 
.simo  Pezzini,  an  analyst  at 
Gartner  Inc.  “Users  should 
come  to  terms  with  this  trend 


and  ev.iluate  the  trade-off 
between  greater  functiorrality 
but  risk  of  iock-in  versus  free¬ 
dom  of  choice  but  higher  de¬ 
velopment  costs,"  he  said. 

The  new  release  is  due  by 
year’s  end.  IBM  said  it  will  sup¬ 
port  several  Web  services  stan¬ 
dards  and  include  a  new  mes¬ 
saging  engine  for  exchanging 
event  data  between  systems. 
Version  6  has  a  wizard-based, 
drag-and-dnip  user  interface 
designed  to  automate  common 
application  development  tasks. 

Application  availability  will 
also  be  a  key  focus  in  the  next 
release  of  BEA  Systems  Inc.’s 
rival  WcbLogic  application 
server,  which  is  due  next  sum¬ 
mer.  WcbLogic  users  will  be 


Navy,  EDS  Modify  Performance 
Measurements  on  Intranet  Project 


(’larif\'  contract 
specs,  cop\  private 
IT  best  practices 


The  U.S.  Navy  and  Electronic 
Data  Systems  Corp.  have 
agn.'ed  to  scale  back  and 
streamline  the  performance 
measurements  used  to  evalu¬ 
ate  the  progress  that  EDS  Ls 
making  on  the  S8.8  billion 
Navy/Marinc  Corps  intranet 
(N/MCI)  project. 

Navy  and  EDS  officials  said 
this  month  that  the  agreemeni 
reduces  the  number  of  N/MCI 
scrvicc-lcvel  agrccmcnt.s  from 
•M  In  seven  and  cuts  the  num¬ 
ber  of  performance  categiiric*s 
from  192  to  27. 

Kevin  Clarke,  a  spokesman 
for  EDS  Government  Solu¬ 
tions.  said  the  changes  arc  de¬ 
signed  to  impn>ve  the  N/MCl 
network’s  efficiency.  “Both  the 
(Navy)  and  EDS  a*cognizcd 
the  need  to  establish  more 
clearly  dcfine4  performance 


metrics  that  more  resemble 
commercial  IT  practices."  he 
said,  adding  that  the  revamped 
contract  provisions  give  EDS  a 
better  idea  of  the  service  lev¬ 
els  it  must  meet  to  achieve 
“100%  scat  billing"  on  N/MCI 
deployments. 

Rear  Adm.  lames  Godwin, 
the  Navy’s  N/MCI  program 
director,  said  the  new  SLAs 
.ind  performance  categories 
should  save  money  by  reduc¬ 
ing  administrative  complexity 
and  enable  the  Navy  and  EDS 
to  more  effectively  monitor 
end-user  experiences. 

"For  instance,  instead  of  fo¬ 
cusing  on  how  long  it  took  on 
e-mail  to  travel  from  sender  to 
a'cctvcr,  we  were  measuring 
how  long  the  e-mail  took  to  gi> 
fmm  the  sender  to  the  first 
server,  then  to  the  second 
server,  then  to  the  third,  until 
the  e-mail  finally  reached  the 
receiver."  Godwin  said. 

He  added  that  Navy  officials 
“came  to  realize  that  our  seg¬ 
mented,  incremental  approach 
to  measuring  N/MCI’s  perfor- 


New  Provisions 


TlttNs^udtMtNBMlghlng 
approach  to  wfcMto  EPS's  pw» 
tomtance  on  ttto  HMQ  contact 


mance  was  flawed  and  really 
didn’t . . .  reflect  the  end-user 
services  received." 

Other  contract  changes  in¬ 
clude  replacing  an  ineemive 
provision  under  which  EDS 
received  extra  payments  for 
meeting  or  exceeding  SLAs 
with  one  that  penalizes  the 
company  if  h  falls  short  of 
agreed-to  service  levels.  The 
penalties  would  be  applied  on 
a  quarterly  basis,  whereas  the 
incentives  were  paid  annually. 

In  addition,  performance 
measurements  will  now  be 


NEW  FEATURES 
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able  to  deploy  and  test  a  new 
version  of  a  Web  scr\'ice  on  a 
production  system  without 
having  to  shut  down  the  e.\ist- 
ing  application,  according  to 
BEA  officials.  They  added  that 
users  will  be  able  to  apply 
software  patches  to  servers 
without  bringing  down  appli¬ 
cations  that  are  running  on  a 
cluster  of  systems.  O  49961 


weighted  according  to  the 
Navy’s  service  priorities  in¬ 
stead  of  assigning  uniform 
weighting  to  all  performance 
categories  (see  chart).  And 
end-user  satisfaction  surveys 
will  affect  a  portion  of  avail¬ 
able  incentive  funds  for  the 
contractor.  Godwin  said. 

N/MCI  is  an  cnicrpriscwidc 
network  designed  to  connect 
about  360.000  sailors.  Marines 
and  civilian  employees  at 
more  than  300  bases  in  the 
U.S.  and  overseas.  The  pro¬ 
gram  is  the  largest  federal  IT 
contract  ever  awarded,  but  it 
has  posed  challenges  for  EDS. 

The  company  reported  op¬ 
erating  losses  of  $316  million 
stemming  from  the  contract 
during  the  first  half  of  this 
year,  according  to  a  filing  sub¬ 
mitted  to  the  U.S.  Securities 
and  Exchange  Commission. 
The  filing  also  said  that  EDS 
has  lied  S775  million  worth  of 
a.sscis  to  N/MCL  EDS  plans  to 
provide  additional  informa¬ 
tion  on  the  progress  of  N/MCI 
when  it  releases  its  third-quar¬ 
ter  earnings  on  Oct.  25. 

"N/MCl  remains  a  focus 
for  EDS.  given  the  contract’s 
size,  use  of  cash  and  impact 
on  earnings."  Clarke  said. 

0 49942 
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New  WebSphere  release  can  detect 
outages,  shift  data  processing  workloads 


•V  HCATNCR  NAVeMSTCJM 

IBM  LAST  WEEK  unveUcd 
an  upgrade  of  its  Web- 
Spbm  application  server 
software  that  includes 
new  features  designed  to  pro* 
^  applications  Iront  system 
downtime  and  boost  efforts  by 
devclt^rs  to  create  service- 
oriented  architectures. 

Version  6  of  the  WebSphere 
Application  Server  can  detea 
system  outages  and  ensure 
that  transactions  are  handed 
off  to  another  server  to  quick¬ 
ly  restore  processing  opera¬ 
tions  and  minimize  the  ftnao- 
cial  impact  of  downtime,  said 
Bob  Sutor.  IBM’s  direaor  of 
WebSphere  foundation  soft¬ 
ware.  these  transactions 
don’t  take  place  or  are  stalled 
in  some  way.  someone  is  going 
to  have  to  pay.”  he  said. 

Sutor  added  that  instead  of 
forcing  end  users  to  wail  while 
a  server  b  restarted.  Web¬ 
Sphere  can  document  what 
the  disabled  system  was  doing 
when  it  crashed  and  shift  the 
transaaion  workload  to  a  fail¬ 
over  machine  in  the  same  data 
center  or  at  another  location 
—  all  in  less  than  10  seconds. 

The  features  are  designed  to 
meet  the  needs  of  large  com¬ 
panies  that  require  ”a  lot  of  as¬ 
surances  and  a  lot  of  huUt  tol- 
crarKre.”  said  Shawn  Willett. 
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I  an  analyst  at  Current  Analysis 
Inc.  in  Sterling.  Va.  ‘'This  just 
senses  things  and  does  the  re¬ 
covery  auiomatically.” 

Walt  Smith,  chief  architect 
in  IT  at  a  large  fmancial  insti¬ 
tution.  said  the  funaionality 
developed  by  IBM  would  be 
very  appealing  if  it  works  as 
promised.  "We  have  many 
mission-critical  transactions 
that  could  benefit  from  the 
ability  to  perform  geographic 
fail-over  without  loss  of  in¬ 
flight  data.”  he  said,  referring 
to  transactions  that  are  being 
processed  when  a  system 


problem  arises.  The  caveat 
would  be  that  the  technology 
would  have  to  be  bulletproof, 
because  our  customers  would 
not  tolerate  any  failure  of  the 
backup  mechanism.”  added 
Smith,  who  asked  that  his  em¬ 
ployer  not  be  identified. 

OKferentiatian  Trend 

With  Version  6,  IBM  is  also 
standardizing  the  WebSphere 
programming  model  across 
the  entire  produa  family  and 
continuing  a  shift  of  the  J2££ 
application  server  market  to¬ 
ward  differentiation  through 
proprietary  features,  said  Mas¬ 
simo  Pezzini,  an  analyst  at 
Gartner  Inc  “Users  should 
come  to  terms  with  this  trend 


and  evaluate  the  trade-off 
between  greater  functionality 
but  risk  of  lock-in  versus  free¬ 
dom  of  choice  but  h^her  de¬ 
velopment  costs,”  he  said. 

The  new  release  is  due  by 
year's  end.  IBM  said  it  will  sup¬ 
port  several  Web  services  stan¬ 
dards  and  include  a  new  mes¬ 
saging  engine  for  exchanging 
event  data  between  systems. 
Version  6  has  a  wizard-based, 
drag-and-drop  user  interfoce 
designed  to  automate  common 
application  development  tasks. 

Application  availability  will 
also  a  key  focus  in  the  next 
release  of  BEA  Systems  Inc.'s 
rival  WebLogic  application 
server,  which  is  due  next  sum¬ 
mer.  WebLogic  users  will  be 


able  to  deploy  and  test  a  new 
version  of  a  Web  service  on  a 
production  system  without 
having  to  shut  down  the  exist¬ 
ing  application,  according  to 
BEA  officials.  They  added  that 
users  will  be  able  to  apply 
software  patches  to  servers 
without  bringing  down  appli¬ 
cations  that  are  running  on  a 
cluster  of  systems.  O  49961 


Navy,  EDS  Modify  Performance 
Measurements  on  Intranet  Project 


Clarify  contract 
specs,  copy  private 
IT  best  practices 


The  U3,  Navy  and  Electronic 
Data  Systems  Corp.  have 
agreed  to  scale  back  and 
streamline  the  performance 
measurements  used  to  evalu¬ 
ate  the  progress  that  EDS  is 
making  on  the  $8.8  billion 
Navy/Marine  Corps  Intranet 
(N/MCI)  projea. 

Navy  and  EDS  officials  said 
this  month  that  the  agreement 
reduces  the  number  of  N/MCI 
service-level  agreements  from 
44  to  seven  and  cuts  the  num¬ 
ber  of  performance  categories 
from  to  27. 

Kevin  Clarke,  a  spokesman 
for  EDS  Government  Solu¬ 
tions,  said  the  changes  are  de¬ 
signed  to  improve  the  N/MCl 
network’s  cadency.  ”Both  the 
[Navy)  and  EDS  recognized 
the  need  to  establish  more 
clearly  defined  performance 


metrics  that  more  resemble 
commercial  IT  practices,”  he 
said,  adding  that  the  revamped 
contract  provisions  give  EDS  a 
better  idea  of  the  service  lev- 
eb  it  must  meet  to  achieve 
••100%  scat  billing”  on  N/MCl 
deployments. 

Rear  Adm.  lames  Godwin, 
the  Navy’s  N/MCI  program 
direaor,  said  the  new  SLAs 
and  performance  categories 
should  save  money  by  reduc¬ 
ing  administrative  complexity 
and  cn^le  the  Navy  and  EDS 
to  more  effeaively  monitor 
end-user  experiences. 

“For  instance,  instead  of  fo¬ 
cusing  on  how  long  it  took  an 
e-mail  to  travel  from  sender  to 
receiver,  we  were  measuring 
bow  tong  the  e-maii  took  to  go 
from  the  sender  to  the  first 
server,  then  to  the  second 
server,  then  to  the  third,  until 
the  e-mail  finally  reached  the 
receiver.”  Godwin  said. 

He  added  that  Navy  officials 
“came  to  realize  that  our  seg¬ 
mented,  incremental  approach 
to  measuring  N/MCl’s  perfor- 


New  Provisions 


mance  was  flawed  and  really 
didn’t . . .  reOea  the  end-user 
services  received.” 

Other  contraa  changes  in¬ 
clude  replacing  an  incentive 
provision  under  which  EDS 
received  extra  payments  for 
meeting  or  exceeding  SLAs 
with  one  that  penalizes  the 
company  if  it  falls  short  of 
agreed-to  service  levels.  The 
penalties  would  be  applied  on 
a  quarterly  basis,  whereas  the 
incentives  were  paid  annually. 

In  addition,  performance 
measurements  will  now  be 


weighted  according  to  the 
Navy’s  service  priorities  in¬ 
stead  of  assigning  uniform 
weighting  to  all  performance 
[  eateries  (see  chart).  And 
end-user  satisfoaion  surveys 
will  affect  a  portion  of  avail¬ 
able  incentive  funds  for  the 
contraaor,  Godwin  said. 

N/MCI  is  an  enteiprisesvide 
network  designed  to  connea 
about  360,000  sailors.  Marines 
and  civilian  employees  at 
more  than  300  bas^  in  the 
U.S.  and  overseas.  The  pro¬ 
gram  is  the  largest  federal  IT 
contraa  ever  awarded,  but  it 
has  posed  challenges  for  EDS. 

The  company  reported  op¬ 
erating  losses  of  $316  million 
stemming  from  the  contract 
during  the  first  half  of  this 
year,  according  to  a  filing  sub¬ 
mitted  to  the  U.S.  Securities 
and  Exchange  (^mmission. 
The  filing  also  said  that  EDS 
has  tied  $775  million  worth  of 
assets  to  N/MCL  EDS  plans  to 
provide  additional  informa¬ 
tion  on  the  progress  of  N/MCl 
when  it  releases  its  third-quar¬ 
ter  earnii^  on  Oa.  2S. 

”N/MCI  remains  a  focus 
for  EDS.  given  the  contraa’s 
size,  use  of  cash  and  impact 
I  on  earnings,”  Clarke  said. 

I  049942 


DON'T  UNDERESTIMATE  SPYWARE. 


PeopleSoft  Director 
Says  Deal  Possible 

A  member  of  PeopleSoft  Inc.'s 
board  of  directors  said  in  a  Oela* 
ware  court  that  there's  a  liigh 
certainty"  that  the  company 
would  accept  Oracle  Corp.’s 
hostile  takeover  offer  if  the  price  > 

were  high  enough. 

"Mevcr  did  we  Imply  that  there  i 
were  no  eel  of  coiidKions  under 
which  we  could  imagine  being 
acquired  by  Orade."  said  board  i 
member  Steven  Goldby.  He  was 
testifying  during  a  trial  in  which 
Orade  is  challenging  PeopleSoft’s 
anti-takeover  defenses. 


EC  Relaunches  Its 
Probe  of  Oracle  Bid 

The  European  Commission  said  rt 
has  restarted  its  investigation  into  ' 
Oracle's  bid  for  PeopleSoft  after 
Orade  "substantidly  complied"  I 
with  a  request  for  more  informa-  ' 
tion  that  was  issued  in  April.  The 
commission  also  set  a  Nov.  9  I 
deadline  for  ruling  on  whether  it 
would  seek  to  block  an  acquisi-  I 
lion  of  PeopieSoft  by  Oracle,  al-  I 
though  a  decision  is  expected  to  j 
be  issued  later  tlas  month.  ! 


Companies  Fight  Back 
Against  Phishing  Scams 


lake  action  to  curb  costs,  stem  loss  of 
customer  confidence  —  and  customers 


BV  JAIKUMAR  VIJAVAN 

Ht  I'OTtNTIAL  onv 
sjon  of  consumer 
confidence  in  the 
online  transaction 
process  and  the  cost  to  com¬ 
panies  resulting  from  phishing 
scams  has  triggered  a  multi¬ 
faceted  response  from  some 
organizations. 

For  example.  London-ba-sed 
Barclays  Bank  PLC  said  last 
week  that  it  has  signed  up  for 
an  aniifraud  sen-ice  from  New 
Yi»rk-ba.scd  Cyoia  Inc. 

Cyoia's  FraudAction  sen-ice. 
which  Barebys  piloted  for 
three  month.s  earlier  this  year, 
is  dc-signed  to  help  the  bank 
more  quickly  detect  and  shut 
down  phishing  sc3m.s  involv¬ 
ing  the  use  of  its  brand.  Fraud- 
Action  u.ses  a  network  of 
pitrbes  seeded  an»und  the  Web 
to  scan  more  than  400  million 
e-inaiLs  a  day  looking  for  signs 
of  phishing  attacks,  said  Amir 
Orad.  a  Cyoia  vice  president. 

In  .some  instances,  the  ser- 


(FSTC)  said  a  counterphishing 
initiative  announced  on  Sept. 
20  had  so  far  attracted  11  fi¬ 
nancial  services  companies 
and  17  technology  vendors. 
The  initiative  is  focused  on 
developing  lechnohtgy  and 
opcmtinnal  safeguards  for 
countering  phishing.  Partici¬ 
pants  include  CitiGroup  Inc., 
I.P.  Morgan  Chase  &  Co.  and 
Visa  US.A.  Inc. 

Growing  Threat 

The  efforts  ctime  at  a  lime 
when  there  has  been  a  signifl- 
c.ini  increase  in  the  number 
of  phishing  attacks,  which 
involve  the  use  of  fake  e-mails 
and  Web  sites  m  extract  con¬ 
fidential  information  from 
users.  The  Anti-Phishing 
Working  Group,  an  industr)- 
astwiciation,  reported  1.974 
unique  phishing  attacks  in  July 
and  said  that  average  monthly 
grow’th  ratc-s  had  been  exceed¬ 


ing  50%  to  that  point. 


Companies  are  being  forced 
t»>  respond  because  of  costs, 
said  Gene  Ncycr,  a  managii^ 
executive  of  the  FSTC  effort. 

"There  Is  a  cost  to  the  banks 
in  terms  of  lass  of  consumer 
confidence:  there's  a  cost  to 
banks  in  terms  of  their  ability 


to  conduct  their  own  business 
lover  the  Internet]."  Never 
said.  Other  costs  come  from 
the  sharp  increase  in  customer 
support  calls  following  a 
phishing  attack  and  the  ex¬ 
pense  related  to  replacing 
compromised  cards  or  pass¬ 
words  and  other  confidential 
data,  he  said. 

Dealing  with  the  problem 
involves  battles  on  multiple 
fronts,  MacKcnzie  said,  and 
technoktgy  apprt»aches  such 
as  Cyota's  address  only  pan  of 
the  problem.  Because  phishing 
attacks  cross  international 
borders,  broad  cooperation 
among  law  enforcement  au¬ 
thorities  and  Internet  service 
providers  in  different  coun¬ 
tries  is  required  to  effectively 
deal  with  the  issue,  he  said. 
Greater  effort  also  needs  to  be 
made  in  educating  people 
about  the  issue,  he  added. 

"You  can  have  great  rotiuse- 
traps  for  catching  such  at¬ 
tacks.  but  it’s  very  difficult  to 
shut  them  down."  given  the 
cro.*K-bordcr  nature  of  the 
problem,  said  Avivah  Litan.  an 
analyst  at  Gartner  Inc.  Even 
so.  deploying  defensive  mea¬ 
sures  is  the  best  that  compa¬ 
nies  can  do.  she  said. 

"It's  better  than  not  doing 
anything."  Orad  said.  C  49944 


Canadian  Retailer 
Divests  Apps  Work 

Boston-based  Keane  he.  said  Hs 
Canadian  subsidiary  has  signed  a 
five-year  deal  to  take  over  main¬ 
tenance  ol  existing  applications 
for  Shoppers  Drug  Hart  Corp.,  a 
Toronto-based  drugstore  ch^. 
The  two  companies  said  77  IT 
workers  wilt  be  shifted  to  Keane 
as  part  of  the  agreement.  rm«i- 
cial  details  weren't  disciosed. 


Short  Takes 

UHISYSCORP  announced  plans 
to  lay  off  about  t.400  workers,  a 
move  that  wMI  reduce  its  37.000- 

person  workforce  by  4% _ 

Looking  to  increase  its  market 
presence  h  Europe.  AVAVA 
INC  said  it  has  agreed  to  pay 
S635  million  to  buy  Tenovis 
GmbH,  a  vendor  of  telecommuni¬ 
cations  systems  in  Frankfurt. 


j  vice  has  helped  Barclays  dc- 
I  tcct  and  shut  dou-n  scamming 
I  attacks  in  less  than  one  hour, 
i  said  Stuart  MacKenzie.  senior 
I  portfolio  manager  at  Barclays. 

“We  wanted  to  ensure  that 
!  wc  protected  the  integrity 
'  of  the  channel  and  kept  cus- 
I  turner  confidence  at  a  level 
I  where  Barclays  customers 
I  continued  using  [online  chan¬ 
nels]."  MacKenzic  said 

Barclays’  move  is  similar 
to  one  announced  recently  by 
eBay  Inc.,  which  is  another 
favorite  target  of  phishers. 
EBay  is  u.sii^  so-calJcd  Web 
Callcr-ID  technology  fn>m 
Austin-based  NVholeSccuriiy 
Inc.  that's  designed  to  allow 
eBay  users  to  verify  the  au¬ 
thenticity  of  a  Web  site. 

Other  companies  are  taking 
action  against  phishing  attacks 
as  well.  Last  week,  the  New 
York-based  Firuncial  Services 
Technology  Consortium 


Vendors  Add  Weapons  to  Battle  E-mail  Viruses 


THE  ABILITY  of  new  e-mail 
viruses  to  spread  before  fixes 
become  available  for  them  is 
nudging  some  vendors  to  look 
bey^  Iradiltanal  signalure- 
ba^  antivirus  technology. 

Last  week  Undon.  Utah- 
based  Avinti  IntL.  a  starl-up  with 
over  S30  million  in  venture  capi¬ 
tal  funding,  introduced  an  e-mail 
seci^ty  appliance  designed  lo 
detect  and  block  as-yet-uniden- 
tified  e-mail  wuses. 

Unlike  reactive  signature- 
based  products  that  block  virus¬ 
es  by  matching  patterns.  Avinti's 
isolation  server  looks  for  devia¬ 
tions  m  e-mail  behavior  to  identi¬ 
fy  threats.  It  intercepts  all  e-mail 
heading  mto  a  comorate  network 
and  looks  at  all  attadiments  or 
executables  in  the  body. 

E-mail  attachments  and  exe¬ 


cutables  are  opened  in  a  virtual 
execution  module  and  inspected 
for  behaviors  suggesting  mali¬ 
cious  intent.  Suspect  e-mail  is 
quarantined  or  filtered  out  based 
on  us^  preferences. 

The  technology  doesn'l  re¬ 
place  signature-based  antivirus 
products,  said  Teney  Takaha^i. 
an  analyst  at  The  R^cati  Group 
Inc.  in  ^lo  Alto.  Calif.  *lfs  prob¬ 
ably  most  effective  as  pari  of  a 
comprehensive  antivirus  strat¬ 
egy.' he  said. 

The  Make-A-Wtsh  Foundation 
of  Utah  has  been  testing  the  iso¬ 
lation  server  for  a  few  months 
and  has  found  it  to  be  quite  use* 
hjl.  said  network  administrator 
Oarren  Massey  m  SaK  Lake  City. 

Despite  some  early  protdems 
with  false  alarms,  the  technology 
helped  block  a  recent  virus  that 


had  gotten  past  the  organca- 
lion's  defenses.  Massey  said. 
It's  given  us  another  layer  of 
protection.”  he  said. 

Avmtfs  announcement  is  sim¬ 
ilar  to  the  one  made  earlier  this 
month  by  fronPwt  Systems  Inc., 
a  San  Biuno.  Cahf.-based  ven¬ 
dor  of  e-mail  security  appliances 
and  services.  IronRDrt  now  setts 
an  appliance  fealunng  the  new 
Virus  Outbreak  Filter,  which  [jses 
information  culled  from  an  Iron- 
Rort  ^)am-fiNering  database  to 
identify  new  e-mail  viruses. 

In  beta  tests  by  Electronic 
Data  Systems  Corp.  and  some  of 
Its  customers,  the  IronPwt  filters 
have  provided  warnings  about 
new  vinjses  hours  in  advance, 
said  Richard  Parvins,  a  systems 
engineer  at  EDS. 

~  Jaikumaf  Vifayan 
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PeopieSoft  Director 
Says  Deal  Possflile 

A  nwntor  of  ftoploSirfI  lne.'i 
teorriofdroctDrssridintOilo- 
tMTo  eoun  ttnl  ten’s  a  *Moh 
corteity'' tel  te  company 
wonU  aceopt  Orado  Con-'s 
baste  tahMvor  ollir  i  te  prtea 
won  Udi  sMuih. 

"Nsvsr  dU  tss  imply  tel  ten 
won  no  sat  of  esndlians  undsr 
which  m  ceuU  bnapiM  bsbig 
aepoM  by  Otada,*  taM  board 
msmhar  Stean  Goldby.  Ho  was 
lastifyint  dwhii  >  brid  in  which 
Oradi  is  ehalontes  PMipiaSoft’s 


ECRebunchesHs 
Probe  of  Oracle  Bid 

The  Eoropaan  Comwiaaion  said  M 
has  rssbrtod  Ns  bivostigation  into 
Oradt’s  bid  far  Paopl^afl  after 
Orado  “auhstenlialy  can^Bad" 
wWianpuastformoninfanRa- 
tei  tel  was  ioouod  in  AprI.  Tha 
coanafaaion  afao  sal  a  Nov.  9 
doadte  far  ntep  on  whster  H 
woddsaoktobtodianaoquiBi- 
tionofPaaplaSoflbyOracia.al- 
thoogh  a  dsdaion  la  aipaetod  to 


Canadian  RetaSer 
Divests  AppsVIfoih 


Ifaa  yaardaaltotafcaavar  main- 
tanaocs  af  aiialing  appBcalfans 
far  Shoppan  Drug  Mart  Corp^  a 
Torante-haaod  dnipBtero  diaht 
Tha  two  campados  saM  77  rr 
amrhars  wfi  ba  tefted  to  Naaiw 
as  part  of  te  agnamant  Rnan- 
dal  datalB  warani  dbdooad. 


Short  Tates 

UliSYS  CONP.  announcad  pfana 
to  Itor  aff  about  V400  wofhora,  a 
laovt  tel  wM  rodoco  Rs  87.000* 
paraan  wwlifaiia  by  4%. . . . 
Loahbig  fa  bwnoaa  Ns  oarhot 
praaawca  in  Eurapa.  A¥AVA 
MC.  saW  N  has  agraad  to  pay 
SOM  nMton  to  buy  Tonovte 
OatoN,  a  vuodor  of  talocaiMnun- 
cafioos  systoais  in  Fraiddurt. 


Companies  Fight  Back 
Against  Phishing  Scams 

T^e  action  to  curb  costs,  stem  loss  of 
customer  confidence  —  and  customers 


BY  JAIKUMAR  VUAVAM 

The  POTtNTiAL  ero¬ 
sion  of  consumer 
conndence  in  the 
online  transaction 
process  and  the  cost  to  com¬ 
panies  resulting  from  phishing 
scams  has  triggered  a  multi¬ 
faceted  response  from  some 
organizations. 

For  example,  London-based 
Barclays  Bank  PLC  said  last 
week  that  it  has  signed  up  for 
an  antifraud  service  from  New 
York-based  Cyota  Inc. 

Cyota's  FraudAction  service, 
which  Barclays  piloted  for 
three  months  earlier  this  year, 
is  designed  to  help  the  bank 
more  qukkly  detect  and  shut 
down  phishing  scams  involv¬ 
ing  the  use  of  its  brand.  Fraud- 
Action  uses  a  network  of 
probes  seeded  around  the  Web 
to  scan  more  than  400  million 
e-mails  a  day  lookup  for  signs 
of  phishing  attacks,  said  Amir 
Orad,  a  Cyota  vice  president. 

In  some  instances,  the  ser¬ 
vice  has  helped  Barclays  de¬ 
tect  and  shut  down  scamming 
attacks  in  less  than  one  hour, 
said  Stuart  Macl^nzie,  senior 
portfolio  manager  at  Barclays. 

'^e  wanted  to  ensure  that 
we  protected  the  integrity 
of  te  channel  and  kept  cus¬ 
tomer  confidence  at  a  level 
where  Barclays  customers 
continued  usii^  [online  chan¬ 
nels].''  MacKenzie  said. 

Barclays'  move  is  similar 
to  one  announced  recently  by 
eBay  Inc^  which  is  another 
favorite  target  of  phjshcrs. 

EBay  is  using  so-called  Web 
Caller-ID  technology  from 
Austin-based  WholeSecurity 
Inc.  that’s  designed  to  allow 
eBay  users  to  verify  the  au- 
tenticity  of  a  Web  site. 

Other  companies  are  taking 
action  against  phishing  attacks 
as  well  Last  week,  the  New 
York-based  Financial  Services 
Technology  Consonium 


(FSTC)  said  a  counterphishing 
initiative  announced  on  Sept 
20  had  so  far  attracted  U  fi¬ 
nancial  services  companies 
and  17  technolt^  vendors. 
The  initiative  is  focused  on 
developing  technology  and 
operation^  saf^uards  for 
countering  phishing.  Partici¬ 
pants  include  CitiGroup  Inc^ 
)J*.  Morgan  Chase  &  Co.  and 
Visa  U.SA.  Inc. 

Grawing  Threat 

Tlie  efforts  come  at  a  time 
when  there  has  been  a  signifi¬ 
cant  increase  in  te  number 
of  phishing  attacks,  which 
involve  the  use  of  fake  e-mails 
and  Web  sites  to  extract  con¬ 
fidential  information  from 
users.  The  Anti-Phishii^ 
Working  Group,  an  industry 
association,  reported  1,974 
unique  phishing  attacks  in  July 
and  said  that  average  monthly 
growth  rates  had  been  exceed¬ 


ing  50%  to  that  point. 

Companies  are  being  forced 
to  respond  because  of  costs, 
said  Gene  Neye^  a  managing 
executive  of  te  FSTC  effort. 

"There  is  a  cost  to  te  banks 
in  terms  of  loss  of  consumer 
confidence;  there’s  a  cost  to 
banks  in  terms  of  their  ability 


to  conduct  their  own  business 
[over  the  Imeroet],"  Neyer 
said.  Other  costs  come  from 
te  sharp  increase  in  customer 
support  calls  following  a 
phishing  attack  and  te  ex- 
I>ense  related  to  replacing 
compromised  cards  or  pass¬ 
word  and  other  confidential 
data,  be  said 

Dealing  with  the  problem 
involves  battles  on  multiple 
fronts,  MacKenzie  said  and 
technology  approaches  such 
as  Cyota's  address  only  pan  of 
the  problem.  Because  phishing 
attacks  cross  international 
borders,  broad  cooperation 
among  taw  enforcement  au¬ 
thorities  and  Internet  service 
providers  in  different  coun¬ 
tries  is  required  to  effectively 
deal  with  the  issue,  he  said. 
Greater  effort  also  needs  to  be 
made  in  educating  people 
about  te  issue,  he  added. 

"You  can  have  great  mouse¬ 
traps  for  catching  such  at¬ 
tacks,  but  it’s  very  difficult  to 
shut  them  down."  given  te 
cross-border  nature  of  te 
problem,  said  Avivah  Litan.  an 
analyst  at  Gartner  Inc.  Even 
so,  (topioying  defensive  mea¬ 
sures  is  the  best  that  compa¬ 
nies  can  do,  she  said 

"It’s  better  than  not  doing 
anything."  Orad  said  O  49944 


Vendors  Add  Weapons  to  Battle  E-mail  Viruses 
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ComMer  the  dolt  comeded.  By  combining  networiung,  Internet  and  lor^  distance 
services  into  a  single  turnkey  solution,  we’re  helping  one  of  the  largest  healthcare 
J5tJSSSJ5J*S#J*  providers  in  Texas  stay  connected.  Move  large  amounts  of  critical  data  quickly  and 

*!*•••**•••••*  reliably.  Adapt  to  kx^torm  growth  efficiently.  And  save  money  along  the  way-more 

*  **••*•**••  toan  $1  million  over  the  next  three  years.  Find  out  more  about  how  we’re  helping 

Daybreak  Venture  connect  the  dots  at  5bc.corn/dots.  GOMG  BEYOItt  TIC  CMir 
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New  Tools  Let  Users  Open 
Mainframe  Data  to  Web  Apps 


Attiichm;itc  adds  suftwaro  that  enables 
blending  of  leg:ie\  into,  Web  sen  iees 


BV  HEATHER  HAVENSTEiH 

A  I  lACHMArr  i  nKt’  is 
upgrading  its  niniri' 
tramc  ennnectivicy 
piuJuoi  line  with  a 
ivjir  of  now  io»»ls  designed  to 
help  software  developers 
more  easily  tap  into  lcgac> 
data  when  building  Web- 
based  applications. 

The  Ik'llevue.  Wash.-based 
Vendor  last  week  announced 
its  Synapta  Presentation 
Builder  and  Services  Builder 
tools,  which  abstroel  main- 
iTante  data  so  developers  can 
use  it  in  new  types  of  applica¬ 
tions.  Markus  Niischke.  vice 
pri’sideni  of  corporate  market¬ 
ing  at  Aitachmate.  said  the 
new  im>ls  ‘•prtrvide  legacy  ac- 
CCS.S  and  put  a  layer  of  abstrac¬ 
tion  on  top  M*  you  can  create  a 
Web  service.”  enabling  main¬ 
frame  applications  to  K’  inettr- 
pomted  intoservice-viriented 
architectures  (SOAl. 

Harbt>r  Federal  Savings 
Bank  in  Fort  Pierce.  Fla.,  has 
used  the  Synapta  products 
to  build  access  to  customer 
account  data  housed  on  a 
Unisys  Corp.  mainframe  into 
Web  services  that  support  on¬ 
line  banking  iransaction.s  and 
inquiries,  said  Annctta  Smith, 
the  bank's  vice  pa'sident  of  IT. 

“Wc  needed  to . . .  be  able  to 
go  and  hit  the  host  and  hit  dif- 


Synapta  Features 


ferent  parts  of  the  host."  Smith 
I  said.  With  Syrutpta.  the  bank’s 
j  developers  can  direct  the  Web 
'  scn’iccs  to  retrieve  the  m.tin- 
frame  data,  she  added. 

Vendors  such  as  .Atiach- 
mate.  WRQ  Inc.  and  NctM.in- 
age  Inc.  arc  trying  to  meet  de¬ 
mand  for  t(»ols  that  can  help 
developers  take  iniemally 


facing  applications  and  c.Kpt>sc 
them  to  external  users  without 
having  to  touch  the  mainframe 
code,  said  Dale  Vccchio.  an  an- 
.ilyst  at  (iarincr  Inc. 

“Pnxlucis  like  Synapta  are 
generally  mminvasivc."  Vec- 
chio  s;tid.  "St.)A  is  the  .savior  of 
the  mainframe  (beeausel  it's 
going  to  cause  pei)ple  to  use 
the  business  logic  in  place  and 
expose  it  as  servires.” 

First  American  Default 
'lechnoU>gies  in  Anaheim. 


Calif.,  has  used  WKQ's  V'era- 
sircam  host  integration  soft¬ 
ware  to  lie  its  mainframe  data 
to  an  online  loan-tracking  ap¬ 
plication  built  around  Micru- 
i  soft  Corp.'s  .Net  technoK)g>'. 
With  Verastream.  the  mort¬ 
gage  default  servicing  compa¬ 
ny  was  able  to  provide  bankers 
and  lawyers  with  Web-based 
access  to  loan  information 
stored  on  its  mainframe,  said 
Clen  Banta.  First  American's 
director  i>f  client  technology. 
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and  n**l  large  proprietary  N»\- 
es."  said  Chris  Hrien.  a  systents 
analyst  at  Mark's  Work  Wcar- 
h«)use  Ltd.  in  Calgary.  Alberta. 

Tlte  retail  chain  is  using 
IBM  iSeries  servers,  which 
bundle  WebSphere  with  the 
hardware,  so  opcn-siHirce  ap- 
plicalhin  server  software  isn't 
yet  part  of  its  IT  planning,  ac¬ 
cording  to  Brien.  Bui  he  said 
he  expects  that  will  change. 

Thomas  Murphy,  an  analyst 
at  Meta  Group  Inc.,  said  that 
his  firm  has  seen  open-source 
application  seners  primarily 
used  for  dcvciopnteni  purpits- 
es  but  that  it’s  starting  to  sec 
corporate  uptake  of  the  IBoss 
Application  Server  in  produc¬ 
tion  applications.  StilL  the 
IB0S.S  server’s  market  share  re¬ 
mains  small,  at  about  5%.  Mur¬ 
phy  said. 

Some  companies,  such  as 
Hawaiian  Electric  Co.,  c^ontin- 
ue  to  harbor  concerns  about 
support.  The  Honolulu-based 
power  company  runs  the 
Apache  Tomcat  servlet  con¬ 
tainer  in  its  lest  environment 
and  has  debatc'd  bringing  the 
server  into  production,  ac¬ 
cording  to  Richard  Eber.  direc¬ 
tor  of  development  servict^s. 

•'The  IT  stair  is  spread  si» 
thin  that  it  is  diftFiculi  to  be 
able  to  develop  an  tn-depth 
knowledge  in  any  one  prod¬ 
uct."  he  said.  “If  wc  were  to 


use  an  open-source  applica¬ 
tion  server  in  pn>duciion.  we 
would  need  to  have  a  support 
contract  with  someone  wc 
could  call  24-by-7  in  case  we 
gi)t  in  over  our  heads." 

Ebcrs.iid  Hawaiian  Electric 
has  K'en  a  Micro,soft  shop  for 
years  and  is  only  beginning  to 
gel  its  arms  around  12EE  tech¬ 
nology.  So  far.  thai  tends  to  be 
when  <*nc  of  its  software  pnxl- 
ucts  requires  I2F-F,  such  as  the 
Vignette  Corp,  S4>fiware  that 
supports  its  Internet  and  in¬ 
tranet  presence. 

Support  Factor 

Unlike  some  open-source  of¬ 
ferings.  support  is  available 
for  the  new  fBoss  Application 
Server  4.0.  Pricing  starts  at 
$10,500  per  year  for  a  single 
application,  according  lo  a 
JBtvss  spokeswoman.  Support 
and  services  are  also  available 
frt)m  IBoss  Authorized  Ser¬ 
vice  Partners,  which  include 
Computer  Associates  Interna¬ 
tional  Inc..  Hewlett-Packard 
C<v.  Novell  Inc.  and  Unisys 
Corp. 

But  support  isn't  the  only 
factor  holding  back  some 
companies.  Ramu  Kannan.  a 
director  of  IT  at  Humana  Inc., 
said  the  Louisville.  Ky.-based 
health  care  provider  wants  to 
limit  the  number  of  applica¬ 
tion  servers  it  needs  to  dephiy. 
Its  choice  of  appHcalitm 
servers  Is  driven  by  the  lec- 
ommcndaiions  of  independent 
software  vendors,  and  so  far. 
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they  cither  haven’t  steered 
Humana  toward  open-source 
products  or  have  certified 
their  applications  only  for 
IBM’s  WebSphere  or  BEA's 
WebLogic.  Kannan  said. 

Walt  Smith,  chief  architect 
in  IT  at  a  lai^c  U.S.-ba.sed  fi¬ 
nancial  institution  that  he 
asked  not  be  named,  said  his 
company  requires  tight  inte¬ 
gration  of  its  I2EE-bascd  ap¬ 
plication  server  with  its  secu¬ 
rity  infrastructure  to  protect 
mission-critical  customer  ap- 


Developers  were  also  able 
to  abstract  and  isolate  the 
mainframe  data  in  order  to 
create  a  series  of  reusable  ser¬ 
vices  that  can  he  combined 
with  new  business  logic  in  Vi¬ 
sual  Studio  .Net.  Banta  added. 

“You  just  go  through  using 
their  design  tools  and  map  out 
your  screens."  he  said.  “Once 
we  have  these  models  to  ac¬ 
cess  the  host  sy'stem.  it  basical¬ 
ly  turns  the  mainframe  into  a 
SQL  database  so  you  can  lever¬ 
age  all  type.s  of  applications.” 

The  Synapta  tools  arc  due 
for  release  ne.xt  month.  Pric¬ 
ing  starts  at  $125,000  per  run¬ 
time  for  Presemtation  Builder 
and  SO.'t.OOO  per  runtime  for 
Services  Builder.  O  49960 


plications.  He  declined  to 
identify  the  application 
.server  vendor,  citing  security 
concerns. 

"Wo  view  the  distributed 
application  server  as  a  core 
component  of  our  services  ar- 
chiteeiurc  and  therefore  re¬ 
quire  a  higher  degree  of  inter¬ 
operability  and  integration 
supiHirt  for  legacy  systems 
than  Is  available  in  most  open- 
sourcc  application  servers." 
Smith  said. 

Now  that  the  IBoss  offering 
ha.s  gained  |2EE  L4  certifica¬ 
tion.  interoperability  concerns 
may  be  less  of  a  worry. 

But  Shawn  Willett,  an  ana¬ 
lyst  at  Current  Analysis  Inc.  in 
Sterling.  Va.,  noted  that  IBoss 
is  “very  techie,”  geared  more 
toward  hard-core  program¬ 
mers.  and  that  it  doesn’t  have 
all  the  "bells  and  whistles" 
that  the  commercial  offerings 
from  IBM  and  BEA  da 

"They  are  working  on  it." 
Willett  said,  adding  that  At¬ 
lanta-based  JBoss  has  added 
support  for  enhanced  features 
such  as  clustering. 

*1110  competition  is  certainly 
paying  attention  to  open- 
source  application  servers. 
BEA.  for  instance,  stopped 
charging  for  developer  licetts- 
cs  in  March  2003  in  response 
to  the  growing  u.sage  of  free 
options,  said  Eric  Stahl,  senior 
director  of  product  marketing 
at  BEA.  Other  vendors,  includ¬ 
ing  IBM.  have  also  done  that. 
0499S5 
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New  Tools  Let  Users  Open 
Mainframe  Data  to  Web  Apps 


Attachmate  adds  software  that  enables 
blending  of  legacy  info,  Web  services 


BV  HEATHER  HAVENSTEiM 

Attachmate  corp.  is 
upgrading  its  main- 
fraine  coonectivity 
product  line  with  a 
pair  of  new  tools  designed  to 
help  software  developers 
more  easily  tap  into  legacy 
data  when  building  Web- 
based  applications. 

The  Bellevue.  Wash.-based 
vendor  last  week  announced 
its  Synapia  Presentation 
Builder  and  Services  Builder 
tools,  which  abstract  main¬ 
frame  data  so  developers  can 
use  it  in  new  types  of  applica¬ 
tions.  Markus  Nitschke,  vice 
president  of  corporate  market¬ 
ing  at  Attachmate.  said  dte 
new  tools  **provide  legacy  ac¬ 
cess  and  put  a  layer  of  abstrac¬ 
tion  on  top  so  you  can  create  a 
Web  service,”  enabling  main¬ 
frame  applications  to  be  incor¬ 
porated  into  service-oriented 
architectures  (SOA). 

Harbor  Federal  Savings 
Bank  in  Fort  Pierce.  Fla.,  has 
used  the  Synapta  products 
to  build  access  to  customer 
account  data  housed  on  a 
Unisys  Corp.  mainframe  into 
Web  services  that  support  on¬ 
line  banking  transactioas  and 
inquiries,  said  AnnetU  Smith, 
the  bank's  vice  president  of  IT. 

‘*We  needed  to ...  be  able  to 
go  and  hit  the  host  and  hit  dif- 


Synapta  Features 


ferent  parts  of  the  host,”  Smith 
said.  With  Synapta.  the  bank's 
developers  can  direct  the  Web 
services  to  retrieve  the  main¬ 
frame  data,  she  added. 

Vendors  such  as  Attach¬ 
mate.  WRQ.fn<^-  NetMan- 
age  Iru:.  arc  trying  to  meet  de¬ 
mand  for  tools  that  can  help 
developers  take  internally 


facing  applications  and  expose 
them  to  external  users  without 
having  to  touch  the  mainframe 
code,  said  Dale  Vecchio.  an  an¬ 
alyst  at  Gartner  Inc. 

“Products  like  Synapta  are 
generally  noninvasive.”  Vec¬ 
chio  said.  “SOA  is  the  savior  of 
the  mainframe  (because]  it’s 
going  to  cause  people  to  use 
the  business  logic  in  place  and 
expose  it  as  services." 

First  American  Default 
Technolt^es  in  Anaheim. 


Calif,  has  used  WRQ^s  Vera- 
stream  host  integration  soft¬ 
ware  to  tie  its  mainframe  data 
to  an  online  loan-tracking  ap¬ 
plication  built  around  Micro¬ 
soft  Corp.*s  -Net  technology. 
With  Verastream.  the  mort¬ 
gage  default  servicing  compa¬ 
ny  was  able  to  provide  bankers 
and  lawyers  with  Web-based 
access  to  loan  infonuation 
stored  on  its  mainframe,  said 
Glen  Banta,  First  American's 
director  of  client  technology. 


Developers  were  also  able 
to  abstract  and  isolate  the 
mainframe  data  in  order  to 
create  a  series  of  reusable  ser¬ 
vices  that  can  be  combined 
with  new  business  logic  in  Vi¬ 
sual  Studio  .Net,  Banta  added. 

“You  just  go  through  using 
their  design  tools  and  map  out 
your  screens,”  he  said,  "Once 
we  have  these  models  to  ac¬ 
cess  the  host  system,  it  basical¬ 
ly  turns  the  mainframe  into  a 
SQL  database  so  you  can  lever¬ 
age  all  types  of  applications." 

The  Synapta  tools  are  due 
for  release  next  month.  Pric¬ 
ing  starts  at  $125,000  per  run¬ 
time  for  Presentation  Builder 
and  $65,000  per  runtime  for 
Services  Builder.  049960 
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and  not  large  proprietary  box¬ 
es,"  said  Chris  Brien.  a  systems 
analyst  at  Marie's  Work  Wear- 
house  Ltd.  in  Calgary.  Alberta. 

The  retail  chain  is  using 
IBM  iSeries  servers,  which 
bundle  WebSphere  with  the 
hardware,  so  open-source  ap¬ 
plication  server  software  isn't 
yet  part  of  its  IT  planning,  ac¬ 
cording  to  Brien.  But  he  said 
be  expects  that  will  change. 

Thomas  Murphy,  an  analyst 
at  Meta  Group  In<^  said  that 
his  firm  has  seen  (^ten-source 
application  servers  primarily 
used  for  development  purpos¬ 
es  but  that  h’s  starting  to  see 
corporate  uptake  of  the  JBoss 
Application  Server  in  produc¬ 
tion  applications.  Still,  the 
JBoss  server’s  marker  share  re¬ 
mains  small,  at  about  5%.  Mur¬ 
phy  said. 

Some  companies,  such  as 
Hawaiian  Electric  Co.,  contin¬ 
ue  to  harbor  concerns  about 
support.  The  Honolulu-based 
power  company  runs  the 
Apache  Tonuxit  servlet  con¬ 
tainer  in  its  test  environment 
and  has  d^ted  bringing  the 
server  into  production,  ac¬ 
cording  to  Richard  Ebcr,  direc¬ 
tor  of  development  services. 

The  IT  is  spread  so 
thin  that  it  is  difficult  to  be 
able  to  dervelop  an  in-depth 
knowledge  in  any  one  p^- 
uct."  he  said.  Tf  we  were  to 


use  an  open-source  applica¬ 
tion  server  in  production,  we 
would  need  to  have  a  support 
contract  with  someone  we 
could  call  24'by-7  in  case  we 
got  in  over  our  beads." 

Eber  said  Hawaiian  Electric 
has  b(^en  a  Microsoft  shop  for 
years  and  is  only  beginning  to 
get  its  arms  around  J2EE  tech¬ 
nology.  So  far.  that  lends  to  be 
when  one  of  its  software  prod¬ 
ucts  rccpiires  J2EE,  such  as  the 
Vignette  Corp.  software  that 
supports  its  Internet  and  in¬ 
tranet  presence. 

Support  Factor 

Unlike  some  open-source  of¬ 
ferings.  support  is  available 
for  the  new  JBoss  Application 
Server  4iX  Pricing  starts  at 
$10,500  per  year  for  a  single 
application,  according  to  a 
JBoss  spokeswoman.  Support 
and  services  are  also  av^ble 
from  JBoss  Authorized  Ser¬ 
vice  Partners,  which  include 
Computer  Associates  Interna¬ 
tional  Inc.,  Hewlett-Packard 
Co.,  Novell  Inc,  and  Unisys 
Corp. 

But  support  isn’t  the  only 
factor  holding  back  some 
companies.  Ramu  Karman.  a 
director  of  IT  at  Humana  Tnc.. 
said  the  Louisville,  Ky.-based 
health  care  provider  wants  to 
limit  the  number  of  applica¬ 
tion  servers  it  needs  to  deploy. 
Its  cbcnce  of  application 
servers  is  driven  by  the  rec¬ 
ommendations  of  independent 
software  vendors,  and  so  far. 
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they  cither  haven’t  steered 
Humana  toward  open-source 
products  or  have  certified 
their  applications  only  for 
IBM’s  WebSphere  or  BEAs 
WebLogic,  Kannan  said. 

Walt  Smith,  chief  architect 
in  IT  at  a  large  U.S.-based  fi¬ 
nancial  institution  that  he 
asked  not  be  named,  said  his 
company  requires  tight  inte- 
gratioo  of  its  J2E£-based  ap¬ 
plication  server  with  its  secu¬ 
rity  infrastructure  to  protect 
mission-critical  customer  ap¬ 


plications.  He  declined  to 
identify  the  application 
server  vendor,  citing  security 
cont^ems. 

”We  view  the  distributed 
application  server  as  a  core 
component  of  our  services  ar¬ 
chitecture  and  therefore  re¬ 
quire  a  higher  degree  of  inter¬ 
operability  and  integration 
support  for  legacy  systems 
than  IS  available  in  most  open- 
sourcc  application  servers," 
Smith  said. 

Now  that  the  JBoss  ofl^riiig 
has  gained  J2EE  1.4  certifica¬ 
tion.  interoperability  concerns 
may  be  less  of  a  worry. 

But  Shawn  WUlett.  an  ana¬ 
lyst  at  Current  Analysis  Inc.  in 
Sterling,  noted  that  JBoss 
is  ‘\ery  tedue."  geared  more 
toward  hard-core  program¬ 
mers,  and  that  it  d^n't  have 
all  the  'T>eUs  and  whistles" 
that  the  commercial  offerings 
from  IBM  and  BEA  do. 

"They  are  working  on  it," 
Willett  saici  adding  that  At¬ 
lanta-based  JBoss  has  added 
support  for  enhanced  features 
such  as  clustering- 

The  competition  is  certainly 
paying  attention  to  open- 
source  application  servers. 
BEA,  for  instance,  stopped 
charging  for  developer  licens¬ 
es  in  March  2003  in  response 
to  the  growing  us^  of  free 
options,  said  Eric  Stahl,  senior 
director  of  product  mariceting 
at  BEA.  Other  vendors,  includ¬ 
ing  IBM.  have  also  done  that. 
049865 


Profiles  in  Business  Mobility 


Productivity 


Working-from-Home  Walter  now  gets  more 
done  in  slippers  than  in  wingtips. 


QUOTE:  “Who  says  I  have  to  be  of  work  to  be 
hard  at  work?” 


CHALLENGE  His  company  needs  him.  His  family  needs  him. 

NOKIA’S  ANSWER  FOR  I.T.:  Nokia  Secure  Access 
System  for  SSL  VPN  Connectivity 


NAME:  Working-from-Home  Walter 


Learn  how  to  mobilize  your  team  and  increase  business 
productivity.  Download  “The  Anytime,  Anyplace  World” 
white  paper  at  nokiaforbusiness.com 

NOKIA 

Connecting  People 


MEETS  HIS  NEEDS  by  letting  him  work 
on  his  home  PC  when  he  needs  to  and 
still  have  access  to  business-critical 
applications  like  email,  sales  data,  and 
enterprise  resource  planning  software. 


MEETS  HIS  COMPANY’S  NEEDS  by  creating  a  more 
flexible  yet  cost-effective  and  secure  work 
environment  for  valuable  employees. 
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ILM  Projects 


the  Storage  Networking  Indus¬ 
try-  AisiH-iation, 

Users  and  storage  vendors 
alike  agreed  that  miist  ILM 
strategies  are  still  works  in 
progress.  In  addition  to  the  in¬ 
ternal  challenges  that  IT  man¬ 
agers  have  to  contend  with. 
ILM  standards  aa*  lacking,  at¬ 
tendees  said.  They  also  cited  a 
need  for  more  automated  data 
migration  capabilities  and  bet¬ 
ter  inicgraiion  between  appli¬ 
cations  and  storage  devices. 

But  the  sheer  volume  of  in- 
fomution  makes  it  imperative 
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agt-mi-to  Dfiiclices  across 
yovr  company  s  lipefations 


that  companies  begin  ela.ssify- 
ing  data  and  managing  it  via 
automated  policies.  s;iid  users 
such  as  Scott  McIntyre.  CIO  at 
Quantum  Corp.  in  San  lose. 

The  need  to  comply  with 
the  Sarbancs-O.vlcy  Act  and 
other  regulations  “provides 
the  opportunity  for  us  to  blud¬ 
geon  our  bustnes.s  units  to 
where  we  need  to  go"  with 
ILM.  McIntyre  said.  Quantum, 
which  makes  disk  and  tape 
drives,  is  moving  from  a  stor¬ 
age  approach  built  around  data 
warehousing  to  what  McInr>Tc 
described  as  an  information 
retention  model.  Hut.  he 
added,  the  company  Ls  “in  the 
early  stages"  of  the  project. 

The  potential  business  ram- 
i/krations  of  not  adopting  ILM 
“are  absolutely  huge."  said  Joel 
While,  lead  IT  architect  at  All¬ 
state  Insurance  Ca  In  Nonh- 
brook.  111.  White  added  (hat 
Allsiaie's  ILM  strategy  is 
twofold:  The  iresurcr  is  trying 
to  achieve  an  enterprisewide 
view  of  all  its  data  while  con¬ 
solidating  and  centralizing  its 
storage  inlrastructurc. 

Mike  Peterson,  an  analyst  at 
Strategic  Research  Corp.  in 
Santa  Barbara.  Calif,  and  pro¬ 
gram  director  for  the  SNIA’s 
Data  Management  Forum,  said 
the  key  issue's  driving  ILM 
adoption  include  an  inability 
to  efTcctivcly  manage  data  and 


SNIA  Plans  Standards  Work  to  Help  Boost  ILM  Usage 


t  ONO  BEACH  CALIE 


Less  than  10%  of  all  corporate 
data  is  transactional,  according 
lo  consultancy  McKrnsey  &  Co. 
The  rest  IS  fixed  data  that  poten¬ 
tially  could  be  stored  on  low-end 
disk  arrays.  \^t  prior  to  being 
archived,  the  vast  majonty  of 
data  IS  still  stored  on  pnmary 
disk  systems  with  annual  operat¬ 
ing  costs  of  between  45  and  55 
cents  per  megabyte. 

‘If  you’re  not  accessing  it. 
don't  leave  it  there.*  said  Lou 
Haney,  a  member  of  the  Stor¬ 
age  Networking  Industry  Associ- 
atioo's  Data  Managerrrent  fo¬ 
rum.  ‘That's  where  your  cost 
savings  will  be  realized  ‘ 

How  to  lower  storage  costs 
through  the  use  of  standardized 
ILM  practices  was  the  focus  of 
several  dscussions  led  by  mem- 


a  desire  tu  get  information  out 
of  the  silos  where  ti  has  tradi¬ 
tionally  been  stored.  But  deal¬ 
ing  with  the  sheer  mass  of 
data  “is  really  an  umiratus 
challenge  for  the  IT  group." 
Peterson  said. 

Another  major  issue  identi¬ 
fied  by  conference  attendees 
was  the  r»eed  to  keep  old  ap¬ 
plications  running  in  order  to 
access  and  read  archived  data. 


SAP  Beefs  Up  Java  Support 
Capabilities  for  NetWeaver 


av  MAItC  i.  SONOINI 

Looking  to  penetrate  further 
into  the  software  infrastruc- 
mre  market.  SAP  AG  last  week 
announced  platu  to  add  new 
lava  and  business  intelligence 
capabilities  to  its  NetWeaver 
suite  of  middleware  and  appli- 
cation  integration  tools. 

At  its  SAP  TechEd  2001  de- 
veloper  conference  in  San 
Dicga  the  software  vendor 
said  it's  building  technology 
into  NetWeaver  that's  de- 
signed  to  bm>st  the  reliability 
of  Java-based  applicatioas. 

The  so-called  container  tech- 

Mr— 


tual  machine  code  and  pro¬ 
vides  a  lockdown  feature'  that 
isolates  end  users  from  one 
another  in  order  tu  prevent 
system  errors  from  having  a 
widespread  impact,  said  Peter 
Graf  senior  vice  president  of 
collaborative  solutions  at  SAP. 

“W'hat  it  means  from  a  user 
perspective  Ls  that  the  system 
doesn't  cra.sh."  Graf  said. 
“We’ve  taken  the  reliability  of 
SAP  and  made  (hat  capability 
available  in  Java." 

To  speed  access  to  data  for 
business  intelligence  uses. 
SAP  Ls  beefing  up  the  query¬ 
processing  capabilities  in  Net- 


Weaver  by  adding  advanced 
storage  and  search  techniques, 
such  as  vertical  decomposi¬ 
tion.  horizontal  partitioning, 
smart  compression  and  in¬ 
memory  processing.  It  said  the 
new  features  are  aimed  at 
u.sers  with  high  data  volumes, 
a  large  number  of  simultane¬ 
ous  data  requests  and  unpre¬ 
dictable  types  of  queries. 

The  lava  and  bu.siness  intel¬ 
ligence  upgrades  are  due  in  the 
next  version  of  the  NetWeaver 
platform,  which  is  scheduled 
for  release  next  year. 

SAP  also  intrc^uced  an  up¬ 
grade  of  Net  Weaver’s  Master 


bers  of  the  SNIA's  ILM  Technical 
Working  Group  at  the  ILM  Solu- 
(tons  Conference.  Working 
group  members  also  detailed 
plans  to  develop  best-practice 
guidance  for  users  and  vendors 
10  follow  m  automating  the  mi¬ 
gration  of  data  across  tiers  of 
storage  devices. 

Chief  among  the  efforts  that 
will  take  place  over  the  next  two 
years  are  initiatives  to  standard¬ 
ize  the  way  different  industries 
classify  thw  data  for  storage 
and  create  interoperability  stan¬ 
dards  between  business  appli¬ 
cations  and  the  middleware 
used  lo  manage  data  migration 
procedures. 

‘Classify  the  data,  and  we  can 
build  whatever  storage  facilities 
we  need  to  store  il.‘  said  Jim 
Carlson,  a  senior  technical 


Peter  Dcile  Donne,  CEO  of 
Iron  Mountain  Inc.  in  Boston, 
said  the  archiving  services 
vendor  recertifies  older  busi¬ 
ness  applications  on  its  sys¬ 
tems  after  upgrades  to  ensure 
that  archived  data  can  still  be 
accessed.  Delle  Donne  added 
that  he  has  sometimes  been 
able  lo  avoid  the  costly  prac¬ 
tice  by  saving  data  in  Portable 
Document  Formal  files.  Whh 


Data  Management  module, 
available  immediately.  The 
company  said  it  plans  to  add  a 
global  data  s>'nchruni7.ation 
too!  in  December  (hat's  opti¬ 
mized  for  the  retail  and  con¬ 
sumer  products  industries. 

David  E)obrin,  an  analyst  at 
Cambridge,  Mass.-bascd  con¬ 
sultancy  B2B  Analysts  lne„ 
said  (he  data  synchronization 
tool  is  “terribly  important"  for 
companies  (hat  plan  to  install 
supply  chain  systems  based  on 
radio  frequency  identification 
technology.  It  could  also  play  a 
big  role  in  inventory  manage¬ 
ment  applications,  he  said. 

SAP  has  many  consumer 
product  manufacturers  among 
its  user  ba.se,  Dobrin  said,  so 
“anything  they  can  do  for  them 
in  this  area  will  be  welcomed 
as  a  step,  however  small,  in  the 
right  direction."  O  49962 


staffer  at  IBM's  storage  systems 
division  and  a  member  of  the  ILM 
working  group  within  the  SNIA. 
Carlson  said  it  should  take  the 
working  group  about  six  months 
to  come  up  with  a  methodology 
forclassifyirtg  data. 

Jim  Doustou.  technical  direc¬ 
tor  at  Cart^indge.  Mass.-based 
storage  software  vendor  Per- 
mabrt  Inc.,  is  involved  in  the 
SNIA's  efforts.  He  said  that  once 
standards  are  estabfehed.  data 
classification  shouldn't  be  an  ar¬ 
duous  task  for  users.  Generally, 
the  process  shouldn't  take  more 
than  SIX  to  eight  weeks  per  line 
of  business,  he  said. 

‘Do  not  do  this  as  a  big 
bang.’  Doustou  advised.  But.  he 
added,  ‘you  can't  deploy  [ILM) 
technology  until  this  is  in  place.* 
-LucasMeahan 


PDFs,  “we  can  present  the  in¬ 
formation  for  a  tong  period  of 
time."  he  said. 

But  others  disagreed  that 
PDF  files  arc  a  viable  means 
of  staving  off  business  appli¬ 
cation  upgrades  for  archived 
data. 

“PDF  is  not  the  artswer," 
said  Tom  McGuire,  director  of 
TT  at  a  large  pharmaceutical 
company.  “In  fact,  it’s  a  big 
problem."  McGuire,  who 


asked  that  his  company  not  be 
identified,  noted  that  an  up¬ 
graded  version  of  PDF  soft¬ 
ware  he  purchased  last  year 
wouldn't  access  data  archived 
in  an  earlier  format. 

Jim  Zhou,  a  senior  program¬ 
mer/analyst  in  the  IT  architec¬ 
ture  and  engineering  group  at 
Gcnentech  Inc.  in  South  San 
Francisco.  Calif.,  said  storage 
managers  need  to  convince 
their  company's  business  units 
that  all  of  their  data  doesn't 
have  to  be  stored  on  high-per¬ 
formance  disk  arrays. 

Storage  vendors  should  de¬ 
velop  standardized  proce¬ 
dures  for  IT  departments  to 
follow  in  classifying  data  and 
setting  service-level  agree- 
menus  with  business  units, 
Zhou  said.  He  added  that  busi¬ 
ness  managers  could  then 
choose  from  a  menu  of  ILM 
Options.  O  49929 
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ILM  Projects 


the  Storage  Networking  Indite* 
try  Association. 

Users  and  storage  vendors 
alike  agreed  that  roost  ILM 
strategies  are  still  works  in 
progress.  In  addition  to  the  in* 
temal  challenges  that  IT  man¬ 
ners  have  to  contend  with, 
ILM  standards  are  laddng.  at¬ 
tendees  said.  They  also  cited  a 
need  for  more  automated  data 
migratkin  capabilities  and  bet¬ 
ter  tntegratioa  between  appli¬ 
cations  and  storage  devices. 

But  the  sheer  volume  of  in- 
fonnatioo  makes  it  imperative 


that  companies  begin  classify* 
ing  data  and  managing  it  via 
automated  policies,  said  users 
such  as  Scott  McIntyre,  CIO  at 
Quannun  Corp.  in  Jose. 

The  need  to  comply  with 
the  Sarbanes-Oxley  Act  and 
other  regulations  Trovidcs 
the  opportimity  for  us  to  blud¬ 
geon  our  btrsiness  units  to 
where  we  need  to  go'  with 
ILM,  McIntyre  said.  Quantum, 
which  makes  disk  and  tape 
drives,  is  moving  from  a  stor¬ 
age  approach  built  around  data 
warehousing  to  what  McIntyre 
described  as  an  information 
retention  model  But,  he 
added,  the  company  is  'in  the 
early  stages'  of  the  project. 

The  potential  business  ram¬ 
ifications  of  not  adopting  ILM 
'are  absolutely  huge,'  said  Joel 
White,  lead  IT  architect  at  All¬ 
state  Insurance  Ca  in  North¬ 
brook.  Ill  White  added  that 
Allstate's  ILM  strategy  is 
twofold;  The  insurer  is  trying 
to  achieve  an  enterprisewide 
view  of  all  its  data  while  con¬ 
solidating  and  centralizing  its 
storage  infrastructure. 

Mike  Peterson,  an  analyst  at 
Strategic  Research  Corp.  in 
Santa  Barbara,  CaUL,  and  pro¬ 
gram  director  for  the  SNlA’s 
Data  Maiugement  Forum,  said 
the  key  issues  driving  ILM 
adoption  include  an  inability 
to  effectively  manage  data  and 


SMAPbiisStandaidsWorkto  Help  Boost  ILM  Usage 


LONO  BCACM.  CALIF 

Less  than  VNb  ol  al  corporate 
date  is  hansactioniL  accordno 
to  constetanqr  MoKnssy  &  Co. 
TherastislMdatalhatpoten- 
(ial)r  coiid  be  stored  on  kMrend 
(isk  anays.  ^  prior  to  being 
archived,  the  wKt  nojorlty  of 
dite  is  sSI  siDfBd  on  pdn^ 
dteksysterewMtwntaloperal- 
iig  costs  of  betereen  45  and  55 
cents  per  megabyte. 

If  you're  not  accessing  H 
don't  leave  ft  there,*  said  Lou 
Harvey,  a  member  of  the  Stor¬ 
age  Networtong  Industry  Aseocr- 
atton's  Oeta  Management  Fo¬ 
rum.  'Thafs  where  ytu  cost 
savings  wl  be  raeft^* 

How  to  lower  storage  costs 
through  the  use  of  standardeed 
IM  practices  was  the  focus  of 
several  (Iscussione  lad  by  mem* 

a  desire  to  get  information  out 
of  the  silos  where  it  has  tradi¬ 
tionally  been  stored.  But  deal¬ 
ing  with  the  sheer  inas.s  of 
data  'is  really  an  ominous 
challenge  for  the  IT  group," 
Peterson  said. 

Another  major  issue  identi¬ 
fied  by  conference  attendees 
was  the  need  to  keep  old  ap¬ 
plications  running  in  order  to 
access  and  read  archived  data. 


SAP  Beefe  Up  Java  Support 
Capabilities  for  NetWeaver 


■V  MAMC  L.  SOMOim 

Loerfong  to  penetrate  further 
into  the  software  infrastruc¬ 
ture  market.  SAP  AG  last  week 
announced  plans  to  add  new 
Java  and  business  intelligence 
capabilities  to  its  NetWeaver 
suite  of  middleware  and  appli¬ 
cation  integration  tools. 

At  its  SAP  TecfaEd  2004  de¬ 
veloper  conference  in  San 
Diego,  the  software  vendor 
said  H's  building  technology 
into  NetWeaver  that’s  de¬ 
signed  to  boost  the  reliability 
of  Java-based  applications. 

The  so-called  container  tech¬ 
nology  uses  standard  Java  vir¬ 


tual  machine  code  and  pro¬ 
vides  a  lockdown  feamre  that 
isolates  end  users  from  one 
another  in  order  to  prevent 
system  errors  from  having  a 
widespread  impact,  said  Peter 
Grat  senior  vice  president  of 
collaborative  solutions  at  SAP. 

"What  it  means  from  a  user 
perspective  is  that  the  system 
doesn’t  crash,"  Graf  said. 
'We've  taken  the  reliability  of 
SAP  and  made  that  capability 
available  in  Java." 

To  speed  access  to  data  for 
business  intelligence  uses, 
SAP  b  beefing  up  the  query¬ 
processing  capabilities  in  Net- 


Weaver  by  adding  advanced 
storage  and  search  techniques, 
such  as  vertical  decomposi¬ 
tion.  horizontal  partitioning, 
smart  compression  and  in- 
memory  processing.  It  said  the 
new  features  are  aimed  at 
users  with  high  data  volumes, 
a  large  number  of  simultane¬ 
ous  data  requests  and  unpre¬ 
dictable  types  of  queries. 

The  Java  and  business  intel¬ 
ligence  upgrades  are  due  in  the 
next  version  of  the  NetWeaver 
platform,  which  is  scheduled 
for  release  next  year. 

SAP  also  introduced  an  up¬ 
grade  of  NetWeaver’s  Master 


bm  Of  Ihe  SKA’S  Ulfochrfcte 
VforMng  6roup  al  the  lil  Solu* 
ttans  Conterence.  Walking 
group  membofs  also  deteitod 
plans  to  dwetop  bosHnctice 
(Metenoe  for  usam  and  vondors 
lofolowinautomatingdiemf- 
graUon  of  date  across  Bars  of 
Stonge  ds^oes. 

Chtof  among  toe  efforts  that 
wiM  tele  place  over  the  next  two 
yees  are  tottUlwBe  to  standard- 
in  toe  way  dffierant  Industriee 
dassfty  to*  deb  for  storage 
and  creMe  MeropenMty  stair- 
dards  between  btBtnees  applF 
cations  and  toe  middtewaiB 
used  to  manage  data  migrabon 
procaduiee. 

*Ch5Sily  the  data,  etd  we  can 
buid  whafw  storage  focKes 
we  need  to  skxe  I.*  said  Jkn 
Carlson,  a  senior  technical 

Peter  Delle  Donne.  CEO  of 
Iron  Mountain  Inc.  in  Boston, 
said  the  archiving  services 
vendor  recertifies  older  busi¬ 
ness  applications  on  its  sys¬ 
tems  after  upgrades  to  ensure 
that  archived  data  can  still  be 
accessed.  Delle  Donne  added 
that  be  has  sometimes  been 
able  to  avoid  the  costly  prac¬ 
tice  by  saving  data  in  Portable 
Document  Format  files.  With 


Data  Management  module, 
available  immediately.  The 
company  said  it  plans  to  add  a 
global  data  synchronization 
tool  in  December  that's  opti¬ 
mized  for  the  retail  and  con¬ 
sumer  products  industries. 

David  Dobrin.  an  analyst  at 
Cambridge,  Mass.-ba$ed  con¬ 
sultancy  B2B  Analysts  Inc., 
said  the  data  sync^nization 
tool  is  'terribly  important'  for 
companies  that  plan  to  install 
supply  chain  systems  based  on 
ra^o  frequency  identification 
technology.  It  could  also  play  a 
big  role  in  inventory  manage¬ 
ment  applications,  be  said. 

SAP  has  many  consumer 
product  manufacturers  among 
its  user  base.  Dobrin  said,  so 
'anything  they  can  do  for  them 
in  this  area  wrill  be  welcomed 
as  a  step,  however  small  in  the 
right  direction.”  O  49962 


stsRei  at  CM'S  storags  systems 
dMsiori  and  a  mrniMr  of  tha  ILM 
working  i^oup  wIMn  the  SMA. 
Cartoon  said  ft  shoted  take  toe 
working  group  about  SK  months 
to  corne  tto  with  a  irwihodology 
for  ctossifytog  data. 

JbnOoustou.techfiicaJdbac- 
tor  at  Cambridge,  Mass. -based 
stongesoftwerevendorPler- 
mtoft  Inc.,  to  irwQlved  In  toe 
SMA's  efforts.  He  said  toet  once 
standteds  are  esteUtohod,  dtea 
ctessiliealton  shoukfol  be  an  ar¬ 
duous  task  for  uaers.  Generaly. 
the  process  *oukfo1  take  more 
than  six  to  eighi  weeks  par  line 
of  business,  he  said. 

"Do  not  do  this  as  a  big 
bang,”  Ooustou  adweed.  But  he 
added,  Vou  cani  deploy  [ftjyf] 
technology  ifitH  this  to  In  place.* 
-LucasMeatan 

PDFs,  “we  can  present  the  in¬ 
formation  for  a  tong  period  of 
time,'  he  said. 

But  others  disagreed  that 
PDF  files  are  a  viable  means 
of  staving  off  business  appli¬ 
cation  upgrades  for  archived 
data. 

“PDF  is  not  the  answer." 
said  Tom  McGuire,  director  of 
IT  at  a  large  pharmaceutical 
company.  'In  fact,  it's  a  big 
problem."  McGuire,  who 
asked  that  his  company  not  be 
identified,  noted  that  an  up¬ 
graded  version  of  PDF  soft¬ 
ware  be  purchased  last  year 
wouldn’t  access  data  archived 
in  an  earlier  format. 

J'un  Zhou,  a  senior  program- 
mer/anafyst  in  the  IT  architec¬ 
ture  and  ei^ineering  group  at 
Genemcch  Inc.  in  South  San 
Francisco,  Calif,  said  storage 
managers  need  to  convince 
their  company’s  business  units 
that  all  of  their  data  doesn’t 
have  to  be  stored  on  high-per¬ 
formance  disk  arrays. 

Storage  vendors  should  de¬ 
velop  standardized  proce¬ 
dures  for  IT  departments  to 
follow  in  classifying  data  and 
setting  service-Icvei  agree¬ 
ments  with  business  units. 
Zhou  said.  He  added  that  busi¬ 
ness  managers  could  then 
choose  from  a  menu  of  ILM 
options.  049929 


MLB.com  knows  the  power  of  SAS*  software... 


How  does  IVILB.com  give  fans 
the  ultimate  baseball  experience? 


Allan  H.  Bud'  Selig 


Millions  of  tins.  Thirty  teams.  One  passim.  And  24/7  access  to  it  all  dutxigb  MLB.com.  At  the  official  site 
of  Major  League  Baseball,  fans  can  experience  baseball  in  a  whole  new  way  -  from  live  ballgames  to  stats 
in  real  time,  from  history  to  faiUasy,  across  the  league  or  by  connecting  to  individual  club  sites.  MLB.cmn  is 
the  richest,  deepest  source  of  original  baseball  news  and  highli^ts  on  Ac  Internet.  SAS  is  proud  to  provide 
the  state-of-the-art  data  management,  predictive  analytics  and  marketing  automation  software  that^  helping 
Maim  League  Baseball  enrich  the  interactive  experience  for  Ae  hundreds  of  millions  of  visitors  who  make 
MLB.cmn  such  a  big  hit.  To  fmd  out  more  ^ut  SAS,  visit  our  Web  site  or  call  toll  free  1  866  887  1363. 

www.sas.com/mlb 
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Meet  the  Winners 
at  SNW 

"Best  Practice”  Storage  Users 
to  Be  Announced  October  25th 
at  Storage  Networking  Worid 
Conference 

Storage  Networking  World  (SNW),  in  conjunction  with  Computerworld 
and  the  Storage  Networking  Industry  Association  (SNIA), 
proudly  presents  the  fifth  SNW  “Best  Practices  in  Storage" 

Awards  Program.  This  program  honors  ten  IT  user  "best  practice" 
case  studies  selected  from  a  field  of  qualified  finalists. 

Two  awards  will  be  presented  in  each  of  the  following  five  categories: 

Systems  Implementation 


Recognizes  the  successful  design,  implementation  and  management  of  an  interoperable  environment. 

This  category  also  demonstrates  the  ability  to  source  from  multiple  vendors. 

storage  Reliability  and  Data  Recovery 

Acknowledges  implementation  strategies  and  programs  to  insure  highly  available  information  and  data  access, 

Data  Lifecycle  Management 

Exemplifies  solutions  and  processes  to  manage  the  information  over  its  lifecycle. 

Industry  Regulation  Compliance  and  Corporate  Governance 

Spotlights  solutions  being  deployed  to  meet  or  exceed  industry  regulations  specified  by  the  SEC,  Patriot  Act,  HIPAA, 
Sarbanes-Oxley,  DoD,  and  CFR. 

Innovation  and  Promise 

Successful  pioneering  of  leading/bleeding-edge  storage  networking  technology  will  be  recognized  in  this  category. 

SNIA 


iCOVPaiOWHLD 
'snuciEnmBaMWMu 

Best  Practices 

IN  ST0RA6E 


AWARDS  PROGRAM 


AWARDS  PROGRAM 
EXCLUSIVELY  SPONSORED  BY: 

EMC' 

where  information  lives 


^SNIA 


WniBMU 

STlUffiNHWIliaMWIlIlD 


October  25-26.  2004  •  JW  Marriott  Grande  Lakes  Resort  •  Ortando,  FL 


CUSTOM  PRODUCED  BY; 

COMPUTERWORLD 

The  Voice  of  IT  Management 


CO-OWNED  AND  ENDORSED  BY 


www.computerwortd.con) 


DHS  Faulted  for  Terrorist  Data  Woes 


BV  TODD  m.  VirEIBS 

The  U^.  Department  of 
Homeland  Security  still  isn’t 
doing  enough  to  integrate  in¬ 
formation  that’s  stored  in  a 
dozen  terrorist  watch-list 
databases  maintained  by  nine 
federal  agencies,  according  to 
a  report  by  the  inspector  gen¬ 
eral  at  the  DHS. 

The  report,  which  was  is¬ 
sued  internally  in  August  and 
made  public  on  Oct  1,  criti¬ 
cizes  the  DHS  for  “^ot  playing 
a  lead  role  in  consolidating  ter¬ 
rorist  watch-list  information” 
despite  the  fact  that  the  agency 
was  given  that  responsibility 
«^en  it  was  creat^  in  2002. 

The  formation  last  year  of 
two  interagency  organizations 
by  the  CIA  and  the  FBI  has 
helped  the  government  make 
progress  in  sharing  watch-list 
data  that’s  used  to  monitor  and 
apprehend  terrorists,  the  re¬ 
port  says.  But,  it  adds,  planning, 
budgeting  and  staffing  issues 
related  to  the  database  inte¬ 
gration  continue  to  be  handled 
on  an  ad  hoc  basis  because  of 
“the  lack  of  central  leadership 
and  oversi^t,”  which  the  DHS 
should  be  providing. 

Coordination  Chalenges 

The  report,  signed  by  DHS  In¬ 
spector  General  Clark  Kent 
Ervin,  notes  that  the  ^ncy 
said  it  initially  lacked  the  re¬ 
sources  to  coordinate  the 
watch-list  worit.  In  addition, 
the  DHS  faced  major  IT  chal¬ 
lenges,  including  ffie  need  to 
integrate  the  financial  systems 
of  its  22  member  agencies,  de¬ 
velop  a  departmentwide  IT  in¬ 
frastructure  and  create  an  in¬ 
formation  assurance  program. 

And  in  a  written  response  to 
the  inspector  general’s  report, 
Frank  Libutti.  the  DHS  under¬ 
secretary  for  information 
analysis  and  infrastructure 
protection,  said  he  strongly 
diss^rees  that  the  agency  has 
the  lead  responsibility  for  con¬ 
solidating  the  watch-list  infor¬ 
mation  in  the  first  place. 

A  presidential  directive 
signed  in  Septenfoer  2003 
stated  that  responsibility  for 
the  effort  would  rest  with  the 
U.S.  Department  of  Justice, 


Libutti  wrote.  He  went  on  to 
reject  the  report’s  recommen¬ 
dation  that  ^  unit  set  up  an 
interagency  group  to  identify 


technology  and  resource 
needs  and  then  coordinate 
their  allocatioa 
A  spc^teswoman  for  Ervin 


said  the  disagreement  over 
responsibility  means  that  a 
consensus  will  have  to  be 
built  between  the  DHS  and 
DOJ  before  more  data-sharing 
improvements  can  be 
”We  can’t  force  their  hand,” 


the  spokeswoman  said. 

DOJ  officials  didn’t  return 
calls  seeking  comment  A 
spokesman  for  the  FBL  which 
is  pan  of  the  DOJ.  declined  to 
comment  about  the  inspector 
general's  report  O  48B06 


Align  IT  with  Your 
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a  Small 


Remedy  IT  Sefvice  Management 
solutions  from  BMC  Software  help 
you  align  IT  with  your  business — 
whether  you  are  a  small,  mid-sized 
or  global  enterprise. 


Find  the  Remedy  solution  that  is  right 
for  you  at  wwwr4«nMdy.ceni/1tsin 
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Handicapped  TMiking 


Three  weeks  ago  in  this  space,  I  men¬ 
tioned  that  I  had  a  signed  copy  of  Bill 
Gates’  book  Business  @  the  Speed  of 
Thought,  and  I  said  I’d  auction  it  off  to 
raise  money  for  The  ALS  Association. 
The  winning  bid  was  an  even  $100,  and  it  came  from 
Steve  Jenkins  of  the  M.D.  Anderson  Cancer  Center 


in  Houston.  I  know 
Steve's  generosity  is 
greatiy  appreciated  by 
the  association,  which  is 
dedicated  to  finding  a 
cure  for  ALS,  also  known 
as  Lou  Gehrig's  disease, 
and  by  my  dad,  who  is 
one  of  its  victiins. 

In  that  same  column,  I 
refened  to  the  proclivity 
of  ‘Xinux  loonies’*  to  re* 
ward  anyone  who  makes 
a  critical  comment  about 
Linux  with  a  barrage  of  bate  mail. 

In  fact,  I  was  speaking  from  experi¬ 
ence;  A  few  years  ago,  I  wrote  a 
tongue-in-cheek  column  in  which  I 
poked  fun  at  the  stupid  penguin  and 
at  the  absurd  cult  following  of  Linux 
creator  Linus  Torvalds.  And  sure 
enough,  I  received  dozens  of  ven¬ 
omous  e-mails  from  his  followers.  I 
remember  one  in  particular  that  said 
I  should  “bum  in  heU,"  and  another 
that  labeled  me  a  “Bill  Gates  love 
slave.*  In  fact,  a  common  theme  of 
these  folks  is  that  anyone  who  would 
dare  disparage  Linux  is  necessarily  a 
toady  of  Gates  and  Microsoft  —  for 
which  they  seem  to  have  an  irra¬ 
tional  and  disnirbingly  intense 
loathir^ 

Predictably,  the  e-mails  I  received 
from  the  Linux  crowd  following  my 
“loonies*  comment  chided  me  for 
expecting  anyone  to  be  interested  in 
a  book  written  by  Gates. 

“I  noticed  your  intent  to  auction 
off  your  autographed  copy  of  Busi¬ 
ness  @  the  Speed  ofThou^,”  one 
person  wrote.  “I  checked  Amazon, 
and  the  going  price  is  SO.Ol.  New 
copies  are  going  for  $0.98.  Since  your 


copy  is  signed  by  Gates, 
m  bid  a  whole  dollar.* 
And,  be  continued,  “Seri¬ 
ously,  why  don't  you  auc¬ 
tion  off  a  boxed  Linux 
(distribution]  like  Man¬ 
drake  or  SUSE  (the  least 
expensive  you  can  find) 
at  the  same  time.  If  you 
do.  ni  start  the  bidtting 
at  $100.* 

That  theme  was 
echoed  by  another  corre¬ 
spondent:  “WeU,  consid¬ 
ering  how  many  times  Fve  had  to 
deal  with  Billy’s  products  and  virus¬ 
es,  clueless  tech  support,  blue 
screens  of  death,  security  boles, 
hackers  —  I  tell  ya  what,"  this  person 
wrote.  Tou  give  me  20  bucks,  and 
1*11  haul  it  to  the  dumpster  for  ya. . . . 
Anyone  that  thinks  Fd  actually  pay 
for  that  thing  is . . .  just  a  foot* 


What  these  people  just  don’t  seem 
to  get  is  that  they  don’t  need  to  be 
so  mindlessly  defensive  anymore. 
Linux  is  no  longer  just  the  operating 
system  of  choice  for  a  band  of  free- 
spirited,  defiant  techno-geeks.  It’s 
the  operating  system  of  choice  for 
a  growing  number  of  Fortune  500 
companies  that  are  using  it  to  run 
critical,  enterprisewide  applications. 
So  these  sorts  of  rants  bespeak  an 
outdated  mentality  that  can  only 
handicap  Linux’s  adoption  by  per¬ 
petuating  the  impression  of  its  Im¬ 
maturity. 

What’s  especially  harmful  is  that 
it  tends  to  be  a  mentality  of  intoler¬ 
ance.  Alter  I  thanked  that  second 
correspondent  for  taking  the  time  to 
write,  he  sent  me  this  reply:  “That 
wasn’t  a  joke.  Fve  been  regularly  as¬ 
tounded  that  people  accept  this  poor- 
quality  software  as  much  as  they  da 
Heck,  if  I  had  cranked  out  this  kinda 
crap  when !  was  a  junior  program¬ 
mer,  Fd  be  an  auto  mechanic  now!* 

I  wonder.  I’ve  known  some  bril¬ 
liant.  dedicated  auto  mechanics.  Like 
my  dad,  for  one.  O  49904 
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THORNTON  A.  MAY 

The  Why  and 
What  or  the 
CFO  for  rr 

FRANiaiN  ROOSEVELT’S 
last  written  words  from 
Warm  Springs,  Ga.,  in  the 
spring  of 1945  counseled  global 
leaders  and  ordinary  citizens 
alike  on  the  need  **to  cultivate 
the  science  of  human  relationships.* 

On  the  IT  scene,  a  new  player,  the  CFO 
for  IT.  is  playing  a  huge  role  in  this 
area,  bridging  the  very  significant  gap 
between  the  internal  IT  and  financial 
camps  (see  “The  Number  Crunchers,” 
page  37). 

rU  discuss  what  a 
CFO  for  IT  does,  but 
first,  let's  look  at  the 
state  of  this  relation- 
ship.  Data  collected 
over  three  days  from 
300-plus  CFC>s  at¬ 
tending  the  IT  Lead¬ 
ership  Academy, 
sponsored  by  Law- 
son  Software,  rinam- 
biguously  demon¬ 
strates  that  IT  lead¬ 
ers  and  finance  pro¬ 
fessionals  need  to  work  much  harder  to 
get  on  the  same  page.  Here's  some  of 
what  we  learned  from  the  CFOs: 

WHAT  IS  YOUR  HUMAN  RELATIOMSHP 
WITH  IT  LEADERS? 
'MybetfIrimdB.' 

TfuMedcolaaQuaB.'  29% 

'BiBkMas  colaagu88.no  more,  no  ta.'  99% 
"FboplBlwnyMnit*  «% 

Tnareioa.*  9% 

WHAT  IS  YOUR  BUSMESS  REUTIQNSHIP 
WITH  YOUR  COMPANY'S  (90? 

Wre  joinid  at  •»  )%  are  n  aynchranti^ 
MalmoMUahaaclia9i8f8aanlBnca&'’  9% 
Tki  IM  big  Mngs,  M  pntfr  much  agm 
'There  are  a  few  apoli  when  «w 
agreatodlaagrea*  99% 

*Weancai«tartyargulno.*  9% 

’SarnaMoasllhMOhegtivlalromMats.'  9% 

HOW  OFTEN  00  YOU  AND  rr  LEADERS  MST 
PHYSiCALIY  TO  TALK  ABOUT  COMMON  ISSUES? 
EMydar  W% 


w-compulerarondcom 
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Every  week 

STRb 

B«ty  month 

96% 

Einry  quarter 

T1% 

HOW  LONG  HAVE  YOU  WORKED 
WTTH  THE  CURRENT  CH>? 

Lass  Nnf)  yeas 

12% 

Lass  than  five  yaars 

46% 

Less  than  two  yesR 

24% 

Less  than  a  year 

«% 

DO  IT  LEADERS  SPEAK  THE 
LANGUAGE  OF  BUSINESS? 

Fluertfy 

28% 

PassMily 

96% 

Muto 

17% 

00  FMANCUL  LEADERS  SPEAK  THE 
LANGUAGE  OF  TECHNOLOGY? 

Fkiemiy 

9% 

Pttaiily 

96% 

Muls 

46% 

Since  the  term  chi^ifVbrmorton  offi¬ 
cer  first  appeared  in  1987  (in  WilUain  R. 
Synott’s  book  77ie  Iitformation  Weapon), 
the  chieftains  of  the  technology  and  fi¬ 
nance  tribes  have  mostly  operated  in  a 
world  of  antagonism  and  limited  un- 
derstandii^  of  each  other's  roles. 

A  detailed  analysis  of  organizations 
that  extract  the  highest  value  from  IT 
investments  today  reveals  three  com¬ 
mon  traits: 

■  A  good  working  relationship  be¬ 
tween  IT  and  finance. 

■  A  well-managed,  highly  interac¬ 
tive,  real-time  and  reasonably  trans¬ 
parent  IT  investment  process. 

■  The  presence  of  a  tribal  go- 
between  “  frequently  referred  to 
as  the  CFO  for  IT. 

What  do  CFOs  for  IT  do? 

They  report  to  the  CFO  but  work 
for  the  CIO.  They  put  together  the 
numbers  for  IT.  They  manage  ITs 
assets.  They  work  with  their  col¬ 
leagues  in  foe  finance  department  to 
make  frnancial  decisions  (such  as 
Much  depreciation  schedules  to  use 
and  whefoer  to  lease  or  buy  equip¬ 
ment).  They  maintain  high-trust  back- 
channel  relations  with  executives  in 
foe  finance  department.  They  manage 
procurement.  They  manage  foe  con¬ 
tractual  side  of  the  relationship  with 
vendors,  including  auditir^  vendor 
performance.  They  establish  common 
language  and  methods  for  identifying 
beneftts  of  IT  investments.  They  man¬ 
age  benifomafo  studies  and  IT  perfor¬ 
mance  information. 

The  CFO  for  IT  will  play  a  big  part 
in  foe  future  of  IT.  O  498^ 


PIMM  FOX 

Public  Net 
Connections 
Put  at  Risk 

As  WE  HEAD  into  the 
home  stretch  of  the 
presidential  election, 
consider  this  snafu:  Money  to 
support  high-speed  Internet 
and  telephone  service  in  public  li¬ 
braries  and  schools,  as  mandated  by 
foe  Telecommunications  Act  of  19^  is 
being  tied  up  in  foe  type  of  red  tape 
that  would  make  a  Ch^tmas  present 
impossible  to  open.  About  $1  billion 
that  schools  and  libraries  were  expect¬ 
ing  from  the  E-Rate  program  to  help 
pay  foe  bills  for  Internet  and  telep^ne 
service  won’t  be  arriving  anytime  sooa 
Why?  Because  of  a  bureaucratic  col¬ 
lision  between  the  E-Rate  program  and 
foe  Anti-Deftciency  Act.  w^ch  is  de¬ 
signed  to  enforce  rigorous  accounting 
methods  for  federal  programs.  The 
E-Rate  prx^ram  typically  makes  fman- 
cial  pledges  to  scl^ls  aiKl  libraries 
that  are  greater  than  what  is  in  its  bud¬ 
get  Pn^ram  managers  say  this  isn't  a 
problem  because  the  schools  and  li¬ 
braries  spend  less  than  80%  of  foe 
money  tl^  request.  But  the  Anti-Defi¬ 
ciency  Act  says  this  isn’t  foe  right  way 
to  run  a  government  prt^ram.  and 


Michael  K.  Powell,  chairman  of  the 
Federal  Communications  Commission, 
isn't  going  to  rock  foe  boat  on  this  one. 
He  was  reported  as  sayii^  that  any 
funding  delays  are  temporary  while  be 
gels  the  program  on  a  more  solid  foot¬ 
ing.  That  soutmIs  nice,  but  why  then 
did  foe  FCC  reduce  foe  level  of  phone 
company  contributions  to  the  E-Rate 
program  by  $550  million? 

The  FCC  says  it  did  this  because  the 
nonproftt  Universal  Service  Adminis¬ 
trative  Co.  (USAC),  which 
runs  the  program,  speared 
to  have  too  much  ci^  on 
the  books,  and  that  didn't 
look  good. 

The  FCC  and  foe  While 
House  have  had  a  couple 
of  years  to  work  this  out 
Where  is  foe  education 
president  on  this? 

Anne  L  Bryant,  a  board 
member  ofUSAC  says  it's 
more  than  policy  —  it's  pol¬ 
itics.  She's  been  quoted  as 
saying  that  *tbere  was  a  lot  of  pressure 
to  ke^  the  [phone  company]  contribu¬ 
tion  factor  down  umil  the  eleaion 
passes,  after  which  it  will  then  have 
to  rise  again."  And  when  it  does,  you 
can  expect  foe  cost  to  be  passed  on  to 
consumers. 

But  in  the  meantime,  some  states 
have  signaled  that  foe  lack  of  funding 
could  shut  down  services  for  students 
and  public  libraries. 

Does  this  mate  sense? 

Not  to  otc. 

It  doesn't  make  sense  to  put  stu¬ 
dents  and  library  visitors  at  a  disad¬ 
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vantage  because  a  bunch  of  poUiidans 
in  Washington  want  to  strange  a  piece 
of  legislaiion  that  is  already  law. 

But  this  shouldn't  come  as  a  sur¬ 
prise.  Politicians  attack  legislation  they 
don't  tike  with  delays  and  obfuscation. 

After  all.  students  don't  vote.  And. 
heck,  who  goes  to  foe  library?  Only 
those  who  don't  hav‘e  lots  of  money  to 
spend  on  books  and  Internet  access  — 
or  on  political  contributions. 

Our  priorities  are  screwed  up  if  we 
don’t  sec  the  urgency  in 
spending  money  each  year 
to  mate  sure  schools  and 
libraries  have  the  funds  to 
Slay  connected. 

By  creating  foe  delay,  the 
White  House  and  FCC  are 
igniting  three  problems. 

The  first  is  that,  given 
the  inertia  of  foe  federal 
government,  commitments 
already  made  ~  about 
SI  billion  —  won't  be  met. 
The  second  is  chat 
puttii^  off  foe  ending  means  having 
to  spend  more  in  subsequent  quarters. 

And  fmally.  the  worst  problem  of 
them  alb  CfOvenunent  small-minded¬ 
ness  is  hunii^  a  group  of  U.S.  citizens 
in  a  way  that  shuts  them  out  of  foe  In¬ 
ternet  and  prevents  equal  access  to  in¬ 
formation  and  opportunity.  And  peo¬ 
ple  wonder  why  pities  is  a  dirty 
word.  049638 
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In  Praise  of  Change 

The  sTOftv  DETAiuNe  Pau  in- 
gevaldson's  IT  Surwal  Guide' 
[(luickUnk  48479]  was  a  «v8lik)(n 
piece  i  enioyed  reading  about  a  fel¬ 
low  00  6  moving  on  to  the 

next  phase  of  Me  by  choice. 
JohnTownaand 
Cartsbad.  Calif. 


One  More  Ljoo(ihole 
In  Data  Destruction 

iTIMHTBCUKRK.IOaddWWlh- 
er  caveat  to  the  matters  addressed 
In  Rank  Hakes' column  of  Aua  30 
rShrel  Bun.  frase.*  QuicktJnk 

4907f].Users.e6pecalydevelop‘ 

ers  md  other  techies,  often  main¬ 
tain  personal  backups  of  whatever 
they're  working  on  and.  often,  any¬ 


thing  they've  ever  worked  on.  Why 
would  Ih^  do  so  if  it  vioiaias  cotT^ 
parry  security  poAcy?  Because 
they've  been  burned  by  lost  data.  As 
a  pracbcai  matter,  this  nd(  exceeds 
by  at  ieest  an  order  of  maonitude 
(he  risk  of  data  theft.  Naluraly. 
when  users  m^  personal  back¬ 
ups,  miormai  cop«5  wi  appear  on 
workstabon  drives.  COs.  OVDs  and 
8l  of  the  other  kinds  of  medu  on  the 
employee's  home  computer.  Of 
couse.  not  all  of  the  copies  are  re¬ 
membered  when  It's  brne  to  cMan 
house  or  move  on  to  another  em¬ 
ployer.  Vbu  can1  avoid  this  tenden¬ 
cy  of  employees  anlireiy.  but  Ihe 
reasonable  among  them  w4  be  tv 
more  likety  to  comply  M  a)  the  krm  , 
backs  up  thee  work  in  a  regular,  di- ; 
gent  and  disaplined  manner  i 
b)  the  backups  are  Irequenlly  test-  ! 


restored:  and  c)  the  employees  are 
made  enbrely  aware  of  a)  and  b). 

Where  a  krm  alows  worir  to  be 
donefromhome.4na(^bereason- 
ablelortloproMleorsfosNkrema- 
chnes  that  comect  to  die  VPN 
Then  N  rnght  reasonatty  nQuesi 
stafi  to  present  these  dedicated  ma¬ 
chines  for  mamienance  at  penodic 
tfitervWs  or  at  separation 
Larry  Bnmaia 
Alien.  Texas 


Value  Experience 

HEA4IHEMB  to  ths  Statement: 

'Smart  companies  are  enticing 
their  older.  Mser  IT  wokers  to  re¬ 
main  on  the  job  a  Mtle  bn  longer* 
f  Staying  Riwer.*  Quckljnk  48720). 
Most  are  ialtening  their  wal¬ 
lets  wdh  the  so-caAad  cost  savings 


fewnd  ffi  offshoring.  But  retainng 
IhemiMuabwhowroieyatfsys- 
terns  and  have  hey  busness  knowl¬ 
edge  is  nvaiuabie. 

Tkn  AbrecM 
DBA,  Wadwrvia  Bank, 
Winston-Salem.  MC 
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1.  Buyer  downloads  competitive  pricing. 

2.  Manager  securely  retrieves  invoices. 

3.  Driver  obtains  specific  delivery  details. 

4.  Ex-vendor  denied  access  to  Intranet 

5.  Customer’s  identity  protected  from  theft 


MDOI^ARE  IS  IBM  SOFTWARE  lder%  rrwagem^ 
sofhvare  thal  uses  single  sigrHxi  technology  to  ensure  that 
the  right  access  is  given  to  the  right  people.  Open.modula^ 
Tivoli  security  software  that  automates  processes  betvreen 
employees,  partners,  customers  and  suppliers  -  while 
helping  to  reduce  costs.  It's  how  everyone  involved 
gets  the  information  they  need.  On  time.  And  on  demand. 
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A  FREE  OFFER  TO  lOOK 
AT  A  REmO  OAIIOASE 

For  your  next  generation  of  applications,  a  development  environment  that  dramatically 

move  to  the  next  generation  of  database  reduces  the  time  to  build  and  modify  Web 

technolo^.  We’re  offering  a  fiee,  fully  functional,  applications. 

non-expiring  copy  of  Cachf,  *e  post- relational  The  reliability  of  Cache  has  been  proven  in 

database  that  uniquely  combines  advanced  “life-or-death”  applications  at  thousands  of  the 

objects  and  high  performance  SQL.  world’s  largest  hospitals.  With  its  high  performance 

With  Cache,  no  mapping  is  required  between  and  low  maintenance.  Cache  delivers  your  vision 
object  and  relational  views  of  data.  Which  of  a  better  DBMS. 

means  huge  savings  in  both  development  and  We  are  InterSystems  -  a  specialist  in  data  manage- 

processing  time.  ment  for  over  twenty-six  years,  providing  24x7 

Applications  built  on  Cache  are  massively  support  to  4  million  users  in  88  countries.  Cache  is 

scalable  and  lightning-fast.  Plus,  they  require  available  for  Windows,  OpenVMS,  Linux  and  major 

minimal  or  no  database  administration.  UNIX  platforms,  and  it  is  deployed  on  systems  rang- 

More  than  just  a  database  system.  Cache  has  ing  from  two  to  over  10,000  simultaneous  users. 

InterSystems  ^ 

^  CACHE 

Make  Applications  Faster 

iTy  a  letter  iatalase.  Ftr  fret. 

Download  a  free,  friily-frinctionai,  non-expuing  cc^y  of  Cach^  or  request  it  on  CD  at  www.InterSvstems.com/Free 
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Express  Delivefy 

Integrated  appliances  offer  a 
range  of  tec^ologies  to  im¬ 
prove  the  speed  and  security 
of  Web-enabled  applications. 

P^28 


FUTURE  WATCH 

Grazing  the  Nanograss 

A  material  made  of  microscopic  silicon  posts,  nano¬ 
grass  may  put  a  zoom  lens  in  your  cell  phone.  Bell  Labs' 
David  Bi^op  (right)  holds  a  chip  with  2S6  nanograss 
micromirrors  for  network  switching.  Page  90 


Though  federated  identity  managementtech- 
nologies  promise  improvkl  access  to  networks 
and  cost  savings,  issues  of  trost  and  interoper¬ 
ability  slowadoption.  BY  JAIKUMAR  VUAYAN 

EXTENDING 

Identity 


The  reduced  identity  admin¬ 
istration  costs,  improved  ac¬ 
cess  to  cross-organizational 
applications  and  better  secu¬ 
rity  promised  by  federated  identity 
management  systems  are  finally  be¬ 
ginning  to  drive  corporate  interest, 
say  proponents  of  the  technology. 

But  oiganizational  trust  concerns 
and  nagging  interoperability  prob¬ 
lems  continue  to  pose  big  ch^- 
lenges. 

“Identity  federation  has  been 
talked  about  for  some  dme.  but  it  is 
only  now  that  we  are  really  seeing  a 
number  of  customers  showing  inter¬ 
est  in  it."  says  Jason  Lewis,  vice  presi¬ 
dent  of  product  management  at  RSA 
Security  Inc.  in  Bedford,  Mass. 

*The  main  reason  «^y  users  are 
looking  at  federated  ID  management 
b  to  make  it  easier  to  do  business  on¬ 
line  for  their  customers,  business 
partners  and  their  employees.”  he  says. 

Identity  federation  allows  users  to 
present  a  single  set  of  identity  and 
authentication  information  to  access 
applications  and  services  across  multi¬ 
ple  domains  and  distributed,  heteroge¬ 
nous  networks.  A  federated  system 
allows  a  user's  identity  in  one  domain 
to  be  used  to  gain  access  to  resources 
in  another  domain  without  the  need 
for  separate  authentication. 

F^erated  i^ndty  projects  enable 
single  sign-on  m  cross-organizationaJ 
resources,  while 
other  identity 
management 
systems  focus 
on  improving  in¬ 
ternal  access  to 
•  resources. 

*  One  con^}aDy  that’s  implementing 
•  cross-domain  authentication  is  insur- 
*  anoe  provider  Nationwide  Financial 
•  Services  InCn  which  recently  deployed 
•  a  federated  identity  system  using  tecb- 
*  oology  from  RSA  Semirity. 

•  The  system  lets  thousands  of  Na- 
*  tionwide  insurance  agents  and  brokers 
^  go  to  a  central  portal  she  where  they 
•  can  access  the  Cohiznbus,  Ohio-based  i 


SECURITY  MANAOER'S  JOURNAL 

Security  Review  Uncovers 
Rampant  Vims  Infe^ons 

“C.J.  Kelly."  our  new  jountal  writer,  finds 
that  she  has  a  big  problem  just  as  the  IT 
auditors  are  scheduled  to  arrive.  Page  32 


company's  applications  as  well  as  ap¬ 
plications  hosted  on  sites  belonging 
to  some  of  its  partners. 

Previously.  Nationwide's  agents 
needed  to  create  separate  accounts 
and  passwords  with  the  third  parties 
to  access  their  applications.  Tlje  part¬ 
ners,  in  turn,  needed  to  maintain  their 
own  lists  of  usernames  and  passwords 
for  Nationwide's  agents. 

With  identity  federation,  the  agents 
have  to  authenticate  themselves  only 
once  on  the  central  Nationwide  portal 
and  simply  click  on  the  appropriate 
links  to  access  applications  on  the 
partner  sites. 

RSA's  Federated  ID  Manager  tech¬ 
nology  intercepts  an  agent's  request 
with  his  Ic^-in  information.  It  gener¬ 
ates  an  racrypted  Security  Assertion 
Markup  Lang^e  (SAML)  message 
containing  the  user’s  identity  profile 
and  other  authentication  information 
that  the  partner  needs  in  order  to  let 
the  user  access  its  applications. 

The  SAML  assertion  and  the  brows¬ 
er  session  are  then  directed  to  the 
partner’s  site,  where  another  federa¬ 
tion  server  or  agent  parses  the  pack¬ 
aged  identity  information  and  uses  it 
to  grant  access  to  the  application  the 
agent  wanted. 

Such  cross-domain  identity  asser¬ 
tion  can  yield  multiple  benefits,  says 
Daniel  Blum,  an  analyst  at  Burton 
Group  in  Midvale,  Utah. 

"There  are  many  different  use  cases 
for  federation  in  the  business-to-busi- 
ness,  busmess-to-employee  and  busi- 
ness-to-consumer  [areas},”  Blum  says. 
For  example,  an  organization  might 
federate  identities  to  provide  employ¬ 
ees  with  access  to  be^fits  informa¬ 
tion.  enable  better  information  access 
to  business  partners  or  deliver  more 
integrated  services  to  consumers. 

Federation  can  also  improve  securi¬ 
ty.  For  example,  since  identity  informa¬ 
tion  is  centrally  administered  and 
manned,  it  becomes  ea^r  for  compa¬ 
nies  to  deprovision  access  to  federated 
resources  when  an  employee  leaves  a 
company  or  is  terminate 
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Such  K'ncfus  have  convinced  a 
sm,dl  but  grim  ing  number  of  compa¬ 
nies  Uj  implement  federated  identity 
management  syiitems. 

■  Harv  ard  Pilgrim  Health  Care  Inc. 
is  using  a  federated  identity  model  to 
pri*sent  members  with  claims  informa¬ 
tion  from  a  partner  site.  Tlie  health 
care  organization  ha.s  deployed  tech¬ 
nology  from  Waltham.  Mas.s.-based 
Netegrity  Inc.  that  allows  it  to  take  a 
member's  identity  information  and 
assert  it  on  the  claims  presentation 
partruT's  Web  site.  The  ability  to  deliv¬ 
er  such  access  via  a  federated  portal  is 
a  crucial  competitive  advantage,  says 
Ken  Patterson,  information  security  of¬ 
ficer  at  Wellesley.  Mass.-based  HPH(^ 

■  R>r  the  U_S.  Na\y.  identity  federa¬ 
tion  is  a  ci»a*  enabler  in  a  massive  ID 
management  pnrjcet  designed  to  make 
it  ca.sitT  for  over  800,000  ship-  and 
land-based  naval  personnel  to  access 
thousands  of  scattered  applications  us¬ 
ing  a  single  sign-on.  When  complete, 
the  system  will  allow  a  sailor  or  ma¬ 
rine  to  use  a  single,  unique  Naval  Net¬ 
work  Identity  to  access  scores  of  appli¬ 
cations  and  network  services.  Previ¬ 
ously.  users  had  to  maintain  dozens  of 
usernames  and  passwords  to  access 
these  different  resoutees.  say's  Terry 
Howell,  enterprise  services  lead  at 

the  program  exc*cuiivc  office  for  the 
Navy's  Command.  Control,  Communi¬ 
cations.  Computers  and  Intelligence 
protect  at  the  Space  and  Naval  Warfare 
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systems  center  in  San  Diego,  Cuperti- 
[  no,  Calif.-based  l)bli.\  Inc.  is  providing 
I  the  Navy  with  the  federated  SAML  au- 
I  ihentication  technology  that  is  needed 
to  assert  identities  across  domains. 

I  ■  Southwest  Airlines  Co.  has  de- 
I  ployed  Oblix’s  NetPoint  access  control 
and  ID  management  technology  to 
broker  access  to  Southwest’s  external 
business  partners.  In  one  example. 
Southwest  is  using  the  SAML-cnabled 
identity  managemeni  .system  to  vouch 
for  the  identity  of  employees  accessing 
repair  manuals  that  arc  hosted  on  Tlie 
Boeing  Co.‘s  systems. 

Slowly  Gaining  Traction 

Though  adoption  of  the  federated 
model  is  growing,  the  number  of  im¬ 
plementations  so  far  is  still  relatively 
small.  Blum  says.  “We  estimate  there’s 
between  200  to  300  deployments  of 
federated  identity  today,"  he  says.  ’The 
greatest  interest  is  in  the  financial  ser¬ 
vices  sector,  with  significant  interest 
also  in  manufacturing,  government 
and  telecommunications." 

Most  of  the  activity  has  been  in  large 
companies  that  are  using  identity  fed¬ 
eration  to  link  networks  with  sub¬ 
sidiaries,  widely  dispersed  internal 
business  units  and  partners  with  whom 
they  have  trusted  relationships,  says 
V'enkat  Raghavan.  security  manager  of 
IBM’s  Tivoli  Software  business  unit. 

Raghavan  sees  the  growing  use  of 
mobile  technologies  and  the  attempt 
by  wireless  providers  to  deliver  more 
services  to  handhelds  as  another  dri¬ 
ver  of  identity  federation.  Being  able 
to  use  next-generation  mobile  devices 
to  pay  multiple  bills  or  access  peer-to- 
pecr  applications  will  require  identity 
federation  to  play  a  big  role,  he  says. 

I>cspitc  the  growing  interest,  there 
arc  several  formidable  challenges  that 
companies  need  to  con.sidcr  when 
thinking  about  deploying  federated 
identity  systems,  he  says. 

The  biggest  by  far  Ls  tru-si,  Raghavan 
says.  Partners  in  a  federated  system  are 
essentially  vouching  for  the  identity  of 
their  users  and  their  need  to  have  ac¬ 
cess  to  services  on  another  network. 

Beft>rc  a  federated  system  can  he  set 
up.  many  issues  must  be  sorted  out  re¬ 
lating  to  the  roles,  privileges  and  ac¬ 
cess  rights  for  individuals  on  partner 
networks.  There  also  needs  to  be  a 
high  level  of  assurance  around  the  pri>- 
cedures  and  policies  that  federated 
partners  employ  for  authenticating 
users  and  assigning  roles  to  them. 

“There  is  no  warm,  fuzzy  feeling 
around  the  validation  of  an  individual 
whose  account  you  have  no  control 
over."  says  HPHC’s  Patterson.  “We  arc 
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dealing  with  the  most  sensitive  med¬ 
ical  information.  We  want  to  have  the 
highest  level  of  assurance  around  the 
identity  of  our  users."  he  says. 

“It  is  really  difficuli  to  trust  a  net¬ 
work  outside  of  what  you  control."  says 
the  Navy's  Howell.  "The  negative  con¬ 
sequences  of  an  [identity-related  secu¬ 
rity  breach)  could  be  quite  drastic." 

As  a  result,  identity  federation 
works  best  where  the  business  model 
is  built  on  interaction  between  differ¬ 
ent  companies  and  domains,  says  Rick 
Caccia.  director  of  product  manage¬ 
ment  at  Obllx.  When  legal  and  trust 
processes  arc  already  in  place,  cross¬ 
domain  user  authentication  becomes 
easier  to  accept.  Caccia  says. 

Interoperability  is  another  key  i.ssue. 
since  identity  federation  involves  the 
c.xchangc  of  security  information 
acn)ss  different  domains  and  servers. 
The  most  widely  used  standard  for 
doing  this  today  is  SAML.  Another 
standard  is  the  Liberty  Alliance  Proj¬ 
ect's  identity  Federation  Framework. 
Both  standards  specify  the  manner  in 
which  organizations  package  and  en¬ 
crypt  the  identity  information  they 
share  with  one  another. 


But  different  versions  of  the  specifi¬ 
cations.  and  the  ways  in  which  vendors 
of  federated  identity  management 
products  have  chosen  to  implement 
these  standards,  can  create  interoper¬ 
ability  problems,  Blum  says. 

Organizations  that  are  embarking  on 
identity  federation  projects  also  need 
to  figure  out  a  way  to  bring  partners 
on  board,  says  RSA's  Lewis.  Unless  you 
make  it  as  easy  and  cost-effective  as 
possible,  there  is  little  incentive  for 
partners  —  especially  the  smaller  ones 
—  to  link  into  a  federated  identity  sys¬ 
tem,  he  says. 

At  the  end  of  the  day.  federation  just 
makes  cross-organizational  access  eas¬ 
ier.  Raghavan  says.  For  c.xample,  an 
employee  who  previously  needed  to 
separately  log  in  and  authenticate  him¬ 
self  on  his  40l(k>  provider's  site  might 
no  longer  need  to  do  so  if  he's  already 
logged  in  on  his  employer's  human  re¬ 
sources  site. 

But  federated  identity  doesn't  enable 
new  access  where  none  existed  before, 
Raghavan  says.  Therefore,  it  becomes 
crucial  to  have  a  clear  understanding 
of  the  specific  cost,  access  and  security 
value  it  can  deliver,  he  says.  C  49695 
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Such  benefits  have  convinced  a 
small  but  growing  number  of  compa¬ 
nies  to  Implement  federated  identity 
management  systems. 

■  Harvard  Pilgrim  Health  Care  Inc. 
is  using  a  federated  identity  model  to 
present  members  with  claims  informa¬ 
tion  from  a  partner  site.  The  health 
care  organization  has  deployed  tech- 
noi<^  from  Waltham.  Mass.-based 
Netegrity  Inc.  that  allows  it  to  take  a 
member's  identity  information  and 
assert  it  on  the  claims  presentation 
partner's  Web  site.  The  ability  to  deliv¬ 
er  such  access  via  a  federated  portal  is 
a  crucial  competitive  advantage,  says 
Ken  Patterson,  information  security  of¬ 
ficer  at  Wellesley.  Mass.-based  HPHC 

■  For  the  U.S.  Navy,  identity  federa¬ 
tion  is  a  core  enabler  in  a  massive  ID 
management  profect  designed  to  make 
it  easier  for  over  800,000  ship-  and 
land-based  naval  personnel  to  access 
thousands  of  scattered  applications  us¬ 
ing  a  single  sign-on.  Wbra  complete, 
the  system  win  aUow  a  sailor  or  ma¬ 
rine  to  use  a  single,  unique  Naval  Net- 
worit  Identity  to  access  scores  of  appli¬ 
cations  and  networic  services.  Previ¬ 
ously.  users  had  to  mainrain  dozens  of 
usernames  and  passwords  to  access 
these  different  resources,  says  Terry 
Howell,  enterprise  services  lead  at 

the  program  executive  office  for  the 
Navy's  Command,  Control.  Communi¬ 
cations.  Computers  and  Intell^eoce 
project  at  the  Space  and  Naval  Warfare 


systems  center  in  San  Diego.  Cuperti¬ 
no.  Calif-based  Oblix  inc.  is  providing 
the  Navy  with  the  federated  SAML  au¬ 
thentication  technology  that  Is  needed 
to  assert  identities  across  domains. 

■  Southwest  Airlines  Co,  has  de¬ 
ployed  Oblix's  NetPoint  access  control 
and  ID  management  technology  to 
broker  access  to  Southwest’s  external 
business  partners.  In  one  example. 
Southwest  is  using  the  SAML-enabled 
identity  management  system  to  vouch 
for  the  identity  of  employees  accessing 
repair  manuals  that  are  hosted  on  The 
Boeing  Ca’s  systems. 

Slowly  Gaining  Traction 

Thou^  adoption  of  the  federated 
model  is  growing,  the  number  of  im¬ 
plementations  so  far  b  still  relatively 
small  Blum  says.  ‘'We  estimate  there’s 
between  200  to  300  deployments  of 
federated  identity  today,”  he  says.  “Hk 
greatest  interest  b  in  the  financial  ser¬ 
vices  sector,  with  significant  interest 
also  In  manufacturing,  government 
and  telecommunications.* 

Most  of  the  activity  has  been  in  targe 
companies  that  are  using  identity  fed¬ 
eration  to  link  networks  with  sub¬ 
sidiaries.  widely  dispersed  internal 
business  units  and  partners  with  whom 
they  have  trusted  relationships,  says 
Venkat  Ragfaavan,  security  manager  of 
IBM's  'Tivoli  Sofitware  business  unit. 

Raghavan  sees  the  growing  use  of 
mobile  technologies  and  the  attempt 
by  wireless  providers  to  deliver  more 
services  to  handhelds  as  another  dri¬ 
ver  of  identity  federation.  Being  able 
to  use  next-generation  mobile  devices 
to  pay  multiple  bilb  or  access  peer-to- 
peer  applications  will  require  identity 
federation  to  play  a  big  role,  he  says. 

De^ite  the  growii^  interest,  there 
are  several  formidable  challenges  that 
companies  need  to  consider  when 
thinking  about  deploying  federated 
identity  systems,  he  says. 

'The  biggest  by  far  b  trust.  R^havan 
says.  Partners  in  a  federated  system  are 
essentially  vouching  for  the  identity  of 
their  users  and  their  need  to  have  ac¬ 
cess  to  services  on  another  network. 

Before  a  federated  system  can  be  set 
up.  many  issues  must  Ite  sorted  out  re¬ 
lating  to  the  roles,  privileges  and  ac¬ 
cess  rights  for  individuab  on  partner 
networks.  There  also  needs  to  be  a 
high  level  of  assurance  around  the  pro¬ 
cedures  and  policies  that  federated 
partners  employ  for  authenticating 
users  and  assigning  roles  to  them. 

*Tbere  b  no  warm,  fozzy  feeling 
around  the  validation  of  an  individual 
whose  account  you  have  no  control 
over."  says  HPHC's  Patterson.  “We  are 


STANDARDS  SHUFFLE 


dealing  with  the  most  sensitive  med¬ 
ical  Infonnation.  We  want  to  have  the 
highest  level  of  assurance  around  the 
identity  of  our  users,*  he  says. 

“It  b  really  difficult  to  trust  a  net¬ 
work  outside  of  what  you  control,’’  says 
the  Navy’s  HowelL  “TTie  native  con¬ 
sequences  of  an  (identity-related  secu¬ 
rity  breach]  could  be  quite  drastic.* 

As  a  result,  identity  federation 
works  best  where  the  business  model 
b  built  on  interaction  between  differ¬ 
ent  companies  and  domains,  says  Rick 
Caccia,  director  of  product  manage¬ 
ment  at  Oblix.  When  legal  and  trust 
processes  are  already  in  place,  cross¬ 
domain  user  authentication  becomes 
easier  to  accept.  Caccia  says. 

interoperability  b  another  key  issue, 
since  identity  federation  involves  the 
exchange  of  security  infonnation 
across  different  domains  and  servers. 
The  most  widely  used  standard  for 
doing  thb  today  b  SAML.  Another 
standard  b  the  Liberty  Alliance  Pro}- 
ect’s  Identity  Federation  Framework. 
Both  standards  specify  the  manner  in 
which  organizations  package  and  en¬ 
crypt  the  identity  infonnation  they 
share  with  one  another. 


But  different  versions  of  the  specifi¬ 
cations.  and  the  ways  in  which  vendors 
of  federated  identity  management 
products  have  chosen  to  implement 
these  standards,  can  create  interoper¬ 
ability  problems,  Blum  says. 

Organizations  that  are  embarking  on 
identity  federation  projects  also  need 
to  figure  out  a  way  to  bring  partners 
on  board,  says  RSA’s  Lewis.  Unless  you 
make  it  as  easy  and  cost-effective  as 
possible,  there  b  little  incentive  for 
partners  —  especially  the  smaller  ones 
—  to  link  into  a  federated  identity  sys¬ 
tem.  be  sa^ 

At  the  end  of  the  day.  federation  just 
makes  cross-organizational  access  eas¬ 
ier,  Raghavan  says.  For  example,  an 
employee  who  previously  needed  to 
separately  log  in  and  authenticate  him¬ 
self  on  hb  401(k)  provider’s  site  mi^t 
no  longer  need  to  do  so  if  he’s  already 
logged  in  on  hb  employer's  human  re¬ 
sources  site. 

But  federated  identity  doesn’t  enable 
new  access  where  none  existed  before, 
Raghavan  says.  Therefore,  it  becomes 
crucial  to  have  a  clear  understanding 
of  the  specific  cost,  access  and  security 
value  it  can  deliver,  be  says.  O  49695 
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Web-enabled  application 
delivery  appliances  combine 
several  technologies  to  en¬ 
sure  fast,  secure  and  reliable 
access  to  Web  applications. 


BY  MATT  HAMBLEN 


CHARTONE  INC.  had  invested 
heavily  in  a  new  Web* 
enabled  application,  only  to 
discover  that  h  reached  end 
users  too  slowly.  “We  were 
having  challenges  running 
PeopleSoft  efficiently,’*  says  Henry 
Svendblad.  director  of  IT  and  informa¬ 
tion  systems  at  the  San  Jose-based 
company,  which  provides  technology 
services  to  health  care  institutions. 

“The  advice  from  vendors  and 
integrators  was  to  tune  the  application 
or  the  database  or  add  more  server 
hardware,*  Svendblad  says.  But  he 
tried  a  different  approach,  spending 
S100.000  on  four  E|X  3250  Enterprise 
Application  Processor  appliances 


from  Campbell,  Calif.-based  Redline 
Networits  Inc. 

By  taking  advantage  of  features  such 
as  traffic  compression,  load  balancing, 
session  management  and  TCP  opti¬ 
mization  c^bilities  available  in  the 
devices,  Svendblad  says  ChartOne  has 
improved  the  performance  of  People- 
Soff  and  all  of  its  other  Web  applica¬ 
tions  as  well  “We  see  on  average  a  70% 
reduction  in  bandwidth.  It  makes  a 
nigbt-and-day  difference  in  the  way  ap¬ 
plications  go,  from  being  very  slow  to 
snappy  and  very  responsive,”  he  says. 

Alin  One 

Vendors  have  traditionally  offered  an 
array  of  products  —  from  Sectire  Sock¬ 
ets  Layer  (SSL)  acceleration  appliances 
to  Web  server  load  balancers  —  to  en¬ 
sure  fast,  reliable  and  secure  delivery 
of  Web-based  applications.  With  prod¬ 
ucts  such  as  the  E|X  3250,  those  tech¬ 
nologies  are  beginnii^  to  converge 
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into  consolidated  offerings.  A  half- 
biUion-dollar  market  has  emerged 
for  products  from  more  than  a  dozen 
vendors  that  integrate,  usually  in  a 
single  switxddike  appliance,  a  range 
of  Amctions  designed  to  improve  the 
speed  and  security  of  Web-enabled 
applkacioiLs. 

The  products,  variousiy  referred  to 
as  Wcb-enabled  applicadoa  delivery, 
Layers  4-7  switch^  or  application 
front-end  appliances,  may  support  a 
variety  of  functions.  Among  them  are 
SSL  encryption  and  acceleration,  com¬ 
pression.  load  balancing,  route  opti¬ 
mization  and  cootroL  XML  optinuza- 
tion.  attack-signature  filtering,  TCP 
offloading  and  c^timizatkm.  and  appli¬ 
cation  performance  optimization.  The 
core  functions  most  large  businesses 
want  are  compression.  TUP  c^imiza- 
Uon  and  offloading,  and  SSL  accelera¬ 
tion.  says  Lynn  Nye,  an  analyst  at  APM 
Advisors  in  Portland.  Ore. 

IT  organizations  say  they’re  attract¬ 
ed  to  consolidated  devices  because 
they  require  less  data  center  space, 
lessen  setup  and  management  head¬ 
aches  and  save  money  by  reducing  the 
need  to  add  hardware  and  bandwidth. 

The  leading  players  in  this  niche  are 
smaller  companies,  says  Mark  ^bi, 
an  analyst  at  Gartner  Inc.  In  contrast, 
ma|or  network  switch  vendors  such  as 
Cisco  Systems  Inc„  Nortei  Networks 
Ltd.  and  Foundry  Networks  Inc.  offer 
load  balancing,  but  they've  mostly 
omitted  the  other  optimization  features 
needed  to  ensure  speedy  Web  applica¬ 
tion  delivery.  “The  big  guys  don’t  get 
it,"  Fabbi  says. 

Yet  the  n^  for  such  products  is  leaL 
“Companies  spend  a  lot  of  money  on 
eipensive  qspUcations  and  find  the  net¬ 
work  performance  is  tacking."  be  says. 
“You  can  spend  $10  mlUioa  for  a  criti¬ 
cal  application,  and  the  performance  to 
remote  users  doesn't  work  welL" 

Ondual  Rolaut 

ChartOne's  main  goal  in  using  the  E|X 
3250  was  to  reduce  bandwidth  by  n^ng 
its  compression  capabilities,  but 
Svendblad  decided  to  use  several  other 
features  as  well.  ChartOne's  experi¬ 
ence  is  similar  to  that  of  other  users 
interviewed  for  this  story,  all  of  whom 
say  their  primary  concern  was  to  im¬ 
prove  performance. 

“lypically.  customers  buy  the  appli¬ 
ance  ^  one  function  and  turn  on  oth¬ 
er  fonctioos  as  time  goes  on,“  says  Nye. 

UBld  Inc,  an  online  auction  provider 
in  Chicago,  started  using  the  NetScaler 
9000,  an  appliance  from  NetScaler  Inc 
in  San  Jose,  last  March.  It  deployed 
the  device  to  provide  load  hflianftng 


across  the  company’s  Web  servers  but 
quickly  deployed  o^r  features,  says 
Mano  Stvashanmugam.  vice  president 
of  technology. 

UBid's  Web  site  allows  simultaneous 
bids  from  hundreds  of  users  but  pre¬ 
vents  them  from  seeing  the  final  bid 
price  to  protect  retailers.  Some  users, 
however,  had  written  scripts  to 
discover  the  final  price,  be  says.  The 
NetScaler  appliance  prevents  such 
scripting  attacks  from  succeedii^ 

UBid  had  30  Web  servers  before 
installing  NetScaler.  but  by  using  its 
load-balancing  features,  UBid  was  able 
to  reduce  that  to  just  eight.  Sivashan- 
mugam  bought  two  appliances  for 
about  $60,000  but  says  he  has  saved  up 


down. . . .  We’ve  seen  roost  big  [ven¬ 
dors]  take  too  long  to  understand  that.** 
be  says. 

For  Kentucky,  load  balancing  is  a  key 
function  of  four  application  switches 
running  Big-IP  software  from  FS  Net- 
woriis  loc.  in  Seattle.  But  the  state  gov¬ 
ernment  also  uses  the  switches  in  its 
four  data  ceoiers  to  monitor  traffic  and 
the  health  ofcotmcctions  to  45  Web 
sites,  says  Raiesh  Bhabaraju,  a  consul¬ 
tant  at  Analysts  International  Corp.  in 
Minneapolis  and  a  Web  administrator 
for  the  state.  Kentudey  also  uses  Big-IP 
to  create  SSL  proxies,  so  it  doesn't 
need  to  purchjue  a  separate  SSL  prod¬ 
uct  from  another  vendor.  The  system 
has  been  in  place  for  about  18 
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WMe  more  tton  8  dozen  vBndots  sei 
IWrenahtedapptcaBondehrery 
products  today.  fM  lead  the  fflariei 
end  hvo  are  at  the  tap  of  the  pack, 
says  Bartner  anahffit  Merit  Fdbbi. 

F9  recendy  vnounced  the  Traffic 
Management  operaUno  system  tor  its 
BigHP  applances  and  has  added 'rate 
shaping*  wMch  ensues  thto  banthwett) 
B  airelaUe  tor  high-prioiky  appicattan& 
CachinotanTyelaMtiBfate. 

■■taw*  offers  its  products  in 
applanoes  such  as  Is  LMtf^  load 
botottaer  and  Rreftooftawwl  load 
betancar.  k  at»  offers  attack  agnature 
fllaring  and  the  Unkftoof  Srwch 
product  to  extend  conln)l  beyond 


to  $80,000  on  new  hardware  be  didn't 
have  to  buy.  as  weU  as  up  to  SIOXXX)  per 
month  for  additional  electrical  power 
and  bandwidth  that  won't  be  needed. 

“My  cost  of  ownership  is  less,  host¬ 
ile  is  less,  power  is  less,  and  band¬ 
width  is  a  lot  less,”  Stvashanmugam 
says.  In  all  bandwidth  needs  have 
dropped  from  35Mbit/kec.  to  ITMbh/ 
sec,  be  estimates. 

NetScaler's  SSL  acceleration  capabil¬ 
ity  also  has  made  UBid  more  efficient, 
Stvashanmugam  explains.  SSL  puts  a 
strain  on  Web  servers.  As  a  renilt  of 
offloading  encryption  and  decryption 
tasks  to  the  NetScaler  appliance,  the 
Wi^  server  reqtiest  queue  is  much 
smaller  —  about  one-tenth  Mdiat  it 
once  was. 

Sivasfaanunigam  ssiys  be  likes  the  idea 
of  using  a  single  product  that  handles 
all  aspects  of  application  performance. 
“If  anything  goes  down,  our  business  is 


the  dika  canter. 

Fafahi  puts  hMvs  Mptwariis. 
HMSalar  and  Mtaa  HitMriB 

to  the  next  tier.  The  three  offer  stmiv 
toakfBS.  Hea  has  moved  beyond 
Rs  locus  on  servtoa  providers  to  the 
enterprise  irilh  Is  intoa  QOO  Virtod 
Service  Swich.  he  The  rernainino 
vendon  inckide  richB  pleyers.  Fabbi 
says.  Anay  Nahvorks  Ik.  to  notafaie  for 
its  mentorybasad  cadiina  FtoeGround 
Netvrerks  Inc.  and  PMa  he.  have 
completiientary  producto  that  pRMde 
appicalton  opthiizatiorc  and  Nauocus 
Nahvorks  he.  has  strong  SSL  and 
traffic  management  capabllbes. 
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and  has  helped  reduce  support  hours 
and  costs  “drastically,”  says  Bhabarafu. 

“Big-IP  primarily  provi^  reliabili¬ 
ty,”  says  Bhabaraju.  Putting  all  the  fea¬ 
tures  together  with  a  variety  of  ven¬ 
dors  might  have  been  too  complex  and 
wouldn't  ensure  ease  of  managcinent 
or  imeroperability,  he  says. 

niMiing  Out  of  llw  Bm 

While  vendors  offer  a  variety  of  secu¬ 
rity  and  performance  options  from  one 
source,  the  products  aren't  always  in 
one  box.  LifeWay  Christian  Resources 
of  the  Southern  Baptist  Convention  in 
Nashville  uses  two  devices  from  Rad- 
ware  Inc  in  Mabwah.  N.J. 

LifeY^.  which  operates  U8  retail 
stores  and  provides  online  Bible  study 
and  other  online  Christian  resources, 
installed  Radware's  UnkProof  load 
balancer  and  nreProof  fliewall  load¬ 
balancing  products. 


David  Elliott,  systems  engineer  at 
the  nonprofit,  says  that  when  a  new 
online  curriculum  was  introduced, 
bandwidth  use  surged  35%.  but  Link- 
Proof  handled  the  load  without  *ddii%g 
bandwidth.  Prior  to  UnkProofs 
launch,  bandwidth  had  been  sluggish 
across  three  n  lines,  Elliott  says.  “In 
(hat  first  immediate  use  of  Radware.  it 
got  us  out  of  the  hole,”  he  says. 

Using  the  separate  boxes,  which  cost 
about  $60,000.  hasn't  been  a  problem, 
but  the  implementation  of  su^  prod¬ 
ucts  can  be  complex.  EUiott  warns,  ''ft’s 
pretty  involved,  and  I  was  surprised  at 
the  level  of  technical  knowledge  rhat 
your  engineen  need  to  have,”  he  says. 

While  many  cooqjanics  use  just  a  lew 
features  today,  some  are  taking  maxi¬ 
mum  advantage  of  consolidated  prod¬ 
ucts.  Sawis  Communications  Corp.  in 
Sl  Louis  is  making  foil  use  of  all  of  the 
features  available  in  the  30  Virtual  Ser¬ 
vice  Switches  it  purchased  from  inkra 
Networks  Corp.  in  Fremont,  Calif. 

Sawis  operates  application  infra¬ 
structure  for  other  companies  and  uses 
Virtual  Service  Switches  in  25  data 
centers  to  offer  customers  SSL  acceler¬ 
ation,  load  balancing,  firewall  protec¬ 
tion.  intrusion  detection  and  IPsec  vir¬ 
tual  private  network  tunnel  termina¬ 
tion,  says  CEO  Rob  McCormick.  He 
says  each  switch  costs  $200,000. 

With  this  approach,  Sawis  can  use 
one  switd)  to  serve  multiple  customers, 
although  some  still  prefer  to  have  sep¬ 
arate  products  for  each  function  tied 
directly  to  their  servers.  McCormick 
estimates  that  be  can  replace  the  need 
for  L200  Ethernet  ports  to  various  Web 
servers  with  one  Inkra  switch  fUling 
half  a  rad  for  a  significant  savings  in 
space. 

McCormick  passes  on  the  savings 
from  using  a  consolidated  appliance 
to  customers.  For  example,  Sawis 
charges  customers  about  $1,500  per 
month  for  a  dedicated,  managed  fire¬ 
wall  but  charges  just  $250  per  month  if 
the  customer  uses  the  tnanagi»ri  rirewall 
in  its  \^mul  Service  Switch  product. 

“Inkra  is  the  only  vetulor  Pve  found 
to  pull  all  the  fonc^ns  we  need  into  a 
single  product.”  McCormick  says.  But 
as  the  maricet  matures,  other  vendocs 
will  offer  more  applkatkm  deUvery  fea¬ 
tures  in  their  appliances.  And  that’s 
something  that  both  Sawis  and  other 
corporate  IT  organizations  are  bound 
to  warn,  says  FabbL  O  49499 
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Grazing 

Nanogra^ 

Adaptable  substance  may  cool  computers  and  put 
a  zoom  lens  in  your  cell  phone.  By  Gary  H.  Anthes 


A  drop  of  water  glides  across 
the  flat  surface  like  quick¬ 
silver.  moving  effortlessly 
from  place  to  place  as  the 
surface  is  tilted  It's  hard  to 
believe  that  the  little  bead  is  water,  for 
it  doesn't  wet  the  surface  as  it  races 
around,  seemingly  without  friction. 

The  little  drop  in  this  impromptu 

laboratory  demonstration  isn't  - 

on  an  ordinary  sur^ce.  It’s  rid-  r||T||Pr 
ing  on  “nanograss.”  a  bed  of  I 
upright  silicon  posts  a  thou¬ 
sand  times  thinner  than  a  hu¬ 


man  hair.  Bell  Labs,  the  research  and 
development  arm  of  Lucent  Technol¬ 
ogies  InCo  is  betting  that  nanograss 
will  find  its  way  into  commercial  prod¬ 
ucts  ranging  from  low-friction  boat 
hulls  to  heat  sinks  for  computer  proc¬ 
essors  and  batteries  with  a  shelf  life  of 
25  years.  It  will  be  one  of  the  first 
nanoscalc  technologies  commcrcial- 
iaed  by  Bell  Labs  and  its  partner,  the 


New  Jersey  Nanotechnology  Consor¬ 
tium  (NJNC). 

“Nanograss  is  a  whole  new  class  of 
structure,  where  we  are  nanoenginccr- 
ing  the  surface  of  a  material,’’  says 
David  Bishop,  a  research  vice  president 
at  Bell  Labs  and  president  of  the  NJNC. 
“By  adjusting  the  area  of  these  posts 
and  their  density,  and  how  you  pattern 
them,  you  can  engineer  how  the 
fluid  interacts  with  the  s\ih~ 

Ilf  AIVHlfP)  ^  stuck  with 

WAIvN*  what  nature  gave  you.  and  you 
can  do  lots  of  amazing  things.' 


It  is  also  possible  to  alter  the  pre^r- 
ties  of  nanograss  on  the  fly  by  chang¬ 
ing  the  temperature,  applying  ultra¬ 
sound  or  a  small  voltage,  or  other 
means.  A  voltage  builds  up  an  electri¬ 
cal  field  at  the  tips  of  the  nanograss, 
and  that  changes  its  wettability 
through  an  effect  called  electrowetting. 

That  could  allow  the  electrodes  and 
electrolytes  in  a  battery  to  remain  sep¬ 


arated  until  the  battery  is  needed.  e.\- 
tending  its  shelf  life  indefinitely.  Con¬ 
ventional  batteries  discharge  at  the 
rate  of  3%  to  5%  a  month,  even  when 
not  in  use.  Nanograss  batteries  will 
cost  less  and  have  far  higher  power-to- 
I  weight  ratios,  researchers  predict. 

I  Bishop  says  other  applications  of 
I  nanograss  include  the  following: 

■  Heal  sinks  for  computer  processors 
and  other  devices.  “It’s  very  hard  to  get 
high  fluid  flows  through  small  silicon 
channels;  it  kind  of  jams  up.”  Bishop 
says.  “But  nanograss  allows  much 
higher  fluid  flow  because  the  liquid  is 
only  interacting  with  one-hundredth 
as  much  surface.” 

Commercialization  of  the  nanograss 
heat-sink  idea  is  two  to  three  years 
away,  but  Bell  Labs  is  about  to  sign  a 
contract  with  a  company  to  develop  a 
“smart'’  heat  sink  that  can  change  its 
cooling  properties  as  needs  change, 
he  says.  The  idea  is  noteworthy  be¬ 
cause  chip  makers  have  found  that 
heat  dissipation  is  one  of  the  greatest 
obstacles  to  making  silicon  circuits 
smaller  than  the  current  generation, 
at  90  nanometers. 

■  Liquid  lenses.  It's  possible  to  con¬ 
struct  tiny,  cheap  liquid  lenses  whose 
focal  lengths  and  other  properties  can 
be  changed  very  quickly  by  the  appli¬ 
cation  of  electric^  fields.  Bishop  pre¬ 
dicts  that  disposable  cameras  and  cell 
phones  with  zoom  lenses  based  on  this 
idea  could  be  available  in  a  year. 

■  ”Uquid  photonics. "  In  three  to  five 
years,  nanograss  might  also  go  into 
switches,  power  splitters,  filters,  multi¬ 
plexers  and  other  devices  in  order  to 
manipulate  light  in  ways  that  are  diffi¬ 
cult  to  do  by  conventional  means. 

“Nanograss  is  an  important  technol¬ 
ogy  because  it  combines  a  materials 
breakthrough  with  electronic  proper¬ 
ties  that  enhance  the  material  and  allow 
it  to  be  used  as  a  platform  for  a  slew  of 
applications,”  says  Josh  Wolfe,  a  manag¬ 
ing  partner  at  Lux  Capital  Group  LXC.  a 
venture  capital  firm  in  New  York. 

Wolfe  says  such  “hybridization  of 
disciplines"  is  a  defining  characteristic 
of  many  nanotech  applications,  and  it 
allows  for  advancements  that  would 
have  been  impossible  in  a  world  where 
scientists  generally  concentrated  on 
just  one  field  at  a  time. 

MPhase  Technologies  Inc.  in  Nor¬ 
walk.  Conn.,  is  working  with  Bell  Labs 
and  the  NJNC  at  Bell  Labs’  S400  mil¬ 
lion  “nanofabrication  laboratory"  in 
Munay  Hill.  N.J..  to  develop  nanotech 
batteries.  The  parties  will  share  any 
patents  that  result.  MPhase  will  pro¬ 
duce  some  batteries  itself  and  will  li¬ 
cense  the  technology  to  other  battery 


makers,  says  Steve  Simon,  the  compa¬ 
ny’s  executive  vice  president  for  R&D. 

MPhase  will  make  conventional 
nonrcchargeable  batteries  and  “re¬ 
served"  batteries  —  those  that  don’t 
combine  the  electrolyte  and  electrodes 
until  the  battery  is  needed.  Simon  says. 
The  batteries  will  be  used  in  military 
applications  in  2006  and  in  commer¬ 
cial  devices,  such  as  cell  phones,  hand¬ 
held  devices  and  notebook  computers, 
in  about  three  years.  Preliminary 
benchmark  data  from  mPhase  shows 
that  the  batteries  will  have  three  to 
four  times  the  power-to-weight  ratio 
of  ordinary  AA  batteries.  O  49480 
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Nanograss 

Adaptable  substance  may  cool  computers  and  put 
a  zoom  lens  in  your  cell  phone.  By  Gary  H.  Anthes 


A  drop  of  water  glides  across 
the  flat  sur&ce  Uke  quick- 
silvei,  moving  effortlessly 
from  place  to  place  as  the 
surfiKe  is  tilted  It’s  hard  to 
believe  that  the  little  bead  is  water,  for 
it  doesn't  wet  the  surfrce  as  it  races 
around,  seemingly  without  friction. 

The  little  drop  in  this  impromptu 
laboratory  demonstration  isn't 
on  an  ordinary  surface.  It's  rid¬ 
ing  on  “nanograss.*  a  bed  of 
upright  silicon  posts  a  thou¬ 
sand  times  thinner  than  a  hu¬ 


man  hair.  Bell  Labs,  the  research  and 
development  arm  of  Lucent  Technol¬ 
ogies  Inc,  is  betting  that  nanograss 
will  find  its  way  into  commercial  prod¬ 
ucts  ranging  from  low-friction  bo^ 
hulls  to  beat  sinks  for  computer  proc¬ 
essors  and  batteries  with  a  shelf  life  of 
2S  years,  b  will  be  one  of  the  first 
nanoscale  technologies  commercial¬ 
ized  by  Bell  Labs  and  its  partner,  the 


New  Jersey  Nanotechnology  Consor¬ 
tium  (NJNC). 

*l*ianograss  is  a  whole  new  class  of 
structure,  where  we  are  nanoengineer- 
ii^  the  surface  of  a  materiaL”  says 
David  Bishop,  a  research  vice  president 
at  Bell  Labs  and  president  of  the  NJNC. 
“By  adjusting  the  area  of  these  posts 
and  tbeir  density,  and  how  you  pattern 
them,  you  can  engineer  bow  the 
EUfyK  fluid  interacts  with  the  sub- 

strate.  So  you  are  not  stuck  with 
WAIwIIa  vdtat  nature  gave  you.  and  you 

can  do  lots  of  amaying  thil^’ 


It  is  also  possible  to  alter  the  proper¬ 
ties  of  nanograss  on  the  fly  by  chang¬ 
ing  the  temperature,  applying  ultra¬ 
sound  or  a  small  voltage,  or  other 
means.  A  voltage  builds  up  an  electri¬ 
cal  field  at  the  tips  of  the  nanograss, 
and  that  changes  its  wettability 
through  an  effect  called  electrowetting. 

That  could  allow  the  electrodes  and 
electrolytes  in  a  battery  to  remain  sep¬ 


arated  until  the  battery  is  needed,  ex¬ 
tending  its  shelf  life  indennitely.  Con¬ 
ventional  batteries  discharge  at  the 
rate  of  3%  to  5%  a  month,  even  when 
not  in  use.  Nanc^rass  batteries  will 
cost  less  and  have  frr  higher  power-to- 
weight  ratios,  researchers  predict. 

Bi^p  says  other  applicaticms  of 
nanograss  include  the  following: 

■  Hiit  sinks  for  computer  processors 
and  other  devices.  “It’s  very  hard  to  get 
high  fluid  flows  through  small  silicon 
channels;  it  kind  of  jams  up."  Bishop 
says.  “But  nanograss  allows  much 
higher  fluid  flow  because  the  liquid  is 
only  interacting  with  one-hundredth 
as  much  surface." 

Commercialization  of  the  nanograss 
heat-sink  idea  is  two  to  three  years 
away,  but  Bell  Labs  is  about  to  sign  a 
contract  with  a  company  to  develop  a 
“smart*  beat  sink  that  can  change  its 
cooling  properties  as  needs  change, 
he  says.  The  idea  is  noteworthy  be¬ 
cause  chip  makers  have  found  that 
heat  dissipation  is  one  of  the  greatest 
obstacles  to  making  silicon  circuits 
smaller  than  the  current  generation, 
at  90  nanometers. 

•  liquid  tenses.  It’s  possible  to  con¬ 
struct  tiny,  cheap  liquid  lenses  whose 
focal  lengths  and  other  properties  can 
be  changed  very  quickly  by  the  appli¬ 
cation  of  electrical  fields.  Bishop  pre¬ 
dicts  that  disposable  cameras  and  cell 
phones  with  zoom  lenses  based  on  this 
idea  could  be  available  in  a  year. 

■  Uquid  photonics.*'  In  three  to  five 
years,  nanograss  m^t  also  go  into 
switches,  power  splitters,  filters,  multi¬ 
plexers  and  other  devices  In  order  to 
manipulate  light  in  ways  that  are  diffi¬ 
cult  to  do  by  conventional  means. 

T'lanograss  is  an  important  tet^ol- 
ogy  because  it  combines  a  materials 
breakthrough  with  electronic  proper¬ 
ties  that  enhance  the  material  and  allow 
it  to  be  used  as  a  platform  for  a  slew  of 
applicatfons,”  says  Jo^  Wolfe,  a  manag¬ 
ing  partner  at  Lux  Capital  Group  LLC,  a 
venture  capital  firm  in  New  York. 

Wolfe  says  such  “hybridization  of 
disciplines*  is  a  defining  characteristic 
of  many  oanotecb  applicaticms.  and  h 
allows  for  advancements  that  would 
have  been  impossible  in  a  world  where 
scientists  generally  concentrated  on 
just  one  field  at  a  time. 

MPhase  Technologies  Inc  in  Nor¬ 
walk.  Conn.,  is  working  with  Bell  Labs 
and  the  NJNC  at  BeU  Labs’  S400  mU- 
lion  “nanofabricatioD  laboratory*  in 
Murray  HiU.  N.J..  to  develop  nanotech 
batteries.  The  parties  will  share  any 
patents  that  re^t  MPhase  will  pro¬ 
duce  some  batteries  itself  and  li¬ 

cense  the  technology  to  other  battery 


makers,  says  Steve  Simon,  the  compa¬ 
ny’s  executive  vice  president  for  R&D. 

MPhase  will  make  conventional 
nonrechargeable  batteries  and  “re¬ 
served”  batteries  —  those  that  don't 
combine  the  electrolyte  and  electrodes 
until  the  battery  is  needed,  Simon  says. 
The  batteries  will  be  used  in  military 
applications  in  2006  and  in  commer¬ 
cial  devices,  suc:h  as  cell  phones,  hand¬ 
held  devices  and  notebook  computers, 
in  ^KHit  three  years.  Preliminary 
benchmaik  data  from  mPhase  slfows 
that  the  batteries  will  have  three  to 
four  times  the  power-to-wei^t  ratio 
of  ordinary  AA  batteries.  O  49480 
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Security  Review  Uncovers 
Rampant  Virus  Infections 

Our  new  journal  writer  makes  a  most 
unpleasant  discovery  just  as  the  IT 
auditors  arrive.  By  C.  J.  Kelly 


HEN  the  call  came. 

I  wasn't  surprised. 
The  voice  at  the 
other  end  of  the 
line  said.  “Our  network  securi¬ 
ty  arutysis  tool  has  found 
something  we  call  'suspicion 
indicators’  on  your  network.  1 
think  >*00  need  to  look  at  this 
right  away."  1  had  a  sick  feeling 
as  my  mind  raced  to  the  con¬ 
versations  1  would  soon  be 
having  with  senior  manage¬ 
ment.  I  tried  ID  focus  on  the 
conversation  at  hand. 

After  several  years 
of  network  security 
consulting  in  health 
care.  Hnancial  ser¬ 
vices  and  high-tech 
companies.  1  had 
accepted  a  fuU-time 
position  at  a  aot-so-htgb-tech 
company,  thinking  it  would  be 
an  easy,  kick-back  kind  of  job 
with  a  regular  paycheck. 

In  the  short  time  Tve  been 
here.  I've  realized  that  I  traded 
one  set  of  problems  for  anoth¬ 
er.  Before.  I  could  point  out 
ail  the  security  issues  to  my 
clients  and  get  paid  for  that  — 
and  require  additional  large 
sums  of  money  for  the  follow- 
on  remediation  work.  But  now. 
Tm  on  the  other  end  of  the 
equation.  I  am  now  responsi¬ 
ble  for  the  network,  and  the  se¬ 
curity  consultants  are  pointing 
out  ail  the  problems  to  me. 
What  was  I  thinking? 

The  caller  was  with  an  out¬ 
side  network  security  compa¬ 
ny  wc  had  brought  in  to  do  a 
high-level  security  assess¬ 
ment.  I  had  hired  this  firm  un¬ 
der  the  constraints  of  a  small 
budget  and  tight  timeline,  and 
with  the  internal  and  external 
IT  auditors  one  week  away 
from  walking  in  the  door,  a 
quick  decision  was  needed. 

The  security  assessment 
vendors  we  had  used  in  the 


past  had  primarily  focused 
on  access-control  issues  and 
known  vulnerabilities  —  the 
usual  fare.  This  time.  1  wanted 
consultants  w'ho  were  more 
.advanced  and  experienced 
than  our  stair. 

1  had  interviewed  a  number 
of  consulting  firms  and  was 
becoming  a  little  desperate. 
When  I  asked  the  team  if  they 
knew  of  anyone.  I  was  intro¬ 
duced  to  a  company  that  had 
developed  a  proprietary  tool 
that  incorporated 
many  of  the  open- 
source  tools  we  use. 
I  was  impressed 
by  its  functionality 
and  said.  “This  is 
like  ArcSight  on 
steroids!"  The  lead 
security  consultant’s  r^umc 
read  like  a  who's  who  of  the 
scieniific  world.  He  was  in¬ 
volved  in  the  Iniemei  before 
it  was  ever  called  that.  And 
to  top  it  oft*,  he  was  the  most 
unassuming  and  interesting 
person  I  had  ever  met.  1  hired 
his  firm,  and  we  got  started 
right  away. 

Within  days  of  data  collec¬ 
tion  and  analysis,  the  consul¬ 
tants  had  discovered  hundonis 
of  thousands  of  suspicious 
connections  to  sites  ail  over 
the  world,  many  of  which 
were  very  undesirable.  Using 
their  reports,  I  typed  in  a 
Google  search  string  that  in¬ 
cluded  the  port  numbers  and 


Januaiy  thra^  April, 
we  had  no  vims  out¬ 
breaks,  bi  May,  some¬ 
thing  went  MMl 


country  names.  The  informa¬ 
tion  I  found  pointed  to  back¬ 
door  Trojan  ht>rses  associated 
with  a  number  of  viruses. 
These  Trojans  horses  had  to 
be  the  culprit  for  the  mysteri¬ 
ous  connections. 

i  tracked  down  my  boss  and 
explained  the  findings,  my 
theory  of  vinis/Trojan  activity 
and  my  plan  of  attack.  I  also 
told  her  that  I  couldn’t  say 
whether  our  network  had 
been  compromised  but  that 
I  would  keep  her  updated. 

We  discussed  whether  we 
should  take  this  information 
to  the  C  level  or  do  more  re¬ 
search.  Realizing  the  legal  im¬ 
plications  of  a  network  com¬ 
promise.  wc  decided  that  wc 
needed  more  information  be¬ 
fore  communicating  upward. 
My  lead  security  engineer  was 
on  vacation,  so  I  got  to  work. 

Ports  of  Call 

1  had  to  determine  which 
connections  were  valid.  A 
review  of  outbound  firewall 
rules  confirmed  that  they 
were  appropriately  limiting. 

I  put  together  a  spreadsheet 
comparing  the  firewall  rules 
with  known  backdoor  Trojans 
that  operate  on  our  allowable 
ports.  At  least  I  had  narrowed 
the  list  ofTrojans  to  look  for.  I 
decided  to  focus  immediately 
on  Ports  80  (HTTP)  and  25 
(SMTP),  since  they  are  the 
most  widely  exploited. 

We  use  Web  filtering  tech¬ 
nology  and  have  a  robust  anti¬ 
virus  program,  so  I  couldn't 
understand  what  was  going 
on.  Then  1  found  that  most  of 
the  suspicious  activity  was  on 
a  network  segment  that  wasn't 
being  fthered.  which  means 
malicious  Web  sites  weren't 
being  blocked.  Groat.  I  asked  I 
the  network  architect  if  wc 
could  deploy  nur  Web  filtering 
technology  to  that  st^cni. 

His  answer  We  needed  two 
more  routers,  and  it  would 
take  weeks  to  get  the  equip¬ 
ment  in  place.  Roadblock. 


The  next  step  was  to  identi¬ 
fy  and  inspect  the  systems 
from  whence  the  connec¬ 
tions  were  originating,  but  the 
DHCP  logs  were  basically  use¬ 
less.  Another  roadblock. 

I  logged  onto  the  central 
antivirus  control  manager.  It 
was  reporting  that  hundreds 
of  systems  were  infected!  I  ran 
month-to-month  reports  be¬ 
ginning  in  January  to  see  if 
there  was  a  pattern.  Sure 
enough.  )anu.iry  through 
April,  we  had  no  virus  out¬ 
breaks.  In  May.  something 
went  boink.  From  May 
through  the  present,  the  con¬ 
trol  manager  was  reporting  a 
long  list  of  viruses  active  on 
our  network,  many  of  which 
installed  backdoor  Trojans. 
This  was  not  a  good  sign.  I 
asked  the  data  center  opera¬ 
tions  manager  for  his  help. 

Gur  antivirus  vendor  con¬ 
firmed  that  in  May  the  anti¬ 
virus  services  went  down 
on  the  primary  e-mail  server 
because  of  file  corruption.  It 
ioede  days  to  get  the  system 
back.  During  that  time,  an 
unknown  number  of  e-mail- 
bome  viruses  came  into  our 
network.  Many  of  those, 
though  detected,  couldn't  be 
quarantined.  The  cleanup  will 
require  manual  effort  and  re¬ 
sources.  Time  to  involve  up¬ 
per  management. 

I  have  had  quite  the  head¬ 
ache  in  the  past  few  weeks, 
but  the  good  news  is  that  the 
unsavory  results  of  the  securi¬ 
ty  assessment  have  allowed  us 
to  identify  a  number  of  things 
that  need  to  be  fixed  and  to 
justify  a  budget  for  better 
tools,  additional  head  count 
and  possibly  an  organizational 
adjustment.  The  consultants 
recommended  that  informa¬ 
tion  security  be  given  visibili¬ 
ty  at  the  C  level,  as  in  CSO. 

But  for  me.  it’s  back  to  the  salt 
mines.  1  will  be  spearheading 
a  virus  cleanup  effort.  • 
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NewTool  Helps 
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Security  Review  Uncovers 
Rampant  Vims  Infections 


Our  new  journal  vinitef  makes  a  nwst 
unpleasant  discovery  just  as  the  IT 
auditors  arrive.  By  C.J.  Kelly 


WHEN  the  call  came. 

I  wasn't  surprised. 
The  voice  at  the 
other  end  of  the 
line  sakL  "Our  networic  securi¬ 
ty  analysis  tool  has  found 
something  we  call  'suspicion 
indicators'  on  your  network.  I 
think  you  need  to  look  at  this 
right  away."  I  had  a  sick  feeling 
as  my  mind  raced  to  the  con¬ 
versations  I  would  soon  be 
having  with  senior  manage¬ 
ment  1  tried  to  focus  on  the 
conversation  at  hand. 

After  several  years 
of  network  security 
consulting  in  health 
care,  ftnancial  ser¬ 
vices  and  hi^tech 
companies,  1  had 
accepted  a  full-time 
positicKi  at  a  oot-so-high-iech 
company,  thinking  it  would  be 
an  easy,  kidr-back  kind  of  job 
with  a  regular  paycheck. 

In  the  short  tune  Pve  been 
here,  Pve  realized  that  I  traded 
one  set  of  problems  for  anoth¬ 
er.  Before,  I  could  point  out 
aU  the  security  issues  to  my 
clients  and  get  paid  for  that  — 
and  require  additional  targe 
sums  of  money  for  the  foUow- 
on  remediatioo  work.  But  now. 
Pm  oo  the  other  end  of  the 
equation.  I  am  now  re^misi- 
ble  for  tbe  network,  and  the  se¬ 
curity  consultants  are  pointing 
out  all  tbe  problems  to  me. 
What  was  1  thinking? 

Tbe  caller  was  with  an  out¬ 
side  network  security  compa¬ 
ny  we  had  brought  in  to  do  a 
high-level  security  assess¬ 
ment  I  had  hired  this  firm  un¬ 
der  tbe  constraints  of  a  small 
budget  and  tight  timeline,  and 
with  the  interna)  and  external 
rr  auditors  one  week  away 
from  walking  in  tbe  dooc;  a 
quick  dectskm  was  needed. 

Tbe  security  assessment 
vendors  we  used  in  tbe 


past  had  primarily  focused 
on  access-control  issues  and 
known  vulnerabilities  —  the 
usual  fare.  This  time.  I  wanted 
consultants  who  were  more 
advanced  and  experienced 
than  our  staff. 

I  had  interviewed  a  number 
of  consulting  firms  and  was 
becoming  a  little  deq>eraie. 
When  I  asked  tbe  team  if  they 
knew  of  anyone,  I  was  intro¬ 
duced  to  a  company  that  had 
developed  a  proprietary  tool 
that  incorporated 
many  of  tte  open- 
source  tools  we  use. 
I  was  impressed 
by  its  functionality 
a^  said.  This  is 
like  ArcSight  on 
steroidst"  The  lead 
security  consultant’s  r^sum^ 
read  like  a  who's  who  of  the 
sciendfic  world.  He  was  in¬ 
volved  in  the  Internet  before 
it  was  ever  called  that.  And 
to  top  h  off  he  was  the  most 
unassuming  and  interesting 
person  1  had  ever  met.  I  hired 
ba  firm,  and  we  got  started 
r^taway. 

Within  days  of  data  collec¬ 
tion  and  analysis,  tbe  consul¬ 
tants  had  discovered  hundreds 
of  thousands  of  suspicious 
connections  to  sites  all  over 
the  world,  many  of  which 
were  very  undesirable.  Usii^ 
their  reports.  I  typed  in  a 
Google  search  string  that  in¬ 
cluded  the  port  numbers  and 
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vrahadnowusout- 
biBaks.  In  May,  some¬ 
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country  names.  The  informa¬ 
tion  I  found  pointed  to  back¬ 
door  Trojan  horses  associated 
with  a  number  of  viruses. 
These  Trojans  horses  had  to 
be  the  culprit  for  the  mysteri¬ 
ous  connections. 

1  tracked  down  my  boss  and 
explained  the  findings,  my 
theory  of  virus/Trojan  activity 
and  my  plan  of  attack.  1  also 
told  her  that  1  couldn’t  say 
whether  our  network  had 
been  compromised  but  that 
1  would  keep  her  updated. 

We  discussed  whether  we 
should  take  this  information 
to  tbe  C  level  or  do  more  re- 
I  search.  Realizing  the  legal  im- 
plicatioos  of  a  network  com¬ 
promise.  we  decided  that  we 
needed  more  information  be¬ 
fore  communicating  upward. 
My  lead  security  engineer  was 
on  vacation,  so  I  got  to  work. 

Ports  of  Cad 

I  had  to  determine  which 
connections  were  valid.  A 
review  of  outbound  firewall 
rules  confirmed  that  they 
were  appropriately  limiting. 

I  put  together  a  spreadsheet 
comparu^  the  firewall  rules 
with  known  backdoor  IVojans 
that  operate  on  our  allowable 
ports.  At  least  I  had  narrowed 
the  list  of 'TVojans  to  look  for.  I 
decided  to  focus  immediately 
on  Pons  80  (HTTP)  and  25 
(SMTP),  since  they  are  the 
most  widely  exploited. 

We  use  Web  filtering  tech¬ 
nology  and  have  a  robust  anti¬ 
virus  program,  so  I  couldn’t 
understand  what  was  going 
on.  Then  I  found  that  most  of 
the  suspicious  activity  was  on 
a  network  segment  that  wasn’t 
being  filtered,  which  means 
malicious  Web  sites  weren't 
beu^  blocked.  (2reat.  I  asked 
the  networic  architect  if  we 
could  deploy  our  Web  filtering 
technology  to  that  segment. 

His  answer  We  needed  two 
more  routers,  and  it  would 
take  weeks  to  get  tbe  equip¬ 
ment  in  place.  Roadblock. 
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The  next  step  was  to  identi¬ 
fy  and  inspect  tbe  systems 
from  whence  the  connec¬ 
tions  were  originating,  but  the 
DHCP  logs  were  basically  use¬ 
less.  Another  roadblock. 

I  logged  onto  the  central 
antivirus  control  manager.  It 
was  reporting  that  hundreds 
of  systems  were  infected!  I  ran 
month-to-month  reports  be¬ 
ginning  in  January  to  see  if 
there  v/as  a  pattern.  Sure 
enough.  January  through 
April,  we  had  no  virus  out¬ 
breaks.  In  May,  something 
went  hoink.  From  May 
through  the  present,  the  con¬ 
trol  manager  was  reporting  a 
long  list  of  viruses  active  on 
our  network,  many  of  which 
installed  backdoor  lYojans. 
This  was  not  a  good  sign.  I 
asked  the  data  center  opera- 
I  tions  manager  for  his  help. 

Our  antivirus  vendor  con¬ 
firmed  that  in  May  the  anti¬ 
virus  services  went  down 
on  tbe  primary  e-mail  server 
because  of  file  corruption.  It 
took  days  to  get  tbe  system 
back.  During  that  time,  an 
unknown  number  of  e-mail- 
bome  viruses  came  into  our 
network.  Many  of  those, 
though  detected,  couldn’t  be 
quarantined.  The  cleanup  will 
require  manual  effort  and  re¬ 
sources.  Tune  to  involve  up¬ 
per  management. 

I  have  bad  quite  the  head¬ 
ache  in  tbe  past  few  weeks, 
but  the  good  news  is  that  the 
unsavory  results  of  the  securi¬ 
ty  assessment  have  allowed  us 
to  identify  a  number  of  things 
that  need  to  be  fixed  and  to 
justify  a  budget  for  better 
tools,  additional  head  count 
and  possibly  an  organizational 
adjustment.  Tbe  consultants 
recommended  that  informa¬ 
tion  security  be  given  visibili¬ 
ty  at  tbe  C  level,  as  in  CSO. 

But  for  me,  it’s  back  to  the  salt 
mines.  I  will  be  spearheading 
a  virus  cleanup  effort.  9 
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Finding  the 
Candidate  for  FT 


WHICH  U.S.  PRESIDENTIAL  candidate 
is  most  in  tune  with  issues  of  partic¬ 
ular  interest  to  IT  professionals? 

On  many  subjects,  the  two  major 
candidates,  and  their  parties,  are 
pretty  equivalent.  Both  George  Bush  and  John  Kerry 
support  federally  subsidized  universal  broadband  ac¬ 
cess,  extension  of  the  R&D  tax  credit,  education  pro- 


grams  in  science  and  tech¬ 
nology.  and  restraint  on  In¬ 
ternet  taxation.  Both  Repub¬ 
licans  and  Democrats  h^  a 
long  track  record  of  support¬ 
ing  a  hi^-tech  miUtary,  al¬ 
though  Republicans  some- 
cimes  overspend  a  bit  (e-g., 
the  “Star  Wars*  and  artificial 
intelligence  boondoggles  of 
the  ]9805>,  while  E>einocrats 
may  spend  too  little. 

But  on  some  issues  of 
particular  interest  to  IT  pro¬ 
fessionals.  there  is  real  sep¬ 
aration  between  the  two  candidates: 

Bonofti  far  sob  omptoyad  worifs.  Many 
IT  workers  are  or  may  soon  become 
“consultants.*  Health  insurance  options 
for  self-employed  workers  can  be  pretty 
grim.  One  major  differentiator  between 
the  two  candidates  is  Kerry's  vow  to  pro¬ 
vide  self-employed  workers  with  access 
to  “the  same  affordable  coverage  policies 
that  members  of  Congress  get  today.”  via 
an  extension  of  the  Federal  Employees 
Health  Beneffts  Program.  May^  be  can 
deliver  that,  and  maybe  be  can't  But  ei¬ 
ther  way.  Kerry  can  at  least  be  expected 
to  make  a  major  assault  on  the  problem 
of  health  coverage  for  those  households 
in  which  nobody  is  employed  by  a  sizzle 
enterprise.  Bush  expresses  no  similar  in¬ 
tention.  eiKrept  for  "medical  savings  ac¬ 
counts*  —  and  those  are  supplements  to 
health  insurance,  not  replacements  for  it 
OfWwia  rniaprilton.  A  president  can’t 
stop  the  flow  of  IT  jobs  overseas,  but  he 
can  probably  slow  it  down.  Kerry  has 
vowmI  to  do  i^t  he  can  about  the 


V 


outflow  of  jobs.  wfaQe  Bush's 
approach  is  udwUy  laissez 
foire. 

Ttt  broris  for  riMHriO.  Be¬ 
yond  the  R&D  tax  credit 
Bush  favors  tax  breaks  for 
dividend-paying  corpora¬ 
tions.  while  Kerry  favors  tax 
breaks  for  start-ups.  Start¬ 
ups  produce  new  technol¬ 
ogy,  and  new  IT  usually 
leads  to  new  or  better  jobs. 

totomst  froodom.  We  used 
to  believe  that  the  Internet 
would  simply  route  around 
censorslup.  But  the  examples  of  China 
and  Vietnam  show  that  government  con¬ 
tent  control  is  a  genuine  dai^r  to  the 
Internet  The  Bush  administration’s  ob¬ 
session  with  the  menace  of  exposed 
flesh  seems  tike  the  first  step  on  the  slip¬ 
pery  slope  of  censorship. 

Also  crucial  to  the  evoiudon  of  the  In¬ 
ternet  is  personal  data  privacy.  Home¬ 
land  security,  electronic  medical  records 
and  even  advanced  CRM  all  depend  on 
tremendous  amounts  of  data  int^^adoa 
But  unlimited  nadoowide  data  integra- 
don  b  and  probably  should  be  —  po¬ 
litically  impractical,  UJoless  it’s  accompa¬ 
nied  by  strong  data  privacy  safeguards. 
The  costs  of  these  safegua^  should  be 
manageable,  since  data  privacy  require¬ 
ments  in  other  countries  vdll  mean  that 
the  relevant  software  and  systems  must 
be  developed  anyway. 

Tbe  USA  I^triot  Act.  which  Bush 
proposed  and  Kerry  voted  for.  b  a  major 
assault  on  data  privacy.  Even  so,  Kerry 
distinguishes  himself  from  Buah  in  this 


area.  He  has  sponsored  admirable  data 
privacy  iegbladon  in  the  past  (in  part¬ 
nership  with  Republican  Sea  John  Mc¬ 
Cain)  and  promises  more  in  the  future. 

Some  important  IT-related  issues 
aren't  being  addressed  by  either  candi¬ 
date.  Federal  computer  systems  procure¬ 
ment  b  a  major  fiasco,  leaving  us  with  an 
air  tra£flc  control  system  mired  in  the 
1970s  and  an  FBI  intranet  that  lacks  an 
effective  search  capability.  Neither  can¬ 
didate  has  made  a  peep  on  the  subject. 

Electronic  health  records  will  be  a 
huge  savior  of  lives  and  costs,  assuming 
that  there  are  proper  provisions  for  pri¬ 
vacy  and  security.  But  while  both  candi¬ 
dates  have  expressed  support  for  the 
idea,  neither  has  offered  a  concrete  plan 
for  making  it  happen. 

Even  so,  on  the  IT-specifk  issues 
whete  Che  candidates  do  have  positions, 
Kerry  has  a  clear  advantage  over  Bush. 
And  hb  advantage  in  science  and  tech¬ 
nology  extends  beyond  IT.  Dozens  of 
Nobel  laureates  support  Kerry  over  Bush 
becatise  of  hb  stat^  commitment  to  sol¬ 
id  science-based  policymaking. 

Most  voters  wUl  probably  place  other 
issues  ahead  of  purely  IT-related  ones. 
Iraq,  terrorism,  loose  nukes,  nuclear  pro¬ 
liferation.  abortion  and  AIDS  prevention 
are  all  life-and-death  matters.  Potential 
Supreme  Court  vacancies  will  be  hugely 
important  So,  too,  are  fiscal  and  eco¬ 
nomic  questions:  Should  tax  cuts  be 
funded  by  govermnent  borrowing?  Is 
Bush  responsible  for  hb  Hooveresque 
record  of  deficits  and  job  losses,  or  can  it 
be  explained  away  by  9^  and  the  col¬ 
lapse  of  the  tech  bulfole? 

But  to  the  extent  that  you’re  voting 
from  an  IT  perspective.  John  Kerry  b 
the  best  candidate.  O  49020 


SnM  oft;  Agree?  Disagree?  Think  the  authv 
B  B  righHiing  loony  or  a  leftist  stooge?  Veil  otf 
forun  on  goMrnmenl  issues  in  IT  and  tweigh  n; 
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Protect  your  information  with  the  Data  Security 
Kit  from  Sharp.  Financial  facts,  personnel  records, 
customer  lists;  networked  copiers/printers  process 
sensitive  inftxmation  every  day.  Unfortunately,  their 
hard  drives  can  also  be  accessed  via  the  network, 
contributing  to  $60  billion  worth  of  information 
theft  every  year.*  To  protea  this  weak  link  in  your 


corporate  security,  we've  created  our  Data  Security 
Kit.  It's  the  first  copier  and  printer  proteaion  to 
be  validated  by  Common  Criteria,  a  government- 
sponsored  program,  and  it's  available  only  with 
our  Digital  IMAGER*  series  of  copiers/printers. 
Sharp’s  Data  Security  Kit.  Enhanced  information 
proteaion  at  your  fingertips,  sharpusa.com/security 
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J.  Greg  Hanson's  agenda 
ranges  from  e-mail  to  inau¬ 
gurations  —  all  on  the  na¬ 
tional  stage.  And  talk  about 
tough  customers.  Pape  40 
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By  Thomas  Hoffman 


IKE  SCARDINA  has  been  the  chief  financial 
officer  for  IT  at  Allstate  Insurance  Ca  for 
nearly  10  years.  But  it’s  only  in  the  past 
few  years  that  the  spotlight  on  his  role 
has  intensified.  Allstate’s  annual  technol¬ 
ogy  spendii^  has  swelled  to  more  than 
Si  billion  a  year,  and  Scardina  has  come 
under  enormous  pressure  from  senior  management 
to  help  cost-justify  the  Northbrook,  Ill.-based  insur¬ 
er’s  technology  investments. 

“It’s  not  enou^  to  say  we’re  going  to  spend  $150  mil¬ 
lion  on  a  data  center.  People  will  ask,  ‘Well,  yeah,  but 
why  $150  million  and  not  $75  million?’  ”  he  says. 

As  IT  spendii^  has  soared  to  half  of  all  capital  ex¬ 
penditures  at  many  companies,  so-called  CFOs  of  IT 
are  being  required  by  top  brass  to  provide  greater 
clarity  and  transparency  around  those  investments. 

“I  define  my  role  this  way:  to  determine  and  ex¬ 
plain  to  senior  management  what  AIG  is  spending 
on  IT  and  to  provide  reasonable  assurance  that 
expectations  are  being  met,”  says  Joseph  Baridey. 

CFO  at  AIG  Technology  Management  Services,  I 
the  IT  services  arm  of  New  Yoik-based  insurance 
giant  American  International  Group  Inc. 

Changing  Roles 

Indeed,  the  roles  for  CFOs  of  IT  have  changed.  ‘The 
scope  of  my  role  has  expanded  well  beyond  manag¬ 
ing  and  controlling  IT  budgets  since  2002,”  says 
Grant  Zaichick,  head  of  IS  controlling  for  the  Ameri¬ 
cas  at  DHL  Information  Services  (Americas)  Inc,  the 
Scottsdale,  Ariz.-based  IT  services  arm  of  trans¬ 
portation  and  logistics  provider  DHL  International 
Ltd.  In  addition  to  overseeing  IT  accounting  and 
budgetii^  Zaichick  has  recently  taken  on  responsi¬ 
bility  for  global  IT  reporting  and  IT  contracts  and  as¬ 
set  management  for  the  Americas  region. 


Career  Watch 

GMAC’s  Chris  Laping  offers  advice 
for  making  midlife  career  changes  and 
dealing  with  problem  employees. 
Also,  top  B-schools  for  IT;  the  morph¬ 
ing  CIO;  and  small  companies  lead  in 
IT  hiring.  Page  42 


OPINION 

Development  Drop-Down  Budgeting 

Ongoing  infrastructure  and  support 
costs  for  new  development  can  throw 
your  hard-won  budget  out  of  whack, 
says  Bart  Perkins.  Here’s  how  to  avoid 
nasty  surprises.  P^43 


■'L'.-gjcv  ■  t.,3nce  systemsaren't • 

inveslrT'cn':,  says  CFO  ‘IT.,- 
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Tho  IT  CFU's  fH>*viiion  "is  clunking  fri'm  a  custo¬ 
dial  tactical  rv»lc  to  nu'rc  of  a  sinitci'ic  role."  says 
H»m-ard  Rubin,  executive  vice  president  at  Stamford, 
l^ma-bawd  Meta  Group  htc.  ■'They're  in  the  nexus 
of  negotiations." 

Simply  put.  being  a  (’.Ft  >  of  IT  "is  a  real  tough  fob." 
says  Bill  Johnston.  pri*sidoni  of  Alincan  I.I.C.  a  consult¬ 
ing  firm  in  Orlandtx  ■I'here  are  several  n,‘;t«>rw  for  this. 

For  staners.  it's  still  a  universal  challenge  even 
f«»r  financial  wiwrds  —  to  elTeciively  msMsure  and 
quantify  the  impact  that  iechnok*gy  investments  are 
having  on  pn>fiLs  or  operational  efficiency.  Add  to  that 
the  dearth  t)l  ttwls  available  to  attempt  those  mcasurc- 
nieni.s.  Finally,  throw  in  the  comple.\jlies  of  develop¬ 
ing  a  standardized  appro.tch  to  valuing  IT  investments 
across  multiple  business  divisions  or  regions,  and  it’s 
a  wonder  that  IT  contrtdlers  can  dt»  their  jobs  at  all. 

Unaccountable 

Measuring  the  quantifiable  impact  of  IT  investments 
is  a  big  challenge  for  all  types  of  companies,  even 
thtnit*  with  world-class  IT  practices  such  as  Intel 
Corp.  .Shttwing  the  link  between  IT  spending  and  the 
benefits  accrued  is  the  "key  Issue  that  nearly  ever)- 
IT  organization  faces."  says  Intel  CIO  Dtiug  Busch. 

Sure,  Intel  has  continually  refined  its  IT  funding 
model.  And  it's  had  a  finance  manager  in  at  least  one 
of  its  IT  organizations  since  1‘Z‘M.  including  Theresa 
Kelly,  who  t«»ok  over  as  GFO  for  the  company's  newly 
consolidated  IT  department  a  few  monih.s  ago.  says 
Busch.  Intel  has  also  taken  advantage  of  IT  portfolio 
management  and  other  moa.suremcnt  techniques  to 
help  its  IT  organization  identify  the  link  between  IT 
and  more  than  SI  billion  in  bottom-line  improve¬ 
ments  to  the  compan)-  between  2CKKI  and  early  20(M, 
says  Busch. 

Bui  he’ll  alst>  tell  you  that  Intel  is  having  as  much 
trouble  as  any  company  getting  its  accounting  sys¬ 
tems  to  assimilate  IT-rclated  finances  into  Its  core 
accounting  practices. 

^  Allstate’s  Scardina  understands.  "Legacy  finance 
^yslem5  aren't  well  suited  to  keeping  track  of  IT  in¬ 
vestments,  particularly  at  the  kind  of  granular  level 
that  we  feel  we  need  in  order  to  provide  the  clarity  of 
spend."  he  says.  For  instance,  standard  accounting 
systems  don't  provide  Allstate’s  IT  finance  profes' 
sionals  with  the  ability  to  track  the  number  of  desk¬ 
tops  in  ust*  across  the  organization  or  pnKcssvir  pow¬ 
er  in  u-se  per  IT  dollar  spent,  notes  Scardina.  I 

Allstate  does  use  IT  a.ssei  management  software  to  I 
help  it  track  hardware  and  software  .systems.  But  the  I 


WHO  ARE  THESE  GUYS? 

V.Hh  rii  in  '  Ahf,.r.,..  a.  ..  . 

t'lC.lf- „  nt  MiMiini)  .,n  IT  (lejijrtrrii.nl  r>  ',t  ivi.  r  . 

ii'V!  Allhouoh  their  resDoiisilnlities 

vary  Ironi  coiriuany  10  company,  their  duties  include 
oversiqht  o1  IT  biidaels.  IT  procurement,  asset 
iTianaittmenl,  cost  analysis  and  benchmarking  FT 
competencies  against  those  ot  compciitnrs  and 
other  companies  Most  CFOs  ol  IT  report  to  the 
CIO.  but  some  hawe  dotted  -liof-  reporting  Ic  the 
corpoiate  CFO. 

Aifhoudh  some  urganizalKms  hawe  had  people  m 
thirse  rales  *0'  more  than  20  years,  the  position  has 
become  mcteasrmjly  popular  since  the  economy 
started  to  soften  m  rTud-?000  and  senior  manage¬ 
ment  began  to  severely  scrutinize  IT  spending.  Still, 
less  than  10”'i  of  U  S  companies  have  someone 
who's  formally  m  an  IT  finance  role,  says  Bill  Johns 
ton.  president  ot  consulting  firm  Alinean 

Thonitis  Hoffman 


insurer's  accounting  sofkwaa*  goes  only  so  far  in  pro¬ 
viding  Scardina  and  his  staff  with  the  kind  of  finan¬ 
cial  infurmation  on  IT  investments  that  they  need. 

"From  a  corpiiraie  standpoint,  you  want  to  have 
one  set  of  financial  rcoirds  lo  report  on,"  Scardina 
says.  “But  fnim  .an  IT  standpoint,  [accounting  sys- 
tcmsl  don't  have  all  the  data  you  need." 

To  help  resolve  those  kinds  of  issues.  AIG  has  de¬ 
veloped  common  financial  reporting  processes  and 
software  templates  to  collect  IT-telaied  financial 
data  across  its  worldwide  operations  and  feed  it  into 
the  company's  Hyperion  Solutions  Corp.  accounting 
s>'stem.  Ktys  Barkley. 

But  the  accounting  system  pmhlems  arc  further 
exacerbated  at  global  companies  such  as  Chicago- 
based  Aon  Corp..  which  has  busines.s  divisions  in  120 
countries.  'TT  is  a  function  that  runs  across  ail  parts 
of  the  organization,  and  it's  ver>'  difficult  to  extract 
the  functional  costs  from  the  I  profit  and  loss  stale- 
menisj  of  various  reporting  systems."  says  David 
Barker,  vice  president  of  global  IT  finance  for  the 
provider  of  risk  management,  reinsurance  and  hu¬ 
man  capit.il  consulting  services. 

Tlie  bottom  line  is  that  many  CFOs  of  IT  are  hav  • 
ing  a  hard  lime  translating  to  senior  management  the 
elTcct  that  IT  investments  .ire  having  on,  well,  the 
bottom  line. 


Besides  the  ditficulties  inherent  in  measuring  intan¬ 
gibles  across  multiple  divisions  with  inadequate  tools, 
there  are  other  problems.  CFOs  of  IT  "don't  have  goi>d 
data  or  good  information,  and  that  makes  it  tough  for 
them  to  figure  out  how  much  it  costs  them  to  run  a 
dat.i  center  and  whether  it  makes  sense  to  outsource 
it.”  says  B;irbara  (iomolski.  an  analyst  at  Gartner  Inc. 
and  a  Computerworld  columnist. 

Another  factor  that  makes  it  tough  for  CFOs  of  IT 
to  do  their  jobs  effei  tivcly  is  the  lack  of  financial 
know-how  among  IT  staffers  and  midlevel  IT  man¬ 
agers.  “It's  usually  a  relatively  small  number  of  peo¬ 
ple  at  the  top  of  the  IT  [organizational  I  chart  w’ho  are 
'with  it’  financially."  says  Gomolskl 

Teaching  Rnancialese 

Some  IT  controllers  arc  attacking  the  problem  by 
having  their  finance  staffers  educate  IT  workers  on 
financialese.  At  Allstate,  everyone  who’s  involved  in 
IT  dccision-making  has  received  training  in  the  com¬ 
pany’s  financial  allocation  prtKcss,  says  Scardina. 

At  DHL.  Zaichick  and  his  stalThave  worked  closely 
with  the  company's  program  management  office  and 
technical  staff  over  the  past  few  years  to  ensure  that 
front-line  technology  staffers  understand  the  finan¬ 
cial  requirements  nt^ccssary  to  develop  a  business 
ease  for  a  project. 

Other  companies  have  taken  more  formal  ap- 
pixMchcs  to  educating  IT  workers  on  finances.  At 
Intel,  ail  empio^xx^s  arc  able  to  take  a  "business 
acumen  class."  which  educates  workers  on  the  basic 
business  parameters  for  the  company  (le..  asse.s.sing 
Intel’s  progress  against  the  competition),  says  Busch. 
In  addition,  IT  project  managers  aa'  taught  to  help 
the  IT  finance  team  evaluate  financial  alternatives  as 
part  of  their  skills  training,  he  says. 

To  help  both  IT  and  finance  executives  get  a  better 
handle  on  these  issues,  the  Society  for  Information 
Management  formed  an  alliance  with  the  Financial 
E.xecutivx*s  Institute  a  few  years  ago.  says  Aon  CIO 
June  Drewry.  who  was  SIM's  international  president 
until  2000.  The  two  groups  meet  and  share  strategies. 

iK’spiic  the  problems  inherent  in  their  traditional 
jobs.  CFOs  of  IT  are  undeterred.  In  fact,  a  growing 
number  of  them,  like  DHL’s  Zaichick.  are  taking  on 
expanded  IT  management  roles,  including  participa¬ 
tion  in  IT  benchmarking,  contract  negotiations  and 
software  licensing.  Meta’s  Rubin  described  the  new 
role  this  way:  "You're  not  the  teller  in  the  bank 
counting  the  dollars;  you’ve  become  a  financial  coun¬ 
selor  to  the  business."  O  49675 


ACOOimNeUFE 


I  PMdCMMboffKsaly  retired  as 
the  OT  of  fT  ai  the  Unveisity  of 
UwnanMeySLSOOaeulwMe 
he's  less  nvotved  n  day-to-day 
budoel  activities  as  a  twice-a-week 
specal  protects  manager  for  (he 
Coni  Gables;  Ha-besed  univenity. 
CoBtelo.  Mho  has  20-plus  years  d  eioenence  n 
his  role,  is  5tl  aclme  in  overseemg  the  unversM/s 


IT  linances.  Campuieiwofifs  Thomas  HoHman 
asked  Cosleio.  6B.  k)  share  he  Insights. 

How  M  yw  come  bdo  the  CFO  of  IT  rote  tf 
tf«Uriv«HhrefMM7ln1977.lMenilotfieunf- 
versityasabtfsarinchafgeolstudenlaccotfitsre- 
cemattesbesedonmyeipenenDendataprocess- 
ng  and  my  prewous  responsiijHy  ftx  a  S25  n^ 
accouMs  receMhIe  environment.  After  Ihree  or  four 
years.  [(X)]  Lew  Tetnares  asked  nw  If  I  wanted  to 
getntoOPagaeiandldid.ThelTfinanc8focusbe- 
canw  an  tncieasingly  bigger  pari  of  rny  job.  even 
though  the  trie  vvK ‘deectar  of  adrnrksIratDn  and 
budget*  We  didn't  know  vihat  to  cal  A 


Do  you  run  Mo  poBbeal  batitee  over  IT 
finance  Mum?  Certainfy.  there  are  poHbcal  situa- 
tnns  and  oNTipeling  phoriiM  because  we  seni^ 
adnanetratton.  faculty,  students  and  a  medical 
school  Each  of  those  groups  brings  a  dMerent  focus 
to  what's  appropnate  wid  what's  the  irst  priorMy. 

Hmr  do  yeu  alocale  reeewoea?  In  ternis  of 
pnorili»ig  appheatun  sarvees.  mairrtenance  arid 
so  forth,  we  have  a  couple  of  steering  committees. 
They  work  prinardy  wihin  the  ongong  operate 
budget.  VW  then  get  Lew  iTMilved  to  took  at  that 
as  a  group.  Lew  and  the  project  sponsor  try  to  sell 
the  rr/business  projects  to  different  constftoents. 


with  partevation  fiom  the  IT  finance  side. 

Any  probfams  crasHriB  •  daiMlardbKt  ap¬ 
proach  to  vaUng  IT  biVMlnierds? 

evotoad  over  urne.  (Laughs.)  Some  people  went 
to  totow  how  (gjicfdy  we  payteck.  otlm 
to  know  internal  r^  of  return,  othem  ask  how  the 
wifl  reduce  costs,  others  ask  how  the  wff  irnprove 
producIMty.  There's  no  8ir>(^  measure.  But  If  you 
develcto  a  Nstory  of  not  havvto  cost  arid  project- 
duration  ovemms,  then  you  begin  lo  get  credibili¬ 
ty.  What  gets  [more]  credUfty  is  if  you  can  show 
thebustnessneedorhowaparbeuivatoaisoc' 

iTKi  to  be  drainaticaly  anpacled  by  an  investment 
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The  IT  CFO's  position  "is  changing  from  a  custo- 
dial/tactka]  role  to  more  of  a  strategic  role."  says 
Howard  Rubin,  executive  vice  president  at  Stamford, 
Comt ‘based  Meta  Group  Inc.  "They’re  in  the  nexus 
of  negotiations." 

Simply  put,  being  a  CFO  of  IT  “is  a  real  tough  jc^.” 
says  Bill  johnston,  president  of  Alinean  LLC,  a  consult¬ 
ing  firm  in  Orlanda  There  are  several  reasons  for  thi^ 

For  starters,  it’s  still  a  universal  challenge  —  even 
for  financial  wizards  —  to  effectively  measure  and 
quantify  the  impact  that  technology  investments  are 
having  on  profits  or  operational  efficiency.  Add  to  that 
the  dearth  of  tools  available  to  attempt  those  measure¬ 
ments.  Finally,  throw  in  the  complexities  of  develop¬ 
ing  a  standardized  approach  to  valuing  FT  investments 
across  multiple  business  divisions  or  regions,  and  it’s 
a  wonder  that  IT  controllers  can  do  their  jobs  at  all 

Unaccountable 

Measuring  the  quantifiable  impact  of  IT  investments 
is  a  big  challenge  for  all  types  of  companies,  even 
those  with  world-class  IT  practices  such  as  Intel 
Corp.  Showing  the  link  between  IT  spending  and  the 
benefits  accrued  u  the  “key  issue  that  nearly  every 
IT  organization  faces,"  says  Intel  CIO  Doug  Busch. 

Sure,  Intel  has  continually  refined  its  IT  funding 
model  And  it’s  had  a  finance  manager  in  at  least  one 
of  its  IT  organizations  since  1994,  including  Theresa 
Kelly,  who  took  over  as  CFO  for  the  company’s  newly 
consolidated  IT  department  a  few  months  ago.  says 
Busch.  Intel  has  also  taken  advantage  of  IT  portfolio 
management  and  other  measurement  techniques  to 
help  its  IT  organization  identify  the  link  between  IT 
and  more  than  $1  billion  in  bottom-line  improve¬ 
ments  to  the  company  between  2000  and  early  2004, 
says  Busch. 

But  he'll  also  tell  you  that  Intel  is  having  as  much 
trouble  as  any  company  getting  its  accounting  sys¬ 
tems  to  assimilate  IT-related  finances  into  its  core 
accounting  practices. 

Allstate’s  Scardina  understands.  "Legacy  finance 
systems  aren’t  well  suited  to  keeping  track  of  IT  in¬ 
vestments.  particularly  at  the  kind  of  granular  level 
that  we  feel  we  need  in  order  to  provide  the  clarity  of 
spend."  he  says.  For  instance,  standard  accounting 
systems  don’t  provide  Allstate's  IT  finance  profes¬ 
sionals  with  tiK  ability  to  track  the  number  of  desk¬ 
tops  in  use  across  the  organization  or  processor  pow¬ 
er  in  use  per  IT  dollar  spent,  notes  Scardina. 

Allstate  does  use  IT  asset  management  software  to 
help  h  track  hardware  and  software  systems.  But  the 


insurer’s  accounting  software  goes  only  so  far  in  pro¬ 
viding  Scardina  and  his  staff  with  the  l^d  of  finan¬ 
cial  information  on  FT  investments  that  they  need. 

"From  a  corporate  standpoint,  you  want  to  have 
one  set  of  financial  records  to  report  on."  Scardina 
says.  "But  from  an  IT  standpoint,  (accounting  sys¬ 
tems}  don’t  have  all  the  data  you  need." 

To  help  resolve  those  kinds  of  issues.  AIG  has  de¬ 
veloped  common  financial  reporting  processes  and 
software  templates  to  collect  IT-relat^  financial 
data  across  its  worldwide  operations  and  feed  it  into 
the  company’s  Hyperion  Solutions  Corp.  accounting 
system,  says  Barkley. 

But  the  accounting  system  problems  are  further 
exacerbated  at  global  companies  such  as  Chicago- 
based  Aon  Corp.,  which  has  business  divisions  in  120 
countries.  "IT  is  a  function  that  runs  across  all  parts 
of  the  organization,  and  it’s  very  difficult  to  extract 
the  functional  costs  from  the  [profit  and  toss  state¬ 
ments]  of  various  reporting  systems,"  says  David 
Barker,  vice  president  of  global  IT  finance  for  the 
provider  of  risk  management,  reinsurance  and  hu¬ 
man  capital  consulting  services. 

The  bottom  line  is  that  many  CFOs  of  IT  are  hav¬ 
ing  a  hard  time  translating  to  senior  management  the 
effect  that  IT  investments  are  having  on.  weU.  the 
bottom  line. 


Besides  the  difficulties  inherent  in  measuring  intan¬ 
gibles  across  multiple  divisions  with  inadequate  tools, 
there  are  other  problems.  CFOs  of  IT  “don't  have  good 
data  or  good  information,  and  that  makes  it  tough  for 
them  to  figure  out  how  much  it  costs  them  to  run  a 
data  center  and  whether  it  makes  sense  to  outsource 
it"  says  Barbara  Gomolski.  an  analyst  at  Gartner  Inc. 
and  a  Computerworld  columnist. 

Another  factor  that  makes  it  tough  for  CFOs  of  IT 
to  do  their  jobs  effectively  is  the  lack  of  financial 
know-how  among  IT  staffers  and  midlevel  IT  man¬ 
agers.  “It’s  usually  a  relatively  small  number  of  peo¬ 
ple  at  the  top  of  the  IT  [organizational]  chart  who  are 
Vith  it'  financially,"  says  Gomolski. 

Teaching  Finandalese 

Some  IT  controllers  are  attacking  the  problem  by 
having  their  finance  staffers  educate  IT  workers  on 
financialese.  At  Allstate,  everyone  \^o’s  involved  in 
IT  dccisioo-makii^  has  received  training  in  the  com¬ 
pany's  financial  allocation  process,  says  Scardina. 

At  DHL.  Zaichick  and  his  staff  have  woiked  closely 
with  the  company’s  program  management  office  and 
technical  staff  over  the  past  few  years  to  ensure  that 
front-line  technology  staffers  understand  the  finan¬ 
cial  requirements  necessary  to  develop  a  business 
case  for  a  project. 

Other  companies  have  taken  more  formal  ap¬ 
proaches  to  educating  IT  workers  on  finances.  At 
Intel,  all  employees  are  able  to  take  a  "business 
acumen  class."  which  educates  workers  on  the  basic 
business  parameters  for  the  company  (i.e..  assessing 
Intel’s  progress  against  the  competition),  says  Busch. 
In  addition.  IT  project  managers  are  taught  to  help 
the  IT  finance  team  evaluate  financial  alternatives  as 
part  of  their  skills  training,  he  says. 

To  help  both  IT  and  finance  executives  get  a  better 
handle  on  these  issues,  the  Society  for  Information 
Management  formed  an  alliance  with  the  Financial 
Executives  Institute  a  few  years  ago.  says  Aon  CIO 
June  Drewry.  who  was  SIM’s  international  president 
until  2000.  The  two  groups  meet  and  share  strategies. 

Despite  the  problems  inherent  in  their  traditional 
jobs.  CFOs  of  IT  are  undeterred.  In  fact  a  growing 
number  of  them,  like  DHL’s  Zaichick.  are  taking  on 
expanded  FT  management  roles,  including  participa¬ 
tion  in  FT  benchmarking,  contract  negotiations  and 
software  licensing.  Meta's  Rubin  describes  the  new 
role  this  way;  'You’re  not  the  teller  in  the  bank 
counting  the  dollars;  you’ve  become  a  financial  coun¬ 
selor  to  the  business."  O  48675 


Transparency  -  the  New  Engine 
of  Growth  and  Greatness 

Critical  reading  for  IT  professionals  and  managers.  Succeed  by  learning 
how  the  Internet  and  open  IT  architectures  enable  companies  to 
become  open  enterprises  -  in  turn  competing  and  performing  better. 


“We  need  a  corporate  philosophy  for  the  21  si  century. 
Tapscott  and  Tlcoirs  book  The  Naked  Corporation  provides  this 
not  only  the  rationale  for  a  transparent  corporation  but  also 
the  priiKriples  of  leadership  in  an  open  \vorld.“ 

—  Klaus  Schwab.  Founder  and  President,  World  Economic  Forum 


'r.  i 


Reaction  from  business  leaders 


“A  well-researched  and  timely  book.  The  authors  show 
how  trust  -  powered  by  broad  corporate  transparency  -  isn’t  just 
about  ethics,  it  is  about  success.” 

—  John  Chambers,  President  and  CEO,  Cisco  Systems 


“Don  Tapscott  and  David  Ticol!  hit  the  bulls-eye  with 
The  Naked  Corporation.  The  demand  for  openness  and  candor  has  never 
been  greater.  The  Naked  Corporation  is  a  leadership  toolkit  for  turning  the 
relentless  demand  for  transparency  from  threat  to  advantage.” 

—  A.G.  Lafley,  Chairman,  President  and  Chief  Executive,  Procter  &  Gamble 


“They’ve  done  it  again.  Tapscott  and  Ticoll’s  capacity  to  combine  a  fresh 
and  authentic  perspective  with  real  world  data  has  once  again  opened  the 
aperture  on  our  emerging  networked  economy.  A  brilliant  work.” 

—  Dr.  Erk  Schmidt,  Chairman  and  CEO,  Google.  Inc. 


“A  rare  thing  these  days  -  a  business  book  with  a  profound  and 
important  new  idea.  The  Naked  Corporation  explains  how  a  new  foree 
is  changing  the  corporation  and  competitiveness.  There  are  relevant, 
sometimes  jarring  insights  in  every  chapter.  And  what  a  great  read.” 
—  Indra  Nooyi,  President  and  CFO  of  PepsiCo,  Inc. 


Tapscott  and  TicoU  are  ahead  of  the  wave.  The  era  of  transparency  and 
all  its  implications  are  about  to  crash  down  on  corporations  everywhere. 
The  Naked  Corporation  is  the  first  survival  guide.” 

—  Paul  Taaffe,  Chief  Executive  Officer.  Hill  &  Knowlton 


“The  Naked  Corporation  argues, 
beautifully  and  persuasively,  that  there 
is  no  contradiction  between  good  business 
and  the  values  of  honesty  and  openness. 
This  book  belongs  in  the  briefcase  of  every 
right-thinking  manager  in  the  country." 
—Malcolm  Gladwell,  author  of  The  Tipping  Point 
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It’s  not 

B7  about  what  i 

happens;  it’s 
about  howyou 
respond  to  what 
happens. 

OREO  HANSON,  assistant 
sergeant  at  arms  and  first  CIO 
of  the  U.S.  Senate 

1 

Think  you’ve 
got  tough  cus¬ 
tomers?  J.  Greg 
Hanson  serves 
100  U.S.  sena¬ 
tors,  dozens  of 
committees 
cUidstaffeinSO 
states.  And  about 
that  upcoming 
inauguration . . . 

About  a  year  and  a 
■  |p  Mil  half  ago,  the  leader- 
H  I  X  ^  f  a  V  shio  nf  th^  .Cpn. 


ship  of  the  US.  Sen- 
ate  decided  to  raise 
the  profile  of  IT  at  the  Capitol  They 
wanted  to  provide  direction,  update 
technology,  elevate  awareness  and 
improve  customer  service.  7b  accom¬ 
pli^  that,  they  invited  J.  Greg  Han¬ 
son  to  become  assistant  sergeant  at 
arms  and  the  Senate’s  first  CIO. 
“When  you  ^  a  call  like  that, 
the  only  correct  re^)onse  is  yes," 
Hanson  says. 

Since  then,  he  has  faced  many  of 
the  same  challert^  encountered  by 
CIOs  everywhere,  as  well  as  some 
that  are  unique.  Hanson  told  Kath¬ 
leen  Melymuka  about  Ids  job,  where 
“every  day  is  a  surprise.” 
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Ybu*r»  the  CKh  what  does  your  other  title 
meeB?  In  the  Senate,  ali  technology  is 
managed  out  of  the  seigeant  at  arms  of¬ 
fice.  so  Tm  an  assistant  sergeant  at  arms. 

Are  you  I  poRbcai  jurdde?  No.  definitely 
not.  Fm  not  a  tech  junkie  either.  Fm 
interested  in  delivering  tools  and  solu¬ 
tions  to  help  senators  accomplish  their 
missions.  I  look  for  ways  to  use  tech¬ 
nology  to  solve  business  problems,  not 
for  technology's  sake. 

WhalldndscrfposilionstUyouholdprevi- 
ouaiy.  and  in  what  types  of  oreanizatiom? 
Prior  to  here,  I  was  CTO  at  Universal 
Systems  &  Technology,  a  high-tech 
company  in  Northern  Virginia-  Prior  to 
that,  I  was  CTO  at  Telos  Corp.  We 
grew  that  company  and  spun  off  some 
new  companies,  and  I  did  some  CIO 
work  in  some  of  the  subsidiaries.  Prior 
to  that.  I  bad  a  20-year  career  in  the 
Air  Force,  and  I  was  in  technology 
the  entire  tune. 

SonMClOaconsidartharnsafmlaehfNdo- 
gistsfirst:otharsconaidarthemsofv«spri- 
marfly  busfnaa  poopfa.  Where  do  you  fal 
ahmg  that  apednm?  Fve  got  very,  very 
deep  tech  expertise;  IVe  got  a  PhD,  in 
computer  science.  But  in  my  entire  ca¬ 
reer  —  from  the  Air  Force  through  my 
time  in  the  commercial  world  ~  it's 
been  clear  to  roe  that  technology  is  a 
tool  It’s  a  wonderful  tool  that  can  give 
you  advant^e  if  you  use  it  correctly, 
but  it’s  a  tool  to  make  bigger,  more  im¬ 
portant  things  happen.  I  consider  my¬ 
self  a  business  person  before  a  tech¬ 
nologist,  even  ^ou^  I  still  teach  a 
graduate  course  in  technology  at  the 
University  of  Maryland. 

How  big  ia  the  Sanata  rr  group?  I  have 
about  SOO  people  reporting  to  me.  Two 
hundred  fifty  to  300  are  full-rime  gov¬ 
ernment  employees:  the  rest  are  con¬ 
tractors.  But  n*  at  the  Senate  is  even 
bigger.  Tb  get  it  done  right  requires  a 
team  that  also  includes  the  Rules  Com¬ 
mittee  and  the  Appropriations  Com¬ 
mittee  of  the  Senate.  And  every  sena¬ 
tor’s  office  has  a  small  tech  stak  They 
report  to  the  seiutors.  but  they're  also 
part  of  the  larger  tech  team  here. 

Wlut  is  the  rr  gm9  reapomttda  for?  We're 
responsible  for  the  entire  Senate  IT  in¬ 
frastructure.  all  the  networks,  all  the 
telecommunications,  information  pro¬ 
cessing.  storage,  front-  and  back-offke 
applicatioirs  —  all  the  typical  things  a 
CIO  does.  We’re  also  very,  very  closely 
tied  to  continuity  of  operations,  and 
we  do  a  lot  of  planning  and  woik  with 
our  counterparts  in  security.  We're  re¬ 


sponsible  to  see  that  the  Senate  has 
state-of-the-art  technology  and  to  look 
into  further  strategic  technology  and 
enterprise  architecture  and  how  that 
can  best  be  used  in  this  environment. 
So  I've  got  CTO  as  well  as  CIO  duties. 
It’s  a  dream  job. 

(s  your  position  in  any  way  poMkaf?  It's  a 
federal  government  job,  but  it’s  not  po¬ 
litically  aligned,  and  it’s  completely 
nonpartisan. 

What  art  soma  of  the  uniquo  aapocts  of  your 
role  >  things  you  do  that  art  outsMo  the 
pwvlewofotherCtOB?Igetto  do great 
stuff.  When  we  have  elections  or  a 
transition  or  an  inauguration,  I  have  to 
support  them.  We  have  to  set  up  the 
offices,  provide  all  the  technology,  get 
the  systems  set  up.  train  the  staff,  sup¬ 
port  telephone  radio.  When  Ptesi- 
dem  Reagan's  funeral  took  place,  we 
supported  that.  And  as  an  assistant 
sergeant  at  arms.  I  participate  in 
ceremonies  and  sometimes  escort 
dignitaries. 

What  art  soma  of  your  top  prioribas  as  CfO? 

Customer  service;  that’s  No.  1.  That's 
tough  in  this  environment  because  I 
have  about  10,000  customers.  Equal  to 
that  is  security.  They  need  to  access  in¬ 
formation  anywhere  at  any  time. 

Next  is  strategic  planning;  looking 
over  the  bow  for  new  technolt^  and 
iimovation,  staying  ahead  of  the  tech¬ 
nology  curve.  Technology  changes 
very  quickly,  and  senators  aiKl  staff  see 
that  and  demand  excellent  technology. 
We  have  to  keep  it  all  lined  up  aiul 
facing  in  the  ri^t  direction. 

Tan  thousand  cuBlomars?  I  thought  you  htoi 
K)0. 1  have  137  entities:  a  hundred  sen¬ 
ators,  all  the  committees  and  leader¬ 
ship  organizations,  the  sergeant  at 
arms  organization,  the  secretary  of  the 
Senate.  I  support  the  senators’  state  of¬ 
fices  as  well  —  their  infrastructure, 
help  desk,  telecom  requirements. 

When  you  add  all  the  staffs  there  are 
about  10,000  people. 


formoniroteoringoonimnoothalaotiiiri- 
orftioo  for  IT  proWcIs  and  opondtag.  b  Ihara 
anything  oMtar  b  fha  Sonato?  We  use  a 

combination  of  the  Setute  leadership 
organization,  plus  the  Rules  and  Ap¬ 
propriations  committees,  phis  my  or¬ 
ganization.  Rules  sets  policy  and  pro¬ 
cedures.  We  build  budgets,  but  Appro¬ 
priations  has  to  bless  that  The  Senate 
leadership  gives  me  oversight,  and 
there  are  organizations  of  system  ad¬ 
ministrators  and  administrative  man¬ 


agers,  and  1  get  input  from  them  on  a 
constant  basis,  as  well  as  from  technol¬ 
ogy  working  groups. 

What  are  some  of  your  big  cfudbngas? 

When  Fra  trying  to  do  a  big  project,  I 
try  to  gain  consensus,  and  ^at’s  a  chal¬ 
lenge.  There’s  also  the  challenge  of 
being  in  the  public  eye  and  the  chal¬ 
lenge  of  special  events.  We  have  the 
regular  day-to-day  work,  and  then 
there’s  a  special  event  and  there's  a 
surge,  and  we  have  to  set  up  transition 
offices  or  work  a  state  funeral  in  addi¬ 
tion  to  all  the  day-to-day  stuff. 

There’s  the  challenge  of  strategic 
planning.  I  have  137  entities.  Each  has 
an  idea  of  where  we  should  head  in 
technology  strategy,  and  I  have  to  take 
all  that  into  account. 

There’s  the  challenge  of  getting  con¬ 
sistent.  workable  requiremems.  I  can’t 
wait  aroiind  forever  to  require¬ 
ments,  or  the  technology  will  jump  out 
from  under  me.  So  we  go  with  innova- 
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rion.  rapid  prototyping,  small  pilots. 
We'll  put  something  in  there  real  quick 
and  try  H  on  one  office,  and  if  they  like 
it.  maybe  others  wilL  We  have  to  think 
big.  start  small  and  scale  f^ 

CKHsonwtknas  complain  that  thbr  bust- 
ness  exacuttm  ar«  tocbracaly  narato. 
How  toch-sawy  b  the  stwags  sanstor? 

The  senators  I’ve  woriced  with  are  very 
tech-sawy.  They  have  cell  phones. 
PDAs,  BlackBerrics.  They  operate 
computers.  They  know  how  to  do  this 
stuff.  They  also  know  what  they  need 
to  get  their  jobs  done,  and  they  know 
the  technolog)’  is  there  to  do  it. 

What’s  tfw  toughest  pert  of  your  job? 
Trying  to  merge  requirements  from  so 
many  entities  into  something  that  you 
can  deliver  that  will  scale  and  be  cost- 
effective  and  apply  to  everyone.  Trying 
to  make  everyone  happy  with  137  dif¬ 
ferent  customers  to  satisfy.  That  forces 
me  to  consider  a  lot  of  different  op- 
tiotts  and  choices.  For  example,  not  all 
senators  want  e-mail  the  same  way. 
There  are  choices  and  options  out 
there,  and  they  know  about  them.  So 
they  won’t  just  take  what  I  offer.  I  have 
to  ffgure  out  a  way  to  gel  It  all  to  mesh 
to  one  set  of  requirements  that’s  cost- 
effective  and  I  can  support. 

Him  wM  your  pariorntancia  ba  maaaurad? 

in  tenns  of  customer  satisfaetkm.  I  do 
a  formal  survey  every  year.  It's  in  proc¬ 
ess  now.  It's  not  a  lirtic  thing  with  an 
e-mail  questionnaire.  We  sit  dow’n  or 
get  on  the  phone  with  each  office  and 
get  responses.  We  hear  h  directly  — 
warts  and  alL  My  performance  v^l 
also  be  measured  by  our  ability  to  re¬ 
spond  to  unforeseen  events  and  by  the 
ability  of  senators  to  communicate 
an)rwhcre,  anytime,  under  any  circum¬ 
stances.  It's  not  about  what  happens; 
it’s  about  bow  you  respond  to  what 
happens. 

What's  baan  your  mast  manwrabto  day  to 

tar?  1  bad  been  here  maybe  a  month, 
and  I  was  called  into  a  senator's  office 
by  the  senator  himself  and  I  got  royally 
chewed  out.  We  were  in  the  process  of 
migrating  e-nuil  accounts  a^  had  mi¬ 
grated  his  to  a  new  system.  We  had 
done  a  wonderful  job  on  the  migration 
but  not  on  the  customer  care  part.  He 
gave  it  to  me  good.  And  I  couldn’t  help 
thinking:  Fm  standing  b  our  nation’s 
Capitol  being  chewed  out  by  a  U.S.  sen¬ 
ator.  He’s  spending  his  time  being  oon- 
ceroed  about  this.  When  I  walked  out  of 
there.  I  was  as  happy  as  I  could  be.  be¬ 
cause  I  thought,  This  is  something  I 
can  rtx."  049688 
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You’re  the  CIO;  what  does  your  other  title 
fnean?  In  the  Senate,  all  technology  is 
managed  out  of  the  sergeant  at  arms  of¬ 
fice.  so  Tm  an  assistant  sergeant  at  arms. 

Are  you  a  political  junkie?  No,  definitely 
not.  I’m  not  a  tech  junkie  either.  I'm 
interested  in  delivering  tools  and  solu¬ 
tions  to  help  senators  accomplish  their 
missions.  I  look  for  ways  to  use  tech¬ 
nology  to  solve  business  pri)blcms.  not 
for  technolog>‘’s  sake. 

What  kinds  of  positions  did  you  hold  prew- 
ousfy.  and  in  what  types  of  organizations? 
Prior  to  here.  I  was  CTO  at  Universal 
Systems  &  Technology,  a  high-tech 
company  in  Northern  Virginia.  Prior  to 
that.  I  was  CTO  at  Telos  Corp.  We 
grew  that  company  and  spun  off  some 
new  companies,  and  1  did  some  CIO 
work  in  some  of  the  subsidiaries.  Prior 
to  that.  I  had  a  20-year  career  in  the 
Air  Force,  and  I  was  in  lechnoiog>' 
the  entire  time. 

Some  CIOs  considar  ttiemsafves  technolo¬ 
gists  first:  others  consider  themsdves  pri* 
marfly  business  people.  Where  do  you  fall 
along  tl^  spectrum?  IVe  got  very,  very 
deep  tech  expertise;  I’ve  got  a  PhD.  in 
computer  science.  But  in  my  entire  ca¬ 
reer  —  from  the  Air  Force  through  my 
time  in  the  commercial  world  —  it’s 
been  clear  to  me  that  technology  is  a 
tool.  It’s  a  wonderful  tool  that  can  give 
you  advantage  if  you  use  it  correctly, 
but  it’s  a  tool  to  make  bigger,  more  im¬ 
portant  things  happen.  I  consider  my¬ 
self  a  business  person  before  a  tech¬ 
nologist.  even  though  I  still  teach  a 
graduate  course  in  technology  at  the 
University  of  Maryland. 

How  big  is  the  Senate  IT  group?  I  have 
about  500  people  reporting  to  me.  Two 
hundred  fifty  to  300  are  full-time  gov¬ 
ernment  employees;  the  rest  are  con¬ 
tractors.  But  IT  at  the  Senate  is  even 
bi^er.  To  get  it  done  right  requires  a 
team  that  also  includes  the  Rules  Com¬ 
mittee  and  the  Appropriations  Com¬ 
mittee  of  the  Senate.  And  every  sena¬ 
tor’s  office  has  a  small  tech  staff.  They 
report  to  the  senators,  but  they’re  also 
part  of  the  larger  tech  team  here. 

What  is  the  (T  group  resportsibie  for?  We're 
responsible  for  the  entire  Senate  IT  in¬ 
frastructure,  all  the  networks,  alt  the 
telecommunications,  information  pro¬ 
cessing,  storage,  front-  and  back-office 
applications  ail  the  typical  things  a 
CIO  does.  We’re  also  very,  very  closely 
tied  to  continuity  of  operations,  and 
we  do  a  lot  of  planning  and  work  with 
our  counterparts  in  security.  We’re  re¬ 


sponsible  to  see  that  the  Senate  has 
state-of-thc-an  technolog>-  and  to  look 
into  further  strategic  technology  and 
enterprise  architecture  and  how  that 
can  best  be  used  in  this  environment. 
So  I’ve  got  CTO  as  well  as  CIO  duties. 
It's  a  dream  job. 

is  your  positiofl  in  any  way  pofiticar?  It's  a 
federal  government  job.  but  it's  not  po¬ 
litically  aligned,  and  it’s  completely 
nonpartisan. 

What  are  some  of  the  unique  aspects  of  your 
role  -  things  you  do  that  are  outside  the 
purview  of  other  OOs?  I  get  to  do  great 
stuff".  When  wc  have  elections  or  a 
transition  or  an  inauguration,  I  have  to 
support  them.  We  have  to  set  up  the 
offices,  provide  all  the  technology,  get 
the  systems  set  up.  train  the  staff,  sup¬ 
port  telephone  and  radio.  When  Presi¬ 
dent  Reagan’s  funeral  took  place,  we 
supported  that.  And  as  an  assistant 
sergeant  at  arms,  I  participate  In 
ceremonies  and  sometimes  escort 
dignitaries. 

What  are  some  of  your  top  prwrtties  as  QO? 
Customer  service;  that’s  No.  I.  Thai’s 
tough  in  this  environment  because  I 
have  about  10,000  customers.  Equal  to 
that  is  security.  They  need  to  access  in¬ 
formation  anywhere  at  any  time. 

Next  is  strategic  planning:  looking 
over  the  bow  for  new  technology  and 
innovation,  staying  ahead  of  the  tech¬ 
nology  curve.  Technology  chaises 
very  quickly,  and  senators  and  staff  see 
that  and  demand  excellent  technology. 
We  have  to  keep  it  all  lined  up  and 
facing  in  the  right  direction. 

Ten  thousand  customers?  I  Omight  you  had 
100. 1  have  137  entities:  a  hundred  sen¬ 
ators,  all  the  committees  and  leader¬ 
ship  organizations,  the  sergeant  at 
arms  organization,  the  secretary  of  the 
Senate.  I  support  the  senators'  state  of¬ 
fices  as  well  —  their  infrastructure, 
help  desk,  telecom  requirements. 

When  you  add  all  the  staffs,  there  are 
about  10,000  people. 

In  many  companies,  the  busirtess  executives 
form  an  fT  steering  committea  that  sets  pri¬ 
orities  for  IT  projects  and  spending,  b  there 
anytMng  sindlar  ki  the  Senate?  Wc  use  a 
combination  of  the  Senate  leadership 
organization,  phis  the  Rules  and  Ap¬ 
propriations  committees,  plus  my  or¬ 
ganization.  Rules  sets  policy  and  pro¬ 
cedures.  We  build  budgets,  but  Appro¬ 
priations  has  to  bless  that.  The  Senate 
leadership  gives  me  oversight,  and 
there  are  organizations  of  system  ad¬ 
ministrators  and  administrative  man¬ 


agers.  and  1  get  input  from  them  on  a 
constant  basis,  as  well  as  from  technol¬ 
ogy  working  grinips. 

What  are  some  of  your  big  challenges? 
When  I'm  trying  to  do  a  big  project.  1 
try  to  gain  consensus,  and  that’s  a  chal¬ 
lenge.  There’s  also  the  challenge  of 
being  in  the  public  eye  and  the  chal¬ 
lenge  of  special  events.  We  have  the 
regular  day-io-day  work,  and  then 
there’s  a  special  e\'eni  and  there’s  a 
surge,  and  wc  have  to  set  up  transition 
offices  or  work  a  state  funeral  in  addi¬ 
tion  to  all  the  d3>’'to-day  stuff. 

There's  the  challenge  of  strategic- 
planning.  1  have  137  entities.  Each  has 
an  idea  of  where  wc  should  he.id  in 
technology  strategy,  and  1  have  to  take 
all  that  into  account. 

There’s  the  challenge  of  getting  tx>n- 
sisteni.  workable  requirements.  1  can’t 
wall  around  forever  to  get  require¬ 
ments.  or  the  technology  will  jump  out 
from  under  me.  So  wc  go  with  innova¬ 
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tion.  rapid  prototyping,  small  pilots. 
We’ll  pul  something  in  there  real  quick 
and  try  it  on  one  office,  and  if  they  like 
it.  maybe  others  will.  Wc  have  to  think 
big,  start  small  and  sc-ale  fast. 

CIOs  sometimes  complain  that  theu  busi¬ 
ness  executives  are  technicaly  iKterale. 
How  tech-sawy  is  the  average  senator? 

The  senators  I’ve  w«irked  with  arc  very 
tcch-savvy.  Thc>'  ha>x‘  cell  phones. 

I  TD.-Vs.  BlackBerrics.  They  t)pt*r3tc 
j  computers.  They  kni>w  how  to  do  this 
I  stuff.  They  also  know  what  ihty  need 
I  to  gel  their  jobs  done,  and  they  kmivv 
I  the  technok'igj’  is  there  to  rt. 

i 

I  What’s  the  toughest  pari  of  your  job? 
Trying  to  merge  requirements  frt»m  so 
man>-  entities  into  something  that  you 
can  deliver  that  will  scale  and  be  cost- 
effective  and  apply  to  everyone.  Tryirq* 
to  make  everyone  happy-  with  137  dif¬ 
ferent  customers  to  sati.sfy.  That  forces 
me  to  amsidcr  a  lot  of  differt-nt  op¬ 
tions  and  choices.  For  example,  not  all 
senators  want  e-tnail  the  same  way. 
There  are  choices  and  opiicms  out 
there,  and  they  know  about  them.  So 
they  won't  just  lake  what  I  offer.  I  have 
to  figure  i>ui  a  w  ay  i**  gel  it  all  to  mesh 
to  one  set  of  requirements  that’s  cost- 
effective  and  I  can  support 

How  wM  your  porlormance  be  measved? 

In  terms  of  customer  satisfaction.  I  do 
a  formal  survey  every  year.  It’s  in  proc¬ 
ess  now.  It's  nm  a  little  thing  with  an 
e-mail  questionnaire.  We  sU  down  or 
get  on  the  phone  with  each  office  and 
get  responses.  Wc  hear  It  directly  — 
warts  ar>d  all.  My  performance  will 
also  be  measured  by  our  ability  to  re¬ 
spond  to  unforeseen  events  and  by  the 
ability  of  senators  to  communicate 
anywhere,  anytime,  under  any  cianun- 
stanccs.  It’s  nut  about  what  happens: 
it’s  about  how  you  respond  to  what 
happens. 

What’s  been  your  most  memorable  diy  so 
far?  I  had  been  here  maybe  a  month, 
and  I  was  called  into  a  senator’s  office 
by  the  senatitr  himself,  and  I  got  royally 
chewed  out.  Wc  were  in  the  process  of 
migrating  e-mail  accounts  and  had  mi¬ 
grated  his  to  a  new  system.  Wc  had 
done  a  w-onderfui  job  on  the  migration 
but  not  on  the  customer  care  part.  He 
gave  it  to  me  good.  And  1  couldn't  help 
thinking:  I’m  standing  in  our  nation’s 
Capitol  being  chewed  out  by  a  U.S,  sen¬ 
ator.  He’s  spending  his  time  being  con¬ 
cerned  about  this.  When  I  walked  out  of 
there.  I  was  as  happy  as  I  could  be.  be¬ 
cause  i  thought.  *This  is  something  I 
can  fix.”  O  49666 
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The  2004  Wall  Street  Journal'  Hams  Interactive 
School  Survey  of  2  849  MBA  -ecruiters  recently  ranheri 
the  top  U  S  business  schools.  The  lindmos 
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IVt  bam  In  in  cltdR  iMMSMiMil  fMd 
for  10  yaare.  but  rm  comUaring  a  mUMa 
earaar  ehanga  to  ba  an  IT  bolniclDr.  Cm 
yw  ghn  ma  aom  advica  m  tha  marbat 
praameto?  WNte  the  technical  iraininoand 
encutive  education  indusby  has  exploded  in 
thepastfiveyears.rvebeenafnazadatthelimrt- 
ed  amount  of  experience  that  instructors  tend  to 
have.  A  value-added  trainino  opportunity  can 
corne  in  twotorms:  on-the-job  tramg  and  a 
welhMoanized  and -rnanaged  dassroorn  exp^ 
hence  frorn  an  instnK^orvvho  has  leal-worid  ex¬ 
perience.  It  sounds  Kite  you  could  contribute  to 
the  latter. 

The  maritet  generally  doesn't  pay  wel. 
whether  you're  training  or  providsHlinst^^ 
In  a  more  tonnal  acadento  environrnent  How¬ 
ever,  the  intrinsic  benefits  of  changing  people's 
lives  and  growing  their  capabities  car)*!  be  val¬ 
ued  in  doiats.  There  are  plenty  of  jobs  out  there 
in  this  vena,  so  go  for  it  A  riskless  approach  to 
dwing  in  may  be  to  accept  a  part-tine,  evening 
itstruction  rito  that  iMxild  alow  you  to  fed  out 
the  iidustry  and  the  classroom  setting. 


Small  Companies  Gearing  Up 

Whkhbest  describes  theeurrmtstatusof your fiiU-timelTstaff? 


Companies  wim 20,000 
or  more  employees 


Con^Kmies  with  5,000 
to  1^,999 employees 


Companies  with  1,000 
to  4J999  employees 


Corryxzrues  with  six 
to999etT^loyees* 


Are  there  ail  good  opporlunities  for 
mainframa  desiyi  and  doytopment?  Tve 
apant  the  paat  10  years  werfdng  with 
midrmga  softwera  and  Infrastnictura.  Td 
Rha  to  return  to  the  mainfranie  world,  but  I 
don’t  want  to  take  a  big  cut  in  pay.  b  this 
poaaibb?  I’m  nd  sure  that  1  would  lecotnmend 
tttomove.  especiatty  if  your  paycheck  is  a  priori¬ 
ty.  Keep  to  mito  that  pay  isdiectly  correlated  to 
yourdepthofexperiencetoaspe^niche{fi- 
nancbl  services  or  tnanutoctoring.  for  example) 
ttodspecife  sd  of  techTMilogies.  The  rnainframe 
world  is  static  -  you  rarely  get  boosts  in  pay  for 
niche  experience.  This  is  rnostly  because  large, 
transaettond  envionments  tend  to  be  operating 
on  older  business  models  that  don't  evolve  as 
rapkty  arto  don't  requie  sexy  rww  technology 
enhancements  to  enable  them. 

I  hm  two  emptoyoas  who  work  for  me  in 
Unioe.  I  vbit  the  ptant  at  boat  once  a 
waek,biitwhmrfflnolthere.myemploy- 
eea  take  aduaiilaoe  of  my  abaence  to 
bam  early,  taka  tang  kaiekas  and  so  on.  I 
got  comptoMs  of  bnglhy  wait  tknos  for 
probbms.  What  are  aomo  auggoettons? 
Quite  sinply.  they  need  to  be  terminated.  That 
usualypresentsatongKstofhumanresourcee- 
sues  to  overcome,  but  it's  worth  your  tine  now 
to  create  a  wefi-docurnented  action  plan  for 
bote  entobyees  tf  you  don't  aieady  have  a  long 
list  d  l«y  pertOfTnance  indtoatots.  I  would  start 
with  that  and  todude  it  to  the  action  pirn.  Vbu 
shouldbeaUetomeasuretheemployees'pro- 
itoctivity  agatost  those  todcators.  and  if  the  em¬ 
ployees  are  taMng  short  of  the  gods,  they  can 
and  should  be  terminated. 

fve  had  the  opportunity  to  manage  many  re¬ 
mote  entobyees.  arb  I  fito  that  tt  takes  a  special 
kite  of  worker  to  rnake  it  successftjl.  Vbu  need 
a  seH-starterwtoo  doesnl  need  hand-hobtog 
and  who  appreciates  the  opportunity  for  a  Ktfle 
autonomy.  Ybu  may  be  abb  to  trade  up  for  two 
empbyees  (or  even  one.  dependtog  on  how  un¬ 
productive  they  are)  who  have  tnore  experience 
and  wi  acced  the  same  just  because  toey 

want  the  opportunity  to  work  todependently.  It's 
atoughctaienge;goodluckl0  49065 
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EVENTS 


BART  PERKINS 


Competitive 

Intelligence 

■  Oct  2B‘29.  Boston 

SpenHT  InstHiils  for  iniBrnsllonaJ 

Resstreh 

Competitive  Technicai  Intelligence 
2004  explores  tools  and  tech* 
niques  for  using  business  intelH- 
gence.  Topics  include  improving 
your  odds.  Unking  CTI  to  customer 
needs,  leveraging  new  analysis 
and  collection  techniques,  and 
anticipating  opportunities. 
wwwJrusa.oon^clV 

Business  Process 
Management 

■Nov.3^NswVoffc 
Sponssr.  BnWtuiin  Otmp  Inc. 

The  sixtfi  annual  Business  Process 
Management  Conference  includes  ' 
both  business  and  IT  tracks  with 
presentations,  case  studies  and 
best  practices.  Topics  indude 
process  modeling,  analysis  and 
design:  process  ownership  and 
change  management;  and  rules* 
driven  BPM. 

wwwtninrtonn  ynM|>.uwitAiy/ 


Executive  Coaching 

SpeiMn  The  Coaference  Bovd  fne. 

The  2004  Executive  Coaching 
Seminar  offers  presentations  on 
topics  inciuding  changing  the  rules 
of  the  global  game;  the  ethical  chal¬ 
lenge  to  U.S.  business;  and  what's 
coadtaUe.  what's  not. 
MvwxonfvenotHMNVdorg/ 
eeacMngMm 

World  Business 
Forum 

Sponaor  TTm  HSH  Group  lid. 

The  conference  mdudes  political, 
academic  and  practical  viewpoints 
irom  speakers  indudng  Jack  Welch. 
Madeleine  Albright  and  Larry  Bos- 
sidyon  leadership,  organization, 
financid  markets,  innovation,  exe¬ 
cution.  resilience  and  growth. 


Development 
Drop-Down  Budgeting 


Many  companies  are  beginning  to 

increase  their  budgets  for  new  IT  de¬ 
velopment.  Unfortvuiately,  they  often 
underestimate  ongoing  production 
costs  —  the  “drop-down”  costs  from 
development  efforts.  A  realistic  IT  budget  must  plan  for 
a  project’s  support  after  it’s  installed.  Drop-down  costs 
include  a  portion  of  the  infi-astructure  support  expens¬ 
es  for  the  new  system,  such  as  servers,  WANs/LANs 


and  desktops.  They  also  in¬ 
clude  ongoing  software  li¬ 
cense  fees  and  production 
support  staff  (production 
control  security,  database 
administradon.  help  desk). 

These  costs  automatically 
drop  down  into  future  oper- 
atii^  expenses,  whether  they 
are  bud^ted  or  not 

Underestimating  these 
drop-down  costs  is  a  ram¬ 
pant  problem,  partly  because 
many  IT  managers  are  rusty, 
not  having  had  the  luxury  of 
budgeting  for  new  develop- 
meot  for  a  while.  1  recently 
found  that  several  Fortune 
500  clients  had  underesti¬ 
mated  these  costs  by  $40  mil¬ 
lion  to  SSO  million  per  year. 

Be  sure  to  examine  your  drop-down 
costs  carefully,  e^>e<dally  if  your  organi- 
zadon  has  focused  primarily  on  mainte¬ 
nance  for  the  past  few  years. 

The  following  phrases  (often  beard  in 
budget  reviews)  are  drop-down  myths 
and  should  raise  a  red  flag; 

atrwdy  own  tha  aervir,  ao  r$  free.” 
Your  current  mfrastructure  may  have 
enough  excess  capacity  for  several  addi¬ 
tional  applicadons.  But  when  you  reach 
its  limit,  the  next  new  application  will 
require  a  major  infrasmicture  upgrade. 


appGcMkm.  ao  Gw  oMt  wl  bo  tho 
sama.”  Most  new  systems  of¬ 
fer  more  funedon^ity.  sup¬ 
port  more  users  and  store 
significandy  more  data  than 
the  applicadons  they  re¬ 
place,  resulting  in  addidonal 
production  costs.  (More¬ 
over.  many  applications  nev¬ 
er  totally  disappear.) 

"Wiarabaconingmoraafi- 
ciMt.  80  wa  can  ibaoib  tt  Mb 
thaailaling  budgM.*  During 
the  Internet  boom,  many 
companies  acquired  lar^ 
amounts  of  technology  but 
never  implemented  planned 
systems.  As  a  result,  they 
had  excess  capacity.  After 
the  Internet  bust,  these 
same  companies  focused  on  eflficiency 
(a  discipline  lost  during  the  boom)  by 
consolidating  servers,  rationalizing  soft¬ 
ware  and  redesigning  their  networits. 

As  a  result  of  these  efforts,  tbeyVe  had 
to  absorb  only  limited  drop^town  lately. 
Excess  capacity  will  eventually  be  ab¬ 
sorbed,  however,  and  there  won’t  be  any 
fat  left  to  trim. 

nWa  ara  fiarikig  maior  new  davakipmani 
aWartB.hrtOM’hudBMwMriroiintit*  Some 
IT  organizations  prefer  to  ignore  drop¬ 
down  costs  as  lortg  as  possible  because 


Good  ^dgedng  spreads  the  cost  of  addi-  of  corporate  and  political  pressures.  But 


donal  infrastructure  equitably,  without 
forcing  the  new  apptication  to  bear  the 
entire  cost  of  the  required  infrastructure 
purchases. 


bad  news  doesn’t  get  better  with  age,  and  j 
the  drop-down  costs  will  eventually  ap¬ 
pear  as  budget  overruns. 

Drop-down  costs  should  be  included  I 


in  the  business  case  for  any  new  system, 
but  sixu%  the  case  may  have  been  written 
several  years  ago,  the  numbers  could  be 
outdated.  Before  you  transfer  thb  data 
into  your  budget,  make  sure  the  esti¬ 
mates  are  still  realistic.  In  addition,  since 
most  applications  run  for  ntany  years, 
costs  can  change  significantly  over  time. 
Create  a  rough  estimate  for  drop-down 
costs  and  refine  it  annually. 

To  increase  the  accuracy  of  your  drop¬ 
down  estimates,  try  the  following: 

■  Compare  them  i^ainst  industry 
fionns  as  a  reality  check.  (Partner  Fellow 
Bruce  I  Rogow  reports  from  recent  vis¬ 
its  with  CIOs  that  drop-down  costs  run 
between  2B%  and  35%  of  the  cost  of  de¬ 
veloping  the  new  system  (regardless  of 
whether  it’s  custom  code  or  a  purchased 
package).  Costs  arc  somewhat  lower  on 
projects  to  replace  existing  systems,  but 
review  your  assumptions  carefully. 

>  Leverage  your  accounting  data.  Use 
it  to  create  acctirare  production  cost  esti¬ 
mates  or  to  validate  your  outsourcer's 
numbers. 

■  Track  your  drop-down  history.  Eval¬ 
uate  recently  installed  applications  to 
determine  actual  production  costs.  Over 
time,  youll  develop  increasingly  accu¬ 
rate  estimates  for  your  environment. 

■  Develop  rigorous  capacity  planning. 
The  business  case  or  preliminary  prod¬ 
uct  design  should  provide  realistic  esti¬ 
mates  of  the  number  of  users,  daily 
transaction  volumes,  database  sizes,  etc. 
This  data  enables  detailed  modeling  to 
accurately  forecast  ongoing  production 
costs.  If  you’re  buying  an  established  ap¬ 
plication  package,  the  vendor  should  be 
able  to  help  you  with  this  modeling. 

Accurate  estimates  of  drop-down 
costs  prevent  nasty  budget  surprises 
later.  If  you  ignore  these  unavoidable 
expenses,  they  will  slowly  consume  the 
budget  you  have  (finally!)  acquired  for 
new  development.  Protect  your  future 
development  dollars  by  accurately  bud¬ 
geting  for  drop-dowa  O  49668 
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ASK  A  PREMIER  100  lEAOER 


Q&A  Ldp>ng  is  this 

month's  guest 


Premier  100  IT  Leader,  answering 
readers'  questions  about  making 
career  changes  and  dealing  with 
problem  employees.  If  you  have  a 
Question  you'd  like  to  pose  to  one  of 
our  Premier  100  IT  Leaders,  send  it 
to 

and  watch  for  this  column  in  print 
and  online  each  month 


I've  been  in  the  credit  managemsnt  field 
for  10  years,  but  I'm  considering  a  midlife 
career  change  to  be  an  IT  instructor.  Can 
you  give  me  some  advice  on  the  market 
prospects?  While  the  lechnicaJ  training  and 
executive  education  mdustry  has  explod^  m 
the  past  five  years.  I’ve  been  amazed  at  the  limit¬ 
ed  amount  of  experience  that  inslnjciors  tend  to 
have.  A  value-added  training  opportunity 
come  in  two  forms  on-lhe-jobfraininganda 
well-organized  and  -managed  classroom  expe¬ 
rience  from  an  instructor  who  has  real-world  ex- 
penence.  It  sounds  like  you  could  contribute  to 
the  latter 

The  market  generally  doesn't  pay  well, 
whether  you’re  training  or  providing  instruction 
in  a  more  formal  academic  environment.  How¬ 
ever,  the  intrinsic  benefits  of  changing  people’s 
llvesand  growing  their  capabilities  can't  be  val¬ 
ued  m  dollars  There  are  plenty  of  |obs  out  there 
m  this  arena,  so  go  tor  it .  A  riskless  approach  to 
diving  inmaybe  loaccept  a  part-time,  evening 
instniction  role  that  would  allow  you  to  fe^  out 
the  industry  and  the  classroom  setting. 


Are  there  still  good  opportunities  for 
mainframe  design  and  development?  t've 
spent  the  past  10  years  working  with 
midrange  software  and  infrastructure.  I'd 
like  to  return  to  the  mainframe  world,  but  I 
don't  want  to  take  a  big  cut  in  pay.  Is  this 
!  possible?rmnotsurBthatlwouldrecommend 
this  move,  especially  if  your  paycheck  is  a  prion- 
ty.  Keep  in  mind  that  pay  is  directly  correlated  to 
^r  depth  of  experience  in  a  speafic  niche  (fi¬ 
nancial  services  or  manufactunng.  for  example) 
and  specific  set  of  technologies.  The  mainframe 
world  IS  static  *  you  rarely  get  boosts  in  pay  lor 
niche  experience.  This  is  mostly  because  large, 
transactional  environments  tend  to  be  operating 
on  older  business  models  that  don't  evolve  as 
rapidly  and  don't  require  sexy  new  technology 
enhancement  to  enable  them. 

1  have  two  employees  who  work  for  me  in 
Mexico.  I  visit  the  plant  at  least  once  a 
week,  but  when  Pm  not  there,  my  employ¬ 
ees  take  advarrtage  of  my  absence  to 
leave  early,  take  long  lunches  and  so  on.  I 
get  complaints  of  lengthy  wait  times  for 
[Toblems.  What  are  some  suggestions? 
Quite  simply,  they  need  to  be  terminated.  That 
usually  presents  a  long  list  of  human  resource  is¬ 
sues  (0  overcome,  but  it's  worth  your  time  now 
to  create  a  weH-documented  action  plan  for 
both  employees.  If  you  don’t  already  have  a  long 
list  ot  key  performance  indicators.  I  would  start 
with  that  and  include  it  in  the  action  plan.  You 
should  be  able  to  measure  the  emptoyees'  pro¬ 
ductivity  against  those  indicators,  and  if  the  em¬ 
ployees  are  falling  ^wrt  of  the  goals,  they  can 
^d  should  be  terminated. 

I've  had  theopportunity  to  manage  many  re¬ 
mote  employees,  and  I  find  that  it  tal^  a  special 
kind  ol  worker  to  make  it  successful.  You  need 
a  self-starter  who  doesn't  need  hand-holding 
and  who  appreciates  the  opportunity  lor  a  little 
autonomy.  You  may  be  able  to  trade  up  for  two 
employees  (or  even  one.  depending  on  how  un¬ 
productive  they  are)  who  have  more  experience 
and  will  accept  the  same  pay  just  because  they 
want  the  opportunity  to  work  independently.  It's 
a  lough  challenge:  good  kick!  O  4966S 


Small  Companies  Gearing  Up 

Which  besl  describes  the  current  status  of your/u/l-rime  IT  staff? 


Companies  with  20,000 
or  more  errtpioyees 


Companies  with  5,000 
to  employees 


Companies  with  I.OOO 
to  4,999  employees 


Companies  with  sir 
to  999  employees' 

■  HIRING  BCUTTING 
FUT  OONTKNOW 


•MCWZwcmMQltdecsan  nai«r,«»*rinAfTier<af‘CCWpi()«  MtKBlecbnologyfleciSKn  nahersat  small  Nofl'-Amfincan 
cffTQancs  r%>antage6m«r«Wall00t)BUU9eoltouruingBMMC&fone5tecRi!siafcnirc.Seci(ern^ 


The  Morphing  CIO 

Tlve  role  of  the  CIO  continues  to  evolve 
beyond  the  scope  ot  traditional  IT.  ac¬ 
cording  to  a  recent  Meta  Croup  Inc. 
study  called  “Driving  the  Business  Val¬ 
ue  With  fT.  "Of  128  IT  decision-makers 
surveyed,  only  88%  said  they  believe 
their  scope  of  responsibility  is  (hat  ot 
a  “IraditionaJ  CI0.“  More  than  40% 
indicated  that  their  |obs  include  other 
business  functions,  from  facilities  to 
HR.  and  29%  specifically  said  their  K>b$ 
include  responsibility  for  leading  or 
supporting  business  transformation. 
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EVENTS 


Competitive 

Intelligence 

■  Oct.  28*29.  Boston 

Sponsor  Institute  for  International 

Research 

Competitive  Technical  Intelligence  i 
2004  explores  tools  and  tech-  | 

niques  for  usirrg  business  intelli¬ 
gence.  Topics  include  improving 
your  odds,  linking  CTI  to  customer 
needs,  leveraging  new  analysis 
and  collection  techniques,  and 
anticipating  opportunities.  ' 

www.urusa.com/ct^ 


Business  Process 
Management 

■Nov.3-4.NewyMi 

Sponsor  BramStorm  Group  Inc.  I 

The  sixth  annual  Business  Process  I 
Management  Conference  includes  j 
both  business  and  IT  tracks  with  I 
presentations,  case  studies  and 
best  practices  Topics  include 
process  modeling,  analysis  and 
design;  process  ownership  and 
change  management,  and  rules- 
dnven  BPM. 

www.brainstonn'group.coin/ny/ 

04bpmbrochure.pdf 


Executive  Coaching 

■  Nov.  8-9.  New 

Sponsor  The  Conference  Board  IrK. 

The  2004  Executive  Coaching 
Seminar  offers  presentations  on 
topics  induding  changing  the  rules 
of  the  global  game-,  the  ethical  chal¬ 
lenge  to  U.S.  business;  and  what's 
coachable.  what's  not. 
www.conference-board.on]/ 
coachinpjitm 


World  Business 
Fbnim 

■  Nov.  t7-1B.  Chicago 
Sponsor  The  KSM  Group  Ltd. 

The  conference  includes  political, 
academic  and  practical  viewpoints 
from  speakers  including  Jack  Welch. 
Madeleine  Albright  and  Larry  Bos- 
sidy  on  leadership,  organization, 
financial  markets,  innovation,  exe¬ 
cution,  resilience  and  growth. 
www.w4rfchicago.com 


H.\K  !'  I’l  RKINS 


Development 
Drop-Down  Budgeting 


Many  companies  are  beginning  to 

increase  their  budgets  for  new  IT  de¬ 
velopment.  Unfortunately,  they  often 
underestimate  ongoing  production 
costs  —  the  “drop-down”  costs  from 
development  efforts.  A  realistic  IT  budget  must  plan  for 
a  project’s  support  after  it’s  installed.  Drop-down  costs 
include  a  portion  of  the  infrastructure  support  expens¬ 
es  for  the  new  system,  such  as  servers,  WANs/LANs 


and  desktops.  They  also  in¬ 
clude  ongoing  software  li¬ 
cense  fees  and  production 
support  staff  (pnxluction 
control,  security,  database 
administration,  help  desk). 

These  costs  automatically 
drop  dow’n  into  future  oper¬ 
ating  expenses,  whether  they 
are  budgeted  or  not. 

Underestimating  these 
da>p-down  costs  is  a  ram¬ 
pant  problem,  partly  because 
many  IT  managers  are  rusty, 
not  having  had  the  lu.\ur^'  of 
budgeting  for  new  develop¬ 
ment  for  a  while.  I  a*cenily 
found  that  several  Fortune 
500  cHcnts  had  underesti¬ 
mated  these  costs  by  S40  mil¬ 
lion  to  S50  million  per  year. 

Be  sure  to  e.xaminc  your  drop-down 
costs  carefully,  especially  if  your  organi¬ 
zation  has  focused  primarily  on  mainte¬ 
nance  for  the  past  few  years. 

The  following  phrases  <often  heard  in 
budget  reviews)  are  drop-down  myths 
and  should  raise  a  red  flag: 

“We  already  own  the  server,  so  It's  tree.** 

Your  current  infrastructure  may  have 
enough  excess  capacity  for  several  addi¬ 
tional  app]ication.s.  But  when  you  reach 
its  limit,  the  next  new  application  will 
require  a  major  infrastructure  upgrade. 
Good  budgeting  spreads  the  cost  of  addi-  | 
lional  infrastructure  equitably,  without 
.  forcing  the  new  application  to  bear  the 
entire  cost  of  the  required  infrastructure 
purchases. 


~We  are  replacing  an  existing 
appicahon.  so  the  cost  wM  be  the 
same."  Most  new  systems  of¬ 
fer  more  functionality,  sup¬ 
port  iTMirc  users  and  store 
significaniiy  more  data  than 
the  applications  they  re¬ 
place.  resulting  in  additional 
production  ci>sts.  (More¬ 
over.  many  applications  nev¬ 
er  totally  disappear.) 

"We  are  becoming  more  effi¬ 
cient,  so  w«  can  absorb  It  into 
the  existing  budget"  During 
the  internet  hcH^m.  many 
companies  acquired  large 
amounts  of  technoUtgy  but 
never  implemented  planned 
systems.  As  a  ix'sult.  they 
had  cxces.s  capacity.  After 
the  Infcmci  bust,  these 
same  companies  footsihJ  on  efficiency 
(a  discipline  lost  during  the  bi>om)  by- 
consolidating  serx’ers.  rationalizing  sifft- 
ware  and  redesigning  their  neiwortcs. 

As  a  result  of  these  efforts,  they've  had 
to  absorb  only  limited  drop-dow  n  lately. 
E.xcess  capacity  will  eventually  be  ab¬ 
sorbed,  however,  and  iIktc  wtin't  be  any 
fat  left  to  trim. 

"We  are  funding  rnaior  new  developrnent 
efforts,  but  our  budget  wi  remain  flat"  Some 
IT  organizations  prefer  to  ignore  drop¬ 
down  costs  as  long  as  possible  because 
of  corporate  and  political  pressua’s.  But 
bad  news  dt>esn'i  get  better  with  iqjc.  and  ' 
the  drop-down  costs  will  evcnrually  ap-  | 
pear  as  budget  o%  erruns. 

I)rt»p-down  costs  should  be  included 
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in  the  business  ca.ss*  for  any  new  system, 
but  since  the  case  may  have  K*en  w  ritten 
several  years  agti.  the  numbers  oiuld  K' 
outdated.  Bcfoix-  ytm  tr3n.sfer  this  data 
into  your  budget,  make  sure  the  esti- 
m.itcs  are  still  realistic.  In  addition,  since 
mtist  .ipplieatiims  run  ft*r  many  years, 
costs  c.in  ch.mge  signilTcantly  <*vcr  time, 
l-a'atc  a  rough  estimate  fordrt*p-di>wn 
ct>sts  and  refine  it  annually. 

To  increase  the  accuracy  «if  your  drop¬ 
down  estiniau-s.  try  the  ft»ll*»wing: 

•  (  omparc  them  .ig.ninst  industry 
norms  as  a  reality  check.  ( iartner  Fellow 
Brucx'  I.  Rogow  reptirts  from  a*ceni  vis¬ 
its  with  CK)s  that  dr\»p-down  c<»sts  run 
betwivn  28*'rt  and  .T5"'*  of  the  cost  i>f  de- 
vehiping  the  new  system  (regardless  of 
whether  it’s  e'usri>m  code  or  a  purchased 
package).  Gosts  are  somewhat  lower  on 
projecTs  to  repl.m*  existing  <y  stems,  but 
review  your  assumptitms  carefully. 

■  Uwerage  your  accounting  Jala  Use 
it  to  create  accurate  production  Ci-isi  esti¬ 
mates  or  to  validate  your  outs<'urcer's 
numbers. 

■  Track  yitur  dropniuwn  history.  Eval¬ 
uate  recently  installed  applications  to 
determine  actual  production  i.n>siv  Over 
time,  you’ll  develop  increasingly  accu¬ 
rate  estimates  for  y<nir  envintnmem. 

■  Dev  elop  rigorous  capacity  pbnning. 
The  busines-s  case  or  preliminary  prod¬ 
uct  design  sht'uld  pnwide  realistic  esti¬ 
mates  of  the  number  of  users,  daily- 
transaction  volumev  database  sizes,  etc. 
This  data  enables  detailed  nu^deling  to 
accurately  forecast  ongoing  prtwJuction 
costs.  If  you're  buying  an  established  ap¬ 
plication  package,  the  vendor  should  K- 
able  to  help  ytni  with  this  modeling 

Accurate  estimates  of  Jixip-dow-n 
costs  pawent  rtast)'  budget  surprises 
l.ncr.  If  you  ignore  these  unavoidable 
expenses,  they  w  ill  slowly  consume  the 
budgc*t  you  have  ifinallyf)  acquired  for 
new  development.  PftUoci  yv»ur  future 
development  dollars  by  accurately  bud¬ 
geting  for  drop-dow  n.  C  49666 
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Hot^rvers 


within  the  machine."  A  lU  de¬ 
vice  is  L75-ut  high- 

Vendors  said  they're  work¬ 
ing  to  nuke  systems  more  ef¬ 
ficient  but  face  a  catch-22, 
with  some  users  complaining 
about  heat  and  others  calling 
for  more  speed,  said  Darrel 
Ward,  manager  of  server  tech¬ 
nology  and  product  planning 
at  Dell  Inc.  Dell  has  made  de¬ 
sign  trade-ofb  for  its  lU  and 
blade  servers,  taking  a  moder¬ 
ate  approach  in  order  to  con¬ 
trol  heat,  he  said. 

Adding  cooling  technolo¬ 
gies  to  the  server  itself  will 
come  at  a  cost.  Ward  added. 
"If  you  introduce  something 
besides  traditional  fans,  heat 
sinks  and  airflows  to  a  com¬ 
modity  server,  that  $2,000 
server  is  not  goii^  to  be 
$2,000  anymore,"  be  said. 

Server  Economics 

Server  vendors  buy  industry- 
standard  components  but  try 
to  distinguish  themselves 
through  efficient  design,  said 
Scott  Tease,  worldwide  prod¬ 
uct  marketing  manager  for 
IBM's  cServer  BtadeCenicr 
line.  For  example.  IBM  built  in 
cooling  technologies  that  di¬ 
rect  airflow  and  reduced  the 
Dumber  of  heat -generating  fan 
motors.  Tease  said. 

Tlie  economics  are  com¬ 
plex.  Very  dense  systems  may 
require  more  cooling  but  take 
up  less  real  esute.  However, 
data  center  consolidations  are 
increasing  the  sizes  of  IT  facil¬ 
ities.  Fast  processors  use  more 
power  to  deliver  greater  com¬ 
putational  capabilities  at  less 
wattage  per  MIPS,  but  this 
Moore's  Law  advantage  is  off¬ 
set  by  users  who  install  more 
of  these  increasingly  powerful 
commodity  servers  in  their 
data  centers.  O  49853 


H  The  amount 
of  power  de- 
Kveied  and  required 
[by  servers]  far  ex- 
ce^  our  current 
techniques  for  cool¬ 
ing  data  centers. 


IBM  On-Demand  Data 
Centers  in  the  Works 


both  those  combinations  make 
things  hotter  —  that’s  all  there 
is  to  it."  said  Thomas  Roberts, 
director  of  data  center  (^>era- 
tions  at  Trinity  Health  in  Novi. 
Mich.,  which  operates  hospi¬ 
tals  and  outpatient  f^ilities. 

Roberts  s^  he  would  like  to 
install  a  row  of  blade  servers  at 
a  disaster  recovery  she.  but  his 
14'inch  raised  floors,  which  are 
stuffed  with  cabling,  can't  pro¬ 
duce  enough  air  pressure  to 
cool  the  servers.  "Not  everyone 
can  build  a  data  center  to  meet 
their  cooling  needs."  he  said. 

Orange,  Calif-based  AFCOM 
is  an  association  of  data  cen¬ 
ter  professionals. 

liie  importance  of  cooling 
was  evident  to  conference  at¬ 
tendees.  said  Steve  Helms,  an 
IT  specialist  involved  in  data 
center  design  at  biotech  firm 
Amgen  Inc.  in  Thousand 
Oaks,  Calif  He  noted  that  two 
of  the  biggest  displays  were 
for  power  and  cooling  equip¬ 
ment  suppliers  Uebert  Corp. 


ATLANTA 

BM  annotficed  last  week  that 
it  wl  extend  the  number  of  Its 
otvdemand  data  centers  from 
one  to  11  by  the  end  of  Ihe  year 
as  part  of  a  push  to  offer  users 
virtoai  IT  resources  that  cart  In 
effect  be  pooled  and  made 
avalabfe  where  needed. 

Thelechnologyunderpin- 
fino  these  data  oemers  can  be 
prowded  as  an  outsourced  ser¬ 
vice  or  incorporaled  mto  a 
compary's  existing  IT  intra* 
structore.  For  iratance.  ever)  If 
a  user  doesn't  went  to  adopt 
pay^-you^to  Pdcino  with  a 
service  provider.  A  may  went  to 
use  the  model  to  measife  in¬ 
ternal  business  unii  consunp- 
tion  of  IT  resources. 

The  cornerstone  of  this  of* 
fehngiseM'sUnivetsalMan- 
agemenl  Infrastnjcture.  a  set  of 
software,  archtechre  and  best 
practices  theM  affews  tniHple 
busmess  unils  to  draw  on  wrto- 
aiized  resotfces. 

have  cAents  today  that 
saytheyeentmityMtaslruc- 
bie  in  place  That  alows  me  to 
scale  up  and  down  more  easiy. 
that  alows  me  to  take  the  as* 
sets  that  I  have  in  my  data  can¬ 
tor  and  maka  them  more  effi¬ 
cient' *  Slid  Me  Riegel.  dime- 
tor  of  BM  6lobaf  Services. 


regardfess  of  v4)ether  the 
etMxnent  6  at  an  ouisoifced 
tocabon  or  in  his  data  center,  is 
the  esue  of  control  WHh  on- 
demand  compubng.  Tm  not 
controing  my  assets  arry- 
more."hesaid. 

Crunpfer  said  he  snt  wing 
to  9ve  up  control  of  rr  opera¬ 
tions  except  for  servers  tuning 
noncrihcal  services,  such  as 
conference  room  scheduing. 

Dan  Rhoderv  a  data  center 
manager  at  Ubedy  Mutual 
Group  Inc,  ntnrtanapols.  said 
hehassimaarfeeings  Ts8c 
you  personal  ie. ...  The  stuff 
that  you  use.  you  want  to  own,* 
hes^. 

Grumpier  and  Rhoden  were 
among  tin  data  center  man¬ 
agers  at  the  AFCOM  canler- 
ence  here  last  week. 

But  Ayman  Nassar.  dab  cen¬ 
ter  manager  8l  nnee  George's 
Communiy  Cofiage.  a  30.000- 
stodenl  school  n  Largo.  Ml 
said  ha's  idwestodi)  toe  uMy 
modalThecaleoeMBadylBas' 
as  to  hardware,  wfad)  he  saalB 
a  fest  step  aMord  iMly  pricino. 

^  are  movsig  toward  that 
modal  of  paying  for  you 

only  laaKy  n^  as  you  need 
Che  said. 

BMopereias  some  300 
dab  cantors  arauid  toe  world, 
and  soma  of  the  new  on- 
demand  centers,  which  are 
planned  in  toe  US.  Germany. 
Ibfy.  Sweden,  toe  UX,  Aub- 
traia.  Japan  and  Sngreiore. 
wtf  be  coupfad  with  the  com* 
parry’s  exi^  canters.  BM 
pbns  to  open  feu  or  live  more 
on-demarid  ceniers  m  early 
2005.  Riagel  said. 

-  f^thcfi  Thbodem/ 


BRUCE  EDWARDS.  PRESIDENT 
CC6  FAOLITIES  INTEGRATION  INC 

in  Columbus.  Ohio,  and  Amer¬ 
ican  Power  Conversion  Corp. 
in  West  Kingston,  RX 

The  presence  of  those  ven¬ 
dors  and  others  focused  on  fa¬ 
cility  issues  is  "telling  me  that 
(here  is  a  very  serious  issue 
out  there,  and  a  lot  of  people 
are  already  oqreriencing  it. 
and  the  rest  of  us  are  going  to 
get  it  soon,"  Helms  said. 

"Blade  servers  are  probably 
going  to  be  in  everybody's 
data  center  sooner  or  later." 

Cooling  *is  the  issue,"  said 
Bruce  Edwards,  president  of 
CCG  Facilities  Integratioo 
Inc,  a  data  center  consultancy 
in  Baltimore.  Improper  cool- 
ii^  can  shorten  a  server's  life 
or  cause  failure,  he  sail 

"We  are  now  presented  with 
equipment  that  can  use  more 
power  then  ever  before  in  a 
smaller  footprint."  he  said. 

"And  the  amount  of  power  de¬ 
livered  and  required  far  ex¬ 
ceeds  our  current  techniques 
for  cooling  data  centers." 

Blade  server  racks  come  in  a 
variety  of  sizes  with  different 
levels  of  power  consumption. 
Large  radk  systems  with  98 
blades  spread  over  seven  chas¬ 
sis  can  consume  as  much  as  24 
kilowatts  of  power.  That  ex¬ 
ceeds  the  capacity  of  the  latest 
cooling  systems,  which  can 
handle  20  kilowatts,  manufac¬ 
turers  say. 

Patrick  Luma,  data  center 
manager  at  Stanford  Universi¬ 
ty,  said  be  would  like  to  see 
server  vendors  "concentrating 
less  on  condensing  the  size  of 
the  machines,  such  as  having 
gone  to  lU,  and  concentrating 
more  on  reducing  the  beat 


Not  Sou 

But  soma  usere  appur  more 
wAng  to  acespt  toe  idea  of 
deploying  an  arcfetectore  for 
resoifce  pooling  than  mowng 
to  an  outsotfong  model  with 
utAfy  pricing. 

Michael  Crifnpfer.  manager 
of  sereer  support  at  Attanb- 
based  meda  conglomerate  Cox 
Enterprises  Inc.,  b  a  heavy  user 
ofSunMcrosyslenisInaserv- 
ersandsaidhehashaardsimi- 
iar  pitches  from  toel  company. 
The  mafor  concern  Crumpfer 
has  wito  oubomed  modeis. 
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FRANK  HAYES  *  FRANKLY  SPEAKING 

Under  the  Volcano 

I’M  SITTING  HERE  under  the  volcano,  waiting.  (OK,  I’m  not 
actually  under  Mount  St.  Helens.  I’m  some  40  miles  away.  But 
that’s  plenty  close,  thanks.)  Some  days,  I  can  watch  the  vol¬ 
cano  spit  clouds  of  steam  and  ash  thousands  of  feet  into  the 
sky,  as  experts  say  a  major  eruption  could  be  hours  away.  Oth¬ 
er  days,  the  same  experts  say  it  might  be  months  or  even  years  be¬ 
fore  anyone  in  my  neighborhood  has  something  to  worry  about.  But 
there  are  stUl  reports  that  small  earthquakes  constantly  shake  the 
volcano  and  that  the  lava  dome  is  rising.  I  know  that  sooner  or  later, 
something’s  going  to  happen. 

If  you’re  a  PeopleSoft  customer,  you  probably  feel  that  way  too. 


After  all.  since  the  start  of  October,  the  De* 
partroent  of  Justice  has  given  up  on  its  efforts  to 
block  Oracle  from  buying  PeopleSoft.  and 
PeopleSoft’s  board  has  fired  Craig  Conway,  the 
andtakeover  CEO  who  had  fust  spent  a  week 
reassuring  customers  at  the  company’s  annual 
user  conference.  PeopleSoft's  board  is  still  re- 
jectii^  Oracle’s  takeover  bids  but  now  says  it’s 
willing  to  do  a  deal  if  the  price  is  right. 

And  PeopleSoft  users?  You  know  something’s 
going  to  happen.  You  can't  stop  it,  you  can’t 
choose  the  timing,  and  you  don't  know  exactly 
what  sort  of  chaos  will  come  raining  down  on 
your  heads.  You  just  know  the  situation  could 
blow  up  on  you  at  any  time.  And  the  experts  — 
the  pundits,  analysts  and  columnists  —  say  the 
deal  could  come  within  weeks  and  it’s  probably 
too  late  for  you  to  do  anything  to  prepare  for  it. 

Of  course,  we've  heard  that  before. 

Specifically,  we  heard  it  during  the  summer 
of  2003  —  just  after  Oracle  announced  its  play 
for  Pec^leSoft  Back  then,  pretty  much  all  the 
experts  agreed  that  PeopleSoft  couldn't  stave 
off  Oracle’s  hostile  bid  for  tong.  And  that  when 

Oracle  CEO  Larry  Ellison  an*  - 

nounced  that  be  wouldn't  be  selling 
PeopleSoft  products  after  the 
takeover,  it  was  already  too  late  for 
PeopleSoft’s  current  customers  to 
avoid  becoming  orphans. 

I^pleSoft  users  were  out  of  time 
and  out  of  luck,  the  experts  said. 

And  the  experts  were . . .  well,  a 
little  bit  off. 

If  you  had  listened  to  the  experts 
—  if  you  had  believed  it  was  too  late  wmlt$  Mri 
to  do  anything  —  you’d  have  lost  the  iM.  tm^m 
past  16  months.  You  wouldn’t  have 
spent  that  lime  developing  contin-  •MBP* 


Mdfll  MtaTMM  Miflh 

tm.  km  cwaiiitT  larwBrt 
ttaa  SB  yam.  CmmbI  « 


gency  plans.  And  renegotiating  contracts.  And 
smoothing  out  your  PeopleSoft  implementa* 
tion,  in  case  you  needed  to  migrate. 

You  can  get  a  lot  done  in  16  months.  You  did 
get  a  lot  done  in  that  16  months,  didn’t  you? 

If  you  did.  you  already  know  what  to  think  of 
the  most  recent  pronouncements  from  the  in* 
dustry’s  deep  thUtkers.  Yes,  maybe  PeopleSoft’s 
board  will  accept  a  sweeter  Oracle  offer.  Maybe 
it  is  now  inevitable.  After  aU.  Oracle  has  been 
sliding.  Right  now,  Oracle  needs  a  PeopleSoft 
deal  —  and  needs  to  keep  PeopleSoft's  cus¬ 
tomers  happy,  too. 

Maybe  a  month  or  two  from  now,  that  deal 
wUI  be  done. 

On  the  other  hand,  maybe  Oracle  won’t 
sweeten  the  deal  enough.  Maybe  the  l^pleSoft 
board  will  change  its  mind.  Maybe  the  lawsuits 
over  the  deal  will  have  to  grind  through  to  their 
verdicts  and  appeals.  Maybe  Oracle  will  drop 
its  bid.  That  deal  might  not  close  for  years.  It 
may  never  close. 

So  when  the  pundits,  analysts  and  columnists 
tell  you  it  may  be  too  late  for  PeopleSoft  cus¬ 
tomers  to  do  anything  in  the  face  of 
a  once-again-impending  Oracle 
takeover,  consider  their  record. 

Then,  if  you  haven't  already,  start 
working  out  those  contin^ncy 
scenarios.  Start  squaring  up  your 
installation,  just  in  case.  Start  mak¬ 
ing  plans  and  considering  choices. 
If  you  really  are  out  of  time  and 
luck,  you’ll  waste  a  little  effort.  But 
if  it  turns  out  you've  got  another 
mm  you’ll  have  made  good 

Iff  ly  wart  use  of  it 

And  this  is  one  volcano  you  can’t 
afford  to  just  wait  for.  O  49913 
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Oracle  Application  Server 


"Oracle  Portal  is  a 

powerhouse" 

Network  Computing,  5/13/04 
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Oracle  Application  Server  Portal  lOp 
Winner  of  the  2004  Network  Computing  Editor's  Choice  Award 


Source;  Network  Computinfl.  5/13/04,  Well-Connected  Awards,  p.  92 


Caprn^  C  MO*.  OiKis.  AH  ngMi  nsarwA  (Mi  ■  a  ngaitrad  Mmrt  a(  Onda  CoracraSee  moor  Its  siniiiMs.  OSw  IWIMB  miy  be  tisdensrts  el 


Vol.  38 
Iss.  42 
OCT  18 


2004 


NEWSPAPER 


THE  VOICE  Of  IT  MANAOEMEMT  •  WWW  COMPUTEfiWORLO  COW 


OCTOBER  II.  2004  •  VOL  36  •  NO  «2  >  $S/COPV 


I 


Users  Buoyed 
By  Monthly 
Patch  Releases 

Microsoft’s  approach 
makes  process  more 
predictable,  execs  say 


BY  JAIKUMAB  VIJAVAN 

Microsoft  Corp.’s  move  to  a 
monthly  patch-release  cycle 
one  year  ago  this  month  has 
made  it  easier  to  install  securi¬ 
ty  updates  for  Windows  and 
ocher  products,  IT  managers 
said  last  week  —  even  as  they 
were  greeted  with  a  barrage  of 
new  fixes,  many  for  flaws  that 
were  given  “critical”  severity 
ratings  by  Microsoft. 

The  October  patch  rollout 
was  one  of  Microsoft’s  largest 
this  year,  consisting  of  10 
patches  designed  to  address 
a  total  of  20  vulnerabilities 
across  a  wide  range  of  the 
company's  products.  Seven  of 
the  security  updates  were  rat¬ 
ed  as  “critical”  for  users  to  in¬ 
stall,  and  the  other  three  were 
labeled  “important” 


ADDITIONAL  COVERAGE 
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Security  Updates 
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doMS  and  MKintash  siisterns. 


the  My  tfiet  Windows  XP  and 
Server 2003 procses  com¬ 
pressed  Hes. 

The  massive  release  high¬ 
lighted  Microsoft’s  continuing 
struggles  with  software  secu¬ 
rity.  Nevertheless,  six  users 
said  the  monthly  cycle  that  the 
vendor  has  followed  for  al¬ 
most  all  the  patches  released 
since  last  Octc^r  has  made 
the  patching  process  more 
predictable  and  manageable. 

“Overall,  the  [monthly 
patching]  schedule  is  a  good 
thii^”  said  McArthur, 
information  systems  security 
ofticer  at  Online  Resources 
Corp.,  an  online  bill-process¬ 
ing  company  in  McLean,  Va. 

“It  has  been  belpfiil  for  plan¬ 
ning  purposes  and  in  allowing 
us  to  evaluate  the  patches 
once  a  month,  versus  having 
Patches,  page  55 
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IT  Scrambles  to  Meet 
Sarb-Ox  Controls  Deadline 


Slow  starts,  miscommunication  put  companies 
under  the  gun  on  technolog>'-related  mandates 


BV  THOMAS  HOFFMAN 

IT  departments  at  many  large 
companies  are  racing  to  docu¬ 
ment.  remediate  and  test  IT- 
related  controls  to  meet 
a  year-end  reporting 
deadline  for  Sarbanes- 
Oxley  compliance. 

The  rush  is  on  be¬ 
cause  many  companies 
failed  to  grasp  the 
amount  of  work  that  would  be 
required  and  because  of  mis¬ 
communication  between  IT 
managers  and  the  fmance  de¬ 


partments  that  typically  run 
Sarbanes-Oxlej’  Act  compli¬ 
ance  projects,  according  to 
users  and  analysts  who  were 
interviewed  last  week, 
BililiLl®  “What  Pve  seen  is  a 
'Let’s  drop  everything 
and  get  this  done’  ap¬ 
proach  on  dealing  with 
IT  controls  from  the 
second  quarter  until 
now,“  said  John  Hageity,  an 
analyst  at  AMR  Research  Inc. 
in  Boston. 

H^rty  and  several  other 


analysts  and  consultants  said 
they  expect  that  most  compa¬ 
nies  that  need  to  show  Sarb- 
Ox  compliance  by  year's  end 
will  get  the  bulk  of  their  IT 
controls  documented  and  test¬ 
ed  in  time.  But  some  analysts 
predicted  that  in  annual  10-K 
reports  early  next  year,  as 
many  as  25%  of  the  so-called 
accelerated  filers  will  have  to 
report  controls-related  excep¬ 
tions  that  require  additional 
remediation.  Depending  on 
the  severity  of  the  problems, 
companies  could  be  fined  by 
the  U3.  Securities  and  Ex¬ 
change  Commission. 

Sarb-Ox,  page  16 
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UsersBuoyed 
ByMonthly 
Patch  Releases 

Microsoft’s  appRxich 
makes  prexcss  moR’ 
pRiJictablc.  execs  sa\’ 

BY  JAIKUMAR  VUAVAN 

Microsoft  Corp.'s  move  to  a 
monthly  patch-release  cycle 
one  year  ago  this  month  has 
made  it  easier  to  install  securi¬ 
ty  updates  for  Window’s  and 
other  products,  IT  managers 
said  last  week  —  even  as  they 
were  greeted  with  a  barrage  of 
new  fixes,  many  for  flaws  that 
were  given  "critical"  severity 
ratings  by  Microsoft. 

The  October  patch  rollout 
was  one  of  Microsoft’s  largest 
this  year,  consisting  of  10 
patches  designed  to  address 
a  total  of  20  vulnerabilities 
across  a  wide  range  of  the 
company's  products.  Seven  of 
the  security  updates  were  rat¬ 
ed  as  "critical"  for  users  to  in¬ 
stall.  and  the  other  three  were 
labeled  "importam." 
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Security  Updates 


The  "crltiear  pstohts  rviaased 
by  Microsoft  week  include: 
MS04-032:  Fixes  several  secu- 
lity  holes  in  Windows  NT.  XP  and 
Server 2003  that  could  aBow  at¬ 
tackers  to  take  complete  control 
of  unprotected  systems  and  view, 
change  or  delete  data  on  com¬ 
promised  machines. 

MS04-033:  Patches  a  remote 
code  execution  vulnerability  in 
several  vetsions  ot  Excel  for  Win¬ 
dows  and  Macintosh  systems. 

MS04-034:  Addresses  a  flaw  in 
the  way  that  Windows  XP  and 
Server 2003  process  com¬ 
pressed  files. 

The  massive  release  high¬ 
lighted  Microsoft's  continuing 
struggles  with  software  secu¬ 
rity.  Nevertheless,  six  users 
said  the  monthly  cycle  that  the 
vendor  has  followed  for  al¬ 
most  all  the  patches  released 
since  last  October  has  made 
the  patching  process  more 
predictable  and  manageable.' 

"Ov’erall.  the  Imonthly 
patching]  schedule  is  a  good 
thing."  said  Hugh  McArthur, 
information  systems  security 
officer  at  Online  Resources 
Corp..  an  online  bill-process¬ 
ing  company  in  McLean.  Va. 

“It  has  been  helpful  for  plan¬ 
ning  purposes  and  in  allowing 
us  to  evaluate  the  patches 
once  a  month,  versus  having 

Patches,  page  55 
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FT  Scrambles  to  Meet 
Sarb-Ox  Qjntrols  Deadline 


Slow  starts,  miscommunication  put  aimptinios 
under  the  gun  on  teehnolog\  -Rlated  mandates 


I  IT  departments  at  many  large 
.  companies  are  racing  to  docu- 
I  ment.  remediate  and  test  IT- 
'  related  controls  to  meet 
;  a  year-end  reporting 
'  deadline  for  Sarbancs- 
I  Oxley  compliance. 

I  The  rush  is  on  be¬ 
cause  many  companies 
<  failed  to  grasp  the 
amount  of  work  that  would  be 
required  and  because  of  mis- 
communication  between  IT 
managers  and  the  finance  de¬ 


partments  that  typically  run 
;  SarbaneS'Oxley  Act  compli¬ 
ance  projects,  according  to 
:  users  and  analysts  who  wcu- 
inter\’icwed  last  week. 

"What  I’ve  seen  is  a 
‘Let’s  drop  everything 
and  get  this  done'  ap¬ 
proach  on  dealing  with 
IT  controls  from  the 
second  quarter  until 
I  nou’."  said  John  Hagerty.  an 
I  analy-st  at  AMR  Research  Inc. 
I  in  Boston. 

I  H^rty  and  several  other 


analysts  and  consultants  said 
they  expect  that  mi>si  compa¬ 
nies  that  need  lo  show  Sarb- 
Ox  ci*mpIiancL’  b>  year's  end 
will  get  the  bulk  ttf  their  II' 
controls  documented  and  test¬ 
ed  in  time.  But  some  analysis 
predicted  that  in  annual  lt)-K 
a-pons  early  next  year,  as 
many  as  25%  of  the  so-called 
accelerated  filers  will  have  to 
repv»n  controls-relaiod  c.xcep- 
tions  that  require  additional 
remediation.  ITepending  on 
the  severity  of  the  pn>blems. 
a>mpanies  could  he  fined  by 
the  U.S.  Securities  and  Ex¬ 
change  Commission. 

Sufb-Ox.  page  to 
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Your  potential.  Our  passion." 


Instead  of  putting  out  fires,  we  now  focus 
on  ways  we  can  deploy  new  technologies 
that  benefit  our  customer  service.” 

Dave  Qiacon 

Manager,  Technical  Services,  PING 


Microsoft  Windows  Server  System  makes  It  easier  for 
golf  club  maker  PING  to  manage  the  infrastructure 
serving  their  400  end  users.  Here's  how:  By  using 
Windows  Server  2003  with  Active  Directory,*  PING 
now  centrally  manages  alt  its  servers,  desktops, 
and  end  users  from  one  location.  This  cut  annual 
administrative  time  by  800  hours.  Time  that  can  now 
be  spent  developing  new  ways  to  support  customers, 
partners,  and  employees.  Software  that's  easier  to 
manage  is  software  that  helps  you  do  more  with  less. 
Get  the  full  PING  story  at  microsoft.comAvssystem 


Windows  Server  System'  inciudes: 


Server  0$ 

WirKlows  S^ver' 

Operations  Infrastructure 

^sterns  Management  S^ver 

Operations  Manager 

Internet  Security  &  Aaeleration  Server 

Windows*  Storage  Server 

Application  Infrastructure 

SQL  Server' 

BizTalk*  Server 

Commerce  Server 

Host  Integration  Server 

Information  Wort  Infrastiuctue 

Exchange  Server 

Content  Management  Server 

Office  SharePoint'  Portal  Server 

Office  Live  Communications  Server 
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Mr.  40%  Less 
Time  Spent  on 
Maintenance  and 
Administration 


Make  a  name  for  yourself 
with  Windows  Server  System. 


Windows 
Server  System 
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The  right  storage  solution  doesn't  just  give  you  better  storage  control. 
It  helps  you  make  better  business  decisions. 

Storage  Management  Solutions 

The  first  step  in  making  better  business  decisions?  Deciding  to  be  in  control.  CAs  Intelligent  Storage  Management  solutions  can 
put  you  tn  control  of  costs,  resources  and  data  availability  like  never  before.  They  provide  you  with  a  comprehensive  real-time 
view  of  your  system's  storage  capabilities,  while  also  providing  immediate  access  to  all  of  your  information.  As  a  result,  you  can 
manage  and  monitor  your  entire  storage  environment  with  ease  and  actually  use  existing  data.  As  always,  it's  also  vendor-  and 
device-neutral,  so  you  can  maximize  your  current  storage  resources,  saving  time  and  money.  With  more  automated  software 
that  can  make  its  own  decisions  about  storage  management,  you'll  have  the  information  you  need  to  make  better  business 
decisions.  To  find  out  more  or  to  get  a  white  paper,  go  to  ca.com/drivet. 
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E-vote  at  Risfc 

In  the  Technology  section:  Despite  assurances 
from  election  officials  and  vendors,  researchers 
say  the  the  security  and  reliability  of  electronic 
voting  systems  is  in  doubt  because  of  substan¬ 
dard  development  and  testing  practices.  Page  25 
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The  Extra  Mile 

In  the  Management  section: 

Rebuilding  your  bare-bones  IT  shop?  It's 
a  great  time  to  commit  to  getting  diversity 
ri^t.  Here  are  some  practical  tips  from 
companies  that  know  how.  Page  31 
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4  IBM's  new  storage  arrays 
offer  many  firsts,  including 
compatibility  between  arrays. 

4  Starbucks  customers  can 

now  use  HP  tablet  PCs  to 
bum  music  CDs  while  sipping 
their  coffee. 

5  IBM  and  Borland  add  tools 

that  bring  business  process 
automation  to  software 
development. 

6  India's  IT  hiring  boom  contin¬ 
ues,  and  the  growing  demand 
for  offshore  services  could 
lead  to  rate  increases. 

10  IBM  completes  its  Powers 
lineup  by  adding  64-way 
pSeries  and  iSeries  models. 

12  The  LJt.  city  government's 

second  rollout  of  PeopleSofr 
apps  is  proceeding  a  lot  more 
smoothly  than  the  first  one. 

12  PeopleSoft’s  management 

shuffle  continues  as  executive 
VP  Ram  Gupta  departs. 

16  Sanjay  Kumar  looks  for  start¬ 
ups  to  invest  in  after  his  exit 
fbom  Computer  Associates. 
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6  On  the  Mark;  Mark  Hall  has 
the  latest  on  Teradata's  plans 
to  better  integrate  its  data 
warehouse  with  other  apps. 

20  Don  Tennant  is  still  waiting 
for  something  substantive  to 
come  out  of  the  accord  Sun 
and  Microsoft  signed  in  April. 

20  Michael  Gartenberg  has 

heard  it  all  before  when  it 
comes  to  scary  stories  about 
the  security  threats  posed  by 
USB  devices. 

21  Virginia  Robbins  loves  self- 
service,  but  automation  can 
do  only  so  much  before  it 
becomes  more  cost-effective 
to  have  humans  intervene. 

28  Robert  L  Mitchell  thinta 
companies  are  missing  the 
point  if  they  dislike  how  quick¬ 
ly  information  (about  their 
products'  flaws,  for  example) 
is  disseminated  on  the  Web. 

34  Barbara  Oomoiski  realizes 
that  IT  careers  have  lost  their 
allure  for  many,  but  if  you've 
got  a  budding  techie  at  home, 
she  has  some  advice. 

56  Frankly  Speaking:  Frank 
Hayes  says  that  while  you 
mi^t  want  to  jam  wireless 
transmissions  in  your  offices, 
you  can't  jam  the  future. 
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StretchimYbur 
Storage  Dollars 

Skyrocketing  demand  for 
data  storage  is  outpacing  the 
growth  of  IT  budgets,  and 
something  has  to  give.  This 
special  report  identifies 
cost-saving  strategies  to 
I  help  you  cope. 

MouaEBeaK 
ONMacae. 


96  Thri^  Stong*  Stratagin.  To 

maTimiyr  storage  savings,  some 
larger  companies  are  homing  in 
on  long-term  planning  inhiatives. 


38  Long  DisUncu. 
Short  Moiwy.  IT 
execs  like  Don 
Bolton  of  Teppco 
Partners  say  they're 
cuttirtg  their  long¬ 
distance  data  back- 
IQ)  costt  with  slor- 
age-over-IP  tech¬ 
nology. 


SwiflQt.  Buying 
used  storage  equ^ 


ment  is  cheaper 
than  buying  i>ew. 
and  customers 
can  also  reap 
the  benefits  of 
faster  acquisition 
cycles  and  more 
flexible  mainte¬ 
nance  programs. 

But  there  are 
risks  involved. 

44  QuickStudy: 

A  primer  on  grid  storage,  a 
model  similar  to  grid  computing 
that  allows  companies  to  deploy 
and  manage  storage  distributed 
across  multiple  systems  and 
networks.  QMLBC:  Learn  more 
about  the  ftrst  grid  stora^  prod¬ 
uct.  OQulcfcLMt4B672 

I  45  The  Ahnanac. 

I  E-maiL  busmess 
intelli^nce  aiKl 
CRM  are  driving 
I  forces  behind  the 
need  for  more 
storage  capacity:  e-mail  archiving 
has  hidden  costs;  and  a  prototype 
hotogr^hic  disc  is  emergiiig  from 
anRflcDlab. 

46  Opinion:  Columnist 
Mark  Hall  was 
planning  to  write 
about  the  impend¬ 
ing  demise  of  tape. 

But  then  he  lool^ 
a  bit  closer  and  dis¬ 
covered  it  has  a  bright  future. 
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News  and  survey  re¬ 
sults  from  CDmpoCer- 
wnrffTi  nrirr  snniiil 
storage  conference. 
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Cisco,  Microsoft 
Bridge  Securfty  Gap 

CISCO  SYSTEMS  IMC.  and 
MICROSOFT  CORP.  today  wili  an¬ 
nounce  a  coBaboratfvo  de¬ 
signed  to  bridge  a  divide  between 
their  emerging  network  access-con¬ 
trol  arcNtectues. 

The  two  comparaes  sari  on  Friday 
that  they  haw  agreed  to  share  appfi- 
cation  programming  interfaces  and 
jointfy  develop  protocob  intended  to 
inprove  nteroperabity  between  hi- 
crosoH's  Network  Acc^  hotection 
technology  and  Cisco's  rival  Network 
Admission  Control  offering. 

NAP  and  NAC  are  desi^ied  to 
help  companies  enforce  security 
poicies  on  network  en^ioint  sys¬ 
tems  such  as  PCs  and  mobile  de¬ 
vices.  The  technologies  let  IT  mar>- 
agers  set  nAes  that  prevent  a  client 
device  from  accessing  a  network  un¬ 
less  it  complies  with  policies  on  anti¬ 
virus  software  updates,  firewall  con- 
figureiions  and  other  issues. 

But  Cisco's  plan  is  to  integrate 
the  functionally  ffito  its  routers, 
switches  and  vilual  private  network 
devices,  white  Mcro^'s  strategy  is 
locused  on  embedding  NAP  in  its 
operating  systems. 

The  agreement  to  coltaborate 
means  that  users  shmidnl  have  to 
vorry  about  interoperabity  issues. 
saidJoeiConover.anana^atCiY- 
rBnlAnalysislnc.inStei1ing.Va.*Mi- 
crosoft  and  Cisco  needed  to  do  this,* 
he  sari. 'A  lack  of  cooperabon  would 
have  resulted  In  compeHng  standards 
or  no  standards  at  ai.  both  of  which 
are  unattractive  to  enlerpnses.* 

Qbco  laleesad  an  Miai  set  of  NAC 
producte  n  June  (QuckLink  4778T] 
Mnosoft  wi  add  VPN  Quarantine 
support  in  the  first  service  pack  tor 
Window5ServBr2003.duebytnri- 
2005.  But  Steve  Anderson,  dvector 
of  networking  n  Mrirosoft's  VAndows 
Server  group,  sari  ful  NAP  support 
won’t  come  untit  the  Lnnghom  ver¬ 
sion  of  Windows,  expected  In  2007. 

Mcrosoft  had  planned  to  fully  sup¬ 
port  NAP  in  an  update  to  Wk)d^ 
Server  2003  thri's  due  in  the  sec¬ 
ond  half  of  2005.  Anderson  said  the 
delay  6  being  caused  by  the  deal 
with  Cisoo  and  a  decision  by  Micro¬ 
soft  to  add  enforcement  in  ad¬ 
dition  to  Oyriamic  Host  Configuration 
Protocol  enforcement. 
-dUsfnark^^  and  Shea  I 


IBM  Adds  Hi^-End, 
Midrange  Disk  Arrays 

Performance,  capacity  boosted  in  first 
storage  systems  based  on  IBM  chips 


IBM  LAST  WEEK  unveUcd 
rwo  new  enterprise-class 
disk  arrays.  One  is  aimed 
at  the  hi^  end  and  one  at 
midrange  environments,  but 
both  have  compatible  software 
that  allows  the  boxes  to  be 
managed  through  a  single  in¬ 
terface  and  data  to  be  replicat¬ 
ed  between  them. 

The  TotalStorage  DS8000, 
the  next  generation  of  IBM’s 
high-end  Enterprise  Storage 
Server,  also  known  as  the 
Shark,  boosts  performance  as 
much  as  sixfold,  and  the 
192TB  capacity  is  more  than 
three  times  that  of  its  prede¬ 
cessor.  The  midrange  Total- 
Stor^  OSbOOO  array  is  a 
rack-mounuble,  ?U-high  unit 
that  scales  from  S80GB  to 
67.2TB.  OU  is  l.TS-in.  high.) 

Both  boxes  represent  the 
first  time  IBM  Im  used  native 
Fibre  Channel  disk  drives  in¬ 
stead  of  SCSI  with  Fibre 
Channel  bridges.  Charles  lick- 
el  vice  president  of  software 
and  storage  development  at 
IBM.  said  the  arrays  win  be  of¬ 
fered  with  less-expensive  Ad¬ 
vanced  Technology  Attach¬ 
ment  disks  by  the  end  of 200S. 


The  arrays  wiU  ship  Dec.  3. 
The  DS8000  and  DS6000  can 
be  used  as  primary  storage  for 
IBM  zSeries  and  iSeries  main¬ 
frames  as  well  as  for  Unix, 
Linux  and  Wintel  servers.  The 
DS8000  can  be  upgraded  on 
the  fly  flroro  two  to  four  proc¬ 
essors. 

For  the  first  time,  IBM  used 
its  own  server  processors  for 
storage.  The  refrigerator-size 
DS8000  uses  the  pSeries 
processor,  and  the  DS6000 
uses  an  IBM  PowerPC  chip. 

CompaiibntyaPlus 

Users  at  a  press  event  here 
said  they  were  impressed  by 
the  increase  in  performance 
and  the  ability  to  use  a  single 
management  platform  across 
all  of  IBM's  storage  products. 

"It's  easy  to  talk  about  the 
new  stufT,  but  when  you've  got 
an  existing  infrastructure, 
you’ve  got  to  have  something 
that  blends  into  that,”  said  Bob 
Veruble,  manager  of  enter¬ 
prise  systems  at  BlueCross 
BlueShteld  of  Tennessee  Inc. 
in  Chattanoi^a.  The  users  also 
said  they  looked  forward  to  an 
upgrade  that,  as  with  a  main- 
flame,  will  allow  mtiltiple  logi¬ 
cal  partitions  to  be  created  au- 


IBM  Storage  Arrays 

■  Ratal  starting  prto  S134.000 
■2566Bof  cache 

■  Supports  96  peiabytas  of  extamal 
storage 

■129  Flira  Chmal  or  Fkon  ports 

■  In 2005.  wi  be  BgiafriBfate  from 
two  to  aIgM  proceeBQis  and  SCGB 
of  cache 

■Ratal  starting  price:  SS7J)00 

■  Conlgued  through  Vteb-based 
Marteces 

■46B  of  cache 

■  16  Fin  Charwwf  or  Ficon  ports 
tomatically  in  response  to  ap¬ 
plication  needs.  IBM  pledged 
to  add  that  capability  over  the 
next  year. 

Currently  the  DS8000  can 
be  manually  split  into  two  sep¬ 
arate  systems. 

Tony  Asaro,  an  analyst  at 


Enterprise  Strategy  Group  Inc. 
in  Milford,  Mass.,  gave  the 
new  IBM  disk  arrays  high 
marks  for  their  price,  compati¬ 
bility,  four-year  warranty  and 
use  of  IBM-built  processors. 
But  be  added  that  IBM  must 
still  address  the  network- 
attached  storage  and  content- 
addressed  storage  markets, 
like  chief  competitors  EMC 
Corp.  and  Hitachi  Data  Sys¬ 
tems  Corp.  have. 

Both  arrays  use  an  internal¬ 
ly  switched  architecture  in¬ 
stead  of  Fibre  Chaimel  arbi¬ 
trated  loop,  which  brings  IBM 
up  to  speed  with  similar  boxes 
flx»m  its  mafor  competitors. 

Dale  Collier,  senior  vice 
president  of  technology  at  Re¬ 
gions  Financial  Corp.  in  Mont¬ 
gomery.  Ala.,  said  he  likes  the 
compatibility  between  the 
DS8000  and  DS6000.  He's 
considering  buying  both  to 
replicate  between  a  data  cen¬ 
ter  in  Montgomery  and  a  sec¬ 
ondary  one  in  Birmingham. 

Ala.  Regions'  infrastructure 
includes  IBM  mainframes  and 
Shark  arrays  and  EMC’s  high- 
end  Symmetrix  arrays. 

Today,  we're  dealing  with 
SunGard  for  disaster  recovery, 
and  at  best  that’s  a  24-bour 
Irecovery  time  objective],” 
Collier  By  replicating  the 
DS8000  and  DS6000  between 
data  centers,  be  could  recover 
data  in  seconds,  be  said. 

John  Dick,  CIO  at  Regions 
Financial,  said  be  likes  the 
new  arrays  but  added  that  the 
technology  also  ofTers  him  a 
chance  to  get  older-model 
Shark  arrays  at  a  cut-rate 
price.  O5007B 
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diem  and  bum  than  onto  CDs. 
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SeoMs  and  wi  ogiand  to  30  odiae 
shops  In  dw  Austin  siaa  starting  nsst 
Monday. 
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Delphi  2005  is  slated  to  ship 
next  month.  The  Architect 
Edition  is  priced  at  S3.000  for 
new  users  and  $1,999  for  an 
upgrade,  while  the  Enterprise 
Edition  lists  at  $2,500  for  new 
users  and  $1,500  for  an  up* 
grade.  The  Professional  Edi¬ 
tion  is  priced  at  $999  for  rvew 
users  and  $399  for  an  upgrade. 

All  of  the  new  IBM  products 
will  be  available  by  year's  end. 
Pricing  ranges  h-om  $5,500  per 
user  for  Rational  Software  Ar¬ 
chitect  to  $1,000  per  user  for 
the  IBM  Rational  Web  Devel¬ 
oper  for  WebSphere.  O  50105 


Vendors  Upgrade  Development  Tools 


IBM,  Boriand  aim  to  bring  business 
process  automation  to  app  design  work 


Software  Architect,  Software 
Modeler  and  Manual  Tester. 

The  modeling  too]  includes 
support  for  Unified  Modeling 
Language  2.0  for  visual-based 
modeling.  IBM  will  continue 
supporting  the  older  Rational 
Rose  and  Rational  XDE  mod¬ 
eling  systems. 

IBM  will  acquire  the  port¬ 
folio  management  software 
tfarou^  its  planned  purchase 
of  Systemcorp  ALG  Ltd.  (see 
story,  below  right). 

Diamondback  Strikes 

Meanwhile.  Boriand  this  week 
unveiled  Delphi  2005.  which 
incorporates  support  for  .Net 
Win32.  Delphi  and  C#  in  one 
environment  vriiile  integrating 
with  Boriand  application  life¬ 
cycle  management  tools. 

(Dode-named  Diamondback. 
Delphi  2005  supports  Bor¬ 
land's  Software  Delivery  Opti¬ 
mization  plan  to  apply  busi¬ 
ness  process  automation  to 
software  development  tools, 
the  company  said. 

Delphi  2005  also  provides 
an  alternative  to  the  end-to- 
end  development  platforms 
ftom  IBM  and  Microsoft 
Corp.,  said  Gartner  Inc.  ana¬ 
lyst  Mark  Driver.  Many  IT 
managers  with  systems  ftom 
both  Microsoft  and  IBM  con¬ 
tend  that  recurring  features  in 
multivendor  totris  complicate 
development  prolects.  he  said. 

“Borland  is  one  of  the  very 
few  pure  tools  vendors  of  any 


serious  size  left  in  the  indus¬ 
try.  [and}  they  have  to  play 
both  sides  of  the  fence," 
Driver  said. 

Omar  Sayed,  CEO  of  Suc¬ 
ceed  Corp.  in  Chandler.  Ariz., 
has  used  Delphi  to  build 
e-commerce  systems  for  his 
customers  to  store  data  and 
operate  online  auctions.  Tite 
new  features  —  especially 
support  for  Win32,  .Net  and 
O  in  one  envirorunent  —  will 
give  company  developers 
"more  scope  to  what  they  can 
do  without  having  to  go  out¬ 
side  and  bridge  things  in  dif¬ 
ferent  environments."  be  said. 


BY  HEATHEK  HAVEH8TEIH 

IBM  and  Boriand  Software 
Corp.  last  week  separately 
brought  out  upgrades  to  their 
development  tool  lines  that 
executives  said  add  support 
for  heterogeneous  environ¬ 
ments  and  more  closely  link 
software  creation  to  business 
goals. 

IBM  unveiled  an  expanded 
Rational  Software  product  line 
that  it  had  previewed  under 
the  code  name  Atlantic  at  the 
annual  Rational  user  group 
conference  last  summer 
[QuickUnk  4836S}.  Mean¬ 
while,  Borland  rolled  out  a 
new  version  of  its  long-run¬ 
ning  Delphi  Windows  devel¬ 
opment  tool  family.  Observers 
said  both  companies  are  ma¬ 
neuvering  to  infuse  their  plat¬ 
forms  with  business  process 
automation  commonly  used  in 
other  corporate  operations 
such  as  core  product  design 
and  manufacturing. 

“What  we're  seeing  today  in 
IT  sbe^  is  the  need  to  [start] 
thinking  more  strategically 
about  IT  priorities  and  bow 
the  overall  IT  assets  and  re¬ 
sources  can  be  best  matched 
to  deliver  business  value,”  said 
Melissa  Webster,  an  analyst  at 
maricet  research  company 
IDC. 

IBM’s  release  of  the  Ratio- 


IBM  to  Buy  Systemcorp 
To  Bolster  Rational  Line 


■M  tet  «Mk  agreed  to  ac* 
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pMatBMsdd. 
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to  cornptomenl  GU  midde- 
were.  Obaig  added 
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nal  tool  set  brings  all  the  offer¬ 
ings  into  the  Eclipse  3.0  frame- 
woric.  an  open-source  devel¬ 
opment  platform  that  proims- 
es  deeper  integration  of  the 
various  products.  Webster 
said.  Eclipse  replaces  propri¬ 
etary  application  program¬ 
ming  interfoces  previously 
used  to  integrate  the  Rational 
tools. 

The  Rational  tools  Uneup 
includes  Portfolio  Manner. 
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dunfale  by  addhg  an  dumtoun 
hwna  and  strongar  cabtoi  for  toe 
headada.  sad  Jamas  Smok.  dee 
preddad  of  teefndogy  abatogy 
and  tonorefion  d  toa  Sadtto* 
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mude  CDs,  aMe  an  If*  Budnees 
InkJd  9670  pMar  wl  alow  CUB- 
tomets  to  produce  panondbed 
CO  coven,  toserta.  gnpNcs  and 
padagtog,  add  Maro  Kfiz,  HP's 
wofidwidB  iBanoe  manager  for 
SkartucfcL 
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Vendors  Upgrade  Development  Tools 


Delphi  2005  b  dilated  U*  ship 
next  month.  The  Architeei 
Edition  is  priced  at  S3.0lXl  ft>r 
new  users  and  Shy*)*)  for  an 


IBM,  Borland  aim  to  bring  business 
process  automation  to  app  design  work 


BY  HEATHER  HAVENSTEiN 

IBM  and  Borland  Software 
Corp.  last  week  separately 
brought  out  upgrades  to  their 
development  tool  lines  that 
executives  said  add  support 
for  heterogeneous  environ¬ 
ments  and  more  closely  link 
software  creation  to  business 
goals. 

IBM  unveiled  an  expanded 
Rational  Software  product  line 
that  it  had  previewed  under 
the  code  name  Atlantic  at  the 
annual  Rational  user  group 
conference  last  summer 
[QpickLink  48365}.  Mean¬ 
while.  Borland  rolled  out  a 
new  version  of  its  loi^-nin- 
ning  Delphi  Windows  devel¬ 
opment  tool  family.  Observers 
said  both  companies  are  ma¬ 
neuvering  to  infuse  their  plat¬ 
forms  with  business  process 
automation  commonly  used  in 
other  corporate  operations 
such  as  core  product  design 
and  manufacturing. 

“What  we're  seeing  today  in 
IT  shops  is  the  need  to  [start] 
thinking  more  strategically 
about  IT  priorities  and  how 
the  overall  IT  assets  and  re¬ 
sources  can  be  best  matched 
to  deliver  business  value.”  said 
Melissa  Webster,  an  analyst  at 
market  research  company 
IDC 

IBM’s  release  of  the  Ratio¬ 


nal  tool  set  brings  all  the  offer¬ 
ings  into  the  Eclipse  3.0  frame¬ 
work.  an  open-source  devel¬ 
opment  platform  that  promis¬ 
es  deeper  integration  of  the 
various  products,  Webster 
said.  Eclipse  replaces  propri¬ 
etary  application  program¬ 
ming  interfaces  previously 
used  to  integrate  the  Rational 
tools. 

The  Rational  tools  lineup 
includes  Portfolio  Manager. 


Software  Architect.  Software 
Modeler  and  Manual  Tester. 

The  modeling  tool  includes 
support  for  Unified  Modeling 
Language  2.0  for  visual-based 
modeling.  IBM  will  continue 
supporting  the  older  Rational 
Rose  and  Rational  XDE  mod¬ 
eling  systems. 

IBM  will  acquire  the  port¬ 
folio  management  software 
through  its  planned  purchase 
of  Systemcorp  ALG  Ltd.  (sec 
story,  below  right). 

Diamondback  Strikes 

Meanwhile.  Borland  this  week 
unveiled  Delphi  2005.  which 
incorporates  support  for  .Net 
Win32,  Delphi  and  C«  in  one 
environment  while  integrating 
with  Borland  application  life¬ 
cycle  management  tools. 

Code-named  Diamondback, 
Delphi  2005  supports  Bor¬ 
land's  Software  Delivery'  Opti¬ 
mization  plan  to  apply  busi¬ 
ness  process  automation  to 
software  development  tools, 
the  company  said. 

Delphi  2005  also  provides 
an  alternative  to  the  end-to- 
end  development  platforms 
from  IBM  and  Microsoft 
Corp.,  said  Gartner  Inc.  ana¬ 
lyst  Marie  Driver.  Many  IT 
managers  with  systems  from 
both  Microsoft  and  IBM  con¬ 
tend  that  recurring  features  in 
multivendor  tools  cmnplicate 
development  projects,  he  said. 

“Borland  is  one  of  the  very 
few  pure  tools  vendors  of  any 


StaitHicks  las  made  the  HP 
T^)let  PC  TCtKX)  systems  more 
durable  by  adding  an  aluminum 
frame  and  stronger  cables  for  the 
headsets,  said  James  Snook,  vice 
president  of  technology  sbategy 
arvj  innov^ion  at  the  Seattle- 
based  company.  He  added  that 
touch-screen  technology  elimi¬ 
nates  the  need  for  a  ke^ioard. 

*We  fcHmd  a  way  to  comple¬ 
ment  the  existing  store  environ¬ 
ment  vnthout  dianging  it  to  a  sig¬ 
nificant  extent.’  Snook  said.  Uang 
a  custom  application  on  the  tablet 


PCs.  customers  sitting  at  a  music 
bar  or  in  nearby  chairs  will  be  able 
to  view  a  directory  and  hear  selec¬ 
tions  from  an  in-dore  database  of 
more  than  150.000  songs. 

An  HP  xw4100  workstation  wiH 
store  the  songs  and  support  the 
creation  of  professiond-quality 
music  CDs.  while  an  HP  Business 
InkJet  9670  printer  will  allow  cus¬ 
tomers  to  produce  personalized 
CD  covers.  Ins^.  gr^jhics  and 
packaging,  said  Marc  Kriz.  HP's 
worldwide  aOiance  manager  tor 
Starbucks. 


Starbucks  plans  to  charge 
$8.99  for  the  first  seven  songs  and 
99  cents  tor  each  addfbonal  one. 
Credit  card  data  for  processmg 
payments  WiH  be  sent  from  the 
tat^  PCs  to  the  company's  point- 
of-sale  system  via  m-store  Vl^i 
networks 

^  and  Starbucks  wouldn't  dis¬ 
close  the  expected  cost  of  the 
technology  depioymem. 

Snook  said  the  roHoul  wtM  take 
years  to  complete  but  wasn't  more 
specific. 

-UattHambien 


serious  size  left  in  the  indus¬ 
try.  (and)  they  have  to  play 
both  sides  of  the  fence." 
Driver  said. 

Omar  Saved,  CEO  of  Suc¬ 
ceed  Corp.  in  Chandler.  Ariz^ 
has  used  Delphi  to  build 
e-commerce  systems  for  his 
customers  to  store  data  and 
operate  online  auctions.  The 
new  features  —  especially 
support  for  Win32.  .Net  and 
C*  in  one  environment  —  will 
give  company  developers 
“more  scope  to  what  they  can 
do  without  having  to  go  out¬ 
side  and  bridge  things  in  dif¬ 
ferent  environments."  he  said. 


upgrade,  while  the  Enterprise 
Edition  lists  at  S2.500  for  ni-M’ 
users  and  SL5O0  for  an  up¬ 
grade.  The  Professional  EJi- 
lion  is  priced  at  S999  for  new 
users  and  SiW  for  an  upgrade. 

I  All  of  the  new-  IBM  products 
I  will  be  available  by  year's  end. 

Pricing  ranges  from  S5.500  per 
I  user  for  Rational  Software  Ar¬ 
chitect  to  Sl.OOO  pK-T  user  for 
the  IBM  Rational  Web  Devel¬ 
oper  for  WebSphere.  O  S0K>5 

jllOKlujjE 

I  For  more  on  ttvs  lopK.  <«l  our 
j  DevBioorngrI  Kno«»*edfle  Corite 

OQuckUnkaStlQ 
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IBM  to  Buy  Sy^emcorp 
To  Bolster  Rational  Line 


IBM  last  week  agreed  to  ac¬ 
quire  Systemcorp  AL6  Ltd., 
a  Montreal-based  project  port¬ 
folio  management  comparty. 
as  part  d  a  strategy  of  pushing 
business  process-drwen  soft¬ 
core  development. 

BM  plans  to  fold  ^em- 
corp's  Wab-based  PMOffice 
softcore  nto  (Is  Rahond  de¬ 
velopment  piaHorm  as  Ra- 
bonai  Rxtfoiio  Manager.  The 
portfolio  manager  loot  can 
provide  a  comprehensrve  wew 
of  IT  projeds  across  the  enter¬ 
prise.  Indcing  al  (imject  debv- 
erabies.  such  as  budgets  and 
tasks,  until  the  work  is  com¬ 
piled.  IBM  said. 

Fnancial  terms  of  the  deal 
weren't  disdosed. 

Systemcorp's  software  can 
proi^  Ratiortai  users  the  vtst- 
tHUynaededtomoreeffeebye- 
fy  manage  IT  investments,  said 
Roger  Oberg.  IBM's  vice  presi¬ 
dent  of  marketing  lor  Rdional 
products. 

*Softw8ie  development  isn't 
a  decrete  set  of  activities  done 
by  testers  and  developers  and 
^cNtects  in  isolation,  but  is  a 
business  process ...  that 
iends  itseli  to  automation  and 


integration.'  Oberg  said  ’A> 
of  the  softwve  devetopmeni 
investm«n  decsons  take 
place  in  the  broader  context 
of  an  IT  portfolio  martagemenl 
dectsiorL' 

TheSystemcorptecfmolo- 
gy.  bun  usmg  IBM's  Web¬ 
Sphere  Portal,  was  des^gted 
to  complement  IBM  mldde- 
ware.  Oberg  added. 

The  tool  can  hdp  aOs  ef¬ 
fectively  communicate  how  IT 
resources  are  deployed  to  re¬ 
spond  to  CMTsdeng  buSMiess 
pnofftes.  said  Melissa  Web¬ 
ster.  an  analyst  at  market  re¬ 
search  company  DC.  Because 
toe  tool  tracks  costs  and  other 
expensesagainstproiedmHe- 
siones.  A  can  tnk  tMoper 
teams  to  toe  business  goals, 
she  added. 

*A  few  years  ago.  those  ds- 
cussions  wem  held  on  a  ratoer 
technical  level.’  Wbbster  said, 
‘ttwashardforthelmes-of- 
busnsss  people  to  gain  some 
vGMty  as  to  what  the  issues 
were  when  toe  busness  prion- 
bes  change ...  or  when  proj¬ 
ects  were  delayed,  why  toey 
were  delayed.” 

-  Heather  Haven^an 
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Novell  Will  Defend 
Open-Source 

Novell  Inc.  said  it’s  prepared  to 
use  its  patent  portloRo  to  protect 
its  open-source  software  against 
lawsuits.  The  company  vowed  to 
employ  same  measures  gen¬ 
erally  used  to  defend  proprietary 
software  products”  if  other  ven¬ 
dors  claim  that  its  open-source 
offerings  infringe  on  their  patents. 
Novell  didnt  promise  that  it  would 
never  use  its  patents  against  oth¬ 
er  Linui  vendors  but  sakt  that  it 
has  no  intention  of  doing  so. 

SCO  to  State  Case 
OnNewVIfebSite 

Tha  SCO  Oroup  Inc.  said  it  plans 
on  Nov.  1  to  launch  a  VMi  site  de¬ 
voted  to  its  legal  battles  with  Nov¬ 
el  and  other  Linux  backers.  Tha 
www.prosco.nef  site  wll  let  SCO 
”telt  our  side  of  the  story”  CCO 
Dari  McBride  said  at  the  ETRE 
conference  in  Cannes.  France.  A 
spokesman  for  Undon.  Utah-based 
SCO  said  the  sitB  is  being  created 
partly  in  response  to  www.gnUam. 
naC  an  independent  Wsb  site  that 
has  been  erlhcal  of  SCO. 

Cisco  Inks  Security 
Deals  With  CA,  IBM 

Computer  Associates  fritemation- 
ai  inc.  said  H  plans  to  Migrate  its 
antMrus  and  antispyeare  tools 
with  Cisco  Systems  hic.*s  Trust 
Agsnt  software.  Trust  Agent 
which  is  pari  of  Cisco's  Network 
Admission  Cocitrot  offering,  works 
with  NAC-eneMed  routers  to  str^ 
unsscured  PCs  from  accessing 
networks.  Separatafy.  Cisco  and 
BM  said  that  IBM's  Trvoli  man- 
agament  software  now  interoper¬ 
ates  with  the  NAC  products. 
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Short  Takes 

WAL-MART  SrOBES  INC  said  it 
has  expanded  its  data  warehouse, 
which  is  bassd  on  NCR  Corp.'s 
Teradata  software.  But  R  didn't 
disdoaaanydetaite.  (See  related 
Rams  al  fighL) ...  SAP  AG  up¬ 
graded  Its  business  applications 
for  smal  and  midsize  companits. 


Orange  Everywhere  in 
October?  Must  Be . . . 

. . .  Halloween?  Or  maybe  the  Syracuse  University  Orange¬ 
men  football  team  had  arrived  in  Seattle  to  battle  the 
University  of  Washington  Huskies?  Neither  The 
Washington  State  Convention  and  Trade  Center  was 
mobbed  last  week  by  3,000  database  and  business 


Chow  Tera- 
data  iniproves 


intelligence 
(Bl)  wizards 
festooned 
orange 

I  vests. hats. 

.shirts 
even  shoes. 
Many  also 
carried  or¬ 
ange  travel 
bags,  back¬ 
packs  and 
briefcases  —  not  necessarily 
to  display  their  questionable 
fashion  sense,  but  to  show 
their  colors  while  attending 
Teradata's  annual  user  con¬ 
ference.  The  San  Diego-based 
data  warehousing  division  of 
NCR  Corp.  has  adopted  or¬ 
ange  as  its  corporate  color.  In 
addition  to  doing  brisk  busi¬ 
ness  in  orange  clothing  and 
tchotchkes.  the  company  gave 
users  a  sneak  peek  at  Terada- 
ta  Warehouse  8.0.  a  software 
upgrade  that's  due  in  early 
December.  According  to  Alan 
Chow.  Teradata's  senior  vice 
president  for  R&D.  the  new 
release  will  conform  to  Web 
services  and  message-passing 
architectures,  linking  it  more 
tightly  with  business  applica¬ 


tions.  Peihaps  more  impor¬ 
tant.  he  says.  8.0  makL*s  it  eas¬ 
ier  to  trigger  external  stored 
procedures  so  other  applica¬ 
tions  can  automatically  react 
to  Bl  discovered  inside  a  Ter¬ 
adata  data  warehouse.  Chow 
also  brags  that  8.0  impitYvcs 
the  responsiveness  of  data 
warehouses  to  real-time  rates. 

Near  real-time  analytics 
helped  boost . . . 

. . .  Continental  Airlines  Inc. 
from  worst  to  first.  That’s  the 
opinion  of  Kelly  Cook,  direc¬ 
tor  of  customer  relationship 
management  at  the  Houston- 
based  airline.  Cook  claims 
that  Bl  that  Continental 
gleaned  from  its  cttsiomcrs 
helped  move  it  from  last 
place  in  travelers'  opinions 
nine  years  ago  to  the  winner 
of  this  year's  award  for  best 
airline  from  London-based 
OAG  Worldwide  Ltd.  The 
first  move  Continental  made 
to  improve  frequent-flier  re¬ 
lations  back  in  the  mid-'90s 
was  to  cortsolidate  55  databas¬ 
es  worldwide  into  a  single 
Teradata  data  warehouse. 

“Wc  wanted  one  voice  of  the 


customer.”  Cwk  says.  Next, 
the  goal  was  to  identif)’  high- 
yield  customers,  create  loyal¬ 
ty  programs  and  get  more  im¬ 
mediate  data  on  the  cost  of 
each  flight.  For  example, 
flight  attendants  now  receive 
information  from  the  data 
w.-»rchouse  about  high-value 
customers  on  a  flight  so 
they  can  personally  express 
the  airline's  interest  in  and 
knowledge  about  the  cus¬ 
tomers'  recent  flying  experi¬ 
ences  with  Continental.  And 
the  company's  financial  ana¬ 
lysts  can  get  information 
about  the  profitability  of  each 
flight  instantly  after  •‘wheels 
up."  Cook  says.  She  adds  that 
in  the  future,  she  wants  the 
data  warehouse  to  use  real¬ 
time  clickstream  data  to  auto¬ 
matically  generate  targeted 
offers  to  Continental's  Web 
site  visitors. 

Data  warehouse 
cuts  costs  for... 

. . .  cost-conscious  Southwest 
Airlines  Co.  The  Dallas-based 
carrier  centralized  its  Bl 
group  two  years  ago  around  a 
Teradata  data  warehouse  in 
order  to  keep  a  lid  on  IT  costs 
through  better  systems  man¬ 
agement  and  more  eflUcieni 
staffing  policies.  ‘Wc'rc  the 
low-cost  airline,  so  we  should 
have  a  low-cost  infrastruc¬ 
ture."  says  Patrick  Bolin,  se¬ 
nior  manager  of  enterprise 
data  warehousing  at  South¬ 
west.  Besides  helping  to  hold 
down  IT  spending,  the  2TB 
data  warehouse  helps  busi¬ 
ness  analysts  cut  corporate 
costs.  Bolin  pegs  the  annua! 
savings  from  ideas  generated 
through  use  of  the  data  ware¬ 
house  at  between  S1.2  million 
and  S1.4  mil¬ 
lion.  As  a  re¬ 
sult  of that 
success,  the 
data  ware¬ 
house  is  des¬ 
tined  to  grow. 
Bolin  esti¬ 
mates  that  it 
will  increase 


BOl  IN  say^ 
61  cuts  costs. 


to  3TB  by  next  summer  and 
possibly  double  that  volume 
by  2007.  He  says  his  team  is 
developing  belter  ways  of 
handling  ad  hoc  query  re¬ 
quests  from  end  users  and 
creating  dashboard-style  tools 
for  the  airline's  executives. 

‘Extreme  data 
warehousing’  is . . . 

. . .  )ust  around  the  comw.  pre¬ 
dicts  Stephen  Brobst,  Tcra- 
data's  chief  technology  offi¬ 
cer.  The  "extreme"  future  that 
Brobst  envisions  for  data 
warehouse  managers  has 
three  drivers;  vast  increases 
in  data  volume,  demand  for 
real-time  re¬ 
sponsiveness 
and  hordes  of 
new  users. 
Brobst  points 

by  RFID  technology.  Compa¬ 
nies  that  use  RFID  had  better 
be  prepared  to  harvest  data  at 
rates  "two  orders  of  magni¬ 
tude  greater"  than  they're 
used  to  getting,  he  says.  Data 
warehouse  performance  will 
also  be  critical  for  Bl  apps. 
according  to  Brobst.  A  data 
warehouse  that  can’t  index 
new  information  “instanta¬ 
neously  or  near  instanta¬ 
neously''  is  going  to  be  ail  but 
useless  in  the  coming  years, 
Brobst  claims.  He  adds  that 
CEOs  who  want  their  compa¬ 
nies  to  become  responsive 
“real-time  organizations”  are 
foolish  if  they  leave  out  Bl.  "A 
real-time  enterprise  without 
real-time  business  intelli¬ 
gence  is  a  real  fast,  dumb  or¬ 
ganization.”  he  quips.  Finally, 
Brobst  estimates  that  the 
number  of  Bl  users  of  a  typi¬ 
cal  data  warehouse  will  leap 
by  a  factor  of  10  in  the  next 
few  years.  )us(  to  make  sure  it 
could  handle  the  load.  Tcra- 
data  last  year  increased  the 
number  of  u.scrs  who  can  ac¬ 
cess  its  data  warehouse  by  a 
factor  of  more  than  100.000. 
That  should  do  it.  C  50060 
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Novel  Wi  Defend 
Open-Source 

NomI  he.  slU  Vt  mpand  to 
UM  Its  phMl  pertM  to  prated 
fts  open-eeuree  sefimra  egaimt 
towBuHs.  Hie  coiBpeny  rawed  to 
•mptoir  "the  emie  meeuras  gen¬ 
erally  ueed  to  defend  praprtotary 
softwera  preduds”  IT  oHier  ven¬ 
ders  dah)  Uni  to  opan-soMree 
effartogi  Minge  on  their  petonte. 
Novel  dUn*l  praniee  that  R  would 
nevorwHipatontoaQalnetoth- 
ir  Una  vandors  but  eaM  that  II 
has  no  Mofttien  of  doing  so. 


SCO  to  State  Case 
OnNmVWsbSite 

The  SCO  Braup  he.  said  R  plans 
anNe«.1tolaMMhaWBbiitodr 
voted  to  Ms  legal  hntlhs  wM  Nov¬ 
el  and  ether  Una  bechars.  The 
www.praeeejnf  dte  wM  let  SCO 
lei  ear  aide  of  the  story  *  C») 
OsrtMcfiridisddatthsETIIE 
conlarance  h  Cannes.  Frsnee.  A 
apel— use  tor  Unden.  IRih  hnasd 
SCO  saU  ha  sRt  h  being  enntod 
pthfhfasponratowwnjrtddiii. 
aaC  IB  hdepsadsnl  Wah  aRs  that 
hasbancrRiedsfSCa 


Cisco  Inks! 

Deals  With  CA.  IE 

ConpMlar  laaoriatii  htomattoii- 
al  he.  saM  R  phns  to  htogrito  Rs 
snMrus  and  anttopywara  tools 
wRh  Chee  Syatoiiia  toc.*s  Trad 
AganI  aaflMTi.  Trad  Agent, 
wtdeh  h  part  of  Ctoco'a  Natworh 
Adndntoa  Conhoi  ofbrtog.  worlis 


natwoffca.  Saparatdy.  Chco  and 
■MaddttntairBTivdliiiM- 
aganant  iftware  now  hlaropar- 
eleewRh  the  NAC  products. 


Short  Takes 

WAL-MART  STORES  RIC.  add  H 

baa  aipnidad  Ito  dda  warahouas, 
odrieh  h  baoad  an  NCR  Cerp.'s 
Ibradita  soflwao.  Bd  R  dUnT 
dhdaaa  any  daliiB.  (Saa  rahtod 
Nona  at  rtoM.) . . .  SAP  A6  ap- 
gradad  Rt  buahaaa  appBcdiens 
torn 
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Orange  Everywhere  in 
October?  Must  Be . . . 

...  Halowwen?  Or  mayba  the  Syracuse  Unfverstty  Orange¬ 
men  footbal  team  had  arrived  in  Seattle  to  battle  the 
University  of  Washington  Huskies?  Neither.  The 
Washii^on  State  Convention  and  Trade  Center  was 
mobbed  last  week  by  3,000  database  and  business 
intelligence 
(Bt)  wizards 
festooned 


with  orange 
vests,  bats, 
shirts  and 
even  shoes. 
Many  also 
carried  or¬ 
ange  travel 
ba^  back¬ 
packs  and 
briefcases  —  not  necessarily 
to  display  their  questionable 
fashion  sense,  but  to  show 
their  colors  while  attending 
Teradata’s  annual  user  con¬ 
ference.  The  San  Diego-based 
data  warehousing  dh^ion  of 
NCR  Corp.  has  adopted  or¬ 
ange  as  its  corporate  color.  In 
addition  to  doing  brisk  busi¬ 
ness  in  orange  clothing  and 
tchotchkes,  the  company  gave 
users  a  sneak  peek  at  Terada- 
ta  Warehouse  8X>.  a  software 
upgrade  that's  due  in  early 
December.  According  to  Alan 
Chow,  Teradata’s  senior  vice 
president  for  R&D,  the  new 
release  wiU  conform  to  Web 
services  and  message-passing 
architectures.  Unking  it  more 
tightly  with  business  applica¬ 


tions.  Perhaps  more  impor¬ 
tant.  be  says.  &0  makes  it  eas¬ 
ier  to  trigger  external  stored 
procedures  so  other  appUca- 
tions  can  automatically  react 
to  B1  discovered  inside  a  7^- 
adata  data  warehouse.  Chow 
also  brags  that  8.0  improves 
the  responsiveness  of  data 
warehouses  to  real-time  rates. 

Near  real-tifne  analytics 
helped  boost .. . 

. . .  Conttnantal  AMlfwa  he. 
from  wont  to  first  That's  the 
opinion  of  I^Uy  Cook,  direc¬ 
tor  of  customer  relationship 
management  at  the  Houston- 
based  airline.  Cook  claims 
that  B1  that  Continental 
gleaned  from  its  customers 
helped  move  it  from  last 
place  in  travelers’  opiruons 
nine  years  ago  to  the  winner 
of  this  year's  award  for  best 
airline  from  London-based 
OAG  Worldwide  Ltd.  The 
first  move  Continental  made 
to  improve  frequent-flier  re¬ 
lations  back  in  the  mid-'90s 
was  to  consolidate  55  databas¬ 
es  worldwide  into  a  single 
Teradata  data  warehouse. 

“We  wanted  one  voice  of  the 


customer,"  Cook  says.  Next, 
the  goal  was  to  identify  high- 
yield  customers,  create  loyal¬ 
ty  programs  and  get  more  im¬ 
mediate  data  on  the  cost  of 
each  flight.  For  example, 
flight  attendants  now  receive 
information  from  the  data 
warehouse  about  high-value 
customers  on  a  flight  so 
they  can  personaUy  express 
the  airline's  interest  in  and 
knowledge  about  the  cus¬ 
tomers’  recent  flyiitg  experi¬ 
ences  with  Continental.  And 
the  company's  rinanciai  ana¬ 
lysts  can  get  information 
about  the  prontabUity  of  each 
flight  instantly  after  "wheels 
up."  Cook  says.  She  adds  that 
in  the  future,  she  wants  the 
data  warehouse  to  use  real¬ 
time  clickstream  data  to  auto- 
maticaUy  generate  targeted 
ofTers  to  Continental's  Web 
site  visitors. 

Data  warehouse 
cuts  costs  for... 

...  cast-conscloua  Southwest 
AirilMS  Co.  The  Dallas-based 
carrier  centralized  its  BI 
group  two  years  ago  around  a 
Teradata  data  warehouse  in 
order  to  keep  a  lid  on  IT  costs 
through  better  systems  man¬ 
agement  and  more  efficient 
staffing  policies.  "We’re  the 
low-cost  airline,  so  we  should 
have  a  low-cost  inihistnic- 
rure,"  says  Patrick  Bolin,  se¬ 
nior  maitager  of  enterprise 
data  warehousii^  at  S^h- 
wesL  Besides  helping  to  hold 
down  IT  spending  the  2TB 
data  warehouse  helps  busi¬ 
ness  analysts  cut  corporate 
costs.  Bolin  pegs  the  annual 
savings  from  ideas  generated 
through  use  of  the  data  ware¬ 
house  at  between  SL2  million 
and  S1.4  mil¬ 
lion.  As  a  re¬ 
sult  of  that 
success,  the 
data  ware¬ 
house  is  des¬ 
tined  to  grow. 
Bolin  esti¬ 
mates  (hat  it 
will  increase 


to  JTB  by  next  summer  and 
possibly  double  that  volume 
by  2007.  He  says  his  team  is 
developing  better  way's  of 
handling  ad  hoc  query  re¬ 
quests  from  end  users  and 
creating  dashboard-style  tools 
for  the  airline's  executives. 

‘Extreme  data 
warehousing' is... 

...  just  aroiml  the  corner,  pre¬ 
dicts  Stephen  Brobst,  Tera- 
data's  chief  technology  offi¬ 
cer.  The  “extreme"  future  that 
Brobst  envisions  for  data 
warehouse  managers  has 
three  drivers:  vast  increases 
in  data  volume,  demand  for 
real-time  re¬ 
sponsiveness 
and  hordes  of 


4.2B 


PotentiaJ  users 
ofasngle 
Teradata  data 
warehouse 


new  users. 
Brobst  points 
m  potential 
petabytes  of 
data  created 
by  RFID  technology.  Compa¬ 
nies  that  use  RFID  had  better 
be  prepared  to  harvest  data  at 
rates  “two  orders  of  magni¬ 
tude  greater"  than  they're 
used  to  getting,  he  says.  Data 
warehouse  performance  will 
also  be  critical  for  Bl  apps, 
according  to  Brobst.  A  data 
warehouse  that  can't  index 
new  information  "instanta¬ 
neously  or  near  instanta¬ 
neously”  is  goii^  to  be  all  but 
useless  in  the  coming  years. 
Brobst  claims.  He  adds  that 
CEOs  who  want  their  compa¬ 
nies  to  become  responsive 
“real-time  organizations"  are 
foolish  if  they  leave  out  BL  "A 
real-time  enterprise  without 
real-time  business  intelli¬ 
gence  is  a  real  fast,  dumb  or¬ 
ganization,"  be  quips.  Finally. 
Brobst  estimates  t^t  the 
number  of  BI  users  of  a  typi¬ 
cal  data  warehouse  will  leap 
by  a  factor  of  10  in  the  next 
few  years.  Just  to  make  sure  it 
could  handle  the  load.  Ibta- 
data  last  year  increased  the 
number  of  users  who  can  ac¬ 
cess  its  data  warehouse  by  a 
factor  of  more  than  100.000. 
That  should  do  it  O  50060 


HP  integrity  servers  are  taking  off,  as  are  the  companies  using  them. 


Companies  adopting  HP  Integrity  servers,  powered  by  industry-leading  Intel*  Itanium*  2  Processors,  are  seeing  remarkable  gains  in  performance. 
The  momentum  is  building.  One  after  another,  companies  ore  choosing  HP  Integrity  servers.  Leading  software  and  technology  porfners  such  os 
BEA,  Microsoft,’  Oracle,  SAP  and  Siebel  Systems  have  embraced  the  platform  as  on  industry  standard.  And  with  the  ability  to  manage  o  mixed 
environment  of  UNIX,  Microsoft'  Windows,'  Linux  ond  OpenVMS,  HP  Integrity  servers  are  fast  becoming  the  ultimate  consolidation  tool.  Demand 
maximum  performance,  reliability  and  cost-efficiency  now,  on  a  platform  that  will  carry  you  forward  mto  the  future.  Demand  performance  that's 
real-world  proven,  and  get  it— with  HP  Integrity  server  solutions. 


Choosing  HP  Integrity  servers,  choosing  results. 


AIRBUS  UK; 

Running  HP-UX11i  on  HP  Integrity 
servers,  20-30  wing  design 
simulations  that  used  to  take 
weeks  are  now  done  overnight. 


COMPUSA; 

Going  with  64-btt  architecture 
using  HP  Integrity  servers, 
they  cut  occess  time  to  inventory 
dota  by  up  to  85%. 


FIAT  AUTO; 

Standardizing  on  64  bit 
infrastructure  using  HP  Integrity 
servers,  they're  integroting  and 
enhancing  soles  and  service  os 
well  as  streamlining  the  buying 
process  while  lowering  soles  cost 


THE  KOEHLER  GROUP; 

Moving  to  an  environment 
composed  of  HP  Integrity  servers, 
they  gained  o  50%  improvement 
in  mission-critical  performonce 
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Offshoring  Fuels  IT 
Hiring  Boom  in  India 


t'ost  ofscn  iccs 
could  incR'asc  as 
denvind,  wages  rise 

BV  PATRICK  THiaOOCAU 

INiii'AHTiRtv  financial- 
results  reports  released 
last  week,  offshore  out¬ 
sourcing  firms  in  India 
detailed  sharp  increases  in 
employee  head  count.  But 
analysis  said  the  grtns-ing  de¬ 
mand  for  offshore  services 
and  workers  is  increasing 
wages  in  India,  raising  the 
potential  of  rate  tncrea.ses  for 
U.S.  cu-sfomers. 

For  now.  at  least,  aimpeii- 
lion  in  India  is  keeping  hilling 
rates  stable.  But  sexeral  ana¬ 
lysts  predicted  that  the  cur¬ 
rent  situation  won't  continue 
indefinitely  because  competi¬ 
tion  for  experienced  empkty- 
ees  will  increase. 

During  the  quarter  that  end¬ 
ed  Sept.  30.  Infosys  Technolo¬ 
gies  Lld-'s  workforce  grew 
from  27,939  to  32.949  —  an  18"  >* 
increase  in  ju.st  three  months. 

At  the  end  of  last  year’s  third 
quarter.  Bangalon.‘-ba.scd  In¬ 
fosys  had  18.580  employees. 

Mumbai-based  Tata  Con¬ 
sultancy  Services  Ltd.  said  its 
head  count  climbed  nearly 
i2**ii  in  this  year's  third  quarter.  I 
from  36,63ti  to  40,948.  In  lune  | 
2003.  Tata  emplo>’ed  about 
24.000  people. 

"Bangalore  today  is  like  | 
Silicon  Valley  was  five  years 
agix"  said  Lance  Travj.s.  an  an-  i 
alyst  at  Boston-based  AMR  I 
Research  Inc.  I 


CofTBCiion 

A  STIMy  ABOUT  e-mail  security 
apphanoB  that  ran  n  last  week's 
News  section  Ofendors  Add 
Mteapens  to  8^  E'lnai  Virus¬ 
es*)  incorrectly  Med  the  amount 
ol  venitfe  capital  iunding  rased 
by  AmhIi  Inc.  The  Undon.  Utah* 
based  company  has  raised  about 
$3  miion  n  financing  this  tar. 


The  growth  In  overseas  IT 
,  employment  stems  from  rising 
I  demand  for  offshore  services 
from  U..S.  companies,  accord- 
I  ing  to  Meta  Group  Inc.  Meta 
I  estimates  that  offshore  spend- 
I  ing  by  U.S.  businesses  will 
'  reach  SIO  billion  this  year  and 
I  that  the  u.sc  of  offshore  ser¬ 
vices  will  gnm-  about  20"i} 

'  annually  through  2008.  And 
'  that's  with  more  than  half  of  j 
all  companie.s  noi  yet  using  | 

any  offshore  services.  s.iid  ' 

Meta  analyst  Dane  Anderstm 
,  < see  chart). 

I  Offshore  demand  is  expect¬ 
ed  to  drive  up  .salaries  in  India 
'  by  about  14‘Si  this  year,  espe¬ 
cially  for  experienced  work-  | 
ers.  said  Eugene  Kublamrv.  an  ' 
analyst  at  outsourcing  con.suli-  ! 
ing  firm  NeolT  Inc.  in  San  Ra- 


m«)n,  c:.ilif.  The  increases  arc 
likely  to  continue  at  a  similar 
pace.  Kublanov  added.  An  ex¬ 
perienced  Indian  programmer 
making  57.400  this  year  can 
expect  to  cam  about  S8.f*00  in 
2005.  he  said,  noting  that  the 
same  empU*yee  may  be  mak¬ 
ing  twice  that  amount  by  2010. 

To  cover  such  increases,  off¬ 
shore  vendors  will  have  lobe- 
come  more  efficient  and  add 
more-sophisticated  IT  ser¬ 
vices  .so  they  can  charge  high¬ 
er  price.s.  Kublanov  said  that 
although  application  develop¬ 
ment  rates  in  India  remain 
roughly  onc-third  of  what  they 
are  in  the  U-S..  the  costs  there 
arc  creeping  to  $19  to  S20  per 
hour  this  year,  comp.ired  with 
517  to  518  in  2(H)3. 

Competition  for  employees. 


Offshoring  Usage 


Mda  Group's  breakdown  of 
offshore  outsourcing  usage  by 
U.S.  companies,  based  on  an 
aiaiysis  of  its  cfienl  base: 

55%:  Oon'l  33%:  Send 

send  IT  work  about  5%  of 

olfshore  Iheir  (T  work 

offshore 

• 


4%:  Rely  on  B%:Have 

offehore  firms  sent  10%  to 

foruptohalfof  30%oftheir 

their  IT  work  work  offshore 

as  well  as  the  threat  of  in¬ 
creasing  turnover,  Ls  pmmpt- 
ing  «»me  companies  to  try  dif¬ 
ferent  approaches  to  recruit¬ 


ing  and  retaining  workers. 

At  its  offshore  outsourcing 
facility  in  Hyderabad.  Sierra 
Atlantic  Inc.  has  begun  hold¬ 
ing  “parents  day"  gatherings 
for  recent  college  graduates 
who  arc  con-sidering  job  of¬ 
fers.  The  Fremont.  Calif.- 
based  company  hopes  that 
winning  over  the  parents  of 
potential  new  hires  will  in¬ 
crease  the  likelihood  that  its 
job  offers  will  be  accepted. 

"The  majority  of  college 
graduates  have  arranged  mar¬ 
riages  still."  said  Marc  Hebert, 
a  vice  president  at  Sierra  At¬ 
lantic.  “The  parents  are  very 
involved  in  lhe.se  kids'  lives." 

Hebert  said  that  in  Hydera¬ 
bad,  where  Sierra  Atlantic  has 
a  700-employcc  facility,  annu¬ 
al  turnover  has  reached  about 
15%.  putting  it  on  par  with  oth¬ 
er  large  cities  in  India.  The  ac¬ 
celerating  demand  for  workers 
is  prompting  Sierra  Atlantic  lo 
consider  setting  up  operations 
in  other  regions  of  India,  as 
well  as  in  countries  such  as 
China,  he  said.  O  50111 


BMC  Integrates  Tools  for  IT,  Business  Management 


BMC  Software  Inc.  l3.st  week 
announced  plans  to  integrate  a 
x'arietx*  <if  its  system.s  manage- 
I  mcni  tools  with  a  product  that 
'  lets  users  track  how  IT  prob- 
I  Icms  affect  individual  business 
processes. 

Houston-based  BMC  said  an 
upgrade  of  its  Service  Impact 
I  Manager  software  will  include 
I  links  to  products  such  as  the 
ci'mpany's  mainframe  and 
DB2  database  management 
I  tools  and  its  Remedy  help 
desk  and  asset  management 
tools.  Service  Impact  Maruger 
5.0,  which  is  due  in  December, 
will  also  include  a  built-in 
configuration  management 
database  and  other  new  fea¬ 
tures  (see  box). 

The  upgrade  is  aimed  at 
broadening  BMC's  Busine.ss 
Sen’icv  Management  (BSM) 
offering,  which  is  designed  to  | 
give  IT  managers  a  set  of  tools 
for  linking  computing  re-  ' 
sources  to  bu.sine.s.s  priorities. 

RMcr  Armstrong,  director  i 
of  corporate  strategy  at  BMC. 
said  that  in  addition  to  the  in-  i 


I  tcmal  product  integration  ca- 
I  pabilities.  the  BSM  software 
I  can  interoperate  with  rival 
[  management  ttwls  such  as 
Hewlett-Packard  Ca's  Open- 
View  and  Computer  Associ¬ 
ates  International  Inc.'s  Uni- 
center.  Users  tt'ho  install  Ser¬ 
vice  Impact  Manager  "don't 
have  to  rip  out  their  existing 
products,"  Armstrong  said. 


OTXEir  FEATURES 

Service  Impact 
Manager  5,0 

'  A  Web-basea  sobware  gor- 
tfli  that  grovides  system  status 
rnformation  and  cuslumirabte 
dashboard  v<ew^ 

Reoortinq  I'jols  based  on 
technology  from  Business 
Obiects  SA 

A  Qraghical  loo)  that  itts 
multiple  u.<iers  inmtly  develop 
bustnfrs.v  service  mooels 

Integration  W'(h  an  IT  asset  I 
discovery  tool  that  snows  the  | 
felatmnships  bolween  5 
terns  and  applications 


foe  Furmanski.  technoRjgy 
j  project  director  .ti  the  Univer- 
I  sityof  Pittsburgh  Medical 
I  Center,  said  he's  testing  Ser¬ 
vice  Impact  Manager  5.0  for 
,  use  in  monitoring  the  center's 
I  E-Health  system,  which  is 
I  used  to  order  medications, 

I  manage  surgeries  and  provide 
patient  information  to  doctors 
and  other  cmployee.s. 

The  E-Hcalth  system  Is 
based  on  applications  dcvel- 
;  oped  by  Kansas  City.  Mii.- 
I  based  Cemer  Corp.  and  is 
I  being  rolled  out  at  20  medical 
I  facilities  in  western  Pennsyl¬ 
vania  as  part  of  a  lO-ycar. 

5130  million  project. 

Service  Impact  Manager  is 
expected  to  help  IT  staffers 
keep  the  .system  running 
around  the  clock  and  provide 
information  to  business  man¬ 
agers  when  technical  problems 
do  occur.  Furmanski  said. 

The  medical  center  chose 
BMC  over  other  vendors  pri¬ 
marily  because  of  an  existing  j 
software  integration  partner-  1 
ship  between  BMC  and  Cem-  I 
er.  Furmanski  said,  adding  that  I 


he  expects  to  fully  imegrate 
Service  Impact  Manager  with 
the  E-Health  system  within 
three  months. 

The  new  capabilities  in  Ser¬ 
vice  Impact  Manager  5.0  will 
"make  BMCTs  products  more 
manageable  in  smaller  bites." 
said  Dennis  Gaughan,  an  ana¬ 
lyst  at  AMR  Research  Inc.  in 
Boston.  “BMC  is  trying  to 
make  the  BSM  concept  not 
seem  so  daunting." 

Tim  Gricser.  an  analyst  at 
IDC.  agreed  that  the  added 
ties  between  Service  Impact 
Manager  and  other  tools  will 
be  a  big  deal  to  IT  managers. 
BMC  "has  discovered  that 
IT  docs  not  want  a  rip-and- 
replacc  approach  to  products 
supporiii^  the  business  im¬ 
pact  of  IT."  Gricser  said. 

CA.  HP  and  IBM's  Tivoli 
Software  unit  have  launched 
technology  initiatives  similar 
to  BSM,  but  Gricser  said  BMC 
has  moved  more  quickly  to 
flesh  out  its  offering  than  its 
competitors  have.  “BSM  is  a 
real  thing  and  not  a  marketing 
position."  he  said.  O  50096 
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Offshoring  Fuels  FT 
Hiring  Boom  in  India 


Cost  of  services 
could  increase  as 
demand,  wages  rise 


1= 


BV  MmiCK  THIBODEAU 

'  N  QUAirrEiu.Y  fmancial- 
results  reports  released 
last  week,  offshore  out- 
.sourcing  firms  in  India 
detailed  sharp  inerreases  in 
employee  head  count.  But 
analysis  said  the  growing  de* 
stand  for  offshore  services 
and  workers  is  increasing 
wages  in  India,  raising  the 
potential  of  rate  increases  for 
U5.  customers. 

For  now.  at  least,  competi¬ 
tion  in  India  is  keeping  billing 
rates  stable.  But  several  ana¬ 
lysts  predicted  that  the  cur¬ 
rent  situation  won't  continue 
indefinitely  because  competi¬ 
tion  for  experienced  employ¬ 
ees  will  increase. 

During  the  quarter  that  end¬ 
ed  Sept.  30,  Infosys  Technolo¬ 
gies  Ltd.'s  workforce  grew 
from  27.939  to  32.949  ^  an  18% 
increase  in  just  three  months. 
At  the  end  of  last  year's  third 
quarter.  Bangalore-based  In- 
fos3rs  had  18.580  employees. 

Mumbai-hased  Tata  Con¬ 
sultancy  Services  Ltd.  said  its 
head  count  climbed  nearly 
12%  in  this  year's  third  quaner. 
from  36.636  to  40.948.  In  June 
2003.  Tata  employed  about 
24XfOO  people. 

"Bandore  today  is  like 
Silicon  Valley  was  five  years 
ago.”  said  Lance  Travis,  an  an¬ 
alyst  at  Boston-based  AMR 
Research  Inc. 
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The  growth  in  overseas  IT 
employment  stems  from  rising 
demand  for  offshore  services 
from  U5.  companies,  accord¬ 
ing  to  Mela  Group  Inc.  Meta 
estimates  that  offehorc  spend¬ 
ing  by  U.S.  businesses  will 
reach  $10  billion  this  year  and 
(hat  the  use  of  offshore  ser¬ 
vices  vrill  grow  about  20% 
annually  through  2008.  And 
that's  with  more  than  half  of 
all  companies  not  yet  usii^ 
any  offshore  services,  said 
Meta  analyst  Dane  Anderson 
(see  chan). 

Offshore  demand  is  expect¬ 
ed  to  drive  up  salaries  in  India 
by  about  14%  this  year,  espe¬ 
cially  for  experienced  work¬ 
ers.  said  Eugene  Kublanm*,  an 
analyst  at  outsourcing  consult¬ 
ing  firm  NeoIT  Inc.  in  San  Ra¬ 


mon.  Calif.  The  increa.scs  are 
likely  to  continue  at  a  similar 
pace.  Kublanov  added.  An  ex¬ 
perienced  Indian  programmer 
making  S7.400  this  year  can 
expect  to  earn  about  $8,500  in 
2005.  he  said,  noting  that  the 
same  employee  may  be  mak¬ 
ing  twice  that  amount  by  2010. 

To  cover  such  increases,  off¬ 
shore  vendors  will  have  to  be¬ 
come  more  eflicicni  and  add 
more-sophisticated  IT  ser¬ 
vices  so  they  can  charge  high¬ 
er  prices.  Kublanov  said  that 
although  application  develop¬ 
ment  rates  in  India  remain 
roughly  one-third  of  what  they 
are  in  the  U.&.  the  cost.s  there 
are  crecpii^  to  $19  to  $20  per 
hour  this  year,  compared  with 
$17  to  $18  in  2003. 

Competition  for  employees, 


Offshoring  Usage 


MmJfWP*  BIMHOWI  Of 
olirtom  dliwiiring  l^■Qi  by 
(LB.  eonpniii,  hiBMl  on  on 
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66%:  Don't 
sendffwoik 
offshore 


39%;  Send 
about  5%  of 
therffwork 


4%  Rely  on 
oRshorebms 
taruptoMof 
their  IT  work 


a%cHave 
sentlOPbto 
molttnir 
work  offshore 


as  well  as  the  threat  of  in- 
crea.sing  turnover,  is  prompt¬ 
ing  some  companies  to  try  dif¬ 
ferent  approaches  to  recruit¬ 


ing  and  retaining  workers. 

At  its  offshore  outsourcing 
facility  in  Hyderabad.  Sierra 
Atlantic  Inc.  has  begun  hold¬ 
ing  "parents  day"  gatherings 
for  recent  college  graduates 
who  are  considering  job  of¬ 
fers.  The  Fremont,  Calif.- 
based  company  hopes  that 
winning  over  the  parenu  of 
potential  new  hires  will  in¬ 
crease  the  likelihood  that  its 
job  offers  will  be  accepted. 

The  majority  of  college 
graduates  have  arranged  mar¬ 
riages  still.'*  said  Marc  Hebert, 
a  vice  president  at  Sierra  At¬ 
lantic.  “The  parents  are  very 
involved  in  these  kids'  lives.” 

Hebert  said  that  in  Hydera¬ 
bad,  where  Sierra  Atlantic  has 
a  700-employee  facility,  annu¬ 
al  turnover  has  reached  about 
15%,  puning  it  on  par  with  oth¬ 
er  large  cities  in  India.  The  ac¬ 
celerating  demand  for  workers 
is  prompting  Sierra  Atlantic  to 
consider  setting  up  operations 
in  other  regions  of  India,  as 
well  as  in  countries  such  as 
China,  he  said.  O  SOItl 


BMC  Integrates  Tools  for  IT,  Business  Management 


BY  MATT 

BMC  Software  Inc.  last  week 
aimounccd  plans  to  integrate  a 
variety  of  its  systems  manage¬ 
ment  tools  with  a  product  that 
lets  users  track  how  IT  prob¬ 
lems  affect  individual  business 
processes. 

Houston-based  BMC  said  an 
upgrade  of  its  Service  Impact 
Manager  software  will  include 
links  to  products  such  as  the 
company's  mainframe  and 
DB2  daubasc  management 
tools  and  its  Remedy  help 
desk  and  asset  management 
tools.  Service  Impact  Manager 
SJO,  which  is  due  in  December, 
will  also  include  a  built-in 
configuration  management 
database  and  other  new  fea¬ 
tures  (see  box). 

The  upgrade  is  aimed  at 
broadening  BMC's  Business 
Service  Management  (BSM) 
offering,  which  is  designed  to 
give  IT  managers  a  set  of  tools 
for  Unking  computing  re¬ 
sources  to  business  priorities. 

Peter  Armstrong,  director 
of  corporate  strategy  at  BMC 
said  that  in  addition  to  the  in¬ 


ternal  product  integration  ca¬ 
pabilities,  the  BSM  software 
can  interoperate  with  rival 
management  tools  such  as 
Hewlett-Packard  Co.'s  Open- 
View  and  Computer  Associ¬ 
ates  International  Inc's  Uni- 
center.  Users  who  install  Ser¬ 
vice  Impact  Manager  "don't 
have  to  rip  out  their  existing 
products."  Armstrong  said. 


OTHER  FEATURES 

Service  Impact 
Manager  5.0 


loe  Furmanski.  technology 
project  director  at  the  Univer¬ 
sity  of  Pittsbuigh  Medical 
Center,  said  he’s  testing  Ser¬ 
vice  Impact  Manager  S.0  for 
use  in  monitoring  the  center's 
E-Hcalth  system,  which  is 
used  to  order  medications, 
manage  surgeries  and  provide 
patient  information  to  doctors 
and  other  employees. 

The  E-Health  system  is 
based  on  applications  devel¬ 
oped  by  Kansas  City.  Ma- 
based  Center  Corp.  and  is 
being  rolled  out  at  20  medical 
focUities  in  western  Pennsyl¬ 
vania  as  part  of  a  tO-year. 

$130  million  project. 

Service  Impact  Manager  is 
expected  to  help  IT  staffers 
keep  the  system  running 
around  the  clock  and  provide 
information  to  business  man¬ 
agers  when  technical  problems 
do  occur.  Furmanski  said. 

The  medical  center  chose 
BMC  over  other  vendors  pri¬ 
marily  because  of  an  existing 
software  integration  partner¬ 
ship  between  BMC  and  Cero- 
I  er.  Furmanski  said,  adding  that 


he  expects  to  fuUy  integrate 
Service  Impact  Manager  with 
the  E-Health  system  within 
three  months. 

The  new  capabilities  in  Ser¬ 
vice  Impact  Manager  5.0  will 
"make  BMC's  products  more 
manageable  in  smaller  bites." 
said  Dennis  Gaughan.  an  ana- 
ijrsi  at  AMR  Research  Inc.  in 
Boston.  ‘BMC  is  trying  to 
make  the  BSM  concept  not 
seem  so  daunting.” 

Tim  Grieser.  an  analyst  at 
IDC,  agreed  that  the  added 
ties  between  Service  Impact 
Manager  and  other  tools  will 
be  a  big  deal  to  IT  managers. 
BMC  ”has  discovered  that 
IT  does  not  want  a  rip-and- 
reptace  approach  to  products 
supporting  the  business  im¬ 
pact  of  IT,"  Grieser  said. 

CA.  HP  and  IBM's  Tivoli 
Software  unit  have  launched 
technology  initiatives  similar 
to  BSM,  but  Grieser  said  BMC 
has  moved  more  quickly  to 
flesh  out  its  offering  than  its 
competitors  have.  ‘BSM  is  a 
real  thing  and  not  a  marketing 
position,"  he  said.  O  50096 
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Intel  Shelves  Plans 
For  4-GHz  Pentium 

intei  Cofp.  ssid  M  no  longer  plans 
lo  release  a  4-OHz  verstoo  o(  its 
Pentium  4  processor,  having  de* 
cided  instead  to  realign  Its  er>gi- 
neers  around  new  priorities  such 
as  the  deveiopment  of  mufUcore 
chips.  The  4*6H2  Pentium  4  orig¬ 
inally  was  due  by  year's  end  but 
had  been  delayed  until  tlM  fbst 
quarter  of  200S.  bitd  said  it  wil 
now  also  focus  more  on  steps 
such  as  cipanding  the  cache 
memory  buM  into  the  processors. 


Sun  Reports  Q1 
Loss  on  Char^ . . . 

Sun  liGcrosystems  Inc.  reported 
a  less  for  its  first  quarter,  which 
ended  SepL  26.  Sun  said  it  would 
heve  had  a  St3  million  profit  if  not 
for  inwtmant  leases  and  lestruc- 
turmg  and  lagal  charges.  Revenue 
was  up  4%  year  over  year  but  feM 
short  of  analysts' azpeetitions. 


...And  Ships  JDS 
Suite  for  Solaris 

Sun  has  released  a  version  of  its 
Java  Desktop  System  software 
for  the  Solaris  x86  operating  Sjfi- 
tern.  The  new  relsase.  wMch  sup¬ 
ports  Sun's  Opteron-based  work- 
statiertt.  is  the  first  version  of  the 
deektop  software  suite  to  run  on 
Solans  instead  of  SUSE  Linux. 

But  some  of  the  toaturas  that  are 
in  the  Linux  version  aren't  avail¬ 
able  in  the  first  Solaris  release. 


Short  Takes 


MICROSOFT  CORP  today  plans  to 
release  an  upgrade  of  Its  Navision 
businass  appllcatioas  that's  more 
tightly  intograted  with  products 
such  as  Excel  end  SQL  Server. 

. . .  ORACLE  CORP  unped  users  to 
apply  database  patches  M  issued 
in  August  saying  exploit  code 
has  been  posted  for  some  of 
thefiaws. 


IBM  Adds  64-Way  pSeries,  iSeries 


Targets  .serv  er  consolidation  as  PovverS 
achieves  high-end  performance  levels 


SV  PATRICK  THIBODEAU 

IBM  LAST  WEEK  complcied 
its  lineup  of  servers 
based  on  its  Power5  chips 
by  adding  high-end 
pScries  and  iSeries  models 
that  can  support  up  to  64 
processors,  double  the  previ¬ 
ous  threshold  for  CPUs. 

The  systems  are  priced  fn>m 
$451,000  for  an  eight-way  sys¬ 
tem  to  $4  million  for  a  system 
with  64  processors,  IBM  said. 

The  eServer  p5-590  and  p5- 
595  systems  can  run  either  Lin¬ 
ux  or  IBM's  AIX  version  of 
Unix.  IBM  said  that  when  a 
server  is  equipped  with  AIX 
53,  its  processors  can  be  split 
into  as  many  as  10  panitions 
that  can  each  run  a  copy  of  the 
operating  system  and  handle 
difTcrent  applications. 

Dan  Olds,  an  analyst  at 
Gabriel  Consuliir^  Group  Inc. 
in  Beaverton.  Ore.,  said  the 
key  advantage  of  the  p5  sys¬ 
tems  for  large  IT  shops  is  their 
virtualization  management  ca¬ 
pabilities.  “Now  you’re  talking 
about  a  large  Unix  server  that 
is  a  heck  of  a  lot  more  useful 
than  they  used  to  be,”  he  said. 

IBM’s  eServer  i5-595  system, 
the  newest  member  of  the 
iSeries  line  that  was  formerly 
known  as  the  A5/400,  runs  the 
t5  operating  system  that's  com¬ 
patible  with  OS/400  releases 
dating  back  to  1999.  The  i5  al.so 
runs  AIX.  Windows  and  Linux. 

Befler  App  Management 

An  early  >5  adopter,  Beverly 
Russell.  IT  director  at  E-D- 
Smith  &  Sons  Ltd.,  a  food 
products  manu^cturcr  in 
Winona,  Ontario,  is  using  a 
two-processor  system  to  run 
compulc-inicnsive  business 
intelligence  applications.  Rus¬ 
sell  noted  that  the  system’s 
virtualization  capabilities  can 
manage  application  resources 
at  the  microprocessor  level. 

In  one  instance,  the  t5  shift¬ 
ed  computing  resources  from 
one  partition  to  another  but 
carefully  managed  the  reallo¬ 


cation.  “never  taking  it  down 
to  the  minimum  where  the 
performance  will  be  Impact¬ 
ed."  Ru.s.sell  said.  TTie  Powers 
processors  also  boost  applica¬ 
tion  performance,  she  said. 

Clay  Ryder,  an  analyst  at 
The  Sageza  Group  Inc.  in 
Union  City,  Calif.,  said  boost¬ 
ing  the  iSeries  capacity  to  64 
processors  creates  "an  awful 
lot  of  horsepower”  for  a  sys¬ 
tem  that  has  long  been  aimed 
at  midsize  companies.  "It's 
kind  of  hard  to  not  think  about 
it  as  a  kind  of  a  miniframc." 
said  Ryder,  who  sees  the  i5 
systems  being  adopted  for 
setv’er  consolidations. 


Powers  Systems 


nwarS  Inng  In  fit  pSarin 
and  Bnrttoiyrtm.  There 
are  8  nunber  of  conliguations 

■  BHwfieonanuitoaal 
fispwwrbcblp  through 
2005.  The  company  says  cus¬ 
tomers  are  sti  rofing  out  these 


•  Tilt  pSariat  and  B«iH 
canbtaaidBdfcon  dwiand 

GapririHaa.  Customers  can 
have  the  procassors  on  hand 
and  tifn  them  on  -  and  pay  tor 
them-v^needad. 

■  HiaayalamawlaMp 
Nav.18. 


lean  Bozman,  an  analyst  at 
IDC,  said  IBM  is  bringing  out 
the  systems  at  a  time  when  IT 
managers  are  once  again  start¬ 
ing  to  buy  high-end  systems. 
Interest  in  low-cost  servers 
isn't  waning  at  all.  Bozman 
said.  But  she  added  that  many 
companies  are  interested  in 
improving  server  utilization 
by  consolidating  applications 
onto  larger  machines. 

IBM  officials  said  the  new 
systems  are  three  times  faster 
than  their  predecessors  in  the 
Regatta  line,  and  they  cost 
40%  less  than  the  Regatta 
products.  It  also  maintained 
that  the  new  systems  offer 
better  pricing  and  perfor¬ 
mance  than  rival  products  do. 
but  analysts  said  that's  a  race 
that  never  ends.  O  50109 


Business  Objects  Takes 
Next  Step  on  Bl  Integration 


BY  HEATHER  HAVEHSTEiN 

Business  Objects  SA  last  week 
began  shipping  a  beta  version 
of  a  business  intelligence  soft¬ 
ware  upgrade  that  expands  the 
ties  between  its  data  analysis 
tools  and  the  reporting  tech¬ 
nology  that  the  company  ac¬ 
quired  when  it  bought  Crystal 
Decisions  Inc. 

The  new  release,  called 
BusinessObjecis  II,  will  knit 
together  query  and  aruJysis, 
reporting,  business  scorecard- 
ing  and  executive  dashboard 

tools,  plus  underly-  _ 

ing  data  integra¬ 
tion  technology,  on 
a  single  software 
platform.  Lance 
Walter,  vice  presi¬ 
dent  of  product  - 

marketing  at  Business  Objects 
in  San  Jose,  said  general  avail¬ 
ability  Ls  expected  by  the  end 
of  the  year. 

In  func,  Busine.ss  Objects 
began  shipping  an  upgrade 
that  provided  front-end  inte¬ 
gration  between  its  software 
and  the  reponing  tools  devel¬ 
oped  by  Crystal  Decisions, 
which  it  acquired  laic  last 
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year.  The  fronl-cnd  links  in¬ 
clude  a  unified  software  portal 
and  common  Web  services  ap¬ 
plication  programming  inter¬ 
faces,  said  Wiiter,  who  added 
that  they  let  users  move  seam¬ 
lessly  between  Crystal-gener¬ 
ated  reports  and  analytical  ap¬ 
plications  built  around  Busi¬ 
ness  Objects’  tools. 

The  back-end  connections 
included  in  BusincssObjects  U 
will  provide  a  unified  infra¬ 
structure  for  integrating  data 
and  managing  metadata,  said 

_  IDC  analyst  Dan 

Vessel.  The  ability 
to  manage  the  vari¬ 
ous  basiness  intelli¬ 
gence  tools  as  a  sin¬ 
gle  platform  could 

-  help  users  lower  IT 

costs,  be  said.  "At  the  end  of 
the  day,  you  have  one  Bl  suite 
that  addresses  the  needs  of  a 
broad  range  of  users."  he  noted. 

Emergency  Medical  Associ¬ 
ates.  a  Livingston.  N.J.-bascd 
emctgency-room  staffing 
company,  uses  Business 
Objects'  Application  Founda¬ 
tion  framework  to  deliver 
electronic  patient  records 


that  are  stored  in  a  data  ware¬ 
house  to  end-user  dashboards. 
EMA,  which  added  Crystal's 
reporting  tools  to  its  business 
intelligence  infrastructure 
before  the  acquisition,  has 
.signed  on  to  t«ta-icst  Busi- 
nessObjccts  U. 

lonathan  Rothman.  EMA's 
director  of  data  management, 
said  he  currently  has  to  use 
data  extraction,  transforma¬ 
tion  and  loading  tools  to  move 
operational  data  into  the  data 
warehouse  and  connect  it  to 
the  company’s  Business  Ob¬ 
jects  applications.  With  Busi¬ 
ncssObjects  11.  he  said.  "FU  be 
able  to  take  the  Crystal  re¬ 
ports  themselves  and  just  put 
them  into  Application  Foun¬ 
dation  and  have  those  point  to 
the  operational  data  source." 

The  beta  release  keeps  Busi¬ 
ness  Objects  on  latgct  to  meet 
the  road  map  it  laid  out  in  Jan¬ 
uary  for  integrating  the  two 
product  lines,  said  Mike  Schiff. 
an  analyst  at  Current  Analysis 
Inc.  in  Sterling.  Va. 

Next  year.  Business  Objects 
plan.s  to  complete  the  integra¬ 
tion  process  by  releasing  Busi- 
nessObjccts  12.  a  new  suite 
that  company  officials  .said 
will  expand  the  functionality 
of  all  its  current  products. 
050112 
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Intel  Shelves  Plans 
For  4-GHz  Pentium 

InM  C«rp.  taU  R  no  longir  plira 
to  niMM  a  4-aHz  vmien  of  Mi 
PwtooB  4  pror—ir.  hwioQ  da- 
dMintoadtoraiignItoMth 
noon  aniHBd  MW  pftofMtoi  Mdi 
M  ttw  dowfapment  of  muittcon 

cMpt.  T1«  4-M  ftntfun  4  orir 

tolly  «M  4w  Mr  iwr^  oad  but 
had  boM  dto^f■d  will  too  lint 
MHrtor  of  2006.  bilaf  add  M  w« 
new  atoa  bcHi  non  an  atopa 
aucb  M  aipandtot  too  cacha 
noanry  buM  tato  too  toOMaaora. 


Sun  Reports  Ql 
LossonChar^... 

Sin  HenaiBtomB  toe.  mnrtod 
a  loM  for  Mi  Rm  quartar,  whkh 
aodad  Sapt  20.  Sin  aaU  R  wguU 
ban  had  a  SO  laMon  pnfR  tf  not 
far  tonalnnaf  loaan  and  raairvc' 
taring  and  logil  dnrpn.  Rannia 
ana  9  4%  yaar  onr  yoar  but  fal 


...And  Ships  JDS 
Suite  for  Solaris 

San  two  iifaaiad  a  nrden  of  Mi 
Jan  Daahtog  Syitora  aaftonn 
far  too  Sotoffa  i80  apindtog  ^ 
tom.  Tba  now  nfaaoa,  wfddi  aup- 
porti  San‘a  fhitorna  hind  worit- 
atotfana,  fa  too  flm  nraton  of  the 
daddop  aoltwara  ndto  to  nn  an 
Sofaffa  bnfaad  of  8USE  Unux. 
But  aemo  of  too  faatona  toat  are 
totooUnanretanaranlaMl' 
abto  to  too  fbit  Sataria  ratoaio. 


Short  Takes 

MICROSOFT  CORP.  today  ptea  to 
raiaan  an  apgrada  of  Ma  Wnfafen 
bmtnan  applealtoaB  toafi  more 
nmiy  naa^amo  wnn  preoucn 
wdi  aa  Eaif  and  SQL  Samr. 

...  OMCLE  CORP.  urged  mare  to 
apply  ddiMan  patohn  R  fannd 
to  liignaL  aaytog  aplait  eada 
tnabaanpBitodfaraewaef 


IBM  Adds  64-Way  pSeries,  iSeries 


Tarots  server  consolidation  as  PowerS 
achieves  high-end  performance  levels 


sv  pathick  thisoobau 

IBM  LAST  WEEK  Completed 
its  lineup  of  servers 
based  on  its  Powers  chips 
by  adding  hi^*end 
pSeries  and  iSeries  models 
that  can  support  up  to  64 
processors,  double  the  previ¬ 
ous  threshold  for  CPUs. 

The  systems  are  priced  from 
$451,000  for  an  eight-way  sys¬ 
tem  to  $4  million  for  a  system 
with  64  processors.  IBM  said. 

The  eServcr  p5-590  and  p5- 
595  systems  can  run  diher  Lin¬ 
ux  or  IBM’s  ADC  version  o( 
Unix.  IBM  said  that  when  a 
server  is  equipped  with  ADC 
S3,  its  processors  can  be  spUi 
into  as  many  as  10  partitions 
that  can  each  run  a  copy  of  the 
operating  system  and  handle 
different  applications. 

Dan  Olds,  an  analyst  at 
Gabriel  Consulting  Group  Inc. 
in  Beavenon.  Ore.,  said  tbe 
key  advantage  of  the  pS  sys¬ 
tems  for  large  IT  shops  is  their 
virtualization  management  ca¬ 
pabilities.  ’Tfow  you're  talking 
about  a  large  Unix  server  that 
is  a  heck  of  a  lot  more  useful 
than  they  used  to  be.**  be  said. 

IBM's  eServer  i5-S95  system, 
the  newest  member  of  tte 
iSeries  line  that  was  formerly 
known  as  the  AS/400,  runs  the 
i5  operadng  system  that’s  com¬ 
patible  with  OS400  releases 
dating  back  to  1999.  The  iS  also 
runs  ADC  Windows  and  Uiwit 

Better  Aw  Management 

An  early  ^  adopter,  Beverly 
Russell.  IT  dirmof  at  ED. 
Smith  &  Sons  LtcL.  a  food 
products  manufacturer  in 
Winona,  Ontario,  is  using  a 
two-processor  system  to  run 
compute-iolenstvc  business 
intelligence  applications.  Rus¬ 
sell  noted  that  tbe  system's 
virtualization  capabilities  can 
manage  application  resources 
at  the  microprocessor  level 
In  one  instance,  the  15  shift¬ 
ed  computing  resources  from 
one  partition  to  another  but 
carefully  managed  tbe  reallo¬ 


cation.  “never  taking  it  down 
to  the  fninimum  where  the 
performance  will  be  impact¬ 
ed.*’  Russell  said.  The  Powers 
processors  also  boost  applica¬ 
tion  performance,  she  said. 

Clay  Ryder,  an  analyst  at 
The  Sageza  Group  Inc.  tn 
Union  City,  Califs  said  boost¬ 
ing  the  iSeries  capacity  to  64 
processors  creates  “an  awful 
lot  of  horsepower'’  for  a  sys¬ 
tem  that  has  long  been  aimed 
at  midsize  companies.  “It's 
kind  of  hard  to  not  think  about 
it  as  a  kind  of  a  minifaame." 
said  Ityder.  who  secs  the  15 
systems  being  adopted  for 
server  coDsolidation.s. 


lean  Bozman.  an  analyst  at 
IDC,  said  IBM  is  bringing  out 
tbe  systems  at  a  time  when  IT 
managers  are  once  again  start¬ 
ing  to  buy  high-end  systems. 
Interest  in  low-cost  servers 
isn't  waning  at  alL  Bozman 
said.  But  she  added  that  many 
companies  are  interested  in 
improving  server  utilization 
by  consolidating  applications 
onto  larger  machines. 

IBM  officials  said  tbe  new 
systems  are  three  times  faster 
than  their  predecessors  in  tbe 
Regatta  line,  and  they  cost 
40%  less  than  tbe  Regatta 
products.  It  also  maintained 
that  the  new  systems  offer 
better  pricing  and  perfor¬ 
mance  than  rival  products  do. 
but  analysts  said  that's  a  race 
that  never  ends.  Ck  SOlOB 


Business  Objects  Takes 
Next  Step  on  Bl  Integration 


BY  HeATMKR  HAVERSTEIN 

Business  Objects  SA  last  week 
began  shipping  a  beta  version 
of  a  business  intelligence  soft¬ 
ware  upgrade  that  expands  the 
ties  between  its  data  analysis 
tools  and  the  reporting  te^- 
ooiogy  that  the  company  ac¬ 
quired  when  h  bou^t  Crystal 
Decisions  Inc 

The  new  release,  called 
BusinessObjects  U,  will  knit 
together  query  and  analysb, 
reporting,  business  scorecard- 
ing  and  executive  dashboard 
toob,  plus  luiderly-  _____ 
ing  data  integra¬ 
tion  technology,  on 
a  single  software 
platform.  Lance 
Walter,  vice  presi¬ 
dent  of  product 
marketing  at  Business  Objects 
in  San  lose,  said  general  avail¬ 
ability  is  expected  by  the  end 
of  the  year. 

In  June,  Business  Objects 
began  shipping  an  upgrade 
that  provided  front-end  inte¬ 
gration  between  its  software 
and  tbe  reporting  toob  devel¬ 
oped  by  Crystal  Dedsions. 
which  it  acquired  late  last 
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year  The  front-end  links  In- 
chide  a  unified  software  portal 
and  common  Web  services  ap¬ 
plication  pn^ramming  inter¬ 
faces,  said  Walter,  who  added 
that  they  let  users  move  seam¬ 
lessly  between  Crystal-gener¬ 
ated  reports  and  analytical  ap¬ 
plications  built  around  Busi¬ 
ness  Objects'  tools. 

The  back-end  connections 
included  in  BusinessObjects  U 
will  provide  a  unified  infra¬ 
structure  for  integrating  data 
and  managing  metadata,  «aid 

_  IDC  analyst  Dan 

Vesset  TTie  ability 
to  manage  the  vari¬ 
ous  business  intelli¬ 
gence  toob  as  a  sin¬ 
gle  platform  could 
help  users  lower  IT 
costs,  he  sakL  “At  the  end  of 
the  day.  you  have  one  BI  suite 
that  addresses  the  needs  of  a 
broad  range  of  users,”  be  noted. 

Emergency  Medical  Associ¬ 
ates.  a  Livingstoa  Hl-baited 
emergency-room  staffing 
company,  uses  Business 
Objects'  Application  Founda¬ 
tion  framework  to  deliver 
electronic  patient  records 


(hat  are  stored  in  a  data  ware¬ 
house  to  end-user  dashboards. 
EMA,  which  added  Crystal’s 
reporting  toob  to  its  business 
intelligence  infrastructure 
before  the  acqubition,  has 
signed  on  to  beta-test  Busi¬ 
nessObjects  U. 

Jonathan  Rothman,  EMAIs 
director  of  data  management, 
said  he  currently  has  to  use 
data  extraction,  transforma¬ 
tion  and  loading  toob  to  move 
operational  data  into  tbe  data 
warehouse  and  connect  it  to 
the  company's  Business  Ob¬ 
jects  applications.  With  Busi¬ 
nessObjects  IL  be  said.  “HI  be 
able  to  take  tbe  Crystal  re¬ 
ports  themselves  and  just  put 
them  into  Application  Foun¬ 
dation  and  tmve  those  point  to 
the  operational  data  source.” 

Tbe  beta  release  keeps  Busi¬ 
ness  Ol^ects  cm  target  to  meet 
tbe  road  map  it  laid  out  in  Jan¬ 
uary  for  ini^rating  the  two 
product  lines,  said  Mike  Schiff. 
an  analyst  at  Current  Analysb 
Inc.  in  Steriing.  Va. 

Next  year.  Business  Objects 
plans  to  complete  tbe  integra¬ 
tion  process  by  releasing  Busi¬ 
nessObjects  12.  a  new  suite 
that  company  officials  said 
will  expand  the  ftinctionaliry 
of  all  its  current  products. 
050112 


Comktor  the  dels  eonneetid.  ^  combining  networking,  Internet  and  long  distance 
services  into  a  single  turnkey  solution,  we’re  helping  one  of  the  laigest  healthcare 
providers  in  Texas  stay  connected.  Iitove  large  anxxmts  of  critical  data  quickiy  and 
reliably.  Adapt  to  long-term  growth  efficiently.  And  save  money  along  the  way  -  more 
ttian  Si  million  over  the  next  ttiree  years.  Find  out  more  about  how  we're  helping 
Daybre^  Venture  connect  the  dots  at  sbc.corn/dots.  G0M6  BEYOND  THE  CALI! 
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LA  Finds  PeopleSoft  Better 
The  Second  Time  Around 


City  applies  lessons  learned  from  a 
disastrous  past  supply  chain  project 


The  second  major 

rollout  of  PeopleSoft 
loc  solhvare  by  the 
city  government 
here  is  proving  fu  less  trou¬ 
blesome  than  the  first  People- 
Soft  rollout  four  years  ago, 
when  an  implementation  was 
bogged  down  with  internal  re¬ 
sistance  arui  inadequate  train¬ 
ing.  among  other  problems. 

This  time,  said  city  officials, 
end  users  have  been  convinced 
that  the  supply  chain  software 
coming  in  wiH  make  life  better 
for  them.  Installation  of  Peo- 
pleSoft’s  Entetprise  6.8  e-pro- 
curement  and  strategic  suppli¬ 
er  software  is  slated  to  be  com¬ 
pleted  in  February.  The  new 
version  promises  significant 
changes  for  users,  since  the 


city  government  will  be  able  to 
handle  supplier  transactions 
directly  over  the  Internet. 

“Change  is  a  loc  easier  when 
people  trust  that  you  are  not 
doing  anything  that  will  hurt 
them."  said  Robert  Jensen,  as¬ 
sistant  general  manager  in  the 
Los  Angeles  municipal  gov¬ 
ernment's  Department  of  Gen¬ 
eral  Services.  Jensen  and 
members  of  his  staff  spoke 
with  Computerworld  l^t  week 
to  detail  the  implementation 
axKl  describe  bow  officials 
avoided  the  problems  caused 
by  the  2001  installation. 

lensen  said  his  department, 
the  project  sponsor,  learned  the 
hard  way  that  h  makes  a  differ¬ 
ence  when  users  “know  that 
you  are  looking  out  for  them 
and  trying  to  make  their  woric 
easier  and  more  manageable.” 


Even  the  tone  is  different 
this  time  around:  Meetings 
held  with  department  heads 
are  now  "well  received,"  he 
sakL  It  was  quite  different  a 
few  years  ago.  when  a  number 
of  users  were  hostile  to  an 
Sll  millkm  ifeopleSoft  supply 
chain  management  software 


iJl 


implementation  [QuickLink 
2045SJ  that  chan^  the  au¬ 
thority  and  re^DSibilities  of 
many  city  workers.  "We  all 
shared  the  pain.”  Jensen  said. 

Using  the  direct-connect 
methodology  in  Version  8.8, 
buyers  wilL  for  example,  be 
able  to  go  directly  to  the  Of¬ 
fice  Depot  Web  site,  grab  in¬ 
ventory  data  and  use  it  to  pop¬ 
ulate  the  dry’s  own  purchase- 
order  documents  otdinc. 

About  35%  of  the  dry's  pro¬ 
curement  will  be  automated  in 
that  way,  reducing  the  amount 
of  manual  data  entry  needed 
and  strcamlming  the  process. 
Jensen  said. 

The  new  software  will  also 
help  reduce  the  number  orbig- 
ticket  items  the  dty  has  on 
hand,  such  as  computers  and 
related  equipment  Rather  than 
warehouse  those  items,  the  dty 
can  ensure  that  its  vendors  will 
have  stock  nearby  and  thus  be 
able  to  deliver  it  the  next  day. 


PeopleSoft  Product  Exec 
Follows  CEO  Out  the  Door 


•V  MARC  L.  MNOMl 

Just  two  weeks  after  People- 
Soft  Inc  ousted  former  CEO 
Craig  Conway,  the  business 
applications  vendor  said  that 
another  top  executive  —  Ram 
Gupta,  who  had  been  execu¬ 
tive  vice  president  of  products 
and  lech^ogy  —  has  left  the 
comjpany. 

PeopleSoft  spokesman  Steve 
Swasey  last  week  confirmed 
Gupta's  exit  from 
the  company  but  de¬ 
clined  to  disclose 
any  details,  leaving 
it  unclear  whether 
Gupta  was  fired  or 
left  vohintarily.  "We 
don't  discuss  the  de> 
partore  of  employ¬ 
ees  and  personal 
employee  business," 

Swasey  said. 


Gupta  was  the  executive  in 
charge  of  integrating  People- 
Soft’s  applications  and  the 
software  developed  by  JJ). 
Edwards  &  Co,  which  People- 
Soft  acquired  last  year.  In  an 
interview  with  Computerworld 
in  August.  Gupta  said  the 
merger  had  provided  J.IX  Ed¬ 
ward  users  with  more  prod¬ 
uct  choices  and  better  techni¬ 
cal  support  offings  [Quick- 
Link  48964]. 

But  many  J.D. 
Edwards  users  have 
said  that  life  under 
PeopIeSoft's  owner¬ 
ship  has  been  a 
mixed  bag  and  that 
they  remain  uncon¬ 
vinced  about  the 
benefits  of  the  ac¬ 
quisition.  And  dur¬ 
ing  his  keynote 


speech  at  PeopIeSoft’s  Con¬ 
nect  2004  user  conference  the 
week  before  be  was  fired. 
Conway  acknowledged  that 
the  company  had  made  well- 
intentioned  errors  while  try¬ 
ing  to  implement  some  of  Us 
software  licensing  and  up¬ 
grade  policies  with  the  J.D. 
Edwarxls  user  base. 

PeopIeSoft's  board  removed 
Conway  fttnn  his  position  as 
president  and  CEO  on  Oct.  1. 
saying  that  h  bad  lost  confi¬ 
dence  in  his  ^Uiry  to  lead  the 
company.  Co-founder  Dave 
Duffield.  who  had  ^ven  up  the 
CEO  job  to  Conway  In  1999, 
was  brought  back  to  run  the 
software  vendor. 

Stan  Swetc,  who  worked  as 
an  executive  at  PeopleSoft  be¬ 
tween  1992  and  2002  and  was 
one  of  the  principal  architects 
of  its  flagship  PeopleSoft  8 
product  line,  was  hired  to 
replace  Gupta,  according  to 
Swasey.  He  said  Swete’s  re¬ 
turn  to  the  company  demon¬ 


strates  Duffieid's  commitment 
“to  re-energize  PeopIeSoft's 
innovation  and  technology 
development." 

John  Moore,  an  analyst  at 
ARC  Advisory  Group  Inc  in 
Dedham.  Mass.,  said  Gupta’s 
departure  was  more  a  matter 
of  when  than  if  following 
Duffieid’s  return  and  the  ap¬ 
pointment  of  PeopleSoft  bwd 
member  Aneel  Bhosri  as  vice 
chairman  with  responsibility 
for  the  company's  product  and 
technology  strategy. 

An  open  question  is  wrhetber 
an  18-month-old  initiative  for 
simplifying  installation  and 
management  of  PeopIeSoft's 
applications  will  now  fade 
away,  Moore  said.  Conway  and 
Gupta  had  championed  t^ 
Tot^  Ownership  Experience 
initiative.  The  sunpUncatioo 
strategy  was  well  received  by 
users.  Moore  said,  but  he 
added  that  as  a  way  of  gaining 
new  business  for  i^pleSoft. 

"U  feU  flat”  O  SOfOO 


In  addition,  strategic  sourcing 
software  will  allow  the  general 
services  department  to  pull  in 
vendor  solicitations  from  all 
over  the  Web  and  get  the  best 
discounts. 

Yet  those  changes  haven’t 
caused  a  rep>eai  of  the  morale 
woes  of  2001. 

In  an  effort  to  ensiue  proj¬ 
ect  success,  the  general  ser¬ 
vices  department  will  spend 
money  upfront  for  change 
management  to  make  sure 
changes  are  communicated  to 
city  personnel  and  adequate 
training  on  the  new  system  is 
provided  prior  to  the  rollout 

Hafd  Lesson 

Officials  said  that  communica¬ 
tion  strategy  results  from  a 
hard  lesson  learned  from  the 
initial  rollout  —  good  change 
management  requires  a  plan 
that  identifies  anyone  on  the 
city  workforce  whose  role  can 
change  because  of  the  new 
sofrvrare. 

The  plan  needs  to  identify 
champions,  owners,  stake- 
holdm  and  users  and  what 
and  when  you  will  communi¬ 
cate  with  them  and  the  media 
used  for  that  communication.” 
Jensen  explained.  The  other 
part  is  how  to  sclf-motivate 
these  folks  to  want  to  spread 
the  word  that  the  change  is 
good  and  should  be  supported." 

There  wasn't  adequate  plan¬ 
ning  in  2000,  Jensen  said,  and  a 
lack  of  communication  with 
dty  personnel  caused  signifi¬ 
cant  resistance  from  users,  par¬ 
ticularly  in  those  departments 
where  the  PeopleSoft  applica¬ 
tions  caused  employees  to  lose 
application  support,  personnel 
and  buying  uit^rity. 

“We  weren’t  popular,”  Jen¬ 
sen  said.  “Change  is  bard,  so 
the  police  and  Are  and  sanita¬ 
tion  departments  were  leading 
the  charge  to  go  bock  to  the 
thrilling  days  of  yesteryear." 

It  took  almost  four  years, 
Jensen  said,  but  the  planning 
effort  for  the  latest  implemen¬ 
tation  has  encountered  little 
resistance  so  fv.  OS0106 


FIMASIFIWUEIESS 

Jen«i  expbns  how  LA  was  aUe  to 
cowert  user  TOBtmce  nio  sjooort 
^(MeUM  90107 


"For  midsized  and  large  organizations,  a  significant 
Linux  deployment  will  neither  be  free  nor  easily 
accomplished.  In  fact,  respondents  at  large 
organizations  reported  that  a  wholesale  switch  to 
Linux  from  Windows*  or  Unix  would  significantly 
increase  TCO  for  the  forseeable  future." 

-Laura  DiDio,  The  Yankee  Group,  April 2004 
Linux,  Unix,  and  Windows  TCO  Comparison 


The  Yankee  Group,  a  global  research  and  consulting  firm,  concluded 
that  a  significant  switch  to  Linux  from  Windows  or  Unix  could  cost  three 
to  four  times  as  much  without  delivering  tangibly  better  performance  or 
business  value.  These  findings  are  based  on  a  non*sponsored  worldwide 
survey  of  1,000  IT  administrators  and  C-level  executives  in  midsized 
and  large  enterprises. 

To  get  the  full  study,  visit  microsoft.com/getthefacts 


Windows 
Server  S^temr 


O  2004  Microsoft  CorporMion.  AH  rights  reserved.  Microsoft.  Windows,  the  Wiftdows  logo,  end  Windows  Server  System  are  either  registered  trademarks  or  trademarks  of  Microsoft 
Corporation  in  the  United  States  and/or  other  countries.  The  names  of  actual  companies  attd  products  mentioned  herein  may  be  the  trademarks  of  their  respective  owners. 


HOW  CLOSE  ARE  YOU  TO  THE 
NEXT  GENERATION  OF  NETWORKING? 

THE  ANSWER  IS  JUST  BENEATH  THE  SURFACE 

Within  your  desktops,  notebooks,  switches  and  sereers  are  chips  enabling  your  business  to  operate  in  real  time,  delivering  Gigabit 
speed  both  reliably  and  securely.  When  the  top  10  computer  and  networking  equipment  brands  need  urrsurpassed  performarxte, 
they  turn  to  us.'  Broadcom*  chips  are  two  to  three  times  faster  than  the  closest  competitor's  in  delivenng  netvrork  throughput  on 
your  demanding  applications.^  Whether  you’re  wired  or  wireless,  networtring  hardware  built  wfith  Broadcom  technology  ensures 
the  devices  you  use  today-as  well  as  those  you  add  tomomjw-will  connect  easily  and  seamlessly  across  air,  fiber  and  copper. 


Learn  how  building  upon  Broadcom*  chips 
and-to-and  can  pnavida  you  with  faster  network 
performance.  Download  the  latest  update  of  our 
e-book.  'Architecting  Next-Generation  Networks.* 
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Kumar  Launches  IT  Investment  Rrm 


BT  BCABLETT  PMUITT 
CANNES.  FRANCE 

Saniay  Kumar,  the  former 
chairman  and  CEO  of  Coro* 
puter  Associates  Internationa! 
Inc^  made  a  surprise  appear¬ 
ance  at  the  ETRE  2004  confer¬ 
ence  here  last  Monday,  three 
weeks  afier  he  was 
indicted  in  U.S.  Ois* 
iriet  Court  for  secu¬ 
rities  fraud  and  ob* 
struaion  of  justice. 

Kumar,  who  is 
charged  with  taking 
part  in  a  fraudulent 
accounting  scheme 
at  CA  during  1999 
and  2000,  wasn’t  list¬ 
ed  as  a  speaker  on 
the  conference’s  pre¬ 


liminary  agenda.  He  didn’t 
comment  directly  about  his  in¬ 
dictment.  but  he  described  his 
departure  from  CA  in  June  af¬ 
ter  17  years  with  the  software 
vendor  as  the  start  of  a  new 
chapter  in  his  life. 

“TTierc  are  still  tremendous¬ 
ly  exciting  things  to 
do,”  Kumar  told  the 
audience  of  IT  in¬ 
dustry  executives 
and  venture  capital¬ 
ists.  “fm  focused  on 
building  new  tech¬ 
nology  companies 
today."  He  said  he 
hopes  to  mentor 
start-ups,  adding 
that  emeiging  tech¬ 
nologies  such  as 


voice-ovcr-lP  telephony  are 
creating  marketing  opportuni¬ 
ties  for  vendors. 

In  a  follow-up  interview. 
Kumar  said  he  attended  the 
ETRE  conference  to  network 
and  to  hum  for  companies  to 
invest  in.  He  said  that  after 
leaving  CA.  he  took  a  vacation, 
thought  about  what  he  wanted 
to  do  and  decided  to  launch  a 
technology  Investment  firm.  “I 
think  it's  a  really  good  way  to 
give  back  to  the  industry  and 
create  Jobs,”  Kumar  said. 

Advice  “On  DemaiHf 

OnOemand  Partners  LLC, 
which  he  started  two  months 
ago  with  a  group  of  other  IT 
veterans,  offers  advice,  money 


and  development  support  to 
stan-ups.  Kumar  said  that 
because  of  his  background 
in  enterprise  software  and 
his  endorsement  of  subscrip¬ 
tion-based  pricing  approach¬ 
es.  he  is  focusing  on  those 
two  areas. 

The  Locust  Valley,  N.Y.- 
based  firm's  name  is  a  play  on 
words  that  refers  to  both  on- 
demand  computing  and  the 
way  in  which  the  company’s 
partners  will  step  in  to  help 
companies  “on  demand,"  Ku¬ 
mar  said.  OnDemand  Partners 
currently  is  working  with  14 
vendors  and  is  on  the  lookout 
for  more,  he  added. 

Kumar  was  indicted  last 
month  by  a  federal  grand  jury 
in  Brooklyn,  N.Y..  for  allegedly 
participating  in  an  accounting 
scheme  at  CA.  Prosecutors 


charged  that  CA  adopted  a  so- 
called  35-day  month  account¬ 
ing  policy,  under  which  some 
sales  contracts  that  were 
signed  after  a  fiscal  quarter 
had  ended  were  backdated  so 
that  they  appeared  to  have 
been  completed  during  the 
quarter  K^ckLink  496471. 

Stephen  Richards,  CA's  for¬ 
mer  head  of  worldwide  sales, 
was  also  indicted.  Both  Kumar 
and  Richards  pleaded  not 
guilty.  Their  indictments 
were  announced  on  the  same 
day  that  CA  agreed  to  pay 
S225  million  to  reimburse 
shareholders  for  the  alleged 
fraud  as  part  of  a  settlement 
deal  with  the  U3.  Department 
of  Justice.  O  500B6 


Pruitt  is  a  reporter  far  the 
IDC  Newsservice. 
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Continued  from  page  1 

Sarfe-Ox 

Todd  Naughton,  vice  presi¬ 
dent  and  controller  at  Z^ra 
Ibchnologies  Corp^  said  the 
Vernon  Hills.  lU. -based  sup¬ 
plier  of  printer  components 
"really  just  started  looking"  at 
general  IT  controls  within  the 
past  three  months. 

For  the  past  year.  Zebra  has 
focused  on  documenting,  re¬ 
mediating  and  testing  appUca- 
tion-levei  controls  throughout 
the  organization,  indudii^ 
moping  defined  job  roles  to 
the  system  access  levels  they 
require,  said  Richard  Jaszka, 
the  company's  internal  audit 
manager 

“That  said,  we're  concerned 
about  our  ability  to  meet  the 
Section  404  requirements  of 


fkJDiiiriMMiBiivBfc 


Sarbanes-Oxley  for  the  other 
IT  controls.”  Jaszka.  For 
example,  altboi^  Zebra  has 
documented  policies  for  key 
areas  such  as  change  manage¬ 
ment.  systems  development 
and  mission-critical  computer 
operations,  “it  will  be  a  chal¬ 
lenge  to  properly  test  these 
controls  and  address  any  nec¬ 
essary  remedies  by  year-end." 
Jaszka  said. 

He  added  that  regulators 
haven't  specified  which  IT 
controls  need  to  be  document¬ 
ed  and  tested. 

CampCance  Gap 

Stan  Lepeak.  an  analyst  at 
Meta  Group  Inc.,  said  he 
wouldn't  be  surprised  if  25% 
of  accelerated  filers  are  found 
to  have  inadequate  controls. 
He  based  his  estimate  on  sev¬ 
eral  factors,  including  discus¬ 
sions  with  clients,  Sarbanes- 
Oxley  readiness  surveys  con¬ 
ducted  with  client  firms,  and 
concerns  expressed  by  cus¬ 
tomers  who  outsource  IT  that 
service  providers  won't  be 
able  to  docustent  the  IT  con¬ 
trols  in  time. 

“It  really  depends  on  how 
strict  external  auditors  will  be 
in  determining  what  are  mate¬ 
rial  weaknesses  or  deficien¬ 
cies  in  controls  and  what 
arenX''said  Lepeak. 

Herman  Miller  Inc.,  a  Zee- 
land.  Mich. -based  maker  of 


I  office  furniture,  decided  this 
I  past  spring  to  adopt  a  set  of 
I  guidelines  for  evaluating  IT 
controls  called  Control  Objec¬ 
tives  for  Information  and  Re¬ 
lated  Technologies,  or  Cobit, 
created  by  the  IT  Governance 
Institute  and  the  Information 
Systems  Audit  and  Control 
Association,  both  of  which  are 
based  In  Rolling  Meadows,  III, 
said  Rich  Russell,  director  of 
application  development 

“Vi/e  worked  with  our  audi¬ 
tors  to  determine  which  of  the 
Cobit  processes  were  in  scope 
for  [Section]  404  and  then  we 
focused  on  those,"  said  Rus- 
seU.  whose  company  has  until 
May  31. 2005.  to  attest  to  its  IT 
and  financial  controls. 

Wyndham  International  Inc. 
has  been  working  with  several 
consulting  firms  since  last 
year  to  document  its  IT  con¬ 
trols,  said  Mark  Hedley.  senior 
vice  president  and  chief  tech¬ 
nology  officer  at  the  Dallas- 
based  hotel  chain. 

As  a  result,  Wyndham  “has 
very  high  confidence  in  our  IT 
key  internal  controls  that  will 
receive  the  scrutiny  of  our 
Sarbanes  audit  team.*  he  said. 
CISOOBS 
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Later  Timelable  Gives  Some 
Filers  More  Wiggle  Room 
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free  Case  Study 

Receive  a  FflE  thinl-iHity  case  study 
on  the  benefits  of  tafi^tniXore' 
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How  to  Contact  APC 


Introducing  data  centers  on  demand 

New  architecture  supports  power  densities  of  today...  and  tomorrow 


Dillard’s  department  stores  found  a  real  bargain. 
Xerox  assessed  and  streamlined  their  eompany-wide  work 
proeesses  and  printing  needs,  saving  them  $1.6  million. 
There’s  a  new  way  to  look  at  it. 
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Oracle  Exec  Defends  Pricing 
Pdlicy  on  Multicore  Systems 


BY  THOfelAS  HOfFMAN 

The  developmeru  of  servers  based  on 
muUicore  processors,  in  which  two  or 
more  CPUs  are  placed  on  a  chip,  has 
raised  concerns  among  some  IT  man¬ 
agers  that  the  new  technology  will  result 
in  significant  software  cost  increases 
iQuickLink  49648].  JacqueAne  Woods, 
vice  presidera  of  global  licensing  and 
pridng  strategy  at  Oracle  Corp..  dis¬ 
cussed  the  company’s  multicore  pricirig 
plans  with  Computerworld  this  month. 


What  is  Oradt's  position  on  soft* 
war*  Kcomlne  for  duat-cors  proc- 
ast  ofs?  We  don’t  have  a  posi¬ 
tion  with  respect  to  dual-core 
processors.  A  core  is  equal  to  a 
CPU.  and  all  cores  are  reqtured 
to  be  licensed.  Therefore,  you 
are  required  to  have  two  proc¬ 
essor  licenses. 


Dots  this  faproaont  a  chanpa  in  Oracle's 
Acansbig  poliqr?  We  have  not  changed. 
We  have  not  increased  our  prices.  At 
the  end  of  the  day.  the  consumption  of 
the  Oracle  software  is  unchanged. 

Has  multicors  sarvar  software  pricing  be¬ 
come  a  eontantious  bsiii  betwaen  Grade 
and  your  cuetomars?  Not  at  aU.  IBM 
does  not  sell  any  single-core  CPU  ma¬ 
chines.  All  of  their  machines  are  dual¬ 
core  and  have  been  for  some  time.  It's 
particularly  interesting  that  a  hardware 
vendor  that  I  won't  necessarily  men¬ 
tion  who  came  out  with  a  [dual-core] 


UltraSparc  HI  chip  on  a  single  wafer 
should  try  to  change  the  way  the  soft¬ 
ware  is  licensed.  When  it  was  called 
into  question,  we  clearly  made  sure 
that  everyone  understands  that  a  core 
equals  a  processor. 

So  if  a  user  mom  from  a  single-procBssor 
server  to  a  two-way  server,  do  they  essen¬ 
tially  haw  to  pay  dotM  for  software  on  the 
newer  machine?  If  I  have  more  proces¬ 
sors.  do  I  pay  more  money?  Yes.  You 
have  to  pay  for  the  one  incremental 
processor  that  you  have  itot  li¬ 
censed.  If  you  ^d  a  four-way 
node  and  you  want  to  go  to  an 
eight-way,  you  need  more  incre¬ 
mental  processors.  Do  you  pay 
for  ei^t  processors?  Yes. 

SomeanalysIsandfTmanagersbe- 
leve  thd  ianie  eeftware  vendors  Hke 
Oracle  and  BU  are  taUng  advan¬ 
tage  of  multieore  systems  to  drive  higher 
revenues  foitowing  a  pertod  of  week  toch 
spendtog.  How  would  you  respond?  That’s 
not  an  accurate  statement  We  have 
had  this  policy  for  years.  We  had  it 
durii^  the  downturn,  and  we  have  it 
now.  It  hasn't  changed.  If  someone  li¬ 
censed  software  on  a  dual-core  ma¬ 
chine  durii^  the  downturn,  they  paid 
for  two  processors.  I  dcw’t  see  the  re¬ 
covery  of  the  economy  as  an  opportu¬ 
nity  to  leverage  die  advent  of  multi- 
core,  considering  this  had  been  the 
same  policy  when  the  economy  was 
worse  oft  than  it  is  now.  OS00S3 


Coding  Error  Shuts  Down  PayPal 


ev  TODD  n.  wEiee 

PayPal  Inc.'s  online  payment  Web  site 
slowly  returned  to  normal  operations 
last  week  after  an  unspecifi^  coding 
error  virtually  shut  down  the  site  for 
four  days. 

The  problms  began  on  Oct  8, 
when  a  toiled  routine  monthly  code 
update  wreaked  havoc  for  many  eBay 
users  who  couldn't  make  or  coUect 
payments.  The  PayPaLcom  Web  site  is 
owned  by  eBay  Inc. 

Sara  Bettencourt  a  spokeswoman  for 
San  Jose-based  PayPal  said  the  compa¬ 
ny  doesn't  know  bow  many  users  were 
affected.  After  PayPal  and  eBay  engi¬ 
neers  worked  around  the  clock  for 
days  early  last  week  fixing  the  prob¬ 
lem.  Bettencourt  said,  the  system  was 
allowing  “most  users  to  transact  with¬ 


out  incident.’'  She  wouldn't  disclose 
the  type  of  coding  error. 

PayPaLcom  has  about  SO  million 
user  accounts,  155  million  of  which 
are  active,  Bettencourt  said.  Account 
data  and  personal  information  weren't 
compromised,  according  to  PayPal 

A  Virginia-based  eBay  seilet,  who 
asked  that  his  name  not  be  used,  said 
he  wasn't  sure  whether  the  glitches 
with  PayPalxom  reduced  his  sales  over 
the  ti^ekend  of  the  failure.  But  be  not¬ 
ed  that  the  upgrade  problems  are  remi¬ 
niscent  of  ftustratiiig  incidents  be  has 
experienced  with  eBay  site  changes 
that  were  touted  as  “improvements.’’ 

“EBay  would  diange  formats  on  the 
site  and  had  the  same  problem*  with 
users  havii^  difficulty  logging  in  and 
making  purchases,  be  said.  O  50059 


Dillard’s  department  stores  hire  over  10,000  people  a 
year.  Storing  and  retriering  application,  training  and 
benefits  packets  had  become  costly.  So  Dillard’s  Iwiighi 
into  something  smart:  a  Xerox  Office  Document 
Assessment  (ODA). 

Xerox  examined  their  work  process  across  all 
14  Dillard’s  business  units  and  recommended  key 
improvements. 

First,  all  analog  copiers,  stand-alone  printers 
and  fax  machines  were  replaced  by  Xerox 
DocumentCentre^  multifunction  ^-sterns.  Then  Xerox 
DocuShare^  w'as  installed  on  Dillard’s  network. 

This  cross-platform  document  ^stem,  along  with  Xerox 
imaging  software,  digitized  key  business  processes. 

Now,  instead  of  storing  and  distributing  hard  copy 
documents  with  each  new  hire,  store  managers  go 
online  for  hiring  packets  and  print  forms  on  the  spot. 
No  paper  inventor)'.  No  outdated  information.  $1.6 
million  saved.  To  see  what  you  can  save,  call  us  or  visit 
our  website. 
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DON  TENNANT 


MICHAEL  GARTENBERG 


Expect  Nothing 


THERE'S  A  SCHOOL  OF  THOUGHT  that 
says  you  should  keep  people’s  expecta¬ 
tions  of  you  very  low.  That  way,  if  you 
ever  accomplish  anything  even  margin¬ 
ally  above  average,  they’ll  be  really  im¬ 
pressed.  Sun  Microsystems  and  Microsoft  probably 
would  have  done  us  all  a  favor  if  they’d  followed  that 
advice  last  April. 


As  you  may  recall,  that 
was  Sun  and  Micro¬ 
soft  proclaimed  that  they 
had  settled  all  their  dif¬ 
ferences  and  that  a  new 
era  of  cooperation  had 
dawned.  Ilte  quote  attrib¬ 
uted  by  Sun's  PR  machine 
to  CEO  Scott  McNealy, 
while  a  little  stilted,  con¬ 
veyed  a  collaborative  spir¬ 
it  that  was  ftiU  of  promise: 

This  agreement  will  be  of 
significant  benefit  to  both 
Sun  and  Microsoft  cus¬ 
tomers.  It  will  stimulate  new  products, 
delivering  great  new  choices  for  cus¬ 
tomers  who  want  to  combine  server 
products  from  multiple  vendors  and 
achieve  seamless  computing  in  a  het¬ 
erogeneous  computing  environment.” 

Now  that  we've  passed  the  six- 
month  mark.  I  thot^i  it  would  be 
worthwhile  to  find  out  exactly  bow 
those  customers  have  benefited 
the  Great  Pronouncement.  So  last 
week  I  asked  john  Loiacono,  executive 
vice  president  of  Sun’s  software  group, 
how  the  deal  had  changed  things. 

“Our  conversations  with  customers 
have  chai^^ed  pretty  dramatically,  in 
that  it  used  to  be  we  had  to  say  bad 
words  every  time  we  mentianed  Mi¬ 
crosoft.”  Loiacono  responded  The 
fact  is.  we  no  longer  have  to  do  that  be¬ 
cause  we’re  doing  a  lot  more  coopera¬ 
tive  worit  with  them  versus  what  we 
were  doing  previously.” 

Let  me  get  this  strai^t:  What  has 
changed  b  that  Sun  doesn’t  use  bad 
words  when  it  talks  about  Microsoft 
anymore.  WeU.  that’s  just  deti^fuL 
But  I  was  hoping  to  hear  something  a 
tad  more  related  to  what  users  have 
gained,  so  I  pressed  him  a  little.  Lob- 
cono’s  response:  Tou  will  see  from  us 


within  the  next  90  days  or 
so  that  we  will  not  just  be 
talkii^  about  generic  con¬ 
cepts,  but  actually  talking 
more  specifically  about 
things  we’re  doing  with  Mi¬ 
crosoft  and  actually  show¬ 
ing  some  examples  of  prog¬ 
ress  that  we’ve  made.” 

Ninety  days?  Interesting. 
McNealy  had  said  at  Java- 
One  in  June  that  the  com¬ 
panies  would  detail  their 
collaborative  work  during 
the  summer,  and  that  didn’t 
happen.  Then,  last  month,  Mark  Me- 
Cl^  vice  president  of  software  mar¬ 
keting  at  Sun.  said  there  would  be 
scHDc  sort  of  interoperability  an¬ 
nouncement  thb  month  [QuickLink 
49414J.  We  can  give  Sun  and  Microsoft 
the  benefit  of  the  doubt  and  presume 
that  will  still  happen  (Microsoft  may 
well  be  tbe  chief  fbot-dragger  here), 


although  Lobcono's  *^vithin  the  next 
90  days  or  so"  comment  Ust  week  sug¬ 
gested  that  anything  realty  substantive 
might  be  a  little  further  out. 

Unfortunately,  the  only  thing  we 
know  now  that  we  didn’t  know  in 
April  is  that  tbe  Sun-Microsoft  agree¬ 
ment  included  a  provbion  (kept  quiet 
by  both  companies  at  the  time)  under 
which  Microsoft  can  sue  users  and 
dbtributors  of  OpeoOfiRce,  tbe  open- 
source  office  suite  that  Sun  acquired 
from  a  firman  outfit  in  1999  and  re¬ 
leased  to  tbe  open-source  community 
the  foUowii^  year.  But  users  of  Star- 
Office.  Sun's  commercial  dbtribution 
of  OpenOfflce,  are  protected  against 
legal  Ibbility  [(^ckLink  49495].  That 
revebtioD  came  in  an  SEC  frling  on 
SepL  13.  and  it  seems  biriy  self-serving 
on  Sun's  part.  Anyone  who  was  think¬ 
ing  about  using  or  dbtributing  a  re¬ 
lease  of  OpenOffice  other  than  Star- 
Office  might  well  be  having  second 
thoughts.  So  much  for  community 
support. 

Then  again,  Sim  ^t  almost  S2  billion 
from  Microsoft  when  it  signed  that 
agreement  in  AprU,  so  it  had  a  lot  of  in¬ 
centive  to  be  as  agreeable  as  possible, 
regardless  of  the  impact  on  anyone  else. 
What  would  you  expect?  O  50065 


Unbelievable, 
Scary  Babble 
About  USB 

IT  SEEMS  THAT  every 
week,  I  open  the  paper  or 
click  on  a  URL  and  see  the 
same  story:  Someone  is  jump¬ 
ing  on  the  bandwagon  to  tell 
the  horror  tale  of  the  potentially  scary 
Universal  Serial  Bus  port.  They  talk 
about  the  security  threat  represented 
by  the  iPod  and  other  portable  medb 
pbyers  and  by  ubiquitous  USB  flash 
memory  devices.  The  riietoric  has 
reached  new  highs,  and  IT  depart¬ 
ments  are  being  told  to  ban  all  devices 
of  this  type  and  immediately  lock 
down  the  USB  ports 
on  all  machines. 

This  rhetoric 
amounts  to  another 
kind  of  USB:  -Unbe¬ 
lievable,  Scary  Bab¬ 
ble.”  Concerns  about 
the  security  of  re¬ 
movable  media 
aren't  new.  and  nei¬ 
ther  is  removable 
storage  itself.  Any 
IT  staffers  for  whom 
this  is  suddenly  an 
issue  must  have  en¬ 
tered  the  industry 
directly  from  tbe 
proverbial  turnip 
truck. 

Some  of  you  might 
even  remember 
when  all  PCs  came 
with  removable  stor¬ 
age  devices  called  floppy  disks.  And  at 
a  time  when  a  hard  disk  could  store  no 
more  than  20MB  and  files  tended  to  be 
a  lot  smaller  than  they  are  today,  a  per¬ 
son  could  carry  quite  a  lot  of  sensitive 
data  on  just  a  few  floppies.  Really,  this 
issue  dates  to  when  it  was  first  possi¬ 
ble  to  cheaply  copy  sensitive  docu¬ 
ments  on  a  Xerox  machine. 

Security  was  an  issue  then,  and  it's 
an  issue  now.  Scare  ihetoric  doesn’t 
help  anything;  it  just  gets  the  folks 
witii  the  scariest  ihetoric  some  head¬ 
lines.  My  lavorite  line  in  one  recent 
horror  tale  was  about  the  fear  that  in¬ 
fected  PDAs  syncing  to  a  corporate 
computer  could  pass  nefarious  code  on 
to  the  corporate  network.  Of  course, 
we  know  that  unless  tbe  PDA  b  run- 
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ning  the  same  operating  system  as  the 
syncing  computer,  it  won't  do  any 
harm  at  alL  (Well,  unless  the  PDA  was 
created  by  Jeff  Goldblum  —  you  know, 
the  guy  in  the  movie  Independence  Day 
who  somehow  sends  a  computer  virus 
from  his  PowerBook  to  the  aliens’ 
mother  ship  computer,  which  was  for¬ 
tunately  not  only  compatible  but  also 
apparently  insecure  and  buggy.  Per¬ 
haps  they  left  all  the  USB  ports  open.) 

What  you  need  to  do  is  balance 
users’  needs  with  security  concerns. 
The  benefits  that  users  derive  from 
carrying  relevant  portions  of  their 
desktops  on  portable  memory  devices 
are  simply  too  great  for  IT  depart¬ 
ments  to  ignore.  Your  response  should 
involve  safe  computing  policies,  educa¬ 
tion  and  clear  rules  on  what  can  be 
taken  ofF-site.  And  businesses  should 
set  policies  on  segregating  personal 
data  from  corpora^  machines.  IT  de¬ 
partments  must  make  sure  users  un¬ 
derstand  the  need  to  safeguard  sensi¬ 
tive  information,  whether  it's  in  digital 
format  or  on  paper. 

Legitimate  security  concerns  sur¬ 
round  removable  media,  including 
the  potential  for  corporate  data  theft 
and  virtis  attacks.  Sin^listk  responses 
tike  blaming  the  USB  port  or  flash 
memory  devices  aren’t  the  answer. 
“Lock  it  all  down  and  take  it  all  away“ 
isn't  a  new  philosophy,  and  it  has  failed 
rimp  and  again. 

Recognizing  and  accommodating 
user  needs  tal^  more  work,  but  in  the 
end.  the  results  are  worth  it  O  49096 


VIRGINIA  ROBBINS 

Self-service 
With  a  Smile 


Recently,  it’s  felt  as  if 
my  entire  life  has  been 
spent  in  airports.  The 
airline  I  take  most  often  is 
one  of  those  low-cost  peanut 
tossers  that  specializes  in  self- 
service.  After  Ic^^ng  over  80  flights  in 
the  past  yean  I  remain  a  fan  of  this  air¬ 
line.  It's  been  hist  about  a  year  since 
I’ve  had  to  interact  with  anyone  at  the 
entire  company  other  than  to  give  my 
drink  order  or  to  urish  someone  a  good 
day  as  1  deplaned.  It's  been  great 
Well,  except  for  the  time  I  arrived  an 
hour  after  my  fli^t  had  left.  The  next 
plane  to  OaUaod  was  scheduled  to 
leave  in  12  minutes;  the  one  after  that 
would  land  at  close  to  midnight  The 


oistomer  service  agent 
asked  me  if  I  was  willing  to 
nm  throu^  the  airport. 

Running  seemed  better 
than  missing  dinner,  so  after 
he  quickly  rebooked  me.  he 
grabbed  my  bag,  and  off  we 
went.  We  cleared  security 
in  record  time  by  using  the 
special  employee  line.  My 
gate  was  at  the  far  end  of 
the  terminal  (of  course). 

Once  we  passed  into  his 
airline's  area,  the  other  gate 
agents  started  cheering  him 
on:  “Go.  Bradley!  Bradley!”  He 
got  me  to  the  plane  with  three  minutes 
to  spare. 

As  the  door  closed  behind  me.  I  was 
neariy  out  of  breath  but  happy  at  the 
thought  that  I’d  be  home  for  dinner 

Exceeding  expectations  b  a  chal¬ 
lenge  in  today’s  automated  world  of 
self-service.  If  Bradley  hadn't  been 
overseeing  Che  self-service  kiosks,  my 
experience  on  this  trip  would  have 
been  very  diffemu. 

My  grocery  store  has  replaced  its 
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express  lanes  with  self- 
service  checkout  stations. 
The  ftrst  month  the  sta¬ 
tions  were  available,  only  a 
few  brave  shoppers  used 
them. 

The  first  time  I  tried  it, 
the  station  got  stuck  in 
some  infinite  loop,  and  1 
ended  up  grabbing  a  clerk 
to  help  me.  It  turned  out 
that  because  the  previous 
transaction  had  been  for 
beer,  the  station  needed 
to  know  whether  I  could 
legally  purchase  alcohol  before  it  could 
proceed.  I  don't  know  if  it's  a  good 
thing  or  a  bad  thing  that  Tm  clearly 
over  21,  but  the  clerk  entered  the  c^e. 
and  I  continued  scanning  my  groceries. 

A  few  weeks  later.  I  was  back  in  the 
store  and  saw  an  employee  station  lo¬ 
cated  in  the  middle  of  the  self-service 
area.  The  same  clerk  who  had  helped 
me  was  now  darting  among  the  sta¬ 
tions  helping  shoppers. 

1  also  noticed  that  a  lot  more  people 
were  using  self-service;  a  long  but 
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quickly  moving  line  had  formed  in 
front  of  the  four  stations. 

As  a  customer,  1  like  self-service;  it's 
faster  and  I’m  in  control  And  as  a  CIO. 
self-service  is  one  more  way  I  can  help 
my  company  reduce  expenses  by  using 
technology. 

But  the  reality  is  that  customers 
sometimes  need  someone  else  to  take 
control  At  some  point,  the  cost  of 
programming  for  each  ptossiblc  cus¬ 
tomer  interaction  ounveighs  (he  cost 
of  inserting  an  emplo>'ee  Into  the 
transaction.  Assuming  that  the  folks 
in  marketing  want  high  levels  of  cus¬ 
tomer  satisfaction,  creating  ways  for 
skilled  humans  to  intervene  is  re¬ 
quired. 

rd  like  to  hear  your  stories.  Send  me 
your  best  or  worst  experiences  with 
self-service,  cither  as  a  provider  or  as  a 
customer,  and  III  share  the  results  next 
month.  O  49979 
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Cefl  ENrectory  Not  Needed  -  or  Wanted 


ICOULOrr  ORSABIIEE  MORE 

wilh  the  column  WirMBSS  Worid 
Heeds  a  Direriory*  IQuddJnk 
49752].  I  Bee  that  my  number  isnl 
published  anywhere.  Uka  a  (gomng 
rumber  of  people.  Tve  abandotwd 
rny  iand-bne  phone.  I  choose  whom 
I  give  my  number  to.  I  appreciate 
that  m  one  can  just  look  up  rny 
number.  Should  ttis  change,  maybe 
lUswRtehloVoP 

LaaBower  | 

Systems  odministrotor. 
Or^tldd,Pa 

U  tftfMEUSS  WORLD  NEEDS 
W  a  Directory*?  As  was 
said  in  another  context.  This  is 
theworstldeatnlhetong.sadhis- 
tory  ot  bad  rieas.' There  is  loo 
muchdiaringofpersonatiniarma- 
bon.  n  publish  my  cell  phone 
number  when  every  telemarketer 
and  spammer  (remember,  cel 
phones  get  e-mail  too)  has  been 
etimmatedl 
MattRamlno 
Network  aebnimstrator, 
Cincinnati 


NO.  THE  WIRELESS  WORLD 
doesn't  need  a  (Wedory.  Wire¬ 
less  is  a  special  case  because  you 


pay  lor  sverylhirtg  -  incoming,  out¬ 
going,  text  voice,  etc.  Robert 
MiIcheB  should  use  his  soapbox  to 
lobby  tor  noixist  ricomtng  wveless 
calls  and  messages.  There  should 
be  no  cel  phone  dkectory.  Not  until 
TOone,nolevenchanbes.canteie- 
rnarkst.  flert  unll  incornna  cWls  and 
text  messages  are  hee  acroB  the 
board.  And  not  until  no  one  can 
done  your  cel  number  and  bi  their 
cals  to  H  because  you  answered 
something  that  looked  tainfar  and 
you  were  wrong. 

At  the  risk  of  being  ld)eled  a 
crank,  I  wl  speak  out  aganst  a  cel 
phone  directoiy  und  al  incomino 
minutes  on  aldwrdcBS  plans  are 
tree.  fes.  f  did  read  Jay  (^'s  en¬ 
tire  arlide  as  wefl  fCel  Phone  Di¬ 
rectory  Rings  True.*  QutcMjnk 
4904).  and  I  underst^  that  it  w0 
be  opHn  at  firet.  with  only  new  cus¬ 
tomers  haring  to  opt  ouL  But  how 
long  wi  It  be  before  companies 
start  chargmg  to  opt  out?  And  what 
corstrtutes  a  new  customer^ 

IhavebsBngojngnnrMh-to- 
month  with  my  earner  for  a  while 
now.  Today.  I  entered  into  a  con¬ 
tract  for  a  year  to  take  advantage  of 
a  deal.  The  provider  coild  argue 
dial  since  the  contract  6  new.  even 


dxxiQh  the  account  B  not.  4  con¬ 
strues  rtew  service. 

BJlCbuet 

Educorion  pnagrom  moniagfr'. 
Bolrimorr. 

ban^tousei;|iho(maiLconi 

Don't  Forget  Alpha 

Thanks  for  the  coverage  of  the 
VAX  and  VMS  commundy. 
eMd)  tends  to  be  qnored  th^ 
days,  and  tor  the  posiive  words 
WxMl  the  Allure  of  VMS  on  Sanum. 
Too  marry  people  iristakenly  thnk 
VMS  died  long  ago. 

But  fm  amend  thW  the  arheie 
pVAX  Users  See  the  Wntin(i  on  the 
Wal.*0uickLink47934]nevermen- 
uonedAlpha-ThepathofteastresB- 
tance  (and  least  expense)  for  rrxist 
VAX  users  has  been  to  retain  thee  ex- 
sung  software  and  nifyaie  ID  newer 
Alpha  hardware,  sti  rtmng  the 
VMS  operatmg  system,  bi  most  cas¬ 
es,  fl’s  been  *racompie.  reink  and 
go*  tor  thee  progtsms.  but  ff)  cases 
vdwffi  source  code  has  been  losl  the 
VEST  lAiity  6  used  to  convert  a  VAX 
binary  mage  to  an  Alpha  one 
Some  VAX  users  m^  choose  to 
move  straigfe  bom  VAX  to  ttmim. 
Mopping  Alpha  entiiely.  Bid  Iff*  stI 
develops  and  safe  Alpha  systems 
(and  wi  through  at  least  2006)  arxl 


w0  support  them  for  a  mnimum  of 
bve  years  after  last  sale,  whenever 
thstrxxxfs  For  most  VAX  users, 
rnwing  to  VWrdows.  Urw  or  Uru> 
involves  very  costly  code  rewrites  or 
wholesalereolacementotappbca’ 
tions.  and  they  lend  to  lind  that  those 
ptalfonns  don't  provide  the  stability. 
rWabiily.  hgh  awMabBty.  sacurily 
(there  are  no  vmses  on  VMS.  for  ex¬ 
ample),  low  system  admnsbWor 
worktoad  and  low  TCO  hat  they 
have  become  accustomed  to  wih 
VMS.  So  for  most  VAX  users  today. 
sbcfengwitiVMSandsmplyniov- 
■ig  to  ivewer  harihvere  (ffvAjdng  Al¬ 
pha}  B  the  lowest-cosi  lowest-effort 
and  laasi-nsky  option  to  consxler. 
KaRh  Parris 
CkitonidD  Springs 

(fOMPUTBtWORLO  welcornes 
comments  from  As  readers  Udieis 
wi  be  edited  for  brevdy  and  danly. 
They  shoUd  be  addressed  to 
JarriieEchift.lenersedlor.(}om- 
puterwortd.  PO  Box  9f7L  1  Speen 
Street,  rrarwngham.  Mass.  01701 
Fax  (506)  8794643.  E-mak 
leRei30corTeulefvimr1(Lcam. 
Indude  an  addrea  and  phone 
nAirWer  lor  mmedole  verAcabon. 

OfiarmariisimanihaBan) 
aR)arlGtiKS.ODto 
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Expect  Nothing 


THERE'S  A  SCHOOL  OF  THOUGHT  that 
says  you  should  keep  people’s  expecta¬ 
tions  of  you  very  low.  That  way,  if  you 
ever  apcomplish  anything  even  margin¬ 
ally  above  average,  they’ll  be  really  im¬ 
pressed.  Sun  Microsystems  and  Microsoft  probably 
would  have  done  us  all  a  favor  if  they’d  followed  that 
advice  last  April. 


As  y«>u  nuy  recalJ,  chat 
was  when  Sun  and  Micro¬ 
soft  proclaimed  that  they 
hod  settled  all  their  dif¬ 
ferences  and  that  a  new 
era  of  cooperation  had 
dawned.  The  quote  attrifc*- 
uted  b>-  Sun’s  PR  machine 
to  CEO  Scott  McNealy. 
while  a  little  stilted,  con¬ 
veyed  a  collaborative  spir¬ 
it  that  was  full  of  promLse; 

•This  agreement  will  be  of 
significant  benefit  to  both 
Sun  and  Microsoft  cus- 
toroers.  It  will  stimulate  new  products, 
delivering  great  new  choices  for  cus¬ 
tomers  who  want  to  combine  server 
products  from  multiple  vendors  and 
achieve  seamless  computing  in  a  het¬ 
erogeneous  computing  environment." 

Now  that  we've  passed  the  six- 
month  mark.  I  thought  it  would  be 
worthwhile  to  find  out  c.xactly  how 
those  customers  have  benefited  since 
the  Great  Pronouncement.  So  last 
week  I  asked  !ohn  Loiacono.  executive 
vice  president  of  Sun's  software  group, 
how  the  deal  had  changed  thing.s. 

"Our  conversations  with  customers 
have  changed  pretty  dramatically,  in 
that  it  used  to  be  wc  had  to  say  bad 
words  every  time  wc  mentioned  Mi¬ 
crosoft,"  Loiacono  responded.  "The 
fact  is,  we  no  longer  have  to  do  that  be¬ 
cause  we’re  doing  a  lot  more  coopera¬ 
tive  work  with  them  versus  what  we 
were  doing  previously." 

Let  roc  get  this  straight:  What  has 
changed  is  that  Sun  doesn’t  use  had 
wi>rds  when  it  talks  about  Microstift 
anymore.  WelL  that's  rust  delightful. 

But  1  was  hoping  to  hear  something  a 
lad  more  related  to  what  users  have 
gained,  so  1  pressed  him  a  little.  Lola- 
cono’s  response:  "You  will  see  from  us 
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within  the  next  W  day.s  or 
so  that  we  will  not  just  be 
talking  about  generic  con¬ 
cepts.  but  actually  talking 
more  specifically  about 
things  we're  doing  with  Mi¬ 
crosoft  and  actually  show¬ 
ing  some  examples  of  prog¬ 
ress  that  wc’vc  made." 

Ninety  days?  Interesting. 
McNealy  had  said  at  lava- 
Onc  in  |une  that  the  com¬ 
panies  would  detail  their 
collaborative  work  during 
the  summer,  and  that  didn't 
happen.  Then,  last  month.  Mark  Mc¬ 
Clain.  vice  president  of  software  mar¬ 
keting  at  Sun.  said  there  would  be 
some  sort  of  interoperability  an¬ 
nouncement  this  month  IQuickLink 
49414],  We  can  give  Sun  and  Microsoft 
the  benefit  of  the  dt»ubt  and  presume 
that  will  still  happen  (Microsoft  may 
well  be  the  chief  foot-dragger  here). 


although  Loiacono's  "within  the  next 
90  days  or  so”  comment  last  week  sug¬ 
gested  that  anything  really  substantive 
might  be  a  little  further  out. 

Unfortunately,  the  only  thing  wc 
know  now  that  we  didn't  know  in 
April  is  that  the  Sun-Microsoft  agree¬ 
ment  included  a  provision  (kept  quiet 
by  both  companies  at  the  lime)  under 
which  Microsoft  can  sue  users  and 
distributors  of  OpcnOffice.  the  open- 
source  office  suite  that  Sun  acquired 
from  a  German  outfit  in  1999  and  re¬ 
leased  to  the  open-source  community 
the  fi>llowing  year.  But  users  of  Star- 
Office.  Sun's  commercial  distribution 
of  OpenOffice.  arc  protected  against 
legal  liability  [(JuickLink  49495].  That 
revelation  came  in  an  SEC  filing  on 
Sept.  13.  and  it  seems  fairly  self-serving 
on  Sun's  part.  Anyone  who  was  think¬ 
ing  about  using  or  distributing  a  re¬ 
lease  of  OpcnOffice  other  than  Star- 
Office  might  well  be  having  second 
thoughts.  So  much  for  community 
support. 

Then  again.  Sun  got  almost  S2  billion 
from  Microsoft  when  it  signed  that 
agreement  in  April,  so  It  had  a  lot  of  in¬ 
centive  to  be  as  agreeable  as  possible, 
regardless  of  the  impact  on  anyone  else. 
What  would  you  expect?  O  50065 
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Unbelievable, 
Scary  Babble 
About  USB 

IT  SEEMS  THAT  every 
week,  I  open  the  paper  or 
click  on  a  URL  and  see  the 
same  stor>':  Someone  is  jump¬ 
ing  on  the  bandwagon  to  tell 
the  horror  tale  of  the  potentially  scary 
Universal  Serial  Bus  port.  They  talk 
about  the  security  threat  represented 
by  the  iPod  and  other  portable  media 
players  and  by  ubiquitous  USB  flash 
memory  devices,  "nte  rhetoric  has 
reached  new  highs,  and  IT  depart¬ 
ments  are  being  told  to  ban  all  devices 
of  this  type  and  immediately  lock 
down  the  USB  pons 
on  ail  machines. 

This  rhetoric 
amounts  to  another 
kind  of  USB:  '  Unbe¬ 
lievable.  Scary  Bab¬ 
ble.”  Concerns  about 
the  security  of  re¬ 
movable  media 
aren't  new.  .ind  nei¬ 
ther  is  removable 
storage  itself.  Any 
IT  staffers  for  whom 
this  is  suddenly  an 
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issue  must  have  en¬ 
tered  the  industry 
directly  from  the 
proverbial  turnip 
truck. 

Some  of  you  mi^t 
even  remember 
when  all  PCs  came 
with  removable  stor¬ 
age  devices  called  floppy  disks.  And  at 
a  time  when  a  hard  disk  could  store  no 
more  than  20MB  and  files  tended  to  be 
a  lot  smaller  than  they  arc  today,  a  per¬ 
son  could  carry  quite  a  lot  of  sensitive 
data  on  just  a  few  floppies.  Really,  this 
issue  dates  to  when  it  was  first  possi¬ 
ble  to  cheaply  copy  sensitive  docu¬ 
ments  on  a  Xerox  machine. 

Security  was  an  issue  then,  and  it’s 
an  issue  now.  Scare  rhetoric  doesn't 
help  anything;  ir  just  gets  the  folks 
with  the  scariest  rhetoric  some  head¬ 
lines.  My  favorite  line  in  one  recent 
horror  talc  was  about  the  fear  that  in¬ 
fected  PDAs  syncing  to  a  corporate 
computer  could  pass  nefarious  code  on 
to  the  corporate  network.  Of  course, 
we  know  that  unless  the  PDA  is  run- 
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fling  the  same  operating  system  as  the 
syncing  computer,  it  won’t  do  any 
harm  at  all.  (Well,  unless  the  PDA  was 
created  by  leff  Goldblum  —  you  know, 
the  guy  in  the  movie  Independence  Day 
who  somehow  sends  a  computer  virus 
from  his  PowerBtmk  to  the  aliens' 
mother  ship  computer,  which  was  for¬ 
tunately  not  only  compatible  but  also 
apparently  insecure  and  buggy.  Per¬ 
haps  they  left  all  the  USB  ports  open.) 

What  you  need  to  do  is  balance 
users’  needs  with  security  concerns. 
The  benefits  that  users  derive  from 
carrying  relevant  portions  of  their 
desktops  on  portable  memory  devices 
are  simply  too  great  for  IT  depart¬ 
ments  to  ignore.  Your  response  should 
involve  safe  computing  policies,  educa¬ 
tion  and  clear  rules  on  what  can  be 
taken  ofT-site.  And  businesses  should 
set  policies  on  segregating  personal 
data  from  corporate  machines.  IT  de¬ 
partments  must  make  sure  users  un¬ 
derstand  the  need  to  safeguard  sensi¬ 
tive  information,  whether  it’s  in  digital 
format  or  on  paper. 

Legitimate  security  concerns  sur¬ 
round  removable  media,  including 
the  potential  for  corporate  data  theft 
and  virus  attacks.  Simplistic  responses 
like  blaming  the  USB  port  or  flash 
memory  devices  aren’t  the  answer. 
"Lock  it  all  down  and  take  it  all  away" 
isn’t  a  new  philosophy,  and  it  has  failed 
time  and  again. 

Recognizing  and  accommodating 
user  needs  takes  more  work,  but  in  the 
end,  the  results  are  worth  it.  O  49896 

\IUGIN1A  KOHUINS 

Self-service 
With  a  Smile 

Recently,  it’s  felt  as  if 
my  entire  life  has  been 
spent  in  airports.  The 
airline  I  take  most  often  is 
one  of  those  low-cost  peanut 
tossers  that  specializes  in  self- 

service.  After  logging  over  80  flights  in 
the  past  year.  I  remain  a  fan  of  this  air¬ 
line.  It's  been  just  about  a  year  since 
I’ve  had  to  interact  with  anyone  at  the 
entire  company  other  than  to  give  my 
drink  order  or  to  wish  someone  a  go^ 
day  as  I  deplaned.  It’s  been  great. 

Well  except  for  the  time  I  arrived  an 
hour  after  my  flight  had  left.  The  next 
plane  to  Oakland  was  scheduled  to 
leave  in  12  minutes;  the  one  after  that 
would  land  at  close  to  midnight.  The 


customer  ser\'ice  agent 
asked  me  if  1  was  willing  to 
run  through  the  airport. 

Running  seemed  better 
than  missing  dinner,  sii  after 
he  quickly  rcbtwked  me.  he 
grabbed  my  bag.  and  i»ff  we 
went.  We  cleared  security 
in  record  time  by  using  the 
special  employee  lino.  My 
gate  was  at  the  far  end  of 
the  terminal  (of  course).  ■!  CM 

Once  we  passed  into  his  RnaatJiH 
airline’s  area,  the  other  gate 
agents  started  cheering  him 
on:  ’’CiO.  Bradley!  Go.  Bradley!"  He 
got  me  to  the  plane  with  three  minutes 
to  spare. 

As  the  dot>r  cU>sed  behind  me.  I  wa.s 
nearly  out  of  breath  but  happy  at  the 
thought  that  I'd  be  home  for  dinner. 

Exceeding  expectations  is  a  chal¬ 
lenge  in  today's  automated  world  of 
self-service.  If  Bradley  hadn’t  been 
overseeing  the  self-service  kiosks.  m> 
experience  on  this  trip  would  have 
been  very  diflerent. 

My  grocery  store  has  replaced  its 


■ad  ninmg  diwetor 
■I  Chela  Edtotion 
FlnaadngiaSiiil^ 
daeo.  Contact  her  at 


express  lanes  with  self- 
service  checkout  stations. 
The  first  month  the  sta¬ 
tions  were  available,  only  a 
few  bravo  shoppers  awd 
them. 

The  first  time  1  tried  it. 
the  station  got  stuck  in 
some  infinite  loop,  and  I 
■BMQO  up  grabbing  a  clerk 

•  diractor  ft  turned  out 

tUGatlon  that  because  the  previous 

Sanffift-  transaction  had  been  for 

beer,  the  station  needed 
to  know  whether  I  could 
legally  purchase  alcohol  before  it  could 
proceed.  I  don't  know  if  it’s  a  good 
thing  or  a  bad  thing  that  I’m  clearly 
over  21.  but  the  clerk  entered  the  code, 
and  I  continued  scanning  my  groceries. 

A  few  weeks  later.  I  was  back  in  the 
store  and  saw  an  employee  station  lo¬ 
cated  in  the  middle  of  the  self-service 
area.  The  same  clerk  who  had  helped 
me  was  now  darting  among  the  sta¬ 
tions  helping  shoppers. 

I  also  noticed  that  a  lot  more  people 
were  using  self-service;  a  long  but 


quickly  moving  line  had  formed  in 
front  of  the  four  siaiions- 

As  a  customer.  I  like  self-serv  ice;  it's 
faster  anJ  I’m  in  control.  .And  as  a  (nti. 
self-service  is  one  more  w,iy  I  can  help 
my  company  reduce  expenses  by  using 
lechnolttgy. 

Hut  the  reality  is  ihai  customers 
sometimes  need  someone  eke  to  talu.- 
control.  .\j  some  pt»mt.  the  c»isi  of 
programming  for  eaeh  pivssihlc  cus- 
Kimer  interaction  outweighs  the  c»>st 
«>f  inserting  an  emplmee  into  the 
transaction.  Assuming  that  the  folks 
in  marketing  w.int  hi^  levels  of  cus¬ 
tomer  satisJaciion.  creating  ways  for 
skilled  humans  to  intervene  is  re¬ 
quired. 

I'd  like  to  hear  your  siurios.  Send  me 
yt>ur  best  or  worst  e.xperiences  with 
self-service,  cither  as  a  pon-idcr  or  as  a 
customer,  and  I’ll  share  the  results  next 
month.  O  49979 
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Cell  Directory  Not  Needed  -  or  Wanted 


IC0UL0N7  OlSAtWEE  MONE 
wrth  the  column  ‘Witetess  World 
Needs  a  Oirectotv"  [OmckLink 
48752].  I  like  that  my  number  isn't 
published  anywhere  Like  a  growing 
number  of  people.  I've  abandoned 
my  land-hne  phone  1  choose  whom 
I  give  my  number  to.  I  appreciate 
that  no  one  can  just  look  up  my 
number  Should  this  change,  maybe 
II  switch  (oVolP 
Les  Bower 

Systems  administrator. 
Orefield.  Pa. 

it  IRCLESS  WORLD  NEEDS 
ww  a  Oifeclory7  As  was 
said  in  another  context.  This  is 
(he  worst  idea  in  the  long,  sad  his¬ 
tory  of  bad  ideas  *  There  s  too 
much  ^nng  of  personal  mtorma- 
tion.  rn  publish  my  cel  phone 
number  when  every  telemarketer 
and  sbammer  (remember,  cell 
phones  get  e-mail  loo)  has  been 
etimmat^! 

Matt  Reming 
Metwork  administrator. 
Cindnnari 

NO.  THE  WiRaESS  WORLD 
doesn't  need  a  directory.  Wire¬ 
less  is  a  special  case  because  you 


pay  for  eveiylhmg  -  incoming,  out¬ 
going.  text,  voice,  etc  Robert 
,  Mitchell  should  use  his  soapbox  to 
for  no-cost  incoming  wxeless 
cads  and  messages  There  should 
be  no  cell  phone  directory  Not  until 
no  one.  not  even  chanties,  can  tele- 
market.  Not  until  incoming  caHs  and 
text  messages  are  free  across  the 
board  And  not  until  no  one  can 
done  your  cell  number  and  bill  their 
I  caHs  to  It  because  you  answered 
I  something  (hat  looked  famikar  and 
i  you  were  wrong 
^  At  the  risk  of  being  labeled  8 
i  crank.  I  will  speak  out  against  a  ced 
phone  directory  until  ail  incoming 
rmnutes  on  all  wireless  plans  are 
free  Vies.  I  did  read  Jay  Qine's  en¬ 
tire  article  as  well  CXell  Phone  Di¬ 
rectory  Rings  True."  QuckUnk 
49184 J.  and  I  understand  (hat  it  will 
be  opt -in  at  first,  with  onty  new  cus¬ 
tomers  having  to  opt  out.  But  how 
long  will  It  be  before  companies 
Stan  charging  to  opt  out?  And  what 
constitutes  a  new  customer? 

I  have  been  going  month-to- 
month  with  my  earner  for  a  while 
now.  Today,  f  entered  mto  a  con¬ 
tact  for  a  year  to  take  advantage  of 
adeai  The  provider  oould  argue 
that  since  the  contract  B  new.  even 


though  (he  account  is  rvot  ii  con- 
s]4u1e$  new  service 
,  BJL  Doiise 

I  £ducarion  pmgram  manqgLT. 

!  Bafrimorv, 

bamycfcMisc  a  fiorniaifxtim 

Don’t  Forget  Alpha 

Thanks  for  the  coverage  of  the 
VAX  and  Vk6  community, 
which  tends  to  be  ignored  ttese 
days,  and  for  the  positive  words 
about  the  future  of  VMS  on  itamum  j 
Too  many  people  mistaken^  (hmk 
VMS  died  long  ago 
But  fm  amazed  that  the  article  | 
(“VAX  Users  See  the  Wntjog  on  the  | 
WaU.'  Qmckljnk  47934]  rvever  men ' 
iioned  Alpha.  The  path  of  least  rests-  > 
tance  (and  least  expense)  for  most 
VAX  users  has  been  to  retain  thex  ex¬ 
isting  software  and  nrngrale  to  newer 
Alpha  hardware.  sbN  running  the  I 
VMS  operalmg  system  kinxjstcas-  | 
es.  It's  been ‘recompile,  refenk  and  i 
go' lor  their  prograrrs.  but  in  cases  I 

where  source  code  has  been  iosL  the  | 
I^STutibtys  used  ki  convert  a  VAX  | 
bmary  xnage  to  an  Alpha  one. 

Some  VAX  users  mey  choose  10  ^ 
move  straight  from  VAX  to  lianiim.  j 

skipping  Alpha  enbr^  But  HP  still 
devtiops  and  sells  Alpha  systems  ' 
(and  wdl  through  at  lessi  2006)  and  i 


wiH  support  (hem  for  a  rrarwTvn  of 

tnre  years  after  las3  sale,  whenever 
that  occurs.  For  most  VAX  users, 
moving  to  VMndaws  Urn  or  Linux 
involves  very  cosOv  code  rewntes  or 
whotesalereplacemeniolapplica- 
bons.  atd  they  tend  to  find  that  those 
ptattorms  don't  provide  the  stabiMy. 
rskabMy.  high  avaiiaMv.  security 
(Iherearenown^esonVMS  forex- 
ample)  low  system  admuifitrator 
workload  and  low  TCO  that  they 
have  become  accu^lomed  to  with 
VMS  So  lot  most  VAX  users  today 
siicfuig  with  VMS  and  atripty  mov- 
irtgionewerriardwaiefncludfioAI- 
pha)  6  Ihe  lowesi-cosi.  knvesi-efton 
and  least-nsky  option  to  consider 
Keith  Parris 
Colorado  Spnngs 

COMPUTERWORLO  weloomes 
comments  horn  Its  readers  Letters 
wi  be  edited  for  brevity  and  ciyRy 
They  should  be  addressed  to 
Jarme  EeWe.  tetters  editor.  Com- 
puterworid  PO  Box  9171.  iSpeen 
Street.  Framingham  Mass.  01701 
Fax  (508)  879-4643.  E-mail 
tetters^compuierworld  com 
Include  an  address  and  phorw 
number  lor  immediate  venf  icalion 

OFw  iTore  leOm  OP  (hese  and 
other  topes  go  10 


WebSphere 


Middleware  is  Everywhere. 


MIDOLEWABE  IS  IBM  SOFTWARE.  WebSphere  Portal, 
part  of  the  IBM  Workplace  Family,  connects  partners, 
employees,  and  customers  worldwide.  It's  how  to  access 
multiple  applications  on  one  screen  and  on  virtually  any 
kind  of  device  An  end-to-end  solution  that  helps  improve 
productivity  and  reduce  costs  as  it  enables  on  demand 
business.  It's  an  accessory  that  you  just  can't  live  without. 


1.  Sales  associate  checks  online  inventory. 

2.  Manager  uploads  revenue  goals. 

3.  Supervisor  gets  employee  overtime  info. 

4.  Cashier  IMs  downtown  store  location. 

5.  Everyone  accessirtg  Info  via  one  portal 


LAWSON 

It’s  Time: 


I  Sd^MR  M  i9«  foexu 
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IKspite  vendor  asanoces, 
nimanconceniedaboiittlieseGiii^ 
of  ekclrniic  voting  systolic 


HIS  NOVEMBER.  a$  many 
as  SO  million  Americans 
could  vote  for  president 
using  some  form  of  elec- 
tronic  touch-screen  sys¬ 
tem.  tlu  vast  majority  of 
which  have  been  designed 
by  McKinney,  Texas-based  Diebold 
Election  Systems.  That  has  some  IT 
and  security  researchers  holdii^ 
their  breath  because  of  the  faulty 
track  record  of  Diebold’s  technolo¬ 
gy  and  a  government-endorsed 
testing  and  certification  process 
that  they  say  is  deeply  flawed. 

Those  critics  say  that  direct 
recording  electronic  (DRE)  voting 
systems  remain  vulnerable  to  ma¬ 
nipulation  and  malfunction,  partic¬ 


ularly  in  states  that  have  ^ored 
some  recommendations  of  indepen¬ 
dent  researchers,  like  Maryland  has. 

State  election  officials,  on  the 
other  hand,  say  they  are  confident 
that  appropriate  safeguards  are  in 
place  to  ensure  the  security  and  ac¬ 
curacy  of  the  2004  vote. 

Among  the  most  pressing  issues 
cited  by  critics  are  a  lack  of  techni¬ 
cal  standards  governing  DRE  soft¬ 
ware  development,  the  failure  of 


the  government  to  impose  trans¬ 
parency  on  the  softw^  testing  and 
certification  process,  and  the  lack 
of  technical  security  knowledge 
throu^out  the  many  state  and  lo¬ 
cal  jurisdictions  that  oversee  elec¬ 
tions  where  DREs  will  be  used. 

Johns  Hopkins  University  pro¬ 
fessor  Aviel  Rubin,  who  last  year 
published  a  study  of  portions  of 
the  Diebold  software  code,  says 
the  quality  of  that  code  was  below 


minimum  standards  for  a  produc¬ 
tion  system.  Rubin’s  report  cites  a 
lack  of  industry-standard  change- 
control  processes  and  documenta¬ 
tion.  as  well  as  specific  technical 
weaknesses. 

Jonathan  Gossels,  founder  of 
SystemExperts  Corp.  in  Sudbury. 
Mass.,  says  his  review  of  the  Die¬ 
bold  code  showed  that  it  was  ‘’ama¬ 
teurish"  in  its  desiga  More  impor¬ 
tant.  the  amount  of  code  that  has 
been  studied  and  found  wantii^  “is 
only  the  tip  of  the  iceberg"  of  the 
millions  of  lines  of  C-^  and  Micro¬ 
soft  Windows-based  code  that 
powers  the  Diebold  touch-screen 
systems  and  back-end  management 
servers,  says  Gossels. 
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This  November,  as  many 
as  50  million  Americans 
could  vote  for  president 
using  some  form  of  elec¬ 
tronic  touch-screen  sys¬ 
tem.  the  vast  majority  of 
which  have  been  designed 
by  McKinney.  Texas-based  Diebold 
Election  Systems.  That  has  some  IT 
and  security  researchers  holding 
their  breath  because  of  the  faulty 
track  record  of  Diebold's  technolo¬ 
gy  and  a  government-endorsed 
testing  and  certification  process 
that  they  say  is  deeply  flawed. 

Those  critics  say  that  direct 
recording  electronic  (DRE)  voting 
systems  remain  vulnerable  to  ma¬ 
nipulation  and  malfunction,  partic- 


Despite  vendor  assiraiKes,  resear^ 
remain  (meniedaiNiut  the  seoirity  and  reli^ 
of  electronic  voting  systems.  BY  DAN  VERTON 


ulaiiy  in  states  that  have  ignored 
some  recommendations  of  indepen¬ 
dent  researchers,  like  Maryland  has. 

State  election  officials,  on  the 
other  hand,  say  they  arc  confident 
that  appropriate  safeguards  arc  in 
place  to  ensure  the  security  and  ac¬ 
curacy  of  the  2004  vote. 

Among  the  most  pressing  issues 
cited  by  critics  are  a  lack  of  techni¬ 
cal  standards  governing  DRE  soft¬ 
ware  development,  the  failure  of 


the  government  to  impose  trans¬ 
parency  on  the  software  testing  and 
certification  process,  and  the  lack 
of  technical  security  knowledge 
throughout  the  many  state  and  lo¬ 
cal  jurisdictions  that  oversee  elec¬ 
tions  where  DREs  will  be  used. 

lohns  Hopkins  University  pro¬ 
fessor  Aviel  Rubin,  who  last  year 
published  a  study  of  portions  of 
the  Diebold  software  ct>de.  says 
the  quality  of  that  code  was  below 


minimum  standards  for  a  produc¬ 
tion  system.  Rubin’s  report  cites  a 
lack  of  industry-standard  change- 
control  pixx'esses  and  documenta¬ 
tion.  as  well  as  specific  technical 
weaknesses. 

lonathan  Gossels.  founder  of 
SystemExperts  0>rp.  in  Sudbury. 
Mass.,  says  his  re\-iew  of  the  Dio- 
bold  code  showed  that  it  was  "ama¬ 
teurish"  in  its  design.  More  impor¬ 
tant.  the  amount  of  ctKie  that  has 
been  studied  and  found  wanting  "is 
only  the  tip  of  the  iceberg"  of  the 
millions  of  lines  of  C*»  and  Micro¬ 
soft  Windows-based  code  that 
powers  the  Diebold  touch-screen 
systems  and  back-end  management 
servers,  says  Gossels. 
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rhi*  toting  pr<Kvdurcs  «*f  \vndi)rs. 
p.irriculjrl\  l>jcK*ld.  arc  jKn  under 
suspiciun  |orr\  Kudisin.  CKt)  of  Ajiilar 
Soitwarc  Inc  j  vofiwarc  icsim^  com¬ 
pany  in  Mountain  \'icu.  tljlit..  says  he 
suspects  that  the  orjjjin.il  lljchold  code 
^^asn■|  subtcctcd  ii»  unit  ti'siin^;  based 
•  >n  the  Luk  ««t\'hani:c-ci>nirol  d»vu- 
incnijtion  And  because- ot' this. "a  U*t 
ol'  bu>;s  end  up  (.’eitini;  through  t«»  the 
deployed  >\siini>.‘'  he  says. 

•A  lanuar\  study  b\  the  Innov.i- 
itve  holuiions  i  Vll  at  Columbia.  Md.- 
base’d  R.\H.\  lechnoloynes  1 1  (;  tested 
HieKild  systems  that  were  to  be  de¬ 
ployed  lor  Mary  land's  .March  dtH)4 
prioi*ines  I'h*.- study  tound  the  ueneral 
lack  \>l  >ecurit\  awareness  m  the  Pie- 
bold  c.'de  ■■.*  valid  and  troubling  reve¬ 
lation."  In  addition,  the  report  con- 
lirmed  Kubin's  assertion  that  there  Was 
little  evidence  that  widely  aeeepted 
st.mdards  of  sol'tware  development 
had  been  billowed 

MYSTIRY  TESTS 

One  111' the  mv»st  critii  al  aspects  of  the 
votin}:  system  development  process  is 
the  icstiny:  and  eeriification  of  hard¬ 
ware  and  software  i<'  ensure  that  they 
mi-et  V  oluntary  federal  vofinji  st.tn- 
dards  for  security  and  reliability.  Three 
vendors  act  as  so-called  independent 
tesiinj:  authi»rilies  tl  TA).  However.  IT 
e.vperis  arc  highly  critical  of  the  test¬ 
ing  pros'css  because  of  its  secrecy. 

"F-Jcciion  officials  are  buying  a  soft-  ' 
ware  package,  and  there's  not  a  lot  of 
transparency."  says  Kudisin.  “With  vot¬ 
ing  sofiwarc,  you  pretty  much  buy  a 
pig  in  a  poke  “ 

Ciber  Inc.  in  Greenw  ood  Village.  ' 
Colo.,  and  SysTcsi  labs  LLC  in  Denver  ' 
act  a.s  the  two  software  ITAs.  Wylc 
Laboratories  Inc.  in  D  Segundn.  Calif., 
is  the  hardware  ITA.  All  of  them  refuse 
to  provide  details  on  how  they  test  the 
voting  equipment  or  on  their  findings. 

The  ITAs  that  test  the.se  machines 
are  hired  by  the  vendors,  so  they  arc 
not  independent  and  not  rteutral."  says 
Rubin,  who  hasn’t  been  allowed  by 
Dicboid  to  re-evaluate  the  source  ctidc 
since  his  initial  study. 

Diebold  spokesman  David  Bear  says 
the  company  stands  behind  the  testing 
and  source  code  reviews  conducted  by 
"independent,  unbiased  third  parties." 
The  reviews  are  done  at  the  federal 
level  using  standard.s  recommended  by 
the  Federal  Election  Commission  and 
at  the  state  level,  he  says. 

Bear  also  says  voting  systems  are 
only  a  small  part  of  the  election  proc¬ 
ess,  which  has  many  built-in  security 
precautions  and  redundancies.  *1116 
voting  machines  an;  c'ompletcly  stand- 


©With  voting 
software,  you 
pre^  much  buy  a 
pig  in  a  poke. 

JERRY  RUDISIM.  CIO  AGiTAft  SO?  'WARE  'UC 
alone."  he  s.iyN.  'No  network  cunnee 
tion  of  any  kind  —  wired  or  wireless  — 
i-i  used  during  the  vining  pnvess,  The 
onK  connection  to  the  machine  at  the 
polling  place  iv  the  .AG  {'ower  e<»rd." 

trie  Li/arus.  president  of  New  York 
Kised  IVcisionSmith,  sjvs  the  testing 
model  for  e-voiing  s\  stems  “is  bnvken." 

Lizarus.  lead  .author  of .»  report  by 
the  Hrennan  C.enicr  for  Uistice  and  the 
1  eadership  G.onferetiee  <»n  Givil  Rights 
tin  improving  l>Kl-  reliability,  says’”-- 
v»f  systems  should  be  pm  through  c.\- 
h.msiive  testing  that  simulates  Flection 
Day  aeiiviiy.  I'hc  testing  process  most 
slates  use  is  based  simply  vm  how  indi¬ 
vidual  machines  count  a  lew  test  wucs, 

stipraimii^^ 

Flection  tvIficiaLs  for  Marvl.ind.  Vir¬ 
ginia  and  California,  which  have  invest¬ 
ed  millions  of  dollars  in  Diebold  DRF 
systems,  say  they  're  cvmfideni  that  the 
voting  process  can  be  made  secure  and 
reliable  even  if  technical  vuliierabili- 
ttes  CNisi  hidden  in  the  software, 

"Wc  will  not  vvverreact  to  scarc- 
taciic  headlines  that  do  not  reneci  the 
long-established  security  protections 
required  by  law,  policy  and  procedure."  I 
says  loan  lensen.  secretary  of  the  Vir-  | 
ginia  State  Board  of  Elections  (SBE),  j 
which  hired  Arlington,  Va.-based  CACI  I 
International  Inc.  to  conduct  an  inde-  I 
pendent  security  assessment  of  the 
Diebold  systems.  She  also  points  out  I 


that  feu  of  the  e-voting  critics  "have 
presented  any  credentials  regarding 
I  their  expertise  in  election  Law  or  the 
,  policies  and  procedures." 

All  4o  localities  in  V'irginia  where 
DRF-s  from  six  vendors  will  K*  used 
arc  developing  security  policies  .and 
pnKcdurcs  based  on  the  CACI  recom¬ 
mendations.  and  those  procedures  will 
be  audited  during  the  election,  savs 
Barbara  Cockrell,  spokeswoman  fi>r 
the  IT  manager  M  the  Virginia  SBE. 

A  DKF  must  be  tested  in  .in  actual 
election  before  it  can  be  sold  in  \'ir- 
ginia.  says  Cockrell,  who  adds  that  log¬ 
ic  and  accuracy  tests  arc  a  key  part  of 
the  eertificaiion  prv*cess  and  that  no 
system  loiiehis  the  public  Inlernel- 

l.inda  Limone.  administrauir  of  the 
Mary  land  SHF.  criticizes  RABAs  study 
of  DKF  use  in  Maryland,  saying  the  re¬ 
searchers  didn't  "conduct  the  e.xcrcise 
in  a  polling-place  environment  under 
the  purview  of  trained  election  work¬ 
ers  . . .  .and  bipartisan  election  judges 
observing  voters'  activities." 

But  Miehae!  Wertheimer,  the  prima¬ 
ry  author  of  the  RABA  repv>rt.  says  he's 
cvinvinced  that  the  state's  eleclkm  is  a 
di.saster  waiting  to  happen.  '•Despite 
our  recommendations.  M.aryland  has 
decided  that  each  county  will  get  only 
one  password  to  protect  their  pre¬ 
cincts.  That  means  only  three  pass¬ 
words  protect  these  counties."  he  says. 
■■|1  any  one  of  these  passwords  is  com¬ 
promised  and  exploited.  Maryland  is 
up  for  grabs.  All  it  takes  is  one  election 
official  to  allow  someone  five  minutes’ 
access  to  the  server  to  ctvmplelcly  rig 
the  election." 

Not  quite,  says  Lamonc.  First,  she 
says,  no  -ververs  arc  located  at  polling 
places.  Second,  "neither  the  staff  at  the 
loc.al  boards  of  elections  nor  the  elec¬ 
tion  judges  know  the  cryptographic 
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I  keys  to  the  units  or  the  server  adminis- 
i  trativc  pa.sswords,"  she  says.  "The  al- 
j  phanumeric  keys  are  created  at  my  of- 
*  ficc  and  are  only  known  to  people  on 
I  my  start'  vvlio  tieed  to  know."  Lamone 
j  adds  that  creating  keys  unique  to  each 
;  precinct  would  present  "a  logistical 
I  nightmare"  and  could  endanger  the  sc- 
:  curity  and  etficiency  of  the  election. 

I  Wertheimer  remains  skeptical  about 
I  the  state’s  preparations  to  u.se  DRFs. 

"Mary  land  refuses  to  put  a  firewall  on 
I  servers  that  are  connected  via  dial-up 
modems,'*  he  says.  "They  refuse  to  up¬ 
grade  the  Wind<wvs  2(100  operating 
system  with  the  latest  security  patches 
—  they  were  In  patches  behind  in  lanu- 
I  ary  of  this  year." 

lamonc  s;iys  security  experts  hired 
by  the  state  determined  that  since  no 
component  of  the  voting  system  is 
I  connected  to  the  Internet,  the  firewall 
I  and  patches  recommended  by  R.ABA 
I  aren’t  nece.ssary.  Moreover,  she  adds. 

I  "a  person  would  have  to  have  knowl- 
I  edge  of  the  encrypted  sixTurity  con- 
I  tn»ls  in  pl.nce  for  sending  the  unolficial 
results  by  modem,  as  well  as  user  iden¬ 
tification  requirements  and  passwords, 
to  gain  access  to  the  server." 

SnUTIME? 

j  Lazarus  and  Gossels  .say  there  is  still 
I  lime  for  states  to  implement  prot-c- 
dures  that  can  lessen  the  likellhwd  of 
malfunctions  and  malicious  activity 
and  have  jointly  devised  a  scorecard 
that  election  administrators  c.-in  use  to 
rate  the  socniriiy  and  reliability  of  DRE 
systems  (sec  box).  "The  best  that  we 
can  do  in  terms  of  security  at  this 
point  i.s  still  not  very  good."  Lazaru.s 
says.  “Bui  there’s  no  excuse  for  not 
doing  some  of  the  easy  things." 

The  bottom  line,  say  Gossels. 

Lazarus  .and  Wertheimer,  is  that  there 
will  be  problems  with  DREs  next 
month,  ranging  from  malfunctions  that 
cause  polling  places  to  close  to  poten¬ 
tially  more  nefarious  incidents  of  tam¬ 
pering  that  nobody  Is  able  to  detect. 

“I  am  worried  that  election  officials 
fail  to  recognize  that  elections  run  by 
computers  aHiuire  a  completely  differ¬ 
ent  model  than  those  run  by  paper." 
says  Wertheimer.  "It  will  take  a  cata¬ 
strophic  voting  9/11  to  force  change." 
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The  testing  procedures  of  vendors, 
particularly  Oiebold,  are  also  under 
suspicion.  Jerry  Rudisin,  CEO  of  Agiiar 
Software  Inc,  a  software  testing  com* 
pany  in  Mountain  View,  f>ltf,  says  be 
suspects  that  the  original  Diebold  code 
wasn't  subjected  to  unit  testing  based 
on  the  lack  of  change-control  docu- 
mentatioa  And  because  of  this,  “a  lot 
of  bugs  end  up  getting  through  to  the 
deployed  systems,"  he  says. 

A  January  2004  study  ^  the  Innova¬ 
tive  Solutions  Cell  at  Columbia,  Md.* 
based  RABA  Technologies  LLC  tested 
Diebold  systems  that  were  to  be  de¬ 
ployed  for  Maryland's  March  2004 
primaries.  *rhe  study  found  the  general 
lack  of  security  awareness  in  the  Die¬ 
bold  code  "a  valid  and  troubling  reve- 
latKML"  In  addition,  the  report  con- 
firmed  Rubin’s  assertion  that  there  was 
little  evidence  that  widely  accepted 
standards  of  software  development 
had  been  followed. 

WSTBYIESn 

One  of  the  most  critical  aspects  of  the 
voting  system  development  process  U 
the  testing  and  certification  of  hard¬ 
ware  and  software  to  ensure  that  they 
meet  voluntary  federal  voting  stan¬ 
dards  for  security  and  reliability.  Tluee 
vendors  act  as  so-called  independent 
testing  authorities  (ITA).  However.  IT 
expeiu  are  highly  critical  of  the  test¬ 
ing  process  because  of  its  secrecy. 

"Election  officials  are  buying  a  soft¬ 
ware  package,  and  there's  not  a  lot  of 
transparency,"  says  Rudisia  "With  vot¬ 
ing  software,  you  pretty  much  buy  a 
pig  in  a  poke." 

Ciber  Inc  in  Greenwood  Village, 
Colo,  and  SysTest  Labs  LLC  in  Denver 
act  as  the  two  software  ITAs.  Wyle 
Laboratories  Inc  in  El  Segundo.  r.alif. 
is  the  hardware  ITA.  AU  of  them  refuse 
to  provide  details  on  bow  they  test  the 
voting  equipment  or  on  their  fmdings. 

The  FTAs  that  test  these  machines 
are  hired  by  the  vendors,  so  they  are 
not  independent  and  not  neutral,"  sa^ 
Rubin.  hasn't  been  allowed  by 
Diebold  to  re-evaluate  the  source  code 
since  his  initial  study. 

Diebold  spc^cesman  David  Bear  says 
the  company  stands  behind  the  testing 
and  source  code  reviews  conducted  by 
"independent,  unbiased  third  parties." 
7110  reviews  are  done  at  the  foetal 
level  using  standards  recommended  by 
the  Federal  Election  Comnusion  and 
at  the  state  level  be  says. 

Bear  also  says  voting  systems  are 
only  a  small  part  of  the  election  proc¬ 
ess,  which  has  many  built-in  security 
precautions  and  redundancies.  "The 
voting  machines  are  completely  stand- 


•With  voting 
software,  you 
Pje^muchbuya 
pig  in  a  poke. 

JERIW  RUDISIN.  CEO.  AGITAR  SOFTWARE  INC 
alone,"  he  says.  "No  network  connec¬ 
tion  of  any  kind  —  wired  or  wireless  — 
is  \ised  during  the  voting  process.  The 
only  connection  to  the  machine  at  the 
poUii^  place  is  the  AC  power  cord." 

Eric  Lazarus,  president  of  New  York- 
based  DecisionSmith,  says  the  testing 
model  for  e-voting  systems  “is  broken." 

Lazarus.  lead  author  of  a  report  by 
the  Brennan  Center  for  Justice  and  the 
Leadership  Conference  on  Civil  Rights 
on  improving  DR£  reliability,  says  2% 
of  systems  s^uld  be  put  through  ex¬ 
haustive  testing  that  simulates  Election 
Day  activity.  The  testing  process  most 
states  use  b  based  simply  on  bow  indi¬ 
vidual  machines  count  a  few  test  votes. 


Election  officiab  for  Maryland.  Vir¬ 
ginia  and  California,  which  have  invest¬ 
ed  millions  of  dollars  in  Diebold  DRE 
systems,  say  they're  confident  that  the 
voting  process  can  be  made  secure  and 
reliable  even  if  technical  vulnerabili¬ 
ties  exist  hidden  in  the  software. 

"We  will  not  overreact  to  scare- 
tactic  headlines  that  do  not  reflect  the 
long-establbhed  security  protections 
required  by  law.  policy  and  procedure," 
says  Jean  Jensen,  secretary  of  the 
ginia  State  Board  of  Elections  (SBE). 
which  hired  Arlington.  Va.-based  CACI 
International  Ixk:.  to  conduct  an  inde¬ 
pendent  security  assessment  of  the 
Diebold  systems.  She  also  points  out 


that  few  of  the  e-voting  critics  “have 
presented  any  credentiab  regarding 
their  expertise  in  election  law  or  the 
policies  and  procedures." 

All  46  localities  in  Vir^nia  where 
DREs  from  sbe  vendors  will  be  used 
are  developing  security  policies  and 
procedures  based  on  the  CACI  recom¬ 
mendations.  and  those  procedures  will 
be  audited  during  the  election,  says 
Barbara  Cockrell,  spokeswoman  for 
the  rr  mam^er  at  the  Virginia  SBE 

A  DRE  must  be  tested  in  an  actual 
election  before  it  can  be  sold  in  Vir¬ 
ginia.  says  Cockrell,  who  adds  that  log¬ 
ic  and  accuracy  tests  are  a  key  part  of 
the  certification  process  and  that  no 
system  touches  the  public  Internet. 

Linda  Lamone.  adminbtrator  of  the 
Maryland  SBE  criticizes  RABA's  study 
of  DRE  use  in  Maryland,  saying  the  re¬ 
searchers  didn't  “conduct  the  exercise 
in  a  polling-place  environment  under 
the  purview  of  trained  election  work¬ 
ers .. .  and  bipartisan  election  judges 
observing  voters’  acti\ities." 

But  Michael  Wertheimer,  the  prima¬ 
ry  author  of  the  RABA  report  says  he's 
convinced  that  the  state's  election  b  a 
disaster  waiting  to  happen.  “Despite 
our  recommendations,  Maryland  has 
decided  that  each  county  will  get  only 
one  password  to  protect  their  pre¬ 
cincts.  That  means  only  three  pass¬ 
words  protect  these  counties,"  be  says. 
“If  any  one  of  these  passwords  b  com¬ 
promised  and  exploited,  Maryland  b 
up  for  grabs.  All  it  takes  b  one  election 
official  to  allow  someone  five  minutes’ 
access  to  the  server  to  completely  rig 
the  election." 

Not  quite,  says  Lamone.  First,  she 
says,  no  servers  are  located  at  polling 
places.  Second,  "neither  the  staff  at  the 
local  boards  of  elections  nor  the  elec¬ 
tion  judges  know  the  cryptc^pbic 


keys  to  the  units  or  the  server  admims- 
trative  passwords,"  she  says.  “The  al¬ 
phanumeric  keys  are  created  at  my  of¬ 
fice  and  are  only  known  to  people  on 
my  staff  who  need  to  know."  Lamone 
adds  that  creating  keys  unique  to  each 
precinct  would  present  “a  logbticaJ 
nightmare"  and  could  endanger  the  se¬ 
curity  and  efficiency  of  the  electioa 

Wertheimer  remains  skeptical  about 
the  state's  preparations  to  use  DREs. 
“Maryland  refuses  to  put  a  firewall  on 
servers  that  arc  connected  via  dial-up 
modems,"  he  says.  “They  refuse  to  up¬ 
grade  the  Windows  2000  operating 
system  with  the  latest  security  patches 
—  they  were  16  patches  behind  in  Janu¬ 
ary  of  thb  year." 

Lamone  says  security  experts  hired 
by  the  state  determined  that  since  no 
component  of  the  voting  system  b 
connected  to  the  Internet,  the  ftrewall 
and  patches  recommended  by  RABA 
aren't  necessary.  Moreover,  she  adds. 

"a  person  would  have  to  have  knowl¬ 
edge  of  the  encrypted  security  con¬ 
trols  in  place  for  sending  the  unofficial 
results  ^  modem,  as  well  as  user  iden¬ 
tification  requirements  and  passwords, 
to  gain  access  to  the  server." 

snilK? 

Lazarus  and  Gossels  say  there  b  still 
time  for  states  to  implement  proce¬ 
dures  that  can  lessen  the  likelihood  of 
malfunctions  and  malicious  activity 
and  have  jointly  devised  a  scorecard 
that  election  adminbtrators  can  use  to 
rate  the  security  and  reliability  of  DRE 
systems  (see  box).  ‘TThe  best  that  we 
can  do  in  terms  of  security  at  thb 
point  b  still  not  very  good,"  Lazarus 
says.  “But  there’s  no  excuse  for  not 
doing  some  of  the  easy  things." 

The  bottom  line,  say  Gossels, 

Lazarus  and  Wertbeuner,  b  that  there 
will  be  problems  with  DREs  next 
month,  ranging  from  malftmctions  that 
cause  polling  places  to  dose  to  poten¬ 
tially  more  oefwous  incidents  of  tam¬ 
pering  that  nobody  b  able  to  detect. 

“1  am  worried  that  election  offtciab 
fail  to  recognize  that  elections  nm  by 
computers  require  a  completely  differ¬ 
ent  model  than  those  run  by  paper," 
says  Wertheimer.  "It  will  take  a  cata¬ 
strophic  voting  Wll  to  force  change." 
048640 
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No  Secrets 


O 


ff 


rrickle  down  to  workers  — 
or  the  customer. 

My  woric  life  was  run  by 
a  PC  that  divvied  up  tech¬ 
nical  support  calls  and 
monitored  the  average  call 
time  and  the  quantity  of 
calls  I  completed.  Each 
morning  started  with  a  re¬ 
view  of  our  call  statistics 
and  the  day’s  call  quota. 

The  promise:  Those  who 
met  the  day’s  per-worker 
goal  could  leave  the  phones 
and  worie  on  software  quality  assur¬ 
ance  testing  for  the  rest  of  the  day.  QA 
was  a  much  more  relaxing  and  desir¬ 
able  assignment  If  a  worter  reached 
the  goal,  the  monitoring  PC  would 
beep  loudly,  and  the  person  whose 
name  appeared  on  the  display  would 
be  done  —  an  event  that  became 
known  as  “beeping  ofll" 

In  my  six  months  there,  I  never 
beeped  off  before  530.  Eventually.  I 
came  to  realize  that  management  al¬ 
ready  had  a  full-time  QA  department 
but  was  always  short  on  technical 
support  staff.  So  it  became  very  good 
at  using  the  PC-based  statistical  analy¬ 
sis  tools  to  keep  that  carrot  just  out 
of  reach. 

The  worst  part,  though,  was  what 
the  vendor  did  to  its  customers.  While 
reviews  lauded  the  quality  of  its  ma¬ 
chines.  in  fact  the  system  BIOS  and 
graphics  subsystems  bad  fatal  compat¬ 
ibility  problems  with  many  applica¬ 
tions.  Popular  business  programs  that 
reviewers  tested,  like  Lotus  1-2-3, 
worked.  But  many  others  did  not. 

Fixing  those  problems  meant  re¬ 
turning  the  PCs  under  warranty  —  an 


NE  OF  MY  FIRST  JOBS  out  of  school  in 
the  early  ’80s  was  working  technical  sup¬ 
port  for  a  PC  clone  vendor.  It  was  there 
that  I  learned  firsthand  how  the  benefits 
of  information  technology  don’t  always 

expense  that  management 


wanted  to  avoid.  So  we 
were  ordered  not  to  ac¬ 
knowledge  them.  When 
customers  called  in.  we 
dutifully  walked  them 
through  all  possible  solu¬ 
tions,  told  them  their  pro¬ 
gram  should  woric  fine, 
documented  their  com¬ 
plaint  and  promised  to  let 
them  know  if  a  fix  became 
available.  This  is  why  my 
career  in  technical  support 
was  a  short  one,  but  to  this  day.  I’m 
amazed  that  those  prt^lems  stayed  un¬ 
der  the  radar  despite  the  fact  that  we 
continued  to  ship  defective  machines. 

What  a  difference  20  years  makes. 
Today,  Internet  chat  rooms,  news¬ 
groups,  e-mail  lists  and  Web  sites 
would  be  buzzii^;  about  that  compa¬ 
ny’s  breach  of  trust  with  its  employees 
and  customers.  Online  communities 
would  have  quickly  identified  the 
company  as  an  undesirable  place  to 
work  and  dubbed  its  machines  lemons. 

Information  now  travels  so  fiist  that 
companies  are  often  left  scrambling  to 
contain  the  damage  when  bad  news 
hits.  Kryptonite,  the  maker  of  bicycle 
locks,  was  the  latest  company  to  &ce 
that  challenge  after  word  spread  on 
the  Internet  last  month  that  many  of 
its  locks  could  be  picked  using  a  ball¬ 
point  pen.  The  Bic  revcladon.  quickly 
picked  up  by  the  news  media,  dealt  a 
blow  to  the  company's  brand  and 
forced  a  recall. 

Kryptonite  may  not  have  known 
about  the  flaw,  but  it  was  clearly  pe¬ 
nalized  for  faiJii^  to  find  and  correct 
the  problem  before  the  public  did. 


The  Internet  is  ruthlessly  efficient 
at  disseminating  information.  To  avoid 
such  disasters,  businesses  need  to  rig¬ 
orously.  iteratively  and  methodically 
test  their  products  for  all  possible  prob¬ 
lems  and  have  policies  to  ethically  and 
directly  respond  to  issues  in  real  time. 

But  the  destructive  power  of  the  In¬ 
ternet  hits  more  than  business.  In  the 
case  of  Kryptonite,  its  customers  may 
have  suffered  collateral  damage.  The 
rapid  release  online  of  detailed  in¬ 
structions  on  how  to  defeat  the  lock  — 
including  a  video  —  let  the  world 
know  how  to  steal  any  bicycle  secured 
with  this  popular  product 

Is  it  right  that  such  information 
should  be  immediately  and  widely  dis¬ 
seminated.  no  matter  bow  destructive 
or  who  might  ^t  hurt?  Microsoft 
would  say  no.  It  recently  criticized  a 
company  that  publicly  claimed  to  have 
identified  a  vulnerability  in  Word 
2000  without  first  giving  Microsoft  a 
chance  to  verily  the  problem  and  de¬ 
velop  a  patch  to  protect  its  customers. 

Microsoft’s  thkiking  doesn't  fly  with 
Daniel  Weitzner,  a  Kryptonite  lo^ 
user  and  occasional  Computerworld 
columnist  whose  bicycle  was  stolen 
prior  to  the  disclosure.  Had  be  known 
about  the  flaw  earlier,  he  might  still 
have  his  bicycle,  Weitzner  says. 

It's  true  enough  that  such  disclo¬ 
sures  can  hurt  customers  who  don’t 
get  the  news  before  the  bad  guys  da 
But  immediate  disclosure  also  empow¬ 
ers  users  to  protect  themselves. 

Whether  doing  so  is  right  or  wrong 
is  irrelevant  in  the  end,  since  the  Inter¬ 
net  doesn't  make  such  distinctions, 
and  we  can’t  put  the  technology  genie 
back  in  the  bottle.  Rather  than  com¬ 
plain  about  the  situation,  both  cus¬ 
tomers  and  vendors  are  just  going  to 
have  to  adapt  O  48998 
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technical  competence:  yet  another  reason  to  outsource  with  spi 


au  cious  endings 


Any  IT  project  can  get  off  to  a  great  start.  But  SPI  has  the  methodologies,  standards,  tools  and  technical 
savvy  to  deliver  successful  endings,  too.  Our  global  delivery  model  includes  CMMI  Level  5  (in  progress), 
Six  Sigma  and  ISO  9001:2000  certifications.  And  if  you  like  our  operational  capabilities,  you'll 
really  appreciate  our  grasp  of  your  industry,  and  how  closely  we  align  our  business  with  yours. 
To  learn  more,  contact  us  at  866-316-5774  or  sales@spiPortal.com.  Visit  us  at  www.spiPortal.com. 
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Every  company  demands 

more 
and  fie 

of  th 


Five  of  Wall  Street’s  most  prestigious  financial  institutions  knew  exactly  what  they  wanted  from  an  enterprise 
solution.  More  productivity,  to  keep  up  with  an  ever>changing  global  market.  And  real-time  flexibility,  to  go  from 
32-  to  64-bit  applications  without  disrupting  their  business.  They  found  both  in  the  AMD  Opteron™  processor 
with  Direct  Connect  Architecture.  It  powers  the  world’s  highest  performing  x86  2-way  and  4-way  servers.  And 


it  helps  speed  up  millions  of  financial  transactions  every  day  in  trading  stations  and  server  farms.  At  AMD.  we  believe  it’s 


criticaJ  that  technology  should  migrate  on  )^ur  terms  to  help  you  realize  your  unique  vision.  It’s  one  of  the  reasons  why  HP. 


IBM  and  Sun  offer  enterprise-class  solutions  powered  by  AMD  Opteron  processors.  Would  you  like  to  learn  just  how  much 


of  a  difference  they  can  make  to  your  company?  Go  to  www.amd.com/enterprise 
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UNLIKE  THE  WILD  HIRING  OF  THE  ’90s. 

the  slow  rebuildii^  of  bare*bone$  IT 
shops  over  the  next  few  years  will 
provide  an  opportunity  to  staff  up 
thou^tfitlly.  It’s  another  chance  to 
^t  diversity  ri^t. 

Lots  of  IT  organizations  talk  about 
diversity,  but  some  are  better  at 
achieving  it  than  others.  We  spoke 
with  representatives  of  five  IT  groups  that  have  been 
repeatedly  dted  as  diversity  leaders  by  the  Black  Data 
Processing  Association  to  discover  how  companies 
can  find,  recruit  and  retain  top  minority  talent  in  IT. 


I  They  all  agreed  on  two  things:  Achieving  diversity 
3  isn’t  quick  or  easy,  and  it  requires  an  oiling,  com- 
I  prehensive  commitment.  “Diversity  is  not  a  one-time 
*  event:  it  is  a  way  of  doing  business,  a  part  of  our  cul- 
S  ture,”  says  George  HaU,  senior  vice  president  of  in¬ 
formation  resources  human  resources  at  Bethesda. 
Md.-based  Marriott  International  Inc. 

“Diversity  is  a  business  strategy,"  says  Andy  Baker, 
senior  manager  of  human  resources  recruitment  and 
selection  at  The  Allstate  Corp.  in  Northbrook.  Ill. 
“Our  company  focuses  on  diversity  across  the  board, 
in  our  succession  management,  recruitment  and 
leadership  development." 

With  t^t  overall  approach  as  the  comext.  here  are 
some  of  the  innovative  tactics  diversity  leaders  use: 

DEDICATE)  STAFF 

Nothii^  says  commitment  like  having  human  re- 
..  sources  staff  dedicated  to  achieving  diversity  in  your 
2_  workforce.  At  Bank  of  America  Corp.  in  Chariotte, 
N.C.,  Melissa  Thompson  is  vice  president  of  staffing 
diversity.  “I  was  hired  by  BOA  in  October  of  last  year 
to  focus  on  diversity  staffing,"  she  says.  “It’s  a  new 
role.  My  job  is  to  focus  on  finding  and  hiring  top  di¬ 
versity  talent  across  the  technology  space." 

PIPELINE  RECRUITING 

It’s  hard  to  be  concerned  with  diversity  if  you’re 
scrambling  to  fill  holes  in  your  organizatioiu  Know¬ 
ing  that,  committed  companies  have  learned  to  look 
ahead.  “We  try  to  anticipate  resource  needs  and  re¬ 
cruit  skills  in  a  proactive  way  rather  than  with  such 
urgency  that  we  can’t  pay  attention  to  the  demo¬ 
graphic  mix  of  our  population,"  says  Greg  Tahvooen. 
vice  president  for  human  resources  at  E>elta  Technol¬ 
ogy  Inc.  in  Atlanta.  Looking  ahead  gives  the  Delta  Air 
Lines  Inc.  subsidiary  the  luxury  grooming  a  pipe¬ 
line  of  talented  miiKirity  people.  “We  look  to  our  fii- 


11ie  B(baMile 

If  you’re  ready  to  really  commit  to  diversity  in  your  IT  shop, 
here’s  how  to  aoiieve  it.  Bv  Kathleen  Met  'n  ii  'ka 
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turc  skill  needs,  and  wc  look  at  developmental  pro- 
itrams  sueh  as  student  intern  programs  to  be  sure  we 
have  the  right  mix  of  folks  in  the  queue  to  select 
from."  he  explains.  Pelta  also  makes  sure  it’s  training 
interns  for  the  K»bs  it  will  need  t«>  fill  when  they're 
ready  to  enter  the  workforce. 

RELATIONSHIP  RECRUITING 

Commitment  to  diversity  JiH'sn't  su>p  when  hiring 
slows  down.  "When  the  supply  side  outstrips  the  de¬ 
mand  side,  it's  extremely  important  to  continue  to 
maintain  relationships"  with  talented  minority  work¬ 
ers.  says  Hall.  To  do  that.  Marriott  relies  on  "relation¬ 
ship  recruiting"  he  explains.  "When  we  don't  have 
the  demands,  our  ass«x*iates,  including  our  manage¬ 
ment  team,  maintain  relationships  with  those  people 
we  would  otherwise  w’ant  to  attract." 

Relationship  recruiting  addresses  the  passive  job 
seekers  Hall  is  ir>’ing  to  connect  with.  “We're  going  af¬ 
ter  the  top  5%  of  the  market,  and  many  of  those  aren't 
actively  seeking  opportunities,  so  the  normal  chan¬ 
nels  don't  reach  them."  he  says. 

But  relationship  recruiting  does. 

For  example,  for  the  past  two 
years.  Hall  has  rruintained  a  rela¬ 
tionship  with  "a  very  senior  indi¬ 
vidual  whom  we  would  love  to 
have"  but  for  whom  no  suitable 
opportunity  has  been  available. 

Hall  phones  the  person,  ex¬ 
changes  e-mails,  meets  for  coffee, 
reports  on  how  things  are  going 
—  stays  in  touch.  "So  if  an  oppor¬ 
tunity  does  (^n  up.  we  don't 
havx*  to  rt'-estabiisb  the  relation¬ 
ship."  he  says.  "It  continues  to 
keep  our  name  out  in  front  of 
people’s  minds." 

EXPLORATORY  INTERVIEWS 

Thompson  uses  what  she  calls 
exploratory  mterviews  to  recruit 
top  minority  talent,  even  during  a 
hiring  slowdown.  "Wc  talk  to 
candidates,  even  though  there  is 
no  position  open,"  she  explains. 

The  exploratory  cycle  begins 
with  a  quarterly  resume  round¬ 
table.  where  managers  go  over 

the  resume  of  candidates  Thompson  hopes  to  re-  i 

emit,  even  though  no  speciOc  positions  may  be  open,  j 
They  tell  her  which  applicants  look  mo.st  promising,  : 
and  she  calls  them  in  and  explains  the  situation.  "1  do  ' 
some  coaching  so  they  understand  that  there  Is  no 
opening,  but  if  they  sell  themselves,  amihing  could 
happen."  she  says.  | 

It  frequently  docs.  "The  managers  often  say.  Well  I 
was  going  to  hire  in  QJ.  but  since  you're  sitting  hero. 

I’ll  hire  you  now.'  “  Thompson  says.  ‘We've  found  it  i 
gets  managers  thinking  outside  the  box.  The  more  1 
exploratory  inten  iews  wv've  done,  the  more  suc¬ 
cesses  we’ve  seen." 

TARGETED  RECRUITING 

Companies  committed  to  diversity  get  to  know  mi¬ 
nority  advocacy  groups.  Merck  and  Co.  participates 
in  the  Society  of  Hispanic  Professional  Engineers 


Inc.,  the  National  Society  of  Black  Engineers  and  the 
Black  Data  Processing  .Association,  says  Michele  T 
I  Ralph,  director  of  information  serx'ices  human  re- 
I  sources  in  Merck's  Rahway.  N.J..  office.  "We  attend 
I  conferences  and  do  a  lot  of  recruiting  there."  she 
I  says.  She  also  maintains  relationships  with  historical- 
i  ly  black  colleges  and  universities  and  uses  Web  sites 
that  cater  to  minorities  for  recruiting. 

Successful  companies  also  tailor  their  messages  to 
their  markets.  "We  try  to  coordinate  our  approach 
with  the  target  audience."  says  Baker.  That  includes 
using  specialized  ads  and  collateral  materials  that  arc 
culturally  relevant  to  the  segments  to  which  he  is  ap¬ 
pealing.  he  explains. 

EMPLOYEE  REFERRAL 

Probably  the  strongest  single  means  of  recruiting  mi¬ 
norities  to  IT  is  through  other  minorities.  “Every'  top 
talent  diversity  candidate  you  hire  will  bring  you  ad¬ 
ditional  top  talents."  says  Thompson. 

Hal!  agrees.  “We  have  found  that  talented  individ¬ 
uals  tend  to  associate  with  other 
talented  individuals.”  he  says. 
“Using  associate  referrals  is  a 
very  impactful  way  to  identify 
candidates.  We  use  it  to  the 
greatest  extent  possible." 

Marriott  has  a  formal  referral 
pnigram  with  cash  awards.  "So 
there  is  responsibility  all  across 
the  business  to  recruit."  Hall  says. 

At  Allstate,  the  employee- 
referral  program  is  used  so  wide¬ 
ly  that  It’s  been  responsible  for 
the  recruiting  of  about  40%  of 
new  hires,  says  Baker.  Allstate 
also  has  a  strong  community 
pa*scnce.  ”1  get  phone  calls  all 
the  lime  from  employees  who 
say.  ‘My  church  is  hosting  an 
event.  Come  and  set  up  a  booth 
about  openings  at  Allstate.'  ** 

Baker  says. 

COMMUNITY  SERVICE 

Through  community  service, 
companies  can  do  good  while  at¬ 
tracting  potential  hires.  At  Mar¬ 
riott.  for  example,  employees  de¬ 
vote  one  workday  each  year  to  causes  such  as  Habi¬ 
tat  for  Humanity  International  Inc..  Children's  Mira¬ 
cle  Network  or  local  events  in  the  surrounding  com¬ 
munities.  “I've  done  everything  from  digging  fence 
posts  to  helping  to  refurbish  a  local  amusement 
park."  Hall  says.  He  notices  that  interest  from  minor¬ 
ity  candidates  usually  increases  markedly  after  these 
activities. 

ACCOUNTABILITY 

Backing  up  diversity  talk  with  real  accountability 
makes  a  difference.  At  Bank  of  America,  diversity 
targets  are  an  integral  pan  of  e.-»ch  manager’s  perfor¬ 
mance  and  compensation  plan.  Thompson  says.  "We  ' 
have  accountability  from  the  CEO  straight  down." 

That  accountability  not  only  affects  the  decisions 
people  make  on  the  job.  she  says,  but  it  also  sends  a  , 
message  to  minority  candidates  that  the  company 
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MM  Haynes,  immediate 
past  president  of  the 
Black  Data  Processing 
Association,  offers  three 
tips  for  recruiting  and 
retaining  black  IT  talent: 

IThe  best  way  is  to  demonstrate 
a  commitment  to  diversity  in  the 
senior  management  ranks.  This  in¬ 
cludes  providing  employees  wrth  role 
models  who  are  visible  and  actively  involved 
in  community  outreach  programs  and  diver¬ 
sity  volunteer  initiatives. 

2RecruH  through  historically  Mack 
colleges  and  universities,  and  asso¬ 
ciations  like  the  BOPA.  These  are 
the  best  places  to  find  highly  qualified 
Afncan-Amencan  candidates. 

3  Provide  competitive  salaries. 

attractive  fringe  benefits  and  open 
access  to  promotion^  opportuni¬ 
ties.  Companies  that  retain  the  best- 
qualified  talent  over  time  understand  that  it's 
very  important  to  do  this. 


means  what  it  says.  "Diversity  candidates  —  and  I 
was  one  —  love  knowing  you  have  that  accountability 
all  through  the  organization  right  to  the  top,"  ^  says. 

The  same  is  true  at  Della  Technology,  where  man¬ 
agers  are  measured  on  their  ability  to  create  and 
maintain  a  diverse  workforce,  says  Tahvonen.  “Our 
performance  standards  allow  an  objective  review  of 
performance."  he  says. 

Progress  is  carefully  measured  at  Marriott,  says 
Hall.  For  example,  over  the  past  five  years,  his  IT  di¬ 
vision  has  increased  its  total  minority  representation 
by  more  than  5%,  although  the  size  of  the  division 
overall  has  decreased  by  14%.  "So  at  a  time  when  our 
head  count  has  gone  dowm.  our  minority  representa¬ 
tion  is  going  up."  he  says.  During  that  period.  Mar¬ 
riott  increased  the  number  of  black  senior-level  tech 
associates  by  more  than  IDO'S  and  promoted  seven  to 
Jircctor-lewl  positions,  he  says. 

Companies  say  that  once  they  begin  to  see  prog¬ 
ress  in  diversity,  others  notice,  and  then  it  snowballs. 
“External  rcctjgniiion  helps."  says  Baker.  "When 
we're  named  a  top  company  for  diversity,  people  see 
that."  Hall  agrees.  “Marrititi  has  been  recognized  by 
organizations  like  BDPA.  and  that  helps  us  reach  po¬ 
tential  candidates.  Generally,  the  number  of  e-mails 
and  phone  calls  from  interested  candidates  will  in¬ 
crease  because  they  read  the  articles."  O  49738 
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tute  skill  needs,  and  we  look  at  developmental  pro¬ 
grams  such  as  student  intern  programs  to  be  sure  we 
have  the  right  mix  of  folks  in  the  queue  to  select 
from,”  he  explains.  Delta  also  makes  sure  it’s  training 
interns  for  the  jobs  it  will  need  to  fill  when  they're 
ready  to  enter  the  workforce. 

RHATIONSHr  RECmjmN6 

Commitment  to  diversity  doesn't  stop  when  hiring 
slows  down.  ‘'When  the  supply  side  outstrips  the  de¬ 
mand  side,  it's  extremely  important  to  continue  to 
maintain  relationships"  with  taleiued  minority  work¬ 
ers,  says  Hall  To  do  that.  Marriott  relies  on  “relation¬ 
ship  recruitmg"  he  explains.  “When  we  don't  have 
the  demands,  our  associates,  including  our  manage¬ 
ment  team,  maintain  relationships  with  those  people 
we  would  otherwise  want  to  attract.* 

Relationship  recruiting  addresses  the  passive  job 
seekers  Hall  is  trying  to  connect  with.  “We're  going  af¬ 
ter  the  top  S%  of  the  market,  and  many  of  those  aren't 
activety  seeking  opportunities,  so  the  normal  chan¬ 
nels  don't  reach  t^m.*  be  says. 

But  relatioRship  recruiting  does. 

For  example,  for  the  past  two 
years.  Hall  has  maintained  a  rela¬ 
tionship  with  “a  very  senior  indi¬ 
vidual  whom  we  would  love  to 
have”  but  for  whom  no  suitable 
(^)portunity  has  been  available. 

Hall  i^Kmes  the  person,  ex¬ 
changes  e-mails,  meets  for  oofifee, 
reports  on  how  thinga  are  going 
—  stays  in  touch.  “So  if  an  oppor¬ 
tunity  does  open  up.  we  don't 
have  to  re-establish  the  relation¬ 
ship.*  be  says.  “It  continues  to 
keep  our  name  out  in  front  of 
people’s  minds.* 

EXnjOlUTOirr  ilTERV»l6 

Thompson  uses  what  she  call* 
exploratory  interviews  to  recnih 
top  minority  talent,  even  during  a 
hiring  slowdown.  “We  talk  to 
candidates,  even  though  there  is 
no  positioa  open.*  she  explains. 

exploratory  cycle  begins 
with  a  quarterly  r^um^  round¬ 
table,  iriiere  managers  go  over 
the  risuiDM  of  candidates  Thompson  hopes  to  re- 
cniit.  even  tbou^  no  specific  positions  may  be  open. 
They  tell  her  which  applicants  locA  most  promising, 
and  she  calls  them  in  uid  explains  the  situation.  "I  do 
some  coachii^  so  they  understand  that  there  is  no 
opening,  but  if  they  sell  themselves,  anything  could 
happen.”  she  says. 

It  frequently  does.  “Hie  manors  often  say.  Well  I 
was  going  to  hire  in  Q3,  but  since  you're  sitting  here, 
m  hire  you  now,'  *  Thompson  says.  “We've  found  it 
gets  managers  thinking  outside  the  box.  The  more 
exploratory  interviews  we've  done,  the  more  suc¬ 
cesses  we've  seen." 

TMMETEDRECmimNO 

Companies  committed  to  diversity  get  to  know  mi- 
Dority  advocacy  groups.  Merck  and  Ca  participates 
in  the  Society  of  Hispanic  Professional  Engineers 
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Inc.,  the  National  Society  of  Black  Engineers  and  the 
Black  Data  Processing  Association,  says  Michele  T. 
Ralph,  director  of  information  services  human  re¬ 
sources  in  Merck's  Rahway.  N.J.,  office.  “We  attend 
conferences  and  do  a  lot  of  recruiting  there,"  she 
says.  She  also  maintains  relationships  with  historical¬ 
ly  black  colleges  and  universities  and  uses  Web  sites 
that  cater  to  minorities  for  recruiting. 

Successful  companies  also  tailor  their  messages  to 
their  markets.  "We  try  to  coordinate  our  approach 
with  the  target  audience,"  says  Baker.  That  includes 
using  specialized  ads  and  collateral  materials  that  are 
culturally  relevant  to  the  segments  to  which  he  is  ap¬ 
pealing,  he  explains. 

EMPLOVEE  REFERRAL 

Probably  the  strongest  single  means  of  recruiting  mi¬ 
norities  to  IT  is  through  other  minorities.  “Every  top 
talent  diversity  candidate  you  hire  will  bring  you  ad¬ 
ditional  top  talents,"  says  Thompson. 

Hall  agrees.  “We  have  found  that  talented  individ¬ 
uals  tend  to  associate  with  other 
talented  individuals,*  he  says. 
“Using  associate  referrals  is  a 
very  impactful  way  to  identify 
candidates.  We  use  it  to  the 
greatest  extent  possible." 

Marriott  has  a  formal  reforral 
program  with  cash  awards.  ‘'So 
there  is  responsibility  all  across 
the  business  to  recruit,"  Hall  says. 

At  Allstate,  the  employee- 
referral  program  is  u^  so  wide¬ 
ly  that  it's  been  responsible  for 
the  recruitii^  of  about  40%  of 
new  hires,  says  Baker.  Allstate 
also  has  a  strong  community 
presence.  “I  get  phone  palk  all 
the  time  from  employees  who 
say.  'My  dnirch  is  hosting  an 
event  Come  and  set  up  a  booth 
about  openings  at  Allstate.' " 

Baker  says. 

COMMUNITY  SERVICE 

Through  community  service, 
companies  can  do  good  while  at¬ 
tracting  potential  hires.  At  Mar- 
rion.  for  example,  employees  de¬ 
vote  one  workday  each  year  to  causes  such  as  Habi- 
ut  for  Humanity  International  Inc,  Children’s  Mira¬ 
cle  Netwoik  or  local  events  in  the  surroundir^  com¬ 
munities.  *Tve  done  everything  from  digging  fence 
posts  to  helping  to  refurbish  a  local  amusement 
park,*  Hall  says.  He  notices  that  interest  from  minor¬ 
ity  candidates  usually  increases  markedly  after  these 
activities. 

ACCOUNTABHJTY 

Backing  up  diversity  talk  with  real  accountability 
makes  a  difference.  At  Bank  of  America,  diversity 
targets  are  an  integral  part  of  each  manager's  perfor¬ 
mance  and  compensation  plan.  Thompson  says.  “We 
have  accountab^ty  from  the  CEO  straight  dowa” 

That  accountability  not  only  affects  the  decisions 
people  make  on  the  job.  she  says,  but  it  also  sends  a 
message  to  minority  candidates  that  the  company 
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means  what  it  says.  “Diversity  candidates  —  and  I 
was  one  —  love  knowing  you  have  that  accountability 
all  throu^  the  organization  right  to  the  top,*  she  says. 

The  same  is  true  at  Delta  Technolt^,  where  man¬ 
agers  are  measured  on  their  ability  to  create  and 
maintain  a  diverse  workforce,  says  Tahvonen.  “Our 
performance  standards  allow  an  objective  review  of 
performance,"  he  says. 

Prepress  is  carefully  measured  at  Marriott,  says 
Hall.  For  example,  over  the  past  five  years,  his  IT  di¬ 
vision  has  increased  its  total  minority  representation 
by  more  than  5%.  although  the  size  erf  the  division 
overall  has  decreased  by  14%.  “So  at  a  time  when  our 
head  count  has  gone  down,  our  minority  representa¬ 
tion  is  going  up."  be  says.  During  that  period  Mar¬ 
riott  increased  the  number  of  black  senior-level  tech 
associates  by  more  than  100%  and  promoted  seven  to 
director-level  positions,  he  says. 

Companies  say  that  once  they  begin  to  see  prog¬ 
ress  in  diversity,  others  notice,  and  then  it  snowballs. 
“External  recognition  helps."  says  Baker.  “When 
we're  named  a  top  company  for  diversity,  people  see 
that"  Hall  agrees.  “Marriott  has  been  recognized  by 
organizations  like  BDPA.  and  that  helps  us  reach  po¬ 
tential  candidates.  Generally,  the  nunfoer  of  e-mails 
and  phone  calls  from  interested  wiQ  in¬ 

crease  because  they  read  the  articles.”  Cl  4B730 


Don’t  Miss  The  IT  Event  Of  The  Year! 


JOIN  THE  ITIL 
REVOLUTION' 


Attend  this  event  and  we  II 
show  you  how  to  use  the 
best  practices  found  in  the 
Information  Technology 
Infrastructure  Library  (ITIL)  - 
the  world's  most  credible  IT 
service  management 
framework  -  to  '  revolutionize 
your  IT  organization. 

But,  you  don  t  have  to  take 
our  word  for  it.  Aireadv 
tens  of  thousands  of  IT 
professionals  from  world 
class  organizations  have 
experienced  powerful  resuitsl 
Now,  it's  voui  turnl 

If  vou  re  new  to  ITIL  and  want 
to  learn  about  it,  contacl  P'e« 
Elephant  today, 

ARE  YOU  READ  - 
'OCHANGl 
VOUR  IT  WORLD 


Now  in  its  9th  successful 
year,  this  conference  teatuies 
9  tracks  vdth  over  8o  sessions, 
including  more  case  studies 
than  ever  before. 


9th  Annual  International 

IT  Service  Management 
Conference  &  Exhibition 

Orlando  February  6 -9, 2005 


Exclusive  Keynote! 

'  *  Sir  Tim  Berners-Lee 

Inventor oftheWorid  Wide  Web 

^  i  Named  One  OfTime  Magazine’s  wo 

Greatest  Minds  Of  The  20th  Century 


CffXNTH  THC  WoKId): 
.ItllN  THJ  ITIL  RI  NOIL  (TUN 


Pink  Elephant  is  a  world  leader 
in  ITIL  Education,  Consulting  and  Managed  Services 


t  888  L'T  PiNh 


5  1 

'  MnKMKO’  ””  ““ 

1  f 

• 

®  assystV 

s 

"  fl^Range'T'  tPeregnre! 

34 


awnmu  •M>a.iN4 


MAIUSEMENT 


Miww-computenworldcom 


EXEC  TRACK 


National  Medical 
Taps  Masters,  Hall 

Nrtontf  IMeal  HidHi  Cvd 
aydm  Inc.  to  tat  MMnglan. 
HYn  nM  I  has  namad  haaMi 
CMaMudryialarMBaiUS- 
TCRS  CIO.  Mailva  tafl  ovanae 
tfia  eaaiMiiy’K  IT  Mraahuctura 
«d  advanea  itmaa  of  IT  l» 
draawInaaaiuiattoninlMlidioit. 
Priorlo  ioMv  NHHC.  yadvs 
WM  wa  pnanani  oi  naann  cva 
baafema  Mfafiena  al  CVS  Carp. 
Mb  taaa  aha  haU  aanior  rr  poah 
lien  d  MUM  0n«  Skiraa  kK.. 
IMa  AM  Carp,  aid  Baglay  Ce.  T)ia 
eonpai 
HALLp 


fllAM  iMnagamant  aefiMara. 


N.Y.  Times  Names 
IhunnltsCK) 

naNawtali'nmaaCa.aa- 
neinead  Ihd  QAVD  A.  IMUmi 
dpapraaMaatlariadaddada- 
vdopmaal.  hia  baaa  aaniad  CIO 
dAaconpaayand  IhaMnr 
VMr  naav  aampapar.  Ha  wM 
riparttoUenaidP.tainan.aa- 
aaiOMa  dee  pradtont  «d  dM 
toandd  dlaar,  and  to  Scott 

nMHBntfSMift  pmnma  w 

gMord  managv  tor  fto  Naur 
Ymk  71mm.  Thuria  «■  eonlinua 
to  ba  imponatoto  tor  airafiaatog 
toe  condniettoii  and  daeatop 
■ant  af  toe  company's  new 
haaitoaertan  to  bhrtodtw  and 
torotoarbHNdbiggretocta.Pmvl- 
eudy,  be  aarmd  as  cMd  operat¬ 
ing  alBear  tor  Now  tab  Timas 


Christopherson  CTU 
At  Health  Lai^uage 

Had*  Unguiw  biCL.  a  suppiw 
d  meded  tocfinotogy  in  Aurora, 
CohL.  anneanood  tod  JOHN 
CHRBTOPNBBON  has  bean 
israo  as  cmai  iscnnoiogy  omuai. 
Prior  to  Inbdng  HU  Ctototoptar- 
son  was  dee  prasMint  of  appica- 
tien  arddtoctora  d  MeNaaon 
Praiddv  ladMotogtos.  He  Us  ^ 
sennd  SB  vIm  preddad  d  corpi^ 
rate  systome  d  UrdtadMealthcare. 


BARBARA  GOMOLSKI 

What  to  Tell 
The  Kids 


A  GROUP  OF  COLLEAGUES  and  I  were 

talking  during  a  conference  call  the  other 
day  about  the  IT  job  market.  Many  of  us 
have  kids  who  are  starting  to  think  about 
colleges  and  professions.  Someone  asked 
the  group,  “Would  you  advise  your  kid  to  go  into  IT  to¬ 
day?”  The  majority  of  people  on  the  call  said  no.  This  is 
just  anecdotal  evidence  of  what  is  blatantly  obvious  to 


most  of  us:  The  job  maritet 
for  IT  professionals  isn’t 
what  it  used  to  be. 

Let  me  be  clear.  Hie 
tenor  of  that  recent  call 
with  my  colleagues  was  not 
totally  negative  toward  IT 
careers.  Many  of  the  peo¬ 
ple  on  the  call  said  they 
wouldn't  discourage  their 
kids'  interest  in  IT.  These 
parents  would  strongly 
caution  their  children 
about  their  course  of  study, 
howevec  They  would  ad¬ 
vise  their  kids  to  be  very 
clear  about  what  they  wanted  to  do  in 
IT  rather  than  just  assume  that  their 
computer  science  degrees  would  open 
all  doors. 

To  be  sure,  tl^re  are  fewer  IT  posi¬ 
tions  available  today  than  there  were 
just  Hve  years  ago  if  we  consider  tradi¬ 
tional  IT  roles,  such  as  inl^tnicture 
management,  support  and  program¬ 
ming.  What's  more,  the  jobs  that  are 
available  in  IT  increasingly  require 
skills  that  aren't  taught  as  part  of  the 
computer  science  curriculum.  This 
is  in  stark  contrast  to  when  I  graduat¬ 
ed  from  college.  All  the  computer 
science  majors  I  knew  had  secured 
high-paying  jobs  at  Fortune  100  firms 
prior  to  graduation. 

But  the  changes  in  the  IT  job  market 
affect  all  IT  professionals,  not  just 


those  new  to  the  field.  So, 
what  are  the  chief  differ¬ 
ences  today?  Here’s  how  I 
see  it: 

■  The  days  of  studying 
computer  science,  getting 
an  entry-level  job  as  a  pro¬ 
grammer  and  moving  up 
the  IT  ladder  are  gone. 
First  of  aU.  there  are  fewer 
programming  jobs  avail¬ 
able  DOW,  because  of  off¬ 
shore  outsourcing. 

Second,  we  can  no 
longer  assume  that  a  gener¬ 
al  computer  science  degree 
is  going  to  prepare  graduates  for  the  IT 
job  market.  Certainly,  some  firms  are 
still  hiring  new  talent  through  the  pro¬ 
gramming  ranks,  but  this  process  is 
not  nearly  as  common  as  it  used  to  be. 

>  As  a  result  of  automation  and  the 
spread  of  consumer  IT.  we  don’t  need 
as  many  people  as  we  once  did  to 
manage  IT  systems.  Technology  is 
more  standardized,  and  end  users  are 
more  familiar  with  technology. 

■  The  increasing  pace  of  business, 
industry  consolidation  and  globaliza¬ 
tion  means  that  most  of  us  will  move 
from  company  to  company  during  our 
careers.  AU  professionals  —  not  just 
those  in  IT  —  will  gather  the  skills 
they  need  from  multiple  employers. 

The  IT  job  market  is  not  all  bad 
news,  though.  There  are  opportunities 


in  certain  areas,  and  even  growth. 
Here  are  some  of  them: 

Burinw  precaas  desiiyi  and  managemenL 
Business  process  design  —  something 
n  has  always  been  expert  at  —  is 
starting  to  surface  as  a  new  competen¬ 
cy  for  IT  professionals.  Their  prowess 
at  process  design  comes  from  getting 
to  see  entire  business  processes  as 
they  build  IT  systems.  Enterprising  IT 
professionals  are  capitalizing  on  this 
by  driving  process  improvement  in 
their  own  organizations  and  making 
process  design  and  management  a  l^y 
part  of  their  jobs. 

Informdon  managwnent  Companies  are 
generating  more  and  more  data  about 
their  customers,  partners  and  com¬ 
petitors.  Organizations  are  going  to 
need  individuals  who  can  help  turn 
this  data  into  usable  information.  This 
includes  experts  in  customer  relation¬ 
ship  man^ment.  business  intelli¬ 
gence  and  search  technologies. 

RotolionM#  Old  vendor  nonagainanL  As 
the  roultisourced  IT  environment  has 
gained  ground,  it  has  become  clear 
that  IT  organizations  need  people  who 
can  negotiate  and  manage  contracts 
and  who  can  help  select  and  manage 
IT  service  provider  partners. 

FmaUy,  traditional  IT  jobs  (such  as 
programming  and  infrastructure  man¬ 
agement)  are  not  going  away.  Though 
there  may  be  fewer  of  them.  we'U  stiU 
need  people  in  these  positions  for  the 
foreseeable  future. 

The  IT  job  market  is  changing,  and 
it  can  appear  bleak.  But  I’m  actually 
pretty  optimistic  about  the  prospects 
for  IT-sawy  professionals.  However, 
future  IT  job  seekers  will  need  to  do 
more  than  study  computer  science  at  a 
reputable  coil^  to  succeed.  O  49732 
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Thrifty  Storage  Strategies 

To  maximize  storage  savii^, 
Glenn  Exline  and  other  IT  pros 
are  homing  in  on  long-term 
planning  initiatives.  PAGE  36 


I  ^ 

Secondhand  t _ \ 

Savings 

Buyii^  used  storage  equipment  is 
cheaper  than  buying  new.  But  there 
are  risks  involved.  PAGE  40 
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Long  Live  Tape 

Columnist  Marie  Hall  was  planning  to  write 
about  the  impending  demise  of  tape.  But 
then  he  looked  a  bit  closer  and  discovered 
that  it  has  a  bright  future.  PAGE  46 


Stretching 

Your  Storage 

Cost-effective  strat^es  1 1 

to  help  you  cope  with  I  lagl  1^1  W 
soaring  demands.  4^ 


EDITOR’S  NOTE 


Lets  take  it  by  the  numbers:  When  S^e 
Research  asked  104  executives  which  tech¬ 
nology  areas  are  the  greatest  sources  of  pain 
in  their  organizations,  they  ranked  security 
No.  1  (no  siuprise  there)  and  stora^  No.  2. 

Why  is  storage  so  painful?  Maybe  it's  because  stor¬ 
age  demand  is  doubling  every  year  and  IT 
budgets  certainly  aren’t  An  IDC  study  says 
the  demand  is  fueled  by  growth  in  e-mail, 
data  warehousing  and  CRM,  not  to  mention 
r^ulatory  requirements.  The  effort  to 
archive  boatloads  of  e-nuul  (with  those  giant 
attachments)  is  especially  costly:  The  Yan¬ 
kee  Group  says  a  typical  corporation  with 
5.000  employees  accumulate  neatly  4TB 
of  e-mail  every  year,  thus  requiring  the  services  of  at 
least  one  full-time  storage  administrator! 

This  helps  to  explain  why,  in  an  exclusive  survey 
of  91  IT  executives.  ComputerMforld  found  that  the 
top  three  stor^e  headaches  are  data  growth,  cost 


I  and  insufficient  staffing.  This  special  report  tackles 
I  the  issue  in  the  middle  —  cost  —  by  identifyii^ 

I  thrifty  strategies  for  the  storage  manager,  ftom 
I  big-picture,  long-term  plans  that  reduce  the  total 
I  cost  of  ownership  to  short-term  ideas  like  buying 

1  secondhand  gear. 

Our  survey  also  found  that  the  top- 
of-mind  storage  topics  for  the  next  few 
months  are  disaster  recovery  and  stoi^e 
security,  which  means  we’ve  _ 

come  fhll  circle:  Security 
and  storage  are  the  top  tech- 
nology  issues  in  the  IT  field 
today,  no  question  about  it 
049614 

I  Mitch  Betts  is  Computer- 

I  worid's  executive  e^or.  ^ 
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Natkmai  Medical 
Taps  Masters,  Hall 

National  MsdcaJ  Health  Card 
Systems  Inc.  in  Perl  Washington. 
N.Y..  saM  R  has  named  health 
care  industry  veteran  BRl  MAS¬ 
TERS  CIO.  Masters  ovil  oversee 
the  comparry's  fT  infrastructure 
and  advance  its  use  of  fT  to 
streamine  acquisition  integraliort. 
Prior  to  Joining  NMHC,  Masters 
eras  vice  prasadent  of  health  care 
business  solutions  at  CVS  Corp. 
He  has  also  haU  sanior  IT  posi¬ 
tions  at  Roiiaiilo  Drug  Slor»  Inc.. 
Rite  Aid  Corp.  and  Begley  Co.  The 
company  also  appointed  AGNES 
HAU  presadant  of  Inlegrait. 
NMHC*s  Mormatics  company, 
which  daBveis  heaWi  care  bane- 
IH/risk  management  software. 


N.Y.  Tunes  Names 
ThurmHsCIO 

The  New  Vbrfc  Tenn  Co.  an¬ 
nounced  that  DAVID  A.  THURM. 
vicapresadentforrealestatedt* 
velopment.  has  been  named  CIO 
of  the  company  and  The  New 
folk  Times  newspaper.  He  wMI 
report  to  Leonard  P.  Forman,  ei- 
acuthre  vice  president  arad  chief 
fnandat  officer,  and  to  Scott 
Heefun-Canedy.  president  and 
general  manager  for  TheNnv 
Yoik  Tinas.  Thurm  wH  continue 
to  be  responsible  tor  overseeing 
the  construction  and  devetop- 
mant  of  the  company's  new 
headquarters  in  Manhattan  aiMl 
tor  other  building  projects.  Previ¬ 
ously.  he  served  as  chief  operat¬ 
ing  officar  tor  New  York  Times 
OigitaL 


Christopherson  CTO 
At  Health  Language 

Health  Language  Inc.,  a  supplier 
of  meiieaJ  tacfvwfogy  in  Aurora. 
Colo.,  announced  that  JOHN 
CHRISTOPHERSON  has  been 
head  as  chief  technology  officer. 
Prior  to  Joining  HU.  Chrtotopher- 
son  was  vice  presideni  of  applica¬ 
tion  architecture  at  McKesson 
Pravidsr  Technologies.  He  has  also 
served  as  vice  president  of  corpo¬ 
rate  systems  at  Ur^Healthcare. 


BARBARA  GOMOLSKI 

What  to  Tell 
TTieJQds 


A  GROUP  OF  COLLEAGUES  and  I  were 

talking  during  a  conference  call  the  other 
day  about  the  IT  job  market.  Many  of  us 
have  kids  who  are  starting  to  think  about 
colleges  and  professions.  Someone  asked 
the  group,  “Would  you  advise  your  kid  to  go  into  IT  to¬ 
day?”  The  majority  of  people  on  the  call  said  no.  This  is 
just  anecdotal  evidence  of  what  is  blatantly  obvious  to 


mi>st  of  us;  The  job  market 
for  IT  professionals  isn’t 
what  it  used  to  be. 

Let  me  be  clear.  The 
tenor  of  that  recent  call 
with  my  colleagues  was  not 
totally  negative  toward  IT 
careers.  Many  of  the  peo¬ 
ple  on  the  call  said  they 
wouldn't  di.scourage  their 
kids’  interest  in  IT.  These 
parents  would  strongly 
caution  their  children 
about  their  course  of  study, 
however.  They  would  ad¬ 
vise  their  kids  to  be  very 
clear  about  what  they  wanted  to  do  in 
IT  rather  than  just  assume  that  their 
computer  science  degrees  would  open 
all  doors. 

To  be  sure,  there  are  fewer  IT  posi¬ 
tions  available  today  than  there  were 
just  five  years  ago  if  we  consider  tradi¬ 
tional  IT  roles,  such  as  infrastructure 
management,  support  and  program¬ 
ming.  What’s  more,  the  jobs  that  are 
available  in  IT  increasingly  require 
skills  that  aren't  taught  as  part  of  the 
computer  science  curriculum.  This 
is  in  stark  contrast  to  when  1  graduat¬ 
ed  from  college.  All  the  computer 
science  majors  I  knew  had  secured 
high-paying  jobs  at  Fortune  100  firms 
prior  to  graduation. 

But  the  changes  in  the  IT  job  market 
affect  all  IT  professionals,  not  just 


i 


those  new  to  the  field.  So, 
what  are  the  chief  differ¬ 
ences  today?  Here’s  how  I 
sec  it: 

■  The  days  of  studying 
computer  science,  getting 
an  entry-level  job  as  a  pro¬ 
grammer  and  moving  up 
the  IT  ladder  are  gone. 
First  of  alL  there  are  fewer 
programming  jobs  avail¬ 
able  now,  because  of  off¬ 
shore  outsourcing. 

Second,  we  can  no 
longer  assume  that  a  gener¬ 
al  computer  science  degree 
is  going  to  prepare  graduates  for  the  IT 
job  market.  Certainly,  some  firms  are 
still  hiring  new  talent  through  the  pro¬ 
gramming  ranks,  but  this  process  is 
not  nearly  as  common  as  it  used  to  be. 

■  As  a  result  of  automation  and  the 
spread  of  consumer  IT.  we  don’t  need 
as  many  people  as  we  once  did  to 
manage  IT  systems.  Technology  is 
more  standardized,  and  end  users  are 
more  familiar  with  technology. 

■  The  increasing  pace  of  business, 
industry  consolidation  and  globaliza¬ 
tion  means  that  most  of  us  will  move 
from  company  to  company  during  our 
careers.  All  professionals  —  not  just 
those  in  IT  —  will  gather  the  skills 
they  need  from  multiple  employers. 

Tile  IT  job  market  is  not  all  bad 
news,  chough.  There  arc  opportunities 


in  certain  areas,  and  even  growth. 
Here  are  some  of  them: 

Business  proces  design  and  management. 
Business  process  design  —  something 
IT  has  always  been  expert  at  —  is 
starting  to  surface  as  a  new  competen¬ 
cy  for  IT  professionals.  Their  prowess 
at  process  design  comes  from  getting 
to  see  entire  business  processes  as 
they  build  IT  systems.  Enterprising  IT 
professionals  are  capitalizing  on  this 
by  driving  process  improvement  in 
their  own  organizations  and  making 
process  design  and  management  a  key 
part  of  their  jobs. 

Intormation  management.  Companies  are 
generating  more  and  more  data  about 
their  customers,  partners  and  com¬ 
petitors.  Organizations  are  going  to 
need  individuals  who  can  help  turn 
this  data  into  usable  information.  This 
includes  experts  in  customer  relation¬ 
ship  management,  business  intelli¬ 
gence  and  search  technologies. 

RetatioRship  and  vendor  management.  As 
the  multisourced  IT  environment  has 
gained  ground,  it  has  become  clear 
chat  IT  organizations  need  people  who 
can  negotiate  and  manage  contracts 
and  who  can  help  select  and  manage 
rr  service  provider  partners. 

Finally,  traditional  IT  jobs  (such  as 
programming  and  Infrastructure  man¬ 
agement)  are  not  going  away.  Though 
there  may  be  few’er  of  them,  we’ll  still 
need  people  in  these  positions  for  the 
foreseeable  future. 

TTie  IT  job  market  is  changing,  and 
it  can  appear  bleak.  But  I’m  actually 
pretty  optimistic  about  the  prospects 
for  IT-sawy  professionals.  However, 
future  IT  job  seekers  will  need  to  do 
more  than  study  computer  science  at  a 
reputable  college  to  succeed.  O  49732 
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Thrifty  Storage  Strategies 

To  maximize  storage  savings. 
Glenn  Exlinc  and  other  IT  pros 
are  homing  in  on  long-term 
planning  initiatives.  PAGE  36 


Secondhand 

Savings 

Buying  used  storage  equipment  is 
cheaper  than  buying  new.  But  there 
arc  risks  involved.  PAGE  40 
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Long  Live  Tape 

Columnist  Mark  Hall  was  planning  to  write 
about  the  impending  demise  of  tape.  But 
then  he  looked  a  bit  closer  and  discovered 
that  it  has  a  bright  future.  PAGE  46 
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EDITOR'S  NOTE 


Lets  take  rr  by  the  numbers:  When  Sage 
Research  asked  104  executives  which  tech¬ 
nology  areas  are  the  greatest  sources  of  pain 
in  their  organizations,  they  ranked  security 
No.  1  (no  surprise  there)  and  storage  No.  2. 

Why  is  storage  so  painful?  Maybe  it's  because  stor¬ 
age  demand  is  doubling  every  year  and  IT 
budgets  certainly  aren’t.  An  IDC  study  says 
the  demand  is  fueled  by  growth  in  e-mail, 
data  warehousing  and  CRM.  not  to  mention 
regulatory  requirements.  The  effort  to 
archive  boatloads  of  e-mail  (with  those  giant 
attachments)  is  especially  costly:  The  Yan¬ 
kee  Group  says  a  typical  corporation  with  I 
5.000  employees  v^l  accumulate  nearly  4TB 
of  e-mail  every  year,  thus  requiring  the  services  of  at 
least  one  full-time  storage  administrator! 

This  helps  to  explain  why,  in  an  exclusive  survey 
of  91  IT  executives.  Computerworld  found  that  the 
top  three  storage  headaches  are  data  growth,  cost 
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and  insufficient  staffing.  This  special  report  tackles 
the  issue  in  the  middle  —  cost  —  by  identifying 
thrifty  strategies  for  the  storage  manner,  from 
big-picture,  long-term  plans  that  reduce  the  total 
cost  of  ownership  to  short-term  ideas  like  buying 
secondhand  gear. 

Our  survey  also  found  that  the  lop- 
of-mind  storage  topics  for  the  next  few 
months  arc  disaster  recovery  and  storage 
security,  which  means  we’ve 
come  full  circle:  Security 
and  storage  are  the  top  tech- 
nology  issues  in  the  IT  field 
today,  no  question  about  it. 

0498t4 


•  Mitch  Betts  is  Computer- 
j  world 's  executive  editor. 

I  Contact  him  at  mitch_bett$ 
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Long-term 
planning  is 
the  ticket  to 


big  savings. 

By  Drew  Robb 


There  are  dozens  of  ways 
you  can  shave  a  little  here 
and  a  little  there  when  it 
comes  to  overall  storage 
costs.  But  at  the  end  of  the 
day,  storage  b  sdll  going  to 
be  a  whopping  part  of  you  bu(^t 
That's  wl^  companies  that  are  serious 
about  real  savings  take  a  long-term 
strategic  view  and  push  their  plans 
through  to  completion. 

Take  the  case  of  Cisco  Systems  Inc. 
Utilization  of  just  20%  to  30%  on  a  di¬ 
rect-attached  storage  architecture  was 
costing  a  fortune.  “T^ith  no  accurate 
method  for  tracking  consumption  and 
no  way  to  plan  for  growth,  our  storage 
spending  grew  out  of  hand  between 
2000  and  2002.”  says  Bill  Williams. 


manager  of  enterprise  stor^e  opera¬ 
tions.  “That’s  why  we  decided  to  focus 
on  achieving  a  consolidated  stor^e 
model  to  raise  utilization  levels  and 
lower  TCO.” 

In  a  relatively  short  time,  the  compa¬ 
ny  has  taken  major  strides  toward 
achieving  that  goal  In  2001,  Cisco’s 
750TB  of  data  was  almost  all  direct- 
attached  storage,  with  a  few  storage- 
area  network  islands  interspersed 
Today,  Cisco  has  2J  petabytes  of  man¬ 
aged  data,  but  only  20%  of  that  is  di¬ 
rect-attached  storage;  S5%  is  on  a  Fibre 
Channel  SAN,  and  25%  is  network- 
attached  storage.  This  shift  involved 
migratii^  nearly  1  petabyte  of  data  to 
Cisco’s  MDS  9500  Series  Multilayer 
Directors  and  consoUdatir^  80  smaller 


EMC  Corp.  frames  to  eight  large  ones. 

Cisco’s  e}q>erience  is  far  from  un¬ 
common.  Escalating  storage  costs 
are  pushing  most  companies  to  look 
for  cost-saving  and  -avoidance  strate¬ 
gies.  While  some  save  cents  here  and 
there  on  quick  fixes,  the  real  savings 
come  through  long-term  planning. 
Large  organizations,  in  particular,  are 
finding  that  the  sheer  volume  of  data 
that  exists  in  disparate  systems  neces¬ 
sitates  the  rearchitecting  of  the  storage 
infrastructure. 

Taking  the  Long  View 

By  consolidating  storage  and  migrating 
to  networked  storage,  Cisco  has  taken 
annual  total  cost  of  ownership  from  40 
cents  per  megabyte  to  10  cents  per 
megabyte,  says  Williams.  And  there 
may  still  be  room  for  improvement. 
Cisco  has  a  target  of  8  cents  per 
megabyte  this  year. 

Other  organizations  are  takii^  a 
similarly  long-range  view  to  slash  their 
storage  budgets.  The  45tb  Space  Wing 
of  the  U3.  Air  Force,  for  example,  ex¬ 
perienced  problems  with  its  dh^- 
attached  storage  architecture.  Backups 
were  slow,  systems  took  too  long  to  re¬ 
cover,  and  performance  suffered  badly. 

The  4Stb  Space  has  spent  the 
past  several  years  implementing  a  cen¬ 
tralized  storage  environment  consist¬ 
ing  of  BrightStor  Enterprise  Backup 
software  from  Computer  Associates 
International  Inc.  and  storage  hard¬ 
ware  from  Brocade  Communications 
Systems  Inc.,  EMC  and  Exabyte  Corp. 
By  pooling  storage  in  large  reposito¬ 
ries,  capacity  increased  by  600%  to 
65TB,  file  and  print  servers  were 
reduced  by  33%,  and  backup  times 
decreased  by  83%. 

“From  12  hours  per  night  for  backi^ 
we  are  down  to  four  hours,”  says  Gleim 
Exline,  manager  of  advanced  technolo¬ 
gy  at  P^ck  Air  Force  Base.  The  eco¬ 
nomic  payoff  has  been  impressive. 

The  costs  to  date  have  totaled  about 
SL4  million,  he  says,  while  the  savings 
are  about  $2  million. 

To  prevent  storage  costs  from  mush¬ 
rooming,  Exline  stresses  understand¬ 
ing  the  specific  SAN  desigiL  Almost  all 
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Sage  advice  for  protecting 
corporate  assets  in  a 
dangerous  world. 


Introduction 


The  Grand  Challenges 

Arfcent  surv[-:y  of  io4  executives  fingered  IT  securi¬ 
ty  as  the  No.l  technology  pain  point  in  corporations. 
Why?  For  one  thing,  the  threats  come  in  many  forms 
and  from  many  directions:  disgruntled  employees, 
fired  employees,  clueless  employees  who  succumb  to  social  en¬ 
gineering.  passwords  left  on  Post-it  notes,  wide-open  instant 
messaging  and  increasingly  powerful  hacker  tools  in  the  hands 
of  teenagers. 

report  by  The  Y;inkco  Group.  'I'he  re- 


'•Comp.inics  must  understund  th;it 
the  corporate  perimeter  dissolved 
with  the  very  first  Internet  eonnee- 
tion."  says  Lynne  Ellyn,  lead  author  of 
a  security  report  from  Cutter  Consor¬ 
tium  in  Arlington.  Mass.  "Every  husi- 
ness-io-business  supply  chain  con¬ 
nection.  every  Internet  storefront, 
every  reverse  auction  that  a  company 
puts  into  operation  opens  the  corpo¬ 
ration's  virtual  doors.  Once  connect¬ 
ed  to  the  World  Wide  Web  or  the  In¬ 
ternet.  a  company  actively  iKcupies  a 
virtual  space  that  is  pet^pled  with  com¬ 
petitors.  terrorists,  children,  environ¬ 
mentalists.  lawyers  —  every  segment 
of  societ)-  —  or.  actually,  every  seg¬ 
ment  of  nearly  every  stKiety  on  earth." 

New  security  and  privacy  laws  are 
being  passed,  and  the  risk  of  cyberter¬ 
rorism  looms.  Plus  there  are  seeming¬ 
ly  mundane  issues;  The  telecommuter 
working  at  his  kitchen  table  from  a 
home  PC  —  connected  to  your  corpo¬ 
rate  network  —  c«>uld  be  the  weakest 
link  in  your  security  defenses.  "We 
got  hit  with  the  Blaster  worm  when  a 
home  user  tapped  into  a  machine  ho 
didn't  really  require  access  to."  says 
Rich  na.se.  technology  director  at 
Knowles  Electnmics  in  Itasca.  III. 

It's  no  wonder  that  some  compa¬ 
nies  throw  up  their  hands  and  let  con¬ 
tractors  that  have  .security  expertise 
—  known  as  managed  security  serx’- 
ice  providers  —  handle  the  work.  The 
threats  are  "outpacing  the  enterprise’s 
ability  t»)  keep  up  with  the  latest 
Ci>uniermeasures  and  techniques  to 
thwart  attacks.'*  according  to  a  recent 


searchers  predict  that  enterprises  will 
outsource  of  their  security  activ¬ 
ities  by  2010. 

But  the  t>utsourcing  approach  is  no 
panacea  —  it  has  it's  own  challenges. 
And  many  corporations  don't  want  to 
turn  the  keys  to  the  castle  over  to  an 
outside  firm.  ■■Yt>u  cannot  outsource 
risk.  You  should  never  «)utsource 
everything.”  says  Yankee  Group  ana¬ 
lyst  Eric  Ogren. 

Insider  Threats 

One  t>f  the  biggest  security  threats 
comes  from  inside  the  organization. 
According  t4>  the  American  Society 
A>r  Industrial  Security,  current  and 
former  employees  and  t*n-sitc  con¬ 
tractors  with  authorized  access  to  fa¬ 
cilities  and  networks  continue  to  pose 
the  most  significant  risk  to  intellectu¬ 
al  property  such  as  research  data,  cus¬ 
tomer  files  and  financial  information. 

It’s  especially  important  to  liKk 


Pain  Points 

Which  technology  areas  ate  the 
greatest  sources  of  pain  in  your 
organization  today'’ 

1  Security 

2  Storage 

3  Software  license  management 


down  security  during  a  merger.  U.S.- 
based  multinational  companies  plan 
to  increase  their  merger  and  acquisi¬ 
tion  activity  (wer  the  next  two  years, 
w  ith  7()''ii  expecting  to  be  involved  in 
such  deals  in  that  period,  according  to 
I  a  recent  PrieewaterhouseCoopers 
Barometer  Survey  of  170  executives. 

‘  That  will  mean  a  lot  more  work  for 
chief  security  officers  —  before  the 
I  deal  is  signed  and  aftenvard.  when  se¬ 
curity  technologies  and  policies  have 
'  tt>  be  integrated.  You'll  need  to  ensure 
i  that  data,  networks  and  systems  re- 
I  main  as  secure  as  possible  during  the 
I  often  turbulent  times  that  accompany 
I  a  merger  or  acquisition. 

For  example,  you'll  need  to  analyze 
I  the  security  policies  and  techm>logies 
at  the  other  company  and  determine 
!  how  vulnerable  it  is  —  well  before  the 
j  actual  merger.  "Spend  a  lot  of  time 
I  learning  abi>ut  the  company  and  its 
I  culture,  where  it  dtK*s  business, 
whether  security  [management)  is 
centralized  or  decentralized,  and  how 
the  company  values  security."  says 
Bobby  Gillham,  manager  of  gkibal 
security  at  (a>noc4»Phillips  in  Hous¬ 
ton,  w  h<i  headed  security  for  Conoco 
!  during  its  2002  merger  w  ith  Phillips 
I  Petroleum. 

And  you'll  need  to  anticipate  siK'ial 
engineering  and  other  security  threats 
from  disgruntled  employees  at  both 
I  of  the  companies  involved.  As  soon 
I  as  an  employee  has  been  notified 
ahimt  a  layoff,  cut  off  access  to  all 
critical  serx  icos  and  applications. 

"You  need  to  pay  particular  attention 
to  protecting  against  people  walking 
out  with  proprietary  information." 
Gillham  says. 

Hole  in  the  Rrewall 

Meanwhile,  know  ledge  workers  are 
using  consumer-ttriented  instant 
messjiging  applications,  «»pening  up 
your  network  to  more  possible  mis¬ 
chief.  Gartner  Inc.  has  identified  IM 
as  one  i»f  the  top  11  security  issues  for 
the  cttrpttration.  “IM.  by  its  very  na¬ 
ture.  punches  a  ht>le  in  the  firewall. 
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Introduction 


The  Grand  Challenges 


A  RECENT  SURVEY  OF  104  EXECUTIVES  fingered  IT  securi¬ 
ty  as  the  No.l  technology  pain  point  in  corporations. 
Why?  For  one  thing,  the  threats  come  in  many  forms 
and  from  many  directions:  disgruntled  employees, 
fired  employees,  clueless  employees  who  succumb  to  social  en¬ 
gineering.  passwords  left  on  Post-it  notes,  wide-open  instant 
messaging  and  increasingly  powerful  hacker  tools  in  the  hands 
of  teenagers. 


"Companies  must  understand  that 
the  corporate  perimeter  dissolved 
with  the  very  first  Internet  connec¬ 
tion."  says  Lynne  EUyn.  lead  author  of 
a  security  report  from  Cutter  Consor¬ 
tium  in  Arlington,  Mass.  “Every  busi- 
ness-to-business  supply  chain  con¬ 
nection.  every  Internet  storefront, 
every  reverse  auction  that  a  company 
puts  into  operation  opens  the  corpo¬ 
ration's  virtual  doors.  Once  connect¬ 
ed  to  the  World  Wide  Web  or  the  In¬ 
ternet,  a  company  actively  occupies  a 
virtual  space  that  is  peopled  with  com¬ 
petitors.  terrorists,  children,  environ¬ 
mentalists,  lawyers  —  every  segment 
of  society  —  or.  actually,  every  seg¬ 
ment  of  nearly  every  society  on  earth.” 

New  security  and  privacy  laws  are 
being  passed,  and  the  risk  of  cyberter¬ 
rorism  looms.  Plus  there  are  seeming¬ 
ly  mundane  issues:  The  telecommuter 
working  at  his  kitchen  table  from  a 
home  PC  —  connected  to  your  corpo¬ 
rate  network  —  could  be  the  weakest 
link  in  your  security  defenses.  “We 
got  hit  with  the  Blaster  worm  when  a 
home  user  tapped  into  a  machine  be 
didn't  really  require  access  to,"  says 
Rich  Dase.  technology  director  at 
Knowles  Electronics  LLC  in  Itasca.  III. 

It's  no  wonder  that  sonte  compa¬ 
nies  throw  up  their  hands  and  Im  con¬ 
tractors  that  have  security  expertise 
—  known  as  managed  security  serv¬ 
ice  providers  —  handle  the  work.  The 
threats  are  "outpacing  the  enterprise's 
ability  to  keep  up  with  the  latest 
countermeasures  and  techniques  to 
thwart  attacks,"  according  to  a  recent 


report  by  The  Yankee  Group.  The  re¬ 
searchers  predict  that  enterprises  will 
outsource  90%  of  their  security  activ¬ 
ities  by  2010. 

But  the  outsourcing  approach  is  no 
panacea  —  it  has  it’s  own  challenges. 
And  many  corporations  don’t  want  to 
turn  the  keys  to  the  castle  over  to  an 
outside  firm.  “You  cannot  outsource 
risk.  You  should  never  outsource 
everything."  says  Yankee  Group  ana¬ 
lyst  Eric  Ogren. 

Insider  threats 

One  of  the  biggest  security  threats 
comes  from  inside  the  organization. 
According  to  the  American  Society 
for  Industrial  Security,  current  and 
former  employees  and  on-site  con¬ 
tractors  with  authorized  access  to  fa¬ 
cilities  and  networks  continue  to  pose 
the  most  significant  risk  to  intellectu¬ 
al  property  such  as  research  data,  cus¬ 
tomer  files  and  financial  information. 

It's  especially  important  to  lock 
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down  security  during  a  merger.  U.S.- 
based  multinational  companies  plan 
to  increase  their  merger  and  acquisi¬ 
tion  activity  over  the  next  two  years, 
with  70%  expecting  to  be  involved  in 
such  deals  in  that  period,  according  to 
a  recent  PricewaterhouseCoopers 
Barometer  Survey  of  170  executives. 
That  will  mean  a  lot  more  work  for 
chief  security  officers  —  before  the 
deal  is  signed  and  afterward,  when  se¬ 
curity  technologies  and  policies  have 
to  be  integrated.  You’ll  need  to  ensure 
that  data,  networks  and  systems  re¬ 
main  as  secure  as  possible  during  the 
often  turbulent  times  that  accompany 
a  meiger  or  acquisition. 

For  example,  you'll  need  to  analyze 
the  security  policies  and  technologies 
at  the  other  company  and  determine 
how  vulnerable  it  is  —  well  before  the 
actual  merger.  “Spend  a  lot  of  time 
learning  about  the  company  and  its 
culture,  where  it  does  business, 
whether  security  (management)  is 
centralized  or  decentralized,  and  how 
the  company  values  security.”  says 
Bobby  Gillham,  manager  of  global 
security  at  ConocoPhillips  in  Hous¬ 
ton.  who  headed  security  for  Conoco 
during  Us  2002  merger  with  Phillips 
Petroleum. 

And  you’ll  need  to  anticipate  social 
engineering  and  other  security  threats 
from  disgruntled  employees  at  both 
of  the  companies  involved.  As  soon 
as  an  employee  has  been  notified 
about  a  layoff  cut  off  access  to  all 
critical  services  and  applications. 

“You  need  to  pay  particular  attention 
to  protecting  against  people  walking 
out  with  proprietary  information,” 
Gillham  says. 

Hole  in  the  Firewall 

Meanwhile,  knowledge  workers  are 
using  consumer-oriented  instant 
messaging  applications,  opening  up 
your  network  to  more  possible  mis¬ 
chief.  Gartner  Inc.  has  identified  IM 
as  one  of  the  top  11  security  issues  for 
the  corporation.  "IM,  by  its  very  na¬ 
ture,  punches  a  hole  in  the  firewall. 
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Advice  from  Your  Peers 


A  samulng  of  tht  practical  tips 
youl  find  in  tills  rsport 

ENFORCE  a  lowest  privilege  lever  pot- 
Icy  for  inforrnation  assets,  which  means 
employees  access  only  to  the  data 
they  to  do  their  jobs.  No  one  needs 
access  to  everything. 

CHANGE  systons  administrator  pass¬ 
words  when  Key  IT  staff  mOTibers  leave 
die  company. 

SET  a  time  limit  -  like  15  minutes  -  for 
responses  from  security  services  firms. 


ANTICIPATE  social  engineering  and 
other  security  threate  from  disgnntied 
employees  at  both  of  the  companies 
involved  in  a  merger. 

BLOCK  file  transfers  for  users  of  con¬ 
sumer  instant  messaging. 

HME  trained  investigators  for  cornputer 
crimecases-Evengreatin-housesys- 
tenis  adrrmistrators  can  unwfitingly  fod 
up  the  evidence  needed  for  prosecution. 

MINGLE  Mth  the  opposition  at  the  an¬ 
nual  Def  Con  hacker  conference  in  Las 
Vegas  to  find  out  what  they're  up  to  now. 


and  that  opens  up  the  possibility  of 
inviting  in  a  dangerous  worm,”  says 
Internet  security  expert  Douglas 
Schweitzer. 

Battling  this  onslaught  of  security 
problems  will  require  not  only  savvy 
but  also  money.  “Back  in  the  good  old 
days,  security  consisted  of  a  few  fire¬ 
walls  and  some  virus  protection." 


says  veteran  CIO  Doug  Lewis.  “The 
threats  have  outgrown  those  simple 
defenses,  and  the  cost  has  outgrown 
the  approval  level  of  the  chief  securi¬ 
ty  officer  and.  sometimes,  that  of  the 
CIO."  That  means  Fortune  500  com¬ 
panies  are  finding  themselves  with 
security  expenditures  that  require 
CEO  and  even  board-level  approvals. 


j  Boosting  Your  Budget 

In  this  report.  Lewis  provides  a 
brilliant  plan  for  developing  a  rock- 
solid  business  case  for  boosting 
your  IT  security  budget  —  with  a 
credible  return  on  investment  that 
even  the  chief  financial  officer 
will  love. 

Overall,  the  reptort  has  dozens  of 
practical  tips  to  help  you  manage  the 
IT  risks  faced  by  the  modem  corpo¬ 
ration.  But  before  you  implement  any 
of  them  or  buy  another  security  prod¬ 
uct,  do  one  thing:  Stop  to  identify  the 
three  biggest  security  risks  your  com¬ 
pany  faces  —  whatever  would  bring 
your  company  to  its  knees.  They  will 
vary,  dependit^  on  your  industry  and 
business  model.  Is  it  theft  of  credit 
card  numbers?  Embezzlement?  Priva¬ 
cy  violations? 

Be  sure  to  address  those  high-risk 
areas  first,  before  lookup  at  more  ex¬ 
otic  problems.  Take  care  of  the  ba¬ 
sics:  passwords,  patches,  employee 
training,  antivirus  software  and  ac¬ 
cess  controls.  And  if  you  can’t  keep 
up,  consider  outsourcing. 


Risk  -  it’s  everywhere.  And  no  one  knows  that  better 
than  IT  security  professionals.  Disgruntled  employees, 
fired  employees,  clueless  employees  who  succumb  to 
social  engineering,  passwords  left  on  Post-it  notes, 
wide-open  instant  messaging  and  increasingly  powerful 
hacker  tools  in  the  hands  of  teenagers  -  this  WIetin 
will  help  you  address  those  risks  with  sage  advice  for 
protecting  corporate  assets  in  a  dangerous  wodd. 

FREE  DOWNLOAD;  “Our  Hottest  Security  Tips" 

For  a  limited  time,  get  this  full  report  (a  S49.95 
value)  for  free,  compliments  of  Cisco. 
www.computerworld.com/securitytipsbulletin 
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The  more  freedom  you  give  employees  to  work  anywhere,  the  more  you  can  achieve. That's  good.  But,  at  the  same  time,  the  more  you  expose 
yourself  to  intruders  and  worms.  That's  not  so  good.  How  far  can  a  network  travel  to  protect  your  office?  Now,  the  answer  is  everywhere.  Cisco 
networks,  with  integrated  wireless  security,  protect  rrxjbile  workers  who  constantly  move  outside  the  safety  of  the  corporate  network.  So 
information  is  secured.  No  matter  where  it  exists.  To  learn  more  about  how  Cisco  can  help  plan,  design  and  implement  your  network  security, 
visit  cisco  conVsecuritynow  SELF-DEFENDING  NETWORKS  PROTECT  AGAINST  HUMAN  NAlTiRE. 
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Strategies 


storage  vendors  hsve  multiple  ders  of 
products.  “By  undersundii^  your  re¬ 
quirements,  you  can  balance  peifor- 
mance,  cost  and  future  growth,”  says 
Exline.  “That  way,  you  avoid  buying 
an  ICBM  when  all  you  needed  was  a 
flyswatter.” 

A  case  in  point:  The  smaller  EMC 
Clariion  array  proved  a  better  fit  than 
EMC’s  high-end  Symmetiix  array. 
“There  are  Iocs  of  situations  that  call 
for  larger  systems,  but  they  were 
overkill  in  our  case,”  says  Exline. 

Surviving  the  Leaming  Cune 

Choosii^  a  system  is  a  decision  that 
can  be  made  only  after  you  do  your 
homework.  In  reality,  however,  that 
may  not  be  possible  until  you  have 
completed  your  first  SAN.  And  by 
then,  it  may  be  too  late. 

“Any  enterprise  must  get  a  qualified 
VAR/integrator  involved,  as  there  is 
nothing  like  experience  vdten  it  comes 
to  SANs,”  says  Steve  Duplesste,  an 


analyst  at  Enterprise  Strategy  Group 
Inc.  in  MQford.  Mass.  ”Tbere  can  be  a 
ton  of  gotchas  if  you  aren’t  prepared 
upfront” 

Exline  agrees.  He's  seen  IT  depart¬ 
ments  attempt  huge  storage  projects 
with  impossible  deadlines.  There  is  a 
leamii^  curve  that  has  to  be  respected, 
he  says,  and  he  preaches  training  on 
new  storage  pn^ucts.  “By  being  self- 
sufficient  to  a  large  d^ree,  we  save  a 
lot  on  support”  says  Exline. 

Another  way  to  reduce  costs  is 
through  consolidation.  Golden  Gate 
University  in  San  Francisco  is  nearmg 
the  end  of  a  three-year  migration  of  its 
storage  environment  from  six  operat¬ 
ing  systems  to  Linux  and  ^K^ndows. 

The  university  is  also  consolidating 
servers,  databases  and  enterprise  re¬ 
source  planning  systems. 

“Leveraging  Linux  with  an  enter¬ 
prise  storage  tier  has  reduced  server 
acquisition  costs  by  over  20%,”  says 
Keith  Rajedd,  Golden  Gate  Universi¬ 


ty’s  IT  infrastructure  manager.  “TCO 
in  our  old  stor^  environment  was  10 
times  greater  than  it  is  today.” 

He  reports  that  maintenance  would 
have  cost  250%  more  on  a  Sun  Solaris 
environment  than  it  does  on  a  E>eII/ 
Linux  combinadotL  IT  operating  costs 
are  down  40%.  the  numi^  of  servers 
has  been  cut  from  100  to  about  SO.  and 
bead  count  is  20%  lower. 

“Consolidation  and  standardization 
combined  with  a  focus  on  storage 
management  as  an  ongoing  activity 
will  enable  most  organizations  to  cut 
storage  costs,”  says  Rajecki 

No  End  in 

Simple  economics  dictates  plarming 
for  the  long  haul  Cisco,  for  instance, 
recently  consolidated  its  storage  bud¬ 
get  across  all  business  units  and  has  a 
single  budget  for  all  enterprise  storage 
needs.  “Because  storage  is  such  a  ma¬ 
jor  cost,  h  requires  long-term  planning 
to  keep  costs  under  control”  says  Cis¬ 
co’s  Williams. 

Similarly,  the  45th  Space  Wing  is  re¬ 
fusing  to  rest  on  its  storage  laurels.  It 
implemented  backup  to  virtual  tape 
via  Alacritus  Software’s  Securitus  vir¬ 
tual  tape  appliances.  It  also  added  an¬ 
other  2STB  of  mixed  Fibre  Channel 
and  ATA  storage  U>  suppcwt  Exchange 
2003  clusters,  virtual  tape  backup  and 
cross-site  mirroring  (using  EMC’s 
SnapView  and  SAN  Copy).  New  tape 
libraries  from  Qualstar  C^orp.  were 
added  using  Super  Advanced  Intelli¬ 
gent  Thpe  technology  to  increase  per- 
tape  denrity  and  reduce  off-site  vault¬ 
ing  charges. 

“Estimated  ROl  is  14  months,  with  a 
three-year  savings  of  approximately 
$400,000  just  in  tape  and  vaulting 
charges,”  says  Exline.  O  49416 

Robb  ts  a/reeionce  writer  in  Los  Aqgefes. 
Contact  /nm  at  drewrobb@atrbicom. 

MORECOST-CgnMlK 

Industry  apertsswwdudnp  storage  costs  B  a  aep- 
bystio  process  that  b«o>B  with  plannirq  iM  Is 
diboent  md  ongoing.  Hate  are  five  ley  steps 
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ISCSI  Brings 
Lower-(^ 
Storage  Networks 

■TERMET  m  m  BCa.  was  de- 
signed  to  offer  the  adwitages  of 
storage  cortsobdanon.  without  the 
headache  of  Rbre  Channel  devices 
and  cabbng.  by  enablino  Hock-level 
data  detrvery  over  tP  networks. 

^Companies  should  be  njnning. 
not  walling,  to  SCSI.’  says  Steve 
Ouplessie.  an  analyst  at  Enterprise 
Strategy  Group. 'Hie  payback  5  so 
strong  and  so  fast  that  enterprises 
wi  look  siy  if  they  wall  And  iSCSI  s 
driving  prices  down  for  (Fixe  Chan¬ 
nel]  nehvorks.' 

Orte  convert  is  Denver  Health 
Medtcai  Center.  Its  IT  environmenl 
consists  of  16  buildings  connected 
wa  Gigabd  Ethernet.  22  communtfy 
heath  clinics  connected  via  Sonet 
166  clustered  servers  (125  Windows. 
20  Unix  and  WKXis  others)  and  two 
SANs  *  a  Fibre  Oannel  SAN  and  an 
IP  SAN. 

HNe  found  FC  SANs  to  be  expen¬ 
sive  to  implement  and  they  reqiwed 
specxa&ted  tramng  and  tediricians.' 
says  Jeff  f^lot  chief  technology  offi¬ 
cer  at  Denver  HeaRh.  “An  P  SM  is 
so  rnuch  more  affordable,  and  imple¬ 
menting  one  is  kke  budding  some¬ 
thing  with  Lego." 

Relotsayshedoesntthinkhista- 
city  requires  FC  buidout  espeodfy 
now  that  P  technology  has  matured. 
However.  Denver  Health  fuly  intends 
to  mantam  Ms  existing  SAN.  With  the 
infrastructure  in  place,  it  makes  no 
sense  to  eimmete  1  Instead,  theta- 
city  chose  to  expand  its  storage  pbb 
form  with  an  P  ^  from  LeltHand 
Networks  Inc.  in  Boulder.  Colo. 

derm  Exbne,  trwiager  of  ad- 
<tenced  technology  for  the  Air  Rxce’s 
45lh  Space  Wing,  points  out  that  the 
big  aihiantage  of  a  Fibre  Channel 
SM  is  that  it  removes  storage  and 
backup  traffic  from  the  ndwork.  ^ 
doino  so.  his  organization  sped  up  Ks 
exisbng  network. 

'ARowing  user  access  to  die  same 
data  network  that  6  harnessed  for 
storage  s  a  tag  rrestake.*  says  ExRne. 

However.  says  that  perfor¬ 
mance  temed  Old  to  be  far  1^  of  a 
problem  than  many  feared.  *Alhough 
lA)  is  very  sightly  down  compared  to 
the  FC  SM.  the  users  have  never  no- 
boed  the  ffifterence.”  he  says. 

-DrewRobb 


Strategies 


iinpie  ftle  nnnl  .infl  W-  b 
appindlio'is  10  Linun.  ijditi  iomo  e*ne 
fence  anO  then  gfadually  eieccU-  .1 
ifTialt- scale  L'nu«  SAN 

ari:h<vino  systemsto 
laKf  ir.acl.ve  data  oH  fifOOuction 
tem5  to  eimiitMti-  as  much  as  60''^  >  ni 
yoijr  nightly  Dachup  wci'Hluad 

a  Strung  user  argani^ahon  sucf 
as  the-  Association  ot  Storage  Networh 
mo  Users  (tVMW  ^snfj.org)  and  tmd  out 
how  to  rectoce  your  storage  costs  by 
'|(•two^^^l^^  with  y.Tur  peers 

evetyunc  tn  storage  a  lithe 
ever-y  month  That  can  bring  down  ym.r 
Support  costs  considerably 

proposals  only  tof  what  you 
need  and  stick  to  it  Don  t  be  swayed  Oy 
the  latest  vendor  bells  and  whistles 
Often  they  aic  the  ecuivaleniof  aca' 
salesman  talking  you  irito  an  eni'a 


£100  a  rnnnih  Iq' d  Dclle’  CD  player,  an 
•-«lra  Cup  hijltlor  and  a  sunroof  Do  you 
really  need  thorn'' 

defragmentation  before 
si.’fveTS  are  backed  up.  It's  a  great  way 
to  speed  backups  and  reduce  costs  But 
don't  use  the  built  m  tool  that  comes 
With  Windows  Get  a  networkable  de 
hagmente'  such  as  E*ecutive  Soft 
wart  International  Inc  s  Oiskeeper 

requests  foi  uropusalsthaUre 
neither  too  general  nor  too  specific 
loo  specific  and  costs  can  mount  Too 
general  and  you  end  up  with  software 
that  doesn't  til  your  needs  or  that  lack.s 
business  value 

if  you  actually  have  tlie  time 
expertise  and  resources  to  competent 
ly  evaluate  vendors  nr  implement  stor 
age  protects.  If  not  farm  it  out  to  m 
dustry  experts 

0fi?H  Robb 


storage  vendors  have  nniltiple  tiers  of 
products.  "By  understanding  your  re¬ 
quirements,  you  can  balance  perfor¬ 
mance.  cost  and  future  growth.”  says 
Extinc.  “That  way,  you  avoid  buying 
an  ICBM  when  ah  you  needed  was  a 
fly  swatter.” 

A  case  in  point:  Hie  smaller  EMC 
Clariion  array  proved  a  better  fit  than 
EMC’s  high-end  Symmetrix  array. 
“There  are  lots  of  situations  that  call 
for  larger  systems,  but  they  were 
overkill  in  our  case,”  says  Exiinc. 

Surviving  the  Learning  Cunie 

Choosing  a  system  is  a  decision  that 
can  be  made  only  after  you  do  your 
homework.  In  reality,  however,  that 
may  not  be  possible  until  you  have 
completed  your  first  SAN.  And  by 
then,  it  may  be  too  late. 

“Any  enterprise  must  gel  a  qualified 
VAR/integrator  involved,  as  there  is 
nothir^  like  e.xperience  when  it  comes 
to  SANs."  says  Steve  Duplessie.  an 


analyst  at  Enterprise  Strategy  Group 
tnc.  in  Milford,  Mass.  “There  can  be  a 
ton  of  gotchas  if  you  aren’t  prepared 
upfront." 

Exline  agrees.  He’s  seen  IT  depart¬ 
ments  attempt  huge  storage  projects 
with  impossible  deadlines,  llicre  is  a 
learning  curve  that  has  to  be  respected, 
he  says,  and  he  preaches  training  on 
new  storage  products.  “By  being  self- 
sufficient  to  a  large  degree,  we  save  a 
lot  on  support,"  says  Exline. 

Another  way  to  reduce  costs  is 
through  consolidation.  Golden  Gate 
University  in  San  Francisco  is  nearing 
the  end  of  a  three-year  migration  of  its 
storage  environment  from  six  operat¬ 
ing  systems  to  Linux  and  Windows. 

The  universiry  is  also  consolidating 
servers,  databases  and  enterprise  re¬ 
source  plarming  systems. 

“Leveraging  Linux  with  an  enter¬ 
prise  storage  tier  has  reduced  server 
acquisition  costs  by  over  20%."  says 
Keith  RajeckL  Golden  Gate  Universi¬ 


ty's  IT  infrastructure  manager.  “TC.O 
in  our  old  storage  environment  was  10 
times  greater  than  it  is  today." 

He  reports  that  maintenance  would 
have  cost  250%  more  on  a  Sun  Solaris 
environment  than  it  does  on  a  Dell/ 
Linux  combination.  IT  operating  costs 
are  down  40%.  the  number  of  servers 
has  been  cut  from  100  to  about  50.  and 
head  count  is  20%  lower. 

"Consolidation  and  standardization 
combined  with  a  focus  on  storage 
management  as  an  ongoing  activity 
will  enable  most  organizations  to  cut 
storage  costs."  says  RajeckL 

No  End  in  Sight 

Simple  economics  dictates  planning 
for  the  long  haul.  Cisco,  for  instance, 
recently  consolidated  its  storage  bud¬ 
get  across  all  business  units  and  has  a 
single  budget  for  all  enterprise  storage 
needs.  “Because  storage  is  such  a  ma¬ 
jor  cost,  it  requires  long-term  planning 
to  keep  costs  under  control.”  says  Cis¬ 
co’s  Williams. 

Similarly,  the  45th  Space  Wii^  is  re¬ 
fusing  to  rest  on  its  storage  laurels.  It 
implemented  backup  to  virtual  tape 
via  Alacritus  Software’s  Siccuritus  vir¬ 
tual  tape  appliances.  It  also  added  an¬ 
other  28TB  of  mixed  Fibre  Channel 
and  ATA  storage  to  support  Exchange 
2003  clusters,  virtual  tape  backup  and 
cross-site  mirroring  (using  EMCs 
Snap  View  and  SAN  Copy).  New  tape 
libraries  from  Qualstar  Corp.  were 
added  using  Super  Advanced  Intelli¬ 
gent  Tape  technology  to  increase  per- 
tape  density  and  reduce  off-site  vault¬ 
ing  charges. 

“Estimated  ROI  is  14  months,  with  a 
three-year  savings  of  approximately 
S400,(X)0  just  in  tape  and  vaulting 
charges."  says  Exiinc.  O  49416 


Robb  is  a  freelance  writer  in  Los  Angeles. 
Contact  him  at  drewrobbiwattbi.com. 


MORE  COST-CUTTHK  TVS 

Industry  experts  say  reduong  storage  costs  s  a  sleg- 
by-step  process  thm  begins  iiwlh  pianrwig  that  4 
diligent  and  ongoing.  Here  are  five  key  sieps 
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iSCSI  Brings 
Lower-Cost 
Storage  Networks 


WTERNET  SCSI.  OR  SCSI,  was  dCh 
signed  lo  offer  the  advantages  of 
storage  consoiidation.  without  the 
headache  of  Ftre  Channel  devices 
and  cabling,  by  enabling  block-level 
data  defevery  over  IP  netvMvks 

’Companies  should  be  njnnmg. 
not  walking,  to  iSCSU  says  Sieve 
Duplessie.  an  analyst  at  ^terpnse 
Strategy  Group.  ’The  pa^iack  6  so 
strong  and  so  fast  that  enterprises 
wilt  look  s%  if  they  wait.  And  tSCSI  is 
driving  prices  down  for  [Fibre  Chan¬ 
nel]  networks ' 

One  convert  IS  Denver  Health 
Medical  Center.  Its  IT  envronment 
consists  of  16  buildings  connected 
via  Gigabrt  Ethernet.  22  communily 
heatih  clirws  connected  via  Sonet. 
166  clustered  servers  Windows. 
20  Unix  and  various  others)  and  two 
SANs  -  a  Fibre  Channel  SMil  and  an 
IP  SAN 

‘We  found  FC  SANs  lo  be  expen¬ 
sive  to  implement,  and  they  reiMred 
speoaiized  training  and  techntoans.* 
says  Jeff  Pekit.  chef  technology  offi¬ 
cer  at  Denver  Health  ‘An  IP  SAN  is 
so  much  more  affordable,  and  imple' 
menting  one  is  like  building  some¬ 
thing  with  Lego,’ 

PelM  says  he  doesn't  think  his  fa- 
cRitv  requires  FC  buMdout.  especially 
now  that  IP  technology  has  matured 
However.  Denver  Health  fuMy  intends 
to  mantain  its  existing  SAN.  With  the 
infrastructure  m  place,  it  makes  no 
sense  to  ekminale  it.  Instead,  the  fa¬ 
cility  chose  lo  expand  its  storage  plaf- 
iorm  wtlh  an  IP  SAN  fnyn  LeftHand 
Nehvorks  Inc.  <1  Boulder.  Colo 

Glenn  Exkne.  manager  ot  ad* 
vanced  technology  for  the  Air  Force's 
45th  Space  Wing,  points  oul  that  the 
big  adi^age  ol  a  F4xe  Charmd 
SAN  1$  that  It  removes  slocage  and 
backup  traffic  from  the  network.  By 
doing  so.  hrs  organization  sped  ig)  its 
exsting  network. 

'AHowing  us&  access  to  the  same 
data  network  that  s  harnessed  for 
storage  b  a  big  mistake.’  says  Eztine 

However.  Pelot  says  that  perior* 
mance  turned  out  (0  be  tar  less  of  a 
problem  than  many  feared.  'Atthpugh 
I/O  6  very  slightly  down  compared  to 
the  FC  SAN.  the  users  have  never  no* 
liced  the  difference.'  he  says. 

•Drew  Robb 
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Long  Distance, 
Short  Money 

Storage  over  IP  provides  a 
cheaper,  fester  mtemative  for  data 
backup.  By  Lucas  Mearian 


Natural  disasters  and  gov- 
eminent  r^uiations  have 
put  pressure  on  companies 
to  back  up  data  farther  away 
from  their  main  data  centers 
than  they  do  now,  but  achieving  thar 
goal  can  be  pricey.  Tape  is  one  option, 
but  it's  slow  to  restore.  Dedicated  net¬ 
works  can  replicate  data  over  a  WAN. 
but  at  a  bandwidth  price. 

In  their  quest  for  cheaper  alterna¬ 
tives.  some  companies  are  turning  to  a 
stUl-develt^ing  option.  Storage  over  IP. 
or  the  replication  block-level  data 
over  leased  virtual  private  networks, 
allows  users  to  select  the  type  of  wide- 
area  service  that  best  meets  their  bud¬ 


get  and  application  requirements. 

"It’s  a  lot  faster  than  tape.  And  IP  is  a 
lot  less  expensive  than  a  dedicated 
line.”  says  James  Opfer.  an  analyst  at 
Gartner  Inc 

The  three  main  long-distance  trans¬ 
mission  protocols  —  Internet  SCSI 
(iSCSI),  nbre  Channel  over  IP  (FCHP) 
and  Internet  Hbre  Channel  Protocol  ~ 
are  all  s^nificantly  different,  but  they 
provide  a  common  function:  transport¬ 
ing  block-level  storage  over  an  IP  net¬ 
work,  which  allows  administrators  to 
use  incxpeitsive  Etbemet-TCP/IP  net¬ 
works  to  transport  and  access  storage 
over  LANs,  WANs  or  metropolitan- 
area  networks. 


ISCSI,  which  transmits  block-level 
data  directly  over  Ethernet,  is  primari¬ 
ly  a  server-to-storage  interconnect 
within  the  data  center.  It  takes  advan¬ 
tage  of  ubiquitous  Ethernet  networks 
to  consolidate  Windows  and  f  inny 
server  backups  by  connecting  LANs  to 
storage-area  networks  (SAN).  New 
vendors  are  now  offering  arrays  rhat 
use  iSCSI  as  a  tunneling  protocol  to 
transmit  over  long  distances. 

Sawings  Spots 

The  greatest  savings  in  using  IP  to 
transport  data  between  data  centers 
comes  ffom  reduced  bandwidth.  Long¬ 
distance  replication  of  block-level  data 
can  use  IP.  Synchronous  Optical  Net¬ 
work  (Sonet)  and  Asynchronous  Trans¬ 
fer  Mode  (ATM)  netwoiks  to  transmit 
data,  with  Ihtlc  differeiKe  in  price  as 
long  as  it's  not  a  dedicated  line. 

”U’s  not  the  hardware.  Every  time  I 
talk  to  people,  they  say  it's  the  cost  of 
bandwidth  services."  says  Opfer. 

But  exact  savings  are  hard  to  pin 
down:  Opfer  says  bandwidth  costs  can 
vary  widely  by  region.  If  you're  using 
"dark  fiber,”  or  surplus  fiber-(^>tic 
cable,  "you're  going  to  get  wild  swings 
in  the  price."  be  says.  And  with  IP, 
there's  no  need  to  hire  Hbre  Channel 
network  administrators  or  buy  switch¬ 
es  or  host  bus  adapters  to  create  the 
network  tnierC»;e 

But  financial  firms  and  other  compa¬ 
nies  dealing  with  sensitive  data  are 
still  squeamish  about  adopting  a  stor- 
age-over-lP  fiamework,  says  Dianne 
McAdam,  an  analyst  at  Data  Mobility 
Group  LLC  in  Nashua.  Nil  "What  I  do 
see  changing  is  the  small  to  medium- 
size  businesses,  where  in  the  past  they 
looked  at  doing  replication  and  then 
got  the  price  tag  and  said.  ‘Oh  my 
God.’ ”  she  says. 

Some  large  companies  say  the  cost 
benefits  outweigh  the  risks.  For  exam¬ 
ple,  Don  Bolton,  manager  of  infiastruc-  I 
ture  and  systems  services  at  Teppco 
Partners  LP,  an  energy  company  in 
Houston,  understands  rosts  issues 
associated  with  disaster  recovery. 
Teppco  had  been  paying  S250,0(>0  to 
$500,0<X)  a  year  to  SunGard  Data  Sys¬ 
tems  Inc.  in  Wayne,  Pa.,  to  ensure  that 
should  the  company's  systems  go 
down,  they  could  power  up  in  another 
region  without  losing  data. 

Eaiiier  this  year.  Bolton  says,  he  de¬ 
cided  that  Teppco  could  perform  that 
chore  itself  by  replicating  mission- 
criticaL  block-le^^  data  via  a  T1  line 
between  data  centers  in  Houston  and 
IHilsa.  Okla.  —  a  distance  of  about  500 
miles,  Hut  move  has  cut  his  costs  by 
more  than  half  with  a  quick  return  on 


investment.  "I  was  able  to  take  an  ex¬ 
isting  facility  we  had  and  put  $200,000 
in  it  and  install  like  servers  with  a  16- 
month  payback  on  our  investment. 
And  it's  allowed  us  to  grow  our  infra- 
struenu-e,"  Bolton  says. 

Teppco  asynchronously  replicates 
block-level  data  from  Oracle  and  S<^L 
databases  that  reside  on  cliistered  ar¬ 
rays  from  Network  Appliance  Inc.  that 
use  NetA{^‘s  SnapMirror  application. 
"It’s  pretty  interesting  technology.  If  I 
was  a  superiarge  shop  at  (2tmtinental 
Airlines  or  something,  with  hundreds 
of  terabytes.  I  don't  know  if  thU  would 
be  the  solution.  But  with  this  size,  it  is 
perfect”  Bolton  says. 

In  asynchronous  mode,  SnapMirror 
provides  read-only,  online  replication 
of  a  source  file  system  (volume  or  quo¬ 
ta  tree  level).  In  the  event  of  a  disaster. 
Bolton  says  the  mirror  site  could  be 
used  as  the  primary,  convming  the 
SnapMirror  r^Uca  into  a  writable  file 
system  and  replacing  the  original 

IP  Payoff 

Edward  Jones  &  Co.  has  begun  to  reap 
the  rewards  of  three  years  of  work  and 
an  $80  million  investment  in  a  storage- 
over-IP  network  [(^icklink  496291. 
The  system  is  replicating  up  to  700GB 
of  data  daily  to  a  fully  redundant  back¬ 
up  she  located  1.600  miles  away  from 
the  brokerage's  main  data  center,  near 
St  Louts.  Edward  Jones  has  created  a 
secondary  site  in  Tempe.  Ariz.,  that’s  a 
replica  of  the  primary  data  center,  com¬ 
plete  with  450TB  of  SAN-based  data. 

Bill  Hayden,  director  of  data  services 
at  Edward  Jones,  which  is  using  FCIP 
over  ATM  to  tunnel  its  data  across 
the  U.S..  says  prices  have  cominued 
to  drop  on  network  bandwidth.  ”It 
doesn’t  matter  whether  it's  running 
IP,  Sonet  or  ATM.”  the  prices  are  the 
same,  he  says. 

The  payback?  All  of  Edward  Jones' 
Oracle  databases  are  replicated  nation¬ 
wide  in  under  five  seconds.  File  ser¬ 
vices  are  replicated  every  four  minotes. 
and  mainframe  databases  are  typically 
replicated  in  30  minutes.  Tbe  company 
says  h  can  flq)  a  switch  and  begin  using 
its  secondary  site  as  its  primary  one. 

"Our  stiddng  point  b  our  {>^AM 
flat  files]  on  our  mainframe,”  Hayden 
says.  VSAM  flat  files  still  taltp  four 
hours  to  replicate,  a  problem  that  Hay¬ 
den  says  could  be  resolved  by  updating 
Edward  Jones'  EMC  Symmetrix  arrays 
and  replication  sofrw^. 

"There  are  always  issues,"  he  says. 
‘'We're  always  looking  to  get  the  data 
there  foster  and  lookup  for  ways  to  get 
the  data  to  the  point  where  we  can  up¬ 
date  it  at  dther  she.”  O  49621 


BRAND  NEW. 

NOT  NEW  BRAND. 


Introducing  the  Fujifilm  3592  enterprise-class  data  storage  tape. 

White  Fujifilm  3592  is  a  brand  new  addition  to  our  full  line  of  superior  quality  data  storage  media,  it  comes  from  a  company 
that  is  anything  but  a  new  brand.  In  1995.  our  technology  enabled  the  first  gigabyte<dass  metal  particle  enterprise  1/2'  tape. 
Since  then,  steady  innovation  has  culminated  in  a  high-end  M2r  tape  vrith  NANOCUBIC  Technology,  the  magnetic  coating 
technology  leveraged  by  world-leading  hardware  manufacturers  in  development  of  their  latest-generation  enterprise-class 
drive  systems.  Specify  Fujifilm  on  your  next  high-end  tape  order.  It’s  the  brand  that  other  brands  trust. 
To  find  out  more  about  our  complete  line  of  reliable  data  storage  media,  visit  us  at:  www.fujifilm.com 
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At  ata  airlines  inc..  the  prac¬ 
tice  of  buying  refurbished 
storage  systems  started  small, 
with  the  purchase  of  a  work¬ 
group-size  disk  array.  Over 
the  past  six  years,  the  SI.2  billion  air¬ 
line  bought  more  and  more  used  stor¬ 
age  equipment,  including  enterprise- 
size  storage  systems,  tape  libraries  and 
eventually  Fibre  Channel  storage-area 
networks.  Today,  “there  really  isn't  a 
case  where  we  wouldn’t  consider  pre¬ 
viously  owned  storage  systems,”  says 


Sa^Drid- 

Hand 
Savings 


Buying  used  storage 
equipment  is 
cheaper,  but  riskier, 
thanbin 
gear. 


Paul  Smith,  director  of  information 
services  at  Indianapolis-based  ATA. 

The  result:  savings  that  add  up  to  at 
least  50%  off  list  price  for  used  storage 
components  and  60%  to  70%  savings 
for  used  storage  systems. 

“Why  pay  top  dollar  when  you  can 
let  someone  else  take  the  hit  on  new 
equipment?”  says  Chuck  Copell,  man¬ 
ager  of  hardware  support  services  at 
Affiliated  Computer  Services  Inc.,  a 
$4  billion  outsourcer  in  Dallas.  “Stor¬ 
age  hardware  depreciates  as  fast  or 
faster  than  an  automobile.  Whenever 
possible,  I  like  to  buy  used  equipment.” 

The  hottest  used  items  include  tape 
and  optical  libraries,  as  well  as  other 
archive  and  backup  products,  where 
performance  is  less  critical  and  the  ob¬ 
solescence  cycle  is  slower,  according 
to  resellers.  But  the  market  for  newer 
equipment,  such  as  Fibre  Channel 
SAN  switches,  is  also  active,  and  mid¬ 
range  disk  arrays,  such  as  IBM  Shark’s 
and  Hitachi  Data  Systems  Corp.’s 
Thimder  system,  also  sell  well. 

The  benefits  go  beyond  cost  savings 
to  include  faster  acquisition  cycles  and 
more-flexU)le  maintenance  programs. 
But  there  are  risks  involved.  Before  do¬ 
ing  business  with  storage  remarketers, 
users  should  consider  the  answers 
to  these  common  questions  about 
secondhand  stor^e  equipment. 

IbItReiiafaie? 

This  is  perhaps  the  first  question 
asked  by  people  who  have  never 
purcha^  secondhand  storage. 
But  experienced  users  have  no  reser¬ 
vations  about  reliability,  as  loi^  as 
they’re  purchasing  from  a  reputable 
vendor  that  sets  up,  tests  and  refur¬ 
bishes  the  systems.  The  vendor  should 
also  offer  a  warranty  that  the  equip¬ 
ment  is  in  working  condition  upon  ar¬ 
rival  at  the  customer  site  and  possibly 
even  for  30  days  until  the  system 
comes  under  a  service  ccmtract  with 
the  manufacturer  or  a  third-party 
provider.  Some  resellers  will  also  offer 
longer  warranties  on  certain  equip¬ 
ment  for  a  higher  price. 

In  any  case,  ‘’you  have  to  be  comfort¬ 
able  with  the  vendor  you  choose,”  says 
Smith.  “It  could  make  ail  the  difference 
if  the  system  has  been  in  a  climate- 
controlled  environment  as  opposed  to 
a  hothouse  where  the  di«ks  have  been 
spinning  in  lOO-d^iee  heat” 

2  Can  I  Get  a  Service 
Agreement? 

It’s  important  to  determine 
beforehand  if  the  equipment 
you’re  buying  is  eligible  for  mainie- 

Continued  on  page  42 


Meet  the  Winners 
at  SNW  _ 


“Best  Practice”  Storage  Users  Wstorm 
to  Be  Announced  October  25th  Dpof  I 
at  Storage  Networking  World 
Conference  N  SI 

storage  Networking  World  (SNW),  in  conjunction  with  Computerworld 
and  the  Storage  Networking  Industry  Association  (SNIA), 

proudly  presents  the  fifth  SNW  "Best  Practices  in  Storage”  _ ptclusive 

Awards  Program.  This  program  honors  ten  IT  user  "best  practice"  ■ 

case  studies  selected  from  a  field  of  qualified  finalists.  IH 

Two  awards  will  be  presented  in  each  of  the  following  five  categories:  where  in 

Systems  Implementation 

Recognizes  the  successful  design,  implementation  and  management  of  an  interoperable  environment. 

This  category  also  demonstrates  the  ability  to  source  from  multiple  vendors. 

Storage  Reliability  and  Data  Recovery _ 

Acknowledges  implementation  strategies  and  programs  to  insure  highly  available  information  and  data  access 

Data  Lifecycle  Management 

Exemplifies  solutions  and  processes  to  manage  the  information  over  its  lifecycle. 

Industry  Regulation  Compliance  and  Corporate  Governance _ 

Spotlights  solutions  being  deployed  to  meet  or  exceed  industry  regulations  specified  by  the  SEC.  Patriot  Act,  HIPAA. 
Sarbanes-Oxley.  DoD,  and  CFR. 

Innovation  and  Promise _ 

Successful  “pioneering’  of  leading/bleeding-edge  storage  networking  technology  will  be  recognized  in  this  category. 
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Stick  With  What  You  Know 


WHEN  ATA  AIRUNE5  purchased 
rt$  fvsi  SAN.  the  equiprrtent  wasn’t 
availabie  on  the  refurtushed  market, 
artd  looking  back,  that's  a  good 
thirtg.  says  Paul  Smith,  director  of 
iniormabon  services. 

After  nstalmg  the  new  equip¬ 
ment.  the  SAN  (Mn't  perform  up  to 
Its  published  specifications,  and  the 
manufacturer  had  to  be  called  in  for 
assstance.  ’Having  that  extra  layer 
of  the  remarketer  could  have  made  it 
(fifficult.'  Smith  says  *We  wouldn't 
have  had  the  dout.  and  the  problem 


may  not  have  lesonaled  wrlh  the 
vwdof  “  The  lesson  ff  you’re  work¬ 
ing  wilh  an  emerging  technology  or 
one  you're  not  mtimalely  familiar 
with,  your  nsk  factors  rise. 

Another  poinl:  In  the  refurbished 
market  you  don'l  have  the  honey¬ 
moon  period  when  you  can  call  in  all 
of  the  vendor's  resources. 

ATA  bought  tis  fvst  SAN  four  years 
ago.  Since  then.  Smith  has  turned  to 
the  refurbished  market  when  he  has 
needed  an  adcfibonal  SAN  array 

-MatyBrandel 


Conimued  from  po^e  40 
nance  from  the  original  manufacturer 
or  from  a  reputable  third  party.  *^me 
of  the  big  vendors  like  HP.  IBM  and 
Sun  are  very  strict  about  what  they 
will  and  won't  support  as  far  as  the  age 
of  the  equipment  and  the  firmware  and 
its  interaction  with  their  more  modem 
equipment,"  Copell  warns. 

Vendors  may  also  provide  mainte- 
nance  contracts  more  readily  if  you 
buy  from  an  authorized  reseller  of 
their  equipment.  Otherwise,  they  may 
require  a  site  visit  and  an  audit  to  per¬ 
form  necessary  upgrades  or  firmware 
changes  —  for  a  price,  of  course. 

You  should  also  ensure  that  all  the 
drives  within  a  storage  system  are 
original  manufacturer  drives,  or  the 
manufacturer  won't  place  them  under 
maintenance  agreements,  according  to 
Robert  Davie,  founder  of  ITParade.- 
com  Inc.,  a  Web-based  marketplace  for 
refurbished  computer  equipment  in 
Cary,  RC  For  example,  a  Sun  Micro¬ 
systems  array  must  have  all  Sun- 
manufactured  drives  in  it. 

IBM  is  one  of  the  only  vendors  with 
well-defined  processes  for  servicing 
the  secondhand  market,  says  James 
Davie,  a  vice  president  at  Canvas  Sys¬ 
tems.  a  reseller  in  Norcross,  Ga.  It  of¬ 
fers  a  “banding  process."  by  which  IBM 
certifies  that  the  system  is  “mainte¬ 
nance  service  qualified"  at  the  time  of 
the  sale.  The  system  arrives  at  the  cus¬ 
tomer  site  with  a  silver  band  around  it, 
IBM  engineers  implement  tbe  system, 
and  IBM  provides  the  maintenance 
contract.  This  comes  at  an  additional 
cost  of  about  SI.OOO,  according  to 
Doug  Rengel  a  consultant  at  Xerxes 
Computer  Corp..  a  refurbished  com¬ 
puter  reseller  in  Bloomington.  Minn., 
so  customers  might  choose  this  option 
only  for  higher-end  equipment. 


Some  companies,  such  a.s  ATA  Air¬ 
lines.  don't  rely  on  vendors  for  service 
and  instead  maintain  their  equipment 
themselves.  ATA  even  keeps  its  owti 
inventory  of  spare  pans.  "We're  an 
extreme  case,"  Smith  acknowledges. 

Bruce  Caswell,  vice  president  of 
marketing  at  World  Data  Products,  a 
refurbished  computer  reseller  in  Min¬ 
netonka.  Minn.,  says  roughly  BO%  of 
his  company's  customers  put  their 
hardware  on  a  maintenance  contract, 
while  20%  are  sclf-maintainers.  Of 
those  that  opt  for  maintenance  con¬ 
tracts,  most  turn  to  credible  third- 
party  providers  such  as  Northrop 
Grumman  Corp.,  DccisionOne.  Storage 
Technology  Corp.  and  General  Electric 
Co.  to  lower  their  cost  of  maintenance. 

Should  I  Expect 
VHidorPusn-biKik? 

Particularly  if  you're  purchas¬ 
ing  a  high-end  system,  many 
vendors  will  try  to  dissuade  you  from 
purchasing  refurbished  equipment  by 
threatening  exorbitant  "recertifica¬ 
tion"  fees  or  even  refusing  to  service  it 
"I  know  one  large  insurance  comp.iny 
that  got  strong  push-back  from  Sun  at 
tbe  CFO  level  and  decided  not  to  pur¬ 
chase  refurbished  because  of  that." 
says  Robert  Davie.  On  a  SlorageTek 
L700  tape  drive,  the  reliccnsing  fee 
can  reach  S2.200.  he  says. 

According  to  many  observers,  the 
vendor  with  one  of  the  worst  reputa¬ 
tions  in  this  regard  is  EMC  Corp. 

“EMC  has  a  subtle  way  of  controlling 
the  market  in  its  own  used  gear."  says 
John  Webster,  founder  of  the  Data 
Mobility  Group  LLC,  a  consultancy 
in  Nashua,  NJ4.  "They  say  that  the 
microcode  to  run  the  machine  is  not 
transferable  and  that  you  need  to  buy 
a  new  microcode  license  —  which. 


by  the  way.  ain't  cheap." 

EMC  defends  its  relicensing  require¬ 
ments.  "Our  systems  are  intelligent 
storage  systems  that  have  sofm-are  in¬ 
corporated  into  them,  and  it  is  stan¬ 
dard  practice  throughout  the  industry 
that  the  software  license  doesn't  gel 
transferred  when  the  hardware  gets 
transferred."  an  EMC  spokesman  says. 
"The  licensing  also  ensures  that  the 
product  operates  as  it's  supposed  to 
for  the  customer.” 

It's  important  to  keep  in  mind  that 
these  types  of  fees  arc  negotiable,  re¬ 
sellers  .say.  and  that  salespeople  can 
reduce  or  even  waive  them.  A  good 
negotiating  point  is  to  suggc.st  that  you 
might  opt  for  third-party  maintenance, 
meaning  the  vendor  will  lose  the  ser¬ 
vice  revenue  as  well.  Robert  Davie  rec¬ 
ommends  contacting  the  field  service 
rep  instead  of  the  salesperson,  since 
the  service  rep  is  typically  compensat¬ 
ed  on  the  service  contract  revenue  and 
is  more  likely  to  negotiate  with  cus¬ 
tomers  to  reduce  rclicensing  fees. 

Smith  advocates  having  a  frank  dis¬ 
cussion  wilh  your  vendor  about  servic¬ 
ing  issues.  With  his  company's  storage 
vendor,  Hewlett-Packard  Co.,  “it  took 
some  time,"  he  says.  "There  were  light¬ 
ly  intimaied  threats  of  rcfiisal  to  put  it 
under  warranty  and  tack  on  recertifi¬ 
cation  costs."  How  tbe  vendor  reacts. 
Smith  says,  can  either  cement  the  rela¬ 
tionship  or  end  it 

WNI  There  Be 
Compatibility  Issues? 

One  gotcha  on  used  storage 
equipment  is  compatibility 
with  newer  equipment,  particularly  in 
the  areas  of  firmware  revisions  and  in¬ 
terface  compatibility.  "If  you  have  tbe 
luxury  of  time,  it's  easy  enough  to  take 
a  look  at  your  operating  systems  and 
firmware  revisions  and  patch-level  kits 
and  determine  whether  the  equipment 
will  be  an  easy  fit.”  AITiliated  Comput¬ 
er  Services'  Copell  says.  “But  around 
here,  things  are  on  a  deadline  mentali¬ 
ty,  and  that's  when  you  find  problems." 

In  some  cases,  resellers  the  lat- 
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est  firmware  revisions  onto  the  equip¬ 
ment  they  sell:  in  others,  their  tech 
support  staffs  can  help  with  fixes  when 
problems  arc  discovered. 

At  ATA  Airlines,  Smith's  staff  con¬ 
ducts  its  own  research  into  firmware 
requirements.  "We  need  to  be  pre¬ 
pared  to  understand  why  you  can  have 
two  disks  that  carry  the  .same  part 
number,  and  one  works  while  the  other 
doesn't,"  he  says. 

Also  keep  in  mind  that  standards 
change.  “You  can  mistakenly  assume 
that  a  piece  of  old  gear  can  do  some¬ 
thing  that's  commonplace  today."  says 
Marc  Farley,  president  of  Building 
Storage  Inc.,  a  consultancy  in  Saratoga. 
Calif.  For  instance,  an  older  Fibre 
Channel  host  bus  adapter  might  be 
available  for  $20,  but  it’s  useless  if  it 
doesn't  support  a  fabric  log-in.  which 
most  SANs  use  today. 

CanlTnistthe 
Remivteter’s  Staff? 

The  caliber  of  vendors  in  the 
refurbished  market  can  vary 
widely.  Smith  says,  and  the  best  way  to 
know  what  you're  getting  is  to  check 
the  resumes  of  tbe  technical  staffers. 

"We've  relied  on  [World  Data  Prod¬ 
ucts]  heavily  to  ensure  things  work 
when  they  gut  here  and  do  some  inte¬ 
gration."  he  says.  “In  cs-Hcncc,  the  re- 
markclcr's  staff  is  an  extension  of  your 
staff,  so  I'd  advocate  looking  carefully 
at  the  vendor's  hiring  practices  and  the 
quality  of  their  employees." 

In  a  long-term  relationship,  a  rc- 
marketer  can  help  you  decide  whai 
will  work  best  with  your  environment 
and  what  options  will  save  you  the 
most  money.  There  are  tons  of  pre¬ 
requisites  for  purchasing  storage  — 
what  are  you  attaching  to.  what  storage 
adapters  are  you  using,  what  SAN  de¬ 
vices  arc  you  using."  says  )amc.s  Davie. 

"Sometimes,  the  people  selling  in 
the  used  market  have  no  idea  what 
they're  promoting,"  Farley  says.  For 
instance,  when  he  has  purchased  on 
eBay,  he's  been  given  data  sheets  that 
don't  match  the  product  being  sold. 
"Clearly,  they  had  no  idea  what  the)’ 
were  doing,  but  they  were  .sure  eager 
to  sell  it,"  Fariey  says.  O  49422 


Brandet  is  a  Computcrworld  contribut¬ 
ing  writer  in  Grand  Rapids,  Mich.  Con¬ 
tact  her  at  maryJ>randel(§V(mcast.ne(. 


USEDEQUIPIIEHTIttIKn 

Rksi  in  the  secondary  mariiei  can  range  1mm  20% 
to  30%  of  manutaclizers' suggested  pnees  for  new 
equuKTient 
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Stick  With  What  You  Know 


WHBI  AJRUNES  ourchased 
Its  tet  SAN.  the  equixnent  MBsn't 
avBiiafab  on  the  rehirbished  market, 
and  looking  back,  that's  a  Qood 
thiiQ.  says  FU  Smdh.  director  of 
nfonnation  services. 

Aher  installing  the  new  equip¬ 
ment  the  SAN  didn't  perform  up  to 
Its  pufafeshed  specificWts.  and  the 
manufacturer  had  to  be  caled  in  for 
assistance,  staving  dial  extra  layer 
of  the  remarketer  could  have  made  it 
(ffliaA.' Srnidi  says. 'We  wouldn't 
have  had  the  dout.  and  the  problem 


Contimud  from  page  40 
nance  from  the  original  manufacturer 
or  from  a  reputable  third  party.  "Some 
of  the  big  vc^ors  like  HP.  IBM  and 
Sun  are  very  strict  about  what  they 
wiU  and  won't  support  as  fiu  as  the  age 
of  the  equipment  and  the  firmware  and 
its  interaction  with  their  more  modern 
equipment.'*  Copell  warns. 

Vendors  may  also  provide  mainte¬ 
nance  contracts  more  readily  if  you 
buy  from  an  authorized  reseller  of 
their  equipment.  Otherwise,  they  may 
require  a  site  visit  and  an  audit  to  per¬ 
form  necessary  upgrades  or  firmware 
changes  —  for  a  price,  of  course. 

You  should  also  ensure  that  all  the 
drives  within  a  storage  system  are 
original  mamifocturer  drives,  or  the 
manufocturer  wont  place  them  under 
maintenance  agreements,  according  to 
Robert  Davie,  foxinder  of  ITParade.- 
com  Inc.,  a  Weh-based  marketplace  for 
refurbished  computer  equipment  in 
Cary,  NXl  For  example,  a  Sun  Micro¬ 
systems  array  must  have  all  Sun- 
manufactured  drives  in  it 

IBM  U  one  of  the  only  vendors  with 
well-defined  processes  for  servicing 
the  secondhand  market,  says  James 
Davie,  a  vice  president  at  Canvas  Sys¬ 
tems.  a  reseller  in  Norcross.  Ga.  It 
font  a  'banding  process."  by  which  IBM 
certifies  that  the  system  is  'mainte¬ 
nance  service  quaUAed"  at  the  time  of 
the  sale.  The  system  arrives  at  the  cus- 
uuner  site  with  a  silver  band  around  it. 
IBM  engineers  implement  the  system, 
and  IBM  provides  the  maintenance 
contract  This  comes  at  an  additional 
cost  of  about  $1,000,  according  to 
Doug  Rei^l.  a  consultant  at  Xerxes 
Computer  Corp..  a  refurbished  com¬ 
puter  reseller  in  Bloomington,  Mina, 
so  customers  might  choose  this  option 
only  for  higher-end  equipment. 


may  not  have  resonated  with  the 
vendor.  *  The  lesson:  If  you're  work¬ 
ing  with  an  emerging  t^noiogy  or 
one  you’re  not  intimately  familiar 
with,  your  risk  factors  rise. 

Another  point;  In  the  refurbished 
market,  you  don't  have  the  honey¬ 
moon  period  when  you  can  can  in  aH 
of  the  vendor’s  resources. 

ATA  bought  its  first  SAN  fott  years 
ago.  Since  then.  Smith  has  turned  to 
the  refurbished  market  when  he  has 
needed  an  additional  SAN  array. 

-ktaryBrandel 


Some  companies,  such  as  ATA  Air¬ 
lines,  don't  rely  on  vendors  for  service 
and  instead  maintain  their  equipment 
themselves.  ATA  even  keeps  its  own 
inventory  of  spare  parts.  “We're  an 
extreme  case.'  Smith  acknowledges. 

Bruce  Caswell,  vice  president  of 
marketing  at  World  Data  Products,  a 
refurbished  computer  reseller  in  Min¬ 
netonka.  Mina,  says  roughly  80%  of 
his  company's  customers  put  their 
hardware  on  a  maintenance  contract, 
while  20%  are  self-maintaincrs.  Of 
those  that  opt  for  maintenance  con¬ 
tracts,  most  turn  to  credible  third- 
party  providers  such  as  Northrop 
Grtunman  Corp.,  DecisionOne.  Storage 
Technolt^  Corp.  and  General  Electric 
Ca  to  lower  their  cost  of  maintenance. 

3Shauldl 
Vandor' 

Particularty  if  you're  purchas¬ 
ing  a  hi^-end  system,  many 
vendors  udll  try  to  dissuade  you  from 
purchasing  reforbtsbed  equipment  by 
threatening  exorbitant  "recertifica¬ 
tion"  fees  or  even  refiismg  to  service  it 
"I  know  one  large  insurance  company 
that  got  strong  push-back  from  Sun  at 
the  CFO  level  and  decided  not  to  pur¬ 
chase  refurbished  because  of  that.” 
says  Robert  Davie.  On  a  StorageTek 
L700  tape  drive,  the  relicensing  foe 
can  reach  $2,200,  be  says. 

According  to  many  observers,  the 
vendor  whb  one  of  the  worst  reputa¬ 
tions  in  this  regard  is  EMC  Corp. 

'EMC  has  a  subtle  way  of  controlling 
the  market  in  its  own  used  gear,"  says 
John  Webster,  founder  of  the  Data 
Mobility  Group  LLC  a  consultancy 
in  Nashua.  NJt  “They  say  that  the 
microcode  to  run  the  machine  is  not 
transferable  and  that  you  need  to  boy 
a  new  microcode  license  ~  which. 


by  the  way,  ain't  cheap.” 

EMC  defends  its  relicensing  require¬ 
ments.  'Our  systems  are  intelligent 
storage  systems  that  have  software  in¬ 
corporated  into  them,  and  it  is  stan¬ 
dard  practice  throughout  the  industry 
that  the  software  license  doesn’t  get 
transferred  when  the  hardware  gets 
transferred,”  an  EMC  spokesman  says. 
•TTie  licensing  also  ensures  that  the 
product  operates  as  it's  supposed  to 
for  the  customer." 

It’s  important  to  keep  in  mind  that 
these  types  of  fees  are  nc^tiable.  re¬ 
sellers  say,  and  that  sale^oplc  can 
reduce  or  even  waive  them.  A  good 
negotiating  point  is  to  stiggesl  that  you 
might  opt  for  third-party  maintenance, 
meaning  the  vendor  will  lose  the  ser¬ 
vice  revenue  as  well.  Robert  Davie  rec¬ 
ommends  contacting  the  field  service 
rep  instead  of  the  salesperson,  since 
the  service  is  typic^ly  compensat¬ 
ed  on  the  service  contract  revenue  and 
is  more  iikely  to  negotiate  with  cus¬ 
tomers  to  reduce  relicensing  fees. 

Smith  advocates  having  a  frank  dis¬ 
cussion  with  your  vendor  about  servic¬ 
ing  issues.  With  his  company's  storage 
vendor,  Hewlett-Packard  Co„  It  took 
some  time.”  be  says.  "There  were  light¬ 
ly  intimated  threats  of  refusal  to  put  it 
under  warranty  and  tack  on  recertifi¬ 
cation  costs."  How  the  vendor  reacts. 
Smith  says,  can  either  cement  the  rela¬ 
tionship  or  end  it. 

4  Wn  There  Be 

CompaUblity  Issues? 

One  gotcha  on  used  storage 
equipment  b  compatibility 
with  newer  equipment,  particularly  in 
the  areas  of  firmware  revisions  and  in- 
teriace  compatibility.  "If  you  have  the 
luxury  of  time,  it's  easy  enough  to  take 
a  look  at  your  operating  systems  and 
firmware  revbions  and  patch-level  kits 
and  determine  whether  the  equipment 
will  be  an  easy  fit,”  Affiliated  Comput¬ 
er  Services’  Copell  says.  "But  around 
here,  things  are  on  a  deadline  mentali¬ 
ty.  and  that's  when  you  find  problems." 
In  some  cases,  resellers  lo^  the  lat¬ 


est  fumware  revbions  onto  the  equip¬ 
ment  they  seU;  in  others,  their  tech 
support  staffs  can  help  with  Axes  when 
problems  are  discovered. 

At  ATA  Airlines.  Smith's  staff  con¬ 
ducts  its  own  research  into  firmware 
requirements.  'TVe  need  to  be  pre¬ 
pared  to  understand  why  you  can  have 
two  disks  that  carry  the  same  part 
number,  and  one  works  while  the  other 
doesn't,"  he  says. 

Abo  keep  in  mind  that  standards 
change.  "You  can  mbtakenly  assume 
that  a  piece  of  old  gear  can  do  some¬ 
thing  that’s  commonplace  today,"  says 
Marc  Farley,  president  of  Building 
Storage  Inc.,  a  consultancy  in  Saratoga. 
Calit  For  instance,  an  oId«  Hbre 
Chani>el  host  bus  adapter  might  be 
available  for  $20.  but  it's  useless  if  it 
doesn't  support  a  fabric  log-in.  which 
most  SANs  use  today. 

SCanlTiustthe 
Reirarteter’s  Staff? 

The  caliber  of  vetulors  in  the 
refurbished  market  can  vary 
widely.  Smith  says,  and  the  best  way  to 
know  what  you're  getting  b  to  check 
the  rteumis  of  the  technical  staffers. 

•TVe'vc  relied  on  [World  Dau  Prod¬ 
ucts]  heavily  to  ensure  things  work 
when  they  got  here  and  do  some  inie- 
gratioa”  he  says.  “In  essence,  the  re- 
roaiketer’s  staff  b  an  extension  of  your 
staff,  so  Fd  advocate  looking  carefully 
at  the  vendor's  hiring  practices  and  the 
quality  of  their  employees.” 

In  a  long-term  relationship,  a  re¬ 
marketer  can  help  you  decide  what 
will  work  best  with  your  environment 
and  what  options  will  save  you  the 
most  money.  There  arc  loos  of  pre¬ 
requisites  for  purchasing  storage  — 
what  are  you  attaching  to,  what  storage 
adapters  are  you  using,  ^dut  SAN  de¬ 
vices  arc  you  using.”  says  James  Davie. 

"Sometimes,  the  people  selUxig  in 
the  used  market  ha^  no  idea 
they're  promoting.”  Farley  says.  For 
instance,  when  he  has  purchased  on 
eBay,  he's  been  given  data  sheets  that 
don’t  match  the  product  being  sold. 
“Clearly,  they  had  no  idea  what  they 
were  doing,  but  they  were  sure  eager 
to  sell  it,”  Farley  says.  O  49422 


Brondel  b  a  Computerworld  contribut- 
irtg  writer  in  Grand  Rapids,  Mich.  Con¬ 
tact  her  at  mary.brandel@eomcasLnet 
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IT’S  STORAGE.  IT’S  FLEXIBLE.  IT’S  YOU. 

Yes,  you .  Whatever  is  vital  to  you  -  x-iays.  biueprirrts,  customer  information  -  storing 
vast  amounts  of  data  is  important.  Even  more  important  is  access  to  that  information. 
Having  data  right  at  your  fingertips.  Welcome  to  the  on  demand  world  enabled 
by  IBM  TotalStorage*  systems.  Where  your  servers  and  storage  work  together  to 
better  manage  data  across  your  organization,  givir>g  you  a  broad  range  of  storage 
options.  Thus,  a  total  recognition  of  TOO,  scalability  and  flexibility.  IBM  TotalStorage 
is  for  you.  Find  and  learn  the  whole  story  at  ibnfi.coin/totalstorageAotal 

IBM  TotalStorage* 
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Grid  Storage 

DEFINITION 

Grid  storage,  analogous  to  grid  computing,  is  a  new  model  for 
deploying  and  managing  storage  di^buted  across  multiple  sys¬ 
tems  and  networks,  making  efficient  use  of  available  storage  ca¬ 
pacity  without  requiring  a  large,  centralized  switching  system 


•VnUSSCLL  KAV 

WE  BOUTINEiY  talk 
about  the  electri¬ 
cal  power  grid  or 
the  telephone 
grid,  and  It's 

ffretty  dear  irfut  we  mean  — 
a  large,  decentralized  network 
with  massive  intercoonectivi- 
ty  and  coordinated  manage¬ 
ment.  A  grid  is.  in  fact.  _ 

a  meshed  network  in 
which  no  sin^e  cen¬ 
tralized  switch  or  bub 
controls  routing.  Grids 
offer  almost  unlimited 
scalability  in  size  and 
performance  because  they 
aren't  constrained  by  the 
need  for  ever-targer  central 
switches.  Grid  networks  thus 
reduce  component  costs  and 
produce  a  reliable  and  re¬ 
silient  structure. 

Applyix^  the  grid  concept 


to  a  computer  network  lets  us 
harness  available  but  unused 
resources  by  dynamically  allo¬ 
cating  and  deallocating  capac¬ 
ity.  bandwidth  and  processing 
among  numerous  distributed 
computers.  A  computing  grid 
can  span  locations,  organiza¬ 
tions,  machine  architectures 
and  software  boundaries,  offer- 

_  ing  power,  coUabt^a- 

tion  and  information 
access  to  connected 
users.  Universities  and 
research  &cilities  are 

_  using  grids  to  build 

what  amounts  to  su¬ 
percomputer  capability  from 
PCs.  Macintosh^  and  Linux 
boxes. 

After  grid  computing  came 
into  being,  H  was  only  a  matter 
of  time  before  a  rimtlar  model 
would  emerge  for  malring  use 
of  distributed  data  storage. 


Most  storage  networks  are 
built  in  star  configurations, 
where  all  servers  and  storage 
devices  are  connected  to  a  sin¬ 
gle  central  switch.  In  contrast, 
grid  topology  is  built  with  a 
netwo^  of  interconnected 
smaller  switches  that  can 
scale  as  bandwidth  increases 
and  continue  to  deliver  im¬ 
proved  reliability  and  higher 
performance  and  connectivity 
(see  diagrams). 

What  b  Grid  Storage? 

Based  on  current  and  pro¬ 
posed  products,  it  appears 
that  a  grid  storage  system 
should  include  the  following: 

Moddv  sioragi  amys:  Tliese 
systems  are  connected  across 
a  storage  network  using  serial 
ATA  disks.  The  systems  can 
be  block-oriented  storage 
arrays  or  networic-attacbed 


storage  gateways  and  servers. 


Storage  must  be  organized  as 
a  single  logical  pool  of  re¬ 
sources  available  to  users. 

Data  radBriancy  and  mIM- 
Ky:  Multiple  copies  of  data 
should  exist  across  nodes  in 
the  grid,  creating  redundant 
data  access  and  availability  in 
case  of  a  component  failure. 

Common  moratamenfc  A  sin¬ 
gle  level  of  management 
across  all  nodes  should  cover 
the  areas  of  data  security,  mo¬ 
bility  and  migration,  capacity 
on  demand,  and  provisioning. 


om^iioi 


Because  common 
management  is  so  important, 
the  tasks  involved  in  adminis¬ 
tration  should  be  organized  in 
modular  fashion,  allowing  the 
autodiscovery  of  new  nodes  in 
the  grid  and  automating  vol¬ 
ume  and  file  management. 

Three  Basic  Benefib 

Applying  grid  topology  to  a 
storage  network  provides 
sever^  benefits,  including 
the  following: 

IWhUfty.  A  well-designed 
grid  network  is  extremely  re¬ 
silient.  Rather  than  providing 
just  two  paths  between  any 
two  nodes,  the  grid  offers  mul¬ 
tiple  paths  between  each  stor¬ 
age  node.  This  makes  it  easy 
to  service  and  replace  compo¬ 
nents  in  case  of  ^ure,  with 
minimal  impact  on  system 


availability  or  downtime. 

The  same  fac¬ 
tors  that  lead  to  reliability  also 
can  improve  performance.  Not 
requiring  a  centralized  switch 
with  many  ports  eliminates 
a  potential  performance  bot¬ 
tleneck,  and  applying  load- 
balancing  techniques  to  the 
multiple  paths  available  offers 
consistent  performance  for 
the  entire  network. 

SciiMty.  It's  easy  to  ex¬ 
pand  a  grid  network  using 
inexpensive  switches  with 
low  port  counts  to  accommo¬ 
date  additional  servers  for  in¬ 
creased  performance,  band¬ 
width  and  capacity.  In  essence, 
grid  storage  is  a  way  to  scale 
out  rather  than  up.  using  rela¬ 
tively  inexpensive  stor^ 
building  blocks.  For  more  on 
scaling  up  vs.  scaling  out,  see 
(^cklinka505a  0  48629 


Kay  is  a  Computerworld  con* 
triburteg  writer.  Ybu  con  reach 
him  at  nisskay@charter.net. 
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the  Labs: 

The  Holographic  Disc 

■  OPTWIRE  CORP.  in  Japan  (wmtw. 
optware.co4p/en^ish)  has  come  out 
with  a  prototype  of  what  it  calls  the 
worid’s  first  Olographic  recording 
disc  for  reliable  recording  and  play* 
back  of  digital  movies.  The  dis<* 
(above,  left)  is  12  cm  in  diameter  — 
the  same  as  DVDs  and  CDs  —  and 
could  be  on  the  market  for  commercial 
use  in  the  first  quarter  of 2006  with  a 
capacity  of 200GB.  That’s  the  good 
news.  The  bad  news  is  that  the  re¬ 
corders  are  expected  to  cost  about 
$20,000.  and  the  discs  will  be  $100 
each.  A  less-expensive  version  for 
home  use  could  be  on  the  maricet  as 
soon  as  2007,  the  company  says. 

That  could  be  good  for  consumers 
but  bad  for  electronics  companies, 
which  will  be  trying  to  persuade  buy¬ 
ers  at  about  the  same  time  to  invest  in 
blue-laser  storage  discs  like  Bhi-tay 
Disc  or  HD-OVD,  which  have  about 
one-fifth  the  capacity. 

Future  development  a(  the  Holo¬ 
graphic  Versatile  Disc  technology 
could  boost  its  c^iacity  to  1TB  of  data, 
Optware  says.  —  Mortyn  n^lioms  and 
Paid  KaUender,  IDG  News  Service 


Stoi^  Capacity: 

The  Tipping  Point 

■  How  doM  yw  MVMiziilm  convm 
then  bondmvto?  An  IDC  study  of  471 
North  American  organizations  found 
that,  on  average,  48%  of  ftieir  total 
storage  capacity  is  currently 
and  the  trigger  point  for  deciding  to 
add  more  storage  is  74%.  This  mpan«t 
that,  on  average  their  storage  systems 
are  nearly  ‘’three  quarters  full”  when 
they  add  storage  capacity.  The  insur¬ 
ance  and  transportation  industries 


push  the  threshold  further  than  other 
vertical  markets,  saying  their  trigger 
point  for  adding  storage  is  when  it 
exceeds  81%  utilization. 

The  insurance  industry  appears  ripe 
for  additional  storage  capacity,  IDC 
says,  because  a  quarter  of  the  insur¬ 
ance  companies  reported  that  at  least 
80%  of  their  capacity  is  currently  used. 


I^eiits 
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www.snwusacom 
OcL  25-28;  Orlando 


■  Mgb  Pwfcnmnce  ConpuUng, 
networking  and  Storage  Coniarence 

wwwjc-conferencextrgAc2004 
Nov.  6-12;  Pittsburgh 

■  Hetwmfc  Storage  Conference  2005 

www.nerworfcstoragecon/erence.co/n 
March  7-9, 2005;  Milpitas, 


Hidden  Costs  of 
E-mail  Archiving 

■  Regulatory  requirements  are  helping 
the  e-mail  archiving  technol<^  mar¬ 
ket  to  double  this  year,  according  to 
The  Yankee  Group  in  BostotL  But  large 
corporatioDs  will  need  to  factor  in 
increased  storage,  systems,  networic- 
ing,  software  and  management  costs, 
a  bulletin  from  the  research  ftrm  says. 


For  example,  “an  enterprise  with  54)00 
employees  will  require  nearly  4TB  of 
storage  every  year"  for  e-mail  archiv¬ 
ing.  the  report  says.  This  will  require 
storage  management  software  and  at 


least  one  full-time  storage  administra¬ 
tor."  And  if  the  company  is  using  Fibre 
Channel  storage  systems,  h  may  need 
to  add  networking  equipment  to  the 
list.  The  Yankee  Group  says.  O  49612 


ITS  COMPACT. 

ITS  AFFORDABLE. 

ITS  YOU. 

Ifs  the  enterphse-dass  IBM  TotalStoraqe*  DS6800  system. 
Il^  as  low  as  half  the  price'  and  takes  up  as  little  as  5%  of 
dte  space' of  that ‘bther  ertenprise  skxage  offenng 
Symmelrix  DM)(800).  Wilh  Power  Architecture”  techrtology 
and  a  surprisingly  small  footprirrt  ifs  designed  to  deliver 
lower  costs.  Is  it  storage  or  is  it  a  strategy?  ITS  both.  Ifs  IBM 
TotalStorage  at  its  best 
Want  to  see  for  yourself?  In  person? 

Learn  more  at  the  IBM  TotalStorage  Roadshow.  With  product 
presentations  and  the  latest  storage  news.  Ooni  miss  out. 
See  for  yourself  how  you  could  beneht  wh«i  everythir>g 
works  together.  For  more  information  or  to  register,  go  to 
fcmxom/totaistoragei^ave 

IBM  TotalStorage* 
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Grid  Storage 

OEUNITION 

Grid  storage,  analogous  to  grid  computing,  is  a  new  model  for 
deploying  and  managing  storage  distributed  across  multiple  sys¬ 
tems  and  networks,  making  efficient  use  of  available  storage  ca¬ 
pacity  without  requiring  a  large,  centralized  switching  system. 


BY  RUSSELL  KAY  ,  tO  J  COmpUtCr  tlCtWOrk  IcIS  U-S 

Wi  KiH'TiJdHV  talk  harnL'ss  available  but  unused 
about  the  electrl'  |  resources  by  dynamically  alio- 

; 


'  cal  pt>\ver  grid 
the  telephone 
grid,  and  it's 
pretty  clear  what  we  mean  — 
a  large,  decentralized  network 
with  massive  interconncctivi- 
ty  and  ciwrdinated  manage¬ 
ment.  A  grid  is.  in  fact,  _ 

a  meshed  network  in 
which  no  single  cen- 
tralizL'd  switch  or  hub 
coniruU  routing.  Grids 
otter  almost  unlimited 
scalability  in  size  and 
performance  because  they 
aren't  constrained  by  the 
need  for  ever-larger  central 
switches.  Grid  networks  thus 
reduce  component  costs  and 
produce  a  reliable  and  re¬ 
silient  structure. 

Applying  the  grid  concept 


gUIGK 

^DY 


eating  and  dealU>cating  capac¬ 
ity.  bandwidth  and  processing 
among  numerous  distributed 
nimpuicrs.  A  computing  grid 
can  span  locations,  organiza¬ 
tions.  machine  architectures 
and  software  boundaries.  o/Fer- 
_  ing  power,  collabora¬ 
tion  and  information 
access  to  connected 
users.  Universities  and 
research  facilities  are 

_  using  grids  to  build 

what  amounts  to  su¬ 
percomputer  capability  from 
PCs.  Macintoshes  and  Linux 
boxes. 

After  grid  computing  came 
into  being,  it  was  only  a  matter 
of  time  before  a  similar  model 
would  emerge  for  making  use 
of  distributed  data  storage. 


Most  storage  networks  are 
built  in  star  configurations, 
where  all  servers  and  storage 
devices  are  connected  to  a  sin¬ 
gle  central  switch.  In  contrast, 
grid  topology  is  built  with  a 
network  of  interconnected 
smaller  switches  that  can 
scale  as  bandwidth  increasc.s 
and  continue  to  deliver  im¬ 
proved  reliability  and  higher 
performance  and  connectivity 
(sec  diagrams). 

What  Is  Grid  Storage? 

Based  on  current  and  pro¬ 
posed  products,  it  appears 
that  a  grid  storage  system 
should  include  the  fotlowii^ 
Modular  storage  arrays;  These 
systems  an?  connected  across 
a  storage  network  using  serial 
ATA  disks.  TTie  systems  can 
be  block-oriented  storage 
arrays  or  network-attached 


I  storage  gatewa>  s  and  servers. 

I  (Common  virliiaiization  layer 
I  Storage  must  be  organized  as 
a  single  logical  pool  of  re- 
'  sources  available  to  users. 

Data  redundancy  and  avaitabil' 
ity:  Multiple  copies  of  data 
should  exist  across  nodes  in 
the  grid,  creating  redundant 
data  access  and  availability  in 
case  of  a  component  failure. 

Common  manaoement:  A  sin¬ 
gle  level  of  management 
across  all  nodes  should  cover 
the  areas  of  data  security,  mo¬ 
bility  and  migration,  capacity 
on  demand,  and  provisioning. 

Simpftfied  platfomi/management 
architecture:  Because  common 
management  is  so  important, 
the  tasks  involved  in  adminis¬ 
tration  should  be  organized  in 
modular  fashion,  allowing  the 
autodiscovery  of  new  nodes  in 
the  grid  and  automating  vol¬ 
ume  and  file  management. 

Three  Basic  Benefits 

Applying  grid  topology  to  a 
storage  network  provides 
several  benefits,  including 
the  following; 

ReKabilrty.  A  well-designed 
grid  network  is  fextrcmoly  re¬ 
silient.  Rather  than  providing 
just  two  paths  between  any 
two  nodes,  the  grid  offers  mul¬ 
tiple  paths  between  each  stor¬ 
age  node.  This  makes  it  easy 
to  service  and  replace  compo¬ 
nents  in  case  of  foilure,  with 
minimal  impact  on  system 


availability  or  downtime. 

Performance.  The  same  fac¬ 
tors  that  lead  to  reliability  also 
can  improve  performance.  Not 
requiring  a  centralized  switch 
with  many  ports  eliminates 
a  potential  performance  bot¬ 
tleneck.  and  applying  load¬ 
balancing  techniques  to  the 
multiple  paths  available  offers 
consistent  performance  for 
the  entire  network. 

Scalability.  It's  eas}'  to  ex¬ 
pand  a  grid  network  using 
inexpensive  switches  with 
low  port  counts  to  accommo¬ 
date  additional  servers  for  in¬ 
creased  performance,  band¬ 
width  and  capacity.  In  L*ssencc. 
grid  storage  is  a  way  to  scale 
out  rather  than  up.  using  rela¬ 
tively  inexpensive  storage 
building  blocks.  For  more  on 
scaling  up  vs.  scaling  out.  see 
(JuickLink  a5050.  O  49829 


Kay  is  a  Compuicnvorld  con¬ 
tributing  writer.  Vhu  can  reach 
him  at  russkayi^charter.nel. 


HP  LEADS  THE  WAY 

Foi  mofe  on  the  first  gnd  storage  product, 
from  Hewtett-f^ckard,  and  the  activities  ot 
other  vendors,  visit  our  Web  site. 

QuicMjnk  49972 
www.cofnputerwor1d.corn 


Are  there  technoiogies  or  issues  you'd  like 
to  team  about  in  OuickStudy?  Send  your 
ideas  to  Quickstudy@>compu(eivvorld.com 


To  tmd  a  complete  archive  ot  our 
QuickSludies.  go  online  to 

Cl  computerworldcom/quidisttMlies 


The  Grid 
Storage 
Differ^ce 


Ul's  conMdir  a  MnplB  Ml* 
iMrk  of  16  Msragu  nodM  hi 
•  Mgli  omiobMly  oiwtron* 
monl.  wfiort  al  nedH  ro- 
qu^  accM  to  000  Motfi- 


ar.  The  usual  may  to  design 
thisirautobeiMilhtiiinlfrport 

swlches  (ttto  second  OM  for  fafl-ow)  in  a  star  conbguralion.  Thus  each  switch 
necfed  to  each  of  the  16  nodes  and  each  node  is  connected  to  both  switches,  and  we  have 
32  mred  connedlons  and  (wo  expensive  switches.  There  are  two  oosstote  paths  between 
any  two  nodes.  If  we  went  to  expand  die  rietwork.  we  can  add  more  nodes  only  by  also 
reptaong  the  swhehes  with  ones  that  have  rnore  ports  avad^. 


in  a  grid  amngsmant.  we 
could  arrange  the  nodes  in 
four  groupe  of  fmir.  each 


coonectodtoaeimpie 
four-port  audteh.  Vlte  would 
also  use  tour  additional  four 
port  switches,  each  connect¬ 
ing  to  one  node  In  each  of  the 
four  groups.  Now  we  have  32 
wired  connections  (the  same 
as  before),  but  four-port 
switdres  instead  of  two  16- 
--  port  units,  and  each  node  is 

connected  to  two  switches.  In 
the  event  of  a  failure  of  any  of 

the  switches,  there  are  many  possible  alternate  paths  to  corrnect  any  two  nodes.  The 
arrangernent  is  rncxe  resKent  and  less  suscepttite  to  catastrophic  failure  tfen  convention¬ 
al  configurations.  To  expand  the  network,  we  can  add  rnore  nodes  and  more  srnM  switch- 
es  without  having  to  re-engineer  the  whole  structure.  (Note;  We  could  have  achieved  a 
svnilar  resuh  by  configuhng  the  with  four  eight-porl  switches.) 
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The  Almanac 


For  example,  “an  enterprise  with  5.00() 
employees  will  require  nearly  4TB  of 
storage  every  year"  for  e-mail  archiv¬ 
ing.  the  report  says.  "This  will  require 
storage  management  software  and  at 


least  one  full-time  storage  administra¬ 
tor."  And  if  the  company  is  using  Fibre 
Channel  storage  sy.siems,  it  may  need 
to  add  networking  equipment  to  the 
list.  The  Yankee  Ciroup  says.  O  49812 


An  eclectic  collection  of  research  and  resources. 


From  the  Labs: 

The  Holographic  Disc 

•  OPTWARE  CORP.  in  Japan  (www. 
optware.co.ip/eT^lish)  has  come  out 
with  a  prototype  of  what  it  calls  the 
world’s  first  holographic  recording 
disc  for  reliable  recording  and  play¬ 
back  of  digital  movies.  The  disc 
(above,  left)  is  12  cm  in  diameter  — 
the  same  as  DVDs  and  CDs  —  and 
could  be  on  the  market  for  commercial 
use  in  the  first  quarter  of  2006  with  a 
capacity  of  200GB.  That’s  the  good 
news.  The  bad  news  is  that  the  re¬ 
corders  are  expected  to  cost  about 
S20.000.  and  the  discs  will  be  $100 
each.  A  less-expensive  version  for 
home  use  could  be  on  the  market  as 
soon  as  2007.  the  company  says. 

That  could  be  good  for  consumers 
but  bad  for  electronics  companies, 
which  will  be  trying  to  persuade  buy¬ 
ers  at  about  the  same  time  to  invest  in 
blue-laser  storage  discs  like  Blu-ray 
Disc  or  HD-DVD,  which  have  about 
one-fifth  the  capacity. 

Future  development  of  the  Holo¬ 
graphic  Versatile  Disc  technology 
could  boost  its  capacity  to  1TB  of  data. 
Optware  says.  —  Marfyn  WUliams  and 
Paul  Kallender,  IDG  News  Service 


Storage  Capacity: 

The  Tipping  Point 

How  does  your  organization  compare  ivHh 
these  benchmarks?  An  IDC  study  of  471 
North  American  organizations  found 
that,  on  average.  48%  of  their  total 
storage  capacity  is  currently  utilized, 
and  the  trigger  point  for  deciding  to 
add  more  storage  is  74%.  This  means 
that,  on  average,  their  storage  systems 
are  nearly  “three  quarters  full"  when 
they  add  storage  capacity.  The  insur¬ 
ance  and  transportation  industries 


push  the  threshold  further  than  other 
vertical  markets,  saying  their  trigger 
point  for  adding  storage  is  when  it 
exceeds  81%  utilization. 

The  insurance  industry  appears  ripe 
for  additional  storage  capacity.  IDC 
says,  because  a  quarter  of  the  insur¬ 
ance  companies  reported  that  at  least 
80%  of  their  capacity  is  currently  used. 


Events 

•  Storage  Networlung  Workf.  Fail  2004 
wu’w.snwusa.com 

Oct.  25-28:  Orlando 

>  High  Performance  Computing. 
Networking  and  Storage  Conference 

www.sc-con/erence.org,  sc2004 

Nov.  6-12:  Pittsburgh 

•  Network  Storage  Conference  2005 

www.neiworksiora^t-conlerence.corn 

March  7-9. 2005:  Milpitas.  Calif. 


Hidden  (kists  of 
E-mail  Archiving 

•  Regulatory  requirements  are  helping 
the  e-mail  archiving  technology  mar¬ 
ket  to  double  this  year,  according  to 
The  Yankee  Group  in  Bt>ston.  But  large 
corporations  will  need  to  factor  in 
increased  storage,  systems,  network- 
ii^  software  and  management  costs, 
a  bulletin  from  the  research  firm  says. 


What  applications  are  currently 
driving  demand  for  more  data 
storage  m  youi  organization’’ 
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IT’S  COMPACT. 

IT’S  AFFORDABLE. 

ITS  YOU. 

It  s  the  enlerpnse-class  IBM  TotalStorage  DS6800  system 
It  s  as  low  as  half  the  price  and  takes  up  as  little  as  S**©  of 
the  space-  of  that  other"  enterprise  storage  ottering  (the  EMC 
Symmetrix  DMX800 )  With  Power  Architecture '  lechrKdogy 
and  a  surprisingly  small  footprint,  it  s  designed  to  deliver 
lower  costs.  Is  it  storage  or « it  a  straiegy’  It  s  both.  It's  fBM 
TotalStorage  at  its  best 
Want  to  see  hx  yourself?  in  person’’ 

Learn  more  at  the  IBM  TotalStorage  Roadshow  With  jxoduci 
presentations  and  the  latest  storage  news.  Don’t  miss  out 
See  for  yourself  how  you  coukJ  benefit  when  everythmg 
works  together  For  more  mformafion  or  to  register,  go  to 
HMn^om/totalstorage/save 
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Pw  companson  mkO  on  US  ksi  puces  Aciuai  cusfwne*  n«v 

Cornpares  IBM  ToUiSlocsge  OSSeoo  sywem  Mh  2TBs  Operamg  Erwnnnm 
License  sotti«are  1 16TB  usmg  146GB  tOK  FC  Or>«es  4G8  el  nwKvy  19  ncFt  fau 
ano  FICOM  Atiaefunem  license  USenes  suppom .  ano  CMC  Symmaeia  OUXSOO  nHh 
2TBs  cowroi  CeoWf  Mans9emen(  sotlware  1  «6TB  using  14606  1OX  FC  Qines  m 
4GB  c4  memory  LW  prnes  tor  EMC  Symmeint  ooumeo  npm  ihm  imemaiiDnai 
«rwwideasnemaiK>na<oom.  as  at  lailM  IBM  Ta(af3tora9e  DSesoo  irair  tie  used 
as  a  stanfl-aiorie  urm.  o»  moixSoo  mo  a  lacii  Sm  comparison  s  baaed  on  stand 
atone  use  IBM  TcaaiStorage  and  Pommi  Aicnaeciure  are  hadem»Ks  or  le^vpieo 
trademarks  tmernauanai  Busmess  Maenmes  Corporaboii  n  ite  unaea  Sums 
andw  Mtier  coortnes  Omer  company  product  and  service  nanus  may  » 
irademaiks  01  service  marks  el  omars  ?0CM  IBM  ComoWion  as  reserved 
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SNAPSHOTS 

Top  of  Mind 

IT  managers  $ay  die  followjng 
storage  topics  will  be 
“eirtremely  important’'  over 
the  next  three  months: 

Oeaster  recover^i/bustness  continuity 


Sttaorm  networks 


Storage  Probtems 

IT  managers  say  these  are  the 
top  three  storage  headaches: 


OatavDwd) 


c 


Yawning  Over  IP 

IT  managers  don't  seem  very 
excited  about  IP  storage,  with  many 
of  them  rating  it  as  neutral  or  un* 
important  lor  the  next  six  months. 

Extremely 
important 


39% 


SOURCE:  Conauf^iKrikf $  IT  LAder 
aesevtf)  Ranei .  Augisl  poor 


MARK  HALL 

Long  Live  Tape 


I'VE  BEEN  HANGING  AROUND  THE  RUMOR-MONGERING,  low-cost  disk  drive 
crowd  lately,  so  I  started  to  think  that  their  ATA  drives  are  making  tape  obsolete. 
And  when  the  information  life-cycle  management  forces  added  their  whispers 
about  the  improved  performance  and  low  cost  of  archiving  data  to  fixed  disks. 

I  became  a  fervent  convert  to  the  notion  that  tape  is  all  but  dead. 

In  fact,  I  had  intended  to  write  something  like  my  “Farewell  Floppy"  column  of 
nearly  five  years  ago.  in  which  I  (correctly)  dismissed  the  floppy  disk  as  credible  IT 
technology.  I  had  the  similar  self-righteous  vigor  of  a  convert  as  I  set  forth  to  write  my 
"Death  to  Tape"  column. 


Alas,  I  did  my  research  before  writing.  (A  generally 
wise,  although  not  always  accomplished,  task  among 
journalists.  I  Tape  is  far  from  dead.  If  anything,  thanks 
to  continued  technology  improvements  and  recent 
corporate  management  shenanigans  and  the  legisla¬ 
tive  responses  to  them,  tape  for  backup  and  archival 
storage  is  experiencing  a  resurgence. 

Take  IBM's  recent  tape  business.  It  has  seen  four 
consccuth’e  quarters  of  double-digit  upticks  in  rev¬ 
enue.  And  its  main  competitor  for  tape  systems.  Stor¬ 
age  Technology'  Corp.,  has  announced  16  consecutive 
quarters  of  year-over-year  earnings  growth. 

TTiosc  aren’t  the  numbers  of  a  technology 
in  a  lailspin.  nor  arc  they  what  I  expected 
to  find. 

technology  advances  and  lower 
CLWis  help  keep  tape  competitive  against 
ATA  drives  despite  drawbacks  in  perfor¬ 
mance.  it’s  the  work  of  politicians  that  is 
giving  tape  renewed  purpose  in  life.  After 
all,  they’ve  passed  Sarbancs-Oxlcy,  the 
Health  Insurance  Portability  and  Account¬ 
ability  Act  and  other  audit-friendly  legisla¬ 
tion,  seemingly  with  tape  in  mind. 

"A  couple  of  years  ago.  legislation  on  cor¬ 
porate  governance  changed  things,"  says 
Barr>-  Rudolph,  IBM’s  vice  president  for  tape  storage 
.systems.  Changed  indeed  —  in  a  good  way  for  tape 
storage  makers. 

That's  because  top  management  wants  IT  arch¬ 
ivists  to  err  on  the  side  of  saving  too  much  informa¬ 
tion  rather  than  too  little  and  to  spend  as  little  as  pos¬ 
sible  in  the  process.  For  today  (and  tomorrow),  that 
means  tape.  A  200GB  ATA  drive  sounds  cheap  at 
S140.  but  a  S40  tape  holds  just  as  much  uncompressed 
data.  By  the  end  of  the  year.  IBM  will  be  shipping  a 
400GB  version. 

Over  at  Fuji  Photo  Film  USA  in  Valhalla,  N.Y..  Rich 
Gadomski  tells  me  that  his  company  has  already 
demonstrated  1TB  uncompressed  capacity  on  a  sin¬ 
gle  tape  cartridge  and  expects  to  have  it  on  the  mar¬ 
ket  in  a  year  or  two.  And  both  Fuji  and  IBM  claim 
that  single  tapes  with  lOTB  to  15TB  of  storage  will 
ship  by  2010. 

Plus,  tape  archiving  systems  use  100%  of  a  tape’s 


capacity,  while  disk-to-disk  approaches  risk  duplicat¬ 
ing  the  same  inefficient  storage  utilization  rates  on 
backup  disks  as  on  production  one.v. 

With  those  kinds  of  capacity  and  efficiency  num¬ 
bers.  it’s  clear  that  low-end  drive  makers  will  forc\'er 
play  catch-up  to  tape  when  it  comes  to  the  storage 
capacity/cosi  ratio.  Plus,  you  don't  have  to  add  the 
incremental  expenses  of  a  full  RAID  storage  s>’stem. 
cooling  technology  and  electricity  that  you  need  to 
make  a  disk  drive  useful.  Tape  is  happy  just  to  sit  idle, 
drawing  do  power,  requiring  no  special  HVAC  support. 

ATA  disk  drive  makers  brag  that  their 
low-cost  technology  has  at  least  100  times 
the  performance  that  you'll  experience  re¬ 
trieving  data  from  tape  system.  However, 
in  the  world  of  compliance-driven  storage, 
audits  aren't  done  in  real  time.  You  can 
usually  retrieve  requested  information  in 
a  few  hours  —  or  days  —  and  still  meet 
user  needs.  That’s  right  up  tape's  alley. 

Tape  has  an  obvious  portability  advan¬ 
tage  over  disk.  And  it  ofTcrs  less-obvious 
protection  against  disk-based  viruses  be¬ 
cause  you  can  always  revert  data  on  tape  to 
a  state  prior  to  an  infection.  But  an  infected 
disk  aflccts  the  whole  drive,  regardless  of 
what  state  the  data  might  be  in. 

So.  it  looks  like  you’ll  be  using  tape  systems  for  the 
foreseeable  future.  Instead  of  seeking  ways  to  dump 
tape,  you  need  to  develop  tape  strategies  with  the 
same  zeal  you  have  for  plans  to  migrate  and  upgrade 
operating  systems  and  applications. 

Tape  media  might  reliably  retain  data  for  30.  even 
50  years.  But  you  shouldn’t  count  on  it,  especially  be¬ 
cause  the  tape  subsystems  that  read  and  transfer  the 
data  change  at  a  much  faster  rate. 

Although  applications  vary,  most  companies  should 
overhaul  their  tape  systems  every  10  to  15  years.  Check 
to  make  certain  that  the  new  devices  efficiently  work 
with  old  tapes.  Also,  every  15  to  20  years,  bring  ail 
your  archived  data  onto  newer  tape,  choosing  data 
formats  that  abide  by  industry  standards  to  better  en¬ 
sure  future  compatibility. 

Bom  in  an  IBM  lab  back  in  1952,  tape,  it  seems,  will 
never  die.  049686 
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Top  of  Mind 

fTmanaoanMyttwfeioMnng 
iloragi  topics  bi 
'tstrsmsly  inpertMt”  ovor 
thi  imt  Ant  months: 


Storage  RoUems 

ITinugsritirlhsssafsttis 
lop  throe  slnfsgshsidicher 


Yawning  Over  IP 

IT  minipsri  don't  seom  very 
esched  ifeeiit  IP  sloraoe,  with  many 
of  them  rMing  tt  as  eeutral  or  un* 
impHilaid  far  the  nsaarta  months. 


Long  Live  Tape 

I'VE  BEEN  HANGING  AROUND  THE  RUMOR-MONGERING.  loW-COSt  disk  drive 
crowd  lately,  so  1  started  to  think  that  their  ATA  drives  are  making  tape  obsolete. 
And  when  the  information  life-cycle  management  forces  added  their  whispers 
about  the  improved  performance  and  low  cost  of  archiving  data  to  fixed  disks, 

I  became  a  fervent  convert  to  the  notion  that  tape  is  all  but  dead. 

In  fact,  I  had  intended  to  write  something  like  my  "Farewell  Floppy”  column  of 
nearly  five  years  ago.  in  which  I  (correctly)  dismissed  the  floppy  disk  as  credible  IT 
technology.  I  had  the  similar  self-righteous  vigor  of  a  convert  as  I  set  forth  to  write  my 
“Death  to  Tape”  column. 


taMKSrVnlfcoaiSOOr 


Alas,  I  did  my  research  before  writing.  (A  generally 
wise,  although  not  always  accomplished,  task  among 
ioumalists.)  Tape  is  far  from  dead.  If  anything,  thanks 
to  continued  technology  improvements  and  recent 
corporate  management  shenanigans  and  the  legisla¬ 
tive  responses  to  them,  tape  for  backup  and  archival 
storage  is  experiencing  a  resurgence. 

Take  IBM's  recent  tape  business.  It  has  seen  four 
consecutive  quaners  of  double-digit  upticks  in  rev¬ 
enue.  And  its  main  competitor  for  tape  systems,  Stor¬ 
age  Technology  Corp..  has  announced  16  consecutive 
quarters  of  year-over-year  earnings  growth. 

Those  aren't  the  num^rs  of  a  technology 
in  a  tailspin,  nor  are  they  what  1  expected 
to  find. 

While  technology  advances  and  lower 
costs  help  keep  tape  competitive  ^inst 
ATA  drives  despite  draw^cks  in  perfor¬ 
mance.  it’s  the  work  of  politicians  that  is 
giving  tape  renewed  purpose  in  life.  After 
all  they've  passed  Sarbanes-Oxley,  the  I 
Health  Insurance  Portability  and  Account¬ 
ability  Act  and  other  audit-friendly  legisla¬ 
tion,  seemingly  with  tape  in  mind. 

*A  couple  of  years  ago,  legislation  on  cor¬ 
porate  governance  chai^d  things.”  says 
Barry  Rudolph,  IBM’s  vice  president  for  tape  storage 
systems.  Changed  indeed  —  in  a  good  way  for  tape 
storage  makers. 

That’s  because  top  management  wants  IT  arch¬ 
ivists  to  err  on  the  side  of  saving  too  much  informa¬ 
tion  rather  than  too  little  and  to  spend  as  little  as  pos¬ 
sible  in  the  process.  For  today  (and  tomorrow),  thar 
means  tape.  A  200GB  ATA  drive  sounds  cheap  at 
$140.  but  a  $40  tape  holds  just  as  much  uncompressed 
data.  By  the  end  of  the  year.  IBM  will  be  shipping  a 
400GB  versioiL 

Over  at  Fuji  Photo  Film  USA  in  Valhalla.  N.Y.,  Rkh 
Gadomski  tells  me  that  his  company  has  already 
demonstrated  1TB  uncompressed  capacity  on  a  sin¬ 
gle  tape  cartridge  and  expects  to  have  it  on  the  mar¬ 
ket  in  a  year  or  twa  And  both  Fuji  and  IBM  Haim 
that  sitt^e  tapes  with  10TB  to  ISTB  of  storage  will 
ship  by  2010. 

Phis,  tape  archiving  systems  use  100%  of  a  tape's 


capacity,  while  disk-to-disk  approaches  risk  duplicat¬ 
ing  the  same  inefficient  storage  utilization  rates  on 
backup  disks  as  on  production  ones. 

With  those  kinds  of  capacity  and  efficiency  num¬ 
bers,  it's  clear  that  tow-end  drive  makers  will  forever 
play  catch-up  to  tape  wdien  it  comes  to  the  storage 
capacity/cost  ratia  Plus,  you  don't  have  to  add  the 
incremental  expenses  of  a  full  RAID  storage  system, 
cooling  technology  and  electricity  that  you  need  to 
make  a  disk  drive  useful.  Tbpe  is  happy  just  to  sit  idle, 
drawing  no  power,  requiring  no  special  HVAC  support 
ATA  disk  drive  makers  brag  that  their 
low-cost  technology  has  at  least  100  times 
the  performance  that  you’ll  experience  re¬ 
trieving  data  from  tape  system.  However, 
in  the  world  of  compliance-driven  storage, 
audits  aren't  done  in  real  time.  You  can 
usually  retrieve  requested  information  in 
a  few  hours  —  or  days  —  and  still  meet 
user  needs.  That's  ri^t  up  tape's  alley. 

Tape  has  an  obvious  portability  advan¬ 
tage  over  disk.  And  it  offers  less-obvious 
protection  against  disk-based  viruses  be¬ 
cause  you  can  always  revert  data  on  tape  to 
a  state  priorto  an  infection.  But  an  infected 
disk  affects  the  whole  drive,  regardless  of 
what  state  die  data  might  be  in. 

So,  it  looks  like  youll  be  using  tape  systems  for  the 
foreseeable  future.  Instead  of  seeking  ways  to  dump 
tape,  you  need  to  develt^  tape  strategies  with  the 
same  zeal  you  have  for  plans  to  migrate  and  upgrade 
operating  systems  and  applications. 

Tape  media  might  reliably  retain  data  for  30.  even 
50  years.  But  you  shouldn't  count  on  it.  especially  be¬ 
cause  the  tape  subsystems  that  read  and  transfer  the 
data  change  at  a  much  f^er  rate. 

Although  applkatkms  vary,  most  companies  should 
oveihaul  their  tape  systems  every  10  to  IS  years.  Check 
to  make  cxrtain  that  the  new  devk^  efficiently  work 
with  old  tapes.  Also,  every  IS  to  20  years,  bring  all 
your  archived  data  onto  newer  tape,  choosing  data 
formats  that  abide  by  industry  stamlards  to  better  en¬ 
sure  future  compatibility. 

Bom  in  an  IBM  lab  back  in  1952,  tape,  it  seems,  will 
never  die.  04S6IM 


Being  vigilant  helps  avoid  surprises, 
in  SANs  as  in  life. 

There  are  probably  things  happening  right  now  on  your  SAN  that  could  lead  to 
appalling  performance  or  a  complete  system  crash. 

You  don't  know  when  it  will  happen. 

You  don't  know  how  it  win  happen. 

But  when  it  does  happen,  you'll  wish  you  were  aware  things  were  building  up  to  give 
you  a  nasty  surprise,  an  expensive  surprise. 

Research  shows  that  SAN  downtime  can  cost  organizations  $100,000  per  minute, 
or  more.*  Finisar’s  NetWisdom  and  Xgig  solutions  help  you  avoid  these  costs  by 
monitoring  your  SAN  to  stop  degradation,  CRC  errors  and  events  that  impact  your 
most  critical  applications,  business  data  and  transactions. 

Finis  ar 

View  our  web  seminar,  including  a  customer  case  study  and  demo  of  NetWisdom 
by  visiting  www.linisar.com/plan 

Fnsar  has  been  speedeig  up  netmrtu  and 
de(Mr¥iB  besHMraed  products  and  tesbic 

Avoid  nasty  surprises.  Monitor  your  SAN  and  hang  on  to  your  budget. 

sohdnns  snx  19B8.  tMSDAQ;  FNSR. 

*Sowce:  Fabhc  CorvUlns:  Beyond  the  N«er  Data  Center.  RBC  C«nU  Rmrts  Oct  2003 

««w.fMsar.coni/plan 
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Patches 

them  trickle  in  randomly 
throughout  the  day.  week  and 
month." 

David  Krauthamer,  director 
of  information  systems  at  Ad¬ 
vanced  Fibre  Communica¬ 
tions  Inc.  in  Petaluma,  Calif., 
said  Microsoft  appears  to 
have  become  much  more 
aware  of  the  heavy  burden 
that  patching  systems  puts  on 
IT  managers.  He  added  that  a 
regular  patching  schedule  re¬ 
duces  much  of  the  instability 
that  results  from  intermittent 
releases  and  eases  the  chal¬ 
lenge  of  keeping  up  to  date 
on  patches. 

"What  it  gives  you  is  the 
consistency  you  need  to  factor 
patching  into  your  overall 
(systems  management]  proc¬ 
ess,"  Krauthamer  said.  “It’s  a 
great  thing  if  you  can  spend 
just  one  night  a  month  doing 
patches." 

From  a  systems  administra¬ 
tion  standpoint,  the  predict¬ 
ability  of  the  monthly  releases 
has  made  it  “much  easier"  m 
manage  the  patching  of  Win¬ 
dows-based  machines,  said 
Mike  Tmdor,  vice  president  of 
network  operations  at  First  In¬ 


ternet  Inc.,  an  Internet  service 
provider  in  St.  Clalrsville.  Ohio. 

Debbie  Fry  Wilson,  director 
of  marketing  at  Microsoft's  Se¬ 
curity  Response  Center,  said 
the  shift  from  an  ad  hoc  patch 
release  proccs.s  to  a  weekly 
schedule  and  then  to  the 
monthly  one  was  driven  by 
feedback  from  users  who  said 
they  “were  not  able  to  plan 
well  because  they  didn't  know 
in  advance  when  we  would 
'  have  patches  for  them." 

Deeper  Testing 

The  policy  of  relearing  patch¬ 
es  on  the  second  Tuesday  of 
each  month  has  also  given  Mi¬ 
crosoft  more  time  to  work  on 
improving  the  qtiality  of  its 
fixes  and  to  do  a  "deeper  level 
of  testing"  in  the  patch  devel¬ 
opment  stage.  Wilson  said. 

Even  so.  users  and  analysts 
cited  some  ongoing  concerns 
with  the  patching  process. 

Microsoft's  growing  habit  of 
grouping  together  multiple  se¬ 
curity  fixes  in  large  patches 
can  increase  the  testing  bur¬ 
den  for  rr  managers,  said  Russ 
Cooper,  an  analyst  at  IVuSe- 
cure  CorpH  an  IT  security  con¬ 
sulting  firm  in  Herndon,  Va. 

For  instance,  last  week’s 
crop  of  patches  included  one 
that  was  designed  to  fix  eight 


Microsoft’s  Fixes  Seek  to  Stop  Remote  Attacks 


THEFLURRYOFFOESMicrD' 
soft  released  last  week  MBS 
aimed  at  plugging  needy  two- 
dozen  seoflty  holes,  tfe  most 
severe  of  which  couU  alow  an 
attacker  to  take  complete  control 
of  an  affected  system  and  re- 
mcKeiy  execute  rnakdous  code. 

Rxx  of  the  newdy  dedosed 
vulnerabilies  are  parttculady 
dangerous  because  they  can  be 
remotaty  exploiled  by  mahaous 
hackers,  according  to  an  adviso- 
fV  issued  by  Atlanta-based  Inter¬ 
net  Security  Systems  Inc. 

separate  vulncrabilittes.  "Users 
should  get  used  to  the  idea  of 
being  snowed  under  on  'Patch 
Tuesday,' "  Cooper  said. 

A  monthly  schedule  can 
sometimes  also  expose  users 
to  longer  periods  of  risk,  said 
Andrew  Plato,  president  of 
Anitian  Corp.,  a  systems  inte¬ 
grator  and  consulting  Tirm  in 
Beaverton.  Ore.  "If  a  new  se¬ 
curity  flaw  is  discovered  r^i 
after  an  update,  waiting  30 
days  for  a  patch  is  too  long." 
be  said. 

Tindor  said  that  if  informa¬ 
tion  about  a  security  flaw 


*VVhat  concerns  me  is  that 
they  are  taking  such  3  long  time 
fft  hxng  some  ol  these  bugs," 
said  Drew  (kiploy.  a  senor  re¬ 
search  engineer  at  eEye  Ogilal 
Securty  Inc.,  a  winerabily  man¬ 
agement  software  vendor  in  Al¬ 
so  Vieio.CaM. 

For  instance,  one  of  the  flaws 
dfidosed  last  week  was  reported 
to  MkhsoH  206  days  before  the 
patch  des^ied  (0  iix  a  MS  is¬ 
sued,  accordng  to  Copley. 

"That's  a  long  time  to  expect 
that  no  one  else  is  going  to  find 

were  to  become  public  before  > 
the  next  monthly  patch  re-  | 
lease,  he  would  expect  Micro-  | 
soft  to  be  “proactive  in  push¬ 
ing  the  updates  quickly  rather  i 
than  waiting  to  release  them  at  | 
the  scheduled  time."  | 

Stephen  Toulouse,  security  | 
prt^nun  manager  at  the  Mi-  ' 
crosoft  Security  Response  ! 
Center,  reiterated  that  the 
company  is  releasing  com¬ 
bined  fixes  in  response  to  re¬ 
quests  from  users. 

“We  have  heard  very  clearly 
from  customers  that  when 
there  is  an  opportunity  to  have 


otA  about  1*  he  safo. 

Stephen  Toulouse,  seanty 
program  manager  at  Mcrofiotl's 
Seamy  Response  Center,  sad 
some  patches  reqwe  extensive 
testngbecatseollhecomplea- 
ty  of  the  vutnerabities  "One  ot 
the  most  ffnponam  thmgs  6 
quafty.*  Cooper  said. 

ThetelalfiumfaerolflBwsdB- 
dosed  lest  week  came  dose  to 
maiding  the  22  security  Mjfoer- 
diitiesthal  Mcrosoft  reteesed 
fores  for  last  April 

-JUejmarVifaifar 

just  one  update,  that's  what 
they  want."  Toulouse  said, 
noting  that  Microsoft  tries  to 
combine  fixes  for  multiple 
flaws  found  in  the  same 
source-code  files. 

In  response  to  concerns 
about  users  being  exposed  to 
longer  periods  of  risk,  Wilson 
said  Microsoft  will  issue  out- 
of-cycle  fixes  if  the  situation 
warrants  it  In  late  July,  for  in¬ 
stance,  the  company  rushed 
out  a  patch  after  an  active  ex¬ 
ploit  was  found  to  be  taking 
advant^  of  a  flaw  in  Internet 
Explorer.  O  50f13 


EMC  Buys  Backup  Software  Vendor 


EMC  Corp.  last  week  agreed 
to  acquire  Oantz  Development 
Corp.  in  an  effort  to  boost 
sales  to  the  small-business 
community  as  the  company 
continues  to  expand  its  soft¬ 
ware  portfolio. 

EMC  officials  said  that  Wal¬ 
nut  Creek.  Calif.-based  Dantz 
will  become  part  of  the  Enter¬ 
prise  Storage  Software  Group. 
The  deal  is  valued  at  less  than 
$50  million,  accordir^  to  EMC 

Observers  said  the  acquisi¬ 
tion  should  help  EMC  in  its 
competition  with  Veritas  Soft¬ 
ware  Corp.’s  BackupExec  soft¬ 
ware  and  Computer  Associ¬ 


ates  Internationa]  litc.'s  Bright- 
Stor  ARCserve  backup  agent. 

Mark  Lewis,  executive  vice 
president  of  EMC's  software 
group,  said  the  acquisition 
should  allow  the  company  to 
boost  its  offerings  for  small  to 
midsize  businesses.  In  addi¬ 
tion.  he  said.  Dantz's  backup 
software  should  integrate  easi¬ 
ly  with  the  EMC  NetWorkcr 
backup  management  software 
produced  by  EMC's  Legato 
divirion. 

Lewis  said  that  Dantz's  Ret¬ 
rospect  backup  software  will 
be  sold  separately,  even  after 
it’s  integrated  with  NetWorkcr. 

Kevin  Money,  network 


supervisor  at  Iroquois  Gas 
Transmission  System  LP. 
whose  operation  has  been 
using  the  Dantz  Retrospect 
software  for  nine  years  to  back 
up  its  woikstations.  servers 
and  field  offices,  said  he  wants 
to  know  what  EMC's  plans 

. biai'e . 

bu^Dairtz] 
forRsinfra^nic- 
ture,ns  patents  or 
forks  licensing? 

KEVIN  MONEY.  NfTWORK  SUPER¬ 
VISOR.  IROQUOIS  GAS  TRANSWtSSION 


are  for  the  Dantz  operation. 

Shelton.  Conn.-based  Iro¬ 
quois  has  123  employees  and 
operates  a  412-mile  rutural- 
gas  pipeline  that  runs  from  the 
U5.-Canada  border  at  Wad- 
dington,  N.Y..  to  Long  Island. 
Money  said  his  operation  has 
six  servers  that  run  the  Retro¬ 
spect  software  and  back  up 
about  2TB  of  data  ni^tly.  The 
backup  application  is  simple 
to  manage  and  worla  across 
\^tndows.  Macintosh  and  Lin¬ 
ux  platforms,  be  said. 

Money  also  said  he  likes 
Dantz’s  licensing  structure, 
which  is  based  on  the  num¬ 
ber  of  servers  the  software 
is  running  on,  not  on  the  num¬ 
ber  of  individual  clients  that 
are  being  backed  up. 


He  expressed  concern 
about  EMC's  plans  for  the 
Dantz  unit,  “b  (EMC  buying 
Dantz]  for  its  infrastructure, 
its  patents  or  for  Ks  licens¬ 
ing?"  Money  said.  “The  only 
other  thing  I'd  be  questionirtg 
that  also  always  makes  people 
like  us  nervous  is  just  their  li¬ 
censing  (plans]." 

According  to  EMC  there 
are  no  plans  lo  change  the 
Dantz  licensing  schemes. 

The  company  said  that 
Dantz  will  continue  to  operate 
out  of  its  Walnut  Creek  facili¬ 
ties.  Current  President  and 
CEO  Larry  Zulch  will  continue 
to  oversee  the  Dantz  unit  and 
will  report  to  Lewis  and  Dave 
DeWali,  co-leaders  of  EMCs 
software  group  O  50106 
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I  KANK  ?1AYKS  ■  1  KANKIA’  SPEAKING 

IT  in  a  Jam 

IN  FRANCE  LAST  WEEK,  it  became  legal  for  movie  theaters  to 
use  electronic  jammers  to  block  cell  phone  use  during  shows. 
In  Mexico,  some  churches  recently  started  doing  the  same 
thing  during  religious  services,  even  though  jammers  are  ille¬ 
gal  there.  Police  in  the  U.S.  use  them  too,  especially  during 
hostage  standoffs.  That’s  a  violation  of  federal  law,  but  the  FCC  has 
never  taken  anyone  to  court  over  it.  Prisons,  the  Secret  Service,  the 
military  —  the  list  of  jammer  users  keeps  getting  longer. 

Hey,  if  they’re  using  jammers  to  solve  their  problems,  why  can’t 
we  use  them  to  deal  with  the  security  issues  created  by  cell  phones, 
Wi-Fi  and  other  wireless  technologies? 


It  sure  would  make  things  easier  for  us.  In¬ 
stead  of  constantly  monitoring  networks  to 
look  tor  Wi-Fi  hubs  that  users  have  smuggled 
in.  we  could  just  shut  them  down  with  a  jam¬ 
mer.  We  could  block  cell  phones  in  conference 
n>oms  and  jam  camera-equipped  phones  in  sen¬ 
sitive  areas  tike  research  labs  (and  restrooms). 
Everything  from  surveillance  bugs  to  Bluetooth 
devices  could  be  shut  down  at  once  by  turning 
whole  office  buildings  into  dead  zones. 

Yes,  we’d  be  rolling  things  back  to  the  pre- 
wireless  days.  But  that  means  we’d  dump  all  the 
problems  wireless  has  brought  us.  from  net¬ 
work  security  holes  to  the  time  employees 
waste  on  nonbusiness  cell  calls.  And  since  most 
of  those  wireless  gizmos  are  personal,  not  is¬ 
sued  by  the  company,  we  wouldn't  be  losing  of¬ 
ficial  IT  infrastructure  —  just  shedding  annoy¬ 
ing  complications  that  users  have  dragged  in. 

It's  technology  applied  to  eliminate  problems 
introduced  by  technology.  So  why  shouldn’t  we 
use  jammers? 

Well,  they  are  illegal  Maybe  the  FCC  isn't 
actively  looking  for  violators,  but  if  you  blast 
away  with  a  jammer  in  the  same  location  long 
enough,  you’ll  probably  get  caughL 

Then  there  are  the  side  effects. 

Never  mind  users  whining  about 
emergency  calls  they  might  not  get; 
they  got  messages  about  emergen¬ 
cies  before  they  had  cell  phones, 
and  they  can  do  that  now,  too. 

But  delivery  and  repair  people 
depend  heavily  on  wireless  tech¬ 
nologies  these  days.  Your  building 
security  guards  use  radios:  so  do 
police  and  firefighters.  Broad- 
spectrum  jamming  would  cut  them 
all  off.  jamming  would  likely  affect 
your  neighbors,  too.  because  there’s 


FMMams.  Computer- 
wanlif  s  semor  news  cotum- 
nist.  kas  covtrad  IT  for  more 
than  20  yean,  (kinlect  Mm  at 


no  cheap  way  to  limit  the  effects  of  a  jamming 
signal  —  it  won’t  .stay  inside  your  office  walls. 

Of  course,  you  could  limit  your  jamming  to 
just  Wi-Fi's  2.4-GHz  band  and  spend  extra  for 
smart  jammers  that  fool  cell  phones  into  think¬ 
ing  they’re  local  lowers  that  have  run  out  of 
bandwidth.  Or  you  could  line  your  office  and 
conference  room  walls  with  radioproof  material 
that  lets  you  use  Wi-Fi  and  Bluetooth  locally 
while  blocking  would-be  wireless  hijackers  and 
without  annoying  the  people  next  door  —  and 
that  approach  is  legal,  too. 

Pile  on  enough  antiwireless  technology,  and 
you  might  even  be  able  to  block  just  the  things 
you  want  blocked.  Wouldn’t  that  be  great? 

No.  it  wouldn’t. 

Maybe  movie  theaters  and  churches  can  roll 
back  wireless.  Maybe  cops  and  the  Secret  Ser¬ 
vice  have  to  create  wireless-free  zones.  We 
can’t  —  any  more  than  we  could  roll  back  the 
Internet  or  LANs  or  PCs  when  users  first 
brought  them  in. 

Sure,  wireless  will  give  us  security  headaches 
for  a  long  time.  But  users  have  forced  us  to  deal 
with  cell  phones,  Wi-Fi  and  the  rest.  They've 
forced  wireless  on  us  because  it’s 
useful  to  them,  even  if  it’s  an  on¬ 
going  pain  for  us. 

We  can  —  and  should  —  use  vig¬ 
ilance.  education  and  occasional 
arm-twisting  to  plug  security  holes 
and  keep  users  from  straying  too 
far  from  what  we  can  handle. 

But  there’s  no  use  in  wishing  for 
ways  to  jam  or  block  or  limit  wire¬ 
less  technology.  Not  now.  not  any¬ 
more-  Users  arc  right  —  for  IT.  in 
many  ways,  the  future  is  wireless. 

And  we  can’!  jam  the  future. 
O50066 


Rain,  Rain,  (lo  Away 

When  humcane  season  drives,  this  pilot  fish  in  Flori¬ 
da  isn1  worried.  The  disaster  recovery  plan  is  in  place. 
Backups  are  done.  The  new  generators  are  fueled. 
And  when  a  storm  Nts.  everything  keeps  atoning  - 
except  that  R's  pretty  dark  in  the  data  center  and  the  fT 
staff  is  rnonitoring  the  servers  by  flashlight.  *1^ 
bulbs  blow  when  the  power  surged  back  on?  Or 
rnaybe  the  breaker  trippedT  fish  asks.  T4o  -  fur^ 
investigdtion  revealed  that  no  one  had  bothered  to 
wire  the  lighting  into  fl)e  gerrerator.” 
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FRANK  HAYES  ■  FRANKLY  SPEAKING 

rr  in  a  Jam 

IN  FRANCE  LAST  WEEK,  it  became  legal  for  movie  theaters  to 
use  electronic  jammers  to  block  cell  phone  use  during  shows. 
In  Mexico,  some  churches  recently  started  doing  the  same 
thing  during  reUgious  services,  even  though  jammers  are  ille¬ 
gal  there.  Police  in  the  U.S.  use  them  too,  especially  during 
hostage  standoffs.  That’s  a  violation  of  federal  law,  but  the  FCC  has 
never  taken  anyone  to  court  over  it.  Prisons,  the  Secret  Service,  the 
military  —  the  list  of  jammer  users  keeps  getting  longer. 

Hey,  if  they’re  using  jammers  to  solve  their  problems,  why  can’t 
we  use  them  to  deal  with  the  security  issues  created  by  cell  phones, 
Wi-Fi  and  other  wireless  technologies? 


It  sure  would  make  things  easier  for  us.  In¬ 
stead  of  constantly  nwnitoring  networks  to 
look  for  Wi-Fi  hubs  that  users  have  smuggled 
in,  we  could  just  shut  them  down  with  a  jam¬ 
mer.  We  could  block  cell  phones  in  conference 
rooms  and  jam  camera-equipped  phones  in  sen¬ 
sitive  areas  like  research  lai:«  (and  restrooms). 
Everything  from  surveillance  bugs  to  Bluetooth 
devices  cotild  be  shut  down  at  once  by  turning 
whole  office  buildings  into  dead  zones. 

Yes,  we’d  be  rolling  things  back  to  the  pre- 
wireless  days.  But  that  means  we’d  dump  all  the 
problems  wireless  has  brought  us,  from  i^- 
work  security  holes  to  the  time  employees 
waste  on  nonbusiness  cell  calls.  And  since  most 
of  those  wireless  gizmos  are  personal,  not  is¬ 
sued  by  the  company,  we  wouldn’t  be  losing  of¬ 
ficial  IT  infrastructure  —  just  shedding  annoy¬ 
ing  complications  that  users  have  dragged  in. 

It’s  technology  applied  to  eliminate  problems 
introduced  by  technology.  So  why  shouldn’t  we 
use  jammers? 

Well,  they  ore  illegal  Maybe  the  F(X  isn't 
actively  looking  for  violators,  but  if  you  blast 
away  with  a  jammer  in  the  same  location  long 
enou^  you’ll  probably  get  caught 

Then  there  are  the  side  effects. 

Never  mind  users  whining  about 
emergency  calls  they  might  not  get 
they  got  messages  about  emergen¬ 
cies  before  they  had  cell  phones, 
and  they  can  do  that  now,  too. 

But  delivery  and  repair  people 
depend  heavily  on  wireless  tech¬ 
nologies  these  days.  Your  building 
security  guards  use  radios;  so  do 
police  and  ffrefighters.  Broad- 
spectrum  jamming  would  cut  them 
all  off.  Jamming  would  likely  affect 
your  neighbors,  too,  because  there’s 


no  cheap  way  to  limit  the  effects  of  a  jamming 
signal  —  it  won’t  stay  inside  your  office  walls. 

Of  course,  you  could  limit  your  jamming  to 
lust  Wi-Fi’s  2.4-GHz  band  and  spend  extra  for 
smart  jammers  that  fool  cell  phones  into  think¬ 
ing  they’re  local  towers  that  have  run  out  of 
bandwidth.  Or  you  could  line  your  office  and 
conference  room  walls  with  radioproof  material 
that  lets  you  use  Wi-Fi  and  Bluetooth  locally 
while  blocking  woiild-be  wireless  hijackers  and 
without  annoying  the  people  next  door  —  and 
that  approach  is  legal  toa 

Pile  on  enough  antiwireless  technology,  and 
you  might  even-  be  able  to  block  just  the  things 
you  want  blocked.  Wouldn’t  that  be  great? 

No.  it  wouldn’t. 

Maybe  movie  theaters  and  churches  can  roll 
back  wireless.  Maybe  cops  and  the  Secret  Ser¬ 
vice  have  to  create  wireless-ffee  zones.  We 
can’t  —  any  more  than  we  could  roll  back  the 
Internet  or  LANs  or  PCs  when  users  first 
brought  them  in. 

Sure,  wireless  will  give  us  security  headaches 
for  a  long  time.  But  users  have  forced  us  to  deal 
with  cell  phones,  Wi-Fi  and  the  rest.  They've 
forced  wireless  on  us  because  it’s 
useful  to  them,  even  if  it's  an  on¬ 
going  pain  for  us. 

We  can  —  and  should  —  use  vig¬ 
ilance.  education  and  occasional 
arm-twisting  to  plug  security  holes 
and  keep  users  from  straying  too 
far  from  what  we  can  handle. 

But  there’s  no  tise  in  wishing  for 
ways  to  jam  or  block  or  limit  wire¬ 
less  technology.  Not  now,  not  any¬ 
more.  Users  are  right  —  for  IT,  in 
many  ways,  the  future  is  wireless. 

And  we  can’t  jam  the  future. 
O50066 


DON’T  UNDERESTIMATE  SPYWARE. 


iMbroor 


Spy  Sweeper 

Entarpris* 


It  it  one  of  the  biggest  threats  to  your  enterprise  today.  Spyware 
steals  bandwidth,  halts  productivity  and  puts  your  inteliectual 
property  In  harm's  way  Webroot  Spy  Sweeper  Enterprise  offiers 
reahtime  protection  by  identi^fing  and  eradicating  spyware  across 
your  organiiation.  Ts  teethe  ■ageltude  of  the  spyware  threat,  run 
a  (tee  uelsseHi  acau  at  anwst»ahroet,coni/wheabey  or  contact  us 
a*t6C,as4.S9t4 


Webroot* 

SOFTWAHCg  iNOu 


P/mld  We'ne 


DB2  DOESN’T  LOCK  YOU  IN. 
YET  ANOTHER  REASON  WHY 
DB2  IS  THE  WORLD’S  LEADING 
DATABASE  PLATFORM. 


DB2  is  middleware,  but  if  is  anything 
but  middle-of-the-road.  In  fact.  DB2 
is  the  leading  database  built  on  and 
optimized  for  Linux.  UNIX  and 
Windows,  built  to  take  full  advantage 
of  your  existing  heterogeneous  and 
open  environments,  which  enable 
true  grid  computing 


higher  than  DB2  Solitaire  claims 
that,  on  average.  Oracle  required 
25%  more  time  to  manage  than 
DB2.  And  tpc.org  rates  DB2  as  the 
overall  price/performance  leader 
forTPC-C  on  Linux.  UNIX  and 
Windows.  Ahead  of  both  Oracle 
and  Microsoft  SQLServer- 


Plus,  there's  no  constricting  contract.  Then  there's  this-  Oracle  will 


Its  also  middleware  with  an  eye 
on  your  resources.  All  of  them.  An 
ITG  study  showed  overall  costs 
for  Oracle  are  up  to  four  times 


drop  the  current  level  of  support 
for  Oracle  8i  at  the  end  of  2004. 
Meaning  limited  support,  higher 
cost  or  a  complete  migration  to 
current  versions  of  Oracle 


Fortunately,  IBM  offers  ongoing, 
around-the-clock  service  and  support 
for  DB2  And  DB2  is  also  highly 
scalable,  flexible  and  easy  to  manage 
requiring  no  newfangled  skill  sets 

Why  not  move  up  to  middleware 
that  makes  sense?  Through  the 
end  of  the  year,  you  can  get 
IBM  DB2  Universal  Database  by 
taking  advantage  of  our  extremely 
compelling  trade-up  promotion. 

Visit  ibin.com/db2/swap  today 
to  find  out  if  you  qualify. 

And  free  yourself. 


^DEMAND  BUSINESS 


® “ registww) UaOBmArk o( Unw, Torpids  Merawl, 


Vol.  38 
Iss.  43 
OCT  25 


2004 


EDS  futurist  Jett  Wacker  prepares  for  the  coming  data 
flood  with  context-sensitive  text-mining  tools. 


TRW  Automotive's  Joe  Drouin  and  other  CIOs  trade 
tips  on  aligning  IT  with  business  needs. 
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HORATII  VOTUM. 
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,  et  tecto  vicinus  jugis  aqus  fons, 
stlvs  super  his  foret.  Auctius 
fecere  ;  bene  est :  nil  amplius  oio,- 
nisi  ut  propria  hsec  mibi  munera  &ziit 
lajorem  feci  ratione  mala  rem,  - 

icturus  vitio  culpave  minorem^  r 
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nvento  qui  rnercenarius  agrvm 
m  mercatus  aravitt  dives  andco- 
Si,  quod  adest,  gratum  juvat,  hao 


The  information  is  there, 
but  con  you  find  it? 


Todoy  one  of  the  greot  challenges  focing  IT  is  the 
obilify  to  monoge  staggering  onKHints  of  information. 
Which  is  why  we  created  HP  StofogeWxfcs  Reference 
Information  Storage  System  (RiSS),  a  powerful  new 
solution  copoble  of  orgonizing,  archiving  ond  securely 
storing  information  so  it  con  be  found  ond  retrieved 
quickly.  HP  RISS  reduces  the  cost  and  complexify  of 
your  network  ond  ensures  when  you  hove  ofl  your 
informotion  at  your  fingertips,  chonge  asmes  easy. 
www.hp.com/info/storogeworks_ilm 


Solutions  for  the 


adaptive  enterprise. 


The  right  storage  solution  doesn't  just  give  you  better  storage  control. 
It  helps  you  make  better  business  decisions. 

Storage  Management  Solutions 

The  first  step  in  making  better  business  decisions?  Deciding  to  be  in  control.  CA's  Intelligent  Storage  Management  solutions  can 
put  you  in  control  of  costs,  resources  and  data  availability  like  never  before.  They  provide  you  with  a  comprehensive  real-time 
view  of  your  system's  storage  capabilities,  while  also  providing  immediate  access  to  all  of  your  information.  As  a  result,  you  can 
manage  and  monitor  your  entire  storage  environment  with  ease  and  actually  use  existing  data.  As  always,  it's  also  vendor-  and 
device-neutral,  so  you  can  maximize  your  current  storage  resources,  saving  time  and  money.  With  more  automated  software 
that  can  make  its  own  decisions  about  storage  management,  you'll  have  the  information  you  need  to  make  better  business 
decisions.  To  find  out  more  or  to  get  a  white  paper,  go  to  ca.com/driver. 
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Exchange  Makes  Unux  Call 

In  the  Technology  section:  Joseph  PanfU  is 
part  of  a  team  moving  the  Chicago  Mercantile 
Exchange  from  proprietary  Unix  and  RISC- 
based  systems  to  Intel-bas^  servers  running 
Unux  in  a  bid  to  cut  IT  costs.  Page  31 
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Checkpoint  for  Check  21 

Also  in  the  Technology  section:  The  federal  law 
pavuig  the  way  for  electronic  image  exchange 
checks  goes  into  effect  this  week,  but  KanVs 
still  have  a  long  way  to  go  before  the  technolo* 
,  gy  is  in  place  to  make  h  work.  Page  34 
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OPINIONS 


4  Spreadsheet  users  get  a  lift 
with  the  arrival  of  new  ftnan- 
cial  analysis  tools  from  SAS, 
Oracle  and  SiebeL 

4  Symbol  Technologies  rolls 
out  a  handheld  device  that 
weighs  and  costs  less  than  its 
niggedized  models. 

5  Betting  IT  to  align  with  busi- 
ness  units  is  a  cop  priority  in 
this  harsh  economic  climate, 
say  CIOs  at  the  Gartner  Sym- 
posium/TTicpo  conference. 

5  J.  Sainslwnr  and  Accenture 

renegotiate  their  outsourcing 
deal  so  the  grocery  chain  can 
gain  more  control  over  its  IT 
operations. 

6  ILM  and  virtualization  prod¬ 
ucts  get  their  day  in  the  sun  at 
this  week's  Storage  Netvrark- 
ing  World  conference  in 
Orlando. 

6  Hackers  crack  a  database  that 
boused  personal  data  on  more 
than  L4  million  Californians 

8  Tech  salaries  will  rise  10%  to 
15%  through  2007  for  workers 
with  certain  sldlts.  Meta  says. 

10  Microsoft  reins  In  plans  for 
its  Passport  service. 

10  Lack  of  internal  integration 

hinders  corporate  security 
efforts,  a  new  report  says. 

12  Global  Dispatches:  The  Aus¬ 
tralian  Computer  Society 
calls  for  the  adoption  of  soft¬ 
ware  quality  standards,  and 
Cisco  teaches  IT  skills  to  pris¬ 
oners  in  the  UJC. 


40  Emerging  Technologies:  CPUs 
Rev  New  Engines,  instead  of 
increasing  CPU  clock  speeds, 
chip  makers  are  adding  proc¬ 
essor  cores  to  increase  chip 
performance. 

42  Fuhve  Witch:  Petabyte  Prog- 
nosticetions.  Futurist  Jeff 
Wacker  is  working  with  new 
text-mining  tools  to  handle 
the  coming  information 
explosion. 

44  Security  Manager's  tioumal: 
Sarb-Ox  Profect  FoUowing 
Script.  Mathias  Thurman  is 
making  progress  on  systems 
testing  as  tbe  Sarbanes-Oxley 
Act  deadline  nears. 


MiariivWeBrih 

iiigMm.Fbrthe 
thUyewtiaraw. 
ITworknaaoss 
board  noehed 
onhmodBstpw 
neeesaiahBsrosa 
«iMnoeol3%in 2004.  Budget  cuts 
ardincieaeediMvMiwdsareaisodi- 
vinostrasstoindHimehiiyi  PMC  49 
CharWead  OWePak*.  FMsaWy 
irdoTOilgn  lor  30  IT  lob  tMes.  pkB 
frud)more.MaES4 


2004 


ONlINf  [ICIUSIVIS 


24  Don  Tennant  says  that  the  loss 
of  end-user  choice  with  re¬ 
spect  to  privacy  has  placed  a 
weighty  responsibility  on  IT 
professioitals  to  get  t^  tech¬ 
nology  right. 

24  Pimm  Fox  cautions  managers 
to  get  tbe  word  out  to  employ¬ 
ees:  The  e-mails  they  send 
can  establish  a  trail  of  evi¬ 
dence  that  could  bring  down 
the  company  —  or  cost  them 
their  careers. 

25  David  Moschella  recalls  that 
IT  issues  were  more  promi¬ 
nent  during  the  2000  presi¬ 
dential  race  than  they  are  in 
this  year’s  campaiga  But  be  s 
confident  that  public  percep¬ 
tions  of  the  industry  rise 
again  in  the  years  ahead. 

46  Daniel  J.  Weitzner  suggests 
chat  although  it  may  seem 
paradoxical,  transparency 
about  how  person^  informa¬ 
tion  b  collected  and  used  is  a 
key  step  in  privacy  protectioa 

72  Frankly  Speaking:  Frank 
Hayes  warns  that  as  Hallow¬ 
een  approaches,  you  ought  to 
beware  of  the  monsters  that 
lurk  among  corporate  IT  — 
especially  your  Frankenstein 
systems  and  Jekyll  and  Hyde 
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STORAGE:  Head  to  our  Knowledge  Center 
this  wedt  for  full  coverage  of  Fall  Storage 
Networking  World,  triiich  runs  throu^ 
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What  YburCB)  Thinks  About 
Security  -  and  Howto  Change  K 

IT  MANAGEIIEIfT:  Columnist  Larry  Ponemon 
offers  tips  on  bow  to  get  your  conqtaiiy's 

leadership  to  better  vahie  security,  ba^ 
on  a  survey  of  ddef  executives. 

OQuUdMiSORM 

Five  Log-Analysis  Mistakes 

SEGURTTY;  Anton  Chuvakzn  of  NetForensics 
outlines  common  pitfidls  and  ofifers  sugges¬ 
tions  on  bow  to  deal  with  them. 

OQMehLJnk  49639 

Putting  SRM  to  Best  Use 

STORAGE:  Read  some  that  can  help  you 
make  tbe  most  of  jmur  storage  resource 
management  teols.  O  QWddJnk  50t?l 

News  RSgM  to  Ybur  bHxH 

Between  issues  of  Congntterworld.  keep  Up 
with  all  the  IT  news  you  need  with  our  ftee 
e-mail  newsletters.  Go  to  our  Wkb  site  to 
subscribe.  QidBliLiakal490 
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Exchange  Makes  Linux  Call 

In  the  Technology  section:  Joseph  Panfit  is 
part  of  a  team  moving  the  Chicago  Mercantile 
Exchange  from  proprictar>’  Unix  and  RISC- 
based  systems  to  Intel-based  scr\'ers  running 
Linux  in  a  bid  to  cut  IT  costs.  Page  31 
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Checkpoint  for  Check  21 

Also  in  the  Technology  section:  The  federal  law- 
paving  the  way  for  electronic  image  exchange 
of  checks  gcK's  into  cfTect  this  week,  but  banks 
still  have  a  long  way  to  go  before  the  technoltt- 
gy  Is  in  place  to  make  it  work  Page  34 
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4  Spreadsheet  users  get  a  lift 

with  the  arrival  of  new  finan¬ 
cial  analysis  tools  from  SAS. 
Oracle  and  Siebel. 

4  Symbol  Technologies  rolls 
out  a  handheld  device  that 
weighs  and  costs  less  than  its 
ruggedized  models. 

5  Getting  IT  to  align  with  busi¬ 
ness  units  is  a  top  priority  in 
this  harsh  economic  climate, 
say  CIOs  at  the  Gartner  Sym- 
posium/ITxpo  conference. 

5  J.  Sainsbury  and  Accenture 

renegotiate  their  outsourcing 
deal  so  the  grocery  chain  can 
gain  more  control  over  its  IT 
operations. 

6  ILM  and  virtualization  prod¬ 
ucts  get  their  day  in  the  sun  at 
this  week's  Storage  Network¬ 
ing  World  conference  in 
Orlando. 

6  Hackers  crack  a  database  that 
housed  persona]  data  on  more 
than  1.4  million  Californians. 

8  Tech  salaries  Will  rise  10%  to 

15%  through  2007  for  workers 
with  certain  skills.  Meta  says. 

10  Microsoft  reins  in  plans  for 
its  Passport  service. 

to  Lack  of  internal  integration 

hinders  corporate  security 
efforts,  a  new  report  says. 

12  Global  Dispatches.  The  Aus* 
tralian  Computer  Society 
calls  for  the  adoption  of  soft¬ 
ware  quality  standards,  and 
Cisco  teaches  IT  skills  to  pris¬ 
oners  in  the  U,K. 


40  Emerging  Technologies:  CPUs 
Rev  New  Engines,  instead  of 
increasing  CPU  clock  speeds, 
chip  makers  are  adding  proc¬ 
essor  cores  to  increase  chip 
performance. 

42  Future  Watch:  Petabyte  Prog¬ 
nostications.  Futurist  Jeff 
Wacker  is  working  with  new 
text-mining  tools  to  handle 
the  coming  information 
explosion. 

44  Security  Manager’s  Journal: 
Sarb’Ox  Project  Following 
Script.  Mathias  Thurman  is 
making  progress  on  systems 
testing  as  the  Sarbanes-Oxley 
Act  deadline  nears. 


Nearing  the  Bon¬ 
ing  PoinL  For  the 
third  year  in  a  row. 
IT  vmrkers  across 
_ the  board  recerved 

—V  M  f  t  rases:  Shanes  rose 
an  average  d  3%  in  2004.  Budget  cuts 
and  increased  worMoads  aredso  dn- 
vingstresstoanaR-timehqh.PAG£  49 
Charts  and  Data  Points.  Find  salaiy 
information  for  30  IT  job  bites,  plus 
much  more.  PAGE  54 
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24  Don  Tennant  says  that  the  loss 
of  end-user  choice  with  re¬ 
spect  to  privacy  has  placed  a 
weighty  responsibility  on  IT 
professionals  to  get  the  tcch- 
nolog>-  right. 

24  Pimm  Fox  cautions  managers 
to  get  the  word  out  to  employ¬ 
ees:  The  e-mails  they  send 
can  establish  a  trail  of  evi¬ 
dence  that  could  bring  down 
the  company  —  or  cost  them 
their  careers, 

25  David  Moschella  recalls  that 
IT  issues  were  more  promi¬ 
nent  during  the  2000  presi¬ 
dential  race  than  they  arc  in 
this  year's  campaign.  But  he's 
confident  that  public  percep¬ 
tions  of  the  Industry  will  rise 
again  in  the  years  ahead. 

46  Daniel  J,  Weitzner  suggests 
that  although  it  may  seem 
paradoxical  transparency 
about  how  personal  informa¬ 
tion  U  collected  and  used  is  a 
key  step  in  privacy  protection. 

72  Frankly  Speaking:  Frank 
Hayes  warns  that  as  Hallow- 
eco  approaches,  you  ought  to 
beware  of  the  monsters  that 
lurk  among  corporate  IT  — 
especially  your  Frankenstein 
systems  and  JckyJI  and  Hyde 
managers. 
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Storage  Networking  World 

STORAGE:  Head  to  our  Knowledge  Center 
this  week  for  full  coverage  of  Fall  Storage 
Networking  World,  which  runs  through 
Thursday  in  Oriandu.  O  QuickLink  klTDO 

What  Your  CEO  Thinks  About 
Security  -  and  How  to  Change  It 

IT  MANAGEMENT:  Columnist  Larry  Ponemon 
offers  tips  on  how  to  get  your  company' 's 
leadership  to  better  value  security,  based 
on  a  survey  of  chief  executives. 

O  QuickLink  SOKM 

Five  Log-Analysis  Mistakes 

SECURITY;  Anton  Chuvakin  of  NctForensics 
outlines  common  pitfalls  and  offers  sugges¬ 
tions  on  bow  to  deal  with  them. 

O  QuickLink  49539 

Putting  SRM  to  Best  Use 

STORAGE:  Read  some  tips  that  can  help  you 
make  the  most  of  your  storage  resource 
management  tools.  O  QuickLink  50f74 

News  Right  to  Vbur  In-box 

Between  issues  of  Computerworid,  keep  up 
with  all  the  TT  news  you  need  with  our  free 
e-mail  newsletters.  Go  to  our  Web  site  to 
subscribe.  O  QuickLink  aU30 


WhM’saQuieiiUnk? 

O  Throughout  each  6sue  of 
ConcMerMonttyoul 
see  IwedgR  Quidlf*  codes 
ooeiing  10  nWed  aMant  on 
otf  Web  sAe.  Aba  M  the  and  of 
each  story,  a  OuickUnk  to  that 
story  onbie  tacAtaltt  sharing  4 
iMh  coieegues.  JuBt  enter  any 
oithoseoodasnioteOuBk- 
Unk  box.  wtich  is  at  the  top  of 
every  page  on  our  sue. 


ONLINE 
DEPARTMENTS 
Breaking  News 
OQukkLMialSIO 


Newsletter 

Subscnptions 

O  QuickLink  at490 


Knowtedge  Centers 
OQBickLwfca257D 
The  CMne  Store 
O  QuickLink  a2420 


cwnoMu 


NEWS 


www.computerNior1d.co(n 


AT  DEADLINE 


Avis  Europe  Scraps 
PeopleSoft  System 

MEmpwPLCsaUKhH 
aompwd  Jiinlwpnurt  ol  «r  Bff 
tyUMi  iMMd  M  ftoMofl  lnc.*s 
ipplGaHRm  baeiiM  of  e«t 
OMnuM  Md  Mmi.  11io  Bnch- 
Ml.  En^Md-taMd  or  nwtii 
cowpwwy  sail  II  nn  into  *a  nuni' 
bar  sf  fcmIaiMfilal  prafatom  wWi 
[ths]  InigB  anl  Iwwlsiiiswlsfinfi'' 
of  tbs  ERP  qistMa.  PaopItSofI 
saMMsEmpoleanoslllsaofl- 
iMraiBMv*)r200a.Mitdr 
dnod  to  eoaoMnl  afcoyl  Hit  prof* 
pel's  rtfolrtnn  lols  Empo 
■bo  aM  i  piMs  to  siMiatfalir 
toluep  too  PGOpo  of  a  oMor  fT 
rastractwtap  Htoribo.  indudtog 


Visual  Studo  to  Get 
Added  Design  Took 

Mtoraooft  Cpcp.  tomorrow  wto 
swHOMneo  a  Iraiiiswerit  and  a  tool 


dovotop  appfeiltoratolorid  for 
vorlieaf  totowtrioa.  Iho  Imw' 
work  and  tool  aro  baaad  on  too 
modotoiq  tochnobgy  to  Mfcro* 
sofl*s  opeeming  Visual  Sliidto 
2006  robno  and  aro  odonaions 
to  too  iMffl  Systoffl  otoOon  of  W* 
suaf  Oludto.  Mlcroooft  piano  to  r»- 
baao  a  Communily  IbcMcal  Pro* 
vtow  of  too  toefmolosy  tob  wook. 


Short  Takes 

BM  said  K  has  aignod  a  oovon* 
voar.  $180  mflton  buabooa  and 
IT  outooureing  doal  with  Dun  8 
Bradstrool  Carp.  Tho  contract 
bwlmaportbnoof08ffsdato 
itHrittWirn  Mttf  dstrafT.  m- 
tomoraoroiooandfinaneUopor* 
aMons.  About  220  ampbyooawii 
bo  ihMod  bom  too  Short  Wto. 
MJ.-haood  company  to  BH .. . 
FIUNC6CO  PARTNERS,  a  Monb 
Partt.  Calf,  baaod  bwotiiioiit 
tom.  sbd  N  wto  buy  HTs  boe* 
tranfc  data  btoithango  and  buai* 


urN.  wMdi  b  baoad  b  Ooltoorv 
bnf.  Md.  Tho  pmhaoo  prieo 


Analytics  Tools  Aim  to 
Improve  on  Spreadsheets 


SAS,  Oracle  and 
Siebel  tackle 
financial  analysis 


nv  HeATHCn  MVeNSTEIN 

COMPANIES  still  rely- 
ing  on  spreadsheets 
and  other  piecemeal 
financial  planning 
and  budgeting  metlKids  arc 
the  targets  of  a  trio  of  new 
packages  designed  to  provide 
an  enterprise  view  of  financial 
performance. 

SAS  Institute  Inc..  Oracle 
Corp.  and  Siebd  Systems  Inc. 
have  each  brought  out  tools 
aimed  at  tightening  financial 
reporting  operations. 

SAS  this  week  rolled  out  its 
SAS  Ftnancial  Intelligence 
line,  which  the  Cary.  RC.- 
based  company  said  can  help 
organizations  get  more  accu¬ 
rate  and  timely  financial  re¬ 
sults  for  use  in  the  reports 
needed  for  regulatory  compli¬ 
ance  efforts  and  corporate 
management. 

MCI  Inc.  b  using  the  activi¬ 
ty-based  management  product 


in  the  SAS  tine  to  replace 
spreadsheets  and  better  link 
operating  expenses  to  individ¬ 
ual  products  by  segment,  said 
Leslie  Mote,  corporate  busi¬ 
ness  analysb  director  at  MCI. 
The  new  system  provides 
more  cost  and  salary  data  on 
MCI  product  lines  than  previ¬ 
ous  loob.  Mole  said.  "I  don’t 
think  the  executives  were  able 
to  see  that  from  a  high  level” 
in  the  past,  she  said. 

Now.  employees  from  differ¬ 
ent  units  can  see  bow  their  ac¬ 
tions  relate  to  other  parts  of 
the  company  regarding  cost 
and  profitability.  Mote  said,  in 
addition.  MCI  uses  the  tool  to 
segment  salary  data  for  reports 
to  the  Securities  and  Exchange 
Commission  and  to  help  bet¬ 
ter  set  pricing  schedules. 

The  Thomson  Corp.,  a 
Stamford.  Comt-based  pro¬ 
vider  of  customized  informa¬ 
tion  systems  to  various  indus¬ 
tries.  used  the  earlier  version 
of  the  SAS  software  to  meet 
the  SEC's  reporting  require¬ 
ments  for  Usting  on  the  New 
York  Stock  Exchange,  said 
David  Ross.  Thomson's  direc- 


WVIfe  needed 
something  to 
be  able  to  support  a 
standard,  repeat¬ 
able,  consoMated 
process  every  single 


DAVID  ROSS.  DIRECTOR  OF 
CORPORATE  FINANCIAL  SYSTEMS. 
THOMSON CORP 

tor  of  corporate  financial  sys¬ 
tems.  ”We  really  didn’t  have 
one  version  of  the  truth,  (and] 
we  needed  something  to  be 
able  to  support  a  standard,  re¬ 
peatable.  consolidated  process 
every  single  month.”  R^s 
said.  Some  of  the  newer  SAS 
features  —  such  as  real-time 
consolidation  —  may  help 
Tbom-son  close  hs  books  and 
report  earnings  more  quickly, 
he  added. 

Oracle  thb  month  began 
shipping  its  Enterprise  Plan¬ 
ning  and  Budgeting  applica¬ 
tion,  which  b  designed  to  inte-  . 
grate  planning  and  budgeting  I 


processes  in  a  single  database 
and  associate  financial  data 
with  specific  users  who  can  be 
held  accountable  for  changes, 
said  John  Schoenfaerr.  Oracle’s 
vice  president  of  corporate 
performance  management  de- 
velopmenL  The  new  applica¬ 
tion  will  replace  Oracle  Finan¬ 
cial  Analyzer  and  Oracle  Sales 
Analyzer. 

For  its  part,  San  Mateo. 
Calif.-based  Siebel  thb  month 
brought  out  Financial  Analyt¬ 
ics,  which  the  vendor  said  can 
deliver  real-time  vbibllity  into 
financial  data  and  provide  an 
early  warning  of  deviations 
from  plans. 

The  three  vendors  are  posi¬ 
tioning  their  products  for 
companies  struggling  with 
spreadsheet  budgeting,  said 
TA^yne  Eckerson,  an  analyst  at 
The  Data  Warehousing  Insti¬ 
tute  in  Seattle.  The  budget- 
ing/planning  system  b  inte¬ 
grated  with  financial  consoli¬ 
dation  and  accounting  systems 
so  standards  are  baked  in  the 
operational  side  of  financial 
reporting,”  he  said.  "The  num¬ 
bers  are  more  accurate  and  up 
to  date.”  Cl  502S5 
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Symbol  Scales  Down  Weight, 
Cost  of  New  Handheld  Mt^el 


aV  MATT  HAMBLEN 

Symbol  Technologies  Inc.  last 
week  announced  the  MC50 
handheld  computer,  a  device 
that’s  designed  to  be  more 
durable  than  conventional 
handhelds  and  b  priced  in 
between  those  products  and 
fully  ruggedized  modeb. 

The  MC50  b  aimed  at  sales¬ 
people  and  other  mobile 
workers,  as  well  as  roaming 
employees  such  as  retail  saJes- 
fioor  managers  and  IT  staffers 
who  oversee  data  centers  or 
server  forms,  said  Symbol 
product  manager  Doug  Uoyd 

The  device  weighs  about 
7  oz.,  making  it  much  lighter 
than  rugged  handhelds  like 


the  26-oz.  MG9000-C  model 
offered  by  HoltsvUle.  N.Y.- 
based  Symbol  But  Lloyd  said 
the  MCSO  includes  some  dura¬ 
bility  features  that  should  help 
extend  its  life  and  enable  IT 
managers  to  plan  longer  re¬ 
placement  cycles  than  they 
can  with  roost  handhelds. 

For  example,  the  ke^  on  the 
MCSO  can  be  depressed  many 
more  times  than  the 
ones  on  typical  hand¬ 
helds  can,  Lloyd 
claimed.  He  said  the 
device  also  includes 
special  covers  designed 
to  protect  its  ports 
from  dust  and  sudden 
impacts. 


The  MC50  b  equipped  with 
integrated  Wi-Fi  ter^ology 
and  data-capture  options  that 
include  a  camera  as  well  as 
one-  and  two-dimensional  bar 
code  scanning  capabilities.  In 
addition,  it  supports  voice- 
over-IP  applications.  Symbol 
said.  Shipments  are  due  to 
start  in  December,  with  prices 
ranging  from  S92S  to  $1,200. 

liut  price  range  puts  the 
MC50  between  low-cost  hand¬ 
helds  seQii^  for  about  $200 
and  the  most  expensive  n^- 
gedized  devices,  which  can 
cost  more  than  $1,500 
and  are  aimed  at  users 
such  as  package-deliv¬ 
ery  drivers,  said  jack 
Gold,  an  analyst  at  Meta 
Group  Inc. 

Gold  and  Gartner  Inc. 

_  analyst  Ken  Dulaney 

SymboTt  MCSO  both  noted  that  the 


MCSO  doesn't  include  a  wire¬ 
less  WAN  connection.  Du¬ 
laney  predicted  that  the  de¬ 
vice  will  be  used  primarily  as 
a  low-cost  inventory  manage¬ 
ment  and  control  terminal  in 
WLAN  in.stallations. 

The  MCSO  comes  in  two 
versions,  one  with  a  standard 
keyboard  and  one  with  a  navi¬ 
gation  bar.  Symbol  said  it  runs 
on  the  Windows  Mobile  2003 
Second  Edition  operating  sys¬ 
tem  and  b  con^atible  with 
customer  relatioaship  man¬ 
agement  software  from  ven¬ 
dors  like  Microsoft  Cotp..  Ora¬ 
cle  Corp.,  SAP  AG  and  Siebel 
Systems  Inc  O  50231 
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Bad  Times  Boost  Efforts  to 
Align  fT,  Business  Goals 


CIOs  bridge  gap 
by  recruiting 
business  managers 
to  oversee  efforts 


While  corporations  have  as¬ 
pired  for  years  to  more  closely 
align  IT  investments  with  core 
business  goals,  the  current 
harsh  economic  climate  has 
prompted  many  enterprises  to 
formalize  such  ties,  according 
to  a  panel  of  CIOs  speaking 
here  last  week  at  the  Gartner 
Symposhun/mcpa  And  pan¬ 
elists  said  those  e£fbrts  are 
beginning  to  reap  concrete 
results. 

For  example,  the  Washing¬ 
ton-based  AARP  (the  Ameri¬ 
can  Associatkm  of  Retired 
Persons)  has  a  department 
within  IT  made  up  of  business 


analysts  and  project  managers 
recruited  from  outside  IT 
that’s  dedicated  to  aligning 
technology  efforts  with  the 
needs  of  the  business,  said 
CIO  |ohn  Sullivan. 

‘’Those  are  the  most  popu¬ 
lar  people  in  our  organiza¬ 
tion,”  Sullivan  said. 

After  working  with  that 
business-IT  alignmrat  group 
for  a  few  years,  the  employees 
are  warmly  welcomed  back  by 
their  previous  departments, 
which  are  e^er  to  mine  their 
knowledge  of  IT.  be  added. 

Closer  ties  between  busi¬ 
ness  and  IT  helped  the  AARP 
slash  the  timetable  of  a  plan- 
ning  and  approval  cycle  for 
upgrades  to  its  call  center  sys¬ 
tems  ftom  the  normal  six  to  IS 
months  to  less  than  three  days, 
Sullivan  said. 

At  TRW  Automotive  Hold¬ 
ings  Corpn  a  Uvonia,  Micb.- 
based  automotive  supplier. 


CIO  Toe  Drouin  nurtures  the 
ties  between  IT  and  the  busi¬ 
ness  by  mapping  IT  efforts  to 
correspond  directly  with  sig¬ 
nificant  business  processes  — 
such  as  order  fulfillment. 
Drouin  has  also  recruited  an 
IT  business  manager  from 
TRW’s  finance  department 
The  efforts  are  yielding  tan¬ 
gible  results  at  TRW.  Drouin 


said.  In  a  recent  presentation 
to  the  chief  operating  officer 
on  the  merits  of  antivirus 
tecfanolog)'.  an  IT  manager  fo¬ 
cused  on  the  risks  the  compa¬ 
ny’s  operations  would  be  ex¬ 
posed  to  if  its  systems  weren’t 
protected.  The  COO  agreed 
on  the  spot  to  dedicate  addi¬ 
tional  resources  to  secure  sys¬ 
tems,  he  said. 

Lines  Are  Bkining 

The  lines  are  starting  to  blur 
a  bit  —  is  this  guy  an  IS  guy  or 
a  business  guy?”  Drouin  said 
of  company  perceptions  of  IT 
managers  who  work  on  proj¬ 
ects  that  bolster  business 
goals.  “Other  parts  of  the  busi¬ 
ness  are  hungry  for  these  peo¬ 
ple  who  are  solving  these 
problems.”  be  added. 

At  the  (^vemment  Ac¬ 
countability  Office,  an  agency 
that  works  for  Congress  to 
scrutinize  bow  the  federal 
government  spends  money. 
CIO  Tony  Ciax»  uses  business 
managers  —  rather  than  IT 
staffers  — >  to  ma)te  presenta¬ 
tions  about  the  effectiveness 
of  specific  IT  programs. 

“When  a  business  manager 


gets  up  and  shows  how  be  has 
been  much  more  of  a  success 
■ .  .  we  get  a  lot  of  recognition,” 
Ciccosaid. 

The  GAO's  IT  department 
also  regularly  gauges  the  satis¬ 
faction  of  its  users  with  cus¬ 
tomer  satisfaction  surveys, 
Cicco  added. 

Charles  lacovua  a  professor 
of  IT  at  Wake  Forest  Universi¬ 
ty’s  Babcock  Graduate  School 
of  Management  in  Winston- 
Saleni,  N.C.,  said  in  an  inter¬ 
view  that  most  companies 
need  to  do  more  to  institution¬ 
alize  the  effort  to  bridge  the 
gap  between  business  and  IT. 

Organizations  can  use 
scorecards  and  service-level 
agreements  to  monitor  how  IT 
is  performir^  against  estab- 
li^ed  goals  and  designate  ac¬ 
count  manners  to  interact 
with  business  units,  be  said. 

And  formalizing  these  ties 
can  become  easier  as  more 
CIOs  begin  to  report  not  to 
departmental  executives  but 
to  C'level  executives,  lacovuo 
added.  ”That  forces  the  other 
business  executives  to  accept 
them  as  a  partner.”  be  said 
O5022S 


Sainsbury,  Accenture  to  Redo  Outsourcing  Pact 


Grocery  chain 
seeks  to  r^ain 
control  over  IT 


Looking  to  gain  more  control 
of  IT  operations.  J.  Sainsbury 
PLC,  the  Ui’s  second-largest 
grocery  chain,  is  in  the  proc¬ 
ess  of  renegotiating  a  $3.2$  bil¬ 
lion  outsourcing  contract  with 
IT  services  provider  Accen¬ 
ture  Ltd,  as  part  of  an  overall 
three-year,  $434  billion  rescue 
plan  designed  to  retnvigorate 
the  strugglii^  business. 

In  an  attempt  to  drive  down 
the  price  of  the  Accenture 
contract,  Sainsbury  will  sim¬ 
plify  existing  IT  systems  as 
well  as  those  in  the  pipeline, 
because  the  implementation 
effort  has  ”friled  to  deliver  the 
anticipated  increase  in  pro¬ 
ductivity,”  while  IT  costs  con¬ 
tinue  to  eat  up  more  azul  more 


of  the  company's  overall  bud¬ 
get  in  proportion  to  sales, 
Sainstmry  said  in  a  statemenL 

Loiulon-based  Sainsbury 
signed  a  seven-year  deal  with 
Accenture  in  2000  to  out¬ 
source  all  of  its  IT  (^rations. 
The  pact  led  to  the  transfer  of 
about  800  Sainsbury  employ¬ 
ees  to  Accenture.  The  grocer 
retained  a  small  in-house  staff 
to  oversee  the  new  IT  strategy. 

Last  November,  the  contraa 
was  renegotiated  with  an  eye 
toward  cutting  costs  and  ex¬ 
tended  through  2010,  a  Sains¬ 
bury  spokeswoman  said. 

Mwiisa  Focus 

In  the  statement,  the  super¬ 
market  chain  said  H  wants  to 
ret»e^>tiate  the  contract  in  an 
effort  to  provide  its  personnel 
with  more  input  into  the  se¬ 
lection  and  implementation 
of  IT  systems.  Sainsbury  is 
also  looking  to  rebtiild  its  in¬ 
ternal  IT  staff  and  systems. 


One  €t(  Sainsbury’s  biggest 
IT  problem  areas  te  the  opera¬ 
tion  of  its  four  new  automated 
depots,  which  the  company 
said  are  failing  to  perform  at 
the  planned  levels. 

Accenture,  which  is  one  of 
the  world's  largest  providers 
of  IT  services,  said  that  al¬ 
though  it's  responsible  for  the 
supermarket  chain's  IT  trans¬ 


formation  program,  including 
son»e  of  the  supply  chain  sys¬ 
tems,  the  atitoaiated  depots 
were  never  part  of  its  contract 
with  Sainsbury. 

Accenture  said  it  replaced 
the  bulk  of  Sainsbury’s  core 
operational  systems,  providing 
“improved  reliability  and  sta¬ 
bility  of  systems”  while  also 
reducing  the  grocery  chain's 


/  /  y 
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1  depots  15  part  ol  Hie  qroctry  ito'e 

M  ttansformation  ettort 

annual  IT  operating  costs. 

Because  negotiations  be¬ 
tween  Sainsbury  and  Accen¬ 
ture  are  currcnlly  taking  place, 
representatives  from  both 
companies  declined  to  com¬ 
ment  beyond  the  stafemems. 

Sainsbury  said  that  in  its 
2004-2005  fiscal  year.  H  will 
write  off  $254  million  of  re¬ 
dundant  IT  assets  and  $218 
million  in  automated  equip¬ 
ment  in  the  new  friinili^nt 
depots.  An  additional  $S43 
million  in  inventory  losses 
resulting  from  the  disruption 
caused  by  the  new  depots  and 
IT  systems  will  also  be  wrinen 
off.  the  company  said. 

Sainsbury  estimates  that 
its  expenditures  in  its  IT 
systems  and  supply  chain 
will  come  in  at  an  addhiooal 
$3633  million  over  the  next 
two  years.  The  company  pro¬ 
jects  IT  budget  savings  of 
S72.7  million  by  its  2007-2008 
fiscal  year.  O  502Q 


Rohde  writes  for  the  WG  News 
Service 
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PeopleSoft  Will  Pay 
FbnnerCE0$3.2M 

PeopteSoft  Inc.  disclosed  (hai  H 
will  pay  former  CEO  Craig  Con¬ 
way  a  severance  package  of  at 
least  S3.2  miNkm  to  cover  the 
salary  and  bonuses  he  could  have 
earned  over  the  next  two  years. 
PeopleSofl's  board  ousted  Con- 
wey  on  Oct.  1  {QuicltLink  49819). 
But  in  a  regulatory  filing  dated 
last  Monday,  the  company  said 
Conway  was  fired  without  cause, 
making  him  eligible  for  continued 
salary  payments  and  accelerated 
vesting  of  his  stock  options. 


Wording  Revised  on 
Takeover  Defense 

In  another  matter,  PeopleSoft 
said  H  has  revised  the  carrtract 
language  for  the  so-called  cus¬ 
tomer  assurance  program  fiiat 
the  software  vendor  adopted  as 
pari  of  its  effort  to  fend  off  Oracle 
Corp.'8  hostile  takeover  bid.  The 
changes  were  made  lo  clarify 
some  of  the  provisions  of  the  pro¬ 
gram,  which  codd  trigger  pey- 
monts  to  users  if  PeopleSoft 
is  acquired.  Oracle  has  asked  a 
judge  in  Delaware  to  invalidate 
the  paymerrt  offer. 


AMD  Adds  High-End 
Desktop  Processors 

Advanced  bRcro  Devices  Inc.  arr- 
nouncad  a  pair  of  high-end  proc¬ 
essors  for  desktop  PCs  to  com¬ 
pete  agaimt  Intel  Corp.’s  fWhim 
4  fine.  AMO  said  if  s  adding  the 
Athlon  64  FX-SS  chip  for  Mgh- 
performance  appfications  and  the 
Athlofl  64  4000*.  which  is  posi- 
fioned  as  a  makistroam  offering. 

Intel  Eyes  Optical 
Links  for  Sterns 

An  InW  esecuthre  toU  the  IDO 
Nows  Service  thet  the  company  is 
developing  an  optical  intercon- 
noct  to  replace  the  copper-based 
finks  now  used  in  laptop  PCs  and 
servers.  The  technology  should  be 
ready  for  commercial  uses  within 
three  to  five  years,  he  said. 


Users  Look  for  ILM, 
Virtualization  at  SNW 


A  slew  of  new  teehnolog\-  offerings  aa’ 
expeeted  to  be  um  eiled  at  storage  show 


I  BV  LUCAS  MEARIAN 

Sfl*fllE«SOr  STORAGl 
sxstcTTut  have  m.idc 
more  product  an¬ 
nouncements  in  the 
p.'tst  six  months  than  in  the 
I  previous  two  years,  accordinj; 
to  one  research  firm.  This 
week's  Storage  Networking 
World  conference  in  Orlando 
promises  to  represent  a  micro¬ 
cosm  of  that  trend  as  dozens 
of  vendors  unveil  new  tech- 
nolugit's. 

Chief  among  those  ulTerings 
ore  systems  that  can  automate 
the  migration  of  data  between 
tiers  of  storage  and  simplify' 
storage  network  management 
through  virttialization.  an  ab¬ 
straction  layer  between  stor¬ 
age  man^cment  applications 
and  the  storage  hardware. 

Although  some  information 
life-cycle  management  <ILM) 
and  virtualization  technolo¬ 
gies  have  been  around  for 
more  than  a  year,  "the  differ¬ 
ence  this  time  is  you're  going 


to  have  large  vendors  talking 
about  {iti,"  said  Tony  Prig- 
more.  an  analyst  at  Enterprise 
Strategy  Gmup  Inc.,  a  re¬ 
search  firm  in  Milford.  M.iss. 

“ILM  is  something  inicresi- 
ing  that  we  talk  about  on  a  dai¬ 
ly  and  WL'ckly  basis  here,"  said 


SNW  Product 
Announcements 

Ml  AN'M  P,.-h..''l  C., 
M,.,.U.or  c,ir„  OL.m,.. 
C'JM!  -  , 

sloraue  area  network 


CryptoStor  SAN  VPN 
appliance 


VrrtudLUN  fibre 
Chann«.‘l  Target  Emulation 
System 


Roan  Winchester,  director  of 
backup  management  at  Catho¬ 
lic  Healthcare  Partners  in 
Cincinnati.  Winchester  said  he 
will  appraise  the  ILM  tcch- 
nolc^ics  on  display  at  the  con¬ 
ference.  sponsored  by  Compuf- 
erworW  and  the  Storage  Net¬ 
working  Industry  Association. 

The  company  is  in  the 
process  of  coiLSolidaiing  re¬ 
gional  servers  that  arc  180 
miles  apart  into  its  main  data 
centers  for  centralized  backup. 
Once  that's  done.  Winchester 
plan.s  to  replicate  data  asyn- 
chnrnously  between  those 
centers  for  disaster  recovery. 

He  said  an  ILM  tool  could 
help  him  reduce  the  total  cost 
of  ownership  by  easing  data 
migration  headaches  and  by 
moving  older  data  off  of  high- 
end  storage  and  onto  midrier 
and  ATA  disk-based  arrays. 

Other  Vendor  Plans 

Several  vendors  expect  to  un¬ 
veil  ILM-type  tools  this  week 
as  demand  from  users  such  as 
Winchester  increases. 

IBM  today  will  unveil  the 
next  generation  of  its  Total- 


Hackers  Hit  California 
With  Massive  ID  Theft 


Gain  personal  data 
of  about  1.4  million 
state  residents 

8V  PAUL  ROBCRTS 

The  state  of  California  has 
svarned  residents  that  person¬ 
al  data  may  have  been  stolen 
from  the  University  of  Califor¬ 
nia.  Berkeley,  after  hackers  hit 
a  research  database  there. 

The  California  Department 
of  Social  Services  (CDSS)  stat¬ 
ed  last  week  that  the  agency  is 
working  with  the  FBI  to  inves¬ 
tigate  the  intrusion. 

The  incident  involved  a 


computer  that  contained  per¬ 
sonal  information  on  about 
1.4  million  rccipicnLs  and  pro¬ 
viders  participating  in  the 
CDSS’s  In-Home  Supportive 
Services  (IHSS)  program, 
which  provides  home-care 
services  to  low-income  elderly 
and  disabled  Californians. 
Names,  addresses,  telephone 
and  Social  Security  numbers, 
and  the  birth  dates  of  IHSS 
participants  may  have  been 
stolen,  said  Carlos  Ramos,  as¬ 
sistant  secretary  at  the  CDSS. 
The  data  could  be  usc'd  to  fake 
the  identities  of  clicnis. 

71)e  state  agency  gave  the 


university  the  data  to  conduct 
research  on  the  IHSS  program. 
The  compromise  occurred 
on  Aug.  1  and  was  discovered 
on  Aug.  30  by  UC  Berkeley 
IT  staffers  using  intrusion- 
detection  software,  Ramos 
said.  Investigators  said  a  hack¬ 
er  exploited  a  vulnL*rability  in 
“commercially  available  data¬ 
base  software,"  but  they  don't 
know  whether  the  attack  was 
targeted. 

A  database  of  personal  in- 
formation  on  people  who  may 
lack  the  technical  sophistica¬ 
tion  to  defend  themselves 
against  identity  theft  and  arc 
unaware  that  a  database  stores 
their  data  would  be  an  attrac¬ 
tive  target  for  thieves,  .said 
lonathan  Bingham,  president 
and  founder  of  Intrusic  Inc.,  a 
Waltham,  Mass.-based  maker 


Storage  Open  Software  famil>’ 
for  storage  management. 
IBM’s  SAN  File  System  Ver¬ 
sion  2.2  provides  ILM  capabil¬ 
ities  through  policy-based 
movement  and  deletion  of 
files  among  various  tiers  of 
storage.  And  Hitachi  Data  Sys¬ 
tems  Corp.  plans  to  show  off 
one  of  its  high-end  TagmaS- 
tore  Universal  Platform  arrays 
managing  an  IBM  Enterprise 
Storage  Server. 

Tim  Graham,  team  leader 
for  data  systems  management 
at  Virgin  Atlantic  Airways  Ltd. 
in  Crawley.  U.K..  said  he's 
looking  for  tools  to  help  him 
reduce  the  complexity  of  his 
backup  environment  while 
speeding  up  his  network.  Gra¬ 
ham  said  he  likes  the  idea  of 
ILM  tools,  but  because  his  data 
ivsidt's  on  a  heterogeneous 
storage  environment  across 
the  globe,  he  first  needs  tools 
to  classify  that  data  in  order  lo 
determine  its  true  value. 

Vendors  such  as  HDS, 
QLogic  Corp.  and  Emulcx 
Corp.  arc  planning  to  demon¬ 
strate  new  4Gbit/sec.  Fibre 
Channel  networks,  which 
could  double  the  speed  of 
current  storage  networks. 

Analysts  and  u.scrs,  how¬ 
ever,  said  4Gbit/scc.  technol¬ 
ogy.  which  resides  in  host  bus 
adapters  and  switches,  isn't 
needed  yet  by  most  sites. 
OS02S7 


of  software  for  spotting  suspi¬ 
cious  network  activity. 

Without  adequate  forensic 
information,  investigators  face 
a  daunting  task  in  reconstruct¬ 
ing  the  intrusion  and  deter¬ 
mining  whether  the  IHSS 
database  was  compromised, 
let  alone  finding  the  culprits. 

Meanwhile,  the  CDSS  asked 
UC  BcrkclL’y  to  return  the 
IHSS  data  and  will  investigate 
whether  the  researcher  ad¬ 
hered  to  an  agreement  to  pro¬ 
tect  personal  information. 
050269 


Roberts  is  a  reporter  /or  the 
IDG  News  service. 


Mark  Hall  is  Bway  this  week. 
His  column.  On  the  Mark,  wil 
return  In  a  future  issue. 
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PeopleSoftWiHPay 
Former  CEO 

ftoplwSefl  toe.  ilicfcwed  that  N 
w9  pav  fanner  GEO  CiaiB  Con* 

•  Mverance  pecfcioe  of  at 
toast  S3.2  mHon  to  orvar  the 
salary  and  bofUMS  ha  oooki  hows 
aamad  over  the  not  two  years. 
ftwptoSeirs  hoard  auatod  Coo- 
woy  on  OcL  1  [QidektiBk  4889]. 
But  to  a  ragutotory  Mtao  (toted 
tost  Monday,  tha  company  said 
Comeoy  was  fired  wftheut  cause, 
making  Mm  eigtoio  tor  continued 
salary  payments  and  accetoratad 
vesttog  of  Ms  stock  options. 


Wording  Revised  on 
Takeover  Defense 

to  another  mattsr.  ftooptoSoft 
said  it  has  ravtoad  the  contract 
language  far  the  so-calsd  cw 
lomar  assurance  program  that 
the  software  vendor  adeplad  as 
part  of  Ms  oftort  to  fond  off  Orade 
Corp.*s  hosMe  tahsouor  bid.  The 
changes  wore  mads  to  ctortfy 
aomeofthaprovtotonsofthepro- 
9am,sddchooiddtrfggsrpar 
mants  to  users  ffftoeptoSoft 
to  aequirod.  Oracle  has  ashed  a 
judge  to  Ostowara  to  tovaMste 
the  patpneirt  oftor. 

AMD  Adds  Mgh-End 
Desktop  Processors 

Advanced  Mtoro  Oavices  toe.  an* 
(Nuneed  a  pair  of  Ngb-end  proc¬ 
essors  tor  dosktop  PCs  to  com* 
pats  against  tatoi  Corp.*s  Pentium 
4  tow.  AMD  sMd  rs  ^Aig  the 
Addon  64  FX-SB  efito  tor  Mgh- 
parfarmanoa  apphetotone  and  the 
Athlon644000».wMcbispoii- 
ttonod  as  a  nwtostroam  offartog. 


Intel  Eyes  Optical 
Links  for  S^tems 

An  total  ancudve  toM  the  M)0 
Haws  Saryica  that  dw  company  is 
davefaptog  an  optical  totarcott* 
nset  to  reptoca  the  copper  hsiad 
todis  now  used  to  lapiv  PCs  and 
asrvers.  The  tochrwtogy  Mwuld  bo 
reaoy  lor  conunaroai  uaas  wann 
throe  to  Itoo  yuan,  ha  said. 


Users  Look  for  ILM, 
Virtualization  at  SNW 

A  slew  of  new  technology  offerings  are 
expected  to  be  unveiled  at  storage  show 


BV  LUCAS  MEAniAN 

UPPLIERS  OF  STORAGE 
systems  have  made 
more  product  an¬ 
nouncements  in  the 
past  six  months  than  in  the 
previous  two  years,  according 
to  one  research  firm.  This 
week's  Stor^  Networking 
World  conference  in  Orlando 
promises  to  represent  a  micro¬ 
cosm  of  that  trend  as  dozens 
of  vendors  unveil  new  tech¬ 
nologies. 

Chief  among  those  offerings 
are  systems  that  can  automate 
the  migration  of  data  between 
tiers  of  storage  and  simplify 
storage  network  management 
through  virtualization,  an  ab¬ 
straction  layer  between  stor¬ 
age  management  applications 
and  the  storage  hardware. 

Although  some  information 
life-cycle  management  (ILM) 
and  virtualization  tcchnolo- 
^es  have  been  around  for 
more  than  a  year,  "the  differ¬ 
ence  this  time  is  you're  goti^ 


I  to  have  large  vendors  talking 
about  (it].*’  said  Tony  Prig- 
more.  an  analyst  at  Enterprise 
Strategy  Group  Inc.,  a  re¬ 
search  nrm  in  Milford.  Mass. 

"ILM  ts  something  interest¬ 
ing  that  we  talk  about  on  a  dai¬ 
ly  and  weekly  basis  here,”  said 
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Roan  Winchester,  director  of 
backup  management  at  Catho¬ 
lic  Healthcare  Partners  in 
Cincinnati.  Winchester  said  he 
will  appraise  the  ILM  tech¬ 
nologies  on  display  at  the  con¬ 
ference.  sponsored  by  Compuh 
envorld  and  the  Storage  Net¬ 
working  Industry  Association. 

The  company  is  in  the 
process  of  consolidating  re¬ 
gional  servers  that  are  180 
miles  apart  into  its  main  data 
centers  for  centralized  backup. 
Once  that’s  done,  Winchester 
plans  to  replicate  data  asyn¬ 
chronously  between  those 
centers  for  disaster  recovery. 

He  said  an  ILM  tool  could 
help  him  reduce  the  total  cost 
of  ownership  by  easing  data 
migration  headaches  and  by 
moving  older  data  off  of  hi^ 
end  storage  and  onto  midtier 
and  ATA  disk-based  arrays. 

other  Vendor  Plans 

Several  vendors  expect  to  un¬ 
veil  ILM-type  tools  this  week 
as  demand  from  users  such  as 
Winchester  increases. 

IBM  today  will  unveil  the 
next  generation  of  its  Total- 


Storage  Open  Software  family 
for  storage  management. 
IBM’s  SAN  File  System  Ver¬ 
sion  2.2  provides  ILM  capabil¬ 
ities  through  policy-based 
movement  and  deletion  of 
files  among  various  tiers  of 
storage.  And  Hitachi  Data  Sys¬ 
tems  Corp.  plans  to  show  off 
one  of  its  high-end  TagmaS- 
tore  Universal  Platform  arrays 
managing  an  IBM  Enterprise 
Storage  Server. 

Tim  Graham,  team  leader 
for  data  systems  management 
at  Virgin  Atlantic  Airways  Ltd. 
in  Crawley,  UJC,  said  he’s 
looking  for  tools  to  help  him 
reduce  the  complexity  of  his 
backup  environment  while 
speeding  up  his  network.  Gra¬ 
ham  said  he  likes  tbc  idea  of 
ILM  tools,  but  because  his  data 
resides  on  a  heterogeneous 
storage  environment  across 
the  globe,  he  first  needs  tools 
to  classify  that  data  in  order  to 
determine  its  true  value. 

Vendors  such  as  HDS. 
QLogic  Corp.  and  Emulex 
Corp.  are  planning  to  demon¬ 
strate  new  4Gb>t/sec.  Fibre 
Channel  networks,  which 
could  double  the  speed  of 
current  storage  networks. 

Analysts  and  users,  how¬ 
ever.  said  4Gbit/sec  technol¬ 
ogy.  which  resides  in  host  bus 
adapters  and  switches,  isn't 
needed  yet  by  most  sites. 
OS0257 


Hackers  Hit  California 
With  Massive  ID  Theft 


Gain  personal  data 
of  about  L4  million 
state  residents 


SV  PAUL  IH)«Eirrs 
The  state  of  California  has 
warned  residents  that  person¬ 
al  data  may  have  been  stolen 
from  the  University  of  Califor¬ 
nia.  Berkeley,  after  hackers  hit 
a  research  database  there. 

The  California  Department 
of  Social  Services  (CDSS)  stat¬ 
ed  last  week  that  the  agency  is 
working  with  the  FBI  to  inves¬ 
tigate  the  intrusion. 

The  incident  involved  a 


computer  that  contained  per¬ 
sonal  information  on  about 
1.4  million  recipients  and  pro¬ 
viders  participatii^  in  the 
CDSS's  In-Home  Supportive 
Services  (IH5S)  prt^ram, 
which  provides  tome-care 
services  to  low-income  elderly 
and  disabled  Californians. 
Names,  addresses,  telephone 
and  Social  Security  numbers, 
and  the  birth  dates  of  IHSS 
participants  may  have  been 
stolen,  said  C^los  Ramos,  as¬ 
sistant  secretary  at  the  CDSS. 
The  data  could  be  used  to  fake 
the  identities  of  clients. 

The  stale  agency  gave  the 


university  the  data  to  conduct 
research  on  the  IHSS  program. 
The  compromise  occurred 
on  Aug.  1  and  was  discovered 
on  Aug.  30  by  UC  Bericeley 
IT  staffers  using  intrusion- 
deteirtion  software,  Ramos 
said.  Investigators  said  a  hack¬ 
er  exploited  a  vulnerability  in 
"commercially  available  data¬ 
base  software,"  but  they  don't 
know  whether  the  attack  was 
targeted. 

A  database  of  personal  in¬ 
formation  on  people  who  may 
lack  the  technical  sophistica¬ 
tion  to  defend  themselves 
against  identity  theft  and  are 
unaware  that  a  database  stores 
their  data  would  be  an  attrac¬ 
tive  target  for  thieves,  said 
jonathan  Bingham,  president 
and  founder  of  imrusic  Inc„  a 
Waltham,  Mass.-based  maker 


of  software  for  spotting  suspi¬ 
cious  network  activity. 

Without  adequate  forensic 
information,  investigators  face 
a  daunting  task  in  reconstruct¬ 
ing  the  intrusion  and  deter¬ 
mining  whether  the  IHSS 
database  was  compromised, 
let  alone  Anding  tto  culprits. 

Meanwhile,  the  CDSS  asked 
UC  Berkeley  to  return  the 
IHSS  data  and  will  iiwestigate 
whether  the  researcher  ad¬ 
hered  to  an  agreement  to  pro¬ 
tect  personal  information. 
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Roberts  isareporter  for  the 
IDG  News  service. 


M.^rk  Hall  is  away  this  week 
His  column.  On  the  M.^rk.  will 
return  in  a  future  issue. 
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rr  Pay  to  Rise  10%  to  15% 
Through  200^  Study  Says 


Top  Demand 


MotttMoAIppBfflT  «ataek)abr 


Better  eeononn; 
demand  for  eertain 
skill.s  w  ill  drive 
inemase.  Meta  sa\s 


BY  THOMAS  HOFFMAN 

An  iMpRovtNc;  econ¬ 
omy  and  heightened 
demand  for  technol- 
«>»:>  workers  with 
certain  skills  will  help  drive 
I0"o  to  IS'Si  salary’  increases 
for  seasoned  technologists 
through  2007,  according  to  a 
new  stud)  unveiled  by  Meta 
Group  Inc.  this  month. 

The  predictions  seem  to  fly 
in  the  face  of  conventional 
wisdom  following  more  than 
three  years  of  a  weak  IT  job 
market,  a  rise  in  organiza¬ 
tions'  use  of  lower -cost  off¬ 
shore  labor  and  marginal  pay- 
increases  for  full-time  domes¬ 
tic  IT  workers. 

Still,  recruiters  say  there's 
plenty  of  evidence  to  support 
the  predictions  for  salary 
gains  including  a  relatively 
low  unemployment  rate  for 
U.S.  high-tech  workers  and  a 
shortage  of  new  workers  en¬ 
tering  the  market.  According 
to  the  U.S.  Bureau  of  Labor 
Statistics,  the  unemployment 
rate  for  computer  and  mathe¬ 
matical  occupations  at  the  end 
of  September  was  3.JS. 

However,  a  half-dozen  IT 
managers  interv-iewed  last 
week  said  they  don’t  expect  IT 
staffers  to  receh-c  increases  of 
more  than  3%  to  5%  for  at  least 
the  next  year.  “I  just  don't  see 
a  15^0  increase  mer  the  next 
two  years;  the  market  doesn't 
warrant  this,’*  said  Rick  Pcitz. 
CIO  at  Marcus  &  Millichap 
Real  Estate  Investment  Bro¬ 
kerage  Ca  in  Encino.  Calif. 

Peltz  is  looking  to  HU  three 


IT  positions  and  has  been 
screening  resumes  on  Mon- 
stcr.com  rather  than  advertis¬ 
ing  for  the  posts,  which  in¬ 
clude  an  opening  for  a  busi¬ 
ness  analyst. 

“If  anything,  there’s  an 
abundance  ofovcrqualifled 
workers  applying  for  this  po¬ 
sition.”  said  Pcitz.  who  antici¬ 
pates  providing  his  15-person 
staff  with  3%  cost-of-living  in¬ 
creases  in  2005  “and  maybe  a 
little  bit  more  for  merit." 

Conservative  View 

“I  do  expect  salaries  to  grow 
over  the  next  several  years, 
but  I  expect  the  growth  rates 
to  be  much  more  modest.” 

'  said  Bill  McQuiston.  CIO  at 
Truman  Medical  Centers  Inc. 
in  Kansas  City.  Mo.  As  the 
economy  heats  up  and  compa¬ 
nies  begin  to  invest  more 
heavily  in  IT.  he  said,  "we  arc 
going  to  sec  another  shortage 
of  [technical!  people.” 

That  maps  with  the  per¬ 
spective  of  several  recruiters. 
Scot  Metland.  president  of 
Dice  Inc.,  a  Web-based  IT  job 
board  in  New  York,  said  tech¬ 
nical  job  postings  on  his  site 
are  up  more  than  90%  from 
September  2003  to  September 
2004.  With  fewer  computer 
science  graduates  coming  out 
of  colleges,  as  well  as  stricter 
post-9/U  security  restrictions 
on  student  visa  programs  for 
foreign-bom  students,  "it's 
quite  possible  we  could  have  a 
skills  shonage  in  the  coming 
years."  he  said. 

Maria  Schafer,  author  of  the 
Meta  Group  report,  said  sea¬ 
soned  IT  professionals  with 
coveted  database,  networking, 
security,  architoctureand  proj¬ 
ect  management  skills  arc  al¬ 
ready  commanding  10®<»  to  12% 
annual  pay  increases.  The  re¬ 
port  is  based  on  a  survey  of 
650  companies  that  was  com-  J 
pleted  in  late  May. 

“I  hear  from  people  all  the 
time  who  say.  i  don't  know 


how  you  can  be  saying  this 
I’ve  been  looking  for  a  job  for 
19  months.'  and  1  empathize 
with  those  people."  Schafer 

said.  But  as  the  _ 

economy  improves 
and  companies  in¬ 
vest  more  in  IT, 
demand  will  rise, 
she  said. 

Analysts  and  re¬ 
cruiters  said  the 
number  of  domestic  IT  jobs 
being  sent  overseas  is  relative¬ 
ly  small.  And  once  the  stock 
market  improves  and  40](k) 
and  other  retirement  plans 


MOREONUNE 

CIOs  said  last  week  that  they 
expect  to  dole  out  nominal 
rases  over  the  short  lerm 
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start  growing  again,  workers 
in  their  late  50s  who  had  to 
postpone  retirement  over  the 
past  few  years  will  begin  leav¬ 
ing  the  market  in 
droves.  "As  baby 
boomers  retire, 
the  demand  for 
replacements  is 
never-ending,"  said 
Mark  Anderson, 
president  of  Execu- 
Net  Inc.,  an  executive  job 
placement  service  in  Norwalk. 
Conn. 

Even  in  the  currently  stable. 
If  lackluster.  IT  job  market, 


“it's  still  hard  to  find  good, 
skilled  technical  workers," 
noted  Mark  Robinson,  chief 
operating  officer  at  Work- 
forceLogic  Inc.,  a  workforce 
management  sofavare  pro¬ 
vider  in  Sonoma,  Calif.  “As  the 
market  recovers,  the  demand 
will  increase  for  labor." 
050249 


Corporate  Rnancial 
Results  for  Latest  Quarter 

Results  have  improved/or  most  companies,  indicarir^  that  IT  spending  is 
starting  to  show  realgrowth  again  after  a  multiyear  slump. 
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rr  Pay  to  Rise  10%  to  15% 
Through  200Z  Study  Says 


Better  economy, 
demand  for  certain 
skills  \viU  drive 
increase,  Meta  says 


av  THOMAS  HOFFMAN 

An  improving  econ¬ 
omy  and  heightened 
demand  for  technol¬ 
ogy  workers  with 
certain  skills  will  help  drive 
10%  to  15%  salary  increases 
for  seasoned  technologists 
through  2007.  according  to  a 
new  study  unveiled  by  Meta 
Group  bu^  this  montL 
The  predictions  seem  to  fly 
in  the  face  of  conventional 
wisdom  following  more  than 
three  years  of  a  weak  IT  job 
market,  a  rise  in  organiza- 
dons'  use  of  lower-cost  off¬ 
shore  labor  and  marginal  pay 
increases  for  full-time  domes¬ 
tic  IT  workers. 

Still,  recruiters  say  there’s 
plenty  of  evidence  to  support 
the  predictions  for  salary 
gains,  including  a  relatively 
low  unemployment  rate  for 
U.S.  high-tech  workers  and  a 
shortage  of  new  workers  en¬ 
tering  the  market  According 
to  the  U.S.  Bureau  of  Labor 
Statistics,  the  unemployment 
rate  for  computer  and  mathe¬ 
matical  occupations  at  the  end 
of  September  was  33%. 

However,  a  half-dozen  IT 
managers  interviewed  last 
week  said  they  don’t  expect  IT 
sta£fers  to  receive  increases  of 
more  than  3%  to  5%  for  at  least 
the  next  year.  “I  just  don't  see 
a  15%  increase  over  the  next 
two  years;  the  market  doesn’t 
warrant  this."  said  Rick  Peltz. 
CIO  at  Marcus  &  Millichap 
Real  Estate  Investment  Bro¬ 
kerage  Co.  in  Encino,  Galif 
Peltz  is  looking  to  fill  three 


n*  positions  and  has  been 
screening  r6sum^  on  Mon- 
5ter.com  rather  than  advertis¬ 
ing  for  the  posts,  which  in¬ 
clude  an  opening  for  a  busi¬ 
ness  analyst. 

“If  anything,  there's  an 
abundance  of  overqualified 
workers  applying  for  this  po¬ 
sition,"  said  Peltz.  who  antici¬ 
pates  providing  his  IS-person 
staff  with  3%  cost-of-livii^  in¬ 
creases  in  2005  "and  may^  a 
little  bit  more  for  merit." 

Conservative  View 

"I  do  expect  salaries  to  grow 
over  the  next  several  years, 
but  I  expect  the  growth  rates 
to  be  much  more  modest." 
said  Bill  McQuiston.  CIO  at 
Truman  Medical  Centers  Inc. 
in  Kansas  City.  Ma  As  the 
economy  beats  up  and  compa¬ 
nies  begin  to  invest  more 
heavily  in  IT.  he  said,  "we  are 
going  to  see  another  shortage 
of  [technical]  people." 

That  maps  with  the  per- 
speaive  of  several  recruiters. 
Scot  Melland,  president  of 
Dice  Inc.,  a  W^based  IT  job 
board  in  New  Yoric,  said  tech¬ 
nical  job  postings  on  his  site 
are  up  more  than  90%  ffom 
September  2003  to  September 
2004.  With  fewer  computer 
science  graduates  coming  out 
of  colleges,  as  well  as  striaer 
post-WU  security  restrictions 
on  student  visa  programs  for 
fore^-bom  students,  "it's 
quite  possible  we  could  have  a 
skills  shortage  in  the  coining 
years,"  he  said. 

Maria  Schafer,  author  of  the 
Meta  Group  report,  said  sea¬ 
soned  IT  professionals  with 
coveted  database,  networking, 
securit>;  architecture  and  proj¬ 
ect  management  skills  are  al¬ 
ready  commandii^  10%  to  12% 
annual  pay  increases.  The  re¬ 
port  is  based  on  a  survey  of 
650  companies  that  was  com¬ 
pleted  in  late  May. 

"I  bear  from  people  all  the 
time  ud>o  say,  'I  don’t  know 


bow  you  can  be  saying  this  — 
I've  been  looking  for  a  job  for 
19  months,'  and  I  empathize 
with  those  people,"  Schafer 

said.  But  as  the  _ 

economy  improves 
and  companies  in¬ 
vest  more  in  IT. 
demand  will  rise, 
she  said. 

Analysts  and  re¬ 
cruiters  said  the  - 

number  of  domestic  IT  jobs 
being  sent  o\'erseas  is  relative¬ 
ly  small.  And  once  the  stock 
maiket  improves  and  401(k) 
and  other  retirement  plans 


MKIINUIIE 

CIOs  said  last  week  that  they 
expect  to  dole  out  nominal 
raises  over  the  short  lerm; 
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start  growing  again,  woricers 
in  their  late  50s  who  had  to 
postpone  retirement  over  the 
past  few  years  will  begin  leav- 

_  ing  the  market  in 

droves.  "As  baby 
boomers  retire, 
the  demand  for 
replacements  is 
never-ending,"  said 
Mark  Anderson, 
president  of  Execu- 
Net  Inc.,  an  executive  job 
placement  service  in  Norwalk, 
Conn. 

Even  in  the  currently  stable, 
if  bckluster,  IT  job  market, 


'it’s  still  hard  to  find  good, 
skilled  technical  workers," 
noted  Mark  Robinson,  chief 
operating  officer  at  Work- 
forceLi^c  Inc.,  a  workforce 
management  software  pro¬ 
vider  in  Sonoma,  Calif.  "As  the 
maricet  recovers,  the  demand 
will  Increase  for  labor." 
050249 


Corporate  Rnancial 
Results  for  Latest  Quarter 

ResuUshawimpnyti^Jbr  most  companies,  Uvticatmg  that  IT  ^lendingis 
starting  to  show  again  a  multiyear  slump. 
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AMD 


Every  company  demands^* 

more  productivity 
and  flexibility. 

Some  of  them  actually  get 


Five  of  Wall  Street’s  most  prestigious  financial  institutions  knew  exactly  what  they  wanted  from  an  enterprise 
productivity,  to  keep  up  with  an  ever-changing  global  market.  And  real-time  flexibility,  to  go  from 
applications  without  disrupting  their  business.  They  found  both  in  the  AMD  Opteron’”  processor 
UraSa  with  Direct  Connect  Architecture.  It  powers  the  worid's  highest  performing  x86  2-way  and  d-way  servers.  And 
It  helps  speed  up  millions  of  financiai  transactions  every  day  in  trading  sutions  and  server  farms.  At  AMD,  we  believe  it’s 
critical  that  technology  should  migrate  on  your  terms  to  help  you  realize  your  unique  vision.  It’s  one  of  the  reasons  why  HP. 
IBM  and  Sun  offer  enterprise-class  solutions  powered  by  AMD  Opteron  processors.  Would  you  like  to  ieam  just  how  mucti 
of  a  difference  they  can  make  to  your  company!  Go  to  vvww.aind.cain/enterprise 
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Microsoft  Scales  Back  Passport  Plan 

Monster.com's  defection  prompts 
repositioning  of  authentication  service 


BRIEFS 


Cisco  to  Acquire 
Net  Security  Tools 

CiKo  SysMm  Ifie.  ttU  R  plans  to 
buyftr^Inc^aSanFraneisco- 
baaaR  vandor  of  rwtwork  accaas 
coniral  aofhMiB,  for  S74  mMon 
in  eaiOi.  ParRoo's  UnuxHiaaad 
producti  sRI  ba  addad  to  Oaco's 
Nabaortt  AMaaion  Control  Una  of 
toofaforaniorclngeorporatasa- 
curity  polciaa  on  PCs  and  ottior 
natumli  andpoM  davicaa.  Ctaco 
aapacta  lo  compiala  tha  acquisi¬ 
tion  by  tha  and  of  Januiry. 


German  Bank  Signs 
FT  Contract  With  HP 

Hawlatt  Packard  Ca  Slid  R  hoa 
aignod  a  flva-yaar.  S900  mtton 
IT  aidaoureing  oanirael  «fllb 
WaatLB  AO.  ■  b«k  bMad  fei  Oua- 
aaWaH.  Oamiany.  HP  wdi  managa 
\NbotLB*s  glabal  tT  bdrastnidiirt 
and  oatworlta  and  taka  ovar  aoma 
of  Ra  applcalien  daaaippniant 
wark.  daaL  which  la  dua  to 
taho  offoct  on  Jan.  1,  bwhidos  tha 
tranafar  of  450  IT  wortara  fram 
WbatLBlaHP. 


BV  JORIS  EVERS 
SAN  f  RANCISCO 

icRosorr  corp.  is 
recasting  ambi¬ 
tions  for  its  .Net 
Passport  idcntifl- 
cation  system,  saying  the  ser¬ 
vice  wUi  now  be  iimited  to  its 
own  online  offerings  and 
those  of  close  partners. 

Passport  generated  contro¬ 
versy  iWe  years  ago  when 
Microsoft  pitched  it  as  a  user 
authentication  program  for 
online  shopping  sites,  a  notion 
largely  rejected  by  users, 
investigated  by  government 
regulators  because  of  privacy 
concerns  and  snubbed  by 
Web  site  operators  who 
balked  at  letting  Microsoft 
control  access  to  their  sites. 

Last  week,  a  spokeswoman 
said  Microsoft  no  longer  sees 
Passport  as  a  single-sign-on 
system  for  the  Web  at  large. 

Passport's  repositioning 
comes  as  careers  Web  site 
MoA5ter.com  said  it's  dropping  ' 


support  of  the  authentication 
service.  New  York-based  Mon¬ 
ster  Worldwide  Inc.  was  a  ban¬ 
ner  user  of  Passport. 

“Based  on  the  adoption 
rates  of  Passport,  which  repre¬ 
sented  a  low  percentage  of 
Monster  users 
worldwide,  a  de¬ 
cision  was  made 
to  make  the  most 
effective  use  of 
resources  within 
Monster”  and 
end  support  for 
Passport,  said 
Monster  spokes¬ 
man  Kevin 
Mullins. 

Microsoff  had  been  silent 
about  the  technology  over  the 
past  few  years  and  had  essen¬ 
tially  stopped  development 
woric  Indeed,  it  quietly  scaled 
back  several  Passport  compo¬ 
nents,  including  a  directory  of 
sites  that  support  the  service 
and  a  payments  feature. 

Microsoft  has  “learned  a 


lot”  over  the  past  few  years 
and  adjusted  its  ambitions  for 
the  service  accordingly,  said 
Brooke  Richardson,  lead  prod¬ 
uct  manager  for  MSN  at  Mi¬ 
crosoft.  “Going  forward,  the 
mission  of  the  Microsoft  Pas.<i- 
port  service  will  be  (o  provide 
authentication  services  to  Mi¬ 
crosoft  services  and  products 
and  to  Microsoft  partners,”  she 
said  last  week. 

The  Passport 
decision  is  an¬ 
other  signal  that 
Microsoft  is  re¬ 
turning  to  its 
software  roots, 
said  Matt  Ros- 
off.  an  analyst  at 
Directions  on 
Microsoft  Inc  in 
Kirkland.  Wash.  “Microsoft's 
interest  in  hosted  services  has 
decreased  since  2001,"  he  said. 
Microsoft  acquired  the  Pass¬ 
port  technology  in  1998  when 
it  bought  Firefly  Technologies 
and  initially  used  it  as  an  au¬ 
thentication  service  for  Hot¬ 
mail  and  other  services. 

Meanwhile.  Passport  has 
faced  competition  from  the 


Liberty  Alliance,  formed  in 
late  2001  to  create  an  open  au¬ 
thentication  platform.  The 
alliance,  origiiully  sponsored 
by  Sun  Microsystems  Inc.  and 
about  30  other  companies,  has 
continued  to  expand,  and  its 
specifications  are  supported 
in  several  products. 

In  U^t  of  the  fact  that  sup¬ 
port  for  Passport  is  shrinking 
and  Microsoft  signed  an  inter¬ 
operability  pact  with  Sun  in 
April  Microsoft  may  elect  to 
join  the  Liberty  Alliance  or 
support  the  group's  speciflea- 
tions.  Microsoft  and  Sun  have 
said  identity  management  is 
one  of  the  first  areas  in  which 
they  hope  to  work  tegether. 

Last  week,  IBM  announced 
that  it  was  joining  the  Liberty 
Alliance.  Microsoft  has  said 
that  it  might  join  the  group, 
and  IBM's  move  could  put 
pressure  on  it  to  do  so.  said 
Ronald  Schmelzer,  a  senior 
analyst  at  ZapThink  LLC  in 
Waltham.  Mass.  O  S0256 


Robert  MeMiBan  contributed 
to  this  story.  £vers  and  McMillan 
write/or  the  IDG  News  Service. 
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Corporate  Teamwork  on 
Security  Seen  as  Lacking 
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BV  JAMUMAN  VIJAVAM 

A  lack  of  cooperation  among 
IT.  physical  security  opera¬ 
tions  and  financial  risk  man¬ 
ners  is  hindering  efforts  to 
upgrade  corporate  security, 
according  to  a  report  that  was 
released  last  week  by  The 
Conference  Board  Inc. 

The  separate  silos  in  which 
many  businesses  continue  to 
put  those  three  ftmetions  has 
produced  corporate  cultures 
that  encourage  the  hoarding  of 
vital  security  information,  said 
the  report  which  was  based 
on  tmerviews  with  more  than 
200  senior  executives  at  major 
U.S.  companies. 

Businesses  need  to  find  a 
way  to  bridge  the  gap  and  de¬ 
velop  “a  common  frame  of  ref¬ 
erence.”  said  Ibm  Cavana^  a 


corporate  security  specialist  at 
The  Conference  Board,  a  New 
York-based  research  organiza¬ 
tion.  "What  you  need  to  have 
b  a  way  for  everybody  to  be 
on  the  same  page  and  speak¬ 
ing  the  same  language.” 

Cavanagb's  advice  echoes 
comments  made  at  last 
month's  ASIS  International 
2004  conference  in  Dallas, 
where  corporate  managers 
and  analysts  cited  a  growing 
need  to  unify  the  management 
of  IT  and  physical  security 
[QuickLink  49788). 

That  viewpoint  b  “absolute¬ 
ly  ri^t.”  said  Dennb  TVeece. 
director  of  corporate  security 
at  the  Massachusetts  Port  Au¬ 
thority  in  Boston.  ‘Tlntil  the 
various  factions  stop  bickering 
over  tuif  we're  going  to  find 


any  holistic  security  improve¬ 
ments  terribly  difficult  [to 
achieve).”  TVeece  said. 

He  added  that  the  separate 
security-related  functions 
within  companies  “all  have 
different  (mints  of  view,  differ¬ 
ent  cultures,  different  career 
paths,  different  educations  and 
even  different  vocabularies.” 

Seeking  Common  Ground 

Physical  security  profession¬ 
als  who  typically  deal  with 
human  intelligence  issues  and 
technologies  such  as  intruder 
alarm  systems  often  have  lit¬ 
tle  in  common  with  their  IT 
security  counterparts,  said 
Eddie  Schwartz,  chief  tech¬ 
nology  officer  at  Fairfax.  Va.- 
based  consulting  firm  Secure- 
vbion  LLC. 

Similarly,  risk  management 
executives  tend  to  come  from 
financial  backgrounds  and  of¬ 
ten  have  little  technology  sav¬ 
vy,  said  Schwartz. 


The  resulting  communica¬ 
tion  breakdowns  often  lead 
to  gaps  in  security,  said  Lew 
Wagner,  chief  information 
security  officer  at  Clarian 
Health  in  Indianapolis.  He 
added  that  long-estabUsbed 
corporate  hierarchies  and  ter¬ 
ritorial  boundaries  can  make 
it  difficult  to  integrate  the  dif¬ 
ferent  functions. 

“Each  of  these  groups  has 
already  carved  out  their  nich¬ 
es  and  protected  areas  and . . . 
have  to  be  shown  that  thb  b  a 
way  to  enhance  what  they're 
doing.”  Wagner  said. 

Instead  of  breaking  down 
corporate  silos  and  establish¬ 
ing  new  chains  of  command, 
the  empbasb  should  be  on 
building  a  comprehensive  "sit¬ 
uational  awareness”  capability 
that  lets  executives  ftom  the 
different  groups  compare 
high-level  security  informa¬ 
tion  and  look  for  trends, 
Schwartz  said.  O  50263 


Being  vigilant  helps  avoid  surprises, 
in  SANs  as  in  life. 

There  are  probably  things  happening  right  now  on  your  SAN  that  could  lead  to 
appalling  performance  or  a  complete  system  crash. 

You  don't  know  when  it  will  happen. 

You  don't  know  how  it  will  happen. 

But  when  it  does  happen,  you'll  wish  you  were  aware  things  were  building  up  to  give 
you  a  nasty  surprise,  an  expensive  surprise. 

Research  shows  that  SAN  downtime  can  cost  organizations  $100,000  per  minute, 
or  more.  •  Fhisar's  NetWisdom  and  Xgig  solutions  help  you  avoid  these  costs  by 
monitoring  your  SAN  to  stop  degradation,  CRC  errors  and  events  that  impact  your 
most  critical  applications,  business  data  and  transactions. 

Finisar 

View  our  web  seminar,  including  a  customer  case  study  and  demo  of  NetWisdom 
by  visiting  www.finisar.com/plan 

Fnsar  has  been  speedng  up  netwoits  and 

Avoid  nasty  surprises.  Monitor  your  SAN  and  hang  on  to  your  budget. 

delMraig  besFcHveed  products  and  tesOf^ 
saUnnssaicel968  NASOAQ:  FNSf). 

Soufw;  Fabric  ComiMing:  Beyond  the  Data  Ce«er,  R8C  Captai  Bvorts  Oct  2003 
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Australian  IT  Group 
Urges  Quality  Push 

SYOMCV 

HI  Ai'srRAMAN  Computer  StKi- 
ety  (ACS)  lus  called  for  the  wide- 
'tpread  adoption  of  software  Qua)- 
it)'  assurance  meibtKiologics  and  pro¬ 
fessional  standards  to  enhance  Aus¬ 
tralia's  status  as  an  offshoring  destina¬ 
tion  and  reduce  the  risk  that  faulty 
software  will  be  des’oioped. 

Speaking  at  the  Software  Industry 
Action  Group's  conference  in  Mel¬ 
bourne  last  week,  ACS  President  Ed¬ 
ward  Mandla  said  Australia's  federal 
govenuncni  should  push  local  vendors 
to  use  internationally  recognized  stan¬ 
dards  when  devclopit^  and  supplying 
software.  Mandla  also  urged  the  gov¬ 
ernment  to  require  that  employees  of 
IT  vendors  become  members  of  pro¬ 
fessional  a.ssociations  that 
can  ensure  they  an'  suit¬ 
ably  qualified,  subscribe  to 
a  code  of  ethics  and  an 
subject  to  sanctions  for 
breaches  of  professional 
standards. 


"Australia  is  a  world-class  software 
developer,  but  we  face  increasing  ctim- 
pciition  from  offshore."  Mandla  said.  "If 
we  are  to  remain  competitive  and  se¬ 
cure  our  place  in  the  global  market,  we 
must  be  able  to  demon-stratc  our  profes¬ 
sional  standards  and  credentials." 

■  SI06HAN  McBRIOC.  COMPUTERWORLD 
TODAY  (AUSTRALIA) 


Cisco  Offers  IT  Skills 
To  U.K.  Prisoners 

LONDON 

isco  SYSTEMS  INC.  IS  working  with 
the  U.K.  government  on  a  pilot 
program  to  establish  academies 
that  will  teach  IT  skills  to  inmates,  ini¬ 
tially  at  11  prisons,  a  spokesman  for  the 
country's  Home  Office  said  last  week. 
The  Home  Office,  which  <»vcrsccs  ihc 
U.K.'s  justice  and  immigration  system. 

views  the  training  pro¬ 
gram  as  a  way  to  prepare 
prisoners  for  jobs  after 
they  finish  serving  their 
sentences  and  re-enter 
the  community  at  large, 
the  spokesman  said. 


The  program  currently  has  900  stu¬ 
dents.  who  lake  part  in  twice-a-week 
classes  over  six-month  sessions,  the 
spokesman  said.  Cisco  is  the  only  com¬ 
pany  involved  in  the  program  at  this 
point,  he  added.  The  project  is  a  phil¬ 
anthropic  offshoot  of  Cisco’s  Network¬ 
ing  Academy  Program,  said  Cisco 
spokeswoman  Perveen  Akhtar. 

■  LAURA  ROHDE.  ID6  NEWS  SERVICE 


Italians  Not  Fond 
Of  Online  Banking 

CAMBftIDOE.  MASS. 

TAi  Y's  BANKS  are  missing  out  on 
online  opportunities  because  Italian 
consumers  are  far  more  reluctant  to 
use  online  banking  than  other  Euro¬ 
peans  are.  according  to  a  recent  report 
by  Forrester  Research  Inc.  Italian  con¬ 
sumers  have  a  special  fondness  for 
cash  and  don't  see  the  appeal  of  bank¬ 
ing  online,  the  report  said,  adding  that 
Italy's  banks  haven't  produced  com¬ 
pelling  online  services. 

Ftxrcsler  analysts  Elena  Giovannini 
and  Benjamin  Ensor  suggested  that 
banks  might  boost  participation  by  pro¬ 
viding  free  trials  of  online  hanking,  ser¬ 
vice  guarantees,  and  better  prices  and 
interest  rates  for  online  users.  O502t1 


Compiled  by  Mitch  Betts. 
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Of  oupe  Steria  SCA.  an  IT  nrvicn 
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■  PETER  SAVER. 

106  NEWS  SERVICE 
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Global  IT  Challenges 
Mirror  Those  inU.S., 
SAS  Executive  Says 


av  DON  TENNANT 

«.  Aft  VCOA» 

Art  Cooks  ts  president  of  SAS 
fruemufiono/.  the  global  arm 
of  Cary.  W.C-hosed  business 
inrelligenceso/fvwire  vendor 
SAS  Institute  Inc.  At  the  Better- 
Management  Live  conference 
here  last  week.  Cooke  spoke 
with  Computerworld  about 
(begiobabzotion  issues  con- 
frontittg  U.S.  companies  in  gen¬ 
eral  and  SAS  in  parricu/ar. 

Bl  uaars  and  vandors  tall  a  lot 
about  coming  up  rvith  a  "singiE  ver¬ 
sion  of  the  tnith."  For  companies 
vdlh  global  operations,  what  are 
the  obstacles  to  attaining  that  sin- 
gla  verson?  Most  organizations 
are  dropping  back  to  database 
and  ERP  technology,  which  is 
giving  them  some  problems. 


And  those  organizations  aren't 
flexible  enough  to  be  able  to 
pick  out  the  data  from  all  these 
i>perations  worldwide  and 
bring  it  together  into  a  (data) 
warehouse.  A  lot  of  or¬ 
ganizations  don't  think 
it's  possible  and  wUl  try 
to  rationalize  the  opera¬ 
tional  systems  under¬ 
neath.  rather  than 
putting  something  like 
SAS  on  top  of  it  to  bring 
all  that  data  together 
very  quickly. 

Many  CIOs  have  been  bitten 
so  badly  by  these  huge  ERP 
implementations  that  they  al¬ 
most  don't  want  to  touch  it 
and  alnu)Si  don't  want  to  ac¬ 
knowledge  that  there's  an  is¬ 
sue  there  because  it's  far  too 
dangerous  politically.  One  of 


the  things  M'c'rc  seeing  in  Eu¬ 
rope  n<»w  is  pci>ple  are  start¬ 
ing  to  lose  their  jobs  because 
of  failed  ERP  implcmentation.s 
—  they  continue  to  shovel 
money  down  that  huge  hole. 

Wc'vc  got  something  out 
there  fn»m  SAS  that  can  actual¬ 
ly  do  I  ERP  consolidation}  — 
it’s  possible.  But  one  of  (he  is¬ 
sues  we  have  with  IT  is  that 
because  they've  been  bitten 
so  badly  before,  people  arc 
shy  about  looking  at 
these  i.ssue.s  with  an 
open  mind. 

What  do  U.S.  companies 
that  need  to  expand  their 
FT  operations  to  locations 
overseas  tend  to  over¬ 
look?  They  lend  to 
make  the  same  mis¬ 
takes  they  make  in  the  Stales. 
When  they  pul  new  infra¬ 
structure  in.  they  probably  put 
parallel  infrastructure  in 
rather  than  looking  for  a  more 
clever  way  of  doing  it.  It  may 
be  possible  to  install  much 
more  efficient  systems.  And 


"go  for  g(H>d  local  employees" 
would  be  the  other  general  ad¬ 
vice  !  would  have. 

¥fhat  IT  capabffities  do  you  think 
tend  to  be  stronger  outside  the  UiL 
than  inside  the  U.S.?  All  these 
markets  arc  pretty  similar.  fP  is 
^'ncrally  struggling  with  the 
same  issues,  whether  you're  in 
Hong  Kong  or  China  or  Aus¬ 
tralia  or  Russia. 

Hmv  much  software  developmertt 
does  SAS  do  outside  of  the  U.S., 
and  is  any  of  the  oKshore  work  out¬ 
sourced?  We  don't  outsource 
anything  —  ail  the  develop¬ 
ment  work  is  done  in-house. 
ITic  vast  majorit)'  of  the  work 
is  done  in  Cary.  We  have  local- 
language  adaptation  centers  in 
japan  and  Beijing.  We  have  100 
people  in  India  who  are  doing 
a  combination  of  vertical- 
industry  work  and  specific 
testing  of  particular  imxlules 
of  the  core  technology. 

How  have  political  issues,  q)eci(- 
ically  the  war  in  Iraq,  affected 


your  global  business?  Wc 
missed  a  quarter  last  year  — 
Europe  just  stopped  for  a 
quarter.  There  was  a  lot  of  un¬ 
certainty  about  what  was 
going  to  happen,  so  a  lot  of 
decision-making  just  ground 
to  a  halt.  It’s  been  picking  up. 
but  there  was  a  definite  [cut¬ 
back  1  in  Europe.  Less  so  in 
Asia,  but  also  in  Asia  it  wa.s 
noticeable. 

What  does  SAS  do  well  from  a 
globalization  perspechve,  and 
vdtal  does  it  need  to  do  better? 

Any  company  that  works  at 
a  global  level  needs  to  be 
looking  for  best  practice-^ 
wherever  you  find  them,  and 
that's  an  ongoing  search. 
Never  believe  that  you  own 
the  truth  —  always  look  for  it 
wherever  you  might  find  It  in 
your  organization.  Thai’s  part 
of  this  theory  of  bringing  what 
we're  doing  out  in  the  field 
back  centrally  so  wc  can  send 
it  out  again.  Thai's  the  thing 
we’re  continuously  trying  to 
improve.  O  50224 
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AustnEan  IT  Group 
Urges  QuuMy  Push 


The  AUSTRALIAN  Computer  Soci¬ 
ety  (ACS)  has  called  for  the  wide¬ 
spread  adoption  of  software  qual¬ 
ity  assurazK%  methodologies  and  pro- 
fc^ional  standards  to  enhance  Aus¬ 
tralia's  status  as  an  offshorir^  destina¬ 
tion  and  reduce  the  risk  that  feulty 
software  will  be  developed. 

Speaking  at  the  Software  Industry 
Action  Group’s  conference  in  Mel¬ 
bourne  last  week.  ACS  President  Ed¬ 
ward  Mandla  said  Australia’s  federal 
government  should  push  local  vendors 
to  use  intematiooally  recognized  stan¬ 
dards  when  developing  and  supplying 
software.  Mandla  also  urged  the  gov¬ 
ernment  to  require  that  employees  of 
IT  vendors  bemme  members  of  pro¬ 
fessional  associations  that 
can  ensure  they  are  suit¬ 
ably  qualifted.  subscribe  to 
a  code  of  ethics  and  are 
subject  to  sanctions  for 
breaches  of  professional 
standards. 


’’Australia  is  a  world-class  software 
developer,  but  we  &ce  increasing  com¬ 
petition  from  ofishore,”  Mandla  said.  “If 
we  are  to  remain  competitive  and  se¬ 
cure  our  place  in  the  ^obal  market,  we 
must  be  able  to  demonstrate  our  profes¬ 
sional  standards  and  credentials." 

■  S106HAN  MCBRIDE.  COMPUTERWORIO 
TODAY  (AUSTRAUA) 


CisGO  Offers  IT  Skills 
To  U.K.  Prisoiters 

LONDON 

ISCO  SYSTEMS  tNC.  ts  woHung  with 
the  UJC  govenunent  on  a  pilot 
program  to  establish  academies 
that  will  teach  IT  skills  to  inmates,  ini¬ 
tially  at  U  prisons,  a  spokesman  for  the 
country’s  Home  Ofti^  said  last  week. 
The  Home  Oftice,  which  oversees  the 
UJC’s  justice  and  immigratioD  system. 

views  the  training  pro¬ 
gram  as  a  way  to  prepare 
prisoners  for  jobs  after 
they  finish  serving  their 
sentences  and  re-enter 
the  community  at  large, 
the  spokesman  said. 


The  program  currently  has  900  stu¬ 
dents,  who  take  part  in  twice-a-week 
classes  over  six-month  sessions,  the 
spokesman  said.  Cisco  is  the  only  com¬ 
pany  involved  in  the  program  at  this 
point,  he  added.  The  project  is  a  phil¬ 
anthropic  offshoot  of  Cisco’s  Network¬ 
ing  Academy  Program,  said  Cisco 
spokeswoman  Perveen  Akhtar. 

■  LAURA  ROHDE.  ID6  NEWS  SERVICE 


Hallam  Not  Fond 
Of  Online  Banking 

CAMBNIOOE,  MASS. 

TALY's  BANKS  are  missing  out  on 
online  opportunities  because  Italian 
constuners  are  far  more  reluctant  to 
use  online  banking  than  other  Euro¬ 
peans  are,  according  to  a  recent  report 
by  Forrester  Research  Inc.  Italian  con¬ 
sumers  have  a  special  fondness  for 
cash  and  don’t  see  the  appeal  of  bank¬ 
ing  online,  the  report  said,  adding  that 
Italy’s  banks  haven’t  produced  com¬ 
pelling  online  services. 

Forrester  analysts  Elena  Giovannini 
and  Benjamin  Ensor  suggested  that 
banks  might  boost  participation  by  pro¬ 
viding  free  triab  of  online  banking,  ser¬ 
vice  guarantees,  and  better  prices  and 
interest  rates  for  online  users.  050211 


Compiled  by  Mitch  Betts. 
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Global  IT  Challenges 
Mirror  Those  inU.S., 
SAS  Executive  Says 


SV  DON  TENNANT 

IAS  VEOAS 

Aft  Cseki  ts  president  of  SAS 
fntemarioftal.  the  global  arm 
of  Cary.  NIC-based  business 
intelligence  software  vendor 
SAS  Institute  Inc.  At  the  Befter- 
Managerrmit  Live  cof^erence 
here  last  week,  Cooke  ^oke 
with  Computerworld  about 
the  ^obaBxation  issues  con- 
fmnting  US.  companies  in  gen¬ 
eral  and  SAS  in  particular. 

Bl  HWE  and  MsOn  taft  a  W 
OenI  can*!  9  «Mi  a sir 
rios  of  tti  Mb.*  For  eosipaBiM 
^dW  opar^tasi,  «IhI  m 
Via  staMntoattMaB  flat  itn- 
^vaniBH?  Most  organtzatfons 
are  dropping  bade  to  database 
and  ERP  technology,  which  is 
giving  them  some  problems. 


And  those  organizations  aren't 
flexibte  enot^  to  be  able  to 
pkk  out  the  data  from  all  these 
operations  worldwide  and 
bring  it  together  into  a  (data] 
warehouse.  A  lot  of  or- 
ganizadoos  don’t  think 
it’s  possible  and  will  try 
to  rationalize  the  opera¬ 
tional  systems  undtf- 
neath,  rather  than 
putting  something  like 
SAS  on  top  of  it  to  bring 
all  that  data  together 
verycpudtly. 

Many  CIOs  have  been  bitten 
so  badly  by  these  bi^  ERP 
implementations  that  they  al¬ 
most  don’t  want  to  touch  it 
and  almost  don’t  want  to  ac¬ 
knowledge  that  there’s  an  is¬ 
sue  there  because  it’s  far  too 
dangerous  poittkally.  One  of 


the  things  we're  seeii^  in  Eu¬ 
rope  now  is  people  are  start¬ 
ing  to  lose  their  jobs  because 
of  failed  ERP  implementations 
—  they  continue  to  shovel 
money  down  that  huge  bole. 

We’ve  got  something  out 
there  from  SAS  that  can  actual¬ 
ly  do  (ERP  consolidation]  — 
it's  possible.  But  one  of  the  is¬ 
sues  we  have  with  IT  is  that 
because  tbey^re  been  bitten 
so  badly  before,  people  are 
shy  about  lodung  at 
these  issues  with  an 
open  mind. 

Whait  do  U.S.  oompanias 
IM  DMd  to  tqnnd  Mr 
IT  opsratkm  to  iBcattom 
svsrMSs  tond  to  ovET’ 
toEk?  They  tend  to 
make  the  same  mis¬ 
takes  they  make  in  the  States. 
When  they  put  new  infra¬ 
structure  in.  they  probably  put 
parallel  infrastructure  in 
rather  than  lotridng  for  a  more 
clever  way  of  doing  it  It  may 
be  possible  to  install  much 
more  efficient  systems.  And 


“go  for  good  local  employees" 
would  be  the  other  general  ad¬ 
vice  I  would  have. 

WM  IT  ovMias  dD  you  Mr* 
tond  to  be  Mrangv  oulM  llw  US. 
thm  InMM  the  US.?  AU  these 
markets  are  pretty  similar.  IT  is 
generally  struggling  with  the 
same  issues,  whether  you’re  in 
Hong  Kong  or  China  or  Aus¬ 
tralia  or  Russia. 

Hew  much  lelhiiMB  dgvalopnwnt 
doEB  SAS  da  EuWdB  of  iiE  US,, 
and  it  any  of  toe  olWiorE  work  ooh 

aeirad?  We  don’t  outsource 
anything  —  all  the  develop¬ 
ment  worit  is  done  in-hor^. 
The  vast  majority  of  the  work 
is  done  in  Cary.  We  have  local- 
language  adaptation  centers  in 
Japan  and  Beijing.  We  have  100 
people  in  India  who  are  doing 
a  combination  of  vertkal- 
mdustry  work  and  specific 
testing  particular  modules 
of  the  core  technology. 

How  ham  poMeal  tauas.  spEci^ 
toaHy  tha  war  in  Iraq,  aftostod 


your  global  buslnaaa?  We 

missed  a  quarter  last  year  — 
Europe  just  stopped  for  a 
quarter.  There  was  a  lot  of  un¬ 
certainty  about  what  was 
going  to  happen,  so  a  lot  of 
decisioD-maidng  just  ground 
to  a  halt.  It's  been  picking  up. 
but  there  was  a  dehnite  (cut¬ 
back]  in  Europe.  Less  so  in 
Asia,  but  also  in  Asia  it  was 
noticeable. 

What  dasE  SAS  do  wal  from  a 
gtobafaaHon  parapacMo.  and 
whsl  dots  N  nsad  to  do  bottor? 

Any  company  that  worics  at 
a  global  level  needs  to  be 
looking  for  best  practices 
wherever  you  find  them,  and 
that’s  an  ongoing  search. 
Never  believe  that  you  own 
the  truth  —  always  look  for  h 
wherever  you  m^t  fmd  it  in 
your  organizatioiL  That’s  part 
of  this  theory  of  bringing  what 
we're  doii^  out  in  the  field 
back  centrally  so  we  can  send 
it  out  again.  That’s  the  thing 
we’re  continuously  trying  to 
improve.  060224 
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ROBUST  OBJECTS 
UD  ROBUST  SOI 
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EYE-OPENER  FOR 
ORACIE  USERS 


Before  developing  your  next  generation  of 
applications,  switch  from  Oracle*  to  the  next 
generation  of  database  technology. 

Cache  is  the  post-relational  database  that 
combines  high-performance  SQL  for  frster 
queries  and  an  advanced  object  database  for 
rapidly  storing  and  accessing  objects.  With 
Cache,  no  maf^ing  is  required  between  object 
and  relational  views  of  data.  That  means  huge 
savings  in  both  development  and  processing  time. 

Applications  built  on  Cache  are  massively 
sc^abie  and  lightning-fast.  Plus,  they  require 
minimal  or  no  database  administration. 

More  than  just  a  database  system.  Cache 
incorporates  a  powerful  Web  application 


development  environment  that  dramatically 
reduces  the  time  to  build  and  modify  applications. 

The  reliability  of  Cache  is  proven  every  day  in 
“lifc-or-death”  applications  at  thousands  of  the 
world’s  largest  hospitals.  Cache  is  so  reliable,  it’s 
the  leading  databa^  in  healthcare  -  and  it  powers 
enterprise  applications  in  financial  services,  govern¬ 
ment  and  many  other  sectors. 

We  are  InteiSystems,  a  ^>ccialist  in  dau 
management  technology  for  over  twenty-six  years. 
We  provide  24x7  support  to  four  million  users  in 
88  countries.  Cache  is  available  for  Windows, 
Open  VMS,  Linux  and  major  UNIX  platforms  - 
and  it  is  deployed  on  systems  ranging  fit>m  two 
to  over  10,000  simultaneous  users. 


InterSystems  > 

CACHE 


Make  Applications  Faster 


Tty  a  iwttH  MUnsa.  Ftr  fm. 

Download  a  free,  fiilly-functional,  non-expiring  vei^  of  CacW  or  request  it  on  CD  at  www.l 
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iSeries _ 

•U  Perishable  l>istribuiors  of 
Iowa  Ltd.,  listened  to  assur¬ 
ances  from  IBM  that  it's  eom- 
mirted  to  the  line,  he  pointed 
«»oi  that  they  referred  to  it  as 
both  the  iSeries  and  the 
AS  400.  “If  the>'  can't  identify 
the  priHiuct.  how  can  they  fo- 
c-us  on  it?"  Swinchan  Miii 
IBM's  markciing  of  the 
iSeries  is  an  issue  of  great  im¬ 
portance  to  u-sers.  many  of 
whom  have  invested  a  large 
part  of  their  careers  in  the 
k»-year-old  technology.  Some 
said  they  worry  that  the 
iSeries  line,  which  now  ruas 
.AIX  and  Linux  in  addition  to 
iLs  fiag-ship  i5''OS  operating 
system,  is  gradually  K’ing 
blended  into  other  prtnluct  of¬ 
ferings,  particularly  IBM's 
pSerte.s  family  of  Unix  servers. 

Trevor  McCullough,  an  in¬ 
formation  systems  project 
leader  at  Saint  Laurent.  Que- 
bec-b.-tscd  fiM»twear  maker 


I  UcnUHH  Inc..  m»tcd  that  the 
I  iSeries  isn't  seen  a.s  having 
I  wide-ranging  capabilities  by 
nonusers.  Lor  example,  not 
everyone  Is  aware  that  it  can 
run  Linu.x.  lava  and  IBM's 
WebSphere  software,  he  said. 

I  “It  can  Jo  so  much,  and  it's 
I  still  regarded  as  an  older  plai- 
j  form.*'  McCullough  said.  He 
i  warned  that  if  the  LScries  is 
'  widely  perceived  as  a  legacy 
system,  it  may  become  just 
I  that. 

Restoring  iSeries' Luster 

I  Mike  Borman,  who  three 
months  ago  was  appointed 
general  man.agcr  of  the  iSeries 
division  within  IBM's  eServer 
group,  acknowledged  that 
I  more  has  to  be  dtme  to  expand 
I  the  midrange  line's  user  base 
I  beyond  the  200,000-plus  i-as- 
I  lomcrs  that  have  bought  the 
systems.  “I  think  vve  have  l»)st 
a  little  luster  on  our  star  here, 
and  we  need  to  improve  that." 
he  said.  "We  have  to  gel  our 
image  back  to  where  it  says 
I  that  [the  iSeries)  is  one  of  the 


llevwiiiBHil 


rSen»<mairilramc) 
pSenes  (Um*/Linux)  ' 
*Sefies(m*drdnge) 

*Se/»«  (InlH-bascd) 


lop  two  or  three  franchises  in 
the  industry." 

Borman  said  he  wants  to 
convince  independent  s<ifi- 
ware  vendors  to  help  raise  the 
visibility  of  the  iSeries  line  by- 
making  it  an  integral  part  of 
their  product  mixes,  as  they 
did  in  the  late  l‘>80s  and  the 
1990s.  bef(»re  Windows-based 
servers  and  other  newer  sys¬ 
tems  began  attracting  atten¬ 
tion.  IBM  plans  to  undertake 
that  effort  in  phases,  fevusing 
first  on  the  top  .MK)  vendors 


and  then  expanding  that  num¬ 
ber  by  another  2.700. 

Although  Bi^rman  said  he 
thinks  that  IBM  has  a  strong 
iSeries  technical  support  staff 
and  an  able  group  of  business 
partners,  he  also  wants  sup¬ 
port  to  improve. 

“We  have  a  set  of  business 
partners  that  arc  really  g<x>d. 
and  w  e  have  a  set  of  busines.s 
partners  that  we  need  to  im¬ 
prove  their  skills,*’  Borman 
said.  IBM  also  has  to  ensure 
that  its  engineers  who  work 
with  customers  have  up-to- 
date  skills,  he  said,  citing  feed¬ 
back  from  two  large  users  who 
said  that  isn't  always  the  case. 


Simplifies  user 
interface,  adds 
more  automation 

8V  MATT  HAMBLEN 

Hewlett-Packard  Co.  bsi  week 
announced  an  upgrade  of  the 
configuration  management 
software  it  acquired  in  an 
April  acquisition  of  Novadigm 
Inc,,  saying  i(‘s  adding  a  sim¬ 
plified  user  interface  and  ca¬ 
pabilities  for  automating  hard¬ 
ware  setting  updates. 

The  new  release  t>f  No- 
vadigm’s  Radia  product  is  be¬ 
ing  renamed  HP  OpenView 
Change  and  Configuration 
Management  and  is  available 
now.  The  software  can  be  used 
to  automate  repetitive  systems 
management  ta.sk.s.  such  as 
configunition  changes  made 
to  PCs  and  servers,  on  a  regu¬ 
lar  schedule,  according  to  HI”. 

The  company  said  it  has 
also  simplified  a  ctmfiguration 
analysis  Uh)I  for  identifying 
potential  conflicts  in  proposed 
I”C  configurations.  In  addi¬ 
tion.  more  information  is 
available  on  the  inventory  of 
services  .and  applications  run¬ 
ning  on  Windows.  Unix  and 
Linux  serv'ers.  HP  said. 

KeyCorp,  a  Cleveland-based 
bank  with  S88  billion  in  assets, 
has  used  Novadigm's  ttmls  for 
the  past  four  years  and  wel- 
c\>mcs  the  enhancements  of- 


William  Machinist,  director 
of  IT  at  Borg-Wamer  Morse 
TFC  Inc.,  an  automotive  parts 
supplier  in  Ithaca.  N.Y..  de¬ 
scribed  Che  iSeries  as  “rock 
solid."  Machinist  said  ho  isn't 
worried  about  its  future,  but 
he  and  some  other  users  said 
IBM  needs  to  work  closely 
with  schools  to  ensure  that 
students  get  training  on  the 
iSeries  architecture. 

Machinist  said  he  heard  "a 
real  sense  of  commitment" 
from  Ek)rman  at  the  Common 
conference.  “He  knows  what 
he  needs  to  do,  and  he’s  go¬ 
ing  to  do  it."  Machinist  said. 

O  50261 


fered  by  HI”,  said  Scott  Don- 
aldst)n.  vice  president  of  soft¬ 
ware  distribution  and  work¬ 
space  automation.  However. 
Iu‘  added.  KeyCorp  “di>esn’t 
have  a  lot  of  appetite**  for  the 
newest  version,  having  in¬ 
stalled  the  previous  release. 
Radia  3.1,  within  the  past 
month. 

Big  Learning  Curve 

Donaldson  described  the  Ra¬ 
dia  product  as  “a  complex 
tool"  that  has  a  big  learning 
curve  for  systems  administra¬ 
tors  but  is  well  worth  the  ef¬ 
fort.  KeyCorp  has  seen  a  big 
improvement  in  the  time  it 
takes  to  n>ll  out  application.s 
to  end  users  thanks  to  Radia. 
he  said. 

After  investing  about  SI  mil- 
Iit>n  in  the  software,  the  bank 
estimates  that  it  has  reduced 
the  total  cost  of  ownership  on 
its  2.3.000  PCs  by  S4  million 
per  year.  According  to  Don¬ 
aldson.  it  now  takes  only  two 
IT  staffers  to  handle  change 
and  configuration  manage- 
mcni  chores  on  all  the  PCs. 

Donaldson  said  he's  pleased 
with  HP's  acquisition  of  Nova¬ 
digm  and  its  plan  to  leave  the 
Radia  technology  intact.  He 
als4>  applauded  HP's  new  sup¬ 
port  for  Linux  systems.  “I'm 
gbd  they  aren't  pigeonholed 
on  Micixwoft,"  he  said. 

0  50233 


IBM  Makes  Effort  to  Improve  System  Availability 


IBM  has  launched  an  miliative 
focused  on  enstimg  lhai  the 
tSenes  and  its  other  server  lines 
are  highly  available,  an  area  of 
noeasing  mteres  among  users 
who  can1  afford  system  down¬ 
time  because  of  round-the-clock 
global  supply  chain  demands. 

John  Reed,  the  IBM  execubve 
who  was  picked  four  weeks  ago 
to  lead  0)6  development  ol  the 
company's  High  Availability  Oe- 
snjn  Center,  pre^iousty  worked 
for  the  iSenes  division  as  prod¬ 
uct  and  business  operations 
martager. 

In  many  cas^  our  clients 
may  be  trying  to  do  high  avail- 
^ity  but  don't  have  aH  the 
pieces  put  together  to  make  it  a 
truly  resihent  set  of  infrastruc¬ 
tures."  Reed  said  at  last  week's 
Common  user  group  confer¬ 
ence.  He  added  that  the  center 
could  lead  to  new  products,  ser¬ 
vices  and  busmss  partnerships 

IBM  s  only  a  few  weeks  into 
developinQ  the  center  and  hasn't 
settled  on  a  location  yet.  al¬ 


though  Reed  said  it  may  be  lo¬ 
cated  at  a  facility  n  Poughkeep¬ 
sie.  N.y.  The  company  plans  to 
begin  working  with  users  at  the 
center  this  quarter. 

of  the  plan  involves  as¬ 
sembling  best-practices  guid¬ 
ance  wi  tools,  according  to 
Reed.  IBM  will  conduct  system 
assessments,  and  help  use^  de¬ 
fine  and  develop  high-availabilrty 
architectures  and  run  application 
benchmarks,  he  said. 

IBM’s  increased  interest  in 
high  availability  raised  conc&ns 
about  pnong  and  other  issues 
among  some  iSenes  users. 

Gerald  Lake,  a  programmer/ 
analyst  at  Sovereign  Specialty 
Chemicals  tnc.'s  Buffalo  opera¬ 
tions.  said  increasing  demands 
from  outside  auditors  for  IT  re¬ 
dundancy  prompted  his  compa¬ 
ny  to  improve  system  availabilitv 
As  part  ot  a  server  consolidaiion 
protect.  Sovereign  converted  an 
iSe^  machine  located  al  a  dif¬ 
ferent  tacilily  than  the  one  that 
houses  Its  primary  server  into  a 
backup  sysiam.  Lake  said. 


But  Late  eyed  IBM’s  plan 
warily.  The  way  IBM  lAarges  so 
heavily  for  everything.  I  think  a 
lot  of  people  are  going  to  contin¬ 
ue  to  do  everything  on  their 
own."  he  said 

Pam  Mathiesen,  a  computer 
operator  al  Great  Pbms  Com¬ 
munications  Inc.  m  Neb., 
said  the  telecommunications 
service  provider  has  been  using 
a  third-party  product  to  ensure 
high  availability  of  its  data, 
added  that  she  hopes  IBM 
moves  in  the  direction  of  part¬ 
nerships  vnth  other  vendors  so  it 
doesn't  undercut  the  position  of 
third-party  suppliers. 

Sporting  goods  mater 
Adidas-Salomon  Canada  Ltd.  in 
Toronto  has  been  able  to  count 
on  the  functionality  built  into  the 
iSeries  to  maintain  its  opera¬ 
tions.  said  Paul  Leone,  vice  pres¬ 
ident  of  supply  chain  and  IT  lo- 
gistics  Ekit.  lione  noted.  Adidas 
will  have  to  address  high  avail¬ 
ability.  especialty  as  more  of  its 
orders  arrive  via  the  Web. 

•  Thibodeau 


HP  Upgrades  Novadigm’s 
System  Configuration  Tools 
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iSeries _ 

at  Perishable  Distributors  of 
Iowa  Ltd.  listened  to  assur¬ 
ances  firom  IBM  that  it's  com¬ 
mitted  to  the  line,  he  pointed 
out  that  they  referred  to  it  as 
both  the  iSeries  and  the 
AS/400.  “If  they  can't  identify 
the  product  bow  can  they  fo¬ 
cus  on  it?“  Swinehart  said 
IBM's  marketing  of  the 
iSeries  is  an  issue  of  great  im¬ 
portance  to  users,  many  of 
whom  have  invested  a  large 
part  of  their  careers  in  the 
16-year-oId  tedmology.  Some 
said  they  worry  that  the 
iSeries  line,  which  now  runs 
ADC  artd  Linux  in  addition  to 
its  flagship  iS/OS  operating 
system,  is  gradually  being 
blended  into  other  product  of¬ 
ferings.  particularly  IBM’s 
pSeries  femily  of  Unix  servers. 

Trevor  McCullough,  an  in- 
tormation  systems  project 
leader  at  Saint  Laurent,  Que¬ 
bec-based  footwear  maker 


Genfoot  Inc.,  noted  that  the 
iSeries  isn't  seen  as  having 
wide-ranging  capabilities  by 
nonusers.  For  example,  not 
everyone  is  aware  that  it  can 
run  Linux,  lava  and  IBM's 
WebSphere  software,  be  said. 

“It  can  do  so  much,  and  it's 
still  regarded  as  an  older  plat¬ 
form."  McCullough  said.  He 
warned  that  if  the  iSeries  is 
widely  perceived  as  a  legacy 
system,  it  may  become  just 
that. 

Restoring  Series’ Luster 

Mike  Borman,  who  three 
months  ago  was  appointed 
general  maiuger  of  the  iSeries 
drvision  within  IBM's  eServer 
group,  acknowledged  that 
more  has  to  be  done  to  expand 
the  midrange  line's  user  base 
beyond  the  200.000-plus  cus¬ 
tomers  that  have  bought  the 
systems.  “I  think  we  have  lost 
a  little  luster  on  our  star  here, 
and  we  need  to  improve  that.“ 
he  said.  “We  have  to  get  our 
image  back  to  where  it  says 
that  [the  iSeriesI  is  one  of  the 


Revenue  Hit 


top  two  or  three  franchises  in 
the  industry." 

Borman  said  he  wants  to 
convince  independent  soft¬ 
ware  vendors  to  help  raise  the 
visibility  of  the  iSeries  line  by 
tnaldog  it  an  integral  part  of 
their  product  mixes,  as  they 
did  in  the  late  1980s  and  the 
1990s,  before  Windows-based 
servers  and  other  newer  sys¬ 
tems  began  attracting  atten¬ 
tion.  IBM  plans  to  undertake 
that  effort  in  phases,  focusing 
first  on  the  top  300  vendors 


and  then  expanding  that  num¬ 
ber  by  another  2.700. 

Although  Borman  said  he 
thinks  that  IBM  has  a  strong 
iSeries  technical  support  staff 
and  an  able  group  of  business 
partners,  he  also  wants  sup¬ 
port  to  improve. 

“We  have  a  set  of  business 
partners  that  are  really  good, 
and  we  have  a  set  of  business 
partners  that  we  need  to  im¬ 
prove  their  skills,"  Borman 
said.  IBM  also  has  to  ensure 
that  its  engineers  who  work 
with  customers  have  up-to- 
date  skills,  he  said,  citing  feed¬ 
back  from  two  large  users  who 
said  that  isn't  always  the  case. 


I  Simplifies  user 
interfece,  adds 
more  automation 

BV  MATT  HAMBLEN 

Hewlett-Packard  Co.  last  week 
announced  an  upgrade  of  the 
configuration  management 
software  it  acquired  in  an 
April  acquisition  of  Novadigm 
Inc,  saying  it's  adding  a  sim¬ 
plified  user  interim  and  ca¬ 
pabilities  for  automating  hard¬ 
ware  setting  updates. 

The  new  release  of  No* 
vadigm's  Radia  product  is  be¬ 
ing  renamed  HP  Open  View 
Change  and  Configuration 
Management  and  is  available 
now.  The  software  can  be  used 
to  automate  repetitive  systems 
management  tasks,  such  as 
configuration  changes  made 
lo  PCs  and  servers,  on  a  regu¬ 
lar  schedule  according  to  HP. 

The  company  said  it  has 
also  simplified  a  configuration 
analysis  tool  for  identifying 
potential  conflicts  in  proposed 
PC  configurations.  In  addi¬ 
tion.  more  information  is 
available  on  the  inventory  of 
services  and  applications  run- 
nii^  on  Windows.  Unix  and 
Linux  servers.  HP  said. 

KeyCorp,  a  Cleveland-based 
bank  with  S88  billion  in  assets, 
has  used  Nevada's  tools  for 
the  past  four  years  and  wel¬ 
comes  the  enhancements  of- 


William  Machinist,  director 
of  IT  at  Borg-Wamer  Morse 
TEC  Inc.,  an  automotive  parts 
supplier  in  Ithaca.  N.Y.,  de¬ 
scribed  the  iSeries  as  “rock 
soiid.“  Machinist  said  he  isn't 
worried  about  its  future,  but 
be  and  some  other  users  said 
IBM  needs  to  woric  closely 
with  schools  to  ensure  that 
students  get  training  on  the 
iSeries  architecture. 

Machinist  said  he  heard  “a 
real  sense  of  commitment“ 
from  Borman  at  the  Common 
conference.  “He  knows  what 
he  needs  to  do.  and  he’s  go¬ 
ing  to  do  it."  Machinisi  said. 
050261 


I  fered  by  HP.  said  Scott  Don- 
'  aldson,  vice  president  of  soft- 
^  ware  distribution  and  work¬ 
space  automation.  However, 
he  added,  KeyCorp  “doesn't 
have  a  lot  of  appetite”  for  the 
newest  version,  having  in¬ 
stalled  the  previous  release. 
Radia  3.L  within  the  past 
month. 

Big  Lsaming  Curve 

Donaldson  described  the  Ra¬ 
dia  product  as  “a  complex 
tool”  that  has  a  big  learning 
curve  for  systems  administra¬ 
tors  but  is  well  worth  the  ef¬ 
fort.  KeyCorp  has  seen  a  big 
improvement  in  tbe  time  it 
takes  to  roll  out  applications 
to  end  users  thanks  to  Radia. 
he  said. 

After  investing  about  SI  mil¬ 
lion  in  the  software,  the  bank 
estimates  that  it  has  reduced 
the  total  cost  of  ownership  on 
Its  23,000  PCs  by  $4  million 
per  year.  According  to  Don¬ 
aldson,  it  now  takes  only  two 
n*  staffers  to  handle  change 
and  configuration  manage¬ 
ment  chores  on  all  tbe  PCs. 

Donald.son  said  he's  pleased 
with  HP's  acquisition  of  Nova¬ 
digm  and  its  plan  to  leave  tbe 
Radia  technology  intact.  He 
also  applauded  HP's  new  sup¬ 
port  for  Linux  systems.  “I’m 
glad  they  aren’t  pigcoiUioled 
on  Microsoft,”  he  said. 
050233 


IBM  Makes  Effort  to  improve  System  Availabffity 


■H  has  launched  an  MMhe 
focuaad  on  arasing  that  the 
fiartas  and  ia  otoaraarvir  IneB 
am  MgNy  MlaUe.  an  ane  of 
inenatino  Merest  arnong  users 
mM)  can't  afford  ayrtem  down¬ 
time  becauee  of  founiHhe-dock 
Btabal  supply  chain  demands. 

John  flaeil  Ihe  6M  aacutive 
who  wee  pichad  founwals  ago 
to  lead  tie  davafopmenl  of  the 
company's  ^  miaffebify  De- 
sign  CarMr.  pravtousfy  worked 
for  the  6ahe5  Mon  as  prod¬ 
uct  and  buEtoeas  operaliorB 


In  nwny  cases,  oir  denis 
meybebytogtodohighawl- 
abihf  bul  don't  hM  al  the 
pieco  pul  together  to  male  a  a 
tntyresientsetoflnfiastnjc- 
turns.*  Reed  said  rt  last  week's 
Commonusergroupoonfer- 
enoe.  Ha  added  thto  the  center 
ooitd  lead  to  new  products,  ser- 
^cas  and  business  pwtnerehips. 

Bli  Is  onto  a  tow  weetos  Mo 
dmatoptoQ  toe  cantor  and  hasn't 
setfled  on  a  tocaffon  yet  aF 


toouohReedsaidNmBybeto- 
cased  at  a  fedRy  In  Poughkeep¬ 
sie.  HY.  The  company  ptafiB  to 
begto  working  wtft  users  at  the 
cantor  tots  quarter. 

Pwtoftoeplaninvotoesas- 
samfalngbesiuracticasguid' 
anoe  and  tools.  aocanJng  to 
Read  BM  mA  conduct  syilam 
assaasmenis.  and  help  users  de- 
line  and  davetop  high-aMfabllty 
archHeduras  aid  run  appication 
benchmarks,  he  said. 

EM'S  increased  Merest  In 
hl(to  erolabMy  raised  concerns 
about  pricing  and  other  lesues 
among  some  Series  users. 

6arald  Lake,  a  programmer/ 
analyel  at  Sororefon  Specialty 
Chemicals  toe’s  Buffalo  opaa- 
bons.  said  tocraasing  demands 
homoutsideaudtotsforlTra- 
dundancypromptodhisoampa* 
ny  lo  improve  system  Mafaifity 
Ito  part  of  a  saner  consoRdalnn 
pn^  Smieraign  converted  an 
iSeriesmachtoetocatBdatadF 
torent  todiy  than  toe  one  that 
houses  its  primary  sava  into  a 
backup  system.  Lake  said. 


But  Lake  eyed  BMs  plan 
werito- 'The  way  6M  (toapes  so 
heaviy  tor  evorylhina  I  think  a 
totolpeoptoaregoingtoeontin- 
ueto  do  everytoino  on  thek 
own,*hesaid 

Ram  Mathiesen.  a  computer 
operatoratBreatPUnsCom* 
rrunictfotB  Inc.  In  Bhir,  Neb., 
said  toe  tatocommunictolDns 
service  provida  has  been  using 
8  tfUni-paty  product  to  ansae 
high  MilB^  of  Its  data.  She 
added  that  she  hopes  BM 
moros  In  the  dMciion  oi  part¬ 
nerships  with  olha  vendm  so  R 
doesn't  undercut  the  position  of 
third-paty  suppliers. 

Sporting  go^  maker 
'  Adtoas-Saknon  Canada  Ltd.  in 
:  Toronto  has  bear  able  to  count 
on  the  funckottafily  bull  Mo  the 
iSeries  to  matolain  Is  opera- 
bons.saidRullBone.vicepres- 
idenlofsuppfychainandfTlo- 
gistfa.  But  lione  noted.  Adkias 
wffhavetoaddresshighawil- 
abiity.  especialy  as  more  of  Rs 
orders  arrive  via  the  Web. 

-PabickThbodBau 


HP  Upgrades  Novadigm’s 
System  Configuration  Tools 


You  have  to  reconfigure  your  infrastructure.  Got  a  second? 


The  highly  dependoble  HP  BladeSystem  leohires  Intel*  Xeon"*  Processor.  Now  H's  possible  to  react  to  chonging  business  conditions  in  reol  time-in  seconds 
Applicotpon  deployment  and  reprovisioning  become  on  outomoted  process.  From  single  console  remote  management  to  19%  power  savings=-the  HP  BlodeSystem 
IS  designed  to  save  you  time,  money  and,  quite  possibly,  your  sanity.  Which,  ol  course,  could  be  the  most  compelling  reason  ol  oil  to  learn  more. 


CBMK  02004  HMMB-PaCM  OMUrm 


I  tmg.  convm]  b  BnAnv  oriiguBa  HP1U.  2P  »n«r  nti  tw  Me.  n  na  nde  uigo  m  >M  I 


BECAUSE  HYBRID  IS 
ACTUALLY  NOT  A  SOLUTION. 


Hybnd  is  as  hybnd  does.  And  when  it  comes  to  IP  Communications,  hybrid  doesn't  do  much  more  than  compromise.  Hybrid  doesn't  do  seamless 
talover.  Doesn't  do  scalability.  Doesn't  do  end-to-end  security.  Ditto  for  remote  upgrades.  So  if  it's  a  car,  go  hybrid.  If,  however,  it’s  a  networking 
and  conmiunicstions  strategy  you're  driving,  make  sure  you  drive  the  integrated,  secure,  end-to-end  solution:  To  learn  more  about  Cisco  IP 
Consnunications  solutions  or  to  find  a  service  provider  that  offers  these  managed  services  over  a  Cisco  Powered  Network,  visit  cisco.com/domore 

COMMUNKATION.  THE  NEW  MSHIONED  WAV.  CISCO  IP  COMMUNICATIONS. 
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Red  Hat  Exec  Addresses 
Challenges  to  Open-Source 


Though  open-source  technolo^es  are 
infiltratmg  IT  operations  throu^iout 
the  woHd,  its  chaxnpions  must  overcome 
several  potential  roadblocks  in  the  years 
to  come  to  ensure  that  their  ffvwth  con¬ 
tinues  MhimdiJknmn,  vice  president 
open-source  <^airs  at  Red  Hat  /nc^ 
offered  his  take  on  the  future  of  open- 
source  and  Linux  in  an  interview  with 
IDG  Sews  Service  this  month. 

Ar«  mora  and  morn  dwMiopars  using  open* 
aouret  tichnotogiw  worUiiMa?  The  lead¬ 
ing  developer  regions  I  have  seen  have 
been  the  U^.  and  Europe.  But  I  thin  If 
that  is  going  to  be  ^.hanging  very  rapid¬ 
ly.  South  America.  Brazil,  Venezuela 
{and]  Peru  have  all  either  announced 
or  are  in  the  process  of 
announcing  mainstream 
Lintu  work  for  govem- 
menL  When  Brazil  puts 
their  developers  on  open- 
source,  that  is  going  to  be 
a  huge  increase. 


Whattethabjggwtrhtlanps 
for  the  opan-soum  conNiMt- 
idly?  The  biggest  chal¬ 
lenge  right  DOW  is  that 
there  are  not  nearly  as 
many  open-source  devel¬ 
opers  as  there  could  be. 
The  biggest  challenge  is 
getting  more  people  ex¬ 
cited  [about  open-source 
development!.  The  (^n- 
source  community  is  a 
challenging  environment 


H  If  the  local 
Indian 

companies  are 
dev^ping  open- 
source  softw^ 
according  to 
o|^-source 
principles,  then 
we  benefit 


to  work  iiL  Some  develop-  manVCaSS 

ers  respond  positively  to  . I 

the  meritocracy  of  open- 
source.  and  some  do  not 

What  art  tha  tnanapamairt 


ux.  Because  of  the  supermodularity 
of  open-source,  the  ideal  resource 
allocation  for  100  million  developers 
is  to  be  working  on,  say,  10  million 
projects. 

Is  them  a  danpar  that  «Mks  from  standard 
Unui  wM  tM  oaMad  as  tha  nunWar  of  Un- 
in  dovolopon  jorroatai?  I  just  don’t 
think  it  will  happen,  because  we  just 
haven't  seen  it  Sun  rtaimg  that  they 
need  to  keep  Java  proprietary  so  that  it 
won’t  fork.  And  yet  as  proprietary  Java, 
it  did  fork.  [Meanwhile!  IBM  came  out 
and  released  Eclipse,  aiKl  to  and  be¬ 
hold  100  companies  joined  it  and  there 
has  been  no  forking  on  Eclipse. 

Tho  Unui  Standard  B«o  2J)  of  tho  Froo 
Standards  Oraup  atlofnpts  to  pot  tomo 


dMrfbuHom  of  Umot  WH  fM 
Hat  oMp  products  cenviant 
wNh  LS  2.0?  We  are  really 
looking  toward  LSB  3.0  be¬ 
cause  2.0  is  tK)t  compatible 
with  prior  decisions  we 
have  made.  We  have  been 
very  successful  to  certify 
against  LSB  Version  LO, 
and  we  will  contirme  to 
stay  compatible  with  that. 
We  think  2.0  overreached 
in  what  it  was  trying  to  da 
We  have  it  from  the  LSB 
people  chat  there  will  be  a 
3j0  out  in  less  than  six 
months,  and  we  are  quite 
confident  that  that  ^rsion 
will  be  adequate  for  our 
needs. 


MICHAEL  TIEMANN. 
Hoopraridmlof 


you  seolo  Id.  any,  100  imMon  opon-soureo 
dovolopafsspwdacfoooanurrtofof 
countries?  There  is  a  study  from  James 
Herbsleb  at  Carnegie  Mellon  Univer¬ 
sity  about  both  open-source  and  pro¬ 
prietary  projects.  [The  study  found 
that!  10  to  15  developers  are  typically 
responsible  for  80%  of  a  project. 
What  that  math  tells  you  is  ^t  open- 
source  scales  by  beir^  able  to  have 
more  and  more  projects.  I  don’t  ever 
chink  that  there  will  be  lOO  million 
people  woridng  on  one  library  in  Un- 


Asloeolzadvorsionsor 
Unui  taki  root  h  eoufrtriss 
■MCMna.HalaysfaMdThM- 
fiMra.  land.wMiocHvo|ironie(Mn 
flffholocsfpowniiosnto. 
how  doss  Had  Hot  piMi  to 
counter  that?  Some  Indian  cnmpani«»< 
the  ocher  day  asked  bow  we  were  pre¬ 
pared  to  deal  with  competition  from 
Indian  companies.  I  said  that  if  the  lo¬ 
cal  Indian  con^^arxies  are  develc^ing 
open-source  software  according  to 
open-source  principles,  then  we  bene¬ 
fit  in  any  case,  because  we  have  the 
libraries  chat  the  software  will  need. 
(IS01M 
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ON  THE  SERVICE,  THIS  LOGO 
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Fed  Law  Doesn’t  Yield 
E-voting  Consistency 


Sonic  states  bu\ 
c-\'oting  machines; 
otlicrs  wait  for 
federal  guidelines 

BV  PAUL  ROBERTS 

BOSTON 

•«M'  YfAHs  after  Con¬ 
gress  passed  the 
Help  America  Vote 
Act  (HAVA)  to  phase 
out  older  voting  systems, 
there  is  little  consistency  in 
the  adoption  of  the  law  and  its 
provisions.  While  some  states 
moved  quickly  to  enact  HAVA, 
ofncials  elsewhere  are  waiting 
for  more  guidance  to  verify 
which  new  voting  systems 
meet  federal  standards. 

HAVA  addresses  myriad 
prnhlcm.s  that  lamtshcd  the 
2000  presidemtiai  election.  The 
act  calls  for  the  pixn-isioning  of 
S3.9  billion  in  fc'deral  funds  to 
improve  the  election  process, 
whh  S?25  million  earmarked  to 
repbcc  outdated  machines. 

WTiile  HAVA  doesn't  man¬ 
date  particular  voting  tech¬ 
nologies.  it  does  require  that 
new  systetRS  be  acces.siblc  to 
disabled  people  by  2006.  That 
requirement  prompted  many 
counties  to  quickly  buy  new 
voting  equipment,  mostly  so- 
called  direct  ivcording  elec¬ 
tronic  (DRE)  systems  with 


features  to  accommodate 
impaired  voters. 

The  federal  money  for  vot¬ 
ing  systems  is  especially  wel¬ 
come  in  piMTrer  state's,  said 
Oan  Seligson.  editor  of  Elcc- 
fionline.org.  a  Washington- 
based  nonprofit  group  th.'U 
tracks  election  reform. 

In  Wyoming,  where  mcchan- 
ical-levcr  voting  machines 
purchased  years  ago  arc  still 
in  u-sc,  HAVA  will  eveniualK 
allow  all  of  the  stale's  23  coun¬ 
ties  to  upgrade  to  some  form 
of  DRE  technology,  said  Secre¬ 
tary  of  Stale  loc  Meyer.  Cur¬ 
rently.  only  one  county  uses 
DRE  tL'chnology,  he  said. 

In  South  Carolina,  many 
counties  bought  early  DRE 
machines  in  the  1980s  using 
state  matching  funds  and  then 
weren't  able  to  update  those 
systems  once  state  funds  dried 
up.  said  Donna  Royson.  dep¬ 
uty  dircaor  of  the  South  Car¬ 
olina  State  Election  Commis¬ 
sion.  HAVA  money  is  helping 
South  Carolina  move  to  a  uni¬ 
form  system  of  voting  ma¬ 
chines  statewide,  she  said 

While  HAVA  has  made 
money  available  to  help  with 
purchases  and  speed  the  a'- 
placcmcnt  of  older  machines, 
the  legislation  has  left  it  up  to 
each  state  to  dcwelop  its  own 
pbn  to  comply  with  the  Icgis- 
btion  and  requires  matching 


funds  from  states  to  qualify 
for  federal  dollars. 

“HAVA  sets  federal  man¬ 
dates  on  voting.  However, 
rum  hcrc  in  the  mandates  docs 
it  say  what  machines  to  use. 
how  many  there  should  be  per 
precinct,  frankly,  there  isn't 
e\en  a  mandate  to  replace 
punch  cards  and  lever  ma¬ 
chines."  Seligson  said. 

Variable  Progress 

In  state's  with  a  tradition  of 
top-down  management.  HAVA 
has  led  to  uniformity.  In  stales 
with  a  tradition  of  local  con- 
tn>t,  the  law's  leniency  has 
resulted  in  a  patchwork  sys¬ 
tem  of  voting  technology 
and  slower  progress. 


"One  reason  we're  a  bit 
slower  is  becau.se  we're  reluc¬ 
tant  to  hand  counties  unfunded 
mandates."  said  jonaihan  Black, 
director  of  research  for  the 
Tc.Kas  secretary  of  state’s  of¬ 
fice.  "We  like  to  give  counties 
as  much  choice  as  possible." 

An  informal  survey  by  the 
IDG  News  Service  of  counties 
with  DRE  machines  found 
wide  variability  in  the  number 
and  type  of  DRE  systems  to 
be  used  this  year,  with  some 
counties  relying  on  a  small 
number  of  machines  to  handle 
what  officials  c.xpect  to  be  a 
record  turnout. 

The  problem,  say  voting  c.x- 
ports,  is  a  system  that  has  long 
relied  on  local  money  rather 
than  federal  dollars  to  fund 
elections,  leading  to  dispari¬ 
ties  among  counties. 

For  example.  South  Carolina 
is  already  in  the  first  phase  of 
implementing  Us  HAVA  plan, 
which  calls  for  the  deployment 
of  state-purchased  iVotronic 


machines  from  Election  Sys¬ 
tems  and  Software  Inc.  The 
plan  calls  for  one  iVotronic 
DRE  machine  for  ever\’  200 
voters. 

But  elsewhere,  state  govern¬ 
ments  and  localities  have  put 
off  purchasing  DRE  equip¬ 
ment  as  they  wait  for  the  fed¬ 
eral  government  to  provide 
more  guidance.  The  result  is 
that  states  like  Maryland  and 
Nevada  arc  using  DRE  tech¬ 
nology  statewide,  while  oth¬ 
ers.  such  as  Ohio.  Pennsylva¬ 
nia  and  Wyoming,  are  using  it 
only  in  certain  areas. 

"States  are  ail  over  the 
map."  said  Wyoming’s  Meyer. 
"HAVA  was  supposed  to  have 
standards  to  protect  us  in 
terms  of  these  voting  systems, 
but  now  they  say  they’re  go¬ 
ing  to  have  them  in  2005  at 
the  earliest." 

Wyoming  won’t  choose  new 
equipment  until  after  the  Nov. 
2  election.  Meyer  said. 

HAVA  sets  strong  guide¬ 
lines  on  issues  such  as  accessi¬ 
bility  but  is  silent  on  many  of 
the  most  pressing  problems 
the  U.S.  election  system  is  fac¬ 
ing.  leaving  it  to  states  and  lo¬ 
calities  to  decide  which  tech¬ 
nologies  to  use  and  how  many 
machines  are  needed.  Elcc- 
tionline.org‘s  Seligson  said. 

While  HAVA  can  help  peo¬ 
ple  with  disabilities  and  pre¬ 
vent  voters  from  being  turned 
away  at  the  polls.  Seligson 
said,  it’s  unlikely  to  change  dis¬ 
parities  regarding  which  vot¬ 
ing  systems  are  used.  Ck  50229 


Roberts  is  a  reporter  for  the 
IDG  News  Service. 


ELECTRONIC  VOTING  MACHINES  haw  been  mstailed  in  27  states  (in 
grBan).  but  lawsuits  filed  in  New  Jersey  and  Florida  may  halt  or  tighten 
electronic  voting  with  such  machines. 


Skeptics  Create  System  to  Monitor  E-voting 


BOSTON 

A  group  of  technology  experts 
concerned  about  the  fate  of 
electronic  voting  machines  on 
Nov.  2  used  some  tools  of  the 
trade  *  fhe  Mkb  and  open- 
source  technologies  '  to  create 
a  system  to  monitor  e*voting  on 
eledionday. 

The  new  lechnotogy.  dubbed 
the  Election  Incident  Reporting 
System  (BRS).  was  developed 
by  tedmotogists  bom  the 


fled  Voting  Foundabon  and  Corn- 
puter  fVofessionals  for  Social 
Responsibility  (CPSR).  Thesys- 
tem  wi9  be  u^  by  the  Elect^ 
Protection  Coaklion.  which  con¬ 
sists  of  a  variety  of  orgaiizabons. 
to  identity  and  fix  problems  with 
DRE  machines  on  Nov.  2. 

Wbrk  on  EIRS  started  about 
four  months  ago.  according  to 
Wni  Oohtfty.  Verified  Ntoting's 
executive  director.  Since  then,  a 
team  of  30  to  35  people  -  mosl' 


iy  volunteers  -  has  worked  to 
ready  the  system  by  Election  Day. 

The  team  includes  five  core 
developers,  five  testers,  three 
usef'intertace  specidists  and  a 
four-member  ardiitecture  team 
responsible  for  security  and 
hardware,  said  Erfit  Nilsson, 
chairman  of  the  workino 
group  on  voting  technology. 

The  learn  gained  an  ad^- 
tage  from  using  open-source 
tool  kits,  such  as  PHP  Surveyor. 


to  create  online  surveying  instru- 
rrents  and  manage  the  results, 
he  said. 

Other  opm-source  software 
ised  in  the  EIRS  project  indudes 
AdvofOL  which  manages  tasks, 
campaigns  »k1  volunteers,  and 
MapServer,  which  produces 
dkitable  maps  that  can  diow 
the  loc^ns  of  past  problems. 

Doherty  said  the  developers 
are  worfung  on  a  final  featijre 
that  will  offer  more  detail  about 
election  incidents  at  a  specific 
site.  Currently,  when  a  user 
clicks  on  a  map  to  view  mckkmts 


VI  a  specific  location,  only  the 
number  of  incidents  is  displayed. 
The  upgrade  will  provide  far 
more  detais  of  particular  tnei- 
dents.  Doherty  said. 

If  aR  works  as  planned  on 
Election  Day.  incidents  reported 
via  QRS  will  prompt  the  timely 
dispatch  of  experts  to  problem 
locations.  The  team  indudes 
some  1.3(X)  TechVbtch  volun¬ 
teers  recruited  by  Verified  Vsting 
to  monitor  file  D^. 

*We*re  placing  big  bets  on 
this.’  said  Nilssoa 

-Baabe^HacNet 
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Fed  Law  Doesn’t  Yield 
E-voting  Consistency 


Some  states  buy 
e-voting  machines; 
others  wait  for 
federal  guidelines 


TWO  YEAfis  after  Con¬ 
gress  passed  the 
Help  America  Vote 
Act  (HAVA)  to  phase 
out  older  voting  systems, 
there  is  little  consistency  in 
the  adoption  of  the  law  and  its 
provisions.  While  some  states 
moved  quickly  to  enact  HAVA, 
officials  elsewhere  are  waiting 
for  more  guidance  to  verify 
which  new  voting  systems 
meet  federal  standards. 

HAVA  addresses  myriad 
problems  that  tarnished  the 
2000  presidential  election.  The 
act  calls  for  the  provisnoing  of 
S3.9  billkm  in  federal  funds  to 
improve  the  election  process, 
with  S32S  million  earmaiked  to 
replace  outdated  machines. 

While  HAVA  doesn't  man¬ 
date  particular  voting  tech¬ 
nologies.  it  does  require  that 
new  systems  be  accessible  to 
disabled  people  by  2006.  That 
requirement  prompted  many 
counties  to  quickly  buy  new 
voting  equipment,  mostly  so- 
called  direct  recording  elec¬ 
tronic  (ORE)  systems  with 


features  to  accommodate 
impaired  voters. 

The  federal  money  for  vot¬ 
ing  systems  is  especially  wel¬ 
come  in  poorer  states,  said 
Dan  Seligson.  editor  of  Elec- 
tionUne.org.  a  Washington- 
based  nonprofit  group  that 
tracks  election  reform. 

In  Wyoming,  where  mechan¬ 
ical-lever  voting  machines 
purchased  years  ago  are  still 
in  use,  HAVA  will  eventually 
allow  all  of  the  state's  23  coun¬ 
ties  to  u{^rade  to  some  form 
of  ORE  technology,  said  Secre¬ 
tary  of  State  )oe  Meyer.  Cur¬ 
rently.  only  one  county  uses 
DRE  technolt^.  he  s^. 

In  South  Carolina,  many 
counties  bought  early  DRE 
machines  in  the  1980s  using 
state  matching  funds  and  then 
weren’t  able  to  update  those 
systems  once  state  funds  dried 
up.  said  E>onna  Royson.  dep¬ 
uty  director  of  the  South  Car¬ 
olina  State  Election  Commis¬ 
sion.  HAVA  money  is  helping 
South  (Carolina  move  to  a  uni¬ 
form  system  of  voting  ma¬ 
chines  statewide,  she  said. 

While  HAVA  has  made 
money  available  to  help  with 
purchases  and  speed  the  re¬ 
placement  of  older  machines, 
the  legislation  has  left  it  up  to 
each  state  to  develop  its  own 
plan  to  comply  udth  the  legis¬ 
lation  and  requires  matchir^ 


funds  from  states  to  qualify 
for  federal  dollars. 

“HAVA  sets  federal  man¬ 
dates  on  voting  However, 
nowhere  in  the  mandates  does 
it  say  what  machines  to  use. 
how  many  there  should  be  per 
precinct.  Frankly,  there  isn't 
even  a  mandate  to  replace 
punch  cards  and  lever  ma¬ 
chines,"  Seligson  said. 

VariaUe  Progress 

In  states  with  a  tradition  of 
top-down  management,  HAVA 
has  led  to  uniformity.  In  states 
with  a  tradition  of  local  con¬ 
trol,  the  law's  leniency  has 
resulted  in  a  patchwork  sys¬ 
tem  of  voting  technology 
and  slower  progress. 


“One  reason  we're  a  bit 
slower  is  because  we're  reluc¬ 
tant  to  hand  counties  unfunded 
mandates,"  said  Jonathan  Blade, 
director  of  research  for  the 
Texas  secretary  of  state's  of¬ 
fice.  "We  like  to  give  counties 
as  much  choice  as  possible." 

An  informal  survey  by  the 
IDG  News  Service  of  counties 
with  DRE  machines  found 
wide  variability  in  the  number 
and  type  of  DRE  systems  to 
be  used  this  year,  with  some 
counties  relying  on  a  small 
number  of  machines  to  handle 
what  officials  expect  to  be  a 
record  turnout. 

The  problem,  say  voting  ex¬ 
perts,  is  a  system  that  has  long 
relied  on  local  money  rather 
than  federal  dollars  to  fond 
elections,  leading  to  dispari¬ 
ties  among  counties. 

For  example,  South  Carolina 
b  already  in  the  first  phase  of 
implementing  its  HAVA  plan, 
wdiich  calls  for  the  deployment 
of  state-purchased  iVotronic 
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machines  from  Election  Sys¬ 
tems  and  Software  Inc.  The 
plan  calls  for  one  iVotronic 
DRE  machine  for  every  200 
voters. 

But  elsewhere,  state  govern¬ 
ments  and  localities  have  put 
off  purchasing  DRE  equip¬ 
ment  as  they  wait  for  the  fed¬ 
eral  government  to  provide 
more  guidance.  The  result  is 
that  states  like  Maryland  and 
Nevada  are  using  DRE  tech¬ 
nology  statewide,  while  oth¬ 
ers,  such  as  Ohio,  Pennsylva¬ 
nia  and  Wyoming  are  using  it 
only  in  certain  areas. 

"States  are  all  over  the 
map,"  said  Wyoming's  Meyer. 
“HAVA  was  supposed  to  have 
standards  to  protect  us  in 
terms  of  these  voting  systems, 
but  now  they  say  they’re  go¬ 
ing  to  have  them  in  2005  at 
the  earliest" 

Wyoming  won't  choose  new 
equipment  until  after  the  Nov. 
2  election,  Meyer  said. 

HAVA  sets  strong  guide¬ 
lines  on  issues  such  as  accesri- 
bility  but  is  silent  on  many  of 
the  most  pressing  problems 
the  U3.  election  system  is  fee¬ 
ing  leaving  it  to  states  and  lo¬ 
calities  to  decide  which  tech¬ 
nologies  to  use  and  how  many 
machines  are  needed,  Elec- 
tionline.oig’s  Seligson  said. 

While  HAVA  can  help  peo¬ 
ple  with  disabilities  and  pre¬ 
vent  voters  from  being  turned 
away  at  the  polls,  Seligson 
said,  it’s  unlikely  to  change  dis¬ 
parities  regarding  which  vot¬ 
ing  systems  are  used.  O  50229 


Roberts  is  a  nporterfor  the 
JDG  News  SerWe. 
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Double  your  productivity  with  Scan^  technology. 


#The  best  way  to  stay  ahead  is  to  double 
your  productivity.  Introducing  Scan^ 
S  C  3  n  ^  technology  from  Sharp.  Sharp's  Digital 
Imagers  with  Scarv^  technology  are  designed  to  scan  two- 
sided  documents  in  a  single  pass. 

Now  your  training  manuals  and  white  papers  can  be 
scanned,  copied,  emailed  and  digitally  distributed  quicker 
than  ever  before. 


In  fact,  it's  1 1 5%  faster  than  any  other  product  in  its  class. 
Not  only  is  it  like  having  double  the  help,  it  will  also  allow 
you  to  accomplish  more  tasks,  in  dramatically  less  time. 
Together  with  Sharp's  integrated  network  management 
software  and  security  features,  your  digital  information  is 
safe  and  workflow  is  fully  optimized. 

Visit  sharpusa.com/$can2  or  call  1-800-BE-SHARP  for 
more  information. 


The  AR-MSSO.  AR-M620  andAR-MTOO 

•  Operate  at  55, 62  and  POpoges-per-mmute 

•  Fuity  integrated  network  ready  digital  copier/printen 

•  IrKkxienerwtk  management  ioftwofe  and  document  filing  capability 
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Microsoft  to  Link  Phones,  Messaging 

’  ^  w  ny  and  PC-based  voice-  and 

Bv  JUAN  CARLOS  PEREZ  will  let  end  users  link  their  of-  release  by  the  end  of  the  year.  videoconferencing  capabilities 

Microsoft  Corp.  last  tweek  said  fice  telephones  to  the  upgrad-  The  client  application,  code-  supported  by  Microsoft’s  Live 
it’s  developu^  a  fiont-end  col-  ed  instant  messaging  server  named  Istanbul,  is  due  by  mid-  r.nmTniinications  Server  (LCS) 
laboration  application  that  software  the  company  plans  to  200S.  It’s  being  designed  to  2005  software. 


With  the  built-in  telephony 
links,  “end  users  will  be  able 
to  think  of  their  enterprise 
PBX  phones  as  part  of  the 
overall  real-time  collaboration 
infrastructure,”  said  Ed  Sim- 
nett,  Microsoft’s  lead  product 
manager  for  Istanbul.  Users 
will  also  be  able  to  configure 
the  software  to  call  outside  a 
company’s  internal  switch¬ 
board.  Sinmett  said.  “Any 
phone  becomes  an  address¬ 
able  endpoint  to  LCS,”  he  said. 

Istanbul  will  be  the  pre¬ 
ferred  front-end  application 
for  LCS  2005,  replacing  the 
Windows  Messei^er  software 
that  works  with  LCS  2003.  An¬ 
other  planned  feature  is  deep¬ 
er  integration  with  other  Mi¬ 
crosoft  products,  Sinmett  said. 
For  example,  an  Exchai^e 
user  could  configure  an  out- 
of-the-offlce  message  to  show 
up  not  only  when  someone 
sends  him  an  e-mail  but  also 
when  someone  tries  to  reach 
him  via  LCS  20(^ 

Mea  bi  Search  of  a  Market 

Istanbul  is  an  attempt  by  Mi¬ 
crosoft  “to  merge  the  idea  of 
real-time  computer  communi¬ 
cation  and  real-time  phone 
communication.”  said  Nate 
Root,  an  analyst  at  Forrester 
Research  Inc.  Combining 
those  functions  would  tie  “in- 
stant-messagii^-type  clients 
to  the  PBX  infrastructure  that 
most  big  firms  already  have,” 
he  added. 

But,  Root  noted,  there  isn’t  a 
lot  of  demand  among  corpo¬ 
rate  users  for  the  frmctionality 
Istanbul  will  provide. 

“Istanbul  is  a  solution  for  a 
problem  most  users  and  com¬ 
panies  don't  know  they  have,” 
he  said.  “The  first  and  biggest 
hurdle  [Microsofr]  has  got  to 
get  over  is  cultural:  convincing 
people  that  this  is  a  new  and 
better  tool  to  make  their  lives 
easier.” 

To  make  the  Istanbul  con¬ 
cept  successful,  Microsoft 
must  work  ^gressively  with 
third-party  software  vendors 
to  extend  the  technology’s 
functionality,  said  Paul  Ritter, 
an  analyst  at  Wainhouse  Re¬ 
search  LLC.  O  50213 


Perez  is  a  reporter  for  the 
nXS  News  Service. 
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Juan  Carlos  Perez  of  the 
IDG  Sews  Service  contributed 
to  this  story. 


BRAND  NEW. 

NOT  NEW  BRAND. 

Introducing  the  Fujifilm  3592  enterprise-class  data  storage  tape. 

While  Fujifilm  3592  is  a  braf>d  r»ew  addition  to  our  full  lir>e  of  superior  quality  data  storage  media,  it  comes  from  a  company  •  •  • 

that  is  anything  but  a  r>ew  brand.  In  1995,  our  technotogy  enabled  the  first  gigabyte-class  metal  particle  enterprise  1/2"  tape, 

Since  then,  steady  innovation  has  culminated  in  a  high-end  1/2"  tape  with  NANOCUBIC  Technology,  the  magnetic  coating 

technology  leveraged  by  world-leading  hardware  manufacturers  in  development  of  their  latest-generation  enterprise-class  •  J  •  * 

drive  systems.  Specify  Fujifilm  on  your  next  high-end  tape  order.  It's  the  brand  that  other  brands  trust.  *•* 

To  find  out  more  about  our  complete  line  of  reliable  data  storage  media,  visit  us  at:  www.fujifiim.eom  ridnOCLllDIC 


e20HrupnaDRk«uSA.ic  (iannsKtara>%aM'i 


^  FUJIFILM 


24 


eamaMU 


www.ca(T)putenw](1(t.com 


DON  TENNANT 


Unchosen  Exposure 


There  was  a  time  when  giving  up 
one's  privacy  tended  to  be  a  matter  of 
choice.  In  the  early  ’80s,  I  worked  for 
the  National  Security  Agency,  and  for 
the  sake  of  the  job,  I  elected  to  sacrifice 
my  privacy  to  a  degree  that  most  people  would  find 
appalling.  I  allowed  myself  to  be  polygraphed  on 
a  regular  basis,  which  entailed  being  strapped  into 


a  chair  with  sensors 
wrapped  around  my  torso 
and  attached  to  my  Hn* 
gertips.  You  know  that 
dream  where  you're 
standing  in  a  roomful  of 
people  in  your  under' 
wear?  Multiply  the  feeling 
of  exposure  a  few  thou* 
sandfbld,  and  yx>u’U  have 
some  idea  what  it's  like  to 
have  your  thou^ts  bared 

The  biggest  problem  I 
had  with  it  was  that  the 
technolc^  was  imperfect  (it  sdll  is). 
I  happen  to  have  a  lot  of  Iranian 
friends,  and  I  can  remember  being 
repeatedly  grilled  about  that  during 
those  days  of  embassy  hostage- 
taking.  What  if  there  were  some  sort 
of  false  reading  that  put  my  friends 
(not  to  mention  me)  under  suspi¬ 
cion?  Let  me  tell  you.  that’s  a  tough 
thing  to  have  weighing  on  your  tnind 
when  those  sensors  are  recording 
every  flinch  and  twitch. 

To  some  extent,  sacrificing  one's 
privacy  is  still  a  matter  of  choice, 
rve  chosen,  for  example,  to  use  an 
electronic  toll  tag  in  my  car  to  avoid 
the  toUbootb  congestion  on  the 
Massachusetts  7\impike.  Many  of 
the  drivers  who  wait  interminably  in 
lines  while  I  breexe  through  do  so 
because  they  detest  the  thought  of 
the  state  of  Massachusetts  recording 
their  whereabouts.  L  on  the  other 
hand,  just  can't  fathom  that  anyone 
worldly  for  the  government  gives  a 
rat’s  tail  about  where  I  drive,  as  long 
as  it’s  on  the  r^t  side  of  the  road 
71>e  problem  I  have,  again,  is  with 
the  tedukology.  Just  last  week,  I  re¬ 


ceived  a  stem  "toll  viola¬ 
tion  warning  letter”  pro¬ 
claiming  that  my  vehicle 
was  recorded  as  an  un¬ 
authorized  user  of  the 
electronic  toll  collection 
system  and  presuming 
my  guilt  by  warning  me 
against  “subsequent  vio¬ 
lations."  And  while  Pm 
not  paranoid  about  my 
privacy,  I  have  to  admit 
that  seeing  the  photo  of 
my  car  taken  during  my 
‘^fiolation”  was  a  little  off-putting. 
Never  mind  that  the  toU-tag  system 
malfunctioned  which  they  acknowl¬ 
edged  prior  to  replacing  my  faulty 
tag  —  I  still  have  to  appeal  the  warn¬ 
ing  and  clear  my  name. 

But  it  was  my  choice  to  use  the 
system.  The  real  concern,  and  what’s 


changed  a  lot  in  recent  years,  is  that 
in  many  cases,  we  no  longer  have  the 
choice.  I  had  no  option  but  to  aUow 
my  checked  baggage  to  be  opened 
for  inspection  at  the  airport  when  I 
flew  out  of  Providence.  R.I.,  earlier 
this  month.  The  technology  used  to 
scan  its  contents  was  apparently  in¬ 
effective,  and  a  TSA  guy  in  an  ill- 
fitting  white  shirt  had  a  Held  day 
rummaging  through  it  after  it  passed 
through  the  huge  X-ray  machine. 

The  crowd  watching  the  spectacle 
just  didn't  need  to  know  that  I’m  a 
boxer-briefs  kind  of  guy. 

So  this,  more  than  anything,  is  an 
appeal  from  an  end  user.  When  you 
carry  oul  an  IT  project,  be  it  a  secu¬ 
rity  implementation,  an  enterprise 
search  capability  —  the  big  brother, 
you  might  say,  of  the  desktop  search 
technology  that  Google  introduced 
this  month  (see  page  22)  —  or  any 
other  system  with  privacy  ramifica¬ 
tions,  remember  that  for  the  most 
part,  users  don’t  have  a  say  in  the 
matter.  We’re  retying  on  you  to  get 
the  technology  r^t.  Whatever 
choices  there  are  now  are  largely 
yours.  O  50210 


PIMM  FOX 

E-mail  Has 
The  Power 
To  Destroy 

I  USED  TO  THINK  that 
e-mail  would  generally 
benefit  business  through 
the  easier  flow  of  information 
that  it  affords,  making  it  possible  for 
employees  to  be  more  productive  and 
communicate  more  efficiently. 

The  reality  is  more  prosaic.  E-mail 
it  turns  out,  b  jtist  another  way  for  us 
to  demonstrate  our  stupidity.  It’s  the 
poisoned  chalice  of  white-collar  crime. 

Eliot  Spitzer.  New  Yorit's  attorney 
general  has  been  sifting  through  the 
electronic  trash  bin.  His  investigation 
into  insurance  broker  practices  has  un¬ 
earthed  incriminating  evidence  that 
will  help  him  build  a  case  alleging  that 
some  brokers  in  the  U.S.  have  been  rig¬ 
ging  their  bids.  How  did  be  find  this 
evidence?  By  following  the  e-mail  trail 
Spitzer,  who  made 
a  name  for  himself 
by  going  after  the 
mutual  fund  indtistry 
for  illegal  trading  ac¬ 
tivity  and  investment 
banks  for  breaching 
the  wall  between  re¬ 
search  and  banking, 
has  recovered  some 
employee  e-mails 
that  are  proving  to 
be  devastatii^ 

His  curreni  probe 
of  insurance  brolmr  Marsh  &  McLen¬ 
nan  has  turned  up  a  transcript  of  an 
e-mail  sent  by  an  employee  of  its 
Marsh  Inc.  unit  In  the  message  to  a 
manager  at  insurance  company  Mu- 
nicb-American  RiskPartners,  ^  em¬ 
ployee  asks  for  someone  —  a  "body,”  to 
quote  the  e-mail  —  to  make  a  phony 
bid  on  an  insurance  policy.  Spitzer 
contends  that  Marsh  had  alr^dy  de¬ 
cided  to  give  the  business  to  another 
insurer  that  had  agreed  to  a  kickback. 

The  e-mail  isn’t  subtle.  The  writer 
jokes  about  having  someone  from  the 
insurer's  janitorial  staff  attend  the 
meeting  to  nuke  the  frke  bid. 

What  was  the  author  thinlring? 

Was  the  author  thinkii^? 

Is  this  the  way  e-mail  works  in  your 
company?  Is  there  any  supervision? 
Does  your  company  offer  training  in 
what's  acceptable  to  include  in  e-maii 
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communications?  It  should,  of  course, 
because  records  of  illegal  actions, 
whether  made  in  e-mail,  documents  or 
voice  mail,  have  the  power  to  cause 
enough  havoc  to  bring  down  a  compa¬ 
ny  or.  at  the  very  least,  ruin  a  career. 

Frank  Q^ttrone,  the  former  deal- 
maker  at  Credit  Suisse  First  Boston, 
was  nabbed  by  the  feds  because  of  an 
e-mail  that  described  his  activities  in 
relation  to  the  practice  of  “spinning”  — 
the  allocation  of  shares  in  initial  public 
oflfcnngs  to  favored  clients.  (Quattrone 
was  eventually  convicted  of  the  lesser 
charge  of  obstruction  of  justice.)  And 
when  Enron  was  imploding,  the  energy 
trading  company's  auditors  at  now- 
defunct  Arthur  Andersen  used  e-mail 
to  discuss  how  best  to  destroy  internal 
memos  and  other  evidence. 

You  could  say  that  the  illegal  use  of 
e-mail  is  much  more  widespread  than 
those  high-pronie  cases  indicate, 
though.  For  example,  how  often  have 
you  had  to  delete  e-mail  from  someone 
in  Nigeria  trying  to  elicit  your  help  (and 
get  some  of  your  cash)  in  some  scheme 
to  get  money  out  of  the  country? 

You  can't  prevent  people  from  using 
e-mail  to  encourage  illegal  acts,  engage 
in  backbiting  or  express  prejudicial 
thoughts.  But  you  can  m^  it  clear 
that  your  company's  policy  states  that 
nothing  in  e-mail  U  private  and  that 
everything  is  subject  to  oversight  Such 
policies  should  serve  as  a  warning  to 
potential  white-collar  criminals. 

You  have  to  think  of  e-mail  as  a 
broadcasting  medium  that  could  reveal 
all  parts  of  your  organization. 

So  if  you  have  something  to  hide, 
don't  put  it  in  an  e-mail.  Better  yet. 
don't  have  anything  to  hide.  O  50189 

DAVID  MOSCHELLA 

ITsDayin 
Political  Sun 
Will  Return 

WHATEVER  YOUR 
political  views,  the 
last  presidential 
election  cycle  must  seem  like 
it  was  from  a  long-lost  era.  Remember 
how  Al  Gore  would  rhapsodize  about 
the  glories  of  the  coming  “information 
superhighway”  and  then  josh  about 
whether  be  had  invented  the  internet? 
Then  there  was  all  that  half-iacetious 
talk  about  a  “(^re  and  Ooerr”  ticket.  I 
as  in  John  Doerr.  the  venture  capital  I 


superstar  from  Silicon  Val¬ 
ley.  The  Gore  vs.  Bush  race 
was  often  portrayed  as  one 
between  the  spaceman  of 
the  digital  future  and  the 
cowboy  from  the  oil-driven 
past. 

Of  course,  by  November 
2000.  the  smart  money  al¬ 
ready  knew  (hat  the  dot¬ 
com  bubble  had  been 
pricked  some  six  months 
earlier.  But  the  media  and 
most  of  the  electorate  had 
not  yet  caught  on.  and  thus 
companies  such  as  World¬ 
Com.  Enron  and  many  of 
the  dot-com  highfliers  were  still  seen 
as  the  harbingers  of  a  bright  new 
American  future,  and  the  endorse¬ 
ments  and  donations  of  leading  high- 
tech  CEOs  Ui-crc  considered  important 
coups,  even  newsworthy  events. 

Back  then,  we  were  all  supposed  to 
worry  about  how  to  close  the  growing 
digit^  divide.  Many  thought  that  gov¬ 
ernment  action  was  needed  to  ensure 
that  Internet  access  was  a  fixture  in 
every  classroom  and  available  in  every 
home  and  that  rural  residents  weren't 
left  behind  by  greedy  broadband  pro¬ 


viders.  Wc  obsessed  about 
the  coming  high-tech  skills 
shortage  and  what  the  la¬ 
bor  force  of  the  21st  centu¬ 
ry  should  look  like.  The 
role  of  telephone,  cable  and 
wireless  telecommunica¬ 
tions  providers  was  viewed 
as  a  top  policy  area. 

Let's  just  say  that  things 
are  very  different  today. 
This  year’s  race  pits  two 
lawyers  against  two  oil 
men,  not  one  of  whom  has 
ever  shown  any  real  inter¬ 
est  in  the  IT  industry,  its 
promise,  its  challenges  or 
its  hjiturc.  The  only  time  the  FT  indus¬ 
try  has  been  part  of  the  current  cam¬ 
paign  is  when  the  topic  of  offshore  out¬ 
sourcing  has  come  up.  The  quality  of 
that  discussion  hasn't  been  inspiring, 
and  it  has  mercifully  faded  during  the 
campaign's  final  stages. 

While  it’s  normal  for  many  issues  to 
get  knocked  off  the  front  page  during 
times  of  war,  the  IT  industry’s  lost  em¬ 
inence  is  particulariy  striking.  Consid¬ 
er  how  many  other  topics  now  clearly 
resonate  more  deeply  with  the  broad 
electorate  —  health  care,  gas  prices, 
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global  warming,  gay  mairiagc.  tax  poli¬ 
cy,  even  stem-cell  research.  These 
days,  not  even  the  governor  of  Califor¬ 
nia  goes  out  of  his  way  to  be  associated 
with  IT  industry  concerns. 

lust  as  the  IT  business  has  always 
been  characterized  by  periods  of 
boom  and  bust,  so  have  the  public's 
perceptions  of  our  business.  Thus,  it 
seems  safe  to  say  that  while  the  na¬ 
tion's  collective  sense  of  the  impor¬ 
tance  of  IT  went  more  than  a  bit  in¬ 
sane  during  the  bubble  years,  during 
this  campaign  it  has  perhaps  swung  a 
bit  loo  low. 

Will  it  ever  fly  high  again?  The  an¬ 
swer  is  probably  yes.  Someday,  when 
nanotechnology,  biotechnology  and 
RFID  become  more  than  just  promises, 
investors,  the  media  and  the  nation 
might  once  again  swoon  over  the  pow¬ 
er  of  technology.  If  they  do,  the  warm 
words  of  politicians  and  pundits  will 
surely  follow.  2008  is  probably  a  bit  too 
soon,  but  by  2012,  it  could  all  be  very 
diflerent  once  again.  O  50130 
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Munkapai  IMP  Was  an  Easy  Decision 


The  ern  OF  HESPERIA,  CMJF,. 

just  undenvent  a  VblP  snple- 
rnenialion  rVoiP  3anrq  Onx^ 
Despite  Cost  ConoetTB.*  QuiddJnk 
48828].  \Me  instaM  Qsco's  AWK) 
atcityhdlandalremotesiles.ln- 
chri^ourfireandpoAcedepirt- 
meats.  VW  ware  approved  (uratno 
for  this  projecl  because  our  Hoes 
were  comno  in  on  a  Centrex  phone 
system  and  our  voice-ma4  system 
M  readied  the  end  of  its  We  cycle. 
The  new  drciWs  were  provided  at 
lower  cost  than  our  data  circuits, 
and  we  no  longer  have  to  pay  the 
standard  charge  for  each  incMdual 
phone  line  and  usage  charges. 

We  have  a  liltie  under 300  end 
users,  and  based  on  our  nlial  cost 
analysis,  our  old  monthly  voca  and 
data  costs  of  $23,000  wtf  be  re¬ 
duced  to  $16,000.  a  cost  savings 
that  has  alraady  been  witnessed 
wdhin  the  first  month  of  service. 

The  analysis  aiso  detailed  a  yearly 
cost,  which  inciudes  rnonthly 
diargas  as  well  as  equipment  main¬ 
tenance  and  repaa  costs.  Oif  yearly 
costs  for  the  old  voice  and  data  ser 
vices  were  $353,000.  whereas  the 


new  converged  ndwork  wd  aver¬ 
age  $248,000.  However,  the  bene¬ 
fits  of  this  network  create  an  avenue 
for  far  greater  adrantages  then  can 
be  projeded.  such  as  response 
timesfDr8erviC8cals.8ikmstra- 
bonoverheadvideotelecanlerenc- 
mg  capabibes  and  other  amargmg 
tedmologBs 

Ml  understtfid  that  VoP  6  not 
mature.buliti5thelulureofcom- 
municatans.  And  as  oir  city  contin¬ 
ues  to  grow,  we  can  expand  our 
cornrnjnications  capabiBies  to 
meet  our  needs.  For  us.  das  WBs  an 
easy  decision  to  make. 

Rtek  Ochoa 

IS  manager.  Oty  of  Hesperia. 
TOchoa^atyt^hesperioMS 


Ue  lor  financial  aid  at  frafiarta  state 
ureversAes  wi  be  delayed  two  to 
three  weeks  n  getbrio  fimdaig  ahw^ 
nterface  profafems  with  lenders. 
How  meny  SAP  nstalWions  waid 
have  consKtoad  such  delays  a  suc¬ 
cess?  This  story  was  bailer  suAed 
to  page  U  than  f^ge  One. 

Brady  J.  Aheniitfiy 

EDI  developer.  Burleson.  Texas 


Don't  Buy  the  Hype 

WrrHTNEFRORT-PMKhead- 
kne  that  read 'ERP  Sydem 
Doesn't  fifake  Grade  in  Indim' 
[Quickljnk43349I.louessCbm- 
pufarwonkf  can  join  the  Wees  of  the 
AhMnWEregirarttid  rnaybe  even 

CBS  News.  The  articfe  said  that 
less  than  X)%d  al  students  ehgi- 


What'sNews? 

iniOWHEAOUNEScanbedlfft- 
cUI  fBalmer  Buleh  on  Fulwe. 
Beensh  on  Unux.' QuckUnk 
49199).  but  redy  -  8aln«r  bullish? 
Who'd  have  thought?  And  bearish 
on  Linux?  Now  there's  a  change) 
&k  Sandal 
CEO,  SA  Engineering 
Thickee.Calif. 


Don't  Forget  Data 
On  Leased  Gear 

AUOFTNEOtSCPSSIOIISrve 
seen  about  data  left  on  oU 
equipment  fai  to  mention  comput¬ 
ers  that  are  returned  at  the  conclu¬ 
sion  of  a  lease  [‘Old  Computers  An 


rr  Department  LiabdBy  Thai's  Cost- 
rig  More.' OuicMjnk  49063)  And 
lor  the  reety  paranoid,  how  about 
that  PC  you  sent  back  for  repar? 
When  our  CAD  users' PCs  (and 
sery«rs}  are  leptaoad.  (he  solubon 
we  prefer  6  quile  simple  -  we  fold 
the  hard  dnves  ri  half  with  a  OreWi 
press.  Thmk  about «;  This  data  is  on 
a  system  whose  outdated  hanf  drive 
is  practtcafiy  worthless  on  the  used- 
equpmenl  marka 
Jhn  Porter 

Programmer.  The  Raymond 
Carp..  Greene.  N.Y. 

More  teners.  page  26 

COMPUTERWOmj)  welcomes 
commerAs  from  its  readers  Letters 
wd  be  edCed  for  brevity  and  danty 
They  should  be  addressed  to 
Jame&kle.lenere  editor.  Com- 
puterwodd.  PO  Box  9T7t.  1  Soeen 
Street  Framinoham.  NAass  01701. 
Fsc(5(»)879'4843E-fntf 
ietters^compulerwDfklcom 
Indude  an  address  and  phone 
rwnber  lor  fnmedaie  verification 
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DON  TENNANT 


Unchosen  Exposure 


There  was  a  time  when  giving  up 
one’s  privacy  tended  to  be  a  matter  of 
choice.  In  the  early  ’80s,  I  worked  for 
the  National  Security  Agency,  and  for 
the  sake  of  the  job,  I  elected  to  sacrifice 
my  privacy  to  a  degree  that  most  people  would  find 
appalling.  I  allowed  myself  to  be  polygraphed  on 
a  regular  basis,  which  entailed  being  strapped  into 


3  chair  with  sensors 
wrapped  around  my  torso 
and  attached  to  my  Hn- 
gertips.  You  know  that 
dream  where  you're 
standing  in  a  roomhil  of 
people  in  your  under¬ 
wear?  Multiply  the  feeling 
of  exposure  a  few  thou¬ 
sandfold.  and  you'll  have 
some  idea  what  it's  like  to 
have  your  thoughts  bared. 

The  biggest  problem  I 
had  with  it  was  that  the 
technolt^  was  imperfect  (it  still  is). 
I  happen  to  have  a  lot  of  Iranian 
friends,  and  I  can  remember  being 
repeatedly  grilled  about  that  during 
(hose  days  of  embassy  hostage- 
taking.  What  if  there  were  some  sort 
of  false  reading  that  put  my  friends 
(not  to  mention  me)  under  suspi¬ 
cion?  Let  me  tell  you,  that's  a  tough 
thing  to  have  weighing  on  your  mind 
when  those  sensors  are  recording 
every  flinch  and  twitch. 

To  some  extent,  sacrificing  one’s 
privacy  is  still  a  matter  of  choice. 

I've  chosen,  for  example,  to  use  an 
electronic  toll  tag  in  my  car  to  avoid 
the  tollbooth  congestion  on  the 
Massachusetts  Turnpike.  Many  of 
the  drivers  who  wait  interminably  in 
lines  while  i  breeze  through  do  so 
because  they  detest  the  thought  of 
the  state  of  Massachusetts  recording 
their  whereabouts.  I.  on  the  other 
hand,  just  can't  fathom  that  anyone 
working  for  the  government  gives  a 
rat's  tail  about  where  I  drive,  as  long 
as  it's  on  the  right  side  of  the  road. 

The  problem  1  have,  again,  is  with 
the  technology,  fust  last  week.  I  re¬ 


ceived  a  stem  “loll  viola¬ 
tion  warning  letter”  pro¬ 
claiming  that  my  vehicle 
was  recorded  as  an  un¬ 
authorized  user  of  the 
electronic  toll  collection 
system  and  presuming 
my  guilt  by  warning  me 
against  “subsequent  vio¬ 
lations."  And  while  I'm 
not  paranoid  about  my 
privacy,  I  have  to  admit 
that  seeing  the  photo  of 
my  car  taken  during  my 
“violation”  was  a  little  off-putting. 
Never  mind  that  the  toll-tag  system 
malfunctioned,  which  they  acknowl¬ 
edged  prior  to  replacing  my  faulty 
tag  —  I  still  have  to  appeal  the  warn¬ 
ing  and  clear  my  name. 

But  it  was  my  choice  to  use  the 
system.  The  real  concern,  and  what's 


changed  a  lot  in  recent  years,  is  that 
in  many  cases,  we  no  longer  have  the 
choice.  I  had  no  option  but  to  allow 
my  checked  baggage  to  be  opened 
for  inspection  at  the  airport  when  I 
flew  out  of  Providence.  R.I..  earlier 
this  month.  The  technology  used  to 
scan  its  contents  was  apparently  in¬ 
effective,  and  a  TSA  guy  in  an  ill- 
fitting  white  shirt  had  a  field  day 
rummaging  through  it  after  it  passed 
through  the  huge  X-ray  machine. 

The  crowd  watching  the  spectacle 
just  didn’t  need  to  know  that  I’m  a 
boxer -briefs  kind  of  guy. 

So  this,  more  than  anything,  is  an 
appeal  from  an  end  user.  When  you 
carry  out  an  IT  project,  be  it  a  secu¬ 
rity  implementation,  an  enterprise 
search  capability  —  the  big  brother, 
you  might  say,  of  the  desktop  search 
technology  that  Google  introduced 
this  month  (see  page  22)  —  or  any 
other  system  with  privacy  ramifica¬ 
tions.  remember  that  for  the  most 
part,  users  don't  have  a  say  in  the 
matter.  We’re  relying  on  you  to  get 
the  technology  right.  Whatever 
choices  there  are  now  are  laigely 
yours.  O  50210 


PIMM  FOX 

E-mail  Has 
The  Power 
To  Destroy 

I  USED  TO  THINK  that 
e-mail  would  generally 
benefit  business  through 
the  easier  flow  of  information 

that  it  affords,  making  it  possible  for 
employees  to  be  more  productive  and 
communicate  more  efficiently. 

The  reality  is  more  prosaic.  E-mail, 
it  turns  out.  is  just  another  way  for  us 
to  demonstrate  our  stupidity.  It's  the 
poisoned  chalice  of  white-collar  crime. 

Eliot  Spitzer.  New  Yoric's  attorney 
general,  has  been  sifting  through  the 
electronic  trash  bin.  His  investigation 
into  insurance  broker  practices  has  un¬ 
earthed  incriminating  evidence  that 
will  help  him  build  a  case  alleging  that 
some  brokers  in  the  U.S.  have  been  rig¬ 
ging  their  bids.  How  did  he  find  this 
evidence?  By  following  the  e-mail  trail. 

Spitzer.  who  made 
a  name  for  himself 
by  going  after  the 
mutual  fund  industry 
for  illegal  trading  ac¬ 
tivity  and  investment 
banks  for  breaching 
the  wall  between  re¬ 
search  and  banking, 
has  recovered  some 
employee  e-maiLs 
that  are  pmvir^g  to 
be  devastating. 

His  current  probe 
of  insurance  broker  Marsh  &  McLen¬ 
nan  has  turned  up  a  transcript  of  an 
e-mail  sent  by  an  employee  of  its 
Marsh  Inc.  unit.  In  the  message  to  a 
manager  at  insurance  company  Mu- 
nich-American  RiskPartners.  the  em¬ 
ployee  asks  for  someone  —  a  “body."  to 
quote  the  e-mail  —  to  make  a  phony 
bid  on  an  insurance  policy.  Spitzer 
contends  that  Marsh  had  already  de¬ 
cided  to  give  the  business  to  another 
insurer  that  had  agreed  to  a  kickback. 

The  e-mail  isn’t  subtle.  The  writer 
jokes  about  having  someone  from  the 
insurer's  janitorial  staff  attend  the 
meeting  to  make  the  fake  bid. 

What  was  the  author  thinking? 

Was  the  author  thinking? 

Is  this  the  way  e-mail  works  in  your 
company?  Is  there  any  supervision? 
Does  your  company  offer  training  in 
what's  acceptable  to  include  in  e-mail 
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OPINION 


communications?  It  should,  of  course, 
because  records  of  illegal  actions, 
whether  made  in  e-mail,  documents  or 
voice  mail,  have  the  power  to  cause 
enough  havoc  to  bring  down  a  compa¬ 
ny  or.  at  the  very  least,  ruin  a  career. 

Frank  Quattronc,  the  former  deal- 
maker  at  Credit  Suisse  First  Boston, 
was  nabbed  by  the  feds  because  of  an 
e-mail  that  described  his  activities  in 
relation  to  the  practice  of  “spinning”  — 
the  allocation  of  shares  in  initial  public 
offerings  to  favored  clients.  (Quaitrone 
was  eventually  convicted  of  the  lesser 
charge  of  obstruction  ofiusiicc.l  And 
when  Enron  wa.s  imploding,  the  enetg>' 
trading  company’s  auditors  at  now 
defunct  Arthur  Andersen  used  e-mail 
to  discuss  how  best  to  destroy  internal 
memos  and  other  evidence. 

You  could  say  that  the  illegal  use  of 
e-mail  is  much  more  widespread  than 
those  high-profile  cases  indicate, 
though.  For  example,  how  often  have 
you  had  to  delete  e-mail  from  someone 
in  Nigeria  trying  to  elicit  your  help  (and 
get  some  of  your  cash)  in  some  scheme 
to  get  money  out  of  the  country? 

You  can’t  prevent  people  from  using 
e-mail  to  encourage  illegal  acts,  engage 
in  backbiting  or  express  prejudicial 
thoughts.  But  you  can  m^e  it  clear 
that  your  company’s  policy  states  that 
nothing  in  e-mail  is  private  and  that 
everything  is  subject  to  oversight.  Such 
policies  should  serve  as  a  warning  to 
potential  white-collar  criminals.  I 
You  have  to  thiidc  of  e-mail  as  a 
broadcasting  medium  that  could  reveal 
all  parts  of  your  organization. 

So  if  you  have  something  to  hide, 
don’t  put  it  in  an  e-maiL  Better  yet. 
don't  have  anything  to  hide.  O  50169 

DAVID  MOSCHELLA 

FTs  Day  in 
Political  Sun 
Will  Return 

WHATEVER  YOUR 
political  views,  the 
last  presidential 
election  cycle  must  seem  like 
it  was  from  a  long-lost  era.  Remember 
how  A1  Gore  would  rhapsodize  about 
the  glories  of  the  coming  “information 
superhighway”  and  then  josh  about 
whether  he  had  invented  the  Internet? 
Then  there  was  all  that  half-facctious 
talk  about  a  “Gore  and  Doerr"  ticket, 
as  in  John  Doerr,  the  venture  capital 
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I  superstar  from  Silicon  Val- 
j  Icy.  The  Gore  vs.  Bush  race 
was  often  portrayed  as  one 
'  between  the  spaceman  t»f 
the  digital  future  and  the 
cow  boy  from  the  oil-driven 
I  past. 

j  Of  course,  by  Ntivomber 
1  2000.  the  smart  money  al- 
,  ready  knew  that  the  dot¬ 
com  bubble  had  been 
I  pricked  some  sl.s  months 
earlier.  But  the  media  and 
I  most  of  the  electorate  had 
,  not  yet  caught  on.  and  ihu.s 
j  companies  such  as  World- 
,  Com.  Enron  and  many  of 
!  the  dot-com  highfiicrs  were  still  seen 
as  the  harbingers  of  a  bright  new 
American  future,  and  the  endorse¬ 
ments  and  donations  of  leading  high- 
tech  CEOs  were  considered  important 
et>ups,  even  newsworthy  events. 

Back  then,  we  were  all  supposed  to 
worry'  about  hi>w  to  close  the  gittwing 
digital  divide.  Many  thought  that  gov¬ 
ernment  action  was  needed  to  ensure 
that  Imemd  access  was  a  fixture  in 
every  classroom  and  available  in  every 
home  and  that  rural  residents  weren’t 
left  behind  by  greedy  broadband  pro¬ 


viders.  We  i>bsessed  abt'ut 
the  coming  high-tech  skills 
shortage  and  wh.>t  the  la¬ 
bor  force  of  the  21st  centu¬ 
ry  shimid  look  like.  I’he 
role  of  telephone,  cable  .ind 
wireless  telecommunica¬ 
tions  providers  wits  viewed 
.tsa  top  p^dicy  area- 
let’s  just  say  that  things 
are  very  different  today. 
This  ye.-ir’s  race  pits  «w  o 
lawyers  against  tw\*  oil 
men.  not  one  «if  whom  has 
ever  shown  any  real  inter¬ 
est  in  the  IT  industry,  its 
promise,  its  challenges  or 
its  ftiture.  The  only  time  the  IT  indus¬ 
try  has  been  part  of  the  current  c.im- 
paign  is  when  the  topic  of  offshore  out¬ 
sourcing  has  coroe  up.  The  quality  of 
that  discussion  hasn’t  been  inspiring, 
and  it  has  mercifully  faded  during  the 
campaign's  final  stages. 

While  it’s  normal  for  many  issues  to 
gel  km)cked  off  the  from  p.tgc  during 
times  of  war.  the  IT  industry’s  h>si  em¬ 
inence  is  particularly  striking-  Ctmsid- 
er  how  many  other  topics  now  clearly 
resonate  more  deeply  with  the  broad 
electorate  —  health  care,  gas  prices. 


gloh.tl  warming,  gay  marriage,  i.ix  poli¬ 
cy.  even  stem-ivll  research.  Tht-se 
days,  n<u  vAcn  the  governor  of  Califor¬ 
nia  goes  out  ot  his  w.-ty  to  be  asMK'iated 
with  IT  inJu.siry  concerns 

lust  as  the  1  r  business  has  .ilways 
been  characterized  by  periods  of 
boom  and  bust.  >o  have  the  public  s 
perceptions  of  our  business.  Thus,  it 
seems  safe  to  say  that  while  the  na¬ 
tion's  coilcetjve  sense  of  the  impor¬ 
tance  ol  IT  went  more  than  a  bit  in¬ 
sane  during  the  bubble  years,  during 
this  campaign  tt  has  perhaps  sw  ung  a 
hit  too  low 

Will  it  ever  fix  high  again?  The  .m- 
swer  is  prob.ibIy  yes.  S«imcd4y.  when 
nanoicchmilogy.  biotechnology  and 
Run  bvvome  more  than  just  pr\»mises. 
investors,  the  media  .ind  the  nation 
might  once  again  swiH>n  over  the  pow  ¬ 
er  of  technology.  If  they  do.  the  warm 
word.s  of  politicians  and  pundits  will 
surely  lillow.  2008  is  probably  a  bit  t»h> 
siH»n.  but  by  20L2.  it  sould  all  be  xvry 
different  once  again.  O  50130 


WANT  008  OPINION? 

OMa«  and  inks  to  arc^wes  01  owMius 

coknfuaieonotr  Vttaii  ale 
ntfw  rmuMiUnurtil  hmn) 


giobal  rwavcii  director 
«t  CSC  Reeeerdi  end 
AdviMfY  Service*,  s 
Computer  Scwflcas 
Corp.  oomparty. 
ConttclMmet 


READERS’ LETTERS 


Municipal  VoIP  Was  an  Easy  Decision 


The  cm  OF  HESPEinA.  cauf., 
msi  underwent  a  VoIP  imple¬ 
mentation  ['VoIP  Gaming  Ground. 
Despite  Co^  Concerns.'  QuickUnk 
48828].  We  Installed  (^’s  AWID 
at  city  hall  and  aH  remote  sites,  in¬ 
cluding  our  fee  and  police  deparl- 
ments.  We  were  approved  funding 
lor  this  protect  because  our  lines 
were  coming  m  on  a  Centrex  phone 
system  and  our  votce-mail  system 
had  readied  the  end  ol  its  life  cycle. 
The  new  circuits  were  provided  at 
lower  cost  than  our  dafe  circurts. 
and  we  no  longer  have  to  pay  the 
standard  charge  lor  each  individual 
phone  line  and  usage  charges. 

lA/e  have  a  little  under  300  end 
users,  and  based  on  our  initial  cost 
analysis,  our  dd  monthly  voce  and 
data  costs  o<  S23.000  wiU  be  re¬ 
duced  lo  $16,000.  a  COS)  savings 
that  has  already  been  witnessed 
wrthm  the  first  month  of  service. 

The  analysis  also  detailed  a  yearly 
cost  which  includes  monthly 
charges  as  well  as  equipment  main¬ 
tenance  and  repair  costs.  Our  yearly 
costs  lor  the  old  voice  and  data  ser¬ 
vices  were  S353.000.  whereas  the 


new  converged  network  will  aver¬ 
age  $248,000.  However,  the  bene¬ 
fits  of  tfes  network  oeafe  an  avenue 
lor  far  greater  advantages  than  can 
be  prelected,  such  as  response 
tvnes  lor  service  calls,  adminislra- 
tmn  overhead,  video  leleconferenc- 
■ng  capaMlies  artd  other  emerging 
technologies 

We  understand  that  VoIP  <s  not 
mature,  but  N  is  the  future  of  com- 
mumcalions.  And  as  our  aty  contin¬ 
ues  to  grow,  we  can  expand  our 
communications  capabilities  to 
meet  our  needs.  For  us.  this  was  an 
easy  decision  to  make. 

Rick  Ochoa 

IS  manager.  City  of  Hesperia. 

rochoa:wcityoptesperia.us 


Don’t  Eluy  tfie  Hype 

WITH  THE  FHONT-PAOE  head¬ 
line  lhal  read  System 
Doesn’i  Make  Grade  m  Indiana* 
[QuickLink  49349].  I  guess  Com- 
puterworidcan  loin  Ihe  likes  of  Ihe 
A^ftonaf  fngunrsr  and  maybe  even 
CBS  News.  The  article  said  that 
less  than  10%  ol  aAl  students  eli?- 


bie  lor  hnanoai  aid  at  Indiana  stale  | 
unwersitieswiN  be  delayed  two  to  i 

three  weeks  m  getting  hmdmg  after  I 
int^aceproble^wNhfend^  i 

How  many  SAP  mslalalions  would 
have  considered  such  delays  a  suc¬ 
cess'?  Tfes  story  was  better  suited 
to  page  14  than  Page  One 
Graily  J.  Abernathy 

EDI  developer.  Burleson.  Texas  | 


What’s  News? 

IKNOWHEAOUNEScanbeiMfi-  I 

cuR  (38llnier  BuHish  on  Future. 
Bearish  on  LirHA.'0iflCkLink  I 

49199). tw really- Ballmer bulish'?  I 

Who’d  have  thoughf?  And  beansh  I 

on  Lmux^  Now  there's  a  change'  ' 

Eric  Sandel  | 

C£0.  SmA.  Cngintvring. 

Truckee.  Calif. 


Don’t  Forget  Data 
On  Leased  Gear 

AU  OF  THE  OtSCUSSIOMS  fve 
seen  j^nut  data  left  on  old 
equipment  tail  to  mention  comput¬ 
ers  that  are  relumed  at  the  conclu¬ 
sion  of  a  leaseCOM  Computers.  An 


I  (TOepanmentUabblyThai'&Cosl- 
I  mg  More.' Quiddjnk  49063]  And 
I  for  the  really  paranoid,  how  about 
I  that  PC  you  sent  back  Iprrepar? 
When  our  CAO  users’ PCs  (and 
servers)  are  replaceq  ttiesoluinn 
we  prefer  1$  oiiie  senpfe  -  we  fold 
the  hard  drwes  m  hall  with  a  break 
press  Think  about  It  The  data  6  on 
a  system  whose  Outdated  haro  drrve 
6  practicalty  worthless  on  the  used- 
equpenem  market 
Jim  Porter 

PrpgramfTUT.  TTii*  Ruvnumii 
Corp..  Grwie.  N.Y. 


Afore  Tetters,  page  2ft 

COMPUTERWORLD  welcomes 
comments  from  Its  readers  Lsneis 
writ  be  edited  kx  Drewty  and  ctanty 
They  should  be  addressed  to 
Jamie  EeWe.  letters  editor,  (kyn- 
Oulcrvyofld.  PO  Box  9lTl  I  Speen 
Street.  Frammgham.  Mass  0T701 
fa*  (500)879-4843  E-mail 
ledersiKomDulerwond  com 
Include  an  adekess  and  phone 
number  for  immediale  verrhcation 

OFor  norc  «»ers  on  ihese  and 
omertopG  goto 

www^empuRerwwWxMifleHm 


www.computerworid  com 
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READERS'  LEHERS 


DON  TENNANT 


Handicapped  Thinki] 

Three  weeks  ago  in  this  space.  I  men¬ 
tioned  that  1  had  a  signed  copy  of  Bill 
Gates'  book  Business  4  the  Speed  cy‘  t**  “  >41 

Thoi^.  and  1  said  I’d  auction  it  off  to  ; 
nhie  money  for  The  ALS  As«ocutk>a  | 
rbc  winning  bid  was  an  even $100.  and  k  came  from  !  *^"*T*T*"' 
keve  lenkins  of  the  M.Dl  Anderson  Cancer  Center 


wWisrwmtnl* 


it-end  mnova- 
r  (lonissofTiettotgall 
F  leaders «  software 
'  technology  settings 
'  shauUpofldet. 

Intermalion  technotogcls 
need  to  rethink  thar  approach  to 

KiMMorari 


Linux  Skeptics 
And  Defenders 
Have  Thek  Say 

Dm  TEMUNT^  COIMENTAflY 
regardng  the  Inn  cornmmy's 
Itarteicapoed  ThnkvioaQiMk^ 
499(}4]6avalidob5erv^nnofasso- 
menl  of  ttal  world.  I  respectUy  teke 
eiception.  however,  to  the  notion  that 
such  naloiiy  is  un^ie.  I  have  read 
sniar  tiarne  tral  horn  Windows  en¬ 
thusiasts.  I  susiwd  It  sooks  more  to 
the  bombastic  style  of 'convarsmg* 
that's  unterlunately  coiTvnonplaca  in 
the  general  cuhure. 

Hamg  cut  my  teeth  on  proprietary 
softwere  development  aid  having 
managedtargesoftwareproductdevel- 
oprnent  efforts  before  expandmg  my 
range  to  ndude  Lmut.  I  can  tel  you 
two  thmgB  aboiA  tite  Urw  cotnrnunity. 

FvsL  the  engmeenng  disopine  of 
dK  folks  who  do  foundation  work  like 
theLjunkemelaodApachettrem^- 
able  and  worth  skidy  by  al  softwve 
pioiect  leaders.  As  technology  protects 
gel  lanjer.  more  complex  and  more 
geogt^ihicaly  depersed.  the  skife. 
technology  and  processes  used  by  the 
most  sucosstul  of  Unux/open-source 
providers  are  lei^  mstruchve. 

Second,  the  ctf^  blendng  of 
strong  conliguialion  management  at 
Ihe  back  end  of  the  process  with  an 
mwtino  adhR  for  unencunbered 


’  software  engmoonng  and  open 
thee  minds  to  how  openness  can 
promote  mprovement  in  the  Qualita¬ 
tive  and  hfctional  capabAbes  of  inter¬ 
nal  systems  and  software  products, 
ther^  Indmg  fo  real  botlorrHine 
advantages. 

We  can  debate  the  place  and  the 
future  of  oper^source  mdiabves  on  a 
technology-by-lechnology  bass.  How¬ 
ever.  I  beheve  imequrvocal  success  has 
been  achieved  by  the  open-source 
community  in  its  pioneenng  of  tech¬ 
niques  that  have  produced  amazing 
quality  and  functional  success  with 
srnaU.  mtiiUingual  taarns  dispersed 
throughout  the  world  and  operating 
with  extraonfmvfy  lean  budgets. 

Everything  accomplished  by  (he 
open-sourcecommunitytendstocon- 
tradid  manstrevn  thought  about  how 
to  buld  systems.  Vet  the  violaiMn  of  or¬ 
thodoxies  hasn't  caused  die  sky  to  fall 
on  the  open-source  effort  or  th^  who 
embrace  open-source  to  meet  re^ 
business  chalenges. 

There's  a  story  there  that  needs  to 
t«  toU  and.  rrwre  mportantly.  under¬ 
stood. 

kUte  Corns 

Vice  president,  products  and 
services.  Lexpar  Corp.,  Staunton. 
Vd,  mike^axms(^lexpar.com 

IAMVBWniaiJARwithbothljrw 
andWlnd(Mrs.andmanyofthecrili- 
esms  and  complainls  people  have 
about  Micrasoft  have  the*  analogues  in 
Linux.  At  the  stage  of  the  game,  either 


operating  system  6  going  to  have  rts 
pros  and  cons.  The  more  we  are  ready 
to  lake  a  steady,  mature  kxA  at  our 
computing  foots.  Ihe  better  likelihood 
that  al  of  them  wi  improve.  We  can 
IhenlelthemarkBl'andnotaurpros- 
elytiang  -  deode  which  systems  win 
prevai 

Kent  Manley 
Fatrfiu,  Va 

Linux  has  its  placl  Windows 
has  Its  place.  Unix  has  its  place.  But 
hale  e-mail  has  no  nghtU  place.  Keep 
lelU^  It  Mte  it  Is.  and  111  keep  reading, 
ffobmt  Deck 

Efectrtcoi  engineer,  Naperville, 

ItL.  bobdeck&ieee.or^ 

The  OVERALL  FECL1M  of  the  article 
(mprossesmeasachaigethalUn- 
ui  evangeists  are  waeftes  hurting  the 
adoption  of  the*  favonie  operahng  sys¬ 
tem.  But  then  I  see  that  Tennant  calls 
Linux  *lhe  operahng  system  of  choice 
for  a  growmg  number  of  Fortune  500 
companies  that  are  using  it  to  run  crib- 
caL  enteronsewide  appications.* 
vrfKh  6  a  pretty  nice  comphment.  And 
fromhisdescnpiionofhiseaflierarti' 
des.  I  draw  the  conclusion  that  Tennant 
has  a  tendency  to  try  to  get  a  rise  out  of 
Linux  enthusiasts.  So  Tm  not  surprised 
that  he  gets  quite  a  bit  of  e-mail  from 
aggravated  Unux  enthusiasls.  Because 
I  have  the  impression  that  he  enjeys 
hateful  e-mat  from  Linux  enthusiasts. 

II  grve  h*n  some.  Mr.  Tennant,  you're  a 
'&$*%5&v  %AtW 

Steve  Utt 

Owner,  ThMjbteshoorcrsxom. 
OrUmdo, 

5ttrt@froubleshoorers.corn 

OHEOFraEFIRSTTHINeSltell 
myWMowssbjdentsis.'MicrD' 
soft  is  a  company;  Windows  e  a  prod¬ 
uct.  Neither  isa  religion.' Moiy  of 
dioGe  students  are  then  surpn^  to 
hear  me  repeal  the  mvitra  in  Unix  topte 
courses  *Unix  s  just  an  opeiating  sys¬ 
tem,  not  a  reHgioa*  We  must  learn  to 
use  the  righi  (ooi  lor  the  right  |ob  at  the 
nghthme.  blanks  lor  helping  to  drive 
home  the  point  to  my  current  crop  of 
future  fT  wDrkersI 
DanHeAHteter 

President.  rr4SOHOLLC.  Clear-  , 
water.  Fid,  dajt@it4soho.com 

WHY  ARE  THERE  Linux  zealots?  I 
Wkhfret^iopni-SQurce  software  i 
(IVOSS).il's  possible,  and  I  dare  say  I 


easy,  to  become  part  of  almost  any  ac¬ 
tive  proiecL  Al  it  lakes  is  a  lot  of  time 
and  a  ftttle  dedkalion.  Find  a  project, 
subscribe  to  the  developer's  mailing 
hst.  become  part  of  the  conversation, 
and  on  occasion,  your  suggestions 
may  become  part  of  the  product  That 
sense  of  belonging  allows  those  who 
are  predisposed  to  zealotry  to  take 
negative  FIOSS  comments  personaly. 

Contributing  to  the.  many  people 
became  part  oi  the  community  after 
losing  important  data  to  a  Microsoft 
Word  bug  or  having  to  deal  with  a  spy¬ 
ware-riddled  system.  Most  foScs  bl^ 
Mterosoft  ter  these  issues,  and  Micro¬ 
soft  makes  it  easy  to  do  so.  So  you  are 
heermo  from  an  active  group  of  people, 
disiilusioned  by  Mterosoft  who  lake 
negative  commentary  petsonaly. 

I  consider  myseH  to  have  a  more  bal¬ 
anced  view.  I  dmt  have  as  much  time 
on  my  hands  as  the  zealote.  and  It 
takes  a  little  more  cajoling  to  gel  me  to 
come  out  and  say  something,  fve  been 
I  involved  In  F/OSS  for  10  years  and  Lin- 
j  ux  lor  six.  Never  before  tiM  I  seen 
such  rnomentum.  Several  Liu  ven¬ 
dors  are  coming  forward  with  desktop- 
ready  distributions  that  doni  require 
in-depth  Linux  knowledge  to  instal  or 
use.  WitfWi  the  next  couple  of  years, 
we  will  see  more  PCs  ship  with  Linux 
prenstaled.  more  haidwere  vendors 
supporting  Linux  at  Ihe  driver  level,  and 
more  momentem  on  ease  of  use  and 
(my  gnpe)  interprofeci  stability. 

Having  faced  the  wrath  of  those  *1 
F/OSS  myself.  I  thank  you  for  continu¬ 
ing  to  say  thiriQS  that  an  leveHieaded 
and  balanced  tf  somebody  were  wining 
to  pay  me  to  spend  my  time  writing 
coternns.  I  would  10*1  youl 
OvyAlenWiMnk 
Director.  IT.  CorVu  North 
America  ItK„  Minneapolis. 
gav@corvu.com 

I  HAVE  SEEN  PROGRAHHINB  CCm- 
putBS  Since  1970  and  have  been  a 
malhematioan  ter  the  past  27  years,  in 
that  time.  I've  seen  operating  systems 
come  and  go.  and  in  the  end.  each  has 
had  Its  own  sbengths  and  weaknesses. 

I  started  With  an  HP 20006 Time- 
Shared  Basic  comouter  and  have  also 
used  TOPS-10  (on  OECsyslem  lOs). 
O0S/d60  (on  IBM  36Qs).  RSTS  and 
RSX-11M  (on  POP-Hs).  VMS  (on  VAXes). 
SCOPE  and  N(}S  (on  COC  machines). 
COS  (on  Grays).  OS/370 (ai  IBM 
370s}.  SunOS,  Solars.  BSOUnix. 

Ulmx.  kn.  VxVteritt.  CPM.  MS-DOS.  M 
WMows  variants.  Mac  OS.  Unux  and 
OS  X.  In  Ml  these  yearn.  I  have  nev¬ 
er  seen  the  Kind  of  zealous  Hitelecfual 
txgMiy  that  surrounds  Linux. 


Ybs.  Windows  has  many  problems, 
and  yes.  Microsolt  has  engaged  n  what 
are  al  the  leasl  predatory  busness  tac¬ 
tics.  But  thte  notion  that  anyone  vvho 
doesn't  march  m  lock  step  behind  the 
penguin  IS  somehow  the  Satanic  spawn 
of  Bill  Gates  is  utteriy  absurd. 

I  mysMf  vastly  prefer  Linux  to  Win¬ 
dows,  but  that's  only  becttse  I  have 
some  ski  in  Unix  variants.  Fd  much 
rather  use  VMS  than  anything  else,  but 
that  train  left  the  station  8  long  line 
ago.  and  they  pMted  up  Ihe  tracks. 

H  borders  on  embarrassmo  to  enter 
inlodiscussionswilhvendorsrBgard- 
ngUnuiwherilheirLjnuxaxpertsal- 
mosi  exude  a  desire  to  cmivert  some¬ 
one  to  the  Irue  religion.*  I  wonder  if  rt's 
a  coincidence  that  Lmx  experts  are 
always  called ‘gurus*? 

In  any  event  In  anolher  five  or  X) 
years,  lam  sure  I  win  be  using  yet  an¬ 
other  operatxig  system,  but  the  nice 
thing  6  that  my  C»*.  C  and  even  my 
Fortran  code  wNI  stilLcompNe.  run  and 
keep  giving  me  the  nght  answers. 

Tikes.  I  think  i  just  stepped  on  the  Java 
community’s  toes! 

OanM  S.  Roesn 

Vice  presidem  0|f  engineeririft 

Burbank.  Caltf. 

Thank  YOU  for  the  article.  I  am  a 
staunch  open-source  software 
advocMe,  but  I  have  te  admit  dial  when 
rt  conies  to  discussioris  MxHJt  Linux 
bong  ready  ter  the  corporate  desktop. 
Linux  users  may  do  more  harm  than 
good. 

MdieMCItfk 

iT  systems  analyst. 

Philadelphia  Miss. 

I  JUST  READ  Don  Tennant's  column 
on  mNilanl  Linux  supporters,  and  I 
coukfn'l  agree  rnore.  As  a  Lirux/Micro- 
soft  network  adminisiTalor.  Tm  conlteu- 
aNy  amazed  al  the  vnount  of  hale  that 
pours  forth  whenever  Mcrosoft  is  men¬ 
tioned  In  a  Slashdot  lorum.  One  in¬ 
stance  stands  out  in  my  mmd  6i 
Gales  had  just  donated  $20  mribon  to 
Carnegie  Melon  UiHverstty  lor  a  state- 
of-the-art  computer  buNding.  to  be 
named  after  him.  RKum  members  were 
incensedHowdarehebuNdacomput- 
er  building  when  he's  done  nothing  but 
wreck  the  mduslryl  Does  he  think  the 
work)  IS  so  blind  that  we  won't  see  this 
lor  tite  Mterosoft  prornohon  thet  It  ceaHy 
«$?  The  few  moderates  who  tried  to 
point  out  that  Gates  was  donating 
about  $20  miion  more  than  the  whole 
forum  put  together  vwre  mmediately 
and  viciously  toasted  in  a  flame  war 
DantelM-LaiiofT 
Pittsburgh 


REASONS  TO  THINK  ABOUT 
HIGH-PERFORMANCE,  AFFORDABLE, 
64-BIT  IBM  SERVERS  WITH  INTEL® 
XEON™  PROCESSORS. 
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EASY  TO  BUY 


15 

IBM  GLOBAL 
FINANCING. 


24 

MICROSOFT* 

READY. 


50 

XTENDED  DESIGN 
ARCHITECTURE.' 


29 

ISV 

EMBRACED. 


13 

LIGHT  PATH 
DIAGNOSTICS. 
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HIGHLY  RELIABLE. 
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RESILIENT  ENOUGH 
TO  HELP  WEATHER 
THE  UNTHINKABLE. 


42 

FASTER  THAN 
EVER. 
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HOT-SWAPPABLE, 

REDUNDANT 

COMPONENTS. 
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39 

VISIBLE 

ALERTS. 


LINUX*  READY 


1 

THE  X226. 
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UPTIME!!! 


11 

CALIBRATED 

VECTORED 

COOLING' 

TECHNOLOGY 
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BRAND-NEW, 
FASTER  W) 
FEATURES. 
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BETTER 

PERFORMANCE. 
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MIGRATE  WHEN 
YOU  WANT  TO. 


10 

SIMPLE  SWAP 
DRIVES. 
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SUSE  LINUX 
READY. 


12 

UNBELIEVABLY 
ADVANCED  SYSTEMS 
MANAGEMENT. 
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e  DIMM  SLOTS. 


IBM  EXPRESS 
PORTFOLIOS 
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CHIPKIU.'  MEMORY 
OPTIONS. 


EASY  TO 
INSTAa. 


REDHAT  READY. 


58 

POWERFUL 
INTEL*  XEON' 
PROCESSORS, 


7 

OPTIMIZED 
FOR  HACKS. 


21 

LOW,  LOWTCO. 


63 

HIGHLY 

AVAILABLE 
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EASY  TO 
MANAGE. 


INTEGRATED 

RAID. 


NEW  LEVELS  OF 
PERFORMANCE 
DENSITY. 


14 


31 

REMOTE  MANAGEMENT 
FROM  ANYWHERE  ON 
THE  NETWORK 


64 

MAINFRAME-INSPIRED 

TECHNOLOGIES 


24-HOUR 

REMOTE  SUPPORT. 


3 

THE  X336. 


9 

FOOTPRINTS 
START  AT  1UX  27': 


32 

FOUR  HARD  DRIVES 
IN  A  1U  SERVER 


HIGHLY  FLEXIBLE.  ATTACHMENT. 


53 

UP  TO  42  SERVERS  IN 
STANDARD  RACKS. 


59  41 

CREATED  FOR  MORE  JUICE. 

MID-SIZED 

BUSINESSES. 


44 

REMOTE  SERVICING- 


35 


8 

PRICES  START 
AT  $1,179: 


REMOVE  “ADD  AN 
APR  ADD  A  SERVER" 
FROM YOUR 
VOCABULARY. 


56 

BUILT  WITH 
YOU  IN  MIND. 


18  23 


BETTER 

PERFORMANCE  WITH 
NEW  INTEL  XEON 
PROCESSORS. 


17 


ULTRA  SCALABLE.  MEMORY 

MIRRORING. 


PLUG  AND 
PLAY. 


@  sei*ver 

WHY  IBM? 

The  IBM  eServer'*"  xSeries^  family  with  Intel  Xeon 
Processor-based  Xtended  Design  Architecture  is 
the  next-generation  architecture  designed,  priced 
and  supported  for  businesses  of  every  size. 

Giving  you  unbelievably  high  performance  at  an 
unbelievably  low  price. 

The  entry-level  x226  is  the  most  affordable  xSeries 
system  in  the  2-way  space.  The  x236  offers 
maximum  internal  scalability  in  an  IBM  industry- 
standard  tower.  Our  x336  gives  you  new  levels  of 
performance  density  in  a  2-way  rack-mounted  system. 
And  the  x346  offers  exceptional  scalability  and 
flexible  growth  in  a  2U  system. 

Of  course,  all  of  these  systems  are  powered  by 
state-of-the-art  64-bit  Inter  Xeon’“  Processors. 

Now  let's  talk  about  storage  attachments  for  your 
eServer  xSeries  systems.  Let’s  talk  IBM  TotalStorage* 
systems.  The  entry-level  DS300  is  for  businesses  of 
any  size.  Rack-ready,  it’s  designed  to  let  you  pay  as 
you  grow.  The  very  hard  to  outgrow  DS400  is  xSeries 
storage  to  the  max.  Fast.  Expandable.  And  it  scales 
up  to  5.8  terabytes.’  Both  share  reliability  and  data 
protection  features  found  in  IBM  eServer  solutions. 

Now.  what  if  you're  a  mid-sized  business  with  little  or 
no  IT  staff?  Enter  the  IBM  Express  Portfolio.  All  of  the 
above  xSeries  and  storage  products  offer  Express 
models,  specifically  designed  and  optimized  for  mid¬ 
sized  businesses.  IBM  Express  offerings  are  easy  to 
configure.  Easy  to  irtstall.  Easy  to  manage.  And  easy 
on  the  checkbook. 

IBM  EXPRESS  PORTFOLIO  -  BUILT  FOR  MID-SIZED  BUSINESSES 

QQ  DEMAND  BUSINESS 


WHY  64-BIT? 

IBM'S  innovations  are  ideal  complements  for  64-bit 
Intel  Xeon  Processors:  light  path  diagnostics. 
Calibrated  Vectored  Cooling;  remote  monitoring; 

8  DIMM  slots.  We  ve  got  it  all 

IBM  eServer  xSeries  systems  are  cost-effective  by 
almost  every  measure  of  TCO.  And  almost  every 
measure  of  ROI.  They  fit  in  standard  racks  and  are 
easily  scalable. 

Our  new  Xtended  Design  Architecture  works  with 
your  32-bit  industry-standard  apps.  And  your  new 
64-bit  industry-standard  apps.  And  those  32-bit 
and  64-bit  apps  that  are  still  on  the  drawing  board. 

WHY  NOW? 

TTiis  is  the  future.  This  is  where  developers  are  going. 
Where  the  industry  standard  is  forming.  Where 
business  is  headed. 

The  transition  is  well  under  way.  Above  all.  64-bit 
is  stable.  It’s  reliable.  It’s  powerful,  It's  fast.  It's  here. 
And  we’re  paving  the  way. 

Every  64-bit-enabled  xSeries  server  is  designed  to 
have  more  memory,  which  allows  you  to  run  more 
powerful  apps.  And  if  you're  reticent  about  making 
the  move  to  64-bit,  relax.  Xtended  Design 
Architecture  actually  enhances  your  32-bit  apps,  so 
you  can  do  more  with  what  you  already  have.  Do 
more  now.  Do  more  later.  Do  more  period  with  64-bit 
Intel  Xeon  Processors  and  IBM  Xtended  Design 
Architecture. 

These  servers  and  storage  units  are  designed  with 
one  thing  in  mind -you.  It's  an  exciting  story.  You 
need  to  learn  more  at  lbm.coiii/eserver/64reasons 
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FUTURE  WATCH 

Petabyte  Prognostications 

EDS  futurist  Jeff  Wacker  is  woridi^ 
with  new  tools  to  handle  the  coming 
information  explosion  and  to  help 
mobile  workers,  “the  orphans  of  the 
information  revolution."  Pme42 


EMERGINO  TECHNOLOGIES 

CPUs  Rev  New  Engines 

Multicore  CPU  designs  boost  perfor¬ 
mance  by  putting  two  or  more  proc¬ 
essing  engines  on  a  single  chip.  The 
processors  should  run  cooler,  faster 
and  more  eflficiently.  PAge  40 


SECURITY  MANAOER’S  JOURNAL 

Sarb-Ox  Project 
Following  Script 

Mathias  Thurman  and  his  colleagues 
have  gotten  over  the  hump  in  their  effort 
to  comply  with  the  provisions  of  the 
Sarbanes-OxJey  Act.  Page  44 
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I  IN  A  QUIET  CORNER 

I  office  of  Chicago 
^Mercantile  Ex¬ 
change  Inc.,  high 
above  the  steady  roar  of  shouting 
trado^  on  the  exchange  floor, 
Joseph  PanfU,  director  of  distrib¬ 
uted  computing,  is  focused  on  the 
smallest  increments  of  time. 

There  is  a  direct  relationship  be¬ 
tween  system  performance  and 
trading  volume  at  the  CME,  also 
known  as  the  Merc.  By  reducing 
the  amount  of  time  it  takes  to  proc¬ 
ess  a  trade,  trading  volume  ^^an  in¬ 
crease.  The  more  trades  there  are, 
the  more  trading  fees  the  evrhangy 
collects. 

Time  is  the  bottom-line  metric  of 
PanfU's  wForld.  "Everythii^  in  the 
trading  world  is  a  matter  of  ^lit 
seconds,"  he  says. 

PanTil  is  part  of  a  team  imple- 
mentii^  system  changes  that  have 
so  far  reduced  round-trip  trading 
times  from  about  1300  millisec¬ 
onds  in  1998  to  350  milliseconds  to¬ 
day.  Five  trades  can  now  be  con¬ 
ducted  in  the  time  it  used  to  take 
to  complete  one. 

To  cut  times  further  and  reduce 
IT  costs,  the  CME  is  pursuing  a 
major  IT  overhaul  that  involves  a 
gradual  adoption  of  the  Linux 
operating  system  on  Intel-based 
servers  while  moving  off  Sun  Mi¬ 
crosystems  Inc.’s  Solaris  and  Sparc 
hardware.  The  conversion  b^^ 
about  a  year  ago  and  is  now  30% 
complete. 

Complu  Architecture 

The  CME*s  architecture  consists  of 
three  major  technologies:  Unix  and 
Linux  systems  handle  the  input 
paths  for  orders  and  output  paths 
for  quotes.  Hewlett-Packaid  Co. 
NonStop  servers  send  out  order 
confirmations  and  quotes.  And 
IBM  mainframes  are  responsible 
for  "clearii^"  or  processing,  of 
all  trades. 

Traders  still  woric  shoulder  to 
shoulder  on  the  CME’s  floor,  but 
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Exchani 
Makes  uniix 


The  Chicago  Mercantile  Exchange  credits  its 
migration  to  commodity  Intel-based  servers  and 
Linux  with  cutting  costs  and  shaving  100  miili- 
seconds  off  the  time  required  to  complete  a  trade. 
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Petabyte  Prognostications 
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^IN  A  QUIKT  COKNKR 
office  of  Chicago 
Mercantile  Ex¬ 
change  Inc.,  high 
above  the  steady  roar  of  shouting 
traders  on  the  exchange  floor, 
Joseph  Panfil,  director  of  distrib¬ 
uted  computing,  is  focused  on  the 
smallest  increments  of  time. 

There  is  a  direct  relationship  be¬ 
tween  system  performance  and 
trading  volume  at  the  CME,  also 
known  as  the  Merc.  By  reducing 
the  amount  of  time  it  takes  to  proc¬ 
ess  a  trade,  trading  volume  can  in¬ 
crease.  TTie  more  trade's  there  are. 
the  more  trading  fees  the  exchange' 
collects. 

Time  is  the  bottom-line  metric  of 
Panfil’s  world.  “Everything  in  the 
trading  world  is  a  matter  of  split 
seconds,”  he  says. 

Panfil  is  part  of  a  team  imple¬ 
menting  system  changes  that  have 
so  far  reduced  round-trip  trading 
times  from  about  1,800  millisec¬ 
onds  in  1998  to  350  milliseconds  to¬ 
day.  Five  trades  can  now  be  con¬ 
ducted  in  the  time  it  used  to  take 
to  complete  one. 

To  cut  times  further  and  reduce 
IT  costs,  the  CME  is  pursuing  a 
major  IT  overhaul  that  involves  a 
gradual  adoption  of  the  Linux 
operating  system  on  Intel-based 
servers  while  moving  off  Sun  Mi¬ 
crosystems  Inc.’s  Solaris  and  Sparc 
hardware.  The  conversion  began 
about  a  year  ago  and  is  now  30% 
complete. 

Complex  Architecture 

TTie  CME’s  architecture  consists  of 
three  major  technologies:  Unix  and 
Linux  systems  handle  the  input 
paths  for  orders  and  output  paths 
for  quotes.  Hewlett-Packard  Co. 
NonStop  servers  send  out  order 
confirmations  and  quotes.  And 
IBM  mainframes  are  responsible 
for  “clearing.”  or  processing,  of 
all  trades. 

Traders  still  work  shoulder  to 
shoulder  on  the  CME’s  floor,  but 
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CPUs  Rev  New  Engines 

Multicorc  CPU  designs  boost  perfor¬ 
mance  by  putting  two  or  more  proc¬ 
essing  engines  on  a  single  chip.  The 
processors  should  run  cooler,  faster 
and  more  efficiently.  Page  40 
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Mathias  Thurman  and  his  colleague's 
have  gotten  over  the  hump  in  their  effort 
to  comply  with  the  provisions  of  the 
Sarbancs-Oxley  Act  Page  44 


•'Everything  in  the  trading  world  is  a  matter  ol  split  seconds."  says  the  Merc's  Joseph  Panfil 
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The  Chicago  Mercantile  Exchange  credits  its 
migration  to  commodity  Intel-based  servers  and 
Linux  with  cutting  costs  and  shaving  100  milli¬ 
seconds  off  the  time  required  to  complete  a  trade. 
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since  lunc.  the  niuiorilv  of  trades  have 
Kvn  handlcsi  hy  the  Merc's  electronic 
iradin^:  system.  Ulobes.  The  Merc  be- 
jMn  electronic  trading  in  the  early 
I't'tK.  u-sin}i  a  third-party  system  to 
suppi^n  after-hours  trading.  In  1W8.  it 
intrtvduccd  its  own  system. 

t'ustomcrs  want  reliability  and 
speed  in  eleetn.»nie  tradinj:  environ¬ 
ments.  says  lames  Krause,  the  Mere's 
CIO.  Balancing:  those  two  prii>rilics 
means  that  the  e^change.  vvhile  inter¬ 
ested  in  performance-improvinj:  tceh- 
milopies.  isn't  likely  to  be  the  first 
adopter  of  a  new  system.  "Whatever 
%ke  do.  we  have  to  make  it  work  right 
and  make  sure  it's  fast."  Krause  says. 

Trading  times  have  been  improved  by 
making  applications  more  responsive, 
upgrading  server  CPUs  and  undertak¬ 
ing  arehitccfural  changes  to  reduce  the 
number  of  hops  in  the  path  of  a  trade. 
For  instance,  the  process  previously 
used  to  include  a  disk  write,  but  that 
has  K'cn  moved  out  of  the  direct  p.ith 
of  a  trade. 

The  decision  to  use  l.inus  and  move 
to  fast  Intel  Corp.  chips  also  led  to  a 
reduction  in  trading  time.  The  Mere 
eredii.s  its  Linus  deployment  with 
euning  the  time  it  lakes  to  process  a 
trade  by  about  100  milliseconds  to  the 
current  .^50  millisc*eond.s.  The  goal  is 
to  reduce  that  to  100  mj|lisv*conds.  E.\- 
ehangc  officials  say  they  believe  that 
using  faster  Intel  chips  will  bring  them 
haJfvvay  toward  that  gvtal  and  that  ap¬ 
plication  optimization  on  the  NonSt«)p 
servvrs  will  take  caa*  of  the  rest. 

But  the  Mea's  interest  in  Linux  was 
jIm)  sparked  by  a  desire  to  save  money. 
Leveraging  competition  among  ven* 
dor^  of  Intel-based  commodity  hard¬ 
ware  is  an  important  element  of  this 
strategy  .  “Om*  of  the  things  that  we 
were  try  ing  tt>  do  with  Linux  is  to  be 
totally  agnostic  and  not  gel  tied  initi  a 
vcndtvr."  says  Panfil. 

Even  K'fore  the  Mere  deployed  any 
Linux  systems,  it  had  already  reduced 
some  costs.  “We  started  using  that 
cost  goal  against  Sun  to  get  them  to 
lower  their  price  and  be  more  compei- 
itive."  Panfil  says.  In  one  case.  Sun  re-  ' 
duced  the  price  for  an  SI8.0(H)  two- 
way  UltraSparc  server  to  less  than 
SIO.OOO.  That  reduction  came  “just  by 
having  that  eompeiiiive  threat."  says 
Panfil.  However,  a  comparable  twtr 
way  Intel-based  server  eusi  just 
S3.000.  he  notes. 

Preparing  for  Linux 

The  Merc  had  to  address  several  issues 
before  it  could  deploy  Linux.  Third- 
party  software  had  to  be  approved  to 
run  on  the  operating  system  and  tested 
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The  Merc's 
Transition  to  Intel/ 
Linux  Servers 


for  speed  and  stability.  And  the  Merc's 
technical  stafT also  needed  training. 

There  are  19  people  in  its  Unix  area, 
and  .some  were  already  well  versed  in 
Linu.x.  "They  were  doing  this  stuff  in 
the  basement  of  their  homes.  It  was 
good  that  we  had  some  people  on  the 
leading  edge."  says  Panfil.  When  some 
Solaris  administrators  resisted  the 
change.  I*anni  told  them  Linux  knowt- 
!  L-dpe  would  broaden  their  skills.  “Why 
not  gel  that  other  skill?"  he  told  them. 

Testing  also  showed  that  the  Merc 


j  could  move  some  applications  off  a 
I  four-CPU  Spare-based  server,  replace 
]  it  with  3  two-way  Intel-based  com¬ 
modity  server  and  not  lose  any  perfor¬ 
mance.  Moreover,  the  leaner  Linux 
code  helped  .speed  up  performance  on 
some  applications. 

When  the  Merc  began  considering 
its  Linux  deployment  more  than  a  year 
ago,  Sun  knew  it  wasn't  in  a  strong  po¬ 
sition  to  compete.  "We  didn't  have  a 
good  answer  for  them."  acknowledges 
Glenn  Weinberg,  vice  president  of  the 
operating  platforms  group  at  Sun. 

At  the  lime.  Sun  didn't  have  its  x86 
product  line  or  Solaris  running  on  x8fi 
in  "any  serious  way."  Weinberg  says. 

I  But  today,  he  notes,  "those  things  have 
btith  changed.”  The  vendor  has  made  a 
"tremend<»us  investment"  in  getting 
Solaris  to  run  on  x8<»-bascd  machines, 
and  Solaris  is  ouiperf«)rming  Linux  on 
I  some  financial  services  applications. 

I  Weinberg  claims.  Sun’s  x86  line  in- 
I  eludes  Advanced  Micro  Devices  Inc.'s 
Opteron  priK'cssors  and  Intel's  Xeon. 
"We  think  we’re  in  an  increasingly 
I  good  position  there."  he  says. 

CMF.'s  goal  is  to  cvtnveri  45%  of  its 
Solaris  systems  to  Linux  by  year’s  end. 
Originally,  the  e.xchangc  planned  to  mi¬ 
grate  ail  of  its  Sv'rvers  off  Solaris,  but 
applications  on  many  of  the  .serxers  arc 
written  specifically  for  Solaris,  and  it 
now  has  no  plans  to  migrate  those. 

Dan  Kusneizky.  an  analyst  at  IDC  in 
Framingham.  Mass.,  says  the  Solaris 
kernel  may  be  better  tested,  more  reli¬ 
able  and  more  sealable  than  Linux.  But 
he  sees  Linux,  and  the  freedom  it  rep¬ 
resents.  as  having  p<»werful  appeal  to 
businesses.  Whether  .Sun's  late  re¬ 
sponse  can  ciHjnter  the  threat  remains 
to  be  seen,  "li’s  going  to  be  difficult  to 
come  back  and  rectner  that  cerriiory." 
he  says. 

Still,  the  Merc  isn't  ck>sing  the  door 
on  Solaris.  Panfil  will  continue  to  eval¬ 
uate  Sun’s  product.s.  and  he  says  the 
vendor’s  planned  year-end  rollout  of 
Solaris  10,  which  will  run  on  Opteron 
processors,  could  be  a  viable  alterna¬ 
tive  to  Linux.  Panfil  isn’t  worried 
about  supporting  both  operating 
systems.  "We  have  proven  we  can 
support  Solaris  and  Linux  in  parallel.” 
he  says,  citing  (he  expertise  available  I 
on  his  staff. 

The  move  to  commodity-ba.sed  sys¬ 
tems  lias  also  made  (he  Merc  more  ag 
gressive  in  seeking  the  best  deals.  HP 
is  supplying  the  x86  servers  the  cx-  i 
change  uses,  but  Panfil  says  it  could 
just  as  easily  buy  from  IBM.  | 

The  Merc  is  unlikely  to  return  to  1 
RISC-based  servers  brcausc  Intel  box-  I 
es  have  the  investment  edge,  says  I 


Chief  Technology  Officer  Charlie 
!  Troxcl.  “There  arc  huge  leaps  in  per- 
[  formance  ability  on  that  side  of  the 
'  space."  he  says.  “The  world  has  gone  to 
i  commodity  hardware,  and  we  might  as 
well  be  there  too." 


Support  Headaches 


A  key  issue  with  the  Mere's  use  of  Lin¬ 
ux  is  support.  With  Sun.  Panfil  says, 
the  Merc  deals  with  a  mature  and  re¬ 
sponsive  support  organization  that  will 
immediately  fly  out  a  kernel  expert  if 
;  needed.  Bui  he  says  he  thinks  the 
Mere's  Linux  vendor.  Red  Hat  Inc., 
needs  to  improve  its  support.  Current¬ 
ly.  ho  says.  Red  Hal  emphasizes  pur¬ 
chasing  more  products  as  a  way  to  fix 
problems.  "When  there  are  issues,  they 
need  to  step  up  better."  Panfil  says. 

Michael  Ticmann.  Red  Hat's  vice 
president  of  open-source  affairs,  says 
he  understands  Panfil's  concerns:  he 
acknowledges  that  his  company  is  still 
I  learning  and  says  it  is  making  changes. 

I  Ticmann  says  that  Red  Hat’s  g«>.il  is 
to  sell  products  upfront  and  that  the 
important  thing  is  that  when  the  Merc 
had  problenus.  they  were  soked.  "Ulli- 
mately.  Red  Hat  was  able  to  dig  into  its 
leehnkMl  knowledge  and  expertise . . . 
and  help  that  customer  get  to  the  place 
that  they  wanted."  he  says. 

Panfil  says  the  Merc’s  hands  aren’t 
lied  by  any  vendor,  and  he  uses  compe¬ 
tition  to  get  the  terms  and  support  he 
wants.  In  particular,  he  points  to  Nov¬ 
ell  Inc.’s  acquisition  of  SUSE  Linu.x 
AG.  which  look  place  after  the  Merc 
decided  to  use  Red  Hat  Linux.  The 
Merc  is  evaluating  SUSE  Linux  in  its 
labs.  "Our  threat  to  a  vendor  is  we  can 
fire  you  at  any  time.”  he  says. 

The  Merc's  push  also  involves  build¬ 
ing  data  centers,  loisi  year,  it  opened  a 
remote  facility  with  sophisticated  cool¬ 
ing  facilities  capable  of  handling  very 
dense  blade  servers,  if  a  decision  is 
made  to  deploy  them.  The  Merc  is  alsti 
using  code  control  and  configuration 
management  software  from  BladcLog- 
ic  Inc.  in  Waltham.  Mass.  The  vendor 
provides  the  IikjIs  needed  to  create  au¬ 
dit  trails  for  compliance  with  federal 
laws,  says  Panfil. 

Whether  electronic  trading  replaces 
noisy  traders,  or  "open  outcry,"  as  It’s 
called,  remains  to  In;  seen,  but  the  in¬ 
frastructure  changes  w  ill  ensure  that 
the  Merc  is  ready.  "If  we  weren’t  reli¬ 
able  and  weren’t  as  fast  as  our  com¬ 
petitors.  we  wouldn’t  sec  the  explosive 
growth  that  we  have  seen  in  the  transi¬ 
tion  from  an  open-outcry  environment 
to  an  electronic  iradii^  environment." 
says  Krause.  “Our  future  is  electronic 
trading."  O  49769 
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since  lunc,  the  maiority  of  trades  have 
been  haodJed  by  the  Merc's  electronic 
trading  system.  Globcx.  The  Merc  be¬ 
gan  electronic  trading  in  the  early 
1990s.  usir^  a  third-party  system  to 
support  after-hours  trading.  In  199S.  it 
introduced  its  own  system. 

Customers  want  reliabiUry  and 
speed  in  electronic  tradiitg  environ¬ 
ments.  says  James  Krause,  the  Merc’s 
CIO.  Balancing  those  two  priorities 
means  that  the  exchange,  while  inter¬ 
ested  in  performance-improving  tech¬ 
nologies.  isn't  Ulcely  to  be  the  first 
adopter  of  a  new  system.  '’Whatever 
wc  da  we  have  to  make  it  work  right 
and  make  sure  it's  Krause  says. 

Trading  times  have  been  iroprov^  by 
making  applications  more  responsive, 
upgrading  server  CPUs  and  undertak¬ 
ing  architectural  changes  to  reduce  the 
number  ofhops  in  the  path  of  a  trade. 
For  instance,  the  process  previously 
used  to  include  a  disk  write,  but  that 
has  been  moved  out  of  the  direct  path 
of  a  trade. 

The  decision  to  use  Linux  and  move 
to  fast  Intel  Corp.  chips  also  led  to  a 
reduction  in  tradu^  time.  The  Merc 
credits  its  Linux  deployment  with 
cutting  the  time  it  takes  to  process  a 
trade  by  about  100  milliseconds  to  the 
current  3S0  milliseconds.  The  goal  is 
to  reduce  that  to  100  milliseconds.  Ex¬ 
change  officials  say  tbc>'  believe  that 
usii^  faster  Intel  chips  will  bring  them 
haifsvay  toward  that  goal  and  that  ap¬ 
plication  optimization  on  the  NooStop 
servers  will  take  care  of  the  rest 

Bui  the  Merc's  interest  in  Linux  was 
also  sparked  by  a  desire  to  save  money. 
Leveraging  competition  among  ven¬ 
dors  of  Intel-based  commodity  hard¬ 
ware  is  an  important  element  of  this 
strategy.  “One  of  the  things  that  we 
were  trying  to  do  with  Linux  is  to  be 
totally  agnostic  and  not  ^t  tied  into  a 
vendor,"  says  Panfil. 

Even  before  the  Merc  deployed  any 
Linux  systems,  it  had  already  reduced 
some  costs.  “We  started  using  that 
cost  goal  against  Sun  to  get  them  to 
lower  their  price  and  be  more  compet¬ 
itive."  Panfil  says.  In  one  case.  Sun  re¬ 
duced  the  price  for  an  $18,000  two- 
way  UltraSparc  server  to  less  than 
SIOXXM).  That  reduction  came  “just  by 
havii^  that  competitive  threat"  says 
Panfil  However,  a  comparable  two- 
way  Intel-based  server  cost  just 
$34)00.  he  notes. 

PraparingfnrUmn 

The  Merc  had  to  address  several  issues 
before  k  could  deploy  Linux.  Third- 
party  software  had  to  be  approved  to 
run  on  the  operating  system  and  tested 


for  speed  and  stability.  And  the  Merc's 
technical  staff  also  n^ed  training. 

There  are  19  people  in  its  Unix  area, 
and  some  were  already  well  versed  in 
Linux.  ‘They  were  doing  this  stuft  in 
the  basement  of  their  homes.  It  was 
good  that  wc  had  some  people  on  the 
leading  edge,"  says  Panfil  When  some 
Solaris  administrators  resisted  the 
change.  Panfil  told  them  Linux  knowl¬ 
edge  would  broaden  their  skills.  "Why 
not  get  that  other  skill?"  be  told  them. 

Testing  also  showed  that  the  Merc 


could  move  some  applications  off  a 
four-CPU  Sparc-based  server,  replace 
it  with  a  two-way  Intel-based  com¬ 
modity  server  and  not  lose  any  perfor¬ 
mance.  Moreover,  the  leaner  Linux 
code  helped  speed  up  performance  on 
some  applications. 

When  the  Merc  began  considering 
its  Linux  deployment  more  than  a  year 
aga  Sun  knew  it  wasn’t  in  a  strong  po¬ 
sition  to  compete.  “We  didn’t  have  a 
good  answer  for  them,"  acknowledges 
Glenn  Weinberg,  vice  president  of  the 
operating  platforms  group  at  Sun. 

At  the  time,  Sun  didn't  have  its  x86 
product  line  or  Solaris  running  on  x66 
in  “any  serious  way."  Weinberg  says. 
But  today,  he  notes,  Those  things  have 
both  changed."  The  vendor  has  made  a 
Tremendous  investment"  in  getting 
Solaris  to  run  on  x86-based  machines, 
and  Solaris  is  outperforming  Linux  on 
some  flnaitcial  services  applications, 
Weinberg  claims.  Sun's  line  in¬ 
cludes  Advanced  Micro  Devices  Inc.’s 
Opteron  processors  and  Intel’s  Xeon. 
"We  think  we're  in  an  increasingly 
good  position  there,"  he  says. 

CME’s  goal  is  to  convert  4S%  of  its 
Solans  systems  to  Linux  by  year’s  end. 
Originally,  the  exchange  planned  to  mi¬ 
grate  all  of  its  servers  off  Solans,  but 
applications  on  many  of  the  servers  are 
written  specifically  for  Solaris,  and  it 
now  has  no  plans  to  migrate  those. 

Dan  Kusnetzky,  an  analyst  at  IDC  in 
Framingham,  Mass.,  says  the  Solaris 
kernel  may  be  better  tested,  more  reli¬ 
able  and  more  scalable  than  Linux.  But 
be  sees  Linux,  and  the  freedom  it  rep¬ 
resents.  as  having  powerful  appeal  to 
businesses.  Whether  Sun’s  late  re¬ 
sponse  can  counter  the  threat  remains 
to  be  seen.  "It’s  going  to  be  difficult  to 
come  back  and  recover  that  territory." 
he  says. 

Still,  the  Merc  isn’t  closit^  the  door 
on  Solaris.  Panfil  will  continue  to  eval¬ 
uate  Sun’s  products,  and  be  says  the 
vendor’s  planned  year-end  rollout  of 
Solaris  10.  which  will  run  on  Opteron 
processors,  a>uld  be  a  viable  alterna¬ 
tive  to  Linux.  Panfil  isn't  worried 
about  supporting  both  operating 
systems.  *TVe  have  proven  we  can 
support  Solaris  and  Linux  in  paraUel,” 
he  says,  citii^  the  expertise  available 
on  his  staff. 

The  move  to  commodity-based  sys- 
lems  has  also  made  the  Merc  more  ag¬ 
gressive  in  seeking  the  best  deals.  HP 
is  supplying  the  x86  servers  the  ex¬ 
change  uses,  but  Panfil  says  it  could 
just  as  easily  buy  ftom  IBM. 

The  Merc  is  unlikely  to  return  to 
RISC -based  servers  because  Intel  brac¬ 
es  have  the  investment  edge,  says 


Chief  Technology  Officer  Charlie 
Troxel.  “There  arc  huge  leaps  in  per¬ 
formance  ability  on  that  side  of  the 
space."  he  says.  The  world  has  gone  to 
commodity  hardware,  and  we  might  as 
well  be  there  too." 

Support  Headaches 

A  key  issue  with  the  Merc's  use  of  Lin¬ 
ux  is  support.  With  Sun,  Panfil  says, 
the  Merc  deals  with  a  mature  and  re¬ 
sponsive  support  organization  that  will 
immediately  fly  out  a  kernel  expert  if 
needed  But  he  says  be  thinks  the 
Merc's  Linux  vendor.  Red  Hat  Inc., 
needs  to  improve  its  support.  Current¬ 
ly,  he  says.  Red  Hat  emphasizes  pur¬ 
chasing  more  products  as  a  way  to  fix 
problems.  “When  there  are  issues,  they 
need  to  step  up  better,"  Panfil  says. 

Michael  Ticmann,  Red  Hat's  vice 
president  of  open-source  affairs,  says 
he  understands  Panfii’s  concerns:  he 
acknowledges  that  his  company  is  still 
learning  and  says  it  is  making  changes. 

Tiemann  says  that  Red  Hat's  goal  is 
to  sell  products  upfrcmi  and  that  the 
important  thing  is  that  when  the  Merc 
had  problems,  they-were  solved.  "Ulti¬ 
mately.  Red  Hat  was  able  to  dig  into  its 
technical  knowledge  and  expertise . . . 
and  help  that  customer  get  to  the  place 
that  they  wanted."  he  says. 

Panfil  says  the  Merc’s  hands  aren't 
tied  by  any  vendor,  and  he  uses  compe¬ 
tition  to  get  the  terms  and  support  he 
wants.  In  particular,  he  points  to  Nov¬ 
ell  Idc.’s  acquisition  of  SUSE  Linux 
AG.  which  took  place  after  the  Merc 
decided  to  use  Red  Hat  Linux.  The 
Merc  is  evaluating  SUSE  Linux  in  its 
labs.  “Our  threat  to  a  vendor  is  we  can 
fire  you  at  any  tima"  be  says. 

The  Merc’s  push  also  involves  build¬ 
ing  data  centers.  Last  year,  it  opened  a 
remote  focility  with  sophisticated  cool¬ 
ing  facilities  capable  of  handling  very 
dense  blade  servers,  if  a  decision  is 
made  to  deploy  them.  The  Merc  is  also 
using  code  control  and  configuration 
management  software  from  BladeLog- 
ic  Inc.  in  Waltham.  Mass.  The  vendor 
provides  the  tools  needed  to  create  au¬ 
dit  trails  for  compliance  with  federal 
laws,  says  Panftl 

Whether  electronic  trading  replaces 
noisy  traders,  or  "open  outcry,"  as  it’s 
called,  remains  to  seen,  but  the  in¬ 
frastructure  changes  will  ensure  that 
the  Merc  is  ready.  “If  wc  weren’t  reli¬ 
able  and  weren’t  as  fist  as  our  com¬ 
petitors.  we  wouldn't  see  the  explosive 
grravth  that  we  have  seen  in  the  transi¬ 
tion  from  an  open-outcry  environment 
to  an  ekctronic  trading  environment.” 
says  Krause.  "Our  future  is  electronic 
trading."  048789 
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As  a  federal  law  paving  the  way 
for  electronic  check  imaging  goes 
into  effect  this  week,  banks  are 
still  putting  technology  in  place 
tomakeitworkinfLUCASIEMIjUl 

This  week,  U,S.  banks  will  The  legislation  doesn’t  force  fi* 
reach  the  first  mandated  nancial  institutions  to  exchange 
milestone  on  the  way  to  IRDs  electronically.  However,  most 
what’s  arguably  the  biggest  large  banks  are  already  well  on  their 

change  in  the  way  they  way  to  upgradii^  their  front-end 

process  checks  since  Ae  systems  for  electronic  check-image 
introduction  of  m^netic  ink  char-  capture  and  back-end  processing 

acter  recognition  almost  a  half-  systems  in  order  to  take  advantage 

century  aga  of  the  efficiencies  that  electronic 

On  Oct.  28,  the  Check  Clearing  IRD  processing  will  create, 
for  the  21st  Century  Act,  or  Check  Check  21  was  proposed  to  re- 
21.  will  require  that  banks  accept  duce  paper  handling,  collection 
paper  documents  with  check  im-  time,  clearing  expenses  and  fraud 

ages  and  data  related  to  trans-  while  improving  fund  availability 

actions  in  lieu  of  original  paper  and  the  collection  of  nonsufficient- 

cbecks,  uiiich.  once  digitized,  can  fund  items.  But  some  institutions 
then  be  destroyed.  have  raised  concerns  about  the 

The  image  replacement  docu-  changes,  primarily  those  related 
ments  <IRD)  will  also  allow  banks  to  the  hi^  cost  of  new  systems 

to  transmit  check  images  electroni-  and  the  increased  potential  for 
calty,  eliminating  the  need  to  ship  fraud.  For  example,  IRDs  lack  se- 
paper  checks  around  the  country  curity  featiues  that  are  available 

for  clearance  and  settlement.  Continued  on  page  38 
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"Instead  of  putting  out  fires,  we  now  focus  on  ways  we  can 
deploy  new  technologies  that  benefit  our  customer  service." 

Dave  Chacon 

Manager,  Technical  Services.  PING 
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partners,  and  employees.  Software  that's  easier  to 
manage  is  software  that  helps  you  do  more  with  less. 
Get  the  full  PING  story  at  mkrosoftcomAvssystem 
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on  paper  checks,  such  as  watermarks. 

But  there’s  no  need  for  companies  to  panic  be* 
cause  of  the  impending  deadline,  say  many  in  the 
industry  Involved  in  orchestrating  the  transition. 

There  are  a  lot  of  people  who  are  all  gloom  and 
doom  about  what’s  going  to  happen  on  Oct.  28.  but 
this  is  an  evolutionary  process  that  has  got  to  fit  to¬ 
gether  many  pieces,"  says  John  Feldman,  an  image 
transactions  executive  in  the  technology  and  opera¬ 
tions  group  of  Bank  of  America  Corp.  in  Charlotte. 
N.C  "I  believe  it’ll  be  years  before  the  industry 
reaches  image  exchai^  volume." 

Bank  of  America  has  made  investments  in  check¬ 
scanning  devices  and  imaging  technology  and  is 
evaluating  whether  to  roll  out  that  technolog>'  in  its 
branches,  automated  teller  machines  and  regional 
check-processing  centers,  says  Feldman. 

Nuts  and  Bolls 

Most  of  the  nation's  top  SO  banks  have  made  signifi¬ 
cant  investments  in  imaging  technology,  experts  say. 
but  they  have  yet  to  purchase  systems  to  send  check 
images  to  other  banks  or  integrate  back-cnd  systems 
that  will  process  check  images.  Individual  banks  will 
IQtely  spend  anywhere  from  SS  million  to  upgrade 
imaging  software  to  $100  million  to  rip  out  entire 
back-end  processing  systems. 

Most  back-end  bank  systems  are  still  mainframe- 
centric.  They  are  made  up  of  a  coUectioo  of  comput¬ 
ers  and  software  that  developed  over  time  and  in 
many  cases  never  evolved  to  handle  image  exchange, 
eiqieitssay. 


There’s  also  a  lot  of  legacy  code  that  needs  to  be 
u^raded  to  make  use  of  the  new  check  images  that 
will  be  available,  says  Ed  Herman,  director  of  the 
payments  portfolio  at  Electronic  Data  Systems  Corp. 

There’s  a  collection  of  back-end  systems  that 
would  have  to  be  upgraded,  integrated,  replaced." 
Herman  says.  "Over  the  past  60  or  70  years,  [banks 
havel  fine-tuned  their  pap>er  processing  systems.  All 
that  is  now  going  to  have  to  change,  or  at  least  be  in¬ 
tegrated  differently." 

Ted  Kute.  senior  vice  president  of  item  processing 
and  treasury  management  operations  at  Huntington 
Baneshares  Inc.  in  Columbus,  Ohio,  agrees.  There's 
still  a  lairly  heavy  investment  in  programs  that  allow 
banks  to  retrieve  things  out  of  an  archive  or  to  find  an 
image  of  [a  check]  and  develt^  an  IRD  file  that  would 
be  sent  out  to  customers  or  other  banks,"  be  says. 

Huntington  has  already  deployed  scanners  in  its 
three  regional  processing  centers  and  has  its  own 
archive,  according  to  Kute.  The  bank  still  needs  to 
purchase  software  for  exchanging  images  with  other 
banks  and  equipment  for  image  quality  verification 
and  tracking,  as  well  as  software  for  managing  image 
transaction  archiving. 

"Depending  on  what  information  needs  to  be 
stored,  it  could  end  up  being  stored  in  our  existing 
archive,  and  then  we'd  have  to  expand  the  archive," 
Kute  says.  “But  when  Oct.  28  roUs  around,  we’re 
going  to  tell  the  rest  of  the  world,  ’Send  us  paper- 
substitute  checks.’ " 

Kute  says  Huntington  has  had  to  make  changes  to 
its  systems  to  accept  IRDs  and  to  store  the  additional 
information  in  its  archives.  The  bank  has  also  been 


preparing  to  notify  customers  that  it  will  be  using 
electronic  IRDs  instead  of  paper  documents  for 
clearance  and  settlement. 

“It’s  cheaper  to  transmit  a  file  of  images  than  to  de¬ 
liver  the  IRDs  physically,"  Kute  says.  “It’s  quicker  and 
often  more  secure  and  eliminates  a  lot  of  the  physical 
handling  of  the  checks.  Every  time  a  check  changes 
hands,  someone  has  to  run  a  tape  on  it" 

Common  Standards 

Bank  of  America’s  Feldman  says  that  banks  are  at  dif¬ 
ferent  stages  of  preparedness  for  processing  check 
images.  He  says  there  are  four  main  technology  and 
business  standards  areas  where  banks  and  check 
clearinghouses  are  still  lagging.  These  include  en¬ 
abling  image  exchange  on  back-end  systems,  creating 
ubiquitous  business  standards  for  images,  forging 
multilateral  agreements  with  clearii^ouses  on 
exchange  standards  and  devising  image  quality  and 
usability  standards. 

“We  know  we’ve  got  to  have  these  standards  in 
place  for  wholesale  or  institutional  image  exchange 
to  take  place,"  says  Feldman.  “However,  we  honestly 
think  as  image  exchange  ramps  up.  we’ll  be  able  to 
leverage  technology  better  than  we  ever  could  in  the 
physical  environment  to  do  signature  recognition  (on 
paper  checks]." 

Along  with  JJ*  Morgan  Chase  &  Co.  and  IBM. 

Bank  of  America  helped  found  Viewpointe  Archive 
Services  LLC  which  maintains  a  database  of  check 
images.  Bank  of  America  is  currently  woridng  with 
Viewpointe  on  check  image  quality  standards  for  its 
ImageShare  service,  an  archive  for  check  imaging 
and  retrieval  New  York-based  Viewpointe  stores  22 
billion  check  images  per  year. 

According  to  the  Banking  Administration  Institute 
in  Chicago,  in  June,  42%  of  all  member  banks  sur¬ 
veyed  indicated  that  they  would  invest  in  shared 
archive  applications;  40%  said  they  were  going  to 
make  additional  investments  in  check  imaging  tech¬ 
nology,  such  as  scanners. 

“Probably  of  all  banks  in  the  marketplace,  30%  to 
40%  have  already  invested  in  imaging  systems,"  says 
Peter  Soraparu,  a  spokesman  for  the  institute.  Most 
of  the  technology  for  generating  the  image  quality 
that  will  meet  industry  standards  is  already  in  place 
at  check-processing  organizations  and  large  banks, 
says  Frank  Jaffc,  project  manager  for  the  Financial 
Services  Technology  Consortium  (FSTC).  There  will 
need  to  be  updates  for  software  to  measure  against 
standards  adopted  by  the  American  National  Stan¬ 
dards  Institute,  he  adds. 

The  FSTC  has  recently  been  working  on  standards 
for  security  features  on  checks  and  standards  for 
check-image  quality.  In  the  area  of  quality  standards, 
the  consortium  is  looking  at  issues  such  as  how  many 
black  specks,  or  how  much  “noise,"  an  im^  may 
contain  and  sdll  be  considered  an  acceptable  docu¬ 
ment,  and  wbetbera  dog-eared  check  is  acceptable  as 
an  image.  These  efforts  are  designed  to  minimize  the 
risk  of  disputes. 

“Phase  I  is  to  establish  the  basic  measurements  to 
be  standardized,  and  Phase  2  is  to  test  those  against  a 
large  sample  of  images  to  make  sure  they’re  useful." 
Jaffc  says. 

Jim  Lowe,  a  systems  engineer  at  Plano,  Texas- 
based  EDS.  which  sells  paper  and  electronic  check  ex- 
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change  services,  says  banks  must  be  prepared  to  cre¬ 
ate  an  electronic  image  file  using  a  standard  format  so 
that  it  can  be  exchanged  with  another  bank  or  clear-v 
ii^ouse.  Currently,  however,  there  are  many  fonnats. 

“It’s  likely  to  come  down  to  a  handful  of  stan¬ 
dards,"  Lowe  says. 

The  top  22  banks  in  the  country  are  all  co-owners 
of  the  New  York-based  Small  Value  Payments  Co., 
which  is  focusing  on  check-imaging  technology  and 
setting  up  a  national  network  and  switching  center  to 
manage  the  exchange  of  check  images. 

The  Electronic  Check  Clearing  House  Organiza¬ 
tion.  a  Dallas-based,  not-for-profit  company  that’s 
owned  by  24  banks,  has  created  a  set  of  rules  that 
cover  issues  such  as  electronic  check  presentment, 
returned  checks  and  guarantees  between  banks 
when  exchanging  images.  Small  Value  Payments 
has  licensed  the  rules  for  use  by  its  customers. 

But  not  all  banks  have  signed  onto  joint  image- 
exchange  ventures. 

In-house  Expenses 

While  Check  21  will  bring  immediate  benefits,  finan¬ 
cial  institutions  also  face  some  expenses  preparing 
for  it.  The  cost  of  deploying  check-imaging  softw^ 
to  process  checks  for  clearance  and  settlement  can 
rai^e  from  $4  million  to  $6  million  for  a  large  bank, 
according  to  Viewpointe. 

Feldman  declines  to  discuss  costs  but  says  Bank 
of  America  continues  to  buy  more  direct-attached 
storage  and  tape  archiving  systems  to  handle  check- 
image  storage  but  is  also  migrating  away  from  labor- 
intensive  microfiche. 

“Data  storage  is  something  we’ll  continue  to  add 
up  until  we  are  able  to  satisfy  our  retention  require¬ 
ment,  which  is  seven  years,”  Feldman  says. 


While  Bank  of  America  already  has  check-imaging 
systems  that  allow  customers  to  view  checks  online, 
it  doesn’t  yet  have  check  clearing  and  settlement  sys¬ 
tems  to  process  the  more  than  8  billion  checks  it 
handles  each  year.  Feldman  says  the  bank  will  be  able 
to  send  IRD  images  from  commercial  clients  by  the 
fourth  quarter,  and  it  will  be  able  to  receive  images 
by  the  end  of  the  first  quarter  of 2005.  “We’ve  some¬ 
what  staged  our  Check  21  rollout,"  be  says. 

Like  other  banks,  Bank  of  America  must  decide 


where  to  capture  check  images.  This  can  be  done  at 
the  teller  counter,  at  the  ATM  or  in  processing  cen¬ 
ters.  The  bank  is  still  investigating  all  three  options. 

Then  you  always  have  the  integration  risk  from 
the  old  to  the  new  s>’siems."  Feldman  says,  meaning 
that  banks  will  have  to  consider  migrating  data  from 
l^cy  systems  to  new  computers. 

Soraparu  says  that  while  there  may  be  some  short¬ 
term  expenses  associated  with  Check  21.  the  efficien¬ 
cies  will  increase  over  time. 

“Larger  banks  thought  the  immediate  impacts 
would  be  minimal."  says  Soraparu.  "While  there 
would  be  infrastructure  expense  in  the  short  term, 
the  efficiency  benefits  would  kick  in  over  time.” 

Kute  says  Huntington  Baneshares  has  been  doing 
check  imaging  for  its  customers  for  the  past  eight 
years,  but  it  isn’t  yet  prepared  to  do  image  exchange 
with  other  banks.  “We’re  doing  the  coding  and  mak¬ 
ing  the  changes  in  our  systems  that  are  required  to 
be  able  to  handle  this  new  document  being  present¬ 
ed  on  OcL  28.”  he  says.  “We’re  also  making  decisions 
on  how  we’ll  present  that  image  to  our  customers  in 
the  form  of  online  banking  and  in  their  statements." 

Until  the  entire  banking  industry  embraces  elec¬ 
tronic  IRD  exchange,  back  offices  will  have  to  con¬ 
tinue  to  process  both  paper  checks  and  images, 
which  incurs  additional  cost. 

“You  read  some  articles  saying  Check  21  b  the 
biggest  noneveni  since  Y2k,  and  you  read  others  say- 
ii^  we’re  going  to  save  $2  billion  a  year.  Both  are  ac¬ 
curate  statements:  One  is  accurate  on  Oct.  28.  and 
the  other  is  accurate  for  three  to  five  years  down  the 
road."  Feldman  says.  “This  is  going  to  be  something 
that  ramps  up  over  time.  The  key  is  that  this  isn’t  a 
conversion;  h’s  a  migration.  'The  key  is  getting  indus¬ 
try  adt^tion  to  be  widespread."  O  4W36 
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Back-counter  caftture 


This  is  one  possible  way  of  architect¬ 
ing  an  electronic  IRO  exchange  sys¬ 
tem.  The  check  image  is  c^tured  at 
the  teller's  station.  The  image  then 
goes  to  a  server  where  metadata  is 
added  to  create  the  IRD.  The  IRD  is 
then  traced  in  a  repository  where  it 
can  be  accessed  by  authorized  per- 
sortnel  via  a  Web  portal. 

Images  and  Data 

Data 


Continiioii/rom  pojie 

on  paper  checks,  such  as  watermarks. 

But  there’s  no  need  for  companies  to  panic  be¬ 
cause*  of  the  impendint:  deadline,  say  many  in  the 
indusir>-  involved  in  v>rchesiratin|!  the  transition. 

“There  are  a  lot  of  people  who  are  all  glot>m  and 
doom  abtmt  what’s  going  i»>  happen  on  Oct.  2S.  but 
this  is  an  evolutionary  pruccs.s  that  has  gt>t  to  fit  uv 
getber  many  pieces."  says  |ohn  Feldman,  an  image 
iransatfions  executive  in  the  technology  and  opera¬ 
tions  group  of  Bank  of  America  Corp.  in  Charlotte. 
N.d  "I  believe  it’ll  be  years  befon*  the  industry 
a’aches  image  exchange  wtlume  " 

Bank  of  America  has  made  investments  in  chi.i.  k- 
scanning  devices  and  imaging  tcehnokigy  and  is 
evaluating  whether  to  roll  out  that  technology  in  its 
branches,  automated  teller  machines  and  regional 
check-processing  centers,  says  Feldman. 

Nuts  and  BoHs 

Most  of  the  natkm’s  top  5t)  hanks  have  made  signifi¬ 
cant  investments  in  imaging  technology,  e.\peris  say. 
but  they  have  yet  i«i  purchase  systems  to  send  check 
images  to  other  banks  or  integrate  back-end  sysiem-s 
that  will  process  cheek  images.  Individual  banks  will 
likely  spend  anywhere  from  S5  million  to  upgrade 
imaging  software  to  SlOO  million  to  rip  out  entire 
back-end  processing  systems. 

Most  txjck-end  bank  systems  are  still  mainframe- 
centric.  They  arc  made  up  of  a  collection  of  comput¬ 
ers  and  S4iftwarc  that  developed  over  time  and  in 
many  ca.scs  never  evtilvcd  to  handle  image  exchange, 
experts  say. 


I’hcrc’s  also  a  lot  of  legacy  code  that  needs  to  be 
upgraded  to  make  u.sc  of  the  new  check  images  that 
will  be  available,  says  Ed  Herman,  director  of  the 
payments  portfolio  at  Electronic  Data  Systems  Corp. 

“There’s  a  collection  of  back-end  systems  that 
would  have  to  bo  upgraded,  iniegraiod.  replaced." 
Herman  says.  “Over  the  past  W)  or  70  years,  (banks 
have!  fine-tuned  their  paper  processing  systems,  All 
I  that  is  now  going  to  have  to  change,  or  at  least  be  in¬ 
tegrated  dilTorently." 

I  Ted  Kute.  senior  vice  president  of  item  processing 
I  and  Ireasur)'  management  t)perations  at  Huntington 
Baneshares  Inc  in  Otiumbus.  Ohio.  ;igrees.  "There's 
I  still  a  fairl)'  heax-y  investment  in  pri*grams  that  ailow 
I  banks  to  retrieve  things  out  of  an  archive  or  u»  find  an 
'  image  of  (a  checkl  and  dexclop  an  1R[>  file  that  would 
be  sent  out  to  customers  or  other  banks."  he  says. 

'  Huntington  has  already  deployed  scanners  in  its 
I  three  rcgumal  pr«Kcssing  centers  and  has  its  own 
I  archive,  according  to  Kuic.  The  bank  still  needs  to 
'  purchase  software  ftir  exchanging  images  with  other 
I  banks  and  equipment  for  image  quality  verification 
I  and  tracking,  as  well  as  st)ftwarc  for  managing  image 
transaction  archiving. 

"Depending  on  what  information  needs  to  be 
stored,  it  could  end  up  being  stored  in  our  existing 
archive,  and  then  we’d  have  to  expand  the  archive," 
Kute  says.  "But  when  0:1. 28  nxlls  around,  we're 
j  going  to  tell  the  rest  of  the  world.  'Send  us  paper- 
I  substitute  checkiK"’ 

Kute  says  Huntington  has  had  to  make  changes  to 
I  its  systems  to  accept  IRI>s  and  to  store  the  additional 
I  information  in  its  archives.  The  bank  has  also  K’cn 


preparing  to  notify  customers  that  it  w’ill  be  using 
electronic  IRI>s  instead  of  paper  documents  for 
clearance  and  selliemcnt. 

"It’s  cheaper  to  transmit  a  file  of  images  than  lu  de¬ 
liver  the  IRDs  physically."  Kute  says.  "It’s  quicker  and 
often  more  secure  and  eliminates  a  lot  of  the  physical 
handling  of  the  checks.  Every  time  a  check  changes 
hands,  someone  has  to  run  a  tape  on  it." 

Common  Standards 

,  Bank  of  America’s  Feldman  says  that  banks  arc  at  dif¬ 
ferent  stages  of  preparedness  for  processing  check 
images.  He  says  there  are  four  main  technology  and 
business  standards  areas  where  banks  and  check 
clearinghouses  arc  still  lagging.  These  include  en¬ 
abling  image  exchange  on  back-end  systems,  creating 
ubiquitous  business  standards  for  images,  forging 
multilateral  agreements  with  clearinghouses  on 
exchange  standards  and  devising  image  quality  and 
usability  standards. 

"We  know  we’ve  got  to  have  these  standards  in 
place  for  wholesale  or  institutional  image  e.xchange 
to  take  place,"  says  Feldman.  "However,  we  honestly 
think  as  image  exchange  ramps  up.  we'll  be  able  to 
leverage  tcchnolog)’  belter  than  we  ever  could  in  the 
physical  environment  to  do  signature  recognition  Ion 
paper  checks]." 

Along  with  |.P.  Morgan  Chase  &  Co.  and  IBM. 

\  Bank  of  America  helped  found  Viewpointe  Archive 

1  Scrx'iccs  LLC.  which  maintains  a  database  of  check 
images.  Bank  of  America  is  currently  w  orking  with 
Viewpointe  on  check  image  quality  standards  for  its 
ImageShare  service,  an  archive  for  check  imaging 
and  retrieval.  New  York-based  Vicwpolmc  stores  22 
billion  check  images  per  year. 

According  to  the  Banking  Administration  Institute 
in  Chicago,  in  June,  42%  of  all  member  banks  sur¬ 
veyed  indicated  that  they  would  inve.st  in  shared 
archive  applications;  40'‘'o  said  they  were  going  to 
make  additional  investments  in  cheek  imaging  tech¬ 
nology.  such  as  scanners. 

"Probably  of  all  banks  in  the  marketplace.  30%  to 
dO"!'  have  already  invested  in  imaging  systems."  says 
l*eter  Soraparu,  a  spokesman  for  the  institute.  Most 
of  the  technology  for  generating  the  image  quality 
that  will  meet  Industry  standards  is  already  in  place 
at  check-processing  organizations  and  brge  banks, 
says  Frank  jafTc.  project  manager  for  the  Financial 
Scr\-ices  Technology  Consortium  (FSTC).  There  will 
need  to  be  updates  for  software  to  measure  against 
standards  adopted  by  the  American  National  Stan¬ 
dards  Institute,  he  adds. 

The  FSTC  has  recently  been  working  on  standards 
for  security  features  on  checks  and  standards  for 
cheek-image  quality.  In  the  area  of  quality  standards, 
the  consortium  is  looking  at  issues  such  as  how  many- 
black  specks,  or  h«»w  much  "noise,''  an  image  may 
contain  and  still  be  considered  an  acceptable  docu¬ 
ment,  and  whether  a  dog-cared  cheek  Is  acceptable  as 
an  image.  These  cfiitris  are  designed  to  minimize  the 
risk  ofdisputes. 

"Phase  1  is  tocstablish  the  basic  measurements  to 
be  standardized,  and  Phase  2  is  to  test  those  against  a 
large  sample  of  images  to  make  sure  they're  useful." 
Jaffe  says. 

lim  Lowe,  a  systems  engineer  at  Piano.  Texas- 
based  EDS.  which  sells  paper  and  electronic  check  e.x- 
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fhjniic  SL-rviccs,  says  banks  musi  bo  proparod  to  cre¬ 
ate  an  electronic  imafte  file  usinjt  a  standard  format  so 
that  it  can  be  evehan^ted  with  another  bank  or  cletir- 
in^thouse.  Currently,  however,  there  are  many  tormats, 

'it's  likolv  to  come  down  tti  a  handful  of  stan¬ 
dards."  Lowe  says. 

The  U>p  22  banks  in  the  country  are  ail  co-owners 
of  the  New  York-based  Small  Value  Payments  Co., 
which  is  focusing  on  check-imaging  technology  and 
setting  up  a  national  network  and  .switching  center  to 
manage  the  e.vchange  of  check  images. 

The  tiectronic  ('heck  (bearing  House  Organiza¬ 
tion,  a  I)alla.s-based,  not-lor-profil  company  th.ii's 
owned  by  24  banks,  hits  created  a  set  of  rules  that 
cover  issues  such  as  electronic  check  piesentment. 
returned  checks  and  guarantees  between  banks 
when  e.xchanging  images.  Small  Value  Payments 
has  licensed  the  rules  for  use  by  its  customers. 

But  not  all  banks  have  signed  onto  joint  image- 
exchange  ventures. 

In-house  Expenses 

While  Check  21  will  bring  immediate  benefits,  finan¬ 
cial  institutions  also  face  some  expenses  preparing 
for  it.  The  cost  of  deploying  check-imaging  software 
to  process  checks  for  clearance  and  settlement  can 
range  from  S4  million  to  S6  million  for  a  large  bank, 
according  to  Viewpointe. 

Feldman  declines  to  discuss  costs  but  says  Bank 
of  America  continues  to  buy  more  direct-attached 
storage  and  tape  archiving  systems  to  handle  check- 
image  storage  but  is  also  migrating  away  from  labor- 
intensive  microfiche. 

“Data  storage  is  something  we'll  continue  to  add 
up  until  we  are  able  to  satisfy  our  retention  require¬ 
ment,  which  is  seven  years."  Feldman  says. 


The  Great  (ratEHM) 
Transfotmalion 

Thara's  a  long  way  to  go  before  most 
fifunotot  tostHuttom  are  ready  to  process 
checks  by  asdiangino  Images. 

BEFORE  CHECK  21 

f^ocessino  a  paper  check  nvolved  Itansportation 
and  culture  at  several  locations. 

Each  step  in  the  process  added  time  and  mcreased 
fraud  risk. 

The  entire  process  typically  took  two  to  three  days. 

THE  PROMISE  OF  CHECK  21 

When  the  automated,  electronic  system  becomes  a 
reality,  a  receivino  bank  can  scan  a  check  once  ant 
use  that  image  to  complete  the  clearance  process 
Banks  can  create  secure  database  repositories  in 
whichthecheckimagesarestoted- 
Those  images  can  then  be  accessed  through  se¬ 
cure.  Web-based  channels. 

While  Bank  of  America  already  has  cheek-imaging 
systems  that  allow  customers  to  view  checks  online, 
it  diK'sn't  yet  have  check  clearing  and  settlement  sys¬ 
tems  to  process  the  more  than  8  billion  checks  it 
handles  each  year.  Feldman  says  the  bank  will  be  able 
to  send  IRD  images  from  commercial  clients  by  the 
fourth  quarter,  and  it  will  be  able  to  receive  images 
by  the  end  of  the  first  quarter  of  2005.  "WeVe  some¬ 
what  .staged  our  Check  21  rolU»ut."  he  says. 

I.ike  other  banks.  Bank  of  America  must  decide 


where  t»i  e.ipture  cheek  im.^ge^  rhise.ui  he  doneal 
the  teller  ei'unter,  at  the  .M  M  or  in  proee^sing  cen- 
lers,  1  he  b.ink  is  still  itnesiigating  .ill  thiee  options. 

"  I  hen  \t>u  .ilw.ivs  h.i\  e  the  iniegr.ition  risk  from 
the  old  to  the  new  systems."  l  eIJnian  s.ivs.  meaning 
that  b.mks  w  ill  h.i\e  to  consider  migrating  d.iia  from 
legaev  s\  stems  t*'  new  computers. 

’'‘ir.iparu  s.»\s  that  while  there  m.i\  be  stime  shi'rt- 
term  expetises  .issoetaied  w  iili  t  diei  k  21,  the  effit  ten- 
etes  w  ill  increase  over  time 

1  .irger  Kinks  thought  the  imtiteJi.iti  imp.iets 
would  be  minini.it.'  s.«\s  Sor.ip.irii  '  \V  lute  there 
would  be  intr.istnietuie  evpi'iise  in  the  stu*rl  term, 
the  effii  ienev  benefits  would  kiv  k  in  over  lime  " 

Kute  S.IVS  Ihnitmgioii  ILinesh.ires  h.is  Kvn  doing 
eheek  iin.iging  lot  its  customers  tor  thi  p.isi  eight 
\e.irs.  but  it  isn't  \et  prep.ired  to  Jo  im.ige  exvli.inge 
w  ith  <iiher  Kinks.  "We  re  doing  the  coding  .inJ  m. ik¬ 
ing  the  citanges  in  our  s\  stems  iKn  ,ire  required  to 
be  able  l<»  handle  this  new  Jociimeni  K  ing  present¬ 
ed  on  ( let.  2s.  lie  S.IVS  "We  re  .ilso  making  Jeeismns 
«*n  how  we  ll  present  that  image  to  mir  ciist.tmers  in 
the  form  «>f online  hanking  and  in  their  staieinentv  ' 
I'inil  the  entire  banking  industrv  etnbr.ices  etee 
tronie  IRI  i  exchange,  back  offices  w  ill  have  to  con¬ 
tinue  to  process  both  paper  checks  .ind  images, 
which  incufk  additional  cost, 

'■^bu  read  some  articles  s;n  ing  Check  21  is  the 
biggest  nonevent  since  Y2k.  and  vou  read  others  viv  - 
ing  we're  g4*ing  to  save  S2  billion  a  year.  Both  are  ac¬ 
curate  slalemenis:  One  is  ;u.-curate  t>n  ( Vt.  28.  and 
the  other  is  accurate  lor  three  to  fiw  yejirs  down  the 
road.  Feldman  says.  "This  is  going  to  K*  sitmeihing 
that  ramps  up  over  time.  The  kev  is  that  this  isn't  a 
conversion:  it's  a  migrati«»n.  The  key  is  gelling  indus¬ 
try  adtipiion  to  be  widespread."  O  498^ 
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Rev  New  Engines 

OUTUNNt:  Emerging  dual-core  CPU  designs  boost  performance  _ 
by  putting  two  or  more  processing  engines  on  a  single  chip.  The  pj 
processors  should  mn  cooler,  faster  and  more  efficiently.  But  per-  ||| 
processor  licensing  fees  may  boost  costs.  Bf  Gary  H.  Aiithes 


CORE1 


I-'  '  rr..  nth.-v.rMnd  half  of  3005  II.  Ii.^-olwou- 

•’O'*  ’■  '  .I  '"-i  onfl  .1 ,  i-un  -  .I't- •  Muitdlt'-.-jdino 'supoi-- 

penufenf.^  I'.'ir  firpaOs  simullaneously. 


IN  1969.  INTEL  CORP.  introduced  its 

first  microprocessor  chip,  the  4004. 
The  4-bit  processor  chugged  along 
at  a  mere  104  KHz.  In  the  35  years 
since  then,  processor  clock  speeds 
—  and  performance  —  have  doubled 
about  every  18  months. 

Today,  however,  it's  becoming  more 
difficult  and  expensive  to  boost  the 
speed  of  processors  while  keeping 
them  cool.  Chip  designers  use  many 
techniques  to  wring  more  throughput 
from  a  processor  cWp  without  increas¬ 
ing  its  clock  rate.  Those  techniques 
include  multithreading,  instruction- 
branch  prediction  and  clever  uses 
of  cache.  But  the  most  promising 
approach  is  to  put  more  than  one 
prot^ssing  engine  on  a  chip. 

In  2001,  IBM  introduced  the  first 
mainstream  “dual-core”  chip,  the 
Power4,  for  its  IBM  eServer  pSeries 
and  iSeries  servers.  Early  this  year, 

■  Sun  Microsystems  Inc. 

shipped  its  UltraSparc  IV 
with  two  cores  for  its  Sun 
Fire  V  series  servers,  and 
Hewlett-Packard  Co,  un¬ 
veiled  its  own  dual-core 
PA-RISC  8800  processor.  Advanced 
Micro  Devices  Inc.  responded  last  sum¬ 
mer  by  demonstrating  an  x86-based. 
64-bit,  dual-core  Opteron  processor. 
Intel  Corp.  subsequently  announced 
plans  to  ship  its  Itanium  2-based.  dual¬ 
core  Montecito  CPU  in  2005. 

The  chip  makers  say  that  within  two 
years,  most  processor  chips  —  from 
desktop  systems  on  up  —  will  have 
two  or  more  processii^  units.  The  rea¬ 
sons  for  this  are  compelling.  A  dual¬ 
core  chip  might  provide  twice  the  per¬ 
formance  of  a  single-core  chip  at  a 
much  lower  cost  than  two  single-core 
chips  can.  Communication  between 
two  processors  is  faster  when  they’re 
on  one  chip,  and  cache  sharing  can 
make  processing  more  efileient.  Dual- 
core  processors  also  use  less  space, 
consume  less  power  and  generate  less 
heat  than  separate  processors  da 

ReaGty  Check 

Vendors  claim  that  multicore  chips  are 
well  suited  for  transaction  processing 
and  for  database  and  scientific  appli¬ 
cations. 

“It’s  probably  fair  to  say  that  the 
realistic  rai^e  is  40%  to  80%  faster,” 
says  Kevin  Krewell,  editor  in  chief  of 
the  “Microprocessor  Report”  news¬ 
letter  and  an  analyst  at  In-Stat/MDR  in 
San  lose.  They’re  less  effective  on  sin¬ 
gle-application  machines  and  for  ap¬ 
plications  wdiose  instructions  can’t  be 
bix^n  into  parallel  streams,  be  adds. 
While  the  number  of  transistors  on 
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Multicore  Evolution: 


i  CHIP 

NUMBER  OF  CORES 

SHIP  DATE  ! 

i  IBMPowM  2  2001 

Sun  UHraSparc  IV 

2 

2004 

HPM-RISC8800 

2 

2004 

AMO  dual*core  Opteron 

2 

2005 

bitel  Montecito 

2 

2005 

SunNiaoara 

8 

2006 

a  chip  is  still  doubling  every  18  months, 
how  (hat  extra  capacity  is  used  is  about 
to  change.  'This  is  the  end  of  the  clock- 
speed  race,”  Krewell  says.  “As  more 
transistors  are  available,  do  you  go  for 
higher  instructions  per  cycle?  Most 
people  think  we  have  come  close  to 
the  limit  of  what  can  be  done  there.” 

So  those  extra  transistors  are  used  to 
build  another  processing  engine  — 
and  to  enable  multithreading,  in  which 
multiple  instruction  streams,  or  ! 

threads,  execute  in  parallel.  Indeed, 
earlier  this  month.  Intel  scrapped  its 
plan  to  boost  the  speed  of  its  Pentium 
4  chip  fiom  3.6  GHz  to  4  GHz  in  favor 
of  enlarging  on-chip  cache. 

Vendors  are  working  on  designs  that 
go  beyond  two  cores,  but  they  face  a 
few  challenges.  First,  at  current  semi¬ 


conductor  circuit  sizes  of  130  and  90 
nanometers,  putting  more  than  two 
cores  on  a  chip  is  difficult.  But  chips 
with  four  or  more  cores  will  become 
common  as  the  industry  moves  to  6S 
nm  technology. 

Sun  is  already  workii^  on  a  multi¬ 
core  chip.  The  90  nm  Niagara  chip, 
due  in  2006,  will  support  Solaris  and 
hold  eight  cores.  Niagara  is  intended  to 
be  “Web-facii^  the  first  tier  in  the 
server  room,"  where  it  might,  for  ex¬ 
ample.  handle  32  user  searches  at  once, 
says  Marc  Tremblay,  a  chief  architect 
for  processors  at  Sun. 

Another  problem  with  multicore 
chips  is  software,  says  Krewell.  To  use 
that  many  processors  efficiently  in  one 
die,  the  operatii^  system  must  per¬ 
form  a  fair  amount  of  worit.  “Windovrs 


XP  scales  reasonably  well  in  four-way 
and  eight-way  systems,  but  it’s  not  go¬ 
ing  to  apply  so  well  to  16-  or  32-way 
systems."  he  says. 

And  even  with  dual-core  processors, 
software  licensing  issues  could  trip  up 
early  adopters,  says  Krewell.  Many 
vendors  license  software  by  the  proc¬ 
essor.  Until  now,  each  generation  of 
CPU  chips  has  increased  processor 
clock  speeds,  often  doubling  perfor¬ 
mance  without  affecting  software 
costs.  If  the  next  ^Deration  doubles 
performance  by  adding  a  second 
processor  core,  software  licensing 
costs  could  double  as  well  (To  see  how 
Oracle  and  Microsoft  have  responded, 
see  (^ickLinks  50053  and  50178.) 

As  dual-core  processor  chips  be¬ 
come  the  norm  over  the  next  two 
years,  software  vendors'  attempts  to 
charge  per  core  could  backfire,  says 
Krewell.  “Does  it  make  c^n-source 
software,  like  MySQL,  more  attractive,  ! 
and  does  it  cause  a  shift  in  corporate 
buying  to  open-source  packages  that 
are  much  more  flexibly  priced?”  he 
asks.  That’s  a  question  users  are  likely 
to  answer  over  the  next  24  months. 
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F^-CHJ  license  agreements  could  create  unexpected 
costs  for  dual-core  systems: 
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Multicore 
Processor  Chips 
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TECHNOLOGY 
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Rev  New  Engines 


OUTLOOK:  Emerging  dual-core  CPU  designs  boost  performance 
by  putting  two  or  more  processing  engines  on  a  single  chip.  The 
processors  should  run  cooler,  faster  and  more  efficiently.  But  per- 
processor  licensing  fees  may  boost  costs.  By  Gaiy  H.  Anthes 


EMERGING  V 
TECHNOLOGIES 


Intel's  I  n  billion  Iransisloi  Montecito  chip,  due  in  the  second  hall  ol  2005.  includes  two  processor  cores  on  a  single  die  Each 
has  Its  own  dedicated  caches  and  shares  a  common  system  interlace.  Multithreading  support  enables  each  processor  to  inde 
pendently  execute  two  threads  simultaneously. 


IN  iw».  iNThi  CDKi’.  introduced  its 
first  microprocessor  chip,  the  4004. 
The  4-bit  processor  chugged  along 
at  a  mere  104  KHz.  In  the  35  years 
since  then,  prtK’cssor  clock  speeds 
—  and  performance  —  have  doubled 
about  every  18  mimths. 

Today,  however,  it’s  becoming  more 
difficuit  and  expensive  to  boost  the 
speed  of  processors  while  keeping 
them  cool.  Chip  designers  use  many 
techniques  to  wring  more  throughput 
from  a  proces.sor  chip  without  increas¬ 
ing  its  clock  rate.  Those  techniques 
include  multithreading,  instruction- 
branch  prediction  and  clever  uses 
of  cache.  But  the  most  promising 
approach  is  to  put  more  than  one 
processing  engine  on  a  chip. 

In  2001,  IBM  introduced  the  first 
mainstream  “dual-core”  chip,  the 
Powcr4.  for  its  IBM  eServer  pSerics 
and  iSeries  servers.  Early  this  year. 

Sun  Microsystems  Inc. 
shipped  its  UltraSparc  IV 
with  two  cores  for  its  Sun 
Fire  V  scries  servers,  and 
_  Hewlett-Packard  Co.  un¬ 
veiled  its  own  dual-core 
PA-RJSC  8800  processor.  Advanced 
Micro  Devices  Inc.  responded  last  sum¬ 
mer  by  demonstrating  an  x86-bascd. 
64-bit,  dual-core  Opteron  processor. 
Intel  Corp.  subsequently  announced 
plans  to  ship  its  Itanium  2-based.  dual- 
core  Montecito  CPU  in  2005. 

The  chip  makers  say  that  within  two 
years,  most  processor  chips  —  from 
desktop  systems  on  up  —  will  have 
tw'o  or  more  processing  units.  The  rea¬ 
sons  for  this  are  compelling.  A  dual- 
core  chip  might  provide  twice  the  per¬ 
formance  of  a  single-core  chip  at  a 
much  lower  cost  than  two  single-core 
chips  can.  Communication  between 
two  processors  is  faster  when  they’re 
on  one  chip,  and  cache  sharing  can 
make  processing  more  cflficicnt.  Dual¬ 
core  processors  also  use  less  space, 
consume  less  power  and  generate  less 
heat  than  separate  processors  do. 


Reality  Check 


Vendors  claim  that  multicore  chips  arc 
well  suited  for  transaction  processing 
and  for  database  and  scientific  appli¬ 
cations. 

“It's  probably  fair  to  say  that  the 
realistic  range  is  40%  to  80%  faster,” 
says  Kevin  Krewell.  editor  in  chief  of 
the  “Microprocessor  Report”  news¬ 
letter  and  an  analyst  at  In-Stat/MDR  in 
San  Jose.  They’re  less  effective  on  sin¬ 
gle-application  machines  and  for  ap¬ 
plications  whose  instructions  can’t  be 
broken  into  parallel  streams,  he  adds. 

While  the  number  of  transistors  on 
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Multicore  Evolution:  A  Timeline 


CHIP 

I  NUMBER  OF  CORES 

SHIP  DATE 

IBM  Power4 

2 

2001 

Sun  UltraSparc  IV 

2 

2004 

HPPA-RiSC8800 

2 

2004 

AMO  dual-core  Opteron 

2 

2005 

Intel  Montecito 

2 

2005 

Sun  Niagara 

8 

2006 

a  chip  is  still  doubling  cvcr>- 18  months, 
how  that  extra  capacity  is  used  is  about 
to  change.  "This  is  the  end  of  the  clock¬ 
speed  race.”  Kreuell  says.  “As  more 
transistors  are  available,  do  you  go  for 
higher  instructions  per  cycle?  Most 
people  think  we  have  come  close  to 
the  limit  of  what  can  be  done  there.” 

So  those  extra  transistors  are  used  to 
build  another  processing  engine  — 
and  to  enable  multithreading,  in  which 
multiple  instruction  streams,  or 
threads,  execute  in  parallel.  Indeed, 
earlier  this  month.  Intel  scrapped  its 
plan  to  boiist  the  speed  of  its  Pentium 
4  chip  from  3.6  GHz  to  4  GHz  in  favor 
of  enlarging  on-chip  cache. 

Vendors  arc  working  on  designs  that 
go  beyond  two  cores,  but  they  face  a 
few  challenges.  First,  at  current  semi¬ 


conductor  circuit  sizes  of  130  and  90 
nanometers,  putting  more  than  two 
cores  on  a  chip  is  difficult.  But  chips 
I  with  four  or  more  cores  will  become 
common  as  the  industry  moves  to  65 
nm  technology. 

Sun  is  already  working  on  a  multi- 
I  core  chip.  The  90  nm  Niagara  chip, 
i  due  in  2006.  will  support  Solaris  and 
I  hold  eight  cores.  Niagara  is  intended  to 
I  be  “Wcb-facing,  the  first  tier  in  the 
server  room.”  where  it  might,  for  ex¬ 
ample.  handle  32  user  searches  at  once, 
says  Marc  Tremblay,  a  chief  architect 
i  for  processors  at  Sun. 

Another  problem  with  multicore 
,  chips  is  software,  says  Kreuell.  To  use 
'  that  many  processors  efficiently  in  one 
'  die.  the  operating  system  must  per¬ 
form  a  fair  amount  of  work.  "Windows 


I  XP  scales  reasonabh  well  in  four-way 
and  eight-way  systems,  but  it's  not  go- 
I  ing  to  apply  so  well  to  16-  or  32-way 
systems."  he  savs. 

And  even  with  dual-core  processors, 
software  licensing  issues  could  trip  up 
early  adopters,  says  Krewell.  Many 
vendors  license  software  by  the  pnic- 
essor.  Until  now.  each  generation  of 
CPU  chips  has  increased  processor 
clock  speeds,  often  doubling  perfor¬ 
mance  without  affecting  software 
costs.  It  the  next  generation  doubles 
performance  by  adding  a  second 
pn^cessor  core,  software  licensing 
costs  could  double  as  well.  (To  see  how 
Oracle  and  Microsoft  have  responded, 
see  (^uickLinks  50053  and  50178.) 

As  dual-core  processor  chips  be¬ 
come  the  norm  over  the  next  two 
years,  software  vendors'  attempts  to 
charge  per  core  could  backfire,  says 
Krewell.  "Dws  it  make  open-source 
software,  like  MySQL,  more  attractive, 
and  does  it  cause  a  shift  in  corpi>rate 
buying  to  open-source  packages  that 
are  much  more  flexibly  priced?"  he 
asks.  That's  a  question  users  are  likely 
to  answer  over  the  next  24  months. 
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Multicore 
Processor  Chips 

What  are  they? 

Silicon  chips  with  more  than  one 
processing  unrt.  each  often  able  to 
run  multipfe  threads  of  instruc¬ 
tions  and  each  often  having  its 
own  on-chip  cache. 

What's  the  benefit'’ 

The  chips  offer  the  performance  of 
multiple  processors  but  cost  less, 
take  up  less  space  and  corrsume 
less  power  than  multiple  single- 
core  designs. 

Best  application 

Target  applications  include  trans¬ 
action  processing,  and  database 
and  scientific  applications 

Caveat 

Multicore  processors  offer  fewer 
benefits  for  machines  running  a 
single  application  or  for  software 
that  won't  allow  eiecution  ot  in¬ 
structions  m  parallel .  You'll  save 
on  hardware  costs  but  could  pay 
more  in  software  licertsing  costs. 
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EDS’s  futurist 
is  preparing  for 
the  coming  data 
flood  with  context- 
sensitive  text¬ 
mining  tools. 
IYa«IYH.JUmES 


FUTURE 

WATCH 
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Jeff  Woefcor’s  job  as  Electronic  Data 
Systems  Corp.’s  futurist  is  to  develop 
companywide  initiatives  that  wiU  shape 
the  fiiture  of  EDS.  He  recently  told  Com- 
puterworid's  Gary  H.  Anthes  why  mo¬ 
bile  workers,  unstructured  information 
and  communicarions  infrastructures  are 
worthy  of  special  attention  in  the  com¬ 
ing  years. 

k  there  a  brfomtatkN)  exploskin  coming? 

Yes,  and  it’s  based  on  two  mafor  (actors. 
nist.  there’s  all  this  sensor  and  RFID  in¬ 
formation  that’s  startup  to  flow 
into  corporations,  and  it  will  only 
accelerate  Wal-Mart  is  looking  at 
STB  to  7TB  a  day.  The  other  6ac- 
tor  is  that  unstructured  informa¬ 
tion  makes  up  80%  to  90%  cd*  the  aver¬ 
age  corporation’s  information  content 
It’s  not  in  a  form  computers  can  readily 
use.  such  as  e-maiL  We  are  using  con- 
text-sertsittve  text  mining  as  a  tool  for 
structuring  that  content  When  you  do 
that  all  that  information  becomes  a  cor¬ 
porate  asset 

How  mkN  that  new  asset  be  usatf?  Most  of 


the  new  information  that  allows  you  to 
predict  the  future  is  nontraditional 
corporate  infonnation  —  what  we  call 
indicator  information.  You  have  trans¬ 
actions.  which  are  past;  you  have 
events,  which  are  current  and  you 
have  indicators,  which  are  not  tradi- 
tionally  used  in  business.  You  can  put 
that  information  in  a  data  mine  and  af¬ 
ter  the  fact  try  to  figure  out  what  you 
should  have  done.  Or  you  can  feed  it 
into  a  cause-and-eflfect  model . . .  and 
use  pattem-recognidon  technology. 
(That  gives  you]  the  ability  to  tmder- 
stand  patterns  of  business  activity  that 
are  going  to  repeat  and  say,  "What  do  I 
want  the  outcome  to  be?" 

Canyougivaacouplaofexamplas?  Weath¬ 
er  prediedons  for  a  warmer-than-usual 
winter  in  New  England  change  the 
model’s  probability  of  selling  x  fruit¬ 
cakes  to  y.  That,  cou¬ 
pled  with  a  colder- 
than-normal  forecast 
for  the  mid-Atlantic 
states,  drives  a  direc¬ 
tive  to  channel  the 
fhiitcake  to  those 
states. 

Or  an  erroneous 
newspaper  article 
reports  that  a  certain 
food  product  has  now 
been  linked  to  heart 
attacks.  In  every  city 
where  that  article  Im 
appeared,  you  can  ex¬ 
pect  the  demand  to 
fall  off  prec^itously. 
and  therefore  you 
need  to  “reverse- 

logistic"  the  existing  supplies  of  the 
product  to  areas  where  the  article  has 
Dotnm. 

WM  are  sonw  opportunitias  lor  FT  in  tht 
nwbla  world?  Mobile  workers  are  the 
orphans  of  the  infonnadon  revolution, 
because  IT  has  basically  ensconced 
itself  in  a  stationary  environment. 
Mobile  workers  work  asynchronously 
with  their  IT.  The  office  worker  works 
the  problem  with  the  computer,  but 
the  mobile  workers  for  the  most  part 
get  their  infonnadon,  go  out  and  do 
their  work,  come  back  and  report  their 
informadon.  The  IT  is  not  overlaid  di¬ 
rectly  on  top  of  their  work. 

We  have  built  a  testbed  called  proc¬ 
ess  mentor.  It’s  the  ability  for  you  to 
deliver  just-in-time  information  to 
the  mobile  worker.  Infonnadon  flows, 
unprompted  in  some  cases,  as  you 
need  it 

Can  you  gire  an  mrepio?  In  the  petrole- 
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um  industry.  70%  of  workers  are  in  the 
field  The  average  age  of  a  field  worker 
is  55.  and  50%  of  them  will  retire  in  the 
next  five  years.  That’s  a  hell  of  a  lot  of 
expertise  not  easily  replaced.  So  if  fm 
out  at  the  wellhead  and  I  ask,  "How  do 
I  take  this  thing  apart?"  all  of  a  sudden 
1  have  just-in-dme  training  that  tells 
me  exactly  how  to  do  it  It  says.  "Here’s 
Step  1  —  now  do  it.  Now  here’s  Step  2 
—  do  it,"  and  so  oa  It’s  the  opportuni¬ 
ty  to  put  IT  into  the  business  process 
rather  than  work  around  the  Inisiness 
process. 

Where  wi  we  see  smors  deploywf?  That 
airplane  that's  flying  has  sensors  that 
tell  me  that  a  certain  part  is  going  to  go 
out,  so  I  can  fly  the  part  to  the  destina¬ 
tion  before  the  plane  gets  there.  That’s 
the  kind  of  model  that’s  going  to  be  de¬ 
ployed  throughout  all  of  business.  All 
the  items  coming 
into  my  supply  chaia 
ail  the  items  going 
through  manufactur¬ 
ing.  all  items  going 
out  to  the  customer 
and  all  the  people  in 
my  organization  are 
going  to  be  sending 
me  information. 
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Al  that  extra  data  must 
hawa  huge  bnpHcatkms 
for  storaga  syatams. 

When  we  start  send¬ 
ing  petabytes  of  in¬ 
formation  from  one 
company  to  another, 
it’s  cheaper  to  have 
a  petabyte  storage 

cube  put  on  an  airplaite  and  fly  h  to  the 
other  coast.  That  will  be  a  constraint  in 
the  future,  because  petabytes  of  infor¬ 
madon  don’t  work  well  on  our  commu- 
nicadons  inftastructure. 

What's  lha  lolutian  to  that  proMam?  The 
amount  of  infonnadon  that  can  be 
stored  on  a  hard  drive  doubles  every 
year . . .  and  fiber-opdc  capacity  is 
doubling  every  nine  months.  \Afiule  it 
will  take  some  time,  this  will  overcome 
the  problem. 

Also,  you  can  break  the  file  into 
many  pieces,  transmit  the  pieces  and 
put  it  all  together  on  the  other  end. 

The  problem  here  is  the  infamous  last 
mile.  Most  companies  do  not  have 
[networks]  to  allow  them  to  send  the 
data  through  muldple  pipes  from  a  sin¬ 
gle  source  and  to  a  sin^e  destinadon. 
This  is  an  infrastructure  design  prob¬ 
lem  that  never  contemplated  needing 
many  T3s  to  the  same  point  of  origina- 
don/delivery.  O  48724 
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Master  of  the  Mainframe 


IBM’s  Jim  Rhyne  talks  about  the  future 
of  big  iron  in  the  age  ofWeb  services 


Jim  Rhyne,  an  IBM  distinguished  engi¬ 
neer.  is  the  company’s  lead  architect  for 
non-Java  application  development  tools 
and  CICS,  iBM’s  enduring  mainframe 
transaction-processing  middleware, 
which  recently  celebrated  its  35th  birth¬ 
day.  As  part  of  his  job.  Rhyne  works 
with  customers  to  modernize  their  old 
mainframe  environments.  He  spoke  with 
Computerworld’s  Robert  L.  Mitchell 
about  CICS,  Web  services  and  the  future 
of  the  mainframe. 

IBM's  CICS  tnnsactton-processing  rnidde* 
wan  is  now  3S  yean  oM.  What  is  its  future? 

At  the  b^iiming,  CICS  was  a  very 
crude  set  of  libraries  built  for  what  was 
then  the  IBM  360  operating  system. 
Over  the  years,  it  matured  ftt)m  a 
programming  library  into  something 
that's  strikingly  similar  to  what  we  have 
in  WebSphere  today.  It  provides  appli¬ 
cation  containers  that  not  only  support 
transaction  behavior  but  resource 
management  It  supports  scale-out. 

It's  ^ii^  to  remain  as  a  high-end. 
hi^-speed,  high-throughput  atomic 


transaction-processii^  system.  You’ll 
find  WebSphere  taking  over  the  low 
end  of  the  transaction-processing  mar 
ketplace  and  much  of  the  middle  as 
weU.  [CICSJ  is  going  to  be  a  full  player 
in  this  on-demand  integrated  comput¬ 
ing  environment  that  IBM  is  promot¬ 
ing.  You'll  fmd  ^gregations  of  soft¬ 
ware  designed  to  handle  Web  brows¬ 
ers,  designed  to  handle  external  inter¬ 
actions  mediated  by  Web  — 
services.  Behind  that  will 
be  transaction-processing 
databases,  and  we  expect 
CICS  to  be  one  of  the  pre¬ 
mier  solutions  that  we  offer. 


What  amarging  technologies 
are  affecting  CICS  and  maift- 
franies?XMLandWeb 
services,  service-oriented 
architectures  —  this  is  the 
big  thing  that’s  hitting  the 
mainframe.  If  you  look  at 
the  composition  of  SOA, 
there  is  a  universal  connec¬ 
tivity  part,  then  there  is 


Lead  diLhifect  for 
non-Java  application 
development  tools 
and  CICS  at  IBM 


componentization  —  taking  mono¬ 
lithic  applications  and  breaking  them 
down  into  reusable  chunks  of  business 
i(^c.  That  was  easy  to  apply  to  user 
interface  and  client-side  programming. 
Now  we're  getting  around  to  using  it  in 
a  serious  way  on  the  server  side. 

How  do  you  bridge  mainframes  with  Web 
services?  The  integration  software  [for 
CICS)  is  going  to  be  )2££  and  Java. 
CICS  applications  change,  and  when 
they  do,  there’s  an  outward  ripple  into 
the  WebSphere  environment. 

From  a  development 
point  of  view,  if  I  make  a 
change  to  a  CICS  applica¬ 
tion.  it’s  not  easy  to  find 
and  change  the  corre- 
spondii^  set  of  Web¬ 
Sphere  applications  that 
use  it.  What  you  have  is  a 
mixed  workload  applica¬ 
tion.  From  a  management 
point  of  view,  I  want  to 
manage  this  as  a  single  en¬ 
tity.  The  roost  important 
thing  [programmers)  can 
do  is  to  understand  the 
other  technolc^es  you 
have  to  interface  with.  It's 


a  lot  easier  for  these  communities  to 
operate  as  teams  if  they  understand 
each  other’s  technologies. 

Where  wM  the  mainframe  be  In  five  years? 

It’s  difficuli  to  predict.  Part  of  the  rea¬ 
son  is  that  on  hardware,  we  seem  to  be 
approaching  a  discontinuity.  For  years, 
we've  had  a  Moore’s  Law.  given  that 
machines  consume  less  power  and 
they  run  faster  (as  tinw  goes  on).  Well, 
we're  gettii^  close  to  the  end  now. 

At  that  point  in  time,  if  you  look  at 
how  you  are  going  to  meet  the  demands 
for  computing,  the  only  option  left  is  to 
go  into  large-scale  multiprocessing  — 
thousands  parallel  processors,  or 
even  tens  of  thousands  —  instead  of  the 
few  dozen  we  have  today. 

My  guess  is  mainftame  applications 
will  have  to  undergo  a  substantia) 
amount  of  change  because  they  were 
built  essentially  as  single-threaded  soft¬ 
ware.  The  mainframe  will  be  hit  by  this, 
a  lot  of  the  Unix  applications  will  be  hit 
by  this,  and  the  Mac  OS  and  Windows 
are  also  going  to  be  hit  by  this.  It  will  be 
a  big  game-changer,  and  my  (crystal] 
ball  is  pretty  cloudy  about  what’s  going 
to  happen.  O  50047 
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EDS’s  futurist 
is  preparing  for 
the  coming  data 
flood  with  context- 
sensitive  text¬ 
mining  tools. 
BYiiARYH.ANTHES 


Q)S  futurist  JcH  Wacker  sees  toys 
as  an  analogy  for  rapid  change,  since 
'Itids  turn  toys  at  an  astonishmg 
ratt.*  TNs  one  is  nude  from  oU  IT 
components,  demonstrating  ‘‘that  we 
create  the  futiffe  on  ttw  bones  ol  ttw 
past  >  but  different  from  the  past."^ 


Jeff  Wacker's  job  as  Electronic  Data 
Systems  Corp.’sfuturist  is  to  develop 
eompanywide  iniriativc’s  that  will  shape 
rhe/ufuren/EDS.  He  recently  told  Com* 
pulLT>vorld  s  Gan'  H.  Anthes  why  mo¬ 
bile  workers,  unstructured  information 
and  communications  infretstructures  are 
worthy  of  special  attention  in  the  com¬ 
ing  years. 

Is  there  an  information  explosion  coming? 
Yes,  and  it’s  based  on  two  major  factors. 
First,  there’s  all  this  sensor  and  RFID  in* 
fitcmaiion  that's  starting  to  flow 
into  corporations,  and  it  will  only 
accelerate:  Wal*Mart  is  looking  at 
STB  to  7TB  a  day.  The  other  fac¬ 
tor  is  that  unstructured  informa¬ 
tion  makes  up  SO^o  to  WN*  of  the  aver- 
i^e  corporation’s  information  content. 
It's  not  in  a  form  computers  can  readily 
use.  such  as  e-mail.  We  are  using  con- 
tcxt*sen.sitive  text  mining  as  a  too]  for 
structuring  that  content.  When  you  do 
that,  all  that  information  becomes  a  cor¬ 
porate  asset. 

How  might  that  new  asset  be  used?  Most  of 


the  new  information  that  allows  you  to 
I  predict  the  future  is  nuntradiiional 
I  corporate  information  —  what  wc  call 
I  indicator  information.  You  have  trans- 
I  actions,  which  are  past:  you  have 
events,  which  are  current;  and  you 
have  indicators,  which  are  not  tradi¬ 
tionally  used  in  business.  You  can  put 
that  information  in  a  data  mine  and  af¬ 
ter  the  fact  try  to  figure  out  what  you 
should  have  done.  Or  you  can  feed  it 
into  a  cause-and-effeci  model . . .  and 
I  use  pattern-recognition  technolog)-. 

I  [That  gives  you]  the  abilit)-  to  undcr- 
I  stand  patterns  of  business  activity  that 
I  are  going  to  repeat  and  say.  "What  do  I 
I  want  the  outcome  to  be?" 

I  Can  you  give  a  couple  of  examples?  Weath- 
I  er  predictions  for  a  warmcr-than-usual 
winter  in  New  England  change  the 
model’s  probability  of  selling  a:  fruit¬ 
cakes  to  y.  That,  cou-  _ 

pled  with  a  colder- 
than-normal  forecast 
for  the  mid-Atlantic 
states,  drives  a  direc¬ 
tive  to  channel  the 
fruitcake  to  those 


Electronic  Data 
Systems  Corp. 


Or  an  erroneous 
newspaper  article 
reports  that  a  certain 
food  product  has  now 
been  linked  to  heart 
attacks.  In  every  city 
where  that  article  has 
appeared,  you  can  ex¬ 
pect  the  demand  to 
fall  off  precipitously, 
and  therefore  you 
need  to  “reverse- 
logistic"  the  existing  supplies  of  the 
product  to  areas  where  the  article  has 
not  run. 

What  are  some  opportunities  for  IT  in  the 
mobile  world?  Mobile  workers  arc  the 
orphans  of  the  information  revolution, 
because  IT  has  basically  ensconced 
itself  in  a  stationary  environment. 
Mobile  workers  work  asynchronously 
with  their  IT.  The  office  worker  works 
the  problem  with  the  computer,  but 
the  mobile  workers  for  the  most  pan 
get  their  information,  go  out  and  do 
their  work,  come  back  and  repon  their 
information.  The  IT  is  ncrt  overlaid  di¬ 
rectly  on  top  of  their  work. 

Wc  have  built  a  testbed  called  proc¬ 
ess  mentor.  It’s  the  ability  for  you  to 
deliver  just-in-time  information  to 
the  mobile  worker.  Information  fltHvs, 
unprompted  in  some  cases,  as  you 
need  it. 

Can  you  give  an  example?  In  the  petrole¬ 


um  industry.  70‘’f)  of  workers  arc  in  the 
field.  The  average  age  of  a  field  worker 
is  55,  and  50%  of  them  will  retire  in  the 
next  five  years.  Thai's  a  hell  of  a  lot  of 
expertise  not  easily  replaced.  So  if  I'm 
out  at  the  wellhead  and  I  ask,  "How  do 
I  take  this  thing  apart?”  all  of  a  sudden 
1  have  just-in-time  training  that  tells 
me  exactly  how  to  do  it.  It  says,  "Here’s 
Step  1  —  now  do  it.  Now  here’s  Step  2 
—  do  it."  and  so  on.  It’s  the  opportuni¬ 
ty  to  put  IT  into  the  business  process 
rather  than  work  around  the  business 


Where  will  we  see  sensors  deployed?  That 
airplane  that’s  flying  has  sensors  that 
tell  me  that  a  certain  part  is  going  to  go 
out.  so  I  can  fly  the  part  to  the  destina¬ 
tion  before  the  plane  gets  there.  That’s 
the  kind  of  model  that’s  going  to  be  de¬ 
ployed  throughout  all  of  business.  All 

_ the  items  coming 

into  my  supply  chain, 
all  the  items  going 
through  manufactur¬ 
ing,  all  items  going 
out  to  the  customer 
and  all  the  people  in 
my  organization  arc 
going  to  be  sending 
me  information. 


EDS  tfiUow  and  futunst 


Wacker  IS 

chief  technology  otficer  for 
EDS’s  Global  Industry  groups. 
He  earr>ed  a  bachelor’s  degree 
in  computer  science  and  an 
MBA  from  the  University  of 
Nebraska.  He  is  a  member  of 
MIT s  Society  of  Learning. 


All  that  extra  data  must 
have  huge  impficattons 
for  storage  systems. 

When  wc  start  send- 
ii^  petabytes  of  in¬ 
formation  from  one 
company  to  another, 
it's  cheaper  to  have 
a  petabyte  storage 
cube  put  on  an  airplane  and  fly  it  to  the 
other  coast.  That  will  be  a  constraint  in 
the  future,  because  petabytes  of  infor¬ 
mation  don't  work  well  on  our  commu¬ 
nications  infrastructure. 

What’s  the  solution  to  that  problem?  The 
amount  of  information  that  can  be 
stored  on  a  hard  drive  doubles  every 
year . . .  and  fiber-optic  capacity  is 
doubling  every  nine  months.  While  it 
will  take  some  time,  this  will  overcome 
the  problem. 

Also,  you  can  break  the  file  into 
many  pieces,  transmit  the  pieces  and 
put  it  all  ti^ether  on  the  other  end. 

The  problem  here  is  the  infamous  last 
mile.  Most  companies  do  not  have 
[networks]  to  allow  them  to  send  the 
data  through  multiple  pipes  from  a  sin¬ 
gle  source  and  to  a  sii^le  destination. 
This  is  an  infrastructure  design  prob¬ 
lem  that  never  contemplated  needing 
many  T3s  to  the  same  point  of  origina¬ 
tion/delivery.  O  49724 
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Master  of  the  Mainframe 


IBM’s  Jim  Rhy  ne  tall<s  about  the  Riture 
of  big  iron  in  the  age  of  W'eb  ser\’ices 


Jim  Rhyne,  an  IBM  distinguished  engi¬ 
neer.  is  the  company’s  lead  arehifecf  for 
non-/avu  application  development  tools 
and  C/CS.  IBM's  enduring  mainframe 
transaction-processing  middleware, 
which  recently  celebrated  its  d5th  birth¬ 
day.  As  part  of  his  job.  Rhyne  works 
with  customers  to  modernize  their  old 
mainjrame  environments.  He  spoke  with 
Computorworld’sRoberf  L  Mitchell 
about  CICS,  Web  services  and  the  future 
of  the  mainframe. 

IBM's  CICS  transaction-processing  middle¬ 
ware  is  now  3S  years  old.  What  is  its  future? 
At  the  beginning.  CICS  was  a  very 
crude  set  of  libraries  built  for  what  was 
then  the  IBM  360  operating  system. 
Over  the  years,  it  has  matured  from  a 
programming  library  into  something 
that's  strikingly  similar  to  what  we  have 
in  WebSphere  today.  It  provides  appli¬ 
cation  containers  that  not  only  support 
transaction  behavior  but  resource 
management.  It  supports  scale-out. 

It's  going  to  remain  as  a  high-end. 
high-speed,  high-throughput  atomic 


transaction-processing  system.  You'll 
find  WebSphere  taking  over  the  low 
end  of  the  transaction-processing  mar¬ 
ketplace  and  much  of  the  middle  as 
;  well.  [CICS]  is  going  to  be  a  full  player 
in  this  on-demand  integrated  comput¬ 
ing  environment  that  IBM  is  pn)mot- 
ing.  You'll  find  aggregations  of  s«dt- 
ware  designed  to  handle  Web  brows¬ 
ers.  designed  to  handle  external  inter¬ 
actions  mediated  by  Web 
I  serx'iees.  Behind  that  will 
I  be  transacti*)n-priKcssing 
I  databases,  and  we  expect 
I  CICS  to  be  one  of  the  pre- 
j  mior  solutions  that  we  offer. 


What  emerging  technologies 
are  affecting  CtCS  and  main¬ 
frames?  XML  and  Web 
scr\-ices.  service-oriented 
architectures  —  this  is  the 
big  thing  that's  hitting  the 
mainframe.  If  you  look  at 
the  composition  of  SOA. 
there  is  a  universal  connec¬ 
tivity  part,  then  there  is 


development  toots 
and  CICS  at  IBM 


eomp»)ncnlization  —  taking  mono¬ 
lithic  applications  and  breaking  ihem 
down  into  reusable  chunks  of  businesx 
logic.  That  was  easy  to  apply  to  user 
interface  and  client-side  programming. 
Now  we're  getting  around  using  il  in 
a  serious  way  on  the  server  side 

How  do  you  bridge  mainframes  with  Web 
services?  The  integral itm  s<*ftware  Ifor 
CICS  I  ingoing  to  he  I2LI-  and  |a\.i 
(-ICS  applications  change,  and  when 
they  do.  there's  an  outward  ripple  into 
the  WebSphere  environment. 

from  a  development 
point  of  view,  if  1  make  a 
change  to  a  (dCS  applica¬ 
tion.  it's  not  easy  to  find 
and  change  the  corre¬ 
sponding  set  of  Web¬ 
Sphere  applications  llun 
U-se  it.  What  you  h.ive  is  a 
mi.xed  workload  applica¬ 
tion.  From  a  management 
pt)int  of  view.  1  want  to 
manage  this  as  a  single  en¬ 
tity.  The  most  important 
thing  (prtigrammcrs)  can 
do  is  to  understand  the 
other  technologies  you 
have  to  interface  with.  It’s 


Lead  architect  lor 
non- Java  application 


.1  lot  easier  foi  these  eoimnunities  to 
opi-r.iie  .IS  te.tnis  ifthev  understand 
e.ieh  other's  loehnologies. 

Where  will  the  mainframe  be  in  five  years? 

It's  difficult  to  predict.  B.iri  of  the  re.i- 
son  is  ih.it  on  h.irdvv.ire.  we  seem  to  he 
.ipproaehing  .i  dis<-ontinuii\.  I  or  ye.trs. 
we've  had  .i  Moore  s  1  jw,  given  that 
machines  consume  less  pow  er  and 
they  run  f.isierlas  time  goes  on].  Well, 
we  re  getting  close  to  the  end  now. 

.\t  that  point  in  time,  if  y«'u  hiok  .u 
how  you  are  going  to  meet  the  dem.inds 
for  computing,  the  only  option  left  is  to 
go  into  large-sv  .ile  muUiproei  ssing  — 
thousands  of p.ir.illel  processors.  i>r 
even  tens  t  if  ilious.inds  instead  of  the 

few  d**/en  we  havetod.jy. 

Mv  guess  is  m.iinframe  .ipplie.ilions 
will  have  to  undergo  .1  substantial 
amount  ol  change  Kvausi-  they  were 
built  essentially  as  single-thre.ided  s.>ft 
ware.  I'he  mainframe  w  ill  K'  hit  by  this, 
a  l«*t  ofthe  L'nix  .ipplieattonswill  be  hit 
by  this,  and  the  Mae  OS  .md  Windows 
are  also  going  to  be  hit  by  this.  It  will  K- 
a  biggame-ehanger.  and  my  len. stall 
hall  is  pretty  elouJv  about  w  hat's  going 
to  lutppen.  O  50047 
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We  re  inspired  by  the  human  side  of  data.  Keeping  bank  data  and  medical  information 
secure  is  more  than  just  keeping  1's  and  O's  safe.  What  you're  reatly  protecting  is  a  child's 
college  tuition,  and  a  man's  key  to  better  living.  That’s  why  the  world's  largest  banks  and 
hospitals  use  Hitachi  storage  technologies  to  protect  their  data,  and  their  customers 
futures.  From  the  smallest  Microdrive'  to  the  largest  SAN  solution.  Data  Storage  from  Hitachi. 
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Sarb-Ox  Project 
Following  Script 


As  the  deadline  for  compliance  with  the 
financial  accountability  act  approaches, 
systems  testing  is  coming  along. 

By  Mathias  Thurman 


I  CONTINUE  to  get  a  signifi¬ 
cant  amount  of  e-mail  a.sk- 
ing  about  the  Sarbancs- 
Ox]c>'  Act.  so  I  thought ! 
would  provide  an  update  on 
our  progress  toward  compli¬ 
ance.  Since  the  last  lime  I 
commented  on  this  subject 
[QuickUnk  48412).  we  have 
come  quite  a  ways. 

A  few  months  ago.  I  attend¬ 
ed  a  meeting  with  - 

representatives  from  firm 
networking,  data  cen- 
ter  operatiotus,  data- 
base  and  application 
engineering,  Unix  iNMIil 
and  Windows  NT  ad¬ 
ministration  and  nth- 
cr  groups  to  discuss  control 
objectives  for  each  area. 

We  mainly  used  Cobtt  (Con¬ 
trol  Objectives  for  Informa¬ 
tion  and  Related  Technology) 


the  Oracle  database  area 
might  say.  “Users  do  not  di¬ 
rectly  access  the  Oracle  data- 
ba.se  using  the  application  ID 
or  a  generic  account."  Certain 
parameters  within  the  Oracle 
database  configuration  file, 
as  well  as  the  Unix  user  ac¬ 
counts.  would  have  to  be  re¬ 
viewed  t4»  determine  who  had 
access  tt)  the  serxer  and  the 

- -  database.  Given  that 

■1,-1  we  have  dozens  of 

Kl  I T  Oracle  servers  in 

iftfyp  ourenvinmment 

liic?  ^  ******* 

Q  form,  it  made  sen.s(.‘ 

to  run  a  script  on 
'  each  server  that 

I  would  obtain  the  information 
from  ctmfiguraiion  files. 

'  For  Oracle.  mi>sl  of  the  test 
results  were  within  cither  the 
'  init.oraorthelistener.orafilc. 


SECURITY 

MANAUEirS 

JOURHALa 


to  help  identify' our  controls.  It  |  TTie  script  twik  some  lime 


provides  a  framework,  guide¬ 
lines  and  some  implementa¬ 
tion  tools  to  steer  companies 
in  the  right  direction. 

Finding  Our  Focus 

We  also  needed  to  think  about 
which  systems  would  have  to 
be  looked  at.  Our  company 
has  over  5(X)  production  Unix 
serv’ers  and  several  hundred 
hTT  scrvx'rs  sunning  various 
applications.  There  was  no  way 
we  could  test  over  700  sers  ers. 
Since  SarbarK's-Oxley  focuses 
on  financials,  we  came  up  with 
a  list  of  systems  that  affect  our 
financial  reporting  Those  700- 
plus  servers  dwindled  to  just 
under  100.  We  then  categorized 
them  by  applicaimn  to  belter 
manage  the  workload. 

Once  we  formalized  tbc  ob¬ 
jectives.  the  testing  was  fairly 
straightforward.  For  example, 
one  control  obfeciive  within 


I  to  develop,  but  in  the  end. 

I  we  had  an  easily  repeatable 
I  method  for  testing  our  Oracle 
I  environment. 

I  For  the  Unix  servers,  a 
I  control  objective  might  be. 

I  “User  passwords  must  be 
I  changed  every  90  da>'s."  The 
'  test  for  this  objective  would 


It's  imperative 
that  we  come  up 
withastandardi^ 
method  to  test  our 
control  objectives. 

Scripts  are  one 
method. 


be  to  review  the  /cic/dcfauli/ 
password  file  for  every  Unix 
server  and  see  if  the  "MAX- 
WF.EKS"  parameter  was  set 
to  90  days.  With  over  25  con¬ 
trol  objectives  for  the  Unix 
environment  and  dozens  of 
servers  to  test,  we  developed 
another  script.  Twts  included 
grabbing  configuration  files, 
checking  file  permissions, 
listing  patches  and  installed 
applications,  and  running 
commands  to  obtain  system 
information. 

We’ll  have  to  repeat  this 
process  every  year,  so  it's  im¬ 
perative  that  we  come  up  with 
a  standardized  method  to  test 
our  control  objectives.  Scripts 
are  one  method  of  ensuring 
that  we're  consistent. 

Tracking  Our  Work 

To  keep  track  of  our  work, 
we  developed  standardized 
spreadsheets  for  each  IT  con¬ 
trol  area.  For  each  control  ob- 
jci'tivc.  we  identified  the  im¬ 
plication  of  a  particular  objec¬ 
tive  not  being  satisfied,  the 
testing  procedure  and  recom¬ 
mendations  if  it  failed.  Wc 
also  included  a  column  to 
register  ic^si  results. 

After  the  testing  was  com¬ 
pleted.  each  person  responsi¬ 
ble  for  an  area  of  testing  cre¬ 
ated  what  we  called  “gap 
sheets,"  which  identified 
failed  control  objeclivcs.  The 
managers  then  met  to  go  over 
the  gap  sheets  and  plan  for  fix¬ 
ing  the  gap  or  determining 
what  are  termed  “compensat¬ 
ing  controls.” 

In  the  test  for  password  ex¬ 
piration.  for  example,  compen¬ 
sating  controls  might  be  that 
users  are  forced  to  use  Secur- 
ID  two-factor  authentication 
to  access  Unix  servers  and 
that  the  system  is  locked  down 
to  prevent  users  from  directly 
logging  in  via  their  user  ac¬ 
counts.  Compensating  con¬ 
trols  have  to  be  used  carefully. 


though,  since  auditors  could 
suggest  that  we're  making  ex¬ 
cuses  for  not  doing  the  work 
needed  to  make  the  sy’stem 
modifications. 

Although  I've  mentioned 
only  the  Oracle  and  Unix  ar¬ 
eas.  several  others  were  iden¬ 
tified  in  relation  to  IT  securi¬ 
ty.  For  example,  incident  re¬ 
sponse.  security  policies,  log 
monitoring,  intrusion  detec-  i 
tion  and  encryption  have  their  i 
own  control  objectives.  Unfor¬ 
tunately,  because  I  represent 
the  security  department.  I  was 
restricted  from  performing  the 
security  tests,  since  it  could  be 
argued  that  I'm  biased. 

We  have  completed  our  test¬ 
ing  and  are  working  hard  to 
retrofit  our  systems,  proce¬ 
dures  and  policies  to  comply 
with  the  identified  control 
objectives.  We’re  finding  that 
wc  can't  just  arbitrarily  make 
changes  to  satisfy  a  Sarbanes- 
Oxlcy  test  objective,  especially 
in  a  production  envittmment 
that  generates  thousands  of 
dollars  per  minute  in  revenue. 

For  example,  if  an  objective 
was  to  ensure  that  only  neces¬ 
sary  applications  were  in¬ 
stalled.  the  response  might  be 
to  remove  unnecessary  appli¬ 
cations.  Sometimes,  by  remov¬ 
ing  an  application,  associated 
system  libraries  also  get  re¬ 
moved.  which  may  affect  oth¬ 
er  applications  or  general  sys¬ 
tem  operation.  Unfortunately, 
we  don't  have  a  robust  devel¬ 
opment  environment  that  di¬ 
rectly  mirrors  our  production 
systems,  so  we  can't  easily  test 
such  things  ahead  of  time. 

Changing  our  environment 
to  meet  the  control  objectives 
will  be  very  time-consuming, 
frustrating  and  critical  for  our 
company.  In  December,  the  of- 
!  ficial  audit  will  take  place,  and 
we're  fairly  confident  that  if 
we're  tested  according  to  the 
current  control  objectives, 
we'll  do  fine.  I 

WHAT  DO  YOU  THINK? 

This  week's  journal  is  wniten  t^  a  leal  secun- 
ly  manager.  'Mainias  Thurman.*  whose 
name  and  employer  have  teen  disguised  for 
obvious  masons  Contact  ten  at  mathias. 
thurman9yahoo.com.  or  jom  the  discussion 
in  oiff  forum  QuickUnkaQ90 
To  find  a  comolete  archive  of  our 
Secunty  Manager  s  Journals,  go  onkne  to 
O  ceinputerworid.cofn/sw)ouniai 
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Sarb-Ox  Project 
Following  Scriiit 


ite  the  deadline  for  conipfiance  with  the 
financial  accountabMty  act  approaches, 
systems  testing  is  coming  along. 
Mathias  Thurman 


I  CONTINUE  to  get  a  signifi¬ 
cant  amount  of  e-mail  ask- 
ii^  about  the  Sarbanes- 
Oxley  Act  so  I  thought  I 
would  provide  an  update  on 
our  progress  toward  compli¬ 
ance.  Since  the  last  time  1 
commented  on  this  subject 
(QuickLink  48412).  we  have 
come  quite  a  ways. 

A  few  months  aga  I  attend¬ 
ed  a  meeting  with  - 

representatives  from 
networking,  data  cen- 
ter  operatkms.  data¬ 
base  and  application 
engineering.  Unix  JQlH 
and  Windows  NT  ad¬ 
ministration  and  oth- 
er  groups  to  discuss  control 
objectives  for  each  area. 

We  mainly  used  Cobit  (Con¬ 
trol  Objectives  for  Informa¬ 
tion  and  Related  Technology) 


SECUMTY 

JOHDUia 


the  Oracle  database  area 
might  say.  “Users  do  not  di¬ 
rectly  access  the  Oracle  data¬ 
base  using  the  application  ID 
or  a  generic  account"  Certain 
parameters  within  the  Oracle 
database  configuration  file, 
as  well  as  the  Unix  user  ac¬ 
counts.  would  have  to  be  re¬ 
viewed  to  determine  who  had 
access  to  the  server  and  the 

-  database.  Given  that 

we  have  dozens  of 
Oracle  servers  in 
our  environment 
..  and  32  tests  to  per- 

U  Q  form,  it  made  sense 

_  to  run  a  script  on 

each  server  that 
would  obtain  the  information 
horn  configuration  files. 

For  Oracle,  most  of  the  test 
results  were  within  either  the 
initora  or  the  Ustenerora  file. 


to  help  identify  our  controls.  It  The  script  took  some  time 


provides  a  framework,  guide¬ 
lines  and  some  implementa¬ 
tion  toob  to  steer  companies 
in  the  right  directioa 

Fnlng  Our  Focus 

We  also  needed  to  think  about 
adiich  systems  would  have  to 
be  looked  at  Our  company 
has  over  500  production  Unix 
servers  and  several  hundred 
NT  servers  running  various 
applications.  There  was  no  way 
we  could  test  over  700  servers. 
Since  Sarbanes-Oxley  focuses 
on  financials,  we  came  up  with 
a  list  of  systems  that  affect  our 
financial  reporting.  Those  700- 
phis  servers  dwindled  to  iust 
under  TOO.  We  then  categorized 
them  by  application  to  better 
manage  the  woridoad. 

Once  we  formalized  the  ob¬ 
jectives,  Che  testing  was  fouiy 
strai^icforward.  For  example, 
one  control  objective  within 


to  develop,  but  in  the  end, 
we  bad  an  easily  repeatable 
method  for  testing  our  Oracle 
environroenL 
Fot  the  Unix  servers,  a 
control  objective  might  be. 
“User  passwords  must  be 
changed  every  90  days."  The 
test  for  this  objective  would 


H’s  imperative 
that  we  come  up 
with  a  standardized 
method  to  test  our 
control  objectives. 

Scripts  are  one 
method. 


be  to  review  the  /etc/defoult/ 
password  file  for  every  Unix 
server  and  see  if  the  “MAX- 
WEEKS"  parameter  was  set 
to  90  days.  With  over  25  con¬ 
trol  objectives  for  the  Unix 
environment  and  dozens  of 
servers  to  test,  we  developed 
another  script.  Tests  included 
grabbing  configuration  files, 
checking  file  permissions, 
listii^  patches  and  installed 
applications,  and  running 
commands  to  obtain  system 
Information. 

Well  have  to  repeat  thb 
process  every  year,  so  it’s  im¬ 
perative  that  we  come  up  with 
a  standardized  method  to  test 
our  control  objectives.  Scripts 
are  one  method  of  ensuring 
that  we’re  consistent. 

Tracking  Our  Work 

To  keep  track  of  our  work, 
wc  developed  standardized 
spreadsheets  for  each  IT  con¬ 
trol  area.  For  each  control  ob¬ 
jective.  we  identified  the  im¬ 
plication  of  a  particular  objec¬ 
tive  not  being  sarisfied,  the 
testing  procedure  and  recom¬ 
mendations  if  it  failed.  We 
also  included  a  column  to 
regbter  test  results. 

After  the  testing  was  com¬ 
pleted,  each  person  responsi¬ 
ble  for  an  area  of  testing  cre¬ 
ated  what  we  called  “gap 
sheets,”  which  identified 
failed  control  (fojectives.  The 
managers  then  met  to  go  over 
the  gap  sheets  and  plan  for  fix- 
ii^  the  gap  or  determining 
what  are  termed  “compensat¬ 
ing  controls.” 

In  the  test  for  password  ex¬ 
piration.  for  example,  compen¬ 
sating  cotttroU  mi^t  be  that 
users  are  forced  to  use  Secur- 
ID  two-factor  authentication 
to  access  Unix  servers  and 
that  the  system  is  locked  down 
to  prevent  users  from  directly 
logging  in  via  their  user  ac¬ 
counts.  Compensating  con¬ 
trols  have  to  be  used  carefully. 


though,  since  auditors  could 
suggest  that  we’re  making  ex¬ 
cuses  for  not  doing  the  work 
needed  to  make  the  system 
modifications. 

Although  Pve  mentioned 
only  the  Oracle  and  Unix  ar-  i 
eas,  several  others  were  iden¬ 
tified  in  relation  to  IT  securi¬ 
ty.  For  example,  incident  re¬ 
sponse,  security  policies,  log 
monitoring,  intrusion  detec¬ 
tion  and  encryption  have  their 
own  control  objectives.  Unfor¬ 
tunately.  because  I  represent 
the  security  department.  I  was 
restricted  from  performing  the 
security  tests,  since  it  could  be 
argued  that  Tm  biased. 

We  have  completed  our  test¬ 
ing  and  are  working  hard  to 
retrofit  our  systems,  proce¬ 
dures  and  policies  to  comply 
with  the  identified  control 
objectives.  We're  finding  that 
we  can't  just  arbitrarily  make 
changes  to  satisfy  a  Sarbanes- 
Oxley  test  objective,  especially 
in  a  productioD  environment 
that  generates  thousands  of 
dollars  per  minute  in  revenue 

For  example,  if  an  objective 
was  to  ensure  that  only  neces¬ 
sary  applications  were  in¬ 
stalled,  the  response  might  be 
to  remove  unnecessary  appli¬ 
cations.  Sometimes,  by  remov¬ 
ing  an  application,  associated 
system  libraries  also  get  re¬ 
moved.  which  may  affect  oth¬ 
er  applications  or  general  sys¬ 
tem  operation.  Unfortunately, 
we  don't  have  a  robust  devel¬ 
opment  environment  that  di¬ 
rectly  mirrors  our  production 
systems,  so  we  can’t  easily  test 
such  things  ahead  of  time. 

Changing  our  environment 
to  meet  the  contrtd  objectives 
will  be  very  time-consuming, 
frustrating  and  critical  for  our 
company.  In  December,  the  of¬ 
ficial  audit  will  take  place,  and 
we're  fairly  confident  that  if 
we're  test^  according  to  the 
current  control  objectives, 
we’U  do  fine.  I 

wmtmynum? 

This  week's  lord  6  written  bya  kbI  seem¬ 
ly  rnanager.  *MattN8s  Tbumun.*  whose 
name  and  employer  have  been  disgueed  for 
obwous  reasons.  Contact  him  ai  mdhias. 
thurman^yehoocoiTL  or  join  the  ditcusm 
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Copemic  Upgrades 
De^opSea^h 

■  Copemic  Technologies  Inc.  has 
released  Version  1.1  of  Copemic 
Desktop  Search,  which  features 
faster  scanning  of  Microsoft  Out* 
kxA  e-mails,  improved  computer 
resource  usage  monitoring,  cus¬ 
tomizable  scheduled  indeiing  and 
the  ability  to  use  multiple  win¬ 
dows  for  queries,  said  the  Cana¬ 
da-based  company.  TTw  free 
download  is  available  at  the  com¬ 
pany’s  Web  site,  wwnr.copemic. 
com,  and  works  with  Wndovrs 
98^e/NT/2000/XP  and  fetemet 
Explorer  S.0  or  later. 


Aten  Announces 
Eight-Port  Switch 


e  Aten  Technology  Inc.  In  Irvine, 
Calif.,  last  week  annourKed  the 
KH88.  an  eight-port  switch  for 
remote  keyboard,  video  and 
mouse  connections  between  eight  i 
computers.  The  switch  provides  | 
the  abiHty  to  cascade  from  any  | 
port  and  controls  for  512  comput¬ 
ers  from  a  singie  console.  The  I 
KWa  is  priced  at  S449.95.  { 


Adaptec  Releases 
Data  Replicator 

•Adaptec  bic.  in  MMpKas.  C^.. 
has  annoimcad  ttw  avaiiabiity  of  I 
Snap  Enterprise  Data  RppHcator.  ' 
The  software  offers  automated 
data  movement  from  multiple  re¬ 
mote  sitas  to  a  central  locatkm.  | 
Adaptec  said.  Snap  EDR  pricing  ^ 
starts  al  $2,699  per  server. 


SeeBeyond  Ports 
Components  to  &n 


•  SeeBeyond  Technology  Corp. 
last  week  said  H  wil  port  compo¬ 
nents  of  Its  Integration  Composite 
Application  Netororfc  Sidte  to  Sun 
Microsystems  inc.'s  Java  Enter¬ 
prise  System,  starling  with  its 
eOale  Integrator  5  toSun’s  Java 
System  Application  Server  0.  The 
companies  also  plan  joint  offer¬ 
ings  aroimd  Sun's  Java  System 
Portal  Server  and  SeeBeyond’ s 
ICAN  5  integration  server. 
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Openness  as  a  Privacy 
Protection  Strategy 


The  challenge  that  new  computer, 
network  and  sensor  technologies  pose 
for  privacy  is  now  beyond  dispute.  At 
the  forefront  of  social,  legal  and  business 
struggles  over  defining  privacy  in  an  age 
of  increasing  exposure  of  personal  information  is  the 


iransparcnt  enterprise. 

As  I  JiseusseJ  in  iwo  earli¬ 
er  columns  iQuickLinks 
48.>74  and  4‘>552j.  our  enter¬ 
prises  are  incrcasinply  trans¬ 
parent.  We  see  yrowin^  link¬ 
ages  among  previous!) 
stovepiped  databases-  Web 
services  and  semantic  Web 
technology  will  cx>nncct  in¬ 
formation  stores  of  partners 
that  span  enterprise  bound¬ 
aries,  .ind  our  networks  arc 
connected  though  mobile  in¬ 
frastructures  that  reveal  not 
just  who's  online  but  their 
physical  locations. 

All  of  this  means  that 
we're  collecting  orders  of 
magnitude  more  information 
and  have  the  power  to  do 
much  more  with  it  than  ever  before. 

So.  the  privacy  challenge  in  the  age  of 
transparency  is.  How  do  we  respect  the 
privacy  expectations  of  our  customers 
and  employees  while  taking  advantage 
of  critical  new  data-iniegralion  capabili¬ 
ties  available  to  us? 

Perhaps  the  only  way  to  protect  priva¬ 
cy  is  through  greater  exposure  of  per¬ 
sonal  information.  After  thousands  of 
years  of  cttde-making.  cryptographers 
Icarnc-d  that  security  by  obscurity  is  no 
security  at  all.  While  there  are  important 
difiercnccs  between  security  and  priva¬ 
cy.  could  it  be  that  privacy  by  obscurity 
is  alH>ui  to  go  the  way  of  .security  by  ob¬ 
scurity?  CIOs,  privacy  ofilccrs  and  oth¬ 
ers  who  worry  about  the  public  policy 
implications  ought  to  pay  attention  to 
transparenc)’  design  strategics  as 
cornerstones  of  privacy; 

Three  technical  phenomena 
should  encourage  system  design¬ 
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ers  to  rethink  their  ap¬ 
proach  to  privacy  protec¬ 
tion:  first,  the  gradual 
demise  of  stovepiped  appli¬ 
cations  in  favor  of  enter- 
prisevvide  data  integration: 
second,  the  rapidly  declin¬ 
ing  cost  of  Wcb-scalc  query: 
.ind  third,  the  rapid  spread 
of  sensor  networks  in  public 
and  private  settings.  The 
dramatic  privacy  impact  of 
cheap.  Web-scale  data  inte¬ 
gration  is  visible  today 
through  the  operation  of 
systems  such  as  credit  card 
fraud-detection  networks, 
vehicle  guidance  and  tele¬ 
metry  systems,  transpon¬ 
der-based  tolI-collcction 
systems  that  also  seem  to 
monitor  irafllc  flow,  and  the  proximity 
cards  tied  to  individual  identity  that  arc 
increasingly  c-ommon  in  office  buildings. 

Science  fiction  author  David  Brin  is 
best  known  for  suggesting  that  we  em¬ 
brace  transparency.  His  proposal  has 
been  treated  with  considerable  skepti¬ 
cism  in  the  privacy  community.  Funda¬ 
mental  changes  in  the  technology  wc 
adopt,  as  well  as  limitations  in  privacy 
protection  regulations,  compel  u.s  to  lake 
a  more  carvlul  look  at  what  transparency 
has  to  offer.  We  must  not  conclude  that 
privacy  has  been  somehow  superseded 
by  2lst  century  IT.  Indeed,  the  increased 
data  collection  and  infcrencing  power  in 
today's  information  environments  makes 
support  for  fundamental  privacy  values 
all  the  more  imptirtant. 

Is  the  transparent  enterprise 
destined  to  be  the  engine  of  the 
elimination  of  privacy?  Has  the 
analytic  power  and  data-gatbering 


reach  of  today's  information  networks 
rendered  privacy  a  disappearing  artifact 
of  simpler,  less-oetworked  times?  I  don't 
believe  so.  but  in  order  lo  retain  the  dig¬ 
nity,  control  and  t>cca.sional  solitude  that 
•ire  at  the  heart  of  privacy,  we  have  to 
start  designing  systems  dilTercntly. 

First,  we  should  embrace  transparency 
as  a  design  philosophy  that  can  help 
people  ensure  that  information  about 
them  isn’t  u-sed  in  a  way  that's  contrar)’ 
to  legally  permissible  purposes  or  in  vio¬ 
lation  of  agreements  under  which  it  wa.s 
collected.  Our  design  gt>al  should  be  to 
provide  active  transparency  to  users.  In 
many  cases,  people  arc  comfortable 
about  information  collection,  provided 
they  know  that  it’s  happening,  under¬ 
stand  the  purpose  of  it  and  can  check 
that  it’s  not  being  used  inappropriately. 

Second,  protecting  privacy  in  an  in¬ 
creasingly  transparent  society  will  be 
possible  only  with  privacy  laws  that  re¬ 
flect  the  great  expansion  of  data  collec¬ 
tion  and  infcrencing  capabilities.  It’s  al¬ 
ways  better  to  delete  personal  informa¬ 
tion  that’s  no  longer  needed  (or  shouldn’t 
have  been  collected  in  the  first  place). 
However,  wc  have  to  face  the  fact  that 
there  are  mounting  reasons  lo  collect 
more  and  more  information  about  people. 

Finally,  living  with  transparency  will 
be  a  challenge.  Wc  aren’t  likely  to  get 
cither  legal  or  technical  measures  right 
the  first  time.  Hence,  we  must  devote  re¬ 
sources  to  a  wise  and  sustained  dialogue 
among  regulators,  the  citizenry  and 
technical  designers. 

This  is  the  transparency  paradox: 

Amid  the  explosion  of  the  collection  of 
personal  information,  privacy  protection 
requires  that  wc  embrace  the  trans¬ 
parency  of  information  systems  in  order 
to  ensure  that  information  is  used  prop¬ 
erly.  Giving  people  a  window  into  the  in¬ 
formation  collected  about  them,  and 
control  over  its  use,  can  help  put  the 
transparent  enterprise  on  the  right  side 
of  privacy  protection.  O  50169 
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DANIEL  J.  WEITZNER 


Openness  as  a  Privacy 
Protection  Strategy 


The  challenge  that  new  computer, 
network  and  sensor  technologies  pose 
for  privacy  is  now  beyond  dispute.  At 
the  forefront  of  social,  legal  and  business 
struggles  over  defining  privacy  in  an  age 
of  increasing  exposure  of  personal  information  is  the 


transpareitt  enterprise. 

As  I  discussed  in  two  earli* 
er  columns  (Quickl4nfc.s 
48574  and  49552J.  our  enter¬ 
prises  are  increasingly  trans¬ 
parent.  We  see  growing  link¬ 
ages  among  previously 
stovepiped  databases.  Web 
services  and  semantic  Web 
technology  will  connea  in¬ 
formation  stores  of  partners 
that  span  enterprise  bound¬ 
aries,  and  our  networks  are 
connected  though  mobile  in- 
irasmictures  that  reveal  not 
iust  who's  online  but  their 
physical  locations. 

AU  of  this  means  that 
we're  collecting  orders  of 
magnitude  more  information 
and  have  the  power  to  do 
much  more  with  it  than  ever  before. 

So,  the  privacy  challenge  in  the  age  of 
transparency  is.  How  do  we  respect  the 
privacy  expectations  of  our  customers 
and  employees  while  taking  advantage 
of  critical  new  data-integration  capabili¬ 
ties  available  to  us? 

Perhaps  the  only  way  to  protect  priva¬ 
cy  is  through  greater  exposure  of  per¬ 
sonal  information.  After  thousands  of 
years  of  code-makii^.  cryptographers 
learned  that  security  by  obscurity  is  no 
security  at  all.  While  there  are  impoitani 
di0cret>ces  between  security  and  priva¬ 
cy,  could  it  be  that  privacy  by  obscurity 
is  about  to  go  the  way  of  security  by  ob¬ 
scurity?  CIOs,  privacy  oftlccrs  and  oth¬ 
ers  who  worry  about  the  public  policy 
implications  ou^t  to  pay  artentioo  to 
transparency  dnign  strategies  as 
cornerstones  of  privacy. 

Three  technical  phenomena 
should  encourage  system  design¬ 


ers  to  rethink  their  ap¬ 
proach  to  privacy  protec¬ 
tion:  first,  the  gradual 
demise  of  stovepiped  appli¬ 
cations  in  favor  of  enter¬ 
prisewide  data  integration; 
second,  the  rapidly  declin¬ 
ing  cost  of  Web-scale  query: 
and  third,  the  rapid  spread 
of  sensor  networks  in  public 
and  private  settings,  llie 
dramatic  privacy  impact  of 
cheap,  Web-scale  data  inte¬ 
gration  is  visible  today 
through  the  operation  of 
systems  such  as  credit  card 
fraud-detection  networks, 
vehicle  guidance  and  tele¬ 
metry  systems,  transpon¬ 
der-based  toll-coUection 
systems  that  also  seem  to 
mcmitor  traffic  How.  and  the  proximity 
cards  tied  to  individual  identity  fhat  arc 
increasingly  common  in  office  buildings. 

Science  fiction  author  David  Brin  is 
best  known  for  suggesting  that  we  em¬ 
brace  transparency.  His  proposal  has 
been  treated  with  considerable  skepti¬ 
cism  in  the  privacy  community.  Funda¬ 
mental  changes  in  the  technok^  we 
adopt,  as  well  as  limitations  in  privacy 
protection  regulations,  compel  us  to  take 
a  more  careful  look  at  what  transparency 
has  to  offer.  We  must  not  conclude  that 
privacy  has  been  somehow  superseded 
by  2l5t  century  IT.  Indeed,  the  increased 
data  collection  and  inferencing  power  in 
today’s  information  environments  makes 
support  for  ftmdamental  privacy  values 
all  the  more  important. 

Is  the  transparent  enterprise 
destined  to  be  the  engine  of  the 
elimination  of  privacy?  Has  the 
analytic  power  and  data^thering 


reach  of  today’s  information  networks 
rendered  privacy  a  disappearing  artifact 
of  simpler,  less-networked  times?  I  don’t 
believe  so.  but  in  order  to  retain  the  d^- 
nity.  control  and  occasional  solitude  that 
are  at  the  heart  of  privacy,  we  have  to 
start  designing  systems  differently. 

First,  we  should  embrace  transparency 
as  a  design  philosophy  that  can  help 
people  ensure  that  information  abcnit 
them  isn't  used  in  a  way  that’s  contrary 
to  legally  permissible  purposes  or  in  vio¬ 
lation  of  agreements  under  which  it  was 
collected.  Our  design  goal  should  be  to 
provide  active  transparency  to  users.  In 
many  cases,  people  are  comfortable 
about  information  collection,  provided 
they  know  that  it’s  happening,  under¬ 
stand  the  purpose  of  it  and  can  check 
that  it’s  not  being  used  inappropriately. 

Second,  protecting  privacy  in  an  in¬ 
creasingly  tran^arent  society  will  be 
possible  only  with  privacy  laws  that  re¬ 
flect  the  great  expansion  of  data  collec¬ 
tion  and  inferencing  capabilities.  It’s  al¬ 
ways  better  to  delete  personal  informa¬ 
tion  that’s  no  longer  needed  (or  shouldn’t 
have  been  collected  in  the  first  place). 
However,  we  have  to  face  the  fact  that 
there  are  mounting  reasons  to  collect 
more  and  more  information  about  people. 

Finally,  living  with  transparency  will 
be  a  challenge.  We  aren’t  likely  to  get 
either  legal  or  technical  measures  right 
the  first  time.  Hence,  we  must  devote  re¬ 
sources  to  a  wise  and  sustained  dialogue 
among  regulators,  the  citizenry  and 
technical  designers. 

This  is  the  transparency  paradox: 

Amid  the  explosion  of  the  collection  of 
personal  information,  privacy  protection 
requires  that  we  embrace  the  trans¬ 
parency  of  information  systems  in  order 
to  ensure  that  information  is  used  prop¬ 
erly.  Giving  people  a  window  into  the  in¬ 
formation  collected  about  them,  and 
control  over  its  use.  can  help  put  the 
transparent  enterprise  on  t^  right  side 
of  privacy  protectioa  O  50163 
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AFTER  WORKING  at  a 
large  Midwestern  man¬ 
ufacturing  company  for 
22  years,  a  senior  IT  de¬ 
sign  analyst  understood 
that  times  were  tough 
for  her  firm,  so  she 
didn't  complain  about 
the  2%  raise  she  got  in 
^  2003.  But  this  year  her 

Ji  II  1/1  empathy  turned  to  irri- 

/  1  II  ^  X.  tation  when  her  perfor- 

I  mance  improved  but 

her  salary  didn't. 

“When  you  consider  that  I  get  an  above-average 
review  and  get  just  a  3%  raise  (this  yearj  —  it  doesn't 
make  up  for  the  crappy  year  before  that."  she  says. 
“They  are  assuming  that  I'm  going  to  keep  working 
hard  anyway.  But  there's  no  carrot  The  carrot’s  gone.” 

She’s  not  alone.  For  the  third  year  in  a  row.  IT 
workers  across  the  board  received  only  modest  rais¬ 
es  —  their  pay  increased  by  an  average  of  just  3%  in 
2004.  according  to  Compuferwor ((fs  18th  Annual 
Salary  Survey,  which  studied  the  compensation  and 
bonuses  of  9,854  IT  workers. 

Although  the  average  IT  pay  raise  is  slightly  higher 
than  last  year’s  figure  of  2.8%,  it's  still  lower  than  the 
national  average  of  4%  that  the  Bureau  of  Labor  Sta¬ 
tistics  reports  for  all  U.S.  workers.  While  the  majori¬ 
ty  of  respondents  (65%)  said  their  2004  base  saliy 
increased  from  one  year  ^o.  35%  experienced  either 
no  change  in  salary  or  had  their  pay  cut.  Meanwhile 
bonuses  are  back  —  but  up  only  1%  on  average.  Most 
IT  workers  (A)%)  said  they  expect  no  change  in  their 
2004  bonus  compensation  from  one  year  ago. 

What's  more,  on-the-job  stress  is  at  an  all-time  high, 
according  to  the  survey.  Some  88%  of  respondents 
reported  feeling  stress  because  of  budget  cuts  and  in¬ 
creased  workloads,  up  from  82%  last  year.  One  quar¬ 
tet  of  IT  workers  surveyed  said  they’re  dissatisfied 
with  their  pay  when  considering  all  their  job  respon¬ 
sibilities,  while  another  24%  reported  that  they’re 
neither  satisfied  nor  dissatisfied  with  their  pay. 

Have  IT  employees  reached  the  boiling  point 
when  it  comes  to  pay?  Not  yet  survey  takers  said,  but 
they’re  getting  close. 

An  IT  security  strate¬ 
gist.  who  spoke  on  the 
condition  of  anonymity, 
has  survived  outsourc¬ 
ing.  reoiganization  and  a 
tough  economy  in  his  15 
years  at  a  financial  ser¬ 
vices  company.  For  him, 
a  meager  raise  beats  the 
alternatives.  “I  feel  lucky 
to  have  survived  that 
rapid  loss  of  business 
and  that  slow  recovery 
of  it  Fm  happy  to  still 
be  working,”  he  says. 

”1  think  that  people 
are  happy  to  have  a  job 
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because  the  economic  situation  still  supports  such 
behavioral  thinking,’'  says  Linda  Pittenger,  an  analyst 
at  Gartner  Inc.  “I  also  believe  that  over  time,  IT  pro¬ 
fessionals  ...  are  going  to  get  to  that  boiling  point, 
but  they're  not  there  yet" 

Some  unhappy  IT  professionals  are  considering 
moving  to  new  jobs,  Pittenger  adds.  But  they're  learn¬ 
ing  that  the  grass  isn't  always  greener  somewhere  else. 

“We  all  know  someone  personally  who  left  [the 
company],  but  the  project  they  got  hired  to  do  got 
canceled  and  they  are  jobless,"  says  the  senior  IT  an¬ 
alyst  who  asked  not  to  be  identift^  So  for  now.  she 
—  and  many  IT  professionals  like  her  —  will  stay  put 

Where  to  Put  the  Blame 

More  than  27%  of  survey  respondents  reported  in¬ 
creased  use  of  offshore  outsourcii^  at  their  compa¬ 
nies  in  the  past  year.  David  Foote,  president  of  Frote 
Partners  LLC  in  New  r.anaan.  Conn.,  says  offshore 
outsourcing  had  a  major  inftuence  on  pay  this  year. 
Specifically,  pay  for  both  noncertified  application 
programming  skills  and  enterprise  application  devel- 
opiront  skills  has  declined  19%  to  21%  over  the  past 
two  years,  according  to  Foote  Partners  research.  “As 
more  applications  develt^ment  work  is  transferred 
offshore  or  at  least  directed  away  from  IT  full  timers, 
premiiun  pay  becomes  unnecessary,”  Foote  says. 

Poor  corporate  performance  has  also  prompted  ex¬ 
ecutives  to  cut  pay  across  the  board.  KoU’s  D^art- 
ment  Stores  Inc.  in  Menomonee  Falls,  Wis.,  lowered 
pay  raises  for  all  employees,  not  just  those  in  IT.  says 
Paul  Lewandowski.  an  e-commerce  testing  coordina¬ 
tor.  “We  didn’t  have  as  good  a  year  as  the  company 
expected,"  says  Lewandowski,  whose  pay  raise 
dropped  from  9ib  in  2003  to  4%  in  2004.  But  the 
“double  whammy”  came  when  the  IT  staff  lost  a 
week  of  vacation,  be  says.  Now,  employees  must  keep 
track  of  overtime  until  they  earn  the  extra  week  ~ 
and  they  can  use  the  earned  time  off  only  when  proj¬ 
ect  sch^ules  allow.  “It’s  a  kick  in  the  teeth.”  be  says. 

Regional  Inequalities 

IT  workers  living  in  the  South  Atlantic  region  fared 
better  than  most  others  in  pay  raises  this  year,  while 
those  in  the  Northeast  and  on  the  West  Coast  experi¬ 
enced  flat  salaries.  IT  workers  in  the  North  Central 
region  saw  increases  slightly  below  average. 

McLean,  Va.*based  Stan  Kiyota  says  his  salary 
jumped  6%  this  year  and  was  temped  off  with  a  27% 
bonus.  “I  wish  I  could  say  it  was  all  me,"  says  the 
senior  information  security  mam^er  at  Booz  Allen 
Hamilton  Inc,  “but  part  of  this  is  the  locatioa  This 
market  is  so  hot  here,  it's  virtually  zero  percent  high- 
tech  unemployment  right  now." 

CIO  Jason  Blevins  hasn't  had  a  raise  in  two  years  at 
Manchester  Tool  and  Die  Inc  in  North  Manchester, 
Ind.  Thou^  be  understands  that  times  are  tou^  for 
the  comfuny,  he  says  the  lack  of  raises  hurts  morale 
“If  we  go  another  round  here  without  increases,  then 
I  know  there’s  going  to  be  some  screaming"  he  says. 

IT  manager  David  Levine  saw  his  salary  jump  4.5% 
Conriniied  OR  poge  52 
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at  Sony  Electronics  Inc.  in  Park  Ridge.  N.J.  “I'm  mak¬ 
ing  enough  money  that  even  4.5%  is  a  decent  raise," 
he  says.  In  &ct.  51%  of  survey  respondents  said  they're 
satisfied  with  their  pay  despite  low  or  no  raises,  and 
80%  are  stiU  satisfi^  with  their  career  choice. 

The  good  news  for  IT 
workers  is  that  bonuses  are 
on  the  upswing  after  drop¬ 
ping  an  average  of  14%  last 
year.  The  bad  news:  TT>ey 
rose  an  average  of  just  1%. 

“The  last  really  good  bonus 
was  in  2000.  Tb^ve  been 
about  half  that  [amount] 
since;"  says  the  IT  security 
strategist  “It’s  not  the  be^ 
but  it's  better  than  a  kick”  out 
the  door,  be  adds. 

Terry  Broadbent  a  data¬ 
base  administrator  at  L-3 
Communications  Corp.  in 
Salt  Lake  City,  hasn’t  seen  a 
cash  bonus  in  10  years 
because  is  offering  other  types  of  incentives. 

"Pve  been  involved  in  teams  over  the  years,  and 
we’ve  rec»ved ...  a  jacket  or  a  portable  TV"  says 
Broadbent  a  26-year  veteran  of  the  defense  contrac¬ 
tor.  “That  sits  on  the  shelf  and  gathers  dust  I  much 
prefer  that  came  as  a  fa-<A  bonus." 

Pittenger  says  companies  are  moving  away  from 
the  “peanut  butter  method”  of  spreading  bonuses 
evenly  and  instead  use  precious  funds  to  reward  a 
small  slice  of  superior  performers. 

“Companies  are  finally  saying.  ‘Who  are  the  10 
people  who  made  things  happen  last  year?  Let’s  take 
care  of  them.’ "  I^ttenger  says.  “It  doesn’t  motivate 
the  top  performers  if  they  get  4%  bonuses  and  the 
low  performers  get  3%.  If  the  top  get  10%  bonuses 
and  the  low  performers  get  1%.  [companies]  send  a 


message  that  'we  pay  for  superior  performance.’ " 

After  three  years  of  lackluster  average  pay  raises  and 
meager  bonuses,  can  IT  professionals  expect  a  return 
to  the  boom  days  of  compensation  anytime  soon? 

“I  don’t  think  there’s  a  norm  anymore,”  says 
Pittenger.  ’3ut  I  don’t  think  we’re  going  to  see  the 
same  peaks  and  valleys  that  we’ve  seem" 

Pittenger  does  expect  a  small  resurgence  of  IT 
jobs  and  pay  beginning  in  2008,  when  a  record  num¬ 


ber  of  IT  professionals  will  retire  and  fewer  new  MIS 
and  computer  science  graduates  will  enter  the  mar¬ 
ket  “We’re  going  to  go  into  that  demand  nrie  again 
where  companies  can't  And  people.”  O  49072 

CoUett  u  a  freelance  writer  in  Chicoga 
Contact  her  at  stcoHett@aoLcom. 

cmii: 


Top  five  perks  that  respondents 
M^ied  their  companies  ottered: 


Top  types  ol  bonuses 
respondents  received 


6REENER  PASTURES 


42%  said  they  eoildn  t  swteh  to  a  job  with  lower  compensation 
01  those  who  would,  these  factors  topped  the  list  of  motivators; 


Better  wotyWe  balance 
More  job  saliilictton 


FtadbiNty 
Stock  options 


Drive  the  value  of  your  investment  in 
operational  software.  Once  and  for  all. 


i 


INTELUOENT  STontOE 

ETL  PROCESS 

DATA  ouRijTv 

BUSINESS  INTEU.IGENCE 

ANALYTIC  wmxiOB^CE 

SAS  introduces  a  software  breakthrough  for  sharing  mission-critical  intelligence,  in  just  the  right 
context,  with  everyone  ftom  executives  to  knowledge  workers.  And  for  increasing  the  value  of  your 

IT  investment  every  step  of  the  way -fran  aggregating  and  ensuring  the  quality  of  data,  from  any 
source,  to  transforming  that  data  into  predictive  insight  using  the  world's  best  analytics.  Can  one 
intelligence  platform  truly  fit  all  your  needs,  within  IT  and  across  your  enterprise?  Let  us  prove  it. 

Call  toll  free  1  866  791  3183  or  visit  our  Web  site. 

www.8as.com/itbreakthrough 

sas9 

The  Power  to  Know,  I  ^\S3SL 
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SENIOR  MUNAEEMENT  POSITIONS 


2004 


ClO/vice 
president 
of  IT 

Chief 

technology 

officer 

Director  of 
systems 
development 

Director 
of  fT 

operations 

Internet 

technology 

strategist 

2,iao 

2.1% 

2.0% 

2.7®-© 

1.3% 

Iiiotbi  liiro  firwyiiihr) 

StS2.7M  S132.132  SmjSB7  t92jm 


ToW  Total  Total  M 

Sie2.14S  n59.4?1  $M0.10S  S103^  Sf16.127 

20CI3Total  2003Total  20031btal  ?003ToU  20G3Tot8l 

S15a.790  $156,212  $136,262  $100,483  $114,569 

-  AVERAGE  TOTAL  COMPENSATION  BY  INDUSTRY  - 

ManuiaciurYio  Compultrsenicas/  Computer  senraxs/  Education  Computer  services/ 

(noncofflouier)  coreuAno'  corsuAng*  ftOR  nag  corsuttmg* 

$179,369  $181,309  $188,555  $130,800 

Heetthcare 

Banking  Government  LegaVnstnnce/  «Q9 154  Fmance/Pccounling 

$163,005  $84,009  S127.818 

S128.304  Manulactunng 

Compuier  atncasj  Legak/nsuiance/  (noncomputer)  Telecommumcabons 

conaMig  reeletate  Manulactunng  $101,631  $104,439 


Compuier  seracas/  Legak/nsuiance/ 
consUimg  reeletate 

$168,514  $217,867 

lagal/rannce/ 

$181,173 


Firwvee  •vw.w*.. 

$128,110  Computer  servces/ 


1  MIDDLE  MANA6EMENTP0SITI0NS  | 

Compuler 

operations 

manager 

Help  desk/ 
lech  support 
manager 

Information 

security 

manager 

IT  manager 

2.7% 

3.8% 

4.900 

2.4% 

taim 

■mm 

mm 

Bdm  -  * 

mm. 

.  eSSr' 

•Sm 

tSm 

^  mm 

2003  TeIN 

mmr 

2003  TbW 

868,271 

2003  ToW 

m,m 

2003  Tout 

880377 

- AVERAGE  TOTAL  COMPENSATION  BY  INDUSTRY - 

Government  Computer  service^  Oovemment*  Manulictunng 

$75744  lat^ 

87B|248  SB0|I88 

Manuiacturtno  Computer  savtces/ 


UtNi/inGunnce/  Govamnenl 

$6^326 


Computer  aaviee^ 
conauing 


legal/lnsuanca/ 
real  estate 

S9t884 


Bnance/accounteig* 

$203,067 


Fnancc/accounfing 

$82,409 


AVERAGE  TOTAL  COMPENSATION  BY  COMPANY  REVENUE 


E  TOTAL  COMPENSATION  BY  COMPANY  REVENUE  - 


Less  than  SIOOM 

Less  than  SIOOM 

Less  than  SIOOM 

Less  than  SIOOM 

Less  thsi  SIOOM* 

Less  than  StOOM  LessihanSKIOM 

LessthwSnOM* 

Less  than  SIOOM 

$116,688 

$147,010 

$122,171 

$81,907 

$92,708 

867,330  861,441 

882300 

889,113 

St00M(oS9999M 

SIOOM  to  S9999M 

SIOOM  to  $999  9M 

SIOOM  to  $999.9M 

SIOOM  to  S999.9M‘ 

SIOOM  to  S099.9M'  SIOOM  to  S999.gM 

SIOOM  to  S8989M* 

SIOOM  to  $999  9M 

$172,593 

$178,220 

$135,278 

$111,632 

$104,694 

878302  872306 

8101380 

886,762 

S«lo$i06 

sisiosioe 

S«loS106 

siBiosioe 

siBtosioe* 

siBiosioe*  setostoB* 

SBtoSIOB 

$«  to  SIOB 

$202,438 

$189,792 

$139,520 

$133,359 

$128,258 

891,780  878387 

8115319 

898,828 

MorellwSlOe 

More  than  SIO6 

More  than  $106* 

More  than  SIOB 

More  than  SIOB* 

MorethanSlOB  MorethanStOB* 

Mote  than  Sne* 

More  Itei  SIOB 

$233,481 

NA 

$182,306 

$166,174 

$133,000 

$99,402  899336 

8m313 

8110388 

%  Average  percentage  ncrease,  2003-2004 

•  The  total  base  for  ttvs  EDO  title  in  ths  particular  ndustry  or  company  sue  was  fevver  than  30  responses  txjt  more  than  IS. 
These  figures  shoiAj  be  used  Icr  compsison  only,  because  they  donT  consUute  3  statisiicallv  signdicsit  sampling 


Charts  con/mue  on  page  56 


Gray  text:  The  total  base  tor  the  lobuileintheparticuiar  industrywcompanv  sue  vos 
fewer  than  16  responses  but  more  than  rere.  These  figures  should  be  used  lot  cornpanson  only 


BIOeEST  UPTICKS 
IN  SAURY 


DB2  DOESN'T  LOCK  YOU  IN. 
YET  ANOTHER  REASON  WHY 
DB2  IS  THE  WORLD’S  LEADING 
DATABASE  PLATFORM. 


DB2  is  middleware,  but  it  is  anything 
but  middle-of-the-road-  In  fact.  DB2 
is  the  leading  database  built  on  and 
optimized  for  Linux.  UNIX  and 
Windows,  built  to  take  full  advantage 
of  your  existing  heterogeneous  and 
open  environments,  which  enable 
true  grid  computing. 


higher  than  DB2  Solitaire  claims 
that,  on  average.  Oracle  required 
25°o  more  time  to  manage  than 
DB2  And  tpc.org  rates  DB2  as  the 
overall  price/performance  leader 
for  TPC-C  on  Linux.  UNIX  and 
Windows.  Ahead  of  both  Oracle 
and  Microsoft  SQL  Server.* 


Plus,  there's  no  constricting  contract.  Then  there's  this:  Oracle  will 


It's  also  middleware  with  an  eye 
on  your  resources.  All  of  them.  An 
ITG  study  showed  overall  costs 
for  Oracle  are  up  to  four  times 


drop  the  current  level  of  support 
for  Oracle  8i  at  the  end  of  2004. 
Meaning  limited  support,  higher 
cost  ora  complete  migration  to 
current  versions  of  Oracle. 


Fortunately,  IBM  offers  ongoing 
around-the-clock  service  and  supoort 
for  DB2  And  DB2  is  also  highly 
scalable,  flexible  and  easy  to  manage 
requiring  no  newfangled  skill  sets 

Why  not  move  up  to  middleware 
that  makes  sense?  Through  the 
end  of  the  year,  you  can  get 
IBM  DB2  Universal  Database  by 
taking  advantage  of  our  extremely 
compelling  trade-up  promotion. 

Visit  ibm.com/db2/swap  today 
to  find  out  if  you  qualify. 

And  free  yourself. 


QQ  DEMAND  BUSINESS 


TransaOion  Processing  Petfemance  Council.  For  lurVter  TPC-related  mtormalion.  please  visN  http://www.()c.orQ. 


le  10I2&OA  TFC  Benchmark.  TPC-C  and  tpmC  ere  trademaiks  tH  me 


MIDDLE  MA.HA6EM(HT  POSITIONS 


STAFF  AND  EHTRY  IEVEL  POSITIONS 


Database 

adminrsirator 

Help  desk/ 
tech  support 
specialist 

Information 

security 

specialist 

Technology/ 

business 

analyst 

Network 

administrator 

Netwo'k 

engineer 

Programmer/ 

analyst 

MOo 

25°o 

4400 

I.7O0 

2.7°o 

1.7“o 

2.500 

~  AVERME  TOTAL  COMPENSATION  BY  INOUSTNY- 


umo 

$40M 

$78,207 

$8M61 

$72,720 

tmjno 

2003  tow 

$80,827 

2003  IbtN 

$45,349 

2003  TotN 

$70,124 

-  eWEBAAC  TATI 

2003  low 

$88,491 

I  eAMAEMAATJAil 

2003  Total 

$52,246 

2003  Total 

$71,462 

2003  Tow 

$64,024 

Computer  serwceV 
conaAing 

$84,013 

CanpularseivKeV 

consulHno 

$45,236 

AvCAAOC  lUIA 

Computer  serviC8^ 

$76,741 

iL  vUHr  tnoA  MUM 

Computer  serMcc^ 
cottsulling 

$75,763 

BY  INDUSTRY 

Ocwemmenr 

$56,000 

Manulaciinia 

(nonccmpuier) 

CompiflerserviceV 

consulino 

$73,865 

Computer  sorvico^ 
consulling 

$85,417 

Oawmmern 

Oowmmenl 

BarMng* 

Ormnenent 

SonemiTMnt* 

ManuMctinng 

$67,521 

$52,235 

SS4.S09 

Sfi9.9fi9 

SS3JMM 

SAftaiT 

(nonconnuW) 

.  .  -  ■  .  $63,414 

ISSSSS, 

Fmance/ks 

tan  IT 

*41503 

EducaSofl 

ManuiacWms 

(noncomputer) 

LegaViRuanoe/ 

HeWhcate* 

BarMnQ 

$34,427 

$77,694 

teal  estate* 

$72,838 

$54,741 

$73385 

Bertung* 

$44396 

BarMng' 

Lsga^tmnnce/ 
ml  estate* 

F««nce/aecoununQ 

$86,500 

LegN/kauance/ 
real  estate* 

$83335 

Fnanoe/iceounlinQ* 

$58,848 

BarMng* 

Manuiadunng 

(oompuler) 

$46,463 

$82,148 

$51,399 

$81,913 

S82.784  $43,606 

-  AVERAOE  TOTAL  COMPENSATION  BY  COMPANY  REVENUE  - 

lasJhanSIOOM  l»ttian$IOOM  iMltanSIOOM  l«sltan$IOQM  LesttmSIOOM  LessUwiSIOOM  UsItisiSIOOM 


IMJM  mjm  MIM  $7M» 

$72,470 

$40395 

$64,588 

$59,109 

$51,075 

$68,179 

$58352 

SOtMMMBW  MOOMtoanSM  t«0MtoMB9H  SQQMkiSBBaSU 

SI00Mtef99O9M 

$K)0Mh)S9a9.gM 

$IOOMloS999.9M 

$10CIMto»909M 

$100MloS9909M 

SU0MIOS999.9M 

StO(MloSS9B.9M 

S773M  $102328  $86,409  tOOjnS 

$81338 

$49,485 

$73,118 

$70382 

$56,990 

$71,827 

$86340 

sattiDB  S8tos«i8*  setosioe  setotne 

stetosioB 

StBkiSlOe 

seiosioB 

setosioB 

SBtoSlOB* 

seiosue 

seiosue 

M7,009  $108.829  SMSJBt  11^585 

$89328 

$51,727 

$73361 

$74,089 

$58,436 

$80,005 

$71419 

MarelmtllB  IMnlmSOe*  ttaelmSCB  MomRmtfle 

MonllanSlOB 

More  tan  side 

MmlhanSlOB 

More  tan  SIO6 

Mote  thw  sue* 

Mote  tan  SUB 

Mora  tan  sue 

M  SHMSi  $tf73V  SIMM 

%A»moapwrenttgeKmte.  2003-2004 

$89375 

$57,679 

$82,590 

$80,926 

$63,545 

$82,014  $71,066 

ChartscontmueonpageSS 

•  The  toW  base  ha  tteiok  Ode  m  the  oartnMrnlustry  or  company  si»  Mas  tower  itan  30  mspcra 
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c$  but  more  than  IS 
ID  sampling. 

Gray  teirt:  The  toW  base  tor  the  |ot)  idle  m  the  particular  ndustry  or  company  sue  was  fewer 
than  16  responses  twl  more  than  new.  These  tigifes  should  be  used  for  conpanson  only 
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OatabAStf 
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Database 

architect 
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modeler 
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specialist 
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wrare  spwarfsl 

Network 

architect 
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trainer 

Webmaster 
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S60.792 
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THE  NEW  VALUE  FRONTIER 


People  Friendly. 


:SKyDEERa 


“Brilliant  pages  at  the  lowest  cost. 

Kyocera  makes  color  simple  and  affordable. 

You  like  the  impact  of  color.  Kyocera's  color  is  affordable,  with  the 
lowest  cost  per  page  in  the  industry.  Give  your  documents  that 
dynamic,  professional  look  only  Kyocera  offers.  Now,  make 
color  part  of  your  business,  at  a  price  that  makes  sense. 


Color  Friendly  because: 

•  Brilliant,  Crisp  Resoluton 
•  Lowest  Cost  per  Color  Page* 

•  Industry's  Best  Warranty 
•Outstanding  Performance/Reliability 
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Proieci 
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Software 

developer 
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engineer 

Systems 

administrator 

Systems 

analyst 
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analyst 

Systems 

architect 

Systems 

programmer 

Technician 
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developer 
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2.5°o 
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$71313 

$78309 
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$81,771 
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$91308 
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MnaooMy 

$4030 
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turn 
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$4359 
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Bom 

$8,038 

Bom 

$4356 

Bom 

$10306 

Bom 

$4310 

Bom 

$1444 

Bom 

$4396 

pnsypg 

$79.70 

vm 

tavBo 

low 

I8432S 

im 

$81317 

im 

$80,090 

IM 

$101306 

IM 

$91397 

$41,757 

IM 

$59369 

2003  ToU 

$82,596 

2003  low 

$77,319 

2003  Tout 

$79,848 

2003  ToW 

$63,174 

2003  Total 

$60,044 

2003  Tow 

$78,626 

2003  Tow 

$96,795 

2003  Tow 

$79,148 

2003  few 

$41,129 

2003  Tow 

$57331 

- - -  AVERAOE  TOTAL  COMPENSATION  OY  INDUSTRY  - 

ConiwMisen^  Convutarstracas/  Compula services/  Compulerservicas/  Compuier services/  Convuter senices/  Concubr services/  CaneMv services/  Education 


LeoaltanrK^ 

reNietaie* 

S77.684 


htanulae&mo  MmMcwrg  MmAaclunno  litewlKturtig 

(comouier)  (nontompuM)  (noncompuNr)*  (nonconvuMr) 


Detenseteoapece 

SnjSBT 


CorrvuMr  seracea/ 
consuttng* 

$32340 


Computer  services/ 
consuRng 

$62363 


FfwaAcearang  m  395  legsMrwanca/  HaMhcare* 

$101,309  ^«aie  S64.734 


$58,757 

M  estate* 

$85,060 

$97,053 

LegN/incuaicc/ 

$62,403 

Barfono* 

BanWig* 

MoMo 

$81338 

Gowonvnent* 

$56383 

$77300 

$102376 

Oovommont 

HeoMicaro* 

Oowffimini 

$79,466 

OetenoMRopice* 

$96,956 

$60,833 

HoWhcaie* 

$64,357 

QucoMn* 

IsgoyinauiaKQ/ 

MaWe 

FnmMtauiting 

$116,771 

$64,734 

$53,723 

$82,570 

TMonoruMkis* 

OeWnMoroopocc 

HoMcm 

LegaWouanctf 

■ootesaie 

$70,764 

$63376 

$88,407 

$104,146 

EnomMBoo* 

Bortsng 

(WonaotWraopice 

Oodonononi 

$71391 

-  AVERABEI 

$59367 

OTALCOMPENSA 

$84,109 

nON  BY  COMPAN 

$92354 

Y REVENUE  - 

l«tfaii*jOCM  iMjhartSnCM  LaRtanSIOOM  laasftanSloaM  lessHianSIIXM  ijaadianSIOOM  LeesdanSIOOM  LsesthwSIOOM  LaeetaiSVIOM  LaaedwSIOOM 

mxn  mm  stsjis  ss6.Bti  $S3^  S7s.b;7  ss2.417  mm  t37.m  $s3.64s 

"’“1IS5*'  “S‘1;'***'  SIOOII«I»99  9M  rooHusmsM  nmtoiewsH  snuiiiiinMn  snoinimjM'  snoMusmiiM-  mninssKm- 

S78M6  t8U46  S73^  $66^  SS6.963  S77M4  S«I.I84  SS3^  S41.9S1  S72M3 

55555  iBiosioB  setosne  setosne  sebSiOB  seiosiOB  sBtosne  sbiosiob  siBiosioe*  sbioskib* 

S8S.12S  saosae  S79.ie3  S7t.S86  SS?^  $79,042  $103,904  $80,972  $95,070  $88J30 

IfcwItwSlOB  MotBwSIOB  MoraltaiSlOe  MoRltwSlOe  MonllwSlOB  MonlhMSIOB  HtnUllnSlOe  MantanSKS*  MmltoiSlOe  MorallwSICB 

$90,457  $90,216  $94,700  $aOS49  $70,279  $05,721  $109,939  $02,079  NA  $69^21 

%  Average  percemage  nctease.  2003-20CM 
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Methodolc^ 
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was  administered  via  tbe  Internet  Both 
Compuurvforld  print  subscribers  and  visi¬ 
tors  to  ConqntterworULcom  were  included 
in  the  survey. 

Tbe  collection  of  survey  data  began  May 
3  and  concluded  July  23.  A  total  of  10,745 
people  re^iooded  to  tbe  survey.  Of  those 
respondents,  93S4  were  employed  full  or 
part  time  and  were  eligible  to  complete  the 
entire  survey.  At  tbe  95^  ccmlidence  level, 


tbe  margin  of  errcv  for  this  sample  size  is 
less  than  */-l  percentage  point 
Re^odents  were  ask^  to  report  the 
percentage  change  in  their  compensation 
for  2003  to  2004.  Compensation  figures  for 
2003  were  calculated  based  cm  tbe  percent¬ 
al  change  reported  by  tbe  re^ndents. 
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High-performance  networking 
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Reseller  Hosting 
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The  fastest  way  to  le 

a  language.  Guaranteed. 


Anbk  IMMi  Wolbli  Swadbli 


Award-winning  software  succassfuliy  used  by 
U.S.  StM  Oapartnwnt  dipioniats.  Fortune  SOO 
executives  and  millions  Of  people  worldwide. 

Step-by-step  immersion  instruction  in  all  key  language  skills: 

■  Usteolog  -  The  Rosetta  Storte  uses  rtative  speakers 

and  ever^  language  to  develop  your  understand¬ 
ing  of  the  spoken  language  naturally  and  easily. 
ReecRng  -  Text  exercises  develop  your  reading 
skills  by  linking  written  language  to  real-life  obfects, 
actions  af>d  ideas. 

■  Speaking  -  Speech-recognition  feature  records, 

diagrams  and  compares  your  voice  to  the  native 

speaker's,  grading  your  pronurtciation. 

WHiing  -  Dictation  exercises  eraluate  your  spelfirtg, 
^^9  syntax  artd  punctuation. 


Each  fiiMy  inlcractivt  course  indudes: 

•  CD-ROM  curriculum  with  1 2  activities  in  each  of  92  lessons 

•  Previews,  comprehensive  exercises  and  testing  for  each  lesson 

•  Automated  tutorials  that  Team*  where  you  need  extra  help 

•  Curriculum  Text  and  45-page  User’s  Guide 


Call  today  or  buy  online 
tor  a  10%  discount: 
Ro$ettaStone.com/cws  1 04 
1-888-232-9198 

Um  ptomotiond  code  cwsKM  when  ordering. 

Rosett^one 

Language  Learning  Success 
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IT  Careers:  Software  Remains  the  Hot  Skill  for  IT 


The  new  programming  environment  requires  new  skills. 


Despite  heavy  losses  in  jobs  over  the  past  four  years, 
more  information  technology  professiottais  are 
software  programmers  than  arty  other  job  category. 
Accordmg  to  the  Information  Technology  Association  of 
America,  Ui  companies  will  hire  close  to  30.000 
programmers  in  2004.  The  fall  in  demand  illustrates  the 
change  in  the  software  ertgineering  world:  two  decades 
ago  systems  were  expertsive  and  people  weren't.  Today 
systems  are  inexpensive  and  take  up  less  space  and 
overhead;  people  are  the  expense 

Alortg  with  this  change  the  evolution  of  programming 
lart^tages  allows  software  engineers  to  tackle  the  task  at 
hand  versus  dealing  with  the  background  language  that 
others  created  to  simplify  ti)e  process.  A  third  factor  is  that 
comparves  no  longer  wartt  unique  proyamming.  They  need 
applicatiorts  that  work  together  and  work  with  customers* 

and  suppliers' systems,  as  well.  And  they  need  to  be  able  to 
upyade  quickly  without  the  rework  customization 
required. 

The  news  isn't  aH  bad.  however.  There  are  those  30,000 
jobs  that  need  to  be  filled  this  year.  The  software 
programmers  who  fill  them  will  have  skills  that  extend  far 
beyond  coding.  *We  used  to  see  a  need  for  people  out 
ihere  oeating  chunks  and  pieces  of  larger  systems.*  says 
Brad  Hohz,  president  and  CEO  of  Cyon  Research  and 
founder  of  the  Congress  on  the  future  of  Software 
Engineering.  *Nom  programmers  work  interaclively  in 
real'time,  cottaborative  environments.* 


Note  says,  *On  a  simple  level,  this  means  programmers 
needs  the  ability  to  work  interactively  via  instant 
messaging  and  e-mail,  but  even  that's  not  enough.  The 
software  tools  and  communication  skills  need  to  be  an 
integrated  part  of  the  programmer's  daily  life.*  Critical 
among  these  is  a  keen  understanding  of  repeatable  digital 
vairdation  that  protects  the  creckbility  of  the  data  as  rt  shifts 
among  users 


Hoitt  says  protection  of  intellectudi  property  is  another 
mainstay  of  the  software  programmer’s  new  environment, 
‘first,  we  need  to  draw  a  distinction  between  outsourcing 
and  off-shoring  work,'  he  explains  'Many  U.S.  companies 
off-shore  work  to  their  own  operations  outside  the  United 
States  Many  also  outsource  work  to  a  programmer  next 
door.  As  both  become  more  prevalent  software 
programmers  have  to  think  in  terms  of  intellectual  property 
and  the  corresponding  security  lockdowns  Ybu  can't  go 
about  programming  without  thinking  through  where  it's 
going,  the  permissions  required  at  the  other  end  to  get  the 
job  done  and  the  risks  of  sharing.  The  software  wigineer 
executes  those  polides* 

The  secret  to  careers  in  software  programming,  according 
to  Holtz  and  odier  career  gurus  i^  'by  doing  things  that 
aren't  likely  to  be  eaten  up  by  the  marketplace.  Being  smart 
is  important'  Holtz  advises  'If  I  can  say  not  just  how  to 
automate  a  process  but  also  can  focus  on  how  what  I'm 
doing  today  will  play  out  in  the  future  and  on  other  parts 
of  the  organization,  then  I'm  irwalu^>le.  Understanding  the 
business  ^rstems  is  crucial  -  a  programmer  widi  an  MBA  is 
more  valuable  than  one  without  one.  A  single  programmer 
who  has  a  grasp  of  largw,  cornplex  systerns  can  aaoinplish 

more  than  a  vritole  team  of  programmers  who  doesn't 
Thafs  the  premise  behind  the  book  Mytfika/  Man-Month 
and  tfs  something  I  would  strongly  recommend  to 
programmefS* 

For  more  ^formation  dwut  IT  Careers  advertising, 
please  calk  800.762.2977 
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DATA.  WIRELESS.  NETWORK. 

Yes,  you’re  in  the  right  neighborhood. 


What  can  a  company  like  State  Farm*  possibly  offer  in  the  way  of  LT? 
Just  one  of  the  nation’s  largest  computer  networks.  The  drive  of  a 
Fortune  25  company.  And  a  wealth  of  l.T.  opportunities.  How  do  you 
like  the  neighborhood  so  for?  We  Live  Where  You  Live? 


UK£  A  GO(X)  NEIGHBOR 


STATE  FARM  IS  THERE! 


Providing  Insurance  and  Financial  Services 
Ftrmonmftnmton.  ym  or  wmail 
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QUALCOMM  Wireless  Business  Solutions 
offers  a  comprehensive  suite  of  wireless 
enterprise  fleet  management,  workflow 
and  workforce  optimization  and  next- 
generation  logistics  management  solu> 
tions.  Together  with  our  pioneering  fleet 
management  products  and  services. 
QUALCOMM  is  helping  to  improve  the 
operations  of  vehicle  and  equipment  fleets. 

Software  Applications  Engineer 

(U.$.  Location  Open) 

Install,  support  and  train  customers  on 
QUALCOMM  AS/400  software  products. 
Write  integration  to  and  from  various  third 
party  applications.  Travel  is  required. 
Must  have  5  years'  of  RPG  experience  and 
BSCS  preferred.  Transportation  experi¬ 
ence  IS  a  plus.  Experience  with  Microsoft 
Office.  Java  and  Websphere  application 
skills  are  a  plu.s 

Apphf  online  to  requisition  D1M9089  at 

www.qualcomm.com/careers 
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ARE*  I  NEW  ENGUUaO  STATEVliMiCaTl^^Sc 


Congratulations  winners! 


storage  Networking  World  (SNW),  in  conjunction  with  Computerworid  and  the 
Storage  Networking  industry  Association  (SNIA),  proudiy  presents  the  fifth 
SNW  “Best  Practices  in  Storage"  Awards  Program.  This  program  honors  ten 
iT  user  “best  practice”  case  studies  seiected  from  a  fieid  of  quaiified  finalists. 

Meet  the  winners  at  the  SNW  Awards  Ceremony  - 
Wednesday  October  27th,  7:30pm 

Winners  in  each  of  the  foiiowing  categories  are: 

Systems  Implementation _ 

Wlanars 

■  Carlson  Companies,  Minnetonka,  Minnesota 

-  State  Street  Corporation,  Boston,  Massachusetts 

Honorable  Menttoo:  Paul.  Hastings.  Janofsky  &  Walker  LLP.  Los  Angeles,  California 

Storage  Reliability  and  Data  Recovery _ 

winners 

•  Hershey  Entertainment  and  Resorts  Company  Hershey  Pennsylvania 

■  MkUmerica  Bank,  Clarendon  Hills,  Illinois 
Honorable  Mention:  Calpine  Corporation.  Houston,  Texas 

Data  Lifecycle  Management _ _ 

Winners 

•  Adirondack  Electronics  Markets,  New  York,  New  York 

•  PPL,  Allentown,  Pennsylvania 
MoAoraMs  i§9ntk>n:  ^iASA,  Mountain  View,  California 

Industry  Regulation  Compliance  and  Corporate  Governance _ 

Winners 

■  MetLife  Investors,  Newport  Beach,  Califomia 

■  Seattle  Northwest  Securities,  Seattle,  Washington 

Honenbis  Msntion:  The  Center  for  the  Evaluative  Clinical  Sciences,  Hanover,  New  Hampshire 

Innovation  and  Promise _ 

winners 

•  New  Ybrk  State  Psychiatric  Institute,  New  York,  New  York 

■  Sports  Illustrated,  New  Ybrk,  New  York 
Honomblo  Mention:  Warner  Musrc  Group,  Burbank.  Califomia 
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Confinoed/rom  pu^v  1 

Multicore 

chip.  In  contrast.  Oracle  and 
IBM  DB2  users  would  have  to 
purchase  a  license  for  each 
procc^sstir  con?  in  a  s>'stcm. 

Nine  of  12  corporate  u-sers 
ci^ntactcd  by  ComputcrworW 
—  all  with  mixed  database  en- 
viroruncnts  —  praised  Micro¬ 
soft's  multicore  licensing  poli¬ 
cy.  Iliree  said  it  reaffirmed 
their  dcctsion.s  to  fi>cus  on 
SQL  Server.  One  said  the  poli¬ 
cy  might  have  priced  Oracle 
out  of  the  market.  But  six  said 
they  don't  think  it  will  afTect 
their  purchasing  decisions. 

•TTiat  decision  is  driven 
by  the  application  selected, 
which  »  based  on  business 
needs.”  said  Randy  'Fruax.  a 
technical  services  manager  at 
Metropolitan  Health  Corp.  in 
Grand  Rapids,  Mich.  Trua.x 
said  the  health  care  provider 
has  no  plans  to  use  servers 
with  multicorc  processors.  He 
also  expressed  skepticism  that 
Microsoft  will  stick  to  its  poli¬ 
cy  over  the  long  term. 

“It  would  not  surprise  me 
to  see  the  future  versions  of 
products  like  SQL  Server  rise 
in  cost  to  account  for  lost  rev¬ 
enue  streams  on  multiproces¬ 
sor  units.”  Truax  said.  “The 
cold,  hard  reality  is  Microsoft, 
just  like  Oracle,  is  going  to 
charge  as  much  as  the  market 
will  take  to  make  their  stock¬ 
holders  happy.” 

Choosing  the  Right  Tool 

Keith  NieUco.  a  West  Valley. 
Utah-based  consultant  at  Dis¬ 
cover  Financial  Services  Inc., 
said  that  he  thinks  Microsoft’s 
licensing  policy  may  sway 
some  small  companies  but 
added  that  he  can’t  foresee 
large  corporations  making  a 
switch  from  their  cxistii^  tcch-  ' 
TMlogy.  He  noted  that  Discover 
Finartcial  is  an  IBM  shop. 

"We  prefer  to  choose  the  | 
right  tool  for  the  job.  not  the 
cheapest.”  said  David  Curran, 
manager  of  FT  at  CE  Franklin 
Ltd.  ‘The  Calgary.  Alberta- 


Licensing  Status 


The  aavBT  solhMm  tnl  Mcresoft 
icanseionaper-procesgorbasg 
intiilBS  f»  kioiiifiO  praducis: 


based  supplier  of  oil  and  gas 
exploration  and  production 
equipment  uses  both  SQL 
Server  and  DB2.  In  fact,  the 
company  already  uses  multi- 
core  pr<Kcs.sors  in  an  IBM  i5 
server,  which  runs  its  People- 
Soft  EnierpriseOne  ERP  sys¬ 
tem  on  DB2,  Curran  said. 

But  no  matter  what  users 
say  now.  they  will  eventually 
have  to  consider  the  difTereni 
cost  models  once  the  adop¬ 
tion  of  servers  with  multicorc 
processors  grows,  predicted 
fulie  Giera.  an  analyst  at 


Forrester  Research  Inc. 

Giera  also  said  she  expects 
that  Oracle  and  IBM  will  sec 
pu.shback  from  their  cus¬ 
tomers  —  particularly  if  users 
don’t  get  double  the  comput¬ 
ing  capacity  with  dual-core 
processors.  Bui  Giera  said  it 
will  bedifTicult  for  IBM  and 
Oracle  to  rc.ict  to  Microsoft  in 
the  short  term  because  they 
have  just  asserted  their  own 
licensing  stances. 

IBM  and  Oracle  executives 
were  unavailable  for  comment 
on  Microsoft's  decision.  But 
officiaLs  fnim  bi>th  companies 
said  last  month  that  they  con¬ 
sider  each  processor  core  on  a 
chip  to  be  a  CPU  (QuickLink 
49(>4SI. 

Corey  Thomas,  a  senior 
product  manager  for  SQL 
Server,  said  Microsoft  exam-  , 
ines  the  licensing  policies  of  | 
its  competitors  as  pan  of  any 
analysis.  But  he  said  the  deci¬ 
sion  on  multicorc  licensing 
'  was  primarily  based  on  cus¬ 
tomer  feedback. 

The  Standard  Edition  of 
SQL  Server  sells  for  S4.999  per 
processor  and  supports  up  to 
f<»ur  processors,  whether 
they’re  multicorc  or  not.  The 


Enterprise  Edition  is  priced  at 
519,999  per  processor.  With 
multicorc  pixKrcssors,  users 
could  “get  more  processing 
power  out  of  the  Standard  Edi¬ 
tion"  without 
paying  a  higher  #HThpmlH 
software  license  &  V  * 
fee.  said  Cori  mt  m  ndTd  rBdilty 

Hariit  diTOior  js  Microsoft,  just 

of  marketing  at  ■•■a  ■  • 

Microsoft  s  like  Oracle,  IS 

worldwide  li  going  to  charge 

as  much  as  the 
IBM  and  Sun  market  wlll  take. 

Microsystems  . . 

Inc.  have  already  |,*hDY  IRU»« 
developed  dual-  technical  SERV 
core  processors  metropoliian  » 
for  some  of  their 
servers.  Intel  Corp.  and  Ad¬ 
vanced  Micro  Devices  Inc. 
both  plan  to  deliver  dual-core 
x86  devices  next  year  and  add 
chips  with  more  processor 
cores  at  a  later  date. 

A  database  services  manag¬ 
er  at  a  Dallas-based  cosmetics 
manufacturer  said  he  was  re¬ 
lieved  to  hear  that  Microsoft 
won't  charge  users  for  each 
processor  core.  “Dual-core 
puts  two  slower,  lowcr-heat- 
producing  chips  onto  a  single 


processor.  We're  not  giring  to 
get  twice  the  work  done  when 
the  two  cores  are  slower.  So 
why  should  we  have  to  pay 
twice  the  price?"  he  said. 

Microsoft’s 
cold,  decision  was 

I  ij.  "right  on  the 
I  rBdilty  money.”  said  |im 

)ft,jUSt  P'^ClOa, 

.  *  Green  Mountain 

e,is  Coflee  Roasters 

liaim  Inv.  in  WaliT- 

1 1  bury,  Vi.  Ven- 

®  Wl©  dors  that  inter- 

ill  take.  prei  the  addition 

. . .  of  multicore 


RANDY  TRUAX.  processors  as 

TECHNICAL  SERVICES  MANAGER  something  other 
METROPOLITAN  HEALTH  CORP  than  a  chip-level 

performance 

and  Ad-  boost  "are  hoping  to  deny 
CCS  Inc.  their  customers  the  advan- 

r  dual-core  tages  of  increasing  systems 

^ar  and  add  performance  and  line  their 
ocessor  own  pockets  with  shon-lerm 

profits."  Prevo  said.  O  50264 
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Release  of  SQL  Server 2005  May  Slip  Again 


MICROSOFT  last  week  con¬ 
firmed  that  the  shipment  dale  lot 
Its  long-awaited  SOL  Server 
2005  database  could  slip  slightly 
beyond  Ihe  target  of  the  htst  haH 
of  2005  that  the  company  set 
earlier  this  year  when  It  delayed 
the  upgrade  tor  the  third  time 

In  a  product  update  sent  to 
beta  testers  via  e-mal  on  OcL  Q. 
F^l  Ressrwf.seniDrvicepres}- 
dent  oi  server  applications  at 
Microsoft,  said  the  ifwd  beta 
release  of  SOL  Server  2005  re¬ 
mains  on  track  lor  the  firsi  quar¬ 
ter  of  next  year  and  that  the  com¬ 
mercial  release  is  expected  dur¬ 
ing  the  summer. 

"We  beaded  summer  was  a 
more  general  and  accurate  repre¬ 
sentation  than  committino  that 


(the  final  release]  is  going  to  be 
by  June  30  no  matter  whaL’  said 
Kirsten  Vi^rd.  lead  product  man¬ 
ager  for  SOL  Server. 

Microsotfs  Visual  Studio 
2005  devefopmeni  tools  will  ship 
with  SQL  Server,  so  they’re  also 
now  due  in  the  summer,  con¬ 
firmed  Prashant  Sridharan.  a  lead 
product  manager 

Microsoft  could  meet  its  firsl- 
haft  shipment  goals  If  SQL  Serv¬ 
er  2005  ships  in  June,  but  thal 
appears  unlikely  based  on  the 
expected  release  dale  for  the 
products  third  and  firtal  beta. 
Ward  said  four  to  SM  months  typ- 
icaHy  elapse  between  the  ship¬ 
ment  of  a  final  beta  and  the  prod¬ 
uct's  release  to  manufacturfog. 

But  Rsssrrer  caiboned  that  the 


dejiveiy  date  win  depend  on  many 
factors,  including  user  and  partner 
feedback  as  well  as  succe^ 
customer  deploymenis  and  inter¬ 
nal  instaHabons  by  Mtcrosofl's  IT 
department.  He  noted  that  Micro 
soft  already  has  20  applications  in 
production  on  the  current  beta  re¬ 
lease.  including  its  yi  SAP-based 
ERP  system  and  its  payroll  and 
docunient  repositoiy  systems. 

The  company  plans  to  put  an  ad¬ 
ditional  30  ap^ications  info  pro¬ 
duction  before  the  product’s  com¬ 
mercial  release.  Ressner  sard. 

Prior  to  the  release  of  the  third 
beta.  Microsoft  plans  to  make 
available  interim  builds  of  SQL 
Server  2005.  known  as  Commu¬ 
nity  Technical  Rreview  editions,  m 
order  to  collecl  additional  feed¬ 


back.  A  developer  edition  of  the 
first  CTP  IS  being  made  available 
to  MSON  Universai.  Enterprise 
and  F^oiessional  stteenbers.  as 
weN  as  participanls  in  Microsoft's 
Technology  Adoption  Program 
fo  Mar^  Microsoft  pushed 
back  the  release  date  of  SQL 
Server  2005.  code-named 
Yukon,  from  the  end  of  this  year 
to  the  first  halt  of  2005  [Quick- 
Link  45400].  The  ohgiritH  pro¬ 
tected  sfup  dale  for  the  product 
had  been  late  2003. 

In  a  July  nterview.  Ressner 
attrtuted  the  delay  to  the  depth 
oldie  niegration  between  SQL 
Server  2005  and  Visual  Sfodio 
2005.  He  pledged  then  thal  the 
company  woiAd  deliver  "more 
regular  refeases"  of  the  database 
In  the  future. 

-  Carpi  5^ 
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Mutticore 


chip.  In  contrast.  Oracle  and 
IBM  DB2  users  would  have  to 
purchase  a  license  for  each 
processor  core  in  a  system. 

Nine  of  12  corporate  users 
contacted  by  Computerworld 
^  all  with  mixed  database  en¬ 
vironments  *—  praised  Micro¬ 
soft’s  multicore  licensing  poli¬ 
cy.  Three  said  it  reaftmned 
their  decisions  to  focus  on 
SQL  Server.  One  said  the  poli¬ 
cy  might  have  priced  Oracle 
out  of  the  market.  But  six  said 
they  don't  think  it  will  affect 
their  purchasing  decisions. 

That  decision  is  driven 
by  the  application  selected, 
which  is  based  on  business 
needs."  said  Randy  Thiax.  a 
technical  services  manager  at 
Metropolitan  Health  Coip.  in 
Grand  Rapids.  Mich.  IVuax 
said  the  health  care  provider 
has  no  plans  to  use  servers 
with  muiticore  processors.  He 
also  expressed  skepticism  that 
-  Microsoft  wiU  stick  to  its  poli¬ 
cy  over  the  long  term. 

"It  would  not  surprise  roc 
to  see  the  future  versions  of 
products  like  SQL  Server  rise 
in  cost  to  account  for  lost  rev¬ 
enue  streams  on  multiproces¬ 
sor  units,"  Truax  said.  The 
cold,  hard  reality  Is  Microsoft, 
just  like  Oracle,  is  going  to 
charge  as  much  as  the  market 
will  take  to  make  their  stock¬ 
holders  happy." 

Choosing  the  Right  Tool 

Keith  Nielsen,  a  West  VaUey, 
Utah-based  consultant  at  Dis¬ 
cover  Financial  Services  Inc^ 
said  that  he  thinks  Microsoft's 
licensing  policy  may  sway 
some  small  companies  but 
added  that  be  can't  foresee 
large  corporations  making  a 
switch  fhxn  their  existing  tech¬ 
nology.  He  noted  that  Discover 
Finandal  is  an  IBM  shop. 

"We  prefer  to  choose  the 
right  tool  for  the  job,  not  the 
cheapest."  said  David  Curran, 
manner  of  IT  at  CE  Franklin 
Ltd.  The  Calgary.  Alberta- 


Licensing  Status 


based  supplier  of  oil  and  gas 
exploration  and  production 
equipment  uses  both  SQL 
ServW  and  DB2.  In  f^.  the 
company  already  uses  multi- 
core  processors  in  an  IBM  iS 
server,  which  runs  its  f^opie- 
Soft  EnlerpriseOoe  ERP  sys¬ 
tem  on  OB2.  Curran  said. 

But  no  matter  what  users 
say  now.  they  will  eventually 
have  to  consider  the  different 
cost  models  once  the  adop¬ 
tion  of  servers  with  multicore 
processors  grows,  predicted 
julie  Giera.  an  analyst  at 


Forrester  Research  Inc. 

Giera  also  said  she  expects 
that  Oracle  and  IBM  wiU  see 
pushback  from  their  cus¬ 
tomers  —  particularly  if  users 
don't  get  double  the  comput¬ 
ing  capacity  with  dual-core 
processors.  But  Giera  said  it 
will  be  difTicult  for  IBM  and 
Oracle  to  react  to  Micro.soft  in 
the  short  term  because  they 
have  just  asserted  their  own 
licensing  stances. 

IBM  and  Oracle  executives 
were  unavailable  for  comment 
on  Microsoft's  decisioa  But 
ofFictals  from  both  companies 
said  last  month  that  they  con¬ 
sider  each  processor  core  on  a 
chip  to  be  a  CPU  (QuickLink 
496481 

Corey  Thomas,  a  senior 
product  manager  for  SQL 
Server,  said  Microsoft  exam¬ 
ines  the  licensing  policies  of 
its  competitors  as  part  of  any 
analysis.  But  he  said  the  deci¬ 
sion  on  multicore  licensing 
was  primarily  based  on  cus¬ 
tomer  feedback. 

The  Standard  Edition  of 
SQL  Server  sells  for  $4,999  per 
processor  and  suj^rts  up  to 
four  processors,  whether 
they’re  multicore  or  not.  The 


Enterprise  Edition  is  priced  at 
$19,999  per  processor.  With 
multicore  processors,  users 
could  "get  more  processing 
power  out  of  the  Standard  Edi¬ 
tion"  without 
paying  a  higher 
software  license 
fee,  said  Cori 
Hartje,  director 
of  marketing  at 
Microsoft’s 
worldwide  li¬ 
censing  and  pric¬ 
ing  group. 

IBM  and  Sun 
Microsystems 
Inc.  have  already 
developed  dual- 
core  processors 
for  some  of  their 
servers.  Intel  Corp.  and  Ad¬ 
vanced  Micro  Devices  Inc. 
both  plan  to  deliver  dual-core 
x86  devices  next  year  and  add 
chips  with  more  processor 
cores  at  a  later  date. 

A  database  services  manag¬ 
er  at  a  Dallas-based  cosmetics 
manufacturer  said  he  was  re¬ 
lieved  to  hear  that  Microsoft 
won’t  charge  users  for  each 
processor  core.  "Dual-core 
puts  two  slower,  lower-beat- 
producing  chips  onto  a  single 


The^, 
hard  reality 
is  Microsoft,  just 
like  Oracle,  is 
going  to  charge 
as  much  as  the 
market  wiH  take. 

RANDY  TRUAX. 

TECHNICAL  SERVICES  MANAGER. 
METROPOLiTAN  HEALTH  CORP 


processor.  We’re  not  going  to 
get  twice  the  work  done  when 
the  two  cores  arc  slower.  So 
why  should  we  have  to  pay 
twice  the  price?”  he  said 
Microsoft’s 
decision  was 
"right  on  the 
money,"  said  }tm 
Prevo,  CIO  at 
Green  Mountain 
Coffee  Roasters 
Inc.  in  Waler- 
bury.  VL  Ven¬ 
dors  that  inter¬ 
pret  the  addition 
of  multicore 
processors  as 
something  other 
than  a  chip-level 
performance 
boost  "are  hoping  to  deny 
their  customers  the  advan¬ 
tages  of  increasit^  systems 
performance  and  line  their 
own  pockets  with  short-term 
profits,"  Prevo  said  O  50264 

mElIXTICIIKlfWS 
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Release  of  SQL  Server 2005  May  Slip  Again 

.  doivay  data  ui  depend  on  many 


MKROgOFTIastweekcon- 
firmed  thal  the  sNpmem  date  for 
its  tono-aMaXed  SQL  Server 
2005  database  could  sip  siohtly 
beyond  the  target  of  the  fist  half 
of  2005  that  the  company  set 
eerier  Ms  yearwben  t  detoyed 
(he  tgigiade  for  the  itM  lime. 

In  a  product  updele  sent  Id 
bate  testers  via  emal  on  Oct  16. 
ndRessner.seniorvicepresi- 
dertofserwapplcatioraat 
NNcroBoii.  san  mai  me  uwo  Deta 
rele8seofSQLSarvBr2006re- 
matnsantraAlorRiefirstquBr* 
ler  of  next  year  and  that  the  oom- 
msoalrelMisexpecteddur- 
inplheamimer. 

IMi  decided  aummerwes  a 
more  general  and  acaralB  repre¬ 
sentation  than  commitlno  that 


[the  firal  releese]  Is  gofeHl  to  be 
by  June  30  no  matter  what*  said 
Krsien  Ward  lead  product  man¬ 
ager  lor  SQL  Server. 

Mciosofts  Visual  Studio 
2005  developmenl  tools  wi  ship 
wRh  SQL  Server,  so  they’re  also 
now  due  m  the  summer,  cor^ 
firmed  ftashani  Sridharan,  a  lead 
product  manager. 

Mcrosoft  could  meet  Is  first- 
hall  sNpment  goals  $  SQL  Serv¬ 
er  2005  ships  in  Jwie.  but  tftat 
appears  unitely  based  on  the 
expected  release  itale  for  the 
product's  third  and  inaf  beta. 
WMsaidfourtosnmonthstyp- 
icaly  elapae  between  the  ship¬ 
ment  of  a  final  beta  and  the  prod¬ 
uct’s  release  to  marufachfing. 

But  Ressner  CBfiioned  that  the 


factors,  hckxfing  user  and  partner 
feedback  as  wel  as  succes^ 
customardeploymenIsandiniBr- 
rW  IrstalaBons  by  Mferoeoffs  IT 
deperbnenL  He  noted  fiat  Men) 
soft  already  has  20  appicattons  in 
prodjcbonontheoirerrtbetsre- 
taase,  mcludng  its  U  SAP-based 
ERP  eyslam  and  its  payiol  and 
docuiientfepoafiory  systems. 
ThecompanypiaiBloputanad- 
(ttonal  %  MVicMons  Into  pro¬ 
duction  before  tie  produefs  conr- 
merdai  reieasa.  Haasner  said. 

Rtor  to  the  roleeae  of  the  thinf 
beta.  Mcroeoft  plans  to  mate 
avBl^  interim  bulds  of  SQL 
Senier2006.fmown8sCorrinu- 
nfiy  Technical  Review  edtens,  h 
order  to  colect  adcKonal  feed¬ 


back.  A  developer  edlion  of  the 
first  CTP  ts  being  made  avafiabie 
to  MSON  UrWatsal.  Enterprise 
and  Rotossional  subsertes.  as 
wel  as  participMts  in  Mcrosofl's 
Tkhnotogy  AdopBon  Rogrern. 

In  Mvek.  Mcroeoft  pushed 
back  the  relBBsa  dale  of  SQL 
Server  2005.  code-named 
Yukon,  from  the  end  of  this  yew 
lo1heflretftefo(2005[Qdck- 
iJnk45400).Theoriglnalpro- 
jected  ship  date  for  the  product 
had  been  late  2003. 

In  a  July  intentew.  Ressner 
attributed  the  detay  to  (he  depth 
of  the  Integration  between  SQL 
Server2005  and  Vtete  Studio 
2006.  He  pfedgad  then  thte  toe 
company  would  dafiver ‘more 
regular  relaases’ of  the  detabase 
mthefutore. 

-CanlSIm 


Network 
Securitx : 

Structuring  an 
Aggressive  Defense 


EVENT  SCHEDULE 
HOUSTON.  TX 


WASHMCTON.  OC 


Attend  this  Complimentary 
NetwoHc  World 
Technology  Tour  Event 

Featuring  Joel  Snyder. 
Senior  Partner  of  Opus  One 


Network  Security:  Structuring  an  Aggressive  Defense  is  for  professionals  who 
have  no  time  to  spare.  No  money  to  waste.  No  patience  with  spin.  In  a  fast-paced, 
high-content,  professional  setting  partners  provide  practical  solutions  in  context. 
Ans\wrs  direct  from  experts.  And  technology  you  can  put  to  immediate  use  It’s  a 
years  worth  of  intelligence  and  opportunities  in  one  highly  productive  dav 
exclusively  from  NetwoHc  WoHd. 


PRESENTING  SPONSORS: 


ApanI 


Apani  Networks  is  a  leader  in  point-to-point  securi¬ 
ty.  shielding  ‘data-in  motion*  from  threats  created 
bjf  end-user  access  from  remote  and  private  net¬ 
works.  The  Apani  Networks  solution  provides 
strong  encryption  ft)f  seamless  data  communication 
protection  and  centralized  management  for  access 
control.  See  us  at  www.apanLcom 


RsIsRTiriET 


Fbrtinet  is  the  confirmed  leader  of  the  Unified 
Threat  Management  marketspace  and  produces 
the  new  generation  of  real-time  network  protec¬ 
tion  security  systems.  More  than  60.000  of  the 
company’s  award-winning  FortiCateTM  series  of 
ASIC-accelerated  antivirus  firewalls  are  running  at 
over  2,000  customers  worldwide. 


>^riSign- 


VeriSign,  Inc  (NASDAQ:  VRSN) 
delivers  intelligent  infrastructure  services  that 
make  the  lnten>et  ar»d  telecommunications  net¬ 
works  more  reliable  and  secure.  Every  day  VeriS^n 
helps  thousands  of  businesses  and  millions  of 
consumers  find,  connect,  secure,  and  transact 
with  confidence,  across  today  s  complex  global 
networks. 


EXHIBITING  SPONSORS: 


ARBOR 


Modb  A090M 


CIPHEROPTICS 


n  imprivata-  S  solsoft 


www.nwfusion.com/NSFCWT  or  call  1-800-643-4668 
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Scary  Monsters 


Halloween  is  almost  here.  Costumed  figures  will 
soon  be  lining  up  at  your  front  door  to  yell,  “Trick  or 
treat!”  You’ll  see  Spider-Men  in  large  numbers  this 
year  and,  as  usual,  lots  of  princesses,  ballerinas  and 
angels.  But  you’ll  also  see  plenty  of  ghosts,  vampires, 
mummies,  skeletons  and  other  monsters  of  every  description. 

You  know  how  to  deal  with  the  monsters  at  your  doorstep.  You 
either  buy  them  off  with  a  handful  of  treats  for  each  of  them,  or  you 
turn  off  the  porch  lights  and  pretend  they’re  not  out  there. 

After  all,  you  know  there’s  nothing  to  fear  from  those  pint-size 
creatures.  The  really  scary  monsters  lurk  around  your  IT  shop. 


You've  heard  about  zombies,  of  course  — 
those  computers  that  have  been  taken  over  by 
intruders  and  turned  into  relay  stations  for 
viruses,  worms  and  especially  spam. 

But  zombies  aren't  the  only  kind  of  IT  un- 
dead.  There  are  also  vampires  that  suck  the  life 
out  of  your  resources  and  budget,  such  as  those 
servers  that  are  hardly  ever  used  these  days  but 
still  require  maintenance,  updates  and  patches. 

And  mummies,  in  the  form  of  old  bugs  that 
you  thought  you  had  wrapped  up  and  buried 
but  return  when  a  new  patch  or  code  change 
reverses  your  fix  and  resurrects  the  problem. 

You  probably  have  a  Frankenstein  monster  or 
two  around  your  operation:  patchwork  systems 
that  were  cobbled  together  in  an  emergency, 
never  quite  worked  right  and  certainly  won’t 
ever  scale. 

Werewolves  show  up.  too  —  hardware  and 
software  that  seem  to  be  fine  but  intermittently 
change  into  a  beast  and  then,  just  as  suddenly, 
return  to  normal. 

You  have  skeletons,  those  projects  that  never 
got  the  funding  they  needed.  They  can’t  pro¬ 
vide  more  than  a  tiny  fraction  of  the 
functionality  users  really  want,  but 
no  business  sponsor  will  commit  to 
fleshing  them  out. 

And  then  there  are  ghosts,  like 
that  notorious  project  that  failed 
spectacularly.  Yes.  it’s  dead  —  but  it 
continues  to  haunt  you  every  time 
it's  mentioned,  which  ofien  happens 
around  the  time  you’re  trying  to  get 
the  budget  you  need  for  another 
ambitious  project. 

The  monsters  aren’t  just  in  your 
systems,  either.  Almost  every  orga¬ 
nization  has  its  lekyll  and  Hydes, 


those  business  managers  who  tell  you  one  thing 
about  what's  needed  for  new  systems  but  tell 
users  to  expect  something  entirely  different. 

We’ve  all  seen  Jack  the  Ripper  —  the  budget¬ 
cutting  CFO  who  really  doesn’t  understand  that 
not  every  new  project  is  a  boondoggle  and  that 
a  staffer  project  can’t  accomplish  an>thing  if 
it's  gutted. 

And  if  your  CFO  isn’t  a  Ripper,  there’s  a 
good  chance  that  he’s  a  Grim  Reaper  whose 
budgetary  touch  brings  death  to  good  and  bad 
projects  alike. 

You  know  the  Invisible  Man  —  he  starts  out 
as  the  business  sponsor  who  champions  a  proj¬ 
ect,  then  disappears  when  it  needs  an  invest¬ 
ment  of  political  support  or  time  from  his  staff. 

And  there’s  always  a  King  Kong,  the  execu¬ 
tive  who  wili  get  whatever  he  wants  from  IT. 
no  matter  what  it  costs  —  or  how  bad  an  idea 
it  may  be. 

No  wonder  life  in  corporate  IT  sometimes 
feels  like  a  horror  show.  It’s  not  your  imagina¬ 
tion,  and  these  creatures  don’t  just  come  out 
once  a  year. 

And  unlike  the  make-believe 
monsters  haunting  your  front  door, 
you  can’t  buy  off  your  IT-related 
monsters  with  chocolate  bars  and 
hard  candy.  Forget  the  treats  — 
you’re  stuck  with  their  tricks. 

You  can’t  douse  the  porch  lights 
and  ignore  them,  either.  Oh,  maybe 
with  hard  work,  discipline  and  dili¬ 
gence,  you  might  be  able  to  put  a 
stake  through  the  heart  of  a  few  of 
your  monsters. 

But  for  the  rest,  you’ll  just  have 
to  live  in  IPs  Halloween  world  — 
all  year  long.  C  S0227 


Dawn  of  the  Dead ...  Kne 

The  rr  pilot  fish  Is  called  on  to  fix  everything  In  this  of¬ 
fice,  from  the  microwave  to  the  fire  alarm. 
the  fax  rnachine  starts  sendmg  faxes  wAh  big  black 
streaks,  fish  instafe  a  riew  rnacfme.  But  the  sarne 
problem  returns  tfnrnediatfefy  -  arid  this  tirne.  fish  rx^ 
tices  it  happens  only  late  in  the  morning  on  some 
days.  Then  fish  notices  that  the  sun  shines  directly  on 
the  rnachine  in  the  late  rnorning.  *1  closed  the  blind.* 
says  fish.  'Robiem  solved.' 
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FRANK  HAYES  ■  FRANKLY  SPEAKING 

Scary  Monsters 

Halloween  is  almost  here.  Costumed  figures  will 
soon  be  lining  up  at  your  front  door  to  yeU,  “Trick  or 
treat!”  You’ll  see  Spider-Men  in  large  numbers  this 
year  and,  as  usual,  lots  of  princesses,  ballerinas  and 
angels.  But  you’ll  also  see  plenty  of  ghosts,  vampires, 
mummies,  skeletons  and  other  monsters  of  every  description. 

You  know  how  to  deal  with  the  monsters  at  your  doorstep.  You 
either  buy  them  off  with  a  handful  of  treats  for  each  of  them,  or  you 
turn  off  the  porch  lights  and  pretend  they’re  not  out  there. 

After  all,  you  know  there’s  nothing  to  fear  from  those  pint-size 
creatures.  The  really  scary  monsters  lurk  around  your  IT  shop. 

You've  heard  about  zombies,  of  course  — 
those  computers  that  have  been  taken  over  by 
intruders  and  turned  into  relay  stations  for 


viruses,  worms  and  especially  spam. 

But  zombies  aren’t  the  only  kind  of  IT  un¬ 
dead.  There  are  also  vampires  that  suck  the  life 
out  of  your  resources  and  budget,  such  as  those 
servers  that  are  hardly  ever  used  these  days  but 
still  require  maintenance,  updates  and  patches. 

And  mummies,  in  the  form  of  old  bugs  that 
you  thought  you  had  wrapped  up  and  buried 
but  return  when  a  new  patch  or  code  change 
reverses  your  fix  and  resurrects  the  problem. 

You  probably  have  a  Frankenstein  monster  or 
two  arotmd  your  operation:  patchwork  systems 
that  were  cobbled  together  in  an  emergency, 
never  quite  worked  right  and  certainly  won’t 
ever  scale. 

Werewolves  show  up,  too  —  hardware  and 
software  that  seem  to  be  fine  but  intermittently 
change  into  a  beast  and  then,  just  as  suddenly, 
return  to  normal 

You  have  skeletons,  those  projects  that  never 
got  the  funding  they  needed.  They  can’t  pro¬ 
vide  more  than  a  tiny  fraction  of  the 
functionality  users  really  want,  but 
DO  business  sponsor  will  commit  to 
fleshing  them  out 

And  then  there  are  ^K>sts.  like 
that  notorious  project  that  failed 
spectacularly.  Yes,  it's  dead  —  but  h 
continues  to  haunt  you  every  time 
it’s  mentioned,  which  often  happens 
around  the  tune  you’re  trying  to  get 
the  budget  you  need  for  another 
ambitious  project 

The  monsters  aren’t  just  in  your 
systems,  eidier.  Almost  every  orga¬ 
nization  has  its  Jekyll  and  H]^es. 


those  business  managers  who  tell  you  one  thing 
about  what’s  needed  for  new  systems  but  tell 
users  to  expect  something  entirely  different 

We’ve  all  seen  Jack  the  Ripper  —  the  budget¬ 
cutting  CFO  who  really  doesn’t  understand  that 
not  every  new  project  is  a  boondoggle  and  that 
a  staff  or  project  can’t  accomplish  anything  if 
it’s  gutted. 

And  if  your  CFO  isn’t  a  Ripper,  there’s  a 
good  chance  that  he’s  a  Grim  Reaper  whose 
budgetary  touch  brings  death  to  good  and  bad 
projects  alike. 

You  know  the  Invisible  Man  —  be  starts  out 
as  the  business  sponsor  who  champions  a  proj¬ 
ect.  then  disappears  when  it  needs  an  invest¬ 
ment  of  political  support  or  time  from  his  staff. 

And  there’s  always  a  King  Kong,  the  execu¬ 
tive  who  will  get  whatever  he  wants  from  IT, 
no  matter  what  it  costs  —  or  how  bad  an  idea 
it  may  be. 

No  wonder  life  in  corporate  IT  sometimes 
feels  like  a  horror  show.  It’s  not  your  imagina¬ 
tion,  and  these  creatures  don’t  just  come  out 
once  a  year. 

And  unlike  the  make-believe 
monsters  haunting  your  front  door, 
you  can’t  buy  off  your  IT-related 
monsters  with  chocolate  bars  and 
hard  candy.  Forget  the  treats  — 
you're  stuck  with  their  tricks. 

You  can’t  douse  the  porch  lights 
and  ignore  them,  eitbet  Oh,  maybe 
with  hard  worit,  discipline  and  dili¬ 
gence,  you  might  be  able  to  put  a 
stake  through  the  heart  of  a  few  of 
your  monsters. 

But  for  the  rest,  you’ll  just  have 
to  live  in  ITs  Halloween  world  — 
all  year  long.  0  50227 


Let  BEA  show  you  how  to  integrate 
your  business  processes  through 
Service-Oriented  Architecture. 


Seeking  to  align  IT  with  business  goals? 
Need  to  deliver  business  services  faster? 


And  find  out  how  SOA  ready  your  company  is  with  a 
COMPUMEMTARYSOA  READINESS  ASSESSMENT  Benchmark  Report. 


SOA  for  faster  delivery 


Service-Oriented  Architecture. 

How  this  software  design  approach  can  greatly  reduce  the 
costs,  time,  and  risks  of  business  integration  projects.  How 
research  shows  that  75%  of  large  enterprises  will  begin  a 
Service-Oriented  Architecture  (SOA)  implementation  by 
2006.  And  how  the  world's  leading  companies  are  already 
planning  SOA  deployments  to: 

Rapidly  implement  new  services  without  expensive  development 
Reduce  process  complexity  and  leverage  existing  investments 
Adapt  faster  to  changing  needs 

Seamlessly  connect  people  and  business  applications  together 

But  how  do  you  evaluate  your  SOA  options?  Who  can  help  you  develop 
a  plan?  What  benefits  can  you  expect  -  and  how  soon  can  you  expect 
them?  Get  answers  and  insights  -  including  your  own  SOA  Readiness 
Assessment  Benchmark  Report  -  at  http://soa.bea.COni/cwoct. 


SOA  ON  BEA 


■  FASTER  DELIVERY.  Virgin  Mobile  USA  turned  to  BEA 
WebLogic  Platform""  to  launch  the  nation's  first  wireless  service 
targeted  to  the  youth  market.  Using  SOA  to  deliver  a  self-service 
customer  portal^  Virgin  Mobile  launched  its  prepaid  wireless  service 
in  seven  months. 


BEA:  the  choice  for  SOA. 

BEA  is  a  world  leader  in  enterprise 
application  infrastructure  software, 
makers  of  the  first  and  only  integrated 
platform  for  application  development  and 
integration.  The  BEA  WebLogic  Platform 
is  a  superior  framework  for  SOA  that 
streamlines  the  process  of  integrating 
business  applications  to  more  closely 
align  IT  with  business  objectives. 

So  you  can: 

Build  and  deploy  self-service  portals  faster 
Leverage  reusable  components  for  speed 
and  efficiency 

Avoid  trade-offs  between  urgent  business 
needs  and  long-term  flexibility 

BEA  is  a  leader  in  enterprise  application 
infrastructure.  Here's  why: 

Superior  open-standards  platform  for  SOA 
15,000  customers,  including  a  majority  of  the 
Fortune  Global  500 

Partner  for  1,300  leading  hardware  makers, 
ISVs,  Sis,  and  VARs 

Business  Integration  Journal's  2004  Vendor 
of  the  Year 


of  business  services. 


Find  out 
how  ready  you  really  are. 

Ready  to  reap  the  benefits  of  SOA? 

Now  you  can  find  out  how  ready  you 
really  are.  Using  our  SOA  Readiness 
Assessment,  you  can  see  where  your 
company  ranks  compared  to  industry 
averages  and  to  your  own  peers.  Just 
complete  the  online  questionnaire  and 
within  24  hours,  we'll  send  you  back  a 
complete  SOA  Readiness  Assessment 


Plan  with  confidence. 
Deploy  with  speed. 

Using  BEA  for  SOA  based  business 
integration  delivers  proven  benefits: 

Increased  responsiveness:  faster  integration 
lets  you  deliver  business  services  faster 
Lower  risk:  open-standards-based  framework 
frees  you  from  being  locked  into  proprietary 
solutions  or  expensive  add-ons 
Higher  productivity  through  reusable  components 
and  easier-to-use  development  tools 


To  obtain  your 
COMPLIMENTARY 
SOA  Readiness  ...- 
Assessment 
Benchmark  ’ 
Report,  go  to: 


Benchmark  Report  that  you  can  use  to: 

Evaluate  your  own  state  of  SOA  readiness 
Assess  your  company's  SOA  strengths  and 
weaknesses 

Support  your  SOA  plans  and  implementation 
strategies 


http://soa.bea.com/cwoct 

Act  now.  Don^t  delay.  Whether  youVe  already  implementing 
SOA  based  business  integration  or  just  beginning  to  plan, 

BEA  can  help  -  with  the  technology,  solutions,  and  implementation 
services  that  match  your  needs. 

Visit  httpV/soa.bea.com/cwoct  to  receive  your 
COMPUMENTARY  SOA  READINESS  ASSESSMENT  Benchmark  Report. 


'  regiwcd  iradMiirki  al  BEA  Syim«  he.  B£A  l«MU«c  M  BU  «IMU*« 

gradte  names  «(  BK  MliKi  «f  MdUcMI  prawny  ngMs  wnK  kr  «Mrd  panas. 


Oracle  Application  Server 

More  Features 


1 

1 

ORACLE 

BEA 

Web  Services 

✓ 

v'  i 

Enterprise  Portal 

✓ 

v' 

Workflow 

v' 

✓  1 

Integration 

✓ 

y  i 

Grid  Ready 

v' 

Wireless 

v' 

_  ! 

Clustered  Web  Cache 

v' 

—  1 

Advanced  Java  Cache 

y 

_ 

Integrated  Identity  Management 

✓ 

— 

Business  intelligence 

✓ 

— 

Open  J2EE  Framework 

y 

— 

BPEL  Run  Time 

y 

— 

At  Half  the  Price 


ORACLe 


oracle.com/ more 
or  call  1.800.633.0759 

Oracle  Application  Server  lOg  is  half  the  price  of  BEA  WebLogic  Platform  8.1. 

Compariton  is  based  on  Oracle  Application  Server  IO9  Enterprise  Edition  with  Oracle  BPEL  Process  Manager  Option 
and  Oracle  Developer  Suite  lOp  vs.  BEA  WebLogic  Platform  8.1.  Pricing  reflects  usage  for  1  CPU  and  1  Developer. 


CaprngM  e  aSA  Owe  Al  npo  reserved  Oracle  a  a  ngMBfM  ndtmet  of  Orada  Cerparsbon  i 
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Ultradense  server  racks,  disaster  recovery  requirements 
and  IP  networks  are  forcing  big  changes  in  the  way  new 
data  centers  are  built.  By  Gary  H.  Anthes  PAGE  23 
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[-VOTING'S  BIG  TEST 


Software  Vendors’ Audit 
Requests  Irk  rr  Managers 


Some  view  Sarb-Ox  sunny- 

«e-ins^aplo>.others 

see  nothil^  amiss  pany  condua  a  self-audit  of 

itsuseofTeainSite.Inlerwo- 
8v  THOMAS  HOFFMAN  veo's  enterprise  content  man- 

LAS  VEGAS 

agement  system. 

A  number  of  software  vendors  The  letter  said  the  audit 
are  requesting  that  large  cor-  was  required  to  help  Imerwo- 
porate  customers  conduct  ven  meet  the  Sarbanes-Oxtey 
self-audits  against  their  AHUfaM  Act's  compliance  man- 
software  usage,  allegedly  dates  but  didn't  roen- 

to  help  the  suppliers 
meet  Sarbanes-Oxley  I 
regulatory  require-  I 
ments,  according  to  sev-  I 
eral  attendees  at  an  IT  ^ 


to  help  the  suppliers  which  regulatory 

meet  Sarbanes-Oxley  requirements  had  to 

regulatory  require-  IHHIIIII  be  met,  said  the  pur- 
ments,  according  to  sev-  rtia^ing  manager.  "It 

eral  attendees  at  an  IT  seemed  like  a  soft-step 

asset  man^ement  conference  approach  to  get  us  to  conduct 
held  here  last  week.  an  audit.*’  be  said. 

A  corporate  purchasing  di-  His  company  ended  up  con- 
rector  at  a  large  Midwestern  ducting  the  audit.  It  then  re- 
financial  services  company  viewed  the  results  with  its  ie- 


1^0  requested  anonymity  said  gal  department  and  informed 


his  organization  recently  re- 


GM,  Boeing 
Push  Identity 
Management 

Expect  single-sign-on 
rollouts  to  lower  costs, 
improve  access  to  apps 


General  Motors  Corp.  plans  to 
migrate  its  end-user  identity 
management  services  to  a  sin¬ 
gle  global  system  over 
the  next  several  years  as 
part  of  a  broad  initiative 
to  improve  IT  efficiency 
and  reduce  the  automak¬ 
er's  operational  costs. 

When  it’s  completed. 


Audit,  page  51 


the  consolidated  identity  man¬ 
agement  system  win  en^le 
universal  application  access 
and  single-sigD-on  capabilities 
for  about  500,000  end  users, 
including  GM  employ'ees  and 
workers  at  sui^U^,  contrac¬ 
tors  and  ocher  business  part¬ 
ners.  according  to  Tony  Scott, 
the  company’s  chief  technol¬ 
ogy  officer. 

The  new  infrastructure  will 
replace  numerous  silos  of 
identity  information  at  GM 
and  wdU  play  a  crucial  role  in 
its  ongoing  move  toward  a 

^obal  supply  chain  and 
manufacturing  nMxleL 
Scott  said  at  the  Digital 
Identity  World  confer¬ 
ence  here  last  week. 

The  supplier  and  de- 
ID  Management,  page  14 
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Ultradense  server  racks,  disaster  recovery  requirements 
and  IP  networks  are  forcing  big  changes  in  the  way  new 
data  centers  are  built.  By  Gary  H.  Anthes  PAGE  23 
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Software  Vendors’  Audit 
Requests  Irit  IT  Managers 


Sitinc  \  icw  S;irb-(  )\ 
tic-ins  ;is  a  ploy;  others 
sccnothinganiiss 


A  number  of  software  vendors 
are  requesting  that  large  cor¬ 
porate  customers  conduct 

self-audits  against  their  - 

software  usage,  allegedly 
to  help  the  suppliers 
,  meet  Sarbanes-Oxley 
,  regulatory  require¬ 
ments.  accordii^  to  se\'- 
I  oral  attendees  at  an  IT  ^ 
j  asset  management  conference 
'  held  here  last  week. 

A  corporate  purchasing  di- 
I  rector  at  a  large  Midwestern 
I  financial  services  company 
I  who  requested  anonymity  said 
^  his  oi^nization  recently  re- 


GM,  Boeing 
Push  Identity 
Management 

Kxpcct  sinjdc-sijai-on 
rollouts  to  lower  costs, 
inipnn  c  access  to  apps 


General  Motors  Corp.  plans  to 
migrate  its  end-user  identity 
management  services  to  a  sin¬ 
gle  global  system  over 
the  next  several  years  as 
part  of  a  broad  initiative  ; 
to  improve  IT  efficiency  | 
and  reduce  the  automak- 1 
er’s  operational  costs.  I 
When  it‘s  completed.  ' 


I  ccived  a  letter  from  Sunny¬ 
vale.  (;^lif.-based  Interwoven 
Inc.  requesting  that  the  com¬ 
pany  conduct  a  self-audit  of 
its  use  of  TcamSitc.  Interwo- 
ven's  enterprise  content  man¬ 
agement  system. 

1  The  letter  said  the  audit 
'  was  required  it*  help  Interwo¬ 
ven  meet  the  Sarbanes-!  >xle> 
Act’s  compliance  man¬ 
dates  but  didn’t  men¬ 
tion  which  regulaii>r>' 
requirements  had  to 
be  met.  said  the  pur¬ 
chasing  manager.  “It 
seemed  like  a  soft -step 
approach  to  gel  us  tt»  ctmduct 
I  an  audit.’’ he  said, 
j  His  company  ended  up  con- 
I  ducting  the  audit.  It  then  re¬ 
viewed  the  results  with  its  !c- 
'  gal  department  and  informed 
Audit. 


the  consolidated  identity  man¬ 
agement  system  will  enable 
I  unhersal  application  access 
j  and  single-sign-on  capabilities 
'  for  about  500.000  end  users. 

including  GM  employi'cs  and 
I  workers  at  suppliers,  contrac- 
I  tors  and  other  business  part  - 
i  ners.  according  to  Tony  Setui. 
the  company's  chief  technol¬ 
ogy  officer. 

The  new  infrastructure  will 
replace  numerous  siltis  t>f 
I  identity  information  at  GM 
j  and  will  play  a  crucial  role  in 
I  its  ongoing  move  toward  a 

global  supply  chain  and 
manufacturing  mt>dcl. 
Scon  said  at  the  Digital 
Identity  World  conJfer- 
ence  here  last  week. 

The  supplier  and  dc- 
ID  Afonagemenr.  page  id 
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"For  midsized  and  large  organizations,  a  significant 
Linux  deployment  will  neither  be  free  nor  easily 
accomplished.  In  fact,  respondents  at  large 
organizations  reported  that  a  wholesale  switch  to 
Linux  from  Windows'  or  Unix  would  significantly 
Increase  TCO  for  the  forseeable  future." 

-Laura  DiDio,  The  Yankee  Group,  April 2004 
Linux,  Unix,  and  Windows  TCO  Comparison 


The  Yankee  Group,  a  global  research  and  consulting  firm,  concluded  that 
a  significant  switch  to  Linux  from  Windows  or  Unix  could  cost  three  to  four 
times  as  much  without  delivering  tangibly  better  performance  or  business 
value.  These  findings  are  based  on  a  non-sponsored  worldwide  survey  of  1,000 
IT  administrators  and  C-level  executives  in  midsized  and  large  enterprises. 

To  get  the  full  study,  visit  microsoft.com/getthefacts 


Windows 
Server  System 
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Corporatior)  m  the  United  States  artd/or  other  countries.  The  names  of  actual  companies  and  products  mentioned  herein  may  be  the  trademarts  Of  their  respectiee  owners 
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Date:  Febniary  14, 2005 
San  Francisco 

Visit  ca.com/etrust/worfcshop 

for  information  and  to  register  to  win. 
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It  takes  an  integrated  security  solution  to  make  sure  the 
right  people  have  the  right  access  at  the  right  time. 

eTrusf  Identity  and  Access  Management  Solutions 

These  days,  a  vital  aspect  of  security  management  is  providing  customized 
levels  of  access  for  countless  employees  and  partners  while  also  protecting 
your  customers  from  identity  theft.  That's  one  complicated  job-and  one  that 
can  be  made  much  easier  with  CA's  ©Trust  Identity  and  Access  Management 
(lAM)  Solutions.  They  enhance  security  and  reduce  costs  by  automating 
processes  and  enabling  self-administration,  in  addition  to  providing  policy-based 
cross-platform  protection  for  web,  mainframe,  and  application  resources 
enterprise  wide.  To  find  out  how  CA's  lAM  solutions  can  improve  your  business, 
attend  one  of  our  workshops,  ca.com/etrust/workshop 
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OpenVMS  Survives  and  Thrives 

In  tin  Technology  section;  The  OpenVMS 
operating  system  gets  a  new  lease  on  life 
as  it  moves  to  64'bit  Itanium,  and  for  users 
like  Sony’s  Daniel  Sanchez  Reina,  Its  relia¬ 
bility  makes  it  a  no-brainer.  Page  28 
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Outsourcing  Tuneup 

In  the  Manaoement  section:  Do  last 
year's  outsourcing  decisions  support 
this  year’s  business  strateg>'?  these 
to  questions  to  find  out.  Page  37 
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4  E-voting  software  can  now  be 
checked  for  authenticity  by 
election  ofTicials,  but  only  if 

it  has  yet  to  be  installed. 

5  Open  standards  are  key  to 

the  sutxess  of  on-demand 
systems,  IT  managers  say. 

5  Starwood  Hotels  signs  on  HP 

to  develop  a  new  reservation 
system  and  replace  IBM  as  its 
outsourcing  vendor. 

6  Information  life-cycle  man¬ 
agement  needs  business  buy- 
in  to  succeed.  IT  execs  say  at 
Storage  Networking  World. 

6  Q&A:  Doll  CEO  Kevin  Rollins 
talks  about  the  vendor’s 
evolving  relationship  with 
EMC  and  emerging  standards. 

10  BEA  releases  a  framework 
that’s  designed  to  help  Web- 
Logic  users  build  service- 
oriented  architectures. 

10  Symantec  makes  a  play  for  a 
broader  market  with  its  “in¬ 
formation  integrity"  strategy. 

12  Global  Dispatches.  German 
companies  eye  Linux  but  leave 
the  door  open  for  Windows. 

12  Wireless  rollouts  frustrate 
some  IT  managers,  who  say 
better  deployment  and  man¬ 
agement  tools  are  needed. 

14  The  Toledo  school  system 
may  resurrect  a  stalled 
PeopleSoh  implementation. 

51  Microsofl's  LCS  2005  soft¬ 
ware  could  boost  interest  in 
corporate  instant  messaging. 


23  Data  Centers  Get  a 
Makeover.  Technology 
changes  are  affecting  both 
the  role  of  the  data  center 
and  how  it’s  designed. 

30  QuickStudy:  Error  Checking 
and  Correction.  The  process 
of  detectii^  errors  during  the 
transmission  or  storage  of 
d^tal  data  and  correcting 
them  automatically  usually 
involves  sending  or  storing 
extra  bits  of  data  according 
to  specified  algorithms. 

32  Security  Manager’s  Journal: 
Lack  of  Control  Becomes 
Nightmare.  Not  having  com¬ 
plete  control  of  network  secu¬ 
rity  operations  is  a  nightmare 
for  C.).  Kelly,  and  now  she  has 
to  find  out  what’s  really  going 
on  in  the  netwoik. 
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40  Watch  Your  Weblog.  Dangers 
lurk  amid  corporate  blogs, 
and  sponsoring  or  creating 
one  is  rife  with  legal  liabili¬ 
ties.  Here  are  some  precau¬ 
tions  you  should  take. 

42  Think  Tank.  A  deeper  dive 
into  Alinean’s  ROI  calcula¬ 
tions;  an  unorthodox  exami¬ 
nation  of  the  skills  the  "gamer 
generation”  will  bring  to  the 
workplace:  and  a  look  at  IT 
buyer  intentions. 

43  Caroor  Watch.  The  IT  class  of 
'04  is  in  the  money  —  relative¬ 
ly  speaking:  growth  gains  on 
cost  control  as  a  corporate  fo¬ 
cus;  and  tough  times  continue 
for  rank-and-fUe  IT  workers. 


6  On  the  Mark:  Mark  Hall  asks 
you  to  put  yourself  in  the 
shoes  of  Microsoft's  CIO  for 
IT.  whose  bosses  demand  that 
he  use  alpha-stage  products  in 
his  production  environment. 

18  Don  Tennant  thanks  IT  pro¬ 
fessionals  for  their  persever¬ 
ance  and  for  what  that  at¬ 
tribute  has  enabled  them  to 
contribute  to  our  lives. 

16  Dan  Oilltnor  has  a  prediction 
about  the  election:  It's  going 
to  be  technologically  messy. 

19  Michael  H.  Hugos  has  found 
that  the  best  way  to  help  his 
company  thrive  is  to  ke^  sys¬ 
tems  simple  and  automate  just 
the  routine  stuff. 

34  Bruce  Schneier  says  that  the 
ultimate  answer  to  security 
vulnerabilities  is  to  make  the 
software  vendors  liable  for 
the  boles  in  their  products. 

44  Paul  Glen  has  a  problem  with 
people  who  propose  solutions 
without  first  artictilating  the 
problem.  IT  should  be  able  to 
help  its  clients  eliminate  such 
fuzzy  thinking,  be  says. 

52  Frankly  Speaking:  Frank 
Hayes  wonders  what  will  hap¬ 
pen  when  the  bubble  of  faith 
in  offshoring  eventually  bursts. 
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OpenVMS  Survives  and  Thrives 

in  the  Technology  section:  The  OponVMS 
operating  system  gets  a  nev%  lease  r'n  life 
as  it  moves  to  <>4-bit  Itanium,  and  for  users 
like  Sony's  Daniel  Sanchez  Reina.  its  relia¬ 
bility  makes  it  a  no-brainer.  Page  28 


Outsourcing  Tuneup 

In  the  Management  section:  D^>  List 

' '  year's  outsourcing  Jeeisitms  support 
this  year's  business  strategy?  Ask  these 
1(1  questions  to  find  out.  Page  37 
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“  E-voting  software  can  now  be 

checked  for  authenticity  by 
election  officials,  but  only  if 
it  has  yet  to  be  installed. 

Open  standards  are  key  to 

the  success  of  on-demand 
systems.  IT  managers  say. 

b  Starwood  Hotels  signs  on  HP 

to  develop  a  new  reservation 
system  and  replace  IBM  as  its 
outsourcing  vendor. 

6  Information  life-cycle  man¬ 
agement  needs  business  buy- 
in  to  succeed.  IT  execs  say  at 
Storage  Networking  World. 

6  Q&A  Dell  CEO  Kevin  Rollins 
talks  about  the  vendor’s 
evolving  relationship  with 
EMC  and  emerging  standards. 

10  BEA  releases  a  framework 
that’s  designed  to  help  Web- 
Logic  users  build  scrvicc- 
oriented  architectures. 

10  Symantec  makes  a  play  for  a 
broader  market  with  its  “in¬ 
formation  imegriiy"  strategy. 

12  Global  Dispatches.  German 
companies  eye  Linux  but  leave 
the  door  open  for  Windows. 

12  Wireless  rollouts  frustrate 

some  IT  managers.  W'ho  say 
better  deployment  and  man¬ 
agement  tools  arc  needed. 

14  The  Toledo  school  system 
may  resurrect  a  stalled 
PcopleSoft  implementation. 

51  Microsoft’s  LCS  2005  soft¬ 
ware  could  boost  interest  in 
corporate  instant  messaging. 


40  Watch  Your  Weblog.  Dangers 
lurk  amid  corporate  blogs, 
and  sponsoring  or  creating 
one  is  rife  with  legal  liabili¬ 
ties.  Here  are  some  precau¬ 
tions  you  should  take. 

42  Think  Tank.  A  deeper  dive 
into  Alinean’s  ROI  calcula¬ 
tions;  an  unorthodox  exami¬ 
nation  of  the  skills  the  “gamer 
generation"  will  bring  to  the 
workplace:  and  a  look  at  IT 


23  Data  Centers  Get  a 
Makeover.  Technolog>- 
changes  are  affecting  both 
the  role  of  the  data  center 
and  how  it's  designed. 

30  QuickStudy:  Error  Checking 
and  Correction.  The  pr^Kcss 
of  detecting  errors  during  the 
transmission  or  storage  of 
digital  data  and  correcting 
them  automatically  usually 
involves  sending  or  storing 
extra  bits  of  data  according 
to  specified  algorithms. 

32  Security  Manager's  Journal: 
Lack  of  Control  Becomes 
Nightmare.  Not  having  com¬ 
plete  control  of  network  secu¬ 
rity  operations  Is  a  nightmare 
for  C.J.  Kelly,  and  now  she  has 
to  find  out  what’s  really  going 
on  in  the  network. 
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:  8  On  the  Mars  Mark  Hall  asks 
you  to  put  yourself  in  the 
shoes  of  Microsoft's  CIO  for 
IT.  wh«isc  bosses  demand  that 
he  use  alpha-stage  products  in 
his  production  environment. 

18  Don  Tennant  thanks  IT  pn>- 
fcssionals  for  their  persever¬ 
ance  and  for  w  hat  that  at¬ 
tribute  has  enabled  them  to 
contribute  to  our  lives. 

18  Dan  Gillmor  has  a  prediction 
about  the  election:  It's  going 
to  be  tcchnoK)gicalh'  messy. 

19  Michael  H.  Hugos  has  found 
that  the  best  way  to  help  his 
company  thrive  is  i<*  keep  sys¬ 
tems  simple  and  automate  just 
the  rtvutino  stuff. 

34  Bruce  Schneier  says  that  the 
ultimate  answer  to  security 
\’ulnerabUitics  is  to  make  the 
software  vendors  liable  for 
the  holes  in  their  products. 

44  Paul  Glen  has  a  problem  with 
people  who  propose  solutions 
without  first  articulating  the 
problem.  IT  should  be  able  to 
help  its  clients  eliminate  such 
fuzzy  thinking,  he  says. 

52  Frankly  Speaking:  Frank 
Hayes  wonders  what  will  hap¬ 
pen  w'hen  the  bubble  of  faith 
in  offshoring  eventually  bursts. 


buyer  intentions. 

DEPARTMENTS/RESOURCES 

At  Deadline  Briefs  ... 

4 

43  Career  Watch.  The  IT  class  of 

News  Briefs . 

8.10 

'04  is  in  the  money  —  relative- 

Letters . 

19 

ly  speaking:  growth  gains  on 

IT  Careers . 

46 

cost  control  as  a  corporate  fo- 

Company  Index . 

50 

cus;  and  tough  times  continue 

How  to  Contact  CW  .  . 

50 

for  rank-and-file  IT  workers. 

Shark  Tank . 

52 

ONLINE 

WWW  COIilPUTEItWOm.O.COM 


QuickPoll  Results 


Are  you  sattsflad  witti  your  pay  rate  this  year? 


OTtethe«wefc's(X«e>ft»a<wiWirBiiiaul»ewildxMiii 

Products  to  Prevent  Data  Theft 

SECURITY  Danny  Lieberman  of  Open  Solu¬ 
tions  Israel  offers  a  guide  to  buying  tcchnol- 
i>g)’  to  safeguard  your  critical  infornuiion. 

O  QuicMjnk496ta 

Modify  User  Behavior 

IT  MANAGEMENT:  CA  architect  Stexie  Sacks 
outlines  how  to  cut  IT  costs  by  making  busi¬ 
ness  units  accountable  for  their  consumption 
of  resources.  OOuicUJnli  50064 

E-voting  Updates 

NEWS:  How  is  electronic  votir^  working  in 
this  election?  Stay  up  to  date  this  week  on  all 
the  latest  news.  O  QuickLink  a4760 
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Textron,  CSC  Sign 
Outsourcing  Deal 


Computer  Sciences  Corp.  said  it 
has  signed  an  IT  outsourcing  con¬ 
tract  with  Textron  he.  tfut’s  ex¬ 
pected  to  be  worth  about  S1.1  bil¬ 
lion  over  the  next  10  years.  CSC 
will  manage  the  Providence.  R.I.- 
based  conglomerate's  global  data 
carrier,  help  desk  and  network 
operations,  plus  its  servers  and 
desktop  systems.  About  2S0  IT 
workers  at  Textron  will  be  ottered 
lobs  at  CSC  as  part  of  the  deal. 


Oracle  Sets  Release 
Date  for  New  Apps 

Oracle  Corp.  said  it  plans  to  ship 
the  latest  version  of  its  ERP  appli¬ 
cations  next  Monday,  although  a 
spokeswoman  noted  that  logisti¬ 
cal  issues  could  delay  the  release 
by  e  few  days.  Oracle  announced 
the  E-Business  Suite  lfi.10  soft¬ 
ware  at  its  OpenWorkJ  conference 
in  early  September  and  has  al¬ 
ready  released  some  modules, 
including  its  CRM  applications. 


Revenue  Oomi  at 
12;  Sales,  Profits  Up 

Supply  chain  software  veiMlor  i2 
Technologies  ir»c.  reported  a  5% 
dip  h  tMrd-guarter  revenue  com¬ 
pared  with  Hs  year-earker  results. 
But  OaBas-based  12  said  its  soft¬ 
ware  license  sales  rose  21%  year 
over  year  to  Sf7  minion.  Profits 
more  than  doubled.  It  said. 


Cybercrime  Arrests 
Nd  28  Suspects 


The  U.S.  Secret  Service  said  it 
has  arrested  28  people  from  eight 
U.S.  states  and  six  countries  for 
alleged  involvement  in  a  global 
cybercrime  rhg.  The  Secret  Ser¬ 
vice  claimed  that  the  suspects 
had  coMectrvely  trafficked  h  at 
least  1.7  million  stolen  credit  card 
numbers  and  caused  S4.3  million 
in  losses  among  banks. 


Feds  Issue  Test  Copies 
Of  E-voting  Software 


officials  can  match  digital  sigiiatua-s  to 
a'fcrcncc  copies,  hut  initial  use  is  limited 


8V  OAN  VEfITON 

mtR.M  orni  Ml  s  last 
week  released  a  set  of 
software  files  submit¬ 
ted  by  five  vendors  of 
e-\otinp  systeim  and  voting 
verific.ition  tooLs,  saying  that 
election  ofTicials  can  use  the 
code  and  related  digiMi  signa- 
I  turcs  to  check  whether  the 
j  software  they  have  bought  has 
I  been  modified  without  their 
I  knowledge. 

i  But  the  so-called  reference 
data  set  issued  by  the  National 
!  Institute  of  Standards  and 
Technology  will  likely  be  of 
'  IHitc  use  to  state  offici.'ils  for 
I  verifying  the  integrity  of 
I  e-vottng  systems  being  used  in 
tomorrow's  eirciinn.  And  the 
I  future  value  of  the  files  could 
be  limited  for -Stales  that  have 
I  eustomixed  their  cvnttng 
I  software. 

The  National  Sofmare  Ref- 


Bellevue,  Wash.-bascd  Vote- 
Hero  s,iid  in  late  lune  that  it 
had  submitted  a  reference 
source-code  implementation 
for  inclusion  in  the  NSRL. 
Omaha-based  ES&S  made  a 
simikir  announcement  in  Au¬ 
gust.  and  Austin-based  Hart 
InierCivic  followed  suit  in 
mid-October.  North  Canton, 
Ohio-based  Diebold  couldn't 
be  reached  for  comment. 

Facing  Skepticism 

The  submissions  were  made 
after  the  U.S.  Election  As-sis- 
(ance  Commission  called  on 
all  e-voting  software  verwJors 
to  provide  code  to  the  NSRL. 

In  a  letter  dated  July  LI.  com¬ 
mission  Chairman  DeForcsi 
Soaries  |r.  said  having  access 
to  the  code  would  "faciliiate 
the  tracking  of  software  ver¬ 


sion  usage."  Some  observ  ers 
have  claimed  that  vendors  have 
installed  patches  and  upgrades 
prior  Hi  elections  without  let¬ 
ting  officials  inspect  the  code 
first.  Sequoia  spokesman  Alfic 
[  Charles  said  the  NSRL  is  .stw 
ing  "pristine  copies”  of  v'endor- 
submitted  software  "to  help 
prepare  for  the  inevitable  chal¬ 
lenges  that  take  place  whenev¬ 
er  there  arc  close  elccfion-s." 

Rut  Avi  Rubin,  a  professor  at 
lohns  Hopkins  University  who 
has  criticized  e-voting  .securi¬ 
ty  controLs.  called  the  NSRL 
"smoke  and  mirrors."  Rubin 
s.aid  that  if  e-voiing  software 
“is  already  rigged,  storing  the 
[digital  sign.'iiurej  hashi-s  only 
guarantees  that  the  malicious 
code  will  be  there  if  the  ha.sh- 
e.s  match.” 

Kim  Aic.xander.  president  of 
the  California  Voter  Founda¬ 
tion,  called  the  vendor  sub¬ 
missions  good  news,  but  only 
if  there  are  no  last-minute 


(XCCMPT 

'Thisettortisafirst 
step  in  being  able  to 
trace  software  from 
the  vendor  through  the 
accreditation  process 
to  the  states  and  other 
purchasers  of  voting 
systems.  Now  election 
authorities  have  a 
reference  database  to 
compare  with  the 
digital  signatures  ol 
software  provided  to 
them  fay  vendors." 


changes  to  the  software.  "If 
(here  arc  technical  problems 
with  software  vote  counts  on 
election  night,  it’s  possible 
that  vendors  will,  as  they  have 
in  the  past,  install  patches  or 
upgrades  to  gel  the  vote  count 
started  again."  she  said. 

Election  officials  will  have 
to  keep  a  public  audit  log  of  all 
software  testing  and  installa¬ 
tions  to  ensure  that  Ihca-'s  no 
appearance  of  impropriety. 
Aic.xander  added.  O  50423 


Officials  Defend  Systems,  Despite  Early  E-voting  Problems 


i  crence  Library's  t  NSRL)  Web 
I  site  said  the  files  typiciilly  can 
!  be  used  only  to  check  software 
I  that  has  yet  to  be  installed  on 
1  a  voting  machine.  The  notice 
added  (bat  "w  ith  limited  ex- 
cepiitFns."  e-voiing  software 
i  can't  generate  digital  stgjia- 
turcs  after  it  has  been  installed. 

.The  NSRL  notice  als»»  said 
that  election  authorities  using 
software  that  has  been  legiti¬ 
mately  altered  won't  be  able  to 
use  the  reference  data  set  to 
compare  digital  signatures. 
Only  sigrutures  derived  from 
the  identical  product  releases 
'  submitted  b>-  the  five  vendors 
arc  available  on  the  NSRL's 
Web  site. 

Vendors  that  had  pnrvided 
wftware  to  the  NSRL  as  of 
Oct.  22  include  Diebold  Ii»c., 
Election  Systcm.s  &  Software 
Inc..  Han  InterCivic  Inc.,  Se¬ 
quoia  Voting  Systems  Inc. 
and  VotcHcre  Inc.  Oakland, 
Calif.-based  Sequoia  said  it 
has  made  several  submissions 
over  the  past  two  weeks. 


SINCE  early  vobng  began  on  Od 
18  m  Ronda  and  at  least  seven 
other  slates  where  tight  presi- 
(tential  comesls  are  expected, 
voters  have  reported  hundreds  of 
problems  to  the  Election  Incideni 
Reporting  System,  some  of  which 
resulted  from  technical  glitdies  in 
the  computers  used  to  sup¬ 
port  the  votxig  process. 

The  incident  reporting  system 
IS  an  online  database  set  up  by 
grass-roots  organizations,  in¬ 
cluding  Verified  Volmg  Founda¬ 
tion  Inc.  and  Compuier  Profes¬ 
sionals  lor  Social  Responsibility. 
Of  the  666  incidents  reported  in 
Flonda  as  of  fast  Wednesday.  33 
were  linked  to  alleged  malfunc¬ 
tions  of  e-voting  systems  in  nine 
counties.  In  Broward  County,  for 
example,  some  voters  claimed 
that  touch-screen  systems  pre¬ 
sented  incomplete  bailols. 

Alia  Farak  a  spokeswoman  lor 
Flonda  Deputy  Secretary  of 


State  Oave  Mann,  said  that  con¬ 
trary  to  news  reports,  there  have 
been  no  problems  related  to  any 
of  the  touch-screen  e-voting  sys¬ 
tems  being  used  in  the  state  dur¬ 
ing  the  early  voting  period.  The 
touch-screen  systems  have  been 
operating  as  pt^ned."  Faraj  said. 

The  only  problems,  she 
added.  Involved  laptop  PCs  that 
were  leed  to  check  voter-regis¬ 
tration  rolls  In  some  counties. 
Those  problems  were  fixed  im¬ 
mediately  by  a  simple  reboot  of 
the  laptops.  Faraj  said. 

Will  Doherty,  executive  direc¬ 
tor  of  the  San  Francisco-based 
Verified  Voting  Foundation,  said 
that  despite  F^'s  characteriza¬ 
tion  of  the  laptop  malfunctions 
as  minor,  hts  organization  is 
aware  of  dozens  of  Honda  vot¬ 
ers  who  were  turned  away  from 
the  polls  'because  of  that  nxnor 
system  crash." 

Doherty  also  said  there  have 


been  multiple  reports  of  touch¬ 
screen  calibration  problems  in 
Rorida.  Some  voters  have  said 
that  when  they  touched  the 
screen  next  to  their  candidate's 
name,  the  screen  highlighted  the 
name  of  the  opposing  candidate, 
according  to  Doherty. 

In  addition  to  the  Florida  coun¬ 
ties.  localities  in  Colorado.  Ten¬ 
nessee  and  Texas,  as  well  as  two- 
thirds  of  Georgia's  counties,  have 
experienced  connection  prob¬ 
lems  between  their  early  voting 
sites  and  the  central  servers  that 
hold  voter  registration  databas¬ 
es.  said  VotersUnite.  a  nonparti¬ 
san  voter  advocacy  group. 

Alfie  Charles,  a  spokesmw  for 
Sequoia  Voting  Systems,  said  it's 
important  not  to  confuse  a  minor 
glitch  in  a  voter-regstralion  sys¬ 
tem  with  voting  probfems.  All 
touch-screen  systems  are  report¬ 
edly  operating  norm^.  he  said 
‘Oanyeffan 
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Textron,  CSC  Sign 
Outsourdng  Deal 

Computar  SdMiMs  Corp.  tiM  it 
has  sAgnMl  an  IT  outaourcing  cen- 
traet  «Mi  Tntron  Inc.  that’s  as* 
pnctad  ts  bs  nwlh  about  $11  bi- 
Ion  ovar  the  nait  10  yaan.  CSC 
wM  mannea  tha  ftottidanco.  fU.- 
baaod  cengiemanlo’s  ^ohai  data 
cantar,  haip  daak  and  notwork 
oparatlona.  phia  Is  aarvara  and 
dsaktop  syslams.  About  250  rr 
aforhaia  at  Taitron  wM  bo  offarad 
jobs  at  CSC  aa  part  of  tha  daal 


Oracle  Sets  Release 
Date  for  New  Apps 

Orada  Corp.  said  H  pfam  to  sNp 
thaialasivanionofllsERPappi- 
callons  nait  Monday,  aithoudi  a 
apohaawoman  nolad  that  logtsfr 
eat  laauas  couU  daisy  tha  rataaaa 
by  a  fata  days.  Orada  announcod 
tbo  E-BMinaaB  Sidia  mn  aoft- 
««ani  at  la  OpandforU  eonfaronca 
in  aarty  Saptombar  and  has  al- 
raody  ralaaaad  soma  modulas. 
inchidtaQ  Ns  CM  ipplcadons. 


Revenue  Down  at 
12;  Sales,  Profits  Up 

Supply  Chain  aoftwara  vendor  12 
TocfaneiaglBB  he.  roportod  a  5% 
dhhtMrd'quartorrtvanuoeein- 
pared  ««i  la  yaor-aarlor  raaults. 
But  Dalaa-taaaad  (2  add  It  soft¬ 
ware  leanaa  aiaa  rase  21%  year 
ever  year  to  $17  ndMon.  ftofita 


•  L  c-tSu- TS 
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Cybercrime  Arrests 
Nk  28  Suspects 

The  ILS.  Sacral  Sarvlea  said  I 
has  anoalod  2B  piopia  from  aipM 
US.  atatos  and  sill  couHbiae  for 
aNogad  bwotvamanl  h  a  glebal 
cyharcrfrna  ring.  The  Secret  Sar 
vteoriaiwad  that  tha  auapacta 
nan  cppacovaiy  trafUGiiod  n  at 
hast  17  mflen  dohn  eradi  card 
numbara  and  cauaad  $4.3  rrdMon 


Feds  Issue  Test  Copies 
Of  E-voting  Software 


Officials  can  match  digital  signatures  to 
reference  copies,  but  initial  use  is  limited 


SV  DAN  VEirrON 

Federal  officials  last 
week  released  a  set  of 
software  files  submit¬ 
ted  by  five  vendors  of 
e-voting  systems  and  voting 
verification  tools,  saying  that 
election  officials  can  use  the 
code  and  related  digital  signa¬ 
tures  to  check  whether  the 
software  they  have  bou^t  has 
been  modified  without  their 
knowledge. 

But  the  so-called  reference 
data  set  issued  by  the  National 
Institute  of  Standards  and 
Technology  will  likely  be  of 
little  use  to  state  officials  for 
verifying  the  integrity  of 
e-voting  systems  being  used  in 
tomorrow’s  election.  And  the 
fumre  value  of  the  files  could 
be  limited  for  states  that  have 
customized  their  e-voting 
software. 

The  National  Software  Ref¬ 
erence  Library's  (NSRL)  Web 
site  said  the  files  typically  can 
be  used  only  to  check  software 
that  has  yet  to  be  installed  on 
a  voting  machine.  The  notice 
added  that  “with  limited  ex¬ 
ceptions,"  e-voting  software 
can't  generate  digital  signa¬ 
tures  after  h  has  been  installed. 

The  NSRI.  notice  also  said 
that  election  authorities  using 
software  that  has  been  legiti¬ 
mately  altered  won't  be  able  to 
use  the  reference  data  set  to 
compare  d^tal  signatures. 
Only  signatures  derived  from 
the  identical  product  releases 
submitted  by  the  five  vendors 
are  available  on  the  NSRL's 
Web  site. 

Vendors  that  had  provided 
software  to  the  NSRL  as  of 
Oct  22  include  Diebold  Inc., 
Election  Systems  &  Software 
Inc.  Han  InterCivic  Inc.  Se¬ 
quoia  Voting  Systems  Inc 
and  VoteHere  Inc.  Oakland, 
Calif.-based  Sequoia  said  it 
has  made  several  submissions 
over  the  past  two  weeks. 


Bellevue,  Wash.-based  Vote¬ 
Here  said  in  late  June  that  it 
bad  submitted  a  reference 
source-code  implementation 
for  inclusion  in  the  NSRL. 
Omaha-based  ES&S  made  a 
similar  announcement  in  Au¬ 
gust,  and  Austin-based  Han 
InterCivic  followed  suit  In 
mid-October.  North  Canton. 
Ohio-based  Diebold  couldn't 
be  reached  for  comment. 

Facing  Skeptidsin 

The  submissions  were  made 
after  the  US.  Election  Assis¬ 
tance  Commission  called  on 
all  e-voting  software  vendors 
to  provide  code  to  the  NSRL 
In  a  letter  dated  July  13,  com¬ 
mission  Chairman  Deforest 
Soanes  Jr.  said  having  access 
to  the  code  would  “facilitate 
the  tracking  of  software  ver¬ 


sion  usage."  Some  observers 
have  claimed  that  vendors  have 
installed  parches  and  upgrades 
prior  to  eleaions  without  let¬ 
ting  officials  inspect  the  code 
firsL  Sequoia  spokesman  Alffe 
Charles  said  the  NSRL  is  stor¬ 
ing  'Tnistine  copies”  of  vendor- 
submitted  software  "to  help 
prepare  for  the  inevitable  chal¬ 
lenges  that  take  place  whenev¬ 
er  there  are  close  elections." 

But  Avi  Rubin,  a  professor  at 
Johns  Hi^kins  University  who 
has  criticized  e-voting  securi¬ 
ty  controls,  called  the  NSRL 
“smoke  and  mirrors."  Rubin 
said  that  if  e-voting  software 
“is  already  rigged,  storing  the 
(digital  signature]  hashes  only 
guarantees  that  the  malicious 
code  will  be  there  if  the  hash¬ 
es  match." 

Kim  Alexander,  presidefit  of 
the  California  Voter  Fbunda- 
tioa.  called  the  vendor  sub¬ 
missions  good  news,  but  only 
if  there  are  no  last-minute 


“Tills  eHort  isa  hrst 
step  111  being  able  to 
trace  software  trom 
ttie  vendor  through  the 
accreditation  process 
to  the  states  and  othei 
piircliasers  of  voting 
systems.  Now  election 
authorities  have  a 
reference  database  to 
cornpare  with  (he 
digital  signatures  of 
software  provided  to 
them  by  vendors  ” 


changes  to  the  software.  *Tf 
there  are  technical  problems 
with  software  vote  counts  on 
election  night,  it’s  possible 
that  vendors  will,  as  they  have 
in  the  past,  install  patches  or 
upgrades  to  get  the  vote  count 
started  again."  she  said. 

Election  officials  will  have 
to  keep  a  public  audit  log  of  all 
softw^  testing  and  installa¬ 
tions  to  ensure  that  there's  no 
appearance  of  impropriety. 
Alexander  added.  O  504^ 


Officials  Defend  Systems,  Despite  Earfr  E-vo(ing  (VoUanK 


SMCE  early  wtino  bagan  on  OcL 
6  in  Rorida  and  al  bast  seven 
other  steles  where  tight  presH 
derttal  contests  are  eiqjected. 
votere  have  reported  hundreds  of 
prtrUetre  to  the  Bection  Inddent 
Reporting  Systarn,  sorne  of  which 
resulted  from  technical  gitches  in 
the  computers  being  used  to  sup- 
port  tee  voting  process. 

The  incident  reporting  ^fstem 
is  an  orine  datetm  set  te)  by 
grass  roots  orgenfeations,  in- 
dudteg  IterlM  Voting  Founda¬ 
tion  Inc.  and  Computer  Rofss- 
suntes  for  Social  RNponstellity. 
Ot  tee  068  Incidenb  reported  in 
Rofida  as  of  test  lllWnefiday.  33 
wereMedtoalBgedmalhjnc- 
ttons  of  eMrting  systems  in  nine 
cofittes.  b  Brovterd  Couity.  tor 
enmpte.  some  votere  claimed 
tete  touch-screen  ^sterns  pre¬ 
sented  noomptetebakrts. 

Ala  Farai.  a  spottewNoman  for 
RoridB  Deputy  Secratary  of 


SteteOaveMannsaidlhatcofr- 
irary  to  news  reports,  there  have 
been  no  profaienB  letated  to  any 
ofteetoudvscreenfr^itingays- 
temsbeingieedlnlhestatedAr- 
ing  the  early  voting  period  The 
toudi-screan  systems  here  been 
operating  as  planned"  Fani  rsaid 
The  only  ptobbms.  she 
added  invoked  laptop  PCs  teal 
wereusedtochedtvoter-fagis- 
trafion  rols  in  some  coiaties. 
Thoeeprobtorowerelbtedim- 
nwdalely  by  a  simpte  reboot  of 
tee  bptop6,Fira|  said 
WiOoherty.eacutivedtiec* 
tor  of  tee  Sen  FrancbcofreBad 
Varteed  Voting  Foundation,  said 
teal  despite  Farafs  characteriza¬ 
tion  of  tee  laptop  iraffurKtions 
as  minor,  hb  orgteiization  is 
aware  of  dozans  of  FbidB  vot¬ 
ers  who  ware  turned  May  from 
the  pofb  "becteee  of  that  minor 
qrstemcnah.' 

Doherty  ateo  said  then  have 


been  mAipb  reports  of  touch¬ 
screen  calteration  prabbns  in 
Rorfda.  Some  vDtare  have  said 
that  when  they  touched  the 
screen  nerd  to  Ihalr  candtoate's 
name,  the  acieen  highlghled  the 
name  of  the  opposing  candktale, 
accordog  to  Doherty. 

baddfcntoteeRorfdacoun- 
Be6,localtestoCotoado.1an* 
neBB8eandlnBs.a8WBlastWD- 
tefeds  of  Oaotgtels  couriea^  have 
ggieriencedconnectionprob- 
bma  between  teeir  eariy  voting 
sM  and  tea  canfrrt  aw  vers  teat 
hoUvoferiegMrationdBtebas- 
MstedVotereUntia.  a  nonparti- 
sen  mtor  aiMwacy  voup. 

Alla  Ghnfas.  a  teioigaiman  for 
Se9ioiaVbiiig9yBtoita.atedrs 
importanlnottocaifiMafiilnor 
gMdiinavotoriegiMRdtansjiO’ 
tern  wlh  mfteg  pmUeiTte  Al 
touefrscreonaiiaknBteeiaporl- 
ady  opteteteg  normly.  ha  said 
'Ctinitertan 
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Tech  Standards  Set  Tone  for  On-Demand  Systems 


IT  managers  cite  need  for  application 
flexibility  and  broader  data  integration 


When  The  Museum  of 
Modern  Art  undenook  an 
$858  million  renovation  and 
expansion  project  eight  years 
ago,  it  gave  QO  Steve  Pelu* 
man  a  blank  canvas  for  rebuild¬ 
ing  its  data  center  and  systems. 

PeitZRian  said  last  week  that 
he's  making  the  most  of  the 
opportunity.  His  staff  is  re¬ 
moving  IT  silos  and  integrat¬ 
ing  systems,  with  the  goal  of 
creatii^  what  he  described  as 
an  "Amazon-like”  flow  of  in¬ 
formation  that  lets  MOMA’s 
busmess  users  access  dau  no 
matter  where  it’s  stored 

Peltzman  spoke  at  a  forum 
held  here  by  IBM  to  mark  the 
second  anniversary  of  its 
on-demand  computing  initia¬ 
tive.  Other  vendors,  such  as 
Hewlett-Packard  Ox  with  its 


said  adherence  to  open  tech¬ 
nologies  such  as  XML,  J2EE 
and  SOAP  is  critical  But  many 
added  that  vendors  continue 
to  knock  on  their  doors  with 
proprietary  products  in  hand. 

Chris  Dorsey,  CIO  at  Chase- 
Pitkin  Home  &  Garden,  a  divi¬ 
sion  of  Wegmans  Food  Mar¬ 
kets  Inc.  in  Rochester.  NY.,  is 
building  an  integrated  inven¬ 
tory  and  order  management 
system,  "nie  ability  to  share  in¬ 
formation  and  improve  busi¬ 
ness  intelligence  is  central  to 
the  project  he  said 

But  Dorsey  noted  that  one 
vendor  pitched  an  order  entry 


system  with  a  graphical  user 
interface  that  looked  as  if  it 
used  Java  and  XML  when  in 
fact  it  didn't  The  vendor  put 
"window  dressing  on  it  to 
make  it  appear  to  be  more 
open-standards-based  and 
user-friendly,  when  in  reality, 
it  isn't  that  flexible  or  cus¬ 
tomizable.”  Dorsey  said. 

Gaining  leverage 

Users  said  that  in  many  cases, 
they're  willing  to  give  up  the 
functionality  that’s  mcluded  in 
a  proprietary  product  because 
one  built  on  open  standards 
gives  them  more  leverage  with 
technology  vendors. 

The  ability  to  "pluck  out" 
applications  that  aren't  meet¬ 
ing  business  needs  "gives  me 


j  leverage  and  also  challenges 
vendors  in  a  different  kind  of 
way."  said  Sherra  Pierre,  vice 
president  of  information  ser¬ 
vices  at  Sesame  Workshop,  the 
New  York-based  nonprofit 
group  that  produces  Sesame 
Street  and  other  educational 
programming  for  children. 

"IT  is  no  longer  about  build¬ 
ing  specific  applications;  H  re¬ 
ally  has  become  more  fluid  in 
its  delivery."  Pierre  said. 

David  Bsdik,  president  of 
General  Glass  International 
Corp.  in  Secaucus.  N.J..  said 
he's  pleased  with  his  IBM  sys¬ 
tems  but  doesn't  feel  joined  at 
the  hip  with  the  vendor.  "An 
awfiil  lot  of  the  appUcations 
are  quite  portable  to  other 
places,  so  the  'gotcha'  faaor.  I 


Starv/ood  Taps  Hewlett-Packard  for 
System  Development,  Outsourcing  Deal 


adaptive  enterprise  strategy, 
also  are  championing  the  use 
of  highly  integrated  and  flexi¬ 
ble  systems.  But  underpinning 
the  marketing  terms  is  some¬ 
thing  IT  managers  have  un¬ 
derstood  for  years:  the  need  to 
support  open  standards. 

"Anybody  who  realizes  that 
integration  has  got  to  be  the 
way.  and  who  is  dealing  with  a 
lot  of  legacy  information,  it’s 
got  to  be  obvious  [to  them] 
that  open  standards  is  going  to 
make  that  easier,"  Peltzman 
said  in  an  interview. 

Peltzman  and  other  users 


Hotel  chain  plans 
phaseout  of  its 
IBM  mainframes 

av  MTINCK  THISOOeaU 

IT  flexibility  has  become  vital 
to  Starwood  Hotels  &  Resorts 
Worldwide  Inc.  And  to  try  to 
make  that  a  reality,  Starwood 
has  inmersed  itself  in  a  proj¬ 
ect  called  Fusion  that  ti^tly 
couples  its  IT  plans  with  busi¬ 
ness  needs  and  includes  a  new 
reservation  system  that  will 
link  many  of  the  company's 
bo^itality  services  and  make 
them  more  accessible  online. 

Starwood  last  week  said 
that  it  has  s^ned  a  seven- 
year.  $100  million  technology 
and  outsourcing  deal  with 
Hewlett-Packard  Co.,  which 
will  help  develop  the  J2EE- 
based  reservation  system  and 
then  manage  it  ^Ue  provid¬ 
ing  a  variety  of  other  IT  ser¬ 
vices  to  WWte  Plains,  N.Y.- 
based  Starwood  (see  box). 

HP  is  replacing  IBM  as  Star- 
wood’s  outsoturing  vendor, 
and  the  decision  to  build  a  ser- 
vice-oriemed  architecture  for 
the  new  reservation  system 
means  that  the  hospitality 


company  will  gradually  end 
its  use  of  the  IBM  mainframes 
that  run  its  existing  (^bol- 
based  applications. 

Tom  Conc^hy.  Starwood’s 
chief  technology  officer,  said 
the  goal  is  to  create  a  system 
that  can  handle  room  rentals 
plus  a  range  of  other  services, 
such  as  spa  reservations  for 
hotel  guests.  In  addition,  im¬ 
proved  integration  of  back¬ 
end  systems  wfli  allow  for 
more-sophisticated  credit 
card  processing  functions, 
be  said. 

Handle  Future  Growth 

StarwDod's  IT  ream  looked  at 
IBM’s  ability  to  run  Linux  on 
the  mainframe.  But  Conopby 
said  the  company's  loog-ienn 
direction  of  its  IT  architecture 
hinged  on  moring  from  a 
mainframe  enviromnent  to 
lower-cost  Unix  and  Linux 
s)%tems  that  could  easily  in¬ 
crease  in  size  to  handle  future 
business  growth. 

Conop^  said  the  i>ew  sys¬ 
tem  should  help  Starwood 
save  SIS  million  to  S20  million 
annually  In  IT  operating  costs. 

As  part  of  the  prefect,  Star¬ 
wood  will  install  HP's  Itani- 


HPwlhanilethe 
fclowing  nr  taste 
farStaiwDod: 

OreMfE  (he  coffliMny’s  core 
oongutog  ooMptoc  and  ts 
m— QingBIfrtm. 

FMMDC  netMfk  managr 
maot  and  BiiiMndar  aarver 
smportaafweea. 


MMTiMhapplicaliondevel- 
opmeni  and  host  SiwiDoifs 


um-based  Superdome  high- 
end  systems  ruiuung  a  mix  of 
HP-UX  and  Linux.  HP-UX 
will  be  used  on  the  company’s 
database  servers,  and  Coito- 
phy  said  the  Unix  operating 
system  is  well  desisted  to 
work  with  the  Superdome 
hardware  —  a  strength  that  it 
has  over  Linux.  Starwood  also 
plans  to  use  HP's  x86-bascd 
ProLiant  servers. 

The  company,  which  owrts 
Sheraton  Hotels  &  Resorts. 
Westin  and  other  hospitality 
chains  and  operates  7^  hotels 


think,  is  a  lot  less.”  Balik  said. 

Even  sa  IBM's  un-demand 
effort  is  making  it  easier  for  IT 
managers  to  sell  open-source 
and  open  standards  concepts 
to  business  executives,  said 
Robert  Rosen,  vrho  beads  (he 
Share  user  group  in  Chicago. 

MOMA  is  scheduled  to 
open  its  revamped  facility  on 
Nov.  20,  but  Peltzman  said  the 
work  to  integrate  its  depart¬ 
mental  systems  will  continue 
for  months  to  come.  Ute  mu¬ 
seum  is  using  IBM's  iSeries 
servers  and  WebSphere  soft¬ 
ware  as  part  of  the  project, 
which  involves  des-eloping  a 
system  architecture  (hat  en¬ 
ables  all  its  databases  to  share 
information.  For  instance,  (he 
museum  is  linking  its  mem¬ 
bership  and  retail  systems  to 
help  it  reach  out  to  potential 
members.  O  50421 


in  S2  countries,  outsourced  its 
dau  center  operations  to  IBM 
six  years  ago.  IBM  declined  to 
comment  about  the  new  con¬ 
tract  with  HP.  which  Starwood 
negotiated  when  the  deal  with 
IBM  came  up  for  renewal. 

IBM  is  as  capable  as  HP  is  to 
providing  technology.  Cono¬ 
pby  said.  He  added  that  the 
decision  to  swiidi  to  HP  as  an 
outsourcer  was  based  on  its 
willingness  to  be  more  flexible 
on  the  terms  of  the  managed 
services  contract  than  IBM 
would  be. 

Among  the  issues  that 
dottophy  cited  was  the  ability 
to  do  third-party  bencfamaric- 
ing.  He  said  be  wanted  to  be 
able  to  use  a  third-party  firm 
to  help  compare  Starwood's 
IT  service-level  agreements 
against  marketplace  trends 
over  the  course  of  the  con¬ 
tract  HP  was  more  willing  to 
allow  periodic  benchmarking 
than  IBM  was.  be  said. 

Sun  Lepeak.  an  analyst  at 
Meu  Group  Inc.,  said  the  use 
of  benchmarking  during  an 
outsourcing  contract  could  re¬ 
sult  in  cost  reductions  for 
users  or  commitments  by  ven¬ 
dors  to  improve  performance. 
And  as  more  and  more  data 
center  systems  are  commodi¬ 
tized.  such  benchmarking  is 
becoming  easier  to  do.  Lepeak 
.aid.  O  50420 
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Business  Execs  Must 
Leam  to  Embrace  TT  M 


But  comincing  them  that  ILM  can  cut 
costs  and  ease  data  flow  is  a  challenge 


CORPORATE  IT  opera¬ 
tions  are  nu)vmg 
s^ad  with  eflbrts  to 
develop  information 
life-cycle  management  (ILM) 
schemes  that  can  efTicientiy 
and  cost-effectively  store  data 
so  that  its  level  of  availability 
is  consistent  with  its  impor¬ 
tance  to  the  business. 

But  users  at  last  week’s  Stor¬ 
age  Networking  World  confer¬ 
ence  here  maintained  that  be¬ 
fore  a  company  can  establish 
an  ILM  policy  or  begin  a 
search  for  products  that  can 
migrate  data  across  tiers  of 
stor^^  the  business  side  must 
take  ownership  of  the  project 
and  define  the  importance  of 
different  types  of  data. 

Paul  Se^.  chief  infiastnicture 
architect  at  Northrop  Grum¬ 
man  Corp.  in  Los  Aisles,  said 
his  company  is  focusing  on 
comrincing  business  groups  of 
the  potential  cost  savings  of 
storing  data  on  the  medium 
that’s  most  appropriate  for  it. 
based  on  its  importance. 


"We're  focusing  on  the  cul¬ 
tural  problem  first,"  Seay  said- 
Seay  declared  that  standards 
should  be  established  to  iden¬ 
tify  data  on  open  systems,  just 
as  standards  were  developed 
in  the  mainframe  world  to 
identify  data  sets.  XML  could 
help  with  the  tagging  of  meta¬ 
data.  but  a  copy  of  the  applica¬ 
tion  that  created  the  data 
would  have  to  be  maintained 
in  order  to  read  it  in  tbe  future, 
which  brings  up  digital  rights 


management  issues,  he  said. 

Ken  Walters,  senior  director 
of  enterprise  platforms  at  the 
Public  Broadcasting  Service  in 
Alexandria.  Va..  agreed  that 
management  must  agree  to 
create  the  necessary  policies 
and  procedures  before  ILM 
technology  can  be  installed. 

“ILM  is  a  must-do."  said  Rod 
Mueller,  manager  of  technolo¬ 
gy  and  infrastructure  at  Stam¬ 
ford.  C^nn. -based  Internation¬ 
al  Paper  Ca  "ILM  gives  me  a 
huge  competitive  advantage  by 
reducing  the  cost  of  .storage." 
MucUcr  said  be  began  pitching 
the  scheme  to  the  company’s 


business  units  after 
learning  about  ILM  at 
last  fall's  conference. 

Today.  International 
reaper’s  seven  units  arc 
evaluating  the  validity 
of  their  data  based  on 
its  age  and  how  often 
it's  used,  he  said. 

Mueller  said  chang¬ 
ing  mind-sets  within 
the  business  has  been 
difficult  because  man¬ 
agers  consistently  re¬ 
quire  that  data  be  stored  on 
top-tier  arrays.  But  he  has 
found  that  once  chargeback  for 
storage  costs  enters  the  con¬ 
versation.  attitudes  change. 

Steve  Duplessie.  an  analyst 
at  Enterprise  Strategy  Group 
Inc.  in  Milford,  Mass.,  said 
technologies  pitched  today  as 
ILM  are  actttaUy  point  prod¬ 
ucts  designed  for  specific 


d  huge  com- 
pet/tive  advan- 
Idye."  says 
Rod  of 
lrtte»ndlK>tul 
Papet  Co 


functions  such  as  data 
migration  from  sec¬ 
ondary  storage  to  tape. 
“ILM  is  still  more  hall¬ 
way  discussion  than 
praaical  technology." 
he  said. 

John  Halamka.  CIO 
at  CareGroup  Inc.,  a 
Boston-based  operator 
of  six  hospitals,  has 
developed  an  ILM 
strategy  for  his  100TB 
storage-area  network 
so  that  it  auiomaticaily  mi¬ 
grates  patient  documents  and 
medical  images  between  tiers 
of  storage  consisting  of  EMC 
Corp.  Symmetrix.  Clariion  and 
Centera  arrays.  Still  beking  is 
the  ability  to  manage  data 
movement  at  the  point  of  cre¬ 
ation  by  business  applications 
like  SAP,  Oracle  or  Sybase. 
050394 


EMC  ‘Virtualizes’  the  Network 


ORLANOO 

EMC  last  week  unvefled  Us  bnQ- 
anbclpaied  stoiaoe  virtuaiizalton 
lechnolooy.  which  the  cornpany 
said  lets  users  manage  Its  vrays 
*  and  high-ertd  boxes  from  maior 
i»mpe(ito(s  -  through  a  single 
intertace. 

'This  is  fitaly  EMC  gMng  m  to 
the  fad  that  storage  is  gtArg  to 
become  virtuabad.*  sad  Nancy 
Hurley,  at  analyst  al  Enterprise 
Strat^Group. 


EMC  said  at  Storage  Network¬ 
ing  World  here  that  Its  product 
caledStorageRouler.isacom- 
binabon  of  its  own  firmware  arid 
so-caled  inteHigenl  switches  and 
cfirectors  from  Cisco  Systems 
Ina.  Brocade  Commufiications 
inc.  and  McOata  Corp. 

The  seiches  are  among  a 
new  breed  of  storage  lechnoiogy 
tfat  uses  appicahorv-spedfic  in¬ 
tegrated  dreutts  1o  cre^  open 
dda  packed  reed  the  info^- 


tion  inside  arid  route  the  data. 

Robert  Sadowsfd.  a  produd 
marketing  manager  at  EMC.  said 
that  the  company  wiO  eventually 
write  its  code  to  a  standard  API 
N)ric  Appicahon  Inter¬ 
face,  which  is  developed 
bytheVtehmgton-basedInter- 
Nabonal  Committee  for  Informa¬ 
tion  Technology  Standanfe. 

^  first  tipped  its  hand  abrxA 
Storage  Router  at  fts  annual  user 
conference  last  April,  outllnino 
plans  to  release  a  beta  version  to 
users  the  foNowtog  quarter.  The 


router,  in  beta  now.  wW  ship  in 
the  first  half  of  2005. 

The  produd  wi  work  with 
EMCs  Sjmvnetrix  and  Ctarriion 
products  as  wel  as  Hitachi  Data 
Systems  Corp.'s 9900  series, 
Hewlett-PaciWd  Ccl's  EVA  bne 
and  IBM's  Diterprise  Storage 
Server,  also  Known  as  Shark. 

said  that  Storage  Router 
can  perform  port-leval  process¬ 
ing  at  a  rate  of  30.000  to 
40,000  VOs  per  second  and 
Is  highly  scalM. 

-  Lucas  kfeatim 


Dell  CEO  Says  EMC  Pact  Could  Expand;  Merger  Unlikely 


ST  UMAS  tfCARIAN 

Del/ fnc.  has  been  <1  reselbr  and 
momifoctureri^  EMC  Corp. 
law-end  and  midrange  arrays 
since  2002.  As  the  partnerdup 
grows  and  0^'sarmuai  storage 
revensie  passes  the  SIS  bUlion 
mark,  DeU  CEO  Kavin  ReMns 
musrclearfyd^tnehiscompo- 
ny^  role  as  a  partner 
and  potential  competi¬ 
tor  to  EMC. 

At  Stora^  Network¬ 
ing  World  last  week. 

RoUiru  spoke  with  Com- 
puterworid  about  Dell's 
evolving  reiationship 
with  EMC  and  about  his 
plans  to  support  the 


emerpng  Internet  SCSI  stan¬ 
dard  to  help  users  manage  in¬ 
creasingly  complex  storage-area 
networks. 

fkiw  inuch  is  Dell  compattog  with 
BM;  as  you  creep  up  die  storage 
stack  and  QIC  croopa  down  Iho 

stack?  Not  too  much,  because 
most  of  our  business 
will  be  io  tbe  small-to- 
medium  business  space. 
That’s  why  we  did  the 
partnership 

I  Art  tharo  any  plans  to 
^  atpand  tfio  agroemsnt  to 
|Ib  haw  Del  manufacture 
I  QIC's  high-end  systems? 


Probably.  Well,  t  don’t  know. 
Maybe.  It’s  so  problematic,  be¬ 
cause  if  they  ski  them  through 
any  channel  partners,  it’s  hard 
for  those  charmel  partners  to 
buy  from  us.  Up  until  this  point 
in  time,  it  hasn’t  made  any 


Are  Dstt  and  QIC  potential  nwrger 
candidates?  1  don't  think  sa 
The  partnership  came  about 
becau.se  we've  got  tbe  access  to 
markets,  and  Ithey've]  got  the 
technology  but  cant  ramp  it 
We  haveot  stated  [a  merger] 
as  a  goal  And  1  think  EMC  is 
very  happy  staying  indepen¬ 
dent  We  don't  need  to  join 


each  other,  and  if  we  did.  I'm 
not  sure  what  the  benefit 
would  be. 

Hew  is  Ddl  working  on  standards 
othor  than  through  its  member¬ 
ship  in  standards  bodies?  We're 
not  only  on  them . . .  we’re  try¬ 
ing  to  <Mve  them.  It's  clear 
that  as  we  do  that,  there  are 
two  or  three  major  players  that 
don't  want  that  to  happen  very 
fast. 

Why  are  some  vendors  hoping  to 
stow  down  the  process?  They 
have  their  own  proprietary 
technology,  and  itll  force  them 
to  give  that  up  on  behalf  of  an 


industry  standard,  which  will 
mean  customers  will  have 
more  choice  and  can  shift  from 
vendor  to  vendor  or  bring 
{multiple}  vendors  into  their 
shops. 

How  does  the  SCSI  standard  play 
Into  DelTs  ptans?  Our  plans  are 
to  introduce  a  product  in  our 
fourth  quarter. 

What  wdl  that  be?  An  array  or  a 
network  devica?  I  really  can’t 
say  yet 

Do  you  think  iSCSI  wH  overtake 
FKira  Channel  for  storage  net¬ 
working?  Not  right  away,  but 
over  time,  iSC^I  is  going  to 
pose  a  big  challenge  to  Fibre 
Channel  050370 


We  h’.;  -  000  PCs  based  everywhere  from 
Aigemirta  to  Vietnam  and  now  our  team  can 
upOdte  them  all  from  headquarte-s 

Vikto>  Portrujiiti 


Make  a  name  for  yourseK  with  Windows  Server  System?*  Microsoft  Wir>do¥VS  Server  System  makes  it 
easier  for  Switzerland's  Federal  Department  of  Foreign  Affairs  (DFA)  to  manage  the  infrastructure  serving 
their  embassies  and  consulates  In  156  countries.  Here's  how:  By  using  Systems  Management  Server  2003 
and  Microsoft*  Operations  Manager  2005,  DFA  can  automatically  update  its  500  remote  servers  from  a 
central  location,  saving  over  $600,000  in  travel  expenses  alone  in  the  past  year.  They've  also  been  able  to 
reduce  the  time  and  cost  of  maintenance,  boost  user  productivity,  and  fmd  the  time  to  better  prepare  for 
expansion.  Software  that's  easier  to  manage  is  software  that  helps  you  do  more  with  less.  To  get  the  full 
DFA  story  or  to  find  a  Microsoft  Certified  Partner,  go  to  mjatMoftxom/wscystam 


Windows 
Server  System 
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EDS  Postpones  03 
Earnings  Report... 

ElMtrgnte  Data  Sypttm  Cerp. 
tWawad  tha  ralaiaa  of  ila  tMnt* 
quartar  financial  reauHs  from  latf 
Monday  to  thia  Wadnaaday,  aay* 
ing  ttiat  R  waa  rmdaaitog  tha  valua 
of  toa  IT  aaiati  batog  uaad  aa  part 
of  Na  S8J  bMon  Mranal  confrad 
wW)  Ifra  ILS.  Navy.  AudMor  KPMe 
UP  is  noUng  a  charga  vainaf 
EOS'S  ihinHuaflar  oarninga  to 
covar  a  dadna  in  tha  worth  of  tha 
■ipdpaiaimfral  supports  the 
Natniyilarina  Corps  Mranot 


...And  Offers  Early 
Retiremetrt  Program 

EDS  <ln  idd  ri  olMiig  wly 
rsUramant  iacanftoai  to  about 
9^oltaSS.000aS.wDrh- 
ars.  EDS  aipacto  about  halt  of  tha 
afigida  otaptoyaos  to  aecopt  tha 
buyouts,  atthough  R  netod  that 
aoma  of  lha  aaeatod  Jobs  woidd 
Mwfy  haM  to  ba  fiiad  again.  Tha 
aarly  ratiramani  affar  is  part  of  a 
plan,  dtadoaad  In  Saptornbar.  to 
cut  amthar  «.000  to  20.000 
)oba  in  tha  naxt  two  ynars. 


EC  Clears  Oracle’s 
BidforPtopleSoft 

Tha  Europaan  Conwidaaion  has 
ghron  Omda  Corp.  tha  grean  Rght 
to  praeood  wMi  Its  hoalla  tahr 
oaarWdtorPiopla8oltlnc..rf 
meafngthalaitropdBloryread- 
hlacfc  to  a  doaL  Tha  eomndsalen 
said  N  WM  undia  to  find  *iuffh 
dant  aaManca  of  cowpatRfro 
harm*  that  would  rooidl  from  a 
margar.  PsoplaSofl  aaU  Rs  board 


Short  Takes 

RB)HATRIC.WBniodilaUnua 
uaara  about  an  a-mal  hoax  urging 
rodpioato  to  download  purportad 


Japan's  Fab  Tradi  Commliahni 
haUaniolRaihaartogwRh 
MCftOSOFT  CORP.  o««r  aRaga- 
ttona  that  tha  company  vtolatod 
tha  country's  antRnwt  Imas. 
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HOT  TECHNOLOGY  TRENDS.  NEW  PRODUCT 
NEWS  AND  INDUSTRY  OOSSIP  BY  MARK  HAU 


CIO  Relishes 
^nea  F^’ Role . . . 

. . .  insido  Mfcrosoft  bncause  “I  can  realize  value  eariier.* 
So  says  Ron  Markezich,  CIO  for  IT  at  Microsoft.  But 
Markezich  might  easily  be  misconstrued  as  a  senior 
executive  on  the  vendor’s  quality  assurance  team. 
His  staff  is  responsible  for  putting  Microsoft  tech¬ 


nologies  targeted  for  enter* 
prise  use  into  the  company’s 
production  IT  cmvironmeoi 
at  their  alpha  stage,  bng  be¬ 
fore  they’re  ready  to  ship.  “I 
look  at  our  IT  organization  as 
an  extension  of  our  product 
development  team.”  Mar¬ 
kezich  says.  Given  his  re¬ 
liance  on  prerelease  versions 
of  products,  you’d  think  his 
bosses  would  cut  him  some 
slack  in  deliveiing  services  to 
Microsoft’s  end  users.  Not  so. 
he  claims.  ”I  don't  feel  like  I 
get  more  stock,”  Markezich 
says,  noting  that  his  service- 
level  requirements  actually 
increased  this  year.  That  logic 
steins  from  the  belief  that 
earty  product  adoption  gives 
him  a  head  start  on  improv¬ 
ing  system  capacity,  perfor¬ 
mance  and  reliability  while 
keeping  a  lid  on  costs.  Marke¬ 
zich  cites  his  early  deploy¬ 
ment  of  Exchange  Seiver 
2003,  which  Microsoft  began 
using  well  before  the  soft¬ 
ware’s  commercial  release. 

He  says  be  was  able  to  elimi¬ 
nate  67  Exchange  Server  2000 
processing  sites  and  consoli¬ 


date  the  company’s  global 
c-mail  system  into  seven  sites 
running  the  newer  software, 
lliat  has  helped  Markezich 
cut  $100  million  from  what  he 
calls  ”sustainer  spend."  the 
fixed  IT  costs  for  supportmg 
employees  —  dropping  the 
annual  total  to  abwt  $300 
million.  His  next  big  project 
doesn’t  revolve  around  Mi¬ 
crosoft's  core  software.  He’s 
beginning  to  upgrade  the 
company’s  802.Ub  Wi-Fi  in¬ 
frastructure.  most  likely  to 
802.11g  technology.  He  calls 
the  project  “the  world’s 
lar^t  wireless  WAN  deploy¬ 
ment”  and  says  it  shotJd  be 
done  by  June.  That  doesn't 
mean  he's  refraining  from 
putting  Microsoft’s  alpha 
products  throu^  their  paces, 
though.  In  toct.  Markezich  ac¬ 
knowledges  that  sometimes 
Microsoft  IT  is  the  bottleneck 
on  the  company’s  delivery  of 
new  producu.  *A  lot  of  the 
times  a  Microsoft  product 
slips  its  ship  date  is  because 
we  did  not  sign  off  on  h.”  be 
says.  Now  you  know  who  to 
blame. 


CIW  looks  beyond 
alpha  products. . . 

...  and  sHps  Ha  RAD  work  into 
lha  offiet  of  the  future."  The 
Microsoft  Center  for  Infor¬ 
mation  Work  on  the  compa¬ 
ny's  Redmond.  Wash.,  cam¬ 
pus  gives  corporate  users  a 
glimpse  of  ITs  misty  future 
through  a  series  of  hands-on 
demos.  "We’re  out  past  Long¬ 
horn."  says  Thomas  Gruver,  a 
group  product  manager  who 
oversees  CIW.  The  arrival  of 
Longhorn,  the  next  major  re¬ 
lease  of  Windows,  may  seem 
to  be  taking  forever,  but  for 
Gruver.  it's  just  around  the 
corner.  He's  looking  at  tech¬ 
nology  that's  a  little  further  in 
the  distance,  such  as  a 
blend  of  networking 
and  groupware  tech¬ 
nology  that  will  let 
Tablet  PC  users  share 
data  immediately  on  a 
common  conference 
room  display.  Gruver 
hopes  to  showcase 
that  possibility  to 
CIW  visitors  starting 
next  year.  A  CIW 
highlight,  the  Ring- 
cam,  may  soon  be¬ 
come  a  Microsoft- 
branded  product.  It  contaiiu 
a  half-dozen  mini-cameras  in¬ 
stalled  in  a  ring  plus  a  direc¬ 
tional  microphone  that  can 
locate  a  spe^r  at  a  confer¬ 
ence  room  table  and  project 
him  on  PCs  or  video  displays 
during  a  multimedia  confer¬ 
ence  calL  Expect  to,  um,  see  it 
in200S. 

Forget  Java,  C#  or 
0+ because... 

. . .  tha  iMXt  hat  davatopmant 
iangaaga  la  Raah.  Although 
Kevin  Lynch,  chief  software 
architect  at  San  Francisco- 
based  Macromedia  Inc^ 
doesn't  claim  that  you’ll  nev¬ 
er  need  to  program  in  any¬ 
thing  but  Flash  again,  he  does 
argue  that  if  you're  creating 
Web-based  applications  that 
need  graphical  user  interfaces 
—  and  which  ones  don’t?  — 
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Flash  is  the  ideal  technology. 
Why?  He  says  Flash  “needs 
far  less  bandwidth”  for  down¬ 
loading  graphical  pages  be¬ 
cause  it  updates  only  the 
parts  of  a  page  that  contain 
new  information  as  opposed 
to  doing  a  full  page  refresh. 
The  market  size  should  also 
attract  developers.  Lynch  es¬ 
timates  that  500  million  PCs 
are  equipped  with  Flash  Play¬ 
er  Flash  developers  currently 
use  Macromedia’s  J2££-based 
Flex  server  software  to  com¬ 
pile  Flash  code.  But  a 
.Net  version  is  in  beta 
DOW  and  will  likely  go 
gold  early  next  year. 

Faxes  to  use  IP 
netWDcksina... 

. . .  flaw  ralaata  of 
RlghtFai  from  Cap* 
taris  Inc.  in  Bellevue, 
Wash.  Version  9.0, 
available  this  week, 
includes  an  (^tional 
board  from  Bnx^- 
trout  Inc.  that  slips 
into  the  Captaris  fox  server. 
The  board  handles  the  elec¬ 
trical  differences  between  an 
Ethernet  network  and  the 
public  switched  telephone 
network,  while  the  Captaris 
software  smoothes  out  the 
protocol  conflicts  so  a  fax 
that’s  designed  to  be  trans¬ 
mitted  only  over  the  phone 
network  can  use  IP  as  its 
transport  mechanism.  Matt 
Shoening,  chief  operating  of¬ 
ficer  at  Captaris,  acknowl¬ 
edges  that  few  fax-over-IP  in¬ 
stallations  exist  now.  but  be 
insists  that  theyU  be  here 
someday  because  centralized 
IP-based  network  administra¬ 
tion  cuts  costs.  RightFax  9.0 
also  adopts  Microsoft  SQL 
Server  as  its  data  store,  up¬ 
ping  capacity  from  1  billion 
faxes  to  a  virtually  unlimited 
number.  OsoDcg 


SAS,  the  leader  in  business  intelligence  software,  asks... 


Could  your  IT  dollars  be  better  spent? 


N 


SERVICE  LEVEL  MANAOeMENT 

RESOURCE  MANAGEMENT 

CHARGE  MANAGEMENT 

VALUE  MANAGEMe<T 


No  business  wants  to  believe  it’s  wasting  precious  IT  dollars.  So  if  executives  and  co-woricers  grumble 
aboirt  IT  service,  and  you’re  convinced  those  services  could  be  put  to  better  use.  let  SAS  help. 
With  SAS*  IT  Management  solutions,  you  can  measure,  manage,  understand  and  communicate  the 
quality  of  every  FT  service  more  accurately.  You’ll  know  precisely  how  your  business  is  using  IT 
resources.  Ensure  maximum  performance  and  response  times.  Predict  strategic  and  financial  trends. 
And  clearly  visualize  the  value  of  IT  fiom  business,  revenue  and  profit  perspectives.  Visit  our  Web 
site  to  leam  more  and  read  our  fiee  white  paper.  Align  IT  with  Business  and  Budget  Strategies. 
Or  call  us  toll  free  1  866  731  1364. 

www.sas.com/spent 


Author  Ntchotas  Carr  and  top  txjsiness  inftuencers  join  in  a  lively  discussion  atiout  his  controversial  book.  Does  IT  Matter? 
Check  out  our  Web  site  for  more  on  this  infamative.  on-demand  Web  seminar 
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Dell  Installs  SUSE 
Linux  on  Servers 

Dell  Inc.  said  it  plans  to  preinstall 
Novell  lnc.'s  SUSE  Linux  operating 
system  on  several  of  its  Power* 
Edge  servers  and  fulfy  support 
users  of  the  software.  Defl  alre^y 
preinstalb  Red  Hat  Linux  on  its 
servers,  but  it  had  offered  SUSE 
Linux  only  as  an  add*on  until  now. 
SUSE  Linux  Enterprise  Server  9 
will  be  available  on  the  PowerEdge 
1850  2800  and  2850  modeb. 
with  annual  subscription  fees 
starting  at  S192  per  CPU. 


Nortel  Again  Delays 
Release  of  Results 

Norte*  Networks  Carp,  again  de* 
layed  its  release  of  restated  finan- 
ca'  resutts  tor  2003  as  well  as  its  ' 
numbers  for  the  first  half  of  this 
yeai  ihc  Brampton.  Ontario*  i 
basec  company  was  due  to  report  I 
the  results  by  the  end  of  October.  ! 
but  CEC  Bin  Owens  said  it  was  | 
unabie  to  meet  the  deadline  “giv* 
en  the  enormous  detaite  and  com* 
piexity  involved.*  Nortel  set  mid* 
November  as  its  new  target. 


BEA  Aims  to  Boost 
WebLogic  Business 


Hundicd  solutions 
target  \crtical 
markets,  IH.\1  ! 

BV  HEATHEM  HAVCNSTEIN 

tA  SVsrtMS  IN<  , 
lookin}!  to  bmaden  its 
middleware  business;, 
last  week  ((K>k  the 
wraps  off  a  s<ilutions  frame¬ 
work  that  can  help  WcbLi»gie  | 
Platform  users  build  scrv  iec- 
oriented  architeeturcstSOA) 
liir  tacklinj?  c«>mmon  enter¬ 
prise*  pain  point.s  like  boosting 
I'UMomer  service. 

The  move  marks  BEA's  cn- 
tr>  into  the  bundled  tothnol-  i 
og>  wlutions  arena,  tradition¬ 
ally  a  stronghold  for  rival  IBM. 
and  it  is  .supported  by  several 
major  software  suppliers. 

The  framework  is  part  of 
BLAs  Liquid  Computing  ini*  i 
tiative.  unveiled  at  its  user  con-  I 
fcrence  last  spring.  The  bun*  [ 
died  ufTering  will  use  BEA’s  I 


Web  Logie  Platform,  through 
its  portlets  and  reusible  ser¬ 
vice-oriented  integration  com¬ 
ponents  called  controls,  to 
build  SOAs  for  five  common 
enterprise  goals:  customer 
.service,  employee  service,  ser¬ 
vice  delivery  platforms,  trade 
processing  and  radio  frequen¬ 
cy  identification  capability. 

The  framework  includes  el¬ 
ements  supplied  by  a  slew  of 
partners,  including  .SAP  AG. 
Business  Obieets  SA,  Dotu- 
menium  Inc  and  Sicbel  Sys¬ 
tems  Inc-  that  add  to  the  ofler* 
ing's  archiiiviure  reference 
hlucprini  workflow  examples, 
best  practice's  and  services. 
BEA  pians  n  pnivide  frame¬ 
works  lor  foui  vertical  mar¬ 
kets:  telecommunication.s.  fi¬ 
nancial  scr\'iec5i.  manufactur¬ 
ing  and  government. 

OocMiogy  TTierapcutics  Net¬ 
work  Corp.  fOTNl.a  San  Fran- 
eisai-bascd  distributor  of  spe¬ 
cialty  medical  products,  has 


BEA's  Plan 


■  BEA  BdMBm  rr—Bwotto 

«•  dMi^Nd  to  help  extend  the 
Wabliigic  Ptadonn  to  buid  SOAs 
for  oustomer  service.  entploiNe 
serwoBL  savice  (teivery  pMvriB. 
trade  pnioeesino  end  RRD. 

■  IheprainiiiOTeeiipNne 

teleeom.  Inenoteseivlcas.  menu- 
tattling  and  govenwerttwai^ 


;  ■PfiwraMudeSAP. 

Documenkxn.  SMnL  Hyperion. 

I  Sueness  Objects.  Interw^, 

I  ComagenlandEbtphBny. 

I  been  talking  to  BEA  about 
I  using  the  new  framew'orks  to 
!  help  it  integrate  pieces  of  its 
I  CRM  and  ERP  packages  via  an 
I  SOA.  said  Rajan  lena.  an  enter¬ 
prise  architect  at  OTN,  “Wc 
are  particularly  interested  in  a 
set  of  prebuili  comporumts  that 
arc  a  onc-time  effort  to  create 
and  can  be  reused."  he  said. 


I  OTN  already  has  used  the 
Web  services  framew«»rk  in 
I  BEA's  WcbLopic  development 
platform  to  streamline  the 
creation  of  a  Wcb-ba.sed  front 
end  for  its  employee  self-ser¬ 
vice  portal.  "It  helps  us  do  our 
round-trip  development  much 
faster  than  plain-vanilla  I2EE,'' 
lena  said,  For  e.visting  applica¬ 
tions.  OTN  has  used  the 
framework  to  create  a  “fa¬ 
cade"  of  a  Web  services  API 
j  call  on  top  of  legacy  applica- 
j  lions.  Then  the  applications 
I  arc  exposed  inside  the  portal. 

I  Companies  need  guidance 
on  many  aspects  of  building 
I  an  SOA.  such  as  arranging 
I  Web  services  in  the  right  or¬ 
der.  said  Ronald  Schmeixer. 
a  senior  analyst  at  ZapThink 
LLC  in  Waltham,  Mass.  But 
although  the  new  program 
is  a  forced  response  to  IBM's 
success  in  the  bundled  solu¬ 
tions  business.  Schmeber  said 
j  BFjA  runs  the  ri.sk  of  alienating 
I  its  integration  partners. 

I  O  50409 
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Mioosolt  continues  its  push  nto  the 
enlerpnse-level  beveiooment  market 
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Symantec  Tries  to  Move 
Beyond  Security  Tools 


Nextel  Extends  IT 
Deal  With  Amdocs 

Wireless  conier  Hextoi  Communi¬ 
cations  Inc.  has  Bxttnded  by  two 
years  an  IT  services  contract 
under  which  Chosteriield.  Mo.- 
bised  Amdocs  Ltd.  manages  its 
billing  and  customer  support  sys¬ 
tems.  Reston.  Va.*based  Nextel 
said  the  contract,  originally  a 
nine-year  deal  signed  in  2000. 
will  now  run  through  2011.  Fmen* 
cia<  details  weren't  disdosod. 


Short  Takes 

The  US.  appeals  court  m  Qncin* 
nati  vacated  a  preNminary  infunc- 
bon  btoddng  Sanford.  N.C.*based 
STATIC  CONTROL  COMPONENTS 
INC  from  distributing  chips  H 
uses  to  done  Lexmark  Inc.’s 

primer  cartridges _ CINGULAR 

WIRELESS  LLC  completed  its  ac¬ 
quisition  of  ATST  WIRELESS  SER 
VICES  INC  after  agreeing  to  di¬ 
vest  itsdf  of  assets  in  t1  states. 


SV  JAtKUMAR  VUAVAN 

Symantec  Corp.  last  week  out- 
!  lined  an  “infurmation  integri¬ 
ty"  strategy  that  users  and  an¬ 
alysts  said  addresses  a  grow¬ 
ing  need  for  a  more  holLsiic 
view*  of  the  operational  and 
security  risks  that  companies 
face. 

'But  they  added  that  whether 
the  new  approach  succeeds 
will  depend  on  how  well 
I  Symantec,  which  is  primarily 
I  known  for  its  antivirus  tools 
I  and  firewalls,  can  execute  on 
its  wider  vision. 

As  pan  of  the  initiative. 
Symantec  will  deliver  prod¬ 
ucts  .ind  services  designed  to 
give  companies  a  full  assess¬ 
ment  of  the  risks  and  vulnera¬ 
bilities  they  face  and  then  en¬ 
able  them  to  act  upon  that  in- 
'  formation,  said  Enrique  Salem, 


I  the  Cupertino.  Calif.-based 
I  company's  senior  vice  presi- 
I  deni  of  security, 
j  For  instance,  a  nc-w  version 
I  of  Symantec's  Enterprise  Se¬ 
curity  Manager  software  that 
was  released  last  week  can 
help  companies  identify  com¬ 
pliance  problems  related 
to  regulations  such  as  the 
Sarbanes-Oxley  and  Gramm- 
Leach-Bliley  acts.  Salem  said. 

Similarly,  other  products 
will  let  companies  capture 
snapshots  of  the  operational 
stale  of  their  servers.  PCs.  ap¬ 
plications  and  operating  sys¬ 
tems.  as  well  as  information 
about  their  configuration  set¬ 
tings  and  patch  levels.  Some  of 
those  capabilities  are  available 
now.  but  more  will  be  added  in 
the  future. 

"It’s  a  mode)  and  a  set  of 


I  policies  that  CIOs  can  use  to 

!  manage  their  environment." 
Salem  said.  "It  stresses  the 
concept  of  understanding 
your  envimnment.  acting  on 
the  information  and  coninil- 
ling  it." 

Symantec  user  Dave  Jordan, 
chief  information  security  of¬ 
ficer  for  the  Arlington  County 
government  in  Virginia,  said 
he  thinks  the  idea  makes  sense 
for  security  managers.  “Of 
course,  some  of  this  is  just 
marketing,  but  it's  not  all  mar¬ 
keting,"  said  Iordan. 

A  Better  View 

!  At  one  level,  Symantec’s  new 
initiative  is  aimed  at  moving 
the  company  into  new  markets 
now  that  its  core  security 
tools  business  is  saturated, 
according  to  Jordan.  But  he 
added  that  the  company's 
strategy  could  meet  the  need 
for  a  management  dashboard 
that  gives  an  overall  view  of 
(he  operational  and  security 


I  landscapes  inside  companies. 

I  Symantec’s  road  map  “pro¬ 
vides  a  framework  to  help 
guide  us."  said  Shaun  CatUn. 
a  senior  systems  analyst  at 
Atlanta-based  law  firm  Ford 
&  Harrison  LLP.  "It’s  some¬ 
thing  that  wc  knew  needed 
to  be  done." 

The  alignment  of  informa¬ 
tion  from  the  operational  and 
security  sides  should  give 
companies  more  control  over 
possible  risks,  said  Cory  Fcr- 
cngul,  an  analyst  at  Meta 
Group  Inc.  “What  Symantec  is 
saying  is.  ’You  can’t  secure 
what  you  can't  control,  and 
you  can’t  control  what  you 
don't  understand.' " 

Other  vendors,  such  as  IBM 
and  Computer  Associates  In¬ 
ternational  Inc.,  are  making 
similar  pitches,  according  to 
Ferengul.  But,  he  added, 
“there’s  a  lot  of  maturing  that 
has  to  happen"  before  all  of 
the  required  information  can 
truly  be  integrated.  C  50416 
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DeH  Installs  SUSE 
Linux  on  Servers 

M  Ibc.  saM  H  plans  to  prtinstall 
Novai  kic.’sSUSE  lima  oparating 
systam  on  Moaral  ol  Hs  l^war 
Edgi  sonars  and  fuiy  sipport 
wars  ol  tka  Mfhvara.  M  alraady 
prairwiali  fted  Hat  Limn  on  its 
sarvars.  bid  M  had  offarad  SUSE 
Uraa  oidy  as  an  add-on  until  now. 
SUSE  Unw  Entarprtao  Sarvar  9 
wfl  ba  awiibla  on  tba  ftwarEdga 
1860. 2800  Md  2890  modab. 
with  annual  subocrfption  foas 
starting  al  S102  par  CPU. 


Nortel  Again  Delays 
Release  of  Results 

Morlal  Hatwofbs  Corp.  again  da- 
bqaddsrilooaaolraslaladfiftBrr* 
dal  raaulls  lor  2003  as  wol  as  ds 
minbars  lor  tiw  first  half  of  this 
yaar  Tha  araiapton.  Ontario- 
baaaa  company  was  dua  to  ragori 
the  rasuits  by  tha  and  of  Octobor. 
fad  CEO  881  OwoM  add  It  was 
liable  to  moat  the  daidfcii  *gb- 
on  tha  anormous  datidb  and  com- 
phoily  bwohrad.*  Nortal  sol  mid- 


BEA  Aims  to  Boost 
WebLogic  Business 


Bundled  solutions 
target  vertical 
m^ets,  IBM 

av  HEATHSa  HAVCNSTCIN 
EA  SYSTEMS  INC., 
looking  to  broaden  it.s 
middleware  business, 
last  week  took  the 
wraps  off  a  solutions  frame¬ 
work  that  can  help  WebLogic 
Platform  users  build  service- 
oriented  architectures  (SOA) 
for  tackling  common  enter¬ 
prise  pain  points  like  boosting 
customer  service. 

The  move  marks  BEA's  en¬ 
try  'mio  the  bundled  technol¬ 
ogy  solutions  arena,  tradition¬ 
ally  a  stronghold  for  rival  IBM. 
and  it  is  supported  by  several 
maior  software  suppliers. 

The  framework  is  part  of 
BEA's  Liquid  Computing  ini- 
tiative.  unveiled  at  its  user  con- 
fitrcDce  last  spring.  The  bun¬ 
dled  offering  will  use  BEAs 


WebLogic  Platform,  through 
its  portlets  and  reusable  ser¬ 
vice-oriented  integration  com¬ 
ponents  called  controls,  to 
build  SOAs  for  five  common 
enterprise  goals:  customer 
service,  employee  service,  ser¬ 
vice  delivery  platforms,  trade 
processing  and  radio  frequen¬ 
cy  identification  capability. 

Hie  framework  includes  el¬ 
ements  supplied  by  a  slew  of 
partners,  including  SAP  AG. 
Business  Objects  SA.  Docu- 
mentum  Inc  and  Siebel  Sys¬ 
tems  Inc.,  that  add  to  the  offer¬ 
ing's  architecture  reference 
blueprint,  workflow  examples, 
best  practices  and  services. 
BEA  plans  to  provide  frame¬ 
works  for  four  vertical  mar¬ 
kets:  telccommunicatioDs.  fi¬ 
nancial  services,  manufactur¬ 
ing  and  government. 

Oncology  Therapeutics  Net- 
woik  Coip.  (OTN),  a  San  Eran- 
ebeo-bas^  distributor  of  spe¬ 
cialty  medical  products,  has 


BEA’s  Plan 


been  talking  to  BEA  about 
using  the  new  frameworks  to 
help  it  integrate  pieces  of  its 
CRM  and  ERP  packages  via  an 
SOA,  said  Raian  |ena,  an  enter¬ 
prise  architect  at  OTN.  “We 
are  partkularty  interested  in  a 
set  of  prebuilt  components  that 
are  a  one-time  effort  to  create 
and  can  be  reused,"  he  said. 


OTN  already  has  used  the 
Web  services  framework  in 
BEA’s  WebLogic  development 
platform  to  streamline  the 
creation  of  a  Web-based  front 
end  for  its  employee  self-ser¬ 
vice  portal  "It  helps  us  do  our 
round-trip  development  much 
faster  than  plain-vanilla  )2E£," 
Jena  said.  For  existing  applica¬ 
tions,  OTN  has  used  the 
framework  to  create  a  “fa¬ 
cade"  of  a  Web  services  API 
call  on  top  of  legacy  applica¬ 
tions.  Then  the  applications 
are  exposed  inside  the  portal. 

Companies  need  guidance 
on  many  aspects  of  building 
an  SOA.  such  as  arranging 
Web  services  in  the  right  or¬ 
der,  said  Ronald  Schmelzer, 
a  senior  analyst  at  ZapThink 
LLC  in  Waltham.  Mass.  But 
although  the  new  program 
is  a  forced  response  to  IBM's 
success  in  the  bundled  solu¬ 
tions  business,  Schmelzer  said 
BEA  runs  the  risk  of  alienating 
its  integration  partners. 
O50409 
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Symantec  Tries  to  Move 
B^ond  Security  Tools 


Nextd  Extends  IT 
Deal  WHh  Amdocs 

WMmetnlarNwMCMnniuni- 
catwns  bic.  has  oImiM  by  two 
yMrs  an  IT  awriesa  eentrael 
witiar  wWch  Chaalarilaldt  Ms,* 
baswl  Amtiscs  Ud.  mansgas  Mi 
bItag  anti  esatamar  asgperi  qis- 
isis.  Raaton.  Va.-bsaati  NaMal 
taM  tfM  eamrset,  eriginaly  s 
ninnsv  tisM  ripisd  bi  2000. 
wM  asw  m  tfirwigh  20tL  Rnan- 
cWtialdbwarinldMosMi. 


Short  Takes 

Tha  ILS.  apgsah  court  In  Ondw- 
ntf  vaealati  a  gnMnary  btiune- 
tion  biadting  SwM.  N.C.*baaad 
STATIC  QOmROL  COMPOHEKTS 
MC.  frem  tiMribating  cMpa  R 
uaaa  to  clans  Lmark  faib's 
prinlw  eartrWgaa. . . .  C8I6ULAR 
WRELESS  UC  coii«Mati  Ha  ac* 
gaWtion  d  ATAT  WtitafSS  SSt- 
VKES  titC.  aAv  ^raaliV  la  dh 
vaat  IMf  of  aaaata  bi  ft  Malaa. 


av  JAJKUMAII VMAVAM 

Symantec  Cotp.  last  week  out¬ 
lined  an  “information  integri¬ 
ty"  strategy  that  users  and  an¬ 
alysts  said  addresses  a  grow¬ 
ing  need  for  a  more  holistic 
view  of  the  operational  and 
security  risks  that  companies 
hice. 

But  they  added  that  whether 
the  new  approach  succeeds 
will  depend  on  how  well 
Symantec,  which  is  primarily 
known  for  its  antivirus  tools 
and  firewaUs,  can  execute  on 
its  ladder  visioa 

As  part  of  the  initiative, 
Symantec  will  deliver  prod¬ 
ucts  and  services  designed  to 
give  companies  a  full  assess¬ 
ment  of  the  risks  and  vulnera¬ 
bilities  they  fxe  and  then  en¬ 
able  them  to  act  upon  that  in¬ 
formation.  said  Enrique  Salem. 


the  Cupertino.  Calif.-based 
company's  senior  vice  presi¬ 
dent  of  security. 

For  instance,  a  new  version 
of  Symantec's  Enterprise  Se¬ 
curity  Manager  software  that 
was  released  last  week  can 
help  companies  identify  com¬ 
pliance  problems  relate 
to  regulations  such  as  the 
Sarbanes-Oxley  and  Gramm- 
Leadk-Bliley  acts.  Salem  said. 

Similarly,  other  products 
will  let  companies  capture 
sTtapshots  of  the  operational 
state  of  their  servers.  PCs.  ap¬ 
plications  and  operatii^  sys¬ 
tems.  as  well  as  infonnation 
about  their  configuration  set¬ 
tings  and  patch  levels.  Some  of 
those  cap^ilities  are  available 
now,  but  more  will  be  added  in 
the  future. 

“It's  a  model  and  a  set  of 


policies  that  CIOs  can  use  to 
manage  their  environment, “ 
Salem  said.  “It  stresses  the 
concept  of  understanding 
your  environment,  acting  on 
the  infonnation  and  control¬ 
ling  it" 

Symantec  user  Dave  Jordan, 
chief  information  security  of¬ 
ficer  for  the  Arlington  County 
government  in  Virginia,  said 
he  thinks  the  idea  makes  sense 
for  security  managers.  “Of 
course,  some  of  this  is  just 
marketing,  but  it's  not  all  mar¬ 
keting."  said  Jordan. 

ABetlerView 

At  one  level  Symantec’s  new 
initiative  is  aimed  at  moving 
the  company  into  new  markets 
now  that  its  core  security 
tools  business  is  saturated, 
accordir^  to  Jordan.  But  he 
added  that  the  company’s 
strategy  could  meet  the  need 
for  a  management  dashboard 
that  gives  an  overall  view  of 
the  operational  and  security 


landscapes  inside  companies, 

Symantec’s  road  map  "pro¬ 
vides  a  frameworic  to  help 
guide  us."  said  Shaun  Catlin. 
a  senior  systems  analyst  at 
Atlanta-based  law  firm  Ford 
&  Harrison  LLP.  “It's  some¬ 
thing  that  we  knew  needed 
lo  be  done." 

The  alignment  of  informa¬ 
tion  from  the  operational  and 
security  sides  should  give 
companies  more  control  over 
possible  risks,  said  Cory  Fer- 
engul  an  analyst  at  Meta 
Group  Inc.  “What  Symantec  is 
saying  is.  You  can’t  secure 
what  you  can’t  control  and 
you  can't  control  what  you 
don’t  understand.'  “ 

Other  vendors,  such  as  IBM 
and  Computer  Associates  In¬ 
ternational  Inc.  are  making 
similar  pitches,  according  to 
Ferengul  But.  he  added, 
“there’s  a  lot  of  maturing  that 
has  to  happen"  before  all  of 
the  required  mforniatkin  can 
truly  be  integrated  O  90418 
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"Does  more.  Demands  less. 
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Germans  Assess  Linux 
Deployment  Costs 

FRAMKPURT 

T.n  i.n  M  4'Nii\iii  timcsintuT 
many  have  made  Linux  ujHTatint: 
.ind  «tthcr  i'pcn-xi»urcc 
pritJuctv  taniali/jni:  to  local  busincss- 
o  Vci  many  »vmjin  hcsilani  Jo  Jump 
then  Microsni'i  t  nrp.  Noltx^aro  c»»m 
plclcK.  if  onh  because  ii  performs  rel 
aioel>  Will  and  nearly  everyone  in 
lorpi'ratc  t.ermaiiv  usesii, 

•"haf  was  ihe  innsensus  of  speakers 
at  the  Linux  World  eonfca-nce  in  Lrank 
t’urt  b-st  week-  IllCanalysi  Wat'aMous- 
S.W  i  •\inin  warned  U-serx  that  although 
I  inux  sc»ft\vari’  is  basically  Irv^e  n>  ae 
guire.  it  i  an  K‘  c<»stly  to  deploy.  'Busi- 
nevses  can  see  costs  pile  up  quickly  lor 
support,  maintenance  and.  in  particu¬ 
lar,  training  if  they  tack 
in-house  knowledge."  he 
said,  "t-jch  enterprise 
sht»uld  carefully  study 
whether  the  lt»w  fee  to  ac 
quire  the  software  will 
offset  these  other  costs  " 

Among  server  operat- 


Spain's  PC  ma/iel  lesxlors 
1.  Howiett  Packard  Co 

2  Ace'  Inc 

3  D«ll  Inc 

4  Airis  Computet 

toe  cONDOfi  0CI08ER?CK)« 


,\n  International 
rr  News  Digest  | 

ing  systems  in  hurope.  Linux  grew 
from  a  l"i>  market  share  in  l*)W  t«»  ‘>’V 
in  this  year's  third  quarter,  n>l'  said. 

■  JOHN  BLAU.  IDG  NfWSSERVtCf 

Cable  &  Wireless 
Continues  Fire  Sale 

LONDON 

LoMioN  H.vsni  network  opc'rator 
Liable  CX  Wireless  1*1  C  agreed  last 
week  to  sell  its  lapanese  businevs. 
Liable  &  Wireless  11  )L'  Inc.,  to  Softl'ank 
L.orp.  for  SI.^.L.^  millitin.  But  LlCfcW  will 
retain  two  inicmatitmal  data  nodes  so 
It  can  continue  to  provide  network  slt 
vices  to  and  from  lapan. 

I'he  sale  of  the  lapanese  unit  contin¬ 
ues  Ll&W's  retreat  from  an  e.arlier  plan 
to  develop  a  S.^.5  billion  global  11*  net- 
wtirk.  The  company's  fortunes  plum- 
metesi  in  2001.  triggering 
a  scries  of  asset  sales, 
thou.sands  of  layoffs,  the 
dismantling  of  its  global 
data  services  division 
and  an  exit  from  the  U.S. 
and  continental  Europe 
except  for  continued 


support  of  multinational  customers.  In  | 
January,  CScW  sold  its  U.S.  Web  host-  | 
ing  and  IP  services  units  to  Savvis 
Llonimunicalions  I'orp.  in  Herndon. 

Va..  for  5155  million. 

■  LAURA  ROHDE,  IDG  NEWS  SERVICE 

N.Z.  Regulator  Blocks 
Westpac  Outsourcing 

AUCKLAND. NEW  ZEALAND 

Wl-Vl  fAi'  H.ANKIN<;  (  OKI'  S  plan 
to  move  its  New  Zealand  main¬ 
frame  processing  to  Australia 
has  Iveen  scuttled  by  the  Reserve  Bank 
of  New  Zealand.  A  cutover  to  an  IBM 
(jlobal  Services  facility  in  Sydney  was 
scheduled  for  earlier  this  month,  but 
just  a  day  before  the  move,  fhe  Reserve 
Bank  pulled  the  plug. 

\Vi*stpac’s  New  Zealand  division, 
based  in  Auckland,  agreed  to  hold  off 
on  the  move  until  the  Reserve  Bank 
finishes  developing  an  outsourcing 
policy.  The  Reserve  Bank  said  that  it’s 
concerned  about  outsourcing’s  poten¬ 
tial  effect  on  the  bank's  ability  to  con¬ 
tinue  operating  in  a  crisis  and  that 
Westpac's  proposal  wasn't  ''sufficiently 
robust"  to  addre-ss  that  concern. 

■  RANDAL  JACKSON.  COMPUTERWORLD 
NEW  ZEALAND  ONLINE  | 

Compifed  by  Af  irch  flerts. 


Briefly  Noted 

Advanced  Micro  Dfivfces  Inc.  list 
week  unveiled  a  S249  PC  for  ihe  de¬ 
veloping  worM.  The  Personal  Internet 
Communicator  is  a  bare-bones  PC 
with  basic  software.  AMD's  Geode 
6X500  embedded  processor.  t26MB 
of  RAM  and  a  10G8  hard  drive. 

■  TOM  KRAZIT,  lOG  NEWS  SERVICE 

The  government  o(  Ghana  recently 
signed  an  agreement  with  Data  Centa 
Ghana  Ltd.  and  Lexis  Nexis  Butter- 
worths  (Pty)  Ltd.  that  will  make  the 
country's  taws  accessible  online. 
Durban.  South  Africa-based  Lexis 
Nexis  Butterworths  has  sirndar  proj¬ 
ects  under  way  in  Uganda.  Kenya. 
Tunisia  and  Nigeria. 

■  JOHN  VARNEY. 

IDG  NEWS  SERVICE 

Sybase  tnc  ’$  Financial  Fusion  Inc. 
subskhary  in  Concord.  Mass.,  has 
won  a  multimillion-dollar  conhact  to 
set  up  an  online  banking  system  for 
Bank  of  China,  one  of  China’s  largest 
banks. 

■  SUMNER  LEMON. 

IDG  NEWS  SERVICE 


Users  Call  for  Improved 
Wireless  Management 


BV  MATT  HAMBLEN 

SAN  'AANC'SCO 

At  a  conference  held  here  last 
week  by  wireless  industry- 
trade  group  CTIA.  IT  man¬ 
agers.  analysts  and  vendors  all 
cited  the  need  to  find  better 
w-ays  to  deploy  and  manage 
handheld  device's  as  well  as 
wireless  services. 

Vendors  such  as  Sprint 
Corp.  and  Intel  Corp.  an¬ 
nounced  new  managed  ser¬ 
vices  or  upcoming  technolo- 
git's  designed  to  help  IT  man¬ 
agers  incorporate  wirelcs.s  de¬ 
vices  into  corporate  settings. 
But  it  was  obvious  from  the 
comments  of  some  people  at 
the  conference  that  wireless 
rollouts  can  still  be  frustrating. 

"The  wireless  industry  is 
not  taking  a  clear  answer  to 
the  end  user."  said  attendee 
Leonard  Lovenihal.  referring 


I  to  both  IT  managers  and  busi- 
ne-ss  asers.  Loventhal  is  an  ex¬ 
ecutive  vice  president  at  Hon¬ 
olulu-based  Hawaii  Home- 
Loans  Inc.,  which  launched 
wirclcs-s  data  services  for  its 
100  lt>an  officers  nearly  three 
years  ago.  The  process  was 
very  confusing,  especially 
when  it  came  to  picking  hand¬ 
held  devices,  middle¬ 
ware  and  wireless  ser¬ 
vice  plans,  he  said. 

Loventhal  said  that 
thanks  to  help  from 
Sprint  engineers. 

Hawaii  HomcLoans 
has  seen  a  solid  return 
tin  its  investments  in 
Treo  600  handheld  de¬ 
vices  from  PaimOne 
Inc.  and  wireless  cards 
for  the  laptop  PCs 
used  by  its  loan  ofTi- 
cers.  Both  technolo- 


I  gics  help  the  workers  do  text 
'  and  voice  messaging  when 
they're  out  in  the  field  and  in 
ihe  ufTicc  at  costs  lower  than 
j  the  prices  companies  typically 
I  pay  fur  communications,  ac¬ 
cording  to  Loventhal. 

But  Loventhal  said  that 
many  of  the  larger  mortgage 
firms  he’s  familiar  with 
haven’t  taken  the  same  path 
because  of  the  complexity  of 
wireless  deployments,  'if  it 
was  easy  to  set  this  up.  more 
companies  would  be  doing  it" 
he  noted. 

Sprint  said  it's  be¬ 
ginning  90-day  pilot 
rollouts  of  its  Man¬ 
aged  Mobility  Ser¬ 
vices  offering  at  12 
companies.  The  ser¬ 
vice  is  due  to  be 
launched  early  next 
year  at  a  cost  that  will 
be  “mcremental"  on 
top  of  Sprint's  month¬ 
ly  wireless  service 
fees  of  S40  to  $80  per 
end  user,  said  Rob 
Kermodc,  general 


'0' 


LOVENTHJtt 
says.  "II  It  was 
easy  to  set 
(wifeless]  uD. 
more  comoa- 
nies  would  t>e 

dofog  It." 


manager  of  the  new  scrx'ice. 

Kermodc  added  that  the 
work  Sprint  did  with  Hawaii 
HomcLoans  is  similar  to  the 
help  it  will  provide  to  Man¬ 
aged  Mobility  Ser\-ices  cus¬ 
tomers.  The  offering  supports 
devices  running  Windows  or 
PalmOS  and  includes  security 
management  services  such  as 
data  encryption  and  (he  abili¬ 
ty  to  remotely  disable  devices. 

Analysts  said  Sprint's  move 
will  likely  be  quickly  matched 
by  other  wireless  carriers. 
•‘Wireless  rollouts  arc  still 
complex,  despite  all  the  years 
of  working  on  the  problem,” 
said  Bob  Egan,  president  of 
Mobile  Competency  Inc.  in 
North  Providence.  R.L  “The 
complexity  requires  the  oper¬ 
ators  to  do  some  of  the  heavy 
lifting,  so  Sprint's  announce¬ 
ment  is  a  good  first  step." 

Nikhil  Deshpande,  a  busi¬ 
ness  development  director  ac 
Intel,  said  the  chip  maker  is 
working  on  technology  de¬ 
signed  to  let  systems  adminis¬ 
trators  use  existing  manage¬ 


ment  tools  to  bring  wtrcL'Ss 
devices  under  the  IT  umbrel¬ 
la.  Intel  bL-gan  a  proof-of-con- 
cept  deployment  with  the 
University  of  Arkansas  at  Pine 
Bluff  in  April,  but  Deshpande 
said  the  tcchnoIog>-  likely  is 
three  to  five  years  away  from 
commercial  release.  O  50422 


Tom  Krazit  of  the  IDG  News 
Service  contributed  to  this  story. 

HORE  NEWS  ONLINE 

CA  releases  a  lool  for  managing  wireless 
LANs  and  identifying  rogue  users 
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Oernuns  Assess  Linux 
Deploynieiit  Costs 

PHANKPURT 

Tough  economic  times  in  Ger¬ 
many  have  made  Linux  operating 
systems  and  other  open-source 
products  tantalizing  to  local  business¬ 
es.  Yet  many  remain  hesitant  to  dump 
their  Microsoft  Corp.  sofhvarc  com¬ 
pletely.  if  only  because  it  performs  rel¬ 
atively  well  and  nearly  everyone  in 
corporate  Germany  uses  it. 

Thai  was  the  consensus  of  speakers 
at  the  Linux  World  conference  in  Frank¬ 
furt  ian  week.  IDC  analyst  Wafa  Mous- 
savi-Amin  warned  users  that  although 
Linux  software  is  basically  free  to  ac¬ 
quire.  it  can  be  costly  to  deploy.  “Busi¬ 
nesses  can  see  costs  pile  up  quickly  for 
support,  maintenance  and,  in  particu¬ 
lar.  training  if  they  lack 
in-house  knowledge."  he 
said.  “Each  enterprise 
should  carefully  study 
whether  the  low  fee  to  ac¬ 
quire  the  software  will 
offset  these  other  costs.” 

Among  server  operat- 


S'Ji’rj  'i  PC  "  .I'Hv!  “aiJr- 
1  Ho.*'.''-  p.,...,.  If, 


ing  systems  in  Europe,  Linux  grew 
from  a  1%  market  share  in  1999  to  9% 
in  this  year’s  third  quarter.  IDC  said. 

■  JOHN  BUU.  106  NEWS  SERVICE 

Cable  A  Wireless 
Continues  Fire  Sale 

LONDON 

London-based  network  operator 
Cable  &  Wireless  PLC  agreed  last 
week  to  sell  its  Japanese  business. 
Cable  &  Wireless  IDC  Inc.,  to  Softbank 
Corp.  for  $1333  million.  But  C&W  will 
retain  two  international  data  nodes  so 
it  can  continue  to  provide  network  ser¬ 
vices  to  and  from  Japan. 

The  sale  of  the  Japanese  unit  contin¬ 
ues  C&W's  retreat  from  an  easier  plan 
to  develop  a  $33  billion  glc^tal  IP  net- 
woric.  The  company's  fortunes  plum¬ 
meted  in  200L  triggering 
a  series  of  asset  sales, 
thousands  of  layofl^  the 
dismantling  of  its  global 
data  services  division 
and  an  exit  from  the  U3. 
and  continental  Europe 
except  for  continued 


support  of  multinational  customers.  In 
January.  C&W  sold  its  U.S.  Web  host¬ 
ing  and  IP  services  units  to  Sawis 
Communications  Corp.  in  Herndon, 
Va.,  for  $155  million. 

■  LAURA  ROHDE.  IDG  NEWS  SERVICE 

N  J!.  Regulator  Blocks 
Westpac  Outsourcing 

AUCKLAND.  NEW  ZEALAND 

WESTPAC  BANKING  CORP.'S  plan 
to  move  its  New  Zealand  main¬ 
frame  processing  to  Australia 
has  been  scuttled  by  the  Reserve  Bank 
of  New  Zealand.  A  cutover  to  an  IBM 
Global  Services  facility  in  Sydney  was 
scheduled  for  earlier  this  month,  but 
iusi  a  day  before  the  move,  the  Reserve 
Bank  pulled  the  plug. 

Westpac’s  New  2^aland  division, 
based  in  Auckland,  agreed  to  hold  off 
on  the  move  until  the  Reserve  Bank 
finishes  developing  an  outsourcing 
policy.  The  Reserve  Bank  said  that  it's 
concerned  about  outsourcing’s  poten¬ 
tial  effect  on  the  bank’s  ability  to  con¬ 
tinue  operating  in  a  crisis  and  that 
Westpac's  proposal  wasn’t  "suindently 
robust”  to  adless  that  concern. 

•  RANOAl  JACKSON.  COMPUTERWORLO 
NEW  ZEALAND  ONLINE 
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Users  Call  for  Improved 
Wireless  Management 


At  a  conference  held  here  last 
week  by  wireless  industry 
trade  group  CTIA,  IT  man¬ 
agers,  analysts  and  vendors  all 
cited  the  need  to  find  better 
ways  to  deploy  and  manage 
handheld  devices  as  well  as 
wireless  sendees. 

Vendors  such  as  Sprint 
Corp.  and  Intel  Corp.  an¬ 
nounced  new  managed  ser¬ 
vices  or  upcoming  technolo¬ 
gies  des^ned  to  help  IT  man¬ 
agers  incorporate  wireless  de- 
dees  into  corporate  settings. 
But  it  was  obvious  from  the 
comments  of  some  people  at 
the  conference  that  wireless 
roQouts  can  still  be  frustrating. 

Tlte  wireless  industry  is 
not  taking  a  clear  answer  to 
the  end  user.”  said  attendee 
Leonard  LoventhaL  referring 


to  both  IT  managers  and  busi¬ 
ness  users.  Loventhal  is  an  ex¬ 
ecutive  vice  president  at  Hon¬ 
olulu-based  Hawaii  Home- 
Loans  InCn  which  launched 
wireless  data  services  for  its 
100  loan  officers  nearly  three 
years  ago.  The  process  was 
very  confusii^  especially 
when  it  came  to  picking  hand¬ 
held  devices,  mi^e-  _ 

ware  and  wireless  ser¬ 
vice  plans,  be  said. 

Lovenfrial  said  that 
thanks  to  help  from 
Sprint  engineers. 

Hawaii  HomeLoans 
has  seen  a  solid  return 
on  its  investments  in 
Treo  600  handheld  de¬ 
vices  from  PalmOoe 
Inc.  and  wireless  cards  < 
for  the  laptop  PCs  | 
used  by  its  loan  offr-  ^ 

cers.  Both  technolo-  1 


gies  help  the  workers  do  text 
and  voice  messaging  when 
they’re  out  in  the  fleld  and  in 
the  office  at  costs  lower  than 
the  prices  companies  typically 
pay  for  communications,  ac¬ 
cording  to  Loventhal 
But  Loventhal  said  that 
many  of  the  larger  mortgage 
firms  he’s  familiar  with 
haven't  taken  the  same  path 
because  of  the  complexity  of 
wireless  deployments.  ”If  it 
was  easy  to  set  this  up,  more 
companies  would  be  doing  it,” 
be  noted. 

Sprint  said  it’s  be¬ 
ginning  90-day  pilot 
rollouts  its  Man¬ 
aged  Mobility  Ser¬ 
vices  offering  at  12 
companies.  The  ser¬ 
vice  is  due  to  be 
launched  early  next 
year  at  a  cost  that  will 
be  "incremental”  on 
top  of  Sprint’s  month¬ 
ly  wireless  service 
fees  of  $40  to  $80  per 
end  usee,  said  Rob 
Kermode.  general 


manager  of  the  new  service. 

Kermode  added  that  the 
woiic  Sprint  did  with  Hawaii 
HomeLoans  is  similar  to  the 
help  it  will  provide  to  Man- 
Mobility  Services  cus¬ 
tomers.  The  offering  supports 
devices  running  Windows  or 
PalmOS  and  includes  security 
management  services  such  as 
data  encryption  and  the  abili¬ 
ty  to  remotely  disable  devices. 

Analysts  said  Sprint's  move 
will  likely  be  qulddy  matched 
by  other  wireless  carriers. 
‘'Wireless  rollouts  are  still 
complex,  despite  all  the  years 
of  working  on  the  problem,” 
said  Bob  Egan,  president  of 
Mobile  Competency  loc.  in 
N(Xtb  Providence,  ^L  The 
complexity  requires  the  oper¬ 
ators  to  do  some  of  the  heavy 
lifting,  so  Sprint’s  announce¬ 
ment  is  a  good  fiist  step.” 

Nikhil  Deshpande,  a  busi¬ 
ness  development  director  at 
Intel,  said  tte  chip  maker  is 
working  on  technology  de¬ 
signed  to  let  systems  adminis¬ 
trators  use  existing  manage¬ 


ment  tools  to  bring  wireless 
devices  under  the  IT  umbrei- 
la.  Intel  began  a  proof-of-con- 
cept  deployment  with  the 
University  of  Arkansas  at  Pine 
Bluff  in  April  but  Deshpande 
said  the  technology  likely  is 
three  to  five  years  away  from 
commercial  release.  O  50422 

TomKrazUt^thelDG  News 
Service  contributed  to  this  story. 


CA  raleesn  a  tool  br  ffonagsig  wreless 
LANs  and  idsrtlying  (ogue  users. 

50387 


IT’S  STORAGE.  IT’S  FLEXIBLE.  IT’S  YOU. 

Yes,  you.  Whatever  is  vital  to  you  -  x-rays,  blueprints,  customer  information  -  storing 
vast  amounts  of  data  is  important.  Even  more  important  is  access  to  mat  information. 
Having  data  right  at  your  fingertips.  Welcome  to  the  on  demand  world  enabled 
by  IBM  TotalStorage*  systems.  Where  your  servers  and  storage  work  together  to 
better  manage  data  across  your  organization,  giving  you  a  broad  range  of  storage 
options.  Thus,  a  total  recognition  of  TCO,  scalability  and  flexibility.  IBM  TotalStorage 
is  for  you.  Find  and  learn  the  whole  story  at  llMn.com/totalstorage/total 

IB.M  TotalStorage' 
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Continued  from  page  I 

ID  Management 


si^  collaboration  wc  arc  go¬ 
ing  to  need  won't  tolerate  a 
world  where  you  have  silw  of 
idemtit)’  [data)."  Scott  said  in 
an  interview  prior  to  deliver¬ 
ing  his  keynote  speech. 

GM's  plan  is  a  prime  exam¬ 
ple  of  the  increased  focus 
some  companies  arc  putting 
on  identity  and  access  man¬ 
agement  as  a  way  of  cuttmg 
administrative  costs  and  im¬ 
proving  end-user  access  to  ap¬ 
plications.  said  Pete  Lind- 
strnm.  an  analyst  at  Spire  Se¬ 
curity  LLC  in  Malvern,  Pa. 

The  Boeing  (3a  is  another 
large  user  that's  In  the  midst 
of  a  long-term  effort  to  give 
employees,  customers  and 
suppliers  single-sign-on  ac¬ 
cess  to  a  range  of  applications 
and  computing  services. 

Already.  Boeing  employees 
can  use  their  corporate  log-ons 
to  access  information  on  pass¬ 
word-protected  Web  sites  op¬ 
erated  by  benefits  providers, 
said  Michael  Beac^  an  associ¬ 
ate  technical  fellow  at  the 
Chicago-based  company. 

In  addition,  mcch^ics  at  a 
maior  airline  customer  of  Boe¬ 
ing  can  use  their  regular  user- 
names  and  passwords  to  ac¬ 


cess  electronic  repair  manuals 
stored  on  Boeing's  interna) 
networks.  TTie  aircraft  maker 
is  working  to  extend  the  capa¬ 
bility  to  other  airlines,  he  said. 

The  drastically  reduced 
number  of  end-user  accounts 
that  need  to  be  maintained 
and  supponed  in  such  a  feder¬ 
ated  identity  management  in¬ 
frastructure  ha.s  resulted  in 
"substantial  cost  savings"  and 
improved  user  productivity, 
according  to  Beach. 

The  federated  system  is 
built  around  single-sign-on 
software  from  Cupertino, 

(3aUf. -based  Oblix  Ir>c..  al¬ 
though  Beach  said  that  Boe¬ 
ing  had  to  do  "quite  a  bit  of 
customiaation." 

Regulatory  Pressures 

Also  playing  a  key  role  in  dri¬ 
ving  consolidated  identity 
management  projects  arc  new 
regulations,  such  as  the  Sar- 
baneS'Oxley  Act.  that  require 
companies  to  get  a  better  han¬ 
dle  on  their  application  ac¬ 
cess-control  capabilities.  Lind- 
Strom  said. 

"Regulatory  pressures  arc 
driving  a  lot  of  what’s  happen¬ 
ing  in  the  security  space."  said 
Undsirom.  Implementing  con¬ 
sistent  identity  and  access 
management  tools  can  give 
large  companies  such  as  GM 


Expedia  Unit  Offers  Single  Sign-on  for  Travel  Bookings 


Business  tiBVfltors  who  use  B(* 
pedia  Corporate  Travel's  Web 
site  can  now  access  Ns  online 
services  from  wMiin  (heir  own 
intranets  via  a  siigte-sion-on  ap* 
proech.  using  thew  regiiar  user¬ 
names  and  passwords. 

The  Belc^.  M^.-based 
unN  of  Expecia  Inc.  said  at  the 
Ovtal  Identity  World  confennee 
here  that  It  he  irstaied  identity 
management  technology  that 
eiiniinBtes  the  need  for  cus¬ 
tomers  to  separately  log  on  and 
authenticate  themselves  to  Is 
passvmrd-piDiBcted  MW>  sNe. 


and  Boeing  "a  way  of  getting  a 
top-down  look  at  what  legiti¬ 
mate  users  are  doing  with  ap¬ 
plications  and  of  monitoring 
that  access."  he  added. 

GM's  existing  identity 
management  infrastructure 
is  "not  an  enterprise  solution." 
Scott  said,  adding  that  func¬ 
tional  units  such  as  manufac¬ 
turing  and  engineering  control 
their  own  user  identity  infor¬ 
mation. 

The  global  identity  manage¬ 
ment  architecture  and  gover¬ 
nance  model  will  use  a  combi- 


Indiani  Urivetsly.  which  uses 
Expeda's  site  to  book  travel  for 
Ns  employees,  is  testing  the  sirt* 
gte-9gn-on  feature.  *The  bottom 
line  is  fhai  you  don't  need  to 
ke^  togging  into  systems  (oget 
sonielhing  done,' said  John 
Hamer,  director  of  travel  ser 
vices  at  the  Bioomington-based 
university. 

ExpetSa  has  installed  Obix's 
Shar^feder^idenlNyman- 
agamenisoftwareindhKpart* 
nerad  with  the  software  vendor 
to  heb)  users  instaN  the  required 
singte-siorHin  starter  idte  on 
thek  wstems.  Simon  Tam.  vice 


nation  of  directory  manage¬ 
ment  technologies,  such  as 
the  Lightweight  Directory 
Access  Protocol  and  Micro¬ 
soft  Corp.’s  Active  Directory. 
Scott  said. 

The  company  also  plans  to 
use  identity  federation  tech¬ 
nologies  based  on  the  Securi¬ 
ty  Assertion  Markup  Lan¬ 
guage  and  Liberty  Alliance 
Project  standards  to  pnwide 
cross -domain  application  ac¬ 
cess  to  GM  employees  and  ex¬ 
terna]  users.  '*A  system  that  is 
not  federated  will  be  impossi- 


.  presidam  of  product  dsvteop- 
;  monl  at  Exp^  Corporate  Trav* 
'  el.  saidtfMexisling  users  can 
get  the  Obkx  technotogyat  a  dh* 
'  counledprtce. 

*What  tt  does  is  remove  an 
impeiftneni  for  business  travel- 
:  ers.' said  Henry  HartewddLsn 
stelysl  at  FbrrKter  Research 
;  Inc.  It  mates  foe  bookinoproc 
;  ess  easier  and  saves  the  traveler 
time.' Such  improvemerNs  are 
needed  because  8  substantial 
!  ntinber  of  corporate  usarateth 
;  access  to  Wsb-faased  travel  ser- 
:  vices  don't  use  than,  he  noted. 


blc  for  us  to  manage."  Scott 
said.  "It  would  lull  us  adminis¬ 
tratively." 

GM  plans  to  hire  a  prime 
contractor  to  install  and  man¬ 
age  the  global  identity  man¬ 
agement  services  once  its  ex¬ 
isting  IT  services  contract 
with  Electronic  Data  Systems 
(3orp.  ends  in  June  2006,  ac¬ 
cording  to  Scon.  He  wouldn't 
disclose  a  specific  deployment 
schedule  or  a  cost  estimate  for 
the  project  but  said  he  expects 
the  tab  to  be  "in  the  railiions" 
of  dollars.  0  5(Mt7 


Toledo  Schools  May  Resurrect 
Stalled  PeopleSoft  Implementation 


ov  mahc  l.  soNotMt 

As  it  looks  to  upgrade  tu>  big- 
iron  ERP  system,  the  publie 
school  system  in  Toledo.  Ohio, 
is  also  eyeing  the  resurrection 
of  a  $43  million  PeopleSoft 
Inc.  accounting  and  human  re¬ 
sources  software  iastallatiun  it 
abandoned  five  year.'^  agi«. 

Toledo  Public  Sehoob 
needs  to  do  something  with 
the  quartcr-century-oio  ERP 
mainframe  system,  which 
still  relics  on  a  clum.sy  green- 
screen  interface,  said  chief 
basiness  manager  Danic' 
Bums.  He  would  like  it>  see  tt 
replaced  outright,  or  at  least 
Wcb-enablcd  with  a  menu- 
based  inlcr^'c  to  help  auto¬ 


mate  tasks  such  as  processing 
I  purchase  orders, 
j  "You  want  to  do  it  right  and 
identify  your  risla  and  make 
sure  you  identify  your  costs." 

I  Bunu!  said.  That  includes  "not 
I  just  the  software  purchase,  but 
I  the  training."  he  said. 

I  One  of  the  main  drivers  be¬ 
hind  an  outright  replacement 
I  of  the  system  is  the  fact  that 
I  the  application  i.s  written  par¬ 
tially  in  Cobol.  and  it’s  difTi- 
cull  to  find  stafT  to  .support  it. 

Bum.^  intends  to  devise  two 
potential  solulioas.  One  might 
.  invj>lvc  throwing  an  easy-to- 
use  Web-based  front  end  on 
the  mainframe,  hiding  the 
back  end’s  complexity  from 


I  users.  Another  option  would 
be  to  add  a  graphical  user  in- 
'  lerface  and  swap  in  a  third- 
^  party  ERP  application  running 
I  on  Windows  NT  and  an  Ora¬ 
cle  database.  That  would  keep 
any  future  move  to  a  new  sys¬ 
tem  rranspareni  to  the  users. 


You  want  to 
doitrigirtand 
identify  your  risks 
and  sure  you 
identify  your  costs. 


DANIEL  BURNS.  CHIEF  BUSINESS 
manager.  TOLEDO  PUBLIC  SCHOOLS 


In  the  long  run.  Burav  said 
he  would  like  to  implement  a 
joint  human  resources  and  ft- 
nancials  ERP  backbone  that 
could  transmit  studeni  enroll¬ 
ment  information  seamlessly 
between  those  two  systems.  In 
addition,  be  said  he  would  like 
any  new  system  to  support  re- 
!  porting  and  remote  access  and 
be  able  to  extract  human  re¬ 
sources  information,  such  as  a 
teacher’s  profile,  and  put  it  on 
the  Web  for  public  review. 

Siitcc  the  'Toledo  school 
district  has  spent  millions  of 
dollars  on  tbc  PeopleSoft  soft- 
^  ware,  there  could  be  an  advan- 
I  tage  to  resurrecting  that  plan. 

I  In  1998,  the  district  paid 
I  S2.6  million  for  the  vendor's 
!  accounting  and  human  re¬ 
sources  software  and  another 
S1.7  million  to  an  integrator 
for  the  actual  rollout.  How¬ 
ever.  budget  cutbacks  in  1999 


killed  the  project.  The  dLstrict 
still  owns  the  software,  and 
the  only  way  to  recover  its  in¬ 
vestment  is  to  try  to  install  it 
again.  But  doing  that  isn't  nec¬ 
essarily  a  given.  Burns  said. 

‘Tm  not  going  to  rule  out 
other  applications."  he  said. 

Whatever  the  Toledo  school 
system  docs,  the  plan  present¬ 
ed  to  the  superintendent  of 
schools  will  have  to  show  cost 
savings  that  justify  any  new 
expenses.  Burns  said  he  would 
also  consider  staggering  the 
implementation,  installing  one 
application  at  a  time. 

It’s  not  uncommon  for  past 
multiroillion-doUar  invest¬ 
ments  to  He  fallow,  said  Joshua 
Greenbaum.  an  analyst  at  En¬ 
terprise  Applications  Consult¬ 
ing  in  Berkeley.  <3alif.  “With 
local  and  municipal  govern¬ 
ments,  there  seems  to  be  a  bad 
legacy  of  doing  this."  O  50400 
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Microsoft  Recants  Pledge  for  Exchange  Add-on 

F.Yf*r  TTPfrPritC  frmm  l  contracts  include  a  maintpnanrp  nro.  I  rkA  _ 


Exec  retreats  from 
promise  of  2005  ship 


BV  JORIS  EVERS 

Microsoft  Corp.’s  plans  for  its  Exchange 
Server  line  have  become  even  more 
uncertain  than  they  were  earlier  this 
year  when  the  company  removed  the 
2006  “Kodiak”  release  of  the  messag¬ 
ing  software  from  its  product  road  map. 

Microsoft  officials  are  backpedaling 
on  a  May  promise  to  ship  an  addition 
to  Exchai^  called  Edge  Services  in 
2005.  The  company  described  the  add¬ 
on  as  an  intelligent  message-transfer 
^ent  that  offers  security,  spam  and 
virus  protection.  It  was  the  only  an¬ 
nounced  release  for  the  Exchange  line 
beyond  2004. 

“We  remain  very  committed  to  Edge 
Services."  said  Kim  Akers,  a  senior  di¬ 
rector  in  Microsoft's  Exchange  Sierver 
group.  But.  she  added,  “it  is  premature 
to  talk  about  timing." 

Analysts  said  that  with  no  product 
road  map.  it's  diftkult  for  customers  to 
make  licensing  decisions  and  plan  up¬ 
grades.  “Microsoft  owes  it  to  its  cus¬ 
tomers  to  specify  and  deliver  more  or 
less  on  time  the  products  and  updates 
they  say  are  coming,"  said  Peter  Paw- 
lak.  an  analyst  at  Directions  on  Micro¬ 
soft  Inc.  in  Kirkland.  Wash.  The  onus  is 
on  Microsoft  to  provide  a  true  road 
map  because  its  multiyear  licensing 


contracts  include  a  maintenance  pro¬ 
gram  that  covers  software  updates, 
Pawlak  said. 

Although  Microsoft  makes  it  diffi¬ 
cult  to  anticipate  which  products  are 
in  the  pipeline,  it’s  delivering  incre¬ 
mental  updates  to  Exchange,  said 
Teney  TaJtahashi.  an  analyst  at  The 
Radicati  Group  Inc.  in  Palo  Alto.  Calif. 
"Microsoft  is  taking  its  time  to  develop 
these  products  right,"  he  said.  "I  think 
that  is  more  important  than  offering  a 
road  map." 

User  Timetables 

Philip  Colmer,  IT  manager  at  ProQuest 
Information  and  Learning  lid.  in  Cam¬ 
bridge,  England,  said  he’s  content  vrith 
the  Exchange  Ser\er  2003  system  be 
upgraded  to  at  the  beginning  of  the 
year.  “I  am  not  too  bothered  at  this 
point  that  Microsoft  has  not  made  any 
announcements."  he  said. 

Microsoft  is  heralding  Exchai^ 
Server  2003  this  week  at  a  user  event 
in  Orianda  However,  the  company 
isn’t  ready  to  publicly  discuss  a  road 
map  there.  AJmrs  said. 

In  a  keynote  at  the  Exchange  Con¬ 
nections  event,  Dave  Thompson,  cor¬ 
porate  vice  president  of  Microsoft’s 
Exchange  Server  products  group,  said 
the  company  has  sold  55%  more  Ex¬ 
change  Server  2003  licenses  in  its  first 
.  year  than  few  the  predecessor  version 
I  in  the  same  time  frame.  In  addition. 


Microsoft  Revises  Antispam  Han 


BV  RAUL  ROBERTS 

After  running  into  loud  opposition  to 
its  first  Sender  ID  antispam  plan,  Mi¬ 
crosoft  Corp.  revised  it  and  resubmit¬ 
ted  it  to  the  Internet  Engineering  Task 
Force  (IETF)  last  week. 

The  new  plan  resolves  dilutes  with 
Internet  service  providers  a^  the 
open-source  software  community 
about  the  use  of  patent-pending  tech¬ 
nology,  said  Meng  Weng  Wong,  chief 
technolc^  officer  at  Pobox.com  and  a 
co-author  of  the  revised  proposal 

The  standard  combines  two  autben- 
ticadoD  standards  —  Caller  ID,  which 
Microsoft  developed,  and  Sender  Poli¬ 
cy  Framewoik  (SPF),  which  Meng  de¬ 
veloped.  Microsoft  submitted  a  draft  of 
Sender  ID  to  an  IETF  woildng  group  in 
June,  but  the  approval  process  became 
bogged  down  b^ause  Microsoft  said 
it  held  patents  for  algorithms  used  to 
check  PRAs,  or  purported  responsible 
addresses,  and  planned  to  require  rbar 


users  obtain  licenses  for  Sender  ID 
[(^uickUnk  49427]. 

The  dispute  produced  some  high- 
profile  defectiotts  from  the  specifica¬ 
tion,  including  The  Apache  Software 
Foundation.  America  Online  Inc.  also 
opposed  Sender  ID  because  it  wasn’t 
compatible  with  early  forms  of  SPF. 
AOL  said  it  will  support  the  revised 
version  of  Sender  ID. 

Microsoft  expects  the  specification  to 
be  given  "experimental"  status  by  the 
IETF  but  do^n’t  know  if  h  will  be  tak¬ 
en  up  formal  approval  by  the  group, 
according  a  Microsoft  spdeesman. 

Despite  the  chaises,  the  new  speci- 
ficatioo  stiU  might  not  satisfy  open- 
source  software  advocates,  con¬ 
tinue  to  be  concerned  about  Micro¬ 
soft’s  patent  claims  and  the  larger 
problem  of  proliferating  intellectual 
property  patents.  Meng  said.  O  50350 

Robemr^)ortsfi)rthelDG  Newsservice. 


the  vendor  received  more  than  175,000 
requests  to  evaluate  the  product. 

Still  Microsoft  faces  a  challenge 
in  getting  customers  to  upgrade  Ex¬ 


change  environments.  The  Radicati 
Group  expects  that  Exchange  Server 
2003  seats  won’t  exceed  the  number  of 
Exchange  55  or  Exchange  2000  seats 
until  the  end  of  2005. 0  50327 


Evers  reports  for  the  IDG  Sews  Service. 
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ITS  COMPACT. 

ITS  YOU. 
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Hosted  SAP  Service  Targets  Midmarket 


8V  MARC  L.  SONOINI 

SAP  AG  is  rolling  out  a  hosted 
service  it  hopes  will  appeal  to 
midsize  customers  that  can 
buy  the  software  at  a  monthly 
fee  as  low  as  $325  per  user  per 
month  while  avoiding  much 
of  the  complexity  of  in-house 
installations. 

SAP  last  week  unveiled 
the  managed  offering,  which 
officials  said  delivers  pre¬ 
packaged  bundles  of  software 
aimed  at  specific  vertical  mar¬ 
kets.  such  as  consumer  goods 
and  high-tech  device  manufac¬ 
turers.  TTie  bundles  use  server 
and  storage  hardware  in  the 
data  centers  of  SAP  partner 
Hewlett-Packard  Ca  HP  will 
also  provide  security  and 
other  technical  support  and 
services. 

Previously.  SAP  primarily 
offered  hosted  applications 
only  to  very  lai^e  companies 
with  special  requirements 
consistent  with  their  scale, 
said  Bill  McDermott.  CEO  and 
president  of  SAP  America  Inc. 

Dedicated  Serveis 

Under  the  new  plan,  each  cus¬ 
tomer  gets  a  defeated  server 
in  an  HP  data  center.  “A  lot  of 
customers  in  small  to  medi- 
lun-sized  businesses  told  me 
they  don’t  like  the  one-to- 
many  [hostii^]  model  where 
their  data  is  managed  in  an 
open  environment,”  McDer¬ 
mott  said.  ”They  want  a  one- 
to-one  relationship.” 

Gary  Walden,  SAP  project 
manager  at  refiner  C&H  Sugar 
Co.,  said  that  if  a  single  month¬ 
ly  pricing  scheme  had  been 
available  a  year  ago  when  his 
company  was  negotiating  with 
SAP  for  a  hosted  service,  “we 
would  have  looked  at  it  very 
hard”  as  a  way  to  save  money. 
C&H,  in  Crockett,  Calif.,  has 
used  a  full  suite  of  hosted  SAP 
applications  since  March. 

The  C&H  hosted  systems 
contract  listed  separate  prices 
for  implementation  and  con- 
sultii^  fees,  among  other 
things,  Walden  said.  Neverthe¬ 
less,  the  hosting  service  has 
helped  boost  C&H's  opera¬ 
tional  efficiency  without 
requiring  extra  IT  support 


staff  around  the  clock. 

For  a  lai^e  company  like 
Halliburton  Corp.  in  Houston, 
the  new  SAP  offering  sparks 


no  interest  at  all,  said  IT  vice 
president  Mike  PeironL  The 
energy  and  construction  ser¬ 
vices  provider  currently  runs 


SAP  R/3  hosted  by  an  HP  data 
center  and  technical  staff.  ”We 
only  have  one  instance  of  SAP. 
and  it’s  big,”  Perroni  said. 

Amy  Konary,  an  analyst  at 
IDC,  said  SAP  separates  itself 
ffom  other  hosted  application 


providers  by  targeting  pack¬ 
ages  to  specific  industries. 
The  managed  offering  will 
likely  appeal  to  large  SAP 
shops  extending  the  software 
to  subsidiaries  or  regional  of¬ 
fices,  she  said.  O  50364 
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DON  TENNANT 


In  Praise  of  Perseverance 


For  as  LONG  AS  I  can  remember,  when¬ 
ever  anyone  has  asked  me  what  trait  I  ad¬ 
mire  most  in  a  person.  I’ve  been  able  to 
respond  without  having  to  ponder  the 
question.  It’s  perseverance.  The  faith, 
courage,  strength  and  will  it  takes  to  refuse  to  give 
up  even  when  the  obstacles  seem  overwhelming 
define  an  attribute  that,  more  than  any  other,  en¬ 
ables  people  to  leave  this  world  a  better  place. 

could  no  longer  press 
the  keys. 

Thank  you  for  not 
giving  up  when  the 
naysayers  scoffed  at  the 
notion  of  making  airline 
reser\'ation  systems  ac¬ 
cessible  to  anyone  with 
a  computer.  After  at¬ 
tending  the  Storage  Net¬ 
working  World  event  in 
Orlando  last  week.  I  was 
on  my  way  to  a  Kronos 
user  conference  that 
was  also  being  held  there  when  I  got 
the  call  that  my  dad  was  nearing  the 
end  in  a  San  Antonio  hospital.  I 
turned  my  rental  car  around,  head¬ 
ed  straight  to  the  airport  and  made 
a  call  to  Linda  Gorgone.  Computer- 
world’s  miracle-working  office  man¬ 
ager.  who  booked  a  flight  for  me. 


Last  week,  my  dad  lost 
his  battle  with  ALS  —  the 
disease  I've  mentioned 
here  before  that's  also 
known  as  Lou  Gehrig’s 
disease  —  after  a  three- 
year  Tight  that  epitomized 
what  it  means  to  perse¬ 
vere,  Through  all  the  un¬ 
speakable  physical  suffer¬ 
ing.  he  remained  emo¬ 
tionally  strong  and  char¬ 
acteristically  selfless,  and 
he  did  it  all  without  ever 
losing  his  sense  of  humor.  Enough 
people  were  inspired  by  the  example 
he  set  throughout  his  life,  and  espe¬ 
cially  during  the  past  three  years, 
for  there  to  be  no  question  that  he 
ha.s  indeed  left  this  world  a  much 
better  place. 

He  used  to  really  enjoy  reading  my 
columns,  and  I  know  he  wouldn’t 
want  me  to  use  this  space  to  thank 
him  for  the  gift  of  his  inspiring  per¬ 
severance.  He’d  want  me  to  thank 
you  for  yours  instead. 

It  is  indeed  through  sheer  perse¬ 
verance  that  the  community  of  IT 
professionals  has  created  and  ad¬ 
vanced  the  systems  that  have 
changed  and  improved  our  lives  so 
dramatically  in  recent  years.  So 
thanks  for  that. 

Thank  you  for  not  giving  up  back 
when  it  seemed  like  the  Web  was  a 
pipe  dream  because  the  pipes  couldn’t 
deliver  the  bandwidth  cheaply 
enough  for  the  average  guy.  My  dad 
loved  what  the  Web  enabled  him 
to  do,  and  be  took  full  advantage  of 
it  until  be  could  no  longer  lift  his 
arms  to  his  keyboard  and  his  fingers 


Upon  my  arrival  at  the  airport, 

I  checked  in  with  an  electronic  tick¬ 
et.  That  technology  enabled  me  to 
get  to  San  Antonio  in  time  to  thank 
my  dad  for  everything  he  has  done 
for  me.  tell  him  I  love  him  and  say 
goodbye. 

There  are  no  doubt  countless 
stories  of  perseverance  on  the  part 
of  the  IT  professionals  who  made 
all  this  technology  happen,  and 
most  will  never  be  told.  That  per¬ 
severance  will  therefore  never  be 
fully  or  properly  appreciated.  I 
want  it  known  that  I  appreciate  it 
deeply. 

Finally,  a  note  of  thanks  to  every¬ 
one  who  wrote  with  such  kind  words 
in  response  to  my  previous  refer¬ 
ences  to  ALS.  This  note  from  an  IT 
manager  in  Arizona  whose  wife  has 
ALS  was  especially  touching:  "1  have 
never  met  anyone  with  ALS  that  was 
not  a  sincerely  good  person,”  he 
wrote.  "Ill  bet  your  dad  was  a  won¬ 
derful  man." 

Yeah,  he  was.  And  he  was  clearly 
in  very  good  company  before  he 
died.  What's  heartening  is  that  he's 
in  even  better  company  now. 

O5037S 


DAN  GILLMOR 

Flawed  Vote 
Could  Give  FT 
A  Black  Eye 

IT'S  LESS  THAN  two  weeks 
before  the  2004  elections 
as  I  write  this,  and  I’m  go¬ 
ing  to  go  out  on  a  not-very- 
long  limb  with  a  prediction.  Who's  go- 
ir^  to  win  the  presidency  is  anyone’s 
guess,  but  it’s  a  no-brainer  to  say  ahead 
of  time  that  we'll  look  back  on  this  as 
another  messy  election,  in  a  technolog¬ 
ical  sense. 

Many  of  the  electronic  voting  ma¬ 
chines  in  use  this  year  are  flawed. 

Some  are  simply  untrustworthy.  It’s  the 
result  of  a  screw-up  that  shouldn't 
have  happened  in  the  first  place  and 
must  not  be  allowed  to  occur  agaia 
Why  is  this  relevant  to  the  IT  com¬ 
munity?  Because  the 
crummy  voting  tech- 
nol(^  is  ultimately 
an  indictment  of  IT. 
not  just  of  the  vot¬ 
ing  machine  compa¬ 
nies  and  sloppy  (or 
worse)  bureaucrats. 

The  2000  presi¬ 
dential  election  was 
almost  a  tie.  The  nar¬ 
row  margin  brought 
to  light  a  host  of 
problems  with 
punch-card  voting 
machines,  which  de¬ 
served  the  garbage 
bins  into  which 
many  were  tossed. 

Congress  understood  that  there  was 
a  crisis  —  of  technology,  of  voter  confi¬ 
dence  and,  ultimately,  of  our  very  sys¬ 
tem  of  selecting  governments.  But  law¬ 
makers  launched  more  money  than 
brainpower  at  the  problem.  Tite  result 
was  the  Help  America  Vote  Act.  whkh 
encouraged  state  and  local  voting  oflt- 
cials  to  spend  wildly,  and  too  quickly, 
with  not  nearly  enough  due  diligence. 

Among  the  worst  flaws  was  an  as¬ 
tonishing  omission.  There  was  no  re¬ 
quirement  that  touch-screen  voting 
machines  come  with  a  verifleation 
method  like  that  of  automated  teller 
machines:  a  paper  printout. 

The  voting  machine  companies,  and 
their  too-credulous  customers  in  gov¬ 
ernment,  pooh-poohed  the  matter.  One 
Florida  o^ial  said  the  voting  totals 
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were  verifiable  because,  well,  you 
could  fust  ask  the  machine  to  repeat 
what  it  had  told  you.  Good  grief. 

Voting  activists  might  have  been  less 
worried  had  they  and  many  concerned 
computer  scientists  not  uiK»vered  a 
host  of  problems  with  the  soirivare  in 
several  of  the  most  widely  sold  ma¬ 
chines  —  including  security  flaws  that 
tech  professionals  found  almost  literal¬ 
ly  b^rond  belief.  But  despite  the  ongo¬ 
ing  whacks  to  their  credibility,  the  ma¬ 
chine  manufacturers  have  continued  to 
insist  that  all  is  well 

What  has  made  the  situation  worse 
yet  is  their  black-box  ^proach.  They 
insist  that  the  source  code  is  propri¬ 
etary.  and  unless  forced  by  law,  they 
won't  even  show  it  to  government  offi¬ 
cials.  One  e-voting  system  vendor. 
Diebold,  went  so  fv  as  to  launch  legal 
threats  against  some  students  who  post¬ 
ed  intern^  memos  on  the  Web  that  the 
company  found  embarrassing;  thankful¬ 
ly.  a  federal  fudge  ruled  against  Diebold. 

Only  one  state,  Nevada,  required  a 
voter-verifiable  paper  trail  this  year. 
California  will  require  one  In  2006,  and 
some  other  states  are  also  moving  to¬ 
ward  su^  measures. 

But  a  better  answer  Is  to  bite  the 
bullet,  write  off  the  biUion-doUar-plus 
investment  to  date  ~  and  start  over. 

We  need  open-source  voting  software 
and  much  better  controls  over  the 
companies  selling  the  marhinpc 

I'd  like  to  see  IT  people  become  more 
active  in  the  voting  system.  They  could 
be  poll  watchers  in  the  near  term,  but 
in  the  long  run,  they  should  take  the 
lead  in  fixing  a  badly  flawed  system. 

There’s  not  much  at  stake  here  — 
just  democracy.  O  50248 


MICHAEL  H.  HUGOS 

‘Hi,  rm  From 
IXandrm 
Here  to  Help’ 

My  company  has  a 
hard  time  maintain¬ 
ing  its  profit  margins. 
Customers  can  buy  what  we 
sell  (stuff  like  paper  cups,  plastic 
spoons,  paper  towels,  mops  and  floor 
wax)  from  lots  of  other  companies. 

The  prices  we  can  charge  are  always 
being  driven  down. 

So  how  do  we  avoid  having  our  prof¬ 
its  squeezed  to  nothing  IT  helps.  We 


start  when  one  of  us  walks 
into  a  business  meeting  and 
says,  “HI  I’m  from  IT,  and 
I'm  here  to  help."  The  busi¬ 
ness  people  in  my  company 
are  glad  to  hear  this  because 
my  IT  staffers  arc  becoming 
masters  of  the  80%  solution: 

We  identify  the  repetitious 
things  the  business  people 
do.  As  the  company  grows, 
such  routine  work  (typically 
70%  to  90%  of  what  they  do) 
is  overwhelming  these 
users.  The  IT  group  is  learn¬ 
ing  to  design  and  quickly 
roll  out  simple  systems  that 
automate  this  routine  work. 

These  systems  are  cheap 
and  quick  to  buOd  because 
we  never  try  to  automate 
anything  that  isn’t  routine. 

I  sec  this  as  a  mafor  paradigm  shift 
For  the  past  30  years  or  more,  people 
in  IT  have  dreaded  questions  like, 
Tes.  but  what  about  this?"  or.  “Can 
your  system  handle  that?"  Those  com¬ 
ments  always  focus  on  exceptions  to 
the  general  rules  that  a  system  is  built 
to  handle.  Often,  they  have  die  power 
to  stop  new  systems  dead.  They  cause 
n*  pet^lc  to  add  complexity  and  ex- 


pcn.se  to  otherwise  simple 
systenw  in  order  to  handle 
cxceptiuiLS  that  happen 
only  once  in  a  while. 

In  the  past,  such  com¬ 
ments  were  often  voiced  by 
people  iidio  didn’t  want 
computers  anyway  and  who 
were  motivated  to  come  up 
with  ways  to  delay  or  slop 
a  rollout  of  new  systems. 
Times  have  changed.  Older 
people  have  gonen  used  to 
computers,  and  younger 
people  can't  imagine  Itvii^ 
without  them.  And  every¬ 
one’s  workload  has  doubled 
or  tripled. 

There’s  no  longer  a  need 
to  build  complex  systems 
to  appease  obstructionists, 
because  there  aren't  many 
of  them  left.  And  since  workflows 
change  quickly  and  the  most  complex 
workflows  ch^e  the  fastest,  why 
spend  a  lot  of  time  automating  thm? 
Instead,  learn  to  see  complexity  as 
combinations  of  simple,  repetitive 
tasks  and  automate  the  simplest  and 
most  repetitive  of  them. 

Figuratively  speaking,  people  in  my 
company  are  often  too  busy  mopping 
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to  fix  the  leak.  So  wc  in  IT  build  cheap, 
simple  systems  to  do  the  mopping  and 
free  people  up  to  figure  out  wh)’  the 
leak  is  happening  and  how  best  to  fix 
it.  Once  freed  from  the  burden  of  rou¬ 
tine  tasks,  they  have  time  to  do  root- 
cause  analysts  and  fix  problems  at  the 
source.  They  also  have  time  to  be  more 
responsive  to  unique  customer  needs. 
If  we  serve  those  customers  well, 
they'll  do  business  with  us  again. 

The  company  wins  in  two  ways. 

First  there  arc  increased  operatir^ 
efficiencies  and  cost  savings  that  come 
from  eiiminating  recurring  problems. 
Then  there  arc  the  benefits  of  attract¬ 
ing  and  retaining  customers  with 
unique  needs  —  and  such  customers 
are  often  the  most  profitable  ones. 
These  wins  happen  because  simple, 
stable  and  scalable  systems  hum  away 
in  the  background,  handlii^  trx>re  and 
more  of  the  routine  transactions.  That 
frees  up  people  to  focus  on  the  nonrou- 
tinc  and  to  find  the  profit  oppommitics 
that  are  hidden  there.  This  is  how  IT 
helps  my  company  thrive.  O  49717 
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Programmeis  Can  Leam  From  Mec^^ 
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I  AMIEE  WITH  DON  TENNANTS 

final  conment  in  his ‘Hand- 
CNKMd  Ihlnlang*  column  {Quick- 
Link  49904]  about  the  e-rnait  from 
a  Linux  supportar  regarding  auto 
mechanics.  It  does  auio  mechanics 
a  great  disservics  to  assume  (hat  a 
tailed  programmer  codd  be  a  suc¬ 
cessful  machanic.  A  programmer 
can  tdie  a  frial-and-enar  approach 
to  soMng  a  programming  problem, 
but  doing  the  same  to  solve  a  prob¬ 
lem  in  an  auto  £  tar  more  costly. 
The  tnechaec  who  misdiagnoses 
a  dunMng  sound  and  replaces  a 
transmission  when  a  bad  universai 
joM  WPS  making  the  iKiise  wN  soon 
be  looking  for  a  new  iob.  He  might 
make  It  as  a  programmer  If  the 
uioint  was  the  second  thing  OT 
Ns  list  of  possible  problems. 
MorrtoCanwM 
Systems  manager,  NoffiiUc 
Department  of  Human 
Services.  Norfolk.  Vo, 
MorrisxampbeB@norfoUi.gov 

IrSASHAMEsocietyundervW- 
uBs.  and  often  disrespects,  the 


excekent  tradesmen,  craftsmen  and 
others  who  may  have  been  trwned 
on  the  lob  I  had  a  two  uncles  who 
worked  from  grade  school  to  an  old 
age.  One  had  a  tNrd-grade  educa¬ 
tion,  and  at  one  time  ha  may  have 
been  the  best  mechwiic  in  SL  Louis. 
The  other  comcMed  some  cotega 
He  was  an  acelent  smal  contrac¬ 
tor  and  factory  mechanc.  and  Ns 
busmess  skife  made  a  lot  of  money 
lor  Ns  employer.  What  a  shan«  ou 
sooety  doesn't  value  ski  and  sub¬ 
stance  over  the  paper  freely  passed 
out  at  our  schools. 
JwryW.HiMttfd 
Communication  service 
supervisor.  Sl  Lotas 

Don  TBHiANT  seems  to  misun- 
derstwd  the  commenL  Tieck. 
If  I  had  cranked  out  the  kmda  enp 
when  I  was  a  funior  prognmmer.  rd 
be  an  aulo  mecharic  now.*  It  seems 
otMous  to  me  that  ttB  simply 
means  that  people  who  doni  write 
quaHy  software  coiid  perhaps  find 
another  held  In  which  they 
produce  a  Ngher-quNity  product  I 


donT  find  It  deparagmg  to  aulo  me- 
charicsaial.  Il'siusianassemon 
thN  many  Mcrasoft  engineers 
wn4d  be  better  served  to  find  an- 
ofherNneofwoik. 

i  personaky  don't  blame  the  engi¬ 
neers  tor  lowiqallN  NKTOsott  soft¬ 
ware.  howMT.  I  blame  the  oiure 
and  processes  of  the  company  as  a 
whole,  mst  as  Bi  Gates  did  in  Ns 
e-tnak  misswe  on  trustworthy  com¬ 
puting  a  few  years  ago 
OregBlacboe 
Senior  network  analyst. 
CoUmims,Ga. 


Job  Hunt  Pseves 

S  MCE  OETTWe  DOWNSIZED 
from  a  Big  Five  ixnsultng  firm 
hM>  years  ago.  I  have  been  on  nu¬ 
merous  niervlews  and  have  a  tew 
pal  paewB  of  my  own  [Tkring  Hor¬ 
rors.’ QutoMjnk  49556].  The  b^ 
gestfibengsskedlowelitheNr' 
mg  manager  through  my  rkswnk. 
This  translBiee  as.  1  (fidn't  have 
time  to  read  your  rkamk.  so  f  have 
no  idea  who  you  are  or  what  you've 
done.*  rwe  spent  hours  resawcNng 
the  prospective  employer.  I  am  friy 


prepared  to  take  Nnu  what  I  can  do. 
but  1  never  get  a  chance  to  do  so 
Other  peews  are  interviews  weh 
eroiybody  I  could  posshly  come  m 
contact  wNh.  even  after  the  mmgef 
realues  (he  |0b  snt  a  good  tl.  arxl 
raimg  salary  offers  When  I  was  a 
fwiig  manager,  the  goal  was  to  gel 
the  best  person  lor  the  lob  at  tai 
markal  value.  Hmno  an  employee 
was  percerved  as  matono  an  nvest- 
men!.  not  bargan-basffneti 
png  K'sanoldmanmbiitnie- 
you  get  what  you  pay  tor 
FleiMitLanh 
Denver 

COMnniNWORU)  weicornes 
comments  from  its  raaders  Lattars 
wi  be  adiled  lor  Nawty  and  claniy. 
They  should  be  adefrea^  to 
Jarnie&We.len8rse(ltor.Cam- 
puterworld.  PO  Bo  9f7l.  1  Speen 
Street  Frammohvn.  Mass.  01701. 
Fax  (506)  879^841  E-mM 
lettars9computerwDrtd  com. 

Indude  an  address  and  phone 
number  tor  mmerkale  venficabon. 
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were  verifiable  because,  well,  you 
could  just  ask  the  machine  to  repeat 
what  it  had  told  you.  Good  grief. 

Voting  activists  might  have  been  less 
worried  had  they  and  many  concerned 
computer  scientists  not  uncovered  a 
host  of  problems  with  the  software  in 
several  of  the  most  widely  sold  ma¬ 
chines  —  including  security  flaws  that 
tech  professionals  found  almost  literal¬ 
ly  beyond  belief  But  despite  the  ongo¬ 
ing  whacks  to  their  credibility,  the  ma¬ 
chine  manufacturers  have  continued  to 
in.sist  that  all  is  well. 

What  has  made  the  situation  worse 
yet  is  their  black-box  approach.  TTicy 
insist  that  the  source  code  is  propri¬ 
etary.  and  unless  forced  by  law-,  they* 
won’t  even  show  it  to  government  offi¬ 
cials.  One  e-voting  system  vendor. 
Dicbold,  went  so  far  as  to  launch  legal 
threats  against  some  students  who  post¬ 
ed  internal  memos  on  the  Web  that  the 
company  found  embarrassing:  thankful¬ 
ly.  a  federal  fudge  ruled  against  Dicbold. 

Only  one  state,  Nevada,  required  a 
voter-verifiable  paper  trail  this  year. 
California  will  require  one  in  2006.  and 
some  other  states  are  also  moving  to¬ 
ward  such  measures. 

But  a  better  answer  is  to  bite  the 
bullet,  write  off  the  biliion-dollar-plus 
investment  to  date  —  and  start  over. 

Wc  need  open-source  voting  software 
and  much  better  controls  over  the 
companies  selling  the  machines. 

t’d  like  to  see  IT  people  become  more 
active  in  the  voting  system.  They  could 
be  poll  watchers  in  the  near  term,  but 
in  the  long  run,  they  should  take  the 
lead  in  fixing  a  badly  flawed  system.  I 

There’s  not  much  at  stake  here  —  | 

just  democracy.  O  50248  I 


MICHAtl  II.  HUCiDS 

‘Hi,  I’m  From 
IX  and  I’m 
Here  to  Help’ 

My  company  has  a 
hard  time  maintain¬ 
ing  its  profit  margins. 
Customers  can  l5uy  what  we 
sell  (stuff  like  paper  cups,  plastic 
spoons,  paper  towels,  mops  and  floor 
wax)  from  lots  of  other  companies 
The  prices  we  can  charge  are  always 
being  driven  down. 

So  how  do  we  avoid  having  our  prof¬ 
its  squeezed  to  nothing?  IT  helps.  We 


start  when  one  of  us  walks 
into  a  business  meeting  .and 
says.  "Hi.  I'm  from  IT.  and 
I'm  here  to  help."  The  busi¬ 
ness  people  in  my  company- 
are  glad  to  hear  this  because 
my  rr  staffers  are  becoming 
masters  of  the  80^  s*>lution; 

We  identify  the  repetitious 
things  the  business  people 
do.  As  the  company  grows, 
such  routine  work  (typically 
70%  to  90%  of  whai  they  do) 
is  overwhelming  these 
users.  The  IT  group  Ls  learn¬ 
ing  to  design  and  quickly 
roll  out  simple  systems  that 
automate  this  routine  work. 

These  systems  are  cheap 
and  quick  to  build  because 
we  never  try  to  automate 
anything  that  isn’t  routine. 

1  SCO  this  as  a  major  paradigm  shifL 
For  the  past  30  years  or  more,  people 
in  IT  have  dreaded  questions  like, 
’’Yes,  but  w'hat  about  this?"  or.  "Can 
your  system  handle  that?"  Those  com¬ 
ments  always  focus  on  exceptions  to 
the  general  rules  that  a  system  is  built 
to  handle.  Often,  they  have  the  power 
to  stop  new  systems  dead.  Tht‘y  cause 
IT  people  to  add  complexity  and  ex¬ 


pense  to  otherwise  simple 
-sysiem.s  in  order  to  h.mdlc 
e.xceptions  that  happen 
only  <»nce  m  a  while. 

In  the  past,  such  com¬ 
ments  wetv  often  \oiced  by 
pe«>ple  who  didn’t  w.ini 
computers  anyway  and  who 
were  motivated  to  come  up 
with  ways  to  delay  or  stop 
a  rollout  of  new  systems 
Times  have  changed.  Older 
people  have  gotten  used  to 
computers,  and  younger 
people  can't  imagine  living 
without  them.  And  every-- 
one’s  workload  has  doubled 
or  tripled. 

TTierc’s  no  longer  a  need 
to  build  comple.v  systems 
to  appease  obstructionists, 
because  there  aren’t  many 
of  them  left.  And  since  workflows 
change  quickly-  and  the  most  complex 
workflows  change  the  fastest,  why- 
spend  a  lot  of  time  automating  them? 
Instead,  learn  to  sec  comple.xiiy  as 
combinations  of  simple.  repL*titivc 
tasks  and  automate  the  simplest  and 
most  repetitive  of  them. 

FiguratixTl)  speaking,  people  in  my 
'  company  arc  often  too  busy  mopping 


t(*  lix  the  leak.  So  we  in  IT  build  cheap, 
simple  systems  to  do  the  mopping  and 
free  people  up  to  figure  out  why  the 
leak  is  happening  and  how  Kst  to  fix 
It.  i>nce  freed  from  the  burden  of  rou¬ 
tine  tasks,  they  h.iveiime  to  do  root- 
cause  analysis  .ind  fix  problems  .it  the 
sourxv.  1  hey  also  h.i\e  time  to  be  more 
responsive  to  unique  customxT  needs. 
If  we  serve  those  customers  well, 
they'll  do  business  with  us  again. 

The  company  w  ins  in  two  Wiiys. 
birst.  there  are  increased  operating 
efficiencies  and  citst  s,iving.s  that  oxnu- 
Irom  eliminating  rccurnng  problems. 
Then  thcK*  arc  the  benefits  of  attraii- 
ing  and  retaining  customers  w  ith 
unique  needs  —  and  such  customers 
are  often  the  most  profitable  ones. 
These  w'ins  happen  because  simple, 
stable  and  scalable  sy  stems  hum  away 
in  the  backgrt'und.  handling  more  and 
mure  of  the  routine  transactions.  That 
frees  up  people  to  focus  on  the  nonrou- 
tinc  and  to  find  the  pmfit  oppt>rtunities 
that  are  hidden  there.  This  is  how  IT 
helps  my  company  thrive.  O  497T7 
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Programmers  Can  Learn  From  Mechanics 


I  AGREE  WITH  OOR  TENNANTS 
fmal  comment  in  his  'Handi¬ 
capped  Thinking*  column  (Quick- 
Link  499(M]  about  Ihe  e-mail  from 
a  Lmux  supporter  regarding  aulo 
mechanics.  It  does  auto  mechanics 
3  great  disservice  (o  assume  that  a 
(ailed  programmer  cotNd  be  a  suc¬ 
cessful  mechanic  A  programmer 
can  take  a  tnat-and-error  approach 
to  solving  a  programming  pmblem. 
but  doing  the  same  to  s<^e  a  prob¬ 
lem  tn  an  auto  IS  far  more  costly 
The  mechanic  who  misdiagnoses 
a  clunking  sound  araf  replaces  a 
transmission  when  a  bad  unrversal 
joint  was  making  the  noise  wiH  soon 
be  looking  lor  a  new  |ob.  He  might 
make  it  as  a  programmer  i(  the 
u-joint  was  the  second  thing  on 
hts  list  of  possible  problems. 

Morris  Campbell 
Sysfems  manager.  Norfolk 
Departmenf  of  Human 
Services.  Norfolk,  Wa, 
MorrisxampMl(&noribOi:.|«ov 

ITS  A  SHAME  society  underval¬ 
ues.  and  often  disrespects,  the 


I  excellent  tradesmen,  craftsmen  and 
others  who  may  have  been  trained 
on  the  |0b.  I  had  a  two  uncles  who 
worked  from  grade  school  to  an  old 
age  One  had  a  third-grade  educa¬ 
tion.  and  at  one  ime  he  may  have 
been  the  best  mechanic  in  ^  Loms 
The  other  comt^ed  some  college 
He  was  an  excellent  smalJ  contrac¬ 
tor  and  factory  mechanic,  and  ties 
business  skills  made  a  lot  of  money 
for  his  employer.  What  a  shame  our 
society  doesn't  value  skjH  and  sub¬ 
stance  over  the  paper  treeiy  passed 
oulal  our  schools, 
tierry  W.  Hubbard 

Communication  service 
st^xn-isor,  S(.  LmiIs 

Don  TENNANT  seems  lo  misun- 
dersland  Ihe  commem.  Tieck. 
if  I  had  cranked  out  this  kmda  aap 
when  I  was  a  jurvor  programmer,  fd 
be  an  auto  mechanic  now '  It  seems 
obvious  to  me  that  this  sffnply 
means  that  people  who  don't  write 
quality  software  coiid  perhaps  tmd 
^oth^  field  m  which  they  could 
produce  a  Ingher-Quabty  product.  I 


don’t  find  N  disparaging  lo  aulo  me¬ 
chanics  at  aU.  Ifs  lust  an  assertion 
that  many  MicrQsoft  en^neers 
,  would  be  better  served  lolmd  an 
other  kneot  work 

'  I  personaby  don't  blame  the  engr 

I  oeersforlowiiuaHyMicrDsoftsoft- 
ware.  however  I  Name  the  cuHure 
I  andprocesesoHhecompaoyasa 
I  whole,  lusl  as  Bin  Gates  (Mm  he 
c-mail  missive  on  trustworthy  com- 
I  putmgalewyeatsago 
:  Greg  Bledsoe 
I  Senior  network  analyst. 
Columbus.  Go. 


Job  Hunt  Peeves 

SINCE  OETTINQ  OOWNStZED 
from  a  Brg  Ffve  consult  mg  brm 
two  years  ago.  I  have  been  on  nu¬ 
merous  interviews  and  have  a  lew 
pet  peeves  ol  my  own  (Xtnng  Hor¬ 
rors.' Qmcldjnk  49558)  Thebig- 
gestisbemgaskedtowaAithetv- 
mg  manager  through  my  resume 
TIrs  transMles  as.  1  <Mn‘l  have 
bme  to  read  yo(0  resume,  so  1  have 
no  idea  who  you  are  or  what  you've 
done  *  fve  spent  hours  researching 
the  prospective  employer.  I  am  luNy 


I 


prepared  to  taik  about  what  t  can  do 
but  I  never  get  a  chance  to  do  so 
Other  peeves  are  interviews  with 
everybody  I  could  Qos^  come  m 
coniad  with,  even  alter  the  manage* 
reahies  the  iob  NTi't  a  good  hi.  and 
msultmg  salary  offers  Whenlwasa 
hrmgmanagef  the  goal  was  to  get 
the  best  person  lor  Ihe  (Ob  a(  fv 
mantel  vdkje.  Hrmg  an  empioyne 
was  percewed  as  making  an  nvesi 
merit,  not  bargam-basement  shop¬ 
ping  It'sanoidnvaxmbUltrue- 
you  get  what  you  pay  for 
Ftooa  M.  Lamb 

llcnwi'r 

COMPUTERWORLO  wMcomes 
comments  from  Its  readers  Letters 
wi  be  edited  for  brevity  and  claniy 
They  should  be  addressed  lo 
Jane  &Me.  lehers  editor.  Com- 
puterworld.  PO  Box  9171. 1  Speen 
Street,  framm^^iam.  Mass  OtTOI 
Fax:  (506)6794843  E-mail 
Idterswcon^erworklcom 
Indude  an  address  WHt  phone 
runber  tor  immediaie  venhcation 

O  For  moie  Niters  on  these  m 
o(hw topes  goto 

wwwxomputafWDridxoiq/lenm 
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Color  im^eRUNNER  C3220 


Nothing  helps  you  improve  your  perspective 
on  the  day  quite  like  the  ability  to  do  things 
a  little  better,  a  little  faster,  and  a  little  more 
beautifully.  That's  why  Canon  has  added  a 
new  addition  to  our  imageRUNNER*  line.  With 
the  new  Color  imageRUNNER  C3220  and 
imageWARE  *  Publishing  Manager  Software,  you 
can  create,  publish  and  print  professional-quality 
color  booklets,  brochures  and  manuals.  You  can 
even  scan  and  e-mail  color  documents.  All  in  house. 


and  all  from  the  comfort  of  your  desktop.  And  with 
the  Color  imageRUNNER  C3220.  productivity 
Increases  while  color  stays  fast  and  affordable. 
How's  that  for  working  the  way  you  need  to? 
www.imagerunner.com  1-800-0K-CAN0N 
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SAIN  ADAPTAnUTY.  Can  your  network  carry  troth  voice  and  data  throughout  the  world?  Can  if 
at  your  own  pace,  while  stiii  giving  you  the  reliability  and  security  you  expect?  Can  it  deliver  new 
that  provide  greater  return  on  investment  than  you  may  have  thought  possible?  AT&T  has  the  networtling 
to  deliver  VoiP  services  and  applications  that  interoperate  with  the  industry’s  leading  VoIP  equipment  ptwW«£ 
Pius,  the  capacity  to  carry  ail  your  applications  forward-no  matter  how  heavy  the  load.  CAN  YOUR  NETUnK  RtimT 


AKT 

The  world’s  networking  company" 


For  t  network  that  can,  call  1-888-889"0234 

att.com/networking 
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QUICKSTUOY 

Error  Checking  and  Correction 

Error  checking  and  correction  is  the  process  of  de¬ 
tecting  errors  during  the  transmission  or  storage 
of  digital  data  and  correcting  them  automatically. 
This  usually  involves  sending  or  storing  extra  bits 
of  data  according  to  specified  algorithms.  Page  30 


SECURITY  MANAGER'S  JOURNAL 

Lack  of  Control 
Becomes  Nightmare 

Not  having  complete  control  of  network 
security  operations  is  a  nightmare  for  C.J. 
Kelly,  and  now  she  has  to  find  out  what's 
really  going  on  in  the  network.  Page  32 
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OPINION 

Make  Vendors  Pay 
For  Security  Flaws 

Bruce  Schneier  says  that  the  ultimate 
answer  to  security  vulnerabilities  is  to 
make  software  vendors  liable  for  the 
holes  in  their  products.  Page  34 


AKE  A  STROLL  through  almost  any  data 
(»nter  today,  and  you  will  see  pretty  much 
what  you  would  have  seen  a  decade  ago  — 
square  white  tiles  over  a  raised  floor, 
bright  florescent  lights,  little  red  fire 
alarms  everywhere  and  rows  of  faintly 
humming  computer  equipment  and  air 
conditioning  gear. 

But  this  familiar  scene  masks  some  big  chaises  in 
the  way  that  data  centers  are  built,  as  well  as  changes 
in  computer  technology  and  an  evolution  in  what 
data  centers  are  expected  to  accomplish.  Ultradense 
server  racks,  the  move  to  distributed  and  virtual  proc¬ 
essing.  a  requirement  for  instant  fail-over,  and  new 
requirements  for  IP  telephony  and  voice  over  IP  arc 
all  driving  changes  above  and  below  the  raised  floor. 

Keeping  Cool 

Perhaps  the  greatest  challenge  in  data  centers  today 
is  how  to  keep  those  rooms  —  and  the  components 
within  them  —  cooL  Facility  designers  tised  to  apply 
a  simple  rule  of  thumb:  If  the  room  was  going  to  be  x 
thousand  square  feet,  it  would  need  y  tons  of  air  con¬ 
ditioning.  Or  designers  relied  on  equipment  “name¬ 
plates*'  that  listed  peak  power  us^e  based  not  on 
coolii^  requirements  but  on 
safety  requirements. 

Those  simple  approaches 
don’t  work  well  today.  They’re 
likely  to  result  in  expensive 
overcooUng  of  the  overall  facil¬ 
ity,  even  as  temperatures  in 
small  areas  —  such  as  inside  a 
rack  of  blade  servers  —  soar. 

Ron  Hughes,  president  of 
California  Data  Center  Design 
Croup,  says  the  typical  data 
center  last  year  consumed  40 
watts  of  power  per  square  foot 
and  used  server  racks  that  con¬ 
sumed  2  kilowatts  each.  This 
year,  he's  designing  a  facility 
that  will  average  120  watts  per  square  foot  and 
support  racks  that  use  4  to  5  kilowatts. 

“And  if  you  look  at  the  latest  projections  <Tom  riP. 
Sun,  IBM.  Dell  and  so  on,  they  are  predicting  ''ba> 
racks  will  be  15  to  25  kilowatts  for  blade  servers. 
Hughes  says.  The  overall  direction  is  toward  small 
er  footprints,  increased  capacity,  increaseo  oowe< 
and  cooling  requirements.  Pve  seen  proiectinas  fo* 
blade  servers  as  high  as  30  kilowatts  per  rack,  ano 
that's  well  over  500  watts  per  square  foot " 

The  issue  at  those  levels  isn't  cooling  per  ^  out 
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QUICKSTUOY 

Error  Checking  and  Correction 

Error  checking  and  correction  is  the  process  of  de¬ 
tecting  errors  during  the  transmission  or  storage 
of  digital  data  and  correcting  them  automatically. 
This  usually  involves  sending  or  storing  extra  bits 
of  data  according  to  specified  algorithms.  Page  30 


SECURITY  MANAGER'S  JOURNAL 

Lack  of  Control 
Becomes  Nightmare 

Not  having  complete  control  of  network 
security  operations  is  a  nightmare  for  C.J. 
Kelly,  and  now  she  has  to  find  out  what's 
really  going  on  in  the  network.  Page  32 


OPINION 

Make  Vendors  Pay 
For  Security  Flaws 

Hrucc  Schneicr  says  that  the  ultimate 
answer  to  security  vulnerabilities  is  t«t 
make  s«>ltware  vendors  liable  for  the 
holes  in  their  products.  Page  34 


AKt  A  VI  Kt»i  I  thri'ugh  alnutsi  jn\  data 
center  tivjay.  and  you  will  sec  pretty  much 
what  y»iu  would  have  seen  a  decade  ag»»  — 
square  white  tiles  over  a  raisc*d  floor, 
bright  fiorescent  lights,  little  red  fire 
alarms  everywhere  and  rows  *»f  faintU 
humming  computer  equipment  and  air 
conditioning  gear. 

But  this  familiar  scene  masks  some  big  changes  in 
the  way  that  data  centers  are  built,  as  well  as  changes 
in  computer  tcchnol»>g\  and  an  evolutum  in  what 
data  centers  are  expected  to  aecompltsh.  Ultradense 
server  racks,  the  move  to  distributed  and  virtual  pnK  • 
essing.  a  requirement  for  instant  fail-oveT.and  nev\ 
requirements  for  II*  lelephom  and  voice  over  M’  .irc 
all  driving  changes  above  and  below  the  raised  flotir. 

Keeping  Cool 

Perhaps  the  greatest  challenge  in  data  centers  ntday 
is  how  to  keep  those  riMims  —  and  the  e4»mponenis 
within  them  —  eiH»l.  Facility  designers  used  to  apply 
a  simple  rule  of  thumb:  If  the  nmm  was  going  to  be  x 
thousand  square  feet,  it  would  need  y  tons  of  air  con 
ditioning.  Or  designers  relied  on  equipment  "name- 
plates’*  that  listed  peak  ptiwer  usage  based  not  «m 
ctkoling  requirements  but  on 
safety  requirements. 

Those  simple  approaches 
don't  work  well  today.  They'ix’ 
likely  to  result  in  expensive 
overcooling  of  the  overall  facil¬ 
ity.  even  as  temperatures  in 
small  areas  —  such  as  inside  a 
rack  of  blade  servers  —  soar. 

Ron  Hughes,  president  of 
California  Data  Center  Ocsign 
Gn>up.  says  the  typical  data 
center  last  year  consumed  40 
watts  of  power  per  square  foot 
and  used  server  racks  that  con¬ 
sumed  2  kilowatts  each,  rhis 
year,  he’s  designing  a  facility 
that  will  avenige  120  watts  per  square  foot  and 
support  racks  that  use  4  to  5  kilowatts. 

"And  if  you  UK*k  at  the  latest  projections  •rnni  *' 
Sun.  IBM.  Dell  and  so  on.  they  arc  prcdicnitg  n.f 
racks  will  be  15  to  25  kilowatts  for  blade  s«.-nor> 
Hughes  says.  ‘The  **verall  direction  is  t«m-ar.» 
cr  footprints,  increased  capacity,  increasec  ■sm-- 
and  CLHiling  requirements.  I've  seen  pnucciion* 
blade  servers  as  high  as  kilmvalts  ps*«  rack  m. 
that's  well  «>ver  500  watts  per  square  f«M»i 
The  issue  .it  those  levels  i.sn'i  ciHiling  i>e*  si  ni 
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IBM  Express  Middleware 


1.  Crates  of  patio  furniture  scanned. 

2.  Quantities  verified  on  secure  database. 

3.  Timetables  confirmed  online. 

4.  Inventory  added  to  order  automatically. 
5. 1,200  plastic  chairs  en  route  to  Key  West. 


IBM  EXPRESS  MIDDLEWARE  IS  SOFTWARE. 

Software  like  WebSphere*  Express  that's  designed 
to  help  mid-sized  businesses  connect  their  processes 
to  meet  business  goals.  On  demand  Designed  to  work 
with  the  IT  systems  you  have.  Designed  to  be  installed 
quickly  and  easily,  with  prices  starting  at  $600’  Ask  your 
Business  Partner  about  it  -  or  you  might  miss  the  boat 


26 


CWPtlTElWHlD  Nifcmker  1.  n<4 


TICNN0106Y 


w  CDmputefwQfia  com 


Cfiniintii’ii  f>i)m  pij.vv 
affordable  crwdrn}:  Hujihcs  says  that  at 
4t)  watts  per  '.quarc  foot,  it  c«»sts  S40t* 
per  square  fiuit  to  build  a  data  center, 
or  S^O  million  for  a  5(l.000-square-fivi'i 
faciliix  But  at  5t)ii  watts  per  square 
ttH»t  —  which  Hunbes  savs  we  could 
see  b\  well  within  the  lifetime  of 
any  data  center  built  today  —  the 
ami'unt  of  air  eondiiioninj:.  uninter¬ 
ruptible  power  supply  tl'I*S  >  units, 
power  jicneraiors  and  related  pear 
lumps  dramaiuMlly,  Construction  costs 
soar  to  55.0(Kl  per  square  foot,  and  the 
same  data  center  busts  the  budpei 
at  S25i>  million,  he  says. 

The  eoolinp  ehallenpe  is  compound¬ 
ed  when  a  data  center  sw  itches  to 
emergency  backup  power  UPS  units 
kick  in  insi.mth  in  a  power  failure,  so 
there  is  no  interruption  in  the  flow-  of 
electricity  f«>  computers.  But  there  is 
often  a  delay  of  15  ti>  i>l)  seconds  for 
generators  to  restart  the  ctKiling  units. 
That  hasn't  been  a  problem  in  the  past, 
but  for  some  new  er  equipment,  tem¬ 
peratures  can  rise  fast 
The  temperature  in  a  data  center 
that  averages  4(i  watts  per  square  foot 
will  rise  25  degrees  in  10  mmuicw  with 
etioling  shut  off,  syys  Bob  Sullivan,  a 
senior  consultant  .it  The  Uptime  Insti¬ 
tute  Inc.  in  Santa  Fe.  N.M.  But  in  places 
where  power  consumption  is  watts 
per  square  foot,  the  temperature  can 
rise  that  much  in  less  than  a  minute. 

The  si'lution.  Sullivan  says,  w  ill  be 
uninterruptible  etHiling  that  works  the 
same  way  as  uninterruptible  power. 
That  wviuld  imolvo  putting  air  fans, 
and  possibly  systems  that  pump 
chilled  water,  on  a  UPS.  he  says. 

Distributing  the  Data  Center 

Many  companies  today  have  just  oiw 
big  data  center,  or  maybe  two  or  more 
depending  on  the  locations  of  users. 

But  an  abundance  of  cheap  “dark" 
fiber,  plus  new  virtualization  software. 

Ls  enabling  a  much  more  flexible,  dy¬ 
namic  and  user-transparent  distribu¬ 
tion  of  processing  workloads. 

For  example,  the  Federal  Naiitmal 
Mortgage  Association  has  tw'o  data 
centers,  including  one  designed  to  be 
mostly  a  contingency  site.  Fannie  Mae 
IS  building  another  data  center  to 
replace  the  contingency  center  and 
will  then  evolve  both  centers  to  a  “ett- 
production  envin.mment.’*  says  Stan 
I  ofion,  director  of  Winiel  systems 
.It  the  Wa.shingion-based  mortgage 
financing  a>mpany. 

"We  have  a  few  applicatiorts  today 
that  we  consider  dual-site  production, 
in  operation  all  the  time,  so  if  wc  lost 
one  site,  it  would  be  seamless  to  the 


Building  a  Data  Center; 
Soaring  Costs 


user."  he  says.  "Over  time,  w'e  see  more 
jtid  more  applications  going  that  way." 

Ttiat  appnvach  helps  .avoid  single 
points  of  failure  and  makes  dis.isicr  rc- 
ciwery  fa,stcr  and  easier,  says  [oshu.n 
Aaron,  president  of  Business  Tcchnt>l- 
ogy  Partners  Inc-  in  New  York.  "And 
not  having  to  consididate  all  your  real 
estate  in  one  IvKation  aIU>ws  you  to  ne- 
gtitiate  belter  deals  in  off-the-bcaton 
path  areas " 

Thai  approach  is  leading  some  com¬ 
panies  to  bring  disaster  recovery  in- 
house.  rather  than  using  a  serv  ice 
from  another  company.  Sullivan  says. 
"Ytiu're  seeing  those  disaster  recovery 
facilities  used  also  for  development, 
testing  and  co-production."  he  says. 

Co-production  data  centers  carry 
w  ith  them  the  requirement  of  “contin- 
utjus  availability."  says  Terry  Rodgers, 
a  facilities  manager  at  Fannie  Mae.  In¬ 
creasingly.  u.scrs  are  saying  they  can't 
wail  a  few  hours  or  even  a  few  minutes 
to  bring  up  their  systems  at  .a  backup 
site  if  the  main  site  is  knocked  out  by  a 
fire  or  some  other  disa.ster.  Fall-over 
has  to  be  instantaneous,  and  that’s 
both  a  software  and  a  hardware  issue. 
Rodgers  notes. 

Redundancy  Times  Two 

Continuous  availability  requires  a  Tier 
IV'  data  center,  as  defined  by  The  Up¬ 
time  Institute.  Tier  IV  requires  two  in¬ 
dependent  electrical  systems,  all  the 
way  down  to  dual  pH)wer  cables  into 
the  computer  hardware.  Fannie  .Mac’s 
new  data  center  will  be  built  to  Tier  IV 
specs  and  will  offer  "real-time  back¬ 
up."  Rodgers  !says. 

V'isu  U.SaV  Inc.  has  two  50,000- 
squarc-ftHTt-plus  data  centers  in  the 
U.S..  one  on  each  coast.  Either  can  in¬ 
stantly  back  up  the  other.  Each  center 
is  rated  as  N-1.  which  means  that  every 
systera  with  n  components  has  at  least 
one  hot  spare.  For  example,  if  a  data 
center  has  six  UPS  modules  in  use. 
there  will  be  a  seventh  standing  by 
under  the  N*1  principle. 


j  Wiihin  .1  year,  Visa  will  migrate  to 
I  a  2(N-I)  architecture,  in  which  every 
I  system  is  completely  duplicated.  In  the 
I  above  example,  the  data  center  would 
h.ive  two  active  UPS  systcm.s.  each 
'  with  separate  cables  to  the  equipment 
and  each  with  N-1  redundancy. 

"Ten  years  ago.  N-1  allowed  for  a 
component  failure.'  .says  Richard 
I  Knight,  senior  vice  president  ft>r  oper- 
aiitins  at  Foster  City.  Calif.-based  Visa. 
"Now,  with  technology  changes  and 
everything  diial-powcrcd.  the  ultimate 
design  is  2(N-l).  It's  dual  systems  ver¬ 
sus  dual  components." 

In  addition  to  offering  the  highest 
levels  of  fault  tolerance.  2(N-I  >  will 
enhance  flexibility  because  an  entire 
system  can  be  taken  dowm  for  mainte¬ 
nance.  says  Jerry  Corbin,  V^isa's  vice 
president  for  central  facilities.  But.  he 
says,  "it  also  tremendously  increases 
the  ctimplexity  to  be  managed." 

Communications  Buildup 

Networking  issues  are  also  changing 
data  center  designs,  and  storage-area 
networks  pose  special  challenges. 

Aaron  says.  "SANs  typically  attach 
to  Fibre  ( lhannci  switches,  although 
IP  StZSl  is  making  inroads  in  the  mar¬ 
ket."  he  says.  "Today's  Fibre  Channel 
switches  require  their  own  infra- 
structure  and  must  bo  planned  for  dur¬ 
ing  data  center  design.  They  take  rack 
space  and  consume  a  lot  of  power." 

Indeed,  communications  considera¬ 
tions  will  increasingly  influence  data 
center  design.  Aaron  predicts.  "With 
the  pnilifcration  of  voice  over  IP.  the  I 
data  center  now  has  to  support  a  very  I 
mission-critical  application:  voice."  he  j 
says.  "How  do  you  provide  power  to  I 


the  IP  phones?  How  do  you  handle  911 
service?  How  do  you  provide  voice 
mail?  How  do  you  or  will  you  support 
unified  messaging?" 

Power-failure  relays  to  support  911 
service  haven't  traditionally  been  part 
of  a  data  center  design,  but  they  will 
be.  Aaron  says,  as  will  backup  power 
,  gear  for  voice  gateways,  media  gate¬ 
ways  and  IP  phtmes. 

Unified  Management 

IP  networks  bring  relief  as  well  as  chal¬ 
lenges.  Data  centers  are  starting  to  con- 
I  neci  environmental  monitoring  sensors 
to  the  data  network  so  both  facilities 
'  managers  and  IT  managers  have  a  uni¬ 
fied  view  of  the  health  of  all  systems. 

Facilities  equipment  manufacturers 
use  common  data-cxchangc  standards 
and  network  protocols  to  help  bridge 
the  facilities  and  IT  worlds.  For  exam¬ 
ple.  NetBoiz  Inc.  in  Austin  sells  IP- 
addressable  wireless  '‘monitoring  ap¬ 
pliances’"  that  can  be  fitted  with  secu¬ 
rity  cameras,  microphones  and  sensors 
for  humidity,  temperature  and  airflow. 
They  can  be  read  remotely  or  send 
alerts  by  e-mail. 

"The  cost,  size  and  complexity  of 
these  kinds  of  things  has  come  down." 
Aaron  .says.  “Plus,  they  arc  now  inte¬ 
grated  with  the  network  so  you  can  sec 
them  across  the  WAN  in  a  remote  lo¬ 
cation."  0 49777 _ 

MORE  ABOUT  DATA  CEHTHS 

Visa  extends  monrtohng:  The  company  is  moving 
lowaif}  eno-io-enc  service-level  moniiormg  in  the  data 
center  -  and  beyond  QuickLink  49773 
Cool  tools:  Here  are  lour  ways  engineers  are  dealing 
with  balancing  data  center  heat  toads 
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Confinued  from  page  23 
affordable  cooling.  Hughes  says  that  at 
40  watts  per  square  foot,  it  costs  $400 
per  square  fool  to  build  a  data  center, 
or  $20  million  for  a  50,000-square-f6ot 
facility.  But  at  500  watts  per  square 
foot  —  which  Hughes  says  we  could 
see  by  2009.  well  within  the  lifetime  of 
any  data  center  built  today  —  the 
amount  of  air  conditioning,  uninter¬ 
ruptible  power  supply  (UPS)  units, 
power  generators  and  related  gear 
lumps  dramatically.  Construction  costs 
soar  to  $5,000  per  square  foot,  and  the 
same  data  center  busts  the  budget 
at  $250  million,  be  says. 

The  cooling  challet^  is  compound¬ 
ed  when  a  data  center  switches  to 
emeigency  backup  {rower.  UPS  units 
kick  in  instantly  in  a  power  failure,  so 
there  is  no  interruption  in  the  flow  of 
electricity  to  computers.  But  there  is 
offen  a  delay  of  15  to  60  seconds  for 
generators  to  restart  the  cooling  units. 
That  hasn't  been  a  problem  in  the  past, 
but  for  some  newer  equipment,  tem¬ 
peratures  can  rise  fut. 

The  temperature  in  a  data  center 
that  averages  40  watts  per  square  foot 
will  rise  25  degrees  in  10  minutes  with 
cooling  shut  off,  says  Bob  Sullivan,  a 
senior  consultant  at  The  Uptime  Insti¬ 
tute  Inc.  in  Santa  Fe,  N.M.  But  in  places 
where  power  consumption  b  300  watts 
per  square  foot,  the  tem{>erature  can 
rise  that  much  in  less  than  a  minute. 

The  solutioa  Sullivan  says,  will  be 
uninterruptible  cooling  that  works  the 
same  way  as  uninterruptible  power, 
lliai  would  involve  putting  air  fans, 
and  i>ossibty  systems  that  pump 
rhllled  water,  on  a  UPS.  he  says. 

Distrifauling  the  Data  Center 

Many  companies  today  have  tust  one 
big  data  center,  or  maybe  two  or  more 
depending  on  the  locations  of  users. 

But  an  abundance  of  cheap  “dark” 
fiber,  plus  new  virtualization  software, 
b  enabling  a  much  more  flexible,  dy¬ 
namic  and  user-transparent  distribu¬ 
tion  of  processing  woridoads. 

For  example,  the  Federal  National 
Mortgage  Association  has  two  data 
centers,  including  one  designed  to  be 
mostly  a  contingency  site.  Fannie  Mae 
b  building  another  data  center  to 
replace  the  contingency  center  and 
wUl  then  evolve  both  centers  to  a  “co¬ 
production  environment.”  says  Stan 
Lofton,  director  of  Wintel  systems 
at  the  Washington-based  mortage 
financing  con^rany. 

“We  a  few  applications  today 
that  we  consider  dual-site  production, 
in  operation  all  the  time,  so  if  we  lost 
ooe  site,  h  would  be  seamless  to  the 


user,”  he  says.  “Over  time,  we  see  more 
and  more  applications  going  that  way.” 

That  approach  helps  avoid  single 
points  of  failure  and  makes  disaster  re¬ 
covery  faster  and  easier,  says  Joshua 
Aaron,  president  of  Business  Technol¬ 
ogy  Partners  Inc.  in  New  York.  “And 
not  having  to  consolidate  all  your  real 
estate  in  one  location  allows  you  to  ne¬ 
gotiate  better  deab  In  off-the-beaten- 
path  areas.” 

That  approach  b  leadii^  some  com¬ 
panies  to  bring  disaster  recovery  in- 
house.  rather  than  using  a  service 
from  another  company.  Sullivan  says. 
“You're  seeing  those  disaster  recovery 
facilities  used  also  for  development, 
testing  and  co-production,”  he  says. 

Co-production  data  centers  carry 
with  them  the  requirement  of  “contin¬ 
uous  availability,”  says  Terry  Rodgers, 
a  facilities  manager  at  Fannie  Mae.  In¬ 
creasingly,  users  are  saying  they  can’t 
wait  a  ^  hours  or  even  a  few  minutes 
to  bring  up  their  systems  at  a  backup 
site  if  the  main  site  b  knocked  out  by  a 
fire  or  some  other  disaster.  Fail-over 
has  to  be  instantaneous,  and  that’s 
both  a  software  and  a  hardware  issue. 
Rodgers  notes. 

Redundancy  Tmes  Two 

Continuous  availability  requires  a  Tier  , 
IV  data  center,  as  defmed  ^  The  U{>- 
time  Institute.  Tier  IV  requires  two  in- 
de{}endent  electrical  systems,  all  the 
way  down  to  dual  power  cables  into 
the  computer  hardware.  Fannie  Mae's 
new  data  center  will  be  built  to  Tier  IV 
specs  and  will  offer  “real-time  back¬ 
up,”  Rodgers  says. 

Visa  U.S.A.  Inc.  has  two  50,000- 
square-foot-plus  dau  centers  in  the 
U5..  one  on  each  coast.  Either  can  in¬ 
stantly  back  up  the  other.  Each  center 
b  rat^  as  N-»^l.  which  means  that  every 
system  with  n  components  has  at  least 
one  hot  spare.  For  example,  if  a  data 
center  has  six  UPS  modules  in  use, 
there  will  be  a  seventh  standing  by 
under  the  N-»^]  principle. 


Within  a  year,  Visa  will  migrate  to 
a  2(N'»1)  architecture,  in  which  every 
system  is  completely  duplicated.  In  the 
above  example,  the  data  center  would 
have  two  active  UPS  systems,  each 
with  separate  cables  to  the  equipment 
and  each  with  N+I  redimdancy. 

“Ten  years  ago.  N-«^l  allowed  for  a 
component  failure,”  says  Richard 
Knight,  senior  vice  president  for  oper¬ 
ations  at  Foster  City,  Calif.-based  Visa, 
‘^ow.  with  technology  changes  and 
everything  dual-(>owered,  the  ultimate 
design  b  2(N*1).  It’s  dual  systems  ver¬ 
sus  dual  components.” 

In  addition  to  offering  the  highest 
leveb  of  fault  tolerance,  2(N*1}  will 
enhance  flexibility  because  an  entire 
system  can  be  taken  down  for  mainte¬ 
nance.  says  Jerry  Corbin,  Visa’s  vice 
president  for  central  focUities.  But,  he 
says,  “it  also  tremendously  increases 
the  complexity*  to  be  managed.”  I 

Communications  BuMup 

Networking  issues  are  also  changing 
data  center  designs,  and  storage-area 
networks  pose  special  challenges, 

Aaron  says.  “SANs  typically  attach 
to  Fibre  Channel  switches,  although 
IP  SCSI  b  mairing  inroads  in  the  mar- 
ket,”  he  says.  'Today’s  Fibre  Channel 
switches  require  their  own  infra¬ 
structure  and  must  be  planned  for  dur¬ 
ing  data  center  design.  'They  take  rack 
space  and  consume  a  lot  of  power.” 

Indeed,  communications  considera¬ 
tions  will  increasingly  influence  data 
center  design,  Aaron  predicts.  “With 
the  proliferation  of  voice  over  IP.  the 
data  center  now  has  to  support  a  very 
mbsion-criticaJ  application:  voice,”  he 
says.  "How  do  you  provide  power  to 


the  IP  phones?  How  do  you  handle  911 
service?  How  do  you  provide  voice 
mail?  How  do  you  or  will  you  support 
unified  messaging?” 

Power-failure  relays  to  support  911 
service  haven’t  traditionally  l^n  part 
of  a  data  <renter  design,  but  they  vriH 
be,  Aaron  says,  as  wUl  backup  power 
gear  for  voice  gateways,  media  gate¬ 
ways  and  IP  phones. 

Unified  Management 

IP  netwolks  bring  relief  as  weU  as  chal¬ 
lenges.  Data  centers  arc  starting  to  con¬ 
nect  environmentaJ  monitoring  sensors 
to  the  data  network  so  both  facilities 
managers  and  IT  managers  have  a  uni¬ 
fied  view  of  the  health  of  all  systems. 

Facilities  equipment  manufacturers 
use  common  data-exchange  standards 
and  network  protocob  to  help  bridge 
the  faculties  and  IT  worlds.  Ifor  exam¬ 
ple.  NetBotz  Inc.  in  Austm  seUs  IP- 
addressable  wireless  “monitoring  a{»- 
pltances”  that  can  be  fitted  with  secu¬ 
rity  cameras,  microphones  and  sensors 
for  humidity,  temperature  and  airflow. 
They  can  be  read  remotely  or  send 
alerts  by  e-maU. 

The  cost,  size  and  complexity  of 
these  kinds  of  things  has  come  down." 
Aaron  says.  "Plus,  they  are  now  inte¬ 
grated  with  the  network  so  you  can  see 
them  across  the  WAN  in  a  remote  lo- 
carioa”  049777 _ 
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YOU’VE  BEEN  WAITING 
FOR  THE  NEXT  GENERATION  OF  NETWORKING 
AND  ALL  THIS  TIME,  IT’S  BEEN  RIGHT  THERE  WAITING  FOR  YOU 

Within  your  notebooks,  PDAs  and  networking  gear  are  chips  that  enable  you  to  more  securely  unleash  the  full  power 
Wireless  networking.  When  Dell,.  HR-  palmOne*  and  Sony  Ericsson,  are  looking  for  the  best  performance,  they  turn  to  Broadcom. 
In  fact,  our  54g™  wireless  UtN  chips  are  available  in  over  95%  of  major  notebook  brands  offered  with  802.1 1g  ’  And  with  Broadcom 
you  can  expect  interoperability  among  802.1 1aA)/g  networks  and  powerful  security  for  your  wireless  WN,  with  CCX,  WPA  and  AES 
technologies  built  in.  Whether  you’re  on  a  wireless  PAN,  LAN  or  WAN,  Broadcom  solutions  ensure  the  devices  you  use  today-and 
those  you  add  tomorrow— will  connect  reliably,  seamlessly  and  securely. 
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OpenVMS 

*SURVIVES®THRIVES 

The  ‘legacy’  operating  system  maintains  a  substantial  base  in  large  organizations, 
and  there’s  promise  of  new  interest  as  it  moves  to  64-bit  Itanium.  By  Drew  Robb 


OpenVMS  was  supposed 

to  have  died  a  slow  and  unheralded 
death  sometime  during  the  1990s. 
Labeled  passe  by  analysts  and  “legacy'* 
by  Windows  and  Unix  enthusiasts  in 
the  wake  of  the  distributed  computii^ 
boom  of  the  '90s,  it  hardly  merits  a 
mentioo  in  the  computer  press.  Yet  the 
operating  system  has  stubbornly  re¬ 
fused  to  go  away. 

Digital  Equipment  Corp.  developed 
the  Virtual  Memory  System  in  1977  for 
VAX  hardware  as  a  multiuser,  multi¬ 
tasking  operating  system.  (Digital  was 
eventually  absorbed  by  Compaq  Com¬ 
puter  C^orp..  which  merged  vntb 
Hewlett-Packard  Ca  in  2001.)  Open¬ 
VMS  is  a  later  version  that  runs  on 
VAX  and  Alpha  and  will  soon  be  avail¬ 
able  on  HP  Integrity  servers,  part  of 
the  company’s  64'bit  Itanium  line. 

One  of  the  perceived  drawbacks 
contributing  to  the  aura  of  doom 
around  OpenVMS  was  the  operating 
system’s  tie  to  expensive  proprietary 
hardware  —  first  VAX,  then  Alpha.  But 
now  that  Integrity  servers  ~  which 
also  support  HP-UX  Linux  and  Win¬ 
dows  —  run  OpenVMS.  its  users  will 


a  slight  yearly  decline  for  a  few  years, 
the  operating  system  is  now  staging  a 
revivd.”  says  high-performance  com¬ 
puting  guru  Terry  Shannon,  a  22-year 
VMS  veteran  in  Amarillo.  Texas,  who 
wrote  the  original  VMS  user  guide. 
“Some  of  the  folks  who  drank  the  Wm- 
dows  Kool-Aid  and  dumped  VMS  for 
Windows  are  now  coming  back." 

When  the  Chips  Are  Down 

OpenVMS/Aipha  systems  are  com¬ 
monly  used  by  financial  services, 
health  care,  manufacturing  and  aero¬ 
space  companies,  as  well  as  utilities 
and  state  lotteries  and  other  govern¬ 
ment  agencies.  HP  says  that  50%  of 
major  telecommunications  providers 
and  80%  of  chip  manufacturers  use 
OpenVMS.  Users  say  that  they’ve 
stuck  with  OpenVMS  because  the  op¬ 
erating  system  has  provided  all  of  the 
features  tbeyVe  needed,  along  with 
tested  stability. 

“We  chose  VMS  due  to  reliability, 
availability,  solid  performance,  the  fact 
that  it’s  mature  and  proven,  and  the 

ware,”  says  Joseph  Stenz,  senior  $ys 
terns  prt^rammer/administrator  at 


Hour  interition 
is  to  keep  on 
using  VMS  until 
doomsday,  as  long 
asKkeepsinno- 
vating  and  provid¬ 
ing  the  highest 


Albert  Einstein  Healthcare  Network  in 
Philadelphia.  “There  were  some  IBM 
mainframe  and  Windows  solutions  of¬ 
fered.  but  they  didn't  justify  moving  off 
of  Alpha." 

Einstein  Healthcare  will  be  instaUing 
a  new  AlphaServer  ES47  this  fall  It  will 
be  the  third  VMS/Alpha  system  within 
the  6,000-employee  campus  encom¬ 
passing  six  major  facilities.  Einstein 
Healthcare  also  has  over  100  Windows 
NT/2000  servers  in  an  enterprise 
LAN/WAN  (fi^e  relay/Asynchro- 
nous  Transfer  Mode)  environment. 

Einstein  Healthcare’s  Alpha-based 
systems  include  an  ES47  Model  2 
OpenVMS  machine  with  two  I-GHz 
Alpha  EV7  processors  with  L75MB 
Level  2  cache  (four-processor  capable) 
and  4GB  of  error  checking  and  cor¬ 
recting  memory.  Tliere’s  also  an  HP 
AlphaServer  ES47  Model  2  OpenVMS 


enterprise  server  with  a  memory  ex¬ 


pansion  up  to  8GB,  and  an  HP  Alpha 


Server  ES47  Model  2  OpenVMS  enter 


pnse  server  with  memory  expansion 
I  up  to  8GB  and  optional  RAID  memory 
support. 


Einstein  hasn’t  clustered  Us  Alpha 
I  environment,  which  also  includes  two 


economies  of  scale  that  users  of  those 
other  operating  systems  da 

Even  now.  howler,  annual  Open- 
VMS-related  hardware,  software  and 
services  earn  in  excess  of  S2  billion  an¬ 
nually  for  HP.  and  more  than  400,000 
VMS  systems  are  still  operating  world¬ 
wide.  according  to  a  source  at  the  com- 

.TOM; 

vs-ti  vAji  I 

M.,.  VAX' 

pany.  Those  numbers  are  backed  up  by 
Ken  Farmer  at  OpenVMS.org.  an  inde¬ 
pendent  Web  site  dedicated  to  Open- 

■  .1'  ...,  •  ..  .'.•rt.v 

VMS  users.  He  estunates  that  there  are 

10  million  users  worldwide  and  hun¬ 
dreds  of  thousands  of  installations  of 
OpenVMS. 

“There  were  about  456,000  VMS 
systems  almost  a  decade  ago,  and  after 
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HP  MSAIOOO  Fibre  Channel  storage 
arrays. 

The  ES47  supports  several  applica¬ 
tions  that  demand  reliability  and  high 
availability:  Siemens  Document  Imag¬ 
ing  23.4  for  billing  purposes;  IDXtend 
9.0  for  physician  billii^  and  scheduling; 
and  McKesson/HBOC  Treodstar  for 
decision  support  and  cost  accounting. 

Einstein  Healthcare  isn't  the  only 
user  graviuting  toward  Alpha.  Annual 
sales  of  Alpha  hardware  add  up  to  sev¬ 
eral  hundred  million  dollars,  according 
to  HP. 

Rising  to  the  Challenge 

A  major  impetus  behind  the  VMS/ 
Alpha  revival  appears  to  be  its  perfor¬ 
mance  during  the  Sept.  U  attacks  on 
New  York's  World  Trade  Center. 

According  to  David  Freund,  an  ana¬ 
lyst  at  IT  research  firm  Illuminata  Inc. 
in  Nashua.  N.H.,  several  financial  ser¬ 
vices  businesses  in  the  towers  and  nu¬ 
merous  others  in  the  immediate  vicini¬ 
ty  had  OpenVMS  dlsaster-rolerant 
clusters  with  backup  sites  outside  the 
area.  Every  one  of  them  had  their  oper¬ 
ations  running  just  moments  after  the 
catastrophe,  says  Freund. 

Following  that  awful  day.  OpenVMS 
seems  to  have  gained  new  prominence. 
In  some  IT  circles,  it’s  now  regarded  as 
the  creme  de  la  cr^me  in  disaster  re-  i 
covery  and  high  availability,  according  i 
to  users  and  analysts.  ^ 

"OpenVMS  uptimes  can  be  mea-  ' 

sured  in  years,"  says  Stenz.  “This  is 
certainly  preferable  to  a  culture  of  re¬ 
booting  and  disruption  that  pU^es 
other  platforms  due  to  viruses,  TVo- 
jans,  denial-of-service  attacks  and  end¬ 
less  patching  of  systems." 

OpenVMS  GlobaBiatian 

It  isn't  just  U5.  companies  that  are  re¬ 
maining  on  or  rediscovering  Open- 
VMS.  TTie  operating  system  has  main¬ 
tained  a  strong  hold  overseas,  accord¬ 


Why  OpenVMS  Hasn’t  Faded  Away 
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ing  to  (3olin  Butcher,  a  systems  archi¬ 
tect  at  systems  integrator  XDelta  Ltd. 
in  Bristol.  England,  who  has  20  years' 
experience  on  OpenVMS  for  clients 
such  as  HP.  Ikea  International  AS.  the 
U.K.’s  air  trafTic  control  service  and  the 
UJC.  National  Health  Service. 

When  Sony  Corp.  opened  its  Bar¬ 
celona  Center  for  Distribution  (BCD) 
in  Spain  12  years  ago.  it  trusted  its  busi¬ 
ness-critical  systems  to  VAX/VMS. 

The  facility  is  highly  automated  and 
runs  24  hours  a  day,  six  days  a  week  in 
order  to  keep  up  with  ti^t  deadlines 
for  the  distribution  of  Sony  and  Aiwa 
products  throughout  southern  Europe. 

Daniel  Sanchez  Reina.  BCD’s  IT 
manager,  lists  the  usual  reasons  for 
choosing  the  operating  system:  its 
it^ustness,  reliability,  powerful  fea¬ 
tures,  high  performance  and  memory 
management. 

“You  get  true  clustering  on  VMS  as 
the  number  of  machines  becomes 
transparent  to  you:  they  work  as  a  sin- 
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gle  unit,"  says  Sanchez  Reina.  “TTiis  is 
made  possible  by  the  fast,  powerful 
and  clusterwide  lock  manager." 

In  1998.  BCD  ported  VMS  from 
VAX  to  Alpha.  It  now  runs  a  three- 
machine  Alpha/VMS  cluster  in  con¬ 
junction  with  a  customs  system  and 
optical  archive  running  on  Window;; 
2000  Server,  an  HP  StorageWorks  EVA 
5(X)0  storage  array  and  an  Oracle  Corp. 
I  database. 

Future  Plans 

How  much  loitger  will  OpenVMS  re¬ 
main  viable? 

"Our  intention  is  to  keep  on  using 
VMS  until  doomsday,  as  long  as  it 
keeps  innovating  and  prnvidii^  the 
highest  standards  in  the  IT  world." 
says  Sanchez  Reina.  "We  have  no  plans 
to  migrate  to  VMS  on  Itanium,  at  least 
for  now." 

Tltat  seems  to  be  the  consensus 
among  IT  shops:  Stay  on  Alpha.  mi|V  H 
for  all  it's  worth,  and  keep  a  close  eye 
on  developments  in  the  VMS/Imegrity 
server  space. 

Like  BCD  and  many  other  users.  Ein¬ 
stein  Healthcare  has  no  immediate 
plans  to  migrate.  Stenz  says  he  has  a 
four-year  lease  on  Alpha  hardware  and 
is  unlikely  k>  change  during  that  period. 

"We  are  goii^  to  adopt  a  wait-and- 
see  approach  to  developments  on  Ita¬ 
nium  and  VMS. '  he  says. 

Meanwhile.  HP  has  had  OpenVMS 
Version  8.1  in  Held  testing  on  Itanium 
for  many  months.  At  the  recent  HP 
World  Cktnlerence.  ii  released  VersK>n 
8.2  for  testing-  TTie  a>mpany  expects 
the  fust  shipments  of  Open  VMS/In¬ 
tegrity  servers  ether  ia»c  »his  vear  or 
ear'y  nexi  yeai 


I  Few  anticipate  signiTicant  problems 
I  in  the  system  or  in  porting  applications 
from  Alpha  to  Itanium. 

"The  OpenVMS  APIs  arc  so  correct 
archileciuraily  that  ihc  operating  sys¬ 
tem  has  not  required  substantial 
change  since  its  original  design  in 
1977."  says  Bob  Gezcher.  a  software 
consultant  in  New  York  who  has  tested 
'  the  new  system.  “OpenVMS  on  lo- 
regriD  is  a  case  of  seamlessly  assimi¬ 
lating  a  new  processor,  not  u.sing  a 
high-tech  shoehorn  to  force  an  old  ar¬ 
chitecture  into  an  iU-fin'ing  shoe." 

I  XDelta's  Butcher  has  also  tested 
•  Itanium/VMS.  Other  than  needing 
some  time  to  figure  out  the  console  in¬ 
terface.  he  says  he  found  that  VMS 
seemed  to  run  and  behave  just  as  it  al- 
'  ways  does. 

Butcher  doers,  however,  express 
some  reservations.  "Performance 
I  might  be  an  issue  at  the  momeni."  he 
,  says.  'The  big  Alphas  pn»bab>y  outper- 
,  form  the  larger  Itanium  boxes,  bui  that 
I  will  change  with  time." 

Few  Alpha  users  are  in  a  hurry  to 
make  the  switch. 

'After  seeing  where  the  market  anc 
technology  directior  is  beading,  wc 
may  adiu.st  our  direciKm  alter  the  thirc 
year  of  our  lease."  says  kmsiein 
Healthcare's  Stenz.  "Depending  on 
how  things  play  out  on  Itanium  64  and 
VMS.  we  could  very  wcl  then  migrate 
to  that  architecture  or  ex«end/augmeni 
our  ES47.~  €»  SOOeS 


MOKOiK 


fo  a  «  «  wroors  MMt- proau:r  «w 
UpeeVUS  voi  gur  Ww<  sna 

^QucUirtSOOV 


OpenVMS  was  suppuscd 

to  have  died  a  slow  and  unheralded 
death  sometime  during  the  1990s. 
Libeled  passe  by  analysts  and  •'legacy" 
by  Windows  and  Uni.x  enthusiasts  in 
the  wake  of  the  distributed  computing 
btHim  of  the  ‘‘His.  it  hardly  merits  a 
mention  in  the  computer  press.  Yet  the 
operating  system  has  stubbornly  re¬ 
fused  to  go  awa>. 

Digital  Equipment  Corp.  developed 
the  Virtual  Memory'  System  in  l‘)77  for 
VAX  hardvvarc  as  a  multiuser,  multi¬ 
tasking  operating  system.  (Digital  was 
eventually  absorbed  by  Compaq  Com¬ 
puter  Corp.,  which  merged  with 
Hewlett-Packard  Co.  in  2001.)  Open- 
V'MS  is  a  later  version  that  runs  on 
V.AX  and  Alpha  and  will  soon  be  avail¬ 
able  on  HP  Integrity  servers,  part  of 
(he  company's  64-bi(  Itanium  line. 

One  of  the  perceived  drawbacks 
contributing  to  the  aura  of  doom 
around  OpenVMS  was  the  operating 
system's  tic  to  expensive  proprietary 
hardware  —  first  VAX.  then  Alpha.  But 
now  that  Integrity  servers  —  which 
also  support  HP-UX.  Linux  and  Win¬ 
dows  —  run  OpenVMS.  its  users  will 
benefit  from  the  same  manufacturing 
economics  of  scale  that  users  of  those 
other  operating  systems  do. 

Even  now.  however,  annual  Open- 
VMS-rclated  hardware,  software  and 
services  earn  in  excess  of  S2  billion  an¬ 
nually  for  HP.  and  more  than  400,000 
V'MS  systems  are  still  operating  world¬ 
wide.  according  to  a  source  at  the  com¬ 
pany.  Those  numbers  are  backed  up  by 
Ken  Farmer  at  OpenVMS.oig.  an  inde¬ 
pendent  Web  site  dedicated  to  Open¬ 
VMS  users.  He  estimates  that  there  are 
10  million  users  worldwide  and  hun¬ 
dreds  of  thousands  of  installations  of 
OpenVMS. 

■‘There  were  about  456.000  VMS 
systems  almost  a  decade  ago.  and  after 


I  a  slight  yearly  decline  for  a  few  years. 

I  the  operating  system  is  now  staging  a 
I  revival.”  says  high-performance  com- 
I  puling  guru  Terry  Shannon,  a  22 -year 
I  VMS  veteran  in  Amarillo.  Texas,  who 
wrote  the  original  VMS  user  guide. 

[  -Some  of  the  folk.s  w'ho  drank  the  Win- 
I  dows  Kool-Aid  and  dumped  VMS  for 
I  Windows  are  now  coming  back." 

When  the  Chips  Are  Down 

OpenVMS/Alpha  systems  arc  com¬ 
monly  used  by  financial  services, 
health  care,  manufacturing  and  aero¬ 
space  companies,  as  well  as  utilities 
and  state  lotteries  and  other  govern¬ 
ment  agencies.  HP  says  that  .S0'*o  of 
major  telecommunications  providers 
and  80"o  of  chip  manufacturers  use 
OpenVMS.  Users  say  that  they've 
stuck  with  OpenVMS  because  the  op¬ 
erating  system  has  provided  all  of  the 
features  they've  needed,  along  with 
tested  stability. 

“We  chose  VMS  due  to  reliability, 
availability,  solid  performance,  the  fact  | 
that  it's  mature  and  proven,  and  the 
stability'  of  both  the  hardw'are  and  soft 
ware."  says  Joseph  Stenz.  senior  sys 
terns  programmer/administrator  at 


Hour  intention 
is  to  keep  on 
using  VMS  untii 
doomsday,  as  long 
as  it  keeps  inno¬ 
vating  and  provid¬ 
ing  the  highest 


standards  in  the 


IT  world 


Albert  Einstein  Healthcare  Network  in 
Philadelphia.  '‘There  were  some  IBM 
mainframe  and  Windows  solutions  of¬ 
fered.  but  they  didn't  justify  moving  off 
of  Alpha.” 

Einstein  Healthcare  will  be  installing 
a  new  AlphaServer  ES47  thi.s  fall.  It  will 
be  the  third  VMS-  Alpha  system  within 
the  6,000-employee  campus  encom¬ 
passing  six  major  facilities.  Einstein 
Healthcare  also  has  over  100  Windows 
NT/2000  servers  in  an  enterprise 
LAN/WAN  (frame  relay/Asynchnv 
nous  Transfer  Mode)  environment. 

Einstein  Healthcare's  Alpha-based 
systems  include  an  ES47  Model  2 
OpenVMS  machine  with  two  1-GHz 
Alpha  EV7  processors  with  1.75MB 
Level  2  cache  (four-processor  capable) 
and  4GB  of  error  checking  and  cor¬ 
recting  memory.  There’s  also  an  HP 
AlphaServer  ES47  Model  2  OpenVMS 
enterprise  server  with  a  memory  ex 


pansion  up  to  8GB.  and  an  HP  Alpha 
Server  ES47  Model  2  OpenVMS  enter 


prise  server  with  memory  expansion 


up  to  8GB  and  optional  RAID  memory 
support. 


Einstein  hasn't  clustered  its  Alpha 
environment,  which  also  includes  two 


MANY  ORGANISATIONS  USING  VMS 

Move  from  VAX  to  Itanium  for 
al  purpose"  applications  without  hard 
ware  constraints,  but  don't  rush  it 

Stay  wrlh  VAX  if  you're  constrained  by 
bardwart'  or  software  issues 

"Consider  emulation  of  VAX  |jri;f{;r 

If  youi  Alpha  machuu",,  h,ive  mom  tm 

ably  on  an  Alpha,  VMS  pl.yttorm.  not  Win¬ 

iirnwth  in  terms  of  perioimanu- 

dows  ■ 
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HP  MSAIOOO  Fibre  Channel  storage 
arrays. 

The  ES47  supports  several  applica¬ 
tions  that  demand  reliability  and  high 
availability:  Siemens  Document  Imag¬ 
ing  23.4  for  billing  purposes;  IDXtend  ' 
9.0  for  physician  billing  and  scheduling:  ; 
and  McKesson/HBOC  Trendstar  for  j 
decision  support  and  cost  accounting.  ' 

Einstein  Healthcare  isn't  the  only- 
user  gravitating  toward  Alpha.  Annual 
sales  of  Alpha  hardware  add  up  to  sev¬ 
eral  hundred  million  dollars,  acci'rding 
to  HP. 

Rising  to  the  Challenge 

A  major  impetus  behind  the  VMS/ 

Alpha  revival  appears  to  be  its  perfttr- 
manee  during  the  Sept.  11  attacks  on 
New  York's  World  Trade  Center. 

According  to  David  Freund,  an  ana¬ 
lyst  at  IT  research  firm  llluminata  Inc. 
in  Nashua.  N.H..  several  financial  ser¬ 
vices  businesses  in  the  towers  and  nu- 


Porloi  niancr* 

OpenVMS  can  handle  3.000  simullane* 
ous  actrve  users  and  almost  2  million  data¬ 
base  transactions  per  minute  on  Oracle. 

Uytin-' 

It's  quite  normal  for  VMS  duster  uptimes 
to  be  measured  in  years.  User  after  user 
has  verified  this. 

Cioi.tL*rifirj 

OpenVMS  offers  shared-everything  clus- 
lertng.  j.e..  applications  running  on  96 
servers  can  simultaneously  write  to  the 
same  files  on  shared  disks.  If  one  server 
goes  down,  there's  no  data  loss,  and  the 
application  stays  up.  Similarly,  two  physi¬ 


cally  separate  data  centers  can  be  part  of 
a  single  VMS  duster.  This  feature  Kept 
several  Wall  Street  firms  in  business  on 
Sept.  11. 2001 


Known  as  volufne  shadovnng  on  WylS. 
the  feature  mimics  disk  drives  for  applica- 
lions  using  a  set  of  virtual  devices  Syn¬ 
chronously  mirrored  write  operations  are 
transparent  to  users. 


OpenVMS  can  nin  a  maximum  of  96 
nodes  In  one  duster,  tar  more  than  any 
Urw  or  Windows-based  systems.  That 
equates  to  over  3.000  processors 


The  maximum  distance  allowed  between 
disaster  recovery  sites  is  800  kilometers 
on  OpenVMS,  compared  with  XXI  kilo¬ 
meters  at  best  on  other  systems 


Open  VMS  is  ‘virlually  unhackable.'  says 
Ken  Farmer  of  OpenVMS-org.  Indeed,  at 
the  DefCon  9  Hacker  Conference  a  couple 
of  years  ago.  OpenVMS  beat  out  Windows 
NT  and  XP  Solans.  Lmux.  BSD  and  others 
and  was  graded  as  unhackable  by  the  best 
hackers  in  the  business,  according  to 
Farmer. 


mcrous  others  in  the  immediate  vicini¬ 
ty  had  OpenVMS  disaster-'olerant 
clusters  with  backup  sites  outside  the 
area.  Every  one  of  them  had  their  oper¬ 
ations  running  just  moments  after  the 
catastrophe,  says  Freund. 

Follow  ing  thal  awful  day.  OpenVMS 
seems  to  have  gained  new  prominence. 
In  s(imc  IT  circles,  it's  m»w  regarded  as 
the  creme  dc  la  creme  in  disa.ster  re¬ 
covery-  and  high  availability,  according 
to  users  and  analysts. 

'OpenVMS  uptimes  can  be  mea¬ 
sured  in  years."  says  Stenz.  -This  is 
certainly  preferable  to  a  culture  of  rc^- 
bnoting  and  disruption  that  plagues 
other  platforms  due  to  viruses.  Tro- 
ian.s.  dL*nial-of-ser\’icc  attacks  and  end¬ 
less  patching  of  sysictn.s." 

OpenVMS  GlobcUization 

li  isn't  just  U.S.  companies  that  arc  re¬ 
maining  on  or  rediscovering  Open¬ 
VMS.  The  operating  system  has  main- 


ing  to  Colin  Butcher,  a  systems  archi¬ 
tect  at  systems  integraf<»r  XDi  lta  Ltd. 
in  Bristol.  England,  whi'  has  20  years' 
experience  on  OpenVMS  for  clients 
such  as  HP.  Ikea  Intematiimal  AS.  the 
U.K.'s  air  traffic  control  servic-c  and  the 
U.K.  National  Health  Service. 

When  Sony  Corp.  opened  its  Bar¬ 
celona  Center  for  Distribution  (PCD) 
in  Spain  12  years  ago.  it  trusted  its  busi- 
nes.s-crilical  systems  to  VAX.- VMS. 

The  facility  is  highly  automated  and 
runs  24  hours  a  day.  six  days  a  week  in 
order  to  keep  up  with  tight  deadlines 
for  the  distribution  of  Sony  and  Aiwa 
products  throughout  southern  Europe. 

Daniel  Sanchez  Rcina.  BCD's  IT 
manager,  lists  the  u.sual  rea.sons  f«)r 
ehot>sing  the  operating  sys-tem:  its 
robustness,  reliability,  powerful  fea¬ 
tures.  high  performance  and  memory 
management. 

■'You  gel  true  clu.stcring  on  VMS  as 
the  number  of  machines  becomes 


gk-  unit."  says  Sanclie/  Rema.  "This  is 
made  possible  by  the  last.  p4*wvrful 
and  ciusterwide  hwk  niaiugcr' 

In  Bf'D  ported  VMS  fri»ni 
VAX  to  Alpha.  It  now  runs  a  three- 
machine  Alpha  VMS  cluster  in  con¬ 
junction  vvith  a  cusiom.s  system  and 
optical  archive  running  Window  s 
2000  Server,  an  HP  StorageWorks  FVA 
5(HK>  storage  array  and  an  Oracle  Corp 
database. 

Future  Plans 

How  much  longer  will  OpenVMS  re¬ 
main  viable? 

"Our  inientitin  is  to  keep  on  using 
VMS  until  do4*TJtsday.  as  kmg  as  it 
ki-cps  innovating  and  pnn  iding  the 
highest  standanis  in  the  IT  world." 
says  Sanchez  Reina  "We  haw  no  plans 
n»  migrate  to  V.MS  i*n  Itanium,  at  least 
ft'r  now." 

Thai  -se'cms  let  be  the  ettnsensus 
among  IT  sht>p.s:  Slay  on  Alpha,  milk  it 
fttr  all  it's  worth,  and  keep  a  close-  eye 
on  developments  in  the  \'MS  Incegnn 
server  space. 

Like  EiCF' and  many  other  users  Fin- 
stein  healrbeare  has  ni  immediate 
plans  to  migr.i»e  Steny  says  he  ha-  a 
ft'ur-year  lease  on  Aipha  hardware  ano 
i.‘-  unlikely  le  changi  during  th;«  per  oo 

Wf  are  gt/mg  •«  aot«f  i  a  wan  ano 
sec  approach  ’<•  devetopments  on  li;.- 
niumanoVMS.  he- says. 

Meanwhiit.  HP  has  had  t>pen\  Ms 
Version  H.I  in  fti-id  te*siing  on  Itanium 
loi  many  rntmths.  Ai  the  reevm  HI 
World  (  onleiem-e  il  released  Version 
R  2  tor  lesfing  The  compam  expi-ef  s 
the  firsi  -h.pnu-ius  i.i  OpenVMS.  in 
*egni\  M  n .  r.-  .-rK-.  .so.  •ho  v«  ai  ot 
i-ai  \  o*  v»  ai 


lew  .iniicipaie  signiricani  problems 
in  the  sy  stem  or  in  porting  .ipplic.ilions 
iV»»m  Alpha  lo  Jianium 
■■  {"he  (,>pcn\’.MS  .M*Js  are  soeurrcct 
architee-turally  ih.ti  the  ••peraiittg  sys- 
lem  has  not  required  subsiannai 
change  sioei-  its  originai  ue-stgn  in 
|977.“  says  H»ib  (..e/elicr.  a  Miftware 
consultant  in  New  Yt.rk  who  has  tested 
the  ne-w  system  i^piTi^  MS  on  In 
tegrity  is  a  case  of  seamU-vsty  assimi¬ 
lating  a  new  processor,  not  using  j 
high-tech  shoe-httm  lo  force  an  old  ar- 
chire-ciure  inutan  ill-ntting  shoe." 

XI  H-lta's  Huteher  has  aiM»  teste-d 
Itanium  VMS  Oiher  than  rte-e-ding 
some  time-  lo  figure  out  the-  cons»»k-  in 
le-rfacc.  he  says  he  found  iluH  VMS 
sceme-d  to  run  and  behave  lust  as  it  ai 
w-ays  den-s. 

Butcher  does,  however  express 
S4tme  tX'senations  iVrtormaruv 
might  K-  an  issue  at  the  moment.'  he 
says.  "The  big  Alpha.s  proKiMy  oiiii-vi 
form  the  larger  han‘un  Kixes.  hut  that 
will  change  with  limt 
Few  Atpha  users  an  in  a  hurry  u> 
make  the  switch. 

Af'ei  seeing  wberi  -Ih  Odirkci  ais 
*ethnoi..gy  diri-i  r<or  •*  is-aCing.  v»« 
may  a«9|(si<«ut  vlirei  oi  ai'i-i  'K  tbui 
veai  ot  oui  K-asc. '  s;n‘  I 
Fieaiihearc  s  .sieny  I  n  pi-reing  or 
how  ifutigs  play  out  or  lun  um  tsJ  ji>c 
\  M^.  wi  L-ouid  very  w»  >  hiT  migr...i 
f«'  thal  areh*reciur<  •»!  i-x  ei<v4.augnH-r  • 
our  FS47  C  50085 
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Error  Checking 
And  Correction 


t>F,FINn  ION 

Enw  checking  and  correction  (ECC) 

is  the  process  of  detecting 
errors  during  the  transmission 
or  storage  of  digital  data  and 
correcting  them  automatically. 
This  usually  involves  sending  or 
storing  extra  bits  of  data  accord¬ 
ing  to  specified  algorithms. 


•TmiSSCU.KAV 

HENfVER  we  send 
data  ~  whether  it's 
audio  signals  over  a 
phone  line,  a  data 
stream  or  a  legal  document  — 
to  somerme  else,  we  need  to 
know  that  what  arrives  on  the 
other  end  is  identical  to  what 
we  sent.  Similarly,  whenever 
we  store  data  on  disk  or  tape, 
we  need  assurance 
when  we  retrieve  it 
that  it  hasn't  been  al¬ 
tered.  Accurate  data 
absolutely  essential 
for  computations, 
record  keeping,  trans¬ 
action  processing  and  online 
commerce. 

Unfortunately,  storing  and 
transmitting  data  both  involve 
the  actions  of  physical  entities 
in  the  real  world:  electroirs, 
photons,  atoms,  molecules, 
wires,  contaas  and  more.  This 
means  there’s  always  some  de¬ 
gree  of  uncertainty  because 
background  noise  is  ever  pre¬ 
sent  in  our  physical  universe 
and  might  alter  or  corrupt  any 
given  data  bit. 

Error  Detection 

Early  in  the  computer  revolu¬ 
tion,  some  powerful  tech¬ 
niques  were  develrioed  nrsr  to 
detect  and  later  ut  --oirect  er¬ 


rors  in  data.  The  most  obvi¬ 
ous.  and  perhaps  least  eHi- 
cient,  way  to  find  dau  changes 
is  to  repeat  each  unit  of  data 
multiple  times  and  then  com¬ 
pare  the  copies.  This  method 
is  so  inefficient  that  it’s  not 
used  for  error  detection  — 
tbou^  the  same  idea  is  used 
in  RA1I>-I  (disk  mirroring)  for 
fault  tolerance. 

The  best-known 
error-detection  method 
is  called  parity,  where 
a  sir^e  extra  bit  is 
added  to  each  byte  of 
data  and  assigned  a 
value  of  1  or  0.  typical¬ 
ly  according  to  whether  there 
is  an  even  or  odd  number  of 
“I"  bhs.  The  receiving  system 
calculates  what  the  parity  bit 
should  be  and.  if  the  result 
doesn’t  match,  then  we  kiMw 
that  at  least  one  bit  has  been 
changed,  but  we  don't  kiraw 
I  which  bit  is  wrong.  It's  also 
possible  that  the  data  is  entire¬ 
ly  cocrect  and  the  parity  bit  is 
garbled.  If  two  bits  have  been 
altered,  however,  the  changp*; 
cancel  out  >tu‘  data  will  be 
wrong  out  tht  parity  bit  wwi’t 
signal  an  errot 
TSvo  other  established  er¬ 
ror-detection  techniques  are 
:hecksum  \add  up  all  the  bits 
>■'  rhe  entire  message  4ucu- 


ment  or  program  and  produce 
a  sii^e  sum)  and  cyclic  re¬ 
dundancy  check,  which  oper¬ 
ates  on  groups  of  bits  at  a  time 
and  uses  division,  not  addi¬ 
tion.  Checksums  and  CRCs 
are  calculated  before  and  after 
transmission  or  duplication 
and  then  compared.  However, 
checksums  and  CR(2s  alone 
can’t  verify  data  integrity, 
since  the  algorithms  are 
known  and  it's  possible  to  in¬ 
troduce  intentional  changes 
that  these  methods  won’t  de¬ 
lect  A  more  secure  way 
would  involve  cryptographic 
hash  fuACtioas,  one-way  matb- 
einatical  operations  whose  use 
of  secret  encryption  keys  pre¬ 
cludes  making  undetectable 
alterations. 

Error  Corraction 

Thus  techniques  exist  that 
will  let  us  find  errors  in  our 
data,  but  then  what?  One  way 
to  get  the  r^t  stuff  is  just  to 
ask  the  sending  party  or  de¬ 
vice  to  resend  it  If  there  are  a 
lot  of  errors  or  there  is  a  long 
communications  path,  howev¬ 
er.  such  as  when  we’re  sending 
data  halfway  around  this  noisy 
planet,  retransmission  can 
dramatically  slow  down  com¬ 
munications. 

What’s  needed  is  a  system 
that  will  find  any  errors  and 
correct  them  automatically.  It 
turns  out  that  we  can  create 
such  algorithms  (known  as 
error-correcting  codes,  which 
is  the  other  phrase  that  ECC 
sometimes  stands  for)  at  any 
degree  of  precision  we  want, 
but  with  a  trade-off  in  efTicien-  ' 
cy.  Most  of  the  time,  we  settle 
for  codes  that  can  detect  and 
correct  errors  in  one  bit  and  | 
detect  but  not  correct  errors 
I  in  two  or  more  bits.  <  A  simple 
illustration  of  how  this  works 
with  4  one-bii  erroi  is  shown 
‘i!  'he  box  above.' 
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Today.  ECC  is  used  in  many 
different  devices,  from  CD 
players  to  computers.  Perhaps 
its  best-known  use  is  in  spe¬ 
cial  ECC  RAM  for  servers,  in 
which  extra  bits  are  designed 
directly  into  the  dynamic 
RAM  chips. 

Looking  to  the  future.  ECC 
could  gam  increased  visibility 
and  adoption  in  the  wireless 
commumcations  market. 
Thar’s  because  the  popularity 
of  wireless  .'ommunications 
and  the  availability  of  wireless 
produces  are  both  predicted  to 
grow  :onsiderabiv.  but  the 


bandwidth  and  throu^put  of 
wireless  channels  will  remain 
considerably  lower  than  those 
of  hard-wired  connections. 
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Kay  is  a  Compuierworld  con- 
triWing  writer  in  Worcester, 
Mass.  You  can  contact  him  at 
rvsskay<^harter.net. 
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Lack  of  Control 
Becomes  Nightmare 
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NIDS.  based  on  the  freely 
available  Snort  program,  could 
take  advantage  of. 

We  found  some  good  basic 
information  online  at  Talisker 
Securiry  Wizardry  (http:// 
secwitywizardryuxmAapsJum) 
and  selected  a  product  to  test 
in  our  environment.  Net  Op* 
tics  Inc.  in  Sunnyvale,  Calif, 
has  a  port  aggregator  tap  that 
appears  to  allow  fuU-duplex 
monitoring  with  a  single  net¬ 
work  interface  card  and  has  a 
buffering  method  for  handling 
traffic  overload. 

Next,  we  had  to  decide 
where  to  deploy  the  taps.  Cer¬ 
tainly,  we  would  initially  de¬ 
ploy  one  at  the  firewall,  one  in 
the  demiUtarized  zone,  one  to 
monitor  VPN  traffic,  one  to 
monitor  WAN  traffic  and  sev¬ 
eral  on  critical  LAN  segments. 

Ah,  but  how  much  is  this 
going  to  cost?  Each  tap  costs 
about  $950.  That  seems  hi^ 
but  rd  rather  pay  more  for  a 
high-powered,  hilly  functional 
device  than  Mickey  Mouse 
with  less  expensive  devices 
that  don't  give  us  what  we 
need.  And  to  think  we  were  go¬ 
ing  to  spend  quite  a  chunk  of 
change  on  event  correlation 
software  because  we  thought 
we  were  seeing  all  the  traffic. 

The  good  news  is  that  we 
discovered  a  serious  issue  and 
found  a  way  to  address  it.  The 
timing  was  perfect  because  I 
was  able  to  adjust  the  budget 
forecast  to  include  the  solu¬ 
tion.  The  bad  news  is  that  I 
still  need  to  find  a  way  to  con¬ 
vince  my  manager  that  net¬ 
work  security  is  a  serious  is¬ 
sue.  To  be  effective  at  protect¬ 
ing  the  company's  information 
assets,  we  n^  complete  con¬ 
trol  over  IT  security  opera¬ 
tions.  This  would  require  an 
organizational  change  at  the 
highest  levels  of  the  company. 
The  political  implications  of 
such  a  chan^  are  as  daunting 
as  the  tasks  at  hand.  I 

WIUTDOYNlHi? 

Pie  weeks  lotfTial  is  writlBn  b|r  8  red  secu- 
fity  manager.  *CJ.  Kely.*  wlwse  name 
arid  emoioysr  have  been  disguised  tor 
obvKXB  reasom  Contad  her  at  msc|liBly9 
yahoo.com.  or  jom  the  discussion  n  our 

lonmOamMiMtO . 

To  find  a  corned  «chive  ol  our 
Seciftty  Manager's  Journals,  go  onHna  to 
O  mngalnrBrkLeQni/MdBuniil 


I  horses  seems  to  have  stopped. 

IT  has  a  number  of  projects 
under  way  for  upgrading  the 
infrastructure  at  the  server 
and  desktop  levels.  My  team 
has  been  actively  involved  in 
these  projects  and  has  provid¬ 
ed  the  security  requirements. 
Until  these  projects  are  com¬ 
pleted.  my  job  is  much  tougher. 
Which  brings  me  to  my  cur¬ 
rent  frustration. 

Cliieless 

We  have  no  idea  what  is  real¬ 
ly  going  on  in  the  network. 
(Please,  all  you  security  folks 
out  there  who  have  the  tools 
and  bodies,  no  need  to  re¬ 
spond.)  We  discovered  that  our 
network  intrusion-detection 
system  (NIDS)  is  seeing  mly 
50%  of  our  network  traffic.  The 
problem  is  that  we’ve  been  re¬ 
lying  on  port  spanning  to  do 
the  job.  The  theory  behind 
port  spannii^  is  that  a  copy 
of  every  packet  that  traverses 
the  switch  is  sent  to  a  monitor¬ 
ing  port 

We  \i$e  a  switch  port  analyz¬ 
er  (span)  and  remote  span  to 
copy  the  traffic  from  our  vari¬ 
ous  switches  to  the  port  where 
our  probe  resides.  The  NIDS 
passively  monitors  the  traffic 
and  generates  alerts  based  on  a 
rule  set  of  undesirable  activity. 
Trouble  arose  because  of  ses¬ 
sion  limits,  switches  that  don’t 
have  the  capability  of  carrying 
the  rspan  traffic  and  other 
technicalities.  We  also  found 
ourselves  in  a  tug  of  war  with 
IT  over  the  span  ports  them¬ 
selves.  When  you  get  an  alert 
from  the  NIDS  that  says  zero 
events,  you  know  something’s 
wrong.  Did  IT  just  snag  our 
span  port?  We  began  to  re¬ 
search  other  methods  of  "see¬ 
ing’'  all  the  traffic. 

What  we  needed  was  a  way 
to  tap  into  the  network  traffic, 
something  that  would  aggre¬ 
gate  foU-duplex  traffic  into  a 
single  data  stream  that  our 


()w  security  manager  discovers  that  finding 
out  whafs  realy  going  on  in  the  network  is 
adauntingtask.  ByCJ.  Kelly 


I  HAD  A  BAD  DREAM  the  Oth¬ 
er  ni^t.  In  it.  I  was  sleep¬ 
ing  in  the  back  seat  of  a 
convertible.  I  woke  up  be¬ 
cause  the  air  had  gotten  chilly 
and  the  car  was  swaying.  I 
rubbed  my  eyes  and  tried  to 
shake  the  cobwebs  out  of  my 
mind  as  I  peered  into  the  front 
seat.  No  one  was  driving.  I 
scrambled  over  the  front  seat 
and  took  the  wheel,  only  to 

discover  that  I  had  no  _ 

control  over  the  car. 

It’s  not  that  the  car  SFCU 
was  careening  out  of 
control;  it  had  a  mind 
of  its  own.  It  was 
steadily  takii^  me 

up  a  steep,  winding  - 

mountain  road  with  cliffs  on 
either  side.  The  road  got  nar¬ 
rower  and  narrower  before 
the  car  ffnally  came  to  a  stop. 

I  lor^ced  around  and  suddenly 
became  very  afraid.  Then  I  re¬ 
fused  to  continue  the  night¬ 
mare  and  woke  up. 

We  could  spend  some  time 
interpreting  it,  but  I  think  it’s 
pretty  clear  that  this  dream 
represents  how  I  feel  about 
managing  infnrmarinn  secu¬ 
rity.  Tm  drivii^  but  1  don't 
have  control;  we  haven't  gone 
off  a  cliffy  and  I'm  not  going  to 
be  happy  if  we  do.  I  have  a 
company’s  information  assets 
to  protect,  and  I  don't  want  to 
have  to  notify  our  customers 
that  their  personal  informa¬ 
tion  has  b^n  exposed  or  de¬ 
liver  the  news  tlut  our  net¬ 
work  just  got  “owned.”  To 
keep  the  bad  dreams  at  bay. 

I’m  going  to  have  to  make 
some  changes. 

For  starters,  I  had  it  out  with 
my  boss  the  other  day  and  told 
her  that  I  wanted  complete 
control  over  all  network  secu¬ 
rity  operations,  including  fire- 


SECUHTY 


wall,  virtual  private  network 
(VPN),  router  and  domain 
access  adminisiration.  Those 
things  are  currently  managed 
by  IT  operations,  not  securiry 
operations.  I  need  additional 
head  count.  I  need  tools.  And  1 
want  an  otganizational  change. 
I  don’t  care  about  policy.  I 
don't  care  about  process  and 
procedure  (Sarbanes-Oxley  be 
damned).  I  care  about  doing 
_  what  it  takes  to  se¬ 
cure  my  company's 
information  assets. 

What  brought  me 
to  this  point?  In  my 
last  column,  I  was 
fighting  the  virus 

-  war.  It’s  going  weU. 

We  hired  a  contractor  that 
does  nothing  but  track  down 
infected  systems,  scan  them 
for  viruses  and  spyware,  and 
apply  operating  system  patch¬ 
es.  You  may  ask.  ”Wby  in  the 
world  isn't  that  automated?" 
It's  a  long  story,  but  remem¬ 
ber,  I  inherited  this  network.  I 
didn't  build  it 
The  enterprise  antivirus 
system  is  scheduled  for  an  up¬ 
grade  within  the  next  week  or 
two.  and  that  should  allow  for 
tighter  controls  and  less  man¬ 
ual  effort  The  suspicious  traf¬ 
fic  identified  by  tlu  outside 
consultants  that  I  had  attrib¬ 
uted  to  viruses  and  Trojan 


lhaditoutwflthmy 
boss  and  toU  her! 
wanted  complete  con¬ 
trol  owsral  network 
security  operations. 


Real  World  Answers  for  Real  W'orld 
Windows  Security  Questions 


Vital  tips  on  hew  to 
Windows  systams  m 
more  trastwopthy,  a 
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Get  intensive,  practicai  education  that  will 
specifically  address  the  role  of  Microsoft  in  identity 
and  security  infrastructure,  as  well  as  new  trends 
and  the  future  of  Microsoft's  next  generation 
secure  computing.  Learn  about  patch  management, 
hardening  Windows  servers  against  attacks  and 
what  to  do  after  an  intrusion  is  detected. 

This  program  is  for  IT  professionals  with 
responsibilities  for  areas  such  as  security,  intrusion 
detection,  desktops,  risk  assessment,  compliance, 
business  continuity,  integration  and  Web 
applications. 
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winSEC'  2004  Is  delivered  by  well-respected  figures 
In  the  Microsoft  Windows  security  Industry: 


Mark  MinasI 
Chief  Scientist 
MR&p 


George  Spalding 
Executive  Consultant 
Pink  Elephant 


^IDG  www.winsec200a.com 
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Ascential  to  Develop 
New  User  Interface 

•  Data  Bitegration  application 
vendor  Ascential  Software  Corp. 
in  Westboro,  Mass.,  last  week  an- 
nouncad  a  new  self*adaptine  in' 
lerfact  for  its  Enterprise  Integra¬ 
tion  Suite.  The  interface  will  be 
able  to  antictpate  users'  tasks 
and  offer  eiecution  guidance,  ac¬ 
cording  to  the  company.  H  will  be 
in  beta  in  the  first  quartv  of  2005. 


Sendmail  Offers 
Content  Manager 

■  Mailstream  Content  Manager 
from  e-mal  security  vendor 
Sendmail  Inc.  is  avalabte  now. 
The  product  features  e-mail  con¬ 
tent  policy  management  and  anti¬ 
spam  and  virus  protection.  It  also 
has  a  management  console  that 
almvs  business-spodfic  policies 
to  be  easily  changKf  or  added, 
according  to  the  Emeryvtte. 

CaM..  company.  The  application 
stvts  at  SW.OOO  for  500  users, 
with  a  one-year  antivirus  and 
antispam  updMe  subscriptioa 


Microsoft  Releases 
Migration  Tool  Kit 

•  Microeoft  Corp.  released  a  free, 
downloadabie  migration  tool  kit 
for  the  Virtual  Server  Migration 
20(S  software  it  recently  re¬ 
leased.  The  Virtuai  Server  2005 
Mgration  TooNdt  erudfles  users 
with  server  hardware  running 
Wmlows  NT  4.0.  Server  2000  or 
Server  2003  to  migrate  to  a  vir¬ 
tual  macMne  environment  njn- 
ning  on  Virtual  Server  20(%.  The 
tool  hh  is  also  kitended  to  help 
usm  migrate  VMwarelnc.'svtr-  | 
total  machine  software  to  Mtero- 
sofTsVirtiiM  Server  2005.  I 


Inovis  Certifies 
Interoperability 

•Inovie  be.  announced  that  Ms 
BizManager  3.0  Iradkig  partner 
cofwwctMty  software  tas  been 
certilied  Mr  AopMcabMty  State¬ 
ment  2  kiteioparalaWy.  BMitan- 
ager  3.0  wM  be  ganeraly  avMlible 
in  December,  the  Mpharatta.  Oa.- 
beeed  company  said. 
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Make  Vendors  Pay 
For  Security  Flaws 


INFORMATION  INSECURITY  is  costing  US  bil¬ 
lions.  We  pay  for  it  in  theft  —  information  and 
financial  theft.  We  pay  for  it  in  productivity  loss, 
both  when  networks  stop  working  and  in  the 
dozens  of  minor  security  inconveniences  we  all 
have  to  endure.  We  pay  for  it  when  we  have  to  buy  se¬ 
curity  products  and  services  to  reduce  those  other  two 
losses.  We  pay  for  security,  year  after  year. 

Unfortunately,  all  the  money  we’re  spending  isn’t 
fixing  the  problem.  We’re  paying,  but  we  still  end  up 
with  insecurities.  The  problem  is  insecure  software. 


Ii’s  bad  design,  poorly  im¬ 
plemented  features,  inade¬ 
quate  testing,  and  security 
vulnerabilities  from  soft¬ 
ware  bugs.  The  money  we 
spend  on  security  goes  to¬ 
ward  dealing  with  the  ef¬ 
fects  of  insecure  software. 

And  that’s  the  problem. 

We’re  not  paying  to  im¬ 
prove  the  security  of  the 
underlying  software.  We’re 
paying  to  deal  with  the  vul¬ 
nerabilities  rather  than 
eliminating  them. 

The  only  way  to  improve 
the  situation  is  for  the  ven¬ 
dors  to  fix  their  software, 
and  they  won’t  do  that  until  it's  in 
their  financial  best  interest  to  do  so. 

Today,  the  costs  of  insecure  software 
aren’t  borne  by  the  vendors  that  pro¬ 
duce  it  In  economics,  this  is  knowTi  as 
an  externality;  the  cost  of  a  decision 
that’s  borne  by  people  other  than 
those  who  are  making  the  decision. 

There  are  no  real  consequences  to 
the  vendors  for  having  bad  security  or 
for  having  low-quality  software.  Even 
worse,  the  marketplace  often  rewards 
low  quality.  More  precisely,  it  rewards 
additional  features  and  timely  release 


dates,  even  if  they  come  at 
the  expense  of  quality. 

If  we  expect  software 
vendors  to  reduce  the 
number  of  features  in  their 
products,  lengthen  devel¬ 
opment  cycles  and  invest 
in  secure  software  devel¬ 
opment  processes,  it  needs 
to  be  in  their  financial  best 
interest  to  do  so.  If  we  ex¬ 
pect  corporations  to  spend 
significant  resources  on 
their  own  network  security 
—  especially  the  security 
of  their  customers  —  it 
needs  to  be  in  their  finan¬ 
cial  best  interest  to  do  so. 

Liability  law  is  one  way  to  make  im¬ 
proving  security  in  the  best  interests 
of  those  organizations. 

The  risk  of  liability  raises  the  costs 
of  doing  it  wrong  and  therefore  in¬ 
creases  the  amount  of  money  a  CEO  is 
willing  to  spend  to  do  it  right.  Security 
is  risk  management;  liability  fiddles 
with  the  risk  equation. 

Basically,  we  have  to  tweak  the  risk 
equation  so  a  vendor’s  CEO  cares 
about  actually  fixing  the  problem.  And 
putting  pressure  on  his  balance  sheet 
is  the  best  way  to  do  that. 


Clearly,  this  isn't  all  or  nothing. 
There  are  many  parties  involved  in  a 
typical  malicious  attack.  There’s  the 
company  that  sold  the  software  with 
the  vulnerability  in  the  first  place. 
There's  the  person  who  wrote  the  at¬ 
tack  tool.  There’s  the  attacker  himself, 
who  used  the  tool  to  break  into  a  net¬ 
work.  There’s  the  owner  of  the  net¬ 
work,  who  was  entrusted  with  defend¬ 
ing  that  network. 

One  hundred  percent  of  the  liability 
shouldn’t  fall  on  the  shoulders  of  the 
vendor,  just  as  one  100%  shouldn't  fall 
on  the  attacker  or  the  network  owner. 
But  today.  100%  of  the  cost  falls  direct¬ 
ly  on  the  network  owner,  and  that  sim¬ 
ply  has  to  stop. 

We  will  always  pay  for  security.  If 
software  vendors  have  liability  co.sis. 
they’ll  pass  those  on  to  us.  It  might  not 
even  end  up  being  cheaper  than  what 
we’re  paying  today.  But  as  long  as 
we’re  going  to  pay.  we  might  as  well 
pay  10  fix  the  problem.  Forcing  the 
software  vendor  to  pay  to  fix  the 
problem  means  that  it  might  actually 
get  fixed. 

Currently,  there  is  no  reason  for  a 
software  company  not  to  offer  feature 
after  feature  after  feature.  Liability 
forces  software  companies  to  think 
twice  before  changing  something. 

It  forces  them  to  protect  the  data 
they’re  entrusted  with.  Liability  means 
that  those  in  the  best  position  to  fix  a 
problem  are  actually  responsible  for 
that  problem. 

Information  security  isn’t  a  techno¬ 
logical  problem,  it's  an  economics 
problem.  And  the  way  to  improve  in¬ 
formation  technology  is  to  fix  the  eco¬ 
nomics  problem.  Do  that,  and  every¬ 
thing  else  will  follow.  O  50161 
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Make  Vendors  Pay 
For  Security  Flaws 


INFORMATION  INSECURITY  is  costing  US  bil¬ 
lions.  We  pay  for  it  in  theft  —  information  and 
financial  theft.  We  pay  for  it  in  productivity  loss, 
both  when  networks  stop  working  and  in  the 
dozens  of  minor  sectuity  inconveniences  we  all 
have  to  endure.  We  pay  for  it  when  we  have  to  buy  se¬ 
curity  products  and  services  to  reduce  those  other  two 
losses.  We  pay  for  security,  year  after  year. 

Unfortunately,  all  the  money  we’re  spending  isn’t 
fixing  the  problem.  We’re  paying,  but  we  still  end  up 
with  insecurities.  The  problem  is  insecure  software. 


It’s  bad  design,  poorly  im¬ 
plemented  features,  inade¬ 
quate  testing,  and  security 
vulnerabilities  from  soft¬ 
ware  bugs.  The  money  we 
spend  on  sectirity  goes  to¬ 
ward  dealing  with  the  ef¬ 
fects  of  insecure  software. 

And  that's  the  problem. 

We're  not  paying  to  im¬ 
prove  the  security  of  the 
underlying  software.  We’re 
paying  to  deal  with  the  vul¬ 
nerabilities  rather  than 
eliminating  them. 

The  only  way  to  improve 
the  situation  is  for  the  ven¬ 
dors  to  fix  their  software, 
and  they  won’t  do  that  until  it’s  in 
their  financial  best  interest  to  do  sa 

Today,  the  costs  of  insecure  software 
aren't  borne  by  the  vendors  that  pro¬ 
duce  it  In  economics,  this  is  known  as 
an  externality:  the  cost  of  a  decision 
that’s  borne  by  people  other  than 
those  who  are  making  the  decision. 

There  are  no  real  consequences  to 
the  vendors  for  having  bad  security  or 
for  having  low-quality  software.  Even 
worse,  the  maric^lace  often  rewards 
low  qiiality.  More  precisely,  it  rewards 
additional  features  and  timely  release 


dates,  even  if  they  come  at 
the  expense  of  quality. 

If  we  expect  software 
vendors  to  reduce  the 
munber  of  features  in  their 
products,  lengthen  devel¬ 
opment  cycles  and  invest 
in  secure  software  devel¬ 
opment  processes,  it  needs 
to  be  in  their  financial  best 
interest  to  do  so.  If  we  ex¬ 
pect  corporations  to  spend 
significant  resources  on 
their  own  network  security 
“  especially  the  security 
of  their  customers  —  it 
needs  to  be  in  their  finan¬ 
cial  best  interest  to  do  sa 
Liability  law  is  one  way  to  make  im¬ 
proving  security  in  the  best  interests 
of  those  organizations. 

The  risk  of  liability  raises  the  costs 
of  doing  it  wrong  and  therefore  in¬ 
creases  the  amount  of  money  a  CEO  is 
willing  to  spend  to  do  it  ri^t.  Security 
is  risk  man^ment;  liability  fiddles 
with  the  risk  equation. 

Basically,  we  have  to  tweak  the  risk 
equation  so  a  vendor’s  CEO  cares 
about  actually  fbdng  the  problem.  And 
putting  pressure  on  his  balance  sheet 
is  the  best  way  to  do  that 


Clearly,  this  isn’t  all  or  nothing. 
There  are  many  parties  involved  in  a 
typical  malicious  attack.  There’s  the 
company  that  sold  the  software  with 
the  vulnerability  in  the  first  place. 
There's  the  person  who  wrote  the  at¬ 
tack  tool  There’s  the  attacker  himself, 
who  used  the  tool  to  break  into  a  net¬ 
work.  There’s  the  owner  of  the  net¬ 
work,  who  was  entrusted  with  defend¬ 
ing  that  networic. 

One  hundred  percent  of  the  liability 
shouldn’t  foil  on  the  shoulders  of  the 
vendor,  just  as  one  100%  shouldn’t  foil 
on  the  attacker  or  the  network  owner. 
But  today,  100%  of  the  cost  foils  direct¬ 
ly  on  the  networic  owner,  and  that  sim¬ 
ply  has  to  stop. 

We  will  always  pay  for  security.  If 
software  vendors  have  liability  costs, 
tbeyll  pass  those  on  to  us.  It  might  not 
even  end  up  being  cheaper  than  what 
we're  paying  today.  But  as  long  as 
we’re  going  to  pay.  we  mi^t  as  well 
pay  to  fix  the  problem.  Forcing  the 
software  vendor  to  pay  to  fix  the 
problem  means  that  it  might  actually 
getfbced. 

Currently,  there  is  no  reason  for  a 
software  company  not  to  offer  feature 
after  feature  ^er  feature.  Liability 
forces  software  companies  to  think 
twice  before  changing  something. 

It  forces  them  to  protect  the  data 
they’re  entrusted  with.  Liability  m^an* 
that  those  in  the  best  position  to  fix  a 
problem  are  actually  responsible  for 
that  problem. 

Information  security  isn't  a  techno¬ 
logical  problem,  it’s  an  economics 
problem.  And  the  way  to  improve  in¬ 
formation  technology  is  to  fix  the  eco¬ 
nomics  problem.  Do  that,  and  every¬ 
thing  elM  will  follow.  O  50191 
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THE  LEADER  IN  CUSTOMER 
ANALYTIC  APPLICATIONS  BRINGS 
YOU  A  NEW  GENERATION 
OF  ENTERPRISE  Bl  SOLUTIONS. 


BUSINESS  SAP  SAS 

OBJECTS 


Cutthroat  competition,  intense  profit  pressure.  Price  erosion.  Deciining  ioyaity.  Business  today 
dictates  working  not  just  harder,  but  smarter.  Meeting  these  new  business  demands,  and 
overcoming  the  inherent  challenges,  requires  a  new  generation  of  Bl  solutions  unavailable  from 
traditional  Bl  vendors. 

Siebel,  the  leader  in  customer  analytic  applications,  brings  you  Siebel  Business  Analytics -Bl 
solutions  that  empower  everyone  with  actionable  real-time  insight  from  the  largest  data 
warehouses  and  across  enterprise  sources.  With  a  mission-critical  architecture  that  supports 
multi-terabytes  of  data,  thousands  of  users,  and  24x7  availability.  And  proven  application 
solutions,  with  built-in  industry-specific  best  practices  that  are  flexible,  quickly  implemented, 
integrate  with  your  infrastructure,  and  provide  low  TCO. 

Our  innovative  Bl  solutions  have  catapulted  Siebel  into  the  leadership  position  in  analytic 
applications  for  sales,  marketing,  service,  and  senior  management,  with  over  75%  of  our  customers 
using  Siebel  Business  Analytics  beyond  CRM  and  across  a  full  range  of  enterprise  sources. 

Learn  why  the  most  analytically  sophisticated  companies  rely  on  Siebel.  Visit  www.siebel.com/newgen 


SIEBEL. 

Business  Analytics 

CUSTOMER  INSIGHT  •  ENTERPRISE  INTELLIGENCE 
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DB2  DOESN’T  LOCK  YOU  IN. 

DB2  IS  middleware,  but  it  is 
anything  but  middle-of-the-road. 

In  fact.  DB2  is  part  of  an  innovative 
family  of  information  management 
products  that  can  integrate  and 
actually  add  insight  to  your  data. 
That's  big. 

0B2  is  also  the  leading  database 
built  on  and  optimized  for 
Linux.  UNIX  and  Windows,  built 
to  take  full  advantage  of  your 
existing  heterogeneous  and  open 
environments,  and  built  to  enable 
true  grid  computing. 


Plus,  there's  no  constricting  contract. 

DB2  is  also  middleware  with  an  eye  on 
your  resources.  All  of  them.  An  ITG 
study  showed  overall  costs  for  Oracle 
Database  are  up  to  four  times  higher 
than  DB2.  A  Solitaire  study  found  that, 
on  average.  Oracle  Database  required 
25%  more  time  to  manage  than  DB2i 
And  the  Transaction  Processing 
Performance  Council  showed  DB2  as 
the  overall  pnce/performance  leader  for 
TPC-C  on  Linux,  UNIX  and  Windows. 
Ahead  of  both  Oracle  Database  and 
Microsoft  SOL  Sen/er; 


Then  there's  this;  Oracle  will  drop  the 
current  level  of  support  for  Oracle 
Database  8i  at  the  end  of  2004.  Meaning 
limited  support,  higher  cost  or  a 
complete  migration  to  current  versions. 
Rxtunatefy.  IBM  offers  ongoing,  around- 
the-clock  sen/ice  and  support  for  DB2. 

Why  not  move  up  to  middleware  that 
makes  sense?  Through  the  end  of  the 
year,  you  can  get  IBM  DB2  Universal 
Database  by  taking  advantage  of 
our  extremely  compelling  trade-up 
promotion.  Visit  ibm.coffn/db2/swap 
today  to  find  out  if  you  qualify. 
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Watch  Your  Weblog 

Dangers  lurk  in  corporate 
weblogs,  and  sponsorii^ 
or  creating  one  is  rife  with 
legal  liabilities.  Here  are 
some  precautions  you 
should  take.  Page  40 


OPINION 

What’s  the  Problem? 

Too  many  people  look  for  a  solution  when 
they  haven’t  yet  identified  the  problem,  says 
Paul  Glen.  In  their  role  as  problem  solvers, 
IT  leaders  need  to  help  their  clients  elimi¬ 
nate  this  fiizzy  thinking.  Pige  44 
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OUTSOURCING 


umi 


CHANiHNe  NEEDS  IMNMiUSUU^YEJUi^OUT^ 
ASKTNESElOQUESTIONSTOKEEPrrONTIIEM/UHLBYIIjU^ 


ANY  COMPANIES  that  sign  on 
for  outsourcing  services  file 
away  the  contract  and  pull  it 
out  only  when  the  thre^,  five- 
or  10-year  term  comes  to  an 
end.  But  it’s  important  to 
regularly  review  not  only 
whether  the  original  contract 
is  still  meetii^  your  needs  but 
also  whether  last  year’s  outsourcing  plan  is 
still  relevant  to  this  year’s  business  strategy. 

“Outsourcing  has  become  an  integral  part  of 
our  IT  governance  strategy,"  says  Pavan 
N^am,  CEO  of  Cendura  Corp.,  a  Mountain 
View,  Calif.-based  application  management 
firm.  “Once  you  accept  that,  you  realize  it 


THE 

MECHMIIC 

Tuning  up  your  outsourcing 
stritogy  foguiros  a  rtittad 
ffloehanic  wHh  *mero  ttiM 
tfw  abilty  to  BMwn  van- 
don,”  My  Rob^  McfMI. 
HarcCaconMdAdan 
Brown  in  "Buddtog  tiw  Ven¬ 
dor  Managomont  Function.”  a 
March  2004  report  from  For- 
rastor  Raaaarch  Ine. 

The  peraon  who  develops 
and  reviaws  the  outiourcing 
strategy  ahouM  report  to  the 
CX).  they  say.  He  needs  to 
laxiantand  the  strategic  dh 
roetton  of  the  organization, 
hew  the  buainass  is  run,  how 
to  nagottata  wHh  experts  and 
hew  to  form  aMancas.  Hera 
are  some  other  aUb  they  see 
as  hay  to  this  position: 

■Strong  oral  and  written 


■Contract  negotiation  afclb 
for  complex  agreements 


■  The  aUNy  to  work  with 


■  KnowWga  or  background 
in  matrice  and  maaaurwnant 
with  particular  anphaab  on 
satvtolavaiagroataante 


■Eaportoace  with  vartouB 
euttourcing  and  eordcaa 
oHartoga.  and  pricing  and 


■Undaratandbig  of  and 


■  Knewbdga  of  and  txpari- 
ence  wRh  entorprba  lennee 


erm't  good  emdUtoaa  tor 
thb  rob  herwe  they  tack  a 
strong  background  to  fT.  Me 
atoboresay 
tocfadafTn 


-KaHilmnlitfyiHuka 


needs  to  be  reviewed  not  on  an  annual 
but  on  a  quarterly  basis." 

"Too  often,  {an  outsourcing  con¬ 
tract!  becomes  sbclfware,"  says  Lome 
Scardino,  research  director  at  Stam¬ 
ford.  Conn. -based  Gartner  Inc.  “I  tell 
clients  they  should  get  into  the  habit  of 
reviewing  {their  outsourcing  strategy) 
every  six  months." 

Mergers,  acquisitions,  divestitures, 
changes  in  the  trading  community  or 
governmental  regulations  ^  all  of 
these  circtunstances  should  trigger  an 
outsourcing  strategy  review.  With  that 
in  mind,  here  arc  10  questions  you 
should  ask  when  updating  your  com¬ 
pany's  IT  outsourcing  strategy. 

1b  tha  buskwn  trying  to  expand 
ovaraMs  or  ankanca  Ks  gtobat  im- 

aga?  If  your  company  has  no 
previous  experience  overseas, 
this  is  a  particularly  good  time 
to  consider  partnering  with  an 
ofishore  technology  provider. 

"If  you  are  looking  to  do  busines.s  in, 
say.  Asia,  you  might  very  well  want  to 
I  outsource  to  a  provider  that  could  help 
you  do  business  in  that  part  of  tbe 
world,"  says  Wendell  Jones,  a  senior 
consultant  at  Cutter  Consortium  in 
Arlington,  Mass. 

A  global  company  should  also  con¬ 
sider  using  a  combination  of  its  own 
staff  and  offshore  resources  when  try¬ 
ing  to  polish  its  global  image.  But  be 
wary  of  exceeding  a  70-30  ratio  of  off¬ 
shore  to  internal  staff  for  software  de¬ 
velopment  projects,  he  says.  Letting 
more  than  75%  of  the  development 
work  go  of&bore  can  lead  to  serious 
difficulties,  since  off-site  programmers 
may  not  be  as  skilled  as  oo-site  staff. 
Alsa  off-site  workers  might  not  be  as 
sensitive  to  issues  such  as  integration 
with  existii^  systems  or  changing  user 
requirements. 

Cost  cutting  alone  is  not  enough  rea¬ 
son  to  look  of^ore.  warns  Nigam,  who 
says  Cendura  plans  to  expand  into  Asia 
and  Europe  in  the  next  12  months.  "Fve 
seen  so  many  companies  get  excited 
about  hiring  someone  for  S25  an  hour, 
but  chances  are  high  that  tbeyll  need 
four  bodies  to  complete  the  worit  of 
one  of  their  own  workers,"  he  explains. 
"If  you  make  the  investment  righr.  you 
get  the  ratio  down  to  L5-to-l.  but 
you'll  never  get  a  1-to-l  ratio.” 

Art  nnr  tooimK  toittottVH  Hniy 
i  to  ovtriond  your  fTilifr?  When 
I  new  projects  threaten  to  over¬ 
whelm  tbe  IT  staff  at  I.B. 

Hum  Transport  lnc„  a  trans- 
portation  logistics  company 
I  in  Lowell.  AHl,  CIO  Kay 


Palmer  looks  for  rote  work  that  she 
can  contract  to  an  outsourcing  suppli¬ 
er.  Typical  examples  include  convert¬ 
ing  flies,  expanding  fields  and  translat¬ 
ing  reports  into  different  languages. 

The  alternative  —  outsourcing  new 
proiects  —  doesn't  work  as  well. 
Palmer  says.  The  last  time  I.B.  Hunt 
tried  to  do  that,  the  business  side  was 
still  working  on  requirements  defini¬ 
tions  midway  through  the  project,  re¬ 
sulting  in  scope  creep  that  tbe  out¬ 
sourcer  couldn't  manage  or  control 
Tbe  development  work  was  brought 
back  in-bouse  within  a  year.  "I've 
learned  that  unless  requirements  are 
very  well  defined  and  there’s  not  a  lot 
of  lie-in  with  existing  systems,  out- 
sourc'mg  is  hard  to  do."  Palmer  says. 

Also  look  at  tbe  maturity  of  tbe 
project  when  considering  outsourcing, 
says  Nigam,  who  co-founded  Health- 
eon  (now  WebMD  Inc).  "If  you're  In 
the  early  stages  of  product  develop¬ 
ment.  it  requires  dose  collaboration 
with  customers  as  well  as  domain  ex¬ 
pertise."  he  points  out.  While  Nigam 
was  at  Healtheon,  two-thirds  of  out¬ 
sourced  work  was  Release  3.0  or  be¬ 
yond,  be  says. 

3btbtoompanypreHringtoim- 
(brtakaaofli^biBlnMaobtoc- 
ttva  wRh  •  flgto  (badtoM?  It  can 
make  sense  to  outsource  a 
new  project  when  the  work  is 
extremely  time-sensitive  or 
critical  to  gaining  new  busi¬ 
ness.  At  St  Luke's  Medical  Center  in 
Kansas  Caty,  Mo.,  CIO  John  Wade  de¬ 
cided  to  outsource  the  IT  component 
of  opening  a  "digital  hospital"  by  the 
end  of  next  year. 

It’s  an  enormous  workload."  Wade 
says.  The  project  includes  implement¬ 
ing  three  new  sofbvare  products, 
determining  the  benefits  of  those 
systems  and  then  retrofitting  them 
into  Hve  other  St  Luke's  locations, 
which  would  also  entail  standardizing 
those  hospitals'  procedures,  be  says. 
'There  was  no  way  to  do  it  unless  we 
hired  15  people  and  trained  them,  and 
even  then,  our  risk  of  not  being  able 
to  make  the  date  was  significant," 
he  adds. 

A  similar  situation  occurred  at 
Cendura,  when  a  pro^iective  client 
requested  customized  features  in  a 
software  product  ”We  figured  we 
couldn't  win  tbe  deal  using  our  highly 
leveraged  resources  in  the  U,Sn  but 
taking  H  offshore  gave  us  extra  flexibU- 
ity,"  Nigam  says.  “If  we  had  to  apply 
very  expensive  resources,  h  would 
have  made  tbe  deal  less  feasible 
for  us."  I 


4  b  the  company  pianning  to  arr- 
gage  in  new  bias  of  businen? 

Companies  that  have  existing 
outsourcing  relationships 
need  to  review  these  con¬ 
tracts  when  starting  a  line 
of  business,  says  Brad  Smith, 
vice  president  of  research  at  Kennedy 
Information  Inc.,  an  information 
source  on  professional  services  in 
Peterborough,  N.H.  For  example,  if  a 
retail  bank  that  outsources  call  center 
activities  was  expanding  into  broker¬ 
age.  insurance  or  other  financial  ser¬ 
vices.  that  would  require  a  whole 
different  set  of  call  center  training 
and  activities. 

Similarly,  if  a  U.S.-based  company 
was  to  expand  into  a  new  region,  such 
as  Asia,  calls  could  begin  coming  in 
24  hours  a  day  as  opposed  to  12. 

"Those  changes  need  to  be  anticipat¬ 
ed,"  Smith  says. 

5ArathBrearMsoffTthatdon*tin- 
toraet  wRh  other  deportniMito  or 
customora?  ).a  Hunt’s  Palmer 
says  in-house  staffers  add 
great  value  when  they  regu- 
lariy  interact  with  customers. 
For  instance,  a  database  ad¬ 
ministrator  who  knows  the  extent  to 
which  tbe  business  is  affected  when  a 
table  isn't  available  may  create  a  work¬ 
around  to  make  tbe  data  available 
more  quickly.  Or  the  help  desk  staff 
may  regularly  inform  the  quality  assur¬ 
ance  team  alx)ut  the  problems  it's  ad¬ 
dressing,  thereby  helping  to  improve 
system  design. 

“In  that  way,  they're  of  much  more 
value  than  just  answering  calls  and  tak¬ 
ing  care  of  problems."  Palmer  says.  “If 
you  have  that  level  of  integration,  you 
can  justify  paying  for  people  locally." 

On  the  other  band,  she  says,  ifth^ 
are  areas  where  you  don’t  have  that  re¬ 
lationship,  it  doesn't  make  sense  to  pay 
a  premium  to  keep  it  in-house. 

6How  afUctont  ara  your  IT  ogara- 

Mms?  Earlier  thb  yeat;  Wade 
completed  the  process  of 
detennining  whether  to  out¬ 
source  part  or  all  of  his  orga¬ 
nization's  IT  function.  He 
bases  such  decisions  on  four 
sets  of  metrics:  the  quality  of  St.  Luke’s 
IT  operation,  quantity  of  current  IT 
pn^ects,  quantity  of  FT  projects  over  a 
five-year  time  frame  and  price  of  deliv¬ 
ering  IT  services  to  core  constituents 
over  five  years. 

Wade  would  choose  to  outsource  if 
an  outsourcing  vendor  could  hit  tbe 
same  metrics  as  St.  Luke’s  internal  IT 
department  and  reduce  operational 
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costs  by  17%  over  five  years.  He  sets 
the  bar  high  because  in  a  long-term  re¬ 
lationship  such  as  outsourcing,  a  fore¬ 
cast  17%  savings  would  likely  turn  into 
about  8  J%  over  a  five-year  period,  he 
says.  “That’s  not  an  easy  job  if,  on  top 
of  that,  [the  vendor]  also  has  to  make  a 
20%  to  30%  profit,"  Wade  says.  Three 
years  ago,  the  best  offers  were  a  4.5% 
overall  cost  reduction  and  a  7%  cost 
reduction  in  labor  only.  This  year, 
Wade  says,  no  one  even  responded  to 
his  request  for  proposals. 

Still,  Wade  faithfiUly  conducts  this 
review  every  three  years.  “You  have  a 
responsibility  as  CIO  to  say  you’re  pro- 
vidmg  the  most  cost-effective  service 
you  can,”  he  says.  “If  I  could  outsource 
the  network  at  a  cost-effective  level,  I 
would  do  it  because  internally,  it’s  a 
major  strain  on  the  IT  group." 


7  Him  outsourcing  traiMb  dwnpetf? 

Palmer  keeps  her  eyes  and 
ears  open  to  what  her  peers 
and  competitors  are  doing  on 
the  outsourcing  front  That 
includes  listening  for  new 
trends  in  outsourcing  options. 
“At  times,  the  options  that  were  avail¬ 
able  a  few  years  ago  may  have  been  re¬ 
placed  by  something  that’s  more  palat¬ 
able."  she  says. 

For  instance.  J.B.  Hunt  looked  into 
call  center  outsourcing  a  few  years  ago 
but  decided  that  its  customers  really 
needed  to  feel  they  were  talking  with  a 
local  company  representative,  local  ac¬ 
cent  and  all.  This  year,  after  attendii^ 
a  computer  conference.  Palmer  heard 
about  call  center  outsourcers  in  rural 
Arkansas  {QuickUnk  49795].  After  re- 
I  viewing  cost  vs.  benefits,  she  deter¬ 


mined  that  it  wasn’t  worth  it.  but  this 
type  of  networking  may  eventually 
lead  to  a  workable  alternative. 

8  Have  there  been  changes  in  the  fT 
talent  market?  Even  in  these 
tough  ecoitomic  times,  it's  im¬ 
portant  to  keep  an  eye  on  IT 
labor  costs  and  supply.  “Be¬ 
fore  1  would  look  at  outsourc¬ 
ing  an  entire  function,  I  would 
expect  to  be  faced  with  issues  such  as 
high  cost  of  hire,  escalating  people 
costs  that  are  out  of  control  and  high 
turnover,"  Palmer  says.  J.B.  Hunt’s 
turnover  is  only  4%.  and  salary  costs 
reasonable,  so  outsourcing  Isn’t 
tempting  now. 

91s  your  current  outsourcing  ven¬ 
dor  muting  its  benchmarks  and 
offering  competitive  pricing?  It’s 
not  easy  to  determine  if  the 
deal  you  signed  on  for  is  still 
a  good  one  a  couple  of  years 
into  ft.  Other  outsourcers 
won’t  rush  to  provide  you  with  a  com¬ 
petitive  bid,  knowing  that  you’re  still 
tethered  to  a  deal.  sa>'s  Bob  Tevelson, 
a  vice  president  at  A.T.  Kearney  Inc.. 
a  management  consulting  firm  in 
Chicaga 

Stan  by  checking  whether  the  con¬ 
tract  requires  you  to  buy  rrmre  service 
than  you  need  or  to  speitd  more  on  it 
than  you  should.  Thot^  your  contract 


may  not  allow  you  to  bring  services 
back  in-house,  there  should  be  enough 
flexibility  to  change  service  levels,  skill 
sets  or  the  location  of  workers.  For  in¬ 
stance.  Tevelson  says,  “you  can  work 
with  the  provider  to  selectively  shift 
applications  offshore  to  suppon  the 
objective  of  cost  reduction." 

«  Are  your  strategic  obfectrvtt 
being  met  through  the 
orrangement?  “You 
thought  it  was  good  deal 
when  you  got  into  it. 
but  the  deck  chairs 
shifted  on  the  ship,  and 
'  now  what  do  you  do?"  Tevelson  asks. 
It’s  difficult  to  prematurely  terminate 
an  outsourcing  contract,  so  experts 
recommend  building  in  terms  to  the 
deal  that  accommodate  changing  busi¬ 
ness  needs.  For  instance,  what  if  you 
outsource  your  call  center  function 
and  then  divest  a  particular  busines.s 
unit,  leading  to  a  drop  in  call  volumes? 
“In  a  productive  relationship,  the 
parties  will  try  to  renegotiate  terms 
and  conditions  to  make  up  for  the  lost 
volume,"  Scardino  says.  After  all,  it’s 
important  that  the  outsourcing  rela¬ 
tionship  remain  mutually  beneficial. 
OS0044 

Brandel  is  a  Computerworld  comribut- 
ing  writer  in  Grand  Rapids,  Mich.  Con¬ 
tact  her  at  fnaryJtrandel@comcQSt.net. 
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resource  commitment  as  well  as  availanii'ty  ot  suitable  service  providers 


costs  by  17%  over  five  years.  He  sets 
the  bar  high  because  in  a  long-term  re¬ 
lationship  such  as  outsourcing,  a  fore¬ 
cast  I?®!,  savings  would  likely  turn  into 
about  8.5%  over  a  five-year  period,  he 
says.  “That's  not  an  easy  job  if,  on  top 
of  that,  (the  vendor]  also  has  to  make  a 
20%  to  50*’.)  profit,"  Wade  says.  TTirce 
years  ago.  the  best  offers  were  a  4.5‘’.i 
overall  cost  reduction  and  a  7*Hi  cost 
reduction  in  labor  only.  This  year. 
Wade  says,  no  one  even  responded  to 
his  request  for  proposals. 

Still.  Wade  faithfully  conducts  this 
review  every  three  years.  “You  have  a 
responsibility  as  CIO  to  say  you’re  pro¬ 
viding  the  most  cost-effective  scr\'ice 
you  can."  he  says.  “If  I  could  outsource 
the  network  at  a  cost-effcctivc  level.  I 
would  do  it  because  internally,  it's  a 
major  strain  on  the  IT  group." 


7  Have  outsourcing  trends  changed? 

Palmer  keeps  her  eyes  and 
cars  open  to  what  her  peers 
and  competitors  are  doing  on 
the  outsourcing  front.  That 
includes  listening  for  new 
trends  in  outsourcing  options. 
"At  times,  the  options  that  were  avail¬ 
able  a  few  years  ago  may  have  been  re¬ 
placed  by  something  that's  more  palat¬ 
able."  she  says. 

For  instance.  I-B.  Hunt  lixiked  into 
call  center  outsourcing  a  few  years  ago 
but  decided  that  its  customers  really 
needed  to  feel  they  were  talking  with  a 
local  company  representative,  local  ac¬ 
cent  and  all.  This  year,  after  attending 
a  computer  conference.  Palmer  heard 
about  call  center  outsourcers  in  rural 
Arkansas  [QuickLink  497951.  After  re¬ 
viewing  cost  vs.  benefits,  she  dctcr- 


I  mined  that  it  wasn’t  worth  it.  but  this 
I  typo  of  networking  may  cveniuallx 
j  lead  to  a  \vork.ible  alternative. 


8  Have  there  been  changes  in  the  IT 
talent  market?  Even  in  these 
tough  economic  times,  it’s  im¬ 
portant  t*>  keep  an  eye  on  IT 
labor  costs  and  supply.  "Be¬ 
fore  I  would  UH)k  at  outsourc¬ 
ing  an  entire  function.  I  would 
I  expect  to  be  faced  w  ith  issues  such  as 
high  cost  ol  hire,  escalating  people 
I  costs  that  tire  out  of  control  and  high 
1  turnover."  I’almer  says.  J.B.  Hunt’s 
turnover  is  only  4*’.).  and  salary  c«>sts 
I  are  reasonable,  so  outsourcing  isn't 
I  tempting  now. 


91s  your  current  outsourcing  ven¬ 
dor  meeting  its  benchmarks  and 
offering  competitive  pricing?  It's 
not  easy  to  determine  if  the 
deal  you  signed  on  for  is  still 
a  goiHl  one  a  couple  of  years 
into  it.  Other  outsourcers 
won't  rush  to  provide  you  with  a  com¬ 
petitive  bid.  knowing  that  you're  still 
tethered  to  a  deal,  says  Rob  TeveiMin. 
a  vice  president  at  A.T.  Kearney  Inc.. 
a  man^ement  consulting  firm  in 
Chicago. 

Start  by  cheeking  whether  the  con¬ 
tract  rcquia‘s  you  to  buy  more  ser\  ice 
than  you  need  or  to  spend  more  on  it 
than  you  should.  Though  your  c-ontract 


may  m>t  allow  you  to  bring  serv  ices 
back  in-house,  there  should  be  en«>ugh 
flexibility  to  change  se-n  ice  levels,  skill 
sets  i»r  the  hvation  of  workers.  For  in¬ 
stance.  Tevelson  s;iys.  "ytiu  can  work 
with  the  provider  to  se  leetively  shift 
appliejtiuns  olfshore  to  supp»)ri  the 
objective  of  cost  reduclit>n." 


Are  your  strategic  trfijectives 
stiM  being  met  through  the 
■  arrangement?  You 

H  H  H  though)  it  was  giMtd  deal 
H  H  w  hen  you  got  into 
H  but  the  deck  chairs 

shifted  on  the  ship,  and 
now  what  do  you  do?"  Tevelson  asks 
Its  JifTicull  to  prematurely  terminate 
an  outsourcing  eoniraet.  so  e.sperts 
recommend  building  in  terms  t«>  the 
deal  that  accommodate  changing  biisi- 
ne.ss  needs.  For  instance,  w  hat  if  yxm 
outsource  your  call  center  function 
and  then  divc*st  a  particular  business 
unit,  leading  to  a  drop  in  call  volumes' 
"In  a  productive  relationship,  the 
parties  w  ill  try  to  renegotiate  terms 
and  e»*nditions  ti>  make  up  f4>r  the  lost 
volume."  Seardini*  s.t\s.  Alter  all.  h’s 
important  that  the  outsourcing  rela¬ 
tionship  remain  muiu.iliv  beneficial 
C  50044 


Brundel  is  o  (24»mpuierw«»rld  eonfrihul- 
ing  u  fiter  in  Grand Kapids.  .\fich.  Con- 
fuct  her  uf  marv-hrunde/  a  cnmcast.net. 
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ORE  AND  MORE  PEOPLE 
are  jumping  on  the  cor¬ 
porate  weblogging  band- 
I  wagon.  At  Microsoft 
Corp.,  for  example,  there 
I  are  currently  more  than 
'  1,000  blogs.  Like  many 
companies,  especially  the  IT  vendor 
companies  where  weblogs  tend  to  pro¬ 
liferate.  Microsoft  encourages  the  in¬ 
formal  sites  as  a  way  for  its  employees 
to  stay  close  to  customers. 

But  as  weblogs  have  multiplied,  a 
number  of  legal  issues  have  arisen,  and 
regardless  of  whether  your  company 
sponsors  its  bloggers,  it  may  be  open¬ 
ing  itself  up  to  hidden  liabilities.  Here 
are  some  of  the  dangers  of  corporate 
blr^ging  and  precautions  companies 
should  consider. 

Ubdandtradi 

MBIHhSAI  MmL  Bloggers 
who  write  anything  negative  or  defam¬ 
atory  about  a  corporation  or  an  indi¬ 
vidual  are  opening  themselves  and 
their  companies  up  to  the  possibility  of 
libel  suits,  says  David  Carr,  an  attorney 
and  partner  at  London-based  consult¬ 
ing  Hrm  Big  Blog  Ca 
PRKAIfnON:  Do  yeir  hamawork.  If  the 
blogger  is  going  to  make  negative  state¬ 
ments  about  a  company’s  or  individual’s 
business  activities.  Carr  says,  “he’s  real¬ 
ly  got  to  do  his  research  and  make  sure 
what  he's  saying  can  be  proven  to  be 
true  and  not  just  believed  to  be  true.” 


CMMialial  Inlaiiiiilliia.  Employees  who 
blog  may  intentionally  or  unintention¬ 
ally  share  company  secrets,  says  em¬ 
ployment  attorney  Michael  Karpeles,  a 
principal  at  Chicago-based  law  Arm 
Goldberg.  Kohn,  Bell.  Black.  Rosen* 
bloom  &  Moritz  Ltd.  Information  such 
as  the  finances  or  marketing  and  busi¬ 
ness  strategies  of  the  employer  can 
cause  damage  to  the  company  if  it  gets 
into  the  wrong  hands.  Amj  a  blogger 
who  lets  slip  personal  information 
about  other  employees  may  be  open- 

Btopi  (mim)  a  contractiM 
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Legal  liabilities  lurk  amid 
corporate  blogs. 

BY  LINDA  ROSENCRANCE 


ing  the  organization  to  prosecution  for 
privacy  infringements. 

PRECAIfnON:  Hav*  anyiloYaw  sign  a 
confUaatiaity  agraamant  thirt  ftataa  they 
wM  not  dhdoaa  oompany  confldaaliai  in' 
fonnalion,  Karpeles  says.  "Even  if  they 
haven't  signed  an  agreement,  most 
states  have  a  trade-secrets  protection 
law  that  would  prohibit  individuals 
from  misappropriating  trade  secrets,” 
be  says.  But  better  to  caution  them  up¬ 
front  than  prosecute  them  later. 


CaralaaBstato- 
■ilaAHBiB  manta  about  the 
buainaat  that  can  ba  tiaad  during  Miga- 
liOfi.  Anyone,  from  the  CEO  to  the  re¬ 
ceptionist.  can  have  a  blog,  whether  it's 
related  to  the  company’s  Web  site  or 
not.  so  organizations  don't  know  what 
information  is  out  there  that  could 
hurt  them,  says  Gregory  Rutchik. 
founding  partner  of  The  Arts  and 
Technology  Group,  a  litigation  and 
transactional  law  practice  in  San  Fran¬ 
cisco.  “But  the  reality  is.  if  you  allow 
your  employees  to  blog,  the  likelihood 
that  things  are  going  to  come  back  to 
hurt  you  is  huge.”  he  says. 

Attorney  Diana  McKenzie  agrees.  “If 
the  company  is  encouraging  blogging, 
the  first  thing  I  would  worry  about  is 
discovery.”  she  says,  referring  to  the 
compulsory  disclosure  of  pertinent 
facts  or  documents  to  the  opposing 
party  in  a  civil  action. 

“Blogging  Is  one  of  the  most  fertile 
grounds  in  discovery  for  supporting 
any  position,  because  you  have  a  bunch 
of  people  never  conscious  of  how  this 
could  be  used  against  a  company.”  says 
McKenzie,  who  chairs  the  information 
technology  group  at  law  firm  Neal, 
Gerber  &  Eisenl:«rg  LLP  in  Chicago. 

PRECMmON:  CoiBg«d«  thil  faNM 
ftair  iiMi  Usgu  Andd  eoMUar  hsw  Ihuy 
m  unu  niu  MMBMu  pm,  wo  muf  ■wh 
cnrfi  ptRsiau  tu  M  uHipluyMt  hnpw  whul 
thug  CM  Md  CM*!  wriic,  says  Rutchik. 

Karpeles  says  an  employer  should 
create  policies  and  guidelines  about 
what  can  be  included  on  an  employer- 
sponsored  weblc^.  Those  guidelines 
should  describe  and  defuie  the  scope  of 
the  blog.  Utey  should  also  point  out  is¬ 
sues  that  shouldn’t  be  discussed  and 
materials,  including  company  docu¬ 
ments.  that  shouldn’t  be  posted  to  the 
blog  without  prior  authorization.  An 
employer  can  also  have  policies  or  con- 
Adentiality  agreements  for  employees 
who  blog  on  their  own.  says  Karpeles. 

Groove  Networks  Inc.  in  Beverly, 
Mass.,  has  such  a  policy  in  place,  says 
Jeff  SeuL  the  company’s  gen^  counsel 
Thoi^  Groove  doesn’t  sponsor  a  cor¬ 
porate  weblog,  employees  could  still 


w.computerworld.com 


discuss  company  business  on  personal 
blogs,  he  says.  So  he  has  crafted  guide¬ 
lines  for  employees  to  follow  if  they  do. 
Seul  says  that  if  a  Groove  employee 
chooses  to  talk  about  the  company’s 
technology  on  a  personal  blog,  that 
employee  is  advised  to  post  a  notice  in 
a  prominent  place  making  it  clear  to 
readers  that  his  views  don’t  necessarily 
represent  those  of  the  company. 

Seul  also  reminds  employees  not  to 
disclose  confidential  or  proprietary 
company  information  or  similar  infor¬ 
mation  disclosed  to  Groove  by  any  third 
parties.  He  instructs  them  not  to  publish 
company  documents  without  autho¬ 
rization,  and  he  asks  bloggers  to  be  re¬ 
spectful  of  the  company,  its  employees, 
partners,  affiliates  and  competitors. 

Lopw  cannon 
bbggars.  Imag¬ 
ine  that  your  company  changes  strate¬ 
gy.  There  may  be  a  bunch  of  bl<^ 
about  the  previous  strategy,  but  all  the 
employees  will  dutifully  update  them. 
But  what  if  one  of  those  blogs  is  from 
someone  who  is  no  longer  an  employ¬ 
ee  and  doesn't  want  to  take  it  down 
or  amend  it?  “It  may  be  awfully 
bard  to  cause  that  to  happen,"  says 
McKenzie. 

PRECAirnOlkEinpiDymAiNUMt 

HpralMforwIntiiiipMtlQllwkliiafa 

accwUhML  050037 


DANGER 


MimMEIIEIIT 


MimaMUImO>l.lN4  41 


Big  Bloggers 


tm 


* 


•  kHif 

Mnal».  A  HMl  M  miOiflHltar  af 

lU.  itiMbiOMa  IM  MMi  «(Mn  bf 


Blog  Rules 

I  — — .0-0— t— .. 


■  IM  COh,  ca.  Mm  liMfcki 


■  BaarifM 

’  ■  NftpMdMWltMl 

■  ■•aMhaatlc 

■  Ml  M  mn  tadir 

■  liMllMMiniM 

■  ItarralNMi 

■  UniiMtlnilMi 

■  Mibatralli  i 

rnOmntmm 

■OMrMtfWtdM'tSlip 

■  Mmr  ekMti  ynr  URL 

Contrarian  View 

•  MiaMMla 


•.bam  Mart 

lifilvaiMit- 

Ihinldank 


BRAIN  FOOD  FOR  IT  EXECUTIVES 


DriUngDown 
Into  ROI  Numbers 

WNBi  IT  CONUUMa  Alnem  lie 
cam  oi<  «nV)  cotponlB  nnMngs  bne^ 
nm  rr  benctirarMng  flialic.  (he  top 
wesiwraFinnfefctoeafidRDneefNtouralRB- 
sotfces  Ca  Bui  WWHNart  Stam  he.  oten 
conatoerad  I  huge  IT  aucoass  story.  MS 
niMheae  near  toe  top. 

Why?  Ainaan’s  new  matoe  (Utoed  ROir 
OtotomonirXlaMaridBdtosInivrrsrali- 
liraNp  to  aharahoUar  \«he  as  rnaanaad  by 
&»wnac  Ms  Added  (EW),  a  wUaly  uaad 
ffsaaiwolDorporalefcanciaiperlDirance 
[Qiicllink 356Q(a  MHIvrs  nndast  s^ 
can  be  aqdalned  by  todihg  more  deeply  into 
toe  ROffcatatodton.  says  AfcwanftaiddBnl 
BiJohnatoa  ROIT  is  calculaled  by  dMdhg 
toe  contoany’s  EW  by  fc  IT  spandha  «hidi 


yields  an  ROT  pemniioB.  liannla  Mae's 
ROIT  Msa  whopping  4.246%.  VMMvt's 
was  42%. 

rsnollhalVItaHilarttalacNustorfrh' 
vestoien(s>  Johnston  says.  WM  Mart  scored 
tower  because,  as  the  biggesl  conipariy  in  toe 
wodcL  its  revenue  growto  Im  stowed  and  a 
isn't  as  preMabie  as  R  couU  be  because  a 
passes  on  Kb  savings  to  consunwrs.  But  TT 
is  what  got  WaHtlart  to  where  B  is  todiv.” 
Johnston  says.  K’s  ad  an  IT  success  story.' 

ROIT  is  )utf  a  snapehoL  he  adds.  For  earn* 
pto.  Imie's  ConveniaB  he.  currandy  has  a 
Nghar  ROIT  (84%)  than  rM  Horn  Depot 
tot  (62%).  But  Johnston  says  Home  Depot 
is  rnalwig  big  IT  hvestoients  to  catch  If)  after 
yean  of  IT  neglect  and  he  pradets  toot  Horn 
DapotwfseeMendsIromtoaaeiiMBSI* 
merits  and  a  hiiiher  ROIT  h  toe  netolawf  years. 

-mchBeas 


Inden  of  Business 
IT  Demand,  2004 


Best  Bits 

The  moat  useful  parts  of  recent  businass 
and  rr  managawiMit  books 
THE  BOOK:  Oof  OarnrAbir  the  Owner 
OrnmnUoa  k  Rfmhwing  Bmkma  fimer. 

by  John  C.  Beck  and 
Rrn*  I  IttchelWfede  (Harvard 

jSbk  I  Business  School  F^ess. 

BMC  I  2004). 


Conventional  wisdom 
holds  that  gamers  ' 
toosewho^ewupplay- 
hg  video  games '1^ 
overdeveloped  thunbs,  underdevetoped  minds 
and  zero  social  skis.  This  book  takes  a  fresh 
took  and  fheto  toat  garners  (rKM  90  miliion 
strong)  actuaBy  have  skis  that  could  be  quite 
useful  in  businks;  bold  but  measured  rtsk-tak- 
ina  an  arnaang  ability  to  multitask  and  unex¬ 
pected  leadership  skis. 

But  managers  from  toe  boomer  generation 
wi  need  to  adjust  to  toe  gwners' selfish  drives 
arto  play-to-wh  rnentairty  arto  tap  their  inst^ 
for  heroism,  the  authors  say.  Mo^  surprisino  of 
aL  toe  book  says  that  despite  al  that  tirne  play¬ 
ing  atone,  gamers  may  turn  out  to  be  good  team 


players.  They  aren’t  any  more  isolated,  introvert¬ 
ed  or  unsociable  than  people  who  take  piano 
lessons  or  play  golf.  -MitchBetts 

Things  to  Ponder 

■A  report  by  (ha  CFO  Executive  Board,  a 

research  group  in  VMhington.  says  chief  finan¬ 
cial  officers  have  wrongly  tried  to  expand  their 
influence  into  realms  such  as  IT  and  procure- 
rnent  wtoen  they  should  be  sticking  to  their  core 
responsibility  of  driving  corporate  financial 
performance. 

•  The  No.  1  cause  of  a  failed  merger  or  ac¬ 
quisition  is  ignoring  potential  integration  chal¬ 
lenges,  says  a  study  by  Bain  &  Co.  in  New  York. 
The  No.  2  cause  is  overestimating  synergies. 

■  New  York-based  Kom/Ferry  International 
surveyed  1.951  executives,  arid  47%  of  the 
resporxlents  said  their  companies  sta  don’t 
have  procedures  in  place  for  dsaing  with 
an  act  of  terrorism  or  a  catastrophic  event 
And  tWb  answered  “don’t  know.' 

■  Some  dfoastor  recovery  plans  encourage 

empleyuas  to  trawl  to  alternate  work  sites  Of 
work  from  home  for  toe  sake  of  business  continu¬ 


ity.  But  the  series  of  hurricanes  in  Florida  shows 
that  tactic  may  not  work  says  Forrester  Research 
Inc.  analyst  Cotin  R^ne.  'Residential  power 
restoration  may  take  days  or  weeks,  while  local 
fkxxkng  or  otow  infras^ucture  faiiu^  such  as 
roads  arto  artines  rnay  affect  travel  or  equiprnent 
delivery  to  altemate  sites.' he  says.  O  501S0 
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Hard  Times  Continue 


Graduates  Gain 


Tough  times  are  far  from  over,  say  294 
IT  workers  who  responded  fo  a  recent 
survey  by  Amplitude  Research  Inc.  in 
Birmingham,  Mich.  Some  key  findings: 


at  least  compared  wdh  tne  class  of 
2003.  accofdmg  to  a  survey  by  the 
National  Association  ot  Colleges  and 
Employers  This  is  the  first  year  strrce 
2001  that 

According 

to  NACE  intormation  sciences  and 
systems  grads  are  earning  an  average 
salary  of  from 

last  year  Computer  science  gradu¬ 
ates  are  making 


«Mi1(  for  companias  tint  hm 
outMurced  IT  lobe. 

hm  net  raciived  a  rain  in 


m  flndtag  a  nmr  job  nouM  ha 

- ■--«  Mia  h 

aoiMwnai  (niKun. 
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U.S.  IT  Staffing  Is  Up . . 

...  but  outsourcing  is  taking  a  toH.  says 
Andrew  Bartels,  an  analyst  at  RKrester  Re¬ 
search  Inc.  Despite  the  furor  over  offshwe 
outsourcing,  the  number  ot  U.S.  IT  jobs 
actually  grew  in  2003  and  will  continue  to 
grow  from  2004  to  2008.  he  says.  But  off¬ 
shore  outsourcing  is  a  real  phenomenon,  and 
it  wiH  hold  down  U.S.  FT  )ob  growth  and  sal¬ 
aries  at  vendor  and  user  companies,  he  adds 
Forrester  projects  that  IT  departments  will 
grow  3%  annuaty  through  2006.  That's  an 
iniprovernenl  from  the  job  cutting  of  2001  and 
2002,  but  the  offshore  option  means  that 
companies  wi  hire  fewer  FT  workers  than  they 
would  have  in  the  past.  Meanwhile,  produd 
developrrient  jobs  at  IT  vendors,  which  led  the 
revival  in  hiring  in  2003  and  2004.  will  slurnp 
ii2006»id^7asvendorsmoreaggre5- 
sivefy  advantage  of  lower-cost  offshore 
resources.  Bartels  says.  O  50067 

•  Kathleen  Mefymuka 


Companies  Plan 
For  Growth 

Overall  focus  of  the  company . . 

12  months  ago: 

26%  Primarily  growth  ~ 

41%  Primarily  cost  control  • 

25%  About  evenly  spW  — 


Today; 

27%  Primarify  growth  — 

32%  Primarily  cost  control  -j 
34%  About  evenly  spW  — 
7%  Not  sure - 

12  months  from  now; 
42%  Primarily  growth  — 
18%  Primarily  cost  control  - 
32%  About  evenly  split  - — 
6%  Not  sure - 
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We  re  inspired  by  the  human  side  of  data. 


Data  Storage  from  Hitachi. 
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Drilling  Down 
Into  ROI  Numbers 

WHEN  IT  CONSULTANCY  Alinean  LiC 
came  out  with  corporate  rankings  based  on  its 
new  IT  benchmarking  metnc,  the  top  compa¬ 
nies  were  f^nie  Mae  and  Roneer  Natural  Re¬ 
sources  Co  Bui  Wal-Mart  Stores  Inc.,  often 
considered  a  huge  IT  success  story,  was 
nowhere  near  the  top. 

Why?  AJinean’s  new  metric,  dubbed  ROIT 
(Retiffn  on  IT),  is  intended  to  show  fTs  rela- 
tionship  to  shar^older  value,  as  measured  by 
Economic  Value  Added  (EVA),  a  widely  used 
measure  of  corporate  financial  performance 
[QuckLmk  35920]  V\^i-Marl's  modest  score 
can  be  explained  looking  more  de^  into 
^  the  ROfTcalcuiation.  says  Ahnean  Prudent 
*  Bill  Johnston.  ROIT  is  calculated  by  dividing 
i  thecompanysEVAby  its  IT  spending,  which 


yields  an  ROIT  percentage.  Fannie  Mae’s 
ROIT  was  a  whopping  4.248%  Wal-Mart’s 
was  42%. 

It’s  not  that  V^ftl-Mart  has  lackluster  IT  in¬ 
vestments.  Johnston  says.  Wal-Mart  scored 
lower  because,  as  the  biggest  company  in  the 
world.  Its  revenue  growth  has  slowed  and  it 
isn't  as  profitable  as  it  could  be  because  it 
passes  on  its  savings  to  consumers.  But  IT 
IS  what  gol  Wal-Mart  to  where  it  is  today.' 
Johnston  says  'Ifs  sbll  an  IT  success  story." 

ROIT  IS  just  a  snapshot,  he  adds.  For  exam¬ 
ple.  Lowe's  Companies  Inc.  currently  has  a 
higher  ROIT  (84%)  than  nval  Home  Oepot 
Inc.  (62%),  But  Johnston  says  Home  Depot 
IS  making  big  IT  investments  to  catch  up  after 
years  of  IT  neglect,  and  he  predicts  that  Home 
Depot  will  see  dividends  from  those  invest¬ 
ments  and  a  higher  ROIT  in  the  next  lew  years. 

-Mitch  Betts 


Best  Bits 

The  most  useful  parts  of  recent  business 
and  IT  management  books 
'**E600K  Got  Game:  How  the  Gamer 
Generation  b  Reshaping  Business  Forever, 

_ —  by  John  C.  Beck  and 

Qg«|*  Mitchell  Wade  (Harvard 

•S5s=^  Business  School  Press. 

2004). 

»  \ 

*  Conventional  wisdom 

MJ;  \  %  r  holds  that  gamers - 

those  who  grew  up  play¬ 
ing  video  games  -  have 
overdeveloped  thumbs,  underdeveloped  minds 
and  zero  social  skills.  This  book  takes  a  fresh 
look  and  finds  that  gamers  (now  90  million 
strong)  actuaHy  have  skills  that  coukj  be  quite 
useful  in  business  bold  but  measured  nsk-tak 
mg.  an  amazing  ability  to  multitask  and  unex¬ 
pected  leadership  skills. 

But  managers  from  the  boomer  generation 
will  need  to  adjust  to  the  gamers'  selfish  drives 
and  play-to-win  mentality  and  tap  their  instinct 
for  herotsm.  (he  authors  say.  Most  surprising  of 
all.  the  book  says  that  despite  all  that  time  play¬ 
ing  alone,  gam&s  may  turn  out  to  be  good  team 


players  They  aren’t  any  more  isolated,  introvert¬ 
ed  or  unsociable  than  people  who  take  piano 
lessons  or  play  golf  -  Milch  Betts 

Things  to  Ponder 

•  A  report  by  the  CFO  Executive  Board,  a 

research  group  m  Vfeshington,  sayschief  finan¬ 
cial  officers  have  wrongly  tned  lo  expand  their 
influence  into  realms  such  as  IT  and  procure¬ 
ment  when  they  should  be  slicking  to  their  core 
responsibility  of  driving  corporate  financial 
performance. 

■  The  No.  1  cause  of  a  failed  merger  or  ac¬ 
quisition  is  ignoring  potential  integration  chal¬ 
lenges.  saysa  study  by  Bam  &  Co.  in  New  York. 
The  No.  2  cause  is  overestimating  synergies. 

•  New  York-based  Kom/Ferry  International 
surveyed  1.951  executives,  and  47%  of  the 
respondents  said  their  companies  still  don’t 
have  procedures  in  place  for  dealing  with 
an  act  of  terrorism  or  a  catastrophic  event. 
And  fl%  answered  “don't  know.  " 

•  Some  disaster  recovery  plans  encourage 
employees  to  travel  to  alternate  work  sites  or 
work  from  home  for  the  sake  of  business  continu¬ 


ity.  But  the  seriesol  humcanes  in  Rorida  shows 
that  tactic  may  not  work,  says  Forrester  Research 
Inc.  analyst  Cotin  Rankine.  'Residential  power 
restoration  may  lake  days  or  weeks,  white  local 
flooding  or  cither  infrastructure  failures  such  as 
roads  and  airlines  may  affect  travel  or  equipment 
delivery  to  alternate  sites.'  he  says.  O  50150 


Send  them  to 

pitches^Wcomputerworld-com. 


SOURCE:  IDC's  FutureScan. 
Framingham.  Mass..  October  2004 


WWW  comoulerworld  com 


MANAGEMENT 


Career 


'a 


Hard  Times  Continue 

Tou^h  rimes  are  far  from  over,  say  294 
IT  workers  who  responded  to  a  recent 
survey  by  Ampiirude  Research  Inc.  in 
Birmingham.  Mich.  Some  key  Jtndings: 

work  for  companies  that  have 
outsourced  IT  fobs. 

^ve  not  received  a  raise  in 
over  a  year. 

say  finding  a  new  job  would  be 
*Vw  somewhat  difficuit. 

say  finding  a  new  job  would  be 
£  I  very  difficult  or  impossible. 


Graduates  Gain 

7n<-  iT  I.U-.  •  ?004  .  •  monuy 

-  at  least  compared  with  the  class  of 
2003.  according  to  a  survey  by  the 
National  Association  of  Colleges  and 
Employers.  This  is  the  first  year  since 
2001  that 

According 

to  NACE.  information  sciences  and 
systems  grads  are  earning  an  average 
salary  of  .  -  ^  ^  from 

last  year.  Computer  science  gradu¬ 
ates  are  making  '4'J  036  4  , 


Job  Tracker 


This  AR.-€t0  database  alows  you  to 
search  by  ZIP  coda,  induatry  or  com¬ 
pany  name  to  Und  out  which  jobs  in 
your  commwiity  have  boon  exported 
or  lost  due  to  trade."  Try  h: 
www.workmoamerica.org/ 
jobtracksr/index.cfm 


U.S.  IT  Staffing  Is  Up . . . 

.  .  but  outsourcing  is  taking  a  toll,  says 
Andrew  Bartels  an  analyst  at  Forrester  Re¬ 
search  Inc.  Despite  the  turor  over  offshore 
outsourcing,  the  number  of  U  S  IT  ]obs 
actually  grew  m  2003  and  will  continue  to 
grow  from  2004  to  2008.  he  says  But  off¬ 
shore  outsourcing  is  a  real  phenomenon  ar>o 
It  will  hold  down  L.S  IT  |ob  growth  ana  sai 
anes  at  vendor  ano  user  companies  he  adds 
Forrester  proiecls  that  IT  depadmenij  wti 
grow  3%  annually  through  2008  Tha* :  ar 
improvement  trom  the  |ob  cutting  ot  200'  ar^r 
2002,  but  the  offshore  option  meansJhat 
companies  will  hire  lewer  IT  workers  than  thfey 
would  have  in  the  past.  Meanwhile,  product 
development  |obs  at  IT  vendors  which'  leo  the 
revival  m  hmng  m  2003  and  2004,  will  slumj. 
in  2006  and  200?  as  veruJors  more  aggres 
sively  take  advantage  ot  lower -cost  offshore 
resources.  Bartels  says  C  50067 

-  IQthleen  Metymuka 
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Companies  Plan 
For  Growth 
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12  miinihs  ago: 

26*^0  Primarily  growth 

41%  Primarily  cost  control 
About  evenly  split 


27°-o  Primarily  growth 

32%  F*rimafiiy  cost  control 


12  m<»nr/i.s/rf»m  mnv: 
42%  Primarily  growth 

18%  P'crnanly  cost  control 
About  evenly  spiii  — 


We  re  inspired  by  the  human  side  ot  data.  Digital  music  and  digital  photography  are 
more  than  just  gigs  of  data.  It's  enough  head-banging  rock  to  keep  a  jogger  on  pace.  It's 
giggles  and  grins  for  Grandma  and  Grandpa.  That's  why  high-capacity  Hitachi  hard  disk 
drives  are  the  industry  choice  for  digital  devices,  fast  runners,  and  proud  parents.  From 
the  smallest  Microdrive  to  the  largest  SAN  solution.  Data  Storage  from  Hitachi. 


hilachlyourdata.com 
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QUICK  HITS 


Management 

Attitudes 

Is  your  too  management  more 
or  less  conHdent  in  the  economy 
now  than  earlier  this  year? 


Is  SarbaneS'Oiley  having 
an  impact  on  your 
software  spending? 


Soencitng 

•6553^ 


Do  you  use  Linux? 


Are  you  UMy  to  standardize 
on  Linux  for  a  significant  pail 
o4  your  computing? 


b  your  interest  in  Linux 
increasing  or  decreasing  overall? 


J7% 


-  Decreasing 

BASE;  r&uS 

SOUMCE  VhSrawvet  MmaiintnaCb 
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What’s  the  Problem? 


Those  of  us  in  it  tend  to  see  the  world 
through  the  lens  of  problems  and  solu¬ 
tions.  Our  entire  work  lives  are  devoted 
to  solving  problems.  One  after  the  other, 
we  knock  them  down. 

This  habit  tends  to  start  early  in  life.  In  school, 
we  are  presented  with  math  problems  —  and  we 
solve  them.  At  home,  we  are  given  toys  to  play  with  — 
and  we  disassemble  and  improve  them.  We  are  given 
broken  computers  —  and  we  fix  them.  We  are  reward¬ 
ed  for  our  ingenuity. 

and  how  to  push  them. 

But  for  people  so  at¬ 
tuned  to  problems,  we 
tend  to  be  remarkably  in¬ 
articulate  about  them.  Very 
smart  and  accomplished 
people  call  me  all  the  time, 
and  the  conversation  goes 
something  like  this: 

"Can  you  help  me?" 
someone  asks. 

“I  don’t  know.  What’s  the 
problem?"  1  reply. 

The  answer  is  almost  al¬ 
ways  something  like,  “Our 
management  team  needs  a 
facilitated  retreat."  Or.  “We 
need  a  training  program  on 
communications."  Or.  “We 
need  a  new  project  man¬ 
agement  process." 


These  problems  and  so¬ 
lutions  bring  with  them  an 
emotional  boost,  too.  What 
can  beat  the  satisfaction  of 
solving  a  truly  challenging 
problem?  Who  doesn't  love 
being  the  great  hero  saving 
Aunt  Sadie’s  precious  files 
from  oblivion?  At  the  end 
of  a  particularly  thorny 
problem,  don’t  you  just 
imagine  yourself  spiking 
the  code  in  celebration,  as 
if  you’d  just  caught  a  game¬ 
winning  pass? 

Problems  have  wonder¬ 
ful  motivating  features. 

They  are  compact  and  fi¬ 
nite.  They  start  with  a  chal¬ 
lenge  —  a  call  to  action  (or 
at  least  to  thought)  —  and 
elegant  solutions  signal  triumph. 

We  are  conquering  heroes.  We  stand 
on  Olympus  with  the  gods.  We  solve 
problems. 

If  you  need  evidence  of  how  promi¬ 
nent  problems  are  in  our  thinking,  just 
look  at  the  marketing  materials  for 
almost  any  software  package  or  con¬ 
sulting  company.  They  all  bill  them¬ 
selves  as  your  “solution"  to  something: 
"eBragidocious.  your  customer  solu¬ 
tion."  “JJG  Solution  Providers.”  “iZap, 
your  e-maii  solution."  Marketing 
people  don’t  put  that  stuff  in  the  bro¬ 
chures  by  accident.  They  know  exactly 
where  our  emotional  hot  buttons  are 


And  then  !  have  a  problem. 

Why?  Because  none  of  those  things 
is  a  problem.  Those  are  all  proposed 
solutions  to  some  unknown  or  un- 
articulatcd  problem.  And  I  have  to 
come  up  with  some  polite  but  probing 
questions  to  tr>'  to  understand  what’s 
going  on. 

Whenever  you  ask  someone,  “What’s 
the  problem?"  and  the  response  is 
phrased  as  the  absence  of  some  solu¬ 
tion,  you  can  be  fairly  certain  that  no 
one  really  knows  what  the  problem  is. 

There  are  good  reasons  why  this 
happens,  none  of  which  is  that  people 
are  stupid  or  unobservant.  The  rea¬ 


sons  range  fn>m  fear  lo  hope. 

FEAR;  For  most  people.  problem.s  are 
uncomfortable  things.  They  are  dark, 
mysterious,  threatening  things.  They 
have  all  sorts  of  unwelcome  impliea- 
tions:  “If  1  have  a  problem,  there  must 
be  something  wrong  with  me."  When 
we  sense  a  problem,  the  natural  reac¬ 
tion  is  to  want  to  do  something  about 
it.  to  make  it  go  away. 

But  that  often  leads  to  making  big 
leaps,  skipping  thought  and  going 
right  to  action.  It's  ca.sy  to  hop  from 
the  symptom  of  the  problem  right  to  a 
.solution  without  carefully  considering 
the  nature  of  the  problem. 

“John  didn’t  find  out  about  the  late 
shipment  until  it  was  too  late  to  do 
anything  about  it,  therefore  we  need  to 
send  our  managers  to  communication 
training.”  Or.  “Sandy,  that  newly  pro¬ 
moted  manager,  said  some  really  hate¬ 
ful  and  unproductive  things  to  her 
staff  at  that  last  meeting,  so  we’d  bet¬ 
ter  get  her  some  coaching." 

HOPE:  At  the  other  end  of  the  spec¬ 
trum  are  imagined  realities,  vague 
Utopian  musingsof  a  better  future. 
These  can  be  driven  by  truly  extra¬ 
ordinary  visionary  ideas  about  trans¬ 
formations  of  organizations  and  strate¬ 
gics.  Sadly,  they  are  too  often  the  re¬ 
sult  of  a  brilliantly  conceived  market¬ 
ing  program  for  some  sort  of  minor 
technical  gewgaw  foisted  on  over¬ 
whelmed  managers. 

As  experts  in  problem  solving,  our 
responsibility  is  to  recognize  and  ex¬ 
pose  this  sort  of  fuzzy  thinking.  As 
service  providers,  we  help  our  cus¬ 
tomers  best  when  we  ensure  that  we 
are  solving  real  problems  rather  than 
filling  orders.  As  leaders,  we  must  re¬ 
member  that  work  has  the  most  mean¬ 
ing  when  ail  concerned  know*  toward 
what  end  we  strive.  Absent  solutions 
are  never  problems,  and  as  an  indus¬ 
try.  we  must  stop  acting  as  if  they 
were.  050051 
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What’s  the  Problem? 


Those  of  us  in  it  tend  to  see  the  world 
through  the  lens  of  problems  and  solu¬ 
tions.  Otu"  entire  work  lives  are  devoted 
to  solving  problems.  One  after  the  other, 
we  knock  them  down. 

This  habit  tends  to  start  early  in  life.  In  school, 
we  are  presented  with  math  problems  —  and  we 
solve  them.  At  home,  we  are  given  toys  to  play  with  — 
and  we  disassemble  and  improve  them.  We  are  given 
broken  computers  —  and  we  fix  them.  We  are  reward¬ 
ed  for  our  ingenuity. 


These  problems  and  so¬ 
lutions  bring  with  them  an 
emotional  boost,  loo.  What 
can  beat  the  satisfaction  of 
solving  a  truly  challenging 
problem?  Who  doesn’t  love 
being  the  great  hero  saving 
Aunt  Sadie’s  precious  Hies 
from  oblivion?  At  the  end 
of  a  particularly  thorny 
problem,  don’t  you  just 
ima^ne  yourself  spiking 
the  code  in  celebration,  as 
if  you’d  just  caught  a  game¬ 
winning  pass? 

Problems  have  wonder¬ 
ful  motivating  features. 

They  are  compact  and  fi- 
nite.  They  start  with  a  chal¬ 
lenge  —  a  call  to  action  (or 
at  least  to  thought)  —  and 
elegant  solutions  signal  triumph. 

We  are  conquering  heroes.  We  stand 
on  Olympus  with  the  gods.  We  solve 
problems. 

If  you  need  evidence  of  how  promi¬ 
nent  problems  are  in  our  thinking,  just 
look  at  the  marketing  materials  for 
almost  any  software  package  or  con¬ 
sulting  company.  They  all  bill  them¬ 
selves  as  your  “solution”  to  something: 
“eBragjdocious,  your  customer  solu¬ 
tion."  “JJG  Solution  Providers.*  "iZap, 
your  e-mail  solution.”  Marketing 
people  don’t  put  that  stuff  in  the  bro¬ 
chures  by  accident  They  know  exactly 
where  our  emotional  hot  buttons  are 
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and  bow  to  push  them. 

But  for  people  so  at¬ 
tuned  to  prc^lems,  we 
tend  to  be  remarlu^ly  in- 
ardcubte  about  them.  Very 
smart  and  accomplished 
people  call  me  all  the  time, 
and  the  conversation  goes 
something  like  this: 

"Can  you  help  me?" 
someone  asks. 

"I  don't  know.  What’s  the 
problem?”  I  reply. 

The  answer  is  almost  al¬ 
ways  something  like,  “Our 
management  team  needs  a 
facilitated  retreat"  Or,  "We 
need  a  training  program  on 
communications.”  Or.  "We 
need  a  new  project  man¬ 
agement  process." 

And  then  I  have  a  problem. 

Why?  Because  none  of  those  things 
is  a  problem.  Those  are  all  proposed 
solutions  to  some  unknown  or  im- 
articulated  pn^lem.  And  I  have  to 
come  up  with  some  polite  but  probing 
questions  to  try  to  understand  what’s 
going  on- 

Wbenever  you  ask  someone,  “What’s 
the  problem?"  and  the  response  is 
phrased  as  the  absence  of  some  solu¬ 
tion.  you  can  be  fairly  certain  that  no 
one  realty  knows  what  the  problem  is. 

There  are  good  reasons  why  this 
happens,  none  of  which  is  that  people 
are  stupid  or  unobservant  The  rea¬ 


sons  range  from  fear  to  hope. 

FEAR;  For  most  people,  problems  are 
uncomfortable  things.  They  are  dark, 
mysterious,  threatening  things.  They 
have  all  sorts  of  unwelcome  implica¬ 
tions:  “If  I  have  a  problem,  there  must 
be  something  wrong  with  me.”  When 
we  sense  a  problem,  the  natural  reac¬ 
tion  is  to  want  to  do  something  about 
it.  to  make  it  go  away. 

But  that  often  leads  to  making  big 
leaps,  skipping  thou^t  and  going 
right  to  action.  It’s  easy  to  hop  fiom 
the  symptom  of  the  problem  right  to  a 
solution  without  carefully  considering 
the  nature  of  the  problem. 

“John  didn’t  find  out  about  the  late 
shipment  until  it  was  too  late  to  do 
anything  about  it,  therefore  we  need  to 
send  our  managers  to  communication 
training.”  Or.  "Sandy,  that  newly  pro¬ 
moted  manager,  said  some  really  hate¬ 
ful  and  unproductive  things  to  her 
staff  at  that  last  meeting,  so  we’d  bet¬ 
ter  get  her  some  coaching.” 

HOPE:  At  the  other  end  of  the  spec¬ 
trum  are  imagined  realities,  vague 
Utopian  musings  of  a  better  future. 
These  can  be  driven  by  truly  extra¬ 
ordinary  visionary  ideas  about  trans¬ 
formations  of  organizations  and  strate¬ 
gies.  Sadly,  they  are  too  often  the  re¬ 
sult  of  a  brilliantly  conceived  maricet- 
ing  program  for  some  sort  of  minor 
technical  gewgaw  foisted  on  over¬ 
whelmed  managers. 

As  experts  in  pn^lem  solving,  our 
responsibility  is  to  recognize  and  ex¬ 
pose  this  sort  of  fozzy  thin  king  As 
service  providers,  we  help  our  cus¬ 
tomers  best  when  we  ensure  that  we 
are  solving  real  problems  rather  than 
filling  orders.  As  leaders,  we  must  re¬ 
member  that  work  has  the  most  mean¬ 
ing  when  all  concerned  know  toward 
what  end  we  strive.  Absent  solutions 
are  never  problems,  and  as  an  indus¬ 
try,  we  must  stop  acting  as  if  they 
were.  050051 
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Don’t  Miss  The  IT  Event  Of  The  Year! 


JOIN  THE  ITIL 
REVOLUTION! 

Attend  this  event  and  we  li 
show  you  how  to  use  the 
best  practices  found  in  the 
Information  Technology 
Infrastructure  Library  (ITILI  ■ 
the  world's  most  credible  IT 
service  management 
framework  -  to  "revolutionize 
your  IT  organization. 

But,  you  don't  have  to  tal  ■ 
our  word  for  it.  Already 
tens  of  thousands  of  IT 
professionals  from  world 
class  organizations  have 
experienced  powerful  results! 
Now.  it  s  VO  1.1 1  tilin' 
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Orlando  February  6 -9, 2005 

Exclusive  Keynote! 

'  ‘  Sir  Tim  Berners-Lee  CPi 

’  4*-  Inventor  of  the  World  Wide  Web 
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Greatest  Minds  Of  The  20th  Century 
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IT  Careers:  Does  this  Employer  Value  Diversity? 


Companies  covet  a  reputation  for  valuing  diversity  They 
advertise,  they  talk,  they  count.  But  for  those  IT 
professionals  defined  as  'diverse'  how  do  you  know 
for  sure? 

It's  a  question  that  Annette  Merntt  Cummings  and  Martha 
Ceja  spend  their  careers  evaluating  Cummings  is  vice 
president/national  director  of  Diversity  Services  for  Bernard 
Modes  Group  Ceja  is  a  strategist  with  the  group,  based  in 
Silicon  Valley 

The  Diversity  Services  organization  looks  at  valuing 
diversity  as  a  process  of  moving  from  an  initial  point 
through  four  phases  that  end  with  indusion.  Cummings 
defines  ifKJusion  as  acceptance  of  the  ideas  and  talents 
that  all  people  bring  to  an  organization,  a  long  journey 
from  initial  training  that  helps  an  organization  understand 
why  diversity  matters  from  a  business  stance 

Cummings  says  there  are  specific  queues  as  to  the  progress 
along  that  continuum  "The  first  place  you'd  go  in  looking 
at  a  company  is  probably  to  its  website.  Do  they  have 
affinity  groups?  fs  the  site  in  more  than  one  language,  such 
as  Chinese.  Spanish  or  other?  How  many  dicks  does  it  take 
you  to  get  to  some  menhon  of  diversity?  If  it  takes  six  or 
seven  before  there's  any  mention,  that  tells  you  this  is  not 
one  of  the  company’s  higher  prionties  or  that  the  human 
resources  or  diversity  organizations  has  lost  the  battle  for 
(websjiel  real  estate  * 


Ceja  says  appearances  do  count,  on  the  website  and  in  real 
life  ‘Are  there  individuals  (of  diverse  backgrounds)  in 
positions  of  leadership?"  she  asks.  "Seeing  this  (for  any 
person  of  diversity)  is  invigorating  in  terms  of  the 
possibilities  it  represents.  I  advise  people  to  drill  up  further 
-  look  at  the  executive  committee  and  at  the  board  of 
directors.  Look  for  transparency  in  terms  of  how  open  the 
organization  is  about  its  progress  in  valuing  diversity.  Is  it 
something  they  report  on  annually?" 

In  addition,  the  two  diversity  leaders  have  advice  for  IT 
professionals  looking  at  a  career  change. '  If  i  were  looking 
at  new  opportunities,  I  would  look  first  at  an  industry  that 
fascinates  me,  beyond  the  IT  application,  because  that's 
where  ihejobsare-not  npurelTcomparwes '  says  Cummings 
The  industries  closest  to  the  consumer,  such  as  automotive 
and  consumer  products,  are  marketers  by  definition  and 
understand  the  changes  in  the  marketplace  in  this  country. 
They  have  embraced  diversity  at  a  more  aggressive  rate." 

Cummings  also  points  to  government  agencies  as  major 
players  in  the  future  of  the  IT  profession.  Agencies  ranging 
from  the  CIA  to  the  Office  of  Personnel  Management  are 
hungry  for  IT  skills;  up  to  70%  of  the  senior  managers 
in  federal  government  are  expeaed  to  retire  in  the 
next  five  years.  'These  aren't  just  entry  level  jobs  -  these 
are  careers." 

Ceja  says  for  IT  professionals  there  is  a  distinct  advantage 
-  skills  mean  everything.  “In  Silicon  Valley,  if  you  have  the 
skills,  this  becomes  a  color-blind  profession  in  some  ways, 
"these  are  careers."  she  says. 


il.  State  and  local 

opportunity  and  affirmative  aaion. 

and  providing  diversity  training 
Ih,  Women's  History  month, 
'  fed  that  diversity  can  add  value 
and  help  you  achieve 


ige  your  culture.  This  is  the  hard 
attitudes  so  that  everyone  is 
ol  dhreisity.  Everyone  understands 
At  this  stage,  you  start  holding 
Ww  may  include  diversity  as  a 
reviews. 


jlNasginiiation  has  diverse  teams  in 
measurements.  Managers  are 
lair  success  in  fostering  diversity, 
bonuses  or  provided  with 


Ofeersity  Services 


for  more  information  about  IT  Careers  advertising, 
please  call:  800.762.2977 

Produced  by  Carole  ft.  Hedden 


“DIVERSITY  IN  PRODUCTS. 
SERVICES  AND  PEOPLE“ 

TMt  SOClAt  SeCURITV  ADMINISTRATION  IN  WOOOLAWN 
ttWViANO  «  seetxig  nqhiy  rnotmaled  IT  P^jNssonals  »»  ftllotwng 
Nvn  oT  jewns  MainfrsRw  Dev^iope's  (COBOL  CiCSt  imentei 
CteWpBr&tjiM  WebSorm  CGl  OalflO«toAam»fi8Bjlas(DBZ  'OMS 
Orac«<  3vsim»  OperaKm  AnalyM  (SUNllNlX  Xt  TSOrtSPf  j/OS 
CoWaWi 

COME  jom  oun  winning  team'  .  we  otfek 
COA»>ETmvE  salaries  -  RANGE  $52  963-$e5.86T  ACOMPRE- 

HENSWt  OerCF'TS  wckage  including  retirement  savings 

•WESTMENT  PLAN.  HEALTH  tiFE  ANO  LONG  TERM  INSURANCE 
PORSELf  AND  fAMAV  PAID  VACATION,  SICK  LEWE  AND  H)  rwO 
MOUOAVS  PAiO  OVERTIME  AND  ONGOING  TECHNICAL  TRWNING 
ANO  FlEXOlE  VWJRk  SCHEDULES  Aa.  OF  THIS  AND  A  POSITIVE 
CASUAL  WORK  ENVIRONMENT! 

^ARFy^ibUSAjOBSai  r«8.r.ioCAeafcruaiiowoem.aci«i  arwMiBa 
Pw  SaoW  SeoAW  Admnaratian  MusiDeaUnleaSMiesoUenb««yy 


Where 
The  Best 
Get  Better! 


www.itcareers.com 


Compulerworld  •  infoWorid  •  Network  World  -  November  1,  2004 


IT  Cclil'Cl’S 


IT  c  a I'cc rs.cnin 


Adswtising  Supplement 


IT  Careers:  Does  this  Employer  Vajue  Diversit 

Companies  covet  a  reputation  for  valuing  diversify.  They  says  appearances  do  OKjnt,  on  the  website  and  in  real 
advertise,  they  talk,  they  count.  But  for  those  IT  life-  ‘Are  there  individuals  (of  diverse  badcqrounds}  in 


Vwadvertise,  they  talk,  they  count.  But  for  those  IT  life.  ‘Are  there  individuals  (of  diverse  backgrounds)  in 
professionals  defined  as  ‘diverse*,  how  do  you  know  positions  of  leadership?'  she  asks.  'Seeing  this  (for  any 
for  sure?  person  of  diversity)  is  invigorating  in  terms  of  the 

possibiiities  it  represents.  I  advise  people  to  drill  up  fijrther 
It's  a  question  that  Annette  Merrfn  Cummings  and  Martha  -  look  at  the  executive  committee  and  at  the  board  of 
Ceja  spend  their  careers  evaluating.  Cummings  is  vice  directors,  look  for  transparency  in  terms  of  how  open  the 
presidentMational  director  of  Diversity  Services  for  Bernard  or^anaation  is  about  its  progress  in  valuing  diversity.  Is  it 
Modes  Group.  Ceia  is  a  strategist  with  the  group,  based  in  they  report  on  annually? 

SiTicon  Vafley.  In  addition,  the  two  diversity  leaders  have  advice  for  fT 

-  ^  .  ....  professionats  looking  at  a  career  change. 'If  I  were  lookino 
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diversrty  as  a  process  of  moving  from  an  initial  point  fascinates  me,  beyond  the  IT  application,  because  that’s 
through  four  phases  that  end  with  inclusion.  Cummings  where  the  jobs  are -not  in  pure  fTcoripm' says  Ofranir^. 
defines  irKlusion  as  acceptance  of  the  ideas  and  talents  The  industries  closest  to  the  consumer,  pxh  as  automotive 
that  all  people  bring  to  an  organization,  a  long  journey  and  consumer  products^  are  marketers  by  definition  and 
from  initial  training  that  helps  an  organization  understand  understarni  the  changes  in  the  marketplace  in  this  country. 
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They  have  embraced  diversity  at  a  more  aggressive  rate.” 
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smnmb^ffiwoy  anymanboatoKllsyoutoisnot  Ceja  says  b,  IT  pmlessionah  them  b  a  distinct  advantage 
one  oT  the  companys  higher  prlomies  or  to  Ihe  human  .gqn,  ^  evervlhino.  "In  Silicon  Valiev,  if  vou  have  ihe 


resources  or  ftivenity  organizatims  has  lost  the  battle  for 
(website)  real  estate.” 
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Audit 


Interwoven  that  it  was  in  com¬ 
pliance  with  the  TeamSite  li¬ 
censing  agreement,  the  pur- 
cbasu^  manager  added.  A 
spokesman  for  Interwoven 
said  the  company  wouldn't 
comment  on  whether  it  was 
sending  such  letters  to  cus¬ 
tomers. 

The  financial  services  firm 
isn’t  alone.  Lawrence  A. 
Husick.  a  partner  at  Upton. 
Weinberger  &  Husick.  an  in¬ 
tellectual  property  law  firm  in 
Malvern.  Pa.,  said  he  has  been 
contacted  by  several  clients 
recently  who  have  received 
similar  letters  from  software 
vendors  that  be  declined  to 
identify,  except  to  call  them 
'’the  usual  suspects.” 

Husick  said  he  doesn't  be¬ 


lieve  that  the  letters  represent 
an  honest  effort  among  ven¬ 
dors  to  meet  Sarbanes-Oxley 
regulatory  requirements  —  a 
sentiment  sha^  by  several  IT 
asset  managers  attending  the 
conference. 

“Vendors  will  use  every  tool 
they  have  at  their  disposal  to 
increase  revenues  —  they’re 
not  doing  this  for  their  own 
(Sarbanes-Oxleyl  compliance 
requirements."  he  added. 


Vendor  Defense 

Jenny  Schuchert.  vice  presi¬ 
dent  of  program  development 
at  Akron.  Ohio-based  Inter¬ 
national  Association  of  IT  As¬ 
set  Managers  toe.  (lAITAM), 
disagreed 

Schuchert  said  she  hadn’t 
previously  beard  about  the  let¬ 
ters  but  wouldn’t  be  surprised 
if  software  vendors  were  mail¬ 
ing  them  out.  Many  software 


vendors  have  poor  record¬ 
keeping  procedures  and  may 
need  customers  to  conduct 
self-audits  so  the  vendors  can 
attest  to  the  financial  controls 
that  support  their  sales  activi¬ 
ties.  she  noted 

"Regtilators  are  on  [ven¬ 
dors]  to  track  their  revenues, 
when  the  customer  contracts 
were  started,  the  size  of  the 
deals,  etc."  added  Schuchert. 

Barbara  Rembiesa,  presi¬ 
dent  of  the  lAITAM.  the  user 
group  that  sponsored  the 
conference,  said  she  spoke 


with  “a  few"  attendees  there 
who  have  received  Sarbanes- 
Oxley-related  self-audit  re¬ 
quests  from  software  vendors. 
"Publishers  can  request  self- 
audits  anytime,  and  they’re 
within  their  rights  to  do  it." 
she  said 

But  several  conference  at¬ 
tendees  said  they  were  irked 
by  the  approach,  even  though 
their  organizations  haven't  re¬ 
ceived  such  correspondence. 
“I  think  (software  vendors)  are 
doing  this  to  get  more  people 
to  conduct  audits.  It’s  bogus." 


said  an  IT  asset  manager  at  a 
Urge  financial  services  firm 
in  the  Northeast  who  request¬ 
ed  anonymity. 

Rod  Anderson,  a  spokesman 
for  Novell  Inc  in  Waltham, 
Mass.,  said  the  con^iany  has 
been  sending  letters  to  cus¬ 
tomers  “for  a  number  of 
years"  requesting  that  they 
conduct  self-audits.  However, 
be  said.  Novell  hasn't  sent  cus¬ 
tomers  any  letters  containing 
references  to  Sarbanes-Oxje>-. 

A  spokeswoman  for  Oracle 
Corp.  said  the  vendor  hasn't 
sent  users  such  leners.  Spokes¬ 
men  for  IBM  and  Mkrosoft 
Corp.  declined  to  comment  for 
this  story.  O  S04U 
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Microsoft  LCS  Security  Futures 
Drive  Interest  in  Corporate  IM 


■ 

Will  enable  users  of  popular  messaging 
systems  to  communicate  more  safely 


•V  TOeVD  R.  weiSS 

Microsoft  Corp.’s  new  Liw 
Conuminications  Server 
(LCS)  2005  could  prove  to  be 
a  crucial  ingredient  in  the 
^read  of  corporate  instant 
messaging  use,  some  users 
and  analysts  say. 

The  offering,  which  is  com¬ 
patible  with  most  popular  IM 
systems,  has  corporate  users 
and  vendors  eyeing  new  op¬ 
portunities  for  more-secure 
messa^ng. 

Taylor  CoUyer.  director  of 
server  marked  at  Microsoft, 
said  that  when  used  with  a 
special  caanecthnty  pack,  LCS 
will  allow  mote-secure  interac¬ 
tion  with  users  running  Yaboo 
toc.^  Yaboo  Messenger;  Amer¬ 
ica  Online  toe's  Instant  Mes¬ 
senger  end  Microsoft’s  MSN 
Messenger.  Those  IM  commu¬ 


nications  will  be  enabled  in  se¬ 
cure,  encrypted  messages,  per¬ 
mitting  LCS  users  to  more 
safely  communicate  with  users 
of  the  pt^ular  free  IM  clients. 
That’s  important,  CoUyer  said, 
because  “people  don’t  want 
corporate  secrets  leaking  out 
the  backdoor" 

LCS  is  due  to  ship  in  De¬ 
cember  to  2005.  Microsoft  will 
release  a  new  IM  client,  code- 
named  Istanbul  that  wiU  be 
the  preferred  client  fiw  LCS. 

Graham  Lavtdor,  chaiiman  of 
the  New  York-based  Financial 
Services  Instant  Messaging 
Association  (FIMA)  and  pro¬ 
gram  manager  of  IM  at  New 
York-based  Deutsche  Bank,  a 
heavy  user  of  secure  enter¬ 
prise  IM.  said  the  interoper¬ 
ability  promised  by  LC3  2005 
is  a  ‘1>retty  fundamental 


change  in  the  industry,  espe- 
ciaUy  coming  from  a  company 
like  Microsoft." 

it  wUI  aUow  the  broad  user 
base  of  the  free  IM  communi¬ 
ty  to  take  advantage  of  the 
“richness  of  enterprise  IM." 
which  offers  more  security 
and  usability  than  free  IM 
clients.  Lawlor  said. 

FIMA  was  created  in  2002  to 
pressure  vendors  into  stan- 
dardiztng  IM  software  to  meet 
compatibiUty.  security  and  oth¬ 


er  business  IT  needs  ((^uick- 
Link  33724 J.  The  FIMA  lineup 
includes  Bank  of  America.  Citi¬ 
group.  Credit  Suisse  First 
Boston.  Deutsche  Bank,  LP. 
Morgan  Chase  &  Co,  Lehman 
Brothers  Inc..  Merrill  Lynch  fle 
Co.,  Prudendal  Securities  toe. 
and  UBS  Warburg  LLC 

Some  FIMA  members  have 
been  beta-testing  LCS  2005, 
Lawlor  said,  and  most  are  at 
least  investigating  the  product 
for  possible  use. 

Mike  Miller,  director  of  sup¬ 
port  services  for  newspaper 
and  television  conglomerate 
Media  (Seoeral  toe.  in  Rich¬ 
mond,  Va.,  said  IM  use  at  his 
company  is  still  light;  only 
about  100  out  of  some  8,000 
workers  use  an  IT-endorsed 
system.  Those  worivrs  use 
free  AOL  IM  clieirt,  with 
added  security,  logging,  man¬ 
agement  and  control  features 
provided  by  Waltham.  Mass.- 
based  IMlogk  toc.'s  IM  Man¬ 
ager  software. 

Media  Geiteral  has  looked 
at  enterprise  IM  systems,  but 
company  officials  agreed  rhat  i 
there's  no  treed  to  act  until  user  I 
numbers  growt  Miller  said.  I 


GencUe  Hung,  an  analyst  at 
The  Radicati  Group  toe.  in 
Palo  Alto.  (2alif.,  said  corpo¬ 
rate  interest  in  IM  is  due.  in 
some  cases,  to  the  technolo¬ 
gy’s  “presence"  feature,  which 
envies  users  to  see  who  is 
available  and  onime.  "It's  defi¬ 
nitely  picking  up  in  terms  of 
enterprise  IM."  Hung 
Some  companies  are  still  not 
ready  for  enterprise  IM  pack¬ 
ages,  though,  a^  arc  usir^  the 
hm  IM  clients  along  with 
man^ment  loob  from  ven¬ 
dors  like  IMlogic.  Akonix  Sys¬ 
tems  Inc  aitd  FaceTime  Cotn- 
rouiucations  toe.,  she  said. 

Joe  WUcQX.  an  analyst  at 
Jupiter  Research  in  Nw  York, 
said  corporate  interest  in  en¬ 
terprise  IM  has  grown  be¬ 
cause  of  regulatory  require¬ 
ments  for  mess^e  Urging 
and  concerns  that  public  IM 
networks  are  uitsafe.  "For 
some  retalleis,  I  wouldn't  say 
h's  must-have,"  WUcox  said. 
"Bur  where  there  are  people 
sitting  at  desks  and  oo-woric- 
ers  are  on  axKKber  floor  or 
in  another  city . . .  the  must- 
have  increases  dramatically." 
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Interwoven  that  it  was  in  com¬ 
pliance  with  the  TeamSite  li¬ 
censing  agreement,  the  pur- 
chasii^  manager  added.  A 
spokesman  for  Interwoven 
said  the  company  wouldn’t 
comment  on  whether  it  was 
sending  such  letters  to  cus¬ 
tomers. 

The  financial  services  firm 
isn’t  alone.  Lawrence  A. 
Husick.  a  partner  at  Lipton, 
Weinberger  &  Husick.  an  in¬ 
tellectual  property  law  firm  in 
Malvern.  Pa.,  said  he  has  been 
contacted  by  several  clients 
recently  who  have  received 
similar  letters  from  software 
vendors  that  he  declined  to 
identify,  except  to  call  them 
“the  usual  suspects.’’ 

Husick  said  he  doesn't  be¬ 


lieve  that  the  letters  represent 
an  honest  effort  among  ven¬ 
dors  to  meet  Sarbanes-Oxicy 
regulator)'  requirements  —  a 
sentiment  shared  by  several  IT 
asset  managers  attending  the 
conference. 

"Vendors  will  use  cver>-  tool 
they  have  at  their  disposal  to 
increase  re\’cnues  —  the>-’re 
not  doing  this  for  their  own 
iSarbanes-Oxlcy)  compliance 
requirements,”  he  added. 

Vendor  Defense 

lenny  Schuchert.  vice  presi¬ 
dent  of  program  development 
at  Akron.  Ohio-based  Inter¬ 
national  Association  of  IT  As¬ 
set  Managers  Inc.  (lAITAM), 
disagreed. 

Schuchert  said  she  hadn’t 
previously  heard  about  the  let¬ 
ters  but  wouldn't  be  surprised 
if  software  vendors  were  mail¬ 
ing  them  out.  Many  software 
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iMi^  •  nM  to  gM  ewtanm  lo  h 

N'cndors  ha\'e  poor  record¬ 
keeping  pn)ccduri*s  and  may 
need  customers  to  conduct 
sell-audits  so  the  vendors  can 
attest  to  the  financial  controls 
that  support  their  sales  activi¬ 
ties,  she  noted. 

■■Regulators  .are  on !  ven¬ 
dors!  to  track  their  revenues, 
when  ihe  customer  contracts 
were  starred,  the  size  of  the 
deals,  etc..  *  added  Schuchert, 

Barbara  Rembiesa.  presi¬ 
dent  of  the  lAITAM.  the  user 
group  that  sponsored  the 
conference,  said  she  spoke 


with  "a  few  "  .iitcodecs  there 
who  have  received  Sarbanes- 
Oxley-rclaied  self-audit  re¬ 
quests  from  software  vendors 
“I’ubli.sher\  can  rs^qui'si  self- 
audits  anytime,  and  they're 
within  their  rights  u*  do  it." 
she  said- 

But  several  conference  at¬ 
tendees  said  they  were  irked 
by  the  approach,  even  though 
their  organizations  haven't  re¬ 
ceived  such  correspondence. 
“I  think  {sofiw'are  vendors)  are 
doing  this  to  get  more  people 
lo  conduct  audit.s.  It’s  bogus." 


said  an  IT  asset  manager  at 
large  finanoal  sers-iccs  firm 
in  the  Norihe.ist  w  ho  request  - 
ed  anonymity 

Rod  Anderson,  a  spoktsman 
for  Novell  Inc-  in  Waltham. 
Mass..  s.iid  the  company  has 
been  sending  letters  to  cus¬ 
tomers  “for  a  number  of 
years"  requesting  that  ihcv 
conduct  self-audtts.  Ht*wvver, 
he  said.  Ntivell  hasn't  sent  cus¬ 
tomers  any  letters  containing 
references  to  Sarbanes-Oxlev 

A  spokeswoman  fe»r  Oracle 
(  orp.  said  the  ve-ndtir  hasn't 
sent  use-rs  such  letters.  Spiikcs- 
me-n  for  IBM  and  Micri>s»'»ft 
Corp.  de'dined  to  commemt  for 
I  this  story.  O  50414 


Microsoft  LCS  Security  Features 
Drive  Interest  in  Corporate  IM 


will  enable  users  of  popular  messaging 
-systems  to  communicate  more  safeK 


BV  TODO  R.  WeiSS 
Microsoft  Corp.'s  new  Live 
Communications  Server 
(LCS)  2005  could  prove  to  be 
a  crucial  ingredient  in  the 
spread  of  corporate  instant 
messaging  use,  some  users 
and  analysts  say. 

The  offering,  which  is  com¬ 
patible  with  most  popular  IM 
systems,  has  corporate  users 
and  vendors  eyeing  new  op¬ 
portunities  for  more-secure 
messaging. 

Taylor  CoUyer,  director  of 
server  marketing  at  Microsoft, 
said  that  when  used  with  a 
special  connectivity  pack,  LCS 
will  allow  more-secure  interac¬ 
tion  with  u-sers  running  Yahoo 
Inc.'s  Yahoo  Messenger.  Amer¬ 
ica  Online  Inc.'s  Instant  Mes¬ 
senger  and  Microsoft's  MSN 
Messenger.  TTtosc  IM  commu¬ 


nications  will  be  enabled  in  se¬ 
cure,  encrypted  messages,  per¬ 
mitting  LCS  users  to  more 
safely  communicate  with  users 
of  the  popular  free  IM  clients. 
Thai’s  important.  Collyer  said. 
bec3u.se  "‘people  don't  want 
corporate  secrets  leaking  out 
the  back  door." 

LCS  is  due  to  ship  in  De¬ 
cember.  In  2005,  Microsoft  will 
release  a  new  IM  client,  code- 
named  Istanbul,  that  will  be 
the  preferred  client  for  LCS. 

Graham  Lawlor,  chairman  of 
the  New  York-based  Financial 
Services  Instant  Messaging 
Association  (FIMA)  and  pro¬ 
gram  manager  of  IM  at  New 
York-based  Deutsche  Bank,  a 
heavy  user  of  secure  enter¬ 
prise  IM.  said  the  interoper¬ 
ability  promised  by  LCS  2005 
is  a  “pretty  fundamental 


change  in  the  industry,  espe¬ 
cially  coming  from  a  company 
like  Microsoft." 

It  will  allow  the  broad  user 
base  of  the  free  IM  comrauni- 
ly  to  take  advantage  of  the 
“richness  of  enterprise  IM." 
which  offers  more  security 
and  usability  than  free  IM 
clients.  Lawlor  said. 

FIMA  was  created  in  2002  to 
pressure  vendors  into  stan¬ 
dardizing  IM  software  to  meet 
compatibility,  security  and  oth- 
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cr  bu-sinevi  IT  needs  KJuick- 
Link  .^3724J.  The  FIMA  lint'up 
,  includes  Bank  of  .America.  Citi- 
gniup.  Credit  .Suisse  First 
Boston.  Deutsche  Bank.  ).P. 
Morgan  Chose  A:  Co.  U’hman 
Brothers  Inc.  Merrill  Lynch  & 

I  Co.  Prudential  Securities  Inc. 
and  UBS  Warburg  LLC. 

Some  FIMA  membeni  ha\e 
been  beta-testing  LCS  2005, 
Law'lor  said,  and  most  arc  at 
least  investigating  ihe  product 
for  possible  use. 

Mike  Miller,  director  of  sup¬ 
port  services  for  newspaper 
and  television  eongiomeraiL- 
Mcdia  General  Inc.  in  Rich¬ 
mond.  Va..  said  IM  use  at  his 
company  is  still  light;  only 
about  100  out  of  some  8,000 
workers  use  an  IT-endorsed 
system.  Those  workers  use 
the  free  AOL  IM  client,  with 
added  security,  logging,  man¬ 
agement  and  control  features 
provided  by  Waltham.  Mass.- 
based  IMlogic  Inc.’s  IM  Man¬ 
ager  software. 

Media  General  has  looked 
at  enterprise  IM  systems,  but 
company  officials  agreed  that 
there’s  no  need  to  act  until  user 
numbers  grow.  Miller  said. 
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Genclltf  Hung,  an  analyst  .it 
The  Radicati  Group  Inc.  in 
I  I'alo  Alto.  Calif.,  said  corpo¬ 
rate  interest  in  IM  is  due.  in 
I  some  cases,  to  the  technolo- 
g)’’s  "pn'sence"  feature,  whwh 
I  enables  users  to  see  who  is 
available  and  online.  “It’sdefi- 
I  nitcly  picking  up  in  terms  of 
enterprise  IM."  Hung  said. 
Some  companies  are  still  not 
ready  for  enterprise  IM  pack¬ 
ages.  though,  and  arc  using  the 
tree  IM  clients  along  with 
management  tools  from  ven¬ 
dors  like  IMlogic,  Akonix  .S)-*- 
teim  Inc.  and  FaceTime  Com¬ 
munications  Inc.,  she  said. 

Joe  Wilcox,  an  anai)’st  at 
lupiter  Research  in  New  York, 
said  corporate  imcrcsi  in  en¬ 
terprise  IM  has  grown  be¬ 
cause  of  regulatory  require¬ 
ments  for  message  logging 
and  concerns  that  public  IM 
networks  arc  unsafe.  “For 
some  retailers.  I  wouldn't  say 
it's  must-have."  WUcos  said. 
“But  where  there  are  people 
sitting  at  desks  and  co-work¬ 
ers  arc  on  another  floor  or 
in  another  city  . . .  the  must  • 
have  increases  dramaticallv." 
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Offshore  Dot-Bomb 


WHY  ARE  WE  OFFSHORING  IT?  I’ve  puzzled  over 
that  question  ever  since  I  spent  a  day  last  month 
at  a  conference  for  lawyers  on  IT  offshoring.  The 
lawyers,  of  course,  were  focused  on  how  to  write 
good  outsourcing  contracts  —  struggling  to  fig¬ 
ure  out  how  to  deal  with  foreign  laws,  privacy,  security,  due  dili¬ 
gence  and  all  the  other  unfamiliar  complications  offshoring  brings. 

But  why  go  to  all  this  effort  for  something  that,  for  corporate  IT  at 
least,  is  really  untried,  uncertain  terra  incognita?  And  it  finally  hit 
me;  IT  offshoring  agreements  aren’t  being  done  as  conventional 
business  deals  on  the  usual  business  basis. 

They’re  being  done  on  faith.  It’s  like  dot-com  mania  all  over  again. 


Don’t  laugh.  True,  there’s  none  of  the  dot¬ 
com  hoopla  here.  These  days,  most  companies 
won't  even  talk  publicly  about  their  offshoring. 

But  they're  doing  it.  And  as  with  the  rush  to 
Web  commerce,  there’s  more  faith  than  fact 
driving  the  march  to  outsource  —  even  though 
the  numbers,  the  expertise  and  the  experience 
aren’t  there  to  justify  that  faith. 

With  the  dot-coms,  we  didn’t  know  whether 
a  Web-based  business  model  would  work  at  all 
—  or  if  It  did,  what  kinds  of  businesses  it  would 
support.  We  didn't  know  how  fast  business  could 
shift  to  the  Web.  or  whether  dot-coms  really 
could  transform  retailing.  Alt  we  knew  was  that 
bits  cost  less  than  bricks,  so  w'e  figured  every¬ 
thing  else  must  cost  less  on  the  Internet,  too. 

A  scrap  of  data,  an  untried  business  model 
and  a  lot  of  faith:  That  was  the  dot-com  way. 
and  we  all  chased  it. 

And  offshoring?  We  know  offshore  program¬ 
mers  get  paid  less  —  they’re  the  bits-cheaper- 
tfian-bricks  part  of  the  scheme. 

But  we  don’t  know  W'hai  kinds  of  corporate 
IT  projects  can  be  effectively  off¬ 
shored.  Or  what  happens  to  quality 
levels  as  offshoring  volume  ramps 
up.  Or  whether  outsourcing  will 
leave  us  with  the  flexibility  and 
agility  to  adjust  to  rapidly  changing 
business  conditions,  take  advantage 
of  new  market  opportunities  and 
quickly  respond  to  new  user  need.s. 

We  don't  even  know  if  we’d  ail 
be  better  off  leaving  offshoring  be¬ 
hind  in  favor  of  component  devel¬ 
opment.  packaged  applications  and 
improved  management  tools. 

We  just  don't  have  the  experience 


to  tell  us  those  things.  Or  the  expertise  to 
choose  the  right  projects  to  outsource  and  then 
successfully  manage  from  half  a  world  away.  Or 
the  project  results  —  the  hard  numbers  —  to 
give  us  confidence  in  the  decision  to  outsource. 

Then  why  all  the  IT  outsourcing?  It’s  faith, 
not  fact,  that  drives  it:  the  faith  of  CEOs.  CFOs 
and  CIOs  that  there  has  got  to  be  a  better  way 
to  do  IT,  and  offshoring  might  be  it. 

Which  explains  why,  as  I  learned  at  that  con¬ 
ference.  even  though  roughly  half  of  offshoring 
projects  fail,  customers  don’t  bait.  Instead,  they 
renegotiate  their  deals.  They  have  faith,  and  off¬ 
shoring  gets  a  second  chance. 

It  explains  why  cultural  and  legal  quirks  get 
forgiven,  complications  are  accepted  and  extra 
overhead  —  such  as  the  cost  of  getting  and 
keeping  lawyers  up  to  speed  on  how  to  write 
offshore  outsourcing  contracts  —  Is  taken  in 
stride.  Sure,  these  might  be  permanent  prob¬ 
lems  that  will  get  worse.  But  they  might  just  be 
teething  pains  that  will  work  themselves  out. 

Most  of  all.  it  explains  why  offshoring  seems  to 
march  on  regardless  of  logic  or  prac¬ 
tical  considerations  or  early  results. 

Yes.  that  bubble  of  faith  in  off¬ 
shoring  will  burst  eventually. 

When  that  happens,  as  with  the 
dot-coms,  some  offshoring  ap¬ 
proaches  will  disappear  and  some 
will  survive.  Experience  will  let  us 
sort  it  all  out.  and  the  offshoring 
that  survives  will  seem  a  lot  more 
sensible  in  hindsight. 

But  until  then,  all  we  can  do  is 
stru^le  to  figure  it  out  —  and 
hope  we  survive  this  offshoring  act 
of  faith.  OS0376 
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Right  on  Schedule 

Evay  time  there's  a  major  change  on  the  mairrt^^ 
this  user  coriTOblns  that  the  change  has  brolttn  one 
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er  heard  a  problem  from  that  user  again.” 
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Offshore  Dot-Bomb 


WHY  ARE  WE  OFFSHORING  IT?  I’ve  puzzled  over 
that  question  ever  since  I  spent  a  day  last  month 
at  a  conference  for  lawyers  on  IT  offshoring.  The 
lawyers,  of  course,  were  focused  on  how  to  write 
good  outsourcing  contracts  —  struggling  to  fig¬ 
ure  out  how  to  deal  with  foreign  laws,  privacy,  security,  due  dili¬ 
gence  and  all  the  other  unfamiliar  complications  offshoring  brings. 

But  why  go  to  all  this  effort  for  something  that,  for  corporate  IT  at 
least,  is  really  untried,  uncertain  terra  incognita?  And  it  finally  hit 
me:  IT  offshoring  agreements  aren’t  being  done  as  conventional 
business  deals  on  the  usual  business  basis. 

They’re  being  done  on  faith.  It’s  like  dot-com  mania  all  over  again. 

Don't  Uu^  TVue,  there's  none  of  the  dot-  to  tell  us  those  things.  Or  the  expertise  to 

com  hoopla  here.  These  days,  most  companies  choose  the  right  projects  to  outsource  and  then 
won’t  even  talk  publicly  about  their  ofiEshoring.  successfully  manage  from  Half  a  world  away.  Or 

But  they're  doing  it  And  as  with  the  rush  to  the  project  results  —  the  hard  numbers  —  to 
Web  commerce,  there's  more  faith  than  fact  give  us  confidence  in  the  decision  to  outsource, 

driving  the  march  to  outsource  —  even  though  Then  why  all  the  IT  outsourcing?  It’s  faith, 

the  numbers,  the  expertise  and  the  experience  not  fact,  that  drives  it:  the  faith  of  CEOs,  CFOs 
aren’t  there  to  justily  that  faith.  and  CIOs  that  there  has  got  to  be  a  better  way 

With  the  dot-coms,  we  didn’t  know  whether  to  do  IT.  and  offshoring  might  be  it 
a  Web-based  business  model  would  work  at  all  Which  explains  why,  as  I  learned  at  that  con- 

—  or  if  it  did.  what  kinds  of  businesses  it  would  ference,even  though  roughly  half  of  of^oring 

support  We  didn’t  know  how  &st  business  could  projects  foil,  customers  don’t  bail  Instead,  they 

shift  to  the  Web,  or  whether  dot-coms  really  renegotiate  their  deals.  They  have  faith,  and  off- 

could  transform  retailing.  All  we  knew  was  that  shoring  gets  a  second  rhanrp 
bits  cost  less  than  bricks,  so  we  figured  every-  It  explains  why  cultural  and  legal  quirks  get 

thing  else  must  cost  less  on  the  Internet,  too.  forgiven,  complications  are  accepted  and  extra 
A  scrap  of  data,  an  untried  business  model  overhead  —  such  as  the  cost  of  getting  and 

and  a  lot  of  faith:  That  was  the  dot-com  way,  keeping  lawyers  up  to  speed  on  how  to  write 

and  we  all  chased  it  offshore  outsourcing  contracts  —  is  taken  in 

And  offshoring?  We  know  offshore  program*  stride.  Sure,  these  mi^t  be  permanent  prob- 
mers  get  paid  less  —  they’re  the  biis-cheaper-  lems  that  will  get  worse.  But  they  might  just  be 
than-bricks  part  of  the  scheme.  teething  pains  that  will  woik  themselves  out. 

But  we  don't  know  what  kinds  of  corporate  Most  of  all,  it  mrplaitx  why  o&horing  seems  to 

i-r  i  .et  march  on  regardless  of  lo^  or  prac¬ 

tical  considerations  or  eariy  results. 

Yes,  that  bubble  of  faith  in  off¬ 
shoring  wQl  burst  eventually. 

When  that  happens,  as  with  the 
dot-coms,  some  offshoring  ap¬ 
proaches  will  disappear  and  some 
will  survive.  Experience  will  let  us 
sort  it  all  out,  and  the  offshoring 
that  survives  will  seem  a  lot  more 
sensible  in  hindsight. 

But  until  then,  all  we  can  do  is 
struggle  to  figure  it  out  ~  and 
hope  we  survive  this  offshoring  act 
of^th.  050376 


Don’t  lau^  Thie,  there's  none  of  the  dot¬ 
com  hoopla  here.  These  days,  most  companies 
won’t  even  talk  publicly  about  their  offshoring. 

But  they're  doing  it  And  as  with  the  rush  to 
Web  commerce,  there's  more  faith  than  fact 
driving  the  march  to  outsource  —  even  though 
the  numbers,  the  expertise  and  the  experience 
aren’t  there  to  justify  that  faith. 

With  the  dot-coms,  we  didn’t  know  whether 
a  Web-based  business  model  would  work  at  all 
—  or  if  it  did.  what  kinds  of  businesses  it  would 
support  We  didn’t  know  how  &st  business  could 
shift  to  the  Web,  or  whether  dot-coms  really 
could  transform  retailing.  All  we  knew  was  that 
bits  cost  less  than  bricks,  so  we  figured  every¬ 
thing  else  must  cost  less  on  the  Internet,  too. 

A  scrap  of  data,  an  untried  business  model 
and  a  lot  of  faith:  That  was  the  dot-com  way, 
and  we  all  chased  it 

And  offshoring?  We  know  offshore  program¬ 
mers  get  paid  less  —  they’re  the  bits-cheaper- 
than-bricks  part  of  the  scheme. 

But  we  don't  know  what  kinds  of  corporate 
IT  projects  can  be  effectively  off¬ 
shored.  Or  what  happens  to  quality 
levels  as  offshoring  volume  ramps 
up.  Or  whether  outsourcing  will 
leave  us  with  the  flexibility  and 
agility  to  adjust  to  rapidly  changing 
business  conditions,  take  advantage 
of  new  market  opportunities  and 
quickly  respond  to  new  user  needs. 

We  don’t  even  know  if  we’d  all 
be  better  off  leaving  ofi^boring  be¬ 
hind  in  £n?or  of  component  devel¬ 
opment,  packaged  applications  and 
ii[4>roved  management  tools. 

Wc  just  don’t  have  the  experience 


Seeking  to  align  IT  with  business  goals? 
Need  to  deliver  business  services  faster? 


'I  toqetlier? 


And  find  out  how  SOA  ready  your  company  is  with  a 
coMPUMENTAitvsoA  READINESS  ASSESSMENT  Benchmark  Report. 


Let  BEA  show  you  how  to  integrate 
your  business  processes  through 
Service-Oriented  Architecture. 


SOA  for  faster  delivery 


You’ve  heard  the  industry  buzz  about  BEA:  the  choice  for  SOA. 
Service-Oriented  Architecture.  BEA  is  a  world  leader  in  enterprise 

How  this  software  design  approach  can  greatly  reduce  the  application  infrastructure  software, 

costs,  time,  and  risks  of  business  integration  projects.  How  makers  of  the  first  and  only  integrated 

research  shows  that  75%  of  large  enterprises  will  begin  a  platform  for  application  development  and 

Service-Oriented  Architecture  (SOA)  implementation  by  integration.  The  BEA  WebLogic  Platform 

2006.  And  how  the  world's  leading  companies  are  already  is  a  superior  framework  for  SOA  that 

planning  SOA  deployments  to:  streamlines  the  process  of  integrating 

business  applications  to  more  closely 

Rapidly  implement  new  services  without  expensive  development  align  IT  with  business  Objectives. 

•  Reduce  process  complexity  and  leverage  existing  investments  5q  j-gp. 

■Adapt  faster  to  changing  needs 

■  Seamlessly  connect  people  and  business  applications  together  ■  Build  and  deploy  self-service  portals  faster 

.  Leverage  reusable  components  for  speed 

But  how  do  you  evaluate  your  SOA  options?  Who  can  help  you  develop  and  efficiency 

a  plan?  What  benefits  can  you  expect  -  and  how  soon  can  you  expect  •  Avoid  trade-offs  between  urgent  business 

them?  Get  answers  and  insights  -  including  your  own  SOA  Readiness  needs  and  long-term  flexibility 

Assessment  Benchmark  Report  -  at  http://soa.bea.cotn/cwnov. 

BEA  is  a  leader  in  enterprise  application 

‘  open-standards  platform  for 

.  15,000  customers,  including  a  majority  of  the 

■  FASTER  DELIVERY.  Virgin  Mobile  USA  turned  to  BEA  Fortune  Global  500 

WebLogic  Platform"  to  launch  the  nation's  first  wireless  service  .  Partner  for  1,300  leading  hardware  makers, 

targeted  to  the  youth  market.  Using  SOA  to  deliver  a  self-service  ISVs,  Sis  and  VARs 

customer  portal.  Virgin  Mobile  launched  its  prepaid  wireless  service  ,  Business  Integration  Journals  2004  Vendor 

in  seven  months.  of  the  Year 


business  services. 


Ready  for  Sv  Find  out 
how  ready  you  really  are. 

Ready  to  reap  the  benefits  of  SOA? 

Now  you  can  find  out  how  ready  you 
really  are.  Using  our  SOA  Readiness 
Assessment,  you  can  see  where  your 
company  ranks  compared  to  industry 
averages  and  to  your  own  peers.  Just 
complete  the  online  questionnaire  and 
within  24  hours,  we'll  send  you  back  a 
complete  SOA  Readiness  Assessment 


Plan  with  confidence. 
Deploy  with  speed. 

Using  BEA  for  SOA  based  business 
integration  delivers  proven  benefits: 

Increased  responsiveness:  faster  integration 
lets  you  deliver  business  services  faster 
Lower  risk:  open-standards-based  framework 
frees  you  from  being  locked  into  proprietary 
solutions  or  expensive  add-ons 
Higher  productivity  through  reusable  components 
and  easier-to-use  development  tools 


1 

i 


To  obtain  your 
COMPLIMENTARY 
SOA  Readiness 
Assessment 
Benchmark  ^ 
Report,  go  to:  ■ 


Benchmark  Report  that  you  can  use  to: 


Evaluate  your  own  state  of  SOA  readiness 
Assess  your  company's  SOA  strengths  and 
weaknesses 

Support  your  SOA  plans  and  implementation 
strategies 


http://soa.bea.com/cwnov 


fn't  delay.  Whether  youVe  already  implementing 
twsiness  integration  or  just  beginning  to  plan, 

^  -  with  the  technology,  solutions,  and  implementation 
I  match  your  needs. 


SOARI 


lyeur 

MHEflT  Benchmark  Report 


You  have  to  reconfigure  your  infrastructure.  Got  a  second? 


The  highly  dependoble  HP  BladeSystem  features  Intel’  Xeon'"  Processors.  Now  it's  possible  to  reoct  to  changing  business  conditions  in  real  time-in  seconds. 
Application  deployment  and  reprovisioning  become  on  automated  process  From  single  console  remote  monogement  to  19%  power  savings’— the  HP  BladeSystem 
IS  designed  to  save  you  lime,  money  and,  quite  possibly,  your  sanity.  Which,  of  course,  could  be  the  most  compelling  reason  ol  all  to  learn  more. 


;  THE  SOLUTION 

THE  BENEFITS' 

HP  ProLiant  BL30p  Blode  Server 

•  2  Intet'  Xeon'“  Processors  DP  up  to  3.20GHz/2MB 

•  High  density  Up  to  96  servers  per  roc* 

•  HP  Systems  Insight  Monoger  -  Web-bosed  r>etyvor*ed 
moftagmerit  through  o  single  console 

•  Reiible/Open  Integrates  with  exishng  inhostructure 
■  Rapid  Deployment  Pock:  For  ease  ol  deployment 

orrd  ortgotng  provisionirtg  orid  reprovtsioning 

■  23%  savings  on  ocquisition  cost 

•  19%  less  power  consumphon 

•  93%  (ewer  cobles 

•  Hot  swoppobJe  server  design 

•  Single  intertoce  lor  mtegroted  remote  monogement 
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Electronic  Voting  Systems 
PassTheir  Big  lest- Maybe 


Vendors  say  election 
validates  technology; 
critics  not  convinced 


Electronic  voting  sys¬ 
tems  avoided  the  virtual 
meltdown  chat  some 
people  had  predicted 
during  last  Tuesday’s 
election.  But  critics  said 
the  technology  still  has 
significant  shortcomings  that 
raise  questions  about  the  va¬ 
lidity  of  the  results  tabulated 
by  the  machines. 

Officials  in  various  states 


iWl 


said  they  encountered  rela¬ 
tively  minor  glitches,  such  as 
a  North  Carolina  county’s  in¬ 
ability  to  account  for  atout 
4,500  ballots  cast  on  touch¬ 
screen  systems.  Nonetheless, 
the  apparently  largely  success¬ 
ful  use  of  the  1^,000  or 
so  e-voting  systems 
deployed  throughout 
much  of  the  U.S.  ted 
proponents  to  call  the 
election  a  validation  of 
the  technolc^. 

“Electronic  voting  machines 
took  an  important  test  on 
Nov.  2  and  passed  with  flying 
colors,“  said  Harris  Miller. 

£-votin^  page  16 


State  Avoids 
Tax  Refund  on 
ERP  System 

Ruling  in  Wisconsin 
may  have  wider  reach 


8V  MARC  L.  80N0INI 

A  judge  has  refused  to  order 
the  state  of  Wisconsin  to  re- 
I  fond  more  than  $3404)00  in 

sales  tax  paid  on  a  customized 
SAP  system,  which  may  set  a 
precedent  that  relieves  the 


state  of  the  need  to  pay  a  total 
of  about  $300  million  to  cor¬ 
porate  users.  Lawyers  said 
the  decision  could  also  prove 
costly  to  companies  with  large 
ERP  installations  in  other 
states  with  similar  tax  laws. 

At  issue  in  the  legal  opinion 
is  a  sales  tax  refund  soi^t  by 
Menasba  Corp.,  a  pulp  and 

ERP  System,  page  69 
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Electronic  Voting  Systems 
Pass  Their  Big  lest  -  Maybe 


\'cndors  s;i>-  election 
validates  teehnologv': 
critics  not  convinced 


Electronic  voting  sys- 
terns  avoided  the  virtual 
meltdown  that  some 
people  had  predicted 
during  last  Tuesday’s 
election.  But  critics  said 
the  technology  still  has 
significant  shortcomings  that 
raise  questions  about  the  va¬ 
lidity  of  the  results  tabulated 
by  the  machines. 

Officials  in  various  states 


State  Avoids 
Tax  Refund  on 
ERP  System 

Ruling  in  Wisconsin 
iiiav  have  wider  a>ach 


A  judge  has  refused  to  order 
the  state  of  Wisconsin  to  re¬ 
fund  more  than  S.^40.000  in 
sales  tax  paid  on  a  customized 
SAI’  system,  which  may  set  a 
precedent  that  relieves  the 


said  they  encountered  rela¬ 
tively  minor  glitches,  such  as 
a  North  Carolina  county's  in¬ 
ability  to  account  for  about 
4,500  ballots  cast  on  touch¬ 
screen  systems.  Nonetheless, 
the  apparently  largely  success- 
ful  use  of  the  175.000  or 
so  e-voting  systems 
deployed  throughout 
much  of  the  U.S.  led 
proponents  to  call  the 
election  a  validation  of 
the  technology. 

I  “Electronic  voting  machines 
I  took  an  important  test  on 
Nov.  2  and  passed  with  flying 
colors.”  said  Harris  Miller. 

E-voting,  page  16 


state  of  the  need  to  pay  a  total 
of  about  S300  million  to  cor- 
ptirate  users.  Lawy-ers  said 
the  decision  could  also  prove 
costly  to  companies  with  large 
ERP  installations  in  other 
states  with  similar  tax  laws. 

At  issue  in  the  legal  opinion 
is  a  sales  tax  refund  sought  by 
Mcnasha  Corp.,  a  pulp  and 
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IT  MORALE  IS  BEING 
SWAMPED  BY  A 
COMBINAnONOF 
SLASHED  BUDGETS. 
OVERWORK.  FEAR 
OF  OUTSOURCING 
AND  BAD  BOSSES. 
BUT THERE ARE 
SOME  STEPS  YOU 
CANTAKETO 
TURN  THE  TIDE. 
BY  JULIA  KING  AND 
MAH  HAMBLEN 


Presenting  the  new  Xserve  G5,  a  wickedly  fast, 
extremely  compatible  and  refreshingly  affordable  ID 
server  from  Apple. 

With  dual  2GHz  64-bit  G5  processors,  it  achieves  blazing 
speeds  of  up  to  30  gigaflops.  It's  so  powerful,  in  fact,  that 
the  U.S.  government  is  deploying- 1 ,566  Xserve  G5  servers  to 
create  one  of  the  world's  fastest  supercomputers,  capable  of 
up  to  25  trillion  calculations  per  second. 

And  it  comes  complete  with  Mac  OS  X  Server,  Apple's 
UNIX-based  operating  system  that  provides  a  complete  suite 
of  standards-based  network  services  with  no  per-client  fees. 
So  whether  you  have  Mac,  Windows,  UNIX  or  Linux  clients, 
Xserve  is  ideal  for  cross-platform  file  sharing,  hosting 
dynamic  websites,  streaming  audio  and  video  and  running 
powerful  J2EE  applications  -  right  out  of  the  box. 

Of  course,  its  most  impressive  feature  may  be  its 
price,  starting  at  just  $2,999'.  The  new  Xserve  G5. 
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AMD 


Wh  en  Microsoft  invests 

sixty  billion  dollars, 

they  don’t  use  just  any  processor. 
Il  ' 


To  minage  this  much  money,  you  need  a  solution  that  offers  optimum  performance  and  real-time  flexibility.  Microsoft  found  both  in  the 
AMD  Opteron”  processor  running  Windows  Server"  2003.  Enterprise  Edition.  The  AMD  Opteron  processor  wrth  Its  Direct  Connect 
Architecture  already  powers  the  world's  highest  performing  2-way  and  4-way  x86  servers.  Now  Microsoft  Treasury  managers  are  using  it  to 
slash  the  time  it  ukes  to  run  their  complex  risk-analysis  software.  Meanwhile,  they  have  the  flexibility  to  go  from  32-  to  64-bit  applications 
without  disrupting  their  business.  At  AMD,  we  believe  it's  critical  that  technology  should  migrate  on  your  terms  to  help  you  realize  your  unique  vision. 
It's  one  of  the  reasons  why  leading  OEMs  offer  enterprise-class  solutions  powered  by  AMD  Opteron  processors.  Would  you  like  to  learn  {ust  how  much 
of  a  difference  they  can  make  to  your  company!  Go  to  www.aindxoni/enterprise 
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6  New  security  breaches  in- 

volving  source  code  stolen 
from  Cisco  and  the  theft  of 
PCs  from  Wells  Fargo  are 
similar  to  previous  problems. 

7  A  S30  mllilofi  IP  network 
along  the  Seattle-Tacoma  rail 
corridor  nears  completion. 

10  Sun  and  Microsoft  plan  to 

detail  their  initial  product 
integration  work  this  month, 
focusing  on  single  sign-on  and 
directory  services. 

12  Storage  vendors  take  a  cue 

from  the  server  world  and 
Stan  to  build  grids  of  disk 
arrays  that  they  say  can  grow 
in  processii^  power  and  ca¬ 
pacity  without  disruption. 

14  IBM  readies  a  WebSphere 
services  bundle  designed 
to  help  users  map  business 
processes  into  service-orient¬ 
ed  architectures. 

20  Global  Dispatches:  Some  sup¬ 
pliers  meet  a  German  retail¬ 
er’s  RFID  deadline:  U.K,  doc¬ 
tors  want  input  on  a  health 
care  IT  project 

20  QAA:  An  Oracle  executive 
says  that  open-source  isn't  an 
option  for  his  company’s  data¬ 
bases  and  file  systems. 

23  QAA:  Measuring  outsourced 

application  performance  is  an 
IT  challenge,  says  Mercury 
Interactive’s  David  Murphy. 

69  Office  System  releases 

should  continue  to  arrive 
every  two  to  three  years,  says 
Microsoft. 


40  Future  Watch:  Oiviitg  Bugs 
the  Boot.  Researchers  are 
working  on  techiuques  to  help 
computers  recover  from  soft¬ 
ware  failures  so  quickly  that 
users  don't  even  notice. 

45  QAA:  Crossing  Boundaries. 

Lotus  Notes  creator  and 
Groove  Netwoiks  CEO  Ray 
Oz2ie  talks  about  collabora¬ 
tive  software. 

46  Security  Manager’s  Journal; 
Taking  the  Leap  to  PEAP  for 
Wireless.  Mathias  Thurman’s 
company  still  has  no  formal 
policies  for  wireless  deploy¬ 
ment.  but  access  points  seem 
to  double  every  few  months. 

MmSEMENT 

51  Going  Down  Fast.  Slashed  re¬ 
sources.  unrealistic  expecta¬ 
tions  and  inane  policies  have 
pushed  IT  morale  to  the  low¬ 
est  point  in  memory.  What’s  a 
CIO  to  do? 

56  IT  Monton  After  the  Layoff. 
Outplacement  services  can  be 
a  waste  of  time,  but  they  can 
help  you  get  back  on  track  if 
you  manage  them  welL  writes 
Carnival  CIO  Doug  Lewis. 

57  Career  Watch.  Your  boss  af¬ 
fects  your  attitude:  volunteer 
opportunities  boost  morale: 
and  a  headhunter  who’s  bull¬ 
ish  about  the  IT  job  market. 

58  QAA:  Hiring  Nerds.  Author 
Johanna  Rothman  discusses 
key  points  from  her  new  book, 
whkh  serves  as  a  practical 
guide  to  recruiting  techies. 


8  On  the  Mark:  Mark  Hall  re¬ 
ports  that  there  are  concerns 
about  whether  companies  will 
be  able  to  handle  major  IT 
projects  after  putting  them  off 
for  a  few  years. 

24  Don  Tennant  says  that  despite 
the  hoopla  and  promise  sur¬ 
rounding  next  week’s  launch 
of  Solaris  10,  a  comeback  by 
Sun  Microsystems  may  take  a 
miracle. 

24  Thornton  A.  May  renews  his 
call  for  more  leadership  from 
IT.  but  be  adds  that  what  IT 
must  lead  is  changing. 

25  Pimm  Fox  predicts  that  we’ll 
ail  be  voting  from  our  com¬ 
puters  in  the  2008  election. 

48  Curt  A.  Monash  outlines 
the  issues  companies  must 
address  as  they  formulate 
plans  to  exploit  the  potential 
of  analytic  technologies. 

60  Bart  Perkins  says  the  Hrsi  step 
in  making  a  decision  about 
outsourcing  is  to  identify  and 
prioritize  your  motivations. 

70  Frankly  Speaking:  Frank 
Hayes  analyzes  the  bad  news 
after  taking  an  early  look  at 
the  annual  Standish  Group 
report  on  the  success  rates  of 
IT  projects. 
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AvoUngUafaity 

SECURITY:  Ifyour  company's  computers  are 
infected  with  a  virus  dutt  is  further  spread  by 
your  employees,  are  you  liable  for  damages 
that  result?  Douglas  Schweitzer  examines 
dowzistreaffl  liability.  O  QuIddJnk  50306 

Asking  Great  Questions 

DEVELOPMENT:  Coloninist  Johanna  Rothman 
discusses  the  art  of  posti^  perfect  questkxts 
that  wiU  help  you  get  the  iidbnnatioD  you 
need,  wfaetli^  you're  in  a  job  interview  or 
a  vendor  meeting.  O  QirickLink 

Rve  Steps  to  WLAN  Security 

MOBILE/WIRELESS:  AirDefense’s  Anil  Kha- 
tod  explains  bow  to  deal  with  rogue  users, 
set  logical  policies,  install  intrusioa-deiec- 
don  systems  and  more.  0  QuiefcLJnk  50617 

Modularized  RAD 

STORAGE:  Intel's  Paul  Luse  escplains  modular 
RAID  on  motherboard,  also  known  as 
MROMB  technology,  and  n^en  it  might 
make  sense.  0(WdklMi4«4S1 

Neiws  Right  to  Vbur  In-box 

Between  issues  of  Computery/orid,  keep  up 
with  all  the  IT  news  you  need  with  our  finw 
e-mail  newsletters.  Subscribe  on  our  Web 
site.OQuiGkLM(a1430 

Saibanes-Oxiey  Update 

NEWS:  WUh  a  Nov.  15  deadline  East  approach¬ 
ing,  is  your  con^any  ready  for  the  Sarbanes- 
Oxley  Act?  Check  out  our  latest  coverage. 
OQiichLMi  13250 
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AT  DEADLINE 


Stone  Leaves  Novell 
In  a  Surprise  Move 

VICE  CHAIRMAN  CHRIS  STONE  left 
Novell  Inc.  after  Mping  the  compa¬ 
ny  remvioorals  itself  over  the  past 
year  with  a  strong  Linux  push  that 
included  the  acqueition  of  SUSE 
Linux  AG. 

in  a  statement  tale  last  week. 
Stone  sad  he  left  Waltham.  Mass  - 
based  Novell 'to  pursue  other  pro¬ 
fessional  opportunrtes*  Users  and 
analysts  expressed  suntrise  at  the 
move.  Stone  was  second  n  com¬ 
mand  to  Chawman  and  CEO  Jack 
Messman  and  oversaw  engmeenng. 
product  management  and  alliances 
in  he  second  stint  at  Novell.  Stone 
couldn't  be  reached  for  comment. 

Dion  Comelt  a  hnanoai  analyst  at 
Decatur  Jones  Eouty  Partners  llc 
in  Chtago.  called  the  departure  *a 
negative  for  both  [Novetf]  and  the  in¬ 
dustry.  We  beleve  that  Mr.  Stone 
was  Rsfrumentai  tn  pudtmg  Novell 
toward  a  strategy  of  captunng  value 
from  operi'souce  software,  as  op¬ 
posed  to  gmng  away  Lmux  to  fuel 
demand  for  other  offemgs '  Accord¬ 
ing  to  a  government  financial  filf>g. 
Stone  got  a  $2  million  severance 
package.  That  ‘suggeds  that  [he] 
was  asked  to  resign.'  Cornett  sad. 

'Hopefully,  there  is  a  plan  and  d- 
rectton*  accompanying  the  depar¬ 
ture.  sad  George  Raetzke.  senior 
systems  protKammer  ai  Northern 
Hinois  University  m  1. 

John  Faisetti.  senior  vice  presr- 
denl  of  nfonnation  services  at  Kds 
Hope  United  m  Chcago.  a  nonprofit 
social  services  agency  that's  a  heavy 
user  of  Novell  products,  the 

move  lust  more  of  the  same.  How 
mviy  guys  have  come  and  gone  m 
the  1^  lour  years  over  there?* 

Hal  Thayer,  a  Novel  spokesman, 
sad  the  departure  doesn't  indicate  a 
change  n  the  company's  strategic 
technology  dwanion. 

Laura  CWki.  an  analy^  d  The 
Yankee  Group  in  Boston,  sad 
Slone's  departure  inrkcates  'some 
sort  of  shakeup ...  since  Stone  was 
hred  back  as  the  hew  apparent  in 
200Z  This  spelts  bad  news  tor  Nov¬ 
el,  because  Stone  was  obvnusiy 
wel  respected  and  a  wel-known  en¬ 
tity  m  networking.  Another  theory  IS 
thd  perhaps  SU^  is  taking  over  at 
Novel' 

*  ToddR.  Weiss  and  Malt  Haipblen 


Cisco,  Wells  Fargo  Face 
New  Security  Breaches 


More  Cisco  code  said  to  be  stolen;  PC 
thefts  expose  Wells  Fargo  customer  data 


BY  JAIKUMAB  VUAVAH 

TWO  well-known 

companies  —  Cisco 
Systems  Inc.  and 
Wells  Fargo  &  Ca  — 
last  week  found  themselves 
dealing  with  the  aftermath  of 
apparent  security  breaches 
that  in  both  cases  were  embar¬ 
rassingly  similar  to  incidents 
both  had  confronted  only 
months  earlier. 

R>r  the  second  time  this 
year.  Cisco  said  it  was  looking 
into  the  possibility  that  source 
code  may  have  been  stolen. 

In  May.  an  800MB  portion 
of  Cisco's  Internetworking 
Operating  System  code  was  U- 
le^ly  copi^  and  posted  on  a 
foreign  Web  site. 

Uve  latest  incident  came 
to  light  when  an  anonymous 
hacker  group  ofTered  copies  of 
Cisco's  PIX  6J.1  firewall  for 
sale  in  an  online  newsgroup 
early  last  week. 

In  a  terse  note  posted  on  its 
Web  site  last  week,  the  net¬ 
working  giant  said  it  is  **30- 
tively  looking  into  the  alleged 
claims  by  some  Internet 


groups  on  the  purported  sale 
and  general  availability"  of  (he 
source  code.  A  spokeswoman 
declined  to  elaborate. 

Meanwhile.  San  Francisco- 
based  Wells  Fargo  last  week 
said  three  laptops  and  one 
desktop  computer  containing 
person^  information  on  thou¬ 
sands  of  the  bank’s  borrowers 
wrere  stolen  in  early  October 
from  an  Atlanta-based  subcon¬ 
tractor. 

Wells  Fargo  was  able  to 
"quickly  identify"  the  cus¬ 
tomers  afFecied  by  the  theft 
and  last  week  issued  letters 
notifying  them  of  the  loss  of 


information  and  of  plans  to 
provide  free  identity  theft 
protection,  said  company 
spokesman  Kes'tn  Waetlw. 
"The  customers  were  notified 
as  a  precaution  only.  We  have 
no  indication  any  customer's 
tnformatioh  has  been  compro¬ 
mised,"  he  added. 

Actual  Risk 

The  actual  risk  posed  to  users 
by  the  apparent  theft  of  Cis¬ 
co’s  PIX  flrewali  source  code 
is  minimal,  said  John  Pesca- 
lorc,  an  analyst  at  Stamford, 
CoQn.-bascd  Gartner  Inc. 

"Unless  Cisco  was  taking 
shoncuts  they  were  hoping  no 
one  would  ever  see.  this 
should  not  be  a  big  deal,”  be 
said.  But  this  incident,  like  the 


previous  one,  raises  questions 
about  how  well  protected  Cis¬ 
co’s  source  code  is.  Pescatore 
added.  If  somebody  could 
steal  the  source  code  from  a 
protected  server,  they  could 
also  compromise  it.  he  said. 

The  net  result  of  incidents 
like  this  is  that  a  lot  more 
source  code  is  becoming  avail¬ 
able  for  hackers  to  go  after, 
said  Ken  Ehuiham,  a  director 
at  iDefensc  Inc.  in  Reston.  Va. 

In  Wells  Fargo’s  case,  this  is 
the  third  time  since  last  No¬ 
vember  that  the  bank  has  had 
to  warn  customers  of  potential 
identity  theA.  Both  previous 
cases  resulted  from  stolen 
laptops. 

These  incidents  continue 
to  be  isolated,  and  each  has 
a  different  set  of  circum¬ 
stances,"  Waetke  said.  "We 
continue  to  Icam  from  previ¬ 
ous  theAs  of  computers  and 
want  to  ensure  that  affeacd 
customers  are  protected." 
OS0562 


Trouble  R)llows  Them 

This  iinl  tba  first  tma  that  Cisco  and  VMM  Fargo  hm  had  to  deal  wflh  sKurfly  brudiBs  in  the  past  y> 


WEUB  FARGO:  Laptop  cfinlaimng 
confidential  infonnabon  is  stolen  from 
office  of  a  ttwd-party  service  providei. 


NOVEMBER  2003 


CISCO:  800MB  of  Cisco  lOS  source 
cods  s  Illegally  copied  and  posted  on 
a  foreign  Vlfeb  site  for  several  days. 


WELLS  nUfOO:  Notifies  customers  of 
potential  H)  theft  restdtmg  Iromkissot 
PCs  containing  personal  iniormalion 


NOVEMBER  2004 


WELLS  FARGO:  Laptop  contamino  cus¬ 
tomer  information  is  lost  when  d's  left  m  a 
car  that's  stolen  from  a  gas  station. 


’--CISCO:  Anonymous  group  offers  to  sell 
soume  code  for  previous-generation 
Cisco  firoAeR  in  online  newsgroup 


CA  Unveils  Antispyware 
Tool  for  Corporate  Market 


BV  JAIHUMAB  VIJAVAN 

Although  spyware  is  rapidly 
emerging  as  a  threat  to  corpo¬ 
rate  security,  only  a  handful  of 
enterprise-class  tools  are 
available  to  help  companies 
deal  with  the  problem. 

Hoping  to  nU  that  gap. 
Computer  Associates  Intema- 
Aonal  Inc.  today  will  release 
an  updated  version  of  the  anti¬ 
spyware  software  that  it  ac¬ 
quired  with  its  purchase  of 
PestPatroI  Inc.  in  August. 

CAs  new  cThist  PestPatroI 
Anti-Spywarc  r5  release  builds 
on  several  features  designed 


for  corporate  needs,  said  Sam 
Cuny,  the  Islandta.  N.Y.-based 
company's  vice  president  of 
product  management. 

For  instance,  enhancements 
to  the  product's  centralixed 
management  console,  includ¬ 
ing  a  new  user  interface,  will 
make  it  easier  for  administra¬ 
tors  to  deploy,  monitor  and 
manage  antispyware  protec¬ 
tion,  Cuny  said.  A  new.  fa.ster 
scanning  engine  can  more  ef¬ 
ficiently  scan  networks  for 
traces  of  spyware,  adware, 
Trojan  horses  and  denial-of- 
service  attack  agents,  he  said. 


The  corporate  version  of 
the  soAware  Ls  integrated  with 
Cisco  Systems  Inc.‘5  Network 
Admission  Control  technolo¬ 
gy.  which  is  designed  to  let 
companies  enforce  network 
access  policies  on  all  systems 
attempting  to  connea  to  a 
corporate  network. 

Such  enhancements  arc  cru¬ 
cial  for  deploying  antispyware 
protection  m  enterprises,  said 
Ricky  Stewart,  computer  ser¬ 
vice  manager  at  Coraell  Uni¬ 
versity  in  Ithaca.  N.Y. 

Cornell  has  used  PestPatroI 
software  for  nearly  two  years. 
But  only  after  centralized 
management  support  became 
available  was  it  able  to  auto¬ 
matically  deploy  the  software 
to  all  systems.  Stewart  said. 


CA  next  needs  to  integrate 
its  antispyware  tool  with  its 
antivirus  soAware,  said  Jarrad 
Winter,  network  security  man¬ 
ager  at  the  Western  United  In¬ 
surance  Co.  in  Irvine.  Calif.  "It 
just  so  happens  that  we  have 
CA’s  antivirus  tools  as  well  It 
w'ould  be  great  for  some  sort 
of  integration."  he  said. 

Another  vendor  touting  en¬ 
terprise  spyware  tools  is  Boul¬ 
der,  Cola -based  Webroot  SoA¬ 
ware  InCx  which  offers  Spy 
Sweeper  Enterprise  software. 

Vendors  of  antivirus  tools 
such  as  Symantec  Corp.  and 
lYend  Micro  Inc.,  both  in  Cu- 
pertina  Calif,  have  begun  of¬ 
fering  limited  antispyware  ca¬ 
pabilities  as  part  of  their  core 
antivirus  suites.  O  S057S 


Railroad  Uses  IP  Net  to  Control  Signals,  Switches 


BNSF  expects  S30M  project  in  Seattle 
to  boost  neUvork  reliability,  capacity’ 


The  Burlington  Northern  and 
Santa  Fe  Railway  Co.  is  near¬ 
ing  the  end  of  the  line  on  the 
installation  of  a  S30  million  IP 
network  along  a  heavily  trav¬ 
eled  rail  corridor  in  the  Seattle 
area,  a  project  that’s  expected 
to  increase  the  reliability  of 
the  technology  it  uses  to  con¬ 
trol  signals  and  track  switches. 

The  Sound  Transit  Telecom 
project  involves  the  installa¬ 
tion  of  a  triple-redundant  net¬ 
work  of  fiber-optic  cables  and 
T1  lines  that  will  run  for  45 
miles  between  Seattle  and 
Tacoma,  Wash.,  and  support 
combined  IP  voice,  data  and 
video  traffic.  BNSF  officials 
said  during  a  tour  of  network 
sites  last  week.  The  installa¬ 
tion  began  two  years  ago  and 
is  due  to  be  completed  in  2005. 

Fred  Gratke.  assistant  vice 
president  of  telecommunica¬ 
tions  at  BNSF,  said  the  IP- 
based  technology  is  replacing 
a  proprietary  wireless  radio 
system  that  the  company  has 
used  for  decades  to  relay  sig¬ 
nal  and  switch  commands  be¬ 
tween  the  Seattle  tracks  and 
the  railway  networic  opera¬ 
tions  center  at  its  headquar¬ 
ters  in  Fort  Worth,  Texas. 


The  fiber-optic  cabling  and 
new  networic  switches  and 
routers  arc  much  more  reli¬ 
able  than  the  older  system  is. 
Gratke  said.  The  IP-based 
equipment  will  also  provide 
greater  network  capacity,  he 
noted.  BNSF  is  using  Ethernet- 
over-fiber  technology  that 
provides  IGbit/sec.  backbone 
speeds  now  and  is  expandable 
to  lOGbit/sec.  throughput 

The  IT  rollout  is  part  of  a 
S24B  million,  govenunent- 
fonded  initiative  that  involves 
adding  a  third  set  of  tracks  as 
well  as  expanded  s^naling 
and  switching  capabilities 
along  the  Seattie-Tacoma  rail 
corridor,  which  is  used  by 
fre^t.  commuter  and  inter¬ 
state  passenger  trains,  BNSF 
planned  the  new  network,  is 
managing  the  installation  and 
will  maintain  the  technology. 
But  the  bills  are  being  paid  by 
Sound  Transit  a  regional 
transportation  agency. 

‘The  third  track  adds  more 
signals  and  more  monitoring 
points,  which  presented  a  lot 
more  points  of  telemetry 
alotkg  the  track,”  Gratke  said. 
The  increased  information 
flow  would  normally  overload 
BNSF's  wireless  channel,  but 
the  railroad  expects  to  have 


“nearly  infiitite  capacity  with 
the  fil^r,”  he  added. 

Nick  Marquard,  project 
manager  for  reseai^  and 
technology  at  Sound  TVansit, 
said  the  IP  network  will  even¬ 
tually  be  expanded  to  suppon 
data  transmissions  for  elec¬ 
tronic  signs  at  commuter  rail 
stations  as  well  as  IP  video 
surveillance  cameras. 

TransHkNi  On  Track 

As  of  last  week,  BNSF  had 
completed  the  installation  of 
32  trackside  ”bungaJows’‘  that 
house  the  new  networkmg 
equipment:  50  bungalows  are 
planned  along  the  route.  The 
buildings  contain  switches 
from  Nortel  Networks  Ltd.. 


Microsoft  Offers  Early  Glimpse  of  Patches 


eV  aAlKUMAIt  VIJAVAN 

Microsoft  Corp.  last  week  said 
that  it  will  give  users  advance 
notice  of  Us  monthly  security 
updates  as  part  of  an  effort  to 
make  it  easier  for  IT  managers 
to  install  software  patches. 

Starting  this  month,  the 
company  will  post  on  Us  Web 
site  brief  summaries  of  the 
planned  security  bulletins 
three  days  before  they’re  re¬ 
leased,  said  Debbie  Fry  Wil¬ 
son.  director  of  marketing  at 
Microsoff’s  Security  Response 
Center.  The  summaries  will 
include  a  brief  description  of 
the  affected  software,  the 
severity  rating  assigned  to 
each  flaw  and  whether  the 


patches  will  require  systems 
to  be  rebooted. 

Starting  in  December,  Mi¬ 
crosoft  will  also  send  the  ^un- 
maries  to  users  who  register 
for  e-mail  iu>tificat»on  on  its 
Web  site. 

Microsoft  has  been  making 
this  advance  information 
available  for  some  time  to 
corporate  users  who  sigxted 
TK)T>disclosure  agreements. 
Wilson  said.  Now  the  compa¬ 
ny  will  make  the  summaries 
available  to  anyone  who  wants 
them,  she  said. 

This  is  based  on  customer 
feedback.”  Wilson  said.  ”We 
heard  from  our  customers  that 
this  sort  of  early  feedback 


would  be  useful  for  planning." 

But  a  lot  depends  on  the 
kind  of  information  that  is 
made  available,  said  Mike  Tin- 
dor,  vice  president  of  networic 
operations  at  Hist  Internet 
Inc.,  an  Internet  service  pro¬ 
vider  in  St.  ClairsvUle,  Ohia 

The  only  time  I  would  see 
it  as  being  significant  is  if  an 
upcoming  patch  is  likely  to 
break  some  service  or  soft¬ 
ware  that  is  currently  running 
on  a  production  mac^iine,” 
Tindor  said.  ”In  that  case,  ad¬ 
vance  notice  is  definitely  help¬ 
ful  so  that  we  can  plan  for  a 
work-around  or  an  alternative 
method  of  dealing  with  the 
possible  breakage.”  O  50S7S 


voice-over-IP  phones  from 
NEC  Corp.  and  products  from 
several  other  vendors  (see  sto¬ 
ry  at  right).  Central  offices  in 
Seattle.  Tacoma  and  Auburn. 
Wash.,  are  also  on  the  net¬ 
woric.  Smith  said. 

The  transition  has  been  a 
smooth  one  for  BNSFs  signal¬ 
ing  organization,  said  James 
Abbey,  the  company’s  manag¬ 
er  of  railroad  signals  for  the 
state  of  Washington.  "At  the 
start,  everybody  in  signaling 
was  reluctant  to  try  IP.  since 
it  was  the  first  of  its  kind.” 
Abbey  said.  But  thus  far,  the 
new  networic  has  been  com¬ 
pletely  reliable,  with  no  delays 
to  trains,  he  added. 

In  addition  to  its  greater  re¬ 
liability.  the  fiber-based  net¬ 
work  is  more  secure  than  the 
wireless  radio  system  is.  said 
Greg  Britz,  manager  of  tele¬ 
com  engineering  at  BNSF. 

Britz  said  the  fiber  infra¬ 
structure  was  made  triple- 
redundant  in  the  event  of  a 
major  train  derailment  that 
could  both  knock  out  a  bunga¬ 
low  and  dig  up  the  ground 
near  the  trades  deep  enough 
to  sever  a  backup  fiber  link.  If 
that  happened,  vital  informa¬ 
tion  could  still  be  sent  via  TT 
linl»  between  each  central  of¬ 
fice  and  over  the  remaining 
fiber  lines,  be  said.  O  50547 


INK  NEWS  OHM 

BNSF  sans  the  ScaMearaa  neiworh  coiid 
be  a  mnW  for  olhei  parts  of  Ns  tai  systam 
^(MeUMSOSW 


Sturdy  Gear  Keeps 
Network  Running 

seaTTte 

THE  NETWONKIHe  bur^I^Ciws 
lhal  s  mstaing  along  Its 

railroad  tiacks  «i  the  SeafDe 
area  are  made  wWh  a  stamtess 
steel  exiencir  and  were  de¬ 
signed  to  durabilily.  according 
lo  proied  manaoer  Thomas  R. 
Srnih.  But  the  siwiching  eauKt* 

merit  housed  made  them  isn'i 
9ecal)r  fuggedOBd.  he  said 

BNSF  conadered  how  the 
P  swNchaxi  gear  woiid  hande 
vtoations  from  nearby  trwis, 
espeoalysmce  the  hardware 
is  pnmarty  desqned  to  use  in 
oftces.  But  ettia  niggedizabon 
wasn't  deemed  necessary. 
Smith  said.  The  company  dso 
decided  not  to  indude  vtoa* 
lion-iBduction  equipment  to 
prated  the  bungai^  from 
earthquakes,  wtidi  are  rela¬ 
tively  rarer  the  area. 

TNai  to.  the  nstwortoig  de¬ 
vices  that  am  fli  place  have 
withstood  alenwronmanfal 
hazards. ‘Yfe  have  not  hed 
probtons  snee  the  hardware 
was  instaled  two  years  ago.* 
Smih  said,  nonng  that  the 
bungdowG  are  desqned  with 
redundant  etonants,  such  as 
two  arooTKttoninQ  syetarns 

Each  bungatow  aid  oeniral 
ofice  in  the  Seallte  area  hous¬ 
es  several  pieces  of  hardware 
bom  Brarnplon.  (InlartofaBsed 
Nortel.  Miduitno  Rs  Busmeas 
PDicySwlch.ARNmj6LN 
roufers.  and  8603  tt»r-lerTni■ 
n8tionswflches.BNSFalson‘ 
staled  pactoi  swiches  from 
Safetran  Systons  Corp.  in 
Rancho  CucamonoK.  CaM..  In 
the  butgalowa  and  central  of- 
hcasandatitsraiwayopera- 
taons  cento  in  Fort  tAM. 

NEC  suppled  about  150 
VdP  phones  as  wal  as  an 
PvoceswWchtoBNSPs 
Auburn  central  office.  Other 
new  technotogto  ndude  a 
NelGuardian  alarm  de^  from 
DPS  Telecom  in  Fresno.  CNM. 
to  detecting  problems  wih 
power.  buirfeiQ  tonparatoes 
and  fiber  oonoeebons.  BNSF 
B  using  EM'S  tool  NefVbw 
6000  manmemeni  soflwree  to 
monto  the  enire  P  nrewotlL 
-  Atof/tonObn 
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EOS  Agan  Delays 
03  Earnings  Re^ 

Ekctnmic  DiU  System  Corp. 
postponed  the  wlssn  at  to  third- 
quarte  finmiit  rasufts  lor  the 
secend  Urns  and  (Wn't  wt  a  new 
date  for  finalizing  tte  numbers. 
EDS  had  ptemad  to  report  the  re- 
auNs  on  OcL  2S  but  is  reviaering 
the  wakio  of  rr  aaoeti  baing  used 
for  Ms  S8J  btton  intranet  con¬ 
tract  wWi  the  OS.  Mavy.  EDS  teo 
said  iaat  erooh  that  Us  aotft  oom- 
ndttaeisinvestigatingiowesre- 
Mad  to  its  employee  bonus  plan. 


Oracle  Raises  Hs 
BidforPeopleSoft 

Oracfa  Corp.  Inrraaaad  the  price 
of  Ms  hesfito  toteoeor  bid  for 
PoopleSofI  Inc.,  saying  the  now 
offar  is  Ms  *lmt  Md  flnaT  one. 
Oracle  ratMd  Ms  al-caali  offer  to 
S24  pv  share,  mptog  the  overaM 
vahie  of  the  propoced  deal  to  S9.2 
bilen.  But  M  saM  the  offer  wl  be 
withdrawn  if  a  mafority  of  ftopio- 
Softs  shares  aren't  tendered  by 
ffov.  19.  PsopieSeff  said  its  bosrd 
plans  to  retdow  tho  now  offer. 


CA  Starts  to  Ship 
Open-Source  06 

Compute  AssocMes  kitomahon* 
si  toe,  reiitsad  an  open-source 
vereion  of  Ms  hgres  database  for 
Unm  and  VMndews  systams, 
haaping  to  a  plan  announcod  last 
sprtoo[QaiciiLinii472l6].RBgis- 
torod  users  can  dewntoad  the  In- 
gras  rS  software  undsr  the  now 
CA  Tnatod  Open  Source  liconst. 
CA  said  veratett  for  Unix  «  well 
as  HP  Tru64  and  HP  OpenVMS 
are  diM  early  next  year. 


Cisco  Faces  Lawsuit 
On  Routing  Patents 

ComwclU  UjC  In  lliaini  Beach 
Mad  a  fedaral  patonf-inhringaiiiein 
iawsuM  agabtot  Ctoeo  Systoms 
he.  Ctoce  dacMnad  to  commant, 
saying  it  has  yet  to  set  the  cem- 
phht,  wMch  hvoless  patents 
hhd  by  ConnecTol  on  MaMgant 
data-rautiog  tochnology. 
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Survey  Shows  FT 
*00101  Shape... 

...  when  tt  comes  to  major  technology  Mnplefnentations,” 
warns  John  Norcross,  vice  president  of  technology 
at  Celerant  Consulting  Inc.  in  Lexington,  Mass.  The 
VS.  branch  of  Novell  Inc.’s  U.IC-based  consultancy 
teamed  with  newsweekly  The  Economist  to  p)oll 


executives  at 
290  mostly 
midsize  U.S. 
and  Canadian 
companies  on 
their  ability  to 
handle  big  IT 
projects.  Nor- 
cross  says  the 
survey  results, 
which  will  be  releas^  this 
week,  revealed  that  less  than 
half  of  the  respondents  have 
attempted  a  major  technology 
rollout  during  the  past  three 
years.  He  worries  that  the 
hiatus,  combined  with  the 
"decimation"  of  IT  depan- 
ments  through  cutbacks  and 
outsourcing,  will  hobble  any 
rr-dependeni  "transforma¬ 
tional  change"  initiatives  de¬ 
manded  by  top  management 
as  the  economy  improves.  "I 
don't  know  whether  it’s  a  cri¬ 
sis,  but  it’s  approaching  one." 
be  coDicnds.  Although  con¬ 
sultancies  might  benefit  from 
the  situation.  Norcross  says 
that  without  IT  expenise  in¬ 
side  companies,  "all  you've 
got  is  a  bunch  of  generic  con¬ 
sultants  with  generic  knowl¬ 


edge  producing  a  generic 
solution." 

Wireiess  defenses 
reinforced  wMi... 

...  the  relMse  this  month  of 
rival  offerings  AirOefanse  6.0 
and  PredatorWatoh  Auditor  128. 
Anil  Khatod,  CEO  of  Air- 
Defense  Inc.  in  Alpharetta, 
Ga.,  claims  that  the  6D  up¬ 
grade  of  the  sofhvare  for  the 
company's  wireless  network 
security  appliances  “can  de¬ 
fend  wireless  devices  and/or 
the  wired  devices  they're 
connected  ta"  The  release 
adds  client-side  code  that 
prevents  online  sessions  from 
being  hijacked  to  bogus  Web 
sites  when  end  users  connect 
their  laptops  to  public  hot 
spots.  Users  are  also  now 
protected  from  intruders 
sneaking  onto  their  machines 
via  Bluetooth  links.  In  addt- 

Pradatoritetdi  Auditor  126  ^ 


(ion,  AirDefense  6.0  features 
improved  network  intrusion- 
detection  and  automated 
rogue  management  features. 
Khatod  says.  Pricing  starts  at 
$6,995. 

According  to  Gary  Milicf- 
sky,  CEO  of  PredatorWatch 
Inc.  in  North  Chelmsford, 
Mass.,  as  soon  as  a  Predator- 
Watch  Auditor  128  appliance 
is  cormected  to  a  wireless 
LAN,  it  builds  a  database  on 
up  to  256  IP-based  systems 
and  conducts  common  vul¬ 
nerability  exposure  (CVE) 
tests  that  reveal  “anything 
that  can  be  exploited."  About 
the  size  of  a  paperback,  the 
Auditor  128  provides  informa¬ 
tion  such  as  recommenda¬ 
tions  of  patches  needed  for 
Windows-based  systems.  The 
appliance  can  also  block  un¬ 
authorized  network  access.  It 
lists  for  SI, 295  plus  a  monthly 
subscription  fee  of  $59  for 
CVE  updates. 

Secure  Web 
services  need  moie .. . 

. . .  than  waM-intaoddd  stan¬ 
dards,  says  joellc  Cropper 
Kaufrnan.  vice  president  of 
marketing  at  Reactivity  Inc. 
in  Belmont,  Calif.  Cropper 
Kaufman  says  that  standards 
such  as  WS-Sccurity  “are  not 
implemented  identically  by 
vendors.”  Reactivity  Chief 
Technology  Officer  John  Ully 
adds  that  the  existing  stan¬ 
dards  aren't  comprehensive. 
For  example,  be  claims  that 
they  don’t  protect  Web  ser¬ 
vices  applications  against 
XML  denial-of-service 
attacks.  Reactivity  says  its 
Gateway  2400  security  appli¬ 
ances  provide  protection 
from  }QdL  DoS  attacks  and 
enforce  policies  for  applica¬ 
tions  using  Web  services.  The 
devices  also  offload  encryp¬ 
tion  and  decryption  of  Web 
services  messages  from  cor¬ 
porate  networlu. 

This  week.  Reactivity 
will  release  XOS  4J.  a 
software  upgrade  that 
supports  Gigabit  Ether¬ 


net  speeds  and  improves  per¬ 
formance  on  processing 
SOAP  message  headers.  Pric¬ 
ing  starts  at  $65,000.  but  a  de¬ 
veloper  version  costs  $5,000. 

Don't  fret  about  iFH)ds 
and  MP3  players . . . 

...  as  >rahides  for  stealing  your 
company’s  data,  advises  Brian 
Cincera.  vice 
president  of 
security  so¬ 
lutions  at 
Greenwich 
Technology 
Partners  Inc. 
in  New  Yoric 
Cincera  dis¬ 
agrees  with 
sentiments 
previously 
expressed  here  about  such 
dangers  [QuicIcLink  49095]. 
"Data  leaving  in  the  hands  of 
employees  is  always  an  issue," 
he  says.  "But  1  don't  think 
iPods,  MP3  players  and  Blue¬ 
tooth  devices  will  raise  the 
stakes." 

USB  memory  devices  like 
Sony  Corp.’s  Memory  Stick 
pose  a  bigger  threat.  Cincera 
says,  describing  them  as  "the 
floppy  disk  of  our  genera¬ 
tion."  But  he  argues  that  ob¬ 
sessing  about  the  legions  of 
tiny  di^tai  devices  hitchhik¬ 
ing  in  and  out  of  your  compa¬ 
ny  won't  lead  to  a  more  se¬ 
cure  environment.  “The  big¬ 
ger  issue  is  how  companies 
let  people  get  access  to  data." 
be  says.  "We're  haphazard 
about  it"  Cincera  suggests 
that  a  good  way  to  start  better 
managing  data  security  is  to 
let  "the  information  owner 
control  the  access  and  the 
risk."  TVying  to  centrally  con¬ 
trol  access  beyond  simple 
log-on  processes  is  doomed 
because  of  the  complexity  in¬ 
volved,  he  says.  Finer  con¬ 
trols.  such  as  policies  on 
copying  and  sending  informa¬ 
tion,  need  to  rest  with  busi¬ 
ness  units,  in  his  view.  That 
makes  good  business  sense 
and  takes  the  monkey  offTTs 
back.050535 


You  have  to  reconfigure  your  infrastructure.  Got  a  second? 


The  highly  dependable  HP  BlodeSystem  features  Intel*  Xeon’“  Processors.  Now  it's  possible  to  react  to  chonging  business  conditions  in  real  time-in  seconds 
Applicotion  deployment  and  reprovisioning  become  an  outomated  process.  Prom  single  console  remote  management  to  19%  power  sovings  —the  HP  BladeSyste 
IS  designed  to  save  you  time,  money  and,  quite  possibly,  your  sonity.  Which,  of  course,  could  be  the  most  compelling  reason  of  all  to  leorn  more. 

THE  SOLUTION 

THE  BENEFITS^ 

1 
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HP  ProLiant  BL30p  Blade  Server 

*  2  hMt*  Xaen’*  Procsuon  OP  up  lo  3.20GHz/2MB 

*  High  dansily:  Up  to  96  Mfvan  par  (odc 

*  HP  Systona  baighl  Mooogef*':  Wab-bosed  nelwort«d 
monogman)  ihrcwgh  o  lin^  coraeia 

*  Hanbla/Opan:  lnlagmto>  wilh  aisling  inirasiructore 

*  23%  so*lng$  on  ocquoition  cop 

*  19%  ieu  power  consunip*>on 

*  93%  fewer  cobles 

*  Hol-swoppoble  sarvar  design 

‘  Kopid  Daploywant  tack;  For  aosa  of  daploymant 
and  ongoing  prertskwing  and  raprevnioning 

'  Single  interfoee  ior  intogratod  remote  manogefnem 
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Sun,  Microsoft  to  End  Silence 
About  Product  Integration  Work 


Initial  fiK'us  is  on 
support  lor  single 
sign-on,  directories 


BV  PATBICK  THIBODEAU 

MicKi'sof  r  nmr 
and  Sun  Micm- 
s>’su'mj.  Inc.  plan 
lo  detail  their  ini¬ 
tial  pr\xiuci  integration  efforts 
late  this  month,  focusing  4»n 
director>-  sers  ices  and  singlc- 
sign-tm  capabilities. 

Both  sides  confirmed  the 
announcement  plans  last 
week,  but  only  Sun  ol'fieial-s 
would  discuss  any  of  the 
expected  content.  And  they 
wouldn't  disclose  specifics 
about  the  directory  and 
single-sign-on  initiatives, 
which  Sun  previously  identi¬ 
fied  as  the  most  likely  candi¬ 
dates  for  an  initial  intcn>per- 
ability  demumstration. 

The  announcement  will  be* 
tvatched  with  interest  b>'  users 
such  as  l.ou  Michael,  direvtor 


of  core  networks  for  the  Ar¬ 
lington  County.  V'a..  govern¬ 
ment.  Michael  is  considering 
replacing  his  IKls  with  Suns 
Sun  Ray  ihin-clicnt  devices. 
But  one  of  the  Issues  holding 
'  him  Kick  from  moving  off  of 
Windows-based  sysicni.s  Is  his 
reliance  on  Microsoft's  Active 
Pircctory. 

Michacl.  wh»>se  network 
I  includes  about  .^.500  desktop 
I  and  laptop  PCs.  s;iid  he  doesn't 
want  to  have  to  support  both 
Active  Directory  and  Sun’s 
lava  Access  Manager  direc¬ 
tory.  "I'm  hopeful  that  they 
will  work  together  and  inte¬ 
grate  it."  so  either  directory 
can  handle  both  types  of  sys¬ 
tems,  Michael  said. 

Me  added,  though,  that  he's 
'  skeptical  about  how  deeply 
the  twt>  rivals  will  link  their 
systems  to  each  other's  direc¬ 
tories.  His  fear  is  that  Sun  and 
.\iicn>S4*ft  may  limit  them¬ 
selves  to  pl.ans  that  accom¬ 
plish  init^'nition  at  a  high 


H  There’s  a 
lot  going  on. 
The  big  deal  is 
negotiating  dates 
for  announcements. 

LARRY  SINGER  VICE  PRESiDEM 
SUN  MICROSYSTEMS 

level  but  still  require  the  use 
of  both  directorie.s. 

Micros<fft  and  Sun  settled 
an  acrimonious  legal  dispute 
last  spring  and  said  they 
planned  to  integrate  their 
piXHluets  to  make  it  easier  for 
users  to  adopt  technologii*s 
from  both  companie.s  [Quick- 
Link  Since  then,  the 

two  vendors  have  said  little 
about  their  progn*ss.  They 
missed  a  summer  target  set 
by  Sun  CKO  Scott  McNealy 
for  detailing  their  initial  ctil- 
laburative  work,  and  an 
October  announcement  prom¬ 
ised  by  another  Sun  executive 


I  in  September  also  failed  to 
I  materialize. 

!  lim  Deslcr.  a  Microsoft 
spokesman,  said  last  week  that 
the  companies  should  be 
judged  on  what  they  accom¬ 
plish  “over  the  course  of  the 
next  five  to  10  jears."  Deslcr 
added  that  the  seven  months 
since  the  settlement  deal  was 
signed  "have  been  very  p^vsi- 
tive  in  terms  of  setting  up  the 
relationship  in  a  way  that  will 
serve  not  only  the  companies 
but  the  industry  and  cus¬ 
tomers  over  the  course  of  the 
long  term." 

Finding  Time 

Larry  Singer,  vice  president 
of  Sun's  global  information 
systems  strategy  office,  said 
the  two  companies  have  been 
working  on  a  variety  of  issues, 
including  intempcrability. 
joint  initiatives  and  standard.s. 
"There’s  a  h>t  going  on.”  Singer 
said.  "The  big  deal  is  negotiat¬ 
ing  dates  for  announcements." 


Bur  users,  resellers  and 
I  analyst.s  said  that  withvmt  a 
road  map.  they  can't  be  sure 
I  of  exactly  what  the  agreement 
I  will  deliver. 

Anthony  Martini,  founder 
I  and  chief  tcchnologv’  officer 
I  at  DigiGAN  Inc.,  a  M»mr<K“. 

'  Conn.-based  firm  that  does 
I  network  security-related  inte- 
I  gration  work  for  g*>vernmeni 
'  agencies,  said  he  wants  to  see 
I  Microsoft  improve  its  support 
j  for  lava.  “But  1  don't  know  if 
I  the  polities  arc  going  to  gel 
out  of  the  way  to  allow 
change."  he  said. 

However,  there  is  also  a 
recognition  among  observers 
that  it  will  Jake  time  to  finalize 
the  interoperability  plans  be¬ 
cause  Sun  and  Microsiift  have 
been  at  odds  for  so  tong. 

"You  liave  to  wait  until  all 
the  walls  come  down  and 
agreements  are  in  place  before 
they  can  talk  and  brainstorm 
about  what  arc  all  the  possi¬ 
bilities  K'tween  them,"  said 
France's  Draper,  vice  president 
of  the  Sun  Business  Group  at 
GE  Access,  a  General  Electric 
Co.  subsidiary  that  serves  as  a 
value-added  distributor  for 
about  800  Sun  resellers. 
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Sun,  OpenOffice  Plan  to  Make 
Desktop  Apps  More  Like  Office 


SUN  OOESNT  NEED  to  wart  for 
any  agreements  with  Microsoft 
to  rnake  its  SlarOflice  desktop 
apolications  more  compatible 
with  MiCTosofl  Office  And  (he 
level  of  compatibiiity  s  expected 
to  increase  m  a  new  StarOffice 
version  that's  due  next  year 
The  StarOffice  code  ts  largely 
developed  by  OpenOffice.org.  a 
group  that  Sun  formed  in  2000 
to  create  an  operi-source  version 
of  the  software  suite,  which  the 
company  had  acquired  when  it 
bought  a  German  vendor  a  year 
earlier.  OpenOffice.org  plans 
to  release  Verson  2.0  of  Its 
namesake  applications  in  March 
with  improved  Office  interoper¬ 
ability  features,  and  Sun  will 
Quickly  follow  with  a  similar  re¬ 
lease  of  StarOffice,  called  Version 


6.  said  oHicia^  from  ilie  two 
organizations 

Sun  says  there  is  a  growing 
number  of  StarOftice  adopters  in 
Europe  and  Asia.  But  in  Ihe  U  S . 
use  by  large  commercial  enter¬ 
prises  remains  limited,  said  Gart¬ 
ner  Inc.  analyst  Michael  Silver 
Two  years  ago.  Gartner  estimated 
that  StarOffice  had  a  slightly  bet¬ 
ter  than  50-50  chance  of  t^ing 
10%  of  Ihe  office  productivity 
siule  market  in  the  U  S.  from 
Microsoft  by  the  end  of  this  year 
But  Silver  Iasi  week  estimated 
that  SlarOffice's  market  share 
IS  still  somewhere  in  Ihe  “low  sin¬ 
gle  digrts." 

Silver  said  users  don't  want 
mixed  environments  running 
OpenOffice  or  StarOffice  along 
with  Word  and  other  Microsoft 


applications.  A  product  lhal  can 
unseat  Office  en'l  going  to  sell 
Itself  on  file  formal  compatibilily 
or  lower  total  cost  of  ownership, 
he  said,  adding  that  what's  ne^- 
ed  IS  something  “that  really  lakes 
us  to  a  whole  other  level  of  how 
users  gel  their  work  done." 

The  aty  of  Largo.  Fla.,  de¬ 
ployed  OpenOffice  one  year  ago 
to  about  500  employees  who  use 
Ihin  clients  connect^  to  a  Linux 
server  that  runs  a  single  copy  of 
Ihe  software.  "OpenOffice  will 
cover  |ust  about  anything  you 
want  to  do."  said  Largo  OO 
Harold  Shoemaker 

He  added  that  the  open -source 
alternative  supports  the  maionty 
of  imported  Office  files  except  for 
documents  or  spreadsheets  with 
Visual  Basic  macros,  which  don't 
operate  on  Linux.  But  Visual 
Basic  issues  aren't  irequent  for 
Largo's  users.  Shoemaker 
said.  One  other  problem  he  cited 
IS  that  OpenOffice  doesn't  read 


Pow^Fbint  apphcations  well. 

In  terms  of  OpenOtfice's  cost. 
Shoemaker  sad  the  city  “didn't 
have  to  buy  if  but  did  h^e  to  in¬ 
vest  in  user  training.  But  there 
would  have  been  training  expens¬ 
es  no  matter  what  product  Largo 
officials  decided  to  use.  he  said. 

OpenOffice  org  is  improving  its 


Planned  Features 


Dm  OpmOMm  Md  Star 


•  Improved  bJedng,  number* 
mg  and  table  compaBbUty 
wKhWM 

■  More  antartte  between 
OAoe  and  knprasB.  the  aofi- 
were's  Powerf^  aquvalM 

•  Naterappicatainloadno 

■  Support  for  OIL  la  format 
standards  dmebped  by  OASIS 


software’s  interoperability  with 
Office  in  an  effort  to  appeal  to 
users  who  “want  something  that 
can  replace,  fairly  seamlessly.  Ibe 
main  things  that  Miaosoft  Office 
is  used  for.'  said  Louis  Suarez- 
Potls.  a  senior  community  devel¬ 
opment  manager  at  CollabNet 
Inc.  in  Brisbane.  Calif.  CollabNet 
supplies  OpenOtfice's  develop¬ 
ment  platform,  and  Suarez-Potts 
chairs  the  open-source  group’s 
Community  Council, 

While  StarOffice  shares  the 
same  code  base  with  OpenOffice. 
Sun  includes  technical  support  as 
well  as  enterpnsewide  manage¬ 
ment  and  secunty  features  de¬ 
signed  tor  corporate  u^s.  said 
Manish  Punjabi,  group  marketing 
manager  for  the  two  products. 

-PaUick  Thibodeau 

MORE  THIS  ISSUE 

A  Uiaosoh  executive  discusses  the 
company's  pbn  lor  the  next  verson 
ol  Office  Paoe69 
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Sun,  Microsoft  to  End  Silence 
About  Product  Integration  Work 


Initial  focus  is  on 
support  for  single 
sign-oa  directories 


•V  MTWiCIt  THIBODEAU 

Microsoft  corp 
End  Sun  Micro¬ 
systems  Inc.  plan 
to  detail  their  ini¬ 
tial  product  integration  cffons 
late  this  month,  focusing  on 
directory  services  and  single- 
sign-on  capabilities. 

Both  sides  confirmed  the 
announcement  plans  last 
week,  but  only  Sun  officials 
would  discuss  any  of  the 
expected  content.  And  they 
wouldn’t  disclose  specifics 
about  the  directory  and 
sittgle-sign-on  initiatives, 
which  Sun  previously  identi¬ 
fied  as  the  most  likely  candi¬ 
dates  for  an  initial  interoper¬ 
ability  demonstration. 

The  announcement  will  be 
watched  with  interest  by  users 
such  as  Lou  Michael,  director 


of  core  networks  for  the  Ar¬ 
lington  County.  Va..  govern¬ 
ment.  Michael  is  considering 
replacing  his  PCs  with  Sun’s 
Sun  Ray  thin-client  devices. 

But  one  of  the  issues  holding 
him  back  from  moving  off  of 
Windows-based  systems  is  his 
reliance  on  Microsoft's  Active 
Directory. 

Michael,  whose  network 
includes  about  3.500  desktop 
and  laptop  PCs.  said  he  doesn't 
want  to  have  to  support  both 
Active  Directory  and  Sun’s 
Java  Access  Manager  direc¬ 
tory.  "I’m  hopeful  that  they 
will  work  together  and  inte¬ 
grate  it,”  so  either  directory 
can  handle  both  types  of  sys¬ 
tems.  Michael  said. 

He  added,  though,  that  he’s 
skeptical  about  bow  deeply 
the  two  rivals  wilt  link  their 
systems  to  each  other's  direc¬ 
tories.  His  fear  is  that  Sun  and 
Microsoft  may  limit  them¬ 
selves  to  plans  that  accom-  i 
plLsh  integratioo  at  a  high  ! 


H  There’s  a 
lot  going  on. 
The  deal  is 
negotiating  dates 
for  announcements. 

LARRY  SINGER.  VICE  PRESIDENT 
SUN  MICROSYSTEMS 

level  but  still  require  the  use 
of  both  directories. 

Microsoft  and  Sun  settled 
an  acrimonious  legal  dispute 
last  spring  and  said  they 
planned  to  integrate  their 
products  to  make  it  easier  for 
users  to  adopt  technologies 
from  both  companies  [Quick- 
Link  45957).  Since  then,  the 
two  vendors  have  said  little 
about  their  progress.  They 
missed  a  summer  target  set 
by  Sun  CEO  Scott  McNealy 
for  detailing  their  initial 
laborative  work,  and  an 
October  announcement  prom¬ 
ised  by  another  Sun  executive 


in  September  also  failed  to 
matcrialixe. 

Jim  Desler,  a  Microsoft 
spokesman,  said  last  week  that 
the  companies  should  be 
judged  on  what  they  accom¬ 
plish  “over  the  course  of  the 
next  five  to  10  years."  Desler 
added  that  the  seven  months 
since  the  settlement  deal  was 
signed  "have  been  very  posi¬ 
tive  in  terms  of  setting  up  the 
relationship  in  a  way  that  will 
serve  not  only  the  companies 
but  the  industry  and  cus¬ 
tomers  over  the  course  of  the 
long  term." 

RndingTime 

Larry  Singer,  vice  president 
of  Sun’s  ^obal  information 
systems  strata  oftice,  said 
the  two  companies  have  been 
working  on  a  variety  of  issues, 
including  interoperability, 
joint  initiatives  and  stand^s. 
"There’s  a  lot  going  on,"  Singer 
said.  ■‘The  big  deal  is  negotiat¬ 
ing  dates  for  announcements." 


But  users,  resellers  and 
analysts  said  that  without  a 
road  map.  they  can’t  be  sure 
of  exactly  what  the  agreement 
will  deliver. 

Anthony  Martini,  founder 
and  chief  technology  officer 
at  DigiGAN  Inc.,  a  Monroe, 
Conn. -based  firm  that  does 
network  security-related  inte¬ 
gration  work  for  government 
agencies,  said  he  wants  to  see 
Microsoft  improve  its  support 
for  Java.  "But  I  don't  know  if 
the  politics  are  going  to  get 
out  of  the  way  to  allow 
change,"  he  said. 

However,  there  is  also  a 
recognition  among  observers 
(hat  it  will  take  time  to  finalize 
the  interoperabilit)'  plans  be¬ 
cause  Sun  and  Microsoft  have 
been  at  odds  for  so  long. 

"You  have  to  wait  until  all 
the  walls  come  down  and 
agreements  are  in  place  before 
they  can  talk  and  brainstorm 
about  what  are  all  the  possi¬ 
bilities  between  them."  said 
Frances  Draper,  vice  president 
of  the  Sun  Business  Group  at 
GE  Access,  a  General  Electric 
Co.  subsidiary  that  seri  es  as  a 
value-added  distributor  for 
about  800  Sun  resellers. 
050577 


Sun,  OpenOffice  Plan  to  Make 
Desktop  Apps  More  Like  Office 


SUN  OOESrr  NEED  10  wart  for 
any  a^Bements  with  Microsoft 
to  make  its  StaiOffice  desktop 
appfcatens  more  compatiile 
with  Mkmsoft  Office.  Arid  tltt 
level  of  competibiiity  is  expected 
to  increase  in  a  new  StarOffice 
version  thd’s  due  next  year. 

The  StarOffice  code  is  laroely 
developed  by  OpenOffIce.oro.  a 
group  that  sin  formed  in  2000 
to  create  an  open-source  versiofi 
of  the  software  suite,  which  the 
company  had  acquired  when  It 
bought  a  Oerman  vendor  a  year 
earfitf .  0pen0ffice.org  plans 
to  release  Varstoo  2.0  of  Its 
namesake  appicalions  in  March 
with  improved  Office  irrteroper' 
abily  feMures.  and  Sun  wi 
quicklyfoltowwilhasimiarre- 
laaae  of  SlarOffice.  cafed  Version 


8.  said  officials  from  the  two 
organizations. 

Sun  says  there  is  a  growing 
number  of  StarOffice  adopters  m 
Europe  and  Asia.  But  in  the  U5.. 
use  by  large  commercial  enter- 
prises  remans  hrmied.  sard  Gart¬ 
ner  Inc.  analyst  Michael  Sliver. 
Two  years  ago.  Gartner  estimated 
that  StarOffice  had  a  slightly  bet¬ 
ter  than  50-50  chtfice  of  taking 
X)%  of  die  office  productivity 
suite  marfet  in  the  U.S.  from 
Microsoft  by  the  end  of  this  year. 
But  Silver  week  estimated 
that  StarOffice’s  market  share 
is  sti  somewhere  in  the ‘low  sin- 
gie  digits.* 

Silver  said  users  doni  want 
mixed  enveonments  rurmmg 
OpenOffice  or  StarOifice  along 
wrttii  Wkird  and  other  MicrosofI 


applicabons.  A  product  that  can 
unseat  Office  isit  going  to  seli 
Itself  on  file  form^  compatdjity 
or  lower  total  cost  of  owner^lp. 
he  said,  addng  that  what's  ne^- 
edtssom^hing'dial  really  takes 
us  to  a  whole  other  level  of  how 
users  gel  their  work  done.' 

TbecityofLaroo.Ha..de- 
pioyed  OpenOffice  one  year  ago 
to  ^lout  500  employees  who  use 
thin  clients  connect  toa  Linux 
server  that  runs  a  single  copy  of 
the  software. 'OpenOffice  will 
cover  lust  about  anything  you 
want  to  do.*  said  Largo  CIO 
Harold  Shoemaker. 

He  added  that  the  open-some 
alternative  supports  the  mafonty 
of  imported  Office  files  except  for 
documents  or  spreadsheets  with 
\fisu8t  Basicmacros.  which  don’t 
operate  on  Linux.  But  Visual 
Basic  issues  aren't  frequent  for 
Largo's  end  users.  Shoemaker 
said.  One  other  problem  he  cited 
is  that  OpenOffice  doesn't  read 


PowerPoint  appfications  wen. 

In  lenns  erf  OpenOffice's  cost 
Shoemaker  said  the  dty 'dkln't 
have  to  buy  it' but  dkf  to  in¬ 

vest  in  user  traNfrng.  But  there 
would  have  been  trakiinQ  expens¬ 
es  no  matter  what  product  Largo 
offkaais  decided  to  use.  he  said. 

OpenOffice.org  Is  improving  its 


Planned  Features 


software's  mteroperabity  With 
Office  in  an  effort  to  app^  to 
users  who 'want  something  that 
can  replace,  falriy  seamlessly.  ^ 
rnaki  things  that  Microsoft  Office 
isusedfor.'saidljouisSuarez- 
Potts.  a  senior  community  devel¬ 
opment  manager  at  ColiabNet 
.  Inc.  in  Brisbane.  Calif.  CottabNel 
-  supplies  OpenOffice'sdevelop- 
;  ment  pttif^.  and  Suarez-Fbtts 
chairs  the  open-some  group’s 
;  Community  Cound. 

While  StarOffice  shares  the 
same  code  base  with  OpenOffice. 
Sun  includes  technical  support  as 
wel  as  enterprisevwde  manage¬ 
ment  and  security  features  de¬ 
signed  for  corpoi^  users,  said 
ktonish  ^jaU  group  madi^ing 
manager  for  the  two  products. 

^Patrid(Thgxxieau 

■METIS  BSK 

A  Mtcraaoft  BBCutiw  dBcussas  0w 
convany'i  plan  tor  the  next  version 
ofOflicaPaBifiB 


Over  a  million  IT  Professionals 
are  getting  ongoing 
security  guidance. 


Millions  of  your  peers  are  turning  to  the  Security  Guidance  Center  for  the  latest  in  security.  By  visiting  regularly, 
they  get  the  tools,  guidance,  and  training  needed  for  better  protection  against  viruses  and  other  security  threats. 
Visit  microsoftcom/security/IT  today  and  see  for  yourself  the  newest  additions,  including: 


Microsoft*  Windows*  XP  Service  Pack  2  with  Advanced  Security  Technologies  Download  it  for  free 
and  evaluate  the  latest  updates  for  inaeased  system  control  and  proactive  protection  against  security  threats. 


Free  Online  Self  Assessment  Complete  this  free,  Web-based  self-assessment  test  to  help 
you  evaluate  your  organization's  security  practices,  and  identify  areas  for  improvement. 


Free  Updates  and  E-mail  Alerts  Stay  on  top  of  the  latest  security  issues  quickly  and 
easily  by  signing  up  for  free  Microsoft  Security  Communications. 


Free  Security  Tools  React  more  effectively  to  potential  security  threats.  Take  advantage  of 

free  tools  and  technologies  like  the  Microsoft  Baseline  Security  Analyzer  and  Software  Update  Services. 


Go  today  to  microsoft.com/security/IT 


Mlaosoft 


C  2004  Microsoft  Corporation  AJI  n9ht$  reserved  Microsoft  and  Windows  are  either  registered  trademarics  or  trademarks  of 
Microsoft  Corporation  in  the  United  States  and/or  other  courttries. 
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SCO  Reconsiders 
Lawsuits  Web  Site 

The  SCO  Group  Inc,  is  roconsider- 
mg  its  plan  to  sot  up  a  Web  silo  for 
pasting  mformatiQn  about  its  law* 
surts  against  Linux  backers.  The 
comparry  said  H’s  having  second 
thoughts  because  of  "legaJ  and 
management  concerns  about  the 
content  of  the  Web  stto.”  The  site, 
initially  slated  to  use  the  domain 
name  www.pnscojieU  which  was 
then  shifted  to  www.seainih.com, 
had  been  due  to  go  live  on  Nov.  t 


U.K.  Agency  Signs 
New  Microsoft  Deal 

The  U.R.  National  Health  Service 
said  it  has  stgnad  a  revised  soft¬ 
ware  licoRSing  deal  with  MicrosofI 
Corp.  that’s  axpedad  to  save 
the  agency  $206  mfWon  over  the 
next  three  years  and  more  than 
$600  million  over  the  contract's 
fuH  nine-year  span.  The  deal  gives 
the  NNS  up  to  900.000  perpetual 
desktop  kcanses,  compared  with 
its  current  500.000  licenses  that 
need  to  be  renewed  annually.  (See 
relatod  item  in  Global  Dispatches, 
page  20.) 


MCI  Reports  Loss, 
Writes  Off  Assets 

MCI  Inc.  reported  a  $3.4  billion 
Ihird-guartar  toss,  fuetod  by  a 
previously  diictosed  wrtte-off  of 
$3.5  UKm  worth  of  asseto.  CEO 
Mchaei  CapeSas  said  during  a 
confvsoca  cai  that  MCI  plans  to 
focus  primarily  on  ssIBng  P- 
based  telephony  and  network  ser¬ 
vices  to  large  corporate  umts.  Hs 
Enterprise  Markets  unit  genoratod 
$1.2  bMton  to  rtvtnue  durtog  the 
Quarter,  down  8Qb  year  over  year. 

Short  Takes 

which  last  month 
<hoppedplmsfora4-6Hz  Pen¬ 
tium  4,  conftrmed  that  H  wiB  re¬ 
lease  •  3.8-6Hk  version  of  the 

chip  on  Nov.  15 _ NQHiA  COi* 

introduced  a  rouMfunctton  ctol 
phone  that  ineludes  a  touch* 
sansHIvi  screen  and  stylus. 


Grid  Storage  Vision 
Appeals  to  IT  Managers 


Modular  arraxs 
u  ith  nondisniptivc 
scalabilit)  popular 

ev  LUCAS  MEARIAN 

SroHMJt  vt-NiJORsare 
taking  a  cue  from  the 
setter  world  of  grid 
computing  and  building 
mtHluIar  array  s>“sicms  that  can 
nondisruptix-ely  gntw  pr<>ce.ss- 
I  ing  pxmvr  along  with  capacity. 

Next  week,  Sunnyvale. 

[  Calif.-based  Network  Appli- 
I  .ince  Inc.  plans  to  come  out 
I  with  upgrades  and  enhanced 
features  for  its  Storage  Grid 
architecture,  a  set  of  disk  ar- 
ray.s  .and  switches  that  piwl 
processing  and  storage  capaci¬ 
ty  among  nctwork-anached 
storage  (NAS)  servers. 

Sioragc  suppliers  of  all  sizes 
are  using  a  variety  of  tech¬ 
nologies  and  strategies  to  get 
grid  storage  systems  into  cor- 
poraic  data  centers. 

IBM  is  “heavily  invested"  in 
grid  storage  as  part  of  an  over¬ 
all  grid  computing  strategy  that 
uses  vimiallzarion  icchnolt^y 
to  knit  together  disparate  stor¬ 
age.  network  and  server  sys¬ 
tems.  said  Tom  Hawk,  general 
manager  of  enterprise  storage 
systems  at  IBM. 


I  Over  the  next  year.  I  Icwlett- 
'  Pack.ard  Co.  said  it  will  build 
on  its  St«)r.age\Vorks  grid 
i  pr*Kiucts.  which  .iggregaic 
!  CPU  and  capacity  under  a  sin- 
I  gle  console  view,  to  address 

'  file  serving,  archiving  and 
storage  management. 

But  despite  all  the  work  on 
j  such  systems  so  far.  “no  one 
j  has  provetJ  to  tne  they’ve  com¬ 
pleted  the  invention  of  core 
grid  architecture.”  said  Robert 
Gray,  an  analyst  at  IOC  in 
Framingham.  Mass. 

Starting  Small 

The  most  popular  systems  to¬ 
day  are  smaller  grid  storage 
products  that  use  low-cost 
parallel  or  Serial  ATA  disks 
.and  can  operate  at  the  block 
or  file  level  and  aggregate 
RAID  controllers  and  capacity. 
The  arrays  lo.ad-balance 
among  self-contained  storage 
modules,  allowing  perfor-  | 
mance  to  grow  in  a  linear 
manner,  because  each  new 
module  brings  not  only  addi¬ 
tional  capacity  but  additional 
CPUs  as  well,  vendors  and  an- 
aly.sts  said. 

Smaller  vendors  hawking 
grid-style  systems  Include 
3PARdaia  Inc.  in  Fremont. 

Calif..  Cloverleaf  Communica- 


Effective  grid 
storage  provides: 

•  A  single  management  view 

•  Aggregated  .storage  capacity 

•  Aggregated  controller 
performance 

•  Nondisruptivfe  scalability 
i  Simple  setup 


tions  Inc.  in  Southboro.  Mass.. 
Xiotech  Ca.>rp.  in  Eden  Prairie. 
Minn.,  ExaGrid  Systems  Ine.  in 
Westboro.  Mass..  Tsunami  Re¬ 
search  Inc.  in  St.  Louis,  and 
Isilon  Systems  Inc.  in  Seattle. 
Most  of  the  smaller  suppliers 
pitch  boxes  to  small  and  mid¬ 
size  companies  that  need  low- 
ctwt  storage  networks  to  re¬ 
place  direct-attached  storage 
environments  there. 

"The  investment  wasn’t  that 
huge,  and  I  liked  the  speed 
of  grid  storage."  said  Phil 
Jachc,  deputy  director  of  tech¬ 
nology  at  Sports  /Rustrated 
magazine  in  New  York,  which 
purchased  a  NAS  server  from 
isilon  this  year  to  consolidate 
file  servers. 

fache  said  the  box.  which 
has  a  capacity  of  about  6.5TH. 
performed  flawlessly  during 


Vendors  Take  Different  Paths  to  Grid  Storage 


WHILE  there  are  signAcant  differ¬ 
ences  between  vsnous  grid  stor¬ 
age  systems,  toey  al  perform  one 
task  aggregating  processing 
power,  storage  capacity  and  the 
ability  to  grow  seamlessly. 

Vendors  are  tomping  the  terms 
virtu^zatm.  ctotertogand  gnd 
together  into  one  techrtology 
martetirtg  pile  and  callino  it  grid 
storage. 

And  wtNe  'any  of  those  terms 
Morfc*  to  describe  gnd  compubng. 
said  Randy  Kerns,  an  analyst  at 
Evaiuaior  Group,  tiue  grid  storage 
must  address  RAID  controller  and 
capacity  integration  issues. 


Close  to  a  dozen  smaller  ven¬ 
dors.  such  as  LeftHand  Networks 
and  3PARdala.  take  somewhat 
diHerent  paths  to  reach  the  same 
goal.  The  big  difference  be¬ 
tween  3RAR  and  LeftHand  is  that 
[3PAR}  has  storage  controflers 
clustered  together  and  a  pool  of 
storage  those  controllers  can  ac¬ 
cess.  LeftHand  has  nodes  that 
conlan  the  storage.'  Kerns  said. 

Larger  storage  vendors,  such 
as  Hei^-Rackard.  IBM  and 
Network  Appliance,  are  all 
knitting  together  more  distnbuted 
slorage-area  network  (SAN)  en¬ 
vironments  torough  open  stan¬ 


dards.  common  interfaces  and 
virtualization  ledmology  that  can 
link  uncommon  systems. 

NehM)rk  Appliance's  gnd  stor¬ 
age  architecture  uses  dsks.  tiler 
heads  or  engines,  switches  and 
its  Data  Ontap  operating  system 
to  enable  serving  mixed  SAN  and 
NAS  workloads. 

■[Start-up  vendors'  grid  sys¬ 
tems]  are  microcosm  impletnen- 
tations  of  what  is  truly  the  mKro- 
cosm  challenge  most  enterprises 
face.'  said  Tom  Hawk,  general 
manager  of  enterprise  storage 
systens  at  IBM.  'They're  nice, 
simpkstic  point  solutions,  but 


I  this  summer's  Olympic  Game's. 
I  storing  250,000  photos  and 
I  delivering  thenuo  editors 
with  lightning-fast  rcad-writc 
.  speeds. 

Clustered  storage  systems 
i  from  start-up  LeftHand  Net¬ 
works  Inc.  in  Boulder.  CoKv. 
operate  at  the  block,  not  file, 
level  by  using  the  iSCSI  proto¬ 
col.  By  using  LSCSI.  UMtHand 
takc.s  advantage  of  the  ubiqui¬ 
tous  IP  F-thcrnel  networks  to 
back  up  and  re.stoa‘  data  to  ap¬ 
plication  servers. 

Chris  Scholik,  network  ser¬ 
vices  manager  at  ALSAfc-'Si. 
fude  Children’s  Research  Hos¬ 
pital  in  Memphis,  said  he  pur¬ 
chased  a  6TU  array  based  on 
grid  computing  technology 
from  LeftHand  two  years  ago 
to  consolidate  his  server  infra¬ 
structure.  He  gives  the  box 
high  marks  for  ease  of  use  and 
affordability. 

Randy  Kerns,  an  analyst 
at  Evaluator  Group  Inc.  in 
Greenwood  Village.  Colo.,  pre¬ 
dicted  that  grid  disk  storage 
will  someday  meet  enterprise 
requirements. 

Other  analysts  sec  grids  ex¬ 
tending  beyond  the  data  center 
and  into  the  WAN.  usirQj  oh- 
jeet-based  storage  that  marries 
metadata  with  information  that 
can  be  instantly  retrieved  from 
wherever  it’s  stored. 

IDC’s  Gray  said  he  expects 
that  storage  grids  will  eventu¬ 
ally  connect  heterogeneous 
arrays  across  WANs  through  a 
single  interface.  O  50569 


they  have  to  be  inlegrated  into  an 
enterprise  infrastructure  * 

Hawk  said  most  IBM  cus¬ 
tomers  are  tackling  grid  storage 
and  grid  computing  from  an  ar¬ 
chitectural  standpoint  in  order  to 
better  utilize  existing  systems  as 
IBM  looks  at  information  grids  in 
a  larger  context  -  the  context  of 
the  WAN. 

Over  Ihe  next  year.  HP  wi  fo¬ 
cus  on  giving  Its 'smart  cells' -  afl- 
in-one  modi^  with  controllers, 
storage  and  software  -the  abUrty 
to  serve  up  block-level  data  from 
databases,  integrated  heteroge¬ 
neous  array  controllers  and  gnd- 
based  storage  management. 

-LucasMearian 
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SCO  Reconsiders 
LaMouits  Web  Site 

TIm  SCO  anmp  Ik.  to  racamldir 
Ins  M  Phil  to  M  ap  *  HM  i«i  fur 
pwltog  IntonmllMi  iliijul  Ito  tow- 
ailto  igtoKl  Itom  Indaii.  Om 
onpMy  aU  rp  haring  tocond 
Ihoiririlto  hicaat  o(  “togh  aid 
maagaiiOTl  Goncpna  idiiid  da 
cntoid  to  Sm  WUi  dto.' Oh  toto. 

hddillf  totoal  to  UK  dto  daiHin 
naw  mawiinani  lat  aWtol  an 
dan  toriltod  to  anwjcaMuam 
lad  ban  ton  to  gs  Iw  on  lto«.  t 


Oh  OK.  Ntoknto  HmWi  Savka 
otoddlaniltoadniariMditol- 
am  Icantong  dito  Hdh  Mcnanfl 
Ceip.  Ihto^  aqactod  to  am 
ton  agaiqr  SZOd  oann  ow  da 
nm  Ann  man  Kd  nan  dan 
noo  ridtoon  aar  da  catoact'a 
Mitoapanrmn-Oadatoglm 
dto  NHS  i«  to  900.000  paptouto 
daahtnpleaaaa.ca 
■a  Ctoianl  500.000 
nnad  to  bn  itototood  anaalii.  (Sw 
ftoatod  dai  to  Obhal  OlapUdlao. 
pagnSOJ 


MCI  Reports  Loss, 
Writes  Off  Assets 

HCIIoe.  iipatod  a  SS.4  baton 
tokdtotoftor  taaa  fntoad  bp  a 
Piariaah  ritodonad  Hilto^  to 
SM  b«an  aaito  tomato.  Cg) 
bUatoCaptotoaatod  riming  a 
anahnnca  cal  toat  m  ptom  to 
laatoprintoilpanaaBngP- 
baaad  totophanp  and  atoanik  aar 
torn  to  higa  aapanria  uaai.  Ito 
Entoipiton  Mailato  aril  ganantod 
tU  baton  to  ratototo  dtokg  dto 


Short  Takes 

doacomi, 

itoippadptoaatorad-eHiRai- 
dm4,aanlbtoad«todaian- 
lam  a  atoOHi  aaalan  to  ton 
ddp  an  Ok.  e. ...  NOKIA  COUP, 
tobratoand  a  naddlHitolan  oil 
pbana  toal  bntodaa  atoned- 
aaatotoa  acnan  and  topha. 


Grid  Storage  Vision 
Appeals  to  IT  Managers 


Modular  arrays 
with  nondisruptive 
scalability  popular 


BY  UlCAB  MCAirUN 

STORAGE  VEKDORS  are 
taking  a  cue  from  the 
server  world  of  grid 
computing  and  building 
modular  array  systems  that  can 
nondisrupttvely  grow  process¬ 
ing  power  along  with  capacity. 

Next  week.  Sunnyvale. 
Calil-based  Network  Appli¬ 
ance  Inc.  plans  to  come  out 
with  upgrades  and  enhanced 
features  for  its  Storage  Grid 
architecture,  a  set  of  disk  ar¬ 
rays  and  switches  that  pool 
processing  and  storage  capaci¬ 
ty  among  network-attached 
storage  (NAS)  servers. 

Storage  suppliers  of  all  sizes 
are  using  a  variety  of  tech¬ 
nologies  and  strategies  to  get 
grid  storage  systems  into  cor- 
poraa  data  centers. 

IBM  is  “heavily  invested"  in 
grid  stor^  as  pan  of  an  over¬ 
all  grid  computing  strategy  that 
uses  virtualization  technology 
to  knit  together  di^>arate  stor¬ 
age.  netwoiic  and  server  sys¬ 
tems,  said  Tom  Haudu  general 
mam^r  of  enterprise  ston^ 
systems  at  IBM. 


Over  the  next  year,  Hewlett- 
Packard  Ca  said  it  will  build 
on  its  Storage  Works  grid 
products,  which  aggregate 
CPU  and  capacity  under  a  sin¬ 
gle  console  view,  to  address 
file  serving,  archiving  and 
storage  management. 

But  despite  all  the  work  on 
such  systems  so  far,  "no  one 
has  proven  to  me  they've  com¬ 
pleted  the  invention  of  core 
grid  architecture."  said  Robert 
Gray,  an  analyst  at  IDC  in 
Framingham,  Mass. 

Starting  Small 

The  roost  popular  systems  to¬ 
day  are  smaller  grid  storage 
products  that  use  low-cost 
parallel  or  Serial  ATA  disks 
and  can  operate  at  the  block 
or  file  level  and  aggregate 
RAID  controllers  and  capacity. 
The  arrays  load-balance 
among  self-contained  storage 
modtiJes.  allowing  perfor¬ 
mance  to  grow  in  a  linear 
manner,  because  each  new 
module  brings  not  only  addi¬ 
tional  capacity  but  additional 
CPUs  as  well,  vendors  and  an¬ 
alysts  said. 

Smaller  vendors  hawking 
grid-style  systems  include 
3PARdata  Inc.  in  Fremont, 
Calif..  Cloverieaf  Communica- 


Effective  grid 
storage  provides; 


tions  Inc.  in  Soutbboro,  Mass^ 
Xiotech  Corp.  in  Eden  Prairie, 
Minn.,  ExaGrid  Systems  Inc.  in 
Westboro.  Mass..  Tsunami  Re¬ 
search  loc  in  St  Louis,  and 
IsUon  Systems  Inc  in  Seattle. 
Most  of  the  smaller  suppliers 
pitch  boxes  to  small  and  mid¬ 
size  companies  that  need  low- 
cost  stor^  networks  to  re¬ 
place  direct-attad^ed  storage 
environments  there. 

"The  investment  wasn't  that 
huge,  and  I  liked  the  speed 
of  grid  storage,"  said  Phil 
Jache.  deputy  director  of  tech¬ 
nology  at  Sports  Illustrated 
magazine  in  New  York,  which 
purchased  a  NAS  server  from 
Isilon  this  year  to  consolidate 
file  servers. 

Jache  said  the  box.  which 
has  a  capacity  of  about  6.5TB. 
performed  flawlessly  during 


Vendors  Take  Different  Paths  to  Grid  Sto^ 


WWUtmmagntocanldller- 
msbtoiMenitoliugtolstor- 
agi  tototoiB.  Hay  to  potann  OB 
totoc  agvagtolng  CPU  pncnstig 
poav.  atonge  opaciy  and  toe 
aMtoflogmiamiiitoatil). 

Itondois  an  hanptog  toe  toms 
■Mabtobn  ctslaiaipand  grid 
legatoer  bile  one  todnebw 
nBMing  pie  and  caing  •  ipid 
tdniage. 

And  iMe 'any  to  tooae  leniB 
waV  to  daeotoe  ipid  conpubng. 
aaid  Randy  Kama,  an  analyto  at 
Eialuton  enact,  ton  gdd  atoiaga 
mat  adtoaas  RAD  conbolar  and 
capadtylntoipaeon  touea. 
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don.  auto  aa  LellHand  Nahmls 
andanRdala.  talB  aonaalBt 
dffannt  petoa  to  nach  toe  aana 
goaL-nabloddhreiioebe- 
laaen  3FIW  and  (tolHand  Is  toil 
[SMRl  haa  aloage  oonbeleis 
ebatomd  logitoer  and  a  pool  ol 
Stonge  tooae  aadreiens  can  ac- 
caaa.  LellHiiid  hn  nodea  toal 
contain  toe  eaonge.- Kara  Slid. 

Laigar  sknga  vandon  auto 
asHeatalpndaid.BMaid 
NalaioiliAppianoa.arato 
hnUno  togetoai  mom  dbldbuled 
aloiaoa-ami  nebaoiii  (SAN)  en- 
vtonianta  dveuto  open  atan- 


daids.  common  titaitacaa  and 
vbluafaalion  loitonilogy  toad  can 
Mwoommonaystams. 

Nebmak  Appianca’a  gnd  atar- 
age  antolaclua  usee  dl^  flat 
laada  or  angbaa.  satotoea  and 
Ita  Data  Ontap  oparataig  aiatam 
to  anaUe  aenlng  maod  SAN  and 
MSwaMoafc. 

IStanicvandna'gddsya- 
tana]  am  microaam  Imptaman- 
talions  to  tout  k  Indy  toa  macm- 
coan  itoalango  meal  antaiulam 
iaoe.- said  Tom  Hiali.  gtn^ 
nanigei  to  antaqalaa  stongs 
syalima  to  DU. 'Ihay’m  toco, 
ainplslic  polnl  sobdiTO  but 


this  summer's  Olympic  Games, 
storing  250,000  photos  and 
delivering  them  ro  editors 
with  lightning.fut  read/write 
speeds. 

Clustered  storage  systems 
from  start-up  LeltHand  Net¬ 
works  Inc.  in  Boulder.  Colo., 
operate  at  the  block,  not  file, 
level  by  using  the  iSCSI  proto¬ 
col.  By  using  iSCSI,  LeltHand 
takes  advantage  of  the  ubiqui¬ 
tous  IP  Ethernet  networks  to 
hack  up  and  restore  data  to  ap¬ 
plication  servers. 

Chris  Schotik.  network  ser¬ 
vices  manager  at  ALSAC/St 
Jude  Children's  Research  Hos¬ 
pital  in  Memphis,  said  be  pur¬ 
chased  a  6TB  array  based  on 
grid  computing  technology 
from  LeltHand  two  years  ago 
to  consolidate  his  server  infra¬ 
structure.  He  gives  the  box 
high  marks  for  case  of  use  and 
aHordability. 

Randy  Kerns,  an  analyst 
at  Evaluator  Group  Inc.  in 
Greenwood  Village,  Colrx.  pre¬ 
dicted  that  grid  disk  storage 
will  someday  meet  enterprise 
requirements. 

Other  analysts  see  grids  ex- 
tendiitg  beyond  the  data  center 
and  into  the  WAN,  using  ob- 
iect-based  storage  that  marries 
metadata  with  inibnnation  that 
can  be  instantly  retrieved  Irtiffl 
wherever  it's  stored 

IDC’s  Gray  said  he  expects 
that  storage  grids  will  eventu¬ 
ally  connect  beterogenemis 
arrays  across  WANs  through  a 
single  interface.  O  S0S69 
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OB  on  gkring  k  Inart  cafe*  -  al- 
amm  imdtoaa  atoi  canktokm. 
stoagaandaoKani-toealiMy 
toaenmtoiMork  lento  dtoi  bun 
datataaet.  kdagrirtad  batamga- 
iBOB  any  oonbtohm  told  ipld- 
baaed  Stonge  nanagananL 

-LuasUmHn 


ContWer  th«  dots  coniMcted.  Supported  by  a  new,  dedicated  ATM  network  we 
•<  designed,  delivered  and  now  manage,  Huntington  National  Bank  launched  a  series 
•«•*•*«••*•••?*  cirtbng-edge  applications  that  improved  customer  satisfaction.  Which  is  directly 

*•*•*•••*•«*•*  related  to  another  benefit  of  the  more  powerful  network-scalability  as  the  bank 

*  **••*****•  continues  to  grow  and  prosper.  Find  out  more  about  how  we’re  helping  Huntington 

*  National  Bank  connect  the  dots  at  sbc.conVdots.  GOING  BEYOND  THE  CALL.* 

S3C, ihe SBC c^C' enfl GCI*3 6t 'tWD  !t€ CA;_ « fEgiss-ec rscemai's c" SE"  <;«wcg» verL'c, L ri/y e t-'X4  SSI Var.'c  ‘t’?' 
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IBM  Prejwins 
Services  Bun( 


to  Brin 
le  for 


•ing( 

\^b 


l’:ick;i”c  aims  to 
tic  business  goals 
to  IBM  tcchnologA 
inwstments 

BV  HEATHER  HAVENSTEIN 

IBM  vv  II I  <H)on  begin  of¬ 
fering  hunUlcd  services 
that  CNCCutivi*s  said  will 
help  users  in  vertical  sce- 
rors  like  banking  and  insur¬ 
ance  map  busines.s  processes 
into  scrvicc-oricntcd  architec¬ 
tures  (SOA)  using  IBM  Web¬ 
Sphere  tcchnokigics.  Com- 
puit'nvorld  has  learned. 

In  the  coming  weeks.  IBM 
will  take  the  wraps  off  its  Ser- 
viee-Oriented  Modeling  initia¬ 
tive.  described  as  a  package  of 
serv  ices  that  can  provide  IT 
managers  with  an  analysis  of 
business  processes  to  identify 
those  that  are  core  to  the  en¬ 
terprise.  At  the  same  time,  the 


bundled  services  can  be  used 
to  create  methods  that  can  be 
folded  inlo  .m  SOA  by  using 
IBM's  underlying  architcdure 
and  applications,  said  Mich;tel 
I-iebow.  vice  president  i)f  Web 
services  for  IBM's  GIt»bal  .Ser¬ 
vices  unit. 

In  some  ca.ses.  users  m.iy 
opt  t«»  outsource  to  IBM  C.lob- 
I  al  Siervict's  those  priKes.scs 
'  that  are  mu  core  or  unique  to 
the  business,  he  added.  "The 
arc3.s  that  don’t  produce  any 
differeniiation  are  the  aix-as 
that  are  sucking  you  dr)’  rela- 
'  tive  to  co.sts,''  Liebow  said. 
"What  you're  trying  to  do  is 
Kdance  the  things  that  drive 
value  for  the  oiganization  and 
those  that  are  common  or  un- 
I  differentiated.*' 

I  IBM  will  offer  bundled  ser¬ 
vices  tailoa-d  for  several  sec¬ 
tors.  including  banking,  insur¬ 
ance.  consumer  good.s.  retail 
and  government,  he  said. 


The  University  of  Nt*rth 
Carolina  at  Chapel  Hill's  labo- 
raf»»rv’  for  Molecular  Modeling 
worked  with  IBM  to  develop 
a  reference  architecture.  That 
project  ertabled  it  to  integrate 
12  applications  that  researchers 
use  for  drug  discovery  efforts 
intti  an  .WA  using  IBM’s  Web¬ 
Sphere  platform  and  I')B2  data¬ 
base  technology. 

As  a  result,  researchers  nt>vv 
have  fa-ster  access  to  molecular 
data  in  the  databases.  In  addi¬ 
tion.  remote  scientists  can  ac¬ 
cess  the  sv-sicm  via  the  Web- 
-Spherc  p«irtal,  according  to 
UNC  officials. 

“They  have  provided  us 
with  an  architecture  to  con¬ 
nect  individual  privgrams  to¬ 
gether  and  develop  a  single 
workrtow  where  input  and 
output  of  individual  programs 
are  connected."  said  Ale.\ 
Tropsha.  profeswir  of  medici¬ 
nal  chemistry  and  director  of 


Out 

Sphere 

the  lab.  "Wc  have  realized  that 
a  lot  of  things  that  we  do  will 
become  much  more  cfBcicnt 
if  we  organize  them  in  a  work- 
How.  Help  from  IBM  in  this 
area  was  critical." 

IBM's  new  initiative  comes 
on  the  heels  of  BEA  Systems 
Inc.'s  unveiling  last  week  of 
bundled  services  that  execu¬ 
tives  there  said  will  help  BEA 
WebLogic  users  build  SOAs 
for  tackling  common  enter¬ 
prise  pain  points  like  cus¬ 
tomer  service. 

Infrastructure  companies 
like  IBM  and  BEA  increasingly 
are  finding  that  to  entice  users 
to  buy  their  products,  they 
must  provide  these  bundled 
services  to  link  their  technol- 
i>gy  to  concrete  business  val¬ 
ue.  said  Eric  Ausivold.  an  ana¬ 
lyst  at  AMR  Research  Inc.  in 
Boston. 

"It’s  easier  for  the  business 
professionals  that  approve  IT 


Top  Execs  Slow  to  See  Need  to  Manage  IT  Assets 


lii  jiet  siippi)rt,  slyrt 
snnill  and  show 
a-sults.  exports  s;iy 

BV  THOMAS  HOEFMAN 

.Mtiuntlng  regulatory  require¬ 
ments  such  as  the  Sarbanes- 
Oxley  Act  of  21)02  have  helped 
com’incc  some  corp«»rare  cN- 
ccuiivcs  to  at  least  pay  atten¬ 
tion  M  the  need  for  IT  asset 
management  practices.  Never¬ 
theless.  several  attendees  at 
recent  IT  asset  manageroeni 
conference  said  that  attaining 
executive  buy-in  and  funding 
for  asset  management  pro¬ 
grams  remains  a  big  challenge. 

"We  have  nut  men  attempt¬ 
ed  to  sell  senior  management 
as  of  yet.  Senior  management 
Joes  not  ev  en  have  a  good 
idea  ;ts  to  what  IT  a.ssei  man 
jgemeni  means."  said  Steve 
W  hclan.  manager  of  asset 
management  at  l’(jiCE  (iorp. 
in  San  Francisco,  parent  «)f 


I’acific  Ga.s  and  Electric  Co. 

Before  Roger  Gray  n.x'coily  I 
stepped  down  as  CIO  for  the 
I  utility,  -sjiid  Whelan,  “he  was 
bv'gtnning  to  understand"  the  i 
importance  of  IT  a.sset  man-  ' 
agement.  “Bui  to  my  km>wl- 
edge,  he  had  not  carried  the 
message  any  higher"  intt> 
I’G&E's  executive  ranks. 

I  Whelan  added. 

Whelan  surmised  that  the 
next  CIO  -  IXitkE  is  still 
going  through  the  recruiting 
poveess  —  will  have  some 
backgnuind  In  IT  asset  man¬ 
agement  but  that  the  educa- 
fi«m  process  "will  begin  where  I 
Roger  left  off.” 

That  maps  with  what  many 
other  IT  as.sei  managers  are 
encountering.  "Executive  buy- 
in  on  asset  management  is  a 
big  issue."  said  U.irb;ira  Keni- 
biesa.  president  of  Interna¬ 
tional  Asstviatinn  nflnhirma- 
tion  Technology  Ajtset  Man¬ 
agers  Jnc.,  a  ft)r-profii  user  as- 


.sociaiion  in  Akron.  Ohio,  that  \ 
held  iLs  annual  conference  for 
as.se!  managers  two  weeks  ago. 

To  help  raise  executive 
awareness  of  IT  asset  manage¬ 
ment  and  its  benefit.s.  the  user 
asstK'iation  is  planning  to  con¬ 
duct  a  series  of  e.xccutive 
briefings  and  "webinars"  in 
2005.  Rembiesa  said. 

.Attendees  at  the  conference 
said  it  can  K'  difficult  for  IT 
managers  to  convince  senior 
management  (hat  an  upfrimt 
investment  in  personnel  and  i 


software  tixvls  to  track  hard¬ 
ware  and  sivftware  assets  can 
yield  both  immediate  and 
long-term  cost  sav  ings. 

According  to  Frances 
O'Brien,  an  analyst  at  Oanner 
I  Inc.,  cximpanics  that  sysicmat- 
I  ically  manage  the  life  cycles  of 
their  IT  assets  can  reduce  the 
ctwii  per  asset  by  as  much  as 
30*'v.  in  the  first  year  and  5% 
to  10^0  annually  over  the  next 
five  years. 

"The  people  at  the  top  h.ive 
to  buy  into  what  you’re  sug- 


TIPS 


Selling  Asset  Management  to  Executives 

■  Put  togslhtr  a  wtR-cone«h«d  bulincsi  pf»  that  includes  the  costs  of 
dedicating  personnel  and  soHware  to  IT  asset  management  as  well  as  the 
estimated  return  on  investment 

I  "Cite  case  studies  of  other  orQuiizatkMs- especially  competitors -that 

have  achieved  success  with  IT  asset  management  programs 

■  If  senior  management  isn't  wffing  to  fund  an  extensive  asset  manage- 
msnt  program,  start  with  a  smat  profael.  such  as  tracking  desktops  within 

a  particular  departmeni  and  present  the  results  and  savings  afterward. 


Service-Oriented 
Modeling  Initiative 

WILLTMOETIwMialnair- 
ance.  consumer  packaged 
goods,  retail,  government  and 
other  sectors. 

DESfONEO  TO  PROVIDE  bun¬ 
dled  services  to  help  enterprises 
identify  business  processes 
core  to  the  business  and  deter¬ 
mine  how  they  can  be  folded 
into  an  SOA 

WIU  BUILD  oft  the  success  of 
IBM'sServIce  Provider  Delivery 
EnWonment  a  2-year-old  tech¬ 
nology  framework  being  used  by 
22  of  the  largest  23  telecommu¬ 
nications  companies  to  stream¬ 
line  service  development. 

c-xpcnditurcs  to  understand 
why  the  infrastructure  .soft¬ 
ware  is  necessary  and  how  it 
aligns  with  their  corporate 
business  strategy."  he  said. 
"Gone  arc  the  days  when  an 
IT  organization’s  budget  wa-s 
based  on  an  assumed  fixed 
percentage  of  revenue.  Today. 

it's  a  zerwsum  game _ Every 

project  ncixls  business  justifi- 
caiion "  0  50587 


gcsiing  to  them,"  said  Mark 
Rosenbaum,  customer  service 
and  quality  assurance  division 
manager  for  the  IT  services 
group  at  the  Arizona  Supcri»>r 
Court,  a  division  of  the  Pima 
I  County  Government  in  Tuc¬ 
son.  "You  have  to  txinvincc 
them  of  the  need  to  change 
(he  culture"  and  adopt  sound 
IT  asset  management  prac¬ 
tices,  he  .s.ijd. 

Thai  also  mean.s  getting  se¬ 
nior  management  to  practice 
what  ytHi  preach  as  an  asset 
manager,  said  Rosenbaum.  He  • 

recommends  taking  steps  t(» 
ensure  (hat  senior  executives  | 

themselves  arc  in  full  compli-  i 

ance  with  sviftware  usage.  If 
they  aren't.  Rosenbaum  said, 

"you  need  to  find  a  tactful  way 
ii>  say,  'Dude,  you  have  to 
clean  up  your  act.'  ^ 

IT  asset  managers  also  must 
enforce  .st)ftw'arc  license  com¬ 
pliance  throughout  the  ranks, 
added  Rosenbaum.  Compli¬ 
ance  requirements  that  lack 
K'cth.  he  said,  lead  to  wasted 
time  and  effort.  O  50550 
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IBM  Preparing  to  Bring  Out 


Services 


le  for 


lockage  aims  to 
tie  business  goals 
to  IBM  technology 
investments 


■V  HCATHEA  HAVEMSTEIN 

IBM  wiu  sooD  begin  of¬ 
fering  bundled  services 
that  executives  said  wiU 
help  users  in  verticaJ  sec¬ 
tors  tike  banking  and  insur¬ 
ance  map  business  processes 
inio  service^riented  architec¬ 
tures  (SOA)  using  fBM  Web¬ 
Sphere  technologies.  Com- 
puttry/orid  has  learned 
In  the  coming  weeks,  IBM 
will  take  the  wraps  off  its  Ser¬ 
vice-Oriented  Modeling  initia¬ 
tive.  described  as  a  package  of 
services  that  can  provide  IT 
managers  with  an  analysis  of 
business  processes  to  identify 
those  that  are  core  to  the  en¬ 
terprise.  At  the  same  time,  the 


bundled  services  can  be  used 
to  create  methods  that  can  be 
folded  Into  an  SOA  by  using 
IBM’s  underlying  architecture 
and  applications,  said  Michael 
Liebew.  vice  president  of  Web 
services  for  IBM’s  Global  Ser¬ 
vices  unit. 

In  soitte  cases,  users  may 
opt  to  outsource  to  IBM  Glob¬ 
al  Services  those  processes 
that  are  not  core  or  unique  to 
the  business,  he  added.  “The 
areas  that  don’t  produce  any 
differentiation  are  the  areas 
that  arc  sucking  you  dry  rela¬ 
tive  to  costs,”  Ltebow  said. 
“What  you’re  trying  to  do  is 
balance  the  things  that  drive 
value  for  the  organization  and 
those  that  are  common  or  un¬ 
differentiated.” 

IBM  will  offer  bundled  ser¬ 
vices  tailored  for  several  sec¬ 
tors.  including  banking,  insur¬ 
ance.  consumer  goods,  retail 
and  government,  he  said. 


The  Universiry  of  North 
Carolina  at  Chapel  Hill's  Labo¬ 
ratory  for  Molecular  Modeling 
worked  with  IBM  to  develop 
a  reference  architecture.  That 
project  enabled  it  to  integrate 
12  applications  that  researchers 
use  for  drug  discovery  efforts 
into  an  SOA  using  IBM’s  Web¬ 
Sphere  platform  and  OB2  data¬ 
base  technology. 

As  a  result,  researchers  now 
have  faster  access  to  molecular 
data  in  the  databases.  In  addi¬ 
tion.  remote  scientists  can  ac¬ 
cess  the  system  via  the  Web¬ 
Sphere  portal,  according  to 
UNC  o^icials. 

They  have  provided  us 
with  an  architecture  to  con¬ 
nect  individual  programs  to¬ 
gether  and  develop  a  single 
workflow  where  input  and 
output  of  iirdividual  programs 
are  connected,"  said  Alex 
Tropsha,  professor  of  medici¬ 
nal  chemistry  and  director  of 


inguut 

WebSphere 


the  tab.  *^6  have  realized  that 
a  lot  of  things  that  we  do  will 
become  much  more  efficient 
if  we  organize  them  in  a  work¬ 
flow.  Help  from  IBM  in  this 
area  was  critical." 

IBM’s  new  initiative  comes 
on  the  heels  of  BEA  Systems 
Inc.'s  unveiling  last  week  of 
bundled  services  that  execu¬ 
tives  there  said  will  help  BEA 
WebLogic  xtsers  build  SOAs 
for  tackling  common  enter¬ 
prise  pain  points  like  cus¬ 
tomer  service. 

lirfrastructurc  companies 
like  IBM  and  BEA  increasingly 
are  finding  that  to  entice  users 
to  buy  their  products,  they 
must  provide  these  bundled 
services  to  link  their  technol¬ 
ogy  to  concrete  business  val¬ 
ue.  said  Eric  Austvold.  an  ana¬ 
lyst  at  AMR  Research  Inc.  in 
Boston. 

“It’s  easier  for  the  business 
professionals  that  approve  FT 


expenditures  to  understand 
why  the  infrastructure  soft¬ 
ware  is  necessary  aiKl  how  it 
aligns  with  their  corporate 
business  strategy.”  he  said. 
“Gone  are  the  days  when  an 
IT  organization's  budget  was 
based  on  an  assumed  fixed 
percentage  of  revenue.  Today. 

it’s  a  zero-sum  game _ Every 

prefect  needs  business  justili- 
catioa”  050587 


Top  Execs  Slow  to  See  Need  to  Manage  IT  Assets 


To  get  support,  start 
small  and  show 
results,  experts  sa>' 


■V  THOMAS  HOEEMAN 

Mounting  regulatory  require¬ 
ments  such  as  the  Sarhanes- 
Oxiey  Act  of 2002  have  helped 
convince  some  corporate  ex¬ 
ecutives  to  at  least  pay  atten¬ 
tion  to  the  need  for  IT  asset 
management  practices.  Never¬ 
theless.  sever^  attendees  at  a 
recent  IT  asset  management 
conference  said  that  attaining 
executive  buy-in  and  funding 
for  asset  management  pro¬ 
grams  remains  a  big  challenge. 

“We  have  not  even  attempt¬ 
ed  to  sell  senior  management 
as  of  yet  Senior  man^ement 
docs  not  even  have  a  good 
idea  os  to  ^^t  IT  asset  man¬ 
agement  means,"  said  Steve 
Whelan,  manager  of  asset 
management  at  PG&E  Corp. 
in  San  Francisco,  parent  of 


Pacific  Gas  and  Electric  Co. 

Before  R(^r  Gray  recently 
stepped  down  as  CIO  for  the 
utility,  said  Whelan,  “be  was 
beginning  to  understand"  the 
importance  of  IT  asset  man¬ 
agement  “But  to  my  knowl¬ 
edge.  he  had  not  carried  the 
message  any  higher’’  into 
PG&E’s  executive  ranks, 
Whelan  added. 

Whelan  surmised  that  the 
next  CIO  —  PG&E  is  still 
going  through  the  recruiting 
process  —  will  have  some 
background  in  IT  asset  man¬ 
agement  but  that  the  educa¬ 
tion  process  “will  begin  where 
Roger  left  off." 

That  maps  with  what  many 
other  IT  asset  managers  are 
encountering.  “Executive  buy- 
in  on  asset  management  is  a 
big  issue,"  said  Barbara  Rem- 
biesa.  president  of  Interna¬ 
tional  Association  of  Informa¬ 
tion  Technology  Asset  Man¬ 
agers  Inc.,  a  for-proflt  user  as¬ 


sociation  in  Akron.  Ohio,  that 
held  its  annua)  conference  for 
asset  managers  two  weeks  ago. 

To  help  raise  executive 
awareness  of  IT  asset  manage¬ 
ment  and  its  benefits,  the  user 
association  b  planning  to  con¬ 
duct  a  series  of  executive 
briefings  and  "webinars"  in 
200S,  Rembiesa  said. 

Attendees  at  the  conference 
said  it  can  be  difficult  for  IT 
managers  to  convince  senior 
management  that  an  upfront 
investment  in  personnel  and 


software  toob  to  track  hard¬ 
ware  and  software  assets  can 
yield  both  immediate  and 
long-term  cost  savings. 

According  to  Frances 
O’Brien,  an  analyst  at  Gartner 
Inc.,  companies  that  systemat¬ 
ically  manage  the  life  cycles  of 
their  IT  assets  can  reduce  the 
cost  per  asset  by  as  much  as 
30%  in  the  first  year  and  5% 
to  10%  annually  over  the  next 
five  years. 

“The  people  at  the  top  have 
to  buy  into  what  you’re  sug¬ 


gesting  to  them,"  said  Mark 
Rosenbaum,  customer  service 
and  quality  assurance  dhrision 
manager  for  the  IT  services 
group  at  the  Arizona  Superior 
Court,  a  division  of  the  Pima 
County  Government  in  Ttic- 
son.  “You  have  to  convince 
them  of  the  need  to  change 
the  culture"  and  adopt  sound 
IT  asset  management  prac¬ 
tices.  he  said. 

That  also  means  getting  se¬ 
nior  management  to  practice 
what  you  preach  as  an  asset 
manager,  said  Rosenbaum.  He 
recommends  taking  steps  to 
ensure  that  senior  executives 
themselves  are  in  full  compli¬ 
ance  with  software  usage.  If 
they  aren’t.  Rosenbaum  said, 
“you  need  to  find  a  tactful  way 
to  say.  ‘Dude,  you  have  to 
clean  up  your  act'  “ 

IT  asset  managers  also  must 
enforce  software  license  com- 
pliarxrc  throughout  the  ranks, 
added  Rosenbaum.  Compli¬ 
ance  requirements  that  lack 
teeth,  he  said,  lead  to  wasted 
time  and  effort  O  50550 


MLB.com  knows  the  power  of  SAS’  software... 


How  does  MLB.com”  give  fans 
the  ultimate  baseball  experience? 


Allan  H.  "Bud"  Selig,  .xiriniissionpi  of  Maior  League  Babeoaii 


ENTERPRISE  imtelugencs 

Millions  of  fans.  Thirty  teams.  One  passion.  And  24/7  access  to  it  all  through  MLB.com.  At  the  official  site 

of  Major  League  Baseball,  fans  can  experience  baseball  in  a  whole  new  way  -  from  live  ballgames  to  stats 

in  real  time,  from  history  to  fantasy,  across  the  league  or  by  connecting  to  individual  club  sites.  MLB.com  is 

ORGANIZATIONAL  MTELUGENCE 

the  richest,  deepest  source  of  original  baseball  news  and  highlights  on  the  Internet.  SAS  is  proud  to  provide 

CUSTOMER  INTELLIGENCE 

the  state-of-the-art  data  management,  predictive  analytics  and  marketing  automation  software  that's  helping 

Major  League  Baseball  enrich  the  interactive  experiwice  for  the  hundreds  of  millions  of  visitors  who  make 

INTELUGENCE  PtATFOnM 

MLB.com  such  a  big  hit.  To  find  out  more  about  SAS,  visit  our  Web  site  or  call  toll  free  1  866  887  1363. 

www.sas.com/mlb 

ThefbwertoKncnM,  | 
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E-voting 


president  of  the  Information 
Technology  Association  of 
America,  an  IT  industry  lob¬ 
bying  group  in  Arlington,  Va. 

Britt  Kauffman,  president 
and  CEO  of  Austin-based  Hart 
InterCKic  Inc.,  whose  e-Slatc 
touch-screen  systems  were 
used  in  nine  stales,  said  all  the 
reports  be  has  seen  point  to  a 
'‘relatively  smooth  Section 
Day^*  for  the  millions  of  voters 
who  cast  electronic  ballots. 

But  voter  monitoring 
groups  posted  accounts  of  in¬ 
cidents  that  they  said  show 
the  need  for  nationwide  tech¬ 
nical  and  procedural  e-voting 
standards. 

The  lack  of  standards  and 
the  inability  to  verify  vote  tab¬ 
ulations  has  created  a  poten¬ 
tially  flawed  election  process, 
some  critics  claimed. 

“We  need  some  way  of  as¬ 
sessing  what  has  happened  af¬ 
ter  the  fact."  said  Peter  Neu¬ 
mann.  principal  scientist  at 
SRI  Intcmadonai's  Computer 
Science  Laboratory  in  Menlo 
Park.  CaliL,  and  chairman  of 
the  National  Committee  for 
Voting  integrity  (NCVl).  a 
Washington-based  advocacy 
group.  "It  is  extremely  diflTi- 
cult  to  determine  what  hap¬ 
pened  becatise  there  is  an  ab¬ 
sence  of  accountability  and 
auditing  in  those  machines." 

Doug  Jones,  an  NCVl  mem¬ 
ber  and  an  associate  professor 
of  computer  science  at  the 
University  of  Iowa  in  Iowa 
City,  said  voting  "went  re¬ 
markably  smoothly,  consider¬ 
ing  that  we  had  record  turnout 
and  considering  that  it  was 
scTutiniaed  with  more  intensi¬ 
ty  then  I  can  remember.”  But 
he  said  little  is  known  about 
what  can  go  wrong  when  peo¬ 
ple  use  e-voring  systems. 

"All  we  can  do  is  compare 
the  number  of  ballots  with  the 
number  of  votes  recorded  and 
wonder.  'Why  did  people  come 
to  the  polling  place  to  cast  a 
blank  ballot?*  ”  Jones  said. 

The  use  of  e-voting  ma¬ 
chines  that  don’t  produce  a 
paper  record  of  votes  "is  the 
most  perplexing  thing  Pve 
ever  seen,"  said  Lillie  Coney, 


NCVl  coordinator  and  a  se¬ 
nior  policy  analyst  at  the  Elec¬ 
tronic  Privacy  Information 
Center  in  Washington.  Part  of 
the  problem  lies  with  state 
and  local  election  officials 
who  aren’t  sav\7  IT  buyers. 
Coney  contended.  "They're 
relying  strictly  on  what  their 
vendors  tell  them,"  she  said. 

“If  their  vendors  tell  them  it's 
secure,  h’s  secure. 

Avi  Rubin,  a  computer  sci¬ 
ence  professor  at  Johns  Hop¬ 
kins  University  in  Baltimore, 
volunteered  as  a  poll  worker  in 
Timonium.  Md..  last  Tuesday. 
An  NCVl  member  and  a  critic 
of  the  security  controls  built 
into  e-voting  software.  Rubin 
claimed  that  Oieboid  Inc. 
touch-screen  systems  at  the 
polling  place  were  left  unat¬ 
tended  overnight  on  the  eve  of 
the  election  and  were  config¬ 
ured  by  two  election  officials 
from  the  same  political  party. 

Rubin  said  there  currently  is 
no  way  to  know  if  someone 
has  tampered  with  e-voting 
ballots.  "If  you  drive  without  a 


seat  belt,  as  we  did  in  this 
election,  and  you  don’t  crash, 
that  doesn’t  mean  you  should 
conclude  that  it  is  safe  to  drive 
that  way.”  he  said. 

Michigan  plans  to  install  op¬ 
tical  scanning  equipment  in  ^ 
5300  of  its  precincts  by  2006. 
said  Ken  Silfven,  a  spokesman 
for  the  secretary  of  state’s  of¬ 
fice.  Voting  on  touch-screen 
systems  went  smoothly  at  23 
precincts  in  a  single  county 
last  week,  Silfven  said.  But  he 


added  that  optical  scanning  is 
being  adopted  statewide  to 
standardize  voting  equipment 
and  address  concerns  about 
the  need  for  a  paper  trail 
On  the  other  hand,  South 
Carolina  oflUcials  plan  to 
expand  the  use  of  iVotronic 
touch-screen  systems  from 
Election  Systems  &  Software 
Inc.  to  all  of  state's  46 
counties  beginning  next  year, 
said  Marci  Andino,  executive 
director  of  the  South  Carolina 


State  Election  Commission. 
About  5,000  of  the  machines, 
which  can  store  images  of  all 
electronic  ballots  in  case  re¬ 
counts  are  ordered,  were  used 
in  15  counties  last  week. 

Voters  in  a  handful  of 
precincts  had  to  switch  to  pa¬ 
per  ballots  at  the  start  of  vot¬ 
ing  because  of  mistakes  by 
poll  workers  that  were  quickly 
resolved,  Andino  said  "None 
of  the  problems  were  from 
machine  failures,”  she  said, 
adding  that  the  e-voting  sys¬ 
tems  performed  “exceptional¬ 
ly  well.”  0  50574 


ToddR.  Weiss artd Heather 
Havenstein  contributed  to 
this  story. 
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E-voting  Snafus  Umited  in  Scope,  Severity 


KPORTS  or  E-VOTMS  syston 
malfundim  btgan  MeUng  (nlo 
various  MdepenM 
otonmions  almost  as  soon  as 
lha  pok  openari  last  Tuasday. 

But  state  Qffiaatsctwractonzsd 
onst  of  dm  mUens  as  smat- 
scala  soaks. 

One  of  dw  moat  ssrioua  con. 
finnad  fTNctiaa  ms  the  case  ot 
4332  ndasioe  votes  at  a  piBiSnci 
in  CatlanI  Coudy.  N.C.  ^ 
BartMt  axeculm  drecka  of  d» 
Norik  Caiota  State  Boanj  of 
E)ecdons.aaidFttdaydialofll- 
ciils  awe  add  liyfno  to  PBirisve 
Ika  tmiols  koto  die  donga  unks 
of  loucksenan  sysWns  mute 
l)yUnltjilCoip.inDiiUn.Cald. 

A  total  of  7337  paople  awe 
(sled  as  heydig  yoled  at  die 
oncificl.  Iwt  the  meddim 
racaded  only  3,006  votes. 
BorikM  said  that  d  aiBsn't  deaf 
adiy  dm  miaaino  voiBB  wsno'l 
aaxwiM  tor  and  added  dot 
steleotllctabhavscaledonUnl- 
Lectto'ueeeiwypaBsUsie- 
saiica  to  lelitoH  then  Mtots* 


The  candidales  In  two  utae- 
soived  slelenda  races  were 
valtan  seveni  duusaiid  votes 
of  eedi  other  late  lest  week. 
Bartlett  said  I  am  loo  aooo  to 
spaodalealniitaikatstaleon- 
dato  would  do  If  the  mtssng 
votes  in  Carteret  Coudy  can't  be 
retrieved.  Vs  a  big  question 
iTwk.‘besald 

Sewrel  odw  states  reported 
tesmsewrepiobtonie.  Fbrenm- 
pte.  Georgia  used  Otebold  Accu- 
Itole-TS  touchscreen  syslaine 
In  el  of  ds  169  couilleB.  Only 
tan  ooieittos  leportad  praU^ 
acconing  to  Can  Hodgeon.  a 
spukanyoman  tor  die  eeemtary 
ot  stale's  ofllce.  She  said  that 
etedloo  offldato  In  Twigg  and 
Hancock  aMidas  had  eaity- 
morning  dnadOes  pregrammliig 
die  coned  balols  IMo  some  oi 
dieirsyslenis. 

Theencodeis  bidl  Mo  die 
baliir  syetetno 'VniB  an  encod¬ 
ed  tor  die  pitoienee.  and  diey 
hadnl  boon  updated.' Hodgm 
said.  She  added  that  Ike  two 


oounlles  issued  provisional  papef 
baMa  unli  die  system  prekleins 
awe  lesohed.  Ottwaise,  the 
stale  had  a 'yeiy  smooth' day. 
she  said  -  a  dwge  from  ele^ 
dons  In  2002  and  lest  year,  n 
affeh  some  Dtobdd  systems 
tocM  iqi.  regisleied  Ins' when 
people  voted 'no' on  balM 
questions  and  daplayed  the 
wiengiaoes. 

OMctolB  In  UaiisiBna  peporlad 
'nWilnwr  prabtoms.  said  Scott 
Modereavokeaniintorlkaaac- 
lelaiy  of  slala'a  Baettoos  once. 

Oitoans  Rpisk,  afdch  bicfados 
New  Otfeam.  uead  829  AVC 
Adrentage  touchscreen  desteas 
Item  Sequoia  Mtog  Syetems 
Inc.  and  parish  ondafe  ptooed 
about  30  machine  lalatod  service 
cals  on  Tueedey,  Medite  said. 

Taenly-tourdlhe  cafe  were 
tor  preklTO  dial  requind  Mnoc 
repaire,  wlife  die  other  sis  led  to 
machines  betog  nplicad  6ul 
diiw  of  Ike  leplacad  systems 
ware  toadvertandy  turned  off  by 
pol  Mxlws  and  couldn’t  be 


leetartad,  ktadere  said.  The  dker 
three  had  tedintoat  pmblems 
dm  awe  “bed  enough  to  pul 
[them]  ofhhe.’ he  said,  bill  he 
added  dial  parish  ofndals  were 
able  to  relitom  el  die  bakils  casi 
on  dnss  systems. 

toOtita.diemwaranoeppar' 
ere  praklems  In  the  seven  of  die 
slalt's  88  couides  dial  use 
louchsaeen  systems,  accodtog 
to  James  Lee.  a  apokesnwi  tor 
IhesadBtoiyelelals'sofltoe. 

OflicidB  in  Ftoiifisytyenii. 
Hknmtng.  Kentucky  and  tone 
akosaidlhatdioyhidn'lre- 
cahwl  reports  ol  prehlamo  atdi 
touchecrean  mislems  or  odw 
ereomotod  volkig  machines. 
Hnwiw.  Dafes  County  In  tom 
opted  not  ID  iM  Is  mndno  sys- 
lame  out  ol  fear  of  pmanllal  mal- 
kmctlons.  said  Anthony  Cairal, 
voter  outreach  coonhatar  In  the 
saentaty  ot  stale's  once. 

-Matr/fenkfeiMMIW 
ffmnsfeh  Unto  Anaocrann 
MarcL&ngHOKliMDn 
aidTakIR.  Hhte 


ROBUST  OBJECTS 
AND  ROBOST  SQl 


A  FREE  OFFER  TO  lOOK 
AT  A  RETTER  DAIARASE 

For  your  next  generation  of  applications,  a  development  environment  that  dramatically 

move  to  the  next  generation  of  database  reduces  the  time  to  build  and  modify  Web 

technology.  We’re  offering  a  free,  fully  functional,  applications. 

non-expiring  copy  of  Cache,  the  post-relational  The  reliability  of  Cache  has  been  proven  in 

database  that  uniquely  combines  advanced  “life-or-dcath”  applications  at  thousands  of  the 

objeep  and  high  performance  SQL.  world’s  largest  hospitals.  With  its  high  performance 

With  Cache,  no  mapping  is  required  between  and  low  maintenance.  Cache  delivers  your  vision 
object  and  relational  views  of  data.  Which  of  a  better  DBMS. 

means  huge  savings  in  both  development  and  We  are  InterSystems  -  a  specialist  in  data  manage- 

processing  time.  ment  for  over  twenty-six  years,  providing  24x7 

Applications  built  on  Cache  are  massively  support  to  4  million  users  in  88  countries.  Cache  is 

sc^able  and  lightning-fast.  Plus,  they  require  available  for  Wmdows,  OpcnVMS,  Unux  and  major 

minimal  or  no  database  administration.  UNIX  platforms,  and  it  is  deployed  on  systems  rang- 

More  than  just  a  database  system.  Cache  has  ing  from  two  to  over  10,000  simultaneous  users. 

InterSystems  ^ 

C:  CACHE 

Make  Applications  Faster 


iTy  a  better  database.  Fw  flee. 


The  server  platform  of  choice 
just  got  better. 

Introducing  the  Inter  Xeon'  processor  with 
support  for  32-  and  64-bit  applications. 

It  means  the  most  widely  used  server  platform 
in  the  world  can  now  work  even  harder. 

And  new  platform  technologies  enable  increased  power  savings, 
flexibility  and  performance.  For  more 
.  information  —  and  more  choice  —  visit  intel.com/business. 


Improved  Flexible  memory, 

power-eaving  I/O  and  storage 

options  configurations 


iny. 
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Some  Suppliers  Meet 
Metro’s  RFID  Deadline 

OOSSCLOORF,  GERMANY 

Twenty  scpnitRS  have  begun 
shipping  products  on  pallets  that 
arc  tagged  with  radio  frequency 
tdenciflcation  chips  to  more  than  270 
stores  operated  by  Metro  AG.  the  Ger¬ 
man  retailer  said  last  week. 

Metro,  the  world's  fifth-largcst  re¬ 
tailer.  initially  planned  to  have  more 
than  100  suppliers  using  RFID  tags  by 
No\;  1  but  fell  short  of  that  goal.  “Not 
cs  cryone  is  ready  yet.  but  our  plan  is 
deflniicly  to  have  all  suppliers  convert 
quickly  to  RFID  technology  in  the  ar¬ 
eas  of  shipping  and  warchnusing.”  said 
Metro  spokesman  liirgcn  Homcycr. 

Suppliers  such  as  Colgate-Palmolive 
GmbH.  Kraft  Foods  Deutschland 
GmbH.  Nestle  Deutschland  GmbH  and 
Printer  &  Gamble  GmbH  met  the  No¬ 
vember  deadline. 

Beginning  early  ne.xi 
year.  Metro  will  require 
suppliers  to  afTi.s  RFID 
tags  to  other  types  of 
transport  packaging,  such 
as  cases  and  crates.  Ho- 
meyer  said.  Eventually. 


An  International 
IT  News  Digest 


the  tagging  will  be  e.xtcndcd  to  individ¬ 
ual  products,  he  added. 

Metro,  which  operates  more  than 
2  JOO  stores,  has  tested  RFID  tags  for 
more  than  a  year  at  its  Extra  Future 
Store  in  Rheinberg.  Germany. 

■  JOHN  BLAU.  106  NEWS  SERVICE 


Doctors  Call  for  Input 
On  U.K.  Health  Project 

LONDON 

The  BRITISH  MEDICAL  ASSOCIATION 
(BMA)  last  week  urged  leaders  of 
the  U.K.  National  Health  Ser¬ 
vice's  IT  infrastructure  modernuation 
project  to  consult  more  with  doctors 
and  other  health  care  workers  who  will 
use  the  new  technology 
i  “So  far,  the  level  of  engagement  and 
consultation  with  the  medical  profes¬ 
sion  ha.s  been  wholly  inadequaie.”  Dr. 
John  Powell,  chairman  of  the  BMA’s  IT 
committee,  said  in  a 
speech  here.  “There  is  no 
point  investing  billions 
of  pounds  in  systems 
(hat  do  not  have  the  con¬ 
fidence  of  users." 

An  NHS  spokeswoman 
said  the  IT  project  team 


Aver jo«  number  of  IT 
services  workers  lhal  India's 
Wiprij  Ltd  adds  every  month, 


consults  with  thousands  of  doctors  and 
nurses  daily,  but  she  conceded  that 
there's  room  for  improvement  in  the 
process.  The  massive  10-year  project  in¬ 
cludes  development  of  a  database  that 
will  contain  electronic  health  records 
for  about  50  million  patients  in  England 
and  be  accessible  by  30.000  doctors. 

■  LAURA  ROHDE.  IDG  NEWS  SERVICE 


Indian  Firm  Acquires 
Tyco’s  Undersea  Fiber 

BANGALORE.  INDIA 

VIDF.SH  SANCHAR  NIGAM  LTD.,  a 

Mumbai.  India-based  network 
services  provider,  last  week  an¬ 
nounced  that  it's  acquiring  the  Tyco 
Global  Netw’ork.  the  world's  largest 
undersea  fiber-optic  network,  from 
Tyco  International  Ltd.  for  $130  million. 

TTie  deal,  which  requires  regulatory 
approval,  would  give  VNSL  a  network 
th.it  spans  37,20B  miles  and  three  conti¬ 
nents.  Analysts  said  VNSL.  a  sister 
company  of  Mumbai-based  Tata  Con¬ 
sultancy  Services  Ltd.,  is  trying  to 
move  beyond  its  customer  ba.se  in 
India  and  offer  data  bandwidth  on  a 
global  basis  to  major  corporations. 

Pembroke.  Bermuda-based  Tyco  put 
the  network  up  for  sale  as  pan  of  a  re¬ 
structuring.  O  50522 
■  JOHN  RIBEIRO.  ID6  NEWS  SERVICE 

Complied  by  Afirch  Betts. 


Briefly  Noted 

India's  governmeni  ia  making  H 
easier  to  registar  tntanwt  addrssses 
with  the  “Jn*  top-ievd  country  do¬ 
main,  in  hopte  of  boosting  the  coun¬ 
try's  Mentfty  on  the  hitsmet  Dayan- 
idN  Maran,  mMeter  for  Monntfion 
technoloflyandcoiwnunicatons, 
urgod  India’s  WBbmaslers  to  use  the 
Jn  domain  as  a  gesture  of  patriotism. 
■  JOHN  RIBEIRO. 

IDG  NEWSSERVICE 
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Open-Source  Path  Not  an 
Option  for  Oracle,  Exec  Says 


ev  JOHN  RIBEIRO 

INDIA 

Orqcte  Corp.  has  no  plans  to 
ovate  an  open-sounv  wrsion 
of  ds  dufobosc  and  file  systems 
leehniAogies,  despite  recent 
movi*s  in  rhar  dtrverion  by  com- 
pefifi>rs  Robert  Shimp.  Oracle's 
vice  president  of  technology 
marketing,  discussed  these  and 
other  issues  with  the  lOG  News 
-Service  losr  week  at  f)racle 
OpenWorld .Mumhai  in  India. 

Computer  Associates  started  dis- 
trtbuling  the  Ingres  database  un¬ 
der  an  open-source  license,  and 
Sybase  offers  its  database  free 
to  Linux  users.  Does  Oracle  need 
to  do  something  similar  for  the 
open-source  user?  Wo  have  no 
plans  to  cither  opcn-s«»urcc  or 
make  our  producis  avaiLiblc 
for  fn*o- 


Does  Oracle  still  believe  that  the 
typical  open-source  user  is  price- 
sensitive  and  therefore  can't 
afford  Oracle  products?  Wc  have 
oxtremcly  competitive  pricing 
I  on  our  entry-level  products. 

I  like  the  Standard  Edition  One 
I  pr(»duci.  that  arc  at  a  list  price 
of  S14‘>  per  user.  This  price  is 
highly  competitive  with  open- 
wurcc  databases,  which 
charge  a  great  deal  more  for 
their  support  services. 

Yet  haven't  companies 
like  MySQL  been  cutting 
into  your  market  share 
at  the  low  end  with  open- 
source  databases?  My¬ 
SQL  dtJcs  not  claim  the 
same  database  market 
as  Oracle.  Their  prod¬ 
uct  is  used  typically 
in  the  middle  tier  for 


I  storing  data  such  as  caiak^s 
or  Web  sites  and  things  like 
that.  In  fact,  open-source 
database  produns  are  a  got^d 
thing  for  Oracle,  because  they 
give  a  lot  of  users  their  first 
exposure  to  relational  data¬ 
bases  and  give  them  an  oppor¬ 
tunity  to  learn  about  the  tech¬ 
nologies. 

Why  do  you  think  companies  like 
CA  are  open-sourcing  databases? 
There  arc  more  than  two  j 
dozen  different  database  com-  I 
panio.s  out  there-  Some  arc  I 
open-sourcing  very  old  tech¬ 
nologies  in  an  effort  to  rejuve-  I 
naic  their  business  and  I 
grow  shrinking  market 
share.  I  don't  sec  that 
as  very  viable. 

Now  that  Red  Hat  has 
released  Slstina  Global 
File  System  under  the 
OffU  Oerreral  Ihiblic  Li¬ 
cense.  do  you  need  to 
continue  updating  your 


cluster  file  system?  We  bclie\'c 
that  by  providing  the  com¬ 
plete  technology  infrastruc¬ 
ture.  including  the  cluster  file 
system,  it  is  easier  to  install 
and  maintain  our  products. 
The  cluster  file  system  is 
an  important  component  of 
our  clustering  icchnotc^y.  In 
order  to  make  it  c.*isicr  and 
simpler  for  our  customers 
to  in-stall  their  products  and 
maintain  them,  wc  want  to 
provide  a  complete  technol¬ 
ogy  stack. 

What  are  the  challenges  in  the 
collaboration  tool  suite  business, 
and  how  do  you  plan  to  deliver  on 
that  wHh  Collaboration  Suite? 
The  big  challenge  for  most 
customers  is  that  they  have  a 
tremendous  amount  of  un¬ 
structured  data  or  content 
that  needs  to  be  managed  cen¬ 
trally  in  a  single  repositor>-. 
where  it  can  be  effectively 
cross-tabulated  with  the  trans¬ 
actional  data  and  decision 


suppon  data.  So  we  are  very 
focused  on  bringing  all  that 
content  management  and  real¬ 
time  collaboration  directly 
into  the  database,  where  it  can 
be  shared  among  any  users 
and  properly  managed  and 
tracked. 

Do  you  think  that  small  and  mid¬ 
size  businesses  now  require 
products  specific  to  their  needs, 
or  will  Oracle  continue  to  serve 
them  simply  with  lower  licens¬ 
ing  costs  end  quicker  configur¬ 
ations  and  installations?  This 
marketplace  is  no  different 
than  the  larger  enterprise 
market.  The  challenge  for 
them  is  to  be  able  to  do  this 
at  a  cost-effective  price,  with 
a  lower  total  cost  of  owner¬ 
ship.  We  are  focused  on  inno¬ 
vating  producis  to  make  them 
easier  to  install  and  maintain. 
C 50533 


Rtbeiro  is  a  reporter  for  the 
IDC  News  Service. 
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Some  SiH^iars  Moat 
Meta’s  MD  Deadline 

OOMCLOOUP.  OINMANV 

WENTY  SUPPLIEES  have  begun 
shipping  products  oo  pallets  that 
are  tagged  with  radio  frequency 
identification  chips  to  more  than  270 
stores  operated  by  Metro  AG.  the  Ger¬ 
man  retailer  said  last  week. 

Metro,  the  woiid’s  fliUi-largest  re¬ 
tailer.  initially  planned  to  have  more 
than  100  suppliers  using  RFID  tags  by 
Nov.  1  but  fell  short  of  that  goal  ‘1'lot 
everyone  is  ready  yet,  but  our  plan  is 
definitely  to  have  all  suppliers  convert 
quickly  to  RFID  technology  in  the  ar¬ 
eas  of  shipping  and  warehousing."  said 
Metro  spokesman  |Qrgcn  Homeyer 
Suppliers  such  as  Colgate-Palmolive 
GmbH,  Kraft  Foods  Deutschland 
GmbH.  Nestle  Deutschland  GmbH  and 
Procter  &  Gamble  GmbH  met  the  No¬ 
vember  deadline. 

Beginning  early  next 
year.  Metro  will  require 
suppliers  to  afftx  RFID 
tags  to  other  types  of 
transport  pack^ing,  such 
as  cases  and  crates.  Ho- 
meyer  said.  Eventually. 


the  tagging  will  be  extended  to  individ¬ 
ual  products,  he  added. 

Metro,  which  operates  more  than 
2J00  stores,  has  tested  RFID  tags  for 
more  than  a  year  at  its  Extra  Future 
Store  in  Rheinberg.  Germany. 

■  JOHN  BUU.  106  NEWS  SERVICE 


Doctors  Call  for  Input 
OnU.K.HealtiiPraiect 

LONDON 

HE  BRITISH  MEDICAt  ASSOCIATION 
(BMA)  last  week  urged  leaders  of 
the  UJC.  National  Health  Ser¬ 
vice's  IT  inftastructure  modernization 
pro)ect  to  consult  more  with  doctors 
and  other  health  care  workers  who  will 
use  the  new  technology. 

"So  far.  the  level  of  engagement  and 
consultation  with  the  medical  profes¬ 
sion  has  been  wholly  inadequate,"  Dr. 
John  PoweU.  chairman  of  the  BMA's  IT 
committee,  said  in  a 
speech  here.  "There  is  no 
point  investing  billions 
of  pounds  in  systems 
that  do  not  have  the  con- 
fuience  of  users." 

An  NHS  spokeswoman 
said  the  IT  project  team 


consults  with  thousands  of  doctors  and 
nurses  daily,  but  she  conceded  that 
there’s  room  for  improvement  in  the 
process.  The  massive  10-year  project  in¬ 
cludes  development  of  a  database  that 
will  contain  electronic  health  records 
for  about  50  million  patients  in  England 
and  be  accessible  by  50XK)0  doctors. 

■  UURA  ROHDE.  ID6  NEWS  SERVICE 


Indian  Firm  Acquires 
Tyco’s  Undersea  Rber 

■ANOALORE.  INDIA 

IDESH  SANCHAR  NIGAM  LTD.,  a 
Mumbai.  India-based  network 
services  provider,  last  week  an¬ 
nounced  that  it’s  acquiring  the  Tyco 
Global  Network,  the  world’s  largnt 
undersea  Hber-opcic  network,  ftom 
Tyco  International  Ltd.  for  S130  million. 

The  deaL  which  requires  regulatory 
approval  would  give  VNSL  a  network 
that  ^lans  37.208  miles  and  three  conti¬ 
nents.  Analysts  said  VNSL.  a  sister 
company  of  Mumbai-based  Tata  Con¬ 
sultancy  Services  Ltd.,  is  trying  to 
move  beyond  its  customer  base  in 
India  and  offer  data  bandvndtfa  on  a 
global  basts  to  major  corporations. 

Pembroke,  Bermuda-based  lyco  put 
the  network  up  for  sale  as  part  of  a  re¬ 
structuring.  O  50522 
■  JOHN  RIBEIRO.  106  NEWS  SERVICE 
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Open-Source  Path  Notan 
Option  for  Oracle,  Exec  Says 


•V  JOHN  NiOElira 

BANeAtOAE.  INDIA 

Oracle  Corp,  has  no  plans  to 
create  an  open-source  version 
of  its  database  and  fUe  systems 
technologies,  delete  recent 
moves  in  that  direction  by  com¬ 
petitors.  RDborl  ShifTip,  Oracle^ 
vice  president  of  technology 
marketing,  discussed  these  and 
other  issues  with  the  IDG  News 
Service  last  week  at  Oracle 
Open  Vl^sHd  Mumbai  in  India. 


OoM  OraelB  s(M  boKm  ttwl  the 
typical  opan-sourca  iiBtr  is  price* 
sansitiva  and  tharafora  can't 
afford  Orada  products?  We  have 
extremely  competitive  pricing 
on  our  entry-level  products, 
like  the  Standard  Edition  One 
product,  that  are  at  a  list  price 
of  $149  per  user.  This  price  is 
highly  competitive  with  open- 
source  databases,  which 
charge  a  great  deal  more  for 
their  support  services. 


storing  data  such  as  catalogs 
or  Web  sites  and  things  like 
that  In  fact,  opcn-source 
database  products  are  a  good 
thing  for  Oracle,  because  they 
give  a  lot  of  users  their  first 
exposure  to  relational  data¬ 
bases  and  give  them  an  oppor¬ 
tunity  to  learn  about  the  tech¬ 
nologies. 

Why  do  you  think  companies  Hka 
CA  are  open-soorcing  databases? 
There  are  more  than  two 
dozen  different  database  com¬ 
panies  out  there.  Some  are 
open-sourcing  very  old  tech¬ 
nologies  in  an  effort  to  rejuve- 


Computar  Associates  started  dis* 
tribuHng  tha  Ingres  dstahsse  un* 
dsr  an  opsn-aource  Icenss.  and 
Sybase  offers  tts  database  frse 
to  Limn  users.  Doss  Orade  need 
to  do  something  sknftar  for  the 
open-eouree  user?  We  have  oo 
ptans  to  either  open-sourcc  or 
make  our  products  available 
for  free. 


Vri  haven't  companies 
Mis  yySQL  been  ctrtting 
kite  your  msrkat  shars 
at  the  low  snd  wftb  opan* 
source  databases?  My¬ 
SQL  does  not  claim  the 
same  database  market 
as  Oracle.  Their  prod¬ 
uct  is  used  typicdly 
in  the  middle  tier  for 


nate  their  business  and 
grow  shrinking  market 
share.  I  don't  see  that 
as  very  viable. 


Now  tbd  Red  Hat  has 
rdaesMlSistinaeiobal 
Rie  System  undar  the 
eNUeenaralPuliNcU* 
eanBa,doyeunesdto 
eondnus  updating  your 


duster  file  system?  We  believe 
that  by  providing  the  com¬ 
plete  technology  Infrastruc¬ 
ture.  including  cluster  file 
system,  it  is  easier  to  install 
and  maintain  our  products. 
The  cluster  file  system  is 
an  important  component  of 
our  clustering  technology.  In 
order  to  make  it  easier  and 
simpler  for  our  customers 
to  install  their  products  and 
maintain  them,  we  want  to 
provide  a  complete  technol¬ 
ogy  stack. 

What  ars  tha  chaHanges  in  tha 
cdlaborsUon  tool  suite  busirwss, 
and  how  do  you  plan  to  dabvar  on 
that  with  CoMoration  Suite? 
The  big  challenge  for  most 
customers  is  that  they  have  a 
tremendous  amount  of  un¬ 
structured  data  or  content 
that  needs  to  be  managed  cen¬ 
trally  in  a  single  repository, 
where  it  can  be  effectively 
cross-tabulated  with  the  trans¬ 
actional  data  and  decision 


support  data.  So  we  are  very 
focused  on  bringing  all  that 
content  management  and  real¬ 
time  collaboration  directly 
into  the  database,  where  it  can 
be  shared  among  any  users 
and  properly  managed  and 
trad^. 

Do  you  think  that  small  and  mid- 
sizt  businassas  now  rsquirt 
products  apocffic  to  tfwir  iweds. 
or  win  Ora^  contbsM  to  sorvo 
thorn  simply  sdth  lewor  lieons- 
Ing  costs  and  quicker  configur- 
atioos  and  instellatkHM?  This 
marketplace  is  no  different 
than  the  larger  enterprise 
market.  The  challenge  for 
them  is  to  be  able  to  do  this 
at  a  cost-effective  price,  with 
a  lower  total  cost  of  owner¬ 
ship.  We  are  focused  on  inno¬ 
vating  products  to  make  them 
easier  to  install  and  maintain. 
050533 


Ribeiro  is  a  reporter  for  the 
IDG  News  Settee. 
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High-performance  networking 

TAKES  TO  THE  AIR. 


FOUNDRY 

NETWORKS 


Enterprise  Rent-A-Car  wanted  to  reduce  operational  costs. 
Xerox  found  the  key  to  success  by  moving  2.4  million  vital 
documents  onto  their  intranet  every  month. 
There’s  a  new  way  to  look  at  it. 
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Mercury  Exec  Says  Measuring 
Performance  of  Outsourced 
Applications  Is  an  IT  Challenge 


Murphy  weighs  in  on 
technology  complexity 
and  regs  compliance 

8V  THQMAS  HOFFMAN 

Regulatory  compliastce,  outsourcing  and 
business  techrudogy  (^timization  are  all 
topH>f~mind  issues  for  IT  managers 
these  days.  So  it's  /lordiy  su/prisirtg  that 
Mercury  Interactive  Corp,  a  Mounfam 
View.  Calif. -based  provider  of  software 
for  all  three  segments,  is  expecting  an 
attendance  boost  of  close  to  S0%  at  its 
Mercury  World  2004  user  cortference 
this  week  in  Orlando. 

Computerworld  (asf  week  cougkr  up 
with  Murphy,  Mercury's  vice  presi¬ 

dent  of  corporate  development,  to  discuss 
the  key  issues /iiced  its  customers. 

Whatarathatopissuwyourcus’ 
tornars  are  wTMtlng  twith  that 
days?  Tliere  are  three  things 
happening  ^t  are  driving  the 
agendas.  One  is  complexity, 
meaning  the  complexity  of  run> 
nii^  IT  operationally  and  the 
complexity  of  all  of  the  tech¬ 
nology  and  ^jplications  and 
changes  happening  in  an  IT  en¬ 
vironment.  One  of  the  thii^ 
we  hear  a  lot  of  is  this  notion  of 
complexity. 

The  second  one  is  outsourcing. 

We're  realty  seeing  a  lot  of  companies 
move  to  the  model  of  having  a  whole 
chain  of  different  third  parties  helping 
to  manage  their  operations. 

The  third  one  is  this  whole  area  of 
compliance,  from  a  vertical  industry 
level  Industries  such  as  health  care  are 
being  drit^  by  changes  in  business 
compliance  that’s  required. 

How  do  Memiryintwacthre's  tools  and  wf- 
vicas  halp  customore  addmaa  these  Isauts? 

We  bad  TTie  Economist's  intelligence 
unit  do  a  very  broad  survey  of 750  IT 
execs  in  14  countries,  a  very  non-U.S. 
survey.  We  also  had  permission  to 
work  with  IDC  on  a  survey  regarding 
the  business  value  of  IT.  [The  results 
of  both  studies  are  being  released 
week  at  Mercury  World.] 

Hk  IDC  report  focuses  on  three 
things.  In  the  complexity  arena,  there 
is  a  set  of  issues  that  ne^  to  be  ad¬ 
dressed  in  IT  shops  to  man^  the 


complexity  of  those  applications  bet¬ 
ter.  Many  applications  have  poor  per¬ 
formance.  In  many  instances,  the  ap¬ 
plications  may  have  been  deployed, 
but  as  the  business  evolves,  the  com¬ 
plexity  of  upgrading  and  advancing 
those  applications  falls  behind. 

The  second  area  IDC  focused  on 
was  that  you  often  don’t  find  very 
clear  performance  measurement  of 
the  outsourced  services  being  provid¬ 
ed.  How  you  make  decisions  about 
how  things  need  to  change  from  a 
change  management  standpoint  tends 
to  be  problematic. 

In  our  core  product  set  we  have  cus¬ 
tomers  who  have  outsourced  their  ap¬ 
plication  development  or  production 
environments,  and  they  might  be  using 
our  Quality  Center  or  Performance 
Center  [products]  to  help  manage 
these  things. 

In  IT  governance  [the  third 
IDC  report  topic],  managing 
change  processes  from  a  work- 
flow  and  procedural  stand¬ 
point  is  addressed  by  our  IT 
Governance  Center  solution. 

We  announced  with  [the  open¬ 
ing  of  a  Center  of  Excellence 
at  Wipro  Ltd's  IT  services  fa¬ 
cility  in  India)  a  capability 
around  application  testing 
that  leverages  the  IT  Governance 
workflow  dashboard. 

What  alsa  dM  these  stucKas  reveal?  The 
IDC  survey  pointed  out  that  over 
44%  of  lai^r  companies  in  North 
Amerka  are  having  to  de%«lop  busi¬ 
ness  processes  and  applications  to  ad¬ 
dress  compliance  requirements.  While 
it's  North  American  data,  there’s  a 
trend  in  a  lot  of  geographies  now 
where  the  role  of  IT  compliance  b 
taking  on  a  very  significant  part  of 
those  responsibiUties. 

Four  out  of  five  respondents  in  the 
Econorrust  stirvey  said  the  importance 
of  process  improvements  and  manag¬ 
ing  from  an  IT  perspective  b  all  tied  to 
the  compliance  obligations  they're 
having  to  meet  O  50520  j 
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Enterprise  Rent-A-Car  wanted  to  make  their  document 
process  more  efficient.  So  the)’  consulted  with  a  team  of 
document  experts  from  Xerox.  Working  together,  they 
analyzed  the  document  process  across  thousands  of 
locations  worldwide,  and  initiated  systemic  improvements 
in  key  aspects  of  filing  and  retrieving  mission  critical 
documents. 

By  implementing  a  Xerox  Global  Services  Imaging 
and  Retrieval  solution,  2.4  million  critical  documents 
a  month  are  scanned  and  stored  into  an  electronic 
repository,  making  them  instantly  available  over  the 
Enterprise  Intranet  whenever  needed. 

The  result:  Documents  are  managed  in  a  timely 
manner.  Redundancy  and  errors  are  cut  way  back,  and 
security  is  matdmized. 

To  find  out  how  Xerox  can  bring  this  kind  of  lime 
and  cost-saving  expertise  to  your  business,  simply  call 
your  Xerox  representative  or  visit  our  website  today. 

««ra>.coai/lasm 
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Regaining  Relevancy 


ONE  WEEK  FROM  TODAY,  Sun  Micro¬ 
systems  will  launch  Solaris  10  amid 
pomp,  glitz  and  circumstance  at  The 
Tech  Museum  of  Innovation  in  San 
Jose.  As  the  music  pounds  and  the 
lights  flash,  the  Sun  PR  machine  will  likely  hail  the 
launch  as  a  turning  point  in  the  evolution  of  operat 

ing  systems.  Sun  users 
.inJ  business  partners  will 
likely  see  it  lor  what  it 


really  is;  A  desperate  at¬ 
tempt  on  Sun’s  part  to 
retain  its  relevancy. 

Or  to  regain  its  relevan¬ 
cy.  some  would  argue. 

The  inexplicable  paralysis 
that  for  so  long  kept  Sun 
from  offering  a  sensible 
response  to  the  clamor 
for  low-priced  commodi¬ 
ty  systems  has  forced  it 
into  a  game  of  catch-up  that  may 
wvU  be  unw’innable.  Large  enterpris¬ 
es  like  the  Chicago  Mercantile  Ex¬ 
change  have  already  developed 
strategies  to  wean  themselves  off  of 
Solaris  on  Sparc  in  favor  of  Linux  on 
Intel  (QuickLink  49769).  When  the 
Merc  embarked  on  that  course  more 
than  a  year  ago.  it  really  had  no 
choice.  "We  didn’t  have  a  ^od  an¬ 
swer  for  them."  admitted  Glenn 
Weinberg,  vice  president  of  Sun's 
operating  platforms  group. 

Sun  has  since  ntshed  to  deliver 
systems  ba.sed  on  AMD's  Optcron 
processor  and  Intel's  Xeon.  And  So- 
bris  lO  advances  the  cause,  since  it 
will  run  on  the  Optcron  in  full  64-bii 
mode.  But  the  odds  against  Solaris  lO 
becoming  the  savior  that  Sun  so  in¬ 
tensely  w’ants  and  needs  are  high. 

The  Sun  executives  on  stage  next 
week  will  almost  certainly  boast 
about  the  near  universality  of  ISV 
suppun  for  Solaris  lO.  But  what  you 
won't  hear  arc  some  of  the  stories 
behind  that  “support." 

The  fact  is.  many  ISVs  arc  worried. 
Sure,  they’ll  release  software  that 
supports  Sobris  lO,  but  their  confi¬ 
dence  in  Sun  is  clearly  shaken. 


TcamC^cst.  a  vendor 
of  IT  performance  man¬ 
agement  and  capacity 
planning  software,  has 
60%  of  its  installed  base 
running  Sobris.  and  Sun 
is  a  reseller  of  its  prod¬ 
ucts.  But  Mike  Ellis. 
TcamQuest's  executive 
vice  president  of  world¬ 
wide  sales  and  market¬ 
ing.  appears  almost  dis¬ 
traught  when  the  subject 
of  Sun  arises.  "Sun  is  in  a 
bit  of  a  mess  internally,"  Ellis  said 
during  a  discussion  I  had  with  him 
last  month.  He  said  TeamQuest  is 
doing  its  best  to  shift  resources  to 
partner  with  IBM  and  to  make  its 
software  a  complement  to  Tivoli 
across  all  IBM  product  lines. 

And  Ellis  hasn’t  seen  his  cus¬ 
tomers  plan  moves  to  Sobris  10.  be¬ 
cause  it’s  too  complicated.  “Trying  to 
reinvent  z/OS  doesn’t  make  sense  to 


me."  he  said.  But  that’s  what  he 
thinks  Sun’s  upgrade  attempts  to  do. 
‘i  don’t  think  anyone  is  looking  for 
more  complexity." 

SAS  Institute  is  another  Sun  ISV 
that  will  support  Solaris  10.  The 
companies  are  longstanding  part¬ 
ners.  and  Solaris  has  historically 
been  the  top  Unix  platform  for  SAS 
software.  But  again,  when  you  ILsten 
to  what  the  senior  executives  arc 
really  .saying,  a  different  picture 
emerges.  Last  month.  1  spoke  with 
SAS  CEO  James  Goodnight,  who  left 
me  with  the  impression  that  he  no 
longer  considers  Sun  to  be  the 
strategic  partner  it  once  was. 

“1  haven’t  even  kept  track  of  the 
Sparc  chip  lately."  Goodnight  said. 
“The  Sun  has  sort  of  faded  out."  He 
cited  high-level  infighting  at  Sun 
over  the  issue  of  Solaris  on  Intel  and 
suggested  that  the  damage  may  be  ir¬ 
reversible  despite  Sun’s  change  of 
heart.  “I  sort  of  think  it  might  be  too 
late."  he  said. 

For  the  sake  of  user  choice,  we  can 
all  hope  Goodnight  is  wrong.  Hey. 
more  miraculous  comebacks  have 
happened.  And  Sun  i.sn't  even 
cursed.  O  50524 


Looking  for 
Creative  IT 
Leaders 

CREATIVITY  leadership 
is  the  new  career  dif¬ 
ferentiator  for  emerg¬ 
ing  IT  leaders.  Longtime  deni¬ 
zens  of  the  technology  demesne  are  no 
strangers  to  the  terms  leadership  and 
creativity.  It’s  rare,  however,  to  see  the 
words  used  together.  This  will  change, 
according  to  research  coming  out  of 
the  IT  Leadership  Academy  in  Jack¬ 
sonville.  Fb..  as  we  move  deeper  into 
an  accelerated,  creatively  destructive, 
innovation-based  economy. 

There  are  libraries  full  of  books  on 
leadership,  but  people  in  IT  tend  not  to 
be  featured  in  those  texts.  Best-seller 
wannabes  target  IT  folk  as  readers  of 
leadership  books,  not  as  cxempUrs 
that  appear  in  them. 

This  must  change. 

Business  school  cur¬ 
ricula  focusing  on 
leadership  don’t  rely 
heavily  on  case  stud¬ 
ies  of  IT  practition¬ 
ers;  more  frequently 
than  not.  the  IT  case 
is  used  to  demon¬ 
strate  what  nor  to  do. 

That  may  be  why  IT 
has  such  a  bad  repu¬ 
tation  with  number¬ 
crunching  MBAs. 

I’m  not  the  First  to 
comment  on  the  eminently  improvable 
state  of  leadership  skills  in  the  IT  in¬ 
dustry.  and  I  certainly  won’t  be  the 
last.  *1110  leadership  skills  of  CIOs'  and 
CTOs'  first-,  second-  and  third-level 
reports  are  not,  by  anyone's  calcula¬ 
tion.  complete. 

But  more  significant  than  the  need 
to  top  off  IT  professionals’  leadership 
skills  is  the  fact  that  what  IT  must  lead 
is  changing.  The  scope  and  scale  of  the 
IT  mission  is  undergoing  a  significant 
transformation.  No  longer  are  the  folks 
in  IT  seen  as  sequestered  wizard- 
priests  tending  giant  machines  in  iso¬ 
lated  dungeons.  We  have  moved  be¬ 
yond  the  old  focus  on  back-office  proc¬ 
esses.  and  for  many  organizations.  IT 
has  become  the  major  clement  of  cus¬ 
tomer-touching  activities  in  the  from 
office.  IT  is  at  the  base  of  customer  ex¬ 
perience,  all  the  way  from  presales  to 
delivery,  deployment  and  billing.  But 
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Regaining  Relevancy 


ONE  WEEK  FROM  TODAY,  Sun  Micro¬ 
systems  will  launch  Solaris  10  amid 
pomp,  glitz  and  circumstance  at  The 
Tech  Museum  of  Innovation  in  San 
Jose.  As  the  music  pounds  and  the 
lights  flash,  the  Sun  PR  machine  will  likely  hail  the 
launch  as  a  turning  point  in  the  evolution  of  operat- 


ing  systems.  Sun  users 
and  business  partners  will 
likely  see  it  for  what  it 
really  is:  A  desperate  at¬ 
tempt  on  Sun's  part  to 
retain  its  relevancy. 

Or  to  regain  its  reletan- 
cy.  some  would  argue. 

The  inexplicable  paralysis 
that  for  so  long  k^t  Sun 
from  offering  a  sensible 
response  to  the  clamor 
for  low-priced  commodi¬ 
ty  systems  has  forced  it 
into  a  game  of  catch-up  chat  may 
well  be  unwinnable.  Large  enterpris¬ 
es  like  the  Chicago  Mercantile  Ex¬ 
change  have  already  developed 
strategies  to  wean  themselv^  off  of 
Solaris  on  Sparc  in  favor  of  Linux  on 
Intel  [Quicldink  49769].  When  the 
Merc  embaiked  on  that  course  nwre 
than  a  year  ago.  it  really  had  no 
choice,  '^e  didn't  have  a  good  an¬ 
swer  for  them."  admitted  Glenn 
Weinberg,  vice  president  of  Sun's 
operating  platforms  group. 

Sun  has  since  rushed  to  deliver 
s)^ems  based  on  AMD's  Opteron 
processor  and  Intel's  Xeon.  And  So¬ 
laris  10  advances  the  cause,  since  it 
will  run  on  the  Opteron  in  full  64-bit 
mode.  But  the  odds  against  Solaris  10 
becomii^  the  savior  that  Sun  so  in¬ 
tensely  wants  and  needs  are  high. 

The  Sun  executives  on  stage  next 
week  will  almost  certainly  boast 
about  the  near  universality  of  ISV 
support  for  Solaris  10.  But  what  you 
won't  hear  are  some  of  the  stories 
behind  that  “support'* 

The  hct  is,  many  ISVs  are  worried 
Sure,  tbey'U  release  software  that 
supports  Solaris  10.  but  their  confi¬ 
dence  in  Sun  is  clearly  shaken. 


TeamQucst.  a  vendor 
of  IT  performance  man¬ 
agement  and  capacity 
planning  software,  has 
60%  of  its  installed  base 
running  Solaris,  and  Sun 
is  a  reseller  of  its  prod¬ 
ucts.  But  Mike  Ellis, 
TeamQuest's  executive 
vice  president  of  world¬ 
wide  sales  and  maricet- 
ing.  appears  almost  dis- 
trau^t  when  the  subject 
of  Sun  arises.  “Sun  is  in  a 
bit  of  a  mess  internally,’*  Ellis  said 
during  a  discussion  I  had  with  him 
last  month.  He  said  TeamQuest  is 
doing  its  best  to  shift  resources  to 
partner  with  IBM  and  to  make  its 
software  a  complement  to  Tivoli 
across  all  IBM  product  lines. 

And  Ellis  hasn't  seen  his  cus¬ 
tomers  plan  moves  to  Solaris  10,  be¬ 
cause  ifs  too  complicated  “Trying  to 
reinvent  z/OS  doesn’t  make  sense  to 


me.”  he  said.  But  that's  what  he 
thinks  Sun's  upgrade  attempts  to  do. 
“I  don’t  think  anyone  is  looking  for 
more  complexity." 

SAS  Institute  is  another  Sun  ISV 
that  will  support  Solaris  10.  The 
companies  are  longstanding  part¬ 
ners,  and  Solaris  has  historically 
been  the  top  Unix  platform  for  SAS 
software.  But  again,  when  you  listen 
to  what  the  senior  executives  are 
really  saying,  a  different  picture 
emerges.  Last  month.  I  spoke  with 
SAS  CEO  James  Goodnight,  who  left 
me  with  the  impression  that  be  no 
longer  considers  Sun  to  be  the 
strategic  partner  it  once  was. 

“I  haven’t  even  kept  track  of  the 
Sparc  chip  lately,"  Goodnight  said. 
“The  Sun  has  sort  of  faded  out "  He 
ched  high-level  inffghting  at  Sun 
over  the  issue  of  Solaris  on  Intel  and 
suggested  that  the  damage  may  be  ir¬ 
reversible  despite  Sun's  change  of 
heart.  “1  sort  of  think  it  might  be  too 
late,"  he  said 

For  the  sake  of  user  choice,  we  can 
all  hope  Goodnight  is  wrong.  Hey. 
more  miraculous  comebacks  have 
happened  And  Sim  isn’t  even 
cursed.  O  50524 
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THORNTON  A.  MAY 

Looking  for 
Creative  FT 
Leaders 

CREATIVITY  leadership 
is  the  new  career  dif¬ 
ferentiator  for  emerg¬ 
ing  IT  leaders.  Longtime  deni- 

zens  of  the  technology  demesne  are  no 
strangers  to  the  terms  leadership  and 
creadvtty.  It's  rare,  however,  to  see  the 
words  used  together.  This  will  change, 
according  to  research  coming  out  of 
the  IT  Leadership  Academy  in  Jack¬ 
sonville.  Fla.,  as  we  move  deeper  into 
an  accelerated,  creatively  destructive, 
innovation-based  economy. 

There  are  libraries  full  of  books  on 
leadership,  but  people  in  IT  tend  not  to 
be  featured  in  those  texts.  Best-seller 
wannabes  taiget  IT  folk  as  readers  of 
leadership  books,  not  as  exemplars 
that  appear  in  them. 

This  must  change. 

Business  school  cur¬ 
ricula  focusing  on 
leadership  don’t  rely 
heavily  on  case  stud¬ 
ies  of  IT  practition¬ 
ers:  more  frequently 
than  not,  the  IT  case 
is  used  to  demon¬ 
strate  what  not  to  do. 

That  may  be  why  IT 
has  such  a  bad  repu¬ 
tation  with  number- 
crunching  MBAs. 

Pm  not  the  first  to 
comment  on  the  eminently  improvable 
state  of  leadership  skills  in  the  IT  in¬ 
dustry.  and  I  certainly  wont  be  the 
last  The  leadership  skills  of  CIOs’  and 
CTOs’  first-,  second-  and  third-level 
reports  are  oot.  by  anyone's  calcula¬ 
tion.  complete. 

But  more  significant  than  the  need 
to  top  off  IT  professionals'  leadership 
skills  is  the  fact  that  what  IT  must  l^d 
is  changing.  The  scope  and  scale  of  the 
IT  misj^n  is  undergoing  a  significant 
transformation.  No  longer  are  the  folks 
in  IT  seen  as  sequestered  wizard- 
priests  tending  giant  machines  in  iso¬ 
lated  dungeons.  We  have  moved  be¬ 
yond  the  old  focus  on  back-office  proc¬ 
esses,  and  for  many  organizations,  IT 
has  become  the  major  element  of  cus¬ 
tomer-touching  activities  in  the  front 
office.  IT  is  at  the  base  of  customer  ex¬ 
perience,  all  the  way  from  presales  to 
delivery,  deployment  and  billing.  But 
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the  evolution  of  our  profession  doesn't 
end  there.  The  next  step  for  IT  is  to 
become  an  active  and  significant  con¬ 
tributor  to  the  process  of  product  and 
service  design.  This  puts  IT  smack-dab 
in  the  center  of  what  Richard  Florida 
has  called  the  “creative  class.** 

This  sociologist-cum-demographer 
has  provided  a  valuable  service  by 
tracing  the  boundaries  and  behaviors 
of  this  group  of  people.  His  book  The 
Rise  of  the  Creative  Class  (Basic  Books. 
2003)  insightfully  demonstrates  that 
30%  of  the  nation’s  workforce  (about 
40  million  people)  can  be  bundled  to¬ 
gether  in  this  class,  which  consists  of 
individuals  making  their  living  in  idea- 
or  innovation-based  occupations.  His 
colleagues  at  (Zamegie  Mellon  Univer¬ 
sity  estimate  that  this  group  accounts 
for  about  half  of  all  U.5.  wages  and 
salaries  —  about  S1.7  trillion. 

What  Florida  doesn't  say  explicitly, 
though  it  is  implied,  is  that  the  creative 
class  isn't  well  led  or  provided  for  by 
existing  institutions,  even  though  it  will 
be  a  force  in  shaping  the  future  econo¬ 
my.  The  potential  leadership  of  the  fu- 
ttue  is  up  for  grabs.  Part  of  the  grab¬ 
bing  will  involve  developbtg  the  -<kin< 
necessary  to  lead. 

The  IT  conversation  isn't  fust  about 
business.  Increasingly,  it's  alwut  the 
essence  of  society  —  bow  we  live  our 
lives.  More  and  more.  IT  decisions  in¬ 
volve  not  only  dollars  and  cents  but 
public-  and  foreign-policy  considera¬ 
tions  as  well  as  demonstrated  by  the 
prominence  of  issues  such  as  informa¬ 
tion  security,  privacy  and  outsourcing. 
A  little  investment  in  developing  the 
capacity  and  reputation  for  creative 
leader^p  will  pay  big  dividends  in 
the  future.  0  B04M 
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Next  Tune, 
An  Internet 
Electorate 

Regardless  of  whether 
you're  happy  with  the 
results  of  last  week's 
election,  one  thing  we  can  agree 
on  is  that  the  voting  process  was  much 
smoother  than  It  was  four  years  ago. 

In  one  way.  it  doesn't  matter,  though; 
the  presidential  election  of 2008  will 
be  held  on  the  Interrurt  That's  where 
voters  are  increasingly  getting  infonna- 
tion,  and  it's  udiere  they  will  cast  their 


votes  in  a  few  years. 

More  than  40%  of  Inter¬ 
net  users  have  accessed  po¬ 
litical  materia!  during  this 
election  cycle.  That’s  a  50% 
increase  the  2000 
election,  according  to  a  new 
survey  by  the  Pew  Internet 
&  American  life  Protect 
and  the  University  of  Michi¬ 
gan's  School  of  Information. 

This  year.  78%  of  voters 
got  most  of  their  informa¬ 
tion  on  the  campaigns  foom 
television,  the  survey  found,  and  more 
chan  half  relied  mostly  on  radio  and 
newspapers.  But  the  survey  also  says 
that  the  64%  of  Americans  with  broad¬ 
band  connections  at  home  use  the  In¬ 
ternet  and  e-mail  to  learn  about  cur¬ 
rent  events. 

And  those  people  aren't  using  the 
Internet  to  attack  those  with  whom 
they  disagree  or  simply  as  a  means  of 
avoiding  them.  Rather,  the  report  says 
that  “wired  Americans  hear  more 
points  of  view  about  candidates  and 
key  issues  than  other  citizens.** 

indeed,  the  fact  that  voters  aren't  us¬ 
ing  the  Iniemei  to  screen  out  opposing 
ideas  ought  to  worry  the  cadre  of  cyni¬ 
cal  campaign  strategists  who  r^ulariy 
rely  on  a  disinterested  atui  divided  el^- 
torate  to  win  elections.  According  to 
the  survey,  the  way  people  are  using  the 
Internet  suggests  that  tl^  will  increas¬ 
ing  have  greater  exposure  to  argu¬ 
ments  that  challenge  their  views. 

Imagine  that  Internet  users  are  ex¬ 
posed  to  more  views  and  have  greater 
interest  in  what  other  petite  hove  to 
say.  That  certainly  sounds  more  hope¬ 
ful  than  believing  that  we're  doomed 


to  nothing  but  more  bland, 
repetitive  and  generally  un¬ 
focused  political  rhetoric 
from  candidates  and  their 
parties. 

The  mainstream  news 
organizations  ought  to  be 
concerned,  though. 

While  59%  of  all  Inicmci 
users  access  information 
from  major  U.S.-based 
news  sources.  18%  of  Inter¬ 
net  users  (and  a  quarter  of 
home  broadband  users) 
have  logged  onto  the  Web  shes  of  inter¬ 
national  news  organizations  such  as  the 
BBC  or  Al  lazeera.  Alternative  news 
sources  such  as  AlterNetorg  and  News- 
Max.coro  are  also  getting  called  up 
(U%  of  Internet  users  have  visited  such 
sites),  as  are  more  partisan  sites  such  as 
MoveOrung  and  the  Christian  Coalition 
Several  years  ago.  many  people  said 
that  consumers  wouldn't  be  willing  to 
trade  stocks  online  and  that  they 
wouldn't  reveal  their  credit  card  num¬ 
bers  or  other  persortal  information 
over  the  Internet.  We  now  know  that 
to  be  false.  In  fact,  many  people  today 
use  the  Web  to  easily  research  invest¬ 
ments.  test  dilTerent  market  scenarios 
and  make  decisions  about  managing 
their  money,  all  with  levels  of  privacy 
atid  security  that  consistently  elude 
Florida  election  officials. 

What  a  bright  day  for  the  political 
process  if  voters  could  go  online  and 
test  candidates'  positions  on  the  bud¬ 
get  deficit,  check  their  voting  records 
in  Congress  or  see  exactly  where  their 
campaign  contributions  came  from. 

And  how  truly  revolutionary  if  on 
Election  Day  they  could  turn  their 
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homes  into  individual  polling  booths. 

Of  course,  many  with  vested  inter¬ 
ests  will  warn  that  giving  too  much 
power  to  the  citizens  could  lead  to 
election  chaos,  lawsuits  and  allegations 
of  voter  fraud.  It  can't,  for  one  simple 
reason:  We  already  have  those  things. 

In  an  age  when  major  retailers  and 
U.S.  government  agencies  such  as  the 
IRS  routinely  use  the  Internet  to  con¬ 
duct  business  with  the  public,  there  is 
no  reason  why  we  can’t  point  and  click 
our  way  through  ballot  initiatives,  can¬ 
didate  choices  and  rcfcrendunts. 

Unless,  of  course,  the  current  crop 
of  politicians  and  their  allies  don’t 
want  us  to. 

CUrtfteation;  In  ray  Oci.  25  column.  I 
said  that  Frank  Quattrone  had  been 
convicted  of  obstruction  of  justice  be¬ 
cause  of  a  single  e-mail  that  “described 
his  acth'ities  rebted  (o  the  practice  of 
‘spinning.’  “  The  e-mail  in  question  was 
actually  Quattrone's  endorsement  of 
another  CSFB  executive’s  iitstruction 
to  employees  to  “clean  gp“  their  files, 
an  instruction  that  prosecutors  took  to 
be  obstruction  of  justice,  since  CSFB 
was  then  under  investigation  for  spin¬ 
ning.  It  was  maccuratc  to  say  that 
Quattrone  vras  convicted  of  the  “lesser 
charge"  of  obstruction,  since  he  had 
never  been  formally  charged  in  the 
spinning  investigation.  He  was,  bow- 
e\'er.  convicted  of  obstructing  a  grand 
jury,  obstructing  federal  regulators  and 
witness  tampering.  0  50482 
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Regional  Traits  Do 
VaiyinU.S..Y’al 

HAVWaaHOlinilfPintheMid- 
west.  I  enjoyed  reading  Rank 
Hayes' cokinin  predtoilng  success 
for  the 'lurol  sourcing*  of  rr  lobs  (0 
the  bat*  country  of  states  like 
Adansas  r^nnshore  Future,* 
QuidUnk  49756].  I  hope  hh  vision 
of  improved  cutiorar  experience 
proves  to  be  righl  But  Ms  cornmant 
thal'ooss-culturafconfuaion'or  ' 
Time-nine  dWerertcas*  are  pretty 
much  nonexistent  here  m  ttte  U.S. 
surprised  me.  At  our  company,  we 
have  seen  meny  dashes  between 
the  8t)te  of  Northeast  iftaenlas  and 
Ota  stowar.  more  congantaf  South¬ 
ern  styte  here  in  Wginia.  Plut.  we 


have  the  aggravation  of  having  to 
wait  tl  noon  to  talk  to  those  sleepy¬ 
heads  on  the  West  Coast.  Word  o( 
al,  Northerners  never  seam  to  get 
Che  obvious  dmerenoe  between 
‘y'dT  end  *al  /aL*  R  Hayes  needs 
to  resaarch  cross-cuttuof  contu¬ 
sion.  I  can  ill  him  enjoy  a  slow  dW 
With  my  smaHown  Caoira  in¬ 
laws,  just  to  see  how  R  compares 
wtth  a  support  cal  to  New  Delhi. 
IWtHell 

TT  support  manager,  Media 
Geneml  Inc,  Rictanond.  Va. 


Don't  Interfare  With 
Mcrosoft’s  Sales 

The  oturiwv  ttiat  the  price  d  a 
produd  dtould  be  controlled  ie 


in  an  agreement  between  a  buyer 
and  a  seller  [The  Color  d  Mbo- 
sofl's  Money.*  QuichLink  49271].  A 
third  party  has  no  business  dtotoUng 
thecour3edttiBttransaclion.Mh 
cnedi  has  every  ngM  to  pat  as 
much  money  as  4  can  tor  its  prod¬ 
ucts  ThaJusteeDeperlment.  the 
Fifopaan  Union,  competitors  and 
emyone  abe  who  thinks  they  are 
•owed*  somefting  from  Microaoft 
wish  to  confrd  and  usurp  some¬ 
one's  nghi  to  Ml  own  properly. 

Since  bringing  Mtorocdl  into  any 
dbcuseion  often  rasAs  in  dbtorled 
reesoning.lafscorHiderCorrtodr- 
MonU  Some  people  gal  R  for  free, 
some  donl  CertaMy  sounds  Hv 
you  pet  to  pidc  your  Sling  pnee  to 
each  customer  Doesn't  Miemsoh 


have  the  same  pmlepe? 
ThysCoeCzat 

Director  qf  is.  Zo^vu  Oxp.. 
Eden  Prairie,  Minn, 
thys@ziTpmcom 

COHPUTERWOMJ)  wetoornes 
cemmaMs  from  as  readers  Letters 
wff  be  edttd  tor  brevity  and  danty. 
They  should  be  addras^  to 
JarnieEdde.leOarsedlor.Com- 
pulerwortd.  PO  Box  9f7l  1  Spain 
StreeL  Ramingham.  Mass.  01701. 
F8x;(50e)B7&4e4aE-n^ 
totteraScomputarwortdxom 
indude  an  address  and  phone 
number  tor  xnmedHte  vertocatKto 
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1.  Player  attempts  30-foot  chip. 


MIOOLEWAHE  IS  IBM  SOFIWABE.  Fans,  broadcasters, 
even  players,  are  accessing  every  shot  at  PGA  TOUR* 
events  online  -  in  real  time.  The  scalable  multiplatform 


technology  of  IBM  DB2  integrates  and  manages 
information,  allowing  SHOTLink,  the  PGA  TOUR'S  ball¬ 
following  technology,  to  uplink  and  downlink  every  shot, 
run  all  the  numbers  and  tell  the  entire  story  -  hole  by  hole. 


2.  Operator  measures  distance. 

3.  Stats  entered  Into  PDA. 

4.  SHOTLink  truck  transmits  data. 

5.  Broadcaster  broadcasts  a  "birdie!" 
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ITS  SAFE  TO  say  that  your 
browser  is  probably  Mi¬ 
crosoft  Corp.’s  Internet 
Explorer,  since  IE  insfalk 
automatically  with  Win¬ 
dows  or  Office.  The  browser  wars  of  the  1990s 
are  long  gone,  and  Redmond  won  decisively. 

But  after  the  Netscape/IE  struggle,  a  funny 
thing  happened.  With  no  serious  competitor. 
Microsoft  stopped  development  of  IE  New 
versions  appear  from  time  to  time,  but  it  has 
been  years  since  IE  offered  groundbreaking 
new  features.  Meanwhile,  development  of  other 
browsers  has  continued  to  the  point  where 
many  consider  them  preferable  to  IE  in  perfor¬ 
mance,  security,  ease  of  use,  added  features  and 
even  help  desk  support. 

This  review  looks  at  IE’s  principal  competi¬ 
tors:  Opera  from  the  fjords  of  Norway  and  the 
ftaternal  twin  children  of  Mozilla.  All  offer 
more  features,  run  faster  than  IE  and  are  avail¬ 
able  on  a  variety  of  operatii^  systems,  includ¬ 
ing  Linux,  Unix  and  Mac  OS  X. 

THE  MOZILLA  TWINS 

When  Netscape  Communications  Corp.  gave 
its  Communicator  code  to  the  public-domain, 
open-source  Mozilia.com  project,  no  one  quite 
knew  what  to  expect  The  Mozilla  Foundation’s 
developers  scrapped  the  original  code  and 
started  over  to  produce  efficient,  cross-plat¬ 
form  software.  The  Gecko  browser  and  layout 
engine  appeared  quickly  after  the  1998  hand¬ 
over.  Since  then,  several  Netscape-labeled 
browsers  have  been  based  on  Mozilla  code,  but 
these  have  lagged  behind  the  open-source  beta 
track  in  features  and  performance.  Mozilla’s 
browser  development  culminated  in  the  Sep¬ 
tember  2004  release  of  Version  1.0  of  Firefox. 

The  two  major  Mozilla  products  —  Netscape 
Navigator  12  and  Firefox  1.0.  —  are  main<trr<»am 
and  the  availability  of  their  open-source  code 
can  be  a  real  plus  for  corporate  developers. 

COMMON  CHARACTERISTICS 

I  really  liked  the  tabbed  browsing  within  Net¬ 
scape  and  Firefox;  it's  easy  to  open  up  new  tabs, 
keep  numerous  pages  open  simultaneously  and 
switch  quickly  among  them.  This  is  particularly 
helpful  when  using  a  search  engine,  since  you 
can  keep  the  search  results  in  one  tab  while 
looking  at  pages  in  a  new  tab  by  just  ri^t<lick- 
Contimted  on  page  ^ 


QAA 

Crossing  Boundaries 

Lotus  Notes  inventor  and  Groove 
Networks  CEO  Ray  Ozzie  discusses 
computers  as  communication  tools, 
and  the  past  and  future  of  collabo¬ 
rative  software.  Page  45 


SECURITY  MANAGER'S  JOURNAL 

Taking  the  Leap  to  REAP  for  Wireless 

Mathias  Thurman's  company  still  has  no 
formal  policies  or  standards  for  wireless  de¬ 
ployment.  but  access  points  seem  to  double 
ever>-  couple  of  months  Page  48 


Microsoft’s  Internet  Explorer  is  the  default  Web 
browser  for  Windows  users,  but  it  may  not  be  the 
best  choice  for  your  organization.  BY  RUSSELL  KAY 


FUTURE  WATCH 

Giving  Bugs  the  Boot 

Researchers  in  California  are  working  on 
a  new  class  of  techniques  designed  not  to 
prevent  software  flaws,  but  to  recover  from 
them  rapidly  and  transparently.  The  idea: 
micro-rebooting  on  the  fly.  Page  40 


Predict 

Virus 

Outbreaks? 
Believe  it. 

Today’s  email  borne  viruses  propagate 
globally  in  hours  or  minutes,  much  faster 
than  traditional  defenses  can  reart,  leaving 
you  exposed  to  the  “reaction 
time  gap?  IronPort’s  Virus 
Outbreak  Filters"  stop  viruses 
up  to  8  hours  before  traditional 
virus  definition  files  are  avail¬ 
able,  literally  predicting  virus 
attacks  before  they  cause  harm.  This 
astounding  solution  is  powered  by  a  series 
of  proprietary  algorithms  that  process 
data  from  SenderBasel  the  world’s  first  and 
largest  email  traffic  monitoring  network. 
Available  now  at  www.ironport.coin/leader 
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FILTERS 


IRONPORF 


Rebuilding  the  World’s  Email  Infrastructure. 


INDUSTRIAL 
STRENGTH 
EMAIL  SECURIT> 
FOR  ALL 


Only  IronPort  offers  a 
cairier^grade  platform 
combined  with  the 
system  management 
capabilities  required  by 
all  global  enterprises. 
Powerful  tools  enabling 
simple  management  of 
complex  tasks. 


www.ironport.com/leader 
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Continued  from  page  29 
ing  on  the  link.  Going  back  to  the 
search  page  doesn't  require  a  reload 
or  refresh,  as  a  page-back  command 
would,  rust  a  switch  in  the  display 
window.  Also,  the  ability  to  open  pre¬ 
defined  groups  of  pages  with  one  click 
can  be  a  real  convenience. 

Another  search  aid  involves  the 
sidebar,  an  optional,  multifunction 
panel  to  the  left  of  the  main  window 
that  can  display  bookmarks,  history  or 
search  results,  fust  type  a  word  into 
the  sidebar's  search  boa.  and  links  ap¬ 
pear  below,  with  the  first  one  opened 
in  a  new  tab  in  the  main  window.  You 
determine  which  search  engine  does 
the  fetching,  rinally,  from  any  Web 
page,  you  can  simply  hlghliglu  a  word 
or  phrase,  ri^t-cllck  it  and  select 
search"  from  the  context  menu. 
It's  a  fast,  smooth  operatioa 


ALIKE  ANONFFERENT 

Both  Netscape  and  Ftrefox  automati¬ 
cally  import  and  set  up  my  IE  favorites 
list  (a  complex  tree  involving  a  couple 
of  thousand  pages)  under  the  Book¬ 
marks  menu.  Both  browsers  include 
a  file  manager  that  lets  you  download 
multiple  files  at  once  and  pause  or  re¬ 
sume  a  download.  The  download  man¬ 
ors  keep  track  of  all  the  files  you 
download,  with  persistent  information 
on  date,  size  and  status. 

Both  browsers  offer  automatic  pop¬ 
up  blocking,  which  keeps  a  lot  of  an¬ 
noying  ad  windows  at  This  feature 
was  available  to  IE  users  only  in  the 
form  of  third-party  add-ins  until  the 
most  recent  revision  of  IE  6  (the  up¬ 
grade  inside  the  2S0MB  Service  Pack  2 
update  for  Windows  XP>. 

The  overall  design  of  the  browser 
window  is  very  similar  in  both.  Net¬ 
scape  opts  for  a  rather  bland  and  col- 
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orless  scheme,  while  Firefox  uses  a 
simpler,  cleaner  interface  with  a  tad 
more  color.  It's  easy  in  both  to  apply 
different  skins,  though  I  wasn't  im¬ 
pressed  by  any  of  the  skins  that  arc 
currently  available.  Netscape's  display 
has  more  going  on.  with  more  options 
and  apparatus  inside  the  sidebar  (in¬ 
cluding  the  AOL  Instant  Messenger 
buddy  list).  Flrefox's  slightly  simpler 
sidel»r  was  turned  off  by  default. 

One  difference  could  be  important: 
Firefox's  menu  took  me  directly  to  my 
current  e-mail  client,  Microsofr  Out¬ 
look.  and  the  menu  item  even  indicat¬ 
ed  when  I  had  new  messages.  Under 
Netscape,  clicking  on  mail  opened  up 
Netscape's  own  mail  reader  and  then 
asked  me  to  set  up  an  account 
Firefox  lets  you  set  up  "live  book¬ 
marks"  with  which  to  view  rich  site 
summary  news  and  blog  headlines 
directly  in  the  bookmarks  tool  bar  or 
bookmarks  menu.  When  a  site  is  en¬ 
abled  for  live  bookmarks,  an  orange 
RSS  icon  appears  on  the  bottom  right 
corner  of  the  browser  (for  more  on  RSS, 
see  QuickLink  46266).  To  set  up  the 
link,  click  on  the  icon  to  bring  up  a  dia¬ 
logue  for  adding  a  new  live  bookmark. 
Both  Netscape  and  Firefox  support  a 
I  variety  of  extensions  —  add-in  pro- 
I  grams  for  new  functionality  »  but 
many  more  are  available  for  Firefox. 

Overall,  the  differences  between  the 
two  browsers  are  small  Firefox  is  more 
adaptable  and  less  monolithic  in  its  ap¬ 
proach  to  nonbrowser  funcrions,  which 
might  make  it  a  better  choice  for  some 
enterprises.  For  Windows  systems, 
Hrefox  li)  is  a  4.5MB  download,  i^iile 
Netscape  72  takes  UBMB  for  the  basic 
browser  setup  and  24BM6  for  the  en¬ 
tire  package.  Versions  of  both  are  avail¬ 
able  for  Linux.  Mac  OS  X.  Solaris  x86, 
OS/2,  ADC  and  BeOS.  Both  browsers  are 
also  available  in  a  variety  of  languages. 

OPERA 

(Dpera  started  out  as  a  research  proicct 
at  Norway-based  telecommunications 
firm  Telenor  ASA.  In  1995,  Telenor 
spun  off  Opera  Software  ASA.  which 
released  the  first  public  browser  a  year 
later.  Since  2000,  Opera  has  been  a  free 
download  for  personal  use. 

Oslo-based  Opera  began  with  differ¬ 
ent  priorities.  While  its  competitors 
became  la^r  and  more  complex. 
Opera  wanted  its  offering  to  small 
and  quick  with  a  low  memory  foot¬ 
print  Althou^  Opera  claims  to  be  the 
festest  browser.  I  found  chat  Netscape 
and  Hrefox  both  loaded  pages  sU^tly 
faster.  All  beat  IE  by  a  country  mile. 

Opera  introduced  the  back^und 
loading  of  pages,  batch  opening  of 


In  1991.  Tim  BemeiS'Lee  oasted  soft¬ 
ware  that  wixM  display  and  Interact  with 
HTML  documents.  Two  years  later,  an* 
other  software  product  using  graphics 
and  nukimerfo  to  enjise  the  then^new 
World  Wide  Web.  emerged  from  the  Na* 
tional  Center  for  Supercomputing  Appfi- 
catiorteattheUniversttyoflinoisatLlr- 
baria*ChafTV)aign.  That  product  NCSA 
Mosac  was  the  most  revolutionary  soft¬ 
ware  to  come  along  since  the  Macintosh 
operating  system  a  decade  earlier. 

The  leader  of  the  Mosaic  learn,  Marc 
Andreessen,  started  Mosaic  Communi* 
cations  CcNp.  (which  became  Net¬ 
scape)  to  cmAB  the  commercial 
browser  that  became  Nstsc^  Navi¬ 
gator.  Netscape  was  a  phenomenon  as 
a  concetrt.  a  product  and  a  company,  h 
grew  big  enough  fast  enough  that  Mi- 
crQSoftreahzedithadtocompete.Ml- 
crosoh  bought  a  smal  browser  called 


bookmark  folders,  and  fast-forward 
and  rewind  functions,  which  anticipate 
where  you  might  surf  to  next  and  fetch 
those  pages  before  you  request  them. 
Opera  adds  notes,  skinning  to  change 
Che  browser's  look  and  session  man¬ 
agement  that  lets  you  close  and  restart 
the  browser  with  all  your  previous 
pages  automatically  restored. 

Early  versions  of  Opera  opened  mul¬ 
tiple  browser  pages  inside  a  stogie  par¬ 
ent  window.  Since  6.0,  sin^de'document 
and  tabbed  modes  have  also  been  avail¬ 
able,  plus  a  mode  that  int^raies  Web 
browsing  into  fixed  presentations. 

Opera’s  mouse  gestures  feature  is 
interesting.  To  move  back  to  the  previ¬ 
ous  page,  fust  bold  down  the  ri^t 
mouse  button  and  move  the  mouse  to 
the  left.  If  you  move  right,  you  go  for¬ 
ward  a  page  —  a  clever  system. 

I  found  (^ra  harder  to  learn  than 
the  other  programs.  For  example,  the 
process  of  importing  IE  favorites  into 
the  Opera's  booknurics  isn't  obvious. 

It’s  buried  three  levels  deep  in  the 
menu  structure,  and  when  1  did  the 
operation,  there  was  no  indication  that 
it  had  succeeded  or  failed,  nor  could  I 
find  where  the  program  had  put  my 
links.  While  setting  up  folders  for 
quick  reference,  I  found  Opera's  dia¬ 
logue  boxes  attractive  but  often  un¬ 
clear  as  to  what  data  they  needed. 

Tlie  help  files  were  only  so-sa 

Unlike  the  Mozilla  twins.  Opera 
makes  you  look  at  paid  advertising  ban¬ 
ners.  They're  not  obtrusive  and  don't 


Spyglass,  which  was  based  on  the 
Mosaic  coda.  Ihan  modified  it  and  re¬ 
named  A  Internet  Explorer. 

That  original  version  of  IE  appeared 
in  1995.  A  had  problems,  but  As  price 
(free)  and  availability  (bundled  vvith 
Windows  and  Micn^A  application 
software)  made  A  a  quick  success.  In 
the  first  few  years,  Microsoft  improved 
IE  significantiy  wAh  each  new  release, 
until  A  became  beAer  and  more  reliable 
than  Netscape.  IE  quicMy  took  ov^  the 
browser  markel  Netscape,  meanwhile, 
lost  most  of  Its  user  base  and  revenue, 
»id  the  company  was  acquired  by 
America  OnAne  Inc.,  which  taler 
merged  with  Tme  Warner  Inc.  Most 
users  eventualy  lost  interest  in  the 
Netsc^  browser.  IE  is  installed  auto¬ 
matically  wAh  Windows,  which  is  suffi- 
dent  for  most  users. 

•RussellKay 


affect  performance,  but  you  can  buy  an 
ad-frec  version  for  $39.  Opera  754  is 
available  for  Windows.  Mac  OS.  Linux. 
FreeBSD  and  Solaris.  The  basic  Win¬ 
dows  download  is  just  3.4MB,  though 
adding  Java  brings  it  up  to  16.2MB. 

RECOMMENOATIONS 

EE.  the  de-facto  standard  for  Web 
browsers,  has  served  us  well  for  many 
years.  If  it  suits  your  company's  needs, 
perhaps  there’s  no  reason  to  change.  1 
started  using  IE  shortly  after  it  first  ap¬ 
peared  and  quickly  preferred  it  to 
Netscape  hbvigatoc.  Despite  some 
problems,  I  was  a  steadfast  IE  user  and 
Netscape  skeptic  for  years.  I  tried  out 
MoztUa  betas  and  Opera,  but  I  always 
found  that  they  either  offered  no  big 
improvement  over  1£  or  made  my  heav¬ 
ily  loaded  Windows  systems  unstable. 
Unfortunately.  IE  has  been  riddled  with 
security  problems,  and  Microsoft's  ef¬ 
forts  to  secure  the  browser  have  been 
only  mildly  successful 
About  four  months  ago,  I  began  us¬ 
ing  Firefox  as  my  primary  browser. 
With  the  September  release  of  tO  (no 
longer  beta).  I  can  recommend  Firefox 
without  reservation.  Opera  Is  a  good 
choice  for  many  —  perhaps  the  best 
choice  for  an  older  computer  that's 
light  on  memory  or  CPU  power  ~  but 
I  find  Firefox  easier  to  use.  O  90296 


Kay  is  a  Computerworld  contributing 
writer  in  Worcester,  Moss.  Ibu  con  reach 
I  hiniatrusskay(g)c/iarter.net. 
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How  secure  is  your  digital  information? 


Protect  your  information  with  the  Data  Security 
Kit  from  Sharp.  Financial  facts,  personnel  records, 
customer  lists;  networked  copiers/printers  process 
sensitive  information  every  day.  Unfortunately,  their 
hard  drives  can  also  be  accessed  via  the  network, 
contributing  to  S60  billion  worth  of  information 
theft  every  year.’  To  protect  this  weak  link  in  your 


corporate  security,  we’ve  created  our  Data  Security 
Kit.  It's  the  first  copier  and  printer  protection  to 
be  validated  by  Common  Criteria,  a  government- 
sponsored  program,  and  it’s  available  only  with 
our  Digital  IMAGER"*  series  of  copiers/printers. 
Sharp’s  Data  Security  Kit.  Enhanced  information 
protection  at  your  fir>gertips-  sharpusa.comi^ecurity 


SHARR 

.  be  sharp 
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Smart 

By  combininp  code  and  content.  XML*enabled  docu¬ 
ments  promise  to  change  the  way  people  inters 
with  key  business  systems. 


ESPITE  PAPER'S  IMAGE  aS 

an  outmoded  and  costly 
conveyor  of  information, 
businesses  still  love  to 
push  it  It’s  tactile,  famil¬ 
iar  and,  in  many  cases, 
represents  the  primary 
way  that  companies  interact  with  employ¬ 
ees,  partners  and  customers.  Yet  the  difficul¬ 
ties  inherent  in  tracking,  storing  and  rekey¬ 
ing  data  and  moving  paper  around  take  a 
huge  financial  toll  on  businesses.  Even  those 
documents  that  have  been  converted  to  an 
electronic  format  tend  to  be  largely  static. 
What  might  it  mean  to  business  efficiencies 
if  corporate  documents  could  become  active 
in  the  processes  they  front  and  adapt  as 
needed?  What  if  they  could  become,  well, 
smart? 

If  electronic  documents  aren't  yet  ready  to 
do  all  of  our  work  for  us,  some  of  them  are  at 
least  pitching  in.  Smart  documents,  alterna¬ 
tively  referred  to  as  “intelligent"  or  “active" 
documents,  are  dynamic  containers  that  use 
embedded,  executable  code  to  p>aiticipate 
in  business  processes.  Smart  documents 
primarily  use  XML,  which  can  agnostically 
represent  data  types  and  is  highly  portable. 
These  documents  can  streamline  processes 
by  launching  woikflows,  moving  data  to  ainl 
from  back-end  databases  and  updating 
themselves  as  business  rules  dictate. 

Proponents  believe  that  active  documents 
will  change  the  way  businesses  control 
knowledge  and  how  users  interact  with  h 

—  fecilitating  everything  from  streamlined 
operations  and  enhanced  collaboration  to 
improved  regulatory  compliance.  But  while 
some  enterprises  can  realize  returns  on 
investment  by  automatii^  a  sii^e,  costly 
process  through  a  smart  document  interf^e 

—  insurance  beneffts  enrollment  or  payroll 
deduction  chaises,  say  —  the  upfront  design 
effort  needed  to  re-engineer  processes,  map 
workflows  and  define  XML  schemas  for 
XML  repurposing  can  be  complex. 

“A  smart  document  is  a  powerful  end  re¬ 
sult,  but  the  design  effort  is  not  for  the  faint 
of  heart,"  says  Carl  Frappaolo,  a  vice  presi¬ 
dent  at  Boston-based  consultancy  Delphi 
Group.  “The  challenge  is  in  taking  a  step 
back,  and  pulling  processes  apart.  In  order  to 
teach  a  process  to  a  document,  you  have  to 
decompose  it  into  finite  pieces." 

This  decomposition,  he  says,  requires  that 
business  analysts  work  closely  with  IT  to  de¬ 
termine  where  business  intelligence  exists, 
design  business  rules  that  trigger  document 
behavior  and  map  the  workflows  that  dictate 
a  document’s  life  cycle. 

Though  analysts  say  active  documents 

Continued  on  page  38 


SPYWARE  IS  LURKING. 


Maybe  the  way  we  work 
isn’t  working. 

Enter  the  Intelligent  Document  Platform  from  Adobe. 
The  bridge  between  the  paper  and  digital  worlds. 
Suddenly,  documents  become  smarter  and  infinitely 
more  useful.  Important  data  is  made  secure.  And 
information  intuitively  travels  where  it's  needed,  as 
it's  needed,  all  on  its  very  own.  It's  simplicity  at  work. 
The  Intelligent  Document  Platform.  Better  by  Adobe. 


See  t'ow  others  are  crossing  the  paper  to  digital  bridge  at  adobe  con .  op  Adobe 


Adobe  Intelligent  Document  Platform’ 
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Continued  from  page  34 

will  become  key  components  in  dynamically  updat¬ 
ing  technical  documentation  and  other  frequently 
changing  records,  the  biggest  application  of  the  con¬ 
cept  today  is  in  e-forms.  Jumping  into  the  market 
with  established  providers  such  as  PureEdge  Solu¬ 
tions  InCn  Verity  Inc.  and  RleNet  Corp.  are  big  guns 
Adobe  Systems  Inc.  and  Microsoft  Corp. 

San  Jose-based  Adobe’s  Intelligent  Document  Plat¬ 
form  is  a  services-oiicntcd  architecture  that  includes 
forms  development  and  workflow  components,  as 
well  as  its  iftiiquitous  Acrobat  Reader  client  (now 
caUed  Adobe  ^adcr)  and  Portable  Document  For¬ 
mat  (PDF).  Microsoft,  meanwhile,  has  built  extensive 
support  for  XML  and  Web  services  into  its  Office 
2003  suite  and  offers  InfoPath.  an  e-forms  develop- 
mem  and  routtj^  product. 

“Paper  forms  arc  extremely  expensive  to  produce, 
and  they’re  limited  in  terms  of  what  they  can  cap¬ 
ture.  With  a  smart  form,  data  callouts  and  process 
logic  enable  it  to  gather  data  from  and  deliver  it  to 
back-end  applications,”  says  Toby  BcU.  an  analyst  at 
Gartner  Inc.  in  Stamford,  Cona  More  important,  he 
says,  a  smart  form  “knows  where  it’s  supposed  to  go 
and  what  it’s  supposed  to  do." 

Serving  brtemal  Customers 

Bright  Horixons  Family  Solutions  Inc.,  a  provider  of 
employer-sponsored  child  care  and  early-education 
services,  saw  opportunity  in  using  e-fonns  to  auto¬ 
mate  employee  status  change  processes. 

With  16.000  employees  In  more  than  500  locations 
worldwide.  Bright  Horizons  found  that  paper-based 
processes  for  employee  changes  were  extremely 
time-consuming  and  error-prone,  says  Tiro  Young, 
vice  president  of  IT.  The  Watenown,  Mass. -based 
company  uses  Adobe’s  Intell^nt  Document  Plat¬ 
form.  Bright  Horizons  is  automating  employee  bene¬ 
fits  and  payroll  form  processes,  and  it  plans  to  do  the 
same  for  time  sheets  and  capital  expenditure  forms. 

“We  wanted  to  better  serve  employees  and  lower 
operating  costs,”  says  Young.  "We  have  all  these 
checkpoints  now  built  in  with  business  inieUigcnce 
behind  the  forms,  so  if  authorization  is  needed,  it’s 
built  into  the  workflow.” 

Bright  Horizons  has  saved  costs  by  prepopulating 
form  fields.  It  does  so  by  drawing  data  from  a  SQL 
Server  database  when  employees  log  into  its  intra¬ 
net,  providing  guided  assistance  through  drop-down 
menus,  and  using  business  intelligence  that  enforces 
the  way  fields  are  filled  out  After  a  Ibrm  b  completed, 
it’s  converted  to  a  PDF  document  and  b  automatical¬ 
ly  routed  via  Adobe's  workflow  server  to  appropriate 
managers  and  then  to  the  company’s  payroll  system. 

Grants.gov,  a  portal  where  people  can  identify 
gram  opportunities  available  from  26  U.S.  feder^ 
agencies  and  apply  for  them  electronically,  uses  soft¬ 
ware  from  Victoria,  Britbh  Columbia-based  Pure- 
Edge  5»olutiotts.  The  portal  b  one  of  25  e-government 
initiatives  that  the  Office  of  Management  and  Budget 
has  launched. 

As  the  middleman  between  granting  agencies  and 
applicants,  the  U,S.  Department  of  Health  and  Hu¬ 
man  Services  must  carefully  support  the  systems 
used  by  clients  on  both  sides,  says  Grants.gov  pro¬ 
gram  manager  Rebecca  Spit^a  For  example,  rather 
than  requiring  citizens  using  dial-up  connections  to 


stay  online  while  filling  out  a  grant  application,  the 
agency  deployed  PureEdge  to  make  the  application 
packages  downloadable. 

To  view  and  complete  forms,  users  run  a  down¬ 
loadable  client,  says  Spitzgo.  Grantsgov  uses  Pure- 
Ed|^  to  build  edit  formats  into  data  fields  to  ensure 
that  they’re  filled  out  correctly  the  first  time,  as  well 
as  to  perform  calculations.  When  users  complete  a 
form,  they  click  on  a  button  to  submit  it. 

Grant.s.gov  then  converts  the  received  form  to  an 
Acrobat  PDF  file,  creates  an  XML-formatted  data  file 
and  sends  both  to  the  appropriate  agency.  Granis.gov 


THACt  GAStC  VARIATIONS  OF  ACTIVE  DOCUMCNTS 


HCTKFOIMS 


These  interact  with  users  and  forms-bssed 
processes,  such  as  insurance,  payroll  and 
benefits  proipanis.  (Wng  buriness  rules, 
active  forms  snsura  that  fields  are  filled  out 
correctly  and  that  they  can  populats 
themselves  wHh  user  htfarmation  from  badt- 
enri  systems.  After  an  interaction,  they  can 
trigger  a  worfdlow  that  routes  them  to 
the  appropriato  Individuab  and  updates 
pertinent  databases. 


ummim 

Characterized  in  part  by  thair  abOty  to  be  pag¬ 
inated,  these  non-form-relaled  documents 
might  include  technicsi  manuals,  customized 
proposals  or  MlvMuafized  401(k)  reports  that 
update  themselves  as  back-end  data  changes 
and  new  information  is  entered  on  the  front 
end.  Technical  documentation  for  an  aircraft, 
for  example,  might  enable  a  mechanic  to  diefc 
on  a  link  to  order  parti  as  a  step  in  a  supply 
chain  procesa.  with  the  document  updattog  h- 
saH  when  new  parts  are  installed. 


AinMaunics 

Typicaly  part  of  larger  active  documents, 
theee  consist  of  XML-faased  graphical  de¬ 
ments,  such  as  scalable  vector  graphics,  that 
Maract  with  test  and  the  user. 

An  active  graphic  might  ddineate  an  engine 
sssembly  and  enable  fits  unr  to  *Ay 
through*  tlw  structure,  updating  itsdf  as 
the  Itfger  document  changes. 


doesn't  dictate  w’bat  agencies  do  with  the  XML  data, 
but  the  maiority  use  it  to  avoid  rekeying  data,  Spitzgo 
says.  Grants.gov's  staff*  has  designed  a  global  XML 
schema  for  pieces  such  as  its  grants  application  face 
page  so  that  agencies  can  reuse  it. 

XML  Marks  the  Spot 

Today,  XML  is  a  primary  eiubler  in  the  creation  of 
smart  documents.  XML  helps  define  document  ele¬ 
ments  such  as  pagination,  enables  content  to  be  sep¬ 
arated  from  presentation  and  allows  it  to  be  reused 
and  retargeted  as  needed. 

Smart  documents  typically  use  Web  services  struc¬ 
tures  for  invoking  and  receiving  data  values,  says 
Joshua  DuhL  an  analyst  at  IDC  in  Framingham,  Mass. 
Web  services  are  increasingly  wrapped  around  key 
enterprise  systems,  such  as  accounting,  inventory  and 
content  management  databases,  to  transport  data. 

“For  certain  kinds  of  applications  with  lots  of  updates 
—  supply  chain  applications,  health  care  processes  — 
ymj’II  want  an  active  document,”  he  says. 

In  a  pilot  of  LiquidOffice  e-forms  software  from 
Sunnyvale,  CaJif.-based  Verity,  the  state  of  North 
Dakota  will  use  XML  to  perform  validations,  do  cal¬ 
culations  and  prefill  user  data  into  a  variety  of  forms. 

“XML  provides  some  opportunities  we’ve  been 
seeking  for  a  long  time,  eliminating  data  entry  and 
rework."  says  Bill  Roach,  the  state  government’s 
CRM  enterprise  EDMS  coordinator.  “When  we  have 
the  information  in  XML,  we  can  package  it  up  and 
send  it  to  [back-end]  applications  automatically. 

We  can  have  it  create  an  image  or  a  PDF  or  store  it 
in  its  native  format  and  just  push  it  into  a  records- 
retention  system.”  LiquidOffice  is  just  part  of  the 
state’s  much  larger  EDMS  (electronic  document 
management  system)  infrastructure,  which  includes 
FUeNei’s  Content  Manager.  Verity's  TeleForm  and 
KnowIedgeLake  Inc’s  woikflow  products. 

john  Gartrell,  a  project  analyst  at  Seattle-based 
Sound  Transit,  expects  the  extensive  XML  capabili¬ 
ties  In  Microsoft’s  InfoPath  and  Office  2003  suite  to 
case  data  sharing  with  back-end  systems  such  as  its 
PeopleSoft  ERP  software.  The  regional  transit  system 
used  InfoPath  to  convert  a  paper-based  payroll  pro¬ 
cess  that  look  a  month  to  complete  to  an  e-forms 
process  that  takes  four  to  eight  hours.  Sound  TVansit 
isn't  using  XML  yet,  Gartrell  says,  but  "we’re  inte¬ 
grating  InfoPath  with  our  SQL  Server  2000  database, 
with  InfoPath  handling  all  the  XML.” 

As  their  role  in  the  enterprise  expands,  active  doc¬ 
uments  will  need  to  better  support  newer  capabili¬ 
ties  such  as  digital  signatures,  says  Duhl.  Because  of 
regulatory  compliance  requirements  such  as  those  in 
the  Sarbanes-Oxley  Act,  vendors  also  need  to  ensure 
that  electronic  documents  can  be  rendered  exactly  as 
they  would  be  on  paper.  Adobe's  PDFs  excel  in  this 
area,  says  DuhL  Meanwhile.  bu.sinesses  must  address 
numerous  infrastructure  and  process  issues  to  ex¬ 
ploit  the  benefits  adaptive  documents  can  bring. 

“While  active  documents  are  a  great  idea  and  inter¬ 
face.  even  at  the  forms  level  they  affect  business 
processes  at  a  very  fundamental  level,"  says  DuhL  “It 
goes  far  beyond  technology  to  the  way  people  work." 
050149 


GiUiooly  tsa/reefance  writer  rn  Falmouth,  Maine. 
Contact  her  at  kymg@nuiine.rr.com. 
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Micro-reboot  your  IT  troubles  away. 

BY  TODD  R.  WEISS 


rs  KEN  AN  rr  mantra  for  YEARS: 

“When  all  else  fails,  reboot." 

Rebooting  often  works,  bur 
isn’t  there  a  better  approach  to  the 
problem  of  buggy  software  that 
crashes  your  computer  and  takes 
your  valuable  data  with  it? 

That  idea  has  been  the  focus  of  re¬ 
searchers  at  Stanford  Universi¬ 
ty  and  the  University  of  Caii- 
fomia.  Berkeley,  who  have  been 
working  feveri^y  to  find  bet¬ 
ter  ways  to  bring  computers 
back  from  the  brink  of  disaster. 

The  researchers  are  seeking  a  fresh 
alternative  to  rebooting.  Thinking  back¬ 
ward.  they  reasoned  that  it  might  be  a 
good  idea  to  give  up  on  the  impossible 
iob  of  makii^  bug-free  software  and 
instead  look  for  ways  to  recover  from 


FUTURE 

WATCH 


failures  without  losing  data  or  time. 

That's  the  concept  behind  "recov¬ 
ery-oriented  computing."  a  180-degree 
turn  from  traditional  thinking.  Hie 
idea  is  that  since  software  can’t  be  cre¬ 
ated  without  crash-causing  flaws,  it 
should  be  built  to  relxiot  much  faster, 
allowing  users  to  get  back  to  work  al¬ 
most  instantly. 

“The  idea  is  pretty  simple: 
If  availability  is  the  fraction  of 
time  that  you're  up.  then  re¬ 
covering  fast  is  more  critical 
than  reducing  the  number  of  times 
that  crashes  happen,"  says  David  Pat¬ 
terson.  a  computer  science  professor  at 
UC  Berkeley. 

"In  the  dawn  of  computing,  people 
thought  software  bi^  would  go  away, 
and  they  haven't,  so  now  we  need  ways 


to  co-exist  with  them,"  he  says.  “I  think 
it's  a  fact  to  live  with  rather  than  a 
problem  to  be  solved." 

One  way  to  do  that  is  through  an 
evolving  technique  called  micro- 
rebooting.  which  quickly  reboots  just 
enough  of  the  program  processes  to 
get  the  system  stabilized  and  back  on 
track  for  the  user. 

A  micro-reboot  is  specific  to  one 
problematic  area  of  the  software’s 
code  and  doesn’t  affect  other  parts 
of  the  application,  so  data  in 
the  processii^  pipeline  is  un¬ 
affected  by  the  reboot. 

Led  by  Patterson  and  Ar¬ 
mando  Fox,  an  assistant  pro¬ 
fessor  of  computer  science  at 
Stanford,  the  project  began  in 
late  2000.  Patterson,  Fox  and  a 
team  of  graduate  students  had 
seen  evidence  that  systems  de¬ 
pendability  could  be  improved. 

Some  IT  systems  for  use  in 
avionics,  spacecraft  and  health 
care  were  ultradependable  be¬ 
cause  they  had  to  be,  but  they 
were  costly  and  complex,  and  that  kind 
of  reliability  was  impractical  for  typical 
IT  use.  Another  way  had  to  be  found. 

Heading  Off  a  Crash 

The  researchers  are  experimenting 
ivith  algorithms  that  watch  over  sys¬ 
tem  processes  and  sense  when  some¬ 
thing  has  gone  awry,  and  a  crash  is 
inuninent.  The  algorithms  focus  on 
determining  the  normal  baseline  oper¬ 
ations  of  applications,  and  when  they 
see  a  deviation  from  the  base¬ 
line,  the  system  can  quickly  do 
a  micro-reboot  without  the 
user  even  knowing  that  a  prob¬ 
lem  has  occurred. 

Keys  to  the  research  have 
been  isolating  the  faults  and 
providing  redundancy  so  the 
system  stays  alive  while  the  in¬ 
stant  recovery  takes  place.  The 
researchers  are  exploring  tech¬ 
niques  that  could  encourage 
software  and  hardware  designs 
that  drastically  improve  the 
“restartability"  of  programs 
and  devices. 

The  problem  with  the  traditional 
reboot  is  that  the  CTRL-ALT-DEL 
process  takes  too  long.  A  micro-reboot 
is  several  orders  of  magnitude  f^ter. 

Fox  says.  “It’s  not  guaranteed  to  fix  the 
problem,  but  it’s  guaranteed  not  to 
make  things  worse,  so  there’s  no  rea¬ 
son  not  to  try  it,"  he  says. 

The  researchers  have  been  using  the 
lava  2  Enterprise  Edition  application 
server  in  their  studies  because  it^  so 
widely  used  and  because,  as  open- 
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source  software,  it’s  readily  modifiable. 

J2EE  is  also  a  good  starting  point  for 
the  research  because  its  applications 
use  a  modular  design  structure  with 
clear  boundaries  between  software 
modules,  making  it  easier  to  stop  and 
reboot  one  process  within  a  part  of  the 
application. 

Tridde-Down  Technology 

While  I2EE-based  Internet  applica¬ 
tions  on  corporate  servers  have  been 
the  focus  of  this  research  so  far. 
Fox  says  the  technology  lAill 
trickle  down.  “Desktops  have 
so  much  performance  today, 
maybe  some  of  that  can  even¬ 
tually  be  traded  aw'ay  for  de¬ 
pendability."  he  says. 

But  challenges  remain. 
There’s  work  to  be  done  on 
other  microrecovery  methods.” 
explains  Fox.  “We’ve  identified 
a  way  that  we  can  work  togeth¬ 
er  with  people  who  use  statisti¬ 
cal  monitoring  algorithms."  but 
that  has  created  issues  with  the 
algorithms  and  security,  he  says. 

What  the  researchers  still  hope  to 
learn  is  exactly  what's  good  and  vriiat’s 
bad  in  I2EE  that  helps  to  solve  the  re¬ 
booting  problems.  Fox  says. 

Also  needed  is  a  body  of  research 
that  vrill  address  the  same  issues  in 
other  widely  used  computing  systems 
in  the  future. 

Micro-rebooting  could  be  built  into 
J2EE  application  server  software  with¬ 
in  the  next  two  to  three  years.  Fox  says. 
However,  “to  m^e  micro- 
rebooting  industrial-strength, 
obviously  there’s  still  more 
work  to  be  done,"  he  says. 

It  would  be  more  challeng¬ 
ing  to  include  micro-rebooting 
capabilities  in  large,  propri¬ 
etary  applications,  because  the 
applications  aren’t  modular¬ 
ized.  But  researchers  could 
certainly  woric  on  that  capabil¬ 
ity  for  ftiture  versions  of  the 
software.  Fox  says. 

The  ultimate  micro-reboot¬ 
ing  system  would  prophylacti- 
cally  go  through  your  PC  or 
server  and  reboot  it  frequently  in  the 
background,  refreshing  it  without 
causing  you  to  have  any  visible  fail¬ 
ures.  Patterson  says. 

Corporate  IT  is  beginning  to  accept 
the  idea  of  Cast,  automatic  rebooting, 
according  to  Fox.  "Now  you  don't  have 
to  convince  people  about  the  desirabil¬ 
ity  of  this,"  be  says.  “Now  they  under¬ 
stand  why  it’s  important  to  prevent 
crashes  on  their  corporate  IT  systems." 
OS0392 
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WHY  IBM? 

The  IBM  eServer'  xSeries’  family  with  Intel  Xeon 
Processor-based  Xtended  Design  Architecture  is 
the  next-generation  architecture  designed,  priced 
and  supported  for  businesses  of  every  size. 

Giving  you  unbelievably  high  performance  at  an 
unbelievably  low  price. 

The  entry-level  x226  is  the  most  affordable  xSeries 
system  in  the  2-way  space.  The  x236  offers 
maximum  internal  scalability  in  an  IBM  industry- 
standard  tower.  Our  x336  gives  you  new  levels  of 
performance  density  in  a  2-way  rack-mounted  system. 
And  the  x346  offers  exceptional  scalability  and 
flexible  growth  in  a  2U  system. 

Of  course,  all  of  these  systems  are  powered  by 
state-of-the-art  64-bit  Intel"  Xecn”  Processors, 

Now  let's  talk  about  storage  attachments  for  your 
eServer  xSeries  systems.  Let's  talk  IBM  TotalStorage' 
systems.  The  entry-level  DS300  is  for  businesses  of 
any  size.  Rack-ready,  it's  designed  to  let  you  pay  as 
you  grow.  The  very  hard  to  outgrow  DS400  is  xSeries 
storage  to  the  max.  Fast.  Expandable.  And  it  scales 
up  to  5.8  terabytes.*  Both  share  reliability  and  data 
protection  features  found  in  IBM  eServer  solutions. 

Now,  what  if  you're  a  mid-sized  business  with  little  or 
no  IT  staff?  Enter  the  IBM  Express  Portfolio.  All  of  the 
above  xSeries  and  storage  products  offer  Express 
models,  specifically  designed  and  optimized  for  mid¬ 
sized  businesses.  IBM  Express  offerings  are  easy  to 
configure.  Easy  to  install.  Easy  to  manage  And  easy 
on  the  checkbook. 

IBM  EXPRESS  PORTFOLIO  -  BUILT  FOR  MID-SIZEO  BUSINESSES 
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WHY  64-BIT? 

IBM's  innovations  are  ideal  complements  for  64-bit 
Intel  Xeon  Processors;  light  path  diagnostics: 
Calibrated  Vectored  Cooling;  remote  monitoring; 

8  DIMM  slots.  We've  got  it  all. 

IBM  eServer  xSeries  systems  are  cost-effective  by 
almost  every  measure  of  TCO.  And  almost  every 
measure  of  ROI.  They  fit  in  standard  racks  and  are 
easily  scalable. 

Our  new  Xtended  Design  Architecture  works  with 
your  32-bit  industry-standard  apps.  And  your  new 
64-bit  industry-standard  apps.  And  those  32-bit 
and  64-bit  apps  that  are  still  on  the  drawing  board. 

WHY  NOW? 

This  is  the  future.  This  Is  where  developers  are  going. 
Where  the  industry  standard  is  forming.  Where 
business  is  headed. 

The  transition  is  well  under  way.  Above  all.  64-bit 
is  stable.  It’s  reliable.  It's  powerful.  It's  fast.  It’s  here. 
And  we’re  paving  the  way. 

Every  64-bit-enabled  xSeries  server  is  designed  to 
have  more  memory,  which  allows  you  to  run  more 
powerful  apps.  And  if  you’re  reticent  about  making 
the  move  to  64-bit.  relax.  Xtended  Design 
Architecture  actually  enhances  your  32-bit  apps.  so 
you  can  do  more  with  what  you  already  have.  Do 
more  now.  Do  more  later.  Do  more  period  with  64-bit 
Intel  Xeon  Processors  and  IBM  Xtended  Design 
Architecture. 

These  servers  and  storage  units  are  designed  with 
one  thing  in  mind -you.  It’s  an  exciting  story.  You 
need  to  learn  more  at  lbin.coin/eserver/64reasons 
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Grooves  Ray  Ozzie  says 
his  mission  is  to  make 
computers  more  efFccth'c 
communication  tools. 


■  As  the  creator  and  chief  developer  of 
Lotus  M>ees,  Rair  Onto  is  responsible 
for  puttirtg  groupware/ioUaboration 
software  ort  the  map,  with  more  rbon 
iOO  mUlion  people  around  the  globe 
using  Notes. 

Ozzk  is  the  founder  and  CEO  of 
Groove  Networks  Inc.,  which  mokes 
collaborarton  software.  Prior  to  bis 
work  on  Lotus  Notes,  when  be  was  pres* 
ident  of  Iris  Associates,  Ozzie  was  instrumental  in  the 
development  of  Lotus  Symphony  and  Software  Arts’ 
TK  Solver  and  VisiCak. 

In  a  recent  interview  with  Computerworld’s  Tomir^ 
Peterson,  Ozzie  talked  about  wbot  drives  his  interest  in 
technoipgy-/adikared  coUoboration  and  its  relation¬ 
ship  to  the  changing  nature  cf  business. 

^bu’ra  Imnui  tor  Lota  NoIm,  Md  yw  dHGTftt  Sreow  M  a 
l09icri  adniton  of  your  Mtfc  to  ooliborMtoii.  Why  dm  Mi 
ptrlkuM  inWot  to  oomuMs  toidnito  you?  My  base 
personality  characteristics  are  reladv^  introverted, 
so  die  concept  of  me  etqiending  a  career  doing  stuff 
that  helps  people  communicate  more  effectively  is 
land  of  ironic.  In  PIATO.  a  computer*based  educa* 
tion  system,  I  was  a  systems  programmer.  I  was  for* 
nutate  enou^  to  be  exposed  to  eariy  versons  —  this 
was  the  70s  of  e*inail  and  online  group  discus* 
sions  and  interactive  chat  tike  IM. 

There  was  one  person  1  communicated  with  on  a 
software  project;  he  was  actually  the  proiect  lead.  I 
dealt  with  him  in  dtat  a  lot.  and  be  was  a  very,  very 
slow  typist  The  chat  oo  PLATO  was  a  gharartgr  at 
a  time  —  you’d  see  them  typing  as  of^tosed  seeing  a 
line  at  a  time,  ft  lust  drove  me  nuts. 

After  some  number  of  mondis,  I  finally  met  the  guy, 
and  he's  a  quadriplegic.  He  was  typing  v4th  a  stick. 

And  if  there  was  a  erysfalltm^  fiyvfTien*  lor  me,  that 
was  probably  it  ft  became  really  ^>parent  that  reaDy  I 
was  working  with  someone's  mind  as  opposed  to  any¬ 
thing  else  about  them. 


The  not  stop  in  yow  caraar  WK  a  iob  with  Data  Oanaral  do¬ 
ing  data  pmcmingsyilMiB.  How  dm  that  III  in?  I  went  to 
work  at  Data  General,  (and}  1  was  shocked  because  I 
had  spent  years  working  in  this  online  community  en¬ 
vironment  dealing  with  pec^le  and  using  the  comput¬ 
er  as  a  communication  tooL 
And  then  we  came  out  here  to  ’’super  mini  land." 
or  whatever  it  was  at  the  time,  and  it  was  still  data 
processing.  At  that  point  in  time,  I  and  a  number  of 
us  who  bad  been  eiqposed  to  PLATO  basically  said. 
"Look,  we've  got  to  re-create  that  environment. 

V/e've  lived  this  online  community  life:  we've  got 
to  figure  out  a  way  to  re-create  thk" 

How  long  dU  It  toko  you  to  find  a  way  to  do  that?  Several 
years  went  by  before  I  was  actually  able  to  start 
putting  the  plans  together  in  «4iat  actually  became 
Lotus  Notes.  It  was  no  coincidence  that  Lotus  Notes 
was  called  Notes,  because  the  PLATO  discussions 
were  called  Group  Notes,  the  PLATO  e-mail  was 


called  personal  notes.  We  were  just  trying  to  re¬ 
create  a  feel  I  didn't  really  undn^and  the  nature  of 
business  or  the  nature  of  bow  things  really  woiked. 
aside  from  Data  General  but  1  knew  that  it  was  very 
effective  in  the  environment  I  was  at  for  development 
and  for  ocher  profects  that  5>eople  were  doing  —  why 
couldn't  that  translate  into  a  business  environment? 

As  I  started  to  build  it  —  and  this  was  the  mid-‘80s 
—  I  started  to  connect  more  xvith  the  potential  cus¬ 
tomer  for  this  thii^  and  decided  yes,  there  is  need 
for  this.  This  was  the  "re-engineering  the  corpora¬ 
tion"  era.  1  think  our  goal,  if  there  was  a  goal,  was  to 
utilize  technology  to  enable  people  within  an  organi¬ 
zation  to  work  together  effectively  across  group 
boundaries. 

And  new,  with  Gnovt,  your  akn  is  to  mm  beyond  on  organi* 

zation’s  boundartos?  That’s  exactly  right  Notes  was 
rignificant  because  of  the  changing  nature  of  the  or¬ 
ganization  as  defined  at  the  time  by  Michael  Ham¬ 
mer  and  others  re-engir>eering  the  corporation. 

When  we  started  Groove  in  '97,  it  was  largely  based 
on  a  viewpoint  that  the  future  of  business  was 
changing  not  just  the  organization,  but  that  business 
itself  was  restructuring  from  big,  vertically'  oriented 
corporations.  It  was  becoming  more  of  a  mesh  of 
companies  tiueracting  with  one  another.  This  was 
based  on  my  experience  of  what  people  were  trying 
to  use  Notes  for  and  were  having  a  h^  riiw  doir^ 
in  terms  of  deploying  Notes  across  organizational 
boundaries. 

So  Groove  was  based  on  the  fundamentally  chang¬ 
ing  nature  of  business.  Essentially,  what  we've 
learned  in  the  past  few  years  of  people  using  Groove 
IS  that  it's  not  just  the  nature  of  business  that’s 
changing;  it’s  the  nature  of  work  itself  that’s  chang¬ 
ing.  You're  working  with  multiple  companies,  and 
you're  working  with  people  in  a  geognqihically  dis¬ 
tributed  manner.  You're  working  at  borne  and  in  the 
workplace.  The  trend  of  decentralization  dut  Notes 
started  within  the  corporation  is  moving  between 
coiporaboas,  and  ix>w  it's  touching  individuals. 

WlMt’s  the  ipaoMc  pain  you're  ftykn  to  MM  for  OMTS  now? 
As  was  the  case  with  Notes,  a  lot  of  udiat  we've  had 
to  build  up  with  Groove  to  make  it  more  useful  is 
infrastructural  —  getting  the  security,  the  systems 
management,  a  lot  of  the  things  in  the  base  infra¬ 
structure  up  to  the  level  they’re  at  has  consumed  a 
lot  resources.  What  really  inakes  Groove  valuable  to 
businesses  is  how  quickly  they  can  adr^  it  to  their 
business  processes,  the  way  chat  they  work. 

The  tfa^  that  makes  it  useful  to  an  individual  is 
bow  much  &ey  can  integrate  it  into  their  woik  en¬ 
vironment  —  it's  true  of  both  businesses  and  indi¬ 
viduals.  A  lot  of  what  you  see  us  doing  is  working  in 
die  area  of  our  forms  package  and  working  on  our 
integration  to  different  back-end  systems  sudi  as 
Siebel  SAP  and  PeopleSoft,  Oracle  ttataha«i»y  _ 
things  people  have  already  made  investments  in. 

The  qidcker  we  can 
integrate  with  diose 
business  processes,  the 
quicker  we  can  return 
value  to  corporations. 
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( inxn  os  Ray  0//ic  sa\  s 
his  mission  i.sti)  make 
computers  more  efteeiix  e 
eommunieation  tools. 


the  creator  and  chief  developer  of 
Lotas  Notes,  Ray  Ozzie  is  re^nsihie 
I  for  putting  groupware/collaboration 
software  on  the  map,  with  more  than 
100  million  people  around  the  globe 
using  Notes. 

Ozzie  is  the  founder  and  CEO  of 
Groove  Networks /nc^  wWch  makes 
so./hvare. Prior fo his 
^  work  on  lotus  Notes,  when  he  Hm  pres¬ 
ident  of  Iris  Associates.  Ozzie  was  instrumental  in  the 
development  of  Lotus  Symphony  and  Software  Arts' 
TK  Solver  and  VisiCoic. 

In  a  recent  interview  with  Computerworld's  Tommy 
Peterson,  Ozzie  talked  about  what  drives  his  interest  in 
technology-facilitated  collaboration  and  its  relation¬ 
ship  to  the  changing  nature  of  business. 

Viw’ra  faiTKMS  for  Uilus  Notes,  and  you  describe  Groove  as  a 
fogical  extensfot)  of  your  worit  fo  colaboratiotL  Why  does  this 
particutar  probfom  in  computing  fascinate  you?  My  base 
personality  characteristics  are  relatively  introverted, 
so  the  concept  of  me  expending  a  career  doing  stuff 
that  helps  people  communicate  more  effectively  is 
kind  of  ironic.  In  PLATO,  a  computer-based  educa¬ 
tion  system.  I  was  a  systems  programmer.  I  was  for- 
txmate  enough  to  be  exposed  to  early  versions  —  this 
was  the  70s  —  of  e-mail  and  online  group  discus¬ 
sions  and  interactive  chat  like  IM. 

There  was  one  person  I  communicated  with  on  a 
software  profect;  he  was  actually  the  project  lead.  I 
dealt  with  him  in  chat  a  lot.  and  he  was  a  very,  very 
slow  typist.  The  chat  on  PLATO  was  a  character  at 
a  time  —  you’d  see  them  typing  as  opposed  seeing  a 
line  at  a  time.  It  just  drove  me  nuts. 

After  some  number  of  months,  1  finally  met  the  guy. 
and  he's  a  quadriplegic.  He  was  typing  with  a  stick. 

And  if  there  was  a  crystallizing  moment  for  me,  that 
was  probably  it  It  became  really  apparent  that  really  I 
was  working  with  someone's  mind  as  opposed  to  any¬ 
thing  else  about  them. 


The  next  step  in  your  career  was  a  job  with  Data  OeneraJ  do¬ 
ing  data  processing  systems.  How  does  that  fit  m?  I  went  to 
work  at  Data  General,  land]  1  was  shocked  because  I 
had  spent  years  working  in  this  online  community  en¬ 
vironment  dealing  with  people  and  using  the  comput¬ 
er  as  a  communication  tool. 

And  then  we  came  out  here  to  “super  mini  land." 

^  or  whatever  it  was  at  the  time,  and  it  was  still  data 
processing.  At  that  point  in  time.  1  and  a  number  of 
us  who  had  been  exposed  to  PLATO  basically  said. 
“Look,  we’ve  got  to  re-create  that  environment. 

We’ve  lived  this  online  community  life;  we've  got 
to  figure  out  a  way  to  rc-create  this." 

How  long  did  it  take  you  to  find  a  way  to  do  that?  Several 
years  went  by  before  1  was  actually  able  to  start 
putting  the  plans  together  in  what  actually  became 
Lotus  Notes.  It  was  no  coincidence  that  Lotus  Notes 
was  called  Notes,  because  the  PLATO  discussions 
were  called  Group  Notes,  the  PLATO  e-mail  was 


I  called  personal  notes.  We  were  just  trying  to  re- 
J  create  a  feel.  I  didn't  really  understand  the  nature  of 
I  business  or  the  nature  of  how  things  really  worked, 
i  aside  from  Data  General,  but  I  knew  that  it  was  very 
etTeaivc  in  the  environment  I  was  at  for  development 
I  and  for  other  projects  that  people  were  doing  —  why 
,  couldn't  that  translate  into  a  business  envirunment? 

I  .As  1  started  to  build  it  —  and  this  was  the  mid-'80s 
—  I  started  to  connect  more  with  the  potential  cus- 
I  tomer  for  this  thing  and  decided  yes.  there  is  need 
for  this.  This  was  the  “re-engineering  the  corp«»rj- 
tion"  era.  I  think  our  goal,  if  there  was  a  goal.  to 

utilize  technology'  to  enable  people  within  an  organi- 
zatit)n  to  work  u>gethcr  effectively  acr»»ss  gn>up 
boundaries. 

And  now.  with  Groove,  your  aim  is  to  move  beyond  an  orgaie* 
zation’s  boundaries?  That's  e.vactly  right.  Notes  was 
significant  because  of  the  changing  nature  of  the  or¬ 
ganization  as  defined  at  the  time  by  Michael  Ham¬ 
mer  and  others  re-engineering  the  airporation. 

When  we  started  Groove  in  *97.  it  wa.s  largely  based 
on  a  viewpoint  that  the  nature  of  business  was 
changit^  not  just  the  organization,  but  that  business 
itself  was  restructuring  from  big.  vertically  oriemed 
corporations.  It  was  becoming  more  of  a  mesh  of 
companies  intcractii^  w  Ith  one  another.  This  was 
based  on  my  e.vpiTience  of  what  people  were  trying 
to  use  Notes  for  and  were  having  a  Imd  time  doing, 
in  terms  of  deploying  Notes  across  organizational 
boundaries. 

So  Grotn  e  was  based  on  the  fundamentally  chang¬ 
ing  nature  of  business.  Essentially,  what  we've 
learned  in  the  past  few  years  of  people  using  Grtwve 
is  that  it's  not  just  the  nature  of  business  that's 
changing:  it's  the  nature  of  work  itself  that's  chang¬ 
ing.  You’re  working  with  multiple  companies,  and 
you’re  woricing  with  people  in  a  geographically  dis¬ 
tributed  manner.  You're  working  at  home  and  in  the 
workplace.  The  trend  of  decentralization  that  Notes 
started  within  the  corporation  is  moving  between 
corporations,  and  now  it's  touching  individuals. 

Mfiut’s  the  specific  pain  you're  trying  to  ease  for  users  now? 
As  was  the  case  with  Notes,  a  lot  of  what  we've  had 
to  build  up  with  Groove  to  make  it  more  useful  is 
infrastnictural  —  gening  the  security,  the  systems 
management,  a  lot  of  the  things  in  the  base  infra¬ 
structure  up  to  the  level  they're  at  has  consumed  a 
lot  resources.  What  really  makes  Groove  valuable  to 
businesses  is  how  quickly  they  can  adapt  it  to  their 
business  processes,  the  way  that  they  work. 

The  thing  that  makes  it  useful  to  an  individual  is 
how  much  they  can  integrate  it  into  their  work  en¬ 
vironment  —  it’s  true  of  both  businesses  and  indi¬ 
viduals.  A  lot  of  what  you  see  us  doing  is  working  in 
the  area  of  our  forms  package  and  working  on  our 
integration  to  different  back-end  systems  such  as 
Siebel  SAP  and  PeopleSoft.  Oracle  databases  — 
things  people  have  Steady  made  investments  in. 

The  quicker  we  can  p 


integrate  with  those 
business  processes,  the 
quicker  we  can  return 
value  to  corporations. 
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Taking  the  Leap  to 
for  Wireless 


Access  points  are  proliferating,  but  there 
still  are  no  fonnal  policies  or  standards  in 
place.  Someone  has  to  keep  an  eye  on 
things.  By  Mathias  Thurman 


Irs5TR.ANf.t  Our  company 
has  yet  to  embrace  wireless 
as  a  global  deployment,  yet 
ever)  couple  of  months, 
the  number  of  access  points 
seems  to  double. 

The  other  das;  1  received  a 
call  from  one  of  the  lab  man¬ 
agers.  He  wanted  to  deploy-  a 
bar  code  system  for  asset 
tracking.  The  bar  code  reader 

would  transmit  infor-  _ 

mation  via  Bluetooth 
to  a  Hewlett-Packard 
iPaq,  which  has  a 
built-in  wireless  card 
He  wanted  to  deploy 
several  access  points 

so  that  the  iPaq  could  - 

communicate  asset  tag  data  in 
real  time  to  a  back-end  data¬ 
base  residing  on  our  corporate 
network. 

Another  call  came  from  one 
of  our  bncfing  centers,  where 
the  manager  wanted  some  ac¬ 
cess  points  so  that  visitors 
could  check  their  e-mail,  make 
airline  reservations,  print  itin¬ 
eraries  or  do  general  Internet 
browsing.  I  al^  found  out  that 
upper  management  has  ap- 
pnwed  the  installation  of  ac¬ 
cess  points  for  every  new  fa¬ 
cility  that  comes  online.  Thai's 
a  lot  of  access  points,  since 
wc'n*  expanding  in  India.  Sin¬ 
gapore  and  China,  and  we've 
added  olTIccs  in  Virginia  and 
other  locaiions- 
But  despite  this  gruuih  in 
wireless  use.  we  still  have  no 
formal  policies  for  wireless 
deployment  or  a  project  man¬ 
ager  to  oversee  the  spread  of 
access  points.  Instead,  net¬ 
work  engineering  and  1  arc 
driving  the  entire  proces.s. 

Last  week,  we  decided  to 
abandon  our  Cisco  LEAP  im¬ 
plementation  because  of  per- 
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ecived  vulnerabilities  in  the 
way  that  protocol  handles 
passwords.  Unless  a  strong 
password  is  used,  hackers  can 
easily  compromise  the  wire¬ 
less  connection  and  gain  ac¬ 
cess  to  our  network.  And  hav¬ 
ing  concluded  that  no  matter 
what  we  chose  there  would 
probably  be  an  exploit  or  pub¬ 
lished  vulnerability  at  some 

-  point,  we  decided  to 

deploy  two-factor 
authentication  to 
force  people  to  use 
an  RSA  SccurlD 
token  before  they- 
can  associate  to  an 
access  point.  Our 
hope  is  that  even  if  a  particu¬ 
lar  protocol  becomes  compro¬ 
mised.  the  two-factor  authen¬ 
tication  process  will  continue 
to  protect  us. 

We  explored  several  options 
and  found  that  the  only  way  to 
nuke  use  of  our  existing  de¬ 
ployment  of  RSA  SecurlD  to¬ 
kens  while  getting  two- factor 
authentication  was  to  deploy 
PEAP.  PEAP.  which  stands  for 
Protected  Extensible  Authen¬ 
tication  Protocol,  was  dcvcl- 


There  are  still  some 
issues  to  work  out, 
but  I  think  that  at  the 
end  of  the  day,  well 
haveawoildng 
RSASecuriD- 
protected  wireless 
infrastructure. 


oped  jointly  by  Microsoft. 

RSA  Security  and  Cisco  for 
transmitting  authentication 
data,  including  pas.swords. 
over  wireless  nets.  What  sets 
PEAP  apart  from  LEAP  is  that 
communications  between  the 
wireless  client  and  the  authen¬ 
tication  server  (Cisco  ACS) 
arc  tunneled.  With  LEAP,  the 
authentication  information  is 
pas.sed  in  clear  text.  With 
PEAP,  the  authentication  data 
is  transmitted  after  the  en¬ 
crypted  tunnel  is  created. 

Working  Things  Out 

We  had  a  little  trouble  at  first. 
Our  users  have  Dell  laptops 
that  come  with  built-in  wire¬ 
less  cards  and  client  soffrs'arc 
called  Del!  TruMobilc  that's 
used  to  control  the  cards.  The 
client  has  to  generate  a  digital 
ceniflcaie  to  facilitate  the  tun¬ 
neling.  and  it  has  to  be  com¬ 
patible  with  Cisco  Compatible 
Extensions  Version  2  so  it  can 
interoperate  with  Cisco's  ver¬ 
sion  of  PEAP. 

The  Dell  TruMobilc  diem 
is  supposed  to  be  compatible 
with  (5cE-2.  but  the  implemen¬ 
tation  wasn’t  very  straightfor¬ 
ward.  and  documentation  was 
lacking.  After  a  lot  of  effort, 
we  were  able  to  get  the  Dell 
laptops  to  work  with  the  Cisco 
access  points  and  prompt  us 
for  a  SecurlD  token  code. 

There  are  still  some  issues 
to  work  out.  but  1  think  that  at 
the  end  of  the  day,  we'll  have 
a  working  RSA  SecurlD-pro- 
tected  wireless  infrastructure. 

One  thing  that  the  vendors 
arc  still  trying  to  help  us  re¬ 
solve  is  a  60-to-W-second  lag 
before  the  SecurlD  dialogue 
box  comes  up:  that's  just  too 
long  for  employees  to  wait. 

One  cool  aspect  of  our  de¬ 
ployment  is  that  we'll  be  u.<iing 
virtual  LAN  tagging  to  segre¬ 
gate  various  levels  of  access  to  I 
our  wireless  infrastructure.  I 
This  means  we  don't  have  to  ! 


buy  and  install  separate  access 
points  for  SecurlD-protected 
employees,  who  need  access 
to  our  internal  network,  and 
for  guests,  who  will  be  al¬ 
lowed  access  only  to  external 
Internet  resources.  With 
VLANs  (also  called  802.1Q 
networks),  we  can  configure 
two  separate  networks,  each 
with  its  own  wireless  Service 
Set  Identifier  (a  sequence  of 
characters  that  uniquely  iden¬ 
tifies  a  wireless  LAN)  for  as¬ 
sociating  to  the  access  point. 

For  example,  an  employee 
using  an  SSID  of.  say.  ‘'emp" 
will  be  prompted  to  provide  a 
SecurlD  token  before  being  al¬ 
lowed  to  associate  to  the  ac¬ 
cess  point  and  gain  access  to 
internal  corporate  resources 
.such  as  Exchange  mail,  .shared 
folders,  the  company  intranet 
and  human  rc.sources  sites. 
Meanwhile,  a  guest  using 
an  SSID  of  “guest"  won't  be 
prompted  for  a  SecurlD  token 
in  order  to  get  to  the  Internet. 
The  employee  and  the  guest 
are  connected  to  the  same  ac¬ 
cess  point,  but  the  difierent 
SSIDs  they  use  to  do  so  give 
them  different  access  rights. 

Best  of  all,  Cisco  will  let  us 
use  VLAN  tagging  to  create  as 
many  as  16  separate  VLANs. 
That  gives  us  a  lot  of  flexibili¬ 
ty  in  the  way  we  provision 
wireless  networks  for  the 
enterprise. 

To  help  out  that  lab  man¬ 
ager  who  wants  to  do  asset 
tracking,  we'll  probably  create 
a  third  VLAN  that  will  be  ac¬ 
cessible  from  the  asset-track¬ 
ing  HP  iPaqs.  perhaps  with  an 
SSID  of  “track." 

To  manage  all  these  access 
points,  SSIDs  and  VLANs, 
we’ll  continue  to  use  the  Cisco 
Wireless  LAN  Solutions  En¬ 
gine.  since  we  can  also  use  it 
in  our  continuing  efforts  to 
detect  rogue  access  points.  111 
talk  more  about  that  in  a  fu¬ 
ture  installment.  I 


WHAT  DO  YOU  THINK? 

This  week's  purnal  5  wnoen  by  a  real 
security  manager.  liAathias  ThurTnan." 
whose  name  and  employer  tave  been 
disgueed  lor  obvious  ressons  Contact  him 
at  malhias.thijrTnan^hoo.com.  or  tom  the 
dis^ion  m  our  lomm;  Quictlink  a1S90 
To  knd  a  coffldeie  ardHve  ol  our 
Security  Manx's  Journal!  go  online  to 
C  computerworM.cont/uciownal 
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TECHWIMY 


Taking  the  Leap  to 
[or  Wireless 


Access  points  are  proliferating,  but  there 
sti  are  no  fornial  poficies  or  standards  in 
place.  Someone  haK  to  keep  an  eye  on 
things.  By  Mathias  Thunnan 


ITS  STRANGE.  Ouf  Company 
has  yet  to  embrace  wireless 
as  a  global  deployment,  yet 
every  couple  of  months, 
the  number  of  access  points 
seems  to  double. 

The  other  day.  I  received  a 
call  CttMn  one  of  the  lab  man¬ 
agers.  He  wanted  to  deploy  a 
bv  code  system  for  asset 
tracking.  The  bar  code  reader 

would  transmit  infer-  _ 

matioo  via  Bluetooth 
to  a  Hewlett-Packard 
iPaq,  which  has  a  yiMI^raT 
built-in  wireless  card  IMfljKK  U 
He  wanted  to  deploy  JMM||y  ^ 
several  access  points 
so  that  the  iPaq  could 


communicate  asset  tag  data  in 
real  time  to  a  back-end  data¬ 
base  residing  on  our  corporate 
network. 

Another  call  came  from  one 
of  our  briefu^  centers,  where 
the  manager  wanted  some  ac¬ 
cess  points  so  that  visitors 
could  check  their  e-mail,  make 
airline  reservatioos,  print  itin¬ 
eraries  or  do  general  Internet 
browsing.  I  also  found  out  that 
upper  management  has  ap¬ 
proved  the  installation  of  ac¬ 
cess  points  for  every  new  fa¬ 
cility  that  comes  online.  That's 
a  lot  of  access  points,  since 
we're  expanding  in  India,  Sin¬ 
gapore  and  China,  and  we've 
added  offices  in  Virginia  and 
other  locations. 

But  despite  this  growth  in 
wireless  use.  we  still  have  no 
formal  policies  for  wireless 
deployment  or  a  project  man¬ 
ager  to  oversee  the  ^read  of 
access  points.  Instead,  net¬ 
work  engineering  and  I  are 
driving  Che  entire  process. 

Last  week,  we  decided  to 
abandon  our  Cisco  LEAP  im- 
plementaciofi  because  of  per¬ 


ceived  vulnerabilities  in  the 
way  that  protocol  handles 
passwords.  Unless  a  strong 
password  Is  used,  hackers  can 
easily  compromise  the  wire¬ 
less  conneetkm  and  gain  ac¬ 
cess  to  our  network.  And  hav¬ 
ing  concluded  that  no  matter 
what  we  chose  there  would 
probably  be  an  exploit  or  pub¬ 
lished  vulnerability  at  some 

_  point,  we  decided  to 

deploy  two-iactor 
authentication  to 
force  people  to  use 
anRSASecurlD 
token  before  they 
can  associate  to  an 
access  point  Our 


hope  is  that  even  if  apaiticu- 
lar  protocol  becomes  compro¬ 
mised,  the  two-&ctor  autb^- 
ticadon  process  will  continue 
to  protect  us. 

We  explored  several  options 
and  found  that  the  only  way  to 
make  use  of  our  existing  d^ 
pioyment  of  RSA  SecurlD  to¬ 
kens  while  getting  two-foctor 
authentication  was  to  deploy 
PEAP.  PEAP,  which  stands  for 
Protected  Extensible  Authen¬ 
tication  Protocol,  was  devel- 


There  are  sti  some 
issues  to  work  out, 
but  I  think  that  at  the 
end  of  the  day,  wel 
hamawori^ 
RSASeculD- 
protectedvmiess 
kiftasIniGture. 


oped  jointly  by  Microsoft, 

RSA  Security  and  Cisco  for 
transmitting  autbenticadoo 
data,  including  passwords, 
over  wireless  nets.  What  sets 
PEAP  apart  from  LEAP  is  that 
communications  between  the 
wireless  client  and  the  authen- 
ticadon  server  (Cisco  ACS) 
are  mnneled.  With  LEAP,  the 
autbendcadon  information  is 
passed  in  clear  text  With 
PEAP,  the  authentication  data 
is  transmitted  after  the  en¬ 
crypted  tunnel  is  created. 

Worfdng  Things  Out 

We  had  a  little  trouble  at  first. 
Our  users  have  Dell  laptops 
that  come  with  built-in  wire¬ 
less  cards  and  client  software 
called  Dell  ThiMobile  that’s 
used  to  control  the  cards.  The 
client  has  to  generate  a  digital 
certificate  to  facilitate  the  tun¬ 
neling,  and  it  has  to  be  com¬ 
patible  with  Cisco  Compatible 
Extensions  Version  2  so  it  can 
interoperate  with  Cisco's  ver- 
siooofPEAP. 

The  Dell  ThiMobile  client 
is  supposed  to  be  compatible 
with  CCE-2,  but  the  implemen¬ 
tation  wasn't  very  straightfor¬ 
ward,  and  documentation  was 
lacking.  After  a  lot  of  effort, 
we  were  able  to  get  the  Dell 
laptops  to  work  with  the  Cisco 
access  points  and  prompt  us 
for  a  SecurlD  token  code. 

There  are  still  some  issues 
to  work  out,  but  I  think  that  at 
the  etui  of  the  day,  well  have 
a  working  RSA  SecurlD-pro- 
tected  wireless  infrastructure. 

One  thing  that  the  vendors 
are  still  trying  to  help  us  re¬ 
solve  is  a  60-to-90-second  lag 
before  the  SecurlD  dialogue 
box  comes  up:  that's  just  too 
long  for  employees  to  watt 
One  cool  aspect  of  our  de¬ 
ployment  is  that  well  be  using 
virtual  LAN  tagging  to  segre¬ 
gate  various  levels  of  access  to 
our  wireless  infrastructure. 

This  means  we  don't  have  to 


buy  and  install  separate  access 
points  for  SecurlD-protected 
employees,  who  need  access 
to  our  interna]  network,  and 
for  guests,  who  will  be  al¬ 
lowed  access  only  to  external 
Internet  resources.  With 
VLANs  (also  called  802.1(^ 
networks),  we  can  configure 
two  separate  networks,  each 
with  its  own  wireless  Service 
Set  Identifier  (a  sequence  of 
characters  that  uniquely  iden¬ 
tifies  a  wireless  LAN)  for  as¬ 
sociating  to  the  access  point 
For  example,  an  employee 
using  an  SSID  oC  say.  ‘‘emp" 
will  be  prompted  to  provide  a 
SecurlD  token  before  being  al¬ 
lowed  to  associate  to  the  ac¬ 
cess  point  and  gain  access  to 
internal  corporate  resources 
such  as  Exchange  mail,  shared 
folders,  the  company  intranet 
and  human  resources  sites. 
Meanwhile,  a  guest  using 
an  SSID  of  "guest”  won't  be 
prompted  for  a  SecurlD  token 
in  order  to  get  to  the  Internet 
The  employee  and  the  guest 
are  connected  to  the  same  ac¬ 
cess  point,  but  the  different 
SSIDs  they  use  to  do  so  give 
them  (hfierent  access  rights. 

Best  of  aU,  Cisco  will  let  us 
use  VLAN  tagging  to  create  as 
many  as  16  separate  VLANs. 
That  gives  us  a  lot  of  flexibili¬ 
ty  in  the  way  we  provision 
wireless  networiu  for  the 
enterprise. 

To  help  out  that  lab  man¬ 
ager  who  wants  to  do  asset 
tracking,  well  probably  create 
a  third  VLAN  that  will  be  ac¬ 
cessible  from  the  asset-track¬ 
ing  HP  iPat^  pertu^  with  an 
SSID  of  “track." 

To  manage  all  these  access 
points,  SSIDs  and  VLANs, 
we’U  continue  to  use  the  Cisco 
Wireless  LAN  Solutions  En¬ 
gine.  since  we  can  also  use  it 
in  our  continuing  efforts  to 
detect  rogue  access  points.  ni 
talk  more  about  that  in  a  fu¬ 
ture  installment.  I 
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Even  if  everyone  knew  about  the  problem,  would  anyone  know  the  solution? 


As  every  aspect  of  business  migrates  to  the  Web,  sensitive  infer-  gets  access  from  where  and  when,  that  can  actually  identify  and  fil- 
mation  once  sheltered  Is  now  exposed.  Because  browser-based  ter  application-level  cyber  attacks. 

applications  pass  through  the  entire  security  perimeter.  It's  application  traffic  management  taken  to  the  next  level. 

If  that  doesn't  wrinkle  your  brow,  in  a  recent  study  70  percent  of  Something  that  could  only  have  come  from  a  deep  understanding 

companies  reported  security  intrusions,  with  an  average  of  136  annually.  of  both  the  network  and  the  application.  Which  is  why  only  F5  can 
The  only  real  answer  is  a  solution  that  knows  exactly  what  your  offer  it.  For  details  on  this  revolutionary  architecture,  including 

application's  traffic  should  look  like,  and  blocks  everything  else.  our  TrafficShield'"  Application  Firewall  and  FirePass*  SSL  VPN, 

A  comprehensive  solution  that  gives  you  complete  control  over  who  visit  www.f5.com/cwdoc  or  call  800-916-7166 
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Dell  to  Offer  New 
PowerEdge  Server 

Dell  Inc.  is  expected  this  week 
to  announce  the  PowerEdge 
SC142S  server,  a  1U  (l-TS-in. 
high)  device  designed  for  high- 
performance  supercomputing 
chjsters  or  disiritHited  server- 
farm  environments.  Dell  win  offer 
the  new  server  m  bundles  ranging 
from  eight  nodes  to  2S6  nodes 
running  Red  Hat  Enterprise  Unua 
3.  Pricing  begins  at  S33.500  for 
an  erght-node  cluster. 

Exabyte  Announces 
Tape  Autoloader 

Exabyte  Corp.  in  Boulder,  Colo., 
thfe  week  announced  its  new 
Magnum  LTO  (Bnear  tape  open) 
Autoloeder.  a  2U  racfc-mountable 
system  that  comes  with  orre 
LT0*2  drive  and  seven  car^idge 
slots  and  provides  data  transfer  ' 
speeds  of  up  to  tS7G8  par  hour 
and  1.4TB  native  capacity.  The 
autoloadar  is  avaiabfe  now  and 
sels  for  about  $4,999  retail. 

ScanSoft  Releases 
Voice*to-Text  App 

ScanSoft  Inc.  has  announced 
Version  8  of  its  Dragon  Naturally- 
Speaking  voice-recognition  soft¬ 
ware.  The  new  relaase  features 
improved  accuracy  in  voice-to- 
laxt  conversions,  converts  speech 
into  toxt  at  a  rate  of  up  to  160 
words  pM^  minute  and  lets  users 
control  PCs  using  spoken  words, 
according  to  the  Paabody.  Mass.*  ' 
based  company.  Prices  range 
from  $99  to  $795. 

OpenBSO  Unveils 
v3.6  of  Its  Free  OS 

OponBSO  3  J  can  be  downloaded 
for  free  at  wwwuyiMbsdLon^  The 
newest  version  of  the  Unli-Rks 
operating  system  indudeesym-  | 
metric  mufopfocessing  support  I 
for  0pon6S0/>386  and  Opf^  ' 
BSIVAMOM  hxkm  vd  an 
knpnrved  Dynande  Hoet  Configu-  | 
ration  ^olecd  sarver.  OpanBSO 
3.8  is  afeo  avaiabfe  on  tfireo  CO-  j 
ROMsfor$45.  ! 


CUIM'  A.  MONASfl 


Playing  Catch-up  on 
AnMytic  Technology 


Analytic  technology  is  on  the  rise. 

Business  intelligence  software  expendi¬ 
tures  are  a  growing  share  of  the  IT  budget. 
Data  collection  and  storage  costs  are  in¬ 
creasingly  driven  by  analytic  uses.  DBMS 
and  enterprise  application  vendors  are  focusing  their 
product  differentiation  efforts  largely  on  analytics. 

Few  ur)iuiniza(ii)ns.  how¬ 
ever.  are  doing  a  greaf  job  of 
planning  for  ihe  blossoming 


ofanalyiic  technology.  True, 
m.iny  enterprises  have  a  fair¬ 
ly  careful  design  for  the  un¬ 
derlying  data  warehousing. 

But  in  most  shops,  depan- 
mcntal  Bl  applications  and 
analytic  applications  arc  in¬ 
stalled  almost  willy-nilly. 

It’s  lime  to  take  a  more  se¬ 
rious  approach  to  analytic  IT 
strategic  planning,  and  not 
ju.st  because  analytics  repre¬ 
sent  a  bigger  part  of  your  budget.  Ana¬ 
lytic  technology  simply  has  more  pans 
than  it  used  to.  and  many  more  points  of 
integration,  both  within  the  analytic 
sphere  and  reaching  out  to  transactional 
systems  as  well. 

Let’s  examine  five  areas  where  analyt¬ 
ic  technology  integration  is  of  panicular 
interest.  In  future  columns.  I'll  talk  abttui 
how  to  tie  these  and  other  consideraiion.s 
into  a  practical  analytic  IT  road  map. 

Intsgrated  monitoring,  evaluation  and  infor¬ 
mation  daivery.  Bl  tcchnolog)'  has  histori¬ 
cally  included  a  mishmash  of  informa¬ 
tion  delivery  and  analysis  tools  —  ad  hoc 
query,  ad  hoc  reporting,  enterprise  re¬ 
porting,  multidimensional  analysis, 
graphical  data  visualization  and  so  on. 
These  are  getting  streamlined  and  inte¬ 
grated  in  a  new  generation  of  technolo¬ 
gy.  and  it’s  about  time. 

Over  time,  classic  Bl  technologies  are 
becoming  less  imponant  anyway.  The 
user’s  central  monitoring  tool  will  be  the 
portal  or  dashboard.  ITut  format  first 
shows  which  metrics  are  outside  expect¬ 
ed  ranges  and  only  afterward  (if  ever) 
leads  the  user  to  the  precise  numbers  in 
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a  report.  This  is  often  an  im¬ 
provement  over  traditional 
reporting-centric  systems, 
which  may  spit  out  a  lot  of 
data  and  then  send  the  u.scr 
on  a  “Where's  Waldo?” 
search  for  anomalies.  In 
cases  where  lime  really  is 
money,  alerts  about  the 
anomalies  can  be  sent 
straight  to  a  pager  or  other 
mobile  device. 

Monitoring,  evMuation  and 
transactional  apps.  Bl  technol¬ 
ogy  has  historically  been 
read-only,  running  against  a  copy  of  the 
transactional  database.  So  integrating  it 
with  transactional  systems  might  seem 
technologically  unnatural.  But  let's  take 
a  business  process  view.  When  a  manag¬ 
er  notices  or  is  alerted  to  an  anomaly  in 
a  metric  —  then  what?  The  “what" 
should  often  be  a  process  leading  to  an 
action,  perhaps  in  production  or  pur¬ 
chasing.  but  potentially  In  almost  any 
area  of  the  enterprise. 

A  whole  new  generation  of  hybrid 
analytic/transactional  applications  is 
emerging  to  support  these  new  process¬ 
es.  You  can  wait  to  get  them  in  packaged 
form,  or  you  can  roll  your  own.  perhaps 
using  some  process  specification  toolk 
But  either  way.  the  processes  —  and 
hence  the  applications  —  are  likely  to  be 
very  important  to  you. 

fo-flne  analytics.  A  classic  job  for  analyt¬ 
ic  technology  is  to  figure  out  exactly 
what  to  offer  to  which  customer,  so  as  to 
make  the  relationship  as  profitable  as  It 
can  possibly  be.  In  certain  environments, 
such  as  call  centers  at  cell  phone  service 
providers,  doing  this  analysis  in  real 
time  is  hugely  important.  So  analytic 


tools  —  often  statistical  ones  —  need  to 
drive  transiteiion.tl  systems  in  an  orderly 
way.  Meanwhile,  certain  consiinter  mar¬ 
keting  .ipplicaiions  arc  trying  tii  regul.tr- 
ize  testing  and  statistical  analysis  as  part 
of.  say.  a  iransactitmal  direct-mailing 
business  process. 

Planning  and  everything  else.  Almost 
every  organization  has  a  h<»rrific  budget¬ 
ing  and  planning  process.  Rut  modern 
enterprise  planning  technoUigy  has 
somewhat  streamlined  the  prtKcss  in 
thousands  ofinstallations.  Even  so.  most 
enterprises'  forecasts  arc  still  incredibly 
naive  and  poorly  supported.  As  pLinning 
iechnoIog>-  evolves,  transactional  appli¬ 
cations.  monitoring/evaluation,  planning 
itself  and  sometimes  even  statistical 
anal)’sis  should  be  able  to  combine  to 
create  better  and  more  timely  forecasts, 
and  more  useful  project  plans. 

Integrated  anal>’tic  data  management. 
There  arc  some  hard-core  server  technol- 
issues  to  consider,  too.  Integrating 
enterprise  reporting,  ad  hoc  queries  and 
various  kinds  M  analysis  into  a  single 
server  can  be  a  demanding  task  that  bears 
close  evaluation  when  you  select  analyt¬ 
ics  vendors.  But  the  .server-side  issues 
are  even  broader  than  that.  DBMS  ven¬ 
dors  are  doing  imponant  work  in  data 
aggregation.  Bl  vendors  arc  doing  their 
own  important  work  to  make  the  DBMS 
features  as  unnecessary  as  possible.  Data 
caching  integrates  into  application 
serv'ers  in  interesting  ways,  and  some 
prominent  Bl  products  include  their 
own  application  servers.  And  vendors  of 
specialized  MOLAP  (multidimensional 
online  analytical  processing)  database 
servers  are  ever  more  frantically  trying 
to  find  important  uses  for  them  as  their 
core  benefits  are  usurped  by  advances  in 
relational  DBMS  technology. 

Thai’s  just  a  sampling  of  the  tough  is¬ 
sues  involved  in  setting  your  analytic 
technology  plans.  Next  time,  I’U  talk 
about  how  t^st  to  deal  with  these  and 
other  analytic  challenges.  O  50499 
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Tape  Autoloader 

Enfryb  Cmp.  to  Biuidv,  Goto.. 
Mi  omk  amouneed  fto  new 
liVitoB  UO  (hwar  tope  open) 
Autotaadar.  a  2U  radCfliaiiitaUt 


lJO-2  drim  and  apvaa  earfridoi 
toeto  and  prevtdM  data  franetor 
Wdi  of  M  to  WOB  par  hour 
and  t4TB  ntotoa  capacity.  The 
autotoadar  to  amiiMi  now  and 
aoli  tor  afroHl  S4J00  ratal. 


ScanSoft  Releases 
\Mce-to-TextApp 

ScanSett  toe.  haa  amoifiead 
Vntaa  a  of  Ita  Dragon  Naluraly' 
SpaaMng  Mtowracogntton  aoli* 
warn.  Tlia  naw  lahaae  toatorea 
Impraimd  aecuacy  in  votow^ 
tatoconmntona.  ceawini  apeach 
into  tato  al  a  rata  of  ita  to  100 
mida  pw  lalBHta  and  lata  uaari 
cofilrol  PCi  wtag  apofran  worda. 
aeoerdtag  to  Ow  Paafrody.  Maaa.* 
baaed  raiapany.  Prtcea  rangi 
from  saa  to  1706. 


lUnvels 
1.6ofitsFieeOS 

OgaidBSD  3J  eai  be  dDoadeadad 

tor  fraa  al  wtowupaafradlat^  Tha 


a  and  Open- 


labtowaMlB 

MMatorSde. 


CURT  A.  MONASH 


Playing  Catch-up  on 
Analytic  Technology 


Analytic  technology  is  on  the  rise. 

Business  intelligence  software  expendi¬ 
tures  are  a  growing  share  of  the  IT  budget. 
Data  collection  and  storage  costs  are  in¬ 
creasingly  driven  by  analytic  uses.  DBMS 
and  enterprise  application  vendors  are  focusing  their 
product  difterentiation  efforts  largely  on  analytics. 


organiaations.  how 
ever,  are  doing  a  great  job  of 
planning  for  the  blossoming 
of  analytic  technology.  lYue. 
many  enterprises  have  a  toir* 
ly  careful  design  for  the  un> 
derlying  data  warehousing. 

But  in  most  shops,  depart* 
mental  B1  applications  and 
analytic  applications  axe  in* 
stalled  almost  willy-nilly. 

It's  time  to  take  a  more  se* 
rious  approach  to  analytic  IT 
strategic  planning,  and  not 
just  because  analytics  repre¬ 
sent  a  bigger  part  of  your  budget  Ana¬ 
lytic  technology  simply  has  more  parts 
than  h  used  to,  and  many  more  points  of 
integration,  both  within  the  analytic 
sphere  and  reaching  out  to  transactional 
systems  as  weU. 

Let’s  examine  five  areas  where  analyt¬ 
ic  technology  integration  is  of  particular 
interest  In  future  columns,  rU  talk  about 
bow  to  tie  these  aiul  other  considerations 
into  a  practical  analytic  IT  road  map. 

Migrtoi  J  wdtoiho.  swtouHnn  id  infor- 
iniftan  dilmry.  BI  technology  has  histori¬ 
cally  included  a  mishmash  of  informa¬ 
tion  delivery  and  analysis  tools  —  ad  hoc 
query,  ad  hoc  reporting,  enterprise  re¬ 
porting.  multidimensional  analysis, 
grai^cal  data  visualization  and  so  oa 
Th^  are  getting  streamlined  and  inte¬ 
grated  in  a  new  geoeratioo  of  technolo¬ 
gy,  and  it^  about  time. 

Over  time,  classic  BI  technologies  are 
becoming  less  important  anyway.  The 
user’s  central  monitoring  tool  will  be  the 
portal  or  dashboard.  That  format  first 
shows  which  metrics  are  outside  expect¬ 
ed  ranges  and  only  afterward  (if  ever) 
leads  the  user  to  the  precise  numbers  in 


a  report.  This  is  often  an  im¬ 
provement  over  traditional 
reporting-centric  systems, 
which  may  spit  out  a  lot  of 
data  and  then  send  the  user 
on  a  "Where’s  Waldo?” 
search  for  anomalies.  In 
cases  where  time  really  is 
money,  alerts  about  tbe 
anomalies  can  be  sent 
straight  to  a  pager  or  other 
mobile  device. 

MfMwng,  fMunon  mo 
frimaeftafaltaV*-  BI  technol¬ 
ogy  has  historically  been 
read-only,  running  against  a  copy  of  the 
transactional  database.  So  integrating  it 
with  transactional  systems  might  seem 
technologically  unnatural.  But  let’s  take 
a  business  process  view.  When  a  manag¬ 
er  notices  or  is  alerted  to  an  anomaly  in 
a  metric  —  then  what?  The  “what" 
should  often  be  a  process  leading  to  an 
action,  perhaps  in  production  or  pur¬ 
chasing,  but  potentially  in  almost  any 
area  of  the  enterprise. 

A  whole  new  generation  of  hybrid 
analytic/transactional  applications  is 
emerging  to  support  th^  new  process¬ 
es.  You  can  wait  to  get  them  in  packaged 
form,  or  you  can  roll  your  own,  perhaps 
using  some  process  specification  tools. 
But  either  way.  the  processes  —  and 
hence  tbe  applications  —  are  likely  to  be 
very  important  to  yoa 
hHha  miMtot.  A  classic  job  for  analyt¬ 
ic  technology  is  to  figure  out  exactly 
what  CO  offer  to  which  customer,  so  as  to 
make  tbe  relationship  as  profitable  as  it 
can  possibly  be.  In  certain  environments, 
such  as  caD  centers  at  cell  pbeme  service 
providers,  doing  this  analysis  in  real 
time  is  hugely  ioqxirtant.  So  analytic 


tools  —  often  statistical  ones  —  need  to 
drive  transactional  systems  in  an  orderly 
way.  Meanwhile,  certain  consumer  mar¬ 
keting  applications  are  trying  to  regular¬ 
ize  testing  and  statistical  analysis  as  part 
of  say.  a  transactional  direct-mailing 
business  process. 

Ptinntog  and  avatyMng  alat.  Almost 
every  organization  has  a  borrifu;  budget¬ 
ing  and  planning  process.  But  modem 
enterprise  planni^  technology  has 
somewhat  streamlined  tbe  process  in 
thousands  of  installations.  Even  so.  most 
enterprises'  forecasts  are  still  incredibly 
naive  and  poorly  supported.  As  planning 
technology  evolves,  transactional  appli¬ 
cations,  monitoring/evahiation,  planning 
itself  and  sometimes  even  statistical 
analysis  should  be  able  to  combine  to 
create  better  and  more  timely  forecasts, 
and  more  useful  project  plank 

Int^rated  analytic  data  managemeoL 
There  are  some  h^-core  server  technol¬ 
ogy  issues  to  consider,  too.  Integrating 
enterprise  reporting,  ad  hoc  queries  and 
various  lands  of  analysis  into  a  single 
server  can  be  a  demanding  task  that  bears 
close  evaluation  when  you  select  analyt¬ 
ics  vendors.  But  the  server-side  issues 
are  even  broader  than  that.  DBMS  ven¬ 
dors  are  doing  important  work  in  data 
aggregation.  BI  vendors  are  doing  their 
own  important  work  to  make  the  DBMS 
features  as  unnecessary  as  possible.  Data 
caching  integrates  into  application 
servers  in  interesting  ways,  and  some 
prominent  BI  products  include  their 
own  application  servers.  And  vendors  of 
specialized  MOLAP  (multidimenstona] 
online  analytical  processing)  database 
servers  are  ever  more  fnmtically  trying 
to  find  important  uses  for  them  as  their 
core  benefits  are  usurped  by  advances  in 
relational  DBMS  tech^logy. 

That's  just  a  sampling  of  tbe  tough  is¬ 
sues  involved  in  setting  your  analytic 
technology  plans.  Next  time.  HI  talk 
about  bow  best  to  deal  with  these  and 
other  analytic  challenges.  O  80409 
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Profiles  in  Business  Mobility  Deploying  Your  Team 

Enable  better  tEamwork,  - 
wherever  your  team  needs  to  work. 


i  Business  can  happen  anytime, 
■  anywhere.  And  with  Nokia, 


you’ll  have  the  advanced 


Noloa  6820  Messaging  Device 


y  >  messaging  devices  and  secure  mobile  connectivity 
*'  /  offerings  you  need  to  make  sure  your  team  arrives  fully 
connected — and  ready  to  work.  So  whether  you’re  deploying 
a  team  for  a  big  presentabon,  setting  up  a  remote  office, 
or  visiting  a  customer,  Nokia  mobility  solutions  ensure  that  your 
team  can  hit  the  ground  running. 


Learn  more  about  applying  a  mobility 
strategy  to  your  business.  Download  the 
“Small  Change,  Big  Impact”  white  paper  at 
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JOIN  THE  ITIL 
REVOLUTION! 


Attend  this  event  and  we  ll 
show  you  how  to  use  the 
best  practices  found  in  the 
Information  Technology 
Infrastructure  Library  (ITIL)  - 
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framework  -  to  "revolutionize' 
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But,  you  don’t  have  to  take 
our  word  for  it.  Already 
tens  of  thousands  of  IT 
professionals  from  world 
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experienced  powerful  results' 
Now,  it's  vour  turn! 

If  you're  new  to  ITIL  and  vrant 
to  learn  about  T,  contact  Pink 
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SLASHED  RESOURCES 
AND  IMPOSSIBLE  DEMANDS 
HAVE  CAUSED  IT  MORALE  TO 
DISINTEGRATE. 


KEPTICAL,  STRESSED,  I  dustry.  ‘‘Morale  is  twice  as  low  this 
SCARED,  SUCKED  DRY.  week  as  h  was  last  week." 

This  is  how  IT  professionals  Research  backs  up  that  claim,  in 
feel  about  work  these  days.  June,  nearly  three-fourths  of 650  com- 
Other  telling  words  that  panics  surveyed  by  Meta  Group  Inc. 
sur&ced  repeatedly  during  reported  having  morale  problems 
more  than  30  interviews  and  in  200  among  their  IT  staffs.  The  year  before, 
written  survey  responses  include /ear,  two-thirds  of  executives  cited  poor 

loathing,  disgust  and  dread.  worker  morale  aS  an  issue. 

To  be  blunt,  IT  woriter  morale  sucks,  No  wonder  spirits  are  plunging.  The 
and  it’s  getting  bleaker  by  the  day.  U.S.  technology  sector  suffered  yet  an- 

“It’s  the  worst  I’ve  ever  seen,"  says  a  other  rc^d  of  widespread  layo^  dur- 
22'year  IT  veteran  in  the  banking  in-  ing  the  Qurd  quarter,  according  to  a  re¬ 


cent  report  by  Chicago-based  recruit-  And  job  insecurity  is  just  one  part  of 
ing  fuin  Challenger.  Gray  &  Christmas  the  problem. 

Inc.  “High-tech  job  cuts  are  on  the  way  Boosting  morale  should  be  near  the 
up  as  the  end  of  the  year  approaches.”  top  of  almost  every  CIO’s  strategic 

says  CEO  John  A.  Challenger.  agenda.  But  before  man^ement  can 

Job  cuts  in  technology  jumped  devise  strategies  to  address  the  prc^ 

60%  between  July  and  September  to  lem,  it  must  truly  understand  the  caus- 
54,701.  compared  with  34,213  layoffs  es  of  IT  workers’  misery.  Frequently, 
in  the  second  quarter,  the  report  said.  it’s  not  about  money  or  challenges. 

To  make  matters  worse,  the  growing  Instead,  workers  point  to  slashed 
number  of  layoffs  is  not  being  coun-  resources,  unrt>aU<tt-ir  expectations, 
tered  by  any  move  to  hire,  Challenger  willfully  blind  management  and  man<» 
says.  policies  and  procedures  as  some  of 
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their  biggest  pain  points. 

TTiese  Actors  engender  fear,  exhaus¬ 
tion.  bitterness  and  resentment,  all  of 
which  bhint  innovation  and  productiv¬ 
ity.  They  can  also  cause  long-term 
harm  to  workers'  overall  health,  ac¬ 
cording  to  some  experts. 

In  a  2004  Computerworld  survey  of 
9.854  IT  workers.  88%  of  the  re^ondents 
said  they  experienced  some  kind  of 
stress  at  work. 

•TVe  now  know  from  research  that 
in  a  work  environment  where  there 
are  a  lot  of  pressure  and  demands  and 
where  people  have  very  little  control 
that  substance  abuse  is  two  times  hi^- 
er,  that  heart  problems  and  back  pains 
are  three  times  higher,  that  there’s  a 
greater  rate  of  infections  and  mental 
health  problems.”  notes  Michael 
Koscec,  president  of  Toronto-based 
Entec  Corp.,  which  specializes  in  mea¬ 
suring  employee  satisfaction  and  com¬ 
mitment  at  large  companies. 

Yet  none  of  these  problems  is  likely  to 
be  imcovered  by  traditional  employee 
surveys,  which  tend  to  focus  on  sal^. 
benefits  and  training  issues.  This  is 
why  experts  advise  managers  to  adopt 
a  multifaceted  approach  to  measuring 
employee  morale  and  job  satisfaction. 

How  Employees  See  R 

Despite  their  unhappiness.  IT  workers 
say  their  greatest  fear  is  losing  their 
jobs  as  companies  continue  to  cut  costs 
by  shifting  software  development,  main- 
tenanoe  and  support  woric  to  loiwr-cost 
domestic  contractors  and  offshore  ser¬ 
vice  centers.  TheyVe  already  been 
made  well  aware  by  unemployed  col¬ 
leagues  that  Hnding  a  new  job  will  be 
difficult,  especially  sintx  there  are  more 
IT  workers  than  jobs  in  many  places. 
For  example,  the  San  Francisco  area  has 
suffered  a  49%  IT  j(^  loss  between 
March  2001  and  April  2004,  according 
to  a  study  this  year  by  the  Center  for 
Urban  Economic  Development  at  the 
University  of  Illinois  at  Chicago. 

In  many  cases,  workers  say  the 
staffing  cuts  at  their  companies  have 
been  nothing  short  of  brutal,  leaving 
remaining  IT  professionals  over¬ 
worked  and  feeling  burned  out  On 
average,  IT  employees  are  logging  47 
hours  a  week  on  the  job,  up  from  46 
hours  a  year  ago,  according  to  Cwnput- 
erworWs  2004  Salary  Survey  [Quick- 
Link  49872). 

IT  workers  also  are  feeling  quite 
cynical  toward  top  managptvuftgr 
which  they  regard  as  having  its  head 
stuck  in  the  sand  on  key  issues  ranging 
from  communication  to  outsourcing. 

"Outsourcing  is  euphemistically 
called  ‘global  sourcing.’ "  says  an  IT 
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Budget  cuts 
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Increased  workload 
(due  to  ‘.taM  cuts) 

40°o 

PctfOrtnenl  stall  layoHs 

Salary  freeze 

35°o 

Hiring  freeze 

woricer  at  a  lai^  insurer,  ‘^emos 
[about  outsourcing]  are  self-congratula- 
toiy  about  how  it  will  benefit  en^loyees, 
U>tally  ignoring  how  many  fewer  domes¬ 
tic  employees  we  have  year  to  year.” 

He  is  particularly  resentful  a^ut 
layofls,  which  his  employer  ofiicially 
refers  to  as  “position  migrations.” 

“High-minded  phrases  and  motiva¬ 
tional  meetings  do  not  conceal  the  venal¬ 
ity  and  incredible  lack  of  long-term  plan¬ 
ning  that  o&horing  represents,"  he  says. 

At  another  company,  IT  staffers 
who  remained  on  the  job  after  many 
FT  positions  had  been  outsourced 
were  switched  from  annual  «alari<>«  to 
hourly  wages.  “Now.  you  have  to  get 
permission  to  woih  overtime,  but  you 


also  have  to  get  your  job  done.  Often 
this  means  you  have  to  f^ify  your 
time  sheets  because  you  don't  have 
that  permission,”  says  an  IT  worker  at 
the  company.  “It’s  the  worst  I’ve  ever 
seen.  It’s  just  really  a  d^rading  envi¬ 
ronment  I  used  to  work  with  some  of 
the  best  and  the  brightest.  Now  h’s  all 
politics  and  CYA.” 

Fear  of  job  loss  drives  other  “weird 
behavior.”  notes  a  database  expert  with 
28  years  of  experience  who  works  at  a 
large  manufacturing  coixq>any  in  the 
Midwest  “If  you  have  a  h^d)  issue, 
you  don’t  take  your  sick  days  because 
you’re  afraid  when  you  come  back  you 
wont  have  a  job,”  she  says.  If  there’s  a 
death  in  the  family  or  a  severe  illness, 
people  are  back  to  woik  in  the  next  day 
or  two  rather  than  taking  a  week.  Peo¬ 
ple  arent  taking  vacadoit  either.  Or  if 
they  do.  they  take  a  day  or  two  at  a 
time,  so  people  don’t  really  get  a  rest.” 

tT.RJ.P. 

Underlying  workers’  complaints 
about  layoffs  and  burnout  is  a  kind  of 
mourning  for  what  IT  used  to  be  — 
a  well-paid  profession  made  up  of 
hands-on  pix^lem  solvers  who  were 
respected  for  their  abilities. 

Today,  in  contrast,  “if  you  want  to 
be  someone  who  is  a  doer,  you  pretty 
much  have  to  be  a  contract  wotker," 
says  the  database  expert  “You  can 
no  longer  be  an  employee  [because] 


u 

The  way  the  iob  is 
now,  we  might  as 
well  ask  people  if 
they’d  like  fries  with 
that  project. 

PROJen^  IIAMA6ER.  FMANCIU 

they're  hiring  en^loyees  to  manage 
and  supervise  the  process,  not  to  do 
the  process.  [Management]  views  the 
doers  as  a  commodity.” 

“We’re  now  running  more  like  a  sweat 
shop.  We  aren’t  given  the  little  profes¬ 
sional-level  luxuries  that  we  used  to 
have  beftwe,"  notes  an  IT  woiker.  "If  you 
order  a  piece  of  ergonomic  equipment 
they’ll  ftown  on  you.  We're  not  viewed 
as  professionals  anymore  but  as  being 
disposable  and  replaceable,  so  you  keep 
your  nose  to  the  grindstone.” 

“IT  was  a  career,  but  now  it’s  a  job.” 
says  a  profect  manager  at  a  multi- 
billion-doUar  financial  firm  on  the 
West  Coast  “The  way  the  job  is  now. 
we  mi^  as  well  ask  people  if  they’d 
like  fties  with  that  project” 


“IT  in  general  is  not  the  golden  boy 
that  it  was  in  the  1990s.”  says  a  busi¬ 
ness  intelligence  manager  at  a  Texas 
construction  firm  who  has  been  in  IT 
since  1984.  “We  did  the  ‘big  wow’  proj¬ 
ects  in  the  mid  to  late  '90s,  and  now  it's 
kind  of  sweeping  up.  The  projects  are 
cool  but  don’t  have  as  much  impact” 
As  for  mourning  the  old  days  in  IT. 
“You  get  kind  of  used  to  being  that 
knight  in  shining  armor  who  comes  in 
to  save  the  day,"  be  says.  “Now  we’re 
kind  of  just  humdrums,  like  we've  been 
married  too  long.” 

Expert  Advice 

Kay  Palmer,  CIO  at  ).B.  Hunt  Transport 
Services  Inc.  in  Lowell.  Arlu  says  she 
can  understand  woikeis'  general  dismay 
over  the  drastic  chaises  in  ITs  corpo¬ 
rate  status.  “IT  people  already  em¬ 
ployed  are  seeing  les  IT  investment  and 
less  euphoria  around  IT”  than  they  did 
in  the  1990s.  she  says.  “IT  is  going  from  a 
hi^y  valited.  q>ecially  treated  segment 
of  the  company  to  one  viewed  with 
skepticism.  Tliitt’s  a  tough  life  to  follow." 

One  tactic  Palmer  has  used  to  keep 
IT  staffers  from  feeling  marginalized  is 
to  publicize  the  top  three  IT  projects 
each  fiscal  quarter.  “When  people  see 
high-return  projects,  it  helps  them  see 
bow  projects  contribute  to  the  overall 
[business]  returns.”  she  says.  'It  also 
recognizes  the  individual  people  who 
came  up  with  the  idea  for  the  project,” 
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Outsourcing 


When  «  cecnpifiy  decidet  to  outsourcA  jobs  or  send 
them  offshore,  ttw  morale  of  the  remaining  fT 
(MHhers  can  noae*<lve  and  pose  chalenges  to 
managers  edw  need  to  motivete  them. 

OulsatfCHiQ  stfvivors  may  react  widr  outrage,  lear.  'survivor's  guiH' 
or  even  a  iKK^ened  woi1(  eltsc.  bordering  on  manic  behavior,  say  psy- 
chologels  and  workplace  consultants. 

Afitiough  some  eimens  say  that  IT  managers  need  to  proactively  ad* 
dress  the  morale  of  survivors  of  outsourcing  to  prevent  loss  of  produc* 
tMty.  there's  imle  consensus  on  whether  tactics  such  as  spot  bonuses, 
employee  recognition  or  increased  training  boost  morale  substantiallv 
But  experts  agree  that  IT  managers  need  to  focus  on  the  human 
aspects  of  the  problem  and  acknowledge  the  feelings  of  survivors. 

*Peopie  react  alt  over  the  map  to  outsourcing  and  offshoring,  and  IT 
managers  need  to  realm  that  you  cant  manage  the  reaction.'  says 
&ieen  Binder,  president  of  Smder  ^  Dne  Inc .  organizational  effec¬ 
tiveness  consultanis  m  Kansas  City.  Mo. 
*Thebestyoucandoisbeavrarethalpeo-  f 

pie  wi  have  a  range  of  reactions  from.  I  t5 

'Screw  you.  Tmoutta  here,' to  a  denial  reac-  * 

tion  that  says.  Tm  not  important.' ' 

Amid  such  a  range  of  strong  human  reactions,  the  worst  thing  an  fT 
manager  can  do  6  to  adopt  the  common  attitude  that  'people  don't 
matter,  only  the  software  matters."  she  says.  Managers  may  react  that 
way  to  protect  their  own  leetmgs  because  they're  probably  hurt  by  the 
outsourong  loa  but  'at  the  very  least.'  she  says,  'managers  need  to 
acknowledge  the  feelings  of  these  workers  ' 

Plenty  of  IT  managers  have  good  people  skrtts.  says  Naomi  Karten. 
but  they're  not  good  at  managing  large-scale  change  and  recognizing 
li  as  a  psychological  or  emotional  process.  Karten.  who  consults  on 
workptace  ssues  as  president  of  Karten  Associates  in  Randolph. 

Mass.,  says  an  offshoring  or  smlar  change  provokes  a  'gut-level  reac- 
iion.  not  a  head  expenence  * 

"Many  managers  lend  to  look  the  other  way  vd  say.  'Let's  get  on 
with  business  ' And  that  can  be  the  wrong  ttmig  to  do.' she  says.  *ln 
tact  that  approach  can  cause  the  Irensilion  to  take  longer.' 


Karten  urges  managers  to  get  otfshonng  survivors  to  talk  about  how 
they  teel.  but  to  do  so  without  using  the  word  feetings  to  avoid  calling 
attention  to  it.  'Make  it  OK  lo  vent'  she  says,  and  provide  reminders  of 
things  that  haven't  changed 

Bear  m  rrund  that  an  outsourcing  produces  a  new  IT  team,  even  if  just 
one  person  was  lost  or  added.  Karten  says.  That  means  everyone  should 
also  spend  lime  figunng  out  the  new  roles  and  reporting  relationships 
Timothy  Hoffman,  a  psyrfwtherapisl  and  founding  director  of  Am¬ 
brosian  Associates  in  Pastoral  Counsding  in  Spencer.  Mass.,  says  the 
mission  of  managers  overseeing  outsourcing  survivors  is  lo  'give  them 
swne  semblance  of  stabiirty  * 

A  high-level  executive  should  clearly  communicate  that  the  decision 
to  outsource  was  beyond  his  control  and  important  to  the  company's 
survival.  Hoffman  says.  And  explaining  that  the  strongesl  workers  were 
retained  can  help  reduce  self-doubt 
A  dose  of  reality  at  such  a  meeting  can  be  valuable  too.  Hoffman 

]adds.  'This  is  the  business  world  and  not 
Sunday  sdiool.*  he  says  'The  lobs  of  our 
tathns  are  gone,  with  their  pensions  and 
other  guaranlees.' 

While  some  companies  might  provide  bonuses  to  survivors,  in 
lenns  of  motivation,  'those  things  are  Band-Akte.'  Hoffman  says, 
■^ople  would  much  rather  have  seH-esteem  and  make  decisions  on 
their  own.  They  prefer  power  and  respect  over  money  ." 

In  extreme  cases,  survivor's  guilt  can  produce  low-level  post- 
traumatic  stress  disorder  that  can  be  debilitating  and  lead  to  high  ab¬ 
senteeism.  Hoffman  says.  CIOs  need  to  familiarize  themselves  with 
such  reactions  and  employ  counselors  to  help  if  necessary,  he  says. 

Rnally.  says  Hoffman,  try  to  help  survivors  realize  that  those  who 
got  booted  out  can  u%  the  expenence  as  a  sleppingstone  to  some¬ 
thing  better  in  their  careers 

If  you  are  upfront  and  honest,  people  will  understand  what's  going  on 
and  the  business  impacl*  adds  Tom  Ftettibone.  a  partner  ai  Transition 
ftfiners  Co.,  a  consulting  firm  in  Reston.  Va  ThcfB  may  be  a  morale  im¬ 
pact .  but  the  work)  is  chafing,  and  the  worst  thing  you  can  do  is  try  lo 
hidett.' 050236 


their  biggest  pain  points. 

These  factors  engender  fear,  exhaus¬ 
tion.  biticrne.ss  and  resentment,  ail  of 
which  blunt  innovation  and  productiv¬ 
ity.  They  can  also  cause  long-term 
harm  to  workers’  overall  health,  ac¬ 
cording  to  some  e.vperts. 

In  a  2004  Computerworld  survey  of 
9.854  IT  workers.  of  the  respondents 
said  they  experienced  some  kind  of 
stress  at  work. 

“We  now  know  from  research  that 
in  a  work  environment  where  there 
are  a  lot  of  pressure  and  demands  and 
where  people  have  very  little  control 
that  substance  abuse  is  two  times  high¬ 
er,  that  heart  problems  and  back  pains 
arc  three  times  higher,  that  there's  a 
greater  rate  of  infections  and  mental 
health  problems."  notes  Michael 
Kosccc,  president  of  Toronto-based 
Entcc  Corp..  which  specializes  in  mea¬ 
suring  employee  satisfaction  and  com¬ 
mitment  at  large  companies. 

Yet  ftone  of  these  problems  is  likely  lo 
be  uncovered  by  traditional  employee 
surveys,  which  tend  to  focus  on  salary, 
benefits  and  training  issues.  This  is 
why  experts  advise  managers  to  adopt 
a  multifaceted  approach  to  measuring 
employee  morale  and  job  satisfaction. 

How  Employees  See  It 

Despite  their  unhappiness.  IT  workers 
say  their  greatest  fear  is  losing  their 
jobs  as  companies  continue  to  cut  costs 
by  shifting  software  development,  main¬ 
tenance  and  support  work  to  lower-cost 
domestic  contractors  and  offshore  ser¬ 
vice  centers.  They’ve  already  been 
made  well  aware  by  unemployed  col¬ 
leagues  that  finding  a  new  job  will  be 
difficult,  especially  since  there  are  more 
IT  workers  than  jobs  in  many  places. 
For  example,  the  San  Francisco  area  has 
suffered  a  49%  IT  job  loss  between 
March  2001  and  April  2004,  according 
to  a  study  this  year  by  the  Center  for 
Urban  Economic  Development  at  the 
_  University  of  Illinois  at  Chicago. 

In  man)'  cases,  workers  say  the 
staffing  cuts  at  their  companies  have 
been  nothing  short  of  brutal,  leaving 
remaining  IT  professionals  over¬ 
worked  and  feeling  burned  out.  On 
average.  IT  employees  are  logging  47 
hours  a  week  on  the  job.  up  from  46 
hours  a  year  ago.  according  to  Compuf- 
erworf(fs  2004  Salarj'  Survey  [Quick- 
Link  49872]. 

IT  workers  also  arc  feeling  quite 
cynical  toward  lop  management, 
which  they  regard  as  having  its  head 
stuck  in  the  sand  on  key  issues  ranging 
from  communication  to  outsourcing. 

“Outsourcing  is  euphemistically 
called  ‘global  sourcing.’ "  says  an  IT 
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60% 

Budget  cuts 

53% 

Increased  workload 
(due  to  staff  cuts) 

40% 

Permanent  staff  layoffs 

35% 

Salary  freeze 

35% 

Hirirtg  freeze 

worker  at  a  large  insurer.  “Memos 
(about  outsourcing]  are  self-congratula¬ 
tory  about  how  it  will  benefit  employees, 
totally  ignoring  how  many  fewer  domes¬ 
tic  employees  we  have  year  to  year." 

He  is  particularly  resentful  about 
layoffs,  which  his  employer  officially 
refers  to  as  "position  migrations." 

"High-minded  phrases  and  motiva¬ 
tional  meetings  do  not  conceal  the  venal¬ 
ity  and  incredible  lack  of  long-term  plan¬ 
ning  that  offshoring  represents,"  he  says. 

At  another  company.  IT  staffers 
who  remained  on  the  job  after  many 
IT  positions  had  been  outsourced 
were  switched  from  annual  salaries  to 
hourly  wages.  “Now.  you  have  to  get 
permission  to  work  overtime,  but  you 


also  have  to  get  your  job  done.  Often 
this  means  you  have  to  falsify  your 
time  sheets  because  you  don't  have 
that  permission,"  says  an  IT  worker  at 
the  company.  "It's  the  worst  I've  ever 
seen.  It's  just  really  a  degrading  envi¬ 
ronment.  1  used  to  work  w'ith  some  of 
the  best  and  the  brightest.  Now  it's  all 
politics  and  CYA." 

Fear  of  job  loss  drives  other  "weird 
behavior,"  notes  a  database  expert  with 
28  years  of  experience  who  works  at  a 
laige  manufacturing  company  in  the 
Midwest.  "If  you  have  a  health  issue, 
you  don't  lake  your  sick  days  because 
you’re  afraid  when  you  come  back  you 
won’t  have  a  job."  she  says.  "If  there’s  a 
death  in  the  family  or  a  severe  illness, 
people  are  back  to  work  in  the  next  day 
or  two  rather  than  taking  a  week.  Peo¬ 
ple  aren’t  taking  vacation,  either.  Or  if 
they  do.  they  take  a  day  or  two  at  a 
time,  so  people  don’t  really  get  a  rest." 

IT,R.I.P. 

Underlying  workers’  complaints 
about  layoffs  and  burnout  is  a  kind  of 
mourning  for  what  IT  used  to  be  — 
a  well-paid  profession  made  up  of 
hands-on  problem  solvers  who  were 
respected  for  their  abilities. 

Today,  in  contrast,  "if  you  want  to 
be  someone  who  is  a  doer,  you  pretty 
much  have  to  be  a  contract  worker." 
says  the  database  expert.  "You  can 
no  longer  be  an  employee  [because] 
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The  way  the  job  is 
now,  we  might  as 
well  ask  people  if 
they’d  like  fries  with 
that  project. 
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they’re  hiring  employees  to  manage 
and  supervise  the  process,  not  to  do 
the  process.  IManagement]  views  the 
doers  as  a  commodity." 

"We’re  now  running  more  like  a  sweat 
shop.  We  aren’t  given  the  little  profes¬ 
sional-level  luxuries  that  we  used  to 
have  before."  notes  an  IT  worker.  "If  you 
order  a  piece  of  ergonomic  equipment, 
they’ll  frown  on  you.  We’re  not  viewed 
as  professionals  anymore  but  as  being 
disposable  and  replaceable,  so  you  keep 
your  nose  to  the  grindstone." 

“IT  was  a  career,  but  now  it’s  a  job," 
says  a  project  manager  at  a  multi- 
billion-dollar  financial  firm  on  the 
West  Coast.  "The  way  the  job  is  now. 
w'c  might  as  well  ask  people  if  they  'd 
like  fries  with  that  projea." 


j  "IT  in  general  is  not  the  golden  boy 
I  that  it  was  in  the  1990s.”  says  a  busi- 
I  ness  intelligence  manager  at  a  Texas 
I  construction  firm  who  has  been  in  IT 
since  1984.  “We  did  the  'big  wow’  proj- 
I  ccts  in  the  mid  to  late  ’90s.  and  now  it’s 
kind  of  sweeping  up.  The  prvijccts  are 
cool  but  don’t  have  as  much  impact " 

As  for  mourning  the  old  days  in  IT. 
"You  get  kind  of  used  to  being  that 
knight  in  shining  armor  w'ho  comes  in 
'  to  save  the  day,"  he  sa>"s.  "Now  we’re 
kind  of  just  humdrums,  like  we’ve  been 
!  married  too  long." 

ExpertAdvice 

I  Kay  Palmer.  CIO  at  I.B.  Hunt  Transport 
I  Services  Inc.  in  Lowell.  Ark.,  says  she 
can  understand  workers'  general  dismay 
owr  the  drastic  changes  in  IT’s  corpo-  _ 
rate  status.  “IT  people  already  em¬ 
ployed  arc  seeing  less  IT  investment  and 
j  less  euphoria  around  IT"  than  they  did 
I  in  the  1990s.  she  says.  “IT  is  going  from  a 
highly  valued,  specially  treated  segment 
of  the  company  to  one  viewed  with 
skepticism.  That’s  a  t<n^  life  to  follow." 

One  tactic  Palmer  has  usc-d  to  keep 
j  IT  staffers  from  feeling  marginalized  is 
I  to  publicize  the  top  three  IT  pnijecis 
j  each  fiscal  quarter.  “When  people  sec 
1  high-return  projects,  it  helps  tlwm  see 
how  projects  contribute  to  the  merall 
I  ibu.siness)  a-tums."  she  says.  "It  alst> 

I  reci>gnizes  the  individual  people  who 
'  came  up  with  the  idea  for  the  pntjee!." 
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says  Palmer,  whose  company  ranked 
fourth  on  Con^>uterworld's  2004  list  of 
Best  Places  to  Work  in  IT. 

Managers  should  create  a  similar 
kind  of  transparency  aroimd  career  de¬ 
velopment  plans  if  they  want  to  mini¬ 
mize  IT  employees’  fears,  says  K.C. 
Tomsheck,  director  of  IT  at  CDW 
Corp.,  another  Best  Place  to  Work. 

To  this  end.  every  one  of  Vernon 
Hills.  Ill.-based  COW’S  153  IT  workers 
has  an  individual  development  plan, 
“so  they  know  precisely  where  they  fit 
in.”  Tomsheck  says.  The  written  docu¬ 
ment  includes  technology-specific 
training  plans  as  well  as  performance 
expectations  for  the  year  ahead. 

At  Miami-based  Royal  Caribbean 
Cruises  Lt<L.  each  of  the  company's  325 
IT  employees  has  a  personal  develop¬ 
ment  plan  that  maps  out  “where  they 
are  now  and  which  con:q>etencies  they 
need  to  develop  to  get  v^ere  they  want 
to  go.”  says  Greg  Martin,  manager  of  in- 
t^ratioiL  “We  then  use  a  combination  of 
training,  protect  assignments,  menmring 
and  coaching  sessions”  for  employees  to 
reach  their  individual  goals.  “Everyone 
has  a  development  plan,  and  we  do  quar- 
teiiy  and  annual  reviews  of  them,”  Mar¬ 
tin  notes.  This  allays  employees'  fears 
that  they're  heading  in  the  wrong  direc¬ 
tion  professionally,  he  says. 

No  Fear 

Jean  Delaney  Nelson,  vice  president 
and  CIO  at  Minnesota  Life  Insurance 
COn  says  the  best  way  to  avoid  fear  of 
layoffs  is  to  avoid  layoffs,  Mrfiich  she 
has  managed  to  do  by  hiring  very  con¬ 
servatively.  “Unlike  airlines,  whiidi  hire 
in  boom  times,  we  don’t  do  huge  staff- 
ups.  If  we  need  to  staff  downward,  we 
do  so  through  attrition.  We’ve  never 
had  a  layoff  in  the  IT  oiganization  — 
not  because  of  a  no-layoff  policy,  but 
due  to  very  careful  and  prudent 
staffing  to  begin  with.”  she  says. 

St.  Paul-based  Minnesota  T.iff  has 
also  standardized  on  a  single  technol¬ 
ogy  set  across  its  lines  of  business,  and 
this  has  helped  the  company  avoid  lay- 
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trust  you  back. 

JEMDEUNEYNOSON. 

VICE  mESnaT  AND  dO. 
MMNESOnUFEMSUUNCE 


rw.computerworld.com 


M1UU6EIIEIIT 


CWnUINLI 


55 


o&  *A11  of  our  application  developers 
support  a  standard  set  of  tools.  If  we 
have  a  staff  reduction  in  one  area,  we 
can  easily  move  them  to  another," 
Delaney  Nelson  explains. 

Last  but  not  least.  CIOs  at  compa* 
nies  with  relatively  high  IT  staff 
morale  and  satisfaction  levels  empha¬ 
size  the  critical  importance  of  clear, 
frequent,  honest  and  euphemism-free 
communication  with  IT  employees. 

"It's  the  unknown  that  causes  anxi¬ 


ety  and  stress  —  not  knowing  if  you’re 
going  to  have  a  job  next  week  or  be  out¬ 
sourced.  Or  knowing  there’s  a  cost  re¬ 
duction,  btit  not  knowing  how  h’s  going 
to  happen,"  says  Delaney  Nelson. 

“If  employees  feel  they’re  not  in 
the  know,  it’s  a  big  &ctor  that  affects 
morale.  Our  manners  update  employ¬ 
ees  on  a  weekly  basis.  Ttey  also  do  a 
sort  of  temperature-taking  of  morale  at 
the  same  time,"  she  says.  “If  you  trust 
employees,  they’ll  trust  you  back.” 


Steve  Matheys,  CIO  at  Schneider  Na¬ 
tional  Inc  in  Green  Bay.  Wis.,  instituted  a 
formal  IT  communication  plan  last  year 
after  two  employee  surveys  reveal^ 
that  staffers  in  the  470-person  IT  group 
felt  that  they  didn't  understand  the 
company’s  enterprise  strategy  and  that 
they  lacked  face  time  with  executives 
in  IT  and  other  parts  of  the  company. 

Now.  IT  staffers  hear  news  and  up¬ 
dates  about  IT  projects,  plans  and 
staffing  directly  from  Matheys.  “They 
don’t  get  news  a  day  late  and  a  dollar 
short  and  filtered  down  through  two 
and  three  levels,”  he  says.  Among  other 
things.  Matheys  holds  monthly  off-site 
meetings  to  disseminate  business  re¬ 
sults  to  the  IT  stafit  He  also  writes  a 
monthly  CIO  column  in  an  IT  newslet- 
tei;  and  he  walks  around  the  office  a  lot 

“The  whole  idea  of  being  visible  and 
being  present  gives  you  the  opportuni¬ 
ty  to  sense  what’s  going  on"  among  IT 
employees.  Matheys  says.  "I  like  to  talk 
to  the  people  who  have  been  here  for  a 
while  and  also  to  the  individuals  who 
never  complain.  I  don’t  fmd  out  how 
they’re  feeling  by  asking  their  manager 
but  by  asking  them." 

The  bottom  line:  “If  you  have  a  com¬ 
prehensive  approach  [to  assessing 
morale]  and  a  willingness  to  listen  to 
what  people  are  saying,  you  can  actual¬ 
ly  driw  morale."  Matheys  says.  “You’ll 
never  sense  —  or  boost  —  morale  by 
sitting  in  your  office.”  0  S0T70 


WlakMdylBiowaleflhestuffl 

have  to  do.  H's  in  the  schecUe  from 
now  until  God  knows  when,  but  we  probably 
needtwornorebodiestodoiLldon'tteeicom- 
tortable  I  lee)  Pm  lushing.  Ihere's  this  horri¬ 
ble  teebng.  this  dread  that  I  know  fm  missino 
something  and  it's  going  to  come  back  and 
bite  me.-sonwMEOiMLJTYOioMSR 


«  I  would  not  rocommond  a  carter 
in  fT  to  my  chldrtn  at  tMs  point. 

Before.  I  would  have  said  it  was  an  OK  career, 
but  now.  you're  banging  your  head  agamst  the 
wall.  -  AmXATKM  OEVELOPUDtriEADQI 


WMyproUamiathatloanNd 
$^000  mort  in  2001,  bofore  I 
WM  laid  off.  than  I  aam  now.  Because  of 
outsourcing  offshore,  my  career  IS  doonied 
and  I  thinking  about  leaving  the  rr  indus¬ 

try  permanently.  •  rr  woRKOt 


«  We  hevthwtypea  of  offshore 

weriwn.  One  is  offshore,  the  other  is 
hired  from  of^hore  but  works  localy.  They 
bod)  scare  the  pants  off  ot  al  of  us(U.S.  IT 
workers]  because  they  work  for  h^  of  what 
we  do.  they're  ethical,  and  d«y're  good.  They're 
kvmg  the  American  dream. 
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BAD  BOSS, 

Baa  Morale 


nyoiw  who  has  ever  quit  a  job  win 
teH  you:  Good  workers  leave  bad 
managers,  not  bad  jobs  or  bad 
i  compel^ 

Direct  managers  have  a  huge  imoact  on  the 
morale  of  an  IT  employee,'  says  Steve  Scott.  CIO 
at  Visicin  Service  Plan,  an  eye  care  insurer  In  Ran¬ 
cho  Cordova.  Calif.  At  the  same  time,  he  acknowl¬ 
edges  that  by  nature,  many  technology  profes¬ 
sionals  simply  aren't  natur^  people  managers. 

TT  often  has  this  situation  where  people  who 
are  managers  are  certainly  enthused  about  tech¬ 
nology.  which  makes  it  easier  for  them  to  focus 
on  that  rather  than  on  [people]  management  and 
leadership  skills.*  Scott  says. 

Thai's  why  Scott  has  all  23  of  his  IT  managers 
participate  in  monthly  meetings  devoted  to  man¬ 
agement  and  leadership  issues.  Also.  Scott  meets 
twice  monthly  with  IT  staffers  as  a  means  of  giv¬ 
ing  them  direct  and  regular  access  to  the  compa¬ 
ny's  t(w  fT  executive. 

1  meet  with  ^  to  20  employees,  and  1  buy 
them  lunch.  I  spend  about  hve  minutes  giving 
them  a  l^level  overview,  and  then  we  open  it 
up  to  discussion  and  their  questions.' SccA  says. 

But  how  wefl  does  it  aN  work  to  boost  morale 
and  keep  employees  happy?  VSP  ranked  No.  3  on 
Cofnputerm)fkf& 2004  Places  to  Work  list. 

But  better  measure  comes  from  employees 

themselves.'Thereisgreatemphasisuponke^- 
tfig  employees  informed  and  engaged  in  aU  as¬ 
pects  of  their  jobs  and  key  actions  dtti  affect  the 
con^iarTy.'  saysan  (T  employee  at  VSP.  *1  find  that 
VSP  IS  truly  excepbonai  in  this  regard*  O  50240 


Vistl  tTOfkefi  in  theif  cubicles  and 
asK  »i»em  directly  about  (ob  satisfaction 

Conduct  leality  checks  with  wofk 
crs  outside  of  IT  Employees  tend  to 
express  themselves  more  openly  out¬ 
side  of  iheir  own  departments. 

Monrtof  produclrvtty  and  auaVty  -  two 
key  morale  •ndicalors.  When  fT  work 
ers  feef  stressed  and  insecure,  they 
can’f  focus  or  produce  quality  results 

Take  note  of  the  relatiortship 
between  each  IT  employee  and  hts 
immediate  manager 


says  Palmer,  whoso  company  ranked 
fourth  on  Computenvorld's  2004  list  of 
Best  Places  to  Work  in  IT. 

Managers  should  create  a  similar 
kind  of  transparency  around  career  de¬ 
velopment  plans  if  they  want  to  mini¬ 
mize  IT  employees'  fears,  says  K.C. 
Tomshcck,  director  of  IT  at  CDW 
Corp.,  another  Best  Place  to  Work. 

To  this  end,  every  one  of  Vernon 
Hills.  Ill.-based  CDW's  153  IT  workers 
has  an  individual  development  plan, 
"so  they  know  precisely  where  they  fit 
in.”  Tomsheck  says.  The  written  docu¬ 
ment  includes  technolog>’-specific 
training  plans  as  well  as  performance 
expectations  for  the  year  ahead. 

At  Miami-based  Royal  Caribbean 
Cruises  Ltd.,  each  of  the  company's  325 
IT  employees  has  a  personal  develop¬ 
ment  plan  that  maps  out  "where  they 
are  now  and  which  competencies  they 
need  to  develop  to  get  where  they  want 
to  go.”  says  Greg  Martin,  manager  of  in¬ 
tegration.  "We  then  use  a  combination  of 
training,  project  assignments,  mentoring 
and  coaching  sessions”  for  employees  to 
reach  their  individual  goals.  “Everyone 
has  a  development  plan,  and  we  do  quar¬ 
terly  and  annual  reviews  of  them,"  Mar¬ 
tin  notes.  This  allays  employees'  fears 
that  they’re  heading  in  the  wrong  direc¬ 
tion  professionally,  he  says. 

No  Fear 

Jean  Delaney  Nelson,  vice  president 
and  CIO  at  Minnesota  Life  Insurance 
Co.,  says  the  best  way  to  avoid  fear  of 
layoffs  is  to  avoid  layoffs,  which  she 
has  managed  to  do  by  hiring  very  con¬ 
servatively.  “Unlike  airlines,  which  hire 
in  boom  times,  we  don’t  do  huge  staff- 
ups.  If  we  need  to  staff  downward,  wc 
do  so  through  attrition.  We’ve  never 
had  a  layoff  in  the  IT  oi^nization  — 
not  because  of  a  no-layoff  policy,  but 
due  to  very  careful  and  prudent 
staffing  to  begin  with."  she  says. 

St.  Paul-based  Minnesota  Life  has 
also  standardized  on  a  single  technol¬ 
ogy  set  across  its  lines  of  business,  and 
this  has  helped  the  company  avoid  lay- 


If  you  trust 
employees,  they’ll 
trust  you  back. 

JEAN  DELANEY  NOSON. 

VICE  PNESIOENT  AND  CIO. 
MINNESOTA  UFE  INSURANCE 
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Walter  Sims.  38.  is  something  of  an 

anomaly  among  his  IT  peers  these  days. 
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J. King 

offs.  “All  of  our  application  developers 
support  a  standard  set  of  tools.  If  we 
have  a  staff  reduction  in  one  area,  we 
can  easily  move  them  to  another," 
Delaney  Nelson  explains. 

Last  but  not  least.  CIOs  at  compa¬ 
nies  with  relatively  high  IT  staff 
morale  and  satisfaction  levels  empha¬ 
size  the  critical  importance  of  clear, 
frequent,  honest  and  euphemism-free 
communication  with  IT  employees. 

"It's  the  unknown  that  causes  anxi¬ 


ety  and  stress  —  not  knowing  if  you’re 
going  to  have  a  job  next  week  or  be  out¬ 
sourced.  Or  knowing  there’s  a  cost  re¬ 
duction.  but  not  knowing  how  it’s  going 
to  happen.’’  says  Delaney  Nelson. 

"If  employees  feel  they’re  not  in 
the  know,  it's  a  big  factor  that  affects 
morale.  Our  managers  update  employ¬ 
ees  on  a  weekly  basis.  They  also  do  a 
sort  of  temperature-taking  of  morale  at 
the  same  time."  she  says.  “If  you  trust 
employees,  they’ll  trust  you  back.’’ 


Steve  Mathoys.  CIO  at  Schneider  Na¬ 
tional  Inc.  in  Green  Bay.  Wis..  instituted  a 
formal  IT  communication  plan  last  year 
after  two  empl»>yee  surveys  revealed 
that  staffers  in  the  470-porson  IT  group 
felt  that  they  didn't  understand  the 
company's  enterprise  strategy  and  that 
they  lacked  face  time  with  executives 
in  IT  and  other  parts  of  the  company. 

Now,  IT  staffers  hear  news  and  up¬ 
dates  about  IT  projects,  plans  and 
staffing  directly  from  Matheys.  ‘They 
don’t  get  news  a  day  late  and  a  dollar 
short  and  filtered  down  through  txvo 
and  three  levels."  he  says.  Among  other 
things.  Matheys  holds  monthly  off-site 
meetings  to  disseminate  business  re¬ 
sults  to  the  IT  staff.  He  also  writes  a 
monthly  CIO  column  in  an  IT  newslet¬ 
ter,  and  he  walks  around  the  office  a  lot. 

“TTte  whole  idea  of  being  visible  and 
being  present  gives  you  the  opportuni¬ 
ty  to  sense  what’s  going  on"  among  IT 
employees.  Matheys  says.  "I  like  to  talk 
to  the  people  who  have  been  here  for  a 
while  and  also  to  the  individuals  who 
never  complain.  I  don’t  find  out  how 
they’re  feeling  by  asking  their  manager 
but  by  asking  them.’’ 

The  bottom  line:  “If  you  have  a  com¬ 
prehensive  approach  [to  assessing 
morale}  and  a  willingness  to  listen  to 
what  people  are  saying,  you  can  actual¬ 
ly  drive  morale.”  Mathe>‘s  says.  “You'll 
never  sense  —  or  boost  —  morale  by 
sitting  in  your  office."  O  50170 


Ml  already  know  all  of  the  stuff  I 
have  to  do.  It  s  in  me  schedule  from 
now  until  God  knows  when,  bui  we  crobabiy 
f>eed  two  more  bodies  to  do  It  I  don'ifeei  com¬ 
fortable  if  I  feel  I'm  rushing.  There's  this  horri¬ 
ble  feeling,  this  dread  that  I  know  I'm  missing 
something  and  ifs  going  to  come  back  ano 
bite  me  -  software  quality  ehcimeer 


#  ■  I  would  not  recomtnettd  a  career 
17  in  IT  to  my  children  at  this  point. 

Before.  I  would  have  said  it  was  an  OK  career, 
but  now.  you're  banging  your  head  agamst  the 
wall  -  application  development  leader 


MMy  problem  is  that  I  earned 
S12.000  more  in  2001.  before  I 
was  laid  off.  than  I  earn  now.  Because  of 
outsourcing  offshore,  my  career  is  doomed 
and  I  am  thinking  about  leaving  the  fT  indus¬ 
try  oermanenily  -ITWtMtKER 


«  We  have  two  types  of  offshore 
workers.  Oners  offshore  theotheris 
hired  from  offshore  but  works  locally  They 
both  scare  d»e  pants  oft  of  all  of  us[U  S  IT 
workers]  because  they  work  for  hall  of  what 
we  do,  they  're  ethical,  and  they  're  good.  They  re 
living  the  American  dream 
_  -  DATABASE  AOWIMSTRATOR 
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Loll  your  fT  Job.  bill  your  compMiy 
is  MVpMng  you  «lh  an  oubriieu- 
montaorileaTWMclioullUndbi- 
oomcdy,  omplariiiianl  an  bo  an 


iMon.Uiadprauar*y.teanfMt- 
baok  yon  inlo  an  UmI  Job  iNualion. 
If  a  your  fUuro,  aid  ift  up  to  you  lo 

corrociy.  Hon  aro  flw  Hops  for 
manapino  too  procoao  to  acNovo 


1  TAKE  CONTROL  OF  THE 
REUTKMSMP.  AsIc  your 
former  company's  HR 
manager  what  services 
you  are  entitled  to  and 
for  how  long.  Ask  if  an  exten* 
ston  b  available  if  you  are  un¬ 
able  to  find  a  job  b^ore  your 
package  expires.  Many  lock¬ 
ages  offer  an  optional  six- 
month  extension,  but  if  you 
don't  ask,  you  won’t  receive  it 
Make  sure  the  outplacement 
counselor  assigned  to  your  case 
agrees  with  HR  on  the  benefits. 

Even  the  best  outplacement 
companies  tend  to  lump  clients 
into  groups.  If  you  get  pushed 
into  a  group  of  sales,  marketing 
or  advertising  people,  you'll  be 
the  outsider  and  you  won’t  get 
the  intended  benefit  of  lead 
sharing,  resume  polishing  and 
interview  coaching.  Insbt  on  a 
group  that  has  other  IT  peo¬ 
ple,  and  try  to  get  grottped 
with  pei^ile  who  have  better 
packages,  not  lesser  ones. 

Ask  your  counselor  about 
hb  experience  placing  IT  peo¬ 
ple.  If  he  doesn't  have  a  go^ 

FT  track  record,  ask  for  some¬ 
one  who  does.  Let  your  coun¬ 
selor  know  you  vriU  be  evalu- 
atii^  hb  performance,  and  ask 
for  a  different  counselor  if 
yours  doesn't  perform. 

2SErVQUR0MMAaB«M. 

The  outplacement 
protocol  immediate¬ 
ly  pushes  you  into  a 
series  of  tests  de¬ 
signed  to  help  you  decide 
what  you’re  ^t  fitted  to  do. 
Don't  get  railroaded  into  doing 
the  tests  before  you’re  ready. 

Talk  with  your  H>ouse. 
friends  and  associates  first  Be 
realistic  about  your  abilities 
and  your  goals.  If  you  want  to 
get  out  of  the  IT  field,  know 
the  risks,  understand  the  train¬ 
ing  required  and  have  a  back- 


'f--  i'‘  'july'act'n'Mit  ptoqi.im  ljo 
yet  you  back  on  back  iju'Ckiy  aHiT  a  layoH  if  yotj  manage  it  right. 


After 

L^ff 

Outplacemeiit  services  can  boost 
yw  job  search  or  suck  the  energy 
right  out  of  you.  H  al  depends  I 
who  takes  diarge.  BY  Douo  LEWI 


out  plan  to  return  to  ITif  the 
new  career  doesn't  work  out 
Ask  your  counselor  to  intro¬ 
duce  you  to  people  who  have 
succttsfiilly  gone  down  the 
path  you  wrant  to  follow. 

Put  your  goab 
in  writing  and 
share  them  with 
your  counselor. 

Then  take  the  tests  and  look 
for  a  good  match.  If  you  want 
to  berome  an  independent 
consultant,  for  example,  be 
sure  your  personality  and 


IT  MENTOR 


BY  DOUG  LEWIS 

skiUs  fh  the  profile  of  a  suc¬ 
cessful  •Tone  Ranger.” 

Lay  out  a  plan  to  achieve 
your  p>ab.  then  woric  with 
your  counselor  to  match  the 
outplacement  services  with 
your  plan.  If  the 
services  and  your 
plan  don't  match, 
ask  the  counselor 
to  modify  the  package.  You 
may  need  to  give  up  one  ser¬ 
vice  to  get  another,  but  most 
counselors  like  to  work  with 
innovative  clients,  so  be  bold. 


3  WORK  YOUR  PLAN.  Set 

milestones  and  met¬ 
rics,  and  measure 
your  progress.  Be  sure 
your  outplacement 
counselor  understands  your 
plan  and  how  he  fits  into  it 
Ask  for  advice,  but  be  wary. 

He  may  never  have  been  where 
you  are. 

The  more  senior  the  job.  the 
more  your  appearance  plays  a 
role  in  the  deebion.  IT  people 
aren’t  known  for  being  the 
sharpest  dressers,  so  dress  as 
you  would  for  an  interview 
and  ask  your  counselor  for 
honest  feedback. 

Periodically  evaluate  your 
plan.  If  you’re  missing  every 
milestone,  your  plan,  not  you, 

I  b  probably  at  foidt  Enlbt  your 
counselor  in  evaluating  your 
I  plan,  and  revise  it 

4  BE  WARY  OF  NET- 
W0RKM60R0UPS. 

There  are  more  such 
groups  in  IT  than 
in  any  other  field. 
These  groups  can  make  you 
feel  good  but  waste  your  time. 
Attend  a  meeting  If  you're  in¬ 
vited.  but  size  H  up  quickly. 

Determine  the  group’s  ”Iev- 
el”  by  asking  members  what 
types  of  IT  jobs  theyVehad  in 
tl^  past  and  what  they're  look¬ 
ing  for  now.  If  the  members 
are  all  data  center  rats  and 
you're  looking  for  a  middle 
management  or  senior-level 
IT  job,  get  out  You  can’t  help 
them,  and  they  can’t  help  you. 

The  worst  groups  are  pity 
parties  populated  by  perpetual 
losers.  If  if  s  a  loser  group,  don't 
go  back. 

The  best  groups  are  those 
with  good  track  records  of 
"graduates"  who  have  quickly 
found  jobs.  Call  some  of  those 
graduates.  Lo<A  for  the 
group's  connections  to  hiring 
managers  in  the  type  of  com¬ 
panies  you  want  to  work  for. 

Remember  You  are  emo¬ 
tionally  vulnerable,  and  these 
groups  can  make  you  feel  bet¬ 
ter  about  your  situation  be¬ 
cause  it's  shared  pain.  But  you 
don't  need  to  share  your  pain; 
you  need  to  get  rid  of  it  by 
finding  a  great  job. 

Respect  your  time.  Spend  h 
with  people  who  can  get  you 
into  an  interview  or  are  likely 


to  hire  you,  not  people  who 
can't  Hnd  a  job. 

5  PROTECT  YOUR  PHYSI¬ 
CAL  AND  MBfTAL 
HEAtlN.  Bei^  be¬ 
tween  jobs  b  tough. 
Ifs  easy  to  let  despair 
creep  into  your  life  and  even¬ 
tually  take  over.  You  are  going 
to  get  a  lot  of  turndowns  be¬ 
fore  you  hear.  *Tfou’re  hired." 
Find  a  way  to  deal  with  it 
Your  counselor  should  help 
you  turn  rejections  into  data. 
Worie  with  him  to  analyze  the 
reasons  for  the  turndown  and 
adjust  your  approach  accord¬ 
ingly.  If  you  Mt  an  emotional 
low  point  the  outplacement 
company  should  provide  pro¬ 
fessional  help. 

IT  people  aren't  always  the 
most  outgoing,  and  ifs  tempt¬ 
ing  to  retreat  into  a  totally 
Web-based  job  search.  Don’t 
fall  into  thb  trap.  People  hire 
people,  and  the  hirii^  process 
is  for  more  subjective  and 
empathy-based  than  many 
managers  would  like  to  admit. 

If  outplacement  services  are 
available,  it’s  up  to  you  to  man- 
age  them  wisely.  M^e  the 
outplacement  company  serve 
your  plan.  O  4B490 


Lewb  b  CIO  at  CanUvo/ Corp. 
in  Miami  Contact  him  at 
dIewis@carmvaLcom. 


www.cofnputerwor1d.com 
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Good  Boss,  Bad  Boss 


A  recetU  sunny  1^400  randomly  diosenaviMduals  I  SpIfltS  UD  I 


VICREASM6  CONFDENCE 17  Ae/b^ 
marife*isa0akBnhQth6ftv)dertiBt 
amongUSmxkers.Accx)nlinotoafB-  1 
cet^sun^of406exeaaves.6^  \ 
arenlsatisMvti^  Mr  jobs.  Among  \ 
Mse  whose  amnl  satisfied.  97%  pl^  to  \ 
change  jobs  within  the  nea  six  months.  I 

TTtesurvt^  leas  a«flU:*9d6y  _ 

ExecuNetlnc..wexeaaiveiob 
seafch  service  in  Nofwak  Conn. 
ComputerwDdd 's  Thomas 
mmtatfedwithExecuNet^esi- 
dentUatklinianonabotadK 
/ohdimaefor/Texecutnes.  HEQ 

WhafsthacurraiiliMilatHa  11^ 
tDrOOiaiidBlhirMnlorTTai- 
•cylMaTVite're  increasing^  buHisha^  j 
the  IT  area  for  a  number  ol  reasons.  Re*  | 

cruiters  have  been  tefing  us  for  the  last  I 
nine  or  X)inonths  that  the  employment  | 
market  for  senior  executives  is  increasing  | 
by  about  16%.  We  see  that  for  technology  | 
exeadives  as  wel.  Since  Labor  Day.  the  I 
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markethasgottenstronger.andcompe- 
nies  are  extendng  more  executive  search¬ 
es.  That's  an  indfoation  that  the  market  e 
going  to  get  better  and  not  decline. 

Whafs  Mtag  Ml?  H's  reaVy  the  axittn- 
ued  expansion  of  the  economy.  In  the  ev* 
^  Her  stages,  companies  vvere  being 
^  cautious,  but  along  about  Jiiy  or 
^9  August  they  started  hiring  in  a 
P  stronger  fashion. 

AreyouaaainganincrMMinde* 


□  rary  IT  aecMlIve  poriioni?  We 

donT  track  anything  in  particuiar  in 
that  area,  but  we  have  seen  a  tot 
more  full-time  consuhing  positions.  That 
rnay  also  have  to  do  iNith  the  [economic] 
expansion  as  companies  are  trying  to  fl 
those  positions  first  From  the  second 
quarter  to  the  third  quarter,  demand  for  IT 
management  poskkra  was  (to  a  sold  5%. 
and  OO  hires  were  ito  3%.  O  50244 


56 


CMnrTHWniB  lli«Nikrl.»l4 


MAIIA6EMENT 


www.computerworld  com 


Lost  your  fT  iob>  but  your  company 
is  supplying  you  with  an  outplace* 
ment  service?  Watch  out!  Used  irr* 
correctly,  outplacement  can  be  an 
in^iediment  to  finitng  your  next  po* 
sition.  Used  property,  it  can  fast- 
track  you  into  an  ide^  |ob  situation. 
H’s  your  future,  and  it's  up  to  you  to 
manage  your  outplacement  service 
carrecUy.  Here  are  five  steps  for 
managirtg  the  process  to  achieve 
your  career  goafs. 

TAKE  CONTROL  OF  THE 
RELATIONSHIP  .-^sk  your 
former  company’s  HR 
manager  what  services 
you  arc  entitled  to  and 
ft»r  how  long.  Ask  if  an  exten¬ 
sion  is  asuilablc  if  you  are  un¬ 
able  to  find  a  job  before  your 
package  e.xpia*s.  Many  pack¬ 
ages  offer  an  optional  six- 
month  e.xiension.  but  if  you 
don’t  ask,  you  won’t  receive  it 
Make  sure  the  outplacement 
counselor  assigned  to  your  case 
^rees  with  HR  on  the  benefits. 

Even  the  best  outplacement 
companies  tend  to  lump  clients 
into  groups.  If  you  get  pushed 
into  a  group  of  sales,  mariceting 
or  advertisir^  people,  you’ll  be 
the  outsider  and  you  won't  get 
the  intended  benefit  of  lead 
sharing,  resume  polishing  and 
interview  coaching.  Insist  on  a 
group  that  has  other  IT  peo¬ 
ple.  and  try  to  get  grouped 
with  people  who  have  better 
packages,  not  lesser  ones. 

Ask  your  counselor  about 
his  experience  placing  IT  peo¬ 
ple.  If  he  doesn’t  have  a  good 
IT  track  record,  ask  for  some¬ 
one  who  does.  Let  your  coun¬ 
selor  know  you  will  be  evalu¬ 
ating  his  performance,  and  ask 
for  a  different  counselor  if 
yours  doesn’t  perform. 

SET  YOUR  OWN  AGENDA. 

1  The  outplacement 
/  protocol  immediate¬ 
ly  pushes  you  Into  a 
series  of  tests  de-  ( 

signed  to  help  you  decide  j 

what  you're  best  fitted  to  do.  I 
Don’t  get  railroaded  into  doing  ! 
the  tests  before  you're  ready.  ' 

Talk  with  your  spouse, 
friends  and  associates  first.  Be  I 
realistic  about  your  abilities  | 

and  your  goals,  if  you  want  to  I 
gel  out  of  the  IT  field,  know 
the  risks,  understand  the  train¬ 
ing  required  and  have  a  back- 


CARKWAl  LORk  CIO  Ooug  Lewis  says  an  outplacenient  pf  ogram  can 
get  you  bach  on  track  pmckly  after  a  layoff  -  if  you  manage  it  right. 


After 

L^off 

Outplacement  services  can  boost 
your  job  search  or  suck  the  energy 
ri^  0^  of  you.  ft  all  depends  on 


itakescfi 


out  plan  to  return  to  IT  if  the 
new  career  doesn’t  work  out. 
Ask  your  counselor  to  intro¬ 
duce  you  to  people  who  have 
successfully  goitc  down  the 
path  you  want  to  follow. 

Put  your  goals 
in  writing  and 
share  them  with 
your  counselor. 

Then  lake  (he  tests  and  look 
for  a  good  match.  If  you  want 
to  become  an  independent 
consultant,  for  example,  be 
sure  your  personality  and 


IT  MENTOR 


.  BY  OOUG  LEWIS 

skills  fit  the  profile  of  a  suc¬ 
cessful  ’’Lone  Ranger." 

Lay  out  a  plan  to  achieve 
your  goals,  then  work  with 
your  counselor  to  match  the 
outplacement  services  with 
your  plan.  If  the 
services  and  your 
plan  don't  match, 
ask  the  counselor 
to  modify  the  package.  You 
may  need  to  give  up  one  ser¬ 
vice  to  get  another,  but  most 
counselors  like  to  work  with 
innovative  clients,  so  be  bold. 


WORK  YOUR  PLAN,  Set 
milestones  and  met¬ 
rics,  and  measure 
your  progress.  Be  sure 
your  outplacement 
counselor  understands  your 
plan  and  how  he  fils  into  it. 
Ask  for  advice,  but  be  wary. 

He  may  never  have  been  where 
you  arc. 

Tlie  more  senior  the  job.  the 
more  your  appearance  plays  a 
role  in  the  decision.  IT  people 
aren’t  known  for  being  the 
sharpest  dressers,  so  dress  as 
you  would  for  an  interview 
and  ask  your  counselor  for 
honest  feedback. 

Periodically  evaluate  your 
plan.  If  you’re  missing  every 
milestone,  your  plan,  not  you. 
is  probably  at  fault.  Enlist  your 
counselor  in  evaluating  your 
plan,  and  revise  II 

BE  WARY  Of  NH- 
WORKING  GROUPS 
There  are  more  such 
groups  in  IT  than 
in  any  other  field. 
These  groups  can  make  you 
feel  good  but  waste  your  time. 
Attend  a  meeting  if  you’re  in¬ 
vited,  but  size  it  up  quickly. 

Determine  the  group's  "lev¬ 
er  by  asking  members  what 
types  of  IT  jobs  they’ve  had  in 
the  past  and  what  they’re  look¬ 
ing  for  now.  If  the  members 
arc  all  data  center  rats  and 
you’re  looking  for  a  middle 
management  or  senior-level 
IT  job.  get  out.  You  can't  help 
them,  and  they  can’t  help  you. 

The  worst  groups  are  pity 
parties  populated  by  perpetual 
losers.  If  it’s  a  loser  group,  don’t 
go  back. 

The  best  groups  are  those 
with  good  track  records  of 
“graduates"  who  have  quickly 
found  jobs.  Call  some  of  those 
graduates.  Look  for  the 
group’s  connections  to  hiring 
managers  in  the  type  of  com¬ 
panies  you  want  to  work  for. 

Remember  You  arc  emo¬ 
tionally  vulnerable,  and  these 
groups  can  make  you  feel  bet¬ 
ter  about  your  situation  be¬ 
cause  it's  shared  pain.  But  you 
don’t  need  to  share  your  pain; 
you  need  to  gel  rid  of  it  by 
finding  a  great  job. 

Respect  your  time.  Spend  it 
with  people  who  can  get  you 
into  an  interview  or  arc  likely 


Know  the  details 
IIQ  0*  your  outplace¬ 
ment  program. 

Get  placed  m  an  appropri¬ 
ate  counseling  group 

Demand  an  (T-savvy 
courtselur 

Set  realistic  goals. 
Measure  your  progress. 
Revise  the  plan  as  needed. 
Learn  from  reiection. 

Don’t  cont'  “" 


Use  networking  groups 
as  a  crutch. 


Retreat  into  Web  searches. 
Allow  your  health  to  suKer. 


to  hire  you.  not  people  who 
can’t  find  a  job. 

5  PROTECT  YOUR  PHYSI¬ 
CAL  AND  MENTAL 
HEALTH.  Being  be¬ 
tween  jobs  is  tough. 
It's  easy  to  let  despair 
creep  into  your  life  and  even¬ 
tually  take  over.  You  arc  going 
to  get  a  lot  of  turndowns  be¬ 
fore  you  hear.  “You're  hired." 
Find  a  way  to  deal  with  it. 

Your  counselor  should  help 
you  turn  rejections  into  data. 
Work  with  him  to  analyze  the 
reasons  for  the  turndown  and 
adjust  your  approach  accord¬ 
ingly.  If  you  hit  an  emotional 
low  point,  the  outplacement 
company  should  provide  pro¬ 
fessional  help. 

IT  people  aren't  always  the 
most  outgoing,  and  it’s  tempt¬ 
ing  to  retreat  into  a  totally 
Web-based  job  search.  Don't 
fall  into  this  trap.  People  hire 
people,  and  the  hiring  process 
is  far  more  subjective  and 
empathy-based  than  many 
managers  would  like  to  admit. 

If  outplacement  services  arc 
available,  it's  up  to  you  to  man¬ 
age  them  wisely.  Make  the 
outplacement  company  serve 
your  plan.  O  49490 


Lewis  is  ClOat  Carnival  Corp. 
in  MtamL  Contact  him  at 
cllewis(S>carnival.com. 
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Good  Boss,  Bad  Boss 

A  recent  survey  of 1,400  randomly  chosen  individuals 
by  Career^ildercom  found  that  of  those  with: 


GOOD  RELATIONSHIPS 
WITH  THEIR  BOSSES 


BAD  RELATIONSHIPS 
WITH  THEIR  BOSSES 


had  receAnd  raises  of  4A%  had  received  raises  of 
6%  Of  more  in  2004.  I«l  6%  or  more  in  2004. 

thought  they  had  W%thou^  they  had 

III  been  overlooked  M  been  ovedooked 

for  promotions.  for  promotions. 

AM  saw  little  opportunity  saw  little  opportunity 

£v  for  advancement.  Uv  foradvancemenl 


Spirits  Up 

How  con^dCTif  are  you  that 
the  job  market  will  improw 
ov-er  the  next  six  months? 


^Not 

cordidenl 


INCREASING  CONFIDENCE  in  the  lob 
market  is  awakening  the  wanderlust 
amongUS-  workers.  According  to  a  re¬ 
cent  survey  of  406  executives.  62% 
area 't  satisfied  with  their  jobs.  Among 
those  whose  aren  7  satisfied.  97%  plan  to 
change  jobs  within  the  next  six  months. 

The  survey  was  conducted  by 
ExecuNet  Inc.,  an  executive  lob  ^1 

search  service  in  Norwalk.  Conn 
Computerworld  s  Thomas  Hoff- 
man  talked  with  ExecuNet  Presi- 
dent  Mark  Anderson  about  the 
job  climate  for  IT  executives. 

What’s  the  current  market  like  K  I  f 
for  CIOs  and  other  senior  IT  ex- 
ecutives?  We're  increasingly  bulli^  atx)ut 
the  IT  area  for  a  number  of  reasons.  Re- 
cmiters  have  been  telling  us  for  the  last 
nine  or  10  months  that  the  employment 
market  for  senior  executives  is  increasing 
by  about  16%.  We  see  that  for  technology 
executives  as  well  Since  Labor  Day.  the 


market  has  gotten  stronger,  and  compa¬ 
nies  are  extending  more  executive  search¬ 
es.  Thai's  an  indication  that  the  market  is 
going  to  get  better  and  not  decline 

What’s  fueling  this?  It  s  really  the  contin¬ 
ued  expansion  of  the  economy.  In  the  ear- 
^  Iter  stages,  companies  were  being 
cautious,  but  along  about  July  or 
August,  they  started  hinng  in  a 
'  stronger  fashion 

-  Are  you  seeing  an  increase  in  de- 

AmaiKf  for  short-term  or  tempo- 
rvy  CT  executive  positions?  We 

don't  track  anything  in  particular  m 
that  area,  but  we  have  seen  a  lot 
more  full-lime  consulting  positions.  That 
may  also  have  to  do  with  the  [economic] 
expansion  as  companies  are  trying  to  fill 
those  positions  first.  From  the  second 
quarter  to  the  third  quarter,  demand  for  IT 
management  positions  was  up  a  solid  5%. 
and  00  hires  were  up  3%  O  50244 


Charity  Pays 


All  things  being  equal.  72%  of  employed 
Americans  would  choose  to  work  for  a 
company  that  supports  charitable  caus¬ 
es.  according  to  a  new  survey  sponsored 
by  Oeloitte  &  Touche  LLP.  The  response 
rate  climbs  to  87%  for  employed  stu¬ 
dents  over  the  age  of  18. 


QAS  think  companies  should  support 
94  community  charities. 

ttwW  companies  should  offer  vol- 
0 1  unteer  opportunities  to  employees. 

thir>k  workplace  volunteer 
Ji  opportunities  Improve  morale. 


tKAOPSiNTERACTIVEm:  nOOfSTRlv  OCTCOfRJOW 


We  re  inspired  by  the  human  side  of  data.  GPS  navigation  systems  provide  more  than 
iust  road  data.  They  offer  the  freedom  to  go  anywhere  the  waves  are  breaking,  or  find  the 
perfect  dumpling  in  an  urban  jungle.  That’s  why  durable  Hitachi  hard  disk  drives  are  the 
industry  choice  for  portable  devices,  seasoned  surfers,  and  hungry  drivers.  From  the 
smallest  Microdrive  to  the  largest  SAN  solution.  Data  Storage  from  Hitachi. 


hitachlyourd3ta.com 


HITACHI 

Inspire  the  Next 
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Author  lays  out  practical 
strategics  for  staffing  up  IT 


in  hiring  developers.  But  they're  man¬ 
agers,  not  architects.  They're  capable  I  TUCTCAM 

of  doing  the  management,  but  they  I  I  If  C  I  CAM 

can't  actually  do  the  architectural  I  APPROACH 

work.  If  you  need  an  architect  and  a  1  ^ 

manager  and  you  can  only  have  one.  ^  Authw  JohMM  Rothman  wgfaita 
decide  which  you  need  now  and  hire  usinfl  >8**w*MPro*ch  to  >valualt 

that  person.  Figure  out  how  to  deal  ,  *  writi  to" 

with  the  other  part  later.  You  can't  I  **™**'»-  "•«  » 

get  both.  I  ■  One  person  can’t  team  enough  about 

a  candidate  to  understand  eveiything 

How  do  I  read  between  the  tines  in  a  rd*  about  how  he  might  work  in  the  organiza- 

sumd?  What  do  I  look  for?  Look  for  ac-  j  tion.  Other  pe^pectives  are  necessary, 
lion  verbs  to  describpta.  a  candidate  Wei;;;;" 

aecompl,shed  U«k  for  some  quant, fi-  a  deeper  insighlaboni  the  andidale. 

able  benel.t  or  wha,  the  candidate  ae-  |  Questions  and  answete  are  ripherhe- 

eompl.shed.  See  if  you  can  see  an  ever-  .  ujuje  each  inlerviewe,  can  locus  hlS 

mcreasinp  range  of  responsibilities.  I  lime  and  his  questions. 

Make  sure  that  if  you  sec  similar  jobs  I  . . . 

over  and  over  again  that  you  ask  about  *  entire  interviewing  team  will  leant 
that  to  determine  whether  the  candi-  i  a  Httte  about  how  it  might  be  to  work  with 
date  has  h.rd  the  same  year  of  experi  the  new  peison.  casing  the  inleqtalion  of 

ence  several  limes.  thal  person  into  the  learn. 


A  new  book  wilt  lake  a 
/or  o/rhe  anj>sl  our  of 
stajjingupfor  those  IT 
shops  fueky  enouj'/i  to  be 
^  doing  so.  Hiring  the  Rest 
Kitowicdgc  Workers. 

,  Techies  &  Nerds;  The 
Secrets  &  Science  of 
Hiring  Technical  People 
Wiorset  House.  2004),  by 
Johanna  Rothman,  is  a  highly  practical 
tome  obout  hiring  IT /oiks.  Rothman 
talked  with  A,urh/tvn  Afeiymuka  ubouf 
.strotegies  and  pitfalk  in  IT  hiring. 


What's  the  biggest  mistake  fT  hiring  man- 
^ers  make  when  they  pr^are  to  hire 
someone?  I  sec  mistakes  in  these  areas; 

I  1)  Hiring  based  on  a  totiLs  checklist  — 
some  number  of  years  of  java  or  Win- 
I  Runner  —  as  opposed  to  hiring  -some- 
'  one  who  can  adapt  his.^'hor  knowledge 
[  to  the  products  at  hand.  This  Ls  the 
I  biggest  one  I  see.  2)  Hiring  for  the  fu- 
I  ture  instead  of  the  present.  I  sec  this 
'  one  almt>}a  as  much.  Hiring  someone 
who  the  manager  rhinlcs  will  have  the 
I  skills  to  grow  into  a  new  or  dilTerent 
role  in  the  future.  3)  Not  cimsidcring 
how  a  new  hire  will  fit  into  —  or  not!  — 
the  team.  People  arc  not  just  a  collec¬ 
tion  of  technical  skills.  If  they  can't  get 
along  with  the  rest  of  the  team,  it  can  be 
close  to  impossible  to  use  their  techni¬ 
cal  skills  to  move  the  work  forward. 

bnt  hiring  for  aptrhide  the  same  as  hiring 
for  the  future?  No.  I  see  petiple  saying.  “I 
I  need  someone  to  be  a  tech  contributor 
I  now.  but  I  want  him  to  be  a  tech  lead  in 
I  sLx  months."  so  they  hire  someone  with 
i  management  e.xperience  and  hope  he 
!  or  she  can  do  the  work.  I  sec  thai  a  lot 


I  That  would  indicate  a  lack  of  growth? 

I  Yes.  It's  OK  to  be  comfortable  on  the 
job.  but  if  you  do  exactly  the  same 
work  with  no  change  in  skills  over  sev¬ 
eral  years,  you're  not  increasing  your 
value,  and  your  resume  will  show  that. 

Hiring  technical  managers  gets  a  separate 
I  chapter.  What  makes  that  particularly 
challenging,  and  what’s  the  key  to  getting  ! 
it  right?  You  can't  just  judge  a  potential 
manager  by  how  well  he  or  she  per- 
,  forms  the  functional  tasks  of  the  job. 

1  But  how  do  we.  as  a  field,  normally 
I  promote  or  hire  managers?  By  taking 
'  the  best  technical  person  and  promot¬ 
ing,  hiring  that  person.  Wrongo!  A 
manager  needs  to  be  able  to  under¬ 
stand  the  issues  of  the  roles  he  or  she 
I  is  managing  —  but  not  necessarily  to 
i  perform  that  work. 

A  common  problem  I  see  is  to  ask  a 
manager  to  manage  several  functions 
at  too  low  a  level.  It’s  not  uncommon 
to  see  a  manager  of  test  and  opera- 
I  lions.  Anytime  you  see  an  ‘‘and*’  in  a 
I  title,  you  can  tell  the  company  is  look- 
j  ing  for  a  supermanAvoman.  and  most 
I  people  cannot  make  that  kind  of  work 
j  succeed.  A  director  level  or  VP  level 
could  manage  a  title  with  an  “and"  in 
it,  because  at  that  level,  the  manager 
needs  to  spend  much  ofhis  or  her  time 
on  strategic  issues  and  developing  ac¬ 
tion  plans  to  deal  with  the  issues.  But 
at  a  first-level  management  role,  the 
I  manager  deals  with  primarily  tactical 
,  issues.  If  you’re  managing  test  and  op¬ 
erations.  which  one  do  you  pay  atten- 
[  tion  to  first?  You're  doomed. 

j  What's  the  most  crucial  thing  to  team 
I  about  a  candidato  during  an  interviow, 


■  The  hiring  manager  can't  possibly 
know  all  of  the  questions  to  ask  and  how 
to  evaluate  an  the  answers.  Depending  on 
the  rest  of  the  team  for  help  in  the  inter¬ 
viewing  process  relieves  the  manager 
from  having  to  be  omniscient. 

and  how  do  you  learn  it?  Whether  the 
candidate  has  actually  performed  work 
efaimed  on  his  or  her  resume.  The  way 
you  learn  this  is  with  n  combination  of 
behavior  description  questions  —  "Tell 
me  about  a  time  when ..."  —  and  an 
audition,  to  watch  the  candidate  in  ac¬ 
tion  and  SCO  if  the  candidate  can  actu- 
I  ally  work  the  way  he  or  she  claims. 

You  include  a  chapter  on  sourcing  candi¬ 
dates.  What  are  soma  of  the  underused 
sources  of  good  technical  peopio?  Profes¬ 
sional  meetings  and  conferences.  At 
professional  meetings,  people  who  are 
interested  in  the  field,  who  are  proba¬ 
bly  willing  to.lcam  new  things,  have 
taken  the  time  to  attend  a  meeting. 

Evcti  if  those  people  aren’t  right  for 
you,  they  might  know  someone  el.sc. 

Conferences  are  a  great  way  of  see¬ 
ing  other  people’s  interests,  and  maybe 
a  little  on  how  they  learn. 

What  are  tbs  rod  flags  that  should  almost 
always  veto  a  tedNiical  candidate?  Lying 
about  previous  work.  I  <?;an’r  imagine  a 
circumstance  in  which  a  hiring  manag¬ 
er  would  want  someone  who  has  lied 
about  previous  work.  And  the  same 
year  of  e.xperience  multiple  limes.  A 
manager  may  not  need  the  person  w'ho 
can  learn  anything  in  no  time  flat,  but 
anyone  who’s  not  willing  to  take  on 
'  something  new  every  so  often  is  not  a 
good  candidate  for  a  fast-moving  field 
such  as  IT.  O  50466 
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Author  lays  out  practical 
strategies  for  staffing  up  FT 


A  new  book  wtl/  take  a 
\otoftheangfXmit<^ 
sit^mgup  for  those  rr 
shops  /ticty  enough  to  be 
tk^ng  so.  Hiring  the  Best 
Knowledge  Workers, 
Techies  &  Nerds;  TTk 
Secrets  &  Science  of 
Hiring  Technical  People 
(Dorset  House,  2004),  by 
MmmMltothman,  is  a  highly  practical 
tome  about  hiring  IT folks.  Rothman 
talked  with  Kathleen  Melynuiko  about 
strategies  and  pit/ulb  in  IT  hiring. 

Whirt  tlw  MnMt  inMd«  rr  Urli«  mw^ 
•gm  nto  wlim  tfMv  prepare  to  Mra 
aomaoM?  1  see  mistakes  in  these  areas: 
1)  Hiring  based  on  a  tools  checklist  — 
some  number  of  years  of  Java  or  Win- 
Rtinoer  —  as  opposed  to  hirii^  some¬ 
one  who  can  adapt  his/her  knowledge 
to  the  products  at  hand.  This  is  the 
biggest  one  I  see.  2)  Hiring  for  the  fu¬ 
ture  instead  of  the  present  I  see  this 
one  almost  as  much.  Hiring  someone 
who  the  manager  thinks  will  have  the 
skills  to  grow  into  a  new  or  different 
role  in  the  future.  3)  Not  considering 
how  a  new  hire  will  fit  into  —  or  not!  — 
the  team.  People  are  not  just  a  collec¬ 
tion  of  technical  skills.  If  they  can't  get 
along  with  the  rest  of  the  team,  it  can  be 
close  to  impossible  to  use  their  techni- 
^cal  skills  to  move  the  work  forward. 

Ini  hiriiV  fir  apMa  tha  am  « l*to^ 
tor  tha  future?  Na  I  see  pet^le  saying, 
need  someone  to  be  a  tech  contributor 
DOW,  but  I  want  him  to  be  a  tech  lead  in 
six  months,”  so  they  hire  someone  with 
management  experience  and  hope  he 
or  she  can  do  the  work.  I  see  that  a  lot 


in  hiring  developers.  But  they’re  man¬ 
agers,  not  architects.  They're  capable 
of  doing  the  management,  but  they 
can't  actually  do  the  architectural 
work.  If  you  need  an  architect  and  a 
manager  and  you  can  only  have  one. 
decide  which  you  need  now  and  hire 
that  person.  Figure  out  how  to  deal 
with  the  other  part  later.  You  can't 
get  both. 

How  do  I  read  botWMfi  thi  Urn*  in  a  r4> 
sumd?  What  do  I  took  for?  Look  for  ac¬ 
tion  verbs  to  describe  what  a  candidate 
accomplished.  Look  for  some  quantifi¬ 
able  benefit  of  what  the  candic^te  ac¬ 
complished.  See  if  you  can  see  an  ever- 
increasing  range  of  responsibilities. 
Make  sure  that  if  you  see  similar  jobs 
over  and  over  again  that  you  ask  about 
that  to  determine  whether  the  candi¬ 
date  has  had  the  same  year  of  experi¬ 
ence  several  times. 

That  wouM  fndieato  a  lack  of  growth? 

Yes.  It's  OK  to  be  comfortable  on  the 
job,  but  if  you  do  exactly  the  same 
work  with  no  change  in  skills  over  sev¬ 
eral  years,  you're  not  increasing  your 
value,  and  your  resume  will  show  that. 

Hiring  tochnical  wonogon  goto  a  toporeto 
efngte.  Whot  malna  thot  partieultffy 
choiongkig,  ind  wliit'i  Iht  hoy  to  gottkig 

ttrighi?  You  can't  just  judge  a  potential 
manager  by  how  well  he  or  she  per¬ 
forms  the  functional  tasks  of  the  job. 

But  how  do  we.  as  a  Held,  normally 
promote  or  hire  managers?  By  takii^ 
the  best  technical  person  and  promot- 
ing/biring  that  person.  Wrongo!  A 
manager  needs  to  be  able  to  under¬ 
stand  the  issues  of  the  roles  he  or  she 
is  managing  —  but  not  necessarily  to 
perform  that  woric. 

A  common  problem  I  see  is  to  ask  a 
manager  to  manage  several  functions 
at  too  low  a  level  It’s  not  uncommon 
to  see  a  manager  of  test  and  opera¬ 
tions.  Anytime  you  see  an  “and”  in  a 
title,  you  can  tell  the  company  is  look¬ 
ing  for  a  superman/woman,  and  most 
people  cannot  make  that  kind  of  woik 
succeed.  A  director  level  or  VP  level 
could  manage  a  title  with  an  ”and"  in 
it.  because  at  that  level,  the  manager 
needs  to  spend  much  of  his  or  her  time 
on  strategic  issues  and  developing  ac¬ 
tion  plans  to  deal  with  the  issues.  But 
at  a  first-level  management  role,  the 
manager  deals  with  primarily  tactical 
issues.  If  you’re  managing  test  and  op¬ 
erations,  which  one  do  you  pay  atten¬ 
tion  to  first?  You’re  doomed. 

Whto'o  tho  moot  crueW  thing  to  liani 
afcoto  0  rnWato  during  on  toloreiooi, 
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■  Ono  ponon  coni  loam  anoui^  ifeom 
aciwifefetototiidirrtudototyifnq 
dntf  hM  fw  nfgNuorfc  d  thi  oignba- 
BotiONrpwpoolkuntofwcMBwy. 

■T^eidwlniirvioni^ 

a  doipir  M  liio  cwMo 

OMfemandaiananamitefiarbr 
cauB*  aach  MvdMtv  CM  fcicw  his 
thna  and  hk  gu6BllOB8. 

■ThaanlwWalvielitoot^ 
a  llto  ataM  how  I  Rdgft  bo  to  Mfk  wtti 
toe  fuw  peraon.  oaotog  to  intagnlon  of 
MpamonlntototoMi 

■  Tha  Mito  manioar  cani  poaolbly 
hnowal  of  toquidtanatomkicKi  how 

to  aidDBto  W  to  iRMBia.  Oapandbig  on 
to  taatof  to  ton  tor  lulp  in  to  Mar* 
vtoafeig  procaas  ralavaa  to  rranager 
fratn  hatoiQ  to  ba  onnacienL 

and  how  do  you  loorn  it?  Whether  the 
candidate  has  actually  performed  work 
claimed  on  his  or  her  resume.  The  way 
you  learn  this  is  with  a  combination  of 
behavior  description  questions  —  Tell 
me  about  a  time  when ...”  —  and  an 
audition,  to  watch  the  candidate  in  ac¬ 
tion  and  see  if  the  candidate  can  actu¬ 
ally  work  the  way  he  or  she  claims. 

toi  kiekida  0  dmptor  00  saurdno  eandh 
dotia.  Vflwt  ore  oomo  of  Hw  imdonmod 
ooiireoo  of  good  todmtoil  poopio?  Profes¬ 
sional  meetings  and  conferences.  At 
professional  meetings,  people  who  are 
interested  in  the  field,  who  are  proba¬ 
bly  willing  to  learn  new  things,  have 
taken  the  time  to  attend  a  meeting. 

Even  if  those  people  aren't  right  for 
you,  they  might  know  someone  else. 

Conferences  are  a  great  way  of  see¬ 
ing  other  people's  interests,  and  maybe 
a  little  on  how  they  learn. 

What  are  tho  rad  flogo  thol  ahouM  obnoot 
aKoava  Vito  a  todudeal  caodUato?  Lying 
about  previous  work.  I  can’t  imagin<>  a 
circumstance  in  which  a  hiring  manag¬ 
er  would  want  someone  who  has  lied 
about  previous  work.  And  the  same 
year  of  experience  multiple  times.  A 
manager  may  not  need  the  person  who 
can  learn  anything  in  no  time  flat,  but 
anyone  who's  not  willing  to  take  on 
something  new  every  so  often  is  not  a 
good  candidate  for  a  fast-mnving  field 
such  as  IT.  050466 


Vww  our  on-Oemand  webcast.  *A  New  Game 
—  The  Fast  Emerging  World  of  IP  Convergence,* 
rtow  at  www.gobroadcom.com/converQence 


o 

>  V 


LOOK  WITHIN  — 
YOUR  NETWORK  IS  MORE 
POWERFUL  THAN  YOU  REALIZE 


To  engage  the  immense  power  of  IP  convergence  —  data,  voice,  applications,  networks  —  the  undertying  technology  must  function  securely, 
reliably  and  efficiently.  Only  Broadcom*  offers  ertd-to-end  networking  chips  with  the  built-in  power  to  manage  conveigertce  —  from  core 
storage  and  servers,  through  switch  fabrics  to  desktops,  multi-functional  devices  and  beyond.  Broadcom’s  wired  and  wireless  technology 
throughout  the  network  reduces  complexity  and  enhances  the  end-us«-  experience.  With  Broadcom,  there  is  no  gap  between  legacy  and 
feture  technologies  —  only  seamless  communication  at  maximum  speed.  Technology  advances.  Networks  expand.  Control  is  maintained. 
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EXEC  TRACK 


Zertioffer  to  Head 
Northrop  ET  Group 

Northrop  Grumman  Corp.  has 
named  Carol  Ziertioffer  vice  pres- 
kJenl  and  CK)  of  its  IT  sector. 
Zierhoffer  ioined  the  Los  Angetes' 
based  engineermg  company  in 
1988  »d  most  recentfy  served 
as  vice  president  and  CIO  for  its 
electicrwc  systems  sector. 

Ex-CIO  Appointed 
To  Lead  Neogent 

Neogent  Inc.  in  Austin  has  ap- 
poir^  Dennis  Faggioni  as  CEO. 
Faggkmi  has  more  than  15  years 
of  experience,  induding  serving 
as  CIO  at  Scottsdale  hstnnce 
Co..  Salt  River  Rma-Maricopa 
Indian  Community,  and  Insight 
Enterprises  Inc.  Rmgioni  previ- 
ouslyrvorliadinvarioiismatMge- 
ment  positions  at  IBM.  Neogent 
provides  content,  compliance 
and  secure  identity  software. 

Jacob  Takes  F\)st 
At  Energy  Solutions 

Al  Jacob,  former  CIO  of  Koch 
RpeAnes  Co.,  has  Joined  Energy 
Solutions  kitemational  in  Houston 
as  executive  vice  ivesideni  of 
global  services.  Jacob  «dll  locus 
onprovidmgautomationlor 
dtente  of  the  company.  wMch 
makes  oi  and  gas  pipaine  man¬ 
agement  software.  Before  movwg 
to  Koch  as  OO  in  1997.  Jacob 
spent  G  years  at  Elactronic  Data 
SystomsCorp. 


Taylor  Moves  Up 
At  [)elta  Dental 

Harland  Taylor  has  been  named 
vicepresidentofsystamsdevd- 
opmantatOehaDenUlofCafjfor- 
nia  and  affiatas  in  16  states  plus 
ttit  District  of  Cohimbia.  Taylor 
wi  oversee  systems  develop*  [ 
ment  and  analysis  and  software  j 

maintanance.  A  Nf-yaar  veteran  ' 
of  lha  company.  Taylor  has  held  j 
the  positions  of  directer  of  tnfor- 
maSon  systems  and  managsr  of  I 

commardal  operations  at  San  I 

Frandsca-based  CaMornia  Delta. 


HAKT  Pl  KKfN.S 


Outsourcing: 
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First  Ask  Vm 
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Most  companies  initially  consider 
outsourcing  in  order  to  reduce  costs. 
While  saving  money  is  a  valid  reason 
for  making  that  choice,  it’s  usually  not 
the  only  factor.  Many  organizations 
find  that  their  outsourcing  decisions  are  shaped  by  a 
variety  of  motivations,  but  identifying  and  prioritizing 
them  early  can  help  you  make  better  decisions  later. 
Here  are  some  possible  motives  for  outsourcing. 


To  Mquiro  spodatized  sidls. 

Many  projects  require  tech¬ 
nical  skills  that  the  compart)' 
doesn't  employ,  either  be¬ 
cause  it  doesn't  need  them 
on  a  full-time  basis  or  be¬ 
cause  it  has  been  unable  to 
hire  people  with  the  desired 
skills. 

To  meet  uneven  staffing  de* 
mands.  Some  companies  lac¬ 
ing  large  development  proj¬ 
ects  expect  that  when  those 
projects  are  completed,  the 
need  for  development  staff 
will  decrease  significantly. 

They  don't  want  to  add  new 
employees,  only  to  lay  them 
off  in  a  year  or  two.  Migra¬ 
tion  to  a  new  technolog)' 
base  also  creates  uneven 
staffing  demands,  resulting 
in  an  increased  demand  for  new  skills 
and  a  decreased  demand  for  old. 

To  mitigate  risK.  Organizations  embark¬ 
ing  on  high-risk  projects  generally  look 
for  ouisourcii^  partners  with  deep  do¬ 
main  expertise.  While  the-buyer  should 
never  outsource  total  responsibility  for 
the  project,  hiring  additional  staffers 
with  relevant  experience  reduces  risk. 

To  change  fixed  costs  to  variable.  Employ - 
CCS  are  generally  considered  a  fixed 
cost.  Outsourcing  provides  the  flexibility 
to  increase  or  decrease  staff  size  ca.sily 
and  quickly  as  busines.s  conditions 
dictate. 

To  improve  service.  Many  companies  out¬ 
source  lo  increase  the  level  or  the  con¬ 
sistency  of  their  service.  For  example, 
it's  not  uncommon  to  find  that  every  ma¬ 
jor  location  within  a  large  corporation 


has  its  owm  help  desk,  each 
with  its  own  service  levels. 
Outsourcing  all  of  the  help 
desks  to  a  single  provider 
will  standardize  service  and 
guarantee  appropriate  ser¬ 
vice  levels. 

To  impose  process  controls. 
Outsourcers  make  money 
by  standardizing  processes. 
Organizations  with  weak 
development  practices 
may  use  the  discipline  of  a 
Capability  Maturity  Model 
Level  5  outsourcer  to  force 
their  own  people  to  adopt 
consistent  processes.  Simi¬ 
larly,  some  organizations 
use  outsourcing  to  impose 
financial  discipline  across 
the  company. 

To  locus  management  time. 
Outsourcing  noncriiical  items  enables 
management  to  focus  on  core  competen¬ 
cies  and  critical  projects. 

To  maintain  objectivity.  Technical  staffers 
often  become  loyal  to  the  technoit^' 
base  they  support  and  may  not  make  the 
best  decision  if  they’re  lacking  an  impar¬ 
tial  tiebreaker. 

For  example,  a  recent  merger  resulted 
in  equal  numbers  of  Notes  and  Exchange 
users.  The  CIO  used  an  outside  technical 
expert  to  get  the  warring  parties  to  make 
the  best  architectural  decision  based  on 
the  needs  of  the  business. 

Your  company  should  identify  and 
prioritize  its  motivations,  and  there 
needs  to  be  a  clear  consensus  among  the 
management  team.  While  this  sounds 
straightforward,  it’s  not  necessarily  easy 
to  achieve. 


Recently,  the  chief  financial  officer  of 
a  Fortune  500  client  stated  that  cost  cut¬ 
ting  was  the  only  important  motivation 
and  that  all  other  considerations  were 
"noise-level.*’ 

The  CIO  agreed  that  cost  was  impor¬ 
tant  but  fell  that  access  to  specialized 
technical  skills  and  the  abilit)-  to  meet 
demand  spikes  were  equally  imjmrtant. 
These  differences  could  have  turned 
their  outsourcing  decisions  into  a  full- 
scale  battle. 

Moreover,  valuable  time  and  resources 
would  have  been  wasted  in  selecting  an 
outsourcer  whose  performance  would 
have  eventually  proved  unacccpwblc  to 
one  of  the  executives. 

In  contrast,  dearly  defined  motiva¬ 
tions  help  you  optimize  crucial  areas  of 
your  outsourcing: 

Partner  seiection.  Different  outsourcers 
bring  different  advantages  and  disadvan¬ 
tages.  Well-defined  motivations  make  it 
much  easier  lo  match  their  strengths  to 
your  needs  and  help  eliminate  unaccept¬ 
able  candidates. 

Contract  terms.  Motivations  are  the 
foundation  for  successful  contract 
negotiations.  They  drive  your  negotia¬ 
tion  strategy  and  help  you  determine 
which  points  to  concede  and  which  to 
insist  upon. 

Cost/stevico-tevei  trade-offs.  Motivations 
help  you  determine  the  right  balance  be¬ 
tween  how  much  you  pay  and  the  level 
of  service  you  receive.  Most  outsourcers 
can  provide  significantly  improved  ser¬ 
vice  ^  for  significantly  increased  fees. 

Metrics  development  and  nwt^perrwnt 

Your  motivations  should  drive  the  met¬ 
rics  against  which  you  and  your  out¬ 
sourcer  manage  your  project,  since  what 
you  measure  is  ultimately  what  you  get 
iQuickLink  44278). 

Clearly  define  and  prioritize  the  moti¬ 
vations  that  drive  your  outsourcing  deci¬ 
sions  before  you  select  your  outsourcer 
and  begin  to  negotiate.  You'll  find  that 
motivations  drive  many  aspects  of  the 
outsourcing  process,  and  understanding 
them  will  help  your  outsourcing  efforts 
succeed.  O  S0272 
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ZertioffertoHead 
Northrop  FT  Group 
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Jacob  Takes  Post 
At  Energy  Solutions 
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BART  PERKINS 


Outsourcing: 
First  Ask  WhA 


Most  companies  initially  consider 
outsourcing  in  order  to  reduce  costs. 
While  saving  money  is  a  valid  reason 
for  making  that  choice,  it’s  usually  not 
the  only  factor.  Many  organizations 
find  that  their  outsourcing  decisions  are  shaped  by  a 
variety  of  motivations,  but  identifying  and  prioritizing 
them  early  can  help  you  make  better  decisions  later. 
Here  are  some  possible  motives  for  outsourcing. 


Id  acquire  apadafaad  ddk 

Many  projects  require  tech¬ 
nical  skills  that  the  company 
doesn’t  employ,  either  b<^ 
cause  h  do^’t  need  them 
on  a  full-time  basis  or  be¬ 
cause  it  has  been  unable  to 
hire  people  with  the  desired 
skills. 

Id  ared  lamn  dding  dr 
manda.  Some  companies  be¬ 
ing  large  development  proj¬ 
ects  expect  that  when  those 
projects  are  completed,  the 
need  for  development  staff 
will  decrease  significantly. 

They  don’t  want  to  add  new 
employees,  only  to  lay  them 
off  in  a  year  or  twa  Migra¬ 
tion  to  a  new  technology 
base  also  creates  uneven 
staffing  demands,  resulting 
in  an  increased  demand  for  new  skills 
and  a  decreased  demand  for  old. 

Id  mMgda  rUt,  Organizations  embark¬ 
ing  on  high-risk  projects  generally  Ux^ 
for  outsourcing  partners  with  deep  do¬ 
main  expertise.  While  the  buyer  should 
never  outsource  total  respon^ility  for 
the  project,  hiring  additional  staffers 
with  relevant  experience  reduces  risk. 

%  ebangt  And  coils  to  yurnbli.  Employ¬ 
ees  are  generally  considered  a  fixed 
cost  Outsourcing  provides  the  flexibility 
to  increase  or  decrease  staffsize  easily 
and  quickly  as  business  conditions 
dicute. 

Id  imgRMO  Mniioi.  Many  companies  out¬ 
source  to  increase  the  level  or  the  con¬ 
sistency  of  their  service.  For  example, 
it’s  not  uncommon  to  find  that  every  ma-  I 
jor  location  within  a  large  corporation  I 


has  its  own  help  desk,  each 
with  its  own  service  levels. 
Outsourcing  all  of  the  help 
desks  to  a  single  provider 
will  standardize  service  and 
guarantee  appropriate  ser¬ 
vice  levels. 

To  impoii  prooM  controls. 

Outsourcers  make  money 
by  standardizing  processes. 
Organizations  with  weak 
development  practices 
may  use  discipline  of  a 
Capability  Maturity  Model 
Level  5  outsourcer  to  force 
their  own  people  to  adopt 
consistent  processes.  Siml- 
Urty.  some  organizations 
use  outsourcing  to  impose 
flnancial  discipline  across 
the  company. 

Id  focus  mmaginant  tom. 
Outsourcing  noncritical  items  enables 
management  to  focus  on  core  competen¬ 
cies  and  critical  projects. 

foimintotoabisdMto.  Technical  staffers 
often  become  loyal  to  the  technology 
base  they  support  and  may  not  make  the 
best  decision  if  they’re  lacking  an  impar¬ 
tial  tiebreaker. 

For  example,  a  recent  merger  resulted 
in  equal  numbers  of  Notes  and  F.vchangt* 
users.  The  CIO  used  an  outside  technical 
expert  to  get  the  warring  parties  to  make 
the  best  architectural  decision  based  on 
the  needs  of  the  business. 

Your  company  should  identify  and 
prioritize  its  motivations,  and  there 
needs  to  be  a  clear  consensus  among  the 
management  team.  While  this  soun^ 
stiai^tforward,  it's  not  necessarily  easy 
to  achieve. 


Recently,  the  chief  financial  officer  of 
a  Fortime  500  client  stated  that  cost  cut¬ 
ting  was  the  only  important  motivation 
and  that  all  other  considerations  were 
“noisc-leveL" 

The  CIO  agreed  that  cost  was  impor¬ 
tant  but  felt  that  access  to  specialized 
technical  skills  and  the  ^Uity  to  meet 
demand  spikes  were  equally  important. 
These  differences  could  have  turned 
their  outsourcing  decisions  into  a  full- 
scale  battle. 

Moreover,  valuable  time  and  resources 
would  have  been  wasted  in  selecting  an 
outsourcer  whose  performance  would 
have  eventually  proved  tinacceptable  to 
one  of  the  executives. 

In  contrast,  clearly  defined  motiva¬ 
tions  help  you  optimize  crucial  areas  of 
your  outsourcing: 

PirliNrMiRcfiDn.  Different  outsourcers 
bring  different  advantages  and  disadvan¬ 
tages.  Well-defined  motivations  make  it 
much  easier  to  match  their  strengths  to 
your  needs  and  help  eliminate  unaccept¬ 
able  candidates. 

Coitoa^tonnB.  Motivations  are  the 
foundation  for  successful  contract 
negotiations.  They  drive  your  negotia¬ 
tion  strategy  and  help  you  determine 
which  points  to  concede  and  which  to 
insist  upon. 

CoBl/wiviei  towlftradroft.  Motivations 
help  you  determine  the  right  balance  be¬ 
tween  how  much  you  pay  and  the  level 
of  service  you  receive  Most  outsourcers 
can  provide  significantly  improved  ser¬ 
vice  —  for  significantly  increased  fees. 

‘itilrtnt  tlrntoiimirt  nl  mungwiwii 
Your  motivations  should  drive  the  met¬ 
rics  against  whidi  you  and  your  out¬ 
sourcer  manage  your  project,  since  what 
you  measure  is  ultimately  what  you  get 
[QuickLink  44278). 

Cleariy  define  and  prioritize  the  moti¬ 
vations  that  drive  your  outsourcing  deci¬ 
sions  before  you  select  your  outsourcer 
and  b^in  to  negotiate.  Youll  find  that 
motivations  drive  many  aspects  of  the 
outsourcing  process,  and  understanding 
them  will  help  your  outsourcing  efforts 
succeed.  O  S0272 
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Xerox  WorkCentre*  Pro  advanced  multifunction  systems 
not  only  print  up  to  3x  faster  than  competition.  They’re  even 
smart  enough  to  give  your  productivity  a  colorful  new  twist. 
There’s  a  new  way  to  look  at  it. 

The  advanced  thinking  built  into  the  Xerox 
WorkCentre*  Pro  family  makes  them  the 
smartest  multifunction  citizens  working  on 
any  netwoi^  They  don*t  just  scan,  copy,  fax,  emd 
e-mail,  they  do  it  at  network  printing  speeds 
up  to  3x  faster  than  competition.  Th^  RIP  one 
job  while  printing  another,  so  woi4  gets  done 


faster.  And  their  Enhanced  Service  Program 
(ESP)  lets  you  fix  problems  before  they  happen, 
increasing  reliability.  And  now,  there’s  color.  'Hie 
Xerox  Woi4Centre*  Pro  40  prints  b&w  at  40  ppm; 
color  at  22  ppm.  It’s  one  more  way  our  full  line 
of  multifunction  ^tems,  printers,  and  digital 
copiers  help  you  get  more  out  of  your  network. 
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IT  Careers  with  the  National  Laboratories 


Among  the  intpllectual  set  tvoricing  at  one  of  the  countiy's 
rwttonal  laboraiones  is  similar  to  'going  to  the  big  show'  for 
a  tiasebail  player  H's  the  top  naig  of  a  technical  career,  oflenng 
opportunity  to  the  best  artd  brightest  to  be  involved  in  bask 
research.  From  the  latest  in  energy  research  to  nanotechnology 
developmeni  the  laboratones  are  using  information  technology  to 
create  what  once  was  cortsKleted  science  fiction. 

tn  all.  the  national  laboratones  hire  bener  than  3.000  people  each 
year  m  pnmarily  technical  dots.  While  a  goodly  portion  of  these 
|obs  requires  doaorai  studies  m  highly  specific  areas^  there  also  are 
career  eirtiy  opportunities  And  the  jobs  are  spread  arnong  the 
projects  and  programs  in  research  that  are  conducted  in  the  labs, 
as  well  as  n  the  computer  information  divisions  that  keep  the  labs 
humming.  The  most  mportant  aspect  of  applying  for  a  national 
laboratory  position  is  the  need  for  a  security  clearance.  Whether  a 
direaor  in  the  top  bers  of  managHnent  or  an  analyst  evaluating 
systems,  you1l  need  to  be  able  to  gam  a  high  ranking  Q  clearance. 

Among  the  ways  of  securing  the  clearance  is  to  take  part  in 
miemships  prior  to  graduation.  However,  if  you're  already  a 
seasoned  IT  professmnaL  it's  cruoal  to  gM  that  clearance  to 
provide  a  lunng  edge 

In  general,  the  laboratones  are  managed  by  large  corporations 
such  as  Sanelle  or  Lockheed  Maruiv  universities  such  as  Univenity 
of  Cafifomia  or  Unwersrty  of  Quaga  for  the  Department  of 
Energy.  ^  is  highly  competitive,  retention  is  intentionally  high, 
however,  orporate  bonus  structures  follow  a  federal  model  rather 
than  corporate  models 


Here's  an  overview  of  tfse  labs  and  their  missions. 

Argonne  National  Laboratory.  Chkaga  IL.  Argonne  is  operated 
by  the  UnIversHy  of  Chicago.  The  staff  conducts  research  in 
physical,  life,  and  enwonmental  sciences  as  well  as  enhances  and 
advances  energy  resources  and  technology  More  recently,  this 
CNcago  based  lab  is  Morfcmg  to  manage  and  solve  environmental 
problems  and  contribute  technologies  to  counter  terrorism  threats. 

Brookhaven  National  Laboratory.  Brookhaven.  NV.  Elrookhaven 
focuses  on  high  energy  and  nudear  physics  Its  technical  staff  has 
openings  for  high-energy  physicists  who  also  have  expertise  in 
C-t-h.  an  example  of  the  highly  specrfk  talents  being  sought. 

Idaho  Natioftal  Engineering  and  Environmental  Laboratory. 
Idaho  Falls.  10.  This  facility  has  more  than  6.000  scientists, 
engineers  aird  employees  The  lab  undertakes  research  in 
environmentaL  energy,  basK  science  and  national  defense.  Bechtel 
operates  the  lab 

Lawrence  Livermore  National  Laboratory,  Livemiore.  CA. 
Livermore  is  operated  by  the  University  of  Califmia.  Its  mission  is 
10  5(4}port  nabonal  security,  ensuring  that  the  country’s  nuclear 
weapons  are  safe,  secure  and  reliable.  The  staff  includes  an 
Information  Operations  and  Analysis  Division  and  is  among  the 
labs  most  involved  with  cyber  security  issues.  Among  the  system 
demands  being  Impleinented  is  a  secure  wireless  network 
for  employees. 

Los  Alamos  National  Laboratory,  Us  Alamos,  NM.  Los  Alamos 
makes  headlines  for  more  than  security  breaches  -  this  is  home  to 
space  exploration,  nuclear  research  and  was  founded  as  the 
birthplace  of  the  atom  bomb  The  lab  is  operated  by  the  University 
of  CalKomia.  The  lab  offers  career  starting  positions  in  computer 
Kience.  physks,  computer  engineering  and  software,  with  an 
emphasis  on  artifkiai  intelhgenrx.  security  and  large-scale 
computational  sciences 


National  Energy  Techrtology  Laboratory.  Piitsburgh,  Tulsa  and 
Morgantown.  WV  NETL  is  the  only  national  lab  that  is  operated 
and  managed  by  the  Department  of  Energy.  Its  role  is  to  coodua 
research  that  advances  fossil  energy  exploration,  supply  and  end 
use  technology.  In  addition,  it  now  includes  environmental 
research  and  lertmologies 

National  Renewable  Energy  Lab.  Golden.  CO.  Operated  by 
Midwest  Research  Institute  and  Battelle,  NREl  staff  members  are 
involved  in  the  study  of  renewable  energy  and  energy  efficiency 
research  While  geologists  and  PhDs  in  statistical  analysis 
dominate  the  staff,  there  also  is  a  strong  information  technology 
organization  with  openings  in  senior  analysis  slots. 

Oak  Ridge  National  laboratory.  Oak  Ridge.  TN.  Operated  by  the 
University  of  Tennessee.  Knoxville.  Oak  Ridge  is  known  as  the 
'ultimate  scientific  community  *  Oi^xirtunities  focus  on  ultrascale 
computing,  large-scale  simulations  and  technical  st^^port  for  the 
organization's  energy-based  research 

Pacific  Northwest  National  Laboratory.  Richland  WA  (with 
operations  in  San  Antonio,  TX  and  other  sites).  PNNL  is  a  center  of 
excellence  for  the  natnnal  labs  in  computational  sciences  Cyber 
security  is  a  major  focus  for  the  staff,  as  is  basic  scientific  research 
and  insertion  of  new  technologies  into  full-scale  operation 

Sandia  National  Laboratory,  Albuquerque,  NM.  Operated  by 
Lockheed  Martin.  Sandia  has  an  extensive  reach  in  technologies 
and  research,  from  fundamental  research  to  projects  that  support 
national  security,  nuclear  weapons,  nonproliferation  and 
assessment  miHtary  technology  and  eiwgy.  Among  its  newer 
assignments*  the  lab  is  heavily  involved  with  infrastructure 
assurance  and  homeland  security.  Over  the  past  five  years,  Sandia 
has  hired  400  ertgineers  and  technicians  annually. 

For  ntore  information  about  fT  Careers  advertising, 
please  call:  800.762.2977 
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IT  Careers 
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www.itcareers.com. 
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ever,  the  right  skills 
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ERP  System 

paper  manufacturer  that 
claimed  modiHcations  i(  made 
to  SAP  AG’s  R/3  software  were 
custom  development,  which 
is  tax-exempt  in  Wisconsin. 
Packaged  software  is  taxable. 

The  Neenah,  Wis,-based 
company’s  1995  installation  of 
R/3  cost  $23  million,  of  which 
SS  million  was  for  a  license  for 
the  ERP  software.  The  rest  of 
the  money  was  spent  on  modi¬ 
fications  and  implementation 
costs,  according  to  court  pa¬ 
pers  released  Oct.  26  by  Judge 
Steven  Ebert  of  Circuit  Court 
Branch  4  in  Dane  County.  Wis. 

After  Menasha  paid  a  sales 
tax  of  $342,614  on  the  imple¬ 
mentation  to  the  state's  De¬ 
partment  of  Revenue,  the  com¬ 
pany  tried  to  recover  the  mon¬ 
ey  by  petitioning  the  state  Tax 
Appe^  Commission.  Men¬ 
asha  is  now  seeking  a  total  of 
SSOO.OOO.  including  interesL 

The  appeals  commis.sion 
agreed  with  Menasha  that  the 
software  was  custom-written, 
but  Ebert  overturned  that  ded- 
sioa  ruling  that  R/3  “was  exist¬ 
ing  and  prewritten”  when  sold 

Agony  and  Ecstasy 

The  DOR  “Is  pleased  with  the 
decision.'’  said  spokeswoman 
Eva  Robclia.  who  explained 
that  a  Menasha  victory  would 
have  set  a  precedent  abowing 
other  companies  that  have  paid 
similar  taxes  over  the  past  four 
years  to  Hie  appeals.  The  state 
potentiaOy  would  have  had  to 
refund  about  $300  million  in 
taxes  and  interest 
Ofilctals  at  Menasha.  which 
has  up  to  90  days  to  appeal,  are 
unhappy,  their  lawyers  said 
“W'iscoosin  has  taken  the  posi¬ 
tion  that  all  software  is  ofif-tfae- 
shelf  unless  it’s  written  from 
scratch,  which  no  one  does 
anymore."  said  Leonard  Sos- 
Dowski.  an  attorney  at  law  firm 
Foley  &  Lardner  LLP.  which 
represents  Menasha.  The  larg¬ 
er  issue,  be  said  is  that  not 
only  is  the  modified  software 


itself  taxable,  but  potentially  so 
are  the  services  required  to  fix 
or  reprogram  it  during  the  im- 
plementatioa  Sosnowski  abo 
said  the  case  could  be  used  as 
a  reference  in  other  states, 
where  some  IT  executives  are 
keeping  an  eye  on  its  progress. 

"Clearly,  the  Judge  is  not  un¬ 
derstanding  the  real  world  of 
rr.’'  said  Bubba  Tyler.  CIO  at 
Quaker  Chemical  Corp.  in 
Conshobocken.  Pa.,  which 
runs  PeopleSoft  Inc.  applica¬ 
tions.  There’s  no  such  thing 
as  an  ‘off  the  shelf  ERP  sys¬ 
tem.  and  therefore  everyone 
requires  ‘development’  for  it 
to  work  with  a  given  firm’s 
business,"  he  said  “If  I  have  to 
write  ctistom  reports  or  create 
custom  output  for  my  cus¬ 
tomers  or  construct  interfaces 
for  the  tool  to  work  with  other 
toob  1  use,  all  of  thb  b  unique 
and  should  not  be  taxed." 

Andrew  Nelson,  another 
lawyer  at  Foley  fit  Lardner, 
added  that  If  the  case  b  up¬ 
held  some  companies  mi^t 
move  IT  operations  to  states 
with  more  favorable  tax  laws. 
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Explaining  hb  ruling.  Ebert 
said  R/3  always  requires  sub¬ 
stantial  modification  to  adapt 
to  a  given  customer’s  specifi¬ 
cations.  In  thb  case,  at  SAP's 
recommendation.  Menasha 
hired  Deloitie  fit  Touche  LLP 
to  help  it  make  the  changes. 
The  implementation  team 
used  the  R/3  Development 
Workbench  tool  kit  to  cus¬ 
tomize  SAP's  proprietary 


rnMB^^^ABAP  code  to  fit 
W  Menasha’s  needs. 

'  In  total,  the  installation  re- 
I  quired  3,000  modifications, 
for  which  Menasha  paid  some 
$2.5  million  to  SAP.  SU  million 
to  Deloitie  and  $775,000  to 
other  consultants. 

Even  so.  wrote  Ebert,  “the 
court  sees  no  reason  why  soft¬ 
ware  that  provides  the  building 
blocks  upon  which  modifica¬ 
tions  specific  to  the  particular 
purchaser  are  made  should  not 
be  deemed  prewritten  software." 


Microsoft  Plots  New  Office  System  Release 


VP  says  vendor  plans  to  continue  cycle 
of  two  to  three  years  between  upgrades 


BY  CAJtOL  BUWA 

A  Microsoft  Coip.  executive 
confirmed  last  week  that  the 
conqiany  intends  to  continue 
shipping  a  new  version  of  its 
Office  System  software  every 
two  to  three  years. 

That  would  place  the  re¬ 
lease  date  for  the  next  vetsion 
of  the  product  suite,  known  as 
Office  12  within  Microsoft,  be¬ 
tween  next  October  and  Octo¬ 
ber  2006,  since  Office  System 
2003  shipped  a  year  ago  last 
month,  Chris  C^xissela, 
vice  president  of  Microsoft's 
infonnatioo  worker  product 
management  group,  said  he 
isn't  ready  to  discuss  any  spe¬ 
cific  dates. 

“What  I  am  ready  to  say  b 


Office  has  had  a  fiuitastic 
100%  track  record  of  shipping 
a  new  version  every  two  to 
three  years  after  the  prior  ver¬ 
sion."  he  said.  “And  I  think  the 
next  version  will  be  in  that 
time  frame  toa” 

Capossela  abo  gave  few  de- 
taib  about  the  new  functional¬ 
ity  that’s  expected  to  be  in¬ 
cluded  in  oiffice  12.  But  he  not¬ 
ed  that  corporate  users  have 
been  asking  for  more  help 
with  managing  documents 
and  ocher  content. 

Microsoft’s  main  document 
marugement  produa  b  Share- 
Point  Portal  Server,  wdiich  b 
part  of  Office  System.  Capos- 
sela  said  the  company  wants 
to  “raise  the  bar  u)  what  Share- 


I  Point  does."  but  he  also  sees  a 
“great  partner  opportunity" 
for  otbCT  vendors  to  addr^ 
gaps  in  functionality. 

In  response  to  another  cus¬ 
tomer  request,  Microsoft  will 
try  to  make  it  easier  for  mo¬ 
bile  users  to  connect  to  Share- 
Point  Portal  sites,  according  to 
Capossela.  He  said  end  users 
currently  can't  access  the  sites 
unless  they  “VPN  into’  their 
corporate  networks. 

Packaging  Questions 

Speculation  b  mounting  that 
Microsoft  may  add  new  server 
products  to  Office  System.  But 
Capossela  said  the  company 
ham't  decided  how  the  Office 
12  functionality  will  be  pack¬ 
aged.  “So  if  someone  says, 

‘Hey,  b  there  going  to  be  an 
Excel  server?  Is  there  going  to 
be  a  Word  server?  Is  there  gt>- 


Almost  all  ERP  applications 
must  be  customized  or  modi¬ 
fied  after  they're  purchased, 
said  John  Maiebki.  deputy 
CIO  for  the  city  of  Orlando, 
which  runs  PeopleSoft  appli¬ 
cations.  He  ;^;reed  with  Ebert 
that  making  such  tweaks  isn't 
a  true  modification. 

Moreover,  if  Menasha’s  argu¬ 
ments  were  to  hold  true,  he 
said,  then  roost  inq>lementation 
consulting  costs  Mould  need  to 
be  considered  nontaxabie  — 
and  that  would  set  a  significant 
precedent  that  could  require 
the  state  to  refund  all  taxes  to 
ERP  customers  that  did  such 
customizatioRs. 

As  a  rule,  there  b  no  rhyme 
or  reason  to  how  states  assess 
software  taxes,  said  LJ.  Kut- 
len.  3  lawyer  at  the  Software 
Taxation  Institute  in  Reno. 
Nev.  Some  states  will  allou'  a 
company  a  tax  exemption  if  its 
software  customization  costs 
exceed  half  of  the  purchase 
price,  Kutlen  said.  Others  tax 
out-of-cbe-box  software  costs 
but  exempt  later  ciistomiza- 
cion  expenses.  O  5M66 


ing  to  be  a  Vbio  server?’  we  lit¬ 
erally  don't  know  yet."  he  said. 

But  Microsoft  b  pushing 
ahead  on  its  vbion  of  an  Of¬ 
fice  System  that  includes 
desktop  applications,  server 
software,  and  services  de¬ 
signed  to  help  teams  of  wotk- 
ers  collaborate,  be  added. 

Michael  Silver,  an  analyst  at 
Gartner  Inc.  said  momentum 
among  corporate  users  appears 
to  be  building  for  the  Office 
2003  suite  of  desktop  applica¬ 
tions.  According  to  a  survey  of 
184  clients  at  a  recent  Gaimer 
conference,  half  of  their  com¬ 
bined  total  of  PCs  are  likely  to 
be  running  Office  2003  by  the 
end  of  next  year,  be  sa«d 

Silver  added  that  be  expects 
the  new  version  of  Office  Sys¬ 
tem  ID  ship  in  the  same  time 
frame  as  tbe  desktop  version 
of  the  next  major  Windows  re¬ 
lease,  codc-nomed  Longhorn 
—  in  the  second  half  of 2006 
at  the  earliest  O  50570 
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Chaos  Is  Back 


WE  RE  LOSING  GROUND.  Only  28%  of  IT  projects 
succeed  these  days,  down  from  34%  a  year  or  two 
ago.  Outright  failures  —  IT  projects  canceled  be¬ 
fore  completion  —  are  up  to  18%  from  15%.  The 
remaining  51%  of  IT  projects  are  “challenged”  — 
seriously  late,  over  budget  and  lacking  e.xpected  features. 

Those  numbers  are  from  the  just-completed  Chaos  report  from 
The  Standish  Group.  Standish  has  been  doing  this  study  since  1994, 
and  ever  since,  we’ve  been  steadily  improving  our  ability  to  deliver 
projects.  A  decade  ago,  only  16%  of  IT  projects  were  successes.  By 
last  year,  it  was  twice  that.  Now  we’re  backsliding. 

How  did  we  get  headed  in  the  wrong  direction? 


When  I  talked  to  Standish  Chairman  Jim 
Johnson,  the  numbers  were  stiJl  being  crunch¬ 
ed-  But  he  pointed  to  a  few  significant  details. 
For  one:  [Projects  are  getting  more  expensive, 
and  big  projects  are  more  likely  to  fail. 

For  another  As  projects  get  bigger,  we’re  no 
longer  keeping  our  work  iterative.  We’ve  gone 
back  to  more  traditional  de^'clopment  practices 
—  practices  with  higher  failure  rates. 

For  a  third:  Lack  of  user  involvement  has 
jumped  back  to  the  top  position  among  reasons 
for  fT  project  failure.  But  lack  of  executive  sup¬ 
port  is  still  running  a  very  close  second.  With¬ 
out  committed  executive  sponsors  and  involved 
users,  our  projects  fail. 

Johnson  told  me  the  ke>’  to  success  is  scope 
management.  If  you  can  keep  projects  tight  and 
focused,  avoid  bloated  feature  wish  lists  and 
watch  out  for  explosive  requirements  such  as. 
“The  new  system  must  do  what  the  old  system 
did."  you  can  do  OK. 

Maybe  he's  right.  Bui  I  think  we  need  to 
do  more  than  just  avoid  scope  creep. 

One  reason  I  like  the  Chaus  study 
is  that  Standish  counts  up  the  re¬ 
sults  of  lots  of  real  projects,  and  it 
has  been  doing  that  for  long  enough 
that  we  can  see  real  trends.  So  wc 
know  that  our  biggest  success  rate 
for  IT  projects  came  right  in  the 
middle  of  the  recent  downturn.  Af¬ 
ter  the  bubble  burst,  budgets  were 
tight,  resources  were  strained  and 
big  protects  were  rare. 

And  —  not  coincidentally  —  our 
success  rale  jumped  and  our  project 
cancellation  rate  dropped.  When 
projects  are  small,  we  succeed. 


TTiai  .suggests  that  we  don’t  just  need  to  keep 
projects  from  getting  too  big.  We  need  to  work 
actively  to  dismantle  big  projects. 

Chop  a  big  project  down  into  smaller  projects 
and  three  things  happen.  First,  everything’s 
simpler.  We  can  use  smaller,  more  focused 
teams.  We  can  deal  with  a  limited  subset  of  re¬ 
quirements.  Communication  with  users  and 
team  members  is  easier. 

Second,  we’re  less  likely  to  abandon  the 
small-project  techniques  that  we  know  will 
work.  Quick  prototyping,  continuous  user  feed¬ 
back  and  iterative  development  deliver  success¬ 
ful  projects.  But  we’re  afraid  to  use  them  when 
we  take  on  big  projects.  That’s  why  we  turn  to 
traditional  big-project  approaches  —  and  fail. 

Third  and  maybe  most  important,  small  proj¬ 
ects  just  aren’t  interesting  to  an  organization’s 
political  players.  Small  projects  aren’t  sexy. 

They  don't  grab  the  CEO’s  attention.  So  they 
don’t  attract  fights  over  who  will  control  the 
budget,  or  gamesmanship  over  the  require¬ 
ments.  or  early-and-often  finger-pointing  when 
anything  goes  wrong. 

But  those  aren’t  the  people  you 
u-ant  as  business  sponsors  anyhow. 

By  aggressively  chopping  down 
big  projects,  we  can  shed  those 
problems  and  get  back  our  success 
factors.  Even  as  the  demand  re¬ 
turns  for  IT  to  solve  big  problems, 
we  don't  have  to  fail  trying  to  solve 
them  with  big  projects.  We  can 
break  them  down,  solve  them 
piecemeal  and  succeed. 

We  can  stop  losing  ground  and 
head  in  the  right  direction  again. 
That  direction  is  small.  O  50543 
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Unclear  on  the  Concept 

A  flood  alacementcompanyflusheswaterandce- 
men!  through  a  server,  and  this  pilot  fish  gets  the  job 
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Chaos  Is  Back 


WE-RE  LOSING  GROUND.  Only  28%  of  IT  projects 
succeed  these  days,  down  from  34%  a  year  or  two 
ago.  Outright  failures  —  IT  projects  canceled  be¬ 
fore  completion  —  are  up  to  18%  from  15%.  The 
remaining  51%  of  IT  projects  are  “challenged”  — 
seriously  late,  over  budget  and  lacking  expected  features. 

Those  numbers  are  from  the  just-completed  Chaos  report  from 
The  Standish  Group.  Standish  has  been  doing  this  study  since  1994, 
and  ever  since,  we’ve  been  steadily  improving  our  ability  to  deliver 
projects.  A  decade  ago,  only  16%  of  IT  projects  were  successes.  By 
last  year,  it  was  twice  that.  Now  we’re  backsliding. 

How  did  we  get  headed  in  the  wrong  direction? 

When  I  talked  to  Staodlsb  Chairman  Jim  That  suggests  that  we  don’t  just  need  to  keep 

Johnson,  the  numbers  were  still  being  crunch-  projects  from  getting  too  big.  We  need  to  woik 
ed.  But  he  pointed  to  a  few  significant  details.  actively  to  dismantle  big  projects. 

For  one;  Projects  are  getting  more  expensive.  Chop  a  big  project  down  into  smaller  projects 

and  b^  projects  are  more  likely  to  fail  and  three  things  happen.  First,  everythii^’s 

For  another  As  projects  get  bigger,  we’re  no  simpler.  We  can  use  smaller,  more  focused 
longer  keeping  our  work  iterative  We’ve  gone  teams.  We  can  deal  with  a  limited  subset  of  re- 

back  to  more  traditional  development  practices  quirements.  Communication  with  users  and 
^  practices  with  higher  failure  rates.  team  members  is  easier. 

For  a  third:  Lack  of  user  involvement  has  Second,  we’re  less  likely  to  abandon  the 

jumped  back  to  the  top  position  among  reasons  small-project  techniques  that  we  know  will 

for  IT  project  ^ure.  But  lack  of  executive  sup-  work.  Quick  prototyping,  continuous  user  feed- 

port  is  still  running  a  very  close  second.  With-  back  and  iterative  development  deliver  success- 

out  committed  executive  sponsors  and  involved  fill  projects.  But  we’re  afraid  to  use  them  when 

users,  our  projects  &iL  we  take  on  big  projects.  That's  why  we  turn  to 

Johnson  told  me  the  key  to  success  is  scope  traditional  big-project  approaches  —  and  fail- 
manageroent.  If  you  can  keep  projects  tight  and  Third  and  maybe  most  important,  small  proj- 
focused,  avoid  bloated  feature  wish  lists  and  ects  just  aren’t  interesting  to  an  organization’s 

watch  out  for  explosive  requirements  such  as.  political  players.  Small  projects  aren’t  sexy. 

The  new  system  must  do  what  the  old  system  They  don’t  grab  the  CEO’s  attention.  So  they 
did,"  you  can  do  OK.  don’t  attract  fights  over  who  will  control  the 

Maybe  he’s  right.  But  I  think  we  need  to  budget,  or  gamesmanship  over  the  require- 

do  more  than  just  avoid  scope  creep,  ments,  or  early-and-often  finger-pointing  when 

One  reason  I  like  the  Chaos  study  1HB  ^ything  goes  wrong, 

is  that  Standish  counts  up  the  re-  But  those  aren't  the  people  you 

suits  of  lots  of  real  projects,  and  it  want  as  business  sponsors  anyhow, 

has  been  doing  that  for  long  enough  By  a^ressively  chopping  down 

that  we  can  see  real  trends.  So  we  big  projects,  we  can  shed  those 

know  that  our  biggest  success  rate  problems  and  get  back  our  success 

for  IT  projects  came  right  in  the  factors.  Even  as  the  demand  re¬ 
middle  of  the  recent  downmm.  Af-  turns  for  IT  to  solve  big  problems, 

ter  the  bubble  burst,  budgets  were  we  don’t  have  to  fail  trying  to  solve 

tight,  resources  were  strained  and  them  with  big  projects.  We  can 

big  projects  were  rare.  break  them  down,  solve  them 

And  —  not  coincidentally  —  our  piecemeal  and  succeed, 

success  rate  jumped  and  our  project  We  can  stop  losing  ground  and 

cancellation  rate  dropped.  When  head  in  the  right  direction  again, 

projects  are  small  we  succeed.  That  direction  is  small.  Cl  50543 


HP  Integrity 


servers  are  taking  off,  as  are  the  companies  using  them. 


Componies  adopting  HP  Integrity  servers,  powered  by  industry-leading  Intel*  Itanium*  2  Processors,  ore  seeing  remarkable  goins  in  performonce. 
The  momentum  is  building.  One  alter  another,  companies  are  choosing  HP  Integrity  servers,  leading  software  and  technology  partners  such  os 
BEA,  Microsolt,*  Orocle,  SAP  and  Siebel  Systems  have  embraced  the  plotlorm  os  an  industry  standord.  And  with  the  ability  to  monoge  a  mixed 
environment  of  UNIX,  Microsoft'  Windows,'  Linux  and  OpenVMS,  HP  Integrity  servers  ore  lost  becoming  the  ultimate  consolidation  tool.  Demand 
maximum  performance,  reliability  and  cost-efficiency  now,  on  a  platform  that  will  corry  you  forward  into  the  future.  Demand  performance  that's 
real-world  proven,  ond  get  it — with  HP  Integrity  server  solutions. 


Choosing  HP  Integrity  servers,  choosing  results. 


AIRBUS  UK: 

Running  HP-UXlli  on  HP  Integrity 
servers,  20-30  wing  design 
simulations  that  used  to  talce 
weeks  ore  now  done  overnight. 


COMPUSA: 

Going  with  64-bit  orchitecture 
using  HP  Irrtegrity  servers, 
they  cut  access  time  to  inventory 
data  by  up  to  85%. 


FIAT  AUTO: 

Standardizing  on  64-bit 
infrostructure  using  HP  Integrity 
servers,  they're  integroting  and 
enhancing  soles  and  service  os 
well  as  streomlining  the  buying 
process  while  lowering  soles  cost. 


THE  KOEHLER  GROUP: 

Moving  to  an  environment 
composed  ol  HP  Integrity  servers, 
they  gained  a  50%  improvement 
in  mission-criticol  performance. 


To  get  the  IDC  white  paper  outlining  the  performance  of  HP 
Integrity  servers  with  Intel*  Itanium*  2  Processors, 


CALL 


CLICK 


1-800-282-6672 

option  5,  mention  code  AQHF 


hp.com/9o/<lewioiidhite9rity5 


re  tradstnarks  or  registered 


lei  Corporation  or  its  suOsidiaries  in 


id  States  and  oitter  countries  Microsoft  and  WindMirs  are  entier  regisMred  ftademaru  or  trademaru  of  Microsoft  Ctaporaton 


Oracle  Grid 


turns  64  PC  servers 
into  a  giant  mainframe 


It's  fast... 
it's  cheap... 
and  it  never  breaks 


ORACLE 


oracle.com/grid 
or  call  1.800.633.0753 

Note:  'Never  breaks'  indicates  that  when  a  server  goes  down,  your  system  keeps  on  running. 
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DaimlerChrysler  Rolls  Out 
Standard  Worldwide 
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Automaker  plans  to 
replace  160k  systems, 
deploy  XP  globally 

BY  PATRICK  THIBODEAU 

DaimlerChrysler  AG  is  stan¬ 
dardizing  its  160.000  PCs 
worldwide  on  common  hard¬ 
ware  and  software  in  an  effort 
to  eliminate  costly 
bottlenecks  on  up¬ 
grades  and  enterprise- 
wide  deployments  of 
applications. 

The  automaker  still 
plans  to  buy  PCs  from 
multiple  vendors.  But  j 
as  part  of  the  stan-  I 
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dardization  project,  which  is 
called  PC  Global.  Daimler- 
Chrysier  will  replace  all  of  its 
deslaop  and  laptop  PCs  with 
systems  that  run  Windows  XP 
and  meet  or  exceed  certain 
hardware  configurations. 

Vince  Morrotti,  Daimler- 
Chrysler’s  chief  technology  of¬ 
ficer,  said  last  week  that  the 
company  has  spent 
much  of  this  year  lay- 
ii^  the  groundworic 
for  PC  Glt^al  and  de- 
s^ning  the  project 
plan.  Thus  far,  it  has 
replaced  about  20,000 
PCs  in  Europe,  the 
PC  Rollout,  page  59 
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PHWjnB  Is  your  service  provider 
pliRn  il'l  in  financial  trouble?  Is 
III  quality  slipping?  Is  your 

UUAiAlU  intellectual  propert}' safe? 
This  special  report  wiU  help  you  find 
out.  Stories  be^  on  page  39. 
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Don  Tennant  says  it's  time  to  get  over  fears 
of  offshoring  and  innovate  indead.  PASE  22 


Sun's  Jonathan  Schwartz  insists  there's  nothing  stopping 
the  company  from  making  al  of  Solaris  open-source.  PtkGE  8 
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DaimlerChrysler  Rolls  Out 
Standard  PCs  Worldwide 
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Your  potential.  Our  passion.' 

WBcrosott 


Microsoft  Windows  Server  System  makes  it  easier  for 
Switzerland's  Federal  Department  of  Foreign  Affairs 
(DFA)  to  manage  the  infrastructure  serving  their 
embassies  and  consulates  in  156  countries.  Here's 
how:  By  using  Systems  Management  Server  2003 
and  Microsoft  Operations  Manager  2005,  DFA  can 
automatically  update  its  500  remote  servers  from  a 
central  location,  saving  over  $600,000  in  travel 
expenses  alone  in  the  past  year.  They've  also  been 
able  to  reduce  the  time  and  cost  of  maintenance, 
boost  user  productivity,  and  find  the  time  to  better 
prepare  for  expansion.  Software  that's  easier  to 
manage  is  software  that  helps  you  do  more  with 
less.  To  get  the  full  DFA  story  or  to  find  a  Microsoft 
Certified  Partner,  go  to  mkrosofixom/wssystem 


"We  have  3,000  PCs  based  everywhere  from 
Argentina  to  Vietnam,  and  now  our  team  can 
update  them  all  from  headquarters." 

Viktor  Portmann 

Project  Manager,  Department  of  Foreign  Affairs,  Switzerland 


Windows  Server  System'  includes: 


Sers^f  Platform 

Windows  Server' 

Virtualization 

Virtual  Server 

Data  Management  &  Analysis 

SQL  Server' 

Communkations 

Exchange  Server 

Portals  &  Collaboratoo 

Office  SharePoint  Portal  Server 

Integration 

BizTalk  Server 

Management 

Systems  Management  Server 

Microsoft'  Operations  Manager 

Security 

Plus  other  software  products 

Internet  Security  &  Acceleration  Server 

Make  a  name  for  yourself 
with  Windows  Server  System. 


Windows 
Server  System 
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The  right  storage  solution  doesn't  just  give  you  better  storage  control. 

It  helps  you  make  better  business  decisions. 

Stnr-ige  Management  Sf'l'.itinrTs 

The  first  step  in  making  better  business  decisions?  Deciding  to  be  in  control.  CA's  Intelligent  Storage  Management  solutions  can 
put  you  in  control  of  costs,  resources  and  data  availability  like  never  before.  They  provide  you  with  a  comprehensive  real-time 
view  of  your  system's  storage  capabilities,  while  also  providing  immediate  access  to  all  of  your  information.  As  a  result,  you  can 
manage  and  monitor  your  entire  storage  environment  with  ease  and  actually  use  existing  data.  As  always,  it's  also  vendor-  and 
device-neutral,  so  you  can  maximize  your  current  storage  resources,  saving  time  and  money.  With  more  automated  software 
that  can  make  its  own  decisions  about  storage  management,  you'll  have  the  information  you  need  to  make  better  business 
decisions.  To  find  out  more  or  to  get  a  white  paper,  go  to  ca  com/driver. 
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Erecting  Secure  Infrastructure 

In  the  Technology  section:  Lend  Lease  Corp.  com¬ 
pletely  overhauled  its  security  and  enterprise 
management  systems  in  a  project  that  integrated 
18  products  in  about  a  year,  according  to  John 
Miles  (left)  and  Jay  Skibinski.  Page  25 
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4  Security  managers  complain 

that  tactical  issues  are  keeping 
them  from  being  proactive. 

5  3Com  gets  a  jump  on  the 
terabit-class  switch  market 
with  help  from  Huawei. 

8  Sun  plans  to  launch  storage 
management  software  that 
will  support  rivals’  hardware. 

10  i2  hopes  to  rebound  by 

bundling  technologies  for  cre¬ 
ating  dynamic  supply  chains- 

12  Regulatory  requirements 

may  force  the  insurance  in¬ 
dustry  to  catch  up  in  IT. 

14  Novell  files  a  lawsuit  alleging 
that  Microsoft  hampered 
WordPerfect  sales  during 
the  1990s. 

17  Q&A:  Users  want  hands-o 
help  with  IT  projects,  says 
Meta  Group’s  new  president. 

18  Microsoft  indemnifies  most 
of  its  users,  but  analysts  say 
it’s  just  a  marketing  move. 

59  Utilities  consider  the  use  of 
broadband  over  power  lines. 
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OPINIONS 

6  On  the  Mark;  Mark  Hall  talks 
to  a  vendor  that  contends  off¬ 
shoring  has  revived  the  idea 
that  you  can  speed  up  soft¬ 
ware  development  by  throw¬ 
ing  people  at  projects. 

22  Don  Tennant  thinks  less 
whining  and  more  innovation 
will  go  a  long  way  in  keeping 
IT  jobs  from  moving  offshore. 

22  Virginia  Robbins  has  heard 
from  readers  who  have  had 
less-than-ideal  self-service 
experiences.  But  these  trans¬ 
actions  can  work  smoothly. 

23  Michael  Garlenberg  wants 
the  corporate  world  to  get 
into  blogging,  but  companies 
need  to  set  guidelines. 

30  Robert  L.  MHchell  says  busi¬ 
ness  needs  will  dictate  the 
development  of  “role-based" 
versions  of  Windows  and  oth¬ 
er  monolithic  architectures. 

36  Barbara  Oomolski  describes 
best  practices  that  could  im¬ 
prove  your  efforts  to  show 
IT’S  value  in  response  to  chal¬ 
lenges  from  the  business  side. 

60  Frankly  Speaking;  Frank 
Hayes  tags  Microsoft’s  indem- 
niHcation  plan  for  customers 
as  little  more  than  a  market¬ 
ing  gimmick. 
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Masterful  Mergers 

h  the  Management  section;  You  don't  integrate  six  newly 
acquired  technolog>'  groups  in  a  year  without  learning 
valuable  lessons  about  strategies  and  processes  for  im¬ 
plementing  change.  Thomson  Financial  CIO  Jeremy 
Lehman  passes  them  on.  Page  33 


KN0WLED6E  CENTER 
OUTSOURCING 

Outsourcing  Dangers 

This  special  report  will 
help  you  manage  the  often- 
overlooked  risks  of  out¬ 
sourcing  by  keeping  a  close 
eye  on  the  contractor’s 
finances,  service  quality  and 
■piniM  handling  of  your 
I'Wivjl  trade  secrets. 
llUiUil  nOUeEBGMISQNRWEaS. 


40  Fiscal  Red  Flags.  IT  managers 
who  know  what  to  look  for  in  their 
outsourcers'  financial 
records  can  uncover 
early  signs  of  trouble. 

44  Trada  Secret 
Theft.  Locked -down 
facilities  and  rigorous 
employee  screening 


can  reduce  the 
risk  of  intellectual 
property  loss. 

46  Sinking  Quality. 

Many  companies 
repon  dissatis¬ 
faction  at  the  end 
of  the  first  year  of 
an  outsourcing  deal. 

Here  are  some  common 
problems  and  how  lo  avoid  them. 

50  Talent  Drain.  Outsourcing  can 

^^benefit  your  compa- 
ny  but  strip  it  of  its 
1^  3nd  brightest 

minds.  Here's  how 
to  figure  out  who 
goes,  who  stays 
and  who  manages 
t  the  outsourcer. 

^2  Opinion; 

Uncle  Sam  treats  IT 
_  ^  woriters  who  lose  their 

fdR  to  cheaper  overseas  labor 
differently  from  manufacturing 
workers  who  lose  their  jobs  to 
imports.  Columnist  Mark  Hall 
thinks  that's  wrong. 


nwDtvCsintlw 

MMh.  How  reliable 
is  your  oflbboie  coo- 
tractor%  commanica- 
tioos  infrastructure? 
Global  networking 
expert  Scoa  Warren 
(eUs  you  bow  to  find 
out  OQMoMMieOHf 

Data  Mnis.  Our 

newest  coUectioo  of 
charts  has  outaouEc- 
iiMQtctoidstodown- 
kMd  for  your  Power- 
Poial  presentations. 


OfOlMOffontht 
Right  root  Five  dps 
freun  Danny  Erteland 
Sara  Piarfcer  at  Vantage 
Partners  for  smooch¬ 
ing  otU  a  new  out¬ 
sourcing  rebdoosbip. 

CKMUnkgoan 

«pRrana|Nnot 

BovMMnco.  Coo- 
suhant  Cadiy  Hyatt 
of  Equalbm  aays 
companies  that  follow 
governance  princ^>ks 
rather  than  haid  and 


fost  rales  are  more 
successful  at  creating 
strong  outsourcing 
rdadonshfos. 

OQMcMM  50481 
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VOKWufTOnilM 
Front  Una.  Roden 

tell  OS  bow  domestic 
and  oDUkore  out¬ 
sourcing  has  afiected 
Che  tpiality  of  wock. 
security  of  ittfocma- 
tkm  and  aUU  level 
of  their  companies' 
ITwochecs. 
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Nortel  Delays  Rling 
Results  Again 

Norlat  Networks  Corp..  struggling 
through  «n  accounting  scaiwlsl 
that  sparkati  rogulatory  and 
criminal  probes,  again  delayed  fit* 
ing  its  restated  fkiandal  reeutts, 
primarily  because  of  revenue* 
repoftino  problems.  Nortel  now 
expects  to  fie  ImMed  preHmlnery 
unaudhed  thlrd-«piarter  2004  re* 
suto  by  fflid*Oecefnber.  It  plans  to 
fie  SAidtod  resulls  for  2003  and 
unaudited  statemefFts  for  the  first 
and  saecnd  quarters  of  2004 
within  30  to  60  days. 


DelTs  03  Results 
Outpace  Industry 

Dei  lnc.*t  financial  porformance 
continued  to  outpeca  the  industry, 
as  revenue  grew  by  16%  and 
pnriHs  Incrsasad  Iv  25%  in  the 
company's  third  quarter,  which 
ended  0^  29.  For  Its  fourth 
quarter,  Del  le  prelecting  revenue 
ipowth  of  17%  to  $13.5  blNon. 


30*VBar  Vet  Takes 
The  Hehn  at  Intel 

Thirty  year  Intel  Cerp.  veteran 
Paid  Olettni  lest  week  was  pro- 
meCad  to  CCO.  succsedtog  Craig 
Barrett.  «4io  earier  this  year  db* 
closed  pisns  to  step  down. 

Berrett  wes  named  chairman, 
mpiacing  Andrew  Grove,  who  b 
now  senior  advber  to  manage* 
msnt  and  the  board. 


Microsoft  Probes 
SP2  Bug  Report 

Mteoseft  Carp,  bto  lest  weak 
said  H*s  kwestigiMnQ  claims  that 
■everal  new  fwfcwrahWtbi  have 
been  found  in  Blndews  XP  Ser* 
vleePMk2byaecurftyfirmRn' 
jen  Softwere  bic.  in  San  Joce. 
Rnfen  said  I  feund  aa  eany  as  K) 
"sartoue*  6mis  in  SP2.  some  of 
whbk  could  alow  hachsrs  to  gab! 
compbla  lemeto  control  ef  a 


Security  Pros  Bemoan 
Need  for  Tactical  Rxnis 


More  proactive  initiathes  fell  by  the 
vvavside,  conference  attendees  sav 


Operational  and 
tactical  considera¬ 
tions  continue  to 
dominate  the  IT  se- 
curit)'  agenda,  despite  a  grow¬ 
ing  need  for  more  strategic  ap¬ 
proaches  to  data  proteaion, 
said  attendees  at  the  Comput¬ 
er  Security  Institute's  annual 
conference  here  last  week. 

Contributing  to  the  status 
quo  is  a  troubling  lack  of  com¬ 
munication  between  security 
organizations  and  business 
units  as  well  as  the  challenges 
of  dealing  with  an  increasingly 
complex  environment  of 
threats  to  IT  systems,  security 
managers  said. 

“We’re  still  fighting  a  lot  of 
yesterday's  battles.”  said  Fred 
Trickey,  information  security 
administrator  at  Yeshhra  Uni* 
versity  in  New  York. 

Reacting  to  Threats 

Instead  of  focusing  on  ways  to 
make  IT  security  an  enabler  of 
business  initiatives,  security 
managers  arc  spending  far  too 
much  time  dealing  with  unre¬ 
liable  code  and  chasing  the 
latest  viruses,  worms  and  spy- 
ware.  Trickey  lamented. 

“Wc'vc  no  choice,"  he  said, 
adding  that  many  IT  security 
staffs  don't  have  the  resources 
or  management  support  they 
need  in  order  to  become  more 
proactive. 

Tony  Spinelli.  vice  president 
of  information  security  at  First 
Data  Corp.'s  merchant  ser* 
vices  group  in  Hagerstown, 
Md..  agreed  that  security  ini¬ 
tiatives  have  to  be  about  more 
than  just  mitigating  threats. 

But  Spinelli  said  be  thinks 
that  a  lack  of  understanding  of 
business  needs  on  the  pan  of 
security  managers  b  a  big 
source  of  the  problem. 

"What’s  res^  needed  is 


We’re  still 
fighting  a 
lot  of  yesterday's 
battles. 

FRED  TRICKEY  INFORMATION 
SECURITY  ADMINISTRATOR 
YESHIVA  UNIVERSITY 

more  of  a  strategic  planning 
process  that  involves  business 
executives  and  technologists." 
Spinelli  said  Instead,  security 
managers  all  too  often  offer 
"nothing  by  way  of  a  long¬ 
term  strategy"  for  IT  security, 
he  added. 

Security  practitioners  need 
to  learn  to  speak  the  language 
of  business  users  and  try  to 
understand  the  kinds  of  prob¬ 
lems  they're  facing,  according 
(o  Roger  Fradenburgh.  a  con¬ 
sultant  at  Greenwich  Technol¬ 


ogy  Partners  Inc.  in  Boston. 

For  example,  working  with 
the  business  side  to  classify 
data  and  prioritize  it  accord¬ 
ing  to  the  level  of  protection 
it  needs  is  a  good  way  for  se¬ 
curity  staffs  to  demonstrate 
their  value  and  deliver  a  tangi¬ 
ble  rerum  on  investment. 
Fradenburgh  said. 

But  he  added  that  the  con¬ 
tinuing  failure  of  many  securi¬ 
ty  managers  to  communicate 
in  such  a  fashion  has  created  a 
perception  among  end  users 
that  IT  security  is  an  impedi¬ 
ment  to  business.  "In  a  lot  of 
situations,  business  people 
look  at  the  security  people  as 
purveyors  of  fear  who  are  al¬ 
ways  saying  that  the  sky  is 
falUng.”  Fradenburgh  said. 

Increasing  Complexity 

Changing  business  require¬ 
ments  and  the  growing  com¬ 
plexity  of  threats  can  keep  se¬ 
curity  managers  tied  to  opera¬ 
tional  and  tactical  tasks  even  if 
they  would  prefer  to  focus  on 


broader  challenges,  said  Terri 
Curran,  director  of  informa¬ 
tion  security  at  Bose  Corp.  in 
Framingham,  Mass. 

Curran  and  other  confer¬ 
ence  attendees  noted  that 
their  focus  is  limited  because 
they’re  being  pinned  down 
by  mounting  regulatory 
requirements  and  because 
they’re  facing  an  increase  in 
the  number  of  opportunities 
for  attacks  fostered  by  the 
adoption  of  technologies  such 
as  wireless  LANs  and  Web 
services  applications. 

“The  complexity  of  the  day- 
to-day  world  is  increasing  by 
leaps  and  bounds."  said  )oseph 
Popinskl  director  of  network 
security  at  Information  Engi¬ 
neering  Inc.,  a  security  con¬ 
sulting  Ann  in  Huntsville.  Ala. 
■'You  can  get  very  bogged 
dowTi  in  tbe  operational  stuff." 

For  instance,  issues  such  as 
network  access  control  intru¬ 
sion  detection,  network  opera¬ 
tions  and  help  desk  functions 
can  take  up  much  of  a  security 
staffs  working  hours,  said 
Popinskl  O  50751 


HOREOHUNE 


For  U  coverage  of  topic,  visil  out 
Sectfity  KnewAedge  Center 

OQuickUnk  M600 

wvrwxoinputenwfid.corn 


Vendors  Seek  Certification  for  Aftpiication  Security  Tools 


W&8HINOTON 

RHM  SCOMTY  softtNare  ven¬ 
dors  last  week  announced  an 
itetialiveaimedMgivinglTma)- 
agers  a  consislent  my  to  ev^ 
ate  Web  appicabon  saority 
tools  from  (tfferant  compariies. 

As  pari  of  ihe  effort 
Inc..  Imperva  Inc.,  NetContmuum 
Inc.  and  Networks  kic.  said 
they  have  estaMshed  a  pro* 
po^  S8l  of  baseine  criteria 
that  products  would  have  to 
meet  to  quaiy  as  tnie  applica* 
6on  security  products. 

ICSA  Late,  a  Mechanicsbuq). 
F^-tesad  product  teshng  and 
certification  organiaUloa  wi 
administer  the  new  proceaa  and 
doltilnHMrtyevBluationsofap' 
pBcabon  sectvily  toofa.  The  M* 
flaiiVB  was  detaied  al  the  Com* 
pAder  Securily  kettute's  annutf 
conference 


The  certiftcalion  program  s 
aimed  at  resoMng  some  of  the 
confusion  that  easts  in  the  mar* 
ket  over  what  truly  constitutes  a 
Web  appicabon  seojrity  tool, 
said  Wes  Wasson,  vice  prssi' 
dent  of  markabng  at  Santa  Clara. 
CaM.-tesed  NstConbnuum. 
Many  of  the  products  that  are 
now  being  sM  offer  HtUe  more 
than  standard  networH*ievel  pro¬ 
tection,  he  claimed. 

Srowing  interest  in  appica- 
bon*level  security  has  caught 
the  altenbon  of  large  vendors 
that 'unfortunately  are  making 
marketing  dtfms*  that  aren't 
borne  out  by  their  products,  said 
Mark  Krayr^  director  of  prod¬ 
uct  merk^  at  Foster  City. 
CaH.-based  Imperva. 

The  vendors  thetlaunched 
the  effort  invted  companies 
such  as  Qbgo  Systems  tec.. 


Symantec  Corp.  and  Check 
;  F^  Software  Technolotees 
LM  to  submit  their  application 
.  security  tools  tor  evaluation  un* 
dar  the  cemficatton  program. 

In  an  e-mal  staiemenl  a  Cis¬ 
co  spokeswoman  said  the  com- 
.  pany'VvNevBiuaietheopporiir 
nfly  to  determine  partidpetion.* 

:  Ch^  Point  and  Symantec  aiso 
said  they  were  coi^idering  the 
proposal 

6reg  WNmg.  w  analyst  at 
6artnertec..S8idappiicabon- 
level  fitewals ‘are  a  iairty  new 
technology,  and  this  should  sfTT- 
-  pify  the  process  of  product  se¬ 
lect  fwbrjyen’ 

Stellar  baseline  standards 
:  already  exist  tor  conventional 
;  network  firewlB.  and  they  too 
;  are  administaFed  by  ICSA.  Young 
;  added 

-JBiagaarVliafan 
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SCotn  Launches  Terabit  Switching  Gear 


Company  gets  boost  in  switch  race 
frx)m  des'elopment  pact  with  Huawei 


eVMATT  HAMBLEN 

3Com  Corp.  today  will  intro¬ 
duce  a  family  of  terabit-class 
switches  for  large  corporate 
users  that  are  based  on  tech¬ 
nology  developed  through  a 
joint  venture  formed  last  year 
with  China-based  Huawei 
Technologies  Co. 

The  Switch  8800  line  is  rat¬ 
ed  to  provide  bandwidth  of 
1.44Tbit/sec..  said  Bill  Naas, 
director  of  enterprise  product 
marketing  at  3Com  in  Marl¬ 
boro.  Mass.  The  first  two 
models  will  ship  in  January 
and  are  priced  at  S26.000  and 
S36.000.  he  said. 

3Coin  is  one  of  the  first  ven¬ 
dors  to  provide  terabit  switch¬ 
ing  hardware,  and  it’s  certainly 
the  first  equipment  vendor 
with  broad  switching  and 
routing  portfolios,  said  Zeus 
Kerravala.  an  analyst  at  The 
Yankee  Group  in  Boston. 

Naas  said  the  8800  will  be 
used  in  network  backbones 
and  other  corporate  applica¬ 
tions  where  Gigabit  Ethernet 
is  being  pushed  to  desktops  to 
support  large  volumes  of  data, 
such  as  enormous  video  and 
image  files. 

Initial  Merest 

Art  Jefibrds.  manager  of  net¬ 
works  and  telecommunica¬ 
tions  at  Covenant  Health  in 
Knoxville,  Tcnm,  has  been 
beta-testing  the  Switch  8814 
and  said  it  “seems  to  be  a  good 
product.”  Id  the  next  year,  he 
expects  to  deploy  the  8814  or  a 
similar  switch  in  the  line  at 
Covenant's  main  data  center 
and  may  install  others  inside 
the  group's  five  hospitals. 

“In  hospital  systems,  there 
are  so  many  images  being 
moved  over  networks,  from 
MRls  to  CT  scans  and  more.” 
requiring  greater  network  ca¬ 
pacity.  Jefibrds  said. 

Covenant  Health  has  used 
3Com  switches  for  years. 

“They  have  been  very  respon¬ 
sive  to  our  needs,”  Jeflbrds  I 

said.  I 


Larry  Padgett,  director  of 
network  and  technical  ser¬ 
vices  at  the  Palm  Beach  Coun¬ 
ty  School  District  in  Florida, 
said  he  wants  to  install  two 
switches  from  the  8800  family 
in  the  district’s  central  core. 
’’We’re  looking  for  it.  and  I’m 
tickled  pink  to  see  3Com  get¬ 
ting  back  into  big  iron.”  he 
said.  The  district,  which  has 
160  schools  and  170.000  stu¬ 
dents.  is  "growing  immensely." 
Padgett  said. 

Some  high  school  desktops 
already  have  Gigabit  Ethernet 
connections,  so  terabit  switch¬ 


ing  will  soon  be  needed  to 
handle  data  between  a  main¬ 
frame  and  more  than  100 
servers,  he  said. 

Four  years  ago,  when  3Com 
exited  the  enterprise  business 
for  a  short  period  of  time.  Pad¬ 
gett  looked  at  switches  from 
Nortel  Networks  Ltd.  and  Cis¬ 
co  Systems  Inc.,  but  he  found 
that  3Com’s  products  outper¬ 
formed  them. 

Stephen  Dantinne.  super¬ 
visor  of  technolog)'  for  the 
Vineland  School  District  in 
Vineland,  N.f..  said  he  did  a 
similar  es’aluation  of  switching 
vendors  eight  years  ago  and 
also  found  that  3Com  came 
out  on  top. 

Terabit  switching  is  offered 


3COM  is  relBasing  its  8800  (ioe 
of  terabit-etBss  switches. 

by  several  switching  vendors, 
including  Foundry  Networks 
Inc.  in  San  Jose.  ForcelO  Net¬ 
works  Inc-  in  Milpitas.  Calif., 
.ind  Enterasys  Networks  Inc. 


Business  Objects  Details  Plans 
For  Dashboards,  New  Bl  Tool  Set 


User  group  kxiks 
for  aid  in  a  variety 
of  tasks,  metrics 


Executives  from  Business  Ob¬ 
jects  SA  last  week  talked  up 
dashboard  technology  at  the 
company's  user  conference 
here  while  rallying  users  to 
standardize  on  its  new  busi¬ 
ness  inteiligence  (BI)  suite. 

IT  executives  at  the  confer¬ 
ence  said  they  are  turning  to 
the  technology  for  help  with 
budgeting  chores,  perfor¬ 
mance  evaluations,  inventory 
management  and  other  jobs. 

Business  Objects  officials 
outlined  plans  to  add  func¬ 
tionality  to  Dashboard  Manag¬ 
er  which  will  allow  users 
to  customize  metrics  to  mea¬ 
sure  everyday  c^>erational  per¬ 
formance  from  transaaional 
data  housed  in  back-end  sys¬ 
tems.  The  new  version  is  slat¬ 
ed  to  ship  this  month. 

At  the  same  time,  the  execu¬ 
tives  called  on  users  to  stan¬ 
dardize  on  the  Business  Ob¬ 
jects  XI  (formerly  Business 


Objects  U)  suite.  They  said  the 
release,  set  to  ship  b>'  year's 
end.  will  knit  together  query 
and  analysts,  reporting,  busi¬ 
ness  scorecarding  and  dash¬ 
boards.  plus  underlying  data- 
integration  technology. 

Bernard  Liautaud.  chairman 
and  CEO  of  France-based 
Business  Objects,  said  dash¬ 
boards  —  technology  that  can 
alert  users  when  operational 
data  strays  from  preset  thresh¬ 
olds  —  are  poised  to  mirror 
the  evolution  of  reporting 
tools.  The  latter  were  once 
relegated  to  IT  shops  but  are 


ni'-l'ii,:  I  i-i:  mpj- 
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now  used  by  businesses  to 
customize  reports  for  analyz¬ 
ing  transactional  data. 

Dashboards  will  be  an  im¬ 
portant  part  of  The  Tile  Shop 
LLCs  plans  over  the  next  two 
years.  The  Plymouth,  Minn.- 
based  retailer  expects  to  begin 
using  da-shboard  data  to  sup¬ 
port  budgeting  for  inventory 
purchases,  and  it  plans  to  tie 
manager  salaries  to  key  per¬ 
formance  indicators  (KPI) 
tracked  in  the  systems,  said  IT 
diiector  Gerald  Baltnish. 

Today,  store  managers  can 
feel  helpless  “because  they 
don’t  have  all  the  information 
they  need.”  Baltnish  said. 
■TVe’re  not  just  going  to  come 
from  an  ivory  tower  and  say, 
‘Here  arc  the  KPIs  —  adjust  or 
else.'  1  want  (hem ...  to  start 
doing  their  own  analysis,  (and] 
they’ll  have  data  that  has  teeth.” 

Scars.  Roebuck  and  Co.  uses 
Business  Objects  dashboards 
to  provide  500  merchandising 
and  apparel  users  with  bener 
tools  for  managing  store  in¬ 
ventory.  said  Edgar  Aguilar, 
senior  IT  spectalist  at  the 
Hoffman  Estates,  lll.-based  re¬ 
tailer.  Aguilar  characterized 


m  Andover.  Mass.,  according 
to  Kerravala  and  Steven 
Schuchart.  an  analyst  at  Cur¬ 
rent  Analysis  Inc.  in  Sterling. 
Va.  But  the  current  offerings 
come  from  vendors  that  don't 
back  a  range  of  switching  and 
routing  products,  including 
voice-over-IP  switching.  Ker¬ 
ravala  said. 

“Getting  out  of  the  enter¬ 
prise  hurt  3Com  four  years 
ago.  but  they  are  now  serious 
about  the  enterprise  cus¬ 
tomer."  Schuchart  said.  “They 
are  getting  a  big  payoff  with 
Huawei." 

Last  month.  .3Com  made 
another  key  move  for  enter¬ 
prise  customers  when  it 
signed  an  agreement  with 
Siemens  Corp.'s  business  ser¬ 
vices  unit  to  gain  access  to 
.34,000  SietDctu:  ser\-ice  work¬ 
ers  globally.  O  50745 


dashboards  as  the  “next  logi¬ 
cal  step  in  the  BI  life  cycle." 
but  he  doesn’t  think  users  are 
ready  to  create  their  own  yet. 

Aguilar  said  Scars  is  also 
mox’ing  to  reduce  the  number 
of  BI  toots  it  supports.  The 
company  has  pockets  of 
"every  BI  tool  known  to  man," 
he  said.  Sears  has  begun  stan¬ 
dardizing  on  Business  Objects 
technology  and  will  likely  mi¬ 
grate  to  XI  or  its  as-yet-un- 
named  successor,  he  said. 

On  the  other  hand.  Thomas 
Nather,  a  senior  systems  ana¬ 
lyst  at  I^nskc  Logistics  LLC  in 
Bcachwood.  Ohio,  is  evaluat- 
how  to  provide  users  with 
"one-stop  shopping"  for  ac¬ 
cess  to  BI  data  using  technolo¬ 
gy  from  Business  Objects  and 
Hyperion  Solutions  Corp. 

Business  Objects  has  strong 
presentation  and  semantic  lay¬ 
ers,  while  Sunnyvale.  Calif.- 
based  Hyperion  has  strengths 
in  financial  reporting  and  ana¬ 
lytics.  he  said. 

“As  you  add  on  applications, 
which  stack  do  you  add  on  to. 
because  each  has  its  own  spe¬ 
cialty?”  be  said.  “You  need 
flexibility  so  you  can  go  from 
high-level  information  back  to 
operational  data  to  give  users 
one-stop  shopping.  We  don't 
advocate  just  one  vendor,  be¬ 
cause  sometimes  you  can  get 
yourself  in  a  silo.”  O  50710 
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Nortel  Delays  Filing 
Results  Again 

Nortd  Networks  Coip-i  struggling 
tiirough  an  accounting  scartdal 
that  has  sparked  regulalory  and 
criminal  probes,  again  delayed  fit* 
ing  Its  restated  financtaJ  results, 
primarily  because  of  revenue' 
reporting  problems.  Nortel  now 
eipects  to  fife  limited  preliminary 
unaudited  third-guarter  2004  re* 
suits  by  mid-December.  It  plans  to 
Me  auditod  results  for  2003  and 
unaudited  statements  for  the  first 
and  second  guarters  of  2004 
wTthin  30  to  60  days. 


Deirs  03  Results 
Outpace  Industry 

Deli  lnc.'s  financial  performance 
continued  to  outpace  ttte  Industry, 
as  revenue  grew  by  18%  and 
profits  increased  by  2S%  in  the 
comparry's  third  quarter,  which 
ended  0^  29.  For  Its  fourth 
quarter.  Dell  is  profectiitg  revenue 
growth  of  17%  to  S13.5  MHon. 


30-Year  Vet  Takes 
The  Hekn  at  Intel 


Thirty  year  Intel  Corp.  veteran 
OlellirN  last  week  was  pro¬ 
moted  to  CEO.  succeeding  Craig 
Barrett,  who  earlier  this  year  dis¬ 
closed  plans  to  step  down. 

Barrett  was  named  chairman, 
replacing  Andrew  Orove,  who  is 
now  senior  adviser  to  manage¬ 
ment  and  the  board. 


Microsoft  Probes 
SP2  Bug  Report 

hficnnoft  Corp.  late  last  week 
said  it's  invesbgaling  dafans  that 
several  new  vulrterabilfties  have 
been  found  in  Windows  XP  Ser¬ 
vice  Pack  2  by  securtty  firm  Rn- 
ian  Software  Inc.  in  San  Jose. 
Tmlan  said  H  found  as  many  as  10 
‘serious*'  flews  in  SP2.  some  of 
which  could  allow  hackers  to  gain 
complete  remote  control  of  a 
compromised  computer. 


Security  Pros  Bemoan 
Need  for  Tactical  Focus 


More  pnKK'tix'c  initiatives  tall  by  tlic 
i  \\a\'side.  conference  attendees  ,s;i\' 


BY  JAIKUWAR  VIJAVAM 

i■tK.^^u>NAl  and 
tactical  considera¬ 
tions  continue  to 
dominate  the  IT  se¬ 
curity  agenda,  despite  a  grow¬ 
ing  need  for  more  strategic  ap¬ 
proaches  to  data  protection, 
said  attendees  at  the  Comput¬ 
er  Security  Institute's  annual 
conference  here  last  week. 

Contributing  to  the  status 
quo  is  a  troubling  lack  of  com¬ 
munication  between  security 
organizations  and  business 
units  as  well  as  the  challenges 
of  dealing  with  an  increasingly 
complex  environment  of 
threads  to  IT  systems,  security 
managers  said. 

"We're  still  fighting  a  lot  of 
yesterday's  battles,"  said  Fred 
Trickey.  information  security 
administrator  at  Yeshiva  Uni¬ 
versity  in  New  York. 

Reacting  to  Threats 

Instead  of  focusing  on  ways  to 
make  IT  securit>-  an  enabler  of 
business  initiatives,  security 
managers  arc  spending  far  too 
much  time  dealing  with  unre¬ 
liable  code  and  chasing  the 
latest  viruses,  worms  and  spy- 
ware,  Tr!ckc>’  lamented. 

“We've  no  choice,"  be  said, 
adding  that  many  IT  sccurir>' 
staffs  don't  have  the  resources 
or  management  support  they 
need  in  order  to  become  more 
I  proactive. 

Tony  Spinelli.  vice  president 
of  information  security  at  First 
Data  Corp-’s  mcrchani  ser¬ 
vices  group  in  Hagerstown, 
j  Md.,  agreed  that  security  Ini- 
I  liativcs  have  to  be  about  more 
I  than  lust  mitigating  threaLs. 

^  But  Spinelli  said  he  thinks 
j  that  a  lack  of  understanding  of 
business  needs  on  the  part  of 
security  managers  is  a  big 
source  of  the  problem. 

"What’s  really  needed  is 


H  We’re  still 
fighting  a 
lot  of  yesterday’s 
battles. 

FREO  TRICKEY  INfORMATlQN 
SECURITY  ADMINISTRATOR 
vfSHlVA  UNIVERSITY 

more  of  a  strategic  planning 
priTcess  that  involves  business 
executives  and  technologists." 
Spinelli  said.  Instead,  security 
managers  all  too  often  offer 
"nothing  by  way  of  a  long¬ 
term  slralegy"  for  IT  security, 
he  added. 

Security  practitioners  need 
to  learn  to  speak  the  language 
of  business  u.scrs  and  try  to 
understand  the  kinds  of  prob¬ 
lems  they're  facing,  according 
to  Roger  Fradenburgh,  a  con¬ 
sultant  at  Greenwich  Tcchnnl- 


WASHINOTON 

FOUR  SECURITY  software  ven¬ 
dor  last  week  announced  an 
indiative  aimed  at  giving  IT  man¬ 
agers  a  consistent  way  to  evalu  - 
ale  web  apphcalion  security 
tods  from  ddf^ent  companies. 

As  part  of  the  eftort.  Teros 
Inc..  Imperva  Inc.,  NetContinuum 
tnc.  and  F5  Networks  Inc.  said 
they  have  established  a  pro- 
po^  set  of  basdtne  cnleria 
that  products  would  have  to 
meet  to  Quably  as  true  applica¬ 
tion  security  products 

ICSA  labs,  a  Mechanicsburg. 
Ra.-based  product  testing  and 
certification  organuatxm.  wifl 
administer  the  new  process  and 
do  third-party  evaluatnns  of  ap¬ 
plication  securtty  tools.  The  mh 
liaiive  was  delalied  at  the  Com¬ 
puter  Security  Insbiute's  annual 
conference  hde 


ogy  Partners  Inc.  in  Boston. 

For  example,  working  with 
the  business  side  to  classify 
data  and  prioritize  it  accord¬ 
ing  to  the  level  of  protection 
it  needs  is  a  gcK>d  way  for  se¬ 
curity  staffs  to  demonstrate 
their  value  and  deliver  a  tangi¬ 
ble  return  on  investment. 
Fradenburgh  said. 

But  he  added  that  the  con¬ 
tinuing  failure  of  many  securi¬ 
ty  managers  lo  communicate 
in  such  a  fashion  has  created  a 
perception  among  end  users 
that  IT  security  is  an  impedi¬ 
ment  to  business.  "In  a  lot  of 
situations,  business  people 
look  at  the  security  people  as 
purveyors  of  fear  who  are  al¬ 
ways  saying  that  the  sk)'  is 
falling."  Fradenburgh  said. 

Increasing  Complexity 

Changing  business  require¬ 
ments  and  the  growing  com¬ 
plexity  of  threats  can  keep  se¬ 
curity  managers  tied  to  opera¬ 
tional  and  tactical  tasks  even  if 
(hey  would  prefer  to  focus  on 


The  certification  program  s 
aimed  at  resolving  some  of  the 
corrfusion  that  exists  in  Ihe  mar¬ 
ket  over  whaf  truly  constitutes  a 
Web  application  security  tool 
said  Wes  Wasson,  vice  presr- 
denl  of  marketing  at  Santa  Cta/a. 
Calif.-based  NetContinuum. 
Many  of  the  products  that  are 
now  being  sold  offer  little  more 
than  standard  network-level  pro¬ 
tection.  he  claimed. 

Gio^ng  interest  in  applica¬ 
tion-level  security  has  caught 
the  attention  of  large  vendors 
that  ’untorturrately  are  making 
marketing  daims"  that  aren't 
borne  out  by  their  products,  said 
Mark  Krayn^  director  of  prod¬ 
uct  marketing  at  Foster  City. 
Cairf.-based  Imperva. 

Ihe  vendors  that  launched 
the  effort  Bwited  companies 
such  as  Cisco  Systems  Inc.. 


I  broader  challenges,  said  Terri 
Currarr,  director  of  informa¬ 
tion  security  at  Bose  Corp.  in 
Framingham.  Mass. 

Curran  and  other  confer¬ 
ence  attendees  noted  that 
their  focus  is  limited  because 
they’re  being  pinned  down 
by  mounting  regulatory 
requirements  and  because 
they’re  facing  an  increase  in 
the  number  of  opportunities 
for  attacks  fostered  by  the 
adoption  of  tcchnoU>gics  such 
a.s  wireless  I.ANs  and  Web 
services  applications. 

“The  complexity  of  the  day- 
to-day  world  is  increasing  by 
leaps  and  bounds,"  said  Joseph 
Popinski.  director  of  network 
security  at  Information  Engi¬ 
neering  Inc.,  a  security  con¬ 
sulting  firm  in  Huntsville.  Ala. 
"You  can  get  very  bogged 
down  in  the  operational  stulT." 

For  instance,  issues  such  as 
network  access  control,  intru¬ 
sion  detection,  network  opera¬ 
tions  and  help  desk  functions 
can  lake  up  much  of  a  security 
staff's  working  hours,  said 
Popinski.  O  50751 
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Symantec  Corp.  and  Check 
Point  Software  Technofogtes 
Ltd.  to  submit  their  application 
security  tools  for  evaluation  un¬ 
der  the  certification  program. 

In  an  e-mail  statement,  a  Cis¬ 
co  spokeswoman  said  the  com¬ 
pany  ‘will  evaluate  the  opportu¬ 
nity  to  determine  participalion." 
Ch^  Point  and  ^mantec  also 
said  they  were  considering  the 
proposal. 

Greg  Young,  an  analyst  at 
Gartrter  Inc.,  said  application- 
level  firewalls  ’are  a  fairly  new ' 
technology,  and  this  should  sim¬ 
plify  the  process  of  product  se- 
lecten  for  buyers.' 

Similar  ba^ine  standards 
already  exist  for  conventional 
network  firewalls,  and  they  too 
are  administered  by  ICSA.  Young 
added. 

-  jEaAuTMT  VJfayan 


Vendors  Seek  Certification  for  Application  Security  Tools 
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3Com  Launches  Terabit  Switching  Gear 


('ompan\’  gets  btxrst  in  sw  itch  race 
from  development  pact  w  ith  Huawei 


BY  MATT  HAMBLEN 

3Com  Corp.  today  will  intro¬ 
duce  a  family  of  tcrabit-class 
switches  for  large  corpt)rate 
users  that  are  based  on  tech¬ 
nology  developed  through  a 
joint  venture  formed  last  year 
with  China-based  Huawei 
Technolt^es  Co. 

Hie  Switch  8800  line  is  rat¬ 
ed  to  provide  bandwidth  of 
1.44Tbit/scc..  said  Bill  Naas, 
director  of  enterprise  product 
marketing  at  3Com  in  Marl¬ 
boro.  Mass.  The  first  two 
models  will  ship  in  lanuary 
and  arc  priced  at  S26X)00  and 
S36.000.  he  said. 

3Com  is  one  of  the  first  ven¬ 
dors  to  provide  terabit  switch¬ 
ing  hardware,  and  it's  ccnainly 
the  first  equipment  vendor 
with  broad  switching  and 
routing  portfolios,  said  Zeus 
Kerravala.  an  analyst  at  The 
Yankee  Group  in  Boston. 

Naas  said  the  8800  will  be 
used  in  nctworic  backbones 
and  other  corporate  applica¬ 
tions  where  Gigabit  Ethernet 
is  being  pushed  to  desktops  to 
support  large  volumes  of  data, 
such  as  enormous  vidc'o  and 
image  files. 

Initial  Interest 

Art  JefTords.  manager  of  net¬ 
works  and  telecommunica¬ 
tions  at  Covenant  Health  in 
Knoxville,  Tenn..  has  been 
bcia-iesdng  the  Switch  8814 
and  said  it  “seems  to  be  a  good 
product.”  In  the  next  year,  he 
expects  to  deploy  the  8814  or  a 
similar  switch  in  the  lino  at 
Covenant's  main  data  center 
and  may  install  others  inside 
the  group's  five  hospitals. 

"In  hospital  systems,  there 
arc  so  many  images  being 
moved  over  networks,  from 
MRls  to  CT  scans  and  more." 
rL>quiring  greater  network  ca¬ 
pacity.  Jeffords  said. 

Covenant  Health  has  used 
3Com  switches  for  years. 

“They  have  been  very  respon¬ 
sive  to  our  needs."  Jeffords 
said. 


Larry  Padgett,  director  of 
network  and  technical  ser¬ 
vices  at  the  Palm  Beach  Coun¬ 
ty  School  District  in  Florida, 
said  he  wants  to  install  two 
switches  from  the  8800  family- 
in  the  district’s  central  core. 
"We’re  looking  for  it.  and  I’m 
tickled  pink  to  sec  3Com  get¬ 
ting  back  into  big  iron."  he 
said.  The  district,  which  has 
1(^  schools  and  170.000  stu¬ 
dents,  is  "growing  immensely." 
Padgett  said. 

Some  high  school  desktops 
already  have  Gigabit  Ethernet 
connections,  so  terabit  switch¬ 


ing  will  soon  K-  needed  to 
handle  data  between  a  main¬ 
frame  and  more  than  100 
servers,  he  .said. 

Four  years  ago.  when  .3Ct»m 
exited  the  enterprise  business 
for  a  short  period  of  time.  Pad¬ 
gett  looked  at  switches  from 
Nortel  Networks  Ltd.  and  Cis¬ 
co  Systems  Inc.,  but  he  found 
that  3Com’s  product.^  outper¬ 
formed  them. 

Stephen  Dantinne.  super¬ 
visor  of  tLxrhnology  for  the 
Vineland  School  District  in 
Vineland.  N.J..  said  he  did  a 
similar  evaluation  of  switching 
vendors  eight  years  ago  and 
also  found  that  .3Com  came 
out  on  top. 

Terabit  switching  is  offered 


3COM  is  reteasing  its  8800  line 
of  terabH -class  swilcim. 

by  scsvral  switching  vendors, 
including  Foundry  Networks 
Inc.  in  San  Jose,  ForcelO  Net¬ 
works  Inc.  in  Milpitas.  Calif., 
and  Enicrasys  Networks  Inc. 


Business  Objects  Details  Rans 
For  Dashboards,  New  Bl  Tool  ^t 


User  gR)up  looks 
for  aid  in  a  xariety 
of  tasks,  metrics 


Executives  from  Business  Ob¬ 
jects  SA  last  week  talked  up 
dashboard  technology  at  the 
company’s  user  conference 
here  while  rallying  users  to 
standardize  on  its  new  busi¬ 
ness  intelligence  (Bl)  suite. 

IT  e-\ccul!ves  at  the  confer¬ 
ence  said  they  arc  turning  to 
the  technology  for  help  with 
budgeting  chores,  perfor¬ 
mance  evaluations,  inventory 
management  and  other  jobs. 

Business  Objects  officials 
outlined  plans  to  add  func¬ 
tionality  to  Dashboard  Mann¬ 
er  6.S.  which  will  alloH'  usL*rs 
to  customize  metrics  to  mea¬ 
sure  everyday  operational  per¬ 
formance  from  transactional 
data  housed  in  back-end  sys¬ 
tems.  The  new  version  is  slat- 
Lxi  to  ship  this  month. 

At  the  same  time,  the  execu¬ 
tives  called  on  users  to  stan¬ 
dardize  on  the  Business  Ob¬ 
jects  XI  (formerly  Business 


Objects  ID  suite.  They  said  the 
release,  set  to  ship  by  year’s 
end.  will  knit  together  query’ 
and  analysis,  reporting,  busi¬ 
ness  scoreeardir^  and  dash¬ 
boards.  plus  underlying  data- 
iniL*gration  technology. 

Bernard  Liauiaud,  chairman 
and  CEO  of  France-based 
Business  Objects,  said  dash¬ 
boards  —  technology  that  can 
alert  u.sers  when  operational 
data  strays  from  preset  thrc’sh- 
<»lds  —  are  poised  to  mirror 
the  evolution  of  reporting 
tools.  The  latter  were  once 
relegated  to  IT  shops  but  arc 


Business  Objects 
Dashboard  Manaqei 

MONITORS  metrics  like  mer- 
chandtse  and  inventory  levris. 

SENDS  dltuli  when  levels  ai- 
ceed  or  tali  be'uw  set  iirnils 

ALLOWS  users  lo  oersooalue 
metrics 

includes  guided  analysis  to 
lead  users  lo  rc>ol  cause  ot 
problems 


now  used  by  businessc's  to 
customize  reports  fur  analyz¬ 
ing  transactional  data. 

Dashboards  will  be  an  im- 
ponant  part  of  The  Tile  Shop 
LLC’s  plaas  over  the  next  two 
years.  The  Plymouth.  Minn - 
based  retailer  expects  to  begin 
using  dashboard  data  to  sup¬ 
port  budgeting  for  inventory 
purchases,  and  it  plans  to  tic 
manager  salaries  to  la‘y  per¬ 
formance  indicators  (KPl) 
tracked  in  the  systems,  said  IT 
director  Gerald  Baltrush. 

Today,  store  nunagers  can 
fcvl  helpless  "because  they 
don't  have  all  the  information 
they  need.”  Baltrush  said. 
"We’a*  not  just  going  to  cxime 
from  an  iviiry  tower  and  say. 
'Here  are  the  KPIs  —  ad|u.si  or 
else.'  1  want  them ...  to  start 
doing  their  own  analysis,  (and  J 
they’ll  have  data  that  has  uvth." 

Sears.  Roebuck  and  Co.  uses 
B^tsiness  Objects  dashboards 
to  provide  500  merchandising 
and  apparel  u.sers  with  better 
iiK)ls  for  managii^  store  in¬ 
ventory.  said  Edgar  Aguilar, 
senior  IT  specialist  at  the 
Hoffman  Estates.  Ill.-bascd  re¬ 
tailer.  Aguilar  c'faaracierizcd 


in  .-\ndiner.  Mass.,  according 
to  Kcrr.u.ila  and  Sie\en 
Schuchart.  an  analyst  at  (Jur- 
reni  An.ilysis  Inc.  in  Sterling, 
\'a.  But  the  current  offerings 
Come  from  vendors  that  don’t 
'  back  a  r.Tnge  of  switching  and 
routing  products,  including 
voice-over-IP  switching.  Ker- 
ravaLi  said 

"Getting  out  of  tltc  enter 
prise  hurt  3Lom  f«vur  years 
ag<s  hut  they  are  now  semms 
aKmi  the  enterprise  vnis- 
tomer."  Schuchart  said.  “They 
are  getting  a  big  p.iyoff  with 
Huawei." 

I  jst  month.  .3Ci«m  made 
another  key  mtive  for  enter¬ 
prise  customers  when  it 
signed  an  agreement  with 
Siemens  t\irp.'s  business  ser¬ 
vices  unit  to  gain  access  to 
.34.lM)tt  Siemcn-s  .scrsicc  vv\»rk- 
ers  globally.  O  50745 


dashboard.s  as  the  "next  logi¬ 
cal  step  in  the  HI  life  cycle" 
but  he  doesn’t  think  u.sers  are 
I  ready  lit  cre.itc  their  own  yet. 

Aguilar  said  Sears  is  alstt 
moving  to  reduce  the  number 
of  HI  imtls  it  supports.  The 
comp.iny  has  pockets  tif 
"ev'cry  Bl  tool  known  in  man." 
he  said.  Scars  has  bv'gun  stan¬ 
dardizing  on  Business  ObjecLs 
technology  and  will  likely  mi¬ 
grate  to  XI  Of  its  as-yet-un- 
:  named  successttr,  he  said. 

On  the  other  hand.  Tbttmas 
^  Nathcr.  a  senior  systems  ana¬ 
lyst  at  Penske  U^isiics  LLC  in 
j  Beaehwuod.  Ohio,  isevaluai- 
I  inghttw  to  provide  users  with 
"one-slop  shopping"  fitr  ac- 
^  cess  to  Bl  data  usir^  icchmtio- 
'  gy  from  Business  Objects  and 
Hyperion  Solutions  Corp. 

Business  Objects  has  strong 
presentation  and  semantic  la)  - 
crs.  while  Sunnyvale.  Calif.- 
I  based  Hyperion  has  strengths 
I  in  financial  reporting  and  ana- 
I  lylics.  he  said. 

I  "As  vtiu  odd  <tn  applicaiion.s. 
which  stack  do  you  add  on  to. 
because  each  has  its  own  spe¬ 
cialty?"  he  said.  "You  ntvd 
flexibility  S4>  yxvu  can  go  from 
high-lirvel  informatton  back  lo 
operational  data  to  give  users 
one-stop  shopping.  We  don't 
advocate  just  one  vendor,  be¬ 
cause  sometimes  you  can  get 
>xnirself  in  a  sihi.''  O  50710 
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RnefoxSettoTake 
On  Internet  Explorer 

The  Mozilla  Foundation  in  Moun¬ 
tain  View,  Caiif.,  has  released 
Version  1.0  of  Its  Firefos  browser, 
an  open-source  product  that  may 
offer  real  competition  to  Microsoft 
Corp.’s  ubiquitous  kitemet  Ex¬ 
plorer.  A  preview  release  of  Fire- 
foi  was  downloaded  over  8  mil¬ 
lion  times.  Ftrefox  includes  an  in- 
tepraied  pop-up  ad  blocfcer  and 
safeguards  against  online  scams 
like  phishing  and  spoofing  (see 
QuickUnk  50296). 

Cisco  CEO  Cautious 
About  Near  Term 

Oaco  Systems  Inc.  said  revenue 
in  Its  first  quarter,  which  ended 
Oct.  30.  rose  17.1%  from  the 
year-aariier  total  but  only  0.8% 
from  the  previous  quarter's  level. 
CEO  John  Chamfiers  said  he  has  a 
‘liealthy  paranoia”  about  the  near  ; 
term,  noting  that  M's  too  soon  to 
predict  how  confident  users  will 
be  over  the  next  four  months.  | 


Northrop  Gains 
S46M  IT  Contract 

Northrop  Grummen  Corp.  was 
awarded  a  five-year.  S46  million 
outsourcing  pact  by  the  cMy  of 
Indianapolis  and  the  county  of 
Marion.  Ind.  ^  contract  calls 
Nk  Northrop  Grumman  to  run  and 
support  the  cMy  artd  county  data 
centers,  netvmrfa.  help  desks  end 
applicetion  sarvices. 

SBC  to  Cut  10.000 
Jobs  in  Next  Year 

SBC  (kwnmunicalions  bic.  plans 
to  cut  more  than  10.000  jobs,  or 
8%  of  Ms  workforce,  due  to  pro¬ 
ductivity  improvements  and  de¬ 
clining  demand  for  loeal  phone 
access.  San  Anionio-based  SBC  I 
wdl  continue  to  hire  workers  I 

lor  wireless  and  broadband  I 

accessposts.  I 


vyioust.'!/ 


Ofhhoringnevives 
Man-Month  Myth . . . 

...  as  IT  shops  appty  Ixiite'force  programming  tech¬ 
niques''  with  kiw-cost  coders  from  India  and  elsewhere. 

TTiat’s  the  observation  of  Tom  Bigelow,  CEO  of  Per¬ 
formance  Software  Corp.,  a  Phoenix-based  develop¬ 
er  of  custom  softw  are  for  the  aerospace  industry. 


BigeUm-  says  companies  that 
hire  offshnre  developers  in 
hulk  evcnrually  hit  a  wall 
That's  because,  as  Frederick  P. 
Bn>oks  )r.  revealed  in  The 
Mythical  Afan-Afonth.  his  clas¬ 
sic  book  on  software  engi¬ 
neering  published  nearly  30 
years  ago,  you  can't  compress 
the  time  it  takes  to  complete 
software  simply  b>'  throwing 
more  bixiies  at  it  —  not  e\'en 
in  the  Internet  age.  Most  IT 
managers  have  tven  “mandat¬ 
ed  to  cut  X  percent  from  their 
budget."  Bigelow  contends. 

So.  many  have  grasped  at  the 
straw  of  offshore  develop¬ 
ment  with  the  hope  of  saving 
money  and  still  getting  big  de¬ 
velopment  lobs  done.  The  fre¬ 
quent  results,  he  says,  arc  late 
projects,  bad  projects  and 
dead  projects.  While  upper 
management  is  busy  updating 
its  spreadsheets  with  lower- 
cost  programmers  from 
abroad,  many  midlcvel  IT 
managers  are  fouruiering  as 
they  try  to  control  work- 


which  targets  elec-  . 

ironies  manufacturers.  ^ 

gives  supply  chain  j 

managers  exactly  that  1 4 

—  an  inside  look  at  the 
w'ork  being  done  by 
their  partners.  With 
the  Interactive  6.0  up¬ 
grade  scheduled  for 
release  in  next  year’s 
first  quarter,  cus¬ 
tomers  will  gel  a  new 
“adaptive  supply  chain 
architecture"  that  lets  them 
use  wizard-style  tools  to 
create  business  processes 
throughout  their  supply 
chains.  West  says.  Users  will 
be  able  to  define  the  roles  of 
various  partners  in  the  manu¬ 
facturing  process  and  then 


a 


client.  "A  browser  just 
runs  out  of  steam,”  he 
^  says.  SmartCompany 
^  1  is  working  on  a  Win¬ 
dows  offering  as  an  al¬ 
ternative  for  accessing 
its  online  CRM  soft¬ 
ware.  Zuffoletto  says 
the  technology  should 
ship  late  in  the  first 
quarter  of  next  year 
and  cost  "in  the  neigh¬ 
borhood”  of  S299  per 
user.  Putting  a  Windows  front 
end  on  a  Web-based  app  ma>’ 
seem  counterintuitive,  and 
Zuffoletto  acknowledges  that 
it  certainly  flies  in  the  face  of 
Salesforcc.com’s  mantra  of  no 
software  on  PCs.  But  if  the 
limitations  of  browsers  bc- 


usc  cxccption-based  reporting  come  a  broader  issue  for 
methods  to  assure  quality'  and  users,  maybe  the  new  mantra 


certain  tasks,  such  as  test  and 
verification."  The  best  IT  de¬ 
partments  are  “tri-partnering" 
their  development.  Bigelow 
says,  describing  an  ideal  sce¬ 
nario  in  which  60®o  of  the 
w«)rk  is  done  in-house,  30S'  is 
sent  offshore  and  I0®o  Ls  out¬ 
sourced  to  U.S.  firms. 

Extended  enterprise 
supply  chains  caN... 

...  for  new  tools  to  augment  ERP 
software,  accordmg  to  Peter  West, 
vice  president  of  marketing  at 
RiverOne  Inc.  in  Irx-inc.  Calif. 

“ERP  systems 
arc  designed 
to  work  in- 
house.  not 
across  multi¬ 
ple  suppliers.” 
West  claims. 
Yet,  he  notes, 
companies 
that  have 
business  pan- 
ners  manufac¬ 
ture  goods  for  them  want  to 
control  the  process  “as  iffthe 


accountability.  “At  the  end  of 
the  day.  the  best  supply  chain 
wins.”  West  says. 

Salesforce.com  comes 
under  fire  from... 

. . .  new  competMors  in  online  sub¬ 
scription  market  for  hosted  sales 
force  automation  tools  and  other 
CRM  software.  For  example. 
Uptilt  Inc.  in  Redwood  City. 
Calif.,  plans  to  unveil  its 


will  be  “nearly  no  softwan.*.” 

Instant  messaging 
meets  collaboration . . . 

. . .  with  bustneas-orientod  tool 
from  Five  Across  Inc.  in  Palo 
Alto.  Calif.  Company  officials 
say  the  most  popular  instant 
messaging  products  were  de¬ 
signed  with  consumers,  espe¬ 
cially  teenagers,  in  mind.  Five 
Across  also  claims  that  IM 


SalcsCcnter  service  this  week,  tools  tailored  for  corporate 
Dave  Dabbah.  general  manag-  users  mostly  take  IT  issues 


groups  overseas.  Bigelow  says,  goods]  were  being  made  in- 


But  be  acknowledges  that  off¬ 
shore  workers  are  “ideal  for 


side  their  four  walls."  River- 
Onc’s  Interactive  applicatioa 


or  of  SalcsCemcr.  says  Uptilt 
will  take  on  San  Francisco- 
based  Salesforce.com  Inc.  by 
selling  a  product  that's  easier 
to  use  and  customize  and  by 
offering  consulting  services  at 
no  i*xlra  charge.  Monthly  fees 
Stan  at  Sl.OOO  per  end  iiser 
for  a  minimum  of  10  seats. 

Taking  a  different  competi¬ 
tive  tack  is  SmartCompany 
Inc.  in  Walnut  Creek.  Calif. 
SmartCompany  CEO  Joe  Zuf- 
folctto  explains  that  although 
hosted  CRM  technology  has 
clear  advantages  over  pack¬ 
aged  software,  it  lacks  a  pow¬ 
erful  enough  client  applica¬ 
tion  to  do  what  many  users 
want,  such  as  drag-and-drop 
capabilities  and  easier  inte¬ 
gration  with  Microsoft  Office. 
Zufibletto  claims  that  the  an¬ 
swer  is  a  Windows-based 


into  account,  not  business 
ones.  The  company's  Inter- 
Comm  software  replaces  the 
usual  IM  buddy  list  with  func¬ 
tional  groups  of  end  users.  It 
also  can  store  and  forward 
messages  to  people  who 
aren't  online,  create  unlimited 
shared-notes  fields  and  store 
common  documents  in  a 
group  repository.  IntcrComm 
1.1,  which  ships  this  week, 
adds  RSS  feeds  and  struc¬ 
tured  messaging  forms.  A 
companion  Workgroup  Seiv- 
er.  which  centralizes  IM  ad¬ 
ministration.  is  also  due  this 
week.  050694 


Corporals  IM  uieri,  in  2007, 
according  to  Radicali  Gioop 
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RrefoxSettoTake 
On  Internet  Explorer 

Hw  UaA  Fsundition  in  Mourr* 
tun  Vitw.  CaM..  tm  ratMiMi 
tferaion  to  of  its  Rrafn  browsar. 
an  opsn-souTM  product  that  may 
oWor  real  compoWton  to  Microsoft 
Corps's  ubiquilous  bitamst  Ei* 
ptoror.  A  prtvitw  roioase  of  Rro- 
tai  ous  douwdoadad  ovtr  8  mM- 
ion  tnMS.  foafiu  Indudas  an  in* 
toqratod  po^-up  ad  btochar  and 
salaouanh  against  onfina  scam 
Hu  phishing  and  uioofing  (sse 
CMcbUnk  50296). 


Cisco  CEO  Cautioiis 
About  Near  Term 

Cisco  Systama  Inc.  saM  rsvnmie 
bi  ila  first  tiuansr.  athich  andad 
Oct  30,  mao  17.1%  from  tha 
yaaroufiar  total  but  only  0.8% 
from  ths  pfoidowi  quartar’s  bvoL 
CEO  tiehn  Chunbora  said  ha  has  a 
‘iMaWiy  paranoia”  about  tha  nav 
tann,  no^  that  It's  too  soon  to 
proifict  how  confidant  oaars  arill 
ba  osar  tha  noxt  four  months. 
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Northrop  Gains 
$46M  IT  Contract 

Northrop  Orumman  Corp.  ams 
aamrdad  a  fNa  yaar,  S46  mWon 
outaoureino  pact  by  tha  dty  ol 
IndtanapoNs  and  tha  county  of 
Marion,  bid.  Tha  contract  cads 
for  Northrop  Grumman  to  run  and 
support  tha  cfly  and  county  data 
canlara.  natworfes.  haip  dashs  and 
appficatioo  aarvfeaa. 


SBC  to  Cut  10,000 
JobsinNactYisar 

SBC  Comnunicaiiona  Inc.  plans 
to  Oft  moro  than  10,000  |o^  or 
0%  of  ilB  onrhforca,  duo  to  pro- 
ducIMIy  improvomanti  and  do* 
c8niag  domand  tar  leeal  phona 
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Man-Month  Myth . . . 


...asITshopsapply'lvutHbrceprografTifTifngtech- 
nk|ues"  orNh  lowr-cost  coders  from  Indta  arid  alseti^^ 

TTiat’s  the  observation  of  Tom  Bigelow,  CEO  of  Per¬ 
formance  Software  Corp.,  a  Phoenix-based  develop¬ 
er  of  custom  software  for  the  aerospace  industry. 


Bigelow  says  companies  that 
hire  of&hore  developers  in 
bulk  eventually  hit  a  wall. 
That's  because,  as  Frederick  P. 
Brooks  Jr.  revealed  in  The 
Myrhico/  Man-Month,  his  clas¬ 
sic  book  on  software  engi¬ 
neering  published  nearly  30 
years  ago.  you  can't  compress 
the  time  it  takes  to  complete 
software  simply  by  throwing 
more  bodies  at  it  —  not  even 
in  the  Internet  age.  Most  IT 
managers  have  been  "mandat¬ 
ed  to  cut  x  percent  from  their 
budget,”  Bigelow  contends. 

So.  many  have  grasped  at  the 
straw  of  offshore  develop¬ 
ment  with  the  hope  of  saving 
money  and  still  getting  big  de¬ 
velopment  Jobs  done.  The  fre¬ 
quent  results,  be  says,  arc  late 
prefects,  bad  projects  and 
dead  projects.  While  upper 
management  is  busy  up^dng 
its  spreadsheets  with  lower- 
cost  programmers  from 
abroad  many  midlevel  IT 
managers  are  foundering  as 
they  try  to  control  work¬ 
groups  overseas,  B^low  says. 
But  be  acknowledges  that  oflT- 
shore  workers  are  ”ideal  for 


certain  tasks,  such  as  test  and 
verification."  The  best  IT  de¬ 
partments  are  "tri-partnering" 
their  development.  Bigelow 
says,  describing  an  ideal  sce¬ 
nario  in  which  60%  of  the 
work  is  done  in-house,  30%  is 
sent  offshore  and  10%  is  out¬ 
sourced  to  U3.  firms. 

Extended  enterprise 
supply  chains  call... 

...  for  fluw  toota  to  augment  ERP 
soflwaia.  accerdbig  to  Rater  Wfast. 

vice  president  of  marketing  at 
RiveiOne  Inc.  in  Indne,  Calif. 

“ERP  systems 
are  designed 
to  work  tn- 
bouse.not 
across  multi¬ 
ple  suppliers.” 
West  claims. 
Yet.  he  notes, 
companies 
that  have 
business  part¬ 
ners  manufac¬ 
ture  goods  for  them  want  to 
control  the  process  "as  if  (the 
goods!  were  being  made  in¬ 
side  tbdr  four  walls.”  River- 
One's  Interactive  application. 


which  targets  elec¬ 
tronics  manufacturers, 
gives  supply  chain 
managers  exactly  that 
—  an  inside  look  at  the 
work  being  done  by 
their  partners.  With 
the  Interactive  6J0  up¬ 
grade  scheduled  for 
release  in  next  year's 
first  quarter,  cus¬ 
tomers  will  get  a  new 
“adaptive  supply  chain 
architecture”  that  lets  them 
use  wizard-style  toots  to 
create  business  processes 
throughout  their  supply 
chains.  West  says.  Users  will 
be  able  to  define  the  roles  of 
various  partners  in  the  manu¬ 
facturing  pnx^ss  and  then 
use  exception-based  reporting 
methods  to  assure  quality  and 
accountability.  "At  the  end  of 
the  day.  the  best  supply  chain 
wins."  West  says. 

Salesforc8.com  comes 
under  fire  from... 

. .  •  new  competNora  In  onfine  sub¬ 
scription  maifrat  for  hosted  satas 
forct  automation  Unis  and  olfwr 
CRM  aoftwrara.  For  example, 
Uptilt  Inc.  in  Redwood  City. 
Calif.,  plans  to  unveil  its 
SalesCenter  service  this  week. 
Dave  DabbaK  general  manag¬ 
er  of  SalesCenter,  says  Uptilt 
will  take  on  San  Francisco- 
based  Salesforcexom  Inc.  by 
selling  a  product  that’s  easier 
to  use  and  customize  and  by 
offering  consulting  services  at 
no  extra  charge.  Monthly  fees 
start  at  $1,000  per  end  user 
for  a  minimum  of  10  seats. 

Taking  a  different  competi¬ 
tive  tack  is  SmartCompany 
Inc.  in  Walnut  Creek,  Calif, 
SmartCompany  CEO  Joe  Zuf- 
foletto  explains  that  althou^ 
hosted  CRM  technology  has 
clear  advantages  over  pack¬ 
aged  software,  it  lacks  a  pow¬ 
erful  enough  client  applica¬ 
tion  to  do  what  many  users 
want,  such  as  drag-and-drop 
capabilities  and  easier  inte¬ 
gration  with  Microsoft  Office. 
Zuffoletto  claims  that  the  an¬ 
swer  is  a  Windows-based 


client.  “A  browser  Just 
runs  out  of  steam.”  be 
says.  SmartCompany 
is  working  on  a  Win¬ 
dows  offering  as  an  al¬ 
ternative  for  accessing 
its  online  CRM  soft¬ 
ware.  Zuffoletto  says 
the  technology  should 
ship  late  in  the  first 
quarter  of  next  year 
and  cost  "in  the  neigh¬ 
borhood”  of  $299  per 
user.  Puttiftg  a  Wlndow.s  front 
end  on  a  Web-based  app  may 
seem  counterintuitive,  and 
Zuffoletto  acknowledges  that 
it  certainly  flies  in  the  face  of 
Salesforce.com's  mantra  of  no 
software  on  PCs.  But  if  the 
limitations  of  browsers  be¬ 
come  a  broader  issue  for 
users,  maybe  the  new  mantra 
will  be  "nearly  no  software." 

Instant  messaging 
meets  coHabonrtion .. . 

. . .  wWi  busbiMS-orientod  tool 
fromFhmAcnMine.in  Palo 
Alto,  Calif  Company  officials 
say  the  most  popular  instant 
messaging  products  were  de¬ 
signed  with  consumers,  espe¬ 
cially  teenagers,  in  mind.  Five 
Across  also  claims  that  IM 
tools  tailored  for  corporate 
users  mostly  take  IT  issues 
into  account,  not  business 
ones.  ITte  company's  Inter- 
Comm  software  replaces  the 
usual  IM  buddy  list  with  func¬ 
tional  groups  of  end  users.  It 
also  can  store  and  forward 
messages  to  people  who 
aren't  online,  create  unlimited 
shared-notes  fields  and  store 
common  documents  in  a 
group  repository.  InterComm 
I J,  wUch  ships  this  week, 
adds  RSS  fee^  and  struc¬ 
tured  messaging  forms.  A 
companion  Workgroup  Serv¬ 
er.  which  centralizes  IM  ad¬ 
ministration.  is  also  due  this 
week.O50eG4 
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Introducing  data  centers  on  demand 

New  architecture  supports  power  densities  of  today...  and  tomorrow 


Hot-sisle  Ceiling  Tiles/Ceble  Trough 


Psrt  Usable  Average 

Number  IT  Racks  kW  per  Rack 


Now  you  can  quickly  deploy  a 
standard-  or  high-density  site  of  anv  size 
with  scalable,  top-tier  availability. 


Price  Price  to  lease 

to  buy  (36  installments) 


ISXCR1SY16K16PS  1 

ISXT240MD6R  6 

ISXT240MD11R  11 


uptoSkW  *14,999’  *499 

uptoSkW  *149,999’  *4,999 

up  to  5kW  *249,999’  *7,999 


ISXT280MD40R  40  up  to  5kW  *699,999’  *21,999  R— — 

ISXT2BailMOtOOR  100  up  to  5kW  *1,649,999’  *50,999  ^ 

High  Density  Configuration  ishom,3tmei 

IS)Cr280HD8R  8  uptolOkW  *399,999’  *12,999  i 

High  density  upgrades  start  at  ’1 0,999  L - 

On-site  power  generation  options  start  at  ‘29,999 

Order  your  solution  today.  Call  888-289-APCC  x3278. 
I—  Don't  see  the  configuration  you  need? 

Try  ARC'S  online  InfraStruXure'BuildOut  Tool 
today  and  receive  3  FREE  ARC  white  papers. 

|r=  ~=  — -  Go  to  httpy/piamoMpcxom  and  enter  key  code  v307y 


All  multi-rack  configurations  feature: 

^  N-rt  power  and  cooling 
r/  Secure,  self-contained  environment 
■r/  Peak  capacity  of  20kW  per  rack 
^  Enhanced  service  package 
r/  Integrated  management  software 


What  is 


data  cente 


on  demand 
InfraStru^^re 

DATA  CENTERS  ON  DEMAND 


Highly  available  and  manageable, 
quick-to-install,  scalable  architecture 
that  easily  supports  both  standard- 
and  high-density  applications. 

•  Up  to  20kW  a  rack  for  any 
blade  server  application 

■  Unlimited  racks 

•  Ships  in  5 days** 

•  Installs  in  1  day** 

■  Optional  on-site 
power  generation 

-  Raised  floor  not  required 

■  Vendor  neutral  guaranteed 
compatibility 


InfraStniXure"  BuildOut  Tool 


*  Pncss  do  ncFi  inciiide  IT  eguiixnam  ' 


Legendary  Reliability* 
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Sun  Adds  Mix-and-Match  Disk 
Storage,  Multivendor  Software 


■V  LUCAS  MSARtAN 

SUN  Microsystems  Inc. 
today  plans  to  an* 
nouncc  four  storage 
products,  including  up* 
graded  software  with  multi- 
vendor  management  capabili¬ 
ties  and  a  pair  of  midrange 
storage  devices  that  can  mix 
and  match  Fibre  Channel  and 
Serial  ATA  disk  drives  within 
the  same  box. 

The  storage  rollout  is  pan 
of  Sun's  quanerly  product 
launch,  which  is  being  held  in 
San  Francisco  and  will  feature 
the  formal  announcement  of 
Solaris  10  (see  story  below). 

Chief  among  the  new  stor* 
age  offerings  is  the  latest  ver¬ 
sion  of  Sun’s  Enterprise  Stor¬ 
age  Manager  software.  ESM 
3.0  can  use  the  Storage  Man¬ 
agement  Initiative  Specifica¬ 
tion  (SMl-S)  to  control  rival 
disk  arrays  from  EMC  Corp.. 
IBM.  Hitachi  Data  Systems 


Corp.  and  Hewlett-Packard 
COn  Sun  officials  said. 

Sun  first  embedded  suppon 
for  SMI-S  into  its  software  18 
months  aga  But  until  now,  the 
company  has  been  able  to  give 
storage  administrators  only  a 
consolidated  view  of  its  own 
hardware,  said  Mark  Canepa, 
executive  vice  president  of 
network  storage  at  Sun. 

Sun  also  plans  to  introduce 
its  second  networic-attached 
storage  device,  a  midrange 
product  called  the  StorEdge 
SIO  NAS  that  can  scale  up  to 
32TB  of  capacity  with  Fibre 
Channel  disk  drives  and 
745T6  using  a  combination  of 
Fibre  Channel  and  Serial  ATA 
disks. 

Serial  ATA  is  a  less  expen¬ 
sive  technology  that  can  be 
used  for  secondary  storage, 
enabling  data  backups  to  bo 
done  within  the  same  box 
used  for  primary  storage. 


In  addition.  Sun  will  unveil 
the  StorEdge  6130.  a  midrange 
disk  array  that  can  also  mix  Fi¬ 
bre  Channel  and  Serial  ATA 
drives  with  a  maximum  capac¬ 
ity  of  33.6T3  (sec  box). 

The  company  b  also  adding 
a  tool  called  the  Compliance 
Archiving  System.  The  soft¬ 
ware  offers  writc-once,  read- 
many  capabilities,  plus  audit- 


trail  options  for  Sun’s  NAS  de¬ 
vices,  setting  them  up  as  po¬ 
tential  competitors  to  fixed- 
storage  products  from  vendors 
such  as  EMC. 

Charles  Sears,  manager  of 
research  computing  at  the 
College  of  Oceanic  and  At¬ 
mospheric  Sciences  at  Oregon 
State  University  in  Corvallb, 
said  he's  having  trouble  com¬ 


pleting  disk-to-tape  data  back¬ 
ups  during  hb  allotted  proc¬ 
essing  window.  The  amount  of 
data  the  school  stores  on  high- 
performance  Fibre  Channel 
disk  drives  in  its  Sun  storage 
devices  b  “growing  exponen¬ 
tially.’'  Sears  said.  As  a  result, 
he's  looking  at  using  Serial 
ATA  technology  to  provide  a 
near-line  backup  capability. 

Sears  uses  Sun’s  ESM  2.1 
software,  and  he  hopes  over 
the  next  month  to  upgrade  to 
the  new  version  of  the  soft¬ 
ware  and  manage  the  devices 
under  one  umbrella.  That 
would  be  nirvana,"  Sears  said. 
050728 
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■  IM«arlcaBad«d  storage  davica 
that  wppests  both  Flira  Chamsi 
and  8aM  ATA  drit  drims. 

■  AvalaUe  in  tarty  Dscamber; 
pricing  has  ytt  to  bt  flnaiixad. 

StorE^siWArrav 

■  MUranga  dsh  Mray  that  can 
hold  a  ndx  of  Flira  Qiaraiai  and 


■  AwalaUa  new  for  Fbra  (^lannal 
only,  wMi  pricing  starting  at 
$46,470  for  38S6a  biud  support 


is  due  tarty  next  month. 

Enterprise  Storage 
Manager  3.0 

•  UmraM  nftmn  with  SHI-S 
support  for  managing  dsk  arrays 
from  otbtr  vendors. 

-  ftirMlahti  nmr  pririno  itarti 
at  $33,000  and  is  txptctod  to 
average  tboiit  $100,000. 


Schwartz  Says  Solaris  Can 
Be  Completely  Open-Source 


BV  PATmCK  THIMOCAU 

Sun  Microsystems  Inc.  will 
formally  tmnch  Solaris  10  this 
week,  when  officiais  plan  to 
lay  out  pricing  for  the 
operating  system  os 
weU  as  details  about  re¬ 
leasing  the  open-source 
version  of  the  software 
that  is  due  next  year. 

Jonatfian  Schwab 
Sun^  preridenr  and 
chief  operating  officer. 

^>oke  with  Computer- 
world  lost  week  about  Solaris 
10.  the  open-source  plan  and 
other  topics. 

In  your  webfog,  you  cad  Solaris 
to  "tte  slogle  biggast  imprevt- 
tntot  iM  vs  avar  daHvortd  n  a 
eommarelal  oparottng  xyslom.* 
What  makes  It  so?  First  and 
foremost,  we  have  extended 


the  same  safe,  protected  and 
scalable  operating  system  on 
our  exbting  Unix  offerings  on 
Sparc,  as  well  as  bringing  to 
them  the  first  truly  ven¬ 
dor-neutral  operating 
system  that  runs  across 
Itell,  Hewlett-Packard. 
IBM  and  Sun's  x86. 64- 
bit  systems. 

Second,  we've  really 
gone  back  and  revbited 
the  fundamental  issues 
that  customers  had  with 
their  systems.  We  all  know 
that  the  old  saw  b.  The  hard¬ 
ware  1  was  running  was  too 
expensive,  and  not  only  that. 

I  was  getting  only  15%  utiliza¬ 
tion.  so  therefore  1  built  out  a 
big  grid  of  little  x86  systems." 

I  was  with  one  customer 
last  week  who  told  me  they 
had  bought  a  few  thousand 


to  customers  the  ability  to  run  I  IBM  BladeCenier  xSeries  sys¬ 


tems.  and  their  server  utiliza¬ 
tion  was  about  6%.  Just  be¬ 
cause  you  chopped  up  the  uti¬ 
lization  problem  into  smaller 
units  doesn't  mean  the  utiliza¬ 
tion  problem  has  gone  away, 
whidi  b  why  we  added  logical 
partitioning  into  Solaris  vrith 
containers. 

Third,  there  b  just  an  extra¬ 
ordinary  investment  that  we 
have  made  in  ensuring  that  we 
bring  an  open-source  Solaris 
to  the  marketplace,  a  truly 
vendor-neutral  Solaris. 

What  do  you  think  indopondont 
software  vendors  are  going  to  do 
with  open-source  Solaris?  I'm 
not  necessarily  convinced  it's 
going  to  yield  a  new  set  of 
new  applications,  as  much  as 
a  new  way  of  interacting  with 
Sun.  So,  ISVs  that  want  to  be 
able  to  make  enhancements 
or  modifications  to  their  prod¬ 
ucts  or  the  base  operating 
system  will  have  the  freedom 
to  do  so  —  the  freedom  to 


How  will  the  open-source  Solaris 
devetopment  eommuntty  werfc? 
Will  you  create  somethlno  similar 
to  OpenOffice.org?  Absolutely. 
It’s  critically  important  for  us 
that  we  cultivate  a  very  high- 
integrity  relationship  with  the 
open-source  community. 

we  have  had  historically. 

What's  the  time  frame  far  re¬ 
leasing  open-source  Solaris? 

We  will  have  the  license  an¬ 
nounced  by  the  end  of  this  cal¬ 
endar  year  and  the  code  fully 
available  (by  the)  first  quarter 
of  next  year. 

Is  there  anything  preventing  you 
from  malting  all  of  Solaris  open- 
source?  Nothing  at  all  And  let 
me  repeat  that  Nothing  at  all 

Is  Solaris  in  competition  with  Un* 
ui?  No.  that's  like  asking  if 
Solaris  b  in  competition  with 
the  open-source  movement. 
Solaris  b  in  competition  vrith 
Red  Hat.  Solaris  will  be  as 
much  the  open-source  move¬ 


ment  as  anything  else.  The 
competition  ultimately  is  go¬ 
ing  to  be  had  and  be  seen  be¬ 
tween  companies  that  have 
com(>etitive  offerings. 

Ona  yoar  ago  thb  month.  Sun  an- 
nouncod  a  stiatogic  aUance  with 
Advanead  Micro  Devices  to  doSv- 
er  Opieren-basod  Sun  Firs  sys¬ 
tems.  Wkst  has  this  sIKanes 
accompUshod  in  ths  past  yaar? 
On  the  one  hand,  it’s  given  us 
a  springboard  into  the  S20  bil¬ 
lion-plus  x86  server  market, 
with  products  that  have  db- 
tinct  competitive  advantages 
over  simi^  systems  from,  say. 
Dell.  I  question  the  wisdom  of 
anyone  who  continues  to  buy 
32-btt  x86  systems  when  you 
can  buy  x86  64‘bit  systems 
that  cost  less  and  run  two  or 
three  times  as  fast  In  addition 
to  that  there  b  obviously  a 
very  close  partnership  be¬ 
tween  the  AMD  team  and  the 
Solaris  kernel  team,  and  so  we 
are  looking  to  do  co-evohition 
of  the  systems.  O  50749 


SAS,  the  leader  in  business  intelligence  software,  asks... 


Could  your  IT  dollars  be  better  spent? 


$ERVICE  LEVEL  managemb<t 


.MANAGEMENT 


CHARGE  MANAGEkiKMT 


VALUE  MANAGEMOtT 


No  business  wants  to  believe  it’s  wasting  prccicHis  IT  dollars.  So  if  executives  and  co-workers  grumble 
about  IT  service,  and  you’re  convinced  those  services  could  be  put  to  better  use,  let  SAS  help. 
With  SAS*  IT  Management  solutiorts,  you  can  measure,  manage,  understand  and  communicate  the 
quality  of  every  IT  service  more  accurately.  You’ll  know  precisely  how  your  business  is  using  IT 
resources.  Ensure  maximum  performance  and  response  times.  Predict  strategic  and  financiai  trends. 
And  clearly  visualize  the  value  of  IT  from  business,  revenue  and  profit  perspectives.  Visit  our  Web 
site  to  le^n  more  and  read  our  free  w4iite  paper.  Align  IT  with  Business  and  Budget  Strategies. 
Or  call  us  toll  free  1  866  731  1364. 

www.sas.com/spent 


AuttK^  Nicholas  Carr  and  top  business  influencers  join  in  a  lively  disajssion  atotrf  Ns  controversial  book.  Does  IT  Matter^ 
Check  out  our  Web  site  for  more  on  this  informative,  on-demand  Web  seminar. 
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Oracle's  PeopleSoft 
Bid  Nears  an  End 

The  18>inonth  saga  invohnng 
PeopteSott  he.  and  Oracie  Corp- 
couU  be  coming  to  an  end  tMs 
wedt.  ftopleSoft’s  board  last 
weeli  voted  to  urge  stiarehoMers 
to  f^ect  what  Oracie  has  said  is  its  | 
‘best  and  finaT  offer  to  buy  the 
company.  Oracle  ofheiate  agreed 
to  withdraw  the  Sfl.S  billion  offer 
H  not  accepted  by  Nov.  19. 


Chartered  Agrees  to 
Build  AMD  Chips 

Sunnyvale,  CaBf.-based  Advanced 
Micro  Devices  Inc.  has  signed  up  | 
Singapore-based  Chartered  Semi¬ 
conductor  Manufacturing  Ltd.  to 
produce  AMD's  Opteron  and 
Athlon  64  processors  starting  in 
2006,  adding  manufacturing  ca¬ 
pacity  to  esisting  plants  in  Dres¬ 
den.  Oermairy.  and  in  Austin, 
(^rtered  wiN  also  Bcertse  AMD's  i 
Automated  Precision  Manufactur¬ 
ing  technology  as  part  of  the 
agreement.  j 


Tax  Benefit  Shifts 
PeopleSoft’s  Profit 

PeopieSoft  last  week  revised 
its  third-quarter  profits  upward 
by  S2.6  milion  as  a  result  of  a 
higher-lhan-espected  tax  benefit 
on  its  severance  payment  of 
almost  S14  million  to  former 
CEO  Craig  Conway,  who  was 
fired  last  month.  The  restated 
profit  totaled  $26.2  million  after 
the  tax  adjustment. 


Symbol  Delays 
Filing  Q3  Results 

Symbol  Technologies  Inc.  delayed 
filing  Hs  third-quarter  results  and 
revised  figures  lor  the  first  nine 
months  of  the  year  downward  by 
$13.3  milion.  to  S1.3  bfliion,  as  a 
result  of  inventory  reporting  er-  I 
rors.  The  Hollsvflie.  N.Y.-based  | 
company's  financials  are  moni¬ 
tored  by  the  U.S.  Securities  ar«d  | 
Exchange  Commission  because  of  l 
financial  irregularities  discovered 
last  spring. 


i2’s  Closed-Loop  Vision 
Gamers  User  Support 


Bundling  of  technologies  and  processes 
promises  a  dynamic  suppK-  chain 


j  BVMARCL.SONGINI 

'  0«L*N0C 

D*  AiiJVS-BAstn  i2  Tech¬ 
nologies  Inc.  last 
week  continued  to 
push  its  so-called 
c)o.scd-luop  supply  chain  vi- 
won  to  3  m«>stly  receptive  audi¬ 
ence  at  the  12  nireeiions  2004 
;  user  conference  here  bst  week. 
The  closed-loop  approach, 
first  disclosed  last  year,  bun¬ 
dles  t2  supply  chain,  integra¬ 
tion  and  analytical  teohnohv 
gics  and  processes  that  can  be 
used  to  cut  costs,  boost  effi¬ 
ciency  and  help  resolve  glitch¬ 
es  on  the  fly.  Non-i2  technolo¬ 
gies  can  be  added  to  the  loop 
using  \\'cb  services. 

CEO  Sanjlv  Sidhu  said  the 
approach  can  deliver  a  full- 
scale.  dy-namic  supply  ebaia 
whereas  the  traditional 
method  simply  creates  a  static 
forecast.  “The  concept  of  a 


plan  i.s  having  accountability 
and  being  something  you  live 
in  and  die  in  to  make  it  hap¬ 
pen."'  he  said. 

Mike  Stevens,  leader  of 
trailer  fleet  .ser>-iccs  at  Stam¬ 
ford.  Conn.-bascd  GE  Equip¬ 
ment  Services,  agreed  that  dis¬ 
ciplined  supply  chaias  are  a 
necessity.  The  company  uses 
i2's  demand  manager,  furc- 
ca.simg  and  supply  chain  plan¬ 
ning  tools  to  manage  its  fleet 
of  125.000  trailers.  The  soft¬ 
ware  uses  three  years  of  his¬ 
torical  data  to  moke  demand 
projections  for  use  by  the 
sales  force  and  requin's  exten¬ 
sive  participation  by  company 
employees.  But  those  involved 
need  to  be  given  incentives  to 
participate.  Stevens  said.  “This 
needs  to  be  managed,  and  peo¬ 
ple  have  to  be  accountable  for 
the  results,"  he  added. 

Steverts  said  the  product  has 


mostly  met  his  expectations, 
though  he  would  like  a  sim¬ 
pler  user  interface  menu.  "If  I 
don't  understand  it.  the  sales 
force  won't  either."  he  said.  “12 
is  a  strong  technical  company, 
but  they  have  to  make  the  in¬ 
terface  have  a  Forrest  Gump 
look  before  it  hits  the  market.” 

Signs  of  Progress 

Will  Shiver,  supply  chain  soft¬ 
ware  engineer  at  VF  Corp.  in 
Greensboro.  N.C-  said  he's 
encouraged  by  the  design. 
“They've  caught  up  with  u.s. 
We've  been  practicing  closed- 
loop  concepts  for  some  time, 
and  now  they've  put  a  label  on 
it  and  it  has  a  face.”  he  said. 

The  apparel  maker  uses  i2's 
supply  chain  and  demand 
management  applications  and 
recently  completed  a  pilot  of 
its  Master  Data  Management 
data  symchronizaiion  software, 
which  it  c.xpccts  can  enhance 
its  closed-loop  processes.  The 
MDM  tool  rapidly  linked  in¬ 
formation  from  i2's  Supply 


Cisco  Expands  WLAN  Line, 
Teams  Up  With  AirDefense 


BV  MATT  HAMBLEN 

Cisco  Systems  Inc.  last  week 
added  two  Wi-Fi  access  points 
that  support  new  security  stan¬ 
dards  and  can  handle  mure 
users  than  its  previous  de¬ 
vices.  It  also  announced  a 
partnership  for  integrating  its 
wireless  networking  prodUL'ts 
with  AirlVfcnse  Inc.’s  intru¬ 
sion-detection  technolog>'. 

TT»e  Aironet  Ik^OAG  and 
12.^0AG  scries  of  access  points 
prtwidc  dual-band  fi02.ll3/b/g 
connectivity  and  comply  with 
the  802.IIi  and  WI'A2  security 
protocols,  said  Ron  Scide,  Ci.s- 
co's  senior  product  line  man¬ 
ager  for  wireless  networking. 

The  II30AG  is  designed  for 
office  use  and  starts  at  $699; 
thc  1230AG  is  a  more  rugged- 
ized  device  that  costs  $990. 


Both  products  can  operate 
on  IS  nonuveriapping  channels 
and  deliver  data  rales  of  up  in 
l08Mbit/scc..  Seide  said.  He 
added  that  future  upgrade 
plans  call  for  increasing  the 
number  of  supported  channels 
to  26.  which  should  mean  less 
interference  for  end  users. 

AirDeferusc’s  server  appli¬ 
ances  can  read  data  from  Cis¬ 
co's  access  points,  and  they  can 
be  accessed  through  the 
CiscoWorks  Wireless 
LAN  Solution  En¬ 
gine.  The  engine  of¬ 
fers  an  integrated 
constdc  that  sup¬ 
ports  wireless 
LAN  man¬ 
agement  and 
intrusion  deiec- 
liiin.  Scide  said.  Cisco's  Aironet  1230A6  work,  said  Nwokobia. 


The  partnership  between 
Cisco  and  Atlanta-based  Air- 
Defense  grew  out  of  informal 
joint  work  that  the  two  com¬ 
panies  began  doing  for  cus¬ 
tomers  more  than  a  year  ago. 
said  AirlVfense's  founder  and 
Chairman  fay  Chaudhry. 

One  of  the  early  users  was 
Lehman  Brothers  Holdings 
Inc.  in  New  York.  Frederick 
Nwokobia.  a  senior  engineer 
at  the  financial  services  firm, 
said  AirDefense 's  Enterprise 
6.0  software  for  detecting  net¬ 
work  Intruders  has  been  com¬ 
bined  with  more  than  300  Cis¬ 
co  Aironet  1200  scries  access 
points  at  several  Man¬ 
hattan  locations. 
The  AirDefense 
technology  lets  IT 
staffers  at  Lehman 
Brothers  see  if  there 
are  any  ad  hoc  or  rogue 
access  point.s  connected 
to  the  company's  net- 


Chain  Planner  module  to 
data  created  by  a  homegrowm 
mainframe  application  to  pro¬ 
duce  an  Inventory  report.  Pre¬ 
viously.  it  took  month.s  to  link 
the  data  sets.  Shiver  said. 

Ravi  Vanchceswaran.  a 
planning  director  at  ON  Semi¬ 
conductor  Corp.  in  Phoenix, 
wants  to  take  advantage  of  I2's 
Slated  approach  of  selling  ap¬ 
plications  as  components.  "At 
some  point,  we  want  to  make 
the  supply  chain  to  be  like 
Lego  pieces,"’  he  said.  Current¬ 
ly.  ON  runs  i2'.s  Six.Onc  De¬ 
mand  Planner.  Supply  Chain 
Planner  and  Demand  Fulfill¬ 
ment  applications. 

Miami-based  logistics  ser¬ 
vices  provider  Ryder  System 
Inc.  wants  to  further  exploit 
functions  in  i2's  Transporta¬ 
tion  Optimizer  and  Trans¬ 
portation  Manager  products. 

For  instance.  Ryder  would 
like  to  suppon  ocean  freight¬ 
ing  operations,  including  the 
ability  to  handle  steamship 
schedules,  said  transportation 
product  manager  Ron  Abrams. 
In  addition.  Abrams  said  he 
would  like  to  use  the  software 
to  help  Ryder  meet  unique 
customer  requirements  during 
backhauling  and  fi-xed-routing 
operations.  O  50730 


"We’re  trying  to  be  proactive 
with  our  WI.AN  and  to  oper¬ 
ate  in  a  clean  envimnment.” 
he  noted. 

The  Wi-Fi  connc'ctions  have 
been  in  place  less  than  a  year, 
and  Lehman  Brothers  hasn’t 
been  attacked  thus  far.  accord¬ 
ing  to  Nwokobia.  He  said  the 
AirDefense  software  has  noti¬ 
fied  IT  sialTers  of  suspicious 
network  activity,  which  often 
involves  an  end  user  with  a 
w’irelcss  card  that  Isn't  autho¬ 
rized  to  access  the  network. 

Lehman  Brothers  has  seen 
the  benefits  of  having  Wi-Fi 
capabilities  for  office  workers 
who  need  to  carry  their  lap¬ 
tops  tt»  cx)nfcrence  rooirw  and 
other  locations,  Nwokobia 
said.  He  added  that  the  c-ompa- 
ny  has  deployed  voicc-ovcr-IP 
products  from  Cisco  for  13,000 
workers  and  is  investigating 
support  for  wireless  VoIP 
transmissions  over  the  Wi-Fi 
network.  O  50724 
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Oracle’s  PeopleSoft 
Bid  Nears  an  End 

ThttfrwontfisaQiiwoMnfl 
^oplaSoft  Inc.  md  Oradt  Corp. 
cooM  Iw  coming  to  M  and  this 
mtk.  PoodoSofl's  beard  test 
amah  voted  to  urga  diarohoidars 
to  raiad  wlwt  Grade  has  said  is  Ns 
iMSt  and  finaT  etfar  to  buy  tha 
company.  Orada  ofltoiab  agreed 
to  withd^  the  S8.0  bHen  offar 
if  not  accepted  by  Nov.  19. 


Chartered  Agrees  to 
Build  AMD  Chips 

Sumyveia.  CaBf.'based  Advanced 
Micre  Devieas  Inc.  has  dgnad  up 
Singapere-baead  Otartared  Sai^ 
conductor  Manufacturing  Ltd.  to 
produce  AMD's  Optaren  and 
Athlon  64  procaasors  starting  in 
2006,  adiing  manutecturtog  ca- 
padty  to  arisdng  plants  in  Dres¬ 
den,  Oenwony,  and  in  Austin. 
Chartered  wM  also  Itoansa  AMD's 
AiNomated  Predskm  Manufactur¬ 
ing  technology  as  part  of  tha 


Tax  Benefit  Shifts 
PeopleSoft’s  Praft 

PeoploSoft  last  weak  revised 
Ns  thinhpiarter  profits  upward 
by  $2.6  mMton  as  a  resuN  of  a 
Ngher-than-expectod  tax  benefit 
on  its  severance  payment  of 
almost  $14  mMon  to  termer 
CCO  Craig  Conway,  who  was 
fired  last  month.  The  restated 
profit  totalad  $26.2  miBon  after 
the  tax  adtushnent 


Symbol  Delays 
Filing  Q3  Remits 

Symbd  Technotogias  Inc,  dalayed 
filing  ito  tterd-guartor  results  and 
revised  figures  for  tho  first  nme 
months  of  ths  ysor  downward  by 
$0  J  mtton.  to  $L3  bHion,  ts  a 
resuN  of  inventory  reporting 
m  The  Hdtavile.  ILV.-baaed 
company's  fhiMidali  are  moni¬ 
tored  by  the  U.S.  Securfiles  and 
Exchange  Comniissien  bacause  of 
RnandM  irregularittes  dtecovered 


i2’s  Closed-Loop  Vision 
Gamers  User  Support 


Bundling  of  technologies  and  processes 
promises  a  (Lmamic  supply  chain 


Dauas-based  i2  Tech- 
nolc^es  Inc.  last 
week  continued  to 
push  its  so-callcd 
closed-loop  supply  chain  vi¬ 
sion  to  a  mostly  receptive  audi¬ 
ence  at  the  i2  Directions  2004 
user  confererure  here  last  week. 

The  closed-loop  approach, 
first  disclosed  last  year,  bun¬ 
dles  t2  supply  chain,  integra¬ 
tion  and  analytical  technolo¬ 
gies  and  processes  that  can  be 
used  to  cut  costs,  boost  effi¬ 
ciency  and  help  resolve  glitch¬ 
es  on  the  fly.  Non-i2  technolo¬ 
gies  can  be  added  to  the  loop 
using  Web  services. 

CEO  Sanjiv  Sidhu  said  the 
approach  can  deliver  a  full- 
scale,  dynamic  supply  chain, 
whereas  the  traditional 
method  simply  creates  a  static 
roreca.st.  “The  concept  of  a 


plan  is  having  accountability 
and  being  something  you  live 
in  and  die  in  to  make  it  hap¬ 
pen,"  he  said. 

Mike  Stevens,  leader  of 
trailer  fleet  services  at  Stam¬ 
ford.  Conn.-bascd  GE  Equip¬ 
ment  Services,  agreed  that  dis¬ 
ciplined  supply  chains  are  a 
necessity.  The  company  uses 
i2's  demand  manager,  fore¬ 
casting  and  supply  chain  plan¬ 
ning  tools  to  manage  its  fleet 
of 125,000  trailers.  TTie  soft¬ 
ware  uses  three  years  of  his¬ 
torical  data  to  make  demand 
proiections  for  use  by  the 
sales  force  and  requires  exten¬ 
sive  participation  by  company 
cmpltiyees.  But  those  involved 
ne^  to  be  given  incentives  to 
participate.  Stevens  said.  “This 
needs  to  be  managed,  and  peo¬ 
ple  have  to  be  accountable  for 
the  results,"  he  added. 

Stevens  said  the  product  has 


mostly  met  his  expectations, 
tbou^  be  would  like  a  sim¬ 
pler  user  interface  menu.  “If  I 
don’t  understand  it,  the  sales 
force  won't  either."  be  said.  “iZ 
is  a  strong  technical  company, 
but  they  have  to  make  the  in¬ 
terface  have  a  Forrest  Gump 
look  before  it  hits  the  market." 

Signs  of  Progress 

Will  Shiver,  supply  chain  soft¬ 
ware  engineer  at  VF  Corp.  in 
Greensboro,  N.C.,  said  he’s 
encouraged  by  the  design. 
"They've  caught  up  with  us. 
We’ve  been  practicing  closed- 
loop  concepts  for  some  time, 
and  now  they've  put  a  label  on 
it  and  it  has  a  face."  he  said. 

TTie  apparel  maker  uses  i2‘$ 
supply  chain  and  demand 
management  applications  and 
recently  completed  a  pilot  of 
its  Master  Data  Management 
data  synchronization  softu*are, 
which  it  expects  can  enhance 
its  closed-loop  processes.  The 
MDM  tool  rapi^y  linked  in¬ 
formation  from  i2's  Supply 


Chain  Planner  module  to 
data  created  by  a  homegrown 
mainframe  application  to  pro¬ 
duce  an  inventory  report  Pre¬ 
viously.  it  took  months  to  link 
the  data  sets.  Shiver  said. 

Ravi  Vancheeswaran,  a 
planning  director  at  ON  Semi¬ 
conductor  Corp.  in  Phoenix, 
wants  to  take  advantage  of  iZ's 
stated  approach  of  selling  ap¬ 
plications  as  components.  “At 
some  point,  we  want  to  make 
the  supply  chain  to  be  like 
Lego  pieces."  he  said.  Current¬ 
ly,  ON  runs  i2's  Six.Oae  De¬ 
mand  Planner.  Supply  Chain 
Planner  and  Demand  FulfUl- 
ment  applications. 

Miami-based  logistics  ser¬ 
vices  provider  Ryder  System 
Inc  wants  to  further  exploit 
functions  in  i2’s  TVansporta- 
don  Optimizer  and  Trans- 
portadon  Manager  products. 

For  instance.  Ryder  would 
like  to  support  ocean  freight¬ 
ing  operations,  including  the 
ability  to  handle  steamship 
schedules,  said  transportation 
product  manager  Ron  Abrams. 
In  addition,  Abrams  said  be 
would  like  to  use  the  software 
to  help  Ryder  meet  unique 
customer  requirements  during 
backbauling  and  fixed-roudng 
operations.  O  50730 


Cisco  Expands  WLAN  Line, 
Teams  Up  With  AirDefense 


BY  MATT  HAMBLEN 

Cisco  Systems  Inc.  last  week 
added  two  Wi-Fi  access  points 
that  support  new  security  stan¬ 
dards  and  can  handle  more 
users  than  its  previous  de¬ 
vices.  It  also  announced  a 
partnership  for  Integrating  its 
wireless  networking  products 
with  AirDefense  Inc’s  intru- 
sion-deteccion  technology. 

The  Airunei  U30AG  and 
1230AG  series  of  access  points 
provide  dual-band  802.Ua/b/g 
connectivity  and  comply  with 
the  802JJi  and  WPA2  security 
protocols,  said  Ron  Seide.  Cis¬ 
co’s  senior  product  line  man¬ 
ager  for  wireless  networiung. 

The  U30AG  is  designed  for 
office  use  and  starts  at  S699: 
the  1230AG  Is  a  more  rugged- 
ized  device  that  costs  $999. 


Both  products  can  operate 
on  15  nonoverlapping  channels 
and  deliver  data  rates  of  up  to 
lOSMbitAcc..  Seide  said.  He 
added  that  future  upgrade 
plans  call  for  increasing  the 
number  of  supported  channels 
to  26,  which  should  mean  less 
interference  for  end  users. 

AirDefense's  server  appli¬ 
ances  can  read  data  from  Cis¬ 
co’s  access  points,  and  they  can 
be  accessed  through  the 
CiscoWorks  Wireless 
LAN  Solution  En¬ 
gine.  The  engine  of¬ 
fers  an  integrated 
console  that  sup¬ 
ports  wireless 
LAN  man¬ 
agement  and 
intrusion  detec¬ 
tion.  Seide  said.  Cteco'a  AireBBt  tt$QA6  work,  said  Nwokobia. 


The  partnership  between 
Cisco  and  Atlanta-based  Air- 
Defense  grew  out  of  informal 
joint  work  that  the  two  com¬ 
panies  began  doing  for  cus¬ 
tomers  more  than  a  year  ago. 
said  AirDefense’s  founder  and 
Chairman  lay  Chaudhry. 

One  of  the  early  users  was 
Lehman  Brothers  Holdii^ 
Inc.  in  New  York.  Frederick 
Nwokobia,  a  senior  engineer 
at  the  rmancial  services  firm, 
said  AirDefense's  Enterprise 
6.0  software  for  deteaing  net¬ 
work  intruders  has  been  com¬ 
bined  with  more  than  300  Cis¬ 
co  Aironet  1300  series  access 
points  at  several  Man¬ 
hattan  locations. 
The  AirDefense 
technology  lets  IT 
stafters  at  Lehman 
ten  see  if  there 
any  ad  hoc  or  rogue 
:e5s  points  connected 
to  the  company’s  net- 


"We’re  trying  to  be  proactive 
with  our  WLAN  and  to  oper¬ 
ate  in  a  clean  environment." 
he  noted. 

The  Wi-R  connections  have 
been  in  place  less  than  a  year, 
and  Lehman  Brothers  hasn't 
been  attacked  thus  far,  accord¬ 
ing  to  Nwokobia.  He  said  the 
AirDefense  software  has  noti¬ 
fied  rr  staffers  of  suspicious 
network  activity,  which  often 
involves  an  end  user  with  a 
wireless  card  that  isn't  autho¬ 
rized  to  access  the  network. 

Lehman  Brothers  has  seen 
the  benefits  of  having  Wi-Fi 
capabilities  for  office  woriiers 
who  need  to  carry  their  lap¬ 
tops  to  conference  rooms  and 
other  locations.  Nwokobia 
said.  He  added  that  the  compa¬ 
ny  has  deployed  voice-over-IP 
products  from  Cisco  for  13,000 
workers  and  is  investigating 
support  for  wireless  VoIP 
transmis-sions  over  the  Wi-R 
network.  050724 


••••••«•••«•  •• 

•  ••••*•«••  ' 

•«  •  •« 

•  • 

SBL.  ttie  SBC  iog.D  aa  fiEtO£i  H  ^ 


Consider  the  dots  connected.  By  combining  networking,  Internet  and  long  distance 
services  into  a  single  turnkey  solution,  we're  helping  one  of  the  largest  healthcare 
providers  in  Texas  stay  connected.  Move  large  amounts  of  critical  data  quickly  and 
reliably.  Adapt  to  long-term  growth  efficiently.  And  save  money  along  the  way  -  more 
than  $1  million  over  the  next  three  years.  Find  out  more  about  how  we're  helping 
Daybreak  Venture  connect  the  dots  at  sbc.corVdots.  GOMG  BEYOfO  THE  CALL! 
y*  tg  iJssc  ■■i'x  a-vj  c.  SJC  i '  •  --  w;:5e  tt'K'ti  ^  P  • 
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BT  Group  to  Buv 
Infonet  (or  SGGoM 


Br  GROLT  Pi  t  last  week  agreed  to 
buy  El  Segundo,  Calif.-based  In¬ 
fonet  Serx  ices  Corp.  for  about 
S*>65  million,  in  another  attempt  by  BT 
to  expand  into  the  L’-S.  and  ofler  global 
netw  orking  sendees. 

Intbnci  pnxvides  Asynchronou.s 
Transfer  Mode  and  virtual  private  net¬ 
working  senioes  to  hundreds  of  multi¬ 
national  companies,  including  Bayer 
Gmup.  Nestk^  SA  and  Hitachi  Ltd. 

London-based  BT's  prex  ious  at¬ 
tempts  to  crack  the  U.S.  market  in¬ 
clude  an  aK'Tted  effort  to  acquire  MCI 
Inc.  and  the  ill-fated  Concert  joint  ven¬ 
ture  with  .\T&T  Corp.  -  - 

Some  analysts  said  (he 
Infonet  acquisition  is  a 
gtKtd  move  for  BT.  But 
Camille  Mendier.  an  ana¬ 
lyst  at  the  London  office  of 
The  Yankee  Group,  said 
that  "BT  has  not  Ivcn  i 
good  at  integrating  its  ac-  ! 


Numt>e<  of  WrFi  hotspots 
expected  m  Taipei  Tarwan, 
bv  the  end  ot  next  year 
HEWern  PACtWRO  CO 
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quLsilions"  and  that  the  merger  "means 
less  choice  for  users." 

The  deal  is  due  to  close  by  mid-2005. 
■  JOHN  BLAU.  iD6  NEWS  SERVICE 

GE  to  Sell  60% 

Of  Indian  BPO  Unit 

BANOALOftE.  INDIA 

GFNfR.Al  tttCTRICCO,  said  it's 
selling  a  OO'^r  stake  in  Gt  Capital 
International  Services  Americas 
Inc.  (GECIS).  its  business  process  out¬ 
sourcing  subsidiao'  in  India,  to  two  U.S. 
imesimeni  firms  for  aKiut  S500  million. 

Genera]  Atlantic  Partners  LLC  in 
Greenwich.  Conn.,  and  Oak  Hill  Capital 
I*artncrs  LP  in  New  York  will  jointly 
bity  a  maiority  stake  in  GECIS.  which  is 
based  in  Gurgaon  near 
Delhi.  GE  will  hold  on  to 
the  remaining  40%.  and  | 
the  Indian  operation  will 
continue  to  serve  its  busi¬ 
ness  units  under  a  multi¬ 
year  contract.  But  after  the 
transaction  closes.  GECIS 
will  also  offer  its  services 


to  other  companies  worldwide. 

In  1097.  GE  was  one  of  the  first 
multinational  companies  to  outsource 
back-office,  data  center  and  call  center 
operations  to  a  subsidiary  in  India.  But 
now  companies  are  moving  away  from 
captive  subsidiaries  and  arc  instead 
outsourcing  such  work  to  independent 
Indi.in  outsourcing  companies. 

■  JOHN  RIBEIRO,  106  NEWS  SERVICE 

Telabria  Plans  First 
U.K.  WiMax  Network 

TtLABRiA  LTD-,  a  statt-up  in  Sitting- 
bourne,  England,  has  begun  con¬ 
struction  of  a  WiMax  broadband 
wireless  network  in  southern  England, 
initially  in  the  county  of  Kent.  Enter¬ 
prise  customers  will  be  offered  end-to- 
end  WiMax  links  as  a  wireless  alterna¬ 
tive  to  T1  and  leased  lines. 

Telabria  .said  at  the  recent  WiMax 
Forum  in  Boston  that  it  aims  to  be  the 
first  company  in  the  U.K.  to  offer  eom- 
mcrcia!  WiMax  service,  starting  in 
mid-2005.  Other  WiMax  networks  arc 
beginning  to  sprout  in  Europe,  includ¬ 
ing  trial  networks  in  Dublin  and 
Skellcftca.  Norway.  O  50688 
■  JOHN  BLAU.  IDG  NEWS  SERVICE 

Compiled  by  Mitch  Betts. 


Briefly  Noted 

Micrnsch  Csnaifa  Co.  Presidont  Frank 
Clegg  is  lakino  a  seven-tnonUi 
and  wi  l»  repiacad  by  Oevid  Hamler.  a 
MbcnscA  Corp.  vice  prasident  trom  Itia 
U.S.  Oegg  praiMd  the  management 
law  at  ttia  Miiiissauga.  ttntario-baaad 
unit  but  said  At  Carodian  executfvts  are 
'not  ready  yet’ for  the  rate  ot  prasidenL 

■  MICHAEL  MACMILLAN. 
ITWORLOCANAOA  COM 

Dell  Inc.  is  setting  up  its  third  customor 

contact  cefrter  in  India,  in  Ctiandigarti  M 
the  country’s  northam  region.  The  con¬ 
fer  is  Rkaly  to  open  by  March,  wMi  about 
300  employMe  who  MttaBy  wM  provide 
tech  support  to  U.S.*hased  customers. 

■  JOHN  RIBEIRO. 

106  NEWSSERVICE 

Vodacom  (Pry)  Lid  in  Midrand.  South 
Africa,  said  it  wil  bo  dte  first  company 
to  marhat  Research  In  Motian  UiL's 
BlachBerry  handheld  devices  in  South 
Africa,  beginning  in  Ihi  first  tuff  o4  next 
yaer  with  the  TIOOv  modal.  That  product 
is  deaigiMd  for  lae  in  Europe  and  the 
Asii-Pacfficrigion. 

•  COMPUTING  SOUTH  AFRICA 


Regs  May  Force  New  IT  Reality  on  Insurers 


The  insurance  industry,  long  the  tcch- 
nolog)-  laggard  in  the  financial  scrxices 
sector,  may  sxkio  bo  ftrnred  to  embrace  a 
variety  of  technologies  to  keep  up  with 
proposed  stale  and  federal  reforms. 

With  regulators  seeking  greater 
oversight  of  the  industry,  e.xpens  say 
iasunince  companies  will  likely  need 
to  invest  in  CRM  tools,  middleware 
and  siraighi-through-processing 
schemes  and  then  integrate  those 
technologies  with  o.xisiing  systems. 

Parssure  on  insurers  is  growing,  as 
more  state  attorneys  general  file  law¬ 
suits  against  brokerages  that  allegedly 
created  phony  bids  to  justify  recom¬ 
mendations  to  cttsiomers  to  accept  the 
bids  that  would  provide  the  brokers 
w  ith  the  highest  commissions. 

Ijsi  mt>nih.  New  York  Attorney 
General  Eliot  Spitzer  filed  a  civil  law¬ 
suit  against  Marsh  &  McLennan  Cos., 
charging  that  the  nation's  largest  insur¬ 
ance  brokerage  created  fake  bids  for 
insurance  contracts. 

"All  of  these  Iprocecdings]  w  ill  likely 
impact  im  systems  in  sttme  way."  said 
Ann  Purr,  second  vice  president  of  in¬ 


formation  management  at  the  Atlanta- 
based  Life  Office  Management  Asmki- 
ation,  an  educational  grt>up  represent¬ 
ing  1.250  Citmpanies  worldwide.. 

“If  it  requires  gathering  different 
data  or  gathering  data  in  a  different 
way.  then  it's  going  to  be  more  work 
for  the  IT  community.  If  it’s  just  re¬ 
porting  lo  an  additional  place,  that’s 
just  an  additional  process."  Purr  said. 

'Ilic  insurance  industry  is  currently 
regulated  only  at  the  state  level.  That 
means  a  company  must  file  separate 
financial  statements  and  paporwi'trk 
for  each  new  product  and  fee  in  every 
state  it  does  business  in. 

At  the  same  time.  Congress  may  soon 
debate  a  piMpf>$al  to  shift  oversight  of 
the  industry’  fn»m  the  states  to  the  fed- 
i  eral  govcmmcni.  The  industry  is  facing 
I  the  Oxley-Bakcr  State  Modernization 
'  and  Regulatory  Traiwparency  (SMART) 

I  Act.  a  pniposiil  in  Congress  that  would  | 
I  create  federal  oversight  of  the  insur- 
j  ancebusiiH.*ss.  The  SMART  Act  could 
I  provide  relief  fn>m  the  palchworic  of 
I  slate  regulations,  but  it  could  also  a’- 
quire  significant  new  IT  investments, 
t  A  spokesman  for  Rep.  Michael  Oxley 


(R-Ohio).  who  also  sponsored  the  Sar- 
banes-Oxlcy  Act.  said  It's  unlikely  that 
the  bill  will  be  filed  and  approved  be¬ 
fore  the  end  of  the  year.  But  analysts 
said  that  if  and  when  it  does  become 
law.  it  could  dramatically  change  the 
face  of  IT  in  the  insurance  indu.stry. 

"On  the  technology  side,  it  changes 
the  whole  dynamics  and  culture  of  the 
industry."  said  Debitrah  Smallwood,  an 

Federal  Oversight 

The  SMART  Act  would  etoninate  the  need 
tor  insurance  companies  to  make  separate 
financial  and  product  tilinos  in  each  ^(e. 
it  would  also  create  a  state/nalional  insur¬ 
ance  oversight  panel  made  up  of: 

■  Three  members  from  stale  insurance 


■  One  metrto  from  the  U.S.  Treasury 

■  One  member  from  the  U.S.  Securities 
and  Exchange  Commsskm 

■  One  member  from  the  Fe^l  R^rve 

■  A  chainnan  from  die  National  Association 
of  Insurance  Commissioners 


analyst  at  TowerGroup  in  Needham, 
Mass.  ’’They’ll  need  to  streamline  and 
automate  systems  that  weren’t  nc^res- 
sarily  fully  automated  before." 

Analy-sts  also  said  online  busincss- 
to-businesA  marketplaces  may  become 
more  popular  in  light  of  the  invcstig.1- 
tions  because  of  their  transparency, 
which  would  lessen  fears  of  fraud. 

Mark  Snyder,  benefits  director  at 
Owens  Coming  in  Toledo,  Ohio, 
used  an  online  bidding  engine  from 
Waltham.  Mass.-based  lE-Englnc  Inc. 
to  procure  insurance  for  his  company’s 
employee  disability  plan,  pharmacy 
bencfiis.  medical  plan  and  wi>rkers' 
compensation  plan.  lE-Engtnc  uses  an 
application  service  provider  model  to 
prx»vide  an  online  marketplace  to  ex¬ 
change  bids  in  a  rcqucst-for-proposals 
process.  "It  would  give  us  comfort  that 
we  wouldn't  have  to  worry  ab«>ui  (bid 
rigging!  using  the  online  tool."  he  said. 

Smallwood  said  the  insurance  indus¬ 
try’s  computing  systems  have  front- 
end  product  distribution  systems  that 
arc  separate  from  customer  relation¬ 
ship  management  systems  and  back¬ 
end  quoting  and  pricing  systems.  Sig¬ 
nificant  integration  work  would  be 
necessary-  to  meet  strong  oversight 
I  requirements.  O  50739 
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IT  GROUP  PLC  last  week  agreed  to 
buy  El  Segundo,  Calif.-based  In- 
fonct  Services  Corp.  for  about 
$965  miliioo.  in  another  anetnpt  by  BT 
Id  expand  into  the  US.  and  ofler  global 
networkii^  services. 

Infonet  provides  Asynchronous 
Transfer  Mode  and  virtual  private  net¬ 
working  services  to  hundr^  of  multi¬ 
national  companies,  including  Bayer 
Group,  Nestis  SA  and  Hitachi  lid. 

London-based  BT s  previous  at¬ 
tempts  to  crack  the  U.$.  market  m- 
chide  an  aborted  effort  to  acquire  MCI 
Inc  and  the  ill-fated  Concert  ioini  ven¬ 
ture  with  AT&T  Corp. 

Some  analysts  said  the 
Infonet  acquisition  is  a 
good  move  for  BT.  But 
Camille  Mcndler,  an  ana¬ 
lyst  at  the  London  office  of 
The  Yankee  Group,  said 
that  "BT  has  not  been 
good  at  integrating  its  ac- 
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quisitions”  and  that  the  merger  "means 
less  choice  for  users.** 

The  deal  is  due  to  close  by  mid-2005. 
■  JOHN  BUU.  IDG  NEWS  SERVICE 
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6E  to  Sell  60% 

Of  Indian  BPO  Unit 

BANOALORE,  INDIA 

General  electric  co.  said  it's 
selling  a  60%  stake  in  GE  Capital 
International  Services  Americas 
Inc.  (GECIS).  its  business  process  out¬ 
sourcing  subsidiary  in  India,  to  two  11.S. 
investment  ffrms  for  about  SSOO  million. 

General  Atlantic  Partners  LLC  in 
Greenwich.  Conn.,  and  Oak  Hill  Capital 
Partners  LP  in  New  York  will  jointly 
buy  a  majority  stake  in  GECIS,  which  is 
based  in  Gurgaon  near 
Delhi  GE  will  bold  on  to 
the  remaining  40%.  and 
the  Indian  operation  will 
continue  to  serve  its  busi¬ 
ness  units  under  a  multi¬ 
year  contract  But  after  the 
transaction  closes,  GECIS 
will  also  offer  its  services  I 


to  other  companies  worldwide. 

In  1997.  GE  was  one  of  the  first 
multinational  companies  to  outsource 
back-office,  data  center  and  call  center 
operations  to  a  subsidiary  in  India.  But 
now  companies  are  moving  away  from 
captive  subsidiaries  and  are  instead 
outsourcing  such  work  to  independent 
Indian  outsourcing  companies. 

■  JOHN  RIBEIRO.  (DO  HEWS  SERVICE 


Telabria  Plans  First 
U.K.WiMax  Network 

Telabria  ltd.,  a  stan-up  in  Sitting- 
bourne,  England,  has  begun  con¬ 
struction  of  a  WiMax  broadband 
wireless  network  in  southern  England, 
initially  in  the  county  of  Kent  Enter¬ 
prise  customers  will  be  offered  end-to- 
end  WiMax  links  as  a  wireless  alterna¬ 
tive  to  T1  and  leased  lines. 

Telabria  said  at  the  recent  WiMax 
Forum  in  Boston  that  it  aims  to  be  the 
first  company  in  the  U.K.  to  offer  com¬ 
mercial  WiMax  service,  starting  in 
mid-2005.  Other  WiMax  networks  arc 
beginning  to  sprout  in  Europe,  includ¬ 
ing  trial  networks  in  Dublin  and 
SkeQeftea.  Norway.  O  50688 
■  JOHN  BUU.  106  NEWS  SERVICE 
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Compiled  by  MUeh  Betts. 


Regs  May  Force  New  IT  Reality  on  Insurers 


■V  ufCAs  meahiam 

The  insurance  industry,  long  the  tech¬ 
nology  laggard  in  the  financial  services 
sector,  may  soon  be  forced  to  embrace  a 
variety  of  teclmologies  to  keep  up  with 
proposed  state  and  federal  reforms. 

With  regulators  seeking  greater 
overset  of  the  industry,  experts  say 
insurance  companies  will  luiely  need 
to  invest  in  CRM  tools,  middleware 
and  straight-through-processing 
schemes  and  then  int^rate  those 
technologies  with  existing  systems. 

Pressure  on  insurers  is  growing,  as 
more  state  attorneys  general  file  law¬ 
suits  ^^inst  brokerages  that  allegedly 
created  pbony  bids  to  justily  recom¬ 
mendations  to  customers  to  accept  the 
bids  that  would  provide  the  brokm 
with  the  highest  commissions. 

Last  month.  New  York  Attorney 
General  Eliot  Spitzer  filed  a  dvil  law¬ 
suit  against  Marsh  &  McLennan  Cos., 
charging  that  the  nation's  largest  insur¬ 
ance  brokerage  created  fake  bids  for 
insurance  contracts. 

"All  of  these  (proceedings)  will  likely 
impact  (rrj  systems  in  some  way."  said 
Ann  Purr,  second  vkc  president  of  in¬ 


formation  management  at  the  Atlanta- 
based  Life  Office  Management  Associ¬ 
ation,  an  educational  group  represent¬ 
ing  1.250  companies  worldwide 

"If  it  requires  gathering  different 
data  or  gathering  data  in  a  different 
way.  then  it’s  going  to  be  more  work 
for  the  IT  community.  If  it’s  just  re¬ 
porting  to  an  additional  place,  that's 
just  an  additional  process."  Purr  said. 

The  insurance  industry  is  currently 
regulated  only  at  the  state  level  That 
means  a  company  must  file  separate 
financial  statements  and  paperwork 
for  each  new  product  and  fee  in  every 
state  it  does  business  in. 

At  the  same  time.  Congress  may  soon 
debate  a  proposal  to  shift  oversight  of 
the  industry  from  the  states  to  the  fed¬ 
eral  government.  The  industry  is  facing 
the  Oxley-Baker  State  Modernization 
and  Regulatory  Transparency  (SMART) 
Act,  a  proposal  in  Congress  that  would 
create  federal  oversight  of  the  insur¬ 
ance  business.  The  SMART  Act  could 
provide  relief  from  the  paichwork  of 
state  regulations,  but  h  could  also  re¬ 
quite  significant  new  IT  investments. 

A  spokesman  for  Rep.  Michael  Oxley 


(R-Ohio).  who  also  sponsored  the  Sar- 
banes-Oxlcy  Act,  said  it’s  unlikely  that 
the  bill  will  be  filed  and  approved  be¬ 
fore  the  end  of  the  year.  But  analysts 
said  that  if  and  when  it  docs  become 
law,  it  could  dramatically  change  the 
face  of  IT  in  the  insurance  industry. 

"On  the  technology  side,  it  chan^ 
the  whole  dynamics  and  culture  of  the 
industry,"  said  Eieborah  Smallwood,  an 
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analyst  at  TowerGroup  in  Needham. 
Mass.  “They'll  need  to  streamline  and 
automate  systems  that  weren't  neces¬ 
sarily  folly  automated  before." 

Analysts  also  said  online  business- 
lo-busincs$  marketplaces  may  become 
more  popular  in  light  of  the  investiga¬ 
tions  because  of  their  transparency, 
which  would  lessen  fears  of  fraud. 

Mark  Snyder,  benefits  director  at 
Owens  Coming  in  Toledo,  Ohio, 
used  an  online  bidding  engine  fiom 
Waltham.  Mass. -based  I£-Engine  Inc 
to  procure  insurance  for  his  company’s 
employee  disability  plan,  pharmacy 
benefits,  medical  plan  and  workers' 
compensation  plan.  lE-Engine  uses  an 
application  service  provider  model  to 
provide  an  online  marketplace  to  ex¬ 
change  bids  in  a  request-for-proposals 
process.  “It  would  give  us  comfort  that 
we  wouldn’t  have  to  worry  about  [bid 
rigging]  using  the  online  tool"  he  said. 

Smallwood  said  the  insurance  indus¬ 
try’s  computing  systems  have  firont- 
end  product  distribution  systems  that 
are  separate  from  customer  relation¬ 
ship  management  systems  and  back¬ 
end  quoting  and  pricing  systems.  Sig¬ 
nificant  integration  work  would  be 
necessary  to  meet  strong  oversight 
I  requirements.  O  507^ 


AMD 


When  Microsoft  invests 


sixty  billion  dollars, 

they  don’t  use  just  any  processor. 


To  manage  this  much  money,  you  need  a  solution  that  offers  optimum  performance  and  real-time  flexibility.  Microsoft  found  both  in  the 
AMD  Opteron™  processor  running  Windows  Server™  2003.  Enterprise  Edition.  The  AMO  Opteron  processor  with  its  Direa  Connect 
Architecture  already  powers  the  world’s  highest  performing  2-way  and  4-way  x86  servers.  Now  Microsoft  Treasury  managers  are  using  it  to 
slash  the  time  It  ttkes  to  run  their  complex  risk-analysis  software.  Meanwhile,  they  have  the  flexibility  to  go  from  32-  to  64-bit  applications 
without  disrupting  their  business.  At  AMD,  we  believe  it’s  critical  that  technology  should  migrate  on  your  terms  to  help  you  realize  your  unique  vision. 
It’s  one  of  the  reasons  why  leading  OEMs  offer  enterprise-class  solutions  powered  by  AMD  Opteron  processors.  Would  you  like  to  learn  Just  how  much 
of  a  difference  they  can  make  to  your  company?  Go  to  www.am<l.com/entOfprise 
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Novell’s  Antitrust  Suit  Pbints  to 
Continued  Dominance  of  Office 


(liims  Micmsoft 
hanipca'd  s;ilcs  of 
WballVrftvt  in  ‘His 


BV  PATRICK  THIBODEAU 

Novell  Inc.  List  week  filed  an 
jnlilru.si  lawsuit  allcpn):  that 
Microsoft  Corp.  incpallv  tried 
to  eliminate  competition  in 
the  desktop  applications 
market  in  the  fnid-l'>‘)Os.  The 
mo^e  highliijhted  the  continu¬ 
ing  probleim  that  aiterru)iive.s 
to  Microwift  Office  have  in 
winning  users. 

ITte  lawsuit  in¬ 
volves  the  Word¬ 
Perfect  application 
suite,  which  Novell 
owned  from  l‘W4  to 
lO'Xi.  WordPerfect 
is  now  owned  b%’  Ottawa-based 
Corel  Corp..  which  relea-scd 
Version  12  of  the  suite  this  year. 
CoK'l  has  for{!cd  alltanecs  with 
PC  makers  such  as  Dell  Inc.. 
which  will  offer  the  applica¬ 
tions  on  some  of  its  systems. 

But  Oi'cording  to  The  NPI> 
Group  Ine..  a  market  research 
firm  in  Port  Washington.  N.Y.. 
as  of  September  WordPerfect 
had  just  a  2.4%  share  of  the 
market  for  productivity  suites 
sold  through  a’taii  and  online 
channeU.  That  was  gtH»d 
entiugh  for  second  place  be¬ 
hind  Micnviofi.  which  controls 
more  than  95%  of  the  market. 


The  experience  of  Pete 
Collins.  CIO  for  the  city  of 
Austin,  points  to  one  of  the 
dilTicullics  that  vendors  have 
in  trying  to  compete  against 
Office.  Collins  said  he  has 
tested  the  free  open-sours’e 
productivity  siiftwarc  devel¬ 
oped  by  OpenOtTice.org.  He 
noted  that  third-party  soft¬ 
ware  vendors  have  built  links 
to  the  applications  in  Office  to 
handle  certain  functions  but 
not  to  the  onc.s  in  OpcnOffice. 

The  open-sourcc  suite 

needs  more  ihird- 
pany  inicniperabil- 
ity  to  “go  to  the 
next  level,”  Collins 
said.  “That’s  the 
bottom  line." 
WordPerfect's 
core  markets  are  in  the  legal 
industry  and  among  govern¬ 
ment  agencies  and  small  busi¬ 
nesses.  according  to  a  Coa*l 
spokesman. 

“Hands  down.  WordPerfect 
is  a  superior  piece  of  software 
to  Microsoft  Word,"  said  lay 
Lenrow,  an  attorney  at  Len- 
row.  Kohn  tJc  Oliver  m  Balti¬ 
more.  Features  such  as  a  func- 
I  lion  that  lets  users  see  all  the 
formatting  code  in  a  legal  doc- 
I  ument  arc  especially  useful. 

I  he  added. 

Lenrow's  firm  uses  Word  to 
.  meet  occasional  requests  from 
I  clients  for  documents  created 
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Legal  Settlements 

MICROSOFT  AND  MOVEa 

■  NovcM  wil  drop  NttWare-foItted  antitrurt  dains  agiinst  Microsoft  in 
rMitfo  for  SS36  mMioa  In  cash. 


bNomI  wM  also  and  Its  participation  ki  the  European  Commission’s 
anbtnst  case  against  Mterosoft. 

MICROSOFT  AND  THE  COMPUTER  « 
COtMMMCATWWS  WDUSTWr  ASSOCIATTOW 

B  MicrosofI  wM  join  tha  CCIA  and  pay  an  unspecified  amount  to  cover 
legal  eipenses  incurrod  by  the  trade  group- 

■Tha  CCIA  arM  drop  its  appaaJ  of  the  consent  decree  between  MicrosofI 
and  the  U.S.  Department  of  Justice. 

oThe  tmta  group  will  also  withdraw  from  the  antitnat  proceedings 
against  IficrosefI  in  Empe. 


with  that  application.  Rut  al¬ 
though  Lonrow  said  he  can 
easily  move  W'ordPcrfcci  doc¬ 
uments  into  Word,  he  some¬ 
times  has  problems  opening 
Word  documents  in  Word¬ 
Perfect.  which  makes  him  su.s- 
picious  that  Microstifi  Is  delib¬ 
erately  ensuring  that  the  two 
products  aren’t  compatible. 

Novell  filed  the  Word¬ 
Perfect-related  lawsuit  in  U.S. 


Continued  from  page  / 

Novell 


business-oriented  version  but 
aren't  sure  whether  their  com¬ 
panies  will  imsiali  Novell  Lin¬ 
ux  Desktop  9  on  more  than 
one  or  two  machines. 

“We’ve  been  looking  at  Lin¬ 
ux  for  a  long  time  as  a  cost 
savings  over  Windows."  said 
Iw  IVxilc.  manager  of  techni¬ 
cal  support  at  Boscov's  De¬ 
partment  Store  LLC.  a  41-storc 
ret.'iil  chain.  Linux-based  desk¬ 
top  systems  are  especially  al¬ 
luring  for  use  in  the  back  of¬ 
fices  of  stores,  "where  wc 
don't  need  specially  written 
applications."  Poulc  said. 

But  noted  that  many 
of  the  9.500  workers  at  Read¬ 
ing.  Pa. -based  Bvvseov’s  arc  dc- 
pondeni  on  Windows  applica¬ 
tions.  such  as  a  httmegrown 
program  that’s  written  in  Vi¬ 
sual  Basic  and  used  by  120 
merchandise  buyers. 

"It's  a  critical  app.  and  until 
it’s  R’written  in  lava,  it’s  going 
ti>  continue  to  require  a  Win¬ 
dows  OS."  he  said. 

Tom  IhTitt.  information  sys¬ 
tems  manager  at  Coa.stal 
Transportation  Inc.  in  Seattle, 
uses  Novell's  enthusiast-aimed 
SUSP.  Linux  Professional  9.2 
desktop  software  but  keeps  a 
Windows  2000  machine  near¬ 
by  for  applications  that  don't 
supp«>rt  Linux.  I^att  said  he 
likes  his  l.inux  system  but 
would  have  rescrvaiion.s  about 
requiring  workers  to  give  up 
Windows,  partly  because  of 
the  different  look  and  feci. 


District  Court  in  Utah.  The 
company  built  its  case  around 
findings  made  in  the  U.S.  gov¬ 
ernment’s  antitrust  suit  against 
Microsoft  and  is  seeking  un¬ 
specified  damages  as  compen¬ 
sation  for  the  alleged  business 
harm  caused  by  Microsoft. 

Brad  Smith.  Micro.soft’s 
general  counsel,  said  during  a 
teleconference  that  Novell’s 
claims  about  WordPerfect 
have  no  merit  and  that  Micro¬ 
soft  is  prepared  to  resolve  the 
dispute  in  court. 

Microsoft  and  Novell  agreed 
to  sciiie  a  separate  antitrust 
suit  related  to  Novell’s  Net¬ 


Ware  operating  sv’stcm  busi¬ 
ness.  one  of  two  settlement 
deals  announced  by  Microsoft 
last  week  (see  box). 

loseph  LaSala  Jr.  Novell’s 
general  counsel,  said  in  a 
statement  that  the  two  compa¬ 
nies  had  “extensive  discus¬ 
sions”  about  resolving  the 
WordPerfect  claims.  But  he 
added  that  they  “were  unable 
to  .agree  on  acceptable  terms.” 

A  Novell  spokesman  said 
the  Nov.  5  departure  of  Vice 
Chairman  Chris  Stone  KJuick- 
Link  50(>04l  \\'as  unrelated  to 
the  legal  developments  with 
Microsoft.  O  50747 


"Technically,  it  would  be 
easy  to  .switch  to  l.inux.”  Pratt 
said.  “But  it  would  be  hard  for 
users  to  adapt,  and  that  would 
provide  no  real  advantage.” 

Novell  Linux  Desktop  9  is 
built  on  the  base  technology 
used  in  the  SUSE  Linux  Enter¬ 
prise  Server  9  operating  sys¬ 
tem.  which  Novell  acquired 
along  with  the  existing  desk¬ 
top  version  when  it  bought 
SUSE  l.inux  AG  in  )anuary. 

Novell  will  make  the  new 
si)ftwarc  available  through  its 
channel  partners  at  an  annual 
fee  of  $50  per  system,  which 
includes  updates  but  not 
technical  support,  said  Ted 
Haegor.  director  of  marketing 
for  Novell  Linux  Desktop. 

Novell  is  bundling  Open- 
Officc.org’s  desktop  applica¬ 
tions.  the  Mozilla  Web  brows¬ 
er  and  other  software  into  the 
desktop  Linux  release  (.see 
bt>x).  But  the  company  is  “not 
going  after  the  Windows  pt*w- 
er  user."  Haogcr  said.  "We’re 
not  trying  to  get  into  a  big 
David-and-GoIiath  battle  with 
Windows.”  He  added  that 
Novell  Linux  Desktop  9  is  best 
suited  fiir  fixed-function  sys- 
iem.s  in  call  centers  or  on  shop 
fliH>rs.  and  engineering  appli¬ 
cations  and  replacements  of 
Unix  workstations. 

Greg  Rosenberg,  chief  tech¬ 
nology  officer  at  Ricts  Inc.,  a 
Novell  reseller  in  Tinlcy  Park, 
IIL  beta-tested  the  Linux  soft¬ 
ware  for  six  months  with  input 
from  four  of  his  customers.  For 
the  kind  of  applications  that 
Novell  is  targeting,  the  initial 
release  is  about  SS%  of  the  way 


Novell  Linux 
Desktop  9 

•  Novell’s  version  o*  the 
OpenOtfice  desktop  applica¬ 
tions  suiti- 

•  The  Mozilla  Foundalwn's 
Fireloi  Wet.'  biowsct 

»  Novell  Evotution,  a  coHabora- 
tion  client  that  supports 
L'-mail.  calendaring,  contact 
inanagemenl  and  task  lists 

•  A  choice  of  the  KDE  anti 
GNOME  user  interlaces 

r  A  Cttnx  MetaKrame  client 

»  Biiilt-in  mleoration  with 
Novell's  ZENworks  Linux 
Management  sonwaie 


there,  he  said.  He  added  that 
Novell  needs  to  add  support 
for  1.2()0-dpi  printers,  among 
other  enhancements. 

Forrester  Research  Inc.  ana¬ 
lyst  Simon  Yates  contrasted 
the  $50  annual  fee  for  Novell 
Linux  Desktop  9  with  the  pur¬ 
chase  prices  of  up  to  S500  that 
usc'ts  have  to  pay  for  Micro- 
stTfi  Corp.’s  Windows  XP  and 
Office  .software.  But  if  users 
are  heavily  locked  in  to  Win¬ 
dows  systems,  chances  arc 
slim  that  they  would  consider 
deploying  many  Linux  desk¬ 
tops.  he  said.  O  50715 
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Novell’s  Antitrust  Suit  Points  to 
Continued  Dominance  of  Office 


Claims  Microsoft 
hampered  sales  of 
WordPerfect  in  ’90s 

SV  WATWICK  THIBOOCAU 

Novell  Inc.  last  week  filed  an 
antitrust  lawsuit  alleging  that 
Microsoft  Corp.  ill^iUy  tried 
to  eliininatc  competition  in 
the  desktop  applications 
market  in  the  mid*1990s.  The 
move  highlighted  the  continu* 
ittg  problems  that  alternatives 
to  Microsoft  Ofike  have  in 

winning  users.  _ 

The  lawsuit  in¬ 
volves  the  Word- 
Peifect  application 
suite,  which  Novell 
owned  from  1994  to 
1996.  WordPerfect 
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is  now  owned  by  Ottawa-based 
Corel  Cmp..  which  released 
Version  12  of  the  suite  this  year. 
Corel  has  forged  alliances  with 
PC  makers  such  as  Dell  Inc., 
which  will  offer  the  applica¬ 
tions  on  some  of  its  systems. 

But  according  to  The  NPD 
Group  Inc,  a  market  research 
firm  in  Port  Washington,  N.Y., 
as  of  September  WordPerfect 
had  fust  a  2^%  share  of  the 
maricet  for  productivity  suites 
sold  through  retail  and  online 
channels.  That  was  good 
enough  for  second  place  be¬ 
hind  Microsoft  which  controls 
more  than  9^  of  the  market 


The  experience  of  Pete 
Collins,  CIO  for  the  city  of 
Austin,  points  to  one  of  the 
difficulties  that  vendors  have 
in  trying  to  compete  against 
Office.  Collins  said  he  has 
tested  the  feee  open-source 
productivity  software  devel¬ 
oped  by  OpenOSice.org.  He 
noted  that  third-party  soft¬ 
ware  vendors  have  built  links 
to  the  applications  in  Office  to 
handle  certain  functions  but 
not  to  the  ones  in  OpienOffice. 

The  open-source  suite 

_  needs  more  third- 

party  interoperabil¬ 
ity  to  “go  to  the 
next  level,"  Collins 
said.  “That’s  the 
bottom  line.” 
WordPerfect’s 


core  maricets  are  in  the  legal 
industry  and  among  govern¬ 
ment  agencies  and  small  busi¬ 
nesses.  according  to  a  Corel 
spiokesman. 

“Hands  down.  WordPerfect 
is  a  supierior  piece  of  software 
to  Microsoft  Word."  said  Jay 
Lenrow.  an  attorney  at  Len- 
row,  Kohn  &  Oliver  in  Balti¬ 
more.  Features  such  as  a  func¬ 
tion  that  lets  users  see  all  the 
formaning  code  in  a  legal  doc¬ 
ument  are  especially  useful, 
he  added. 

Lenrow’s  firm  uses  Word  to 
meet  occasional  requests  feom 
clients  for  documents  created 


Legal  Settlements 
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with  that  application.  But  al¬ 
though  Lenrow  said  he  can 
easily  move  WordPerfect  doc¬ 
uments  into  Word,  be  some¬ 
times  has  problems  opening 
Word  documents  in  Word¬ 
Perfect.  whkh  makes  him  sus¬ 
picious  that  Microsoft  is  delib¬ 
erately  ensuring  that  the  two 
products  aren’t  compatible. 

Novell  filed  the  Word¬ 
Perfect-related  lawsuit  in  U.S. 


District  Court  in  Utah.  The 
company  built  its  case  around 
findings  made  in  the  U5.  gov¬ 
ernment’s  antitrust  suit  against 
Microsoft  and  ts  seeking  un- 
speciffed  damages  as  compen¬ 
sation  for  the  alleged  business 
harm  caused  by  Microsoft. 

Brad  Smith.  Microsoft’s 
genera]  counsel,  said  durii^  a 
teleconference  that  Novell’s 
claims  about  WordPerfect 
have  DO  merit  and  that  Micro¬ 
soft  is  prepared  to  resolve  the 
dispute  in  court 

Microsoft  and  Novell  %reed 
to  settle  a  separate  antitrust 
suit  related  to  Novell's  Net¬ 


Ware  operating  system  busi¬ 
ness,  one  of  two  settlement 
deals  announced  by  Microsoft 
last  week  (see  box). 

Joseph  LaSala  Jr.,  Novell’s 
general  counsel  said  in  a 
statement  that  the  two  compa¬ 
nies  had  “extensive  discus¬ 
sions"  about  resolving  the 
WordPerfect  claims.  But  be 
added  that  they  “were  unable 
to  agree  on  acceptable  terms.” 

A  Novell  spokesman  said 
the  Nov.  S  departure  of  Vice 
Chairman  Chris  Stone  [Quick- 
Link  S0604]  was  unrelated  to 
the  legal  developments  with 
MicrosofL  O  50747 
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business-oriented  version  but 
aren’t  sure  whether  their  com¬ 
panies  will  install  Novell  Lin¬ 
ux  Desktop  9  on  more  than 
one  or  two  machines. 

“We’ve  been  looking  at  Lin¬ 
ux  for  a  long  time  as  a  cost 
savings  over  Windows,"  said 
Joe  Poole,  manager  of  techni¬ 
cal  support  at  Boscov’s  De¬ 
partment  Store  LLC.  a  4I'Store 
retail  chain.  Linux-based  desk¬ 
top  systems  are  especially  al¬ 
luring  for  use  in  the  back  of¬ 
fices  of  stores,  “where  we 
don’t  need  specially  written 
applications,"  Poole  said. 

But  Poole  noted  that  many 
of  the  9.500  workers  at  Read¬ 
ing.  Pa.-based  Boscov’s  are  de¬ 
pendent  on  Windows  applica¬ 
tions,  such  as  a  homegrown 
program  that’s  written  in  Vi¬ 
sual  Basic  and  used  by  120 
merchandise  buyers. 

“It's  a  critical  app.  and  until 
it’s  rewritten  in  Java,  it’s  goii^ 
to  continue  to  require  a  Win¬ 
dows  OS."  he  said 

Tom  Pratt,  information  sys¬ 
tems  manager  at  Coastal 
Transportation  Inc.  In  Seattle, 
uses  Novell’s  enthusiast-aimed 
5USE  Linux  Professional  9.2 
desktop  software  but  keeps  a 
Windows  2000  machine  near¬ 
by  for  applications  that  don’t 
support  Lintix.  Pratt  said  he 
Ukis  his  Linux  system  but 
would  have  reservations  about 
requiring  workers  to  give  up 
Windows,  partly  because  of 
the  different  look  and  feel. 


“Technically,  it  would  be 
easy  to  switch  to  Linux,"  Pratt 
said  “But  it  would  be  hard  for 
users  to  adapt,  and  that  would 
provide  no  real  advantage." 

Novell  Linux  Desktop  9  is 
built  on  the  base  technology 
used  in  the  SUSE  Linux  Enter¬ 
prise  Server  9  operating  sys¬ 
tem.  which  Novell  acquired 
along  with  the  existing  desk¬ 
top  version  when  it  bought 
SUSE  Linux  AG  in  January. 

Novell  will  make  the  new 
software  available  through  its 
channel  partners  at  an  annual 
fee  of  $50  per  system,  whkh 
includes  updates  but  not 
technical  support,  said  Ted 
Haeger,  director  of  marketing 
for  Novell  Linux  Desktop. 

Novell  is  bundling  Open- 
Offieexirg's  desktop  appUca- 
tions,  the  Mozilla  Web  brows¬ 
er  and  other  software  into  the 
desktt^  Linux  release  (see 
box).  But  the  company  is  “not 
going  after  the  Windows  pow¬ 
er  user.”  Haeger  said  “We're 
not  trying  to  get  into  a  big 
David-and-GoUath  battle  with 
Windows."  He  added  that 
Novell  Linux  Desktop  9  is  best 
suited  for  fixed-fonctioo  sys¬ 
tems  in  call  centers  or  on  shop 
floors,  and  engineering  appli¬ 
cations  and  replacements  of 
Unix  workstations. 

Greg  Rosenberg,  chief  tech¬ 
nology  offker  at  Rids  Inc.,  a 
Novell  reselkr  in  Tinley  Park, 
QL  beta-tested  the  Linux  soft¬ 
ware  for  six  months  with  Input 
from  four  of  hU  customers.  For 
the  kind  of  applications  that 
Novell  is  targeting,  the  initial 
release  is  ^xnit  SS%  of  the  way 


Novell  Linux 
Desktop  9 


there,  be  said  He  added  that 
Novell  needs  to  add  support 
for  1200-dpi  printers,  among 
other  enhancements. 

Forrester  Research  Inc.  ana¬ 
lyst  Simon  Yates  contrasted 
^  $50  annual  fee  for  Novell 
Linux  E>esktop  9  %vith  the  pur¬ 
chase  prices  of  up  to  $500  that 
users  have  to  pay  for  Micro¬ 
soft  Corp.’s  Windows  XP  and 
Office  software.  But  if  users 
are  heavily  locked  in  to  Win¬ 
dows  systems,  chances  are 
slim  that  they  would  consider 
deploying  many  Linux  desk¬ 
tops.  he  said  O  50715 
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Meta  COO  Says  Clients  Want  Action 


BY  THOMAS  HOFFMAN 

IT  managers  are  ever  more  demanding 
of  providers  of  fec/tnoiogy  products  and 
services,  and  thosegrowingdemands  are 
extending  to  IT  research  firms.  Clients 
want  more  than  just  research  and  advice 
—  they  want  hands-on  assistance  in  as¬ 
sessing  the  status  of  protects  and  devel¬ 
oping  requests  for  proposals,  says  CO 
Hobitt.  the  new  president  and  cl^f  oper¬ 
ating  officer  of  Starriford,  Conn.-based 
Meta  Group  Inc.  Hobbs,  previ¬ 
ously  a  CIO  consultant  in  Meta’s 
executive  strategies  practice, 
spoke  to  Computerworld  lost 
week  afier  the  company  reported 
improved  third-quarter  earnings 
and  a  corTTorate  restructuring. 

What  wsTB  arsas  of  strength  in 
Meta's  tMrd-quartar  finandals? 

We've  seen  pretty  solid  growth  in  most 
markets  and  across  most  of  our  prod¬ 
ucts.  It’s  not  earthshaking  grow^,  but 
it's  solid  growth.  We’re  seeing  the  ben- 
efHs  of  distributors  we've  acquired  and 
getting  some  of  the  oveihead  under 
control  over  the  past  year. 

What  wore  the  drivars  for  the  recent  BXBCU- 
tive  deparhires  and  promotions?  Over  the 
past  several  years,  our  organization  has 
gotten  top-heavy.  We  had  some  execu¬ 
tives  who  were  more  removed  from 


the  market  than  they  should  have  been. 
Until  three  weeks  ago,  I  had  been  sup¬ 
porting  25  CIOs.  I’m  pretty  hands-on. 
and  I  like  to  have  our  executives  in¬ 
volved  in  service  delivery.  We  had  got¬ 
ten  removed  from  that.  I’ve  reroov^  a 
number  of  executives  that  I  don’t  have 
to  replace.  That  says  something  right 
on  its  surface.  As  we  continue  to  devel¬ 
op  and  implement  our  model  we'U  in¬ 
sist  on  managers  who  are  hands-on. 

What  are  the  iiBy  factors  shaping  the 
rr  research  market?  Customers 
are  lookii^  for  more  than  com¬ 
prehensive  recommendations. 
What  our  clients  are  interested 
in  is  taking  actionable  recom- 
I  _  mendations  and  making  them 
into  efficient  and  effective  exe¬ 
cutions.  It’s  about  getting  our 
hands  dirty  and  taking  executions  on 
behalf  of  our  clients  —  for  example, 
(saying).  “Here  are  the  three  ERP  sys¬ 
tems  that  are  best  suited  for  a  company 
your  size."  Then  we  get  involved  in  the 
RFP  [process]  and  the  bake-off  and  as- 
ses»ng  the  project  under  a  one-  or 
two-year  cycle. 

We’re  working  with  the  client  more 
deeply  on  the  investment  than  we  had 
before.  That  doesn’t  mean  that  we’re 
interested  in  doing  the  implementa¬ 
tion.  But  I  think  we’re  a  vi^le  element 


Bluetooth  Group 
Unveils  Road 
Map  to  2007 

BV  MATT  HAMBLEN 

The  Bluetooth  Special  Interest  Group 
(SIG)  last  week  released  a  three-year 
road  map  for  Bluetooth  short-range 
wireless  technology,  with  improve¬ 
ments  that  triple  bandwidth  and  can 
multicast  to  seven  other  users. 

While  many  Bluetooth  applica¬ 
tions  focus  on  the  consumer  market, 
Michael  Foley,  executive  and  technical 
director  of  the  Bluetooth  SIG  in  Over¬ 
land  Park,  KaiL,  said  the  2005  core  up¬ 
date  could  improve  Bluetooth-enabled 
sensors  used  in  manufacttiring. 

The  technology's  best-known  corpo¬ 
rate  user.  United  Parcel  Service  Inc  in 
Atlanta,  is  unsure  whether  it  will  take 
advanu^  of  the  new  features  laid  out 
in  the  road  map,  said  UPS  spokes¬ 
woman  Donna  Barrett.  The  company 
expects  to  expand  Us  use  of  Bluetooth 


over  the  next  three  or  more  years. 

Meanwhile,  the  extensions  could 
help  Bluetooth  fend  off  incursions 
from  potential  alternatives  such  as  the 
emerging  ultrawideband  (UWB)  tech¬ 
nology.  The  road  map  should  help 
show  that  Bluetooth  has  staying  power. 
Foley  said.  Although  some  analysts 
have  belittled  Bluetooth  when  compar¬ 
ing  it  with  the  nuicfa  faster  UWB,  Foley 
said  he  believes  the  two  can  coexist. 

UWB  products  could  appear  next 
year,  said  Craig  Mathias,  an  analyst  at 
Farpoint  Group  in  Ashland,  Mass. 
UWB  promises  data  rates  of  IGbit/sec.. 
about  100  times  the  current  bandwidth 
of  Bluetooth. 

“Bluetooth  is  here  now,  while  low- 
cost  UWB  is  five  years  out,“  said  Ken 
Dulaney,  an  analyst  at  Gartner  Inc.  in 
Stamford.  Conn.  “They  are  making  im¬ 
provements.  but  frankly,  it  takes  me  far 
too  long  to  use  the  (Bluetooth]  tech¬ 
nology."  In  the  case  of  mobile  phone 
headsets  linked  wirelessly  via  Blue¬ 
tooth  to  an  actual  phone,  the  Bluetooth 
connection  is  no  better  than  infrared, 
be  said.  050686 


of  risk  management  for  a  client. 

Are  thare  other  changes  you’re  ptaiu^  to 
drfvB?  We  need  to  hone  our  ability  to 
package  our  research  into  units  that 
the  market  can  consume.  Making  it 
available  in  meaningful  packages  that 


make  them  useful  for  the  clients. 

We’re  trying  to  develop  client-ready 
information  from  the  various  points  of 
research  we  have.  So  the  focus  will  be 
on  that  and  trying  to  get  all  of  our  mar¬ 
ket  ratios  in  line  to  make  all  of  our  op¬ 
erating  units  profitable.  O  50672 
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Microsoft  Indemnifies  Most  of  Its  Users 


Taiigets  open-source  rivals  in  legal  move 
that  some  say  will  have  little  impact 


BY  JORIS  EVERS 

Microsoft  Corp.  last  week  ex¬ 
panded  its  indenmincation 
program  to  cover  most  of  its 
customers,  in  a  bid  to  further 
set  itself  apart  from  open- 
source  rivals.  The  move,  some 
experts  said,  is  a  great  market¬ 
ing  tool  but  will  have  little  im¬ 
pact  on  users. 

Vendor  indemnification  pro¬ 
grams  have  emerged  as  part  of 
IT  risk-mitigation  strategies 
and  have  become  particularly 
important  for  Linux  sites  be¬ 
cause  The  SCO  Group  Inc.  has 
threatened  copyright  infringe¬ 
ment  lawsuits. 

“When  we  evaluate  compa¬ 
nies  and  software  products, 
indemnifrcarion  is  one  of  the 
first  things  we  look  at,**  said 
ICen  Meszaros.  assistant  vice 
president  and  infrastructure 
manager  at  LandAmerica  Fi¬ 
nancial  Group  Inc.,  a  Rich¬ 
mond.  Va.-b3^  real  estate 
transaction  services  provider. 
“It  is  important  that  the  ven¬ 


dor  is  willing  to  stand  up  for 
the  integrity  of  its  products." 

For  several  years,  Microsoft 
has  indemnified  its  volume 
license  customers  from  possi¬ 
ble  legal  threats. 

Last  year,  the  vendor  lifted 
the  monetary  cap  on  that  pro¬ 
tection.  Microsoft  is  now  ex¬ 
tending  protection  to  virtually 
all  users  of  its  products. 

David  Kaefer,  director  of 
business  development  at  Mi¬ 
crosoft,  said  that  after  a  re¬ 
view.  the  company  “came  to 
the  conclusion  that  there  real¬ 
ly  is  no  reason  why  we  would 
not  offer  it  to  anyl^y.” 

While  having  a  form  of  free 
insurance  is  always  nice,  the 
Microsoft  move  appears  to  be 
mostly  marketing,  said  David 
Elkins,  a  partner  in  the  intel¬ 
lectual  property  practice  at 
Squire.  Sanders  &  Dempsey 
LLP  in  Palo  Alto.  Calif.  The 
largest  corporations  that  most 
j  need  protection  are  already 
covered,  he  said. 


“Microsoft  is  using  its  fman- 
cial  power  to  enhance  its  mar¬ 
keting  advantage  in  this  partic¬ 
ular  area."  Elkins  said.  Smaller 
Linux  vendors  can't  match  Mi¬ 
crosoft's  blanket  indemninca- 
tion  because  they  don't  have 
the  financial  means,  he  noted. 

“Indemnification  is  one 
element  in  overall  platform 
value,  just  like  total  cost  of 
ownership,  sectirity  or  relia¬ 
bility."  Kaefer  said.  "Linux 
vendors  offer  much  narrower 
indemnification.” 

A1  Gillen,  an  analyst  at  IDC. 
said  that  the  program  won't 
mean  much  to  users.  “The 
chances  are  that  if  a  customer 
was  sued  over  intellectual 
property  violations  by  Micro¬ 
soft  software,  there  is  a  pretty 
good  chance  that  Microsoft 
would  have  to  step  into  the 
fray  anyway."  he  said.  O  50677 

Evers  is  a  reporter  for  the 
IDG  News  Service. 

MOKTHS  ISSUE 

MioQsoft's  Indemnification  plan  B  little 
mom  than  a  marketing  ginmick.  writes 
Frank  Ha^.  See  page  60. 


¥eniior  issues  Fix  As  Wonn  Emerges 

M  SHARP  CQUrniAST  to  Octo*  ;  Fabnat/sMyDoomwornithtf 


befs  barrage  o(  critic^  patch¬ 
es,  Microsoft  bst  weak  had  just 
one  "impoilant*  fix  for  users  in 
its  scheduled  round  of  security 
updates  lor  November. 

But  a  new  exploit  that  began 
circulating  last  week  can  take 
advantage  of  an  unpatched  vuh 
nerabifity  m  Mcrosoft's  Internet 
Explorer  browser  could  force 
the  company  to  release  V)  oub 
of-cyde  paM  before  fis  next 
mor^  update,  andysts  said. 

Microsoft's  latest  patch  fixes 
a  hole  in  the  company's  Inter¬ 
net  Security  and  Acoeieration 
Server.  The  vulnerability  could 
aflow  an  dtadter  to  spoof  trust¬ 
ed  internet  sites  and  content 
saidMcrosoft 

"At  this  point  we  are  consid¬ 
ering  fills  a  moderate  threat.* 
said  Oliver  Friedrichs,  a  senior 
manager  at  Symantec  Corp.’$ 
security  response  center. 'The 
main  thing  we  ae  concerned 
about  is  that  this  vulnerabity 
could  be  used  to  launch  phi^- 
ing  attacks.* 

However,  a  new  version  of 


took  arhantage  d  an  unpotched 
and  recently  announced  vulner¬ 
abity  in  MicFosoft's  Internet 
Expl^  IFrame  function  began 
spreading  last  week. 

The  mass-mainQ  worm, 
which  spread  ilsetf  via  frmail. 
was  dubbed  Bofra  or  My- 
OoomAH  and  was  rated  as  a 
kter  risk  to  corporate  security 
by  Symantea  *Eariy  indlcati^ 
are  fiial  to  be  infected,  a  user 
must  dick  on  a  malicious  Web 
link  sent  in  an  e-mal.*  Micro¬ 
soft  said. 

*1111$  is  a  zero-day  vulnera¬ 
bity.' said  Thor  Larhoim.  se¬ 
nior  security  researcher  at  PivX 
Solutions  Iric.  in  Newport 
Beach.  Cafif.  IMe  are  definitely 
hoping  that  Micrasofiwi 
sdnduie  an  oubof-cyde  patch 
to  fix  this  one.  since  expk^ 
ve  already  out  there.' 

Micfosi^  which  moved  to  a 
monfilly  patch-release  cyde  in 
0ctober2003.rele3sedanout- 
of-cyde  patch  in  July  to  ad¬ 
dress  a  similar  zero^  exploit. 

-JaikumarV^Byan 
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technical  competence:  yet  another  reason  to  outsource  with  spi 


au  cious  endings 


Any  IT  project  can  get  off  to  a  great  start.  But  SPI  has  the  methodologies,  standards,  tools  and  technical 
savvy  to  deliver  successful  endings,  too.  Our  global  delivery  model  includes  CMMI  Level  5  (in  progress). 
Six  Sigma  and  ISO  9001:2000  certifications.  And  if  you  like  our  operational  capabilities,  you'll 
really  appreciate  our  grasp  of  your  industry,  and  how  closely  we  align  our  business  with  yours. 
To  learn  more,  contact  us  at  866-316-5774  or  sales@spiPortal.com.  Visit  us  at  www.spiPortal.com. 
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Maybe  the  way  we  work 
isn’t  working. 

Enter  the  Intelligent  Document  Platform  from  Adobe. 
The  bridge  between  the  paper  and  digital  worlds. 
Suddenly,  documents  become  smarter  and  infinitely 
more  useful.  Important  data  is  made  secure.  And 
information  intuitively  travels  where  it's  needed,  as 
it's  needed,  all  on  its  very  own.  It's  simplicity  at  work. 
The  Intelligent  Document  Platform.  Better  by  Adobe. 


Adobe 


See  how  others  are  crossing  the  paper  to  digital  bridge  at  adobe.com/idp. 


Adobe  Intelligent  Document  Platform* 
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DON  TENNANT 


Get  Over  It 


•  RECEIVED  a  thought-provoking  e-mail  in 
response  to  my  column  two  weeks  ago  in 
which  I  thanked  IT  professionals  for  their 
perseverance  [QuickLink  50375],  and  I  just 
.  had  to  share  it: 


“Sin  It  is  interesting 
that  on  page  18  of  the 
11/01/04  Computerworld 
you  'thank'  the  commu¬ 
nity  of  IT  professionals, 
yet  on  page  37  of  the 
same  issue  you  print  an¬ 
other  'how-to*  article  ad¬ 
vising  corporate  traitors 
on  how  best  to  destroy 
the  jobs  of  those  same 
professionals.  Your  hy¬ 
pocrisy  is  disgusting." 

That  article,  as  you 
might  have  guessed,  dealt  with  out¬ 
sourcing.  But  it  was  only  tangentially 
about  ofEshoring.  so  I  hate  to  think 
how  disgusted  this  reader  would 
have  been  if  we  had  devoted  the  en¬ 
tire  story  to  the  taboo  topic.  He 
probably  would  have  lost  his  lunch. 

It's  an  amazing  dynamic  we  have 
here.  That  was  only  one  of  countless 
e-mails  we've  received  in  recent 
years  suggesting  that  sending  work 
offshore  is  anti-American.  And  more 
often  than  not.  we’re  charged  with 
being  equally  anti-American  for  writ- 
ii^  about  it  (Our  outsourcing  special 
repon,  which  b^iins  on  page  39.  will 
DO  doubt  fan  that  flame.)  There's  an 
intense,  reactionary  disdain  for  these 
"corporate  traitors"  among  a  very 
vocal  element  of  xenophobes.  and  IT 
professionals  —  vendors  and  users 
alike  ~  are  increasingly  reluctant  to 
inou-  their  wrath. 

Last  May.  1  interviewed  Mark  Bar- 
renechea.  executive  vice  president  of 
product  development  at  Computer 
Associates,  and  asked  him  about  the 
develc^ment  work  that  CA  has  elect¬ 
ed  to  do  offshore  K^ickLink  46693). 
The  strategy  Barrenechea  described 
seemed  reasonable  and  prudent  to 
me,  but  I  could  tell  be  was  uncom¬ 
fortable  talking  about  it.  When  I  said 
I  wanted  to  move  on  to  a  new  topic, 


Barrenechea.  visibly  re¬ 
lieved.  laughed.  "1  would 
welcome  it!"  he  bellowed. 

That  dynamic  was  ap¬ 
parent  a  couple  of  weeks 
ago  during  a  panel  discus¬ 
sion  I  moderated  at  a 
gathering  of  IT  services 
providers.  One  panelist, 
Denny  Brown,  vice  presi¬ 
dent  and  CIO  at  Arizona 
Public  Service  Co.,  said  he 
limits  offshore  outsourc¬ 
ing  to  no  more  titan  10% 
of  his  development  work.  The  rea¬ 
son:  To  pass  the  newspaper  test," 
Brown  said,  only  half  joking.  What  he 
meant  was  that  having  word  get  out 
via  the  media  that  you’re  offshoring 
more  than  10%  is  to  be  avoided. 

And  who  can  blame  him?  Nobody 
has  the  time  or  inclination  to  deal 
with  torrents  of  venomous  e-mail. 

But  I  have  three  words  for  anybody 
who  takes  the  outlandish  position 
that  sending  work  offshore  makes 
you  a  turncoat:  Get  over  it 
Rather  than  griping,  try  doing 


something  innovative  that’s  going  to 
keep  you  and  your  colleagues  em¬ 
ployed.  Thai’s  what  Brown  did.  A 
former  executive  at  IBM  Global 
Services.  Brown  has  adopted  that 
group’s  model  by  transforming  his 
IT  shop  into  a  services  provider  that 
competes  against  outside  vendors  to 
do  work  for  his  company's  business 
units.  That  customer-oriented  ap¬ 
proach  has  worked  w'ell  enough  to 
give  him  the  economic  means  to  pass 
the  newspaper  test. 

Another  panelist.  Tom  Ault,  a  se¬ 
nior  vice  president  at  electronic 
components  distributor  Avnet,  said 
his  company’s  business  is  cyclical, 
following  the  ups  and  downs  of  the 
semiconductor  market.  So  during  the 
down  times,  Avnet  becomes  an  out¬ 
sourcer  itself  by  making  its  under¬ 
used  IT  resources  available  to  other 
companies.  IT  departments  that  are 
innovative  enough  to  generate  rev¬ 
enue  tend  to  keep  jobs  from  going 
elsewhere. 

The  point  is  that  companies  may 
outsource  a  lot  of  things,  but  innova¬ 
tion  isn't  one  of  them.  Making  excus¬ 
es  for  a  failure  to  recognize  that  is 
what’s  really  disgusting.  O  S0699 
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VIRGINIA  ROBBINS 

Self-service 
Needs  a  Few 
Bradleys 

ON  MY  WAY  HOME 

from  work,  I  stopped 
at  the  garden  center 
in  my  neighborhood  home- 
improvement  store  to  buy 

a  few  plants  for  my  flower  boxes.  For 
less  than  $20. 1  found  four  beautiful  red 
b^onias  that  were  perfect.  The  stan¬ 
dard  checkout  lines  were  long,  so  1 
decided  to  use  the  self-service  kiosk. 

When  I  scanned  the  first  plant,  the 
kiosk  barked.  "Please  scan  item  and 
place  in  plastic  bag."  I  thought  1  had 
just  done  that,  so  I  looked  at  the  bar 
code  carefully.  It  was  sprinkled  with 
just  enough  black  dirt  to  make  it  un¬ 
readable.  Needing  an  alternative  to  the 
sleeve  of  my  silk  suit  and  not  finding 
any  paper  towels,  I 
used  one  of  the  plas¬ 
tic  bags  provided  at 
the  kiosk  to  clean  the 
label.  Using  a  plastic 
bag  to  wipe  damp 
dirt  off  of  a  plastic 
label  on  a  plastic  pot 
doesn't  work  very 
well  You  end  up 
generating  static 
electricity,  and  the 
dirt  becomes  more 
attracted  to  the  label. 

Without  any 
cashiers  to  provide 
the  kind  of  assistance  I  got  from 
Bradley,  an  airline  employee  who 
helped  me  catch  a  plane  and  make  it 
home  in  time  for  dinner  (as  described 
in  my  last  column:  see  (^IckLink 
49979).  it  took  longer  to  pay  for  the 
begonias  than  it  did  to  select  them. 

After  that  column  appeared,  many 
of  you  wrote  to  tell  me  about  similar 
experiences.  Paul  Dearling  also  had  an 
adventure  in  a  home  improvement 
store.  The  I-inch  spring  he  and  his 
wife  wanted  to  buy  didn’t  have  enough 
mass  to  trigger  the  kiosk  sensor.  He 
was  left  listening  to  a  recorded  voice 
instructing  him  to  "please  place  the 
item  in  the  bag"  14  times  while  his 
wife  hunted  down  a  cashier  to  cancel 
the  transaction.  But  Paul  went  on  to 
say  that  although  the  systems  aren’t 
perfect,  be  appreciates  the  faster 
checkout  lines  and  enjoys  Che  caroa- 
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raderie  he  finds  among  customers. 

I  agree.  When  kiosks  work,  they're 
fantastic.  A  majority  of  Americans  ~ 
over  70%  —  think  so  too.  During  a  typ¬ 
ical  week,  we  all  stop  at  the  ATM  to  get 
cash  or  fill  our  cars  with  gas  at  the  self- 
service  pump.  These  automated  trans¬ 
actions  haven't  quite  cut  out  the  hu¬ 
man  element,  but  in  the  past,  we  would 
have  interacted  with  clerks,  tellers  or 
gas  station  attendants.  Now  the  people 
wc  connect  with  are  fellow  customers. 

We  ask  the  person  ahead  of  us  if 
the  brand  of  weed  killer  he's  buying 
works  well  and  the  person  behind  if 
she  thinks  the  colors  we've  selected 
match.  Without  help  from  someone 
like  Bradley  or  some  other  type  of  as¬ 
sistance,  our  consumer  experience  is 
highly  influenced  by  the  information 
we  gain  in  line  and  how  well  the  kiosk 
is  working. 

There  is  no  doubt  that  self-service 
technologies  are  here  to  stay.  Compa¬ 
nies  can  save  too  much  money  not  to 
deploy  them.  An  article  called  ‘You're 
Hired"  in  the  Sept.  16  issue  of  The 
fconomisr  stated  that  a  standard  super¬ 
market  kiosk  can  handle  the  workload 
of  two  and  a  half  employees  and  that  a 
telecommimications  company  fiends 
10  cents  on  a  directory  service  trans¬ 
action  when  it  uses  an  interactive  voice 
response  system  but  S7  with  a  call  cen¬ 
ter.  It’s  the  classic  story  of  technology 
replacing  people. 

As  the  designers  and  implementers 
of  this  incredible  cost-reducing  tech- 
TU)logy,  we  need  to  remember  the  hu¬ 
man  elemem.  Create  enough  frustra¬ 
tion  for  a  customei;  and  you  lose  a  sale; 
fhistrate  chat  consumer  a  second  time, 
and  you  may  lose  him  for  life.  Remem¬ 
ber  to  factor  in  the  cost  of  the  Bradleys 
as  you  implement  and  improve  these 
technologies.  O  50596 
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GARTENBERG 

Business 
Weblogs  Are 
Double-Edged 

I’M  ENTHUSIASTIC  about 
weblogs  in  business.  Blogs 
are  rapidly  becoming  a 
mainstream  technology,  but 
there's  lot  at  stake  when  an 
individual  or  business  begins  blogging 
to  the  outside  world.  Some  organiza¬ 


tions  have  a  culture  that  al¬ 
lows  for  blogging  to  take 
place  with  minimal  disrup¬ 
tion.  and  blogging  can  actu¬ 
ally  enhance  their  conver¬ 
sations  with  the  outside 
world.  While  not  all  busi¬ 
nesses  fall  into  this  category, 
they  all  must  deal  with 
weblogs,  even  if  they  don't 
have  corporate  blogs  of  their 
own.  The  thii^  you  need  to 
coiuider  fall  into  three  areas. 

t  Kmmt  vfhat's  being 
about  your  eompany  on  other  pao- 
ple'a  wobloge.  'This  is  a  no- 
brainer.  If  y'ou're  not  using 
a  tool  like  PubSub  or  ^d- 
ster  to  see  what’s  being  said 
about  you  and  to  monitor 
your  company  and  brands, 
you’re  behind  the  times. 

Such  monitoring  is  a  simple 
way  to  get  a  rough  gauge  of  what's  be¬ 
ing  said  in  the  marketplace.  If  there's 
negative  buzz,  you  want  to  be  able  to 
pick  up  on  the  discussions  early  and 
get  ahead  of  the  issue. 

Z  6o  iloN^y  Mtwn  cronUng  official  corporalB 
UoQL  I  want  to  see  more  companies 
blog,  but  businesses  chat  do  so  need 
to  establish  guidelines.  For  example, 
bloggers  must  be  careful  about  the  lan¬ 
guage  they  use,  since  what  they  say 


can  have  ramifications 
down  the  road.  Establish¬ 
ing  policies  for  company 
bloggers  and  then  knowing 
who  is  saying  what  arc  crit¬ 
ical  steps.  (For  more  on  the 
dangers  that  lurk  in  corpo¬ 
rate  weblogs  and  the  pre¬ 
cautions  you  should  take, 
see  "Watch  Your  Weblog." 
(JuickLink  50037.)  Corp¬ 
orations  are  ri^t  to  tread 
lightly. 

Some  companies  also 
have  very  specific  regula¬ 
tions  regarding  what  can't 
be  said  for  legal  reasons. 

Like  it  or  not.  we  live  in  a 
litigious  society,  and  words 
can  come  back  lo  haunt  us. 
Blog  early  and  blog  often, 
but  know  what  your  compa¬ 
ny  is  getting  into  and  what’s 
being  said  on  those  corporate  bk^. 

3.  Ettabiih  guidalnM  for  vrorlM  wto 
Bythan«aimMconip»iyeni|ito»aM«li^ 

(king  iMraonal  bfogging. 'This  is  the  tricki¬ 
est  situation  of  alL  Independent  blog¬ 
gers  who  identify  their  employers  on 
their  weblogs  had  better  know  what  [  • 
the  consequertces  will  be  at  work.  For 
example,  in  many  industries,  employ¬ 
ees  may  not  know  that  there  are  regu¬ 
lator)*  issues  that  mean  certain  thing* 


READERS’  LEHERS 


I  can’t  be  spoken  about  casually.  Of 
I  course,  this  isn’t  a  new  problem  that 
I  has  tust  arisen  with  the  dawn  of  blog¬ 
ging:  many  companies  forbid  employ- 
!  ecs  to  speak  with  joumalists  or  the 
media  about  the  company  unless  they 
have  had  media  training  or  public  rela¬ 
tions  folks  are  present.  There's  a  rea¬ 
son  for  that,  and  it’s  important  for 
every  business  to  extend  its  policies  to 
include  guidelines  on  what  can  and 
can't  be  said  in  personal  weblogs.  I've 
recently  spent  a  lot  of  time  with  com¬ 
panies  on  this  issue,  and  it  can  be  dealt 
with  fairly  easily. 

Employees  who  are  blogging  on 
their  own  need  to  remember  that  un¬ 
less  ibcy're  working  at  a  ver)*  progres¬ 
sive  company,  they  need  to  take  it 
slowly.  This  is  a  case  where  asking  for 
forgiveness  instead  of  permission  can 
get  you  fired.  When  it  comes  to  busi¬ 
ness  and  blogs,  >*ou  had  better  know 
the  rules  before  you  hit  that  Post  but¬ 
ton.  I'm  a  big  fan  of  the  notion  "ready, 
fire,  aim"  as  a  strat^y  for  business  in 
many  cases.  But  this  is  one  situation 
where  that  approach  can  cost  you  your 
job.  050631 
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Hiding  Extensions 
Doesn't  Help  Itos 

JUSTAFEWVCAM^flwy- 
body  Who  (M  signAcanl  «vak 
on  a  PC  needed  at  iesst  a  rudimen¬ 
tary  umleislanding  ol  Se  exlenGKX& 
&«n  general  users  knew  common 
extensions  11(6  doc. -wpd  and  axe 
and  could  make  nteUgenl  decBions 
about  those  Mss.  However,  the  Iasi 
several  generations  of  operaftfigsys- 
terns  haw  efiec&vely  foddan  die  ex¬ 
tensions,  and  many  users  today 
don't  even  know  diey  exist 
I  was  nibaly  n&giued  by  this 
shift.  Being  able  to  open  most  lies 
with  a  slnipte  double^dick  and  hav¬ 
ing  the  file  either  execute  or  be 
passed  lo  its  associatBd  program  IS 
a  trerTierKlou&  labex  savings.  Unfor¬ 
tunately,  rnany  usera  doubfo-dick 
wilh  wild  abaiidon.  the  effect  being 
a  lot  of  unmtended  results  skJ.  too 
often,  disastrous  consequences. 

The  problem  has  gotten  so  bad  ttial 
many  CPs  now  filler  out  eifiai  at¬ 
tachments  based  on  exiensiotts 
perceived  as  dangwDus.  and  some 


are  planrxng  lo  dealow  attach¬ 
ments  altogether. 

Whfo  I  thmk  the  doubled  and 
ikag-and-drop  capabibbes  are  right- 
ktfy  here  to  stay,  the  dumbng  down 
of  Of  user  pogulabon  with  regard  to 
extensions  was  a  gnevofi  mslake. 
Acansoentiouseffortbyourindus- 
by  Id  m^  file  extension  visibilify 
the  defauH  and  discourage  their 
suppression  would  be  a  large  step 
in  the  right  (ferection.  Whle  we 
shouldnl  lessen  our  efforts  lo  pros¬ 
ecute  the  wrus  perpebaiors  arid 
other  computer  vandals,  we  neoj  to 
gwe  cv  isets  the  toots  to  combel 
these  problems  Censorsfvp  of 
'dangerous*  attachments  wi  only 
rob  UB  of  the  capabliibes  and  effi¬ 
ciency  our  tedmoiogy  has  given  us. 
Stu  AMorman 
Reno.Nev. 


Operations  Plans 
Aren't  So  Simple 

AMOMTHC’TwefoeMisidies 
Security  Maitegers  Mate.* 
Douglas  SchweitTer  nefodes  *Nol 


havng  an  nformation  security  oper 
ahon  plan*  [OsckLmli 49707]. 
That's  sound  actece.  Can  I  see /b 
plan?  it's  a  lillte  Baser  sad  than 
done.  Crealrg  one  isnl  the  chal¬ 
lenge,  kaepng  It  current  and  sup¬ 
ported  B. 

Scott  Thoreas 

Security  moruger,  infinirtation 
services,  MorsfioU,  Min/i, 
omegainteld^iyofiooxom 


Data  Quality  (^an 
Make  the  Difference 

INTMEHrTEinnewwihffowien- 
Pactard  CIO  GAes  Boucfwd  on 
thaloompany'sfaiedERPnigra- 
tion[^sCiOPoinlstointemalls- 
suesviERPftQ|aciSnafus*Quck- 
Link  49604].  the  three  stated  prob¬ 
lems  -  sto.  data  "mtegiily*  (to 
transacbonslandtransactionvol- 
line  ifflpacl  •  can  also  be  deserted 
as  data  quafoy.  data  quably  and 
more  data  qu^  ssues.  if  you  don't 
pay  sufficient  attentnn  to  d^  in- 
ctuidinQ  master  data,  trvisaction 
data  and  data  on  the  move  Cnier- 


iaces).  ugly  things  wi  happen 
AHtrouf^  i  am  soecuiatmg.  if  the 
35lh  HP  imptaraentation  had  such 
problens.perhapssomeoflheolh- 
ers  have  drane  (teta  ptobfoms  as 
wel  -  biA  not  the  vwteity.  Also, 
the  postmortem  made  no  mention 
of  the  role  ol  the  tea  plan  and  the 
evakabonoftea^stemdataquaf- 
ity  before  mafong  the  go/np-go 
decaon 
Fullon  WRca 
Semor  partner.  Colts  Neck 
Solutions  LLC  Colts  Neck.  NJ. 

COMPUTERWOKU)  weicornes 
comments  from  as  readers  Latters 
w6  be  edied  for  brevay  and  ciarfly 
They  should  be  addressed  to 
darrNeEcMe.tetterssdilor.Com- 
puterworid.  PO  Box  9f71. 1  Speen 
Street.  Ffaningham.  Mass.  OITOt 
Fax- (506)879-4843.  Email. 
ieHersgoumputerwortdcom 
incfcide  an  address  and  phone 
rMTterfor  immediBteverAcaiion. 
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Get  Over  It 


RECEIVED  a  thought-provoking  e-mail  in 
response  to  my  column  two  weeks  ago  in 
which  1  thanked  IT  professionals  for  their 
perseverance  [QuickLink  50375],  and  I  just 
had  to  share  it: 


“Sin  h  is  inrcresiing 
that  un  pa(:i’  18  of  the 
11. 01  04  Cofnputi’nvor/d 
you  ‘thank'  the  commu¬ 
nity  of  IT  professionals, 
yet  on  page  37  of  the 
same  issue  you  print  an¬ 
other  ‘how-to’  article  ad¬ 
vising  corporate  traitors 
on  how  best  to  destroy 
the  jobs  of  those  same 
professionals.  Your  hy¬ 
pocrisy  is  disgusting.” 

That  article,  as  you 
might  have  guessed,  dealt  with  out¬ 
sourcing.  But  it  was  only  tangentially 
about  offshoring,  so  I  hate  to  think 
hL'w  disgusted  this  reader  would 
have  been  if  we  had  devoted  the  en¬ 
tire  story-  to  the  taboo  topic.  He 
probably  would  have  lost  his  lunch. 

It's  an  amazing  dynamic  we  have 
here.  That  was  only  one  of  countless 
e-mails  wc'vc  received  in  recent 
years  suggesting  that  sending  work 
offshore  is  anti-American.  And  more 
often  than  not.  we're  charged  with 
being  equally  anti-American  for  writ¬ 
ing  about  it  (Our  outsourcing  special 
report,  which  begins  on  page  39.  will 
no  doubt  fan  that  flame.)  There's  an 
intense,  reactionary  disdain  for  these 
"corporate  traitors'*  among  a  very- 
vocal  element  of  xenophobes.  and  IT 
professionals  —  vendors  and  users 
alike  —  arc  increasingly  reluctant  to 
incur  their  wrath. 

Last  May.  f  interv  iewed  Mark  Bar- 
renechea.  e.xccutive  vice  president  of 
product  development  at  Computer 
Associates,  and  asked  him  about  the 
development  work  that  CA  has  elect¬ 
ed  to  do  offshore  [QuickLink  46693). 
The  strategy  Barrcnechca  described 
seemed  reasonable  and  prudent  to 
me.  but  I  could  tell  he  wxs  uncom¬ 
fortable  talking  about  it.  When  I  said 
I  wanted  to  move  on  to  a  new  topic. 


Barrencchca.  visibly  re¬ 
lieved.  laughed.  ‘‘I  would 
welcome  it!”  he  bellowed. 

That  dynamic  was  ap¬ 
parent  a  couple  of  weeks 
agi>  during  a  panel  discus¬ 
sion  1  moderated  at  a 
gathering  of  IT  services 
providers.  One  panelist. 
Denny  Brown,  vice  presi¬ 
dent  and  CIO  at  Arizona 
Ihjblic  Service  Ca,  said  he 
limits  offshore  outsourc¬ 
ing  to  no  more  than 
of  his  development  work.  The  rea¬ 
son:  "To  pass  the  new-spaper  test,'* 
Brown  said,  only  half  joking.  What  he 
meant  was  that  having  word  get  out 
via  the  media  that  you're  offshoring 
more  than  JO^o  Ls  to  be  avoided. 

And  who  can  blame  him?  Nobody 
has  the  time  or  inclination  to  deal 
with  torrents  of  venomous  e-mail. 

Bui  I  have  three  word.s  for  anybody 
who  takes  the  outlandish  position 
that  sending  work  offshore  makes 
you  a  turncoat:  Get  over  it. 

Rather  than  griping,  try  doing 


something  innovative  that's  going  to 
keep  you  and  your  colleagues  em¬ 
ployed.  That’s  what  Brown  did.  A 
former  executive  at  IBM  Global 
I  Services.  Brown  has  adopted  that 
I  group's  model  by  transforming  his 
I  IT  shop  into  a  services  provider  that 
I  competes  against  outside  vendors  to 
do  work  for  his  company's  business 
units.  That  customer-oriented  ap¬ 
proach  has  worked  well  enough  to 
give  him  the  economic  means  to  pass 
j  the  newspaper  test. 

Another  panelist.  Tom  Ault,  a  se¬ 
nior  vice  president  at  electronic 
components  distributor  Avnet.  said 
his  company's  bu.sincss  is  cyclical, 
following  the  ups  and  downs  of  the 
semiconductor  market.  So  during  the 
down  times.  Avnet  becomes  an  out- 
I  sourccr  itself  by  making  its  undcr- 
I  used  IT  resources  available  toother 
companies.  IT  departments  that  are 
innovative  enough  to  generate  rev¬ 
enue  tend  to  keep  jobs  from  going 
elsewhere. 

I  The  point  is  that  companies  may 
j  outsource  a  lot  of  things,  but  innova- 
:  tion  isn't  one  of  them.  Making  excus- 
I  es  for  a  failure  to  recognize  that  is 
'  what's  realty  disgusting.  O  50699 


Self-service 
Needs  a  Few 
Bradleys 

ON  MY  WAY  HOME 

from  work,  I  stopped 
at  the  garden  center 
in  my  neighborhood  home- 
improvement  store  to  buy 
a  few  plants  for  my  flower  boxes.  For 
less  than  S20. 1  found  four  beautiful  red 
begonias  that  were  perfect.  The  stan¬ 
dard  checkout  lines  were  long,  so  1 
decided  to  use  the  self-service  kiosk. 

When  I  scanned  the  first  plant,  the 
kiosk  barked,  "Please  scan  item  and 
place  in  plastic  hag."  I  thought  I  had 
just  done  that,  .so  1  looked  at  the  bar 
code  carefully.  It  was  sprinkled  with 
just  enough  black  din  to  make  ii  un¬ 
readable.  Needing  an  alternative  to  the 
sleeve  of  my  silk  suit  and  not  fmding 
any  paper  towels.  I 
used  one  of  the  plas¬ 
tic  bags  provided  at 
the  kiosk  to  clean  the 
label.  Using  a  plastic- 
bag  to  wipe  damp 
dirt  off  of  a  plastic 
label  on  a  plastic  pot 
doesn’t  work  very- 
well.  You  end  up 
generating  static 
electricity,  and  the 
dirt  becomes  more 
attracted  to  the  label. 

Without  any 
cashiers  to  provide 
the  kind  of  assistance 
Bradley,  an  airline  employee  who 
helped  me  catch  a  plane  and  make  it 
home  in  time  for  dinner  (as  described 
in  my  last  column:  see  QuickLink 
49979).  it  took  longer  to  pay  for  the 
begonias  than  it  did  to  select  them. 

After  that  column  appeared,  many 
of  you  wrote  to  tell  me  about  similar 
experiences.  Paul  Dcarling  also  had  an 
adventure  in  a  home  improvement 
store.  The  I-inch  spring  he  and  his 
wife  wanted  to  buy  didn't  have  enough 
mass  to  trigger  the  kiosk  sensor.  He 
was  left  listening  to  a  recorded  voice 
instructing  him  to  "please  place  the 
item  In  the  bag"  14  times  while  his 
wife  hunted  down  a  cashier  to  cancel 
the  transaction.  But  Paul  went  on  to 
say  that  although  the  systems  aren't 
perfect,  he  appreciates  the  faster 
checkout  lines  and  enjoys  the  cama- 
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raderie  he  finds  among  customers. 

I  agree.  When  kiosks  work,  they're 
fantastic.  A  raajorit>  of  Americans  — 
over  70%  —  think  so  too.  During  a  t>  p- 
ical  week,  we  all  stop  at  the  ATM  to  get 
cash  or  fiJl  our  cars  with  gas  at  the  self- 
-scrvicc  pump.  These  automated  trans¬ 
actions  haven't  quite  cut  out  the  hu¬ 
man  element,  but  in  the  past,  we  would 
have  interacted  with  clerks,  tellers  or 
gas  station  attendants.  Now  the  people 
we  connect  with  arc  fellow  customers. 

We  ask  the  perwn  ahead  of  us  if 
the  brand  of  weed  killer  he's  buying 
woriis  well  and  the  person  behind  if 
she  thinks  the  colors  we've  selected 
match.  Without  help  from  someone 
like  Bradley  or  some  other  type  of  as¬ 
sistance.  our  consumer  experience  is 
highly  influenced  by  the  information 
we  gain  in  line  and  how  well  the  kiosk 
is  working. 

There  is  no  doubt  that  self-service 
technologies  arc  here  to  stay.  Compa¬ 
nies  can  save  too  much  money  not  to 
deploy  them.  An  article  called  “You're 
Hired"  in  the  Sept.  16  issue  of  T7ie 
fconomisr  stated  that  a  standard  super¬ 
market  kiosk  can  handle  the  workload 
of  two  and  a  half  employees  and  that  a 
telecommunications  company  spends 
10  cents  on  a  directory  service  trans¬ 
action  when  it  uses  an  interactive  voice 
response  system  but  S7  with  a  call  cen¬ 
ter.  It’s  the  classic  story  of  tcchnolog)’ 
replacing  people. 

As  the  designers  and  implementers 
of  this  incredible  cost-reducing  tech¬ 
nology.  we  need  to  remember  the  hu¬ 
man  element.  Create  enough  frustra¬ 
tion  for  a  customer,  and  you  lose  a  sale; 
frustrate  that  consumer  a  second  time, 
and  you  may  lose  him  for  life.  Remem¬ 
ber  to  factor  in  the  cost  of  the  Bradleys 
as  you  implement  and  improve  these 
technologies.  C  50598 
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Business 
Weblogs  Are 
Double-Edged 

I  M  ENTHUSIASTIC  aboul 
weblogs  in  business.  Blogs 
are  rapidly  becoming  a 
mainstream  technology,  but 
there’s  lot  at  stake  when  an 
individual  or  business  begins  blogging  | 
to  the  outside  world.  Some  organiza-  I 


tions  have  a  culture  that  al¬ 
lows  for  blogging  to  lake 
place  with  minimal  disrup¬ 
tion.  and  blogging  can  actu¬ 
ally  enhance  their  comer- 
saiions  with  the  outside 
world.  While  not  all  busi¬ 
nesses  fall  into  this  c.itcgort  . 
they  all  must  deal  with 
weblogs,  c\  cn  if  they  don't 
have  corptiratc  blogs  of  their 
own.  The  things  you  need  to 
consider  fall  into  three  areas. 

1.  Know  what's  being  said 

about  your  company  on  other  peo¬ 
ple’s  webioQs.  This  i.s  a  no- 
brainer.  If  you’re  not  u.sing 
a  tool  like  PubSub  or  Feed- 
ster  to  see  what's  being  said 
about  you  and  to  monitor  ^ 

your  company  and  brands. 

you're  behind  the  time.s. 

Such  monitoring  is  a  simple 
way  to  get  a  rough  gauge  of  what’s  be¬ 
ing  said  in  the  marketplace.  If  there’s 
negative  buzz,  you  want  to  be  able  to 
pick  up  on  the  discussions  early  and 
get  ahead  of  the  issue. 

2.  Oo  slowly  when  creabng  official  corporate 
Uogs.  I  want  to  see  more  companies 
blog,  but  businesses  that  do  so  need 

to  establish  guidelines.  For  example, 
bloggers  must  be  careful  about  the  lan¬ 
guage  the>-  use.  since  what  they  say 


vice  proildont  MNf  r*- 
saarch  dbocigr  lot  Iho 
f^reoaal  lochnology  & 
Accasa  nd  Cuaton 
Reaaarcb  proups  at 
deObarRaMarchin 
New  York.  Coatact  ton 

Hk  wabiog  and  fISS 


can  have  ramifications 
down  the  road.  Ksiabli.sh- 
ing  policies  for  company 
bloggers  and  then  knowing 
who  Is  saying  what  are  crit¬ 
ical  steps.  ( For  more  on  the 
dangers  that  lurk  in  c«irpo- 
rate  webUigs  and  the  pre¬ 
cautions  v-ou  should  take, 
see  “Watch  Your  Wcblog.“ 
QuickLink  Corp¬ 
orations  are  right  to  tread 
lightly. 

Some  companies  alsa' 
have  very  specific  reguhi- 
tions  reg.arding  what  can  t 
be  said  for  k’gal  reasons. 
Like  it  or  not.  we  li\-e  in  a 
litigious  society,  and  words 
can  come  hack  to  haunt  us. 
51()g  early  and  blog  often. 
fMwi.  but  know  what  your  compa¬ 
ny  is  getting  into  and  what's 
being  said  on  tht>sc  corporate  bli>gs. 

3.  Establish  pukMines  for  workers  wlio  iden¬ 
tify  thenselves  as  company  empbyees  while 
doing  personal  blogging.  This  is  the  tricki¬ 
est  situation  of  all.  Independent  Win¬ 
gers  who  identify  their  employers  on 
their  weblogs  had  better  know  what 
the  ctmsequences  will  be  at  work.  For 
example,  in  many  industries,  employ¬ 
ees  may  not  know  that  there  arc  regu¬ 
latory  issues  that  mean  cenain  things 


can't  be  spt>ken  about  casualty.  Of 
s'ourse.  this  isn’t  a  new  prnbletn  that 
has  just  arisen  with  the  dawn  of  bl«»g- 
ging;  many  ct'mpaniv-s  forbid  employ  - 
s*e.s  to  speak  with  journalists  or  the 
media  abi>ut  the  company  unless  they 
have  had  media  training  or  public  rela¬ 
tions  folks  are  present.  There’s  a  rea¬ 
son  for  that,  and  it's  important  for 
every  business  to  extend  its  policies  to 
include  guidelines  i»n  what  can  and 
can’t  be  said  in  pers^'tul  weblogs.  I’ve 
recently  spent  a  lot  of  time  with  com¬ 
panies  on  this  issue,  .ind  it  can  be  dealt 
with  fairly  easily. 

Employ  ee  who  are  blogging  on 
their  tnvn  need  to  remember  ihat  un¬ 
less  they  're  'vorkmg  at  a  very  progres 
sive  company,  they  need  to  take  it 
slowly.  This  is  a  can'  w  here  asking  tor 
lorgiveness  instead  of  permission  can 
get  you  fired  When  it  comes  to  busi- 
lu-ss  and  hU^gs.  y  ou  had  better  km»w 
the  rules  before  you  hit  that  Post  but- 
Km.  I’m  a  big  fan  of  the  notion  “ready, 
fire,  aim"  as  a  strategy  for  business  in 
many  cases,  flui  (his  Is  one  situation 
where  that  apprkuch  ean  cost  vou  vour 
job.  O  50631 
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Hiding  Extensions 
Doesn’t  Help  Users 

JUST  A  FEW  YEARS  ago.  every 
body  who  did  sigmhcant  work 
on  a  PC  neededat  least  a  nidvTten- 
tary  understanding  file  extensions. 
Even  general  useis  knew  common 
extensions  Hie  .doc.  wpd  and  exe 
and  could  make  intelligent  decisions 
about  those  iiles  However,  the  Iasi 
several  generations  of  operating  sys- 
tems  have  effectively  hidden  the  ex¬ 
tensions,  and  many  users  today 
don't  even  know  they  exist. 

1  was  initially  intrigued  by  this 
shift.  Being  able  to  open  most  tiles 
with  a  Simple  doubfe-dick  and  hav¬ 
ing  the  tile  either  execute  or  be 
passed  to  its  associated  program  i$ 
a  tremendous  labor  savings.  Unfor¬ 
tunately.  many  users  double-click 
with  wild  abandon,  the  effect  being 
a  loi  of  unmtended  results  and.  too 
often,  disastrous  conseouences. 
The  probfem  has  gotten  so  bad  that 
many  ISPs  now  filter  out  e-mail  at¬ 
tachments  based  on  extensions 
perceived  as  dangerous,  and  some 


are  planning  to  disallow  attach¬ 
ments  aftogether. 

White  I  thmk  the  doubfe-ckek  and 
drag-and-drop  capabilities  are  nght- 
fully  here  to  stay,  the  dumbing  down 
ofouruserpoQuIation  wrihrE^janfto 
extensions  was  a  gnevous  mistake 
A  conscientious  effort  by  our  ndus- 
Iry  to  make  tile  extension  vistiility 
the  default  and  discourage  their 
suppression  would  be  a  large  step 
n  the  nght  direction.  While  we 
shouldn't  lessen  om  efforts  to  pros¬ 
ecute  the  virus  peroetrators  and 
other  computer  vandals,  we  need  to 
give  our  users  the  tools  to  combat 
these  problems  Censor^  ot 
'dangerous*  attachments  wdl  only 
rob  us  ol  the  capacities  and  efti- 
oency  our  technology  has  grven  us 
Stu  Akterman 
Reno.  Nev. 


having  an  information  secunty  oper¬ 
ation  ptan'  lOmckUik  497071 
Thal'ssound advice  Canlseefus 
plan?  It's  a  little  easier  said  than 
dpne  Creatmgonesn'ithed^- 
tenge.  keeping  It  current  and  sup¬ 
ported  6. 

Scott  Thomas 

Serurify  manager,  infbrmotion 
siTvicM.  Marshall.  Minn~ 
omegointei&.ayahoo.com 


Operations  Plans 
Aren’t  So  Simple 

A  MONO  THE  Twelve  Mistakes 
Secunty  Managers  Make.’ 
Douglas  S(^rwert?er  incfcjifes  “Not 


Data  Quality  Can 
Make  the  Difference 

INTHEMTERVICWwilhHewfen- 
Packard  CK)  GrHes  Bouchard  on 
that  company's  failed  ERP  rmjya- 
tion  ('HR's  do  Rjints  to  Internal  Is¬ 
sues  in  ERP  Protect  Snafus.' Omck- 
Ink  49604]  the  three  staled  prob- 
tems'Silos  d3ta'imegnty'(iosi 
transactions)  and  transaction  vol¬ 
ume  impact  -  can  also  be  described 
as  data  quality,  data  quality  and 
more  data  quality  issues,  ft  you  (fon'l 
pay  suthcient  aftenlion  to  data,  th 
dudng  master  data,  transadion 
data  and  data  on  the  move  (inter¬ 


laces).  ugly  ttwigs  will  hwpen 
Atihough  I  am  soecutalno.  il  the 
3Slh  enplementalion  had  such 
pioblems.  peihaps  some  ol  Ihe  oth¬ 
ers  have  chronic  daia  problems  as 
wen  *  but  not  thevisMiv  Also 
the  postmortem  made  no  mention 
ol  the  role  of  the  test  plan  and  tne 
evaluation  of  lest  system  data  oiai - 
!  ity  before  maluog  the  go/no-go 
deosion 
Fulfon  Wilcox 
SifTtior  partner.  Cot/s  S'cet 
Sufun'ons  IIC.  Colts  Meek.  N.J. 
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Introducing  the  Intel*  Xeon'  processor  with 
support  for  32-  and  64-bit  appiications. 

It  means  the  most  widely  used 
server  platform  in  the  world  can  now  work  even  harder. 

And  new  platform  technologies  enable  increased  power  savings, 
flexibility  and  performance.  For  more 
information — and  more  choice — visit  intel.com/business. 
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Secure 

INFRASTRUCTURE 


Construction  management 
firm  Lend  Lease  Corp.’s 
year-long  effort  to  rebuild 
its  security  and  enterprise 
management  systems  has 
lowered  operating  costs 
and  boosted  productivity. 
By  Matt  Hamblen 


Lend  lease  corp.  had  antivints 
software  running  on  all  of  the 
gateways,  e-mail  servers  and 
desktops  that  serve  its  10.000 
workers  worldwide,  but  that 
wasn't  enough  to  prevent  a  Blaster  at¬ 
tack  on  Aug.  3. 2003.  That  incident 
prompted  the  global  real  estate  man¬ 
agement  and  financing  company  to  be¬ 
gin  a  process  that  resulted  in  a  sweep¬ 
ing  revamp  of  its  IT  infrastructure. 

“Blaster  hit  us  rather  hard  and  on  a 
global  scale,"  says  Chief  Security  Offi¬ 
cer  John  Miles.  The  antivirus  protec¬ 


tions  notwithstanding,  he  says,  “we 
didn’t  have  the  right  tools  for  proper 
insight  to  tell  where  the  virus  was 
coming  from." 

Sydney,  Australia-based  Lend  Lease 
appraised  its  security,  systems  and  ser¬ 
vice  man^ement  softvi^.  The  goal: 
to  be  better  prepared  for  attacks  and  to 
improve  how  the  business  deals  with 
internal  and  external  customers. 

A  little  more  than  a  year  after  the 
Blaster  attack,  the  company  had  com¬ 
pleted  a  $1.8  million  project  to  pur¬ 
chase  and  install  18  software  products 


from  six  vendors,  including  Remedy,  a 
unit  of  BMC  Software  Inc.  Lend  Lease 
dubbed  the  project  HighRlSE,  after  the 
company’s  woik  on  skyscrapers  and 
because  it  includes  Remedy  identity, 
system  and  endpoint  management 
tools.  The  products,  deployed  together, 
went  live  in  early  September. 

Software  Pyramid 

Miles  describes  HighRlSE  as  a  flve- 
level  pyramid,  with  service  manage¬ 
ment  functions  at  the  top  (see  diagram, 
next  page).  These  include  help  desk. 


service  level  asset  and  change  maiuge- 
ment  products  from  Remedy,  as  well 
as  remote-control  and  business  intelli¬ 
gence  products  from  ManageSoft  Corp. 

The  next  tier  down,  the  identity  and 
trust  man^ement  level  includes  pass¬ 
word  and  identity  management  prod¬ 
ucts  from  M-Tech  Information  Tech¬ 
nology  Inc,  as  well  as  documentation 
that  Lend  Lease  created  based  on  IT 
Infrastrucnue  Library  (ITIL)  stan¬ 
dards  for  (^rations  and  security 
management. 

The  directory  management  tier  in¬ 
cludes  administratioD  products  from 
NetI<i.Coip,  plus  directory  software 
from  Microsoft  Corp.  and  Oracle  Corp. 

The  ctmfiguration  and  vulnerability 
management  layer  iiurludes  configura¬ 
tion.  security  path  and  vulnerability 
management  tools. 

The  bottom  tier,  threat  aiKl  availabil¬ 
ity  management,  includes  application, 
security  and  inventory  management 
functions. 

Lend  Lease  CIO  Jay  Skfoinski  says 
he  wanted  the  products  to  be  integrat¬ 
ed  at  the  same  tune  to  keep  the  project 
rollout  time  short  “Integrating  all  the 
products  in  series  would  have  taken 
years  to  complete,  and  integration 
would  have  been  a  challenge,"  he  says. 

Lend  Lease  set  up  a  bidding  process, 
invited  three  vendors  for  each  func¬ 
tional  area  and  then  picked  the  one 
with  the  best  features  and  technical 
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I  '  I K  I  Construction  management 

^"1  I  ||\l|  ^  firm  Lend  Lease  Corp.’s 
L«|  \L«V^  I  II  ^  year-long  effort  to  rebuild 

^  its  security  and  enterprise 

management  systems  has 

H  HV  ^b|^|  lowered  operating  costs 
and  boosted  productivity. 

By  Matt  Hamblen 
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sorvico  level,  asset  and  ehantjc  manajre- 
mont  products  from  Remedy,  as  well 
as  remote-control  and  business  intelli¬ 
gence  products  from  ManageSt>ft  Corp. 

The  next  tier  down,  the  identity  and 
trust  management  level,  includes  pass¬ 
word  and  identic  management  pri>d- 
ucts  from  M-Tech  Information  Tech¬ 
nology  Inc.,  as  well  as  documentation 
that  Lend  Lease  created  based  on  I  T 
Infrastructure  Library  flTll.t  stan¬ 
dards  for  operations  and  securits 
management. 

The  director)-  management  tier  in¬ 
cludes  administration  pn>duets  from 
NetlQCorp..  plus  directory  software 
from  Microsoft  Corp.  .ind  Oracle  (^irp. 

The  ettnfiguration  and  vulnerability 
management  layer  includes  configura¬ 
tion.  security  path  and  vulnerability 
management  t<H>ls. 


Lend  lease  corp.  had  antivirus 
software  running  on  all  of  the 
gateways,  e-mail  servers  and 
desktops  that  serve  its  10.000 
workers  worldwide,  but  that 
wasn’t  enough  to  prevent  a  Blaster  at¬ 
tack  on  Aug.  3. 2003.  That  incident 
prompted  the  global  real  estate  man¬ 
agement  and  financing  company  to  be¬ 
gin  a  process  that  resulted  in  a  sweep¬ 
ing  revamp  of  its  IT  infrastructure. 

“Blaster  hit  us  rather  hard  and  on  a 
global  scale.”  says  Chief  Security  Offi¬ 
cer  John  Miles.  The  antivirus  protec¬ 


tions  notwithstanding,  he  says,  “we 
didn't  have  the  right  tools  for  proper 
insight  to  tell  where  the  virus  was 
coming  from.” 

Sydney,  Australia-based  Lend  Lease 
appraised  its  security,  systems  and  ser¬ 
vice  management  software.  The  goal: 
to  be  better  prepared  for  attacks  and  to  i 
improve  how  the  business  deals  with  I 
internal  and  external  customers. 

A  little  more  than  a  year  after  the 
Blaster  attack,  the  company  had  com¬ 
pleted  a  $1.8  million  project  to  pur¬ 
chase  and  install  18  software  products  I 


from  six  vendors,  including  Remedy,  a 
unit  of  BMC  Software  Inc.  Lend  Lease 
dubbed  the  project  HighRISE.  after  the 
company's  work  on  skyscrapers  and 
because  it  includes  Remedy  identity, 
system  and  endpoint  management 
tools.  The  products,  deployed  ti^ether. 
went  live  in  early  Septemlwr. 

Software  Pyramid 

Miles  describes  HighRISE  as  a  five- 
level  pyramid,  with  service  manage¬ 
ment  functions  at  the  top  (see  diagram, 
next  page).  These  include  help  desk. 


The  bottom  tier,  threat  and  availabil¬ 
ity  management,  includes  application, 
security  and  inventor)-  management 
functions. 

Lend  Lease  CIO  Jay  Skibinski  says 
he  wanted  the  pitKiucts  to  he  integrat¬ 
ed  at  the  same  time  to  keep  the  project 
rollout  time  short.  'Integrating  all  the 
products  in  scries  would  have  taken 
years  to  complete,  and  integration 
would  have  been  a  challenge,*'  he  says. 

Lend  Lease  set  up  a  bidding  prtKess. 
invited  three  vendors  for  each  func¬ 
tional  area  and  then  picked  the  one 
with  the  best  features  and  technical 
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^uiiliiy.  As  pan  of  ihc  deal.  Skibinski 
required  iho  vcnd«»rs  lo  meet  upfront 
.ind  Uitrcc  to  make  their  products  inter- 
•  ‘perate.  By  doinj:  so.  Lend  Lease  was 
able  to  ii\u»d  hiring  an  independent  in¬ 
tegrator  'The  vendors  understand  it's 
a  big  win  for  them  as  well  to  interoper¬ 
ate.  and  it's  something  that  leads  to 
K’tter  busines-s."  Skibinski  says. 

Howewr.  oversight  of  the  \  endors 
took  considerable  work.  Miles  delegat¬ 
ed  responsibility  for  mitigating  the 
risks  to  eight  project  managers  and 
urged  teams  to  communicate  bad 
news  quickly.  He  kept  a  "risk  register" 
ihr<*ughout  the  priKcss.  sharing  it  with 
the  project  teams.  Miles  and  other 
managers  informed  the  vendors  imme¬ 
diately  when  problems  developed. 

At  one  juncture.  Miles  recalls,  proj¬ 
ect  marugers  encountered  a  pn^blcm 
iniegraiing  Netlt^and  ManageSofi 
products  ManagcS*>lVs  team  agreed  to 
build  a  fiN  and  brought  in  developers 
to  di>  the  work  overnight. 

Skibinski.  Miles  and  others  placed  a 
great  deal  of  emphasis  on  sound  plan¬ 
ning.  including  putting  of  the  ef¬ 
fort  on  people  and  the  pri*cess  and 
only  on  the  technology.  Miles 
says.  "Analyte,  arul>7e  and  make  sure 
the  design  is  ex'irevt  beitire  you  get  in 
the  build  phase  of  the  prcijeci."  he  says. 

Change  Factors 

While  the  Blaster  attack  was  the  cata- 
ly  St  for  change,  the  HighRISL  pn>jeci 
was  prompted  by  other  factors,  includ¬ 
ing  the  need  to  become  motv  efficient. 


In  recent  years.  Lend  Lease  has  had 
a  .^.^0  reduction  in  IT  staff,  from  .^5o 
people  to  240.  and  its  IT  operations 
'  budget  was  cut  from  S‘)0  million  to  S60 
million  after  the  company  consolidat- 
I  cd  seven  North  American  data  centers 
I  into  one  Ailanta-area  facility  called  the 
I  Shared  Technology  Center. 

■  Skibinski.  Miles  and  about  90  IT 
I  staffers  nms  work  in  the  Shared  Tech¬ 
nology  Center.  That  center  and  tsvo 
tuhers  in  England  and  .Australia  con- 
[  trol  IT  for  the  S7  billion  company, 
j  which  has  offices  in  44  countries. 

While  bolstering  security  wa.s  the 
general  theme  behind  HighRISE.  Skib¬ 
inski  -Say'S  Lend  Lease  also  had  to  be 
able  to  respond  to  constant  audit  re¬ 
quests  from  customers  curious  about 
its  internal  operations.  Thar  task  was 
made  more  difficult  by  government  re¬ 
porting  standards  for  companies  like 
Lend  Lease  that  provide  construction 
financing  as  well  as  management  ser¬ 
vices.  Mergers  .ind  acquisitions  also 
complicated  thi.s  proee.sN. 

I  HighRISE  will  make  it  easier  for 
Lend  Lease  to  process  citnsiruciion 
bids  online  so  it  can  stay  competitive 
and  communicate  better  with  other 
companies.  And  it  will  simplify  the 
process  of  setting  up  and  managing  I  T 
op*erations  at  project  sites.  Thtise  IT 
facilities  arc  built  and  then  taken  down 
several  years  later  as  buildings  and 
bridges  are  finished. 

While  conceiving  and  finishing  a 
prijjeet  in  a  year  i.s  noteworthy,  the 
I  lighRISE  offon  is  also  unusual  in  oth¬ 


er  ways.  One  was  Skibinski's  decision 
to  put  Miles,  the  company's  top  securi- 
I  ry  official,  in  charge  of  what  became  a 
j  complete  systems,  service  and  security 
i  management  overhaul.  Skibinski  says  it 
'  helped  to  have  someone  with  knowl¬ 
edge  of  IT  security  working  to  inte¬ 
grate  security  and  related  software 
into  all  of  Lend  Lease’s  processes. 

Also.  Lend  Lease  worked  upfront  to 
develop  ITIL-bascd  standards  that  af- 
j  fected  the  people  and  process  compo- 
!  nents  as  much  as  the  icchnoK>gy.  Lend 
I  Lease  used  a  life-cycle  management 
process,  gleaned  from  several  sources, 
that  relied  on  intense  planning  to  re¬ 
duce  implementation  problems,  says 
Tom  Peek,  assistant  project  director. 

Payoffs 

Lend  Lease  sees  two  areas  where 
HighRISE  wilt  quickly  pay  for  itself. 
iTne  is  a  reduction  in  the  cost  of  labor 
for  disseminating  antivirus  patches, 
which  Lend  Lease  e-stimaics  required 
1.200  worker  hours  each.  At  SlOO  per 
hour  for  labor,  deploying  a  single  patch 
could  cost  S120.000.  and  Lend  Lease 
estimates  that  it  faces  10  to  20  critical 
security  events  per  year.  With  an  auto¬ 
matic  change  and  security’  patch  man¬ 
agement  system,  those  costs  can  be 
nearly  eliminated.  Miles  says. 

Password  management  tools  will 
also  help  reduce  costs.  Miles  estimates 
that  20®o  to  20*^0  of  some  90.000  annual 
help  desk  calls  came  from  users  who 
were  confused  about  or  had  forgotten 
their  passwords.  .At  up  to  $.^0  per  call, 
the  annual  cost  of  helping  users  with 
passwords  could  hit  S500.000  or  more. 
Skibinski  says  at  least  half  of  those 
calls  will  be  eliminated. 

Instead  of  getting  the  help  desk  in¬ 
volved,  the  new  password  manage-  j 
ment  sy'stcm  requires  employees  to  ' 
use  a  unique  nine-character  password 
that  must  be  changed  every  90  days. 
Users  set  their  passwords  and  follow  a 
string  of  prompts  that  serve  as  re¬ 
minders  for  those  who  forget. 

Passw'ord  and  patch  management 
are  areas  in  which  benefits  from  the 


HighRISE  technologies  are  most  easily 
measured.  Miles  says.  But  there  have 
been  improvements  in  other  areas,  in¬ 
cluding  security.  "We’ve  noticed  at¬ 
tacks  are  down,  and  our  ability  react  to 
them  has  drastically  increased,  and  in  a 
matter  of  seconds  we  can  get  alerts 
saying  things  such  as,  ’This  server  is 
causing  a  virus  outbreak,’  ’’  Miles  says. 

Uennis  Griffcth.  IT  manager  of  shift 
operations,  helps  monitor  Lend  Lease's 
global  operations  on  a  daily  basts,  and 
he  says  the  HighRISE  improvements 
have  been  dramatic.  "We  are  seeing  an 
increase  in  productivity  to  allow  u.s  to 
respond  faster  to  problems  and  can  re¬ 
spond  30*’©  faster  than  before."  he  says. 
In  addition,  reporting  tools  help  keep 
track  of  patterns  of  problems  and  help 
Lend  Lease  be  more  proactive  in  deal¬ 
ing  with  IT  systems  planning. 

Because  the  rollout  of  HighRISE  has 
gone  well,  Skibinski  says  Lend  Lease  is 
planning  a  second  phase.  “Ntrw.  single 
sign-on  would  be  nirv-ana."  says  project 
manager  Bob  Chapman. 

Overall.  Lend  Lease  was  “very  for- 
w.ird  thinking"  in  piecing  together  so 
many  management  products  at  once, 
saving  time  in  the  project  rollout,  says 
Scott  Crawford,  an  analyst  at  Enter¬ 
prise  Management  Associates  in  Boul¬ 
der.  Colo.,  who  has  discussed  the  proj¬ 
ect  with  Lend  Lease. 

Many  management  sofware  vendors 
arc  still  two  to  five  years  away  from  in¬ 
tegrating  security  into  their  systems 
management  products.  Companies 
often  need  to  integrate  them  on  their 
own.  and  only  a  few  large  companies 
have  the  IT  management  insight  and 
resources  to  do  so.  Crawford  S3y.s. 
“Lend  Lease  recognizes  where  security 
management  needs  to  go  and  that  it 
needs  to  be  well  integrated  with  enter¬ 
prise  management  generally."  he  says. 

Crawford  credits  executive  manage¬ 
ment  at  Lend  Lease  for  supporting  ini¬ 
tiatives  such  as  a  comprehensive  pass¬ 
word  overhaul.  “Security  is  a  people 
business  first."  be  says.  “You  have  to  be 
good  at  the  people  issues  first  before 
you  gel  to  the  technology."  O  S0372 


The  Project  HighRISE  Pyramid 


Lend  Lease's  HighRISE  project  integrated  18 
products  arranged  in  five  functional  layers. 
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quality.  As  part  of  the  deal.  Skibinski 
required  the  vendors  to  meet  upfront 
and  agree  to  make  their  products  inter¬ 
operate.  By  doing  so.  Lend  Lease  was 
able  to  avoid  hiring  an  independent  in¬ 
tegrator.  ‘The  vendors  understand  it's 
a  big  win  for  them  as  well  to  interoper¬ 
ate.  and  it’s  something  that  leads  to 
better  business."  Skibinski  says. 

Howevet;  oversight  of  the  vendors 
took  considerable  work.  Miles  delegat¬ 
ed  responsibility  for  mitigating  the 
risks  to  eight  project  managers  and 
urged  teams  to  communicate  bad 
news  quickly.  He  kept  a  ‘lisk  register" 
throu^Kmt  the  process,  sharing  it  with 
the  project  teams.  Miles  and  other 
managers  informed  the  vendors  imme¬ 
diately  when  problems  developed 
At  one  juncture,  Miles  recalls,  proj¬ 
ect  managers  encountered  a  problem 
integrating  NetIQ.and  ManageSofr 
products.  ManageSofr’s  team  agreed  to 
build  a  fix  and  brought  in  developers 
to  do  the  woik  overnight 
Skibinski  Miles  and  others  placed  a 
great  deal  of  emphasis  on  sound  plan¬ 
ning.  including  putting  80%  of  the  ef¬ 
fort  on  pec^le  and  the  process  and 
only  20%  on  the  technology.  Miles 
says.  "Analyze,  analyze  and  make  sure 
the  design  is  correct  before  you  get  in 
the  build  phase  of  the  project."  he  says. 

Ctiiuige  Factors 

While  the  Blaster  attack  was  the  cata¬ 
lyst  for  change,  the  HighRISE  project 
was  prompted  by  other  factors,  includ¬ 
ing  the  t>e^  to  become  more  efficient. 


In  recent  years.  Lend  Lease  has  had 
a  33%  reduction  in  IT  staff,  from  356 
people  to  240,  and  its  IT  operations 
budget  was  cut  from  $90  million  to  $60 
million  after  the  company  consolidat¬ 
ed  seven  North  American  data  centers 
into  one  Atlanta-area  facility  called  the 
Shared  Technology  Center. 

Skibinski.  Miles  and  about  90  IT 
staffers  now  work  in  the  Shared  Tech¬ 
nology  Center.  That  center  and  two 
others  in  England  and  Australia  con¬ 
trol  IT  for  the  $7  billion  company, 
which  has  offices  in  44  countries. 

While  bolstering  security  was  the 
general  theme  behind  HighRISE,  Skib- 
inski  says  Lend  Lease  also  had  to  be 
able  to  respond  to  constant  audit  re¬ 
quests  from  customers  curious  about 
its  internal  operations.  That  task  was 
made  more  difficult  by  government  re- 
portii^  standards  for  compaities  like 
Lend  Lease  that  provide  construction 
financing  as  well  as  management  ser¬ 
vices.  Mergers  and  acquisitions  also 
complicated  this  process. 

HighRISE  will  make  it  easier  for 
Lend  Lease  to  process  construction 
bids  online  so  it  can  stay  competitive 
and  communicate  better  with  other 
companies.  And  it  will  simplify  the 
process  of  setting  up  and  managing  IT 
operations  at  project  sites.  Those  IT 
facilities  are  btiilt  and  then  taken  down 
several  years  later  as  buildings  and 
bridges  are  finished. 

While  conceiving  and  finishing  a 
project  in  a  year  is  noteworthy,  the 
HighRISE  effort  is  also  unusual  in  oth¬ 


The  Project  HighRISE  Pyramid 

Lend  Lease's  HighRISE  project  integrated  18 
products  arranged  Inflvefunctionallayers. 
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er  ways.  One  was  Skibinski's  decision 
to  put  Miles,  the  company’s  top  securi¬ 
ty  ofiRciaL  in  charge  of  «^t  became  a 
complete  systems,  service  and  security 
management  oveiiiauL  Skibinski  says  it 
helped  to  have  someone  with  knowl¬ 
edge  of  IT  security  working  to  inte¬ 
grate  security  and  related  software 
into  all  of  Lend  Lease’s  processes. 

Also,  Lend  Lease  wotked  upfront  to 
develop  ITTL-based  standards  chat  af¬ 
fected  the  people  and  process  compo¬ 
nents  as  much  as  the  technology.  Lend 
Lease  used  a  life-cycle  management 
process,  gleaned  from  several  sources, 
that  relied  on  intense  planning  to  re¬ 
duce  implementation  problems,  says 
Tom  Peck,  assistant  project  director. 


Payoffs 


Lend  Lease  sees  two  areas  where 
HighRISE  will  quickly  pay  for  itself. 
One  is  a  reduction  in  the  cost  of  labor 
for  disseminating  antivirus  patches, 
which  Lend  Lease  estimates  required 
1.200  worker  hours  each.  At  $100  per 
hour  for  labor,  deploying  a  single  patch 
could  cost  $120,000,  and  Lend  Lease 
estimates  that  h  faces  10  to  20  critical 
security  events  per  year.  With  an  auto¬ 
matic  change  and  security  i>atch  man¬ 
agement  system,  those  costs  can  be 
neariy  eliminated.  Miles  says. 

Password  management  tools  will 
also  help  reduce  costs.  Miles  estimates 
that  20%  to  30%  of  some  90.000  annual 
help  desk  calls  came  from  users  who 
were  confused  about  or  had  forgotten 
their  passwords.  At  up  to  $30  per  call, 
the  annual  cost  of  helping  users  with 
passwords  could  bit  $kx),000  or  more. 
Skibinski  says  at  least  half  of  those 
calb  will  be  eliminated. 

Instead  of  getting  the  help  desk  in¬ 
volved,  the  new  password  man^- 
ment  system  requires  employees  to 
use  a  unique  nine-character  password 
that  must  be  changed  every  90  days. 
Users  set  their  passwords  and  follow  a 
strii^  of  prompts  that  serve  as  re¬ 
minders  for  those  who  forget 

Password  and  patch  management 
are  areas  in  which  benefits  from  the 


HighRISE  technologies  are  most  easily 
measured,  Miles  says.  But  there  have 
been  improvements  in  other  areas,  in¬ 
cluding  security.  “We*ve  noticed  at¬ 
tacks  are  down,  and  our  ability  react  to 
them  has  drastically  increased,  and  in  a 
matter  of  seconds  we  can  get  alerts 
saying  things  such  as,  This  server  b 
causing  a  virus  outbreak.'  ”  Miles  says. 

Denius  Griffetb,  IT  maruger  of  shift 
operations,  helps  monitor  Lend  Lease’s 
global  operations  on  a  daily  basis,  and 
he  says  the  HighRISE  improvemeots 
have  been  dramatic,  are  seeing  an 
increase  in  productivity  to  allow  us  to 
respond  faster  to  problems  and  can  re¬ 
spond  30%  foster  than  before,"  he  says. 
In  addition,  reporting  toob  help  keep 
track  of  patterns  of  problems  and  help 
Lend  Lease  be  more  proactive  in  deal¬ 
ing  with  IT  systems  planning. 

Because  the  rollout  of  Hi^RISE  has 
gone  well  Skibinski  says  Lend  Lease  b 
planning  a  second  phase.  ‘H^ow.  single 
sign-on  would  be  nirvana."  says  project 
manager  Bob  Chapman. 

Overall.  Lend  Lease  was  ‘^re^y  for¬ 
ward  thinking”  in  piecing  together  so 
many  management  products  at  once, 
saving  time  in  the  project  rollout,  says 
Scott  Crawford,  an  analyst  at  Enter¬ 
prise  Management  Associates  in  Boul¬ 
der,  Colo.,  who  has  discussed  the  proj¬ 
ect  with  Lend  Lease. 

Many  management  software  vendors 
are  still  two  to  five  years  away  from  in¬ 
tegrating  security  into  their  systems 
management  products.  Companies 
often  need  to  integrate  them  on  their 
own.  and  only  a  few  large  companies 
have  the  IT  management  insight  and 
resources  to  do  so,  Crawford  says. 
'Tend  Lease  recognizes  where  security 
management  needs  to  go  and  that  it 
needs  to  be  well  integrated  with  enter¬ 
prise  management  generally."  he  says. 

Crawford  credits  executive  manage¬ 
ment  at  Lend  Lease  for  supporting  ini¬ 
tiatives  such  as  8  comprehensive  pass¬ 
word  overhaul  "Security  b-a  people 
business  first."  be  says.  "You  have  to  be 
good  at  the  people  issues  first  before 
you  get  to  the  technology."  O  S0S72 


It  business  conti 


RUNNING  WITH  EMC  BUSINESS  CONTINUITY  SOLUTKNISiM 
9  broad  ranie  of  software,  services,  and  systems  built  for  your  needs  today,  and  the  flexibilty  to  add 
capabilities  tooKHTOw.  Whether  it*$  reliable  backup  and  restore,  or  realtime,  multi-site  replicatioa^ 

II  aiake  business  continuity  a  reality.  Ensuring  your  information  and  applications  will  always  be  theat 
mad  them.  To  learn  visit  www^MC.com/continuity. 
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K  you  could  create,  mara^,  and  stiact  document*  on  paper  ^ 
or  over  the  network,  imagine  what  you  couM  accompHah  with  ^ 
your  day.  With  Canons  latest  additlan  lothe  im^eRUNNER* 
line,  every  day's  potential  can  be  resized.  With  the  new  . 
imageRUNNER  4570,  Canon  gives  you  another  innovative 
sohition’to  seamlessly  integrate  the  paper  world  with  the 
digital  world.  And  the  imageRUNHER  4970  can  be  tailored 
to  meet  your  business  needs.  In  other  words,  when  you 
choose  the  new  imageRUNNER  4570,  you  choose  to  work  - .S 
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Akonix  Updates  IM 
Monitoring  Tools 

Akonu  Systems  Inc.  m  San  Diego 
has  announced  Version  4.0  of  its 
Akonix  Enforcer  irtstant  messag- 
>ng  security  and  control  aM>iica- 
tion.  which  is  designed  to  help 
enterprise  fT  departments  protect 
their  networks  against  risky  user 
t>ehavior.  ft  features  widened 
support  to  identify  and  Nock  the 
latest  peer-tO'peer  fi(e*sharing 
protocols  and  networks,  including 
BitTorrent  and  eOonkey.  The  appli- 
caikm  can  also  identify  and  Nock 
Internet  Relay  Chat  sessions.  En* 
forcer  4.0  will  be  availaNe  by  mid- 
December.  according  to  Akonix. 
Pricing  starts  at  $2,000  per  serv¬ 
er  and  $12.50  per  user. 


Cyclades  Launches 
Server  Control  Tool 

Cydades  Corp.  in  Fremont.  Cafif.. 
last  week  announced  the  After- 
Path  Manager,  which  is  designed 
to  provide  consolidated  and  se¬ 
cure  access  to  InteKgent  Plat¬ 
form  Management  Interface  con¬ 
trollers  on  servers  from  a  urdfied 
interface.  Administrators  wil  be 
aNe  to  remotely  access  IPMI- 
enabted  servers  to  manage  hard¬ 
ware  performance,  said  Cyclades. 
The  AfterPath  Manager  E2000 
with  the  IPMI  Management  Pack¬ 
age  is  availabie  for  $12,790. 


Sun  Rolls  Out 
Java  Suite  Upgrade 

Sun  Microsystems  faic.  last  week 
released  Sun  Java  Studio  Enter¬ 
prise  7.  The  main  new  feature. 
Code  Aware  CollafMration.  w4l  al¬ 
low  dispersed  development  teams 
to  use  mstant  messaging  to  com- 
rnunicam.  according  to  Sun  offi¬ 
cials.  The  suite  also  features  sup¬ 
port  for  Unified  Modeling  Lan¬ 
guage  and  an  appl^tion  profiler 
that  lets  developers  identify  and 
resolve  potential  performance- 
related  proNems  before  produc¬ 
tion  deployment.  Version  7  is  avail¬ 
aNe  for  $1,895  per  developer  per 
year  or  for  SS  per  employee  per 
year  for  companies  that  license  for 
more  than  100  employees. 


Ki'lii  I  I  \||  I  (  III  1  : 

Microsoft  Goes  to  Pieces 


Having  survived  efforts  to  break  up 
its  Windows  monopoly.  Microsoft  is  now 
leading  the  charge  to  break  up  the  very 
operating  system  it  defended.  With  the 
release  of  Longhorn  in  2007.  the  compa¬ 
ny  has  said  it  will  offer  “role-based"  v'ersions  of  Win¬ 
dows  in  which  only  the  code  needed  to  perform  a  given 


t'unciion  will  bo  moludoJ  in 
.1  particular  build  v»t‘tho  op¬ 
erating  system.  It  scorns  that 
the  monolithic,  onc-sizo- 
fiis-all  approach  to  Win¬ 
dows  may  finally  be  reach¬ 
ing  the  end  of  the  road. 

The  idea  of'a  slimmer 
Windows  has  been  long  m 
coming.  It  runs  counter  to 
the  company’s  marketing 
urge  to  add  ever  more  fea¬ 
tures.  But  the  move  toward 
smaller,  simpler  Windows 
versions  is  driven  not  by  marketing 
and  sales  as  much  as  it  is  by  competi¬ 
tive  pressure  and  the  demand  for 
greater  security,  manageability  and 
flexibility.  And  those  trends  could  well 
extend  beyond  simply  tailoring  an  op¬ 
erating  system  to  a  few  task-specific 
server  functions. 

Windows  today  isn't  so  much  a 
precision  tool  as  it  is  a  very  large 
Swiss  Army  Knife,  with  dozens  of  fea¬ 
tures.  functions  and  services  extend¬ 
ing  from  its  core.  But  administrators 
don't  want  all  that  in  a  Web.  storage 
or  print  server.  Leaner,  funciion- 
-specific  versions  of  Windows  could 
present  fewer  vulnerability  points  to 
attackers  while  making  installation, 
patching  and  maintenance  easier.  The 
strategy  could  extend  to  a  wide  range 
of  server  roles  and  w'ould  benefit  se¬ 
curity-sensitive  functions  such  as  call 
management  and  Web  servers. 

Microsoft's  approach  also  repre¬ 
sents  a  calculated  response  to  Linux. 
The  open-source  operating  system  has 
done  well  in  focused  server  roles,  in 
part  because  IT  professionals  can  dis¬ 
assemble  the  kernel  and  recombine 


the  pieces  required  to  cre¬ 
ate  a  purpose-built  version 
of  Linux.  In  so  doing,  it 
gives  administrators  a  lot 
more  flexibility  than  Win¬ 
dows  allows  today. 

Now.  rather  than  simply 
selling  task-specific  edi¬ 
tions  of  Windows.  Micro¬ 
soft  may  let  systems  ad¬ 
ministrators  choose  which 
core  elements  of  Windows 
to  include  at  installation. 
That's  good  news  for 
administrators,  but  the  question  is 
how  far  Microsoft  will  go  in  letting 
customers  define  and  extend  those 
role-based  configurations.  How  much 
flexibility  will  IT  gain  —  and  how  j 
much  control  is  Microsoft  willing  to  i 
give  up?  I 

Microsoft  might  decide  to  let  admin¬ 
istrators  build  optimized  Windows  ver- 
j  sions  for  a  few  predetermined  roles. 

I  such  as  print  or  storage  serx-er  func- 
I  lions,  but  not  allow  full  control  over 
[  which  core  components  for  other  func-  , 
tions  are  included  or  excluded.  Mean-  I 
I  while,  businesses  might  want  to  extend  I 
I  the  concept  to  the  desktop,  where  ad-  ' 

'  ministrators  could  create  streamlined, 
role-based  deployments  for  worksta-  ■ 
tions  used  by  retail  clerks,  warehouse  j 
I  workers  or  financial  analysts.  I 

I  The  role-based  approach  could  also  | 

'  be  applied  further  up  the  software 
stack,  where  the  same  code-bloat 
problem  infects  applications  such  as 
Office.  The  tightly  integrated  set  of 
'  desktop  productivity  applications  uf- 
I  fers  a  w  ide  range  of  feature's  that  most  | 
people  never  use.  .And  w  hile  some  ma-  ' 
ior  features  can  be  eliminated  at  in¬ 


stallation,  Office  remains  a  large  and 
unwieldy  application  set  for  users 
with  fairly  simple  or  narrmvlx  defined 
roles.  Rather  than  saying  "Supersize 
11"  for  evcr>  .ipplication.  administra¬ 
tors  should  have  the  option  to  assem¬ 
ble  only  those  core  elements  ofOffice 
—  and  similar  products  —  that  exactly 
meet  the  needs  of  the  people  using 
them.  The  road  to  business  agiliiy 
wonT  run  through  fat  software. 

.At  the  recent  ITxpo  conference  in 
Cannes.  France,  research  firm  Gartner 
also  took  a  swipe  at  the  size  and  com¬ 
plexity  of  enterprise  software  offer¬ 
ings.  Analyst  Yvonne  Genovese  said 
vendors  must  break  monolithic  appli¬ 
cation  suites  into  smaller,  more  granu¬ 
lar  increments  so  that  customers  can 
respond  more  quickly  to  changing 
business  needs.  Considering  that  up¬ 
grades  can  take  two  years  to  complete, 
that's  not  possible  today.  If  vendors 
break  apart  the  software  into  smaller 
pieces.  IT  can  rearrange  them  more 
readily  as  business  processes  change. 

That’s  the  direction  SAP  is  taking 
with  the  next  generation  of  R/.T.  and 
it’s  the  objective  of  Microsoft's  Project 
Green,  Genovese  says.  Microsoft  is 
struggling  to  break  apart  its  Navision. 
Great  Plains.  Solomon  and  Axapia 
business  applications  and  reassemble 
the  pieces  into  a  cohesive  set  of  com¬ 
ponents  that  can  be  recombined  to 
better  suit  customers'  business  needs. 

Whether  businesses  will  abandon 
monolithic  enterprise  applications  and 
demand  more  granular,  task-specific 
components  in  a  big  way  remains  to 
be  seen.  But  increased  global  competi¬ 
tion  and  the  need  to  react  faster  to 
changing  market  conditions  could  pro¬ 
vide  the  impetus  for  IT  organizations 
to  begin  loudly  making  such  demands. 
If  that  happens.  Microsoft’s  decision 
to  enable  role-based  versions  of  Long¬ 
horn  could  be  just  the  tip  of  the  ice¬ 
berg  for  software  vendors.  C  50640 
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Akonix  Updates  IM 
Monitoring  Tools 
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Microsoft  Goes  to  Pieces 


Having  survived  efforts  to  breakup 
its  Windows  monopoly,  Microsoft  is  now 
leading  the  charge  to  break  up  the  very 
operating  system  it  defended.  With  the 
release  of  Longhorn  in  2007,  the  compa¬ 
ny  has  said  it  will  offer  "role-based”  versions  of  Win¬ 
dows  in  which  only  the  code  needed  to  perform  a  given 


function  will  be  included  in 
a  particular  build  of  the  op¬ 
erating  system.  It  seems  that 
the  monolithic,  one-size* 
fits-all  approach  to  Win¬ 
dows  may  ftnaUy  be  reach¬ 
ing  the  end  of  the  road. 

The  idea  of  a  slimmer 
Windows  has  been  long  in 
coming.  It  runs  counter  to 
the  company’s  marketing 
urge  to  add  ever  more  fea¬ 
tures.  But  the  move  toward 
smaller,  simpler  Windows 
versions  is  driven  not  by  marketing 
and  sales  as  much  as  it  is  by  competi¬ 
tive  pressure  and  the  demand  for 
greater  security,  manageability  and 
flexibility.  And  those  trends  could  well 
extend  beyond  simply  tailoring  an  op¬ 
erating  system  to  a  few  task -specific 
server  functions. 

Windows  today  isn't  so  much  a 
precision  tool  as  it  is  a  very  large 
Swiss  Army  Knife,  with  dozens  of  fea¬ 
tures.  flinctions  and  services  extend¬ 
ing  from  its  core.  But  adminbtrators 
don’t  want  all  that  in  a  Web.  storage 
or  print  server.  Leaner,  Auction- 
specific  versions  of  Windows  could 
present  fewer  vulnerability  points  to 
attackers  while  making  installation, 
patching  and  maintenance  easier.  The 
strategy  could  extend  to  a  wide  range 
of  server  roles  and  would  benefit  se¬ 
curity-sensitive  functions  such  as  call 
management  and  Web  servers. 

Microsoft’s  approach  also  repre¬ 
sents  a  calculated  response  to  l-iniiv 
The  open-source  operating  system  has 
done  well  in  focused  server  roles,  in 
part  because  IT  professionals  can  dis¬ 
assemble  the  kernel  and  recombine 


the  pieces  required  to  cre¬ 
ate  a  purpose-built  version 
of  Linux.  In  so  doing,  it 
gives  administrators  a  lot 
more  flexibility  than  Win¬ 
dows  allows  today. 

Now,  rather  than  simply 
selling  task-specific  edi¬ 
tions  of  Windows.  Micro¬ 
soft  may  let  systems  ad¬ 
ministrators  choose  which 
core  elements  of  Windows 
to  include  at  installation. 
That's  good  news  for 
administrators,  but  the  question  is 
bow  far  Microsoft  will  go  in  letting 
customers  define  and  extend  those 
role-based  configurations.  How  much 
flexibility  will  IT  gain  —  and  bow 
much  control  is  Microsoft  willing  to 
give  up? 

Microsoft  might  decide  to  let  admin¬ 
istrators  build  optimized  Windows  ver¬ 
sions  for  a  few  predetermined  roles, 
such  as  print  or  storage  server  func¬ 
tions.  but  not  allow  ftiU  control  over 
which  core  components  for  other  func¬ 
tions  are  included  or  excluded  Mean¬ 
while.  businesses  might  want  to  extend 
the  concept  to  the  desktop,  where  ad¬ 
ministrators  could  create  streamlined, 
role-based  deployments  for  worksta¬ 
tions  used  by  retail  clerks,  warehouse 
workers  or  financial  analysts. 

The  role-based  approach  could  also 
be  applied  further  up  the  software 
stack,  where  the  same  code-bloat 
problem  infects  applications  such  as 
Office.  The  tightly  integrated  set  of 
desktop  productivity  applications  of¬ 
fers  a  wide  range  of  features  that  most 
people  never  use.  And  while  some  ma¬ 
jor  features  can  be  eliminated  at  in¬ 


stallation,  OfTice  remains  a  large  and 
unwieldy  application  set  for  users 
with  fairly  simple  or  narrowly  defined 
roles.  Rather  than  saying  “Supersize 
it"  for  every  application,  administra¬ 
tors  should  have  the  option  to  assem¬ 
ble  only  those  core  elements  of  OfTice 
—  and  similar  products  —  that  exactly 
meet  the  needs  of  the  people  using 
them.  The  road  to  business  agility 
won’t  run  through  fat  software. 

At  the  recent  ITxpo  conference  in 
I  Cannes,  France,  research  firm  Gartner 
'  also  took  a  swipe  at  the  size  and  com¬ 
plexity  of  enterprise  software  ofler- 
ings.  Analyst  Yvonne  Genovese  said 
vendors  must  break  monolithic  appli¬ 
cation  suites  into  smaller,  more  granu¬ 
lar  increments  so  that  customers  can 
respond  more  quickly  to  changing 
business  needs.  Considering  that  up¬ 
grades  can  take  two  years  to  complete, 
that’s  not  possible  today.  If  vendors 
break  apart  the  software  Into  smaller 
pieces.  IT  can  rearrange  them  more 
readily  as  business  processes  change. 

That's  the  direction  SAP  is  taking 
with  the  next  generation  of  R/3.  and 
it’s  the  objective  of  Microsoft’s  Project 
Green,  Genovese  says.  Microsoft  is 
struggling  to  break  apart  its  Navision. 
Great  Plains,  Solomon  and  Axapta 
business  applications  and  reassemble 
the  pieces  into  a  cohesive  set  of  com¬ 
ponents  that  can  be  recombined  to 
better  suit  customers’  business  needs. 

Whether  businesses  will  abandon 
monolithic  enterprise  applications  and 
demand  more  granular,  t^-speciflc 
components  in  a  big  way  remains  to 
be  seen.  But  increased  ^obal  competi¬ 
tion  and  the  need  to  react  faster  to 
changing  market  conditions  could  pro¬ 
vide  the  impetus  for  IT  organizations 
to  begin  loudly  making  such  demands. 
If  that  happens,  Microsoft’s  decision 
to  enable  role-based  versions  of  Long* 
horn  could  be  just  the  tip  of  the  ice¬ 
berg  for  software  vendors.  O  50640 
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1.  Buyer  downloads  competitive  pricing. 

2.  Manager  securely  retrieves  invoices, 
a  Driver  obtains  specific  delivery  details. 
4.  E»wendor  denied  access  to  intrarret. 

&  Customer^  identity  protected  from  theft. 


MIDDLEWARE  S  IBM  SOFTWARE.  Identity  managernent 
scrftvvare  that  uses  single  signK)n  techrology  to  ensure  tha 
the  right  access  is  given  to  the  right  people.  Open,  nxxJular 
Trvoli  security  software  that  automates  processes  between 
employees,  partners,  customers  and  suppliers  -  while 
helping  to  reduce  costs.  It's  how  everyone  involved 
gets  the  information  they  need.  On  time.  And  on  demand. 
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MANA6EMENT 


Sucf.  essfinly  integidting 
six  acquited  technology 
gfou[;s  in  a  year  taught 

CIO  Jeremy  Lehman' 

some  valuable  lessons. 
Here’s  what  he  learned. 


Achieving  the  goals  of  a 
lIBnliiHIJil  or  consolidation 

can  be  tough.  I  know,  hav¬ 
ing  led  the  merger  of  six  acquired  technology 
groups  at  Thomson  Financial  in  2003.  Forging  a 
team  from  multiple  cultures  and  coimecting  sys¬ 
tems  —  vdiile  cutting  costs  —  presents  a  thorny 
leadership  challenge.  My  experience  at  Thomson 
Financial,  an  information  and  workflow  software 
provider  formed  through  more  than  40  acquisi¬ 
tions,  offers  some  lessons  in  effective  mergers. 
Looking  back  a  year  later,  here’s  what  I  learned: 

1  aiAKE  CHANGE  SO  SMfUrr  HURTS.  Sim¬ 
plicity  is  key.  Select  a  few  priorities  and 
execute  deeply.  Make  visible  progress, 
but  don't  chase  perfectioit  Make  fewer 
changes  than  you  want,  accept  practical 
but  inelegant  solutions,  and  say  no  to  lower  prior¬ 
ities.  You  may  want  to  simultaneously  retire  older 
systems,  adopt  a  new  architecture  and  redesign 
data  center  operations,  but  most  organizations  can 
concentrate  on  only  a  handful  of  goals  during 
the  emotional  period  following  a  merger. 

Establish  principles  by  defining  how  you  want 
the  organization  to  woi^  but  allow  latitude  in 
how  they  are  implemented.  For  example,  we  had 
great  success  adopting  an  architecture  that  used 
object-oriented  front  ends  connected  to  back-end 
Web  services.  While  not  everyone  used  the  exact 
same  design  pattern,  developers  adopted  the 
new  approach  quickly.  On  the  other  hand,  a  new 


tfrat  binds  the  new  organization. 

•  Tiiom-^Rriancjai  CtO  JEREMY  LEHMAN 


CIO  Merger 
Checklist 


Inventory  all  p»oiecls  aoo  confrmi 

slall  assiijMnemi 

Ann  rOLsr^^if 
A-ir  Iht  lacis 

Identity  a'Otecis  anj  dig 
•ntocteuits  Don't  le!  oosimygef 
a(»r,r.«ra!ive  faiks  disir-Ki  friy"  you' 
pr-Tijf^  'nei:i«n  at  ntiilding  ana  opc-raiiPQ 
aapt'Cdiion;; 

Enforce  :l>e  cse  erf  l•rT^e-•racklng 
systeiTTs  and  cofTpate  t*<  rnsuKs  IQ 
infO^jiaassgnfTtems  RocofclinoPovi 
i'w»«  spend  ime  «s  it’C  only  way  to 
'eai'v  knoA  win  ts(K>«tg  Arat 

MeJw  sura  in^rvont:  .indersiands 
'ttai  layohsai!:  i>Kdy 

Embrace  geek  culture  Merge'S  of 
len  emphasis  business  issues,  so 
rpmmd  IT  people  that  mey  a/e  vaiued 
Use  iM  om  geek  side  lo  connect  ivith 
peoc^  Wi'ie  some  code  yourself  (anti 
irviurG  Ihe  inevitable  reaction!),  arrange 
a  networned  ^n»e  toornamenl  or  wvile 
an  industry  erperr  to  lecture 

ConsoUdate  lo  as  feA  locations 
as  posable  Pbysicai  loc/Uion  still 
nlluencesproductMtY  People  w*ll 
generally  communicate  well  widiirr 
reoortirtg  boundaries. »  use  coRocation 
to  encourage  aoK-team  commumcatiof!. 
For  example  devektoers  and  testers 
snould  vrorK  side  by  »de. 

Pl»  niQber  iravei  and  entertain¬ 
ment  etpenses  to  gel  peo^ 
comfortable  both  with  one  another 
and  with  teaming  complex  systems. 

Be  sure  your  staff  includes  finance 
and  nurrvm  resources  leaders  Tniss 
twtCblarfy  impcrtant  when  cutting  the  su9 
of  your  organ/zation  and  durmg  budge! 
processes  will  be  overtaa^  rf  you 
can't  delegate  effectively 

Mentor  your  learn  Oer^tmg  time 
s  hard  m  the  crucial  earfy  days,  yet 
that's  also  whan  coaci'mg  and  trust  aie 
mosl  important 


daily  build  system,  where  deseUipers 
check  in  their  ci)dc  to  rest  its  Hr  with 
the  work  of  others  each  day.  wasn't  as 
popular  bivausc  it  was  vcr>’  prescrip¬ 
tive  ahtJUt  the  tools  and  steps  involved. 
In  rctft>spcct.  wc  could  have  achieved 
most  of  the  benefit.s  by  mandating  that 
teams  do  a  daily  build  but  not  specify¬ 
ing  rhe  details. 


..  DONT  BEND  ON  PROCESS. 

I  I^Kcss  is  the  glue  th/»  binds 
the  new  oiyanization.  Make  it 
orK-  of  your  fc\\  top  priorities. 

^  Adopting  uniform  processes 
c.in  sound  scary,  particularly  to  people 
I  frxim  smaller  organizations  where  hall- 
'  way  conversations  and  personal  rela¬ 
tionships  are  enough  to  get  work  done, 
but  don't  make  exceptions  to  keep  a 
I  wary  team  comh>nable.  Some  pointers: 

•  Win  over  your  direct  reports  first. 

Make  sure  they  understand  the  Kme- 
fits  .ind  how  processes  should  work. 

I  Be  an  example  to  them  of  how  they 
I  should  evangelize  their  teams. 

■  Portals  and  collaboration  systems  are 
effective  ways  to  launch  new  processes. 
Move  fast  and  avoid  the  temptation  to 

[  overengineer  use  ofT-ihc-shelf  twis 
'  where  available. 

■  Many  different  approaches  to  software 
development  and  project  management  can 
work.  Effective  leadership  .and  execution 
Is  more  important  than  the  choice  of 
methodology.  Start  with  a  highly  visible 
project,  and  don’t  grant  any  exceptions. 

WIN  HEARTS  AND  MINOS. 

Gaining  support  for  a  new 
way  starts  with  showing  re¬ 
spect  for  the  old  way.  Always 
point  to  admirable  aspects  of 
legacy  organizations  when  discussing 
how  you  want  to  evolve  the  team.  Nev¬ 
er  ask  why  a  particular  technical  deci¬ 
sion  was  made.  It's  easy  in  hindsight  to 
question  an  approach  taken  by  another 
team.  Concentrate  instead  on  meeting 
current  and  future  needs. 

Explicitly  define  the  culture  you 
want  to  build,  but  don’t  make  a  big  pn>- 
duction  over  how  you'll  implement  it. 
Simply  state  how  you  want  your  people 
to  work  and  set  an  example  with  each 
situation  or  project.  Always  personally 
model  htw  you  want  your  people  to 
act.  Expose  the  team  to  organizations 
with  advanced  versions  of  what  you 
want  to  achieve.  For  example,  if  your 
team  needs  to  improve  network  opera¬ 
tions,  have  them  visit  the  operations 
centers  of  your  large  network  carriers. 

A  frequent  speed  bump  for  mergers 
is  the  claim  that  a  newly  assimilated 
oTgantzaikin’s  appHcatioas  or  technolo¬ 
gies  arc  uniquely  complex.  Be  skepti¬ 
cal:  it’s  often  a  smoke  screen  for  fear  of 
change.  Complc.xit>'  isn’t  a  reason  to  re¬ 
sist  change.  In  fact,  it  may  be  a  result  of  i 
the  altitudes  or  processes  that  need  to 
change.  But  a  postmerger  team  is  deal¬ 
ing  with  nx)  may  tough  issues  to  imme¬ 
diately  rebuild  complex  systems.  Better 
to  extend.  sum>und  and  embrace  them 
rather  than  root  them  out  right  away. 


Latency  and  Volume 

Application  speed  and  sUbitiiy  can 
become  lop  issues  when  the  com¬ 
bined  load  of  merged  organtzalinns  «s 
directed  to  one  surviving  system 
Adding  layers  of  abstraclion  to 
achieve  integration  also  slows  re¬ 
sponse  times 

To  deal  with  this,  appoint  one 
strong  leader  who's  accountable  tor 
applications,  databases,  networks, 
server  engineering  ar>d  operations. 

Make  sure  you  have  the  right  skills 
to  make  applications  fast.  Scalability 
Diojects  require  different  skills  than 
writing  new  features  so  teams  may 
not  know  wha!  they  don't  know 

Start  protects  by  getting  metrics 
that  accurately  reflect  real  end-user 
experience. 

Jeremy  Lehman 


USE  SIZE  TDYYXm  ADVAN¬ 
TAGE.  Most  organizations 
slow  down  as  they  get  big- 
■*^  5^  ger.  but  size  can  also  enable 
speed.  Here's  how': 

•  Inventory  all  projects.  Make  sure 
business  leaders  understand  that  some 
projects  will  go  away  because  priori¬ 
ties  change  with  a  merger.  Then  con¬ 
centrate  more  people  and  investment 
on  fewer  top  priorities. 

a  Collaborate  with  partner  companies  that 
are  attracted  by  the  market  power  of  the 
combined  Ann.  Find  partners  by  looking 
at  w>ur  lndustr>'’s  supply  chain  and 
where  vvur  company  affects  customers' 
spending.  For  example.  If  your  company 
sells  applications,  then  your  products 
may  influence  inve-stment  in  hardware, 
networicing  and  systems  integration. 

■  Reuse  software  components  by  focusing 
on  “plumbing"  like  uscr-intcrfacc  frame¬ 
works.  authentication  and  authoriza¬ 
tion.  and  data-acccss  frameworks. 

Don’t  get  mired  in  elaborate  schcme.s 
to  reuse  business  logic.  Reusing 
plumbing  components  frees  up  devel¬ 
opers  to  concentrate  on  your  business. 

SPEED  AND  COMMUNICATION 
ARE  YOUR  BEST  TOOLS.  Make 
change  happen  by  moving 
fast  while  explaining  why. 
Demonstrate  your  priorities 
by  making  a  big  change  early.  Allow 
time  to  fully  implement  the  details  of 
the  initial  project  and  deliver  results. 
I.atcr.  SOI  a  sustainable  pace  of  change 
by  moving  incrementally  along  consis¬ 
tently  communicated  principles. 

For  example,  consider  bringing  to¬ 
gether  several  teams  with  different 
software  development  processes. 


Guido  them  to  adopt  a  general  princi¬ 
ple  such  as  iterative  developmoni.  Al¬ 
low  for  some  variation  in  how  people 
do  it  rather  than  prescribing  an  exact 
methodoiogx’.  but  firmly  stick  to  basics 
such  as  common  artifacts  and  rapid 
cycles.  Verify  that  iterations  arc  work¬ 
ing  well  across  all  major  projects  be¬ 
fore  starting  further  change.  Look  for 
indicators  that  the  organization  is 
ready  to  move  on.  such  as  junior  man¬ 
agers  tweaking  the  process  and  tools. 

Carefully  consider  whether  to  use 
off-the-shelf  frameworks  like  ITIl.  or 
extreme  programming.  They  can  cut 
the  time  spent  designing  processes  and 
go  straight  to  training  and  execution, 
and  the  communire  and  tools  sur¬ 
rounding  a  framework  can  help  sustain 
adoption.  But  they  can  also  be  expen¬ 
sive  and  time-consuming,  and  they 
may  cover  a  wider  range  of  IT  process¬ 
es  or  business  functions  than  you  need. 
Overall,  they  work  well  with  smaller 
teams  but  arc  too  generic  to  steer  larg¬ 
er  organizations. 

OTHER  LESSONS 

■  Openly  discuss  reductions  and  act  rapid¬ 
ly.  The  hard  fact  is  that  many  mergers 
involve  cutting  people.  Trust  or  dis¬ 
trust  earned  early  in  the  process  can 
SCI  the  tone  for  your  tenure  as  a  leader. 

■  Cdebrate  successes.  It's  easy  for  man¬ 
agers  to  focus  only  on  fixing  problems. 

■  Adopt  a  “no  orphans”  policy  that 
reaches  out  to  every  individual.  Each  per¬ 
son  needs  to  know  exactly  what  is  e.x- 
pected  of  him. 

•  Start  with  large  group  events,  then 
later  have  smaller  gatherings  that  em¬ 
phasize  two-way  conversations. 

■  Require  leaders  to  personally  coach 
new  skiHs  like  managing  project  portioDos 
and  partner  relationships.  These  are  typi¬ 
cally  new  to  people  who  come  from 
smaller  companies. 

A  jear  later,  our  new  team  has  led  the 
way  in  our  industry’s  evolution  from 
point  applications  to  integrated  work¬ 
flow.  successfully  migrated  thousands  of 
demanding  customers  off  legacy  sys¬ 
tems  and  executed  these  goals  while  sig¬ 
nificantly  cutting  costs.  It  wasn’t  always 
easy:  wc  sometimes  took  on  too  much  at 
once.  But  loi^king  back,  the  main  lessons 
I  can  offer  are  to  pick  a  small  handful  of 
simply  communicated  goals,  bo  diplo¬ 
matic  but  firm  in  adapting  new'  process¬ 
es.  insist  on  common  standards  across 
ail  projects  and  thoroughly  implement 
all  facets  of  your  initial  projects  before 
moving  to  further  change.  C  50353 

Lehman  is  senior  vice  president  of tech¬ 
nology  at  Thomson  Financial.  Contact 
him  at  ieremy_J_lehman(&hotmail.com. 
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CIO  Merger 
Checklist 


ItafWtBryfllpnilacisandconiinn 
stiff  ssagnmcints 


ilKMffSiff 

titmiaicis. 


■  MMiMy  lop  proiects  and  dig 
Mo  dMMs.  Ooni  let  postmerger 
admaiMralMC  tasks  detract  from  your 
prvnaiv  nBSxm  of  biAling  arid  operaPng 
appkc^nns. 

■  Efrioroatheuseoftime-tnckino 
systems  and  compare  die  results  to 
ttto  orif^  asagmtonls.  Recordtog  how 
peo^  spend  thar  tm  is  the  on4y  way  to 
raiffy  know  who  Is  doaig  what 

■  IWto  am  everyone  understands 
that  layoffs  are  My. 

■  EHferaaegMkaAfe.Mergarsof- 
tert  emphasae  twsmeas  asues.  so 
vnind  fT  people  that  they  are  vetoed. 

Use  your  own  geek  aide  to  connect  with 
peoplK  Wile  some  code  yomelf  (and 
eretore  the  inevitaUa  reacbonl),  errarroe 
a  nahwhnd  garne  tourrwTienl  or  invito 
an  induetry  eimert  to  lecture. 

■  CaiiMidMi  to  as  tow  locations 
as  poasiito.  ntyscai  location  sti 
Mluances  productMty.  f^opie  Ml 
genaraffy  communicato  wel  wtttan 
(eportng  bountortsi  so  use  colKation 
to  eocoutage  cross-team  oomnuvcatKw 
For  oompto.  developers  and  testers 
shoddw^  sale  by  side. 

■  tateghertrevelandentertam- 
mart  eiOMnsei  to  gri  people 
corTdortaliletMhwtfi  one  Mother 
and  «M(h  laamlng  com^  syrt^ 

M  Seam  your  stoffindudae  finance 
andluTtonieBouoesiBadBrs.Thisis 
pwiciMy  fnporart  when  cutltog  the  sQto 
o<  yow  organOetlon  and  during  budget 
procesMs.  W)  w<  be  mrertoaded  it  you 
cart  dekigala  efledivety. 

M  llaiMyourto«n.Oedicallrigtirne 
**  K  had  f)  the  crucial  early  days,  yet 
that’s  also  when  coachng  and  Injst  are 
most  Riportart. 


daily  build  system,  where  developers 
check  in  cheir  code  to  test  its  fit  with 
the  work  of  others  each  day.  wasn’t  as 
popular  because  it  was  very  prescript 
five  about  the  tools  and  steps  involved. 
In  retrospect,  we  could  have  achieved 
most  of  the  benefits  by  mandating  that 
teams  do  a  daily  build  but  not  specify¬ 
ing  the  details. 


200117 BEND  ON  PmCESS. 

Process  is  the  glue  that  binds 
the  new  organization.  Make  it 
one  of  your  few  top  priorities. 
Adopting  uniform  processes 
can  sound  scary,  particularly  to  people 
from  smaller  organizations  where  hall¬ 
way  conversatioits  and  personal  rela¬ 
tionships  are  enou^  to  get  work  done, 
but  don't  make  exceptions  to  keep  a 
wary  team  comfort^le.  Some  pointers: 

■  Win  ovar  your  dkad  reports  first 
Make  sure  they  understand  the  bene- 
Hts  and  how  processes  should  work. 

Be  an  example  to  them  of  how  they 
should  cvar^elize  their  teams. 

■  ftwtato  and  rnMaborsBon  systems  m 
tffoeffvt  sreys  to  launch  now  praeetsas. 
Move  fast  and  avoid  the  temptation  to 
overengineer  use  off-the-shelf  tools 
where  available. 

■  Many  dtftofont  approaches  to  soffware 
devotopmont  and  project  manapement  can 
work  Elective  leadership  and  execution 
is  more  important  than  the  choice  of 
methodology.  Start  with  a  hi^ily  visible 
project,  and  don't  grant  any  exceptions. 

3  WM  HEARTS  AND  fiNNDS. 

Gaining  support  for  a  new 
way  starts  with  showing  re¬ 
spect  for  the  old  way.  Always 
point  to  admirable  aspects  of 
legacy  organizations  when  discussing 
how  you  want  to  evolve  the  team.  Nev¬ 
er  ask  udiy  a  particular  technical  deci¬ 
sion  was  made.  It's  easy  in  hindsight  to 
question  an  approach  taken  by  another 
team.  Concentrate  instead  on  meeting 
ctirrent  and  future  needs. 

Explicitly  define  the  culture  you 
want  to  build,  but  don't  make  a  big  pro¬ 
duction  over  bow  youll  implement  iL 
Simply  state  bow  you  want  your  people 
to  work  and  set  an  example  with  each 
situation  or  project.  Ahrays  personally 
model  how  you  want  your  people  to 
act  Expose  the  team  to  organizations 
with  advanced  versions  of  what  you 
want  to  achieve.  For  example,  if  your 
team  needs  to  improve  network  opera¬ 
tions.  have  them  visit  the  operations 
centers  of  your  Urge  network  carriers. 

A  frequent  speed  bump  for  mergers 
is  the  claim  that  a  newly  assimilated 
organization's  applications  or  technolo¬ 
gies  are  uniquely  complex.  Be  skepti¬ 
cal:  it's  often  a  smoke  screen  for  fear  of 
change.  Complexity  isn’t  a  reason  to  re¬ 
sist  change.  In  fact,  it  may  be  a  result  of 
the  attitudes  or  processes  chat  need  to 
change.  But  a  postmerger  team  is  deal¬ 
ing  with  too  may  tough  issues  to  imme¬ 
diately  rebuild  complex  systems.  Better 
to  extend,  surround  and  embrace  them 
rather  than  root  them  out  right  away. 


4  USE  SIZE  TO  YOUR  ADWN- 
TA6E.  Most  organizations 
slow  down  as  they  get  big¬ 
ger.  but  size  can  also  enable 
speed.  Here’s  how: 

■  inventory  alprojacto.  Make  sure 
business  leaders  understand  that  some 
projects  will  go  away  because  priori¬ 
ties  change  with  a  merger.  Then  con¬ 
centrate  more  people  and  investment 
on  fewer  top  priorities. 

■  Colaboratoefllh  partner  eornpantos  that 
are  attracted  by  the  market  power  of  the 
comfainod  firm.  Find  partners  by  looking 
at  your  industry’s  supply  chain  and 
where  your  company  affects  customers' 
spending.  For  example,  if  your  company 
sells  applications,  then  your  products 
may  influence  investment  in  hardware, 
networking  and  systems  integratioa 
■  HeueoaoRwerecampmeiitobytociahig 
on  ‘'pkaidring*  like  user-interface  frame¬ 
works,  authentication  and  authoriza¬ 
tion.  and  data-access  frameworks. 

Don't  get  mired  in  elaborate  schemes 
to  reuse  business  logic.  Reusing 
plumbing  components  frees  up  devel¬ 
opers  to  concentrate  on  your  business. 

5SPEB>  AfO  COMMJMCATNM 
ARE  YOUR  BEST  TOOLS.  Make 
change  happen  by  moving 
^t  while  explaining  why. 
Demonstrate  your  priorities 
by  making  a  big  change  early.  Allow 
time  to  fully  implement  the  details  of 
the  initial  project  and  deliver  results. 
Later,  set  a  sustainable  pace  of  change 
by  moving  incrementally  along  consis¬ 
tently  communicated  principles. 

For  example,  consider  bringing  to¬ 
gether  several  teams  with  different 
software  development  processes. 


Guide  them  to  adopt  a  general  princi¬ 
ple  such  as  iterative  development.  Al¬ 
low  for  some  variation  in  how  people 
do  it  rather  than  prescribing  an  exact 
methodology,  but  firmly  stick  to  basics 
such  as  common  artifacts  and  rapid 
cycles.  Verify  that  iteratioits  are  work¬ 
ing  well  across  all  major  projects  be¬ 
fore  starting  further  change.  Look  for 
indicators  that  the  organization  is 
ready  to  move  on.  such  as  jtinior  man¬ 
agers  tweaking  the  process  and  tools. 

Carefully  consider  whether  to  use 
off-the-shelf  frameworks  like  ITIL  or 
extreme  programming.  They  can  cut 
the  time  spent  designing  processes  and 
go  straight  to  training  and  execution, 
and  the  community  and  tools  sur¬ 
rounding  a  framework  can  help  sustain 
adoption.  But  they  can  also  be  expen¬ 
sive  and  time-consumitig,  and  they 
may  cover  a  wider  range  of  IT  process¬ 
es  or  business  functions  than  you  need. 
Overall,  they  work  well  with  smaller 
teams  but  are  too  generic  to  steer  larg¬ 
er  organizations. 

OTHER  LESSONS 

■  OpMlydiMuts  reductions  and  art  rapid¬ 
ly.  The  hard  fact  is  that  many  mergers 
involve  cutting  people.  TYust  or  dis¬ 
trust  earned  early  in  the  process  can 
set  the  torte  for  your  tenure  as  a  leader. 

■  CaUrrtaauocasBH,  It’s  easy  for  man¬ 
agers  to  focus  only  on  fixing  problems. 

■  Adopt  a  **00  orphans”  polcy  that 
raachas  out  to  avory  MMdual.  Each  per¬ 
son  needs  to  know  exactly  what  is  ex¬ 
pected  of  him. 

■  Start  wftb  large  group  tvants.  then 
later  have  smaller  gatherings  that  em¬ 
phasize  two-way  conversations. 

■  Haqutralaadart  to  paraonafly  coach 
new  akMa  Hto  managing  prejacl  portfolioa 
and  partnar  ralattonahipa.  These  are  typi¬ 
cally  new  to  people  who  come  from 
smaller  companies. 

A  year  later,  our  new  team  has  led  the 
way  in  our  industry's  evolution  ftom 
point  applications  to  integrated  woric- 
flow.  successfully  migrated  thousands  of 
demanding  customers  off  legacy  sys¬ 
tems  and  executed  these  goab  whUe  sig- 
nifkantly  cutting  costs.  It  wasn't  always 
easy:  we  sometimes  took  on  too  mnrh  at 
once.  But  looking  back,  the  main  lessons 
I  can  offer  are  to  pick  a  small  handful  of 
simply  communicated  goals,  be  diplo¬ 
matic  but  firm  in  adapting  new  process¬ 
es.  insist  on  common  standards  across 
all  projects  and  thoroughly  implement 
all  facets  of  your  initial  projects  before 
moving  to  further  change.  Cl  S03K 


Lehman  is  senior  vice  president  of  tech- 
nofogy  at  Thomson  Fmancial  Contact 
him  at  ieremy  /  fehman^hotmaiLcom. 


customer  relationships:  yet  another  reason  to  outsource  with  spi 


weVe  con  cuous 


It's  easy  to  see  that  SPI  is  aligned  with  your  business  and  objectives.  You  can't  help  but  notice  that  our  project 
managers  are  onsite,  PMI  certified,  and  totally  attuned  to  your  needs.  We're  always  making  a  spectacle  of 
our  progress  via  spiProJect,’"  our  unique  project  management  technology.  As  for  quality?  It's  obvious.  Our 
global  delivery  model  includes  certifications  for  CMMI  Level  5  (in  progress).  Six  Sigma  and  ISO  9001:2000. 
To  learn  more,  call  toll-free  866-316-5774,  write  sales@spiPortal.com  and  visit  www.spiPortal.com. 
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BUSIiiESS  CONSULTING 


EXEC  ED 


Strategic 

Leader^ip 

■  Jan.  K)*t4.  Colorado  Springs 
Sponsor  Confer  for  Creative 
LaadersMp 

Oevefopmg  the  Strategic  Leader 
helps  participants  explore  their 
effectiveness  as  strategic  leaders 
Interactive  exercises  stx)w  how 
leadership  behavior  influences  Ihe 
strategic  process 
www.ccLorg 


Strategic  Thinking 

■  March  2*4,  Chicago 
Sportsor  Univonity  of  Chicago 
Graduate  School  of  Business 
Stralegn:  Thinking  for  Changing 
Markets  focuses  on  the  formulation 
and  implementation  of  company 
strategy  and  understanding  the 
competitive  structure  of  a  given 
industry  Topics  irtciude  entry,  posi-  i 
tiooing.  pricing  new  ventures,  tech¬ 
nology,  diversification,  vertical  inte¬ 
gration  and  o^ganl^atlonaj  issues. 
www.chicagoeMC.net 


Strategic  Thinking 
And  A^on 

■  March  20-24. 

Charlottesville.  Va. 

Sponsor:  University  of  Virginia 
Darden  Graduate  School  of 
Business  Administration 
StQtegic  Thinking  and  Action 
From  Concepl  to  Results  focuses 
on  breakthrough  strategy  and  com- 
oelrtive  response  amid  uncertairriy.  ‘ 
economic  volatility,  industry  trans- 
lormation  and  digital  opportunities 
and  threats 

www.darderLvirgifua.Bdu/ 

exad^rroTams 


Strat^ic 

Decision-Making 

•  March  29-30. 

Cambridge.  Mass. 

Sponsor:  Center  for  Management 
Research  Inc. 

^rpiores  how  decision-making 
processes  influence  leadership 
Examines  three  executive  decision¬ 
making  models  that  can  be  adapted 
io  til  your  management  style  and 
organizabortal  structure 
hSpV/cmr  Aacsetninars.com 


H.\RHAK.\  (iOMdl  SKI 


Justif^g  rPs  Place 
In  the  business 


I  SPEND  A  LOT  OF  TIME  working  with  IT  man¬ 
agers  who  are  trying  to  prove  that  their  organiza¬ 
tions  are  valuable  to  the  business.  Often,  these 
efforts  come  in  response  to  challenges  from  the 
business  about  the  cost  or  quality  of  IT. 

You  know  the  drill.  Even  though  demand  for  IT  ser¬ 
vices  is  up  within  the  organization,  top  executives 
become  convinced  that  IT  costs  can  be  reduced  by  10% 
or  more  with  no  detriment  to  the  business.  Or  the  CFO 
gets  the  notion  that  outsourcing  IT  would  save  the 


company  a  good  deal  of 
money.  In  cases  like  this, 

IT  leaders  must  frequently 
scramble  to  demonstrate 
why  these  moves  would 
actually  be  harmful  to  the 
business. 

Often.  IT  managers'  ef¬ 
forts  to  demonstrate  what 
technology  does  for  the 
business  don't  go  as  well  as 
they  had  hoped.  There  an? 
many  reasons  for  this.  The 
best  practices  described 
here  can  help  ensure  that 
your  efforts  to  show  IT's 
value  arc  fruitful. 

Oonl  rely  solely  on  IT  cost  benchmarks  to 
teB  yoiff  story.  Showing  that  your  level  of 
IT  spending  is  in  line  with  (or  lower 
than)  that  of  your  peers  may  appease 
some  C-levcl  executives,  but  cost 
benchmarks  are  a  way  to  demonstrate 
IT  efficiency  —  not  effectiveness.  A 
CIO  may  demonstrate  that  IT  costs 
are  in  line  but  still  fail  to  show  the  val¬ 
ue  derived  from  IT.  Don’t  get  me 
wrong  —  cost  benchmarking  is  worth¬ 
while.  But  too  many  IT  leaders  rely  ex¬ 
clusively  on  cost  benchmarks  to  tel! 
their  story  and  approach  the  exercise 
with  the  wrong  goals.  Remember  that 
the  most  critical  question  to  ask  is  not. 
"Are  we  spending  too  much  on  rT?" 
Rather,  the  question  to  ask  is,  "Does 


poriM ,  M  a  vtoc  pfwMmt 
«l6irtMrlne..iibMi 
sbB  focyM  «fi  IT  fbnn* 
cW  iMflpgMMnt 
ContedharM 


our  current  level  of  IT  in¬ 
vestment  align  with  our 
business  strategy?" 

Don't  adopt  an  overly  defen¬ 
sive  posture  when  ITs  perfor¬ 
mance  is  called  into  question. 
While  many  CIOs  become 
understandably  defensive 
during  conversations  about 
IT  performance,  it’s  politi¬ 
cally  unwise  to  be  overiy 
defensive.  Instead,  keep  an 
open  mind  about  the  orga¬ 
nization's  options  for  IT 
scrs'ice  deliver)'.  If  your  IT 
organization  is  like  most, 
it’s  excellent  at  some 
things,  pretty  good  at  many  things  and 
not  that  good  at  others.  In  the  areas 
where  your  staff  is  not  performing 
well,  outsourcing  may  be  a  better  op¬ 
tion  for  the  business.  Similarly,  reduc¬ 
ing  the  level  of  IT  investment  in  a  cer¬ 
tain  area  may  also  be  what's  required 
to  align  IT  spending  with  organiza¬ 
tional  goals.  CIOs  who  rush  to  defend 
their  fiefdoms  ultimately  lose  credibil¬ 
ity  with  their  business  counterparts. 

Be  proactive,  not  reactive.  IT  perfor¬ 
mance  management  is  a  critical  part  of 
the  CIO’s  job.  Don’t  wait  until  out¬ 
sourcing  looms  to  begin  benchmark- 
irjg  and  measuring  IT  value.  Proactive-  , 
ly  examining  IT  efficiency  and  effee-  j 
tivencss  and  communicating  the  re-  I 


suits  to  business  leaders  are  preferable 
to  responding  to  criticisms. 

Use  business  metrics  to  demonstrate  IT 
value.  It  takes  time  and  effort  to  put 
together  the  metrics  that  will  help 
demonstrate  the  value  of  IT.  In  partic¬ 
ular.  IT  leaders  will  need  to  reach  out 
to  iine-of-business  managers  and  find 
out  which  business  metrics  they  are 
looking  at.  Are  they  trying  to  reduce 
the  sales  cycle?  Are  the)'  trying  to 
streamline  the  product  development 
process?  Are  they  seeking  to  speed  up 
the  order-to-cash  process?  These  busi¬ 
ness  metrics  often  become  the  metrics 
that  IT  organizations  can  use  to  show 
their  value  to  the  organization.  The 
'  connection  between  IT  and  the  attain¬ 
ment  of  these  business  goals  is  the 
I  root  of  IT  %'alue  in  the  organization. 

Be  creative  when  you  ten  your  story. 
Scenarios,  user  testimonials  and  narra¬ 
tives  can  enhance  your  presentation. 
For  instance,  one  CIO  with  whom  I 
recently  worked  was  dealing  with  a 
business  leadership  team  that  wa^ 
ver)' unaware  of  technology.  She  had 
to  explain  why  it  cost  the  company 
more  than  Sl.OOO  a  year  to  own  and 
maintain  a  PC.  It  seems  that  many  of 
•the  business  people  felt  that  PCs- 
should  cost  no  more  than  current  re¬ 
tail  purchase  prices.  She  developed  a 
short  tutorial  that  showed  the  vast 
amount  of  infrastructure  (read:  cost) 
that  is  behind  every  PC. 

Increasingly.  IT  organizations  will 
be  asked  to  prove  their  value  to  the 
business.  Proceed  with  caution,  bur  be 
assured  that  it  is  possible  to  tell  a  com¬ 
pelling  story  of  how  IT  enhances  your 
company.  O  S0351 

MOREONUNE 

To  read  rnore  on  Ihis  topic,  visit  Ihe  IT  Managemenl 
Knowledge  Ceniei  on  out  Web  srte  QutekLink  k1900 

WANT  OUR  OPiiOH? 

OFdt  more  columns  and  links  to  our  archives,  go  to 
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EXEC  ED 


Strategic 

Leadership 

■  Jm.  KMi  Cokrato  Sprfeigi 
SpOMor  CMir  for  Craativ* 


Developing  the  Str^egtc  leader 
helps  participants  explore  their 
effectrveness  as  strategic  leaders. 
Interactive  exercises  show  how 
leadership  behavior  irdtuences  the 
strategic  process. 
wWKCcLoro 


Strategic  Thinking 

Speoaer  IMwifiity  of  CMcego 


Strategic  ThmMrtg  for  Changing 
Markets  focuses  on  tee  formulation 
arxi  mplernentation  of  cornpariy 
straiegy  and  understanding  tee 
cofflpedtrve  stnicture  of  a  given 
industry.  Topics  indude  entry,  posi- 
ttenina  pricfig.  new  vaitures.  tech¬ 
nology.  diversAcation.  vertical  inte* 
graiiw  and  organizational  issues. 


Strategic  Thinking 
And  Addon 

■  Iiirdi20-a«, 


Sponpof;  UrivenMy  of  Virginia 
Oorriooer^BiloSdioolor 


Strafegic  Thmidng  and  Action: 

From  Concept  to  Results  focuses 
on  breakthrough  strategy  and  com¬ 
petitive  response  vnid  uncertainty, 
economic  volatility,  industry  trvis- 
formabon  arid  digital  oppoilunities 
^tereats. 


Strs^ic 

Decision-Making 

■  tMi2»-30. 
C8n*rtfgi.blMe. 
SpoworCeatef  for  Management 


Explores  how  dec3Sion-making 
processes  influence  leadership. 
Examinesthreeexecutivedec^n- 
malcng  models  thd  can  be  adapted 
to  fit  your  rrtenagement  st^  and 
orgarizationalstrucbire. 


BARBARA  GOMOLSKl 


ITs  Place 
In  the  Business 


I  SPEND  A  LOT  OF  TIME  working  with  IT  man¬ 
agers  who  are  trying  to  prove  that  their  organiza¬ 
tions  are  valuable  to  the  business.  Often,  these 
efforts  come  in  response  to  challenges  from  the 
business  about  the  cost  or  quality  of  IT. 

You  know  the  drill.  Even  though  demand  for  IT  ser¬ 
vices  is  up  within  the  organization,  top  executives 
become  convinced  that  IT  costs  can  be  reduced  by  10% 
or  more  with  no  detriment  to  the  business.  Or  the  CFO 
gets  the  notion  that  outsourcing  IT  would  save  the 


company  a  good  deal  of 
money.  In  cases  like  this, 
rr  leaders  must  frequently 
scramble  to  demonstrate 
why  these  moves  would 
actually  be  harmful  to  the 
business. 

Often.  IT  managers'  ef¬ 
forts  to  demonstrate  what 
technology  does  for  the 
business  don’t  go  as  well  as 
they  had  hoped.  Hiere  are 
many  reasons  for  this.  The 
best  practices  described 
here  can  help  ensure  that 

your  efforts  to  show  ITs  _ 

value  are  ffuitfuL 

Don't  niy  aoWy  on  rr  cost  benchmarks  to 
tal  your  story.  Showii^  that  your  level  of 
IT  spending  is  in  line  with  (or  lower 
than)  that  of  your  peers  may  appease 
some  C-level  executives,  but  cost 
benchmarks  are  a  way  to  demonstrate 
IT  efficiency  —  not  effectiveness.  A 
CIO  may  demonstrate  that  IT  costs 
are  in  line  but  still  fail  to  show  the  val¬ 
ue  derived  from  IT.  Don’t  get  me 
wrong  ~  cost  benchmarking  is  worth¬ 
while.  But  too  many  IT  leaders  rely  ex¬ 
clusively  on  cost  benchmarks  to  tell 
their  story  and  approach  the  exercise 
with  the  wrong  goals.  Remember  that 
the  most  critical  question  to  ask  is  not. 
'Are  we  spending  too  much  on  nr* 
Rather,  the  question  to  ask  is.  'Does 


our  current  level  of  IT  in¬ 
vestment  align  with  our 
business  strategy?" 

Oonladoptanoviflyditen’ 
atvc  poshve  whan  ITs  parfor 
maflca  te  calad  kilo  quaatiea 
While  many  CIOs  become 
understandably  defensive 
dxiring  conversations  about 
IT  performance,  it's  politi¬ 
cally  unwise  to  be  overly 
defensive.  Instead,  keep  an 
open  mind  about  the  orga¬ 
nization's  options  for  IT 
service  delivery.  If  your  IT 
organization  is  like  most, 
it's  excellent  at  some 
things,  pretty  good  at  many  things  and 
not  that  good  at  others.  In  the  areas 
where  your  staff  is  not  performing 
well,  outsourcing  may  be  a  better  op¬ 
tion  for  the  business.  Similarly,  reduc¬ 
ing  the  level  of  IT  investment  in  a  cer¬ 
tain  area  may  also  be  what's  required 
to  align  IT  spending  with  organiza¬ 
tional  goals.  CIOs  who  rush  to  defend 
their  fiefdoms  ultimately  lose  credibil¬ 
ity  with  their  business  counterparts. 

Be  praadtea,  not  raacftee.  n*  perfor¬ 
mance  management  is  a  critical  part  of 
the  CIO's  job.  Don't  wait  until  out¬ 
sourcing  looms  to  begin  benchmaric- 
ing  and  measuring  IT  value.  Proactive¬ 
ly  examining  IT  efficimcy  and  effec¬ 
tiveness  and  communicating  the  re-  I 


suits  to  business  leaders  are  preferable 
to  responding  to  criticisms. 

Uao  buiktees  metrics  to  domoRstrate  IT 
value.  It  takes  time  and  effort  to  put 
together  the  metrics  that  will  hdp 
demonstrate  the  value  of  IT.  In  partic¬ 
ular,  IT  leaders  will  need  to  reach  out 
to  Une-of-business  managers  and  find 
out  which  business  metrics  they  are 
looking  at.  Are  they  trying  to  reduce 
the  sales  cycle?  Are  they  trying  to 
streamline  the  product  development 
process?  Are  they  seeking  to  speed  up 
the  order-to*cash  process  These  busi¬ 
ness  metrics  often  become  the  metrics 
that  IT  organizations  can  use  to  show 
their  value  to  the  organization.  The 
connection  between  IT  and  the  attain¬ 
ment  of  these  business  goals  is  the 
root  of  IT  value  in  the  organization. 

Be  creatfM  vihen  you  tel  your  story. 
Scenarios,  user  testimonials  and  narra¬ 
tives  can  enhance  your  presentation. 
For  instance,  one  CIO  with  whom  I 
recently  worked  was  dealing  with  a 
business  leadership  team  that  was 
very  unaware  of  technology.  She  had 
to  explain  why  it  cost  the  company 
more  than  SUODO  a  year  to  own  and 
maintain  a  PC.  It  seems  that  many  of 
the  business  people  felt  that  PCs 
should  cost  no  more  than  current  re¬ 
tail  purchase  prices.  She  developed  a 
short  tutorial  that  showed  the  vast 
amount  of  infrastructure  (read:  cost) 
that  is  behind  every  PC. 

Increasingly.  IT  organizations  will 
be  asked  to  prove  their  value  to  the 
business.  Proceed  with  caution,  but  be 
assured  that  it  is  possible  to  tell  a  com¬ 
pelling  story  of  bow  IT  enhances  your 
company.  O  503S1 
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Knowtedge  l>ite  Ml  our  Web  site' QiAckUnk  k1^ 
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THE  LEADER  IN  CUSTOMER 
ANALYTIC  APPLICATIONS  BRINGS 
YOU  A  NEW  GENERATION 
OF  ENTERPRISE  Bl  SOLUTIONS. 


Cutthroat  competition.  Intense  profit  pressure.  Price  erosion.  Deciining  loyaity.  Business  today 
dictates  working  not  just  harder,  but  smarter.  Meeting  these  new  business  demands,  and 
overcoming  the  inherent  challenges,  requires  a  new  generation  of  Bl  solutions  unavaiiabie  from 
traditional  Bl  vendors. 

Siebel.  the  leader  in  customer  analytic  applications,  brings  you  Siebel  Business  Analytics -Bl 
solutions  that  empower  everyone  with  actionable  real-time  insight  from  the  largest  data 
warehouses  and  across  enterprise  sources.  With  a  mission-critical  architecture  that  supports 
multi-terabytes  of  data,  thousands  of  users,  and  24x7  availability.  And  proven  application 
solutions,  with  built-in  industry-specific  best  practices  that  are  flexible,  quickly  implemented, 
integrate  with  your  infrastructure,  and  provide  low  TCO. 

Our  innovative  Bl  solutions  have  catapulted  Siebel  into  the  leadership  position  in  analytic 
applications  for  sales,  marketing,  service,  and  senior  management,  with  over  75%  of  our  customers 
using  Siebel  Business  Analytics  beyond  CRM  and  across  a  full  range  of  enterprise  sources. 

Learn  why  the  most  analytically  sophisticated  companies  rely  on  Siebel.  VisH  www.siebel.com/newgen 
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CUSTOMER  INSIGHT  •  ENTERPRISE  INTELLIGENCE 


TEN  MOVES  AHEAD 
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^Sun 

microsystems 

The  Network  is  the  Computer' 


SPECIAL 


REPORT 


Is  your  provider  in  trouble? 
Is  service  quality  slipping? 
Here’s  how  to  find  out. 


PWLED6E  COTTER 
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Fiscal  Red  Flags 

IT  managers  wjio  know 
what  to  look  for  in  their 
outsourcers'  financial 
records  can  uncover  early 
signs  of  trouble. 


EDITOR'S  NOTE 

DU  KNOW  about  offshoring's  politi¬ 
cal  and  employee  backlash  (Quick- 
Link  47609].  You  know  about  the 
security  and  privacy  concerns  over 
outsourcing  IT  [QuickLink  49098).  But 
there  are  other  dangers,  too.  that  typically 
get  superficial  treatment  in  the  press,  such 
as  the  risk  of  having  corporate  intellectual 
property  in  third-party  hands.  How  do  you 
keep  customer  data,  or  the  powerful  algo¬ 
rithms  that  give  your  systems  a  competitive 
edge,  from  being  sold  to  the  highest  bidder? 

Plus,  there's  the  risk  of  the  contractor  go¬ 
ing  out  of  business.  I  don't  mean  to  imply 
that  IBM  Global  Services  or  any  of  the  top 
Indian  firms  arc  in  trouble  —  far  from  it  — 
but  I  know  it  wasn’t  any  fun  for  users  when 
some  of  the  early  ap- 


KNOWLEDGE 
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O  QuickLink 
a2290 

computerworld.com 


providers  went  belK'- 
up  a  few  years  ago.  or 
when  Cable  &  Wire¬ 
less  exited  the  Web 
hosting  business. 

A  recent  Forrester 
Research  survc>'  of 
161  IT  decision-mak¬ 
ers  found  that  after  security  and  employee 
resistance,  the  chief  concerns  about  off¬ 
shore  outsourcing  include  the  contractor's 
long-term  financial  viability  and  a  lack  of 
internal  project  management  skills  to  keep 
control  over  the  relationship. 

That's  why  this  special  report  delves 
deeply  into  these  often  overlooked  prob¬ 
lems  and  provides  useful  adv'ice  about  the 
financial  red  flags  you  should  look  for  and 
how  to  protect  your  trade  secrets.  Other 
stories  will  help  you  effectively  monitor 
your  contractors  and  make  sure  you  have 
the  in-house  skills  left  to  do  so. 

You  can't  say  we  didn't  warn  you  about 
the  risks  —  or  help  vou  manage  them. 

C  50435 

Mitch  Betts  is  Computerworld 's  executive 
editor.  You  can  contact  him  at  mitch_  bettSi^ 
computerworld.com. 


Trade  Secret  Theft 

Locked-down  facilities 
and  rigorous  employee 
screening  can  reduce 
the  risk  of  intellectual 
property  loss. 


11.15.04 


Unfair  Treatment 

Uncle  Sam  treats  IT  workers  \\  ho  l.»se  the 
jobs  to  cheaper  overseas  labor  diff'erenilv 
trom  other  laid-ttlf  workers.  ('.«>lumnisi 
Mark  Hall  thinks  that's  wrong. 
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SPECIAL 

REPORT 


Is  x'our  proxidcr  in  tRTublc? 
Is  ice  qualitx’  slipping? 
Here’s  hox\'  to  find  out. 
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Fiscal 
RedFlags 


Knowwiiatto 
look  for  in  your 
outsourcer’s 
financial  statements. 

By  Steve  Ulfelder 


WHETHER  a  potential  out¬ 
sourcer  is  headquartered 
right  down  the  street  or 
in  Bangalore,  you  need 
to  do  plenty  of  due  dili¬ 
gence  to  ensure  that  your  company’s 
needs  will  be  met  by  a  stable,  fisc^ly 
healthy  partner. 

Lawyers,  analysts,  consultants,  in¬ 
surance  fums  and  others  offer  this  ad¬ 
vice:  IT  managers  can  make  better  out¬ 
sourcing  decisions  if  they’re  conver¬ 
sant  in  fiscal  terms.  “Today,  I'm  seeing 
more  CIOs  who  really  understand  this 
[due  dil^ence)  process,”  says  Dan 
Smolnik,  senior  partner  at  The  Smol- 
nik  Law  Office,  a  West  Simsbury. 
Conn.-based  firm  specializing  in  cor¬ 
porate  law. 

The  appropriate  role  for  IT  man¬ 
agers  has  its  limits,  however.  Just  as 
you  wouldn't  want  a  plumber  remov¬ 
ing  your  spleen,  you  need  to  confer 
with  your  company's  financial  special¬ 
ists  before  committing  to  any  out¬ 
sourcing  deal.  Robert  Zabler,  a  partner 
at  Shaw  Pittman  LLP,  who  heads  the 
law  firm's  outsourcing  practice  in 
Washington,  urges  CIOs,  “Dont  do  it 
yourself.  Tbm  to  your  corporate  fi¬ 
nance  people  —  ask  them  to  do  the 
analysis.” 

Nonetheless,  an  educated  consumer 
is  a  wiser  one. 

Nail  Down  the  Numbers 

Before  you  analyze  financial  data,  you 
need  to  find  it  In  the  case  of  publidy 
owned  companies,  especially  those  in 
the  U.S.,  this  is  easy  —  you  can  find  the 
information  on  the  investor  relations 
page  of  the  company's  Web  site  or  look 
it  up  at  sites  like  CBS  MaricetWatch 
(httpy'/fcbsmorfccfwatch.com)  or  Yahoo 
Finance  (.hap-y/Jinance.yahooxom).  Dig¬ 
ging  up  financial  information  for  pub¬ 
licly  held  companies  based  overseas  is¬ 
n't  much  harder.  One  source  is  Standard 
&  Poor’s  (yvwwstandardandpoors.com). 

Private  companies  present  a  bigger 
challenge.  Goidon  Brooks  is  CEO  of 
Symphony  Services  Corp.,  a  Palo  Alto, 
Calif.-based  outsourcer  with  opera¬ 
tions  in  Bangalore,  India.  “We  just  gen¬ 
erally  don't  share  full  financials,”  be 
says,  noting  that  private  companies’ 
agreements  with  their  financial  back¬ 
ers  often  forbid  this.  However,  Brooks 
says,  “we  do  share  key  metrics,  and  we 
do  talk  extensively  with  CFOs  [of 
prospective  clients]." 

That's  a  reasonable  position,  but  ex¬ 
perts  say  that  it  raises  a  red  if  an 

outsourcer  balks  at  sharing  metricrs. 

“If  my  [corporate  counsel]  counterpart 
is  not  a^ressively  getting  me  this  in- 
Continued  on  page  42 
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tomuiiun.  I'm  hesitant  about  the  com¬ 
pany."  says  SfTK>lnik-  “And  I  pass  that 
Jiscttintort  on  to  my  client,  askinj;. 
‘Can  this  ix-Iationship  really  endure?'  ” 
Here  are  four  metrics  to  .inaly7e 
when  the  fiscal  health  of  out- 

st»urcers  from  KampRate  Ll  C.  an  IT 
ouisourctn}!  consultancy  in  Santa 
Mi'nica.  Calif.,  as  well  as  other  experts; 

LIQUIDITY.  Liquidity  is  the 
ability  of  a  basiness  to  meet  its 
short-term  obliyaiions;  this  is 
where  early  warninji  sijtns  of 
financial  difTiculty  will  reveal 
themselves- 

METR1C  A.  To  measure  an  outsourcer’s 
liquidity,  find  its  current  ratio.  Here’s 
the  fi»rmub:  Divide  irurrent  asset.s  by 
current  liabilities. 

■  Whal  you're  lookiOQ  for.  Whafs  consid¬ 
ered  a  healthy  current  ratio  varies  by 
industry.  According:  to  financial  ana- 
lyst.s.  a  figure  of  15  Is  generally  reason¬ 
able.  and  4  figure  above  2  Is  desirable. 

A  current  ratio  less  then  1.5  indicates 
that  any  company's  ability  to  meet  its 
short-term  obligaiiontt  Ls  slresst^i. 
METRIC  a.  rherc's  a  more  stringent 
measure  of  liquidity'  called  the  quick 
ratio.  The  formula:  Add  accounts  re¬ 
ceivable  and  cash  and  then  divide  by 
current  liabilities. 

■  Whal  you're  looWng  for.  A  quick  ratio 
higher  than  i.l  is  considered  healthy. 

Why  is  the  quick  ratio  considered  a 
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t«>ughcr  test  than  the  current  ratio?  It 
I  e.xcludes  nonliquid  current  a.sseis  such 
!  as  inventory  from  the  equation,  thus 
I  preH’nting  a  more  accurate  picture. 

1  While  the  raw  quick  or  current  ratio 
I  is  important,  experts  caution  that  such 
'  figures  should  always  be  compared 
against  those  of  industry  peers.  That 
I  means  that  if  ytm're  ctmsidering  a  tiny 
Indian  start-up  for  a  portion  of  your  IT 
outsourcing,  you  should  compare  it 
.against  competitors  of  similar  si/.e  — 
not  against  the  Electronic  Data  Sys¬ 
tems  and  Wipros  of  the  world. 

Mark  Smialowicz.  the  chief  financial 
I  ofilcer  at  RampRatc.  says  irend.s  are  vi' 
tai.  loo.  That  is.  check  to  see  whether 
the  outsourcer's  current  rntio  is  hold¬ 
ing  steady,  shrinking  or  gnm  ing.  “If  it's 
trending  toward  1,  that's  a  big  red  flag." 
he  says. 

CAPITAL  STRUCTURE 
AND  SOLVENCY.  Th. 

next  step  in  determining  a 
potential  outsourcer's  fis¬ 
cal  health  i.s  to  learn  its 
I  debl-to-equity  ratio, 

j  METRIC  A.  To  find  a  company's  debt-to- 
cquity  ratio,  simply  divide  its  total  lia¬ 
bilities  by  its  equity. 

METRIC  B.  To  extend  the  time  horiz«>n 
—  which  is  a  gotKl  idea  if  you  seek  an 
I  outsourcing  contract  with  a  five-  to 
seven-year  life  span,  as  is  often  the 
case  —  tweak  the  equation  and  find 
the  outsourcer's  long-term-debt-io- 
equity  ratio  by  dividing  long-term 
liabilities  by  equity. 

■  What  you’re  lo^ng  for.  A  low  number 
is  a  good  thing,  but  keep  in  mind  that 
debt  isn't  necessarily  a  Knd  thing:  it 
may  merely  reflect  a  heavy  investment 
in  the  infra.structurc  needed  to  meet 
yimr  company's  needs.  As  with  virtual¬ 
ly  all  financial  metrics,  the  key  is  to 
compare  similar  companies  against 
one  another.  "Does  (a  potential  part¬ 
ner’s!  level  of  debt  as  a  percentage  of 
assets  top  that  of  its  peers?  If  so.  you 
need  to  find  out  why."  Smialowicz  says. 
"They  may  have  been  burning  a  lot  of 
cash  lately,  or  they  may  have  had  tn 
borixYW  a  lot  of  money." 

Keep  in  mind  that  an  outsourcer 
with  an  unusually  high  debt  ratio  may 
u.se  more  capital  servicing  iu  debt  and 
less  serx'icing  your  account. 

STATEMENT  OF  CASH 

FLOWS  .  It's  easy  to  grasp  I 
a  company’s  income  state- 
mem  and  balance  sheet, 
but  few  IT  pros  realize 
there's  a  third  side  in  this 
triangle  —  called  a  statement  of  cash 
flows  —  that  ties  the  other  two  togeth¬ 


er.  presenting  a  more  detailed  snap¬ 
shot  of  an  outsourcer's  cash  position. 
THE  METRIC.  A  statement  of  cash  flows 
is  a  Miphisticatcd  measure  with  three 
tiers:  operations,  investment  and  fi¬ 
nancing.  To  calculate  it.  start  with  a 
company's  net  income.  Then  add  (or 
subtract)  funds  provided  (or  used) 
from  operations,  investments  and  fi¬ 
nancing.  nw  sum  tells  you  the  net  in¬ 
crease  (or  decrease)  in  a  firm's  cash  po- 
siti«»n  in  a  given  period.  This  is  critical 
because  a  company's  performance  isn’t 
accurately  reflected  by  the  income 
statement  alone,  Smialowicz.  says. 

Many  CIOs  and  other  nonexperts  at¬ 
tempt  to  measure  performance  merely 
by  studying  an  outsourcer's  income 
statement  for  earnings  before  interest. 
ia.xes.  depreciation  and  amortization, 
known  as  EBITDA.  This  can  be  mis¬ 
leading.  because  on  the  income  state- 
;  ment.  capital  expenditures  <*n  facilities 
and  equipment  are  reflected  only  in 
terms  of  deprecLition.  To  see  true  oper- 
I  ating  performance  and  any  cash  draiits 
'  the  statement  of  cash  flows  is  key. 

I  Some  companies  have  great  EBITDA 
j  even  when  they're  at  death's  door.  As 
I  examples.  Smialowicz.  points  to  the 
j  2001  collapses  of  several  competitive 
I  local  exchange  carriers  (CLEC).  Practi¬ 
cally  until  the  minute  they  filed  for 
I  bankruptcy.  ('LECs  like  NorthPoint 
Communications  Gmup  Inc.  and 
Covad  Communications  Grtmp  Inc. 
could  boast  healthy  EBlTDA-s.  "But 
they  had  to  buy  SlOO  million  or  so  in 
I  new  equipment  over  the  next  three 
years."  Smialowicz  says.  The  invest- 
I  ment  p«jnii»n  of  CLECs'  statements  of 
cash  flows  scn'cd  as  w'aming  signs  — 
to  those  w’ho  studied  them. 

■  What  you're  looking  for.  If  a  prospective 
partner's  cash  position  is  remaining 
neutral  or  deca*asing.  find  out  why. 

You  need  to  know'  an  outsourcer’s  cur¬ 
rent  athJ  projected  income,  of  course 
—  but  it's  even  more  important  to  un-  ' 
derstand  its  projected  capital  require¬ 
ments  and  how  those  requirements 
will  be  funded.  Smolnik  says  that  when 
representing  organizations  in  out¬ 
sourcing  deals,  he  rt-commends  that 
they  demand  to  see  historical  and  pro¬ 
jected  inectme  statements,  balance 
sheets  and  statements  of  cash  flows. 


DVERALL  SIZE  AND 
PRDFITABILITY.ex 


pens  say  an  outsourcer’s 
size,  measured  in  both 
revenue  and  customers,  as 
well  as  trends  in  its  gross 
margins,  are  important  signposts. 

THE  METRIC.  The  gros.s  margin  for  any 
business  is  its  profit  before  operating 


An  Insured  Thing 

A  CRASHED  PUBLIC  WEB  SITE  or  an 

inaccessible  CRM  system  can  cost  you 
plenty  To  mitigate  this  nsk.  many  com¬ 
panies  demand  (hat  their  outsourcers 
cany  errors  and  omissions  insurance. 

The  policies,  called  E&O  in  the  insur¬ 
ance  industry,  are  straightforward.  Pro¬ 
cured  bv  the  outsourcer  (usually  when 
stipuidted  by  the  customer  as  a  condition 
of  the  contract),  they  slate  that  il  the  out¬ 
sourcer’s  work  leads  to  a  problem  for  the 
client,  the  client  can  file  a  claim  with  the 
insurer  up  to  an  agreed-upon  figure. 

Aaron  Latto,  market  solutions  director 
in  Ihe  Global  Technology  Underwriting 
division  of  St.  Paul  Travelers  Cos.,  offers 
two  tips  for  companies  discussing  E&O 
insurance  with  prospective  outsourcers. 

First,  have  the  outsourcer  get  a  policy 
specific  to  your  contract.  Don’t  let  (he 
outsourcer  tell  you  it  has  E&O  coverage 
for  all  clients.  You  want  to  make  sure 
your  individual  vulnerabilities  are  cov¬ 
ered.  and  you  need  to  know  the  policy 
won't  lapse  during  your  engagement. 

Second,  get  step-m  coverage  A  basic 
E&O  policy  will  make  you  whole  after  the 
fact.  Latto  says.  T)ut  i(  won't  determine 
who  continues  the  [IT]  process"  if  Ihe 
outsourcer  fails  or  bails.  To  determine 
that,  you  need  a  separate  clause  known 
as  *st^-in " 

_  -S/etvUffekler 


expenses  arc  deducted.  A  ei>mpany's 
size  is  self-explanatory’. 

■  ¥Auit  you're  looking  for.  \A'here  these 
interrelated  mea.surcs  arc  concerned, 
trends  and  comparisons  are  key.  A 
small  outsourcer  isn't  bad.  but  if  it  di¬ 


rectly  competes  with  much  larger 
companies,  it  is  likely  a  riskier  bet. 

Study  (he  trend  in  (he  potential  part¬ 
ner’s  gross  margins.  If  an  outsourcer  is 
gn>wing  its  customer  base,  that's  gen¬ 
erally  a  good  thing.  However.  If  a  com¬ 
pany  is  adding  customers  but  its  profit 
margin  is  shrinking  (that  is.  if  it’s  mak¬ 
ing  less  money  per  customer),  that's  a 
red  flag.  The  company  may  be  in  an 
industry  niche  that's  becoming  "com¬ 
moditized."  and  this  may  in  turn  strain 
an  outsourcer's  cash  flow.  O  5012S 


Ulfelder  is  a  Computcrworld  contribuf- 
ing  writer  in  Souihboro,  Moss.  Contact 
him  at  sui/elden.^'charternef. 


no  DEALS 

Outsourcing  deals  vatuni  at  St  bllion  or  more  are 
regaining  pooulanty  as  customers  grow  more 
comlortabtewith  ttwd-pady  services  firms 
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fomution.  I’m  hesitant  shout  the  com¬ 
pany,”  says  Smolnik.  ”And  1  pass  that 
discomfort  on  to  my  client,  asking. 
'Can  this  relationship  really  endure?’ " 

Here  are  four  metrics  to  analyze 
when  gauging  the  fiscal  health  of  out¬ 
sourcers  from  RampRatc  LLC  an  IT 
outsourcing  consultancy  in  Santa 
Monica,  Calif,  as  well  as  other  experts: 

IUQUHMTY.  liquidity  is  the 
ability  of  a  business  to  meet  its 
short-term  obligations;  this  is 
where  eariy  warning  signs  of 
financial  difficulty  will  reveal 
themselves. 

MCme  K  To  measure  an  outsourcer's 
liquidity,  find  its  current  ratio.  Here’s 
the  formula:  Divide  current  assets  by 
current  liabilities. 

•  Whal  you’re  looking  for.  What's  consid¬ 
ered  a  healthy  current  ratio  varies  by 
industry.  According  to  financial  ana¬ 
lysts,  a  figure  of  LS  is  generally  reason¬ 
able.  and  a  figure  above  2  is  desirable. 

A  current  ratio  less  then  U  indicates 
that  any  company's  ability  to  meet  its 
short-term  obligations  is  stressed 
METRIC  B.  There's  a  more  stringent 
measure  of  liquidity  called  the  quick 
ratio.  The  fonnula:  Add  accounts  re¬ 
ceivable  and  cash  and  then  divide  by 
current  liabilities. 

■  WhU  fotfre  looking  lor.  A  quick  ratio 
higher  than  LI  is  considered  healthy. 
Why  is  the  quick  ratio  considered  a 


I  tougher  test  than  the  current  ratio?  It 
excludes  nooliquid  current  assets  such 
as  inventory  from  the  equation,  thus 
presenting  a  more  accurate  picture. 

While  the  raw  quick  or  current  ratio 
is  important,  experts  caution  that  such 
figures  should  always  be  compared 
against  chose  of  industry  peers.  That 
means  that  if  you're  considering  a  tiny 
Indian  start-up  for  a  portion  of  your  IT 
outsourcing,  you  should  compare  it 
against  competitors  of  similar  size  — 
not  against  the  Electronic  Data  Sys¬ 
tems  and  Wipros  of  the  world. 

Mark  Smialowicz,  the  chief  financial 
officer  at  RampRate,  says  trends  arc  vi¬ 
tal.  too.  That  is,  check  to  see  whether 
the  outsourcer’s  current  ratio  is  bold¬ 
ing  steady,  shrinking  or  growing.  “If  it’s 
trending  toward  1,  that's  a  big  red  flag,” 
be  says. 

2  CAPITAL  STRUCTURE 
AND  SOLVENCY.  The 

next  step  in  determining  a 
potential  outsourcer’s  fis¬ 
cal  health  is  to  learn  its 
debt-to-equity  ratia 
METRIC  A.  To  find  a  company's  debt-to- 
equity  ratio,  simply  divide  its  total  lia¬ 
bilities  by  its  equity. 

METRIC  B.  To  extend  the  time  horizon 
—  which  is  a  good  idea  if  you  seek  an 
outsourcing  contract  with  a  five-  to 
seven-year  life  span,  as  is  often  the 
case  tweak  the  equation  and  find 
the  outsourcer's  long-term-debt -to- 
equiry  ratio  by  dividing  long-term 
liabilities  by  equity. 

■  Whil  you're  looking  for.  A  low  number 
IS  a  good  thing,  but  keep  in  mind  that 
debt  isn't  necessarily  a  bad  thing:  it 
may  merely  reflect  a  heavy  investment 
in  the  infn^tnjcture  needed  to  meet 
your  company's  needs.  As  with  virtual¬ 
ly  all  financial  metrics,  the  key  is  to 
compare  similar  companies  against 
one  another.  TToes  [a  potential  part¬ 
ner’s]  level  of  debt  as  a  percentage  of 
assets  top  that  of  its  peers?  If  so.  you 
need  to  find  out  why.”  Smialowicz  says. 
They  may  have  been  burning  a  lot  of 
ca^  lately,  or  they  may  have  had  to 
borrow  a  lot  of  money." 

Keep  in  mind  that  an  outsourcer 
with  an  unusually  high  debt  ratio  may 
use  more  capital  servidog  its  debt  and 
less  servicing  your  account 


3  STATEMENT  OP  CASH 

FLOWS.  It’s  easy  to  grasp 
a  company’s  income  state¬ 
ment  and  balance  sheet, 
but  few  IT  pros  realize 
there’s  a  th^  side  in  this 
triangle  —  called  a  statement  of  cash 
Rows  ~  that  ties  the  other  two  togeth¬ 


er.  presenting  a  more  detailed  snap¬ 
shot  of  an  outsourcer's  cash  position. 
THE  METRIC.  A  statement  of  cash  flows 
U  a  sophisticated  measure  with  three 
tiers:  operations,  investment  and  fi¬ 
nancing.  To  calculate  iL  start  with  a 
company's  net  income.  Then  add  (or 
subtract)  funds  provided  (or  used) 
from  operations,  investments  and  fi¬ 
nancing.  The  sum  tells  you  the  net  in¬ 
crease  (or  decrease)  in  a  firm’s  cash  po¬ 
sition  in  a  given  period.  This  is  critical 
because  a  company's  performance  isn’t 
accurately  reflected  hy  the  income 
statement  alone,  Smialowicz  says. 

Many  CIOs  and  other  nonexperts  at¬ 
tempt  to  measure  performance  merely 
by  studying  an  outsourcer’s  income 
statement  for  earnings  before  interest, 
taxes,  depreciation  and  amortization, 
known  as  EBITDA.  This  can  be  nus- 
leading,  because  on  the  income  state¬ 
ment.  capital  expenditures  on  facilities 
and  equipment  are  reflected  only  in 
terms  of  depreciation.  To  see  true  oper¬ 
ating  performance  and  any  cash  drains, 
the  statement  of  cash  flows  is  key. 

Some  companies  have  great  EBITDA 
even  when  they're  at  death's  door.  As 
examples,  Smialowicz  points  to  the 
2001  collapses  of  several  competitive  I 
local  exchange  carriers  (CLEC).  Practi-  | 
cally  until  the  minute  they  filed  for 
bankruptcy,  CLECs  like  NorthPoint 
Communications  Group  Inc.  and 
Covad  Communications  Group  Inc. 
could  boast  healthy  EBITDAs.  "Bui 
they  had  to  buy  $100  million  or  so  in 
new  equipment  over  the  next  three 
years,”  Smialowicz  says.  The  invest¬ 
ment  portion  of  CLE(is'  statements  of 
cash  flows  served  as  warning  signs  ~ 
to  those  who  studied  them. 

■  WIkI  you're  looking  for.  If  a  prospective 
partner's  cash  position  is  remaining 
neutral  or  decreasing,  find  out  why. 

You  need  to  know  an  outsourcer’s  cur¬ 
rent  and  projected  income,  of  course 
—  but  it’s  even  more  imponant  to  un¬ 
derstand  its  projected  capital  require¬ 
ments  and  how  those  requirements 
will  be  funded.  Smolnik  says  that  when 
representing  organizations  in  out¬ 
sourcing  deals,  be  reconunends  that 
they  demand  to  see  historical  and  pro¬ 
jected  income  statements,  balance 
sheets  and  statements  of  cash  flows. 

4  OVERALL  SIZE  AND 
PROFITA«LrTY.Ex 

pelts  say  an  outsourcer's 
size,  measured  in  both 
revenue  and  customers,  as 
well  as  trends  in  its  gross 
I  margins,  are  important  signposts. 

I  THE  hcimu.  The  gross  margin  for  any 
I  business  is  its  profit  before  operating 


An  Insured  Thing 

A  CRASHED  PUBLIC  WEB  SITE  or  an 
inaccessible  CRM  system  can  cost  you 
plenty.  To  mitigate  this  risk,  many  com¬ 
panies  demand  that  their  outsourcers 
cany  errors  and  omissions  insurance. 

The  policies,  called  E&O  in  the  insur¬ 
ance  industry,  are  straightforward.  Pro¬ 
cured  by  the  outsourcer  (usuaDy  when 
stipulated  by  the  customs  as  a  condition 
of  the  contract),  they  stale  that  If  the  out¬ 
sourcer's  work  leads  to  a  problem  for  the 
elicit,  the  dien!  c»)  file  a  claim  with  the 
Insurer  tgi  to  an  agreed-upon  hgure. 

Aaron  Latto.  market  solutions  director 
in  the  6k)bai  Technology  Underwriting 
division  of  St.  Travelers  Cos.,  offers 
two  lips  for  companies  discussing  E&O 
insurance  with  prospective  outsource. 

First  have  the  outsouroer  get  a  policy 
specific  to  your  contract  OonT  let  the 
outsourcer  teil  you  it  has  E&O  coverage 
for  all  clients.  ^  want  to  make  sure 
yoir  individua]  vulnerabilities  are  cov¬ 
ered.  and  you  need  to  know  the  policy 
wool  lapse  during  your  engagement 
Second,  get  step-in  coverage.  A  baste 
E&O  policy  wilt  make  you  whole  after  the 
fad.  Lalto  says,  *but  it  won't  determine 
who  conbnues  the  [IT]  process*  if  the 
outsourcer  fails  or  baite.  To  detennine 
that,  you  need  a  s^rate  clause  knovm 
as  *step-ln " 

_  -SteveUlfelder 

expenses  are  deducted.  A  company’s 
size  is  self-explanatory. 

■  What  you’re  lookfog  for.  Where  these 
interrelated  measures  arc  coocemed. 
trends  and  comparisons  are  key.  A 
small  outsourcer  isn't  bad,  but  if  it  di¬ 
rectly  competes  with  much  larger 
companies,  it  is  likely  a  riskier  bet 
Study  the  trend  in  the  potential  part¬ 
ner's  gross  margins.  If  an  outsourcer  is 
growing  its  customer  base,  that’s  gen¬ 
erally  a  good  thing.  However,  If  a  com¬ 
pany  is  adding  customers  but  its  profit 
margin  is  shrinking  (that  is.  if  it's  mak¬ 
ing  less  money  per  customer),  that’s  a 
red  flag.  The  company  may  be  in  an 
industry  niche  that’s  becoming  "com¬ 
moditized,”  and  this  may  in  turn  strain 
an  outsourcer's  cash  flow.  O  S012S 

Ulfelder  is  a  ComputerwoiTd  contribut- 
ing  writer  in  Sotahboro.  Mass.  Contact 
him  at  sulJelder@charteT.net 
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business  acuity:  yet  another  reason  to  outsource  with  spi 


our  sales  el 


For  a  company  our  size,  we  have  a  remarkable  number  of  ducks  in  a  row.  Our  global  delivery  model  includes 
certifications  for  CMMI  Level  5  (in  progress),  Six  Sigma,  and  ISO  9001:2000. Then  there's  our  industry  expertise. 
Companies  in  retailing,  financial  services,  transportation,  logistics,  insurance,  hospitality  and  software  publishing/reselling 
can  attest  that  SPI  is  totally  aligned  with  your  needs.  If  you  want  strength  and  flexibility,  we'll  get  along  swimmingly. 

To  learn  more,  call  toll-free  866-316-5774,  write  sales@spiPortal.com  or  visit  www.spiPortal.com. 
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Secured  facilities  and 
rigomus  eniplw  ee  screening 
can  cut  the  risk. 

By  Patrick  Thibodeau 


TAKisr;  work  offshore  may  cut  costs,  but  it 
stili  comes  with  a  not-so-hidden  price. 

Asian  countries,  including  the  No.  I  out¬ 
sourcing  destination.  India,  have  weak  or 
untesk'd  intellectual  property  laws,  ineffi¬ 
cient  courts,  and  Hnancial  and  public  records  mccha* 
nisias  that  make  it  difficult  to  conduct  emph)yec 
backgn»und  checks. 

That  doe.sn't  mean  that  intellectual  property  sent 
to  reputable  offshore  developers  is  more  likely  to  be 
stolen  and  S4ild  than  it  is  here.  Sophisticated  US.  and 
Canadian  companies  have  lost  valuable  intellectual 
property  in  their  home  countries  K'Cause  of  dishon¬ 
est  employees  and  hackers.  Employees  in  India  and  I 
elsewhere  aa*n’t  any  more  dishonest  than  workers  I 
here.  But  because  tovrseas  court  sj-stems  and  laws  ! 
aren’t  as  stmng  as  in  those  the  US.  and  e\uluaiing 
p«'icntial  employees  is  more  difllcult  owrscas,  the  [ 
•>dds  of  inielleciuai  property  theft  could  be  higher.  ! 

US.  bu.sinesses  are  als*i  sending  valuable  ctide  to  ^ 
regions  of  the  world  with  high  piracy  rate's.  In  t:hina.  1 


for  instance.  ‘>2"o  of  the  software  installed  on  com¬ 
puters  is  pirated,  according  to  a  recent  study  by  IDC 
and  the  Business  Software  Alliance.  (But  China  i.s 
trying  to  overcome  (he  piracy  stigma:  sec  QuickLink 
49092.)  In  India,  the  piracy  rate  is  7.?^o.  and  in  the 
U.S..  it's  22'‘o.  the  lowest  rate  in  the  global  study. 

Physica)  Lockdown 

Imagining  the  ways  a  company  can  lose  intellectual 
property  is  similar  to  playing  a  war  game.  The  possi¬ 
bilities  for  physical  and  network-based  thefts  are 
endless.  Even  in  protected  environments,  employees 
can  memorize  credit  card  data  and  sell  it.  Product 
development  work  can  reveal  a  company’s  plan  for 
new  services.  Back  diwrs  can  be  built  into  programs. 

This  issue  has  given  rise  to  a  practice  by  outsourc¬ 
ing  firms,  particularly  in  India,  to  create  walled  com¬ 
pounds  that  re.scmble  government  intelligence  agen¬ 
cies  (QuickLink  49098).  The  compounds  have  guards 
and  gates,  multiple  levels  of  security  checks  and 
locked-down  information  systems  without  any  ports 
or  drives. 

US.  companies  couple  those  physical  protections 
with  deselopmcnt  methodologies  that  make  sure  no 
one  person  sees  all  the  code.  “The  code,  in  the  aggre¬ 
gate,  is  not  at  ri.sk.“  says  Nate  Leniz.  president  and 
CEO  of  Vcrticalnet  Software  Inc.,  a  maker  of  sourc¬ 
ing  and  supply  ch^  software  in  Malvern.  Pa. 

Bui  Lentz  says  he  also  wants  to  minimize  the  risk 
that  his  outsourcer's  employees  will  leave  the  com¬ 
pany.  High  turnover  can  hurt  productivity  and  add 
risks  as  well.  Lentz  treats  the  outsourcers’  employees 
as  "dual  employees.'’  by  including  them  in  company¬ 
wide  e-mail  distributions  and  town  hall  meetings. 

“It’s  our  belief  that  that  kind  of  structure  makes  them 
feel  much  more  a  part  of  the  whole,"  he  says. 

To  protect  his  company’s  intellectual  property. 
Lentz  is  using  Symphony  Services  Corp.  in  I^lo  Alto. 
Calif.,  which  employs  1,400  workers.  1.300  of  whom 
are  in  Bangalore.  India.  The  2-year-old  company  fo¬ 
cuses  on  pnwiding  services  for  software  firms  devel¬ 
oping  intellectual  property  overseas,  where  any  loss 
of  source  code  could  be  devastating. 

“The  reality  is  (intellectual  property)  has  to  be 
protected  no  matter  where  you  are.  Whether  you  are 
in  Cleveland.  Ohio,  or  Bangalore,  your  risks  arc  pret¬ 
ty  much  the  same,"  says  Gordon  Brooks,  Symphony’s 
president  and  CEO.  "And  I  take  e.xception  to  people 

who  would  infer  that  Indian  and _ 

Chinese  peiiplc  .ire  inherently  dis¬ 
honest  and  nw>re  likely  to  steal 
fn^m  you.” 

Symphony’s  Bangalore  facility 
has  47  guards  on  duty  at  all  times. 

Guard.s  at  its  client  centers,  where 
work  is  performed,  can  conduct 
physical  searches.  Tliere  are  sur¬ 
veillance  cameras  and  biometric 
p;»lm  readers  at  every  door.  In  .iddi- 
tion.  clients  have  the  right  con¬ 
duct  .security  audits.  Workstations 
don’t  have  external  drives  and 
USB  ports,  and  employees  can’t 
have  cell  phones  with  cameras. 

Since  .Symphony  is  basis)  in  the 
U.S..  disputes  arc*  settled  in  U.S. 
wsmrts.  says  Brooks. 


Rating  the  Risk 


HIGH  LEVEL  OF  F>R0TECTI0N  Ireland.  Canada. 
Australia  and  New  Zealand 

MEDIUM:  India.  Eastern  Europe  and  Mexico 
LOW:  The  Philippir>es,  China,  Russia  and  the  Baltics 


Safety  Nets 

RESTRICT  each  em[)love<‘‘s  access 
to  data  by  dividing  up  the  work 
CONDUCT  fogular  security 
audits  Vendor  security  staiv 
dards  may  slip  over  time 
DOCUMENT  codeownersbip 
Ibrough  carefully  craHed  leoal 
agreements 

LIMIT  turnover  of  aftshwe  workers 
by  maKinq  them  part  of  a  learri. 
TAKE  rvolhmq  for  granted  IF  a 
vendor  says  background  checks 
were  conducted.  Sake  steps  to 
confirm  it  yourself. 


[I 

Gartner  rates  the  level  of  intellectual  property  protection 
in  various  countries  as  either  low,  medium  or  high.  The 
security  ratings  measure  the  strength  of  a  country's  laws, 
its  security  standards  and  its  track  record  of  adherence 
to  both.  Among  the  factors  examined  are  encryption 
controls  and  the  stability  of  the  government.  Also  mea¬ 
sured  are  a  country's  intellectual  property  protections, 
including  patent  laws  and  enforcement  of  trade  secrets. 
Hit 

ME 

LO 

But  U,S.  companies  that  take  work  overseas  still 
face  risks.  Companies  can  conduct  background 
checks  of  prospective  U.S. -based  employees  through 
credit  histories  and  public  records,  but  India  doesn't 
have  the  credit  agencies  that  can  pul!  that  informa¬ 
tion  together.  "The  infrastructure  doesn't  exist  in  the 
financial  community,"  says  Panha  Iyengar,  a  Gartner 
Inc.  analyst  based  in  India.  Some  U.S.  companies  in 
India  hire  security  firms  to  investigate  job  candi¬ 
dates,  but  the  reliability  and  honesty  of  some  of 
those  firms  Is  questionable,  he  says. 

Cultural  differences  also  play  a  role.  Indian  em¬ 
ployees  routinely  share  salary  information  with  their 
co-workers,  and  an  employee’s  raise  is  often  public 
knowledge  in  a  company.  For  a  U.5.  company,  this 
cultural  difference  may  increase  the  risk  that  payroll 
processing  information  will  be  shared,  says  Iyengar. 

Measure  of  Risk 

US.  businesses  must  decide  upfront  how  much  risk 
they’re  willing  to  take,  says  Akiba  Stem,  an  outsourc¬ 
ing  expert  at  Shaw  Pittman  LLP  in  New  York.  If  a 
financial  services  firm  is  developing  a  banking  in¬ 
vestment  system  offshore,  it  has  to  consider  "how 
many  investment  banks  arc  going  to  buy  it  through 
an  illegal  source."  says  Stern.  Knowing  that  the  com¬ 
pany  is  working  on  such  a  system  might  have  com¬ 
petitive  value. 

Legal  protections  vary  from  country  to  countr>'. 
India’s  legal  system  is  closest  to  that  of  the  US.,  but 
the  courts  often  take  many  years  to 
resolve  issues,  and  their  reliability 
can  vary  from  region  to  region. 

U.S.  companies  h.ive  to  be  par¬ 
ticularly  careful  when  negotiating 
contracts  to  protect  copyrighted 
work.  It’s  possible  for  an  offshore 
provider  to  assert  ownership  of  de¬ 
velopment  work  and  even  demand 
royalties,  says  IVter  Chen,  an  out¬ 
sourcing  expert  at  McDermott  Will 
&  Emery  in  Palo  Alto. 

“Companies  have  to  be  mindful 
how  much  access  they  arc  giving  to 
an>'  third-party  contractor,  whether 
they  are  down  the  street  or  around 
the  world.”  sav-s  Chen.  “Once  the 
access  is  given,  it’s  hard  lo  reverse 
that.”  O  S0Y83 
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Secured  facilities  and 
rigorous  employee  screening 
can  cut  the  risk 

By  Patrick  Thibodeau 


Taking  woric  of&hore  nwy  cut  costs,  but  it 
still  comes  with  a  noi-so>hidden  price. 

Asian  countries,  including  the  Na  1  out¬ 
sourcing  destination.  India,  have  weak  or 
untested  intellectual  property  laws,  ineffi- 
cient  courts,  and  financial  and  public  records  mecha¬ 
nisms  that  make  it  difHculr  to  conduct  employee 
background  checks. 

That  doesn’t  mean  that  intellectual  property  sent 
to  reputable  ofi^ore  developers  is  more  likely  to  be 
stolen  and  sold  than  it  is  here.  Sophisticated  U5.  and 
Canadian  companies  have  lost  valuable  intellectual 
property  in  their  home  countries  because  of  dishon¬ 
est  employees  and  hackers.  Employees  in  India  and 
elsewhere  aren’t  any  more  dishonest  than  virorkers 
here.  But  because  overseas  court  systems  and  laws 
aren't  as  strong  as  in  those  the  U.$.  and  evaluating 
potential  employees  is  more  diincult  overseas,  the 
odds  of  intellectual  property  theft  could  be  higher. 

US  businesses  are  aik>  sending  valuable  code  to 
regions  of  the  world  with  high  piracy  rates.  In  China. 


for  instance.  92%  of  the  software  installed  on  com¬ 
puters  is  pirated,  according  to  a  recent  study  by  IDC 
and  the  Business  Software  Alliance.  (But  China  is 
trying  to  overcome  the  piracy  stigma;  see  QuickLink 
49092.)  In  India,  the  piracy  rate  is  73%.  and  in  the 
U.Sm  it’s  22%.  the  lowest  rate  in  the  global  study. 

Physical  Lockdown 

Imagining  the  ways  a  company  can  lose  intellectual 
property  is  similar  to  playing  a  war  game.  The  possi¬ 
bilities  for  physical  and  network-based  thefts  are 
endless.  Even  in  protected  environments,  employees 
can  memorize  credit  card  data  and  sell  it.  Product 
development  work  can  reveal  a  company’s  plan  for 
new  services.  Back  doors  can  be  built  into  programs. 

This  issue  has  given  rise  to  a  practice  by  outsourc¬ 
ing  firms,  particularly  in  India,  to  create  walled  com¬ 
pounds  that  resemble  government  intelligence  agen¬ 
cies  [QuickLink  49098].  The  compounds  have  guards 
and  gates,  multiple  levels  of  security  checks  and 
locked-down  information  systems  without  any  ports 
or  drives. 

U3.  companies  couple  those  physical  protections 
with  development  methodologies  that  make  sure  no 
one  person  sees  all  the  code.  “The  code,  in  the  aggre¬ 
gate.  is  not  at  risk."  says  Nate  Lentz,  president  and 
CEO  of  Verticalnet  Software  Inc.,  a  maker  of  sourc¬ 
ing  and  supply  chain  software  in  Malvern.  Pa. 

But  Lentz  says  be  also  wants  to  minimize  the  risk 
that  his  outsourcer’s  employees  will  leave  the  com- 
{^.  Hi^  turnover  can  hurt  productivity  and  add 
risks  as  well  Lentz  treats  the  outsourcers'  employees 
as  "dual  employees."  by  including  them  in  company- 
wide  e-mail  distributions  and  tovm  hall  meetings. 

“It’s  our  belief  that  that  kind  of  structure  makes  them 
feel  much  more  a  part  of  the  whole,"  he  says. 

lb  protect  his  company’s  intellectual  property. 
Lentz  is  using  Symphony  Services  Corp.  in  Palo  Alto. 
Calif.,  which  employs  1.400  workers,  1300  of  whom 
are  in  Bangalore,  India.  The  2-3rear-old  company  fo- 
cu^  on  providing  services  for  software  firms  devel¬ 
oping  intellectual  property  overseas,  where  any  loss 
of  source  code  could  ^  devastating. 

The  reality  is  (inrellectua!  property]  has  to  be 
protected  no  matter  where  you  are.  Whether  you  arc 
in  Cleveland,  Ohio,  or  Bangalore,  your  risks  are  pret¬ 
ty  much  the  same."  says  Gordon  Brooks.  Symphony’s 
president  and  CEO.  “And  I  take  exception  to  people 

who  would  infer  that  Indian  and _ 

Chinese  people  are  inherently  dis¬ 
honest  and  more  likely  to  steal 
from  you." 

Symphony’s  Bai^lore  facility 
has  47  guar^  on  duty  at  all  times. 

Guards  at  its  client  centers,  where 
work  is  performed,  can  conduct 
physical  searches.  There  are  sur¬ 
veillance  cameras  and  biometric 
palm  readers  at  every  door.  In  addi¬ 
tion,  clients  have  the  right  to  con- 
dua  security  audits.  Workstations 
don’t  have  external  drives  and 
USB  ports,  and  employees  can’t 
have  cell  phones  with  cameras. 

Since  Symphony  is  based  in  the 
US.,  disputes  are  settled  in  US. 
courts,  says  Brooks. 


Rating  the  Risk 

Gartner  rates  the  level  of  intellectual  property  protection 
in  various  countries  as  either  low.  medium  or  high.  The 
security  ratinos  measure  the  strength  of  a  country’s  laws, 
its  security  standards  and  te  track  record  of  adh^nce 
to  both.  Among  the  factors  examined  are  encryption 
controls  and  the  st^lity  of  the  government.  Ateo  mea¬ 
sured  are  a  country's  intellectual  property  protections, 
including  patent  laws  and  enforcement  of  trade  secrets. 
HMH  l£Va  OF  PROTKTIOIfc  Ireland,  CaiNMla, 
Australia  and  New  Zealand 


MEDMi;  India.  Eastern  Etvope  and  Mexico 
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LOW:  The  Phllipplnee.  China.  Russia  and  the  BaWes 


But  U3.  companies  that  take  work  overseas  still 
face  risks.  Companies  can  conduct  background 
checks  of  prospective  U3.-based  employees  through 
credit  histories  and  public  records,  but  India  doesn't 
have  the  credit  agencies  that  can  pull  that  informa¬ 
tion  together.  The  infriistniciure  doesn’t  exist  in  the 
financial  community."  says  Partha  Iyengar,  a  Gartner 
Inc.  analyst  based  in  India.  Some  U3.  companies  in 
India  hire  security  firms  to  investigate  fob  candi¬ 
dates,  but  the  reli^Uiry  and  honesty  of  some  of 
those  firms  is  questionable,  he  says. 

C^iitural  differences  also  play  a  role.  Indian  em¬ 
ployees  routinely  share  salary  information  with  their 
co-workers,  and  an  employee’s  raise  is  often  public 
knowledge  in  a  company.  For  a  U3.  company,  this 
cultural  difference  may  increase  the  ride  that  payroll 
processing  information  will  be  shared,  says  Iyengar. 

Measure  of  Risk 

U,S.  businesses  must  decide  upfront  how  much  risk 
they’re  willing  to  take,  says  Akiba  Stem,  an  outsourc¬ 
ing  expert  at  Shaw  Pittman  LLP  in  New  York.  If  a 
financial  services  firm  is  developing  a  banking  in¬ 
vestment  system  ofEshore.  U  has  to  consider  “how 
many  investment  banks  are  g^ing  to  buy  it  through 
an  illegal  source,"  says  Stem.  Knowing  that  the  com¬ 
pany  is  working  on  such  a  system  mi^t  have  com¬ 
petitive  value. 

Legal  protections  vary  from  country  to  country. 
India's  1^  system  is  closest  to  that  of  the  U.S..  but 
the  courts  often  take  many  years  to 
resolve  issues,  and  their  reliability 
can  vary  from  region  to  region. 

US.  companies  have  to  be  par- 
tkrulariy  careful  when  negotiating 
contracts  to  protect  copyrighted 
work.  It’s  possible  for  an  ofldiore 
provider  to  assert  ownership  of  de¬ 
velopment  work  and  even  demand 
royalties,  says  Peter  Chen,  an  out¬ 
sourcing  expert  at  McDcrmon  Will 
&  Emery  in  Palo  Alto. 

“Companies  have  to  be  mindful 
how  much  access  they  are  giving  to 
any  third-party  contractor,  whether 
they  are  doum  the  street  or  around 
the  world."  says  Chen.  “Once  the 
access  is  given,  it's  hard  to  reverse 
that."OS0»3 
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There  probably  isn’t  a 
support  group  for  them 
yet.  but  many  people  who 
sign  outsourcing  deals  ex¬ 
perience  a  similar  trajecto¬ 
ry  of  emotion  —  first  eu¬ 
phoria.  then  six  months  to 
a  year  later,  a  mix  of  buyer’s  remorse 
and  posthoneymoon  blues.  Expecta¬ 
tions  aren’t  met.  costs  aren’t  cut.  and 
performance  levels  aren't  achieved. 

Whatever  the  case,  nearly  half  of  the 
people  who  sign  an  outsourcing  con¬ 
tract  are  dissatisfied  at  the  end  of  the 
fust  year,  says  Ban  Perkins,  managing 
partner  at  Leverage  Partners  Inc.  in 
Louisville,  Ky..  and  a  Computerworld 
columnist.  Perkins  acknowledges  that 
those  percentages  aren’t  based  on  sci¬ 
entific  surveys,  but.  he  says,  ’i've  nev¬ 
er  had  anyone  refute  me.  and  I've  seen 
studies  that  put  those  numbers  higher." 

Some  argue  that  very  experienced 
outsourcing  clients  report  high  satis¬ 
faction  rates  (see  story,  next  page).  But 
considering  that  Gartner  Inc.  expects 
the  worldwide  outsourcing  market  to 
grow  by  7.9%  annually  to  $429.2  billion 
by  2008,  there’s  still  room  for  a  lot  of 
unhappy  relationships. 

The  challenge  for  companies  that 
plan  to  outsource,  then,  is  to  know  the 
a  problems  that  tend  to  occur  and  try  to 
i  avoid  them  or  at  least  recognize  them 


Prevent  contractor  performance  from  slipping 
after  the  honeymoon  is  over.  By  Mary  Brandel 
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early  so  they  can  be  resolved.  "Any¬ 
time  a  major  oiganizational  change  oc¬ 
curs.  there’s  a  period  of  time  before 
performance  gets  back  to  where  it 
used  to  be  or  higher,"  says  Wendell 
Jones,  a  senior  consultant  at  Cutter 
Consortium  in  Arlington,  Mass.  "The 
challenge  is  to  shorten  that  gap." 

With  that  in  mind,  here’s  a  list  of  the 
most  common  problems  that  can  crop 
up  after  the  honeymoon  is  over. 

PROBLEM  NO.  1: 

Unrealistic  Expectations 

A  common  miscooc^don  that  leads 
to  dissatisfaction  is  that  changes  will 
be  dramatic,  particularly  in  the  areas 
of  cost  reduction  and  improved  perfor¬ 
mance.  But  as  Dan  Laifm.  director  of 
application  outsourcing  at  Keane  Inc. 
in  Boston,  explains,  it  might  take  an 
outsourcer  three  to  four  months  just  to 
install  new  work  processes  and  meth¬ 
odologies.  "They  think  it's  like  a  li^t 
switch  going  on  and  the  world 
changes.”  Laffin  says,  but  svith  the 
transition  period,  service  improve¬ 
ments  only  become  visible  down¬ 
stream. 

Companies  also  overlook  the 
amount  of  time  it  takes  to  transfer 
"tribal  knowledge”  to  the  outsourcer, 
says  Pavan  Nigam.  who  co-founded 
Healtheon  (now  WebMD.com)  and  is 
now  CEO  of  Cendura  Ckiip.,  a  Moun¬ 
tain  View.  C^alif-based  applicadon 
management  solutions  fum.  "Out¬ 
sourcing  requires  a  lot  of  doctunenta- 
tion.  but  what  hurts  is  what  you  can't 
get  out  of  people's  heads.”  he  says.  "All 
this  software  and  IT  processes  have 
been  goii^  on  for  a  long  time,  and 
when  you  pass  it  along  to  someone 
else,  you  discover  there's  a  lot  of  con¬ 
text  that’s  missing.”  In  most  IT  ^ops. 
about  50%  of  knowledge  is  undocu¬ 
mented,  hfigam  estimates. 

Sharing  knowledge  and  coordinating 
IT  activities  among  system  architects, 
project  managers  and  the  development 
team  takes  even  more  time  when 
working  with  an  offshore  provider. 

Even  coordinating  software  releases 
and  replicating  the  IT  enviroiunent  be¬ 
tween  offshore  developers  and  internal 
IT  can  become  time-consuming  with¬ 
out  the  proper  infrastructure  in  place. 

PROBLEM  NO.  2: 

Poor  Communication 

Communication  isn’t  a  strong  suit  in 
most  organizations,  so  it’s  not  surpris¬ 
ing  that  a  lack  of  it  b  a  common  reason 
for  disappointment  "When  you  see 
er^agements  get  in  trouble  quickly,  it’s 
often  because  there  isn't  a  common 

Continued  on  page  48 
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Continued  from  page  46 
understanding  of  whal  the  goals  were, 
LalTm  says. 

The  problem  is  most  acute  when  the 
procurement  process  is  closely  con¬ 
trolled  by  IT  and  doesn't  involve  busi 
ness  leaders.  In  one  instance.  Jones  re- 
calK  users  didn’t  realize  that  the  IT 
group  had  been  outsourced  until  they 
noticed  longtime  IT  employees  wear¬ 
ing  noncompany  badges.  “They  won¬ 
dered  whether  it  would  cost  money  to 
ask  them  questions.”  Jones  says.  “It’s 
very  important  to  keep  users  informed 
as  to  what's  going  on.” 

When  the  main  goal  b  to  drive  down 
costs,  nUspercepHons  can  worsen  if  in¬ 
put  isn’t  gathered  from  the  people 
whose  day-to-day  jobs  will  be  affeaed 
by  the  deal  In  such  cases,  those  em¬ 
ployees  may  not  understand  the  goals, 
parameters  and  limitations  of  the  deal 
“We  sometimes  spend  the  first  three, 
four,  six  months  ^ucating  people  who 
have  to  live  with  us  on  a  day-to-day  ba- 
sb,”  Laffin  says. 

Ifroblcms  also  arise  when  the  con¬ 
tract  doesn't  reflect  business  objec¬ 
tives,  Consider  a  deal  based  on  lowered 
cost  of  service  and  the  introduction  of 
startdard  operating  procedures  in  an 
environment  where  business  users  are 
accustomed  to  flexible  procedures  and 
quick  response  times.  The  service 
provider  might  perform  dose  to  the 
deal,  but  it’s  nor  what  the  business  cus¬ 
tomers  arc  used  to  getting.”  says  Lorrie 
Scardina  a  Gartner  analyst  “So  IT 
ends  up  doing  a  lot  ofbackpedaling 
and  potentially  changing  service  Icveb 
and  the  scope  of  the  contract.” 

Ideally,  the  outsourcing  evaluation 


and  deebion-making  process  should 
involve  the  CIO.  business  representa¬ 
tives  and  the  major  stakeholders  of  the 
company  so  that  a  balance  can  be 
struck  among  saving  money,  improv¬ 
ing  performance  and  determining  the 
objectives  of  the  deal  Laffin  says. 

PROBLEM  NO.  3: 

Oversold  E^romises 

Let’s  not  kid  ourselves  —  outsourcing 
sales  teams  are  working  in  competitive 
situations,  and  they  arc  capable  of 
making  promises  they  can’t  keep  about 
what  they  will  provide  or  how  fast 
they  will  provide  it,  Scardino  says. 

In  other  cases,  salespeople  may  not 
spell  out  low-lcvel  requirements  — 
such  as  the  need  to  conform  to  certain 
procedures  or  use  cenain  tool  sets  — 
that  are  necessary  to  achieve  the 
promised  cost  savings.  But  what  if  the 
toob  or  methodologies  don’t  fit  into 
the  client’s  exbting  environment?  Or 
what  if  they  actually  add  another  layer 
of  work  that  adds  cost?  That  may  not 
be  recognized  until  the  people  who  do 
the  actual  work  get  involved. 

You  have  a  disconnect  between  the 
people  brokering  the  deal  and  the  ones 
making  the  deal  tvork,"  Scardino 
points  out. 

To  reduce  thb  disconnect.  Perkins 
suggests  writing  into  the  contract  the 
names  of  people  you  worked  with  and 
gained  confidence  in  while  negotiating 
the  deal  “Get  it  in  writing  that  he  or 
she  has  to  work  x  number  of  hours  per 
month  with  your  company  and  be  a 
part  of  the  team,"  Perkins  says. 

And  in  case  you  run  into  trouble, 
abo  get  in  writing  a  dear  escalation 
process,  Perkins  .suggests.  Include  the 
name  of  a  senior  individual  who  b  re¬ 
sponsible  for  doing  quality  assurance 
on  a  periodic  basis,  “^mcooe  ai  the 
VP  level  has  to  do  the  right  thing  for 
the  customer."  Perkins  points  out. 

The  escalation  process  b  tougher 
with  ofbhore  providers  because  it's  not 
always  clear  who  the  deebion-maker  b. 
'There  are  oceans,  cultures  and  time 
zones  in  the  way,  so  you  don't  have  the 
same  transparency,”  Perkins  says. 

PROBLEM  NO.  4: 

bnixecise  Contracts 

During  the  contract  negotiation  phase, 
the  outsourcer  and  client  are  usually 
seeing  eye  to  eye  and  feeling  very 
agreeable  toward  each  other.  Unfortu¬ 
nately.  thb  can  result  in  a  fa'mai  atti¬ 
tude  toward  getting  the  necessary  de¬ 
tails  in  writing  —  such  as  how  up¬ 
grades  will  be  handled  —  and  more  re¬ 
liance  on  “the  spirit  of  the  contract," 
says  Janice  Co.  a  prindpal  at  A.T.  Kear¬ 


ney  Inc.,  a  Chicago-based  management 
consulting  firm. 

“Nailing  down  the  contract  involves 
conflict,  and  people  don’t  like  con¬ 
flict,"  Co  says.  "TTiere’s  also  a  natural 
rcsbtance  because  they  want  to  get 
the  contract  signed  before  anybody 
changes  their  mind." 

The  problem  is.  as  staffing  changes 
and  the  contract  originators  are  no 
longer  there,  the  contract  itself  doesn’t 
always  provide  the  specifics  that  the 
new  people  need.  This  results  in  a  gen¬ 
eral  feeling  that  the  outsourcer  Isn’t 
providing  something,  even  if  it’s  living 
up  to  the  contract 

“If  I  conducted  a  quality  survey  and 
asked,  'Does  the  outsourcer  provide 
you  with  exactly  what's  in  the  contract?’ 
the  score  would  be  high."  Co  says.  “But 
if  the  question  was,  ’Are  you  getting 
what  you  want?’  you’d  say  na  The 
trouble  b.  you’re  scoring  something 
that’s  not  contractually  obligated.” 

While  it  may  be  impossible  to  get 
everything  into  the  original  contract. 
Paul  Garcy,  a  manager  at  A.T  Kearney, 
suggests  spelling  out  formal  proce¬ 
dures  while  the  original  panidpants 
arc  still  involved  for  previously  undoc¬ 
umented  things  such  as  governance 
and  change  management  processes. 

“You  need  to  turn  the  tribal  knowledge 
into  formal  processes,"  be  says. 


PROBLEM  NO.  5: 

Revolving-Door  Syndrome 

When  Nigam  was  at  Healtheon.  he 
says,  he  was  frustrated  by  the  rapid 
turnover  and  the  low  skill  levels  of  the 
oflshore  developers  assigned  to  hb 
company's  projects.  "They  were  like 
transient  nomads,  and  1  wanted  people 
who  belonged  to  a  team,"  Nigam  says. 
But  he  soon  learned  how  to  take  pre¬ 
ventive  measures. 

Nigam  began  stipubting  in  hb  con¬ 
tracts  that  be  had  the  right  to  interview 
everyone  who  worked  on  hb  compa¬ 
ny’s  projects  and  approve  or  reject 
them  and  that  he’d  accept  only  a  cer¬ 
tain  percentage  of  mobility  within  the 
company.  “It  was  clear  they  couldn’t 
shuffle  people  around."  Nigam  says. 

Of  course,  all  thb  dissatbfaction  may 
stem  from  a  source  that's  completely 
unrelated  to  the  outsourcing  provider 
chronic  compbiners.  “Sometimes, 
when  we're  getting  compbints  about 
our  level  of  service,  it  turns  out  to  be  a 
user  element  that  has  never  liked  the 
services  from  the  IT  department.” 

Jones  says.  “It’s  easy  to  blame  the  new 
guy  on  the  block."  O  50324 


Brandel  ba  Computerworld  contribut¬ 
ing  writer  in  Grand  Rapids.  Mich.  Con¬ 
tact  her  at  mary.bfwideI@comcastjtet. 
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W  A  2004  STUDY  by  Accenture  Ltd.. 
74%  of  experienced  outsorting 
dienis  said  they're  satisfied  with  the  re- 
sutb  they  achieve  in  the  hrst  year  of  an 
outsouremg  arrangement.  Those  expe¬ 
rienced  practibonais  also  said  the  ben- 
eftts  and  satisfaction  they  achieve  In* 
crease  over  time. 

The  consulting  firm  defined  experi¬ 
enced  outsourcing  clienb  as  those  that 
had  seven  or  more  years  of  expenerxe 
withoutsourcmg.Oftfw565ex8cu- 
ttvessurveyed.39%saidtheircorrv)a- 
Hies  leN  into  that  category.  The  rest 
said  their  companies  had  two  to  seven 
years  of  experience.  Here  are  some  ol 
the  study's  findings: 

■  The  experienced  outsourcers  consis- 
lently  gained  more  benefits  than  those 
with  two  to  seven  years  of  experience. 

■  Veteran  outsourcers  focus  on  three 
topobiedives:reducedoo6ts.im- 
boved  processes  and  the  abWty  to  fo¬ 
cus  on  thee  core  busmess.  A  laige  por¬ 
tion  of  them  meet  those  objectives. 

■  Most  veteran  outsourcers  define 
what  they  really  want  from  the  out¬ 
sourcing  arrangement  at  the  outset 


virtually  all  introduce  this  by  the  third 
year  of  an  arrangement. 

■  Beyond  attractive  pnerng.  compa¬ 
nies  require  a  variety  of  things  from 

outsourcing  partners,  inctudmg  prx- 
oss  expertise  and  industry  biowiedoe 
■After  three  years  of  outsourting.  per¬ 
formance  measures  and  the  quality  of 
the  outsourcing  relationship  are  more 
important  than  the  contract  as  a  prima¬ 
ry  management  tool.  Since  the  majority 
of  outsourcing  deals  must  be  renegoti¬ 
ated  betorelheendoflhecontracLre- 
spondents  said  that  it's  wse  to  accept 
and  plan  lor  the  change  in  adwice. 

■A  majority  (59%)  of  the  respondents 
said  they  use  nsk/reward  mcentrves 
to  spur  high  performance  from  their 
outsourcing  partners.  Incentives  may 
reward  extraordinary  performance  or 
er^courage  higher  levels  of  risk. 

■  Almost  three  quarters  (74%)  of 
those  surveyed  said  ther  companies 
(Be  moderate  b  exterrsive  governance; 
69%  said  they  have  an  executive  dedi¬ 
cated  to  the  management  of  the  out¬ 
sourcing  redatkmsNp. 

-MdfyBfande/ 
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The  highly  dependable  HP  BladeSystem  features  Intel*  Xean'"  Processars.  Naw  it's  possible  to  read  to  changing  business  conditions  in  real  tinre-in  seconds. 
Application  deployment  and  reprovisioning  become  an  automated  process.  From  single  console  remote  monogement  to  up  to  19%  power  sovings  -the  HP  BbdeSystem 
is  designed  to  sove  you  time,  money  and.  quite  possibly,  your  sanity.  Which,  of  course,  could  be  the  most  compelling  reason  of  oil  to  leorn  more. 
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WHEN  CRAFTING  an  OUl- 

sourcing  plan,  companies 
ftequently  make  three 
wo^orce  mistakes:  They 
don't  pay  enough  anen- 
tion  to  the  types  of  technical  sldUs  be* 
tng  transferr^  to  the  service  provider, 
they  don't  plan  for  the  potential  loss  of 
institutional  knowledge  within  their 
own  companies,  and  they  don't  pick 
the  right  IT  stalTcrs  to  manage  the  out¬ 
sourcing  relationship. 

‘‘One  of  the  key  problem  areas  is  tal¬ 
ent  drain,”  says  John  Kennedy,  a  part¬ 
ner  in  the  technology  transactions 
group  at  Morrison  &  Foerster  LLP  in 
New  York.  “In  their  rush  to  rid  them¬ 
selves  of  Doocore  functions,  some  com¬ 
panies  later  realize  they  are  shedding 
core  knowledge.”  A  lack  of  in-depth 
knowledge  about  a  company's  IT  and 
business  requirements  can  become 
problematic  if  senior  management  lat¬ 
er  decides  to  restore  those  activities 
io-faouse,  Kennedy  adds. 

How  do  you  avoid  losing  all  your 
best  technical  workers?  Robert  Zahler, 
a  partner  at  Shaw  Pittman  LLP.  who 
beads  the  law  firm’s  outsourcing  prac¬ 
tice  in  Washington,  advises  clients  to 
focus  on  retaining  technologUts  who 
have  a  rich  knowledge  of  the  organiza¬ 
tion's  IT  architecture,  design  and  plat¬ 
form  standards.  “What  you  outsource 
are  the  arms  and  legs”  of  the  IT  de¬ 
partment.  says  Zahler.  “Console  opera¬ 
tors  and  tape  hangers  are  fungible.* 

Still  he  acknowledges  that  compa¬ 
nies  have  a  tough  task  choosing  which 
personnel  to  retain.  “We  advise  our 
clients  not  to  cherry-pick  the  best  peo¬ 
ple  and  send  over  the  bottom  two- 
thirds,  because  you  want  the  supplier 
to  be  successful*  Zahler  says. 

Another  talent-retentioo  tactic  can  be 
built  right  into  an  outsourcing  contract. 
AccordiDg  to  Shawn  McCray,  a  partner 
at  Technology  Partners  Internationa! 
Inc.  in  The  Woodlands,  Texas,  some  of 
the  firms  he  represents  include  in  con¬ 
tracts  the  right  to  hire  back  former  IT 
workers  or  even  hire  spedfic  vendor 
employees  once  the  outsourcing  deal 
has  concluded.  That’s  one  way  that 
companies  try  to  hedge  their  bets  when 
transferring  out  this  talent,”  he  says. 

The  Emotional  Component 

Thieni  can  be  lost  in  other  ways  as 
well  Top  performers  left  behind  dur¬ 
ing  an  outsourcing  deal  could  quit  be¬ 
cause  they  no  longer  feel  loyalty  to  the 
company.  Accordiz^  to  a  June  2004 
Gartner  Inc.  off^re  outsourcing  re¬ 
port  organizations  should  be  careful 
not  to  neglect  the  IT  staffers  who  re¬ 
main.  They  will  be  under  stress  as  they 


Drain 

How  to  avoid  losing  your  best  and  bri^test  in 
an  outsourcing  d^.  By  Thomas  Hannan 


watch  their  co-workers  lose  their  jobs. 
Some  companies  use  incentive  pro¬ 
grams  to  ensure  that  valued  staffers 
are  taken  care  of  (Quicklink  50236]. 

Institutional  knowledge  —  those 
nuggets  of  information  about  how  a 
certain  program  was  written  or  bow 
that  cranky  machine  works  —  is  im¬ 
portant  to  hold  on  ta  The  hard  part  is 
figuring  out  iriiich  staffers  have  iL 

Commoditized  IT  operations  such  as 
desktop  support  require  little  institu¬ 
tional  knowledge.  But  strategic  insists 
about  the  steps  that  a  company  takes  to 
harness  business  intell^oce  about  its 
customers  should  be  carefully  docu¬ 
mented.  says  Stan  Lepeak,  an  analyst  at 
Meta  Group  Inc.  in  Smmford.  Conn.  Rir 
example,  business  analysts  who  have 
insights  into  bow  a  company  obtains 


competitive  information  about  its  cus¬ 
tomers*  purchasii^  habits  are  valuable. 

“You  Wouldn’t  allow  that  institution¬ 
al  knowledge  to  reside  in  just  a  few 
heads,”  he  says.  And  prior  to  outsourc¬ 
ing,  senior  IT  managers  should  ensure 
that  they  document  as  much  as  they 
can  about  the  processes  that  support 
business  performance,  such  as  ^ta 
mining  e^rts,  adds  Lepeak. 

McCray  also  advises  companies  b> 
ensure  that  their  outsourcing  vendors 
provide  ongoing  training  and  job  shad¬ 
owing  so  that  critical  institudonal 
knovdedge  isn’t  lost  if  an  IT  worker 
were  to  leave  the  outsourcer. 

It's  also  important  to  make  sure  that 
the  outsourcing  vendor  keeps  IT  work¬ 
ers  who  retain  cultural  kno^edge 
about  the  work  that  individual  employ¬ 


ees  perform,  says  Gartner  Inc.  analyst 
Diane  Morello.  “Outsourcing  cus¬ 
tomers  tend  to  think  about  the  knowl¬ 
edge  being  about  technology,  but  it’s 
much  broader  than  that,”  she  says.  For 
instance,  some  Gartner  clients  that  out¬ 
source  IT  activities  “come  to  the  sharp 
realization  that  they've  wrapped  up 
and  packaged  away  people  who  were 
centra]  to  critical  decision-making." 

Vfetching  the  Outsourcer 

When  companies  outsource  a  big 
chunk  of  their  IT  operations,  they  typi¬ 
cally  retain  a  handful  of  senior  IT  ex¬ 
ecutives  to  manage  those  relation^ps. 
The  problem  is,  the  people  who  are 
kept  rarely  have  the  skills  to  manage 
outsourcing  relationships  that  are 
laden  with  contractual  service-level 
requirements,  says  Lepeak. 

“We  suggest  that  you  should  be 
spending  5%  to  7%  of  the  outsourcing 
spend  on  managii^  the  relationship. 
But  it’s  hard  to  get  that  across*  to  cost- 
focused  senior  executives,  he  says. 

The  skills  needed  to  manage  an  out¬ 
sourcing  relationship  are  different 
from  those  needed  to  manage  relation¬ 
ships  with  product  vendors,  says 
Morelia  “It’s  a  different  animal.”  she 
says.  “You  need  people  with  service 
delivery  experience."  Indeed,  project 
managers  of  offshore  outsourcing  ef¬ 
forts  ^ould  have  strong  contract  man¬ 
agement  skills,  as  well  as  international 
experience  and  language  and  human 
resources  skills,  according  to  a  May 
2004  [DC  report. 

It’s  also  a  mistake  to  assign  people 
with  experience  managing  functions 
such  as  application  development  or 
data  center  operations  to  managp  out¬ 
sourcing  relationships,  says  Zahler. 
“Many  times  they  b^ome  microman¬ 
agers.”  be  says.  Instead,  Shaw  Pittman 
advises  clients  to  give  the  job  of  man¬ 
aging  the  outsourcer  to  someone  with 
corporate  expertise  or  to  someone  who 
has  experience  managing  relationships 
with  third-party  services  Turns. 

But  sometimes,  all  the  worrying 
about  workforce  issues  is  for  naught. 
Some  organizations  outsource  after 
benchmarking  or  other  metrics  help 
confirm  that  an  in-house  IT  activity, 
such  as  data  center  operations,  is  per¬ 
forming  below  expectations.  “In  some 
cases,  there  isn't  ^t  much  knowledge 
to  lose,”  says  Lepeak.  O  50439 
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Backlash  Concerns 
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_  Unfair 
Treatment 


LET’S  SAY  your  colleague,  Winthrope,  does  quality  assurance  testing  on  Java 
code  in  the  production  process  of  your  company’s  widgets.  You,  on  the  other 
hand,  run  QA  tests  on  J2EE  applications  for  your  CFO’s  customized  ERP  sys¬ 
tems.  One  day,  the  CFO  unveils  a  plan  to  outsource  the  making  of  widgets  to 
a  Chinese  manufacturer  and  offshore  all  software  QA  work  to  India.  Bummer 
for  you  and  Winthrope.  dude.  Well,  for  you.  anyway. 


You  see.  the  CFO  arranged  for  workers  affected  by  the 
Chinese  deal  to  qualif\'  for  benents  from  the  Trade  Ad¬ 
justment  Assistance  Act  (TAAA).  which  Is  administered 
by  the  U.S.  Department  of  Labor.  Because  Winthropc’s 
layoff  can  be  pegged  to  the  txrmpany's  sending  widget- 
making  skills  overseas,  he  qualifies  for  some  righteous 
benefits.  How  does  104  weeks  of  new  job  training,  re¬ 
location  as-sistance.  income  support,  health  benefits 
and  much  more  sound?  Pretty  gt>od.  For  Winthrope. 

Oh.  you'll  get  to  go  to  the  unemployment  office  to 
receive  tcmpL»rar>'  benefits.  And  you'll  likely  run  into 
Winthrope.  because  he  also  gets  the  same  benefits  you 
do.  In  fact,  you're  likely  to  encounter  quite  a  few  col¬ 
leagues.  given  that  the  Brookings  Institu¬ 
tion  in  Washington  estimates  that  through 
much  of  this  decade,  “offshoring  could  re¬ 
sult  in  roughly  250.000  layoffs  a  year."  TTiis 
at  a  time  when  the  Department  of  Com¬ 
merce  has  reported  a  historic  decline  in  IT 
jobs,  from  6.24  million  in  19‘)9  to  5.95  million 
in  2002. 

It  was  1962  when  the  Kennedy  admini.s- 
tration  signed  off  on  the  first  TAAA.  The 
.let's  passage  acknowledged  that  the  govern¬ 
ment  owed  workers  extra  assistance  when 
their  jobs  were  lost  because  of  national 
trade  policies.  TTte  catch  in  1962.  as  it  still  is 
today,  is  that  you  qualify  for  TAAA  goodies 
only  if  you're  involved  in  (he  making  of  a  thing.  In  1962. 
according  to  the  Bureau  of  Labor  Statistics,  about  40% 
of  working  Americans  were  engaged  in  manufacturing: 
they  were  the  mighty  core  of  a  U.S.  economy  that  was 
opening  its  doors  to  cheaper  imports. 

Tliai  has  changed.  Services  arc  the  mighty  core  of 
today's  economy.  According  to  The  C/A  World  Fact- 
book.  72.5%  of  the  SIO  trillion-plus  U.S.  GDP  is  generat¬ 
ed  in  the  service  sector,  which  includt's  call  center 
workers,  software  developers,  sysadmins  and  every 
other  IT  professional  whose  job  is  going  overseas. 
There  have  been  bipartisan  attempts  to  get  TAAA-like 
benefits  to  workers  laid  off  because  of  offshore  out¬ 
sourcing.  but  they  haven’t  succeeded.  So  if  you  lose 
your  job  to  a  worker  in  Bangalore,  you  won't  see  a 


nickel  of  the  S220  million  in  the  Labor  Department’s 
job  training  budget  —  unless,  like  W'inthn>pe.  you  can 
show  how  your  K>b  directly  contributed  to  making  the 
thing  the  company  now  produces  in  Shanghai. 

Tills  situation  is  simply  not  fair.  Why  is  W'inthrope's 
job  deserving  of  TAAA  benefits  and  not  yours?  Both 
have  been  tost  as  a  result  of  trade  policies  promulgated 
by  both  Democrats  and  Republicans  in  the  White 
House  and  Congress.  As  we  open  our  borders  to  im¬ 
porting  service  work,  we  must  include  among  TAAA 
beneficiaries  those  adversely  affected  U.S.  workers  too. 

losh  Bivens,  an  economist  at  the  Economic  Policy 
Institute  in  Washington,  says  pan  of  the  problem  is  that 
the  government  does  "a  bad  job  of  measur¬ 
ing  the  effect  of  trade  in  the  service  sector." 
An  assembly-line  worker  “can  point  to  data 
that  shows  a  flood  of  impons  leading  to  a 
lost  job."  ho  says.  An  IT  worker  can't. 

Trying  to  measure  the  effect  of  imported 
services  on  a  single  sector,  such  as  IT.  Isn’t 
going  to  be  easy.  Indeed,  a  Government  Ac¬ 
countability  Office  study  released  in  Sep¬ 
tember  was  inconclusive  about  whether 
an  IT  service-sector  labor  problem  exists 
<  wwH'.gao.gov/neu’.  items/d04932.pdf). 

Welt,  the  GAO  may  still  think  more  re¬ 
search  needs  to  be  done,  but  I  know  and 
you  know  and  even  Winthrope  knows  that 
IT  jobs  arc  being  lost  because  of  national  trade  policies 
—  such  as  those  that  dictate  how  foreign  operations  are 
taxed  —  that  encourage  moving  jobs  overseas.  And  I 
think  the  government  should  treat  IT  workers  as  fairly 
as  it  treats  those  who  lose  their  jobs  making  things. 

Bivens  says  the  only  way  to  be  truly  fair  is  to  make 
TAAA  benefits  available  to  any  worker  in  any  sector 
whose  job  is  eliminated.  I  agree.  Alas,  the  budget 
deficits  projected  from  now  until  eternity  make  such 
largess  unlikely.  But  targeted  lobbying  can  work. 

So  if  your  job  is  in  jeopardy,  or  if  you've  already  k>st 
it  to  an  offshore  operation,  tell  your  elected  officials  to 
change  TAAA  so  that  it  applies  to  IT  workers.  It  won't 
do  much  to  stop  offshoring,  but  it’ll  help  stop  the  un¬ 
fairness  of  this  government  program.  O  S0(KI7 
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_  Unfair 
Treatment 

LET'S  SAY  your  colleague,  Winthrope,  does  quality  assurance  testing  on  Java 
code  in  the  production  process  of  your  company's  widgets.  You,  on  the  other 
hand,  run  QA  tests  on  J2EE  applications  for  your  CFO's  customized  ERP  sys¬ 
tems.  One  day,  the  CFO  unveils  a  plan  to  outsource  the  making  of  widgets  to 
a  Chinese  manufacturer  and  offshore  all  software  QA  work  to  India.  Bummer 
for  you  and  Winthrope,  dude.  Well,  for  you,  anyway. 


You  see.  the  CFO  arranged  for  workers  affected  by  the 
Chinese  deal  to  quaiUy  for  benefits  from  the  Ttade  Ad¬ 
justment  Assistance  Act  (TAAA),  which  is  administered 
by  the  U.S.  Department  of  Labor.  Because  Winthrope's 
layoff  can  be  pegged  to  the  company's  sending  widget¬ 
making  skills  overseas,  he  qualifies  for  some  ri^teous 
benefits.  How  does  104  weeks  of  new  job  training,  re¬ 
location  assistance,  income  support,  health  benefits 
and  much  more  sound?  Pretty  good.  For  Winthrope. 

Oh.  you’ll  get  to  go  to  the  unemployment  office  to 
receive  temporary  benefits.  And  you'll  likely  run  into 
Winthrope.  because  he  also  gels  the  same  braefits  you 
da  In  fact,  you're  likely  to  encounter  quite  a  few  col¬ 
leagues.  given  that  the  Brookings  Institu¬ 
tion  in  Washington  estimates  that  through 
much  of  this  decade.  “ofiMiorii^  could  re¬ 
sult  in  roughly  250,000  layoffs  a  year.”  This 
at  a  time  when  the  Department  of  Com¬ 
merce  has  reported  a  historic  decline  in  IT 
jobs,  ffom  6.24  million  in  1999  to  5.95  million 
in  2002. 

It  was  1962  when  the  Kennedy  adminis¬ 
tration  signed  off  on  the  first  TAAA.  The 
act's  passage  acknowledged  that  the  govern¬ 
ment  owed  workers  extra  assistance  when 
their  jobs  were  lost  because  of  national 
trade  policies.  The  catch  in  1962,  as  it  still  is 
today,  is  that  you  qualify  for  TAAA  goodies 
only  if  you're  involved  in  the  making  of  a  thing.  In  1962, 
according  to  the  Bureau  of  Labor  Statistics,  about  40% 
of  worid^  Americans  were  engaged  in  manufacturing: 
they  were  the  mighty  core  of  a  U.5.  economy  that  was 
opening  its  doors  to  cheaper  imports. 

That  has  changed.  Services  are  the  mighty  core  of 
today's  economy.  According  to  The  CIA  World  Fact- 
book,  72.5%  of  the  $10  trillion-plus  U.S.  GDP  is  generat¬ 
ed  in  the  service  sector,  which  includes  call  center 
workers,  software  developers,  sysadmins  and  every 
other  IT  professional  whose  job  is  going  overseas. 
There  have  been  bipartisan  attempts  to  get  TAAA-Uke 
benefits  to  workers  laid  off  because  of  o6kbore  out¬ 
sourcing.  but  they  haven’t  succeeded.  So  if  you  lose 
your  job  to  a  worker  in  Bangalore,  you  won’t  see  a 
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nickel  of  the  $220  million  in  the  Labor  Department’s 
job  training  budget  —  unless,  like  Winthrope.  you  can 
show  how  your  job  directly  contributed  to  making  the 
thing  the  company  now  produces  in  Shanghai. 

This  situation  is  simply  not  &ir.  Why  is  Winthrope's 
job  deserving  of  TAAA  benefits  and  not  yours?  Both 
have  been  lost  as  a  result  of  trade  policies  promulgated 
by  both  Democrats  and  Republicans  in  the  White 
House  and  Congress.  As  we  open  our  borders  to  im¬ 
porting  service  work,  we  must  include  among  TAAA 
beneficiaries  those  adversely  affected  U.S.  workers  too. 

Josh  Bivens,  an  economist  at  the  Economic  Policy 
Institute  in  Washington,  says  part  of  the  problem  is  that 
the  govenuneni  does  “a  bad  job  of  measur¬ 
ing  the  effect  of  trade  in  the  service  sector.” 
An  assembly-line  worker  ‘'can  point  to  data 
that  shows  a  flood  of  imports  leading  to  a 
lost  job,"  he  says.  An  IT  worker  can’t 
Trying  to  measure  the  effect  of  imported 
services  on  a  single  sector,  such  as  IT.  isn’t 
going  to  be  easy.  Indeed,  a  Government  Ac¬ 
countability  Office  study  released  in  Sep¬ 
tember  was  inconclusive  about  whether 
an  IT  service-sector  labor  problem  exists 
(www.gao.gov/hew.irems/dff4932.pd0. 

WeU,  the  GAO  may  still  think  more  re¬ 
search  needs  to  be  done,  but  I  know  and 
you  know  and  even  Winthrope  knows  that 
IT  jobs  are  being  lost  because  of  national  trade  policies 
—  sudi  as  those  that  dictate  how  foreign  (^radons  are 
taxed  —  that  encourage  moving  jobs  overseas.  And  1 
think  the  government  should  treat  IT  woikers  as  fiurly 
as  it  treats  those  who  lose  their  jobs  making  things 
Bivens  says  the  only  way  to  be  truly  foir  is  to  make 
TAAA  benefits  available  to  any  worker  in  any  sector 
whose  job  is  eliminated.  I  agree.  Alas,  the  budget 
deficits  projected  from  now  until  eternity  make  such 
largess  unlikely.  But  targeted  lobbying  can  work. 

So  if  your  job  is  m  jeopardy,  or  if  you've  already  lost 
it  to  an  offshore  operation,  tell  your  elected  oflicials  to 
change  TAAA  so  that  it  applies  to  IT  workers.  It  won't 
do  much  to  stop  of&boring,  but  it'll  help  stop  the  un¬ 
fairness  of  this  government  program.  O  50007 
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PC  Rollout 

Middle  East  and  A^ca,  and  it 
expects  to  swap  out  a  similar 
number  of  systems  in  North 
America  by  year's  end.  The 
remaining  systems  are  due  to 
be  replaced  by  the  end  of 2005. 

DaimlcrChrysler's  use  of 
multiple  versions  of  Windows 
on  hardware  with  a  range  of 
capabilities  has  made  it  difTl- 
cult  to  quickly  install  software 
updates  and  patches,  Morrotti 
said.  He  noted  that  applying  a 
single  patch  to  all  of  the  com¬ 
pany's  systems  can  take  any¬ 
where  from  10  to  30  days. 

Once  the  standardiaation  proj¬ 
ect  is  complete,  IT  staffers 
hope  to  be  able  to  distribute 
patches  in  just  one  day. 

The  hodgepodge  of  PCs  has 
also  complicated  eHorts  to  roll 
out  enterprise  applications, 
such  as  new  human  resources 
and  manufacturing  systems, 
according  to  Morrotti  He  said 
DaimlerChrysler  typically  has 
to  do  considerable  integration 
work  to  ensure  that  new  appli¬ 
cations  will  work  on  all  sys¬ 


tems.  That  slows  down  the 
work  and  results  in  added  la¬ 
bor  costs. 

“Our  ability  to  roll  out  glob¬ 
al  systems  quickly . . .  and  to 
respond  to  the  needs  of  the 
marketplace  was,  in  fact,  in¬ 
hibited  by  the  heterogeneous 
future  of  our  infrastructure." 
Morrotti  said.  He  added  that 
standardizing  PCs  “gives  us 
the  opportunity  to  develop 
systenjs  without  putting  geo¬ 
graphical  and/or  business  unit 
boundaries  around  them." 

As  part  of  PC  Global 
DaimlerChrysler  is  using  a 
software  distribution  infra* 
structure  that  irurludes  Micro¬ 
soft  Corp.'s  Systems  Manage¬ 
ment  Server  and  Active  Direc¬ 
tory  technologies  as  well  as 
other  tools.  SMS  and  Active 
Directory  are  critical  for  the 
rapid  deployment  of  software 
updates  and  patches,  accord¬ 
ing  to  Morrotti 

“In  many  companies,  desk¬ 
top  management  is  still  a  man¬ 
ual  process."  said  fean-Pierre 
Garbani,  an  analyst  at  For-  j 

Tester  Research  Inc.  Garbani  I 

added  that  he  thinks  Daimler-  I 
Chrysler  is  ahead  of  the  curve  ' 


Electric  Utilities  Eye 
Broadband  Rollouts 


Weigh  IT  business 
benefits  against 
technology  risks 


Executives  at  some  electric 
utilities  pointed  last  week  to  a 
variety  of  potential  IT  and 
business  benefits  that  could 
be  gained  from  emerging 
broadband  over  power  toe 
(BPL)  capabilities,  including 
improved  support  for  applica¬ 
tions  such  as  load  forecasting. 

But  uncertainties  surround¬ 
ing  technical  challenges  and 
cu.storoer  adoption  left  other 
attendees  at  the  Plans  Energy 


Information  Technology  Con¬ 
ference  here  questioning  the 
viability  of  BPL  installations. 

Tun  Frost,  director  of  cor¬ 
porate  planning  at  Consolidat¬ 
ed  Edison  Inc.  said  the  New 
York-based  utility  is  about  to 
launch  application  trials  using 
BPL  technology  in  Manhattan. 
Frost  is  hopeful  that  BPL  will 
help  Consolidated  Edison 
forecast  power  loads,  manygp 
demand  and  predict  electrical 
equipment  failures  before  they 
occur.  "It’s  like  having  a  real¬ 
time  asset  management  sys¬ 
tem."  he  said. 

Potential  business  gains  cit¬ 
ed  by  BPL  proponents  include 
the  ability  to  tap  existing  pow¬ 


among  multinational  compa¬ 
nies  in  dealing  with  the  need 
to  better  automate  the  process 
of  managing  PCs. 

The  big  c^acle  for  IT 
managers  is  the  upfront  cost 
of  standardizing  systems,  said 
IDC  analyst  Tim  Gricser.  “It 
costs  money  to  bring  every¬ 
thing  forward."  Grieser  said, 
adding  that  a  uniform  PC  en¬ 
vironment  could  also  "raise 
your  exposure  to  certain  vul¬ 
nerabilities."  But  those  securi¬ 
ty  risks  are  ofTsel  by  the  abilit>'  I 
to  more  quickly  distribute  I 
patches,  he  said.  ^ 

Identifying  Benefits 

DaimlerChrj^lcr  isn't  disclos¬ 
ing  the  expected  cost,  but 
Morrotti  said  executives  think 
that  the  standardization  eflfort 
will  save  the  company  at  least 
25%  on  what  it  now  spends  to 
manage  its  deskte^  systems. 

Other  anticipated  benefits 
won't  necessarily  show  up  in 
the  bottom  line,  such  as  the 
opportunity  to  redeploy  IT 
staiTcrs  who  now  must  go 
from  PC  to  PC  to  update  sys¬ 
tems.  Morrotti  said.  In  addi¬ 
tion.  standardizing  PCs  could 


er  distribution  infrastructures 
for  new  services  and  a  steep 
reduction  in  equipment  costs. 

One  of  the  e^iest  BPL 
adopters  is  the  electric  uiUlcy 
for  the  city  of  Manassas,  Va. 
Manassas  signed  an  agree¬ 
ment  in  July  with  Chantilly, 
Va.-based  Communication 
Technologies  Inc.  (ComTek) 
to  extend  BPL  services  across 
the  dry's  power  lines  to  15,000 
potential  residential  and  com¬ 
mercial  locations,  said  John 
Hewa,  an  assistant  director 
within  the  local  government. 

ComTek  began  installing 
the  BPL  equipment  in  Septem¬ 
ber.  Walter  Adams,  a  ComTek 
vice  president,  said  he  expects 
to  achieve  10%  penetration  of 
the  Manassas  broadband  mar¬ 
ket  by  July.  Under  the  agree¬ 
ment.  the  dty  draws  10.5%  and 
25%  of  the  revenue  generated 
by  consumer  and  commercial 


DaimlerChrysler’s 
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help  automotive  engineer? 
collaborate  on  projects. 

The  PC  vendors  involved  in 
the  project  include  Dell  Inc.. 
Hewlett-Packard  Co,  IBM  and 
Siemens  AG.  Morrotti  said 
DaimicTChrysler  also  looked 


BPL,  respectively.  Adams  said 
ComTek  expects  a  three-  to 
seven-year  return  on  invest¬ 
ment  from  its  $1.5  million  out¬ 
lay  for  BPL  equipment. 

Equipment  at  Risk 

Some  utUjt>‘  executives  voiced 
skepticism  about  the  rmaodal 
returns  BPL  investments  can 
generate,  partly  because  of  the 
environmental  risks  that  poH- 
er  lines  routinely  face. 

For  example,  since  the  four 
hurricanes  that  hit  Florida  in 
August  and  September.  Flori¬ 
da  Power  &  light  Ca  has  re¬ 
placed  2JOOO  miles  of  power 
lines  and  13,000  poles,  said 
Phil  Sbek.  BPL  project  manag¬ 
er  at  the  Juno  B»ch-bascd 
utility.  “You  have  to  factor  that 
into  your  thinking."  he  said. 

Slack  has  other  concerns, 
too,  such  as  the  chance  that 
above-ground  power  equip- 


at  thin  clients  and  hasn't  ruled 
out  using  them  in  some  in¬ 
stances.  But  he  added  that  full 
PCs  —  or  “rich  clients"  —  re¬ 
main  critical  to  ilv  automaker 
“because  of  the  need  to  have 
information  as  close  to  the 
source  as  possible." 

The  standardization  plan 
calls  for  installing  a  “core 
load"  of  software  on  each  PC. 
brgety  built  around  Microsoft 
products  (see  box).  BtTond 
the  core  configuration,  the 
company  will  add  what  it  calls 
an  “extended  load"  of  regional 
adaptations  to  machines.  Rut 
any  software  must  be  fully 
tested  for  inieropcrability  be¬ 
fore  it's  installed. 

DaimlerChrysler  isn't  out¬ 
sourcing  desktop  management 
but  will  “co-source"  some  of 
the  work.  For  example,  in 
North  America.  Dell  will  de¬ 
ploy  hardware  but  the  auto¬ 
maker  win  keep  control  ofits 
help  desks. 

Morrotti  said  Daimler- 
Chrysler  examined  the  idea  of 
outsourcing  its  entire  PC  in¬ 
frastructure  but  decided  that 
it  wouldn't  work  because  of 
global  complexities.  O  50750 


ment  may  rust  within  months 
because  of  exposure  to  salt¬ 
water  and  humidity  along  the 
coast.  The  technolog>'  isn't 
ready  yet  for  Honda,  bur  it's 
getting  close,"  Slack  said. 

Still,  other  factors  support 
the  potential  viability  of  BPL 
instalbtions.  Last  month,  the 
Federal  Communications 
Commission  issued  a  ruling 
allowing  utilities  to  provide 
BPL  services  as  long  as  tbe>’ 
adhere  to  power- line  radbtion 
emission  restrictions  and  fol¬ 
low  consistent  and  rcpcauble 
measurement  guidelines. 

The  FCC  has  essentially  giv¬ 
en  us  the  green  light  to  go  for¬ 
ward,"  said  Bren  Kilbourne. 
director  of  regulatory  services 
and  assocbic  counsel  for  the 
United  Power  Line  Coundl  a 
Washington-based  alliance  of 
utilities  and  technology  compa¬ 
nies  involved  in  BI*L  O  S07K 
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PC  Rollout _ 

Middle  East  and  Africa,  and  it 
expects  to  swap  out  a  similar 
number  of  systems  in  North 
America  by  year's  end.  The 
remaining  systems  arc  due  to 
be  replaced  by  the  end  of  2005. 

DaimlerChrysk-r's  use  of 
multiple  versions  of  Windows 
on  hardware  with  a  range  of 
capabilities  has  made  it  diffi¬ 
cult  to  quickly  install  .software 
updates  and  patches.  Morrotti 
said.  He  noted  that  applying  a 
single  patch  to  all  of  the  com¬ 
pany’s  s^-stems  can  take  any¬ 
where  from  10  to  30  days. 

Once  the  standardization  proj¬ 
ect  is  ct>mpletc.  IT  staffers 
hope  to  be  able  to  distribute 
patches  in  just  one  day. 

The  hodgepodge  of  PCs  has 
also  complicated  efforts  to  roll 
out  enterprise  applications, 
such  as  new  human  resources 
and  manufacturing  systems, 
according  to  Morrotti.  He  said 
DaimlerChryslcr  typically  has 
to  do  considerable  integration 
work  to  ensure  that  new  appli¬ 
cations  will  work  on  all  sys¬ 


tems.  TTiat  slows  down  the 
work  and  results  in  added  la¬ 
bor  cost.s. 

"Our  ability  to  roll  »>ut  glob¬ 
al  systems  quickly . . .  and  to 
respond  to  the  needs  of  the 
marketplace  was.  in  fact,  in¬ 
hibited  by  the  heterogeneous 
nature  of  our  infrastructure," 
Morrotti  said.  He  added  that 
standardizing  PCs  "gives  us 
the  opportunity  to  develop 
systems  without  putting  geo¬ 
graphical  and  or  business  unit 
boundaries  around  them." 

As  part  of  PC  Global. 
DaimicrChr>'sler  is  using  a 
software  distribution  infra¬ 
structure  that  includes  Mienv- 
soft  Corp.'s  Systems  Manage¬ 
ment  Server  and  Active  Direc¬ 
tory  technologies  as  well  as 
other  lottls.  SMS  and  Active 
Directory  are  critical  for  the 
rapid  deployment  of  sttfiwarc 
updates  and  patches,  accord¬ 
ing  to  Morrotti. 

“In  many  companies,  desk¬ 
top  management  is  still  a  man¬ 
ual  process,"  said  Jean-Pierre 
Gaibani,  an  analyst  at  Ft)r- 
rester  Research  Inc.  Garbani 
added  that  he  thinks  Daimler- 
Chrysler  is  ahead  of  the  curve 


among  multinai»>nal  compa- 
,  nies  in  dealing  with  the  need 
j  to  better  automate  the  pnvess 
I  ol  managing  P(  A, 

I  The  big  obstacle  for  IT 
'  managers  is  the  upfront  cost 
of  standardizing  systems  said 
IDC  analyst  Tim  Griescr.  "It 
I  costs  money  to  bring  every- 
I  thing  forward."  Griescr  said. 

I  adding  that  a  uniform  IH"  en¬ 
vironment  could  also  "raise 
your  e\pi»suri*  to  certain  vul¬ 
nerabilities."  But  those  securi¬ 
ty  risks  arc  offset  by  the  ability 
to  more  quickly  distribute 
patches,  he  s;iid. 

Identifying  Benefits 

DaimlerChryslcr  isn’t  disclos¬ 
ing  the  expected  cost,  but 
Morrotti  said  executives  think 
that  the  standardization  effort 
will  save  the  company  at  least 
25^t>  on  what  it  now  spends  to 
manage  its  desktop  systems. 

Other  anticipated  benefits 
w'on'i  necessiirily  show  up  in 
the  bottom  line,  such  as  the 
opportunity  to  redeploy  IT 
.staffers  who  now  must  go 
fri'tm  PC  to  PC  to  update  sys¬ 
tems.  Morrotti  said.  In  addi¬ 
tion.  standardizing  PCs  could 
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Electric  Utilities  Eye 
Broadband  Rollouts 


Weigh  IT  business 
benefits  again.st 
teehnology’  risks 

BY  THOMAS  HOFFMAN 

ORLANDO 

Executives  at  some  electric 
utilities  pointed  last  week  to  a 
variety  of  potential  IT  and 
business  benefits  that  could 
be  gained  from  emerging 
broadband  over  power  line 
(BPL)  capabilities,  including 
improved  support  for  applica¬ 
tions  such  as  load  forecasting. 

But  uncertainties  surround¬ 
ing  technical  challenges  and 
customer  adoption  left  other 
attendees  at  the  Platts  Energy 


I  Information  Technolc^’  Con- 
'  ference  here  questioning  the 
viability  of  BPL  installations. 

nm  Frost,  director  of  cor¬ 
porate  planning  at  Consolidat¬ 
ed  Edison  Inc.,  said  the  New 
York-based  utility  is  about  to 
launch  application  trials  using 
BPL  technology  in  Manhattan. 
Frost  is  hopeful  that  BPL  will 
help  Consolidated  Edison 
forecast  puw'cr  loads,  manage 
demand  and  pa'dict  electrical 
equipment  failures  before  they 
occur.  "It*s  like  having  a  real¬ 
time  asset  management  sys¬ 
tem."  he  said. 

Potential  business  gains  cit¬ 
ed  by  BPL  proponents  include 
the  ability'  to  tap  existing  pow¬ 


er  distribution  infrastructures 
for  new  services  and  a  steep 
reduction  in  equipment  costs. 

One  of  the  earliest  BPL 
adopters  is  the  cleciVie  utility 
for  the  city  of  Manassas.  Va. 
Manassas  signed  an  agree¬ 
ment  in  |u!y  with  Chantilly. 

Va. -based  Communication 
Technologies  Inc.  (ComTekl 
to  c.xtend  BPL  services  across 
the  city’s  power  lines  to  15.000 
potential  residential  and  com¬ 
mercial  locations,  said  )ohn 
Hewa.  an  assistant  director 
within  the  local  government. 

ComTek  began  installing 
the  BPL  equipment  in  .Septem¬ 
ber.  Waller  Adams,  a  CtimTck 
vice  president,  said  he  expects 
to  achieve  10%  penetration  of 
the  Manassas  broadband  mar¬ 
ket  by  luly.  Under  the  agrec- 
I  mem.  the  city  draws  K15%  and 
25%  of  the  revenue  generated 
I  by  consumer  and  commercial 


j  BPL.  respectively.  Adams  said 
'  ComTek  expects  a  three-  to 
j  seven-year  return  »»n  invest- 
j  mcni  from  its  Sl-smillhm  oui- 
I  lay  for  BPL  equipment. 

Equipment  at  Risk 

SL>mc  utility  executives  voiced 
skepticism  aN>ui  the  financial 
returns  BPL  imcstmcntscan 
generate,  partly  Invausc  of  the 
envirtmmenial  risks  that  p«iw- 
cr  lines  n)utincly  face. 

For  example,  since  the  four 
'  hurricanes  that  hit  Florida  in 
August  and  September.  Flori- 
■  da  Power  &  Light  Co.  has  re- 
j  placed  2,000  miles  <»f  pt)wer 
I  lines  and  LLlKKI  poles,  said 
!  Phil  Slack.  BPL  project  m.inag- 
j  er.'it  the  luno  Beach-basi-d 
1  utility.  “You  have  to  factor  that 
I  into  your  thinking."  he  said. 

Slack  has  other  concerns. 

I  ttK).  such  as  the  chance  that 
I  above-ground  power  cquip- 


ai  thin  clients  jnd  hasn't  ruled 
out  using  them  in  Mime  in¬ 
stances.  Hut  he  added  that  full 
I'trs  or  “neh  clients"  -  re¬ 
main  eritieal  t«>  the  automaker 
"because  ot  the  need  to  have 
inform.iiion  as  close  to  ihv 
source  as  possible." 

i  he  standardization  pLin 
calls  tor  installing  a  "ct»re 
load"  of  software  on  each  PC, 
largely  built  around  Micnis4«fr 
products  Isiv  ho\».  HevoiiJ 
the  coa'  tonfiguratum.  the 
company  will  add  wh.it  it  c.ills 
an  “extended  Uiad"  of  regional 
adaptations  to  machines.  Bui 
I  any  softwaK- must  be  fully 
I  tested  for  interoperability  be 
'  lore  it's  insiallisl. 

Daimlert^hrysler  isn’t  out 
sourcing  desktop  management 
but  u  ill  "eivsource"  some  of 
the  work,  for  example,  in 
I  North  America,  Dell  will  de- 
I  phiy  hardware  but  the  auu* 
maker  will  kec-p  eontnil  of  its 
I  help  di-sks 

Morrotti  said  ITairoler- 
Chrysler  examined  the  idea  of 
nutsc'ureing  its  entire  1H:  in¬ 
frastructure  but  dcvidc'd  that 
it  wouldn't  wx*rk  because  of 
global  complexitk's.  O  50750 


meni  may  rust  w  ithin  months 
,  becxiuse  of  exposun*  to  salt¬ 
water  and  humidity  along  the 
coast.  ’The  technology  isn’t 
ready  yet  for  Florida,  but  it’s 
gening  close."  Slack  said. 

StilL  other  factors  support 
the  potential  viability  of  BPL 
installations.  I  jsi  mLinth.  the 
Federal  (.iommunic'alions 
(aimmixsion  issued  a  ruling 
allowing  iiiilitk'x  to  pnwidc 
BPL  services  as  long  a.s  ihc-x 
adlicfc  to  p«)\ver-line  radiation 
emission  restrictions  and  fol- 
Kiw  Limsistem  and  repL-aiahle 
mc-UAuremcni  guideline's. 

"The  FCC  has  essentially  gi\  - 
L-n  us  the  givcm  light  go  for¬ 
ward."  said  Bfctt  KilNmrm', 
direeiiir  of  regulatory  servlet's 
and  as-sociaie  counsel  for  the 
United  Power  Unc  Council,  a 
Washington-txised  alliance  of 
utilities  and  (cx'hnoingy  compa- 

OK'S  invoKx'd  in  BPL  O  50716 
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It’s  Your  Money 


LET'S  SEE  IF  I  UNDERSTAND  Microsoft’s  new  intellectual 
property  indemnification  program  correctly:  According  to 
Microsoft’s  announcement  last  week,  the  folks  in  Red¬ 
mond  will  cover  the  cost  of  litigation  when  any  of  its  cus¬ 
tomers  are  sued  because  of  any  Microsoft  products  that 
contain  copyright,  patent,  trademark  or  trade  secret  infringement 
(see  story,  page  18).  In  other  words,  if  Microsoft  breaks  an  intellectu¬ 
al  property  law  and  someone  decides  to  sue  a  Microsoft  customer 
because  of  it,  Microsoft  will  pay  the  legal  bills. 

That  seems  fair.  After  all,  customers  have  been  paying  Microsoft’s 
legal  bills  for  years. 


Where  did  the  money  come  from  to  pay  the 
lawyers  in  Microsoft’s  losing  antitrust  battle 
with  the  US.  justice  Department  and  18  states? 
And  the  S3  billion  that  Microsoft  has  paid  out 
hist  this  year  to  settle  various  lawsuits?  It  all 
came  out  of  the  pockets  of  customers. 

Nice  of  Microsoft  to  return  the  favor,  isn't  it? 

While  Microsoft  has  spent  billions  of  cus¬ 
tomer-supplied  dollars  on  the  losing  end  of 
lawsuits,  the  company  probably  won't  ever 
spend  a  nickel  defending  customers. 

Ob.  it  could  happen.  Suppose  some  litigation- 
happy  intellectual  property  company  like  Eolas 
Technologies  were  to  decide  that  Microsoft  had 
violated  one  of  its  patents. 

Eolas  might  decide  that  instead  of  suing  the 
obvious  target  —  the  company  that  actually  in¬ 
fringed  on  its  patent,  a  gigantic  company  with 
hugely  deep  pockets  that  would  have  to  pay 
damages  on  every  product  unit  sold  that  in¬ 
fringed  on  Eolas*  patent  —  it  should  sue  some 
small  customer,  using  a  highly  risky  legal  theo¬ 
ry  and  with  no  chance  of  a  big  payoff. 

How  likely  is  that?  Whoops,  we  already 
know  the  answer  Eolas  sued  Micro¬ 
soft.  not  a  customer,  and  won  a  half- 
billion-doilar  judgment.  No  one 
knows  if  Eolas  will  ever  collect,  but 
there’s  no  quesrion  whom  Eolas  is 
trying  to  collect  from. 

(For  the  record,  when  1  call  Eolas 
’’litigation  happy,"  I  just  mean  Eolas 
is  happy  with  the  results  of  its  litiga¬ 
tion.  Honest,  guys.  What  else  could 
I  possibly  mean?) 

And  in  the  unlikely  situation 
where  a  customer  would  be  sued  in¬ 
stead  of  Microsoft.  Microsoft  would 
almost  certainly  end  up  paying  even 


without  an  indemnification  program.  The  pub¬ 
lic  relations  cost  to  Microsoft  of  standing  idly 
by  while  a  customer  got  hung  out  to  dry  when 
Microsoft  itself  was  guilty  of  patent  or  copy¬ 
right  infringement  would  likely  be  far  bigger 
than  the  cost  of  any  court  fight. 

And  in  the  extremely  unlikely  event  that  ail 
the  executives  in  Redmond  lost  their  minds  and 
Microsoft  decided  to  take  the  PR  hit  any^way. 
the  customer  would  end  up  suing  Microsoft  — 
and  Microsoft  would  end  up  paying. 

What  an  extraordinarily  generous  and  fore- 
sighted  deal  this  indemnification  program  turns 
out  to  be,  eh?  Especially  since  it’s  srilf  cus¬ 
tomers  who  would  actually  be  providing  the 
money  Microsoft  would  spend  in  these  increas¬ 
ingly  unlikely  scenarios. 

Is  it  all  really  just  a  meaningless  marketing 
gimmick?  Well,  sort  of.  As  marketing  gimmicks 
go,  it  does  have  one  special  twist. 

A  few  years  ago.  there  was  no  market  for  this 
gimmick.  Nobody  thought  indemnification  was 
needed.  There  had  been  IT  patent  and  copy¬ 
right  lawsuits  for  decades.  But  customers  didn't 
get  sued.  Vendors  did. 

Then  a  little  Utah  company 
called  The  SCO  Group  sued  IBM. 
claiming  copyright  infringement 
in  Linux.  And  SCO  eventually  sued 
a  couple  of  Linux  customers,  too. 
Those  suits  have  gone  nowhere. 

But  along  the  way.  tens  of  millions 
of  dollars  made  their  way  from 
Microsoft  to  SCO  —  and  now 
lots  of  people  are  talking  about 
customer  indemnification. 

Who  says  Micro.soft  doesn’t 
know  how  to  invest  in  a  new 
maritet?  O  50703 
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Not  a  Complete  Idiot,  Anyhow 

This  IT  executive  1^  support  pdot  fish  that  his  laptop 
starts  IwotirTO  but  shuts  down  before  Wiridows  can 
load.  Sounds  like  you're  not  plugoed  in.  fish  says.  1 
arn  rrat  an  idiotr  exec  bellows.  1  checked  to  make 
sure  the  laptop  wos  pkigged  in  at  the  waO  and  at  the 
back  of  the  laptopT  Fish  calmly  ciawls  under  the  desk, 
finds  both  those  cords  -  and  plugs  them  together. 
"Larer.  my  boss  forwarded  an  e-mail  from  die  user." 
fish  reports,  "complimenting  me  on  my  technicai 
knowledge  and  professional  demeanor.* 
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It’s  ^ur  Money 


LET’S  SEE  IF  I  UNDERSTAND  Microsoft’s  new  intellectual 
property  indemnification  program  correctly:  According  to 
Microsoft’s  armouncement  last  week,  the  folks  in  Red¬ 
mond  will  cover  the  cost  of  litigation  when  any  of  its  cus¬ 
tomers  are  sued  because  of  any  Microsoft  products  that 
contain  copyright,  patent,  trademark  or  trade  secret  infringement 
(see  story,  page  18).  In  other  words,  if  Microsoft  breaks  an  intellectu¬ 
al  property  law  and  someone  decides  to  sue  a  Microsoft  customer 
because  of  it,  Microsoft  will  pay  the  legal  bills. 

That  seems  fair.  After  all,  customers  have  been  paying  Microsoft’s 
legal  bills  for  years. 


Where  did  the  money  come  from  to  pay  the 
lawyers  in  Microsoft’s  losing  antitrust  battle 
with  the  Justice  Department  and  18  states? 
And  the  $3  billion  that  Microsoft  has  paid  out 
just  this  year  to  settle  various  lawsuits?  It  all 
came  out  of  the  pockets  of  customers. 

Nice  of  Microsoft  to  return  the  favor,  isn’t  it? 

While  Microsoft  has  spent  billions  of  cus* 
tomer-suppUed  dollars  on  the  losing  end  of 
lawsuits,  the  company  probably  won't  ever 
spend  a  nickel  defending  customers. 

Oh.  it  could  happen.  Suppose  some  litigation- 
happy  intellectual  property  company  like  Eolas 
Teclmolc^es  were  to  decide  that  Microsoft  had 
violated  one  of  its  patents. 

Eolas  mi^t  decide  that  instead  of  suing  the 
obvious  target  —  the  company  that  actually  in¬ 
fringed  on  its  patent,  a  gigantic  company  with 
hugely  deep  pockets  that  would  have  to  pay 
damages  on  every  product  unit  sold  that  in¬ 
fringed  on  Eolas’  patent  —  it  should  sue  some 
small  customer,  using  a  h^hly  risky  legal  theo¬ 
ry  and  with  no  cbaiKre  of  a  big  payoff. 

How  likely  is  that?  Whoops,  we  already 
know  the  answer  Eolas  sued  Micro¬ 
soft.  not  a  customer,  and  won  a  half- 
bilhon-doUar  fudgment  No  one 
knows  if  Eolas  will  ever  collect,  but 
there's  no  question  whom  Eolas  is 
trying  to  collect  from. 

(For  the  record,  when  I  call  Eolas 
“litigation  happy."  I  just  mean  Eolas 
is  happy  with  the  results  of  its  litiga¬ 
tion.  Honest,  guys.  What  else  could 
I  possibly  mean?) 

And  in  the  unlikely  situation 
where  a  customer  would  be  sued  in¬ 
stead  of  Microsoft.  Microsoft  would 
almost  certainly  end  up  paying  even 


without  an  indemnification  program.  The  pub¬ 
lic  relations  cost  to  Microsoft  of  standing  idly 
by  while  a  customer  got  hung  out  to  dry  when 
Microsoft  itself  was  guilty  of  patent  or  copy¬ 
right  inhingement  would  likely  be  far  bigger 
than  the  cost  of  any  court  fight. 

And  in  the  extremely  unlikely  event  that  all 
the  executives  in  Redmond  lost  their  minds  and 
Microsoft  decided  to  take  the  PR  hit  anyway, 
the  customer  would  end  up  suii^  Microsoft  — 
and  Microsoft  would  end  up  paying. 

What  an  extraordinarily  generous  and  fore- 
sighted  deal  this  indemnification  program  turns 
out  to  be.  eh?  Especially  since  it’s  stiff  cus¬ 
tomers  who  would  actually  be  providing  the 
money  Microsoft  would  spend  in  these  increas- 
ii^ly  unlikely  scenarios. 

Is  it  all  really  just  a  meaningless  marketing 
gimmick?  Well,  sort  of.  As  marketing  gimmicks 
go,  it  does  have  one  special  twist. 

A  few  years  ago.  there  was  no  market  for  this 
gimmick.  Nobody  thought  indemnification  was 
needed.  There  had  been  IT  patent  and  copy¬ 
right  lawsuits  for  decades.  But  customers  didn't 
get  sued  Vendors  did. 

Then  a  little  Utah  company 
called  The  SCO  Group  sued  IBM. 
claiming  copyright  infringement 
in  Linux.  And  SCO  eventually  sued 
a  couple  of  Linux  customers,  too. 
Those  suits  have  gone  nowhere. 

But  along  the  way.  tens  of  millions 
of  dollars  made  their  way  from 
Microsoft  to  SCO  —  and  now 
lots  of  people  are  talking  about 
customer  indemnification. 

Who  says  Microsoft  doesn’t 
know  bow  to  invest  in  a  new 
market?  O  50703 


Xerox  WorkCentre’  Pro  advanced  multifunction  systems 
not  only  print  up  to  3x  faster  than  competition.  They’re  even 
smart  enough  to  give  your  productivity  a  colorful  new  twist. 
There’s  a  new  way  to  look  at  it. 


The  advanced  thinking  built  into  the  Xerox  faster.  And  their  Enhanced  Service  Program 

WorkCentre  Pro  family  makes  them  the  T  ^  (ESP)  lets  you  fix  pioblems  before  thev  happen, 

smartest  multifunction  citizens  working  on  i  ^  increasing  reliability.  And  now,  there’s  color.  The 

anynetwork.Theydon’tjustscan,copy,fax,and  If  \  y  .  —  XeroxWorkCentre*Pro40printsb&wat40ppnv 

e-mail,  they  do  It  at  network  printing  speeds  I  ~  I  color  at  22  ppm.  It’s  one  more  way  our  full  line 

up  to  3x  faster  than  competition.  They  RIP  one  j  i  of  multifunction  systems,  printers,  and  digital 

job  while  printing  another,  so  work  gets  done  copiers  help  you  get  more  out  of  your  network. 


more:  Mrox.eoRi/offic«/244  For  a  sales  rep:  1-800-ASK-XEROX  ext.  244 
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DB2  DOESN’T  LOCK  YOU  IN. 

DBi  .s  T’ldcJlev/are  but  it  is 

Plus  there  s  no  constricting  contract. 
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current  level  of  support  for  Oracle 
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the-clock  service  and  support  for  DB2. 
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or  average.  Oracle  Database  required 
25"  more  time  to  manage  than  DB2 
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And  the  Transaction  Processing 
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Best  Buy  Hit  With  Lawsuit 
Over  Layoffs  of  rrWDrtets 


Retailer  denies  claims 
of  age  discrimination 
by  44  ex-employees 

BY  CAROL  SLIWA 

Richard  Walstrom  said  that  he 
sensed  something  was  wrong 
during  a  job  &ir  in  May.  when 
he  saw  some  of  his  IT  co- 
woikers  who  had  also  recently 
been  told  by  Best  Buy  Ca  that 
they  were  losing  their  jobs. 

‘There  Mrere  a  high 
percentage  of  people 
with  gray  bain”  said 
strom,  v^o's  $7.  “It  was  a 
lot  of  us.  I  didn’t  really 
realize  what  had  hap- 


Recharges 
Firms  Over 
Web  Breaches 

Action  may  portend 
further  security, 
privacy  crackdowns 

BY  JAIKUMAR  VUAYAN 

Last  week’s  move  by  the  Fed* 
eral  Trade  Commission  to 
charge  three  companies  with 
privacy  and  security  viola¬ 
tions  highlights  the  increasing 
risk  facing  businesses  that  fail 
to  meet  state  and  federal  stan- 


pened  until  you  look  around 
and  say,  ‘What’s  wroi^  with 
this  picturer  ” 

Walstrom  was  one  of  44  for¬ 
mer  Best  Buy  IT  woikers  who 
filed  a  class-action  lawsuit  last 
Wednesday  claiming  that  the 
Richfield,  Mimt-based  elec¬ 
tronics  retailer  engaged  in  a 
pattern  of  age  discrimination 
in  terminating  their  j(^  The 
plaintifils  range  from  40  to  71 
years  old.  and  their  average 
age  is  51,  accordii^  to 
the  lawsuit,  which  was 
filed  in  U.S.  District 
Court  in  Minnesota. 
The  charges  relate  to 
Best  Buy,  page  16 


dards  for  protecting  confiden¬ 
tial  data. 

The  agency  reached  a  set¬ 
tlement  with  San  Diego-based 
Petco  Animal  Supplies  Inc.  on 
charges  that  a  security  flaw  in 
its  Web  site  had  exposed  cus¬ 
tomers’  credit  card  numbers 
to  backers.  The  flaw  violated 
Petco  promises  to  keep  cus¬ 
tomer  data  safe,  the  FTC  said. 

A  settlement  was  also 
reached  with  Sunbelt 
Services  Inc.  in  Clearwater, 
Fla.,  while  negotiations  con¬ 
tinue  wifli  Nationwide  Mort- 
g^  Group  Inc.  in  Fairfax,  Va. 

The  charge  against  Petco 

F7G,pagei6 
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$50M  SAP  Rollout  Runs 
Into  Trouble  in  Tacoma 


Added  costs,  snafus 
mar  big-bang  project 

BV  MARC  L.  SOPMINI 

Cost  overruns,  glitches  and 
other  bumps  hit  during  a 
$50  million-pltis  rollout  of 
SAP  AG’s  ERP,  CRM  and  oth¬ 
er  business  applications  in 


the  city  of  Tacoma,  Wash., 
have  generated  a  storm  of 
bad  press  and  end-user  com¬ 
plaints,  and  a  call  from 
a  city  councilor  f<^  an 
audit  to  determine  the  I 
causes  of  the  problems.  I 
Some  Tacoma  admin-  | 
istrators  said  they  be¬ 


lieve  that  overall,  the  year-old 
implementation  of  SAP  R/3 
has  been  successful  But  they 
acknowledged  that  com¬ 
plaints  about  the  system’s 
payroll  billing,  budgeting  and 
customer  service  perfor¬ 
mance  have  proved  to  be  a 
thorny  problem. 

Moreover,  the  city 
has  had  to  pay  nearly 
$700,000  to  TaccMna- 
based  integrator  TUI 
Tacoma,  page  52 
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Best  Buy  Hit  With  Lawsuit 
Over  Layoffs  of  IT  Workers 

Retailer  denies  claims  y““  '“<>■'  around 

ofagediserimination 

b\'  44  ex-employees  Walstrom  was  one  of  44  fo 


BV  CAROL  SLIWA 

Richard  Walstrom  said  that  he 
sensed  something  was  wrong 
during  a  job  fair  in  May,  when 
he  saw  some  of  his  IT  co¬ 
workers  who  had  also  recently 
been  told  by  Best  Buy  Co.  that 
they  were  losing  their  jobs. 

“There  were  a  high 
percentage  of  people 
with  gray  hair."  said  Wal- 
sirom,  who’s  57.  “It  was  a 
lot  of  us.  1  didn't  really 
realize  what  had  hap- 


FTC  Charges 
RrmsOver 
Web  Breaches 

Action  ma>'  portend 
further  security, 
privacy  crackdowns 

BV  JAIKUMAR  VMAVAN 

Last  week's  move  by  the  Fed¬ 
eral  Trade  Commission  to 
charge  three  companies  with 
privacy  and  security  viola¬ 
tions  highlights  the  increasing 
risk  facing  businesses  that  fail 
to  meet  state  and  federal  stan- 


pened  until  you  look  around 
and  say.  ‘What's  wrong  with 
this  picture?' '' 

Walstrom  was  one  of  44  for¬ 
mer  Best  Buy  IT  workers  who 
filed  a  class-action  lawsuit  last 
Wednesday  claiming  that  the 
Richfield,  Minn.-based  elec¬ 
tronics  retailer  engaged  in  a 
pattern  of  age  discrimination 
in  terminating  their  jobs.  The 
plaintiffs  range  from  40  to  71 
years  old,  and  their  average 
age  is  51.  according  to 
the  lawsuit,  which  was 
filed  in  U.S.  District 
Court  in  Minnesota. 
Tlie  charges  relate  to 
Best  Buy.  page  16 


dards  for  protecting  connden- 
tial  data. 

The  agency  reached  a  set¬ 
tlement  with  San  Diego-based 
Retco  Animal  Supplies  Inc.  on 
charges  that  a  security  flaw  in 
its  Web  site  had  exposed  cus¬ 
tomers'  credit  card  numbers 
to  hackers.  The  flaw  violated 
Petco  promises  to  keep  cus¬ 
tomer  data  safe,  the  FTC  said. 

A  settlement  was  also 
reached  with  Sunbelt  Lending 
Services  Inc.  in  Clearwater, 
Fla.,  while  negotiations  con¬ 
tinue  with  Nationwide  Mort¬ 
gage  Group  Inc.  in  Fairfax.  Va. 

The  charge  against  Petco 

FTC.  page  16 
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Linux  use  is  growing  so  fast  that  some  companies  have  a  hard 
time  finding  enough  trained  people  lodolhework.PAGE37 


$50M  SAP  Rollout  Runs 
Into  Trouble  in  Tacoma 


Added  costs,  snafus 
mar  big-bang  project 

BV  MARC  L.  SONOtNI 
Cost  overruns,  glitches  and 
other  bumps  hit  during  a  ' 
$50  million-plus  rollout  of 
SAP  AG’s  ERP,  CRM  and  oth¬ 
er  business  applications  in 


the  city  of  Tacoma.  Wash., 
have  generated  a  storm  of 
bad  press  and  end-user  com¬ 
plaints.  and  a  call  from 
a  city  councilor  for  an 
I  audit  to  determine  the 
causes  of  the  problems. 

Some  Tacoma  admin¬ 
istrators  said  they  be¬ 


lieve  that  overalL  the  y’car-otd 
implementation  of  SAP  R/5 
has  been  successful.  But  they 
acknowledged  that  com¬ 
plaints  about  the  system’s 
payroll,  billing,  budgeting  and 
customer  service  perfor¬ 
mance  have  proved  to  be  a 
thorny  problem. 

Moreover,  the  city 
has  had  to  pay  nearly 
S700.000  lo  Tacoma- 
based  integrator  TUI 
Tacoma,  page  52 


Maybe  the  way  we  work 
isn’t  working. 

Enter  the  Intelligent  Document  Platform  from  Adobe. 
The  bridge  between  the  paper  and  digital  worlds. 
Suddenly,  documents  become  smarter  and  infinitely 
more  useful.  Important  data  is  made  secure.  And 
information  intuitively  travels  where  it's  needed,  as 
it's  needed,  all  on  its  very  own.  It's  simplicity  at  work. 
The  Intelligent  Document  Platform.  Better  by  Adobe: 


See  how  others  are  crossing  the  paper  to  digital  bridge  at  adobe.com/idp. 
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It  takes  an  integrated  security  solution  to  make  sure  the 
right  people  have  the  right  access  at  the  right  time. 

eTrusf  Identity  and  Access  Management  Solutions 

These  days,  a  vital  aspect  of  security  management  is  providing  customized 
levels  of  access  for  countless  employees  and  partners  while  also  protecting 
your  customers  from  identity  theft.  That’s  one  complicated  job-and  one  that 
can  be  made  much  easier  with  CA's  eTrust  Identity  and  Access  Management 
(lAM)  Solutions.  They  enhance  security  and  reduce  costs  by  automating 
processes  and  enabling  self-administration,  in  addition  to  providing  policy-based 
cross-platform  protection  for  web,  mainframe,  and  application  resources 
enterprise  wide.  To  find  out  how  CA's  lAM  solutions  can  improve  your  business, 
attend  one  of  our  workshops,  ca.com/etrust/workshop 
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Standards:  High*Stalies  Game 

In  the  Tedmoiogy  sactkm:  As  vendors 
place  their  bets  oo  oew  technologies, 
money  and  politics  are  playing  a  bigger 
role  in  the  standar^'Setting 
process.  Page  25 
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WM  Card  Contracts 

In  tha  Managainant  sactiofi:  when  a  hired 
developer  plans  to  resell  your  custom  soft¬ 
ware.  your  intellectual  property  rights  and 
even  future  profits  are  at  stake.  Put  away  the 
boilerplate  and  start  dealing.  Pa^e  40 
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6  Solatia  10  oeta  positive  re¬ 
views  ftoin  some  early  users 
that  have  seen  performance 
gains  on  their  Sun  servers, 
such  as  FedEx. 

7  Sears  and  Kmnrt  daiin  that 
their  merger  will  lead  to  IT  ef¬ 
ficiencies,  but  reconciling  the 
retailers*  systems  could  be  a 
tall  order. 

7  Oracle  plane  to  release  soft¬ 
ware  patches  every  three 
months  to  make  the  patching 
process  more  predictable 
for  users. 

10  Nortfl'e  accounting  review 
drags  on.  but  users  say  the 
networking  equipment  ven¬ 
dor  is  meeting  its  product  and 
support  commitments. 

10  Four  Linux  vendors  will  cre¬ 
ate  a  common  code  base,  but 
Red  Hat  and  Novell  aren’t 
among  them. 

12  AlphaServer  sales  drop 
sharply  as  users  start  moving 
to  Hewlett-Packard’s  Ita¬ 
nium  version  of  Open  VMS. 
although  sales  of  used  units 
are  brisk. 

12  The  Air  Force  is  consolidating 
its  contracts  with  Microsoft 
and  standardizing  its  software 
conftgurations. 

14  QAA:  MasterCard’s  retiring 
IT  chief.  Jerry  McElhatton, 
talks  about  his  career  and  his 
IT  management  style. 

18  Dell  reiOBses  its  second  blade 
server,  two  years  after  the 
first  one  became  available. 


28  Case  Study:  Help  Keeps  Tran* 
sit  System  Moving,  it’s  been 
clear  sailing  at  the  Port  Au¬ 
thority  of  Allegheny  County  in 
Pittsburgh  since  it  introduced 
help  desk  software  to  regain 
control  over  call  volumes. 

30  Future  Watch:  Pointillist  F^- 
toction.  Network  defense 
mechanisms  in  development 
could  provide  an  early  warn¬ 
ing  against  virus  and  worm  at¬ 
tacks  by  identifying  and  pro¬ 
tecting  critical  nodes  before 
malicious  code  can  ^read. 

32  Security  Manager's  Journal: 
Network  VtsibiHty  Goal  Sets 
Trimmed.  When  C.J.  KeUy 
asks  for  the  impossible,  her 
staff  responds  to  the  chal¬ 
lenge  with  a  distributed 
intrusion-detection  strategy. 
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37  Linux  Unchained.  Use  of 
open-source  software  is  grow¬ 
ing  so  fast  that  the  skills  need¬ 
ed  to  run  it  are  increasingly 
bard  to  find  —  and  pricey. 
Here's  what  some  IT  man¬ 
agers  are  doing  about  it 

42  QAA:  After  the  Deal.  The  deal 
of  the  century  may  lead  to  the 
implementation  from  hell, 
says  Danny  Ertel  a  founder  of 
Vantage  Partners.  Negotiate 
with  implementation  in  mind, 
he  suggests. 

43  Career  Watch  .  The  priciest 
foreign  postings;  the  IT  work¬ 
week  —  it  Just  seems  like  for¬ 
ever  and  middle  managers' 
view  of  a  brighter  future. 


OPINIONS 

a  On  the  Mark:  Mark  Halt  re¬ 
ports  that  open-source  tech¬ 
nology  has  made  its  way  up 
the  application  stack  to  take 
on  CRM  software. 

22  Don  Tennant  warns  that  cor¬ 
porate  restrictions  on  the  free 
flow  of  information  limit  IT 
professionals'  exposure  to  the 
most  valuable  information  — 
that  from  their  peers. 

22  David  Moschella  says  change 
is  coming  to  the  IT  organiza¬ 
tion,  which  has  been  relatively 
stable  for  the  past  40  years. 

23  Pimm  Fox  contends  that 
workers  concerned  about  job 
losses  in  the  IT  industry  need 
to  organize. 

34  Tommy  Peterson  thinks  users 
have  to  participate  more  ag¬ 
gressively  in  tte  standards 
process. 

44  Norbert  J.  Kubllus  settles  the 
CSO  debate:  Yes,  he  should 
report  to  the  CEO,  not  the 
CIO.  But  more  important,  be 
should  be  the  CIO. 

54  Frankly  Speaking:  Frank 
Hayes  notes  that  while  Sun 
hasn't  truly  released  Java  as 
open-source  code,  it  will  reap 
most  of  the  benefits  that  come 
from  open-source  projects. 
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The  21sl  Century  CiO 

CAREERS:  Kom/Ferry  Intematio&al's  Maik 
PoUnsky  discusses  10  key  i»uea  CIOs  will 
be  dealing  with  in  the  years  ahead  as  their 
role  coDtixiues  to  evolve  within  the  corpo¬ 
rate  structure.  0  QiMUak 60080 

Convenience  or  Security? 

E-BUSINESS:  Consumers  want  easy  access 
and  safety,  but  more  of  one  usually  means 
less  of  the  otbec.  Columnist  Larry  Ponemon 
delves  into  survey  results  to  help  you 
strike  a  balance  your  customers  will  accept. 
ClOricMMtSOHi 

VoIPChecfcIst 

SECURITY:  Vbice  over  IP  opens  voice 
communications  to  the  same  types  of  secu¬ 
rity  threats  that  expose  data  transfer  to  at- 
ucks,  says  Sharon  Besser  of  Check  Point 
Software  Technologies.  But  there  are  steps 
you  can  take  to  safeguard  your  network. 
0QiMLW(4OM 

Pitfalls  of  Storage  Managanwnt 

STDRA0E:  Systems  architect  Mark  W. 
Bradley  taka  a  look  at  tools  that  can  help 
administrators  avoid  common  data  man¬ 
agement  errors.  OCWdlMi  49836 

Hands  On:  Streaming  Media 
To  2.S/30  Cal  Phones 

MOBILE/WIRELESS:  During  a  consulting 
project,  columnist  Yuval  Kossovsky  evalu¬ 
ates  and  sets  tqt  streaming  servers  and  their 
accompanying  systems.  OQricMMtSOSn 
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AT  DEADLINE 


SAP  Backtracks 
From  Promise 

SAP  A6  ChM  RnmU  Offlcar 
Wwmr  Bnndl  M  WMk  iMcfc* 
trackid  from  Mrlw  ftatamwits 
that  nuniim  wooM  fMcIi  30%  by 
2000.  Brandi  toU  a  BiOMrino  of 
finandal  MtalyilB  in  Barcalona. 
Spain.  HmI  SAP  *may  naod  an 
addWonalianr^tofocuBoniirow- 
ing  martat  ahara  and  salaa. 


Linux  Sales  Boost 
Novel  Results 

Wotwl  Inc.  CTodWad  improved  Un- 

ua  aaioa  and  IworaUi  aidianoe 
ralaa  far  baprawad  Bnandai  ra* 
aidfa  dnrtag  ttia  feumi  qaartar 
ttadandadODLStCEOJacIi 
Maaaman  nid  ha  opacti  Unux 
afaa  to  "rntwlaihalani  a*  a  da- 
dtaa  in  NaMfafa  aafaa  aart  yaar. 
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UJ(.  May  Scrap 
EDSPrt^ 

CoMtaaow  Mont  In  n  a-^aid 


4Mta»tdlnhrg..arttfBK- 
Imie  (Wa  Sxtmi  C«*.  (mad 
«inliMdol«itUJ(.‘*CMdSiir 
poft to  Mm  dnan  kgm 
Hi  Ilk  toM  Mk.  OIL  oMctai. 
mi  aaki  a  ~qutok  dMUm*  on 
•HiMiir  to  aoik  Ilia  praUmitic 
praiiciniihUMiaaaei. 


Balmer  Warns  Asia 
Leaders  on  Linux 

Menaill  Caip.  CEO  Sma 
Batoiar  liM  oMk  aonail  Man 
•aaininianlB  AM  iiaa  couM  faca 
pManllaaaaltotoroMngUnaito- 
itoad  ol  UMaili  to  lan  smtono. 
Dm  apaack  to  fnanananl  laad- 
on  in  Snimora  Cana  altor  Sto- 
tapaia'a  Hatolrt  at  Datoaaa 
laMckai  ilUlOO  Ka  tarn  IWn- 
dan  to  ipian  aamta  iiikiaaia. 
and  China,  Japan  and  Somli 
Kofaa  amnad  to  lakdhr  doMlap 


Solaris  10  Tests  Yield 
Performance  Gains 


Users  rave;  FedEx 
says  OS  rekindles 
interest  in  Sun 


WHILE  SUN  Mi¬ 
crosystems 
Inc.  officially 
launched  So¬ 
laris  10  here  last  week,  the  fu¬ 
ture  prospects  of  the  operat¬ 
ing  system  —  and  perhaps 
of  Sun  hself  —  were  being 
judged  many  miles  away 
by  early  users  such  as  the 
Philadelphia  Stock  Exchange 
and  FedEx  Corp. 

Those  organizations,  which 
are  longtime  Sun  shops,  have 
been  testing  Solaris  10.  And 
IT  managers  at  both  FedEx 
and  the  stock  exchange  said 
they’re  pleased  with  what  the 
operadi^  system  has  deliv¬ 
ered  thus  far. 

Prior  to  the  development 
of  Solaris  10.  interest  in  Sun’s 
systems  'Vas  somewhat  dwin¬ 
dling”  at  FedEx,  said  Don  Flke, 
the  Memphis-based  company’s 
technical  director.  But  now 
that  FedEx’s  IT  staffers  have 
evaluated  the  new  software, 
“interest  is  extremely  high  — 
a  major  shift  here,"  be  said. 

Fike  added  that  as  a  result  of 
Solaris  10.  FedEx's  use  of  Sun 
servers,  which  run  many  of 


its  mission-critical  systems, 
would  at  least  stay  the  same 
and  might  even  expand. 

Many  of  the  major  features 
built  into  Solaris  10  have  been 
available  for  testing  for  some 
time.  Over  the  past  18  months. 
Sun  has  gradually  released 
large  parts  of  the  operating 
system,  and  the  initial  version 
is  already  available  in  full  to 
users  who  participate  in  Sun's 
Software  Express  preview  pro¬ 
gram.  Commercial  shipments 
are  due  by  the  end  of  January. 

Key  improvements  incliuie 
faster  networking 
technology  that  Sun 
has  built  into  the 
TCP/IP  stack.  Fike 
said  the  networking 
enhancements  have 
“dramatically  im¬ 
proved"  the  perfor¬ 
mance  of  networic- 
intensive  applications 
that  run  on  Solaris- 
based  systems  at 
FedEx. 

Another  feature  that 
Fike  said  is  particularly  valu¬ 
able  b  a  tool  called  Solaris  Dy¬ 
namic  Tracing,  or  DlVace  for 
short  DIVace  lets  users  exam¬ 
ine  how  applications  interact 
with  Solaris  10.  and  Fike  said 
he  has  been  able  to  identify 
performance  problems  in  live 
code  within  IS  minutes  by  us¬ 
ing  the  tool  —  regardless  of 


which  third-party  application 
may  be  running. 

IT  executives  at  Philadel¬ 
phia  Stock  Exchange  Inc.  said 
the  networking  improvements, 
coupled  with  the  application- 
tuning  capabilities  of  DIVace, 
have  increased  performance 
on  their  servers  to  such  an  ex¬ 
tent  that  they  expect  to  be 
able  to  reduce  the  amount  of 
Sun  hardware  they  need  to 
maintain. 

For  instance,  a  trading  appli¬ 
cation  that  currently  runs  on  a 
12-CPU  Sun  Fire  6800  server 
performed  better 
when  it  was  tested  on 
a  four-CPU  Sun  Fire 
4800  equipped  with 
Solaris  10. 

Without  the  perfor¬ 
mance  gains  made 
possible  by  Solaris  10, 
the  excha^  faced  the 
prospect  of  buying  ad¬ 
ditional  Sun  machines 
to  help  support  a  new 
eiectronk  options- 
trading  system,  said 
Thomas  WIttxnan,  senior  vice 
president  of  trading  system 
development  It  was  either 
that  or  “take  a  look  at  some¬ 
thing  else,  whatever  that 
something  else  might  be." 
be  said 

ITie  exchange  also  plans  to 
test  new  Solaris  10  features, 
such  as  a  partitioning  tech¬ 


nology  called  Solaris  Contain¬ 
ers  that’s  designed  to  boost 
system  utilization. 

“We  think  all  that  has  a  tot 
of  promise  for  us,”  CIO  Bill 
Morgan  said  of  Solaris  10  as  a 
whole. 

Sun  is  addressing  perfor¬ 
mance  deficiencies  that  the 
software  had  when  users  tried 
to  run  it  on  smaller  systems, 
said  Gordon  Haff^  an  analyst 
at  niuminata  Inc.  in  Nashua, 
Nil  “Sun  was  very  focused 
on  big-iron  performance  and 
scalability.”  be  noted 

But  not  every  new  feature 
will  be  ready  v^n  Solaris  10 
is  released  Sun  said  a  tech¬ 
nology  code-named  Janus, 
which  will  let  Linux  applica¬ 
tions  run  natively  on  Solaris- 
based  systems,  and  a  128-bit 
file  system  called  ZFS  are  due 
to  be  added  later  in  the  first 
quarter.  O  S0B44 


Sill  to  Indemnify  Opei^Source  Solaris  Users 


IWIastwaksaldllalMem- 
my  cuMomers  wtu  use  Is  up- 
conkio  opan-aome  Sows  10 
code  fnm  any  laoal  cWms.  In- 
dnanilcalion  ■  a  partIcuMy 
poMed  keua  tor  Sun.  aMch  Iasi 
inomi  atpaed  to  pay  UZ  milan 
to  aaOto  a  patoni  kdrtogennnl 
tomullad  by  Eastow  Kodak 
Co.ln200Z 

Sun  salM  da  case  ahoctly 
aitor  a  toderai  My  In  New  Vbfk 


mtod  dal  da  conpany’s  Java 
tordaatogy  vtoUed  dsee  patonis 
laktbyKotMrlCMdiltok 
49632].  em  open-anra  Solails 
utais  woni  (aca  dak  own 
Kodak  monanf  Send  Mc- 
Naakr.  Sul's  ebatnan  and  CEO. 
said  al  da  Solada  n  kuicb  an- 
nouncemenllare. 

tndead.  bodi  kkNeoly  and 
Jonalh8nSchwaft2.Sun'spiaai- 
deot  and  cbM  opHadng  olilca. 
am  adanai*  on  da  Issue  and 


saldllaylavoheanlfiikncoipo- 
nto  ClOa  adu  an  concenad 
dal  opemouca  Sotaia  coiid 
cnatosonatooNdaksoraona- 
how  afled  cuatonar  aantoa  and 
support  "Wfo  asking.  'Oonl 
wony."McNoalysaid. 

Sunptanatodelaillsapen- 
somo  kanslng  model  addiln  45 
to  60  doya.  and  Schmitz  said 
twomeksagodaldaopen- 
souna  code  add  become  tody 
raiabto  to  neat  year’s  fkal  guar- 


tar  (QidikLtok  song]. 

Sun  is  altampdng  to  iMve 
mom  tolemsl  to  dta  «86  wrslon 
at  Solaita  by  alowtog  users  and 
suflwan  dsaalopois  to  dheedy 
compem  d  add!  Lima  via  da 
openaourapkn. 

■umkabi  analyst  eunton  Had 
said  ha's  not  sue  dal  an  open- 
sauna  Sotoris  wt  be  enou^  to 
stow  down  ndgradna  to  Linux. 
BuL  he  nutad.  Sotaris  olhis  tools 
:  dal  arsnUiil  Into  Lima,  such 
’  asSun'svktialzaltonandlle 
managenanliapablllMs. 

-AMick  nHntoau 


But  reconciling  IT 
systems  will  be  tall 
order,  analysts  say 

8V  CAffOL  S4.IWA 

Kmart  Holding  Corp.  and 
Sears,  Roebuck  and  Co. 
claimed  that  the  planned 
merger  they  announced  last 
week  will  broaden  their  retail 
presence  and  make  their  pro¬ 
curement,  marketing,  IT  and 
supply  chain  management 
operations  more  evident. 

But  the  marriage  could  re¬ 
quire  a  daunting  amount  of  IT 
work,  depending  on  the  de¬ 
gree  to  which  the  retailers  de¬ 
cide  to  go  to  common  systems, 
said  several  retail  technology 
analysts. 

One  key  part  of  the  strategic 
plan,  for  instance,  calls  for 
many  of  Kmart's  retail  loca¬ 
tions  to  be  converted  to  Sears 
stores  as  the  latter  operation 
tries  to  branch  out  from  its 
base  in  shopping  malls. 

Sears  previously  agreed  to 
buy  SO  stores  from  Kmart,  and 
Sears  CEO  Alan  Lacy,  who  will 
be  vice  chairman  and  CEO  of 
the  new  Sears  Holdings  Cmp,. 
said  last  week  that  ''several 
hundred”  Kmart  stores  could 
be  switched  over  altogether. 

But  the  conversion  could  re¬ 
quire  "dramatic”  IT  changes, 
said  Stephen  Smith,  an  analyst 
at  Gartner  Inc.  "We  could  find 
that  they’re  more  compatible 
than  is  often  the  case  [vdth  re¬ 
tailers],  but  there  is  a  big  risk 
that  this  will  be  far  more  chal¬ 
lenging  than  they’re  promot¬ 
ing  today.”  he  said. 

Not  surprisingly,  the  two 
companies  have  accumulated 
plenty  of  different  systems. 

At  the  store  level  Kmart  in 
2001  announced  that  it  was 
buying  IBM  SurePOS  700 
cash  registers  running  the 
vendor’s  point-of-sale  operat¬ 
ing  system. 

Earlier  this  year.  Sears  said 
it  planned  to  install  newer 
SurePOS  machines  running 
360Commerce  Inc’s  POS  soft¬ 


ware  on  Microsoft  Corp.’s 
Windows  XP  Embedded 
operating  system. 

But  the  greatest  challenge 
won't  lie  with  the  in-store  IT 
systeoks.  accordir^  to  fohn 
Footanella.  an  analyst  at  The 
Yankee  Group  in  Boston.  He 
said  the  real  problem  will  be 
with  back-office  applications 
at  headquarters,  including  the 
merchandising,  inventory 
planning  and  supply  chain 
software.  “From  a  process  per¬ 
spective,  if  you're  going  to 
start  saving  money,  you've  got 
to  standardize  on  one  distribu¬ 
tion  network."  Footanella  said. 

Kmart  and  Sears,  which  ex¬ 
pect  to  complete  the  stock- 
swap  transaction  by  March, 
declined  to  comment  on  their 
future  IT  plans.  A  spokesman 
for  Sears  said  only  that  the 
two  companies  will  "do  a  thor¬ 
ough  analysis  of  both  organi¬ 
zations  and  determine  the  best 


JUST  THE  FACTS 


path  toward  Integration.”  I 
When  it  merged  with  Lands’ 

End  Inc  in  2002.  Sears  decided 
not  to  combine  IT  operations. 

Sears  has  been  more  aggres¬ 
sive  then  Kmart  in  pursuing 
new  IT  initiatives  during  the 
past  two  years.  Last  spring. 

Sears  CIO  Gerald  Kelly  )r.  or¬ 
chestrated  a  10-year.  S1.6  bil¬ 
lion  IT  outsourcing  deal  with 
Computer  Sciences  Corp.  And 
during  the  third  quarter.  Scars 
signed  a  licensing  deal  with 
JDA  Software  Group  Inc.  for 
an  integrated  set  of  tools  to 
assist  with  merchandise  man¬ 
agement  as  well  as  planning 
and  forecasting. 

Kmart  last  week  launched 
a  redesigned  Web  site  that  its 
e-commerce  team  built  with 
Fry  Inc.  But  other  than  that, 
major  IT  initiatives  have  been 
sparse  for  Karen  Austin,  who 
became  Kmart’s  CIO  in  April 
2002.  "We  were  in  bankruptcy 
for  a  lot  of  Karen’s  tenure,”  a 
Kmart  spokeswoman  said.  She 
added  that  Kmart  is  "getting 
bade  to  business”  after  emerg¬ 
ing  ftom  bankruptcy  protec¬ 
tion  in  May. 

Long-staiuling  IT  woes  con¬ 
tributed  to  Kmart’s  business 
problems.  The  company  tried 
to  reverse  years  of  constrained 
IT  spending  with  a  two-year. 

S1.4  billion  investment  in  May 
2000.  But  by  the  time  it  filed 
for  bankruptcy  protection  in 
January  2002,  lOnart  ftnind  it¬ 
self  without  a  CIO  and  strug- 
gliog  to  fix  its  supply  chain 
sy^m  and  repla^  an  exten¬ 
sively  modifi^  vrarehouse 
management  system. 

"Kmart  has  really  been  in 
survival  mode,"  saM  Rob  Garf. 
an  analyst  at  AMR  Research 
Inc  He  and  other  analysts  said 
H  would  make  sense  for  the 
retailers  to  head  in  the  IT  di¬ 
rection  of  Sears,  “niie  com¬ 
bined  entity  needs  to  continue 
the  momentum  that  Sears  has 
gained  over  the  last  couple  of 
years."  Gaif  said.  "It's  impor¬ 
tant  fix  them  not  to  slow  that 
process  down.”  O  S094S 


•V  JAHCUMAK  VUAVAH 

Orade  Cotp.  last  amk  said  it’s 
moving  to  a  quarterly  patch  re¬ 
lease  schedute  in  response  k) 
demands  from  users  for  a  more 
ptedKlaUe  process  of  applying 
security  fnes  to  its  software. 

Themovecomesamidconir* 
(ang  cdtbsrn  by  corBuMrig  firn 
Gartner  kic.  of  the  way  Oracle 
hamled  a  maior  secuitv  update 
for  Ms  database  and  appbeiton 
server  software  m  August  But  an 
Orade  spokesworTtan  said  the 
company’s  armouncemant  was 
ordytarigentialy  ralaleir  to 
Gartner's  reiaase  two  weeks  ago 
of  a  research  note  tat  blasted 
Orade  over  the  August  patch. 

The  fret  set  of  patdies  under 
thequarletlyapproadiisached- 
dad  to  be  tatemed  in  January. 
New  ptfcheswi  be  eauad  every 
three  monta  and  wl  mdude 
al  previous  fiRes  far  the  same 
products. 

Mary  Arm  Otadson.  Orade  s 
chlel  security  otKcar.  said  dufag 
8  lefaoontarencB  that  the  new 
Crlicat  Ratd)  Uprfato  program 
should  let  users  better  plan  far 
security  ffaees  nMb  not  eiposing 
them  to  uiduB  riala.  ^ead  on  a 
fat  of  dfacussians  [wflh  ueers],  we 
fael  confederM  tat  the  wi  3tii« 
a  good  balancs.*  OavIdBon  said, 
adding  that  al  of  Oracle’s  mafor 
products  vrii  be  covered  under 
thepragram. 

Oracle's  adoption  of  a  ragular 
pelcNno  schedde  "is  going  b 
mahBM  a  lot  eerier  far  oompantes 
to  ptan  far  theee  [bes].*  said 
rartWetiiec.  a  farmer  president 
of  the  Intamatlonal  Oia^  Users 
Group«idtheC80ofTUSC.a 
Chiciigotased  Orade  lachnofa- 
gyoonedlingftm. 

H’s  good  news  far  UMTS." 
acpeed  Howard  MutAar.  dfeectar 
of  enterpriee  eenricai  ri  Embry- 
Riddfa  Aeronautical  Utdvemy  in 
Daytona  Beach,  Re.  The  schooi 
usee  a  wide  variety  of  Orade 
products,  and  Muffler  saU  that 
havfng  e  predfatafalB  patch  up¬ 
date  achecUe  wl  efarinrie  ta 
^aHinogame.’ 

In  Auguet  Grade  said  ft  was 


considertng  ta  adoption  of  a 
monthly  patch  release  schedde. 
simbr  to  ta  appnMch  that  Mi- 
:  crosoft  Corp.  has  been  using 
since  Octoto  2003.  Bui  users 
fawred  ta  quarterly  pten.  David¬ 
son  said.  A  ihreeinonlh  cyde 
"seemed  to  be  somethmo  they 
codd  bvB  wito.' she  seat  adi^ 
that  Orade  ml  mingiFout-of- 
cyde  patches  i  ta  sMuaiion 
cMs  far  them. 

Quarteity  updates  make  sense 
far  palchino  database  servers, 
said  Lmdstram.  an  analyst 
at  Spue  Security  Lie  In  Uat^ 
Ps.  Given  how  important  data¬ 
base  servars  are  to  companies, 
systems  admingtrators  are  »m- 
liely  to  want  to  patch  them  more 
ftequendy  tan  that  he  said. 

in  Ms  Nov.  t1  reeaarch  note. 
Gartner  took  Orade  to  taek  for 
not  disdoeinQ  ritough  detalE 
abouttawAwrabNtiesad- 
drsssad  by  ta  Mugist  patch, 
which  was  dubbed  TM  68  and 
given  Orade's  Mghesi  severity 
ratng.  Orade  rwBsued  in  aleri 
relatad  to  ta  patch  in  intd- 
Oefabar  after  proohof-concapt 
oqiloM  code  began  drolriing 
ontafatorrwL 

If  you  don't  tel  ta  good  guys 
what  ta  problem  is.  they  doni 
haveawayloemluBlBtasevBrf- 
ty.”  said  Gainer  analyst  Rich 
Mogri.  He  added  tat  Gartner, 
wfedtlsadviemgitsdamtstoin- 
stal  ta  prich.  has  head  from 
sevcnlOradedatriBaBadmns' 
trators  who  are  navous  ritoul 
dotogsa 

Omdson  defended  Orade's 
stanceandsaldtacompanyre- 
ieeaad  al  ta  rnfarmriiim  users 
need  to  Mai  ta  patch.  Orade 
is  trying  fa  pravide  anou(^  Mor- 
mallon  aboia  security  ptobfams 
witaut  gMng  hachers  *a  road 
map*  for  tridng  advartage  of 
flews,  she  said. 

UntfabomconosTedwithOia- 
de's  laasoning- He  said  Girtar 
is  aaaaning  tat  *bad  guys  al¬ 
ways  favw  mom  tan  ta  good 
guys'aboutioftwaevrinaabtl- 
tles.  when  tafs  not  nacassaiy 
taca8e.OSOMI 
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Solaris  10  Tests  Yield 

From  Profit  Promise  Performance  Gains 


SAP  A6  Chief  Financial  Officer 
W^er  Brandt  last  weeh  back¬ 
tracked  from  earlier  statements 
that  margirts  would  reach  30%  by 
2006.  Brandt  told  a  gathering  of 
finandal  arrafysts  in  Barcelona. 
Spain,  that  SAP  “may  need  an 
additional  year'*  to  focus  on  grow¬ 
ing  market  share  and  sales. 

Linux  Sales  Boost 
Novell  Results 

Novell  Inc.  credited  improved  Lin¬ 
us  sales  arKi  favorable  esdivtge 
rates  for  improved  fmarrcial  re- 
sidts  during  the  fourth  quarter 
that  ended  Oct.  3t.  CEO  Jack 
Messman  said  he  eapects  Linux 
sales  to  “counterbalance"  a  de¬ 
cline  in  NetWare  sales  next  year. 


U.K.  May  Scrap 
EDSPrc^ 


Continuous  failures  in  an  ill-fated 
S800  nWKon  welfare  case  marr- 
agemant  and  telephony  system 
developed  in  large  part  by  Elec¬ 
tronic  Data  SystafTks  Corp.  farced 
the  head  of  the  UJC’s  Child  Sup¬ 
port  Agency  to  step  down  from 
Ms  Job  last  week.  U.K.  officials 
wn  make  a  “quick  decision"  on 
whether  to  scrap  the  problematic 
preiMrt  [QuickUnk  49246]. 

Balbner  Warns  Asia 
Leaders  on  Linux 

Microsofl  Corp.  CEO  Steve 
BafiRMT  last  week  warned  Asian 
governments  that  they  cadd  face  | 
patent  lawsuits  for  using  Linux  in-  j 
stead  of  Windows  to  run  systems.  I 
The  speech  to  government  lead-  | 
ers  in  Singapore  came  after  Sin¬ 
gapore’s  MMstry  of  Defense 
switched  20.000  PCs  from  Wm- 
dows  to  open-source  softwwe, 
artd  China.  Japan  and  South  I 
Korea  agreed  to  iointly  develop 
applications  for  Limn. 


l  scrs  ni\'c:  Fcdl-A 
s;i\  s  OS  rekindles 
interest  in  Sun 

BY  PATRICK  THIBODEAU 

5AN  JOSt 

WHU  t  sfN  Mi¬ 
crosystems 
Int.  officially 
bunched  So- 

bris  10  here  la.st  week,  the  fu¬ 
ture  prtxspects  of  the  oporat- 
'  ing  system  — *and  perhaps 
I  of  Sun  itself — were  being 
judged  many  miles  away 
‘  by  early  users  such  as  the 
Phibdelphia  Stock  Exchange 
and  FedE.x  Corp. 

TTtose  organizations,  which 
are  longtime  Sun  shops,  have 
been  testing  Sobris  10.  And 
IT  managers  at  both  EcdLx 
I  and  the  stock  exchange  said 
they're  pleased  with  what  the 
operating  system  has  deliv¬ 
ered  thus  far. 

Prior  to  the  development 
of  Sobris  10.  interest  in  Sun’s 
systenas  "was  somewhat  dwin¬ 
dling"  at  FedEx,  said  Don  Fikc. 
the  Memphis -based  company's 
technical  director.  But  now 
that  FedEx’s  IT  staffers  have 
evaluated  the  new  software, 
"interest  is  extremely  high  — 
a  major  shift  here."  he  said. 

Rke  added  that  as  a  result  of 
Solaris  10,  FedEx’s  use  of  Sun 
servers,  which  run  many  of 


SAN  JOSE 

SUN  last  week  said  li  will  indem¬ 
nify  customers  who  use  ris  up¬ 
coming  open-source  Solaris  10 
code  from  any  legal  claims.  Irt- 
demnification  is  a  parlicularty 
pointed  issue  for  Sun  whir^  last 
month  agreed  to  pay  $92  million 
to  settle  a  patent  ininngement 
lawsuit  filed  by  Eastman  Kodak 
Co.  in  2002 

Sun  settled  the  case  shortly 
after  a  federal  |ury  in  New  >hrk 


its  mission-critical  systems, 
would  at  least  slay  the  same 
and  might  even  expand, 

Many  of  the  major  features 
built  into  Solaris  10  have  been 
available  for  testing  for  some 
lime.  Over  the  past  18  months. 
Sun  has  gradually  released 
large  parts  of  the  operating 
system,  and  the  initial  version 
is  already  available  in  full  to 
users  whi>  participate  in  Sun's 
Software  Express  preview  pro¬ 
gram.  Commercial  shipments 
arc  due  by  the  end  of  lanuary. 

Key  improvements  include 
faster  networking 
technology'  that  Sun 
has  built  into  the 
TCP.-'IP  stack.  Fikc 
said  the  networking 
enhancements  have 
“dramatically  im¬ 
proved"  the  perfor¬ 
mance  of  network- 
intensive  applications 
that  run  on  Solaris- 
ba.scd  systems  at 
FedEx. 

Another  fcaiua*  that 
Fike  said  is  particularly  valu¬ 
able  is  a  toot  called  Solaris  Dy¬ 
namic  Tracing,  or  DTrace  for 
short.  DTrace  lets  users  exam¬ 
ine  how  applications  interact 
with  Solaris  10.  and  Fike  said 
he  has  been  able  to  identify 
performance  problems  in  live 
code  within  15  minutes  by  us¬ 
ing  the  tool  —  regardless  of 


ruled  that  the  company's  Java 
techrtology  violaled  three  patents 
held  by  Kodak  [QuickLink 
49832],  But  open-source  Solans 
users  won't  face  their  own 
"Kodak  momem”  Scott  Mc- 
Neaty.  Sun's  chairman  and  CEO. 
saKf  at  the  Solahs  10  launch  an¬ 
nouncement  here. 

Indeed,  both  McNealy  and 
Jonathan  Schwartz.  Sun's  presi¬ 
dent  and  diief  operating  officer, 
were  advnant  on  the  issue  and 


which  third-party  application 
may  be  running. 

IT  executives  at  Philadel¬ 
phia  Stock  Exchange  Inc.  said 
the  networking  improvements, 
coupled  with  the  application- 
tuning  capabilities  of  DTrace. 
have  increased  performance 
on  their  servers  to  such  an  ex¬ 
tent  that  they  expect  to  be 
able  to  reduce  the  amount  of 
Sun  hardware  they  need  to 
maintain. 

For  instance,  a  trading  appli¬ 
cation  that  currently  runs  on  a 
12-CPU  Sun  Fire  6800  server 
performed  better 
when  it  was  tested  on 
a  four-CPU  Sun  Fire 
4800  equipped  with 
Solaris  10. 

Without  the  perfor¬ 
mance  gains  made 
possible  by  Solaris  10. 
the  exchange  faced  the 
prospect  of  buying  ad¬ 
ditional  Sun  machines 
to  help  support  a  new 
electronic  options- 
trading  system,  said 
Thomas  Wittman,  senior  vice 
president  of  trading  system 
development.  It  was  cither 
chat  or  "take  a  look  at  some¬ 
thing  else,  whatever  that 
something  else  might  be." 
he  said. 

The  exchange  also  plaas  to 
test  new  Solaris  10  features, 
such  as  a  partitioning  tech- 


said  they  have  heard  from  corpo¬ 
rate  CIOs  who  are  concerned 
that  open-source  Solaris  could 
create  some  legal  risks  or  some¬ 
how  affect  customer  service  and 
support.  'We're  saying,  'Don't 
wony.'  "  McNealy  said 
Sun  plans  to  detail  its  open- 
source  licensing  model  within  45 
to  60  days.  aruJ  Schwartz  said 
two  weeks  ago  that  the  open- 
source  code  will  become  fully 
available  in  next  year’s  first  quar- 


Sun  to  Indemnify  Open-Source  Solaris  Users 


os  UPORAOE 

Solaris  10 
Pricing  Options 


nology  called  Solaris  Contain¬ 
ers  that’s  designed  to  boost 
system  utilization. 

“We  thirik  alt  that  has  a  lot 
of  promise  for  us."  CIO  Bill 
Morgan  said  of  Solaris  10  as  a 
whole. 

Sun  is  addressing  perfor¬ 
mance  deficiencies  that  the 
software  had  when  users  tried 
to  run  it  on  smaller  systems, 
said  Gordon  Haff.  an  analyst 
at  Illuminaia  Inc.  in  Nashua. 
N.H.  "Sun  was  very  focused 
on  big-iron  performance  and 
scalability.’’  he  noted. 

But  not  every  new  featua* 
will  be  ready  when  Solaris  10 
is  released.  Sun  said  a  tech¬ 
nology  code-named  fanus. 
which  will  let  Linux  applica¬ 
tions  run  natively  on  Solaris- 
based  systems,  and  a  I28'bit 
file  system  called  ZFS  are  due 
to  be  added  later  in  the  first 
quarter.  O  50944 


ter  (QuickLink  50749). 

is  attempting  to  drive 
more  interest  in  the  x86  version 
of  Solaris  by  allowing  users  and 
software  devdopers  to  directly 
compare  it  with  Linux  via  the 
open-source  plan. 

Illuminaia  analyst  Gordon  Haff 
said  he's  not  sure  that  an  op^- 
source  Soians  will  be  enough  to 
slow  down  migrations  to  Linux. 
But  he  noted.  Solans  offers  tools 
dial  aren't  built  into  Linux,  such 
as  Sun's  virtualization  and  file 
management  capabilities. 

-Patrick  TfiiKdeau 


Kmart,  Sears  Expect  to  Gain 
IT  Efficiencies  From  Merger 


But  reconciling  11' 
sy  stems  w  ill  he  tall 
order,  analy  sts  .say 

BV  CAROL  SLIWA 

Kmart  Holding  Corp.  and 
Sears.  Roebuck  and  Co. 
claimed  that  the  planned 
merger  they  announced  last 
week  will  broaden  their  retail 
presence  and  make  their  pro¬ 
curement,  marketing.  IT  and 
supply  chain  management 
operations  more  eflicient. 

But  the  marri^e  could  re¬ 
quire  a  daunting  amount  of  IT 
work,  depending  on  the  de¬ 
gree  to  which  the  retailers  de¬ 
cide  to  go  to  common  systems, 
said  several  retail  technology 
analysts. 

One  key  part  of  the  strategic 
plan,  for  instance,  calls  for 
many  of  Kmart's  retail  loca¬ 
tions  to  be  converted  to  Sears 
stores  as  the  latter  operation 
tries  to  branch  out  from  its 
base  in  shopping  malls, 

Sears  previously  agreed  to 
buy  50  stores  from  Kmart,  and 
Scars  CEO  Alan  Lacy,  who  will 
be  vice  chairman  and  CEO  of 
the  new  Sears  Holdings  Corp.. 
said  last  week  that  “several 
hundred"  Kmart  stores  could 
be  switched  over  altogether. 

But  the  conversion  could  re¬ 
quire  “dramatic"  IT  changes, 
said  Stephen  Smith,  an  analyst 
at  Gartner  Inc.  “We  could  find 
that  they're  more  compatible 
than  is  often  the  case  [with  re¬ 
tailers].  but  there  is  a  big  risk 
that  this  will  be  far  more  chal¬ 
lenging  than  they're  promot¬ 
ing  today."  he  said. 

Not  surprisingly,  the  two 
emnpanies  have  accumulated 
plenty  of  different  systems. 

At  the  store  level.  Kmart  in 
2001  announced  that  it  was 
buying  IBM  SurePOS  700 
cash  registers  running  the 
vendor’s  point-of-sale  operat¬ 
ing  system. 

Earlier  this  year.  Scars  said 
it  planned  to  install  newer 
SurePOS  machines  running 
.%0Commerce  Inc.'s  POS  soft¬ 


ware  on  Microsoft  Corp.'s 
Windows  XP  Embedded 
operating  system. 

But  the  greatest  challenge 
won't  lie  with  the  in-store  IT 
systems,  according  to  fohn 
Fontanclla.  an  analyst  at  The 
Yankee  Group  in  Boston.  He 
said  the  real  prt>blcm  will  bo 
with  back-office  applications 
at  headquarters,  including  the 
merchandising,  inventor>' 
planning  and  supply  chain 
software-  “From  a  process  per¬ 
spective.  if  you're  going  to 
start  saving  money,  you’ve  got 
to  standardize  on  one  distribu¬ 
tion  nctwork.“  Fontanella  said. 

Kmart  and  Sears,  which  ex¬ 
pect  to  complete  the  stock- 
swap  transaction  b)'  March, 
declined  to  comment  on  their 
future  IT  plans.  A  spokesman 
for  Sears  said  only  that  the 
two  companies  will  “do  a  thor¬ 
ough  analysis  of  both  organi¬ 
zations  and  determine  the  best 
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path  titw^ard  intc-i/rjimn  - 
When  it  merged  with  Lands 
End  Inc.  in  2002.  Sears  decided  | 
I  not  to  combine  IT  operations.  i 

Scars  has  been  more  aggress-  ^ 
I  sivc  then  Kmart  in  pursuing 
new  IT  initiatives  during  the 
pa-st  two  years.  1  jst  spring. 

Sears  CIO  Gerald  Kelly  Ir.  or¬ 
chestrated  a  10-ycar.  $1.6  bil¬ 
lion  IT  outsourcing  deal  with  , 
I  Computer  Sciences  Corp.  And  I 
during  the  third  quarter.  Sears  ^ 
signed  a  licensing  deal  with  | 
JDA  Software  Group  Inc.  for 
an  integrated  set  of  tools  to  ' 
assist  with  merchandise  man-  j 
I  agement  as  well  as  planning  > 

1  and  forecasting.  j 

,  Kmart  last  week  launched  I 
a  redesigned  Web  site  that  its 
e-commercc  team  built  with 
Fry  Inc.  But  other  than  that, 
major  IT  initiatives  have  bt'cn 
.sparse  for  Karen  Austin,  who 
became  Kmart’s  CIO  in  April 
2002.  “We  wea*  in  bankruptcy 
for  a  lot  of  Karen's  tenure."  a 
Kman  spokeswoman  said.  She 
added  that  Kmart  is  “gening 
back  to  busirtess"  after  emerg¬ 
ing  from  bankruptcy  protec¬ 
tion  in  May. 

Long-standing  IT  wiks  con-  j 
tributed  to  Kmart's  business 
problems.  The  company  tried 
to  reverse  years  of  constrained  ' 
IT  spending  with  a  two-year. 

S1.4  billion  investment  in  May 
2000.  But  by  the  time  i.t  filed 
for  bankruptcy  protection  in 
lanuary  2002.  Kmart  found  it¬ 
self  without  a  CIO  and  strug¬ 
gling  to  fix  its  supply  chain 
system  and  replace  an  exten¬ 
sively  modified  warehouse 
management  system. 

“Kmart  has  really  been  in  j 
survival  mode."  said  Rob  Garf,  ' 
an  analyst  at  AMR  Research 
Inc.  He  and  other  anaJy’sts  said 
it  would  make  sense  for  the 
retailers  to  head  in  the  IT  di¬ 
rection  of  Scars.  “The  com¬ 
bined  entity  needs  to  continue 
the  momentum  that  Sears  has 
gained  over  the  last  couple  of 
years."  Garf  said.  "It’s  impor¬ 
tant  for  them  not  to  slow  that  \ 
process  down.”  O  50943  ' 


Oracle  Sets  Quarterly 
Software  Patching  Plan 


8V  JAIKUMAR  VUAVAN 

Oracle  Corp.  last  week  said  ft's 
moving  to  a  quarterly  patch  re¬ 
lease  schedule  m  response  to 
demands  from  users  for  a  more 
predictable  process  of  applyrng 
security  fixes  to  ifs  software 

The  move  comes  amid  contin¬ 
uing  cntiQsm  by  consulting  firm 
Gartner  Inc.  of  the  way  Oracle 
handled  a  mator  seoxnty  update 
for  Its  database  and  application 
s^ver  software  m  August.  But  an 
Oracle  sptAeswoman  said  the 
comp^' s  announcement  was 
only  'tangentially  related’  to 
Gartner's  release  two  weeks  ago 
ot  a  research  note  that  blasted 
Oracle  over  the  August  patch 

The  first  set  of  patches  under 
the  Quarterfy  aoor^  6  sched¬ 
uled  to  be  r^ased  n  January. 
New  patches  will  be  issued  every 
three  morrtfts  and  will  include 
all  previous  fixes  for  the  same 
products. 

Mary  Ann  Davidson.  Oracle's 
chief  secunty  officer,  said  during 
a  teleconfer^Ke  that  the  new 
Cntical  F^ch  Update  program 
should  let  users  bena  plan  for 
secunty  fixes  while  not  exposing 
them  to  urKlue  risks.  ‘Based  on  a 
lot  of  dscussions  (with  users),  we 
feel  confidenf  that  this  wd  sthke 
a  good  balance.’  Davidson  said, 
adding  that  tril  of  Oracle's  maior 
prorki^  will  be  covered  under 
the  program 

Oracle's  adoption  of  a  regular 
patching  s^iedule  "is  go*ig  to 
make  rt  a  lot  easier  for  companies 
to  plan  for  these  {hxes].*  sard 
Rich  ftemiec.  a  forme^  president 
of  the  International  Oracle  Users 
Group  and  the  CEO  of  TUSC.  a 
Chicago-based  Oracle  technolo¬ 
gy  consuflffig  firm. 

It's  good  news  for  users.’ 
agreed  Howard  Muffler,  director 
of  enterprise  services  at  Embry- 
Rtdde  Aeronautical  University  m 
Daytona  Beach.  Fla.  The  sch^ 
uses  a  wide  variety  of  Oracle 
products,  and  Muffler  said  that 
having  a  predictabie  patch  up¬ 
date  schedule  will  etiminale  the 
’waflmg  game.’ 

In  Augist.  Oracle  said  it  was 


considenno  the  adoption  of  a 
monthly  patch  release  schedule, 
similar  to  the  approach  that  Mi¬ 
crosoft  Corp.  has  been  usmg 
since  October  2003.  But  users 
favored  the  quarterly  plan.  David 
son  said.  A  three-month  cycle 
‘seemed  to  be  something  they 
could  Irve  with '  she  said,  adding 
that  Oracle  w^l  release  out-of¬ 
cycle  patches  if  the  situation 
c^ls  for  them 

Ouarterfy  updates  make  sense 
for  patching  database  servers, 
said  F^le  Lindstrom.  an  analyst 
at  Spire  Secuity  LlC  m  MalvWn 
Pa  Given  how  vnportant  data¬ 
base  servers  are  to  companies, 
systems  administraiors  are  un¬ 
likely  to  want  to  patch  them  more 
frequently  than  that  he  said 

In  its  Nov.  tl  research  note. 
Gartner  took  Oracle  to  task  for 
not  (tedosing  enough  details 
about  the  vuherabiMies  ad¬ 
dressed  by  the  August  patch, 
which  was  dubbed  Patch  68  and 
9ven  Oracle's  highest  seventy 
rating.  Oracle  reissued  an  alert 
related  to  the  patch  m  mid- 
October  after  proof-of-conoept 
exploit  code  began  crculating 
on  the  internet. 

If  you  don't  tel  the  good  guys 
what  the  problem  s.  they  don1 
have  a  way  to  evaluate  the  seven¬ 
ty.’  said  Gartner  analyst  Rich 
Mogul  He  added  that  Gartner, 
whidi  Q  advtsng  its  ckems  to  in- 
staU  the  patch,  has  heard  from 
severe  Oracle  database  admns- 
trators  who  are  nervous  about 
domgso. 

Davidson  defended  Oracle's 
stance  and  SMf  the  company  re¬ 
leased  al  the  mformation  users 
need  to  mslal  the  patch  Orade 
IS  trying  to  provide  enough  ntor- 
matnn  ^xxil  secuniy  problems 
without  giving  hackers ‘a  road 
map’  for  Uridng  advantage  ol 
flaws,  die  said 

Lmdslrom  concurred  with  Ora¬ 
cle's  reasoning.  He  said  Gartner 
6  assuming  that  ‘bad  guys  al¬ 
ways  know  more  thsi  the  good 
guys’  about  software  vutnerabifc- 
ties.  when  that's  not  necessanly 
the  case.  O  50941 
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EDS  Reports  Weak 
Results  for  Q3 

Electronic  Data  Systems  Corp. 
blamed  the  delayed  Mavy/Marine 
Corps  Intranet  protect  and  other 
woes  for  the  weak  third-quarter 
financial  results  it  reported  last 
week.  The  report  was  delayed  sev¬ 
eral  times  because  of  accounting 
issues.  EDS  is  ^  restating  its 
third  and  fourth  quarters  of  2003. 
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Microsoft  Courts 
NetWare  Users 

Mkrosoft  Corp.  last  week  stepped 
up  its  efforts  to  persuade  users  of 
Novell  lnc.‘s  NetWare  io  switch  to 
Windows  Server  2003.  releasing 
migration  products  and  support  | 
programs  for  the  move.  Novell  has 
strengdiened  its  Lima  offerings.  I 
roling  out  a  desktop  Lima  version 
this  month.  Microsoft  will  offer 
training  vouchers,  online  techni¬ 
cal  support  and  migration  tools. 

RetekBuysSyncra 
To  Extend  CRM  Une 

Relek  Inc.  in  Miiuteapolis  last 
week  acquired  the  assets  of  Syn- 
era  Systems  Inc.  in  Waltham. 

Mass.,  for  less  than  SS  million  in 
cash  in  order  to  expand  its  line  of 
supply  chain  management  tods. 

The  Smicra  tods  let  retailers  work 
with  suppliers  on  promotion  plan¬ 
ning,  cortsumer  demand  forecast¬ 
ing  and  inventory  management.  | 

Seagate  Adds 
40C^B  Hard  Drive 

Seagate  Technology  LLC  last 
week  released  a  40066  hard  disk  ? 
drive  targeted  at  PCs.  The  drive  is  | 
the  fourth  member  of  Seagate's  ’ 
Barracuda  7200.8  series  and  in¬ 
cludes  versions  vrith  an  Ultra 
ATA/100  interface  aikd  a  Serial  ; 
ATA  interface.  The  speed  of  the 
disc  is  7.200  rpm,  with  an  aver¬ 
age  seek  tirite  of  8  mlKseconds. 
Pricing  wasn't  disclosed. 


Open-Source  Vendor 
Sweetens  CRM  Pot... 

...  with  Sugar  Cubes  -  two.  to  be  precise.  SugarCRM  Inc. 
in  Cupertino,  Calif.,  began  shipping  the  alpha  ver¬ 
sion  of  its  open-source  Sugar  Sales  Professional  soft¬ 
ware  in  the  spring,  released  the  product  commercial¬ 
ly  in  September  [QuickLink  49314]  and  made  Ver¬ 
sion  2.0  available  last  month.  This  week  the  speedy 

vendor  delivers  a  pair  of  pro-  and  keep  your  data,  the  appli- 
configured.  Linux-based  ap-  cation  and.  of  ciHirse,  (he 

plianccs  called  Sugar  Cubes.  source  code,  which  can  be 

The  1005  costs  S4.405  and  can  customized  by  your  own  PHP 
handle  up  to  UK)  users,  and  gurus  to  your  he.-rrt's  content, 

the  3005  starts  at  S7.*)95  and  Tara  Smith.  SugarCRM's  di- 


and  keep  your  data,  the  appli¬ 
cation  and.  of  ciHirse.  (he 
source  code,  which  can  be 
customized  by  your  own  PHP 
gurus  to  your  he.art's  content. 
Tara  Smith.  SugarCRM's  di¬ 
can  -supp<»rt  up  to  400  people,  rector  of  marketing,  claims 
SugarCRM's  .software  runs  on  that  gives  her  c<impany  a  big 
the  "LAMP  stack"  of  Linux.  edge  over  Salesforce.com  Inc. 
Apache.  MySQL  and  PHP.  “If  you  leave  Salc*sforcc.  you 
The  entire  application  wa.s  gc-t  your  data  but  not  the  app 
written  in  PHP.  whichgives  to  run  it."  she  says, 
it  exceptional  performance,  . 

says  facob  Taylor.  Sugar-  S6CUnty  tOOl  S 

CRM's  vice  president  ofengi-  link  tO  RDmedy  . . . 
necring  and  co-founder.  In  ...  can  help  fT  staffers  manage 

fact,  the  company  is  so  proud  arfo  fa  network  vulnerabilities, 
of  the  software's  perfonn.ince  By  year’s  end.  Solutionaiy 
that  with  each  page  refresh,  it  Inc.  in  Omaha  plans  to  corn- 
displays  the  resfK'nse  lime.  If  plcte  pilot  tests  of  integration 
you  get  tireNj  of  paying  the  an-  hooks  to  BMC  Software  Inc.'s 
nual  support  ft'c  of  S239  per  Remedy  IT  help  desk  tools. 


user  for  Sugar  Sales  Profes¬ 
sional.  >x>u  can  simply  stop  — 
Sugar  Cube;  One  tump  or  two? 


The  htwks  arc  being  built 
into  an  upgrade  of  its  Active- 
Guard  Security  Management 
service,  which  monitors  sys¬ 
tems  for  security  vulner¬ 
abilities.  Remedy 
users  will  be 
able  to  get  a 
prioritized 
list  of  security 


I  problems 
I  that  Active- 
Guard  finds 
and  then  use 
the  informa¬ 
tion  to  issue 
trouble  tick¬ 
ets  to  the  ap¬ 
propriate  IT 
workers.  IT 
security  per¬ 
sonnel  don't 
always  know  who’s  the  best 
choice  to  fix  a  problem,  says 
Mike  Hrabik.  Solutionary's 
chief  technolog>’  ofTicer.  So. 
he  argues,  it's  essential  to  cor¬ 
rect  known  security  problems 
through  an  established  IT 
management  process,  such  as 
Remed>'-ger»erated  trouble 
tickets.  That  can  be  particu¬ 
larly  important  after  a  compa¬ 
ny  does  a  large-scale  vulnera¬ 
bility  assessment,  which  of¬ 
ten  reveals  thousands  of  se¬ 
curity  holes.  “How  do  you 
bubble  up  the  things  you 
need  to  do  first?"  Hrabik  asks. 
“And  how  do  get  the  right 
people  to  fix  them?"  Active- 
Guard  will  answer  the  first 
question,  he  says,  and  the  sec¬ 
ond  can  be  resolved  through 
the  integration  with  Remedy. 
Shipments  are  expected  to 
begin  in  the  first  half  of  next 
year. 

The  more  (variables), 
the  merrier . . . 

...  the  results  will  be  for  users  of 
business  intelUgence  tools.  But 
that's  difficult  to  achieve  with 
BI  models  that  can  take 
weeks  to  create  and  still  in¬ 
clude  only  a  handful  of  vari¬ 
ables.  And  most  users  find 
themselves  having  to  rely 
on  such  models  now.  claims 
loerg  Rathenberg.  vice  presi¬ 
dent  of  marketing  and  com¬ 
munications  at  San  Francisco- 
based  KXEN  Inc.  In  contrast, 
he  says,  his  company's  KXEN 
Analytic  Framework  tools  use 
advanced  modeling  tech¬ 
niques  based  on  the  statistical 
learning  theories  of  Vladimir 
Vapnik.  a  Russian-born  math¬ 
ematician  who  is  now  a  re¬ 


search  fellow  at  NEC  Labora¬ 
tories  America  Inc.  and  a  pro¬ 
fessor  of  computer  science  at 
Columbia  University  in  New 
York.  KXEN's  software  can 
automatically  build  predic¬ 
tive  models  with  hundreds  or 
even  thousands  of  variables, 
according  to  Rathenberg.  He 
says  it  can  take  up  to  three 
weeks  for  a  statistician  using 
conventional  tools  to  create  a 
working  model  that  business 
analysts  can  use  to  find 
“rules"  among  the  informa¬ 
tion  in  a  data  warehouse.  “Wc 
can  do  three  or  four  models  a 
day."  he  says.  Release  3.II  is 
due  next  month  with  new  as¬ 
sociation  capabilities  that 
rank  the  most  relevant  rules 
divined  from  BI  queries. 

Antispam  software 
market  heats  up . . . 

. . .  with  a  competitive  "trade  up" 
program  from  Cloudmark  Inc. 
According  to  CEO  Karl  Jacob, 
the  San  Francisco-based  ven¬ 
dor  will  let  corporate  users 
of  rival  technologies  test  its 
Cloudmark  Immunity  soft¬ 
ware.  And  if  they  like  Immu¬ 
nity  better  than  what  the>' 
already  use, 
they  can 
keep  the 
software  and 
won't  have 
to  pay  any¬ 
thing  for  it 
"until  they  I 
stop  paying  ' 
for  their  current  antispam 
product."  Jacob  says.  Ho  ar- 
guc.s  that  IT  managers  rushed 
in  tools  to  dam  the  flood  of 
spam  and  that  many  compa¬ 
nies  arc  now  dissatisfied  with 
the  results  —  either  spam 
keeps  coming,  or  the  false- 
positive  rates  arc  too  high. 
Although  most  antispam 
products  offer  plug-ins  for 
Outlook,  few  integrate  with 
Lotus  Notes.  For  Cloudmark. 
that's  due  to  end  in  next 
year's  first  quarter,  when  the 
company  plans  to  release  an 
upgrade  with  built-in  links  (o 
Notes  mail  clients.  O  50^3 
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EDS  Reports  Weak 
Results  for  Q3 

Bldraiiic  OMa  SyMm  Cwp. 
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tial  than  bacaaw  tl  iccann8n 
hana.  EDS  h  aha  rntalhg  8i 
8*8  aad  hartk  aaarhn  at  2003. 


Mcrosoft  Courts 
NetWare  Users 

Mkratofl  Cofp.  im  «Mk  HaMMd 

IMi  he.'s  IMMm  to  fwllch  to 
VMmw  Stnnr  2003.  rtomtog 
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prograni  tor  tfi»  movt.  NomI  tias 
ffrngtomd  Ml  Umb  ofliringi. 
rdtoig  Ml  a  dMktop  Lina  vwtoan 
toto  nonii.  Mfernofl  «■  oftar 
lratoingwneliars.onfewtodni- 
cal  aNpgort  and  inigralton  tooto. 
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wMkaegiMlIitaaaatoofSyn- 
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SoaoeteAdds 
Im^Hard  Drive 
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Open-Source  Vendor 
Sweetens  CRM  Pot... 

...wttiSuoto  Cubes -two.  to  bsprectoe.SugarCRM  Inc. 
in  Cupertino.  Calif.,  began  shipping  the  alpha  ver> 
sion  of  its  open-source  Sugar  Sales  Professional  soft¬ 
ware  in  &e  spring,  released  the  product  conunercial- 
ly  in  September  [QuickUnk  49314]  and  made  Ver¬ 
sion  2.0  available  last  month.  This  week  the  speedy 

vendor  delivers  a  pair  of  pre* 
coofigured,  Linux-based  ap- 
pUan^  called  Sugar  Cubes. 

Tbe  1005  costs  S4,49S  and  can 
handle  up  to  100  users,  and 
the  300S  starts  at  $7,995  and 
can  support  up  to  400  people. 

SugarCRbrs  software  runs  on 


the  "LAMP  stack”  of  Linux, 
Apache,  MyS(^L  and  PHP. 
The  entire  aj^lication  was 
written  in  PHP,  which  gives 
it  exceptional  performance, 
says  Jacob  Taylor,  Sugar- 
CRM's  vice  president  of  engi- 
neerii^  and  co-founder.  In 
toct.  the  company  is  so  proud 
of  the  software’s  performance 
that  with  each  page  refresh,  it 
displays  the  response  time.  If 
you  get  tired  of  paying  the  an¬ 
nual  support  fee  of  $239  per 
user  for  Sugar  Sales  Profes- 
stonaL  you  can  simply  stop  ^ 
Sugar  CitoK  Ont  tong  «r  two? 


and  keep  your  data,  the  appli¬ 
cation  and.  of  course,  the 
source  code,  which  can  be 
customized  by  your  own  PHP 
gurus  to  your  heart's  content 
Tara  Smith.  SugarCRM's  di¬ 
rector  of  marketii^  claims 
that  gives  her  company  a  big 
edge  over  Saiesforce.com  Inc. 
"If  you  leave  Salesforce,  you 
get  your  data  but  nM  the  app 
to  run  it,**  she  says. 

SecuriNtooTs 
link  to  Remedy... 

. . .  can  tolp  IT  staftors  flianagt 
and  fix  network  vuincnMMtos. 

By  year’s  end.  Solutionary 
Inc.  in  Omaha  plans  to  com¬ 
plete  pilot  tests  of  integration 
hooks  to  BMC  Software  loc.'$ 
Remedy  IT  help  desk  tools. 
The  hooks  are  being  built 
into  an  upgrade  of  its  Active- 
Guard  Security  Management 
service,  which  monitors  sys¬ 
tems  for  security  vulner- 
^Uities.  Remedy 
users  will  be 
able  to  get  a 
prioritized 
list  of  security 


problems 
that  Active- 
Guard  finds 
and  then  use 
the  informa¬ 
tion  to  issue 
trouble  tick¬ 
ets  to  the  ap¬ 
propriate  IT 
workers.  IT 
security  per¬ 
sonnel  don't 
always  know  who's  the  best 
choice  to  fix  a  problem,  says 
Mike  Hrabik.  Sohitionar/s 
chief  technology  ofiker.  So. 
he  argues,  it’s  essential  to  cor¬ 
rect  known  security  problems 
through  an  established  IT 
management  process,  such  as 
Remedy-generated  trouble 
tickets.  That  can  be  particu¬ 
larly  important  after  a  compa¬ 
ny  does  a  large-scale  vulnera¬ 
bility  assessment,  which  of¬ 
ten  reveals  thousands  (A  se¬ 
curity  holes.  "How  do  you 
bubble  up  the  things  you 
need  to  do  first?"  Hrabik  asks. 
"And  how  do  get  the  right 
people  to  fix  them?"  Active- 
Gu^  will  answer  the  first 
question,  be  says,  and  the  sec¬ 
ond  can  be  resolved  through 
the  integratioD  with  Remedy. 
Shipments  are  expected  to 
be^  in  the  first  half  of  next 
year. 

the  more  (variables), 
themeirier... 

. . .  tlw  routo  Mil  to  for  Hsara  of 
biwtoow  tototogonra  tooto.  But 

that’s  difficult  to  achieve  with 
Bl  models  that  can  take 
weeks  to  create  and  still  in¬ 
clude  only  a  handful  of  vari¬ 
ables.  And  most  users  find 
themselves  having  to  rely 
on  such  models  now,  rbimit 
Joerg  Rathenbeig.  vice  presi¬ 
dent  of  marketing  and  com¬ 
munications  at  San  Francisco- 
based  KX£N  Inc  In  contrast, 
he  says,  his  company’s  KXEN 
Analytic  Framework  tools  use 
advanced  modeling  tech¬ 
niques  based  on  the  statistical 
learning  theories  of  Vladimir 
Vapnik.  a  Russian-bom  math¬ 
ematician  who  b  now  a  re¬ 


search  fellow  at  NEC  Labora¬ 
tories  America  Inc.  and  a  pro¬ 
fessor  of  computer  science  at 
Columbia  University  in  New 
York.  KXEN's  software  can 
automatically  build  predic¬ 
tive  modeb  with  hundreds  or 
even  thousands  of  variables, 
according  to  Rathenberg.  He 
says  it  can  take  up  to  three 
weeks  for  a  statistician  using 
conventional  toob  to  create  a 
working  model  that  business 
analysts  can  \ise  to  find 
"rules”  among  the  informa¬ 
tion  in  a  data  warehouse.  "We 
can  do  three  or  four  modeU  a 
day,"  he  says.  Release  3.U  b 
due  next  month  with  new  as¬ 
sociation  capabilities  that 
rank  the  most  relevant  rules 
divined  from  BI  queries. 

Antispam  software 
market  heats  up... 

. . .  M8k  •  laiqMddw  Inl,  up' 
program  from  Ctoudmerk  Inc. 

According  to  CEO  Karl  Jacob, 
the  San  Francisco-based  ven¬ 
dor  will  let  corporate  users 
of  rival  technolc^ies  test  its 
Cloudmark  Immunity  soft¬ 
ware.  And  if  they  like  Immu¬ 
nity  better  than  what  they 
already  use, 
they  can 
keep  the 
software  and 
won't  have 
to  pay  any¬ 
thing  for  it 
‘^u)t^]  they 
st<^  paying 
for  their  current  antbpam 
product,”  Jacob  says.  He  ar¬ 
gues  that  IT  managers  rushed 
in  toob  to  dam  the  flood  of 
spam  and  that  many  compa¬ 
nies  are  now  dissatbfied  with 
the  resuJts  ~  either  spam 
keeps  coming,  or  the  false¬ 
positive  rates  are  too  lugh. 
Although  roost  antbpam 
products  offer  phjg-ins  for 
Outlook,  few  integrate  with 
Lotus  Notes.  For  Cloudmark. 
that's  due  to  end  in  next 
year's  first  quarter,  when  the 
company  plans  to  release  an 
upgrade  with  built-in  link*  to 
Notes  mail  clients.  0  50083 
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Introducing  the  Intel*  Xeon'  processor  with 
support  for  32-  and  64-brt  applications. 

It  means  the  most  widely  used 
server  platform  in  the  world  can  now  work  even  harder. 

And  new  platform  technologies  enable  increased  power  savings, 
flexibility  and  performance.  For  more 


information — and  more  choice — visit  intel.com/business. 
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Users  Say  Nortel  Continues 
To  Deliver,  Despite  Problems 


Rnancial  review'  raises  concerns  but 
isn’t  seen  as  reason  to  abandon  vendor 


•T  MATT  HAMBLEN 

Ten  LONGTIME  cus¬ 
tomers  of  Nortel 
Nerworics  Corp.  said 
last  week  that  they 
want  the  networking  equip¬ 
ment  vendor  to  wrap  up  its 
yearlong  internal  accounting 
probe  as  soon  as  possible.  But 
they  all  said  they’re  still  com¬ 
mitted  to  using  its  products. 

On  Nov.  U,  Nortel  again  de¬ 
layed  the  release  of  its  finan¬ 
cial  results  for  2003  and  the 
first  half  of  this  year,  saying  it 
would  need  another  30  to  60 
days  to  complete  Hs  review  of 
revenue  recognition  issues  and 
other  nutters  dating  back  to 
1999.  Financial  analysts  reacted 
sharply,  with  some  of  them 
warning  that  the  continuing 
delays  coukj  cause  Nortel  to 
be  delisted  by  stock  exchanges 
in  Toronto  and  New  York. 


Users  such  as  Mike  Hazdra, 
telecooununications  manager 
at  Benedictine  University  in 
Lisle,  UU  said  they  are  well 
aware  of  the  latest  financial 
update  from  Nortel  Hazdra 
described  the  new  delay  as 
"a  fiasco”  for  Nortel  and  said 
it  makes  him  ”wonder  what’s 
going  on”  at  the  Brampton. 
Ontario-based  vendor. 

“It  has  made  me  a  less- 
staunch  Nortel  supporter, 
even  though  their  technology 
is  really  good.*  Hazdra  said. 
But  he  added  that  Nortel  still 
offers  “the  best  phone  system 
you  can  buy”  ai^  that  a  stock 
delisting  or  even  more  dire 
developments  at  Nortel  likely 
wouldn’t  affect  him  immedi¬ 
ately.  “If  that  happens,  ru  still 
have  a  Nortel  switch  and  can 
still  get  replacement  parts 
for  it.*  be  said.  “FU  have  it 


sitting  here  until  it  rusts." 

Grant  Eberlin.  manager 
of  FT  at  NRI  Industries  Inc., 
a  maker  of  recycled  rubber 
products  in  Toronto,  said  he 
also  has  grown  more  con¬ 
cerned  about  None!  as  the 
accounting  probe  has  been 
prolonged. 

“These  circumstances  must 
be  distracting  the  company 
from  carrying  out  its  business 
strategy,”  said  Eberirn.  who 
has  used  the  company's  Meri¬ 
dian  voice  switch  and  other 
gear  since  1992.  “How  can  you 
^ve  your  eyes  on  the  ball  of 
getting  out  there  with  prod¬ 
ucts  when  you’re  fighting  your 
financials?” 

Poiential  ^lout 

Caren  Hart,  a  board  member 
of  the  Chicagoiand  Nortel 
Networks  Users  Association, 
said  she  worries  about  re¬ 
duced  support  from  Nortel  if 
there  is  further  fallout  from 
the  pn^.  Hart  is  a  telecom 


feel  [Nor¬ 
tel  is]  a  strong 
engineering  compa¬ 
ny,  and  the  proof  is 
that  t^  continue 
to  deliver,  even  dur¬ 
ing  this  difficuK  time. 

OREO  BRITZ.  MANAGER  OF 
TELECOM  ENGINEERING.  BNSr 

manager  at  an  insurance  com¬ 
pany  that  she  asked  not  be 
identified.  It  uses  Nortel  prod¬ 
ucts  in  54  ofTtces  nationwide. 

On  the  other  hand,  Margaret 
Rettig.  a  telecommunication.^ 
manager  at  a  global  manufac¬ 
turing  company,  said  the  in¬ 
ternal  probe  Imn’t  had  any 
adverse  impaa  on  the  level 
of  service  she  receives  from 
the  company. 

"If  anything.  Nonel  has 
been  much  more  attentive  to  . 
us.”  added  Rettig.  who  also  I 


a.-ikcd  that  her  company  not  be 
named.  She  is  a  board  member 
of  the  Chicago-based  Interna¬ 
tiona]  Nortel  Networks  Users 
Association,  which  includes 
the  Chicagoiand  chapter  and 
69  other  regional  groups. 

The  Burlington  Northern 
and  Santa  Fe  Railway  Co.  uses 
Nortel  products  throughout 
iLs  networks.  Greg  Britz, 
BNSFs  manager  of  telecom 
engineering,  said  FT  execu¬ 
tives  at  the  Fort  Worth,  Texas- 
based  company  recently  were 
told  by  outside  technology 
analysts  that  Nortel  is  still  a 
solid  vendor. 

The  analysts  did  say  that 
if  Nortel's  revenue  feU  signif¬ 
icantly,  it  could  affect  the 
company’s  ability  to  develop 
new  products.  "But  our  expe- 
rieoce  over  the  last  two  years 
with  Nortel  has  been  quite 
good."  Britz  said.  “We  feel 
they're  a  strong  engineering 
company,  and  the  proof  is  that 
they  continue  to  deliver,  even 
during  this  difficult  Kmc.” 
OS0908 


Nortel  sBts  ttial  despite  Its  financial 
imuUes.  customers  aren't  pulling  contracls: 

^(MctUikSOaiO 


Four  Vendors  Team  Up 
On  Standardized  Linux 


Red  Hat  and  Novell 
decline  to  join  with 
second-tier  firms 


•v  TOOO  R.  WEtBB 

Four  small  Linux  vendors  last 
week  said  they’re  [oining  to¬ 
gether  to  create  a  common 
code  base  in  an  effort  to  at¬ 
tract  more  independent  soft¬ 
ware  vendors  a^  hardware 
makers  to  support  their  ver¬ 
sions  of  the  open-source  oper¬ 
ating  system. 

The  four  companies  are 
Cooecthra  SA.  MandrakeSoff 
SA.  Progeny  Linux  Systems 
Inc  and  Thrbolinux  Inc  Prog¬ 
eny  has  head<iuaiters  in  Indi¬ 
anapolis.  whfle  Conectiva. 
Mandrakesoft  and  Turbolinux 


are  based  in  Brazil.  France  and 
Japan,  respectively. 

Linux  market  l^ets  Red 
Hat  Inc  and  Novell  Inc  both 
declined  undtations  to  take 
part  in  the  ioint  initiative.  A 
Novell  spokesman  said  com¬ 
pany  officials  are  supportive 
of  the  new  group,  but  “at  this 
point,  we’re  simply  giving 
them  moral  support." 

Ian  Murdock,  chief  strate¬ 
gist  and  co-founder  of  Proge¬ 
ny  and  a  founder  of  the  De- 
bian  open-source  project  said 
the  idea  behind  the  i  lnnv 
Core  Consortium  is  to  help 
reduce  incompatibiliKcs  for 
users  and  independent  soff- 
ware  vendors  by  building  a 
single  code  base  that's  compli¬ 
ant  with  the  Linux  Standard 


Base  2.0  specificaKons. 

Individually,  the  four  com¬ 
panies  don't  have  the  clout  or 
customer  base  to  attract  strong 
interest  from  software  and 
server  makers,  Murdock  said. 
They  hope  to  change  that  by 
developing  the  common  set  of 
core  bhiaries,  which  is  due  to 
be  available  for  incorporation 
into  their  operating  systems  in 
next  year’s  first  quarter. 

But  the  vendor  group  has  its 
work  cut  out  for  it.  said  Stacey 
Quandt,  an  analyst  at  Robert 
Frances  Group  Inc  in  West- 
port.  Corm.  "f  understand  what 
they’re  doing,"  Quandt  said. 

She  predicted,  thou^  that  the 
effort  *^¥11]  have  limited  suc¬ 
cess"  because  Red  Hat  and 
Novell’s  SUSE  Linux  unit  al¬ 
ready  offer  independent  soft¬ 
ware  vendors  the  Linux  plat¬ 
forms  they  need  to  support 
Gordon  Hafi*.  an  analyst  at 
Qhiminau  Im.  in  Nashua.  Nil. 
said  be  also  doesn't  expect  the 


Linux  coDsorthim  to  attract  a 
huge  amount  of  interest  from 
the  software  vendors.  '7'm 
skeptical  it’s  going  to  mate  a 
big  difference,"  be  said,  noting 
that  many  of  the  vendors  don't 
want  to  st^port  more  than  one 
or  two  Linux  brands. 

Different  Outkwks 

Murdock  acknowledged  that 
the  presence  of  Red  Hat  and 
Novell  would  "mate  the  result 
of  the  initiative  stronger."  But 
he  said  it’s  undeistandabic 
that  they  don't  foel  the  same 
need  to  join  in  as  the  other 
vendors  da  "They're  probably 
happier  with  the  current  situa¬ 
tion  than  the  rest  of  us."  be 
said.  “But  we  firmly  believe 
that  situation  isn't  in  the  best 
interest  of  the  industry  in  the 
long  haul  We  hope  they  come 
to  thinking  the  same  way." 

The  Linux  Core  Consortium 
is  reminiscent  of  Unitedlinux, 
a  joint  mitiative  that  was  set 


up  in  May  2002  by  Conectiva. 
'liirbolinux,  Caldera  Interna¬ 
tional  Inc.  and  SUSE  Linux  AG 
prior  to  its  acquisition  by  Nov¬ 
ell.  Caldera  has  since  renamed 
itself  The  SCO  Group  Inc 

Unitedlinux  largely  came 
undone  after  Lindon.  Utah- 
based  SCO  began  its  legal 
campaign  against  Linux  ven¬ 
dors  and  users  in  March  2003. 

Murdock  said  the  new  effort 
will  incorporate  some  of  the 
lessons  learned  from  United- 
Linux.  “It  was  a  great  idea  that 
was  badly  executed."  be  said. 
"In  a  lot  of  ways,  we're  trying 
to  realize  the  potential  United- 
Littux  had"  €150946 


Reporter  Carol  SUwa 
contributed  to  this  story. 


IMIIEWS 

Rx  aikllbonM  coMtage  aid  InioniBiKin 
about  Ns  tCKK.  Of  Web  site 

^MdlMilOaO 


Being  vigilant  helps  avoid  surprises, 
in  SANs  as  in  life. 

There  are  probably  things  happening  right  now  on  your  SAN  that  could  lead  to 
appalling  performance  or  a  complete  system  crash. 

You  don’t  know  when  it  wilt  happen. 

You  don’t  know  how  it  will  happen. 

But  when  it  does  happen,  youll  wish  you  were  aware  things  were  building  up  to  give 
you  a  nasty  ^rprise,  an  expensive  surprise. 


Finis  ar 


Fnsar  has  been  speedng  up  neMrtu  and 
dHwenng  best^Hveed  onMucts  and  testni 
soMnns  snee  1968.  NASDAQ.  FNSR. 

wwHr.ftnisar.com/plan 


Research  shows  that  SAN  downtime  can  cost  organizations  $100,000  per  minute, 
or  more.*  Finisar’s  NetWisdom  and  Xgig  solutions  help  you  avoid  these  costs  by 
monitoring  your  SAN  to  stop  degradation,  CRC  errors  and  events  that  impact  your 
most  critical  applications,  business  data  and  transactions. 

View  our  web  seminar,  including  a  customer  case  study  and  demo  of  NetWisdom 
by  visiting  www.tinisar.conVpIan 

Avoid  nasty  surprises.  Monitor  your  SAN  and  hang  on  to  your  budget. 

Source;  Fibric  Compiling:  Beyond  the  Nber  Data  Center.  RBCC«iU  Reports  Oct  2003 
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Sun  Offers  Mustang 
Betas  to  Developers 

Sun  HerwivlMni  he.  Ittt  WMk 
optntd  fiN  Md  Mraton  of  Hi 
Jam  2  PlMfarm  StMdvd  Edttnn 
(«eSE  6.0.  BoOi  mwid  Mwting} 
U  tliuilipin.  Till  mnui  ripm- 
unti  6n  Oral  Um  Sun  hti  imdi 
Hm  and  Unvy  eodi  bondtei 
MliUi  fw  a  JSSE  ralwM  itM 
in  dwifcawant.  Sim  iMd.  T>w 
eenaany  piMS  to  riiMM  nuret 
cadi  nwMy.  Dw  J2SE  vanion  ii 
MaMtoMdphyiaid-SOOe. 


Symantec,  MX  Join 
On  E-mal  Defense 

Symanlae  Carp,  and  MX  Ingle 
Ine.  unMiad  a  managad  a-mai 
difMiM  landca  Skat  tfiay  aid  can 
haM  buainaaaa  radua  banduMfli 
and  itaraga  eeota.  Tha  aarvfea 
joioB  SynuMia'a  Brigtihnal  Anti- 
Span  6i)  and  tha  MX  Logie  Emad 
Dilana  Sonria  Ma  two  pock- 
agaaoUkp  MX  logic. 


NetApp  Reports 
Improved  Results 

MatweilwdirtnragaauppiarMat- 
wafkAppAaMainc.raportadiR»- 
proadraaMtolaMwaMiMart- 
«dt  of  gmrtli  acfoa  al  product 
Nnoa.  aagmante  and  gaograpMa. 
laid  C83  Oao  MunanboMn. 
Rnanua  far  Ra  aoGond  quartor  of 
2005  Incipoaad  86%  oar  ttia 
pmdaui  yaar.  Mm  grow  14%. 


Niai  Releases 
Governance  Tools 

Wu  Carp,  ki  fladwood  City, 

CaM..tiatwpaliMroducadaar- 

aion  of  Ra  Clarity  IT  managamant 

aofNnraadOinawfntiapaiup- 

portiagglefcailTgDaniaiicaac- 

lMliaa.Clarity¥mien7.Spro- 

aidaacanlrafoaraioMoarrf 

gienaifTactiaRiaa.iBcludkigaa- 

lytica  to  RaMdatafina  IT  worker 

coala.Tliaaofl«nronnaoaaa- 

rMyofUnbpInliemaandWfn- 

dnia  2000  and  M  prfead  Iraoi 

SIOO.OOO.RMiipaiwd  month. 


HP’s  AlphaServer  Sales 
Continue  Steep  Decline 


The  vendor’s  expected  OpenVMS 
Itanium  version  should  be  death  knell 


ST  PATSICK  THISOOEAU 

The  venerable  Alpha¬ 
Server  is  fading  as  a 
source  of  revenue 
for  Hewlett-Packard 
Ca  as  the  company  readies 
the  general  release  of  Open- 
VMS.  one  of  Alpha’s  primary 
operating  systems,  for  its  In¬ 
tegrity  server  line. 

In  HP's  fourth  quarter,  which 
ended  Oct  31.  AlphaServer  rev¬ 
enue  fell  27%.  the  vendor  re¬ 
ported  last  week.  That  followed 
a  32%  revenue  decrease  in  the 
prior  quarter.  An  HP  spokes¬ 
woman  blamed  the  decline  on 
users  moving  to  the  IniegriCy 
line,  which  is  based  on  Intel 
Corp.'s  Itanium  processors. 

HP  plans  to  stop  making  the 
AlphaServer  at  the  end  of 
2006  but  will  support  the  sys¬ 
tems  through  2011.  The  com¬ 
pany  said  Int^rity  sales  are 
up  5%  from  a  year  ago  and 
represent  16%  of  its  business- 
critical  server  revenue. 

Varied  Responses 

Customers  appear  to  be  re¬ 
sponding  in  a  number  of  ways 
—  not  simply  by  buying  In¬ 
tegrity  servers.  David  Turner, 
sales  man^r  at  Island  Com¬ 
puters  US  Corp.,  an  Alpha¬ 
Server  reseller  in  Savannah. 

Ga..  said  sales  of  refurbished 
systems  by  his  company  are 
up  150%  ^m  last  year. 

Used  AlphaSevers  are  gain¬ 
ing  ground  over  new  systems 
because  users  "don't  want  to 
spend  three  times  the  money 
for  a  system  that  might  be  ob¬ 
solete  in  three  years."  said 
Tiimcr.  Sales  of  spare-parts 
kits  are  also  rising,  he  said. 

Nevertheless,  some  users 
are  still  buying  new  systems. 

Lee  Mah,  an  OpenVMS  sys¬ 
tems  administrator  at  a  Cana¬ 
dian  health  care  provider,  said 
his  employer  recently  pur¬ 
chased  two  16-proces8or 
GS1280  AlpbaServers.  Mah 


said  the  health  care  provider 
couldn't  wait  for  the  Itanium 
version  of  OpenVMS.  because 
it  needed  additional  server  ca¬ 
pacity  right  away. 

Mah  expects  to  use  his  new 
AlpbaServers  for  about  three 
years  before  growth  of  the 
29.000-cmployee  organiaation 
forces  an  upgrade.  At  that 
point,  his  employer  will  have 
to  decide  whether  to  stay  with 
OpenVMS,  he  said.  But  “other 
platforms  don't  have  the  relia¬ 
bility  that  OpenVMS  has  had 
for  our  applications,"  which 
include  mostly  custom-built 
software  and  third-party  pay¬ 
roll  processing,  said  M^ 

HP  is  expected  to  announce 
the  availability  of  an  Open¬ 


VMS  implementation  for  Ita¬ 
nium  as  early  as  next  month. 

Thi64  Unix,  also  used  on 
AlphaServets.  is  being  phased 
out.  and  some  of  its  features, 
such  as  TruCluster,  arc  being 
added  to  HP-UX,  another  bad 
sign  for  AlphaServer  users.  "If 
you  are  running  Thi64  Unix, 
you  are  dependent  on  Alpha." 


HP  Results 


hoMSSMBlSAMn  M 

«ditf  Oet  31 


Q«:S4.1bMoaup7% 

mroMryaar 

QS:S3AtiM(n;^^ 


said  Terry  Shannon,  an  Amar¬ 
illo.  Texas-based  consultant 
and  publisher  of  the  newslet¬ 
ter  "Shannon  Knows  High 
Performance  Computing." 

HP's  latest  financial  results 
showed  a  rebound  after  a  dis¬ 
mal  enterprise  server  revenue 
performance  in  the  quarter 
that  ended  in  luly,  when  sales 
declined  by  5%.  Following 
those  results,  CEO  Carly  Fio¬ 
rina  fired  three  executives. 

HP  customers  at  HP  World 
in  August  reported  late  deliv¬ 
eries  and  other  supply  prob¬ 
lems.  The  company  blamed 
the  problems  partially  on  an 
internal  systems  migration. 

One  of  the  users  who  had 
problems  was  Kees  denHar- 
tigh.  a  systems  and  network 
analyst  at  the  University  of  Al¬ 
berta  in  Edmonton.  He  said  the 
university  ordered  one  storage 
array,  but  two  were  delivered. 

But  the  uiUversity  was  hap- 
py  with  the  initial  storage  ar¬ 
ray  and  "decided  we  could 
probably  use  two  anyway," 
said  dcnHartigh.  "We  ended 
up  buying  it  ”  O  50939 


Air  Force  Consolidates 
Contracts,  Software 

Microsoft  deal 
will  standardize 
servers,  desktops 


8V  OAH  VERTOM 

The  U.S.  Air  Force  last  week 
announced  an  enterprisewide 
sofhvare  licensing  agreement 
with  Microsoft  Corp.  chat’s  ex¬ 
pected  to  save  it  more  than 
SlOO  million  over  the  next  six 
years  and  help  secure  its  PCs 
and  Windows-based  servers. 

Air  Force  CIO  John  Gilligan 
was  scheduled  to  detail  the  li¬ 
censing  and  software  stan¬ 
dardization  initiative  late  Fri¬ 
day  afternoon.  In  an  advance 
statement,  the  Air  Force  said 
Che  deal  with  Microsoft  will 
consolidate  38  software  pur¬ 
chasing  contracts  and  nine 
suppon  pacts  into  rivo  con¬ 
tracts  that  all  of  its  operations 
will  be  required  to  adopt 

The  Air  Force  will  also 


mandate  the  worldwide  use  of 
standard  configurations  of  all 
Microsoft  desktop  and  server 
software  products. 

Officials  said  that  "rigorous 
security  profiles"  will  be  im¬ 
plemented  and  that  security 
patches  and  software  updates 
will  be  distributed  to  systems 
online.  In  addition,  security, 
performance  and  software  fea¬ 
ture  settings  will  be  designed 
specifically  for  the  Air  Force. 

Similar  Government  Pact 

Some  analysts  said  the  deal 
appears  to  be  similar  to  one 
the  U.S.  Department  of  Energy 
signed  with  Oracle  Corp.  in 
September  2003  that  required 
Oracle  to  deliver  softwaie 
configured  for  optimal  securi¬ 
ty  [QuickUnk  417001 

Clint  Kreitner.  president 
and  CEO  of  the  Omter  for  In¬ 
ternet  Security  in  Hersbey.  Pa., 
called  the  Air  Force's  move  "a 


:  terrific  example"  of  how  large 
users  can  leverage  their  over¬ 
all  buyit^  poiA'er  to  require 
vendors  to  deliver  software 
configured  to  meet  their  func¬ 
tionality  and  security  needs. 

But  lohn  Pescatore,  an  ana¬ 
lyst  at  Gartner  Inc^  said  the 
new  agreements  with  Micro¬ 
soft  may  not  be  that  big  of  a 
step  forward.  “It  will  force  the 
Air  Force  to  have  more-secure 
configurations  of  Microsoft 
software  by  limiting  how 
many  versions  they  use  and 
having  configuration  guide¬ 
lines."  he  said.  "But  it  sounds 
like  they're  building  in  a  lot  of 
patch  management  functions, 
and  that  doesn’t  force  the  ven¬ 
dor  to  deliver  software  with 
fewer  patches." 

Alan  Salisbury,  chairman  of 
the  Center  for  National  Soft¬ 
ware  Studies  in  Upper  Marl¬ 
boro,  Md.,  said  standardiza¬ 
tion  usually  reduces  costs. 

"The  name  of  the  game  con¬ 
tinues  to  be  total  cost  of  oper¬ 
ations.  which  is  dominated  by 
maintenance  and  support."  be 
said.  "Fewer  coafigurations 
equals  lower  costs."  O  50947 


You  have  to  reconfigure  your  infrastructure.  Got  a  second? 


The  highly  dependable  HP  BladeSystem  features  InteC  Xeon“  Processors.  Now  its  possible  to  react  to  changing  business  conditions  in  real  time-in  seconds. 
Application  deployment  and  r^ovisioning  become  an  automated  process.  From  single  console  remote  monogement  to  up  to  19%  power  savings-  -the  HP  BlodeSysfem 
is  designed  to  save  you  time,  money  and.  quite  possibly,  your  sanity.  Which,  of  course,  could  be  the  most  compelling  reason  of  all  to  learn  more. 


THE  SOLUTION 


HP  ProLiant  BL30p  Biode  Server 

*  2  Mai*  Xoen*  Procasien  Df  to  3.20GHz/2MB' 

■  High  dansiry:  Up  to  96  Hrvan  par  lock 

•  HP  Syttoos  (might  ttotogar-:  Wib.baMd  natwotiad 
monogmar*  dirough  a  ain^  ceraola 


•  Rapid  Dapfaymanl  tad:  For  aoM  at  daptoyrnem 
and  ongoing  prwtonning  and  ropronuening 


23%  iovingt  on  ocquisfton  coat 
Up  to  19%  Ion  power  conaumpnen 
Up  to  93%  iawar  o^tea 
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South  Korea  Allocates 
Spectrum  for  WiBro 

TOKYO 

S«'t  Til  KuKtA'.  j'nvcrnmoin  !jst 
vvwk  allocated  spectrum  in  the 
i.MiHz  band  li»r  a  new  breed  of 
w  ireless  Internet  serv  ice  called  WiBn) 
that's  cxpixTed  to  deliver  IMbit  sec. 
ctinncctions  to  mobile  devices. 

WiBro.  short  for  wia'less  britadband, 
IS  similar  to  Wi.Max.  another  emcryint; 
wirelevi  broadband  technologx-.  Both 
are  part  of  the  IEEE  802.U>  family  of 
wireles-s  standards.  But  South  Korea's 
homcgntw'n  WiBro  t».vhnoli>g)'  can 
work  with  devices,  such  as  laptops  and 
handheid.s.  that  are  iravelini:  at  up  to 
70  kilometers  per  hour,  whereas 
WiMax  was  dcsijmed  for 
statk»nary  receivers. 

South  Korea's  Ministry 
of  Information  and  Com¬ 
munication.  which  set 
a.Hide  the  spectrum  for 
WiBro.  said  that  it  plans  to 
offer  licenses  !»>  three  ven¬ 
dors  in  March  .and  that  it 
expects  commercial  ser¬ 
vices  to  start  being  offered 
in  2006. 


The  number  of 
multinational  corporate 
customers  m  China 
served  by  EquantNV. 
a  global  networking 
carrier  in  Amsterdam 


.\n  Intcmntional 

n'Newsnigcsl 

I  But  industry  observers  are  worried 
]  .iKiui  dueling  technologies.  Last  week. 
*  the  CEOs  of  Intel  Corp.  and  Korea- 
I  ba.sed  LG  Electronics  Inc.  met  in  Seoul 
'  to  discuss  ways  to  merge  the  WiBro 
and  WiM.TX  technologies  and  avoid 
market  segmentation. 

■  MARTYN  WILLIAMS  IDG  NEWS  SERVICE 

Australian  Territory 
l^s  VoIP  Network 

SYDNEY.  AUSTRALIA 

AL'st  HAi-i.vs  Northern  rerritory 
government  plans  to  introduce  IP 
telephony  as  part  of  a  voice  and 
data  network  overhaul  that's  expected 
to  cost  about  S108  million  (U.S.)  over 
five  years.  Theginvmment  is  seeking 
bids  from  vendors  for  a 
contract  that  will  ci)vcr  all 
voice,  data  and  Iniemci 
services  f«ir  about  I6.0lt() 
end  users  at  25t)  agency 
.sites  and  180  sch<H>Is. 

Brad  Irvine,  director  of 
IT  services  management 
for  the  Northern  Icrritorj’ 
ginrcmmcnt.  said  the  pri¬ 
mary  goal  for  implement¬ 
ing  Voice  over  IP  is  reduc- 


I  ing  the  cost  of  long-distance  carrier 
I  charges.  "Wc  feel  we've  picked  a  pot>d 
I  time  to  go  to  market  with  VoIP,  which  is 
I  maturing  and  is  a  leading  option  for  de- 
I  livering  more  value  for  the  money.'’  he 
[  said.  "Also,  our  consultants  advise  us 
I  that  this  is  the  way  of  the  future." 

■  RODNEY  OEDDA. 

COMPUIERWORLD  TODAY  (AUSTRALIA) 

Microsoft  Beefs  Up 
India  Connections 

,  BANGALORE.  INDIA 

Mk,i«,>soft  coRt’.  will  hire  sever¬ 
al  hundred  staffers  over  the  next 
12  months  for  the  software  de¬ 
velopment  and  support  operations  at  its 
now  28-acrc  campus  near  Hyderabad. 
India.  CEO  Stcx'c  Ballmer  said  last  week 
during  a  three-day  trip  to  the  countr>'. 
But  Ballmer  said  the  additional  hiring 
won't  lead  to  job  losses  in  the  U.S. 

Micixisoft  also  announced  separate 
partnerships  with  Bangalore-based  IT 
outsourcing  firms  Inft>sys  Technolo¬ 
gies  Ltd.  and  Wipro  Ltd. 

Microsoft  and  Infosys  signed  an 
S8  million  pact  to  combine  Microsoft's 
-Net  software  with  consulting  scrx’ices 
from  Infosys  to  help  companies  imple¬ 
ment  product  development,  retail  and 
radio  frequency  identificaiion  projects. 
050894 

Compi/ed  by  Mitch  Betts. 


Briefly  Noted 

ibertianda  SA.  a  wireless  operator 
in  Madrid,  has  begun  to  instail 
WiMax  wireless  broadband  technob 
ogy  supplied  by  Alvarion  Ltd.,  ac¬ 
cording  to  a  spokeswoman  for  Tel 
Aviv-based  Alvarion.  Iberbanda  is 
targeting  business  and  residantiaJ 
cuslomera  in  the  Andalusia  and  Cat¬ 
alonia  regions  of  ^»in. 

■  JOHN  BLAU. 

IDG  NEWS  SERVICE 


-  ■  recentfy  opened  its 

first  office  M  China.  The  Beijing 
office  win  work  closefy  with  other 
IT  vendors  in  the  area  and  support 
Linux  education  programs  at 
Tsinghua  University  and  Nanjing 
University. 

■  STACY  COWLEY. 

IDG  NEWSSERVICE 


'Ah  AG  has  implemented  its  De¬ 
fense  &  Security  suite  of  DIP  and 
supply  chain  software  fw  the  Oer- 
man  Bundeswehr.  which  includes 
all  of  Germarty's  armed  forces. 

■  JOHN  BLAU. 

IDG  NEWS  SERVICE 


Retiring  MasterCard  IT  Chief  Talks  About  Challenges 


BY  LUCAS  MEARIAN 

Jerry  McOhatton  .uarred  our  os 
13  police  officer  in  Columbus. 
Ohio,  and  tTidcd  up  as  the  chief 
technedogist  at  MasterCard 
/nrernufionu/  /nc..  tn'erseeing 
3.7(X)  IT  employees  and  a 
SJtK)  miWion  payroW.  McElhal- 
ton,  6S.  MasterCard's  senior 
v.fecutive  vice  president  of 
globa}  technology  and  opera¬ 
tions,  is  rvriring  neat  month, 
a  yixir  after  completing  a  /i  vc- 
year.  S200  million  rewrite  of 
the  company's  processing  s\’s- 
fems  und  opt’ning  j  SL^  mil¬ 
lion  fiperori«n.x  center  in 
O'Eallon.  Mo. 

.V{jw  /tKdfing  f<i  join  the 
con.su/tmg  world,  McElhatton 
spoke  tvith  C«*mputenvorld 
last  iveek  about  the  Masier- 
(  ard  protect,  fT  trends,  his 
management  style,  and  finish' 
ing  pmj»vt%  on  time  and  withitt 
budget. 


,  What  are  some  of  the  bigger  chal- 
'  lenges  you’ve  Meed  at  MasterCanl 
.  overtheyears?  When  I  came  in. 

then*  had  been  attempts  to 
I  ru-wriic  these  s)'!itcm.s.  They 
hadn't  been  successful,  so  one 
of  the  challenges  was  to  get 
the  talent  and  organization  [to 
rally  aixmnd  a  plan)  u»  rewrite 
these  systems  in  a  meaningful 
wa>’  w  hile  keeping  the  other 
systems  in  place.  It’s  like  chang¬ 
ing  an  airplane  engine  in  flight. 

What  lid  you  do  differ- 
I  entfy  from  past  rr  man¬ 
agers  there?  We  orga¬ 
nized  the  effort  into 
manageable  segntenis. 

I  recruited  people 
w  ho  had  a  lot  of  e.xpc- 
I  rience  b»»th  inside  and 
outside  of  the  indus- 
I  tr)'.  1  can  teach  pe<*ple 
'  ih<’ industry,  but  1 
'  rtced  pLX)ple  w'ho  have 


confidence  in  terms  of  their 
deliver)'  skills.  One  of  the  big 
.  challenges  was  not  only  to  de¬ 
velop  (relaiionshipsl  internally. 
I  but  to  establish  and  make  sure 
I  a-lationships  with  our  mem- 
:  bers  were  such  that  we  could 
j  getthem  on  schedule  to  con- 
!  vert  to  the  new  software. 

How  has  the  job  of  CIO  changed 
over  your  career?  There's  more 
and  more  value  extraction 
(that]  people  are  k«)king  for 
the  CIO/CTO  to  give. 
You  have  to  be  a  giK>d 
businL*s.s  persirn.  I've 
seen  a  lot  of  icchnok>- 
gy  introduced  tliai  can 
help  pe«*ple  do  things 
belter,  faster,  cheaper. 
But  I've  also  seen  a 
change  that  successful 
people  in  this  indu-Mr)- 
have  really  extracted 
business  value  and 


I  manage  IT  as  a  business. 

I  You  have  an  open-door  policy 
where  anyone  can  e-mail  or  call 
'  you  to  voice  concerns.  Has  that  al- 
I  ways  been  your  style?  I've  done 
I  that  throughout  my  career.  In 
order  to  motivate  people,  you 
j  have  to  establish  the  right  cul- 
I  (ure.  and  the  right  culture  is  to 
'  have  an  open  and  honest  and 
j  direct  culture.  We've  got  a  big 
I  job  to  do.  and  our  customers, 
members  and  internal  users 
expect  us  to  be  right  at  the  lop 
of  that  pile  all  the  time,  but 
that  doesn't  mean  you  can't 
have  fun  doing  it. 

What  are  some  of  the  bigger  chal¬ 
lenges  coming  down  the  pike?  We 
liave  lot  of  leading-edge  tech¬ 
nology.  but  wc'rc  not  bleed¬ 
ing-edge.  No  one  likes  to  have 
a  problem  with  a  financial 
transaction.  The  challenge  we 


have  is  to  take  this  infrastruc¬ 
ture  technology  and  rvew 
product  technology  and  make 
sure  it's  fully  integrated  and 
fully  tested,  so  when  it's  used 
we’re  100%  sure  that  it’s  going 
to  be  a  successful  transaction. 

How  do  you  manage  vendor  rala- 
tioftships?  You  have  to  have  a 
partnership  with  your  ven¬ 
dors,  and  they  have  to  under¬ 
stand  your  expectations.  Oo 
we  have  problems  with  ven¬ 
dors  fnim  time  to  time?  You 
bet.  But  if  ytHi  have  good  com¬ 
munication  and  coordinate 
with  them,  you're  going  to  gel 
a  lot  better  results. 

What  are  some  exciting  emerging 
tedmologies?  I  gel  excited 
about  grid  computing.  I  don't 
think  it's  ready  for  ci^mmenrial 
use  yet.  but  wc’rc  excited 
about  it.  I  Linux  has]  got  po¬ 
tential  to  again  drive  down  the 
economic  dynamics  of  what  it 
is  we're  doing.  O  50909 


McELHAnON 
went  from  police 
oftveer  to  Ma.xter 
Card's  TT  chief. 
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South  Korea  Allocates 
SpoetruinforWiBro 

TOKYO 

SOtJTH  KOREA'S  govenunent  last 
week  allocated  spectnun  in  the 
23<iHz  band  for  a  new  breed  of 
wireless  Internet  service  called  WiBro 
that's  expected  to  deliver  IMbit/^. 
connections  to  mobile  devices. 

WiBro.  short  for  wireless  broadband, 
is  similar  to  WiMax.  another  emerging 
wireless  broadband  technology.  Both 
are  part  of  the  IEEE  802i6  fainily  of 
wireless  standards.  But  South  Korea's 
homegrown  WiBro  technology  can 
work  with  devices,  such  as  laptops  and 
handhelds,  that  are  traveling  at  up  to 
7D  kilometers  per  hour,  whereas 
WiMax  was  deigned  for 
stationary  receivers. 

South  Korea's  Ministry 
of  Information  and  Com* 
municatioD.  which  set 
aside  the  spectrum  for 
WiBro,  said  that  h  plans  to 
offer  licenses  to  three  ven* 
dors  in  March  and  that  it 
expects  commercial  ser¬ 
vices  to  Stan  being  offered 
in  2006. 


An  International 
IT  News  Digest 


But  industry  observers  are  worded 
about  dueling  technologies.  Last  week, 
the  CEOs  of  Intel  Corp.  and  Korea- 
based  LG  Electronics  Inc.  met  in  Seoul 
to  discuss  ways  to  merge  the  WiBro 
and  WiMax  technologies  and  avoid 
market  segmentation. 

■  UARTYN  WILLIAMS.  106  NEWS  SERVICE 
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9V0NEV.  AUSTKALIA 

AUSTRALIA’S  Northern  Territory 
goverruneot  plans  to  introduce  IP 
telephony  as  part  of  a  voice  and 
data  network  overhaul  that's  expected 
to  cost  about  SI08  million  (U.S.}  over 
five  years.  The  government  is  seeking 
bids  Irom  vendors  for  a 
contract  that  will  cover  all 
voice,  data  and  Internet 
services  for  about  16.000 
end  users  at  2S0  agency 
sites  and  ISO  schools. 

Brad  Irvine,  director  of 
IT  services  management 
for  the  Northern  Territory 
government,  said  the  pri¬ 
mary  goal  for  implement¬ 
ing  voice  over  IP  is  reduc¬ 


ing  the  cost  of  long-distance  carrier 
charges.  “We  feel  we’ve  picked  a  good 
time  to  go  to  maiket  with  VoIP,  which  is 
maturing  and  is  a  leading  option  for  de¬ 
livering  more  value  for  the  money, “  he 
said.  “Also,  our  consultants  advise  us 
that  this  is  the  way  of  the  future." 

■  RODNEY  6E00A. 

COMPUTERWORLD  TODAY  (AUSTRALIA) 


Microsoft  Beefs  Up 
India  Connections 


•ANOALOne.  INDIA 

tCROSOFT  CORP.  will  hire  sever¬ 
al  hundred  staffers  over  the  next 
12  months  for  the  sofhvare  de¬ 
velopment  and  support  operations  at  its 
new  28-acre  campus  near  Hyderabad, 
India,  CEO  Steve  Ballmer  said  last  week 
during  a  three-day  trip  to  the  country. 
But  Ballmer  .said  the  additional  hiring 
won't  lead  to  fob  losses  in  the  U.5. 

Microsoft  also  aimounced  separate 
partnerships  with  Bangalore-based  IT 
outsourcing  firms  Infosys  Technolo¬ 
gies  Ltd.  and  Wipro  Ltd. 

Microsoft  and  Infosys  signed  an 
58  million  pact  to  combine  Microsoft’s 
.Net  soffware  with  consulting  services 
from  Infosys  to  help  companies  imple¬ 
ment  product  development,  retail  and 
radio  frequency  identification  projects. 
O  50694 
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Briefly  Noted 
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■  STACY  COWLEY. 

106  NEWS  SERVICE 
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Retiring  MasterCard  IT  Chief  Talks  About  Challenges 


■Y  LUCAS  MIASIAN 

alary  RfcERatten  stxmed  out  as 
a  poliee  qi^icer  tn  Columbus. 
Ohio,  and  ended  up  as  the  diief 
fechnologist  or  MasterCard 
fnternatiofial  Inc.,  overseeing 
2J00  IT  employees  and  a 
SlOO  million  payroU.  McEIhat- 
ton.  6S.  MasterCard’s  senior 
executive  vice  president  of 
global  technology  and  opera¬ 
tions,  is  retiring  next  month, 
a  year  after  completing  a  five- 
year.  $200  million  rewrite  of 
the  exmpany’s  processing  sys¬ 
tems  and  opening  a  S13S  mil¬ 
lion  operations  center  in 
OTollon,  Mo. 

Now  looking  to  foin  the 
consulting  world.  McElhatton 
ipoke  with  Computerw*orld 
lost  week  about  the  Master¬ 
Card  pro/ect,  IT  trends,  his 
management  style,  and  finish¬ 
ing  profocts  on  time  and  within 
budget. 


WWaraaamtofdabigBachal' 
ingM  ynfW  faead  at  MataCard 
(MaHayeas?  When  I  came  in. 
there  had  been  attempts  to 
rewrite  these  systems.  They 
hadn’t  been  successful,  so  one 
of  the  challenges  was  to  get 
the  talent  arwl  oiganization  (to 
rally  around  a  plan]  to  rewrite 
these  systems  in  a  meaningful 
way  w^e  keeping  the  other 
systems  in  pla^.  It's  like  chang¬ 
ing  an  airplarte  engine  in  flight. 

WhMdMyoudodtffa- 
Mdy  from  past  IT  man- 
aoaslhae?  We  orga¬ 
nized  the  effort  into 
manageable  segments. 

1  recruited  people 
who  had  a  lot  of  expe¬ 
rience  both  inside  and 
outside  of  the  indus¬ 
try.  I  can  teach  {leople 
the  industry,  bur  1 
need  people  who  have 


confidence  in  terms  of  their 
delivery  dulls.  One  of  the  big 
challenges  was  not  only  to  de¬ 
velop  (reiatfooships]  internally, 
but  to  establish  and  make  sure 
relationships  with  our  mem¬ 
bers  were  such  that  we  could 
get  them  on  schedule  to  con¬ 
vert  to  the  new  software. 

How  has  6ia  lob  of  CIO  changed 
OYor  your  career?  There’s  more 
and  more  value  extraction 
[that]  people  are  looking  for 
the  CIO/CTO  to  give. 
You  have  to  be  a  good 
business  person.  Pve 
seen  a  lot  of  technolo¬ 
gy  introduced  that  can 
help  people  do  things 
better,  filter,  cheaper. 
But  Tve  also  seen  a 
chaf^  that  successful 
pet^le  in  this  industry 
have  really  extracted 
business  value  and 


manage  IT  as  a  business. 

Vw  hare  an  opon-door  poky 
where  anyont  can  t-mal  or  cal 
you  to  voice  connrns.  Has  that  al¬ 
ways  bson  your  styto?  Fve  done 
that  throughout  my  career.  In 
order  to  motivate  people,  you 
have  to  establish  the  right  cul¬ 
ture.  and  the  right  culture  is  to 
have  an  open  and  honest  and 
direct  ailture.  We’ve  got  a  big 
fob  to  do,  and  our  customers, 
members  and  internal  users 
expect  us  to  be  right  at  the  top 
of  that  pile  all  the  time,  but 
that  doesn’t  mean  you  can't 
have  fun  doing  it 

Whs!  are  some  of  tho  bigger  chah 
lenges  coming  down  the  pihB?  We 

have  lot  of  leading-edge  tech¬ 
nology.  but  we’re  not  bleed¬ 
ing-edge.  No  one  likes  to  have 
a  problem  with  a  financial 
transaction.  The  challenge  we 


have  is  to  take  this  infrastruc¬ 
ture  technology  and  new 
product  technology  and  make 
sure  it’s  folly  integrated  and 
folly  tested,  so  when  it's  used 
we're  100%  sure  that  it’s  going 
to  be  a  successful  transactioa 

How  do  you  manage  vwMtor  rela¬ 
tionships?  You  have  to  have  a 
partnership  with  your  ven¬ 
dors.  and  they  have  to  under¬ 
stand  your  expectations.  Do 
we  have  problems  with  ven¬ 
dors  ffom  time  to  time?  You 
bet.  But  if  you  have  good  com¬ 
munication  and  coordinate 
with  them,  you’re  going  to  get 
a  lot  better  results. 

What  are  some  extitotg  emerging 
technologies?  I  get  excited 
about  grid  computing.  I  don't 
think  it's  ready  for  commercial 
use  yet,  but  we’re  excited 
about  it  [Linux  has]  got  po¬ 
tential  to  again  drive  down  the 
economic  dynamics  of  what  it 
is  we're  doing.  O  50609 


BECAUSE THE  FUTURE 
IS  MORE  EXCITING  THAN 

THE  PAST. 


It's  your  choice.  Job  Description  1:  Maintain  legacy  communications  systems  based  on  outmoded  analog  technologies.  Must  be  fully  adept  at  "potchlcying'  together 
solutions  that  appear  to  do  rtew  things.  Facility  with  answering  the  question,  "Why  can’t  l?"a  plus.  Job  Description  2:  Take  a  company-wide  comrrtunications  strategy 
into  the  future.  Implement  IP-based  videoconferencing,  global  work  teams  and  business-resilience  strategies.  Answer  the  question.  "How’d  you  do  that?"  with 
aplomb.  To  learn  more  about  Cisco  IP  Communications  solutions  or  to  find  a  service  provider  that  offers  these  managed  services  over  a  Cisco  Powered  Network, 
visit  cisco.com/damote.  COMMUNICATION.  TNE  NEW  FASHIONED  WAY.  CISCO  IP  COMMUNICATIONS. 


(.V)nftniu*«i/rom  I 

Best^Buy 

lj>ofr5  that  were  announced  in 
April,  when  Best  Buy  said  it 
planned  to  outsource  its  IT 
operations  to  Accenture  Ltd. 
iQuickLink  46253).  and  to  a 
smaller  round  of  cuts  that 
tiKvk  place  in  Octv^ber  2003. 

A  spokeswoman  fi>r  Rest 
Bu\-  said  it  hadn't  received  the 
complaint  as  of  TTiursday.  But 
the  retailer  issued  a  statement 
-sayini:  it  was  aware  of  the  suit. 
“We  believe  these  claims  arc 
without  merit  and  intend  to 
vijtun^usly  defend  the  action."  ' 
Best  Buy  said.  It  also  stated 
that  the  average  age  of  its  3.700 
corporate  employees  is 

When  it  announced  the  out¬ 
sourcing  c»>niract  with  Accen¬ 
ture.  Best  Buy  said  that  only 
40  of  its  820  IT  employi'cs  I 

would  remain  with  the  com¬ 
pany.  The  retailer  expected 
about  650  workers  to  receive 
comparable  jitb  offers  from 
Accenture  and  continue  work¬ 
ing  at  Best  Hu\ ’s  «>ffices,  The 
other  emph'vees  were  told 
that  they  would  be  let  go. 


According  to  the  lawsuit. 

126  IT  workers  were  terminat¬ 
ed  in  |une.  Stephen  Snyder, 
the  Minneapolis-based  lead 
attorney  for  the  plaintiffs,  said 
that  82  of  those  workers  were 
at  least  40  years  old  —  the 
minimum  age  required  to  file 
an  age-discrimination  claim. 
Thirty -one  of  the  plaintiffs 
w  ere  among  the  workers  who 
were  dismissed  in  fune. 

The  13  other  plaintiffs  lost 
their  jobs  when  Best  Buy  laid 
off  a  total  of  25  IT  workers  last 
year,  according  to  the  lawsuit. 
Tw  enty  of  them  were  at  least 
40  years  old.  Snyder  .said. 

The  lawsuit  mited  that  anoth¬ 
er  worker  turned  40  the  day 
after  he  was  laid  off. 

Marshall  Tanick.  :i  Minne¬ 
apolis-based  employment 
lawyer  who  has  handled  at 
lea.si  50  age  discrimination 
complaints  over  the  past  20 
years,  said  the  larger  a  gnnip 
of  plaintiffs  is.  the  greater 
chantv  ft  ha.s  of  success.  The 
Best  Buy  suit  is  “an  unusually 
large  case,  which  makes  it  par¬ 
ticularly  potent."  he  said. 

Smder  said  the  Best  Buy 
suit  involves  the  largest  num- 


EXemPT 

"As  part  of  its  pattern 
or  practice  of  discrimi¬ 
nation,  Best  Buy  has 
failed  to  provide  its 
older  [IT]  employees 
with  consideration  for 
employment  opportu¬ 
nities,  has  refused  to 
transfer  older  employ¬ 
ees  into  open  positions 
for  which  they  were 
qualified  and  has 
refused  to  re-hire  its 
former  employees  for 
positions  for  v^ich 
they  were  qualified." 


her  of  plaintiffs  that  his  firm. 

;  Gray,  Plant.  MtH>ty.  M<H>ty 
I  Bennett  PA.  has  represented  in 
!  an  .age  discrimination  cum- 
j  plaint.  The  previous  high  was 
43  in  a  case  against  Mtmsanio 
I  Ct*.  that  was  settled  lor  SI8.25 
million  in  IW6.  he  said. 

■’Computer  industry  em¬ 


ployees  arc  particularly  vul¬ 
nerable  to  age  discrimination 
because  of  this  commonly 
held  perception  that  older  in¬ 
dividuals  can't  keep  up  with 
new  technology."  Snyder  said. 
“As  with  any  stereotype,  that 
may  apply  to  some  people,  but 
it  doesn’t  apply  to  others." 

He  added  that  the  most  re¬ 
cent  performance  review  s  for 
each  of  the  plaintiffs  had  indi¬ 
cated  that  he  was  a  "solid  per¬ 
former"  or  better. 

Surprise  Termination 

“If  you’re  doing  your  job  well, 
getting  good  rcs'icws  and  mer¬ 
it  bonuses,  you  don’t  expect  to 
get  dumped."  Walstrom  said 
of  his  termination.  "In  that  re¬ 
spect.  it  was  a  surprise." 

Walstrom.  who  said  he  had 
worked  at  Best  Buy  for  almost 
seven  years,  was  a  technical 
con-su!t.ant  assigned  to  special 
projects  when  he  was  let  go  in 
April.  But  he  said  ifuit  until 
September  2003.  he  was  the 
manager  of  i  he  company's 
database  support  group,  which 
consisted  of  21  employees  and 
seven  nr  eight  contractors  and 
was  charged  with  casuring  the 


health  of  all  corporate-level 
production  databases. 

Walstrom’s  group  w'as  then 
shifted  from  operations  to 
,  Best  Buy's  database  develop¬ 
ment  team,  he  said,  adding 
that  he  soon  learned  from  his 
new  boss  that  his  job  was  go¬ 
ing  to  someone  else.  "The  guy 
picked  to  replace  me  had  no 
experience  managing  databas¬ 
es."  Walstrom  said.  "He  had 
been  a  project  manager.  But  he 
was  about  20  years  my  junior. 
You  look  at  that  in  hindsight 
and  scan  figuring  things  out." 

The  plaintiffs  asked  for  a 
jury  trial  and  arc  socking  back 
pay  and  benefits,  damagt.'s  and 
an  order  that  Best  Buy  cither 
reinstate  them  to  comparable 
jobs  or  give  them  salaries  and 
benefits  until  they  reach  their 
cx'pcctcd  retirement  ages. 

Ntu  cvcr>'  former  employee 
who  was  eligible  to  file  an  age- 
discrimination  claim  against 
Best  Buy  did  so.  Snyder  said 
workers  who  accepted  sever¬ 
ance  pay  were  required  to  sign 
a  document  n'leasing  the 
company  from  all  claims,  in¬ 
cluding  age  discrimination 
complaints.  O  S0942 


('tiniinued  frvm  page  I 

FTC 

stemmed  fnim  an  incident  in 
which  a  “white  knight"  hacker 
broke  in  and  found  credit  card 
infiTrmatum  stored  in  a  Petco 
database  and  reported  it  f«i  the 
fTC.  j  IVtco  sp«>kesman  said. 
No  int4>rmatii)n  was  lost  in  the 
incident,  he  added. 

As  pan  of  its  seitiemeni 
Wr-iih  the  FTC.  Petco  mu.st  sub¬ 
mit  to  independent  biannual 
audiLs  of  its  information  secu¬ 
rity  practices  for  the  next  20 
>ears.  ’The  message  here  is 
that  if  a  company  is  making 
security  and  privaev’  represen¬ 
tations  online,  it  shiiuld  take 
reastmable  and  appropriate 
measures  to  secure  sensitive 
information."  said  Alain  Sheer, 
an  attorney  in  the  FTC’s  finan¬ 
cial  practices  divisiort 

The  F'FC  ha.s  reached  simi¬ 
lar  settlements  with  four  other 
c*'mpanies  over  the  past  cou¬ 
ple  of  years  f  see  chan ). 

Meanwhile,  the  FTC 


charged  that  Sunbelt,  a  Cen¬ 
dant  C*irp.  subsidiary,  and  N.n-  ^ 
tionw-ide  fatlL-d  to  comply  with 
the  (iramm-Loach-Bliley  Act’s  ! 
Safi.'guard.s  Rule,  w  hich  re¬ 
quires  companies  to  apply  rcj- 
s«»nablc  measures  for  pnnect- 
ing  sensitive  inf<*rmaium. 
ftnh  were  charged  with  “sig-  i 
nificoni  failures"  to  protect  I 
customer  names.  Social  Seeu-  ' 
rity  numbers,  credit  histories  ^ 
and  other  confidenlial  data. 

Nationwide  Sweep 

The  action  represents  the  first 
cases  involving  the  Safeguards 
Role.  The  companies  were 
part  of  a  “nationwide  sweep" 
of  auto  dealers  and  mongage 
companies,  said  lessica  Rich, 
assistant  diavior  of  consumer 
protection  at  the  FTC. 

She  said  the  FTC  hopes  the 
action  sends  a  message  that 
the  Safeguards  Rule  applies 
not  only  to  typical  financial 
institutions  but  also  to  payday 
lenders,  check  cashers  and  tax 
preparers  w  ho  handle  sensi¬ 
tive  persona]  information 


when  conducting  bicsiness. 

As  part  of  .»n  agreement 
with  the  Kr(i.  SunK'lt  agreed 
to  submit  to  bi.mnual  audits  of  ' 
its  inh*mi.ition  security  pro¬ 
gram  for  the  next  10  years.  In 
an  e-maileti  siaiemeni.  Sun¬ 
belt  said  the  FTC  complaint 
stemmed  from  a  "seldom- 
accessed  lead  generation  pn>- 
gram  th.it  was  formerly  avail¬ 
able  through  Sunbelt's  Web 
site"  prior  to  the  implcmenta- 


iii>n  «tfpi«licit^  to  comply  with 
the  Safeguards  Rule. 

Rihn  Eubank,  CEO  of  Na¬ 
tionwide  Mortgage,  confirmed 
the  FTC  action,  but  he  claimed  I 
that  his  five-person  company 
—  which  shares  the  name  of 
the  much  larger  insurance  and  i 
financial  serv'ices  provider  —  [ 
may  have  gotten  inadvencntly  [ 
caught  up  in  a  sweep  taiyteted  j 
at  big  financial  institutinn.s.  I 
Eubank  said  the  cost  Involved 


in  bringing  his  small  operation 
I  into  compliance  with  the 
agency’s  requirements  is  pro¬ 
hibitive  and  may  force  him  to 
shut  down  his  business  If  no 
compromise  can  be  found. 

The  latest  FT('  action  is 
seen  as  indicative  of  the  grow¬ 
ing  determination  of  federal 
and  state  authorities  to  crack 
down  on  security  and  privacy 
violations,  even  in  instances 
w’hcre  no  actual  breach  may 
have  occurred,  said  Michael 
Overly,  an  attorney  at  Foley  6c 
Lardncr  LLP  in  lx>s  Angeles. 

"Wc  are  seeing  a  real  inter¬ 
est  in  policing  these  matters 
far  mt>re  closely."  Overly  said. 
For  instance.  Bamcsandnoble.- 
com  Inc.  in  April  agreed  to 
pay  $60,000  and  implement  a 
comprehensive  infonnation 
security  policy  in  a  deal  with 
the  New  York  aitt)rncy  gener¬ 
al's  office  over  a  design  vul¬ 
nerability  in  the  online  biH>k- 
seller’s  Web  site.  "In  that  case, 
no  hack  had  occurred,  and  no 
exposure  of  data  had  taken 
place."  Overly  said.  O  50936 
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Tha  FTC  has  readied  aaMomenta  with  sevaral  ampaiiiK 
ever  saewNy  aid  privacy  vMations,  Including  the  follawing: 


Microsoft 

Carp. 


.LMMiary  Cose  ipvolved  (lisclosureof  thee-moil 
2002  addresses  of  669  subscribers  to  Its 
Prorac  RemifKler  Service 

Micfosoli  agreed  to  make  changes  in  its 


August 

20W 


Passport  user  authentication  system. 


Jung  Case  involved  exposure  olcontidentiai 

2003  customer  information  over  company's 
Website. 

April  Exposed  confidential  customer  data 

2004  overWebsile 


Cominued  from  page  J 

BestBuy 

UyofEs  tfadi  were  announced  in 
April,  when  Best  Buy  said  it 
planned  to  outsource  its  IT 
operadoQS  to  Accenture  Ltd. 
[Qukklink  462S3].  and  to  a 
smaller  round  of  cuts  that 
took  place  in  October  2003. 

A  ^keswoman  for  Best 
Buy  said  it  hadn't  received  the 
complaint  as  of  Thursday.  But 
the  retailer  issued  a  statement 
saying  it  was  aware  of  the  suit 
"We  believe  these  claims  are 
without  merit  and  intend  to 
vigorously  defend  the  action," 
Best  Buy  said.  It  also  stated 
that  the  average  age  of  its  3700 
corporate  employees  is  3S. 

When  it  announced  the  out¬ 
sourcing  contract  with  Accen¬ 
ture.  Best  Buy  said  that  only 
40  of  its  820  IT  employees 
would  remain  with  the  com¬ 
pany.  The  retailer  expected 
about  650  workers  to  receive 
comparable  job  offers  from 
Accenture  and  continue  work¬ 
ing  at  Best  Buy's  offices.  The 
other  employees  were  told 
that  they  would  be  let  go. 


According  to  the  lawsuit. 
126  IT  workers  were  terminat¬ 
ed  in  June.  Stephen  Snyder, 
the  Minneapolb-based  lead 
attorney  for  the  plaintiffs,  said 
that  82  of  those  workers  were 
at  least  40  years  old  —  the 
minimum  age  required  to  file 
an  age-discrimination  claim. 
Thirty-one  of  the  plaintiffs 
were  among  the  workers  who 
were  dismissed  in  June. 

The  13  other  plaintiffs  lost 
their  jobs  when  Best  Buy  laid 
off  a  total  of  25  IT  woiicers  last 
year,  according  to  the  lawsuiL 
TXventy  of  them  were  at  least 
40  years  old,  Snyder  said. 

The  lawsuit  noted  that  anoth¬ 
er  worker  turned  40  the  day 
after  he  was  laid  off. 

Marshall  Tanick.  a  Minne¬ 
apolis-based  employment 
lawyer  who  has  handled  at 
least  50  age  discrimination 
complaints  over  the  past  20 
years,  said  the  larger  a  group 
of  plaintiffe  is,  the  greater 
chance  it  has  of  success.  The 
Best  Buy  suit  is  "an  unusually 
Urge  case,  which  makes  it  par¬ 
ticularly  potent."  he  said. 

Snyder  said  the  Best  Buy 
suit  involves  the  largest  num- 


f 

"As  part  of  its  pattern 
Of  practice  of  discrimi¬ 
nation.  Best  Buy  has 
failed  to  provide  Its 
older  [IT]  employees 
With  consideration  for 
employment  opportu¬ 
nities.  has  refus^  to 
transfer  older  employ¬ 
ees  into  open  positions 
for  which  they  were 
qualified  and  has 
refused  to  re-hireits 
former  employees  for 
positions  for  which 
they  wert  qualified.' 


ber  of  plaintiffs  that  his  firm. 
Gray,  Plant,  Mooty,  Mooty  6c 
Bcnnert  PA.  has  represented  in 
an  age  discrimination  coro- 
plainL  The  previous  high  was 
43  in  a  case  against  Monsanto 
Co.  that  was  settled  for  $18.25 
million  in  1996,  he  said. 

"Computer  industry  em¬ 


ployees  are  particularly  vul¬ 
nerable  to  age  discrimination 
because  of  this  commonly 
held  perception  that  older  in¬ 
dividuals  can't  keep  up  with 
new  technology,”  Snyder  said. 
"As  with  any  stereotype,  that 
may  apply  to  some  people,  but 
h  doesn't  apply  to  others." 

He  added  that  the  most  re¬ 
cent  performance  reviews  for 
each  of  the  plaintiifis  had  indi¬ 
cated  that  he  was  a  "solid  per¬ 
former"  or  better. 

Surprise  Tsnnination 

"If  you're  doing  your  job  well, 
getting  good  reviews  and  mer¬ 
it  bonuses,  you  don't  expect  to 
^  dumped,"  Walstrom  said 
of  his  termination.  1n  that  re¬ 
spect.  it  a  surprise." 

Walstrom.  who  said  he  had 
worked  at  Best  Buy  for  almost 
seven  years,  was  a  technical 
consultant  assigned  to  special 
projects  when  he  was  let  go  in 
April.  But  he  said  that  until 
S^tember  2003,  he  was  the 
manager  of  the  company’s 
database  support  group,  which 
consisted  of  2l  employees  and 
seven  or  eight  contractors  and 
was  charged  with  ensuring  the 


health  of  all  corporate-level 
production  databases. 

Walstrom's  group  was  then 
shifted  from  operations  to 
Best  Buy's  database  develop¬ 
ment  team,  he  said,  adding 
that  he  soon  teamed  from  his 
new  boss  that  his  job  was  go¬ 
ing  to  someone  else.  "The  guy 
picked  to  replace  me  had  no 
experience  managing  databas¬ 
es,"  Walstrom  said.  "He  had 
been  a  project  manager.  But  he 
was  abMt  20  years  my  junior. 
You  look  at  that  in  hi^igbt 
and  start  figuring  thii^  out" 

The  plaintiffs  a.sked  for  a 
jury  triiu  and  are  seeking  back 
pay  and  benefits,  damages  and 
an  order  that  Best  Buy  either 
reinstate  them  to  comparable 
jobs  or  give  them  salaries  and 
benefits  until  they  reach  (heir 
expected  retirement  ages. 

Not  every  former  employee 
who  was  eligible  to  Hie  an  age- 
discrimination  claim  against 
Best  Buy  did  $a  Snyder  said 
wprkers  who  accepted  sever¬ 
ance  pay  were  required  to  sign 
a  document  releasing  the 
company  fmm  all  claims,  in¬ 
cluding  age  discrimination 
complaints.  O  50942 
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stemmed  from  an  incident  in 
which  a  "white  knight”  hacker 
broke  in  and  found  credit  card 
information  stored  in  a  Pecco 
database  and  reported  U  to  the 
FTC  a  I^co  sp^esman  said. 
No  infonnation  was  lost  in  the 
incident,  be  added. 

As  part  of  its  settlement 
with  the  FTC,  Petco  must  sub¬ 
mit  to  independent  biannual 
audits  of  Hs  information  secu¬ 
rity  practices  for  the  next  20 
years.  "The  message  here  b 
that  if  a  company  is  making 
security  and  privacy  represen¬ 
tations  online,  it  should  take 
reasonable  and  appropriate 
measures  to  secure  sensitive 
informatioa"  said  Alain  Sheer, 
an  anomey  in  the  FTCs  finan¬ 
cial  practi^  divisioa 

T^  FTC  has  reached  simi¬ 
lar  settlements  with  four  ocher 
companies  over  the  past  cou¬ 
ple  of  years  (see  chart). 

Meanwhile,  the  FTC 


charged  that  Sunbelt,  a  Cen¬ 
dant  Corp.  subsidiary,  and  Na¬ 
tionwide  failed  to  comply  with 
the  Gramm-Leach-BUley  Act's 
Safeguards  Rule,  which  re¬ 
quires  companies  to  aj^ly  rea¬ 
sonable  measures  for  protect¬ 
ing  sensitive  information. 

Both  were  charged  with  “sig¬ 
nificant  foilurcs”  to  protect 
customer  names.  Social  Secu¬ 
rity  numbers,  credit  histories 
and  other  confidential  data. 

Nationwide  Sweep 

The  action  represents  the  first 
cases  invoivixig  the  Safeguards 
Rule.  The  companies  were 
part  of  a  ''nationwide  sweep” 
of  auto  dealers  and  mortgage 
companies,  said  Jessica  Rich, 
assistant  director  of  consumer 
protection  at  the  FTC. 

She  said  the  FTC  hopes  the 
action  sends  a  message  that 
the  Safi^uards  Rule  applies 
not  only  to  typical  financial 
institutions  but  also  to  payday 
lenders,  check  cashers  and  tax 
preparers  who  handle  sensi¬ 
tive  personal  infonnation 


when  conducting  business. 

As  part  of  an  agreeroenl 
with  tile  FTC,  Sunbelt  agreed 
to  submit  to  biannual  audits  of 
its  infonnation  security  pro¬ 
gram  for  the  next  lO  years.  In 
an  e-mailed  statement.  Sun¬ 
belt  said  the  FTC  complaint 
stemmed  fiom  a  "seldom- 
accessed  lead  generation  pro¬ 
gram  that  was  formerly  avail¬ 
able  through  Sunbelt's  Web 
site”  prior  to  the  implementa¬ 


tion  of  policies  to  comply  with 
the  Safeguards  Rule. 

John  Eubank.  CEO  of  Na¬ 
tionwide  Mortgage,  confirmed 
the  FTC  action,  but  he  claimed 
that  his  five-person  company 
^  which  shares  the  name  of 
the  much  larger  insurance  and 
financial  services  provider  ~ 
may  have  gotten  inadvertently 
caught  up  in  a  sweep  targeted 
at  big  financial  institutions. 
Eubank  said  the  cost  involved 


in  bringing  his  small  operation 
into  compliance  with  the 
agency’s  requirements  is  pro¬ 
hibitive  and  may  force  him  to 
shut  down  his  business  if  no 
compromise  can  be  found. 

The  latest  FTC  action  is 
seen  as  indicative  of  the  grow¬ 
ing  determination  of  federal 
and  state  authorities  to  crack 
down  on  security  and  privacy 
violations,  even  in  instances 
where  no  actual  breach  may 
have  occurred,  said  Michael 
Overly,  an  attorney  at  Foley  & 
Lardner  LLP  in  Los  Angeles. 

are  seeing  a  real  inter¬ 
est  in  poUcii^  these  matters 
far  more  closely."  Overly  said. 
For  instance,  Barncsandnoble.- 
com  Inc.  in  April  agreed  to 
pay  $60,000  and  Implement  a 
comprehensive  information 
security  policy  in  a  deal  with 
the  New  Yoric  attorney  gener¬ 
al’s  offke  over  a  design  vtil- 
neiability  In  the  online  book¬ 
seller's  Web  site.  "In  that  case, 
no  hack  had  occurred,  and  no 
exposure  of  data  had  taken 
place,"  Overly  said.  O  50938 
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iMihed  dksdosure  d  the  eiToi 
addresses  of  660  subsotos  to  Its 

F^ozac  Reminder  Sovice. 

•ss 

Mkroeott  ageed  to  mate  changes  in  Its 
F^ssood  user  autheidlcabon  system 

Case  SMAed  exposure  of  conUenbel 

2003 

osioiiier  inkymahon  over  compariy's 
Website. 

Boosed  confidential  custorner  data 
mer  Web  site. 
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Network  Aroliance  Updat 
Data  ONTAP  Storaoe  Plat 


New  7G  release  will 
virtualize  storage 
resources,  vendor  says 


es 

Storage  Platform 


BV  LUCAS  MEARiAN 

Netwoiic  Appliance  Inc.  last  week 
brought  out  the  latest  version  of  its 
Data  ONTAP  software,  which  it  said 
builds  a  grid  storage  architecture  on  its 
appliances  by  creating  an  abstraction 
I^er  between  application  servers, 
storage  controllers  and  disk  arrays. 

NetApp’s  Data  ONTAP  7G  software 
uses  one  global  name  space  to  give 
administrators  a  single  view  of  storage 
resources.  The  system  also  pools 
processing  power  across  its  networic- 
attached  storage  (NAS)  arrays,  said 
Chris  Bennett,  director  of  marketing  at 
the  Sunnyvale,  C^ali£*based  company. 

Data  ONTAP  7G  also  includes  a  new 
tool  called  FlexVol,  whidi  allows  vol* 
umes  or  identifiable  units  of  storage  to 
be  spread  across  disk  spindles  in  a  log¬ 
ical  manner  for  greater  resiliency  and 
higher  performance,  Bennett  said. 
FlexVol  also  lets  administrators  set 
storage  provisioning  policies  to  allow 
volumes  to  grow  on  the  fly  according 
to  how  much  ^ce  applications  need. 

Mike  Forman,  group  director  of 
North  American  IT  at  Cadence  Design 
Systems  Inc.  in  San  Jose,  said  the  flexi¬ 
ble  voltunes  will  allow  him  to  create 
more  accurate  chargeback  models  to 
his  users.  *^ou  can  assign  a  SOOGB 


LUN  (logical  unit  number]  to  a  user, 
and  if  he's  only  using  SOGB  of  the 
SOOGB.  you  can  take  the  other  450GB 
and  give  it  to  someone  else.  WeVe 
been  asking  for  this  for  years,"  be  said. 

Because  there  is  no  preallocation  of 
storage,  utilization  rates  are  hi^er. 
Bennett  said.  Performance  is  almost 
doubled  because  the  data  is  shared 
across  disk  array  trays,  allowing  multi¬ 
ple  engines  to  process  I/O  commands. 

'Tliin  Provisioiiing’ 

Tony  Asaro,  an  analyst  at  Enterprise 
Strategy  Group  in  Milford,  Mass.,  said 
NetApp's  “thin  provisioning”  feature 
has  yet  to  be  offered  by  the  other  ma¬ 
jor  storage  suppliers. 

Another  new  tool  in  Data  ONTAP 
7G.  called  FlexCkme.  performs  snap¬ 
shots  or  point-in-time  replication  of 
data  sets  for  test,  development  and 
simulation  scenarios.  The  snapshots, 
which  require  no  disk  space,  can  be 
manipulated  and  tested  without  affect¬ 
ing  the  initial  data  set 

NetApp  also  said  last  week  that  Its 
NAS  engine,  the  gFUer.  can  now  serve 
up  blod(-IeveI  data  either  through  the 
Fibre  Channel  or  Internet  SC^I  proto¬ 
col  ISCSI  allows  blodc-level  data  trans¬ 
fers  to  occur  over  ubiquitous  Ethernet. 

NetApp  said  all  of  the  new  products 
are  currently  shipping.  FlexVol  is  bun¬ 
dled  with  Data  ONTAP  at  no  extra 
charge.  FlexClone  is  separately  li¬ 
censed  from  around  S6.000.  O  S0B59 


Start-up’s  Java 
Tool  Integrates 
Open-Source 

BV  STACY  COWLEY 

Start-up  Gluecode  Software  Inc.  last 
week  brought  out  a  new  Java  develop¬ 
ment  platform  that  the  company  said 
ties  together  open-source  components 
into  an  integrated  system. 

The  new  tool  set.  called  Joe.  includes 
pieces  from  The  Apache  Software 
Foundation's  portfolio,  including  por¬ 
tal  technology,  the  (Jeronimo  applica¬ 
tion  server,  the  Derby  database  (for- 
n>erly  Cloudscape)  and  the  Agila  BPM 
business  process  management  engine. 
Joe  is  aimed  at  developers  who  are  in¬ 
terested  in  using  the  open-source  tech¬ 
nology  but  are  reluctant  to  tackle  com¬ 


ponent-integration  woik.  The  Joe 
package  includes  support  services  and 
add-on  features.  Joe  was  built  to  marry 
the  flexibilicy  of  Java  with  the  usability 
of  Microsoft  Ck)rp.’8  develc^nnent 
tools,  said  Winston  Damarillo,  CEO  of 
El  Segundo,  Calil-based  Gluecode.  He 
said  he  expects  Joe  to  compete  with 
Microsoft's  .Net  tool  lineup. 

Forrester  Research  Inc.  analyst  John 
Rymer  said  Joe  should  help  companies 
that  dtm't  have  the  development  ex¬ 
pertise  needed  ti)  pull  together  an 
open-source  technology  stack.  Joe  is 
most  suitable  for  projects  such  as 
building  applications,  be  said. 

Tech^cal  su[^rt  and  access  to  Joe 
source  code  and  updates  are  now  avail¬ 
able  for  an  annual  subscription  foe 
staning  at  $3,500. 0  50877 
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Dell  Unveils  Second  Blade  Server 


dual-processor  servers  and 
can  accommodate  emerging 
lO-Gigabit  Ethernet  network- 
technology  as  well  as  the 
power  requirements  of  Intel's 
next  generation  of  Xeon  proc¬ 
essors,  said  Bruce  Komfeld, 


director  of  worldtvide  enter¬ 
prise  marketing  at  Dell 
The  extremely  dense  blade 
design  lets  systems  share  net¬ 
working,  power  and  cooling 
components.  Users  can 
squeeze  up  to  62%  more 
-  servers  into  their  data  center 
racks  than  they  could  with 
Dell’s  rack-mounted  lU  Power- 
Edge  1850  server,  he  said. 

Hiough  his  company  hasn't 
yet  installed  Dell’s  new  servers, 
Darrin  Hynip,  director  of  op¬ 
erations  at  Mythic  Entertain¬ 
ment  Inc.  in  Fairfax,  Va.,  said 
the  1855  appears  to  be  a  viable 
alternative  to  rack  systems. 

With  little  room  for  expan¬ 
sion  in  its  data  center.  Mythic 
is  looking  to  blades  as  a  way 
to  enhance  performance.  The 
company,  creator  of  the  online 
role-playing  game  Dark  Age 
of  Camelot,  ^cpects  to  stan¬ 
dardize  on  a  blade  architec¬ 
ture  by  2006. 

While  blades  have  always 
taken  up  less  space  than  rack¬ 
mounted  servers,  the  extreme 
density  of  the  blade  architec¬ 
ture  has  forced  some  blade  de¬ 
signs  to  use  cooler,  less  pow¬ 
erful  processors  than  rack  sys¬ 
tems  da  The  1855.  however; 
uses  the  same  processor  as  its 
lU  rack  counterpart.  “We  were 
waiting  for  the  technology  to 
mature,"  Hyrup  said. 

Mythic  is  also  interested  in 
evaluatii^  a  low-power  ver¬ 
sion  of  the  1855,  which  is  ex¬ 
pected  within  a  few  months. 
Hyrup  said  he  expects  the  new 
blade  to  have  much  lower 
power  requirements  than  the 
1855,  which  draws  about  15% 
less  power  than  the  1850. 

One  maior  concern  for  Dell 
customers  is  the  fact  that  the 
new  blade  chassis  doesn’t  yet 
support  switchii^  technology 
from  Cisco  Systems  Inc.,  said 
John  Enck,  an  analyst  at  Gart¬ 
ner  Inc.  Support  for  the  Cisco 
technology  is  expected  by  ear¬ 
ly  next  year.  Until  then,  the 
systems  may  be  less  appealing 
to  enterprise  customers,  Fnrlr 
said. 

The  PowerEdge  1855  chassis 
is  priced  from  $2,999,  and  the 

I  blade  servers  from  $1499.  Both 
are  shipping  now.  O  50681 


product  —  the  PowerEdge  18.55 
server;  based  on  Intel  Corp.'s 
Xeon  EM64T  processors. 

The  blades  are  designed  to 


slide  into  a  new  7U  chassis 
designed  by  DeU.  (lU  equals 
1.75-in.  high.)  The  chassis  can 
house  as  many  as  10  of  the 


BV  ROaCBT  MCMILLAN 

IVo  years  after  launching  its 
first  blade  server,  DeU  Inc.  last 
week  brought  out  a  foUow-up 
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Service  Establishment 
Service  Control 
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Service  Optimization 
Outsourcing 
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Cordys  Exec  Touts  Rrm’s  Baan  Roots 


«V  HEATHER  HAVENSTEIN 

ORLANOO 

Cortfys  Inc^  founded  almost 
three  years  ago  by  Jan  Baan 


and  others  from  his  core  team 
at  Baan  Software  (rujw  part  of 
SSA  Globoi  Ttehnolqgies  Inc.), 
recently  began  shipping  its  Web 


services  platfrrm.  Justin  Ander¬ 
son,  the  new  president  of  the 
company’s  Americas  group, 
soon  to  be  based  in  Beston,  Va, 


talked  with  Computerworld 
lost  week  at  the  Gartrter  Appli¬ 
cation  Integration  and  Web 
Services  Summit  here  about 
Cordys’ products  and  strategy. 

With  Jan  Baan  as  CEO.  you  have 
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an  IT  veteran  with  a  lot  of  back¬ 
ground  in  ERP.  What  does  that 
expertise  bring  to  the  table?  The 

22-year  heritage  there  plays  a 
key  role  in  coming  out  with 
this  next-generation  tool. 
When  [Baan  veterans]  were 
developing  ERP  systems,  they 
were  dealing  with  security 
and  scalability  issues,  and  how 
do  you  make  these  businesses 
unique.  We  never  were  able 
to  fulAll  the  vision  with  ERP. 
Companies  did  big  business 
process  re-engineering  but 
found  they  looked  just  like 
their  competitors.  As  ERP 
was  trying  to  grow,  [vendors] 
would  buy  a  CRM  company  or 
an  advanced  planning  solution 
suite  and  try  to  bolt  all  those 
together.  T^t  compounded 
the  problems.  It  is  the  same 
thing  with  an  application 
platform  suite. 

WN  your  target  market  be  compa¬ 
nies  trying  to  build  composite  ap¬ 
plications?  Yes.  You  would  use 
our  unified  stack  to  create 
composite  applications  in  a 
services-oriented  architecture, 
so  [that  means]  basically  ex¬ 
posing  all  the  disparate  legacy 
systems  instead  of  ripping  and 
replacing  all  those  to  enable 
the  vision  of  the  CEO  or  CIO, 
[Our  platform]  makes  the  ERP 
systems’  application  infra¬ 
structure  so  there  are  reusable 
components,  and  we  can  start 
with  business  processes  to 
really  fiiinil  making  compa¬ 
nies  unique. 

How  does  your  technology  diffor 
from  integration  software?  We’re 
open-standards-based,  and  we 
have  an  XML  application  serv¬ 
er  and  XML  containers  across 
that  whole  stack  that  we  built 
from  the  bottom  up.  It  leads  to 
lower  cost  of  ownership. 

How  does  your  technology  support 
enterprise  efforts  to  go  beyond  us- 
big  WU  services  for  Intomal  inte¬ 
gration  by  budding  composite  ap- 
pdcatkms?  We  have  a  compo¬ 
nent  gallery  —  prebuilt  build¬ 
ing  blocks  —  to  help  you  start 
that  For  example,  we  have  B  to 
B  Express,  which  helps  com¬ 
panies  deal  with  their  trading 
partners,  customers  and  sup¬ 
pliers  to  build  those  compos¬ 
ite  applications.  O  50892 


I 


rw.computerwortd.com 


NEWS 


CWnHIMU  lnii*r2MN4  21 


Supercomputers  Vital  for  Competitiveness,  Say  Users 


Corporate  America  must  leverage  gov- 
emroent  investments  in  powerful  su¬ 
percomputers  so  the  technology  can 
economically  fmd  its  way  into  ^e  pri¬ 
vate  sector. 

U.S.  industry  needs  affordable  ac¬ 
cess  to  supercomputer  systems,  which 
generally  cost  $10  million  or  signiii- 
cantly  more,  in  order  to  better  com¬ 
pete  globally,  concluded  a  panel  on 
global  leadership  at  the  SC2004  Super- 
computing  Conference  here  this 
month.  The  panel  included  IT  execu¬ 
tives  from  General  Motors  Corp.  and 
animation  company  PDl/DreamWorics. 
who  explained  bow  supercomputers 
have  given  their  companies  an  edge  in 
their  respective  industries. 

To  get  the  better  of  con^titors  in 
other  countries,  U.S.  businesses  need 
access  to  more  powerful  hardware 
such  as  supercomputers,  said  modera¬ 
tor  David  E.  Shaw,  chairman  of  David 
E.  Shaw  &  Co„  a  New  York-based  in¬ 
vestment  and  technology  develop¬ 
ment  firm.  To  keep  costs  reasonable, 
companies  i»eed  to  leverage  govern¬ 
ment  investments  in  supercomputers, 
he  said. 

Government  agencies  and  business 
groups  are  currently  looking  at  ways 


to  amortize  government  technolc^ 
investments  over  a  larger  group  of  po¬ 
tential  users,  Shaw  said. 

A  recent  survey  by  the  Council  on 
Competitiveness  also  found  that  the 
private  sector  lacks  trained  IT  profes¬ 
sionals  to  run  such  technologies,  said 
Suzy  Tichenor.  director  of  the  high- 
performance  computing  program  at 
the  Washington-based  nonprofit  busi¬ 
ness  advocacy  group.  Companies  could 
utilize  trained  government  personnel 
under  a  public/private  partnership. 

Business  Benefits 

The  beneHts  of  supercomputers  are 
real,  said  panelist  Sharan  Kalwani. 
manager  of  high'pcrfbrmance  comput¬ 
ing  infrastructure  at  GM. 

Designing  new  vehicles  and  tooling 
up  factories  to  build  them  is  incredibly 
expensive  and  took  up  to  60  months  to 
complete  in  the  eariy  1990s,  he  said. 
Powerful  supercomputers  now  com¬ 
press  and  overlap  multiple  schedules 
for  design,  tooli^,  research,  safety 
testing  and  manufacturing,  cutting  the 
the  process  to  18  months,  Kalwani  said. 
One  area  seeing  the  most  effect  has 
been  in  replacing  crash-test  cars. 

Andy  Hendrickson,  head  of  anima¬ 
tion  technology  at  n)I/Dream  Works, 
a  Redwood  City,  Calif.-based  unit  of 


Windows  to  Slop  Itanium  for  Supercompu^ 


mCROSOR  COW.  wl  support  only 
x86  processors  mM)  64-bt  otensioRs 
wtftan  It  iBlasses  a  version  of  VWndoNNs 
Server 2003  for  Mgft-perforinanoe  corn- 
puling  (HPC)  sppkcabJTB  rMBd  yesr. 
puOino  off  s^iport  for  hlel  Carp.'s  Manh 
urn  2  dip  to  a  sliiirideitied  date. 

IheHTCmaflietiscunrerWsfdotrinat- 
ad  by  Unix  arid  Linux  operalina  syslarrB. 
WicroaofltefodjnqtobroakintothBrnar- 
bet  bd  foeb  that  Ibniifn  2-based  hard* 
ware  is  loo  aiQMnsive  and  too  powerfof 
for  the  smal  dusters  that  K  expects  users 
to  buld  aroutfo  Windows  Server  2003. 

‘Whenyoutoakaloirtargetmatlcl' 
the  deperlinerdal  cfcsters  *  ttariurn  2  is  a 
bl  outside  the  roach  [d  usere]  in  forms  of 
budget  and  In  terms  d  needad  oompuf* 
ing  power/ said  Grag  RanWch,  a  senior 
product  manaoar  d  MciosdL 

licfoaoll  thfo  nnreh  itodiiad  ti  rdteui 
plans  for  foa  Windows  Server  2003 
Cotipie  Ckjsfor  Gitton.  which  pfOMous* 
b  was  cdfod  the  tff*C  EdHoa  A  teat  bate 
refoase  d  the  software  was  due  this  yaw 
lid  has  sipped  to  March  or  AprI.  RvMch 


safo.  The  corwnerciaftefoase  is  sti  slated 
for  iato  2005.  Support  for  Itanium  2  wi 
be  added  to  the  second  rsfeese  d  the  op* 
eratinQ8ystBm.RanUchsaid.taiit8ship- 
menl  data  for  it  haenl  yet  been  set 

OftefafedHoefottffockafd  Co.  under¬ 
stand  lallicroeofl  chose  to  test  stg)- 
port  proceesors  because  they  have 

higher  safes  vdumas  foan  Karium  2.  said 
Ed  Turkel  rnanager  d  product  tnarkelino 
at  HP's  HPC  dhMoa  But  HP.  which  uses 
Harium  2  in  Is  Integriy  iie  d  servers, 
is  pushing  Mforoadt  to  add  support  for 
the  64-btt  dip ‘as  qiicMy  as  possiie/ 
he  said. 

Mtorosoft  is  cfoarly  aMng  for  foe 
sweet  spd  in  foe  HP€  market  in  forms  d 
rehfne.  said  Nathan  Brodoreod.  an  ana¬ 
lyst  at  IrtsighI  64  In  Saratoga,  Cad.  HPC 
isonepartdthelTinduBbywhereMRro- 
soft  doaani  enfoy  an  instaHecHmss  ad¬ 
vantage  ovar  la  rhds.  Brookwood  noted. 
Ittcroealt  is  going  to  have  to  fIgM  tooth 
and  nal  for  every  HPC  safe  1  gels.” 

•Msbws. 
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DreamWorks  LLC,  said  supercomput¬ 
ers  have  revolutionized  the  animation 
business  by  allowing  complex  mathe¬ 
matical  calcubtkms  to  be  done  more 


quickly,  helping  to  create  more  lifelike 
animation  and  reducing  labor  costs. 
Since  labor  accounts  for  the  lion's 
share  of  the  cost  of  an  animated  film, 
the  savings  can  be  huge  and  could  slow 
the  trend  of  sending  animation  fobs 
ofi^ore.  Hendrickson  said.  O  50685 
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Don’t  Lose  ’feur  Vbice 


gJow  of  ibe  huge  Power¬ 
Point  slides  that  illus¬ 
trate  his  message,  he  dis¬ 
cusses  the  project  in  ex¬ 
plicit  detail,  providing 
insights  into  the  prob¬ 
lems  that  bad  to  be  over¬ 
come  and  the  beneHts 
that  were  gained.  The 
audience  is  riveted  by 
the  presentation  because 
it  provides  the  kinds  of 
lessons  that  are  solid 
gold  for  any  IT  oiganiza- 
tion  that’s  looking  at  undertaking 
a  similar  project. 

Then  after  the  presentation,  a 
Computerworid  reporter  approaches 
the  speaker  to  ask  for  a  few  points  to 
be  clarified  or  elaborated  upon.  He’s 
happy  to  oblige  and  begins  to  ex¬ 
plain  a  particular  point  when  he  no¬ 
tices  that  the  reporter  is  taking  notes 
as  he  listens.  And  then  the  presenter 
drops  the  bomb.  "You  know  you 
can't  write  about  this.” 

Excuse  me?  You’ve  just  spilled 
your  guts  in  a  public  forum  in  which 
hundreds  of  people  from  across  the 
IT  ^>ectrum  were  given  detailed 
knowledge  of  your  project,  and  we 
can't  write  about  this?  From  whom 
are  you  trying  to  withhold  the  infor¬ 
mation.  and  what  on  earth  makes 
you  think  it’s  not  already  in  the  pub¬ 
lic  domain?  What  are  you  thinking? 

That  last  question  was  rhetoricaL  I 
know  what  he’s  thinking.  He's  think¬ 
ing  that  if  his  company's  PR  people 
see  comments  from  him  in  print  that 
they  haven't  vetted,  he’s  going  to 
be  chastised  for  failure  to  adhere  to 
corporate  communications  policy  — 
regardless  of  bow  nonsensical  and 
inconsistent  the  policy  may  be. 

Hiis  is  disturbing.  The  amount  of 
bureaucratic  red  tape  involved  in 
making  information  from  your  peers 


"OU  WOULDN’T  believe  how  often  this 
happens:  A  high-profile  IT  executive 
is  on  stage  at  a  conference  doing  a  pre¬ 
sentation  on  some  very  cool  project  his 
company  has  just  completed.  Under  the 


available  is  threatening  to 
tie  our  hands  to  a  degree 
we  all  need  to  be  con¬ 
cerned  about.  Ask  any 
corporate  IT  professional 
to  identify  the  most  credi¬ 
ble  and  most  valuable 
sources  of  information, 
and  he'll  almost  invari¬ 
ably  name  other  corpo¬ 
rate  IT  professionals.  Not 
vendors,  not  analysts,  not 
consultants,  as  important 
as  all  of  them  may  be.  So 
corporate  policies  that  place  restric¬ 
tions  on  the  free  flow  of  information 
~  policies  that  often  require  people 
to  get  their  PR  and  legal  depart¬ 
ments  to  sign  off  on  their  comments 
to  the  press  —  limit  your  exposure  to 
the  information  you  find  most  valu¬ 
able  in  order  to  do  your  job. 

Especially  disturbii^  b  the  threat 
that  some  government  tech  workers 
will  be  silenced  even  more  resolutely 
than  their  corporate  counterparts. 
CNN  reported  last  week  that  the  De¬ 


partment  of  Homeland  Security  is 
considering  requiring  all  of  its  em¬ 
ployees  to  sign  “confidentiality 
agreements”  that  prohibit  them  from 
disclosing  unclassified  "sensitive” 
informatioa  The  problem  b  it’s  en¬ 
tirely  unclear  what  constitutes  sensi¬ 
tive  information.  And  the  concern  is 
that  anything  that  some  DHS  bu¬ 
reaucrat  decides  he  doesn't  want  to 
see  in  print  or  have  discussed  at  a 
conference  will  suddenly  be  deter¬ 
mined  to  be  sensitive. 

The  relative  openness  of  the  DHS 
has  yielded  some  excellent  Comput- 
erworld  stories  on  IT  consolidation 
and  cybersecurity  —  issues  that  are 
of  paramount  importance  to  IT  pro¬ 
fessionals.  It  would  be  a  shame  to  see 
that  openness  vanish  in  a  wbp  of 
sensitive-information  smoke. 

So  what’s  an  IT  professional  to  do? 
If  nothing  else,  question  any  corpo¬ 
rate  communication  policies  that  re¬ 
strict  you  from  sharing  professional 
information  with  your  peers. 

We  call  ourselves  "The  Voice  of 
IT  Management."  but  in  truth  that 
voice  b  yours.  Whatever  you  do, 
don’t  lose  it.  O  50896 
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DAVID  MOSCHELLA 

IT’s  Run  of 
Stability 
About  to  End? 

OVER  THE  PAST  40 
years,  countless  IT 
suppliers  have  come 
and  gone,  and  the  way  oiganizations 
use  computers  has  expanded  beyond 
what  anyone  could  have  imagined  in 
1964.  To  the  point  of  cliche.  IT  people 
repeatedly  say  that  change  has  been 
our  industry’s  only  constant.  Yet  de¬ 
spite  all  of  thb  undeniable  turmoil, 
there  are  two  parts  of  the  IT  universe 
that  haven’t  changed  proportionately; 

IT  organizations  and  the  IT  services 
companies  that  support  them. 

The  latter  b  easier  to  demonstrate. 
While  Burroughs.  Digital,  Wang.  Cul- 
linane  and  many  other  product  compa¬ 
nies  vanished  long  ago,  the  same  four 
services  firms  —  IBM.  Electronic  Data 
Systems.  Computer  Sciences  Corp.  and 

Accenture  (formerly  _ 

Andersen  (insult- 
ing)  —  have  been  the 
dominant  players  for 
as  long  as  the  IT  ser¬ 
vices  business  has 
existed. 

Powerful  disrup¬ 
tive  forces  dearly 
have  affected  the 
hardware  and  soft¬ 
ware  sides  of  our  in¬ 
dustry.  but  no  such 
forces  have  affected 
the  services  sector, 
at  least  thtis  far. 

While  thb  b  an  in¬ 
triguing  topic  in  hs 
own  right,  it  also  helps  us  understand 
why  the  corporate  IT  organization  has 
abo  been  relatively  stable.  Apparently, 
there  b  something  about  the  nature  of 
individual  customer  work  that  makes 
it  less  susceptible  to  change  chan  the 
product  side  of  our  business.  Whether 
thb  work  b  done  by  in-house  staff  or  a 
service  company  seems  to  make  very 
little  difference. 

But  can  thb  extraordinary  stability 
be  maintained?  Recently.  I  have  been 
doing  research  to  try  to  forecast  the  fu¬ 
ture  of  the  IT  organization,  and  I've  in¬ 
creasingly  been  coming  to  the  conclu¬ 
sion  that  change  b  finally  on  the  way. 
There  seem  to  be  three  main  forces 
that  could  transform  the  way  IT  b 
used  and  managed. 
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IncreMad  bwimsB  oontrot  As  IT  be¬ 
comes  more  deeply  embedded  in  a 
company’s  actual  products  and  ser¬ 
vices.  it's  likely  that  many  businesses 
will  want  to  take  more  direct  control 
over  business-critical  IT  projects.  It 
probably  makes  sense  for  businesses  to 
own  the  applications  they  rely  on.  with 
shared  infrastructure  and  horizontal 
applications  becoming  the  primary 
concern  of  the  IT  organizatioa 

AMamatlM  nurcing.  Certainly,  out¬ 
sourcing  remains  an  alternative  for 
managing  an  organization's  IT  infra¬ 
structure,  and  the  increasing  market¬ 
place  focus  on  grid  and  utility  comput¬ 
ing  suggests  that  the  provision  of  ca¬ 
pacity  by  third  parties  will  rise  in  pop¬ 
ularity.  But  such  capacity  services  arc 
now  largely  a  conumxlity  business,  and 
both  customers  and  outsourcing  sup¬ 
pliers  are  struggling  to  find  more  dy¬ 
namic,  value-creating  models. 

PQfale  Mratruchn.  In  an  abstract 
sense.  IT  organizations  and  IT  services 
companies  are  both  in  competition 
with  the  Internet.  This  ever  more  ca¬ 
pable  public  infrastructure  will  prove 
to  be  an  increasingly  attractive  Sterna- 
tive  to  both  in-house  and  outsourced 
IT  solutions  in  areas  such  as  collabora¬ 
tion.  mobQity  and  ASP-$tyle  services. 

These  three  forces  clearly  have  the 
potential  to  reshape  the  rol«  of  both 
IT  organizations  and  their  service 
providers.  But  since  there  is  so  much 
IT  work  to  do.  it’s  not  a  question  of 
wdiether  either  group  will  go  away.  In¬ 
stead.  it's  likely  that  both  sectors  could 
Stan  to  change  as  dramatically  as  other 
parts  of  the  IT  industry  have. 

But  while  this  logic  seems  sound,  the 
real  forecasting  challenge  is  getting  the 
timing  right.  Will  this  restructuring 
rake  seven  or  17  years  to  play  itself  out? 
Despite  all  the  changes  our  industry 
has  seen,  individua)  transitions  are  of¬ 
ten  a  lot  slower  than  they  appear  in 
retrospect  My  guess  is  that  by  the  end 
of  this  decade,  we  will  look  b^k  and 
see  that  fundamental  changes  have  In¬ 
deed  taken  hold  for  IT  organizations 
and  services  providers  alike.  O  50696 

PIMM  FOX 

Workers  of 
The  IT 
World,  Unite! 

T  workers  banding  togeth¬ 
er  to  form  unions?  How 
20th  century. 
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A  new  report  from  the 
UniveTsity  of  Illinois  at 
Chicago  reveals  that 
403300  jobs  were  lost  in  the 
IT  sector  from  March  2001 
to  April  2004  (download  the 
report  at  C^uickLink  a5130). 

And  the  majority  of  the  po¬ 
sitions  were  lost  after  the  IT 
recession  came  to  an  oificia] 
end  in  November  2001. 

The  combination  of  out¬ 
sourcing  and  uncertainty 
over  the  future  of  business 
growth  probably  means  there  won't  be 
a  rush  to  hire  lots  of  IT  staffers,  even  if 
the  U.5.  economy  starts  humming 
again.  Microsoft  this  week  will  break 
ground  for  a  new  facility  in  —  you 
guessed  it  —  Hyderabad.  India.  There's 
nothing  intrinsically  wrong  with  that: 
labor  and  capital  flow  where  they  can 
be  eftidently  employed.  But  it  seems 
odd  that  U.S.  n*  woiters  are  only  now 
waking  up  to  the  threat  of  offrhore  la¬ 
bor  and  tightfisted  corporate  budgets. 

Sure,  there  have  been  political  ef¬ 
forts  to  cut  the  number  of  foreign 
workers  in  the  U.S.  and  a  campaign  to 
tar  and  feather  companies  that  move 
work  to  lower-cost  regions  halfway 
around  the  globe.  But  only  in  numbers 
will  IT  workers  have  the  clout  they 
need  to  strike  a  chord  with  policy¬ 


makers  and  corporate 
ofTicials. 

Over  the  years,  the  bene¬ 
fits  of  working  under  union 
rules  have  been  blurred  by 
the  hack-and-forth  about 
the  abuses  of  unions  in  the 
workplace.  But  unions 
working  together  with 
management  can  make  a 
positive  difference  for 
workers,  customers  and  in¬ 
vestors.  This  was  best 
demonstrated  years  ago. 
when  Owen  D'.  Young,  chairman  of 
General  Electric  from  1922  to  1939 
and  creator  of  Radio  Corporation  of 
America  (the  ‘TT’  leader  at  the  time), 
pushed  for  economic  and  welfare  pro¬ 
grams  to  counter  the  effects  of  the 
Great  Depression  on  workers. 

Today,  there  are  organizations  trying 
to  increase  the  ranks  of  the  represent¬ 
ed  among  the  employees  of  major  IT 
companies.  The  Washington  Alliance 
of  Technology  Woikers,  founded  in 
1998  and  affiliated  with  the  Communi¬ 
cations  Workers  of  America,  has  been 
active  at  the  state  and  federal  levels.  Its 
main  issue  is  outsourcii^  but  it's  also 
involved  in  the  mundane  area  of  col¬ 
lective  baigalning. 

That's  important  as  well,  because 
most  IT  workers  aren't  part  of  the  elite 
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group  earning  six -figure  salaries.  In¬ 
deed.  there  are  man>'  part-time  and 
contract  workers  who  don't  receive 
health  or  pension  benefits  and  are  sel¬ 
dom  represented  at  the  bargaining 
tabic.  In  fact,  for  many  IT  workers, 
there  isn't  a  bargaining  tabic. 

To  a  great  extent,  the  individual, 
professional  and  skilled  nature  of 
many  IT  jobs  provides  an  intellectual 
security  blanket  that  has  helped  pro¬ 
grammers,  system  technicians  and 
other  IT  managers  remain  blissftilly 
ignorant  of  the  slow  leak  of  jobs  to 
their  comparably  skilled  but  lower- 
paid  colleagues  overseas.  But  the  voice 
of  Che  individual  is  currently  out- 
wei^ed  by  the  vast  cost  savings  that 
outsourcing  represents  to  some  com¬ 
panies.  And  the  ralU  by  unions  to  de¬ 
bate  and  explore  remedies  to  sustain 
our  domestic  IT  industry  can't  carry 
the  day  unless  they  arc  hacked  by  the 
nr  workers  whose  fortunes  and  fotures 
are  at  stake. 

Without  union  representation.  IT 
workers  will  have  to  take  what  b  given 
them,  and  chat  might  not  be  such  a 
good  deal.  0  50621 
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Project  Knodv-how 

CUTTER  CONSMmuirs  Ken 
On  seems  lo  have  no  due 
aboui  what  it  means  to  be  a  certi* 
fied  project  manaoer  or  how  to 
manaoe  a  project  oi  any  size  pHow 
to  Manage  a  Large-Sea^  m^- 
ed'OtackUA  50401).  To  quote. 
Tm  not  sure  what  it  means  to  be  a 
'csrtilied' project  manager  if  you 
fevent  actoaly  iTianaged  a 
projedyours8l.‘Toge(acertifca' 
tton  m  project  management,  you 
musr  have  ptojed  management 
expenenca.  and  you  have  to  pass 
a  rigorous  test.  Experience  snl 
em^. 

Orr  also  said.  The  canddde 
should  be  gnied  on  his  experience 
with  large  projects.  How  1^  a 
project  has  the  candkiate  run  or 
worked  on?*  But  how  can  a  project 
manager  have  experience  on  a 
large  piojed  rf  he  needs  experience 
to  get  on  one?  Aclualy.  smal  and 
large  projects  have  die  same 
processes.  The  way  to  know  if  a 
project  manager  can  manage  a 


project  of  any  size  is  to  verify  hs 
project  records,  did  he  finish  on 
fane,  on  budget  wih  Quafity  and 
with  satisfied  users? 

R-TreuMo 

Senior  project  odministraior, 
Ralei^N.C. 


Propping  Grads 

Barbara  MNioiSN*s  cokann 
‘WhattoTeltheKiite'iQuick- 
Link  4973?)  ieatured  some  very 
goodtipsonwhatfutureprofesion- 
als  should  focus  on  in  deveioping 
(heir  careers.  The  ortfy  problm 
Course  work  in  accrediled  and  high¬ 
ly  regarded  CS/IS  programs  gives 
very  iMe  focus  to  busness  process 
design  and  managemerd.  nfonna* 
lion  management,  relationship 
manaoementandvendormanege- 
menL  These  discipines  ve  much 
more  easdy  developed  m  a  business 
admirastrBtian  program.  For  in- 
stance.  I  WQs  pronioted  to  a  posfton 
iMierebusinessprocessmanage- 
m«i(  s  the  focus,  based  solefy  on 
my  afaity  to  toMt.  speak  and  write 


daarly  -  sWs  that  are  sorely  ladong 
n  most  of  the  technical  staff  at  my 
company. 

If  (S/1S  programs  around  the 
countrydonlgiveamorewrf- 
rounded  focus,  they  wonT  prepare 
graduates  for  the  cfangng  work  en¬ 
vironment  wham  more  than  lechnt' 
cal  ability  matters  Computeneortd 
would  do  wel  to  pubkese  coAeges 
and  unrveisities  that  respond  to  the 
working  woricTs  demands  lor  better- 
trained  managers  and  designets  in 
these  key  sMs. 

LM.  Campos 

ERP  systems  administrator. 
Flushing,  N.Y., 
Lcan910s@earrf1link.net 


1hef*romise 
Of  the  Power  Mac 

For  MORE  leeutely  users.  Apple 
may  have  reached  a  Pont 
where  I  offers  more  speed  n  its 
top-end  machines  than  we  can 
reelelicaly  take  aAiantage  of 
nhe  Old  2frGHz  Power  Mac 
(jS:  UnaiUleraied  Ponm.'  Quick- 


LinkiSMO]  ThBtsooodnevfi.in 
lhai  you  can  save  S600  by  opting 
lor  Apple's  midrange  Rdwv  Mac. 
which  offers  dual  2-OHz  ^  proces¬ 
sors,  or  even  the  ^6t-introducad 
angtoproceeGor  1J-6HZ  (S  mod¬ 
el:  If  goes  for  just  S1.499 
Mth  those  knds  of  savings,  you 
can  buy  a  heck  of  a  iol  ol  RAM.  and 
Mac  OS  X  loves  memory  CoiMthc 
be  the  budget  box  people  have 
been  astong  Apple  lor? 

Robert  Wright 

Photographer.  Brooklyn,  N.Y. 

COlinrTERWORU)  wekxirnes 
oimmenls  from  As  readers  Lenars 
w6  be  ediied  for  brewty  and  darity. 
They  should  be  addressed  to 
JanieEcMe.lettersedilor.Com- 
PutorworkL  PO  Bor  9171. 1  Speen 
Street,  Framingham.  Mass.  01701 
Fax.  (506)  879-4843.  E-rroi. 
iett0s6con1puterworid.com 
inckide  an  address  and  phone 
nvnb0  lor  nmedete  verdication 
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Don’t  Lose  ^ur  Vbice 


glinv  oCthc  huge  Power¬ 
Point  slides  that  illus¬ 
trate  his  message,  he  dis- 
eusses  the  project  in  ex- 
plich  detail,  providing 
insights  into  the  prob¬ 
lems  that  had  to  be  over¬ 
come  and  the  benefits 
that  were  gained.  The 
audience  Is  riveted  by 
the  presentation  because 
it  provides  the  kinds  of 
lessons  that  are  solid 
gold  for  any  IT  organiza¬ 
tion  that's  looking  at  undertaking 
a  similar  project. 

Then  after  the  presentation,  a 
Cnmputerwortd  reporter  approaches 
the  speaker  to  ask  for  a  few  points  to 
be  clarified  or  elaborated  upon.  He’s 
happy  to  oblige  and  begins  to  ex¬ 
plain  a  particular  point  when  he  no¬ 
tices  that  the  rcpn^rier  is  taking  notes 
a.shc  listens.  And  then  the  presenter 
drops  the  bomb.  “You  know  you 
can’t  write  about  this." 

Excuse  me?  You’ve  ju.st  spilled 
your  guts  in  a  public  forum  in  which 
hunda’ds  of  people  from  across  the 
IT  spectrum  were  given  detailed 
knowledge  of  your  project,  and  we 
can't  write  about  this?  Fn>m  whom 
are  you  trying  to  withhold  the  infor¬ 
mation.  and  what  on  earth  makes 
you  think  it's  not  already  in  the  pub¬ 
lic  domain?  What  are  you  thinking? 

That  last  question  was  rhetorical.  1 
know  what  he’s  thinking.  He’s  think¬ 
ing  that  if  his  company’s  PR  people 
see  comments  from  him  in  print  that 
they  haven’t  veiled,  he’s  going  to 
be  chastised  for  failure  to  adhere  to 
corporate  communications  policy  — 
regardless  of  how  nonsensical  and 
inconsistent  the  policy  may  be. 

TTiis  is  disturbing.  The  amount  of 
bureaucratic  red  tape  involved  in 
making  information  fn»m  your  peers 


"OU  WOULDN'T  believe  how  often  this 
happens:  A  high-profile  IT  executive 
is  on  stage  at  a  conference  doing  a  pre¬ 
sentation  on  some  very  cool  project  his 
company  has  just  completed.  Under  the 
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available  is  threatening  to 
lie  our  hands  to  a  degree 
wc  all  need  to  be  con¬ 
cerned  about.  Ask  any 
corporate  IT  professional 
to  identify  the  most  credi¬ 
ble  and  most  valuable 
sources  of  information, 
and  he’ll  almost  invari¬ 
ably  name  other  corpo¬ 
rate  IT  professionals.  Not 
vendors,  not  analysts,  not 
consultants,  as  important 
as  all  of  them  may  be.  So 
corporate  policies  that  place  restric¬ 
tions  on  the  free  flow  of  information 
—  policies  that  often  require  people 
to  get  their  PR  and  legal  depart¬ 
ments  to  sign  off  on  their  comments 
to  the  press  —  limit  your  exposure  to 
the  information  you  find  mo.st  valu¬ 
able  in  order  to  do  your  job. 

Especially  disturbing  is  the  threat 
that  some  government  tech  workers 
will  be  silenced  even  more  resolutely 
than  their  corporate  counterparts. 
CNN  reported  last  week  that  the  De¬ 


partment  of  Homeland  Security  is 
considering  requiring  all  of  its  em¬ 
ployees  to  sign  “confidentiality 
agreements"  that  prohibit  them  from 
disclosing  unclassified  “sensitive” 
information.  The  problem  is  it’s  en¬ 
tirely  unclear  what  constitutes  sensi¬ 
tive  information.  And  the  concern  is 
that  anything  that  some  DHS  bu¬ 
reaucrat  decides  he  doesn’t  want  to 
see  in  prim  or  have  discussed  at  a 
conference  will  suddenly  be  deter¬ 
mined  to  be  sensitive. 

The  relative  openness  of  the  DHS 
has  yielded  some  excellent  Comput- 
erwortd  stories  on  IT  consolidation 
and  cybersccurity  —  issues  that  are 
of  paramount  importance  to  IT  pro¬ 
fessionals.  It  would  be  a  shame  to  sec 
that  openness  vanish  in  a  wisp  of 
sensitive-information  smoke. 

So  what’s  an  IT  professional  to  do? 
If  nothing  else,  question  any  corpo¬ 
rate  communication  policies  that  re¬ 
strict  you  from  sharing  professional 
information  with  your  peers. 

We  call  ourselves  “The  Voice  of 
IT  Management."  but  In  truth  that 
voice  is  yours.  Whatever  you  do. 
don’t  lose  it.  O  50896 
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DAVID  .MUSCHKLI.A 

IT’s  Run  of 
Stability 
About  to  End? 

OVER  THE  PAST  40 
years,  countless  IT 
suppliers  have  come 

and  gone,  and  the  way  organizations 
use  computers  has  expanded  beyond 
what  anyone  could  have  imagined  in 
1%4.  To  the  point  of  clicheS  IT  people 
repeatedly  say  that  change  has  been 
our  industry’s  only  constant.  Yet  de¬ 
spite  all  of  this  undeniable  turmoil, 
there  are  two  parts  of  the  IT  universe 
that  haven't  changed  proportionately: 
IT  organizations  and  the  IT  services 
companies  that  support  them. 

The  latter  is  easier  to  demonstrate. 
While  Burroughs.  Digital.  Wang.  Cul- 
linanc  and  many  other  ptt>duct  compa¬ 
nies  vanished  long  ago.  the  same  four 
services  firms  —  IBM.  Electronic  Data 
.Systems,  Computer  Sciences  Corp.  and 
Accenture  (formerly 
Andersen  Consult¬ 
ing)  —  have  been  the 
dominant  players  for 
as  long  as  the  IT  ser¬ 
vices  business  has 
existed. 

Ifowerful  disrup¬ 
tive  forces  clearly 
have  affected  the 
hardware  and  soft¬ 
ware  sides  of  our  in¬ 
dustry'.  but  no  such 
forces  have  affected 
the  services  .sector, 
at  Icxst  thus  far. 

While  this  is  an  in¬ 
triguing  topic  in  its 
own  right,  it  alst>  helps  us  understand 
why  the  corporate  IT  organization  has 
also  been  rebtively  stable.  Apparently, 
there  is  something  about  the  nature  of 
individual  customer  work  that  makes 
11  less  susceptible  to  change  than  the 
product  side  of  our  business.  Whether 
this  work  is  done  by  in-housc  staff  or  a 
service  company  seems  to  make  very 
little  difference. 

But  can  this  extraordinary'  stability 
bo  maintained?  Recently,  I  have  been 
doing  anarch  to  try  to  forecast  the  fu¬ 
ture  of  the  IT  organization,  and  I’ve  in¬ 
creasingly  been  coming  to  the  conclu¬ 
sion  that  change  is  finally  on  the  way. 
There  seem  to  be  three  main  forces 
that  could  transform  the  way  IT  is 
used  and  managed. 
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Increased  business  control.  As  IT  be¬ 
comes  more  deeply  embedded  in  a 
company’s  actual  products  and  ser¬ 
vices.  it's  likely  that  many  businesses 
will  want  to  take  more  direct  control 
over  business-critical  IT  projects.  It 
probably  makes  sense  for  businesses  to 
own  the  applications  they  rely  on.  with 
shared  infrastructure  and  horizontal 
applications  becoming  the  primary 
concern  of  the  IT  organization. 

Alternative  souremg.  Certainly,  out-  i 

sourcing  remains  an  alternative  for  I 

managing  an  organization’s  IT  infra-  I 
structure,  and  the  increasing  market-  | 
place  focus  on  grid  and  utility  comput-  j 
ing  suggests  that  the  provision  of  ca¬ 
pacity  by  third  parties  will  rise  in  p<»p- 
ularity.  But  such  capacity  scn  ices  are 
now  largely  a  commodity  business,  and 
both  customers  and  outsourcing  sup¬ 
pliers  arc  struggling  to  find  more  dy¬ 
namic,  value-creating  models. 

PiABc  infrastructure.  In  an  abstract 
sense,  nr  organizations  and  IT  services  I 
companies  arc  both  in  competition  j 
with  the  Internet.  TTtis  ever  more  ca-  i 
pable  public  infrastructure  will  prove  I 
to  be  an  increasingly  attractive  altema-  | 
tivc  to  both  in-house  and  outsourced  i 
IT  Mtlutions  in  areas  such  as  collabora-  I 
tion.  mobility  and  ASP-st>'lc  services. 

These  three  forces  clearly  have  the 
potential  to  reshape  the  n^les  of  both 
IT  organizations  and  their  scr\'icc 
providers.  But  since  there  is  so  much 
IT  work  to  do.  it’s  not  a  question  of 
whether  cither  group  will  go  away.  In¬ 
stead.  it's  likely  that  both  sectors  could 
start  to  change  as  dramatically  as  other 
parts  of  the  IT  industry  have. 

But  while  this  It^ic  seems  sound,  the 
real  forecasting  challenge  is  getting  the 
liming  right.  Will  this  restructuring 
take  seven  or  17  years  to  play  itself  out? 
Despite  all  the  changes  our  industry 
has  seen,  individual  transitions  arc  of¬ 
ten  a  lot  slower  than  they  appear  in 
retrospect.  My  guess  is  that  by  the  end 
of  this  decade,  we  will  look  back  and 
sec  that  fundamental  changes  have  in¬ 
deed  taken  hold  for  IT  organizations 
and  scr>'ices  providers  alike.  O  50696 
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A  new  repiirt  from  the 
University  of  Illinois  at 
Chicago  reveals  that 
403.300  jobs  wore  lost  in  the 
IT  sector  from  March  2001 
to  April  2004  (download  the 
report  at  QuickLink  a5I.^0). 

And  the  majority  of  the  po¬ 
sitions  were  lost  after  the  IT 
recession  came  to  an  official 
end  in  November  2001. 

The  combination  of  out¬ 
sourcing  and  uncertainty 
over  the  future  of  business 
growth  probably  means  there  won’t  be 
a  rush  to  hire  lots  of  IT  staffers,  even  if 
the  U.S.  economy  starts  humming 
again.  Microsoft  this  week  will  break 
ground  for  a  new  facility  in  —  you 
gucssc'd  it  —  Hyderabad.  India.  There’s 
nothing  intrinsically  wrong  with  that; 
labor  and  capital  flow  where  they  can 
be  efficiently  employed.  But  it  seems 
odd  that  U.S.  IT  workers  are  only  now 
waking  up  to  the  threat  of  offshtve  la¬ 
bor  and  tightfisied  corporate  budgets. 

Sure,  there  have  been  political  ef¬ 
forts  to  cut  the  number  of  foreign 
workers  in  the  U,S.  and  a  campaign  to 
tar  and  feather  c<»mp3nics  that  move- 
work  to  lower-cost  regions  halfway 
around  the  globe.  But  only  in  numbers 
will  IT  workers  have  the  clout  they 
need  to  strike  a  chord  with  p«)licy- 


makors  and  corporate 
officials. 

Over  the  \cars.  the  bene¬ 
fits  of  working  under  union 
rules  have  been  blurred  hv 
the  back-and-forrh  about 
the  abuses  of  unions  in  the 
workplace.  But  unions 
working  together  w  ith 
management  can  make  a 
positive  difference  for 
workers,  customers  and  in¬ 
vestors.  This  was  best 
dcmimstrated  years  am>. 

I  when  Owen  I>.  Young,  chairman  of 
I  General  Electric  from  1922  to  IW 
i  and  creator  of  Rad  io  Corpi»ration  of 
America  (the  “IT"  leader  at  the  time*. 

,  pushed  for  economic  and  welfare  pn*- 
I  grams  to  counter  the  effects  t»f  the 
:  Great  Depression  on  workers. 

I  Tkkday.  there  are  organizations  trying 
I  to  increase  the  ranks  of  the  represent- 
I  ed  among  the  employees  of  major  IT 
I  companies.  The  Washington  Alliance 
1  ofTcchnulogy  Workers,  ftmnded  in 
1908  and  affiliated  with  the  Gommuni- 
catiims  Workers  of  America,  has  bk'cn 
active  at  the  state  and  federal  levels.  Its 
main  issue  is  outsourcing,  but  it’s  also 
j  involved  in  the  mundane  area  of  col- 
I  Icctivc  bargaining. 

I  Thai's  impi>nani  as  well,  because 
'  most  IT  w'orkers  aren’t  pan  of  the  elite 


gmup  earning  six-figure  salaries.  In 
deed,  there  arc  many  part-time  and 
contract  workers  «-h«'  don’t  receive 
health  or  pvmsion  benefits  and  are  sel 
dom  represented  at  the  bargaining 
table.  In  fact,  for  mam  IT  workers, 
there  isn’t  a  bargaining  table 

To  a  great  evtem,  the  individual, 
proie.ssiiinal  and  skilled  n.tture  tW' 
m.nm  IT  jobs  pros  ides  an  iniellectu.il 
security  blanket  that  lus  helped  prt>- 
grammers.  system  technicians  and 
tuber  IT  managers  remain  blissfully 
ignorant  ofihe  slow  le.ik  of  jobs  lo 
their  etimparably  skilled  hut  lower- 
paid  colleagues  overs<-:is.  But  the-  Vtiice 
ofthe  individual  is  ciirrcntlv  out-, 
weighed  by  the  vasi  o'st  s.ivings  that 
outsourcing  represents  to  wime  «.'om- 
paniev  And  the  calls  by  unmns  in  de¬ 
bate  and  explore  rernedu's  tt»  sustain 
our  domestic  11  industrv  s-.tn  i  c.irrv 
the  dav  unless  they  are  backed  by  the 
1 1  wxtrkers  whtrse  foriuoesand  futures 
are  at  siaks*. 

Withtmt  union  representation.  IT 
workers  will  have  to  take  wh.it  is  given 
them,  and  that  might  not  be  such  a 
good  deal.  O  50821 
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Project  Know-how 

CUHER  CONSORTIUM'S  Ken 
Or  seems  lo  have  no  due 
about  what  it  means  to  be  a  cehi- 
fied  project  manager  or  how  to 
manage  a  project  ol  any  size  pHow 
lo  Manage  a  Large-Scale  IT  ftoj- 
ect' QuickLink  50401).  To  quote. 
Tm  not  sure  what  it  means  to  be  a 
'certitied'  protect  manager  il  you 
haven’t  actually  manag^  a  large 
project  yoursell  ‘  To  gel  a  certihea- 
tion  m  project  management,  you 
must  have  proiect  management 
experience,  and  you  have  to  pass 
a  ngofous  test.  Experience  isn’t 
enough 

On  also  said.  'The  candidate 
should  be  grilled  on  his  experience 
with  large  protects  How  large  a 
project  has  the  candidate  run  or 
worked  on?’  But  how  can  a  project 
manager  have  experience  on  a 
large  prefect  li  he  needs  expenence 
to  gel  on  one?  Actually,  small  and 
large  protects  have  the  same 
processes  The  way  to  know  rl  a 
project  tnanager  can  manage  a 


project  of  any  size  is  lo  venly  he 
protect  records.  Oid  he  fmid*  on 
time,  on  budgei.  with  guaiity  and 
with  satisfied  users'? 

R.  Trevifto 

.Senior  profeci  administratiyr. 
Raleigh.  S.C.. 


Prepping  Grads 

Barsaragoiioiski'S  column 
“What  to  Ten  the  Kids*  (Ouich 
’  Link  49732]  featured  some  very 
I  good  ups  on  what  future  professuyi- 
I  ah  should  focus  on  in  developing 
I  tharcareers  TheortyproWem 
I  Course  work  maccrediled  and  tugh- 
I  ly  regarded  CS/IS  programs  gives 
.  very  little  focus  lo  business  process 
designandmanagement.  mlorma- 
tion  rnanagement.  rdaticytship 
management  and  vendor  manage¬ 
ment  Th^discipltnes  are  much 
more  easily  developed  m  a  busness 
administration  program.  For  in¬ 
stance.  I  was  promoted  to  a  posilon 
'  where  business  process  manage- 
I  rnent  IS  the  focus,  based  solely  on 
^  rny  ability  lo  think,  speak  and  wnie 


dearly  -  skills  that  are  sorely  lacteng 
m  most  ol  the  technical  staff  at  my 
company. 

I  If  C5/)S  programs  around  Ihe 
I  country  don’t  give  a  more  weN- 
rounded  locus,  they  won’t  prejiare 
graduates  fw  the  changng  work  en- 
I  vironment  wheie  more  than  techni 
'  cat  ability  maners  Co/rmlffVKirld 
,  wodddowetliopubkizecdNeges 
I  and  universities  that  respond  to  the 
wortung  world's  demands  for  better- 
trained  managers  and  designers  m 
I  these  key  skills 
L.M.  Campos 

j  fR/*s\'srCTn.soi#ministrutiir. 

I  Hushing.  .V.V.. 

I  f  vampos  u  iwrh/inA-.nt*r 


The  Promise 
Of  the  Power  Mac 

OR  MORE  leisurdy  users.  Apple 
may  have  reached  a  point 
I  wherertoffersmore  speed  mils 
I  top-endmachinesihanwecan 
I  realislically  take  advantage  of 
j  rTheDual25-GHzRjwerM3c 
-  G5  Unadukeraled  Power  *  Omcic 


L«*a5140}  This  IS  good  news  m 
that  you  can  save  by  optmg 
foi  Apple's  mdrange  Power  Mac 
whch  otters  dual  2*QMz  (S  proces¬ 
sors,  or  even  the  MSI  •nfroouced 
singleprocessor  1 8-GHz  G5  rnod 
el  egoeskHKistSlAgQ 
With  those  kmtk  of  savings,  you 
canbuyaheck  ol  a  lot  of  RAM.  and 
Mac  OS  X  loves  memory  Couidthts 
be  the  budget  box  people  have 
been  asking  Apple  for? 

Robefi  Wright 

/yHifijgruphiT.  BnxjA'h-n.  V 
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THE  LEADER  IN  CUSTOMER 
ANALYTIC  APPLICATIONS  BRINGS 
YOU  A  NEW  GENERATION 
OF  ENTERPRISE  Bl  SOLUTIONS. 


Cutthroat  eompelition.  Intense  profit  pressure.  Price  erosion.  Declining  ioyaity.  Business  today 
dictates  working  not  just  harder,  but  smarter.  Meeting  these  new  business  demands,  and 
overcoming  the  inherent  challenges,  requires  a  new  generation  of  Bi  soiutions  unavailabia  from 
traditional  Bl  vendors. 

Siebel,  the  leader  in  customer  analytic  applications,  brings  you  Siebel  Business  Analytics -Bl 
soiutions  that  empower  everyone  with  actionabie  reai-time  insight  from  the  largest  data 
warehouses  and  across  enterprise  sources.  With  a  mission-critical  architecture  that  supports 
multi-terabytes  of  data,  thousands  of  users,  and  24*7  availabiiity.  And  proven  appiication 
solutions,  with  buiit-in  industry-specific  best  practices  that  are  fiexibie,  quickly  implemented, 
integrate  with  your  infrastructure,  and  provide  low  TCO. 

Our  innovative  Bl  solutions  have  catapuited  Siebei  into  the  ieadership  position  in  anaiytic 
applications  for  saies,  marketing,  service,  and  senior  management,  with  over  75%  of  our  customers 
using  Siebel  Business  Anaiytics  beyond  CRM  and  across  a  fail  range  of  enterprise  sources. 

Learn  why  the  most  anaiytically  sophisticated  companies  rsly  on  Siebel.  Visit  www.siebel.com/newgen 


SIEBEI-. 

Business  Analytics 

CUSTOMER  INSIGHT  •  ENTERPRISE  INTELLIGENCE 


MORE  THAN  EVER,  businesses  rely  on  IT 
products  and  services  built  around  stan* 
dards.  But  that  demand,  and  the  evolution 
of  the  industry,  is  changing  how  stan¬ 
dards  are  created  —  and  who  creates 
them.  The  old  image  of  a  group  of  engi¬ 


neers  working  together  to  find  the  best 
technology  to  solve  a  problem  is  giving 
way  to  new  realities. 

As  the  maiket  for  IT  products  and  ser¬ 
vices  has  grown,  the  stakes  for  vendors 
and  users  have  increased.  An  emerging 


technology  such  as  ultrawideband  (UWB) 
may  open  up  a  market  worth  $1  billion  or 
more.  With  so  much  at  stake,  participa¬ 
tion  in  standards  groups  has  swelled,  and 
vendors  have  pushed  harder  to  have  their 
technolc^es  adopted  as  standard.  That 
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FUTURE  WATCH 

Pointilist  Protection 

Network  defense  mechanisms  in  development  at 
Carnegie  Mellon’s  CyLab  could  provide  an  early- 
warning  system  to  guard  against  virus  and  worm 
attacks  by  identifying  and  protecting  critical  nodes 
before  the  malicious  code  can  spread.  PRQe  30 


CASE  STUDY 

Help  Keeps  Transit  System  Moving 

It’s  been  clear  sailing  at  the  Port  Authority  of 
Allegheny  County  in  Pinsburgh  since  it  in¬ 
troduced  help  desk  software  to  streamline 
processes  and  regain  control  over  climbing 
call  volumes.  Page  28 
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SECURITY  MANA6ER  S  JOURNAL 

Network  Visibility  Goal  Gets  Trimmed 

When  our  security  manager  asks  for  total 
visibility,  the  technical  team  delivers  a  real¬ 
ity  check  —  and  a  distributed  intrusion- 
detection  system  plan  that  delivers  what’s 
possible.  Page  32 


Money  and  politics  are  playing  a  bigger  role  in  the 
standards-setting  process.  By  Robert  L.  Mitchell 
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has  made  it  difncult  to  reach  consen¬ 
sus  in  some  cases  and  created  dead¬ 
lock  in  others.  And  increasing,  ven¬ 
dors  are  tryii^  to  generate  revenue  by 
licensing  intellectual  property  rights 
on  the  technologies  they  advocate  as 
standards,  rather  than  donating  them 
for  the  common  good. 

“^ou  now  have  compromises  that 
are  not  fost  mathematical  compromis¬ 
es  or  technical  compromises  but  have 
maior  marketing  compromises  behind 
them.'*  says  |im  Carlo,  president  of  the 
IEEE  Standards  Association. 

Meanwhile,  the  evolution  of  more  so¬ 
phisticated  systems  has  iiKreased  costs 
and  worked  against  interoperability.  At 
MasterCard  International  Inc.,  the  chal¬ 
lenge  lies  in  getting  indxistry-standard 
equipment  to  interoperate  n^ien  insert¬ 
ed  into  complex  systems  such  as  its 
storage-area  network  (SAN). 

There  are  issues  as  you  drill  down 
into  the  management  and  interoper¬ 
ability  of  complex  environments,*  says 
litn  Hull,  vice  president  of  engineering 
services  at  the  Purchase,  HY.-based  fi¬ 
nancial  services  company.  '*You  need  to 
ask  vendors  whether  they  interoperate 
and  at  what  level.' 

But  some  changes  are  also  paying 


dividends  for  business  users.  “What’s 
better  is  the  testing  and  verification. 
The  companies  are  taking  it  upon 
themselves  to  ensure  that  their  prod¬ 
ucts  wort:  as  advertised  and  are  ex¬ 
panding  their  test  labs  and  their  test¬ 
ing.*  says  Hull 


Successful  industry  standards  are 
issued  by  authoritative  organixations 
and  are  widely  accepted  by  the  market. 
*A  standard  is  an  indication  that  you 
are  buying  a  technology  that  has 
proved  itself.**  says  Alan  Bryden,  secre¬ 
tary  general  of  the  International  Stan- 
da^  Organization  (ISO).  And  while 
standards  in  and  of  themselves  don’t 
ensure  interoperability,  they  are  a  nec¬ 
essary  precondition. 

Opportunity  Beckons 

To  Hull,  a  successful  standard  is  one 
that  lets  him  find  a  second  source  and 
receive  competitive  pricing  for  storage 
networking  equipment  that  will  plug 
and  play  with  his  SAN.  “Because  I  ap¬ 
proach  it  from  a  standards  perspective, 
my  interoperability  issues  go  way 
down."  he  says. 

For  vendors,  standardization  results 
in  the  opportunity  of  a  broader  market 
and  the  expense  of  increased  competi¬ 
tion.  *The  companies  involved  ne^  to 
decide  when  it  is  to  their  advantage  to 
enlarge  the  pie  even  though  they  may 
lose  maricet  share."  says  Clarlo. 

Authoritative  organizations  used  to 
include  mainly  those  standards  devel¬ 
opment  groups  accredited  by  the 


American  National  Standards  Institute, 
which  represents  the  U.S.  in  the  ISO 
and  in  other  national  standards  bodies. 
Now  many  specifications  come  from 
hundreds  of  organizations,  including 
vendor  alliances,  consortia  and  other 
industry  groups. 

Such  groups  have  proliferated  in  re¬ 
cent  years.  Organizations  pop  up  when 
existing  standards  bodies  are  seen  as 
being  too  slow  to  respond,  lacking  ex¬ 
pertise  or  disinterested  in  an  emerging 
technology.  In  some  situations,  vendors 
strike  out  on  their  own.  believing  that 
their  technologies  won't  get  a  fair  hear¬ 
ing  if  they  go  to  an  established  group. 

That  was  the  reasoning  behind  the 
formation  of  DCMLorg,  a  vendor  con¬ 
sortium  founded  by  Opsware  Inc.  a 
year  ago  to  promote  the  Data  Outer 
Maricup  Lai^uage  for  exchanging  in¬ 
formation  between  management  sys¬ 
tems  in  data  centers. 

“If  you  bring  it  to  a  standards  organi¬ 
zation  too  soon,  it  will  not  have  a 
chance  to  evolve  on  its  own  merits,* 
says  Hm  Howes,  Opsware's  chief  tech- 
nok^y  officer  and  chairman  of  the 
DCML  FramewotiK  Technical  Commit¬ 
tee.  But  DCMlu)rg  was  ignored  by  ma¬ 
jor  data  center  software  vendors. 


SettimWBb 

Standeuils 

TH  nasSHE  Is  me  amor  ol  *H 
WMtMrkMbsndkuntarmtrfteclofof 
me  VfaU  MHe  Wm  Comoillin  (W3C)  11 
CsmlelWli.  Mas.  Bomietee  Is  onMIy 
sniMno  on  me  Ssnailic  WMi  a  lwwK»k 
(ociwWiglMmconaiilmilBisliiidstleW 

imdena  a  Ml  a  oaoiils.  In  a  taniai 
anticM  M  eniri  am  Rstat  L  MaM 
la  (hcutad  mo  W3C  an)  (he  cManga  ol 
dMkvingslandBilB. 

Wi«  «iaa  aart)  nal  fa  anc  -  la 
sHasaaMaamaamaesasnots 

group  mat  MB  naV  to  inu  on  Da  han 
ol  todnWw  alna  ms  praknok  bar  la 
ooil  rtan  icon  la  li^  oanaBaa  o) 
USSR.  W3C  appand  a  a  ka  ntan  aona 
0)  me  mat  sariouB  conm  lad  to  do  atoi 
fagnaniaiino)  tot  belle  WbbtodBob- 
gtoa,  lanalir  HTML  and  M  had  to  M  a 
My  to  blng  da  acton  to  da  taUe  lor  la 
groan  good. 

MntoioM*aWaanc.iMaoatoai 

HmaaaEIF.WmMrtaaakoar 

IddatortbytoMngHIMLtomaETF.allad 


ilaaato  imh  bioiWi  aapiiadmato 

halaon  niowniwotirdano  mme  EEE 
moighlldooon'lcotraadillasanacan- 
radlon  to  WMt  orcMactore -•  doesn't  uoe 
[IMionn  Raonuce  Idenlltes]  to  UonWy 
evoiymtog.iHennipto.1he«ioilionoan- 
capha  graphs,  which  is  doaet  to  Senantic 
«M>woili.Mr*ironiliaEEEIolSO.How- 
am  la  com  slandaidB  tor  da  Sonanbe 
WM).agrowtoostacl(iaoodmdaRa- 
sofce  Dooctipikn  Franawotk  [RDF]  and 
da  WWi  Ontology  Lengaga.  wae  dewlapod 
a  WX  and  an  W3C  teconaandallona. 

I  dunk  da  ktgoa  taiaon  nay  be  In  da 
oneolconontohigaalorapaAappIca- 
dons.  whicli  mid  aaod  a  U  a  comacIMy. 
CalondaawmIsnalaidadbodInICalan- 
da  a  da  ETF.  and  da  ROF  oornnaWy  k 
dtpikg  Old  yM  day  naan  for  comaision 
toRCFaidllanlnkiirallonwimiidardaa. 
anddasankhappaidngiahnadbnak- 
daa  a  Ml  ■  InanckI  hdonnahm. 

IdikWdachakngaandoppoitonlly 
tor  datokia  h  to  ga  law  grams  In  da 
WiphaianaioaB.eapecklyaalhnaton- 
dankbodam  to  bikly  mkik  In  a  Sanandc 
dtobato.iodnkwiiikwt|alntogahn 
aHhoul  halnn  to  ba  noaiiaangkaaad. 

Sa  to  many  Wtou.  da  Sanadic  Whb  kdi- 
notogy  baa  to  oonacl  ny  wal  to  spacki- 
badmnnuniiK. 


beenlMlindnlhdaCIftortoknalprato' 
cok,  lha  dbtol  Mik  out  bagay  faacaao  da 
paopb  aim  makto  aapaknoa  wan  a  (Mar 
ontaat  Ihey  loinod  la  kbf  W3C  HIM. 
dtortong  Ocoiip  whan  I  was  iotnad.  ahkii 
Mavaryauocaashllnbilnglngdakoiynenl- 
ad  HTML  aeniona  tack  to  a  angk  shnrknl 


to*dT  Racogniikio  ma  skndadB  an  now 
wha  ouakaiam  donand.  M  aee  mom  a 
daaamalaltoglnliailiiaalauncladondBr 
laianaa‘akndBRL'Andaoiiune.i 
makoaaaiMdalaandonaliddaanltoen- 
aun  dal  day  can  aart  aa  much  oordrol  aa 
pooahboMrlhadnaiipmaidaaaaidBid 
-dayTagokgtohaaatoiialapiodocbdBl 
conknndiyendoc  (poop  on  coiM  boll 
da  kdaka  rkaakipiianl  and  da  mahal- 
InQ.  dan  fa  mom  aipaabig  to  da  amtor - 
butndiaceoaalybllaaBknar. 

I  you  took  a  da  nia  a  cnadon  a  now 
lonadalypiwllcliamkniadbyofaw 
ooankng  toisalom.  dan  to  toa  dlB  k  iBl 
raw  - 1  bos  baon  happontog  tor  a  tong  dmo. 
ManyamsaaaabatogtomadaBanartel- 
lnge>Bioka,tobuldiipionatawidiaaigni- 
doa  I  don't  dink  dan  k  anydlng  wrong 
wMi  laL  per  aa.  eiicaa  wtan  I  goto  kMod 
sstandard. 


I 


w.cDfnDUlerworld.com 


nCHNOlODY 


wtim 


n 


“DCML  may  have  been  an  attempt 
at  a  standard,  but  it  certainly  wasn't 
open,"  says  Alan  Ganek.  vice  president 
of  autonomic  computing  at  IBM.  But 
DCMLorg  recently  became  part  of  the 
Organization  for  the  Advancement  of 
Structured  Information  Standards 
(OASIS),  and  Ganek  says  IBM  may 
take  a  second  look. 

It's  not  uncommon  for  large  players 
to  join  a  standards  effort  late,  says 
Patrick  Gannon,  president  and  CEO  of 
OASIS  '‘It's  only  when  there's  a  clear 
indication  ffom  the  market  that  they 
come  on  board,”  be  notes. 

Harald  Alvestrand,  chairman  of  the 
Internet  Engineering  Task  Force,  says 
what's  often  missing  in  standards  orga¬ 
nizations  is  significant  user  participa- 
tioiL  In  most  cases,  IETF  standards  ef¬ 
forts  are  driven  by  vetuiors. 

The  standards  process  would  deliv¬ 
er  better  standards  if  users  were  more 
active  within  it.  [Users]  inform  the  dis¬ 
cussion  in  ways  that  other  people 
can't,”  Alvestrand  says. 

MaldngttWDrk 

One  subject  on  which  customers  con¬ 
tinue  to  speak  loudly  is  interoperabili¬ 
ty,  and  many  industry  associations  are 
doing  both  compliance  and  interoper¬ 
ability  testing. 

For  example,  eariy  implementations 
of  both  802.11  and  802dlb  wireless 
LAN  cards  and  access  points  were 
"somewhat  proprietary'  and  wouldn't 
interoperate,  says  Ken  Pasley,  director 
of  wireless  systems  development  at 
FedEx  Services,  part  of  FedEx  Corp. 
”We  put  enough  pressure  on  the  manu¬ 
facturers  that  they  began  to  comply 
more,”  be  says. 

The  situation  has  improved  since  the 
Wi-Fi  Alliance  began  certifying  equip¬ 
ment  for  interoperability.  Pasley  notes. 
But  vendor  claims  still  go  beyond  the 
levels  actually  supported.  "Many  times, 
they  will  say  it  will  run  with  your  appli¬ 
cation.  but  they  doot  know  what  your 
application  is.”  Pasley  says.  He  says  he 
mists  the  specifications  but  adds,  ”We 
have  to  test  on  our  own.” 

Vendors  are  also  testing  eariier  in 
the  standards  development  process, 
says  Scott  Vakourt,  managing  director 
of  the  University  of  New  Hampshire 
Interoperability  Laboratory,  which 
does  testing  for  vendor  groups  work¬ 
ing  on  communications  technologies. 
Increasingly,  the  lab  is  gettiiig  involved 
with  standards  right  from  the  start 
The  result  is  better  interoperability,  he 
says.  "When  a  technology  exists,  in 
this  day  and  age,  every  device  using 
that  technoli^  should  be  interopera¬ 
ble.”  Valcourt  says. 


Testing  Ensures  Interoperability 


TO  USERS,  the  value  of  standaidizatim 
lies  m  interoperability,  but  a  standard  is 
just  the  first  step.  The  leaifty  is  that  a 
standarddoesmtaddressinteroperabib- 
ty.  The  standard  says,  1his  s  (he  way 
you  buM  it*  *  says  Bob  Snively.  chairrnan 
of  the  InterNationai  (Committee  for  infor- 
rnaticn  lechnolooy  ^arxlards' 

Channd  Interfaces  Committee.  While 
standardsveaprerequisitetorinterop- 
er^ity.  Snively  says  vendor  cooperation 
and  tesbng  are  required  to  translaie 
specifications  into  compatibie  designs. 

The  standards  devriopers  often  are 
not  the  people  Mx)  are  buidino  the  prod¬ 
ucts.  So  wtat  looks  good  on  paper  may 
need  to  be  done  in  |ust  a  KMe  bR  dUfeieni 
way.”  says  Scott  VbkXMrt  rnanaging  dF 
rector  of  the  University  of  New  Hamp¬ 
shire  Interoperabiity  Laboratory.  Sirice 


the  late  196Qs.  the  lab  has  worked  with 
industry  consortia  in  testing  marry 
emergerg  comrnuncalions  technoiog«s. 
includng  10  Gigabit  Ethernet  and  wire- 
lessLANs  The  lab  also  hosts 'plug 
fests.’ where  vendors  can  test  product 
designs  before  they  go  to  market.  It  does 
ncl  hcM^ver.  tele^  results  to  the  pubkc 
or  provide  mteroperabttty  cerlificabons 
Vakxurt  says  such  certihcatiors  lose 
meaning  over  bme  as  the  standard  and 
products  evolve.  Ttetmg]  is  never  real¬ 
ty  done,  because  there  are  always  new 
products  coming  out  there  are  always 
revisiorB.  and  with  most  certifications, 
there  is  no  goerg  back  and  retesbng.* 
he  says.  ’Them8trix(o(  products]  lust 
becomes  too  unwieldy.* 

But  that  hasn't  stopped  other  ven¬ 
dors  from  trying.  For  example,  the  Blue- 


toolh  Specal  Interesi  Group  certifies 
comp&ant  products,  as  does  the  Wt-Fi 
Alliance.  The  latter  has  tested  more  than 
1.500  products  over  the  past  lour  years 
*0ne  ol  every  four  products  that 
comes  into  our  tabs  the  fist  tine.* 
says  Frank  Han^  manaong  (hector 
at  the  Austn-based  ^lianoe.  Early  lest- 
ffig  is  a  way  to  mprove  products  and  re¬ 
assure  the  market,  he  adds. 

The  VW-Fi  Aiance  keeps  Its  scope 
focused  on  base  connectivity.  "We  fo¬ 
cus  on  the  physcal  and  MAC  layers  ol 
the  technoiogy  stack.' Handik  says 
But  even  thru  level  of  testing  wi  be¬ 
come  more  chalenging  in  the  futile. 
'Weweadringmoreandmoresophisti- 
caled  standards,  M^iere  you  have  a  lot 
more  variables.' HanzM(  says. 

-  Robert  Lkktchei 


But  that’s  sdU  not  the  reality,  says 
MasterCard’s  Hull  "It’s  not  a  perfect 
worid.  and  there’s  a  long  way  to  go  to 
ensure  that  [products]  interoperate." 

Even  when  vendors  are  interested  in 
developing  a  standard,  they  don't  al¬ 
ways  agree  on  the  details.  The  Institute 
of  Electrical  and  Electronics  Engineers 
Inc.'s  study  group  for  the  UWB  specifi¬ 
cation  for  wireless  comraunicatioQs 
remains  deadlocked  after  two  years. 
Neither  of  two  competing  camps,  led 
by  Intel  Corp.  and  K^ort^  Inc-’s  Ftee- 
scale  Semiconductor  Inc.,  has  the  votes 


needed  to  move  forward.  The  engi¬ 
neers  are  not  listening  to  each  other 
anymore.”  laments  Martin  Rofheart.  di¬ 
rector  of  UWB  operatifxis  at  Freescale. 

Today,  because  there  is  the  percep¬ 
tion  that  (UWB)  could  be  a  major  busi¬ 
ness  opportunity  and  major  vendors 
arc  involved,  it  makes  it  very  difficult 
to  compromise."  says  the  IEEE  Stan¬ 
dards  Association’s  Carla 

Stephen  Wood,  techne^ogy  strate¬ 
gist  at  Intel  says  the  failure  was  not 
starting  the  standards  process  earlier, 
before  Freescale  had  committed  re¬ 
sources  to  developing  its  own  technol¬ 
ogy.  But  other  consortia  have  collabo¬ 
rated  to  develop  specifications  before 
bringing  them  to  a  standards  body. 

'That's  how  Serial  Attached  SCSI 
came  about,  says  Skip  Tones,  Speed  Fo¬ 
rum  chairman  at  the  Fibre  Chwncl  In¬ 
dustry  Association.  Whether  in  a  stan¬ 
dards  group  or  vendor  alliance,  key 
vendors  roust  to  be  willing  to  compro¬ 
mise.  "My  view  is  to  let  the  market¬ 
place  decide  [about  UWBl  rather  than 
spend  years  in  standards  meetings  try¬ 
ing  to  work  a  solution.”  says  Caria 

Both  technologies  may  well  move 
forward  without  a  standard  or  even  an 
agreement  to  prevent  inlerference. 

Aiid  ultimately,  such  competition  may 
be  good  for  the  maricet.  But  the  short¬ 
term  cost  to  customets  will  be  compai- 
foility  problems  and  confusion. 

Increasingly,  vendors  have  an  inter¬ 
est  in  more  than  just  selling  products 
based  on  a  stand^d,  says  Carla  There 


are  two  types  of  companies  developing 
standards.  One  wants  to  build  products 
that  are  interoperable.  The  other  wants 
to  generate  money  from  intellectual 
property  in  those  standards.”  be  says. 

The  most  obvious  examples  are  in 
the  area  of  digital  rights  man^xrment. 
where  vendors  own  patents  for  differ¬ 
ent  types  of  encryption  and  copy¬ 
protection  schernes.  Carlo  says.  So  faz. 
however,  the  IEEE  and  Mher  respected 
standards  groups  have  resisted  the 
pressure.  'We  have  a  royalty-free  patent 
policy,"  says  Steve  Bract,  chief  operating 
officer  and  acting  chainnan  of  the 
World  Wide  Web  Cortsorthim. 

For  most  users,  however,  having 
consistently  interoperable  products  is 
still  the  immediate  concent  Td  still 
like  to  see  a  longer-term  commitment 
to  certification  between  (vendors]  for 
their  products.  This  would  help  ensure 
that  what  was  tested  and  work^  last 
year  still  works  even  though  new  re¬ 
leases  of  the  products  have  been  im¬ 
plemented,”  says  Hull  But.  he  adds. 

"ifs  still  for  better  today  than  it  was 
20  years  ago.”  O  5062S 
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h.i.N  made  it  diffieult  to  reach  consen¬ 
sus  in  Mime  cases  and  created  dead- 
kK'lc  in  others.  And  ineri*asing!y.  ven¬ 
dors  are  tr>'inj:  i«>  generate  revenue  by 
licensing  iniellectua!  property  rights 
on  the  technologies  they  advivaie  as 
standards,  rather  than  d«mating  them 
for  the  common  good- 

"You  now  have  compromises  that 
are  not  just  mathematical  compromis¬ 
e's  or  technical  compromises  but  have 
major  rmirketing  compromises  K-hind 
them."  says  |im  t^nrkv.  president  of  the 
IFtF  Standards  Associatitm. 

Meanwhile,  the  evolution  of  more  .s«v 
phisricated  systems  has  increased  costs 
and  worked  against  inten'penibility.  At 
Mastcr<  jrd  International  Inc.,  the  chal¬ 
lenge  lies  in  getting  industry-standard 
equipment  i«»  interoperate  when  insert¬ 
ed  into  complex  systems  such  as  its 
storage-area  network  (SAN>. 

"There  are  issues  as  you  drill  down 
into  the  management  and  inieroper- 
abiliiy  of  complex  environments,"  says 
Jim  Hull,  vice  prc-sident  of  engineering 
services  at  the  Purchase.  N.Y.-hascd  fi¬ 
nancial  services  company.  "You  need  to 
.i«k  vendors  whether  they  interoperate 
and  at  what  level." 

But  some  changes  arc  aba)  paying 
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dividends  for  busines.s  users.  “What's 
better  is  the  testing  .and  vcrification. 
The  companies  are  taking  if  upon 
themselves  to  ensure  that  their  prod¬ 
ucts  work  as  advertised  and  arc  ex¬ 
panding  their  lest  labs  and  their  test¬ 
ing.”  says  Hull. 


Successful  industry  standards  are 
issued  by  authoritative  organizations 
and  arc  widely  accepted  by  the  market. 
"A  standard  is  an  indication  that  you 
arc  buying  a  technology  that  has 
proved  itself."  says  Alan  Bryden.  secre¬ 
tary  general  of  the  International  Stan¬ 
dards  Organization  ( ISO).  And  while 
standards  in  and  of  themselves  don’t 
ensure  interoperability,  they  are  a  nec¬ 
essary  precondition. 

Opportunity  Beckons 

To  Hull,  a  successful  standard  is  one 
that  lets  him  find  a  second  .Miurce  and 
receive  competitive  pricing  for  storage 
networking  equipment  that  will  plug 
and  play  with  his  SAN.  “Because  1  ap¬ 
proach  it  fitim  a  standards  perspective, 
my  interoperability  issues  go  way 
down,"  he  says. 

For  vendors,  standardization  results 
in  the  opportunity  of  a  broader  market 
and  the  expense  of  increased  corapeti- 
lion.  "The  eompanit's  involved  need  to 
decide  when  it  is  to  ihcir  advantage  to 
enlarge  the  pic  even  though  they  may 
lose  market  share,"  says  Carlo. 

Authoritative  organizations  used  to 
include  mainly  those  standards  devel¬ 
opment  groups  accredited  by  the 


.American  National  Standards  Institute, 
which  represents  the  US.  in  the  ISO 
and  in  other  national  standards  bodies. 
Now  many  specifications  come  from 
hundreds  of  organizations,  including 
vendor  alliances,  consortia  and  other 
industry  groups. 

Such  groups  have  proliferated  in  re¬ 
cent  years.  Organizations  pop  up  when 
existing  standards  bodies  are  seen  as 
being  nxv  slow  to  respond,  lacking  ex¬ 
pertise  or  disinterested  in  an  emerging 
icchnolog>'.  In  some  situations,  vendors 
strike  out  on  their  own.  believing  that 
their  technologies  won't  get  a  fair  bear¬ 
ing  if  they  go  to  an  established  group. 

That  was  the  reasoning  behind  the 
lormation  of  DCMl-org.  a  vendor  con¬ 
sortium  founded  by  Opsware  Inc.  a 
year  ago  to  promote  the  Data  Center 
Markup  Language  for  exchanging  in¬ 
formation  between  management  sys¬ 
tems  in  data  centers. 

"If  you  bring  it  to  a  .standards  organi¬ 
zation  loo  soon,  it  will  not  have  a 
chance  to  evolve  on  its  own  merits." 
says  Tim  Howes,  Opsware 's  chief  tech¬ 
nology  officer  and  chairman  of  the 
DCML  Framew'ork  Technical  Commit¬ 
tee.  But  DCMLorg  was  ignored  by  ma¬ 
jor  data  center  software  vendors. 


SettinoWeb 

Stanoards 

TIM  BERNERS-LEE  (5  the  CiBBlor  of  the 
World  Wide  Web  and  founder  and  diredor  of 
the  Wbdd  Wtde  Web  Consortium  (WX)  m 
Cambridge.  Mass.  Bemers'Lee  is  currenlly 
working  on  the  Semantic  Wbb.  a  framework 
for  making  content  understandable  by 
machines  as  well  as  people.  In  an  interview 
conducted  via  e-mail  with  Robert  L  Mitchell, 
he  discussed  the  W3C  and  bie  challenges  of 
developing  standards. 

Why  dU  the  world  mod  the  W3C  ~  yet 
another  stMdards  group?  There  was  not  a 
group  that  was  ready  to  focus  on  the  layers 
of  technology  above  tfw  protocols  layer  that 
could  draw  upon  the  right  communities  of 
users.  W3C  appeared  at  a  time  when  some 
of  the  most  serious  concerns  had  to  do  with 
fragmentation  of  the  basic  Web  technoto* 
gies.  nsnely  HTML  and  we  had  to  find  a 
way  to  bnng  the  actors  to  the  table  for  the 
gr^ergood 

Prior  to  foundkig  the  W3C.  you  first  took 
HTML  lo  tfM  CTF.  ¥ftiy  didn't  it  work  out? 

I  did  start  by  teking  HTML  to  the  IETF,  as  I  had 


been  mvolved  with  the  IETF  for  internet  proto¬ 
cols.  That  didn't  work  out  largely  because  the 
people  with  markup  experience  were  a  differ¬ 
ent  set  They  joined  the  later  W3C  HTML 
Vitorking  Gr^  when  it  was  fomred.  which 
was  very  successful  in  bringing  the  fragment¬ 
ed  HTML  versions  back  to  a  single  standard. 

Why  are  there  so  many  corrsorfia  and  verr- 
dor  groups  prorrntlng  their  own  standards 
today?  Recognizing  that  standards  are  now 
what  customers  demand,  we  see  more  of 
these  marketing  mdiatives  launched  under 
the  name  of  ‘standard  *  And  of  course.  M 
makes  sense  that  vendors  might  want  to  en¬ 
sure  that  they  can  exert  as  much  control  as 
possible  over  the  developmeni  of  a  standard 
'  they're  gong  to  have  to  make  products  thal 
contorm.  If  a  vendor  group  can  control  both 
the  technical  development  and  the  market¬ 
ing.  then  it’s  more  appeahng  lo  the  vendor  - 
but  not  necessarily  lo  the  customer. 

If  you  look  al  ttw  rate  of  creation  of  new 
fora  of  the  type  which  are  formed  by  a  few 
controlling  founders,  then  in  faetth^  s  not 
new  -  it  has  been  happening  for  a  long  time. 
Many  ot  these  are  being  formed  as  a  market¬ 
ing  exercise,  to  build  up  some  brand  recogni¬ 
tion.  f  don't  think  there  is  anything  wrong 
with  that,  per  se.  except  when  it  gets  labeled 
aslamjard. 


How  do  you  think  the  wortd  has  chanped 
in  terms  of  what  it  takes  to  create  a  stan¬ 
dard?  A  lot  is  at  stake  in  tenns  of  applica¬ 
tions.  both  commercial  and  noncommercial. 
We've  seen  what  happens  when  people 
and  organizations  sacrifice  interoperability 
for  speed. 

There  are  also  more  people  who  are  inter¬ 
ested  in  partiapating  in  the  production  of  a 
standard  and  more  interested  in  using  the 
end  result.  There  is  the  continued  desire  to 
ensjre  that  what  gets  built  today  works  with 
what  was  implemented  some  hme  ago. 


Brven  the  importafiee  of  profects  such 
the  Semantic  Web.  are  you  worfdng  with 
other  standards  organizatiom  to  get  its 


elefnents  more  broacRy  supported?  There 
has  been  relevant  work  done  in  the  IEEE, 
though  if  doesn't  come  vnth  the  same  con¬ 
nection  to  Web  architecture  -  it  doesn't  use 
[Uniform  Resource  Identifiers]  lo  identify 
everything,  for  example.  The  woik  on  con¬ 
ceptual  graphs,  which  is  doser  to  Semantic 
Web  work,  went  from  the  IEEE  to  ISO.  How¬ 
ever.  the  core  standards  for  the  Semantic 
Web.  a  growing  stack  based  on  the  Re¬ 
source  Description  Framework  [RDF]  and 
the  Web  Ontology  Language,  were  developed 
at  WX  and  are  WX  recommendations. 

1  think  the  largest  liaison  may  be  in  the 
area  of  core  ontologies  for  specific  applica¬ 
tions.  which  could  seed  a  lot  of  connectivity. 
Calendar  events  are  standardized  in  iCalen- 
dar  at  the  fETF,  and  the  RDF  community  is 
figuring  out  what  they  mean  for  conversion 
to  RDF  and  then  integration  with  other  data, 
and  the  same  is  happening  with  media  meta¬ 
data  as  well  as  financial  infonnalion. 

I  think  the  challenge  and  opportunity 
for  the  future  is  to  get  new  groups  in  the 
application  areas,  especially  at  other  stan¬ 
dards  bodies,  lo  initiaJly  think  in  a  Semantic 
Web  way.  so  their  work  will  join  together 
without  having  to  be  reverse-engineered. 

So  in  many  ways,  the  Semantic  Web  tech¬ 
nology  has  to  connect  very  well  to  special¬ 
ized  communities. 
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"DCML  may  have  been  an  attempt 
at  a  standard,  but  it  certainly  wasn't 
open."  says  Alan  Ganck.  vice  president 
of  autonomic  computing  at  IBM.  But 
DCML.org  recently  became  parr  of  the 
Organization  for  the  Advancement  of 
Structured  Information  Standards 
(OASIS),  and  Ganek  says  IBM  may 
take  a  second  look. 

It’s  not  uncommon  for  large  players 
to  join  a  standards  effort  late.  sa>’s 
Patrick  Gannon,  president  and  CEO  of 
OASIS.  •‘It’s  only  when  there’s  a  clear 
indication  from  the  market  that  they 
come  on  board.”  he  notes. 

Harald  Alvestrand.  chairman  of  the 
Internet  Engineering  Task  Force,  says 
what’s  often  missing  in  standards  orga¬ 
nizations  is  significant  user  participa¬ 
tion.  In  most  cases.  IETF  standards  ef¬ 
forts  are  driven  by  vendors. 

“The  standards  process  would  deliv¬ 
er  better  standards  if  users  were  more 
active  within  it.  [Users]  inform  the  dis¬ 
cussion  in  ways  that  other  people 
can't.”  Alvestrand  says. 


Testing  Ensures  Interoperability 


TO  USERS,  the  value  ol  standardization 
lies  in  interooerabilrty.  but  a  standard  is 
lost  the  firsi  step.  The  reality  is  that  a 
standard  does  not  address  interoperabili 
ty.  The  startdard  says.  ‘This  is  the  way 
you  build  it.'  “  says  Bob  Snrvely.  chaitman 
of  the  InterNalional  Committee  for  Infor¬ 
mation  Technology  Standards'  TH  fine 
Channel  Interfaces  Committee  While 
standards  are  a  prerequisite  for  interop¬ 
erability.  Snivel^  says  vendor  cooperation 
and  testing  are  required  to  tran^ate 
speafications  mto  compatible  designs 
“The  standards  developers  often  are 
nol  the  people  who  are  building  the  prod¬ 
ucts.  So  vvhat  looks  good  on  paper  may 
need  to  be  done  In  |ust  a  littfe  tvt  different 
vray,“  says  Scott  Valcourt.  managing  di¬ 
rector  of  the  University  of  New  Hamp¬ 
shire  Interoperability  Laboratory  Since 


the  laie  1980s,  the  lab  has  worked  ttHh 
induslry  consortia  m  testing  many 
emerging  communications  technologies, 
including  10  Gigabit  Ethernet  and  wire¬ 
less  LANs  The  lab  also  hosts  “plug 
fests.'  where  vendors  can  test  product 
designs  before  they  go  to  market  It  does 
nol.  however,  release  results  to  the  public 
or  provide  interoperability  certifications 
Valcourt  says  such  cedif  icaitons  lose 
meaning  over  time  as  the  standard  and 
products  evolve  ITesting]  is  never  real¬ 
ly  done,  because  there  are  always  new 
products  coming  out.  there  are  always 
revisions,  and  with  most  certifications 
there  is  no  going  back  and  retesting.' 
he  says.  The  matrix  [of  produclsl  |ust 
becomes  too  unwieldy  ~ 

Bui  that  hasn't  slopped  other  ven¬ 
dors  from  trying.  For  example,  the  Blue¬ 


tooth  Special  Interest  Gioup  certifies 
compliant  products,  as  does  the  W'  Fi 
Alliance  The  latter  has  tested  more  than 
1,500  products  over  the  past  four  years 
"One  of  every  four  products  that 
comes  into  out  labs  fails  the  first  time.' 
says  Frank  Hanzlik  managing  directo* 
at  the  Ausim-oased  aikance  Early  test 
mg  IS  a  way  to  improve  products  and  re¬ 
assure  the  market,  he  adds 
The  Wi-Fi  Alliance  keeps  its  scope 
focused  on  basic  cor\ncciivilv  ‘We  lo¬ 
cus  on  the  physical  and  MAC  layers  of 
the  technology  slack.*  Han/bK  says 
But  even  that  level  of  test  mg  will  be¬ 
come  more  chaltengtng  in  the  future 
"We  are  adding  more  and  more  sophisti 
caied  standards,  where  you  have  a  tot 
more  variables '  Hanzlik  says 

-  Robert  L  Mitcheti 


Making  It  Work 

One  subject  on  which  customers  con¬ 
tinue  to  speak  loudly  is  interoperahifi- 
ty.  and  many  industry  associations  arc 
doing  both  compliance  and  interoper¬ 
ability  testing. 

For  example,  early  imptemcrnaiions 
of  both  802.11  and  802.11b  wireless 
LAN  cards  and  access  points  were 
“somewhat  proprietary"  and  wouldn'r 
interoperate,  says  Ken  Pasley.  director 
of  wireless  systems  development  at 
FedEx  Services,  part  of  FedEx  Corp. 
"Wc  put  enough  pressure  on  the  manu¬ 
facturers  that  they  began  to  comply 
more."  he  says. 

The  sittiation  has  improved  since  the 
Wi-Fi  Alliance  began  certifying  equi|>- 
ment  for  interoperability.  Pasley  notes. 
But  vendor  claims  still  go  beyond  the 
levels  actually  supported.  “Many  times, 
they  will  .say  it  will  run  w’ith  your  appli¬ 
cation.  but  they  don't  know  what  your 
application  is.”  Pasley  says.  He  says  he 
trusts  the  specifications  but  adds,  ”We 
have  to  lest  on  our  own." 

Vendors  are  also  testing  earlier  in 
the  standards  development  process, 
says  Scott  Valcourt,  managing  director 
of  the  University  of  New  Hampshire 
Interoperability  Laboratory,  which 
does  testing  for  vendor  groups  work¬ 
ing  on  communications  technologies. 
Increasingly,  the  lab  is  getting  involved 
with  standards  right  from  the  start. 

The  result  is  better  interoperability,  he 
says.  “When  a  technology  exists,  in 
this  day  and  age.  every  device  using 
that  technology  should  be  interopera¬ 
ble."  Valcourt  says. 


But  that's  still  not  the  reality,  says 
MasterCard’s  Hull  "It’s  not  a  perfect 
world,  and  there's  a  long  way  to  go  to 
ensure  that  [products]  interoperate." 

Even  when  vendors  arc  interested  in 
developing  a  standard,  they  don’t  al¬ 
ways  agree  on  the  details.  The  Institute 
of  Electrical  and  Electronics  Engineers 
Inc.’s  study  group  for  the  UWB  specifi¬ 
cation  for  wireless  communications 
remains  deadlocked  after  two  years. 
Neither  of  two  competing  camps,  led 
by  Intel  Corp.  and  Motorola  Inc.’s  Free- 
scale  .Semiconductor  Inc.,  has  the  votes 


WHO  CAN  YOU  TRUST? 


Have  an  open  membt-rshiD 
and  open  processes 
Fuilnw  a  enrtsensus  or  Ualloi 
driven  aopt  ova)  process 
Are  commifteO  to  mainUininy 
anO  updating  eiistinq 
iiandifds  over  hme 
A'f  widely  recognired  and 
respected  in  the  mdu.stry 
Have  a  track  recoid  of  Soccesstul 
standards  occepted  by  the  marknt 
May  be  recognized  o*  accredited 
by  ANSI  in  the  U.S  and  by  interna¬ 
tional  Indies  such  as  the  (SO 


needed  to  move  forward.  “The  engi¬ 
neers  are  not  listening  to  each  other 
anymore.”  bmenis  Martin  Rofhean.  di- 
avtor  of  UWB  «»pi.*rai  ions  at  Fwcscale. 

"Today,  because  there  is  the  percep¬ 
tion  that  [UWB[  could  be  a  maior  busi¬ 
ness  «)pponunity  and  major  %-endors 
arc  invoKx'd.  it  makes  it  very  difficult 
to  compromise,"  sa)>  the  lEEF  Stan¬ 
dards  Association's  Carlo. 

Stephen  Wood,  technology  strate¬ 
gist  at  Intel,  says  the  failure  was  not 
starting  the  standards  process  earlier, 
before  Frcescalc  had  c«>mmitted  re¬ 
sources  to  developing  its  own  tcchnid- 
ogy.  But  other  consonia  h.ivc  c»>llabo- 
rated  to  develop  specifications  before 
bringing  them  to  a  standards  body. 

That's  how  Serial  Attached  SC.SI 
came  about,  says  Skip  (ones.  Speed  K»- 
rum  chairman  at  the  Fibre  Channel  In¬ 
dustry  Association.  Whether  in  a  stan¬ 
dards  group  or  vendor  alliam.-e,  key 
vendors  must  to  be  willing  to  compn»- 
mise.  “My  view  is  to  let  the  market¬ 
place  decide  [about  UVVBj  rather  than 
spend  years  in  standards  meetings  tr>  - 
ing  to  work  a  stilution."  says  Carlo. 

Both  technologies  may  well  move 
forward  without  a  standard  or  own  an 
agreement  to  prevent  interference. 

And  ultimately,  such  ctimpetition  may 
be  good  for  the  market.  But  the  short¬ 
term  cost  to  customers  will  be  compat¬ 
ibility  problems  and  confusion. 

Increasingly,  vendors  have  an  inter¬ 
est  in  moa*  than  just  selling  products 
based  on  a  standard,  say-s  Cako.  TTicre 


I  arc  two  types  of  comp.!nii*s  dvwehvping 
'  standards.  Oik-  wants  to  build  products 
j  that  are  inieroperable.  T'he  other  wants 
I  to  gimerate  money  fn»m  intelleciual 
pnvperiy  in  ihoH-  standards.”  he  say-s. 

:  The  mt»i  ohvitnis  exanipliNore  in 

the  area  of  digital  rights  managi*mem. 
when*  vendors  own  paitmis  for  dilTer- 
eni  types  of  encryption  and  copy- 
pn>tecti»>n  schemes.  Cari«>  sayv  So  far. 
howtwer.  the  IFTF  .ind  other  respected 
standards  gmups  haw  resisted  ttk- 
pressure,  “We  have  a  royaity-frw  p.iieni 
'  policy,"  says  Sttwe  Bniti.  chief <*piT4fmg 
;  officer  and  acting  chairman  t*f  the 
]  World  Wide  \keb  (airuavnium. 

!  For  most  uhts.  hxiwevcr.  having 
1  consistently  inieruperahle  ptuducis  is 
>  still  the  immediate  cimcem.  “I’d  still 
like  to  see  a  longer-UTm  commitment 
tt>  cvrtification  between  (vendors|  for 
(heir  products.  This  would  help  eitsure 
that  what  was  tested  .md  worked  la.st 
year  still  works  even  though  new  re¬ 
leases  of  the  products  have  been  im- 
I  plemcntcd."  says  Hull.  But,  he  adds, 
j  "ii’<  still  far  better  today  than  it  was 
:  20  years  ago."  O  506^ 
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New  help  desk  software  eases  the  burden  on 
Pittsburgh  port  authority  service  reps  and  ensures 
user  access  to  critical  applications.  IT  UMAMSEIICIMCE 


ovm  UST  TfAi.  the  Pittsburgh-based 
f^>rt  Authority  of  Allegheny  County 
had  no  centralized  system  for  handling 
help  desk  calls  from  its  872  users. 

The  agency’s  22  support  represenu- 
tives  were  overwhelm^  with  the  ISO  to 
200  help  desk  calls  they  were  receiving 
each  day.  The  port  authority  has  3.100 
employees  and  provides  bus  and  light 
rail  service  to  68  million  riders  annual¬ 
ly  in  Pittsburgh.  Allegheny  County  and 
parts  of  three  ocher  counties. 

The  problem  was  that  the  au¬ 
thority’s  homegrown  Microsoft 
Access  Help  Desk  database  man¬ 
agement  system  couldn’t  handle 
all  the  calls  and  help  requests. 

"Approximately  55%  of  the  help  desk 
calls  are  for  our  PeopleSoft  ERP  appU- 
cation  —  both  financials  and  HR/pay- 
roU.  e-mail  —  which  is  Microsoft  Out¬ 
look.  a  vertical  market  product  for  dis- 
patching  and  scheduling,  and  Micro¬ 
soft  Office.*'  says  Wayne  Hammond, 
the  port  authority's  director  of  tT  ad- 
ministrarion.  The  maiority  of  the  other 
calls  are  related  to  hardware,  security 
and  lelecommunications,  he  adds. 

The  agency  needed  a  way  to  stream¬ 
line  the  requests  and  track  each  sup¬ 


port  staff  member’s  trouble  tickets, 
says  Steve  Dudzik.  a  port  authority 
support  representative.  The  only  way 
our  support  reps  used  to  have  access  to 
the  tickets  was  when  the  help  desk  call 
was  created,  and  our  help  desk  manag¬ 
er  would  e-mail  that  ticket  to  them,"  he 
says.  ‘Hltere  was  no  way  to  check  on 
their  current  status." 

After  looking  at  a  few  help  desk 
products,  the  port  authority  selected 
HelpStar  technology  from  Help  Desk 
Technology  Intemationk  Corp. 
in  Crestview,  Fla.  The  main  rea¬ 
son  was  money,  according  to 
Hammond.  He  had  only  about 
$6,000  to  spend. 

"We  felt  we  ne^ed  to  get  a  [com¬ 
mercial  off-cbe-sbelf]  product,  rather 
than  working  to  develop  something 
in-house."  he  says.  “We  were  working 
with  a  limited  budget,  so  we  had  to 
find  something  we  felt  would  work  — 
that  had  a  Web  interface.  And  we  were 
hoping  it  would  be  open,  like  in  a  SQL 
platform  that  we  could  create  reports 
frota  And  we  wanted  to  be  able  to 
have  everybody  access  this  system." 

The  other  packages  he  looked  at  did 
all  the  right  things,  but  the  port  author¬ 


ity  couldn’t  afford  them,  so  it  chose  the 
HelpStar  software,  which  was  priced  at 
about  $4,200.  Hammond  says. 

With  HelpStar,  which  runs  on  a  Mi¬ 
crosoft  SQL  Server  2000  database,  a 
new  service  request  is  created  for  each 
new  job,  call  or  action  undertaken  by 
;  the  help  dedt.  says  Gemma  Young, 
product  manager  at  HelpStar. 

End  users  can  submit  service  re¬ 
quests  from  their  Windows  clients, 
over  the  Web  or  via  e-maiL  Those  re¬ 
quests  are  converted  into  help  desk 
tickets,  and  remote  support  staffers 
can  open  and  update  requests  via  the 
Web  interface.  Youi%  says. 

"HelpStar  allows  support  reps  to 
access  their  tickets  from  anywhere  on 
the  network  by  going  through  the  Web 
interface,  and  it  reduces  the  amount 
of  e-mails  we  have  to  send  out,"  says 
Hammond.  "We  also  liked  that  through 
the  Web  interface,  users  can  enter  their 
own  tickets  and  don't  need  to  call  the 
help  desk  anymore." 

V^en  a  suf^rt  representative  is  as¬ 
signed  a  trouble  ticket,  a  notification 
comes  up  on  his  screen,  Dudzik  says. 

"The  system  checks  for  these  notifi¬ 
cations  about  every  five  minutes  for 
us.  but  that’s  customizable,"  he  says. 

Automatic  Routing 

Once  a  request  is  made,  it's  automati¬ 
cally  forw^ed  to  the  dispatch  area. 
From  there,  a  dispatcher,  usually  a  sup¬ 
port  rep,  will  assign  a  priority  to  the 
request  and  direct  it  to  the  relevant 
queue,  a  temporary  holding  area  for  re¬ 
quests  grouped  by  the  particular  skill 
required  to  solve  them.  Young  says. 

The  requests  are  then  sent  to  the 
most-qualified  support  staffers,  who 


are  prompted  to  work  on  the  highest- 
priority  requests  that  have  been  wait¬ 
ing  the  longest  time,  she  says. 

*The  end  users  also  have  the  ability 
to  use  the  Web  interface  to  check  for 
solutions  to  their  problems  via  the 
knowledge  database  —  a  database  of 
common  problems  and  their  solu¬ 
tions.”  says  Young.  “Users  can  also 
check  on  the  status  of  any  existing  re¬ 
quests  they  have  logged  with  the  help 
desk  by  e-mail  or  a  Web  interface.” 

And  if  one  staff  member's  workload 
is  reduced  at  a  particular  time,  he  can 
view  the  other  outstanding  tickets  and 
assign  one  to  himself,  says  Hammond. 

The  port  authority  has  10  locations, 
and  if  a  support  rep  is  handling  a  prob¬ 
lem  at  a  branch  office,  he  can  check 
the  other  tickets  to  see  if  anything  else 
needs  to  be  done  there  before  going 
back  to  the  central  office.  “Before, 
there  was  no  way  of  knowing  without 
making  a  phone  caU,”  says  Hammond. 

The  port  authority  also  keeps  an  ac¬ 
count  of  every  phase  of  the  ticket,  so 
support  reps  can  see  the  whole  history 
of  the  ticket  from  when  the  help  desk 
worker  or  the  user  entered  it 

’The  HelpStar  client  software  was  in¬ 
stalled  on  the  22  support  reps'  desktop 
PCs,  w^iich  are  Dell  GX-270S  machines 
with  2.6-GHz  Pentium  4  processors, 
S12MB  of  RAM  and  40GB  hard  drives 
running  Windows  2000,  Service  Pack 
4.  The  server  package  runs  on  a  Dell 
PowerEdge  2400  server  with  dual  66- 
MHz  Pentium  m  processors  with  1GB 
hard  drives  running  Windows  2000 
Server,  Service  Pack  3,  Hammond  says. 

Installation  of  the  HelpStar  software 
took  six  to  e^t  hours  and  was  “trou- 
ble-ftee,"  Hammond  says.  O  S0349 
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CARNEetE  MEILON  UNIVERSITY  is 

researching:  some  of  the  bi^igest 
challenges  in  computer  security, 
data  availability  and  systems  reli¬ 
ability  through  a  year-old  inter- 
disciplinar>'  program  knou  n  as  CyLab. 

Kunded  with  federal  dollars  and  contributions 
from  40  private  companies.  CyLab  brings  together 
graduate  students  and  30  professors,  mostly  in  com¬ 
puter  sciences,  to  work  in  teams  on  a  wide  range  of 
research  areas. 

For  example,  in  September.  Pittsburgh-based 
Carnegie  Mellon  won  a  S6.4  million  grant  from  the 
National  Si'icnee  Foundation  for  an  initiative  called 
Security  Through  Interaction  Modeling  (STIM). 
which  studies  complex  interactions  between  people, 
the  computers  they  use  and  attacks  fn>m  the  outside. 
STIM  will  explore  means  of  improving  computer  de¬ 
fenses  by  incorporating  the  models'  behaviors  into 
the  defenses  themselves. 

Another  CyLab  project  takes  the  name  of  the 
French  impressionist  painter  Georges  Seurat,  who 
painted  va.st  canvasses  with  many  tiny  dabs,  or 
“pi>ints,”  of  paint,  a  prenress  dubbed  pointillism.  The 
Seurat  team  at  CyLab  is  developing  methods  to  mon¬ 
itor  anomalous  behavior  that  may  be  induced  by 
buffer  overloads  and  other  glitches.  The  Seurat  tech¬ 
nique  compares  a  precomputed  profile  of  how  a  sys¬ 
tem  should  K’  pert’orming  to  the  combination  of  all 
the  application  interactions  with  the  operating  sys¬ 
tem.  “So  it  looks  at  a  profile  of  what  this  system 
should  be  doing  and  says  maybe  this  thing  has  been 
c<»rnjplcd."  explains  Mike  Reiter,  technical  director  of 
CyLab  and  a  professor  of  computer  engineering  and 
science.  “It  can  track  accesses  and  changes  across 
many  machines  all  at  once  or  in  a  short  time  period.” 

The  Seurat  project  is  so  named  because  there  arc 
many  layers,  points  or  places  where  one  might  mea¬ 
sure  w  hat  is  going  on  in  a  system  in  order  to  see  evi¬ 
dence  of  an  attack,  much  the  same  way  the  I9th  cen¬ 
tury  painter  discovered  that  what  we  see  comprises 
many  points  of  color  and  light. 

The  Seurat  technique  is  a  broad-brush  approach 
to  security,  and  indeed,  the  overall  scope  of  CyLab's 
$10  million  annual  research  mission  is  broad,  says 
Rradeep  Khosla.  dean  of  the  Carnegie  Mellon  Col¬ 
lege  of  Engineering  and  co-director  of  CyLab. 

"Wc  want  a  world  where  we  can  push  measurable, 
sustainable,  secure,  trustworthy  and  available  data,” 
explains  Khosla.  He  says  CyLab  will  attempt  to  help 
reduce  the  number  of  bugs  in  .software,  for  example. 


FUTURE 

WATCH^ 


network  defenst  mechanisms  for  virus  and  worm 
attacks.  Carneijie  Me'lon  researcher  Chenxt  Wang 
says  the  *dea  is  to  detect  an  intection  early  and  have 
the  network  react  to  il  in  real  tirne  to  mitigate  dam¬ 
age  The  secret  is  to  quickly  identify  those  few  critical 
nodes,  shown  here  in  red.  that  most  aid  the  sgread  of 
malicious  code  so  that  they  can  be  "immunized  or 
patched  "  Wang  says.  The  work  is  supported  by  a 
National  Science  Foundaliim  grant  of  S)  5  million  and 
IS  being  conducted  by  Carnegie  Mellon  and  industry 
partners  Symantec  Corp.  and  Akamai  Technotogies 
Inc.  Researchers  are  also  looking  at  network  vulnera¬ 
bilities  in  a  separate  effort  called  the  Suerat  Protect. 


Khosla  estimates  that  for  every  dollar  spent  on 
computer  hardware  and  software,  it  takes  $6  to  $8  in 
personnel  costs  to  maintain  it.  For  that  reason,  vul¬ 
nerability  analysis  is  part  of  the  CyLab  program  as 
well  as  malicious  code  detection. 

But  even  more  basic,  several  projects  at  CyLab  arc 
devoted  to  creating  self-healing  systems  that  can  sur¬ 
vive  malicious  attacks.  Khosla  says.  “We  know  at¬ 
tacks  exist,  so  you  can  cither  build  a  system  that  sur¬ 
vives  the  attack  or  find  a  way  to  stop  the  attack.” 
Khosla  says.  “But  trying  to  find  a  way  to  stop  attacks 


is  akin  to  saying.  Til  kill  all  the  bacteria  and  viru.ses 
out  there.’  Instead,  we  arc  going  to  find  a  way  to  live 
with  worms  and  attacks  with  self-healing.” 

CyLab's  immediate  work  on  self-healing  is  a  proj¬ 
ect  called  Self*  Storage  System,  which  researchers 
arc  about  to  demonstrate  to  the  U.S.  Army  and  will 
show  publicly  in  six  months  or  so.  The  idea  is  that 
there  is  no  single  point  of  failure  in  a  system,  espe¬ 
cially  storage,  so  if  a  piece  of  information  is  corrupt¬ 
ed.  the  sy'slem  can  quickly  determine  that  and  auto¬ 
matically  set  itself  back  ti»  its  original  state.  The  sys¬ 
tem  survives  the  attack  without  actually  finding  a 
way  to  prevent  it.  Khosla  e.xplains. 

Reiter  says  Self  *  Storage  is  also  about  improving 
management  of  large-scale  storage  systems  in  a 
process  some  call  autonomic  computing. 

Cell  Phone  Remote  Control 

Another  vision  at  CyLab  is  to  use  smart  phones  as 
ubiquitous  access  control  devices.  It  is  an  idea  that 
mobile  phone  companies  have  already  implemented, 
but  CyLab  is  working  on  new  approaches  to  making 
that  vision  very  scalable. 

As  a  hypothetical  example.  Reiter  cites  the  intre¬ 
pid  business  traveler  flying  halfway  around  the  world 
and  using  his  cell  phone  as  a  key  to  open  his  hotel 
room  door.  TTtc  idea  goes  far  beyond  promoting  a 
single  standard  and  instead  involves  what  Reiter 
calls  a  “flexible  access-control  network  which  allows 
new  policies  to  be  introduced  into  a  system  to  permit 
devices  to  work." 

The  traveler  would  have  his  credentials  trans¬ 
ferred  to  the  hotel  from  his  phone  by  Bluetooth  or 
ulirawideband  technology,  with  a  hotel  room  digital 
key'  transferred  back  to  reside  on  the  phone. 

There  would  be  no  problem  if  the  phone  was 
stolen,  because  it  would  authenticate  the  user  by  PIN 
or  thumbprint  before  revealing  the  key.  Using  its 
WAN  capabilities,  the  phone  would  request  permis¬ 
sion  from  a  remote  server,  perhaps  at  the  traveler's 
place  of  employment,  which  wouldn't  know  the  key 
but  could  authenticate  the  traveler  based  on  the  PIN 
or  thumbprint.  Once  clearance  was  granted,  the 
phone  would  be  allowed  to  complete  the  computa¬ 
tion  of  the  cryptographic  key  to  allow  the  traveler 
to  get  some  sleep. 

Reiter  says  CyLab  is  starting  to  demonstrate  this 
capability  and  will  move  forward  with  the  opening 
this  winter  of  the  Collaborative  Innovation  Center,  a 
facility  in  which  researchers  will  be  able  to  control 
building  functions  using  smart  phones.  O  50615 
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A  Georges  Seurat  approach  to  vulnerabilities.  By  Matt  Hauiblen 
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CAMEtlE  MELLON  INHVEJISfTT  is 

researching  some  of  (he  biggest 
challenges  in  computer  security, 
data  availability  and  systems  reli¬ 
ability  through  a  year-old  inter¬ 
disciplinary  program  known  as  CyL^. 

Funded  with  federal  dollars  and  contributions 
from  40  prtvaie  companies,  CyLab  brings  together 
graduate  students  and  30  professors,  mostly  in  com¬ 
puter  sciences,  to  work  in  teams  on  a  wide  range  of 
research  areas. 

For  example,  in  September,  Pittsburgh-based 
Carn^e  Mellon  won  a  $6.4  million  grant  from  the 
National  Science  Foundation  for  an  initiative  called 
Security  Through  Interaaion  Modeling  (STIM), 
which  studies  complex  interactions  between  people, 
the  computers  they  use  and  attacks  from  the  outside. 
STIM  will  explore  means  of  improving  computer  de¬ 
fenses  by  incorporating  the  models'  behaviors  into 
the  defenses  themselves. 

Another  CyLab  protect  takes  the  name  of  the 
French  impressionist  painter  Georges  Seurat,  who 
painted  vast  canvasses  with  many  tiny  dabs,  or 
"points,*  of  paint,  a  process  dubl^d  pointillism.  The 
Seurat  team  at  CyLab  is  developing  methods  to  mon¬ 
itor  anomalous  behavior  that  may  be  induced  by 
buffer  overloads  and  other  glitches.  The  Seurat  tech¬ 
nique  compares  a  precomputed  profile  of  how  a  sys¬ 
tem  should  be  performing  to  the  combination  of  all 
the  application  interactions  with  the  operating  sys¬ 
tem.  it  looks  at  a  profile  of  what  this  system 

should  be  doing  and  says  maybe  this  thing  has  been 
corrupted."  explains  Mike  Rdien  technical  director  of 
CyLab  and  a  professor  of  computer  engineering  and 
science.  “It  can  track  accesses  and  changes  across 
many  machines  all  at  once  or  in  a  short  time  period." 

The  Seurat  prolect  is  so  named  because  there  are 
many  layers,  points  or  places  where  one  might  mea¬ 
sure  what  is  going  on  in  a  system  in  order  to  see  evi¬ 
dence  of  an  attack,  much  the  same  way  the  19tb  cen¬ 
tury  painter  discovered  that  what  we  see  comprises 
many  points  of  color  and  light. 

The  Seurat  technique  is  a  broad-brush  approach 
to  security,  and  tnde^  the  overall  scope  of  CyLab’s 
$10  miUioo  annual  research  mission  is  broad,  says 
Pradeep  Khosia,  dean  of  the  Carnegie  Mellon  Col¬ 
lege  of  Engineerii^  and  co-director  of  CyLab. 

"We  want  a  world  where  we  can  push  measurable, 
sustainable,  secure,  trustworthy  and  available  data.” 
explains  Khosia.  He  says  CyLab  will  attempt  to  help 
reduce  the  number  of  bugs  in  software,  for  example. 
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Khosia  estimates  that  for  every  dollar  spent  on 
computer  hardware  and  software,  it  takes  $6  to  $8  in 
personnel  costs  to  maintain  it  For  that  reason,  vul¬ 
nerability  analysis  is  part  of  the  CyLab  program  as 
well  as  malicious  code  detection. 

But  even  more  basic,  several  projects  at  CyLab  are 
devoted  to  creating  self-healing  systems  that  can  sur¬ 
vive  malicious  attacks,  Khosia  says.  "We  know  at¬ 
tacks  exist  so  you  can  either  build  a  system  that  sur¬ 
vives  the  attack  or  fmd  a  way  to  stop  the  attack," 
Khosia  says.  "But  trying  to  find  a  way  to  stop  attacks 


is  akin  to  saying,  TU  kill  all  the  bacteria  and  viruses 
out  there.'  Instead,  we  are  going  to  find  a  way  to  live 
with  worms  and  attacks  with  self-healing.” 

CyLab’s  immediate  work  on  self-healing  is  a  proj¬ 
ect  called  Self*  Storage  System,  which  researchers 
are  about  to  demonstrate  to  the  U3.  Army  and  will 
show  publicly  in  six  months  or  so.  The  idea  is  that 
there  is  no  siitgle  point  of  failure  in  a  system,  espe¬ 
cially  storage,  so  if  a  piece  of  information  is  corrupt¬ 
ed.  the  system  can  quickly  determine  that  and  auto¬ 
matically  set  itself  back  to  its  original  state.  The  sys¬ 
tem  survives  the  attack  without  actually  fmding  a 
way  to  prevent  it.  Khosia  explains. 

Reiter  says  Self*  Storage  is  also  about  improving 
management  of  large-scale  storage  systems  in  a 
process  some  call  autonomic  computing. 

CeH  Phone  Remote  Control 

Another  vision  at  CyLab  is  to  use  smart  phones  as 
ubiqtiitous  access  control  devices.  It  is  an  idea  that 
mobile  phone  companies  have  already  implemented, 
but  CyLab  is  working  on  new  approaches  to  mairing 
that  vision  very  scalable. 

As  a  hypothetical  example,  Reiter  cites  the  intre¬ 
pid  business  traveler  flying  halfway  around  the  world 
and  using  his  cell  phone  as  a  key  to  open  his  hotel 
room  door.  The  idea  goes  far  beyond  promoting  a 
single  standard  and  instead  involves  what  Reiter 
calls  a  "flexible  access-control  network  which  allows 
new  policies  to  be  introduced  into  a  system  to  permit 
devices  to  work." 

The  traveler  would  have  his  credentials  trans¬ 
ferred  to  the  hotel  from  his  phone  by  Bluetooth  or 
ultrawideband  technology,  with  a  hotel  room  digital 
key  transferred  back  to  reside  on  the  phone. 

There  would  be  no  problem  if  the  phone  was 
stolen,  because  it  would  authenticate  the  user  by  PIN 
or  thumbprint  before  revealing  the  key.  Using  its 
WAN  capabilities,  the  phone  would  request  permis¬ 
sion  from  a  remote  server,  perhaps  at  t^  traveler's 
place  of  employment,  which  wouldn't  know  the  key 
but  could  authenticate  the  traveler  based  on  the  PIN 
or  thumbprint.  Once  dearaiure  was  granted,  the 
phone  would  be  allowed  to  complete  the  computa- 
tion  of  the  cryptographic  key  to  allow  the  traveler 
to  get  some  sleep. 

Reiter  says  CyLab  is  startittg  to  demonstrate  this 
capability  and  will  move  forward  with  the  opening 
this  winter  of  the  Collaborative  Innovation  Center,  a 
facility  in  which  researchers  will  be  able  to  control 
building  functions  using  smart  phones.  O  50615 
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Network  Visibility 
Goal  Gets  Trimmed 


Our  security  manager  asks  the  impossible 
of  her  team  before  leamkig  what  can  be 
done  in  the  real  world.  By  C.J.  Kelly 


The  team  gathered  in 
the  security  lab  for  our 
weekly  meeting.  At  the 
top  of  the  agenda  was 
distributed  intrusion  detec¬ 
tion.  The  funior-ievei  security- 
engineer  glanced  toward  a 
whiteboard  that  displayed  his 
work  of  art  —  numerous  tines 
drawn  in  different  colors  de¬ 
picting  the  complicated  layout 
of  our  network.  TTve  black 

lines  represented  - 

copper  links,  the  red 
tines  fiber,  the  black 
boxes  routers  and 
suritches.  and  the  blue 
boxes  network  taps 
and  Snort  sensors. 

Meanwhile,  the  se- 
nior  security  architect  distrib¬ 
uted  current  network  diagrams 
neatly  done  in  Visio  network 
diagramming  software.  Every¬ 
one  was  well  prepared. 

I  noticed,  lujwcver.  that  the 
team  members  were  on  edge. 
They  were  feeling  drained 
and  discouraged  after  dealing 
with  Microsoft's  flurry  of  se¬ 
curity  patches  in  October,  dis¬ 
covering  a  security  breach 
that  originated  from  a  remote 
laptop,  managing  participa¬ 
tion  in  more  than  40  IT  and 
development  protects  and 
bearing  rumors  that  the  2005 
budget  was  being  slashed  to 
barebooes. 

1  took  a  deep  breath,  smiled 
my  best  we're-aU-in-tfals- 
togetber  smile  and  turned  to 
the  youngest  member  of  our 
team.  ‘'Whatdxa  got?”  I  asked 
him. 

He  explained  that  his  first 
recommendation  for  bow  to 
gain  better  visibfliry  on  the 
network  was  to  buy  port  ag¬ 
gregators.  He  had  read  re¬ 
views  and  thought  the  idea 
sounded  good.  But  after  work- 
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tng  closely  with  network  engi¬ 
neers  to  better  understand  the 
network,  the  team  member 
bad  found  that  the  port  aggre¬ 
gators  wouldn't  work  for  a  va¬ 
riety  of  reasons.  So.  instead, 
he  had  come  up  with  a  design 
that  combined  port  spanning 
with  network  taps.  1  reviewed 
his  design  and  nodded.  This 
kid  is  smart.  1  thought  to  my¬ 
self.  and  this  is  sure  going  to 

-  cost  a  lot  less  money 

than  the  original 
plan  of  purchasing 
port  aggregators  at 
S950  a  pop. 

The  go^  in  my 
mind,  was  to  be 
able  to  monitor  the 
LAN/WAN  environment  for 
suspicious  trafiTic.  receive 
alerts  via  SMTP  (preferably 
c-mail  sent  to  our  BlackBerry 
devices),  respond  to  events  in 
as  close  to  real  time  as  possi¬ 
ble  and  report  on  that  activity 
in  weekly  and  monthly  sum¬ 
maries  to  upper  management. 

I  didn't  think  that  was  too 
much  to  ask. 

The  senior  security  archi¬ 
tect  turned  to  me  and  said.  "It 
would  be  helpful  for  us  if  you 
would  be  very  explicit  about 
what  kind  of  results  you're 
looking  for." 

As  usual,  I  stuck  my  foot  all 
the  way  doum  my  thr^t.  1 
said,  "I  want  to  sec  100%  of 
the  traflUc  on  100%  of  this  net¬ 
work  and  every  netwmrk  at- 


As  usual,  I  stuck  my 
foot  all  the  way 
down  my  throat. 


tached  to  it  that  wc  have  secu¬ 
rity  responsibility  for."  He 
smiled  gently  and  said.  "That’s 
impossible.  And  by  the  way, 
nobody  does  that." 

I  learned  early  in  my  career 
that  if  you  want  to  manage 
people  well,  you  have  to  let  go 
of  your  ego.  hire  people  a  lot 
smarter  than  you  and  let  them 
do  their  jobs.  My  )ob  is  to  un¬ 
derstand  enough  about  securi¬ 
ty  to  make  good  business  deci¬ 
sions  and  to  ensure  that  my 
team  members  have  what  they 
need  to  do  their  fobs.  So  when 
presented  with  this  bit  of  in¬ 
sight  from  the  security  archi¬ 
tect,  I  lathed,  and  the  team 
started  to  loosen  up. 

Tel  Me  Everything 

“What  I  know."  I  said,  “is  that 
we  do  not  have  the  level  of 
visibility  that  we  need.  What  I 
know  is  that  we  cannot  con¬ 
tinue  to  rely  on  span  ports. 
What  I  know  is  that  our  net¬ 
work  could  be  owned  [that’s 
the  hacker  term  for  obtaining 
undetected  full  privileges  on  a 
private  network)  right  now. 
and  we  have  to  do  something. 
You’re  the  experts.  Tell  me 
how  this  is  done;  tell  me  if  we 
can  do  it  and  what  you  need 
from  me  to  get  it  done.” 

At  this  point,  the  entire 
team  started  foking  about  how 
the  network  architecture  is 
horrible.  I  thanked  our  junior 
engineer  and  asked  him  to  put 
his  designs  into  Visio,  meet 
with  the  network  engineers 
and  the  senior  network  archi¬ 
tect  and  gain  buy-in  for  his  de¬ 
signs.  Without  the  coopera¬ 
tion  of  the  network  guys,  we 
weren't  going  to  be  able  to  sell 
the  idea  of  in-line  network 
devices,  no  matter  what  (he 
cost  savings. 

I  had  to  put  together  a  proj¬ 
ect  plan  for  this,  present  it  to 
management,  get  it  on  the 
protect  management  oftlce 
queue  and  juggle  the  budget  to 


make  sure  we  could  move  for¬ 
ward  quickly.  My  part  is  bor¬ 
ing  but  essentiaL  The  compa¬ 
ny  was  scrutinizing  every  dol¬ 
lar,  and  I  couldn't  let  this  proj¬ 
ect  fall  by  the  wayside. 

In  an  effort  to  be  explicit 
about  my  expectations,  I  asked 
the  senior  sectirity  architect  to 
explain  the  nuts  and  bolts  of 
security  monitoring  to  the 
team.  I  wanted  to  understand 
what  we  could  do  without  see¬ 
ing  all  the  traflic  all  the  time. 

“What  we  need  to  be  able 
to  do.”  be  explained,  “is  to  col¬ 
lect  data  that  describes  the 
network  environment  to  the 
highest  levels  possible.  We 
will  be  constrained  by  hard¬ 
ware  and  its  ability  to  collect 
the  data.  Therefore,  we  will 
have  to  focus  on  sampling  the 
data  at  key  points  on  our  net¬ 
work.  We  will  not  be  able  to 
collect  every  packet  that  tra¬ 
verses  the  network  and  ana¬ 
lyze  it.  Even  if  we  did  collect 
gigabytes  of  data  from  each 
key  point,  we  would  be  faced 
with  correlating  and  analyzing 
vast  amounts  of  data,  and  we 
just  don't  have  the  resources 
to  do  that." 

We  had  been  in  the  security 
lab  for  two  hours  discussing 
intrusion  detection,  and  it  was 
now  lunchtime.  Engineers 
aren’t  at  their  best  when 
they’re  hungry.  “OK.  guys,  let’s 
break,"  I  said.  The  next  step 
is  to  find  a  way  to  correlate 
and  analyze  the  data  now  that 
the  design  for  collecting  it  has 
been  completed.  I'd  like  to 
have  some  choices  to  review 
next  week.  Good  woric." 

I  was  humbled  by  my  inabil¬ 
ity  to  understand  all  the  tech¬ 
nical  details,  but  I  was  encour¬ 
aged  that  I  had  hired  people 
with  top-notch  skills.  I  was 
also  excited  that  we  were  fi¬ 
nally  making  some  progress  at 
the  core  level  towa^  finding 
out  what  was  really  going  on 
in  the  network.  I 
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Over  a  million  IT  Professionals 
are  getting  ongoing 
security  guidance. 


Millions  of  your  peers  are  turning  to  the  Security  Guidance  Center  for  the  latest  in  security.  By  visiting  regularly, 
th^  grt  the  tools,  guidance,  and  training  needed  for  better  protection  against  viruses  and  other  security  threats. 
Visit  microsoftcom/security/tT  today  and  see  for  yourself  the  newest  additions,  including: 


Microsoft*  Windows*  XP  Service  Pack  2  with  Advanced  Security  Technologies  Download  it  for  free 
arxi  evaluate  the  latest  updates  for  increased  system  control  and  proactive  protection  against  security  threats. 


Free  Online  Self  Assessment  Complete  this  free,  Web-based  self-assessment  test  to  help 
you  evaluate  your  organization  s  security  practices,  and  identify  areas  for  improvement. 


Free  Updates  and  E-mail  Alerts  Stay  on  top  of  the  latest  security  issues  quickly  and 
easily  by  signing  up  for  free  Microsoft  Security  Communications. 


Free  Security  Tools  React  more  effectively  to  potential  security  threats.  Take  advantage  of 

free  tools  and  technologies  like  the  Microsoft  Baseline  Security  Analyzer  and  Software  Update  Services. 


Go  today  to  microsoft.com/security/IT 
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Microsoft  Corporation  in  the  United  States  and/or  other  countries. 
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Adobe  Announces 
Acrobat  Upgrade 

■  Adobe  Systems  Inc.  in  San 
Jose  announced  Acrobat  7.  The 
new  version  can  create  PDf  im¬ 
ages  o4  Outlook  e-mail  messages 
and  folders,  loads  and  runs 
faster,  supports  3*0  images  and 
includes  an  organizer  feature  for 
combining  PDF  files  into  com* 
pound  documents,  according  to 
the  company.  The  Professional 
edition  now  includes  Adobe  De¬ 
signer  forms  software,  ft  also 
supports  OeoTrust  Inc’s  digital 
certificates  and  can  create  en¬ 
crypted,  password-protected 
PDF  documents  that  users  with 
the  free  Adobe  Reader  can  open. 
Acrobat  Standard  is  S290:  Acro¬ 
bat  Professional  is  S449.  The 
product  wil  ship  in  January. 

Epiphany  Unveils 
An^cd  Packs 

■  CiBtomer  relationship  manage¬ 
ment  software  maker  Epiphany  | 
Inc.  in  San  Mateo.  CaW..  last  j 
weok  robed  out  analytical  soft¬ 
ware  that  it  said  can  help  compa¬ 
nies  better  deal  with  customers 
and  drive  profitability.  The  two 
new  products  in  the  Advisor  line 
are  aimed  at  the  conummlcations 
and  retail  finance  industries.  The 
pttfcages  ship  this  week  with  a  I 
typical  instaltation  priced  at  i 

about  S250.000.  according  to  ^ 

the  company. 


Symantec  Updates 
Remote  Software 

■  Symantec  Corp.  in  Cupertino. 
Caff}.,  last  week  announced 
pcAnywhere  1t.S.  with  support 
fer  a  broader  array  of  devices 
and  more  security  features.  Addi¬ 
tions  mdude  the  abiRty  for  TT 
managers  to  remotely  control  de¬ 
vices  from  any  macMne  running 
Limu,  Windows.  n)cket  PC  and 
Pocket  PC  Phone,  the  company 
said.  Security  additions  include 
13  ways  to  authenticate  users 
and  use  of  the  new  Advanced  En¬ 
cryption  Standard.  A  retail  ver¬ 
sion  will  be  available  next  month 
forS199.9S. 
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Users  Should  Enlist 
In  Standards  Wars 


WHENEVER  I  think  about  what  we 
vaguely  refer  to  as  the  “standards 
process,”  I’m  reminded  of  an  event  I 
attended  in  the  summer  of  2003  at 
Burton  Group’s  Catalyst  conference. 
It  was  billed  enthusiastically  in  preconference  publici¬ 
ty  as  “the  first  public  demonstration”  of  SPML,  the  Ser¬ 
vice  Provisioning  Markup  Language  standard  devel- 

oped  by  OASIS,  the  Or^nt- 
zation  for  the  Advancement 
of  Structured  Informaiion 


Standards.  The  demonstra¬ 
tion  was  pan  of  the  run-up 
to  a  vote  on  the  specifica¬ 
tion's  acceptance  by  the  full 
membership  of  OASIS, 
w’hose  stated  mission  is  to 
develop  e-busincss  technical 
standards. 

The  venue  for  this  mile¬ 
stone  was  a  nondescript 
meeting  room  hidden  in  the 
subterranean  recesses  of  a 
San  Francisco  hotel.  The 
n>om  was  mostly  filled  with  smart,  artic¬ 
ulate  engineers  and  their  marketing  de¬ 
partment  colleagues  from  each  of  the 
OASIS  member  vendors  that  had  been 
part  of  the  working  group  that  produced 
the  standard. 

They  stood  in  groups,  each  clumped 
in  front  of  an  island  of  systems  running 
their  company's  software.  From  their  sta¬ 
tions.  the  groups  eagerly  engaged  the 
public  —  in  this  case,  lournalist.s  and  a 
few  curious  conference  attendees  ~  and 
performed  the  delicate  task  of  touting  the 
superior  qualities  of  their  own  products 
while  talking  up  the  importance  of  the 
standard  that  would  make  all  of  the  prod¬ 
ucts  work  together.  The  vendors  repre¬ 
sented  in  the  room  were  big  and  small. 
Some  were  direct  competitors;  others 
were  part  of  business  partnerships. 

Then  the  demonstration  started.  The 
critical  moment,  when  an  imaginary 
user's  access  rights  and  resource  infor¬ 
mation  were  provisioned  across  all  the 


applications  running  in  the 
room,  went  off  without  a 
hitch.  Proud  exclamations 
erupted  from  the  participat¬ 
ing  groups  as  the  example 
user  appeared  in  each  ven¬ 
dor's  application. 

Unfortunately,  it  was  diffi¬ 
cult  to  make  the  imaginative 
leap  from  this  highly  con¬ 
trolled  demonstration  to  the 
much  more  unpredictable 
environment  of  any  laigc 
business's  IT  systems.  The 
C-Kcrcise  was  interesting  — 
even  impressive  —  yet  1  felt 
as  though  I'd  watched  an  elaborate  ver¬ 
sion  of  a  high  school  science  fair  project. 

This  memory  persists  not  because  I 
doubt  the  importance  of  SPML  in  partic¬ 
ular  or  technical  standards  in  general. 

It’s  because  that  demonstration  reveals 
the  absurdities  and  complextiics  in  the 
standards  development  process.  We  of¬ 
ten  speak  of  standards  as  though  they 
arc  the  result  of  a  logical,  if  painfully 
slow,  exercise  that  promises  to  rational¬ 
ize  some  technology  sector  or  another. 
For  wireless  IjANs,  it's  the  need  to  get 
basic  communications  standards  in 
place.  For  Web  services,  the  idea  is  to 
build  a  common  stack  of  specifications 
so  that  sers’icc-oricntcd  architectures 
can  take  over  the  corporate  IT  world. 

In  actuality,  standards  emerge  both  be¬ 
cause  of  and  despite  a  convoluted  web  of 
ideas,  relationships  and  business  needs. 
They  refiect  the  interplay  of  market 
forces  at  least  as  accurately  as  thc>'  do 
’  the  pure  pursuit  of  elegant  engineering 


solutions  to  technical  problems.  As 
Robert  L  Mitchell  points  out  in  the  fea¬ 
ture  “Standards:  High-Stakes  Game"  (sec 
page  25).  the  notion  of  technical  stan¬ 
dards  being  hammered  out  by  a  group  of 
high-minded  engineers  is  outdated  —  if 
it  ever  was  based  in  reality. 

The  development  of  standards  stirs 
contention  because  the  process  repre¬ 
sents  the  friction  point  where  innovation 
rubs  up  against  commoditization.  The 
impulse  to  protect  intellcciual  property 
has  to  be  balanced  against  the  need  to 
operate  in  an  astoundingly  diverse  tech- 
nolog)*  landscape.  And  don’t  forget  that 
the  winners  of  what  are  ostensibly  wars 
of  ideas  get  a  much  larger  slice  of  mil- 
lion-dollar  —  or  even  bllllon-doUar  — 
markets  than  do  the  losers.  Given  all  the 
interests  in  play,  is  it  any  wonder  that 
progress  toward  consensus  on  any  speci¬ 
fication  is  excruciatingly  slow?  The 
process  isn’t  going  to  get  any  faster  as 
the  number  of  players  continues  to  in¬ 
crease.  and  as  each  organization  and 
vendor  has  more  and  more  riding  on  the 
acceptance  of  its  own  ideas. 

User  participation  in  standards  cre¬ 
ation  lags  behind  that  of  vendors,  but 
corporate  IT  has  at  least  as  much  at 
stake:  Interoperability  translates  directly 
into  money  and  time  saved.  To  users, 
standards  imply  interoperability  and  the 
ability  to  comparison-shop  to  fill  their 
technology  needs  while  controlling 
costs.  Standards  also  offer  time  savings 
in  implementation  after  buying  choices 
arc  made. 

The  standards  development  pri>ccss 
also  guarantees  users  plenty  of  frustra¬ 
tion.  as  they  sort  through  the  welter  of 
standards  organizations  and  wonder 
what  compliance  means  in  the  current 
fractured  landscape.  But  user  participa¬ 
tion  is  key  to  achieving  better  standards 
and  more  efficient  ways  to  create  them. 
It’s  time  to  enlist  in  the  standards  wars. 
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TOMMY  PETERSON 


Users  Should  Enlist 
In  Standards  Wars 


WHENEVER  I  think  about  what  we 
vaguely  refer  to  as  the  “standards 
process,”  Tm  reminded  of  an  event  I 
attended  in  the  summer  of 2003  at 
Burton  Group’s  Catalyst  conference. 
It  was  billed  enthusiastically  in  preconference  publici¬ 
ty  as  "the  first  public  demonstration”  of  SPML,  the  Ser¬ 
vice  Provisioning  Markup  Language  standard  devel- 


Oped  by  OASIS,  the  Organi¬ 
zation  for  the  Advancement 
of  Structured  Information 
Standards.  The  demonstra¬ 
tion  was  part  of  the  run-up 
to  a  vote  on  the  specifica¬ 
tion’s  acceptance  by  the  foil 
membership  of  OASIS, 
whose  stated  mission  is  to 
develop  e-busioess  technical 
standanls. 

The  venue  for  this  mile¬ 
stone  was  a  nondescript 
meeting  room  bidden  in  the 
subterranean  recesses  of  a 
San  Francisco  hotel  The 
room  was  mostly  filled  with  smart,  artic¬ 
ulate  engineers  and  their  marketing  de¬ 
partment  colleagues  from  each  of  the 
OASIS  member  vendors  that  bad  been 
part  of  the  workii^  group  that  produced 
the  standard. 

They  stood  in  groups,  each  clumped 
in  front  of  an  island  of  systems  running 
their  company's  software.  From  their  su- 
tions,  the  groups  eagerly  engaged  the 
public  —  in  this  case,  foumalists  and  a 
few  curious  conference  attendees  —  and 
performed  the  delicate  task  of  touting  the 
superior  qualities  of  their  own  products 
while  talking  up  the  importance  of  the 
standard  that  would  make  all  of  the  prod¬ 
ucts  work  together.  The  vendors  repre¬ 
sented  in  the  room  were  big  and  'small 
Some  were  direct  competitors;  others 
were  part  of  business  partnerships. 

Then  the  demonstration  started.  The 
critical  moment,  when  an  imaginary 
user's  access  i^ts  and  resource  infor¬ 
mation  were  provisioned  across  all  the 


applications  running  in  the 
room,  went  off  without  a 
hitch.  Proud  exclamations 
erupted  from  the  participat¬ 
ing  groups  as  the  example 
user  appeared  in  each  ven¬ 
dor’s  application. 

Unfortunately,  it  was  diffi¬ 
cult  to  make  the  imaginative 
leap  from  this  highly  con¬ 
trolled  demonstration  to  the 
much  more  unpredictable 
environment  of  any  large 
business's  IT  systems.  The 
exercise  was  interesting  — 
even  impressive  —  yet  I  felt 
as  though  rd  watched  an  elaborate  ver- 
skm  of  a  high  school  science  fair  protect. 

This  memory  persists  not  because  I 
doubt  the  importance  of  SPML  in  partic¬ 
ular  or  technical  standards  in  general 
It's  because  that  demonstration  reveals 
the  absurdities  and  complexities  in  the 
standards  development  process.  We  of¬ 
ten  speak  of  standards  as  though  they 
are  the  result  of  a  logical,  if  painfully 
slow,  exercise  that  promises  to  rational, 
ize  some  technology  sector  or  another. 
For  wireless  LANs,  it's  the  need  to  get 
basic  communications  standards  in 
place.  For  Web  services,  the  idea  is  to 
build  a  common  stack  of  specifications 
so  that  service-oriented  architectures 
can  take  over  the  corporate  IT  world. 

In  actuality,  standards  emerge  both  be¬ 
cause  of  and  despite  a  convoluted  web  of 
ideas,  relationships  and  business  needs. 
They  reflect  the  interplay  of  market 
forces  at  least  as  accurately  as  they  do 
the  pure  pursuit  of  eluant  engineering 


solutions  to  technical  problems.  As 
R^>ert  L  Mitchell  points  out  in  the  fea¬ 
ture  "StaDdards:  HI^*Stake$  Game*  (see 
page  25).  the  notion  of  technical  stan¬ 
dards  being  hammered  out  by  a  group  of 
high-minded  engineers  is  outdated  —  if 
it  ever  was  based  in  reality. 

The  development  of  standards  stirs 
contention  because  the  process  repre¬ 
sents  the  friction  point  where  innovation 
mbs  up  against  commodidzatioa  The 
impulse  to  protect  intellectual  property 
has  to  be  balanced  against  the  need  to 
operate  in  an  astoundingly  diverse  tech¬ 
nology  landscape.  And  don’t  forget  that 
the  winners  of  what  are  ostensibly  wars 
of  ideas  get  a  much  larger  slice  of  mil- 
Uon-doUar  —  or  even  billion-doUar  — 
maricets  than  do  the  losers.  Given  all  the 
interests  in  play,  is  it  any  wonder  that 
progress  toward  consensus  on  any  speci¬ 
fication  is  excruciatingly  slow?  The 
process  isn't  going  to  get  any  faster  as 
the  number  of  players  continues  to  in¬ 
crease.  and  as  each  organization  and 
vendor  has  more  and  more  riding  on  the 
acceptance  of  its  own  ideas. 

User  participation  in  standards  cre¬ 
ation  la^  behind  that  of  vendors,  but 
corporate  IT  has  at  least  as  much  at 
stake:  Interoperability  translates  directly 
into  money  and  time  saved.  To  users, 
standanls  imply  interoperability  and  the 
ability  to  comparison-shop  to  fill  their 
technology  needs  while  controlling 
costs.  Standards  also  offer  time  savings 
in  implementation  after  buying  choices 
are  made. 

The  standards  develc^ment  process 
also  guarantees  users  plenty  of  frustra¬ 
tion,  as  they  sort  through  the  welter  of 
standards  organizations  and  wonder 
what  compliance  means  in  the  current 
fractured  landscape.  But  user  participa¬ 
tion  is  key  to  aebiWing  better  standards 
and  more  efficient  ways  to  create  them. 
It’s  time  to  enlist  in  the  standards  wars. 
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ifter  the  Deal 

The  deal  of  the  century  may  lead  to 
the  implementation  from  bell,  says 
Danny  ErteL  Forget  about  deal- 
making  and  negotiate  with  implemen¬ 
tation  in  mind,  he  advises.  Pw42 


Career  Watch 

The  priciest  foreign  postings; 
who’s  leaving  home  and  who’s  not; 
the  IT  workweek  —  it  jxist  seems 
like  forever;  and  middle  managers' 
view  of  a  brighter  future.  Page  43 
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Linux  use  is  growing  fasterthan  the  talent  pool  needed 
tosupportit.  Here’showIT  managers  see  the  problem 
and  what  they’re  doing  about  it.  BY  MARY  K.  PRATT 


OPINION 

A  Convergence  of  Roles 

To  whom  should  the  chief  security 
officer  report?  That’s  the  wrong 
question,  says  Norbert  Kubilus. 
The  right  question  is.  Who  should 
the  CSO  be?  Page  44 


CUSTOMERS  OF  CAF3  SOLUTIONS  tell  the 
technology  services  provider  that  they 
want  to  use  Linux  because  they  hear  it’s 
reliable,  robust  and  relatively  inexpensive. 
But  a  customer  recently  balked  at  the  one- 
month  delay  to  install  a  Linux  server.  Why  such  a 
long  wah?  GAFTs  Linux  expert  was  overextended, 
says  George  A.  Fitch  ffl.  president  and  CEO  of  the 
Dover,  N.H.-based  company. 

High  demand  has  Fitch  wondering  if  be  should 
charge  extra  for  Linux-related  work.  If  he  does,  he 
wouldn’t  be  alone. 

Linux  is  gaining  ground  so  quickly  that  some  com- 
pames  are  having  a  hard  time  finding  enough  people 
to  handle  Linux-related  work.  And  those  they  do  find 
charge  a  premium,  according  to  The  Yankee  Group,  a 
maiket  research  firm  in  Boston.  Skilled  Linux  admin¬ 
istrators  in  major  metropolitan  markets  command 
20%  to  30%  salary  premiums  over  their  Unix  and 
Windows  counterparts  —  a  fact  that  could  diminish 
the  cost  savings  that  many  companies  bank  on  when 
they  switch  to  Linux. 

“It’s  really  hard  to  find  good,  qualified  help  that 
doesn’t  charge  you  so  much.'*  says  Laura  DiOio.  an 
analyst  at  Yankee  Group. 

Not  all  IT  managers  concur  with  that  assessment, 
but  they  do  agree  that  the  growth  of  Linux  requires 
a  retooling  of  tedi  workers.  They  can’t  throw  their 
l^dows  people  into  Linux  projects  without  addi¬ 
tional  training,  and  thou^  Unix  staffers  can  pick  up 
Linux  more  quickly,  even  they  need  time  to  get  up  to 
speed. 

The  Goods 

Linux  e]q>eits  and  enthusiasts  cite  a  litany  of 
that  companies  need  for  Linux  systems  work.  Ex¬ 
perience  with  programming  and  documentation 
b  key.  TTk  ability  to  edit  files  and  modify  source 
code  b  important,  too.  Man^ement  experience 
b  another  plus. 

Those  sJdUs  aren’t  overly  difficult  to  ffnd.  says 
Michael }.  CiaraldL  a  computer  science  professor  at 
Worcester  l\>lytechnic  Institute  in  Massachusetts. 

But  other  skilb  —  namely  expertise  in  networking 
and  graphics  —  aren’t  so  easy  to  locate. 

“Another  sldll  in  Linux  b  you  have  to  be  willing  to 
ask  other  p>eople  (or  help,”  Ciaraldi  adds.  For  those 
who  do  seek  help,  there  are  Web  sites  and  user 
groups  that  share  information  on  how  to  use  and 
modify  IjmiT 

DiDio  coiiq>ares  the  sJdUs  needed  for  Linux  today 


lo  thosk*  Miuyh;  lor  network  aJminis- 
trjiors  15  or  JO  years  ago.  "What  you're 
hasieajly  lookint:  lor  is  that  ccleetie 
network  administrator  or  Miftware  de¬ 
veloper  from  circa  —  stimconc 
who  knows  lots  of  Jifferenl  things," 
she  says. 

While  some  say  the  lack  of  person¬ 
nel  with  Linux  e.xperiisc  affects  the 
rate  at  which  companies  adopt  the 
open-source  system,  others  say  IT 
departments  arc  finding  the  skills 
they  need  without  much  extra  effort 
or  additional  pay. 

"If  you  have  someone  who  has  expe¬ 
rience  with  other  operating  systems.  1 
don't  think  it's  all  tlvit  difficult  switch¬ 
ing  over  to  Linux."  CJaraldi  says.  "Con- 
cepiually,  the  commands  are  the  same, 
the  structure  is  similar.  It’s  just  learn¬ 
ing  what  the  exact  commands  are  to 
accomplishing  various  tasks." 
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b  your  company  using 
Unux  Of  other  open- 
source  software? 
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about  Linux  or  open- 
source  software  among 
companies  using  it: 
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Tom  Pratt.  IT  manager  at  Coastal 
Transpt>nation  Inc.,  a  shipping  compa¬ 
ny  in  Seattle,  agrees.  He  oversees  a 
mixed  environment  that  Includes  sev¬ 
en  Linux  servers  and  two  Linux  desk¬ 
tops.  Pratt  says  he  had  no  problem 
learning  Linux,  and  he  wouldn’t  expect 
to  encounter  any  problems  finding 
skilled  help  if  necessary.  A  Unix  ad¬ 
ministrator  could  easily  evolve  into  a 
Linux  administrator  with  .self-directed 
training,  Pratt  says.  “If  you  can  read, 
that's  the  primary  skill  you  nt>cd."  he 
adds. 

Not  So  Fast 

Not  all  companies  are  comfortable 
moving  ahead  with  Linux  without 
skilled  workers,  however.  Ciaraidi 
remembers  one  New  jersey  company, 
which  was  working  with  Worcester 
Polytech  students,  that  decided  against 
a  Linux  server  when  it  realized  it 
didn’t  have  in-housc  Linux  expertise. 

And  for  companies  that  like  Hexible 
IT  staffs.  Linux  can  present  a  problem. 
"The  hardest  thing  I'm  finding  is 
someone  who  is  very  good  in  Linux 
and  can  support  Windows.”  says  Dan 
Agronow.  vice  president  of  technology 
at  The  Weather  Channel  Interactive 
Inc.,  or  Wcather.com.  in  Atlanta. 

Agronow  says  he  hasn't  had  any 
trouble  finding  staffers  with  Linux 
skills,  but  those  with  both  Unux  exper¬ 
tise  and  WindoM-s  skills  arc  rare.  "Most 
people  aren't  as  broad  as  that."  he  says. 

I.ike  others.  Agronow  says  he  be¬ 
lieves  someone  with  Unix  experience 
can  easily  make  the  transition  to  1  in- 
u.x.  but  he  suggests  that  the  significant 
differences  between  Windows  and 
Unix/Linux  could  keep  some  compa¬ 
nies  from  adopting  Linux.  "If  you  were 
an  all-Windows  shop,  maybe  you  don’t 
have  the  contacts  to  hire  a  Linux  per¬ 
son."  he  says. 

Elesidcs.  companies  want  more  than 
Linux  skills,  experts  say.  They  want 
business  experience,  too.  "It's  certainly 
possible  to  hire  junior  systems  admin¬ 
istrators  who  have  great  knowledge  in  ' 
Linux,”  says  Mark  MclILs.  a  consultant 
at  SystcmExperis  Corp..  a  Sudbury. 
Mass.-ba.sed  provider  of  network  secu¬ 
rity  consulting  service.s. 

"The  place  where  you  run  into  trou¬ 
ble  is  t>*pically  they  know  the  technical 
bits,  but  they  dtm't  understand  the 
business,"  he  says.  “TTrey  understand 
the  details  of  the  implementation,  but 
they  don’t  understand  the  greater  ar¬ 
chitectural  details  or  the  big  picture. 
That’s  why  they’re  junior  people." 

Even  companies  that  rely  on  their 
senior  Unix  workers  for  help  with  Lin¬ 
ux  systems  arc  encountering  problems. 


What  It  Really  Takes 
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OiDio  says.  ‘‘There's  a  presumption 
that  if  these  guys  could  do  Unix,  then 
Linux  should  not  be  that  much  of  a 
stretch  for  them.  So  they're  throwing 
them  into  the  trenches.”  but  they’re 
not  always  prepared  to  handle  ail  the 
tinkering  that  needs  to  be  done,  she 
says. 

The  famously  collaborative  Linux 
community  tries  to  pooh-pooh  this, 
according  to  DiDio.  ’TTrey’!!  say.  ‘We 
have  thousands  of  developers  who  will 
jump  in  and  help  out’ "  via  Linux  chat 
rooms  and  Web  sites,  she  says.  “While 
that  sounds  very  nice,  that’s  not  going 
to  take  the  place  of  skilled  in-housc 
staff." 

For  Now 

While  Unix  pp.'oplc  may  be  able  to 
make  the  transition  to  Linux  over  time, 
the  shortage  of  skilled  Linux  personnel 
today  is  forcing  some  companies  to 
look  to  vendors  for  help.  But  DiDio 
says  even  the  big  Linux  distributors 
like  Red  Hat  Inc.  and  Novell  Inc.  “don’t 
have  thousands  of  tech  support  peo¬ 
ple”  to  meet  growing  demand  for 
Linux-related  services. 

DiDio  cites  the  case  of  a  major  stock 
exchange  that  switched  from  Unix  to 
Linux.  The  tirganization  had  to  default 
to  its  hardware  vendor.  Hewlett- 
Packard  Co.,  for  installation  help  and 
service.  "This  is  how  people  are  going 
CO  make  their  money  on  Unux  —  sell¬ 
ing  the  premium  technical  service  and 
support,”  she  says. 

And  while  that  window  of  opportu¬ 
nity  won’t  last  forever,  it  may  exist  for 
the  foreseeable  future. 

"I  think  (here  will  be  more  demand 
as  deployment  continues,”  says  Dick 
Mackey,  principal  at  SysiemExperts. 
"And  I  think  the  demand  will  increase 
before  the  supply  of  skilled  people  will 
be  available.  It  will  be  a  good  market 
for  those  people." 


Meanwhile,  companies  are  trying  to 
dose  the  Linux  skills  gap  by  sending 
staffers  for  training  and  hiring  new 
people  specifically  for  their  Linux 
experience.  “And  some  of  the  smaller 
companies  arc  asking  employees  to 
go  out  and  teach  themselves."  says 
Ciaraidi. 

Peter  Childers,  vice  president  of 
global  learning  services  at  Raleigh. 
N.C.-based  Red  Hal.  says  he  has  seen 
demand  for  the  company's  Linux  train¬ 
ing  and  certification  courses  increase 
dramatically.  Today,  there  are  more 
than  12,800  Red  Hat  Certified  Engi¬ 
neers  and  5,900  Red  Hal  Certified 
Technicians,  a  designation  launched  in 
January  2003.  And  97%  of  people  at¬ 
tending  training  are  sponsored  by  their 
companies.  Childers  says. 

As  manager  of  technical  support  at 
Boscov’s  Department  Store  U.C  in 
Reading,  Pa..  Joe  Poole  oversees  about 
85  IT  staffers,  five  of  whom  maintain 
the  company’s  Linux  system.  He  sent 
two  staffers  to  a  one-week  Linux  train¬ 
ing  course  run  by  IBM.  paying  about 
S5.000  for  bt>th  lo  attend  Those  two 
workers  now  train  colleagues  in  Unux. 

"There’s  a  scarcity  of  people  who 
are  absolutely  trained  in  Unux,  and 
that’s  all  they  do,"  Poole  says.  “But 
there’s  no  scarcity  of  people  who  can 
pick  it  up." 

Even  so,  Unux  personnel  seem  in¬ 
creasingly  valuable.  Regardless  of  how 
you  increase  the  level  of  Linux  exper¬ 
tise  in  your  IT  shop,  beware  of  compa¬ 
nies  that  might  try  to  raid  your  staff, 
particularly  competitors  in  your  indus¬ 
try.  DiDio  says.  "Make  [workers!  sign 
on  the  dotted  line  if  you  train  them 
that  they'll  stay  with  you  for  a  year 
or  two,"  she  says.  O  5038S 

Pratt  isa/reefance  writer  in  WaUhonu 
Mass.  Vbu  can  contact  her  at 
markmary(^mindspring.com. 


What  It  Really  Takes 
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fo  those  sought  for  network  adminis¬ 
trators  IS  or  20  years  ago.  *^hat  you're 
basically  looking  for  is  that  eclectic 
netwofk  administrator  or  software  de¬ 
veloper  from  circa  1988  —  someone 
who  knows  lots  of  different  things," 
she  says. 

While  some  say  the  lack  of  person¬ 
nel  with  Linux  expertise  affects  the 
rate  at  which  companies  adopt  the 
open-source  system,  others  say  IT 
departments  are  fuiding  the  sUUs 
tb^  need  without  much  extra  effort 
or  additional  pay. 

"If  you  have  someone  who  has  expe¬ 
rience  with  other  operating  systems,  I 
don't  think  it's  all  that  difficult  switch¬ 
ing  over  to  Linux."  Ciaraldi  says.  "Con¬ 
ceptually,  the  commands  are  the  same, 
the  structure  is  similar.  It's  just  learn¬ 
ing  what  the  exact  commands  are  to 
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Tom  Pratt.  IT  manager  at  Coastal 
Transportation  Inc.,  a  shipping  compa¬ 
ny  in  Seattle,  agrees.  He  oversees  a 
mixed  environment  that  includes  sev¬ 
en  Linux  servers  and  two  Linux  desk¬ 
tops.  Pratt  says  be  had  no  problem 
learning  Linux,  and  be  wouldn’t  expect 
to  encounter  any  problems  finding 
skilled  help  if  necessary.  A  Unix  ad¬ 
ministrator  could  easily  evolve  into  a 
Linux  administrator  with  self-directed 
training.  Pratt  says.  "If  you  can  read, 
that’s  the  primary  skill  you  need,"  be 
adds. 

Not  So  Fast 

Not  all  companies  are  comfortable 
moving  ahead  with  Linux  without 
skilled  workers,  however.  Ciaraldi 
remembers  one  New  Jersey  company, 
which  was  working  with  Worcester 
Polytech  students,  that  decided  against 
a  Linux  server  when  it  realized  it 
didn’t  have  in-house  Linux  expertise. 

And  for  companies  that  like  flexible 
IT  staf&,  Linux  can  present  a  problem. 
"The  hardest  thing  I’m  finding  is 
someone  who  is  very  good  in  Linux 
and  can  support  Widows,”  says  Dan 
Agronow,  vice  president  of  technology 
at  The  Weather  Channel  Interaaive 
Inc.,  or  Weatherworn,  in  Atlanta. 

Agronow  says  he  hasn't  bad  any 
trouble  finding  staffers  with  Linux 
skills,  but  those  with  both  Linux  exper¬ 
tise  and  Windows  skills  are  rare.  "Most 
people  aren't  as  broad  as  that.”  be  says. 

like  others.  Agronow  says  he  be¬ 
lieves  someone  with  Unix  experience 
can  easily  make  the  transition  to  Lin¬ 
ux,  but  he  suggests  that  the  significant 
differences  between  Windows  and 
Unix/linux  could  keep  some  compa¬ 
nies  from  adopting  Linux.  "If  you  were 
an  all-Windows  shop,  maybe  you  don’t 
have  the  contacts  to  hire  a  Linux  per¬ 
son,"  he  says. 

Besides,  companies  want  more  than 
Linux  skills,  experts  say.  They  want 
business  experience,  too.  "It’s  certainly 
possible  to  hire  junior  systems  admin¬ 
istrators  who  have  great  knowledge  in 
Linux,"  says  Marie  Mellis,  a  consultant 
at  SystemExperts  Corp.,  a  Sudbury. 
Mass.-based  provider  of  network  secu¬ 
rity  consulting  services. 

“The  place  where  you  run  into  trou¬ 
ble  is  typically  they  know  the  tecbnical 
bits,  but  they  don’t  understand  the 
business,"  he  says.  "They  understand 
the  details  of  the  implementation,  but 
they  don’t  understand  the  greater  ar¬ 
chitectural  details  or  the  big  picture. 
That’s  why  they’re  junior  people.” 

Even  companies  that  rely  on  their 
seniof  Unix  workers  for  help  with  Lin¬ 
ux  systems  are  encountering  problems. 


DiDk)  says.  "There’s  a  presumption 
that  if  these  guys  could  do  Unk.  then 
Linux  should  not  be  that  much  of  a 
stretch  for  them.  So  they're  throwing 
them  into  the  trenches,"  but  they’re 
not  always  prepared  to  handle  all  the 
tinkering  that  needs  to  be  done,  she 
says. 

The  famously  collaborative  Linux 
community  tries  to  pooh-pooh  this, 
according  to  DiDio.  Thei^U  say.  'We 
have  thousands  of  developers  who  will 
jump  in  and  help  out’ "  via  Linux  chat 
rooms  and  Web  sites,  she  says.  "While 
that  sounds  very  nice,  that’s  not  goti>g 
to  take  the  place  of  skilled  in-house 
staft" 

For  Now 

While  Unix  people  may  be  able  to 
make  the  transition  to  Linux  over  time, 
the  shortage  of  skilled  Linux  personnel 
today  is  forcing  some  companies  to 
look  to  vendors  for  help.  But  DiOio 
says  even  the  big  Linux  distributors 
like  Red  Hat  Inc.  and  Novell  Inc.  "don't 
have  thousands  of  tech  support  peo¬ 
ple"  to  meet  growing  demand  for 
Linux-related  services. 

DiOio  cites  the  case  of  a  major  stock 
exchange  that  switched  from  Unix  to 
Linux.  The  organization  had  to  default 
to  its  hardware  vendor,  Hewlett- 
Packard  COn  for  installation  help  and 
service.  "This  is  how  people  arc  going 
to  make  their  money  on  Linux  ~  sell¬ 
ing  the  premium  technical  service  and 
support.”  she  says. 

And  while  that  window  of  opportu¬ 
nity  won’t  last  forever,  it  may  exist  for 
the  foreseeable  future. 

"I  think  there  will  be  more  demand 
as  deployment  continues,"  says  Dick 
Mackey,  principal  at  System&cperts. 
"And  I  think  the  demand  will  increase 
before  the  supply  of  skilled  people  will 
be  available.  It  will  be  a  good  market 
for  those  people." 


Meanwhile,  companies  are  trying  to 
close  the  Linux  skills  gap  by  sending 
staffers  for  training  and  hiring  new 
people  specifically  for  their  Linux 
experience.  "And  some  o£  the  smaller 
companies  ate  asking  employees  to 
go  out  and  teach  themselves,”  says 
Ciaraldi 

Peter  Childers,  vice  president  of 
global  learning  services  at  Raleigh, 
N.C.-based  Red  Hat.  says  he  has  seen 
demand  for  the  company’s  Linux  train¬ 
ing  and  certification  courses  increase 
dramatically.  Today,  there  are  more 
than  12,800  Red  Hat  Certified  Engi¬ 
neers  and  5,900  Red  Hat  Certified 
Technicians,  a  designation  launched  in 
January  2003.  And  97%  of  people  at¬ 
tending  training  are  sponsored  by  their 
companies,  Childers  says. 

As  manager  of  technical  support  at 
Boscov's  Department  Store  LLC  in 
Reading,  Pa..  Joe  Poole  oversees  about 
85  IT  staffers,  five  of  whom  maintain 
the  company's  Linux  system.  He  sent 
two  staffers  to  a  one-week  Linux  train¬ 
ing  course  run  by  IBM.  paying  about 
S5000  for  both  to  attend.  Those  two 
workers  now  tram  coUeagues  in  Linux. 

"There’s  a  scarcity  of  people  who 
are  absolutely  train^  in  Liimx.  and 
that’s  all  they  do,”  Poole  says.  "But 
there’s  no  scarcity  of  people  who  can 
pick  it  up." 

Even  so.  Linux  personnel  seem  in¬ 
creasingly  valiuble.  Regardless  of  bow 
you  increase  the  level  of  Linux  exper¬ 
tise  in  your  IT  shop,  beware  of  compa¬ 
nies  that  might  try  to  raid  your  staff, 
particularly  competitors  in  your  indus¬ 
try.  DiDio  says.  "Make  [wo^rs]  sign 
on  the  dotted  line  if  you  train  them 
that  tbeyll  stay  with  you  for  a  year 
or  two,"  she  says.  O  50385 


Pratt  is  a  frtelance  writer  in  Waltham, 
Mass.  You  can  contact  her  at 
markmary@mindspring.com. 


Congratulations  winners! 

®C«ilIIIjWIU  storage  Networking  World  (SNW),  in  conjunction  with  Computerworld  and  the 

nWKKIMniWMI  storage  Networking  Industry  Association  (SNIA),  proudly  presented  the  fifth 
RP^  PrjlPtir?PQ  practices  in  Storage"  Awards  Program.  This  program  honored  ten 

f  IwUuCw  IT  user  “best  practice"  case  studies  selected  from  a  field  of  qualified  finalists. 

IN  STnil  ARF  Winners  were  recognized  at  the  SNW  Awards  Ceremony  - 
**  *  VMflVfc  Wednesday;  October  27th  in  Oriando,  Florida 
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Winners  in  each  of  the  following  categories  are: 

Systems  Implementation _ 

Winners 

*  Carlson  Companies,  Minnetonka,  Minnesota 

■  State  Street  Corporation,  Boston,  Massachusetts 

Honorable  Mention;  Paul,  Hastings.  Janofsky  &  Walker  LLP.  Los  Angeles,  California 

Storage  Reliability  and  Data  Recovery _ 

Winners 

•  Hershey  Entertainment  and  Resorts  Company  Hershey,  Pennsylvania 

■  MidAmerica  Bank,  Clarendon  Hills,  Illinois 
Honorable  Mention:  Calpine  Corporation,  Houston.  Texas 


Data  Lifecycle  Management 

Winners 

■  Adirondack  Electronics  Markets,  New  York,  New  York 

■  PPL,  Alientown,  Pennsylvania 
Honorable  Mention:  NASA.  Mountain  View,  California 

Industry  Regulation  Compliance  and  Corporate  Governance 

Winners 

■  MetLife  Investors,  Newport  Beach,  California 

•  Seattle  Northwest  Securities,  Seattle,  Washington 

Honorable  Mention:  The  Center  for  the  Evaluative  Clinical  Sciences,  Hanover,  New  Hampshire 

Innovation  and  Promise 

Winners 

■  New  York  State  Psychiatric  Institute,  New  York,  New  York 

■  Sports  Iliustrated,  New  York,  New  York 
HononbtB  Mention:  Wfarner  Music  Group,  Burbank,  California 
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For  information  on  Storage 
visit  wwvtanwui 
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When  a  developer  plans  to 
resell  your  custom  soffvrare, 
you'll  need  to  lay  all  your  cards 
on  the  table  to  get  a  good  deal. 

ByMarcLSongini 


J 


SOMEmKS  it  takes  a  partnership  with 
a  vendor  to  craft  software  that  fits 
your  company’s  specific  needs.  But 
if  the  vendor  intends  to  resell  the  soft¬ 
ware  after  the  collaboration  is  over, 
the  development  contract  should 
guarantee  your  intellectual  properly 
rights  and.  in  some  cases,  your  royal¬ 
ties.  Unfortunately,  negotiating  the 
legal  framework  for  this  kind  of  col¬ 
laboration  i.s  like  playing  poker  with 
a  bunch  of  wild  cards. 

“There  are  no  default’  rules  in  the 
law  that  require  the  parties  to  come  to 
a  specific  (contractual]  conclusion.’’ 
notes  Amy  Landers,  a  lawyer  specializ¬ 
ing  in  patent  and  copyright  issues  and  a 
professor  at  the  University  of  the  Pacif¬ 


ic’s  McGcorge  School  of  Law  in  Sacra¬ 
mento.  Calif.  “As  with  any  type  of  nego¬ 
tiation.  there  is  going  to  be  a  give-and- 
take  depending  on  what's  important  to 
the  individual  companies  involved." 

Landers  and  other  attorneys  special¬ 
izing  in  copyright  and  patent  issues 
offer  some  tips  on  how  to  navigate  the 
comple.xity  of  the  law  to  build  a  con¬ 
tract  that  works. 

PROBLEM:  Fimling  a  partner  you  trust. 
SOLUTKM;  Rosearch.  '‘You  have  to 
know  the  character,  quality  and  capa¬ 
bilities  of  the  party  you  arc  dealing 
with."  says  Paul  Roy.  an  attorney  at 
Mayer.  Brown.  Rowe  He  Maw  LLP  in 
Chica^  Investigate  a  potential  part¬ 
ner  through  site  visits,  meetings  with 
key  personnel  and  discussions  with 
other  companies  the  vendor  has  done 
business  with,  he  say.s. 

PROBLEM;  Wlio  owns  the  software? 
SOLUTION:  If  the  work  is  collaborative,  with 
staff  from  both  companies  contributing,  you 
can  negotiate  a  ioint  copyright,  or  patent 

certain  modules  and  allow  the  vendor  to 

patent  or  copyright  others,  says  Frank 
Bernstein,  a  partner  at  law  firm 
Sughrue  Mion  PLLC  in  Washington. 
Typically,  such  rights  are  partitioned 
according  to  which  party  did  which 
piece  of  work,  he  says. 

Alternatively,  you  can  include  a 
contract  clause  called  "work  for  hire." 
which  ensures  that  no  matter  who 
writes  the  software,  the  customer 
owns  it.  says  Bernstein. 

PROBLEM;  Too  many  cboiees:  no  tarn- 
plates  for  the  agreement 
SOLUTION:  Hard  work.  Then?  are  multi¬ 
ple  scenarios  and  rrade-o0s  to  consider 
in  resolving  copyright  and  patent 
Issues,  explains  Ross  Dannenberg.  an 

attorney  at  Banner  &Witcoff  Ltd.,  a  i 

Washington-based  firm.  For  example,  a  I 


trucking  company  wants  to  engage  the 
vendor  of  its  logistics-tracking  software 
to  build  on  a  custom  Web  interface.  De¬ 
pending  on  the  nature  of  the  original 
software  license,  the  trucker  may 
,  first  need  permission  from  the  ven¬ 
dor  to  modify  the  software. 

Then,  if  the  trucking  company  w.inis 
to  own  the  copyright  for  the  Web  in¬ 
terface.  it  can  negotiate  to  pay  the  ven¬ 
dor  for  the  customization  and  control 
any  distribution  of  the  final  applica¬ 
tion.  It  could  also  engage  the  vendor  to 
market  and  distribute  the  application 
and  split  the  royalties, 

If  the  trucking  company  wants  to 
save  money  on  development,  it  can  al¬ 
low  the  vendor  to  keep  the  copyright 
and  distribution  rights.  In  that  case, 
the  trucker  should  be  charged  only 
what  the  newly  customized  software 
will  cost  any  other  customer,  but  it  has 
no  special  rights  to  the  product,  nor 
can  it  prohibit  distribution  to  others. 

PROBLEM:  Protecting  trads  secrets. 
Custom  software  is  likely  to  include 
proprietary  code  and  even  business 
processes,  the  distribution  of  which 
could  be  devastating  to  the  customer 
and  useful  to  competitors. 

SOLUTION:  Oedda  which  progrietery 
code  and  processaa  need  to  be  protected 

and  how  to  do  N.  Carefully  define  each 
in.siance  as  your  company’s  intellectual 
pnvpcrty.  Then  you  can  stipulate  that 
some  features  may  not  be  included  in 
the  market  version,  or  you  can  restrict 
the  vendor  from  using  certain  features 
for  a  period  of  time,  Roy  says. 


‘COOPETmON’ 

THEFOLNSATLOeenCSserviesprD- 
rider60Plnlernationaiinc.viewthecom' 
panys  cohboratkm  with  a  vetKkv  to  build  a 
piece  d  indisby-spedfic  software  as  a 
of'ccopebbon.’ 

Nee^  to  consolidate  its  glotel  shipping 
operations  and  beWng  titt  internal  resources 
to  develop  tlw  relevant  aitolicailons  in  a  ti^ 
ly  tashion.  the  Ffdadeiphia-based  oompwiy 
tunedtologisticsandbansportations(rft- 
vrere  vendor  Globai  Logistics 
Inc.  (G-Log)  In  Sheitoa  Conn.  Each  oompwiy 
had  something  toe  other  cotnpany  warded; 
BOP  had  industry-specifc  inteleclual  pro^ 
ty.  and  G-lito  had  the  frarnewoffc  with  as  ex¬ 
isting  6C3  product  to  buM  the  appicalion. 
sate  Mark  Slocksdaie.  directar  of  softwwe 
dmetopmentatBOP. 

Legal  leans  worked  with  boto  parties  to 


You  can  also  include  a  clause  in  the 
agreement  that  forbids  the  vendor  to 
sell  the  application  to  your  competi¬ 
tors.  says  Bernstein.  Be  sure  to  clearly 
define  who  the  competition  is. 

PROBLEM:  Policing  the  agreement. 
SOLUTION:  You  can  build  in  an  auditing 
clause  that  gives  you  the  right  to  review 
the  application  to  bo  marketed  and  en¬ 
sure  that  N’s  not  exposing  crucial  propri- 
etary  code.  Bernstein  says. 

The  agreement  can  also  specify 
methods  of  redress  in  the  event  of  a 
breach  of  contract,  including  recovery 
of  damages  or  the  right  to  take  back 
exclusive  ownership  of  the  software. 

PROBLEM:  Determining  payment. 
SOLUTION:  You  might  pay  loss  to  a  van- 
dor  that  intends  to  make  money  saINng 
tho  applieatMMi  later.  One  way  of  arriv¬ 
ing  at  the  fee  is  to  review  prior  con¬ 
tracts  of  this  type.  If  necessar)',  an  ac¬ 
counting  firm  can  produce  a  concrete 
range  of  numbers,  says  Landers. 

If  your  compan>-  will  get  a  cut  of  the 
eventual  profits,  the  contract  should 
also  specify  practical  means  to  audit 
the  resale  numbers,  she  says. 

Be  sure  to  resolve  these  issues  in 
writing  before  the  coding  starts.  “Folks 
say  they  don't  care  when  they  actually 
do.”  says  Diana  McKenzie,  an  atioim^’ 
at  Chicago-based  Neal.  Gerber  &  Eis- 
enberg  LLP.  "They  just  don’t  think  they 
care  till  they’ve  spent  $60  million  on  a 
Icusiomizcd)  SAP  installation  and  dis¬ 
covered  competitors  can  copy  what 
they’ve  done  in  six  months."  O  50S29 


craft  an  agreement  As  part  (rf  toe  coniracL 
6-Ltto  retabB  toe  eidusive  right  to  modiy 
toe  sotfce  code,  but  toe  appllcatiori  vvlO  be 
RexUe  eitough  tor  BOP  to  do  ntegratlon 
and  configurabun  changes  as  needed. 

BOP  mapped  out  iis  processes  (or  oceen 
artoaaimportandeiipartdetaAngtoespecif- 
Kbusmessrequrementsforeach  bekxe 
handng  toe  documentation  over  to  &Li]g. 
Aftw  toat  toe  companies' d8v«*)pment  teams 
engaged  to  daly  back-mHorth  sesskXB  to 
etoend  toe  processes  and  systams  to  meet  to- 
tamationalreguirenienls.llMsavefycoi- 
labora(iveapproach.'Stocksda(es8ys. 

to  toe  end.  6-Log  wi  have  toe  lo  seO 

a  general  order  shiprnert  appicabon  with 
generto  industry  processes  embedded 
to  H.  Those  processes  Hill  exclude  any  pro¬ 
prietary  (eetures  but  indude  things  such  as 
toe  abity  to  handto  commerciat  invoices. 

The  is  expected  to  go  live  at  BOP 

next  year. 

-fiafcLSongn 


IP 
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CONMCFS 

Whenadeveloiierplansto 
resel  your  custom  sofhKire, 
youl  to  lay  all  your  canis 
on  the  table  to  getagood  deal. 
ByMareLSongmi 


SOMETWES  h  takes  a  partnership  with 
a  vendor  to  craft  software  that  Hts 
your  company's  specific  needs.  But 
if  the  vendor  intends  to  resell  the  soft¬ 
ware  after  the  collaboration  is  over, 
the  development  contract  should 
guarantee  your  intellectual  property 
rights  and.  in  some  cases,  your  royal¬ 
ties.  Unfortunately,  negotiating  the 
legal  ftamework  for  this  kind  of  col¬ 
laboration  is  like  playing  poker  with 
a  bunch  of  wild  cards. 

“There  are  no  'defoult'  rules  in  the 
law  that  require  the  parties  to  come  to 
a  ^>ecirtc  [contractual]  conclusion,” 
notes  Amy  Landers,  a  lawyer  specializ¬ 
ing  in  patent  and  copyright  issues  and  a  I 
professor  at  the  Universtcy  of  the  Pacif-  j 


ic's  McGeotge  School  of  Law  in  Sacra¬ 
mento,  Calif.  "As  with  any  type  of  nego- 
tiadoD.  there  is  going  to  a  give-and- 
take  depending  on  what’s  important  to 
the  individual  companies  involved." 

Landers  and  otb^  attorneys  special¬ 
izing  in  copyright  and  patent  issues 
offer  some  lips  on  how  to  navigate  the 
complexity  of  the  law  to  build  a  con¬ 
tract  that  works. 

nKMLEM:  Rndhii  a  partaar  ym  trwt 

SOUmOU;  Raaaarch,  “You  have  to 
know  the  character,  quality  and  capa¬ 
bilities  of  the  party  you  are  dealing 
with,"  says  Pa^  Roy.  an  attorney  at 
Mayer,  Brown.  Rowe  &  Maw  LLP  in 
Chicaga  Investigate  a  potential  part¬ 
ner  through  site  visits,  meetings  with 
key  personnel  and  discussions  with 
other  companies  the  vendor  has  done 
business  with,  be  says. 

PftOBLQI;  Who  own  the  sofbwara? 
SOU/nON:  If  the  ufork  la  coUorative.  wHh 
staff  from  both  canqnnias  carrtrtwtin^ 
can  negolialo  a  loM  copyrt^  or  palwfr 
COM  modules  and  alow  the  vendor  to 
patont  or  copyright  others,  says  Frank 
Bernstein,  a  partner  at  law  firm 
Sughnie  Mion  PLLC  in  Washington. 
Typically,  such  rights  are  partitioned 
according  to  which  party  did  which 
piece  of  work,  be  says. 

Alternatively,  you  can  include  a 
contract  clause  caUed  “work  for  hire," 
which  ensures  that  no  matter  who 
writes  the  software,  the  customer 
owns  it.  says  Bernstein. 

WOBLat  Tieo  many  rfreicit;  no  tern- 
piafoafmffmaimniit. 

SOLUnoilrlMmrib  There  are  muld- 
pie  scenarios  and  trade-o&  to  consider 
in  resolving  copyri^t  and  patent 
issues,  oqilains  Ross  Dannenberg.  an 
attorney  at  Banner  8c  Wiicoff  Ltd.  a 
Washii^too-based  firm.  For  example,  a 


I  trucking  company  wants  to  pnga^  the 
vendor  of  its  logistics-traddng  software 
to  build  on  a  custom  Web  inteffacf.  De- 
^^^pending  on  the  nature  of  the  original 
software  license,  the  trucker  may 
first  need  permission  from  the  ven¬ 
dor  to  modify  the  software. 

Then,  if  the  trucking  company  wants 
to  own  the  copyright  for  the  Web  in¬ 
terface,  it  can  negotiate  to  pay  the  ven¬ 
dor  for  the  customization  and  control 
my  distribution  of  the  final  applica¬ 
tion.  It  could  also  engage  the  vendor  to 
market  and  distribute  the  application 
and  split  the  royalties. 

If  the  trucking  company  wants  to 
save  money  on  development,  it  can  al¬ 
low  the  vendor  to  keep  the  copyright 
and  distribution  rights.  In  that  case, 
the  trucker  should  be  charged  only 
what  the  newly  customized  software 
will  cost  any  other  customer,  but  it  has 
no  special  rights  to  the  product,  nor 
can  it  prohibit  distribution  to  others. 

PffOBLtt  n«toctiii|  trail  Mcritt. 

Custom  software  is  likely  to  include 
proprietary  code  and  even  business 
processes,  the  distribution  of  which 
could  be  devasuting  to  the  customer 
and  useful  to  competitors. 
SOUmOitDicliiiitihiiiwipilrtafy 
MiiaiiiprBrmMHuJtefriprafoclii 
and  haw  ta  da  R.  Carefully  define  each 
instance  as  your  company’s  intellectual 
property.  Then  you  can  stipulate  that 
some  features  may  not  be  included  in 
the  market  version,  or  you  can  restrict 
the  vendor  from  using  certain  features 
for  a  period  of  time.  Roy  says.  I 


I  You  can  also  include  a  clause  in  the 
agreement  that  forbids  the  vendor  to 
I  sell  the  application  to  your  competi¬ 
tors,  says  Bernstein.  Be  sure  to  clearly 
define  wdio  the  competition  is. 

PROBiai;  Mdng  thi  agrumurt. 
SOLUTION:  ^  CM  bHld  In  M  andtting 
dnuM  tiMt  flMi  yon  tiw  riglil  to  ravfmv 
tho  appSooUon  to  bo  marlmlod  Md  Mi- 
amo  tel  ri  nM  apoting  cnmlal  yregri- 
tery  codi,  Bernstein  says. 

The  agreement  can  also  specify 
methods  of  redress  in  the  event  of  a 
breach  of  contract,  including  recovery 
of  damages  or  the  right  to  take  back 
exclusive  ownership  of  the  software. 

PffOBlEII:  Dotownlolwg  pgymonL 
SOLUTNM:  Vn  niMit  w  lots  to  o  von- 


tesppBriHnsIslii.  One  way  of  arriv¬ 
ing  at  the  fee  b  to  review  prior  con¬ 
tracts  of  tlus  type.  If  necessary,  an  ac¬ 
counting  firm  can  produce  a  concrete 
range  of  numbers,  says  Landers. 

If  your  company  will  get  a  cut  of  the 
eventual  profits,  the  contract  should 
also  q>ecify  practical  means  to  audit 
the  r^ale  numbers,  she  says. 

Be  sure  to  resolve  these  issues  in 
writing  before  the  coding  starts.  "Folks 
say  they  don’t  care  when  they  actually 
do,"  says  Diana  McKenzie,  an  attorney 
at  Chicago-based  Neal,  Gerber  &  Eis- 
enberg  LLP.  They  just  don’t  rhinlf  they 
care  till  they’ve  spent  $60  million  on  a 
[customized]  SAP  installation  and  db- 
covered  competitor  can  copy  what 
they’ve  done  in  six  months.”  O  50529 


Please  join  Samsung,  CompUSA 
^  and  Arnold  to  help  the  children. 


,  go'. 

■  GS 


COMPI 


SAMSUNG 


Can  you  taMi  about  that?  Sure.  If  your  pur¬ 
pose  is  iust  signing  the  deal,  then  you 
can  decide  to  go  caveat  emptor  all  the 
way,  and  what  they  don’t  know  hurts 
them.  But  if  your  purpose  Is  imple¬ 
menting  and  creating  value  through 
implementation,  then  what  they  don’t 
know  can  hurt  you.  So  you  need  to 
think  about  what  they  need  to  under¬ 
stand. 

Can  you  giva  me  an  example  of  something 
vendors  may  not  know  that  you  should  tdl 
them?  At  the  outset  of  lots  of  outsourc¬ 
ing  deals,  there’s  an  assumption:  Don't 


Focusing  too  hard  on  getting  a  deal 
done  can  dooni  the  implementation. 


The  art  of  deal-making  may  be  grist /or 
best-selling  books  and  corporate  legends, 
but  its  importance  has  bem  blown  all 
out  of  i^oportion.  says  Oanny  Ertri.  a 
/bunder  ami  director  of  Vantage  Part¬ 
ners  LLC,  a  Itoston-based  consulting 
/Irra  Signing  the  deal  is  the  beginning 
of  the  process  of  creating  value,  he  says. 
but  the  “deal-maker  mentality"  common 
in  negotiations  hurts  the  chances  of  the 
controct  being  imptemeraed  succes^- 
fy.  In  November’s  Harvard  Business 
Review,  Ertel  proposes  a  defer¬ 
ent  mindset  in  which  inking  the 
deal  is  only  the  beginning.  He 
told  Kathleen  Melymuka  how 
that  approadi  can  change 
everything  —  for  the  bdter. 

Whrt  is  ths  datfinahw  iiiMtalty? 

That’s  one  a  lot  of  negotiators 
have.  They  feel  their  fob  is  to 
close  the  deal  Eistet,  bigger, 
better.  It's  not  thinking  about  what 
happens  after  the  deal  is  signed 

Haw  doaa  Ma  ndnd^  aflact  sav,  an  oul- 
aeuKliig  nagaiitfBR?  It  drives  a  lot  of  be¬ 
havior.  especially  among  buyers.  They 
end  up  forcing  providers  to  perform 
some  pretty  unnatural  acts  to  win  busi¬ 
ness  without  worrying  about  the  con¬ 
sequences.  A  negotiating  team  focuses 
on  getting  the  deal  signed  Some  are 
date-driven  by  a  quarter  or  year  close, 
and  they  don’t  think  hard  enough 
about  what  it  will  take  to  realize  the 
value  of  the  deal  five  or  10  years  down 
the  road 


What  doas  that  leak  Hv?  That’s  having 
the  negotiating  team  see  their  lob  dif¬ 
ferently.  Instead  of  getting  the  deal 
signed  their  goal  is  helping  to  create 
value  by  creating  a  deal  that  can  be  im¬ 
plemented.  After  alL  what’s  the  goal 
line?  Is  it  a  signature  on  a  page  or  cost 
reduction,  innovation,  business  trans- 
formation? 

1b  halp  In  tiM  sMft  to  that  way  of  thinking 
you  oflar  a  iMnafll  of  hlnM^*' anrclaa. 
Can  you  vtoiakt?  Hindsight  is  a 
wonderful  thii^,  and  it's  actu¬ 
ally  more  accessible  than  we 
realize.  There's  enough  experi¬ 
ence  out  there  about  outsourc¬ 
ing  deals  and  large  IT  vendor 
contracts  and  what  goes  wrong 
with  them  over  time  that  most 
negotiation  teams  should  be 
able  to  tap  into  that  experience 
and  ask,  ‘'What  tends  to  go 
wrong  with  these  deals,  and  what  can 
we  do  now  in  anticipation  of  those 
problems?  How  cqn  we  structure  the 
deal  and  the  relationship  between  us 
to  minimize  the  chance  of  those  prob¬ 
lems  happening 

Seim  wndd  stor  (hto  pMrily  ctouM  late 

care  ef  them  towtt.  Penalty  clauses  give 
a  false  sense  of  security  for  the  nego¬ 
tiators.  Nobody  wants  to  sit  back  and 
collect  penalties;  they  want  the  deals 
to  work.  Sinqrfy  having  penalty  clauses 
in  the  contract  is  not  a  good  alternative 
to  understanding  what  h  will  take  to 
create  value  by  implementing  the  deal 


Q&A 


tell  them  how  much  resistance  to 
chaj^  there  is  in  our  organization  or 
how  messy  our  process  is  or  how  bad 
our  data  is  because  once  we  sign  the 
deal,  our  mess  becomes  their  mess. 
That’s  a  recipe  for  conflict,  scope 
changes  and  a  relationship  where  the 
provider  will  have  to  cut  corners 
somewhere  else  to  dig  out  of  the  hole 
it  didn’t  know  it  was  getting  itself  inta 
I  If  my  company  lacks  some  fundamen- 
I  tal  ability  to  perform  my  side  of  the 
deal  or  the  problem  is  bigger  than  the 
vendor  thinks  it  is,  then  letting  them 
walk  in  not  knowing  ^ut  that  is  set¬ 
ting  up  for  problems  during  implemen¬ 
tation. 

Handng  off  the  daol  after  the  rwgottatiofi 
can  be  the  aoira  of  al  hMi  of  praktoim. 
hut  you  have  aomaiuggaationi  ter  evoMng 
thoaa.  Talus  about  them.  After  the  deal  is 
done,  the  negotiators  often  go  on  to  the 
next  deal.  Not  eoou^  time  is  spent 
making  a  good  handoff  or  transition 
between  the  negotiation  teams  and  the 
implementation  teams.  I  recommend 
that  organizations  really  plan  a  formal 
handoff  and  do  that  tointly  so  they 
have  both  buyer  and  seller  negotiation 
teams  briefing  both  sides  of  the  imple¬ 
mentation  team. 

¥fhat  does  ffiaf  do  for  yeu?  The  briefing 
looks  very  different  if  you  are  both  in 
the  room  together  taildng  about  why 
you  did  the  deal  you  did  and  uhat  H*s 
going  to  take  to  make  it  work  than  if 
you’re  doing  the  briefings  separately.  If 
you  brief  separately,  there’s  a  tendency 
to  fust  list  all  the  ways  you  ’’got”  them. 
And  if  both  sides  know  they  will  be 
doing  a  joint  briefing  on  why  they  did 
what  they  did,  they  spend  less  energy 
on  the  "gotcha"  game  during  the  nego¬ 
tiation  and  more  energy  on  doing  a 
deal  based  on  objective  crit^ia.  exter¬ 
nal  standards  and  industry  practice, 
because  both  sides  know  they  will 
need  to  jointly  defend  the  de^ 


mmtotten  mbiM  tam  the  offiar  aUs  te  M 
of  dssHailMrt,  won't  you  end  up  gMng 
mm/  the  fvm?  There  are  two  elements 
of  a  negotiatioiL  One  is  communica- 
tion:  what  Fm  tellir^  you  to  talk  about. 
The  other  is  commitment:  what  you're 
willing  to  agree  ta  Just  because  you 
come  in  wiA  an  implementation  mind¬ 
set  and  put  tCN^  issues  on  the  table 
and  focus  on  bow  you’re  going  to  im¬ 
plement  and  warn  in  advance  about 
what  you  want  to  talk  about  so  they 
can  be  sure  to  prepare,  it  doesn’t  mean 
that  if  their  side  is  difficult  or  shifty  or 
too  clever  by  half  that  you  have  to 
agree.  050600 


IMc  b  lit  tebal  bi  a  ariM  of  mmOdy 
iinpbiM  nOlhnwiiniMb—  fteiiim 
wOMncntopbsaftalMaltofrmn^m. 
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US.  Woricers  Staying  Home . . . 
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U&A  among  IT 

^  MJfkt-rs  conlin 

uv'j  to  oain  sifenqtf;  JoO  Dost-ngs 
lof  technology  ixotessionals ... 

Dice  com  an  IT  jobs  Wet;  site 
were  up  90^'  c  at  the  end  of  Sep 
temoer  compared  witn  the  previous 
year  Turnover  rales  for  IT  prntr.-s- 
sionats  at  many  companies  have 
remained  low  tor  the  past  tew 
years  as  the  ecoiximy  has  spot 
lered  and  organifations  have  pared 
then  IT  staffs  through  a  combma 
tion  of  anrttion  ar>d  layoffs  But  that 
could  change  riciw  that  the  lOb 
market  ffu  fT  protessior.ais  is  dk;*- 
-i*g  UP  steam  says  Dice  Irx  presi 
dent  Scot  Melland  He  spoke  wTft- 
Compuif'-Aund's  TTiornas  Hof' 
ma"  about  the  ups  and  downs  i;t 
the  IT  loC  market 
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rates  have  been  extreme^  low  the  past  cou¬ 
ple  of  yeare.  and  ttiere's  a  kH  of  anxiety  and 
iManderfust  among  tech  protessionais 

Are  there  sW  a  tot  of  iMMnphiyed  or 
nretoreinpieyed  tedwototy  werhere 

to  the  U^?  What  you  hear  is  exaetty  that. 
We  don't  have  X)0%  employtnent  of  tech 
professiortals.  Since  the  Internet  and  Y2k 
and  telecom  booms  burst  in 2001.  you  had  a 
nundier  of  people  tram 2001 to 2003 who 
left  the  tech  fiM. 

Vbu  read  a  lot  about  underemployed  and 
unernployed  professwnals  tn  the  tech  sector, 
and  ttiat's  a  reality.  But  if  you  look  at  some  of 
the  [U.S.  Bureau  of  Labor  Static]  num¬ 
bers,  the  unemploymeni  rate  IS  extremely 
low:  it's  like  2.3%. 

How  to  thh  amiMt 


fraris  and  fradKaii  studanto?  This 

has  been  a  topic  that  the  National  Science 
foundahon  has  spent  a  lot  of  time  on .  At  the 
graduate  school  level,  snee  9/11.  security 
restrictions  around  student  visa  programs 
have  tightened  up  n  a  big  way.  Many  highly 
skilled  graduate  students  who  used  to  come 
totheU.S.andstayherearegojngelse- 
where  because  of  the  difficulties  n  getting 
a  visa. 

2  it’saseriousskiissueforthecountrv 
Wh^aret— oeoi  rataoloi  ff  pro-  |  People  aren't  womed^jout  it  because  the 
tooatomtottooed^w?  In  technology  |  ernploymenl  market  is  sli  recovering,  but 
|obs.turTioverhistoricalyhasbeenfairty  |  it's  quite  posstte  that  a  tech  jobs  ounritB 
high,  in  the  15%  to  20%  range.  Turnover  !  overthehonzon.OSOSSS 
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41-45  hoursper  week 


4&-50  hours  per  week 


More  than  51  hours  per  we^ 
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Focusing  too  hard  on  getting  a  deal  j 
done  can  doom  the  implementation. 


7^e  an  of  deal-makir\g  may  be  grist  for 
best-selling  books  anacorporate  legends. 
bur  irs  imporrance  has  been  blown  all 
out  of  proportion,  says  Danny  Ertei  a 
founder  and  direaor  of  Vantage  Part¬ 
ners  LLC,  a  Boston-based  consulting 
firm.  Signing  the  deal  is  the  beginning 
of  the  process  of  crearing  value,  he  says, 
but  the  "deal-maker  mentality”  common 
in  negotiations  hurts  the  chances  of  the 
contract  being  implernented  successful¬ 
ly.  In  November’s  Harvard  Business 
Rirview.  Ertei  proposes  a  differ¬ 
ent  mind-set  in  which  inking  the 
deal  is  only  the  beginning.  He 
told  Kiorhieen  Melymuka  how 
that  approach  can  change 
everything  —  for  the  better. 

What  is  the  deal*maker  mentality? 
l^t's  or>e  a  lot  of  negotiators 
have.  They  feel  their  job  is  to 
close  the  deal  faster,  bigger, 
better.  It's  not  thinking  about  what 
happens  after  the  deal  is  signed. 

How  docs  this  mind-set  affect,  say,  an  out- 
sourcing  negotiahon?  It  drives  a  lot  of  be¬ 
havior,  especially  among  buyers.  They 
end  up  forcing  providers  to  perform 
some  pretty  unnatural  acts  to  win  busi¬ 
ness  without  worrying  about  the  con¬ 
sequences.  A  negociattng  team  focuses 
on  getting  the  deal  signed.  Some  are 
date-driven  by  a  quarter  or  year  close, 
and  they  don’t  think  hard  enough 
about  what  it  will  take  to  realize  the 
value  of  the  deal  five  or  10  years  down 
the  road. 


What  does  Hiat  look  ite?  That’s  having 
the  negotiating  team  see  their  job  dif¬ 
ferently.  Instead  of  getting  the  deal 
signed,  their  goal  is  helping  to  create 
value  by  creating  a  deal  that  can  be  im¬ 
plemented.  After  all.  what's  (he  goal 
line?  Is  it  a  signature  on  a  page  or  cost 
reduction,  innovation,  business  trans¬ 
formation? 

To  help  in  the  shift  to  that  way  of  thinking 
you  offer  a  “benefit  of  hindsight’*  esercise. 
Can  ytM  explain?  Hindsight  is  a 
wonderful  thing,  and  it's  actu¬ 
ally  more  accessible  than  we 
realize.  There’s  enough  experi¬ 
ence  out  there  about  outsourc¬ 
ing  deals  and  large  IT  vendor 
contracts  and  what  goes  wrong 
with  them  over  time  that  most 
negotiation  teams  should  be 
able  to  tap  into  that  experience 
and  ask.  “What  tends  to  go 
I  wrong  with  these  deals,  and  what  can 
we  do  now  in  anticipation  of  those 
problems?  How  can  we  structure  the 
deal  and  the  relationship  between  us 
to  ounimize  the  chance  of  those  prob¬ 
lems  happening?" 

Some  would  say  that  penalty  dauses  take 
care  of  those  issues.  Penalty  clauses  give 
a  false  sense  of  security  for  the  nego¬ 
tiators.  Nobody  wants  to  sit  back  and 
collect  penalties:  they  want  (he  deals 
to  work.  Simply  havii^  penalty  clauses 
in  the  contract  is  not  a  good  alternative 
to  understanding  what  it  will  take  to 
create  value  by  implementing  the  deal. 

Most  nsgohators  play  dose  to  the  vest  but 
you  suggest  a  much  less  secretive  approach. 


Can  you  talk  about  that?  Sure.  If  your  pur¬ 
pose  is  just  signing  the  deal,  then  you 
can  decide  to  go  caveat  emptor  all  the 
way,  and  what  they  don't  know  hurts 
them.  But  if  your  purpose  is  impie- 
!  menting  and  creating  value  through 
'  implementation,  then  what  they  don't 
know  can  hurt  you.  So  you  need  to 
think  about  what  they  need  to  under¬ 
stand. 

Can  you  give  me  an  example  of  something 
vendors  may  not  know  that  you  should  tell 
them?  At  the  outset  of  lots  of  outsourc¬ 
ing  deals,  there's  an  assumption:  Don't 
toil  them  how  much  resistance  to 
change  there  is  in  our  organization  or 
how  messy  our  process  is  or  how  bad 
our  data  is  because  once  we  sign  (he 
deal,  our  mess  becomes  their  mess. 
That’s  a  recipe  for  conflict,  scope 
changes  and  a  relationship  where  the 
provider  will  have  to  cut  comers 
somewhere  else  to  dig  out  of  the  hole 
it  didn't  know  it  was  getting  itself  into. 
If  my  company  lacks  some  fundamen¬ 
tal  ability  to  perform  my  side  of  the 
deal  or  the  problem  is  bigger  than  the 
vendor  thinks  it  is.  then  letting  them 
walk  in  not  knowing  about  that  is  set¬ 
ting  up  for  problems  durii^  implemen¬ 
tation. 

Handing  off  the  deal  after  the  negotiation 
can  be  the  source  of  all  kinds  of  probfems, 
but  you  have  some  suggestions  for  avoiding 
those.  Ten  us  aboid  (hem.  After  the  deal  is 
done,  the  negotiators  often  go  on  to  the 
next  deal.  Not  enough  time  is  spent 
making  a  good  handoff  or  transition 
between  the  negotiation  teams  and  the 
implementation  teams.  I  recommend 
that  organizations  really  plan  a  formal 
handoflf  and  do  that  jointly  so  they 
have  both  buyer  and  seller  negotiation 
teams  briefing  both  sides  of  the  imple¬ 
mentation  team. 

What  does  that  do  for  you?  The  briefing 
looks  very  different  if  you  arc  both  in 
(he  room  together  talking  about  why 
you  did  the  deal  you  did  and  what  it's 
going  to  take  to  make  it  work  than  if 
you're  doing  the  briefings  separately.  If 
you  brief  separately,  there's  a  tendency 
to  just  list  all  the  ways  you  “got"  them. 
And  if  both  sides  know  they  will  be 
doing  a  joint  briefing  on  why  they  did 
what  they  did.  they  spend  less  energy 
on  the  “gotcha"  game  during  the  nego¬ 
tiation  and  more  energy  on  doing  a 
deal  based  on  objective  criteria,  exter¬ 
nal  standards  and  industry  practice, 
because  both  sides  know  th^  will 
need  to  jointly  defend  the  deal 


Imptanenlalion 

Mind-Set 


THINK  FUTURE. 

A  year  into  the  conbact.  wiO  the 
deaf  be  working?  What  will 
heMgorte  wrong? 


N0SURPR6E8. 

The  short-term  aAvitages  they 
mayprovUecancrippleimplernerita* 
bon  in  the  lo^  term. 
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Expose  hidden  otetactes.  Anything 
that  wi  make  impiementalion 
dfficult  for  the  other  side  wi 
cost  you.  too. 


0NEMES8A6L 

Briefing  both  sides  at  onceavolds 
inlrigue  and  keeps  everyone  on 
the  same  pege. 


CLOsneeNTEVBrmma 
OonT  entrace  tftffictei  deedbies. 
Take  the  tone  to  get  both 
sides  afkbted. 


SUCCESS  BSWEETBt 
THANPIMBIMBIT. 
Penalty  douses  are  a  loei^oee 
propos^  and  tiey  don't  salve 
probtems.  Aim  to  create  success, 
not  to  punish  tetfe. 


mentation  mind-set  but  (he  other  side  is  full 
of  deaHnakers.  wont  you  end  up  giving 
away  the  farm?  There  arc  two  elements 
of  a  negotiation.  One  is  communica¬ 
tion;  what  I'm  telling  you  to  talk  about. 
TTie  other  is  commitment:  what  you’re 
willing  to  agree  to.  Just  because  you 
come  in  with  an  implementation  mind¬ 
set  and  put  tough  issues  on  the  table 
and  focus  on  how  you’re  going  to  im¬ 
plement  and  warn  in  advance  about 
what  you  want  to  talk  about  so  they 
can  be  sure  to  prepare,  it  doesn’t  mean 
that  if  their  side  is  difficult  or  shifty  or 
too  clever  by  half  that  you  have  to 
agree.  O  50600 


This  is  fhs  latost  in  a  series  of  fflonMy 
dhcusaonswilh  Harvard  Business  Review 
auttwrs  on  topics  of  eitorest  to  IT  managers. 


Vow  a^focato  a  (fifferatrt  approach  based  on 
wha4  you  cal  M)  *1mpl«iwnlalion  mind-set* 


H  you  approach  (wgolialMns  with  art  irnpfe- 
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US.  Workers  Staying  Home . . 


TOKYO  B  THE  MOST  EXPENSIVEcity  tor  ex¬ 
patriate  worters.  foflowed  by  LorKion.  Moscow 
and  Osaka.  Japan,  according  to  a 2004 survey 
by  Mercer  tiinan  Resource  Consulfing  lie 
(see  list  below).  Workforce  ManagemenimaQ- 
azine  reports  that  an  expat  m  Tokyo  can  expect 
to  pay  $4,501  a  month  to  rent  a  luxury  two-bed¬ 
room  apartment  versus  $3,500  in  New  York. 

Because  of  the  high  cost  of  keeping  U.S. 
wcxKers  abroad,  rnany  cornpanies  are  sending 
themforshortertripsorhiringlocal  talent.  For 


exam;^.  Agilent  Technologies  Inc.  pared  its  in¬ 
ternational  transfer  program  from  about  1000 
people  in  2(X)1  to 300 today.  By  filling  positions 
locally  and  scaling  back  expat  benefits,  the 
company  cut  relocation  costs  from  $72  rnilfion 
to$^miNion. 

In  another  survey,  by  6MAC  Reloca¬ 

tion  Services,  only  half  of  responding  compa¬ 
nies  said  that  workers  took  their  chiidren  on 
intemabon^  assignments,  the  lowest  percent¬ 
age  in  the  10-year  history  of  the  survey. 


. . .  But  Not  Foreign  Workers 


THE  CAP  OF 65.000  new  H-1B  visas  granted 
to  foreign  wwkers  was  reached  Oct.  1  -  the  day 
the  new  federal  fiscal  year  began.  Never  before 
has  the  brnit  been  reached  in  one  day. 

The  H-1B  visa,  heavily  used  by  N^-tech 


BULLISH  ON  OFFSHORE 


kel  will  continue  to  grow  nearly  20“o 
annually  Ihrough  2008.  according  lo 
Meta  Group  Inc.  Meta  says  that  by 
2006.  most  IT  orgamratrons  will  have 
an  offshore  strategy  "Withglobalre 
sources  costing  one-third  to  one-fifth 
lhat  of  American  employees  -  without 
accounting  lor  hidden  costs  -  and 
having  higher  process  discipline,  off¬ 
shore  strategies  now  pervade  North 
American  IT  organizalwns.  'says 
Dean  Davison,  a  Meta  vice  president 
He  predicts  that  despite  political 
backlash,  the  average  large  company 
will  send  60%  ot  application  work 
offshore  by  2009 


etnployem.  allows  skilled  foreign  workers  to 
gel  jobs  in  the  U.S.  for  up  to  six  years. 

The  cap  for 2004 was  reached  five  months 
into  that  hsca)  year. 

-DanVerton 
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Hiring  among  fT 
workers  contm- 

oes  to  gam  strength  Job  postings 

D«e.  com.  an  rr  |o6s  Website, 
were  up  90%  at  the  ertd  of  Sep¬ 
tember  compared  wrth  the  previous 
year  Turnover  rates  for  fT  protes- 
swnais  at  marry  compares  have 
remained  low  for  the  past  few 
years  as  the  economy  has  sput  ■ 
lered  arrd  organizatiorts  have  pared 
their  fT  staffs  through  a  combina¬ 
tion  of  attrition  and  layoffs.  But  that 
couAd  change,  now  that  the  fOb 
market  for  fT  professionals  &  pok¬ 
ing  up  steam,  says  Dice  kre  presi¬ 
dent  Scot  AAelland.  He  spoke  wrth 
Computermifld's  Thomas  Hoff¬ 
man  atxMJl  the  ups  and  downs  of 
the  rr  |ob  market. 


Whatafaturnovw  latoforlT  pro- 
fbssional*  thsM  days?  In  technology 
lobs.  turnover  histoncalfy  has  been  fairly 
high,  in  the  6%  to  20%  range  Turrtover 


rales  have  been  exlremelv  tow  the  past  cou¬ 
ple  of  years,  and  there's  a  lot  of  anxiety  and 
wanderlust  among  tech  professionaJs 

Are  there  still  a  lot  of  unemployed  or 
underemployed  technology  wrorfcers 
in  the  U.S.?  What  you  hear  is  exactly  that 
We  don't  have  100%  employment  of  tech 
professionals  Since  the  Iniemei  and  Y2k 
and  telecom  booms  burst  in  2001.  you  had  a 
number  of  people  from 2001  to 2003 who 
left  the  tet^i  tieW 

You  read  a  loi  abcxii  underemptoyed  and 
unemployed  professionals  m  the  lech  sector, 
and  that's  a  reality  Bui  if  you  look  at  some  of 
thefU.S  Bureau  of  Labor  Statistics]  num¬ 
bers,  the  unemployment  rate  is  extremelv 
low:  It's  like  2  3% 

How  is  this  affecting  enroHmsnt 
rates  for  computer  science  under- 
grads  and  graduate  students?  Thi$ 
has  been  a  topic  that  Ihe  National  Science 
Foundation  has  spent  a  lot  of  time  on.  At  the 
graduate  school  level,  since  9/11.  security 
restnctions  around  student  vrsa  programs 
have  tightened  up  m  a  big  way  Many  highly 
skiNed  graduate  students  who  used  to  come 
totheU  S  and  stay  here  are  going  dse- 
where  because  ot  the  difficult  les  m  getting 
a  visa. 

H's  a  serious  skill  issue  for  the  country, 
f^ople  aren't  worried  about  it  because  the 
employment  market  is  stiN  recovering,  hut 
rt's  Quite  possible  that  a  tech  jobs  crunch  IS 
overthehoruon  C  50599 
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Work,  Work,  Work 

On  average.  fT  workers  are  putting 
in  47  hours  per  week 
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Looking  Up 


Middle  managerssee  tti«  economy  brtgtit- 
ening.  and  the  number  ot  them  look»ng  foi 
jobs  has  dec* eased  smee  last  year,  accord 
ing  to  Ihe  results  of  a  recent  survey  ot  217 
middle  manafjcfs  by  Accenture  Lid 

Looking  lor  ThinX  iKe  economy 

another  lob  wib  sirentfthen  in 

the  ne»t  12  months 


a  40  hours  per  week _ 

M  41-45  hotfs  per  week _ 

•  46-50  hours  per  week _ 

More  than  51  hours  per  week 
Fewer  than  40  hoitfs  per  week 
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rr  and  Security: 
Converging  Roles 


ONE  OF  THE  GREAT  DEBATES  in  recent 
months  has  been  whether  the  chief  secu¬ 
rity  officer  should  report  to  the  compa¬ 
ny’s  CIO  or  CEO. 

The  fact  that  information  security  is 
first  and  foremost  a  technology  issue  fuels  the  argu¬ 
ment  for  the  CIO  reporting  line.  The  reasoning  is  that 
the  CSO,  as  the  person  who  safeguards  the  organiza- 


tion’s  information  assets, 
should  report  to  the  CIO. 

But  the  other  side  argues 
that  security  is  more  than 
a  technology  concern. 

Information  security  is  a 
business  issue  that  also  in* 
eludes  physical  security  at 
the  corporate  level.  Secur¬ 
ing  information  is  key  to 
the  organization’s  long¬ 
term  growth  and  survival 
This  puts  the  responsibility 
for  setting  security  policy 
squarely  on  the  CEO  and 
suggests  that  the  CSO  should  report 
directly  to  him. 

Lost  in  this  debate  is  the  real  issue. 
Organizational  structure  is  secondary 
to  how  security  —  IT  and  otherwise 
—  is  defined  and  implemented  to  sup¬ 
port  or  enable  corporate  objectives. 
Who  has  the  skills  and  knowledge  to 
design  a  proper  security  methodology 
and  to  implement  appropriate  policies 
across  the  corporation?  Who  is  respon¬ 
sible  for  defining,  implementing  and 
managing  the  enterprise  architecture? 

It’s  not  the  traditional  security  chief. 
The  skills  and  expertise  required  of  a 
CSO  are  quite  di^erent  from  those  in¬ 
voked  while  worrying  about  access 
doors  and  security-guard  rounds. 

A  CSO  needs  a  strong  technology 
background  coupled  with  the  political 
and  interpersonal  skills  to  implement 
policies  across  the  organization.  A 


CSO  must  also  stay  current 
with  laws  and  regulations 
that  affect  information  se¬ 
curity  deployment  and 
keep  the  CEO.  CFO  and 
board  of  directors  apprised 
of  security  matters. 

All  C-level  executives 
are  liable  for  any  loss  of 
information,  even  if  it’s 
stolen  the  old-fashioned 
way  —  taken  from  the 
mailroom.  for  example. 
Criminal  and  civil  penal¬ 
ties  are  the  norm  if  a  com¬ 
pany  is  found  negligent  in  protecting 
information,  and  ignorance  of  the  law 
is  no  defense. 

So  yes,  the  CSO  should  report  to  the 
CEO.  But  ideally,  the  CIO  and  the  CSO 
should  be  one  and  the  same  person. 

I  have  held  the  title  of  CIO/CSO 
three  times  in  my  career  while  report¬ 
ing  to  a  CEO  or  COO.  The  dual  job  ex¬ 
pands  the  CIO  role  to  address  corpo¬ 
ratewide  risk  issues  with  a  broad  range 
of  technical  and  nontechnical  security 
processes  and  initiatives. 

And  the  number  of  risks  are  Increas¬ 
ing,  According  to  FBI  statistics,  a  com¬ 
pany  has  a  90%  chance  of  experienc¬ 
ing  a  computer  or  network  security 
breach  within  the  next  year,  an  80% 
chance  of  suffering  a  flnanclaJ  loss  due 
to  a  security  breach  and  a  44%  chance 
that  the  loss  will  exceed  S4  million. 

New  laws  and  regulations  regarding 


information  security  arc  the  result  of 
dramatic  increases  in  the  loss  of  per¬ 
sonal  and  financial  information 
through  cybercrimes  and  fraud. 

Given  the  threat,  the  CIO/CSO 
needs  to  address  three  top-level  net¬ 
work  security  challenges.  The  first  is 
to  prevent  infestation  of  the  network 
by  viruses,  worms.  Trojan  horses  and 
so  on.  as  well  as  to  isolate  and  remove 
any  infestation  without  affecting  the 
operational  ability  of  the  corporation. 
Network  infestation  alone  w^ill  cause 
more  than  $100  billion  in  financial 
losses  globally  in  2004.  The  second 
challenge  is  to  protect  private  infor¬ 
mation  from  intruders  who  pose  as  le¬ 
gitimate  users  after  gaining  unautho¬ 
rized  network  access.  The  final  task  is 
to  defend  against  denial-of-service  at¬ 
tacks  in  which  legitimate  business  re¬ 
sources  or  customer  access  are  dimin¬ 
ished  or  denied. 

I  know  from  experience  that  no  one 
can  do  this  job  alone.  As  custodian  of 
the  corporate  information  assets,  the 
CIO/CSO  must  make  iitformation 
owners  in  the  business  units  aware  of 
their  responsibility  for  information 
security.  He  can  do  this  by  involving 
them  in  business  impact  analysis,  risk 
assessment,  business  continuity  plan¬ 
ning  and  security  policy  development. 

He  must  also  work  closely  with 
the  CFO,  the  human  resources  execu¬ 
tive  and  the  board  audit  committee. 
Together,  they  must  ensure  consisten¬ 
cy  of  security  policies  and  procedures 
and  open  administration  of  the  securi¬ 
ty  program,  including  clearly  defined 
audit  trails.  This  collaboration,  with 
the  CSO/CIO  in  the  lead,  is  the  best 
way  to  effectively  protect  the  informa¬ 
tion  and  physical  assets  of  the  firm. 
OS0528 
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rr  and  Security: 
^nverging  Roles 


ONE  OF  THE  GREAT  DEBATES  in  recent 
months  has  been  whether  the  chief  secu¬ 
rity  officer  should  report  to  the  compa¬ 
ny’s  CIO  or  CEO. 

The  fact  that  information  secmity  is 
first  and  foremost  a  technology  issue  fuels  the  argu¬ 
ment  for  the  CIO  reporting  line.  The  reasoning  is  that 
the  CSO,  as  the  person  who  safeguards  the  organiza- 


tion's  information  assets, 
should  report  to  the  CIO. 

But  the  other  side  argues 
that  security  is  more  than 
a  technology  concern. 

Information  security  is  a 
business  issue  that  also  in* 
eludes  physical  security  at 
the  corporate  level  Secur¬ 
ing  information  is  key  to 
the  organization’s  long¬ 
term  growth  and  survivaL  ' 

This  puts  the  responsibility  i 
for  setting  security  policy  I 
squarely  on  the  CEO  and  I 
suggests  that  the  CSO  should  report 
directly  to  him. 

Lost  in  this  debate  is  the  real  issue. 
Organizational  structure  is  secondary 
to  how  security  ~  IT  aiKl  otherwise 
—  is  defined  and  implemented  to  sup¬ 
port  or  enable  corporate  objectives. 
Who  has  the  skills  and  knowledge  to 
design  a  proper  security  methodology 
and  to  implement  appropriate  policies 
across  the  corporation?  Who  is  respon¬ 
sible  for  defining,  implementing  and 
managing  the  enterprise  architecture? 

It’s  not  the  traditional  security  chief. 
The  skills  atKl  expertise  required  of  a 
CSO  are  quite  different  from  those  in¬ 
voked  while  worrying  about  access 
doors  and  security-guard  rounds. 

A  CSO  needs  a  strong  technology 
background  coupled  with  the  political 
and  inteipersoiud  skills  U)  implement 
policies  across  the  organization.  A 


CSO  must  also  stay  current 
with  laws  and  regulations 
that  affect  information  se¬ 
curity  deployment  and 
keep  the  CEO,  CFO  and 
board  of  directors  apprised 
of  security  matters. 

All  C-Ievel  executives 
are  liable  for  any  loss  of 
information,  even  if  it’s 
stolen  the  old-fashioned 
way  —  taken  from  the 
mailroom,  for  example. 
Criminal  and  civil  penal¬ 
ties  are  the  norm  if  a  com¬ 
pany  is  found  negligent  in  protecting 
information,  and  ignorance  of  the  law 
is  no  defense. 

So  yes,  the  CSO  should  report  to  the 
CEO.  But  ideally,  the  CIO  and  the  CSO 
should  be  one  and  the  same  person. 

I  have  held  the  title  of  CIO/CSO 
three  times  in  my  career  while  report¬ 
ing  to  a  CEO  or  COO.  The  dual  job  ex¬ 
pands  the  CIO  role  to  address  corpo- 
ratewide  risk  issues  with  a  broad  range 
of  technical  and  nontechnical  security 
processes  and  initiatives. 

And  the  number  of  risks  are  increas¬ 
ing.  According  to  FBI  statistics,  a  com¬ 
pany  has  a  90%  chance  of  experienc¬ 
ing  a  computer  or  oetworic  seciuity 
breach  within  the  next  year,  an  80% 
chance  of  suffering  a  financial  loss  due 
to  a  security  breach  and  a  44%  chance 
that  the  loss  will  exceed  $4  million. 

New  laws  and  regulations  regarding 


information  security  are  the  result  of 
dramatic  increases  in  the  loss  of  per¬ 
sonal  and  financial  information 
through  cybercrimes  and  fraud. 

Given  the  threat,  the  CIO/CSO 
needs  to  address  three  top-level  net¬ 
work  sectirity  challenges.  The  first  is 
to  prevent  infestation  of  the  network 
by  viruses,  worms,  Trojan  horses  and 
so  on,  as  well  as  to  isolate  and  remove 
any  infestation  without  affecting  the 
operational  ability  of  the  corporation. 
Network  infestation  alone  will  cause 
more  than  $100  billion  in  financial 
losses  globally  in  2004.  The  second 
challenge  is  to  protect  private  infor¬ 
mation  from  intruders  who  pose  as  le¬ 
gitimate  users  after  gaining  unautho¬ 
rized  network  access.  The  final  task  is 
to  defend  against  denial-of-service  at¬ 
tacks  in  which  legitimate  business  re¬ 
sources  or  customer  access  are  dimin¬ 
ished  or  denied. 

I  know  from  experience  that  no  one 
can  do  this  job  alone.  As  custodian  of 
the  corporate  information  assets,  the 
CIO/CSO  must  make  information 
owners  in  the  business  units  aware  of 
their  responsibility  for  information 
security.  He  can  do  this  by  involving 
them  in  business  impact  analysis,  risk 
assessment,  business  continuity  plan¬ 
ning  and  security  policy  development 

He  must  also  work  closely  with 
the  CFO,  the  human  resources  execu¬ 
tive  and  the  board  audit  committee. 
Together,  they  must  ensure  consisten¬ 
cy  of  security  policies  and  procedures 
and  open  administration  of  the  sectui- 
ty  program,  including  clearly  defined 
audit  trails.  This  collaboration,  with 
the  CSO/CIO  in  the  lead,  is  the  best 
way  to  effectively  protect  the  informa¬ 
tion  and  physical  assets  of  the  firm. 
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Netezza  Adds  Data  Warehousing  Appliance 


Tarnets  firms  with 
up  to  1TB  of  data 

BV  HEATHER  HAVEMSTEIN 

Netczaa  Corp.  last  week  added 
an  appliance  to  its  data  ware¬ 
housing  product  line  that's 
targeted  at  companies  with 
4O0GB  to  ITB  of  data. 

The  move  signals  a  focus  on 
a  rtew  target  market  for  Netez* 
za.  which  traditionally  has  sold 
its  harduare 'Software  bundles 
to  high-end  companies  with 
about  10TB  of  data,  according 
to  Netezza  executives.  The 
new  NPS  8025  model  of  Netez- 
za’s  8000  Series  data  center 
appliance  line  rolls  together 


servers,  database  sofrwaa'  and 
storage  that  let  users  analyze 
large  amounts  of  business  in- 
tclligertcc  data,  said  fit  Saxena. 
co-foundcr  and  CEO  of  Fram¬ 
ingham.  Mass.-bascd  Netezza. 

"Companies  today  want  to 
look  at  all  the  detail  of  their 
customer  transactions,  of  their 
clickstream  transactions  — 
huge  amounts  of  data,"  Saxena 
said.  "We  have  been  able  to 
use  commodity  components, 
land)  we  can  put  the  process¬ 
ing  power  where  it  is  best  uti¬ 
lized  to  keep  costs  low."  In 
Netezza  appliances,  the  CPU 
power  is  next  to  the  data,  en¬ 
abling  quick  analysis  of  large 
amounts  of  data,  he  explained. 


Analysis  said  that  while  the 
appliance  could  appeal  to 
smaller  companies  that  don't 
have  extensive  data  warehous¬ 
ing  expertise.  Netezza  could 
face  a  rougher  reception  at 
sites  that  have  standardized 
on  hardware  and  databases. 

Epsilon  Data  Management 
Inc.  has  used  the  Netezza  ap¬ 
pliance  to  integrate  several 
smaller  databases,  said  Mike 
Coakicy.  vice  president  of 
marketing  technology  part¬ 
nerships  and  alliances  at  the 
Wakefield,  Mass.-bascd  mar¬ 
keting  services  company. 

In  addition  to  providing 
Epsilon  customers  with  the 
speed  needed  to  analyze  large 


amounts  of  data  quickly,  the 
appliance  has  helped  Epsilon 
cut  its  maintenance  costs.  "If 
you're  buying  big  IBM  iron 
and  then  you  have  to  put  the 
relational  database  on  it  and 
add  the  disk,  those  arc  signifi¬ 
cant  costs."  Coakicy  said. 

Dan  Vessel,  an  analyst  at 
IDC,  said  that  users  in  small 
companies  and  in  departments 
of  large  companies  may  find  the 
appliance  appealing  because 
they  often  don't  have  the  FT 
expertise  to  manage  separate 
data  warehousing  components. 

In  addition,  Netezza  has  a 
unique  feature  that  allows 
users  to  load  data  into  the  ap¬ 
pliance.  do  ad  hoc  analysis  and 


then  dump  the  data,  he  said. 

Wayne  Eckerson.  director  of 
research  at  The  Data  Ware¬ 
housing  Institute  in  Seattle, 
noted  that  Netezza  is  one  of 
the  first  vendors  to  ofTeran 
appliance  for  data  warehous¬ 
ing.  As  a  result.  Eckerson  said, 
its  customers  so  far  are  mostly 
early  adopters. 

"We're  seeing  companies 
moving  gradually  into  appli¬ 
ances.  [as  most]  companies 
have  already  committed  to 
database  and  hardware  plat¬ 
forms."  he  said.  "Changing 
those  things  is  not  done  lig^ily." 

In  addition,  the  full  8000 
Series  appliances  were  up¬ 
graded  to  offer  improved 
workload  management  and 
faster  bulk  data  movement 
speeds.  O  50926 
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Tacoma 

Consulting  Inc.  for  unfonrseen 
custuenization  work. 

“They  threw  the  switch  at 
one  time,  and  a  lot  of  failures 
happened."  said  Scon  Huntley, 
eommunkracions  supervisor 
for  the  city.  The  e>{ten.sive  proj¬ 
ect  gave  the  city  an  integruicd 
system  to  run  all  general  oper¬ 


ations.  such  as  police,  fire  and 
utilities.  End  users  learning  to 
use  the  new  system  initially 
complained  about  implemen¬ 
tation  problems,  he  said. 

Of  laic,  the  most  pressing 
issues  hav’c  been  problems 
with  the  financial  module, 
which  have  led  to  delays  in 
hammering  out  the  city's  bud¬ 
get.  There  have  also  been 
performance  issues  with  the 
SAP  CRM  software  that  sup¬ 


ports  the  city's  five  utilities. 

Tacoma's  system  problems 
have  become  so  prominent 
that  city  councilor  JuHe  An¬ 
derson  lost  month  filed  a  reso¬ 
lution  calling  for  an  audit. 

"The  City  of  Ta«>ma  is  e.x- 
pericncing  unanticipated  costs 
in  operating  the  sy.s(em.  and 
there  are  significant  gaps  be¬ 
tween  our  expectations  for 
functionality  and  how  the  SAP 
system  currently  operaics," 
Anderson  said  in  an  e-maiL  "As 
an  elected  official.  I  am  unable 
to  determine  if  these  i.ssues 
are  due  to  SAP  software,  man¬ 
agement  of  City  ofTacoma 
employees,  or  poor  consulting 
services  from  TUI." 

Problem  Areas 

"Technically.  99%  of  the  sys¬ 
tem  is  working  fine."  said 
Mark  Crisson.  CEO  ofTacoma 
Public  Utilities.  The  problems 
have  tended  to  be  mostly  the 
result  of  implementing  new 
processes  and  formats  that 
SAP  suppons,  he  said. 

For  instance,  some  of  the 
bills  the  CRM  application  gen¬ 
erated  were  difficult  to  under¬ 
stand  compared  with  their  pri¬ 
or  formal  and  led  to  a  flood  of 
.service  requests.  Crisson  said. 
The  city  had  to  add  staffers  to 


handle  the  increase  in  re¬ 
quests  and  paid  S270.000  to 
TUI  to  make  modincatiuns. 

Tacoma  now  has  a  much- 
desired  work  management 
system  to  help  .support  job- 
order  rutfillmcni.  However, 
utility  service  representatives 
have  to  plow  through  as  many 
as  five  sercen-s  to  access  cus¬ 
tomer  data.  That  forced  the 
city  to  sign  a  S405.000  con¬ 
tract  with  TUI  last  month  to 
do  some  extra  work,  including 
colbpsing  the  customer  data 
into  a  single  screen 

Some  of  the  early  problems 
have  been  solved,  officials 
said.  For  instance,  the  payroll 
application  issued  inaccurate 
checks,  but  that  was  related  to 
manual  errors  that  haven't  re¬ 
curred.  said  IT  personnel. 

More  significant  were  the 
problems  with  the  budget 
module.  The  difficulties  of 
switching  to  the  new  system, 
combined  with  a  S30  million 
city  budget  shortfall,  resulted 
in  a  "perfect  storm,"  said 
David  Otto,  director  of  busi¬ 
ness  information  systems  for 
Tacoma.  Despite  this,  the  ciry 
was  able  to  meet  its  prelimi¬ 
nary  budget  deadline  of  Oct. 

31  and  expects  to  have  its  final 
numbers  by  year’s  end. 


AT  A  GLANCE 


The  city  ofTacoma  violat¬ 
ed  one  of  the  key  rules  of  a 
big  ERP  implementation."  said 
ioshua  Greenbaum.  an  analyst 
at  Berkeley,  Calif.-based  Enter¬ 
prise  Applications  Consulting. 
"They  tried  to  do  loo  much, 
too  fast.”  He  added  that  Taco¬ 
ma  "didn't  hold  the  integra¬ 
tor’s  feet  to  the  fire  on  the 
nondelivery  of  functions." 

SAP  has  no  worries  about 
an  audit,  said  spokesman 
William  Wohl.  He  noted  that 
R/3  has  enabled  Tacoma  to  es¬ 
tablish  common  practices  and 
become  more  efficicnL  'TTie 
softw’are  is  helping  transform 
city  government  in  a  way  not 
otherwise  done  with  its  legacy 
systems,"  Wohl  said.  “At  the 
end  of  the  day.  the  customer 
has  said  the  software  tools  arc 
an  asset.**  C  50934 


Denver  Mends  Broken  ERP  System 


MUMICIPAL  ERProNoutsarees- 
pedaHy  chaHengng  ^  npe  tor 
oroUems  caused  by  a  lack  of  ap- 
plications  expertise,  the  sikHike 
organoalion  of  aly  departrnents 
and  intense  public  scrutiny,  said 
Mike  Locatis.  OO  tor  the  City  of 
Denver. 

Locatis  lamsdf  has  coped  with 
Itffning  around  a  troubled  F^pte* 
Soft  ERP  implementalion.  Hired 
last  March,  his  first  task  was  to 
gel  the  staled  rollout  moving  and 
help  Denver  get  the  most  from  its 
rr  assets. 

The  troubles  induied  a  payrol 
^siem  that  we  ssumg  naccurate 
checks  -  somethng  that  became 
a  ''welH)ubk32ed'‘  problem,  even 


though  no  one  ever  missed  being 
paid.  Locate  said.  Denver  solved 
It  by  mstaing  a  service  pack  and 
undertaking  staff  training  efforts. 

The  prdilems  arose  in  part  be¬ 
cause  of  a  bek  of  accountabiblv 
The  Denver  protect  was  being 
overseen  by  a  steering  committee 
rather  than  by  a  CIO.  Locale  said. 
That  governance  setup  exists  in 
most  muncipalities,  which  are 
made  up  of  independent  agen¬ 
cies.  RoHtng  out  ERP  software  in 
such  an  environment  is  like  in* 
staHmg  a  system  in  30  companies 
at  once.  Locatis  said.  'If  s  realty 
important  to  have  appropnaleiy 
strong  management.'  he  added. 

-MaicLSon^ 


nm 


NEWS 


www-oynpulsniiorldxoffi 


Netezza  Adds  Data  Warehousing  Appliance 


Targets  firms  with 
up  to  1TB  of  data 

»V  MEATHCtt  HAVCNSTCIN 

Netezza  Corp.  last  week  added 
an  appliance  to  Hs  data  ware- 
bousing  product  line  that’s 
targeted  at  companies  with 
400GB  to  1TB  of  data. 

The  move  signals  a  focus  on 
a  new  target  market  for  Netez¬ 
za.  which  traditionally  has  sold 
hs  hardware/software  bundles 
CO  hi^>-end  companies  with 
about  10TB  of  d^a.  according 
to  Netezza  executives.  The 
new  NFS  8025  model  of  Netcz- 
za's  8000  Series  data  center 
appliance  line  rolls  together 


servers,  database  software  and 
storage  that  let  users  analyze 
large  amounts  of  business  in- 
teiliget>cc  data,  said  Jh  Saxeita, 
co-founder  and  CEO  of  Fram¬ 
ingham.  Ma.<is.*bascd  Netezza. 

Xompanies  today  want  to 
look  at  ^  the  detail  of  their 
customer  transactions,  of  their 
clickstream  transactions  — 
huge  amounts  of  data,”  Saxena 
said.  ”We  have  been  able  to 
use  commodity  components, 
[and]  we  can  put  Che  process¬ 
or  power  where  tt  is  best  uti¬ 
lized  to  keep  costs  low."  In 
Netezza  appliances,  the  CPU 
power  b  next  to  the  data,  en¬ 
abling  quick  analysb  of  large 
amounts  of  data,  he  explained. 


Analysts  said  that  while  the 
appliance  could  appeal  to 
smaller  companies  that  don't 
have  extensive  data  warehous¬ 
ing  expertise,  Netezza  could 
face  a  rougher  reception  at 
sites  that  have  standardized 
on  hardware  and  databases. 

Epsilon  Data  Marugement 
Inc.  has  used  the  Netezza  ap¬ 
pliance  to  integrate  several 
smaller  databases,  said  Mike 
Coakley,  vice  president  of 
mariceting  ter^ology  part¬ 
nerships  and  alliances  at  the 
Wakefield,  Mass.-based  mar¬ 
keting  services  company. 

In  addition  to  providing 
Epsilon  customers  with  the 
speed  needed  to  analyze  targe 


amounts  of  data  quickly,  the 
appliance  has  helped  Epsilon 
cut  its  maintenance  costs.  "If 
you're  buying  big  IBM  iron 
and  then  you  have  to  put  the 
relational  database  on  it  and 
add  the  disk,  those  are  signifi¬ 
cant  costs,”  Coakley  said. 

Dan  Vesset,  an  analyst  at 
IDC  said  that  users  in  small 
companies  and  in  departments 
of  large  companies  may  find  the 
appliance  appealing  because 
they  often  don't  have  the  IT 
expertise  to  manage  separate 
data  warehoustng  components. 

In  addition.  Netezza  has  a 
unique  feature  that  allows 
users  to  load  data  into  the  ap¬ 
pliance,  do  ad  hoc  analysb  and 


then  dump  the  data,  he  said. 

Wayne  Eckerson,  director  of 
research  at  The  Data  Ware¬ 
housing  Institute  tn  Seattle, 
noted  that  Netezza  b  one  of 
the  first  vendors  to  offer  an 
appliance  for  data  warehous¬ 
ing.  As  a  result.  Eckerson  said, 
its  customers  so  Gir  are  mostly 
early  adopters. 

"We're  seeing  companies 
moving  gradually  into  appli¬ 
ances,  (as  most]  companies 
have  already  committed  to 
database  and  hardware  plat¬ 
forms.”  he  said.  "Changing 
those  things  b  not  done  lightly.” 

In  addition,  the  full  8000 
Series  appliances  were  up¬ 
graded  to  offer  improved 
woricload  management  and 
faster  bulk  data  movement 
speeds.  O  50026 
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Tacoma 

Consulting  Inc.  for  unforeseen 
customization  work. 

"They  threw  the  switch  at 
ooe  time,  and  a  lot  of  £dlures 
h^ipened.”  said  Scott  Huntley, 
conunonications  supervisor 
for  the  dty.  The  extensive  proj¬ 
ect  gave  dty  an  integrated 
system  to  run  all  general  oper¬ 


ations.  such  as  police,  fire  and 
utilities.  End  users  learning  to 
use  the  new  system  initially 
complained  about  implemen¬ 
tation  problems,  he  said. 

Of  late,  the  most  pressing 
issues  have  been  problems 
with  the  fmancial  module, 
which  have  led  to  delays  in 
hammering  out  the  dt/s  bud¬ 
get  There  have  also  been 
performance  issues  with  the 
SAP  CRM  software  that  sup- 
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ports  the  city’s  five  utilities. 

Tacoma's  system  problems 
have  become  so  prominent 
that  city  councilor  fulie  An¬ 
derson  last  month  filed  a  reso¬ 
lution  calling  for  an  audit. 

"The  City  of  Thcoma  b  ex¬ 
periencing  unanticipated  costs 
in  operating  the  system,  and 
there  are  significant  gaps  be¬ 
tween  our  expectations  for 
functionality  and  bow  the  SAP 
system  currently  operates," 
Anderson  said  in  an  e-maU.  "As 
an  elected  official,  I  am  unable 
to  determine  if  these  bsues 
are  due  to  SAP  software,  man¬ 
agement  of  City  ofTacoma 
employees,  or  poor  consulting 
services  from  TUL" 

PtoUem  Areas 

'nbchnically.  99%  of  the  sys¬ 
tem  b  woiidng  fine;”  said 
Mark  Crisson,  CEO  of  Thcoma 
Public  Utilities.  The  problems 
have  tended  to  be  mostly  the 
result  of  implementing  new 
processes  and  formats  that 
SAP  supports,  he  said. 

For  instance,  some  of  the 
bills  the  CRM  application  gen¬ 
erated  were  difficult  to  under¬ 
stand  compared  with  their  pri¬ 
or  format  and  led  to  a  flood  of 
service  requests,  Crisson  said. 
The  city  b^  to  add  staffers  to 


handle  the  increase  in  re¬ 
quests  and  paid  $270,000  to 
TUI  to  make  modifications. 

Tacoma  now  has  a  much- 
desired  work  management 
system  to  help  support  job- 
order  fulfillment.  However, 
utility  service  representatives 
have  to  plow  through  as  many 
as  five  screens  to  access  cus- 
tomcr  data.  That  forced  the 
city  to  sign  a  $40^000  con¬ 
tract  with  TUI  last  month  to 
do  some  extra  work,  including 
collapsing  the  customer  data 
into  a  single  screen. 

Some  of  the  early  problems 
have  been  solved,  offidab 
said.  For  instance,  the  payroll 
application  issued  inaccurate 
checks,  but  that  was  related  to 
manual  errors  that  haven't  re¬ 
curred,  said  IT  personnel 

More  signifleant  were  the 
problems  with  the  budget 
module.  The  difficulties  of 
switching  to  the  new  system, 
combined  with  a  $30  inilUon 
city  budget  shortfall,  resulted 
in  a  "perfect  storm,”  said 
David  Otto,  director  of  busi¬ 
ness  information  systems  for 
Tacoma.  Despite  this,  the  city 
was  able  to  meet  its  prelimi¬ 
nary  budget  deadline  of  Oct 
31  and  expects  to  have  its  final 
numbers  by  year's  end. 


"The  city  of  Thcoma  violat¬ 
ed  one  of  ^  key  rules  of  a 
big  ERP  implementation.”  said 
Joshua  Greenbaum.  an  analyst 
at  Berkeley,  Califl-based  Enter- 
prbe  Applications  Consulting 
They  tried  to  do  too  much, 
too  He  added  that  Taco¬ 
ma  "didn't  bold  the  integra¬ 
tor’s  feet  to  the  fire  on  the 
nondelivery  of  functions,” 

SAP  has  DO  worries  about 
an  audit,  said  spokesman 
William  Wohl  He  noted  that 
R/3  has  enabled  Thcoraa  to  es¬ 
tablish  common  practices  and 
become  more  efficient  The 
software  b  helping  cransform 
dty  government  in  a  way  not 
otherwise  done  with  its  legacy 
systems,”  Wohl  said.  'At  the 
end  of  the  day,  the  customer 
has  said  the  software  tools  are 
an  asset  ■OS0934 
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FRANK  HAYES  ■  FRANKLY  SPEAKING 


Open-Source  Java? 

IT'S  NO  SURPRISE  that  Sun  Microsystems  put  the  source  code 
for  the  next  big  version  of  Java  up  on  the  Internet  last  week. 
OK,  maybe  it’s  a  little  surprise.  For  most  of  a  year.  Sun  has  re¬ 
sisted  a  campaign  by  IBM  to  convert  Java  into  an  open-source 
project.  Sun  executives  have  said  over  and  over  that  Java  will 
not  be  open-sourced  —  no,  never,  forget  it.  That’s  been  the  word  all 
up  and  down  the  Sun  chain  of  command. 

And  sure  enough.  Sun  didn’t  open-source  the  forthcoming  version 
of  Java,  code-named  Mustang.  Instead,  the  Mustang  source  code 
went  up  on  the  Net  under  the  Java  Research  License. 

If  you  aren’t  sure  just  what  that  means  —  well,  neither  is  Sun. 


Sun’s  director  of  Java  technology.  Matt 
Thompsoa  says  that  the  implications  of  offer¬ 
ing  the  code  through  the  research  license  are 
stUl  under  investigation  [QuickLtnk  50865]. 

That’s  putting  it  delicately.  The  Java  Research 
License  was  created  specifically  for  universities 
and  researchers.  It’s  really  not  intended  for 
what  Sun  obviously  has  in  mind:  getting  a  lot  of 
open-source  developers  to  look  at  the  early 
snapshot,  kick  its  tires,  put  it  through  its  paces 
and  generally  give  it  an  open-source-style  once¬ 
over.  Thompson  even  announced  the  source 
code’s  availability  at  an  open-source  event  in 
Silicon  Valley. 

That  makes  sense,  at  least  if  you  step  back 
from  the  open-source  politics  and  legalities.  No. 
Sun  doesn’t  want  to  give  up  its  control  of  Java. 
But  Sun  does  want  to  leverage  the  “many  eye¬ 
balls”  effect  of  open-source  —  the  fact  that  the 
more  people  you  have  looking  at  source  code, 
the  more  bugs  they’ll  find. 

And  not  just  what  we  traditionally  call  bugs. 
All  those  eyeballs  can  also  spot  inelegant  de¬ 
signs  and  problematic  approaches.  They  can 
bring  far  broader  experience  to  bear 
than  any  traditional  group  of  code 
reviewers,  and  they  can  apply  the 
perspective  of  end  users  and  busi¬ 
ness  requirements. 

The  eyeball  effect  isn’t  the  only 
advantage  of  open-source  develop¬ 
ment.  but  it's  one  of  the  roost  pow¬ 
erful  —  and  it’s  the  easiest  one  for 
non-open-source  developers  to  crib. 

They  just  have  lo  be  willing  to  let 
lots  of  people  see  their  source  code. 

That’s  the  benefit  Sun  clearly  gets 
by  going  this  route  —  if  you  ignore 
the  politics  and  legalities. 


And  if  you  don’t  ignore  them?  Then  Sun  gets 
even  more. 

After  all.  Sun  may  not  really  be  making  Java 
open-source,  but  it  sure  looks  open-sourceish. 
doesn’t  it?  Rubbing  up  against  that  positive 
open-source  buzz  surely  won’t  hurt  Java. 

Then  there’s  the  curiosity  factor  Developers 
who  aren’t  that  interested  in  writing  Java  pro¬ 
grams  anymore  might  still  want  to  look  at  the 
Mustang  code.  Once  they  get  their  fingers  dirty, 
they  might  get  hooked  again. 

The  legal  implications?  Sun  won’t  have  a 
chance  of  claiming  that  anyone  has  stolen  its 
trade  secrets,  not  with  everything  out  in  the 
open.  But  anyone  else  who  thinks  Sun  has  in¬ 
fringed  on  intellectual  property  rights  in  Java 
won’t  have  an  excuse  for  failing  to  speak  up 
right  away  —  the  code  is  right  there  for  anyone 
to  see.  That  actually  puts  Sun  in  a  stronger  po¬ 
sition  for  defending  its  intellectual  property. 

And  if  Sun  really  does  get  large  numbers  of 
people  agreeing  to  its  relatively  restrictive  re¬ 
search  license,  its  terms  could  give  Sun  ammu¬ 
nition  should  the  company  ever  decide  to 

launch  its  own  legal  attack  against 
someone  Sun  thinks  is  improperly 
using  that  Java  source  code. 

Pretty  impressive  batch  of  impli¬ 
cations  for  Sun  deciding  to  use  the 
Java  Research  License,  isn't  it? 

True,  this  faux  open-sourcc  ap¬ 
proach  will  irritate  open-source 
purists.  But  let’s  face  it  —  Sun  real¬ 
ly  doesn't  care  if  those  purists  are 
pleasantly  surprised  or  not. 

And  when  you  consider  just 
what  Sun  gels  from  ’‘research- 
sourcing”  Java,  there’s  really  no 
surprise  at  all.  O  50697 
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FRANK  HAYES  ■  FRANKLY  SPEAKING 

Open-Source  Java? 

IT’S  NO  SURPRISE  that  Sun  Microsystems  put  the  source  code 
for  the  next  big  version  of  Java  up  on  the  Internet  last  week. 
OK,  maybe  it’s  a  little  surprise.  For  most  of  a  year,  Sim  has  re¬ 
sisted  a  campaign  by  IBM  to  convert  Java  into  an  open-source 
project.  Sun  executives  have  said  over  and  over  that  Java  will 
not  be  open-sourced  —  no,  never,  forget  it.  That’s  been  the  word  all 
up  and  down  the  Sun  chain  of  command. 

And  sure  enough.  Sun  didn’t  open-source  the  forthcoming  version 
of  Java,  code-named  Mustang.  Instead,  the  Mustang  source  code 
went  up  on  the  Net  under  the  Java  Research  License. 

If  you  aren’t  sure  just  what  that  means  —  well,  neither  is  Sun. 


Sun’s  director  of  Java  technolt^.  Matt 
Thompson,  says  that  the  implications  of  offer¬ 
ing  the  code  through  the  research  license  are 
still  under  investigation  [Quicklink  50865]. 

That's  putting  it  delicately.  The  Java  Research 
License  was  created  specifkally  for  universities 
and  researchers.  It’s  really  not  intended  for 
what  Sun  obviously  has  in  mind:  gettii^  a  lot  of 
open-source  developers  to  look  at  the  eaiiy 
snapshot,  kick  its  tires,  put  it  through  its  paces 
and  generally  give  it  an  open-source-style  once¬ 
over.  Thompson  even  announced  the  source 
code’s  availability  at  an  open-source  event  in 
SilkoD  Valley. 

That  makes  sense,  at  least  if  you  step  back 
from  the  open-source  politics  and  legalities.  No, 
Sun  doesn’t  want  to  give  up  its  control  of  Java. 
But  Sun  does  want  to  leveiage  the  ’’many  eye- 
balls”  effect  of  open-source  —  the  fact  that  the 
more  pec^le  you  have  looking  at  source  code, 
the  more  bugs  theyll  find. 

And  not  jtist  tidiat  we  traditionally  call  bugs. 
All  those  eyeballs  can  also  spot  inelegant  de¬ 
signs  and  problematic  approaches.  They  can 
bring  far  broader  experience  to  bear 
than  any  traditional  group  of  code 
reviewers,  and  they  can  apply  the 
perspective  of  end  users  and  busi¬ 
ness  requirements. 

The  eyeball  effect  isn’t  the  only 
advanu^  of  open-source  develop¬ 
ment,  but  it’s  one  of  the  most  pow¬ 
erful  —  and  it's  the  easiest  one  for 
non-open-source  developers  to  crib. 

They  just  have  to  be  willing  to  let 
lots  of  people  see  their  source  code. 

That’s  the  benefit  Sun  clearly  gets 
by  going  this  route  —  if  you  ignore 
the  politics  and  legalities. 


And  if  you  don't  ignore  them?  Then  Sun  ^ts 
even  more. 

After  all.  Sun  may  not  really  be  making  Java 
open-sotuce,  but  it  sure  looks  open-sotirceish, 
doesn’t  it?  Rubbing  up  against  that  positive 
open-source  buzz  surety  won’t  hurt  Java. 

Then  there’s  the  curiosity  factor  Developers 
who  aren’t  that  interested  in  writing  Java  pro¬ 
grams  anymore  might  still  want  to  look  at  the 
Mustang  code.  Once  they  get  their  fingers  dirty, 
they  mi^t  get  hooked  again 

The  legal  implications?  Sun  won’t  have  a 
chance  of  claiming  that  anyone  has  stolen  its 
trade  secrets,  not  with  everything  out  in  the 
open.  But  anyone  else  who  thinks  Sun  has  in- 
ffin^d  on  intellectual  property  rights  in  Java 
won’t  have  an  excuse  for  failing  to  speak  up 
right  away  ~  the  code  is  right  there  for  anyone 
to  see.  That  actually  puts  Sun  in  a  stronger  po¬ 
sition  for  defending  its  intellectual  property. 

And  if  Sun  really  does  get  large  numbers  of 
people  agreeing  to  its  relatively  restrictive  re¬ 
search  license,  its  terms  could  give  Sun  ammu¬ 
nition  should  the  company  ever  decide  to 

launch  its  own  legal  attack  against 
someone  Sun  thinks  is  improperly 
using  that  Java  source  code. 

Pretty  impressive  batch  of  impli¬ 
cations  for  Sun  deciding  to  use  the 
Java  Research  License,  isn’t  it? 

Thie,  this  faux  open-source  ap¬ 
proach  will  irritate  open-source 
purists.  But  I«’s  face  it  —  Sun  real¬ 
ly  doesn’t  care  if  those  purists  are 
pleasantly  surprised  or  not. 

And  when  you  consider  just 
what  Sun  gets  from  "research- 
sourcing”  Java,  there’s  really  no 
surprise  at  all  O  50687 
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Oracle  tops  Java  benchmark— 
for  the  third  time  in  a  row 


ORACLe 


oracle.com/perfomiance 
or  call  1.800.633.0759 


As  of  September  13, 2004:  Fujitsu-Siemens  Computers'  PRIMEPOWER  460/2500.  Orede;  5,991.73TOPSeMult»pleNode, 
664J0  Euros TOf>SeMultipleNode.  HP  Inteority  Superdome.  BEAWebLogic:  4,496.28TOPSeMultipteNode  T652/ 
TOPS@MuttipieNode.  IBM  eServer  xSeries  335  Ouster.  2.S75447DPS©MultipleNode,  $330.07TOPS©MultipleNode. 
Source:  Standard  Performance  Evaluation  Corporation  (SPEC)  http://www.specorB 
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Tbe  Fiiefox  Web  browser  has 
been  causing  a  commotion 
among  users  and  snaring  snip¬ 
pets  of  market  share  from  Mi¬ 
crosoft  Corp.’s  Internet  Ex¬ 
plorer  since  Jime  —  long  be- 
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CAHires ‘CEO-Elect; 
Dithers  on  User  Show 


Vendor  cancels  CA  World  2005 conference, 
then  restores  event  after  customers  complain 


n*  Dabbles  With  Hrefox,  but 
Few  Plan  to  Switch  From  IE 


fore  Version  LO  of  the  open- 
source  software  was  ofiBcially 
released  earlier  this  month. 

But  statistics  suggest  that 
corporate  users  aren’t  the  ma- 
jor  group  fueling  tbe  growth 
of  Fiiefox.  Tbe  new  browser’s 


Computer  Associates  Intema- 
donal  Inc.  last  week  named 
26-year  IBM  veteran  John 
Swainson  as  its  president  and 
future  CEO,  anointing  him  as 
die  successor  to  ousted  top 
executive  Sanjay  Kumar.  But 
in  a  rapid  succession  of 
events,  the  company  also  can¬ 
celed  its  CA  World  2005  user 
conference  and  then  reinstat¬ 
ed  the  event  after  getting  com¬ 
plaints  from  custtmiers. 

In  a  letter  sent  to  users  last 
Monday,  CA  said  it  had  decid¬ 
ed  to  postpone  tbe  next  CA 
World  until  tbe  spring  of 2006 
in  order  to  ‘’redefine”  tbe  show. 


most  dramatic  spikes  in  usage 
are  on  weekend^  according  to 
Chris  Hofhnan,  director  of  en¬ 
gineering  at  the  not-for-profit 
Mozilla  Foundation,  vriiich  de¬ 
veloped  Fiiefox. 

That  observatioD  was  borne 
out  by  an  e-mail  poll  of  IT 
manors  conducted  last  week 
by  Computerworld.  Only  two 
of  the  2S  respondents  said 
their  organizations  have  stan¬ 
dardized  on  Fiiefox.  Another 
II  said  they  have  tried  Fiiefox 
Fir^ox,  page  S7 


which  attracts  thousands  of 
attendees  from  around  the 
world.  But  in  an  interview  on 
Wednesday.  Swainson  said  the 
software  vendor  will  hold  CA 
World  2005  after  all,  although 
the  conference  will  take 
place  next  fall  instead  of 
in  April. 

Swainson  said  be  ini¬ 
tially  thou^t  the  deci¬ 
sion  to  cancel  next  year’s 
conference  made  sense  be¬ 
cause  as  a  relatively  new 
leader,  it  would  be  hard  for 
him  To  stand  up  and  articu¬ 
late  a  strong  strategy”  for  CA. 
Without  specifying  what 
promoted  the  chai^  in  CA’s 


thinking,  Swainson  said  he 
realized  that  some  users  were 
concerned  about  losing  mo¬ 
mentum  for  new  initiatives. 

CA  hasn't  set  a  date  for  the 
conference,  and  Swainson  said 
the  event  will  have  to  be  man¬ 
aged  by  an  outside  Arm  be¬ 
cause  some  of  the  workers 
who  helped  run  CA  World  in 
the  past  are  no  longer  at 
the  company.  But  be 
vowed  that  tbe  confer¬ 
ence  will  be  “something 
that  reaUy  does  live  up 
to  its  reputatioa” 

Gregg  Smith,  a  Windows 
NT  administrator  at  Media 
General  Inc.  in  Richmond, 

Va.,  said  he’s  glad  that  CA  is 
restoring  CA  World  2005.  But 
be  added  that  be  would  have 
CA,pngeJ6 
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Congress  approves  an  increase  in  the  H-1B  visa 
cap  -  making  almost  everyone  unhappy.  PAGE  9 


Cora  Carmody,  CK)  at  Science  Appications  bitemational  Corp., 
has  big  hiring  plans.  But  other  IT  execs  are  standmg  paL  PAGE  12 
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Executives  from 
Salesforcecomand 
Siebel  state  their 
rival  hosting  cases. 


IT  Dabbles  With  Rrefbx,  but 
Few  Plan  to  Switch  From  IE 


The  Firefox  Web  browser  has 
been  causing  a  commotion 
among  users  and  snaring  snip¬ 
pets  of  market  share  from  Mi¬ 
crosoft  Corp.’s  Internet  Ex¬ 
plorer  since  June  —  long  be¬ 


fore  Version  1.0  of  the  open- 
source  softw'are  was  officially 
released  earlier  this  month. 

But  statistics  suggest  that 
corporate  users  aren’t  the  ma¬ 
jor  group  fueling  the  growth 
of  Firefox.  The  new  browser's 
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CA  Hires  ‘CEO-Elect,’ 
Dithers  on  User  Show 


\  endor  cancels  ( Wbrid  2(M)5  confca'iicc. 
then  icstoa's  event  after  customers  complain 


8V  MATT  HAMBLEN 

Computer  Associates  Interna¬ 
tional  Inc.  last  week  named 
26-year  IBM  veteran  John 
Swainson  as  its  president  and 
future  CEO.  anointing  him  as 
the  successor  to  ousted  top 
excNTUtive  Sanjay  Kumar.  But 
in  a  rapid  succession  of 
events,  the  company  also  can¬ 
celed  its  CA  World  2005  user 
conference  and  then  reinstat¬ 
ed  the  event  after  getting  eom- 
plaints  from  customers. 

In  a  letter  sent  to  users  last 
Monda),  CA  said  it  had  decid¬ 
ed  to  postpone  the  next  CA 
World  until  the  spring  of  2006 
in  order  to  “redefine”  the  show. 


most  dramatic  spikes  in  usage 
are  on  weekends,  according  to 
Chris  Hoffman,  director  of  en¬ 
gineering  at  the  not-for-profit 
Mozilla  Foundation,  which  de¬ 
veloped  Firefox. 

That  observation  was  borne 
out  by  an  e-mail  poll  of  IT 
managers  conducted  last  week 
by  Computerworld.  Only  two 
of  the  25  respondents  said 
their  organizations  have  stan¬ 
dardized  on  Firefox.  Another 
11  said  they  have  tried  Firefox 
Firefox,  page  57 

KJIIITY  CHECK 

ONUNE:  More  than  90%  of  users 
accessxv  U.S.-faBsed  Web  sites  are 
stN  ninning  C.  usage  data  shows: 

OQuMUMi  51064 


I  which  attracts  thousands  of 
I  attendees  from  anmnd  the 
world.  But  in  an  interview  on 
Wednesday.  Swainstin  said  the 
software  vendor  will  hold  CA 
World  2005  after  all.  although 
the  conference  will  take 
place  next  fall  instead  of 
in  April. 

Swainson  said  he  ini¬ 
tially  thought  thedLN:i- 
sion  to  cancel  next  year's 
confcivncc  made  sense  be¬ 
cause  as  a  relatively  new 
leader,  it  would  be  hard  for 
!  him  “to  stand  up  and  articu¬ 
late  a  stamg  siratcg>”  for  CA. 
Without  specifying  what 
prompted  the  change  in  CA'.s 


'  thinking.  Swainson  said  he 
I  realized  that  some  usL'rs  were 
cimcerned  about  losing  mo¬ 
mentum  for  new  initiatives. 

CA  hasn’t  set  a  date  for  the 
conference,  and  Swainstm  said 
the  event  will  have  ii>  be  man¬ 
aged  by  an  itutstde  firm  be- 
j  cause  S4>me  itf  the  wtvrkers 
I  who  helped  run  CA  World  in 
the  past  are  nt*  longer  at 
the  company.  But  he 
vowed  that  the  confer¬ 
ence  will  be  “something 
that  really  does  live  up 
to  its  reputation.” 

I  Gregg  Smith,  a  Windttws 
I  NT  administrator  at  Media 
General  Inc.  in  Richmond, 

Va..  said  he's  glad  that  CA  is 
'  restoring  CA  W»trld  2005.  But 
;  he  added  that  he  would  have 
CA.  page  l(> 


Anything 


IT 


Fear  of  outsourcing  has  some  grad  students 
shunning  IT  for  business  degrees.  By  Dan  Verton 
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Server  OS 


BaTidr^Se^ 


"We  have  3,000  servers  at  customer  sites  worldwide. 
My  team  of  four  manages,  monitors,  makes  changes, 
and  does  upgrades  without  leaving  our  desks." 

Saeri  Fotenos 

IT  Manager,  Reuten 


Wmdews  Server  Systcfn'  etckida  these  products 


Operations  Infrastructure 


S)istem$  Management  Server 
IKpplicaUn  Centtr 


Internet  Secunty  &  Accewrabon  Server 
Windows*  Storage  Server 
SOI  Server' 


Applicatnn  Infrastructure 


Coreent  Management  Server 
Host  imegraion  Server 

Infarrrtaion  Worli  Intrastrunure  bchange  Server 


Make  a  name  for  yourself  with  Windows  Server  System. 

Microsoft  Windows  Server  System  makes  Reuters 
infrastructure  easier  to  manage.  Here's  how;  In 
the  past  updating  Reuters  servers  deployed  at 
customer  sites  required  dispatching  a  Reuters 
technician  to  the  customer  site.  But  now,  using 
Windows  Server  2003,  Reuters  can  manage 
everything  remotely,  allowing  them  to  invest 
their  resources  in  new  products  and  added 
services.  It's  software  that  helps  you  do  more  with 
less.  Get  the  full  Reuters  story  and  a  hands-on 
management  tool  at  mlcrosoft.com/wssystem 
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General  Admission 


Plus  2  ucSels  to  50 


Date:  February  14, 2005 
San  Francisco 

Visit  ca.com/etrust/worfcshop 

for  information  and  to  register  to  win. 
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It  takes  an  integrated  security  solution  to  make  sure  the 
right  people  have  the  right  access  at  the  right  time. 

eTrusf  Identity  and  Access  Management  Solutions 

These  days,  a  vital  aspect  of  security  management  is  providing  customized 
levels  of  access  for  countless  employees  and  partners  while  also  protecting 
your  customers  from  identity  theft.  That's  one  complicated  job-and  one  that 
can  be  made  much  easier  with  CAs  ©Trust  Identity  and  Access  Management 
{lAM)  Solutions.  They  enhance  security  and  reduce  costs  by  automating 
processes  and  enabling  self-administration,  in  addition  to  providing  policy-based 
cross-platform  protection  for  web,  mainframe,  and  application  resources 
enterprise  wide.  To  find  out  how  CAs  lAM  solutions  can  improve  your  business, 
attend  one  of  our  workshops,  ca.com/etrust/workshop 


Computer  Associates® 


NTEN1S 


6  In  Depth:  Hosted  CRM  apps 
find  a  place  at  some  tar^ 
companies,  but  users  remain 
skeptical  of  the  technology. 

8  PeopleSoft's  battle  against 
Oracle's  hostile  takeover  at* 
tempt  continues,  leaving  its 
users  in  limbo. 

9  Hewiett’Padiard's  Open- 
view  Automation  Manager 
tool  includes  technology 
acquired  with  Novadigm  and 
Consera  and  replaces  its  Utili¬ 
ty  Data  Center  offering. 

9  The  H‘16  visa  cap  is  raised 
by  20.000  in  the  2005  federal 
budget,  but  both  proponents 
and  opponents  are  unhappy. 

12  Demand  for  IT  professionals 

is  flat,  but  contract  woikers 
are  still  sou^t  after,  accord¬ 
ing  to  CIOs  and  recruiters. 

12  CIOs  ara  racruHod  from  out¬ 
side  of  companies  too  often 
instead  of  being  groomed 
from  within,  say  conference 
attendees. 

16  Global  Dispatches:  The  U.K. 
considers  unplugging  an  EDS- 
developed  child  support  sys¬ 
tem.  and  a  New  Zealand  start¬ 
up  says  it  has  built  a  low-cost 
RPIDchip. 

18  Macromedia  and  Nexaweb 

release  XML  development 
offerings  that  let  users  build 
build  thin-cUent  applications 
with  desktop-like  features. 

57  Einulex's  new  storage  switch 
supports  a  mix  of  old  and  new 
Fibre  Channel  tedmologies. 


Anything  but  [T 

In  the  Management  section:  Today’s 
college  students  say  an  advanced  degree 
in  IT  will  put  them  on  the  fast  track  to 
being  outsourced.  They  have  other 
plans,  and  they  mean  business.  Page  41 


32  Guarding  the  Grid.  Grid  com¬ 
puting  architectures  have  a 
way  of  magnifying  security' 
challenges  that  companies 
routinely  deal  with  in  nongrid 
environments. 

34  QuicifSti^  Digital  Light 
Processing.  This  system  for 
projecting  images  is  based  on 
an  optical  semiconductor  chip 
feom  Texas  Instnunents  chat 
contains  millions  of  tiny  mir¬ 
rors  that  are  individually 
moved  by  digital  signals. 

35  Book  Reviews:  Lining  Up 
Your  Linux  Library.  For  your 
reading  pleasure,  here  are 
four  new  guidebooks  with 
helpful  information. 

36  SacurflyMM^s  Journal: 
VPN  Evolution  Progressing 
to  SSL.  After  Mathias  Thur¬ 
man  decommissions  one  VPN 
technology,  the  replacement 
causes  new  problems. 


44  IT  Merrtor  So  You  Want  to 
Bo  a  Consultant  Think 
you're  ready  to  take  the  leap 
from  IT  praaitioner  to  hir^ 
expert?  CIO  Doug  Lewis  has 
been  there,  and  be  says  that 
you'd  better  be  able  to  answer 
five  key  questions  before  you 
quit  your  day  job. 

46  Book  RovMws:  Alignment, 
AIRgimont.  Alignmont 
Thomas  Hoffman  reviews 
three  books  on  IT/busmess 
alignment  and  appraises  his 
already  dog-ear^  project 
mana^ment  bible. 
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1  EIIER6IN6  TECHNOLOGIES 

1  Mesh  Moves  Into  tlw  Office 

In  the  Tachnolagy  lectian;  Wireless  mesh 
networking  products  can  ease  installation, 
but  the>‘  must  overcome  throughput  limita¬ 
tions  and  interoperability  problems.  Page  27 

10  On  the  Mark:  Mark  Hall  gets 
word  that  auditors  checking 
for  Sarbanes-Oxley  compli¬ 
ance  may  be  eyeballing  un¬ 
expected  IT  processes  and 
infrastructure  issues. 

22  Don  Tennant  has  heard 
enough  about  what  we're  all 
thankful  for.  Here's  his  list  of 
things  he's  bummed  about. 

22  Dan  Gillmor  believes  that  the 
FCC  too  often  heads  into  ter¬ 
ritory  it  should  leave  alone. 

23  Michael  H.  Hugos  says  build¬ 
ing  systems  that  are  "good 
enou^  for  now**  is  key  to 
turning  a  slow  bureaucracy 
into  an  agile  company. 

38  Daniel  J.  Weitzner  predicts 
that  the  software  and  hard¬ 
ware  running  the  physical 
plants  in  which  we  work  will 
soon  be  integrated  with  other 
information  systems. 

48  Oopai  K.  Kapur  breaks  down 
a  recently  reponed  project 
failure  and  says  the  managers 
didn’t  ask  the  right  questions 
beforehand. 

58  Frankly  peaking:  Frank 

Hayes  urges  IT  departments 
to  be  ready  as  users  ^ain 
steal  a  march  on  them,  this 
time  with  utility  computing. 
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Go  Ahead  *  Miss  My  DeadKne 

IT  MANAGEIIENT:  When  some  pcojects  fell 
behind.  ifS  the  deadline  that  hm  to  be  jetti¬ 
soned.  Insisting  that  things  remain  on  sched¬ 
ule  works  to  a  pcrint.  but  it  can  impede  good 
judgment,  consultants  Mkhael  Patterson 
and  Patricia  Pruden  say.  O  QoiddJBk 50684 

Ten  Questions  on 
Appfeation  Security 

SECURITY;  Ahhtsbek  Chauhan  ofTeros  offers 
this  cbeddtst  of  questions  to  ask  when  evalu¬ 
ating  products  u>  safeguard  your  infrastruc¬ 
ture.  OlMdlMi  497*2 

The  Vision  Tiling 

ST0RA6E:  Vendor  misrepresentatioas 
have  warped  die  original  visiQO  (^storage- 
area  netwodcs.  says  cohimnist  Ion  William 
Ibigo.  O  QMckLMi 60008 

Hands  On:  Mntando  DS 

MOBILE/WWELESS:  Wfth  the  holiday  shop¬ 
ping  seasoo  upon  us.  Contputerworkfs  game 
expert  Peter  Smitb  takes  a  look  at  one  of 
the  industry's  honest  gaming  devices. 

OQiMIMSSei 

News  nghttoVlDur  In-box 

Between  issues  ofCowyutenvofid.  keep  up 
wish  ail  the  IT  news  you  Deed  to  know  whh 
our  free  e-mail  oewsletters.  Subscribe  at 

O(WtMM(aM80. 
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Hosted CRM 

Looks  to  Step 
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Vendors  cite  large  deals  as  a  sign  of 
growing  acceptance  of  online  apps,  but 
skeptics  remain.  By  Marc  L  Songini 


November  has  been 
a  busy  month  for 
Salesforce.coffl  Inc. 
The  hosted  CRM 
pioneer  held  its  second  ann^^j^| 
user  and  developer  confer¬ 
ence.  where  it  introduced  a 
sofhvare  upgrade  that  became 
available  Nov.  15.  San  Francis¬ 
co-based  Salesfbrce.coni. 
which  went  public  in 
June,  also  reported 
third-quarter  revenue 
of  S46.4  million  and 
raised  the  sales  fore¬ 
cast  for  Hs  full  fiscal  year. 

And.  perhaps  most  signifi¬ 
cant.  the  company  announced 
a  1.500-user  subscription  deal 
with  office  supplies  retailer 
Staples  Inc.  and  a  2.000-user 
coffimitment  from  pharmaceu¬ 
tical  services  firm  Quintiles 
Transnational  Corp.  Those  are 
the  seventh  and  e^th  con¬ 
tracts  that  Salesforcexom  has 
signed  that  involve  more  than 
1.000end  users. 

Salesforce.com  CEO  Marc 
Benioff  said  last  week  that  be 
thinks  hosted  CRM  is  “now  at 
the  tipping  point."  with  main¬ 
stream  adoption  of  the  tech¬ 
nology  starting  to  approach  a 
critical  mass  of  users.  Rival 
vendors,  su^  as  Siebel  Sys¬ 
tems  Inc.,  also  are  rushing  to 
position  themselves  to  take 
advantage  of  an  expected  up¬ 
surge  in  demand  for  CRM. 


Chris  Monica,  senior  vice 
president  of  sales  and  market¬ 
ing  at  Houston-based  EGL 
Inc.,  which  operates  under  the 
name  EGL  Eagle  Global  Logis¬ 
tics,  has  already  embraced 
hosted  CRM.  Monica  said  that 
three  years  ago.  vriien  EGL 
was  looking  for  software  to 
help  standardize  its  global 
sales  processes  and 
make  them  more  nim¬ 
ble,  the  S2  billion  com¬ 
pany  decided  to  let 
someone  else  handle 
the  IT  headaches. 

Until  that  point,  EGL’s  800- 
person  sales  force  had  relied 
on  e-mail  and  other  manual 
processes  to  track  customer 
interactions  and  sales  oppor¬ 
tunities.  Now  sales  personnel 
at  the  provider  of  transporta¬ 
tion  and  supply  chain  l^or- 
mation  services  use  Sales- 
force.com’s  hosted  applica¬ 
tions.  That  has  made  it  easier 
to  share  data,  keep  track  of 
what's  in  the  sales  pipeline 
and  coordinate  mariceting 
campaigns,  accordii^  to 
Monica.  "SaJesforce.com  has 
been  a  vehicle  for  the  com¬ 
pany  to  connect  around  the 
world  in  real-time  fashion," 
he  said. 

The  traditional  knock  on 
hosted  CRM  applications 
been  that  they  primarily  ap¬ 
peal  to  smaller  companies  that 


would  find  installing  and 
maintaining  complex  software 
from  vendors  such  as  Siebel  or 
SAP  AG  a  budget  buster  —  as 
well  as  a  potential  technical 
nightmare. 

A  case  in  point  is  Document 
Sciences  Corp.,  a  Carlsbad, 
Calif.-based  vendor  of  docu¬ 
ment  management  software 
with  annual  sales  of  about 
S25  million.  David  Baricer,  the 
company's  IT  director,  said 
Document  Sdences  began  us¬ 
ing  NetSuite  Inc's  hosted  CRM 
applications  18  mnnths  ago  and 
currently  has  about  70  workers 


accessing  the  software. 

Prior  to  signing  up  with  San 
Mateo.  Calif.-based  NetSuite, 
Document  Sciences  relied  on 
a  hodgepodge  of  third-party 
and  homegrown  sales  and 
marketing  applications,  in¬ 
cluding  Amdocs  Ltd.’s  Clarify 
product  suite.  The  mix  of  soft¬ 
ware  required  IT  staffers  to 
store  duplicate  sets  of  cus¬ 
tomer  information  in  multiple 
databases.  Barker  said. 

He  added  that  the  first 
year's  cost  for  using  NetSuite’s 
software  was  under  S40,000  — 
less  than  it  would  have  cost  to 
renew  the  company's  Clarify 
license  —  and  that  covered 
twice  the  number  of  end 
users.  In  addition.  Barker  no 
longer  needs  to  worry  about 
hardware  support,  database 
tuning  and  software  upgrades. 
"I’m  asleep  when  the  upgrades 
^t  applied,"  he  said. 

InFact  Group,  an  e-business 
consulting  and  systems  inte¬ 
gration  firm  in  Piano,  Texas, 
uses  Siebel’s  CRM  OnDemand 
sales  and  service  tools.  InFact. 
a  Siebel  business  partner  that 
I  works  on  projects  involving 
the  vendor’s  software,  has 
25  hosted  users  and  pays  a 
monthly  fee  of  about  for 

each  one,  said  Richard  Napier, 
the  company’s  business  devel¬ 
opment  manager. 

"About  a  year  and  a  half  ago. 
InFact  was  a  disparate  set  of 
companies  around  the  globe, 
and  our  goal  was  process 
alignment  to  get  us  all  singing 


ROI  Potential 

itotings  of  hosted  CRM 
vendors  on  ^  ability  of  their 
teehnology  to  deliver  a  return 
on  investment  (o  users,  based 
onascoreqfJtoS: 


BASE:  Ftetings  we  composite  scores 
based  on  an  anatiise  o(  depioymem 
ssue&  sofiMre  usaMRy.  supimi  te- 
Qurements.  poierAal  bnness  impact 
and  vendor  uadi  reconfc  on  IW 


off  the  same  hymn  sheet." 
Napier  said  "But  we’re  not  a 
huge  company  and  didn’t  have 
the  time  or  infrastructure  to 
deploy  [CRM  software].  We 
have  to  be  smart  and  fast  off 
the  marie" 

Even  some  of  the  big  com¬ 
panies  among  the  10  hosted 
CRM  users  interviewed  for 
this  story  think  that  way. 

“We  didn’t  want  to  get 
bogged  down,"  said  William 
Patt^  director  of  sales  and 
policy  admimstration  at 
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Sovereign  Bancorp  Inc.  in 
Philadelphia.  The  $60  billion 
bank  began  using  sales  force 
automation  software  hosted 
by  Boston-based  Salesnet  Inc. 
two  years  ago.  About  420  end 
users  have  access  to  the  tools, 
according  to  Patten. 

Salesnet  CRM  offers  a  sim¬ 
ple  seven-step  sales  methodol¬ 
ogy  that  “doesn't  get  in  the 
way”  of  Sovereign's  opera¬ 
tions.  Patten  said.  He  added 
that  the  sofhvare  is  easy  to  use 
and  flexible  enough  to  handle 
business  needs  that  are  specif¬ 
ic  to  the  financial  services 
industry.  For  example.  Sever¬ 
ed  bolted  on  a  customized 
incentive-payments  utility  to 
support  its  employee  compen¬ 
sation  processes. 

Executives  at  Framingham, 
Mass.-based  Staples  weren't 
available  last  week  to  com¬ 
ment  on  their  hosted  CRM 
plans.  However.  Salesforce.- 
com  said  Staples  plans  to  roll 
out  the  applications  in  stages 
to  woricers  in  its  contract  sales 
division  nationwide. 

Quintiles,  wdiich  reported 
$13  billion  in  net  revenue  for 
this  year’s  first  three  quarters, 
has  been  using  Salesforce.- 
com's  sofhvare  in  one  busi¬ 
ness  unit  since  August  2002. 

A  Quindles  spokesman  said 
the  Raleigh,  N.C-based  com¬ 
pany  now  plans  to  deploy  the 
software  to  its  sales  and  mar¬ 
keting  teams  worldwide,  re¬ 
placing  a  set  of  homegrown 
applications.  The  on-demand 


nature  of  the  hosted  tools  will 
let  Quintiles  scale  up  its  use  of 
them  as  needed,  he  added. 

With  those  kinds  of  con¬ 
tracts  in  hand.  Salesforce.com 
raised  its  revenue  forecast  for 
the  fiscal  year  that  ends  |an.  31 
to  as  much  as  $174  million  — 
up  from  the  previous  range 
of  $165  million  to  $170  million. 
It  also  provided  initial  guid¬ 
ance  for  fiscal  2006,  saying 
it  expects  revenue  to  reach 
as  much  as  $285  million.  Hiat 
would  represent  a  year-to-year 
growth  rate  of  nearly  70%. 

Not  to  be  outdone.  CRM 
market  leader  Siebel  said  this 
month  that  Deutsche  Telekom 
AG's  T- Systems  International 
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hasbeenavehicie 
for  the  company 
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the  world  in  real¬ 
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GmbH  subsidiary  plans  to  de¬ 
ploy  Siebel's  hosted  software 
to  about  1.000  sales  workers 
worldwide.  CRM  OnDemand 
will  be  integrated  with  an  ex- 
istii^  2300-user  installation  of 
Siebel's  packaged  applications 
at  T-Systems,  an  IT  services 
firm  that  also  plans  to  market 
the  hosted  software  to  compa¬ 
nies  in  Germany  and  eight  oth¬ 
er  European  nations. 

Technicai  ShortexMnings 

The  fact  that  more  and  larger 
companies  are  adopting  host¬ 
ed  CRM  software  hasn't  gone 
uimoticed  by  analysts.  As  a 
rule,  though,  big  users  are  still 
keeping  their  distant^  from 
the  technology  because  of 
well-placed  skepticism  about 
the  ability  to  lii^  hosted  CRM 
applications  to  their  in-house 
software  and  to  support  cus- 
tomizations  through  succes¬ 
sive  product  releases,  said  Ian 
Jacobs,  an  analyst  at  Current 
Analysis  Inc.  in  Sterling,  Va. 

'‘From  the  perspective  of  a 
smaller  company,  what's  not 
to  love?'*  Jacobs  said.  But  if 
hosted  CRM  vendors  want  to 
continue  going  upscale,  they 
will  have  to  tackle  some  tou^ 
challenges,  he  added. 

For  example,  Jacobs  said 
that  vendors  need  to  offer  ex¬ 
panded  functionality,  such  as 
data  quality  services,  without 
making  the  hosted  technology 
too  complex  and  thereby  los¬ 
ing  one  of  the  features  that 
differentiates  their  product 
from  packaged  applications. 

Total  cost  of  ownership  is 
another  issue  chat  users  need 
to  consider,  according  to  Ja¬ 
cobs.  Hosted  CRM  vendors 
tout  their  offerings  as  being 
less  expensive  than  packaged 
software,  but  Jacobs  said  that 
may  not  be  the  case  when 
costs  other  than  the  purchase 
price  are  included  in  the  equa¬ 
tion.  Gartner  Inc.  analysts 
made  similar  points  in  a  re¬ 
port  issued  last  May. 

Hosted  CRM  sal^  total 
about  $200  million  now,  com¬ 
pared  with  rou^y  $2.8  billion 
for  licensed  CRM  software, 
said  Erin  lUnikin.  an  analyst  at 
Forrester  Research  Inc.  That 
makes  the  hosted  approach 
“small  potatoes  in  terms  of 
revenue,”  Kinikin  said.  But  she 


Siebel’s  Strategy  Gives  Users 
Freedom  of  Choice,  Exec  Says 


vice  B'esideiil  aot!  general 
manager  o<  Siebel'i.  CRM  On 
OtmaneJ  hosted  software  ser 
vice  and  its  devclnpment  and 
marketing  unit  tor  small  and 
mieJsire  businesses  (SMB) 
Siebel  launched  CRM  On 
Demand  'ast  fall  m  an  etfart 
to  catch  i»D  to  smaller  and 
nimbler  online  sofr- 
wate  vendors  such  as 
Salesfo'Cc  com  . 

Cleveland  spok*-  ff 
cently  »vilh  Compui- 
e/Hor/d  .about  Sicbc-i's 
two-pronqed  soMAan- 
strategy 

Oidn  t  S'Cbci  oppose 
launching  J  hosted  oNenng 
for  quite  some 


What  s  unique  to  * 
offering’’ 


Hoa  ,nu  t/iini.  ,iH,  star. I 
i/D  aqj'i'st  Satesfotm-  cin’- 
ano  yOii'  nth.--i  compi-ttiici' 


At-  ,iii.  selling  the  friitcc 
iP'jiicatio'".  t'j  thi  SMB  rna' 

u.ji  only"’ 


But  does  CRM  OnDemai'i;  , 
into  yOui  lii.ense  revenue 
Stream  .rstjlcrid  -;.ntt 


added  that  hosted  CRM  sales 
are  growing  at  an  annual  rate 
of  20%  to  30%.  while  sales  of 
traditional  products  are  flat  or 
declining. 

One  user  who  passed  on 
hosted  CRM  is  George  Chap- 
peUe.  CIO  at  H.J.  Heinz  Co. 
The  Pittsburgh-based  food 


products  maker  runs  Siebel  73 
internally  to  help  manage  its 
promotional  campaigns,  and 
Heinz  has  also  looked  at  host¬ 
ed  technology. 

“But  it's  not  very  interest¬ 
ing.”  Chappelle  said.  “We  al¬ 
ready  had  the  knowledge  in- 
house.”  O  51050 
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Hosted  CRM 

Looks  to  Step 
Things  Up 


By  Marc  L  Songini 


Novfmhfr  has  been 
a  busy  month  for 
Salesforcc.com  Inc. 
The  hosted  CRM 
pioneer  held  its  second  annual 
user  and  developer  confer¬ 
ence.  where  u  inti\>duced  a 
software  upgrade  that  became 
available  Nov.  15.  San  Francis¬ 
co-based  5iaIcsforce.coni. 
which  went  public  in 
lunc.  also  reported 
third-quarter  revenue 
ofS46.4  million  and 
raised  the  sales  fore¬ 
cast  for  its  full  fiscal  \var. 

And.  perhaps  most  signifi¬ 
cant.  the  company  announced 
a  1.500-uscr  subscription  deal 
with  office  supplies  retailer 
Staples  Inc.  and  a  2.000-u-ser 
commitment  from  pharmaceu¬ 
tical  services  firm  Quintiles 
Transnational  Corp.  Thtisc  arc 
the  seventh  and  eighth  at¬ 
tracts  that  Salesforcc.com  has 
signed  that  involve  more  than 
UXWend  U-sers. 

Salesforce.com  CEO  Marc 
Benio/T said  last  week  that  he 
thinks  hosted  CRM  is  “now  at 
the  tipping  poinC  with  main- 
staNim  adoption  of  the  fech- 
nolog)'  starting  to  appniach  a 
critical  ma.vs  of  users.  Rival 
vendors,  such  as  Siebcl  Sys¬ 
tems  Ine..  al.s»*  are  rushing  to 
position  themselves  to  take 
advantage  of  an  cvpecied  up¬ 
surge  in  demand  for  CRM. 


IN  DEPTH 


Chris  Monica,  senior  vice 
president  of  sales  and  market¬ 
ing  at  Houston-based  EGL 
Ine..  which  operates  under  the 
name  EGL  Eagle  Global  Logis¬ 
tics,  has  already  embraced 
hosted  CRM.  Monica  said  that 
three  years  ago.  when  EGL 
was  looking  for  software  to 
help  standardize  its  global 
sales  processes  and 
make  them  more  nim¬ 
ble.  the  $2  billion  com¬ 
pany  decided  to  let 
someone  else  handle 
the  IT  headaches. 

Until  that  point.  EGUs  800- 
person  sales  force  had  relied 
on  e-mail  and  other  manual 
processes  to  track  customer 
interactions  and  sales  oppor¬ 
tunities.  Now  sales  personnel 
at  the  provider  of  transporta¬ 
tion  and  supply  chain  infor¬ 
mation  services  use  Sales- 
force.com's  hosted  applica¬ 
tions.  That  has  made  it  easier 
to  share  data,  keep  track  of 
what’s  in  the  sales  pipeline 
and  ciKirdinate  marketing 
campaign.s.  according  to 
Monica.  “Salesforce.com  has 
been  a  vehicle  for  the  tom- 
p.iny  to  connect  around  the 
world  in  real-time  fashion." 
he  said. 

The  traditional  knock  on 
hosted  CRM  applications  has 
been  that  they  primarily  ap¬ 
peal  to  smaller  companies  that 


would  find  installing  and 
maintaining  complex  software 
from  vendors  such  as  Siebcl  or 
SAP  AG  .1  budget  buster  —  as 
well  as  a  potential  technical 
nightmare. 

A  case  in  pt>ini  is  Document 
Sciences  Corp..  a  Carlsbad, 
Calif.-based  vendor  of  docu¬ 
ment  management  software 
with  annual  sales  of  about 
S25  million.  David  Barker,  the 
company's  IT  director,  said 
Document  Sciences  began  us- 
uig  NetSuitc  Inc.’s  hoisted  CRM 
applications  18  month-s  ago  and 
currently  has  about  70  workers 


I  accessing  the  software. 

Prior  to  signing  up  with  San 
!  Matct>.  Calif.-based  NetSuite. 

I  l>ocument  Sciences  relied  on 
a  hiKlgepodge  of  third-party 
and  homegrown  sales  and 
marketing  applications,  in¬ 
cluding  Amdocs  Ltd.'s  Clarify 
pr.iduct  suite.  The  mix  of  soft¬ 
ware  required  IT  staffers  to 
store  duplicate  sets  of  cus¬ 
tomer  information  in  multiple 
databases,  Barker  said. 

He  added  that  the  first 
year’s  cost  for  using  NetSuite ’s 
software  was  under  S40.000  — 
less  than  it  would  have  cost  to 
renew  the  company's  Clarify 
license  —  and  that  covered 
twice  the  number  of  end 
users.  In  addition.  Barker  no 
longer  needs  to  worr>’  about 
hardware  support,  database 
tuning  and  software  upgrades. 
"I’m  asleep  when  the  upgrades 
get  applied."  he  said. 

InFact  Group,  an  e-business 
consulting  and  systems  inte¬ 
gration  firm  in  Plano.  Texas, 
uses  Sicbel’s  CRM  OnDemand 
sales  and  service  tools.  InFact, 
a  Siebcl  business  partner  that 
works  on  projects  involving 
the  vendor's  si^ftwarc,  has 
25  hosted  users  and  pays  a 
monthly  fee  of  about  S92  for 
each  one.  said  Richard  Napier, 
the  company's  business  devel¬ 
opment  manager. 

“About  a  year  and  a  half  ago. 
InFact  was  a  disparate  set  of 
companies  around  the  globe, 
and  our  goal  was  process 
alignment  to  get  us  all  singing 


ROI  Potential 


Rating.*!  ofhmted  CRM 
vendors  on  the  ability  of  their 
tfchnolo^  to  delix’cr  a  rvfum 
on  investment  to  u.ser.v.  haved 
on  a  score  of  J  to  >; 


RightNow 

Technolootes 

4.2 

Salesforce.com 

4.0 

Stebel 

3.8 

ACCPAC 

International 

3.6 

NetSuite 

3.4 

The  Savo  Group 

2.6 

Entellium 

2.6 

BASE:  Ratings  are  coffloOSAe  score 
liiased  on  arr  analysis  ol  drobyroeni 
ssues.  so^re  usaUity.  suopon  re 
Quirepnents.  polemial  busirress  ifnpaci 
and  vendor  (rack  reccxds  on  ftOt 

off  the  same  hymn  sheet.” 
Napier  .said.  “But  we're  not  a 
huge  company  and  didn’t  have 
the  time  or  infrastructure  to 
deploy  ICRM  software).  We 
have  to  be  smart  and  fast  off 
the  mark." 

Even  some  of  the  big  com¬ 
panies  among  the  10  hosted 
CRM  users  interviewed  for 
this  story  think  that  way. 

“We  didn’t  want  to  get 
bogged  down,"  said  William 
Patten,  director  of  sales  and 
policy  administration  at 


Benioff  Sees  Hosted  Apps  as  the  Future  of  Software’ 


ft  couM  be  aasfty  arpMd  ttiat 
.  Saieriofce.- 
com’s  ehatoman  and  CEO.  has 


of  horisd  CRM  and  maha  R  seem 
cradUi  tfiM  anyons  oIm  hi  the 
soflWM  biduihry  has.  Boflioft. 
a  fdnner  Orads  Corp.  execu- 
Bw.  feundsd  Ssleifarcs.coHi  hi 
1099.  Now  tfie  compmy  dahns 
that  Hs  heated  opplcrtleni  are 


uaad  by  abod  cm  eualemera 
wttfa  a  total  ef  196,000  and* 


cowttyapohiwfttCwsdiidf 
worMabeuttht  heated  CRM 


How  hoM  thhiQe  oone  shiea  you 
went  pubRe  in  Jyno?  I  INnk  our 
business  is  very  strong.  Were  start* 
ing  to  see  large  companies  come  to 
us  for  megaimplementations.  such 
as  SunGard  Data  Systems.  Sun* 
TrustBanKAOPandClscoS^- 
tams.  We're  sewng  a  model  where 
we're  doing  somethmg  unusual  and 
not  done  in  other  enter* 
prise  software  companies 
-ifsatiuedemoc^. 

Very  smd  companies, 
medium  companies  and 
ewnlargemega*in9le- 
mentabons  are  al  dm  on 
the  same  piece  of  csode. 


DkiSioboreenIryhilottwhost* 
edCRMnartwtvaRdateSelea’ 
forcoxom  oNirinti?  If  you  go 
back  and  look  at  the  histoty  of  aN 
the  things  Tom  Siebel  said  about 
us.  ft  was  that  we  won't  be  around 
ii  a  year,  this  wi  never  work  and 
big  companies  wil  not  be  interest* 
ed  in  this,  ft's  all  on  the  record.  Now 
ft  is  the  hilure  of  software 
[lor  Siebel  as  wel  as  for 
usl  and  that's  interesting. 


Do  yoythfohflit  number 
of  vwdentaRw  haded 
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Sovi'rcij'n  Bancorp  Inc,  in 
Philadelphia.  The  S60  billion 
bank  began  using  sales  force 
aulomation  software  hosted 
by  Boston-based  Salesnet  Inc. 
twt'  years  ago.  About  420  end 
users  have  access  to  the  tools, 
according  to  Patten. 

Salesnet  CRM  offers  a  sim¬ 
ple  seven-step  sales  methodt*!- 
ogy  that  "doesn't  get  in  the 
way"  of  Sovereign's  opera¬ 
tions.  Patten  said.  He  added 
that  the  softw’are  is  easy  to  use 
and  flexible  enough  to  handle 
business  needs  that  arc  specif¬ 
ic  to  the  financial  services 
industry.  For  example.  Sover¬ 
eign  bolted  on  a  customized 
incentive-payments  utility  to 
support  its  employee  compen¬ 
sation  prtKcsses. 

Executives  at  Framingham. 
Mass.-based  Staples  weren’t 
available  last  week  to  ei>m- 
ment  on  their  hosted  CRM 
plans.  However.  Salesforce.- 
com  said  Staples  plans  to  roll 
out  the  applications  in  stages 
to  workers  in  its  contract  sales 
division  nationwide. 

Quintiles,  which  reported 
S1.2  billion  in  net  revenue  for 
this  year's  first  three  quarters, 
has  been  using  Salesforce.- 
corn’s  software  in  one  busi¬ 
ness  unit  since  August  2002. 

A  Quintiles  spokesman  said 
the  Raleigh.  N.C.-based  com¬ 
pany  now  plans  to  deploy  the 
software  to  its  sales  and  mar¬ 
keting  teams  w’orldwidc.  re¬ 
placing  a  set  of  homegmw'n 
applications.  The  on-demand 


mark^  in  soAwse.  there's  going 
to  be  a  leader.  Typic^,  the  Indus* 
try  tends  to  aggregate  around  a 
leader  -  piAcrosoft)  in  ofBce  pro* 
ducthity  and  operating  stated 
and  it's  true  in  databases  with  Ora¬ 
cle.  The  [hosted  QTM]  market  is 
sM  young,  and  S8tesforce.com 
is  a  young  company,  only  in  busi¬ 
ness  lh«  years,  fm  sti  seeing  the 
market  tale  shape  and  form,  and 
how  it  wi  tun  out  is  up  to  the 
customers. 

What  aM  tetegnHen  af  your 
appiiciDQni  wm  ■aGR'rance 
tyeteM?  b  that  galteig  any 

•atear?  H's  an  irony  of  the  market 
that  people  think  8'shsdtento- 
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Freedom  of  Choice,  Exec  Says 
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vice  president  and  general 
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How  do  you  think  you  Stack 

up  against  Salesforce  com 

'  ■-  .  .Tlury-^J 

and  your  other  competition'^ 
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Are  you  selling  the  hosted 

applications  to  the  SMB  mar- 

ket  only?  . . *- 

But  does  CRM  OnDemand  cut 

.'  •'  p 

into  your  license  revenue 

•  .  .‘/r-  -  , 

strearri  for  installed  soft- 

ware? 
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nature  of  the  hosted  tools  will 
let  Quintiles  scale  up  its  use  of 
them  as  needed,  he  added. 

With  those  kinds  of  con¬ 
tracts  in  hand.  Salcsforcc.com 
raised  its  revenue  forecast  for 
the  fiscal  year  that  ends  Jan.  31 
to  as  much  as  S174  million  — 
up  from  the  previous  range 
ofSRo  million  to  S170  millivm. 

It  also  provided  initial  guid¬ 
ance  for  fiscal  200ft.  saying 
it  expects  revenue  to  reach 
as  much  as  S285  million.  That 
would  represent  a  year-to-year 
growth  rate  of  nearly  70'’ii. 

Not  to  be  outdone.  CRM 
market  leader  Siebel  said  this 
month  that  Deutsche  Telekom 
AG’s  T-Systems  International 


Salesforce.com 
has  been  a  vehicle 
for  the  company 
to  connect  around 
the  world  in  real¬ 
time  fashion. 

SENIOR  VICE  PRESIDENT  OF  SALES. 
EGLINC 


grate  With  ou  ser^.  Vfe  have  a 
MirfcustomerowdhSAPorFteople- 
Sofl  or  Grade.  They  run  Oracle 
applications  like  the  [E-Business 
Suite]  tv  payables  and  receKdiles. 
and  R's  inite^ted  wifo  Salesforce. 

In  ■  MnM.  doent  boitMl  CRM 
put  tetamal  IT  stsffare  at  your 
custemurs  out  of  a  job?  I've  nev¬ 
er  found  that  to  be  true.  Tvs  never 
had  anyone  contact  me  and  say. 
*¥00  cost  me  my  job.’ It's  more 
likely  a  true  statement  when  some- 
onesaystheyboughlXYZIsott- 
ware]  »d  ttever  got  N  up  run¬ 

ning,  and  it's  more  Vkeiy  that  cost 
them  their  job. 

-Ma/cLSongini 


GmbH  subsidiary,  plans  to  de¬ 
puty  Siebel's  hosted  software 
to  about  l.OOU  sales  workers 
worldwide.  i;RNi  OnlH?mand 
will  be  integrated  with  an  e.\- 
isting  2.80(»-user  installation  of 
Siebcl's  packaged  applic;«i«»ns 
at  T-Systems,  an  IT  serv  ices 
firm  that  also  plans  to  market 
the  hosted  software  to  compa¬ 
nies  in  Germany  and  eight  oth¬ 
er  Euixipean  nations. 

Technical  Shortcomings 

The  fact  that  more  and  lantcr 
cttmpanies  are  adopting  host- 
I  cd  CRM  software  hasn't  gone 
I  unnoticed  by  analysts.  Asa 
I  rule,  (hough,  big  users  are  still 
j  keeping  their  distance  fr«*m 
'  the  lechnokigy  because  of 
1  well-placed  skepticism  about 
I  the  ability  to  link  hosted  CRM 
applications  to  their  in-house 
software  and  to  suppi>n  ciLs- 
'  tomizatioiu;  through  succes¬ 
sive  product  releases,  said  Ian 
lacobs.  an  analyst  at  Current 
Analysis  Inc.  in  Sterling.  Va. 

■'Friim  the  perspective  of  a 
smaller  company,  what’s  not 
to  love?"  lacobs  said.  Bui  if 
'  hosted  CRM  vendors  want  to 
continue  going  upscale,  they 
will  have  to  tackle  some  tough 
'  challenges,  he  added. 

For  example.  |aci>bs  said 
'  that  vendors  need  to  offer  ex¬ 
panded  functionality,  such  as 
data  quality  services,  without 
making  the  hosted  technology 
too  complex  and  thereby  los¬ 
ing  one  of  the  features  that 
differentiates  their  product 
from  packaged  applications. 

Total  cost  of  ownership  is 
amithcr  issue  that  users  need 
to  consider,  according  to  la¬ 
cobs.  Hosted  CRM  vendors 
tout  their  offerings  as  being 
less  expensive  than  packaged 
software,  but  Jacobs  said  that 
may  not  be  the  case  when 
costs  other  than  the  purchase 
price  arc  included  in  the  equa¬ 
tion.  Gartner  Inc.  analysts 
made  similar  points  in  a  re¬ 
port  issued  last  May. 

Hosted  CRM  sales  total 
about  S200  million  now.  com¬ 
pared  w’ith  roughly  S2.8  billion 
for  licensed  CRM  software, 
said  Erin  Kinikin.  an  analyst  at 
Forrester  Research  Inc.  That 
makes  the  hosted  approach 
"small  potatoes  in  terms  of 
revenue."  Kinikin  said.  But  she 


added  that  hosted  CRM  sales  | 
arc  growing  at  an  annual  rate  | 
of  20%  id  30”«,  while  sales  of 
traditional  products  are  fiat  or 
declining. 

One  user  who  passed  on 
hosted  CRM  is  George  Chap- 
pellc.  CIO  31  H.j.  Heinz  Co. 

The  Pittsburgh-based  food 


products  maker  runs  Siebel  7.5 
internally  to  help  manage  its 
promotional  campaigas.  and 
Heinz  has  alsti  l<Mtked  at  hitst- 
ed  (echmili«gy. 

“But  it’s  mn  very-  interest¬ 
ing."  Chappcilc  said-  "Wc  al¬ 
ready  had  the  knt>wlcdgc  in- 
house."  O  5K)S0 
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Staff  Cuts  to  Cost 
HP  S200  Million 

Hewtet1'P»ckard  Co.  plans  (o 
spend  S200  mrlton  on  staff  re* 
diictiofts  over  the  next  six 
months,  the  company  said  last 
week  in  a  regulatory  filing.  HP 
didn't  specify  the  total  cuts  or 
which  business  areas  they  would 
affect.  HP  has  regularly  adfusted 
its  wmrliforce  since  buying  Com¬ 
paq  Computer  Corp.  In  the  first 
nine  months  of  its  2004  fiscal 
year.  HP  reported  restructuring 
costs  of  StOt  milikKL  HP  currently 
employs  about  145.000  workers. 


IBM  Buys  Insurance 
Processing  Rrm 

IBM  is  acquiring  Liberty  Insur¬ 
ance  Services  Corp.,  the  U.S. 
business  process  services  opera¬ 
tion  of  RW  Insurance.  When  the 
deal  doses,  US  will  become  an 
IBM  subsidiary  focused  on  handl¬ 
ing  life  insurance  and  annuity  pol¬ 
icy  processing  for  several  insur¬ 
ance  companies  worldwide.  IBM 
bought  the  firm  to  capture  part  of  I 
what’s  protected  to  be  a  S2  bdlion  ' 
global  market  next  year.  IBM  win  > 
retain  the  700  US  employees. 


Citrix  Makes  Play 
For  VoIP  Presence  ' 

Crtrlx  Systems  he.  last  week  i 

agreed  to  purchase  Nets  he.,  a  | 
privately  held  maker  of  Secure 
Sockets  Layer  virtual  private  net¬ 
work  technology,  for  SSO  mililon  I 
in  cash.  San  JoM-based  Nets  has  ! 
30  employees.  Citrix  said  the  ac-  | 
quisition  will  boost  its  stable  of 
secure  remote-access  technology 
and  give  the  company  a  foothold  I 
in  the  voice-over*IP  market. 


Ctngular  Plans  to 
Slash  Force  by  10% 

Ctngular  Wireless  LLC  last  wedt  I 
disclosed  plans  to  cut  about  10% 
of  ito  68.000  workers  over  a  12-  ' 
to  18-month  period  starting  next  i 
year.  The  company  confirmed  the 
layoff  figure  less  than  a  month  i 
after  completing  its  acquisition  : 

of  AT8T  Wireless  Servi^  Inc.  ' 


Users  Still  Victims  of 
Oracle/PeopleSoft  Saga 


W'itli  ix-soliition  of  takoowr  bid  months 
a\\';n,  tlic  only  errtainu  is  uncertain^ 


Obstacles  to  Oracle's 
Bid  for  PeopleSott 


BV  MARC  L  SONGINl 

EMPATI  I  H'  hRl’ 

w.irv  vendor  IVttplc- 
Siift  Inc-  Iasi  week  re¬ 
fused  to  capitulate  in 
its  long-running  battle  with 
poieniia)  purclwser  Oraele 
tA*rp..  despite  the  apparent 
will  of  a  maiority  of  share¬ 
holders.  keeping  corporate 
users  in  limbo. 

Pleasanton.  CaliL-hascd 
IVopleSoft's  botird  called  on 
Oracle  to  raise  its  hid  as  Ora¬ 
cle  appealed  to  l*eople.S«)ft 
directors  to  lift  their  strong 
poi.son-pill  anti-takeover 
I  meehanUms.  which  would 
likely  make  the  deal  unreast»n- 
I  ably  expensive  for  Oracle.  A 
I  judge  in  a  IX’lawarc  court  has 
,  agreed  to  hear  arguments  in 
the  case  Dec.  1?. 

While  the  fate  of  the  merger 
'  Is  still  uncertain,  recent  events 
don’t  bode  well  for  PetipleSoft 
users.  wh»)  have  struggled 
with  the  situation  for  months.  | 
"What  this  means  to  cus¬ 
tomers  is  increased  uncertain¬ 


ty  cau-sed  by  more  legal  wran¬ 
gling."  said  |uhn  Maielski. 
deputy  CIO  for  the  City  ofOr- 
lando.  a  PeopleSoft  shop.  “I’m 
comftMiable  with  the  products 
and  services  that  PeopleSoft 
provides,  and  thus  I  remain 
hi>peful  that  a  merger/acquisi- 
tion  dws  not  i>ccur.  Reicird' 
less  of  what  the  result  is,  it  s  in 
all  parties’  best  interest  that  a 
rapid  resiilutton  occur." 

fohn  Schindler.  CIO  at  light¬ 
ing  fixtures  maker  Kichler 
Lighting  Cn)up.  a  IVopleSoft 
shop  in  Ckneland.  said.  “Hav¬ 
ing  miw  worked  with  Oracle 
K-Business  applications ;»  well 
as  I\r«»pIeS«ft  in  my  career.  I’m 
as  committed  as  ever  to  the 
quality  and  lower  cost  of  otvn- 
ership  that  PcopleSiift  prt>- 
vidcs  KU  hlcr."  He  noted  that 
the  takctiver  effort  is  by  ru^ 
means  over,  as  the  proxy  and 
p(*Lson-pill  battles  continue. 


I  "Si-lfishly.  I  want  PeopleSoft 
'  Hi  sur\  ivc  a.s  an  independent 
company."  Schindler  said.  "I 
believe  Oracle  is  trying  to  buy 
a  customer  list  and  will  ulti¬ 
mately  kill  off  the  l*eopleSofi 
applications.  I’m  b<»peful  that 
this  will  die  during  the  piiison- 
pill  phase." 

IVopleSofi’s  hoard  declined 
to  accept  Oracle's  S4>-calIcd 
best  and  fimil  offer  of  S2-1  per 
share,  or  S').2  billion,  despite 
Oracle’s  claims  that  Wn  of 
PeopleSfft  stockholders  ten¬ 
dered  their  shares  in  favor  of 
the  sale  prior  to  its  deadline  of 
Nov.  l‘>,  Oracle  called  the 
shareholder  vole  a  '’mandate” 
for  approval  of  its  hostile  bid  to 
buy  its  competitor.  “We  believe 
it  is  tinn*  to  bring  this  matter  to 
a  chwe.  for  the  gt>od  t>f  IVople- 
Stift's  shareholders,  customers 
and  employees."  said  Oracle 


C.i'CCf'ibf(.';iv  OvFRfOMf 


Chairman  Icff  Henley  as  the 
votes  were  tallied. 

But  PcopJeSoft’s  board  has 
refused  to  budge  and  has  re- 
I  tained  the  poisim-pUI  mecha¬ 
nisms.  A.  (Jeorge  Battle,  chair¬ 
man  of  the  PeopleSoft  board’s 
transaction  committee,  said  in 
a  statement  issued  after  the 
vote  that  “we  would  be  willing 


Oracle  Plans  to  Add  Bl  Offerings 


ORACLE  <s  maneuvenng  to  txil- 
stor  Its  business  intelligence 
market  share  with  new  stand¬ 
alone  query,  reoorting  and 
analysis  tools  and  an  extension 
of  the  operational  reporting  in  its 
applications  suite. 

At  the  Oracle  OpenWorid  user 
conference  next  week,  the  com¬ 
pany  will  introduce  an  unbun¬ 
dled  query,  reporting  and  analy¬ 
sis  tool  set  that  was  previously 
packaged  with  its  application 
server,  as  well  as  enhancements 
to  the  Daily  Business  Intelli¬ 
gence  (D6I)  prebuitt  operational 
reporting  tool  that  ships  as  part 
of  Its  E-Business  ai^lication 
suite,  said  analysts  who  have 
been  briefed  by  Oracle 

Robert  Shrmp.  Oracle’s  vice 
president  of  technology  market¬ 
ing.  declined  to  provide  details 
about  the  announcements. 

However.  Dan  Vessel,  an  ana¬ 
lyst  at  (DC  who  has  been  bnefed 


by  Oracle,  said  the  company  is 
rebranding  the  query,  reporting 
and  analysis  tools  from  its  appli¬ 
cation  server.  The  rebranded, 
stand-alone  toots  will  be  sold 
separately.  Vessel  said.  arKt  they 
will  support  more  end-user  cus¬ 
tomization. 

'They  are  certainly  making  a 
bigger  push  in  61."  Vessel  said 
"They  were  always  focused  very 
much  on  the  database,  and  the 
surrounding  6t  tools  were  sec¬ 
ondary.  There  is  a  realization 
that  Bl  should  be  a  separate 
revenue  stream " 

Pnong  information  wasn't 
available. 

Oracle  also  plans  to  release 
specific  connections  to  transac¬ 
tional  tables  and  will  be  adding 
the  ability  to  answer  more  report¬ 
ing  questions  with  query  tables 
in  0&.  said  Keith  Gile.  an  analyst 
at  Forrester  ftesearch  Inc.,  who 
was  also  briefed  by  Oracle. 


I  H)  discuss  an  offer  made  by 
I  Oracle  at  an  appropriate  price 
I  —  but  S24  Ls  not  (hat  prici-." 

At  (hat  point.  Oracle  re- 
J  sponded  that  the  two  eompa- 
,  nics  wore  “obviously  at  an  im¬ 
passe.”  Oracle's  board  had 
urged  PeopleSoft  to  sell  with- 
«»ut  having  to  shift  the  take¬ 
over  fight  to  a  Heiawan.'  i.-«»urt. 
which  could  force  PeopleSoft 
to  lift  the  poi.st>n-pill  provi¬ 
sions.  or  to  the  shareholders 
via  a  proxy  battle,  which 
would  lake  place  next  spring. 

Although  it  lm>ks  like  it  will 
come  down  to  a  proxy  fight, 
"this  deal  just  mtwed  one 
more  significant  step  toward 
!  closing  in  Oracle’s  favor,"  said 
Joshua  Greenbaum.  an  analyst 
at  Enterprise  Applications 
Consulting  in  Berkeley.  Calif. 

Many  users  ju.st  want  the 
two  vendors  to  work  out  their 
differences,  ni»  matter  what 
the  result. 

Gary  Riley,  a  business  s^-s- 
tem.s  analyst  at  Matanuska 
Telephone  Association  Inc.. 
a  PeopleSoft  World  shop  in 
Palmer,  Alaska,  said.  “If  iht^ 
aa*  just  fighting  for  the  best 
dollar-per-sharc  figun-.  they 
should  be  sitting  down  at  the 
table  with  Oracle."  O  51057 


"The  e  not  meant  to  be  a  re- 
pfacement  for  traditional  data 
warehousing,  but  rather  an  ex¬ 
tension  to  the  applications."  Gile 
said.  ‘It  has  limitations  when  it  e 
compared  to  a  full  data  ware¬ 
house  but  is  a  solid  alt^native  to 
standard  reporting." 

Patricia  Dues,  president  of  the 
Oracle  Applications  Users  Group 
and  projeef  officer  for  the  Las 
Vegas  city  manager's  office,  wel¬ 
comed  fhe  enhancements  to 
DBI.  which  her  office  uses  to  re¬ 
port  against  Oracle  purchasing, 
financial  and  human  resources 
applications. 

“It  IS  a  product  that  is  of  high 
interest  to  application  users."  she 
said.  "It  has  some  views  already 
set  up  that  are  management- 
oriented.  [and]  it's  more  ad¬ 
vanced  than  your  typical  report 
wnter.  Usually,  you  have  to  have 
a  database  person  set  up  these 
views:  this  product  comes  with  a 
number  of  them  already  there." 

-  Heather  Havenstem 


AT  DEADLINE 


Staff  Cuts  to  Cost 
HP$200Minion 

HmfMl-Pacfcirri  Co.  plans  to 
spand  S200  mWon  on  staff  ro* 
ductlons  ovor  tha  noit  ill 
nwnihs.  tha  companir  sM  last 
ivaali  in  a  ragulstory  fBng. 
dUnl  spaeify  tha  total  cuts  or 
sMdi  hurinaao  araas  thoy  wouM 
affacl  HP  has  ragularly  adMtad 
its  amWorca  iinca  tw!^  Ceim 
paq  Conpular  Carp.  In  tha  first 
nhw  months  of  its  2004  Aacal 
yaar.  HP  raportad  raatnidiirlng 
coots  of  $101  mBon.  HP  eunantty 
amplays  about  145,000  amliars. 


IBM  Buys  Insurance 
Proces^Rmi 

IBMisacquiringUbaitybHur' 
anca  Sarvlcas  Corpn  tho  Its. 
businaatprocaassorvicasopara- 
ttan  of  RBC  bNBiranca.  Whan  tlM 
daal  doaaa,  US  aril  bacoma  M 
Wl  lubaiiiafy  fonwad  on  handh 
big  Ma  biauranca  and  amwily  pof- 
icypraeaaaingforsavotalinaur- 
anea  campanias  atorfdaMa.  IBM 
bought  tha  firm  to  captura  pail  of 
what’s  profoelad  to  bo  a  $2  UMon 
ghibal  maihat  nait  yaar.  BM  wM 
ratain  tha  TOO  US  ampfeyaaa. 


Users  Still  Victims  of 
Oracle/PeopleSoft  Saga 


With  resolution  of  takeover  bid  months 
away,  the  only  certainty  is  uncertainty 


Obstacles  to  Oracle's 
Bid  for  PeopleSoft 


BVMAnC  L.SOMOINI 

mbattledERP  soft¬ 
ware  vendor  People- 
Soft  Inc.  last  week  re^ 
ftised  to  capitulate  in 
I  its  long-ruiming  battle  with 
potential  purchaser  Oracle 
Corp.,  despite  the  apparent 
will  of  a  maiority  of  share¬ 
holders,  keeping  corporate 
users  in  Umbo. 

Pleasanton.  Calif.-based 
PeopleSoft’s  board  called  on 
Oracle  to  raise  its  bid  as  Ora¬ 
cle  appealed  to  PeopleSoft 
directors  to  lift  their  strong 
poison-pill  anti-takeover 
mechanisms,  which  would 
likely  make  the  deal  unreason¬ 
ably  expensive  for  Oracle.  A 
judge  in  a  Delaware  court  has 
agreed  to  hear  arguments  in 
the  case  Dccl3. 

While  the  fate  of  the  merger 
is  still  uncertain,  recent  events 
don’t  bode  well  for  PeopleSoft 
users,  who  have  struggled 
with  the  situation  for  months. 

'’What  thi.s  means  to  cus- 


1  “Selfishly.  I  want  PeopleSoft 
I  to  survive  as  an  independent 
'  company."  Schindler  said.  “I 
believe  Oracle  is  trying  to  buy 
a  customer  list  and  will  ulti¬ 
mately  kill  off  the  PeopleSoft 
applications.  I'm  hopeful  that 
this  will  die  during  the  poison- 
pill  phase." 

P^icSoft's  board  declined 
to  accept  Oracle’s  so-called 
best  and  final  offer  of  S24  per 
share,  or  S9.2  billion,  despite 
Oracle's  claims  that  60%  of 
PeopleSoft  stockholders  ten¬ 
der^  their  shares  in  favor  of 
the  sale  prior  to  its  deadUne  of 
Nov.  19.  Oracle  called  the 
shareholder  vote  a  "mandate” 
for  approval  of  its  hostile  bid  to 
buy  its  competitor.  “We  beUeve 
it  is  time  to  bring  this  matter  to 
a  close,  for  the  good  of  People- 
Soft's  shareholders,  customers 
and  employees,"  said  Oracle 


Chairman  Jeff  Henley  as  the 
votes  were  tallied. 

But  PeopleSoft’s  board  has 
refused  to  budge  and  has  re¬ 
tained  the  poison-piii  mecha¬ 
nisms.  A.  George  Battle,  chair¬ 
man  of  the  PeopleSoft  board's 
transaction  committee,  said  in 
a  statement  issued  after  the 
vote  that  “we  would  be  wilting 


Oracle  Plans  to  Add  Bl  Offerings 


Girix  Makes  Play 
For  ¥dIP  Presence 

CHrbt  Syutom  he.  hst  wMk 
agraad  to  pmbaM  Nal6  he.,  a 
prfwMaly  bald  imbar  of  Secure 
SedwtoLayvvirtualprfeatonat- 
umii  hdnntogy,  tor  $50  mMton 
h  caMi.  S«i  Jow-bnod  Nto6  has 
30  iwpInyiH.  Cftrix  aaMtfiaac- 
qufeWan  wM  baaal  fti  stobh  of 
aacure  ramato-aeeaaa  tocbnelogy 
and  gfva  tha  eonpany  a  foothoM 
h  tha  vofea-ovar-IP  marfcM. 


Cinguiar  Plans  to 
Sla^  Force  by  10% 

Owtar  tMnta,  U£  tan  Mck 
dtactand  piiita  to  cat  itail  10% 
a<j|s6AOOOiNf1taneHra12- 
ta  p«M  taafOng  nut 

IMT.  Ha  ampmy  oaninnd  On 
tamll  Dgn  taw  aun  I  taonHi 
altar  eawtaltai  taaewtaWon 
al  AIST  ¥IMaw  Santaw  he. 


tomers  is  increased  uncertain¬ 
ty  caused  by  more  legal  wran¬ 
gling,”  said  John  Matelsid. 
deputy  CIO  for  the  City  of  Or¬ 
lando.  a  PeopleSoft  shop.  “I’m 
comfortable  with  the  products 
and  services  that  PeopleSoft 
provides,  and  thus  I  remain 
hopeful  that  a  merger/acquisi¬ 
tion  does  not  occur.  Regard¬ 
less  of  what  the  result  is,  it's  in 
all  panics'  best  interest  that  a 
rapid  resolution  occur." 

John  Schindler.  CIO  at  light- 
iiq5  fixtures  maker  Kichler 
Lighting  Group,  a  PeopleSoft 
shop  in  Cleveland,  said,  “Hav¬ 
ing  now  worked  with  Oracle 
E-Business  applications  as  well 
as  PeopleSoft  in  my  career.  I’m 
as  committed  as  ever  to  the 
quality  and  lower  cost  of  own¬ 
ership  that  PeopleSoft  pro¬ 
vides  Kichler."  He  noted  that 
the  takeover  effon  is  by  no 
means  over,  as  the  proxy  and 
I  poison-pill  battles  continue. 


0RACt£  is  maneuvering  to  bol¬ 
ster  ds  business  mteigence 
market  share  with  new  stand¬ 
alone  query.  reporUng  and 
anaiyes  tools  and  an  exlension 
of  the  operational  reporting  in  its 
appHcahORs  state. 

Al  the  Oraefe  OpenMbrki  user 
conference  next  week,  the  com¬ 
pany  wi  introduce  an  unbun¬ 
ded  query,  reporting  and  analy 
sis  tool  set  Iftet  was  previousfy 
packaged  with  its  appKcition 
server,  as  wel  as  enhancements 
to  die  Oaiy  Business  Intei- 
gence  (0^  preUB  operational 
reporting  tool  that  ships  as  part 
of  its  E-fitsiness  application 
suie.  said  analysis  who  have 
been  briefed  by  Oracle. 

Robert  SNtnp.  Oram’s  vice 
preskfentoftadtfiologymarkBt- 
ing.  declined  to  provide  dstals 
about  the  annoificements. 

However.  Dan  an  ana¬ 
lyst  at  DC  who  has  been  briefed 


by  Oracle,  said  die  compere  is 
rebrandfeg  Ihe  query,  reporting 
and  analysis  tools  from  ds  appb- 
cation  saner.  The  rebranded, 
stand-alone  tools  wi  be  sold 
.  separately.  Vessel  said,  and  they 
wiH  support  more  enduser  cus- 
tomizabon. 

'They  are  certainly  mafeng  a 
bigger  push  In  BU  Vessel  said. 

wrere  always  loojsed  very 
much  on  the  databaea.  and  the 
surnuKlng  Bl  tools  ware  sec¬ 
ondary.  There  is  a  reefizabon 
that  Bl  should  be  a  separate 
revenue  stream.* 

(hieing  mformation  wasn't 
avtofebfe. 

Oracle  also  plans  to  release 
specific  connections  to  transac¬ 
tional  tables  and  wB  be  addfeg 
.  iheabMy  to  arwwf  more  report- 
ing  queMtons  wMi  query  tables 
in  D&  said  Kedh  Ble.  an  aialyst 
at  Forrester  Resaarch  ho.  who 
was  also  briefed  by  Oracle. 


to  discuss  an  offer  made  by 
Oracle  at  an  appropriate  price 
—  but  $24  is  not  that  price." 

At  that  point.  Oracle  re¬ 
sponded  that  the  two  compa¬ 
nies  were  “obviously  at  an  im¬ 
passe.”  Oracle’s  board  had 
urged  PeopleSoft  to  sell  with¬ 
out  having  to  shift  the  take¬ 
over  fight  to  a  Delaware  court, 
which  could  force  PeopleSoft 
to  lift  the  poison-pill  provi¬ 
sions.  or  to  the  shareholders 
via  a  proxy  battle,  which 
would  take  place  next  spring. 

Although  it  looks  like  it  will 
come  down  to  a  proxy  fight, 
“this  deal  just  moved  one 
more  significant  step  toward 
closing  in  Oracle’s  f^r,”  said 
Joshua  Greenbaum.  an  analyst 
at  Enterprise  Applications 
Consulting  in  Bericeley,  Calif 

Many  users  just  want  the 
two  vendors  to  work  out  their 
differences,  no  matter  what 
the  result. 

Gary  Riley,  a  business  sys¬ 
tems  analyst  at  Matanuska 
Telephone  Association  Inc.. 
a  PeopleSoft  Worid  shop  in 
Palmer,  Alaska,  said.  “If  they 
are  just  fighting  for  the  best 
doUar-per-share  figure,  they 
should  be  sitting  down  at  the 
table  with  Oracle."  O  S10S7 


nhis  is  not  metfit  to  be  a  re- 
glacanwni  for  tradbonal  data 
warehousing,  but  ralher  an  ex¬ 
tension  to  the  appkcalions.*  Gife 
sail  It  has  kmkabons  when  it  is 
comparedtoaftidatawm- 
house  but  e  a  sold  allamative  to 
'  standard  reportino.* 

(^Sttneia  Ons.  pfeskfent  of  the 
Oracle  Applcabons  Users  6n)up 
and  profed  officer  for  the  Las 
^feges  dhi  manager’s  office,  wd- 
corned  the  enfoncerriMTls  to 
;  D6L  which  her  office  IB6S  to  re- 
'  port  against  Oracle  purchasina 
ffoandai  and  human  resQinas 
:  Appa^iqtipns. 

H  Is  a  product  that  is  of  tagh 
interest  to  appicaHon  usets,*  she 
safe.  H  has  some  ^ews  already 
setitothataremanaoemecit- 
onentoljandjlfsmofead- 
tonced  than  your  typical  report 
wrier.  Uaurfy.  you  have  to  have 
a  databaae  pareon  set  up  these 
vfews;  this  product  comes  wfih  a 
rwnber  of  them  ikaady  there.” 

-HUftmHamckin 
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HP  Launches  Software  Automation  Manager 


•V  MATT  KAMSLEN 

Hewlett-Packard  Co.  tomor¬ 
row  will  unveU  a  management 
automation  software  product 
and  a  new  version  of  its  help 
desk  software  at  its  annual  Eu¬ 
ropean  user  conference,  Soft¬ 
ware  Universe,  in  Madrid. 

Hk;  new  HP  Open  View  Au¬ 
tomation  Manager  product  re¬ 
places  the  pricey  Utility  Data 
Center  ofFering  the  company 
dropped  last  month  [Quick- 
link  49774].  analysts  said.  It 
includes  technologies  HP  got 
when  it  acquired  Novadigm 
Inc  and  Coosera  Software 
early  this  year,  as  well  as  busi¬ 
ness  intelligence  software 
from  HP  Labs. 

Atitomatioo  Manager,  which 
will  ship  in  [anuary.  gives 
CIOs  an  automated  predictive 
system  for  managing  the  IT 


services  of  a  corporatioa  said 
David  Gee.  HP's  vice  presi¬ 
dent  of  woridwide  software 
marketing.  When  demands 
change,  the  software  automati¬ 
cally  optimizes  the  configura¬ 
tion  of  services  and  applica¬ 
tions  to  match  preset  service 
levels,  he  said, 

MocM-basad  Automation 

For  example.  Gee  said,  if  a  cor- 
poratbn  needed  to  add  1.000 
e-mail  users,  the  jKoduct 
would  help  model  the  process 
involved  and  automate  the  set¬ 
up  based  on  the  prelected 
length  of  the  process  and  the 
desired  level  of  e-mail  perfor¬ 
mance. 

At  its  heart,  the  new  soft¬ 
ware  relies  on  "model-based 
automattOD”  instead  of  build¬ 
ing  the  automation  from  basic 


scripts,  he  said.  “It's  a  lot  more 
flexible  and  robust."  Gee  said. 

Frank  GiUett.  an  analyst  at 
Forrester  Research  Inc,  said 
the  oflfering  is  an  important 
product  for  HP  that  is  "in  ef¬ 
fect  a  replacement  for  the 
Utility  Data  Center."  The  UDC 
hardware/software  bundle  was 
priced  in  excess  of  SI  million 
and  was  called  very  complex 
by  analysts.  “Before  this,  HP 
had  basically  a  muddle  strate¬ 
gy  where  they  wanted  you  to 
buy  UDC  and  software,”  said 
Gillen. 

Michael  Hanzlick,  project 
manager  at  T-Systems  Interna¬ 
tional  GmbH,  the  Frankfort- 
based  networking  branch  of 
Deutsche  Telekom  AG,  said  be 
will  test  Automation  Manager 
once  it’s  available.  *rhe  prod¬ 
uct  should  help  make  manage¬ 


ment  of  systems  more  precise, 
be  said,  adding  that  he  isn’t 
sure  vdiicfa  features  are  most 
important. 

T-Systems  has  been  using 
Open  View  products  since  1996, 
gradually  adding  features  as 
its  global  network  grew  to  350 
locations  with  3300  servers 
and  68,000  clients.  T-Systems 
added  Novad^m  management 
tools  two  years  ago.  and  Han- 


HPOpenView 
Automation  Manager 

■  Manapes  Mcrasott  Winclows 
and  Linux  blade  servets 


■  Support  for  HP-UX  to  come 


■  Costs  St.00Q  per  server,  or 
SIBOO  per  server  bunded  with  ffi* 
OpenView  tools 


zlick  said  he  expects  the  inte¬ 
grated  products  to  better  man¬ 
age  the  operation. 

“It's  ideal  that  HP  and  Nova¬ 
digm  work  together."  said 
Hanzlick.  T-Systems  uses  No- 
vad^m  to  create  a  "desired 
state  model"  of  bow  a  process 
should  run  in  the  event  of 
changes  in  system  usage. 

Stephen  Elliot,  an  analyst  at 
IDC  said  Automation  Mimag- 
er  will  provide  a  tighter  inte¬ 
gration  of  OpenView  prod¬ 
ucts.  But,  Elliot  added.  “I 
wouldn’t  say  it’s  bener  or  dif¬ 
ferent"  than  producu  from 
competitors  such  as  Computer 
Associates  International  Inc. 
or  IBM’s  Tfvoli  Software  unit. 

HP  is  also  expected  to  ship 
HP  OpenView  Service  Desk 
10  in  mid'200S.  It  will  feature 
a  new  Web-based  graphical 
user  interface  and  standard  re¬ 
ports,  as  well  as  servke-levd 
agreement  templates.  O  S107S 


H-1B  Backers  Want  Bigger  Increase  in  Cap 


■V  pathicm  tmiboocau 

The  20.000-visa  increase  that 
Congress  added  to  the  fiscal 
2005  H-IB  cap  just  before  its 
holiday  break  left  no  one  in¬ 
volved  in  tbe  contentious  is¬ 
sue  happy,  and  !T  trade 
groups  said  they  will  try  to 
further  raise  the  cap  next  year. 

The  proposed  legislation, 
which  was  included  in  tbe 
omnibus  federal  budget  bill 
approved  over  the  weekend 
prior  to  Thanksgiving,  would 
allow  foreign  nationals  with 
master's  and  Ph.0.  degrees 
from  U3.  univereities  to  apply 
for  H-IB  visas  during  the  gov¬ 
ernment’s  current  ftscal  year 

The  current  cap  of  61000 
visas  was  reached  on  Oct  L 
the  first  day  of  tbe  fiscal  year. 

'IVade  groups  and  IT  ven¬ 
dors  such  as  Microsoft  Corp. 
and  Intel  Coip.  had  urged 
Congress  to  raise  tbe  fiscal 
2005  cap,  as  had  technology 
users  such  as  Tbe  Goodyear 
Tire  &  Rubber  Ca  Dekpite  tbe 
vote  to  do  so,  some  H-IB  pro¬ 
ponents  said  that  tbe  legisla¬ 
tors  didn't  go  far  enou^ 

Tbe  number  of  additional 
H-IB  vdsas  needed  this  year 
“is  closer  to  SOpOO,"  said  John 
Palafbutas,  a  senior  vice  presi¬ 


dent  at  tbe  AEA.  a  ^^shing- 
ton-based  trade  group.  Large 
□umbers  of  students  graduat¬ 
ing  from  US.  universities  with 
advanced  degrees  in  fields 
such  as  computer  science  are 
foreign  nationals.  Proponents 
of  the  cap  increase  argue  that 
it’s  in  tbe  nation’s  best  interest 
to  keep  these  skilled  graduates 
here  and  that  an  H-IB  visa  is  a 
path  to  permanent  residency. 

But  opponents  say  that’s  not 
necessarily  tbe  case. 

Pitfi  to  Green  Card? 

Many  employers  "don't  use  the 
H-IB  visa  to  bring  people  into 
tbe  U3.  and  keep  them  here," 
said  Ron  Hint,  an  assistant  pro¬ 
fessor  of  public  policy  at  the 
Rochester  Institute  of  Technol¬ 
ogy  in  New  York.  Often,  IT  ser¬ 
vices  firms  simply  need  to  add 
workers  at  customer  sites,  ac¬ 
cording  to  Hira.  “They're  not 
trying  to  sponsor  people  for 
green  cards,"  he  said. 

That's  true  at  Tata  Consul¬ 
tancy  Services  Ltd^  a  Mumbai. 
India-based  IT  services  firm 
with  operations  worldwide. 
Tata  Im  about  SjOOO  employ¬ 
ees  in  North  America,  primar¬ 
ily  in  tbe  US,  and  about  7,200 
of  them  are  here  on  some  kind 


of  visa.  Among  its  U3.  worit- 
ers,  about  65%  have  H-lBs,  and 
the  remainder  bold  L-1  visas, 
said  spokesman  Victor  Chayet. 

He  added  that  many  of 
Tata's  U3.-based  employees 
are  graduates  of  universities  in 
India  and  that  only  a  handful 
ever  seek  permanent  residen¬ 
cy  here.  Tbe  company  doesn’t 
discourage  vrorkers  from  ap¬ 
plying  for  green  cards,  but 
its  service  delivery  model  is 
based  on  tbe  ability  to  move 
people  from  country  to  coun¬ 


try  as  needed.  “Kcepir^  that 
fluid  workforce  is  to  our  bene¬ 
fit,"  Chayet  said. 

Groups  representing  high- 
tech  workers  opposed  any  in¬ 
crease  in  this  year's  H-IB  cap. 
AI  Gray,  executive  director  of 
the  National  Society  of  Profes* 
skmal  Engineers  in  Alexan¬ 
dria,  Va.,  said  current  indica¬ 
tions  are  that  there  “are  no  re¬ 
ally  serious  shortages"  of  engi- 
neerix^  and  IT  workers. 

But  Joanna  Smith  Bers, 
managing  director  of  OB 
Marketing  Technologies  LLC 
a  consulting  firm  in  New  York, 


L-1  Vha  Users  Face  New  Restrictions 


ALTNOUm  Congraas  IM  Ihe 
H-Cca(),la|]proMdnMtm- 
sbldionB  on  ta  L-l  visa  pro¬ 
gram,  wNch  some  ones  vim 
as  a  piima  vaNda  lor  ahMng 
US.  Jobs  to  kpiMrpaid  workao. 

L-IvtasiatmMioiaicor- 
pottolons  latocato  emptoyeas  to 
the  US  thraui^  Micoinpany 
trandva.  Bui  legiBtalofs  and  ^ 
job  acMatt  who  wMit  to  rein  In 
the  L-1  progran  ctoim  thd  some 
oofflpanieB  uaa  the  viaaa  to  bring 
taioraignaartatstoailherre* 
ptooaeiMngeraployaaaorcorh 
tract  out  to  otfiar  bi^nesaas. 


The  tatter  prictlca  la  vtoal  the 
change  prapoaad  by  Contpaes 
is  Mandad  to  atop.  Specflcaly. 
toe  maaaua  aiodd  require  that 
any^spedafaadievMiBdgearn- 
pk^*  brought  to  toe  US  on 
anL-IvtoabeconbolBdandsu* 
pervlMd  by  toe  compeny  toaf 
aubnrittod  toe  vtoa  peHim 
John  Bumen,  praaidenl  of 

The  OrgmaNon  lor  toe  Rl(toto 

-t » — I — — ij-- 

or  wnencan  vaarNBri,  a  mnoen. 
CorvL-baaed  tpoig)  formed  by 
lakKifl  Mgh-toch  wQikres.  add 
toe  laghMian  ahodd  ham  a 
mi|or  impact. 


said  she  has  had  trouble  find- 
ing  job  candidates  from  U5. 
schools  who  have  strong  math 
and  statistics  training  and  who 
understand  business. 

"I  would  like  Qothing  bener 
than  to  hire  Americans  for 
these  positions,"  she  said.  "My 
challenge  is  that  the  people 
who  have  the  education  and 
tbe  background  are  coming 
from  abroad.*  O  S1062 


VM  out  IHB  speoM  ooKwioe  paoB 

^(MeUMiiiaoo 


Baunrei  said  tod  even  I  US 
«Nirknrsloaa20.000)otabe- 
cauM  of  toe  proppaad  increase 
in  the  H-C  vtM  capi  Ihey  may 
gam  200.000  on  L-to  not  betog 
able  to  work  at  a  tokd  party.” 

Bui  otoars  aren't  so  aura. 
'Wiehwar  Mnd  of  toar  ia  pasaed. 
somaona  M  a  «Mv  around 

or  over  or  torough  k.  So  f  s  a 
matoof  Marontabon  and  how 
companiaa  advl  to  toeae  new 
restocSons,”  said  Vto  OIWI.  ae- 
nioflnghidkiaiiTianiiitiSlwiat 
lESHJSA.  a  unit  of  toe  inathjie 
of  BKkical  and  BedranlB  En- 
Otoaos  Inc.  in  WrehingtarL 

-MckTModsau 
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IBM,  Honeywel  in 
$2S0M  Tech  Pact 

IBM  Md  Homywvl  Mamationd 
he.  lift  wMk  ti^Md  a  lO-yaar 
anohaarhgandtachnohgysar- 
vicatdaalworthuptoS260ml- 
len.TlMaareamafl(givaaHonay- 
wal  accaaa  to  eiTa  anohaarifiB 
aiparttoa  and  h  dtaignad  to  spaad 
Honaywnrtpreducttenoffial- 
woritcantricbaWtoftaldcocnpa- 
nanto  and  syatoms.  BH  tail 
noatot  ndKliry  and  aareapaca 
raaeurcaa  and  aaparfiaa,  at  wal 
aa  accaaa  to  aatonica  and  vahteto 


Saab  Taps  Hyperion 
For  Finance  Project 

Saab  AB  haa  aqraad  to  kMEtal 
Hyparian  Sotottona  Cofp.'a  Fhan* 
eW  Hanaganant  aMcalien  to 
raplaca  Ms  htaraaly  davaiopad 
conaoUalton  syatom  and  apraad- 
thaai  haaad  raporthg  systom.  Fh 
nanciaJ  datoli  warant  dhelaasd. 
Saab  aneoByaa  said  tfray  axpaet 
toaaoftoaaatoimpravathaflBxi' 
UMy  of  iia  dstonsa  and  asroapace 
canatony’a  rapsrfhB  systom. 


Limn  Desktop 
Effort  Gets  a  Boost 

Seafei  Carp,.  8  mafcar  ef  dasfctop 
■ppBraWnna  far  Lima  aystows. 
jatosd  Opan  Sourea  Payatopmant 
Labs  he.  fa  an  affart  to  halp  push 
Mia  ipiaadal  dasfctop  Uniia.Scal- 
ht  wahas  Lban  baasd  a-maM  and 
Fiisnda»fapapplcalhwa.Tlianen- 
prett  OSOL.  tonaad  to  fsator  (ha 
apraad  M  Umn  fato  Mia  anlar 
prisa,  cfafcM  asvaral  top  systom 


Systemcorp  Joins 
IBM’s  Rational  Unit 

■MfaataiaafcsaidMhaacainplat' 
ad  Ms  aetodaMtan  ef  Systoncarp.  a 
manatactoiar  ef  praM  partMfa 


earp'a  TO-^arsan  aparaMan  fa 
Meninal  be  fatopratod  fate 
•M’s  talianal  unM.  BM  wM  ship 
Systoraearp  efhrtags  fa  SO  days. 


[MTHMUK 


HOT  TECHNOLOGY  TRENDS,  NEW  PRODUCT 
NEWS  AND  INDUSTRY  GOSSIP  BY  MARK  HALL 


Shouldn’t 


rr 


assets"  sec¬ 
tion  of  Audit¬ 
ing  Standard 
Na  2,  Chop- 
side  asserts 

that  auditors 
will  be  keen 
to  look  at  all 

,vi|l 

internal  op- 

'l’i|  iJwru 

erations  that 
could  "have  a 

...  whafs  under  ttw  covers  of  a  fully  compliant  fschnology 
asset  base.  “That’s  especially  true  in  the  financial  in¬ 
dustry."  says  Ed  Chopskie,  vice  president  of  enter¬ 
prise  technical  marketing  at  San  Diego-based  Pere¬ 
grine  Systems  Inc.  Pointing  to  the  “safeguarding  of 

ally  alTcct  the  ^nancial  health 
of  your  business.  Not  surpris* 
ingly.  Peregrine  su^sts  that 
using  its  asset'tracking  and 
expense-control  tools  will 
help  you  achieve  Sarbanes- 
Oxley  compliance.  Those 
products  will  be  joined  by 
process  automation  and  asset 
optimization  software  next 
year.  Chopskie  says. 

Microsoft  CRM  bucks 
subscriptkNi  model... 

. . .  as  99%  of  Ms  cunml  usDre 
opt  to  Icanas  and  fastal  Mm  ap- 
pMcsMons.  David  Thacher.  gen¬ 
eral  manager  of  CRM  at  Mi¬ 
crosoft  Corp^  says  that  only 
1%  of  the  more  than  2,500 
Microsoft  CRM  customers 
have  opted  to  have  the  soft¬ 
ware  hosted  for  them  on  a 
subscription  basis.  Although 
licensing's  dominance  is  im¬ 
pressive,  it’s  largely  a  result  of 
the  hurt  that  Microsoft  is  still 
putting  the  rmishing  touches 
on  its  Service  Provider  Li¬ 
cense  Agreement  (SPLA), 
which  will  spell  out  the  terms 
under  which  service  pro¬ 
viders  can  rent  the  software 


material  effect  on  the  compa¬ 
ny."  In  the  financial  services 
industry,  which  is  heavily 
dependent  on  IT.  virtually 
everything  will  face  the  audi¬ 
tor’s  sniff  test,  be  claims. 
Chopskie  says  be  expects  that 
in  addition  to  the  obvious 
workflows  and  controls  built 
into  finance-related  systems, 
auditors  may  nose  around 
your  IT  procurement  proc¬ 
esses  or  the  state  of  your  soft¬ 
ware  license  compliance. 

Let's  imagine  that  critical 
software  you  use  relies  on  the 
continued  virility  of  a  ven¬ 
dor  in  Chapter  U.  or  that  you 
have  only  one  licensed  cc^ 
of  hiicrosoft  Office,  but  It's 
installed  on  10.000  desktops. 
Either  situation  could  materi- 


to  users.  Expect  the 
lawyers  to  complete 
the  SPLA  tome  in  the 
spring,  Thacher  says. 

If  er.  when  it's  com¬ 
pleted.  look  for  the 
percentage  of  sub¬ 
scription-based  users 
to  rise  dramatically. 

Thacher  says  to  also 
expect  expanded  re¬ 
ports  in  the  next  release  of 
Microsoft  CRM,  thanks  to  the 
addition  of  new  SQL  Server 
Reporting  Services  function¬ 
ality.  A  good  guess  is  that  the 
CRM  unit’s  200  developers 
will  beat  Microsoft's  myriad 
lawyers  and  deliver  the  up¬ 
date  in  early  2005,  ahead  of 
the  SPLA. 

Don’t  lose  business  due 
toWefasIteenors... 

...  Milt  dfacouraoB  onAna  vW- 
tore.  Fix  the  errors  and  save 
a  bunch  o'  dough  on  your  IT 
costs,  advises  Mike  Gabrys, 
co-owner  of  BikeSmartcom. 
the  online  retail  arm  of 
Mike’s  Bicycle  Centers  of 
Northern  California  in  San 
RafaeL  Everything  on  Bike- 
Smart’s  Web  site  is  custom- 
written.  "And  we  like  it  a  lot," 
Gabrys  says.  But  custom¬ 
ization  made  it  harder  to 
troubleshoot  and  remediate 
persistent  400-  and  500-class 
errors  that  the  Web  site  was 
generating.  In  addition,  the 
site's  response  time  was  dis- 
appointuig.  be  says.  At  first. 
BikeSmart’s  developers 
thought  the  problem  was  in 
the  company’s  ColdFusion- 
based  online  shopping  appli¬ 
cation.  But  affer  installing  an 
Xfire  Web  site  monitoring  ap¬ 
pliance  from  Xaffire  Inc^  they 
discovered  a  flaw  in  their 
MySQL  dat^iase  implemen¬ 
tation  that  was  causing 
most  of  the  problems. 

One  of  the  bi^st  benefits 
BikeSmart  has  realized 
since  installing  the 
monitoring  device  is 
that  lower- 
level  IT 
staffers 


SQL  R»-|>tiiiiiii^ 
Services  One 


can  use  it  to  solve 
problems,  freeing  se¬ 
nior  developers  to 
work  on  other  proj¬ 
ects,  Gabrys  says. 
David  Jilk,  CEO  of 
Xaffire  in  Superior, 
Colo.,  says  Version  3.2 
of  the  Xfire  software 
will  be  released  for 
beta-testing  this  week. 
It  will  add  filtering  capabili¬ 
ties  and  the  ability  to  store 
the  information  it  gathers  in 
relational  databases.  Xfire 
pricing  starts  at  $28,000. 

Database  unlocks 
performance... 

. . .  boWtonaefc  fa  tradMonal  rala- 
Mooal  systonw.  Kenneth  Ruoto- 
lo,  diief  financial  officer  at 
Burlingame,  Calif -based  Ants 
Software  Inc.,  says  that  much 
like  the  QWERTY  keyboard 
was  designed  to  slow  down 
typists,  RDMS  technology 
hailing  from  the  late  1970s 
and  early  1980s  used  "sequen¬ 
tial  locking”  as  a  way  to  slow 
down  transaction  processing. 
That  was  done  because  the 
databases  had  to  contend 
with  tiny  netwotk  pipes  and 
time-sharing  environments, 
he  explains.  Ruotolo  claims 
that  his  company’s  Ants  Data 
Server  processes  all  transac¬ 
tions  in  parallel  and  "virtually 
eliminates"  locking.  Plus,  he 
says,  the  software  was  de- 
s^ned  to  take  advantage  of 
huge  amounts  of  memory  as 
well  as  disk  space,  so  it  can 
use  an  entire  storage-area 
network  as  its  database  mem¬ 
ory  if  necessary.  Ants  Data 
Server  2.5  is  due  in  the  first 
quarter  of  2005  with  support 
for  systems  based  on  Ad¬ 
vanced  Micro  Devices  Inc.'s 
Opteron  chip.  The  sofitware 
costs  S25J)00  per  CPU 
OS1002 
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You  have  to  reconfigure  your  infrastructure.  Got  a  second? 


The  highly  dependable  HP  BlodeSystem  feotures  Intel*  Xeon’“  Processors.  Now  it's  possible  to  reoct  to  changing  business  conditions  in  real  time— in  seconds. 
Applicotion  deployment  and  reprovisioning  become  an  automoted  process.  From  single  console  remote  monogementtoupfol9%  power  savings  —the  HP  BlodeSystem 
is  designed  to  save  you  time,  money  and,  quite  possibly,  your  sanity.  Which,  of  course,  could  be  the  most  compelling  reason  of  all  to  learn  more. 


THE  SOLUTION 

THE  BENEFITS^ 

HP  ProLiant  BL30p  Blade  Server 

•  3  Inlat*  Xnn~  ProceuoK  DP  upto  3.20GHz/2MB 

•  High  density:  Up  to  96  servers  per  rodi 

•  HP  Systems  ktsaghi  Mdnoger**:  Web-bosed  neivtodigd 
tnonogmem  through  a  sin^  console 

’  flexible/open:  Integiijles  vndi  eusling  irdreBiructure 
’  Sapid  Deptoymenl  tadc  For  eose  el  deployment 
ond  ongoing  provisierMng  and  reprovisioning 

•  23%  sovings  on  ocquoAon  cost 

•  Up  to  19%  less  power  consumption 

•  Up  to  93%  fewer  cobles 

'  Hor-swoppobfe  server  design 
■  Smgfe  interlace  fer  mlegialud  remote  monogemem 
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CIOs,  Recruiters  Split 
On  rr  Job  Prospects 

/^T/~V-^ £..lt  •  •  .  .  _  ,  .  - 


CIOs  say  full-time  hiring  remains  flat 
but  contract  workers  are  still  in  demand 


■V  TMOMA«  MFPMAM 

Recruitment  agency 
oificiabazid  corpo¬ 
rate  CIOs  are  paint¬ 
ing  very  different 
pictures  of  the  current  outlook 
ibr  IT  hiring. 

More  than  a  dozen  CIOs 
and  corporate  recruiters  inter¬ 
viewed  last  week  said  their  or- 
gaoizatioas  are  being  prudent 
about  adding  full-time  IT 
workers  in  order  to  bold  down 
expenses.  These  companies 
are  typically  opting  for  con¬ 
tract  workers  to  help  meet 
their  near-term  proiect  and 
support  requirements. 

At  the  same  time,  executives 
at  recruiting  agencies  said  at 
this  month’s  Recruiting  2004 
Conference  in  New  York  that 


job  postings  for  IT  woriters 
have  reached  the  highest  lev¬ 
els  since  the  dot-com  bust  in 
2001.  signaling  a  rebound  in 
the  U.5.  IT  job  mariKL 
Dennis  rallahatr,  CIO  at 
The  Guardian  Life  Insurance 
Company  of  America,  said 
'^‘re  close  to  flat  in  perma¬ 
nent  staff  from  year  to  yean** 
Any  near-term  additions  to 
New  York-based  Guardian's 
401-person  IT  staff  —  which  is 
augmented  by  200  offshore  IT 
consultants  —  will  focus  on 
replacing  workers  who  leave 
and  hiring  specialists  in  tech¬ 
nologies  like  W^Spbere  and 
IT  security.  Callahan  said. 

Wyndham  International  Inc 
has  no  plans  to  expand  its  82- 
person  IT  department  with 


more  full-time  staffers,  said 
senior  vice  president  and  chief 
technology  officer  Marie  Hed- 
ley.  Instead,  the  Dallas-based 
hotel  chain  will  round  out  its 
workforce  with  contract  work¬ 
ers  as  needed  to  meet  peak  de¬ 
mands.  “We  have  taken  a  con¬ 
servative  approach  on  the 
economy  and  will  match  our 
IT  spending  with  the  growth 
of  the  company.**  Hedley  said. 

Mfawd  Outlook 

That's  consistent  with  the  sen¬ 
timent  of  other  CIOs  as  eco¬ 
nomic  forecasts  cootimie  to  be 
mixed.  For  example,  while 
some  signs,  such  as  the  stock 
market’s  recent  rise,  have  been 
positive,  a  composite  iiulex  of 
economic  indicators  compiled 
by  The  Conference  Board  Inc 
fell  in  October  for  the  fifth 
consecutive  month. 

An  uncertain  economy  is  a 


key  reason  for  the  increased 
use  of  contract  IT  woritets, 
said  conference  attendee  Peter 
Weddle.  CEO  of  WMdle’s,  a 
research,  publishing  and  re¬ 
cruiting  consultancy  in  Stam¬ 
ford.  Conn. 

Rick  Stockfield,  managing 
partner  at  ThIenthire.coin,  an 
Atlanta-based  busincss-to- 
business  online  recruiting  ex¬ 
change,  said  demand  for  IT 
workers  has  increased  over 
the  past  three  to  six  months 
Stodcfleld  cited  particularly 
strong  demand  for  IT  auditors 
in  response  to  the  Sarbanes- 
Oxley  Act.  as  well  as 
for  IT  security  experts. 

While  many  CIOs  remain 
cautious  about  adding  to  their 
payrolls,  there  are  exceptions. 
For  instance.  Science  Applica¬ 
tions  International  Corp.  in 
San  Diego  plans  to  increase  its 
n*  staff  by  a  whopping  29%  by 
early  next  year  —  from  556  to 
716  workers  —  by  adding  both 
full-time  and  contract  employ¬ 
ees  and  by  partnering  with 
business  units  that  deliver  sys¬ 
tems  to  customers,  said  CIO 
Cora  Carmody.  The  company 
is  hiring  people  with  a  broad 


range  of  skills,  including  ar¬ 
chitects,  software  developers 
and  business  analysts. 

juniper  Netwoiks  inc-,  a 
networking  equipment  vendor 
in  Sunnyvale.  Calif,  expects  to 
have  an  IT  staff  of  140  people 
by  the  end  of  the  year,  up  from 
the  70  it  had  prior  to  its  April 
acquisition  of  NetScreen 
Technologies  Inc.,  said  CIO 
Kim  Perdikou.  The  company 
added  35  IT  personnel  from 
NetScreen  and  expects  to  hire 
35  more  by  yearY  end  to  help 
support  its  growth.  Perdikou 
esdmaied  that  Jun^ier  will 
grow  Us  IT  staff  by  another 
10%  to  15%  in  2005. 

TVuman  Medical  Centers 
Inc.  has  a  few  openings  for 
full-time  IT  workers,  said  CIO 
BUI  McQpistoo.  But  he  said 
he's  somewhat  concerned 
about  the  Kansas  CUy.  Ma- 
based  oiganization’s  ongoing 
use  of  contract  IT  woricers  to 
meet  some  of  its  short-term 
needs.  The  contract  workers 
can't  always  transfer  their 
knowledge  to  the  bealffi  care 
company  before  they  com¬ 
plete  their  assignments. 
McQuiston  said.  O  51052 


CIOs  Take  Steps  to  Keep  Pace  With  Change 

New  requirements  —  ’  ' 

muddle  the  search 
for  top  talent 


BY  LUCAB  MeaiMAN 

COCUUBUS  OHIO 

When  recruiting  a  new  CIO. 
companies  look  mostly  out¬ 
side  their  own  walls  b^ause 
they  lack  confidence  in  inter¬ 
nal  rr  managemeoL  Many 
CEOs  fear  the  internal  candi¬ 
dates  lack  weU-rounded  expe¬ 
rience.  a  technology  recruiter 
told  about  150  CIOs  gathered 
at  the  2004  CIO  Symposium 
here  this  month. 

Several  Fbrtime  25  CK^ 
spoke  of  their  rapidl/  chang¬ 
ing  profession  and  of  the 
seiurh  fora  new  breed  of  IT 
managers.  The  goal  is  to  de¬ 
velop  those  managers  inter¬ 
nally.  but  that  goal  hasn't  been 
met.  they  said. 

'TTie  one  thing  we  found 
that  companies  don’t  do  too 


weU  is  engage  their  future 
leaders."  said  Gerry  McNama¬ 
ra.  senior  partner  at  financial 
services  and  technology  re¬ 
cruiting  firm  Heidrick  Be 
Struggles  International  Inc.  in 
Chicaga  In  a  speech  at  the 
symposium,  McNamara  said 
most  companies  are  sorely 
tackii^  in  IT  leadership  train¬ 
ing  programs. 

A  Heidrick  &  Struggles  sur¬ 
vey  of  its  U.S,  clients  found 
that  61%  of  Fortune  250  com¬ 
panies  hire  outside  talent  as 
chief  technologists,  and  70% 
of  companies  use  profile  test¬ 
ing  to  help  identify  the  Ideal 
IT  manager  rather  than  turn  to 
internal  talent. 

The  fuidings  weren't  sur¬ 
prising  to  CIOs  attending  the 
conference,  hosted  by  the 
Columbus  Technology  Coun¬ 
cil  and  Ohk)  State  Universiry. 

Several  QOs  from  large 
companies  acknowledged  the 
need  for  better  training  of  IT 


managers,  particularly  when  it 
comes  to  understanding  the 
business  side  of  the  company 
and  managing  projects. 

Joseph  Calvaruso.  CEO  of 
Mount  Carmel  Health  System 
in  Columbus,  instituted  a  lead¬ 
ership  development  program 
in  July  2000  to  address  a  24% 
annual  employee  turnover  rate 
at  his  operation.  “Employees 
join  organizations,  but  they 
leave  managers."  be  said.  After 
the  program  was  implemented, 
the  attrition  rate  dropped  to 
4%  this  year,  Calvaruso  said. 

Dealing  WHh  Mergers 

Jody  Davids.  CIO  at  Cardinal 
Health  Inc.  in  Dublin,  Ohio,  a 
distributor  of  medical  supplies 
and  equipment,  said  the  big¬ 
gest  technical  challenge  facing 
CIOs  in  large  enterprises  is 
integrating  multiple  lines  of 
business  after  mergers  and 
acquisitions,  a  task  that  de¬ 
mands  business  expertise 


from  the  CIO  and  the  man¬ 
agers  be  hires. 

Cardinal  Health  is  a  year 
into  a  24-moDth  business  and 
IT  realignment  to  pull  tt^th- 
er  more  than  a  dozen  compa¬ 
nies  that  is  has  acquired  over 


the  past  decade.  “You  cannot 
lead  with  technology.  There 
needs  to  be  some  understand¬ 
ing  of  the  business  [by  IT 
managers!  if  the  investment  is 
going  to  be  wisely  made,"  she 
said 

Davids  also  advised  her 
counterparts  to  “deal  decisive¬ 
ly  with  those  who  cling  to  the 
past"  and  won't  change  as 
needed. 

John  Deane,  CIO  of  Wendy’s 
International  Inc  in  Dublin. 
Ohio,  said  be  has  seen  a  dra¬ 
matic  change  in  corporate  ex- 
pectatkins  as  CIOs  are  chang¬ 
ing  “from  someone  who  is 
technical  in  philosophy  to 
someone  who  is  a  value  cre¬ 
ator.  CIOs  are  [becoming]  part 
of  the  strategic  process." 

"You  need  people  in  your 
organization  who  undentand 
business  first  and  IT  second." 
added  Fred  Siff,  CIO  at  the 
University  of  Cincinnati  IT 
managers  must  be  able  to  help 
create  business  value  and 
competitive  advantage,  he 
added  O  51009 


AMD 


When  Microsoft  invests 

sixty  billion  dollars, 

they  don’t  use  just  any  processor. 


To  manage  this  much  money,  you  need  a  solution  that  offers  optimum  performance  and  real-time  flexibility.  Microsoft  found  both  in  the 
AMD  Opteron*"  processor  running  Windows  Server""  2003,  Enterprise  Edition.  The  AMO  Opteron  processor  with  its  Direct  Connect 
Architecture  already  powers  the  world’s  highest  performing  2-way  and  4-way  x8b  servers.  Now  Microsoft  Treasury  managers  are  using  it  to 
slash  the  time  it  takes  to  run  their  complex  risk-analysis  software.  Meanwhile,  they  have  the  flexibility  to  go  from  32-  to  64-bit  applications 
without  disrupting  their  business.  At  AMO.  we  believe  It's  critical  that  technology  should  migrate  on  your  terms  to  help  you  realize  your  unique  vision. 
It’s  one  of  the  reasons  why  leading  OEMs  offer  enterprise-class  solutions  powered  by  AMD  Opteron  processors.  Would  you  like  to  learn  just  how  much 
of  a  difference  they  can  make  to  your  company?  Co  to  www.afnd.com/onteniriso 
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"For  midsized  and  large  organizations,  a  significant 
Linux  deployment  will  neither  be  free  nor  easily 
accomplished.  In  fact,  respondents  at  large 
organizations  reported  that  a  wholesale  switch  to 
Linux  from  Windows'  or  Unix  would  significantly 
increase  TCO  for  the  forseeable  future." 

-Laura  DiDh,  The  Yankee  Group,  April 2004 
Linux.  Unix,  and  Windows  TCO  Comparison 


The  Yankee  Group,  a  global  research  and  consulting  firm,  concluded  that 
a  significant  switch  to  Linux  from  Windows  or  Unix  could  cost  three  to  four 
times  as  much  without  delivering  tangibly  better  performance  or  business 
value.  These  findings  are  based  on  a  non-sponsored  worldwide  survey  of  1,000 
IT  administrators  and  C-level  executives  in  midsized  and  large  enterprises. 

To  get  the  full  study,  visit  microsoft.com/getthefacts 


Windows 
Server  System 


02004MicrMOftCi»rpor«>on  AllrtghtsrctervKl.M>ac»oft.WindO««.theW>f>d(Mir(k>90.*nd  Windows SerwSystem  arc  Mherrc9itt«r«dtt*4«m«r%iOrtr«dem<r«iot  Microsoft 
Corporation  in  the  Unrted  States  a^or  other  countries.  The  rtames  o<  actual  companies  and  products  mentioned  herein  may  be  the  trademarks  ^  their  respective  ovmers 
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U.K.  Mulls  Unplugging 
Faulty  EDS  S^em 

LONOOM 

CONTINUOUS  coMPUTFK  failures 
at  the  UK-'s  Child  Support 
Ajtency  have  led  the  agency's 
chief  to  resign  and  pn>mpted  the  gov¬ 
ernment  to  consider  scrapping  a  wcl- 
fare  case  management  and  telephony 
system  developed  mostly  by  Elecin>nic 
Hata  Systems  Corp. 

At  a  parliamentary  ctJmmittce  hear¬ 
ing  on  Nm-.  17.  Doug  Smith,  chief  exec¬ 
utive  of  the  Child  Support  Agency,  said 
he's  "seriously  disappointed"  that  just 
fil.OOt)  out  of  478.000  single  parv,‘nts 
have  received  payments  from  the  sys¬ 
tem  and  that  S1.4  billion  worth  of  sup-  i 
port  payments  remain  uncollected.  I 
Smith  said  he’s  resigning  from  his  job.  ! 

Abn  lohivstm.  secretary 
of  the  U.K.  Depanmcni  of 
Work  and  Pensions,  which 
oversees  the  agency,  said 
he’s  considering  the  "nu¬ 
clear  option"  of  pulling 
the  plug  on  the  system. 

Launched  in  March  200.^. 
the  system  includes  a  lava* 
based  application  written 


by  EDS  and  call  center  software  creat¬ 
ed  by  BT  Group  PLC.  The  parliamen¬ 
tary  committee  issued  a  damning  re¬ 
port  about  the  system  in  July  (Quick- 
Link  4924<>I.  During  the  hearing.  John¬ 
son  read  from  what  he  said  was  an  in¬ 
ternal  EDS  memo  that  described  the 
system  as  "badly  designed,  badly  deliv¬ 
ered.  badly  tested  and  badly  imple- 
mcnied."  A  representative  from  EDS 
LT.K.  declined  to  comment  or  to  con¬ 
firm  the  legitimacy  of  the  memo. 

■  LAURA  ROHDE.  IDG  NEWS  SERVICE 


Start-up  Claims 
Low-Cost  RFID  Chip 

AUCKLAND. NEW  ZEALAND 

START-UP  VENDOR  called  Sand- 
tracker  claims  to  be  on  the  verge 
of  tracking  the  5-ccnl  cost  barrier 
for  radio  frequency  identi¬ 
fication  (KFID)  tags.  The 
Auckland-based  company 
is  producing  a  low-silicon 
chip  that  can  be  made  for 
6  cents  and  contains  only 
a  number  identifying  the 
giHHis  that  are  tagged. 

Sandtmeker  said  the 
tags  are  being  tested  in 


Number  of  Wt-Fi  sessions 
per  week  at  lire  Brilisb 
Library  tn  London. 


several  applications.  A  sports-event 
company  is  putting  the  cheap  tags  on 
the  number  bibs  of  runners  to  count 
how  many  cross  the  finish  line  during 
races.  Another  customer  is  using  a  spe¬ 
cial  RFID  assembly  across  the  closure 
of  crates  and  containers.  Any  tamper¬ 
ing  triggers  an  alarm.  Sandtracker  said. 

Some  versions  of  the  tags  don’t  con¬ 
form  to  the  emerging  Electronic  Prod¬ 
uct  Code  standard,  but  Sandtracker 
said  it  plans  to  work  with  the  EPC 
standards  body  on  the  new  chips. 

■  STEPHEN  BELL, 

COMPUTERWORLD  NEW  ZEAUND  ONLINE 


Intel  to  Spend  $40M 
On  India  Chip  Center 

BANGALORE.  INOtA 

iNTEi  t:oRp  said  on  Nov.  19  that  it 
will  invest  S40  million  over  the  ne.Ki 
two  years  at  its  43-acrc  development 
center  in  Bangalore.  That’s  on  top  of  a 
simibr  investment  in  the  past  two  years. 

The  new  funding  will  be  used  to  de¬ 
velop  next-generation  Centrino  chip 
sets,  laptop  motherboards  and  Win¬ 
dows-based  graphics  drivers.  The  cen¬ 
ter  will  also  develop  cnterprisc-cla.ss 
microprocessors,  including  work  on  all 
of  Intel’s  chips  that  support  very  large- 
scale  integration  technology.  O  51007 
■  JOHN  RIBEIRO,  IDS  NEWS  SERVICE 


Compiled  by  Mitch  fietrs. 


Briefly  Noted 

BAA  PLC,  8  London-based  airport 
operator,  plans  to  use  anterprise 
service  bus  (E^)  techtdogy  de¬ 
veloped  by  Sonic  Software  (^.  tn 
Bedford,  Masa^  to  Integrate 
baggage  and  passenger  information 
systems  at  Heathrow  Airport’s  Ter¬ 
minal  5.  which  is  under  construc¬ 
tion.  BAA  also  tapped  Sonic  ES6  to 
support  Hs  overall  service-oriented 
architecture. 


NetSuife  hit ,  a  hosted  applica¬ 
tions  vendor  in  San  Mateo.  Calif, 
announced  a  move  into  the 
Cenadiafl  market  es  it  opened  a 
40,000-s(|uare-foot  focHity  in 
Mississauga.  Ontario.  NetSuite 
said  its  hosted  CRM.  ERP  and 
e-commerce  applications  have 
been  adapted  for  the  Canaefian 
market’s  business  terminoiogy 
and  accounting  standards. 


The  Inlernaiiotul  Moscow  Bank  in 
Russia  has  selected  Flexcube  bank¬ 
ing  software  from  l-flex  Solutions 
Ltd.  in  Mumbai.  Irafia,  as  part  of  a 
technology  modernization  drive. 
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CA 

preferred  the  conference  to  be 
held  in  April,  prior  to  CA’s 
<>chcduled  release  of  upgraded 
help  desk  Mjftware.  "By  fall, 
the  new  relca.ses  will  already 
be  out."  said  Smith,  who  is 
president  of  the  Mid-Atlantic 
Help  Desk  User  Group  for  CA 
customers. 

Tyler  McGraw.  a  database 
administrator  at  paper  maker 
Btmater  Inc.  in  Greenville. 
S.C,  said  CA’s  change  of  heart 
i»n  the  2005  conference  was  "a 
giHid  thing."  McGraw  ha.s  used 
CA's  Ingres  database  for  the 
past  15  N  ears  .and  was  buoyed 
by  the  company’s  decision,  an¬ 
nounced  at  CA  World  2004  in 
M.iy.  to  release  the  s«»ftware 
under  an  •»pcn-source  license 
iQuicklink  472101. 

Watting  until  2IX)0  to  hold 
the  next  CA  Worid  could 
have  slopped  the  momentum 


I  of  open-source  Ingres  among 
end  users  in  its  tracks.  McGraw 
said.  "Obviously.  Swainson 
nude  his  decision  to  have  it  in 
the  fall  because  many  people 
felt  the  same  way."  he  added. 

Swainson.  50.  was  added  to 
CA's  board  and  given  the  title 
of  president  and  CEO-elect  for 
the  time  being.  At  his  mosi  re¬ 
cent  job  at  IBM.  he  served  as 
vice  president  of  the  compa¬ 
ny’s  worldwide  software  s.alcs 
force.  Prior  to  that,  he  wxs 
general  manager  of  the  appli¬ 
cation  integration  tools  and 
middleware  division  within 
IB.M’s  software  group. 

Interim  Period 

I  According  to  CA.  Swaiastm 
j  will  report  to  interim  CE( ) 
Kenneth  Cron  during  a  transi¬ 
tion  period  that's  expected  to 
I  last  four  to  six  m«»nihs.  Swain- 
I  son  will  initially  fivu-s  on 
'  product  strategy  and  develop¬ 
ment.  while  Cron  oversees  the 
I  other  pari.s  of  CA’s  business. 


I  leflT Clarke.  CA’s  chief  oper- 
I  ating  officer  and  chief  f ^nan- 
I  cial  officer,  will  report  to  Cron 
j  during  the  transition  period. 

I  Clarke,  who  joined  CA  last 
I  March,  is  responsible  for  sales, 
!  marketing,  business  develop¬ 
ment  and  finance. 

Cron  has  been  interim  CEO 
since  April,  when 
Kumar  was 
stripped  of  his 
chairman  and 
CF.O  titles  as  fed¬ 
eral  regulators 
and  prttsecuiors 
investigated  CA 
for  alleged  ac¬ 
counting  irregu¬ 
larities.  Kumar 
was  subsequently 
named  chief  soft¬ 
ware  architect  but 
then  left  CA  in 
June,  tn  Septem¬ 
ber.  he  was  indict¬ 
ed  on  charges  of 
securities  fraud, 
conspiracy  and 


obstruction  of  justice,  to 
which  he  pleaded  not  guilty 
(QuickLink  49647). 

During  a  teleconference  last 
week.  Swainson  said  he  wants 
to  increase  CA’s  share  of  the 
market  for  enterprise  manage¬ 
ment  software.  “We  have  an 
opportunity  to  grtiw  that  lead 
and  expand  into 
new  markcLs  and 
niches  . . .  like 
wireless,"  he  said. 

But  Swainson 
acknowledged 
that  CA's  relations 
with  users  often 
have  been  prob¬ 
lematic.  “TTicrc's 
clearly  a  legacy 
herc  of  difficult 
customer  rela¬ 
tions.  I'm  l(M>king 
to  turn  customers 
hack  into  partners 
rather  th.in  adver¬ 
saries." 

Kumar  was 
crediic'd  by  many 


tomers  back  into 
partners  ralher 
than  adversaries. 


JOHN  SWAINSON. 
CA's  presfoeflt  and 
CCO-atoct 


CA  users  with  improving  rela¬ 
tions.  and  Smith  said  he  hopes 
Swainson  can  keep  alive  the 
former  CEO's  "strong  sense  of  - 
what  cu.siomcrs  are  after.” 

Swainson  said  that  he's  “not 
looking  to  dump  products” 
and  that  CA  is  committed  to 
supporting  its  software.  Bui. 
he  added,  not  every  one  of 
CA's  500  or  so  products  "rep¬ 
resents  the  strategic  future  of 
how  customers  want  to  build 
and  manage  their  enterprises." 

“I'll  be  interested  to  see 
what  he  does."  said  McGraw. 
who  noted  that  CA  “has  a  lot 
of  competing  products.” 

Swainson’s  hiring  is  “a  good 
win  for  CA."  said  Stephen  El¬ 
liot.  an  analyst  at  IDC.  Elliott 
added  th.ii  Swainson  is  a  "very 
credible,  very  senior  choice" 
who  likely  will  help  pick  up 
the  pace  on  software  acquisi¬ 
tions  "after  CA  flushes  t>ui 
whore  they  arc  in  product 
lines  and  where  they  want  to 
take  the  company.”  O  51047 
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U.K.  Mult  Unplugging 
Faulty  EDS  S^em 

LONDON 

COMTWuous  COMPUTES  failures 
at  the  UJC's  Child  Support 
Agency  have  led  the  agency's 
chief  to  resign  and  prompted  the  gov¬ 
ernment  to  consider  scrapping  a  wel¬ 
fare  case  management  and  telephony 
system  developed  mostly  by  Electronic 
Data  Systems  Corp. 

At  a  parliamentary  committee  hear¬ 
ing  on  Nov.  17.  Doug  Smith,  chief  exec¬ 
utive  of  the  Child  Support  Agency,  said 
he’s  "seriously  disappointed"  that  iust 
61,000  out  of 478,000  single  parents 
have  received  payments  from  the  sys¬ 
tem  and  that  SL.4  billion  worth  of  sup¬ 
port  payments  remain  uncollected. 
Smith  said  he's  resigning  from  his  job. 

Alan  Johnson,  secretary 
of  the  UJC.  E>epartment  of 
Woric  and  Pensions,  which 
oversees  the  agency,  said 
he’s  considering  the  "nu¬ 
clear  option"  of  pulling 
the  plug  on  the  system. 

Launched  in  Ma^  2003, 
the  system  includes  a  Java- 
based  application  written 
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by  EDS  and  call  center  software  creat¬ 
ed  by  BT  Group  PLC,  The  parliamen¬ 
tary  committee  issued  a  damning  re- 
pon  about  the  system  in  July  [Quick- 
Link  492461.  During  the  bearing.  John¬ 
son  read  from  what  be  said  was  an  in¬ 
ternal  EOS  memo  that  described  the 
system  as  "badly  designed,  badly  deliv¬ 
ered.  badly  tested  and  badly  imple¬ 
mented."  A  representative  from  EDS 
UJC.  declined  to  comment  or  to  con¬ 
firm  the  legitimacy  of  the  memo. 

■  UURA  ROHDE.  106  NEWS  SERVICE 

Start-up  daims 
Low-Cwt  RFID  Chip 

AUCKLAND,  NSW  ZEALAND 

A  START-UP  VENDOR  called  Sand- 
tracker  claims  to  be  on  the  verge 
of  cracking  the  5-cent  cost  barrier 
for  radio  frequency  identi¬ 
fication  (RFID)  tags.  The 
Auckland-based  company 
is  producing  a  low-silicon 
chip  that  can  be  made  for 
6  cents  and  contains  only 
a  number  identifying  the 
goods  that  are  tagged. 

Sandtrackcr  said  the 
tags  are  beii^  tested  in 


several  applications.  A  sports-event 
company  is  putting  the  cheap  tags  on 
the  number  bibs  of  runners  to  count 
how  many  cross  the  fmish  line  during 
races.  Another  customer  is  using  a  spe¬ 
cial  RFID  assembly  across  the  closure 
of  crates  and  containers.  Any  tamper¬ 
ing  triggers  an  alarm.  Sandtrackcr  said. 

Some  versions  of  the  tags  don't  con¬ 
form  to  the  emerging  Electronic  Prod¬ 
uct  Code  standard,  but  Sandtracker 
said  it  plans  to  work  with  the  EPC 
scandal  body  on  the  new  chips. 

■  STEPHEN  BELL. 

COMPUTERWORLD  NEW  ZEAUND  ONLINE 

Intel  to  SpMidS40M 
On  India  Chip  Center 

BANOALONE,  INDIA 

INTEL  CORP.  said  on  Nov.  19  that  it 
will  invest  $40  million  over  the  next 
two  yeais  at  its  43-acie  development 
center  in  Bangalore.  That's  on  top  of  a 
similar  investment  in  the  past  two  years. 

The  new  funding  will  ^  used  to  de¬ 
velop  next-generation  Cenirino  chip 
sets,  laptop  motherboards  and  Win¬ 
dows-based  graphics  drivers.  The  cen¬ 
ter  will  abo  develop  enterprise-class 
microprocessors,  including  work  on  all 
of  Intel's  chips  that  support  very  large- 
scale  integration  technology.  O  Sf007 
JOHN  RIBEIRO.  ID6  NEWS  SERVICE 
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CA 


preferred  the  conference  to  be 
held  in  April,  prior  to  CA's 
scheduled  release  of  upgraded 
help  desk  software.  "By  fidl. 
the  new  releases  will  already 
be  out."  said  Smith,  who  is 
president  of  the  Mid-Atlantic 
Help  Desk  User  Group  for  CA 
customers. 

Tyler  McGraw,  a  database 
administrator  at  paper  maker 
Bowater  Inc.  in  Greenville. 
SC,  said  CA’s  change  of  heart 
on  the  2005  conference  was  "a 
good  thii^"  McGraw  has  used 
CA's  Ingres  database  for  the 
past  15  years  and  was  buoyed 
by  the  company's  decision,  an¬ 
nounced  at  CA  World  2004  in 
May.  to  release  the  software 
under  an  open-source  license 
[(^ukklink  47216]. 

Waiting  until  2006  to  bold 
the  next  CA  World  could 
have  stopped  the  momentum 


of  <^n-source  Ingres  among 
end  users  in  its  tracks.  McGraw 
said.  "Obviously.  Swainson 
made  his  decision  to  have  it  in 
the  fall  because  many  people 
felt  the  same  way.”  be  added. 

Swainson,  50,  was  added  to 
CA’s  board  and  given  the  title 
of  president  and  CEO-elect  for 
the  time  being.  At  his  most  re¬ 
cent  job  at  IBM,  be  served  as 
vice  president  of  the  compa¬ 
ny’s  worldwide  software  sales 
force.  Prior  to  that,  he  was 
general  manager  of  the  appli¬ 
cation  integration  tools  ait^ 
middleware  division  within 
IBM's  software  group. 

hrteriin  Period 

According  to  CA.  Swainson 
will  report  to  interim  CEO 
Kenneth  Cron  during  a  transi¬ 
tion  period  that's  expected  to 
last  four  to  six  months.  Swain- 
son  will  initially  focus  on 
product  strategy  and  develop¬ 
ment.  while  Cron  oversees  the  . 
other  parts  of  CA's  business.  I 


Jeff  Clarke,  CA's  chief  oper¬ 
ating  officer  and  chief  finan¬ 
cial  officer,  will  report  to  Cron 
during  the  transition  period. 
Clarice,  who  joined  CA  last 
March,  is  responsible  for  sales,  | 
marketing,  business  develop¬ 
ment  and  finance. 

Cron  has  been  interim  CEO 
since  April,  when 
Kumar  was 
stripped  of  his 
chairman  and 
CEO  titles  as  fed¬ 
eral  regulators 
and  prosecutors 
investigated  CA 
for  alleged  ac¬ 
counting  irregu¬ 
larities.  Kumar 
was  subsequently 
named  chief  soft¬ 
ware  architect  but 
then  left  CA  in 
June.  In  Septem- 


Brm  looking 
fotumeus- 
tomeis  back  into 
partnefs  rather 

.  ...  than  adversaries.  ^  - 

ber,  he  was  indict-  . . .  rather  than  adver- 

edonchaijesof  J0H«  SWAINSON. 

secunties  fraud,  CA’tprwUMNmi  Kumarwas 

conspiracy  and  CE0-«Md  credited  by  many 


obstruction  of  justice,  to 
which  be  pleaded  not  guilty 
[C^uickLink  49647]. 

Durii^  a  teleconference  last 
week.  Swainson  said  he  wants 
to  increase  CA’s  share  of  the 
market  for  enterprise  manage¬ 
ment  software.  "We  have  an 
opportunity  to  grow  that  lead 
and  expand  into 
new  markets  and 
niches . . .  like 
wireless,"  be  said. 

But  Swainson 
acknowledged 
that  CA's  relations 
with  users  often 
have  been  prob¬ 
lematic.  “TTiere’s 
clearly  a  legacy 
here  of  difficult 
customer  rela¬ 
tions.  I'm  looking 
to  turn  customers 
back  into  partners 


users  with  improving  rela¬ 
tions.  and  Smith  said  he  hopes 
Swainson  can  keep  alive  the 
former  CEO’s  "strong  sense  of 
what  customers  are  after." 

Swainson  said  that  he's  "not 
looking  to  dump  products" 
and  that  CA  is  committed  to 
supporting  its  software.  But. 
be  added,  not  every  one  of 
CA's  500  or  so  products  "rep¬ 
resents  the  strategic  future  of 
bow  customers  want  to  build 
and  manage  their  enterprises.” 

"Ill  be  interested  to  see 
what  he  does,"  said  McGraw, 
who  noted  that  CA  "has  a  lot 
of  competing  products." 

Swainson’s  hiring  is  "a  good 
win  for  CA."  said  Stephen  El¬ 
liot.  an  analyst  at  IDC.  Elliott 
added  that  Swainson  is  a  "very 
credible,  very  senior  choice" 
who  likely  will  help  pick  up 
the  pace  on  software  acquisi¬ 
tions  "after  CA  flushes  out 
where  they  are  in  product 
lines  and  where  they  want  to 
take  the  company."  O  51047 
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Before  developing  your  next  generation  of 
applications,  switch  from  Oracle*  to  the  next 
generation  of  database  technology. 

Cache  is  the  post-relational  database  that 
combines  high-performance  SQL  for  faster 
queries  and  an  advanced  object  database  for 
rapidly  storing  and  accessing  objects.  With 
Cache,  no  mapping  is  required  between  object 
and  relational  views  of  data.  That  means  huge 
savings  in  both  develc^ment  and  processing  time. 

Applications  built  on  Cach^  are  massively 
scalable  and  lightning-frst.  Plus,  they  require 
minimal  or  no  database  administration. 

More  than  just  a  database  system.  Cache 
incorporates  a  powerful  Web  application 


development  environment  that  dramatically 
reduces  the  time  to  build  and  modify  applications. 

The  reliability  of  Cache  is  proven  ev’cry  day  in 
“life-or-death”  applications  at  thousands  of  ttic 
world’s  largest  hospitals.  Cache  is  so  reliable,  it’s 
the  leading  database  in  healthcare  -  and  it  powers 
enterprise  applications  in  financial  services,  govern¬ 
ment  and  many  other  sectors. 

We  are  IntcrSystems,  a  specialist  in  data 
management  technology  for  over  twenty-six  years. 
We  provide  24x7  support  to  four  million  users  in 
88  countries.  Cache  is  available  for  Windows, 
OpenVMS,  Linux  and  major  UNIX  platforms  - 
and  it  is  deployed  on  systems  ranging  from  two 
to  over  10,000  simultaneous  users. 


InterSystems  ^ 

Make  Applications  Faster 

Tly  a  iMtttr  iataiase.  Ftr  free. 

Download  a  free,  fully-functional,  non-eiq)iring  version  of  Cacb£  or  request  it  on  CD  at  www.IntcrSvstcnis.ccMn/robust2 
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Tools  Bring  Desktop  Futures  to  Browsers 


BV  HEATHER  HAVENSTEIN 

Macromedia  Inc.  and  Nexa- 
web  Technolr^es  Inc.  have 
brought  out  upgraded  XML 


development  offerings  with 
updates  for  building  thin- 
client  applications  with  rich 
features  native  to  the  desktop. 


Cambridge.  Mass.-based 
Nexaweb  this  month  enhanced 
its  Nexaweb  Client  33  tool 
with  support  for  searching 


XML  and  the  ability  to  take 
part  of  the  application  off-line, 
said  CEO  Larry  Geisel. 

Meanwhile,  San  Francisco- 
based  Macromedia  this  month 
began  shipping  Flex  1.5,  the 
latest  version  of  its  presenta- 


tion  server  and  application 
framework,  with  improved  data 
display  and  visualization,  more 
versatile  skinning  and  styling, 
and  support  for  new  systems. 

Geisel  said  Nexaweb  plans 
to  update  its  Nexaweb  Studio 
add-in  for  third-party  integrat¬ 
ed  development  environments 
(IDE)  by  adding  a  visual  Java- 
Server  Pages  (JSP)  editor.  It 
also  plans  to  add  a  .Net  client 
and  open-source  access  to  the 
Client  engine  by  next  year. 

The  Nexaweb  tools  can  run 
in  any  J2EE  application  server, 
allowing  developers  to  use 
JavaBeans,  JSP  and  other  cod- 
ii^  structures  to  build  XML 
user  interfaces  for  Internet  ap¬ 
plications  that  need  rich  fea¬ 
tures  like  drag  and  drop. 

Best  Western  International 
Inc.  in  Phoenix  used  Nexa- 
web’s  tool  set  to  replace  an 
HTML-based  reservation, 
room  rate  and  inventory  appli¬ 
cation.  An  XML-based  user 
interface  reduced  the  time 
the  system  takes  to  respond 
to  changes  made  at  the  com¬ 
pany’s  4,000-plus  properties 
from  IS  seconds  to  two  sec¬ 
onds,  said  Harold  Dibler,  man¬ 
aging  director  of  application 
development  at  Best  Western. 
The  interface  also  reduced 
network  traffic  by  more  than 
90%.  he  said. 

Macromedia  Flex  13  allows 
developers  to  use  a  text  editor 
or  IDE  to  build  rich-client  ap¬ 
plications,  said  Jeff  Whatcott, 
Macromedia's  vice  president 
of  product  marketing. 

Rotech  Healthcare  Inc.,  a 
medical  equipment  maker  in 
Orlando,  used  Flex  to  build  an 
Internet  application  for  col¬ 
lecting  orders  and  linking  to 
billing  systems  via  a  controlled 
user  interfece.  Tou  are  able  to 
make  it  look  like  what  people 
are  used  to  in  a  Windows  ap¬ 
plication,”  said  Michael  Prich¬ 
ard,  Rotech’s  IT  manager. 

Tim  Fanner,  software  devel¬ 
opment  manner  at  Choice 
Homes  Inc.  in  Arlington. 

Texas,  said  his  Microsoft¬ 
centric  development  staff 
used  Flex  to  build  a  user  inter¬ 
face  for  a  dashboard  applica¬ 
tion  in  about  a  week,  which 
was  much  quicker  than  it 
would  have  taken  without 
the  tool.  050997 


How  did  80%  of  information 
become  100%  useless? 

What  if  information  could  find  its  way  in  and  out  of 
databases,  all  on  its  very  own?  With  the  Adobe 
Intelligent  Document  Platform,  it's  possible.  When  you 
combine  the  logic  of  XML  and  Adobe  PDF,  suddenly 
documents  are  smarter.  Unstructured  content  unifies  with 
structured  data.  And  information  intuitively  travels  where 
it's  needed,  safely  and  securely.  It's  simplicity  at  work. 
The  Intelligent  Document  Platform.  Better  by  Adobe. 


fK^ 

Adobe 


See  how  smarter  documents  are  working  for  other  companies  at  adobe.com.'idp. 


Adobe  Intelligent  Document  Platform 
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DON  TENNANT 


A  Thanksgiving  Rebuttal 


Here  we  are  on  the  Monday  after 
Thanksgiving,  and  with  the  taste  of 
burped-up  cranberry  sauce  still  fresh 
and  every  bathroom  in  the  house  still 
reeking  of  Glade  Lavender  Meadow, 
it’s  a  time  for  requisite  reflection.  As  it  does  every 
year,  the  long  Thanksgiving  weekend  provided  an 
opportunity  for  us  all  to  articulate  what  it  is  we’re 

thankful  for  without  any¬ 
one  sarcastically  hum¬ 


ming  “Kumbaya”  in  the 
background.  At  least  not 
loudly  enough  for  us  to 
hear.  If  the  kids  know 
what’s  good  for  them. 

Following  all  that  giv* 
ing  of  thanks,  ioumalis* 
tic  balance  compels  roe 
to  report  from  the  other 
side  of  the  fence  and 
articulate  what  it  is  Fm 
bummed  about  —  to  list 
some  of  the  things  that  make  me 
about  as  thankful  as  a  fiftysomething 
IT  woiker  at  Best  Buy.  (Go  to  Quick- 
Link  50984  if  you  said,  “Huh?"  when 
you  read  that) 

Fro  bummed  that  Chris  Stone,  the 
former  Na  2  executive  at  NoveU.  left 
the  company  earlier  this  month,  just 
as  it  was  beginning  to  jell  on  the 
strei^th  of  its  Linux  strategy.  CEO 
Jack  Messman  is  a  really  nice  guy. 
but  I  know  Fm  not  the  only  one  who 
questions  his  wherewithal  to  run  the 
company  without  somebody  like 
Stone  serving  as  puppeteer.  Big-time 
loss  for  Novell’s  users. 

Fm  bummed  that  Computer  Asso¬ 
ciates  can’t  get  its  act  together  to 
bold  the  CA  World  user  conference 
in  April  as  planned.  CA  users  will 
have  to  wait  until  the  fall  of  2005  for 
the  event,  after  being  told  that  it 
would  be  postponed  until  the  spring 
of 2006.  But  at  least  Che  company 
finally  found  a  CEO  after  seven 
months  of  acting-CEO  limbo  (Quick- 
Link  S1033].  CA  had  issued  a  state¬ 
ment  on  OcL  I  proclaiming  that  it 
would  name  a  new  CEO  ’in  the  next 


30  to  45  days,"  and  it 
missed  that  deadline  by 
only  about  a  week.  Fm 
not  sure,  but  I  think  the 
way  CA  counts  days,  it 
just  made  it. 

Fm  bummed  that  Con¬ 
gress  popped  open  the 
H-IB  visa  cap  the  week¬ 
end  before  last  by  includ¬ 
ing  a  provision  for  20.000 
exemptions  to  the  cap  in 
an  omnibus  budget  bill 
(Quicklink  50999).  Fm 
not  bummed  that  20.000  more  peo¬ 
ple  will  get 

H-lBs  this  year  —  hey,  1  say  let  the 
most  qualified  individual  get  the  job. 
regardless  of  his  citizenship  or  the 
ranting  of  xenophobes.  Fm  bummed 
that  the  system  allows  provisions 
like  this  to  be  tucked  into  appropria¬ 
tions  bills  rather  than  passing  or  fail¬ 


ing  on  their  own  merits  and  forcing 
individual  members  of  Congress  to 
be  accountable. 

Fro  bummed  that  a  senior  software 
engineer  in  Florida  did  a  much  bet¬ 
ter  job  than  I  did  of  making  the  point 
I  was  trying  to  make  about  offshore 
outsourcing  in  my  Nov.  15  editorial 
[Quicklink  50699J.  Here's  an  excerpt 
from  a  letter  he  wrote:  “My  attitude 
about  the  matter  is  that  I  know  what 
I  am  doii^  1  am  excellent  at  soft¬ 
ware  development.  If  my  company 
decides  that  this  present  job  1  am  in 
must  be  filled  by  someone  else  (for 
financial  reasons  or  otherwise),  then 
that’s  fine  —  Fll  simply  go  find  some¬ 
thing  else  to  do.  The  whiners  roust 
live  in  constant  fear  that  someone  is 
going  to  take  something  away  from 
them.  Unfortimate.  If  they  just  real¬ 
ized  that  what  they  have  should  be 
what  they  have  earned,  then  no  one 
can  take  what  they  truly  own  away 
from  them.  The  successful  people  in 
this  country  don’t  make  excuses, 
they  make  themselves  valuable  and 
do  the  work."  Brilliant. 

Fm  bummed  that  Fm  out  of  space. 
This  is  fun.  O  51029 


DAN  GILLMOR 

Priorities 
Are  Askew 
At  the  FCC 

IT  MUST  BE  TOUGH  being 
America’s  nanny,  especial¬ 
ly  when  there's  so  much 
real  work  to  do. 

Michael  Powell,  chairman  of  the 
Federal  Conununications  Commission, 
and  his  feckless  colleagues  are  on  a  roll 
these  days.  They’re  chasing  so-called 
indecency  from  the  airwaves  with  a 
zeal  we  haven’t  seen  in  decades,  caus¬ 
ing  broadcasters  to  turn  what’s  already 
a  Pablum  medium  into  even  worse  junk. 

What  does  this  have  to  do  with  the 
world  of  business  and  IT?  Plenty  —  the 
serious  telecom  issues  on  the  FCC’s 
plate  need  attention,  and  they’re  not 
getting  enough  of  it. 

There’s  been  at 
least  a  tiny  bit  of 
progress  on  one  key 
issue:  whether  Inter¬ 
net-based  telephony, 
or  VoIP,  should  be 
regulated,  and  if  so. 
by  whom.  The  FCC 
recently  said  that  it 
alone  stMuld  have 
regulatory  authority 
in  this  arena. 

That’s  a  good  idea. 

Many  states  have 
been  eyeing  VoIP 
in  a  variety  of  ways, 
especially  as  some- 
thii^  they  might  tax 
But  if  anything  in  to¬ 
day’s  communications  world  is  an  in¬ 
terstate  system,  it’s  the  Internet  And 
VoIP  is  just  one  more  bit  of  software 
using  the  Net 

Now,  one  could  make  an  argument 
that  Internet  calls  to  or  from  phones 
served  by  fixed-ime  carriers  should 
come  under  the  authority  of  the  sute 
agencies  that  regulate  the  regional 
telephone  monopolies.  That  would 
create  chaos,  however,  in  an  industry 
that's  just  beginning  to  be  a  serious 
player  on  the  telecom  scene.  It  would 
create  chaos  for  customers,  toa  Feder¬ 
al  preemption  makes  sense  in  this  case. 

If  only  this  nod  to  common  sense 
was  matched  by  other  recent  FCC 
moves.  Susan  Crawford,  a  cyberlaw 
and  intellectual  property  specialist 
who  teaches  at  Yeshiva  University’s 
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Cardozo  Law  School  in  New  York,  re¬ 
cently  spotted  some  remarkable  lan¬ 
guage  in  an  FCC  legal  brief. 

The  issue  is  related  to  the  FCC's  wa¬ 
ter-carrying  for  the  copyright  industry, 
which  won  a  regulatory  requirement 
that  future  digital  video  displays  con¬ 
tain  “broadcast  flag“  technology,  a  sys¬ 
tem  in  which  a  television  will  refuse  to 
allow  copying  of  digital  content  desig¬ 
nated  by  the  copyright  owner. 

Now.  Crawford  writes  in  her  blog 
ihttpii'/icrwfordMogware.com/blog) 
that  the  FCC  is  saying  this  applies  to 
any  kind  of  digital  device  —  and  that 
the  law  gives  these  unelected  federal 
bureaucrats  “regulatory  power  over  all 
instrumentalities.  &cilities  and  appara¬ 
tus  'associated  with  the  overall  circuit 
of  messages  sent  and  received’  via  all 
interstate  radio  and  wire  comrounica- 
tion.”  Yikes. 

We  can  blame  Congress  for  some  of 
this.  It  writes  laws  that  let  regulators 
assume  wide  authority. 

But  like  the  spate  of  airwave  censor¬ 
ship  cases,  such  regulatory  overreach¬ 
ing  is  a  threat  to  basic  freedom  of 
speech.  Now  that  Howard  Stern  is  tak¬ 
ing  his  act  to  satellite  —  an  act  that 
I  personally  find  distasteful,  but  not 
nearly  as  worrisome  as  the  bluenoscs 
who  want  to  censor  it  —  look  for 
moves  to  r^ulate  cable  and  satellite 
transmissions,  toa 

We  all  have  a  stake  in  freedom  of 
expression.  But  even  if  some  of  us 
don't  care  about  that,  these  trends  are 
bad  for  business,  toa  If  technology  in¬ 
novators  need  permission  to  market 
inventions,  as  the  copyright  holders 
and  their  friends  in  Congress  and  the 
FCC  seem  to  believe,  then  we'll  get  less 
Innovatioa  And  well  all  suffer  if  that 
happens. 

I  realize  it's  not  ITs  job  to  yell  out  in 
favor  of  freedom.  It’s  everyone’s  fob. 

050986 


MICHAEL  H.  HUGOS 

Erameof 

Mind 

Agility  results  from  a 
way  of  looking  at  the 
world.  It  doesn't  come 
from  any  specific  technique 
or  a  particular  coUectioo  of  technolo¬ 
gies.  Agility  starts  with  the  abOity  to 
accurately  size  up  a  situatloo  in  a  time¬ 


ly  manner.  That  means  see¬ 
ing  potential  problems  and 
opportunities  and  devising 
bold  and  simple  ways  to 
avoid  the  problems  and 
seize  the  opportunities. 

IT  can  be  a  big  part  of 
whal  makes  a  company  ag¬ 
ile,  or  it  can  be  a  big  part  of 
what  makes  it  a  clumsy, 
slow-moving  bureaucracy. 

One  of  the  major  determi¬ 
nants  of  this  is  the  way  your 
company  answers  the  ques¬ 
tion,  “Should  we  build  our 
systems  f^i,  or  should  wc 
build  them  good?”  The  agile 
answer  is  to  build  them  fast 
and  good  enough  for  now. 

What  does  “good  enou^ 
for  now"  mean?  In  a  fost- 
paced,  competitive  world, 
opportunities  arise  quickly  and  then 
either  fade  away  or  evolve  into  some¬ 
thing  else.  The  advantage  goes  to  com¬ 
panies  that  can  develop  systems  that 
are  ready  when  the  business  needs 
them  and  don’t  cost  more  than  the  op¬ 
portunity  is  worth.  The  best  way  to  do 
this  is  to  create  systems  out  of  combi¬ 
nations  of  simple  building  blocks  and 
repeatable  processes. 

Here’s  an  example:  My  company  is 
a  cooperative  of  member  companies 


(each  with  its  own  inter¬ 
nal  systems)  that  band  to¬ 
gether  to  serve  national 
accounts  bigger  than  any 
single  member  can  handle 
alone. 

One  of  our  customers  is 
a  large  chain  of  stores  that 
uses  specially  printed  and 
colored  items  for  the  holi¬ 
day  season.  It  wants  to 
make  sure  that  we  can  de¬ 
liver  enough  of  these  items 
to  all  of  its  stores  nation¬ 
wide  during  November 
and  December.  It  also 
wants  to  track  usage  of 
these  items  and  manage  the 
purchasing  process  so  that 
they're  all  gone  by  the  end 
of  the  season. 

In  the  past,  wc  either 
didn’t  deliver  enough  product  or  the 
chain  was  left  with  excess  inventory.  In 
Idly  of  this  year,  we  saw  an  opportuni¬ 
ty  to  improve  our  service  by  creating  a 
supply  chain  management  system  tai¬ 
lored  to  the  customer's  needs.  We  built 
it  in  August,  tested  it  in  September  and 
had  it  in  production  by  October.  At  the 
end  of  December,  we  can  either  shut 
the  system  down  or  expand  it  to  track 
DonboUday  items,  depending  on  what 
Che  customer  wants.  Either  way.  we’re 
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delivering  a  lot  of  value  ai  a  very  low- 
cost  to  ourselves. 

How  did  we  do  this?  We  created  a 
simple  system  out  of  a  combination  of 
a  few  spreadsheets.  e-maiL  a  couple  of 
Web  pages  and  some  java  programs 
that  took  about  two  weeks  to  write  and 
test.  The  system  allows  us  to  collect 
production  and  inventory  data  from 
relevant  parties  in  the  supply  chain. 
Then  it  compiles  this  data  into  an  end- 
to-end  view  of  the  supply  chain  that  all 
parties  can  access  over  the  Internet. 
Because  everybody  can  see  the  pic¬ 
ture  as  well  as  the  details,  we  now  co¬ 
ordinate  efieetTvely  with  one  another 
on  the  making,  ordering  and  delivering 
of  products. 

If  the  customer  wants  us  to  expand 
this  system  to  track  nonholiday  items 
(and  it  looks  like  it  does),  wc  will  re¬ 
spond  by  writing  a  few  more  pro¬ 
grams  to  enhance  the  volume  and  fre¬ 
quency  of  the  data  collection  process. 
The  rest  of  the  system  is  still  good 
enough  for  now.  We  will  move  with 
this  opportunity  a  step  a(  a  time,  stay 
flexible  and  reap  tangible  benefits  as 
wego.0497IB 
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Feeling  the  Heat 

TOnuUMUSeGaorgeS»- 
tsiana.  Ihose  who  doni  study 
the  past  are  doomed  to  repeat  1* 
The  arlide  Data  (Centers  Get  a 
Mateover*  (QuddJnk  49777] 
proves  It  yet  aoait.  Becktmic  heat 
problems  are  nothing  new.  and  fm 
sure  this  one  is  no  less  soheble.  At 
www.cooSng2one.aitiK  you  wl  find 
eager  thennal  engineers  Mho  are 
detarminadtosafvetheheatprob- 
lem  so  carelessly  assumed  10  be 
sobaUeonlybyusingfhebnjle' 
force  rnedtod.  which  requires  that 
everysquareloololaSO.OOO' 
square-loatdtfacanlerbetailttl- 

The  kxitpria  for  both  processors  as 
wal  as  storage  is  shrihing  at  a 
pace  to  keep  up  wrti  demand  Ac¬ 
cording  ID  Moore's  Law.  capaoty 
doubles  every  18  months,  but  SOB 
remains  constaM  or  shrinks.  And 
the  abity  to  cool  the  etectroncs  wi 
kaap  pace  (as  history  has  shown). 
The  net  of  this  wi  mean  there  w6 
be  no  need  to  prepare  an  entire 
50.000-square-foot  space  to  han- 


deSOOwattsperfoot.SodonTin- 
vest  n  megawatt  generators  mst  yet 

MAndaraon 

First  vkr  president.  Seattle. 
¥Aandenoit(§>q¥festJiet 

YoirvE  eona  BE  RiDowei  rve 
designedarunberoldalacen- 
tars  and  neier  used  etfier  of  the 
gudeines  presented  n  this  article. 
TacAty  deigners  used  to  apply  a 
sanple  nie  ol  thwnb.  If  the  room 
was  going  to  be  X  thousand  square 
feeLlwoiAdneedytonsolarcon- 
dtbQnmg.  Or  desqrters  relied  on 
equtoment'nameptaies'thBtisted 
peak  poww  usage  based  not  on 
codna  requiemants  but  on  safety 
requirements.*  And  I'm  talang  abM 
both  large  rooms  (7.000  square 
tae!)  ard  ofliC8-si»  rooms  Rwer 
requirements  are  one  thing  to  deter¬ 
mine  elecincal  requnrnents  but  the 
actual  staady-stale  fdovolt-arnpere 
requirBnentscanbeuaedandoon- 
^rted  dveedy  to  tons  of  air.  These 
are  pnMded  by  toe  marufactuiers 
forlaigeequipmenN.bulunforlU‘ 
natoly.  smaler  servers  often  ist 


wattage  only  A  safety  mvgrn  IS 
added.andanestnBtsolfuiureie- 
guiremenls  ateo.  (Ths  6  ye!  another 
rarrrwnted  wheel  that  had  been  put 
to  rest  by  (rankamers  by  toe  1960s) 
'Hw  trek  today,  because  of  densiy. 
IS  distrtiubon  of  toat  coolant. 

John  R.  Cater 

OtkqgD 


A  Voting  SokitkKi 

iABREE  «NT)i  Dan  Gimor  about 
toe  need  to  devetop  open-source 
software  voting  applications 
[Tlawed  \fole  Coiid  Gwe  IT  a  Black 
dtt:  QulcllinkSO^).  But  Ithmk 
If  s  unfair  to  place  a  majority  of  toe 
blame  lor  the  crummy  stMe  of  vot¬ 
ing  technology  on  fT.  rr  proiBcts  fai 
formanyreesonsbuiunrealisticB- 
pectatnns  by  tooae  both  insidB  and 
odside  of  fT  often  push  a  proieci 
intotoebil-buckatorallowlhent- 
ptementahon  of  projects  that  ^tould 
haveendaduptothebd-buckaLlfn- 
reahsbe  delivery  date  and  expecta¬ 
tions  are  but  two  reasons  why  IT 
projects  tai  completely  or  provide 


poor  sokilions.  II  seems  l09cal  toat 
voters  migM  be  served  best  it  a 
nonpartisan  goveimenl  agency 
developed  a  standard  open-source 
sottwtfevobngappfecaiion  Pnvale 
ndustry  can  manulactife  toe  hard¬ 
ware,  but  the  software  and  hrmiMve 
cant  be  propnetary.  Of  ooreae,  a 
more  eleoirt.  ample  and  cost- 
effective  sototnn  mght  be  to  adopt 
Oregon's  vohng  system  *  a  paper 
balot  lecarved  vaa  toe  post  ofhee. 
Kim  (^nilcMicM 

Irving,  Tbm 

COimEimOllU)  welcomes 
corwnents  from  Us  readers  Letters 
wi  be  edited  for  brevily  and  civify. 
They  dvxAd  be  ackkes^  to 
JaiTie&Me.leOBr8edilor.Com- 
puterwortd.  PO  fioe  9I7L 1  Speen 
Street  Framnghem  Mass  01701. 
Fax:(5(»)B7&4843E-mM 
ledereScorTtouterworkLcom. 
Indude  an  address  and  phone 
nirnber  for  Rnmedole  venheabon 
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A  Thanksgiving  Rebuttal 


Here  we  are  on  the  Monday  after 
Thanksgiving,  and  with  the  taste  of 
burped-up  cranberry  sauce  still  fresh 
and  every  bathroom  in  the  house  still 
reeking  of  Glade  Lavender  Meadow, 
it’s  a  time  for  requisite  reflection.  As  it  does  every 
year,  the  long  Thanksgiving  weekend  provided  an 
opportunity  for  us  all  to  articulate  what  it  is  we’re 

thankful  for  without  any¬ 
one  sarcastically  hum¬ 


ming  ■■Kumbaya"  in  the 
background.  At  least  not 
loudly  enough  for  us  to 
hear.  If  the  kids  know 
what's  good  for  them. 

Following  all  that  giv¬ 
ing  of  thanks,  loumalis- 
tic  balance  compels  me 
to  report  from  the  other 
side  of  the  fence  and 
articulate  what  it  is  I'm 
bummed  about  —  to  list 
some  of  the  things  that  make  me 
about  as  thankful  as  a  fiftysomeihing 
IT  worker  at  Best  Buy.  (Go  to  (^uick- 
Link  50984  if  you  said,  “Huh?"  when 
you  read  that.) 

I'm  bummed  that  Chris  Stone,  the 
former  Na  2  executive  at  Novell,  left 
the  compam’  earlier  this  month,  just 
as  it  was  beginning  to  jell  on  the 
strength  of  its  Linux  strategy.  CEO 
lack  Messman  is  a  really  nice  guy, 
but  I  know  I'm  not  the  only  one  who 
questions  his  wherewithal  to  run  the 
company  without  somebody  like 
Stone  serving  as  puppeteer.  Big-time 
loss  for  Novell's  users. 

I'm  bummed  that  Computer  Asso¬ 
ciates  can't  get  its  act  together  to 
hold  the  CA  World  tiscr  conference 
in  April  as  planned.  CA  users  will 
have  to  wait  until  the  fall  of  2005  for 
the  event,  after  being  told  that  it 
would  be  postponed  until  the  spring 
of  2006.  But  at  least  the  company 
fiRally  found  a  CF.O  after  se\'en 
months  of  acting-CEO  limbo  [Quick- 
Link  510.^5}.  CA  had  issued  a  state¬ 
ment  on  Oct.  I  proclaiming  that  it 
would  name  a  new  CEO  “in  the  next 


30  to  45  days."  and  it 
missed  that  deadline  by 
only  about  a  week.  I'm 
not  sure,  but  I  think  the 
way  CA  counts  days,  it 
just  made  it. 

I'm  bummed  that  Con¬ 
gress  popped  open  the 
H-IB  visa  cap  the  week¬ 
end  before  last  by  includ¬ 
ing  a  provision  for  20,000 
exemptions  to  the  cap  in 
an  omnibus  budget  bill 
(QuIckLink  50999].  I’m 
not  bummed  that  20,000  more  peo¬ 
ple  will  get 

H-lBs  this  year  —  hey.  I  say  let  the 
most  qualified  individual  get  the  job, 
regardless  of  his  citizenship  or  the 
ranting  of  xenophobes.  I'm  bummed 
that  the  system  allows  provisions 
like  this  to  be  tucked  into  appropria¬ 
tions  bills  rather  than  passing  or  fail¬ 


ing  on  their  own  merits  and  forcing 
individual  members  of  Congress  to 
be  accountable. 

I'm  bummed  that  a  senior  software 
engineer  in  Florida  did  a  much  bet¬ 
ter  job  than  I  did  of  making  the  point 
1  was  trying  to  make  about  offshore 
outsourcing  in  my  Nov.  15  editorial 
[QuickLtnk  50699],  Here’s  an  e.xcerpl 
from  a  letter  he  wrote:  "My  altitude 
about  the  matter  is  that  I  know  what 
I  am  doing.  I  am  excellent  at  soft¬ 
ware  development.  If  my  company 
decides  that  this  present  job  I  am  in 
must  be  filled  by  someone  else  (for 
financial  reasons  or  otherwise),  then 
that’s  fine  —  I'll  simply  go  find  some¬ 
thing  else  to  do.  The  whiners  must 
live  in  constant  fear  that  someone  is 
going  to  take  something  away  from 
them.  Unfortunate.  If  they  just  real¬ 
ized  that  what  they  have  should  be 
what  they  have  earned,  then  no  one 
can  take  what  they  truly  own  away 
from  them.  The  successful  people  in 
this  country  don’t  make  excuses, 
they  make  themselves  valuable  and 
do  the  work."  Brilliant. 

I’m  bummed  that  I'm  out  of  space. 
This  is  fun.  O  5K)29 


HAN  (.11  l  .MOk 

Priorities 
Are  Askew 
At  the  FCC 

IT  MUST  BE  TOUGH  being 
America’s  nanny,  especial¬ 
ly  when  there’s  so  much 
real  work  to  do. 

Michael  Powell,  chairman  of  the 
Federal  Communications  Commission, 
and  his  feckless  colleagues  are  on  a  roll 
these  days.  TTiey’rc  chasing  so-called 
indecency  from  the  airwaves  with  a 
zeal  we  haven’t  seen  in  decades,  caus¬ 
ing  broadcasters  to  turn  what’s  already 
a  Pablum  medium  into  even  worse  junk. 

What  docs  this  have  to  do  with  the 
world  of  business  and  IT?  Plenty  —  the 
serious  telecom  issues  on  the  FCC's 
plate  need  anentioru  and  they're  not 
getting  enough  of  it. 

There’s  been  at 
least  a  tiny  bit  of 
progress  on  one  kej’ 
issue:  whether  Inter¬ 
net-based  telephony, 
or  VoIP,  should  be 
regulated,  and  if  so. 
by  whom.  The  FCC 
recently  said  that  it 
alone  should  have 
regulatory  authority 
in  this  arena. 

That’s  a  good  idea. 

Many  states  have 
been  eyeing  VoIP 
in  a  variety  of  ways, 
especially  as  some¬ 
thing  they  might  ta.x. 

But  if  anything  in  to¬ 
day's  communications  world  is  an  in- 
tersute  system,  it’s  the  Internet.  And 
VoIP  is  just  one  more  bit  of  software 
using  the  Net. 

Now.  one  could  make  an  argument 
that  Internet  calls  to  or  from  phones 
served  by  fixed-line  carriers  should 
come  under  the  authority  of  the  stale 
agencies  that  regulate  the  regional 
telephone  monopolies.  That  would 
create  chaos,  however,  in  an  industry 
that's  just  beginning  to  be  a  serious 
player  on  the  leiecom  scene.  It  would 
create  chaos  for  customers,  too.  Feder¬ 
al  preemption  makes  sense  in  this  case. 

If  only  this  nod  to  common  sense 
was  matched  by  other  recent  FCC 
moves.  Susan  Crawford,  a  cyberlaw 
and  intellectual  property  specialist 
who  teaches  at  Yeshiva  University’s 
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Cardozo  Law  School  in  New  York,  re¬ 
cently  spotted  some  remarkable  lan¬ 
guage  in  an  FCC  legal  brief. 

The  issue  is  related  to  the  FCC's  wa¬ 
ter-carrying  for  the  copyright  industry, 
which  won  a  regulatory  requirement 
that  future  digital  video  displays  con¬ 
tain  “broadcast  flag”  technology,  a  sys¬ 
tem  in  which  a  television  will  refuse  to 
allow  copying  of  digital  content  desig¬ 
nated  by  the  copyright  owner. 

Now,  Cravrford  writes  in  her  blog 
(http:/.'^rawford.blogvfare.com/blog) 
that  the  FCC  is  saying  this  applies  to 
any  kind  of  digital  device  —  and  that 
the  law  gives  these  unclectcd  federal 
bureaucrats  “regulatory  power  over  all 
instrumentalities,  facilities  and  appara¬ 
tus  'associated  with  the  overall  circuit 
of  messages  sent  and  received'  via  all 
interstate  radio  and  wire  communica¬ 
tion."  Yikes. 

We  can  blame  Congress  for  some  of 
this.  It  writes  laws  that  let  regulators 
assume  wide  authority. 

But  like  the  spate  of  airwave  censor¬ 
ship  ca.scs.  such  regulatory  overreach¬ 
ing  is  a  threat  to  basic  freedom  of 
speech.  Now  that  Howard  Stem  is  tak¬ 
ing  his  act  to  satellite  —  an  act  that 
I  personally  find  distasteful,  but  not 
nearly  as  worrisome  as  the  bluenoscs 
who  want  to  censor  it  —  look  for 
moves  to  regulate  cable  and  satellite 
transmissions,  too. 

We  all  have  a  stake  in  freedom  of 
expression.  But  even  if  some  of  us 
don't  care  about  that,  these  trends  arc 
bad  for  business,  toa  If  technology  in¬ 
novators  need  permission  to  tnaricet 
inventions,  as  the  copyright  holders 
and  their  friends  in  Congress  and  the 
FCC  seem  to  believe,  then  we’ll  get  less 
innovation.  And  wc'll  all  suffer  if  that 
happens. 

I  realize  it’s  not  IT's  job  to  yell  out  in 
favor  of  freedom.  It’s  everyone's  job. 

O509B6 


MICHAEL  H.  HUGOS 

Agility  Is  a 
Frame  of 
Mind 

Agility  results  from  a 
way  of  looking  at  the 
world.  It  doesn't  come 
from  any  specific  technique 

or  a  particular  collection  of  technolo¬ 
gies.  Agility  starts  with  the  ability  to 
accurately  size  up  a  situation  in  a  time¬ 


ly  manner.  That  means  see¬ 
ing  potential  problems  and 
opportunities  and  devising 
bold  and  simple  ways  to 
avoid  the  problems  and 
seize  the  opportunities. 

IT  can  be  a  big  part  of 
what  makes  a  company  ag¬ 
ile.  or  it  can  be  a  big  part  of 
what  makes  it  a  clumsy, 
slow-moving  bureaucracy. 

One  of  the  major  determi¬ 
nants  of  this  Is  the  way  your 
company  answers  the  ques¬ 
tion,  “Should  we  build  our 
systems  fast,  or  should  we 
build  them  good?”  The  agile 
answer  is  to  build  them  fast 
and  good  enough  for  now. 

What  docs  “good  enough 
for  now”  mean?  In  a  fast- 
paced,  competitive  wt^rid. 
opportunities  arise  quickly  and  then 
either  fade  away  or  evolve  into  some¬ 
thing  cl.se.  The  advantage  goes  to  com¬ 
panies  that  can  develop  systems  that 
arc  ready  when  the  business  needs 
them  and  don't  cost  more  than  the  op¬ 
portunity  is  worth.  The  best  way  to  do 
this  is  to  create  systems  out  of  combi¬ 
nations  of  simple  building  blocks  and 
repeatable  processes. 

Here's  an  example:  My  company  is 
a  cooperative  of  member  companies 


(each  with  its  own  inter¬ 
nal  systcim)  that  band  to¬ 
gether  to  scr>-e  national 
accounts  bigger  than  any 
single  member  can  handle 
alone. 

One  of  our  customers  is 
a  large  chain  of  stores  that 
uses  specially  printed  and 
colored  items  for  the  holi¬ 
day  season.  It  wants  to 
make  sure  that  we  can  de¬ 
liver  enough  of  these  items 
to  all  of  its  stores  nation¬ 
wide  during  November 
and  December.  It  also 
wants  to  track  usage  of 
these  itcm.s  and  manage  the 
purchasing  process  so  that 
they're  .ill  gone  by  the  end 
of  the  season. 

In  the  past,  we  either 
didn't  deliver  enough  ptinluct  or  the 
chain  was  left  with  excess  inventory.  In 
July  of  this  yvar.  we  saw  an  opportuni¬ 
ty  to  improve  our  service  by  creating  a 
supply  chain  management  system  tai¬ 
lored  to  the  custiimer's  needs.  We  built 
it  in  August,  tested  it  in  September  and 
had  it  in  production  by  October.  At  the 
end  of  December,  we  can  cither  shut 
the  system  down  or  expand  it  to  track 
nonholiday  items,  depending  on  what 
!  the  customer  wants.  Either  way,  we'ic 
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delivering  a  lot  of  value  at  a  vcr\-  low 
cost  to  ourselves. 

How  did  we  do  this?  Wc  created  a 
simple  system  out  of  a  combination  i^f 
a  few  spreadsheets,  e-mail,  a  a»uple  of 
Web  pages  and  some  Java  programs 
that  took  about  two  weeks  to  write  and 
test.  The  system  allows  us  to  collect 
produciiiin  and  inventory  data  frt>m 
relevant  parties  in  the  supply  chain. 
Then  it  compiles  this  data  into  an  end- 
to-end  view  of  the  supply  chain  that  all 
parties  can  access  over  the  Internet. 
Becaujw  everybody  can  see  the  big  pic¬ 
ture  as  well  as  the  details,  we  now  co¬ 
ordinate  effectively  with  one  another 
on  the  making,  ordering  and  delivering 
of  product.s. 

If  the  customer  wants  us  to  expand 
this  system  to  track  nonholidav  items 
(and  it  looks  like  it  does),  we  will  re¬ 
spond  by  writing  a  few  mt>re  pro¬ 
grams  to  enhance  the  volume  and  fre¬ 
quency  of  the  data  cvillectiun  pnveess. 
The  rest  of  the  system  is  still  good 
enough  for  now.  We  will  move  with 
this  uppurtuniiy  a  step  at  a  time,  stay 
flexible  and  reap  tangible  benefits  as 
we  ga  O  49716 
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F^Ong  the  Heat 

TO  PARAPHRASE  George  San¬ 
tayana.  'Those  who  don't  study 
the  past  are  doomed  to  repeat  it.* 
The  ^icje  'Data  Centers  (Set  a 
Makeover' (OuidUjnk  49777) 
proves  it  yet  again  Qedromc  heal 
problems  are  nothmg  rtew.  and  I'm 
sure  the  one  IS  no  less  solvable  At 
¥tww.coottgzone.com.  you  will  find 
eager  thermal  engineers  who  are 
determined  to  solve  the  heat  prob¬ 
lem  so  carelessly  assumed  to  be 
solvableonlybyusingthebrute- 
toice  method,  which  reqives  that 
every  squaie  foot  of  a  50.000* 
square-foot  data  canter  becooled 
The  footprint  for  both  processors  as 
well  as  storage  is  shrinking  at  a 
pace  to  keep  up  with  demand.  Ac 
cording  to  Moore's  Law.  capacity 
doubles  every  Q  months,  but  size 
remains  constant  or  shnnks  And 
the  ability  to  coot  the  electronics  will 
teep  pace  (as  history  has  shown). 
The  net  of  this  Will  mean  there  will 
be  no  need  to  prepare  an  entire 
SO.OOO-square-ioot  space  to  han- 


de 500  watts  per  foot.  So  don't  in¬ 
vest  in  megawatt  generators  post  yet. 

BM  Anderson 

First  vice  preside/u.  Seortlr. 
iv(ond<rsonia)qwesr.ner 

YOim  GOHA  BE  MOOfNat  I've 
designed  a  number  of  data  cen¬ 
ters  and  never  used  Bithor  of  the 
guidelines  presented  m  this  artide 
'FaahtY  designer  used  to  apply  a 
rule  of  thumb  If  the  room 
was  going  to  be  X  thousand  square 
feet,  it  would  need  ytons  of  air  con¬ 
ditioning.  Or  designer  relied  on 
equipment  'nametNales'  that  ksted 
peak  power  usage  based  not  m 
cooling  requrements  but  on  safety 
requirements.*  And  I'm  talking  about 
both  targe  rooms  (7.000 square 
feet)  and  office*size  rooTTB.  PbMer 
recNirements  are  one  thmg  to  deter¬ 
mine  dectneal  requirements,  but  the 
actual  steady-state  kdovolt-amp^ 
requirements  can  be  used  and  con¬ 
vened  directly  to  tons  of  air  These 
are  provided  by  the  manufacturers 
lor  large  equipment,  but  unfortu¬ 
nately.  smaller  servers  often  ksl 


wattage  only.  A  safety  margm  s 
added,  and  an  ostnate  ot  future  re- 
quremerrtsalso  (Thss  yet  another 
remvented  «4ieel  that  had  been  pul 
to  rest  by  maintramers  by  the  19G0s ) 
The  tnck  today,  because  of  density. 
6  dstrtulion  of  that  coolant 
John  R.  Carter 
Oiicqgo 


A  Voting  Sotutkm 

I  ABREE  WITH  Dan  Gimor  about 
the  need  to  develop  open-sowce 
software  volmg  appitcalions 
(’Rawed  Vole  Could  (xve  IT  a  Black 
Eye.'  OukMjtA  50348]  But  I  thmk 
4’s  unfair  to  place  a  msfonty  of  the 
blame  tor  the  crummy  stale  of  vot¬ 
ing  technology  on  (T.  IT  profBCts  faN 
lor  many  reasons  butunrealstxiei- 
pectations  by  those  both  nside  and 
outside  of  IT  often  push  a  protect 
mio  the  M'bucke!  or  aNow  the  «n- 
plementalion  of  protects  that  should 
have  ended  up  » the  bit -bucket.  Un¬ 
realistic  deWvery  dates  and  expecta¬ 
tions  are  but  two  reasons  Mhy  IT 
protects  ta4  compleiely  or  prowde 


poor  sokjbons.  K  seems  logKial  that 
voters  mighi  be  served  best  if  a 
nonpansan  govemmern  agency 
developed  a  standaid  open-source 
soflverevolvigappiicalian  Private 
•nduslry  can  manufacture  the  hard¬ 
ware,  but  the  software  and  firmware 
canlbepropnefaiy  Of  course  a 
more  eleovtt.  simple  and  cosi- 
effectwe  solution  ngM  be  to  adopt 
Oregon’s  voting  system  -  a  paper 
ballot  received  vu  the  post  ofhoe 
Kim  Crutchfield 
/rw'ng,  7)>jnxs 

COMPUTERWORLO  widcomes 
comments  from  Its  readers  Letters 
will  be  edNed  for  brevity  and  danly 
They  should  be  addressed  to 
Jarrue  EcMe.  letters  editor.  Com' 
pulerworid.  PO  Box  9171. 1  Speen 
Street  Framingham.  Mass  01701 
Fax  (506)  879-4843  E*ma4 
fetters^computerworid  com 
tnckide  an  address  and  phone 
number  for  vnmediate  venficakon 
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LOOK  WITHIN  —  YOUR  NETWORK  IS 
MORE  POWERFUL  THAN  YOU  REALIZE 


Prepar*  for  convetged  networking.  Download 
‘‘Rethinking  the  Building  Blocks  of  Your  Network,' 
our  latest  white  paper  from  The  Tolty  Group,  at 
www.Qobroadcomxom/convar9onca 


To  engage  the  immense  power  of  IP  convergence  —  data,  voice,  applications,  networks  -  the  underlying  technology 
must  function  securely,  reliably  and  efficiently.  Only  Broadcom*  offers  end-to-end  networking  chips  with  the 
built-in  power  to  manage  convergence  —  from  core  storage  and  servers,  through  switch  fabrics  to  desktops, 
multi-functional  devices  artd  beyond.  Broadcom's  wired  and  wireless  technology  throughout  the  network  reduces  complexity  and  enhances  the 
end-user  experience.  With  Broadcom,  there  is  no  gap  between  legacy  and  future  technologies  —  only  seamless  communication  at  maximum 
speed.  Technology  advances.  Networks  expand.  Control  is  maintained. 
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Th^  platfonrr  of  choice^ 

just  got  better. 
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Introducing  the  Intel*  Xeon'  processor  with 
support  for  32-  and  64-bit  applications. 

It  means  the  most  widely  used 
server  platform  in  the  world  can  now  work  even  harder. 

And  new  platform  technologies  enable  increased  power  savings, 
flexibility  and  performance.  For  more 
information — and  more  choice — visit  intel.com/business. 
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Guarding  the  Grid 

Grid  computing  architectures  have 
a  way  of  amplifying  the  security 
issues  that  companies  routinely 
deal  with  in  nongrid  environments. 
So  it’s  important  not  to  overlook 
those  vulnerabilities  when 
deploying  grids,  users  say.  Page  32 


QUICKSTUDV 

Digital  Light  Processing 

This  system  for  projecting  images,  based  on  a 
unique  optical  semiconductor  chip  from  Texas 
Instruments,  contains  millions  of  tiny  mirrors 
that  are  individually  moved  by  digital  signals  in 
synchronization  with  a  light  source  and  color 
wheel.  Page  34 


SECURITY  MaNRSER'S  JOURNAL 

VPN  Evolution  Progressing  to  SSL 

One  VPN  technolc^  is  decommissioned, 
but  the  replacement  causes  new 
problems,  writes  Mathias  Thurman 
Secure  Sockets  Layer  offers  some 
answers,  but  there  are  still  problems 
to  be  resolved.  Page  36 


MESH 

MOVES  INTO  THE 
OFFICE 


WIRELESS 


(HTTIOOK:  Nascent 
802.TI  meshes  make  net¬ 
work  installs  and  changes 
a  snap.  But  compared 
with  traditional  wireless 
LANs,  mesh  networks 
have  throughput  limits 
and.  for  now.  lack  multi¬ 
vendor  interoperability. 
BYJOANIEWEXLER 


A  COSTLY  AND  COMPLEX  aspect 
today's  wireless  networks 
can  sometimes  be  the  very 
component  they're  suppo^ 
to  eliminate:  cabling.  Emerg¬ 
ing  802il-based  mesh  networks  atteii^>t 

to  resolve  this  irony  by  using  _ 

more  radio  ^>ectrum  and 

less  wire  in  die  form  (^Etb- 

emet  cabling  than  tradition-  TTmMlfMMK 

al  wireless  LANs. 

These  are  early  days  for 


WLAN  meshes,  but  proprietary  infra¬ 
structure  products  are  commercially 
available.  Organizations  with  difficult- 
to-cable  enviitmments  and  those  that 
frequently  move  their  WLAN  nodes 
are  among  mesh's  eariy  ad<^>ters. 


A  wireless  mesh  infrastructure  is, 
in  effect,  a  router  network  minus  the 
cabling  between  nodes  —  with  the  in¬ 
herent  rerouting  for  fruit  tolerance  that 
such  netwmks  delivex.  It's  built  of  peer 
radio  devices  that  don’t  each  have  to  be 
cabled  to  a  wired  port  like 
traditional  WLAN  access 
points  (AP)  da  Rather, 
each  simply  plugs  into  an 
AC  power  siq>ply.  It  auto¬ 
matically  self-oonfigures 


and  communicates  wi^h  other  nodes 
over  the  air  to  determine  the  most  efii- 
cient  multibc^  transmission  path. 

Today,  the  way  these  functions  woik 
is  unique  to  each  vendor.  So  enterpris¬ 
es  that  build  mesh  networks  will  l^ly 


use  one  vendcK*  for  a  few  years  until 
standards  are  in  place. 

"Mesh  is  a  reasonably  important  en¬ 
terprise  architecuire  goii^  forward, 
because  it  dramaticaliy  sinqilines  in- 
stallatioa,”  says  Craig  Mathias,  a  prin¬ 
cipal  at  Farpoint  Group,  a  consulting 
firm  in  Ashland,  Mass.  "You  take  a 
node  oiu  of  the  box,  plug  it  into  the 
wall  —  end  of  discussion.” 

Supplying  power  to  a  mesh  node  can 
still  ^  problematic.  However,  electri¬ 
cal  outlets  are  usually  frr  more  abun¬ 
dant  in  buildings  than  Etbmiet  ports 
are,  Mathias  notes. 

Only  devices  at  the  very  edge  of  the 
wirel^  mesh  hit  wire  —  either  to  coo- 
Conrimied  on  pqge  30 


IBM  Express  Middleware 


1.  Crates  of  patio  furniture  scanned. 

2.  Quantities  verified  on  secure  database. 

3.  Timetables  confirmed  online. 

4.  Inventory  added  to  order  automatically. 
5.1,200  plastic  chairs  en  route  to  Key  West. 


IBM  EXPRESS  MIDDLEWARE"*  IS  SOFTWARE. 

Software  like  WebSphere*  Express  that's  designed 
to  help  mid-si^  businesses  connect  their  processes 
to  meet  business  goals.  On  demand.  Designed  to  work 
with  the  IT  systems  you  have.  Designed  to  be  installed 
quickly  and  easily,  with  prices  starting  at  $600!  Ask  your 
Business  Partner  about  it  -  or  you  might  miss  the  boat. 
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HYou  take  a  node 
out  of  the  box. 
plug  it  into  the  wall  - 
end  of  discussion. 

CftAie  bUTHIAS.  PRINCIPAL 

PARPOINT  eROUP 

Continued  from  page  27 

neci  to  a  network  switch  or  to  stand* 

alone  cabled  devices  such  as  printers 

and  video  cameras. 

A  design  goal  is  to  minimize  the 
number  of  those  wired  devices  and  al¬ 
low  ttetwork  managers  to  easily  move 
wireless  nodes  as  needed  for  capacity 
and  coverage. 

In  a  wireless  mesh  network,  as  de¬ 
vices  are  added  and  moved,  the  net¬ 
work  automatically  discovers  topology 
changes  and  adjusts  trafTic-forwarding 
paths  to  optimize  throughput. 

Urology  Clinics  of  North  Texas  re¬ 
placed  a  traditional  WLAN  with  a 
meshed  Access/One  system  from  Strix 
Systems  Inc  in  Calabasas.  Catif  ,  for 
lust  this  reason.  “We  had  intermittent 
problems  with  interference  and  shift¬ 
ing  coverage  holes,"  explains  Kyle 
Nash.  IT  manager  at  the  Dallas-based 
£adUt)L  This  required  him  to  frequent- 
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ly  move  APs  to  mne  the  network, 
which  was  laborious  and  time-con¬ 
suming  because  cabling  ran  from  each 
AP  to  an  Ethernet  switch. 

“Now  I  just  move  APs  on  the  fly. 
This  means  the  network  is  up  longer. 

It  will  also  make  things  much  easier 
as  our  network  continues  to  expand." 
says  Nash,  whose  goal  is  for  the  five- 
oflTice,  200-plus  user  facility  to  eventu¬ 
ally  be  about  90%  wireless. 

Early  Players  and  Users 

The  flexibility  provided  by  mesh  net¬ 
works  is  particularly  helpful  over  large 
geographies  and  in  hard-to-wire  build¬ 
ings.  Cisco  Systems  Inc.,  for  one.  says  it 
helped  kick  off  the  effort  to  develop  the 
IEEE  802ils  mesh  networking  standard 
when  it  discovered  that  some  of  its 
customers  were  running  Cisco  Aironet 
APs  in  “repeater  mode."  whereby  one 
AP  backhauls  packets  to  another. 

“This  was  happening  in  large 
warehouses  where  customers  either 
couldn't  get  to  a  location  or  were  run¬ 
ning  into  Ethernet’s  100-roeter  cabling 
limitation,"  says  Jon  Leary,  product  line 
manager  in  Cisco’s  wireless  network¬ 
ing  business  unit. 

Similarly,  consider  hospitals  using 
the  services  of  Shared  P.ET.  Imaging 
LLC  in  Canton,  Ohio.  The  company 
offers  mobile  positron  emission  to¬ 
mography  (PET)  diagnostic  medical 
imaging  services  to  facilities  that  can’t 
support  the  service  full  time  tn-house. 

Mobile  scanning  labs  are  equipped 
with  an  S800  Firetide  Inc.  802.11b  Hot- 
Pdint  mesh  router  attached  to  a  PET 
scanner.  Tlie  router  in  the  mobile 
coach  communicates  images  to  anoth¬ 
er  router  inside  the  hospital,  where 
they  are  relayed  to  a  reader,  says  Marc 
Simms,  director  of  IT  at  Shared  P.E.T. 
Previously,  the  company  dragged  (Cate¬ 
gory  5  Ethernet  cabling  outdoors  after 
drilling  a  bole  in  the  building 
Simms  describes  the  cabling  as 
"flaky  and  susceptible  to  weather."  In 
one  instance,  cabling  beyond  the  100- 
meter  Ethernet  limit  required  the  in¬ 
stallation  of  more-costly  fiber  titles. 

Simms  says  that  before  the  company 
took  the  wireless  mesh  approach,  an 
installation  with  a  new  customer  took 
four  to  eight  weeks  and  cost  S2,000  to 
S4,000  —  or  $104)00,  if  fiber  was  in¬ 
volved.  "Now.  setup  time  is  about  an 
hour."  he  says. 

Strix  and  Los  Gatos,  (CaliC-based 
Firetide  are  the  two  Doesh  vendors  that 
have  made  the  greatest  enterprise  in¬ 
roads.  Firetide  focuses  strictly  on  wire¬ 
less  backbone  applications  —  the  com¬ 
pany  added  $4Mbit/sec.  802.11a  nodes 
to  its  portfolio  this  month  ^  u^ule 
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Strix  builds  nodes  that  perform  double 
duty  as  wireless  backbone  routers  and 
traditional  WLAN  APs. 

Strix  supports  802dla/b/g  in  a  mod¬ 
ular.  stackable  mode  that  costs  S800  to 
S900.  It  also  uses  the  foster,  shared 
54Mbit/sec.  802.Ua  or  g  for  backhaul 
and  802.Ub  for  user  access.  In  addition, 
Strix  says  it  can  use  the  proprietary 
802.11g  channel-bonding  mode  sup¬ 
ported  in  some  WLAN  chips  to 
achieve  108Mbit/sec.  optimum-shared 
bandwidth. 

Like  Strix  and  Firetide,  Tropos  Net- 
woiks  Inc.  in  San  Mateo,  Calif.,  makes 
both  indoor  and  outdoor  Wi-Fi  mesh 
products  that  could  be  used  by  enter¬ 
prises  or  public  network  t^rators.  To 
date,  though,  Ttopos  products  have 
been  installed  in  metropolitan  applica¬ 
tions.  such  as  dtywide  802 J1  hot-spot 
networks. 

Similariy.  Nortel  Networks  <2orp., 
which  began  shipping  mesh  products 
last  month  along  with  BelAir  Networks 
Inc.  and  RoamAD,  focuses  on  outdoor 
applications  such  as  municipal  and 
campus  backbones.  Like  Strix,  Nortel 
mesh  nodes  also  support  traditional 
AP  access,  and  Kanata.  Ontario-based 
BelAir's  products  offer  indoor  cover¬ 
age  from  the  same,  outdoor-mounted 


node.  Nortel  provides  indoor  WLANs 
via  a  product  line  from  Airespace  Inc., 
which  it  resells. 

The  enterprise  applications  for 
mesh  are  fairly  targeted,  given  the  rela¬ 
tively  low  spe^s  of  Wi-R  networks 
compared  with  gigabit-speed  cabled 
Ethernet  backbones.  The  actual 
throughput  speeds  of  Wi-R  are  about 
one-half  to  two-thirds  of  their  stated 
optimum  bandwidth  because  of  wire¬ 
less  overhead  and  Interference. 

Generally,  adding  more  mesh  nodes 
increases  capacity.  However.  Wi-R 
bandwidth  ts  shared,  and  while  both 
Strix  and  Rretide  cite  per-tu^  latency  eff 
less  than  5  msec,  this  could  add  up  as 
meshes  scale,  particularly  as  voice  ap¬ 
plications  emerge  and  more  hops  eat 
into  the  total  voice-latency  budget. 

Throughput  Consideraiions 

"The  concept  of  sustained  [wireless 
mesh]  backbone  bandwidth  is  not  ap¬ 
plicable,”  says  Sunil  Dbar,  director  of 
product  management  at  Rretide.  "End- 
to-end  throughput  is  determined  by 
the  number  of  wireless  hops  requi^ 
to  traverse  the  mesh,  the  density  of  the 
mesh  deplc^mient  and  the  amount  of 
interference.” 

"For  backhauL  you’re  going  to  pay. 
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performance-wise."  says  Yuval  Goren, 
a  wireless  consultant  at  Goren  Interna¬ 
tional  in  Saratoga,  Calif.  “Mesh  is  for 
applications  where  you  can't  get  access 
wherever  you  want,  such  as  temporary 
applications  where  it  makes  no  sense  tp 
pay  thousands  of  dollars  to  run  cables.” 

The  Computer  History  Museum  in 
Mountain  View,  Calif.,  has  such  an  ap¬ 
plication.  When  the  previous  occupant 
vacated  the  building  a  few  years  ago,  it 
cut  much  of  the  Ethernet  cabling  out  of 
the  120,000-square-foot  building. 

So  the  museum  is  using  Firetide 
nodes  for  temporary  exhibits  and  out¬ 
door  events,  where  generator  power  is 
used,  and  in  small,  inaccessible  areas  in¬ 
doors.  according  to  Mike  Walton,  the 
museum’s  director  of  IT. 

The  Computer  History  Museum 
runs  a  Hewlett-Packard  Co.  AP  infra¬ 
structure  hanging  off  the  Firetide 
UMbit/sec.  backbone,  which  serves 
places  such  as  the  lobby  for  event  reg¬ 
istration. 

“The  lobby  had  no  options  for  an 
Ethernet  drop.  Now,  if  I  want  registra¬ 
tion  computers,  all  I  have  to  do  is  plug 
a  [Firetide]  node  into  an  electrical  out¬ 
let,"  Walton  says. 

Similarly,  The  Science  Place,  an  inter¬ 
active  museiun  in  Dallas,  has  exhibits 
requiring  both  LAN  and  Internet  access 
that  are  frequently  moved.  The  38,000- 
square-foot,  two-building  facility  has 
20-foot  ceilings,  6-foot  limestone  walls 
and  strict  laws  about  what  can  be  done 
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director  of  IT. 

The  Strix  network  runs  through  both 
buildings  “without  having  to  string 
wires  across  the  floor."  Wright  says. 
However,  the  organization  retains  a 
wired  Fast  Ethernet  backbone  with 


I  lOMbit/sec.  throughput  to  the  desktop 
I  for  permanent  administrative  uses. 

Jose  VUlarreal,  director  of  technical 
maiketing  at  Strix,  counters  that  it  won’t 
be  long  before  wireless  is  on  par  with 
wired  speeds.  “Some  seriously  smart 
engineers  used  to  say  we  woidd  never 


be  able  to  deliver  broadband  o\ter  twist¬ 
ed  pair.  How  many  DSL  deployments 
are  being  done  each  day  now?"  O  SQ7t2 

Wezler  is  a  Jreelance  writer  based  in 
Campbell,  Calif.  You  can  reach  Herat 
/oame@/werler.com. 
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IN  2007 


The  IEEE  802.11  Task  Group  S  mel  in  September  to  begin  developing  a 
standard  for  interoperable  wireless  LAN  mesh  infrastructures.  There  are 
at  least  two  items  that  the  standard  will  likely  define. 


Conner  predicts  that  proposals  will  be  received  during  the  first  half  of 
2005  and  that  the  standard  will  be  complete  sometime  in  2007. 

-  Joanie  Wvxler 


HYou  take  a  node 
out  of  the  box, 
plug  it  into  the  wall  - 
end  of  discussion. 
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neci  to  a  network  switch  or  ii«  stand- 

alot>e  cabled  devices  such  as  printers 

and  video  cameras. 

A  design  goal  is  to  minimize  the 
number  of  those  wired  devices  and  al¬ 
low  network  managers  to  easily  move 
wireless  m»des  as  needed  for  capacity 
and  coverage. 

In  a  wireless  mesh  network,  as  de¬ 
vices  arc  added  and  moved,  the  net¬ 
work  automatically  discovers  topology- 
changes  and  adjusts  irafilc-for^varding 
paths  to  optimize  throughput. 

Urology  Clinics  of  North  Texas  re¬ 
placed  a  traditional  WLAN  with  a 
meshed  Access/ One  system  from  SirLx 
Systems  Inc.  in  Calabasas.  Calif,,  for 
just  this  reason.  “Wc  had  intcrmiHcnt 
problems  with  interference  and  shift¬ 
ing  coverage  holes."  explains  Kyle 
Nash,  IT  manager  at  the  Dallas-based 
facility.  This  required  him  to  frequent¬ 


ly  move  APs  to  tunc  the  network, 
which  was  laborious  and  time-con¬ 
suming  because  cabling  ran  from  each 
AP  to  an  Ethernet  switch. 

"Now  I  just  move  APs  on  the  fly. 
This  means  the  network  is  up  longer. 

It  will  also  make  things  much  easier 
as  our  network  continues  to  expand," 
says  Nash,  whose  goal  is  for  the  five- 
o/ficc.  200-plus  user  facility  to  eventu- 
'  ally  be  about  Wo  wireless. 

Eariy  Players  and  Users 

The  flexibility  pnwided  by  mesh  net¬ 
works  is  particularly  helpful  over  large 
[  geographies  and  in  hard-to-w'ire  build- 
I  ings.  Cisco  Systems  Inc.,  for  one.  says  it 
I  helped  kick  off  the  effort  to  develop  the 
I  IEEE  802.11s  mesh  networking  standard 
I  when  it  discovered  that  some  of  its 
customers  were  running  Cisco  Aironei 
APs  in  “repeater  mode."  whereby  one 
AP  backhauls  packets  to  another. 

"This  was  happening  in  large 
warehouses  where  customers  either 
couldn't  get  to  a  location  or  were  run¬ 
ning  into  Ethernet's  lOO-moter  cabling 
limitation."  says  fon  Leary,  product  line 
manager  in  Cisco's  wireless  network¬ 
ing  business  unit. 

Similarly,  consider  hospitals  using 
the  services  of  Shared  P.E.T.  Imaging 
LLC  in  Canton.  Ohio.  TTie  company 
offers  mobile  positron  emission  tt>- 
mography  (PET)  diagnostic  medical 
imaging  services  to  facilities  that  can't 
support  the  service  full  time  in-house. 

Mobile  scanning  labs  are  equipped 
with  an  S800  Firetide  Inc.  802.Ub  Hot- 
Point  mesh  router  attached  to  a  PET 
scanner.  The  router  in  the  mobile 
I  coach  communicates  images  to  anoth¬ 
er  router  inside  the  hospital,  where 
they  are  relayed  to  a  reader,  says  Marc 
Simms,  director  of  IT  at  Shared  P.E.T. 
Previously,  the  company  dragged  Cate¬ 
gory  5  Ethernet  cabling  outdoors  after 
drilling  a  hole  in  the  building. 

Simms  describes  the  cabling  as 
"flaky  and  susceptible  to  weather."  In 
one  instance,  cabling  beyond  the  lOO- 
meier  Ethernet  limit  required  the  in¬ 
stallation  of  more-costly  fiber  optics. 

Simnu  says  that  before  the  company 
look  the  wireless  mesh  approach,  an 
installation  with  a  new  customer  took 
four  to  eight  weeks  and  cost  S2.000  to 
S4.000  -  or  SIO.OOO.  if  fiber  was  in¬ 
volved.  “Now.  setup  time  is  about  an 
hour."  he  says. 

Strix  and  Los  Gatos.  Calif.-based 
Firetide  arc  the  two  mesh  vendors  that 
have  made  the  greatest  enterprise  in¬ 
roads.  Firetide  focuses  strictly  on  wire¬ 
less  backbone  applications  —  the  com¬ 
pany  added  54Mbit/scc.  802.11a  nodes 
to  its  portfolio  thLs  month  —  while 


I  Strix  builds  nodes  that  perform  double 
I  duty  as  wireless  backbone  routers  and 
traditional  WLAN  APs. 

Strix  supports  802.11a/b/g  in  a  mod¬ 
ular.  stackable  mode  that  costs  $800  to 
$900.  It  also  uses  the  faster,  shared 
54Mblt/sec,  803.na  or  g  for  backhaul 
and  802.)lb  for  user  access.  In  addition. 
Strix  says  it  can  use  the  proprietary 
802.llg  channel-bonding  mode  sup¬ 
ported  in  some  WLAN  chips  to 
achieve  108Mbit/sec.  optimum-shared 
bandwidth. 

Like  Strix  and  Firetide,  Tropos  Net¬ 
works  Inc.  in  San  Mateo.  Calif.,  makes 
both  indoor  and  outdoor  Wi-Fi  mesh 
products  that  could  be  used  by  enter¬ 
prises  or  public  network  operators.  To 
date,  though.  Tn>pos  products  have 
been  installed  in  metropolitan  applica¬ 
tions.  such  as  citywidc  802.11  hot-spot 
networks. 

Similarly.  Nortel  Networks  Corp., 
which  began  shipping  mesh  products 
last  month  along  with  BelAir  Networks 
Inc.  and  RoamAD.  focuses  on  outdoor 
applications  such  as  municipal  and 
campus  backbones.  Like  Strix.  Nortel 
mesh  nodes  also  support  traditional 
AP  access,  and  Kanata.  Ontario-based 
BelAir's  products  offer  indoor  cover¬ 
age  from  the  same,  outdoor-mounted 


node.  Nortel  provides  indoor  WLANs 
via  a  product  line  from  Airespacc  Inc.. 
which  it  resells. 

The  cnicrprise  applications  for 
mesh  are  fairly  taigcted.  given  the  rela¬ 
tively  low  speeds  of  Wi-Fi  networks 
compared  with  gigabit-speed  cabled 
Ethernet  backbones.  The  actual 
throughput  speeds  of  Wi-Fi  are  about 
one-half  to  two-thirds  of  their  stated 
optimum  bandwidth  because  of  wire¬ 
less  overhead  and  interference. 

Generally,  adding  more  mesh  nodes 
increases  capacity.  However.  Wi-Fi 
bandwidth  is  shared,  and  while  both 
Strix  and  Firetide  cite  per-hop  latency  of 
less  than  5  msec,  this  could  add  up  as 
meshes  scale,  particularly  as  voice  ap¬ 
plications  emerge  and  more  hops  cat 
into  the  tola!  voice-latency  budget. 

Throughput  Considerations 

“The  concept  of  .sustained  (wireless 
mesh)  backbone  bandwidth  is  not  ap¬ 
plicable,"  says  Sujul  Dhar,  director  of 
product  management  at  Firetide.  "End- 
to-end  throughput  is  determined  by 
the  number  of  wireless  hops  required 
to  traverse  the  mesh,  the  density  of  the 
mesh  deployment  and  the  amount  of 
interference." 

"For  backhaul,  you're  going  to  pay. 
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pcrformancc-wise.”  says  Yuval  Goren. 
a  wireless  consultant  at  Goren  Interna¬ 
tional  in  Saratoga,  Calif.  “Mesh  is  for 
applications  where  you  can't  get  access 
wherever  you  want,  such  as  temporary 
applications  where  it  makes  no  sense  to 
pay  thousands  of  dollars  to  run  cables." 

The  Computer  History  Museum  in 
Mountain  View.  Calif.,  has  such  an  ap¬ 
plication.  When  the  previous  occupant 
vacated  the  building  a  few  years  ago.  it 
cut  much  of  the  Ethernet  cabling  out  of 
the  120,000-squarc-foot  building. 

So  the  museum  is  using  Firetide 
nodes  for  temporary  exhibits  and  out¬ 
door  events,  where  generator  power  is 
used,  and  in  small,  inaccessible  areas  in¬ 
doors.  according  to  Mike  Walton,  the 
museum’s  director  of  IT. 

The  Computer  History  Museum 
runs  a  Hewlett-Packard  Co.  AP  infra¬ 
structure  hanging  off  the  Firetide 
llMbit/sec.  backbone,  which  serves 
places  such  as  the  lobby  for  event  reg¬ 
istration. 

“The  lobby  had  no  options  for  an 
Ethernet  drop.  Now.  if  1  want  registra¬ 
tion  computers,  all  I  have  to  do  is  plug 
a  [Firetide]  node  into  an  electrical  out¬ 
let."  Walton  says. 

Similarly.  The  Science  Place,  an  inter¬ 
active  museum  in  Dallas,  has  exhibits 
requiring  both  LAN  and  Internet  access 
that  are  frequently  moved.  The  38.000- 
square-foot,  two-building  facility  has 
20-foot  ceilings.  6-foot  limestone  walls 
and  strict  laws  about  what  can  be  done 


to  the  building,  says  Michael  Wright, 
director  of  IT. 

The  Strix  network  runs  through  both 
buildings  “without  having  to  string 
wires  across  the  floor,"  Wright  says. 
However,  the  organization  retains  a 
wired  Fast  Ethernet  backbone  with 


lOMbit/sec.  throughput  to  the  desktop 
for  permanent  administrative  uses. 

Jose  Villarreal,  director  of  technical 
mariteting  at  Strix.  counters  that  it  won't 
be  long  before  wireless  is  on  par  with 
wired  speeds.  “Some  seriously  smart 
engineers  used  to  say  we  would  never 


be  able  tu  deliver  broadband  over  twist¬ 
ed  pair.  Hr>w  many  DSL  deployments 
are  being  done  each  day  rK>w?"  O  50712 

Wexler  is  a  freelance  writer  based  in 
Campbell,  Cali/  You  can  reach  her  at 
ioanieiaiwexler.com. 


32 


wn,m 


nCHMlIWY 


w.computerworld.com 


Guardma 

theGthT 

Security  issues  around  grid  computing 
are  not  new  or  differentrbut  they  grow 
with  the  grid.  By  Jaikumar  Vijayan 
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Deploying  a  grid  infrastructure  can 
help  companies  dramatically  improve 
hardware  utilization  rates  and  boost 
computing  power.  But  the  massive 
resource  aggr^tion  and  wider  end*user 
access  enabled  by  grids  also  have  the 
potential  to  magnify  security  risks,  implementers  say. 

As  a  result,  companies  that  are  implementing  grid 
technologies  need  to  pay  special  attention  to  issues 
such  as  user  authentication,  authorization  and  access 
control  as  well  as  auditing  and  data  integrity  —  both 
when  data  is  in  storage  and  while  it's  in  transit 
Ensuring  that  adequate  measures  are  in  place 
for  responding  to  the  effects  of  worms  and  viruses, 
which  can  be  amplified  in  a  grid  setup,  is  also  crucial 
in  grid  computing.  IT  mana^rs  say. 

Most  of  the  problems  that  IT  stalls  have  to 
deal  with  in  a  grid  environment  are 
similar  to  the  ones  they  lace  in  nongrid 
environments,  says  John  Huriey.  senior 
manager  for  distributed  software  and 
systems  integration  at  The  Boeing  Co.‘$ 
mathematics  and  computing  technol¬ 
ogy  group  in  Seattle.  “But  [they]  take 
on  much  greater  significance  in  a  grid 
environment  because  of  the  fondamen- 
tal  premise  of  grids  —  access,  sharing 
and  collaborative  computing,”  be  notes. 

Grid  computing  creates  the  “poten¬ 
tial  for  gateways  into  an  environment” 
where  none  existed  before,  says 
Hurley. 

MORE  POWER,  MORE  RISK 

A  grid  installatioo  harnesses  the 

combined  power  of  numerous 
servers  and  PCs  to  run  appli¬ 
cations  and  services  as  one 
large  system.  Grids  have  been 
used  for  years  to  run  compute- 
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intensive  applications  in  academic  and  research  or¬ 
ganizations.  The  improved  resource  utilization  and 
power  delivered  by  grids  have  also  begun  to  attract 
the  attention  of  corporate  America.  A  survey  of  550 
database  professionals,  released  in  January  by  Santa 
Cruz,  Calif-based  Evans  Data  Corp.,  showed  that  one 
in  live  companies  is  planning  to  deploy  grids  during 
the  next  two  years. 

The  potential  severity  of  grid-related  security 
problems  depends  largely  on  the  context  in  which 
grids  are  being  used,  says  Dane  Skow,  deputy  com¬ 
puter  security  executive  at  the  Fermi  National  Accel¬ 
erator  Laboratory  in  Batavia.  IlL  “When  you  talk  to 
people  about  grids,  they  have  different  scenarios  in 
mind  —  everything  from  clusters  in  the  same  room 
run  by  the  same  infrastructure  team  to  global  power- 
grid-like  infrastructures,”  says  Skow. 

Research  grids,  for  instance,  typically  provide  ac¬ 
cess  to  users  from  multiple  organizations  and  securi¬ 
ty  domains.  Fermi  operates  a  grid  for  high-energy 
physics  applications  that's  accessed  by  more  than 
5,000  users  in  some  80  organizations  —  several  of 
which  are  in  Europe. 

User  access,  authentication  and  authorization  in 
such  an  environment  can  be  a  big  challenge,  given 
the  fact  that  there’s  no  single  identity  authority,  says 
Skow,  who  is  also  part  of  the  security  group  at  the 
Global  Grid  Forum,  a  Lemont,  ni.-based  organization 
with  members  from  more  than  400  vendors  and 
user  companies. 

In  contrast,  a  grid  being  run  by  a  private-sector 
company  typically  uses  internal  resources  and  is  ac¬ 
cessed  by  users  whose  identities  are  already  stored 
in  an  internal  directory.  As  a  result,  it’s  easier  to  get  a 
grip  on  identity  management  in  a  company  grid  than 
it  is  wHh  grids  in  a  research  setting,  Skow  says. 

CENTRAL  MANAGEMENT  NEEDED 

Regardless  of  the  manner  in  which  grids  are 
being  used,  there  is  ”more  of  a  requirement  for  a 
centrally  managed  ID  infrastructure,  whether  it  is 
PRI^ased  or  i&rberos-based.”  says  Clifford  Neu¬ 
man,  associate  director  at  the  University  of  Southern 
California's  Information  Sciences  Institute  in  Mari¬ 
na  del  Rey,  Calif 

What’s  also  required  is  a  way  to  authenticate  the 
clients  and  servers  that  are  attached  in  a  grid  config¬ 
uration,  be  notes.  Because  of  the  wider  access  en¬ 
abled  in  a  grid  environment,  it  becomes  crucial  to 
ensure  that  data  flowing  through  the  network  comes 
from  a  trusted  source  and  not  an  imposter. 

There  are  several  methods  currently  available 
to  do  this.  Neuman  says.  In  a  pubUc-k^  infrastnic- 
lure  environment,  for  instance,  servers  and  clients 
could  mutually  authenticate  each  other  using  Higifai 
ceniflcates  issued  by  a  trusted  authority.  In  a  Ker¬ 
beros  setup,  the  same  thing  could  be  accomplished 
via  encrypted  keys  stored  in  advance  on  a  Kerberos 
authentication  server,  he  su^ests.  Other  methods  in¬ 
clude  the  use  of  Secure  Sockets  Layer  technology 
to  authenticate  servers  by  clients  l^lbre  starting  an 
encrypted  sessioa 

Companies  that  are  deploying  grids  also  must  pro¬ 
tect  data  during  transmission  on  the  network  via  en¬ 
cryption,  says  r>kku  Venkat,  chief  technol<^  officer 
at  United  Devices  Inc,  an  Austin-based  ven^r  of 
technologies  for  aggregatii^  computing  resources 
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into  clusters  and  grids.  In  addition,  companies  must 
put  mechanisms  in  place  to  guarantee  that  the  data 
isn’t  tampered  with  in  any  manner  while  it  traverses 
the  grid,  according  to  Venkat. 

Both  measures  are  needed  because  anyone  con¬ 
nected  to  the  grid  could  access,  modify  or  delete  data 
flowii^  through  it,  either  accidentally  or  maliciously, 
Venkat  says. 

United  Devices  attaches  checksums  to  data  before 
it’s  encrypted  and  then  verifies  that  the  checksum  is 
the  same  when  the  message  is  being  decrypted  to  en¬ 
sure  that  nothing  has  been  tampered  with,  Venkat 
explains.  “We  also  recommend  that  only  digitally 
signed  code  modules  are  permitted  on  a  grid.  If  it  is 
not  signed,  don’t  run  it  on  a  grid,**  he  says. 

There  are  also  certain  security  concerns  that  get 
“amplified”  in  grid  architectures,  says  Lee  Cooper, 
chairman  of  the  Enterprise  Grid  Alliance,  a  San  Ra¬ 
mon.  Calif.-based  consortium  of  vendors  and  users. 

One  obvious  example  is  the  threat  from  vporms 
and  viruses.  The  same  highly  automated  and  effi¬ 
cient  manner  in  which  resources  are  allocated  on  a 
grid  could  be  used  by  a  malicious  attacker  to  bis  ad- 
vant^e,  Huriey  warns.  As  a  result,  “keeping  all  grid 
resources  frilly  patched  and  configured  securely  begs 
for  some  sort  of  centralized  solution,”  Cooper  says. 

Good  incident-response  mechanisms  should  help 
minimize  the  impact  of  such  attacks  in  case  one  oc¬ 
curs,  Hurley  says. 

CAREFUL  WtTHPOUCIES 

Another  crucial  area  with  security  implications  is 
policy  reconciliation  on  a  grid,  accorcfing  to  Skow. 

Because  grids  can  run  different  applications  at  dif¬ 
ferent  times,  companies  should  have  a  clear  under¬ 
standing  of  the  various  policies  —  such  as  user  ac- 


SEVBIAL IBIBTIIV  6M)UPS  are  researching  grid  secar 
rity  as  inore  cornparMS  begm  looking  a(  grids  as  a  way  to 
improve  resource  utiization  an!  omputing  poww 
For  exarnple,  The  Globus  AKance  is  working  on  a  wide 
range  of  grid-related  teduiologies  and  standards  issues. 
The  group  has  developed  the  Gk)bus  TooIqL  which  is  de¬ 
signed  to  enable  secure  amvTiunication.  muh^ 
cation  and  single  sign-on  in  a  grid  envrorwTtent. 

The  tool  kit  is  based  on  an  open-source  implementation 
of  the  Grid  Security  Infrastructure  standards  that  adds  sup¬ 
port  for  single  sign-on  and  delegation  of  adrninistration. 
according  to  the  group's  Web  sde. 

The  Globus  Alliance  is  made  up  of  a  number  of  organi¬ 
zations.  incluclng  the  Argonne  Nation^  Laboratory,  the 
Universtty  of  Chicago  and  the  IMversity  of  Southern  Cali- 
fomia's  Information  Sciences  Institute. 

The  Global  Grid  Forum  (GGF)  is  woridng  to  develop 


cess  restrictions  or  the  authentication  requirements 
—  that  are  attached  to  each  application.  Skow  says. 

“There  needs  to  be  some  consistent  and  congruent 
way  to  mediate  those  rules.  And  it  has  to  be  done  in  a 
very  s^nificant  way”  before  companies  can  take  frill 
advantage  of  grids.  Hurley  says. 

Addressing  grid  security  may  not  involve  new 
technologies,  ^t  because  of  the  increased  potential 
vulnerability,  protective  measures  become  more 
urgent 

Grid  architectures  in  the  enterprise  f^e  the  samp 
security  issues  that  one  sees  in  a  nongrid  environ- 


security  spedficatiorts  wilhiri  The  Gkibifi  Al^ 

Grid  Servicas  Architecture.  According  to  Dane  Slow,  one 
of  tttt  area  directors  in  liiatge  of  secuity  at  the  GGF.  the 
efiort  is  kMxeed  on  functions  such  as  iser  authenticatN^ 
arx)  autlxirization  in  a  grid  irdrastructure. 

For  instance,  ttw  group  is  developing  a  conceptual  grid 
autfwrtzationlnimeworktohelpdevBtopefsenatefaet^ 
user  authorization  on  grid  networks.  Arolher  projed  1^ 
volves  devek)pino  procedures  arxf  guidekrws  for  enable 
the  use  of  X.S09  and  other  technologies  for  oossDrid 
user  authentication,  acxerding  to  the  groio's  Web  site. 

The  Enterprise  Grid  ABiance  is  a  coalition  (rf  users  and 
vendors  that's  working  on  grid  security  as  part  of  a  broader 
effort  to  adckess  security  concerns  restiting  from  the  use  of 
shared  components  in  a  grid  network.  The  group's  goaf  is  to 
use  exsting  technologies  to  handle  such  issues. 

‘JakjmarViiafan 


ment,  so  “cleariy.  these  need  to  be  addressed,”  Coop¬ 
er  points  out 

But.  he  adds,  “the  same  tools  and  technologies 
that  are  used  today  to  secure  storage,  computiiig  and 
network  resources  all  apply  in  a  grid  architecture.” 
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prototype  DLP  projectors  for 
the  flr^  time,  llie  technolo¬ 
gy's  promise  was  quickly  rec¬ 
ognized.  In  1997.  the  Academy 
of  Motion  Picture  Arts  and 
Sciences  chose  DLP  to  project 
film  at  the  Oscars,  where  the 
first  three-chip  DLP  technolo¬ 
gy  was  demonstrated  to  the 
Hollywood  community. 

In  1999,  DLP  Cinema  was 
first  demonstrated  to  the  pub¬ 
lic  with  the  release  of  Star 
Won  fptsode  /;  Tlie  Phantom 
Menace.  By  Decenfoer  2002, 
TI  had  shipped  2  million  DLP 
subsystems. 

DLP  Products  has  also  re¬ 
ceived  two  Emmy  Awards,  for 
broadcast  excellence  in  1998 
and  for  technology  and  ei^- 
neering  in  2003.  In  2002, 
Hombeck  was  elected  a  fellow 
of  the  International  Society 
for  Optical  Engineering  and 
recei^  the  David  Samoff 
Medal  from  the  Society  of  Mo¬ 
tion  Picture  and  Tblevision 
Ei^ineers.  O  50670 


Kioy  is  o  Computerworld  con¬ 
tributing  writer.  Vbu  can  reoch 
him  at  nisskay@chaner.net. 
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fers  greater  contrast  (up  to 
5.000-IO-1  vs.  LCD’s  800-to-l), 
with  better  blacks,  while  LCD 
produces  greater  color  satura¬ 
tion.  Side  by  side,  an  LCD  dis¬ 
play  looks  slightly  sharper 
than  a  DLP  in  text  display  ap¬ 
plications,  but  DLP  bu  the 
edge  with  moving  video,  re¬ 
ducing  pixelation,  or  the 
“screen-door  effect" 

The  brightest  projectors 
still  use  LCD  teclmology, 
udiicfa  is  slightly  more  efifi- 
cient  but  the  smallest  lightest 
projectors  use  DIP.  In  2003, 
DLP  systems  accounted  for 
13%  of  the  maiket  for  large- 
screen  televisions  (over  40 
inches),  according  to  The 
NPD  Group  Inc.,  a  Port  Wash¬ 
ington.  N.Y.-based  consultan¬ 
cy.  In  the  past  year,  the  num¬ 
ber  of  models  of  DLP  TVs 
has  tripled. 


DIP'S  Origins 

The  DMD  chip  was  invented 
in  1987  by  TI  scientist  Larry 
Hombeck,  who  had  been 
exploring  the  manipula- 
ticm  of  reflected  light 
since  1977.  In  1992,  TI 
started  a  project  to 
explore  the  DMD’s 
commercial  viabil- 
it 


technology  DLP 
and  formed  a  sepa¬ 
rate  group  (now  called  the 
DLP  Products  division)  to 
develop  commercial  di^lay 
applications. 

In  1994,  TI  demonstrated 


To  get  color,  such  as  for  a 
TV  set,  a  rotating  color  vriieel 
(with  red.  green  and  blue  fil¬ 
ters)  is  put  between  the  white 
light  source  and  the  DMD. 

The  control  input  delivers 
separate  signals  for  each  of 
the  three  colors,  and  each 
mirror  (te..  each  pixel)  is 
switched  on  and  off  as  the  fil¬ 
ter  rotates  each  color  between 
the  lamp  and  DMD. 

For  example,  to  project  a  yel¬ 
low  pixel,  a  minor  will  reflect 
only  red  and  green  light  to  the 
projection  suifoce.  To  projea  a 
purple  pixeL  that  mirror  will 
be  switched  off  while  the  blue 
filter  is  in  positioo.  and  the 
blue  and  yellow  flashes  will  al¬ 
ternate  so  rapidly,  our  brains 
will  blend  them  together  and 
well  see  ptirple.  This  process 
allows  a  DLP  system  to  pro¬ 
duce  up  to  16.1  million  colors. 
Older  DLP  systems  also  in¬ 
cluded  a  dear  segment  to 
bump  up  overall  brightness  at 
the  expense  of  color  saturation. 

Consumer-grade  television 
monitors  use  the  system  de¬ 
scribed  above.  For  very  large 
projection,  such  as  in  movie 
theaters  and  auditoriums,  a 
more  sophisticated  system 
uses  three  DMD  chips,  one 
for  each  color,  phis  an  optical 
prism.  The  prism  splits  white 
light  into  colors  and  then  re¬ 
combines  the  three  images 
before  sending  them  through 
the  projection  lens.  Hiis  sys¬ 
tem.  called  DLP  Cinema,  can 
produce  35  trillion  colors. 

In  most  applications,  DLP 
competes  directly  with  LCD 
projectioa  DLP  typically  of¬ 


W IIUMCLL  KAV 

When  one  first  hears  about 
digital  light  processing  (DLP), 
it  seems  almost  impossibly 
complex,  even  ma^cal  —  mil- 
lioRs  of  tiny  mirrors  on  a  chip 
the  size  of  your  thumbnail, 
each  of  them  capable 
of  moving  thousands 
of  times  per  second  to 
create  a  digital  image. 

In  foct.  DLP  (a  trade¬ 
mark  of  Texas  Instru¬ 
ments  Inc)  gives  new 
meaning  to  the  phrase  "smoke 
and  minors"  as  it  ^lies  to 
computer-related  technology. 

HowDlPVIforie 

In  essence.  DLP  is  a  nanotech¬ 
nology  implementation  of  the 
old  survival  technique  of  using 
a  mirror  to  si^ial  for  help  — 
its  purpose  is  to  shine  a  con¬ 
trolled  series  of  light  flashes 
on  a  target  to  send  a  message. 
The  mirror  in  this  case  is  part 
of  an  optical  semiconductor 
called  a  digital  micromiiror 
device,  or  DMD.  The  DMD 
efa^  contains  not  one  but  an 
array  of  up  to  2J  millioD  micro¬ 
scopic  mirrors,  each  just  16  mi¬ 
crometers  square  (less  than 


one-fifth  the  size  of  a  human 
hair)  and  1  micrometer  apart 
The  DMD  chip  is  driven  by 
a  digital  video  or  graphic  sig¬ 
nal  in  which  each  digital  pixel 
corre^nds  to  a  single  mirror 
on  the  DMD.  Add  a  light 

source  and  a  projec¬ 
tion  lens,  and  the  mir¬ 
rors  can  reflect  a  digi¬ 
tal  im^  onto  a  view¬ 
ing  screen  or  other 
surface.  Each  mirror  is 
mounted  on  tiny 
hinges,  so  it  can  be  tilted  12 
d^rees  toward  or  away 
from  the  light 
source,  creating  a 
light  or  dark  pixel 
on  the  projection 
surface. 

Tbe  control  elec 
tronics  direct  each 
mirror  to  tilt  — 
words,  to  switch  on 
off  —  up  to  5.000  times 


quently  than  off.  it  reflects  a 
light  gray  pixel;  a  aurror 
that’s  switched  off  more  often 
reflects  a  darker-gray  pixel 
This  lets  DLP  project  up  to 
1,024  shades  of  gray. 


Digital  Light 
Processing 

DEFINITION 

Digitai  Light  Processing  (DLP)  is  a 

system  for  projecting  images 
that’s  based  on  a  unique  optical 
semiconductor  chip  from  Texas 
Instruments.  The  chip  contains 
millions  of  tiny  mirrors  that 
are  individually  moved  by  digi¬ 
tal  signals  in  synchronization 
with  a  light  source  and  color 
wheel.  The  result  is  a  sharp 
projected  image  that’s  clearly 
visible  in  a  normally  lit  room. 


inspired  by  the  human  side  of  data 


Data  Storage  from  Hitachi. 
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Digital  Ught 
Processing 


I'l  l  IM  I  ION 

Digital  Ught  Processing  (DLP)  is  a 

system  for  projecting  images 
that’s  based  on  a  unique  optical 
semiconductor  chip  from  Texas 
Instruments.  The  chip  contains 
millions  of  tiny  mirrors  that 
are  individually  moved  by  digi¬ 
tal  signals  in  synchronization 
with  a  light  source  and  color 
wheel.  The  result  is  a  sharp 
projected  image  that’s  clearly 
visible  in  a  normally  lit  room. 


•V  RUSSELL  KAV 

When  one  first  hears  about 
digital  light  processing  (DLf’). 
it  seems  almost  impossibly 
complex,  even  magical  —  mil¬ 
lions  of  liny  mirrors  on  a  chip 
the  size  of  your  thumbnail. 

each  of  them  capable  _ 

of  moving  thousands 
of  times  per  second  to 
create  a  d^tal  image, 
in  &ct.  DLP  (a  trade¬ 
mark  ofTexas  Instru-  _ 

menis  Inc.)  gives  new 
meaning  to  the  phrase  "smoke 
and  mirrors'’  as  it  applies  to 
computcr-rcbtcd  technology. 

How  DIP  Works 

In  essence.  DLP  is  a  nanotech¬ 
nology  implementation  of  the 
old  survival  technique  of  using 
a  mirror  to  signal  for  help  — 
its  purpose  is  to  shine  a  con¬ 
trolled  series  of  light  flashes 
on  a  target  (o  send  a  message. 
The  mirror  in  this  case  is  pan 
of  an  optical  semiconductor 
called  a  digital  micromirror 
device,  or  DMD.  The  DMD 
chip  contains  not  one  but  an 
array  of  up  to  2.1  million  micro¬ 
scopic  mirrors,  each  just  16  mi¬ 
crometers  square  (less  than 


one-fifth  the  size  of  a  human 
hair)  and  1  micrometer  apart. 

The  DMD  chip  is  driven  by 
a  digital  video  or  graphic  sig¬ 
nal  in  which  each  digital  pixel 
corresponds  to  a  single  mirror 
on  the  DMD.  Add  a  light 
-  source  and  a  prolec¬ 
tion  tens,  and  the  mir¬ 
rors  can  reflea  a  digi¬ 
tal  image  onto  a  view¬ 
ing  screen  or  other 

_  surface.  Each  mirror  is 

mounted  on  tiny 
hinges,  so  it  can  be  tilt^  12 
degrees  toward  or  away 
from  theli^t 
source,  crcaiir^  a 
light  or  dark  pixel 
on  the  projection 
surface. 

The  control  elec¬ 
tronics  direct  each 
mirror  to  tilt  —  in  otht 
words,  to  switch  on 
off  —  up  to  5,000  times 
per  second.  When  a  mirror^ 
is  switched  on  more  fre¬ 
quently  than  off,  it  refleas 
light  gray  pixel:  a  mirror 
that's  switched  off  more  often 
reflecLs  a  darker-gray  pixel. 
This  lets  DLP  proiea  up  to 
1,024  shades  of  gray. 


To  get  color,  such  as  for  a 
TV  set.  a  rotating  color  wheel 
(with  red.  green  and  blue  fil¬ 
ters)  is  put  between  the  white 
light  source  and  the  DMD. 
The  control  input  delivers 
separate  signals  for  each  of 
the  three  colors,  and  each 
mirror  (i.e..  each  pbcel)  is 
switched  on  and  off  as  the  fil¬ 
ter  rotates  each  color  between 
the  lamp  and  DMD. 

For  example,  to  projea  a  yel¬ 
low  pixel,  a  mirror  will  reflect 
only  red  and  green  U^l  to  the 
projection  surface.  To  projea  a 
purple  pixel,  that  mirror  will 
be  switched  off  while  the  blue 
filter  is  in  position,  and  the 
blue  and  yellow  flashes  will  al¬ 
ternate  so  rapidly,  our  brains 
will  blend  them  together  and 
we'll  see  purple.  This  process 
allows  a  DLP  system  to  pro¬ 
duce  up  to  16.)  million  colors. 
Older  DLP  systems  also  in¬ 
cluded  a  clear  SL'gmcnt  to 
bump  up  overall  brightness  at 
the  expense  of  color  saturation. 

Consumer-grade  television 
monitors  use  the  system  de¬ 
scribed  above.  For  very  large 
projection,  such  as  in  movie 
theaters  and  auditoriums,  a 
more  sophisticated  system 
uses  three  DMD  chips,  one 
for  each  color,  plus  an  optical 
prism.  The  prism  splits  white 
light  into  colors  and  then  re¬ 
combines  the  three  images 
before  sending  them  through 
the  proieaion  lens.  This  sys¬ 
tem.  called  DLP  Cinema,  can 
produce  35  trillion  colors. 

In  most  applications,  DLP 
competes  direaly  with  LCD 
projeaion.  DLP  typically  of- 
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In  digital  light  processing,  an  image,  in  ihis  case  the  head  ot  a  p«n.  is  pro¬ 
jected  by  a  semicondirclor  chip  that  contains  millions  ot  liny  mirrors. 


Th«  T1  opttcai  SMicanductor  chip 
that  mates  DIP  possUe. 


fers  greater  contrast  (up  to 
S.OOO-to-l  vs.  LCD's  800-to-l>. 
with  better  blacks,  white  LCD 
produces  greater  color  satura¬ 
tion.  Side  by  side,  an  LCD  dis¬ 
play  looks  slightly  sharper 
than  a  DLP  in  text  display  ap¬ 
plications.  but  DLP  has  the 
edge  with  moving  video,  re¬ 
ducing^  pixelation.  or  the 
"screen-door  effect." 

The  brightest  projeaors 
still  use  LCD  technology, 
which  is  slightly  more  effi¬ 
cient.  but  the  smallest,  lightest 
projeaors  use  DLP.  In  2003. 
DLP  systems  accounted  for 
13%  of  the  market  for  targe- 
screen  televisions  (over  40 
inches),  according  to  The 
NPD  Group  Inc.,  a  Port  Wash¬ 
ington.  N.Y. -based  consultan¬ 
cy.  In  the  past  year,  the  num¬ 
ber  of  models  of  DLP  TVs 
has  tripled. 

DLFs  Origins 

The  DMD  chip  was  invented 
in  1987  by  TI  scientist  Larry 
Hornbeck,  who  had  been 
exploring  the  manipula¬ 
tion  of  refleaed  light 
since  1977.  In  1992,  'n 
started  a  project  to 
explore  the  DMO’s 
commercial  viabil¬ 
ity.  A  year  later,  it 
named  the  new 
technology  DLP 
and  formed  a  sepa¬ 
rate  group  (now  called  the 
DLP  Produas  division)  to 
develop  commercial  display 
applications. 

In  1994.  'TI  demonstrated  • 


prototype  DLP  projectors  for 
the  first  time.  The  technolo¬ 
gy’s  promise  was  quickly  rec¬ 
ognized.  In  1997.  the  Academy 
of  Motion  Picture  Arts  and 
Sciences  chose  DLP  to  project 
film  at  the  Oscars,  where  the 
first  three-chip  DLP  technolo¬ 
gy  was  demonstrated  (o  the 
Hollywood  community. 

In  1999.  DLP  Cinema  was 
first  demonstrated  to  the  pub¬ 
lic  with  the  release  of  Star 
Wars  Episode  1:  The  Phantom 
Menace.  By  December  2002. 
TI  had  shipped  2  million  DLP 
subsystems. 

DLP  Products  has  also  re¬ 
ceived  two  Emmy  Awards,  for 
broadcast  excellence  in  1998 
and  for  technology  and  engi¬ 
neering  in  2003.  In  2002, 
Hornbeck  was  elected  a  fellow 
of  the  International  Society 
for  Optical  Engineering  and 
received  the  David  Samoff 
Medal  from  the  Society  of  Mo¬ 
tion  Picture  and  Television 
Engineers.  O  50670 


Kay  is  a  Computerworld  con¬ 
tributing  writer.  You  can  reach 
him  at  russlcay@charfer.nef. 


THE  RAINBOW  EFFECT 

DlPs  spinnng  color  wheel  results  n 
viewing  probleffls  lor  some  people 
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UNUXUBIttRY 

These  four  titles  will  help  provide  the 
guidance  you  might  need  to  the 
open-source  operating  st'stem. 


pAAIfAfl  One  given  in  the 

Sruiriiio 

REVIlWS  ''“'“succeei 

-  you  must  never 

stop  learning.  With  that  in  mind, 
four  recent  books  on  Linux  are 
definitely  worth  your  time. 


Building  AppBcations  With  the 
Linui  Standard  Base,  by  ^ 
Theodore  Ts'e  and  the 
Linux  Standard  Base  ^ 
Team  (IBM  Press;  246 
pages,  $44.99).  Now  [j 
that  the  Free  Standards  3| 
Group  has  adopted  its  M 
Linux  Standard  Base 
2.0  specifications,  Lin-  ^ 
ux  advocates  hope  to  iij 
sec  more  developers  ^ 
writing  applications 


One  given  in  the  that  will  run  on  any  LSB-com- 

world  of  IT  is  pliant  Linux.  That’s  where  this 

that  to  succeed,  book  comes  in.  Written  by  key 
you  must  never  developers  of  the  LSB  team, 
Vith  that  in  mind,  it’s  a  step-by-step  guide  to 
ks  on  Linux  are  making  applications  LSB- 
i  your  rime.  friendly.  The  book  covers  de- 

—  Todd  R.  Weiss  velopment  issues  in  detail,  in- 
eluding  binary  compatibility, 
tions  With  the  application  packaging  and  in- 
by  ^ —  I  stallation  proto¬ 


cols.  porting  ap¬ 
plications  from 
Unix,  working 
with  runtime 
libraries  and 
^rplication 
Jpmblcshooting 
Kd  testing. 

W  If  you  weren’t 
'  sure  how  to  start 
writing  useful 


programs  for  Linux, 
here's  a  good  place  | 
to  begin. 

Limn  Troubleshooting 
Bl)le.  by  Christopher 
Negus  and  Thomas 
Weeks  (WAey  Publish¬ 
ing  Inc.:  596  pages, 

$29.99).  For  users 
of  Red  Hat  Inc.'s 
Fedora  Linux  or  En¬ 
terprise  Linux,  this  is  a  valu¬ 
able  nuts-and-bolts  guidebook 
to  the  intricacies  of  the  open- 
source  operating  system.  In¬ 
formation  about  every  kind  of 
technical  snafu  can  be  found 
in  this  book,  which  covers  in¬ 
stallation  problems,  backup 
and  migration  issues,  printer 
glitches,  intrusion  and  securi¬ 
ty  concerns  and  more.  The 
sections  are  well  thought  out, 
with  background  , 
theory  on  key  sub-  ^ 
jects  as  well  as  de¬ 
tailed  instructions 
on  how  to  approach, 
diagnose  and  repair 
problems.  The  book 
largely  focuses  on 
the  free  Fedora  op¬ 
erating  system,  with 
the  idea  that  by 
gaining  the  skills 


'-Linux 

eus.ne,s  Oeskiop 

•a^ 


needed  for  Fedora, 
technicians  will  be 
better  able  to  relate 
to  Red  Hat's  enter¬ 
prise  product  lines. 
The  book  also 
touches  on  software 
iSUSE  Linux 
G  and  the  Debian 
■project. 


Moving  to  the  Unui 
Busiriess  Desktop,  by  Marcel 
Gagne  (Addison- We^  Pearson 
Education:  665  pages.  $44.99). 
This  book  tackles  almost  every 
conceivable  question  about 
moving  a  corporate  desktop 
system  from  Windows  to  Lin¬ 
ux.  All  of  the  unique  nuances 
of  Linux  are  covered,  from 
configuring  printers  to  file 
sharing,  Web  services,  user 
and  systems  management  hi¬ 
erarchies,  the  Linux 
command-line  and 
shclVenvironments. 
as  well  as  dual 
booting  and  instal¬ 
lation  strategies. 
Also  highlighted  in 
an  often  humorous 
le  are  topics 
:h  as  office  pro¬ 
ductivity  applica¬ 
tions.  Internet 


browsing  with  Linux  and 
more.  TTiis  book  will  help  you 
put  a  feature-rich,  reliable  and 
flexible  operating  system  on 
your  users’  PCs. 

Linux  for  Non-Geeks,  by  Rickford 
Grant  (No  Starch  Press  he.:  308 
pages.  $34.95).  After  y’ou’ve 
followed  the  steps  suggested 
in  Moving  to  the  Linux  Busi¬ 
ness  Desktop.  —  ■ 

consider  giv- 

ing  a  copy  of  _ 

Unuxfo,  LINUX  FOP 

Non  Gcctato 
.ll.-mpiny- 
ces  in  your 
o>mpany  to 
help  them 
get  acclimat- 
to 
new 

world.  This  easy-to-rcad  hand¬ 
book  isn’t  for  the  Linux  gurus 
on  your  staff.  It's  for  the  folks 
who  need  to  know  how  to  use 
Linux  from  the  miwi  elemen¬ 
tal  level.  This  will  teach  new¬ 
bies  how  to  feel  confident  and 
comfonable  as  they  explore 
Linux,  and  it  will  open  their 
minds  to  new  possibilities  in 
the  workplace,  making  >t>ur 
Linux  deployment  a  success 
from  the  start.  O  50971 
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VPN  Evolution 
Progressing  to  SSL 


OneVPNtechnologyBdecommissioned, 
but  the  refilacefnent  OHses  prafatems.  ^ 
afferssoine  answers,  but  thm  are  still 
issues  to  be  resolved.  By  Mathias  Thunnan 

For  several  years,  my  pany  has  a  global  presence,  so 

company  used  Micro*  some  users  we  have  to  commu- 
soft  Corp.’s  Poini-lo-  nicate  with  don't  speak  English 
Point  Tunneling  Proto-  and  work  out  of  their  homes  on 

col  (PPTP)  to  provide  remote  the  other  side  of  the  worid. 

users  with  VPN  access  to  cor-  Now  we  have  a  new  set  of 

porate  resources.  This  worked  issues.  A  particularly  loud 
well,  and  almost  all  employees  group  in  the  company  is  re- 
wbo  had  PPTP  pennis^ons  porting  problems  with  the 
were  comfortable  with  this  Cisco  VPN  client  These  users 
method.  But  after  several  se-  are  mostly  in  sales  and  need 


curity  problems  with 
PPTP  were  reported, 
vire  decided  about  a 
year  ago  to  deploy 
virtual  private  net¬ 
work  concentrators 
from  Cisco  Systems 
Inc.  at  all  of  our  core 
points  of  presence. 


SECwn 
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-  access  to  demos  on 

the  network  and 
sales  databases. 
What  makes  them 
loud  is  that  they  gen¬ 
erate  revenue,  so 
they  usually  get 
what  they  want. 

The  problem  is  that  cus- 


We  ran  things  in  parallel  for  tomers  block  the  ports  ncccs- 
about  six  months  to  let  users  sary  for  the  VPN  clients  to 
get  used  to  this  new  way  of  communicate  with  our  VPN 
connecting.  Users  were  in-  gateways.  Similar  diftlculties 
structed  to  download  the  Cis-  are  experienced  by  users  in 
CO  VPN  client  and  associated  hotel  rooms  for  the  same  rea- 
profUe  and  start  using  the  Cis-  son.  This  isn’t  a  Cisco  issue, 

CO  client  E>uring  that  period.  mind  you:  almost  any  IPsec 
if  the  users  had  problems,  they  VPN  client  would  have  similar 
could  always  fall  back  on  the  problems. 


PPTP  connection  until  the 
issue  was  resolved. 

That  option  disappeared 
about  a  month  ago,  though, 
when  we  pulled  the  plug  on 
our  PPTP  servers.  Now.  all 
users  have  to  use  the  Cisco 
VPN  client.  Many  global 
e-mail  messages  were  sent  to 
users  about  impending  ac- 
tioQ.  but  by  the  time  we  were 
ready  to  retire  our  PPTP 
servers,  several  hiuidred  users 
were  sdll  using  it  We  tried  to 
advise  each  of  them  of  the 
change,  but  about  SO  were 
traveling,  on  vacation  or  other¬ 
wise  out  of  reach.  This  wasn't 
so  bad.  considering  that  we 
have  more  than  7,000  employ¬ 
ees  using  the  VPN.  Our  com- 


Meanwhile,  we  have  had  nu¬ 
merous  requests  for  access  to 
corporate  mail  from  kiosks. 
Users  have  said  that  when 
they  can't  use  their  company- 


A  particularly  loud 
group  in  the  company  is 
reporting  proUams  with 
AeCfamVPNcfienL 
What  makae  them  loud 
isthallhaygenetata 
rewnue,  sothey  usualy 
get  what  they  want 


issued  computer  —  be  it  at  a 
conference  or  a  coffee  shop  — 
they  would  like  to  be  able  to 
get  into  their  Microsoft  Ex¬ 
change  e-mail  and  calendar. 

We  have  contemplated  ex¬ 
tending  Microsoft  Outlook 
Web  Access  externally,  but  we 
don’t  want  to  do  so  without 
robust  authentication,  access 
control  and  encryption. 

SSL  Solution 

With  both  of  these  problenu 
in  mind,  we've  decided  to  ex¬ 
plore  using  Secure  Sockets 
Layer  VPNs.  This  technology 
has  been  around  for  quite 
some  time,  and  almost  every 
Web  browser  on  the  market 
today  supports  SSL  otherwise 
known  as  HTTPS,  secure 
HTTP  or  HTTP  over  SSL 

A  VPN  over  SSL  is  almost 
guaranteed  to  solve  the  prob¬ 
lems  employees  have  been 
having  at  customer  sites, 
since  almost  every  company 
lets  its  employees  make  out¬ 
bound  Port  80  (standard 
HTTP)  and  Port  443  (secure 
HTTP)  connections. 

SSL  VPN  will  also  let  us  ex¬ 
tend  Outlook  Web  Access  to 
remote  users,  but  there  are 
two  more  problems.  First,  this 
type  of  VW  is  primarily  bene¬ 
ficial  for  Web-based  applica¬ 
tions.  Second,  employees  who 
run  complex  applications  such 
as  PeopleSoft  or  Oracle,  or 
who  need  to  administer  Unix 
systems  via  a  terminal  session, 
v^l  most  likely  need  to  run 
the  Cisco  VPN  client  That’s 
because  it  provides  a  secure 
connection  between  their 
client  and  our  network, 
whereas  an  SSL  VPN  provides 
a  secure  connection  between 
the  client  and  the  application 
So  well  be  keeping  our  Cisco 
VPN  infrastructure  and  add- 
iztg  an  SSL  VPN  alternative. 

The  second  problem  we 
anticipate  concerns  users  who 
need  to  access  internal  Web- 


I  based  resources  from  a  kiosk. 

I  Many  of  the  SSL  VPN  tech¬ 
nologies  require  a  thin  client 
to  be  downloaded  to  the  desk¬ 
top.  Many  SSL  VPN  vendors 
claim  that  their  products  are 
cliciuless.  While  this  may 
be  true  for  pure  Web-based 
applications,  a  lava  applet  or 
ActiveX  control  object  must 
be  downloaded  to  the  desk¬ 
top/laptop/kiosk  before  any 
specialized  application  can  be 
executed. 

The  problem  is  that  most 
kiosks  are  locked  down  with 
a  policy  that  prevents  users 
from  downloading  or  in¬ 
stalling  software.  That  means 
we  have  to  look  at  alternative 
means  of  addressing  the  kiosk 
scenaria  We'U  also  want  to 
find  a  vendor  that  provides  a 
secure  browser  and  client  log¬ 
off  that  wipes  all  traces  of  ac¬ 
tivity  from  the  computer,  in¬ 
cluding  cached  credentials, 
cached  Web  pages,  temp  flics 
and  cookies.  And  we'U  want  to 
deploy  an  SSL  infrastructure 
that  allows  for  two-factor  au¬ 
thentication.  namely  our  Se* 
curlD  tokens. 

Of  course;  this  will  incur  an 
additional  cost  per  user,  since 
I  the  SccurlD  tokens,  whether 
soft  or  hard,  are  pricey.  In  addi- 
tioa  the  enterprise  deploy¬ 
ment  of  SecurlD  tokens  is  no 
trivial  task.  It  is.  however,  on 
the  security  road  map,  which 
I’ll  discuss  in  a  future  article. 

As  for  an  SSL  VPN.  we're 
looking  at  offerings  from  Cis¬ 
co  and  Sunnyvale.  C^alif-based 
Juniper  Networics  Inc,  Jumper 
recently  acquired  Neoteris, 
which  has  a  longtime 
leader  in  SSL 

As  with  any  new  technol¬ 
ogy  we  introduce,  we’U  come 
up  with  a  set  of  requirements 
and  conduct  rigorous  testing 
to  ensure  that  we  have  ad¬ 
dressed  deployment,  manage¬ 
ment,  support  and.  of  course, 
security.  I 
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Time  Zone  Tim 
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If  it’s  Thursday,  it  must  be  Brussels.  Or  Bangkok.  Or  maybe 
Eiirmingham.  Come  to  think  of  it  intrepid  road  warrior  Time 
Zone  Tim  often  has  to  look  at  the  local  phone  directory  when  he 
wakes  up  to  know  where  his  travels  have  taken  him.  But  no 
matter  where  in  the  world  Time  Zone  Tim  may  be.  he’s  always  in 
touch  with  the  information  he  needs  thanks  to  some  innovative 
tools  for  mobile  warriors  like  him.  We  caught  up  with  Tim— where 
else  but  on  his  way  to  the  airport,  sipping  on  a  double  latte. 


As  usual,  you  are  on  Che  road.  What  are  your  most  pressing  needs 
when  traveling  the  globe  on  business? 

The  first  thing  that  pops  into  my  mind  is  a  business-class  seat  courtesy  of  a 
free  upgrade,  but  if  you  mean  a  pressing  business  need,  let  me  put  it  this  way. 
When  I'm  with  customers  in  Rome  and  they  need  the  current  status  of  pending 
orders,  they  don't  care  that  the  data  is  sitting  on  a  server  back  in  the  main  office 
in  Phoenix  I  need  secure,  wireless  access  to  vital  information  and  I  can't  be 
jumping  through  hoops  to  get  it 

Has  email  been  a  problem  for  you? 

No.  not  since  my  company  began  working  with  Nokia  to  provide  road 
hounds  like  me  with  reliable  wireless  email.  It  used  to  be  that  a  long  cab  ride  in 
heavy  traffic  was  just  unused  downtime  for  me.  Now  I  use  all  that  time  to  check 
email  and  message  my  clients.  It  sure  beats  trying  to  converse  with  a  cabbie  in 
a  language  I  don’t  understand!  With  wireless  email.  I'll  bet  1  gain  another  hour 
per  day  of  real  productivity  given  all  the  running  around  I  do. 


About  the  Interviewer 


Bill  Laberis  was  editor  in  diief  of  Compu^worfd  for  ten 
years  (1986-1996).  He  is  president  of  BiU  Uberis 
Associates,  a  custtnn  publishing  and  content  company 
(wwwJabei1s.com).  His  columns.  Webcasts,  supplements 
and  magazines  are  well-known  and  respected  throughout  the  hi-¬ 
tech  industry. 

Would  you  say  that  staying  connected  Is  misston-crttkal  for  you.  no 
matter  where  you  are? 

Mission-critical— you  mean  like  the  way  proper  nutrition  Is  to  the  human 
body?  For  people  like  me  staying  conneaed  is  everything.  Last  week  in  Tokyo.  I 
followed  a  competitor  into  my  client's  office.  While  my  competitor  was  trying  to 


phone  someone  back  home  about  the  availability  of  some  parts.  I  placed  the 
order  right  there  and  won  the  business.  Then  we  went  out  for  some  sushi. 
Thanks.  Nokia! 

What  are  your  devices  of  choice  for  staying  in  touch? 

I  have  a  few.  depending  upon  my  needs  My  Nokia  9500  Communicator 
gives  me  a  full  set  of  business-critical  applications,  fast  network  connectivity, 
and  mega  memory  storage,  sort  of  like  taking  my  office  on  the  road.  And  my 
smartphone  based  on  the  Nokia  Series  60  software  platform  is  just  dynamite 
for  voice  and  data  communications.  I  use  it  for  email.  Internet  browsing,  and 
occasionally — just  occasionally — a  quick  game  of  hearts. 

What  are  the  most  important  features  of  these  devices? 

For  one  dting.  they  have  to  really  help  me  blast  through  my  work  so  I 
can  have  a  bit  of  time  for  one  of  my  favorite  hobbies— napping.  Look,  you're 
talking  to  a  guy  with  five  thumbs  on  each  hand,  technically  speaking.  All  my 
access  devices  have  to  be  easy  enough  for  any  norma!  business  professional  to 
use  to  quickly  communicate  with  important  contacts  and  access  critical  data.  If 
it  Isn't  real  user  friendly,  chances  are  it  Isn't  Nokia.  Oh  yeah,  our  IT  department 
wants  ail  mobile  devices  to  be  both  cost-effective  as  well  as  future-proof.  That's 
Nokia,  too. 

TraveHng  as  you  do  and  needing  aaess  to  such  sensitive  information, 
aren't  you  worried  about  data  security? 

Yes  and  no.  Yes  I  am  worried  about  what  might  happen  if  a 
competitor  or  just  about  anyone  else  were  able  to  get  to  the  same  data  1  can. 
That  would  be  bad  for  my  company  and  therefore  bad  for  me.  But  no.  Tm  not 
really  worried  because  Nokia  has  worked  wonders  with  something  our  IT  guys 
call  Secure  Sockets  Layer  or  SSL,  as  well  as  with  firewalls  and  secure  VPNs  to 
ensure  that  people  like  me  practice  nothing  less  than  safe  computing,  anywhere 
a/Kl  any  time. 

Sounds  Hke  Nokia  Is  an  excettent  traveling  companion  for  you? 

You  can  say  that  again.  Nokia  is  my  traveling  security  WankeL  Like  a  first-run 
in-flight  movie.  Nokia  makes  me  fe^  good. 

One  Hnai  question:  Why  all  the  watches? 

They  seem  to  sell  them  everywhere  I  go  these  days  and  I'm  a  compulsive 
shopper.  I  just  wish  one  of  them  would  work  as  well  as  my  Nokia  mobile 
technology. 


Learn  how  to  mobilize  your  team  and  increase  business  productivity. 
Download  “The  Anytime,  Anyplace  World”  white  paper. 

nokiaforbusiness.com 
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IBM  Claims  Record 
.Computing  Speed 

■  IBM  last  ««ek  announced  that 
it  achiewed  3^  mMion  transac¬ 
tions  per  minute  on  its  062  'S2 
database  running  on  IBM 
eSerrer  p5  595  with  64  PawerS 
processors.  THe  comply  daimed 
that  it  has  sat  a  world  record  for 
compubng  spaed  and  said  that 
theprewiousrecordwas1.2mif- 
fion  transactions  per  minute.  The 
Transaction  ^ocessing  Perior- 
mance  Councd,  a  nonprofit  indus¬ 
try  group  that  sets  benchmartung 
stendards,  reported  the  results. 


Constant  Data 
Adds  Linux  Support 

■  Constant  Data  Inc.  in  Min¬ 
neapolis  has  announced  the  avad- 
aMhy  of  the  latest  version  of  its 
Constant  Replicator  software, 
featuring  expanded  support  for  all 
maior  2.4  aiMi  2.6  kernel  Linux 
operating  systems,  as  wal  as 
Mac  OS  X.  Sun  Solaris  and  IBM 
AIX.  Constant  Replicator  is  a  con¬ 
tinuous,  real-time  data  replication 
application  for  uw  in  business 
continuity,  data  dfcstrftwtion  and 
Ngh-porformance  computing 
projects,  accordmg  to  the  com¬ 
pany.  Pricing  starts  at  S7.200  tor 
one  primwy  and  one  remote  serv¬ 
er  wMi  a  yrmr  of  support 


ObjectWeb  Gains 
Op^Source  Portal 

■  Paris-based  eXo  Pfatform  SUL 
has  joined  the  ObtcctWMi  Consor¬ 
tium  and  is  making  its  enterprise 
portM  code  available  (rnier  the 
GNU  General  Public  Ucense.  EXo 
Platform  Is  an  open-source  enter¬ 
prise  portal  that  enables  users  to 
hive  e  oislomized  single  point  of 
access  to  thair  companies'  infor¬ 
mation  systems  and  resources. 
ObfectWMb  said  the  portal  should 
encourage  wider  use  of  its  open- 
source  1,^  2  biterprise  Edtion 
software.  With  eXo  Platform,  Ob- 
jectWafa  adds  a  Wab  application 
suite  Imer  to  Us  open-source 
nwMeware  components  for  cor¬ 
porate  computiog.  wMcb  includes 
the  J2a  14  application  server. 
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Buildings  Become 
Information  Systems 


The  transparent  enterprise  is  char¬ 
acterized  by  increased  data  integration 
possibilities  across  formerly  stovepiped 
databases.  Now,  even  the  buildings  that 
house  our  transparent  enterprises  are  be¬ 
coming  transparent  themselves.  In  response  to  the  de¬ 
mands  of  energy  efficiency,  security,  lower  operating 


costs  and  the  need  to  in¬ 
crease  space-planning  flesi- 
bilit>’.  the  physical  siructua-s 
in  which  we  work  arc  on 
their  way  to  becoming  more 
closely  integrated  with  our 
information  infrasiructua*. 

Consider  these  new  re¬ 
quirements  in  the  design  of 
building  s>'s(ems  and  some 
of  the  issues  they  raise 

■  Secure  access  corrtrol; 

Linking  the  provisioning  of 
RFID-type  security  systems 
to  human  resources  systems 
will  ensure  that  the  right  cm- 
plo>'ees  get  through  the  right 
doors.  This  will  require  orga¬ 
nizations  to  make  sure  ap¬ 
propriate  privacy  policies 
and  practices  arc  in  place. 

■  Emrgy  efficiency:  Electric  power 
demand-monitoring  systems  promise 
cheaper  power  and  higher  levels  of  avail¬ 
ability  from  the  public  power  grid.  En¬ 
terprise  users  must  be  ready  to  have 
their  power  utilization  monitored  and 
possibly  even  conironed  down  to  the  in¬ 
dividual  device  level  for  this  to  work. 

■  Security;  Video  monitoring  of 
premises  for  both  extemaJ  and  interna) 
security  purposes  is  increasingly  com¬ 
mon.  We  can  hope  that  this  improves  the 
physical  security  of  our  buildings,  but 
whether  it  does  or  not.  it  certainly  makes 
the  environment  more  transparent  —  or 
intrusive,  depending  on  which  side  of 
the  camera  one  sits. 

■  Building  stfgiage:  Even  building 
signs  (e.g..  lobby  directories,  spe¬ 
cial-purpose  meeting-instruction 
signs  and  emergency  exits)  are 
being  integrated  in  the  inleropcr- 


columns  on 
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able  building  of  the  future. 
On  arrival  in  an  unfamiliar 
building,  it  will  be  nice  to 
have  signs  that  are  dynami¬ 
cally  configured  to  point  us 
in  the  right  direction.  I'm 
not  sure  how  I'll  feel,  how¬ 
ever,  when  information 
screens  in  every  elevator 
lobby  of  a  high-rise  inform 
me  —  and  every  other  occu¬ 
pant  —  that  my  car  has  been 
towed  out  of  the  parking  lot 
because  I'm  two  months  late 
on  my  parking  fees. 

In  support  of  these  goals, 
building  systems,  once  the 
domain  of  H  VAC  engineers 
and  security  services,  arc 
becoming  just  one  more  in¬ 
formation  system.  As  with 
our  other  information  systems,  the  first 
design  requirement  is  that  it  be  built  on 
open  standards  for  interoperability.  The 
International  Standards  Organization 
has  even  released  a  standard  (ISO  16484- 
5:2003)  that  “defines  data  communica¬ 
tion  services  and  protocols  for  computer 
equipment  used  for  monitoring  and  con¬ 
trol  ofheating.  ventilation,  air  condition¬ 
ing  and  refrigeration,  and  other  building 
systems."  The  aim  of  the  standard  U  to 
facilitate  “the  application  and  use  of  dig¬ 
ital  control  technology  in  buildings." 

As  buildings  become  more  automated, 
formerly  disparate  components  (HVAC, 
LANs,  security  systems  and  even  sig¬ 
nage)  wilt  become  interoperable  with 

one  another  and  with  other  infor¬ 
mation  systems  traditionally  con¬ 
sidered  beyond  the  boundaries  of 
the  building  systems  themselves 
ICiulckLink  47651). 


New  ‘’interoperable"  building  systems 
represent  a  dramatic  change  in  design 
and  function  from  even  the  most  com¬ 
plex  systems  of  the  past.  The  critical 
change  is  that  today's  “smart"  buildings 
have  APIs  that  allow  the  buildings'  phys¬ 
ical  systems  to  be  linked,  as  any  other 
piece  of  software,  to  other  parts  of  an  en¬ 
terprise  information  system.  The  inter¬ 
face  between  building  systems  and  the 
rest  of  the  enterprise  information  infra¬ 
structure  will  now  be  defined  by  a  scries 
of  SOAP  message  formats  and  the  ex¬ 
change  of  XML'formattcd  data. 

In  my  own  workplace  —  the  new 
Frank  Gchry-designed  Stata  Center, 
home  of  the  MITs  Computer  Science 
and  Artificial  Intelligence  Laboratory  — 
some  of  the  world's  leading  computer 
scientists  arc  ir>'ing  to  sort  out  technical 
and  policy  designs  to  make  our  new. 
whiz-bang  security  system  function  in  a 
more  privacy-friendly  and  transparent 
way.  Addressing  these  issues  when  new 
systems  are  being  considered,  or  even 
when  buildings  are  designed,  may  save  a 
lot  of  trouble.  We  can  Icam  to  live  with 
transparency  if  wc  give  it  some  advance 
thought  and  lake  the  time  to  discuss 
what  to  expect  with  the  people  who  arc 
about  to  panicipate  in  this  new  technol¬ 
ogy.  i'll  have  more  to  say  about  develop¬ 
ments  in  the  building  where  1  work  in 
another  column. 

The  transparent  buildir^  raises  the 
design  stakes  for  efforts  to  ensure  the  in¬ 
tegrity.  reliability  and  accuracy  of  enter¬ 
prise  information  systems.  Today,  system 
faults  may  result  in  a  sales  order  being 
lost  or  an  employee's  paycheck  being  de¬ 
layed.  Tomorrow,  with  more  transparent 
and  dynamic  links  between  building  sys¬ 
tems  and  current  information  systems, 
the  results  could  be  an  employee  locked 
out  of  the  office,  power  shutting  down  In 
a  building  at  the  wrong  time  or  embar¬ 
rassing  information  being  flashed  across 
the  building's  public  information  dis¬ 
plays.  O  S0988 
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Adds  Linux  Support 
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Op^Source  Portal 

■  PirirhHad  aXa  Ptotfana  SAM. 
Nm  iataai  6ia  OMacMfab  Cmot- 
BaaaMliia 
portal  co4aa 


liBM  a  caatoataiaA  toagfa  potol  of 
aeoaM  to  Bato  eaopMiM' iafar> 

OfeBeWfab  aaM  6to  partto  Botod 

aacowati  «War  OM  of  la  apan* 

wOM  «MBI  C  BMfpnH  LWMI 

aa6MrB.WBaXaPlitfanii.0b- 
JacfWB  aWP  a  «fab  MPBWtoa 
atotoitoiartotei 


alaroar- 


Bo4SEEU« 
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Buildings  Become 
Information  Systems 


The  transparent  enterprise  is  char¬ 
acterized  by  increased  data  integration 
possibilities  across  formerly  stovepiped 
databases.  Now,  even  the  buildings  that 
house  our  transparent  enterprises  are  be¬ 
coming  transparent  themselves.  In  response  to  the  de¬ 
mands  of  energy  efficiency,  security,  lower  operating 


costs  and  the  need  to  in¬ 
crease  space-planning  flexi¬ 
bility.  the  physical  smictures 
in  which  we  work  are  on 
their  way  to  becoming  more 
closely  integrated  with  our 
information  inflastructure. 

Consider  these  new  re¬ 
quirements  in  the  design  of 
building  systems  and  some 
of  the  issues  they  raise: 

■  $Mura  acGBM  eenirefc 
Unking  the  provisioning  of 
RFID-type  security  systems 
to  human  resources  systems 
will  ensure  that  the  r^t  em¬ 
ployees  get  through  the  ri^ 
do(^  This  will  require  orga¬ 
nizations  to  make  sure  ap¬ 
propriate  privacy  policies 
and  practices  are  in  place. 

■  Bmp  allicfancr.  Electric  power 
demand-monhoring  sterns  promise 
cheaper  power  and  hi^r  levels  of  avaJl- 
abUity  from  the  public  power  grid  En¬ 
terprise  users  must  be  ready  to  have 
their  power  utilization  monitored  and 
possibly  even  controlled  down  to  the  in¬ 
dividual  device  level  for  Uus  to  work. 

■  SacMrUy;  Video  monitoring  of 
premises  for  both  external  and  mtemal 
security  purposes  is  iocreastn^y  com¬ 
mon.  We  can  hope  that  this  improves  the 
physical  security  of  our  buildings,  but 
whether  it  does  or  not.  it  certai^  makes 
the  environment  more  transparent  —  or 
intrusive,  depending  on  whi^  side  of 
the  camera  one  sits. 

■  6uNtogaipiaBr  Even  building 
signs  (eg^  lobby  directories,  spe¬ 
cial-purpose  meeting-ittstnicticm 
signs  and  emergency  exits)  are 
being  integrated  in  the  interoper¬ 


able  building  of  the  future. 
On  arrival  in  an  iinfamiiiar 
building,  it  will  be  nice  to 
have  signs  that  are  dynami¬ 
cally  conjured  to  point  us 
in  the  right  directioa  I’m 
not  sure  how  PU  feel,  how¬ 
ever.  when  information 
screens  in  every  elevator 
lobby  of  a  high-rise  inform 
me  — '  and  every  other  occu¬ 
pant  —  that  my  car  has  been 
towed  out  of  tte  parking  lot 
because  Fm  two  months  late 
on  my  parking  fees. 

In  support  of  these  goals, 
building  systems,  once  the 
domain  of  HVAC  engineers 
and  security  services,  are 
becoming  just  one  more  in- 
formatioD  system.  As  with 
our  other  information  systems,  die  first 
design  requirement  is  that  it  be  built  on 
open  standards  for  interoperability.  The 
International  Standards  Organization 
has  even  released  a  standard  (ISO  16464- 
5:2003)  that  “defines  data  communica¬ 
tion  services  and  protocols  for  computer 
equipment  used  for  monitoring  and  con¬ 
trol  of  beating,  ventilation,  air  condition¬ 
ing  and  refrigeration,  and  other  building 
systems.”  The  aim  of  the  standard  is  to 
facilitate  “the  application  and  use  of  dig¬ 
ital  control  technology  in  buildings.” 

As  buildings  become  more  automated, 
formeiiy  disparate  components  (HVAC. 
LANs,  security  systems  and  even  sig¬ 
nage)  will  become  interoperable  witii 
one  another  and  with  other  infor¬ 
mation  systems  traditionally  con¬ 
sidered  beyond  the  boundaries  of 
the  building  systems  themselves 
(Quicklink  47651]. 


New  “interoperable”  building  systems 
represent  a  dramatic  change  In  design 
and  function  from  even  the  most  com¬ 
plex  systems  of  the  past  The  critical 
change  is  that  today’s  “smart”  buildings 
have  AHs  that  allow  the  buildings’  phys¬ 
ical  systems  to  be  linked,  as  any  other 
piece  of  software,  to  other  parts  of  an  en¬ 
terprise  information  system.  The  inter¬ 
face  between  tmiiding  systems  and  the 
rest  of  the  enterprise  information  infrii- 
structure  will  now  be  defined  by  a  series 
of  SOAP  message  formats  and  the  ex¬ 
change  of  XML-formatted  data. 

In  my  own  workplace  —  the  new 
Frank  Gehry-designed  Stata  Center, 
home  of  the  MTFs  Computer  Science 
and  Artificial  Intelligence  Laboratory  — 
some  of  the  world’s  leading  computer 
scientists  are  trying  to  sort  out  technical 
and  policy  designs  to  make  our  new, 
whiz-bang  security  system  function  in  a 
more  privacy-friendly  arxf  transparent 
way.  Addressing  these  issues  when  new 
systems  are  being  considered,  or  even 
when  buildings  are  designed,  may  save  a 
lot  of  trouble.  We  can  learn  to  live  with 
transparency  if  we  give  it  some  advance 
thought  and  take  the  time  to  discuss 
what  to  expect  with  the  people  who  are 
about  to  participate  in  this  new  technol¬ 
ogy.  Fli  have  more  to  say  about  develop¬ 
ments  in  the  building  where  I  work  in 
another  columa 

The  transparent  building  raises  the 
design  stakes  for  efforts  to  ensure  the  in¬ 
tegrity,  reliability  and  accuracy  of  enter¬ 
prise  information  systems.  To^,  system 
fruits  may  result  in  a  sales  order  bring 
lost  or  an  employee’s  paycheck  beii^  de¬ 
layed.  Tomorrow,  with  more  transparent 
and  dynamic  links  between  building  sys¬ 
tems  and  current  information  systems, 
the  results  could  be  an  employee  locked 
out  of  the  oince,  power  shutting  down  in 
a  building  at  the  wrong  time  or  embar¬ 
rassing  information  being  flashed  across 
the  building’s  public  information  dis- 
plays.OS0868 
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COMPUTERWORLD  HAS  BEEN  NAMED 
MAGAZINE  OF  THE  YEAR  FOR  2004, 
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COMPUTERWORLD 


•HF  VOICE  OF  IT  MANAGEMENT 


THE  FASTI  RDM  EDGE 
X-SERIES  1  GGbE  switches 


Network  Goes  Faster.  Budget  Goes  Farthef^. 
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professor  of  computer  science  at  Pur¬ 
due  University  in  West  la&yette.  In<L 
warned  members  of  Congress  that  of 
5,500  doctorates  in  computer  science 
and  engineering  award^  by  North 
American  universities  between  1992 
and  1997,  onJy  eight  were  awarded  to 
U3.  citizens. 

In  a  new  study.  Corey  Schou.  direc¬ 
tor  of  the  NationaJ  Information  Assur¬ 
ance  IVaining  and  Education  Center  at 
Idaho  State  University  in  Pocatello, 
says  that  the  dearth  of  pec^le  with  adr 
vanced  degrees  in  IT  continues.  And 
while  the  number  of  two-  and  four-year 
degree  programs  in  IT-related  fields  is 
rising,  the  student  base  has  dropped. 

Fears  of  Outsourcing 

‘At  present,  there  is  a  lack  of  interest  in 
this  disdpUne.‘  says  Mathew  J.  Palakal. 
chairman  of  the  D^artment  of  Com¬ 
puter  and  Information  Sciences  at  Pur¬ 
due.  could  be  due  to  the  uncer¬ 
tainties  in  the  fob  market.  Outsourcing 
is  on  everybody's  mind,  and  computer 
science  is  considered  as  a  h^-risk  ca¬ 
reer  choice." 

Students  echo  that  concern.  Fears  of 
outsourcing  played  a  role  in  Katherine 
Farmer's  decision  to  seek  an  advanced 
degree.  Farmer  is  studying  computer 
engineering  and  ramputer  science  at 
the  Thayer  Sdiool  of  Engineering  at 


Educators  and  IT  industry 
executives  are  warning  that 
a  crisis  is  looming  in  the  IT 
job  market  Only  this  time, 
it’s  not  that  there  are  too  many  job 
hunters  seeking  too  few  positions.  To 
the  contrary,  they  say  that  the  US.  isn’t 
producing  IT  experts  in  the  quantity 
and  quality  that  it  needs  to  remain 
leader  of  the  global  IT  market 
In  an  effort  to  search  out  the  views 
and  perceptions  that  may  be  fueling 
this  approachii^  crisis,  Computerworfd 
interviewed  a  dozen  undeigraduate 
and  graduate  students  who  are  prepar¬ 
ing  for  careers  in  IT,  as  well  as  profes¬ 
sors  responsible  for  training  them  and 
executives  who  are  recruiting  them 
into  the  workforce. 

Students  told  us  that  advanced  tech¬ 
nical  degrees  are  exp>ensive  and  may 
not  provide  the  skills  they  need  to 
competitive  in  the  job  market  Many 
plan  to  seek  business  degrees  insipad 
of  technical  degrees  in  graduate  school 
because  they  fear  that  they  are  more 
likely  to  be  outsourced  if  they  don’t 
have  business  qualifications 
Elsewhere  in  academia,  prominent 
academics  have  beat  warning  for  years 
that  the  U.S.  is  producing  for  too  few 
advanced  degree  holders  in  the  com-  < 
puter  science  and  IT  research  fields.  In  ^ 
1997,  for  example,  Eugene  Spafiford,  a  * 
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Many  students  see  an 
advancki  degree  In  IT  as  a 
tickettoobsolkenceand 
outsourcing.  They  have  other 
plans.  BY  DAN  VERTON 
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Students  Speak  Out 


WILLIAM  MOSLf Y 
Senior 

Pace  University 


HAYDEN  HAYES 
Senior 

University  of  Alabama 
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MAKINA  KOLOMILTS 
Graduate  student 
Thayer  School  of 
Engineering. 
OaHmouth  College 
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JUSTIN  Lir>AS 
Senior 

Marist  College 
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MICHAEL  ARMDRUST 
Junior 

Purdue  University 
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Djrtmuuth  Colley.-  in  Hanover,  N.H. 
She  expects  lo  >ee  ^  t:reater  demand  in 
(he  L'-S-  tor  hi^ih-level  desifjii  and  de- 
\elopment  work  as  more  low-level 
jt>hs  are  moved  olTshore. 

But  others  shun  IT  j|toj:ether.  "1 
think  new  students  are  seared  li»  j’et 
into  the  IT  Held  of  study,"  says  leremy 
Bueehi.  an  underfirad  at  Marist  Collej-e 
in  rou^hkeopsie.  N  Y.  "With  all  the 
nevNs  ot  shiftinj;  jobs  offshore,  [prospee- 
tivel  IT  students  may  be  tentative 
.ibout  pursuinu  a  career  in  computers," 


I’alakal  and  others  say  they  also  fear 
that  eollejies  and  universities  aren't 
teaching  students  what  they  need  to 
know  to  succeed  in  the  U.S.  I  T  job 
market,  particularly  as  new  securilv 
pressures  raise  the  bar  lor  what  it 
means  to  be  skilled  in  IT 
"There  is  a  disconnect  between  what 
most  universities  teach  and  what  is 
needed  in  the  jiib  market."  says  Palakal. 
"A  traditional  computer  science  cur¬ 
riculum  prepares  students  lor  academ-  | 
ic  pursuit  and  not  necessarily  for  the 


business  wtirld.  The  business  commu¬ 
nity  then  must  train  the  graduates  to 
make  them  employable." 

Scott  Orr.  a  network  engineer  at  Pur¬ 
due.  .says  many  universities  are  now  es¬ 
tablishing  industrial  advisory  boards  to 
counsel  faculty  about  current  IT  needs 
and  to  better  prepare  students  for  the 
wa>rkforce- 

Yel  despite  the  impending  crisis, 
current  demand  is  still  low.  Mike  Ken¬ 
dall.  president  of  Kendall  Placement 
liroup  Ine.  in  St.  Louis,  says  most  firms 


PUBLIC  OR  PRIVATE? 


KATHERINE  EARMEH  is  a  graduate  slu- 
deni  studying  computer  engineering  and 
computer  science  at  Dartmouth's  Thayer 
School  ol  Engineering  She's  keeping  her 
eyes  open  for  a  government  lob  because 
government  programs  often  involve  cul- 
ting-edge  technologies,  she  says.  She's 
also  considering  the  public  sector  as  a 
career  option  because  she  has  concerns 
abcjl  the  number  of  private-sector  |obs 
being  outsourced 

Unlike  Farmer,  many  students  view  a 
career  m  government,  where  IT  skills  are 
desperaiely  rreeded  and  where  critical  re¬ 


search  and  development  is  often  done,  as 
a  road  lo  technical  irrelevancy  Kevin 
Decker,  a  Purdue  computer  science  un¬ 
dergrad.  says  he  would  never  apply  for  a 
government  position.  "Mosl  government 
organizations  lack  a  Iree-thinkinq,  progres¬ 
sive  culture."  he  says  "That's  not  where  I 
want  to  be " 

Purdue  undergrad  Stephen  Senesac 
says  he  would  consider  a  government  (ob, 
but  he  shares  Decker's  fears  about  the  cul¬ 
ture.  "My  only  concern  would  be  lhat  Ihe 
nature  of  working  wilhin  Ihe  bureaucratic 
system  could  become  stifling,"  he  says. 


Hazel  Thomas  obtained  a  bachelor's 
degree  m  computer  science  at  Pace  Uni¬ 
versity  in  New  York  and  is  now  pursuing  a 
master's  degree  in  computer  mformalion 
systems.  She  says  she  hasn't  considered 
government  work  because  of  the  salary 
gap  between  public-  and  private-sector 
employment 

Justin  Ligas  agrees.  "The  government's 
largest  problem  is  that  often  the  pay  isn't 
compeirtive.’  says  the  Manst  College  senior. 
What  if  the  pay  improved'^  "There  would  be 
no  reason  not  to."  he  says 

-DanVerton 


slowed  recruiting  during  the  recession 
.ind  are  only  now  beginning  to  once 
again  hire  recent  college  graduates. 

After  suspending  university  and 
college  recruiting  for  several  years. 
ThoughtWorks  Inc.,  a  systems  integra¬ 
tor  in  Chicago,  resumed  recruiting 
recent  graduates  in  2004. 

Despite  h,aving  hired  only  five  recent 
U.S,  graduates  so  far.  the  global  IT  pro¬ 
fessional  services  firm  is  launching  an 
intensive  immersion  program  for  new 
recruits.  In  an  interesting  twist,  the 
ThoughtWorks  boot  camp  is  based 
overseas. 

"As  part  of  our  new-hirc  program, 
we  are  sending  all  of  our  entry-level 
hires  to  a  three-month  boot  camp  lo¬ 
cated  in  our  Bangalore.  India,  office." 
says  Sonia  Muhaimeen.  a  senior  re¬ 
cruiter  at  ThoughtWorks  U.S. 

In  the  new  world  of  global  IT.  wt>rk- 
ers  need  more  than  ju.st  technical  skill, 
she  says.  "Our  people  must  be  a  cultur¬ 
al  fit  as  well  as  being  extremely  savvy 
technical  individuals."  0  50655 
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Dartmouth  College  in  Hanover,  N.H. 
She  expects  to  see  a  greater  demand  in 
the  U3.  for  high-level  design  and  de¬ 
velopment  work  as  more  low-level 
iobs  are  moved  ofishore. 

But  others  shun  IT  altogether.  “1 
think  new  students  are  scared  to  get 
into  the  IT  field  of  study,”  says  Jeremy 
Bucchi,  an  undetgrad  at  Marist  College 
in  Poughkeepsie.  N.Y.  “Wth  all  the 
news  of  shifting  Jobs  offshore,  [prospec¬ 
tive!  IT  students  may  be  tentative 
about  pursuing  a  career  in  computers." 


Palakal  and  others  say  they  also  fear 
that  colleges  and  universities  aren't 
teaching  students  what  they  need  to 
know  to  succeed  in  the  U.S.  IT  job 
market,  particularly  as  new  security 
pressing  raise  the  bar  for  what  it 
means  to  be  skilled  in  IT. 

“There  is  a  disconnect  between  what 
most  universities  teach  and  what  is 
needed  in  the  job  market."  says  Palakal. 
“A  traditional  computer  science  cur¬ 
riculum  prepares  students  for  academ¬ 
ic  pursuit  and  not  necessarily  for  the 


business  world.  TTte  business  commu¬ 
nity  then  must  train  the  graduates  to 
make  them  employable." 

Scott  Orr,  a  network  engineer  at  Pur¬ 
due.  says  many  universities  are  now  es¬ 
tablishing  industrial  advisory  boards  to 
counsel  faculty  about  current  IT  needs 
and  to  better  prepare  students  for  the 
workforce. 

Yet  despite  the  impending  crisis, 
current  demand  is  still  low.  Mike  Ken¬ 
dall,  president  of  Kendall  Placement 
Group  Inc.  in  St.  Louis,  says  most  fums 


PUBLIC  OR  PRIVATE? 


lUTlEfIME  FAfMER  is  a  graduate  stu¬ 
dent  studying  cornputer  engrne&ing  and 
computer  science  at  Dartmouth’s  Thayer 
School  ol  Engineering.  She's  keepkig  her 
eyes  open  for  a  government  job  because 
government  programs  often  involve  cut¬ 
ting-edge  technologies,  she  says.  She’s 
also  considering  die  pi^  sector  as  a 
career  option  because  she  has  concerns 
about  the  number  of  private-sector  jobs 
being  outsourced. 

Unike  Farmer,  many  students  view  a 
career  in  government  vHiete  IT  skiBs  are 
desperately  needed  and  where  cilticd  re¬ 


search  and  development  is  often  done,  as 
a  road  to  technical  irrelevancy.  Kevin 
Decker,  a  Purdue  computer  science  un¬ 
dergrad,  says  he  would  never  apply  for  a 
government  position.  "Most  government 
organizatjons  lack  a  free-thinking,  progres¬ 
sive  culture.' he  says.  Ihat’s  nrt  where  I 
want  to  be.' 

Hjrdue  undergrad  Stephen  Senesac 
says  he  would  consider  a  government  job. 
buthesharesDeckersfearsaboutthecii* 
ture.  *My  only  concern  would  be  that  the 
riature  of  WD^  within  the  bureaucrabc 
system  could  become  stifling.' he  says. 


Hazel  Thomas  obtained  a  bachelor's 
de^  v\  computer  science  at  Pace  Uni¬ 
versity  in  New  \hrk  and  is  now  pursuing  a 
master's  degree  in  computer  information 
systems.  She  says  she  hasn't  considered 
government  work  because  of  the  salary 
gap  b^ween  public- and  private-sector 
employment. 

Justin  Ligas  agrees. 'The  government's 
largest  problem  is  that  often  the  pay  isn't 
cornpeOtive.' says  the  Marist  Coiege  senior. 
VVha!  the  pay  irnproved? ‘Ihere  would  be 
no  reason  not  to.' he  says. 
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slowed  recruiting  during  the  recession 
and  are  only  now  begjiming  to  once 
again  hire  recent  college  graduates. 

After  suspending  university  and 
college  recruiting  for  several  years, 
ThoughtWorks  Inc.,  a  systems  integra¬ 
tor  in  Chicago,  resumed  recruiting 
recent  graduates  in  2004. 

Despite  having  hired  only  five  recent 
U3.  graduates  so  far.  the  global  IT  pro¬ 
fessional  services  firm  is  launching  an 
intensive  immersion  program  for  new 
recruits.  In  an  interesting  twist,  the 
ThoughtWorks  boot  camp  is  based 
overseas. 

“As  part  of  our  new-hire  program, 
we  are  sending  all  of  our  entry-level 
hires  to  a  three-month  boot  camp  lo¬ 
cated  in  our  Bangalore,  India,  ofilce," 
says  Sonia  Muhaimeen.  a  senior  re¬ 
cruiter  at  ThoughtWorics  U.S. 

In  the  new  world  of  global  IT,  work¬ 
ers  need  more  than  just  technical 
she  says.  “Our  people  must  be  a  cultur¬ 
al  fit  as  well  as  being  extremely  savvy 
technical  individuals."  O  50655 
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A  CIO  who’s 
been  there 
tells  how  to 
take  the  leap. 
By  Doug  Lewis 

I  HAD  BEEN  RETWED  exactly  one  week, 
and  panic  had  already  set  in.  What  was 
I  going  to  do  every  day?  I  had  worked 
since  I  was  14,  and  Td  been  in  a  corpo¬ 
rate  environment  for  the  past  37  years. 

After  that  agonizing 
week,  I  knew  I  wasn’t 
emotionally  ready  to  join 
the  ranks  of  the  grizzled 
retired  guys  sleeping  on 
benches  in  the  mall.  Financially,  I  was 
ready.  Emotionally,  I  wasn’t. 

OK.  back  to  work,  but  doing  what?  I 
felt  I  was  good  at  my  chosen  profes¬ 
sion  of  CIO,  but  I  didn’t  want  to  get 
back  into  the  day-to-day  hassle  the  job 
brings  with  it.  I  had  thought  many 
times  about  trying  consulting  but  had 
always  opted  for  the  sectirity  of  a  “real 
job.”  It  was  a  big  decision,  so  I  decided 
to  use  the  outplacement  service  that 
came  as  part  of  my  retirement  package 
to  help  me  make  it. 

My  outplacement  counselor  listened 
to  my  story  and  introduced  me  to  a 
staff  member  who  specialized  in  con¬ 
sulting  start-ups.  He  gave  me  some 


fantastic  advice.  He  told  me  that  to  be 


successful,  I  had  to  have  answers  to  the 
foUowii^  five  questions: 
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ImUTAIEVOUSaUNS? 

You  need  to  undersund  and 
cleariy  state  what  you're  offering. 
Peiiups  more  important,  you 
need  to  understand  wfaat  you're  not 
selling.  Unless  you're  perfectly  clear 
on  this  point,  you’ll  confuse  potential 
customers. 

For  example,  I  was  selling  17  years 
of  experience  as  a  CIO  of  four  Fortune 
100  companies  and  an  executive- 
committee  perspective  on  business 
and  technology  solutions.  I  was  selling 
what  I  knew,  what  I  could  do  with 
what  I  knew,  and  credibility.  1  certainly 
wasn't  sellu^  technical  expertise! 

2  IVHO  B  VOUN  CUSTOMER? 

VmO  B  UKBY  TO  BOTH  NEED 
Wlur  VOirRESaiJMMB  BE 
ABU  TO  MHTE  THE  CHECK? 

I  knew  that  my  customer  was  going  to 
be  either  a  midsize-company  CEO  or 
a  big-company  CIO.  Below  that  level 
they  couldn't  afford  me;  above  that  lev¬ 
el  they  were  going  to  buy  from  Mc- 
Kinsey.  I  didn't  want  a  protracted  sell 
cycle,  so  1  "pitched"  only  to  the  deci¬ 
sion-maker  and  not  below  that  level 

3H0W  ABE  YOU  SEUMB? 

lb  build  a  compelling  value 
proposition  and  get  your  story 
in  ^nt  of  a  potential  buyer, 
you  have  to  understand  and  connect 
to  one  or  more  of  your  customer's 
key  problems.  The  drivers  may  be 
monetary,  regulatory,  contractual. 
a)a4)etitive  or  emotionaL  Unless  you 
make  a  stror^  visceral  cormection 
between  wfaat  you're  selling  and  the 
customer’s  key  challei^es.  you’re 
wasting  your  time. 

Research  the  company  and  the  client 
before  you  make  contact.  Exercise  your 
network  of  contacts  to  learn  as  much 
as  possible.  A  quick  Google  search  for 
news  about  bo^  can  yield  insight 
about  problems  that  you  may  be  able 
to  help  solve.  HooversuxMn  gives  com¬ 
panies'  detailed  financial  results  as 
well  as  lists  of  key  executives.  Afrer 
you've  done  your  research,  match  up 
wfaat  you  have  learned  with  wfaat  you 
can  do  for  potential  clients. 

Unless  you  find  a  way  to  get  in  front 
of  your  customer,  you  can’t  even  start 
to  make  any  connection.  You  need  to 
realistically  match  your  "access  privi¬ 
leges"  to  your  selling  ambitions.  Un¬ 
less  you  personally  know  GM's  CEO. 
don’t  build  your  business  goals  around 
selling  to  him  face  to  face. 

My  value  proposition  was  to  apply 
my  experience  to  solve  a  customer's 
business  problem.  I  needed  not  just  to 
understand  his  view  of  his  problem. 


but  to  determine  the  underlying  causes 
and  bow  to  fix  them. 

1  knew  my  customers  would  either 
already  know  me  or  know  of  me 
through  a  trusted  source.  I  wasn't 
going  to  sell  myself  through  a  Web 
site,  so  my  Rolodex  was  my  source  of 
potential  clients. 

4H0W  ARE  YOU  PNKBie 
YDURPROOUCTT 

Your  product  is  your  time, 
your  knowledge  and  wfaat  you 
can  do  with  your  knowledge.  You  must 
know  how  much  to  ask  for  your  Hme 
as  a  consultant  and  how  to  best  pack¬ 
age  the  bill  There  are  a  few  heavy  hit¬ 
ters  getting  S600  to  $1,000  an  hour,  but 
there  are  a  ton  of  little  guys  happy  to 
get  $100  an  hour.  Set  your  price  below 
a  certain  point,  and  you’re  better  off 
bagging  groceries.  Above  a  certain  lev¬ 
el  you  will  go  a  long  time  between  en¬ 
gagements  . . .  like  forever. 

I  decided  to  position  my  price  below 
the  heavy  hitters  ndro  get  SMK)  and  up 
but  high  enough  to  set  myself  apart 
from  the  hoard  of  guys  at  $100  an  hour. 
For  some  engagements,  I  charged  on  a 
per-hour  basis  at  $400. 1  set  a  policy  of 
never  discounting  my  rate.  People  rallt, 
and  no  one  wants  to  pay  more  rhan  the 


You  need  to 
understand 
and  dearly  state 
what  you’re  offering. 
I  was  selling  what  I 
knew,  what  I  could 
do  wHh  what  I  knew, 
and  credbPHy. 


last  guy  paid  for  your  services. 

For  other  engagements.  I  did  a 
"package  price."  I  would  negotiate  a 
price  where  the  hourly  rate  was  never 
disclosed.  Some  customers  get  riled 
when  they  see  you  getting  $400  an 
hour  —  more  than  they  are  mairing  — 
but  they  don't  bat  an  eye  paying  a  lump 
sum  for  an  engagement  that  nets  out  to 
$400  an  hour.  I  also  charged  half  time 
for  travel  and  I  traveled  in  a  style  con- 
stsmnt  with  that  of  my  customer.  I 
didn't  want  to  be  sitting  in  first  class 
as  my  customer  walked  back  to  his 
seat  in  coach. 

Sometimes,  it’s  easier  to  sell  the  en¬ 
gagement  in  "chunks"  than  as  a  whole. 


•HdandfMMhr 


1  preferred  to  break  up  an  engagement 
into  discovery,  planning,  execution  and 
wrap-up  phases,  with  each  phase  priced 
separately.  The  discovery  phase  let  both 
the  diem  and  roe  get  a  bmer  KanHU  on 
how  much  the  rest  the  engagement 
was  going  to  cost.  It  also  gave  both  of 
us  an  opportunity  to  bail  out  of  the  en¬ 
gagement  gracefoUy  if  it  wasn't  a  good 
fit  Adjust  your  billing  strategy  to  the 
customer.  Afrer  all  it’s  his  money. 

SHOW  ARE  YOU  eOBW  TO  RN) 
YOUR  BERT  BUYER? 

That  first  customer  sometimes 
comes  easily,  but  when  the  job 
ends,  that  next  engagement  isn't  al¬ 
ways  waiting.  You  have  to  know  how 
you  will  find  your  second  and  third 
customers  —  how  you  will  fUl  your 
"sales  funnel"  Lots  of  prospects  go 
into  the  wide  part  of  the  funnel  and 
precious  few  come  out  the  narrow  end. 
Unless  you  have  a  way  to  fill  it,  you're 
in  a  heap  of  trouble. 

My  outplacement  adviser  gave  me  a 
great  tip  for  filling  the  sales  frmnel  Ask 
your  client  for  five  referrals.  Ask  him 
to  personally  call  the  five  and  insist 
that  they  agree  to  a  vtsii  from  you.  This 
is  much  stronger  than  providing  favor¬ 
able  feedback  on  your  engagemenL  My 
adviser  frirther  suggested  asking  each 
of  the  five  for  advice  on  potential  busi¬ 
ness  outside  their  companies.  He  aly* 
recommended  that  I  take  speaking  en- 
gi^ments  and  write  articl^ 

I  found  the  advice  to  be  excellent.  1 
allocated  about  20%  of  my  time  to  new 
business  development.  I  wrote  articles 
on  subjects  that  interested  me  with  the 
idea  that  other  CIOs  would  find  them 
interesting  and  might  want  to  do  busi¬ 
ness  with  me  I  made  time  to  speak  at 
CIO  gatherings. 

1  also  learned  to  assess  speaking  en¬ 
gagements  upfront  afrer  a  disastrous 
hour  discussing  senior  management 
information  security  strategy  before 
an  audience  of  ultraiechies.  (I  had  vio¬ 
lated  my  principle  of  selling  only  to 
decision-makers  who  can  write  the 
check.)  1  helped  start  a  regional  CIO 
group  that  met  monthly  to  bear  noted 
speakers.  1  used  my  current  engage¬ 
ments  to  leverage  access  to  decision¬ 
makers  in  other  companies. 

In  summary,  the  advice  worked  for 
roe  as  a  company  of  one.  I  stayed  in 
consulting  for  only  nine  months,  but  1 
was  busy  the  entire  time.  I  had  great 
clients,  and  I  think  they  believe  they 
received  good  value  for  thm  money. 
050660 


Lewis  is  dOof  Cantival  Corp.  in  MtomL 
Coiuoct  him  or  dlewistSicarmvoIcom. 
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MANAGEMENT 


^ignmentj 

Mgnment, 

Alignment 

It's  the  topic  dll  jour  in  management 
hcHiks.  Some  takes  on  Iiow  to  aehiex  e 
it;  plus,  a  project  management  bihle. 


BOOKU  Iretid  ItHsoftT 

KlfirUfC  'Tiunaxt'tnL’ni 

nLffKnw  booA:s  und  rr>- 
—  lo  narrow  down 
the  best  ones  to  recommend  to 
Ct>mputerworld's  readers.  It 
drives  my  wife  crazy  because 
(he  books  keep  pouring  in  and 
filling  up  my  cramped  home- 
office  (aJ(.a.  the  OKkpit).  Here 
are  some  Areepers  (and  now  I 
eun  finally  clear  out  the  others). 

—  Thomas  Wo^man 

From  Business  Strategy  to  IT 
Action:  Right  Decisions  for  a 
Better  Bottom  Line,  by  Robert 
J.  Benson,  Thomas  L  Bugniti  and 
WUliam  B.  Walton  (John  Wiley  « 
Sons:  328  pages.  S45). 

This  bcxjk's  central  thesis  is 
that  an  organization  should  in¬ 
vest  in  IT  only  when  it  direct¬ 
ly  supports  business  strategics 
and  operational  elTectivcncss. 
Tough  to  argue  against  that. 

The  b«>ok  provides  a  road 
map  for  C-levcl  executives. 


I  including  CIOs,  on  how  to 
manage  and  invest  in  IT  to  dc- 
I  liver  business  value.  The  au¬ 
thors.  each  of  whom  is  a  prin¬ 
cipal  at  The  Beta  Group,  an  IT 
consulting  firm  in  St.  Louis, 
de-scribc  a  '‘strategy-to-biH- 
I  tom-line  value  chain"  frame¬ 
work  that  can  help  guide  a 
company  from  business  strate¬ 
gics  to  the  right  IT  decisions. 

The  authors  touch  upon 
areas  you’d  expect  them  to. 

.  such  as  advikcating  the  use  of 
I  portfolio  management  tw>ls  to 
'  help  organizations  prioriti7.c 
IT  and  business  investment.v 
But  they  take  those  concept-s 
a  step  further  by  suggesting 
actions  readers  can  take  to 
achieve  the  right  results. 

One  of  the  features  that  1 
liked  most  is  a  section  at  the 
end  of  each  chapter  in  which 
the  authors  pose  questions 
that  senior  executives  should 
ask  themselves  on  a  given 
I  topic,  such  as.  "Arc  we  invest- 
I  ing  new  IT  resources  in  the 
right  places?" 

This  is  very  practical  tome 
I  that  takes  a  structured  ap- 
I  proach  to  slaying  the  old  IT^ 

I  business  alignment  dragon. 


Manage  IT  as  a  Business: 
How  to  Achieve  Alignment 
and  Add  Value  to  the  Com¬ 
pany.  by  Bennet  P.  Lientz  and 
Lee  Larsen  (Ebevief  Butter* 
worth'Heinemann;  304  pages. 
$44.95). 

While  from  Business  Strategy 


to  IT  Action  seems  to  be 
geared  more  toward  senior 
executives.  Managing  IT  as  a 
Business  appears  to  be  written 
for  IT  and  business  managers 
who  are  in  the  trenches  doing 
the  actual  work.  This  book  is 
very  straightforward  about  the 
problems  that  have  afTlicted  IT 
organizations  over  the  years, 
such  as  business  alignment 
shortcomings  and  the  burden 
of  managing  day-to-day  opera¬ 
tions.  and  it  offers  some  fresh 
ideas  about  how  to  deal  with 
these  issues.  One.  for  example, 
is  to  rate  the  IT  organization 
using  comprehensive  perfor¬ 
mance  metrics  that  measure 
such  variables  as  the  duration 
of  projects,  the  use  of  repeat¬ 
able  processes  and  the  amount 
of  knowledge  transfer  gained 
from  vendors. 

The  book  also  tackles  the 
misallocation  of  IT  resources 
and  the  tendency  among  orga¬ 
nizations  to  select  projects  for 
tactical  rather  than  stratcgic 
reasons. 

The  authiirs  have  hands-on 
project  management  experi¬ 
ence,  and  it  shows.  Lientz,  a 
professor  of  information  sys¬ 
tems  at  the  UCLA  Anderson 
Graduate  School  of  Manage¬ 
ment.  was  a  project  leader  in¬ 
volved  in  the  development  of 
Arpanet,  the  precursor  to  the 
Internet.  Larssen  has  served  as 
an  IT  manager,  business  man¬ 
ager  and  consultant  for  more 
than  40  companies  over  the 
past  25  years.  The  techniques 
they  draw  upon  have  been  im¬ 
plemented  in  more  than  60  or¬ 
ganizations  around  the  world. 


I  Managing  Information  Tech- 
'  nology  for  Business  Value: 

I  Practicai  Strategies  for  IT 


and  Business  Managers,  by 
Martin  Curley  (Intel  Press:  350 
pages,  $49.95). 

OK.  I  should  first  admit  that 
Intel  CIO  Doug  Busch  recom¬ 
mended  this  book,  which  was 
written  by  one  of  his  col¬ 
leagues.  But  since  Intel  is 
widely  recognized  as  a  world- 
class  leader  in  terms  of  how  it 
manages  IT  internally.  I  fig¬ 
ured  it  was  worth  a  read. 

And  it  is.  Curley,  who  is  di¬ 
rector  of  IT  innovation  for  In¬ 
tel  Information  Technology  in 
Ireland,  focuses  primarily  on 
ways  to  measure  and  manage 
IT's  business  value. 
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He  rightly  notes  that  retum- 
on-investment  metrics  can  be 
notoriously  difficult  to  extrap¬ 
olate  from  IT.  TTjat's  because 
so  many  factors  —  from  busi- 
!  ness  and  technical  risks  to  the 
I  difficulty  of  quantifying  strate¬ 
gic  alignment  —  can  influence 
the  outcome. 

Curley  suggests  that  IT  and 
hu.siness  leaders  consider 
adopting  a  tool  that  Intel  has 
developed  called  the  IT  busi- 
j  ness  value  index  (BVl). 

According  to  Curley,  the 
BVI  is  a  decision-support  tool 
that,  when  combined  with 
portfolio  management  tech¬ 
niques.  can  help  organizations 
more  accurately  calculate  the 
business  x-alue  generated  by 
an  IT  investment.  Since  the 
BVI  contains  a  common 
methodology’  and  vocabulary, 
managers  can  use  it  to  com¬ 
pare  disparate  IT  and  business 
investments. 

Curley  offers  other  useful 
tips,  such  as  creating  an  IT 
annual  report  to  help  detail 
prior-year  achievements  to 
I  senior  management  while  out- 
I  lining  future  challenges. 

I  Considering  Intel's  success 
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in  IT  management  and  the 
forward-thinking  advice  that 
Curley  dispenses,  this  book  is 
worth  your  time. 


Project  Management  for 
Information.  Technology. 
Business  and  Certrficatlon, 
by  Gopai  K.  Kapur  (Prentice  Hall: 
528  pages,  $86.60). 

TTiis  is  one  of  the  most  com¬ 
prehensive  books  on  project 
management.  Not  that  this 
should  come  as  a  surprise, 
given  Kapur's  pedigree  as  the 
founder  of  the  Center  for  Proj¬ 
ect  Management  and  his 
decades  of  hands-on  c.xpcri- 
ence  in  working  with  every¬ 
one  in  the  enterprise,  from  the 
CEO  to  end  users. 

I  found  myself  dog-earing 
page  after  page  with  insights  I 
wanted  to  revisit.  (“During  the 
last  two  decades,  there  have 
been  numerous  instances 
where  management  decided  to 
train  people  in  the  use  of  proj¬ 
ect  management  software, 
without  first  training  them  in 
project  management  princi¬ 
ples  and  practices.*’) 

Kapur,  who's  a  Computer- 
world  columnist,  lists  some  of 
the  primary  reasons  for  proj¬ 
ect  failures,  including  unclear 
business  objectives,  complexi¬ 
ty  and  risks  discovered  too 
late  in  the  project  life  cycle. 

He  then  offers  advice  on  how¬ 
to  achieve  success.  Readers 
will  likely  be  intrigued  by  “the 
mocking  post"  concept  found 
on  page  49  of  the  book. 
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Aignment, 

Aignment, 

Alignment 

It’s  the  topic  du  jour  in  management 
hooks.  Some  takes  on  how  to  achieve 
it;  plus,  a  project  management  bible. 


IflOKM  J  read  tots  of  rr 

Mrmnyn  mana^ment 
RtWKnv  books  and  try 
to  narrow  down 
the  best  ones  to  recommend  to 
Computerworld^s  readers,  /f 
drives  my  wife  crazy  because 
the  books  keep  pouring  in  and 
fitting  up  my  crannied  home- 
office  (oJlo.  the  Cockpit).  Here 
are  some  keepers  (and  now  / 
can  finalty  dear  out  the  others). 

—  TTiomos  HolTman 


From  Business  Strategy  to  IT 
AdfcNi:  RfgM  Decisions  for  a 
Better  Bottom  Line,  by  RdMft 
JL  Bmen.  TImmms  L  BwonMz  amt 
WBmi  a  ttWlM  ( JalHi  Wtey  « 
Som;  S2B  paoM.  S4S). 

This  book’s  cenmi  thesis  is 
that  an  organization  should  in* 
vest  in  IT  only  when  it  direct¬ 
ly  supports  business  strategies 
and  operational  effectiveness. 
Tough  to  argue  against  that. 

The  book  provides  a  road 
map  for  C-level  executives. 


including  CIOs,  on  bow  to 
manage  and  invest  in  IT  to  de¬ 
liver  business  value.  'The  au¬ 
thors,  each  of  whom  is  a  prin¬ 
cipal  at  The  Beta  Group,  an  IT 
consulting  fuin  in  St  Louis, 
describe  a  “strategy-to-bot- 
tom-iine  value  chain"  frame¬ 
work  that  can  help  guide  a 
company  fiom  business  strate¬ 
gies  to  the  ri^t  IT  decisions. 

The  authors  touch  upon 
areas  you’d  expect  them  to, 
such  as  advocatii^  the  use  of 
portfolio  management  tools  to 
help  organizations  prioritize 
IT  and  business  investments. 
But  they  take  those  concepts 
a  step  further  by  suggesting 
actions  readers  can  take  to 
achieve  the  right  results. 

One  of  the  features  that  I 
liked  most  is  a  section  at  the 
end  of  each  chapter  in  which 
the  authors  pose  questions 
that  senior  executives  should 
ask  themselves  on  a  given 
topic,  such  as,  "Are  we  invest¬ 
ing  new  IT  resources  in  the 
ri^t  places?" 

This  is  very  practical  tome 
that  takes  a  structured  ap¬ 
proach  to  slaying  the  old  IT/ 
business  alignment  dragon. 

Mwiage  rr  as  a  Business: 
Now  to  Achieve  Alignment 
and  Add  Value  to  the  Own* 
pany.  by  Bmmt  R  UanCz  and 
1m  Lraan  (Banstar  Butfar- 
laarth  IWnamaiin.  304  pegaa. 
S44.95). 

While  fhim  Business  Stroregy 


to  IT  Action  seems  to  be 
geared  more  toward  senior 
executives,  Managirtg  IT  as  a 
Business  appears  to  ^  written 
for  IT  and  business  managers 
who  are  in  the  trenches  doing 
the  actual  woik.  This  book  is 
very  straightforward  about  the 
problems  that  have  afflicted  IT 
oiganizations  over  the  years, 
such  as  business  alignment 
shortcomings  and  the  burden 
of  managing  day-to-day  opera¬ 
tions.  and  it  offers  some  fresh 
ideas  about  how  to  deal  with 
these  issues.  One,  for  example, 
is  to  rate  the  IT  organization 
using  comprehensive  perfor¬ 
mance  metrics  that  measure 
such  variables  as  the  duration 
of  projects,  the  use  of  repeat- 
able  processes  and  the  amount 
of  knowledge  transfer  gained 
from  vendors. 

The  book  also  tackles  the 
misallocation  of  IT  resources 
and  the  tendency  among  orga¬ 
nizations  to  select  projects  for 
tactical  rather  than  strategic 
reasons. 

The  authors  have  hands-on 
project  management  etqieri- 
cnce.  and  it  shows.  Uentz,  a 
professor  of  information  sys¬ 
tems  at  the  UCLA  Anderson 
Graduate  School  of  Manage¬ 
ment.  was  a  project  leader  in¬ 
volved  in  the  development  of 
Arpanet,  the  precursor  to  the 
Internet.  Larssen  has  served  as 
an  IT  manager,  business  man¬ 
ager  and  consultant  for  more 
than  40  companies  over  the 
pa.st  2S  years.  'The  techniques 
they  draw  upon  have  been  im¬ 
plemented  in  more  than  60  or¬ 
ganizations  around  the  world. 


Mmoing  kihnnatkin  Tach- 
nolom  for  BuiiMn  V^; 
Pn^StntogiasforlT 


and  Busiiwss  Managers,  by 
Maftbi  Curiq  (biM  Praa;  3S0 
paga.  (49.95). 

OK.  I  should  first  admit  that 
Intel  CIO  Doug  Busch  recom¬ 
mended  this  book,  which  was 
written  by  one  of  his  col¬ 
leagues.  But  since  Intel  is 
widely  recognized  as  a  world- 
class  leader  in  terms  of  how  it 
manages  IT  internally,  1  fig¬ 
ured  it  was  worth  a  read. 

And  it  is.  Curley,  who  is  di¬ 
rector  of  IT  itmovation  for  In¬ 
tel  Information  Technology  in 
Ireland,  focuses  primarily  on 
ways  to  measure  and  manage 
ITs  business  value. 


•*«W9in8 

’"““nesVblue 


He  rightly  notes  that  return- 
on-investment  metrics  can  be 
notoriously  difficult  to  extrap¬ 
olate  from  IT  'That's  becatise 
so  many  factors  ~  from  busi¬ 
ness  and  technical  risks  to  the 
difficulty  of  quantifying  strate¬ 
gic  alignment  —  can  influence 
the  outcome. 

Curley  suggests  that  IT  and 
business  leaders  consider 
adopting  a  tool  that  Intel  has 
developed  called  the  IT  busi¬ 
ness  value  index  (BVl). 

According  to  Curley,  the 
BVl  is  a  decision-support  tool 
that,  when  combined  with 
portfolio  management  tech¬ 
niques.  can  help  oiganizations 
more  accurately  calculate  the 
business  value  generated  by 
an  IT  investment.  Since  the 
,BV1  contains  a  common 

lethodology  and  vocabulary, 
managers  can  use  it  to  com¬ 
pare  disparate  IT  and  business 
investments. 

Curley  offers  other  useful 
tips,  sudt  as  creating  an  IT 
annual  report  to  help  detail 
prior-year  achievements  to 
senior  management  while  out¬ 
lining  future  challenges. 

Considering  Intel’s  success 


in  IT  management  and  the 
forward-thinking  advice  that 
Curley  dispenses,  this  book  is 
worth  your  time. 


Proiect  Management  for 
Information,  fechnofogy. 
Business  and  Certification, 
by  6opd  K.  Kwwr  (PrwOn  Hdl: 
528  prow.  S86.60). 

This  is  one  of  the  most  com¬ 
prehensive  books  on  project 
man^ment.  Not  that  this 
should  come  as  a  surprise, 
given  Kapur's  pedigree  as  the 
founder  of  the  Center  for  Proj¬ 
ect  Management  and  his 
decades  of  hands-on  experi¬ 
ence  in  working  with  every¬ 
one  in  the  enterprise,  from  the 
CEO  to  end  users. 

I  found  myself  dog-earing 
page  after  page  with  insights  I 
wanted  to  revisit.  ("During  the 
bat  two  decades,  there  have 
n  numerous  instances 
here  management  decided  to 
train  people  in  the  use  of  proj- 
management  software, 
without  first  training  them  in 
project  management  princi¬ 
ples  and  practices.") 

Kapur,  who’s  a  Computer- 
world  columnist,  lists  some  of 
the  primary  reasons  for  proj¬ 
ect  failures,  including  unclear 
business  objectives,  complexi¬ 
ty  and  risks  discovered  too 
late  in  the  project  life  cycle. 

He  then  offers  advice  on  how 
to  achieve  success.  Readers 
will  likely  be  intrigued  by  "the 
mockii^  post"  concept  found 
on  page  49  of  the  bot^ 
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EXEC  TRACK 


Webb  to  Join 
Equifax  as  CTO 

Equifax  he.  announcad  that 
ROeERT  J.  WEBB  wfl  loin  the 
company  as  chief  technology 
ofhear.  Webb  wfl  report  to  Chair¬ 
man  and  CEO  Tom  Chapman  and  ! 
be  reaponsibie  for  managing  the  j 
Atlanta-based  company’s  ghb^ 
fT  infrastructure,  deviously. 

Webb  served  as  CK)  in  several 
dhrisiorts  of  General  Electric  Co. 
Most  recently,  he  was  managing 
director  of  Canadian  vendor  fi¬ 
nancing  at  OE. 


CIO  Takes  COO 
Role  at  HomeGoods 

ROBERT  CATALOG  wil  be  promot¬ 
ed  to  chief  operating  office  at 
HomeGoods  from  his  post  as  CIO 
of  The  TJX  Companies  he.,  a  i 

Framingham,  Mass.-based  retail¬ 
er.  CataMo  has  been  CIO  since  | 
2001.  Prior  to  tftat,  be  held  senior  | 
systems  and  finance  positions  at  i 
the  HomeGoods  division,  which  | 
he  joined  in  1997.  He  also  held  | 
financial  positions  at  TJX  prede-  I 
cessor  Zayre  Corp.  I 


Healthcare  Partners 
NamesNewCIO 

ZAN  F.  CALHOUN  has  johed  | 
HeaMiCafe  Partners  Ltd.  h  toe 
Angeles  as  CK).  Previously,  he 
was  president  of  OAO  Healthcare 
Solutions  he.,  and  before  that,  he 
was  director  of  the  commercial 
health  care  consulting  practice 
at  BsarhgPoht  he.  (formerly 
KPMG  (Consulting}. 


PoweH  Tapped  as  ! 
CTO  at  HighBeam 

HighBeam  Research  he.,  a  Chica¬ 
go-based  operator  of  an  online 
research  en^  for  individuals, 
announced  that  ISTTH  POWELL 
has  joined  the  company  as  vice 
pre^dent  and  CTO.  He  will  be  re¬ 
sponsible  for  managing  aH  tech¬ 
nology  functions  and  for  the  com¬ 
pany's  research  and  development 
efforts.  Poweil  was  previously  a 
senior  manager  at  BearingPoint. 
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One  Bom 
Every  Minute 


There  we  go  again.  “Technical glitches 
in  a  $52  million  installation  of  PeopleSoft 
Inc.’s  applications  at  Indiana  University 
have  left  thousands  of  students  without 
access  to  promised  financial  aid  . . .  ’’ 


iQuickLink  49349J.  What  is 
the  explanation?  According 
to  universit>'  spokeswoman 
Norma  Holland.  “The 
glitches  were  not  caused 
by  the  system  proper." 

From  this  statement  I 
would  gather  that  Holland 
seems  to  think  that  soft¬ 
ware  is  the  “system  prop¬ 
er."  She  doesn't  realize  that 
a  s>'stem  is  the  amalgama¬ 
tion  of  software,  processes 
and  people. 

Any  project  manager 
wonh  her  work-breakdown 
structure  knows  that  for  a 
system  to  be  successful,  it 
is  imperative  that  the  work 
processes  be  aligned  to  the  system 
processes  and  that  users  be  trained  in 
a  timely  manner  —  far  ahead  of  the 
delivery  of  the  technology.  As  part 
of  due  diligence  for  any  propi>sed  sys¬ 
tem,  the  project  manager  must  ask  the 
following  que.stions; 

•  What  degree  of  change  will  the 
new  system  bring  to  the  processes  cur¬ 
rently  being  followed? 

■  Will  the  users  be  willing  to  make 
the  necessary  changes? 

•  Arc  the  users  ready  to  make  the 
necessary  changes? 

■  What  is  the  latest  time  by  which 
the  users  must  be  made  ready? 

Obviously,  either  these  questions 
weren’t  asked,  or  if  they  were  asked,  no 
follow-up  plans  were  put  into  place  at 
the  university.  As  a  result,  with  classes 
looming,  the  IT  team  ran  out  of  time 
for  system  testing  and  user  training. 

Was  the  dale  for  the  start  of  classes 
an  unknown?  If  the  team  had  any  proj¬ 


ect  management  sense, 
it  would  have  established 
“runaway  triggers"  for 
system  testing  and  end- 
user  training.  Those  would 
have  made  the  project 
manager  aware  of  the  im¬ 
pending  delays,  and  the 
team  could  have  done  one 
of  the  following: 

■  Speed  up  the  project 
to  finish  the  system  testing 
and  user  training  in  a  time¬ 
ly  manner. 

■  Implement  contin¬ 
gency  procedures  and 
work-arounds. 

■  Suspend  the  project 
in  an  orderly  way  until  the 

next  window  of  opportunity  —  the 
following  semester. 

Obviously.  IT  staffers  didn't  have  a 
systematic  status-tracking  process  in 
place  and  simply  ran  into  the  start- 
of-classes  wall.  Then  they  blamed  the 
wall  for  being  there.  And  apparently 
they  waited  until  the  end  of  the  project 
to  Stan  training  the  users.  Smart  proj¬ 
ect  managers  (and  sponsors)  know 
that  user  training  must  begin  well  in 
advance  of  the  system  implementation. 

But  there's  more.  Another  unK’crsity 
spokeswoman.  Sue  Williams,  said. 
"Most  problems  were  caused  by  inter¬ 
face  issues  between  the  PeopleSoft  ap¬ 
plication  and  the  loan  systems  at  lend¬ 
ing  institutions. . . ." 

Is  one  to  believe  that  the  interface 
was  unexpected  and  sprung  onto  the 
university’s  PeopleSoft  system  out  of 
left  field?  The  data  interface  with  ex¬ 
ternal  systems,  a  perennial  problem, 
must  be  investigated  as  a  part  of  the 
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project  planning  process.  TTiese  ques¬ 
tions  should  have  been  asked; 

■  What  is  the  quality  of  incoming 
data? 

■  What  volumes  of  data  will  need  to 
be  handled? 

■  What  will  be  the  frequency  of  data 
transmission? 

■  Will  there  be  any  media/ infra¬ 
structure  incompatibility? 

■  Will  the  data  be  available  in  a 
timely  manner? 

■  Are  there  any  cross-system  data 
dependencies? 

Obviously,  none  of  that  took  place  or 
this  fiasco  wouldn’t  have  happened. 

Williams  says  the  financial  aid  mod¬ 
ule  is  "big  and  complex."  That  is  what 
scope  parsing  is  all  about:  chunking  a 
big  project  into  smaller,  progressive 
scope  modules.  Why  didn't  the  spon¬ 
sor  (if  there  was  one)  make  sure  that 
the  complex  project  w’as  broken  into 
smaller  chunks?  Instead,  the  IT  team 
brought  all  eight  campuses  live  in  a 
single  cycle,  knowing  very  well  the  in¬ 
herent  complexity  of  the  endeavor.  As 
a  result.  .3,000  students,  many  of  their 
parents  and  hundreds  of  landlords 
were  left  in  the  lurch. 

How  many  ways  did  this  project 
violate  project  management  best 
practices? 

1  Poor  or  no  due  diligence. 

2.  No  user  training. 

3.  Absence  of  s)'stcm  status  alerts. 

4.  System  interface  problems  were 
ignored. 

5.  The  complex  project  wasn’t  bro¬ 
ken  doum  into  progressively  delivered 
smaller  chunks. 

If  after  all  the  missteps  the  univer¬ 
sity  is  still  a  "happy  customer”  as  stat¬ 
ed  by  PeopleSoft.  then  it  should  step 
right  up  and  buy  a  ticket  to  see  the 
genuine  two-headed  double-talking 
happy  monkey  from  Mars.  O  50622 
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There  we  go  again.  “Technical  glitches 
in  a  $52  million  installation  of  PeopleSoft 
Inc.’s  applications  at  Indiana  University 
have  left  thousands  of  students  without 
access  to  promised  financial  aid ...” 


project  planning  process.  These  ques¬ 
tions  should  have  been  asked: 

■  What  is  the  quality  of  incoming 
data? 

■  What  volumes  of  data  will  need  to 
be  handled? 

■  What  will  be  the  frequency  of  data 


[QuickLink  49349].  What  is 
the  explanation?  According 
to  university  spokeswoman 
Nonna  Holland,  The 
glitches  were  not  caused 
by  the  system  proper." 

From  this  statement  I 
wotild  gather  that  Holland 
seems  to  think  that  soft¬ 
ware  is  the  "system  prop¬ 
er."  She  doesn't  realize  that 
a  system  is  the  amalgama¬ 
tion  of  software,  processes 
and  people. 

Any  project  manager 
worth  her  work-breakdown 
structure  knows  that  for  a 
system  to  be  successful,  it 
is  imperative  that  the  work 
processes  be  aligned  to  the  system 
processes  and  that  users  be  trained  in 
a  timely  manner  —  far  ahead  of  the 
delivery  of  the  technology.  As  part 
of  due  diligence  for  any  proposed  sys¬ 
tem,  the  project  manager  must  ask  the 
following  questions: 

■  What  degree  of  change  will  the 
new  system  bring  to  the  processes  cur¬ 
rently  being  followed? 

■  Will  the  users  be  willing  to  make 
the  necessary  changes? 

■  Are  the  users  ready  to  make  the 
necessary  chan^? 

■  What  is  the  latest  time  by  which 
the  users  must  be  made  ready? 

Obviously,  either  these  questions 
weren't  asked,  or  if  they  were  asked,  no 
foUow-up  plans  were  put  into  place  at 
the  university.  As  a  result,  with  classes 
looming,  the  IT  team  ran  out  of  time 
for  system  testing  and  user  training. 

Was  the  date  for  the  start  of  classes 
an  unknown?  If  the  team  had  any  proj¬ 


ect  management  sense, 

It  would  have  established 
"runaway  triggers"  for 
system  testing  and  end- 
user  training.  Those  would 
have  made  the  project 
manager  aware  of  the  im¬ 
pending  delays,  and  the 
team  could  have  done  one 
of  the  following: 

■  Speed  up  the  project 
to  finish  the  system  testing 
and  user  training  in  a  time¬ 
ly  manner. 

■  Implement  contin¬ 
gency  procedures  and 
work-arounds. 

>  Suspend  the  project 
in  an  orderly  way  until  the 
next  window  of  opportunity  —  the 
following  semester. 

Obviously.  IT  staffers  didn’t  have  a 
systematic  status-tracking  process  in 
place  and  simply  ran  into  the  start- 
of-ciasses  wall  Then  they  blamed  the 
wall  for  being  there.  And  apparently 
they  waited  until  the  end  of  the  project 
to  start  training  the  users.  Smart  proj¬ 
ect  mana^rs  (and  sponsors)  know 
that  user  training  must  begin  well  in 
advance  of  the  system  implementation. 

But  there’s  more.  Another  university 
spokeswoman.  Sue  Williams,  said, 
"Most  problems  were  caused  by  inter¬ 
face  issues  between  the  PeopleSofl  ap¬ 
plication  and  the  loan  systems  at  lend¬ 
ing  institutions. . . ." 

Is  one  to  believe  that  the  interface 
was  unexpected  and  sprung  onto  the 
university’s  PeopleSoft  system  out  of 
left  Held?  The  data  interface  with  ex¬ 
ternal  systems,  a  perennial  problem, 
must  be  investigated  as  a  part  of  the 


transmission? 

■  Will  there  be  any  media/infra¬ 
structure  incompatibility? 

■  Will  the  data  be  available  in  a 
timely  manner? 

■  Are  there  any  cross-system  data 
dependencies? 

Obviously,  none  of  that  took  place  or 
this  fiasco  wouldn’t  have  happened. 

Williams  says  the  financial  aid  mod¬ 
ule  is  "big  and  complex."  That  is  what 
scope  parsing  is  all  about:  chunking  a 
big  project  into  smaller,  progressive 
scope  modules.  Why  didn't  the  spon¬ 
sor  (if  there  was  one)  make  sure  that 
the  complex  project  was  broken  into 
smaller  chunks?  Instead,  the  IT  team 
brought  all  eight  campuses  live  in  a 
single  cycle,  Imowing  very  well  the  in¬ 
herent  complexity  of  the  endeavor.  As 
a  result.  3,000  students,  many  of  their 
parents  and  hundreds  of  landlords 
were  left  in  the  Itnch. 

How  many  ways  did  this  project 
violate  project  management  best 
practices? 

1  Poor  or  no  due  diligence. 

2.  No  user  training. 

3.  Absence  of  system  status  alerts. 

4.  System  interface  problems  were 
ignored. 

5.  The  complex  project  wasn't  bro¬ 
ken  down  into  progressively  delivered 
smaller  chunks. 

If  after  all  the  missteps  the  univer¬ 
sity  is  still  a  "happy  customer,”  as  stat¬ 
ed  by  PeopleSoft,  then  it  should  step 
ri^t  up  and  buy  a  ticket  to  see  the 
genuine  two-headed  double-talking 
happy  monkey  from  Mars.  O  50622 
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Emulex  Set  to  Ship 
Swttch-on-a-Chip 


Chip  offers  support 
for  old  and  new 
disk  technology 

8V  LUCAS  MEASIAN 

Emulex  Corp.  today  plans  to 
bring  out  a  swiicb-on>a<hip 
chat  will  let  storage  vendors 
develop  devices  that  can  mix 
and  match  Fibre  Channel  disk 
arrays  with  different  perfor¬ 
mance  characteristics.  The 
switch  also  allows  users  to  up¬ 


grade  their  storage  without 
throwing  out  existing  systems. 

Jed  Dobson,  a  system  archi¬ 
tect  at  Dartmouth  College  in 
Hanover.  N.H.,  said  he  likes 
the  idea  of  switching  between 
Fibre  Channel  arrays  that  per¬ 
form  at  different  levels  within 
the  same  enclosure,  because  it 
would  let  him  taikir  storage  ser¬ 
vice  levels  to  end  users  accord¬ 
ing  to  how  critical  the  ^ata  is. 

Dobson  has  about  12TB  of 
storage  on  several  Sun  Micro¬ 


systems  inc  arrays,  and  his 
switches  serve  up  IGbit/sec. 
and  2Gbii/5ec.  Fibre  Channel 
throughpuL  “My  next  purchase 
of  Fibre  Channel  switches  will 
probably  be  in  the  4Gbit/sec 
range,  so  that  [chip  isj  attrac¬ 
tive.'’  Dobson  saicL  “I  have 
about  64  ports  of  2GbitAec. 
Fibre  Channel  storage,  so  I'd 
probably  want  to  keep  those  be¬ 
cause  it  was  a  pretty  big  cost” 
Rkk  VUlars.  an  analyst  at 
IDC,  said  the  advent  of  Emu- 
lex's  FibreSpy  SCK^  804  family 
of  embedded  storage  switches 
will  give  vendors  and  users 
more  flexibility,  especially  in 
larger  storage  arrays  where 
there  are  hundreds  of  disks 
that  aren’t  always  immediately 


populated.  Users  could  contiit- 
ue  to  grow  the  arrays  as  disk 
technology  develops,  he  said. 

“Long-term  end  users  will 
have  the  option  to  use  a  lower- 
cost  disk  subsyscem,'*  VUlars  I 
said.  "You  replace  the  con¬ 
troller  and  the  disk  and  the 
switches,  but  you  don't  have  to 
pull  the  whole  box  out" 

Bob  Brencic,  senior  director 
of  switch  marketmg  at  Costa 
Mesa.  Calif -based  Emulex, 
said  the  chips  come  with  four 
Fibre  Channel  pons  each  but 
can  be  configxi^  in  five-chip 
clusters  for  up  to  20  ports  in  a 
single  storage  enclosure. 

The  switched  chip  also  al¬ 
lows  array  manufacturers  to 
break  Fibre  Channel's  126- 


device  barrier  to  allow  thou¬ 
sands  of  disk  drives  to  be  at¬ 
tached  to  storage  controllers 
in  boxes.  Brencic  said. 

He  added  that  the  intemaJ 
switching  will  also  simplify 
storage  management  because 
IT  administrators  can  use  the 
native  management  tools  of 
the  array  instead  of  having  to 
deal  with  external  switch 
management  tools.  "OEMs  can 
buUd  those  storage  manage¬ 
ment  tools  right  into  the  chip." 
he  said.  O  S10SB 
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or  use  it  on  a  personal  basis. 
But  17  said  that  their  compa¬ 
nies  have  no  current  plans  to 
re-evaluate  their  decisions  to 
go  with  Internet  Explorer. 

"We've  been  standardized 
on  Microsoft  Internet  Explor¬ 
er  for  as  long  as  we*ve  had  a 
standard,"  said  Patricia  Coffey, 
an  assistant  vice  president  in 
n*  at  Allstate  Insuraitcc  Ca  in 
Northbrook.  Ill.  "BasicaUy.  we 
run  Microsoft  on  the  desktop 
as  our  standard,  so  we  use  IE. 
OfTice,  Outlook,  etc." 

Allstate's  "big  gripe ...  is 
the  security  issues  with  Mi¬ 
crosoft."  Coffey  said.  But  she 
added  that  the  insurer  is  con¬ 
tent  with  IE  from  a  features 
standpoint. 

Security  is  the  reason  why 
Jefferson  County  in  Colorado 
ordered  its  2,000  government 
workers  to  switch  to  Firefox 
about  flve  months  ago,  said 
David  Gallaher,  the  county’s 
director  of  IT  development 
Gallaher  said  he  came  to  view 
IE  as  "a  VDS  —  a  virus  distrib¬ 
ution  system." 

It’s  hazardous  to  your  cor¬ 
porate  health."  said  Gallaher. 
"You  have  to  Cum  off  every¬ 
thing  that  makes  Int^net  Ex¬ 
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plorer  interesting  Just  to  avoid 
the  impact  of  the  viruses.  Even 
Microsoft  employees  have  told 
us.  Tou  should  turn  off  Ac¬ 
tiveX  controls.' " 

Jefferson  County  ran  the 
beta  version  of  Firefox  and 
is  moving  to  Version  1.0.  Gal- 
laber  said  the  migration  has 
gone  well,  except  for  compo¬ 
nents  in  a  few  applications 
that  don't  yet  support  Fire¬ 
fox.  including  the  county's 
enterprise  document  maixage- 
ment  system.  But  he  said  the 
application  vendors  have  in¬ 
dicated  that  they  will  Ax  the 
problems. 


Mark's  Work  Wearhouse 
Ltd.,  a  Calgary.  Alberta-based 
retail  chain,  encountered  Fire- 
fox  support  problems  with  the 
Web  sites  of  some  of  its  sup¬ 
pliers  and  business  partners, 
according  to  CIO  Robin  Ly- 
nas.  For  example,  the  pages 
on  a  courier  company’s  site 
wouldn’t  render  properly 
with  the  new  browser.  Bui  the 
courier  has  since  fixed  the 
problem.  Lynas  said. 

Those  glitches  haven't  de¬ 
terred  Mack’s  Work  Wearhouse 
from  standardizing  oo  Firefox 
as  the  underlying  browser  for 
its  in-store  systems.  Lynas  said 


the  decision  was  a  natural  one, 
since  the  retailer’s  cash  regis¬ 
ters  already  run  Linux. 

Joe  Hartman,  an  application 
development  manager  at  Hy- 
droChem  Industrial  Services 
Inc.  in  Deer  Fark,  Texas,  said 
he  has  used  Firefox  exclusively 
at  home  for  about  six  months. 
He  said  that  he  would  like  to 
recommend  that  HydroChem 
switch  to  Firefox  because  he's 
concerned  about  IFs  security 
as  well  as  Microsoft's  lack  of 
"signifkam  developmcmi  on  IE 
since  Version  4." 

"It  ixm  appears  IE  may  well 
be  on  its  way  to  becoming  a 
second-class  browser.”  he  said 

What's  making  Hartman 
hesitant  to  recommend  the 
switch  to  Firefox  is  the  compa¬ 
ny’s  investment  in  Microsoft’s 
Dynamic  HTML  technology 
for  Us  intranet  applications. 

Future  Attraction 

One  alluring  foarure  in  Fire-  i 
fox  is  a  tabbed  browsing  capa-  | 
bility.  which  Internet  Explorer 
lacks.  Thbbed  browsing  allows 
users  to  load  pages  from  mul¬ 
tiple  sites  without  having  to 
open  a  new  browser  window 
for  each  ooc.  The  tabs  make  it 
easier  to  switch  back  and  forth 
between  the  sites. 

The  feature  is  "real  handy," 
said  Gallaher,  adding,  "What 


has  Microsoft  done  with  IE  fur 
the  last  few  years?  They've  ig¬ 
nored  ft," 

Gary  Schare.  a  director  of 
product  managemeni  at  Mi¬ 
crosoft.  disputed  that  asser- 
lioft  He  claimed  that  Micro¬ 
soft  continues  to  make  maior 
investments  in  Internet  Ex¬ 
plorer,  including  signUkant 
security  enhancements  that 
were  pan  of  Windows  XP  Ser¬ 
vice  Pack  2.  Scharc  added  that 
Microsoft  partners  and  inde¬ 
pendent  software  vendors  arc 
developing  add-ons  for  IE  and 
even  complete  browsers  with 
tabbed  browsing  capabilities 
built  on  top  of  it 

Carroll  Pleasant,  a  systems 
associate  at  Eastman  Chemical 
Ca  in  Kingsport  Tcmt.  said 
his  company  is  sticking  with 
Internet  Explorer  as  its  stan¬ 
dard  browser.  "Nothing  else  is 
practical  for  us,"  be  said.  "Wc 
have  a  significant  number  of 
internal  systems  that  are  de¬ 
pendent  on  IE." 

Ping  Inc.  also  plans  to  con¬ 
tinue  using  Internet  Explorer, 
said  David  Chacon,  a  techni¬ 
cal  services  manager  at  the 
Phoenix-based  maker  of  golf 
equipment  But  Firefox  "has 
rc^  raised  the  bar  on  func¬ 
tionality  and  usability,"  Chacon 
said.  "I  hope  Microsoft  is  tak¬ 
ing  notes."  O  91063 
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Staying  a  Step  Ahead 


Think  you’ll  be  able  to  choose  your  own  schedule 
for  utility  computing?  Think  again.  Last  week,  the  BBC 
reported  online  that  students  may  soon  be  using  a  pay- 
as-you-go  computing  utility  on  a  routine  basis.  And  not 
computer  science  students,  either  —  these  are  student 
animators  [QuickLink  a5160]. 

Hewlett-Packard’s  research  lab  in  Bristol,  England,  just  launched 
a  rendering  service  for  small  animation  companies  to  test  its  grid 
computing  model.  The  animators  create  their  designs,  then  HP’s 
computing  grids  turn  them  into  3-D  animated  films.  Several  partici¬ 
pants  told  the  BBC  they  expect  students  to  be  using  the  utility  soon. 
At  that  point,  the  grid  plan  will  be  out  of  our  hands. 


We  know  how  it  will  happen.  We’ve  seen  it 
before.  As  long  as  a  technology  is  too  diftlcuU. 
ct-mplicaied  or  expensive  for  anyone  except  IT 
departments  to  use,  IT  shops  can  keep  a  firm 
grip  on  how  we  roll  it  out.  and  when.  But  if  the 
technology’  gets  cheap  and  simple  enough  for 
non-IT  people  to  use.  wc  lose  control. 

It  happened  with  PCs  and  spreadsheets,  with 
the  Web  and  handheld  computers  and  wireless 
network  access  points.  Users  get  their  hands  on 
a  new  technology’.  They  figure  it  out.  Then  they 
want  to  use  it  for  business  —  and  if  the  IT  de¬ 
partment  isn’t  ready,  users  start  without  us. 

So  now  that  HP  Labs  Bristol  has  started  up  its 
Frame  Factory’  animation-rendering  utility  ser¬ 
vice,  the  clock  is  ticking.  Today,  a  handful  of 
small  animation  studios  use  the  service  to  cre¬ 
ate  short  cartoons.  Soon,  students  will  use  it. 
Then  the  idea  will  expand  beyond  Bristol.  Oth¬ 
er  rendering  services  will  be  launched.  It  won’t 
be  long  before  wc  have  student  animators  using 
rendering  grids  in  our  own  backyards. 

Those  student  animators  won't  have  to  be 
technical  wizards.  They’ll  use  de¬ 
sign  software  on  desktop  work¬ 
stations.  and  the  actual  workings  of 
hv)w  their  designs  are  turned  into 
fancy,  textured  5-0  im3ge.s  may  be  a 
my-stery  to  them.  But  they’ll  under¬ 
stand  the  concept  of  a  computing 
utility,  and  they’ll  have  hands-on 
experience  using  it. 

In  fact,  they'll  understand  it  better 
than  we  do. 

Let's  face  it  —  most  IT  shops 
aren't  ready  for  utility  computing 
today.  Some  of  us  arc  dipping  a  toe 
in,  but  we  all  know  it’s  still  very  ear¬ 


ly.  Most  of  us  plan  to  wait  until  standards  are 
set  and  someone  explains  it  to  us. 

But  when  students  get  access  to  utility  com¬ 
puting.  our  plans  won’t  matter.  TTiosc  student 
animators  —  and  the  college  friends  they  hang 
around  with  —  arc  just  a  few  years  away  from 
landing  in  our  m.irketing  and  sales  and  adver¬ 
tising  departments. 

When  they  tel!  their  bosses  that  they  were 
using  pay-as-you-go  processing  when  they  were 
in  school,  we  in  IT  won't  be  able  to  convince 
anyone  that  utility  computing  isn’t  ready  yet. 
Wc’ll  have  to  make  it  happen  —  or  they'll  find 
utility  computing  vendors  without  us. 

Then  we’ll  have  to  play  catch-up  as  we  try  to 
pull  their  utility  computing  projects  back  under 
IT’S  control.  It’ll  be  PCs  and  handhelds  and 
wireless  access  points  all  over  again. 

But  that's  not  all  bad  news. 

Look,  if  users  figure  out  utility  computing,  we 
won’t  have  to  explain  it  to  them.  They’ll  already 
understand  the  business  value.  They’ll  know  it’s 
useful.  They’ll  even  tell  us  how. 

True,  that  means  wc  won't  be 
setting  the  utility  computing  agen¬ 
da.  But  our  job  is  to  make  IT  serve 
the  business,  remember? 

If  we  pay  attention  and  time  it 
right,  we  can  make  our  jump  into 
utility  cximputing  after  the  bloodi¬ 
est  part  of  the  bleeding  edge  is  past 
—  but  still  ju,st  before  users  start 
asking  us  for  it. 

And  if  that  means  grids  don’t  ar¬ 
rive  for  us  exactly  on  the  schedule 
we’d  choose  —  well,  at  least  this 
time  we'll  have  a  hand  in  the  plan. 

0  51030 
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Complex  World,  Simple  Minds 

New  hire 'doesn’t  seem  to  have  a  knack  lor  fT  at  this 
bank,  so  pilot  fish  puts  him  to  work  loggino  ATM  prob- 
lems.  1  stepped  him  through  the  basics  as  he  to^  his 
first  c^.*  fish  says. 'He  dutilufty  logged  the  location 
and  the  nature  of  the  problem,  then  asked  me  whtf 
tirne  he  should  note  in  that  coiurnn.  I  iHXIded  up  at  the 
wafl  dcKk  and  responded.  T^ght  now.’ '  L^.  fish 
firafe  newbie  has  recorded  the  incident  exactiy  as  in¬ 
structed '  and  filled  the  time  coiurim  Mith 'rf^ 
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FRANK  HAYES  ■  FRANKLY  SPEAKING 

Staying  a  Step  Ahead 

Think  you’ll  be  able  to  choose  your  own  schedule 
for  utility  computing?  Think  again.  Last  week,  the  BBC 
reported  online  that  students  may  soon  be  using  a  pay- 
as-you-go  computing  utility  on  a  routine  basis.  And  not 
computer  science  students,  either  —  these  are  student 
animators  [QuickLink  a5160]. 

Hewlett-Packard’s  research  lab  in  Bristol,  England,  just  launched 
a  rendering  service  for  small  animation  companies  to  test  its  grid 
computing  model.  The  animators  create  their  designs,  then  HP’s 
computing  grids  tiun  them  into  3-D  animated  films.  Several  partici¬ 
pants  told  the  BBC  they  expect  students  to  be  using  the  utility  soon. 
At  that  point,  the  grid  plan  will  be  out  of  our  hands. 


We  know  how  it  will  happen.  We've  seen  it 
before.  As  long  as  a  technolc^  is  too  difTicult. 
complicated  or  expensive  for  anyone  except  IT 
departments  to  use,  FT  shops  can  keep  a  Hrm 
grip  on  how  we  roll  it  out,  and  when.  But  if  the 
technology  gets  cheap  and  simple  enough  for 
non-IT  people  to  use,  we  lose  control. 

It  happened  with  PCs  and  spreadsheets,  with 
the  Web  and  handheld  computers  and  wireless 
network  access  points.  Users  get  their  hands  on 
a  new  technolc^.  They  figure  it  out.  Then  they 
want  to  use  it  for  business  —  and  if  the  IT  de¬ 
partment  isn’t  ready,  users  start  without  us. 

So  now  that  HP  Labs  Bristol  has  started  up  its 
Frame  Factory  animatfon-rendering  utility  ser¬ 
vice.  the  clock  is  ticking.  Today,  a  handful  of 
small  animation  studios  use  the  service  to  cre¬ 
ate  short  cartooiAs.  Soon,  students  will  use  it 
Then  the  idea  will  expand  beyond  Bristol  Oth¬ 
er  rendering  services  will  be  launched.  It  won’t 
be  long  before  we  have  student  animators  using 
rendering  grids  in  our  own  backyards. 

Those  student  animators  won’t  have  to  be 
technical  wizards.  They’ll  use  de¬ 
sign  software  on  desktop  work- 
statioas.  and  the  actual  woikings  of 
how  their  designs  are  turned  into 
fancy,  textured  3-D  images  may  be  a 
mystery  to  them.  But  they’ll  under¬ 
stand  the  concept  of  a  computing 
utility,  and  they’ll  have  hands-on 
experience  using  h. 

In  fact,  they'll  understand  it  better 
than  we  da 

Let’s  face  it  —  most  IT  shops 
aren’t  ready  for  utility  computing 
today.  Some  of  us  are  dipping  a  toe 
in.  but  we  all  know  it's  still  very  ear¬ 


ly.  Most  of  us  plan  to  wait  until  standards  are 
set  and  someone  explains  it  to  us. 

But  when  students  get  access  to  utility  com¬ 
puting.  our  plans  won’t  matter.  Those  student 
animators  —  and  the  college  fri^ds  they  hang 
around  with  —  are  just  a  few  years  away  from 
landing  in  our  mariceting  and  sales  and  adver¬ 
tising  departments. 

When  they  tell  their  bosses  that  they  were 
using  pay-as-you-go  processing  when  they  were 
in  school  we  in  IT  won't  be  able  to  convince 
anyone  that  utility  computii^  isn’t  ready  yet 
We’ll  have  to  make  it  happen  —  or  they'll  find 
utility  computing  vendors  without  us. 

Then  we’U  have  to  play  catch-up  as  we  try  to 
pull  their  utility  computing  projects  back  under 
rr$  control  It’ll  be  PCs  and  handhelds  and 
wireless  access  points  ail  over  again. 

But  that’s  not  all  bad  news. 

Look,  if  users  figure  out  utility  computing,  we 
won’t  have  to  explain  it  to  them.  They'll  already 
understand  the  business  value.  They’ll  know  it’s 
useful  They'll  even  tell  us  how. 

True,  that  means  we  won’t  be 
setting  the  utility  computing  agen¬ 
da.  But  our  job  is  to  make  IT  serve 
the  business,  remember? 

If  we  pay  attention  and  time  it 
right,  we  can  make  our  jump  into 
utility  computing  after  the  bloodi¬ 
est  part  of  the  bleeding  edge  is  past 
—  but  still  just  before  users  start 
asking  us  for  it 

And  if  that  means  grids  don’t  ar¬ 
rive  for  us  exactly  on  the  schedule 
we’d  choose  —  well  at  least  this 
time  well  have  a  hand  in  the  plan. 
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Consider  the  dots  connected.  From  one  coast  to  the  other.  Transportation 
Insurance  Brokers  are  serving  clients  more  securely.  Sharing  data  more  quickly. 
Communicating  more  seamlessly.  And  doing  it  aU  for  almost  $2,000  less  a  month, 
thanks  to  an  IP-VPN  solution  we  designed,  delivered  and  now  manage.  And  the 
strong,  reliable  backbone  of  the  SBC  network.  Find  out  more  about  how  we're 
helping  TIB  connect  the  dots  at  sbc.com/dots.  GOING  BEYOND  THE  CALL: 
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Computer  Associates  CIO  Kevin  Kern  used  to  In  naming  a  CEO-elect,'  CA  missed  a  chance  to 

work  at  SAP.  Now  he's  installing  its  apps.  send  a  message  of  stability,  says  Don  Tennant. 
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Here’s  our  anmial  look 
at  the  best  new  gadgets, 

fromserious  PDAs  to 
exotic  gizmos  for  techies 
of  all  ages.  Page  23 


Users  See  Slow  Progress 
On  Microsoft-Sun  Alliance 


Vendors  provide  first 
update  on  joint  efforts 


The  progress  report  that  Mi¬ 
crosoft  Corp.  and  Sun  Micro¬ 
systems  Inc.  issued  last  week 


on  their  joint  initiatives  left 
some  IT  managers  and  ana¬ 
lysts  wondering  when  or  if  the 
loi^-term  collaboration  that 
the  two  companies  have 
promised  will  produce  any 
substantial  results. 

Executives  from  the  one¬ 
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time  bitter  rivals  died  collabo¬ 
rative  efforts  in  areas  such  as 
Web  services  standards,  iden¬ 
tity  man^ement,  storage  and 
the  optimization  of  Windows 
for  Sun  hardware  (see  chart, 
page  S3).  But  much  of  the 
work  is  ongoing,  and  Micro¬ 
soft  and  Sun  didn’t  provide 
details  about  any  major  tech¬ 
nology  pronouni^ments  that 
may  be  forthcoming. 

'Tdy  expectation  on  them 
producing  deliverables  is  very 
low,”  said  Emanuel  Joseph, 

Conabomtion,  p<ige  S3 


DataOnter 
VGainsMay 
Imperil  Jobs 

Gartner  says  half  of  IT  operations  positions 
could  vanish  in  20  years;  users  aren’t  so  sure 


In  an  eyebrow-raising  forecast 
that  was  met  with  a  mix  of 
skepticism  and  nonchalance 
by  some  IT  managers,  Gartner 
Inc.  analysts  last  week 
predicted  that  as  many 
as  50%  of  the  IT  opera¬ 
tions  joibs  in  the  U.S. 
could  disa(^>ear  over 
the  next  two  decades 
because  of  improve¬ 
ments  in  data  center  manage¬ 
ment  technolt^es. 

Gartner  analyst  Donna  Scott 
said  at  the  consulting  firm’s 
annual  data  center  conference 
here  that  IT  woikers  face  a  sit- 


Lack  of  Tests 
Could  Block 
Virtualization 


Server  virtualizatioQ  tech¬ 
nology  is  eiq>ected  to  play  a 
big  rc^  in  increasing  (^PU 
utilizatiooratesoiix86' 
based  servers  in  the  next 
few  years.  But  attendees  at 
Gartner  Inc’s  data  center 
cmference  here  last  week 


uation  simitar  to  the  one  that 
the  manufacturii^  industry 
has  experienced  over  the  past 
several  decades.  Increased 
standardization  of  IT  systems, 
applications  and  processes 

will  lead  to  productiv¬ 
ity  improvements  and 
a  major  shift  in  the 
skills  that  are  needed, 
according  to  Scott. 

There  will  be  more 
room  to  automate,  and 
that  means  there  will  be  re¬ 
duced  labor  cost”  she  said. 

IT  (^>erations.  which  en¬ 
compass  hmctions  such  as 
systems  administration,  ioci- 
Data  Center,  pa^  16 


said  one  potential  road¬ 
block  is  the  need  to  test 
padukged  applications  oo 
virtualized  systems. 

That  issue  could  put  re¬ 
lationships  between  users 
and  software  vendors  to  the 
test  if  vendors  are  reltictant 
to  troubleshoot  their  appli- 
cttions  on  servers  rurming 
virtualization  software,  ac- 
cordirtg  to  Gartner  analysts 
and  IT  managers  who  were 
at  the  coofetence. 

Tony  Fernandes,  vice 

Tkstotgpogeld 


Vol.  38 
Iss.  49 
DEC  6 


2004 


NEWSPAPER 


Computer  Associates  CIO  Kevin  Kern  used  to 
work  at  SAP.  Now  he's  installing  its  apps.  PAGE  6 


In  naming  a  'CEO-elect,'  CA  missed  a  chance  to 
send  a  message  of  stability,  says  Don  Tennant.  PAGE  20 


THE  VOICE  OF  IT  MANAGEMENT  WWW  COMPUTERWOflLO  COM 


OECEMBER  6.  2004  VQl  39  NO  A9  S6  COPT 


s 


Here’s  our  annual  look 
at  the  best  new  gadgets, 

I  from  .serious  PDAs  to 
exotic  gizmos  for  techies 
of  all  ages.  Page  23 


Users  See  Slow  Progress 
On  Microsoft-Sun  Alliance 


N’endors  pmvidc  first 
update  on  ioint  efforts 


The  progress  report  that  Mi¬ 
crosoft  Corp.  and  Sun  Micro¬ 
systems  Inc.  issued  last  week 


on  their  joint  initiatives  left 
some  IT  managers  and  ana¬ 
lysts  wondering  when  or  if  the 
long-term  collaboration  that 
the  two  companies  have 
promised  will  produce  any 
substantial  results. 

Executives  from  the  onc- 
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time  bitter  rivals  cited  collabo¬ 
rative  efforts  in  areas  such  as 
Web  services  standards,  iden¬ 
tity  management,  sti>rage  and 
the  optimization  of  Windows 
for  Sun  hardware  (sec  chart, 
page  S3).  But  much  of  the 
work  is  ongi>ing.  and  Micn>- 
soft  and  Sun  didn't  provide 
details  about  any  major  tech¬ 
nology  pronouncements  that 
may  be  forthcoming. 

"My  expectation  on  them 
producing  deliverables  is  very 
low,"  said  Emanuel  Joseph. 

Collaboration,  page  S3 
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Data  Center 
S,  Gains  May 
Imperil  Jobs 

( ianiKT  s;i\  s  half  of  n  o|X'r.Uions  [lositions 
could  eanish  in  20  \cars:  users  aa-n't  so  sua- 
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In  an  eyebrow-raising  forecast  |  has  experienced  over  the  past 
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skepticism  and  nonchalance  ^  stanJardi/ation  of  IT  systems, 
by  some  IT  managers,  (iartner  '  applications  and  proccssA*s 


Inc.  analysts  last  week 
predicted  that  as  many  |g||| 
as  50'’ii  of  the  IT  opera- 
tions  jobs  in  the  U.S.  Hayes 

could  disappear  over  futun 

the  next  two  decades 
because  of  improve¬ 
ments  in  data  center  manage¬ 
ment  technologies. 

Gartner  analyst  Donna  Scott 
said  at  the  consulting  firm's 


will  lead  (o  pr«xlui*tiv- 
ity  improvements  and 

HayessaysITs  ‘h.it  arc  nccdisl. 

futureenTso  according  to  Scott. 

•■TlKT,willK-nu.r.’ 
ixMim  to  automate,  and 
ugc-  that  means  there  will  be  re¬ 
duced  laN»r  cx*si."  she  said. 

I  Scott  I  IT  operations,  which  co¬ 
rn's  I  compass  functions  such  as 


annua)  data  center  conference  j  systems  administration,  inci- 


here  that  IT  workers  face  a  sit- 

LackofTests 
Could  Block 
Virtualization 


CVnttT.  page  lo 


Server  virtualization  tech¬ 
nology  is  expected  to  play  a 
big  role  in  increasing  CPU 
utilization  rates  on  x86- 
based  servers  in  the  next 
few  years.  But  attendees  at 
Gartner  lnc.'s  data  center 
conference  here  last  week 


I  said  one  potential  road- 
I  block  is  the  need  to  test 
I  packaged  applications  on 
<  virtualized  systems. 

I  That  Issue  could  put  re- 
lation^ips  between  users 
and  software  vendors  to  the 
test  if  vendors  arc  reluctant 
to  troubleshoot  their  appli¬ 
cations  on  servers  running 
virtualization  software,  ac¬ 
cording  to  Gartner  analysts 
and  IT  managers  who  were 
at  the  conference. 

Tony  Fernandes,  vice 

Testing,  page  16 
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Nothing  helps  you  improve  your  perspective 
on  the  day  quite  like  the  ability  to  do  things 
a  little  better,  a  little  faster,  and  a  little  more 
beautifully.  That’s  why  Canon  has  added  a 
new  addition  to  our  imageRUNNER*  line.  With 
the  new  Color  imageRUNNER  C3220  and 
imageWARE'  Publishing  Manager  Software,  you 
can  create,  publish  and  print  professional-quality 
color  booklets,  brochures  and  manuals.  You  can 
even  scan  and  e-mait  color  documents.  All  In  house, 
and  all  from  the  comfort  of  your  desktop.  And  with 
the  Color  imageRUNNER  C3220.  productivity 
increases  while  color  stays  fast  and  affordable. 

How  s  that  for  working  the  way  you  need  to? 
www.imagerunner.com  1-800-0  K-C  ANON 


You  have  to  reconfigure  your  infrastructure.  Got  a  second? 


The  highly  dependable  HP  BladeSyslem  features  Inlef  Xeon'”  Processors.  Now  its  possible  to  react  to  changing  business  conditions  in  reol  time-in  seconds. 
Application  deployment  and  reprovisioning  become  on  automated  process.  From  single  console  remote  monogement  to  up  to  19%  power  savings'— the  HP  BlodeSystem 
is  designed  lo  save  you  time,  money  ond,  quite  possibly,  your  sanity.  Which,  of  course,  could  be  the  most  compelling  reoson  of  oil  to  learn  more. 


THE  SOLUTION 

THE  BENEFITS^ 

HP  ProLiant  BL30p  Blade  Server 

•  2  biM'  Xeon**  Procauon  Of  op  to  3.20GHz/2M6’ 

■  High  density:  Up  to  96  serven  per  rock 

•  HP  Systems  Insighi  Manager**:  Web-bosed  rietworked 
monogmenl  through  a  siri^  console 

■  RexibleA^pen:  Integroles  with  eusting  infrastructure 

•  Ropid  Deployment  Pack;  For  ease  of  deployment 
ond  ongoing  provisioning  and  reprovisioning 

•  23%  sovrngs  on  acquisition  cost 

•  Up  to  19%  less  power  consumption 

•  Up  to  93%  lower  cobles 

•  Hol-sweppable  server  design 

•  Single  ireerloce  lor  mtegroted  remote  monogement 
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6  CA  selects  SAP's  software 

for  its  global  ERP  system. 

7  The  spread  of  instant  messag- 
ing  in  the  financial  services 
industry  causes  IT  headaches. 

7  E-voting  problems  force  a 
North  Carolina  county  to  hold 
new  voting  in  January. 

10  Successful  CIOs  have  busi¬ 
ness  acumen  and  the  ability  to 
deliver  results.  IT  execs  say. 

10  New  IT  services  management 

tools  give  administrators  a 
more  comprehensive  look  at 
their  systems. 

12  HP  readies  its  "virus  Ihrottier." 
a  tool  designed  to  "cage  and 
suppress"  computer  viruses. 

12  Cisco,  HP  and  Alcatel  are  all 
releasing  new  10  Gigabit  Eth¬ 
ernet  switching  products. 

14  OlobaJ  Dispatches:  Tony  Blair 
threatens  to  jail  anyone 
who  messes  with  the  U£.'$ 
planned  ID  card  database. 

14  Storage  vendors  test  the 

interoperability  of  Serial 
Attached  SCSI  and  Serial 
ATA  disk  drives. 

18  Grade  unveils  updates  of  BI 
tools,  a  content  manager  and 
other  apps  at  Open  World. 

19  Q&A:CA*s  CEO-elect  talks 
about  the  challenges  he’s  fac¬ 
ing  and  his  early  plans  for  the 
embattled  software  vendor. 

53  BMadds^  services  support 
to  CICS  Transaction  Server. 


TECHN0L06Y 

23  Cool  Stuff.  Our  annual  look  at 
high-tech  gizmos  that  might 
make  good  holiday  gifts  re¬ 
veals  portable  communica¬ 
tions  and  computing  tools, 
home  audio  and  video  sys¬ 
tems,  toys  for  techie  kids  and 
lots  more  for  gadget  mavens 
of  all  ages. 

30  Riture  Watch:  Riding  the  Grid 

Wave.  In  an  interview,  grid 
technology  expert  Wolfgang 
Gentzsch  says  that  grids  are 
coming  in  three  waves,  and 
we  are  just  beginning  the  sec¬ 
ond  wave  —  the  corporate 
one.  Eventually,  there  will  be 
no  difference  between  the  In¬ 
ternet  and  “the  grid,"  he  tells 
Computerworid. 

32  Security  Manager’s  Journal: 
The  Password  Is:  Useless 
(Probably).  C.|.  KeUy  fmds 
that  her  company  needs  to 
adopt  —  and  enforce  —  a 
new,  stricter  password  policy. 
Could  passphrases  and  single 
sign-on  be  the  answers? 


J.M.li  ^  I 


42  ThiiA  Tank.  A  good  help  desk 
can  boost  of^ce  productivity 
by  2%,  a  benchmarking  firm 
says;  a  book  titled  The  New 
CIO  Leader  mi^t  help  you 
crack  the  inner  circle  of  the 
executive  suite:  and  IT  does 
matter  —  in  Europe. 

44  Caroor  Watch.  Too  many  top 
executives  add  too  little  value: 
the  boom  in  security  hires  con¬ 
tinues;  economic  indicators 
don’t  have  to  be  boring;  and 
security  is  where  the  jc^  are. 


OPINIONS 

6  On  the  Mark:  Mark  Halt  talks 
to  a  security  software  vendor 
that’s  readying  technology 
that  just  might  help  IT  man¬ 
agers  protect  end  users  from 
their  most  dangerous  enemy 
—  themselves. 

20  Don  Tennant  chinks  CA 
missed  a  perfect  opportunity 
to  assure  users  that  it  had  fi¬ 
nally  gotten  its  management 
act  together  when  it  named 
its  next  CEO. 

20  Thornton  A.  May  says  war  — 
info  war  —  is  beii^  waged  in 
the  corporate  world,  and  IT 
needs  good  PR  if  if  s  to  win 
the  hearts  and  minds  of  the 
CEO  and  board  of  directors. 

21  Pimm  Fox  doesn’t  see  how  the 
latest  tools  in  ITs  cupboard 
are  going  to  stop  man^menc 
from  making  the  wrong  deci¬ 
sions  when  it  smells  profits. 

46  Paul  6len  knows  that  man¬ 
agers  thrive  on  action,  but 
before  they  dive  into  plans 
for  next  year,  he’d  like  them 
to  reflect  on  this  one. 

54  Frankly  Speaking:  Frank 
Hayes  has  a  problem  with  IT 
analyst  predictions  that  as¬ 
sume  the  years  ahead  will  be 
like  those  in  the  past  Thaf  s 
never  true  for  IT 
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ComputerworUTs  online  managing  editot, 
Sharon  Machlts,  gets  a  taste  of  life  on  the 
IT  side  of  the  bouse  when  she  joins  a  com¬ 
mittee  overseeing  a  content  management 
i^>grade.  *110$  is  the  first  in  an  occasional 
series  of  articles.  OOsUdMiSnSO 
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DEVELOPMENT:  iTKO's  John  Michelsen  ex¬ 
plains  bow  to  improve  software  quality  by 
advancing  development  testisg  beyond 
merely  validating  code  to  verifying  that 
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OPINION 

802.11n’s  Pregame  Show 

Robert  L.  Mitchell  has  had  it  with 
WLAN  products  that  imply  compli¬ 
ance  with  the  still-nonexistent 
802.11n  standard.  Page  34 


Out  of  Sync 

In  the  Management  section:  Global  data  synchnv- 
nizaiion  will  speed  up  and  simplify  the  supply  chains 
of  retailers  and  manufacturers  all  o\'cr  the  world,  but 
early  efforts  to  work  out  the  logistics.  icchnolop\-  and 
politics  have  been  complicated  and  c«>stly.  Page  37 
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6  CA  selects  SAP's  software 

for  its  global  ERP  system. 

7  The  spread  of  instant  messag¬ 
ing  in  the  financial  services 
industry  causes  IT  headaches. 

7  E-voting  problems  force  a 
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new  voting  in  January. 

10  Successful  CIOs  have  busi¬ 
ness  acumen  and  the  ability  to 
deliver  results,  IT  execs  say. 

10  New  IT  services  management 
tools  give  administrators  a 
more  comprehensive  look  at 
their  systems. 

12  HP  readies  its ‘>nrus  throttler," 

a  cool  designed  to  “cage  and 
suppress"  computer  viruses. 
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18  Oracle  unveils  updates  of  BI 
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ing  and  his  early  plans  for  the 
embattled  software  vendor. 

S3  IBM  adds  Web  services  support 
to  CICS  Transaction  Server. 


42  Think  Tank.  A  good  help  desk 
can  boost  office  productivity 
by  2%.  a  benchmarking  firm 
says;  a  book  titled  The  New 
CIO  Leader  might  help  you 
crack  the  inner  circle  of  the 
executive  suite;  and  IT  does 
matter  —  in  Europe. 

44  Career  Watch  .  Too  many  top 
executives  add  too  little  value: 
the  boom  in  security  hires  con¬ 
tinues;  economic  indicators 
don't  have  to  be  boring;  and 
security  is  where  the  jobs  are. 
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23  Cool  Stuff.  Our  annual  look  at 
high-tech  gizmos  that  might 
make  good  holiday  gifts  re¬ 
veals  portable  communica¬ 
tions  and  computing  tools, 
home  audio  and  video  sys¬ 
tems.  toys  for  techie  kids  and 
lots  more  for  gadget  raavens 
of  all  ages. 

30  Future  Watch;  Riding  the  Grid 
Wave.  In  an  interview,  grid 
technology  expen  Wolfgang 
Gentzsch  says  that  grids  arc 
coming  in  three  waves,  and 
we  are  just  beginning  the  sec¬ 
ond  wave  —  the  corporate 
one.  Eventually,  there  will  be 
no  difference  between  the  In¬ 
ternet  and  “the  grid."  he  tells 
Computerworld. 

32  Security  Manager’s  Journal: 
The  Password  1$:  Useless 
(Probably).  CJ.  Kelly  finds 
that  her  company  needs  to 
adopt  —  and  enforce  —  a 
new,  stricter  password  policy. 
Could  passphrases  and  single 
sign-on  be  the  answers? 
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8  On  the  Mark:  Mark  Hall  talks 
to  a  security  software  vendor 
that’s  readying  technology 
that  just  might  help  IT  man¬ 
agers  protect  end  users  from 
their  most  dangerous  cnemy 
—  themselves. 

20  Don  Tennant  thinks  CA 
missed  a  perfect  opportunity 
to  assure  users  that  it  had  fi¬ 
nally  gotten  its  management 
act  together  when  it  named 
its  next  CEO. 

20  Thornton  A.  May  says  war  — 
info  war  —  is  being  waged  in 
the  corporate  world,  and  IT 
needs  good  PR  if  it’s  to  win 
the  hearts  and  minds  of  the 
CEO  and  board  of  directors. 

21  Pimm  Fox  doesn’t  sec  how  the 
latest  tools  in  IT’s  cupboard 
are  going  to  stop  management 
from  making  (he  wrong  deci¬ 
sions  when  it  smelts  profits. 

46  Paul  Glen  knows  that  man¬ 
agers  thrive  on  action,  but 
before  they  dive  into  plans 
for  next  year,  he’d  like  them 
to  reflect  on  this  one. 

54  Frankly  Speaking;  Frank 
Hayes  has  a  problem  with  IT 
analyst  predictions  that  as¬ 
sume  the  years  ahead  will  be 
like  those  in  the  past.  That’s 
never  true  for  IT. 
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Computerworltfs  online  managing  editor, 
Sharon  Machlis.  gets  a  taste  of  life  on  the 
IT  side  of  the  house  when  she  joins  a  com¬ 
mittee  overseeing  a  content  management 
upgrade.  This  is  the  first  in  an  occasional 
series  of  articles.  OQuickUnk  51150 
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DEVELOPMENT:  iTKO’s  John  Michclsen  ex¬ 
plains  bow  to  improve  software  quality  by 
advancing  development  testing  beyond 
merely  validating  code  to  verifying  that 
software  meets  your  company's  business 
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Borland  Replaces 
IBM  Tools  at  EDS 

Elacfronic  Data  Syilam  Corp. 
hMopMtortptacaKseM 
Rational  ippication  Ht-cyde 
managamant  looM  wM>  Borland 
SeftMnCMp.tooli.aaMBor- 
landCEOOalaFuiar.FUarda- 
acribtd  tiw  daal  in  a  confaranca 
cal  at  V  ffluMyatf .  muRMBon- 
(Mar  ralatioaiMp.*  EDS  lata  last 
waak  contiriwad  that  M  buys  soft- 
wara  fnm  Borland  birf  daeinad 
to  coramant  on  tha  danL 


Microsoft  Adds  New 
NT  Support  Plan 

hRcroaoA  Carp,  announead  last 
ataah  llitl  an  Jan.  t  H  «■  bagin 
offaring  a  faa-kaaad  cuBlam  aup> 
pert  program  far  WMowa  RT  4.0 
Saner.  Tltaawlandadmgpnrtpa- 
riod  tar  ItM  aarmr  product  la  dM 
to  aa^ko  at  analh'a  and.  The  now 
pn^M  aril  nn  through  Dae.  St. 
2000.  feBcraaotl  atao  plane  to  of* 
tar  taa>  yaara  of  caatoia  tat-haaad 
aupgcrt  tar  Eachanga  Sarvor  S.S 
altar  Ri  aitiandad  aapport  parted 
aiidaonDac.Sl.2006. 

OpswareBuys 

RmdttionfbrSSSM 

Opwwra  lac.  teat  weak  agpoad  to 
buy  prtaalaly  haU  RandHan  Nat' 
imrfci.  a  nahar  af  oatMork  daidea 
aalontlBn  tochaoiegy.  Opawara 
plana  to  tatopala  the  RandHton 
pradnetoadftItolaaaffTauto- 
matian  and  oHMy  computing  aofl* 
aaro.  Onea  Aa  mio  la  fhial.  the 
Randtiion  RiO  apantion  adi 
remain  ki  Radmand.  WaaK. 


Del  Wins  STOOM 
PactWRhPhips 

Oil  hie.  teat  weak  ana  anmdad  a 
ftartaar.  S700  mHan  contract  to 
prwida  hardnaraaiid  managad 
daaktop  aaraicoa  to  Ootoh  atac- 
trontea  gtent  PMtat  Bactianics 
NV.  The  eoidraet  cala  far  Dal  to 
manage  diahtop  cemputon .  prtet- 
ara.ofBcanatiwrteandappic»- 
tiona  and  to  prartda  tochnioM 
alatoncn  far  75,000  amptoyaoa. 


CA  Picks  SAP’s  Apps 
For  Global  ERP  System 

Says  rollout  will  help  it  fulfill  settlement 
with  DOJ,  address  accounting  issues 


av  MATT  HAMBLEN 

OMPUTER  A&sodatcs 
International  Inc. 
last  week  said  it 
plans  to  roll  out  SAP 
AG’s  ERP  software  globally, 
partly  to  help  meet  the  re* 
quirements  of  the  deferred* 
prosecution  deal  CA  reached 
with  the  U.S.  Department  of 
Justice  in  September. 

For  CA.  the  project  “is  both 
a  business  and  IT  transforma¬ 
tion.''  CIO  Kevin  Kem  said  in 
an  interview.  “It^  the  mother 
of  all  transformations,  affect¬ 
ing  just  about  everything." 

Kem  said  the  mySAP  ERP 
software  will  repl^  a  mix  of 
internal  applications  affecting 
four  key  bi^ess  areas:  core 
financials,  business  intelli¬ 
gence.  CRM,  and  e-procure¬ 
ment  and  sourcing. 

A  CA  spokeswoman  said  the 
project  could  cost  S5  million 
to  SIO  million.  A  consultii^ 
team  from  Accenture  Ltd.  will 
assist  CA  on  the  mySAP  ERP 
rollout,  which  is  scheduled  to 
be  completed  by  the  end  of 
next  year. 

I^m.  who  joined  CA  in 
July,  said  the  new  ERP  system 
will  give  executives  “unprece- 


H  [The  project 
is]  the  mother 
ofaNtransfonna- 
tions,afiectmg|ust 
about  everything. 

KEVIN  KERN.  CA’.aO 

dented  levels  of  financial 
transparency"  across  the  soft¬ 
ware  veiulor's  operations.  He 
noted  that  one  of  the  purposes 
of  the  rollout  is  to  help  CA  ful¬ 
fill  a  significant  portion  of 
its  agreement  with  the  DO), 
which  was  designed  to  let  the 
company  avoid  prosecution  in 
connection  with  alleged  ac¬ 
counting  fraud  by  former  ex¬ 
ecutives  in  1999  and  2000 
(QuickLink  49647]. 

The  DOJ  claimed  that  CA 
counted  some  software  sales 
outside  of  the  ftsca)  quarter  in 


which  they  should  have  been 
booked  in  order  to  boost  its 
short-term  financial  results.  A 
unified  ERP  system  should 
help  make  the  company’s  ac¬ 
counting  procedures  more  ef¬ 
ficient  and  more  visible  to  au¬ 
ditors,  according  to  analysts. 

Too  Ihny  Systems 

“Pm  kind  of  shocked  that  CA 
hasn't  installed  a  big  ERP  sys¬ 
tem  before  now,"  said  Mark 
Ehr.  an  analyst  at  Enterprise 
Management  Associates  Inc. 
in  Boulder.  Colo.  “As  a  tech¬ 
nology  company,  they’ve  suf¬ 
fered  from  the  'invented  here’ 
syndrome  and  have  in  place  a 
mishmash  of  internal  ERP  sys¬ 
tems,  which  was  probably  pan 
of  the  cause  of  the  accounting 
problem." 

“Of  course  the  new  system 
will  improve  finaodals  and 
t^ten  that  up."  Kem  said, 
adding  that  it  will  also  help 
CA’s  sales  teams  to  function 
"much  more  efficiently  and 
effectively."  As  part  of  the 
agreement  with  the  DO),  CA 
said  that  it  would  implement 
an  ERP  system  by  tbe  end  of 
2005.  Kem  said  the  project 
is  “well  under  way."  with 
80  employees  working  on 
it  full  time. 

In  one  of  Kero’s  earlier  jobs, 
be  was  vice  president  of 


I  strategic  development  at  SAP 
I  America  Inc..  SAP’s  U.S.  sub¬ 
sidiary.  He  wouldn't  name  the 
companies  that  competed 
with  SAP  for  the  ERP  project. 
But  he  said  CA  evaluated  sev¬ 
eral  prominent  vendors  and 
narrowed  tbe  list  to  those  that 
could  handle  a  global  rollout 
before  settling  on  SAP. 

CA  doesn't  use  any  SAP 
software  now,  Kem  said.  The 
company  has  installed  a  few 
packaged  applications  from 
outside  vendors,  including 
PeopleSoft  Inc.'s  human  re¬ 
sources  software  and  a  mar¬ 
keting  system  ftom  Aprimo 
Inc.  Kem  said  those  products 
will  continue  to  be  used  for 
the  time  being  while  CA  fo¬ 
cuses  on  replacing  applica¬ 
tions  such  as  Masterpiece,  an 
accounting  package  that  it 
once  owned  CA  sold  Master¬ 
piece  to  SSA  Global  Technolo¬ 
gies  Inc.  in  2002. 

Accenture  didn’t  help  with 
the  selection  of  mySAP  ERP 
but  is  providing  a  team  of  20 
woikers  to  assist  with  the  im¬ 
plementation.  said  Stefan 
Kampe.  a  partner  at  the  IT 
services  firm.  05tB9 


Stacy  CenWey  of  the  IDG  News 
Service  contributed  to  this  story. 
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fa  thta  Imbk  Join  Swairaon.  CA's 
CHVded  says  the  esmpany  is 
ovennnWHI  te  imaoe  proUero  vmRi 
useixPigBig 


Mbic  VIsfl  our  VM)  sue  for  more 
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new  veiaion  pRwhtas  feripriMd 
mragBmml  and  mortal  of 
iaiirsWkbSphn.CAaid 
Rdrtck  BaraL  an  Infonnaton 
systoro  ofloerat  Forfa  NV  n 
Bnaata  his  batotostad  IMO  of 
he  new  mducto.  Bens  said 
thaearen'lMmanynewtae- 
luas.  alhoui^  he  noted  that  CA 
appeomtohaNagiranthepfod* 
uds  a  oommoniBar  intorto  end 
madaleaeiertoinsMandconfio- 
ura  ham.  He  said  he  enpeds  a 
bigoarstopionitod  Raleaaa 
C  upgmtas  hal  are  due  nod  year. 

’■UattHamUen 


CA  Loolto  to  Ease  Mainframe  Management  Burden 

:  irainframesandindudBnewau* 


COMPUTER  ASaoeuiES  today 
wBitawnihPWiiiyiyartadUnt- 
centor  produds  hal  Hagreta  dti- 
tend  parfomianoe  managamenl 
tools  uead  on  mainiames  and  are 
daat(p«d  to  ffltow  I  eaater  for 
usen  to  joirtly  manage  main- 
kamei  and  ohar  stotams. 

'Themanframeptatfonnpre- 
sento  uniqua  piobleiTB.  and  I  is 
complex,  so  our  slratogy  to  to 
modernize  and  aenpHy  ha  proc* 
BBS.*  said  Dadd  Hodgson,  senior 
ytee  presktam  ol  mainkamesye' 


tens  product  dswlopmefll  at  CA. 

The  upgrades  are  he  ftrsl  in  a 
series  ol  mainhamu  related  an- 
nouncamenlB  CA  ptans  to  make 
OMvhenodtewmonhs.Hodg* 
son  said.  Mainliaiue  IooIb  *are  re- 
aly  CA's  Matorical  strangh.  and 
we  probably  neglectod  hem  hum 
a  deiMlopmenl  poM  of  view  over 
the  Iasi  couple  of  yeare.' ha  said. 

The  upgraded  products  Include 
RateesetlofUrecentorNelMas- 
tor.  which  supports  TCRflP  and 
SNA  nelwoda  comecled  to 


lonorric  capabBtias  tor  tndng 
nahMirk  abnomiallies.  CA  is  also 
addng  atgiport  for  Birs  Unix 
System  Serytoear  technology  to 
Its  event  nyanagement  and  lu- 
tometion  tod  for  miinftames 
runninoz/OS. 

lnaddllion.CAisrDlngoiJlRe* 
leaae  11  of  Unioentor  CA-Sypdaw 
nodHtnefafomance  Manage¬ 
ment,  which  la  designed  to  hefo  IT 
workers  find  he  causes  of  re¬ 
duced  zAJS  performance.  The 
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IM  Spread  Causing  Management  Headaches 


Financial  services  firms  struggle  to 
comply  with  regulations,  appease  users 


BV  LUCAB  MEABIAN 

The  spread  of  instant  messag¬ 
ing  in  the  financiai  services 
industry  is  causing  compli¬ 
ance  and  technology  ch^- 
lengcs  for  IT  managers  who 
must  not  only  monitor  and 
archive  electronic  commtmi- 
cations  but  also  root  out  and 
shut  down  unauthorized  IM 
services. 

Many  IT  units  arc  having 
difficulty  managing  a  pletho¬ 
ra  of  IM  systems  installed 
without  their  knowledge  that 
are  used  for  both  personal 
and  important  business  com¬ 
munications.  And  user  objec¬ 
tions  to  IT’S  efforts  to  rein 
them  in  are  another  factor  to 
consider. 

For  example.  Thomas 
Weiset  Partners  IXC  in  San 
Francisco  tried  to  shut  down 
the  use  of  America  Online 
Inc.’s  Instant  Messenger.  Mi¬ 
crosoft  Corp.*s  MSN  Messen¬ 
ger  and  Yahoo  Inc.’s  Yahoo 
Messei^r  after  the  Sept.  U. 
2001.  terrorist  attacks.  Howev¬ 
er.  user  pushback  forced  the 
company  to  adopt  monitoring 
software  insteadL 


“It  comes  down  to  some  of 
our  institutional  customers 
who  required  IM  as  the 
method  to  communicate  with 
them."  said  Beth  Cannon,  for¬ 
mer  chief  technology  officer 
and  now  chief  security  officer 
at  the  institutional  brokerage. 

Thomas  Weisel  installed 
IM  Auditor  from  FaceTime 
Communications  tnc.  in  Fos¬ 
ter  City.  Calif.  The  program 
runs  on  an  internal  server 
and  monitors  IM  traffic,  flag¬ 
ging  any  banned  words  or 


phrases  while  archiving  all 
messages. 

More  vendors  of  all  sizes, 
such  as  Stellar  Technologies 
Inc.,  which  last  week  unveiled 
the  GEM  content-blocking 
tool,  are  scrambUr^  to  build 
robust  tools  to  monitor  IM  for 
Tinancial  firms,  which  must 
meet  new  government  regula¬ 
tions  requiring  that  electronic 
conversations  be  monitored 
and  recorded. 

Two  years  ago,  IM  monitor¬ 
ing  was  almost  nonexistent  in 
financial  fuins.  Now  it's  a  key 
IT  function  of  most  banks  and 
brokerage  houses  on  Wall 
Street,  according  to  research 
firm  TowerGroup  in  Need¬ 
ham.  Mass. 

"If  they’ve  got  IM.  they’re 
logging.  I  can't  chink  of  a  situ¬ 
ation  when  fve  gone  into  a 
bank  and  they’re  not  logging," 
said  Jeremy  Coodle,  senior 
vke  president  in  charge  of 
bushWss  strategy  at  Thomson 
Financial  LLC  in  New  York. 

Tbomsoa  a  provider  of  H- 
nancial  information  to  banks 
and  money  management 
firms,  offers  IM  management 
services  to  clients  based  on  a 
monitoring  toot  from  IMlogic 
Inc.  in  Waltham.  Mass. 

Most  IM  monitoring  prod¬ 


ucts  arc  gateway  devices  that 
sit  on  the  network  and  moni¬ 
tor  all  incoming  and  outgoing 
messages.  Some  contain  poli¬ 
cy  engines  that  search  for  key¬ 
words  and  alert  managers  to 
unacceptable  conversations. 

Establishing  Policies 

Marcclo  Sduraito,  MIS  direc¬ 
tor  at  brokerage  firm  Libra 
Securities  LLC  in  Caledonia. 
N.Y..  said  his  firm  chose  an  IM 
monitoring  and  archiving  ser¬ 
vice  from  Stellar  based  on  cost 
and  maintenance  features. 
Each  quarter.  Stellar  sends 
CDs  to  Libra  containing  all 
IM  traffic  data  for  that  period. 
Libra's  security  officer  then 
performs  keyword  and  phrase 
searches  of  the  traffic 

“If  we  didn't  have  to  deal 
with  it,  we’d  be  happier,"  Sciu- 
rano  said.  “But  the  SEC  and 
(National  Association  of  Secu¬ 
rities  Dealers]  require  it." 

Xiany  small  banks  and  bro¬ 
kerages  and  even  some  large 
ones  have  yet  to  establish 
policies  for  internal  IM  use. 
despite  the  difficulties  firms 
face  in  managing  IM.  said 
Sophie  LouvcL  an  analyst  at 
Financial  Insights  in  Framing¬ 
ham.  Mass. 

Efforts  to  institute  a  stan- 


E“V0ting  Woes  Force  New 
Election  in  N.C.  County 


Touch-screen 
errors  led  to  loss 
of 4,400  ballots 


BV  HEATHER  HAVEMBTEIM 

Voters  in  one  North  Carolina 
county  can  return  to  the  polls 
next  month  to  recast  ballots 
that  were  lost  due  to  a  mal¬ 
functioning  e-voting  machine 
in  the  November  election. 

The  state's  Board  of  Elec¬ 
tions  voted  last  week  to  allow 
about  4.400  Carteret  County 
residents  whose  votes  were 
lost  —  along  with  19.600  who 
didn't  go  to  the  polls  —  to  cast 
ballots  Jan.  U  for  the  state  agri- 
cultiire  commissioner. 


That  was  the  only  state  or 
local  race  close  enough  for  the 
4.400  votes  to  make  a  differ¬ 
ence.  said  Robert  Cordle,  one 
of  five  members  of  the  board. 
In  that  race,  challenger  Steve 
IVoxler  has  a  2300-vote  lead 
over  incumbent  Britt  Cobb. 
The  Jaa  U  votes  will  be  added 
to  the  November  result. 

The  votes  were  lost  because 
the  touch-screen  system  could 
store  only  3.000  votes  that  day, 
fv  fewer  than  the  lOOOO  the 
machines  should  be  able  to 
handle,  according  to  the  man¬ 
ufacturer.  UniLect  Corp.  in 
Dublin.  Calif. 

Poll  workers  didn’t  immedi¬ 
ately  see  that  the  machine  had 


begun  displayii^  a  notice  that 
said  it  couldn’t  accept  any 
more  votes,  Cordle  said.  The 
machines  don’t  produce  paper 
copies  of  the  ballots.  “As  a 
compromise,  we  agreed  to  al¬ 
low  those  whose  vote  was  not 
counted  last  time  to  vote,  (as 
well  as]  anybody  who  didn't 
vote  last  time."  Cordle  said. 
“It’s  a  very  unusual  ruling,  and 
each  (candidate)  has  10  days  to 
appeal  it  in  court  It  may  get 
changed  if  they  da" 

The  January  election  will 
cost  the  county  S20,000.  Cor- 
dte  said,  adding  that  it  will  use 
the  same  machines  used  in 
November  but  will  allow  only 
3.000  votes  per  machine. 

The  stale  has  set  up  a  leg¬ 
islative  commission  to  study 
e-voting,  and  election  board 
officials  are  looking  into  re- 
quirit^  the  use  of  machines 


that  produce  a  paper  audit 
traU.  Cordle  added 
Will  Doherty,  executive  di* 
reaor  of  the  Verified  Voting 
Foundation  Inc.  advocacy 
group,  said  the  problem  in 
Caneret  County  was  the  most 
serious  e-voting  problem  na¬ 
tionwide  because  of  the  clear 
evidence  of  lost  voles. 

“At  a  bare  miounum,  you 
have  to  give  people  whose 
votes  were  lost  a  chance  to 
votc,“  Doherty  said.  “That 

H  At  a  bare  min¬ 
imum,  you 
have  to  give  people 
wfiose  votes  were 
lost  a  chance  to  vote. 

WIU  DOHERTY.  EXECUTIVC  DIREC 
m.  VERIFIED  VOTING  FOUNOATiON 


IM  Growth 

tM  mwtol  revenue  in  the 
U.S.  is  opactad  to  grow: 

2004:$158.3M 

2008;$424.3M 

EnterphM  ni  parittar  iicenaes 
ve  aipactad  to  toap: 

Today:  10  million 

Next  three  years: 

SOmMion 

SOURCE  FI»MM3M.MSe4TS 
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dard  enterprise-class  IM  prod¬ 
uct,  such  as  IBM's  Lotus 
Sametime.  Microsoft's  .Net 
Messenger  and  Jabber  Inc.'s 
Messenger,  rarely  work  be¬ 
cause  the  more  popular  sys¬ 
tems  are  used  to  communicate 
with  customers. 

“I've  spoken  to  bank  and  IT 
managers,  where  they  found 
across  a  global  firm  10  to  20 
IM  applications  in  different 
guises.  They’ve  spent  a  lot 
of  time  whittling  that  dtiwn 
to  a  handful."  Thomson's 
Condic  said.  “Each  pocket  in  a 
bank  puts  their  arms  up  and 
says.  *Our  community  is  using 
this,  otherwise  we’re  out  of 
touch  with  our  client  base.’  * 
OS1213 


is  the  tip  of  the  iceberg.  If 
Carteret  County  is  going  to 
continue  to  use  electronic  vot¬ 
ing  machines,  they  should  im- 
mcdtalely  provide  a  voler- 
vcrified  paper  ballot  on  the 
voting  machines  they  use." 

Doherty's  organization 
teamed  with  the  Electronic 
Frontier  Foundation  to  send 
letters  to  election  officials  in 
eight  counties  natiomvide 
where  voters  reported  inci¬ 
dents  problematic  enough  to 
warrant  “further  investigation, 
if  not  full  autUts.  recounts  or 
redos  of  the  election."  be  said. 
He  hasn't  received  responses 
frcun  those  counties,  which  in¬ 
clude  Broward  and  Palm  Beach 
in  Florida,  Mahoning  and 
Frankiin  in  Ohkx  Mcrccr  and 
Philadelphia  to  Pennsylvania. 
Harris  in  Texas  and  Bernalillo 
in  New  Mexica  Osnm 
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IM  Spread  Causing  Management  Headaches 

Financial  scn  icos  fimis  stmjiglc  to 
comph  w'itli  regulations,  appease  users 


BV  LUCAS  MEARtAN 

The  Spread  of  instant  messag¬ 
ing  in  the  financial  services 
industr)’  is  causing  compli¬ 
ance  and  technology  chal¬ 
lenges  for  IT  managers  who 
must  not  onl>'  monitor  and 
archive  eleclronic  communi¬ 
cations  but  also  r\x>t  out  and 
shut  down  unauthorized  IM 
services. 

Many  IT  units  are  having 
difficulty  managing  a  pletho¬ 
ra  of  IM  systems  installed 
without  their  knowledge  that 
arc  used  for  both  personal 
and  important  business  com¬ 
munications.  And  user  objec- 
tion.s  to  ITs  efforts  to  rein 
them  in  arc  another  factor  to 
consider. 

For  example.  Thomas 
Wcisel  Partners  LLC  in  San 
Francisco  tried  to  shut  down 
the  use  of  America  Online 
Inc.'s  Instant  Messenger.  Mi¬ 
crosoft  Corp.’s  MSN  Messen¬ 
ger  and  Yahoo  Inc.’s  Yahoo 
Messenger  after  the  5iept.  11. 
2001.  terrt>risi  attacks.  Howev¬ 
er.  u.ser  pushback  forced  the 
company  to  adopt  monitoring 
software  instead. 


“It  comes  down  to  some  i>f 
our  institutional  customers 
who  required  IM  as  the 
method  to  communicate  with 
them.-  said  Beth  Cannon,  for¬ 
mer  chief  technology-  officer 
and  now  chief  security  officer 
at  the  institutional  brokerage. 

Thomas  Wcisel  installed 
IM  Auditor  from  FaceTime 
Communications  Inc.  in  Fil¬ 
ter  City.  Calif.  The  program 
runs  on  an  internal  server 
and  monitors  IM  traffic,  flag¬ 
ging  any  banned  words  or 


MOST  POPULAR 

IM  Archiving/ 
Monitoring  Apps 

IMI091C  Ire 

•  VV 

Akonii  SystEm^  IrK 

•  A- 

DYS  Analytics  Inc 

•CC  -r 

FaceT’ir»e  Contmunicaliorts 

•  'Mi.,.:  • 

IM-Agc  Software  Iik. 


phrases  while  archi\  ing  all 
I  messages. 

More  vendors  «»fall  sizes, 
such  as  Stellar  TechnoU>gies 
Ine..  whieh  last  week  unveiled 
'  the  GEM  content-blocking 
arc  scrambling  to  build 
robust  i«H)ls  t»>  m»>nit»»r  IM  for 
Imancial  firms,  which  must 
meet  new  government  regula¬ 
tions  requiring  that  electronic 
I  conversations  he  monitored 
I  and  recorded. 

Two  years  ago.  EM  moniior- 
'  ing  w-as  almost  nonexistent  in 
i  financial  firms.  Now  it's  a  key 
IT  functum  of  m^wa  Kinks  and 
brokerage  hi>uses  tm  Wall 
Street,  accv»rdii^  to  research 
firm  TowcKJroup  in  Need¬ 
ham.  Mass. 

"If  they've  got  IM.  they're 
logging.  I  can't  think  ofa  situ¬ 
ation  when  I've  gone  into  a 
bank  and  they'n'  not  logging.** 
said  lercray  (!ondie.  sen«*r 
vice  president  in  charge  of 
business  strategy  at  Thom.siin 
Financial  LLC  in  New  York. 

Thorns* m.  a  pn>vider  of  fi¬ 
nancial  information  to  bank.s 
and  money  management 
firms,  offers  IM  management 
services  t*)  clients  based  on  a 
monitoring  tool  fn>m  IMk>gic 
Inc.  in  Waltham.  Mass. 

Most  IM  monintring  prod¬ 


ucts  are  gateway  de>  ices  thai 
sit  \*n  the  network  and  moni¬ 
tor  .dl  incoming  and  outgoing 
mcss.iges.  Somccotuam  poli 
cy  engines  that  search  for  key  • 
vv4«rdsand  alert  managers  to 
umicceptahle  conversations. 

Establishing  Policies 

Maiwit*  Sciurano.  Mis  direc¬ 
tor  at  bnikerage  firm  Libra 
Securities  M,('  in  Caledonia. 
N.Y..  said  his  firm  chos<*  .in  IM 
monitoring  and  archiving  ser¬ 
vice  from  Stellar  based  on  cost 
and  maintenance  featuri*s. 
Each  quarter.  Stellar  sends 
(n>s  to  I  ibra  containing  all 
IM  traffic  data  tor  ih.it  pLi-iod. 
Libra's  security  officer  then 
performs  keyword  and  phnise 
searches  of  the  traffic. 

"If  we  didn't  have  t<»  deal 
with  it,  wv’d  K*  happier."  Sciu¬ 
rano  said.  "But  the  SEC'  .ind 
INatUmal  Ass^viaiion  of  Secu¬ 
rities  l>ealersl  require  it." 

Many  small  banks  and  bn»- 
kerages  and  even  stime  laige 
tines  have  yet  n*  establish 
policies  for  internal  IM  us<-. 
despite  the  difficulties  firms 
face  in  managing  IM.  said 
Sophie  I.0UVCI.  an  analyst  at 
j  Financial  Insights  in  Eraming- 
'  ham.  Mas-s. 

Efforts  tti  institute  a  stan- 


IM  ( jrowtli 

IM  market  revenue  in  htc 
U.S.  is  expected  to  grow: 

2004:S158.3M 

2008:S424.3M 


Enterprise  IM  per-tiser  ticenses 
are  expected  to  leap; 

Today;  10  million 
Next  three  years: 

80  million 

SOJRO  FMiMcaj 
fKAMNTiHAW  WA2< 

dard  enterprise-class  IM  prod¬ 
uct.  such  as  IBM’s  Lotus 
Sametime.  Microsoft's  .Net 
MessengL-r  and  lablvr  Inc  's 
Mi*ssenger.  rarely  wtirk  bc- 
cawsv'  the  more  popular  sys¬ 
tems  are  usi'J  to  viimmunicate 
with  cusiomerv 
"I’ve  spoken  to  Kmk  and  I  T 
managers,  w  here  they  foutid 
acn»ss  a  global  firm  Id  lo  20 
IM  .ipplicaiions  in  dilTerent 
guises.  I'hey've  spi-nt  a  lot 
of  lime  whittling  that  down 
to  a  handful.’’  Vh»»ms«*n's 
('amdie  said,  "l-jeh  pocket  in  a 
hank  puls  their  arnLs  up  and 
says. ’ttur  community  is  using 
thiv  otherwise  we'rv  out  of 
touch  w  ilh  our  client  has*-.'  “ 
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E-voting  Woes  Force  New 


Election  in  N 

Touch-screen 
errors  led  to  loss 
of 4.400  ballots 

ev  HEATHER  HAVENSTEIN 

Voters  in  one  North  Carolina 
county  can  return  to  the  polls 
next  month  to  recast  ballots 
that  were  lost  due  to  a  mal¬ 
functioning  e-voting  machine 
in  the  November  clecnion. 

The  stale's  Board  of  Elec¬ 
tions  voted  last  week  to  allow 
about  4.400  Carteret  County 
residents  whose  votes  were 
lost  —  along  with  19.600  who 
didn't  go  to  the  polls  —  to  cast 
ballots  Ian.  11  for  the  state  agri¬ 
culture  commissioner. 


C.  County 

That  was  the  only  state  or 
local  race  close  enough  for  the 
4.400  votes  to  make  a  dilTer- 
cnce.  said  Robert  Cordic.  one 
of  five  members  of  the  board. 
In  that  race,  challenger  Steve 
Troxlcr  has  a  2.300-votc  lead 
over  incumbent  Britt  Cobb. 
The  Ian.  11  votes  will  be  added 
to  the  November  result. 

The  votes  were  hwt  because 
the  touch-screen  .system  could 
store  only  3.000  votes  that  day. 
far  fewer  than  the  10.000  the 
machines  should  be  able  to 
handle,  according  to  the  man¬ 
ufacturer.  UniLeci  Oirp.  in 
lYubltn,  Calif. 

Poll  woriters  didn’t  immedi- 
alcly  see  that  the  machine  had 


begun  displaying  a  notice  that 
said  it  couldn’t  accept  any  I 
more  votes.  Cordle  said.  The 
machines  don’t  produce  paper 
copies  ofthe  ballots.  "As  a  1 
compromise,  we  agreed  ui  al-  j 
low  those  whose*  vote  was  not  I 
counted  last  time  to  vote,  (as  > 
well  as]  anybttjy  who  didn't 
vote  last  time."  Cordle  said.  | 

“It's  a  very  unusual  ruling,  and  j 
each  Icandidatei  ha.s  10  days  to  ! 
appeal  it  in  court.  It  may  get 
changed  if  they  do." 

The  lanuary  election  will 
cost  the  county  S20.000.  Cur¬ 
dle  said,  adding  that  it  will  usi* 
the  same  machines  used  in 
November  but  will  allow  onty 
.3.000  votes  per  machine.  | 

The  state  has  set  up  .1  li*g-  I 
islaiixx'  commission  to  stuJy 
e-voting.  and  election  board  | 

officials  arc  kioking  into  re-  ' 

quiring  the  use  of  machines  > 


that  produce  a  paper  audit 
trail.  Oirdie  addi.-d. 

Will  I'Kiherty.  executive  di¬ 
rector  of  the  VeritK-d  Voting 
Foundation  Inc.  advocacy 
group,  said  the  probicnt  in 
CartcR’i  County  was  the  most 
seriou.s  e-voting  problem  na- 
tionw'ide  because  of  the  clear 
evidence  of  lost  vntes. 

"At  a  bare  minimum,  you 
have  to  give  people  whose 
votes  were  E>si  a  chance  to 
Mite."  Ibiherty  said.  “'I'hai 

UAt  a  bare  min¬ 
imum,  you 
have  to  give  people 
whose  votes  were 
lost  a  chance  to  vote. 


WILL  DOHERTY  EXECUUVE  OIREC 
m  VERIFIED  YOfiHGFOUMlATlON 


is  tiu-  up  of  the  ici+crg.  If 
Citiervt  C'jiuniy  is  going  ui 
continue  to  use  elecininic  mm- 
ing  machines,  they  should  im 
mediately  provide  a  voter- 
verified  p;»per  Killoi  on  the 
MMing  machines  they  use  " 
Hoheny's  organization 
teamed  with  the  Elect  nmic 
Enintier  Houndaiion  to  send 
letters  to  election  olficuN  in 
eight  count ii*s  nationwide 
where  voters  reported  inci¬ 
dents  prublemalie  enough  lo 
warrant  "further  inveMigaiion. 
if  not  full  audits,  recounts  or 
redos  of  the  cledion."  he  said, 
lie  hasn't  received  responses 
from  those  counties,  which  in¬ 
clude  Rmward  and  I'altn  Beach 
in  Florida.  Mahoning  and 
Franklin  in  t  >hi«v  Mercer  and 
Philadelphia  in  IViutsylvania. 
Hams  in  Texas  and  BemaliUo 
in  New  Mexkit-  O  51181 
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IBM  Linux  Servers 
To  Support  Sybase 

BM  has  agratd  to  wpport  and 
iolndy  martiit  Syten  lnc.’t  Adap- 
Itoa  Snrvar  Entorprtot  daUbasa 
aottonraonibaSarvarOpaft* 
f^war  linua  aanwra  by  aariy 
nait  yaar.  Tba  nwve  axtondi 
BIf  a  auppert  far  ana  of  ttt  062 
aoltiaafa  rbah.  Tha  aQfoamant 
couU  hafa  BM  find  fiavr  cur 
tamara  to  flto  linancfal  sarvicai 
toduatry.  wtara  Sybase  haa  a 
Strang  praaanea. 


EDS  Wins  $480M 
Outsourcing  Pact 

Tha  pnwdnctol  geaanwnaot  of 
Orftfafa  Cofanibto  awardad  a 
S480  laBen  outoowetog  contact 
to  Boelrenfa  Data  Systoma  Corp. 
to  datufap  and  toiplamonl  busf* 
naao  praeaaaaa  and  rr  syatoma. 
Tha  KHm  daaf  cals  far  tha  EDS 
Adsancad  Sofattona  toe.  tadi  to 
coordtoato  mora  than  40  raaanua 
systoma. 


HadersMock 
SCO’s  Linux  Claims 

Hacban  coamrondasd  Tha  SCO 
6raap  lnc.'s  Wfab  sia  tntoa  fast 
wash,  poaffag  maaaagaa  tbat 
wichad  tha  company’s  efatow 
to  mm  parts  of  UnuL  SCO.  a 
fasguaal  tarfat  of  odtoa  atladB 
ataca  it  Bad  a  faimui  agtonsl 
BMhtoyam.admoaMgsd 
Bat  tlii  aito  *aBqMriBBead  two 
tobmfana  by  a  maBrfain  ftachar.* 
SCO  said  R  quieidy  rastorad  tha 
bacMptoiaa. 


Mkxosoft  Probes 
WMowsRaw 

MkraaafI  Carp,  fast  aiatoi  said  fa 
tovoalfBaling  a  saeurRy  Ihnr  to 
dAndawa  Samar  that  coiddaloar 
an  altocfcar  to  gato  eonbol  ovar 
tyatoms  rumdag  fta  aofhmra. 
ThatfamlaalntfiaWfadeM 
tatonisl  Mann  Sorvfea.  a  nohrarb 
tnfctniciMra  camponant  Mterr 
sofl  said  R  pfana  to  affar  a  patch 
to  protoel  agatoat  this  ftaar  as 
part  of  Ra  montfdy  updtoa  cyefa. 


CAIITUC  IISPI#  i  HOT  TECHNOLOOY  TRENDS,  NEW  PRODUCT 
UR  inCIfllUlR  i  NEWS  AND  INDUSTRY  ODSSIP  BY  MARK  HALL 


Isis  Protects  Netwolks 
From  Attacks  That... 

. . .  start  insidg  firewals.  And  that’s  most  of  them,  ac- 
cordii^  to  the  San  Francisco-based  Computer  Secu¬ 
rity  Institute,  which  estimates  that  60%  of  attacks 
against  networks  come  from  machines  within  corpo¬ 
rate  firewalls.  As  IT  managers  know  all  too  well,  this 
onslaught  of  worms  and  viruses  emanates  from 


clueless  employees  who  insist 
on  opening  .exe  files  promis' 
ing  wealth,  health  or  a  stealth 
look  at  someone  in  their 
birthday  suit  Because  it’s  still 
illegal  and  probably  just  plain 
wrong  to  shoot  thc^  work¬ 
ers,  you  might  instead  consid¬ 
er  adopting  the  upcoming  Isis 
security  technology  from 
NitroSectmty  LLC  in  Ports¬ 
mouth,  NJl  Isis  combines 
NitroSecurity  IPS  4.4,  an  up¬ 
grade  that  will  be  available 
later  this  month,  with  the 
brand-new  NitroSecurity 
ESE,  scheduled  for  release 
in  the  first  quarter  of 2005. 
The  upgrade  of  NitroSecuri- 
t/s  intrusion-prevention  sys¬ 
tem  adds  reporting  features 
and  drops  the  IP  address 
from  the  appliance  so  it  can't 


be  found  and  hacked  on  your 
network.  But  the  most  impor¬ 
tant  new  feature,  says  Bill 
Clark.  NhroSecurity’s  mar- 
ketii^  vice  president,  is  the 
integration  of  IPS  4.4  and 
NitroSecurity  ESE.  an  enter¬ 
prise  security  engine  that 
maintains  the  details  of  bow 
all  computing  devices  are 
connected  to  a  network. 
Together  with  IPS  4A,  Nitro¬ 
Security  ESE  can  quickly 
locate  a  device  that's  being 
used  m  an  attack  and  shut  off 
its  access  to  the  network  by 
disabling  its  Elbemet  link. 
That’s  harder  than  it  sounds. 
Clark  says.  External  worms 
arrive  via  a  very  small  num¬ 
ber  of  WAN  ports  that  can  be 
shut  off  quickly.  But  with  tens 
or  even  hundr^  of  thou¬ 


sands  of  internal  switched 
ports  to  sort  through,  finding 
offending  desktop  systems 
can  take  too  long.  With  the 
god-like  powers  of  Isis,  you 
can  banish  bad  machines 
faster  than  you  can  say  ’’Ra.” 
Or  ■‘Rahf"  since  you’ll  pn^- 
bly  be  in  a  good  mood.  Pric¬ 
ing  has  yet  to  be  finalized. 

CompKance  needs 
complicate  control... 

. . .  of  MiHaar  Mantty  and  ac- 
C8S8  managemant  procaduras. 

King  Moore,  CEO  of  New 
York-based  Secured  Services 
Inc.,  argues  that  compliance 
means  not  only  showii^  audi¬ 
tors  that  you  know  who  did 
what  where  and  when,  but 
being  able  to  prove  it  in 
court.  That's  why  its  Identi- 
prise  6i)  identity  and  access 
management  system  seals  ID- 
related  event  logs  in  a  court- 
admissible.  tamperproof  file. 

I  Identiprise  creates  a  virtual 
directory  that  other  networic- 
based  directories  connect  to, 
bridging  the  myriad  of  log-on. 
password  and  ID-challenge 
systems  that  applications  use. 
It  also  gives  single-sign-on 
access  to  end  users.  The  new 
release  is  due  to  ship  later 
this  month.  Pricing  starts  as 
low  as  S20  per  seat. 

stop  writing 
budnesslo^in... 

. . .  IT  dBpartimnto,  and  make 
your  cemgany’a  biatoaas  anafysts 
do  R  taataad.  That’s  the  strate¬ 
gy  behind  the  suite  of  tools 
offered  by  RuIesPower  Inc. 
in  Burlington,  Mass.  “Soft - 
ware  errors  don’t  stem  from 
coding,  but  firom  the  transfor¬ 
mation  of  busioess-require- 
ments-gatbering  into  code,” 
claims  RuIesPower  founder 
Steven  Minsky.  He  says  it's 
important  to  get  code  cre¬ 
ation  “out  of  the  IT  process” 
and  put  it  in  the  hands  of 
business  analysts.  IVaining 
them  to  write  J2EE  code 
seemed  like  the  wrong  ap¬ 
proach,  so  RuIesPower  opted 
to  make  the  creation  of  bust- 


ness  logic, 
well,  logical 
and  drop- 
dead  simple. 
The  company 
says  RuIes¬ 
Power  Proc¬ 
ess  Logic  2.0, 
which  is 
scheduled  to 
ship  in  next 
yes^sffrsi 
quarter,  makes  it  even  easier 
to  build  if-tben  scenarios  than 
the  pull-down  menus  and 
drag-and-drop  featiues  in  the 
existing  release  do.  The  up¬ 
grade  includes  templates  that 
will  let  users  pick  a  specific 
business  process,  choose  a 
rule  or  set  of  rules,  dick  a 
button  and  —  voild  —  have 
the  system  churn  out  com¬ 
piled  )2EE  code  tbat  can  be 
applied  to  an  application. 
Pricing  starts  at  $6,000. 

Service  provider  for 
software  deveiopeis .. . 


Aolun.iir- 

wrtjinq 


. . .  to  add  onfaM  fls  sfnring  to  Rs 
prograiwntog  tool  sol.  Applying 
the  application  service  pro¬ 
vider  business  model  to  a  set 
of  development  tools.  Ele- 
mentool  Inc  in  New  York 
next  quarter  will  launch  its 
File  Sharing  service  for  cor¬ 
porate  coders.  Programmers 
can  use  the 
service,  which 
offers  check¬ 
out  and 
check-in 
tracking  fea¬ 
tures,  as  a 
source  code 
control  repos¬ 
itory.  The  ASP 
already  offers 
bug  tracking 
and  time  tracking  services, 
each  of  which  starts  at  iust 
under  $40  per  month  for  an 
unlimited  number  of  users 
working  on  a  single  project 
Elementool  CEO  Yaron  Sinai 
says  the  services  are  ideal  for 
working  with  outsourcers  or 
for  quidc-and-dirty  projects 
that  don’t  warrant  pricey 
product  investments.  O  St169 


your  porentio!  'passion. 

Microsoft 


Mr.  500  Servers 
in  156  Countries 
Managed  from 
1  Location 


c> 


Department  of 
Foreign  Affairs, 
Switzerland 


We  000  PCs  based  everywhere  from 

Argeniind  To  Vietnam,  and  now  our  team  can 
upuatfc  mem  dll  from  headquarter  ■- 

Vikto'  Portmdtui 


Make  a  name  for  yourself  with  Windowrs  Server  System?*  Microsoft  Windows  Server  System  makes  it 
easier  for  Switzerland's  Federal  Department  of  Foreign  Affairs  (DFA)  to  manage  the  infrastructure  serving 
their  embassies  and  consulates  in  156  countries.  Here's  how:  By  using  Systems  Management  Server  2003 
and  Microsoft*  Operations  Manager  2005,  DFA  can  automatically  update  its  500  remote  servers  from  a 
central  location,  saving  over  $600,000  in  travel  expenses  alone  in  the  past  year.  They've  also  been  able  to 
reduce  the  time  and  cost  of  maintenance,  boost  user  productivity,  and  find  the  time  to  better  prepare  for 
expansion.  Software  that's  easier  to  manage  is  software  that  helps  you  do  more  with  less.  To  get  the  full 
DFA  story  or  to  find  a  Microsoft  Certified  Partner,  go  to  microsoftcofnAwsyrtem 


Microsoft*  "LJ. 

Windows 
Server  System 
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Business  Must  Be  a 
CIO’s  No,  1  Priority 


Communicating  with  business  leaders, 
delivering  results  are  key  to  survival 


CIOs  MUST  demon¬ 
strate  a  strong  com¬ 
mand  of  business  re¬ 
quirements  and  the 
ability  to  effectively  communi¬ 
cate  the  bttsincss  benefits  of 
IT  projects,  and  they  must  de¬ 
liver  proiects  as  promised  to 
gain  the  trust  and  respect  of 
senior  management,  declared 
IT  executives  attending  a  CIO 
conference  here  last  week. 

By  meeting  these  criteria, 
effective  CIOs  are  keeping 
their  jobs  for  longer  periods 
of  time  at  some  companies. 
“CIOs  are  sustaining  [their 


since  they  have  become  more 
business-focused.”  said  Mark 
Popolano.  vice  president  and 
CIO  at  American  International 
Group  Inc.  in  New  York.  Pop¬ 
olano,  AIG's  CIO  for  the  past 
seven  years,  was  a  speaker  at 
the  Forbes  CIO  Forum. 

“We  have  to  be  business 
people  first,  strategists  second 
and  technologists  third.'  said 
Ron  Ponder,  executive  vice 
president  of  information  ser¬ 
vices  and  CIO  at  WellPoint 
Health  Networks  Inc.  in  Thou¬ 
sand  Oaks.  Calif. 

Ponder,  who  reports  to  Well¬ 
Point  President  and  CEO  Lar¬ 
ry  C.  Glasscock,  said  he  never 


tenure]  longer  than  in  the  past  '  brings  an  IT  spending  propos¬ 


al  to  Glasscock  or  WellPoint’s 
board  without  first  gaming 
support  from  at  least  one  busi¬ 
ness  unit  leader.  He  also  at¬ 
tends  each  of  the  company's 
monthly  business  unit  staff 
meetings  to  work  on  better 
aligning  IT  with  the  business. 

The  growing  dependency 
on  technology  at  businesses 
can  be  a  double-edged  sword 
for  a  CIO.  according  to  some 
officials.  For  instance,  if  one 
of  Intel  Corp.'s  factories  stops 
running  because  of  an  IT- 
related  snafu,  “you  don't 
come  into  the  [boardroom]  to 
talk  strategy;  you  come  into 
the  room  to  get  beaten  up,” 
said  Stacy  Smith,  vice  presi¬ 
dent  and  CIO  for  the  informa¬ 
tion  services  and  technology 
organization  at  Intel. 

StilL  Smith  noted  that  an 


upside  to  being  a 
CIO  at  a  high-tech 
company  such  as 
Intel  is  that  the 
CEO  has  a  strong 
appreciation  for 
the  value  of  tech¬ 
nology.  After  for¬ 
mer  Harvard  Busi¬ 
ness  Review  editor 
Nicholas  G.  Carr’s 
controversial  2003 
article,  “IT  Doesn't 
Matter”  appeared. 

Intel's  CEO  disput¬ 
ed  the  premise  in 
public  forums.  As 
a  result.  Smith  was 
able  to  “leverage” 
the  CEO’s  predil¬ 
ection  for  the  val¬ 
ue  of  IT  during  Iniel^  recent 
budget  discussions,  he  said. 

Demonstrating  the  value  of 
the  IT  organization  to  the 
business  is  also  a  crucial  ele¬ 
ment  in  cementing  CIO-CEO 
relationships.  At  Xerox  Corp., 
the  IT  department  has  been 
responsible  for  $600  million, 
or  one-third,  of  the  $1.8  billion 
in  cost-cutting  that  the  Stam¬ 


n  You've  got 
to  be  able 
to  achieve  stable 
operations... 
and  deliver  on 
what  you  promise. 

PATRICM  CUSICK. 

«toa  {VMidani  and  CIO, 
Xarax  Carp- 


ford,  ConiL-based 
company  has 
achieved  over  the 
past  four  years, 
said  Patricia 
Cusick,  vice  presi¬ 
dent  and  CIO. 

“You’ve  got  to 
be  able  to  achieve 
stable  operations, 
communicate  in 
business  language 
and  deliver  on 
what  you  promise.” 
said  Cusick.  who 
has  been  Xerox's 
CIO  for  five  years. 

Sometimes  the 
CIO-CEO  relation¬ 
ship  is  strength¬ 
ened  by  the  cul¬ 
ture  of  a  company.  “I  don't 
have  to  sell  IT  projects  too 
often  to  the  CEO  and  other 
members  of  senior  manage¬ 
ment,  since  we’re  a  close-knit 
group  that  does  strategic  deci¬ 
sion-making  t(^tber,“  said 
Bill  Kwelty,  CIO  at  Automo¬ 
tive  Resources  IntemationaL 
a  fleet  services  company  in 
Mt  UureLN.J.  051199 


New  Tools  Show  How  Systems  Affect  Business  Processes 


■V  MATT  HAMBLEN 

Two  software  vendors  today 
are  unveiling  packages  de¬ 
signed  to  improve  IT  services 
management  capabilities  in 
corporations  by  giving  offi¬ 
cials  greater  insight  into  the 
relationships  between  parts  of 
an  IT  system  tied  to  a  business 
process. 

Relicore  Inc.,  a  relatively 
small  vendor  in  Buriington. 
Mass.,  will  bring  out  Relicore 
Clarity  Version  4.0.  Separately. 
BMC  Software  Inc  in  Houston 
will  unveil  Topology  Discov¬ 
ery.  Last  week,  FrantRange 
Solutions  Inc.  in  Pleasanton. 
Calif.,  released  IT  Service 
Management,  a  product  built 
on  the  Microsoft  J^et  platform 
and  primarily  intended  for 
midsize  companies. 

All  three  products  aim  to 
meet  the  needs  of  companies 
that  have  a  strong  desire  to 
improve  oversight  of  internal 
processes  by  following  guide¬ 
lines  firom  the  In/brmatton 
Technology  Infrastructure 


Library,  said  Mark  Ehr,  an  ana¬ 
lyst  at  Enterprise  Management 
Associates  Inc.  in  Boulder. 
Cola  The  ITIL  philosophy 
calls,  in  part,  for  companies  to 
use  a  centralized  configura¬ 
tion  management  database  to 
store  a  huge  assortment  of  in¬ 
formation  about  settings  on 
network  elements,  servers  and 
applications.  Such  a  database 
would  let  IT  managers  see  the 
effect  on  the  system  if  part  of 
it  fails,  gains  traffic  or  is  re¬ 
configured. 

Similar  Offerings 

Ehr  said  Relicore.  a  4-year-old 
company  with  12  large  cus¬ 
tomers.  “is  one  of  the  best  se¬ 
crets  around.”  He  predicted 
that  its  software  will  be  imitat¬ 
ed  by  large  management  ven¬ 
dors  —  if  the  company  isn't 
bought  out.  He  noted  that 
BMC’s  new  Topology  Discov¬ 
ery  is  “very  similar”  to  Reli- 
core's  Clarity,  but  BMC  built 
its  application  using  technolo¬ 
gy  gained  by  acquiring  Marim¬ 


ba  Inc.  and  Remedy  Corp. 

Kurt  HanseL  senior  techni¬ 
cal  ofHcer  at  JJ’.  Morgan 
Chase  St  Ca  in  New  York,  said 
the  bank  will  move  to  Relicore 
Clarity  4X)  at  the  be^nning  of 
2005.  [Jl  Morgan  has  used 
Version  3.6  for  more  than  a 
year  on  50  servers  that  run  an 
application  called  Cash  on 
Line.  More  than  3,000  finan¬ 
cial  traders  and  cash  managers 
use  the  application. 


Clarity  4.0  will  work  with 
IBM  Tivoli  software  at  jT. 
Morgan  to  give  greater  insight 
into  system  updates,  such  as  a 
change  to  a  configuration  file. 
Hansel  said. 

Cheri  Tipton,  computer  sys¬ 
tems  technician  for  the  city 
government  in  Olympia. 
Wash.,  said  the  municipality 
purchased  IT  Service  Manage¬ 
ment  from  FrontRange  and 
will  take  h  live  In  January.  The 


Service  Management  Tools 

Itefcora  Clv%  4Jk  shippinQ  AM.  starts  at  S2(X).000.  Support 
andSUSEUnutOBast^ohaimappingoithcwsvidBofsarvaisandappl- 
cattons,  and  kitegntes  Mnj-party  franaoarnant 

BMC  Sal»MwlipBlog>Ot»eMqr  is  NvnhbiB  now,  prang  not  (fcdcised^ 
Buids  and  nnMains  netwDik  maps  and  appKca^ 
dency  maps  ind  by  Bile's  Sarvica  impact  MMogv  to  slow  M 
sponam  to  profalenB  and  irnproved  servica  lawls. 

FraMMMie  SiMhm  IT  SmiM  MMipnMt  la  aiMtabie  now  pricing  not 
dhcfceBd.h¥AidasaaiMn  modules  hr  incidBntfiMnaoBwiant.problani 
nwaoaineril  chaiVi  rnanagarnent.  relaaae  rinr«M*nenL  naiab^ 
agmanl  conlguratkn  managernant  and  sarviceM  manaoernanL 


new  software  will  help  the  city 
be  more  proactive  in  handlii^ 
system  problems,  she  said. 

With  the  old  system,  Tipton 
said,  “we'd  have  a  problem  or 
incident  and  nobody  knew 
what  ro  do  with  it,  since  the 
root  problem  was  hard  to 
find.”  FrontRange  will  help 
manage  systems  used  by  650 
govenunent  employees  in  24 
buildings,  she  added. 

Steve  Balentine.  a  BMC 
product  marketing  manager, 
said  Topology  Discovery  is  the 
third  piece  of  the  Change  and 
Configuration  Management 
product  group.  The  software 
builds  and  maintains  a  network 
map  with  application  infra¬ 
structure  information  to  pro¬ 
vide  DuxieUng  for  IT  services. 

“Understanding  the  rela¬ 
tionships  between  parts  of  the 
infrastructure  is  the  wave  of 
the  future.”  explained  Jasmine 
Noel  analyst  at  Ptak,  Noel  & 
Associates  in  New  Yoik.  “It's 
more  than  just  a  map  of  a  busi¬ 
ness.  but  a  picture  of  how  a 
business  sovice  is  using  the 
infrastructure  at  this  minute.” 
051216 
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Cingular  Set  to 
Deploy  3G  Network 

Ctngular  Wireless  LLC  Usi  week 
outlined  plans  to  begin  deploying 
a  thkd*9enerat)on  network  with 
average  data  speeds  of  400K  to 
700KtNt/sec.  and  bursts  to  sever¬ 
al  megabits  per  second  on  capa¬ 
ble  devices.  Cingular  said  the  re¬ 
cent  acqiasition  of  AT&T  Wireless 
Services  Inc.  provided  the  compa¬ 
ny  with  the  spectrum  necessary 
to  start  building  the  36  rtetworks 
over  the  next  year. 


Apache  Group  May 
Hire  Full-Time  Staff 

The  Apache  Software  Foundation 
may  soon  need  to  hire  full-time.  | 
paid  staffers  to  keep  up  with  an 
mcreasing  load  of  legal  work  and 
fundraising  tasks,  said  Brian 
Behlendorf.  a  co-founder  and 
director  of  the  Forest  i 

based  group.  A  board  of  nine  vol-  j 
unteer  members  currently  runs  I 

the  not-for-profit  foundation, 
which  was  set  up  in  1999.  Rough¬ 
ly  1.200  developers  are  working 
on  about  20  Apache  projects.  I 


AOL  Adds  More  IE 
Support  to  Browser 

America  Online  Inc.  has  brought 
out  a  preview  version  of  a  Net¬ 
scape  Rrefoi-based  Web  browser 
that  includes  support  for  Micro¬ 
soft  Corp.’s  ubiquitous  Internet 
Explorer  browser  engine.  The  new 
browser  lets  users  easily  switch 
lo  IE  to  show  sites  that  don’t  dis¬ 
play  well  in  Netscape’s  standard 
Firefox-basad  configuration. 

IBM  Signs  Pacts, 
Buys  O^ish  Rrms 

IBM  reached  agreements  with  two 
Danish  companies  on  outsourcing 
deals  that  together  are  worth 
more  than  51  billion.  IBM  signed  a 
five-year  agreement  with  shipping 
container  giant  AP  Moller-Maersk 
AS  and  a  10-year  pact  with 
Oansfce  Bank  AS.  IBM  abo  said 
it  acquired  two  IT  services  firms 
related  lo  the  Danish  companies, 
Maersk  Data  AS  and  OMOala  AS. 


HP  Revives  Plan  for 
Tool  to  Slow  Viruses 


'nirottlcr'  meets  ;t  need,  s;i\  ;inal\sts. 
but  elient  tnol  ma\  he  more  ell'eetixe 


BV  JAIKUMAR  VIJAVAN 

»  W  I  »  I  J  f.\»  K.\kl> 
Cu.’s  pl.inncT 
launch  nfsi)-callcJ 
viru.s-ihnnilcr 
warc  early  next  year  addresses 
a  prowing  need  for  tools  that 
can  help  slow  the  spread  of 
viruses  on  corpHtrate  net¬ 
works.  IT  security  analysts 
said  last  >vcck.  But  the  cfTec- 
tivenes-s  of  HP’s  approach  re- 
main.s  unpnwcn  in  real-world 
insialKitions.  they  cautioned. 

HP.  which  has  been  testing 
the  virus-ihrotiler  software 
internally  since  tViober.  said 
it  will  make  the  lechnologv’ 
available  lo  users  in  the  form 
of  network  drivers  for  its  Pix>- 
l.iani  servers  and  ProCurve 
switcbe.s.  The  iximpany  hasn't 
named  the  technology  yet,  al¬ 
though  Virus  Throitler  is  a 
possibility. 

The  software  kniks  for  vari¬ 


ations  in  server  and  network 
behavior  that  might  signal  the 
I  presence  of  a  virus  or  other 
malicious  code.  Once  suspi¬ 
cious  activity  is  detected,  the 
I  virus  ihri>ttler  aulomalically 
j  slows  it  down  b>  limiting  the 
'  number  of  <*uthound  connec- 
I  tions  that  an  infected  system 
I  can  make.  HP  said.  It  claimed 
that  the  technology  can  help 
j  limit  the  neiwt>rk  congestion 
I  that  typically  results  when  in¬ 
fected  machines  try  to  propa¬ 
gate  viruses  to  other  systems. 

"This  is  not  abtmi  killing 
!  viruses.  It’s  about  caging  and 
I  suppressing  them.**  said  Tony 
Redmond,  vice  president  and 
chici  tcchnoh>gy  oflTiccr  at  the 
I  vendor's  HP  Services  business 
unit  and  H' security  program 
I  t>fTice. 

"What  it  does  is  allow  ad- 
ministniiors  get  a  handle  on 
fast-moving  threats."  said  Scott 


,  Oawf(*rd.  an  analyst  at  hntcr- 
I  prise  Management  Associates 
I  Inc.  in  Boulder.  ( .1*10.  "Being 
able  to  slow  down  a  virus  in¬ 
creases  the  ability  to  get  an 
effociive  response  and  patch- 
deployment  process  in  place." 

The  tool  doesn't  replace  e.x- 
isting  antivirus  technologies, 
Redmond  said.  "What  we're 
doing  is  catching  anything  that 
gets  past  a  firewall  or  anti¬ 
virus  software."  he  explained. 

To  be  truly  cflectivc.  the 


Other  HP 

Security  Arldltions 

Nf.W  ilOQl.UtirC 
product'.  .ind  onlrne  security 
tOOli.  including  yulnpi.iOili'v 
and  oalcb  manaQomeni 
sohw,»rc  *0f  small  bus.ru-v. 

moflelrift*  ProLiani  setyef, 
OpcuVkw 

Select  Federation  identity 
management  software 


Cisco,  Others  Expand  10 
Gigabit  Ethernet  Switches 


BV  MATT  HAMBLEN 

Ciset*  Systems  Inc.  last  week 
added  two  supervistir  engines 
with  10  tiigabit  F.thernet  p«>rts 
lo  its  midrartge  and  high-end 
switch  lines,  and  Alcatel  and 
Hewlett-Packard  Ctv  both  plan 
to  .announce  new  switches 
that  support  the  technology 
today. 

The  rollouts  by  the  three 
vendors  are  further  evidence 
that  10(iigabii  Ethernet  core 
switching  is  poised  to  m«wc 
beyond  its  existing  uses  in  re¬ 
search  centers  and  universi¬ 
ties  and  expand  Into  main¬ 
stream  corpomie  applications, 
said  Zeus  Kerravala.  an  analyst 
.11  The  Yanktv  (iroup  in 
Kosion. 

“Customers  want  (ligabii 
Ethernet  lii  the  desktop,  which 


means  you  need  10  (tig  at  ihe 
I  core  for  uplinks  and  server 
I  connectivity.”  he  said. 

'  Clarian  Health  Panners  Inc. 
i  .1  group  ofthreehvwpiials  in 
I  Indianapolis,  has  already  in- 
I  stalled  about  15  t>f  (asco's  (Jat- 
I  alyst  6500  core  swiiehes  with 
I  10  Gigabit  Ethernet  capability. 
Now  Clarian  plans  to  order 
mon-  than  200  (Catalyst  4500 
I  midrange  switches  f<ir  use  in 
I  wiring  closets  on  every  floor 
j  In  its  17  buildings,  which  arc 
I  K’ing  connected  by  a  new  OC.'- 
I  l‘J2  nerxs'orlt.  said  Tom  Jones, 
a  lechnolog)’  architect  at  the 
health  care  provider. 

1  Jones  said  Mime  of  the 
switches  will  be  usc-d  to  sup- 
j  port  high-handwidih  imaging 
j  applications  in  Clarian's  cardi- 
'  ology  and  radiology  depart¬ 


ments  and  will  include  the 
new  Catalyst  4500  Supervisor 
Engine  V-IOGE,  which  sup¬ 
ports  10  Gigabit  Ethernet 
transmission  rates. 


Necessary  Investment 

The  Ciscti  pnulucts  will  cost 
(Tarian  “many  millions"  of 
dollars,  Jones  said.  Rut  the 
network  and  a  new  patient- 
earc  system  arc  “the  heart  of 
the  busioL'S-s."  he  added.  "We 
h.id  to  make  this  network  in¬ 
vestment  as  well  as  linvcsf- 
ments  inj  servers  and  applica- 
tums  to  be  successful." 

The  new  supervisiir  engine 
for  the  Catalyst  4500  is  avail¬ 
able  now  and  supports  two 
10  Gigabit  Ethernet  p«>ris  at  a 
cost  t>f  S19.‘>‘>5.  Cisa>  said.  The 


Catalyst  6500  line  is  also  being 
expanded  with  an  engine  that 
has  the  same  numbi*r  of  ports 
and  sells  f.tr  520.000.  It’s 
scheduled  to  ship  in  February. 


icchnttlogy  needs  to  become 
available  at  the  client  level. 
s.iid  lohn  Pcscaiorc.  an  .inalysi 
at  (iartner  Inc.  The  volume  of 
traffic  on  a  corporate  e-mail 
server  or  a  network  switch,  es¬ 
pecially  in  big  companie.s. 

I  make.s  it  harder  to  identify 
malicious  activity  than  it  is 
when  monitoring  Individual 
Pt's,  Pescatorc  said. 

HP  first  announced  plans 
for  the  virus  throtticr  last  Feb¬ 
ruary.  But  In  August,  the  ci>m- 
pany  said  it  was  indefinitely 
shelving  the  st>flwarc  because 
of  compatibility  problems 
with  Windows.  Since  then,  the 
drivers  have  undergone  thor¬ 
ough  Windows  cenification 
testing  and  arc  now  in  the 
process  of  being  qualified  for 
commercial  release  by  HP. 
according  to  Redmond. 

The  virus  throtticr  was  one 
of  several  IT  security  pnidnets 
and  services  that  HP  an¬ 
nounced  last  week.  Another 
new  offering  is  the  Security 
Incident  Management  IVn- 
gram.  under  which  HP  will 
olTcr  consulting  on  security 
issues  and  provide  a  vulnera¬ 
bility  assessment  service 
called  Active  Countermea¬ 
sures  to  help  users  identity 
and  fix  weak  spots  in  their 
networks.  O  51222 


All  together.  Cisco  an¬ 
nounced  more  than  20  higher- 
capacity  switching  products 
for  the  Catalyst  family,  as  well 
a.s  r\»wer  Over  Ethernet  capa¬ 
bilities  for  several  existing 
-sw’iichL-s.  In  addition,  the  com¬ 
pany  introduced  its  first  Giga¬ 
bit  Ethemel-capable  IP  phone, 
priced  at  5845. 

FIP  said  it  plans  to  announce 
the  ProCurve  Switch  MOOcI, 
a  series  of  six-port  stackable 
switches  that  support  10  Giga¬ 
bit  Ethernet  and  arc  scheduled 
to  ship  in  the  spring  at  a  sian- 
ing  price  of  S5.42V. 

Alcatel  will  introduce  the 
OmniSwitch  6800  family  of 
Gigabit  Eihcmei  swiiLhe,s 
with  10  Gigabit  Ethernet  up¬ 
links.  Pricing  starts  at  54.495 
for  the  switches,  which  arc 
available  now.  A  two-p<irt  10 
Gigabit  Ethernet  module  is 
due  in  February,  staning  at 
S4.W5.  C  51215 
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HP  Revives  Plan  for 
Tool  to  Slow  Viruses 

‘Throttler’  meets  a  need,  say  analysts, 
but  client  tool  may  be  more  effective 
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Apache  Group  May 
Hire  RjH-Time  Staff 

Tlw  Apaeha  Sofhaafa  fbundafloo 
may  aoan  Iliad  to  (lira  W-tbna, 
paid  alaflara  to  haap  I*  with  an 
bwraaiino  hiid  of  lagto  work  wid 
fundMatag  tMte.  aaU  Brian 
Babtondorf.  a  co  toandar  and 
*aetarafthaFai«atHH.IId.- 
boMd  group.  A  board  of  Mna  vaP 
untoar  waiabara  currantfy  runs 
too  not'far'prafH  foundathNi, 
wtaidi  waa  aal  ap  in  1999.  Rough¬ 
ly  1,200  davafopart  ara  norfcing 
on  about  20  Apncha  prafaeto. 

AOL  Adds  More  IE 
Support  to  Browser 
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IBM  Sipts  Pacts, 
Buys  Danish  Firms 
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OV  JAIKUMAM  VtUAVAN 

EWL£TT-PACKARD 
Co.'s  planned 
launch  of  so-called 
vinis-throttler  soft¬ 
ware  early  next  year  addresses 
a  growing  need  for  tools  that 
can  help  slow  the  spread  of 
viniscs  on  corporate  net- 
worits.  IT  security  analysts 
said  last  week.  But  the  effec¬ 
tiveness  of  HP’s  approach  re¬ 
mains  unproven  in  real-world 
installations,  they  cautioned. 

HP.  which  has  been  testing 
the  virus-lhrottler  software 
internally  since  October,  said 
it  will  make  the  technology 
available  to  users  in  the  form 
of  network  drivers  for  its  Pro¬ 
liant  servers  and  ProCurve 
switches.  The  company  hasn't 
named  the  technoiogy  yet,  al¬ 
though  Virus  Throttler  b  a 
possibility. 

The  software  looks  for  vari- 


BV  MATT  NAMUCCN 

Cisco  Systems  Inc.  last  week 
added  two  supervisor  engines 
with  10  Gigabit  Ethernet  ports 
to  its  midrange  and  high-end 
switch  lines,  and  Alcatel  and 
Hcwlctt-I^kard  Ca  both  plan 
to  announce  new  switches 
that  support  the  technology 
today. 

The  rollouts  by  the  three 
vendors  are  further  evidence 
that  10  Gigabh  Ethernet  core 
svdtching  b  poised  to  move 
beyond  its  existing  uses  in  re¬ 
search  centers  and  universi¬ 
ties  and  expand  into  main¬ 
stream  corporate  applications, 
said  Zeus  Kerravala,  an  analyst 
at  The  Yankee  Group  in 
Boston. 

Xustomere  want  Gigabit 
Ethernet  to  the  desktop,  u^ch 


I  ations  in  server  and  network 
I  behavior  that  might  signal  the 
'  presence  of  a  virus  or  other 
malicious  code.  Once  .suspi¬ 
cious  activity  b  detected,  the 
virus  throttler  automatically 
slows  it  down  by  limiting  the 
number  of  outbound  connec¬ 
tions  that  an  infected  system 
can  make.  HP  said.  It  claimed 
that  the  technology  can  help 
limit  the  network  congestion 
that  typically  results  when  in- 
feaed  machines  try  to  propa¬ 
gate  viruses  to  other  systems. 

“This  b  not  about  killing 
viruses.  It’s  about  c^ing  and 
suppressing  them.”  said  Tony 
Redmond,  vice  president  and 
chief  technology  officer  at  the 
vendor's  HP  Services  business 
uiut  and  n*  security  pre^ram 
office. 

“What  h  does  b  allow  ad¬ 
ministrators  to  get  a  handle  on 
fast-moving  threats,’’  said  Scott 


means  you  need  K)  Gig  at  the 
core  for  uplinks  and  server 
connectivity,’'  he  said. 

Clarian  Health  Partners  Inc., 
a  group  of  three  hospitab  in 
Indianapotb.  has  already  in¬ 
stalled  about  15  of  Cisco’s  Cat¬ 
alyst  6500  core  switches  with 
10  Gigabit  Ethernet  capability. 
Now  Clarian  plans  to  order 
more  than  200  Catalyst  4500 
midrange  switches  for  use  in 
wiring  closets  on  every  floor 
in  its  17  buildings,  which  are 
being  connected  by  a  new  OC- 
192  network,  said  Tom  )oncs. 
a  technology  architect  at  the 
health  care  provider. 

Jones  said  some  of  the 
switches  will  be  used  to  sup¬ 
port  high-bandwidth  imaging 
applications  in  Clarian's  cardi¬ 
ology  and  radiology  d^art- 


Crawford,  an  analyst  at  Enter¬ 
prise  Management  Associates 
Inc.  in  Boulder.  Colo.  “Being 
able  to  slow  down  a  virus  in¬ 
creases  the  ability  to  get  an 
effective  response  and  patch- 
deployment  process  in  place.” 

The  tool  doesn’t  replace  ex¬ 
isting  antivirus  technologies. 
Redmond  said.  “What  we’re 
doing  b  catching  anything  that 
gets  past  a  firewall  or  anti¬ 
virus  software,”  be  explained. 

To  be  truly  effective,  the 


ments  and  will  include  the 
new  Catalyst  4500  Supervisor 
Engine  V-IOGE,  which  sup¬ 
ports  10  Gigabit  Ethernet 
transmission  rates. 

Necessary  hvasliTient 

The  Cisco  products  will  cost 
Clarian  “many  millions”  of 
dollars.  Jones  said.  But  the 
network  and  a  new  patient- 
care  system  arc  "the  bean  of 
the  business,”  he  added.  “We 
had  to  make  thb  networic  in¬ 
vestment  as  well  as  [invest¬ 
ments  in)  servers  and  applica¬ 
tions  to  be  successful” 

The  new  supervisor  engine 
for  the  Catalyst  4500  b  avail¬ 
able  now  and  supports  two 
10  Gigabit  Ethernet  ports  at  a 
cost  of  119,995,  Cisco  said.  The 
Catalyst  6500  tine  b  also  being 
expanded  with  an  engine  that 
has  the  same  number  of  ports 
and  selb  for  $20,000.  It’s 
scheduled  to  ship  in  February. 


Cisco,  Others  Expand  10 
Gigabit  Ethernet  Switches 


technology  needs  to  become 
available  at  the  client  level 
said  John  IVscatore.  an  analyst 
at  Gartner  Inc.  The  volume  of 
traffic  on  a  corporate  e-mail 
server  or  a  network  switch,  es¬ 
pecially  in  big  companies, 
makes  it  harder  to  identify 
malicious  activity  than  it  b 
when  monitoring  individual 
PCs.  Pescatore  said. 

HP  first  announced  plans 
for  the  virus  throttler  last  Feb¬ 
ruary.  But  in  August,  the  com¬ 
pany  said  it  was  indefinitely 
shelving  the  software  because 
of  compatibility  problems 
with  Windows.  Since  then,  the 
drivers  have  undergone  thor¬ 
ough  Windows  certification 
testing  and  are  now  in  the 
process  of  being  qualified  for 
commercial  release  by  HP. 
according  to  Redmond. 

TTk  vi^  throttler  was  one 
of  several  IT  security  products 
and  services  that  HP  an¬ 
nounced  last  week.  Another 
new  offering  b  the  Security 
Inddcni  Management  Pro¬ 
gram.  under  which  HP  will 
offer  consulting  on  security 
issues  and  provide  a  vulnera¬ 
bility  assessment  service 
called  Active  Countermea¬ 
sures  to  help  users  identity 
and  fix  weak  spots  in  their 
networics.  091222 


All  together,  Cisco  an¬ 
nounced  more  than  20  higher- 
capacity  switching  products 
for  the  Catalyst  fan^y.  as  well 
as  Power  Over  Ethernet  capa¬ 
bilities  for  several  existing 
switches.  In  addition,  the  com¬ 
pany  introduced  its  first  Giga¬ 
bit  Ethernet-capable  IP  phone, 
priced  at  S84S. 

HP  said  it  plans  to  announce 
the  ProCurve  Switch  6400cl 
a  series  of  sU-port  stackable 
switches  that  support  10  Giga¬ 
bit  Ethernet  and  are  scheduled 
to  ship  in  the  ^ring  at  a  start¬ 
ing  price  of  $5,429. 

Alcatel  will  introduce  the 
OmniSwitch  6800  fondly  of 
Gigidiii  Ethernet  switches 
with  10  Gigabh  Ethernet  up¬ 
links.  Pricing  starts  at  $4,495 
for  the  switches,  vriiich  are 
available  now.  A  two-port  10 
Gigabit  Ethernet  module  b 
due  in  February,  starting  at 
54.995.091215 


Could  your  IT  dollars  be  better  spent? 
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No  business  wants  to  believe  it^  wasting  precious  IT  dollars.  So  if  executives  and  co-wwkers  grumble 
about  IT  service,  and  you’re  convinced  those  services  could  be  put  to  better  use,  let  SAS  help. 
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quality  of  every  IT  service  more  accurately.  You’ll  know  precisely  how  your  business  is  using  IT 
resources.  Ensure  maximum  performance  and  respLHise  times.  Predict  strategic  and  financial  trends. 
And  clearly  visualize  the  value  of  IT  from  business,  revenue  and  profit  perspectives.  Visit  our  Web 
site  to  leam  more  and  read  our  free  white  paper.  Align  IT  with  Business  and  Budget  Strategies. 
Or  call  us  toll  free  1  866  731  1364. 
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Blair  Urges  Jail  Time 
For  ID  Card  Abuses 

LONDON 

K  1‘HlMt  MiMsi  IK  Tony  BLtir 
l.isi  week  tried  to  quell  iiruw  iny 
euncern  over  the  security  of  the 
ei*unlr\  s  fi»nheominn  niitiorul  identi¬ 
ty  card  progrjm  by  thretuenini;  i.)i) 
time  for  anyone  eaujihi  tamperinij  with 
the  project's  massi\e  database. 


\\ould  he  up  to  10  years  in  prison,  and 
unauth«»riANl  diseUwures  would  carry 
a  pen.ilty  of  two  years  in  prison.  Bkiir 
said  .It  a  news  conference  here. 

Tile  Identity  Cards  Bill  seeks  to  cre¬ 
ate  by  2010  a  system  that  supports  the 
uie  of  II>  cards  with  embedded  chips 
for  storini:  biometric  identifiers  as  well 
as  personal  information  about  U.K. 
rc'sident.s.  The  data  on  the  chips  will 
include  n'sidents'  names, 
addresses,  fingerprints,  fa¬ 
cial  scans  and  iris  scans, 
all  of  which  will  also  be 
stored  in  the  government’s 
central  database. 

Klair  said  the  ID  cards 
would  be  a  powerful 
weaptm  in  the  U.K.  gos  • 
ernment’s  fight  against 


terrorism,  identity  fraud,  illeg.il  work¬ 
ers,  illegal  immigration  and  illegal  u.se 
of  government  entitlement  pr«*gr;ims 
such  as  the  National  Health  Serv  icc. 

■  LAURA  ROHOE  ID6  NEWS  SERVICE 

Aussie  ‘Green  Machine’ 
Recycles  Printer  Waste 

SVONEV 

t  s  I K  At  i.-VNs  use  IK  million  printer 
consumabk's  per  year,  and  most 
of  the  ink-jet  and  toner  eariridges 
end  up  as  hazardous  landfill.  But  an 
.Australian  eompemy  has  developed  a 
ri*eyeling  plant  that  transforms  the 
waste  into  eommereial  products. 

rh>se  the  loop  Lid.'»  (CTI.)  pn>- 
gram.  starti-d  as  an  environmental  ini 
liaiivc  in  19'>8.  is  btvoming  .1  serious, 
global  business.  Its  Green  Machine  fa¬ 
cility  turns  the  plastic  printer  car¬ 
tridges  into  "e-^vivod."  a 
limber  replacement  prod¬ 
uct  that  can  be  used  for 
fencing,  garden  materials, 
playgmund  equipment 
and  uHieo  furniture. 

Melbourne-based  CTI. 
works  with  more  than 
3.0(H)  end  users,  suppliers, 
government  agencies  and 


I  businesses,  and  il  has  set  up  more  than 
I  2.000  eolleeiion  points  for  printer  ear- 
I  iridges.  Even  with  .^K  full-time  staffers. 

'  the  company  is  working  overtime,  eol- 
I  lecting  .k)0  b.ags  of  waste  per  day.  said 
j  Melinda  Lizza.  CTL’s  business  devei- 
I  t)pment  manager. 

I  ■  SANDRA  ROSSI.  COMPUTERWORLD 
'  TODAY  (AUSTRALIA) 


MANILA 


i.HOl  !•  Dt  HI  siNtSSMtN  in  the 
Philippines  is  creating  a  holding 
company  that  will  give  financial 
incentives  to  U.S.-based  Filipinos  who 
market  the  country  as  a  destination  for 
outsourced  business  and  IT  services. 
The  group  would  pay  a  fee  —  for  ex¬ 
ample.  2%  of  the  resulting  contract  — 
to  Filipino-Americans  who  successful¬ 
ly  reler  U.S.  companies  ui  service  prt>- 
viders  in  the  Philippines, 

Tlic  marketing  and  referral  initiative 
is  supported  by  the  nonprofit  Philip¬ 
pine  Small  and  Medium  F.nterprises 
Development  Foundation  Inc.  in  Pasay 
City.  Initially,  the  group  will  hire  a 
marketing  company  in  the  U.S.  and 
h<*ld  businc.ss  networking  sessions  in 
at  least  eight  states.  O  S1165 
■  LAWRENCE  CASIRAYA. 

COMPUTERWORLD  PHILIPPINES 


Compi7ed  by  Mife/i  Betts. 


ol  Australia's  IT 
workers  are  unhappy 
with  their  jobs 


Briefly  Noted 

in  January  will 

iHien  a  research  laboratory  in  Ban¬ 
galore.  India,  that  will  focus  on 
computing  technologies  for  emerg¬ 
ing  markets,  as  well  as  sensors, 
multilingual  systems  and  geograph¬ 
ic  information  systems.  Microsoft’s 
other  research  labs  are  in  Red¬ 
mond.  Wash.,  Mountain  View,  (^if., 
(^mbridge.  England,  and  Beijing. 

■  JOMNRIBEIRO. 

ID6  NEWS  SERVICE 


Australia's 

in  Canberra  is  con^- 
ering  dumping  Microsoft's  Office 
suite  in  favor  of  open-source  desk¬ 
top  software  for  about  3,000  end 
users,  according  to  a  government 
document  requesting  bids. 

■  RODNEY  GEDDA.  COMPUTER- 
WORLD  TODAY  (AUSTRALIA) 


London-based  last 

week  said  it  had  won  a  contract  to 
supply  secure  IP  network  services 
to  IS  European  Union  institutions. 
The  deal  could  be  worth  up  to  $21S 
million  over  eight  years.  BT  said. 

■  LAURA  ROHOE. 

IDS  NEWS  SERVICE 


Plugfest  Signals  Serial 
Devices  Ready  to  Go 


BY  LUCAS  MEARIAN 

More  than  KH)  engineers  from 
smrage  vendors  gathered  in 
New  Hampshire  last  month 
for  a  final  round  of  interoper¬ 
ability  iL-5ting  between  Serial 
Attached  SCSI  (SAS)  and  Seri¬ 
al  ATA  disk  drives,  organizers 
plan  to  announce  today . 

Vendors  said  the  plugfest 
wa.s  the  last  hurdle  before  the 
shipping  of  bundled  SAS  and 
Serial  ATA  products  begins  in 
ne.xt  year's  first  quaner. 

rite  tests,  which  tixik  place 
at  the  University  of  New 
Hampshire's  JnicrlTpcrability 
Uboraiory  in  Durh.im.  culmi¬ 
nated  three  vx-ars  of  develop¬ 
ment  of  the  SAS  pn»UK'ol  and 
products  that  support  it.  ac¬ 
cording  to  Harry  Ma.son.  pres¬ 
ident  of  the  S(-SI  Trade  Assi»- 


claiion  in  San  Francisco. 

I  Mason  said  the  icnis  found 
I  that  SAS  storage  devices  are 
I  fully  compatible  with  Serial 
I  ATA  drives  and  thus  allow  tor  ^ 
the  creation  of  dual-purpose 
I  disk  arrays  that  suppi>rt  bixh 
j  ATA  and  SCSI  technologies  in 
'  the  same  enclosure. 

Among  the  companies  that 
tested  products  at  the  plugfest 
were  Hewlett-Packard  Co..  Hi¬ 
tachi  Ltd..  Intel  Corp..  Seagate 
Technology  LLC.  Adaptec 
Inc..  Doll  Inc..  FiqualLogic  Inc.. 
LSI  Logic  Corp..  Ma.xtor  Corp. 
and  NEC  Corp. 

For  decades,  disk  drives 
used  parallel  bus  interface's  in 
!  storage  SLsicim  that  weren’t 
j  Kised  on  Fibre  Channel  tech- 
I  nology.  Hut  incn'a.sing  band- 
^  width  and  reliability  issues  put 


the  two  main  parallel  interface 
tcchnoli>gics  —  SCSI  and  ATA 
—  at  a  performance  disadvan¬ 
tage  compared  with  Fibre 
Channel.  And  the  lack  of  com¬ 
patibility  between  the  parallel 
bus  technologies  kept  vendors 
from  offering  arrays  that  ctmld 
share  the  higher  performance 
chanicteristics  of  SCSI  and  the 
lower  cost  but  higher  capacity 
features  of  ATA. 

“SCSI  lechnolog)’  was  cer¬ 
tainly  feeling  the  pinch  prior 
to  this,  and  I  think  SAS  brings 
new  life  to  SCSI."  said  Arun 
Taneja.  an  analyst  at  Tancja 
Group  in  Hopkinton.  Ma.s.s. 

Technology  Drivers 

The  use  of  tiered  storage  sys¬ 
tems  that  ofi'er  difTcreni  per¬ 
formance  and  capacity  levels 
is  being  driven  by  new  regula¬ 
tions.  such  as  the  Sarbancs- 
Oxlcy  Act  and  the  Health  In¬ 
surance  Pinrability  and  Ac¬ 
countability  Act.  that  requin* 
companies  to  store  and  be 


able  to  quickly  access  finan¬ 
cial  and  customer  data. 

Such  requirements  weren’t 
enough  to  convince  Laurence 
Whittaker,  supervisor  of  en¬ 
terprise  storage  management 
at  Toronto-based  retailer  Hud¬ 
son’s  Bay  Co.,  that  combining 
two  disk  types  in  the  same 
chassis  is  a  good  idea.  “I  can 
sec  (small  and  medium-size 
businesses)  having  some  in¬ 
terest  in  it."  Whittaker  said. 
“But  I  just  think  if  you  have  a 
large  business,  you’re  going  to 


Serial  Technology 
Offers: 

■  Dual  ports  for  failover 

■  A  7-pin  connector  cable  vs. 
a  40-p4n  nbbon  cable 

■  The  bility  to  work  at 
lower  voltages 

■  Support  for  up  Id  126  de¬ 
vices  per  channel  vs.  two 
for  ATA  arid  15  lor  SCSI 


have  so  many  cabinets  on  the 
floor  anyw-.'ty.  there’s  not  a  lot 
to  be  gained  by  having  multi¬ 
ple  disk  technologies  within 
the  same  frame." 

David  Woolf,  senior  R&D 
engineer  at  the  UNH  InierLTp- 
erability  Lab.  said  Serial  ATA 
can  nonethek'ss  ofler  signifi¬ 
cant  civsi  savings  to  users. 

"Fibre  Channel  is  quite  ex¬ 
pensive,  and  parallel  SCSI  is 
diflicult  to  scale  for  speed 
(throughput)."  Woolfsaid. 
"SAS  is  significantly  less  ex¬ 
pensive  and  has  a  road  map 
that  sluTws  it  can  be  scaled 
speed-wise  far  past  what  par¬ 
allel  tcchnoli^’  ofTcrs.” 

Serial  ATA  disk  arrays,  at 
1  hj  2  cents  per  megabyte,  arc 
about  half  as  expensive  as  SAS 
devices,  at  .3  to  5  cents  per 
megabyte,  according  to  ana¬ 
lysts.  “While  end  users  might 
not  be  imoresied  In  the  nuts 
and  bolts  of  it.  certainly  there 
arc  advaniage.s  for  them." 
WcKTlf  said.  0  51219 
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Blair  Urges  Jail  Time 
For  ID  Card  Abuses 

LONDON 

U  K.  PRIME  MiNiS-pEK  Tooy  Blair 
last  week  tried  to  quell  growing 
concern  over  the  security  of  the 
country’s  forthcoming  national  identi¬ 
ty  card  program  by  ihrealentng  jail 
time  for  anyone  caught  tampering  with 
the  project’s  massive  daubase. 

The  penalty  for  database  tampering 
would  be  up  to  10  years  in  prison,  and 
unautboriz^  disclosures  would  carry 
a  penalty  of  two  years  in  prison.  Blair 
said  at  a  news  conference  here. 

The  Identity  Cards  Bill  seeks  to  cre¬ 
ate  by  3010  a  system  that  supports  the 
use  of  ID  cards  with  embedded  chips 
Ibr  storing  biometric  identifiers  as  well 
as  personal  information  about  UJC. 
regents.  The  data  on  the  chips  will 
include  residents’  names, 
addresses,  fingerprints, 
cial  scans  and  iris  scans, 
all  of  which  will  also  be 
stored  in  the  government's 
central  database. 

Blair  said  the  tO  cards 
vrould  be  a  powerful 
weapon  in  the  UJC.  gov¬ 
ernment's  fight  against 


terrorism,  identity  fraud,  illegal  work¬ 
ers.  illegal  immigration  and  illegal  use 
of  government  entitlement  programs 
such  as  the  National  Health  Service. 

■  LAURA  ROHDE.  106  NEWS  SERVICE 

Aussie  ‘Green  Machine’ 
Recycles  Printer  Waste 

•voNev 

Australians  use  18  million  printer 
consumables  per  year,  and  most 
of  the  ink-jet  and  toner  cartridges 
end  up  as  hazardous  landfill  Bui  an 
Australian  company  has  developed  a 
recycling  plant  that  transforms  the 
waste  into  commercial  products. 

Close  the  Loop  Ltd’s  (CTL)  pro¬ 
gram,  started  as  an  cnviroamental  ini¬ 
tiative  in  1998.  is  becoming  a  serious, 
global  business.  Its  Green  Machine  fa¬ 
cility  turns  the  plastic  printer  car¬ 
tridges  into  ■’e-wood.’’  a 
timber  replacement  prod¬ 
uct  that  can  be  used  for 
fencii^  garden  materials, 
playground  equipment 
and  office  furniture. 

Mclboumebased  CTL 
works  with  more  than 
3JK)0  end  users,  suppliers, 
government  agencies  and 


businesses,  and  it  has  set  up  more  chan 
2,000  collection  points  for  printer  car¬ 
tridges.  Even  with  38  fuU-time  staffers, 
the  company  is  working  overtime,  col¬ 
lecting  300  bags  of  waste  per  day.  said 
Melinda  Lizza.  CTL’s  business  devel¬ 
opment  manager. 

■  SANORA  ROSSI.  COMPUTERWORLD 
TODAY  (AUSTRALIA) 


A  GROUP  OF  BUSINESSMEN  in  the 
Philippines  is  creating  a  holding 
company  that  will  give  financial 
incentives  to  U.S.-based  Filipinos  who 
market  the  country  as  a  destination  for 
outsourced  business  and  FT  services. 
The  group  would  pay  a  fee  —  for  ex¬ 
ample.  2%  of  the  resulting  contract  — 
to  Filipino-Americans  who  successful¬ 
ly  refer  U.S.  companies  to  service  pro¬ 
viders  in  the  Philippines. 

The  marketing  and  referral  initiative 
is  supported  by  the  nonprofit  Philip¬ 
pine  Small  and  Medium  Enterprises 
Development  Foundation  Inc.  in  Pasay 
City.  Initially,  the  group  will  hire  a 
marketing  company  in  the  U5.  and 
bold  business  networking  sessions  in 
at  least  eight  states.  O  Stm 
■  LAWRENCE  CASIRAYA. 

COMPUTERWORLD  PHILIPPINES 
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Aiiahiia's  Dopartment  of  \Mtr- 
ans' Affairs  in  Caakana  ia  eonafd* 
ariag  dunging  Meraaofft  OflGo 
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tog  aoflwan  far  abam  9,000  and 
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Plugfest  Signals  Serial 
Devices  Ready  to  Go 


av  LUCAS  MEAKIAN 

More  than  100  engineers  from 
storage  vendors  gathered  in 
New  Hampshire  last  month 
for  a  final  round  of  interoper¬ 
ability  testing  between  Serial 
Attached  SCSI  (SAS)  and  Seri¬ 
al  ATA  disk  drives,  organizers 
plan  to  announce  today. 

Vendors  said  the  plugfest 
was  the  last  hurdle  before  the 
shipping  of  bundled  SAS  and 
Serial  ATA  products  begins  in 
next  year’s  first  quarter. 

The  tests,  which  took  place 
at  the  University  of  New 
Hampshire’s  Interoperability 
Laboratory  in  Durham,  culmi¬ 
nated  three  years  of  develop- 
mem  of  the  SAS  protocol  and 
products  that  support  it.  ac¬ 
cording  to  Harry  Mason,  pres¬ 
ident  of  the  SCSI  Trade  Asso¬ 


ciation  in  San  Francisco. 

Mason  said  the  tests  found 
that  SAS  storage  devices  are 
fully  compatible  with  Serial 
ATA  drives  and  thus  allow  for 
the  creation  of  dual-purpose 
dbk  arrays  that  support  both 
ATA  and  SCSI  tcch^logies  in 
the  same  enclosure. 

Among  the  companies  that 
tested  products  at  the  plugfest 
were  Hewlett-Packard  Co.,  Hi¬ 
tachi  Ltd.,  Intel  Corp„  Seagate 
Technology  LLC  Adaptec 
Inc..  Dell  Inc.,  EqualLogic  Inc., 
LSI  Logic  CU>rp..  Maxtor  (3orp. 
and  NEC  Corp. 

For  decades,  disk  drives 
used  parallel  bus  tntcifaces  in 
storage  systems  that  weren’t 
based  on  Fibre  Channel  tedt- 
oology.  But  increasing  band¬ 
width  and  reliability  issues  put 


the  two  main  parallel  interface 
technologies  —  SCSI  and  ATA 
at  a  performance  disadvan¬ 
tage  compared  with  Fibre 
Channel  And  the  lack  of  com¬ 
patibility  between  the  parallel 
bus  technologies  kept  vendors 
from  offeriiQ  arrays  that  could 
share  (be  higher  performance 
characteristics  of  SCSI  and  the 
lower  cost  but  higher  capacity 
features  of  ATA. 

“SCSI  technology  was  cer¬ 
tainly  feeling  the  pinch  prior 
to  this,  and  I  think  SAS  brings 
new  life  to  SCSI,”  said  Arun 
Taneja,  an  analyst  at  Taneja 
Group  in  Hopkinton,  Mass. 

Tachnolagy  Drivers 

The  CISC  of  tiered  storage  sys¬ 
tems  that  offer  different  per¬ 
formance  and  capacity  levels 
is  being  driven  by  new  regula¬ 
tions.  such  as  the  Sarbanes- 
Oxiey  Act  and  the  Health  In¬ 
surance  Portability  and  Ac¬ 
countability  Act  that  require 
companies  to  store  and  be 


able  to  quickly  access  fman- 
cial  and  customer  data. 

Such  requirements  weren’t 
enough  to  convince  Laurence 
Whittaker,  supervisor  of  en¬ 
terprise  storage  management 
at  Toronto-based  retailer  Hud¬ 
son’s  Bay  Oi,,  that  combining 
two  disk  types  in  the  same 
chassis  is  a  good  idea.  “I  can 
.see  (small  and  medium-size 
businesses]  having  some  in¬ 
terest  in  it”  Whittaker  said. 
“But  1  just  think  if  you  have  a 
laige  business,  you’re  going  to 


Serial  Technology 
Offers: 

l).,a  . . 

A/:..  '  ..--..r  .  . 

.t  40  [)''  'Uti.--  . 

Sn|K>oM  f,'.'  ,(.•  tu 
tfi'  A1&  i(i(’  15  fn'  SCSI 


have  so  many  cabinets  on  the 
floor  anyway,  there’s  not  a  lot 
to  be  gained  by  having  multi¬ 
ple  disk  technologies  within 
the  same  frame." 

David  Woolf,  senior  R&D 
engineer  at  the  UNH  Interop¬ 
erability  Lab.  said  Serial  ATA 
can  nonetheless  offer  signifi¬ 
cant  cost  savings  to  users. 

“Hbre  Channei  is  quite  ex¬ 
pensive.  and  parallel  SCSI  is 
difficult  to  scale  for  speed 
(throughput),"  Woolf  said. 
“SAS  is  significantly  less  ex¬ 
pensive  and  has  a  road  map 
that  shows  it  can  be  scaled 
speed-wise  Car  past  what  par¬ 
allel  technology  offers." 

Serial  ATA  disk  arrays,  at 
1  to  2  cents  per  megabyte,  are 
about  half  as  expensive  as  SAS 
devices,  at  3  to  5  cents  per 
megabyte,  according  to  ana¬ 
lysts.  "While  end  users  might 
not  be  interested  in  the  nuts 
and  bolts  of  it.  certainly  there 
are  advantages  for  them." 
Woolfsaid.  051219 


AMD 


Wh  en  Microsoft  invests 


sixty  billion  dollars, 

they  don’t  use  just  any  processor. 


To  manage  this  much  money,  you  need  a  solution  that  offers  optimum  performance  and  real-time  flexibility.  Microsoft  found  both  in  the 
AMD  Opteron"*  processor  running  Windows  Server™  2003.  Enterprise  Edition.  The  AMD  Opteron  processor  with  its  Direct  Connect 
Architecture  already  powers  the  world's  highest  performing  2-way  and  4-way  x86  servers.  Now  Microsoft  Treasury  managers  are  using  it  to 
slash  the  time  it  takes  to  run  their  complex  risk-analysis  software.  Meanwhile,  they  have  the  flexibility  to  go  from  32-  to  64-bit  applications 
without  disrupting  their  business.  At  AMD.  we  believe  it's  critical  that  technology  should  migrate  on  your  terms  to  help  you  realize  your  unique  vision. 
It’s  one  of  the  reasons  why  leading  OEMs  offer  enterprise-class  solutions  powered  by  AMD  Opteron  processors.  Would  you  like  to  learn  just  bow  much 
of  a  difference  they  can  make  to  your  company?  Go  to  www.amd.com/eftterprise 
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Data  Center 

dcni  rcspon'if  and  chanjio 
tnanajicmont.  now  account  for 
about  55".'  of  a  typical  IT  dc- 
p.irtmcnt's  labor  costs,  accord- 
mj:  t*'  Scott.  But  she  s^tid  tlut 
as  companio  autt'matc  more 
of  those-  tasks,  data  centers 
w  ill  become  "more  like  a  fac¬ 
tory."  w  iih  less  need  for  hu- 
m.in  intervention. 

However,  several  IT  man- 
ajjcrs  amonf:  the  1.5t)(i  or  so  at* 
tendei-s  at  the  cimfcrcnce  said 
lhe\  don't  think  the  situation 
is  .ts  dire  for  technoUntv-  work¬ 
ers  as  Scott  made  it  seem. 

“l.ike  most  of  the  Gartner 
stuft'.  it's  son  of  a  Utopian 
state.  We'ix-  certainly  not  there 
vet."  said  Stevan  Lewis,  direc¬ 
tor  of  enterprise  planning:  at 
BMO  Financial  Group,  a  t1nan- 
cial  services  Hrm  in  Scarbor- 
oujih.  Ontario,  that  comprises 
the  Hank  of  Montreal  and  its 
subsidiaries. 

Lewis  said  he  thinks  that 
some  operational  iobs  will 
have  to  shift  to  other  areas 
within  IT  but  that  it  will  afleet 
aN>ut  25'' >■  of  data  center 


workers,  most  of  whi»ni  per¬ 
form  low-end  tasks. 

Gartners  forecast  pri»mpt- 
cd  Ken  \N'a}:ner.  manager  of 
Kawasaki  Motors  Corp.  USA's 
data  center  in  Irvini*.  Calif, 
to  renc<.-i  on  the  number  of 
changes  he  has  stvn  in  LI'  dur¬ 
ing  his  .^5-year  career  —  espe- 
dall>  those  wit'ught  by  the 
Web  “There's  been  so  much 
change  in  the  last  10  sears."  he 
said.  Gartner  tna>  turn  out  to 
be  right  about  the  future  of  IT 
opcratiims  jtibs.  Wagner  added, 
"hut  I  don't  know  if  anyoru- 
kmnvs  the  real  direction." 

Workforce  Evolution 

Liurcncc  Whittaker.  super\’i- 
sor  of  enterprise  storage  man¬ 
agement  at  retailer  Hudson's 
Bay  Co.  in  Toronto,  had  a 
more  blunt  response  to  Gart¬ 
ner's  prediction.  "h\  and  large. 
1  think  it's  hogwash."  said 
Whittaker,  who  didn't  attend 
last  week's  conference.  "  This 
is  something  Gartner  has  been 
big  on  for  years.  I  think  they 
really  minimize  the  value  of 
and  need  for  well-trained 
technology  wt'rkers  to  sup¬ 
port  ail  this  siufi'." 

LfHiking  back  twer  his  jH)- 


plus  years  in  IT.  Ed  Funk- 
houser.  director  of  global  IT 
operations  at  Paccar  Inc.  in 
Bellevue.  Wash.,  said  the 
change  in  the  workforce  that 
Gartner  forecast  is  part  of  an 
ongoing  evolution.  “It  took  50 
or  4tl  administrators  to  manage 
a  mainframe,  and  today  it  takes 
less  than  a  handful "  he  said. 

Rut  many  displaced  m.ain- 
framc  systems  administrators 
were  able  to  shift  to  Unix  or 
VMndows  systems  i>r  to  new 
jobs  in  areas  such  as  IT  securi¬ 
ty,  Funkhouser  added.  "In  IT. 
there  are  thousands  of  jobs 


and  disciplines."  he  said. 

Walter  Wilson,  deputy  CIO 
for  Ventura  County  in  Califor¬ 
nia.  is  training  the  county's  IT 
staffers  to  handle  more  so¬ 
phisticated  data  center  jobs, 
particularly  as  they  begin  in- 
I  stalling  virtualization  technol- 
I  ogy  “It's  a  training  issue  more 
;  than  anything  else,  because  all 
'  these  people  arc  very  capa- 
(  ble."hcsaid. 

•  The  situation  is  similar  at 
Santa  Clara  University,  said  H. 

!  Michael  Bonfert.  manager  of 
j  computer  operations  at  the 
I  California  school.  Bonfert  is 
I  shifting  mainframe  systems 
I  administrators  to  Intel-based 
'  servers  as  the  university 
moves  off  of  the  mainframe, 
and  he  said  the  job  losses  pre¬ 
dicted  by  Gartner  "didn't 
scare  me.” 

I  But.  Bonfert  added,  the  forc- 
,  cast  should  serve  as  a  warning 
to  IT  pmfessionals  to  stay  cur¬ 
rent  with  technology.  Whether 
data  center  woricers  can  make 
the  transition  as  the  demand 
for  IT  skills  changes  "dcpend.s 
on  the  individual."  he  said. 

Scott  said  chat  in  the  future, 
i  demand  w-ill  grow  for  cmploy- 
I  CCS  who  have  skills  in  project 
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Testing _ 

president  tif  technology  infra¬ 
structure  at  Inventure  Solu¬ 
tions  Inc.,  the  internal  IT  arm 
of  VanciMit  cr  City  Savings 
Credit  Union  in  British  Co¬ 
lumbia.  plans  to  K*gin  testing 
Microsoft  Corp.'s  Virtual  Serv¬ 
er  stiftwarc  next  year. 

Fernandes  said  he  expects 
to  have  to  train  his  staff  to  per- 
fo.rm  some  application  trou¬ 
bleshooting  tasks  but  added 
that  he  alM»  viiwvv  the  tt-siing 
process  as  an  t*ppi>rtunliy  to 
find  out  if  his  vendors'  use  of 
the  word  partner  ring.s  h»»llow. 

'f\irtner  is  this  great  word, 
but  how  many  spell  it  correct¬ 
ly^*'  K-mandes  said  He  added 
that  he  pirns  to  give  the  appli¬ 
cation  vendors  he  works  with 
this  message:  “You  say  that  I  m 
an  imponani  customer,  .so 
show  it." 

Fernandes  and  other  users 
said  they  have  two  strategies 


for  dealing  w  ith  vendor  resis¬ 
tance  to  testing.  One  apprt\aeh 
invoUx'S  training  internal  IT 
staffers  to  do  the  necessary 
work  on  virtualized  servers. 
The  other  might  be  called  the 
blunt-force  method:  threaten¬ 
ing  to  take  their  business  else¬ 
where.  Fernandes  said  he 
ihinlcs  that  in  <>5%  of  the  cases 
at  his  company,  he  could  find 
an  alternative  applicatkm  ven¬ 
dor  if  necessary. 

Demanding  Support 

Cionference  attendee's  said 
troubleshooting  software  is 
mi>st  likely  to  come  fixim 
point-solution  vendors  that 
develop  specialized  applica¬ 
tions.  often  for  vertical  in¬ 
dustries. 

Many  of  those'  vendors  arc 
a'latively  small  and  don't  have 
the  funding  or  expertise  to 
ie.st  their  H'ftwarc  in  virtual¬ 
ized  environments,  said 
William  Miller,  manager  of 
computing  services  at  Roche 
Diagnostics  Corp..  an  Indi- 


I  anapolls'based  maker  of  med¬ 
ical  equipment. 

Miller  plans  to  conduct  his 
own  tests  of  third-party  soft¬ 
ware  on  vinualized  servers  and 
then  seek  help  from  vendors  if 
I  there  are  problems.  He  said  he 
I  will  deliver  a  message  similar 
.  to  the  one  that  Fernandes  has 
in  mind:  “Support  me.  nr  I'll  go 
'  find  another  point  solution." 

Application  supptin  by 
;  third-parry  softwaa*  vendors 
I  is  "the  main  issue"  in  adopting 
virtualization  technology,  said 
Luis  Franco,  vice  president  of 
technology  at  Bancsco  Bank  in 
Venezuela.  Some  vendors 
“don’t  want  to  assure  the  qual¬ 
ity  of  their  appIication.s’'  on 
I  virtualized  servers.  Franco 
I  said,  adding  that  the  bank 
needs  to  increase  the  skills  of 
its  own  personnel  as  a  re.sult. 

In  the  long  run,  though,  ap¬ 
plication  vendors  may  have  lil- 
I  tic  choice  other  than  lo  make 
the  adoption  of  server  virtual- 
I  izacion  software  a.sea.sy  as  pos- 
I  sibic  for  users. 


Gartner  analyst  Tom  Biti- 
man  predicted  that  the  aver¬ 
age  CPU  utilization  rate  on 
two-way  Winiel  servers  will 
increase  to  dO'Hi  by  200B.  up 
from  about  2.5®»  now.  The  rise 
will  be  partly  driven  by  an  in¬ 
crease  in  virtualization  offer¬ 
ings.  including  Microsoft's 
Vinual  Server,  he  said. 

Some  users  believe  that  x86- 
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I  management  and  the  design  of 
I  IT  architectures,  and  for  those 
!  with  business  knowledge  and 
I  end-user  liaison  capabilities, 
j  Craig  Symons,  an  analyst  at 
I  Forrester  Research  Inc.,  said 
I  Gartner  typically  makes  bold 
predictions  in  order  to  get 
'  people's  attention.  Even  so.  he 
I  said  that  a  combination  of  fac¬ 
tors  likely  will  lead  to  a  signif- 
j  icant  number  of  data  center 
I  jobs  being  eliminated  over 
I  t  imc. "  I  n  a  20-ycar  horizon, 
j  50^'  might  even  be  conserva- 
I  tive."  Symons  said. 

Technology  changes  will 
eveniually  make  many  curreni 
data  center  jobs  irrelevant, 
agreed  Andrew-  Efstathiou.  an 
analyst  at  The  Yankee  Group 
in  Boston.  But  Efstathiou  said 
j  he  expects  Linux  and  other 
,  emerging  technologies  to  fos¬ 
ter  demand  for  new  types  of 
IT  technicians.  "I  can  easily 
expect  that  50"\'  of  the  existing 
jobs  will  be  eliminated,  but 
you  can  easily  have  as  many  or 
more  jobs  being  created."  he 
'  said.  C  51220 


Reporters  Thomas  Ho/?man 
and  Lucas  Mearian  contributed 
to  this  story. 


based  servers  are  so  inexpen¬ 
sive.  there's  no  point  in  buying 
virtualization  software  for 
them.  Bittman  said.  But  he  ar¬ 
gued  that  users  may  be  spend¬ 
ing  more  on  x86-based  scn'crs 
as  a  whole  than  they  do  on 
mainframes  or  Unix  systems. 

The  low-end  servers  also 
generate  a  lot  of  heat  because 
of  their  increasing  CPU  power 
and  density,  contributing  to 
cooling  problcnts  in  many 
data  centers,  Bittman  said 
[QuickLink  4W531. 

Dave  Mahaffey.  technical 
systems  administrator  at  the 
Santa  Clara  Valley  Water  Dis¬ 
trict  in  San  lose,  said  he  was  at 
the  conference  to  talk  to  ven¬ 
dors  and  research  virtualiza¬ 
tion  issues.  "Wc'vc  got  a  serv¬ 
er  for  every  application,  and 
it's  getting  out  of  hand,"  Ma- 
haffey  said.  He  added  that  he 
wants  to  consolidate  servers 
and  increase  their  CPU  uti¬ 
lization  rates  from  the  current 
level  of  between  I5*k'  and  20®o 
to  as  much  as  SOV  C  51221 
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Data  Center 

dmt  response  and  change 
management,  now  account  for 
about  55%  of  a  typical  IT  de¬ 
partment’s  labor  costs,  accord¬ 
ing  to  Scon.  But  she  said  that 
as  companies  automate  more 
of  those  tasks,  data  centers 
will  become  “more  like  a  fac¬ 
tory,"  with  less  need  for  hu¬ 
man  intervention. 

However,  several  IT  man¬ 
agers  among  the  1.S00  or  so  at¬ 
tendees  at  the  conference  said 
they  don't  think  the  situation 
b  as  dire  for  technology  work¬ 
ers  as  Scott  made  it  seem. 

Uke  mest  of  the  Gartner 
stuff,  it's  sort  of  a  Utopian 
state.  We're  certainly  not  there 
yet,”  said  Stevan  Lewis,  direc¬ 
tor  of  enterprise  planning  at 
BMO  Finaninal  Group,  a  fman- 
cial  services  firm  in  ScaiiK)r- 
ough,  Ontario,  that  comprises 
the  Bank  of  Montreal  and  its 
subsidiaries. 

Lewb  said  he  thinks  that 
some  operational  jobs  will 
have  to  shift  to  other  areas 
within  IT  but  that  it  will  affect 
about  25%  of  data  center 


workers,  most  of  whom  per¬ 
form  low-end  tasks. 

Gartner's  forecast  prompt¬ 
ed  Ken  Wagner,  manager  of 
Kawasaki  Motors  Corp.  USA's 
data  center  in  Irving,  Calif., 
to  reflect  on  the  number  of 
I  changes  he  has  seen  in  IT  dtir- 
ing  hLs  35-year  career  —  espe- 
ci^  those  wrought  by  the 
Web.  “There's  been  so  much 
change  in  the  last  10  years,”  he 
said.  Gartner  may  turn  out  to 
be  ri^t  about  the  future  of  IT 
(q>erations  jobs,  Wagner  added, 
“but  I  don't  know  if  anyone 
knows  the  real  direction.'* 

Workfoice  Evolution 

Laurence  Whittaker,  supervi¬ 
sor  of  enterprise  storage  man¬ 
agement  at  retailer  Hudson's 
Bay  Ca  in  Toronto,  bad  a 
more  blunt  response  to  Gart¬ 
ner's  prediction.  “By  and  large, 
1  think  it's  hogwash,”  said 
Whinaker,  who  didn't  anend 
last  week's  conference.  Thb 
b  something  Gartner  has  been 
big  on  for  years.  I  think  they 
really  minimize  the  value  of 
and  need  for  well-trained 
technology  workers  to  sup¬ 
port  all  this  stuff” 

Looking  back  over  hb  30- 


plus  years  in  IT,  Ed  Funk- 
houser,  director  of  global  IT 
operations  at  Paccar  lx>c.  in 
Bellevue,  Wash.,  said  the 
change  in  the  workforce  that 
Gartner  forecast  b  part  of  an 
ongoing  evolution.  “It  took  30 
or  40  adminbtrators  to  manage 
a  mainframe,  and  today  it  takes 
less  than  a  handful,”  he  said. 

But  many  displaced  main¬ 
frame  systems  adminbtrators 
were  able  to  shift  to  Unix  or 
Windows  systems  or  to  new 
jobs  in  areas  such  as  IT  securi¬ 
ty.  Funkhouser  added.  “In  IT, 
there  are  thousands  of  jobs 


and  disciplines,"  he  said. 

Walter  Wilson,  deputy  CIO 
for  Ventura  County  in  Caliibr- 
nia,  is  training  the  county's  IT 
staffers  to  handle  more  so- 
phbiicated  data  center  jobs, 
particularly  as  they  begin  in¬ 
stalling  virtualization  technol¬ 
ogy.  “It's  a  training  issue  more 
than  anything  else,  because  all 
these  people  are  very  capa¬ 
ble,”  he  said. 

The  situation  b  similar  at 
Santa  Clara  University,  said  H. 
Michael  Bonfcit,  manager  of 
computer  operations  at  the 
California  school  Bonfert  b 
shifting  mainframe  systems 
adminbtraiors  to  Intel-based 
servers  as  the  university 
moves  off  of  the  mainftame. 
and  he  said  the  job  losses  pre¬ 
dicted  by  Gartner  “didn't 
scare  me.” 

But,  Bonfert  added,  the  fore¬ 
cast  should  serve  as  a  wamuig 
to  IT  professionab  to  stay  cur¬ 
rent  with  technology.  Whether 
data  center  workers  can  make 
the  transition  as  the  demand 
for  IT  skilb  changes  “depends 
on  the  individual.”  be  said. 

Scott  said  that  in  the  ftiture, 
demand  will  grow  for  employ¬ 
ees  who  have  skills  in  project 


management  and  the  design  of 
IT  architectures,  and  for  those 
with  business  knowledge  and 
end-user  liaison  capabilities. 

Craig  Symons,  an  analyst  at 
Forrester  Research  Inc.,  said 
Gartner  typically  makes  bold 
predictions  in  order  to  get 
people's  attention.  Even  so,  he 
said  that  a  combination  of  fac¬ 
tors  likely  will  lead  to  a  signif¬ 
icant  number  of  data  center 
jobs  being  eliminated  over 
time.  "In  a  20-year  horizon, 
50%  might  even  be  conserva¬ 
tive.”  Symons  said. 

Technology  changes  will 
eventually  make  many  current 
data  center  jobs  irrelevant, 
agreed  Andrew  Efttathiou.  an 
analyst  at  The  Yankee  Group 
in  B^ton.  But  Ebtathiou  said 
he  expects  Linux  and  other 
cmciging  technologies  to  fos¬ 
ter  demand  for  new  types  of 
IT  technicians.  “1  can  easily 
expect  that  50%  of  the  exbdng 
jo^  will  be  eliminated,  but 
you  can  easily  have  as  many  or 
more  jobs  being  created."  he 
said.  O  51220 


Reporters  Thomas  Hoffhmn 
and  Lucas  Mearian  contributed 
totfiisstory. 
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Testing 


president  of  technology  infra¬ 
structure  at  Inventure  Solu¬ 
tions  Inc.,  the  internal  IT  arm 
of  Vancouver  City  Savings 
Credit  Union  in  Britbh  Co¬ 
lumbia,  plans  to  begin  testing 
Microsoft  Corp.'s  Virtual  Serv¬ 
er  software  next  year. 

Fernandes  said  he  expects 
to  have  to  train  hb  staff  to  per¬ 
form  some  application  trou¬ 
bleshooting  tasks  but  added 
that  he  also  views  the  testing 
process  as  an  opportunity  to 
find  out  if  hb  vendors'  use  of 
the  word  partner  rings  hollow. 

“Partner  b  thb  great  word, 
but  bow  many  spell  it  correct¬ 
ly?”  Fernandes  said.  He  added 
that  he  plans  to  give  the  appli¬ 
cation  vendors  he  works  with 
thb  message:  “You  say  that  I'm 
an  important  customer,  so 
show  it" 

Fernandes  and  other  users 
said  they  have  two  strategics 


for  dealing  with  vendor  resis¬ 
tance  to  testing.  One  approach 
involves  training  intern^  IT 
staffers  to  do  the  necessary 
work  on  virtualized  servers. 
The  other  might  be  called  the 
blunt-fbrce  method:  threaten¬ 
ing  to  take  their  business  else¬ 
where.  Fernandes  said  be 
thinks  that  in  9^  of  the  cases 
at  hb  company,  he  could  find 
an  alternative  application  ven¬ 
dor  if  necessary. 

Demanding  Support 

Conference  atieiidecs  said 
troubleshooting  software  b 
most  likely  to  come  from 
point-solution  vendors  that 
develop  specialized  applica¬ 
tions.  often  for  vertic^  in¬ 
dustries. 

Many  of  those  vcT>dors  arc 
'  relatively  small  and  don't  have 
the  funding  or  expertise  to 
test  their  software  in  virtual¬ 
ized  enviroTunents,  said 
William  Miller,  manager  of 
I  computing  services  at  Roche 
I  Eiiagoostics  Corp.,  an  Indi- 


anapolis-based  maker  of  med¬ 
ical  equipment 

Miller  plans  to  conduct  hb 
ovm  tests  of  third-party  soft¬ 
ware  on  virtualized  servers  and 
then  seek  help  from  vendors  if 
there  are  problems.  He  said  be 
will  deliver  a  message  similar 
to  the  one  that  Fernandes  ha.s 
in  mind:  “Support  me.  or  ril  go 
find  another  point  solution." 

Application  support  by 
third-party  software  vendors 
b  "the  main  issue”  in  adopting 
virtualization  technolc^.  said 
Lub  Franco,  vice  president  of 
technology  at  Banesco  Bank  in 
Venezuela.  Some  vendors 
“don't  want  to  assure  the  qual¬ 
ity  of  their  applications”  on 
virtualized  servers.  Franco 
said,  adding  that  the  bank 
needs  to  increase  the  skills  of 
its  own  personnel  as  a  result. 

In  the  long  run,  though,  ap¬ 
plication  vendors  may  have  lit¬ 
tle  choice  other  than  to  make 
the  adoption  of  server  virtual¬ 
ization  software  as  easy  as  pos¬ 
sible  for  users. 


Gartner  analyst  Tom  Bitt- 
man  predicted  that  the  aver¬ 
age  CPU  utilization  rate  on 
two-way  Wintel  servers  will 
increase  to  40%  by  2008.  up 
from  about  25%  now.  The  rise 
will  be  partly  driven  by  an  In¬ 
crease  in  virtualization  offer¬ 
ings.  including  Microsoft’s 
Virtual  Server,  be  said. 

Some  users  believe  that  x86- 
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based  servers  are  so  inexpen¬ 
sive.  there’s  no  point  in  buyii^ 
virtualizatioo  software  for 
them,  Bittman  said.  But  he  ar¬ 
gued  that  users  may  be  spend¬ 
ing  more  on  x86'b^ed  servers 
as  a  whole  than  they  do  on 
mainframes  or  Unix  systems. 

The  low-end  servers  also 
generate  a  lot  of  heat  because 
of  their  increasing  CPU  power 
and  density,  contributing  to 
cooling  problems  in  many 
data  centers,  Bittman  said 
{QuickUnk  499S3). 

Dave  Mahaffoy,  technical 
systems  administrator  at  the 
S^ta  Clara  Valley  Water  Db- 
crict  in  San  Jose,  said  he  was  at 
the  conference  to  talk  to  ven¬ 
dors  and  research  virtualiza¬ 
tion  issues.  "We've  got  a  serv¬ 
er  for  every  application,  and 
it's  getting  out  of  hand,”  Ma- 
haffey  said.  He  added  that  be 
wants  to  consolidate  servers 
and  increase  their  CPU  uti¬ 
lization  rates  from  the  current 
level  of  between  15%  and  20% 
to  as  much  as  50%.  O  51221 


CHANGE  IS  NOT  OPTIONAL 


HOW  YOU  CHANGE  IS. 

At  Peregrine,  we  know  the  only  constant  in  IT  is 
change.  And  to  succeed,  your  IT  and  business 
strategies  must  evolve  as  one.  Peregrine  shows  the 
way.  Our  leading  Asset  Management  and  Service 
Management  solutions  are  designed  to  help  you 
improve  IT  productivity  and  service  levels,  reduce 
compliance  risk,  and  control  costs.  In  short  we 
manage  change,  so  change  works  for  you. 


Change  is  the  nature  of  business. 
Evolve  Wisety”* 


www.peregrine.com 

866.463.1088 


Asset  Tracking 
Expense  Control 
Process  Automation 
Asset  Optimization 
Service  Establishfryent 
Service  Control 
Service  Alignment 
Service  Optimization 
Outsourcing 
Business  Continuity 
Consolidation 
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Oracle  Updates  Bl  Tools,  Content  Manager 

BY  MARC  L.  SOM0IHI  for  rival  PcopIcSoft  Inc^  Ora-  iotelligence  tools,  as  v/ell  as 

Amid  continued  uncertainty  cle  Corp.  this  week  intends  to  other  software  at  its  annual 

surrounding  the  fate  of  its  unveil  updates  to  its  content  user  conference. 

multibillioD-doUar  hostile  bid  management  and  business  Oracle  executives  will  also 


show  the  next  generation  of 
its  business  applications  to  a 
new  audience,  analysts  said. 
Oracle  OpenWorld  began  yes¬ 
terday  in  San  Francisco. 

Company  officials  said  the 
new  content  management 
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capabilities  are  aimed  at 
helping  Oracle  database  users 
de^  with  large  amounts  of 
unstructured  data,  such  as 
e-mails,  that  are  becoming 
increasingly  important  as 
businesses  work  to  comply 
with  growing  regulatory 
requirements. 

Without  offering  details. 
Rich  Buchheim.  senior  direc¬ 
tor  of  Oracle  content  manage¬ 
ment,  said  the  company  will 
show  improvements  to  the 
scalability,  security  and  usabil¬ 
ity  of  its  content  management 
software.  “To  deal  with  the 
deluge  of  information,  infor¬ 
mation  has  to  be  handled  in  a 
more  intelligent  way,“  he  said. 

The  company  is  ^o  expect¬ 
ed  to  unveil  stand-alone  busi¬ 
ness  intelligence  tools  and  im¬ 
provements  to  Daily  Business 
Intelligence,  the  operational 
reportii^  tool  in  its  E-Busi- 
ness  Suite  Hi  [QuickLink 
51061],  as  well  as  grid  comput¬ 
ing  capabilities  for  managing 
technology  in  the  data  center. 

Evaluating  Technologies 

Several  users  said  they're  in¬ 
terested  in  assessing  Oracle's 
new  technologies  at  the  show. 
David  Rudzinsky,  CIO  at  med¬ 
ical  instruments  maker  Holog- 
ic  Inc.  in  Bedford.  Mass.,  said 
he’s  focused  on  evaluating 
Oracle’s  new  business  intelli¬ 
gence  capabilities.  Hologic 
runs  Oracle  CRM  and  ERP 
software.  Rudzinsky  taiH  he 
likes  the  Daily  Business  Intel¬ 
ligence  tool  set,  though  it’s 
currently  too  rigid  to  allow 
anything  but  the  views  and 
reports  that  Oracle  has  pre¬ 
designed. 

Arthur  Meacham,  computer- 
assisted  dispatch  systems 
administrator  for  the  Caddo 
Parish  SHI  Communications 
District  in  Shreveport,  La., 
said  he’s  looking  for  advice  on 
upgrading  from  Oracle’s  Por¬ 
tal  9i  to  the  lOg  release. 

Oracle’s  main  goal  this  week 
will  be  to  preview  its  lliiO 
business  applications  to  po¬ 
tential  users,  said  John  Moore, 
an  analyst  at  ARC  Advisory 
Group  Inc.  in  Dedham,  Ma« 
Moore  said  be  eq>ects  execu¬ 
tives  to  discuss  Oracle’s  Peo- 
pleSoft  plans  in  private  ses¬ 
sions  with  users.  Ostiaa 
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New  CEO  Lays  Out  His  Priorities  for  CA 


BV  MATT  HAMBLEN 

Beleaguered  Computer  Associates  Iriter- 
national  Inc.  brought  in  veteran  IBM  ex¬ 
ecutive  John  Swainson  as  president  and 
CEO-elect  to  stabilize  the  company  after 
the  forced  departure  of predecessors 
amid  state  and  federal  investigations  of 
financial  irregulandes.  5wgmson  spoke 
with  Computerworid  receraiy  about  his 
challenges  and  early  plans  for  CA. 

What's  H  fool  Hia  to  tom  BU  aflor  26 
yoars  and  suddonly  b*  CEO-atoct  of  a  major 
company?  It's  a  little  daunting.  You 

come  in  and  know  nothing  and  _ 

nobody,  having  arrived  from  an 
environment  where  you  know 
everybody  and  everything.  You 
are  allowed  to  have  that  igno* 
ranee  for  24  hours.  It’s  a  little  in- 
timidatii^  to  say  the  least  [The 
CA  team]  has  maintained  a 
strong  sense  of  morale  and  re¬ 
sponsiveness  U)  customers.  My 
job  is  to  shape  an  evolutionary 
path  of  growth  after  several 
years  of  arrested  development 

Ara  customers  eonconwd  aliout  the  tooal 
probtoms  that  CA  mostly  setltod  in  lato 
summer?  I  am  not  yet  in  the  position  to 
assess  customer  relationships.  Fm  not 
so  naive  that  we  don’t  have  to  deal 
with  how  customers  see  us.  A  lot  of 
the  legal  and  self-inflicted  wounds  are 
in  fact  behind  us.  A  lot  but  not  all 

Tm  awe  you  hoard  ctntotner  attituilss 
about  CA  wMto  you  wen  at  IBM.  What  are 
lhair  toeInQi  about  CA  nanf?  CA  cus¬ 
tomers  are  relieved  the  issues  are  be¬ 
hind  us.  Fm  not  going  to  pretend  I 
know  bow  all  of  them  feel  yet  The 
fact  that  they  have  hung  with  us  and 
are  anxious  for  us  to  succeed  says 
something.  I  want  to  give  them  a  con¬ 
tinued  reason  to  justify  that  optimism. 
Our  customers  right  now  are  watching 
and  waiting  to  see  what  we  do  next. 

We  have  to  still  prove  to  them  we  are 
a  relevant  vendor  m  them  It's  not  a 
slam-dunk. 

How  you  be  daaino  wRh  tha  cua- 
toUMTS?  I  plan  to  talk  to  or  meet  with 
one  customer  every  day.  something 
that  I  did  at  my  old  job.  Sometimes  h 
is  a  phone  call  or  ol^  in  persoit  I 
don’t  feel  good  if  I  don't  t^  to  a  cus¬ 
tomer  every  day.  lam  a  very  customer- 
focused  guy. 

Whan  do  you  rank  etatoman  cemptrid  to, 
aay.  bwaatori  or  ompleyooa?  Customers 


pay  the  bills,  so  customers  always 
come  first  They  even  come  ahead  of 
investors.  You  cannot  build  a  durable 
business  if  you  do  not  have  satisfied 
customers. 

CA  World  was  postponed  just  before  you  ar¬ 
rived  and  then  roinstatod  in  your  firat  days 
on  die  job.  How  were  you  involved  in  thoM 
decisions?  The  decision  to  postpone 
was  made  pending  my  arrival.  When  I 
came  aboard,  I  supported  rhat  [deci¬ 
sion].  We  are  looking  now  for  dates  in 
the  fall  [of  2005].  I  am  anxious  to  do  it 
I  like  these  things. 

Vm  hoM  tatood  about  ro-examining 
dw  ctotus  of  tbo  500  or  so  products 
in  dio  CA  portioBo.  What  might  stoy 

or  go?  I  have  no  idea.  That’s  the 
honest  answer  But  FU  tell  you 
how  I  am  approaching  this  prob-  | 
lem  philosc^hically.  Fm  not 
loddng  to  dump  products,  and 
[I]  have  a  commitment  to  sup¬ 
port  customers  on  a  going- 
forward  basis.  It’s  logical  that  of  500 
products,  not  every  one  r^resents  the 
strategic  future  of  how  customers  want  | 
to  build  or  run  or  manage  their  enter¬ 
prise.  life-cycle  and  systems  manage¬ 
ment  and  security  are  very  highly 
valued  under  the  banner  of  enterprise 
infrastructure  management  We’re 
looking  for  ways  to  integrate  those 
[priorities]  and  augment  them  through 
acquisition  or  development  and  to 
really  concentrate  on  the  things  we’re 
particularly  good  at 

WM  you  Gondnua  to  ptaca  a  rihnce  on 
miinfrania  producta,  avw  though  aama  fi- 
nanctol  analyito  SM  that  tnarhat  dipping? 

Mainframe  products  accoimt  for  50% 
of  CA  revenue.  Quite  obviously,  well 
continue  to  focus  on  [the]  mainframp, 
and  we  believe  it's  a  very  durable  long¬ 
term  platform  for  a  lot  of  thmgiL  Main¬ 
frames  are  not  going  away.  IBM  is  sell¬ 
ing  more  than  at  any  time  in  history. 

We'd  be  crazy  not  to  foctis  on  [the] 
mainframe.  But  you  die  if  you  don’t 
continue  to  innovate  and  go  forward. 

We  want  to  be  the  systems  and  securi¬ 
ty  management  leader  around  [the] 
mainframe,  and  well  continue  to  in¬ 
vest  in  it  We  also  have  to  focus  vriiere 
growth  is  —  Windows.  Linux  and  dis¬ 
tributed  systems.  We  have  solutioas 
for  those.  Our  play  is  int^raced  solu¬ 
tions  around  enterprise. 

As  tor  tfto  aliort  to  raMtoa  CA*a  togil  imaa. 
6m  IL8.  Mtonwy  to  Nbw  IMt  ItoB  orriirad 


that  you  hira  a  compkanca  ofRcar.  What  is 
6w  status  of  that  aftort?  As  part  of  the 
deferred  prosecutorial  agreement,  we 
will  add  a  chief  compliance  oSlcer.  We 


are  in  the  process  of  finding  someone 
that  has  the  right  profile  and  gravitas 
to  be  able  to  do  job.  I  do  not  have 
any  idea  when  we  will  have  the  com¬ 
pliance  officer.  I  learned  a  long  timp 
ago  that  it  is  impossible  to  predict 
when  these  thii^  will  close.  O  StUS 
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CA:  Confusion  Already 


W 


found  3  CEO  afier  sfvcn 
monihs  of  acting-CEO 
Umbo,  CA's  users  had  rea¬ 
son  breathe  a  sigh  of 
relief.  Finally,  they  could 
k«)k  ahead  with  the  con¬ 
viction  (oops  —  poor 
choice  of  words)  that  the 
era  of  senior  manuge- 
mem  incompetence  had 
ended.  Then  the  next  day. 
fohn  Swainson.  the  26- 
year  IBM  veteran  who 
got  the  nod.  opened  his 
mouth,  and  a  new  round  of  confu¬ 
sion  began. 

To  explain,  we  need  to  back  up.  On 
Nov.  22.  CA  posted  a  letter  to  users 
on  its  Web  site  stating  that  the  next 
CA  W'orld  u.scr  and  partner  confer¬ 
ence.  originally  scheduled  for  April 
2005,  would  be  postponed  to  the 
spring  of 2006.  The  reason,  the  letter 
stated,  was  to  enable  the  company  “to 
transform  CA  World  into  a  true  in- 
du.stry  thought  leader  event  that  will 
focus  on  the  key  business  issues  and 
technology  industry  trends  that  arc 
mt>si  important  to  our  customers." 

Then,  on  Nov.  24.  Swainson  told 
Computerwtir/d  and  other  media 
outlets  that  CA  World  would  be 
held  in  2005  after  all,  sometime  in 
the  fall.  Well,  thank  you,  lohn.  But 
as  of  Dec.  1.  would  w’e  have  been  bet¬ 
ter  advised  to  believe  you  or  CA’s 
Web  site,  which  was  still  proclaiming 
that  the  event  would  be  postponed 
to  the  spring  of 2006?  (See  interview, 
page  19.) 

Ordinarily,  we  could  probably  pre¬ 
sume  that  Swainson  knew  what  he 
was  talking  about  and  that  CA  was 
just  lax  about  updating  its  Web  site 
to  reflect  the  change  of  heart.  But 
there’s  another  nagging  element  to 
all  this:  It's  difficult  to  know  the  ex¬ 
tent  to  which  Swainson  is  in  a  post- 


ELL.  GOOD  GRILL.  Talk  about  a 
missed  opportunity  to  send  out  a 
message  of  control  and  stability. 
When  Computer  Associates  an¬ 
nounced  on  Nov.  23  that  it  had 


tion  to  make  those  sorts 
of  decisions,  because  the 
board  opted  to  withhold 
the  keys  to  the  kingdom 
for  a  period  of  four  to  six 
months.  Swainson  will  be 
’’CEO-elect"  during  that 
time,  and  CA's  acting- 
CEO  limbo  will  persist. 
The  company  could  have 
conveyed  the  message 
that  Swainson  is  unques¬ 
tionably  qualified  to  lead 
CA  into  the  future  by 
simply  handing  over  the  keys  on  Day 
I.  Instead,  the  message  is.  “We’re  not 
really  sure  about  this  guy.  and  we’re 
going  to  need  four  to  six  months  to 
get  him  up  to  speed." 

It’s  difficult  to  imagine  that  if  CA 
had  managed  to  lure  somebody  like 
Steve  Mills,  the  guy  in  chaige  of 
IBM's  software  business,  that  this 
transition  period  would  have  been 
necessary  —  or  that  someone  like 
Mills  would  have  agreed  to  it. 

And  speaking  of  Mills,  there’s  an¬ 


other  red  flag  that  users  might  need 
to  be  concerned  about:  Given  Swain- 
son’s  tight  association  with  Mills,  the 
relationship  between  Swainson  and 
Mark  Barrcnechca  must  be  awfully 
awkward.  Barrcnechca.  CA's  execu¬ 
tive  vice  president  of  product  devel¬ 
opment.  has  been  outspoken  in  deni¬ 
grating  IBM’s  software  business  in 
general  and  Mills  in  particular.  After 
Mills  said  some  unflattering  things 
about  CA  last  April.  Barrcnechca 
told  me  that  "IBM  has  a  long  history 
of  failed  attempts”  with  software, 

(hat  "software  Is  an  afterthought  at 
IBM.”  and  that  Mills  is  the  “VP  of  af¬ 
terthought"  [QuickI.ink  46420].  That 
probably  didn’t  endear  him  to  Swain¬ 
son,  who  most  recently  was  vice 
president  of  IBM’s  worldwide  soft¬ 
ware  sales  force. 

The  bottom  line  is  that  CA  needs 
to  make  up  for  the  lost  opportunity, 
and  fast.  A  good  first  step  would  be 
to  ax  this  CEO-elect  nonsense  and 
give  Swainson  the  vote  of  confi¬ 
dence  users  need  to  sec.  As  it  is.  it's 
a  recipe  for  confusion.  And  CA's 
users  have  been  forcc-fed  that  dish 
long  enough.  O  51111 


I  I  li  G-'  \  H  )  -S  M  ' 

Using  PR 
To  Win  the 
Info  War 

As  COMMANDER  in 
chief  of  the  Conti¬ 
nental  Army,  George 
Washington  learned  a  lesson 
that  many  IT  leaders  lamen¬ 
tably  come  to  appreciate  loo  late  in 
their  careers:  True  victory  is  accom¬ 
plished  not  on  the  battlefield,  but  in  the 
hearts  and  minds  of  those  engaged.  In 
other  words,  public  relations  matters. 

Washington  lost  more  battles  than 
he  won.  Despite  this,  he  was  eulogized 
by  Revolutionary  War  hero  Light- 
Horse  Harry  Lee  as  being  “first  in  war. 
first  in  peace,  first  in  the  hearts  of  his 
countrymen."  When  you  arc  gone,  will 
IT  be  first  in  the  hearts  and  minds  of 
your  CEO  and  board  of  directors? 

IT  leaders  find  themselves  waging  a 
high-stakes  info  war. 

True  victory  for  IT 
leaders  lies  not  in 
getting  enterprise 
systems  deployed  or 
annual  budgets  ap¬ 
proved.  It  lies  in  cap¬ 
turing  the  imagina¬ 
tions,  respect  and 
energies  of  a  broad 
and  diverse  set  of 
stakeholders,  includ¬ 
ing  suppliers,  cus¬ 
tomers  and  line-of- 
business  executives. 

Soldiers  fighting 
battles  with  projectile  weapons  speak 
of  the  “fog  of  war"  —  confusion  about 
what  is  going  on.  Info  warriors  speak 
of  the  “fog  of  facts"  —  confusion 
about  which  information  is  to  be  be¬ 
lieved.  which  sources  are  credible  and 
which  version  of  reality  is  to  be  acted 
upon.  In  a  world  of  multiple  sources 
of  information  and  24-hour  decision¬ 
making.  the  very  character  of  infor¬ 
mation  is  changing.  A  "fact”  is  no 
longer  a  fact. 

Today,  anyone  —  vendors,  consul¬ 
tants.  reporters,  disgruntled  former 
employees  ^  can  report  on  and  dis¬ 
tort  what  is  going  on  in  your  IT  shop. 
Not  a  week  goes  by  in  which  a  mind 
important  to  you  —  that  is.  an  info 
target  —  isn't  presented  with  a  version 
of  (he  facts  (hat  isn’t  consistent  with 
or  sympathetic  to  where  you  are  going 
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CA:  Confusion  Already 


"ELL,  GOOD  GRIEF.  Talk  about  a 
missed  opportunity  to  send  out  a 
message  of  control  and  stability. 
When  Computer  Associates  an- 
noimced  on  Nov.  23  that  it  had 


found  a  CEO  after  seven 
months  of  acting-CEO 
Umbo,  CA’s  users  had  rea* 
son  to  breathe  a  sigh  of 
reUef  FinaUy.  they  could 
look  ahead  with  the  con* 
viction  (o(^  —  poor 
choice  of  words)  that  the 
era  of  senior  manage¬ 
ment  incompetence  had 
ended.  Then  the  next  day. 

John  Swainson,  the  26- 
year  IBM  veteran  who 
got  the  nod.  opened  his 
mouth,  and  a  new  round  of  confu¬ 
sion  began. 

To  explaia  we  need  to  back  up.  On 
Nov.  22,  CA  posted  a  letter  to  users 
on  its  Web  site  stating  that  the  next 
CA  World  user  and  partner  confer¬ 
ence.  originally  sch^uled  for  April 
2005.  would  be  postponed  to  the 
spring  of 2006.  The  reason,  the  letter 
stateil  was  to  enable  the  company  *^o 
transform  CA  World  into  a  true  in¬ 
dustry  thought  leader  event  that  will 
focus  (m  the  key  busmess  issues  and 
technok^  industry  trends  that  are 
most  important  to  our  customers.” 

Then,  on  Nov.  24,  Swainson  told 
Computerworld  and  other  media 
outlets  that  CA  World  would  be 
held  in  2005  aAer  all,  sometime  in 
the  foil  WeU.  thank  you,  John.  But 
as  of  Dec.  I,  would  we  have  been  bet¬ 
ter  advised  to  believe  you  or  CA's 
Web  site,  which  was  sdll  proclaiming 
that  the  event  wotild  be  postponed 
to  the  spring  of  2006?  (See  interview, 
page  19.) 

Ordinarily,  we  cpuld  probably  pre¬ 
sume  that  Swainson  knw  what  he 
was  talking  about  and  that  CA  was 
just  lax  about  updating  its  Web  site 
to  reflect  the  clujige  of  heart  But 
there’s  another  nagging  element  to 
all  this:  It's  difficult  to  know  the  ex¬ 
tent  to  which  Swainson  is  in  a  posi¬ 


tion  to  make  those  sorts 
of  decisions,  because  the 
board  opted  to  withhold 
the  keys  to  the  kingdom 
for  a  period  of  four  to  six 
months.  Swainson  will  be 
XEO-elect"  during  that 
time,  and  (^'s  acting- 
CEO  Umbo  will  persist 
The  company  could  have 
conveyed  the  message 
that  Swainson  is  unques¬ 
tionably  qualified  to  lead 
CA  into  the  future  by 
simply  handing  over  the  keys  on  Day 
1.  Instead,  the  message  is,  "We’re  not 
really  sure  about  this  guy,  and  we’re 
going  to  need  four  to  six  months  to 
get  him  up  to  speed." 

It’s  difficult  to  imagine  that  if 
had  managed  to  lure  somebody  like 
Steve  Mills,  the  guy  in  charge  of 
IBM’s  software  business,  that  this 
transition  period  would  have  been 
necessary  —  or  that  someone  Uke 
Mills  would  have  agreed  to  it. 

And  speaking  of  Mills,  there’s  an¬ 


other  red  flag  that  users  might  need 
to  be  concerned  about:  Given  Swain- 
son's  ti^t  association  with  MiUs.  the 
relationship  between  Swainson  and 
Mark  Barrenecbea  must  be  awfully 
awkward.  Barrenechea,  CA’s  execu¬ 
tive  vice  president  of  product  devel¬ 
opment.  has  been  outspoken  in  deni¬ 
grating  IBM’s  software  business  in 
general  and  Mills  in  particular.  After 
MiUs  said  some  unflattering  things 
about  CA  last  April,  Barrenecbea 
told  me  that  "IBM  has  a  long  history 
of  failed  attempts”  with  sofhvare, 
that  "software  is  an  afterthought  at 
IBM,”  and  that  Mills  is  the  "VP  of  af¬ 
terthought”  l(^uickLink  464201.  That 
prob^ly  didn't  endear  him  to  Swain¬ 
son,  who  most  recently  was  vice 
president  of  IBM’s  worldwide  soft¬ 
ware  sales  force. 

The  bottom  line  is  that  CA  needs 
to  make  up  for  the  lost  opportunity, 
and  fast.  A  good  first  step  would  be 
to  ax  this  CEO-elect  nonsense  and 
give  Swainson  the  vote  of  confi¬ 
dence  users  need  to  see.  As  it  is,  it's 
a  recipe  for  confusion.  And  CA’s 
users  have  been  force-fed  that  dish 
long  enough.  O  Slltl 


THORNTON  A.  MAY 

Using  PR 
To  Win  the 
Info  War 

As  COMMANDER  in 
chief  of  the  Conti¬ 
nental  Anny,  George 
Washington  learned  a  lesson 
that  many  IT  leaders  lamen- 
tably  come  to  appreciate  too  late  in 
their  careers:  Triie  victory  is  accom¬ 
plished  not  on  the  battlefield,  but  in  the 
hearts  and  minds  of  those  engaged.  In 
other  words,  public  relations  matters. 

Washington  lost  more  battles  than 
he  won.  De^te  this,  be  was  eulogized 
by  Revolutionary  War  hero  Ugbt- 
Horse  Harry  Lee  as  being  "first  in  war. 
first  in  peace,  first  in  the  hearts  of  his 
countrymen."  When  you  are  gone,  will 
IT  be  flrst  in  the  hearts  and  minds  of 
your  CEO  and  board  of  directofs? 

IT  leaders  find  themselves  waging  a 
high-stakes  info  war. 

True  victory  for  IT 
leaders  lies  not  in 
gettu^  enterprise 
systems  deployed  or 
annual  budgets  ap¬ 
proved.  It  lies  in  cap¬ 
turing  the  imagina¬ 
tions.  respect  and 
energies  of  a  broad 
and  diverse  set  of 
stakeholders,  includ¬ 
ing  suppliers,  cus¬ 
tomers  and  Une-of- 
business  executives. 

Soldiers  fighting 
battles  with  projectile  weapons  speak 
of  the  “fog  of  war"  —  confusion  about 
what  is  going  oil  Info  warriors  speak 
of  the  “fog  of  facts"  —  confusion 
about  laduch  information  is  to  be  be¬ 
lieved.  which  sources  are  credible  and 
which  version  of  reality  is  to  be  acted 
upoiL  In  a  world  of  multiple  sources 
of  information  and  24-bour  decision¬ 
making.  the  very  character  of  infor¬ 
mation  is  chan^ng.  A  "fact”  is  no 
longer  a  fact. 

Today,  anyone  —  vendors,  consul¬ 
tants,  reporters,  disgruntled  former 
employees  —  can  report  on  and  dis¬ 
tort  what  is  going  on  in  your  FT  shop. 
Not  a  week  goes  by  in  which  a  mind 
important  to  you  ~  that  is,  an  info 
target  isn't  presented  with  a  version 
of  the  facts  that  isn't  consistent  with 
or  sympathetic  to  where  you  are  going 


ADVERTISING  SUPPLEMENT 


INTELLIGENT 

"SYSTEMS- 

ON-A-CHIP" 

EARNING 


IT  ACCOLADES 

BY  ELISABETH  HORWITT 


Broadband  IP  network  convergence  has  been  redefining  itself  of 
late,  both  as  a  market  and  as  a  corporate  strategy.  As  a  result, 
“We’ve  emerged  from  the  ‘kick-the-tires’  phase,"  says  lohn  Roese, 
CTO  of  Enterasys  Networks.“CIOs  are  seeing  something  meaning¬ 
ful  at  the  end  of  the  tunnel  that  will  make  workers  more  efficient 
and  effective,”  and  their  companies  more  competitive. 


As  the  technology  has  matured,  and 
products  have  become  more  standards- 
based,  corporate  technical  decision 
makers  have  gained  confidence  that  a 
converged  IP  network  infrastructure 
will  provide  a  firm,  forward-migratable 
foundation  for  the  next  wave  of  strate¬ 
gic  business  applications.  “Our  cus¬ 
tomers  told  us  they  wouldn't  go  with  IP 
telefrfiony  if  they’re  just  getting  an  IP 
phone  that  acts  like  their  former  tele¬ 
phone,  or  if  they’re  just  moving  from 
one  proprietary  architecture  to  anoth- 
err  Roese  notes. 

A  lot  of  big  corporations  have  spent 
the  last  few  years  consolidating  data 
streams  from  multiple  applications 
and  access  points  onto  a  single  back¬ 
bone  based  on  TCP/IP  and  high-speed 
Ethernet.  Recent  statistics  tell  the 
story:  Dell'Oro  Group  expects  Gigabit 
Ethernet  port  shipments  to  at  least 
double,  from  13  million  units  in  2003 
to  more  than  27  million  in  2004, 
according  to  Seamus  Crehan,  a  direc¬ 
tor  at  the  networking  and  telecommu¬ 


nications  research  firm. 

More  recently,  companies  have 
b^un  moving  beyond  broadband  con¬ 
verged  data  networking  toward  a  fully 
integrated,  enterprise  network  infra¬ 
structure  that  can  handle  the  lull  range 
of  services:  from  teleconferencing  to 
storage  networkii^  to  server  clustering. 
Helping  them  to  reach  their  goal  with  a 
minimum  of  pain  is  an  emerging  breed 
of  intelligent  network  hardware  based 
on  highly  integrated  semiconductors 
known  as  “systems-on-a-chip.” 

“Whether  you’re  talking  about  VoIP 
[voice  over  IP|  ^r  iSCSI  storage,  it’s  not 
just  about  high-speed  connectivity  any¬ 
more,  you  have  to  move  bits  around  the 
network  intelligently,  in  order  to  ensure 
security,  rdiability,  and  quality  of  serv¬ 
ice.”  says  Roese. 

Increasingly  intelligent  and  versatile 
IP  network  infrastructures  are  forming 
the  basis  for  a  wave  of  new  applications 
that  are  providing  businesses  with 
strategic  advantages  as  well  as  signifi¬ 
cant  cost  savings. 


Moving  Beyond  VoIP 

Consider,  for  example,  the  veritable 
explosion  in  American  companies'  use 
of  VoIP  technology  that  merges  voice 
and  data  onto  a  single  IP/Ethernet 
infrastructure.  A  2003  IDC  report  pre¬ 
dicted  that  U.S.  spending  on  hosted 
VoIP  will  reach  approximately  $281 
million  this  year,  growing  to  SI  billirm 
next  year  (2005).  By  2007,  revenue  is 
expected  to  reach  S6.7  billion. 

In  a  2003  Nemertes  Research  survey 
of  42  large  corporations,  62%  of  respon¬ 
dents  said  they  were  currently  using  IP 
telephony;  19%  were  ninnii^  a  trial: 
and  the  rest  planned  to  implement  it 
within  the  next  year  or  two. 

The  reported  return  on  investment 
(ROD  and  measurable  benefits  the  VblP 
pioneers  cite  are  impressive,  and 
include  lower  maintenance  and  man- 
^ement  costs,  the  result  of  dealing  with 
one  set  of  network  boxes,  interfaces, 
and  cables  instead  of  two  or  more. 
Companies  report  saving  thousands  of 
doUars  per  month  by  using  IP  telephony 
to  bypass  long-distance  tdl  calls;  global 
firms  have  saved  much  more  (m  inter¬ 
national  calls. 

And  out  savii^  are  just  the  begin¬ 
ning.  Converged  IP  networking  has 
paved  the  way  for  a  new  generation  of 
abdications  and  software  tools  that  are 
boosting  end-user  productivity  and 
helping  companies  gain  a  competitive 
advantage.  »» 


DAWNING  OF  THE  CONVERGED  IP  NETWORK 


ADVERTISING  SUPPLEMENT 


WorMwidt  EtlicniM  ASSP/ASIC  Sanuconductor 
Revenue  Share  by  Vendor,  2003 

Other  (11.4%) 


-  t«bI  =  $2.07B 

Mott:  *O0ter'  includes  AOMtsk  (now  Infineon).  Agdent.  AMCC, 
AMD.  Cicada  (now  Vitesse),  Fujitsu,  IBM  Micit).  NEC. 
PMC-Swna.  SwitchCeie,  Texas  Instruments,  Toshiba. 


instant  voice  messaging  is 
a  pertea  example,  says  |eff 
Snyder,  a  research  vice  presi¬ 
dent  at  Gartner.  "You  click  un 
my  name,  and  my  phone 
rings,  no  matter  where  I  am; 
as  long  as  i’m  logged  onto  the 
network,  it  knows  how  to 
reach  me.  Drag  in  a  col¬ 
league's  name  and  you  have 
an  ad  hoc  conference  call." 

Another  promising  devel¬ 
opment  is  convergence  on 
end-user  devices  across  a 
unified  end-to-end  infra¬ 
structure.  Broadcom  has  introduced 
switch  and  VdJP  chipsets,  for  example, 
that  will  enable  OEMs  to  build  Wi-Fi*- 
enabied  ceU  phones,  "so  you  can  roam 
between  the  celltdar  and  Wi-Fi  IP  teleph¬ 
ony  worlds  with  one  device"  says  Roese. 

User  Demand  Driving 
IP  Convergence 

Indeed,  user  demand  is  one  of  the  biggest 
drivers  behind  converged  IP  networking 
strategies.  "Users  want  voice,  data,  and 
video  services  delivered  in  an  integrated 
fashion,"  to  support  the  growing  b^y  of 
muliimedia  productivity  tools  and  appli¬ 
cations  being  offered  on  desktops,  lap¬ 
tops,  and  the  latest  mobile  computing 
devices,  says  Charles  Salameh,  vice  presi¬ 
dent  of  emerging  solutions  at  Bell 
Canada,  a  telecom  service  provider  and 
systems  integrator. 

FT  decision  makers  see  converged  IP 
networkiiig  as  their  best  shot  at  meeting 
users'  multimedia  needs  over  the  long 
haul.  And  they're  counting  on  intelligent 
Gigabit  Ethernet  hardware  to  help  (hem 
with  quality  of  service  (QoS)  and  securi¬ 
ty  man^emern.  across  an  increasingly 
diverse  set  of  network  services  and 
media  traffic. 

To  address  this  demand,  networking 
vendors  are  providing  their  latest  Gigabit 
Ethernet  products  with  the  intelligence  to 
handle  these  tasks  and  a  great  deal  more. 
And  much  of  (his  high-level  intelligence 
resides  in  silicon  sdutions  that  have  tra¬ 
ditionally  been  the  "nuts  and  bedts"  of 
networkii^  equipment,  says  Kevin  Tolly, 
president  of  The  Tolly  Group  research 
firm.  In  the  last  year  or  two,  (hiptnakers 
like  Broadcom  "have  gone  up  the  stack 
tremendously,  and  have  preintegrated  a 
lot  of  the  fonctkmality  and  capabdities." 
he  adds. 

"The  trend  is  toward  supporting  a 


higher  capacity  of  networking  interfaces 
and  a  broader  range  of  services  on  the 
same  piece  of  equipment,  and  using  sili¬ 
con  intelligence  to  handle  sophisticated 
management  of  converged  applications 
running  across  a  single  Ethernet  net¬ 
work,”  says  Ford  G.  Tamer,  group  vice 
president  of  Broadcom’s  Network 
Infrastructure  Business  Group,  "Such 
migration  to  converged  IP  networks  can 
mean  huge  savings  in  maintenance 
costs,”  he  adds.  "You’re  managing  your 
desktops,  laptops,  VoIP  phones,  wireless 
access  points,  security,  and  storage  needs 
within  (he  same  equipment,  instead  of 
across  two  or  more  boxes.” 

Broadcom  in  Step 
with  Key  Trends 

Broadcom*  silicon  solutions  are  at  the 
forefront  of  these  trends.  For  example, 
systems  using  Broadcom's  StrataXGS* 
family  of  enterprise  switch  products  offer 
enhanced  scai^ility  and  multilayer  intel¬ 
ligence  to  address  the  different  service- 
level  needs  of  voice,  video,  and  data  traf¬ 
fic  within  business  environments,  Tamer 
says.  This  enables  IT  managers  to  maxi¬ 
mize  network  uptime  and  ensure  securi¬ 
ty  while  promoting  ease  of  management. 

Furthermore.  Broadcom's  NetXtreme~ 
n  C-NIC  (Converged  NIC)  is  the  first 
Gigabit  Ethernet  NIC  that  can  simultane¬ 
ously  perform  storage  networidng,  high- 
performance  clustering,  accelerated  data 
networking,  and  remote  system  manage¬ 
ment  on  a  standard  Ethernet  network, 
according  to  Allen  Light,  Broadcom's  serv¬ 
er  controller  product  line  manager. 

One  of  the  big  advantages  of  the  C-NIC 
is  its  ability  to  offload  a  variety  of  func¬ 
tions  from  the  host  CPU.  "freeing  up  pro¬ 
cessing  cycles  and  enabling  the  server  to 
handle  other  functions.”  says  Sean  Lavey, 
a  program  manager  at  IDC.  For  example. 


Broadcom’s  C-NIC  has  a  TCP/IP  Offload 
Engine  (TOE)  that  takes  over  the  process¬ 
ing  of  TCP/IP  stacks. 

During  a  Microsoft*  benchmark  test, 
Broadcom's  BCM5706  C-NIC,  equipped 
with  a  TOE.  had  a  throughput  of  1.8 
Gbit/sec  at  20%  CPU  utilization,  and  used 
only  3  watts  per  Gigabit.  In  comparison, 
the  same  Windows*  server  equipped 
with  an  Intel*  non-TOE  Gigabit  Fernet 
NIC  had  about  1.5  Gbit/sec  at  95%  CPU 
utilization,  and  used  90  watts  per  Gigabit. 

Other  key  C-NIC  offloading  capabili¬ 
ties  include: 

■  Remote  Direct  Memory  .Access 
(RDMA)  that  enables  servers  in  high¬ 
speed  dusters  to  write  directly  to  each 
other’s  memory,  bypassing  the  bus. 
This  eliminates  potential  bus  bottle¬ 
necks  and  boosts  performance, 
enabling  clustered  X-86-based  servers 
to  handle  applications  that  ordinarily 
require  high-end.  and  much  more 
expensive.  Unix  machines. 

■  Support  of  the  iSCSI  protocol  that 
allows  IT  professionals  to  move  block- 
level  storage  from  a  dedicated  Rbre 
Channel  SAN  onto  a  shared  converged 
IP  network. 

C-NICs,  and  other  recent  Broadcom 
offerings,  also  represent  the  leading  edge 
of  an  important  industry  (rend,  in  which 
network  equipment  manufacturers  build 
their  producu  with  more  “sysiems-on-a- 
chip”  and  fewer  custom  ASICs.  In  this 
way.  they  can  bring  new  products  to  mar¬ 
ket  faster  and  more  cheaply,  which  trans¬ 
lates  into  more  choices  and  lower  costs 
for  customers,  says  IDC’s  Lavey. 

Enterasys  used  Broadcom’s  StrataXGS 
silicon  as  a  critical  component  for  its 
Matrix  C2  line  of  layer  3  stackable  IP 
switches,  announced  to  September  2004. 
"The  intelligence  of  Broadcom's  compo¬ 
nentry  provides  the  foundation  for  many 
security  (unctions,  enabling  support  for 
multimodal  systems,  predictability,  and 
integration.”  says  Roese.  By  using 
Broadcom  silicon,  with  built-in  capabili¬ 
ties  like  classification  and  policing, 
Enterasys  was  able  to  deliver  the  new 
switches  in  about  eight  months,  “more 
cheaply,  and  compromise-free,"  he  adds. 
In  contrast,  building  the  product  from 
scratch  internalh;  using  custom  ASICs, 
would  have  taken  about  18  months.  The 
benefit  for  Enterasys’  customers:  "They 
get  state-of-the  art  equipment,  while  still 
keying  up  with  the  market's  progression 
toward  faster,  cheaper  equipment.” 


DAWNING  OF  THE  CONVERGED  IP  NETWORK 


ADVERTISING  SUPPLEMENT 

Delivering  End-to-End  Manageability 


AS  COMPANIES  GET  SERIOUS  ABOUT  CONVERGED  IP  NETWORKING, 
netwoflc  managers’  jobs  are  getting  both  more  compJex— 
and  a  whole  lot  easier. 

Certainly,  it  can  be  thcky  maintaining  a  seamless  traffic  flow 
when  many  different  types  of  media  and  applications  are  sharing 
the  same  IP  fabric.  On  the  other  hand,  "every  network  administrator 
understands  the  Internet  Protocol,’  says  Allen  Ligin.  Broadcom's 
server  controller  product  line  manager.  Network  staffers  are  saving 
time  and  trouble  by  making  use  of  familiar.  SNMP-based  tools  to 
manage  voice,  data,  video,  even  storage  on  a  single,  integrated 
infrastructure. 

Furtheimore.  converged  networking  "allows  our  customers  to 
move  from  wriiat  I  cal!  a  manufacturing-line  mentality,  where  stor¬ 
age.  networking,  and  clustering  are  each  aAninistered  separately 
and  on  separate  fabrics,  to  a  single,  lower-cost  IP-based  infrastruc¬ 
ture."  says  F^l  Perez,  vice  president  of  storage,  networks,  and 
infrastructure  at  Hewlett-F^lonfs  Industry  Standard  Server  busi¬ 
ness.  With  fewer  proprietary  protocols  and  fewer  boxes,  network 
and  element  management  becomes  much  sin^r. 

Beyond  diat.  IP  networking  equipment  keeps  getting  smarts, 
increasingly  able  to  take  over  complex  and  time-consun^  man¬ 
agement  tasks  ftom  human  administrator 

lirttliigent  "Systems-on-a^Chip" 

"We're  moving  toward  automated  network  management,’  Perez 
notes.  Switches,  edge  routers,  and  NICs  equi(^  with  intelli¬ 
gent  'systems-on-a-chip*  are  taking  more  and  more  responsibil¬ 


ity  for  end-to-end  security,  quality  of  service  (OoS),  and  band¬ 
width  allocation. 

For  example.  Broadcom  and  its  OB^  painers  are  corning  out 
with  switches  that  can  automatically  prioritize  and  load  balance  dif¬ 
ferent  types  of  network  traffic  across  different  ports.  As  a  result, 
human  technicians  spend  less  tune  tweaking  and  fine-tuning  net¬ 
work  equitmient  in  order  to  ensure  QoS  on  multimedia  networks. 

Intelligent  silicon-based  hardware  is  also  talcing  over  demanding 
network  ta^  like  processing  TCP/IP  stacks  and  encryption.  C-NICs 
(Cwiverged  NICs)  can  offload  chores  from  host  CPUs;  subskfiarY 
processors  can  take  over  jobs  from  central  processors  on  network 
switches.  The  result:  better  performance  and  longer  ntetvals 
between  t4)grades. 

In  addition  to  improving  server  and  network  performance.  C-NICs 
simpify  the  interfaces  to  each  server  and  rack.  They  require  fewer 
connection  ponts.  cables,  and  adapter  cards.  Upgrades  and  the 
addition  of  new  featires  become  sn^  as  wel.  says  Broadcom's 
Light.  Because  all  changes  are  localized  on  the  network  card,  they 
are  tran^iarent  to  the  host  operating  system  and  app6cations 

Easing  the  Admiaistretor's  Hm 

What  this  bods  dcMRi  to  is  a  lighter  burden  on  human  technicians. 
Indeed,  if  network  hardware  continues  to  get  smarter.  Gigabit 
Ethernet  TCP^  nehrvorks  mI  soon  be  able  to  manage  themselves. 
The  undertying  hardMare  vvi  respond  quickfy  and  autornaticaly  to 
uneiqiected  events  and  problems,  and  fT  and  network  maragers  wi 
be  free  to  focus  on  more  proactive  and  business-specific  tasks. 


Not  All  Silicon  Is  Created  Equal 

All  this  is  good  news  for  corporate  decision 
makers.  But !(%  adds  a  caveat  It’s  becom¬ 
ing  crucial  that  IT  ewcutives  “look  under 
the  hood”  when  shopping  for  Gigabit 
Ethernet  equipment,  and  ask  a  fw  pointed 
questiom  about  the  brand,  feature  sets,  and 
configuration  of  the  underlying  diipsets — 
before  making  a  buying  decision.  One 
important  question  to  ask:  Will  it  interop¬ 
erate  with  other  types  of  equipment? 

Broadcom  has  a  three-pronged  interop¬ 
erability  strategy.  First,  it  has  been  an 
industry  leader  in  both  the  development 
and  imf^ementation  of  key  industry  stan¬ 
dards  like  RDMA,  iSCSI.  Wi-Fi,  and  the 
IEEE  802.1X  Extensible  Authentication 
Protocol.  Second,  it  does  extensive  testing 
to  ensure  all  of  its  products  are  badcward 
and  forward  interoperable,  and  can  sup¬ 
port  legacy  applications.  Finally. 
Broadcom  provides  sufi^rt  for  vendor- 
and  operatii^  system-specific  de  facto 
standards  that  enable  networking  equip¬ 
ment  to  work  seamlessly  with  the  host 
computing  platform. 


For  examjiJe,  Broadcom  currently  (No- 
vides  the  only  TOE  cm  a  chip  that  interfeces 
with  Microsoh's  TCP  Chimney.  Siqiport  of 
Chimney  enalries  TCP/IP  Offload  bigines 
to  inter^  directly  with  Windows,  offload¬ 
ing  TCP/IP  processir^  for  all  networic  traf¬ 
fic.  Broadcom's  Light  explains.  Without  that 
operating  system  support,  a  TOE  can  ont>‘ 
work  on  an  iSCSI  ada^  that  bypasses  the 
operating  system. 

How  Well  Does  It  Perform? 

IT  managers  also  need  to  chedi  published 
benchmark  tests  that  compare  the  per¬ 
formance  of  the  same  type  of  chip  from 
different  vendors.  eTesting  Laboratories 
found  that  Broadcom's  NetXireme  64-b(i 
PCl-X  Gigabit  Ethernet  server  adapter 
achieved  signifkandy  higher  thrnu^put 
rates  compared  with  the  Intel  ProlOOO  XT 
server  adapter. 

Network  equipment  performance 
depends  not  only  on  the  power  of  the 
underlying  silicon,  but  on  ‘ardiitectural 
choices  that  chipmakers  are  increasingly 
making,”  says  Tolly.  Customers  should  ask 


questions  like:  ”Do  they  support  the  latest 
industry  standards?  How  much  memory 
or  intelligence  did  they  put  on  the  ch^? 
Are  tasks  like  IPSec  encryption  KandM 
by  the  main  processor  or  offloaded  to  a 
subsidiary?" 

The  bottom  line,  according  to  Tolly; 
There  is  a  b^  difference  between  custom 
ASIG  and  standards-based.  system-levd 
semiconductors  designed  and  tested  to 
work  together  across  the  network. 
can  do  enough  research  on  a  chipmakers 
protfocts,  like  Broadcom's,  to  get  a  pretty 
good  idea  of  what  those  silicon  sohiimns 
can  do  for  you,”  says  Tolly.  ’Then  you  can 
ensure  good  performance  across  your  net¬ 
work  by  ensuring  that  all  your  equipment 
is  built  on  that  chipmakers  hardware.”  ■ 

Bnudcoui*.  StrataXGS*.  and  NoXimne'*  are 
iradenurks  of  Broadanu  Coqiwation  and/or  its 
affiliates  in  the  United  States  and  ixnain  other 
onuHries.  W>-H*  'is  a  trademart.  of  the  Wi-H 
Alliaact.  Microsoft*  and  Windows*  an  iiade- 
marks  of  Microsoft  Girpmikm.  Iffld*  is  a  trade¬ 
mark  of  Ind  Corporatioa.  Any  ocher  iraksisarlu 
or  trade  names  mentioned  are  the  property  of 
thdr  respective  owners. 
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LOOK  WITHIN  — 

YOUR  NETWORK  IS  MORE 
POWERFUL  THAN  YOU  REALIZE 

To  engage  the  immense  power  of  IP  convergence  -  data,  voice,  applications,  networks  -  the  underlying  technology 
must  function  securely,  reliably  and  efficiently.  Only  Broadcom*  offers  end-to-end  networking  chips  with  the  built-in 
power  to  manage  convergence  —  from  core  storage  and  servers,  through  switch  fabrics  to  desktops,  multi-functional 
devices  and  beyond.  Broadcom’s  wired  and  wireless  technology  throughout  the  network  reduces  complexity  and 
enhances  the  end-user  experience.  With  Broadcom,  there  is  no  gap  between  legacy  and  future  technologies  -  only 
seamless  communication  at  maximum  speed.  Technology  advances.  Networks  expand.  Control  is  maintained. 
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and  what  you  are  trying  to  do.  You 
are  in  an  info  war.  Research  from  the 
rr  Leadership  Academy  has  revealed 
several  best  practices: 

1  Recognize  that  you're  in  an  info  war 

2.  Identify  key  info  targets  —  minds 
you  want  to  make  sure  have  a  nontoxk 
version  of  the  facts. 

3.  Create  an  info  map  of  information 
sources  that  charts  who  is  talking  and 
how  people  learn  about  your  practice 
of  IT 

4.  Create  listening  posts  to  monitor 
the  buzz  about  your  IT  shop,  such  as 
discussion  boards  on  IT  in  your  com¬ 
pany  and  weblogs  by  direct  reports. 

5.  Create  ofTicial  sources  of  truth  in 
the  form  of  authorized  “voices**  or 
spokesmen. 

&  Create  semiautborized  human 
HrewaUs  —  experts  who  know  you  and 
your  IT  shop  and  who  generally  know 
what  you  are  doing  and  where  you  are 
going  —  who  can  be  contacted  when 
trouble  arrives. 

7.  Embed  and  empower  storytellers 
in  your  organization  ^  people  who 
have  good  judgment  and  good  powers 
of  observation  and  who  can  truthfully 
tell  you  and  others  what  is  going  on. 

8.  Create  authorized  information 
‘‘moments."  such  as  briefings,  blogs, 
webinars  and  lunches. 

9.  Expand  your  organization's 
“smartwidth."  or  its  capability  to  un¬ 
derstand  informatioa  Broadband  gives 
us  more  information.  Smartwidth  gives 
your  organization  more  understanding 
regarding  what  all  this  information 
means. 

10.  Hire  an  ad  agency  —  or  first-year 
business  students  who  will  someday 
worit  in  an  ad  agency  —  to  review  your 
IT  group's  “brand." 

Perform  these  simple  tasks  and  you 
are  well  on  your  way  to  being  a  suc¬ 
cessful  info  warrior.  O  51094 
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^hain 
Software  Is 
No  Match  for 
Profit  Quest 

IF  YOUR  family  is  like  mine.  | 
the  week  after  Thank-sgiv- 
ing  usuaily  consists  of  eat¬ 
ing  turkey.  Lots  of  turkey. 

There  must  be  something  wrong  ^ 


with  our  enterprise  soft¬ 
ware  inventory  and  supply 
chain  management  applica¬ 
tion.  because  this  year,  we 
once  again  miscalculated 
the  amount  of  food  needed 
for  our  Thanksgiving  meal 
And  it  isn't  as  though  we 
don't  appreciate  the  value 
of  an  inventory  manage¬ 
ment  system  for  the  pur¬ 
chasing.  production  and 
distribution  of  the  cranber¬ 
ries.  mashed  potatoes  and 
pumpkin  pie.  Like  roost  families, 
we're  always  trying  to  lower  the  in¬ 
ventory  in  our  refrigerator  to  de¬ 
crease  our  working  capitaL 

But  sometimes  it's  those  silly  guests. 
They  tell  us  they  are  going  to  show  up. 
and  —  well,  something  happens. 

Of  course,  we  probably  would  make 
too  much  food  even  if  wc  were  plan¬ 
ning  to  feed  only  ourselves,  but  our 
gluttony  is  nothing  compared  with  the 
overcapacity  now  lacing  the  folks  who 
make  Bat-panel  LCD  televisions.  And 
while  my  family’s  need  for  si^iply 
chain  management  is  hicetious.  theirs 
is  the  real  thing.  But  the  question  is 
whether  the  technology  would  have 
been  able  to  stop  the  manufacturers 
from  bringing  on  so  much  capacity. 

LCDs  have  been  coveted  by  just 
about  ^ry  sports-watching,  decorat¬ 
ing-conscious  or  cartoon-cntranced 
human  being  old  enough  to  work  a  re¬ 


mote  control  But  envy 
doesn't  equal  sustained 
profits.  At  around  S4,000. 
prices  have  been  too  high 
to  lure  many  shoppers  into 
buying  a  lorge-screcn  flai- 
panci  TV  Low  production 
volume  is  the  main  culprit. 
But  now  the  profits  of  the 
flat-panel  industry  are 
about  to  experience  the 
same  sort  of  lethargy*  you 
gel  foom  eating  too  much 

~  turkey. 

About  3  million  of  the  20  million 
television  sets  sold  in  the  U.S.  this  year 
will  be  flat  panels,  but  sales  could  Iw 
greater  if  consumers  weren’t  betting 
on  a  steep  price  fall  in  2005. 

And  prices  won't  simply  fall  next 
year  —  they  will  plummet. 

Manufacturers  and  industry  analysts 
estimate  that  prices  could  drop  by  30% 
in  2005  and  even  further  in  2006.  That 
means  a  flat  panel  that  has  a  price  tag 
or$4XKK)  today  will  be  under  $1,000  by 
2007.  according  to  iSupplL  a  El  Segun- 
do,  Calif. -based  market  analysis  firm. 

What  happened? 

Manufacturers  went  crazy  spending 
money  to  build  factories  at  around 
$1  billion  to  S3  billion  a  pop.  Ten  new 
plants  that  gobbled  up  about  $20  bil¬ 
lion  are  slated  to  begin  churning  out 
flat  panels  by  the  end  of  next  year. 

That  should  boost  indttstry  capacity  by 
70%.  and  more  plants  are  on  the  way. 


Hitachi,  Matsushita  and  Toshiba  are  in 
a  joint  venture  to  spend  $1  billion  to 
make  flat-panel  TVs  in  2006. 

As  those  production  lines  start  to 
spit  out  flat  panels,  prices  will  crater. 

Software  was  supposed  to  prevent 
this  type  orboom-and‘bu.<it  cyde,  but 
it  doesn't.  It  never  will  Corporations 
will  always  pile  into  a  market  if  they 
smell  profit. 

For  some  companies  in  Asia.  LCD 
soles  have  helped  boost  profits.  But  for 
the  leader  in  flat-panel  LCD  TVs. 
LG-Philips.  the  squeeze  on  margins  has 
begun.  The  company  reported  a  15% 
drop  in  its  third-quarter  profit. 

Falling  LCD  prices  could  also  hurt 
Sony.  Samsung  and  TCL-Thomson 
Electronics,  which  makes  the  RCA 
brand. 

So,  where  is  all  the  fancy  supply 
chain  management  technology?  Where 
are  those  dashboards,  those  reports, 
those  metrics  that  were  promised?  All 
the  whiteboards  in  the  world  with  ar¬ 
rows  and  colored  markers  don't  seem 
to  have  amounted  to  much  when  con¬ 
fronted  with  a  booming  market  and 
potential  profits. 

Management  hubris  won't  be  stilled 
by  IT.  It  never  was,  and  it  never  will 
be.  051108 
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Driving  Security 

Bruce  scHNQcrs  latest  opn- 
mv>»xm(kimpulenwfkL 
'Make  Vemlors  ^  Security 
Raws*  [QuickLink  501611  is  corred 
on  premise  but  flawed  on  proposed 
solutions.  We  should  make  vendois 
pay  lor  security  flaws,  but  increased 
liabdity  law  6  not  the  answer.  We 
are  in  dire  need  of  tort  reform  as  it 
is.  andkabittylawwouldpushuple- 
ual  and  nsurafxs  fees  and  do  the 
end  user  no  Qood.  instead.  IT  man¬ 
ages  need  to  leam  to  vote  with 
Ihev  leet.  They  should  pick  software 
soUions  from  vendors  with  proven 
s8cuntyrecords.ordemandlhalse- 
curty  be  m  place  before  they  pur¬ 
chase.  Lei  die  markei  do  the  work, 
not  the  laivyers. 

Schnoior's  argumem  supports 
'ilie*butldit1irsi.Dut3ecuntyanld- 
er*  merttality  .  ertacri  sadly  seems 
to  be  prevaiem  n  the  •ndustry.  But 
there's  another  force  that  IS  gong  to 


drive  the  security  tssue  a  lot  harder 
than  before  -  Sarbanes-Odey.  As  rr 
managers  audit  their  aooicalions. 
they're  making  mental  cheeWists  of 
new  questions  and  reomrements  to 
ask  of  software  vendors:  Why  ate 
these  passwords  stored  m  plain  ted 
m  the  database?  And  why  doesn't 
this  application  lock  out  users  after 
three  failed  password  attempts? 
Sregory  J.  Hmm 

rr  manager.  Ewing  N./. 


Fostering  Oeativity 

WHO  COULO  (ksagree  with  Paul 
6kn's  ideas  about  encourag-  | 

ing  oeatPrily  in  technical  staff  Ho 

EachH6  3wn.'QiKkLink49487F  ' 
HoiMver.  4  someone  wants  to  try 
his  hand  wnhng.  there  aie  no 
'wrong  questions.’ because  any  ' 
adwee  you  offer  brings  the  ques' 
tioner  one  steo  dostf  to  makmg 
an  atlemot  M  someone  IS  curious 
about  whether  you  tiy  out  your  i 


jokes  on  your  wile,  it's  great  that  he 
noticad  your  htinor  and.  vistead  of 
being  a  passive  recQienl.  s  ifHnkmg 
about  how  to  be  entertaining  when 
gcving  a  talk.  U  someone  aste  what 
tune  of  day  you  do  your  best  work, 
he's  one  step  doser  to  carving  out 
some  lane  to  wnie.  I  agree  with 
Glen's  base  piemse  that  managers 
need  to  understand  the  wnety  of 
ways  m  whch  staffers  do  crettve 
work,  but  he  neeils  to  tfiderstand 
and  better  encoumge  people  who 
want  to  try  new  forms  of  eiprESSXin 
and  help  them  be  sucoesshi  d  A. 
LiaaNeal 

Editor  in  ohi^  cLcarn  Maga¬ 
zine.  Lermgton.  Alas. 


Sponsor  Support 

REbAimiS  Mich  Bells' -BuM-  ' 
mg  Bndges  Marketing  ir  Aflffl 
niheOci  4T>imkTanK(QiM*iL>nii 
49502).  ■  would  add  a  sudh  oomt 
Assign  staled  and  commrRedmv- 


ketmgdrvisKtnsponsorstoalrntf- 
keting  proiects.  and  mate  the  ^on- 
son  personaly  responsfale  tor  the 
prornsed  protect  beneMs.  The  wi 
rmprovethesuccessrateofmarket- 
ng  protects  by  much  great«  than 
ihesuggesiKi  15% 

BopafK.  Kapur 
Presidenf.  Center  /or 
rroyect  Afrsiogemerit, 

Son  Ramon.  Coftf 

COttfVTERWOflLO  weicar^ 
comments  kom  lb  readers  Letters 
wd  be  adiled  for  brewty  and  ctardy 
They  should  be  addtesMd  to 
Janie  EcMe.  leltersedNor.Com- 
ouierworid.  PO  Bor  9171.  tSoeen 
Street,  rramngham  Mass  21701. 
Fax  CSOB)  679-4843  E-mv 
ielletsicoinouuirwivld  com 
kiekide  an  address  and  tinone 
runberior  mmedaHevenficaiiori 


k  ^manwttwinn'rieKand 
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6  OF  THE  TOP  10  ISPs 
USE  IRONPORT. 
YOU  CAN,  TOO. 


ict 

Virus  Outbreaks? 
Believe  it. 


VIRUS 

OUTBREAK 

FILTERS 


Today’s  email  borne  viruses  propagate  globally  in  hours  or  minutes,  much  faster 
than  traditional  defenses  can  react,  leaving  you  exposed  to  the  “reaction  time  gap? 
IronPort’s  Virus  Outbreak  Filters'  stop  viruses  up  to  8  hours  before  traditional 
virus  definition  files  are  available,  literally  predicting  virus  attacks  before  they 
cause  harm.  This  astounding  solution  is  powered  by  a  series  of  proprietary  algorithms  that 
process  data  from  SenderBase?  the  world’s  first  and  largest  email  traffic  monitoring  network. 
Available  now  at  www.ironport.com/leader 


iRONPORr 


Rebuilding  the  World’s  Email  Infrastructure. 


www.ironport.com/ieader 


12.06.04 
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FUTURE  WATCH 

Riding  the  Grid  Wave 

Grid  technology  expert  Wolfgang 
Gentzsch  says  grids  are  comii^  in 
three  waves.  Eventually  there  will  be  no 
difference  between  the  Internet  and  “the 
grid.”  he  tells  Computenvorld.  30 


SECURITY  MANAGER'S  JOURNAL 

The  Password  Is; 

Useless  (Probably) 

Our  security  manner  finds  that  her 
company  needs  a  new  password  policy. 
Could  passphrases  and  single  sign-on 
be  the  answers?  Page  32 


OPINION 

802.11n's  Pregame  Show 

Robert  l_  Mitchell  says  vendors 
that  imply  that  their  WLAN 
products  comply  with  the 
nonexistent  802.Un  standard  do 
the  customer  a  disservice.  Page  34 
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fabulous 
phones  for  all 

BlackBerTyTtOOt 

PRICE;  S200 
RMMrah  h  Motfen  Ltd. 
wwWarinLcom 

At  long  last  a  BiackBeny  that  kMks  arri  feels  like  a  phone 
-  and  the  7K)0t  handles  e-maa  as  well  as  its  predecessors 
did.  RlMcreatedthethumbkeyboard.andittakesasome- 
what  drtferent  approach  with  this  device,  assigning  two  let¬ 
ters  per  button  and  building  in  an  extensive  dictiona/y  with 
artificial  intdiigence  that  exceb  at  guessmg  and  cornpleting 
words  as  you  start  typing  them  in.  Initially  available  from 
T'Mobile,  it's  likely  to  be  adopted  by  other  earners. 


This  vriihMp  yaw  RnJypur 
wngr.  Sm  PAGE  24  for  the  Oo. 

tnoie  cool  tools 

i>«dWa(g*vMliWg 


•  •  • 


For  the  gadget  mavens  on  your 
®  holiday  shopping  list,  we  present 
our  annual  look  at  some  of  the 
great  new  gizmos  available  for 
the  office  and  home  and 
on  the  road.  By  Russell  Kay 

CODJ 
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stuff 


phones 

Jawbone 

PRICE  SI50 
www4MfboM.cofn 


Cell  phones  are  great.  But 
you've  ever  tried  to  make 

yourselt  heard  from  a  aowded  trade-show  floor  or  anoth¬ 
er  noisy  environment,  you  know  that  using  them  can  be  a 
trial  at  times.  Add  Jawbone,  a  noise-canceling  headset 
based  on  technology  developed  for  the  military,  and  you 
can  be  heard  clearly  and  distinctly.  The  difference  in  clar^ 
ty  IS  r^rkable.  The  Jawbone  s  small  ^  sits  comfort¬ 
ably  on  the  ear 


Cellboost 

PffICE  S7 

Cowpart  Pamr  Systems  Inc. 
wwwxettoosLcoin 

phones  go  dead  at  the  most  awkward  tunes.  Instead 
of  buying  an  expensive  second  battery  to  carry  around 
(and  having  to  remember  to  keep  it  charged),  try  CeH- 
boost.  a  smaH.  disposable  battery  charger  The  match¬ 
box-size  unit  instantly  restores  power  to  your  ceO  phone 
and  lets  you  keep  talking  while  charging  the  phone,  and 
you  don't  need  an  electrical  outlet.  Cellboost  units  are 
made  for  most  popular  brands  ol  cell  phones 


ncHNOLoev 


Tree  650 

PRICE  S600 
PahnOnebic. 
www..p«lmonej»m 

If  you  can  carry  just  one  device,  this  is  my  pick.  K'sa 
phone,  a  fuD -fledged  PM.  a  music  player,  a  voice 
recorder  and  a  digital  camera,  all  in  a  nice  package.  It's 
neither  as  small  nor  as  large  as  some  of  its  competitors, 
but  It  does  almost  everything  you  might  want  and  does  it 
well  The  Treo  KO  is  a  hefty  investment  (check  your  cell 
carrier  for  better  deals),  but  It  gives  you  a  lot  of  capability 
Screen  resolution  has  quadrupled  to  320  by  320  pixels, 
and  processor  speed  6  now  312  MHz.  Bluetooth  is  built 
in  for  hot-synemg  and  headsets,  and  the  keyboard  is 
backlit  and  slightly  (but  quite  noticeabty  to  your  hand) 
larger  The  rechargeable  battery  ts  now  removable, 
so  you  can  have  a  spare.  Finally.  If  you  opt  for  a  GSM 
version,  you  also  gel  enhanced  data  rales  for  GSM 
Evolution  capability. 


getting  aRuind 

CodeScout 

^RICE  St30 
AutoXrayInc. 
w«nar.jiitaxra]fxem 

When  yoir  c»s  ‘check  engine"  light 
comes  on.  you  know  you  rr^  ha^  a 
problerri  but  what  is  it?  Until  now.  you 
had  to  visit  your  mechanic  or  dealer  to 
find  out.  Now  you  can  buy  a  consumer 
version  of  the  dealer's  scanner  that  will 
check  your  car's  trouble  codes  and  help  you  discover  \^at'$ 
wrong  before  you  have  to  reach  for  your  waHel  CodeScoul 
covers  all  current  diagnostic  protocols,  including  the 
newest  one  that  wd  be  mandated  for  all  vehicies  by  2008 


Go 

PHtet  $1,000 
TomTom  BV 
www.tomtonLcoiii 

Global  Positioning  Sys¬ 
tem  navigation  umts 
are  old  hat  by  now.  but 
anew  model,  the  Go.  is 
the  best  I've  seen.  It's  small  and  easy  to  use 
and  has  a  ternfic  interface,  as  well  as  a  sbght- 
fy  elevated  3-D  driver's  eye  view,  ft  comes 
preloaded  with  maps  of  the  entire  U.S.  (Cana¬ 
da  IS  available  on  CD),  and  it  will  run  for  hours 
on  battery  power,  so  it  doesn't  need  to  be 
connected  directly  to  the  car. 


www.computefworlcl.com 


con\erging 
\  oiir  home 


PureAVSSOOO 
Remote  TV 
PRICE  SSOO 
BeWnCorp. 
wviniv.purMv.com 
ITie  PureAVSSOOO  contains  a 
transmitter  and  receiver  that 
let  you  take  input  from  one 
source  (a  television,  cable  box.  DVD  player, 
stereo  system,  video  game  or  something 
else)  and  wirelessly  send  it  to  a  TV.  monitor. 

VCR  or  powered  speakers  in  a  different  room.  The 
unitoffersabandvindth  ofupto40Mbit/sec  ata 
range  of  up  to  350  feet.  It  handies  standard-definition 
(but  not  high-definition)  TV. 

WMLS11B  Wireless'B  Music  System 

PRICE  $160  « 

Unksy*  U  dMsim  of  Gm  Systamo  Inc.) 
www.8nksyo.com 

This  unit  looks  hke  a  him 
stereo  radio,  but  it's  much 
more.  The  WMLSTIB  pro¬ 
vides  a  network  connection 
(wired  or  wireless)  between 
your  PC  and  stereo  system. 

It  can  also  play  PC-stored 
music  directly  through  Its 
two  detachable  speakers.  A 
remote  control  is  included. 


image  is 
even  thing 

R-D1 

PRICE  $3,000 
Epson  America  bic. 
www.opoonxom 

For  decades,  the  legendary 
Leica  35mm  Rangefinder 
camera  was  the  choice  of 
photojoumalists  because  of  its 
precision,  reliability,  outstandin 
small  size  and  fast,  quiet  operation.  Now  Epson  has  an¬ 
nounced  the  world's  first  digital  Rangefinder  camera,  which  uses 
the  same  lenses  made  for  those  older,  classic  Leicas.  At  $3,000 
(that's  without  a  tens),  the  R-D1  ctearty  isn’t  a  mass-market  prod¬ 
uct,  but  It  offers  a  unique  mamage  of  old  and  new  photography, 
combining  the  classic  Rangefinder  feel  and  operation  with  up-to- 
date  digital  capabilities.  The  camera  features  a  magnesium-alloy 
skin  covenng  an  aluminum  die-cast  body.  6.1-megaplxel  resolu¬ 
tion  and  a2-in.  LCD  display  on  the  back.  The  R-D1  uses  Secure 
Digital  memory  cards  with  up  to  166  of  capacity. 


phones 


Cel  phones  are  greaL  But  ^  *' 

I  you've  ever  tried  to  make  ^ 

yoursett  heard  from  a  croiMded  eade;^b^  floor  or  am^ 
er  rwisy  environmerrt.  you  ImowM  i£ino 
triaf  at  tirnes.  Add  JaatioM.  a  rwise-catKKlIri^ 
based  orr  tachnotogy  developed  for  the  mlt^ 
can  be  heard  deatty  arid  rte&TKtfy.  The  dffere^ 
ty  is  retTBtkable.  The  JavAnne  is  srnal  and  sits  cornf^ 
aidyontheear. 


Cel  phones  go  dead  at  the  most  aatoivard  times.  Instead 
of  buying  an  expensM  second  battery  to  around 
(and  hawig  to  remember  to  keep  it  chvged).  try  Cel* 
boost  a  smal.  dsposaUe  b^tery  charger.  The  match* 
boK-size  unM  instantly  restores  power  to  your  cel  phone 
and  lets  you  keep  taAong  while  charging  the  phone,  and 
you  don't  need  an  electiicai  outlet  CeKioost  units  are 
made  tor  most  popuitf  brands  of  cel  phones. 


getting  around 

CodaScout 

PRICE:  SIM 

iMltfriylM. 


Wien  your  car’s 'check  engme"  light 
comes  on.  you  know  you  might  have  a 
problem.  bU  what  is  I?  Until  now.  you 
had  to  visit  your  mechanic  or  derrier  to 
find  out  Now  you  ctfi  buy  a  consumer 
version  of  the  dealer’s  scanner  that  wil 
check  yoir  car's  trouble  codes  tfid  help  you  discover  what's 
wrong  betore  you  have  to  reach  for  your  walet.  CodeScout 
carers  al  currerd  dkignostic  protect  iriducS^ 
newest  one  tiiat  wff  be  mandated  for  al  vehicles  by  20(18. 


r 

<T2 

kCC 

Treo650 

PRICE:  S800 


If  you  can  carry  just  one  device,  this  is  my  pick.  It's  a 
phone,  a  ful'fledged  PDA.  a  music  player,  a  voice 
recorder  and  a  digital  camera,  al  in  a  nice  package,  ft's 
neither  as  small  nor  as  large  as  some  of  its  competitors, 
but  it  does  almost  evetytoing  you  want  arid  does  it 
wel.  The  Treo  ^  is  a  hefty  investment  (check  your  ceil 
carrier  for  better  deals),  but  it  gives  you  a  lot  of  capability. 
Screen  resolution  has  (juadrupled  to  320  by  320  pixels, 
and  processor  speed  is  now  3t2  MHz.  Bluetooth  is  buM 
in  for  hot-syncing  and  headsets,  and  the  keyboard  is 
backlit  and  slightly  (but  quite  noticeably  to  your  hand) 
larger.  The  rechargeable  battery  is  now  rernovable. 
so  you  can  have  a  spare.  Rnaly.  if  you  opt  for  a  GSM 
versiori.  you  also  get  er^ianced  data  rates  for  6^ 
Brolution  capability. 


Go 

PRICE:  $1,000  I 

TomlemBV  I 

w«irw.lMiilomxoiN  I 

Globai  f^siboning  Sys¬ 
tem  navigation  units 
are  old  hat  by  now,  but 
a  new  model,  the  Go.  is 
the  best  Tve  seen.  It's  sma8»id  easy  to  use 
and  has  a  terrific  interface,  as  weA  as  a  slight¬ 
ly  elevated  3-0  driver's  eye  view.  It  comes 
preloaded  wrih  maps  of  the  entire  U.S.  (Cana¬ 
da  is  avaAafale  on  (io).  and  it  wil  run  for  hours 
on  battery  power.  $0  it  doesn't  need  to  be 
connected  directly  to  the  car. 


converging 

yourhortK 


PureAVSSOOO 

RamotaTV 

PRICE:  HOO 

BaMnCorp* 


The  F^JreAi^i(X)0  contains  a 
tran^nitter  and  receiver  that 
let  you  take  input  from  one 
source  (a  television,  cable  box.  DVD  player, 
stereo  system,  video  game  or  something 
else)  Sid  wirelessly  send  it  to  a  TV.  monitor. 

VCR  or  powered  speakers  in  a  different  room.  The 
unit  offers  a  bandwidth  of  up  to  40Mbit/sec.  at  a 
rarige  of  up  to  350  feet  ft  handfes  standard-definition 
(but  not  high-definition)  TV. 

WMLSUB  Wiraiess-B  Music  System 
pwxztm  V 

Uriove  u  Mien  o(  am  SyilMm  toe.)  ^ 
wHwJkkv/txm 

This  unit  looks  Ike  a  trim 
stereo  radio,  but  it's  much 
mora  The  WMLSUB  pro¬ 
vides  a  network  connection 
(wired  or  wireless)  between 
your  PC  and  stereo  system. 

It  can  also  play  PC-stored 
music  directly  through  its 
two  detachable  speakers.  A 
remote  control  is  mduded. 


image  IS 
everything 

R-D1 

PRICE:  $3,000 
Epson  ifeiiarlGa  Inc. 


For  decades,  the  legendary 
Leica  35mm  Rangefinder 
camera  was  the  choice  of 
photojoumalists  because  of  its 
precision,  reliability,  outstanding  optics, 
small  size  and  fast,  quiet  operation.  Now  Epson  has  an¬ 
nounced  the  world’s  first  digital  Rangefinder  catnera.  vvhich  uses 
the  same  lenses  made  for  titose  older,  classic  Leicas.  M  S3.000 
(dial's  witiiout  a  lens),  the  R-01  cfearfy  isn’t  a  mass-martet  prod¬ 
uct  but  it  offers  a  unique  marriage  of  old  and  new  photography, 
cornbming  the  classic  Rangefinder  feel  and  operation  vvttii  up-to- 
date  digits  capabities.  The  camera  features  a  magnesium-ailoy 
skin  covering  an  aluminum  die-cast  body.  6.1-megapixel  resolu¬ 
tion  and  a  2-in.  LCD  display  on  the  back.  The  R-01  uses  Secure 
Digital  memory  cards  with  up  to  16B  of  capacity. 


www.compiiterworld.com 


HamMMiy  Univei^  Remote  Control 

PRICE:  S230 

LogitMh  Intamaliatiil  SA 

www.lojll<cKiO0ni 

This  remote  control  comes  in  several  flavors,  including  one  (the  680) 
designed  speoafly  for  the  newest  round  of  multimedia  Windows 
PCs.  Logitech  eases  the  process  of  programming  your  remote  by 
automating  the  dialogs  on  the  remote  itself  an6  including  one-touch 
activity  buttons  that  combine  multiple  functions  for  common  tasks, 
such  as  watching  a  movie,  listening  to  music  w  recording  a  TV  show. 
The  Harmony  handles  up  to  t5  devices  -  anything  that  uses  infrared 
commands  -  and  needs  no  macroprogramming.  This  might  be  the 
easiest  way  to  simplify  the  tangle  of  home  entertainment  equpnenl. 
cables,  switches  and  remotes. 


CIIMTailUlH*il.M4  25 


ki(i  Stuff 


NovettyMouw 
(footM  or  ladybug) 

PRICtSIO 


Need  a  couple  of  stocNng  Stuff  ers  lor  the  kids?  Try  the  parr  ot 
theme  mice:  one  tootbal.  one  ladybug 


Hdto  Kitty  Robot 

PRICE:  S3.700 


MWi 


giaiia 


.computerworld.com 
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WWW  compulerwo'id.com 


DoubleSight  Dual  LCD  Monitors 


DouMeSight  Displays  LLC  4 

www.double$ight.com 

For  those  who  want  a 
big.  tlat-panel  LCD 
monitor  but  don’t  like 

the  price.  DoubleSight  has  an  interesting  answer.  It 
takes  two  15-in.  LCD  panels  and  mounts  them  in  a 
single  housing,  giving  a  total  viewing  area  oi  2.048 
by  768  pixels.  Of  course,  there’s  a  black  bar  running 
down  the  middle  of  that  picture,  so  it  may  not  be 
quite  as  helpful  as  you  need.  But  for  those  who  have 
to  display  a  lot  of  information  or  have  to  deal  with  nu¬ 
merous  tool  bars,  menus  and  windows,  this  could 
be  iust  the  ticket. 


DiskOnKey 

S470  (2GB)  \ 

M-Systefns  Flash 
Disk  Pioneers  Ltd. 
wrww.m'^.com 

Removable  Universal  Serial  Bus  (USB)  flash  drives  are  faster  and  small¬ 
er  than  floppies.  One  of  the  nicest  is  this  DiskOnKey  unit,  but  the  price 
really  jumps  from  168  (S330)  to  2GB!  The  redesigned  device  incorpo¬ 
rates  LEDs  to  signal  I/O  activity  plus  an  onboard  application-specific 
integrated  circuit  to  speed  transfer.  The  26B  capacity  is  impressive. 


MX900  Bluetooth  Mouse 


LogHech 

www.logitech.com 

Nearly  all  the  cordless  optical  mice  I've 
used  exhibit  a  certain  level  of  sluggishness 
-  they  always  seem  to  lag  slightly  behind  where 
you  think  they  are.  Even  Logitech's  MX900  Bluetooth 
mouse  suffers  from  this,  but  the  company  has  found  a  way  to 
speed  things  up.  It  has  replaced  the  LED  light  source  with  a  laser, 
and  this  highest-tech  mouse  is  the  most  responsive  little  desktop 
rodent  I’ve  used  in  years.  It  costs  more  than  I’d  normally  want  lo 
spend  on  a  mouse,  but  it's  worth  it. 


Optical  Mouse  by  Starck 
S15-$20 
Microsoft  Corp. 
www.microsoft.eom 

Taking  a  page  from  Apple's  playbook.  Microsoft 
brings  its  first  designer  mouse  to  market.  Creat¬ 
ed  by  noted  designer  Philippe  Starck.  the 
mouse  has  two  full-length  buttons,  a  dis-  A 
tinct  lighted  strip  down  the  middle  and  a  B 
scroll  wheel  It's  a  good-looking  mouse  M 
and  a  nice  slocking  stutter.  " 


Kanguru  Zipper  HD  ^ 

Slartsat$130  y  ^ 

Kanguru  Solutions  /  ^  M 

www.kanguru.com  £  £  M 

A  slightly  different  take  on  small  £/  M 

removable  storage,  the  Kanguru  »  -M  ^ 

Zipper  HD  uses  a  1-in.  hard  drive 

instead  of  flash  memory  to  store  gigabytes  of  data.  It's  lust  a  bit  larger 
than  a  typical  USB  flash  drive,  but  at  S170  for  2.26B  and  S200  for  46B. 
It's  only  half  the  pnce  of  the  DiskOnKey  and  similar  competitors. 


1  The  Zire  72  has  a  belter  camera,  better  screen, 
better  software  and  twice  as  much  memory  as 
Its  predecessor,  all  at  the  same  price.  It's  the 
nght  si2e  for  pocket  or  purse  and  a  great  travel  companion. 


Gmini  400 
S400 
ArchosCorp. 
www.archos.com 

A  little  smaller  than  an  iPod  music  pla^.  the  Gmini  400  fea¬ 
tures  a  2.2-in  high-resdution  (640  by  400  pixel)  color 

►  LCD  screen  that  does  a  lot  more  than  list  your 
tunes  This  portable  device  plays  excellent- 
quality  video  and  games  (albeit  a  limit¬ 
ed  selection)  from  the  built-in  206B 
A  hard  drive.  It  also  plays  MP3.  WMA 
and  WAV  music  flies,  records  in 
stereo,  and  will  display  album  art  if  you 
wish.  A  bwlt-in  compact  flash  reader 
makes  It  easy  to  store  and  carry  photos,  too 
This  IS  the  nicest  small  video'pfayer  I've  seen,  and 
It’s  tairfy  priced  and  cheaper  than  the  iPod. 


Tungsten  T5  I 

S400  ^ 

PabnOne 

www.palmone.com 

The  Tungsten  T5  is  a  very  different  handheld 
from  the  Zire  72.  Designed  for  enterprise  users, 
the  T5  has  no  camera,  but  it  does  give  you  built- 
in  Bluetooth  networking  and  256MB  of  flash 
memory  -  so  if  the  battery  dies,  your  data  will 
1  still  be  there.  It  also  can  be  used  as  a  USB 
I  hard  drive,  and  It  has  a  big.  bright.  320-by- 
I  480-pixel  color  screen  and  a  bulll-in  voice 
3  recorder,  all  in  a  great-looking  package. 


www.compulerworld.com 
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System  Mechanic  5 

PRICE  $70(Proeditioii) 
loio  Technologies  U.C 
www.ioio.coin 

In  the  age  of  Windows  and  com- 


Zip-Linq  Cables  ^  ^  B  1. 

underSGO  ^ 

Cables  UnlimHed  ^ 

wwwjiplinq.com 

These  relf  actable  Zip-Lmg  units  are  just  about  the 
handiest  travel  cables  you II  find  anywhere  In  Mfi.cular 
check  out  the  Road  Warrior  Kit.  which  includes 
phone/mocten,  Ethernet  af>d  USB  cables,  a  USB  Iravet 
light  ana  a  travel  mcHjse  with  retractable  cord 


plex  PCs  on  every  desk,  diagnostic 
and  repair  tools  are  more  useful  than  ever,  but  the  available  supply 
has  dwindled.  The  latest  suite  from  lolo  Technologies  adds  better 
controls  over  registry  settings  and  disk  maintenance.  A  home  version 
IS  available  for  S50.  but  you're  better  off  with  the  more  capable  S70 
Pro  edition.  I  especially  liked  the  Startup  Guard  -  which  lets  me  easily 
control  which  programs  are  configured  to  start  automatically  at  boot 
time  -  and  the  ability  to  uninstall  any  program,  even  those  Windows 
control  panels  that  are  usually  hard  to  get  nd  of. 

Oakley  Thump 

PRICE  S395 
Oakley  Inc. 
www.oakley.coni 

Sure,  it's  a  cool  pair  of  Oakley  sunglasses.  But  it's  also  an  MP3 
and  WMA  music  player  with  128MB  capacity  (with  the  S495 
256MB  glasses,  you  also  get  polanzatiorr).  flip-up  lenses  and 
ear  buds,  ail  available  in  seven  color  combinations.  I  particularly 
liked  the  eye-catching  red  camo/black  indium  combo  that  draws 
considerable  attention  to  itself.  At  S400  to  S500.  you  want  it  to 
look  special! 


iOesturePad 
PRICE  S159 
RngerWorks  fnc. 
www.fin9en1vorks.com 

This  device  looks  like  an  oversized  laptop  toudi  pad  that  has 
grown  up  into  a  full-size  mouse  pad.  but  it  lets  you  do  a  lot  ol 
navigation  and  control  with  just  your  bare  hand.  The  Mutti- 
Touch  technology  embedded  in  the  iGesture  Pad  can  sense, 
track  and  interpret  the  motion  of  multiple  hands  and  fingers 
on  a  touch-imaging  surface  l>ie  relatively  high  pnee  means 
It's  not  (or  everyone,  but  it's  a  unique  product  that  will  dehght 
many  It  works  with  Windows,  Macintosh  and  Unix  machines 


CH15MN 
Battery  Charger 


Ever«ady  Battery  Co. 
http://data.eoergaer.com 

From  the  Energizer  Bumry  people 
comes  a  dandy  device  that  will 
fully  recharge  lour  AA  o«  AAA 
NiMH  cells  m  just  15  minutes 
Smart  arcuitry  in  the  CH15MN 
monitors  charging  to  iKevent 
overheating,  cuts  off  when  each 
cell  IS  charged  and  wiH  maintain  a 
trickle  charge  il  batteries  are  left 
in  the  unit  tor  an  extended  penod 


JumpDrive  TouchGuard 

PRICE  S70(2S6MB) 

Leiar  Media  Inc. 
www.leiar.com 

This  USB  flash  dnve  is  cheaper  (and  smaller) 
than  DiskOnKey.  but  it  comes  with  two  added 
wrinWes-  First,  the  cap  that  protects  the  USB 
connector  is  permanently  fastened  to  the 
unit  so  rt  won't  get  lost.  Second,  there's  an 
integrated  biomelnc  fingerpnnt  sensor 
that  wiH  authenticate  a  user 's  identity 
and  provide  easy  access  and  auto-  ^ 

matic  log-in  to  secured  files  and 
password-protected  Web  sites. 

The  device  will  store  and  rec- 
ognize  up  to  10  fingerprints.  In- 
formation  on  the  drive  is  se- 
cijredvia256-bitencfyotion. 


IGo  EverywherePower  3500 


One  pain  of  travel  IS  the  fact  (hat  each  rtew  device 
seems  to  come  with  a  battery  recharger  that  won't 
work  with  anything  else  Mobility  Electronics  offers  a 
sofulion  with  Its  ilBo  EverywherePower  ^OO.whch 
allows  you  to  recharge  any  device  usng  a  standard  AC 
power  outlet 


iPaq  hx4700 

PRICE  S649 
Hewlett'Packard  Co. 


OQO  Model  01 

PRICE  S1.900  (with  XP  Home) 


This  device  goes  about  as  far  as  possible  without 
becoming  a  full-ftedged  Windows  PC  like  the 
OQO.  Still  aPodtet  PC.  the  hx4700  features  a 
4-in.  transftective  screen  that  offers  a  fuff  VGA 
display  (480  by  640).  and  you  get  three  types  of 
onboard  wireless  networking  -  GSM/GPRS, 
Bluelooth  and  Wi-Fi.  The  processor  is  a  624-MHz 
Intel  )(Scaie.  You  also  get  the  usual  Poctet  PC 
software,  both  compact  flash  and  Secure  Digital 
slots  tor  additional  storage  and  functionality,  and 
64MB  of  RAM  in  addition  to  the  128MB  of  ROM 
C50964 


^  If  you're  always  on  the  go  and  really  need  a 
full-function  compute  at  all  times  - 
and  a  handheld  or  Pocket  PC  lUSt 
won't  cut  It -then  the  OQO 
Model  01  may  well  be 
the  machine  of  your 
Its 

1-GMz  Transmeta 
CPU.  20GB  hard 
dnve.256MBofRAM. 
sWing  case  that  uncovers  a  tiny 
thumb  keyboard  and  a  5-in.  800-by-480- 
pixel  color  display,  the  OQO  is  about  the  small¬ 
est  ki-fledged  Windows  PC  around.  At  4.9  by 
3.4  by  0.9  in.  and  with  a  weight  of  14  ounces 
and  a  projected  battery  life  of  about  three  hours, 
the  OQO  definitely  isn't  for  everybody 


Kay  is  a  Computerworld  con- 
rribufing  writer  in  Worcizsfcr, 
Mass.  Contact  him  at 
russkayi§)charter.net. 
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software  from  Lotus  that  creates  one  unified  platform 

1.  List  of  r>ew  leads  e*malled  pre-takeoff.  between  employees,  partners,  customers  and  vendors. 

2.  Prototype  specs  updated  securely.  Building  off  of  existing  tools,  it's  flexible  and  dynamic 

3.  New  specs  modified  in  showroom.  It's  software  that  can  increase  productivity  by  enabling 

4.  Modified  specs  accessed  via  PDA.  on  demand  business.  On  virtually  any  kind  of  device. 

5.  Proposals  sent  to  new  leads  pre-deadllr)e.  Everywhere  around  the  globe  Everywhere  in  between. 

MkMteware  for  the  on  dernand  world.  Learn  rnore  at  iMibOTMAnidclawefe/collaborate  QQdbUNDBUSMEST 
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WAVE 

Woltpnsz  ( .cnt/SL'Ii  s;i\s  that, 
ocntualK;  thoiv  w  ill  lx-  nh  ditiL’iviKv 
IvlwLvn  the  Internet  and  the  urid.' 


WOLFGANG 
GENTZSCH 

says  grid  com- 
puling  wilt  enme 
in  three  Hovfs.  '/"he  first,  well 
under  u'uy.  primtiri/y  inv’fi/ivs 
the  df  adomic  ri’icure/i  cofnfnu- 
nify.  Pie  wrond.  /usf 
brings  in  evrporations  os  users. 
The  third,  still  .some  years  oty. 
will  add  mdividual  consumers 
r«  the  grid.  Af  thuf  point,  the 
infi'mrf  wilihe  "the grid." says 

dcntzsch.  managing  di-  _ 

rector  (>/j?rid  compu/injf 
and  networking  strviccs 
df  AfC.VC/ncMprf 
vifw  of  the  grid  can  be 

glimpsed  in  the  Nation-  - 

j/  LtimWaKai/  testbed  network, 
for  which  MCNC  will  serve 
as  a  technical  .support  center 
Ttcnizsch  recently  told  Comput- 
onvnrld’s  Cary  fl.  Anthes  what 
it  will  lake  to  ride  the  u*ai't*s. 

What’s  moving  us  into  the  second, 
corporate,  wave  of  grid  computing? 
The  IT  vcndurs  have  their  grid 
stor>’  in  place  —  IBM.  Sun.  Ora¬ 
cle  and  the  others  —  for  the  next 
generation  of  products  that  they 
want  to  ship  and  make  money 
with.  But  there’s  no  money  in 
research  grids,  and  ermsumer 
grids  are  far  out.  So  the  current 
interest  Ls  in  the  enterprise  grid. 

But  are  users  interested?  Grid 
technology  can  improve 


equipment  utilization  from 
30'\i  on  average  to  something 
like  70'’(!  to  RO^'n.  .So  the  inter¬ 
est  id end-user  companies  has 
grown  dramatically.  Driven  by 
the  Kmefits  —  easy  access, 
sharing  of  resources,  easy  fail¬ 
over  and  dramatically  improv¬ 
ing  productivity  —  within  the 
near  future,  companies  will  re¬ 
duce  cost  and  complexity 
Iwith  grids}. 

Our  products  and  systems 

-  are  getting  more  and 

more  complex,  and 
the  infrastructure  is 
getting  more  complex. 
Scaling  the  infrastruc¬ 
ture  means  scaling  the 
people.  But  if  you  have  a  grid 
in  place,  you  can  handle  a  fac- 
tor-of-lO  increase  in  resources 
with  the  same  people. 

How  pervasive  will  grids  be  in  cor¬ 
porations  in.  say.  five  years?  Com¬ 
panies  in  the  life  sciences  and 
the  financial  sector  arc  already 
advanced  today  in  using  local 
grid  technology.  In  about  five 
years,  many  of  the  Fortune  500 
companies  will  be  still  grow'- 
ing  globally,  having  sub¬ 
sidiaries  all  over  the  world, 
and  within  these  subsidiaric-s 
they  have  IT  equipment  that 
may  be  empty  because  it’s 
night.  So  now  in  a  global  en¬ 
terprise  grid,  a  company  in  Eu¬ 
rope.  for  example,  might  want 


FUTURE 

WATCH^ 


lo  send  jobs  to  America,  when; 

I  pvople  are  still  sleeping. 

Life  sciences  and  financial  compa¬ 
nies  tend  to  use  grids  for  scientific 
applications  and  modeling.  What 
about  mainstream  transaction- 
processing  apps?  You  can’t 
really  easily  send  independent 
I  ir.ans.Ktuins  t»ver  the  Internet, 
j  Sending  a  transiiction  to  a 
I  remote  server  takes  far  loo 
I  much  overhead,  so  you  send  a 
whole  application  to  a  trans.ac 
tion  server.  V»ni  have  several 
iransactiiin  systems  distrib¬ 
uted.  It's  a  grid  because  the 
resources  arc  distributed. 

Given  all  these  benefits,  why  aren’t 
we  seeing  much  more  rapid  adop¬ 
tion  of  grids?  Let's  take  the  hype  I 
out  of  it.  Grid.s  promi.se  much  I 
more  than  they  can  deliver  to- 
d.iy  because  grid  technology  ' 
is  not  mature  and  complete. 
There  are  point  products 
which  solve  a  little  bit  but  I 
don’t  transform  your  whole  ' 
environment  into  a  grid.  Grid  | 

standards  are  still  missing.  | 

And  there  are  challenges  be¬ 
yond  the  technology.  Server- 
hugging  is  still  3  key  barrier  to  j 
grids;  people  k'V'c  thv-irown  lit-  I 
lie  systems.  Security  is  another 
issue.  .Also  intellectual  prv>pert\'  ' 
—  .should  1  really  run  my  IP- 
heavA’  stuff  on  another  compa¬ 
ny's  server,  or  send  it  over  the 
Internet?  There  arc  legal  issues. 
svK'ial  issues,  political  issues. 

What's  missing  in  standards?  The 


NATIONAL 

LAMBDARAIL 

NLR  (www.nlr.net)  is  a  con¬ 
sortium  of  research  universities 
and  companies  working  on  ad¬ 
vanced  technologies  m  net¬ 
work  architecture,  end-to-end 
performance  and  scaling  It’s 
also  a  testbed  network  based 
on  optical  Dense  Wavelength 
Division  Multiplexing  (DWDM) 
that's  capable  of  transmitting 
40  simultaneous  light  wave¬ 
lengths  ("lambdas,"  or  waves), 
with  each  wavelength  able  to 
transmit  at  lOSbit/sec. 

NLR  is  the  first  network  to 
deploy  transcontinental  circuits 
based  on  Ethernet  end  to  end. 

It’s  also  deploying  a  routed  IP 
network  over  the  optical  DWDM 
network  By  next  spnng.  NLR 
will  connect  research  facilities 
in  27  U.S.  cities. 

(jlobal  Grid  Forum  is  working 
on  these  issues  with  some¬ 
thing  like  50  working  and  re¬ 
search  groups  in  seven  area.s 
[such  as  applications,  architec¬ 
ture.  data,  security  and  perfor¬ 
mance!,  and  basically  all  the 
areas  are  immature. 

For  e.xample,  how  to  grjJ- 
enablc  software  applications. 
Today  you  have  to  write  inter¬ 
faces  manually.  These  inter¬ 
faces  need  to  be  standardized 
so  you  can  plug  tw'o  software 
modules  together  seamlessly 
and  at  all  levels  —  application. 


\\i  illu.lllLl  <  w'llL-  'Vll 


.•  Managing  director  of  grid 

computing  and  networking  services 

MCNC  Inc.,  a  tion- 

Afljd  profit  corporation  in  Research  Trtaii- 

qle  Park.  N.C.  Established  by  the 
state  in  1960,  MCNC  originally  fo- 
^  cused  on  microelectronics  research. 

but  over  the  years  it  morphed  into 
an  advanced  computation  service 
center  for  grid  technology  in  education,  research  and 
commerce  Gentrsch  calls  it  ’’a  grid  acceleration  center  “ 

Previously  senior  director  ol  grid 
compiilmq  at  Sun  Microsystems  Inc. 


■  architecture,  data,  security 
'  and  scheduling  and  resource 
'  management. 

You  ^ak  of  the  grid  and  the  future 
Internet  as  if  they  were  one  thing. 
The  current  Internet  is  just 
information.  The  grid  adds 
things  like  collaboration,  com¬ 
puting  and  other  things  that 
make  it  three-dimensional.  It’s 
doing  real  business  and  devel¬ 
opment  and  production  on  top 
of  that.  With  [today’s]  Inter¬ 
net.  you  have  information.  But 
with  the  grid,  you  have  access 
lo  the  resources  that  use  this 
information.  Grid.s  are  getting 
more  and  more  general-pur¬ 
pose.  Eventually  they  will 
merge,  and  you  have  the  nc.xt- 
generalion  Internet. 

Will  it  be  based  on  the  same  stan¬ 
dards  as  today?  Gurrent  proto¬ 
cols.  like  in  Sonet.  Ethernet 
and  TCP/IP.  were  built  more 
than  20  years  ago.  and  they 
never  anticipated  the  amount 
of  data  which  they  have  to 
deal  with  today  . . .  for  the 
"grand  challenge"  applic.i- 
tions.  That’s  why  the  N.iti<»nal 
LambdaRail  has  been  started, 
and  its  key  focus  is  to  over¬ 
come  the  limitations  of 
TCP/IP  and  other  protocols. 

What  about  the  third  grid  wave,  the 
one  for  consumers?  We  are  talk¬ 
ing  about  gaming  grids,  where 
hundreds  of  gamers  come  to¬ 
gether  and  use  the  grid  for 
really  heavy  interactive  and 
computc-intensive  stuff. 

Also  health  care.  If  you  have 
a  heart  attack  or  stroke  and 
you  arc  within  15  minutes  of  a 
hospital,  you  get  easy  help. 

But  in  the  countryside,  the 
percentage  of  people  dying 
from  hcan  attacks  is  at  least 
50^^)  higher  than  in  the  cities. 
Now.  a  grid  reduces  distances 
to  zero,  so  the  country  doctor 
has  immediate  access  to  all 
these  expensive  machines, 
which  have  digital  heartbeats. 

In  the  hospital.  If  that  hospital 
is  too  busy,  the  health  care 
grid  broker  selects  another 
restmree  that  is  least  loaded. 

How  tar  off  are  these  tfurd-wave 
capabilities?  Five  to  10  years. 

Five  is  aggressive:  10  is  defi¬ 
nitely  yes.  O  50785 


Gentzsch  says  that, 
itually,  there  will  be  no  difference 
between  the  Internet  and  ‘the  grid’ 


even 


WOLFQANO 
OENTZSCH 

saysgridcom- 
putingwiB  come 
in  three  waves.  The  first,  well 
under  way,  primarily  involves 
the  acadanic  research  conuTW’ 
nity.  The  second  Just  beginning 
brings  in  corporations  as  users. 

The  third  still  some  years  off. 
will  odd  indbridual  consumers 
to  the  grid  As  that  poinr,  the 
Internet  will  be  "Vte  grid"  says 

GentzscKmana^ngdi-  _ 

rector  of  grid  computing  nnmC 
and netvroridng services  rMlWtt 


e<)uipment  utilization  from 
30%  on  average  to  something 
like  70%  to  80%.  So  the  inter¬ 
est  of  end-user  companies  has 
grown  dramatically.  Driven  by 
the  benefits  —  easy  access, 
sharing  of  resources,  easy  fail¬ 
over  and  dramatically  improv¬ 
ing  productivity  —  within  the 
near  future,  companies  will  re¬ 
duce  cost  and  complexity 
[with  grids]. 

Our  products  and  systems 

-  are  getting  more  and 

more  complex,  and 

_  the  infrastructure  is 

otMCNClnc.Apre'  UfATICII©  getting  more  complex. 

WHIWilflK  Scalino  infnetnw. 


view  o^rhe  grid  can  he 

glimpsed  in  Che  Notion-  - 

alLambdaSal  testbed  network. 
Jar  which  MCNC  will  serve 
asatedudctdsuf^)ortcenUr. 
Gentzsch  neeentfy  told  Comput- 
erworid^  Gory  H  Andies  w/iot 
it  wdl  Coke  to  ride  Che  woves. 

Wiri'a  meeirv  » into  the  wonL 
cerpwtot.  of  grid  coinputoiB? 

The  IT  vetidors  have  their  grid 
story  in  place  —  IBM,  Sun.  Ora¬ 
cle  and  the  Qtfaeis  ~  for  the  next 
gencratioo  of  products  that  they 
want  to  ship  and  make  money 
with.  But  there’s  no  money  in 
research  grids,  and  consumer 
grids  are  out.  So  the  current 
interest  is  in  the  enterprise  grid. 


?Grid 
technology  can  improve 


Scaling  the  infrastnic- 
ture  means  scaling  the 
people.  But  if  you  have  a  grid 
in  place,  you  can  handle  a  foc- 
tor-oMO  increase  in  resources 
with  the  same  people. 

HowiMriMlvowIgrldibttocor- 
porolim  to.  mr.  livo  yoon?  Com¬ 
panies  in  the  life  sciences  and 
the  financial  sector  are  already 
advanced  today  in  using  local 
grid  technology.  In  about  five 
years,  many  of  the  Fortune  SOO 
companies  will  be  still  grow¬ 
ing  ^obally.  having  sub¬ 
sidiaries  all  over  the  world, 
and  within  these  subsidiaries 
they  have  IT  equipment  that 
may  be  empty  because  it's 
night.  So  DOW  in  a  global  en¬ 
terprise  grid,  a  company  in  Eu¬ 
rope.  for  example,  mighf  want 


to  send  jobs  to  America,  where 
people  are  still  sleeping. 

Utosctencesandftnandalcompa- 
fltos  tend  to  use  grids  for  setontific 
appHcadons  and  modeling.  What 
dNXit  matostream  transaction- 
Pfocoosing  apps?  You  can't 
really  easily  send  independent 
transactions  over  the  Internet. 
Sending  a  transaction  to  a 
remote  server  takes  far  too 
much  overhead,  so  you  send  a 
whole  appUcatioD  to  a  transac¬ 
tion  server.  You  have  several 
transaction  systems  distrib- 
ute<L  It’s  a  grid  because  the 
resoiuces  are  distributed. 

Gtoan  al  thase  iMnoAts.  ii4iy  aren't 
we  aaatog  much  more  rapid  adop- 
I  tionofTids?  Let's  take  the  hype 
out  of  iL  Grids  promise  much 
more  than  they  can  deliver  to¬ 
day  because  grid  technology 
is  not  mature  and  complete. 
There  are  point  products 
which  solve  a  little  bit  but 
don’t  transform  your  wdiole 
environment  into  a  grid.  Grid 
standards  are  still  missing. 

And  there  are  challenges  be¬ 
yond  the  technology.  Server- 
hugging  is  still  a  key  barrier  to 
grids:  people  love  their  own  lit¬ 
tle  systems.  Security  is  another 
issue.  Also  intellectual  property 
—  should  I  really  nm  my  IP- 
heavy  stuff  <m  another  compa¬ 
ny's  server,  or  send  it  over  the 
Internet?  Hiere  are  legal  issues, 
social  issues,  political  issues. 

WImTs  mlMtog  to  itoHdw*?  The 


NATIONAL 

LAMBDARAIL 

NUt  (wwwjdrjuO  is  a  con¬ 
sortium  of  research  universities 
and  companies  working  on  ad- 
vsKadtechnolooieslnn^- 
wofk  architecture.  encHo-end 
performtfice  and  scaing.  It's 
also  a  testbed  nrtwork  based 
on  optical  Dense  Waveiength 
OivieionMiiliplexinQ(DWDM) 
that's  capable  of  liteisrratting 
40  simuttaneous  Bght  wave¬ 
lengths  (lambdas.'  or  wnres). 
with  each  wtmlengih  able  to 
transmit  at  lOGbii^ 

NU)  is  foe  first  network  to 
deploy  transcontinental  dreuits 
based  on  Qhemet  end  to  end. 

It's  also  deploying  a  routed  IP 
network  over  the  optical  QMCM 
network.  By  next  sprtog.  NLR 
wfll  connect  research  tadfibes 
in  27  U,S.  cities. 

Global  Grid  Forum  is  working 
on  these  issues  with  some¬ 
thing  like  50  working  and  re¬ 
search  groups  in  seven  areas 
[such  as  applications,  architec¬ 
ture.  data,  security  and  perfor¬ 
mance],  and  basiodly  all  the 
areas  are  immature. 

For  example,  how  to  grid- 
enable  software  applications. 
Today  you  have  to  write  inter- 
feces  manually.  These  inter¬ 
faces  need  to  be  standardized 
SO  you  can  plug  two  software 
modules  together  seamlessly 
and  at  all  levels  —  aimlication. 


architecture,  data,  security 
and  scheduling  and  resource 
management 

You  speak  of  the  grid  and  the  future 
Intamet  as  If  they  were  one  thing. 

The  current  Internet  is  just 
information.  The  grid  adds 
things  like  coUaboradon,  com¬ 
puting  and  other  thii^  that 
make  it  three-dimensionai  It’s 
doing  real  business  and  devel¬ 
opment  and  production  on  top 
of  that.  Wth  (today's]  Inter¬ 
net,  you  have  information.  But 
with  the  grid,  you  have  access 
to  the  resources  that  use  this 
information.  Grids  are  getting 
more  and  more  general-pur¬ 
pose.  Eventually  they  will 
merge,  and  you  have  the  next- 
generation  Internet. 

WM  H  bo  bsssd  on  the  sanw  stan¬ 
dards  as  today?  Current  proto¬ 
cols.  IDce  in  Sonet.  Ethernet 
and  TCP/IP.  were  built  more 
than  20  years  ago,  and  they 
never  anticipated  the  amount 
of  data  which  they  have  to 
deal  with  today ...  for  the 
“grand  challenge”  applica¬ 
tions.  That's  why  the  National 
LambdaRail  has  been  started, 
and  its  key  focus  is  to  over¬ 
come  the  limitations  of 
TCP/IP  and  other  protocols. 

What  about  foa  ftM  grid  wave,  the 
I  one  far  cewumars?  We  are  talk- 
I  ing  about  gaming  grids,  where 
hundreds  of  gamers  come  to¬ 
gether  and  use  the  grid  for 
really  heavy  interactive  and 
compute-intensive  stuff. 

Also  health  care.  If  you  have 
a  heart  attack  or  stroke  and 
you  are  within  15  minutes  of  a 
hospital  you  get  easy  help. 

But  in  the  countryside,  the 
percentage  of  people  dying 
from  heart  attacks  is  at  least 
50%  higher  than  in  the  cities. 
Now.  a  grid  reduces  distances 
to  zera  so  the  country  doctor 
has  immediate  access  to  all 
these  expensive  machines, 
udiich  have  digital  heartbeats, 
in  the  hospital  If  that  hospital 
is  too  busy,  the  health  care 
grid  broker  selects  another 
resource  that  is  least  loaded. 

How  fir  off  an  tom  MnhwM 
GigMiiM?  Rve  to  10  years. 

Five  is  aggressive;  10  is  defi¬ 
nitely  yes.  O  S07W 


The  seiVer  platform  of  choice 
just  got  better. 


introducing  the  Intel*  Xeon'  processor  with 
support  for  32-  and  64-bit  applications. 

it  means  the  most  widely  used 
server  platform  in  the  world  can  now  work  even  harder. 

And  new  platform  technologies  enable  increased  power  savings, 
flexibility  and  performance.  For  more 
information — and  more  choice — visit  intel.com/business. 


8«a]portfor 
32- yd  64-bit 


FlexfMe  memoty, 
I/O  and  storage 
conflgurabona 


inl^. 
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The  Password  Is: 
Useless  (Probably) 

A  secure  password  is  the  first  line  of 
defense,  but  too  often  they’re  as  easy  to 
crack  as  your  knuckles.  ^  C.J.  Kelly 


isafirc- 
waii  when  you  can 
crack  more  than 
50**ti  ot'thi‘pasf>‘ 
words  on  the  network? 

It  was  fust  3  fluke  that  we 
ran  a  password  audit  last  week 
on  our  own  domain  and  that 
of  a  suhsidtar>-  with  which  we 
have  a  full  two-way  trust  rela¬ 
tionship.  I  was  disheartened 
after  looking  at  the  results  of 
the  repon.  I  called 
the  security  team 
to|ie(her  and  said. 

“We  mijthi  as  well 
go  home.  There’s 
absolutely  no  point 
in  hanging  our  heads 
against  the  wall  any 
longer." 

Why  was  this  password  au¬ 
dit  a  fluke  rather  than  a  regu¬ 
lar  security  measure?  The  fact 
» that  we  have  so  many  things 
on  our  task  lists  that  somc- 
limcs  the  most  obvious  part  of 
security  is  overlooked.  We  suf¬ 
fer  from  a  lack  of  staff,  lack  of 
tools,  lack  of  time,  lack  of  sc- 
cnirity  awareness  and  lock  of 
security  policy  enforcement. 
And  being  new  to  the  compa¬ 
ny.  I  made  a  fundamental  error 
in  osmming  that  the  stated 
password  policy,  which  had 
been  signed  off  on  by  execu¬ 
tives  and  posted  on  the  com¬ 
pany  intranet.  wa.s  actually 
being  enforced  by  IT  across 
our  domain  and  those  of  our 
subsidiaries.  In  a  way.  my 
awareness  of  the  importance 
of  secure  passwords  made  me 
blind  to  the  problem:  Since  I 
care  about  my  password  being 
cracked,  I  chose  a  secure  one. 
and  so  I  didn't  stop  to  test  the 
password  policy. 

Wc'rc  back  to  square  one. 
Without  a  pr\>periy  enforced 
password  policy,  who  cares  if 


the  firewall  is  logging  properly, 
the  SQL  Server  pas-wurd  is 
blank  or  our  patches  are  up  in 
date?  Pa.sswords  are  the  first 
lineofdcfertsc. 

In  a  Windows  network,  the 
password  policy  Is  set  at  the 
domain  level,  and  in  our  envi¬ 
ronment.  that’s  managed  by 
Activo  Directory.  Our  current 
pa.s.sword  policy  includes 
these  provisions: 

•  Ten  passwords 
are  remembered, 
which  means  you 
can’t  reu.se  a  pass¬ 
word  until  you’ve 
chosen  your  11th. 

■  Passwords  ex¬ 
pire  after  a  maxi¬ 
mum  of  45  days. 

■  The  password  must  meet 
"complexity  requirements": 
They  can’t  contain  all  or  part 
of  the  user’s  account  name, 
they  must  be  at  least  eight 
characters  long,  and  the  char¬ 
acters  must  be  chosen  from 
three  of  four  categories  — 
English  uppercase  characters, 
English  lowercase  characters. 
base-10  digits  and  mmalpha- 
bctic  characters  such  as  L  S  or  s. 

Ail  this  sounds  good,  but  the 
policy  isn’t  strict  enough,  and 
it  allows  for  passwords  like 
i^sswordl  and  Password2.  Is 
anyone  surprised  that  we 


I  found  these  types  of  pass¬ 
words  on  the  network? 

When  !  got  the  list  of  users 
whose  passwords  had  been 
easily  cracked,  I  looked  for 
key  e.xccutivcs.  domain  ad¬ 
ministrators  and  other  poten¬ 
tially  risky  log-in-s.  I  found 
them  all.  including  some  high¬ 
ly  visible  executives  with  veiy 
stupid  passwords.  My  first  or¬ 
der  of  business  wa.s  to  e-mail 
one  of  the  domain  admins  and 
ask  him  to  choose  a  mure  se¬ 
cure  password.  Next.  I  sent 
the  list  to  management  and 
asked  for  permission  to  con¬ 
tact  the  vice  president  of  IT  at 
one  of  our  subsidiaries  in  or¬ 
der  to  gain  his  suppK>rt  fur  in¬ 
stituting  a  stricter  password 
policy. 

Password  Hell 

The  next  steps  are  to  put  to¬ 
gether  a  stricter  password  pol¬ 
icy,  obtain  buy-in  from  man¬ 
agement.  publish  the  new  poli¬ 
cy.  change  the  technical  pass¬ 
word  management  policy  to 
the  stricter  settings  —  and 
wait  for  the  outcry  from  end 
users.  Adopting  a  stricter  poli¬ 
cy  sounds  like  a  logical  idea, 
bui  as  we  security  profession¬ 
als  know,  what  makes  perfect 
sense  to  us  often  comes  up 
against  all  kinds  of  resistance. 

An  interesting  question, 
though,  is  what  our  new  pass¬ 
word  policy  will  look  like.  One 
of  my  security  engineers  is 
hellbent  on  implementing 
OTP  (one-time  passwords)  via 
SccurcID  tokens.  Wc  already 
have  a  token  authentication 
scheme  for  remote  users  log¬ 
ging  in  via  VPN.  but  tokens 
aren't  currently  used  internal¬ 
ly.  I  keep  telling  him  that  this 
approach  won't  case  the  pass¬ 
word  hell  facing  our  internal 
end  users.  Many  of  them, 
needing  multiple  pas.swords  to 
log  onto  myriad  applications, 
just  tape  their  passwords  to 
their  monitors.  1  expect  that's 


what  will  happen  with  the  to¬ 
kens  as  well.  Or  worse,  users 
will  lose  their  tokens  every 
other  day.  I  suggested  that 
we  sponsor  a  single-sigo-on 
project  instead. 

An  interesting  option  is  to 
use  passphrases  instead  of 
pa.sswords.  Think  about  It: 

The  longer  the  password,  the 
harder  it  is  to  crack.  A  pass- 
phrase  like  "All  1  want  for 
Christmas  is  my  two  front 
teeth!"  is  statistically  more  dif¬ 
ficult  to  crack  just  by  vinue  of 
the  number  of  characters,  the 
addition  of  spaces,  differing 
word  lengths  and  placement 
of  the  word.s.  As  1  looked  into 
this  issue,  I  came  across  a  re¬ 
cently  published  series  of  arti¬ 
cles  (QuickLinks  a5l70. 05180. 
a5190)  by  jesper  M.  Johansson, 
who  is  the  security  program 
manager  in  Microsoft’s  securi¬ 
ty  business  and  technology 
unit.  What  a  timely  find! 

|ohans.son’s  three-part  sc¬ 
ries  explores  the  question  of 
whether  passphrases  are  bet¬ 
ter  than  passwords.  Part  1 
gives  the  fundamentals  about 
using  passphrases.  i*art  2  fo¬ 
cuses  on  the  mathematical  sta¬ 
tistics  behind  cracking  pass¬ 
words  and  passphrases.  and 
Part  3  give.s  guidance  on  how 
to  choose  passwords  and  con¬ 
figure  a  password  policy. 

In  Pan  2.  Johansson  claims 
that  users  can  remember  long 
passphrases,  that  longer  is 
stronger  and  that  pa.ssphrascs 
can  have  more  randomne.s.s 
than  passwords. 

I'm  fascinated  by  the 
passphrases-vs.'pas.swords 
debate,  and  I'm  eager  to  see 
iu>w  it  turns  tnit.  At  my  compa¬ 
ny.  we’ve  been  trying  to  train 
end  users  to  add  special  char¬ 
acters  to  (heir  passwords  and 
to  create  (and  remember)  non¬ 
sensical  passwords.  Wouldn't 
it  be  grand  if  wc  could  show 
them  an  caster  way  that  was 
much  more  secure?  •  I 


WHAT  DO  YOU  THINK? 

This  week's  loumal  s  wntlm  by  a  real 
security  manaoar.  X  J.  Kelty.*  whose 
name  and  employer  have  disguised 
l(X  obvious  reasons  Contact  her  ai 
mscikellv^^yahoo.com,  or  jom  the  de- 
cu^  in  ^  lorum  OuidiLMi  a1590 
To  find  a  comotets  aii^ive  ot  ow 
Secunly  Manager's  Journals,  go  mline  to 
'  Ocoii»uterwarid.cewV>B^BUfnri 


SECURfT 

' 

MJUUHEirS 

joumuLi 

i 

SECURITY  LOG 


Keeping  Tabs  on 
External  Media 

S«  Rmn,  CaM.-baMd 
SmartUn*  he.  ia  («Am0  out 
ManS.7flfDB«lG«Uck.a 
tool  that  Ma  ayalama  aMiir 
tralors  control  andinar  ae- 
caaa  to  PC  daoicaa  and  porta, 
inekidbigUS8«toRr«Wlrt 
porta  and  ttfhfi  and  Btootoolh 
adaptors.  Tha  iww  varalon 
adda  an  andP  function  dial 
providaa  a  rocofd  of  port  and 
davlcaaeMly.aidianiip- 
toadaanddowTrio^bywv 
and  flto  nama  or  Un.  In  tha 
atondardWindwwEenntlop.lt 
■noQraM  no  mnioiw  Mifeo 
Oltsotaryaodineludiiaflnap' 
In  for  tho  Mferonoft  Manapr 
fiMfrt  Coonolt.  OwdonLoefc  S.7 
«■  bo  aeolibto  far  dwMdond 
at  iirMiir.ndiiaMndtamLCDni 
on  Oac.  8.  Mdnp  bapbw  ad 
$36teraainalalBiwa. 


Fujitsu  Focuses  on 
Notebook  Security 

Fi#aH  Conpntor  apotomi 
Ce^  ii  Mphnnbdng  anewrtty 
totaabiNinnwUlaeeeh 
57000 nototootLAMop  too 
tonb— ajwodtooWoAidhao 
%c  btonwbdc  flnpaiprlnl  aan* 

aor  daoteo;  tha  FidRw  Snowtto 
nnai,  woes  Mn  naan  aaiaci 
ona  of  approntoaltoy 800,000 
oodo  oomtonfiona  to  tack  tho 
tyotoni;  tot  ambiddod  Tnwtod 
PlaltonnliuduiB.nhMiani 
pfois  a  dito  toto  ataeo  owra 
fotoanfltoaeratonrdtoaaf 
cwoiy  by  onayptoip  town:  and 
amart-cardcapaMMas. 


Securing  Wi-Fi 

AbTI^NatwuihilHe.an’ 
nouncad  a  naw  rilaaat  of 
Sp8cMtoard.ihWI-ntow 
wai.lhaSan.loanbnaad 
canpany  aid  Varatan  2.0  pr»- 
toctoapajnaltoi-Raaarty 
thratoi  wieh  aa  rapM  aocaaa 


potoh.  dtonto  oonnacini  to  a 
nitofdiBr‘a88  nntowortt.and 
nianto  ciatobNi  an  uniaoiwd 
eerri  BiM|a  py  eonnMnnp  to 
otovelanlaontoonalwariL 
Startorldl  pridnp  baptoa  at 
87300  far  toarWcyl^wpa 
na>8  Swear  aafbniro  wd  two 
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The  Password  Is: 
Useless  (Probably) 


A  secure  password  is  the  first  line  of 
defense,  but  too  often  they’re  as  easy  to 
crack  as  your  knuddes.  1^  CJ.  Kelly 


ffiAT  GOOD  is  a  fire-  the  firewall  is  lodging  property, 

Wwall  when  you  can  the  SQL  Server  password  is 
crack  more  than  blank  or  our  patches  arc  up  to 
SO%ofthepass*  date?  Passwords  are  the  first 
words  on  the  network?  line  of  defense. 

It  was  hist  a  fluke  that  we  In  a  Windows  network,  the 


ran  a  password  audit  last  week  password  policy  is  set  at  the 
on  our  own  domain  and  that  domain  leveL  and  in  our  envi- 
of  a  subsidiary  with  which  we  ronment,  that's  managed  by 
have  a  full  two-way  trust  rcla-  Active  Directory.  Our  current 
tionship.  1  was  disheartened  password  policy  includes 
after  looking  at  the  results  of  these  provisions: 


SECURITY 


the  report.  1  called  - * -  ■  Ten  passwords 

the  security  team  •riMMffW  ^  remembered, 

together  and  said.  St^URlTT  which  means  you 

’’We  might  as  well  reuse  a  pass- 

go  home.  There’s  word  until  you’ve 

absolutely  no  point  J(|(||DULo  chosen  your  llth. 

in  banging  our  beads  _  ■  Passwords  cx- 

against  the  wrall  any  pire  after  a  maxi- 

longer.”  mum  of  45  days. 

Why  was  this  password  au-  ■  The  password  must  meet 
dit  a  fluke  rather  than  a  regu-  “complexity  requirements”; 
lar  security  measure?  The  fact  They  can’t  contain  all  or  part 
is  that  we  have  so  many  things  of  the  user’s  account  name, 

on  our  task  lists  that  some-  they  must  be  at  least  ei^t 
tiroes  the  most  obvious  part  of  characters  long,  and  the  char- 
security  is  overlooked.  We  suf-  acters  must  be  chosen  from 
fer  from  a  lack  of  staff,  lack  of  three  of  four  categories  — 

tools,  lack  of  time,  lack  of  se-  English  uppercase  characters, 

curity  awareness  and  lack  of  English  lowercase  characters, 
security  policy  enforcement.  base-10  digits  and  nonaipha- 
And  being  new  to  the  compa-  betic  characters  such  as  I,  S  or  «. 

ny.  1  made  a  fundamental  error  All  this  sounds  good,  but  the 


in  assuming  that  the  stated 
password  policy,  wdtich  had 


policy  isn’t  strict  enough,  and 
it  allows  for  passwords  like 


been  signed  off  on  by  execu-  Password!  and  Password2. 1$ 

tives  and  posted  on  the  com*  anyone  surprised  that  we 
pany  mtranet.  was  actually 
being  enforced  by  IT  across 

our  domain  and  those  of  our  H  An  IntBFBStinO  I 
5ubsidUrics.taaway.my  ■  quesUon  iS  Wtiat  | 

Wind  to  the  problem:  Since  I  I  ^  pOwCy  WW  wOK  I 
care  about  my  password  being  ■  aie.Onepa«iiaty  I 
oacked.  I  chose  a  secure  one.  ■  rmloal^intO  | 
and  so  I  didn't  siop  to  test  the  ■  jjtousepass-  I 

’’^hS^sqnareooe.  I  phrMBS  ilBtoad  of  I 

^^fltbout  a  property  enforced  PSSSWOrds. 

password  poti^,  who  cares  if  HH 


found  these  types  of  pass¬ 
words  on  the  network? 

When  1  got  the  list  of  users 
whose  passwords  had  been 
easily  cracked.  I  looked  for 
key  executives,  domain  ad¬ 
ministrators  and  other  poten¬ 
tially  risky  log-ins.  I  found 
them  all,  including  some  high¬ 
ly  visible  executives  with  very 
stupid  passwords.  My  first  or¬ 
der  of  business  was  to  c-mail 
one  of  the  domain  admins  and 
ask  him  to  choose  a  more  se¬ 
cure  password.  Next.  I  sent 
the  list  to  management  and 
asked  for  permission  to  con¬ 
tact  the  vice  president  of  IT  at 
one  of  our  subsidiaries  in  or¬ 
der  to  gain  his  support  for  in¬ 
stituting  a  stricter  password 
policy. 

Password  Hdl 

The  next  steps  are  to  put  to¬ 
gether  a  stricter  password  pol¬ 
icy.  obtain  buy-in  from  man- 
ageroenl,  publish  the  new  poli¬ 
cy.  change  the  technical  pass¬ 
word  management  policy  to 
the  stricter  settings  —  and 
wait  for  the  outcry  from  end 
users.  Adopting  a  stricter  poli¬ 
cy  sounds  like  a  logical  idea, 
but  as  we  security  profession¬ 
als  know,  what  makes  perfect 
sense  to  us  often  comes  up 
against  all  kinds  of  resistance. 

An  interesting  question, 
though,  is  what  our  new  pass¬ 
word  policy  will  look  like.  One 
of  my  security  engineers  is 
hellbent  on  implementing 
OTP  (one-time  passwords)  via 
SecurelD  tokens.  We  already 
have  a  token  authentication 
scheme  for  remote  users  tog¬ 
ging  in  via  VPN,  but  tokens 
aren't  currently  used  internal¬ 
ly.  I  keep  telling  him  that  this 
approa^  won’t  ease  the  pass¬ 
word  bell  facing  our  internal 
end  users.  Many  of  them, 
needing  multiple  passwords  to 
log  onto  myriad  applications, 
jttst  tape  their  passwords  to 
their  monitors.  I  expect  that's 


what  will  happen  with  the  to¬ 
kens  as  well.  Or  worse,  users 
will  lose  their  tokens  every 
other  day.  1  suggested  that 
we  sponsor  a  single-sign-on 
project  instead. 

An  interesting  option  is  to 
use  passphrases  instead  of 
passwords.  Think  about  it: 

The  longer  the  password,  the 
harder  it  is  to  crack.  A  pass- 
phrase  tike  “All  1  want  for 
Christmas  is  my  two  front 
teeth!"  is  statistically  more  dif¬ 
ficult  to  crack  just  by  virtue  of 
the  number  of  characters,  the 
addition  of  spaces,  differing 
word  lengths  and  placement 
of  the  words.  As  I  looked  into 
this  issue,  I  came  across  a  re¬ 
cently  published  series  of  arti¬ 
cles  [C^icklinks  a5170.  aSlSO, 
a5190]  by  Jesper  M.  Johansson, 
who  is  the  security  program 
manager  in  Microsoft's  securi¬ 
ty  business  and  technology 
unit.  What  a  timely  find! 

Johansson's  three-part  se¬ 
ries  explores  the  question  of 
whether  passphra^  are  bet¬ 
ter  than  passwords.  Part  I 
gives  the  fundamentals  about 
using  passphrases.  Part  2  fo¬ 
cuses  on  the  mathematical  sta¬ 
tistics  behind  cracking  pass¬ 
words  and  passphrases,  and 
Part  3  gives  guidance  on  bow 
to  choose  passwords  and  con¬ 
figure  a  password  policy. 

In  Part  2.  Johan^n  daims 
that  users  can  remember  long 
passphrases,  that  longer  b 
stronger  and  that  passphrases 
I  can  have  more  randomness 
than  passwords. 

I'm  fascinated  by  the 
pa$sphrases-vs.-passwords 
debate,  and  I'm  eager  to  see 
how  it  turns  out.  At  my  compa¬ 
ny,  we*ve  been  trying  to  train 
end  users  to  add  special  char¬ 
acters  to  their  passwords  and 
to  create  (and  remember)  non¬ 
sensical  passwords.  Wouldn’t 
it  be  grand  if  we  could  show 
them  an  easier  way  that  was 
much  more  secure?  k 
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ContM«r  th«  dots  coonectod.  Voice  over  IP  is  at  the  heart  of  The  Latin  School 
••••••••••!••  0^  Chicago’s  new  network.  Tlianks  to  an  ifrtegrated  platform,  Web  site  and  phone 

system  information  is  easy  to  manage,  features  and  new  users  are  easy  to  add.  And 
V*  phones  in  classrooms,  it's  easy  to  access  important  Wei>t>ased  information. 
*  **••*•**••  Like  v^iether  the  day’s  lunch  is  gried  cheese  or  ravioli.  Rnd  out  more  about  how  we’re 

*  *  helping  Latin  School  connect  the  dots  at  sbc.corrv'dots.GOMG  BEYOND  TIE  CALL! 
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Ster^  Rolls  Out 
Services  Platform 

•  Starling  Commvca  he  in 
Dublin.  Ohio,  annmjncod  its  ftlufti-  I 
Enterprise  Sorvices  ArtMactwe. 
erfiidi  is  designed  to  aNow  com* 
panies  to  extend  Web-services' 
based  appficaiions  beyond  the 
enterprise.  Sterfing  wM  ofler  ser-  | 
vices  lor  business  integration, 
busness  inteioBnee  and  busi¬ 
ness  process  tnanagenrerrt  and  i 
deivsry.  The  company  moI  pro¬ 
vide  management  dashboards, 
portals  and  user  interfaces  to 
summarize  wiformation  from  mul- 
bpie  data  sources.  Mcmg  Mor- 
matton  tras  not  avaiable. 


Cisco  Announces 
Swrtching  Platform 

•  Cisco  Systens  he.  announced 
theONSISStOCSSmetMulti- 
servico  Provisioning  Ptatferm.  a 
new  optical  switching  systan  for 
uso  on  the  edge  of  networfo.  H’s 
designed  to  help  usars  deptoy 
MTvices  such  as  private-Rne  and 
switched  Ethernet  services  with¬ 
out  having  to  redesign  or  risnipt 
an  entire  networh.  The  1U  a75 

h.  high)  rack  platform  is  htor- 
operabfo  with  Cisco's  ONS  5454 
Sonet  MSPP  gear.  Avelable  h 
December,  one  verston  ot  the 
15310  that  connects  to  an  OC-3 
connection  starts  at  SS.OOO. 


Compuware  Bundle 
Coven  Governance 

•  Comtwware  Corp.  this  week 
announcadCompiiwarefTOover* 
nance  by  Chwigepoht.  a  bundfo 
of  software  products,  indudhg 
some  resuNhg  from  Compu- 
ware's  acquisition  of  Changepoht 
Corp.  The  package  is  designed  to 
provide  a  comprehensive  view  of 
the  performance  of  al  IT  hvest- 
mants.  the  Detroit-based  compa¬ 
ny  said.  The  ConqNiware  software 
components  are  expected  to  be- 
gh  shipping  by  early  Jwiuary.  j 

and  the  Changepoht  components 
are  schoduled  to  shto  by  Jm.  15. 
The  Changepoim  components  wiU  ' 
be  priced  on  a  peruser  basis, 
ranging  from  £250  per  usar  to 
31.500  per  user.  I 


802.11n’s  Pregame  Show 


IN  THE  Star  Wars  movie  parody  Spaceballs,  the 
character  Dark  Helmet  (played  by  Rick  Moranis) 
commands  his  crew  to  shift  to  “ridiculous 
speed”  to  pursue  another  spaceship.  Ignoring 
warnings  from  his  crew  that  the  technology  is 
unproven  and  untested,  the  pompous  chief  executive 
blunders  onward  toward  disaster. 

tentiaiiy  be  disruptive  not 
only  to  the  buyer  but  also 
to  users  of  any  other 


Similarly,  attempts  by 
vendors  to  jump  ahead  of 
the  wireless  LAN  stan¬ 
dards  game  with  new  high¬ 
speed  adapters  and  access 
points  under  the  802.11n 
banner  could  deal  heedless 
customers  an  equally  un¬ 
pleasant  —  and  much  less 
humorous  —  blow. 

The  IEEE  has  only  just 
begun  considering  techni¬ 
cal  proposals  for  a  new 
high-bandwidth  WLAN 
standard  known  as  802.1In.  Four  com¬ 
plete  proposals  and  28  partial  propos¬ 
als  were  submitted  for  the  specifica¬ 
tion,  w’hich  will  be  backward-compati¬ 
ble  with  current  802.11b  and  g  stan¬ 
dards  while  pushing  real-world  data 
rates  to  at  least  lOOMbit/scc.  and  pos¬ 
sibly  as  high  as  500Mbit/sec. 

There  is  no  802.nn  standard  today. 
As  yet.  there  is  no  agreement  even  on 
which  technical  proposals  should  be 
included.  Final  ratification  of  a  stan¬ 
dard  isn’t  e.vpccted  before  late  2006. 
and  mature,  business-class  products 
probably  won't  appear  before  2007.  Yet 
the  first  “pre-n"  products  are  already 
heading  for  store  shelves. 

Belkin  Corp.’s  $99.99  Pre-N  Note¬ 
book  Adapter  and  $149.99  Wireless 
Pre-N  Broadband  Router  use  one  of 
the  technologies  proposed  to  IEEE 
Task  Group  N.  but  calling  the  products 
•  pre-n"  is  stretching  the  truth.  When 
run  in  pre-n  mode,  these  are  nonstan¬ 
dard  products,  with  ail  of  the  risks  that 
implies.  And  because  prestandard 
802.11n  products  use  the  public  air¬ 
waves  and  operate  in  the  same  2.4-  and 
5-GH2  frequency  bands  as  existing 
802.Ub  and  g  products,  they  could  po-  ' 


WLAN  equipment  within 
the  same  range.  Such  prod¬ 
ucts  arc  also  unlikely  to  be 
forward-compatible  with 
real  802.11n  products  when 
they  arrive  and  could  in¬ 
terfere  with  the  operation 
of  future  802.11n  devices. 

Gartner  analyst  Ken  Du¬ 
laney  is  disgusted.  "It  was 
bad  for  these  guys  to  stan 
doing  pre-802.11n,"  he  says,  citing  the 
potential  for  interoperability  problems 
for  both  consumers  and  business  u.scrs. 

For  its  part.  Belkin  saj-s  its  equip¬ 
ment  is  backward-compatible.  Indeed, 
its  Pre-N  products  are  certified  by 
the  Wi-Fi  Alliance  —  although  only 
for  802.11b  and  g  mode  operation. 
However,  that  distinction  will  be  lost 
on  most  buyers,  who  are  likely  to  asso¬ 
ciate  the  Wi-Fi  Alliance  certification  i 
logo  on  the  box  with  the  Pre-N  prod-  I 
uct  name. 

The  alliance  won't  actually  begin 
certifying  802.1ln  products  until  No¬ 
vember  2006.  and  it  has  stated  that  it 
will  revoke  certification  for  any  prod¬ 
uct  claiming  802.11n  features  if  it  fails 
to  interoperate  with  other  Wi-Fi-certi¬ 
fied  product!,.  The  alliance  doesn't  like 
the  idea  of  vendors  using  802.11n  ter¬ 
minology  to  market  nonstandard  prod¬ 
ucts.  Managing  director  Frank  Hanziik 
says  the  alliance  is  trying  to  discour¬ 
age  “terms  that  imply  compliance  with 
802.11n.” 

But  the  alliance's  policy  falls  short  of 
banning  the  practice.  That  leaves  oth¬ 
er  vendors  free  to  co-opt  the  802.nn 
name  as  they  develop  and  market  their 


own  WLAN  products  that  include  pro¬ 
prietary  high-speed  operating  modes, 
alt  the  while  slapping  the  reassuring 
Wi-Fi  certification  logo  on  the  box. 

This  type  of  marketing  sleight  of 
hand  isn’t  anything  new  in  the  wire¬ 
less  realm.  Vendors  have  always  over¬ 
stated  the  actual  throughput  of  WLAN 
devices.  For  example,  the  nominal  data 
rate  for  802.1Ig  devices  is  marketed  at 
"an  incredible”  54Mbit/sec..  but  engi¬ 
neers  will  tell  you  that  actual  through¬ 
put  efficiency  is  t>’pically  only  half  the 
published  speed.  Many  vendors  also 
offer  proprietary  “turbo"  modes  that 
are  about  twice  as  fast  as  802.11g. 

With  a  real-world  throughput  of  at 
least  lOOMbit/scc..  the  new  802.11n 
standard  would  be  about  four  times  as 
fast  as  802.1]g.  That’s  a  powerful  in¬ 
centive  for  manufacturers,  which  are 
trying  to  differentiate  their  products  in 
an  intensely  competitive  market  So.  as 
they  did  with  802.11g.  vendors  are  like¬ 
ly  to  push  forward  with  early  802.11n 
designs. 

Vendors  are  offering  higher  speeds 
not  because  business  users  arc  de¬ 
manding  the  increa.scd  bandwidth  but 
because  of  the  need  to  differentiate  — 
and  because  the  industry  hopes  to  fill 
those  fatter  wireless  communication 
channels  with  multimedia  content  for 
consumers.  Most  businesses  don’t 
need  it  today,  but  they're  going  to  get 
it  anyway. 

Network  administrators  have  a  hard 
enough  time  keeping  industry-stan¬ 
dard  rogue  access  points  off  the  corpo¬ 
rate  network.  But  some  engineers  and 
executives  arc  going  to  sec  pseudo- 
802.11n  WLAN  products,  glance  at  the 
Wi-Fi  label,  buy  it  and  power  up  the 
unit's  proprietary  and  untested  802.nn 
mode  in  the  office. 

Every  organization  has  its  share  of 
Dark  Helmets.  Such  ridiculous  mar¬ 
keting  gimmicks  will  only  make  it 
more  difficult  to  keep  them  in  check. 
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Storing  RdIs  Out 
Services  Ptatform 
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Cisra  Announces 
Switching  Platform 

■  Cheo  Statona  Inc.  anaunad 
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Compuware  Bundle 
Cavers  Governance 

■  Cnmgman  Caip,  IMa  aaak 
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802.11n’s  Pregame  Show 


IN  THE  Star  Wars  movie  parody  SpacebaUs,  the 
character  Dark  Helmet  (played  by  Rick  Moranis) 
commands  his  crew  to  shift  to  “ridiculous 
speed”  to  pursue  another  spaceship.  Ignoring 
warnings  from  his  crew  that  the  technology  is 
unproven  and  untested,  the  pompous  chief  executive 
blunders  onward  toward  disaster. 

tentially  be  disruptive  not 
only  to  the  buyer  but  also 
to  users  of  any  other 
WLAN  equipment  within 
the  same  range.  Such  prod¬ 
ucts  are  also  unlUcely  to  be 
forward-compatible  with 
real  802.11n  products  when 
they  arrive  and  could  in¬ 
terfere  with  the  operation 
of  future  802.11n  devices. 

Gartner  analyst  Ken  Ehi 
laney  is  disgusted.  "It  was 
bad  for  these  guys  to  start 
domg  pre-802.11n,"  he  says,  citing  the 
potential  for  interoperability  problems 
for  both  consumers  and  business  users. 

For  its  part.  Belkin  says  its  equip¬ 
ment  is  backward-compatible.  Indeed, 
its  Pre-N  products  are  certified  by 
the  Wi-Fi  Alliance  —  although  only 
for  802.11b  and  g  mode  operation. 
However,  that  distinction  will  be  lost 
on  most  buyers,  who  are  likely  to  asso¬ 
ciate  the  Wi-Fi  Alliance  certification 
logo  on  the  box  with  the  Pre-N  prod¬ 
uct  name. 

The  alliance  won’t  actually  begin 
certifying  802.lln  products  until  No¬ 
vember  2006,  and  it  has  stated  that  it 
will  revoke  oerdfication  for  any  prod¬ 
uct  claiming  802Jln  features  if  it  fmts 
to  interoperate  with  other  Wi-Fi-certi¬ 
fied  products.  The  alliance  doesn't  like 
the  idea  of  vendors  using  802.Un  ter¬ 
minology  to  market  rmnstandard  prod¬ 
ucts.  Managing  director  Frank  Hanzlik 
says  the  alliance  is  trying  to  discour¬ 
age  “terms  that  imply  compliance  with 
802.11n." 

But  the  alliance’s  policy  &lls  short  of 
banning  the  practice.  That  leaves  oth¬ 
er  vendors  free  to  co-opt  the  802.Un 
name  as  they  develop  and  market  their 


Similariy,  attempts  by 
vendors  to  jump  ahead  of 
the  wireless  LAN  stan¬ 
dards  game  with  new  high¬ 
speed  adapters  and  access 
points  under  the  802.lln 
banner  could  deal  heedless 
customers  an  equally  un¬ 
pleasant  —  and  much  less 
humorous  —  blow. 

The  IEEE  has  only  just 
begun  considering  techni¬ 
cal  proposals  for  a  new 
high-bandwidth  WLAN 
standard  known  as  802.Un.  Four  com¬ 
plete  proposals  and  28  partial  propos¬ 
als  were  submined  for  the  specifica¬ 
tion,  which  will  be  backward-compati¬ 
ble  with  current  802.Ub  and  g  stan¬ 
dards  while  pushing  real-world  data 
rates  to  at  least  lOOMbit/sec.  and  pos¬ 
sibly  as  high  as  500Mbit/sec 
There  is  no  802Jln  standard  today. 
As  yet,  there  is  no  agreement  even  on 
which  technical  proposals  should  be 
included.  Final  ratification  of  a  stan¬ 
dard  isn’t  expected  before  late  2006. 
and  mature,  business-class  products 
probably  won’t  appear  before  2007.  Yet 
the  first  “pre-n"  products  are  already 
heading  for  store  shelves. 

Belkin  Corp.’s  $99.99  Pre-N  Note¬ 
book  Adapter  and  $149.99  Wireless 
Pre-N  Broadband  Router  use  one  of 
the  technologies  proposed  to  tfff 
Task  Group  N.  but  c^ling  the  products 
“pre-n"  Is  stretching  the  truth.  When 
run  in  pre-n  mode,  these  arc  nonstan¬ 
dard  products,  with  all  of  the  risks  that 
implies.  And  because  presiandard 
802.11n  products  use  the  public  air¬ 
waves  and  operate  in  the  same  2.4-  and 
5-GHz  frequency  bands  as  existing  i 
802.ilb  and  g  products,  they  could  po-  I 


own  WLAN  products  that  include  pro¬ 
prietary  high-speed  operating  modes, 
all  the  while  slapping  the  reassuring 
Wi-Fi  certification  logo  on  the  box. 

This  type  of  marketing  sleight  of 
hand  isn’t  anything  new  in  the  wire¬ 
less  realm.  Vendors  have  always  over- 
suted  the  actual  throughput  of  WLAN 
devices.  For  example,  the  nominal 
rale  for  802.11g  devices  is  marketed  at 
“an  incredible"  54Mbit/sec.,  but  engi¬ 
neers  will  tell  you  that  actual  through¬ 
put  efficiency  is  typically  only  half  the 
published  speed.  Many  vendors  alw 
offer  proprietary  “turbo"  modes  that 
are  about  twice  as  fast  as  802 Jig. 

With  a  real-world  throughput  of  at 
least  lOOMbit/sec.  the  new  802.11n 
standard  would  be  about  four  times  as 
fast  as  802.11g.  That’s  a  powerful  in¬ 
centive  for  manufacturers,  which  are 
trying  to  differentiate  their  products  in 
an  intensely  competitive  market.  Sa  as 
they  did  with  SOZUg,  vendors  are  Bke- 
ly  to  push  forward  with  early  802.Un 
designs. 

Vendors  are  offering  higher  speeds 
not  because  business  users  are  de¬ 
manding  the  increased  bandwidth  but 
because  of  the  need  to  differentiate  — 
and  because  the  industry  hopes  to  fill 
those  fatter  wireless  communication 
channels  with  multimedia  content  for 
consumers.  Most  businesses  don’t 
need  it  today,  but  they’re  going  to  get 
it  anyway. 

Network  administrators  have  a  hard 
enough  time  keeping  industry-stan¬ 
dard  rogue  access  points  off  the  corpo¬ 
rate  network.  But  some  engineers  and 
executives  are  going  to  see  pseudo- 
802.11n  WLAN  products,  ^ance  at  the 
W-Fi  label,  buy  it  and  power  up  the 
unit’s  proprietary  and  untested  802ain 
mode  in  the  office. 

Every  organixation  has  its  share  of 
Dark  Helmets.  Such  ridiculous  roar- 
keting  gimmicks  will  only  matfM  it 
more  difficult  to  teep  them  in  check. 
OSIQB 
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Working-Ai-Home  Walter 


Jll 

Who  can  blame  Working-At-Home  Walter  for  feeling  a  bit 
smug  as  he  tunes  his  radio  to  the  morning  traffic  report? 
he's  not  stuck  in  diat  freeway  mess  caused  by  the 
U  overturned  lobster  truck  He  hasn't  even  shaved,  and 

*  may  well  not  until  dinner.  Working-At-Home  Walter  has 

swapped  his  wingtips  for  fuzzy  slippers,  but  still 
manages  to  stay  highly  productive— not  to  mention  better 
fed  than  his  in-office  compatriots.  As  Working-At-Home 
Waiter  says,  it's  all  a  matter  of  having  Hie  right  technology  to  make  a 
home  a  castle  of  productivity. 


Do  you  feel  you  ate  really  as  productive  at  home  as  you  used  to  be  in 
the  office? 

Actually  no.  I’m  more  productive!  It  took  me  a  while  to  realize  that  all  those 
water  cooler  conversations,  nosh  breaks,  meetings  that  always  seem  to  run 
longer  than  they  need  to.  and  other  office  antics  didn't  help  my  productivity  one 
iota.  At  home.  I’m  totally  focused.  I  have  more  flexibility,  too.  If  I  have  to  stop 
work  at  4:30  to  start  dinner— I'm  a  great  cook  you  know— I'll  go  back  to  work 
at  7  to  finish  up. 


How  has  your  boss  reacted  to  your  working  at  home  so  much? 

My  boss  and  the  rest  of  the  brass  believe  that  happy  workers  are  productive 
workers.  Mobile  technology  from  Nokia  has  helped  me  balance  my  home  and 
work  life.  I'm  very  highly  motivated  to  be  as  productive  here  as  I’d  be  in  the 
office,  maybe  even  more  so.  because  working  at  home  gives  me  that  balance  I 
need. 


they  suppoa  so  extending  key  applications  to  sofa  Jockeys  like  me  has  been  no 
problem.  Excuse  me  a  second.  Gotta  take  a  call  from  one  of  my  kids  at  soccer 
practice. 

So  whaf  s  the  secret? 

In  a  word.  Nokia.  Only  its  no  secret  because  the  company  is  world  renowned 
for  helping  guys  like  me  commute  less,  connea  with  coworkers  from  the  comfort 
of  my  patio  lounge  chair,  and  vrork  in  my  pj's.  My  mom  got  me  tfwse.  so  no  laugh¬ 
ing.  OK? 

What  are  ffie  most  important  technologies  for  your  worfc-ai-home 
success? 

My  laptop  is  numero  uno  with  me,  but  only  If  I  can  have  confident  that  the 
connection  l  have  back  to  corporate  is  secure,  given  the  info  I  need.  Mobile  email 
is  my  killer  application  so  it  has  got  to  be  working  24/7 

Why  is  security  so  important  to  you? 

Don't  let  the  slippers  arxJ  pajamas  fool  you.  Tve  got  an  important  major 
accounts  Job.  I  need  access  to  business-critical  information  intended  for  very  few 
eyes.  That  access  has  to  be  as  secure  as  the  gold  at  Fort  Knox.  So  we  use  Nokia 
Secure  Access  System,  fm  no  computer  whiz,  but  fm  told  this  system  leverages 
something  called  SSL  technology  running  on  Nokia's  IP  Security  Platforms.  Look, 
the  bottom  line  is  this:  Instead  of  worrying  If  my  data  is  safe.  I  get  anytime, 
anywhere  access  to  email,  tfie  corporate  intranei  management  portals,  and  Just 
about  any  data  I  need— instantly  and  in  real  time.  It's  way  cool! 


About  the  Interviewer 


Bin  Laberis  was  editor  in  chief  of  Cbmputerworkf  for  ten 
years  (1986-1996).  He  Is  president  of  Bill  Uberis 
Associates,  a  custom  publishing  and  content  company 
(wwwJaba1s.com).  ffis  oohimns,  Webcasts,  supplements 
and  magazines  are  wdl-known  and  respected  duoughout  the  high- 
tedi  industry. 

And  the  IT  people,  what  do  they  think  of  your  working  remotely? 

My  buddy  Joe  in  fT  says  it  doesn’t  matter  to  him  and  his  crew  where  I  vwjrk. 
Nokia  helped  the  IT  department  apply  best  IT  practices  to  all  the  mobile  gear 


What  other  mobile  technologies  work  for  you? 

1  love  my  Nokia  6820.  It  gives  me  quick  and  reliable  access  to  the  data  I  need 
and  the  people  1  want  to  contaa  It’s  got  a  great  color  screen  for  my  tired  eyes. 
The  quality  of  the  speaterphone  for  conference  calling  is  outstanding.  Depending 
on  my  mood  and  needs.  I  also  use  my  smartphone  based  on  the  Nokia  Series  60 
software  platform.  It’s  unbeatable  for  voice  and  data  connections,  whether  for 
email  on-the-fly  or  Just  messing  around  on  the  Internet 

You  are  ki  great  shape.  How  do  jmu  stay  away  from  the  refrigerator 
during  the  day? 

Working  at  home  takes  some  discipline.  I  ration  myself  two  trips  to  the  kitchen 
for  snacks  a  day.  Just  like  a  regular  office  break.  And  once  in  a  while  I  ask  my  wife, 
"Honey,  do  I  look  fat?"  Let's  Just  say  I  married  an  honest  woman 


Learn  how  to  mobilize  your  team  and  increase  business  productivity. 
Download  “The  Anytime,  Anyplace  World”  white  paper, 

nokiaforbusiness,com 


IMOKIA 

Connecting  People 


COMPUTERWORLD  HAS  BEEN  NAMED 
MAGAZINE  OFTHE  YEAR  FOR  2004. 
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Tliink  Tank 

A  good  help  desk  can  boost 
office  productivity  by  2%,  a 
benchmarking  firm  says;  and 
a  book  titled  The  New  CIO 
Leader  might  help  you  crack 
the  inner  circle  of  the 
executive  suite.  Page  42 


Career  Watch 

Too  many  top  executives 
add  too  little  value;  the 
boom  in  security  hires 
continues;  economic 
indicators  don’t  have  to 
be  borii^  and  security  is 
where  the  jobs  are.  Paige  4^ 


OPINION 

Just  Think  About  h 

While  it’s  true  that  managers 
thrive  on  action.  Paul  Glen 
says  the  best  ones  will  learn 
and  grow  by  reflecting  on  this 
year  before  diving  into  the 
next  one.  Page  46 


Global  data synchro- 
nization  can  boost 
H  worldwide  supply 
chain  efficiency, 
but  achieving  it  may 
be  complicated, 
painful  and  costly. 
ByCaroISlivwa 

Sync 


Radio  frequency  iden¬ 
tification  may  be  grab¬ 
bing  headlines  as  the 
hot  technology  in  the 
retail  suf^ly  chain. 

But  another  mammoth 
initiative  was  gathering  steam  loi% 
before  Wal-Mart  Stores  Inc  asked 
its  suppliers  to  affix  RFID  tags  to 
pallets  and  cases. 

Wal-Mart  and  more  than  two  dozen 
retailers,  including  The  Home  Depot 
Inc.,  Lowe’s  Companies  Inc,  Ace  Hard¬ 
ware  Corp.  and  grocers  Albertsons  Inc. 
and  Wegmans  Food  Markets  ifK,,  have 
been  preaching  the  merits  of  data  syn¬ 
chronization  to  help  rid  their  supply 
chains  of  error-infested  documents 
and  lengthy  product  introductions. 
They’ve  aric^  suppliers  to  submit 
standards-based  data  to  a  centralized 
global  directory,  which  in  January  will 
be  known  as  tl^  GSl  Global  R^istry. 

Having  accurate,  updated  data  fed 
into  their  master  product  flies  nv>ang 
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GLOSSARY 


DATA  SYNCHRONIZATION: 
The  procass  of  alioning  data  be¬ 
tween  tradbig  partners,  l^idates  to 
data  attributes,  such  as  a  change  in 
price  or  the  addition  of  a  color,  are 
automaticalfy  delivered  to  reclpi* 
errts  who  previousiy  synchronized 
on  published  date. 


GLOBAL  DATA 
SYNCHRONIZATION 
NETWORK  (ODSN):  A  global 
registry  and  network  of  interopera- 
bledatepeolBthatenablethesyn- 
deonizlng  of  date  between  tra<^ 
parinats.Theglebalnetvrorfcre* 
nwves  the  need  for  rateHers  and 
lugpien  to  synchronize  with  each 
other  on  a  one  to  one  basis.  Under 
the  60SN  w*t>BL  they  need  only  to 
synchronize  with  a  date  pool  dial 
sends  Mormatlon  to  a  global  reg¬ 
istry  and  it  cartifiod  to  Meroperate 
with  other  date  pods. 


OS1  REGISTRY:  The  centralizad 
dbectory  of  the  6iobal  Date  Syn- 
chronizatioo  lietwork.  Basic  infer- 
nation  about  products  and  the 
companies  thd  make  and  sell  then 
is  regislarod  and  stored  in  the  6S1 
Registfy.  "Mnlera*  are  provided  to 
the  appropriate  data  pooia,  where 
more  information  about  specific 
keros  or  companies  can  be  found. 
Al  date  must  be  vaUatod  against 
stendardsestabBshadbyEANIntor- 
nalional  and  UnAorm  Code  Council 
toe.  A  uniqun  Olobal  Trade  item 
Number  is  used  for  each  product 
and  aarvfoe;  a  Otobal  ioeaflon 
Number  udqnly  kfentMtee  each 
company  and  pfqrsicai  location. 


DATA  POOL:  An  entity  that  pro¬ 
vides  date  aynchronizalfon  asrvices. 
rogittry  lorvkeaandattogtopoint 
of  aniry  to  ttw  60SN.  ttote  po^ 
muBt  bo  certiBad  aeoerdtog  to 
EAiyUCC  lyitam  itandardi.  Date 
poem  BNaropama  WnB  ma  usn 
BtobelftegWryandwHhonaanoth- 
er.Appnwid  data  pnnhma  CABAS- 
net,  Clcfc  Cammarea  toe.,  Olebal  Ei- 
changa  SandcoB,  SMRIS  BoteH. 
Stering  Cemiaaroa  toe.,  Tranaora 
toe.,  UCCnal  toe.  nd  WbrfdWIdB 
RatdiCaciiingillC. 


rciailers  won’t  have  to  waste  time  rec- 
oneiling  errors  in  purchase  orders  and 
invoices.  And  data  accuracy  is  also  a 
critical  step  in  creating  the  foundation 
for  RFID,  when  large  volumes  of  infor¬ 
mation  will  be  flowing  fast  and  furi- 
ousiy  through  the  supply  chain. 

-You  have  to  have  good  data.”  says 
Kathryn  Cullen,  a  technology  special¬ 
ist  at  Kun  Salmon  Associates  Inc.,  a  re¬ 
tail  and  consumer  pnxlucts  consultan¬ 
cy  in  Atlanta.  “Otherwise,  you’re  de¬ 
feating  the  point  of  speeding  up  data." 

But  like  RFID,  data  synchr«>nizaiion 
projcct-s  are  rife  with  challenges  for 
retailers  and  their  suppliers,  in  a  re¬ 
cent  Compufenvor/d  survey  of  25  proj¬ 
ect  managers,  about  a  third  said  they're 
having  difficulry  mustering  the  neces¬ 
sary  interna!  resources  for  data  syn¬ 
chronization  products,  in  some  cases 
because  the  near-term  ROI  is  elusive. 

Andrew  White,  an  analyst  at  Gartner 
Inc.,  estimates  that  only  5%  of  retailers 
have  launched  item  synchronization 
eflbrts.  the  first  step  in  data  synchro¬ 
nization.  Some  of  the  manufacturers 
that  have  worked  to  comply  with  the 
big  retailers'  directives  arc  having 
difficulty  finding  other  retailers  ready 
to  undertake  a  synchronization  project 
with  them,  he  adds.  That  makes  it 
tough  to  recoup  compliance  costs 
and  move  on  to  the  next  phase,  when 
the  companies  will  share  more  exten¬ 
sive  product  and  price  attribute  data 
that  should  bring  a  bigger  payoff. 

White  says. 

At  that  point,  slashing  the  time  and 
ha.vsic  associated  with  introducing 
products  and  launching  price  promo¬ 
tions  are  just  two  of  the  benefits  retail¬ 
ers  and  suppliers  can  expect.  White 
says.  In  the  longer  term,  data  synchro¬ 
nization  efToris  should  enable  more 
coibborative  planning,  he  adds. 


Dirty  Data 


But  today,  “mess*’  is  a  word  that's  often 
used  to  characterize  the  state  of  the 
data  in  the  internal  systems  of  retailers 
and  suppliers,  it's  not  uncommon  to 
find  the  same  product  referred  to  in 
different  ways  in  multiple  files,  obso¬ 
lete  item  numbers  lingering  for  >'ears 
and  product  attributes,  such  as  dimen¬ 
sions  or  the  number  of  items  in  a  pack, 
defined  incoasistcntly  from  one  com¬ 
pany  to  the  next. 

For  instance.  Smart  &  Final  Inc. 
found  47  different  addresses  for  IBM 
and  numerous  ways  to  identify  the 
vendor,  and  they  were  all  in  the  same 
system,  says  CIO  Zeke  Ouge.  Is  it 
CocaCola.  Cocacola  or  Coca  Cola  ^ 
uppercase,  lowercase,  one  word,  two 
words?  Smart  &  Final  had  them  all. 


Everyone  is 
fully  aware 
of  what  the  future 
return  is  going 
to  be.  But  we’re 
not  seeing  that 
return  now. 

GREG  LENARO,  DIRECTOR 
OF  INVENTORY  CONTROL. 

ACE  HARDWARE 


“We've  been  in  business  for  132 
years,  and  there’s  a  lot  of  dirt  under 
this  rug,-  Duge  says. 

So  it’s  no  surprise  that  a  key  first 
step  on  the  road  to  data  synchroniza¬ 


tion  is  getting  one’s  own  hiHise  in  or¬ 
der  and  cleansing  data  for  the  master 
product  file.  “You  just  have  to  stop  at 
some  point  in  time  and  fi.\  it."  Duge 
says,  "and  that’s  what  we  did.- 

The  Commerce.  Calif. -based  retailer 
spent  tw'o  years  and  S2  million  cleaning 
up  its  data,  an  effort  driven  in  part  b>' 
the  purchase  of  a  new  logistics  system. 
But  Duge  says  Smart  &  Final  doesn't 
like  to  issue  mandates  to  its  suppliers 
and  has  no  plans  to  join  the  Global  Data 
Synchronization  Network  (see  sidebar 
below  and  glossar>’)  at  this  time. 

“I’ll  leave  that  to  the  guys  with  the 
Ph.D.s.'’  he  says.  “It's  a  great  idea,  but 
it's  going  to  be  really  hard  to  do.  Most 
of  us  can’t  agree  what  the  data  is  nor 
what  it  means.’’ 

Greg  Lenard,  director  of  inventory 

Conrinued  on  page  40 


SHIFTING  STANDARDS 


couUtfieaiuadmBptolracalhesMfl- 
ing  landscape  vtxnd  (bte  syrviiani^ 
bCNi  standaids  and  stendaids  bodes. 

UCCnel  Inc.,  a  subsidtey  of 
LawrencevBe.  N  J.-b8aed  Unttoftn 
Code  Cound  Inc.  launched  in  1999. 
estabtehed  the  extensNe  central 
registry  for  date,  and  sufascriptione  to 
it  wm  (to  r^juatr  for  US-based  retal- 
eisandsupplersundertaUngdate- 
synchronirolion  protects. 

Bui  cogndant  data  synchro¬ 
nization  needed  10  be  8  gtobel  effort, 
the  UCC  and  Brussels-based  EAN  In¬ 
ternationa  forged  the  concept  of  a 
Qtobte  Date  Synchronbatten  ftehv^ 
based  on  a  cOTiral  globel  regleby  that 
comects  to  data  pools  around  the 
wofli  That  regietry  wl  be  known  as 
theBSIGtobelRegBtrY. 

UCCrwL  which  has  32  reCaler  and 
about  3,900 auppMer  mernbors.  is  one 
ofeigMdatB-podserviceprDvIdeto- 
•ndijdfngTransoralnc.,SleilnoCorn- 
rnerce  InCn  the  WoridViUe  Relal  ^ 
changeUCtftdBfobNBchMgeSte- 
vices  Inc.  >  thri  have  been  approved  to 
connact  to  the  6S1  Btobel  Registiy. 
Cettttcteton  is  in  toe  worts  to  eneute 
that  toe  data  pools  can  Meroparata. 

Rptaienti^aatoletsnerftose- 
lecl  a  date  pool,  wfiM  Midelee  toe 
data  against  standards  and  aanife  a  let 
of  baste  Intorrnatlon  atotutes  to  toe 
GSIBkMRagMry. 

'Thate  waa  a  graal  deal  of  misinfor¬ 
mation  about  the  apit  of  toe  6SI  and 
lXX>ieL  prtcing  txAcies.  ieglirnale 


data  pools.  intoroperabllHy  capabibes. 
ale.,*  says  an  ehusineas  protect  leader 
at  a  consumer  goods  manutocturer. 

asked  not  to  be  named  *This 
stale  of  contoafan  and  misadormatiDn 
made  I  very  dMcuH  to  develop  a  data 
synchronraltan  strategy." 

MteheNe  Lachance,  an  electronte 
commerce  business  analyst  at  Seneca 
Foods  Corp.  In  Marion.  N.Y..  says  it  MBS 
htfd  to  figiae  out 'Vtoo  neeib  to  be¬ 
long  to  vAal"  and  whether  any  particu¬ 
lar  service  provider  has ‘al  I  takes  to 
getyoucomplant* 
HowtedSteger.aMMe.NJ.* 
based  fT  menager  at  Santa's  Best 
says  some  retailers  are  mandating 
tost  toe  company  subscribe  to  toeir 
pools,  but  toe  CMstmes  deooralions 
suppHer  has  no  tetentton  of  paying  to 
sutteribe  to  more  than  one. 

Some  telaiers  have  efeded  to  hold 
off  ud  toe  pickle  dears.  An  IT  strate¬ 
gic  plamer  at  a  nalionai  ratal  chain 
who  raqjeatod  anonymity  says  hte 
compenywonibeablatobuidasig- 
rdicanl  bifiteeas  case  tor  data 
chrentzaBunurd  toe  data  standards 
toduda  boto  pndng  MMutes  and  re- 
talerdapendant  ittrfeteBs,  which  wi 
enable  toe  company  to  naolve  tevotoe 
dberepandes  ihM  now  cost  I  money. 
So  toe  chain  probably  wont  start  Is 
date  synchronizalkm  protect  lid  iite 
2006  or  eerty 2006;  he  aaye. 

"Ihoae  t«M>  componenb  malte  I 
worfhwhie."  he  says.  "But  now  toe 
standards  aren't  tom  to  wppoit  IhaL* 
-CadSfwa 


GLOSSARY 


DATA  SYNCHRONIZATION: 
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retailers  won't  have  to  waste  time  rec¬ 
onciling  errors  in  purchase  orders  and 
invoices.  And  data  accuracy  is  also  a 
critical  step  in  creating  the  foundation 
for  RFID,  when  large  volumes  of  infor¬ 
mation  will  be  flowing  fast  and  furi¬ 
ously  through  the  supply  chain, 

*Tou  have  to  have  data,”  says 
Kathryn  Cullen,  a  technology  special¬ 
ist  at  Kurt  Salmon  Associates  Inc.,  a  re¬ 
tail  and  consumer  products  consultan¬ 
cy  in  Atlanta.  “Otherwise,  you’re  de¬ 
feating  the  point  of  speeding  up  data.” 

But  like  RFID,  data  synchronization 
projects  are  rife  with  challenges  for 
retailers  and  their  suppliers.  In  a  re¬ 
cent  Computerworid  survey  of  25  proj¬ 
ect  managers,  about  a  third  said  they’re 
having  difficulty  mustering  the  neces¬ 
sary  internal  resources  for  data  syn¬ 
chronization  products,  in  some  cases 
because  the  near-term  ROI  is  elusive. 

Andrew  White,  an  analyst  at  Gartner 
Inc.,  estimates  that  only  5%  of  retailers 
have  launched  item  synchronization 
efforts,  the  first  step  in  data  synchro¬ 
nization.  Some  of  tl^  manufacturers 
that  have  worked  to  comply  with  the 
big  retailers'  directives  are  having 
diffioilty  finding  other  retailers  ready 
to  undertake  a  synchronization  project 
with  them,  be  adds.  ThiU  makes  it 
tough  to  recoup  compliance  costs 
and  move  on  to  the  next  phase,  when 
the  companies  will  share  more  exten¬ 
sive  product  and  price  attribute  data 
that  should  bring  a  big^r  payoff. 

White  says. 

At  that  point,  slashing  the  time  and 
hassle  associated  with  introducing 
products  and  latmching  price  promo¬ 
tions  are  just  two  of  the  benefits  retail¬ 
ers  and  suppliers  can  expect.  White 
says.  In  the  longer  term,  data  synchro¬ 
nization  efforts  should  enable  more 
collaborative  planning,  be  adds. 

Dirty  Data 

But  today,  ‘iness’*  is  a  word  that's  often 
used  to  duracterize  the  state  of  the 
data  in  the  internal  systems  of  retailers 
and  suppliers.  It's  not  uncommon  to 
find  the  same  product  referred  to  in 
different  ways  in  multiple  files,  obso¬ 
lete  item  numbers  lingering  for  years 
and  product  attributes,  such  as  dimen¬ 
sions  or  the  number  of  items  in  a  pack, 
defined  inconsistently  from  one  com¬ 
pany  to  the  next 

For  instance.  Smart  &  Final  Inc. 
found  47  different  addresses  for  IBM 
and  numerous  ways  to  identify  the 
vendor,  and  they  were  all  in  the  same 
system,  says  CIO  Zeke  Duge.  Is  it 
CocaCola,  Cocacola  or  Coca  Cola  — 
t^)percase.  lowercase,  one  word,  two 
words?  Smart  Ac  Final  had  them  all  I 


«  Everyone  is 
fully  aware 
of  what  the  future 
return  is  going 
to  be.  But  we*re 
not  seeing  that 
return  now. 

OREO  LENARO,  DIRECTOR 
OF  INVENTORY  CONTROL, 

ACE  HARDWARE 


“We’ve  been  in  business  for  132 
years,  and  there’s  a  lot  of  dirt  under 
this  rug,"  Duge  says. 

So  it’s  no  surprise  that  a  key  first 
step  on  the  road  to  data  sync^niza- 


tion  is  getting  one’s  own  house  in  or¬ 
der  and  cleansing  data  for  the  master 
product  nie.  “You  just  have  to  stop  at 
some  point  in  time  and  fuc  it,"  E>uge 
says,  “and  that’s  what  we  did." 

The  Commerce,  Calif. -based  retailer 
spent  two  years  and  $2  million  cleaning 
up  its  data,  an  effort  driven  in  part  by 
purchase  of  a  new  logistics  system. 
But  Duge  says  Smart  &  Final  doesn’t 
tike  to  issue  mandates  to  its  suppliers 
and  has  no  plans  to  join  the  Global  Data 
Synchronization  Netwoik  (see  sidebar 
below  and  glossary)  at  this  time. 

“HI  leave  that  to  the  guys  with  the 
P1lD.s,”  he  says.  ’If  s  a  great  idea,  but 
if  s  going  to  be  really  hard  to  do.  Most 
of  us  can’t  agree  what  the  data  is  nor 
what  it  means." 

Gr^  Lenard,  director  of  inventory 
!  Contmuedonpage40 


SHIFTING  STANDARDS 


Even  if  everyone  knew  about  the  problem,  would  anyone  know  the  solution? 


Data  base  logjams.  Traffic  overloads.  Deployment  night¬ 
mares.  Indications  that  all  is  not  well  in  Networkland.  Web- 
based  applications  may  be  the  lifeblood  of  business,  but  they've 
also  become  its  Achille's  Heel,  as  those  applications  struggle  to 
coexist  with  a  network  that's  too  focused  on  connectivity  and 
not  nearly  adaptable  enough. 

What's  needed  isn't  just  another  point  solution  or  code  fix,  but 
a  true  solution.  One  that's  not  only  the  answer  now,  but  for  what¬ 
ever  the  future  brings.  A  solution  that  makes  the  network  aware  of 


the  application,  and  gives  it  the  intelligerKe  to  literally  work  as  one. 

It's  application  traffic  management  taken  to  the  next  level. 
An  approach  that  unifies  all  the  application  optimization,  avail¬ 
ability  and  security  you  need  in  a  cohesive  architeaure  you  can 
customize  to  specific  business  policies. 

ft  could  have  only  come  from  a  deep  understanding  of  both  the 
network  and  the  application.  Which  is  why  it's  only  from  F5.  for 
details  on  this  revolutionary  architecture,  including  our  BIG-IP  v9, 
call  800-916-7185  or  visit  www.fS.conrVcwoffice. 
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Continued  /rom  page  ^8 
control  at  Ace  Hardware,  says  many 
retailers  have  been  hesitant  to  take  a 
pioneering  role.  But  he  says  it's  time 
for  more  retailers  “to  put  skin  in  the 
game"  and  help  define  the  standards 
fur  data  synchronizatioa 
Ace  took  its  first  stab  at  data  syn- 
chronization  about  six  years  ago  and 
later  joined  a  group  of  hardlines  retail¬ 
ers  in  the  tedious  task  of  establishing 
151  standard  attributes  to  describe  its 
products.  The  Oak  Brook.  Ill.-based  re¬ 
tailer  currently  synchronizes  data  with 
four  suppliers  and  is  queuing  up  an¬ 
other  hundred. 

“This  is  all  new  for  us.  both  retailers 
and  suppliers."  Lenard  says,  "so  it 
comes  dowTi  to  application  of  the 
standards  in  a  uniform  way." 

It’s  also  important  to  make  sure  the 
master  file  of  product  data  is  updated 
when  additions  or  changes  arc  made. 
Lenard  expects  that  Ace  will  eventual¬ 
ly  need  to  update  its  database  architec¬ 
ture  to  do  that.  "Thai's  the  next  step." 
he  says.  “How  much  are  you  willing  to 
spend  on  that?  That's  the  ROI  piece. 

“Everyone  is  fully  aware  of  what  the 
future  return  is  going  to  be."  he  adds. 
“But  we’re  not  seeing  that  return  now.” 

Supplier  Snags 

On  the  supply  side.  Binney  dc  Smith 
Inc.  received  requests  from  seven 
retailers  to  synchronize  data  The 
Easton.  Pa.-based  consumer  goods 
maker  is  currently  synchronizing  with 
Wal-Mart  and  Wegmans  and  woiking 
with  Supervalu  Inc.  and  Walgreen  Co., 
according  to  Richard  Siegfried,  manag¬ 
er  of  the  company's  global  data  syn¬ 
chronization  effort. 

Prior  to  the  project,  Binney  &  Smith 
hadn't  been  usir^  all  the  attributes  its 
retail  customers  now  want,  and  even 
with  those  it  did  use.  it  w*antcd  to  make 
sure  ewer)’  weight  and  measurement 
was  correct.  So  the  company  mar¬ 
shaled  a  "dirty  data  team"  to  meticu¬ 
lously  examine  each  of  its  2.200  stock- 
keeping  units,  literally  putting  a  ruler 
and  scale  to  boxes  of  crayons  and 
markers  to  make  sure  every  item  speci¬ 
fication  was  accurate.  The  team  then 
re-entered  the  information  into  its 
systems.  The  process  it«ok  ah»)ui 
months,  according  to  Siegfried. 

He  says  most  of  the  dirty  data  had 
resulted  fnim  numbers  being  trans¬ 
posed  when  the  customer  «)rder  and 
planning  system  was  set  up.  In  the 
past,  the  company  manually  entered 
product  description  information  into 
each  system,  increasing  the  chance  of 
error.  Now  Binney  &  Smith  uses  an  in- 
icmaily  dcvchiped  Lotus  Noie.s  appli¬ 


cation  to  transfer  information  from  its 
master  file  in  batch  mode  to  the  sys¬ 
tems  that  need  it  as  well  as  to  its  Tran- 
sora  Inc.  data  pool  (see  glossary  and 
diagram  below). 

Siegfried  says  the  company  is  plan¬ 
ning  to  buy  a  commercial  ERP  product 
that  will  communicate  with  the  Tran- 
sora  data  pool,  which  validates  the 
data  against  standards  before  transfer¬ 
ring  it  to  the  GSl  Global  Registry. 

Because  more  manufacturers  than 
retailers  have  ERP  systems  and  they're 
entering  the  information  into  only  one 
system,  their  data  quality  tends  to  be  in 
better  shape,  says  Rob  Garf.  an  analyst 
at  AMR  Research  Inc.  Yet  they  also 
encounter  problems  because  the  data 
hasn't  necessarily  been  inputted  accu¬ 
rately.  he  says.  In  addition,  manufac¬ 
turers  face  challenges  maintaining  the 
data  and  ensuring  that  it  meets  their 
retail  customers’  needs. 


idea,  but 
it’s  going 
to  be  really  hard 
to  do.  Most  of  us 
can’t  agree  what 
the  data  is  nor 
what  it  means. 


ZEKEOUGE.CIO, 
SMART  &  FINAL  INC. 


For  example,  the  attribute  standards 
that  hardlines  retailers  such  as  Home 
Depot  and  Lowe's  developed  aren't  al¬ 
ways  appropriate  for  buildii^  materi¬ 
als.  says  Mike  Franklin,  an  IT  manager 
at  Albuquerque-based  American  Gyp¬ 
sum  Co. 

The  weight  of  the  drywall  sheets 
that  the  company  produces  typically 
varies  based  on  the  location  of  the 
manufacturing  plant,  he  says.  But  hard¬ 
lines  retailers  had  asked  American 
Gypsum  to  supply  weight  information 
as  one  of  the  standard  attributes.  For¬ 
tunately.  the  American  Hardware  Man¬ 
ufacturers  Association  recently  told 
Franklin  that  a  gypsum  guideline  had 
been  approved.  "This  guideline  will 
hopefully  make  our  implementation 
less  painful."  he  says. 

Franklin  foresees  the  possibility  that 
Home  Depot  may  want  some  dilTerent 
attributes  than  Lowe's,  and  he  says  he 
wonders  if  his  company  should  start 
scoring  every  attribute  it  can  think  of 
"just  in  case  somebody  might  want  it." 

"I'm  sure  we'll  have  to  go  through 
several  phases  where  we  add  or  modi¬ 
fy  attributes,"  he  says. 

American  Gypsum  also  needs  to  de¬ 
termine  if  its  Microsoft  Corp.  Solomon 
ERP  system  has  enough  user-definable 
fields  to  handle  all  the  product  attrib¬ 
utes.  Franklin  adds. 

So  far.  the  return  for  the  effort  has 
been  minimal  "Really,  the  only  place 
we’re  going  to  get  some  noticeable 
ROI  Is  our  customers  will  have  better 
visibility  to  the  products  we  carry." 
Franklin  says.  "We’re  happy  to  try 
to  accommodate  that."  O  M795 


PHASES  OF 
SYNCHRONiZATiON 


ANDREW  WHITE  3n  analyst  at 
Gartner,  says  synchronization  eflorts 
in  the  retail  supply  chain  will  move 
forward  m  the  following  phases 

Ittem  synchroniza¬ 
tion.  Suppliers  register  basic 
product  ihformation  into  a  cen¬ 
tra)  registry  that  retailers  can 

access. 

TIME  FRAME;  2002  2005 


2  Data  synchro¬ 
nization.  Suppliers 
provide  more  extensive 
regional  and  even  retailer 
specific  product  attribute  information, 
such  as  price  terms  and  promotions, 
to  be  stored  m  dala  pools  or  reposifo- 
nes  that  will  communicate  with  one 
another  via  industry  sfandards-based 
messages 

TIME  FRAME;  2005  2007 


3  Process  and 
global  data 
synchronization. 

More  extensive  attribute 
information  is  used  lor  collaborative 
planning  a.nd  fcxecastmg  and  txrsiness 

pr^ess  mieroperabifily 
TIME  FRAME;  2007  and  beyond 


A  manufaclufer/supplier  regtsle's  its  product  information  with  a  ijata  pool,  which  validates  the  data  against  standards 
and  Submits  basic  infurmation  to  the  GSt  Registry.  A  retailer  subscriber  mahe-s  a  reouest  tor  product  information 
Ih'ough  Its  data  pool  to  the  GSl  Registry  A  pointer  directs  the  retailer  to  the  data  pool,  where  more  extensive  produci 
attribulf  inlormation  is  stored  The  ruiailer's  data  poo'  and  the  supplier's  data  pool  then  syncnrrimzf-  men  oata 
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Continued  from  page  38 
control  at  Ace  Hardware,  says  many 
retailers  have  been  hesitant  to  take  a 
ptooeering  role.  But  be  says  it's  time 
for  more  retailers  "to  put  skin  in  the 
game”  and  help  deHne  the  standards 
for  data  synchronization. 

Ace  took  hs  stab  at  data  syn¬ 
chronization  about  six  years  ago  and 
later  joined  a  group  of  hardlines  retail¬ 
ers  in  the  tedious  task  of  establishing 
151  standard  attributes  to  describe  its 
products.  The  Oak  Brook,  lU. -based  re¬ 
tailer  currently  synchronizes  data  with 
four  sui^liers  and  is  queuing  up  an¬ 
other  hundred. 

This  is  all  new  for  us,  both  retailers 
and  suppliers,”  Lenard  says,  ”so  it 
comes  down  to  application  of  the 
standards  in  a  uniform  way.” 

It’s  also  in^rtant  to  make  sure  the 
master  file  of  product  data  is  updated 
when  additions  or  changes  are  made. 
Lenard  expects  that  Ace  will  eventual¬ 
ly  need  to  update  its  database  architec¬ 
ture  to  do  that.  That’s  the  next  step." 
be  says.  "How  much  are  you  willing  to 
spend  on  that?  That’s  the  ROI  piece. 

"Everyone  b  fully  aware  of  what  the 
future  return  b  going  m  be."  he  adds. 
"But  we're  not  seeing  that  return  now." 

Suppler  Snags 

On  the  supply  side.  Binney  &  Smith 
Inc  received  requests  from  seven 
retailers  to  synchronize  data.  The 
Easton.  Pa.-based  consumer  goods 
maker  b  currently  synchronizing  with 
Wal-Mart  and  Wl^znans  and  v^rking 
with  Supervalu  Inc.  and  Walgreen  Co., 
accord!^  to  Richard  Si^frried.  manag¬ 
er  of  the  company's  global  data  syn¬ 
chronization  efib^ 

Prior  to  the  project.  Binney  &  Smith 
hadn't  been  using  all  the  attributes  its 
retail  customers  now  want,  and  even 
with  those  it  did  use,  it  wanted  to  make 
sure  every  weight  and  measurement 
was  correct.  So  the  company  mar¬ 
shaled  a  "dirty  data  team"  to  meticu¬ 
lously  examine  each  of  its  2.200  stock- 
keeping  units,  literally  putting  a  ruler 
and  scale  to  boxes  of  crayons  and 
markers  to  malm  sure  every  item  speci¬ 
fication  was  accurate  The  team  then 
re-entered  the  infonnation  into  its 
systems.  The  process  took  about  13 
months,  according  to  Siegfried. 

He  says  most  of  the  dirty  data  had 
resulted  from  numbers  being  trans¬ 
posed  when  the  customer  order  and 
plannii^  system  was  set  up.  In  the 
past,  the  company  manually  entered 
product  description  information  into 
each  system,  increasing  the  chance  of 
error.  Now  Binney  &  Smith  uses  an  in¬ 
ternally  developed  Lotus  Notes  appli¬ 


cation  to  transfer  infonnation  from  its 
master  file  in  batch  mode  to  the  sys¬ 
tems  that  need  it  as  well  as  to  its  Ttan- 
sora  Inc.  data  pool  (see  glossary  and 
diagram  below). 

Siegfried  says  the  company  b  plan¬ 
ning  to  buy  a  commercial  ERP  product 
that  will  communicate  vritb  the  TVan- 
sora  data  pooL  which  validates  the 
data  against  standards  before  transfer¬ 
ring  it  to  the  GSl  Global  Regbtry. 

Because  more  manufacturers  than 
retailers  have  ERP  systems  and  they’re 
entering  the  infonnation  into  only  one 
system,  their  data  quality  tends  to  be  in 
better  shape,  says  Rob  Garf,  an  analyst 
at  AMR  Research  Inc  Yet  they  also 
encounter  problems  because  the  data 
hasn’t  necessarily  been  iiq^utted  accu¬ 
rately.  be  says.  In  addition,  manufac¬ 
turers  face  challei^es  maintaining  (he 
data  and  ensuring  that  it  meets  their 
retail  customers’  needs. 

»lfsa 
great 
idea,  but 
it’s  going 
to  be  really  hard 
to  do.  Most  of  us 
can’t  2igree  what 
the  data  is  nor 
what  it  means. 

ZEKEDUOE.  CIO. 

SMART  &RNAL  INC. 


For  example,  the  attribute  standards 
that  hardlines  retailers  such  as  Home 
Depot  and  Lowe’s  developed  aren't  al¬ 
ways  appropriate  for  building  materi¬ 
als,  says  Mike  Franklin,  an  IT  manager 
at  Albuquerque-based  American  Gyp¬ 
sum 

The  weight  of  the  drywall  sheets 
that  the  company  produces  typically 
varies  based  on  the  location  of  the 
manufacturing  plant,  he  says.  But  hard- 
Unes  retailers  had  asked  American 
Gypsum  to  supply  weight  information 
as  one  of  the  standard  attributes.  For- 
'  tunately,  the  American  Hardware  Man¬ 
ufacturers  Association  recently  told 
Franklin  that  a  gypsum  guideline  had 
been  approved.  Thb  guideline  will 
hopefully  make  our  implementation 
less  painfuL"  he  says. 

Franklin  foresees  the  possibility  that 
Home  Depot  may  want  some  different 
attributes  than  Lowe’s,  and  be  says  he 
wonders  if  hb  company  should  start 
storii^  every  attrilnite  it  can  think  of 
lust  in  case  somebody  might  want  it" 

"Pm  sure  well  have  to  go  through 
several  phases  where  we  add  or  modi¬ 
fy  attributes,"  he  says. 

American  Gypsum  also  needs  to  de¬ 
termine  if  its  Microsoft  Corp.  Solomon 
ERP  system  has  enou^  user-definable 
fields  to  handle  all  the  product  attrib¬ 
utes,  Franklin  adds. 

So  far.  the  return  for  the  effort  has 
been  minimal.  "Really,  the  only  place 
we're  going  to  get  some  noticeable 
ROI  b  our  ctistomers  will  have  better 
visibility  to  the  products  we  carry," 
Franklin  says.  "We’re  happy  to  try 
to  acconuDodate  that."  O  50796 
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DB2  DOESN’T  LOCK  YOU  IN. 

DB2  is  micWleware.  but  it  is  anything  but  middle-of-the-road. 
In  fact,  DB2  is  part  of  an  innovative  family  of  information 
management  products  that  can  integrate  and  actually  add 
insight  to  your  data.  That  s  big. 

DB2  IS  also  the  leading  database  built  on  and  optimized  for 
Linux,’  UNIX  and  Windows!  built  to  take  full  advantage  of 
your  existing  heterogeneous  and  open  environments,  and 
buitt  to  enable  true  grid  computing 

Plus,  there's  no  constricting  contract. 

DB2,  like  other  IBM  database  engine  products  such  as 
Informix'  and  Cloudscape,'  is  also  middleware  with  an  eye 
on  your  resources.  Alt  of  them.  An  ITG  study  showed  overall 
costs  for  Oracle  Database  are  up  to  four  times  higher  than 
DB2.  A  Solitaire  study  found  that,  on  average,  Oracle 


Database  required  25=0  more  time  to  manage  than  DB2 
And  the  Transaction  Processing  Performance  Council 
showed  DB2  as  the  overall  pnce^performance  .eader  for 
TPC-C  on  Linux.  UNIX  and  Windows  Ahead  of  both  Oiacte 
Database  and  Microsoft  SOL  Server 

Then  there's  this:  Oracle  wjll  drop  the  current  'eve:  of  supped 
for  Oracle  Database  8i  at  the  end  of  2004  Meaning  limited 
support,  higher  cost  or  a  complete  migration  to  current 
versions.  Fortunately,  IBM  offers  ongoing,  around-the-clock 
service  and  support  for  DB2. 

Why  not  move  up  to  middleware  foat  makes  sense?  Through 
the  end  of  the  year,  you  can  get  IBM  DB2  Universal  Database 
or  Informix  by  taking  advantage  of  our  extremely  compelling 
trade-up  prorrxttion. 

Visit  HNii.ccMn/db2/swap  today  to  find  out  if  you  qualify. 
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THE  Hidden  Costs 

OF  HELP  DESK  AVOIDANCE 


Employees  spend  an  average  of  30  minutes  per  week  either 
trying  to  fix  their  own  PC  problems  or  working  on  a  co> 
worker's  PC  problems,  according  to  research  by  Compass 
Amenca  tnc..  a  Chicago-based  IT  benchmarking  lirm. 

This  self-sufficiency  and  helpfulness  may  seem  like  a  good  thing, 
but  from  the  company's  point  of  view,  ifs  not  very  cost-effective, 
says  Scott  Feuless,  a  senior  consultant  in  Compass'  Houston  otfice. 
For  starters,  it  may  be  a  sign  that  end  users  have  little  confidence 
that  the  IT  help  desk  can  really  help  or  that  users  don't  know  that  the 
help  desk  could  solve  their  problem.  Rus.  that  30  minutes  of  lost 
work  productivity  is  hurling  the  company  and  could  be  reduced  to  an 
average  ol  10  minutes  with  a  top-notch  help  desk.  Feuless  says, 
Companies  take  a  3%  productivity  hit  from  users  futzing  with  their 
PCs.  and  that  could  be  cut  to  1%  with  a  first-class  hetp  desk.  Feuless 
says,  crfmg  Compass'  database  of  more  than  7.000  benchmark  studies. 

So  how  can  companies  gel  a  2%  productivity  boost?  Feuless  rec¬ 
ommends  the  following  steps: 

Make  the  help  desk  a  one-stop  shop  for  PC  fixes,  so  call¬ 
ing  It  isn't  viewed  as  a  waste  of  time. 

Negotiate  serviGe*level  agreements  to  monitor  the  perfor¬ 
mance  of  the  help  desk. 

Standardize  PC  hardware  and  software  so  the  help  desk 
can  effectively  come  up  with  standard  fixes  -  Mitch  Betts 
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Best  Bits 

The  most  useful  parts  of  recent 
business  and  FT  management  books 

The  New  CIO  Leader  Setting 
the  Agenda  and  Delivering  Results,  iji 

Marianne  Broadbeni  and  EUen  S.  Kitzis 
(Harvard  Business  School  Press.  2004). 

On  one  level,  this  book  is  a  dis¬ 
appointment  The  authors  posit 
10  cntical  ways  for  the  DO  to  be¬ 
come  a  strategic  business  p^yer 
inslead  ol  bemg  relegated  to  the 
sidelines  as  a ‘chief  technology  I 
mechanic.*  But  the  K)  points 
include  virtual  no-brainers  such 
as.  ‘Lead,  don't  |ust  manage.' 
'TNbave  business  and  IT  strategy  together,"  and 
‘Devetop  and  nurture  a  high-performtng  team.’ 

Ackf  We've  read  this  a  ziliion  times 
Fortunately,  sprinkled  in  various  nooks  and 
crartmes  of  the  book  are  some  useful  insights  and 
techniques  for  becoming  a  trusted  member  of  the 
executive  elite  For  example,  the  authors  mention 
fhe  rote  ol  credibility  -  not  jist  delivenng  IT  prof 


The  IT  Economy 

Does  IT  matter  m  Europe?  Yes. 
according  to  an  IOC  survey  of  197 
European  business  executives. 
When  the  survey  directly  probed  the 
issue  of  whether  executives  think  IT 
matters  to  their  business  success. 
46*0  of  respondents  said  ifs  "criti¬ 
cally  important,"  And  42*o  said 
their  companies  need  to  be  more 
aggressive  in  their  use  of  technolo¬ 
gy  for  competitive  advantage,  ac¬ 
cording  to  IDC  analyst  Frank  Gens. 


eds  on  time  and  on  budget,  but  'deitvenng  results 
Aat  your  enterprise  leadership  really  cares  about  ‘ 
Frankly,  they  say.  it's  fhe  only  success  metnc  that 
matters.  Rus.  the  authors  provide  advice  on  when 
and  how  to  get  involved  in  company  politics. 

if  you're  new  to  the  game  or  staiggiing  to 

aack  the  inner  circle,  this  book  might  be  for  yoa 
'Mitch  Betts 


Things  to  Ponder 

in  a  survey  of  3(X)  global  organizations. 

I  57%  of  respondents  said  they  use  instant 
messaging  at  work  for  personal  reasons. 

I  Mela  Group  fnc.  reports.  And  56%  use  IM  at 

I  home  for  business  purposes. 

I  At  LexisNexis  Group,  an  online  research 

I  service  in  Miamisburg.  Ohio.  IT  workers 
have  a  tradition  of  giving  dead  code  a  proper 
burial.  When  computer  programs  are  replaced, 
upgraded  or  unplugged.  IT  staffers  read  eulogies 
lo  the  code,  place  a  pnntout  in  a  wooden  coffin 
and  bury  it  in  a  shallow  grave  with  a  headstone, 
the  Da^on  Daily  Atewsreports. 

Companies  that  automate  travel  and  ex¬ 
pense  reimbursement  can  slash  the  cost  of 
processing  expense  reports  by  80%,  accord¬ 
ing  lo  RayStream  Advisors  Inc.,  a  research  and 
con^lting  lirm  in  Charlotte.  N.C.  O  50824 

Send  f  hem  fo 

p4'fches'.©compufeiTvor/d.com. 
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■  At  LwnNnds  Group,  an  online  rosaarch 
service  in  Mtamisbiva  OMo.  IT  iMxtors 
have  a  tradHion  of  gMng  dead  code  a  proper 
burial  When  computer  programs  are  replaced, 
upgraded  or  unplugged.  IT  staffers  read  eulogies 
to  the  code,  place  a  printout  in  a  wooden  coffin 
and  bury  it  in  a  shallow  grave  with  a  headstone, 
the  Dayton  DaHy  News  reports. 
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A  NEW  STUDY  indicates  that  90% 
of  the  worhfs  highest*paid  and 
best-educated  executives  aren't 
helping  ttieir  compart  increase 
sales  or  profits,  and  38%  aren't 
provUrig  any  quantifiable  benefit  at 
al  to  their  organizations. 

The  study  focused  on  3.104  ex¬ 
ecutives  deemed  most  critical  to 
the  success  irf  some  of  the  biggest 
companies  in  the  U.S..  Australia. 
China.  France,  Germany.  Italy. 
Japan,  the  Netherlands.  Sweden 
and  the  UX 

Looking  at  criteria  such  as  profh. 
revenue,  process  improvement, 
product  improvement,  customer 
satisfaction,  teamwork,  safety  and 
soda!  responsiblity.  here's  how  the 
top  execs  shook  out 


■  High  performing  (quantifiable 
impact  on  increased  sales/profits) 
■Average  performing  (quantifiable 
impact  on  at  least  one  of  the  criteria) 
-  Nonperforming  (no  quantifiable 
evidence  of  impact  on  their 
companies) 


Susan  Luda  Annunzio,  CEO  of 
the  Hudson  Highland  Center  for 
High  Performance,  conducted  the 
study.  She  found  that  high  per¬ 
formers*  bosses  shield  them  from 
company  interference.  poTrtics  and 
bureaucracy  so  they  can  do  their 
work.  In  contrast,  nonperformers' 
bosses  provide  no  protection  from 
external  kiterference.  let  them 
bead  neck  deep  in  dis^actions 
that  have  nothing  to  do  with  their 
jobs  and  often  foster  loxic'*  prac¬ 
tices  such  as  hoarding  informa- 
tkm.  embairassing  people  wite 
public  criticism,  micromanaging, 
shirking  responsibility,  taking  cred¬ 
it  for  others'  successes  and  pursu¬ 
ing  personal  agendas  at  the  ex¬ 
pense  of  tfie  team. 

OTHER  FINDINGS; 

■  The  more  hours  and  fewer 
vacation/sick  days  executives 
logged  at  toxic  workplaces,  the 
worse  their  performarice  got. 

•  77%  of  respondents  thought 
their  work  increased  company 
reverwe.  compared  wHh  10% 
whose  work  actuatty  did. 

■  Only  17%  are  developing  new 
producte  or  services,  while  40% 
are  focused  on  increasing  inter¬ 
nal  efficiencies. 

The  single  biggest  impediment 
to  high  performance.  Annunzio 
says,  is  short-term  thinking,  which 
l»ds  to  overworking  executives 
and  cutting  musde  along  with  fat. 

•  KatNeen  Melymuka 


Tongue-ki-Cheek 

hid» 

In  TheWat^neUcxjmaLJmi 
Sanctnrg  offered  this  Rghlhearted 
list  of  new  indexes  lo  gauge  the 
healih  of  your  workplace; 
PERN  DEnCfT:  Reduction  of 
woriqilace  assets,  from  free  food 
to  office  supplies. 

FUDOE-rr  SURPLUS:  The  depth 
of  trouble  a  company  is  in.  based 
on  the  numberirf times  management 
insists  It's  healthy. 

DISPOSABLE  PERSONAL 
NMCOMN)OPS:  Invantoryd  idiote 
on  hand,  based  on  everything 
from  suggestion  box  entries  to 
Powefftiil  presentations. 
BLEEDING  ECONOMIC 
moiCATOR:  \tolunlary  departures 
of  key  personnel. 

REALIY  GROSS  DOMESTIC  PROD¬ 
UCT:  Trash  pttng  up  in  office  garbage 
cans  as  a  result  of  jarvtorial  cutbacks. 
NO  CONFIDENCE  INDEX:  The 
nse  and  fal  of  company  T-Shirt 
and  basebal  cap  producbon. 

OFFICE  PARK  AGRICULTURAL 
INDEX:  Ratio  of  cosdy  annu^  to 
cheaper  perenrsals  around  the 
parking  lot. 


IT  Hiring  Heating  Up 

Monster  Worldwide  lnc.'s  Monster 
Employment  Index  counts  its  online 
job  postings  as  an  indicator  of  tob  avail¬ 
ability.  It  showed  a  continuing  four- 
month  upward  trend  in  the  computer 
and  mathematical  occupations  catego¬ 
ry.  which  captures  the  greatest  number 
of  IT-related  positions. 

Based  on  the  number  of  online  }ob 
postings  in  relation  to  total  working  pop¬ 
ulation.  the  Monster  index  found  the  fol¬ 
lowing  locales  to  be  leading  In  job  avail¬ 
ability  dunng  the  month  of  October; 
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Companies  are  reluctant  to  out 
source  security  |obs  because  of 
concerns  about  a  lack  of  control 
over  the  workforce  and  interna¬ 
tional  laws  regarding  data  loss. 

Regulations  like  the  Sarbanes- 
Oxley  Act.  HIPAA  and  the  Graham- 
Leach-Bliley  Act  are  driving  growth 
as  are  new  technology  implemen¬ 
tations  and  ever-evolving  threats 

More  than  97°o  of  respondents 
had  moderate  to  very  high  expec¬ 
tations  for  career  growth. 

Security  professionals  have  ex¬ 
perienced  growth  in  |ob  prospects. 


Mph  pwtondPd  (quanMiatile 
impact  on  noeased  sal^prolits) 
i  WtoirnapartonnlHpliiuantlliable 
inpacl  on  al  least  one  of  the  crdeiia) 
tanpaftoinhig  (no  quanWable 
addence  of  impact  on  their 
compenies) 


■  My  17%  are  itonhipbig  now 
preduda  or  aontac,  whda  40% 
are  hnwad  an  Increaahig  Intar- 
nal  affidaiicta. 
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careei  advancement,  base  salaries 
and  salary  premiums  for  certifica¬ 
tion  at  faster  rales  than  other 
areas  of  IT 

Information  security  managers 
believe  that  continuing  education 
and  certification  are  important  to 
the  profession,  with  strong  business 
acumen  becoming  an  essential  in¬ 
gredient  for  professional  success. 

More  than  10°o  of  respondents 
held  executive  management  titles 
such  as  chief  information  security 
officer  and  chief  security  officer  - 
positions  that  didn't  exist  10  years 
ago.  O  50705 


IT  Hiring  Heating  Up 

Monster  Woridwide  lric.’s  Mon^ 
Emptoyment  Index  counts  its  online 
job  postings  as  an  indicator  of  job  avail¬ 
ability,  It  showed  a  continuing  fotx- 
month  upward  trend  in  the  computer 
and  mathematical  occupations  catego¬ 
ry.  which  captures  the  greatest  number 
of  IT-r^ted  positions. 

Based  on  the  number  of  online  job 
postings  in  relation  to  total  working  pop¬ 
ulation.  the  Monster  index  found  the  fol¬ 
lowing  locales  to  be  leading  m  job  avail¬ 
ability  during  the  month  of  October 


QUICK  HITS 


IT  Risk  Analysis 

How  does  your  organization 
^corporate  risk  aii^ysis  into 
your  current  technok^ 
justification  process? 


■  Ou^iaiive  discussion  ol  risk 

■  Risk  tied  directly  to  financial  meincs 
No  nsk  analysis 

■  Don't  know 

BASE;  369  TECHNOLOGY  MVESTMENT 
DECISION  MAKE'S 


Does  your  current  method 
adequately  capture  risk 
associated  with  technology 
investments? 


BASE:  236  TECHNOLOGY  HWESTMENT 
DECISION  MAKERS 


H  you  tie  risk  to  financial  met* 
rics.  how  do  you  quantitatively 
identify  and  an^e  rt^? 

Adiust  cost  and  benefit  estimates 


76”  - 


ftrlonn  ishatHf  scenario  analysis 


58-^0 


Adiuit  the  discount  rate 


Ooniknow 

I 


BASE:  96  TECHNOLOGY 
INVESTMENT  DECISION-MAKERS  f 
TMUTR.E  RESPONSES  ALLOWED) 


VM  I  (il  I  N 


Just  Think 
About  IT 


Managers,  as  a  group,  tend  to  be 
action-oriented.  We  measure  our¬ 
selves,  our  importance  and  our  effec¬ 
tiveness  in  part  by  the  level  of  activity 
around  us.  The  louder  the  hum  of  ma¬ 
chinery,  the  faster  the  shuffle  of  feet  in  the  corridor  and 
the  larger  the  proportion  of  time  we  spend  in  meetings, 
the  better  things  must  be.  Stuff  is  happening,  and  that’s 
what  we’re  supposed  to  do:  make  things  happen. 


So  it’s  natural  that  at  the 
end  of  the  year,  our  atten* 
lion  often  focuses  on  plan¬ 
ning  activities  for  the  next 
year.  We've  arrived  at  the 
season  of  strategic  plan¬ 
ning  sessions,  budgets  and 
project  proposals.  In  the 
coming  month  or  so,  most 
of  our  oi^nizations  will 
set  the  stage  for  what  we 
want  to  do  in  the  next  year. 

Action  is  great,  but  be¬ 
fore  diving  into  planning 
more  actions,  it  may  be 
time  to  pay  attention  to  the 
other  end  of  the  manageri¬ 
al  spectrum:  reflection. 

That’s  right;  I’m  suggesting 
that  the  end  of  the  year  is  a 
great  lime  for  just  a  little  bit  of  In¬ 
action.  It’s  the  perfect  way  to  prepare 
for  better  action  In  the  future. 

Reflection  seems  to  gel  a  bad  rap  in 
managerial  and  leadership  circles. 
There  are  a  few  reasons  for  this. 

Many  of  the  most  competitive  and 
aggressive  businesspeople  I  know  con¬ 
flate  reflection  with  self-doubt.  For 
them,  it’s  an  activity  for  wimpy,  tea¬ 
drinking,  "girly  men"  (and  women), 
not  the  work  of  serious  leaders.  They 
are  out  and  about  telling  people  what 
to  do  and  occasionally  listening  to 
what  others  have  to  say.  For  them. 


leadership  is  primarily  a 
public-facing  function. 

Even  those  who  don’t 
denigrate  reflection  seem 
to  shy  away  from  it.  Think¬ 
ing  deeply  can  be  uncom¬ 
fortable.  We  might  learn 
things  that  we'd  rather  not 
know  about  ourselves,  our 
work  or  our  organizations. 
It’s  also  an  activity  without 
a  guaranteed  result.  What's 
the  deliverable?  Insight 
seems  too  vague  to  justify 
the  investment  when  there 
are  immediate  concerns 
waiting  right  outside  the 
office  door. 

More  broadly,  as  a  cul¬ 
ture.  we  seem  more  com¬ 
fortable  with  cacophony  than  quiet. 

If  you  believe  the  personal  ads  on 
Match.com,  everyone  loves  quiet, 
moonlit  walks  on  the  beach.  But  hav¬ 
ing  lived  on  the  beach  in  Los  Angeles 
for  seven  years,  I  can  assure  you  that 
at  night,  there's  no  one  out  there.  All 
you  see  is  flickering  blue  apartment 
windows  bathed  in  the  warm  glow  of 
televisions.  We’re  much  more  engaged 
with  the  ever-expanding  variety  of 
media  content  and  advertising  de¬ 
signed  to  invade  every  second  of  our 
consciousness. 

So.  how  should  you  focus  your  re- 
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flection  to  make  the  best  use  of  the 
time?  I’d  suggest  that  at  least  a  few  key 
questions  be  on  your  agenda. 

What  did  I  learn  ^is  year?  Too  often, 
we  look  to  what  happened  or  didn’t 
happen  in  the  past  year  as  a  guide  for 
what  we  should  do  next  year.  Experi¬ 
ence  offers  the  potential  for  growth, 
development  and  maturation,  but  to 
seize  it  requires  that  we  pay  attention 
not  only  to  considering  the  events  of 
the  past  year,  but  also  to  interpreting 
their  meaning. 

What  did  my  staff  learn  this  year?  Believe 
it  or  not,  the  people  who  work  for  you 
are  learning  too.  At  times,  it  may  not 
feel  like  it.  but  they  are.  But  what  they 
learned  may  not  be  the  same  things 
you  did.  What  did  they  learn  from 
you?  What  did  they  learn  about  you 
and  about  working  for  you?  What  did 
they  learn  from  their  successes  and 
failures? 

Is  what  you've  learned  compatible?  This 
is  the  tough  one.  and  it  requires  a  fair 
amount  of  perspective  and  candor. 

Will  this  past  year’s  learning  bring  you 
closer  to  your  staffers,  or  will  it  alien¬ 
ate  them  from  you? 

The  answers  to  these  questions  can 
help  you  guide  not  only  the  future  ac¬ 
tions  of  your  group,  but  also  how 
those  actions  are  carried  out. 

So.  where  can  busy  people  find  the 
time  to  reflect?  Drive  home  with  the 
radio  off.  Rent  a  remote  cabin.  Take  a 
really  long  bath.  Sit  in  a  coffee  shop 
for  an  entire  morning  without  a  Black- 
Berry,  a  cell  phone  or  a  laptop;  take 
only  a  notepad  and  a  pencil. 

If  you  want  to  really  distinguish 
yourself  as  a  leader,  invest  in  a  little 
reflection.  It  can  set  the  stage  for  fo¬ 
cused  and  meaningful  action.  O  50676 
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Managers,  as  a  group,  tend  to  be 
action-oriented.  We  measure  our¬ 
selves,  our  importance  and  our  effec¬ 
tiveness  in  part  by  the  level  of  activity 
around  us.  The  louder  the  hum  of  ma¬ 
chinery,  the  faster  the  shuffle  of  feet  in  the  corridor  and 
the  larger  the  proportion  of  time  we  spend  in  meetings, 
the  better  things  must  be.  Stuff  is  happening,  and  that’s 
what  we’re  supposed  to  do:  make  things  happen. 


So  it’s  natural  that  at  the 
end  of  the  year,  our  atten- 
tion  often  focuses  on  plan¬ 
ning  activities  for  the  next 
year.  We’ve  arrived  at  the 
season  of  strategic  plan- 
nii^  sessions,  budgets  and 
project  proposals.  In  the 
conxing  month  or  so,  most 
of  our  organizations  will 
set  the  stage  for  what  we 
want  to  do  in  the  next  year. 

Action  is  great,  but  be¬ 
fore  diving  into  planning 
more  actions,  it  may  be 
time  to  pay  attention  to  the 
other  end  of  the  manageri¬ 
al  spectrum:  reflecdoa 
That's  right;  Tm  su^esting 
that  the  end  of  the  year  is  a 
great  time  for  just  a  little  bit  of  in¬ 
action.  It's  the  perfect  way  to  prepare 
for  better  action  in  the  future. 

Reflection  seems  to  get  a  bad  rap  in 
managerial  and  leadership  circles. 
There  are  a  few  reasons  for  this. 

Many  of  the  most  competitive  and 
aggressive  businesspeople  I  know  con¬ 
flate  reflection  with  self-doubt.  For 
them,  it's  an  activity  for  wimpy,  tea¬ 
drinking.  “girly  men"  (and  women), 
not  the  woik  of  serious  leaders.  They 
are  out  and  about  telling  people  what 
to  do  and  occasionally  listening  to 
what  others  have  to  say.  For  them. 


leadership  is  primarily  a 
public-facing  function. 

Even  those  who  don't 
denigrate  reflection  seem 
to  shy  away  from  it.  Tltink- 
ing  deeply  can  be  uncom¬ 
fortable.  We  might  learn 
things  that  we'd  rather  not 
know  about  ourselves,  our 
work  or  our  organizations. 
It's  also  an  activity  without 
a  guaranteed  result.  What's 
the  deliverable?  Insight 
seems  too  vague  to  justify 
the  investment  when  there 
are  immediate  concerns 
waiting  right  outside  the 
office  door. 

More  broadly,  as  a  cul¬ 
ture.  we  seem  more  com¬ 
fortable  with  cacophony  than  quiet. 

If  you  believe  the  personal  ads  on 
Matcb.coni.  everyone  loves  quiet, 
moonlit  walks  on  the  beach.  But  hav¬ 
ing  lived  on  the  beach  in  Los  Angeles 
for  seven  years,  I  can  assure  you  that 
at  night,  there’s  no  one  out  there.  All 
you  see  is  flickering  blue  apartment 
windows  bathed  in  the  warm  glow  of 
televisions.  We're  much  more  engaged 
with  the  ever-expanding  variety  of 
media  content  and  advertising  de¬ 
signed  to  invade  every  second  of  our 
consciousness. 

So,  how  should  you  focus  your  re¬ 


flection  to  make  the  best  use  of  the 
time?  I'd  suggest  that  at  least  a  few  key 
questions  be  on  your  agenda. 

What  did  I  lain)  (his  yaar?  Too  often, 
we  look  to  what  happened  or  didn’t 
happen  in  the  past  year  as  a  guide  for 
what  we  should  do  next  year.  £}q)eri- 
ence  offers  the  potential  for  growth, 
development  and  maturation,  but  to 
seize  it  requires  that  we  pay  attention 
not  only  to  considering  the.events  of 
the  past  year,  but  also  to  interpreting 
their  meaning. 

What  dU  my  steff  learn  (Mi  year?  Believe 
it  or  not,  the  people  who  work  for  you 
are  teaming  toa  At  times,  it  may  not 
feel  like  it.  but  they  are.  But  what  they 
learned  may  not  be  the  same  things 
you  did.  What  did  they  learn  from 
you?  What  did  they  leam  about  you 
and  about  working  for  you?  What  did 
they  learn  from  their  successes  and 
failures? 

k  what  you've  laamed  compatible?  This 
is  the  tough  one,  and  it  requires  a  fair 
amount  of  perspective  and  candor. 

Will  this  past  year's  learning  bring  you 
closer  to  your  staffers,  or  will  it  alien¬ 
ate  them  from  you? 

The  answers  to  these  questions  can 
help  you  guide  not  only  the  furore  ac¬ 
tions  of  your  group,  but  also  how 
those  actions  are  carried  out. 

So,  where  can  busy  people  find  the 
time  to  reflect?  Drive  home  with  the 
radio  off.  Rent  a  remote  cabin.  Take  a 
really  long  bath.  Sit  in  a  coffee  shop 
for  an  entire  morning  without  a  Black- 
Berry,  a  cell  phone  or  a  laptop:  take 
only  a  notepad  and  a  pen^. 

If  you  want  to  really  distinguish 
yourself  as  a  leader,  invest  in  a  little 
reflection.  It  can  set  the  stage  for  fo¬ 
cused  and  meaningful  action.  O  50676 
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Collaboration 

data  center  manager  at  Lord. 
Abbett  &  Co.,  a  Jersey  City, 
N.J.-based  mutual  funds  firm. 
Joseph  added  chat  he  thinks 
the  long  history  of  conflict  be¬ 
tween  Microsoft  and  Sun  will 
make  H  difficult  for  them  to 


Also  offers  C++ 
support  as  Cobol, 
Java  alternative 

BV  HEATHER  HAVEM9TEIM 

IBM  last  week  rolled  out  a 
new  version  of  its  CICS  lyans- 
action  Server  software  that 
will  let  users  extend  main¬ 
frame  data  to  service-oriented 
architectures. 

CICS  TYansaction  Server  for 
z/OS  v3a  will  aUow  CICS  to 
function  as  both  a  provider 
and  consumer  of  Web  services, 
said  Phil  Hanson,  IBM  CICS 
product  manager. 

CICS.  which  celebrated  its 
3Sth  anniversary  this  year,  pro¬ 
vides  bigb-volume  transaction 
processing  for  mainframes. 
The  upgrade  will  let  Cobol.  C 
and  C^  autotnadcally  convert 
between  XML  and  their  lan- 
gU2^  structures,  IBM  said. 

The  new  version,  i^ch 
adds  support  for  and  en¬ 

hanced  support  for  the  Secure 
Sockets  La^r  protocol,  also 
lets  developers  use  Web¬ 
Sphere  Studio  Enterprise  De¬ 
veloper  as  a  tool  for  applica¬ 
tion  transformation  and  inte¬ 
gration,  Hanson  said.  IBM  also 
released  CICS  Transaction 
Gateway  v6,  a  tool  for  connect¬ 
ing  CICS  applications  to  its 
Wd^Spbere  application  server. 

Steve  Ware,  CICS  system 
programmer  at  the  University 
of  Florida  in  Gainesville,  said 
that  although  his  organization 
has  no  immediate  plans  to  up¬ 


build  interoperable  products. 

Stan  Johnson,  a  Portland- 
based  LAN  services  manager 
for  Multnomah  County  in 
Oregon,  said  be  would  like  to 
have  a  single  management 
console  that  he  could  use  to 
populate  or  oversee  end-user 
accounts  in  Microsoft's  Active 
Directory  and  on  Sun  systems. 

But  Johnson  remains  skepti- 


grade  to  the  latest  version  of 
the  transaction  ^rver,  he  is 
interested  in  finding  ways  to 
expose  CICS  applications  as 
Web  services.  V^re’s  depart¬ 
ment  rum  a  data  center  that 
supports  several  educationa] 
entities  in  the  state. 

“A  lot  of  the  fmancud  appli¬ 
cations  are  being  moved  into 
PeopleSoft.  [afkd]  PeopleSoft 
is  primarily  an  XML  messag¬ 
ing  set  of  applications.”  he 
said.  “Web  services  for  CICS 
and  XML  support  make  that 
type  of  int^ration  fairly 
seamless  and  easy." 

The  Florida  data  center 
currently  uses  a  CICS  socket- 
interface  feature  available  in 
IBM’s  z/OS  Communications 
Server  to  Wcb-enable  appli¬ 
cations. 

Deriving  Benefits 

Dale  Vecchio,  an  analyst  at 
Gartner  Inc.,  said  that  while 
support  for  Web  services  b  a 
plus  for  IBM’s  large  installed 
base,  the  real  benefit  from  the 
new  server  comes  from  its 
support  of  C**. 

"The  challenge  for  CICS  b 
its  dependence  on  the  proce¬ 
dural  paradigm  of  Cobol  for 
deveiopmcnl,"  he  said.  "You 
can  use  Java  in  CICS.  but  it’s  a 
bit  of  a  forced  fit.  Now  they 
are  trying  to  offer  an  alterna¬ 
tive  to  Cobol  and  Java." 

The  transaction  gateway  b 
scheduled  to  ship  next  month, 
and  the  transaction  server  will 
be  available  in  March.  O  51217 


cal  about  the  long-term  poten¬ 
tial  of  the  Sun-Microsoft  al¬ 
liance.  "They’re  moving  in  the 
right  direction,  but  I  still  think, 
right  now,  they  have  their  own 
turf  that  they’re  interested  in," 
he  said.  "So  I’m  not  sure  where 
it's  going  to  pan  out." 

To  be  convinced  that  the 
alliance  will  produce  results. 
Johnson  said,  he  needs  to  see 
"a  real  product  in  hand  that 
shows  the  collaboration," 
rather  than  just  hear  the  ven¬ 
dors  talk  about  their  joint  work. 

Looking  for  Meaning 

Several  analysts  sud  they 
heard  nothing  new  in  the  first 
progress  report  that  the  two  j 

companies  issued  since  their  I 
April  announcement  of  a 
broad  cooperation  agreement, 
which  also  included  a  pay¬ 
ment  of  nearly  S2  billion  from 
Microsoft  to  Sun  to  settle  out- 
I  standing  litigation  between 
I  them  (QuickLtnk  4S957]. 

Tom  Bittman,  an  analyst  at 
Gartner  Inc.,  said  the  u^te 
was  issued  vrith  "a  defensive 
rationale"  to  help  the  vendors 
prove  that  they’re  collaborat¬ 
ing.  Bittman  said  be  has  no 
doubts  that  they're  working 
together  against  their  primary 
competitor,  IBM.  But  he  added 
that  he  bn’l  sure  it  matters 
anymore  "because  Sun's  influ¬ 
ence  isn’t  nearly  as  strong  as  it 
used  to  be." 

"In  terms  of  real  progress, 
you’d  have  to  sear<^  hard  to 
find  an>thtng.  I  didn't  really 
hear  anything  meaningful  at 
all,"  said  Rob  Enderle.  an  ana¬ 
lyst  at  Enderle  Group  in  San 
Jose.  He  said  he  thinks  the  two 
companies  may  never  have  in¬ 
tended  to  cooperate  much  be¬ 
yond  their  initial  agreement, 
which  gave  Sun  a  cash  infu¬ 
sion  and  allowed  Microsoft  to 
frire  itself  from  antitrust  sikI 
patent  lawsuits. 

Hank  Vigil,  vice  president 
of  consumer  strategy  and 
partnerships  at  Microsoft,  ob- 
jeaed  to  the  vendors’  collabo¬ 
ration  efforts  being  character¬ 
ized  as  modest  in  scope.  "If 
you  think  about  tbe  histoiy  ' 


■nteroperaUtty 

■  SwihasacNevedVlBrfhstcerli- 
cation  lor  lb  Jm  System 
SefverEnlBrpreeEdRion.JMSys- 
tamAcceaslibnaoerandJaraSiB- 
lem  Uenilfr  yanager  on  WMnn 
Sarmr. 

■  SiniBiRorlqnotovelldatelheAc- 
oeae  Manapar  and  Uentty  Unger 
tooblnidenitymanagamanlsearw- 
kis  usng  Mcmsdl's  Adwe  Olre^ 
lostOTanthBgqedereiifc. 

•  The  componiBs  have  Uso  worked 
to  aneuB  Ihei  Windows  XP  Service 
ftck2BinleropeiebtowM>ttwlai' 
est  min  of  Sun’s  Java  RMirne 
Emiranmeni  and  SteKMce  sille. 

Windows  on  Sun 

m  Sw's  Opteron  liBaad  servers  and 
workstations  are  now  cerUwd  as 
T)a8ignedforWlndows.' _ 

■  TheimrkstafioreueeOpleFon's 
enhanced  Vila  proteckon  featum  for 
Windows  XPSP2 

between  Sun  and  Microsoft,  it 
was  quite  a  contentious  histo¬ 
ry.  w^re  our  abflity  to  even 
talk  to  each  other  was  not  at  all 
clear,"  be  said.  "I  think  that  the 
eight  months  have  proven  xxM 
only  are  we  crawling  well,  but 
we’re  learning  bow  to  walk, 
and  someday  we  expect  to  nui 
together." 

Simflariy,  Greg  Papadopou- 
los,  chief  technology  oflicer  at 
Sun.  described  the  change  in 
the  nature  ofhis  company’s  re¬ 
lationship  with  Microsoft  as  "a 
180-degree  U-turn." 

The  vendors  have  held  15 
executive  meetings  in  the  pan 
five  months,  includii^  talks 
between  Papadopoulos  and 
BUI  Gates,  Microsoft's  chair¬ 
man  and  chief  software  archi¬ 
tect.  and  between  Microsoft 
CEO  Steve  Ballmer  and  Sun 
CEO  Scott  McNealy. 

Two-dozen  engineers  are 
also  meeting  face  to  face  on  a 
monthly  basis  to  discuss  tech¬ 
nical  issues,  according  to  An¬ 
drew  Layman,  director  of  dis¬ 
tributed  systems  and  inicrop- 
er^Uity  at  Microsoft.  | 

Papadopoulos  pointed  out 
that  be  and  Gates  have  also 


Customer  support 

■  SimhiKirMngtoBStBUBhacom- 
pekEcy  cantor  in  Radmond.  Wnh.. 
forioantotBSfappicationskwtov 
ing  Mcrasofl  and  Stm  tochnoiogws 

WUsorvicos 

■  MbnahandStfihaveco-au- 
tfiotod.  wlh  other  companes.  foiff 
IWhaarwcaaanariciiiim.WS- 
Mitavg.  W&Ewgng.  WBItoto- 
dUa6BiiBrigBandWS4hnagerwni. 

Java 

■  Maoaoftspoattng  customers  to 
Sun's  Jaw  Wnual  Madme  sofhRR 

Storage 

I  ■  The  companies  aw  wortong  to  an- 
;  sure  that  Sun's  StorEdgeffiDOdiak 
arrays  sjpport  Mensatfs  Wrtoal 
Disk  Service  and  Vokane  Copy 
Shadow  Service  softvrere. 
to  The  StorEdge6B20  received  the 
Desvied  for  Windows*  logo. 

met  joimiy  with  an  unspeci¬ 
fied  number  of  major  cus¬ 
tomers.  The  users  helped  the 
companies  get  their  priorities 
straight,  said  Papadopoulos. 
adding  that  they  listi^  IT  se¬ 
curity,  identity  management. 
Java  and  better  interoperability 
through  Web  services  as  issues 
that  are  tmporunt  to  them. 

Several  users  agreed  that  it 
would  be  helpful  for  Sun  and 
Microsoft  to  work  on  those 
technologies.  Roger  Wilding,  a 
senior  technical  engineer  at  a 
global  transportation  company 
that  he  asked  not  be  idcnii- 
fled,  said  it  has  been  hard  to 
get  Java  to  work  well  on  Win¬ 
dows-based  systems.  As  a  re¬ 
sult.  his  company  needs  the 
interoperability  that  Web  ser¬ 
vices  technology  promises. 

Chuck  Howanl  a  business 
development  manager  at 
Texas  Farm  Bureau  Insurance 
Cos.  in  Waco,  said  be  would 
like  to  see  additional  integra¬ 
tion  of  Microsoft’s  .Net  tech¬ 
nology  and  Java  2  Enterprise 
EdiUoa  051218 


Reporter  Patrick  Thibodeau 
contributed  to  this  story. 


CICS  Transaction  Server 
Adds  Web  Services  Support 


1  RANK  II  AVI  s  •  I  RANKI  V  M>1  \KIN(i 

Numbers  Game 


Department  of  corrections:  Last  month  in  this 
space,  I  reported  on  The  Standish  Group’s  most  recent 
Chaos  survey.  I  said  that  only  28%  of  IT  projects  suc¬ 
ceed,  18%  are  canceled,  and  51%  are  “challenged”  — 
seriously  late,  over  budget  and  lacking  expected  fea¬ 
tures.  Some  readers  wrote  in  to  point  out  that  the  numbers  don’t 
add  up:  28%  plus  18%  plus  51%  makes  only  97%. 

They’re  right.  I  botched  the  numbers.  That  51%  comes  from  2003. 
This  year,  54%  of  U.S.  IT  projects  fell  into  the  challenged  category. 

Yeah,  the  numbers  were  wrong.  But  at  least  they  weren’t  ridicu¬ 
lous  —  or  worse.  And  that  brings  us  around  to  a  new  Gartner  fore¬ 
cast  (see  story,  page  1). 


According  to  analyst  Donna  Scott,  speaking 
at  Gartner’s  annual  data  center  conference  in 
Las  Vegas,  up  to  half  of  all  IT  operational  jobs 
could  disappear  over  the  next  20  years  because 
of  improved  data  center  automation. 

Got  that?  Gartner's  telling  us  what  we  can  ex¬ 
pect  for  data  center  staiTmg  circa  2024.  That’ll 
come  in  ver>’  handy  for  the  next  quarterly  IT 
budget  adjustment,  won’t  it? 

It’s  easy  to  make  fiin  of  a  prediction  like  this. 
We  know  the  numbers  aren't  meaningful,  be¬ 
cause  no  one  can  gin  up  useful  numbers  two 
decades  in  advance.  lust  looking  a  few  years 
out,  predictions  get  shaky. 

For  example,  only  three  years  ago,  Gartner 
Chairman  Michael  Fleisher  predicted  that  half 
of  the  household-name  IT  vendors  wouldn’t 
exist  in  three  years.  Thai  pronouncement  made 
for  some  big  headlines  in  2001.  just  as  Hewlett- 
Packard  was  swallowing  Compaq.  But  it's 
not  a  prediction  you'll  see  Gartner  bragging 
about  these  days. 

(Gartner  still  stands  by  Fleisher’s  statement  — 
sort  of.  Vendor  consolidation  will 
just  rake  longer  and  may  not  be  as 
extreme  as  predicted,  the  company 
now  says.  Translation;  “We  botched 
the  numbers,  but  wc  still  think 
some  consolidation  will  happen 
eventually.") 

But  a  20-ycars-out  prediction  is 
also  troubling.  It  could  be  right  — 
but  only  if  nothing  In  IT  really 
changes.  Thai’s  not  Iikei>.  Major 
disruptions  and  surprising  shifts 
could  hit  us  in  both  the  technology 
and  business  world.s. 

In  20  years.  IT  operations  could 


conceivably  be  running  on  a  lights-out  basis,  al¬ 
most  completely  automated.  Operations  staff 
cut  by  50%?  It  might  be  80%  or  95%. 

Or  automation  might  wipe  out  systems  ad¬ 
ministrators  and  operators,  but  operations  staff 
head  count  might  stay  level,  thanks  to  a  vastly 
expanded  training  and  support  function. 

Or  the  IT  operations  staff  might  have  to  in¬ 
crease  because  IT  has  taken  on  functions  we’d 
never  imagine  as  IT  work  today.  (Who  thought 
in  1984  that  IT  would  serv’e  as  a  retail  store, 
switchboard  and  mailroom?) 

Or  in  20  years.  IT  operations  might  be  com¬ 
pletely  outsourced,  making  head  count  esti¬ 
mates  meaningless.  Or  it  might  be  invisible  in 
the  budget  because  departments  will  have  tak¬ 
en  over  their  own  IT  operations  to  r^n  them 
more  effectively  than  centralized  IT^  not  nec¬ 
essarily  more  efficiently,  but  more  effectively. 

We  simply  don't  know  what  IT  operations 
will  look  like  in  20  years.  And  the  only  way 
Gartner  can  forecast  IT  operations  staffing  20 
years  out  is  by  encouraging  a  simple-minded 
“the  future  will  look  just  like  the 
past"  world  view. 

That’s  a  dangerous  way  of  think¬ 
ing.  We’re  always  at  risk  when  we 
slip  into  it  —  even  without  the  help 
of  analysts  who  should  know  better. 

Gartner  folks,  we  understand 
what  you’re  trying  to  tell  us:  Im¬ 
proved  data  center  automation  will 
reduce  IT  operations  staffing  needs 
eventually. 

But  please,  don’t  dress  that  up  as 
a  20-ycar  prediction,  or  botching 
the  numbers  will  be  the  least  of 
your  mistakes.  O  51174 


wotUfi  sanlor  news  cotan- 
nlst  has  covered  IT  fot  more 
than  20  years.  0)ntacl  him  at 


Details,  Details 

This  database  server  is  suddenly  getting  slammed 
with  queries  -  and  a  support  pdot  fish  soon  gets  calls 
complaining  that  the  ERP  system  won't  respond 
Restarting  it  doesn't  help,  birt  fish  finely  flTKls  the  cU* 
prfi:  a  runaway  calculaticm  in  the  produ^  scheduler. 
The  engines  needed  some  training  on  how  to  pay 
attentiem  Ip  detad,*  fish  sighs.  *ht^ead  of  scheduling 
one  work  order  to  make  100.000  parts,  the  system 
was  generating  100.000  work  orders  and  ail  the  re* 
quirements  to  make  one  part  each." 
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Thanks,  Boss 
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FRANK  HAYES  ■  FRANKLY  SPEAKING 

Numbers  Game 


Department  of  corrections:  Last  month  in  this 
space,  I  reported  on  The  Standish  Group’s  most  recent 
Chaos  survey.  I  said  that  only  28%  of  IT  projects  suc¬ 
ceed,  18%  are  canceled,  and  51%  are  “challenged”  — 
seriously  late,  over  budget  and  lacking  expected  fea¬ 
tures.  Some  readers  wrote  in  to  point  out  that  the  numbers  don’t 
add  up:  28%  plus  18%  plus  51%  makes  only  97%. 

They’re  right  I  botched  the  numbers.  That  51%  comes  from  2003. 
This  year,  54%  of  U.S.  IT  projects  fell  into  the  challenged  category. 

Yeah,  the  numbers  were  wrong.  But  at  least  they  weren’t  ridicu¬ 
lous  —  or  worse.  And  that  brings  us  around  to  a  new  Gartner  fore¬ 
cast  (see  story,  page  1). 


According  to  analyst  Donna  Scott,  speaking 
at  Gartner’s  annual  data  center  conference  in 
Las  Vegas,  up  to  half  of  ail  IT  operational  jobs 
could  disappear  over  the  neict  20  years  because 
of  improved  data  center  automation. 

Got  that?  Gartner’s  telling  us  what  we  can  ex¬ 
pect  for  data  center  staffing  circa  2(y2A.  That’ll 
come  in  very  handy  for  the  next  quarterly  IT 
budget  adjustment,  won’t  it? 

It’s  easy  to  make  fim  of  a  prediction  like  this. 
We  know  the  numbers  aren't  meaningful  be¬ 
cause  no  one  can  gin  up  useful  numbers  two 
decades  in  advance.  Just  looking  a  few  years 
out,  predictions  get  shaky. 

For  example,  only  three  years  ago,  Gartner 
Chairman  Michael  Fleisher  predicted  that  half 
of  the  household-name  IT  vendors  wouldn’t 
exist  in  three  years.  That  pronouncement  made 
for  some  big  headlines  in  2001.  just  as  Hewlett- 
Packard  was  swallowing  Compaq.  But  it's 
not  a  prediction  you’ll  see  Gartner  bragging 
about  these  days. 

(Gartner  still  stands  by  Fleisher’s  statement  — 
sort  ot  Vendor  consolidation  will 
just  take  longer  and  may  not  be  as 
extreme  as  predicted,  the  company 
now  says.  Translation:  “We  botched 
the  numbers,  but  we  still  think 
some  consolidation  will  happen 
eventually.") 

But  a  20-years-out  prediction  is 
also  troubling.  It  could  be  right  — 
but  only  if  nothing  in  IT  really 
changes.  That’s  not  likely.  Major 
disruptions  and  surprisii^  shifts 
could  hit  us  in  both  the  technology 
and  business  worlds. 

In  20  years,  IT  operations  could 


conceivably  be  running  on  a  lights-out  basis,  al¬ 
most  completely  automated.  Operations  staff 
cut  by  50%?  It  might  be  80%  or  95%. 

Or  automation  might  wipe  out  systems  ad¬ 
ministrators  and  operators,  but  operations  staff 
head  coimt  might  stay  level  thanks  to  a  vastly 
expanded  training  and  support  function. 

Or  the  IT  operations  staff  might  have  to  in¬ 
crease  because  IT  has  taken  on  functions  we'd 
never  imagine  as  IT  work  today.  (Who  thought 
in  1984  that  IT  would  serve  as  a  retail  store, 
switchboard  and  mailroom?) 

Or  in  20  years,  IT  operations  might  be  com¬ 
pletely  outsourced,  making  head  count  esti¬ 
mates  meaningless.  Or  it  might  be  invisible  in 
the  budget  because  departments  will  have  tak¬ 
en  over  their  own  IT  operations  to  run  them 
more  effectively  than  centralized  IT  —  not  nec¬ 
essarily  more  ^cientfy,  but  more  ^ectively. 

We  simply  don't  know  what  IT  operations 
will  look  Uke  in  20  years.  And  the  only  way 
Gartner  can  forecast  IT  operations  stafHng  20 
years  out  is  by  encouraging  a  simple-minded 
“the  future  will  look  just  like  the 
past”  world  view. 

That’s  a  dangerous  way  of  think¬ 
ing.  We're  always  at  risk  when  we 
slip  into  it  —  even  without  the  help 
of  analysts  who  should  know  better. 

Gartner  folks,  we  understand 
what  you’re  trying  to  tell  us:  Im¬ 
proved  data  center  automation  will 
reduce  IT  operations  staffing  needs 
eventually. 

But  please,  don’t  dress  that  up  as 
a  20-year  prediction,  or  botching 
the  numbers  will  be  the  least  of 
your  mistakes.  O  51174 


someone 
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planned  ahead...  someone  didn’t 


Being  vigilant  helps  avoid  surprises, 
in  SANs  as  in  life. 

There  are  probably  things  happening  right  now  on  your  SAN  that  couid  lead  to 
appalling  performance  or  a  complete  system  crash. 

You  don't  know  when  it  will  happen. 

You  don't  know  how  it  will  happen. 

But  when  it  does  happen,  youll  wish  you  were  aware  things  were  building  up  to  give 
you  a  nasty  surprise,  an  expensive  surprise. 

Research  shows  that  SAN  downtime  can  cost  organizations  $100,000  per  minute, 
or  more."  Finisar’s  NetWisdom  and  Xgig  solutions  help  you  avoid  these  costs  by 
monitoring  your  SAN  to  stop  degradation,  CRC  errors  and  events  that  impact  your 
e  most  critical  applications,  business  data  and  transactions. 

Finis  ar 

View  our  web  seminar,  including  a  customer  case  study  and  demo  of  NetWisdom 
by  visiting  www.finisar.corn/plan 

Fns»  hK  been  speedng  up  neMeks  nl 

Avoid  nasty  surprises.  Monitor  your  SAN  and  hang  on  to  your  budget. 

dehietiie  besHMreed  products  m>  (esbni 
soUms  snce  1968  IMSGMQ:  F?<SR. 

*  S«ra:  FWftt  COTvrjng:  B.ywid  the  WW  DUa  C«rte.  RBC  C«(W  Reports  Oct  2»3 

www.fMtar.com/ptan 

Solaris 


TEN  MOVES  AHEAD 


1  LINUX  AND  SOLARIS'”  os 

APPLICATIONS  RUN  SIDE-BY-SIDE 

2.  CHOICE  OF  SYSTEMS - 
SPARC',  AMD  OPTERON'”  INTEL 

3,  RUNS  ON  OVER  250  SYSTEMS  FROM 
OTHER  MANUFACTURERS 

4  APPLICATIONS  RUN  UP  TO  30  TIMES  FASTER 

5  MILITARY-GRADE  SECURITY, 

VIRUS-FREE  FOR  THE  LAST  20  YEARS 

6,  GUARANTEED  COMPATIBILITY', 

GUARANTEED  INDEMNITY 

7  UP  TO  aO^o  SYSTEM  UTILIZATION 
iNO  MAINFRAME  REQUIRED) 

8  SYSTEMS  AND  DATA  FIX  THEMSELVES 

9  REVOLUTIONARY  NEW  FAILSAFE  FILE 
SYSTEM  FOR  DATA  PROTECTION 

10,  SCALES  FROM  1-WAY  TO  100-WAY 


MOVE  AHEAD  TODAY  AT 
SUN.COM/SOLARIS10 
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Iss.  50 
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2004 


NEWSPAPER 


Oracle  and  Slebel  users  share  some  hard-earned 
wisdom  gained  from  failed  CRM  rollouts. 


Windows  NT  4.0  users  can  still  gel  security  fixes  for  their 
servers,  hut  they'll  have  to  pay  lor  the  privilege. 


OECEMeER  tS.  2004  VOL  38  NO  SO  -  S5/C0PV 


r 


Great 


liliillnInnUUiiiiUiiUiiiliiiiliilHliillliiil 
nmTnmmmmmmmaittrKT  Lome-tsa 
•823493S/C8/il  0006458  001  5625 

82  • 

PSOOUEST 

PQ  BOX  984  24-6 

Mt4  ftsat  HE  48106-0964 


IBM  PC  Users  Face 
Uncertain  Future 


Some  worn'  about  product  qualit>’,  support 
after  plating  sale;  others  see  no  big  chmges 


Now  that  IBM  plans  to  sell  its 
PC  division  to  Beijing-based 
Lenovo  Group  Ltd.,  the  big 
question  is  whether  the  com¬ 
panies  can  keep  users  finm 
defecting  to  other  vendors  — 
which  would  put  IBM’s  once 
standard-setting  PCs  even  fur¬ 
ther  behind  systems  from  Dell 


Cisco  Users 
See  Some 
Pricing  Relief 

Vendor  has  lowered 
its  costs,  they  say,  but 
not  across  the  board 


Inc.  and  Hewlett-Packard  Ca 
in  market  share. 

After  the  deal  with  Lenovo 
was  announced  last  week, 
some  of  the  more  than  two- 
dozen  IBM  users  Computer- 
world  interviewed  or 


woria  interviewed  or 
contacted  via  e-mail  said  fi]||||||^ 
they  don’t  expect  the 
planned  sell-off  to  have  aiatoiHliiieM 
an  immediate  effect  on 
their  companies.  But 
many  others  voiced  con¬ 
cerns  about  whether  the  quali-  said  t 
ty  of  IBM’s  hardware  and  the  nonpi 

technical  support  they  receive  CIO, 

will  suffer  once  Lenovo  takes  identi 


The  H.W.  Wilson  Co.  in  New 
York,  said  the  publishing  com¬ 
pany’s  ThinkPad  notebook 
PCs  are  durable  and  never 
break  down.  But  with  Lenovo 
buying  the  technology.  "I 
would  tend  to  think  the  quali¬ 
ty  of  the  notebooks  will  de¬ 
cline."  said  Soberman. 

Some  IBM  users  said  they 
plan  to  look  at  other 
vendors  as  a  result  of 
_  the  deal  with  Lenova 


eelDfltfWUl  t»cucaiw.u.i.cu«vu. 
aktoMliiiOT  “We  will  now  more 
teatodMt  seriously  look  at  other 
opticMis.  such  as  Dell,  as 
we  replace  our  PCs," 
uali-  said  the  CIO  at  a  US.-based 
the  nonprofit  organization.  The 

'eive  CIO,  who  asked  not  to  be 
kes  identified,  added  that  almost 


over  during  next  year’s  second  all  of  the  o^anization's  600 


quarter. 

For  example,  longtime  IBM 
user  Sidney  Soberman,  direc¬ 
tor  of  technology  systems  at 


PCs  are  IBM  machines. 

The  director  of  application 
development  at  a  national  se- 
IBM.pqgeS5 


Cisco  Systems  Inc.’s  prices  I  imSfr  I  Igirx 

have  typically  been  higher  than  III  Lllllll  vSwwl 

those  charged  by  its  smaller 

newoiking  rivals.  Bui  some  BusiuCSS  intelligence 

last  week  that  the  pricing  situ-  VTCndOfS  offcf  tOOls  tO 
ation  has  improved  modestly  cIlTIlinStC  input  CITOrS 

for  Cisco  customers.  - 

Two  analysts  who  attended  by  heather  havenstein 

Cisco,  page  14  in  the  face  of  tighter  regulato¬ 
ry  controls  for  reporting  fi¬ 
nancial  data,  many  IT  depart¬ 
ments  are  wrestling  to  elimi¬ 
nate  or  control  the  widespread 
use  o(  spreadsheets.  But  many 


Compliance  Pressures  Prod  FT 
To  Limit  Use  of  Spreacbheets 


end  users  are  likely  to  rebel  if 
the  ubiquitous  tool  b  taken 
away  from  them. 

Business  intelligence  ven¬ 
dors  are  maneuvering  to  offer 
solutions  to  the  problem  in 
the  form  of  new  software  that 
can  eliminate  the  errors  often 
produced  when  data  is  en¬ 
tered  into  spreadsheets. 

Actuate  (^rp.  this  week  will 
^reodsheets.  page  12 
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Oracle  and  Siebel  users  share  some  hard-earned 
wisdom  gained  from  failed  CRM  rollouts.  PAGE  4 


Windows  NT  4.0  users  can  still  get  security  fixes  tor  their 
servers,  but  they’ll  have  to  pay  tor  the  privilege.  PAGE  5 


Joe  Amado  (centef)  CIO  at  Plulio  Morns  USA,  engineered  a 
Orantalic  turnaround  m  IT  service  delivery  and  business  alignment. 


Great 

Tlie  IT  department  at  Philip  Morns  USA  used 
to  be  Known  as  technically  adept  but  wasn't 
seen  as  a  strategic  partner  with  the  com¬ 
pany's  business  units.  Today,  it's  a  very  differ¬ 
ent  story,  reports  Thomas  Hoffman.  ■  . 
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IBM  PC  Users  Face 
Uncertain  Future 


■Some  \M)iT\  about  puKiiict  qualib.  support 
after  planned  sale:  others  see  no  big  elianges 


Now  that  IBM  plans  to  sell  its 
PC  div  ision  to  Bcijing*bascd 
'  Lenovo  Group  Ltd.,  the  big 
question  Is  whether  the  com* 
panics  can  keep  users  from 
defecting  to  other  vendors  — 

!  which  would  put  IBM's  once 
'  standard-setting  PCs  even  fur- 
I  ihcr  behind  systems  from  Dell 

I  Cisco  Users 
See  Some 
Pricing  Relief 

\ 'endor  has  low  civd 
its  costs,  they  s;ty.  hut 
not  aenrss  the  board 


Ine.  and  Hewlett-Packard  Co. 
in  market  share. 

After  the  deal  with  Lemtvo 
was  announced  last  week, 
some  of  the  more  than  two- 
dozen  IBM  users  Cfjmpuier- 
ivorld  interviewed  or 
contacted  via  e-mail  said  ■!] 
they  don't  expect  the 
planned  sell-ytfT to  have  sitett 
an  immediate  oftecl  on  aboi 
their  companies.  But  0“ 
many  others  voiced  con*  * 
corns  about  whether  the  quali' 
ty  of  IBM's  hardware  and  the 
technical  support  they  receive 
will  suffer  once  Lenovo  takes 


The  H.W.  Wilson  C.o.  in  New 
Yitrk.  said  the  publishing  com* 
'  pane's  ThinkPad  n«*tebo»ik 

Pt;s  are  durable  and  never 
Co.  break  down.  But  with  Lenovo 

buying  the  Uvhnology.  "I 
two  would  tend  to  think  the  quali¬ 

ty  »>f  the  notebiHfks  will  de- 
■o-  eline."  said  Soberman. 

er-  Some  IBM  users  s;iid  they 

^pipipA  plan  tt>  liKtk  at  other 
BNiHlilji  vendors  as  a  result  t>f 
GoBMVia,  'hs4caUvilhl,cn..v.,. 
sitetoreadmofB  "We  will  mm  more 
about  the  deal  seriously  Imdi  at  other 

0“**^  options,  such  as  IX'll.  as 
•5230  ’  ,  .. 

we  replace  our  IH.-S. 

)uali*  I  said  the  CIO  at  a  U.S.*based 
the  I  ntmprofit  organization.  The 
ccive  '  CIO.  who  asked  m»l  to  be 
ikes  i  identified,  added  that  almost 


over  during  nc-vt  year's  second  i  all  of  the  organization's  600 


quarter. 

For  example,  longtime  IBM 
user  Sidney  Soberman.  direc¬ 
tor  t*f  teehnoU>g\'  systems  at 


IH-S  are  IBM  machines. 

The  director  of  application 
development  at  a  national 

IftM,  page  55 


I  Cisco  Sy-stems  Inc.’s  prices  TV%  I  imit  I 
have  typically  been  higher  than  I O  Lllllll  wSw  QT 
those  chatted  by  its  smaller 

nLtworking  rivals.  But  some  Hu.sinCS.S  julclligCnCO 
IT  managers  and  analysts  said  i  xv  .  i  . 

last  week  that  the  pricing  situ-  'LllUOrsOnCTtOOls  lO 
ation  has  improved  m<»destl>  cliniiniltC  illpllt  CITOrS 

for  Cisco  customers.  .  - 

Two  analysts  who  attended  by  heather  havenstein 

Cisco,  page  14  In  the  face  of  tighter  regulato- 


Compliance  Pressures  Prod  IT 
To  Limit  Use  of  Spreadsheets 


CISCO’S  VIEWPOINT 

In  3  OiA  CEO  John  Chambets  says 
I  he  hasn't  heatd  users  comolain  atXHfl 
pricing 'm  a  very  long  time  ■  Page  14 


I  r>’  controls  for  rcpt>riing  fi- 
I  nnneial  data,  many  IT  Jepart- 
I  ments  arc  wrestling  to  eiimi- 
!  nate  or  contriTi  the  widespread 
1  use  of  spreadsheets.  But  many 


end  users  are  likely  to  rebel  if 
the  ubiquiu>u.s  und  is  taken 
away  from  them. 

Business  intelligence  ven¬ 
dors  arc  maneuvering  to  offer 
solutmns  to  the  pnd>lem  in 
the  form  of  new  M»ftxvarc  that 
can  eliminate  the  em>rs  often 
produced  when  data  is  en¬ 
tered  into  spreadsheets. 

Actuate  Corp.  this  week  will 
5preQ(is/it’rt.s,  page  12 


Your  potential.  Our  passion.^ 

MkMsolt 


Microsoft  Windows  Server  System  makes  it  easier  for 
Switzerland's  Federal  Department  of  Foreign  Affairs 
(DFA)  to  manage  the  infrastructure  serving  their 
embassies  and  consulates  in  156  countries.  Here's 
how:  By  using  Systems  Management  Server  2003 
and  Microsoft  Operations  Manager  2005,  DFA  can 
automatically  update  its  500  remote  servers  from  a 
central  location,  saving  over  $600,000  in  travel 
expenses  alone  in  the  past  year.  They've  also  been 
able  to  reduce  the  time  and  cost  of  maintenance, 
boost  user  productivity,  and  find  the  time  to  better 
prepare  for  expansion.  Software  that's  easier  to 
manage  is  software  that  helps  you  do  more  with 
less.  To  get  the  full  DFA  story  or  to  find  a  Microsoft 
Certified  Partner,  go  to  microsoftcomAvssystem 


"We  have  3,000  PCs  based  everywhere  from 
Argentina  to  Vietnam,  and  now  our  team  can 
update  them  all  from  headquarters." 

Viktor  Portmann 

Project  Manager,  Department  of  Foreign  Affairs,  Switzerland 


Windows  Server  System'"  irKludes; 


Server  Platform 

Windows  Server 

Virtualiaation 

Virtual  Server 

Data  Management  &  Analysis 

SQL  Server- 

Communications 

Exchange  Server 

Portals  &  Collaboration 

Office  SharePoint  Portal  Server 

Integration 

BizTalk'  Server 

Management 

Systems  Management  Server 

Microsoft'  Operations  Manager 

Secunty 

Iftternet  Security  &  Acceleration  Server 

Plus  other  srrftware  products 


4.  ir 


Make  a  name  for  yourself 
with  Windows  Server  System. 


9 

Windows 
Server  System 


The  right  storage  solution  doesn't  just  give  you  better  storage  control. 

It  helps  you  make  better  business  decisions. 

Storaqe  Management  Solutions 

The  first  step  in  making  better  business  decisions?  Deciding  to  be  in  control.  CAs  Intelligent  Storage  Management  solutions  can 
put  you  in  control  of  costs,  resources  and  data  availability  like  never  before.  They  provide  you  with  a  comprehensive  real-time 
view  of  your  system's  storage  capabilities,  while  also  providing  immediate  access  to  all  of  your  information.  As  a  result,  you  can 
manage  and  monitor  your  entire  storage  environment  with  ease  and  actually  use  existing  data.  As  always,  it's  also  vendor-  and 
device-neutral,  so  you  can  maximize  your  current  storage  resources,  saving  time  and  money.  With  more  automated  software 
that  can  make  its  own  decisions  about  storage  management,  you'll  have  the  information  you  need  to  make  better  business 
decisions.  To  find  out  more  or  to  get  a  white  paper,  go  to  ca  coni/driver. 
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ILM:  Putting  the  Pieces  Together 

In  the  Technology  section:  Users  such  as  John  Halamka, 
CIO  at  Boston-based  CareGroup.  are  beginning  to  reap 
the  benefits  of  information  life-cycle  management  tech¬ 
nology.  But  the)’  say  more  needs  to  be  done  to  make  it 
work  in  heterogeneous  storage  environments.  Page  21 
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Finish  the  Feud 

In  the  Management  section:  When 
IT  users  and  the  help  desk  staff  arc 
throwing  virtual  spitballs  at  each 
other,  everybody  loses.  Here  are  some 
tips  for  thawing  the  cold  war.  Page  42 
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4  Successful  CRM  projects  re¬ 
quire  things  such  as  a  sound 
business  strateg)*  and  applica¬ 
tion  integration  capabilities, 
experienced  users  say. 

5  Windows  NT  Server  users 

will  have  to  pay  up  if  they  still 
want  the  operating  sy’stem  to 
be  supported  by  Microsoft. 
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tools  to  their  app  servers. 

8  Aligning  IT  and  business  is  a 
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lence  and  a  focus  on  customer 
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Amado  and  bis  team  did  it. 
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The  Pros  and  Cons  of  MSSPs 

SECURITY :  Jian  Zhen  of  LogLogic  examines 
the  advantages  and  pitfalls  of  managed  secu¬ 
rity  service  providers  in  this  two-part  series. 
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Enterprise  SAN  for 
MacQSXServw 
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Part  1  of  this  three-part  series.  (He  will  follow 
up  with  a  piece  on  Mac  OS  X  and  SAN  enter¬ 
prise  backup.)  O  QidckLinii  51270 
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works  at  risk  by  failing  to  pre^periy  secure 
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on  improving  security.  O  QuIdiLM  SOMO 
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Process,  Integration 
Key  to  CRM  Success 


Some  rr  managers 
share  lessons  from 
failed  projects 


ev  MARC  U  SOHOIN) 

A  STRONG  business 
process,  robust  ap¬ 
plication  integration 
capabilities  and  sol¬ 
id  management  buy-in  are  key 
factors  in  any  successful  CRM 
installation,  said  users  at  two 
events  in  San  Francisco  last 
week. 

IT  managers  on  panels  at 
Oracle  Corp.'s  Open  World 
user  conference  and  a  sepa¬ 
rate  event  sponsored  by  Siebel 
Systems  Inc  offered  advice  on 
implementing  CRM  systems. 
Some  acknowledged  that  their 
CRM  expertise  comes  from 
lessons  from  failed  projects. 

John  Graff,  vice  president  of 
marketing  and  customer  oper¬ 
ations  at  National  Instruments 
Corp..  said  that  few  CRM  fail¬ 
ures  result  from  flawed  tech¬ 
nology.  “In  my  view,  the  single 
biggest  reason  is  a  lack  of  a 
business  strategy."  he  said  dur¬ 
ing  a  forum  at  OpenWorld. 

National  Instruments,  an 
Austin-based  maker  of  high- 
tech  instrumeoiaiion  prod¬ 
ucts.  runs  the  Oracle  E-Bust- 
ness  Suite  Ui  CRM  application 
to  support  sales,  maiketing 
and  services  operations. 

Without  a  business  strategy 
for  CRM.  companies  can 
rarely  gain  any  return  on  a 
CRM  investment,  Graff  said. 
For  example,  he  said  some 
companies  buy  a  CRM  tool 
and  install  it  but  "don't  know 
what  the  business  process  is. 
They  just  press  a  button  and 
get  data,  lliere’s  no  strategy 
(for  how  to  use  the  data].  It's 
not  easy  stuff.” 

Sealing  Devices  Inc.  a  Lan¬ 
caster,  N.Y.-based  manufactur¬ 
er;  Eailed  in  two  efforts  to  im¬ 
plement  CRM  systems  before 
succeeding  on  its  third  try. 
said  QO  Patrick  Harris.  The 
two  failures  were  primarily 


the  result  of  a  lack  of  integra¬ 
tion  with  other  applications. 
The  failed  CRM  systems  — 
the  first  homegrown  and  the 
second  a  package  from  an  un¬ 
disclosed  vendor  —  required 
much  redundant  input  of  data, 
which  led  to  mistakes.  The 
company's  current  system, 
which  is  based  on  Oracle 
CRM  and  other  Oracle  appli¬ 
cations,  allows  users  to  enter 
data  once  for  all  systems. 

Sealing  Devices  expects 
its  latest  project  to  deliver  an 
ROI  of  153%  over  five  years. 

San  Francisco-based  Izmo- 
cars,  a  provider  of  Internet 
tools  to  the  automotive  indus¬ 
try.  also  suffered  through  mul¬ 
tiple  CRM  Allures  before  un¬ 
dertaking  a  successful  effort 
which  was  based  on  Siebel's 
OnDemand  hosted  sales  force 
automation  software.  Izmo- 


cars  blamed  a  variety  of  tech¬ 
nical  and  cultural  problems 
for  its  failed  CRM  efforts, 
which  were  based  on  Siebel's 
Enterprise  software.  Sales- 
force.coro  Inc.'s  hosted  sys¬ 
tems  and  Microsoft  Corp.'s 
CRM  software. 

At  the  Siebel  event.  Izmo- 
cars  President  Tej  Soni  said 
one  of  the  keys  to  succeeding 
with  CRM  in  a  small  or  mid- 


n  The  single 
biggest  reason 
[for  faled  CRM  proj¬ 
ects]  is  a  lack  of  a 
business  strategy. 

JOHN  GRAFF.  VICE  PRESIDENT  Of 
MARKETING  AND  CUSTOMER  OPERA¬ 
TIONS.  NATIONAL  INSTRUMENTS  CORP. 


size  business  "is  nailing  down 
the  process  and  ensuring 
process  compliance."  Many 
smaller  companies  don't  docu¬ 
ment  their  sales  processes  — 
something  Izmocars  did  for 
the  OnDemand  rollout. 

Soni  said  the  Izmocars  proc¬ 
ess  includes  input  from  the 
company's  sales  force.  Soni 
credited  (he  documentation 
and  user  input  for  the  success¬ 
ful  use  of  the  new  CRM  sys¬ 
tem.  In  the  past,  sales  person¬ 
nel  used  CRM  software  only 
for  basic  calendaring,  not  for 
the  hill  sales  process,  he  said. 

Meanwhile.  Susan  Knox, 
senior  vice  president  of  sales 
and  marketing  at  eTelecarc  In¬ 
ternational  in  Monrovia,  fjilif . 
contended  that  iCRM  roll¬ 
outs)  &il  because  they  don't 
have  executive  sponsorship." 

ETelecare,  a  provider  of  call 
center  services,  runs  Siebel’s 
OnDemand  product.  To  suc¬ 
ceed.  it  also  helps  to  provide 
“early  wins,"  such  as  rolling 
out  the  CRM  applications  in 
small  increments  to  a  limited 
number  of  users,  she  said. 
051391 
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Microsoft  Offers  More  Support  for  NT  Server  -  at  a  Price 


Will  charge  flat  fee  for  security  fixes 


ev  CAROL  SLIWA 

IT  managers  at  The  Guardian 
Life  Insurance  Company  of 
America  knew  that  support  for 
the  company’s  Windows  NT 
4.0  servers  was  due  to  end  on 
Dec.  3L  But  they  hoped  that 
Microsoft  Corp.  would  relent 
and  continue  to  provide  securi¬ 
ty  fixes  free  of  charge,  as  it  has 
sometimes  done  in  the  past. 

Not  this  time. 

Microsoft  announced  Dec.  3 
that  it  will  continue  to  provide 
fixes  for  NT  Server  for  securi¬ 
ty  vulnerabilities  classified  as 
critical  or  important  —  but 
users  will  have  to  pay  a  flat  fee 
as  part  of  a  new  two-year  cus¬ 
tom  support  program  that  the 
vendor  will  launch  on  Jan.  L 
Microsoft  plans  to  ofTer  a  sim¬ 
ilar  program  for  Exchange 
Server  55  after  its  support  pe¬ 
riod  expires  at  the  end  of 2005. 

But  in  an  e-mail  poll  of  23 
former  and  current  users  of 
NT  Server  last  week,  only  one 

—  New  Yoric-based  Guardian 

—  said  it  plans  to  purchase  the 
custom  support  option.  Five  of 
the  respondents  said  they  had 
complied  migrations  off  of 
NT.  Another  U  said  that  10% 
or  less  of  their  servers  are  rtm- 
ning  NT,  so  they  see  no  press¬ 
ing  need  to  pay  for  support 

Dwinding  Numfaere 

“Any  server  that  is  Important 
enough  to  warrant  mainte¬ 
nance  should  already  have 
been  upgraded."  said  Scott 
Campbell  director  of  IT  oper¬ 
ations  at  First  American  Title 
Insurance  Ca  in  Santa  Ana. 
Calif.  Campbell  said  First 
American  wUI  probably  run 
Hs  dwindling  number  of  NT 
servers,  which  handle  small 
and  lower-value  applications, 
in  an  unsupported  mode. 

Bob  Mathers,  second  vice 
president  of  IT  operations  at 
Guardian,  declined  to  disclose 
the  cost  of  the  custom  support 
program.  But  he  said  H  is 
"pricey,"  particularly  since 
he  hadn't  budgeted  for  the 
expense.  He  also  noted  that 
Guardian  must  submit  a  Win¬ 
dows  Server  2003  migration 


plan  to  Microsoft  to  gain  ap¬ 
proval  for  participating  in  the 
custom  support  program. 

But  370  of  Guardian’s  UOO 
Windows  servers  are  NT-ba.'sed 
and  support  domain  control¬ 
lers,  homegrown  business  ap¬ 
plications  and  the  distribution 
of  software  updates  to  insur¬ 
ance  agents  in  the  field.  So  cus¬ 
tom  support  is  a  “necessary 
evil"  to  enable  an  orderly  tran¬ 
sition  to  Windows  Server  2003 
next  year,  Mathers  said. 

Microsoft’s  support  life¬ 
cycle  policy,  which  was  last 
updated  in  May  [Quicklink 
47207],  calls  for  a  minimum  of 
five  years  of  "mainstream’’ 
support  followed  by  five  years 
of  "extended"  support.  How¬ 


ever.  the  updated  support  poli¬ 
cy  applies  only  to  software 
products  released  during  the 
previous  five  years,  thereby 
excluding  Windows  NT  4.0 
Server,  a  1996  release,  and 
Exchange  55,  from  1997. 

Microsoft  wouldn't  disclose 
the  custom-support  price  on 
NT  but  said  the  fiat  fee  is  the 
same  regardless  of  the  number 
of  servers  a  company  has.  Pe¬ 
ter  Houston,  senior  director  of 
Windou-s  serviceability  at  Mi¬ 
crosoft,  said  the  program  was 
designed  to  help  the  largest 
customers  stay  secure. 

The  fee  is  an  annual  one. 
but  users  can  pay  quarterly,  ac¬ 
cording  to  Houston.  Customers 
that  migrate  off  of  NT  before  a 
year  is  up  won’t  have  to  pay  for 
the  remaining  quarters,  he  said. 

Two  large  customers  with 


Users  tiolica  last  vsr-ek  cited 
the  foUowino  reasons  for 
cutiltnuinQ  to  use  Windows  NT 
Upgrad*.  too  costiy 

Only  noncfilicai  .ipplic.itions 
fuo  on  NT  nov. 

Old  dardware  not  replaced 

Custom  4(X)iic.alioi>s  liavenT 
been  teslrx]  on  newer  releases 


between  30%  and  50%  of  their 
Windows  servers  still  on  NT 
said  they  won’t  purchase 
Microsoft's  ciutom  support. 
One,  a  U.K. -based  fmanpial 
institution,  already  negotiated 
a  separate  support  deal.  Peter 
Schleidt,  CIO  at  Danske  Bank 
A/S  in  Copenhagen,  said  its 
NT  servers  will  run  unsup¬ 


ported  only  for  a  short  time 
until  a  migration  is  done. 

In  April.  IDC  projected  that 
17%  of  the  Windows  sen'cr  in¬ 
stalled  base  would  be  using 
Windows  NT  4.0  Server  at 
year’s  end.  "The  fact  that  it's 
staying  on  pretty  strong  is  an 
indication  of  the  challenges 
customers  face  in  gening  off 
the  product,"  IDC  analyst  A1 
Gillen  said  last  week. 

About  15%  of  Oregon  State 
University’s  Windows  servers 
still  run  NT,  hosting  low- 
priority  q>ecialty  applications. 
]on  Dolan,  associate  director 
of  network  services,  said  it’s 
unlikely  the  Corvallis  school 
will  buy  custom  support. 

"We’ve  been  migrating  off 
4.0  for  some  time  and  will  use 
this  as  a  reason  to  either  up¬ 
grade  the  remaining  servers  or 
drop  them  off  the  network." 
Dolan  said.  O  S1397 


BEA  and  Oracle  Add  SOA  Tools  to  App  Servers 


■V  MEATHtR  HAVEMSTCIN 

BEA  Systems  Inc.  and  Oracle 
Corp.  last  week  detailed  new 
features  in  their  application 
servers  that  are  designed  to 
help  companies  build  service- 
oriented  architectures  (SOA). 

BEA  announced  the  beta 
version  of  Weblx^  Server 
Version  9.0.  code-named  Dia¬ 
blo.  which  executives  said 
supports  the  development 
of  Web  services  with  new 
reliable  messaging  and  high- 
availability  features. 

Diablo  supports  T2££  1.4  and 
WS-ReliableMessaging  and 
can  provide  enterprise-class 
messaging  features.  Uke  store 
and  forward  capabPities.  that 
are  critical  for  Web  services 
transactions,  said  Eric  Stahl, 
senior  director  of  product 
marketing  at  San  Jose-based 
BEA.  “If  messages  are  lost,  the 
infrastructure  will  roll  back 
the  transaction  or  send  the 
message  again,"  be  said. 

Diablo  can  also  be  used 
to  upgrade  applications  and 
servers,  allowing  users  to  keep 
applications  online,  be  sakL 

The  beta  version  of  Diablo 
will  be  available  this  week. 
WebLogic  Server  93)  will  ship 
bymid-2001 

Oracle  unveiled  Oracle  Ap-  I 


plication  Server  lOg  Release  2 
with  support  for  SOA  stan¬ 
dards  such  as  WS-ReliabUity 
and  WS-Security  as  well  as 
enhanced  business  process 
automation  and  monitoring 
capabilities  at  its  annual 
O^nWorid  conference  in  San 
Francisco.  The  application 
server  will  ship  in  stages 
through  the  first  half  of 2005. 

There  are  a  lot  of  new  ca¬ 
pabilities  for  building  Web 
services  in  Java,"  said  Thomas 
Kurian.  Oracle’s  senior  vice 
president  of  server  technolo¬ 
gies.  He  added  that  a  new  tool 
called  Business  Activity  Moni¬ 
toring  can  "monitor  bioiness 


processes,  enterprise  applica¬ 
tions  and  business  events,  and 
take  corrective  action." 

Competitive  Advantages 

The  new  messaging  features 
will  help  BEA  gain  market 
share  from  rival  integration 
and  messaging  vendors,  said 
Shawn  WUlett.  an  analyst  at 
Current  Analysis  Inc.  in  Ster¬ 
ling.  Va.  And  Oracle  has  as¬ 
sembled  a  suite  that  moves  it 
ahead  of  IBM  in  some  areas, 
he  added.  There  is  a  lot  of 
evidence  that  customers  are 
ready  for  Business  Activity 
Monitoring  if  it  is  packaged 
rii^t."  WUlett  said,  adding  that 


NEW  fEATURES 


BEAM9UD6IC9.0 

«B£AWeblnaicJRockil5.0 

JaiaOnetDpinentKi 


■  Seaport  lor  1.4  and  WS- 
ReKaUeMessaging  standards 


■  Messa^  nfrashudure  to 
deliver  hioh-vakvne  messages 
between  systsns 


ORAClf  APPLICATION 
SERVER  tOG  RELEASE  2 

•  Oracle  JOmcioper  Og  Release 
2  wiBi  enhanced  Java  adding. 
compUmganddeployniert 

•  Support  for  WS-Reliabirv  and 
WS-Securty  standards 


■  PortaHased  adrnnistjation 
consoie  to  provide  diftereni  views 
based  on  roles 

■  Live  appicalion  and  server  up¬ 
grades  in  tandem  wlh  production 


•  Busmess  activity  monilonng 
and  busines  event  manaoement 
kDcbonaitY 

■  IntegratExi  feakses  that 
support  development  of 
servicaixienled  arcNiectures 


the  new  integration  capabUi- 
ties  correct  a  traditional  Ora¬ 
cle  weakness. 

Spheris  Inc.  is  migrating  to 
Oracle's  application  server 
software  for  its  reliability  and 
scalability,  said  David  Denise, 
vice  president  of  applications 
at  the  medical  transcription 
company  in  Franklin,  Tenn. 

Denise  said  Oracle's  en¬ 
hanced  support  for  Web  ser¬ 
vices  wiU  help  Spheris  inte¬ 
grate  its  systems  with  those 
of  its  partners. 

"Every  customer  we  work 
with  has  some  sort  of  cus¬ 
tomization."  he  said.  “If  we 
can  rapidly  and  agilely  re¬ 
spond  to  their  needs,  [we  get) 
a  dear  competitive  advantage." 

Aloha  Airiines  loc.  uses  O- 
ade’s  application  server  soft¬ 
ware  to  expose  reservations 
data  from  its  mainframe  as 
Web  services.  Soren  Burkhart, 
senior  vice  president  and  (ZIO 
at  the  Honolulu-based  airline, 
said  Oracle’s  BPEL  Process 
Manager  lets  developers  mod¬ 
el  business  processes  to  see 
where  process  linkages  occuz 

*Tou  can  create  a  lot  of 
stand-alone  Web  services,  but 
if  your  coden  have  to  manual¬ 
ly  code  each  point,  you  wUI 
have  probleins  when  the  busi¬ 
ness  changes."  Burkhart  said. 
06081 
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nm  Process,  Integration 
Key  to  CRM  Success 


AT&T  Wins  $174M 
Networking  Pact 

ATAT  Corp.  Iasi  week  won  a  ST74 
million  global  networking  contract 
from  Siemens  AG.  The  four-year 
deal  calls  for  ATAT  to  provide 
Siemens  vrlth  a  management 
framework  using  ATAPs  Business- 
Ovect  Web  portal.  Siemens  offi¬ 
cials  said  the  portal  will  be  used 
to  interact  directly  with  ATAT  for 
the  day-to-day  management  of 
the  Siemens  corporate  network. 

Nortel,  Symantec 
Join  to  Brat  Bugs 

Nortel  Networks  Ltd.  and  Syman¬ 
tec  Corp.  last  week  agreed  to 
jointly  deliver  products  to  help 
companies  filter  out  Internet  at¬ 
tacks  before  they  reach  servers 
and  other  corporate  systems.  Un¬ 
der  the  terms  of  the  agreement. 
Nortel  win  begin  sMpping  applica¬ 
tion  switches  incorporating  Sy¬ 
mantec's  signature-based  anti¬ 
virus  and  intrusion-deleetion 
technologies  sometime  in  2005. 

AT&T  Gets  $1B 
Treasury  Contract 

The  U.S.  Department  of  the  Trea¬ 
sury  awarded  a  $1  bilBon  contract 
to  ATAT  Government  Solutions 
and  partners  to  buBd  a  new  se¬ 
cure  high-speod  network  for  Hs 
operations.  The  network  wil  con-  | 
nect  more  than  1.000  Treasury  lo¬ 
cations,  linking  tens  of  thousa^ 
of  users  around  the  world  with 
voice,  video  and  data  communica¬ 
tions.  The  network  is  scheduled  to 
be  completed  by  August  2005. 

Siemens  Buys 
WLAN  Developer 

Siemens  Communicalions  last 
week  agreed  to  acquire  wireless 
LAN  start-up  Chantry  Networks 
Inc  Terms  weran't  iSselosed.  Of¬ 
ficiate  said  Siemens  wifl  add  the 
Chantry  BeaconWorks  product,  a 
WLAN  swHch.  to  KsHiPatfr  prod¬ 
uct  fine.  Siemens'  vmture  eapitaf 
arm  this  fall  contributed  to  a  S17 


Smie  rr  maiwgers 
shart'  lessons  from 
tailed  projects 
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ev  MARC  L.  SONOINI 

TTRONti  business 
process,  robust  ap¬ 
plication  intetrration 
L-'apabiliiics  and  sol¬ 
id  management  buy-in  arc  key 
factors  in  any  successful  CRM 
installation,  said  u.scrs  at  two 
events  in  San  Francisco  Last 
week. 

IT  managers  on  panels  at 
Oracle  Corp.'s  OpenWorid 
user  conference  and  a  sepa¬ 
rate  event  sponsored  by  Siebel 
Systems  Inc.  otTered  advice  on 
implementing  CRM  systems. 
Some  acknowledged  that  their 
CRM  expertise  comes  from 
lessons  from  failed  projects. 

|ohn  Graff,  vice  president  of 
marketing  and  cristomer  oper¬ 
ations  at  National  Instruments 
[  Corp..  said  that  few  CRM  fail- 
I  ures  result  from  flawed  lech- 
I  nolc*g>-.  “In  my  view,  the  single 
I  biggest  reason  is  a  lack  of  a 
business  strategy.'*  he  said  dur¬ 
ing  a  forum  at  OpenWorid. 

National  Instruments,  an 
Austin-based  maker  of  high- 
tech  instrumcniation  prod¬ 
ucts.  njn.s  the  Oracle  E-Busi¬ 
ness  Suite  Hi  CRM  application 
to  -supptirt  sales,  marketing 
and  services  operations. 

Without  a  business  strategy 
for  CRM.  companies  can 
rarely  gain  any  return  on  a 
CRM  investment.  Graff  said. 

For  example,  he  said  some 
companies  buy  a  CRM  tool 
and  install  it  but  “don't  know 
what  the  business  process  is. 
They  just  press  a  button  and 
get  data.  There's  no  strategy 
I  for  how  to  use  the  data).  It’s 
not  ea-sy  stuff.'* 

Sealing  t>cvlccs  Inc.,  a  l.an- 
caster.  N.Y.-bascd  manufactur¬ 
er.  failed  in  two  efforts  to  im¬ 
plement  CRM  s>'sien)s  before 
succeeding  on  its  third  try. 
said  CIO  Patrick  Harris.  The 


mittion  fundfrig  round  for  Chsntry.  i  two  failures  were  primarily 


the  result  of  a  lack  of  integra¬ 
tion  with  other  applications. 
Tht!  failed  CRM  systems  — 
the  first  homegrow  n  and  the 
second  a  package  from  an  un¬ 
disclosed  vendor  required 
much  redundant  input  of  data, 
which  led  to  mistakes.  The 
company's  current  system, 
which  Ls  based  on  Oracle 
CRM  and  other  Oracle  appli¬ 
cations.  allows  users  to  enter 
d.ita  once  for  all  systems. 

Sealing  Devices  expects 
its  latest  project  to  deliver  an 
KOI  of  153%  over  five  years. 

San  Francisco-based  Izmo* 
cars,  a  provider  of  Iniemei 
tools  to  the  automotive  indus¬ 
try',  also  suffered  through  mul¬ 
tiple  CRM  failures  before  un¬ 
dertaking  a  successful  ctibn. 
which  was  based  on  Sicbcl's 
OnDemand  hosted  sales  force 
automation  software.  Uroo- 


cars  blamed  a  variety  of  tech¬ 
nical  and  cultural  problems 
for  its  failed  CRM  efforts, 
which  were  based  on  Sicbcl's 
Enterprise  software.  Sales- 
force.com  Inc.'s  liostcd  sys¬ 
tems  and  Microsoft  Corp.'s 
CRM  software. 

Ai  the  Siebel  event.  Izmo- 
cars  President  Tcj  Soni  said 
one  of  the  keys  to  succeeding 
with  CRM  in  a  small  or  mid- 


H  The  single 
biggest  reason 
[forfait  CRM  proj¬ 
ects]  is  a  lack  of  a 
business  strategy. 

JOHN  GRAFF.  WCE  PRESIDENT  OF 
MARKETING  AND  CUSTOMER  OPERA 
I  TIONS  NATIONAL  INSTRUMENTS  CORP 


Grade  Touts  Apps  at  OpenWorid 


SAN  FRANCISCO 

Orade  this  week  moved  to  as¬ 
suage  fears  that  it  has  taken  its 
eyes  off  of  its  E-Business  Sutle. 
makino  a  number  of  announce- 
m»its  at  the  Orade  OpenWorid 
confererKe  here 

The  company  used  the  Open- 
Wbrid  stage  to  unveil  the  next- 
generation  E-Business  Suite 
Hilo  package  as  well  as  a  wide 
array  of  incremental  eihance- 
ments  to  its  lOg  family  of  data¬ 
base  and  mfiastructure  products. 

In  the  process.  Orade  ap¬ 
peared  to  be  escaialing  an  effort 
to  sell  users  on  the  benefits  of 
E-Busirtess  Suite,  which  some 
observers  said  had  been  allowed 
to  langush  white  Oracle  promot¬ 
ed  its  lOg  offerings. 

Orade  executives  empha¬ 
sized  the  tight  integration  be¬ 
tween  the  lOg  technology  stack 
and  the  new  application  suite 
The  mtegrafion  wil  enable 
companies  to  draw  from  more 
sources  of  customer  information 
and  have  relevant  data  sent  to 


users  via  personalized  dash¬ 
boards,  they  said. 

Pal  Dues,  president  ot  the  In¬ 
dependent  Oracle  Applications 
Users  Group  and  project  officer 
for  the  Las  Vegas  city  manager's 
office,  said  that  white  Orade  has 
been  emphasizing  its  lOg  prod¬ 
ucts  (Net  Hi.  ihe  company's  de¬ 
velopers  didn't  let  the  product 
suite  languish.  'The  No.  1  thing 
when  bedding  something  is  lo 
have  the  foundation,*  she  said. 


New  Products 


SOME  OF  THE  PRODUCTS 
ORACLE  ANNOUNCED 
AT  OPENWORID: 

•  Data  hubs  for  product  and 
financial  information 

■  Oracle  Files  lOg  conleni 
management  software 

■  Oracle  lOg  Release  2 

database  software  with  new 
sorting,  aulomaied  teil-over  and 
security  features 


size  business  "is  nailing  down 
ihe  process  and  ensuring 
process  compliance.”  Many 
smaller  companies  don't  docu¬ 
ment  their  salt^s  priKosses  — 
something  Izmoears  did  for 
the  OnDemand  rolloui. 

Soni  said  the  Izmoears  proc¬ 
ess  includes  input  from  the 
aimpany's  sales  force.  Soni 
credited  the  documentation 
and  user  input  for  the  success¬ 
ful  use  of  the  new  CRM  sys¬ 
tem.  In  the  past,  sales  person¬ 
nel  used  CRM  software  only 
for  basic  calendaring,  not  for 
the  full  sales  process,  he  said. 

Meanwhile,  .Susan  Knox, 
-senior  vice  president  of  sales 
and  marketing  at  cTelccarc  In¬ 
ternational  in  Monrovia.  Calif., 
contended  that  "[CRM  roll¬ 
outs]  fait  because  they  don’t 
have  executive  sponsorship." 

ETclccare,  a  provider  of  call 
center  services,  ruiLs  Sicbcl’s 
OnDemand  product.  To  suc¬ 
ceed.  it  also  helps  to  provide 
"early  wins."  such  as  rolling 
out  the  CRM  applications  in 
small  increments  to  a  limited 
number  of  users,  she  said. 

0  51391 


explaining  why  Oracle's  straiegy 
for  promoting  its  infrastructure 
products  makes  sense. 

Joshia  Greeribaum.  an  ana¬ 
lyst  at  Enterprise  AppUcations 
insulting  m  Berk^.  Calif., 
said  that  "it  looks  Nke  applica- 
liorrs  may  come  out  of  the  dark 
basement  they've  been  in  the 
last  few  years.  This  could  give 
Orade  the  abHity  to  give  SAP  a 
run  tor  its  money.  We  need  that* 

The  integration  between  the 
lOg  and  Hi  Imes  appeals  lo  Kim 
Autrey.  vice  presid^t  of  busi¬ 
ness  systems  at  CNL  Restaurant 
Capital  LP.  an  Oriando-based 
financiat  services  company. 

Autrey  said  his  company 
hopes  to  go  live  with  the  Hi.10 
suite  next  year,  replacing  E-8usf- 
ness  Suite  H.5.9.  CNL  users 
could  tale  advantage  of  new 
lechnolooy  built  around  the 
Orade  K)g  Portal  for  functiorrs 
such  as  single  sign-on,  which 
would  help  eliminate  the  need 
for  muHiple  passwords  and  help 
the  convany  comply  with  the 
Sarbanes-OxleyActhesaid.  * 
-MarcLSangmi 
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Microsoft  Offers  More  Support  for  NT  Server  -  at  a  Price 


will  c’liargo  flat  fee  fer  seeurit\  fixes 


BV  CAROL  SLiWA 

IT  managers  al  The  Guardian 
Life  Insurance  Company  of 
America  knew  {hat  support  for 
the  company's  Window's  NT 
4.0  serv'crs  was  due  to  end  on 
Dec.  31.  But  they  hoped  that 
Microsoft  Corp.  would  relent 
and  continue  to  provide  socuri- 
t)'  fixes  free  of  charge,  as  it  has 
sometimes  done  in  the  past. 

Not  this  time. 

Micr<»soft  announced  Dec.  3 
that  it  will  continue  to  provide 
fixes  for  NT  Sers-cr  for  sccuri- 
t>'  vulncrabilitit's  classified  as 
critical  or  important  —  but 
users  will  have  to  pay  a  flat  fee 
as  part  of  a  new  two-year  cus¬ 
tom  support  program  that  the 
vendor  will  launch  on  fan.  1. 
Microsoft  plans  to  offer  a  sim¬ 
ilar  program  for  E.xchangc 
Server  5.5  after  its  support  pe¬ 
riod  expires  at  the  end  of  2005. 

But  in  an  e-mail  poll  of  23 
former  and  current  users  of 
NT  Server  last  week,  only  one 

—  New  York-based  Guardian 

—  said  it  plans  to  purchase  the 
custom  support  option.  Five  of 
the  respondents  said  they  had 
completed  migrations  off  of 
NT.  Another  11  said  that  10% 
or  less  of  their  serv  ers  arc  run¬ 
ning  NT.  so  they  sec  no  press¬ 
ing  need  to  pay  for  support. 

Dwindling  Numbers 

"Any  server  that  is  important 
enough  to  warrant  mainte¬ 
nance  should  already  have 
been  upgraded."  said  Scott 
Campbell,  director  of  IT  oper¬ 
ations  at  First  American  Title  ' 
Insurance  Co.  in  Santa  Ana. 
Calif  Campbell  said  First 
American  will  probably  run 
its  dwindling  number  of  NT 
servers,  which  handle  small 
and  lower-value  applications, 
in  an  unsupported  mode. 

Bob  Mathers,  second  vice 
president  of  IT  operations  at 
Guardian,  declined  to  disclose 
(he  cost  of  the  custom  support 
program.  But  he  said  it  is 
“pricey,"  particularly  since 
he  hadn't  budgeted  for  the 
expense.  He  also  noted  that 
Guardian  must  submit  a  Win¬ 
dows  Server  2003  migration 


plan  to  Microsoft  to  gain  .ap¬ 
proval  for  participating  in  the 
custom  support  program. 

But  .370  of  Guardian’s  1.100 
Windows  servers  arc  NT-based 
and  support  domain  control- 
.  lers.  home-grown  business  ap- 
j  plic.uionsand  the  distribution 
I  of  software  updates  to  insur¬ 
ance  agents  in  the  field.  So  cus¬ 
tom  suppi'n  is  a  “necessary 
evil"  to  etwble  an  orderly  tran¬ 
sition  to  Windiws  Server  2003 
next  year.  Mathci-s  said. 

Micrtisoft’s  support  life- 
cycle  policy,  which  was  Iasi 
updated  in  May  (QuickLink 
472071.  calls  for  a  minimum  of 
five  years  of  “mainsiream" 
support  followed  by  five  years 
of  “extended"  support.  How¬ 


ever.  the  updated  support  p<'lt 
ey  .ipplie*.  onl>  to  softwao' 
pn^duets  released  during  the 
pix'vious  five  ye.irs.  therein 
excluding  Windows  N  T  4,0 
Server,  a  luoo  release,  and 
E-Vchange  5-5.  from  l‘>‘>7. 

Microsoft  wouldn't  discU>se 
the  custom-support  price  on 
NT  but  s.iid  the  flat  fei*  Ls  the 
I  same  regardless  of  the  numK'r 
I  of  servers  a  company  has,  !V- 
I  ler  Houston,  senior  direct(»r  of 
Windows  serviecabilit>‘  at  Mi¬ 
crosoft.  said  the  pntgram  was 
I  designed  to  help  the  largest 
customers  stay  secure. 

The  fee  is  an  annual  one. 
but  users  can  pay  quarterly,  ac- 
cordir^  to  Houston.  Customers 
that  migrate  off  of  NT  beft*re  a 
I’car  is  up  won't  have  to  pa>'  for 
the  remaining  quarters,  he  said.  , 
Two  large  customers  with 


Users  polled  last  week  oted 
(he  fDHowir>g  reasorts  for 
continuing  lo  use  Windows  NT: 
»  Upgrade  too  costly 

•  Only  nortcntical  applicatKiRs 
run  on  NT  now 

0  Old  Karthvare  not  reptac«d 

•  Custom  applications  haven’t 
been  tested  on  newer  n 


between  30“u  and  50*»  of  their 
Windows  servers  still  on  NT 
said  they  won’t  pureh.iss‘ 
Microsoft's  custom  support. 
One.  a  UK. -based  financial 
institution,  already  negoiuicsJ 
.1  separate  support  deal,  IVter 
Schleidt.  CIO  at  Danske  Hank 
-A  ''S  in  Copenh.igen.  said  its 
NT  servers  will  run  unsup- 


BEA  and  Oracle  Add  SOA  Tools  to  App  Servers 


ev  HEATHER  HAVENSTEIN 

BEA  Systems  Inc.  and  Oracle 
Corp.  last  week  detailed  new 
feature.s  in  their  application 
servers  that  are  designed  lo 
help  companies  build  scrv'ice- 
oriented  architectures  (SOA). 

BEA  announced  the  beta 
version  of  WebLvigic  Server 
Version  9.0.  code-named  Dia¬ 
blo.  which  executives  said 
supports  the  development 
of  Web  services  with  new 
reliable  mt^ssaging  and  high- 
availability  features. 

Diablo  supports  )2E£  1.4  and 
WS-ReliableMessaging  and 
can  provide  enterprise-class 
messaging  features,  like  store 
and  forward  capabilities,  that 
are  critical  for  Web  services 
iransaaions.  said  Eric  Stahl, 
senior  director  of  product 
marketing  at  San  Josc-based 
BEA-  “If  messages  are  lost,  the 
infrastructure  will  roll  back 
the  transaction  or  send  the 
messc^te  again.*'  he  said. 

Diablo  can  also  be  used 
to  upgrade  applications  and 
servers,  allowing  users  to  keep 
applications  online,  he  said. 

The  beta  version  of  Diablo 
will  be  available  this  week. 
WcbLogic  Server  9,0  will  ship 
by  mid-2005. 

Oracle  unveiled  Oracle  Ap¬ 


plication  Server  lOg  Release  2 
with  support  for  SOA  stan¬ 
dards  such  a.s  WS-Kcliabiliiy 
and  ^\'S-Securily  as  well  as 
enhanced  busine.ss  pnveess 
automation  and  monitoring 
capabilities  at  its  annu.-tl 
OpcnWorld  conference  in  San 
'  Francisco,  "nic  application 
I  server  will  ship  in  stages 
I  through  the  first  half  of  2005. 

1  “There  arc  a  lot  of  new-  ca¬ 
pabilities  for  building  Web 
I  service's  in  lava."  said  Thomas 
j  Kurian.  Oracle's  senior  vice 
I  president  of  server  technoio- 
I  gics.  He  added  that  a  new  tool 
I  called  Business  Activity  Moni¬ 
toring  can  “monitor  business 


processes,  enterprise  applica  - 
tions  and  business  events,  and 
take  convetive  action-" 

Competitive  Advantages 

The  new  messaging  features 
will  help  BEA  gain  market 
share  from  rival  integration 
and  messaging  \x'ndorN.  said 
Shawn  Willett,  an  analyst  at 
Current  Analysis  Inc.  in  Ster¬ 
ling,  Va.  And  Oracle  has  as¬ 
sembled  a  suite  that  movi-s  it 
ahead  of  IBM  in  some  areas, 
he  added.  “There  is  a  lot  of 
Lwidence  that  customers  are 
ready  for  Business  Atnivity 
Mortiforing  if  it  »  packaged 
ri^t."  Willett  said,  adding  that 


NEW  FEATURES 


BEAWEBL06IC9.0 

■  BEA  Wetkogtc  JRockrt  5.0 
Java  Oevelopmeni  Krt 

•  Support  tor  J2EE  1.4  arxl  WS - 
ReliabieMessaging  standards 

■  Messaging  infrastructure  to 
deliver  high-volume  messages 
between  systems 

■  Rortat-based  administralion 
console  to  provide  different  views 
based  on  roles 

•  Live  application  and  server  up¬ 
grades  in  tandem  with  production 
applications 


Oracle  JOeveloper  K}g  Release 
2  with  enhanced  Java  editing 
compiling  and  deployment 

Support  (or  WS-RekaMity  ana 
WS-Securtiy  standards 

Business  actiwly  monitoring 
and  business  event  management 
iurtctnnality 

Integration  features  that 
support  deveiooment  ot 
sennce^)ner>ied  arch^ecUfes 


portx-J  onl\  fi«r .« -.inri  tinu 
until  .1  niigr.ih>>n  ts  Jum.' 

In  .-\prii.  llx  prnii-cti-.t  fn.»r 
17"  ot  thi'  W’inJiius  si-ni-r  ui 
M.illcd  Kisc  bi-  Using 
Wind**vvs  NT  4.0  ‘•v-rxi  r  .11 
vi-ar  s  enj  "  ITic  Licl  llut  it  '-. 

,  si.i\  ing  on  pn*tty  strong  is  .in 
I  indK.niion  ol  iht-  chjllcngi-s 
j  customers  fjvv  mgvtiing  oft 
the  product,"  IlH  unalysi  .-M 
(iillcn  s;nJ  bst  wxvk 
I  .About  l.’‘’"«*f()ri*gim 
Untvvrsiiy  's  inJows  siTxvrs 
still  run  NT.  hosting  low 
^  priori«\  sptvtalu  jppht  .iiions 
Ion  iXiLin.  .issiH-j.iiL-  Jiri-xitir 
ofru-lwork  sitvicvs.  s.iid  it's 
unlikely  the  (.'orvulhs  school 
will  buy  custom  support, 
"Wv'vc  Kvn  migrating  oft 
4.0  lor  -uimv  time  and  w  ill  us<' 
this  as  a  rc.istin  to  cithi-r  up¬ 
grade  the  remaining  servers  ot 
drop  them  off  the  nv'tvvork." 
Dolan  s,iid.  O  51397 


the  new  inicgr.uion  capabili- 
lie.s  cvirrcct  a  tr3dition.nl  Ora¬ 
cle  weakness. 

Sphens  Inc.  is  migrating  to 
Oracle's  appheatitm  sen  er 
software  for  its  relbhility  and 
scalability,  said  I>avid  Denise. 

V  iev  president  of  .ipplicuticms 
at  the  medical  Iranseripiion 
company  in  Franklin.  Tenn 
Dcnisi.'  said  Oracle's  en 
hanced  support  for  Web  ser¬ 
vices  will  help  Sphens  into- 
I  grate  its  sy&tcms  with  (hose 
of  its  partners. 

“Every  customer  wc  work 
w  ith  has  some  S4«rt  of  cus- 

iomizaiion."  he  said-  "If  uc 
can  rapidly  and  agilely  re¬ 
spond  to  their  rwed-s.  I  we  get] 
a  clear  competitive  advantage  " 
Aloha  Airlines  Inc-  uses  Or¬ 
acle's  applicai'Hin  sen’cr  soft¬ 
ware  to  expose  rcson-ai  ions 
data  from  its  mainframe  as 
j  Websomcev  Soren  Burkhan. 

I  senior  vice  president  and  tllO 
at  the  Honolulu-based  airline, 
said  Oracle’s  8I*EL  Process 
Manager  lets  developers  mod¬ 
el  business  prtH-'csscs  to  set* 
where  pRMX’ss  linkages  twcur. 

"You  can  create  a  hit  of 
stand-alone  Web  services,  but 
if  yuur  coders  have  ti»  manual¬ 
ly  code  each  point,  you  will 
have  problems  when  the  busi¬ 
ness  changes.“  Burkhan  said. 
051381 
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Start'up  Building 
Gridlike  Tools 

Former  Oracle  Corp..  Sun  Micro- 
systems  (nc.  and  8EA  Systems 
Inc.  executives  last  week 
launched  Cassatt  Corp.  to  tHiild 
gridlike  tools  to  automate  IT 
operattorts.  leverage  commodity 
hardware  and  softw^,  and 
govern  rtetwork  compute  cycles. 
Founders  include  former 
Chairman  Bill  Coleman.  Sun  Chief 
Engineer  Rob  Girtgell  and  Rich 
Green,  who  led  Sun's  Java  group. 

Nortel  to  Restate 
Results  Next  Year 

Nortel  Networks  Corp.  last  week 
said  It  plans  to  reRle  2003  and 
first-hMf  2004  results  starting 
Jan.  10.  Nortel  said  H  expects  to 
report  unaudited  third-quarter 
results  next  week,  along  wrth  up¬ 
dates  to  Ms  prevhNisly  announced 
estimated  unaudMed  first-  Md 
second-quarter  2004  results  and 
limited  estimated  unaudMed  re¬ 
sult  for  2001. 2002  and  2003. 

U.K.  Agency  Suffers 
Computer  Mishaps 

Some  40,000  computers  in  the 
UX's  Department  for  Work  and 
Pensions  lost  access  to  their  net¬ 
work  last  month  when  a  software 
upgrade  was  incorrectly  installed, 
the  latest  in  a  series  of  computer 
mishaps  that  the  agency  has  ex-  , 
perienced.  Electronic  Data  Sys-  i 
terns  Corp..  which  runs  the  sys¬ 
tem.  last  week  Mamed  the  four-  | 
day  disruption  on  an  unscheduled 
software  upgrade. 

Mozilla  Releases 
Open-Source  E-mail 

The  Mozilla  Foundation  last  week 
released  Version  1.0  of  Ms  Thun- 
derbird  e-mail  client,  fust  weeks  , 
after  launching  Ms  Firefox  1.0  Web  i 
browser.  The  stand-alone  open-  I 
source  e-mail  application,  which  ' 
has  been  in  devebpment  since  | 
earty  2003.  offers  a  user-train-  I 
aMe  iunk-maii  fitter  and  a  buiH-in  | 
RSS  reader.  Downloads  of  earty 
versions  have  surpassed  1  million. 
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HOT  TECHNOLOGY  TRENDS.  NEW  PRODUCT 
NEWS  AND  INDUSTRY  GOSSIP  o 


Open-Source  Rivals 
Go  to  the  Mat... 

...  in  a  middleware  smackdown.  While  it  may  not  pro¬ 
duce  as  bloody  a  match  as  the  oncc-epic  stru^Ic 
bc^veen  Microsoft  and  Sun  did,  JBoss  Inc.  and  Glue- 
codc  Software  Inc.  are  squaring  off  for  a  tussle  over 
which  of  their  open-source  alternatives  is  more  su¬ 
perior  to  proprietary  I2EE-bascd  middleware  from 
IBM.  BEA  Systems  Inc.  and  other  vendors. 

This  week.  dationiQuickLink  508171. 

Atlanta-  The  El  Set!undu,  Calif.-hascd 

■  based  1  Boss  company  h.ns  said  it  will  add 

unveils  its  clusiorlnfteapahiliticsandcx- 

JBl>ss  Enter-  panded  Web  services  support 

prise  Middle-  to  hv.’  in  the  first  quarter  of 
ware  System  2005.  Annual  support  fees 

(JEMS),  .in  start  at  S3.500. 

integrated  The  rival  offerings  are  get- 

software  ling  the  competitive  juices 

bundle  that  flowing  inside  the  CEOs  of 

includes  a  lava  application  the  two  open-source  compa- 
server,  a  business  process  nies.  Gluccodc’s  Winston 

management  (BPM)  engine  Damarilio  suggested  that  us- 
and  a  set  of  Eclipse-based  de-  ing  open-source  lechnology 
velopmcnt  tools.  A  c«rp<iraie  managed  and  controlled  by  a 
portal  .ipplication  is  due  to  single  company,  such  as 
follow  in  next  year’s  first  IRoss.  is  less  pure  than  rely- 

quarter,  and  later  in  2005.  ing  on  tools  from  a  nonprofit 

IBoss  plans  to  ship  an  enter-  group  like 
prise  service  bu.s  that  will  Apache, 

perform  interapplication  Meanwhile, 

messagjtig  duties.  Pricing  IBoss  boss 

for  |EMS  support  starts  at  Marc  Floury 

about  S10.000.  dissed  Gluc- 

Gluccodc  announced  its  code's  use  of 

enierprise-da.ss  Joe  software  proprietary 

stack  last  month,  using  appli-  'mtegration 

cation  server.  piTHal.  database  code  that 

and  BPM  technologies  from  can’t  be  rcli- 

Thc  Apache  Software  Foun-  censed  on 


Thi.s  week. 

\  Atlania- 

B  based  1  Boss 

fV  V*  unveils  its 
IRoss  Enter- 

software' 

includes  a  lava  application 
server,  a  business  process 
management  (BPM)  engine 
and  a  sei  of  Eclipse-based  de¬ 
velopment  tools.  A  c«rp<iraie 
portal  .ipplication  is  due  to 
follow  in  next  year’s  first 
quarter,  and  later  in  2005. 

IBoss  plans  to  ship  an  enter¬ 
prise  service  bus  that  will 
perform  interapplication 
messagjtig  duties.  Pricing 
for  |EMS  support  starts  at 
about  S10.000. 

Gluccodc  announced  its 
enterprise-class  Joe  software 
stack  last  month,  using  appli¬ 
cation  server.  piTHal.  database 
and  BPM  technologies  from 
TTic  Apache  Software  Foun-  I 


an  open-source  htsis  as  defi¬ 
nitely  impure.  Of  course,  you 
can  avoid  the  intramural  scuf¬ 
fle  by  downloading  all  the 
open-source  technology  for 
free  and  integrating  it  your¬ 
self.  But  what  fun  would  that 
be?  Stay  runed. 

Postini  turns  on 
encryption  feature . . . 

. . .  that's  available  to  almost 
everyone.  Each  day,  more  than 
.M)  million  of  the  e-mail  mes¬ 
sages  proccs.sed  by  Postini 
Inc.’s  antispam  service  re¬ 
quest  transmission  via  the 
Transport  Layer  Security 
(TLS)  protocol.  So  the  Red¬ 
wood  City,  Calif. -ba.sed  ven-  | 
di>r  has  now  added  a  TLS  en¬ 
cryption  option.  When  a 
TLS-cquipped  server  sends  a 
message  to  another  system 
that  supports  the  proUKol. 
cncry'ptcd  packets  arc  ex¬ 
changed.  IfTLS  isn’t  enabled 
on  the  system  at  the  receiving 
end.  clear-tcM  packets  can 
'  still  be  processed.  With  TLS. 
end  users  don’t  need  to  do 
anything  to  secure  their  data, 
says  Andrew  Lochart.  direc¬ 
tor  of  product  marketing  at 
Postini.  He  says  that  although 
TLS  is  requested  on  less  than 
10‘'t>  of  the  total  e-mail  traffic 
that  Postini  handles.  u.sage  of 
the  pnttLKol  is  trending  up. 
"Once  you  turn  it  on.  you 
never  have  to  worry  about  it 
again."  Lochart  claims.  "It’s 
become  a  question  of  why 
wouldn't  you  turn  it  on?” 

Give  your  help 
deskabreak. . . 

. . .  and  crack  down  on  spyware. 

In  a  recent  Gartner  Inc.  re¬ 
port.  analyst  Lydia  Lcqng  says 
some  of  her  large  corporate 
clients  arc  reporting  that  as 
much  as  25®o  of  their  help 
desk  calls  are  coming  from 
end  users  whose  systems  are 
overwhelmed  with  spyware. 
Andy  Osirom.  director  of 
marketing  at  ImcrMute  Inc. 
in  Braintree,  Mass.,  says  that's 
because  there  is  so  much  spy¬ 
ware  out  there.  Tens  of  thou- 


sands  of 
unique,  tiny 
programs  can 
hide  inside 
your  net¬ 
work.  repi*rt- 
ing  to  exter¬ 
nal  sites  on 
aciion.s  that 
end  users  take  in  the  course 
of  their  work  —  or.  just  as 
likely,  while  they’re  gimfing 
around  on  the  Internet.  Os- 
trom  saj-s  IntcrMute’s  Spy- 
Subtract  Enterprise  Edition. 
\Vhich  will  ship  next  week, 
cleans  up  spyware  and  then 
continues  to  defend  your  net¬ 
work  from  new  variants  that 
try  to  sneak  inside  the  fire¬ 
wall.  SpySubtracf  uses  a  cen¬ 
tral  con.sole  so  you  can  con¬ 
trol  the  distribution  of  spy¬ 
ware  elimination  and  man¬ 
agement  utilities  to  desktops. 
It  also  comes  with  reporting 
tools  that  let  you  sec  which 
workgroups  or  individual  end 
users  have  the  most  unsavorj’ 
spyware  problems.  I’ricing 
starts  at  S2,250  for  100  users. 

“Infonnation  flows 
globally,  but . . . 

. . .  people  fitter  it  locally.” 

That  aphorism  comes  from 
Michael  ('hendcr.  CEO  of  Co- 
cmcrgencc  Inc.  in  Halifax. 
Nova  Scotia.  “Most  compa¬ 
nies  don’t  have  their  knowl¬ 
edge  organized  beyond  a 
shared  disk 
drive."  adds 
the  pithy 
Chender.  He 
says  his  com¬ 
pany’s  ACIS 
knowledge 
management  i 
system  pro-  I 
vidcs a  cen¬ 
tralized  "reservoir"  of  infor¬ 
mation  that  can  be  tuned  for 
specific  groups,  locations  or 
individuals.  Version  S.  which 
will  ship  in  March,  adds  Mi¬ 
crosoft  Outlook  and  Office 
integration  and  includes  a 
search  engine.  The  average 
starting  price  for  a  site  li¬ 
cense  is  SIOO.OOO.  O  St341 
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Startup  Btdding 
GridNke  Tools 

FarnwrOradiCerp^SunllicrD* 
qntwiB  he.  and  BCA  Systams 
he.  oaoilim  hat  «wk 
huMhad  Caaaatt  Corik  to  build 
grMhi  tooh  to  automata  IT 
oparhtans.  haansa  commodity 
hardiawa  and  aoftonra,  and 
0o«arn  natwofkeamputo  cydae. 
Foondan  hduda  form 
CtMinano  M  Cehman.  Sun  CMaf 
Enghaar  Rnb  Oh0rii  «id  fBeh 
Braan.  adw  lad  Sun's  Jaw  group. 


Nortel  to  Restate 
Results  Next  Year 

Hartal  Nahmrla  Corp.  hat  await 
«ddilplMatorafih2003and 
fIrsHialf  2004  raatdto  starting 
<hn.  10.  Hartal  said  R  aipacts  to 
rspart  unaudHad  tfrird-qwilar 
raaidlinaitawaii.aloiigadthup* 
dhaa  to  Its  prariamly  wwuncad 
asthmtod  imaudHwl  hit-  and 
aaeand-quortar  2004  rooidls  and 


sdh  for  200t  2002  and  2003. 


UJC  Agency  Suffers 
Computer  Mishaps 

Semo  40.000  compuhre  h  tha 
U  JC*s  OaparhMnt  for  Vhrb  and 
Tendons  hat  accaaa  to  hair  not- 
work  laat  month  adion  a  aolhwra 
uppada  was  hcorracOy  hilalud. 
tha  hhst  h  a  sorfos  of  compiitor 
ndriiapa  that  tha  sgancyhaaas- 
porlanead.  Boetronic  Data  Sys- 
tono  Carp..  aMeh  runa  tha  sya- 
tarn,  hat  waak  Wamad  tha  faur- 
day  dtampthn  on  an  unsehaduiod 
aaftiwara  upgroda, 


Mozia  Releases 
Open-Source  E-mail 

Tba  ltoia»  FnndUliiii  iMl  mall 
ralMHdWniiiiitOadbniR- 
itafiM  timl  dM.  M  oMki 
Iter  IncMiq  Hi  Rnioi  to  «»> 

tramr.  Tin  iteid  iloin  men- 
■«»<■»  »  ml  mpIrHiw,  irlilc* 
>«»  tew  IB  dwiipiiniil  tec* 
trati 

ith  iHikiHl  Hte  aid  a  telHn 
OSS  iiadar.  Baanlaadaotaariy 
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Open-Source  Rivals 
Go  to  the  Mat .. . 

...ha  middlewaFe  smackdown.  While  it  may  not  pro¬ 
duce  as  bloody  a  match  as  the  once-epic  struggle 
between  Microsoft  and  Sun  did,  JBoss  Inc.  and  Glue- 
code  Software  Inc.  are  squaring  off  for  a  tussle  over 
which  of  their  open-source  alternatives  is  more  su¬ 
perior  to  proprietary  J2EE-based  middleware  from 
IBM,  BEA  Systems  Inc.  and  other  vendors. 


This  week, 
Atlanta- 
based  JBoss 
unveils  its 
JBoss  Enter¬ 
prise  Middle¬ 
ware  System 
(JEMS),  an 
int^rated 
sofhvare 
bundle  that 
includes  a  Java  application 
server,  a  business  process 
management  (BPM)  engine 
and  a  set  of  Eclipse-based  de¬ 
velopment  tools.  A  corporate 
portal  application  is  due  to 
follow  in  next  year's  first 
quaner.  and  later  in  2005. 
JBoss  plans  to  ship  an  enter¬ 
prise  service  bus  that  will 
perform  intcrapplicalion 
messaging  duties.  Pricing 
for  JEMS  support  starts  at 
about  $10,000. 

Gluecode  announced  its 
enterprise<lass  Joe  software 
stack  last  month,  using  appli¬ 
cation  server,  portal,  database 
and  BPM  technologies  from 
The  Apache  Software  Foun¬ 


dation  ((^icklink  508171. 

The  El  Segundo.  Calif-based 
company  has  said  it  will  add 
clusterirtg  capabilities  and  ex- 
paivded  Web  services  support 
to  Joe  in  the  first  quarter  of 
2005.  Annual  support  fees 
start  at  $3300. 

The  rival  offerings  are  get¬ 
ting  the  competitive  juices 
flowing  inside  the  CEOs  of 
the  two  open-source  compa¬ 
nies.  Gluecode’s  Winston 
Damarillo  suggested  that  us¬ 
ing  open-source  technology 
managed  and  controlled  by  a 
single  company,  such  as 
JBoss.  is  less  pure  than  rely¬ 
ing  on  tools  from  a  nonprofit 
group  like 
Apache. 

Meanwhile. 

JBoss  boss 
Marc  Fleury 
dissed  Glue- 
code's  use  of 
proprietary 
int^ratiOD 
code  that 
can't  be  reli¬ 
censed  on 


an  open-source  basis  as  defi¬ 
nitely  impure.  Of  course,  you 
can  avoid  the  intramural  scuf¬ 
fle  by  downloading  ali  the 
open-source  technology  for 
free  and  integrating  it  your¬ 
self.  But  what  fiin  would  that 
be?  Stay  tuned. 

Postinj  turns  on 
encryption  feature... 

. . .  that's  available  to  almost 
everyone.  Each  day,  more  than 
30  million  of  the  e-mail  mes¬ 
sages  processed  by  Posiini 
Inc.'s  antispam  service  re¬ 
quest  transmission  via  the 
Transport  Layer  Security 
(TLS)  protocol  So  the  Red¬ 
wood  Qty.  Calif-based  ven¬ 
dor  has  now  added  a  TLS  en¬ 
cryption  optioa  When  a 
TLS-equipped  server  sends  a 
message  to  another  system 
that  supports  the  protocol, 
encrypted  packets  are  ex¬ 
changed.  If  TLS  isn't  enabled 
on  the  system  at  the  receiving 
end.  dear-text  packets  can 
still  be  processed.  With  TLS. 
end  users  don’t  need  to  do 
anything  to  secure  their  data, 
says  Andrew  Lochart.  direc¬ 
tor  of  product  marketing  at 
PostinL  He  says  that  although 
TLS  is  requested  on  less  than 
10%  of  the  total  e-mail  traflic 
that  Postini  handles,  usage  of 
the  protocol  is  trendirtg  up. 
'Once  you  turn  it  on.  you 
never  have  to  worry  about  it 
again."  Lochart  claims.  "It's 
become  a  question  of  why 
wouldn't  you  turn  it  on?" 

Give  your  help 
deskabraak... 

..  and  crack  down  on  spywvD. 

In  a  recent  Gartner  Inc.  re¬ 
port.  analyst  I^dia  Leoi^  says 
some  of  her  large  corporate 
clients  are  reporting  that  as 
much  as  25%  of  their  help 
desk  calls  are  coming  ftom 
end  users  whose  systems  are 
overwhelmed  with  spywsue. 
Andy  Ostrom,  director  of 
marketing  at  InierMute  Inc. 
in  Braintree.  Mass.,  says  that’s 
because  there  is  so  much  spy- 
ware  out  there.  Tens  of  thou¬ 


Number  of  spy- 
ware  &iQndlures 
in  Kip  Current 
SpySubfraef 


sands  of 
unique,  tiny 
proigramscan 
hide  inside 
your  net¬ 
work,  report¬ 
ing  to  exter¬ 
nal  sites  on 
actions  that 
end  users  take  in  the  course 
of  their  woric  —  or.  just  as 
likely,  while  they're  goofing 
around  on  the  Internet.  Os¬ 
trom  says  InterMute's  Spy- 
Subtract  Enterprise  Edition, 
which  will  ship  next  week, 
deans  up  spyware  and  then 
continues  to  defend  your  net¬ 
work  from  new  variants  that 
try  to  sneak  inside  the  fire¬ 
wall.  SpySubtract  uses  a  cen¬ 
tral  console  so  you  can  con¬ 
trol  the  distribution  of  spy- 
ware  elimination  and  man¬ 
agement  utilities  to  desktops. 
It  also  comes  with  reporting 
tools  that  let  you  see  which 
workgroups  or  individual  end 
users  have  the  o>ost  unsavory 
spyware  problems.  Pricing 
starts  at  $2^250  for  100  users. 

“InfbmiationfkNvs 
globally,  but . . . 

. . .  people  flftor  It  locally." 

That  aphorism  comes  from 
Michael  Chender.  CEO  of  Co- 
emergence  Inc.  in  Halifax, 
Nova  Scotia.  "Most  compa¬ 
nies  don’t  have  their  knowl¬ 
edge  organized  beyond  a 
shared  disk 
drive."  adds 
the  pithy 
Chender.  He 
says  his  com-  | 
pany’s  ACIS 
knowledge 
management 
system  pro¬ 
vides  a  cen¬ 
tralized  "reservoir"  of  infor¬ 
mation  that  can  be  tuned  for 
specific  groups,  locations  or 
individuals.  Version  S.  which 
will  ship  in  March,  adds  Mi¬ 
crosoft  Outlook  and  Office 
integration  and  includes  a 
search  engine.  The  average 
starting  price  for  a  sito  li¬ 
cense  is  $100.000. 0  51341 
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Thef  Sle!t{Ver  platform  of  choice^ 

just  got  better. 

« 

•  t  , 


Introducing  the  Intel*  Xeon'  processor  with 
support  for  32-  and  64-bit  appiications. 

It  means  the  most  widely  used 
server  platform  in  the  world  can  now  work  even  harder. 

And  new  platform  technologies  enable  increased  power  savings, 
flexibility  and  performance.  For  more 
information — and  more  choice — visit  intel.com/business. 
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rr  Execs  Take  Different  Paths 
To  Align  With  Business  Units 


Some  tout  strong;  IT  guidance;  others 
let  users  take  the  lead  on  priorities 


SPtAKiNi.  before  a 
group  of  senior  IT 
executives  last  week, 
lames  Woolwine. 
CIO  ai  Majestic  In 
surance  Co.,  outlined  a  gover¬ 
nance  model  that  gives  the  in¬ 
surer’s  business  units  the  piw- 
er  to  set  his  techndlog)-  priori¬ 
ties.  He  then  asked  for  ques¬ 
tions.  But  there  was  silence. 

Surprised.  Woolwinc  chal¬ 
lenged  his  audience:  “rm  tell¬ 
ing  >viu  that  yiHi  should  cede 
control  of  your  bu.sines.s.  You 
should  be  yelling  at  me.” 

But  then?  was  a  reasiin  why 
m'  one  took  is-suc  w  ith  Wool- 
wine’s  cumment.s  at  the  CIO 
Summit,  which  was  held 


I  here  b>’  London-based  Marcus 
Evans  Ltd.  IT  managers  intcr- 
,  viewed  at  the  conference  said 
[  they  all  share  the  same  goal: 

aligning  IT  with  the  business 
I  side.  And.  they  explained,  the 
approach  used  by  San  Francis- 
co-hased  Majestic  Insurance 
I  wasn’t  criticized  because  of 
I  the  widespread  recognition 
that  there’s  rw  sirtgle  way  to 
accomplish  that  goaL 
For  instance.  Andre.s  Carval- 
lo.  CIO  at  Austin  Energy,  said 
he  thinks  that  a  key  to  IT 
business  alignment  Ls  a  very 
strong  leadership  style  on  his 
part.  In  dealing  with  the  dif¬ 
ferent  business  units  that  fight 
tor  IT  dollars.  Carvallo  said 
his  in-your-face  approach  is  to 
tell  business  e.xccutives  that 


they  will  be  more  successful  if 
they  work  with  him. 

The  Austin-based  utility 
company  ha.s  steering  commit¬ 
tees  that  meet  to  help  set  IT 
strategy,  but  Carvallo  said  he 
also  uses  a  heavily  customized 
software  tool  to  evaluate  proj¬ 
ects  on  a  scale  of  I  to  5.  He  an¬ 
alyzes  a  project’s  cost,  its  com¬ 
pliance  with  internal  IT  stan¬ 
dards  and  its  potential  impact 
on  customer  satisfac¬ 
tion  and  business 
processes  ~  all 
against  the  backdmp 
of  how  it  aligns  with 
Austin  Energy's  strate¬ 
gic  direction. 

Bruce  Petro,  chief 
technology  olficer  at 
AG  Interactive,  the  In¬ 
ternet  business  unit  of 
American  Greetings 
Corp.  in  tTcseland. 
said  he  encourages 


experimentation  and  wants 
to  hire  IT  professionals  from 
other  industries  to  stimulate 
new  w'ays  of  thinking  and 
avoid  the  '‘inbreeding”  of  ideas. 

The  push  for  innovation 
helped  AG  Interactive's  IT  staff 
develop  ways  to  meet  sharp 
increases  in  Web  traffic,  ac¬ 
cording  to  Petro.  He  said  the 
company's  IT  budget  was  so 
tight  that  it  forced  workers  to 
try  different  strate¬ 
gies.  including  a  shift 
to  the  open-source 
MySQL  database  and 
the  use  of  asynchro¬ 
nous  processing. 

Michael  Prince. 

CIO  at  Burlington 
Coal  Factory  Warc- 
hemse  Corp..  has 
tried  to  establish  the 
Burlington.  N.|.-based 
retailer  as  a  technolo¬ 
gy  innovator.  Burling- 


I  ton  Coat  was  among  the  first 
I  large  companies  to  install 
Linux  widely,  and  it’s  now- 
deploying  a  Linux-based 
grid  computing  system. 

But  Prince  said  he  thinks 
those  projects  have  been  pos¬ 
sible  only  because  of  the  trust 
the  IT  department  has  built 
with  Burlington  Coat’s  busi¬ 
ness  users.  Prince  has  been  at 
the  company  since  1983,  and 
many  of  his  IT  staff  members 
also  have  long  tenures. 

"People  have  confidence 
that  we  kni)w  what  we're  do¬ 
ing.”  Prince  said.  Long-term 
employment  in  IT  "adds 
something  to  a  company’s 
ability  to  be  innovative  .md 
efficient.”  he  added. 

Despite  the  differences  in 
the  approaches  they  use.  all 
the  IT  managers  said  that  col¬ 
laboration  with  business  users 
is  a  crucial  part  of  the  push  for 
alignment.  “For  IT  to  try  to 
force  business  process  change, 
that  means  resistance  all  the 
time.”  said  Matthew  Maguire, 
vice  president  of  information 
services  at  Domino's  Pizza 
Inc.  O  51384 


IT  Cost-Cutting  Shifts  to  Software 


reduce 

scr\ers 


SV  THOMAS  HOFFMAN 

After  three  years  of  cutting  IT 
costs  throu^  server  consoli¬ 
dation  and  selective  outsourc¬ 
ing,  enterprise  IT  shops  are 
ntm  fitcused  on  reducing  soft¬ 
ware  e.\pen.ses.  according  to 
IT  managers  and  analj-sLs  in¬ 
terviewed  last  week. 

Several  factors  are  ct)n- 
tribuiing  to  this  latest  cost- 
cutting  trend.  For  starters,  as 
organizations  shift  from  u-sing 
groups  of  .sm.ili  servers  to  few¬ 
er.  more  powerful  servers, 
fewer  database  and  applica¬ 
tion  siiftwarc  litx’nscs  are  re¬ 
quired  for  the-  machines. 

In  mid-2003.  (he  city  of  Vir¬ 
ginia  Beach.  Va.,  a'plaeed  five 
Intel-based  servers  that  ran 
Microsoft  Corp.'s  SQL  Server 
database  system  with  two 
more-ptmcrful  clustered 
servers  from  Hewlett-Packard 


Co.,  said  Michael  French,  an 
IT  asset  manager  for  the  city. 

Virginia  Beach,  w'hich  is  still 
in  the  process  of  upgrading 
I  from  older  SQL  Server  7  data- 
j  bases  to  SQL  Server  2000  sys- 
;  toms,  paid  more  in  upfront  li- 
[  censing  fees  for  the  five-serv¬ 
er  configuration  after  shifting 
^  from  an  end-user-based  ti- 
censing  scheme  to  per-proccs- 
j  sor  licensing,  said  French. 

But  even  as  the  municipality 
j  add.s  more  databases  to  sup- 
I  port  finandal  operations  and 
other  activiiies,  it  cxpccLs  to 
achieve  S300.000  to  $400,000 
in  net  cost  savings  over  the 
next  18  to  24  months  with 
fewer  servers,  he  said. 

Ripple  Effect 

Preparations  to  meet  the  regu¬ 
latory  requirements  of  the 
Sarbancs-Oxley  Act  arc  also 
having  a  ripple  effect  on  soft¬ 
ware  license  consolidations. 

As  some  software  publishers 
request  that  cu.stomcrs  vali- 


tiaie  compliance  with  licens¬ 
ing  agrix*ments.  some  audits 
are  leading  companies  to  dis¬ 
cover  active  licenses  for  un¬ 
used  software.  Companies  are 
also  finding  out-of-date  per¬ 
user  licenses  as  workforces 
arc  cut  or  reworked. 

“Enterprise  customers  are 
turning  around  and  looking  at 
this  information  to  see  where 


SOFTWARE  LICENSING 

As  riafdwarc  con¬ 
solidation  flfnris  end,  ifnler- 
pnse  organizations  have 
started  locusmq  on  rndgcfig 
software  cost', 

Conliruert 

pressufe  on  IT  {leparlmenis 
to  cut  costs 

deduction  in 

software  licertsing  and  majo- 
lenance  lees  through  consol¬ 
idation,  a  decrease  in  support 
staft  required,  and  the  elimi¬ 
nation  ol  ■'shelfware”  and  re¬ 
dundant  software. 


they  can  further  reduce  their 
licensing  costs.”  said  Jenny 
Schuchert,  vice  president  of 
program  development  at  In- 
j  ternational  Association  of  IT 
Asset  Managers  Inc.,  a  Hart- 
villc,  Ohio-based  user  associa¬ 
tion  with  over  500  members. 

■’There’s  certainly  been  a 
bigger  uptick  in  software  li¬ 
cense  consolidation  over  the 
past  sL\  months,”  she  said. 

Rising  software  mainte¬ 
nance  fees  are  also  leading 
enterprise  customers  to  more 
closely  examine  the  number  of 
licenses  they  have  in  pbee. 

At  Holiday  Retirement 
Corp.,  a  Salem.  Ore.-based  op¬ 
erator  of  senior  citizen  hous¬ 
ing.  all  new  software  ihat'.s  de¬ 
ployed  must  be  budgeted  with 
maintenance  costs  included, 
said  CIO  Steve  McDowell.  "As 
maintenance  costs  keep  rising, 
we  will  have  to  look  at  other 
options,  such  as  third-party 
maintenance  [and]  removing 
applications.**  he  said. 

Many  IT  managers  have 
also  discovered  opportunities 
to  -slash  software  costs  by  re¬ 


Hnterprises 
licenses  tor 


ducing  the  amount  of  shelf- 
ware.  or  unused  software, 
within  their  organizations. 

Lance  Travis,  an  analyst  at 
Boston-based  AMR  Research 
Inc.,  points  to  one  manufac¬ 
turing  client  that  was  able  to 
save  an  estimated  SIO  million 
to  $20  million  at  e.ich  of  its  six 
business  units  by  reducing 
maintenance  costs  after  elimi¬ 
nating  unused  software. 

Companies  are  also  becom¬ 
ing  more  aggressive  about 
eliminating  .siiftwarc  duplica¬ 
tions  (hat  came  from  mergers 
and  acquisitions.  An  IT  asset 
analyst  for  a  large  financial 
services  company  in  the  Mid¬ 
west  who  requested  anonymi¬ 
ty  said  her  firm  is  in  the  early 
stages  of  reviewing  which 
software  licenses  it  may  be 
able  to  consolidate  follow'ing  a 
recent  corporate  divestiture. 
051307 


SOFTWARE  SWEEP 

Read  atfoul  proven  strategies  lor  identifying 
and  clearing  oul  asOy  shelfware 

OQuicMjnk43SBS 

iMww.coifipiiterRorid.com 


9n,m 


NEWS 


www.comcH^erworld  ci 


rr  Execs  T^e  Different  Paths 
To  Align  "Mth  Business  Units 


Some  tout  strong  IT  guidance;  others 
let  users  take  the  lead  on  priorities 


SPEAKING  before  a 
group  of  senior  IT 
executives  last  week. 
James  Wcx>lwine, 
CIO  at  Majestic  In¬ 
surance  Co.,  outlined  a  gover¬ 
nance  model  that  gives  the  in¬ 
surer's  business  units  the  pow¬ 
er  to  set  his  technology  priori¬ 
ties.  lb  then  asked  for  ques¬ 
tions.  But  there  was  silence. 

Surprised,  Wootwine  chal¬ 
lenged  his  audience:  Tm  tell¬ 
ing  you  that  you  should  cede 
control  of  your  business.  You 
should  be  yelling  at  me  " 

But  there  was  a  reason  why 
no  one  took  issue  with  Wool- 
wine's  comments  at  the  CIO 
2004  Summit,  which  was  held 


here  by  London-based  Marcus 
Evans  Ltd.  IT  managers  inter¬ 
viewed  at  the  conference  said 
they  all  share  the  same  goal: 
aligning  IT  with  the  business 
side.  And,  they  explained,  the 
approach  used  by  San  Francis¬ 
co-based  Majestic  Insurance 
wasn't  criticized  because  of 
the  widespread  recognition 
that  there's  no  single  way  to 
accomplish  that  goal 
For  instance,  Andres  Carval- 
io.  CIO  at  Austin  Energy,  said 
he  thinks  chat  a  key  to  IT/ 
business  alignment  is  a  very 
strong  leadership  style  on  his 
part.  In  dealing  with  the  dif¬ 
ferent  business  units  that  fight 
for  FT  dollars,  Carvallo  said 
his  in-your-face  approach  is  to 
tell  busine.ss  executives  that 


they  will  be  more  successful  if 
they  work  with  him. 

The  Austin-based  utility 
company  has  steering  commit¬ 
tees  that  meet  to  help  set  IT 
strategy,  but  Carvallo  said  be 
also  uses  a  heavily  customized 
software  tool  to  evaluate  proj¬ 
ects  on  a  scale  of  1  to  5.  He  an¬ 
alyzes  a  project’s  cost,  its  com¬ 
pliance  with  internal  IT  stan¬ 
dards  and  hs  potential  impact 
on  ciistomer  satis&c- 
cion  and  business 
processes  —  all 
against  the  backdrop 
of  how  it  aligns  with 
Austin  Energy's  strate¬ 
gic  direction. 

Bruce  Petro,  chief 
technology  oflficer  at 
AG  Interactive,  the  In¬ 
ternet  business  unit  of 
American  Greetings 
Corp.  in  Cleveland, 
said  he  encourages 


experimentation  and  wants 
to  hire  IT  professionals  from 
other  industries  to  stimulate 
new  ways  of  thinking  and 
avoid  tl^  "inbreeding"  of  ideas. 

The  push  for  innovation 
helped  AG  toteractive’s  IT  staff 
develop  ways  to  meet  sharp 
increases  in  Web  traflic,  ac¬ 
cording  to  Petro.  He  said  the 
company’s  IT  budget  was  so 
tight  that  it  forced  workers  to 
try  different  strate¬ 
gies.  including  a  shift 
to  the  open-source 
MySQL  database  and 
the  use  of  asynchro¬ 
nous  processing. 

Michael  Prince, 

CIO  at  Burlington 
Coat  Factory  Ware¬ 
house  Corp..  has 
tried  to  establish  the 
Burlington,  N.J.-based 
retailer  as  a  technolo¬ 
gy  Innovator  Burling¬ 


ton  Coat  was  among  the  Hrst 
large  companies  to  u»tall 
Linux  widely,  and  it’s  now 
deploying  a  Linux-based 
grid  computing  system. 

But  Prince  said  be  thinks 
those  projects  have  been  pos¬ 
sible  only  because  of  the  trust 
the  IT  department  has  built 
with  Buriingtoo  Coat’s  busi¬ 
ness  users.  Prince  has  been  at 
the  company  since  1983.  and 
many  of  his  IT  staff  members 
also  have  long  tenures. 

"Petrie  have  confidence 
that  we  know  what  we're  do¬ 
ing."  Prince  said.  Long-term 
employment  in  IT  "adds 
something  to  a  company's 
ability  to  be  innovative  and 
efficient."  be  added. 

Despite  the  differences  in 
the  approaches  diey  use.  all 
the  IT  managers  said  that  col¬ 
laboration  with  business  users 
is  a  crucial  part  of  the  push  for 
aligrunent.  “For  IT  to  try  to 
force  business  process  change, 
that  means  resi^ance  all  the 
time,"  said  Matthew  Maguire, 
vice  president  of  information 
services  at  Domino's  Pizza 
Inc.  O  51384 


nr  Cost-Cutting  Shifts  to  Software 


Enterprises  reduce 
licenses  for  servers 


•T  THOMAS  HOFFMAN 

After  three  years  of  cutting  IT 
costs  through  server  consoli¬ 
dation  and  selective  outsourc¬ 
ing,  enterprise  IT  shops  are 
now  focu^  on  reducing  soft¬ 
ware  expenses,  according  to 
n  managers  and  analysts  in¬ 
terviewed  last  week. 

Several  foctors  are  con¬ 
tributing  to  this  latest  cost- 
cutting  trend.  For  starters,  as 
organizations  shift  from  using 
groups  of  small  servers  to  few¬ 
er.  more  powerful  servers, 
fewer  database  and  a^^lica- 
tioo  software  licenses  are  re¬ 
quired  for  the  machines. 

In  mkl-2003.  the  city  of  Vir¬ 
ginia  Beach.  Vk.,  repla^  five 
Intel-based  servers  that  ran 
Microsoft  Corp.'s  SQL  Server 
database  system  with  two 
more-powerful  clustered 
servers  from  Hewlett-Packard  I 


Ca.  said  Michael  French,  an 
rr  asset  manager  for  the  dty. 

Virginia  Beach,  which  is  still 
in  the  process  of  upgrading 
from  older  SQL  Server  7  data¬ 
bases  to  SQL  Server  2000  sys¬ 
tems,  paid  more  in  upfront  li¬ 
censing  foes  for  the  five-serv¬ 
er  configuration  after  shifting 
from  an  end-user-based  U- 
censtng  scheme  m  per-proces- 
sor  licensing,  said  French. 

But  even  as  the  municipality 
adds  more  databases  to  sup¬ 
port  fmancial  operations  and 
other  activities,  it  expects  to 
achieve  S300.000  to  S400.000 
in  net  cost  savings  over  the 
next  18  to  24  months  with 
fewer  servers,  he  said 

Ripple  Effset 

Preparations  to  meet  the  regu¬ 
latory  requirements  of  the 
Sarbanes-Oxley  Act  are  also 
havii^  a  ripple  effect  on  soft¬ 
ware  license  consolidations. 

As  some  software  publishers  j 
request  that  customers  vali-  I 


date  compliance  with  licens¬ 
ing  agreements,  some  audits 
are  leading  companies  to  dis¬ 
cover  active  licenses  for  un¬ 
used  software.  Companies  are 
also  Hnding  out-of-date  per¬ 
user  licenses  as  workforces 
are  cut  or  reworked. 

Thterprisc  ctistomers  are 
turning  around  and  looking  at 
this  information  to  see  where 


SOFTWARE  LICENSING 


they  can  further  reduce  their 
licensing  costs."  said  Jenny 
Sebuebert  vice  president  of 
program  development  at  In¬ 
ternational  Association  of  IT 
Asset  Managers  Inc.,  a  Hart- 
vUle.  Ohio-based  user  associa¬ 
tion  with  over  500  members. 

“There’s  certainly  been  a 
bigger  uptick  in  software  li¬ 
cense  consolidation  over  the 
past  six  months.”  she  said 

Rising  software  mainte¬ 
nance  fees  are  also  leading 
enterprise  customers  to  more 
closely  examine  the  number  of 
licenses  they  have  in  place. 

At  Holiday  Retirement 
Coipn  a  Salem.  Ore.'based  op¬ 
erator  of  senior  citizen  hous¬ 
ing.  all  new  software  that's  de¬ 
ployed  must  be  budgeted  with 
maintenance  costs  included, 
said  CIO  Steve  McDowell.  "As 
maintenance  costs  keep  rising, 
we  will  have  to  look  at  other 
options,  such  as  third-party 
maintenance  [and]  removii^ 
applications,"  be  said 

Many  IT  managers  have 
also  discovered  opportunities 
to  slash  software  costs  by  re¬ 


ducing  the  amount  of  shelf- 
ware.  or  imused  software, 
within  their  organizations. 

Lance  TVavis.  an  analj^t  at 
Boston-based  AMR  Research 
InCn  points  to  one  manufac¬ 
turing  client  that  was  able  to 
save  an  estimated  SIO  million 
to  S20  million  at  each  of  its  six 
business  units  by  reducing 
maintenance  costs  after  elimi- 
natiog  unused  software. 

Companies  are  also  becom¬ 
ing  more  aggressive  about 
eliminating  software  duplica¬ 
tions  that  came  foom  mergers 
and  acquisitions.  An  IT  asset 
analyst  for  a  lar^  financial 
services  company  in  the  Mid¬ 
west  who  requested  anonymi¬ 
ty  said  her  firm  is  in  the  early 
stages  of  reviewing  which 
software  licenses  it  may  be 
able  to  consolidate  following  a 
recent  corporate  divestiture. 
051387 
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BT  to  Migrate  Call 
Centers  to  VoIP 

BT  Group  PLC  last  week  said  it 
wM  imgrale  its  U.IC  call  cefiters 
to  a  new  voice*ever-IP  system 
over  two  years.  The  system  will 
allow  9.700  call  center  agents  at 
124  sites  to  work  as  one  team  in 
a  single,  virtual  customef-con* 
tact  center.  BT  will  spend  about 
$5  million  on  new  equipment  , 
from  Nortel  Networks  Ltd.  to  re* 
place  private  branch  exchanges 
and  caD  ccrrter  software. 


Vendors  Join  to 
Promote  Grid 

Last  week.  OdI  kic..  EMC. 
inlel  Corp.  and  Oracle  Corp. 
announced  that  they  are  under¬ 
taking  a  ioim  effort  to  prove  that 
grid  technology  can  work  in  the 
business  world.  The  MegaOrid 
prdect  is  hostad  at  Oracle's 
Global  IT  Data  Center.  The  part¬ 
ners'  first  system  clusters  up  to 
28  Ddl  PowerEdge  servers.  The 
group  will  also  publish  guides  for 
deploving  and  managing  clusters 
running  Red  Hat  Lma. 


(\ins«rtium  brings 
law  cnfoavment  to 


together  eonipanies, 
target  e-niail  seams 


IBM  Device  Wdrks 
For  All  ^C  Arrays 

IBM  last  week  said  Hs  virtualiza- 
tion  device,  SAN  Volume  Con- 
trotter  Version  1.2.1.  can  manage 
EMC  Corp.'s  midrange  arrays,  the 
CtariienCX300.CX500and 
CX700.  With  the  addition  of  sup¬ 
port  lor  those  products.  IBM's 
SAN  Volume  Controller  appliance 
can  now  manage  EMC’s  entire 
line  of  storage  amys. 


IBM  Tests  New 
Chip  Technology  , 

IBM  last  week  said  H  tested  a 
new  technique  for  improving  per¬ 
formance  that  wdi  lead  to  small-  i 
er.  more  powerful  chips  over  the  | 
next  decade.  IBM  said  H  discov-  | 
ered  a  way  to  use  germanium  to 
improve  the  flow  of  electrons.  | 

Transistors  built  with  strained  | 

germanium  can  have  three  times  | 

the  performance  of  conventional  | 

transistors,  the  company  said. 


BY  JAIKUMAR  VIJAVAN 

TMI-  ANNl)tJN(.PMiN1 
last  week  of  a  new 
antiphishinjt  consor¬ 
tium  that  includes 
financi.il  services  firms.  Inter¬ 
net  service  prt»viders,  IT  ven¬ 
dors  and  law  enforcement 
agencies  represents  one  of  the 
most  ct»ncertcd  efforts  yet  to 
curb  the  jjrowing  problem  of 
e-mail  daia-thcft  scanw. 

The  Digital  I^ishNet  group 
includes  companies  such  as 
Microsoft  Corp..  America  On¬ 
line  Inc..  Verisign  Inc.  and 
Earthlink  Inc.,  as  well  as  gov¬ 
ernment  institutions  such  as 
the  FBI,  the  Federal  Trade 
Commission,  the  U.S.  Secret 
.Service  and  the  U.S.  IVtsia!  In- 
s|>ec(ion  Scrs'icc. 

Phishing  attacks  use  e-mail 
messages  that  appear  to  come 
from  reputable  companies  to 
try  to  convince  recipients  to 
go  to  spoofed  Web  sites  and 
,  disclose  their  credit  card  num- 
[  bers  and  other  piTsonal  infor- 
matiun-lhe  onslaught  of  at¬ 
tacks  has  prompted  compa¬ 
nies  such  as  B.irclayN  Bank 
PLC  and  eBay  Irur.  to  adopt 
new  technology  designed  to 
detect  phishing  scams  and 
help  cortsumers  verify  the  au¬ 
thenticity  of  Web  sites  iQuick- 
I.ink 

Better  Information  Flow 

Digital  PhishNet's  goal  is  to 
enable  a  better  flow  of  infor- 
maiiun  about  phishing  attacks 
between  etimpanics  and  law 
cnforcemcni  agencies,  said 
Dan  larkin.  unit  chief  at  the 
FBI’s  Internet  Crime  Com¬ 
plaint  Center.  Because  phish-  j 
ers  can  rapidly  create  .ind  dis¬ 
mantle  phony  Web  sites,  “the 
key  to  slopping  them  is  to 
identify  and  target  them 
quickly."  l.arkin  said.  "Our  in¬ 
dustry  partners  have  a  unique 
perspective  regarding  the.se 
.schemes  and  how  they  look 


early  on  that  wc  in  law  en¬ 
forcement  don’t  always  have.” 

Companies  have  "spoon¬ 
feed"  government  agencies  a 
lot  of  the  information  that's 
needed  to  go  after  phishers. 
.said  Avivah  Litan.  an  analyst  at 
Gartner  Inc. 

"Law  enforcement  is  not 
really  equipped  to  deal  with 
ihe.se  cybcrcriminals."  .she 
said.  “They  don't  have  the 
technical  skills  or  the  staff." 

Between  July  and  October, 
the  number  of  known  phishing 
Web  sites  grew  by  an  average 
of  25%  per  month,  with  1.142  ac¬ 
tive  sites  reported  in  October, 
according  to  the  Anti-Phishing 
Working  Group  ( APWG). 

Litan  said  that  in  the  12- 


month  period  that  ended  last 
April,  fraudulent  activities  a'- 
sulting  from  phishing  attacks 
cost  victims  a  total  of  $1.2  bil¬ 
lion.  with  U.S.  companies 
bearing  most  of  those  costs. 

Digital  PhishNet  isn’t  the 
first  industry  group  created  to 
fight  phishing.  The  APWG  says 
its  membership  includes  more 
than  companies  plus  law 
enforcement  agencies  from  the 
U.S.  and  three  <,>thcr  countries. 
In  addition,  the  New  York- 
based  Financial  Services  Tech¬ 
nology  Consortium  (FSTC)  in 
September  announced  an  an- 
tiphLshing  initiative  involving 
nearly  financial  institutions 
and  I  T  vendors. 

But  a  key  difference  is  Digi¬ 
tal  PhishNet's  emphasis  on  en¬ 
forcement  activities,  said  Dave 
Alampi.  vice  president  of  mar¬ 
keting  at  Digital  River  Inc.,  an 


Phishing  Fighters 


Eden  Prairie.  Minn.-bascd 
company  that  develops  and 
runs  c-commercc  sites.  “The 
rc.'ison  this  alliance  was 
formed  is  not  just  to  rai.se 
awareness  of  the  problem  but 
to  take  a  proactive  stance  in 
tracking  Iphishersl  and  shut¬ 
ting  them  down."  he  said. 

)udy  Lin.  an  executive  vice 
president  at  Mountain  View, 
Calif.-ba.sed  VeriSign.  said 
Digital  PhishNet  will  also  in- 
ve.siigate  ways  of  legally  using 
technology  to  bring  down 
sites  used  to  launch  phishing 
attacks.  C  51390 


Group  Polishes  Guidelines 
On  HIPAA  Security  Rules 


-Seeks  to  ease  the 
implementation  of 
eontmls  on  data 

aV  JAIKUMAR  VIJAVAN 

A  working  group  made  up  of 
members  from  three  organiza¬ 
tions  plans  this  month  to  re¬ 
lease  guidelines  for  complying 
with  the  dai.i  security  require¬ 
ments  of  the  Me.nith  Insurance 
Portability  and  Accountability 
ActIHIPAA). 

The  clock  is  licking  for 
health  care  companies  to  com¬ 
ply  with  HlPAA's  security  pnj- 
visions,  which  will  take  effect 
in  April.  The  Healthcare  Secu¬ 
rity  Workgroup  bc-gan  devel¬ 
oping  the  aimpliancc  guide¬ 
lines  in  November  2003  and 
was  originally  supposed  to  re¬ 
lease  them  around  the  middle 
t>f  this  year.  But  (he  complexi¬ 
ty  of  pulling  the  mvded  infor¬ 
mation  together  delayed  the 
project,  said  Devin  lopp.  chief 


operating  ofllccr  at  URAC. 
a  nonprofit  accreditation 
agency  for  the  health  care  in¬ 
dustry.  “It’s  taken  a  lot  of  lift¬ 
ing."  Jopp  said.  “It  was  ambi¬ 
tious,  but  the  group  has  finally 
been  able  to  put  it  together." 

The  Healthcare  Security 
Workgroup  includes  represen¬ 
tatives  from  Washington- 
based  URAC.  the  Workgrvnip 
for  Electronic  Data  Inter¬ 
change  (WEDI)  in  Rcsion.  Va.. 
and  the  National  Institute  of 
Standards  and  Technology, 
which  is  part  of  the  U.S.  l’)c- 
partmeni  of  Commerce. 

Data  Protection 

HlPAA's  security  rules,  which 
were  published  in  The  federal 
Register  in  April  2003,  specify 
administrative,  technical  and 
physical  mca.sures  that  compa- 
nic-s  have  to  implement  to  pix>- 
lect  confidential  patient  data. 

|opp  said  the  working 
group’s  ctimpliancc  guidelines 


arc  based  on  a  variety  of 
.sources,  including  best-prac¬ 
tices  dvK'umcnis.  case  studies 
and  standards  efforts  by  orga¬ 
nizations  such  as  the  Health¬ 
care  Information  and  Manage¬ 
ment  Systems  Swriety. 

The  guidelines  are  meant  to 
give  IT  and  business  managers 
“a  better  feel  for  what  it  will 
take  to  comply"  with  the 
HIPAA  rules,  said  Marti  Mc- 
Claughlin.  a  Dubuque,  towa- 
based  regulatory  policy  ana¬ 
lyst  at  McKesson  Corp.  Mc- 
Claughiin  is  an  adviser  to  the 
WEDI  and  co-chairman  of  the 
security  working  group. 

Such  guidance  could  be  po¬ 
tentially  useful,  especially  for 
smaller  health  care  organiza¬ 
tions  that  might  be  struggling 
to  understand  HlPAA's  re¬ 
quirements.  said  a  former 
member  of  the  working  group 
who  requested  anonymity. 

"The  problem  with  the  se¬ 
curity  rule  is  that  it  isn’t  easy- 
to  implement."  he  said,  adding 
that  many  companies  “arc 
Io»>king  for  someone  to  tell 
them.  'Here’s  how  to  do  it.' " 
051386 
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Phishing  Fighters 


BT  to  Migrate  CaH 
Centers  to  VoIP 

8T  efwp  PIC  iMl  WMk  sM  H 
Mipilt  it!  UX  cal  eantars 
la  a  naw  vaiea-cwaHP  tyitoin 
over  t«R>  yaan.  The  qritaai  wM 
alow  9.700  cal  cantar  aganb  at 
124  ailBt  to  work  ai  ona  team  in 
a  aln^.  ottaai  cuatoinaf-cuir- 
taet  eanlar.  BT  ««  i^and  about 
$$  fflOon  an  oow  oqu^mant 
fraa  NarM  Natamrin  IM.  to  re- 
ptooa  prtoato  branch  mchangas 
and  cal  cantor  aaftwara. 

BM  Device  Woite 
ForAIEMCAn^ 

BM  toil  «aak  aaU  Hs  virtualza- 
tian  dovtoa,  SAN  Muma  Can* 
Iralar  ¥waton  12.1.  can  awnaga 
BK  Car|t.’c  niidrania  arraya.  the 
CMooCX900.CX500«d 
CK700.  WWi  the  addtoon  of  sup¬ 
port  far  llnaa  praducto,  Mrs 
SAN  VUuma  Controlar  wpRanca 
can  newiaanaga  BIC'b  anliro 
hno  af  storaga  arrayt. 

Vendors  Join  to 
Promote  Grid 

Lul  umIl.  D.I  hiL.  EMC. 

Intol  Carp,  and  Oraefa  Carp, 
ameuncadthattfwyaroundar- 
taUng  a  jabd  afbri  to  provo  that 
grid  tachnotogy  can  in  fha 
BUBHoao  arariB.  ioa  aNpaanQ 
protod  k  heatod  at  Oraeto's 
OfaM  fT  Data  Cantor.  The  part- 
aara*  fird  lyitowi  cliaton  op  to 
28  Dal  IfawarEdga  aarvara.  Tha 
groito  «■  afao  pubMi  guidas  for 
dapfaytag  and  managing  chatora 
naming  Rad  Hal  UauE. 

IBM  Tests  New 
Chip  Technology 

BMIaolwaaliaaMittostoda 
oawtocfaifaMafariwpfOvingpar- 
farmancattmladllaadtoamal- 
ar.  man  powarfid  chipa  over  the 
naKtdacadfcBllaalditdkcov- 
arod  a  may  to  uaa  gwoianium  to 
imprava  ilia  Sam  of  afactrona. 
Tranaiiton  buB  mith  atrainad 


dm  parfarwanca  el  canaandonal 


oves  to  a  New  Leve 


Consortium  brings  together  companies, 
law  enforcement  to  taiiget  e-mail  scams 


The  announcement 
last  week  of  a  new 
antiphtthing  consor¬ 
tium  that  inciudes 
financial  services  finns,  Inter¬ 
net  service  pmviders,  IT  ven¬ 
dors  and  law  enforcement 
agencies  represents  one  of  the 
most  concerted  efforts  yet  to 
curb  the  growing  problem  of 
e-mail  data-theft  scams. 

The  Digital  PhishNei  group 
includes  companies  such  as 
Microsoft  Corp.,  America  On¬ 
line  Inc,  VeriSign  Inc  and 
Earthlink  Inc.,  as  well  as  gov¬ 
ernment  institutions  such  as 
the  FBI.  the  Federal  Ttade 
Commission,  the  Uii.  Secret 
Service  and  the  UX  Postal  In¬ 
spection  Service. 

Phishing  attacks  use  e-mail 
messages  that  appear  to  come 
from  reputable  companies  to 
try  to  convince  recipients  to 
go  to  spoofed  Web  sites  and 
disclose  tbeir  credit  card  num¬ 
bers  and  other  personal  infor¬ 
mation.  The  onslaught  of  at¬ 
tacks  has  prompted  compa¬ 
nies  such  as  Barclays  Bank 
PLC  and  eBay  Inc.  to  adopt 
new  technology  designed  to 
detect  phishing  and 
help  consumers  verify  the  au- 
thcnticiry  of  Web  sites  tQuick- 
link  49944]. 

Better  kifonnation  Flow 

Digital  PhishNet’s  goal  is  to 
I  enable  a  better  flow  of  infor¬ 
mation  about  phishing  attacks 
between  companies  and  law 
enforcement  agencies,  said 
Dan  Larkin,  unit  chief  at  the 
FBI's  Internet  Crime  Com¬ 
plaint  Center.  Because  phish- 
ers  can  rapidly  create  and  dis¬ 
mantle  phony  Web  sites,  *the 
key  to  stopping  them  is  to 
identily  and  target  them 
quickly,'*  Laridn  said.  ‘X>ur  in¬ 
dustry  partners  have  a  unique 
perspective  regarding  these 
schemes  and  how  they  look 


early  on  that  we  in  law  en¬ 
forcement  don’t  always  have.” 

Companies  have  to  “sprion- 
feed"  government  ^ncics  a 
lot  of  the  information  that's 
needed  to  go  after  phishers. 


month  period  that  ended  last 
April,  fraudulent  activUies  re¬ 
sulting  from  phishing  attacks 
cost  victims  a  total  orSL2  bil¬ 
lion,  with  U.S.  companies 
bearing  most  of  those  costs. 

Digital  PhishNet  isn't  the  I 
first  industry  group  created  to 
fight  phishing,  The  APWG  says 
its  membership  includes  more 


said  Avivah  Litan,  an  analyst  at  than  650  companies  plus  law 


Gartner  Inc. 

”Law  enforcement  is  not 
really  equipped  to  deal  with 
these  cybercriminals,”  she 
said.  They  don't  have  the 
technical  skills  or  the  staff.'’ 

Between  July  and  October. 


enforcement  agencies  from  the 
UX  and  three  other  countries. 
In  addition,  the  New  York- 
based  Financial  Services  Tech¬ 
nology  Consortium  (FSTC)  in 
September  announced  an  an- 
tiphtshing  inidaiive  involving 


the  number  of  known  phishing  nearly  30  financial  institutions 
Web  sites  grew  by  an  average  and  IT  vendors. 


of  25%  per  mooih.  with  1142  ac¬ 
tive  sites  reported  in  October, 


But  a  key  difference  is  Digi¬ 
tal  PhishNet's  emphasis  on  cn- 


according  to  the  Anti-Phishing  forcement  activities,  said  Dave 


Working  Group  (APWG). 
Litan  said  that  in  the  12- 


Alampi,  Wee  president  of  mar- 
I  keting  at  Digital  River  Inc.,  an 


Group  Polishes  Guidelines 
On  HIPAA  Security  Rules 

Seeks  to  ease  the  opwaing  omccr »  ura( 
implementation  of  ^  “S” 

controls  on  data  dustry.  ”It’s  taken  a  lot  of 


A  working  group  made  up  of 
members  from  three  organiza¬ 
tions  plans  this  month  to  re¬ 


operating  officer  at  URAC. 
a  nonprofli  accreditation 
agency  for  the  health  care  in¬ 
dustry.  ”It’s  taken  a  lot  of  lift¬ 
ing.”  Jopp  said.  ”lt  was  ambi¬ 
tious.  but  the  group  has  finally 
been  able  to  put  it  together.” 

The  Healthcare  Security 
Workgroup  inciudes  represen- 


lease  guidelines  for  complying  tatives  from  Washington- 
with  the  data  security  require-  based  URAC.  the  Workgroup 


mems  of  the  Health  Insurance 
Portability  and  Accountability 
Act  (HIPAA). 

The  clock  is  ticking  for 
health  care  companies  to  com¬ 
ply  with  HIPAA’s  security  pro¬ 
visions.  which  will  take  effect 
in  April.  The  Healthcare  Secu¬ 
rity  Woriegroup  began  devel¬ 
oping  the  compliance  guide¬ 
lines  in  November  2003  and 
was  originally  supposed  to  re¬ 
lease  them  around  the  middle 
of  this  year.  But  the  complexi¬ 
ty  of  pulling  the  needed  infor- 
mation  together  delayed  the  i 
project,  said  Devin  Jopp,  chief  I 


for  Electronic  Data  Inter¬ 
change  (WEDI)  in  Reslon,  Va., 
and  the  National  Institute  of 
Standards  and  Technology, 
which  is  part  of  the  UX 
partment  of  Commerce. 

Data  Protection 

HIPAA’s  security  rules,  which 
were  published  in  TTie  federal 
Register  in  April  2003,  specify 
administrative,  tcchnica]  and 
physical  measures  that  compa¬ 
nies  have  to  implement  to  pro¬ 
tect  confidential  patient  data. 

Jopp  said  the  working 
group's  compliance  guidelines 


Eden  Prairie.  Mimu-based 
company  chat  develops  and 
runs  e-commerce  sites.  The 
reason  this  alliance  was 
formed  is  not  just  to  raise 
awareness  of  the  problem  but 
to  take  a  proactive  stance  in 
tracking  [phishers]  and  shut- 
.  ting  them  down,”  he  said. 

Judy  Lin,  an  executive  Wee 
president  at  Mountain  View, 
Calff-based  VeriSign,  said 
Digital  niishNet  will  also  in¬ 
vestigate  ways  of  legally  using 
technology  to  bring  down 
sites  used  to  launch  phishing 
attacks.  O  51390 


are  based  on  a  variety  of 
sources,  including  best-prac¬ 
tices  documents,  case  studies 
and  standards  efforts  by  orga¬ 
nizations  such  as  the  Health¬ 
care  Information  and  Manage¬ 
ment  Systems  Society. 

The  guidelines  are  meant  to 
give  IT  and  business  managers 
”a  better  feel  for  what  it  will 
take  to  comply”  with  the 
HIPAA  rules,  said  Marie  Mc- 
Claughlin.  a  Dubuque.  Iowa- 
based  regulatory  policy  ana¬ 
lyst  at  McKesson  Corp.  Me- 
Claughlin  is  an  adviser  to  the 
WEDI  and  co-chairman  of  the 
security  wurkii^  group. 

Such  guidance  could  be  po¬ 
tentially  useful,  especially  for 
smaller  health  care  organiza¬ 
tions  that  might  be  struggling 
to  understand  HIPAA's  re¬ 
quirements.  said  a  former 
member  of  the  working  group 
who  requested  anonymity. 

The  problem  with  the  se¬ 
curity  rule  is  that  It  isn't  easy 
to  implement,”  be  said,  adding 
that  many  companies  “are 
looking  for  someone  to  tell 
them,  ’Here’s  how  to  do  if  " 
OS1386 


MEANS  MORE  POWER 


ProCurve  Networking  by  HP  offers  a  range  of  affordable 
gigabit-enabled  switches  that  is  second  to  none.  That  means 
you  can  get  better  performance  from  your  network  along  with 
better  performance  from  your  networking  dollars.  Downloads 
that  used  to  take  minutes  can  now  be  done  in  seconds.  And  you 
can  do  it  for  cents.  Not  dollars.  That's  high-availability  gigabit 
performance  at  the  edge — not  just  the  core  of  your  network. 
What's  more,  ProCurve  gigabit-enabled  switches  are 
backed  by  a  lifetime  warranty' — perhaps  the  best  in  the 
industry.  More  affordability.  More  choice.  More  productivity. 
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‘Zinc  Whiskers’  Vex 
Aussie  Data  Centers 

8V0NEV 

AGESClfc^  — 

I  the  Australian  Taxation  Office 
•  and  the  Australian  War  Mem¬ 
orial  museum  —  have  recently  warned 
of  a  bizarre  metallic  syndrome  called 
"zinc  whiskers"  that  knocked  v>ut  their 
data  centers'  power. 

Zinc  whiskers  are  filamont-s  of  zinc, 
only  microns  in  diameter,  that  grow  on 
the  underside  of  aging,  galvanized 
floor  tiles.  When  sucked  into  data  cen¬ 
ter  celling  systems,  the  whiskers  can 
cause  short  circuits  in  computer  power 
supplies  and  sensitive  circuitry. 

War  Memorial  IT  manager  Daryl 
Wimerbtmom  .said  his  data  center  ex¬ 
perienced  repeated  power  outages  that 
were  eventually  traced  to 
zinc  whiskers.  “You  can 
shine  a  torch  on  the  un¬ 
derside  of  an  old  floor  tHc 
and  sec  the  whiskers  vi¬ 
brating."  he  said.  The  War 
Memorial's  problem  was 
restilved  with  the  installa- 
lioQ  of  zinc-free  tiles. 

rr  consultant  Garry 
KarkJins  also  rids  data 


I  centers  of  the  scourge.  "What  you  have 
I  are  pure  zinc  stalactites  that  sit  undis¬ 
turbed  under  floor  tiles,  and  once  they 
...  circulate,  you  have  a  game  ofRuss- 
(  ian  roulette."  he  said. 

;  ■  MICHAEL  CRAWFORD 
j  COMPUTERWORLD  TODAY  (AUSTRALIA) 

IBM  Wins  SIB  Deal 
For  Lloyds  Network 

'  LONDON 

IHM  last  week  said  it  has  won  a  sev¬ 
en-year.  S972  million  contract  to 
move  London-based  bank  Lloyds 
TSB  Group  PLC  from  its  existing  voice 
network  to  a  fiber-optic  voice^data  set¬ 
up.  The  deal  will  put  2,000  Lloyds 
I  branches  and  4.200  automated  teller 
i  machines  on  a  dedicated  fiber  network 
I  using  Digital  Subscriber  Line  and  Mul¬ 
tiprotocol  Label  Switching 
technologies.  IBM  said 
Lloyds'  branches  will  gain 
eight  times  their  cutrent 
network  bandwidth  at  a 
quarter  of  the  price. 

It's  one  of  the  largest 
voice-over-IP  projects 
in  Europe,  with  almost 
70.000  VoIP  phones  due 
to  he  installed.  IBM  said 


M.oaAt  Mcr 


in  Reitwood  City. 
Calif .  plans  In  expand 
into  Eurnpc  because  the 
soam  filler  inq  inarktl  m 
theU  S  (ssatuialcd 


j  the  initiative  will  take  advantage  of  the 
I  wealth  of  unused  fiber  in  the  U.K.  The 
switch  will  occur  over  20  months  and 
is  partly  designed  to  demonstrate  how 
latyje  banks  and  retailers  can  benefit 
from  moving  to  converged  fiber-optic 
networks,  said  an  IBM  spokesman. 

■  SCARLET  PRUITT.  IDG  NEWS  SERVICE 

Siemens  Sets  Wireless 
Data  Speed  Record 

OUSSELOORF.  OERWANV 

«  it.MFNS  .At;  claimed  last  week  that 
it  has  set  the  world  speed  record 
for  wireless  data  tran.sfcr.  Sic- 
mvn.s  said  its  Munich  research  lab 
achieved  a  wirele.ss  transmission  rate 
of  IGbit./'sec.  by  combining  an  “intelli¬ 
gent  antenna  system"  with  Orthogonal 
Frequency  Division  Multiplexing 
(OFDM)  technology. 

The  combination  of  multiple  anten¬ 
nas  and  OFDM  makes  very  efficient 
use  of  the  radio  spectrum  while  mini¬ 
mizing  interference.  Siemens  used  a 
system  of  three  transmitting  and  four 
receiving  antennas  to  simuluneously 
send  different  Hows  of  data  over  the 
same  radio  channel  and  frequency 
band.  The  company  predicted  that  the 
fourth-generation  wireless  technology' 
will  be  needed  for  high-bandwidth  ap¬ 
plications  beginning  in  2015.  C  51334 

■  JOHN  BLAU.  IDG  NEWS  SERVICE 


Compiled  by  Mitch  Betts. 


Briefly  Noted 

J  Pic  announced  this 
month  that  R  will  take  control  of  Al- 
bacom  SpA.  ofw  of  Italy’s  first  alter¬ 
native  telecommunications  opora- 
tors,  by  buying  out  its  three  part¬ 
ners  for  about  S153  mliiion.  6T  will 
acquire  the  74%  of  Milan-based  Al- 
bacom  that  M  doesn't  already  own 
so  it  can  offer  expanded  European 
coverage  to  corporate  customers. 

■  LAURA  ROHOE. 

106  NEWS  SERVICE 


•3M  on  Dec.  3  announced  e  four- 
year.  S34.3  mMlon  deal  to  overhaul 
systems  at  14  hospitals,  107  dkilcs 
and  300  local  dodors'  offices  In 
Spain's  Extremadura  region. 

■  SCARLET  PRUITT. 

106  NEWS  SERVICE 


.Ur  it'i.-TT  ifiSubIcBay 
In  the  Philippines  said  it  has  rolled 
out  a  $107,000  voice-over-IP  sys¬ 
tem  from  Cisco  Systmns  Inc.  The 
new  technology  is  expected  to 
lower  the  resort's  interoffice  kmg- 
distance  costs  by  as  much  as  80%. 
said  IT  manapar  JuMus  Buen. 

■  LAWRENCE  CASIRAVA. 
COMPUTERWORLD  PHILIPPINES 


Continued  from  page  I 

Spreadsheets 

unveiJ  a  new  version  of  its 
e.Spreadsheet  reporting  soft-  | 
ware  that  can  provide  audit- 
able  and  repeatable  processes  ; 
to  spreadsheets.  .And  last 
week,  Oracle  Corp.  rolled  out 
a  new  stand-alone  business  in¬ 
telligence  product  featuring 
an  Excel  plug-in  to  ensure  that  I 
data  U  obtained  directly  from 
corporate  databases.  i 

Actuate  added  a  “cell  lock¬ 
ing"  feature  to  allow  report  j 
designers  to  password-protect  | 
specific  cells  in  a  spread.sheoL 
Data  can  be  distributed  to 
users  fur  controlled  analysis  | 
without  compromising  opera¬ 
tional  data  and  business  logic.  | 
said  Mike  Thiima.  ^^ce  presi¬ 
dent  of  marketing  at  South  San  i 
franeisc«>-based  Actuate. 

“roliltcally.  it’s  Jcn  jsiating 
to  take  away  the  spreadsheets 


from  the  end  user,"  Tlioma 
said.  "But  on  the  other  hand, 
you  don't  want  to  go  to  jaiL" 

ChcckFrce  Corp.,  a  Nor- 
cross.  Ga.-b.ised  electronic  bill 
payment  and  banking  services 
Lompany,  began  using  the 
e.Spreadsheet  too!  this  year. 

‘The  finance  department 
was  trying  to  get  data  ready 
to  publish  [for  Wall  Street), 
manually  querying  sources 
and  pulling  data  together  in 
spreadsheets."  said  Kevin 
•McDearis.  CheckFree's  vice 
president  of  data  and  delivery. 
'They  were  quite  nervous 
about  that." 

But  e.Spreadshce(  applied 
consistent  business  rultrs  to 
the  data  to  avoid  compliance 
problems,  he  sold. 

Odom’s  Tennessee  Pride 
Sausage  Inc.  in  M.idijnm.Tcnn.. 
will  use  Aciuate’s  cell-locking 
capabilities  to  provide  sales 
and  marketing  employees  with 
acciss  III  sales  data  that  can  be 


shared  with  customers  and 
brokers,  said  Michael  Hadcr. 
Odom's  IT  manager.  “Re¬ 
entering  data  into  E-xcel  means 
I  they  could  get  the  wrong  dat.i 
for  the  witmg  product  in  the 
wrong  spot."  he  said. 

Avoiding  Discrepancies 

Users  at  other  companies  have 
further  distanced  themselves 
from  spreadsheets  to  avoid 
potential  data  discrepancies. 

Textron  Inc.,  owner  of  Cess¬ 
na  Aircraft  Co.  and  Bell  Heli¬ 
copter,  uses  Hyperion  Solu- 
I  tions  Corp.’s  Financial  Man¬ 
agement  software  for  collec¬ 
tion.  reponing  and  analysis  of 
ii.s  global  financial  data.  The 
system  generates  more  than 
1.000  reports  that  give  users 
needed  data  without  the  use  of 
spreadsheets,  said  Larry  Cos- 
tcllu,  director  of  financial  in¬ 
formation  systems  at  Provi¬ 
dence,  R.I.-ha.si-d  Textron. 
“T'hey  don't  have  j  chance  of 


calling  the  wrong  cell."  he  said. 

At  The  Tile  Shop  LLC.  a 
Plymouth.  Minn.-based  tile  re¬ 
tailer.  the  widespread  use  of 
spreadsheets  meant  that  only 
the  controller  had  a  "magical 
spreadsheet"  with  the  correct 
cash  and  balance-sheet  data, 
said  Gerald  Baltrusch.  the 
company's  IT  director. 

"Excel  is  the  cocaine  of  fi¬ 
nance."  he  said.  "Once  you 
start  usittg  it  to  calculate  your 
final  numbers,  you  can’t  stop.” 
To  alleviate  the  problem,  the 
company’s  new  chief  financial 
officer  forced  the  finance  de¬ 
partment  to  generate  data  di¬ 
rectly  from  its  J.D.  Edwards  & 
Co.  applications. 

"It  was  painful,  but  he  stuck 
to  his  guns  and  broke  us  free 
of  the  Excel  drug,"  Baltrusch 
said.  “Wc  began  to  have  one 
version  of  the  truth." 

The  problem  of  reining  in 
spreadsheets  is  so  massiv  e 
that  many  IT  managers  have 


given  up  hope,  said  Wayne 
Eckerson.  director  of  research 
at  The  Data  Warehousing  In¬ 
stitute  in  Seattle.  “Spread¬ 
sheets  are  a  huge  temptation 
for  users  who  feel  frustrated 
that  IT  can’t  give  them  the 
data  they  want."  he  said. 

Ideally,  only  IT  should  col¬ 
lect.  integrate,  distribute  and 
manage  the  data  in  spread¬ 
sheets.  with  users  being  al¬ 
lowed  to  view  the  data  and  up¬ 
date  it  with  proper  authoriza¬ 
tion  from  IT.  Eckerson  said. 

“Solving  the  problem  re¬ 
quires  the  business  and  IT  to 
become  more  aligned  and 
each  to  better  understand  and 
respect  what  the  other  side 
does  and  its  requirements."  he 
added.  O  51389 
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‘ZincWhislurs’thx 
Aussie  Data  Centers 

tVOMCV 

TWO  GOVERNMEKT  AGENCIES  ^ 
the  Australian  Taxation  Office 
and  the  Australian  War  Mem* 
orial  museum  —  have  recently  warned 
of  a  bizarre  metallic  syndrome  called 
“zinc  whiskers'  that  knocked  out  their 
data  centers’  power. 

Zinc  whiskers  are  filaments  of  zinc, 
only  microns  in  diameter,  that  grow  on 
the  underside  of  aging,  gahranized 
Boor  tiles.  When  sucked  into  data  cen¬ 
ter  cooling  systems,  the  whiskers  can 
cause  short  circuits  in  computer  power 
supplies  and  sensitive  circuitry. 

War  Memorial  IT  manager  Daryl 
Winterbottom  said  his  data  center  ex¬ 
perienced  repeated  power  outages  that 
were  eventu^y  traced  to 
zinc  whiskers.  Tou  can 
shine  a  torch  on  the  un¬ 
derside  of  an  old  Boor  tile 
and  see  the  whiskers  vi¬ 
brating,"  be  said.  The  War 
Memorial's  problem  was 
resolved  wii^  the  iostalla- 
tiem  of  zinc-ffree  tiles. 

IT  consultant  Garry 
Karklins  also  rids  data 


centers  of  the  scourge.  'What  you  have 
are  pure  zinc  stalactites  that  sit  undis- 
turt^  under  Boor  tiles,  and  once  they 
. . .  circulate,  you  have  a  game  of  Russ¬ 
ian  roulette,"  be  said. 

■  MICHAEL  CRAWFORD. 

COMPUTERWORLO  TODAY  (AUSTRALIA) 


the  initiative  will  take  advantage  of  the 
wealth  of  unused  fiber  in  the  U£.  The 
switch  wfll  occur  over  20  months  and 
is  partly  designed  to  demonstrate  how 
lai^  banks  and  retailers  can  benefit 
Bom  moving  to  converged  Bber-optic 
networks,  said  an  IBM  spokesman. 

■  SCARLET  PRUin.  106  NEWS  SERVICE 


IBM  Wins  »B  Deal 
For  Uoi^  Network 

LONDON 

IBM  last  week  said  it  has  won  a  sev¬ 
en-year.  S972  million  contract  to 
move  London-based  bank  Uoyds 
T5B  Group  PLC  Bom  Its  existing  voice 
network  to  a  fiber-optic  voice/data  set¬ 
up.  The  deal  will  put  2.000  Uoyds 
branches  and  4.200  automated  teller 
machines  on  a  dedicated  fiber  network 
using  Digital  Subscriber  Ling  and  Mul¬ 
tiprotocol  Label  Switching 
technologies.  IBM  said 
Uoyds’  branches  will  gain 
eight  tiroes  their  current 
netwoik  bandwidth  at  a 
quarter  of  the  price. 

It's  one  of  the  largest 
voice-over-IP  projects 
in  Europe,  with  almost 
70.000  VoIP  phones  due 
to  be  installed.  IBM  said 


SieiiMiis  Sets  Wireless 
Data  Speed  Record 

OOSSetOONP.  ORNMANV 

Siemens  ag  claimed  last  week  that 
it  has  set  the  world  speed  record 
for  wireless  data  transfer.  Sie¬ 
mens  said  its  Munich  research  lab 
achieved  a  wireless  transmission  rate 
of  IGbit/sec.  by  combining  an  'intelli¬ 
gent  antenna  system"  with  Orthogonal 
Frequency  Division  Multiplexing 
(OroM)  technology. 

The  combination  of  multiple  anten¬ 
nas  and  OFDM  makes  very  efficient 
use  of  the  radio  spectrum  while  mini¬ 
mizing  interference.  Siemens  used  a 
system  of  three  transmittiog  and  four 
receiving  antennas  to  simultaneously 
send  different  flows  of  data  over  the 
same  radio  channel  and  frequency 
band.  The  company  predict^  that  the 
fourth-geoeratioD  wireless  technology 
will  be  needed  for  high-bandwidth  ap¬ 
plications  beginning  in  2015.  O  S1334 
■  JOHN  BUU.  106  NEWS  SERVICE 
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Spreadsitoets 

unveil  a  new  version  of  its 
e.Spreadsbeet  reporting  soft¬ 
ware  that  can  provide  audit- 
able  and  repeatable  processes 
to  spreadsheets.  And  last 
we^  Oracle  Corp.  loDed  out 
a  new  stand-alone  business  in¬ 
telligence  produa  featuring 
an  Excel  phig-in  to  ensure  that 
data  is  obtained  directly  from 
corporate  databases. 

Actuate  added  a  'cell  lock¬ 
ing"  feature  to  allow  report 
designers  to  password-protect 
specific  cells  in  a  spreadsheet. 
Data  can  be  distributed  to 
users  for  cootiolled  analysis 
without  compromisiog  opera¬ 
tional  data  business  logic, 
said  Mike  Thoma,  vice  presi¬ 
dent  of  marketing  at  South  San 
Francisco-based  Actuate. 

'PoUtkally.  it’s  devastating 
to  take  away  the  spreadsheets 


from  the  end  user."  Thoma 
said.  'But  on  the  other  hand, 
you  don't  want  to  go  to  jalL" 

CheckFree  Corp.,  a  Nor- 
cross.  Ga.-based  electronic  bill 
payment  and  banking  services 
company,  began  using  the 
e.Spreadsbeet  tool  this  year. 

"The  finance  department 
was  trying  to  get  data  ready 
to  pubiisb  [B>r  Wall  Street], 
manually  querying  sources 
and  pulling  dau  together  in 
spreadsheets."  said  Kevin 
McDearis.  CbedcFree's  vice 
president  of  data  and  delivery. 
“They  were  quite  nervous 
about  that" 

But  e.Spreadsheet  applied 
consistent  business  rules  to 
the  data  to  avoid  compliance 
problems,  be  said. 

Odom's  Tennessee  Pride 
Sausa^  Inc.  in  Madison.  Tena. 
will  use  Actuate’s  cell-locking 
capabilities  to  provide  sales 
and  marketing  employees  with 
access  to  sales  data  tlut  can  be 


shared  with  customers  and 
brokers,  said  Michael  Hader. 
Odom's  IT  manager.  'Re¬ 
entering  data  into  Excel  means 
they  could  get  the  wrong  data 
for  the  wrong  product  in  the 
wrong  spot"  he  said. 

Avoiding  Discnpancies 

Users  at  ocher  companies  have 
further  distanced  themselves 
Bom  spreadsheets  to  avoid 
potential  dau  discrepancies. 

Textron  Inc.,  owner  of  Cess¬ 
na  AircraB  Ca  and  Bell  Heli¬ 
copter,  uses  Hyperion  Solu¬ 
tions  Corp.'s  Financial  Man¬ 
agement  software  for  collec¬ 
tion,  reporting  and  analysis  of 
its  global  financial  data.  The 
system  generates  more  than 
1,000  reports  that  give  users 
needed  data  without  the  use  of 
spreadsheets,  said  Larry  Cos¬ 
tello,  director  of  financial  in¬ 
formation  systems  at  Provi¬ 
dence.  RX-based  Textron. 
They  don't  have  a  chance  of 


calling  the  wrong  ceU."  he  said. 

At  *rbe  TTle  Shop  LLC,  a 
Plymouth.  Minn.-based  tile  re¬ 
tailer.  the  widespread  use  of 
spreadsheets  meant  that  only 
the  controller  had  a  'magical 
spreadsheet"  with  the  correct 
cash  and  balance-sheet  data, 
said  Gerald  Baltrusch.  the 
company's  IT  director 

"Excel  is  the  cocaine  of  B- 
nance,”  be  said.  "Once  you 
suit  using  it  to  calculate  your 
final  numbers,  you  can't  stop." 
To  alleviate  tbe  problem,  the 
company’s  new  chief  financial 
ofifleer  forced  tbe  finance  de¬ 
partment  to  generate  dau  di¬ 
rectly  Bom  its  J.D.  Edwards  & 
Ca  applications. 

'It  was  painful,  but  he  stuck 
to  hb  guns  and  broke  us  Bee 
of  the  Excel  drug.'  Baltrusch 
said.  'We  began  to  have  one 
version  of  the  miih." 

The  problem  of  reining  in 
spreadsheets  is  so  massive 
t^t  many  IT  managers  have 


given  up  hope,  said  Wayne 
Eckerson.  director  of  research 
at  *rhe  Dau  Warehousing  In¬ 
stitute  in  Seattle.  "Spread¬ 
sheets  are  a  huge  tempution 
for  users  who  feel  Bunted 
that  IT  can't  give  them  tbe 
dau  they  want."  be  said. 

Ideally,  only  IT  should  col¬ 
lect  integrate,  distribute  and 
manage  tbe  dau  in  spread¬ 
sheets,  with  users  being  al- 
to>ved  to  view  tbe  dau  and  up¬ 
date  it  with  proper  authoriza¬ 
tion  Bom  IT.  E^rson  said. 

'Sotvii^  the  problem  re¬ 
quires  the  business  and  IT  to 
become  more  aligned  and 
each  to  better  understand  and 
respect  what  the  ocher  side 
does  and  iu  requirements,"  be 
added.  C  6t3B8 
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MLB.com  knows  the  power  of  SAS*  software... 


How  does  l\/ILB.com  give  fans 
the  ultimate  baseball  experience? 


Allan  H.  "Bud'  Selig. 
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Millions  of  fans.  Thirty  teams.  One  passion.  And  24/7  access  to  it  all  through  MLB.com.  At  the  official  site 
of  Major  League  Baseball,  fans  can  experience  baseball  in  a  whole  new  way  -  ftom  live  ballgames  to  stats 
in  real  time,  from  history  to  fantasy,  across  the  league  or  by  connecting  to  individual  club  sites.  MLB.com  is 
the  richest,  deepest  source  of  original  baseball  news  and  highlights  on  the  Internet.  SAS  is  proud  to  provide 
the  state^)f-the-art  data  managemenL  predictive  analytics  and  marketing  automation  software  that's  helping 
Major  League  Baseball  enrich  the  interactive  experience  for  the  hundreds  of  millions  of  visitors  who  make 
MLB.com  such  a  big  hit.  To  find  out  more  about  SAS,  visit  our  Web  site  or  call  toll  ftee  I  866  887  1363. 
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Cisco 


Cisco's  Woridwide  Analyst 
Conference  here  said  that  in 
recent  months,  the  oetwortdng 
market  leader  has  lowered 
some  of  its  prices  by  a  small 
amount  or  improved  the  per¬ 
formance  of  products  without 
increasing  their  cost. 

And  two  longtime  cus¬ 
tomers  said  in  phone  inter¬ 
views  that  they  think  Cisco 
has  made  steady  strides  on 
improving  the  pricc/t»erfor- 
mance  characteristics  of  some 
products,  although  they  added 
that  there’s  still  plenty  of 
room  for  improvement  in  pric¬ 
ing  on  devices  such  as  memo¬ 
ry  cards  and  peripherals  for 
voice-over-IP  phones. 

Tm  of  the  opinion  that 
generally  speaking,  Cisco’s 
prices  are  improving  and  I  get 
more  for  my  money,"  said 
Matt  Valenzisi,  network  man¬ 


ager  at  North  Carolina  State 
University  in  Raleigh.  He  said 
that’s  especially  true  for  stack- 
able  switches  such  as  Cisco’s 
Catalyst  37S0  product  line, 
probably  because  Cisco  has  to 
compete  against  many  other 
vendors  in  that  segment  of  the 
market  The  university  plans 
to  buy  22  Catalyst  3750s  in  the 
next  few  mont^  adding  to 
its  installed  base  of  about 
2.000  switches  from  various 
vendors. 

In  contrast.  Valenzisi  said 
he's  alarmed  by  what  be  has  to 
pay  for  memory  upgrades  to 
Cisco’s  switches  and  switch¬ 
ing  modules  something  he 
routinely  adds  to  purchases 
from  Cisco  to  ensure  interop¬ 
erability.  For  example,  he  said. 
Cisco  recently  charged  him 
$10,000  for  a  1GB  memory  up¬ 
grade  for  an  c^cal  services 
module  many  times  what 
he  expected  to  pay.  Their 
memory  pricing  is  way  too 
high,"  Valenzisi  said. 
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Says  nidng  Notan  Issue  for  Users 
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A  network  manager  at  a 
heath  care  provider  with  6,000 
workers  said  his  company  is 
getting  an  increased  amount 
of  services  on  core  infrastruc¬ 
ture  products  from  Cisco,  such 
as  hs  switches  and  routers,  for 
the  same  prices  that  it  was 
paying  before. 

But  the  user,  who  asked  not 
to  be  identified,  added  that 
Cisco’s  prices  "arc  still  very 
high”  for  devices  such  as  VoIP 
phones  and  their  batteries  and 
cables.  A  wireless  VoIP  phone 
can  run  well  over  $1,200  with 
all  the  added  gear  that  end 
users  need,  he  said. 

Pricing  Pressunis 

John  Chambers,  Cisco’s  presi¬ 
dent  and  CEO.  acknowledged 
in  an  interview  that  users  fre¬ 
quently  voiced  concerns  about 
pricing  when  he  talked  to 
them  in  the  past.  However, 
Chambers  said  the  complaints 
have  stopped  since  he  began 
conducting  quarterly  reviews 
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»  Generally 
spe^ng, 
Cisco’s  prices  are 
improving  and  I  get 
more  for  my  money. 

MATT  VALENZISI.  NETWORK 
MANAGER.  NORTH  CAROLINA 
STATE  UNIVERSITY 

of  pricing  and  new-product 
development  two  years  ago 
(see  (^cA  below). 

Earlier  this  year,  some  IT 
managers  said  they  were  will¬ 
ing  to  pay  premium  prices  for 
Cisco’s  prt^ucts  bet^use  of  its 
financial  stability,  reliability 
and  strong  customer  service 
(C^uicklink  463761. 

But  Gartner  Inc  analysts 
Mark  Fabbi  and  Bob  HaJfoer 
have  written  several  reports 
over  the  past  year  urging  users 
to  seek  rival  bids  in  order  to 
push  Cisco’s  sales  force  to 
make  more  competitive  count¬ 


eroffers.  That  strategy  seems 
to  be  woridng  for  users,  ac¬ 
cording  to  Fabbi.  There’s  a  lot 
more  response  by  Cisco  on 
competitive  bids  than  a  year 
ago."  be  said  last  week. 

Fabbi  added  that  Cisco 
seems  to  be  paying  more  at¬ 
tention  upfront  to  the  prices 
it’s  charging,  especially  with 
its  biggest  users.  "Cisco  real¬ 
izes  they  can’t  take  customers 
for  granted  and  has  been  pro¬ 
active  with  discounts,"  be  said. 

Zeus  Kerravala.  an  analyst  at 
The  Yankee  Group  in  Boston, 
said  that  Cisco’s  prices  "are 
still  an  issue  with  customers." 
Kerravala  agreed  with  Cham¬ 
bers  that  there  has  been  some 
improvement,  but  be  added 
that  it's  very  hard  to  quantify. 
051392 
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skckto  LmrTtorapgkcadons. 
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MigoM  MomMlan  ndwodis 
k  dw  movemenl  ol  nioe.  dire 
andvidsoovwoomblnadinl- 
rnls.  The  aaoond  piwM  k  thk 
vMalaadon  of  awvioK  and 
reaoumea. 

And  dm  dwd  pbasa  k  dds  one 
otappfcidoniwBienelwoite. 
wNch  has  huge  Mplcaltana  In 
Mms  ol  dw  (toon  dial  I  opens 
up.WMedikwaepnltyoartn>- 
venM  tm  yews  ago  when  we 
salted  doam  Me  path,  not  meny 
peopk  dkagree  wHi  dw  conoapl 
Dw  questton  to  how  tar  d  wf  go 
and  dw  taiM  of  kiplanwnlatlon. 
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“For  midsized  and  large  organizations,  a  significant 
Linux  deployment  will  neither  be  free  nor  easily 
accomplished.  In  fact,  respondents  at  large 
organizations  reported  that  a  wholesale  switch  to 
Linux  from  Windows'  or  Unix  would  significantly 
increase  TCO  for  the  forseeable  future." 

-  Laura  DiDio,  The  Yankee  Group,  April 2004 
^  Linux,  Unix,  and  Windows  TCO  Comparison 


The  Yankee  Group,  a  global  research  and  consulting  firm,  concluded 
that  a  significant  switch  to  Linux  from  Windows  or  Unix  could  cost  three 
to  four  times  as  much  without  delivering  tar^gibly  better  performance  or 
business  value.  These  findings  are  based  on  a  non-sponsored  worldwide 
survey  of  1,000  IT  administrators  and  C-level  executives  in  midsized 
and  large  enterprises. 

To  get  the  full  study,  visit  microsoft.com/getthefacts 
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Life-Cycle  Software  Vendors 
Woo  Small,  Midsize  Businesses 


S<.‘\vr.il  arc  fbnniiig  alliances,  oHcring 
more  afl’orclalilc,  simplified  tools 


BV  JAIKUMARVIJAVAN 

V)  mm»hn  akj  nukmg 
poKluet  lill-cyclf 
mananemcniiPLM) 
st»ftwai\*  easier  id 
depl**y  Jnd  use  as  imca*sj  in 
ihc  rcchni>!.>j.wt{a«vs  in  small 
and  medium-size  husioesses. 

For  example,  under  a  five- 
year  parinership  K'tween  Mi- 
entsoft  Corp.  and  Dassault 
Sv-stemes  SA  annimnced  last 
month.  Dassault’s  .?-n  Solid- 
Works  products  and  its  PlAI 
software  offerings  such  xs  Ca- 
tid.  [X‘lmia  and  Fttovta  will  be 
integrated  with  Mierosufi’s 
Server.  KizTalk  Server. 
SharePoint  I*0rtal  server  soft¬ 
ware  and  .Net  products. 

The  iniegrated  products 
will  allow  manufacturers  to 
rmvre  easily  create,  edit  and 
share  product-related  infor¬ 
mation  and  .vn  drawings 
between  Miero-soft  and  Das¬ 
sault  ertvironments.  said  John 
Squire,  vice  president  of  mar¬ 
keting  at  Sua-snes.  France- 
based  Dassault. 

Such  tnieroperabiliiy  is  cru¬ 
cial  to  spurring  adoption  of 
PLM  among  small  and  midsize 
manufactua'rs.  which  lend  in 
K*  Microsoft-centric,  said  IKm 
Brown,  managing  partner  of 
(!olbbt>riUve  l'ri>duci  IXwel- 
opmeni  A?is»»ciatcs  LLC  in  I 
hm  Chester.  N.\’. 

Dassault  i.sn’i  the  only  ettm- 
pany  aiiempting  to  broaden 
the  appt-al  nf  PI.M  products. 

Alst*  last  month.  I*aramelrie 
Technology  Corp.  in  Necd- 
h.»m.  Mass»  Jiscitised  plans  to 
use  an  IBM  im-Jcmand  ser¬ 
vice  center  !•»  deliver  a  hosted  ! 
PI.M  servkx-  for  small  and  ' 

medium-size  busiru-sses.  Tite 
service  allows  those  compa¬ 
nies  to  use  KrCs  Windchill 
pfiKFuci  management  software  i 
under  subscriptnms  staning  at 
SItX)  per  month.  J 

Meanwhile.  Agile  Software  i 
Lorp  launched  its  Small  and  I 


Medium  Fnierpnsc  initiative 
in  IViobcr.  The  San  lose' 
based  vendor  is  v*ffering  a 
,  hosted  PI.M  se'rviee  .ind  a 
prepackaged  PLM  suite  for 
smaller  bu.sinesses. 
j  In  September,  MairivOne 
I  Inc.  in  Westford.  Mass.,  an¬ 
nounced  the  integration  of  its 
I  PLM  suite  with  Micnwofi's 
I  Office  cnviixmment.  with  an 
I  eye  utward  spurring  br»»ader 
adoption  of  its  pioducts. 

Gaining  Attention 

Such  moves  come  at  a  lime 
w  hen  adoption  of  PLM  tech¬ 
nologies  —  traditionally  used 
only  by  very  large  companies 
—  appears  to  be  gaining  atten¬ 
tion  in  smaller  manufacturing 
firms,  said  John  Moore,  an  an¬ 
alyst  at  ARC  Advisc»ry  Group 
Inc.  in  Dedham.  Mivs. 
According  to  a  report 
1  released  this  fall  by  Bosion- 
I  based  AMR  Research  Inc.. 

I  companies  that  have  annual 
revenues  of  less  than  SI  billitm 
will  invest  more  than  S5  bil- 
I  lion  in  PI.M  technologies  by 
2008  in  an  effort  logain  more 
conm*l  t>ver  their  product 
I  information. 

"Vendors  are  starting  to  re- 
I  alizc  the  nuirket  potential  of 


How  PIM  Vendors  Are 
Courting  Smaller  Rrms 
•  P4»Amctftc  Techrwioflv 


small  and  medium  business¬ 
es."  said  Siephcn  Segal,  CIO  at 
Loevven  Inc.,  a  maker  of  high- 
end  eusu»m  windows  in  Siein- 
baeh,  ManitoKi.  “We  are  see¬ 
ing  Tier  1  vendors  repackaging 
and  offering  high-end  tools 
that  had  been  developed  and 
available  only  for  complex 
markets." 

I.ocwen  is  in  the  midst  of 
deploying  Dassault's  PLM 


technology  to  its  engineering 
and  design  gri»ups.  Eventually. 


,  based  maker  of  cardiov'ascular 
equipment,  is  also  taking  ad¬ 
vantage  of  MatrixOne’s  indus¬ 
try-specific  PLM  packages  i(» 
implement  a  capability  for 
managing  product  develop¬ 
ment  information  through  its 
entire  life  cycle. 

MatrixOnc's  support  of 


the  company  plans  to  use  PLM  functions  .and  processes  spe- 
to  exp<we  product  information  cific  to  the  medical  device 
to  workers  in  its  sales  and  market,  including  templates 

markciitjg  gn>ups.  as  well  as  to  for  complying  with  U.S.  Food 


aistomers. 

"We  couldn't  even  ltH>k  at 
I’LM  two  nr  tha*e  years  ago" 
because  of  its  complexity  and 
costs.  Segal  said. 

EV.^  Inc.,  a  Plymouth.  Minn.- 


IBM  Security  Chief  Focuses 
On  Compliance,  Cyberattacks 


Mcln'ino  promises 
tighter  integration 
of  serv  ices  and 
.seeiirit)'  pnxJuets 

BV  aAlKUMAl?  ViJAVAN 

As  direcror  of  ctvpomte  secu¬ 
rity  strategy  at  IBM.  Stuart 
Meirvine  is  re.vp(msib/e  for  de¬ 
veloping  its  overall  road  map 
for  IT  security  prxtducts.  ser¬ 
vices  and  partnerships. 

Meirvine's  iob,  w’hich  he  took 
on  in  mid-October,  involves 
managing  a  team  that  coordi¬ 
nates  security-related  initia¬ 
tives  (Jcniss  IHM's  hardH’ore. 
software,  services  and  research 
grttups. 

Mt7rvine  spoke  with  Com- 
pulerworld  last  week  abtmi 
IBM's  .security  offerings  antf 
pl<in.v. 

What's  your  role  at  IBM?  I  have 
the  responsibility  (or  the  de¬ 
velopment  and  enhancement 
of  IBM's  corporaiewide  secu¬ 
rity  strategy  —  that  is.  a  strate¬ 
gy  t<i  address  the  way  the  mar¬ 
ket  .secs  security,  wants  to  buy 
security  I  pnvducts  and  ser¬ 
vices).  etc.  Fri>m  an  internal 
perspective,  it’s  very  focused 
on  aligning  all  the  pieces  wc 
have. 

What  do  you  $e«  as  some  of  the 
key  drivers  of  companies*  IT  secu* 


I  rityaBendas?Oneofthemain 
j  things  is  regulatory  compli¬ 
ance,  whether  It's  cross-indus¬ 
try  regulations  or  industry- 
specific  ones.  Conirotting  ac¬ 
cess  to  systems,  especially  fi¬ 
nancial  systems,  [and!  being 
able  to  pttwide  audit  trails  arc 
important. 

Another  big  area  is  ^ 
just  basically  prevent-  ^ 
ing  business  damage 
from  cyberattaeks  —  H 
the  loss  of  productivity  V 
and  the  loss  of  revenue. 

Another  thing  that  flb 
eu.siomcrs  arc  kH)king  ■  1 1 
at  is  really  how  to  cope  1*1 
with  multiple  comrou- 
nication  med)um.s.  such  as  the 
Internet.  VoIP  and  wirele.s.s. 
combined  with  the  multitude 
of  devices  that  ptx>p!e  are  us¬ 
ing  to  gain  access  to  these 
(sysicmsl. 

What  is  IBM  doing  to  help  IT  man¬ 
agers  address  such  issues?  We 
have  a  business  unit  that's  just 
focusv-d  on  risk  and  cxtmpli- 
anee.  They've  developed  a 
framework  that  is  providing 
guidance  for  all  of  Ithe)  regu¬ 
latory  compliance  (nt-eds  of 
companies]. 

Customers  can  drill  down 
on  a  specific  regulation  such 
as  1  the  Sarbanes-Oxley  Act  I. 
and  weTI  show  particular  fo¬ 
cus  areas  of  that  regulation 
and  map  that  to  our  portfolio. 


and  Drug  Administration  and 
European  Union  regulations, 
has  made  the  technology  rela¬ 
tively  simple  to  deploy,  said 
EV3  CIO  Pete  Schaubach. 
051316 


What  about  helping  them  deal 
with  cyberattacks?  Wc  itave 
aK)ut  lutlf  a  million  devices 
worldw  ide  that  monitor  I  nei- 
workl  trends.  Approximately 
2,700  IBM  security  profession¬ 
als  analyze  the  information 
that  comes  out  of  those  moni¬ 
tors  and  provide  daily  reports 
and  rccommcjuled  action  to 
help  our  customers. 


What  do  you  see  as  IBM's  value- 
i  add  over  pure-play  security 

«  vendors?  IBM  is  look¬ 
ing  at  security  not  as 
an  IT  pix>blcm,  but  as  a 
business  problem.  It's 
not  just  a  case  of  fo¬ 
cusing  on  firewalls 

^and  viruses. 

We're  investing 
heavily  in  security 
management,  access 
management,  identity  man¬ 
agement.  patch  management 
and  federated  ID  manage¬ 
ment.  A  lot  of  that  is  around 
our  Tivoli  business. 

j  What  can  users  expect  to  see 
from  IBM  over  the  next  year  or  so 
In  terms  of  security  products  and 
services?  ll’.s  really  about 
lighter  integration  acn>ss  our 
portfolio.  You’ll  see  a  number 
of  new  management  services, 
enhancements  to  our  security 
management  software  ptmfo- 
lioand  better  integration 
across  different  departments 
providing  security  products. 
You'll  also  see  a  lot  more  focus 
on  pulling  more  security  Ica- 
pabili(ics)  into  the  hardware. 
051319 
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Life-Cycle  SofWare  Vendors 
Woo  Small,  Midsize  Businesses 


Several  are  forming  alliances,  offering 
more  affordable,  simplified  tools 


SV  JJMKUMAIt  VI  JAVAN 

VENOORs  ARE  making 
product  life-cycle 
management  (PLM) 
software  easier  to 
deploy  and  use  as  interest  in 
the  teclwology  grows  in  small 
and  medium-size  businesses. 

For  example,  under  a  five- 
year  partnership  between  Mi¬ 
crosoft  Corp.  and  Dassault 
Systemes  SA  annemneed  last 
month.  Dassault's  3-D  Solid- 
Worics  products  and  its  PLM 
software  offerings  such  as  Ca* 
tia.  Delmia  and  Enovia  will  be 
integrated  with  Microsoft's 
SQL  Server.  Biz'DUk  Server, 
SharePoint  Portal  server  soft¬ 
ware  and  .Net  products. 

The  integrated  products 
will  allow  manufacttirers  to 
more  easily  create,  edit  and 
share  produa-relatcd  infor¬ 
mation  and  3-0  drawings 
between  Microsoft  and  Das¬ 
sault  environments,  said  John 
Squire,  vice  president  of  mar¬ 
keting  at  Suresnes.  France- 
based  Dassault. 

Such  interoperability  b  cru¬ 
cial  to  spurring  adoption  of 
PLM  among  small  and  midsize 
manufacturers,  which  tend  to 
be  Microsoft-centric,  said  Don 
Brown,  managing  parmer  of 
Collaborative  Product  Devel¬ 
opment  Associates  LLC  in 
Port  Chester.  N.Y 
Dassault  isn't  the  only  com¬ 
pany  attempting  to  broaden 
the  appeal  of  PLM  products. 
Also  last  month.  Parametric 
Technology  Carp,  in  Need¬ 
ham.  Mass.,  disclosed  plans  to 
use  an  IBM  on-demand  ser¬ 
vice  center  to  deliver  a  hosted 
PLM  service  for  small  and 
medium-size  businesses.  The 
service  allows  those  compa¬ 
nies  to  use  PTC’s  Wtodchill 
product  management  software 
under  subscriptiotis  starting  at 
nOO  per  month. 

Meanwhile.  Agile  Software 
Corp.  launched  Hs  Small  and 


Medium  Enterprise  initiative 
in  October.  The  San  Jose- 
based  vendor  is  offering  a 
hosted  PLM  service  and  a 
prepackaged  PLM  suite  for 
smaller  businesses. 

In  September.  MatrixOnc 
Inc  in  Westford.  Mass.,  an¬ 
nounced  the  integration  of  its 
PLM  suite  with  Microsoft's 
Office  environment,  with  an 
eye  toward  spurring  broader 
adoption  of  hs  products. 

Gaining  Attofition 

Such  moves  come  at  a  lime 
when  adoption  of  PLM  tech¬ 
nologies  —  traditionally  used 
only  by  very  large  companies 
—  appears  to  be  gaining  atten¬ 
tion  in  smaller  manufacturing 
firms,  said  John  Moore,  an  an¬ 
alyst  at  ARC  Advisory  Group 
Inc  in  Dedham,  Mass. 

According  to  a  report 
released  this  Call  by  Boston- 
based  AMR  Research  Inc., 
companies  that  have  annual 
revenues  of  less  chan  $1  billion 
will  invest  more  than  SS  bil¬ 
lion  in  PLM  technologies  by 
2008  in  an  effort  to  gain  more 
control  over  their  product 
information. 

“Vendors  are  starting  to  re¬ 
alize  the  market  potential  of 


How  PLM  Vendors  Are 
Courting  Smaller  Firms 


small  and  medium  business¬ 
es."  said  Stephen  Segal.  CIO  at 
Loewen  Inc.,  a  maker  of  high- 
end  cu.stom  windows  in  Stein- 
bach.  Manitoba.  "We  are  see¬ 
ing  Tier  1  vendors  repackaging 
and  offering  high-end  tools 
that  had  been  developed  and 
available  only  for  complex 
markets." 

Loewen  is  in  the  midst  of 
deploying  Dassault’s  PLM 


technology  to  its  engineering 
and  design  groups.  Eventually, 
the  company  plans  to  use  PLM 
to  expose  product  information 
to  workers  in  its  sales  and 
marketing  groups,  as  well  as  to 
customers. 

"We  couldn't  even  locJt  at 
PLM  two  or  three  years  ago" 
because  of  its  complexity  and 
costs.  Segal  said. 

EV3  Inc,.,  a  Plymouth,  Minn.- 


based  maker  of  cardiovascular 
equipment,  is  also  taking  ad¬ 
vantage  of  MatrixOne’s  indus¬ 
try-specific  PLM  packages  to 
implement  a  capability  for 
managing  product  develop¬ 
ment  information  through  its 
entire  life  cycle. 

MatrixOne's  support  of 
functions  and  processes  spe¬ 
cific  to  the  medical  device 
maiket.  including  templates 
for  complying  with  U.S.  Food 
and  Drug  Administration  and 
European  Union  regulations, 
has  made  the  technology  rela¬ 
tively  simple  to  deploy,  said 
EV3  CIO  Pete  Schaubach. 
OS131B 


IBM  Security  Chief  Focuses 
On  Dxnpliance,  Cyberathicks 


Mclrvine  promises 
tighter  integration 
of  services  and 
security  products 


BV  JAUtUMAR  VIJAVAN 

As  director  of  corporate  secu¬ 
rity  strategy  at  IBM, 

Mdrvina  is  responsible  for  de¬ 
veloping  its  overall  road  map 
for  IT  security  products,  ser¬ 
vices  and  partnerships. 

Meirvine's  job.  which  he  took 
on  in  mid-October,  involves 
managing  a  team  that  coordi¬ 
nates  security-related  initia¬ 
tives  across  ifiATs  hardware, 
so^hvore,  services  and  research 
groups. 

Mclrvine  sptAe  with  Com- 
puterworld  last  week  about 
IBM’s  security  offerings  and 
plans. 

Vfhef  8  your  rote  at  BM?  I  have 
the  responsibility  for  the  de¬ 
velopment  and  enhancement 
of  IBM's  corporatewide  secu¬ 
rity  strategy  —  that  is,  a  strate¬ 
gy  to  address  the  way  (he  mar¬ 
ket  sees  security,  wants  to  buy 
security  (produas  and  ser¬ 
vices),  etc.  From  an  internal 
perspective,  it’s  very  focused 
on  aligning  all  the  pieces  we 
have. 

What  do  you  OM  as  aomo  of  ttw 
hay  drteBtB  of  compantea' IT  aaeu- 


;  rttyagandasTOneofthemain 
things  is  regulatory  compli¬ 
ance,  whether  it’s  cro.ss>tndus- 
try  regulations  or  industry- 
specific  ones.  Controlling  ac¬ 
cess  to  systems,  especially  fi¬ 
nancial  systems,  [and]  being 
able  to  provide  audit  trails  arc 
important 

Another  big  area  is 
just  basically  prevent¬ 
ing  business  damage 
from  cyberattacks  — 
the  loss  of  productivity 
and  the  loss  of  revenue. 

Another  thing  that 
customers  are  looking 
at  is  really  how  to  cope 
with  multiple  commu¬ 
nication  mediums,  such  as  the 
Internet,  VoIP  and  wireless, 
combined  with  the  multitude 
of  devices  that  people  are  us- 
mg  to  gain  access  to  these 
[systems). 

What  Is  IBM  doing  to  help  IT  man- 
sgsrs  address  such  tesuos?  We 

have  a  business  unit  that’s  just 
focused  on  risk  and  compli¬ 
ance.  They’ve  developed  a 
framework  that  is  providing 
guidance  for  all  of  [the]  regu¬ 
latory  compliance  [needs  of 
companies). 

Customers  can  drill  down 
on  a  specific  regulation  such 
as  (the  Sarbanes-Oxley  Act], 
and  wc'U  show  partictilar  fb- 
I  cus  areas  of  that  regulation 
I  and  map  that  to  our  portfolia 


Vftiat  about  helping  them  deal 
sdth  eybarattacks?  Wc  have 
about  half  a  million  devices 
worldwide  that  monitor  [net¬ 
work)  trends.  Approximately 
2,700  IBM  security  profession¬ 
als  analyze  the  information 
that  comes  out  of  those  moni¬ 
tors  and  provide  daily  reports 
and  recommended  action  to 
help  our  customers. 

WhM  do  you  soa  as  BM**  vahw- 
add  ovor  pureiitey  sacurtty 

vondoft?  IBM  is  look¬ 
ing  at  security  not  as 
an  IT  problem,  but  as  a 
business  problem.  Ifs 
not  just  a  case  of  fo¬ 
cusing  on  firewalls 
and  viruses. 

We're  investing 
heavily  in  security 
management,  access 
management,  identity  man¬ 
agement,  patch  management 
and  federated  ID  manage¬ 
ment  A  lot  of  that  is  around 
our  Tivoli  business. 

What  can  usors  oxpoct  to  aoa 
from  BM  over  tho  next  year  or  ao 
in  torme  of  aecurfty  producta  and 
aondcos?  lt’$  really  about 
tighter  integration  across  our 
portfolio.  You’ll  see  a  number 
of  new  management  services, 
enhancements  to  our  security 
management  software  portfo¬ 
lio  and  better  integration 
across  different  departments 
providing  security  products. 
You’D  also  see  a  lot  more  focus 
on  putting  more  security  [ca- 
p^Uities]  into  the  hardware. 
OSBB 


AMD 


Wh  en  Microsoft  invests 


sixty  billion  dollars, 

they  don’t  use  just  any  processor. 


To  manige  this  much  money,  you  need  a  solution  that  offers  optimum  performance  and  real-time  flexibility.  Microsoft  found  both  in  the 
AMD  Opteron”  processor  running  Windows  Server"  2003.  Enterprise  Edition.  The  AMD  Opteron  processor  with  Its  Direct  Connect 
Architecture  already  povrers  the  worid's  highest  performing  2-way  and  4-way  xSO  servers.  Now  Microsoft  Treasury  managers  are  using  it  to 
slash  the  time  it  ukes  to  run  their  complex  risk-analysis  software.  Meanwhile,  they  have  the  flexibility  to  go  from  32-  to  64-blt  applications 
without  disrupting  their  business.  At  AMD.  we  believe  it’s  critical  that  technology  should  migrate  on  your  terms  to  help  you  realize  your  unique  vision. 
It's  one  of  the  reasons  why  leading  OEMs  offer  enterprise-class  solutions  powered  by  AMD  Opteron  processors.  Would  you  like  to  learn  just  how  much 
of  a  difference  they  can  make  to  your  company!  Go  to  www.eisid.coni/eiiterprise 
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MARK  HALL 


Welcome,  China 


Seriously. 

When  IBM  entered  the  personal  comput¬ 
er  business  in  1981,  Apple  Computer  — 
then  the  dominant  market  leader  and  mak¬ 
er  of  the  Apple  lie  line  of  desktop  machines 
—  ran  a  full-page  advertisement  in  The  Wall  Street 


Journal  with  the  scream¬ 
ing  headline;  "Welcome, 

IBM.  Seriously." 

Pm  guessing  we’U 
see  DO  such  ads  from 
Hewlett-Packard  or  Dell 
greeting  the  arrival  of 
China's  Lenovo  Group 
after  its  $1.25  billion  deal 
to  buy  IBM's  PC  busi¬ 
ness.  That’s  because  un¬ 
like  Apple  Computer’s 
smug  marketers  of  the 
eariy  1980s  (and,  need  I 
say.  beyond),  HP  and  Dell  know 
there’s  no  reason  to  anger  a  dragon 
moving  into  your  neighborhood. 

Lenovo’s  acquisition  is  part  of  a 
long-term  strategy  by  the  company 
and  its  backers  to  become  a  ma}or  IT 
player  in  the  West.  It  changed  its 
name  ofTictally  this  year  from  Leg¬ 
end  after  it  encountered  too  many 
trademark  problems  in  Western 
countries.  Executives  knew  that  the 
new  name  had  to  be  easy  for  English 
speakers  to  pronounce.  I  rhink  they 
did  a  pretty  fair  job  with  "Lenova" 
The  company  is  also  working  with 
the  Ch'mese  government  to  take  a 
prominent  role  during  the  2008  Bei¬ 
jing  Summer  Olympics.  That’s  be¬ 
cause  it  rankles  government  and 
business  leaders  that  China  hasn’t 
produced  even  one  global  brand. 

The  nation  may  be  a  global  econom¬ 
ic  powerhouse,  but  none  of  its  prod¬ 
ucts  are  household  names. 

Lenovo  plans  to  use  the  Olympics 
to  help  turn  its  name  into  something 
closer  to,  say.  Coca-Cola  or  Nestle 
than,  welL  Lenovo  is  today.  But  be¬ 
fore  It  can  buy  endless  spots  on  NBC 
Sports  to  promote  itself,  Lenovo  must  | 
have  something  the  world  wants  to  I 


buy.  Hence,  the  agreement 
with  IBM. 

Whether  Lenovo  can 
succeed  with  IBM's  PC 
line  or  not,  China  is  mak¬ 
ing  it  clear  that  it  wants 
your  business  —  the  en¬ 
terprise  IT  business.  It 
wants  to  create  a  corpo¬ 
rate  brand  that  you  will 
believe  in,  because  col¬ 
lectively  your  budgets 
pack  a  glc^al  wallop,  one 
that  can  carry  a  company 
to  worldwide  brand  status  quickly. 

Lenovo  gets  to  use  the  IBM  brand 
and  assorted  trademaiks  for  five 
years.  Expect  to  see  lots  of  promo¬ 
tional  material  touting  “the  Lenovo 
ThinkPad"  or  “the  IBM  PC  from 
Lenovo"  for  a  couple  of  years.  But  by 
the  time  the  pole  vatilrers  and  the 
sprinters  have  finished  touring  the 
Great  Wall  and  have  started  compet¬ 


ing  in  2008,  Lenovo  hopes  to  have 
scrapped  the  IBM  crutch  and  taken 
on  HP  and  Dell  with  its  own  moniker. 

The  immediate  benefit  of  this 
deal  for  IT  is  that  Lenovo  knows 
how  to  build  cheap  PCs.  Today  it 
sells  a  decent  little  machine  for 
$360.  It  can  apply  its  manufacturing 
prowess  to  benefit  you.  But  Lenovo 
can’t  expect  to  become  a  global 
brand  simply  by  putting  an  IBM 
product  in  your  hands  for  a  few 
bucks  less.  If  that’s  the  company’s 
game  plan,  figure  it  to  lose  big  in  its 
global  branding  gamble. 

Lenovo  needs  to  innovate.  IBM’s 
PC  group  has  been  lackluster  of  late, 
slow  to  embrace  tablets  and  adopt 
laptop  features  that  users  appreciate. 
If  Lenovo  advances  the  state  of  the 
art  on  PCs  by  integrating  features 
that  IT  craves,  such  as  security  and 
reliability,  while  holding  costs  down, 
it  stands  a  good  chance  of  holding  on 
to  existif^  IBM  PC  buyers  and  win¬ 
ning  new  ones  to  the  Lenovo  brand. 

If  Lenovo  fails  to  innovate  and  ex¬ 
tend  its  IBM  line.  IT  may  very  well 
withdraw  its  welcome  mat.  And  Chi¬ 
na  will  need  to  restart  its  global 
brand  strategy  from  scratch.  Cl  51320 
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VIRGINIA  ROBBINS 

The  Industry 
We  Save  Could 
Be  Our  Own 

Between  meetings.  l 
was  catching  up  on  my 
reading  when  this  title 
caught  my  eye:  “Can  IT  Save 
This  Industry?”  I’d  never 

heard  of  IT  saving  a  company,  let  alone 
an  industry.  After  scanning  the  first 
page  and  finding  very  little  that  had  to 
do  with  IT.  I  reached  for  the  phone  and 
called  ray  company’s  head  of  marketing. 
She's  a  London  School  of  Economics 
graduate  and  a  forroer  Andersen  em¬ 
ployee,  so  I  knew  I  could  count  on  her 
for  a  quick  and  thoughtful  comment 
After  exchanging  a  few  pleasantries 
and  warning  her  that  my  question 
didn’t  have  anything  to  do  with  woik, 

1  told  her  about  the  article  that  had 
caught  roy  attention  and  asked  her  if 
she  knew  of  a  case  in 
which  IT  had  saved 
an  industry  or  a 
company.  Five  sec¬ 
onds  of  silence  fol¬ 
lowed.  I  had  to  smile, 
and  I  told  her  that 
her  answer  wouldn't 
change  the  priority 
of  our  projects  for 
marketing.  She 
laughed,  but  then  she 
said,  “Those  titles 
just  irritate  me.  Man- 
agement  is  what 
saves  companies; 
leadership  is  what  saves  industries.  IT 
is  an  enabler." 

We  ^ke  about  Peter  Drucker, 

James  Collins  and  others  whose  re¬ 
search  demonstrates  that  it’s  all  about 
management.  We  both  had  meetings  to 
run  to.  so  I  thanked  her  and  hung  up. 

Why  had  my  colleague  found  that 
article's  title  so  irritating? 

A  few  weeks  ago.  I  had  the  opportu¬ 
nity  to  fill  in  for  our  chief  executive  at 
a  student-loan-industry  CEO  confer¬ 
ence.  It  was  a  small  gathering,  and  1 
was  able  to  meet  most  of  the  CEOs  in 
attendance.  Upon  identifying  myself 
as  a  CIO.  I  would  receive  one  of  two 
r^ponses.  Former  CIOs  launched  into 
discussions  about  changes  in  the  stu- 
dcoi  loan  industry:  non-CIOs  pulled 
me  aside  to  confide  that  if  there  was 
one  area  of  their  businesses  that  they 
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worried  about,  it  was  technology. 

What  concerned  the  CEOs  was  that 
their  businesses  were  completely  en¬ 
abled  by  technology;  without  IT.  they 
couldn’t  compete.  It  wasn’t  that  their 
IT  groups  were  incompetent  or  that 
they  had  any  immediate  problems,  but 
as  lawyers,  CPAs  and  former  salespeo¬ 
ple.  the  CEOs’  skills  lay  in  protecting 
and  growing  the  business.  They  feared 
that  the  very  expensive  IT  recommen¬ 
dations  they  were  approving  weren’t 
going  to  be  beneficial.  They  needed 
their  IT  staffs  to  understand  them  and 
their  businesses  in  addition  to  know¬ 
ing  IT. 

I  think  that  when  wc  in  IT  make 
claims  such  as  “rT  can  save  this  indus¬ 
try,"  other  executives  question  our  un¬ 
derstanding  of  what  makes  businesses 
succeed. 

As  CIOs,  we  spend  much  of  our  time 
working  to  retain  and  improve  align¬ 
ment  between  IT  and  business.  In  pan, 
we  do  this  by  translating.  We  translate 
business  goals  into  IT  projects  or  met¬ 
rics  and.  conversely,  translate  improve¬ 
ments  in  IT  into  business  opporttini- 
ties.  Sensational  words  in  anicle  titles 
that  irritate  or  create  doubt  rarely  help 
translators. 

Yes.  it  was  only  the  title  of  an  article, 
a  few  words  that  were  probably  chosen 
to  attract  readers.  Yet  whenever  wc  use 
words  that  irritate  and  raise  doubts 
about  our  skills,  we  reduce  our  effec¬ 
tiveness  and  harm  ourselves  and  our 
industry.  Let’s  be  the  best  we  can  be 
and  choose  words  that  reinforce  in  the 
minds  of  our  peers  and  our  CEOs  that 
we  have  the  business  knowledge  they 
expect  of  us.  O  51241 
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Longhorn, 
Blogs,  Linux: 
Predicting  ’05 


IT’S  THAT  TIME  of  year. 
LEDs  flash  with  holiday 
cheer,  and  pundits  pontifl- 
cate  about  what  will  happen 
in  the  coming  months.  So 


once  again,  it's  time  for  me  to  offer  my 
predictions  for  the  new  year. 

t  Innghoni  h  no  tanpr  ttw  anmnr  (or 
even  the  quaotton).  There  was  too  much 
Lon^om  hype  in  the  past  year  and 
not  enough  details.  Look  for  Microsoft 


to  retreat  from  the  “It  will 
be  fixed/added  in  Long- 
hora"  mantra  and  make 
more  attempts  to  keep  the 
focus  on  Windows  XP. 

2.  POAs  wl  bacome  passO. 
Disconnected  ones,  that  is. 

Over  time,  the  real  action 
will  be  moving  core  PDA 
functionality,  centered  on 
personal  information  man¬ 
agement.  to  other  devices 
such  as  cell  phones.  This 
will  cause  major  IT  head¬ 
aches.  since  few  cell  phones 
are  controlled  by  IT  these 
days. 

3.  More  people  wrii  low  thair 
jobs  over  tholr  weMoga.  It  ’s 
happened  already,  and  it 
will  happen  again.  If  you're 
posting  about  your  job  or 
employer  without  consent, 
you're  taking  a  lot  of  risk  with  your 
future. 

4.  But  more  corporationK  wM  create  offi¬ 
cial  blogs.  Corporations  have  seen  the 
weblog  light,  and  blogs  will  become 
conunon  for  business  use.  Unfortu¬ 
nately.  far  too  many  of  these  efforts 
will  just  be  marketing  fluff  disguised 
as  weblogs. 

5.  Sen^  RM)  «4i  drive  IT  poicy.  With 
ail  the  fear  about  people  using  iPods 


and  flash  memory  devices 
to  walk  off  with  corporate 
data.  IT  will  be  forc^  to 
take  more  Draconian  mea¬ 
sures  against  users.  Expect 
to  see  rigid  policies  about 
commingling  personal  and 
business  technologies,  and 
bans  on  USB  flash  disks 
and  the  tike. 

6.  Wi-R  wi  be  ubiquilous. 
but  not  In  the  workplace.  Wi-Fi 
is  readily  available  in  pub¬ 
lic  places  such  as  coffee 
shops,  airpons  and  hotels. 
IT  shops,  however,  will 
slow  deployments  a  bit 
over  fears  of  security.  End 
users  will  take  matters  into 
their  own  hands,  so  expect 
to  sec  lots  of  ad  hoc  net¬ 
works  springing  up. 

7.  \MP  tefil  be  a  mainstreBm 
technology  for  buainBss  UMTS.  Voice  over 
IP  is  perhaps  the  hottest  technology  in 
the  telecommunications  industry'  to¬ 
day.  VoIP-based  services  will  grow 
even  more  as  a  mainstream  technology 
for  business  use.  Expect  a  lot  of  com¬ 
petition  for  the  trillions  of  minutes  and 
billions  of  dollars’  worth  of  voice  calls 
that  business  users  make  each  year. 

8.  Wirelocs  VoT  wi  sti  ba  ncha.  The 
hype  and  press  around  voice  over 


wireless  LANs  was  significant  in  2004. 
Expect  more  hype  and  some  pilot 
programs,  but  not  large  growth  for 
VoWLAN. 

9.  Linux  wil  be  adopted  in  yaater  num- 
bars  by  fT.  fate  deaktop  Unui  wN  not  Linux 
is  already  a  mainstream  server  solu¬ 
tion  for  many  IT  shops.  Thai  success 
won’t  travel  over  to  the  desktop,  how¬ 
ever.  Too  much  fragmentation,  com¬ 
bined  with  a  bek  of  critical  deskmp 

I  applications  and  increasing  depen- 
I  dence  on  the  Windows  platform,  will 
prevent  desktop  Linux  adoption  from 
increasing  significantly. 

10.  Moore’s  Law  wtt  stfil  be  inretevant 
lust  as  in  2004,  speed  increases  are 
nice,  but  they  will  remain  hard  to  justi¬ 
fy  for  most  business  users,  for  whom 
"fast”  was  "fast  citough"  around  1999. 
The  most  relevant  market  for  fast  PCs 
will  be  consumers  who  i»ccd  all  the 
speed  they  can  get  in  their  digital 
homes  for  entertainment. 

Most  importantly,  may  we  all  reap 
the  benefits  of  technology  in  a  rww 
year  filled  with  peace,  prosperity  and 
positive  growth.  Best  wishes  for  the 
holidays,  and  see  you  in  2005.  O  51138 
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READERS'  LETTERS 


Are  Vbu  Over  H? 

IHAVE  A  FEW  PKOBLEHS  With 
Don  lennani's  ctAjmn  *661  Over 
It*  {OutekUnk  50699].  Firsi.  the  at¬ 
titude  expressed  m  the  tide  and  the 
cokitTvi  itself  is  unprofessional.  I  ex¬ 
pect  to  be  better  served  by  a  jour¬ 
nalist.  Second,  anyone  with  expen- 
ence  of  real-world  corporate  FT 
knows  that,  as  often  as  not  tnart- 
agement  rrtees  shortsighted  dea- 
sions  about  outsounang.  Shaving 
money  off  a  budget  for  a  finano^ 
yeai.  or  even  lor  only  a  quarter,  is 
sometimes  atlthat  matters  to  man¬ 
agement  Thlnj.cor7V)l^  and 
are  two  different  words.  Ac¬ 
cusing  laid-off  fT  workers  of  whin¬ 
ing  is  not  only  insulting.  H  s  also  in¬ 
accurate.  I  wonder  how  you  mighi 
react  If  suddenly  ytxr  job  were 
farmed  out  to  someone  half  your 
age  making  pennies  to  your  dollar 
KMShdby 
Somen.S.Y. 

IUAioreEToverttfNotaslong 
as  I  can  get  around  1  anyway.  I 


have  remade  my  career,  moving 
from  bemg  an  electrorac  techrKaan 
to  providing  desktop  and  network 
systems  swicermouNeprofioenl 
with  the  TCf^  sule.  krtimale  with 
Unx  and  Windows,  reasonably  con- 
versard  with  Maanlosh  (wel  enough 
toiuthemandlunelheeperlor- 
mswe)  and  can  kiR  off  spyware  and 
wuses  manually  if  necessary 

Is  outsourcing  good?  k)  some 
cases.  I'm  certain  it  is.  In  odwrs.  It 
isnt  The  plannmg  and  implemen¬ 
tation  of  I  is  senportant.  rs 
important  to  study  whether  out¬ 
sourcing  tnily  is  a  good  fit  with  the 
business  needs  and  if  the  outsourc¬ 
ing  vendor  IS  dable  and  knowf- 
edgeable  'it'swhalourcocnpeli- 
tors  are  domg*  isn't  a  good  enough 
reason. 

I  thmk  the  worst  of  this  trend  6 
behindu$.Nowwe'reinloarebal- 
anong  phase.  In  10  yeais.  ths  wA 
be  a  mere  footnote  n  the  IT  hisiory 
books,  whereas  it  currently  IS  a 
painlui  experience.  The  pendulum 
wil  swing  back  wid  forth,  then  knd 
the  balance  of  necessity  and  udbty. 


WeR.  back  to  finding  a  new  |ob. 
snee  my  last  contract  ended  up  out - 
sourced  to  a  futty  staffed  comptfiy. 
Stephen  P.  VMano 
Phiiudelp/iio 

MOSTOFTHEikscusstons 
about  IT  oulsoureng  are 
based  on  one  fatally  flawedcon- 
cept  that  American  busnesses  stil 
do  actual  cost-benefit  artalyses 
when  choosaig  a  cotese  of  action. 
TheidBath^acompanyiMlsacn- 
lice  the  quarter's  eamvigs  for  future 
benefits  IS.  as  Afceho  Goruales  said 
about  the  Geneva  Convention, 
'quantly  obsolete  *  Managemeni 
makes  Eil  the  right  noises  - ‘Quality 
isNo  r and'Westrwefcirexcei- 
lence*  -  but  the  message  that  gels 
delwered  down  the  Cham  s. 'Get  I 
done  fast  and  cheap,  and  wel  wor¬ 
ry  about  the  taRout  later* 

About  16  years  ago.  top  execu¬ 
tives  and  boards  o<  diTBCtors  m  US 
corporations  lor  ai  pradcal  purpos¬ 
es  went  nio  business  lor  them¬ 
selves.  Between  dier  dock-option 
pitfis.  obscene  compensation 


packages  rmd  the  occasional  ven¬ 
dor  kickback,  who  needs  to  worry 
about  the  long-term  health  of  an 
orgarazation?  American  wDikers 
canbennovatrve.  seff-starmgand 
button-cute,  but  if  they  wont  work 
lor  a  Bombay  salary  wkh  no  health 
insurance,  out  they  go  Theycanal- 
weys  gel  lObs  mowing  lawns  for 
those  MegaCorp  executives  who  re¬ 
tired  on  Ihev  golden  parachutes 
Shay  Mmn 

Database  adtninistrator, 
Cneemvowj  VUhge.  Colo. 

COMPUTERWORLO  weicomes 
comments  from  as  readers  Utters 
wi  be  ediled  for  brev«y  and  d«4y. 
They  should  be  addres^  to 
Jamie  EcMe  leOersedaor. 
puterworld.  PO  Box  9T71 1  SpeeiT 
Street.  Framingham  Mass.  0T701. 
Fax:  (506)879^  E-mte^ 
tettasgccmpteerworld-com. 
Inckide  an  address  and  phone 
number  lor  nwneilaie  venhcation 
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Seriously. 

When  IBM  entered  the  personal  comput¬ 
er  business  in  1981,  Apple  Computer  — 
then  the  dominant  market  leader  and  mak¬ 
er  of  the  Apple  He  line  of  desktop  machines 
—  ran  a  full-page  advertisement  in  The  Wall  Street 


Welcome,  China 


foumaf  with  ihc  scream-  ~ 

inj{  headline:  "Welcome. 

IBM.  Seriously." 

I’m  guessing  wc*ll 
see  no  such  ads  t'rom 
Hewlett-l*ackard  or  Dell 
greeting  the  arrival  of 
China's  Lenovo  Group 
after  its  SL25  billion  deal 
to  buy  IBM's  PC  busi-  mmm 

ness.  That’s  because  un-  wodtfi 
like  Apple  Computer’s  ^ 

smug  marketers  of  the 
early  1980s  (and.  need  I 
say.  beyond),  HP  and  Dell  know 
there’s  no  reason  to  anger  a  dragon 
moving  Into  your  neighborhood. 

Lenovo’s  acquisition  is  part  of  a 
long-term  strateg)-  by  the  company 


■MRMUkaCMVMtor- 
wwtfoMoralbi^. 
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and  its  backers  to  become  a  major  IT  I  ThinkPad"  or  “the  IBM  PC  from 


player  in  the  West.  It  changed  its 
name  olTicially  this  year  from  Leg¬ 
end  after  it  encountered  loo  many 
trademark  problems  in  Western 
countries.  Executives  knew  that  the 
new  name  had  to  be  easy  for  English 
speakers  to  pronounce.  1  think  they 
did  a  preny  fair  job  with  “Lenovo." 

The  company  is  also  working  with 
the  Chinese  giwemmeni  to  take  a 
pmminent  role  during  the  2008  Bei¬ 
jing  Summer  Olympics.  That’s  be¬ 
cause  it  rankles  government  and 
business  leaders  that  China  hasn’t 
produced  even  one  global  brand. 

The  nation  may  be  a  global  econom¬ 
ic  powerhouse,  but  none  of  its  prod¬ 
ucts  arc  household  names. 

Lenovo  plans  to  use  the  Olympics 
to  help  turn  its  name  into  something 
cUfser  to.  say.  CtK'a-CoIa  or  Nestle 
than.  well.  Lenovo  is  today.  But  be¬ 
fore  ii  can  buy  endless  spots  on  NBC 
Sptuis  to  promote  itself.  Lenovo  must 
have  Mtmething  the  world  wants  to 


I  ing  in  2008.  Lenovo  hopes  to  have 

personal  comput-  '  ,‘'18 

^  on  HP  and  Doll  with  its  owm  moniker. 
2  Computer  I  The  immediate  benefit  of  this 

2t  lender  nnd  mak-  !  Lenovo  knows 

j  1  ^  '  how  to  build  cheap  PCs.  Today  it 

desktop  machines  l  sells  a  decent  little  machine  for 
The  Wall  Street  1  can  apply  its  manufacturing 
I  prowess  to  benefit  you.  But  Lenovo 
buy.  Hence,  the  agreement  i  can’t  expect  to  become  a  global 
with  IBM.  I  brand  simply  by  putting  an  IBM 

Whether  Lenovo  can  I  product  in  your  hands  for  a  few 
succeed  with  IBM’s  PC  |  bucks  less.  If  that’s  the  company’s 
line  or  not.  China  is  mak-  I  game  plan,  figure  it  to  lose  big  in  its 
ing  it  clear  that  it  wants  I  global  branding  gamble, 
your  business  —  the  en-  j  Lenovo  needs  to  innovate.  IBM’s 
lerprise  IT  business.  It  PC  group  has  been  lackluster  of  late, 

_  W’snis  to  create  a  corpo-  slow  to  embrace  tablets  and  adopt 

rate  brand  that  you  will  laptop  features  that  users  appreciate. 

**t  iST  in.  because  col-  If  Lenovo  advances  the  state  of  the 

^  **  Icciively  your  budgets  art  on  PCs  by  integrating  features 

rttwi  pack  a  global  wallop,  one  that  IT  craves,  such  as  security  and 

that  can  carr\'  a  company  reliability,  while  holding  costs  down, 
to  worldwide  brand  status  quickly.  it  stands  a  good  chance  of  holding  on 
Lenovo  gets  to  use  the  IBM  brand  to  existing  IBM  PC  buyers  and  win- 
and  assorted  trademarks  for  five  ning  new  ones  to  the  Lenovo  brand, 
years.  Expect  to  see  lots  of  promo-  If  Umovo  fails  to  innovate  and  ex- 

nonal  ^lerial  touting  “the  Lenovo  tend  its  IBM  line.  FT  may  ver>'  well 

or  “the  IBM  PC  from  withdraw  its  welcome  mat.  And  Chi- 

■  a  couple  of  years.  But  by  na  will  need  to  restart  its  global 

■  pole  vaulters  and  the  j  brand  strategy  from  scratch.  O  51320 
ve  fini-shed  touring  the  ' 

md  have  started  compet-  f  Dw’hnmnlliOlfWilBiiiL 


Lenovo"  for  a  couple  of  years.  But  by 
the  time  the  pole  vaulters  and  the 
sprinters  have  fini.shed  touring  the 
Great  W'all  and  have  started  compet- 
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\1K(,INI  A  Iv'OHl'INs 

The  Industn^ 
We  Save  Could 
Be  Our  Own 

Between  meetings,  i 

was  catching  up  on  my 
reading  when  this  title 
•  caught  my  eye;  "Can  IT  Save 
This  Industry?"  I'd  never 
I  heard  of  IT  saving  a  company.  let  alone 
I  an  industr>-.  After  scanning  the  first 
I  page  and  finding  very  little  that  had  to 
I  do  with  IT.  I  reached  the  phone  and 
I  called  my  compan> ’s  head  of  marketing, 

I  She's  a  London  School  of  Economics 
I  graduate  and  a  former  Andersen  em- 
ployec,  so  I  knew  I  could  count  on  her 
I  for  a  quick  and  thoughtful  comment. 

I  After  exchanging  a  few  pleasantries 
,  and  warning  her  that  my  question 
,  didn’t  have  anything  to  do  with  work. 

1  told  her  about  the  article  that  had 
caught  my  aiicntion  and  asked  her  if 
she  knc\»-  of  a  case  in 
which  IT  had  saved 
an  industry  or  a 
company.  Five  sec-  ^ 

onds  of  silence  fol-  w 

lowed.  I  had  to  smile, 
and  I  told  her  that 
her  answer  wouldn’t 
change  the  priority 
of  our  projects  for 
marketing.  She  mimna  mmm  Is  CIO 

laughed,  but  then  she  mansoing  dirscto# 
said. -Tho«;  titles 

...  . .  rinaneing  in  San  Fran- 

lust  irritate  me.  Man-  cuai.  CooucI  Itw  «I 
agemcnl  is  what  .jijOuttiJni  im 

saves  companies; 

leadership  is  what  savc.s  industries.  FT 
is  an  enabler." 

Wc  spoke  about  IVtcr  Drueker. 
lames  Collins  and  others  whi>se  re¬ 
search  demonstrates  that  it's  all  about 
m.anagemcnt.  We  both  had  meetings  to 
run  to,  so  I  thanked  her  and  hung  up. 

Why  had  my  colleague  found  that 
article’s  title  so  irritating? 

A  feu-  weeks  ago.  1  had  the  opportu¬ 
nity  h)  fill  in  for  our  chief  c.xecui>ve  at 
a  studcnt-loan-industry  CEO  confer¬ 
ence.  It  was  a  .small  gathering,  and  I 
was  able  to  meet  most  of  the  CEOs  in 
attendance.  Upon  identifying  myself 
as  a  CIO.  I  would  receive  one  of  tAvo 
responses.  Former  CIOs  launched  into 
disoLsslons  ab«»ut  changes  in  the  stu¬ 
dent  loan  industry:  non-CIOs  pulled 
me  aside  to  confide  that  if  there  was 
one  area  of  their  businesses  that  ihcv 
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w  orried  aboui.  it  was  tcchnoto^iv-. 

What  concerned  the  CEOs  was  that 
their  businesses  were  completely  en-  I 
abled  by  technology;  without  IT.  they  I 
couldn't  compete.  It  wasn't  that  their  i 
IT  groups  were  incompetent  or  that 
they  had  any  immediate  problems,  but 
.ls  lawyers.  CPAs  and  former  salespeo¬ 
ple,  the  CEOs'  skills  lay  in  protecting  j 
and  growing  the  business.  They  feared  | 
that  the  very  expensive  IT  recommen¬ 
dations  they  were  approving  weren't 
gtting  to  be  beneficial.  They  needed 
their  I  f  staffs  to  understand  them  and  I 
their  busine*sses  in  addition  to  know-  : 
ing  IT.  I 

I  think  ihiit  when  we  in  IT  make  I 
claims  such  as  "IT  can  save  this  indus¬ 
try.”  other  e.xecutives  question  our  un-  I 
derstanding  of  what  makes  businesses  I 
succeed.  j 

As  CIOs,  we  spend  much  of  our  time  [ 
working  to  retain  and  improve  align¬ 
ment  between  IT  and  business.  In  part,  | 
we  do  this  by  translating.  We  translate  | 
business  goals  into  IT  projects  or  met-  j 
rics  and.  conversely,  translate  imprt've- 
ments  in  IT  into  business  opportuni¬ 
ties.  Sensational  words  in  article  titles 
that  irritate  or  create  doubt  rarely  help 
translators. 

Yes.  it  was  only  the  title  of  an  aniclc. 
a  few  words  that  wore  probably  chosen 
to  attract  readers.  Ycl  whenever  we  use 
words  that  irritate  and  raise  doubts 
about  our  skills,  we  reduce  our  eflfcc- 
tiveness  and  harm  ourselves  and  our 
industry.  Let's  be  the  best  we  can  be 
and  choose  words  that  reinforce  in  the 
minds  of  our  peers  and  our  CEOs  that 
we  have  the  business  knowledge  they  | 
expect  of  us.  O  51241  j 
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Longhorn, 
Blogs,  Linux: 
Predicting  ’05 


IT'S  THAT  TIME  of  year. 
LEDs  flash  with  holiday 
cheer,  and  pundits  pontifi¬ 
cate  about  what  will  happen 
in  the  coming  months.  So 


once  again.  It's  time  for  me  to  offer  mv 
predictions  for  the  new  year. 

1.  Unghom  is  no  lonoer  the  answer  (or 
even  the  question}.  There  was  too  much 
Longhorn  hype  in  the  past  year  and 
not  enough  details.  Look  for  Microsoft 


to  retreat  from  the  "It  will 
be  fixed  added  in  lA*ng- 
horn"  mantra  and  make 
more  attempts  to  keep  the 
focus  on  Windows  .XP. 

2.  PDAs  will  become  passe. 
Uisconnected  ones,  that  is. 

Over  time,  the  real  action 
will  be  moving  core  PILA 
funeli4>njlit\.  centered  on 
pers<»nal  information  man¬ 
agement.  to  other  devices 
such  as  cell  phones,  lliis 
will  c.iuse  m.iior  M'  head¬ 
aches.  since  few  cell  phones 
are  contndled  by  IT  the.se- 
days. 

3.  More  people  will  lose  their 
jobs  over  their  weblogs.  It's 
happened  already,  and  it 
will  happen  again.  If  you're 
posting  about  your  job  4>r 
employer  without  eonseni. 
y»)u’re  taking  a  lot  of  risk  with  ymir 
future. 

4.  But  more  corporations  will  create  offi¬ 
cial  blogs.  Corporations  have  seen  the 
webU^  light,  and  bUigs  will  become 
common  for  business  u.se.  Unfortu¬ 
nately.  far  uk»  many  of  these  efforts 
will  just  be  marketing  Huff  disguised 
as  weblogs. 

5.  Security  HID  wfll  drive  IT  poicy.  With 
all  the  fear  about  pcc'ple  using  il\>ds 
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New  York.  Contact  him 


His  weblog  and  RSS 
lead  are  at 
Mpy/tnitlogs. 
iopitefTes6afcti.com/ 
anaJysts/gartenberg 


.md  Hash  memrirx  devices 
t«>  walk  off  with  e44rpi*rate 
data,  IT  will  he  forced  i4> 
t.ike  niiire  nractmi-m  me.i- 
sures  against  users.  I  \peci 
lo  see  rigid  policies  aNnii 
commingling  persnnal  atul 
business  techruiltigics,  and 
bans  .»n  UsH  Hash  disks 
and  the  like 

6.  Wi-Fi  wiH  be  ubiquitous, 
but  not  in  the  workplace.  W  i  Ti 

is  reajih  .i\  ail, able  in  pub 
he  pl.ici.'s  such  js  coffee 
shtips.  airp<*ns  and  luuels 
IT  sh4*ps.  Iii*wc\er.  w  ill 
slow  dcpliiymcnis  a  bit 
twer  fears  of  se-curity  I  nd 
users  will  lak*.-  m.iilcrs  iiit«' 
their  ow  n  hands,  mi  expis  t 
to  see  lots  of  .id  hot  net 
works  springing  up. 

7.  VoIP  wH)  be  a  mainstream 
technology  for  business  users.  \'oice  over 
ll‘  Is  perhaps  the  hiniest  leehmdogy  m 
the  telecommunications  industry  to¬ 
day.  VolP-base-d  services  w  ill  gniw 
even  mv>re  as  a  mainstream  techmtUigN 
for  business  use.  E-\pcct  a  lot  of  e4»m- 
pciiiion  for  the  irilltons  of  miitutes  and 
billions  of  dollars'  worth  of \oice  calls 
that  business  users  make  each  year 

8.  Wireless  VoIP  will  stiR  be  nidte.  Ilu.' 
hype  and  press  around  voice  over 


wircU-ss  1  ANs  w.is  significant  in  ’(K>J 
E.xjvci  m>*re  h\  pe  .md  some  pilot 
prt'grams.  but  not  l.irgc growth  lor 
Vt.WI  AN 

9.  Linux  wiR  be  adopted  in  greater  num¬ 
bers  by  rr.  but  desktop  Linux  will  not.  I  imi ' 
is  .ilreads  a  mainsire.iin  s<.-rM  r  m*Iu 
lion  toe  man\  I  T  shops.  1  h.i!  suict-''- 
w.m  I  iraxel  twer  ti*  the  desktop,  how 
4-\er.  1  4  44  1  mush  fr.ignieni.tlion.  4 14m 
billed  wirli.i  lack  <'t  cntu  .il  ,li-skt4.p 
.ipplic.itions  .ind  incre.ising  dcpi-ii 
deuce  4411  the  \\  indiiws  platl44rni.  w  ill 
preLeni  desktop  I  inu\  .iJiipin.ii  trout 
ini.i4-;isiMg  signific.inth. 

10.  Moore's  Law  will  sbn  be  irrelevant 
lust  as  in  .2IHI4.  speed  mcre.iMs.ire 
iiici-.  hut  ihes  w  ill  r4-m,im  hard  to  |usi  1- 
l\  Mr  most  business  us,-rs.  lor  wlioiti 
"last"  w.is  'i.ist  en4iugh‘  jr4»und  |'»'r'> 
Ihcniost  reie\.ini  m.irket  fiprf.isi  I't  s 
will  be  C44iisuiiiers  who  n«  ed  .ill  iIil 
speed  they  can  get  in  ihcir  digital 
homes  for  entertainment 

M44si  importantlv.  niav  we  .ill  rc.ip 
the  beiK-fits  oi'  iivhm4li  ig\  in  .1  new 
ye.ir  tilled  with  (hmiv.  prosp^-niy  .mJ 
pirsuive growth  Hesi  wishes  fiir  the 
holidays,  and  !4ee  >ou  in  Mii5  O  51136 
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Are  You  Over  K? 

■  HAVE  A  FEW  PROBLEMS  With 
Don  Tennant's  column  *6e!  Over 
ITlOuickUnk  50699).  First,  the  at¬ 
titude  expressed  m  the  title  and  the 
column  ilsetl  IS  unprofessional  I  ex¬ 
pect  lo  be  better  served  by  a  tour- 
nalist.  Second,  anyone  with  experi¬ 
ence  ol  real-world  corporate  IT 
knows  that,  as  often  as  trot,  man 
agemenl  makes  sborisighled  d^i- 
sions  about  outsourcing  Shaving 
money  off  a  budget  lor  a  fmanoai 
year  or  even  lor  only  a  quarter,  is 
sometimes  all  that  matters  to  man 
agemenl  Third,  cwnpibv}  and 
tvhrne  are  two  different  words  Ac¬ 
cusing  laid-off  rr  workers  of  «4)in- 
ing  IS  not  only  insulting,  it  is  also  in¬ 
accurate.  I  wonder  how  you  might 
react  il  suddenly  your  (ob  were 
farmed  out  to  someone  half  your 
age  making  pennies  lo  your  dollar 
Ken  Shelby 
Srmers,  N.Y. 

I'LL  ATOrOET  Over  it'  Nol  as  long 
as  I  can  get  around  it.  anyway  I 


I  have  remade  my  career.  rnovKig 
'  frombemganelecironclechnician 
lo  providing  desktop  and  nelworh 
systems  service  I'm  qurte  proficient 
1  with  the  K^IPsurtfi.mtimaie  with 
Unix  and  Windows,  reasonably  con¬ 
versant  with  Macinlo^  (weN  enough 
to  fix  them  and  tune  Iheir  perky 
mance)  and  can  kill  oft  spyware  and 
I  viruses  manualy  if  necessary 
I  Is  outsourcing  good’ In  some 
cases.  Cm  certain  d  ts.  In  others  it 
isn't  The  planrvng  and  implemen- 
■  lation  ot  It  swhai  IS  important  It's 
important  to  study  whether  out- 
sourang  truly  is  a  good  N  w>th  the 
business  needs  and  rl  theoutsourc 
•ng  vendor  is  stable  and  knowl- 
,  edgeable  It's  what  our  compelt 
I  tors  are  doing’ isnT  a  good  enough 
'  reason 

I  think  the  wor^  ol  this  trend  is 
'  behind  us.  Now  we  re  into  a  rebal¬ 
ancing  phase  In  10  years,  this  wilt 
be  a  mere  footnote  in  the  IT  htstory 
books  whereas  it  currently  <s  a 
I  paintulexpenence  The  pendulum 
j  will  swing  back  and  forth,  then  hnd 
I  the  balance  otnecessily  and  utiitty 


Well  back  to  Imding  a  new  iob. 
Since  my  last  oontract  ended  up  out 
sourced  to  a  fully  slatted  company 
Stephen  P.  Villano 

/Yiilui/t'lphiu 

Most  OF  the  discussions 
about  IT  4utsou*ong  are 
based  on  one  lataAv  hawed  con 
cept  that  Amencan  businesses  sfiN 
do  actual  cost-benefx  analyses 
when  choosing  a  course  of  acivm 
The  Idea  that  a  company  writ  sacn- 
hce  the  Quarter's  earnings  for  tut lac 
benctits  s.  as  Alberto  Oon^alessaid 
about  the  Geneva  Convention 
’Quaintty  obsolete  *  Managenwm 
makes  all  (he  nghi  noises  ’Oua'ity 
IS  No  r  and 'We  strive  lor  e»cc' 
lence'  -  but  the  message  that  ijeis 
deItvereddOLvn  the  chans  'Gcl'i 
done  fast  and  cheap,  and  wel  iwy 
ry  about  tfic  lalfoul  later ' 

I  About  15  years  ago.  top  execu 
Wes  and  boards  of  directors  n  U  S 
I  corporations  lor  all  practical  purpos¬ 
es  wenl  into  business  tor  them 
selves  Between  iheir  stock-option 
plans,  obscene  compensation 


I .  packages  and  the  occasiorW  ven 
,  dor  kickback,  who  needs  lo  worry 
about  (he  long-term  health  of  an 
oroanuaixyi*?  American  workers 
can  be  mnovarive.  seil-starting  and 
button  cute,  but  *1  they  won't  work 
lor  a  Bombay  salary  with  no  heaRh 
insurance,  out  they  go  They  can  ai 
ways  gel  lobs  mowing  lawns  lor 
(hose  MegaCorp  executives  who  re 
tired  on  thry  golden  parachuies 
Shay  Lynn 

I>uriihd.-<k-  aJminiNfriKiir. 
r.rtvmviMiJ  Tiffijgi'.  ( .«ito 

COMPUTERWORLO  welcomes 
cornmems  from  Its  readers  Letters 
wi  be  edKed  for  bteviiy  and  clarity 
They  should  be  addressed  to 
Jamie  Lckic.tettaseduoi  (ktm- 
puterwortd.  PO  Box  9171  ISpeen 
Stroet  Framingham  Mass  01701 
Fax  (508)679  4843  E  rnait 
letters -rcomouterwortd  com 
:  Include  an  address  and  phone  ' 

I  number  tor  mvnedialevenficalxjn 

OF01  rnore  eners  on  (Tiese  and 
OtM  topes  00(0 
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ROBUST  OBJECTS 
AND  ROBUST  SQl 


A  FREE  OFFER  TO  LOOK 
KTARETTERORIARASE 

For  your  next  generation  of  applications,  a  development  environment  that  dramatically 

move  to  the  next  generation  of  database  reduces  the  time  to  build  and  modify  Web 

technology.  We’re  offering  a  free,  fully  functional,  applications. 

non-expiring  copy  of  Cache,  the  post-relational  The  reliability  of  Cache  has  been  proven  in 

database  that  uniquely  combines  advanced  “life-or-death”  applications  at  thousands  of  the 

*1?^  performance  SQL.  world’s  largest  hospitals.  With  its  high  performance 

With  Cache,  no  mapping  is  required  between  and  low  maintenance.  Cache  delivers  your  vision 
object  and  relational  views  of  data.  Which  of  a  better  DBMS. 

means  huge  savings  in  both  development  and  We  are  InterSystems  -  a  specialist  in  data  manage¬ 
processing  time.  ment  for  over  twenty-six  years,  providing  24x7 

Applications  built  on  Cache  are  massively  support  to  4  million  users  in  88  countries.  Cache  is 

scalable  and  lightning-fast.  Plus,  they  require  available  for  Windows,  OpenVMS,  Linux  and  major 

minimal  or  no  daubase  administration.  UNIX  platforms,  and  it  is  deployed  on  systems  rang- 

More  than  just  a  database  system,  Cache  has  ing  from  two  to  over  10,000  simultaneous  users 


InterSystems  ^ 

Et  CACHE 

Make  Applications  Faster 

Try  a  better  dattOase.  mr  free. 

Download  a  free,  fiiUy-ftinctional,  non-expiring  cqiy  of  Cache  or  request  it  on  CD  at  www.  InterSystems-com  /Fret- 
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Microsoft  Repo^  For  Bl  Duty 

Microsoft’s  Reporting  Services  tool 
isn’t  quite  ready  for  business  users 
yet,  but  it’s  causing  a  commotion  in 
the  business  intelligence  market. 

P^26 


QUICKSTUOY 

VANs 

Value-added  networks  are  communication  net* 
woilis  supplied  and  managed  by  third-party  com¬ 
panies  that  facilitate  electronic  data  interchange, 
Web  services  and  transaction  delivery  by  provid¬ 
ing  extra  networking  services.  Page  30 


SECURITY  MANRSER'S  JOURNAL 

Securf  D  Rollout  CaHs  for  Planning 

With  two-f^or  authentication  about  to  roll 
out  to  the  masses,  a  step-by-step  plan  is 
drawn  up.  You’ve  got  to  think  ahead  if  you're 
going  to  introduce  5,000  users  to  something 
new,  says  Mathias  Thurman.  Page  32 


Putting 

THEPIECESr 

Together 

Users  are  still  looking  for  ways  to  fully 
integrate  and  automate  information 
life-cycle  management  technologies. 


INFORMATION  LIFE-CYCLE  manage¬ 
ment  (ILM)  holds  the  promise  of 
automating  storage  from  the  mo¬ 
ment  data  is  created  by  business 
applications  to  the  time  it’s  delet¬ 
ed  from  digital  tapes  stored  in  under¬ 
ground  vaults.  But  the  technology  may 
never  realize  its  ftill  potential  without 
the  automation  of  business  rules  and 
processes,  or  standards  to  tie  heteroge¬ 
neous  storage-area  networks  (SAN) 
and  networic-attached  storage  t(^;etber 
into  a  ti^t  mesh  of  resources  ftom 
which  to  draw,  say  users  and  analysts. 

The  limitations  of  ILM  are  now  ap¬ 
parent  even  in  its  success  stories.  John 
Halamka.  CIO  at  Boston-based  Care- 
Group  Inc.,  says  the  ILM  architecture 
he  built  saved  his  hospital  manage- 
m»it  company  more  than  $1  million  by 
allowing  him  to  avoid  the  purchase  of 


high-performance  systems  to  store 
older  X-ray  images  and  other  data  that 
isn’t  critical  but  still  needs  to  be  readi¬ 
ly  accessible. 

Halamka  says  only  about  20%  of  the 
data  in  his  Oracle  database  is  active, 
and  the  rest  can  be  relegated  to  Tier  2 
storage.  *”1116  value  of  a  payroll  check 
today  is  very  important,  but  a  year  af¬ 
ter  W-2$  are  issued  —  weU,  we  can 
move  off  to  different  storage.”  be  says. 

The  CareGroiq)  ILM  architecture, 
which  tO(^  ft)ur  years  to  build,  auto¬ 
matically  migrates  data  through  four 
levels  of  storage,  each  less  expensive 
and  slower-performing  than  the  last 

Halamka’s  IT  tgam  wrote  its  own 
middleware  to  perform  the  data  migra¬ 
tion  with  radiology  image  manage¬ 
ment  software  from  (General  Electric 
Cfo.  and  Veritas  Software  Corp.’s  appli¬ 


cation  management  software,  which 
monitors  the  performance  of  its  inter¬ 
nal  physician  Web  she,  Care  Web. 

Halamka’s  inftastructure  consists 
of  200  Wintel  servers  from  Hewlett- 
Packard  C^a  and  25  high-end  HP 
rp8400s  running  Unix.  Its  100TB  of 
storage  comprises  35TB  of  Synunetrix 
arrays,  35TB  of  Clariion  CX600  arrays 
and  30TB  of  Celerra  network-attach^ 
storage  ft>r  ftle  serving,  all  from  EMC 
Corp.  A  Powderhoro  tape  library  from 
Storage  Technology  Cforp.  is  used 
for  loi^erm  archival  storage.  A  pair 
of  112-port  MDS  9509  switches  from 
Cisco  Systems  Inc.  provides  a  layer 
of  abstraction  between  application 
servers  and  back-end  storage,  allowing 
capacity  to  be  served  up  as  if  from  a 
single  pool  instead  of  many  arrays. 

Halamka  cobbled  together  his  archi¬ 


tecture  and  acknowlei^es  that  not 
every  company  could  afford  hs  S3  mil¬ 
lion  price  tag,  wdiich  included  software 
and  hardware.  But  be  says  it  was 
cheaper  than  the  alternative. 

The  state  of  Massachusetts  requires 
C^areGroup  to  keep  clinical  records  for 
up  to  30  years.  Halamka  says  he’d  love 
to  put  the  data  on  high-end  Symmetrix 
arrays,  ‘'but  Just  my  capital  budget  re¬ 
strictions  alone  are  going  to  require 
me  to  identify  triiat  data  is  mission- 
critical  and  [needed]  in  milliseconds 
and  what  data  is  not  so  mission-critical 
so  I  can  wah  a  few  seconds  to  retrieve 
it”  Halamka  is  sdll  addressing  e-mail 
backup  and  automating  his  tape- 
archival  infrastructure,  and  he  has  yet 
to  find  a  utility  that  will  automatically 
migrate  data  in  business  applications 
Conrinued  on  pQge  24 
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his  tiered  siorajic-  architecture. 

"I  run  l’ei>pleSi>ft  for  all  of  my  12.tKK> 
empknees'  payroll.  Wouldn't  it  be 
great  to  siay  after  ytni  cm  the  checks 
this  week.  ‘Do  we  really  need  all  the 
raw  data  that  generated  the  checks? 
Let's  move  that  off  into  archival  stor¬ 
age.'  ■■  Halamkd  says.  "Let's  just  say 
ILM  isn't  there  yet." 

Halamka  and  other  IT  managers  arc 
wailing  for  vendors  to  produce  hetenv 
gencous  data-migraiion  itnils.  which 
are  onlv  now  beginning  to  emerge  with 
the  Storage  Management  Initiative 
Spv'ciflcaiton.  known  as  SMl-S. 

But  pieecs  itf  ILM.  which  can  relieve 
systems  ^idministraiors  of  arduous 
manual  prv*cesses  and  pmduce  fast 
ROI.  do  exist  UKlay.  Vendors  s-ueh  a.s 
Princeton  Stfteeh  Inc..  OuterBay  Tech¬ 
nologies  Inc.  and  Applimation  Inc.  sell 
s*'ttware  that  will  remove  unused  or 
noness<*niial  data  fnwn  databases  and 
migrate  it  to  storage  based  on  business 
policies.  Losing  rules  orpines,  the  soft¬ 
ware  can  distinguish  K'twccn  opim 
and  cktsed  business  transactions.  i 

Policy-based  Archiving 

E-mail  archiving  twrls  from  compitnies 
such  a.s  Vcriia.s.  KVS  Inc.,  ^ntaz  Inc..  ^ 
Connected  Corp..  and  EMC  s  U'gaio 
Sttftwarc  division  use  policies  to  auhv 
matkally  move  e-mail  and  attachments 
out  of  applications  such  as  Exchange, 
OuiliHrk  and  Lotus  Notes  onto  disk  or 
tape,  which  can  then  be  searched. 

Hut  still  missing  in  third-party  soft¬ 
ware  for  ILM  is  the  automation  of  busi- 
nes.s  processes  and  standards  to  tie 
hciemgcni.'ous  SANs  together. 

Tape  library  manufacturer  Adv-anced 
Digital  Information  Corp.  in  Redmond. 
Wash.,  plaas  to  release  an  upgrade  this 
month  to  its  Paihlight  VX  appliance 
that  will  pa*sent  a  single  management 
interface  between  EMC  Clariion  disk 
arrays  and  its  ow  n  tape  libraries  as 
well  3.S  librario-s  from  StorageTek.  But 
that  addresses  only  hicrarchal  storage 
management. 

The  industry  must  change  how  it 
lindvs  .It  storage  management  and  op-  i 
erations.  say  analysts  and  usc'rs.  i 

"U'f's  work  from  the  basis  of  busi¬ 
ness  requirements  and  business  prac¬ 
tices,'*  says  Mike  Peterson,  president  of 
Strategic  Research  Corp.  in  Santa  Bar¬ 
bara.  Calif.,  and  program  director  of 
the  Storage  Networking  Industry  Asst>- 
ciation's  f.SNlA)  Data  Management  Fo¬ 
rum.  "We  have  to  iastrument  the  infra¬ 
structure  so  it  can  be  operated  auto¬ 
matically.  Wc  have  to  mtwe  back  to 
basics." 

"It's  hard  Ibr  us  to  imagine  thinking 
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about  this  as  a  storage  problem."  says 
Kate  Kristenson.  vice  president  of  in¬ 
formation  product  support  .it  inovant 
LLC.  Visa  International  Inc.’s  IT  orga¬ 
nization.  "You  have  to  think  of  it  as  a 
systems  integration  problem.  The  op¬ 
erating  systcrtjs  have  a  mie  to  play.  The  [ 
application  package's  have  a  role  to 
play.  The  database  has  a  role  to  play. 

Thc  real  challenge  is  how  do  you  think 
through  the  application  integration 
end  to  end." 

Fiwicr  City.  Calif.-based  Visa  spent 
14  months  chrHwing  vendors  when  it 
built  a  130TB  relational  d.atabase  and 
a  -SAN  to  support  U.  Upgrades  to  the 
database  went  online  in  .September. 

The  database  is  the  data  store  for  .^)0 
million  transactions  per  day.  Visa 
liKtkc'd  for  vendors  that  would  tailor 
their  st>fiwarc  to  its  ILM  needs  and 
lake  responsibility  to  grow  along  with 
the  company.  Kristenson  says. 


I  "Wc'vc  been  able  to  influence  the 
I  development  of  the  technology  from 
our  vendors.  'ITui  has  saved  us  on  de¬ 
velopment  time  internally,"  she  says. 

VLs.i  uses  e.xtract.  transform  and  load 
tools  from  Lexington.  Mass.-based  Ab 
Initio  Software  Corp.  to  perform  near- 
a*al-iime  analysis  of  data  K'ing  stored 
in  the  relational  database. 

Data  generated  in  that  database  is 
stored  in  several  tiers  —  from  120TB 
of  high-|>etformance  Symmetrix  and 
70TB  of  IBM  FAStT  midrange  disk  ar¬ 
rays  to  tape  libraries  —  for  real-time  or 
near-real-time  retrieval  for  six  months. 

Visa  spent  three  y’cars  creating  its 
relational  database  and  tiered  storage 
infrastructure.  Prior  to  that,  data  was 
siloed  by  business  unit  and  couldn’t  be 
viewed  in  real  time. 

"We’n*  now  moving  to  the  point 
where  we  have  all  the  fundamental 
data  in  one  place,  and  we're  now  using 
it  to  drive  new’  busines,s  decisions." 
says  Joel  Mittler.  senior  vice  president 
of  information  senices  at  Inovant. 

After  transactional  data  has  been 
viewable  in  real  lime  on  disk  for  six 
months,  it's  automatically  migrated  to 
StorageTek  tape  libraries  that  hold  up 
to  2  petabytes.  Administrators  can  re¬ 
trieve  information  in  minutes  from  (he 
librarit's.  After  two  and  a  half  years,  the 
tapes  are  shipped  off-site,  and  retriev- 
j  ing  that  data  can  take  a  day  or  more. 

Storage  resi>urcc  management 
(SRM)  tools  —  software  that  can  re¬ 
port  on  dex'ices,  SAN  utilization  rates 
and  where  business  applications  ac¬ 
cess  and  store  data  on  arrays  —  arc 
essential  building  blocks  in  ILM  archi¬ 
tectures.  Without  them,  administrators 
are  flying  blind  when  it  comes  to  the 
efficiency  and  utilization  of  their  stor¬ 


age  infrastructures,  analysis  say. 

According  to  Bill  North,  an  analyst  at 
IDC  in  Framingham.  Mass.,  SRM  soft¬ 
ware  will  be  the  fastest  growing  storage 
software  segment  through  2008. 

Currently,  storage  vendors  such  as 
EMC.  IBM  and  Hitachi  Data  Systems 
Corp.  have  products  that  operate  with¬ 
in  homogeneous  islands  of  storage  that 
can  perform  policy-based  migration  of 
data  or  ILM.  But  products  are  emerg¬ 
ing  that  can  migrate  data  between 
competing  vendors’  machines.  Even 
when  the  technology  is  available  to  lie 
the  pieces  of  ILM  together,  how’cver. 
users  may  be  slow  to  embrace  it. 

Gary  Theus.  a  field  support  supervi¬ 
sor  at  Thompson  Hine  LLP.  a  Cleve¬ 
land-based  international  law  firm  w  ith 
about  360  attorneys,  is  in  the  middle  of 
deploying  6TB  of  Advanced  Technolo¬ 
gy’  Attachment  disk  storage  from  Ncx- 
s;in  Technologies  Inc.  in  Woodland 
Hills.  Calif.,  as  a  second  tier  of  storage 
below  high-end  systems  from  Hitachi. 
Theus  .says  his  company  paid  S.30.(K)0 
for  the  6TB  t»f  storage  on  an  ATABeast 
array  from  Nexsan.  whereas  he  paid 
S200.000  for  l.STB  of  Hitachi  storage. 

But  before  Theus  can  begin  thinking 
about  ILM,  he  has  to  agree  with  the 
business  side  on  how  to  classify  data  in 
order  to  determine  the  law  firm’s  re¬ 
tention  policies.  He  expects  to  tackle 
that  project  next  year.  (To  see  how- 
other  IT  executives  are  handling  that 
challenge,  go  to  QuickLink  50.W4.) 

Right  now,  like  in  many  IT  shops. 
Theus'  policy  for  the  deletion  of 
records  such  as  c-mails  is  “cwrything 
past  five  years." 

“We’ve  just  not  wTspped  our  arms 
around  IILM]  yet."  Theus  says. 

C  51097 


Data  Classification  Standards  Coming 


SNUEXPECTSTORQlASEbylhetnid- 
d»  of  2005 a  standard  tor  classKying  dais  in 
order  to  atom  4  acconino  lo  16  biainass  im- 
portanca 

In  October,  the  SMA  Data  Manaoernenl 
Forun  iMbished  a  toad  trap  ky  craalfng 
dards  to  tie  hatatoganeoua  storage  systame 
together,  b  also  pUilBhed  beto  practices  Md 
ctossied  the  development  sto^  of  IM. 
which  shoidd  help  users  dBlem*«  what  they 
hsra  to  do  to  acNeira  a  tdlly  storage  model 

OCaraiyslBiNDrlhagrBesthatsintoiy 
ir«  the  dBaOcalton  of  data  -  what  needs 
high  pertormancesloraoB  and  what  doesnl 
-  Is  oudet  to  any  IM  stratogy. 


*8eyond  when  a  He  has  been  created, 
modifiad  or  last  used,  you  need  to  know  who 
Hbatonosto.And\MndowB.Unaartontofn* 
harrw  apphahone  al  need  to  be  treaiad  sep¬ 
arately  because  el  the  data  boks  differenL* 
North  says. 

The  SMA  is  also  MirHnQ  on  a  standard  tor 
dtoa  senwes  -  such  as  badov  and  repica- 
ten  -  that  wf  become  part  of  to  odsttog 
Storage  Managernertf  inditeve  Spedfic^. 
That  wi  IMy  be  Old  in  2006.  says  Me 
f^teraon.  program  dimetor  of  toe  Data 
UenagemettFonin. 

"We’re  taleng  about  business  prxessas 
that  here  to  be  aitomalad  In  a  standards 


frahioaThal'scaledoperatensimnaga- 
mere.  That  produGf  doasri't  e»sl  yel' Iter- 
son  stoe. 

Ore  impednenitoprogressis  vendor 
puahtedcsayeftersorLViBrKtorsara  worried 
thatdtoeyatandawMze.  their  products  w*  be- 
come  corwnodMized.  Other  resBtaoce  corras 
from  faifimess  appiicaten  vendors,  he  says. 

For  eumpis.  database  vendors  don't  see 
anybwTtegraedtobuUiMlctoiorofflQad- 
ing  dato  kte  their  products.  Their  postten  is 
that  If  you  haie  rnote  rnonay  and  can  throw  d 
at  more  CPUs  and  storage,  then  it  doasnl 
rmiea  ttflarance,*  Peiaiaon  says. 

-  Lucas  kharian 
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Condnued  from  page  21 

onto  his  tiered  stor^  architecture. 

“I  run  PeopleSoft  for  alJ  of  my  12.000 
employees'  payroll.  Wouldn’t  it  be 
great  to  say  after  you  cut  the  checks 
this  week.  'Do  we  really  need  all  the 
raw  data  that  generated  the  checks? 
Let's  move  that  oft  into  archival  stor¬ 
age.'  ”  Halamka  says.  “Let’s  just  say 
ILM  isn't  there  yet.“ 

Halamka  and  other  IT  managers  are 
waitii^  for  vendors  to  produce  hetero¬ 
geneous  data-migratioa  tools,  which 
are  only  now  beginning  to  emerge  with 
the  Storage  Management  Initiative 
Specifkatioo,  known  as  SMI-S. 

But  pieces  of  ILM.  which  can  relieve 
systems  administrators  of  arduous 
manual  processes  and  produce  fast 
ROL  do  exist  today.  Vtodors  such  as 
Princeton  Softech  Inc..  OuterBay  Tech¬ 
nologies  Inc.  and  Applimation  Inc.  sell 
software  that  will  remove  unused  or 
nonessential  data  Grom  databases  and 
migrate  it  to  storage  based  on  business 
policies.  Using  rules  ei^ines.  the  soft¬ 
ware  can  distinguish  between  open 
and  closed  business  transactions. 

Poicy-based  Archiving 

E-mail  archiving  tools  from  companies 
such  as  Veritas.  KVS  Inc..  Zantaz  Inc.. 
Connected  Corp.,  and  EMC’s  Legato 
Software  division  use  policies  to  auto¬ 
matically  move  e-mail  and  attachments 
out  of  applications  such  as  Exchange. 
Outlook  and  Lotus  Notes  onto  disk  or 
tape,  which  can  then  be  searched. 

But  still  missing  in  third-party  soft¬ 
ware  for  ILM  is  the  automation  of  busi¬ 
ness  processes  and  standards  to  tie 
heterogeneous  SANs  together. 

Ihpe  library  manufacturer  Advanced 
Digital  Information  Corp.  in  Redmond. 
Washo  plans  to  release  an  upgrade  this 
month  to  its  Pathlight  VX  appliance 
that  will  present  a  single  man^ment 
interGace  between  EMC  Clarikm  d»sk 
arrays  and  its  own  tape  libraries  as 
well  as  libraries  from  StorageTek.  But 
that  addresses  only  hierarchal  stor^e 
management. 

The  industry  must  change  how  it 
looks  at  storage  management  and  op¬ 
erations,  say  analysts  and  users. 

“Let's  work  frx>m  the  basts  of  busi¬ 
ness  requirements  and  business  prac¬ 
tices.”  says  Mike  Peterson,  president  of 
Strategic  Research  Corp.  in  Santa  Bar¬ 
bara.  Calif,  and  program  director  o( 
the  Storage  Networiung  Industry  Asso- 
ciatkm's  (SNIA)  Data  Man^ement  Fo¬ 
rum.  “We  have  to  instrument  the  infra¬ 
structure  so  it  can  be  operated  auto¬ 
matically.  We  have  to  move  back  to 
basics.” 

”lt’s  hard  for  us  to  imagine  rhinittng 
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about  this  as  a  storage  problem.”  says 
Kate  Kristenson.  vice  president  of  in- 
formation  product  support  at  Inovant 
LLC,  Visa  International  lnc.‘s  IT  orga¬ 
nization.  “You  have  to  think  of  it  as  a 
systems  integration  problem.  The  op¬ 
erating  systems  have  a  role  to  play.  The 
application  packages  have  a  role  to 
play.  The  database  has  a  role  to  play. 
The  real  challenge  is  bow  do  you  think 
through  the  application  integration 
end  to  end.” 

Foster  City.  Calif. -based  Visa  spent 
14  months  choosing  vendors  when  it 
built  a  150TB  relational  database  and 
a  SAN  to  support  it  Upgrades  to  the 
database  went  online  in  September. 

The  database  is  the  data  store  for  300 
million  transactions  per  day.  Visa 
looked  for  vendors  that  would  tailor 
their  software  to  its  DM  needs  and 
take  re^>onsibiiity  to  grow  along  with 
the  company.  Kristenson  says. 


“We’ve  been  able  to  iniliience  the 
development  of  the  technology  from 
our  vendors.  That  has  saved  us  on  de¬ 
velopment  time  internally.”  she  says. 

Visa  uses  extract,  transform  and  load 
tools  Grom  Lexington,  Mass. -based  Ab 
Initio  Software  Corp.  to  perform  near- 
real-time  analysis  of  data  being  stored 
in  the  relational  database. 

Data  generated  in  that  database  is 
stored  in  several  tiers  —  from  120TB 
of  hi^-performance  Symmetrix  and 
70TB  of  IBM  FAStT  midrange  dkW  ar¬ 
rays  to  tape  libraries  —  for  real-time  or 
near-real-time  retrieval  for  six  months. 

Visa  spent  three  years  creating  its 
relatitmal  database  and  tiered  storage 
mfrastructure.  Prior  to  that,  data  was 
siloed  by  business  unit  and  couldn’t  be 
viewed  in  real  time. 

“We're  now  moving  to  the  point 
where  we  have  all  the  fundamental 
data  in  one  place,  and  we're  now  using 
h  to  drive  new  business  decisions,” 
says  Joel  Mittler,  senior  vice  president 
of  information  services  at  Inovant. 

After  transactional  data  has  been  ' 
viewable  in  real  time  on  disk  for  six 
months,  it's  automatically  migrated  to 
StorageTek  tape  libraries  that  bold  up 
to  2  petabytes.  Administrators  can  re¬ 
trieve  information  in  minutes  from  the 
libraries.  After  two  and  a  half  years,  the 
tapes  are  shipped  off-site,  and  retriev¬ 
ing  that  data  can  take  a  day  or  more. 

Storage  resource  management 
(SRM)  tools  —  software  that  can  re¬ 
port  on  device  SAN  utilization  rates 
and  where  business  applications  ac¬ 
cess  and  store  data  on  arrays  —  are 
essMitial  building  blocks  in  DM  archi¬ 
tectures.  Without  them,  administrators 
are  flying  blind  when  it  comes  to  the 
efficieiicy  and  utilization  of  their  stor¬ 


age  infrastructures,  analysts  say. 

According  to  Bill  North,  an  analyst  at 
IDC  in  Framingham.  Mass.,  SRM  soft¬ 
ware  will  be  the  fastest  growing  storage 
software  segment  through  2008. 

Currently,  storage  vendors  such  as 
EMC.  IBM  and  Hitachi  Data  Systems 
Corp.  have  products  that  operate  with¬ 
in  homogeneous  islands  of  storage  that 
can  perform  policy-based  migration  of 
data  or  ILM.  But  products  are  emerg¬ 
ing  that  can  migrate  data  between 
competing  vendors’  machines.  Even 
when  the  technology  is  available  to  tie 
the  pieces  of  ILM  together,  however, 
users  may  be  slow  to  embrace  it 

Gary  Theus,  a  field  support  supervi¬ 
sor  at  Thompson  Hine  LLP.  a  Cleve¬ 
land-based  international  law  firm  with 
about  360  attorneys,  is  in  the  middle  of 
deploying  6TB  of  Advanced  Technolo¬ 
gy  Attachment  disk  storage  from  Nex- 
san  Technologies  Inc.  in  Woodland 
Hills,  Calif,  as  a  second  tier  of  storage 
below  high-end  systems  from  Hitachi 
Theus  says  his  company  paid  S30.000 
for  the  6TB  of  storage  on  an  ATABeast 
array  from  Nexsan.  whereas  he  paid 
$200,000  for  L5TB  of  Hitachi  storage. 

But  before  Theus  can  begin  thiniring 
about  ILM,  be  has  to  agree  with  the 
business  side  on  how  to  classify  data  in 
order  to  determine  the  law  firm's  re¬ 
tention  policies.  He  expects  to  tackle 
that  project  next  year.  (To  see  bow 
other  IT  executives  are  handling  that 
challenge,  go  to  QuickLink  50394.) 

Right  now,  like  in  many  IT  shops, 
Theus’  policy  for  the  delkion  of 
records  such  as  e-mails  is  “everything 
past  five  years.” 

“We've  iust  not  wrapped  our  arms 
around  [DM]  yet,"  Theus  says. 
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Profiles  in  Business  Mobility  Deploying  Your  Team 


Enable  better  teamwork,  - 
wherever  your  team  needs  to  work. 


Business  can  happen  anytime, 
anywhere.  And  with  Nokia, 
you’ll  have  the  advanced 

"»•  wo*w 

f  >  messaging  devices  and  secure  mobile  connectivity 
offerings  you  need  to  make  sure  your  team  arrives  fully 
conneaed — and  ready  to  work.  So  whether  you're  deploying 
a  team  for  a  big  presentation,  setting  up  a  remote  office, 
or  visiting  a  customer,  Nokia  mobility  solutions  ensure  that  your 
team  can  hit  the  ground  running. 


Learn  more  about  applying  a  mobility 
strategy  to  your  business.  Download  the 
“Small  Change,  Big  Impaa”  white  paper  at 
nokiaforbusiness.com 
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Connecting  People 


WITH  rrs  FREE  REPORTING 
SERVICES  SOFTWARE, 

THE  DESKTOP  DOMINATOR 
DISRUPTS  THE  REPORTING 
TOOLS LANDSCAPE. 

BY  HEATHER  HAVENSTEIN 


ROSOFTREPORTS 

sTtorbiduty 


WHEN  RESIDENTIAL  REAL  ESTATE  AGENCY 

Long  &  Foster  Cos.  decided  to  update 
the  way  it  prepares  financial  reports 
and  replace  a  system  it  bad  been  using 
for  20  years,  the  company  chose  Mi¬ 
crosoft  Corp.*s  first  reporting  tool  to  do  tbe  job. 

Long  &  Foster  catted  to  use  a  beta  version  of 
Microsoft's  Reporting  Services  (RS)  to  anchor  its 
entire  process  for  generating  financial  reports  for 
company  management,  even  though  other  tools 
had  been  on  the  market  for  years  —  and  some  even 


ship  with  Microsoft’s  own  SQL  Server  2000. 

“That  was  a  bold  and  to  some  degree  risky  move,” 
says  Mayur  Raichura,  the  company’s  director  of  in¬ 
formation  services. 

But  the  gamble  seems  to  have  paid  off  for  Fairfax, 
Va.-based  Loi^  &  Foster.  In  four  months,  it  devel¬ 
oped  40  different  reports  for  its  212  offices  using  Mi¬ 
crosoft’s  SQL  Server  2000  RS  —  e^ht  mnnth<  ahead 
of  the  schedule  projected  by  developers. 

Users  now  can  access  reports  instantaneously  over 
the  Web  instead  of  receiving  them  monthly.  Raichura 
estimates  that  the  company  is  saving  approximately 
$530,000  per  year  by  using  RS  in  lieu  of  paper  copies 
delivered  by  couriers. 

Long  &  Fbster  is  one  of  a  growing  number  of  com¬ 


panies  using  RS  to  create,  manage  and  publish  re¬ 
ports  ftom  data  pulled  ftom  a  data  warehouse.  Mi¬ 
crosoft  says  more  than  100,000  users  have  down¬ 
loaded  the  tool  since  its  introduction  in  January. 
Users  say  the  price  is  right  for  the  server-based  re¬ 
porting  platform:  It’s  free  for  S(^  Server  users  who 
need  to  run  only  one  instance  of  the  business  intelli¬ 
gence  database.  (If  they  need  more  instfln«»<,  they 
must  buy  more  server  licenses.)  Users  are  also  at¬ 
tracted  to  RS’s  ti^t  integration  with  the  \^ual  Stu¬ 
dio  J<Iet  development  environment. 

However;  while  RS  can  deliver  production-style 
reports  from  OLTP  database  queries,  it  can’t  provide 
management-style  reporting  designed  to  allow  users 
Continued  OR  page  28 


6  OF  THE  TOP  10  ISPs 
USE  IRONPORT. 
YOU  CAN,  TOO 
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Virus  Outbreaks? 
Believe  it. 

Today’s  email  borne  viruses  propagate  globally  in  hours  or  minutes,  much  faster 
than  traditional  defenses  can  react,  leaving  you  exposed  to  the  “reaction  time  gap’? 
IronPort’s  Virus  Outbreak  Filters'  stop  viruses  up  to  8  hours  before  traditional 
virus  definition  files  are  available,  literally  predicting  virus  attacks  before  they 
cause  harm.  This  astounding  solution  is  powered  by  a  series  of  proprietary  algorithms  that 
process  data  from  SenderBase'  the  world’s  first  and  largest  email  traffic  monitoring  network. 
Available  now  at  www.ironport.coiii/leader  * 

^p)  IRONPORT" 

Rebuilding  the  World’s  Email  Infrastructure. 


www.ironport.com/  leader 
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lo  author  their  own  reports.  Users  and 
analysts  alike  say  that  while  the  prod¬ 
uct’s  liyht  intevtration  with  .Net  is  help¬ 
ful  for  developers,  it  liKksoui  users 
who  don't  have  knowledge  of  the  de¬ 
velopment  plai/omt  Competitors  in 
the  repiming  arena,  including  Business 
Objects  SA.  Ctignos  Corp..  MiemStrat- 
egy  Inc.  and  Hyperion  Soluiiorts  Corp.. 
support  both  production  and  manage¬ 
ment  reporting. 

Nonetheless.  Long  tk  Rosier  and  oth¬ 
er  companies  are  making  R-S  a  corpo¬ 
rate  standard  for  reporting. 

For  example,  copper  producer 
Phelps  Dodge  Corp.  has  replaced  its 
Crystal  Reports  tools  (marketed  hy 
Business  Objects,  which  acquired 
Crystal  Decisions  late  last  year)  with 
RS.  which  now  serves  up  4(K)  to  500 
daily  financial  reports  to  managers, 
lames  Faith,  lead  engineer  at  the 
(lK)eniX'ba.scd  company,  says  RS  had 
an  advantage  because  it  was  was  avail¬ 
able  for  free  with  Phelps’  existing  S(iL 
Server  license  and  because  it  allowed 
the  company  to  push  Web-based  re¬ 
ports  to  users. 

"It  has  absolutely  changed  the  way 
we  do  our  reporting,’*  hiith  says.  “We 
can  have  it  so  it  automatically  e-mails 
out  to  u-sers ...  to  do  financial  report¬ 
ing  on  a  daily  basis.  It  is  very  file- 
based.  and  it  allows  you  to  move  from 
various  environments  pretty  seamless¬ 
ly.  It  takes  our  developers  no  time  at  all 
to  produce  ihe.se.  get  them  tested  .  - . 
and  into  pn>duction.‘* 

Cindi  Howson.  a  faculty  member  at 
The  Data  Warehousing  Institute  in 
Seattle  and  author  of  the  independent 
BlScorecard.cv»m  report,  which  evalu¬ 
ates  business  intelligence  I(h>1s.  said 
RS  is  mivst  likely  to  be  found  in  Mi¬ 
crosoft  shops,  given  its  tight  integra¬ 
tion  with  other  Micoisttfi  products. 


“If  your  standard  for  application 
servers  is  Microsoft-based,  then  defi¬ 
nitely  you  should  be  looking  at  the  Mi¬ 
crosoft  stack."  Howson  says.  “If  a  com¬ 
pany  has  decided  to  have  a  different 
application  server.  <*r  if  they’re  running 
all  on  Unix.  Microsoft  doesn’t  meet 
that  need." 

She  adds  that  RS  di>cs.  however, 
have  capabilities  that  other  popular 
reporting  tools  don’t,  such  as  a  data- 
driven  subscription  model. 

“IMicrosofi)  reuses  some  of  the 
components,  like  scheduling,  that  arc 
inherent  in  SQL  Server,"  she  says. 

“What  Microsoft  can  do  that  Cry.stal 
can't  do  is  have  multiple  data  sets  pop¬ 
ulate  a  report,  which  realty  creates  a 
dashboardlUce  report." 

Market  Shak&-up 

Microsoft  shmik  up  the  business  intel¬ 
ligence  market  in  200.^.  when  it  an¬ 
nounced  its  intentions  to  add  a  report¬ 
ing  tool  to  its  HI  stack,  which  already 
included  online  analytical  processing 
.tnd  extract,  transform  and  toad  tools. 
After  Microsoft  disclosed  its  plan. 
Businc'ss  Objects  acquired  reporting- 
tool  vendor  Crystal  Decisions.  Cognos 
rolled  out  its  own  reporting  tool,  and 
Hyperion  snapped  up  tool  vendor  Brio. 

Now.  Microsoft  Is  maneuvering  to 
expand  the  functionality  of  RS.  iHie 
new  features  will  debut  in  the  version 
of  RS  that  ships  with  5tQL  Server  2005 
(see  sidebar).  Microsoft  also  has  an¬ 
nounced  two  new  Report  Packs  report 
templates  that  allow  reporting  against 
its  CRM  and  Exchange  applicatioas. 

“Ytru  have  this  case  where  Microsoft 
u.scd  to  be  dependent  on  outside  ven¬ 
dors  like  Crystal  for  reporting.’’  says 
Rob  Helm,  an  analyst  at  Directions  on 
Micri>«k»fi.  an  independent  research 
firm  in  Kirkland.  Wash.  "Now'  it  has  an 
in-housc  product  that  looks  basically  i 


PLAYERS  PRODUCTS 

tfaior  Ytndon  of  proikictiim  «iery  ami  repwling  t0(^  (kv  querying  ()iTP 

managemsnt  query  and  rsporting  tods  (for  users  who  want  (0  author  their  own  reports): 


VENDOR 

1  PRODUCTION  TOOL 

MANAGEMENT  TOOL 

BusmeesObfacto 

Crystal  Reports  (aegurad 
homCnfSlal  Decisions) 

Business  Obiects  tor  desktop  authonng. 
Wefatolefligence  for  Wbb-based  authonng 

Cognos 

ReportNet 

ReportNet  OueryStudio 

ftlicrasofl 

Reporting  Services 

Not  availabie  until  SQL  Server 2005 ships 

MiCfoStfategy 

Report  Sendees 

Desktop  for  desklopauthonng. 

Web  for  Web  authonng 

Hyperion 

Reports  (tor  iinanoal  reporting) 
SQR  (acquired  trom  Bno) 

Intelligertce  (acquired  from  Brio) 

infermaticaCorp. 

Noneas^ilabie 

(tower  Analyzer 
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MKMOSOFT  B  MANEUVERMB  to 

broaden  the  appeal  of  Reporting  Services 
by  integrBtng  R  Into  more  products  and 
addinQ  new  features. 

The  company  has  atrsady  shipped  RS  in 
the  latest  version  of  its  MatsofI  Opera- 
lions  Manager.  And  Vtsual  Studio  2005  will 
include  emtedetabte  reporting  contra 
Mcrosoft  says  wi  alow  deveiopets  to 
more  eesiy  buid  appicaltons  wito  RS.  And 
RS  wi  be  inlegrated  into  the  next  version 
of  Mtorosoft’s  CRM  software. 

For  SQL  Server 2005  '  now  due  out 
next  sunvner  -  Mtorasoft  wl  add  an  MOX 
designer  Into  Reporting  Services  to  aHow 
enterprises  to  create  and  nmretatiofial  and 
OLAP  queries  agatost  SQL  Stever. 

The  mtBt  highly  artodpoted  improve¬ 
ment  staled  tor  RS  is  prabaUy  the  new  Re¬ 
port  BuWte.  Yvhich  wi  be  avefabie  in  SQL 
Server  2005.  Raport  Buldar  wi  Incorpo¬ 
rate  current  technotogy  wllh  an  endtiw 
query  and  report-euthortno  envronrnent 
that  has  dtag-andiJrop  features  that  are 
more  suitabto  lor  business  users. 

Most  analysts  wd  uaers  agree  that  RS's 
tagged  drawbadt  is  that  I  ts  mostly  iinited 
lo  devetopers  wtw  have  experience  In  M- 
cresoft's  Visuaf  Studio  .Net 

Report  BuMder  will  provide  the  type  of 
hfKtionabty  that  Hans  Rasmussen,  an  TT 


lo  be  pretty  much  ubiquitous  in  the 
Mienrsoft  producr  line.  It’s  gt>ing  to 
have  a  huge  impact  over  the  next  two 
to  three  years  simply  because  it  will 
ship  with  so  many  Microsoft  products." 

IVrhaps  the  biggest  erthancement 
will  come  when  Microsoft  adds  Report 
Builder  lo  RS  in  SQL  Server  2005.  Re¬ 
port  Builder  is  rebranded  technology' 
from  Active  V'iews  Inc.,  which  Micro¬ 
soft  acquired  earlier  this  year. 

“Report  Builder  will  go  after  that 
group  that  wants  to  come  in  and  build 
their  own  wport  or  modify  an  e.vlsting 
report  and  nui  have  to  live  in  the  Visual 
Studio  envm>nroeni.bui  more  impor- 
t.nntly  not  have  to  understand  the  data¬ 
base."  says  Alex  l*aync,  senior  product 
manager  on  Mkrosofi's  SL^L  Server 
team.  “I  can  drag  and  drop  report  enti¬ 
ties  onio  a  palette,  effectively  allowing 
me  lo  build  a  repon.  an  ad  hoc  report 
. .  but  I’m  browsing  a  semantic  layer 
—  I’m  not  building  it  off  a  database." 

Hut  despite  the  initial  bu^7  around 
Microsoft’s  entrance  into  the  a-poning 
world  and  the  new  features  planned 
for  RS.  some  users  haven’t  been  lured 
away  from  their  existing  tools. 

For  example,  the  Federal  Hitmc  la»an 
Bank  of  .San  Francisco,  a  Microsoft 
shop,  look  a  look  at  RS  but  opted  to 


prejed  taader  at  TDC  AS.  ssys  he  has  been 
MilingfwstocetheCtantahltaecarimin- 
cationscompanybeganusingRSinitanu- 
sy.  Rasmussen  says  he  «M6  sunmsad  to 
firid  that  the  designer  ireertace  of  RS  was  in 
Visuiri  StuSo.  meaning  end  usars  couktnT 
use  R  to  buM  reports.  SB.  he  says  he  has 
hi(^  hopes  tor  Report  Buildte.  wtach  Itt 
he  previewed. 

IboHiwpftal  with  this  interface  we  can 
push  Rapoiting  Settees  al  the  way  to  the 
end  users  in  the  business  kies.'' he  says. 

Rasmusaen  estimates  thta  by  using  Re¬ 
port  Buidar.  TDC  can  saw  up  to  $643,000 
'theamourRthecompmytaspandngan- 
nuMN  to  IcMiaa  a  Brio  reportino  tool 

WMeRaporlBuldorwRprovidethena- 
tiire  report-writtto  thte  «as  ffliaatoQ  from 
RS.  lha  ocajs  now  wi  be  on  Mtorasoft  Id 
present  bendwarits  and  CMBtomarqea 
studies  that  prove  RS  can  stend  up  to  the 
rigon  of  production  enterprise  and  anaiyuc 
reporting,  says  Forrester  Raseorch  anaf^ 
KeRhGfc. 

This  wd  take  tana,  and  praspectfve 
users  need  to  undostarid  that  even  though 
SOLServertaamteureandprownreta- 
Uonaf  dafabasa  management  qistam.  Re¬ 
porting  Sentoes  is  sM  brandW  and  reta- 
Irvefy  tmproven.*  he  says. 

-HutherHavenstein 


stick  with  its  Crystal  reporting  uk>Is. 
says  Rose  Kim.  the  bank’s  vice  presi¬ 
dent  of  application  development  and 
support. 

“Microsoft  is  doing  with  Reporting 
Service.s  what  they  do  with  everything 
else  —  they  are  introducing  it  mtw,  and 
in  three  to  four  years  time,  they  ma>’ 
have  all  the  industry-leading  features." 
Kim  says.  "For  now.  we're  looking  to 
continue  to  build  upon  the  umis  we 
already  have.  Part  of  it  Is  a  human  in¬ 
vestment  in  terms  of  training  and 
knowledge.  The  ability  to  become  agile 
and  proficient  at  a  particular  tool 
quires  some  time." 

In  addition,  users  should  be  awaa- 
that  while  RS  is  essentially  free  for 
SQL  users,  heavy  demands  for  report 
generation  may  require  enterprise's  i<» 
run  more  than  a  single  instance  of 
I  SQL  says  Keith  Gile.  an  analy.si  at  For- 
I  roster  Research  Inc.  "It  is  not  recom- 
merded  that  any  company  with  a  large 
report  librarj'  or  a  heavy  demand  for 
report  generation  use  a  single  instance 
of  SQL  Server  for  all  database  and  re¬ 
porting  activities."  Gile  says.  “Compa- 
I  nics  need  lo  understand  how  much  of 
I  an  additional  load  a  production-report¬ 
ing  environment  will  place  on  the  SQL 
\  Server  engine."  O  5tt23 
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Continued  from  page  26 
to  author  their  own  reports.  Users  and 
analysts  alike  say  that  while  the  prod¬ 
uct's  tight  integration  with  .Net  is  help¬ 
ful  for  developers,  it  locks  out  users 
wtto  don't  haw  knowledge  of  the  de¬ 
velopment  platform.  Competitors  in 
the  reportitig  arena,  including  Business 
Objects  SA.  Cognos  Corp..  MicroStrat- 
egy  Inc.  and  Hyperion  Solutions  Corp.. 
support  both  productioo  and  manage¬ 
ment  reporting. 

Nonetheless.  Long  &  Foster  and  oth¬ 
er  companies  are  making  RS  a  corpo¬ 
rate  standard  for  reporting. 

For  example,  copper  producer 
Phelps  Dod^  Oxp.  has  replaced  its 
Cry^  Reports  tools  (marketed  by 
Btmness  Objects,  whkh  acquired 
Crystal  Decisions  late  last  year)  with 
R5.  which  now  serves  up  400  to  SOO 
daily  nzuuxrial  reports  to  managers, 
lames  Faith,  lead  engineer  at  the 
Phoenix-based  company,  says  RS  had 
an  advantage  because  it  was  was  avail¬ 
able  for  free  with  Mtelps*  existing  S(^L 
Server  license  and  because  it  allowed 
the  company  to  push  Web-based  re¬ 
peats  to  users. 

It  has  absolutely  chai^d  the  way 
we  do  our  reporting,"  Faith  says.  "We 
can  have  it  so  h  automatically  e-mails 
out  to  users ...  to  do  financial  report¬ 
ing  on  a  daily  basis.  It  is  very  fUe- 
based,  and  it  allows  you  to  move  from 
various  environments  pretty  seamless¬ 
ly.  It  takes  our  developers  no  dme  at  all 
to  produce  these,  get  them  tested . . . 
and  into  production." 

Cindi  Howson,  a  faculty  member  at 
The  Data  Warehousing  Institute  in 
Seattle  and  author  o(  the  independent 
BlScorecanlcom  report,  which  evalu¬ 
ates  business  intelligence  tools,  said 
R5  is  most  likely  to  be  found  in  Mi¬ 
crosoft  shops,  given  its  tight  integra¬ 
tion  with  other  Microsoft  products. 


"If  your  standard  for  application 
servers  b  Microsoft-based,  then  defi¬ 
nitely  you  should  be  looking  at  the  Mi¬ 
crosoft  stack.”  Howson  says.  “If  a  com¬ 
pany  has  decided  to  have  a  different 
application  server,  or  if  they’re  running 
all  on  Unix.  Microsoft  doesn’t  meet 
that  need.” 

She  adds  that  RS  does,  however, 
have  capabilities  that  other  popular 
reporting  toob  don’t,  such  as  a  data- 
driven  subscription  model 

‘iMkrosoft]  reuses  some  of  the 
components,  like  scheduling,  that  are 
inherent  in  SQL  Server"  she  says. 
"What  Microsoft  can  do  that  C^tal 
can’t  do  b  have  multiple  data  sets  pop¬ 
ulate  a  report,  which  really  creates  a 
dashboardlike  report” 

Market  Shaks-up 

Microsoft  shook  up  t^  business  intel¬ 
ligence  maricet  in  2003,  when  it  an¬ 
nounced  its  intentions  to  add  a  report¬ 
ing  tool  to  its  BI  stack,  which  already 
included  online  analytical  processiig 
and  extract,  transform  and  load  tools. 
After  Microsoft  disclosed  its  plan. 
Business  Objects  acquired  reporting- 
tool  vendor  Crystal  Deebions.  Cognos 
rolled  out  its  own  reporting  tooL  and 
Hyperion  snapped  up  tool  vendor  Brio 

Now,  Microsoft  b  maneuvering  to 
expand  the  functionality  of  RS.  The 
new  features  will  debut  in  the  version 
of  RS  that  ships  with  SQL  Server  2005 
(see  ridebar).  Microsoft  also  has  an¬ 
nounced  two  new  Report  Packs  report 
templates  that  allow  reporting  against 
its  CRM  and  Exchange  applications. 

"You  have  thb  case  where  Microsoft 
used  to  be  dependent  on  outside  ven¬ 
dors  like  Crystal  for  reporting.”  says 
Rob  Helm,  an  analyst  at  EKrections  on 
Microsoft,  an  independent  research 
firm  in  Kirkland.  Wash.  "Now  it  has  an 
in-house  product  that  looks  basically 
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to  be  pretty  much  ubiquitous  in  the 
Microsoft  product  line.  It’s  going  to 
have  a  huge  impact  over  the  next  two 
to  three  years  simply  because  it  will 
ship  with  so  many  Microsoft  products." 

Perhaps  the  hugest  enhancement 
will  come  when  Microsoft  adds  Report 
Builder  to  RS  in  SQL  Server  2005.  Re¬ 
port  Builder  b  rebranded  technology 
from  Active  NHews  Inc.,  which  Micro¬ 
soft  acquired  earlier  thb  year. 

"Report  Builder  will  go  after  that 
group  that  wants  to  come  in  and  build 
their  own  report  or  modify  an  pvisring 
report  and  not  have  to  live  in  the  Visual 
Studio  environment,  but  more  impor¬ 
tantly  not  have  to  understand  the  data¬ 
base,”  says  Alex  Payne,  senior  product 
manager  on  Microsoft's  S(^L  Server 
team.  "I  can  drag  and  drop  report  enti¬ 
ties  onto  a  palette,  effectively  allowii^ 
me  to  build  a  report,  an  ad  hoc  report 
. . .  but  I’m  browsing  a  semantic  layer 
—  I'm  not  building  it  off  a  database." 

But  despite  the  initial  buzz  around 
Microsoft’s  entrance  into  the  reporting 
world  and  the  new  features  planned 
for  RS,  some  users  haven't  bWn  lured 
away  from  their  exiting  tools. 

For  example,  the  Federal  Home  Loan 
Bank  of  San  Francisco,  a  Microsoft 
shop,  took  a  look  at  RS  but  opted  to 


stick  with  its  Crystal  reporting  tools, 
says  Rose  Kim,  the  bank’s  vice  presi¬ 
dent  of  application  development  and 
siq>port. 

"Microsoft  b  doing  with  Reporting 
Services  what  they  do  with  evprything 
eUe  —  they  are  introducing  it  now.  and 
in  three  to  four  years  time,  they  may 
have  all  the  industry-leading  features,” 
Kim  says.  "For  now,  we’re  looking  to 
continue  to  build  upon  the  tools  we 
already  have.  Part  of  it  b  a  human  in¬ 
vestment  in  terms  of  training  and 
knowledge.  The  ability  to  become  agile 
and  proficient  at  a  particular  tool  re¬ 
quires  some  time.” 

In  addition,  users  should  be  aware 
that  while  RS  b  essentially  free  for 
SQL  users,  heavy  demands  for  report 
generation  may  require  enterprises  to 
run  more  than  a  single  instance  of 
SQL,  says  Keith  Gile,  an  analyst  at  For¬ 
rester  Research  Inc.  "It  b  not  recom¬ 
mended  that  any  company  with  a  large 
report  library  or  a  heavy  demand  for 
report  generation  use  a  single  instance 
of  SQL  Server  for  all  database  and  re¬ 
porting  activities,”  GUe  says.  "Compa¬ 
nies  need  to  understand  how  much  of 
an  additional  load  a  productiem-report- 
ing  environment  will  place  on  the  S<^L 
Server  engine.”  O  St^ 


6th  Annual 

COMPUTERWORLD 


IT  LEADERS 

CONFERENCE 


Mastering  the  IT/Business 

Connection 


The  nation’s  leading 
IT  executive  conference  for: 

•  CIOs,  CTOs  and  CSOs 

•  VPs  of  IT 

•  Enterprise  IT  Directors 


See  and  hear  from  Peter  Senge 
PETER  SENGE 

Senior  Lecturer.  Massachusetts  Institute 
of  Tedinotogy;  Co-Author  of  Pnaance: 
Human  Pwpoaa  and  the  Field  oi  the  Future 
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Get  advice  from  award-winning 
CIOs  and  industry  experts  on: 

*  CREATING  state-of-the-art 
infrastruc^re  to  expand  global 
business  value 

*  EXTENDING  flexible  £^d  secure 
supplier  and  customer  connections 

*  ADVANCING  best  practices  in  IT 
governance  and  staffing,  regulatory 
compliance  and  project  leadership 

*  DESIGNING  a  technology  roadmap 
to  ensure  future  competitive  advantage 
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CHARUE  FELD 

Former  CIO  &  eLeader,  Delta  Air  Lines 
Current  EVP.  ftxtfobo  Management  EOS 

PAUL  HIGDAY 

VR  rr  4  Program  Development 
Owens  4  Minor.  Inc 

THORNTON  A.  MAY 

Corporate  Futurist 

JOHN  C  MOON 

Corporate  VP  arxJ  CIO 
Ba;^  International  Inc 

I  RON  J.  PONDER 

I  Executive  VP  of  Information  Services 
i  and  CIO,  WeSf^t  Health  Networks.  Irtc 

BETTE  WALKER 

VP  and  CIO,  Delphi  Corp. 

I  IRA  WINKLER 

I  Ei^iert  in  Corporate  and  Computer  Security 
■  MhadSpm  Among  Us:  How  to  Stop  die 
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See  solubons  from  companies  indudirtg; 


To  register  or  for  more  information, 
visit  www.premierlOOxom/cwt 
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Computenwortcfs  Premier 
100  rr  Leaders  Conferer>ce 
attracts  the  technology  elite 
because  of  its  focus  ^ 
ma»mizing  the  business 
value  of  IT  J 

Susan  Unger 
Senior  VP  A  CIO 
DarmlerChrysler 


•«  I've  met  people  here  tt»at 
IVe  known  for  a  long  time 
and  others  I’ve  been  eager  to 
meet  for  years,  all  emerging 
in  one  place  .* 

William  Farrow 
Executive  VP  A  CIO 
Chicago  Board  of  Trade 


Peer  interaction  is  an 
invaluable  takeaway  from 
Computerwortd's  Premier 
1 00  IT  Leaders  Conference. 
There's  courage  in  knowing 
that  other  IT  leaders  are 
dealing  with  the  same  issues 
and  you  can  find  corollaries 
and  context  in  your 
interactions  here 

Curtis  Robb 
CIO 

Delta  Air  Lines 
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PREMIER 


IT  LEADERS 
CONFERENCE 


Where  IT  Executives  Exchange 
Innovative  Ideas  &  Strategies 


Crafted  by  Compute^vorld's  editors,  the  sixth  annual 
Premier  1 00  IT  Leaders  Conference  is  a  unique  and  com¬ 
pelling  departure  from  the  standard  technology  conference 
Rather  than  focusing  on  vendors  and  products,  the  spotlight 
IS  on  great  ideas,  strategic  use  of  best  practices  and  re^- 
world  leadership  from  the  IT  and  business  executives  who 
are  advancing  freir  organizations  through  technology. 


Conferertce  Chair: 

■n  JULIA  KING 

Executive  Editor  of  Events 
n  and  National  Correspondent, 
Computerworld 


Conference  Theme: 

Mastering  the  IT/Business  Connection 


Topic  areas  include: 

Creating  a  State*oMhe*Art  Technology  Infrastructure  and  One*World 
IT  Organization  to  Expand  Global  Business  Value 

Enterprise  data  management,  on-demand  computing,  ever-expanding  storage  systems,  open-source 
options,  VOIP  and  wireless  and  mobile  technologies  lead  the  list  of  infrastructure  issues  facng  CIOs  as  their 
businesses  expand  operations  worldwide.  On  the  management  front,  cultural  barriers,  language  differences, 
and  business  processes  that  can  vary  widely  from  country  fo  country  compound  the  global  challenge. 
Computerworld  Editor-m-Chief  Don  Tennant  leads  a  panel  of  CIOs  discussing  best  technologies  and  best 
practices  for  gomg  global.  Panelists  include  Capgemmi  CIO  John  Parkinson.  Juri'pei  Networks  CIO  Kim 
Perdikou  and  Sandeep  Bhatia,  Director,  Global  Customer  Technology  at  Franklm  Templeton  Investments. 

Advancing  Best  Practices  in  IT  Governance  and  Staffing.  Vendor 
Management  and  Project  Leadership 

As  organizations  outsource  more  IT  tasks  and  functions  to  service  providers,  forging  supplier  partnerships 
and  managing  vendor  relationships  have  become  key  competencies  for  IT  leaders.  What  difference  does 
competent  vendor  management  make  m  increasing  overall  business  value?  Learn  how  leadmg-edge 
organizations  are  making  over  IT  procurement  departrnents  into  powerful  partnership  management  offices 
to  leverage  outside  expertise,  cut  costs  and  ensure  IT  project  success. 

Extending  Flexible  and  Secure  Supplier  and  Customer  Connections 

Doing  more  with  less  and  doing  it  faster  and  more  reliably  requires  placing  data  and  the  ability  to  analyze 
it  in  the  hands  of  both  suppliers  and  customers.  Learn  how  IT  leaders  are  tapping  into  business  intelligence 
tools,  creating  enterprise  portals,  and  leveraging  sophisticated  supply  chain  and  CRM  software  to  streamline 
the  processes  and  costs  associated  with  giving  suppliers  and  customers  what  they  need  and  want 

Designirtg  a  Technology  Roadmap  to  Ensure  Ongoing  IT/Business 
Alignment  and  Future  Competitive  Advantage 

Across  nearly  all  industries,  new  product  and  service  offenngs  and  breakthroughs  depend  on  information 
technology.  By  exploiting  software  reuse,  advanced  security  technologies,  wireless  networking,  business 
intelligence  and  server  and  storage  virtualizabon  -  to  name  just  a  few  technologies  -  learn  how  IT  leaders 
are  laying  the  groundwork  to  deliver  continuous  business  innovations  while  bolstering  the  bottom  line. 


Conference  At-a-Glance  (subject  to  change) 

For  details,  updates,  and  to  register  visit  www.pr8mier100.com/cwt 

SUNDAY,  MARCH  CTH  _ 

Noon  to  appiox.  500pm  Golf  Outmg  sponioma  Oy  / 

7O0pm  to9<X)pm  Networking  Reception  sponsored 6^ 

Some 

MONDAY.  MARCH  7TH _ 

SiOOam  to  5:30pm  Conference  Sessions 

1245pm  to  2.'00pm  Networking  Lounge  4  Luncheon 

5:3Dpm  to  8.00pm  Networking  Lounge  A  Dinner 

TUESDAY  MARCH  «TM _ 

8O0am  to  5:30pm  Conference  Sessions 

12;45pm  to  2;15pm  Networking  Lounge  A  Luncheon 

7O0pm  to  7:30pm  Cocktail  Reception 

7:30pm  to  9O0pm  Gala  Evening  with  Dinner.  Honoree  Recognition  and  Entertainment 


March  6-8.  2005  •  JW  Marriott  Desert  Ridge  Resort  •  Scottsdale.  Arizona 


<>ifewt^on  y>d to  ragistef,  visit  www.prBmterl OOcpm/grt  of  call  1  •eoo-883-9090 


SELECTED  SESSIONS  INCLUDE: 

Visionary  Point«of-View  from  Peter  Senge 

«  Peter  Senge,  Senior  Lecturer,  Massachusetts 
Institute  of  Technology,  Co-Author  of  Presence: 
Human  Purpose  and  ffte  Field  of  the  Future  and 
author  of  The  Fifth  Discipline:  The  Art  end  Practice  of 
the  Learning  Organizahon 

Dialogue  on  IT  and  Business  Trends 
Affecting  Global  Enterprises 

Charlie  Feld,  former  CIO  and  e-Leader,  Delta  Air 
^  JF  Lines.  Currently  EVP.  Portfolio  Management  EDS 

Charlie  will  address  the  issue  of  business  resilience  vs, 
business  transformation  and  follow  his  presentation  with 
an  interactive  dialogue  on  how  these  trends  are  impacting 
organizations  worldwide. 

Converting  IT  Security  Investments 
Into  Business  Value 

CB  Ira  Winkler.  Security  Expert.  Author  of  Corporate 
KM  Espionage  (often  described  as  the  bible  of  the 
Information  Security  Held)  and  author  of  Spies 
Among  Us 

The  Art  of  Balancing  Business  Risk 
and  IT  Innovation 

HRon  Ponder,  EVP,  Information  Services  &  CIO, 
WellPoint  Health  Networks,  Inc 

rrs  Role  in  New  Product  Development 
at  Baxter 

John  Moon,  Corporate  VP  A  CIO. 

Baxter  International  Inc 

The  Passionate  Pursuit  of  IT/Business 
Alignment 

HPaul  Higday.  VP,  IT  A  Program  Development 
Owens  a  Minor,  Inc. 


Battlefield  Leadership 

Richard  Dooiey,  Leadership  Expert  &  Founding  Member  of  SIM 
Hal  Nelson,  U.S.  Army  General  (retired) 

Each  October,  a  group  of  IT  leaders  ^valks  the  hills  ar»d  hollows 
of  the  Gettysburg  battlefield  retracmg  Pickett's  Charge,  but  they 
aren't  studying  history:  they're  studying  business.  Dick  Dooley, 
a  founding  member  of  the  Society  for  Information  Management 
and  creator  of  the  Leadership  Learning  Forums,  and  Hal  Nelson, 
a  military  historian  and  retired  U.S  Army  general,  have  combined 
two  learning  strategies  to  create  th&r  battlefield  leadership 
seminar.  Usirig  photos  and  film  clips  to  augment  their  presenta¬ 
tion.  they'll  focus  on  the  critical  importance  of  improvisation 
alongside  planning,  the  use  and  power  of  timing,  the  connection 
between  how  information  is  gathered  and  how  decisions  are 
made  and  the  positive  and  negative  influence  of  strong 
personal  relationships. 

IT  Mentor:  Valuable  Lessons  Learned  on  the 
Front  Lines  of  Business 

H  Thornton  A.  May,  Corporate  Futurist 

Corporate  futurist  Thornton  May,  publisher  of  the 
prestigious  “CIO  Habitat  Study"  moderates  a  panel  of 
IT  leaders  offering  their  first-hand  experiences  and 
candid  advice  on  post-merger  and  acquisition  IT  integration; 
bringing  IT  back  in-house  after  outsourcing  and  deploying 
unproven,  bleedmg-edge  technology  as  a  means  of 
gaming  competitive  business  advantage. 

Star  Search:  The  Quest  for  the  Best  Executive 
IT  Talent 

A  panel  of  leading  corporate  IT  executive  recruiters  disclose  the 
specific  hard  skills  and  personal  attributes  companies  are  looking 
for  in  a  CIO  today  plus  shifting  reporting  relationships  and  how  a 
new  CIO  can  gam  credibility  quickly.  Other  issues  include  the 
impact  of  outsourcing  on  the  CIO's  role  and  how  a  CIO's  success 
IS  measured.  Bring  your  list  of  questions! 


JW  Marriott  Desert  Ridge 
Palmer  Course 

Scottsdale,  Arizona 


Pre-Conference  Golf  Outing  sponso«ed8y 

Complimentanr  tor  Registered  IT  Users  V^riSigir 

The  Pre-Conference  Golf  Outing  at  the  Palmer  1 - 

Coorse  located  adjacent  to  the  JW  Marriott  Desert  Ridge  Resort,  is 
complimentary  ($1 25  value)  for  registered  IT  End-Users  (other  partic¬ 
ipants,  including  sponsors  and  vendors,  may  play  on  an  ‘as  available' 
basis  and  are  responsible  for  all  applicable  golf  ootmg  expenses) 

For  details,  contact  Chris  Leger  at  1>S08>820*S277 


JW  Marriott 
Desert  Ridge  Resort 

Scottsdale,  Arizona 


Hotel  Reservations  and  Travel  Services 

To  reserve  your  accommodations,  visit: 

www.etcentral.com 

tf  you  have  questions  about  accommodations,  call 

1  •508-820*8529 


For  more  information  and  to  register,  visit  < 


IT  End-User*  Conference  Registration  Application 


Alt  dollar  amounts  are  m  U5.  turxJs;  registrabons  inclutte  full  access  to  all  sessions,  toe  Expo  and 

Networiiing  Lounge,  meals  and  recepbons.  Transportation  and  hotel  accommodations  are  your  EarlyOrrd  Registration  Full/On-Ste  Registration 

resportsibilrty  ComputervrorkJ  reserves  the  right  to  limit  and/or  refuse  any  registration  tor  any  reason.  im'o«gnj*nuai»2i.0006)  (»*te' 2',  2005) 

□  I  am  an  IT  End-User:'  □  $1,495  □  $1,795 

■|T  EniHJsers  are  delmeo  as  those  «i»no  are  anenAng  CompuierworW's  Prem^r  100  IT  Leaders  Conference  with  an  mtent  (and  an  IT  spending  budget)  to  potentially  buy/lease  hard- 
ware/software/services,  etc.  from  our  conterence  sponsors  and  are  not  themselves  an  iT  vendor  As  such,  account  represeritatives,  business  development  personnel,  yiaiysts,  consult¬ 
ants  and  anyone  else  atleriAng  who  does  mjl  nave  IT  purchasing  mduence  withm  their  organuabon  am  excluded  Irom  the  IT  ErxI-User’  designation,  interpretation  and  entercemeni  ol 
this  policy  are  at  the  sole  Ascrebon  of  Compulerwona  Questions?  Rease  call  <-600-683-9090 

NOT£:  If  you  on  not  an  IT  End~Usor,  you  may  re^rsfer  as  a  Uon-Sponsoring  Vendor 

□  I  am  a  Non-Sponsonng  Vendor;'*  □  $5,000  □  $5,000 

"  Vendors  are  encoixaged  to  parbcipate  Ki  CompuierwofkJ's  l^emier  tOO  IT  Leaders  Conference  through  sponsorship.  (Details  are  avsiable  by  calling  Leo  Leger  at  1-508-830-8212T 
Alternatively,  vendors  (as  well  as  other  'non-IT  end-user’  professionals  as  delmed  by  Computerworld),  may  apply  for  regcslralion  at  the  •non-sponsonng  vendor’  rale.  Oelermmabon  df 
what  consbtutes  a  ’non-sponsormg  vendor*  registration  is  at  the  sole  discretion  ol  Compulerwond 


Attendee  Profile;  (The  secton  must  be  completed  «  order  to  process  your  applcatran) 


Your  busrness/industry: 

O  Aerospace 

□  Manufacturing  a  ^oceSi 

■ndus|r«s 

Inon-computer  itiateol 
3  Pinance/Banking/Accourimg 
3  Insixance/Real  Estaie/Lccai 
Senrces 

3  QAemment  fedeiai 
(nduAng  MAtary) 

3  (aoveinweni  Stale  oi  Local 
3  I  XijitW/MeflicBl/Dentai  Senvces 
3  RetaHei/Wholesaier/O'Sinbuny 
(non-compula>  raiaied) 

3  TfanmytabonrUtMies 
3  Cornmurvcation  Carriers  (ISP 
felecomm,  Data  Comm.  TV/Cabe) 
3  Crmsbucicn/Afcnaecturar 


□  Data  Aacessaig  Servoes 
3  Education 

□  Agnoiltwre/ForeSlrr/FTsneiies 

3  Urang/Od/Sas 

3  Travel/Haspitaiiry/Recreatio'i/ 
Enlertauimenl 

3  Aib>isning/Broai3cast/A0.ert.sing/ 
Rrblic  Reia&ons/Marrieting 
3  Ifeseaicn/Peielopment  Lab 
3  Busmess  Sarvices/Consuilam 
(non-computer  mialed] 

3  Mtg  ol  Coryuters.  Communcalions, 
^pheai  fcaurpmem  or  Software 

Your  Job  tWs/funetion; 

IT  management 

3  cn  era  cso 

3  Execulire  VR  $•  VP 
3  mee  President 
3  Director 

3  Manage>/t>ne>  (TUanagei 
3  Suorvisor 

BUSINESS  MANAGEMENT 
3  CEO.  COO.  Otamnan  ^es.dent 
3  CFO,  Controller.  Tiaasurer 
3  Enecutrve  VP  Sr  VP  VP  General 

Unger 

3  Onector.  Manager 

□  Other  Corporale/Busiress 
Manager 


Number  of  employees  in 
your  entire  orgenization 
(ALL  locations): 

3  201000  O' more 
3  10OX-  19.999 
3  5000-91999 
3  *000  -4,999 
3  500-999 
3  100  -  499 
3  50-99 
3  Les  Iren  50 

What  is  your  organization's 
annual  IT/IS  budget  for 
a»  rr/IS  products'T; 

3  $1  Mion^rrere 
3  1500  K)  59999  rnilhon 
3  5i00lu54999mdWn 
3  550toS999mrllan 
3  S’0te549.9'iWkon 
3  51  toSggmrllion 
3  5500.000  to  5999.999 
3  5250.000  to  5499.999 
3  5100000  to  5249999 
3  Under  5100000 
3  Noie 

What  is  the  esbinated 
annual  revenue  of  your 
enbie  organization?; 

3  510eWi«rv« 

3  5i  BAon  -  599  BiH^i' 

3  5500  iMion  -  5999  Million 
3  $100  Uihon- $499  Minion 
3  LessmanSIOOUiiiior 


The  one  item  that  best 
describes  your  involvement 
in  the  IT  purchase  process: 

3  Aulhonie/aperove  eurenase 
3  Evaiuale/'ecommend  products. 

brands  verxlors 
3  Soecit>  toaiu'es/tachncai 
reflir'emenls 

3  Set  Budget  tei  eipend-turm, 

3  Determine  need  to  purchase 
3  Create  IT  strategy 


What  is  your  organization's 
MOST  mission  critical 
development/impiementa- 
bon  project  this  year? 

3  Business  mtetugerKe/ 
BPM/CuStome*  Analytics 
3  Data  Management 

3  Uooie  5  Wueiess 
3  Enterprise  Vilrastructu'e/Oata 
Cemer  Buitoout/Cemsdlidalicin 
3  Networtr  Intrastruciute/Slerage 

3  Apcwaiion  Davatopment  and 
Iniegiatior'.  (V»b  ser.-ces/EAl) 

3  Compliance 

What  is  your  organization's 
SECOND-MOST  mission 
critical  development/imple¬ 
mentation  project  this  year? 

3  Business  IMeiiigence/ 
BPM/Cuslomar  Anaytics 
3  Data  Uaragement 
3  Mobile  &  VA'eiess 
3  Enterpnse  totrashuctu'e/Data 
Center  Bu'idoul/Consoiidabon 
3  Networa  Intrasliucture/Storage 
3  Securfty 

3  ApcAcatdn  Deteroprnent  and 
Integralon  (Weo  serwces/EAl) 

3  Compliance 


Payment  Method 


O  Check  (checks  must  be  received  by  February  1 6. 20(75 
payable  lo:  Computenworid) 

Marl  to:  Computerworld,  Alto:  Pam  Malmgowski.  One  Speen 
Street  Frammgham.  MA  01701 

□  American  Enpress  □  VISA  □MasterCard 
Account  Number 


Expiration  Date: _ 

Card  Holder  Name: 


Signature  of  Card  Holder: 


Cancellation  Policy  iadoi 
In  the  event  of  cancellation,  the  registrant  has  three  options: 
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VAi  I  I  AUi>n»  networks 
got  their  first  real  foot¬ 
hold  in  the  business 
world  in  the  area  of 
elecrroDtc  data  interchange 
(EDI).  VANs  were  deployed  to 
help  trading  and  supply  chain 
panners  automate  many  busi- 
ncss'to-business  communica- 
tiorw  and  thereby  reduce  the 
number  of  paper  transfers 
needed,  cut  costs  and  speed  up 
a  wide  range  of  tasks 
and  processes,  from 
inventor)’  and  order 
management  to  pay¬ 
ment. 

In  today's  world, 
e-commerce  Ls  in¬ 
creasingly  based  on  XML. 
though  EDI  remains  an  impor¬ 
tant  pan  of  business  and  still 
relics  on  value-added  net¬ 
works.  But  ocher  types  of 
VANs  have  begun  to  appear, 
including  Web  services  net¬ 
works  and  transaction  deliv¬ 
ery  networks. 

A  VAN  is  created  when  a 
network  provider  leases  com¬ 
munications  lines  from  a  com¬ 
mon  carrier  (such  as  a  tele¬ 
phone  company),  enhances 
them  by  adding  services  and 
improvements  that  facilitate 
business-to-business  applica¬ 
tion  integration,  and  then  re¬ 
sells  the  network  connection 
and  services  to  others  for  a 


fee.  Value,  then,  refers  to  what 
the  supplier  provides  beyond 
the  basic  network  connection 
and  becomes  the  critical  ele¬ 
ment  difTercmiating  one  net¬ 
work  offering  from  another. 

VANs  and  EDI 

In  the  1980s.  VANs  emerged  as 
a  way  to  connect  supply  chain 
participants.  They  offered 
store-and-forward  mailboxc.s 
that  provided  protocol  conver¬ 
sion,  security  and 
guaranteed  delivery. 

However.  EDI  VANs 
proved  to  be  too  costly 
for  most  businesses. 
Only  the  largest  of 
supply  chain  partici¬ 
pants  could  afford  the  expen¬ 
sive  setup  fees  associated  with 
EDI  software,  not  to  mentitm 
the  sometimes  exorbitant  per- 
transaccion  fees.  This  meant 
that  many  small  and  midsize 
firms  couldn't  afford  to  join 
electronic,  automated  supply 
chains.  And  since  the  smaller 
companies  couldn't  join  in.  the 
larger  ones  that  continued  to 
do  business  with  them  still 
couldn't  eliminate  a  lot  of 
their  iradiiionat,  paper-based 
proces.scs.  When  the  Internet 
and  the  World  Wide  Web  en¬ 
tered  the  picture,  along  with 
standards  like  ebXML,  some 
observers  felt  that  VANs 
might  simply  disappear. 


While  traditional  EDI  is  in 
many  ways  inferior  to  newer 
approaches,  it  still  offers  a 
compelling  business  model.  In 
fact,  the  continuing  presence 
of  EDI  IS  not  a  result  of  its  fun¬ 
damental  technology  but  in¬ 
stead  can  be  attributed  to  its 
underlying  communications 
structure,  the  VAN.  which  can 
guarantee  and  secure  B2B  in¬ 
teraction  over  a  network. 


In  its  reincarnation,  the  EDI 
VAN  model  has  become  the 
Web  services  network  (WSN, 
or  sometimes  WSVAN).  which 
has  ti>  meet  many  of  the  same 
requirements  and  features 
that  EDI  users  depend  on. 

WSNs  are  characterized 
by  loosely  coupled,  asynchro¬ 
nous  service-oriented  archi¬ 
tectures  (read  the  SOA  C^uick- 
Study  at  QuickLink  44708) 
supporting  standards  such  as 
XML.  the  Simple  Object  Ac¬ 
cess  Protocol  iQuickLink 
aS220].  the  Web  Services  De¬ 
scription  Language  and  UDOI 
[QuickLink  32418].  This  helps 
individual  Web  services  pro¬ 
viders  keep  their  offerings 
simple  in  design  and  frees 
them  from  having  to  separate¬ 
ly  implement  network  house¬ 
keeping  functions. 

The  final  hurdles  for  busi- 
ncss-to-busincss  interaction 
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fundumiaal  typ«  of  failuras 
that  add  wfcto  to  a  notworfe 
tMbMrfc  aarvtooa.  intoQration 
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tiMTow  apocifle  aerdoea. 

NETWORK  SERVICES 

■  Error  detection  arxl  correction 

■  Encryption 

■  Quality  of  service  to  guarantee 
availability  and  response  times 
■Protocol  and  sp^ 
conversion 

across  the  Internet  arc  de¬ 
pendability  and  security.  Most 
systems  and  networks  within  a 
given  company  arc  designed 
to  manage  transaction  flows 
behind  a  secure,  centrally 
managed  firewall.  Unfortu¬ 
nately.  the  B2B  world  exists 
between  firewalls,  with  part¬ 
ners  often  sharing  no  common 
infrastructure.  Morei^vcr.  the 
Internet  itself  offers  little  se¬ 
curity.  reliability  or  account¬ 
ability. 

Transaction 
Delivefy  Networks 

The  newest  evolution  of  VANs, 
which  first  appeared  in  2000. 
are  the  transaction  delivery 
networks  (TDN)  that  provide 
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;  ■  (Certificate  aubtorizalion 
:  INTEGRATION  SERVICES 
'  ■Datastorage 
:  aDirectones 
'  ■  Database  access 
;  APPLICATION  SERVICeS 
I  ■  Data  translation 

■  E-mail  and  other  messaging- 
related  functions 

TRADING  PARTNER  SERVICES 

■  Electronic  funds  transfers 

■  Electronic  mailboxing  of  EDI 
transmissions 

■  EDI  record-keeping  for  audit 
tracking 

I  services  for  secure  end-to-end 
management  of  electronic 
transactions. 

Also  called  transaction 
proce.ssing  networlo*  or  Inter¬ 
net  utility  platforms.  TDNs 
can  guarantee  delivery  and 
nonrepudiation  of  messages 
in  addition  to  providing  high 
security  and  availability,  net¬ 
work  performance  monitoring 
and  centralized  directory 
management. 

TDNs  typically  use  a  slorc- 
and-forward  messaging  archi¬ 
tecture  that's  designed  to 
adapt  readily  to  a  wide  range 
of  disparate  systems  and  sup¬ 
port  any  kind  of  transaction. 
Most  TDNs  offer  secure  en¬ 
cryption  using  a  public-key 
infrastructure  and  certificate 
authorization  for  trading 
partners. 

TDNs  provide  siandards- 
based  application  program¬ 
ming  interfaces  that  develop¬ 
ers  can  use  to  create  custom 
applications  to  link  internal 
data  sources  with  the  TDN. 

In  addition,  most  TDNs  pro¬ 
vide  application  adapters  that 
plug  directly  into  existing 
computing  environments, 
such  as  messaging  middle¬ 
ware.  Osnos 
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DEFINITION 

Value-added  networks  (VAN)  are 

communications  networks  sup¬ 
plied  and  managed  by  third- 
party  companies  that  facilitate 
electronic  data  interchange, 
Web  services  and  transaction 
delivery  by  providing  extra 
networking  services. 


mt  miSSCLL  KAV 

VALUfe-ADOED  networks 
got  their  first  real  foot¬ 
hold  in  the  business 
worid  in  the  area  of 
electronic  data  interchange 
(EDI).  VAhb  were  deployed  to 
help  trading  and  supply  chain 
partners  automate  many  busi- 
oess-to-business  communica¬ 
tions  and  thereby  reduce  the 
number  of  paper  transfers 
needed,  cut  costs  and  speed  up 

a  wide  range  of  tasks  _ 

and  processes,  from 
inventory  and  order 
management  to  pay¬ 
ment. 

In  today’s  world, 
e-cotnmerce  is  in¬ 
creasingly  based  on  XML, 
though  EDI  remains  an  impor¬ 
tant  part  of  business  and  still 
relies  on  value-added  net¬ 
works.  But  other  types  of 
VANs  have  begun  to  appear, 
including  Web  services  net¬ 
works  and  transaction  deliv¬ 
ery  networks. 

A  VAN  is  created  when  a 
networic  provider  leases  com- 
nnmications  lines  from  a  com¬ 
mon  carrier  (such  as  a  tele¬ 
phone  company),  enhances 
them  by  addii^  services  and 
improvements  that  facilitate 
business-to-business  applica¬ 
tion  integration,  and  then  re¬ 
sells  the  network  connection 
and  services  to  others  for  a 


fee.  Value,  then,  refers  to  what 
the  supplier  provides  beyond 
the  basic  network  connection 
and  becomes  the  critical  ele¬ 
ment  differentiating  one  oet- 
woric  offering  from  another. 

VANs  and  EDI 

In  the  1980s.  VANs  emerged  as 
a  way  to  connect  supply  chain 
participants.  They  offered 
store-uid-fbrward  mailboxes 
that  provided  protocol  conver- 

-  sion.  security  and 

guaranteed  delivery. 

A  However.  EDI  VANs 
tm  proved  to  be  too  costly 
I  *  for  most  businesses. 
Only  the  largest  of 
supply  chain  partici¬ 
pants  could  aflbrd  the  expen¬ 
sive  setup  fees  associated  with 
EDI  software,  not  to  mention 
the  sometimes  exorbitant  per- 
transaction  fees.  This  meant 
that  many  small  and  midsize 
firms  co^dn’t  afford  u>  ioin 
electronic,  automated  supply 
chains.  And  since  the  smaller 
companies  couldn’t  join  in,  the 
larger  ones  that  continued  to 
do  business  with  them  still 
couldn’t  eliminate  a  lot  of 
their  traditional,  paper-based 
processes.  When  thie  Internet 
and  the  World  Wide  Web  en¬ 
tered  the  picture,  along  with 
standards  like  ebXML,  some 
observers  felt  that  VANs 
might  simply  disappear. 


While  traditional  EDI  is  in 
many  ways  inferior  to  newer 
approaches,  it  still  offers  a 
compelling  business  model  In 
fact,  the  continumg  presence 
of  EDI  b  not  a  result  of  its  fun¬ 
damental  technology  but  in¬ 
stead  can  be  attributed  to  its 
underlying  communications 
structure,  the  VAN,  which  can 
guarantee  and  secure  B2B  in¬ 
teraction  over  a  network. 

yVebSmices 

NetvvDn(s 

In  its  reincarnation,  the  EDI 
VAN  model  has  become  the 
Web  services  network  (WSN, 
or  sometimes  WSVAN).  which 
has  to  meet  many  of  the  same 
requirements  and  features 
that  EDI  users  depend  on. 

WSNs  are  characterized 
by  loosely  coupled,  asynchro¬ 
nous  service-oriented  archi¬ 
tectures  (read  the  SOA  (^ck- 
Study  at  C^ukkLink  44708) 
supporting  standards  such  as 
XML,  the  Simple  Object  Ac¬ 
cess  Protocol  [()uickLink 
aS220].  the  Web  Services  De¬ 
scription  Language  and  UDDI 
iQuickLink  32418).  This  helps 
individual  Web  services  pro¬ 
viders  keep  their  offerings 
simple  in  design  and  frees 
them  from  having  to  separate¬ 
ly  implement  network  house¬ 
keeping  functions. 

llie  final  hurdles  for  busi- 
ness-to^usiness  interaction 
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across  the  Internet  are  de¬ 
pendability  and  security.  Most 
systems  and  networks  within  a 
given  ctHnpany  are  designed 
to  manage  transaction  flows 
behind  a  secure,  (^trally 
managed  firewall  Unfortu¬ 
nately.  the  B2B  world  exists 
between  firewalls,  with  part¬ 
ners  often  sharing  no  common 
infrastructure.  Moreover,  the 
Internet  itself  offers  little  se¬ 
curity.  reliability  or  account¬ 
ability. 

Transaction 

DdveryNetMnrks 

The  newest  evohitioa  of  VANs, 
whid)  first  ^ipeared  in  2000, 
are  the  transactioo  delivery 
networks  (TDN)  chat  provide 
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services  for  secure  end-to-end 
management  of  electronic 
transactions. 

Also  called  transaction 
processing  networks  or  Inter¬ 
net  utility  platforms,  TDNs 
can  guarantee  delivery  and 
nonrepudiation  of  messages 
in  addition  to  providing  high 
security  and  availabUity.  net¬ 
work  performance  monitoring 
and  centralized  directory 
management. 

TDNs  typically  use  a  store- 
and-forward  messaging  archi¬ 
tecture  that's  designed  to 
adapt  readily  to  a  wide  range 
of  disparate  systems  and  sup¬ 
port  any  kind  of  transaction. 
Most  TDNs  offer  secure  en¬ 
cryption  using  a  public-key 
Infrastructure  and  certificate 
authorization  for  trading 
partners. 

TDNs  provide  standards- 
based  j^lication  program¬ 
ming  inteifeces  that  develop¬ 
ers  can  use  to  create  custom 
applicaticms  to  link  internal 
data  sources  with  the  TDN. 

In  addition,  most  TDNs  pro¬ 
vide  ai^lkatioQ  adapters  that 
plug  directly  into  existing 
computing  environments, 
such  as  messaging  middle¬ 
ware.  Ostios 
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BRAND  NEW. 

NOT  NEW  BRAND. 


Introducing  the  Fujifilm  3592  enterprise-dass  data  storage  tape. 

While  Fuilfilm  3592  Is  a  brarxj  new  addition  m  <xjr  M  line  o(  superior  qualHy  data  storage  imria  It  comes  from  a  company 

that  Is  anything  but  a  new  brand.  In  1995,  our  technology  enabled  the  first  gigabytedass  metal  particle  enterprise  1/2-  tape. 
Since  then,  steady  innovation  has  culminated  m  a  highend  IC  tape  with  NANOCUBIC  Technology,  the  magnetic  coating 
technology  leveraged  by  workJTeadlng  hardware  manufacturers  in  development  of  their  latest^generatlon  enterprise-class 
drive  systems.  Specify  Fujifilm  on  your  next  high-end  tope  order.  Its  the  brand  that  other  brands  trust. 
To  find  out  more  about  our  complete  line  of  reliable  data  storage  media,  visit  us  at;  www,foillllm.com 
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SecurlD  Rollout 
Calls  for  Planning 


WHh  two-fautor  authentication  about  to 
head  out  to  the  masses,  astep-fayetep 
pbn  is  drawn  up.  By  M^ias  Thuman 

AS  I’VE  MENTIONED  in  Once  that  happens,  it  will  be 
previous  columns,  my  fairly  easy  to  SecurlD-enable 
company  has  invested  applications  and  other  areas 

in  RSA  SectirlD  to  pro-  of  the  enterprise,  because  no 
vide  two-factor  authentication  matter  what  a  user  is  attempt- 
for  access  to  our  criticaJ  infra-  ing  to  access,  the  use  of  the 

structure,  namely  routers.  token  remains  the  same, 

switches,  firewalls  and  pro-  For  now,  we're  focusing  on 

duction  Unix  servers.  As  you  more  than  5,000  employees, 

might  recall,  two-factor  au*  but  deploying  tokens  to  that 
theniication  entails  something  many  users  and  then  support- 
yoo  have  (like  a  bank  ATM  ii%  them  calls  for  proper  plan- 


card)  and  something 
you  know  (your  PfN). 

On  our  network, 
the  SecurlD  token 
(something  you  have) 
displajrs  a  random  | 
number,  or  “token- 
code."  which  changes 
every  60  seconds.  That. 


- ‘  ning.  A  dedicated 

rmUTlf  protect  manager  is 

^Ip^lyll  coordinating  the 

UAMlArmA  various  steps  in  this 
project,  the  first  of 

vOQRUL  O  involves  com¬ 

munication  and 
training.  We  want 
end  users  to  feel  frmiliar  with 


combined  with  a  user-defined  SecurlD  tokens  before  they 
PIN  (something  you  know).  actually  receive  one.  The 


represents  what  is  termed  a 
“passcode." 

To  date,  we  have  deployed 
about  150  tokens  to  mostly 
network  engineers,  systems 
administrators  and  informa¬ 


training  and  communication 
process  will  include  mass 
e-mailings,  a  Web  site  with  an 
FA(^and  PowerPoint  slides. 
Some  of  these  materials  have 
been  developed  by  my  infosec 


tion  security  personnel  They  group,  and  others  are  being 
are  fairly  savvy  individuals,  so  provided  by  RSA  Security  Inc. 
deployment,  support  and  ad- 
ministration  have  been  pretty  TOnCII  LogistiCS 
stra^cfbrward.  The  next  step  will  be  distribu- 

Soon,  though,  we  will  begin  tion.  Those  5fr00  employees 

to  spread  two-factor  authenti-  arc  located  in  almost  every 
cation  to  other  areas  of  the  state  and  major  city  in  the 

company.  Any  employee  who  U.S..  plus  India,  Singapore, 
needs  to  remotely  access  the  China.  Mexico  and  Europe.  To 
network  via  our  Cisco  VPN 
will  need  a  SecurlD  token  to 
authenticate  to  the  network. 

SecurlD  tokens  will  also  be  re- 
quired  to  associate  to  one  of 
our  corporate  wireless  access 

points.  They'll  be  needed  rv-.-j  »  m  _jrs 

when  off-site  users  check  UeptoyilQ  OOCUnD 

their  e-maH  via  Microsoft  tOksnS  tO  ITIOfB  tllflll 

5,000usais«dthen 

toe  list  goes  oil 

Eventually,  every  employee  StilUkHUHy  UWffl  t MS 

wUl  have  a  SectirlD  token.  I  for  proper  planning. 


handle  this  logistical  night¬ 
mare.  we’re  splitting  the  tc^en 
recipients  into  three  groups. 

The  largest  of  these  groups 
by  far  is  made  up  of  employ¬ 
ees  who  need  SecurlD  tokens. 
We  decided  that  the  roost  effi¬ 
cient  method  of  providing 
them  is  to  have  a  consultant 
send  tokens  to  geographically 
identified  contacts,  who  will 
then  deliver  tokens  to  individ¬ 
ual  users.  The  consultants  will 
be  able  to  focus  entirely  on  the 
token  deployment  and  not  be 
distracted  by  other  duties. 

The  second  group  consists 
of  new  employees.  With  them, 
the  easiest  thing  to  do  is  to 
work  with  the  security  badge 
office.  Each  new  hire,  even 
those  who  will  work  in  home 
offices,  is  required  to  have  a 
security  badge.  All  we  have  to 
do  is  modify  the  new-user 
provisioning  process  to  flag 
those  who  will  need  a  token. 

71)e  third  group  is  made  up 
of  existing  employees  whom 
we  haven't  identified  as  need¬ 
ing  tokens  but  who  suddenly 
require  one.  Those  users  will 
be  asked  to  contact  the  help 
desk  to  obtain  authorization. 
After  that,  the  security  badge 
office  will  send  out  the  token. 

Once  an  enq>loyee  has  his 
token,  he  must  initialize  it 
using  an  RSA  SecurlD  Web- 
based  application  called  De¬ 
ployment  Manager.  Each  user 
will  visit  a  Web  page,  where  be 
will  answer  a  series  of  ques¬ 
tions  in  order  to  be  authenti¬ 
cated,  enter  the  serial  number 
on  his  token  and  then  set  up  a 
PIN.  Deployment  Manager 
runs  on  an  Apache  Web  server 
and  will  talk  to  a  back-end  Ora¬ 
cle  database  server,  so  our  data¬ 
base  administrators  are  in¬ 
volved  in  the  overall  prefect 
plan.  UteyTe  creating  the  data¬ 
base  so  that  we  can  test  func¬ 
tionality  prior  to  production. 

The  help  desk  will  play  an 
integral  part  in  supportii^  the 


SecurlD  deployment  In¬ 
evitably,  some  users  will  for¬ 
get  their  PINs,  lose  their  to¬ 
kens  or  cause  the  tokens  to  be 
out  of  sync.  The  help  desk 
will  address  the  most  com¬ 
mon  issues  with  another  Web- 
based  application  from  RSA 
Security,  called  Quick  Admin. 
We  already  use  this  applica¬ 
tion  to  support  our  initial  ISO 
savvy  users,  but  we’U  have  to 
provide  the  appropriate 
amount  of  training  to  the  help 
desk  staffers  so  they  can  at¬ 
tend  to  the  brunt  of  support 
calls.  'The  infosec  group  will 
handle  anything  outside  of 
what  the  C^uick  Admin  tool 
provides. 

On  the  hardware  front,  a 
primary  authentication  server 
and  two  replicas  are  currently 
handling  aU  the  SecurlD  token 
transaakms.  The  primary 
RSA  ACE/Server  contains  the 
database  of  authorized  users, 
including  the  permitted  rela¬ 
tionships  between  individual 
users  and  protected  devices. 
The  primary  database  is  fre¬ 
quently  synchronized  with  the 
replicas,  and  the  load  is  auto¬ 
matically  balanced,  providing 
for  a  pretty  decent  f^-over 
configuration.  If  the  primary 
or  citi^r  replica  should  fall 
I  the  other  servers  can  handle 
I  authentication  requests. 

Although  our  current  de¬ 
ployment  model  could  proba¬ 
bly  handle  the  increase  in  au¬ 
thentication  requests  as  we 
scale  from  150  users  to  more 
than  S.OOO.  we  plan  to  upgrade 
the  servers  and  iiwrease  tbe 
number  of  replicas,  some  of 
which  will  be  placed  in  key 
overseas  locations. 

All  in  all  and  with  the  proj¬ 
ect  manager’s  help,  we  have  a 
robust,  comprehensive  plan, 
and  I  expect  that  when  we  fi¬ 
nally  pull  tbe  trigger,  well 
have  a  smooth  deployment 
and  an  aggressive  support 
model  to  address  user  needs.  I 

WIUTNYIOTWR? 

Thsweek'sioiirnaliswillmbyareaisecijn- 
h  manager.  IIMias  Thurman.* 
nem  and  emttoyer  hm  been  deguised  for 
obvKXB  reasons.  Dxitad  him  at  mathias. 
ihurmm^yahoOLCOfn.  or  join  Ihe  dsoBsion 
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Over  a  million  IT  Professionals 
are  getting  ongoing 
security  guidance. 


Millions  of  your  peers  are  turning  to  the  Security  Guidance  Center  for  the  latest  in  security.  By  visiting  regulariy, 
th^  get  the  tools,  guidance,  and  training  needed  for  better  protection  against  viruses  and  other  security  threats. 
Visit  microsoftcom/security/rT  today  and  see  for  yourself  the  newest  additions,  including: 


Microsoft*  Windows*  XP  Service  Pack  2  with  Advanced  Security  Technologies  Download  it  for  free 
and  evaluate  the  latest  updates  for  increased  system  control  and  proactive  protection  against  security  threats. 


free  Online  Self  Assessment  Complete  this  free,  Web-based  self-assessment  test  to  help 
you  evaluate  your  organization's  security  practices,  and  identify  areas  for  improvement. 


free  Updates  and  E-mail  Alerts  Stay  on  top  of  the  latest  security  issues  quickly  and 
easily  by  signing  up  tor  free  Microsoft  Security  Communications. 


free  Security  Tools  React  more  effectively  to  potential  security  threats.  Take  advantage  of 

free  tools  and  technologies  like  the  Microsoft  Baseline  Security  Analyzer  and  Software  Update  Services. 


Go  today  to  microsoft.coin/security/IT 
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BRIEFS 


MioDsoft  Releases 
SP1,  x64  to  Beta 

■  Microsoft  Corp- bst  week  an* 
nouncsd  the  a¥aiiaMity  of  the 
first  release  candidates  for  Win* 
dows  Server  2003  Service  Pack  1  I 
(SP1)  and  the  x64  editioRS  of 
Window's  Server  2003  artd  Win* 
dows  XP  Professional.  The  prod* 
ucts  wil  be  available  writhin  the 
next  month  to  users  in  Micro¬ 
soft's  Customer  Preview  Pro* 
gram.  The  final  relaases  are  due 
in  the  first  haft  of  2005.  The  x64 
editions  of  Windows  Server  2003  , 
and  Windows  XP  Professkmai  al¬ 
low  users  to  run  both  32*  and 
64-tM  applications,  according  to 
the  company.  I 


CeHwave  Unveils 
Mobfe  Call  Services 

•  \fcice  over  B*  appBcation  ven- 
dor  CaHWave  bic.  has  unveiled  j 

new  cal-scroening  and  call-  | 

transfer  services  for  mobile  . 

phone  users.  The  Santa  Barbara, 
CaM.-based  company  said  its 
new  MoMe  Cafl  Screening  ser-  I 

vice  wi  alow  users  to  Ssten  to  I 
voice  messages  in  real  time,  and  i 
Its  new  Mobile  Can  Transfer  ser*  < 
vice  lets  users  transfer  cell  pfmne 
cals  to  a  home  or  office  phorre.  | 
The  CaVWave  services  work  with 
al  cal  phones  and  carriers  and 
start  at  S3  05  a  month. 


Phatware  to  Offer 
Monitoring  Tool 

■  PhatWare  Corp.  in  Mountain 
View.  CaM..  has  released  soft*  , 
ware  that  alows  networii  admin-  | 
(Strators  to  analyze  and  diagnose  | 
problems  on  pa^-based  net¬ 
works  used  with  tifindows-based  | 
moble  ftrckat  P(^  The  Phatffet  | 
network  monitoring  software  al¬ 
lows  IT  workers  to  conduct  real¬ 
time  analyses  on  any  kind  of  LAN 
or  WAN  and  to  fitsr  packet-based 
data  by  IP  address.  User  Data¬ 
gram  Protocol  or  TCP  port  hard-  ‘ 
wareaddressordatastiing.ac- 
cardingtoPhatware.Thepr(ifes' 
sional  version  of  the  application 
sals  for  S299.  and  a  personal  | 
edftionisSSS.  I 
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Tiny  Storage  Devices 
Cany  a  Big  Risk 


WE’VE  ALL  SEEN  THEM  —  portable 
MP3  players,  sexy  new  iPods  and 
“finger-size”  drives  in  varying  col¬ 
ors  that  use  the  ubiquitous  Univer¬ 
sal  Serial  Bus  or  FireWire  port  for 


connectivity.  While  they 
look  innocent  enough,  they 
nevertheless  pnjse  a  serious 
security  threat  to  organiza¬ 
tions.  In  fact,  some  compa¬ 
nies  have  banned  their  u.se 
outright.  Unfortunately,  too 
many  others  continue  to  ig¬ 
nore  the  potential  security 
risks  posed  by  the  use  of 
MP.^  players.  USB  flash  dri¬ 
ves  and  other,  similar  high- 
capacity  portable  storage 
devices. 

These  easily  concealed 
devices  —  which  employees 
often  bring  into  the  work¬ 
place  —  can  be  readily 
plugged  into  any  USB  port, 
allowing  users  to  quickly 
and  cfTortiessly  download 
sensitive  corporate  information.  Then 
that  information  can  all  too  easily 
be  taken  to  the  outside  world.  Even 
when  transgressions  are  unintention.il. 
security  rislw  abound,  since  po«abJc 
storage  devices  are  able  to  circumvent 
network  perimeter  defenses  such  as 
firewalls  and  antivirus  products  al  the 
mail  server  and  can  introduce  viruses 
or  other  malware. 

In  a  recent  Computer  Security  fnsii- 
tute/FBl  Computer  Crime  and  Security 
Survey,  over  three  quarters  of  all  re¬ 
spondents  cited  insider  abuse  of  net¬ 
work  access  as  a  top  security  concern 
for  companies.  And  rightly  so,  since  the 
survey  indicated  that  disgruntled  em¬ 
ployees  were  responsible  for  most  at¬ 
tacks  on  company  networks.  More  than 
S70  million  was  lost  by  organizations  in 
just  one  year  as  a  result  of  theft  of  pro¬ 
prietary  information. 

And  financial  losses  aren't  the  only 


consideration  when  it 
comes  to  insider  abuses.  An 
organization's  reputation 
may  be  at  stake  if  word  gets 
out  that  employees  have 
leaked  information,  espe¬ 
cially  in  fields  where  client 
privacy  is  criticaL  such  as 
finance  or  medicine. 

Gartner  issued  a  report 
in  {uly  in  which  it  cited 
portable  storage  devices 
as  considerable  workplace 
security  risks  because  they 
may  be  instrumental  in 
downloading  private,  pro¬ 
prietary  information  or  for 
admitting  a  virus.  Pocket- 
size  hard  drives  that  con¬ 
nect  using  FireWire  or  a 
USB  hard  drive  or  key- 
chain  drive,  disk-based  Mr’3  players 
(like  the  iPod),  memory  sticks,  compact 
flash  and  other  memory  media,  and  dig¬ 
ital  cameras  with  media  cards  were  all 
identified  as  security  threats.  Especially 
dangerous  are  USB  sticks,  which  can 
be  easily  concealed  and  are  capable  of 
storing  up  to  1GB  of  data. 

Insider  threats  can  lead  to  the  loss, 
corruption  or  unavailability  of  informa¬ 
tion.  resulting  in  a  disruption  of  service 
to  an  organization’s  clientele.  Since 
fraud,  theft  and  blackmail  can  be  ac¬ 
complished  more  easily  by  insiders, 
employee-awareness  programs  and 
computer  security  policies  are  impera¬ 
tive.  Restricting  access  to  information 
that  may  be  altered  or  misappropriated 
reduces  exposure.  An  organization  may 
be  held  liable  for  the  release  of  any  sen¬ 
sitive  or  confidential  information  per¬ 
taining  to  its  customers;  therefore,  ap¬ 
propriate  procedures  to  safeguard  that  I 


information  are  warranted.  And  don’t 
overlook  physical  security. 

While  procedures  and  policies  go  a 
long  way  toward  securing  networks,  ad¬ 
ministrators  may  want  to  use  any  one 
of  several  software  tools  currently 
available  to  help  lock  down  USB  ports. 
One  such  product  is  DynaComm  i;scan 
from  FuturcSoft  {www.dciseries.com). 
DynaComm  i:scan  acts  as  a  real-time 
monitor,  permitting  man^ement  of  the 
network  from  a  centralized  location 
while  helping  administrators  enforce  an 
organization's  policies  for  using  remov¬ 
able  media  across  their  networks. 

From  GFI  Security  (www.g^.«)m) 
comes  another  handy  tool,  the  GFI 
LANguard  I’ortable  Storage  Control. 
This  software  enables  administrators  to 
maintain  control  of  the  organization's 
network  by  allowing  users  to  plug  in 
USB  sticks,  download  and  upload  digi- 
j  tal  camera  data,  and  connect  MP3  play- 
I  ers.  smart  phones,  handhelds  and  the 
like.  Administrators  using  the  product 
can  determine  which  people  are  per¬ 
mitted  to  use  removable  media  central- 
•ly  from  Windows  Active  Directory. 

There's  no  question  that  portable  de¬ 
vices  play  a  valuable  role  in  the  storage 
arena  for  organizations  in  today's  work 
environments.  Banning  them  across  the 
board  would  be  more  detrimental  than 
practical,  and  security  experts  agree 
that  the  preferable,  more  secure  alter¬ 
native  is  a  controlled  approach.  The 
network  is  best  protected  by  the  organi¬ 
zation  adopting  comprehensive  securi¬ 
ty  measures,  including  policy  directives 
and  security  tools.  Your  network  ad¬ 
ministrative  team  is  wise  to  remember 
that  threats  don’t  arise  solely  from  out¬ 
side  the  network,  but  from  (sometimes 
unwitting)  users  and  their  portable  de¬ 
vices.  In  addition  to  what’s  out  there  al¬ 
ready.  security  teams  can  anticipate  a 
continuing  influx  of  products  for  ad¬ 
dressing  client-side  security.  O  51309 
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Mnosoft  Releases 
SPI,x64toBeta 

■  McranA  Corp.  iHt  wwk  af^ 
imnoad  lh»  aetMiBly  of  tfit 
fcn  nktm  rwlrirtw  lor  Ww 
dowt  Smir  2003  Stnfct  Pack  1 
<SP1)  ind  iw  MiKoni  of 
¥MBM$onor2003mdWin- 
doM  XP  hofoaleiHL  Tho  prod¬ 
ucts  wl  bo  OMiaUt  wMiin  tho 
MXImonIhtBunrsinllEro' 
soffs  Cuotowor  ftudow  Pro- 
9«(n.  TIm  final  raliooos  ore  duo 
in  tfw  first  M  of  2005.  Tho  xB4 
odMons  of  Hfindom  Sorvor  2003 
ad  WWom  XP  ProMonal  ^ 
tour  uivs  to  run  both  32*  and 
64^  ippicitlons.  aeconing  to 
thoeonpany. 


CelwaMe  Unveis 
MobieCd  Services 

B  VDico-ouirHP  appBration  vorv* 
dor  CalWare  ho.  baa  unwiod 
now  cafi-ocreoniny  and  cal- 
trantotf  lorvicos  lor  rmhfio 
phono  uaws.  Tho  Santa  Barbara. 
Ciit  hanod  company  aaM  Ml 
nowMobioCalSoraimlngaor- 
vica  odi  alow  ooors  to  baton  to 
veieo  maaaisoa  in  real  fima.  and 
MsoowllabfioCalTranatoraar- 
vtoa  latiuaarB  tranofor  cal  phono 
eali  to  a  homo  or  olllea  pim 
Tho  CaMtova  aaretoas  work  with 
afieajphonaaandeartiarsand 
alarf  ainJB  a  month. 


Phatware  to  Offer 
Monitoring  Tool 

■  PhtoWhre  Corp.  in  Mountain 
Maw.CaM.,hanralaaindiofl- 
wwa  Hill  liuwi  notwark  admin- 
Mrators  to  analya  and  dtagnooa 
proMamn  on  padwl-hnod  oat- 
works  aaad  wfih  Mndowa-haaod 
moWa  talito  PCs.  Iho  PMItot 
natwarknoidtorinosofiwnreal* 
lowsfTworharstoronduciraah 
lima  omUhs  on  wy  bind  of  LAN 
or  WM  aad  to  fitar  padwt-haaod 
datobyPnd*aos.UaarData- 
onmPretoooforTCPpotthard- 
nwreaddraoBordalaitrtoo,ac- 
ciNdbiy  to  Phatware.  Tha  proiaa 
atonal  saniM  of  fiw  appficatlon 
aafia  tor  S298.  and  a  poraonal 
adMonism. 
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WE'VE  ALL  SEEN  THEM  —  portable 
MP3  players,  sexy  new  iPods  and 
“finger-size”  drives  in  varying  col¬ 
ors  that  use  the  ubiquitous  Univer¬ 
sal  Serial  Bus  or  FireWire  port  for 


connectivity.  While  they 
look  innocent  enou^.  they 
nevertheless  pose  a  serious 
security  threat  to  organiza¬ 
tions.  In  fact,  some  compa¬ 
nies  have  banned  their  use 
outright.  Unfortunately,  too 
many  others  continue  to  ig¬ 
nore  the  potential  security 
risks  posed  by  the  use  of 
MP3  players.  USB  flash  dri¬ 
ves  and  other,  similar  high- 
capacity  portable  storage 
devices. 

Tltese  easily  concealed 
devices  —  which  employees 
often  bring  into  the  work¬ 
place  ~  can  be  readily 
plugged  into  any  USB  port, 
allowing  users  to  quickly 
and  eflortlessiy  download 
sensitive  corporate  information.  Then 
that  information  can  all  too  easily 
be  taken  to  the  outside  world.  Even 
when  tran^ressions  are  unintentional, 
security  risks  abound,  since  portable 
storage  devices  are  able  to  circumvent 
network  perimeter  defenses  such  as 
firewalls  and  antivirus  products  at  the 
mail  server  and  can  introduce  viruses 
or  other  malware. 

In  a  recent  Computer  Security  Insti¬ 
tute/FBI  Computer  Crime  and  Security 
Survey,  over  three  quarters  of  all  re¬ 
spondents  cited  insider  abuse  of  net¬ 
work  access  as  a  top  security  concern 
for  companies.  And  rightly  so.  since  the 
survey  indicated  that  disgruntled  em¬ 
ployees  were  responsible  for  most  at¬ 
tacks  on  company  networks.  More  than 
S70  million  was  lost  by  organizations  in 
just  one  year  as  a  result  of  theft  of  pro¬ 
prietary  infonnatioa 

And  financial  losses  aren’t  the  only 


consideration  when  it 
comes  to  insider  abuses.  An 
organization's  reputation 
may  be  at  stake  if  word  gets 
out  that  employees  have 
leaked  information,  espe¬ 
cially  in  fields  where  client 
privacy  is  critical,  such  as 
flnance  or  medicine. 

Gartner  issued  a  report 
in  July  in  which  it  cited 
portable  storage  devices 
as  considerable  workplace 
security  risks  because  they 
may  be  instrumental  in 
downloading  private,  pro¬ 
prietary  information  or  for 
admitting  a  virus.  Pocket- 
size  bard  drives  that  con¬ 
nect  using  FireWire  or  a 
USB  hard  drive  or  key¬ 
chain  drive,  disk-based  MP3  players 
(like  the  iPod),  memory  stidu,  compact 
flash  and  other  memory  media,  and  dig¬ 
ital  cameras  with  media  cards  were  all 
identified  as  security  threats.  Especially 
dan^rous  are  USB  sticks,  which  can 
be  easily  concealed  and  are  capable  of 
storing  up  to  1GB  of  data. 

Insider  threats  can  lead  to  the  loss, 
corruption  or  unavaihdsUity  of  informa- 
tioD,  resulting  in  a  disruption  of  service 
to  an  organization's  clientele.  Since 
fraud,  theft  and  blackmail  can  be  ac¬ 
complished  more  easily  by  insiders, 
employee-awareness  programs  and 
computer  security  policies  are  impera¬ 
tive.  Restricting  access  to  information 
that  may  be  altered  or  misappropriated 
reduces  exposure.  An  organization  may 
be  held  liable  for  the  release  of  any  sen¬ 
sitive  or  confidential  information  per¬ 
taining  to  its  customers;  therefore;  ap¬ 
propriate  procedures  to  safeguard  that  i 


information  are  warranted.  And  don't 
overlook  physical  security. 

While  procedures  and  policies  go  a 
long  way  toward  securing  networks,  ad¬ 
ministrators  may  want  to  use  any  one 
of  several  software  tools  currently 
available  to  help  lock  down  USB  ports. 
One  such  product  b  DynaG3mm  irscan 
from  FutureSoft  (www.dctseries.com). 
DynaComm  i:scan  acts  as  a  real-time 
monitor,  permitting  management  of  the 
network  from  a  centralized  location 
while  helping  adminbtrators  enforce  an 
organization's  policies  for  using  remov¬ 
able  media  across  their  networks. 

From  GFI  Security  (www.g/Lcom) 
comes  another  handy  tooL  the  GFI 
LANguard  Portable  Storage  Control 
Thb  software  enables  adminbtrators  to 
maintain  control  of  the  organization's 
network  by  allowing  users  to  plug  in 
USB  sticks,  download  and  upload  digi¬ 
tal  camera  data,  and  connect  MP3  play¬ 
ers,  smart  phones,  handhelds  and  the 
like.  Administrators  using  the  product 
can  determine  which  people  are  per- 
I  mined  to  use  removable  media  central¬ 
ly  from  \Wndows  Active  Directory. 

There's  no  question  that  portable  de¬ 
vices  play  a  valuable  role  in  the  storage 
arena  for  organizations  in  today's  work 
environments.  Banning  them  across  the 
board  would  be  more  detrimental  than 
practicaL  and  sectirity  experts  agree 
that  the  preferable,  more  secure  alter¬ 
native  is  a  controlled  approach.  The 
network  b  best  protected  by  the  organi¬ 
zation  adopting  comprehensive  securi¬ 
ty  measures,  including  policy  diiectives 
and  security  tools.  Your  network  ad- 
minbtrative  team  is  wise  to  remember 
that  threats  don't  arise  solely  from  out¬ 
side  the  network,  but  from  (sometimes 
unwitting)  users  and  their  portable  de¬ 
vices.  In  addition  to  what’s  out  there  al¬ 
ready,  security  teams  can  anticipate  a 
continuing  influx  of  products  for  ad¬ 
dressing  client-side  security.  O  51309 
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>  With  Sprint,  FTD  is  beautiful. 


When  holiday  call  volume  and  Web  traffic  spike  by  a  factor  of  ten.  floral 
superpower  FTD  doesn't  worry  about  their  network  -  even  though  their  entire 
business  relies  on  it.  Because  FTD  relies  on  Sprint.  Sprint  connects  FTD  to  over 
52.000  florists  in  154  countries  while  delivering  network  reliability  so  good  it 
helps  FTO  guarantee  100S  satisfaction  to  their  customers.  Network  reliability 
is  why.  for  the  past  14  years,  this  leading  provider  of  flowers  has  turned 
to  Sprint.  In  business,  perennials  don't  get  much  more  beautiful  than  that. 

With  Sprint,  hnsinm  b  btautiful  * 

>  Vbit  SprintCMi/bnMtifMl  far  cast  stndba  ar  cal  877-777*S5n  > 

©2004  spfim  All  rights  reserved.  Sprint  and  the  diamond  logo  are  trademarts  of  Sprint  Communications  Company  L.P 


IT  MENTOR 

Powerful  Partnerships 

Every  IT  vendor  wants  to  be  yoitr  partner, 
but  Wharton  School  CIO  Deirdre  Woods 
has  found  a  way  to  lever^e  collaborations 
to  deliver  great  —  and  sometimes  unex¬ 
pected  —  results.  Pm*  40 
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Great 


CIO  JoeAmado’s 
focus  on  leadership, 
project  manage¬ 
ment  and  customer 
service  has  revved 
up  IT  performance 
at  Philip  Morris 
USA.  BY  THOMAS 
HOFFMAN 

THE  IT  DEPARTMENT 
at  Philip  Morris  USA 
Inc.  is  a  poster  child 
for  alignii^  IT  with  a 
company’s  business 
divisions.  Just  ask  Henry  P.  Long  Jr. 

Loi^  vice  president  of  leaf  purchas¬ 
ing  at  the  tobacco  giant,  raves  about 
how  IT  leaders  woric  side  by  side  with 
the  heads  of  various  departments  to 
develop  an  IT  strat^y  to  support  their 
respective  business  plans. 

Over  the  past  four  years,  the  IT 
group  has  also  put  into  place  a  more 
disciplined  project  management 
methodology  that's  helping  it  deliver 
projects  on  schedule,  on  budget  and 
within  scope  85%  to  87%  of  the  time, 
according  to  a  benchmarking  study 
conducted  by  The  Hackett  Group  in 
September  That’s  up  horn  a  50%  to 
60%  delivery  rate  in  2000. 

But  wdiat  impresses  Loi^  the  most  is 
the  fact  that  IT  leaders  get  together 
with  him  and  other  business  execu¬ 
tives  every  quarter  to  find  out  bow 
well  the  IT  department  is  meeting 
project  requirements,  delivering  on 
strategic  (^jectives  and  supporting 
day-to-day  operations.  Tliey’re  very 
much  aligned  with  each  business  func¬ 
tion,’'  says  Long.  'There's  a  real  effon 
to  focus  on  the  client  and  move  the 
business  forward.” 

Such  praise  frcxn  a  26-year  Philip 
Morris  veteran  is  a  testament  to  CIO 
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Jiv  Amado  and  his  masUTlul  rccral'iing  of  the 
piTson  IT  otyani/atu>n  hf  inhoriicd  in  3(MK),  «A  com¬ 
bination  of  attrition  and  outsourcing  has  since  dc- 
crc.isod  the  staff  I**  4«t».t 

I’rior  to  Amado’s  promotion.  Kichmond.  V'a.-bascJ 
Philip  Mtirris'  11'  department  was  historically  viewed 
as  techntcaliv  adept  hut  l.teking  in  org;mi/ational 
leadership  compi'tence.  says  Howard  (>utiman.  presi¬ 
dent  ofiiuttman  IVvelopmeni  Strategies  Inc.  in 
1  edgewo«»d.  N.I-.  who  has  bwn  wiirking  with  AmaJo 
.md  his  team  to  drive  organizational  improvement 
since  ’OtU). 

“The  pcsiple  wh«»  had  been  at  the  lop  had  IT  com 
peienee.  but  they  needed  to  ratchet  up  their  leader¬ 
ship  competence.”  says  (.iuttman. 

I-nter  Anud«*.  whoh\  J0(H)  had  risem  to  the  top 
rr  piKt.  U  years  after  jinning  iheeompany  as  a  pro 
grammer.  He  f«*und  that  the  seeii«m  on  eustomer  sat- 
tsfaction  w  iih  IT  in  that  year's  biannual  corporate 
empltwiv  survey  rcxealed  that  improvements  wen* 
needed  in  managing  projects  and  aligning  IT  with  i 
the  business.  j 

“We  had  a  mantra:  AVe'rc  good  ttHlay.  but  we  want  | 
to  be  great.' "  says  .Amado.  lliai  helped  set  the  tone  ' 
for  a  multipronged  sirategs-  aimed  at  developing  a  | 
world-class  IT  organi/aiion,  he  si»\s,  I 

Leadership 

Amado's  first  goal  was  to  broaden  the  leadership  ca¬ 
pabilities  of  Philip  Morris'  IT  managers.  In  2001.  ' 

Amado  and  Guitman  held  a  two-day  off-site  meeting 
with  the  company's  senior  IT  managers.  Amado  dLs- 
cussed  steps  they  could  take  to  improve  their  leader¬ 
ship  capabilities,  while  Guttm.'in  provided  executive 
coaching  on  teamwork. 

“Sonie  of  the  issues  that  came  up  were  around 
conflict  aversion,  where  thoa*  was  a  reluctance 
among  IT  managers  to  h«)ld  their  peers  accountable," 
says  (iuitman.  He  set  up  nKx'tings  between  IT  man¬ 
agers  from  different  functional  areas  to  help  them 
build  stronger  Kinds  and  identify  ways  to  .support 
one  anoiK-r  "instead  of  rc-lying  upon  Joe  to  be  the 
answer  man.”  Gutiman  says. 

The  effort  continues.  This  November.  Amado 
launched  a  throe-d.iy  ofl-site  IT  leadership  course 
(hat  will  enable  him  and  his  t<ip  managers  to  provide 
hands-on  training  m  25  to  .?0  IT  managers  at  a  time. 

■nie  plan  is  to  put  UK>  iti  120  IT  managers  and  siaffcrs 
through  the  program  by  mid-2005.  he  .says. 

"Ten  years  ago.  if  you  wanted  instruction  in  lead¬ 
ership.  you  went  tvi  a  class.”  says  Amado.  Nowadays, 
he  says,  peer  training  is  more  effective. 

Philip  Morri.s  has  also  K'nefiied  from  adopting  a 
mtire  structured  approach  to  project  management, 
drawing  upon  best  pr.ietices  espoused  by  the  Project 
•Management  Insitiuie  Ine.  in  Newtown  Squan.-.  Pa., 
and  creating  a  project  management  office.  This  has 
enabled  the  IT  organizatitin  to  improve. Its  ability  In 
Itirccast  and  monitor  the  financial  go;tls  set  for  vari¬ 
ous  initiatives,  say.s  I  isa  Hunt,  director  of  informa- 
titin  servH:i*s. 

Amadti  explains  that  the  biggest  challenge  he 
faced  during  the  IT  transformation  was  ensuring  that 
his  te.im  was  estuMtshing  the  right  business  metrics 
to  measure  the  group’s  perlbrmance.  "I  wanted  to 
make  sua*  we  were  imprtiving  the  client  experience,’' 
Amado  sas-s. 


MThe  organi¬ 
zation  was 
looking  for  that 
road  map  of 
where  we  were 
going  and  why. 

I  wanted  to  make 
sure  we  were  crystal  clear  on  the 
value  this  organization  delivers. 

JOE  AMADO  CIO  PHILIP  MORRIS  USA 


Apparently,  he  made  the  right  choices.  Amado 
"tries  to  look  at  metrics  that  are  very  client-focused 
and  have  meaning."  such  as  how  a  particular  applica¬ 
tion  is  helping  a  business  division  to  cut  costs  or  im¬ 
prove  productivity,  says  Howard  Kubin.  an  analyst  at 
Meta  tiroup  Inc.  in  Stamford.  Conn.,  who  has  worked 
with  Amado  and  his  team. 

Thanks  to  a  combination  of  online,  third-party 
and  in-house  training  on  rinance.  Philip  Morris  IT 
staffers  are  now  more  adept  at  building  business 
cases  for  priijecis  ba-sed  on  metric's  such  as  return 
on  investment,  workload  and  risk  reduction,  compet¬ 
itive  advantage,  .ind  alignment  with  business  objec¬ 
tives.  Hunt  says. 

By  using  a  standard  set  of  ttwls  and  techniques, 
the  IT  oi^anizaiion  is  better  c’quipped  to  predict 
projcxrt  outcomes,  says  )oc  Miller,  senior  dirc'cior  of 
service  delivery.  ••Before.  Iprojcci  management]  was 
more  scat-of-your-pant.s,”  he  explains.  "Now.  we're 
better  able  Ao  foresee  issues  we  may  be  coming  up 


CIO  Joe  Amado  gauges  fits  IT  tf-am's  oerlofmance 
against  a  numl»f  ol  customer  scrvici.-onenteo 
Hpri!  are  |u5t  a  tew  ol  the  results 

In  2002.  the  Philip  Mo'ris  USA  IT  group  cum- 
pleled  35  majen  oioiecls,  m  2003,  it  compk-twl 
70.  in  2004.  il  will  complete  more  ilian  100 

Proiticl-dei'verv  5u<;ce»  has  imprcved  horn 
aOoul  60'^e  to  85-''t 

Over  !he  post  two  vea's.  average  IT  emoloyci- 
satisfaction  ha.v  nven  horn  2  to  3  93  on  a  scale 
of  1  to  5 

Ounng  the  .sami*  t<me  oeriod,  average  internal 
client  salisGctioh  with  IT  serv>c«  and  value  has 
rtsen  from  2  to  4 

The  company  il'dn't  guaJify  as  one  of  Compaler- 
worWs  6«s!  Places  to  Work  m  IT  prior  in  2002 
In  ?O03  It  was  No  43.  this  year  i1's  No  17 

It  placed  No  6  m  the  c.vtftr  oevi'iopment  caip- 
gory  .n  Camputarwrtfia''^  Ba-s*  Places  rankings 

Thfirriay  We/frrjo 


against. ' 

"What  we  were  trying  to  di>  was  to  put  in  repcat- 
1  able  processes”  to  help  improve  the  group's  projeet- 
I  delivery  success  rates.  Amado  says. 

TTtree  years  ago.  Amado  assigned  a  group  of  four 
people  to  conduct  project  ’‘health  checks"  to  ensure 
I  ihat  those  processes  are  followed.  They  meet  regu- 
I  larly  with  project  managers  and  sponsors,  monitor- 
I  ing  the  use  of  standard  methodologies. 

Customer  Connection 

Amado  has  also  worked  hard  to  align  his  IT  organi- 
zaiitin  more  cUisely  with  the  busincHis.  Recalling  the 
valuable  business  e.xperiencc  he  gained  working  in 
IT  support  roles  in  Philip  Morris'  sales,  marketing 
and  manufacturing  divisions.  Am.ido  has  placed  IT 
managers  directly  into  the  business  divisions  to  bet¬ 
ter  understand  business  requirements.  * 

He  also  encourages  IT  managers  to  transfer  out  of 
the  technology  area  for  a  year  or  two  to  work  in  oth¬ 
er  divisions  within  the  company.  About  20  have  done 
SCI  over  the  past  two  years.  Amado  says. 

“We  have  a  lot  more  people  now  who  are  fiKuscd 
on  the  creation  of  business  value.”  Miller  .says. 

In  another  effort  to  improve  alignment  between  IT 
and  the  businc^ss,  Amado  has  developed  a  set  of  “vi¬ 
sioning  sessions."  He  brings  IT  and  businc'ss  leaders 
off-sitc  to  discuss  bu.siness  and  IT  strategics  and  Knv 
to  align  them  more  closely. 

That.  too.  seems  to  be  working.  Ross  Webster,  vice 
president  of  trade  marketing  and  distribution  at 
Philip  Morris,  credits  Amado  with  identifying  the 
need  to  upgrade  some  systems  in  order  to  deliver 
real-time  sales  data  to  field  reps.  Those  efforts, 
which  began  in  2000.  produce  daily  updates  on  sales 
activities,  such  as  the  number  of  sales  calls  made  and 
the  number  of  stores  contacted. 

"(ITl  is  giving  us  the  tools  to  have  a  much  more 
productive  sales  organization.”  Webster  says. 

Despite  all  the  changes  that  have  taken  place  with¬ 
in  the  IT  culture  over  the  past  four  years.  Amado 
says  there  hasn't  been  much  resistance  from  his 
staffers.  Thai's  partly  bccau.se  the  seeds  for  the  IT 
department’s  transformation  were  planted  through¬ 
out  the  1990s  as  the  otganization  intensified  its  finrus 
on  understanding  and  aligning  itself  more  closely 
with  the  business. 

“The  organization  was  looking  for  that  road  map 
of  where  wc  were  gtiing  and  why."  Amadti  s.iys.  “I 
W'anied  to  fiake  sure  wc  were  eryst.al  clear  on  the 
s-aluc  this  (»rganiz;iiion  delivers.” 

Amado’s  ability  to  communicate  is  one  of  his 
.strengths,  says  Meta  Gnmp’s  Rubin,  "foe  likes  u»  Imik 
not  at  qualitative  benchmarks  but  (at  I  his  business 
partners  and  whether  be  and  his  group  are  doing  a 
good  job  ftir  them."  he  says. 

Looking  ahead  to  2tX)5.  Amado  will  be  working  to 
improve  business  processes  through  the  use  of  IT. 
While  the  proce.sses  are  owned  by  business  units  (for 
c.xample,  supply  chain  management  is  overseen  by 
the  logistics  department).  IT  is  focused  on  how 
those  proccs.sos  work  from  an  end-to-end  system.s 
perspective,  he  says. 

The  goal:  continuous  improvement.  "1  feel  gixid 
about  where  wc  are  today  bt-cause  of  what  I  hear 
fttim  our  clients,"  says  Amado.  “Arc  we  great?  I  think 
we’re  getting  close."  O  50839 


loe  Amado  and  his  masterful  recrafdng  of  the  560* 
person  IT  organization  he  inherited  in  2000.  (A  com- 
btnation  of  attrition  and  outsourcing  has  since  de* 
creased  the  staff  to  480.) 

Prior  to  Amado's  promotion.  Richmond.  Va.-based 
Philip  Morris'  IT  department  was  historically  viewed 
as  technically  adept  but  lacking  in  organizational 
leadership  competence,  says  Howard  Guttman,  presi¬ 
dent  of  Gunman  Development  Strategies  Inc.  in 
Ledgewood.  N.I.,  who  has  been  working  with  Amado 
and  his  team  to  drive  organizational  improvement 
since  2000. 

The  people  who  had  been  at  the  top  had  IT  com¬ 
petence.  but  they  needed  to  ratchet  up  their  leader¬ 
ship  competence.”  says  Guttman. 

Enter  Amado.  who  by  2000  had  risen  to  the  top 
IT  post.  13  years  after  ioining  the  company  as  a  pro¬ 
grammer.  He  found  that  the  section  on  customer  sat- 
is^ction  with  IT  in  that  year's  biannual  corporate 
employee  survey  revealed  that  improvements  were 
needed  in  managing  protects  and  aligning  IT  with 
the  business. 

“^e  had  a  mantra:  'We’re  good  today,  but  we  want 
to  be  great.'  ”  says  Amado.  That  helped  set  the  tone 
for  a  multipronged  strategy  aimed  at  developing  a 
worid-class  IT  organization,  he  says. 

Laadeiship 

Amado's  first  goal  was  to  broaden  the  leadership  ca¬ 
pabilities  of  Philip  Morris'  IT  managers.  In  2001, 
Amado  and  Guttman  held  a  two-day  oflf-site  meeting 
with  the  company’s  senior  IT  managers.  Amado  dis¬ 
cussed  steps  they  could  take  to  improve  their  leader¬ 
ship  capabilities,  while  Guttman  provided  executive 
coaching  mi  teamworic. 

'Some  of  the  issues  that  came  up  were  around 
conflict  aversion,  where  there  was  a  reluctance 
among  IT  managers  to  hold  their  peers  accountable.” 
says  Guttman.  He  set  up  meetings  between  IT  man¬ 
agers  from  different  functional  areas  to  help  them 
build  stronger  bonds  and  identify  ways  to  support 
one  another  '‘instead  of  relying  upon  Joe  to  be  the 
answer  man,”  Guttman  says. 

The  effort  continues.  This  November.  Amado 
launched  a  three-day  off-site  IT  leadership  course 
that  will  enable  him  and  his  top  managers  to  provide 
hands-on  training  to  2S  to  30  IT  managers  at  a  time. 
The  plan  is  to  put  100  to  120  IT  managers  and  staffers 
through  the  program  by  niid-200S.  be  says. 

Ten  years  ago,  if  you  wanted  instruction  in  lead¬ 
ership.  you  went  to  a  class,”  says  Amado.  Nowadays, 
he  says,  peer  training  is  more  effective. 

Philip  Morris  has  also  bcneHied  from  adopting  a 
more  structured  approach  to  project  management, 
drawing  upon  best  practices  espoused  by  the  Project 
Management  Institute  Inc.  in  Newtown  Square,  Pa,, 
and  creating  a  project  management  office.  This  has 
enabled  the  IT  organization  to  improve  its  ability  to 
forecast  and  monitor  the  ffnancial  goals  set  for  vari¬ 
ous  initiatives,  says  Lisa  Hunt,  director  of  informa¬ 
tion  services. 

Amado  explains  that  the  biggest  challenge  he 
faced  during  the  IT  transformation  was  ensuring  that 
his  team  was  establishing  the  right  business  metrics 
to  measure  the  group's  performance.  ”I  wanted  to 
make  sure  wc  were  improving  the  client  experience," 
Amado  says. 


H  The  organi¬ 
zation  was 
looking  for  that 
road  map  of 
where  we  were 
going  and  why. 

I  wanted  to  make 
sure  we  were  crystal  dear  on  the 
value  this  organ^ation  delivers. 

JOE  AMADO.  CIO.  PHILIP  MORRIS  USA 


Apparently,  he  made  the  right  choices.  Amado 
"tries  to  look  at  metrics  that  are  very  cUent-focused 
and  have  meaning,”  such  as  bow  a  particular  applica¬ 
tion  is  helping  a  business  division  to  cut  costs  or  im¬ 
prove  productivity,  says  Howard  Rubin,  an  analyst  at 
Meta  Group  Inc.  in  Stamford.  Corm.,  who  has  worked 
with  Amado  and  his  team. 

Thank-s  to  a  combination  of  online,  third-party 
and  in-house  training  on  finance.  Philip  Morris  IT 
staffers  are  now  more  adept  at  building  business 
cases  for  projects  based  on  metrics  such  as  return 
on  investment,  workload  and  risk  reduction,  compet¬ 
itive  advantage,  and  alignment  with  business  objec¬ 
tives.  Hunt  says. 

By  using  a  standard  set  of  tools  and  techniques, 
the  IT  organization  is  better  equipped  to  predict 
project  outcomes,  says  Joe  Miller,  senior  director  of 
service  delivery.  “Before,  [project  management]  was 
more  seat-of-your-pants.”  be  explains.  “Now,  we're 
better  able  to  foresee  issues  we  may  be  coming  up 
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again.st.” 

“What  we  were  trying  to  do  was  to  put  in  repeat- 
able  processes"  to  help  improve  the  group’s  project- 
delivery  success  rates,  Amado  says. 

Three  years  ago.  Amado  a.ssigned  a  group  of  four 
people  to  conduct  project  “health  checks”  to  ensure 
that  those  processes  are  followed.  They  meet  regu¬ 
larly  with  project  managers  and  sponsors,  monitor¬ 
ing  the  use  of  standard  methodologies. 

Customer  Connection 

Amado  has  also  worked  hard  to  align  his  IT  organi¬ 
zation  more  closely  with  the  business.  Recalling  the 
valuable  business  experience  he  gained  working  in 
IT  support  roles  in  Fliilip  Morris'  sales,  marketing 
and  manufacturing  divisions,  Amado  has  placed  IT 
managers  directly  into  the  business  divisions  to  bet¬ 
ter  understand  business  requirements. 

He  also  encourages  IT  managers  to  transfer  out  of 
the  technology  area  for  a  year  or  two  to  work  in  oth¬ 
er  divisions  within  the  company.  About  20  have  done 
so  over  the  past  two  years,  Amado  says. 

“We  have  a  lot  more  people  now  who  are  focused 
on  the  creation  of  business  value,"  Miller  says. 

In  another  effort  to  improve  alignment  b^een  IT 
and  the  business,  Amado  has  developed  a  set  of  'M- 
sioning  sessions.”  He  brings  IT  and  business  leaders 
off-site  to  discuss  business  and  IT  strategies  and  how 
to  align  them  more  closely. 

That,  too,  seems  to  be  working.  Ross  Webster,  vice 
president  of  trade  maiketing  and  distribution  at 
Philip  Morris,  credits  Amado  with  ideiuifying  the 
need  to  upgrade  some  systems  in  order  to  deliver 
real-time  sales  data  to  field  reps.  Those  efforts, 
which  began  in  2000,  produce  daily  updates  on  sales 
activities,  such  as  the  number  of  sales  calls  made  and 
the  number  of  stores  contacted. 

im  is  giving  us  the  tools  to  have  a  much  more 
productive  sales  organization,”  Webster  says. 

Despite  all  the  changes  that  have  taken  place  with¬ 
in  the  IT  culture  over  the  past  four  years,  Amado 
says  there  hasn't  been  much  resistance  from  his 
staffers.  That’s  partly  because  the  seeds  for  the  IT 
department’s  transformation  were  planted  through¬ 
out  the  1990s  as  the  oiganization  intensified  its  focus 
on  understanding  and  aligning  itself  more  closely 
with  the  business. 

The  organization  was  looking  for  that  road  map 
of  where  we  were  going  and  why."  Amado  says.  "I 
wanted  to  make  sure  we  were  crystal  clear  on  the 
value  thb  organization  delivers.” 

Amado’s  ability  to  communicate  is  one  of  his 
strengths,  says  Mela  Group’s  Rubin.  “Joe  likes  to  look 
not  at  qualitative  benchmarks  but  [at]  his  business 
partners  and  whether  he  and  his  group  are  doing  a 
good  job  for  them.”  he  says. 

Looking  ahead  to  2005,  Amado  will  be  working  to 
improve  business  processes  through  the  use  of  IT 
While  the  processes  are  owned  by  business  units  (for 
example,  supply  chain  management  is  overseen  by 
ff>e  logistics  department).  IT  is  focused  on  how 
those  processes  work  from  an  end-to-end  systems 
perspective,  be  says. 

The  goal:  cominuous  improvemenL  “I  feel  good 
about  where  we  are  today  because  of  what  1  hear 
from  our  clients."  says  Amado.  “Are  we  great?  I  thipk 
we’re  gettii^  close,"  O  50639 


McAfee 


agtne  if  McAfee  could  protect  you  from  other  threats  the  way  it  protects  you  from  security  threats 
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PARTNERSHIPS 

Here's  how  the  Wharton  School  has  leveraged  IT 
vendor  collaboration  to  reap  unexpected  rewards. 

BY  DEIRORE  WOODS 
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Partnerships  are  a  fact  of 
life  in  today's  world.  Strong 
IT  partnerships  have  the 
power  to  vitalize  and  even 
transform  a  business,  provid* 
ed  you  follow  a  clear  strategy  and 
manage  them  carefully. 

At  the  Wharton  School  of  the  Uni¬ 
versity  of  Pennsylvania,  we've  devel¬ 
oped  partnerships  that  not  only  serve 
our  IT  needs  but  also  contribute  to  the 
overall  mission  of  the  university.  The 
strategy  we  follow  is  straightforward 
enough  to  work  for  any  IT  organiza¬ 
tion:  First,  serve  the  ctistomer  —  in  our 
case,  that's  faculty  and  students  —  and 
second,  build  the  brand. 

I  rely  on  four  basic  techniques  to 
maintain  and  leverage  partnerships. 
And  while  it’s  true  that  businesses 
come  in  different  shapes  and  sizes,  any 
company  can  apply  these  concepts  to 
create  opportunities  for  growth. 

1.  Insure  the  Essentials 

The  most  crucial  collaborations  are 
what  I  call  "insurartce  policies.*'  These 
are  the  must-have  partnerships  that 
suppon  infrastructure  and  critical  ser¬ 
vices.  Although  they’re  the  most  obvi¬ 
ous  kinds  of  partnerships,  they're  not 
necessarily  the  easiest  to  nail  down.  It 
can  take  time  to  And  the  right  At 
At  Wharton,  our  relationship  with 
IBM  fits  into  this  category,  bemuse 
when  it  comes  to  our  inAastructure. 
we  know  the  company  will  be  there 
when  we  need  it 
One  of  the  tough  lessons  I*ve 
learned  is  that  many  vendors  may  not 
be  able  to  deliver  sriuit  you  need.  A 
few  years  ago.  we  temporarily  lost  our 
entire  application  environment,  which 
was  running  on  another  vendor’s 
servers.  When  we  really  needed  top* 
notch  support  it  was  clear  that  our  old 
vendor's  just  wasn’t  good  enough. 

Our  parmership  with  IBM  works  be¬ 
cause  the  company  understands  our 
operation  and  has  the  resources  to  de¬ 
liver  on  its  commitments.  Hiis  provides 
us  with  the  st^Uity  and  confidence  to 
extend  our  reach  beyond  the  basics. 

2.  nwnote  ttw  Brand 

An  insurance-policy  partner^tip  gives 
you  the  freedom  to  explore  other  op¬ 
portunities.  like  partnerships  that  can 
build  your  brand.  An  example  of  this 
at  Whtfton  is  Wharton  Research  Data 
Services  (WRDS).  our  Anancial  re¬ 
search  tooL 

When  we  Arst  developed  WROS.  we 
were  simply  responding  to  the  needs 
of  students  and  faculty,  who  wanted  a 
comprehensive  research  tool  for  Anan¬ 
cial  data.  We  formed  partner^ps  with 


Standard  &  Poor’s  Compustat  unit  and 
the  Center  for  Research  in  Securities 
Prices  at  the  University  of  Chicago 
Graduate  School  of  Business  to  secure 
the  necessary  data,  and  we  developed  a 
uniAed,  Web-based  intetface  to  th^ 
and  other  data  sets  in  1996. 

Not  long  after  the  launch  of  WRDS. 
one  of  Wharton’s  top  competitors  in¬ 
quired  about  buying  the 
service  for  its  students. 

After  other  schools  con¬ 
tacted  us.  we  realized  we 
had  a  great  (^>porTumty 
to  build  Wharton's  brand.  So  we  pur¬ 
sued  additional  partnerships  with  data 
providers,  transforming  a  tool  devel¬ 
oped  for  internal  customers  into  the 
leading  resource  for  academic  Anan¬ 
cial  data. 

Today.  WRDS  serves  U5  top-tier  aca¬ 
demic  institutions  and  is  academia's 
de  foao  standard  for  Anancial  data  re¬ 
search.  Thousands  of  times  each  day, 
when  researchers  at,  say.  Harvard  or 


Stanford  look  up  Anancial  data,  it’s  the 
Wharton  brand  they  see. 

3.  Tap  New  Technology 

You  can  also  use  partnerships  to  tap  — 
and  perhaps  shape  ^  new  technolo¬ 
gies  and  products.  They  can  even  fuel 
business  transformations  to  keep  you 
ahead  of  the  competition. 

For  example.  Adobe 
Systems  Inc's  PDF  Ales 
are  now  ubiquitous,  but 
h  wasn’t  that  way  in 
1993.  when  Wharton  was 
a  beta-test  site  for  Adobe's  new  Acro¬ 
bat  technolt^.  Our  partnership  based 
around  the  PostScript  technology  had 
put  us  on  the  inside  track  by  the  time 
Adobe  began  to  explore  electronic  doc¬ 
ument  technologies.  Wharton  has  been 
a  test  site  and  an  early  adopter  of  each 
new  generation  of  Acrobat  technolo¬ 
gies,  allowing  us  to  integrate  them  into 
our  operations  much  more  quickly  than 
would  have  been  possible  otherwise. 


www.compulerworld.com 


Wharton’s  relationship  with  Macro¬ 
media  Inc.  also  shows  how  IT  partner¬ 
ships  can  transform  an  organizatioa 
Early  adoption  of  Macromedia  tech¬ 
nologies  such  as  DreamWeaver.  Cold¬ 
Fusion  and  Flash  have  been  key  to  the 
development  of  Spike,  our  award¬ 
winning  student  intranet  Communica¬ 
tions  on  campus  were  streamlined  and 
redeAned  through  this  early  imple¬ 
mentation  of  an  information  portal. 
Spike,  which  has  been  recognized  as  an 
industry  best  practice,  is  now  in  its 
10th  version.  And  Macromedia  tech¬ 
nologies  continue  to  underpin  many  of 
Wharton's  intranet  and  Web-based  ser¬ 
vices,  including  our  main  Web  site  and 
the  advanced  simulations  developed 
by  Wharton's  Learning  Lab. 

These  relationships  work  not  just  be¬ 
cause  great  products  are  involved  but 
also  because  the  vendors  are  willing  to 
be  full-fledged  partners.  Uncovering 
such  opportunities  takes  trial  and  error, 
of  course,  but  the  ri^t  investment  ulti¬ 
mately  more  than  pays  for  itselL 

4.  Share  the  Wealth 

We  also  use  IT  partnerships  to  benefit 
other  areas  of  Wharton  in  ways  that 
stretch  far  beyond  ITs  normal  realm. 
We've  called  on  partners  to  help  serve 
various  school  initiatives,  and  in  the 
true  spirit  of  partnership,  the  beneAts 
flow  in  both  directions. 

For  example,  our  online  business 
magazine,  Knowledge^  Wharton,  which 
has  400,000  readers,  recently  ran  inter¬ 
views  with  top  executives  of  some  of 
our  IT  partners,  including  Adobe  CEO 
Bruce  Chizen  and  Macromedia  Chair¬ 
man  and  CEO  Rob  Burgess. 

We've  invited  a  number  of  CEOs 
from  partners  such  as  Xerox  Corp.  and 
Adobe  to  visit  Wharton  and  meet  with 
faculty  and  students.  We’re  also  look¬ 
ing  into  setting  up  career  services  pro¬ 
grams  with  our  partners  to  give  Whar¬ 
ton  graduates  access  to  job  opportuni¬ 
ties  at  top  technoli^  Arms  wiiile  giv¬ 
ing  our  partners  access  to  some  of  the 
country’s  top  MBA  students. 

None  of  the  partnerships  Tve  men¬ 
tioned  are  new,  and  that's  do  coinci¬ 
dence:  Strong  partnerships  take  time 
to  build.  Be  prepared  for  some  false 
starts,  because  it  often  takes  a  while 
to  And  the  right  At  for  your  company. 
And  don’t  forget  that  true  partnerships 
are  a  two-way  street  The  way  to  make 
the  relationship  work  is  to  ensure  that 
it’s  mutually  benefkiaL  O  50642 


Woods  is  associate  dean  and  CIO  at  the 
Wharton  School  of  the  University  of 
/^enn^fvania.  Contact  her  at  woods@ 
whartonjupenn^u. 
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HOW  TO  GET  USERS  AND  THE  HELP 
DESK  TO  PLAY  NICELY  TOGETHER. 

BY  ALANS.  HOROWITZ 


Ffcw  AHF.AS  in  business  create 
more  sparks,  conflict  and 
frustration  than  the  interplay 
between  tech  support  and  its 
customers.  Expectations  on 
b<«h  sides  arc  often  unrealistic,  and 
appreciating!  each  other’s  piwition  is 
lough.  Here  are  sonK  tips  to  help  take 
the  sting  out  of  the  help  desk4‘ustomer 
relationship. 

EDUCATE  Who,  you  may  ask.  has  the 


time  and  money  to  train  users?  But 
training  pays.  The  managing  director  of 
IT  at  a  New  England  hospital  chain  who 
didn’t  want  to  be  identified  says  one  of 
his  facilities,  a  large  city  hospital  with 
700  to  800  physicians,  docs  little  user 
training.  A  smaller  community  hospi¬ 
tal.  with  about  100  physicians,  teaches 
its  staff  c\'er>’thing  from  logging  on  to 
putting  in  orders  and  getting  report.s. 

The’  payoff;  Tech  supp«>rt  gets  com¬ 
plaints  every  day  from  the  city  hospital. 


i  but  it  has  had  only  two  in  the  past  six 
,  months  Irom  the  community  hospital. 

’  INFILTRATE:  Well-placed  and  well- 
trained  users  can  help  relieve  the  pres- 
»  sure  on  both  sides.  Quadion  Corp..  a 
Minneapolis  manufacturer  of  rubber 
and  plastic  components,  has  as  its  first 
line  of  tech  support  a  business  person 
in  each  department  who  has  been 
trained  by  IT  to  handle  support  issues. 

Called  IT  coordinators,  these  users 
understand  software  applications  and 
other  technical  issues  typical  of  their 
departments  and  provide  lech  support 
in  addition  to  their  regular  jobs.  Only 
when  they  can’t  solve  a  problem  does 
IT  get  involved. 

According  to  Steve  Paskach.  vice 
president  of  IT.  this  decentralized 
model  has  shortened  the  time  it  takes 
to  solve  users’  technical  problems  from 
four  hours  to  about  five  minutes,  with 
the  coordinators  able  to  handle  about 
85%  of  the  questions. 

AUTOMATE:  Simplifying  manual  proc¬ 
esses  is  what  IT  is  for  ~  and  it  can 
head  off  problems.  The  IT  staff  at  Har- 
rah’s  Entertainment  Inc.,  a  Las  Vegas- 
based  gaming  and  hotel  company, 
found  that  when  users  were  on  the 
road,  they  often  had  trouble  using  their 
laptops  to  communicate  through  the 
company  network.  “Wc  had  to  walk 
people  through  the  process  of  setting 
up  their  laptops  innumerable  times.” 
says  senior  vice  president  of  IT  and 
CIO  Tim  Stanley. 

So  IT  developed  a  script  that  users 
access  through  an  icon  at  the  bottom  of 
their  screens.  Launching  the  icon  auto¬ 
matically  handles  all  the  setup  issues. 
The  result:  few.  if  any.  support  calls. 

DIFFERENTIATE  Users  should  be  en¬ 
couraged  to  do  some  things,  but  others 
are  best  left  to  professionals.  TTiey 
need  to  know  the  difference.  “The  R’s 
are  always  a  good  place  to  start:  re¬ 
boot.  restart,  replug  and  retry,”  says 
Dave  Farrow,  director  of  IT  finance 
and  customer  support  at  packaging 
maker  Smurfit-Stone  Container  Corp. 
in  Chicaga 

Cora  Calhoun,  director  of  support 
.services  at  Lanier  Worldwide  Inc.  in 
Atlanta,  concurs,  saying  that  if  a  user  is 
on  a  PC,  rebooting  is  a  good  idea.  "For 
anything  else,  I  would  prefer  they  call.” 

COMMUNICATE  “You  cannot  overcom¬ 
municate  with  your  user  community.*' 
says  Jim  Burdiss,  vice  president  and 
CIO  at  Smurfit-Stone.  When  there's  a 
pit>blcm.  the  company  quickly  c-mails 
all  users.  IT  also  publishes  an  annual 
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report  that  discusses  the  partnership 
between  business  and  IT. 

ENUNCIATE:  Help  desk  workers  should 
explain  things  carefully  and  encourage 
users  to  ask  them  to  repeat  things  if 
they  don’t  understand,  Calhoun  says. 
Always  encourage  questions,  and  nev¬ 
er  make  users  feel  embarrassed  to  ask. 

REMONSTRATE  Help  desk  workers 
should  never  accept  abuse.  Frustrated 
users  may  take  it  out  on  tech  support, 
but  workers  should  politely  let  users 
know  when  they  are  out  of  line. 

Sometimes,  user  abuse  isn’t  what 
It  seems.  Mary  Backus,  director  of 
library  information  and  customer  ser¬ 
vice  at  Middlcbury  College  in  Middie- 
bury.  Vt..  tells  of  a  student  who  would 
swear  and  shout  every  time  she  called 
the  help  desk.  The  tech-support  people 
asked  a  supervisor  to  talk  to  the  stu¬ 
dent.  The  student  was  shocked  to  hear 
about  her  reputation.  She  said  she 
loved  tech  support.  She  wasn’t  swear¬ 
ing  at  them;  she  was  aiming  her  venom 
at  her  computer,  which  she  hated. 

RELATE  Even  the  best  help  desk  staff 
can’t  read  minds.  If  no  one  answers  at 
the  help  desk.  CIO  Steve  McDowell  of 
Holiday  Retirement  Corp.  in  Salem, 
Ore.,  has  a  tip  for  users:  Leave  a  mes¬ 
sage.  “If  we  don’t  receive  a  message, 
we  can't  help,”  he  says.  “And  users  are 
almost  always  more  frustrated  the  sec¬ 
ond  time  they  call.” 

RECIPROCATE  Finally,  when  the  help 
desk  solves  a  problem,  users  should  do 
what  their  mothers  taught  them:  say 
thank  you.  O  50854 

Homwitz  is  a  freelance  writer  in 
Sa/f  /.oke  City.  Contact  him  at 
atanin>ahorowitz.com. 
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HOWTO  GET  USERS  AND  THE  HELP 
DESKTOPUYNICELYTOGETHER. 

BY  ALANS.  HOROWITZ 


EW  AREAS  in  business  create 
more  s{>arks,  conflict  and 
fhistratiOD  than  the  interplay 
between  tech  support  and  its 
custmners.  Expectations  on 
both  sides  are  often  unrealistic,  and 
appreciating  each  other’s  position  is 
tough.  Here  are  some  tips  to  help  take 
the  stif^  out  of  the  help  desk/customer 
relationship. 

EDUCATE:  Who,  you  may  ask.  has  the 


time  and  money  to  train  users?  But 
training  pays.  Tlie  managing  director  of 
IT  at  a  New  Ei^land  hospital  chain  who 
didn’t  want  to  be  identified  says  one  of 
his  facilities,  a  large  dty  hospital  with 
700  to  800  physicians,  does  Uttle  user 
training.  A  smaller  community  hospi¬ 
tal.  with  about  100  physicians,  teaches 
its  staff  everything  from  logging  on  to 
putting  in  orders  and  getting  reports. 

The  payoff:  Tech  support  gets  com¬ 
plaints  every  day  from  the  dty  hospital. 


but  it  has  had  only  two  in  the  past  six 
months  from  the  community  hospital 

MFILTRATE:  Well-placed  and  well- 
trained  users  can  help  relieve  the  pres¬ 
sure  on  both  sides,  (^ladion  Corp.,  a 
Minneapolis  manufacturer  of  rubber 
and  plastic  components,  has  as  its  first 
line  of  tech  support  a  business  person 
in  each  deparroient  who  has  been 
trained  by  IT  to  handle  support  issues. 

Called  IT  coordinators,  these  users 
understand  software  applications  and 
other  technical  issues  typical  of  their 
departments  and  provide  tech  support 
in  addition  to  their  regular  jobs.  Only 
when  they  can’t  solve  a  problem  does 
IT  get  involved. 

According  to  Steve  Paskach.  vice 
president  of  IT.  this  decentralized 
model  has  shortened  the  time  it  takes 
to  solve  users'  technical  problems  from 
four  hours  to  about  five  minutes,  with 
the  coordinators  able  to  handle  about 
85%  of  the  questions. 

AUTOMATE:  Simplifying  manual  proc¬ 
esses  is  what  FT  is  for  —  and  it  can 
head  off*  problems.  The  IT  staff  at  Har- 
rah’s  Entertainment  Inc.,  a  Las  Vegas- 
based  gaming  and  hotel  company, 
found  that  when  users  were  on  the 
road,  they  often  had  trouble  using  their 
laptops  to  communicate  thmugh  the 
company  network.  "We  had  to  walk 
people  through  the  process  of  setting 
up  their  laptops  innumerable  times, ” 
says  senior  vice  president  of  IT  and 
CIO  Tim  Stanley. 

So  IT  developed  a  script  that  users 
access  throt^  an  icon  at  the  bottom  of 
their  screens.  Launchii^  the  icon  auto¬ 
matically  handles  all  the  setup  issues. 
The  result:  few,  if  any,  support  calls. 

OlfFEREMTlATE:  Users  should  be  en¬ 
couraged  to  do  some  things,  but  others 
are  best  left  to  professionals.  They 
need  to  know  the  difference.  *Tbe  R's 
are  always  a  good  place  to  start  re¬ 
boot.  restart,  replug  and  retry,”  says 
Dave  Farrow,  director  of  IT  ftnance 
and  customer  support  at  packaging 
maker  Smurftt-Stone  Container  Coip. 
in  Chicago. 

Cora  Calhoun,  director  of  support 
services  at  l.amer  Worldwide  Inc.  in 
Atlanta,  concurs,  saying  that  if  a  user  is 
on  a  PC,  rebooting  is  a  good  idea.  “For 
anything  else.  I  would  prefer  they  call” 

COMMUNICATE:  “You  cannot  overcom¬ 
municate  with  your  user  community,” 
says  Jim  Burdiss,  vice  president  and 
CIO  at  Smurfit-Stone.  When  there's  a 
problem,  the  company  quickly  e-mails 
all  users.  IT  also  publishes  an  annual 


report  that  discusses  the  partnership 
between  business  and  IT. 


I  ENUNCIATE:  Help  de^  workers  should 
I  explain  things  carefully  and  encourage 
users  to  ask  them  to  repeat  things  if 
they  don't  understand.  Calhoun  says. 
Always  encourage  questions,  and  nev¬ 
er  make  users  feel  embarrassed  to  ask. 

REMONSTRATE:  Help  desk  workers 
should  never  accept  abuse.  Frustrated 
users  may  take  it  out  on  tech  support, 
but  woikers  should  politely  let  users 
know  when  they  are  out  of  line. 

Sometimes,  user  abuse  isn’t  what 
h  seems.  Mary  Backus,  director  of 
library  information  and  customer  ser¬ 
vice  at  Middl^ntry  College  in  Middle- 
bury,  Vln  teUs  of  a  student  who  would 
swear  and  shout  every  time  she  called 
the  help  desk.  Tie  tech-support  people 
asked  a  supervisor  to  talk  to  the  stu¬ 
dent  The  student  was  shocked  to  bear 
about  her  reputation.  She  said  she 
loved  tech  support  She  wasn’t  swear¬ 
ing  at  them;  she  was  aiming  her  venom 
at  her  computer,  which  she  hated. 


RELATE:  Even  the  best  help  desk  staff 
can't  read  minds.  If  no  one  answers  at 
the  help  desk,  CIO  Steve  McDowell  of 
Holiday  Retirement  Corp.  in  Salem, 
Ore.,  has  a  tip  for  users:  Leave  a  mes- 
s^.  If  we  dcmt  receive  a  message, 
we  can't  help,”  he  says.  “And  users  are 
almost  always  more  fttistrated  the  sec¬ 
ond  time  they  call." 

RECIPROCATE:  Finally,  when  the  help 
desk  solves  a  problem,  users  should  do 
what  their  mothers  taught  them:  say 
thank  you.  O  50K4 


Horowiiz  is  a  freelance  writer  in 
Salt  Lake  City.  Contact  him  at 
alaTU^horowit2.com. 


Tune  into 


SjMtiMjpKiriErni 


Addressing  the  concerns  of  Americen  business,  from  the  upper 
rungs  of  Fortune  500  corporations,  to  the  needs  of  small  businesses. 
Join  us  M  wre  take  an  in-^lepth  look  at  the  issues,  technology 
and  innovations  that  are  shaping  the  future  of  our  business 
environment  and  the  economy. 


<^RC  UNIVERSE* 

Solutions  For  Your  World 


•  Over  250,000  products 

•  95%  "asms  da^  ordar  fuMnent  rate 

•  Talephana  aalas  and  tach  support 

•  Corporabe.  Education  and  Gowiauaid.  Sabs 


TachDollars  Rewards  Progr 

'am  •  Exclusively  at  PI 

C  Universe 

‘nMograat 

waystoaam  ] 

^  1 

As  featured  on  Strategic  Business  Report.  Check  your  focal  listings  for  times  in  your  area  www.triconipictures.com 
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MANASEMEITT 


www.compuiefwofid.com 


Most  Wanted 


HOTTEST  I  MAJOR  MARKETS 

TECH  SKILLS 


WHAT  IT  S  WORTH 


Operating 
systems 
lUnfat 
2.  Windows 

Databases 
I.Orade 
2.  SQL 

Programmmg 

languages 

1. C,C^ 

2.  ASP 


1. Wtehington 

(including  Baltimore.  Northern 
Virginia.  Southern  Maryland) 

2.  NewVerfc 

(including  Long  Island.  West¬ 
chester.  Northern  New  Jersey) 
3  .  Silicon  Valley 
(including  San  Francisco. 
Oakland.  San  Jose) 

4.  Los  Angeles 
(incLiding  Riverside  and 
Orange  County) 

5.  Chicago  Oncluding  suburbs) 


Average  FT  annual 
salary:  SS3^ 
Contract:  $8847S 
Permanent:  S61.933 


CONSULTANT 

COUNTOOWN 


Permartent  iobs: 
33^ 

Contract  jobs: 
26.463 


TW  ^  ,  •MfcS9.BriobMano»«iDloe»n 
SOIMCE:  The  Db.  loctfon  ifld  aiey  mfennann  s  band  on  NmenOer  job  cxRDngs  on  Ocextvn 


Holida\'  Bonus?  Humbug! 


MOSTU.S  COMPANIES  won't  award  a 
holiday  bonus  the  year,  according  to  a 
survey  of  271  U.S.  companies  by  Hewitt 
Associates  Inc.,  a  human  resources  ser¬ 
vices  firm  in  Lincolnshire.  HI, 

But  the  percentage  of  organizations 
offenng  performance-based  bonuses 
has  continued  to  rise,  from  59%  in 
1995  to  nearly  80%  m  2004. 

Hewitt  s  study  found  that  85%  of 


companies  providing  holiday  bonuses 
budgeted  less  than  1%  of  payroll  ex¬ 
penses  for  these  awards,  while  9%  bud¬ 
geted  1%  to  2%  of  payroll.  The  mone¬ 
tary  value  of  these  awards  varies  by 
type.  For  example,  companies  plan  to 
spend  a  median  of  S550  per  employee 
on  cash  awards  and  a  median  of 
S25  on  both  gift  certificates  and  food 
051018 


REASONS  FOR  EUMINATING  HOUDAY  BONUS: 


■Cost 

65% 

■  Entitlement  issues 

37% 

■  Development  of  pay-for- 

28% 

perfonnance  programs 

REJtSOttS  FOR  CONTINUING  HOUDAY  BONUS: 

■  Appreciation 

54% 

■  Tradibon 

24% 

■  Morale 

17% 

HOLIDAY 

BONUS 

AWARDED? 


ASK  A  PREMIER  TOO  LEADER 


The 

Weather  Channel 
A  A  a  Inleraclive  Inc 

U&A 

Agronow  lh<s 
month's  guest  Premier  100  IT 
Leader,  answering  readers'  ques¬ 
tions  about  new  job  opportunities 
and  skills  development.  If  you 
have  a  question  you’d  like  to  pose 
to  one  of  oor  Premier  100  IT 
Leaders,  send  it  to  ' 

and  watch 

for  Ihts  column  each  month. 


In  the  current  environment  of  outsourc¬ 
ing  and  jobs  going  overseas,  what  are 
the  new  opportunities  in  the  IT  market 
for  the  next  five  years?  I  see  growth  and 
a  premium  paid  tor  people  focused  on  se¬ 
curity  and.  as  always,  database  work.  I 


;  also  see  a  premium  for  individuals  with 
;  cross-platform  experience  -  for  example. 

;  Linux  (Unix)  and  Windows.  And  I  see  a 
j  severe  shortage  of  Rash  programmers  - 
i  not  designers,  but  coders. 

i  Tm  a  J2EE  programmer.  I  have  more 
i  than  two  years  of  experience,  but  Tm 
;  still  not  able  to  find  a  job.  I  want  to  take 
;  an  IT  course  that  might  help  me.  Can 
;  you  make  a  suggestion?  Yes:  Broaden 
I  your  skills.  It  would  be  helpful  if  you  were 
i  proficiently  able  to  code  in  other  areas. 

I  such  as  HTML.  Rash,  JavaScript  and  C**. 
j  for  example, 

;  I'll  be  28  when  I  graduate  with  a  bache- 
;  lor's  degree,  and  I've  also  done  a  short 
•  technology  internship.  Will  my  age  hurt 
;  my  chances  of  landing  an  entry-level 
I  job?  Also,  which  fields  (like  database 
;  administratjon  or  programming)  do  you 
I  think  will  remain  somewhat  immune  to 
I  offshoringTNo.youragewon'f  hurt  you 
i  But  in  regard  to  offshoring,  no  area  is 
■  completely  immune.  That  depends  on  the 
I  philosophy  of  the  company  at  which  you 
;  work.  However,  of  Ihe  two  choices  you 
i  provide.  I  would  expect  lhat  database 
>  administration  |obs  would  be  less  likely 
I  to  be  moved  offshore. 


H-1B  Visas  Upped 


Respondirrg  to  pressure  from  high- 
tech  businesses  and  industry 
groups.  Congress  approved  an  in¬ 
crease  in  the  number  of  H-1B  visas 
to  be  awarded  in  the  current  fiscal 
year  from  65.000  to  85.000  but 
restricted  the  additional  visas  to 
specially  qualified  students.  The 
legislation.  Included  in  the  omnibus 
budget  bill,  reportedly  allows  for¬ 
eign-national  master’s  and  Ph.D. 
graduates  of  U.S.  universities  to 
apply  for  the  additional  H-1B  visas. 


High-tech  trade  groups  and  busi¬ 
nesses  such  as  Microsoft  Corp.  and 
Intel  Corp.  have  been  urging  Con¬ 
gress  to  raise  the  cap.  while  organi¬ 
zations  representing  IT  workers 
wanted  Congress  to  keep  this 
year’s  cap  at  65,000. 

That  cap  was  reached  on  Oct.  1. 
the  first  day  of  the  federal  govern¬ 
ment's  2005  fiscal  year.  It  was  the 
first  time  that  the  visa  quota  had 
been  met  so  quickly. 

-  Pstrick  Thibodeau 


IT  Security  Boom 


Employs  10  lull  time  and  five  parl-timc  sldHers.  Ruports  to  11 
Is  ultimately  dut-cled  by  Ihij  CIO 


Has  13  years  of  general  IT  experience  plus  seven  years  m  security 
Holds  multiple  security-related  certifications,  including  at  least  one 
that's  vendor-neutral  and  one  that's  vendor-related. 
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Cumtiollifar 


Holiday  Bonus?  Humbug! 


MOST  U.S.  COMMMES  wont  award  a 
holiday  boTMJS  this  year,  according  to  a 
survey  ol  271 U5.  companies  by  Hewitt 
Associates  Inc.,  a  hum^  resources  ser¬ 
vices  fnn  in  Lincolnshire.  M. 

But  the  percentage  ol  organizations 
offering  perfonnance-based  bonuses 
has  continued  to  rise,  from  59%  in 
1995  to  nearly  80%  in  2004. 

Hewitt's  study  found  that  85%  of 


companies  providing  holiday  bonuses 
budgeted  l^  bran  1%  of  payroll  ex¬ 
penses  for  these  awards,  while  9%  bud¬ 
geted  1%  to  2%  of  payroll.  The  monc- 
taiy  value  of  these  awards  varies  by 
type.  For  example,  companies  plan  to 
spend  a  median  of  $550  per  employee 
on  cash  awards  and  a  median  of 
$25  on  both  gift  c^ficates  and  food. 
051018 


mtomrmajmuamnoLJDKtBomttc 


Iho  c.. lull,, I  pri,,iiih 


tathecurnrtanviroranertofoutaourc* 
inp  and  jobs  going  overeaas.  what  are 
the  new  ofiportiinitiee  In  the  IT  marlvt 
for  the  next  five  years?  I  see  growth  and 
a  premium  paid  for  people  focused  on  se¬ 
curity  and.  as  always,  database  wotle  I 


J  also  see  a  premium  for  individuais  with 
I  cross-platform  experience -for  example, 
I  IJnux  (Unix)  and  Wndows.  And  I  see  a 
I  severe  shortage  of  Flash  programmers - 
I  not  designers,  but  coders. 

rm  a  J2EE  protprammer.  I  have  more 
than  turn  yean  of  expartenee,  but  rm 
sM  not  able  to  find  a  Job.  I  want  to  taka 
an  fT  course  that  might  ha^  me.  Can 
you  mahi  a  auggaetion?  Yes:  Broaden 
your  skills.  It  would  be  helpful  if  you  were 
proficiently  able  to  code  in  other  areas, 
such  as  HTML  Flash.  JavaScript  and 
for  example. 

nbe28whenlgraduatawHhabache* 
lor'a  degree,  and  rve  also  done  a  short 
tochnolw  Mamahip.  WW  my  age  hwl 
my  chances  of  landbig  an  onbyHovei 
fob?  Ain.  which  fWds  (Hie  database 
adminisbatioir  or  programming)  de  you 
think  wi  remain  somewhat  immune  to 
offshoring?  No.  your  age  woni  hurt  you. 
But  in  regard  to  offshoring,  no  area  is 
completely  immune.  That  depends  on  the 
philosophy  of  the  company  at  which  you 
work.  However,  of  the  two  choices  you 
provide.  I  would  expect  that  databa^ 
administration  jobs  would  be  less  likely 
to  be  moved  offshore. 


H-1B  Visas  Upped 


Responding  to  pressure  from  high 
tech  businesses  and  industry 
groups.  Congress  approved  an  in¬ 
crease  in  the  number  of  H-IB  visas 
to  be  awarded  in  the  current  tiscat 
year  from  65.000  to  85.000  but 
restricted  the  additional  visas  to 
specially  qualified  students.  The 
legislation,  included  in  the  omnibus 
budget  bill,  reportedly  allows  for 
eign-national  master’s  and  Ph.D 
graduates  ol  U.S.  universities  to 
apply  for  the  additional  H-IB  visas 


High-tech  trade  groups  and  busi¬ 
nesses  such  as  Microsoft  Corp  and 
Intel  Corp  have  been  urging  Con¬ 
gress  to  raise  the  cap.  while  organi¬ 
zations  representing  IT  workers 
wanted  Congress  to  keep  this 
year’s  cap  at  65.000 
That  cap  was  reached  on  Oct  1 
the  first  day  of  the  federal  govern¬ 
ment's  2005  fiscal  year.  It  was  the 
first  time  that  the  visa  quota  had 
been  met  so  quickly 

Pdi'ich  Tr^ibodeju 


B  IBM  SOFTWWE  Pcwrerful 
software.  Itfe  the  strong,  seamless  bond  that  can  unite  your 
business,  vendors,  partners  and  customers.  A  dynamic  link 
designed  to  make  your  entire  organization  more  efficient. 
More  responsive.  More  flexible.  On  demand.  VVebSphere 
connects  processes,  with  open  standards.  And  it’s  easy 
to  manage,  too.  So  all  involved  get  a  better  nightb  steep 


1.  Guest  checked  In  wMesely. 

2.  Staff  queries  guest  preferances. 

3.  ttandor  services  Integrate  seamlessly. 

4.  Supplies  are  pracursd  automatically. 

5.  Repeat  customers  Increase  profits. 


EVENTS 


IT  Service 
Management 

•  U.  6-9.  Orlando 
Sponsor  PtnK  Elephant  he. 

The  IT  Service  Management  Con- 
lerence  and  Exhibition  focuses  on 
best  practices  in  ITIL  (information 
technology  infrastructure  library), 
the  IT  services  management  frame¬ 
work,  Tooics  include  ITIL  101.  best 
practices  for  project  managOTent. 
service-level  management,  support 
tools,  change  management  and 
case  studies. 
www.pinkeipphanLeom 

Global  Leadership 

■  Fell.  16-16,  New  York 
Sponsor  The  Conference  Board 
The  2005  Leadership  Conf^nce 
on  Global  Corporate  Cituenship 
foci^  on  strategic  management. 
Topics  include  challenges  and  re¬ 
sponsibilities  of  globalization,  navi- 
gabng  numerous  codes,  ratings, 
standards  and  indices:  and  being 
a  corporate  citiz^  offshore. 
www.conference-boanLorg 


Women’s 

Leadership 

■  March  15-16.  New  York 
AprflO-RSanDfeoo 
Sponsor  The  Conference  Board 

The  2005  Women's  Leadership 
Corrference  focuses  on  finding 
women  to  fi  the  fiuman  resources 
pipeline,  career  planning,  creabng 
stralegK  alliances,  negotiation  and 
tools  to  measure  success, 
wwwjonference-hoard-on^ 
woraenJitm 


Outsourcing  and 
Offshoring 

■  April  12-t3.CtlKa||o 
Sponsor  Brainstorm  6roup  inc. 
The  Nearshore  &  Offshore  Oiut- 
sourcing  (^ference  includes  top¬ 
es  such  as  trends  and  forecasts, 
seleding  applicalions  for  offshora 
outsourcing,  vendor  sel«:tion  and 
evaluation  criteria,  overcoming 
orgamzalional  challenges,  legal 
considerations  and  case  studies 
www.brainstorm-groupxofn 


HAK  l  IM-  KKINS 


Don’t  Outsource 
These! 


WHEN  A  COMPANY  considers  out¬ 
sourcing,  there  are  many  discus¬ 
sions  regarding  the  benefits  of  con¬ 
tracting  out  specific  functions  or 
processes,  but  it’s  equally  important 
to  discuss  what  your  company  should  not  outsource. 


Not  all  ftmetions  are 
viable  candidates  for  out¬ 
sourcing.  There's  an  impor- 
lam  distinction  bet^\’een  the 
operation  of  a  function  and 
its  management  controls.  If 
you  outsource  a  function's 
management  controls,  you 
essentially  abdicate  respon¬ 
sibility'  for  its  execution  and 
day-to-day  management. 

This  is  particularly  true  in 
o^hore  situations,  where 
"out  of  sight,  out  of  mind" 
is  a  common  pitfall.  Never 
outsource  responsibility  for 
the  effectiveness  and  overall 
success  of  a  function. 

Many  management  con¬ 
trols  come  under  the  aus¬ 
pices  of  project,  program  and  supplier 
management  positions.  As  IT  builds 
less  and  buys  more,  these  specialized 
skills  are  critical  to  your  organization's 
success.  Deciding  to  keep  these  func¬ 
tions  in-house  doesn't  preclude  aug¬ 
menting  your  staff  with  outside  re¬ 
sources.  however.  Consultants  provide 
valuable  expertise,  independent  objec¬ 
tivity  and  staffing  flexibility. 

Here  are  some  other  functions  you 
shouldn't  outsource; 

•  Strategic  planning.  You  have  to  es¬ 
tablish  your  own  strategy’,  plan  and 
architecture.  Companies  often  hire 
outside  specialists  to  assist  with  this 
process,  but  you  and  your  staff  must 
ensure  that  it  accurately  reflects  the 
direction  in  which  your  organization 
w’ants  to  move.  Having  your  staff  par¬ 
ticipate  also  builds  buy-in  and  gets 


commitment  to  the  plan's 
implementation. 

■  Activities  subfect  to  mas¬ 
sive  business  change.  Every 
contract  needs  to  be  devel¬ 
oped  with  enough  flexibili¬ 
ty  to  protect  your  business 
interests  when  change  oc¬ 
curs.  In  times  of  dramatic 
business  change,  it’s  nearly 
impossible  to  anticipate 
and  provide  contingencies 
for  every  possible  out¬ 
come  Moreover,  if  you  try 
to  provide  for  too  many 
contingencies  in  the  con¬ 
tract,  the  outsourcer  will 
have  to  charge  you  for  its 
flexibility,  and  the  costs 
may  become  prohibitive. 

■  Pooriy  run  systems  or  processes.  In 
general,  outsourcing  a  broken  process 
or  system  means  it  will  still  be  broken. 
Fix  it  before  you  outsource  it  One  ex¬ 
ception  is  when  you  are  able  to  adopt 
the  outsourcer’s  process  or  system  un¬ 
changed  in  order  to  solve  a  problem. 
For  example,  one  company  had  multi¬ 
ple  payroll  systems  in  its  business 
units.  Adopting  an  outsourcer’s  pay¬ 
roll  system  allowed  the  company  to 
get  around  the  political  infighting  and 
standardize  the  payroll  process  across 
the  enterprise.  But  be  cautious  about 
accepting  someone  elsc’s  solution  to 
your  problem. 

■  Critical  systwns  and  processes.  Busi¬ 
ness  processes  and  system.s  that  differ¬ 
entiate  you  from  your  competition 
should  be  kept  confidential.  You  need 
the  required  technical  skills  and  deliv¬ 


ery  capability  in-house,  with  minimal 
assistance  from  outside  resources. 

■  IT  customer  reiatkNiship  management. 
You  need  to  own  the  relationship  with 
in-house  and  external  customers.  Your 
outsourcer  may  help  customers  with 
requirements  and  implementation,  but 
you're  ultimately  responsible  for  the 
customer's  satisfaction  and  the  proj¬ 
ect’s  success.  If  you  neglect  customer 
relationships,  you  may  get  blindsided. 
One  CIO  hired  an  outsourcer  to  up¬ 
grade  Oracle  Financials  in  a  business 
unit.  In  the  process,  the  outsourcer 
convinced  the  business  unit  to  switch 
to  PeopleSoft.  The  company's  finan¬ 
cial  systems  are  no  longer  standard¬ 
ized  and  the  CIO  has  support  issues. 

■  Compliance  management  The  recent 
increases  in  regulatory  mandates 

I  make  compliance  management  too 
'  critical  to  outsource  (though  you  may 
need  consultants  to  develop  compli¬ 
ance  programs  or  audit  financial  sys¬ 
tems).  For  example,  when  your  CEO 
and  CFO  sign  their  Sarbanes-Oxley 
statements,  they  need  you  to  vouch  for 
the  integrity  of  the  IT  systems.  No  one 
else  can  provide  this  assurance  with¬ 
out  exposing  your  company  to  risk. 

•  fT  management  support  The  Emo¬ 
tions  that  help  manage  the  IT  organi¬ 
zation  need  to  stay  in-house  in  order 
to  be  effective.  Financial  management, 
people  management  and  security  man¬ 
agement  shouldn’t  be  outsourced. 

Determining  what  to  retain  inside 
your  organization  is  as  important  as 
determining  what  to  outsource.  In  ad¬ 
dition.  the  more  critical  a  function  is 
to  your  business,  the  more  crucial  it  is 
to  keep  the  associated  management 
controls  in-house.  Leverage  the  suc¬ 
cess  of  your  outsourcing  efforts  by 
selecting  the  right  things  to  outsource 
and  the  right  things  to  keep.  O  50906 
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EVENTS 


FT Service 
Management 

■  Ftk6-S,0riando 
Spomor  PM  Baphant  he. 

The  IT  Service  Management  Cort* 
ference  arKi  Exhibition  fctcuses  on 
best  practices  in  fTl  (informahon 
technology  irHrastrtjcture  library), 
the  IT  services  management  ha^ 
work.  Topics  indude  in  101.  best 
practices  for  project  management, 
service-level  management  support 
tools,  change  management  and 
casestudhs. 
wwni(.phkalipliaiit.com 


Obbal  Laadership 

SpeiMr;  Tht  Confarwice  Beard 

The  2005  Leadership  Conierence 
on  Global  Corporate  Otuership 
hxuses  on  strategic  management. 
Topics  include  challenges  and  re- 
sporcMtlesofgloballzatton-.rtavi- 
gating  rwnerous  codes,  ratings, 
standi  indices:  and  being 
^  a  corporate  citizen  offshore. 
vmMeniMwce'boird.org 


Women’s 

Leadership 

«>lie-M.Sllinigo 
Sperwr  The  Caohrence  Board 

The  2005  Mtomen’s  Leadership 
Conference  focuses  on  fira&ng 
MNiien  to  fi  the  human  resources 
pipeine.  caim  planning,  creating 
strategic  aiances.  negotiation  and 
tools  to  measure  success. 
eriMceeirfarene^hianLerg/ 


Outsourcing  and 
Offshoring 

■April1^0.CMcaoo 
SpoaMR  BrahStarm  Braup  he. 

The  Netfshore  £  Offohore  Out¬ 
sourcing  Conference  indudes  top¬ 
ics  such  as  bends  »xl  forecasts, 
selecting  appiicabons  for  offshore 
outsourcing,  vendor  selection  and 
evaluation  crilerta.  overcoming 
organizational  chdienges.  tegai 
axisiclerahons  and  case  studies. 
wwwMnehria'groiffuom 


BART  PERKINS 


Don’t  Outsource 
These! 


WHEN  A  COMPANY  Considers  out¬ 
sourcing,  there  are  many  discus¬ 
sions  regarding  the  benefits  of  con¬ 
tracting  out  specific  functions  or 
processes,  but  it’s  equally  important 
to  discuss  what  your  company  should  not  outsource. 


Not  all  functions  are 
viable  candidates  for  out¬ 
sourcing.  There’s  an  impor¬ 
tant  distinction  between  the 
operation  of  a  function  and 
its  management  controls.  If 
you  outsource  a  function’s 
management  controls,  you 
essentially  abdicate  respon¬ 
sibility  for  its  execution  and 
day-to-day  management 
This  is  particularly  true  in 
offobore  situations,  where 
"out  of  sight  out  of  mind" 
is  a  common  pitM.  Never 
outsource  responsibility  for 
the  effectiveness  and  overall 
success  of  a  function. 

Many  management  con¬ 
trols  come  under  the  aus¬ 
pices  of  project,  program  and  supplier 
management  positions.  As  IT  builds 
less  and  buys  more,  these  specialized 
skilb  are  critical  to  your  organization’s 
success.  Deciding  to  keep  these  func¬ 
tions  in-house  doesn’t  preclude  aug¬ 
menting  your  staff  with  outside  re¬ 
sources.  however.  Consultants  provide 
valuable  expertise,  independent  objec¬ 
tivity  and  staffing  flexibility. 

Here  are  some  other  functions  you 
shouldn’t  outsource: 

■  Sbatagfephnnho.  You  have  to  es¬ 
tablish  your  own  strategy,  plan  and 
architecture.  Companies  often  hire 
outside  specialists  to  assist  with  this 
process,  but  you  and  your  staff  must 
ensure  that  it  accurately  reflects  the 
direction  in  which  your  organization 
wants  to  move.  Having  your  staff  par¬ 
ticipate  also  builds  buy-in  and  gets 


commitment  to  the  plan’s 
implementation. 

■  AdMBas  subject  to  maB- 
Mva  tuatoaaa  dianga.  Every 
contract  needs  to  be  devel¬ 
oped  with  enough  flexibili¬ 
ty  to  protect  your  business 
interests  when  change  oc¬ 
curs.  In  times  of  dramatic 
business  change,  it’s  nearly 
impossible  to  anticipate 
and  provide  contingencies 
for  every  possible  out¬ 
come.  Moreover,  if  you  try 
to  provide  for  too  many 
contingencies  in  the  con¬ 
tract,  the  outsourcer  will 
have  to  charge  you  for  its 
flexibility,  and  the  costs 
may  become  prohibitive. 

■  Ffoorfo  nm  syatoma  or  pracaasaa.  In 
generaL  outsourcii^  a  broken  process 
or  system  means  it  will  $dl]  be  broken. 
Fix  it  before  you  outsource  it  One  ex¬ 
ception  is  when  you  are  able  to  adopt 
the  outsourcer’s  process  or  system  un¬ 
changed  in  order  to  solve  a  problem. 
For  example,  one  company  had  multi¬ 
ple  payroll  systems  in  its  business 
units.  Adopting  an  outsourcer’s  pay¬ 
roll  system  allowed  the  company  to 
get  around  the  political  infighting  and 
standardize  the  payroll  process  across 
the  enterprise.  But  be  cautious  about 
accepting  someone  else’s  solution  to 
your  problem. 

■  CrHieal  sytoom  and  pmraww,  Busi¬ 
ness  processes  and  systems  that  differ¬ 
entiate  you  from  your  competition 
should  be  kept  confidential.  You  need  I 
the  required  technical  skills  and  deliv-  I 


ery  capability  in-house,  with  minimal 
assistance  fix>m  outside  resources. 

■  cuitonwr  fditioriiNp  iMnagarrMnL 
You  need  to  own  the  relationship  with 
in-house  and  external  customers.  Your 
outsourcer  may  help  customers  with 
requirements  and  implementation,  but 
you’re  ultimately  responsible  for  the 
customer's  satisfiKtion  and  the  proj¬ 
ect’s  success.  If  you  neglect  customer 
relationships,  you  may  get  blindsided. 
One  CIO  hired  an  outsourcer  to  up¬ 
grade  Oracle  Financials  in  a  business 
unit  In  the  process,  the  outsourcer 
convinced  the  business  unit  to  switch 
to  PeopleSoft  'The  company's  finan¬ 
cial  systems  are  no  longer  standard¬ 
ized  and  the  CIO  has  support  issues. 

■  Cofflplince  iwnigwiwnL  The  recent 
increases  in  regulatory  mandates 
make  compliance  management  too 
critical  to  outsource  (though  you  may 
need  consultants  to  develop  compli¬ 
ance  programs  or  audit  financial  sys¬ 
tems).  For  example,  when  your  CEO 
aiui  CFO  sign  their  Sarbanes-Oxley 
statements,  they  need  you  to  vouch  for 
the  integrity  of  the  FT  systems.  No  one 
else  can  provide  this  assurance  with¬ 
out  exposing  your  company  to  risk. 

•  n*  maragifmnl  support  The  func¬ 
tions  that  help  manage  the  IT  organi¬ 
zation  need  to  stay  in-house  in  order 
to  be  effective.  Financial  management, 
people  management  and  security  man¬ 
agement  shouldn’t  be  outsourced. 

Determining  what  to  retain  ingiHe 
your  organization  is  as  important  as 
determining  what  to  outsource.  In  ad¬ 
dition.  the  more  critical  a  function  is 
to  yotir  business,  the  more  crucial  it  is 
to  keep  the  associated  mana^ment 
controls  in-house.  Leverage  the  suc¬ 
cess  of  your  outsourcing  efforts  by 
selectii^  the  right  things  to  outsource 
and  the  right  things  to  keep.  O  50906 
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Advertising  Supplement 


While  IT  professionals  continue  to  monitor  a  fairty  slow  job 
mariet  there’s  one  industry  segment  that  is  seeing 
heightened  competition  for  Rlting  jobs.  Andy  Baker,  human 
resources  senior  manager  for  Allstate  Insurance  Co.,  says  in 
Chicago-fand  candidates  are  again  seeing  multiple  offers.  ’One  of 
the  biggest  challenges  we  have,  as  an  industry-  is  building 

awareness.  When  we  go  to  career  bits,  _ 

individuals  say  things  like  'Allstate  does 
technology?  I  thought  they  just  hired 
agents'.*  Baker  says. 

Baker's  comments  are  echoed  by  two  of  the 
country's  most  technologicaify  savvy  insurance 
companies  -  Progressive  and  Nationwide. 

Between  the  three  firms,  nearly  1.000  job 
openings  exist  for  the  coming  months.  Research 
indicates  that  the  insurance  industry  b  or 
industries  most  likely  to  invest  in  technolog)i  and 
tech  leaders  estimate  that  between  3  and  4  %  of 
revenues  are  invested  in  new  capabilities  each  year. 

Nationwide  Property  A  Casualty  CIO  Mark  Totkos 
says  the  primaty  reason  the  industry  is  a  good 
choice  for  IT  professionals  is  that  the 
sector  has  been  relatively  stable,  the  use 
of  technology  b  aggressive,  and  there 
remains  plenty  of  room  for  technology 
advances.  ’Technology  provides  the 
enablers  for  how  we  (as  insurers)  improve  powth  and 
P'oAtebilitjt*  says  Torkos.  'The  nature  of  the  projects  we're 


IT  Careers  in  Insurance 


working  on  b  inaeasingly  complex,  and  we  re  looking  to  do  these 
with  a  faster  time  to  market  That  really  drives  up  the  skill  set  and 
competency  required  * 

Nationwide  employs  5,000  IT  professionals  in  the  Oes  Moines  and 
Cofumbus  (OH)  areas  The  company  b  committed  to  development 
for  its  staff,  including  measuring  how  rrwiy  jobs  and 
filled  from  within  as  evidence  of 
success.  The  skill  sets  include  program 
management,  object-oriented  skill  sets, 
requirements  engineering  and  architecture,  as 
information  security.  'We  want  to 
have  all  the  talent  we  need  (internally).* 
adds  Torkos. 

Progressive,  which  b  based  in  Mayfield. 
OH,  has  projects  lined  up  for  2005  that 
range  from  a  new  billing  system  to 
building  a  second  data  center 
and  application  development  center. 
Progressive  has  claimed  numerous 
awards  for  its  use  of  technology, 
beginning  with  its  position  as 
the  first  auto  insurer  to 
launch  a  website  and  the 
first  to  receive  a  customer 
payment  via  a  jwrsonal 
digital  assistant  (POA). 

Frank  Hoiowach.  business  IT  director  at  Progressive,  says 
competencies  include  'people  intimately  involved  in 


understanding  the  real  business  bsues  lacing  the  company.*  Thb 
includes  speed  of  service  to  the  customer,  enabling  agents  to  open 
policies  for  customers  more  easily  and  faster  and  tools  that  give 
customers  more  control  over  their  insurance  policy.  'Creativity  and 
business  go  hand  in  hand.*  says  Hoiowach.  'We  promote  this  in 
our  culture  and  look  for  it  when  hiring.  We  look  for  strategic  and 
creative  people  ~  doers  and  leaders  -  who  challenge  dte  status 
quo.  take  risk  and  initiative  and  thrive  in  a  free-thinking, 
creative  environment.' 

Allstate's  Baker  says  the  insurer  will  continue  pushing  the 
errvelope.  requiring  additional  IT  professional  staff  members  in  the 
areas  of  application  development,  dot-net  technology,  software 
evaluatkm/iest  technical  architecture,  database  administration 
and  information  security.  *We  are  all  looking  for  the  same  people 
-  people  with  insurance  or  financial  seniices  experience,*  he  sayv 
'It  b  a  different  type  of  data,  and  that  data  b  an  asset  * 

As  with  all  the  insurers,  Allstate  is  looking  for  strong  leaders  and 
project  managers  who  have  experience  in  the  full  lifecycle  of 
application  development  and  implemeniation.  Another 
characteristic  being  sought  is  cross-platform  experience  as 
different  parts  of  the  company  have  legacy,  dient/server  and  web- 
based  arch  iteoure. 

For  more  information  about  IT  Careers  advertising, 
please  call;  800.762.2977 
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"SflIC  fosters  teomwork  within  a  flexible 
entrepreneunol  environment. 
Rs  employee  owners  we  shore  o  common 
gool  of  delivering  the  highest  quolity 
products  ond  services,  while  mointoining  the 
highest  ethicol  stondords." 
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Sdeow  ^^tcadoas  lotcfBatioiial  Corporation  <SA]Q,  a  Fortune  500*  company,  is  the  largest  employee-owned  research  and  er^neering  company  in  the  nation  with 
more  than  44.000  employees  and  offices  in  more  than  1 50  cities  worldwide. 

Currently,  we  have  opportunities  in  our  San  Diego.  CA  office  for  the  foUowii^  IT  profbsionals: 


•  Applkaooa  and  lafrastrucatre  Architects 

•  Software  Dcvdepcrs/Sccurity  Analysts/Syitcms  Architects 
■  Bostacss  AnaKsts 


*  Project  Managers  (PeopteSoft,  SAP) 

*  Data  ^9^rehoiue 

*  Bastness  Analytics,  BEA  Enterprise  Portal 


•  System  Administrators/Ei^neers 
(Littm  &  Intention  c^wrience) 

•  Grade  DBAs 


To  kam  more  about  these  opportunities  and  tbe  unitpse  culture  at  SAIC,  please  visit  www;saicxoin/cafcer 
We  are  an  Affirmative  Action  Emi^oyer  that  values  cultural  diversity  in  the  workplace.  EOE,  M/F/D/V. 
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IT  caivers 


A  Call  To  Action! 

Take  the  hassle  out  of 
searching  for  the  right 
candidate  and  contact  us 

at  (800)  762-2977. 

We  can  place  your 
message  in  front  of  2/3  of 
all  US  IT  professionals. 

Call  (800)  762-2977 

www.itcareers.com 


MIS*>oawni^»g»— II  An»| 


[Dayv  Maai.  fm  Eiyww»  « 


|<k(«ndng  on  poMons  Sm| 

Eoe 


IW  T***- 

kv  SyMMn  AnM  n  amt-' 

'■ 06fc.es  or  WK- 

«0UMd  09  ti  Owk , 

oc-  sa  »  ft  PM- 

'■'■'WinwMno  «  pfcB  Trawei| 
|<«aM  tar  Mms  poaMva  ' 


SotaKar*  Program  Manager 
Manage  muiDdiactpbnary 
oroduo  (Mpmt  preiaeifc  &  (mg 
(niroiMng  geographtcally  ds-j 
e  team*  &  function 
Estafibui  Ofc  narvMrds  S  reiia- 
IbiMy  meaeuiat  usng  OuaMvl 
|Mgm(  System  M«iage  all 
I  ^  product  Mecyde  uang 
[ProAid  Lilecycie  Mgml ' 
ISysMciB  Reg  Mastarn Conn 
ISq.  Sys  Eng.rvElectncafCng 
UOTir  sAek  JobAnlerviaw  one 
|\tantuta.  CA.  Sand  reaume  io| 
EVw  TacMotogiee  Corp  Ql 
|21S1  Afsessandro  Or..  *200. 
VtoM.CA  93001. 


Puzzled? 


itcareers.com 
can  solve  the 
labyrinth  of  job 
hunting  by 
matching  the 
right  IT  skills 
with  the  right 
IT  position. 
Find  out  more 
at; 

www.itcareers.com 
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taii  chain  said  be  will  begin  to 
evaluate  laptops  from  Dell 
while  watching  for  any  signs 
of  change  on  IBM’s  products. 
The  retailer  uses  laptops  and 
some  desktop  PCs  from  IBM. 
said  the  director,  who  also 
asked  not  to  be  named. 

Some  members  of  Share  Inc., 
an  IBM  user  group  based  in 
Chicago,  have  expressed  con¬ 
cerns  about  the  s^e's  possible 
effect  on  hardware  quality  and 
technical  support,  said  Robert 
Rosen,  the  group’s  president 
“These  are  the  thin^  that  real¬ 
ly  touch  the  customer.”  «>iH 
Rosea  who  is  also  the  CIO  at  a 
unit  of  the  National  Institutes 
of  Health  in  Bethesda.  Md. 

MasterCard  International 
Inc.  uses  IBM  servers  now  and 
would  have  liked  to  see  if  it 
could  reduce  costs  by  migrat¬ 
ing  to  IBM’s  PCs  as  well,  said 
Ronald  Steinbruegge,  vice 
president  of  global  internal 
technologies  at  MasterCard’s 
n*  facilities  in  O'Fallon.  Mo. 
However,  the  planned  sale  to 
Lenovo  “will  present  a  chal¬ 
lenge”  to  that  plan,  he  said. 

But  other  IT  managers  said 
they  don’t  see  the  IBM-Lcnovo 
agreement  as  a  big  deal  from 
a  customer  perspective. 

Jim  Prevo,  CIO  at  Green 


I  COMPETITIVE  RANKINGS 


PC  Mallet 
Leaders 

WtorldMidB  urtf  iMpneob  and 
market  shm  for  the  top  tfm  PC 
vendors  ttdi  year's  Mrd  (MTiar 


Mountain  Coffee  Roasters  Inc. 
in  W^terbury.  Vt.,  said  be 
doesn’t  expect  the  clmige  in 
ownership  to  have  any  effect 
on  his  company.  All  t^  laptop 
PCs  that  Green  Mountain  uses 
are  ThinkPads,  Prevo  said. 

Mobile  Travel  Guide  CIO 
Paul  Mercurio  likened  PCs  to 
telephones  and  said  he  doesn’t 
see  the  planned  sale  as  being 
consequential  to  IBM's  long¬ 
term  goals  as  a  vendor. 

PCs  are  “not  a  strategic 
product  in  the  way  their 
servers  are,"  said  Mercurio, 
whose  company  is  an  autono¬ 
mous  division  of  Exxon  Mo¬ 
bile  Corp.  in  Irving,  Texas. 


Mercurio  added  that  he  does¬ 
n't  think  the  deal  with  Lenovo 
is  a  precursor  to  the  sale  of 
any  of  IBM’s  server  units. 

Deepak  Advani.  chief  mar¬ 
keting  officer  at  IBM's  PC 
division,  said  that  although 
Lenovo  will  take  over  devel¬ 
opment  and  manufacturing, 
IBM  vrill  continue  to  support 
the  systems  under  an  agree¬ 
ment  that  makes  it  the  pre¬ 
ferred  service  and  customer 
financing  provider  to  Lenovo. 
"A  lot  of  our  large  customers 
want  IBM  doing  the  service 
and  support  and  that’s  what 
they  will  get  as  part  of  this 
deal,”  Advani  said 

TennsafttteDeal 

Stephen  Ward  Jr.,  senior  vice 
president  and  general  manag¬ 
er  of  IBM’s  Personal  Systems 
Group,  will  become  Lenovo's 
CEO,  and  the  company  will  set 
up  a  new  headqtuncrs  office 
outside  of  New  YoHc.  IBM  wiU 
get  an  ownership  stake  of 
18.9%  in  Lenovo,  which  will 
pay  at  least  $650  million  in  ' 
cash  and  up  to  $600  million 
worth  of  Slock  for  the  PC  unit 
and  assume  about  $500  mil¬ 
lion  worth  of  financial  liabili¬ 
ties  from  IBM. 

Lenovo  will  manufacture 
the  PCs  to  IBM’s  quality  stan¬ 
dards  for  at  least  fh«  years, 
according  to  Advani  The 
companies  said  the  deal  will 


HP  Revamps  Midrange  Storage  Line 


BV  LUCAS  MEABIAN 

Hewlett-Packard  Co.  last  week 
brought  out  several  new  and 
upgraded  midrange  storage 
products,  including  its  first 
disk  array  that  can  use  both 
SCSI  and  Serial  ATA  technolo¬ 
gy.  HP  also  added  disk-to-disk 
and  disk-to-tape  backup  func¬ 
tionality  10  its  StorageWorks 
Data  Protector  software. 

The  StorageWorks  Modular 
Smart  Array  1500  c$  can  pro¬ 
vide  users  with  tiered  storage 
inside  a  single  enclosure.  Such 
hmctionality  is  designed  for 


small  and  midsize  businesses, 
which  HP  is  aggressively  court¬ 
ing,  stud  Dianne  McAdam,  an 
analyst  at  Data  Mobility  Group 
LXC  in  Nashua,  N.H. 

The  MSA1500  cs  can  scale 
to  24TB  of  raw  capacity  using 
250GB  Serial  ATA  disk  drives, 
and  up  to  16TB  using  300GB 
SCSI  drives.  The  same  soft¬ 
ware  that  controls  the  Pro¬ 
Liant  family  of  servers  can  be 
used  to  manage  the  drives, 
said  Frank  Harbist.  general 
manager  of  network  stoi^e 
solutions  software  at  HP.  The 


box  is  priced  from  $8,995. 

HP  also  added  about  200 
functioiis  to  StorageWbiks 
Data  Protector,  includii^  ad¬ 
vanced  backup  to  disk  and 
tape.  The  software  can  ”take  a 
snapshot  of  the  data  once  a 
minute,  do  replications  once  an 
hour,  perform  disk-based  back¬ 
up  once  a  day  and  tape  backup 
once  a  week,"  said  Rick  Lut- 
tralL  chief  technology  strate¬ 
gist  for  near-line  storage  at  HP. 

Devin  York,  director  of  fi¬ 
nancial  systems  at  Continental 
Airlines  Inc.  in  Houston,  said 


I  give  Lenovo  annual  PC  rev- 
I  enue  of  about  $12  billion  ^  a 
I  fourfold  increase  over  its  cur¬ 
rent  PC  business. 

IBM  has  fallen  well  behind 
(he  PC  pace  set  by  Dell  and 
HP  (see  chart).  But  one  risk  is 
that  the  PC  sell-off  could  af¬ 
fect  IBM’s  server  sales,  said 
Tony  tarns,  an  analyst  at  D.H. 
Brown  Associates  Inc.  in  Port 
Chester.  N.Y.  The  sale  of  PCs 
often  leads  to  server  purchas¬ 
es  and  vice  versa,  he  said. 

Bui  Advani  said  IBM  isn't 
wonied  about  that  because  its 
sales  force  uill  be  able  to  sell 
the  Lenovo-made  P(2s. 

Another  potential  problem 
is  reduced  sales  to  federal 
agencies  in  the  U5..  given  the 
Chinese  gos’emment’s  large 
ownership  stake  in  Lenovo. 

Ray  BJoridund.  an  analyst  at 
Federal  Sources  Inc.  in 
McLean.  Va.,  said  the  Depart¬ 
ment  of  Defense  and  other 
agencies  involved  in  national 
security  may  decide  not  to  i 
buy  Lenovo's  PCs.  But,  he 
added,  other  agencies  “wdll 
probably  be  happy  to  buy 
them”  if  Lenovo’s  pricing  “is 
extremely  competitive  and  the 
machines  work  weU.”  O  51396 


I  hJVi-  10  Dt  4  ''lO.aH'MO  I 

I  &ucri:ea  Mjrk  H4I1 


he  plan.s  to  upgrade  to  Stor¬ 
ageWorks  Dau  Protector  5S  in 
next  year's  first  quarter. 

York  currciuly  runs  a  stor¬ 
age-area  network  with  about 
20TB  of  capacity  on  two  HP 
StorageWorks  XP512  arrays. 

He  said  he  likes  the  securit)*  of 
being  able  to  save  data  to  disk 
and  tape  simultaneously.  “The 
one  project  I  am  working  on 
next  year  is  disk-to-disk  back¬ 
up."  York  said.  The  problem 
with  (upel  is  that  as  the  dau 
grows,  I've  got  to  keep  adding 
expensive  tape  drives.  With 
di^-to-disk  backup,  I  can  add 
extremely  cheap  storage  as  a 
staging  device."  O  51357 
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Confimii’d  I'rom  pam'  I 

IBM _ 

tail  chain  said  he  will  begin  to 
evaluate  laptops  from  Dell 
while  watching  for  any  signs 
of  change  on  IBM  ’s  products. 
The  retailor  uses  laptops  and 
some  desktop  PCs  from  IBM. 
said  the  director,  who  also 
asked  not  to  be  named. 

Some  members  of  Share  Inc., 
an  IBM  user  group  based  in 
Chicago,  have  expressed  con¬ 
cerns  about  the  sale  s  possible 
effect  on  hardware  quality  and 
technical  support,  said  Robert 
Rosen,  the  group's  president. 
"These  are  the  things  that  real¬ 
ly  touch  the  customer."  said 
Rosen,  who  is  also  the  CK)  at  a 
unit  of  the  National  Institutes 
of  Health  in  Bethesda,  Md. 

MasterCard  International 
Inc.  uses  IBM  servers  now  and 
would  have  liked  to  sec  if  it 
amid  reduce  costs  b>-  migrat¬ 
ing  to  IBM's  PCs  as  well,  .said 
Ronald  Stoinbruegge.  vice 
president  of  global  internal 
technologies  at  Ma.stcrCard's 
IT  facilities  in  O'Fallon.  Mo. 
However,  the  planned  sale  to 
Lenovo  "will  present  a  chal¬ 
lenge"  to  that  plan,  he  said. 

But  other  IT  managers  said 
they  don't  sec  the  IBM-Lcn«vo 
agreement  as  a  big  deal,  from 
a  customer  perspective. 

Jim  Prevo.  CIO  at  Green 
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Worldwide  unit  shipments  and 
market  share  for  the  top  three  PC 
vetxiors  in  this  year's  third  quarter 
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Mountain  Coffee  Roasters  Inc. 
in  Watcrbur>-.  \^t..  said  he 
doesn't  expect  the  change  in 
ownership  to  have  any  effect 
on  his  company.  All  the  laptop 
PCs  that  Green  Mountain  uses 
are  ThinkPads.  Prevo  said. 

Mobile  Travel  Guide  CIO 
Paul  Mercurio  likened  PCs  to 
I  telephones  and  said  he  doesn’t 
see  the  planrvcd  .sale  as  being 
consequential  in  IBM's  long¬ 
term  g^als  as  a  vendor. 

PCs  are  “not  a  strategic 
product  in  the  way  their 
serv  ers  are,"  said  Mercurio. 
whoso  company  is  an  auiontv 
mous  division  of  Exxon  Mo¬ 
bile  Corp.  in  Irving.  Texas. 


I  I  Mercuriu  .idded  that  he  does 
I  I  n't  think  the  deal  with  1  eno\«» 
I  is  a  precursor  to  the  s.ale  of 
•iny  of  IBM's  s<.Tver  units. 

Deepak  .Advani.  chief  mar¬ 
keting  officer  at  IBM’s  PC 
divisitm.  s;iid  that  although 
I  enovti  will  take  •»\er  Jcvcl- 
r'pment  and  manufaciuring, 
IBM  will  c»>niinuc  to  support 
the  systems  under  an  agree¬ 
ment  (hat  makes  it  the  pre 
ferred  service  and  customer 
I  financing  provider  to  Lenovo, 
j  'A  lot  of  our  brge  customers 
I  want  IBM  doing  the  service 
and  support,  and  that's  what 
they  will  get  as  part  of  this 
j  deal."  Advani  said. 

'  Terms  of  the  Deal 

I  Stephen  Ward  Ir..  senior  vice 
I  president  and  general  manag- 
I  cr  of  I  BM’s  Personal  Systems 
Group,  will  become  Lenovj»’s 
CEO.  and  the  company  will  set 
up  a  new  headquarters  office 
outside  of  New  York.  IBM  will 
got  an  ownership  stake  of 
18.0*0  in  l.enovxx  which  will 

pay  at  least  StkSO  million  in 
I  cash  and  up  to  StiOO  million 
j  worth  of  sftH.*k  for  the  1*C  unit 
and  atesums'  about  S.^H)  mil- 
I  lion  worth  of  financial  liahili- 
I  ties  from  IBM. 

Lenovo  will  manufacture 
j  the  PCs  to  IBM's  qualify  si.in- 
I  dards  for  at  least  five  years. 

I  according  to  Advani.  The 
I  companies  said  the  deal  will 


give  1  enrwo  .mnual  Pi .  re\  - 
enue  of  about  SIJ  billion  —  .» 
fourfold  increase*  oveniscur 
rent  IK ;  business 

IBM  has  fallen  well  behind 
the  If  pace  set  b\  IVll  and 
HP  1  see  chart  I.  Bui  one  risk  is 
th.ll  the  P(  Si-ll-oft  could  .11- 
fect  IBM's  server  s.i|es.  viid 
Tony  lams,  an  jnaKsi  .n  D.n. 
Brown  .\ss»vci.»iis  Inc  in  Port 
Chester,  N.A’.  Fhe  sale  of  l’<  s 
oiien  leads  to  si-rver  purchas¬ 
es  and  vice  versa,  he  s.iid, 

But  Advani  -slid  IBM  isn’t 
worried  about  that  bec.nuse  its 
sali-s  fiirce  will  he  able  to  sell 
the  Lenovo-made  PCs. 

Another  potential  problem 
is  reduced  sales  to  federal 
agencies  in  the  US.,  given  ihi 
C-hinese  government'.s  largo 
ownership  stake  in  Lenovo. 

Rav  Biorklund-ananaK-stai 
Federal  Sources  Inc.  in 
McLean.  Va.,said  the  Ivpan- 
ment  of  Defense  and  other 
agencK's  involved  in  national 
security  may  decide  not  to 
buy  Ia;novi.»’s  PCs.  Hut.  he 
added,  other  agencies  “will 
pnvhably  he  happv-  u*  buy 
them’’  if  Lenovo's  pricing  "is 
extremely  competitive  and  the 
^  machines  work  well."  O  51396 


OUR  TAKE;  o™  wants  to 

tun  Litnovo  inU)  a  househoM  name 
wor1<ninde.  tut  the  cwnpairy  wi§ 
have  to  be  a  technotogy  innovator  to 
succeed  Mark  Hall  says.  PUGf  >d 


HP  Revamps  Midrange  Storage  Line 


BY  LUCAS  MEARIAN 

Hewlett-Packard  Co.  last  week 
brought  out  several  new  and 
upgraded  midrange  storage 
products,  including  its  first 
disk  array  that  can  use  both 
SCSI  and  Serial  ATA  technolo¬ 
gy.  HP  also  added  disk-to-disk 
and  disk-to-tape  backup  func¬ 
tionality  to  its  SioragcWbrks 
Data  Protector  software. 

The  Storage  Works  Modular 
Smart  Array  1500  cs  can  pro¬ 
vide  users  with  tiered  storage 
inside  a  single  enclosure.  Such 
functionality  is  designed  for 


I  small  and  midsize  businesses, 
which  HP  is  aggressively  court¬ 
ing.  said  Dianne  McAJam.  an 
analyst  at  Data  Mobility  Group 
LLC  in  Nashua,  N.H. 

The  MSA1500  cs  can  scale 
to  24TB  of  raw  capacity  using 
250GB  Serial  ATA  disk  drives, 
and  up  to  16TB  using  300GB 
SCSI  drives,  nie  same  soft¬ 
ware  that  controls  the  Pro¬ 
Liant  family  of  servers  can  be 
used  to  manage  the  drives, 
said  Frank  Harbisi. general 
manager  of  network  storage 
solutions  software  at  HP.  "rhe 


I  box  is  priced  from  S8.995. 

HP  tilso  added  about  2(M) 

I  functions  to  StorageWorks 
Data  Protector,  including  aJ- 
I  vanced  backup  to  disk  and 
I  lapc.Thcsvifiwarvcan’Takea 
j  sn.ipshot  of  the  data  once  a 
i  minute,  do  replications  <mce  an 
I  hour,  perform  disk-based  back- 
I  up  once  a  day  .and  tape  backup 
once  a  week."  said  Rkk  Lut- 
trail,  chief  technology  strate¬ 
gist  for  near-line  storagi-  at  HP. 

Devin  York,  director  of  fi¬ 
nancial  systems  at  Continental 
Airlines  Inc.  in  Houston,  said 


he  plans  to  upgrade  to  Sior- 
ageWorks  Data  Proteiior  5.5  in 
next  year's  first  quarter 
York  currently  runs  a  sinr- 
age-area  network  with  about 
2«TB  of  capacity  on  two  HP 
StorageWorks  XI’512  arrays. 

He  said  be  likes  the  sei-urity  of 
K*ing  able  to  save  data  to  disk 
and  tape  simultaneously.  "The 
one  pmlect  1  am  working  on 
'  next  year  Ls  disk-to-disk  back¬ 
up."  York  said.  The  problem 
with  (tape  I  is  that  as  the  data 
grows.  I've  got  to  keep  adding 
expensive  tape  drives.  With 
I  disk-to-disk  backup.  I  can  add 
I  extremely  cheap  storage  as  a 
'  st.'iging  device."  O  513^ 


Some  Rnd  Sale 
Hard  to  Swallow 

Althou^  many  users  said  lasi 
week  that  they  undnstand  the 
motives  behind  6M's  decision  to 
seU  ns  PC  busness.  some  found 
It  hard  to  accept  the  planned 
sale  of  the  product  kne  that  was 
the  standard  lor  measuring 
whelherx86based  systems 
were  "IBM  PC  Compatible  ‘ 

*11  really  s  an  American  con 
and  to  see  that  get  sold  off  to  a 
Chinese  conxiany  ts  kmd  of  dis- 
aoponting.*  said  Steven  Ged- 
wAo.  a  resource  manager  at 
Omaha  Vibodmen  Ute  Insur¬ 
ance  Society  m  Nebraska 
IBM  MGS  a  PC  pioneer.  Ged- 
wiSo  said,  but  he  added  Ihai  the 
systemshavebecomecom- 
modkies  and  that  the  sel-ofi 
may  "be  an  ndicaior  oTa  com¬ 
pany  that  is  lookng  forward  * 

Ike  Hunley.  a  systems  pro¬ 
grammer  at  Blue  Cross  and 
Blue  Shield  of  Ronda  Inc  in 
dacksonvile.  said  he  was  dis¬ 
mayed  by  8M's  move,  whch 
he  caled 'iu5t  more  selling  off 
of  Amenca ...  piece  by  piece ' 
A  sennr  developer  at  a  fow 
firm  m  Qeveiand.  who  asked 
not  to  be  Kfonbtied  safo  that 
close  to  XX)%  of  the  krm's  PCs 
are  from  IBM  and  that  he  tlwiks 
the  hrm  will  continue  1o  buy 
IBM-branded  sy^ems  from 
Lenovo.  But  he  added  that  the 
sale  of  the  PC  urai  to  Lenovo  6 
abadidea 

'My  ctxicem  6  lhai  the  U  S 
6  becoming  so  dependent  on 
overseas  manufactunng  of  elec¬ 
tronic  Hems  that  we  could  fmd 
ourselves  •>  a  very  bed  sAuabon 
if  we  get  into  a  dplomabc  trfi 
with  our  suppliers.*  he  sod 
But  Danel  Menasce.  a  pro¬ 
fessor  of  computer  soence  at 
George  Mason  University  m 
Fairfax.  w^'t  surprised  by 
the  sale  *The  profit  margm  on 
PCs  G  sin.' he  said  IBM 
makes  its  money  on  seHffig  so¬ 
lutions  to  its  customers.' 

-Patrick  nuixxieau 
andCamISliwa 
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Making  a  List 

a~m  OHNNY?  ROBOSAPiEN.  [AMAL?  ROBOSAPiEN,"  Said  Santa. 

I  For  once,  he  was  zipping  through  the  list  of  gifts  for 
I  good  boys  and  girls  at  top  speed.  “Edgar?  Robosapien. 

I  Heather?  Hmm.  She  asked  for  a  Barbie.  I  don’t  suppose 
I  we  could  put  a  blond  wig  on  a  programmable  robot 
and  give  her  that  instead,  could  we?” 

“I  don’t  think  so,  big  guy,”  said  the  elf  sitting  next  to  him,  scrolling 
down  the  computer  screen.  “But  how  about  we  take  a  break  from  the 
kids  and  decide  what  all  these  IT  people  will  get  under  the  tree?” 


“Couldn’t  we  just  give  them  all  Robosapicns 
too?"  Santa  asked.  “Those  robots  should  appeal 
to  the  techies  —  they  can  be  programmed  to 
run.  kick,  belch,  dance ..." 

“Bill  Gates  already  has  Steve  Ballmer."  the  elf 
said.  “Scott  McNeaiy,  too.  come  to  that.  How 
about  a  magic  trick?  Gates  claims  Microsoft’s 
new  Dynamic  Systems  Initiative  for  simplifying 
s>'stems  management  works  like  magic." 

“Sure,”  said  Santa.  “Give  him  the  one  that 
turns  a  SI  bill  into  a  10  spot,  not  that  he  needs  it. 
What  about  Steve  lobs.^ 

“Apple’s  stock  has  been  defying  gravity  —  it 
tripled  in  price  this  year."  said  the  elf.  “One  of 
those  remote-control  flying  saucers  should 
work  for  him.  And  we  know  what  Larry  Ellison 
wants,  but  how  do  you  wrap  up  PeopleSoft?" 

“Oracle's  lawyers  are  doing  that  right  now,” 
Santa  said,  looking  over  the  elfs  shoulder. 

“Give  him  a  genuine  IBM  PC.  It’ll  be  a  collec¬ 
tor’s  item  soon,  just  like  Larry’s  thin  clients. 
Who’s  Chris  Stone?" 

"The  guy  that  got  Novell  into  the  Linux  busi¬ 
ness.  then  bailed  out  when  he  didn't  get  to  be 
boss.  Rumor  was  it’s  because  he  had  some 
rough  edges,”  said  the  elf.  “We've  also  got  San- 
jay  Kumar,  who  got  to  be  big  cheese  at  Comput¬ 
er  Associates  and  then  had  lo  quit 
this  year  after  he  was  indicted." 

“Put  them  both  down  for  books 
by  Martha  Stewart."  said  Santa.  "An 
etiquette  manual  for  Stone  and.  for 
Kumar,  her  prison  memoirs.  Maybe 
those  guys  at  Lycos  who  came  up 
with  the  screen  saver  that’s  impolite 
to  spammers  could  use  an  etiquette 
book  too." 

“Except  now  some  virus  writers 
have  created  a  fake  version  that  in¬ 
fects  the  user  instead  of  annoying 
the  spammers."  replied  the  elf.  “Do 
you  think  the  Lycos  folks  would 


learn  lo  look  a  few  moves  ahead  if  they  got  a 
chess  set?” 

“It’s  worth  a  try,"  Santa  said.  ’And  wrap 
up  a  pro-wrestling  video  game  for  Daimler- 
Chrysler’s  law)'ers  —  they  really  laid  a  smack¬ 
down  on  TTie  SCO  Group  when  SCO  sued 
them.  Why  is  the  U.S.  Interior  Department 
on  this  list?" 

“They  just  got  back  on  the  Internet,"  the  elf 
said.  “A  federal  judge  cut  ofl*  their  access  in 
March,  supposedly  because  he  was  worried 
about  security.  Actually,  the  Bureau  of  Indian 
Affairs  lost  track  of  some  money  —  well,  it’s  a 
long  story." 

“They’ve  been  off  the  Net  a  long  time," 
said  Santa-  “Those  poor  bureaucrats  probably 
don't  even  remember  what  worms,  phishing 
or  Nigerian  spam  letters  look  like.  Better  give 
them  a  firewall  —  the  bigger  the  better. 

“Let’s  see.  for  the  vendors  who  make  elec¬ 
tronic  voting  machines,  make  it  bus  tickets  to 
the  North  Carolina  shore  in  January.  That's 
when  they’re  rerunning  an  election  that  went 
bad  because  the  spiffy  new  machines  lost  thou¬ 
sands  of  votes.  And  send  the  Linux  gang  a  pallet 
of  legal  pads  —  they'll  need  them  while  rewrit¬ 
ing  the  GPL" 

“What  about  all  the  regular  IT 
folks?"  the  elf  asked.  “The  ones 
still  slugging  it  out  with  Sarbancs- 
Oxley  and  security  and  offshoring 
and  open-source  —  and  especially 
the  ones  slaving  away  for  CIOs 
who  chase  after  every  technology 
trend  and  management  fad?" 

Santa  laughed  heartily.  “Ho,  ho, 
ho!  So  there  is  a  place  for  all  those 
Robosapiens  among  the  techies  af¬ 
ter  all.  But  all  I  can  do  Ls  deliver  the 
toys,"  he  said.  “Actually  replacing 
one  robotic  CIO  with  another  will 
be  up  lo  them."  O  51346 
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Not  What  I  Had  in  Mind 

A  barb's  IT  Staff  replaoes  some  setvBT  disk  drives,  and 
just  for  fin  this  IT  rritfiaoer  pirt  fish  harids  a  tech  a 
stedgehammer  to  make  sure  the  data  is  destroyed, 
leather  than  going  outside,  he  decided  to  pound  th^ 
nghtnexttooifmaincashvaijH-theonewithvitxa- 
tion  sensors  to  detect  penetration  attempts.*  says  fish. 
‘Eventualy.  we  got  the  srtoation  resolved,  txit  it  took  a 
Kttte  explaining  to  the  rather  tense  polkte  (ffficer  ^ 
his  gun  drawn  and  aimed  at  us.' 
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FRANK  HAYES  ■  FRANKLY  SPEAKING 

Making  a  List 

aw  OHNNY?  ROBOSAPIEN.  JAMAL?  ROBOSAPIEN,"  Said  Santa. 

I  For  once,  he  was  zipping  through  the  list  of  gifts  for 
I  good  boys  and  girls  at  top  speed.  “Edgar?  Robosapien. 

I  Heather?  Hmm.  She  asked  for  a  Barbie.  I  don’t  suppose 
I  we  could  put  a  blond  wig  on  a  programmable  robot 
^  and  give  her  that  instead,  could  we?” 

“I  don’t  think  so,  big  guy,”  said  the  elf  sitting  next  to  him,  scrolling 
down  the  computer  screen.  “But  how  about  we  take  a  break  from  the 
kids  and  decide  what  all  these  IT  people  wiU  get  imder  the  tree?” 


“Couldn't  we  just  give  them  all  Robosapiens 
too?”  Santa  asked.  “Those  robots  should  appeal 
to  the  techies  —  they  can  be  pr(^;rammed  to 
run.  lock,  belch,  dance ...” 

“Bill  Gates  already  has  Steve  Ballmer,”  the  elf 
said.  “Scott  McNealy,  toa  come  to  that.  How 
about  a  magic  trick?  Gates  claims  Microsoft’s 
new  Dynamic  Systems  Initiative  for  simplifying 
systems  management  works  like  magir  * 

“Sure.”  said  Santa.  “Give  him  the  one  that 
turns  a  SI  bill  into  a  10  spot,  not  that  he  needs  it 
What  about  Steve  Jobs?” 

“Apple’s  stock  has  been  defying  gravity  —  it 
tripled  in  price  this  year.”  said  the  elf.  “One  of 
those  remote<ontrol  flyii^  saucers  should 
work  for  him.  And  we  know  what  Larry  Ellison 
wants,  but  bow  do  you  wrap  up  PeopleSoft?” 

“Oracle's  lawyers  are  doing  that  r^t  now.” 
Sant^  said,  looking  over  the  elTs  shoulder. 

“Give  him  a  genuine  IBM  PC.  It’ll  be  a  collec¬ 
tor's  item  soon,  just  like  Larry's  thin  clients. 
Who’s  Chris  Stone?” 

“The  guy  that  got  Novell  into  the  Linux  busi¬ 
ness,  then  bailed  out  when  be  didn’t  get  to  be 
boss.  Rumor  was  it’s  because  be  had  some 
rough  et^es,”  said  the  elf  “We’ve  also  got  San- 
jay  Kumar,  who  got  to  be  big  cheese  at  Comput¬ 
er  Associates  and  then  had  to  quit 
this  year  after  be  was  indicted.” 

“Put  them  both  down  for  books 
by  Martha  Stewart.”  said  Santa.  “An 
etiquette  manual  for  Stone  and,  for 
Kumar,  her  prison  memoirs.  Maybe 
those  guys  at  Lycos  who  came  up 
with  tl^  screen  saver  that's  impolite 
to  spammers  could  use  an  etiquette 
book  toa* 

“Except  now  some  virus  writers 
have  created  a  fake  version  that  in¬ 
fects  the  user  instead  of  annoying 
the  ^Nunmers,”  replied  the  elf  “Do 
you  think  the  Lycos  folks  would 


learn  to  look  a  few  moves  ahead  if  they  got  a 
chess  set?" 

“It's  worth  a  try,”  Santa  said.  “And  wrap 
up  a  pro-wrestling  video  game  for  Daimler- 
Chrysler’s  lawyers  —  they  really  laid  a  smack¬ 
down  on  The  SCO  Group  when  SCO  sued 
them.  Why  is  the  U.S.  Interior  Department 
on  this  list?” 

"They  just  got  back  on  the  Internet,”  the  elf 
said.  “A  federal  judge  cut  off  their  access  in 
March,  supposedly  because  be  was  worried 
about  security.  Actually,  the  Bureau  of  Indian 
Affairs  lost  track  of  some  money  —  weU.  it's  a 
long  story.” 

“TTiey've  been  off  the  Net  a  long  time,” 
said  Santa.  "Those  poor  bureaucrats  probably 
don’t  even  remember  what  worms,  phishing 
or  Nigerian  spam  letters  look  like.  Better  give 
them  a  firewall  —  the  bigger  the  better. 

“Let's  see.  for  the  vendors  who  make  elec¬ 
tronic  voting  machines,  make  it  bus  tickets  to 
the  North  Carolina  shore  in  January.  That’s 
when  they're  rerunning  an  election  that  went 
bad  because  the  spiffy  new  machines  lost  thou¬ 
sands  of  votes.  And  send  the  Linux  gang  a  pallet 
of  legal  pads  —  they’ll  need  them  while  rewrit¬ 
ing  the  GPL” 

“What  about  all  the  regular  IT 
folks?”  the  elf  asked.  "The  ones 
still  slugging  it  out  with  Sarbanes- 
Oxley  and  security  and  ofiEshoring 
and  (^n-source  —  and  especially 
the  ones  slaving  away  for  CIOs 
who  chase  after  every  technology 
trend  and  management  fad?” 

Santa  laughed  heartily.  “Ho,  bo. 
hoi  So  there  is  a  place  for  all  those 
Robosapiens  among  the  techies  af¬ 
ter  alL  But  all  I  can  do  is  deliYCT  the 
toys,”  he  said.  “Actually  replacing 
one  robotic  CIO  with  another  will 
be  up  to  them.”  O  5046 
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DB2  DOESN’T  LOCK  YOU  IN. 


DB2  ts  middlewarp.  but  it  is  anything  but  middle-of-the-road 
In  fact  DB2  is  part  of  an  innovative  family  of  information 
management  products  that  can  integrate  and  actually  add 
insight  to  your  data  That's  big 

DB2  IS  also  the  leading  database  built  on  and  optimized  for 
Linux  UNIX  andWindows.  built  to  take  full  advantage  of 
vour  existing  heterogeneous  and  open  environments,  and 
built  to  enable  true  gnd  computing 

Plus  there's  no  constncting  contract. 

DB2.  like  other  IBM  database  engine  products  sucti  as 
Informix  and  Cloudscape  is  also  middleware  with  an  eye' 
.on  your  resources  All  of  them  An  ITG  sludv  shov;ed  overall 
costs  for  Oracle  Database  are  up  to  four  times  higher  than 
DB2  A  Solitaire  study  found  that,  on  avemge.  Oracle 


Q2I  DEMAND  BUSINESS 


Database  required  25‘'o  more  time  to  manage  than  DB2 
And  the  Transaction  Processing  Performance  Council 
showed  DB2  as  the  overall  price.'performance  leader  for 
TPC-C  on  Linux  UNIX  and  Windows  Ahead  of  both  Oracle 
Database  and  Microsoft  SOL  Server 

Then  theres  this  Oracle  will  drop  the  current  level  of  support 
foi  Oracle  Database  8i  at  the  end  of  2004  Meaning  limited 
support,  higher  cost  or  a  complete  migration  to  current 
versions  Fortunately.  IBM  otters  ongoing  around-the-clock 
service  and  support  for  DB2 

Why  not  move  up  to  middleware  that  makes  sense?  Through 
the  end  of  the  year,  you  can  get  IBM  DB2  Universal  Database 
or  Informix  by  taking  advantage  of  our  extremely  compelling 
trade-up  promotion. 

Visit  Ibin.com/db2/swap  today  to  find  out  if  you  qualify. 


2004 


For  some  IT  execs,  the  consolidation  of  wireless  earners  spurs 
thoughts  of  lower  prices  and  more  useful  applications. 


David  Moschella  says  there's  still  one  vertically  integrated 
part  of  the  IT  industry:  The  IT  shop. 
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THE  VOICE  OF  IT  MANAOEMEMT  •  WWW  COMPUTERWORLO  COW 

Symantec  Expands  Beyond 
Skurity  Via  Veritas  Purchase 

But  some  users  and  analysts  said  last  week, 

_ I a.  Brit,  some  of  them  added, 

SnSiyStS  see  product  the  move  to  absorb  Verltas 

integration  as  a  hurdle  creates  technology  integration 
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BV  JAIKUMAR  VI  JAVAN 

Symantec  Corp.'s  planned 
acquisition  of  Veritas  Soft¬ 
ware  Corp.  gives  the  IT  secu¬ 
rity  vendor  an  opportunity 
to  significantly  expand  its 
presence  in  the  maitet  for 
enterprise  software,  users 
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IBM  Builds 
Java  System 
For  NYSE 

Custom  trading  app 
said  to  end  downtime 


•V  LUCAS  MEAinAN 

New  York  Stock  Exchange  Inc. 
announced  last  week  that  it’s 
rolling  out  a  Java-based  trad¬ 
ing  system  that  includes  cus¬ 
tomized  wireless  handheld 
devices  for  traders.  The  new 


and  analysts  said  last  week. 

But.  some  of  them  added, 
the  move  to  absorb  Veritas 
creates  technology  integration 
challenges  for  Symantec  and 
is  being  driven  partly  by  in¬ 
creased  competition  for  secu¬ 
rity-related  business  ftom 
heavyweight  vendors  such  as 
Microsoft  Corp.  and  Cisco 
Systems  Inc. 

Symantec  claimed  that  the 
merger  will  make  it  the 
fourtb-largest  independent 
software  vendor  worldwide, 
with  projected  annual  revenue 
of  ab^t  $5  billion  and  a  prod¬ 
uct  portfolio  that  combines  its 
Symantec,  page  13 


technology  could  mean  the 
beginning  of  the  end  to  the 
shouts  of  “Buy“  and  “Sell"  that 
have  long  been  the  trademark 
of  the  nation’s  oldest  and 
largest  stock  exchange. 

The  NYSE  awarded  IBM  a 
contract  two  years  ago  to 
build  a  stock  order  manage¬ 
ment  system  that  would  pro¬ 
vide  uninterrupted  availability 
to  its  brokers,  who  now  coUec- 
tivety  send  and  receive  an  av¬ 
erage  of  TSiOOO  mess^es  per 
day  —  up  200%  from  when 
the  deal  was  signed. 

The  ‘TYadeWorics  system 

NYSE,  page  14 
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PeopleSoft  Users  Put 
Oracle  on  Robation 


rr  managers  demand  detailed  road  map,  solid 
support  of  applications  from  victorious  wndor 


BY  MANC  L.  SOHOINI 

Now  that  Oracle  Corp.  has 
gotten  what  it  wanted  —  own¬ 
ership  of  Pet^leSoft  luc  —  it 
must  free  thousands  of  MB 
users  Mdio  are  skeptical 
about  its  intentions. 

Having  overcome  for-  m 

midable  obstacles  to  its  ^*2 
hostile  takeover  bid.  in- 
eluding  a  resistant  Peo-  0»1 
pleSoft  board,  staunch  ^ 

opposition  from  former  Peo¬ 
pleSoft  CEO  Craig  Conway 
and  a  legal  challenge  from  the 
U.S.  Department  of  Justice. 


Oracle’s  biggest  test  may  well 
be  winning  the  trust  of  the  in¬ 
stalled  base  of  the  12,700  cus¬ 
tomers  that  it’s  inberitittg. 

7\vo  of  the  10  users 
interviewed  about  the 
deal  last  week  said 
dik  they  were  guardedly 
(^dmistic  about  Ora- 
ripp^  cle's  ability  to  earn 
their  business.  But  all 
of  the  users  cited  con¬ 
cerns  about  Oracle  and  said 
they  were  putting  the  vendor 
on  a  sort  of  probation  before 
makii^  any  decisions. 


Robert  Robinson,  business 
systems  supervisor  at  Durr 
Industries  Inc.  in  Plymouth. 
Mich.,  said  he  needs  not  only  a 
promise  from  Oracle  that  P^ 
pleSoft’s  applications  will  be 
supported,  but  also  a  bener 
explanation  of  its  plans  for  the 
World  and  EnterpriseOne 
product  lines  that  PeopleSoft 
acquired  with  its  purchase  of 
JD.  Edwards  &  Ca  last  year. 

Durr,  an  automotive  suppli¬ 
er,  is  about  to  upgrade  frtm 
World  to  EnterpriseOne. 
“We’re  scrambling  to  move  to 
the  most  current  verskon  of 
the  software,  but  now  we  have 
to  wonder  If  we’re  getting  our 
Oade.pqge45 
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RHD 

Reality  Check 

F.\cntually.  RFID 
vNillbcalxxinfor 
the  supply  chaia 
But  ri^t  n(j\v.  relia 
bilit\’  problems  and  tttmplexity 
are  slowing  adttptioa  Stories 


Datij  Points  Dow'i{>dd  the  (dt**s!  RFID  survey  ursulls  Idi  yout  PowerPoint  attscntalions 


2004 


PAPIR 


For  some  IT  execs,  the  consolidation  of  wireless  carriers  spurs 
thoughts  of  lower  prices  and  more  useful  applications.  PAGE  7 


David  Moschella  says  there's  still  one  vertically  integrated 
part  of  the  IT  industry:  The  IT  shop.  PAGE  16 
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Symantec  Expands  Beyond 
S^rity  Via  Veritas  Purchase 


But  some  u.sers  and 
anahsts  see  pnxfuct 
integration  as  a  hurdle 


BV  JAlkUMAR  VUAVAN 

Symantec  Corp.'s  planned 
acquisition  of  Veritas  Soft¬ 
ware  Corp.  gives  the  IT  secu¬ 
rity  vendor  an  opportunity 
to  significantly  expand  its 
presence  in  the  market  for 
enterprise  software,  users 


NOT  THEIR  CHOICE 

Sewd'  Vet  ;as  uSl--..-.  ' 

Ihnih  ii  and  Syn-ame;  ate  a  oco.: 

OQuickLinlt  51525 

www.computerworld.com 


and  analysts  said  last  week. 

But.  some  of  them  added, 
the  move  to  absorb  Veritas 
creates  technology’  integration 
challenges  for  Symantec  and 
is  being  driven  partly  by  in¬ 
creased  competition  for  secu¬ 
rity-related  business  from 
heavyweight  vendors  such  as 
Microsoft  Corp.  and  Cisco 
Systems  Inc. 

Symantec  claimed  that  the 
merger  will  make  it  the 
fourth-largest  independent 
software  vendor  worldwide, 
with  projected  annual  revenue 
of  about  S5  billion  and  a  prod¬ 
uct  portfolio  that  combines  its 
Symantec,  page  13 


IBM  Builds 
Java  System 
For  NYSE 

Custom  trading  app 
said  to  end  downtime 

BY  LUCAS  MEARIAN 

New  York  Stock  Exchange  Inc. 
announced  last  week  that  it’s 
rolling  out  a  Java-based  trad¬ 
ing  system  that  includes  cus¬ 
tomized  wireless  handheld 
devices  for  traders.  The  new 


technology  could  mean  the 
beginning  of  the  end  to  the 
shouts  of  “Buy"  and  “Sell"  that 
have  long  been  the  trademark 
of  the  nation's  oldest  and 
latest  stock  exchange. 

The  NYSE  awarded  IBM  a 
contract  two  years  ago  to 
build  a  Slock  order  manage¬ 
ment  system  that  would  pro¬ 
vide  uninterrupted  availability 
to  Its  brokers,  who  now  collec¬ 
tively  send  and  receive  an  av¬ 
erage  of 75.000  messages  per 
day  —  up  200%  from  when 
the  deal  was  signed. 

The  TradeWorks  system 

NYSE,  page  14 


PeopleSbft  Users  Put 
Oracle  on  Probation 


n  managers  demand  detailed  niiid  map.  sulid 
support  of  applications  from  \  ietorious  vendor 


BY  MARC  L-  SON6INI 

Now  that  Oracle  Corp.  has 
gotten  what  it  wanted  —  own' 
ership  of  PeopleSoft  Inc.  —  it 
must  face  thousands  of 
users  who  are  skeptical 
about  its  intentions. 

Having  overcome  for¬ 
midable  obstacles  to  its 
hostile  takeover  bid.  in¬ 
cluding  a  resistant  Peo¬ 
pleSoft  board,  staunch 
opposition  from  former  Peo¬ 
pleSoft  CEO  Craig  Conway 


ThtGNDMndon 

hmaiottB 


startnovNihttte 
bases  oI  how  they 
buMRieraops. 
Don  Tennant  says. 

PME1$ 


Oracle's  biggest  test  may  well 
be  winning  the  trust  of  the  in¬ 
stalled  base  of  the  12.700  cus¬ 
tomers  that  it's  inheriting. 

Two  of  the  10  users 
inter>'icwcd  about  the 
deal  last  week  said 
they  were  guardedly 
optimistic  about  Ora¬ 
cle's  ability  to  cam 
their  business.  But  all 
of  the  users  cited  con¬ 
cerns  about  Oracle  and  said 
they  were  putting  the  vendor 


and  a  legal  challenge  from  the  on  a  sort  of  probation  before 
U.S.  I>epartment  of  Justice.  '  making  any  decisions. 


Robert  Robintum.  business 
systems  supervisor  at  Durr 
Industries  Inc.  in  Plymouth. 
Mich.,  said  he  needs  not  only  a 
promise  from  Oracle  that  Peo¬ 
pleSoft 's  applications  will  be 
supported,  but  als<»  a  better 
,  explanation  of  its  plans  fur  the 
World  and  EnterpriseOne 
product  lines  that  PeopleSoft 
acquired  with  its  purchase  of 
I.D.  Edwards  &  Co.  last  year. 

Durr,  an  automotive  suppli¬ 
er.  is  about  to  upgrade  from 
World  to  EnterpriseOne. 
"We're  scrambling  to  move  to 
'  the  roost  current  version  of 
the  software,  but  now  we  have 
'  to  wonder  if  we're  getting  our 
Oracle,  page  45 
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Data  Points:  Download  the  latest  RfID  survey  results  for  your  PowerPoint  presentattOfts.Om.kL 


PUT  IT  IN  THE 
SERVER  ROOM. 

FEEL  IT  IN  THE 
BOARDROOM. 


Meet  the  IBM  eServer"  p5  570  -  the  ultimate  in  performance  for  on  demand  business.  The  p5-570  is  powerful.  It's 
easy  to  manage.  It's  competitively  priced.  And  it  supports  70%  more  users  than  a  midrange  HP  system  (on  the  mySAP' 
ERP  solution))  So  what  could  that  mean  for  you?  A  lower  TCO.  A  better  bottom  line.  A  happy  boardroom.  You  need  to 
leam  more  about  the  p5-570  at  ilMn.coiii/esefver/performance 


5  reasons  why  you  need  the  IBM  eServer  p5  570. 


High-performance 

Runs  IBM  AIX  SL 

Innovative  modular 

i  Capacity  on  demand  Advanced  viriuahrahon 

POWERS  processors. 

and  Linux.  ^ 

design. 

i  capabilities'  options. 

IraueatradeiTiafltoJljxsTorvattsati^ 

otnereoorwies,  orbolh  SAP  imySAP  and  all  SAP  pro<*id  arW  serw  riarnes  rrierwyiea  hgtert  at*  badernarM  or  legstered  tradenwrks  <y  SAP  AG  r  GerTtwiy  r  several  omer  coi«r«s  wound  re  Ot*. 
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WIN  A 


,A/IWt  AWARDS 


Date:  February  14, 2005 
Sen  Francisco 

Visit  ca.com/etrust/workshop 

for  information  and  to  register  to  win. 
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It  takes  an  integrated  security  solution  to  make  sure  the 
right  people  have  the  right  access  at  the  right  time. 

eTrusf  Identity  and  Access  Management  Solutions 

These  days,  a  vital  aspect  of  security  management  is  providing  customized 
levels  of  access  for  countless  employees  and  partners  while  also  protecting 
your  customers  from  identity  theft.  That's  one  complicated  job-and  one  that 
can  be  made  much  easier  with  CA's  ©Trust  Identity  and  Access  Management 
{lAM)  Solutions.  They  enhance  security  and  reduce  costs  by  automating 
processes  and  enabling  self-administration,  in  addition  to  providing  policy-based 
cross-platform  protection  for  web.  mainframe,  and  application  resources 
enterprise  wide.  To  find  out  how  CA's  lAM  solutions  can  improve  your  business, 
attend  one  of  our  workshops,  ca.com/etrust/workshop 


Computer  Associates* 


jm 


Emerging  Technologies  Update 

In  the  Technolooy  section:  Computerworld's 
Robert  L  Mitchell  checks  in  on  PCI  Express, 
802.Ug,  Bluetooth  and  power  over  Ethernet. 
They  all  made  a  splash  in  the  technology  mar¬ 
ket  in  the  past  two  years,  but  how  are  they  do¬ 
ing  now  that  the  buzz  has  died  down?  PaQe  23 


6  Sun  adds  Linux  support  to 

the  server  software  that  runs 
its  Sun  Ray  thin  clients. 

6  Microsoft  buys  a  vendor  of 
antispyware  tools. 

7  Recent  wireless  industry 

mergers  like  that  of  Sprint 
and  Nextel  get  a  thumbs-up 
from  users. 

7  Users  want  links  between 
enterprise  information  inte¬ 
gration  technology  and  busi¬ 
ness  intelligence  tools. 

9  Cisco  unveils  an  appliance  to 
manage  file  and  print  services 
at  branch  ofHces. 

9  Q&A:  Cisco  exec  Mike  Volpi 
says  the  vendor  is  now  more 
realistic  about  its  strengths. 

12  Q&A;  Microsoft's  Bob  Muglia 
says  ‘Tole-based  configura¬ 
tion”  is  key  to  Longhorn. 

13  Banks  are  starting  to  replace 
their  core  systems  using  new 
technologies. 

14  Global  Dispatches:  India  WOOS 
the  bio-IT  industry. 
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OPINIONS 

8  On  the  Mark;  Mark  Hall  re¬ 
ports  on  a  tool  that  targets 
Web  app  coders  who  juggle 
non-Java  components  in  the 
pure-Java  worid  of  Eclipse. 

16  Don  Tennant  laments  that 
users  were  largely  left  off  the 
list  of  considerations  that 
Oracle  had  in  mind  when  it 
decided  to  acquire  PeopleSoft. 

16  David  Moschella  notes  that 
there’s  still  one  vertically  inte¬ 
grated  component  of  the  IT 
industry:  the  IT  shop. 

17  Pftnm  Fox  ponders  Microsoft- 
sponsored  UJC.  research  that 
the  software  vendor  uses  to 
compare  its  plight  to  that  of 
Third  World  coffee  growers. 

25  Curt  A.  Monash  examines 
four  key  areas  that  companies 
should  re-evaluate  as  they 
plan  IT  strategies  for  200S. 

29  Barbara  Gomolsld  advises 
cutting  through  the  clutter  of 
old  apps  and  tossing  out  those 
you  don't  need.  And  she  sug¬ 
gests  some  ways  to  get  the 
business  side  to  help  you. 

46  Frankly  Speaking:  Frank 
Hayes  calls  2005  a  year  for  in¬ 
novation.  IT  shops  must  de¬ 
cide  what’s  ripe  for  innova¬ 
tion  and  %^diat's  a  commodity. 
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Bridging  the  Gap 

In  the  Management  sectkMi;  The 
relationsbip  mana^r  is  a  crucial 
liaison  between  business  and  IT. 
but  the  role  is  still  evolving,  and 
there  are  lots  of  ways  to  get  it 
wrong  Page  27 
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RFID  Reality  Check 

EDITOR'S  MOTE;  This  Special 
report  offers  tips  for  dealing 
with  RFID  reliability 
problems,  illustrates  the 
complexity  of  the  data 
flows  and  provides  lessons 
learned  about 
running  RFID 
pilot  programs. 
PACIU6E  BEOINS  ON  PA6E  31. 

32  The  TrouUe  with  Tags.  Users, 
such  as  Henkel  Consumer  Adhe¬ 
sives*  Gene  Obiock  (below),  say 


RFID  reli^ility  (Htfalls  range  from 
Donftmctiontng  tags  to  environ¬ 
mental  conditions  that  render  tags 
uxueadable.  But  some  say  building 
an  RFID-based  supply  chain  is 
worth  the  trouble. 

I  34TheLongand 
I  Winding  Road.  RFID 
I  data  has  a  long  but 
clear-cut  journey  from 
the  manufacturing 
floor  to  the  retail 
supply  chain.  Here's 
a  look  at  how  pio¬ 
neering  Gillette 
steers  Hs  data. 

36  RRD  Pilot  Tips. 

Most  organiza¬ 
tions  are  just  get¬ 
ting  their  feet 
wet  with  RFID 
technology.  Early 
users  such  as 
Buffy  Doiping- 
haus  (right)  of 
the  El  Paso  County  government  in 
Colorado  offer  their  advice  for 
managit^  a  pilot  project 

38  Opinion:  When  H  comes  to  RFID, 
everyone’s  talking  about  Wal- 
Mart.  Columnist  Mark  Hail  says 
that's  a  mistake. 


Ediar'sPida.w.-vc 

coopfled  Con^Niter- 
worlA  best  articles 
about  radio  frequency 
identification  technol¬ 
ogy,  including  pieces 
that  address  tite  issues 
of  return  on  invest¬ 
ment  privacy  and 
security. 

OQriellMSteO 
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aiMoiCRFIDdaUB 
vulner^le  under  cer¬ 
tain  circumstances, 
says  consultant  and 
Contputerworld  cohim- 
ttist  Mark  WHlougfaby, 
but  tou^ser  standards 
DOW  prevent  hackers 
from  using  sensitive 
data  in  malicious 
exploits. 

OQMoMMi  46444 


IMaMnit.o<u 

newest  coUectioD  of 
charts  offen  £Kt(^ 
about  RFID  technolo¬ 
gy  that  you  can  down¬ 
load  for  your  Power- 
Poent  presentatiotts. 
OQMbUMAIO 
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AT  DEADLINE 


SiebelBuyseOocs 
To  Extend  CRM  App 

SMmI  Systems  Inc.  Ittl  wmIi 
■greed  to  acquirs  sOocs  inc.  for 
SttS  mHon  in  cash.  Siebei  said 
the  move  mpM  eatood  Hi  suhe  of 
CMi  appIcatioRB.  EDocs  makes 
e-bWng  and  customer  self* 
serstee  appHeatfens  to  cut  can 
cantor  and  bWng  costs.  The  deal 
is  eapactod  to  don  next  year. 


HP,  Intel  Terminate 
Th^  Itanium  Pact 

HswfeW  Packard  Ce.  and  tntei 
Corp.  ended  a  lO-ysar  pact  to 
co-devalop  the  ttMium  chip  for 
servers.  Intol  edi  continue  work 
on  the  chips,  and  mieroproeeastng 
development  hy  ly  wW  effedfveiy 
end.  NTs  Hanium  team  wfl  |oin 
IntoL  HP  also  pledged  to  continue 
using  the  chips  in  Ks  servers  and 
to  spend  SS  bfliion  over  three 
yean  on  ftanium'rsiatod  product 


New  Standard 
Could  Drive  RFID 

EPCotobal  lec.  last  woek  said  ill 
beard  has  rattled  the  second  gsn* 
emHan  of  He  Electnmic  Product 
Coda  (EPO  apocMcatton.  Tlw 
nonprofit  Mustry  group  said  the 
standard,  auppeilod  by  dozsns  of 
major  compwlas.  such  as  Wat* 
Hart  Stone  Inc..  The  OWatts  Co. 
and  AMwrtoen's  Ine.,  wtt  drivo 
commardal  radto  frsqusney  idsn* 
tificstioe  and  EPC  use  worhfwids. 


Two  Sentenced 
In  Hacking  Case 

Two  21  yoar  old  Michigan  man 
won  aantenood  '  one  to  nine 
yoan  and  oiw  to  28  months  in 
fedaral  prison  -  for  conspiring  to 
hack  kilo  the  (T  systems  of  na* 
tional  heme  cantor  chain  Lowe’s 
CoRtoantos  bic.  and  stoabng  eus* 
tanwr  crodH  card  infarmotioo.  A 
thirddefandarrtstllawaitisart- 
tancing.  Officials  say  the  trio 
compromisad  a  l«wa’s  storo 
wiralsis  ootwork  to  gain  access 
to  tha  crodH  card  data. 


Sun  Adds  Linux  Sui 
To  Sun  Ray  Thin  Cuents 


Software  reduces 
bandwidth  needs 
for  remote  users 


8V  PATRICK  THteOOEAU 

SUN  MICROSYSTEMS  INC. 
Iasi  week  said  the  server 
software  that  supports 
its  Sun  Ray  thin-ciiem 
devices  can  now  run  on  x86' 
based  Linux  systems  in  addition 
to  Sparc/Solaris  machines. 

Sun  Ray  Server  Software  3.0 
also  includes  rtew  bandwidth 
adaptation  and  management 
tccimology  that's  designed  to 
make  it  easier  for  TT  managers 
to  support  remote  use  of  the 
thin  clients.  Because  of  re- 
duced  bandwidth  needs,  the 
devices  can  now  be  linked  to 
back-office  systems  via  Digital 
Subscriber  Line  or  cable  mo¬ 
dem  connections,  said  Sun. 
which  also  introduced  a  thin 
diem  with  a  17-1X1.  screen. 

Time  Cable  'is  a 

large  Sun  Ray  user,  with  about 
750  of  the  terminals.  Cesar 
Beltran,  vice  president  of  IT 
at  the  Tune  Warner  Inc.  divi¬ 
sion’s  data  center  facilittcs  in 
New  York,  said  he’s  interested 
in  both  of  the  major  new  fea¬ 
tures  that  Sun  is  adding  to  the 
Sun  Ray  server  software. 


Beltran  plans  to  investigate 
(he  possibility  of  switching 
from  the  UUraSparc-based  So¬ 
laris  servers  that  currently 
support  Time  Warner  Cable’s 
Sun  Ray  users  to  x86  hardware 
running  Linux.  “We’re  explor¬ 
ing  ways  to  eliminate  some 
costs,”  he  said. 

In  addition.  u.stng  Linux 
would  help  employees  who 
provide  technical  support  to 
customers  who  access  the  In¬ 
ternet  on  Linux -based  desktop 
systems  equipped  with  cable 
modems,  according  to  Beltran. 
The  workers  would  be  able  to 
enter  Linux  commands  at 
their  terminals  to  help  trou¬ 
bleshoot  customer  problems. 

Teiecommuting  Niche 

Time  Warner  Cable  is  also 
looking  at  allowing  its  cus¬ 
tomer  service  workers  to 
telecommute  in  order  to  in¬ 
crease  workforce  flexibility 
and  respond  to  the  demands 
of  handling  some  40.000  cus¬ 
tomer  calls  daily'.  Beltran  said. 
The  telecommuting  could 
start  as  early  as  next  year,  but 
a  final  decision  hasn’t  been 
made. 

Beltran  said  thin  clients  pro¬ 
vide  better  data  .security  than 
full  PCs  do  and  require  little 


Sun  Ray  Server 
Software  3.0 

■  Supports  al  existing  Sun  Ray 
devices. 


■  Includes  expanded  security 

features  for  controAng  access  1o 
peripheral  devices. _ 

■  Supports  the  PC/SC  frame- 
work  for  smart  card  applications. 
Price:  Starts  at  S99 
perasaL 

Sun  Ray  Ultra-Thin 
Client  170 

■  New  (hm-dient  device  wrlh  a 

17-in.  fiat-panel  dgptey _ 


■  ProwdesS6%hlgherresolu- 
tion  and  36%  more  viewng 
area  than  the  ISO  model. 


■  Includes  8  projecforpon  tor 
use  with  smart  c^  in  meeting 
rooms 


Pricr  Starts  al  SI, 049. 


support  from  IT  staffers.  In¬ 
deed.  he  envisions  end  users 
taking  the  thin-client  termi¬ 
nals  borne  with  instructions 
on  how  to  hook  them  up  to 
DSL  or  cable  modems  on  their 
own. 

Bob  O'Doimell.  an  analyst  at 


IDC  in  Framingham.  Mass., 
said  teiecommuting  via  thin 
clients  is  a  niche  that  could 
grow  as  part  of  an  overall  in¬ 
crease  in  corporate  use  of  the 
devices.  IDC  expects  ship¬ 
ments  of  1.6  million  thin 
clients  worldwide  this  year,  a 
9.4%  increase  over  last  year’s 
level,  and  it’s  forecasting  a  19% 
jump  in  shipments  next  year. 

“We  think  the  awareness  lev¬ 
el  is  growing,  the  cost  equation 
makes  more  sense,  and  obvi¬ 
ously  the  [PCI  security  prob¬ 
lem  is  going  to  get  worse  and 
worse,”  O’Dormell  said.  For 
now.  thin  clients  continue  to 
be  deployed  primarily  in  call 
centers  and  as  part  of  point-of- 
sale  systems,  according  to 
O'Donnell  and  other  analysts. 

Tyler  Best.  CIO  at  Vanguard 
Car  Rental  USA  Inc.,  a  Tulsa, 
Okla.-based  company  that 
owns  the  National  and  Alamo 
brands,  said  Vanguard  is  in¬ 
stalling  Windows-based  thin 
clients  from  Hewlett-Packard 
Co.  'm  Its  point-of-salc  sys¬ 
tems.  The  thin  clients  are 
about  72%  less  expensive  than 
fully  loaded  PCs.  Best  said. 

“I  think  the  thin  client  has  a 
place  at  the  point  of  sale.” 

TVler  said.  “I'm  not  so  sure  I 
would  put  it  in  my  corporate 
enviroiunenL”  He  added  that 
PCs  aren’t  very  expensive  and 
that  end  users  in  finance  and 
other  corporate  departments 
need  more  functionality  than 
point-of-sale  workers  do. 
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Microsoft  Buys  Tools 
For  Fighting  Spyware 


Microsoft  Corp.'s  announce¬ 
ment  last  week  that  h  has  pur¬ 
chased  a  small  vendor  of  anti- 
spyware  tools  serves  to  high¬ 
light  the  growing  seriousness 
of  the  spyware  problem  for 
users,  according  to  security 
aiulysts. 

Microsoft  said  it  acquired 
New  York-based  Giant  Com¬ 
pany  Software  Inc.  for  an 
undisclosed  amount  and  plans 
to  use  the  company’s  intellec¬ 
tual  property  and  technology- 


assets  to  provide  Windows 
users  with  new  tools  for  pro¬ 
tecting  their  systems  against 
spyware. 

A  beta  version  of  a  spyware 
protection  tool  based  on  Giant 
Company’s  technology  is  due 
to  be  released  in  fanuary  for 
Windows  2000  and  subse¬ 
quent  versions  of  the  operat¬ 
ing  system,  said  Amy  Carroll, 
director  of  Microsoft's  security 
business  and  technology  unit. 
She  said  the  tool  will  be  able 
to  scan  for,  delect  and  remove 


spyware  and  other  malware. 

Microsoft  officials  haven't 
decided  yet  whether  the  anti- 
spyware  tool  will  be  integrat¬ 
ed  into  future  Windows  re¬ 
leases  or  sold  as  a  stand-alone 
product.  Carroll  said.  “Our  im¬ 
mediate  job  right  now  is  to  get 
the  beta  out.”  she  added. 

The  acquisition  addresses 
growing  concerns  over  the  se¬ 
curity  threats  that  spyware 
poses  to  corporate  and  home 
users  alike,  said  Jon  Oltsik.  an 
analyst  at  Enterprise  Strategy 
Group  Inc.  in  Milford,  Mass. 
“Spyware  has  become  the  new 
scourge  on  PC  users."  Oltsik 
said. 

Vendors  such  as  McAfee 
Inc.,  Computer  Associates  In¬ 


ternational  Inc,  Webroot  Soft¬ 
ware  Inc.  and  TVend  Micro 
Inc.  have  begun  offering  anti¬ 
spyware  tools  designed  for 
corporate  users.  But.  Oltsik 
said.  “Microsoft  is  jumping 
into  a  new  market  where  they 
have  as  good  a  chance  as  any¬ 
one  else  to  make  an  impact." 

Microsoft's  purchase  of  Gi¬ 
ant  Company  is  its  second  sig¬ 
nificant  acquisition  in  the  IT 
security  market  In  June  2003. 
the  company  bought  Roman¬ 
ian  antivirus  software  develop¬ 
er  GeCAD  .Software  SRL  for  an 
undisclosed  price.  Microsoft  is 
expected  to  make  antivirus  ca¬ 
pabilities  available  in  future 
vers'mns  of  Windows  as  a  re¬ 
sult  of  that  purchase.  O  Sffi21 


w  computerworldcom 


NEWS 


CWPfTmBI  I 


tn.m 


Users  Welcome  Consolidation 
Of  Major  Wireless  Carriers 


Hope  for  pricing, 
tech  benefits  (fom 
Sprint /Nextel  deal 


BV  MATT  HAMBLEN 

Last  week's  merger  deal  bc' 
tween  Sprint  Coip.  and  Ncxtel 
CommtmicaUons  Inc.  contin¬ 
ues  a  consolidation  trend 
among  wireless  carriers  that 
could  help  lower  prices  and 
bolster  the  development  of 
technology  for  corporate  ap¬ 
plications,  according  to  sever¬ 
al  IT  manners  and  analysts. 

The  planxted  creation  of 
Sprint  NexteL  as  the  com¬ 
bined  company  will  be  called, 
follows  the  October  acquisi¬ 
tion  of  AT&T  Wireless  Ser¬ 
vices  Inc.  by  Cingular  Wire¬ 
less  LLC  Sprint  and  Nextel 
said  they  plan  to  spin  on* 
Sprint’s  local  telephone  busi¬ 
ness  in  order  to  foctis  on  wire¬ 


less  and  integrated  communi¬ 
cations  services. 

)ohn  Bolz.  vice  president  of 
technology  architecture  at 
Wells  Fargo  Services  Co.  in 
Minneapolis,  said  the  IT  arm 
of  Wells  Fargo  &  Ca  aban¬ 
doned  its  initial  wireless  proj¬ 
ects  five  years  aga  “when  the 
technology  was  premature.” 
But  Bolz  predicted  that  Wells 
Fargo  will  take  a  renewed  in¬ 
terest  in  wireless  applications 
because  of  the  two  mergers. 

“These  industry  consolida¬ 
tions  definitely  renew  the 
potential  we  see  in  wireless," 
he  said.  “This  is  now  the  op¬ 
portunity  for  people  to  go 
ahead  and  make  wireless 
work  right." 

Bolz  said  Well  Fargo's  finan¬ 
cial  services  and  mortgage  di¬ 
visions  could  benefit  greatly 
from  wireless  infrastructures 
instead  of  fixed  networks, 


since  their  office  locations  of¬ 
ten  are  moved.  He  added  that 
he  also  would  like  to  explore 
the  use  of  secure  data 
services  on  phones 
that  combine  Wi-Fi 
wireless  and  WAN  cel¬ 
lular  connectivity. 

The  100  or  so  mort¬ 
gage  officers  at  Hawaii 
HomeLoans  Inc.  in 
Honolulu  have  been 
using  Sprint’s  wireless 
data  service  for  three 
years,  and  Hawaii 
HomeLoans  has  also 
relied  on  Sprint  for  in¬ 
tegration  help.  Leonard  Loven- 
thaL  the  mortgage  company’s 
executive  vice  president,  s^d 
that  he's  optimistic  about  the 
planned  merger.  “Sprint  is  very 
advanced  in  the  3G  [wireless] 
data  field,  and  that  is  where 
we’re  most  interested."  he 
said,  '^e're  also  hopeful  that 


no[>riu'  the 
Sfi'mt  N^itd 
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the  larger  company  can  brirtg 
better  pricing  to  the  table." 

Bob  Egan,  an  analyst  at  Mo¬ 
bile  Competency  Inc.  in  North 
ProvidcTKc.  RJ.,  said  he  thinks 
the  formation  of  Sprint  Nextel 
will  pu.sh  the  two  largest  wire¬ 
less  carriers,  Verizon  Commu¬ 
nications  Inc.  and  Cingular.  to 
make  "preemptive  strikes’’  on 
pricing.  Egan  predict¬ 
ed  that  the  cost  of 
wireless  data  services 
will  soon  “collapse"  to 
about  $35  for  each  gi¬ 
gabyte  of  data  trans¬ 
mitted.  down  from  the 
current  average  of  $63 
per  gigabyte  on  corpo¬ 
rate  contracts. 

Craig  Mathias,  an 
analyst  at  Farpoini 
Group  in  Ashland. 
Mass.,  said  be  doesn’t 
expect  the  mergers  to  lower 
prices  in  the  wireless  industry. 
But  neither  does  he  expect  an 
increase  in  prices,  despite  the 
reduced  number  of  competi¬ 
tors.  The  combined  companies 
will  be  able  to  take  advantage 
of  greater  operating  efficien¬ 
cies  because  they  will  need 


fewer  capital  assets  —  includ¬ 
ing  cell  towers  —  and  fewer 
employees.  Mathia.s  said. 

Sprint  and  Nextel  expect  to 
complete  the  acquisition  dur¬ 
ing  the  second  half  of  3005 
The  deal  is  being  billed  as  a 
merger  of  equals,  although 
Sprint  is  officially  buying  Nex- 
(cl  in  a  cosh  and  stock  transac¬ 
tion  valued  at  $35  billion. 

The  merger  will  bring  to¬ 
gether  Ncxtel’s  iDEN  wireless 
network.  Sprint's  CDMA  net¬ 
work  and  a  new  network 
based  on  CDMA  EV-DO  tech¬ 
nology  that  Sprint  plans  to  roll 
out  next  year.  Sprint  and  Nex- 
tcl  officials  said  they  plan  to 
migrate  some  of  Nextcl’s  ser¬ 
vices.  including  its  push-to- 
talk  phone  capabilities,  to  the 
EV-DO  network  "over  time." 

Other  migration  plans  will 
be  unveiled  when  the  merger 
is  finalized,  they  added. 
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IT  Calls  for  Enterprise 
Integration-BI  Link 


Users  want  access 
to  real-time  data 


BV  MEATMEN  MAVCMSTEJM 

Corporate  users  are  increas¬ 
ingly  pairing  enterprise  infor¬ 
mation  integration  (Eli)  tech¬ 
nology  with  business  intelli¬ 
gence  tools  to  bolster  their  ef¬ 
forts  to  use  real-time  transac¬ 
tion  data  to  make  day-to-day 
operating  decisions. 

BI  vendors  are  aligning  their 
products  with  those  of  EU 
vendors  to  meet  user  demand 
to  augment  historical  mforma- 
tion  in  a  data  warehouse.  The 
Eli  tools  can  be  used  to  feder¬ 
ate  data  by  providing  a  single 
point  of  access  across  dis¬ 
parate  systems. 

For  example.  Composite 
Software  Inc.  in  San  Mateo, 
Calif.,  this  week  will  unveil 
Version  3X)  of  its  Composite 


Information  Server,  adding  in¬ 
telligent  querying  techoolt^ 
for  formulating  an  optimum 
aggregation  plan  in  real  time. 
New  optimization  features  are 
designed  to  evaluate  data 
shapes  and  the  cost  of  running 
complex  queries  against  more 
data  sources  in  less  time,  said 
|im  Green,  chairman  and  CEO. 

Bl  vendor  Cognos  Corp.  this 
month  said  it  will  embed 
Composite’s  server  in  its  re¬ 
porting  tools.  Ottawa-based 
Cognos  also  said  this  month 
that  its  reporting  tools  will  in¬ 
teroperate  with  integration 
software  from  Ascential  Soft¬ 
ware  Corp. 

San  lose-based  Business  Ob¬ 
jects  SA  and  EU  vendor  At- 
runity  Inc.  in  Wakefield, 

Mass.,  this  month  signed  a 
joint  development  and  mar¬ 
keting  agreement  to  allow 
users  to  update  a  data  ware¬ 


house  or  data  mart  in  real 
time.  Business  Cfojects  has 
similar  alliances  with  Meta- 
Matrix  Inc.  and  IBM. 

BI  vendors  are  responding 
to  growii^  user  interest  in  EU 
tools,  particularly  to  access  a 
variety  of  data  stores,  said 
Colin  White,  president  of  BI 
Research  in  Ashland.  Ore. 

Motorola  Inc.  recently  final¬ 
ized  plans  to  standardize  on 
technology  from  Boston-based 

n  Most  large 
companies 
have  a  bucket  of 
legacy  spaghetti, 
[and]  the  promise 
ofBlisdNuted 
because  of  the 
difficulty  of  getting 
tothespagh^. 

TOBY  REOSHAW.  CORPORATE 
VICE  PRESIDCRT  Of  IT  STRATEGY 
MOTOROLA  INC 


MetaMatrix  to  build  an  EU 
layer  into  its  enterprise  archi¬ 
tecture.  said  Toby  Redsbaw, 
corporate  vice  president  of  IT 
strategy  at  Motorola. 

“Most  large  companies  have 
a  bucket  of  legacy  spaghetti, 
[and]  the  promise  of  BI  Is  di¬ 
luted  because  of  the  difficulty 
of  getting  to  the  spa^nl"  he 
said.  “Without  a  tool  that  lets 
you  quickly  intem^te  these 
things,  normalize  data  and  ex¬ 
press  it  a  layer  above  the 
spaghetti,  you’re  doing  a  lot  of 
heavy  lifting." 

Beachwood,  Ohio-based 
Penske  Logistics  LLC  uses 
technology  from  Attunit)'  and 
Business  Objects  to  offer  its 
customers  more  real-time  in¬ 
formation  on  delivery  or  pick¬ 
up  times,  said  Thomas  Nather. 
a  senior  systems  anal)'3t  at 
Penske. 

"It  opens  up  another  venue 
for  BL*  be  said.  To  keep  in¬ 
ventory  low.  you  have  to  know 
where  the  rolling  inventory  is." 

Owens  Coming,  a  Toledo, 
Ohio-based  manufacturer  of 
building  materials,  uses  inte¬ 


gration  technology  from  As- 
ceotial  combined  with  Kalido 
Lid's  Bl  software  to  generate 
daily  gross  margins  from  mul¬ 
tiple  ERP  systems,  said  Klaus 
Mikkclscn,  Owens  Coming's 
global  development  leader. 

Before  using  the  joint  solu¬ 
tion.  the  company  could  only 
access  margin  information 
monthly.  “Now.  we  have  the 
ability  to  generate  gross  mar¬ 
gin  infomutioo  every  day.  giv¬ 
ing  us  365  opportunities  for 
course  correction."  he  said 

NStar.  a  Boston-based  elec¬ 
tric  and  gas  utility,  uses  Ascen- 
tial's  (JualityStage  integration 
software  to  transform  real¬ 
time  customer  location  data 
into  reference  data  for  dis¬ 
patchers  analyzing  service 
outages. 

That  data  can  also  be  used 
in  combination  with  Bl  toob 
for  later  analysb  of  mainte¬ 
nance  work  and  improve¬ 
ments  that  are  needed  in  the 
utility’s  distribution  system, 
said  Mannie  Goldberg,  NStar's 
director  of  data  resource  man¬ 
agement.  051518 
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SCom  Acquires 
TippingPoint 

3Cofn  Corp.  Ust  WMk  bought 
fippingpDint  Technotogies  Inc..  I 

a  daveiopef  of  tadinology  for  pre-  ' 
venting  attacks  on  computer  net*  | 
works,  for  S430  milKon  in  cash.  | 

SCom  said  it  plans  to  add  Tipphtg-  I 
hint's  UnityOne  line  of  network-  ! 
based  mtruskm-prevention  sys¬ 
tem  hardware  and  software  to  i 

Ks  stable  of  enterprise  security  | 

products.  I 

IBM,  AMD  Develop 
Chip  Technology 

IBM  and  Advanced  Micro  Devices 
Inc.  last  week  unveiled  plans  to 
iointfy  develop  a  method  for  kn-  ' 

pleroenting  strained  silicon  tech-  ! 

oology  on  positive  and  negative 
transistors.  The  new  manufactur¬ 
ing  technique,  dubbed  dual-stress 
Sner.  is  designed  to  improve  the 
performance  of  processors  start- 
ing  early  nest  year.  The  technob- 
gy  wil  be  integrated  into  AAlO's 
Opteron  and  Athlon  64  proces¬ 
sors  and  IBM’s  Power  processors 
by  mid-200S.  | 


Microsoft  Ships 
PC  Search  Tool 

Microsoft  Corp.  (oined  the  desk¬ 
top  search  fray  last  weak  with  the 
beta-test  version  of  a  suite  de¬ 
signed  to  let  users  find  informa¬ 
tion  stored  in  PCs.  The  MSN  Tool¬ 
bar  Suite  also  indudes  tool  bars 
for  ssarching  hard  disk  drives. 

The  wite  can  index  and  ratrieve 
Microsoft  OuUook.  Word  and 
PowerPoint  files  as  wel  as  Adobe 
POFfles. 

Symantec  Invests 
In  Mazu  Networks 

Symantec  Corp.  was  among  the 
investors  in  a  S12  mWon  round 
of  financing  raM  by  Mazu  Net-  I 
works  Inc.,  a  makv  of  network 
intrusion-prevtntion  technology. 

The  investment  comes  a  week 
after  Symantec  bougM  Platform 
Logic  Inc.,  another  maker  of 
intrusion-detection  software. 
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Tool  Targets  Web 
App  Coders .. . 

. . .  who  are  juggling  non*  Java  components  in  the  pure  Java 
world  of  Eclipse,  the  popular  open-source  develop¬ 
ment  framework.  The  NitroX  2.0  plug-in  from  M7 
Corp.  in  Cupertino.  Calif.,  lets  Eclipse  users  manage 
lava  code  as  well  as  the  non-Java  components  that 


arc  common  in  Wcb-based 
programs,  such  as  HTML 
code.  Carlos  Chang,  a  senior 
product  manager  at  M7. 
claims  that  the  upgraded  ver¬ 
sion  of  NiiroX  is  better  for 
debugging  favaSener  Pages 
(fSP)  than  Eclipse  is  by  itself. 
"Eclipse  can’t  work  with  JSP 
pages  because  the5’’re  not 
pure  fax-a."  he  says.  Chang 
points  out  that  Web  applica¬ 
tions  are  much  more  comple.x 
than  pure  J2EE  programs,  and 
he  contends  that  managing 
dependencies  among  ISPs, 
configuration  files.  HTML 
code  and  many  more  Web- 
specific  elements  is  a  burden 
for  software  developers.  Ni¬ 
troX  2.0  can  scan  ail  of  a  Web 
application's  code,  then  map 
the  dependencies  of  each 
component  and  point  a  devel¬ 


oper  to  the  exact  lines  of  code 
that  create  the  dependencies. 
In  addition,  the  tool’s  W'YSl- 
WYG  editor  supports  multi¬ 
ple  languages;  for  example, 
you  can  see  how  localizing 
Web  pages  can  afTect  their 
layout.  Chang  notes  that  con¬ 
verting  text  originally  written 
in  English  to  German  can 
lengthen  a  page  by  20%.  The 
upgraded  NiiroX  softw'are 
starts  at  S299  and  is  due  to 
ship  next  week. 

Tiltable  LCD  monitor 
flips  image. . . 

. . .  when  H’s  turned  over. 

TTiat's  the  clever  bit  of  tech¬ 
nology  in  a  pair  of  17-  and 
19-in.  LCD  panels  that  LG 
Electronics  U.S.A.  Inc.  will 
introduce  next  month  at  the 
Consumer  Electronics  Show 


HOT  TECHNOLOGY  TRENDS,  NEW  PRODUCT 
NEWS  AND  INDUSTRY  GOSSiPBV  MARK  HAL' 


in  Las  Vegas.  The  displays  are 
attached  to  a  pedestal  that  al¬ 
lows  them  to  be  flipped  over 
to  face  in  the  opposite  direc¬ 
tion.  According  to  Chris  Neff, 
director  of  marketing  at  the 
Englewood  Cliffs.  N.).-based 
division  of  LG  Electronics 
Inc.,  a  user  can  open  a  spread¬ 
sheet  or  a  Word  document  on 
his  PC  and  then  flip  the  moni 
tor  to  show  the  information 
to  someone  sitting  on  the 
other  side  of  a  conference- 
room  table.  The  image  on 
the  screen  will  automatically 
right  itself  so  it  can  be  viewed 
properly.  Neff  says.  However, 
LG  doesn’t  expect  the  flip¬ 
ping  capabiiit>'  to  be  the  main 
attraction  for  users.  "It’s  the 
razor  sharpness  of  the  display 
that  wins  folks  over."  Neff 
says.  LG’s  proprietar>’  graph¬ 
ics  chip  automatically  adjusts 
color  depth,  reducing  pixel 
image-adjust¬ 
ment  response 
time  to  a  speedy 
12  milliseconds. 

Pricing  will  start 
at  under  S450. 
which  is  pricier 
than  CRTs  are. 
to  be  sure.  But, 

Neff  points  out. 

"this  is  what  you 
stare  at  all  day. 

It  should  be  the 

most  important  technolog)’ 

you  get.” 

On  the  other  hand.  John 
Torrey  aigues  that  you  need 
to  treat  your  eyes  better  than 
merely  giving  them  a  good 
display.  Torrey.  CEO  of  Prio 
Corp.  in  Beaverton,  Ore.,  says 
users  should  test  how  their 
eyes  work  with  specific  com¬ 
puter  monitors  to  avoid  pro- 
ductivity-drainii^  eyestrain. 
He  wonders  why  so  many 
companies  send  in  ergonomic 
experts  to  adjust  employees' 
workstation  areas  but  seldom 
test  how  a  person’s  eyes  per¬ 
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form  while  viewing  a  com¬ 
puter  display.  That’s  probably 
because  there  are  so  many 
eyes  to  evaluate.  The  Nation¬ 
al  Institute  for  Occupational 
Safety  and  Health  estimates 
that  100  million  pairs  of  them 
spend  at  least  four  hours  a 
day  in  front  of  monitors.  That 
results  in  some  problems. 

The  American  Optometric 
Association  says  as  many 
as  75%  of  end  users  suffer 

from  computer 
vision  syn¬ 
drome.  which 
can  include  clas¬ 
sic  eyestrain 
symptoms  like 
blurred  distance 
vision  and  burn¬ 
ing  eyes  as  well 
as  neck  and  back 
pain  from  ad¬ 
justing  your  sit¬ 
ting  position  to 
compensate  for  seeirtg  the 
screen  poorly.  Torrey  says  the 
biggest  problem  is  that  no 
matter  how  high  a  monitor's 
resolution  is.  it  doesn’t  deliv¬ 
er  the  edge  detection  neces¬ 
sary  for  the  human  eye  to  fo¬ 
cus  on  objects  within  10  feet. 
That  means  the  eye  is  con¬ 
stantly  readjusting  itself  to 
see  the  edge  of  the  text  on  a 
computer  display,  he  says. 
Torrey  claims  that  his  com¬ 
pany's  Prio  Vision  Tester, 
available  at  many  eye  clinics 
and  optometrists'  offices,  can 
determine  how  your  vision 
can  be  corrected  for  com¬ 
puter  work.  You  should, 
urn.  look  into  it  for 
your  IT  staffers- 
051479 
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SCom  Acquires 
TippingPoiiit 

9Com  Carp.  iMt  twMk  bought 
TtppingPoM  Tichnotogies  bic., 
a  dovelapir  of  tocbnology  for  pro* 
vontifig  ittKfn  on  computer  not' 
loorta.  fbr  S430  mWon  in  caih. 
3Com  cted  R  ptem  to  odd  llpping- 
ndnft  IMtyOno  Bno  of  nohi^' 
bMod  intnaton  prowntionoiio- 
tem  hordworo  and  loftwaro  to 
tte  oteblo  of  onterpriao  oocurlty 


BM.  AMD  Develop 
Chip  Technology 

BM  Md  Wnncod  Mfero  Dovicos 
toe.  tool  amok  unvaiod  pfann  to 
totody  daaatop  •  madied  far  im- 
piomomBig  anoioo  Macon  ncn* 
notogy  on  poailtoa  and  nogadvo 
Danatotora.  Tha  noar  manutoctur- 
tog  tectodqua.  ditobod  duiHtroas 
biar,  to  doMgnod  to  toiprava  tha 
porformonca  of  prtiraaoBrt  rtait* 
tog  oarfy  noil  yoar.  TIn  todmoto- 
ar  adi  bo  tato^itod  Into  AMCTs 
Opteron  aid  Addon  64  priMoo' 
lori  and  BbTo  Ftoatar  procosaora 
byndd'200S. 


MicFOsoft  Ships 
rcSearchtool 

Mtoroaofl  Cerp.  fotood  Iho  doak- 
top  aaordi  frig  toot  apoofc  with  tho 
lata  toalaaratonofaauitodr 
dpad  to  tot  oaara  And  infonna' 
ttoaatoradtoPC8.TlioMSNToof- 
ba  Suite  atoo  toebdaa  tool  ban 
for  aaanshing  hard  dtok  drivaa. 
Tho  adto  can  todoE  and  roirteva 
Mteroaefl  Ootfooh.  IHtord  and 
Raaparfttol  fitoa  aa  andi  aa  Adobo 
PDF  Mas. 


Symantec  Invests 
In  Mazu  Netwoffcs 

Symantoc  Carp,  aow  among  llio 
toaaatora  to  a  S12  odMon  round 
of  daonctog  ratoad  by  Mazu  Na^ 
tooffte  toe.,  a  oalMr  of  naboorit 


Tbo  toaaatownt  comaa  a  amah 
after  Sipaantoc  bouglil  Plattorm 
logic  toe.,  onothor  mahar  of 


CMTKMAHI 


Tool  Targets  Web 
App  Coders .. . 

...  wtw  are  fuggfing  non>Jatn  consonants  in  the  pure  Java 
world  of  EcBpae,  the  popular  open-source  develop¬ 
ment  framework.  The  NitroX  2.0  plug-in  from  M7 
Corp.  in  Cupertino,  Calif,  lets  Eclipse  users  manage 
Java  code  as  well  as  the  non-Java  components  that 


are  common  in  Web-based 
programs,  such  as  HTML 
code.  Carlos  Chang,  a  senior 
product  manager  at  M7. 
claims  that  tbe  upgraded  ver¬ 
sion  of  NitroX  is  better  for 
debugging  lavaServer  Pages 
(]SP)  than  Eclipse  is  by  itself. 
‘‘Eclipse  can't  worit  with  JSP 
pages  because  they’re  not 
pure  Java,”  he  says.  Chang 
points  out  that  Web  applica¬ 
tions  are  much  more  complex 
than  pure  )2E£  programs,  and 
he  contends  that  managing 
dependencies  among  JSPs, 
configuration  files,  HTML 
code  and  many  more  Web- 
specific  elements  is  a  burden 
for  sofhvare  developers.  Ni¬ 
troX  2.0  can  scan  all  of  a  Web 
application’s  code,  then  map 
tbe  dependencies  of  each 
component  and  point  a  devel¬ 


oper  to  tbe  exact  lines  of  code 
that  create  the  dependencies. 
In  addition,  tbe  tool’s  WYSI¬ 
WYG  editor  supports  multi¬ 
ple  languages;  for  example, 
you  can  see  bow  localizing 
Web  pages  can  affect  their 
layout  Chang  notes  that  con¬ 
vening  text  originally  written 
in  English  to  German  can 
lei^tben  a  page  by  20%.  The 
upgraded  NitroX  software 
starts  at  S299  and  is  due  to 
ship  next  week. 

Tillable  LCD  monitor 
flips  image. . . 

. . .  when  R's  turnod  ovor. 

That’s  the  clever  bit  of  tech- 
nolt^  in  a  pair  of  17-  and 
19-in.  LCD  panels  that  LG 
Electronics  USA.  Inc.  will 
introduce  next  month  at  the 
Consumer  Electroiucs  Show 

LC's  tilting 
LCD  display 


HOT  TECHNOLOGY  TRENDS,  NEW  PRODUCT 
NEWS  AND  INDUSTRY  GOSSIP  BY  MARK  HALL 


in  Las  Vegas.  The  displays  are 
attached  to  a  pedestal  that  al¬ 
lows  them  to  be  flipped  over 
to  face  in  tbe  opposite  direc¬ 
tion.  According  to  Chris  Neff, 
director  of  mariteting  at  tbe 
Englewood  CUfEs,  N.J.-basei 
divisioQ  of  LG  Electronics 
Inc.,  a  user  can  open  a  spread¬ 
sheet  or  a  Word  document  on 
his  PC  and  then  flip  the  moni¬ 
tor  to  show  the  information 
to  someone  sitting  on  the 
other  side  of  a  conference- 
room  table.  The  image  on 
the  screen  will  automatically 
right  itself  so  it  can  be  viewed 
property,  Neff  says.  However. 
LG  doesn't  expect  tbe  flip¬ 
ping  capability  to  be  the  main 
attraction  for  users.  "It’s  the 
razor  sharpness  of  the  display 
that  wins  folks  over,”  Neff 
says.  LG’s  proprietary  graph¬ 
ics  chip  automatically  adjusts 
color  depth,  reducing  pixel 
image-adjust- 
ment  response 
time  to  a  speedy 
12  milliseconds. 

Pricing  will  start 
at  under  $450. 
which  is  pricier 
than  CRTs  are, 
to  be  sure.  But, 

Neff  points  out. 

’’this  is  what  you 
stare  at  ail  day. 

It  should  be  the 
most  important  technology 
you  get." 

On  the  other  band.  John 
Torrey  argues  that  you  need 
to  treat  your  eyes  better  rhan 
merely  giving  them  a  good 
di^lay.  Torrey,  CEO  of  Prio 
Corp.  in  Beaverton,  Ore.,  says 
users  should  test  bow  their 
eyes  work  with  specific  com¬ 
puter  monitors  to  avoid  pro¬ 
ductivity-draining  eyestrain. 
He  wonders  why  so  many 
companies  send  in  ergonomic 
e)q>erts  to  adjust  employees' 
workstation  areas  but  seldom 
test  how  a  person’s  eyes  per- 


Prio  Vision  Tester 
form  while  viewing  a  com¬ 
puter  display.  That’s  probably 
because  there  are  so  many 
eyes  to  evaluate.  The  Nation¬ 
al  Institute  for  Occupational 
Safety  and  Health  estimates 
that  100  million  pairs  of  them 
spend  at  least  four  hours  a 
day  in  front  of  monitors.  That 
results  in  some  problems. 

The  American  Optometric 
Association  says  as  many 
as  75%  of  end  users  suffer 
from  computer 
vision  syn¬ 
drome,  which 
can  include  clas¬ 
sic  eyestrain 
syn^itoms  tike 
blurred  distance 
virion  and  burn¬ 
ing  eyes  as  well 
as  neck  and  back 
pain  from  ad- 
jtisting  your  sit¬ 
ting  position  to 
compensate  for  seeing  the 
screen  poorly.  Torrey  says  tbe 
biggest  problem  is  that  t>o 
matter  how  high  a  monitor's 
resolution  is.  it  doesn't  deliv¬ 
er  the  edge  detection  neces¬ 
sary  for  the  human  eye  to  fo¬ 
cus  on  objects  within  10  feet. 
That  means  the  eye  is  con¬ 
stantly  readjusting  itself  to 
see  the  edge  of  the  text  on  a 
coiiq>uter  display,  be  says. 
Torrey  claims  that  his  com¬ 
pany’s  Prio  Vision  Tester, 
available  at  many  eye  clinics 
and  optometrists'  ounces,  can 
determine  how  your  vision 
can  be  corrected  for  com¬ 
puter  woik.  You  should, 
um.  look  into  it  for 
>ur  IT  staffers. 
051479 


New  Cisco  Appliance  Consolidates  Backup 


Can  move  local 
backup  function 
to  data  center 


8V  LUCAS  MEARIAN 

Cisco  Systems  Inc.  last  week 
unveiled  a  file-based  data- 
sharing  appliance  that  can 
consolidate  management  of 
distributed  file  and  print  ser¬ 
vices  within  branch  offices 
and  move  the  local  backup 
function  to  a  central  data 
center. 

The  Cisco  File  Engine  appli¬ 
ance  uses  the  company’s  so- 
called  wide-area  file-services 
teclmology  to  create  a  single 
global  name^ce  for  file  and 
print  services  over  a  WAN. 
The  technology  also  uses 
caching  algorithms  to  create 
LAN-Uke  performance  for 
data  retrieval 

IT  administrators  can  also 
use  the  lU  (L75-in.-higb)  File 


Engine  appliance  to  consoli¬ 
date  all  branch-office  data 
backup  into  central  file 
servers  in  the  main  data  cen¬ 
ters,  removij^  the  need  for  lo¬ 
cal  tape  backup  devices  and 
administration  at  each  remote 
location. 

Vanasse  Hangen  Brustlin 
Inc,  (VHB).  a  700-person  engi¬ 
neering  firm  in  Watertown.! 


tTCCaCOniEEMMEo 


Mass.,  purchased  three  FUe 
Engines  and  has  submitted  re¬ 
quests  for  15  more  in  order  to 
streamline  file  sharing  among 
engineers  in  more  than  a 
dozen  East  Coast  offices, 
said  Greg  Bosworth,  manager 
of  information  technologies 


at  the  company. 

Currently.  VHB  uses  Win¬ 
dow's  2000  file  servers  and 
local  folders  to  document 
changes  to  engineering  proj¬ 
ects.  The  changes  must  be 
kept  in  order  throughout  the 
life  of  a  project,  which  can  last 
years.  Archiving  changes  after 
the  completion  of  a  project  is 
a  time-consuming  operation. 


according  to  Bosworth. 

“Trying  to  have  pec^le  keep 
documents  in  sync  between 
offices  is  just  a  manual  proc¬ 
ess  right  now.**  he  said. 

Keeping  ownership  and  ac¬ 
cess  under  control  also 
been  a  challenge,  Bosworth 


said.  “The  files  are  lOMB  to 
15MB  or  larger,  and  woricing 
with  those  over  a  T1  line  is  not 
practical"  he  said. 

The  File  Engine  controls 
access  and  addresses  perfor¬ 
mance  problems  normally 
found  with  standard  file- 
access  protocols,  such  as 
Common  Internet  File  System 
for  Microsoft  Windows  envi¬ 
ronments  and  Network  File 
System  for  Unix  environ¬ 
ments.  over  the  WAN. 

I^er  Cerr.  a  senior  research 
analyst  at  Enterprise  Strategy 
Group  Inc.  in  Milford.  Mass., 
said  remote  file  and  print  data 
management  is  a  huge  con¬ 
cern  today,  because  up  to  70% 
of  a  company’s  data  resides  in 
distributed  offices. 

“As  data  protection  has  be¬ 
come  more  important  because 
of  compliance,  corporate  gov¬ 
ernance  and  security,  it’s  only 
natural  for  users  to  focus  on 


data  protection  mvestments 
where  they're  most  needed, 
and  they're  most  needed  out 
on  the  edge,”  Gerr  said. 

Cisco  is  competing  against 
stan-ups  such  as  Tacit  Net¬ 
works  Inc..  Riverbed  Technol¬ 
ogy*  Inc.,  Disksites  Inc.  and 
Expand  Networks  Inc.  in  the 
WAN  file-sharing  business. 
Some  of  those  companies  are 
optimizing  network  band¬ 
width,  while  Cisco  and  Tacit 
products  reduce  the  amount 
of  data  moving  through  that 
pipe  by  sharing  a  single  copy 
of  a  file  and  thus  eliminating 
duplication. 

The  File  Engines  are  priced 
at  $12,000  for  up  to  50  branch- 
ofTke  users  and  54,500  for  ad¬ 
ditional  50-uscr  license  packs. 
Tbe  product  is  now  shipping. 
0  5U94 
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More  on  dUa  certer  efiarts  to  oar  Onirai 
OMT  brancb-oHce  badsxB 


In  Downturn’s  Aftermath,  Cisco 
Sharpens  Its  Technology  Focus 


Executive  says  vendor  has  cut  costs, 
become  more  realistic  about  strengths 


8V  MATT  NAMBLEM 

Ml0¥Dlpi  ts  senior  vice  presi¬ 
dent  and  general  manager  of 
the  rouri/ig  technology  group  at 
Cisco  Systems  Inc.  Flowing 
Cisco's  annual  analyst 
con^rence  in  Son  Jose 
this  month,  Volpi  spoke 
with  Computerworld 
about  the  changes  the 
company  has  undergone 
since  the  bursting  of  the 
dot-com  bubble.  Ex¬ 
cerpts /bllow. 

How  many  oompanies  hM 
Cfece  acqirirMl  In  off?  About  lOa 
with  75  [of  them]  between 
1996  and  2000.  We  were  grow¬ 
ing  like  gangbusters.  When  I 
started  [in  1994],  Cisco  had 
about  1,600  people,  and  in 
2000,  we  had  55.000  employ¬ 
ees,  Our  revenues  had  gone  all 
Che  way  to  $23  billion.  Some 


growth  was  acquisitions,  and 
some  was  because  of  technol¬ 
ogy  developed  organically  in¬ 
side  o(  Cisco.  IT  was  just  ex¬ 
ploding. 

And  than  the  bubble  bunt 
In  2001,  things  went 
south  for  tbe  entire  in¬ 
dustry.  Money  disap¬ 
peared  tbe  bubble 
burst,  people  stopped 
spending,  service  pro¬ 
viders  went  away.  Our 
record  quarter  was 
SJ2  billion,  and  that 
dropped  to  S4  billion-plus. 

We  had  layoff  really  tough 
—  almost  9.000  at  once. 

So  what  happanad  next?  For  a 
while,  we  were  searching  for 
bottom  because  there  was  this 
feeling  of  “How  far  will  we 
actually  f^?“  I  felt  we  had 


gotten  to  the  bottom  by  the 
summer  of  ^X)l  Then  it  be¬ 
came  [an  issue  of]  transform¬ 
ing  the  company,  because 
every  aspect  of  the  company 
had  been  geared  tovrards 
growth,  and  we  didn't  have 
any  great  cost  controls.  Every¬ 
thing  was  very  decencralized 
Along  with  the  layofl^  we  did 
a  restructuring  where  we  re¬ 
centralized  a  lot  of  functions. 
We  decided  to  cut  costs  in 
marketing  and  engineering, 
exited  several  business  areas 
and  shut  down  product  lines. 

What  ara  some  of  tha  tachnob- 
gias  Ciaeo  stoppad  offaring?  We 
exited  a  bunch  of  wireless  ar¬ 
eas.  also  DSL  [and]  long-haul 
optical  That  was  tough  be¬ 
cause  all  of  those  theoretically 
had  promise.  Looking  bade 
now.  it  might  seem  obvious 
why  we  exited  areas.  Why 
would  anybody  buy  any  more 
optica]  gear?  you  might  say. 

But  at  that  time,  in  2001.  we 


had  no  idea.  You  had  to  make 
these  decisions  amidst  a  lot  of 
uncertainty. 

There  was  a  question  in 
2001  of  whether  we  should 
even  stay  in  the  senice  pro¬ 
vider  business  at  all  To^, 
people  will  say.  •‘What,  are  you 
insane?”  But  back  then,  it  was 
a  valid  question.  At  the  peak, 
before  the  downturn,  close  to 
40%  of  our  revenue  was  from 
service  providers.  And  it  had 
dropped  down  to  15%. 

And  h’t  about  25%  of  your  rav* 
anuo  now?  Yes.  we’ve  been 
clawing  our  way  back  to  a 
good  position,  and  we  can 
do  more. 

I  Do  you  think  aervteoptovidare 
«di  ovar  beeoma  so  offoedva 
that  lhayl  ba  more  truatad  than 
Mwnal  IT  is?  If  you  talk  about 
smaller  businesses,  they  don't 
have  an  IT  guy  —  and  if  they 
do,  it's  probably  a  kid  out 
of  college.  In  those  circum¬ 
stances.  service  providers 
do  have  an  opportunity  to 
create  value.  Bui  big  busi¬ 
nesses  will  continue  to  do  IT 
on  their  own  and  simply  buy 
connectivity. 


What  was  the  proctas  that 
brought  Cisco  back,  horn  an  over- 
al  standpoinf?  There  were  a 
lot  of  changes  in  2001.  From 
there,  it  was  just  tighten  your 
belt  really  hard  and  wait  for 
the  maiket  —  weather  the 
storm  and  see  what’s  going 
to  happen.  That  was  through 
2003.  and  we  made  virtual!)’ 
no  acquisitions,  didn't  invest 
in  new  stuff  hardly  at  all 

In  2003.  we  saw  gradual  im¬ 
provements  in  tbe  U5.  econo- 
m>’.  and  consumer  confidence 
started  going  up.  and  so  we 
started  branching  out  a  little 
more  with  a  few  acquistrions 
here  and  there,  starting  new 
product  development,  hiring 
a  handful  of  people. 

We  have  a  better  realization 
of  what  we  can  and  cannot  do 
as  a  company.  Back  in  2000. 
we  all  fell  invincible.  Now.  wc 
have  the  attitude  that  we  know 
how  to  do  certain  things  well 
and  we  don't  do  these  other 
things  well,  so  let's  not  do 
those  things.  We  frcl  wc  still 
have  to  stay  tight  with  belts 
because  the  climate’s  not 
great,  but  we  feel  like  “not 
great”  can  continue  for  a  while 
and  we'U  be  OK.  O  5K02 


line,  every  day's  potential  can  be 


imageRUNNER  4570,  Canon  gves  you  another  innovative 

- 

solution  to  seamless^  integrate  the  paper  world  with  the  *  ■“ 


digital  world.  And  the  imageRUNtCR  4570  can  be  tailored 


to  meet  your  business  needs,  m  other  words,  yvhen  you 
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CSC  Selb  DynCorp 
Unit  for  $850M 

Computer  Sciences  Corp.  last 
week  agreed  to  sal  its  OynCorp 
kitematkmaJ  sarvicas  unit  to  The 
Veritas  Capital  Fund  LP.  a  private 
equity  firm,  for  S850  mMion.  CSC 
bought  the  busirtess  two  years 
ago.  CSC  said  K  made  the  deal, 
which  is  aipected  to  dose  next 
spring,  so  H  can  focus  on  the  gov¬ 
ernment  TT  market. 


SAP  Offers  Remote 
Security  Evaluation 

SAP  Ae  ii  offerkig  Rs  customers 
a  new  security  service.  As  part  of 
its  Security  Optimixation  Sorvice. 
SAP  perfomts  remote  evaluations 
of  customers'  systems,  searching 
for  vutnerabHrties  in  SAP  appRca- 
tions.  mMdtoware  and  krtomet 
gateways,  as  wed  as  Interfaces  to 
partners'  systems  and  user  autho¬ 
rizations.  Folowing  the  evalua¬ 
tion.  SAP  wil  suggest  fixes. 


Time  Warner,  U.S. 
Settle  AOL  Charges 

Time  Warner  Inc.  wil  pay  the  U.S. 
govemmenl  S210  mWon  to  settle 
charges  that  its  America  Onine 
Inc.  unit  fraudulently  MUted  rev¬ 
enue  figures,  court  documents 
showed.  Time  Vtamer  is  also  ex¬ 
pected  to  pay  about  S300  mMion 
to  saMo  dvl  charges  by  the  U.S. 
Securities  and  Exchange  Commis- 
Sion  related  to  its  buyout  of  an 
AOL  stake  held  by  Bartetemann 
AO.  a  source  said.  The  charges 
wM  be  dropped  in  24  mondts  H 
AOL  folows  the  terms  of  the  deal. 


Neon  Acquires 
Rival  CiiaitSoft 

Neon  Systems  bic.  last  week  ac¬ 
quired  CAeniSofI  he.,  a  maker  of 
mainframe  integration  tools,  for 
S10.S  mMion  in  cash  end  the  right 
to  aeqidra  Lt2S  mMion  shares  of 
Neoo  stock.  Neon  said  the  move 
hcraaaes  Ms  customer  base  by 
more  than  half,  to  almest  500 
sites,  and  adds  depth  and  main¬ 
frame  Wteb  asrvfeee  czpertiae  to 
Ite  sarvicas  operation. 


Longhorn  Will  Let  Users  Tune 
Windows  for  Different  Servers 


Microsoft  e.\ecuti\  e  sees  role-based 
configuration  as  ke\'  feature  of  new  OS 


BV  CAROL  SLtWA  k 

Microsoft  cori-. 

officials  last  year 
highlighted  three 
new  subsystems 
as  the  key  pillars  for  the  next 
major  release  of  Windows  — 
WinFS  for  data  storage.  Av'al- 
on  for  3-D  graphics  and 
Indigo  for  building  ad¬ 
vanced  Web  services. 

TTie  company  disclosed 
in  August  that  WinFS 
won’t  be  part  of  the 
next  release,  which  is 
code-named  Longhorn 
[QuickLink  49244],  But 
Bob  MugKa.  senior  vice 
president  of  Microsoft’s  Win¬ 
dows  Server  division,  told 
Compulerworld  during  an  in¬ 
terview  this  month  that  role- 
based  configuration  tools 
"were  always  the  most  impor¬ 
tant  feature  set  that  i  thought 
was  going  into"  the  server  ver- 
sionofLonghorn.  which  is 
due  in  2007.  Excerpts  from  the 
interview  follow. 

Hew  do  you  respond  to  people 
who  My  you've  gutted  the  heart 
and  soul  of  Longhorn  by  removing 
VfinR?  For  me,  the  heart  and 
soul  of  Longhorn  in  the  serv’er 
was  always  about  how  we  real¬ 
ly  refocus  on  role-based  con¬ 
figuration  and  provide  that 
level  of  flexibility  to  our  cus¬ 
tomers,  WinFS  will  be  a  great 
feature  in  the  operating  sys¬ 
tem  when  wc  deliver  it.  "niis  is 
a  new  thing  nobody’s  ever 
done  before,  and  when  you 
build  tcchnolog)'  like  that,  be¬ 
ing  certain  about  the  exact 
date  you  can  deliver  it  is  hard 
to  do.  So  I  feel  great  about 
WinFS.  (But]  I  feel  great  about 
Longhorn  without  WinFS. 

Whit  will  UMTS  ba  able  to  do  In 
Looghom  thit  they  can't  already 
do  In  Window*  Sorvor  2003  with 
rospoct  to  rolo-ttasod  configura¬ 
tion?  Let  me  give  you  an  exam¬ 


ple  An  enterprise  can  use  the 
role-based  configuration  tools 
to  build  [system]  images  that 
have  just  the  roles  on  it  that 
they  want,  and  then  they  can 
deploy  those  images  to  the  ap¬ 
propriate  servers.  That’s  a  key 
feature  that  our  (corporate 
customers]  have  been 
asking  for  being  able  to 
really  build  customized 
images  that  target  a  giv¬ 
en  server.  With  role- 
based  configuration, 
you  could  build  a  server 
that  was  ju.st  a  network¬ 
ing  server  that  only  had 
DHCP  and  DNS  on  it 
as  well  as  the  core  operating 
system.  And  you  can’t  do 
that  today. 

The  other  thing  we’re  doing 
is  all  sorts  of  enhancements 
around  the  roles  in  terms  of 
improving  task  management 
and  managing  overall,  which 
is  really  appropriate  to  ail  seg¬ 


ments  of  the  marketplace. 

So  a  customer  could  configure 
an  application  server,  a  rights 
management  server  or  an  Active 
Directory  federation  server? 
Right. 

Will  you  develop  different  ver¬ 
sions  of  Longhorn  geared  toward 
different  roles,  or  will  users  just 
gain  the  ability  to  customize  the 
software?  This  is  an  enterprise 
discussion,  just  to  be  clear. 
This  Ls  not  a  medium  business 
and  certainly  not  a  small  busi¬ 
ness  discussion.  But  in  the  en¬ 
terprise  space,  customers 
want  the  fle.xibility  to  buy  one 
version  of  the  operating  sys¬ 
tem  and  acquire  the  number 
of  licenses  they  need  for  it. 
And  then  they  want  the  flexi¬ 
bility  to  deploy  that  with  just 
the  services  on  it  that  they 
need,  and  they’ll  configure 
those  images.  And  those  large 
customers  are  very,  very  com¬ 
fortable  with  image-based  de¬ 
ployment. 

The  other  trend  to  note  is 


the  increase  of  blades.  Blades 
are  the  fastest-growing  seg¬ 
ment  of  the  server  market¬ 
place.  and  this  level  of  flexibil- 
iD’  around  role-based  configu¬ 
ration  is  quite  consistent  with 
that  trend. 

Will  ymi  still  offer  standard  and 
enterprise  edltiorts?  Yes.  We 
haven’t  finalized  our  packag¬ 
ing  yet.  but  we  still  will  have  a 
couple  of  editions,  and  you’ll 
be  able  to  do  some  new  roles. 
For  example,  you’ll  be  able  to 
build  a  clustered  image  on  an 
enterprise  (server]  that  you 
can’t  do  with  suiidard  [ones]. 

Beyond  WinFS.  have  any  other 
features  been  dropped  from 
Longhorn?  The  truth  of  the 
matter  is  that  I’m  sure  there’s 
lots  that  1  don't  know  of. 
There’s  so  much  funcijonaliD' 
that  we'll  be  coming  out  with. 
It's  a  little  early  for  us  to  talk 
about  all  the  specifics  that  are 
there  or  aren't  there.  We'll  fig¬ 
ure  out  some  of  these  spe¬ 
cifics  over  time.  O  515^ 


Mkaosoft  Pushes  Back  Longhorn  Server  Beta 


inNI>OiaunB*h>manx' 
kuB  to  gi(  Mr  hmk  on  tie 
inttMantaooflhelnnir 
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next  tear.  Bm  oow  tie  oomiiany 
B  sairing  M  tie  tMa  ooda  k 
due  in  tia  aacond  hat  of  2006. 

-VBM  good  atnd  dial 
dale,  and  Ml  drin  iorward  to 
tal  beta  proceas.' Bob  Mugla. 
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done  Sarw  iMskn.  sold  Ma 
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Mndmes  Server 2003  Sarvke 
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otSPHargmadapeidlcaNil 
aiBleim  haaad  on  InM  Coil's 
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loasoa  am  oBIcBiif  achodulad  to 
atari  to  the  hrst  hall  of  nad  year, 
bit  MuidB  siM  he  ergieiN  tie 
ivdatoa  to  be  ready  fay  March. 

Also  Ha  moth.  Mtoraaell  tat 
od  tto  Ural  beta  at  an  totadm 
WtodaM  Seiw  2003  release, 
axteiamnd  R2.  tial  bundee 
logelhar  vataiB  taabn  peebs  t 
bee  made  aaNble  fat  lie  ognt- 
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R2iBiliiatolbalialhB>iil 
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lease  B  atpaclad  to  Ihe  sacond 
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Muifb  said  noon  wi  all  be 
attstopucbaseeaBItogprod- 
uiN  such  as  tie  \Asial  Shalo 
2006  naitme  and  Sherento 
Seivtoas  aanmMaly  bom  R2 
‘30  to  ganoiM.  Of  goM  moving 
torwarf  to  to  tocomondn  tioae 
titoga  Into  Me  upiUe  lefsas- 
es.- be  said. 
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hit  ol  neat  yiar.  as  wil  as  tn 
lbMoMSaim20O3Corapiile 
CtatorEdMai  Hutto  aabL 

-CMSM 


WWW  computefwofid.com 


NEWS 


cwnrtmu 


13 


Banks  Moving  to  Change  Out  Core  Systems 


Web-enabled  apps 
supplant  aging 
Cobol  platforms 


BY  LUCAS  MEARiAN 

After  coddling  aging  core  sys¬ 
tems  for  decades,  many  top- 
tier  banks  are  planning  or  im¬ 
plementing  change-outs  of  old 
Cobol-based  platforms  with 
open.  Web-enabled  applica¬ 
tions.  The  core  systems  sup¬ 
port  the  most  basic  bank  func¬ 
tions.  such  as  savings  and 
checking  accounts  and  lend¬ 
ing  systems. 

The  upgrades  are  being  dri¬ 
ven  by  an  improving  economy, 
growing  regulatory  require¬ 
ments  and  recent  moves  to 
unbundle  packaged  applica¬ 
tions,  allowing  for  piecemeal, 
and  thus  cheai>er.  replacement 
of  older  platforms,  said  Gart¬ 
ner  Inc.  in  Stamford,  Conn. 

Updating  back-office  systems 
can  cut  banks'  IT  operating 
budgets  by  5%  to  8%  through 
improved  efficiency,  said  re¬ 
search  firm  Celent  Communi¬ 
cations  LLC  In  Boston. 

About  23%  of  all  U5.  banks 
are  planning  major  initiatives 
related  to  core  banking  sys¬ 
tems,  according  to  Gartner. 
LI.S.  banks  lag  ^hind  financial 
institutions  in  other  parts  of 
the  world  such  as  Europe, 
where  banks  are  pressed  to 
change  by  new  European 
Union  rules,  Gartner  said. 

Fifth  Third  Bancorp,  a  $6.4 
billion  bank  with  950  branches 
and  more  than  20,000  employ¬ 
ees,  replaced  its  mor^^e- 
origination  and  leasing  sys¬ 
tems  with  packaged  softw'are 
from  from  Fiserv  Inc.  in 
Brookfield.  Wis.,  over  the  past 
two  years.  Fifth  Third  used 
Fiserv’s  UniFi  Pro  Mortgage 
software  to  replace  a  green- 
screen  application  that  was  no 
longer  supported  because  the 
supplier  went  out  of  business. 

The  success  of  the  new  soft¬ 
ware  prompted  the  Cincin¬ 
nati-based  bank  to  took  close¬ 
ly  at  replacu^  more  core 
systems. 

Gary  Porter,  vice  president 
of  IT  mortgage  servicing  at 
Fifth  Third,  said  developers 


couldn't  keep  up  with  required 
product-development  cycles 
on  the  older  systems.  “Today, 
we  can  bring  a  new  product  to 
market  in  weeks.”  he  said. 
"With  our  old  legacy  system,  it 
would  take  months.” 

Fifth  Third  officials  also  cit¬ 
ed  increasing  regulatory  over¬ 
sight  of  the  financial  ser%ices 
industry  in  the  form  of  the 
Sarbanes-Oxley  Act  and  the 
USA  Patriot  Act  as  a  reason 
for  choosing  a  third-party 
provider. 

New  York-based  Citibank  is 
in  the  midst  of  a  project  to  mi¬ 
grate  its  core  mainframe- 
based  banking  application, 
called  Cosmos,  to  a  common 


system  built  with  hardware 
from  Hewlett-Packard  Co.  and 
running  the  packaged  Flex- 
cube  banking  application  from 
i-Fiex  Solutions  Ltd.  in  Banga¬ 
lore.  India. 

Citibank  officials,  who 
couldn't  be  reached  last  week, 
previously  told  Computer- 
world  that  the  project  was  un¬ 
dertaken  to  replace  a  dccadcs- 
old  set  of  back  office  systems 
in  overseas  offices  with  a 
single  platform  and  a  cross- 
border  set  of  standard  user 
interfaces  and  business 
processes  [QuickUnk  26921]. 

The  4-year-old  project,  esti¬ 
mated  by  Celent  to  have  cost 
about  SIOO  million  so  far,  is 


now  live  in  50  of  the  90  coun¬ 
tries  where  Citibank  has  of¬ 
fices.  Citibank  is  spending 
about  S35  million  per  year  on 
the  project.  Celent  .said. 

Developing  Partnerships 

Some  recent  partnerships 
have  led  to  changes  in  the  tra¬ 
ditional  onc-size-fits-all  ap¬ 
proach  for  banking  applica¬ 
tions  that  forced  large  banks 
to  spend  hundreds  of  millions 
of  dollars  or  more  to  upgrade 
back  offices  over  the  past  six 
to  eight  years. 

Several  major  service  pro¬ 
viders  and  makers  of  core 
banking  systems  have  joined 
to  create  bundled  software 
services  products  for  opera¬ 
tions  such  as  customer  ac¬ 
count  management,  lending 
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antivirus,  firewall  and  intru¬ 
sion-detection  offerings  with 
Veritas'  data  backup  and 
archiving  tools,  as  well  as  soft¬ 
ware  for  managing  servers  and 
application  performance. 

With  the  acquisition,  “it's 
time  to  stop  thinking  of 
Symantec  as  a  security  vendor 
and  (view  it]  more  as  the  Wal- 
Mart  of  the  cyber  industry,” 
said  Dave  jordan,  chief  infor¬ 
mation  security  officer  for  the 
Arlington  County  government 
in  Vtr^nia.  “They’re  flush 
with  cash,  they  h^e  top-of- 
the-line  products,  and  they  are 
at  the  top  of  their  game." 

The  county  currently  uses 
storage  hardw'are  and  software 
from  EMC  Corp.  But  Jordan 
said  the  addition  of  Veritas 
may  enable  Symantec  to  bun¬ 
dle  storage  software  with  its 
security  tools  at  a  more  com¬ 
petitive  price  than  what  EMC 
charges. 

However,  Symantec’s  chal¬ 
lenge  will  be  to  find  a  way  to 
bring  together  all  of  its  prod¬ 
ucts  under  a  common  manage¬ 
ment  interface  and  architec¬ 
ture.  said  Lloyd  Hession.  chief 
secxirity  officer  at  Radianz,  a 
New  York-based  company  that 
provides  network  services  to 
financial  services  firms. 

“Symantec  hasn't  effectively 


integrated  the  portfolio  of  se¬ 
curity  products  it  alread>’  has." 
Hession  said.  “Adding  the  Ver¬ 
itas  products  won't  address 
this  problem  and  arguably  will 
make  it  worse.” 

Dong  Jin  Kim.  a  senior  Unix 
sj-stems  administrator  at  East¬ 
man  Kodak  Co.  in  Rochester. 
N.Y..  uses  Veritas'  NetBackup 
software.  Kim  said  that  al¬ 
though  he  thinks  Symantec  is 
a  good  software  vendor,  he 
isn’t  convinced  that  it  knows  a 
lot  about  storage. 

“Whether  they  can  handle 
Veritas  well  is  what  concerns 
me,”  Kim  said,  adding  that  he 
would  be  more  comfortable  if 
Veritas  was  being  bought  by  a 
storage  hardware  vendor. 

Symantec  CEO  John  Thomp¬ 
son  said  during  a  teleconfer¬ 
ence  on  Thurs^y  that  the  Cu¬ 
pertino.  Calif.-based  company 
plans  to  release  a  produa  in¬ 
tegration  road  map  after  the 
deal  is  completed  in  next 
year’s  second  quarter.  "Wc 
have  an  enormous  opportuni¬ 
ty  to  leverage  each  other’s 
technolc^  strengths,”  he  said. 
“There’s  no  overlap  in  strate¬ 
gic  product  lines  or  R&D." 

*Mixed'  Merger  Record 

But  Gartner  Inc.  analyst  John 
Pescatore  said  Symantec  has 
“a  very  mixed  record"  on  inte¬ 
grating  previous  acquisitions 
Into  a  cohesive  product  tine. 

For  instance,  its  purchases 


of  Axent  Technologies  Inc.  in 
2000  and  RipTech  Inc.  two 
years  ago  haven’t  panned  out. 
according  to  Pescatore.  “If  I 
was  a  Symantec  customer.  I 
would  be  lookiiq;  at  those  ac¬ 
quisitions,”  he  said. 

Steve  Hunt,  an  analyst  at 
Forrester  Research  Inc.,  said 
the  move  to  acquire  Mountain 
View.  Calif. -ba-wj  Veritas  is 
consistent  with  Symantec’s 
new  information  integrity 
strategy,  which  focuses  on 


or  billing.  For  example,  IBM 
last  month  brought  out  a  I2EE 
version  of  Flexcubc 

That  IBM  i-Flcx  panner- 
ship  caught  the  intore.st  of  Ken 
Casey,  .senior  vice  president  of 
retail  hanking  deliveiy  at  ATB 
Fin.incial.  an  Edmonton.  Al¬ 
berta-based  bank.  Casey  has 
started  to  look  .it  options  for 
replacing  a  25-year-old  IBM 
mainframe-based  core  bank¬ 
ing  system 

.4TB.  which  manages  over 
S14  billion  in  assets,  has  al¬ 
ready  taken  on  a  517  million 
p.*w  rite  of  its  teller  system, 
w'hich  included  replacing  LtKH) 
terminals  with  PCs.  The  Java' 
based  systems  are  gradually 
replacing  Cobol  systems,  said 
Casey.  ATB.  a  midsize  bank, 
has  4,500  employees.  O  SIStS 


software  that  can  give  IT  m.in- 
agers  a  more  holistic  view  of 
the  operational  and  security 
risks  that  their  systems  face 
(QuickLitik  50416}.  “Symantec 
is  reinventing  itself  as  an  en¬ 
terprise  risk  management 
company.”  Hunt  said. 

The  company  needs  to  grow 
in  other  areas  because  of  in¬ 
creased  competition  in  the  IT 
security  market,  said  Pete 
Lindstrom,  an  analyst  at  Spire 
Security  U.C  in  Malvern.  Pa. 

For  instance.  .Microsoft  is 
working  to  integrate  antivirus 
funaionaliry  into  Windows. 
And  just  last  week,  it  an¬ 
nounced  the  acquisition  of  Gi¬ 
ant  Company  Software  Inc.,  a 
vendor  of  antispywarc  tools 
(sec  story,  page  6). 

In  addition,  Cisco  and  other 
networking  vendors  are  build¬ 
ing  expanded  security  func¬ 
tions  into  their  routers  and 
switches,  which  are  expeacd  to 
further  dilute  the  demand  for 
stand-alone  security  software. 

The  merger  of  Symantec 
and  Veritas  is  “an  acknowledg¬ 
ment  that  there's  just  too 
much  ambiguity  in  the  securi¬ 
ty  space  to  grow  a  huge  com¬ 
pany.”  Lindstrom  said.  “You 
need  something  a  tinie  more 
solid  and  foundational.  Back¬ 
up  software  is  recession- 
proof.”  O  S1S24 


Reporter  Lucas  Mearian 
comribufed  to  this  story. 
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Banks  Moving  to  Change  Out  Core  Systems 


W'cb-cnabicd  apps 
supplant  aging 
CAtbol  platfomis 

BV  LUCAS  M€ARfAN 

After  coddling'  apinp  core  sys¬ 
tems  for  decades,  many  t«ip- 
tier  banks  are  planning  or  im¬ 
plementing  ehangc-outs  of  old 
Cobol-based  platforms  with 
open,  Web-enabled  applica¬ 
tions.  The  core  systems  sup¬ 
port  the  most  basic  bank  func¬ 
tions.  such  as  savings  and 
checking  accounts  and  lend¬ 
ing  systems. 

The  upgrades  are  being  dri¬ 
ven  by  an  improving  economy, 
growing  regulatory  require¬ 
ments  and  recent  moves  to 
unbundle  packaged  applica¬ 
tions.  allowing  for  piecemeal, 
and  thus  cheaper,  replacement 
of  older  platforms,  said  Gart¬ 
ner  Inc.  in  Stamford,  Conn. 

Updating  back-office  systems 
can  cut  banks’  IT  operating 
budgets  by  5%  to  8%-  through 
improved  efficiency,  said  re¬ 
search  firm  Ccicnt  Communi¬ 
cations  LLC  in  Boston. 

About  23%  of  all  U.S.  banks 
arc  planning  major  initiatives 
related  to  core  banking  sys¬ 
tems.  according  to  Gartner. 

U.S.  banks  lag  behind  financial 
institutions  in  other  parts  of 
the  world  such  as  Europe, 
where  banks  arc  pressed  to 
change  by  new  European 
Union  rules.  Gartner  said. 

Fifth  Third  Bancorp,  a  SO.4 
billion  bank  with  950  branches 
and  more  than  20.000  employ¬ 
ees.  replaced  its  mortgage- 
origination  and  leasing  sys¬ 
tems  with  packaged  software 
from  from  Fiscrv  Inc.  in 
Brookfield.  Wis.,  over  the  past 
two  years.  Fifth  Third  used 
Fiscr\'’s  UniFi'Pro  Mortgage 
software  to  replace  a  grccn- 
screcn  application  that  w'as  no 
longer  supported  bccau.se  the 
supplier  went  out  of  business. 

The  success  of  the  new  soft¬ 
ware  pn^mpted  the  Cincin¬ 
nati-based  bank  to  look  close¬ 
ly  at  replacing  more  core 
systems. 

Gary  Porter,  vice  president 
of  IT  mortgage  servicing  at 
Fifth  Third,  said  developers 


couldn't  keep  up  with  required 
product-development  cycles 
[  im  the  older  systems. '  Today.  , 
we  can  bring  a  new  product  to 
market  in  weeks."  he  said- 
■'With  our  old  legacy  system,  it 
would  take  months.” 

Fifth  Tliird  otficials  also  cit¬ 
ed  increasing  regulatory  over-  ' 
sight  of  the  financial  services  ' 
industry  in  the  form  of  the  ' 
Sarbanos-Oxley  Act  and  the 
USA  Patriot  Act  as  a  reason 
for  ch<M>sing  a  third-party 
provider. 

New  York-based  Citibank  is  ' 
in  the  midst  of  a  project  to  mi-  ! 
grate  its  core  mainframe- 
based  banking  application, 
called  Cosmos,  to  a  common 
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antivirus,  firewall  and  intru¬ 
sion-detection  offerings  with 
Veritas'  data  backup  and 
archiving  tools,  as  well  as  soft¬ 
ware  for  managing  servers  and 
application  pcrformance. 

Wiih  the  acquisition,  “it's 
time  to  Slop  thinking  of 
Symantec  as  a  security  vendor 
and  (view  it]  more  as  the  Wal- 
Mart  of  the  cyber  industry." 
said  Dave  Jordan,  chief  infor¬ 
mation  security  officer  for  the 
Arlington  County  government 
in  Vii^inia.  "They're  flush 
with  cash,  they  have  top-of- 
thc-line  products,  and  they  are 
I  at  the  top  of  their  game." 
j  The  county  currently  uses 
I  storage  hardware  and  software 
from  EMC  Corp.  But  Jordan 
said  the  addition  of  Veritas 
may  enable  Symantec  to  bun¬ 
dle  storage  software  with  its 
I  security  tools  at  a  more  com¬ 
petitive  price  than  what  EMC 
charges. 

However.  Symantec's  chal¬ 
lenge  will  be  to  find  a  way  to 
bring  together  all  of  its  prod¬ 
ucts  under  a  common  manage¬ 
ment  interface  and  architec¬ 
ture.  said  I,k>yd  Hession.  chief 
security  officer  at  Radianz.  a 
New  York-based  company  that 
provides  network  services  to 
financial  services  firms. 

"Symantec  hasn't  effectively 


system  built  with  hardw.iri' 
from  Hevvleil-Pack.ird  Co.  .inJ 
running  the  packaged  Flex 
cube  banking  applic.ition  foim 
i-Flex  Ss'liitions  l.ld.  in  Banga¬ 
lore.  India. 

Citibank  offieials.  u  ho 
couldn’t  be  reached  I.ist  w  eek, 
previoush  told  tairripufer- 
world  that  the  project  was  un¬ 
dertaken  lo  repkiee  a  decades- 
old  set  oi  back-office  systems 
in  overseas  offices  with  a 
single  platform  and  .i  cross- 
border  set  of  standard  user 
interfaces  and  business 
processes  (Quickl  ink  2(>^)21  j. 

The  4-year-old  protect,  esti¬ 
mated  by  Celeni  to  have  c»»st 
about  SlOll  million  so  far.  is 


integrated  the  portfolio  of  se¬ 
curity  products  it  alrc.ady  has." 
Hession  said.  "Adding  the  \Vr- 
itas  products  won’t  addre'ss 
this  problem  and  arguably  will 
make  it  worse.’* 

liong  Jin  Kim.  a  senior  Unix 
systems  administrator  at  East¬ 
man  Kihdak  Co.  in  Rwhesicr. 
N.Y..  uses  Veritas'  NetB.ickup 
I  software.  Kim  said  that  at- 
!  though  he  thinks  Symantec  is 
I  a  good  software  vendttr.  he 
I  isn't  convinced  that  it  knovv.s  a 
I  lot  about  storage. 
j  ’’Whether  they  can  handle 
I  V'crii.is  well  is  what  concerns 
j  me."  Kim  said,  adding  that  he 
I  would  he  more  comfortable  If 
I  Veritas  was  being  bought  by  a 
I  storage  hardwaa*  vendor. 
Symantec  CEO  John  Thump 
son  said  during  a  teleconfer¬ 
ence  on  Thursday  that  the  Cu¬ 
pertino.  Calif.-based  company 
plans  to  release  a  pruduc*t  in¬ 
tegration  road  nup  after  the 
deal  is  completed  in  next 
year's  second  quarter.  "Wo 
I  have  an  enormous  opponuni- 
I  ly  to  leverage  each  t>ther's 
I  technology  strengths."  be  said. 

I  "There’s  no  overlap  in  strate¬ 
gic  product  lines  or  RskD. ' 

'Mixed' Merger  Record 

I  Hut  Ganner  Inc.  analyst  John 
!  Pcscatore  said  Symantec  has 
“a  ver\'  mixed  record"  on  inte¬ 
grating  previous  acquisitions 
into  a  cohesive  pri>duci  line. 
For  instance,  its  purchases 


nin\  li\c  in  5o  uf  ihv  *A»ciHin- 
trics  where  i  itibank  h.js  uf 
fices.  t;iiib.jnk  is  spending 
.ibuuf  S.^5  million  jvr  \e.ir  on 
the  project.  i  Vleiu  said. 

Developing  Partnerships 

%'mc  recent  partnerships 
h.n  e  led  ehiinges  in  the  ir.i- 
ditii>n.il  one-si/e-his-.ilI  .ip 
proach  for  Kinking  applica 
rions  tlia:  forced  large  Kinks 
ii*  spend  hundreds  of  tntliions 
of  dollars  «*r  mt»re  to  upgride 
back  I'ffices  over  the  past  sj\ 
to  eight  years. 

Severn!  majtir  service  pri>- 
\  tJers  and  m.ikers  of  ci»re 
Ktnking  systems  have  joined 
msTcaie  bundled  viflw.ire 
services  products  for  opera¬ 
tions  such  as  customer  ac¬ 
count  management,  lending 


•  Symantec 
■  Vvolas 


•  John  Thomtrtoo  •. 


•  Co'v  Bloom 


*  Synianlec  etpccls 


•  Aborrf  75% 


of  Axent  Technologies  Ine.  in 
2000  and  RipTech  Ine.  two 
years  ago  haven't  panned  out. 
acixtrding  to  Pescatore.  "If  I 
wvis  .1  Symantec  customer.  I 
would  be  looking  at  Ihitse  ac- 
quisitkinK."  he  said. 

Steve  Hunt,  an  .in.ilyst  at 
Forrester  Rese.irch  Inc-  said 
the  move  to  acquire  Mountain 
View.  Galif.-based  Veritas  K 
coasistent  with  Symantec's 
new  information  integrity 
str3ic*g>’.  which  focuses  on 


<»r  billing  I  or  es.iinple,  IH\1 

l. isl  month  br»*ughi  mil  j  IJt  I 
versum  ul  I  IcxcuK 

Hull  IBM  I  i  lex  p.ii'tncT 
ship  caught  the  interest  Ken 
( M  nil  ir  \  U4-  president  o| 
retail  b.inkmg  deli\er\  .it  -MU 
I  m.incMi.  an  I  dmonion.  .\l 
Ivrt.i  Kise-d  Kmk  t  .,ist  \  li.is 

started  ti'  limk  .it  options  fur 
replj.  ing  a  2>  ve.Jr-o|d  IBM 

m. iinIr.iiiie-JMseJ  c»«re  hank¬ 
ing  s\  Mem. 

VI  B.  which  m.ni.iges  .wer 
SI4  billion  III  .issets.  h.is  ,il- 
read>  i.iken  on  .t  SI7  million 
rew  rile  ul  its  teller  s\stefn. 
which  included  rvpl-icmg  l.thHi 
terminals  with  pi  s  jhe|jv,i 
h.iseJ  systems  .ire  gradualh 
replacing  GoKil  systems,  said 
G.is*.-\  ATB.  J  midsi/e  Ktnk. 
has4.5(M>empKi\tVN  0  5)513 


sollw are  that  can  give  1 1  man 
:tgersa  more  hidistie  view  o| 
the  oper.nional  and  seeuriix 
risks  that  their  svxtenis  i’.iee 
iQuiekI.mk  5<>41ol.  "Sym.inlc\ 
is  reinventing  itself  as  .in  en 
lerpnw  risk  m.injgement 
company."  Hunt  s,iid. 

’Fhe  company  mvds  to  grow 
in  other  areas  because-  of  in- 
cn'ased  competition  in  the  IT 
security  market,  viid  Pete 
Lindsinim.  an  analyst  at  Spire 
Security  I.Lt:  in  Mahem.  ISi. 

For  invunee.  Micrirsoft  is 
Working  ti«  integrate  antb  irus 
fuiK-lionality  into  Windims. 
And  jn.si  bust  week,  it  an¬ 
nounced  the  acquisition  of  Gi¬ 
ant  Qrmpany  Software  Ine-  a 
vendor  ot  antispyware  imils 
tsee  story,  page  t>). 

In  addition.  Cisco  and  other 
networking  vendors  are  huiM- 
ing  expanded  security  func¬ 
tions  into  their  routers  and 
switches,  w  hich  are  expcxlcd  li» 
funher  dilute  the  demanij  for 
stand-alotK'  security  sttftware. 

The  merger  of  Symantec 
and  Veritas  is  "an  acknowledg- 
numt  that  there's  just  im> 
much  ambiguity  in  the  securi¬ 
ty  space  to  grow  a  huge  com- 
pam."  I  inJstn»m  said.  "You 
need  stimething  a  little  more 
solid  and  loundalionai.  Back 
up  sxiftware  is  recessnm- 
pnmf  “  O  51524 


Kifmrter  /.uco*  .Mearun 
I'unrributed  to  this  story*. 
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India  to  Build  Center 
For  Bio-IT  Industry 

BANGALORE.  INDIA 

I  Ki  .\i»N  succosstul  In  n  oul- 
*i«'urcin}:.  India  is  mm  targeting 
the  market  lor  bioinforniatics. 
u  hi/h  usts  iechnolog\-  to  discover  new 
drugs  and  analyre  genetic  markers. 

The  Indian  gvivornmeni  plans  to  set 
up  a  million  bk^-i  r  business  park 
that's  en\  iskmed  as  a  gloKtl  hub  lor 
c«»mpank‘s  in  the  Hie  st-iences  industry, 
according  to  Oayanidhi  Maran.  the 
countrs  's  minister  for  c«>mmunications 
and  information  lechnnlogs'. 

S^rme  Indian  software  and  services 
companies,  including  Bangalore-based 
Wipro  Ud..  have  diversified  into  ser- 
viees  that  are  related  to 
biiofT.  although  that  busi- 
Dt*ss  Still  constitutes  only 
a  small  percentage  of 
their  revenues.  India  ts 
also  home  to  bio-IT  com¬ 
panies  such  J.S  Strand  Ge¬ 
nomics  Ik't..  a  vendor  of 
stiftware  for  u.***  in  drug 
di5a)very  and  develop¬ 
ment  work. 

The  first  phase  of  BU>- 
IT  Park  is  scheduled  to  be 


completed  by  200t>.  and  the  second 
phase  will  follow  by  ’(MW.  Possible 
locations  for  the  100-aere  campus  in¬ 
clude  Bangiilore,  Hyderabad,  t'hennai. 
IVIhi.  Kolkatj  and  Punc. 

■  JOHNRIBEIRO  IDG  NEWSSERVICE 

IBM  Buys  Online 
Procurement  Market 

KM  la.si  week  s;)id  it  svil!  acquire 
Ke>  MHO,  a  company  based  outside 
I’aris  that  operates  an  e-procure¬ 
ment  marketplace.  The  de.il  is  aimed  at 
ho»>sling  IBM's  ability  l»»  provide  out¬ 
sourced  procurement  services  to  cus¬ 
tomers  in  Europe  and  North  America. 
Financial  terms  weren't  disclosed. 
KeyMKO.  which  has  a  LLS.  sub- 

ddiar>'  in  Florence.  Ky.. 

joint  venture  antong 
three  industrial  compa¬ 
nies  in  France:  Schneider 
Electric  SA.  Rhodia  and 
Tltomson.  IBM  said  it 
will  provide  priK'urement 
ser\-icc“s  to  the  founding 
companies  for  seven 
years  after  the  acquisition 
is  completed. 

The  purchase  of  Key- 
MRO  is  pan  of  IBM’s  ex- 


Average  annual  savings 
that  county  and  city 
governments  in  the 
U.K.  could  achieve 
by  imDlemenling 
e-government  initiatives. 


pansion  into  business  process  out- 
[  sourcing,  said  Hominique  Raviari. 

I  an  analyst  at  Ovum  Ltd.  in  London. 

KeyMRO  buys  nonmanufacturing 
I  goods  such  as  IT  hardware  and  r*fficc 
supplies,  as  well  as  travel,  maintenance 
and  professional  services. 

The  procurement  operation  will  be 
integrated  with  IBM's  Business  Om- 
suhing  Services  unit. 


New  Indian  Bank 
Taps  Wipro  for  All  IT 

il’Ko  INI  nru.ii  the  Wipro  unit 
that  provides  outsourcing  ser¬ 
vices  to  companies  based  in 
India,  last  week  announced  a  seven- 
year  contract  to  handle  all  IT  opera¬ 
tions  for  Yes  Bank  Ltd.,  a  new  private 
bank  in  Mumbai.  The  value  of  the  con¬ 
tract  wa.sn'l  disclosed. 

The  outsourcing  deal  covers  all  of 
the  bank's  hardware,  branch-ol'fice  sys¬ 
tems.  networks,  data  center  operations 
and  backup  procedures  with  ''.stringent 
service-level  guaranic*cs''  and  round- 
the-cliKk  technical  support.  Wipro 
said  in  a  statement. 

The  contract  is  based  on  a  pay- 
per-usc  model,  so  IT  capacity  and 
e.xpendilurcs  can  grow  on  a  pre¬ 
dictable  path  as  the  bank's  business 
grows,  acetirding  to  Wipro  ofTicials. 

0  51460 


Complied  by  Mitch  Betts. 


Briefly  Noted 

Mil  launch  a 
parliamentary  inquiry  next  year  into 
the  feasibility  of  electronic  voting 
and  electronic  voter  registration. 
The  Constitutional  Affairs  Commit¬ 
tee  in  the  House  of  Commons  is  re¬ 
questing  that  public  testimony  be 
submitted  by  Jan.  14. 

■  LAURA  ROHDE,  IDG  NEWS  SERVICE 


has  begun  construction  of 
a  research  and  development  cam¬ 
pus  for  450  software  developers  in 
Shanghai.  The  facility  will  help  the 
software  vendor  serve  one  of  its 
fastest-growing  nwkets.  SAP  said 
that  more  than  800  companies  and 
multinational  subsidiaries  in  China 
use  its  products. 

■  JOHN  BLAU.  IDG  NEWS  SERVICE 


and  Xerox  Corp.  last  week  jointly 
announced  a  S40  miNon  contract 
to  provide  managed  document  ser¬ 
vices  to  nearly  200  of  Barclays 
PIC's  offices  in  the  U.K.  The  60- 
month  contract  expands  on  a 
S350  million  IT  services  deal  that 
EDS  signed  with  London-based 
Bardays  in  June  2003. 


(Tonrtnui'd  from  pane  I 

NYSE _ 

will  ultimately  include  3.000 
handheld  devices  cu.siom-de-  i 
>igncd  b>-  IBM  and  linked  over  | 
a  win-lcss  network  to  Linux 
workstations  and  Ht’-L'X 
sen  ers  and  to  a  mainfnime- 
hased  back-end  system  run¬ 
ning  IBM's  WebSphere  mid¬ 
dleware.  i>H2  databases  and 
Tiv«>H  management  wftware. 

IBM  beat  out  bids  by  BKA 
Systems  Ine.  and  Mien)soft 
Clurp-  for  the  contract,  said 
Willy  Chiu,  vice  president  of 
IBM's  On-I>emand  Sedutions 
Lab.  Term-S  »»f  the  deal  weren't 
disclosed,  though  Chiu  said  it 
was  worth  many  millions  of 
dollars  and  can  be  counted 
amtmg  the  three  most  valuable 
IT  ctmtraets  ever  aw-ardeJ  h\' 
the  exchange.  Analysis  esti- 
rmiied  its  wx»nh  at  betwtvn 
SUM)  million  and  S2LH)  million. 


The  IBM  contract  repre¬ 
sents  the  first  time  the  NYSL 
has  used  a  third-pany  devel¬ 
oper  to  build  a  trading  system. 
Roger  Burlchardt,  the  NYSE's 
chief  technology  oflTtccr.  said 
he's  “very  happy  to  be  out  of 
the  business  of  writing  mid- 
dlcwaiv."  The  IBM  work  won't 
result  in  IT  layoffs,  he  said. 

Work  on  the  back-end  .sys¬ 
tem  has  been  completed,  and 
650  of  the  handheld  devices 
have  been  distributed  so  far. 
Chiu  said. 

Response  to  Pressure 

The  NYSE  has  been  under 
pressure  from  all-electronic 
c.vchanges  such  as  the  Nasdaq 
Stock  Market,  which  can  piT- 
form  trades  faster.  With  this 
move,  the  venerable  siiKk 
exchange  is  moving  to  be¬ 
come  a  hybrid  that  allows 
electronic  trading  and  tradi¬ 
tional  floor  trading  to  take 
place  side  by  side. 


‘'Part  of  the  role  of  technol- 
og>'  at  New  Yi*rk  Slock  t\- 
changc  is  to  handle  increasing 
volume  with  the  same  number 
of  people.“  Burkh.ardi  said.  He 
said  the  NYSE  and  IBM  put 
the  new-  system  through  the 
most  exhaustive  tests  ever  un¬ 
dertaken  at  the  exchange  for 
any  iechnolog>'.  spending 
more  than  a  year  testing  be¬ 
fore  going  live  last  month. 

The  NYSE's  TradeWorks 
order  management  system  re¬ 
places  the  Broker  B«)oih  Sup¬ 
port  System,  which  was  ba.sed 
on  C--  and  built  internally  to 
conrK’et  tliwr  traders  to  the 
brokerage  back  offiL-cs  that  ex¬ 
ecuted  the  irtides.  The  old  sys¬ 
tem  allowc*d  brokers  to  send 
«mly  one  message  at  a  lime 
and  didn't  allow  links  to  more 
than  «)ne  system.  TradeWorks 
can  send  three  messages  per 
seamd  to  telemarketers,  bro¬ 
ker-dealers  and  customers. 

The  older  handhelds  were 


consumer-grade  prt>ducts 
that  required  hourly  batter)- 
changes  and  weren’t  tightly 
integrated  with  the  back-office 
systems.  The  new  handhelds 
offer  more-powerful  batteries, 
larger  screens  and  40  times 
mon.'  throughput  than  the  ear¬ 
lier  devices.  Chiu  said. 


Under  the  new  system,  floor 


NFW  WIRELESS  handhelds  may 
put  an  er>d  to  shouts  of  "Buy''  and 
“Sell"  on  the  NYSE  trading  floor. 


traders  send  data  to  traders, 
brokers  and  clerks  using  floor- 
based  workstations  to  relay 
real-time  market  data  from 
the  exchange  floor  to  trading 
desks  upstairs.  Data  backup  is 
managed  by  IBM’s  Tivoli  soft¬ 
ware.  A  record  of  trades  and 
customer  information  is  cap¬ 
tured  in  a  DB2  database  on  an 
IBM  zScries  mainframe  on  the 
back  end,  Chiu  said. 

Analyst  Dave  Cearicy  at 
Stamford.  Conn. -based  Meta 
Group  Inc.  .said  the  project 
marks  a  turning  point  for  Java. 
The  interesting  pan  is  not 
simply  what  this  provides  to 
the  New  York  Stock  Exchange, 
but  what  this  means  for  the 
larger  position  in  the  market 
for  lava."  he  said.  “This  is  not 
simply  a  statement  of  the  seal- 
ability  of  IBM's  proprietary 
technologies.  It's  alstt  about 
showing  the  scalability  and 
reli.ibility  of  fava  envinm- 
ments."  O  51516 
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India  to  Build  Center 
For  Bio-fT  Indus^ 

BANOALORC.  INDIA 

Already  successful  in  IT  out¬ 
sourcing,  India  is  now  targeting 
the  market  for  bioinformatics. 
which  uses  technology  to  discover  new 
drugs  and  anal>’ze  genetic  markers. 
The  Indian  government  plans  to  set 
up  a  $22  million  bio-IT  business  park 
that's  envisioned  as  a  global  hub  for 
companies  in  the  life  sciences  industry, 
according  to  Dayanidhi  Maran,  the 
country's  minister  for  communications 
and  information  technology. 

Some  Indian  sofhvare  and  services 
companies,  including  Bangalore-based 
Wlpro  UtL.  have  diversified  into  ser¬ 
vices  that  are  related  to 
bio-IT.  although  that  busi¬ 
ness  still  constitutes  only 
a  small  percentage  of 
their  revenues.  India  is 
also  home  to  bio-IT  com¬ 
panies  such  as  Strand  Ge¬ 
nomics  Pvt.,  a  vendor  of 
software  for  use  in  drug 
discovery  and  develop¬ 
ment  work. 

The  first  phase  of  Bio- 
IT  Park  is  scheduled  to  be 
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completed  by  2006,  and  the  second 
phase  will  follow  by  2009.  Possible 
locations  for  the  100-acre  campus  in¬ 
clude  Bangalore,  Hyderabad.  Chennai. 
Delhi.  Kolkata  and  Pune. 

■  JOHN  RIBEIRO.  IDG  NEWS  SERVICE 

IBM  Buys  Online 
Procurement  Market 

IBM  last  week  said  it  will  acquire 
KeyMRO,  a  company  based  outside 
Paris  that  operates  an  c-procure- 
ment  marketplace.  The  deal  is  aimed  at 
boosting  IBM's  ability  to  provide  out¬ 
sourced  procurement  services  to  cus¬ 
tomers  in  Europe  and  North  America. 
Financial  terms  weren't  disclosed. 
KeyMRO.  which  has  a  U.S.  sub¬ 
sidiary  in  Florence,  Ky¬ 
is  a  joint  venture  among 
three  industrial  compa¬ 
nies  in  France:  Schneider 
Electric  SA.  Rhodia  and 
Thomson.  IBM  said  it 
will  provide  procurement 
services  to  the  founding 
companies  for  seven 
years  after  the  acquisition 
is  completed. 

The  purchase  of  Key¬ 
MRO  is  part  of  IBM's  ex¬ 


pansion  into  business  process  out¬ 
sourcing.  said  Dominique  Raviart, 
an  analyst  at  Ovum  Ltd.  in  London. 
KeyMRO  buys  nonmanufacturing 
goods  such  as  IT  hardwrare  and  office 
supplies,  as  well  as  travel,  maintenance 
and  professional  services. 

The  procurement  operation  will  be 
integrated  with  IBM’s  Business  Con¬ 
sulting  Services  unit. 

New  Indian  Bank 
Taps  Wipro  for  AIHT 

Wii'Ro  iNFOTECH.  tbc  Wipro  unit 
that  provides  outsourcing  ser¬ 
vices  to  companies  based  in 
India,  last  week  announced  a  seven- 
year  contract  to  handle  all  IT  opera¬ 
tions  for  Yes  Bank  Ltd.  a  new  private 
bank  in  Mumbai  The  value  of  the  con¬ 
tract  wasn't  disclosed 
The  outsourcif^  deal  covers  all  of 
the  bank's  hardware,  branch-office  sys¬ 
tems.  networks,  data  center  operations 
and  backup  procedures  with  “stringent 
service-level  guarantees"  and  round- 
the-clock  technical  support.  Wipro 
said  in  a  statemenL 
The  contract  is  based  on  a  pay- 
per-use  model,  so  IT  capacity  and 
expenditures  can  grow  on  a  pre¬ 
dictable  path  as  the  bank's  business 
grows,  according  to  Wipro  officials. 
OS1480 
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Briefly  Noted 

The  U.K.  govsrnniMrt  wM  launch  a 
paifROMnlafy  InqMinr  ant  yaar  into 
lha  fMafeMy  of  aladranie  votfng 
and  afadronie  volar  fogialrdion. 
ThoConaliMtanafAflairtCoininit- 
toaIntiMHoiiotofCommoDsiaro- 
quasttag  that  piMc  taalimony  bo 
aubndttodbyJM.H. 

■  LAURA  ROHDE,  IDG  NEWS  SERVICE 


SAP  AO  hat  bagun  coratnietton  of 
a  riooifch  and  dovalogniont  cam¬ 
pus  for  4S0  aofhnra  fMopori  in 
SliMgM.  TIm  fmftty  afilN#  tho 
ooftiMn  vondor  oorvo  ono  of  Ri 
tataot-veodm  marlalL  SAP  saM 
that  mart  Oian  800  cempaniaa  and 
muHaadioMd  aobdilwiao  in  CWna 
uaaKsproduela. 

■  JOHN  BLAU.  IDG  NEWS  SERVICE 

Elsctronie  Data  Systams  Corp. 
•d  Xam  Corp.  hMl  iMk  ioinlly 


vicao  la  naafty  200  of  Bardays 
PirsoliomlnlhelUCTliaaO' 
month  contract  tipanda  on  a 
S350  mSon  rr  mnfoao  dMi  that 
BIS  olgnodwith  London  harnd 
Bardaya  in  Juno  2003. 
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will  ultimately  include  3,000 
handheld  devices  custom-de¬ 
signed  by  IBM  and  linked  over 
a  wireless  network  to  Linux 
workstations  and  HP-UX 
servers  and  to  a  mainframe- 
based  back-end  system  run¬ 
ning  IBM’s  WebSphere  mid¬ 
dleware.  DB2  databases  and 
Ttvoli  management  software. 

IBM  beat  out  bids  by  BEA 
Systems  Inc.  and  Microsoft 
Corp.  for  the  contract,  said 
Willy  Chiu,  vice  president  of 
IBM's  On-Demand  Solutions 
Lab.  Terms  of  the  deal  weren’t 
disclosed,  though  Chiu  said  it 
was  worth  many  millions  of 
dollars  and  can  be  counted 
among  the  three  most  valuable 
IT  arontracts  ever  awarded  by 
the  exchange.  Analysts  esti¬ 
mated  its  worth  at  between 
S10O  millioo  and  S200  million. 


The  IBM  contract  repre¬ 
sents  the  first  time  the  NYSE 
has  used  a  third-party  devel¬ 
oper  to  build  a  trying  system. 
Roger  Burkbardt,  the  FT^E's 
chief  technology  oSicer,  said 
he’s  “very  happy  to  be  out  of 
the  business  of  writing  mid¬ 
dleware."  The  IBM  work  won’t 
result  in  IT  layoffs,  he  said. 

Work  on  the  back-end  sys¬ 
tem  has  been  completed,  and 
650  of  the  handheld  devices 
have  been  distributed  so  far. 
Chiu  said. 

Response  to  Pressure 

The  NYSE  has  been  under 
pressure  from  all-electronic 
exchanges  such  as  the  Nasdaq 
Stock  Market,  which  can  per¬ 
form  trades  faster.  With  this 
move,  the  venerable  slock 
exchange  is  moving  to  be¬ 
come  a  hybrid  that  allows 
electronic  trading  and  tradi¬ 
tional  floor  trading  to  take 
place  side  by  side. 


“Part  of  the  role  of  technol¬ 
ogy  at  New  York  Stock  Ex¬ 
change  IS  to  handle  increasing 
volume  with  the  same  number 
of  people,”  Burkhardt  said.  He 
said  the  NYSE  and  IBM  put 
the  new  system  through  the 
most  exhaustive  tests  ever  un¬ 
dertaken  at  the  exchange  for 
any  technology,  spending 
more  than  a  year  testing  be¬ 
fore  going  live  last  month. 

The  NYSE’s  TVadeWbrics 
order  management  system  re¬ 
places  the  Broker  Booth  Sup¬ 
port  System,  which  was  ba^ 
on  C**  and  built  internally  to 
connect  floor  traders  to  the 
broker^e  back  offices  that  ex¬ 
ecuted  the  trades.  The  old  sys¬ 
tem  allowed  brokers  to  send 
only  one  message  at  a  time 
and  didn’t  allow  links  to  more 
than  one  system.  TradeWorks 
can  send  three  messages  per 
second  to  telemarketers,  bro¬ 
ker-dealers  and  customers. 

The  older  handhelds  were 


consumer-grade  products 
that  required  hourly  battery 
changes  and  weren’t  tightly 
tniegraied  with  the  back-ofTtce 
systems.  The  new  handhelds 
offer  more-powerful  batteries, 
larger  screens  and  40  times 
more  throu^put  than  tbc  ear¬ 
lier  devices,  Chiu  said. 

Under  the  new  system,  floor 
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traders  send  data  to  traders, 
brokers  and  clerks  using  floor- 
based  workstations  to  relay 
real-time  market  data  from 
the  exchange  floor  to  trading 
desks  upstairs.  Data  backup  is 
managed  by  IBM's  Ttvoli  soft¬ 
ware.  A  record  of  trades  and 
customer  information  is  cap¬ 
tured  in  a  DB2  database  on  an 
IBM  zSeries  mainframe  on  the 
back  end,  Chiu  said. 

Analyst  Dave  Cearley  at 
Stamford,  Conn.-based  Meta 
Group  Inc.  said  the  project 
marks  a  turning  point  for  Java. 
The  interesting  part  is  not 
simply  what  this  provides  to 
the  New  York  Stock  Exchange, 
but  what  this  means  for  the 
larger  position  in  the  market 
for  Java."  he  said-  “This  is  not 
simply  a  statement  of  the  scal¬ 
ability  of  IBM’s  proprietary 
technologies.  It's  al^  about 
showing  the  scalability  and 
reliability  of  Java  environ¬ 
ments."  051516 
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Inconsiderate  Considerations 


I 


WAS  TALKING  the  Other  day  with  Damien 
Bean,  former  vice  president  of  corporate 
systems  at  Hilton  Hotels,  about  last  week’s 
S10.3  billion  Oracle/PeopleSoft  merger.  Bean, 
a  poster-child  PeopleSoft  user  while  at  Hilton, 


summed  up  his  thoughts 
on  the  deal  in  the  form  of 
an  analog)-:  “It’s  Sperr>' 
buying  Burroughs  all  over 
again,"  he  said.  “You’ve 
now  got  two  fundamen¬ 
tally  competing  ap¬ 
proaches  to  design  and 
architecture  and  ever>‘- 
thing  else.  Size  was  a  goal 
in  and  of  itself,  and  the 
amalgamation  of  product 
lines  w’as  a  sccondar)' 
consideration." 

I  love  the  analog)',  becau.se  I  think 
it’s  spot  on.  Except  in  this  case.  I 
doubt  seriously  that  integrating  the 
product  lines  ranks  as  high  as  No.  2 
on  the  considerations  list.  In  fact.  I’d 
venture  that  Oracle’s  top-five  list 
l<K)ks  something  like  this: 

Mo.1:  Boost  Larr)'  Ellison’s  ego. 

No.  2:  Boost  Larr)-  Ellison’s  stature. 

No.  3:  Boost  Larry  Ellison’s  bank 
account  (and  those  of  his  co-e.\ccs). 

No.  4:  Diminish  SAP’s  dominance 
in  the  business  applications  market. 

No.  5:  Further  marginalize  already 
marginal  Unix  databases.  (If  you're 
running  PeopleSoft  on  Sybase  or 
Informix,  don't  e.xpeci  your  People- 
Soft  reps  to  be  quite  as  chummy  as 
they  were  before.) 

Of  course,  what’s  important  isn’t 
what  it  means  for  EtUson.  but  what  it 
means  for  the  merged  companies' 
users.  The  best  thing  about  bst 
week's  deal,  from  a  user  perspective, 
is  that  at  least  some  of  the  uncertain¬ 
ty  is  over.  We  knew  when  PeopleSoft 
CEO  Craig  Conway  got  the  boot  in 
October  (QuickLink  49819]  that  the 
deal  was  going  to  happen  —  no  one 
could  possibly  haw  thought  that  the 
grandfatherly  Dave  Dulfield,  the 
company  co-foundcr  who  took  back 
the  CEO  title  after  having  held  it  for 
the  first  12  years  of  PeoplcSoft’s  his- 


tor)'.  was  equipped  to 
battle  Ellison.  Yet.  there 
was  still  no  telling  when 
it  would  happen  —  the 
acrimonious  merger 
"discussions"  could  easi¬ 
ly  have  dragged  on  inter¬ 
minably.  At  the  same 
time,  there’s  surely  just 
as  much  uncertainty  now 
as  there  was  before  about 
whether  Oracle  will  live 
up  to  its  promises  to 
properly  support  People- 
Soft  customers,  and  about  exactly 
how  the  tw'o  product  lines  will  be 
positioned  and  ultimately  integrated. 

Or  whether  they’ll  be  integrated, 
for  that  matter.  As  Bean  noted  dur¬ 
ing  our  discussion,  the  approaches 
that  Oracle  and  PeopleSoft  take  to 
systems  design  are  f^undamcntally 
different.  While  Oracle  builds  appli¬ 
cations  very  close  to  its  core  data¬ 
base  technolog)’  with  stored  proce¬ 
dures  and  triggers.  PeopleSoft  relies 
on  a  lot  more  code  to  enable  its  apps 


to  run  on  multiple  platforms.  Recon¬ 
ciling  that  in  the  near  term  would  be 
awfully  tough,  so  PeopleSoft  users 
will  have  to  hope  that  Oracle  is  seri¬ 
ous  about  supporting  their  apps  as  a 
separate  product  line. 

That’s  why  a  lot  of  smart  People- 
Soft  shops  have  already  upgraded  to 
(he  most  recent  version  of  the  appli¬ 
cation  suite.  They  have  the  luxury 
now  of  sitting  back  and  waiting  for 
the  dust  to  settle,  which  could  take  a 
while  because  the  du.st  storm  will 
probably  be  prett)-  intense.  For  one 
thing,  it’s  unlikely  that  an  efficiently 
functioning  joint  management  team 
—  a  prerequisite  for  any  real  hope  of 
successfully  intcgraiir^  the  compa¬ 
nies  —  is  going  to  be  formed  any¬ 
time  soon.  Users  can  expect  to  see 
an  exodus  of  PeopleSoft  execs  who 
have  made  no  secret  of  their  distaste 
f(jr  working  with  Conway  and  who 
will  find  that  Conu-ay  was  just  a  Lar¬ 
ry  Ellison  Mini  Me  when  it  comes  to 
obstinacy  and  egoism. 

Unfortunately,  users  don't  appear 
to  have  gotten  a  whole  lot  of  consid¬ 
eration  through  any  of  this.  And 
that's  a  considerable  concern  if  ever 
there  was  one.  C  51488 
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In-house  IT 
Still  Jacks  of 
All  Trades 

During  the  i960s  and 
70s,  vendors  such  as 
IBM,  Burroughs,  Sper¬ 
ry  and  NCR  were  largely  vertically  in¬ 
tegrated  companies.  They  built  hard¬ 
ware,  wrote  software,  and  sold  and  ser¬ 
viced  their  own  systems.  This  go-it- 
alone  model  enabled  the  IT  industry  to 
prosper  and  grow  into  a  giant  global 
business. 

But  during  the  1980s.  a  more  special¬ 
ized  approach  took  hold,  with  suppliers 
focusing  on  particular  layers  of  a  newly 
emerging  IT  indusir)’  value  chain  — 
Intel  in  microprocessors.  Compaq  in 
PCs.  Microsoft  in  software.  Cisco  in 
networking,  Seagate  in  storage.  This 
new,  horizontal  model  came  to  domi¬ 
nate  the  IT  business,  and  the  old,  verti¬ 
cally  integrated  s)’stcms  companie.s 
largely  faded  away. 

During  the  lOOOs, 
the  horizontal  model 
spread  to  the  tele¬ 
communications  seg¬ 
ment  of  the  IT  indus- 
tr)'.  Most  notably,  the 
massive,  vertically 
integrated  company 
that  was  once  AT&T 
began  to  break  apart, 
as  each  piece  of  the 
telecom  business  — 
equipment  and  local, 
long-distance  and 
wireless  services  — 
emerged  as  a  distinct 
entity,  and  once 
again  a  layered  value-chain  model  look 
hold.  Today's  AT&T  is  but  a  shadow  of 
its  ortcc  great  self,  and  eventually  it 
could  vanish  alic^ther. 

In  both  computers  and  telecommu¬ 
nications.  the  resulting  horizontal  in- 
dustr)'  structures  proved  to  be  both 
more  elficicnt  and  more  innovative,  as 
intense  competition  and  powerful 
scale  economics  generally  look  hold. 

It’s  highly  unlikely  that  the  marvels  of 
today's  PC.  Web  and  mobile  industrie.s 
would  ever  have  emerged  so  quickly  if 
the  older,  vertically  integrated  struc¬ 
tures  had  stayed  in  place. 

This  history  remains  relevant  be¬ 
cause  there's  one  big  part  of  the  IT  in¬ 
dustry  that  still  has  many  characteris¬ 
tics  of  the  vertically  integrated  era,  and 
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DON  TENNANT 


Inconsiderate  Considerations 


■  WAS  TALKING  the  Other  day  with  Damien 
Bean,  former  vice  president  of  corporate 
systems  at  Hilton  Hotels,  about  last  week’s 
$10.3  billion  Oracle/PeopleSoft  merger.  Bean, 

.  a  poster-child  PeopleSoft  user  while  at  Hilton, 


summed  up  his  thoughts 
on  the  deal  in  the  form  of 
an  analogy;  “It's  Sperry 
buying  Burroughs  all  over 
again."  be  said.  “You've 
now  got  two  fundamen¬ 
tally  competing  ap¬ 
proaches  to  design  and 
architecture  and  every¬ 
thing  else.  Size  was  a  goal 
in  and  of  itself  and  the 
amalgamation  of  product 
lines  was  a  secondary 
consideration." 

I  love  the  analogy,  because  I  think 
it's  spot  on.  Except  in  this  case,  I 
doubt  seriously  that  integrating  the 
product  lines  ranks  as  high  as  Na  2 
on  the  considerations  list  In  fact  Pd 
venture  that  Oracle’s  top-five  list 
looks  something  like  this: 

No.  1:  Boost  Larry  Ellison’s  ega 

Na  2:  Boost  Larry  Ellison’s  stature. 

Na  3:  Boost  Larry  Ellison’s  bank 
acctnmt  (and  those  of  his  co-execs). 

Na  4:  Oiminish  SAP’s  dominance 
in  the  business  applications  market. 

Na  &  Further  marginalize  already 
marginal  Unix  databases.  (If  you’re 
running  PeopleSoh  on  Sybase  or 
Informix,  don’t  expect  your  People- 
Soft  reps  to  be  quite  as  chummy  as 
they  were  before.) 

Of  course,  what's  important  isn't 
what  it  means  for  EUisoit,  but  what  it 
means  for  the  merged  companies’ 
users.  The  best  thing  about  last 
week's  deal,  from  a  user  perspective, 
is  that  at  least  some  of  the  uncertain¬ 
ty  6  over.  We  knew  when  PeopleSoft 
CEO  Craig  Conway  got  the  boot  in 
(^tober  49819]  that  the 

deal  was  goiitg  to  happen  —  no  one 
could  possibly  have  thought  that  the 
grandfatherly  Dave  Duflield.  the 
company  co-founder  who  took  back 
the  CEO  title  after  having  held  it  for 
the  first  12  years  of  PeopleSoft’s  his¬ 


tory.  was  equipped  to 
battle  Ellison.  Yet.  there 
was  still  no  telling  when 
it  would  happen  —  the 
acrimonious  merger 
“discussions"  could  easi¬ 
ly  have  dragged  on  inter¬ 
minably.  At  the  same 
time,  there's  surely  just 
as  much  uncertainty  now 
as  there  was  before  about 
whether  Oracle  will  live 
up  to  its  promises  to 
properly  support  People- 
Soft  customers,  and  about  exactly 
how  the  two  product  lines  will  be 
positioned  and  ultimately  integrated. 

Or  Mfhether  they'll  be  int^rated, 
for  that  matter.  As  Bean  noted  dur¬ 
ing  our  discussion,  the  approaches 
that  Oracle  and  PeopleSoft  take  to 
systems  design  are  fundamentally 
different.  While  Oracle  builds  appli¬ 
cations  very  close  to  its  core  data¬ 
base  technology  with  stored  proce¬ 
dures  and  triggers,  PeopleSoft  relies 
on  a  lot  more  code  to  enable  its  apps 


to  run  on  multiple  platforms.  Recon¬ 
ciling  that  in  the  near  term  would  be 
awfully  tough,  so  PeopleSoft  users 
will  have  to  hope  that  Oracle  is  seri¬ 
ous  about  supporting  their  apps  as  a 
separate  product  line. 

That’s  why  a  lot  of  smart  People- 
Soft  shops  have  already  upgraded  to 
the  most  recent  version  of  the  appli¬ 
cation  suite.  They  have  the  luxury 
now  of  sitting  back  and  waiting  for 
the  dust  to  settle,  which  could  take  a 
while  because  the  dust  storm  will 
probably  be  pretty  intense.  For  one 
thing,  it's  unlikely  that  an  efficiently 
functioning  joint  man^ment  team 
—  a  prerequisite  for  any  real  hope  of 
successfully  int^ating  the  compa¬ 
nies  —  is  ^ing  to  be  formed  any¬ 
time  soon.  Users  can  expect  to  see 
an  exodus  of  PeopleSoft  execs  who 
have  made  no  secret  of  their  distaste 
for  working  with  Conway  and  who 
will  fmd  that  Conway  was  just  a  Lar¬ 
ry  Ellison  Mini  Me  when  it  comes  to 
obstinacy  and  egoism. 

Unfortunately,  users  don’t  appear 
to  have  gotten  a  whole  lot  of  consid¬ 
eration  through  any  of  this.  And 
that’s  a  considerable  concern  if  ever 
there  was  one.  O  51488 
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In-house  IT 
Still  Jacks  of 
All  Trades 

During  the  i96os  and 
’70s,  vendors  such  as 
IBM,  Burroughs,  Sper- 
ry  and  NCR  were  largely  vertically  in¬ 
tegrated  companies.  They  built  be¬ 
ware.  wrote  software,  and  sold  and  ser¬ 
viced  their  own  systems.  This  go-it- 
alone  model  enabled  the  FT  industry  to 
prosper  and  grow  into  a  giant  global 
business. 

But  during  the  1980s,  a  more  special¬ 
ized  approach  took  hold,  with  suppliers 
focusing  on  particular  layers  of  a  newly 
emerging  IT  industry  value  chain 
Intel  in  microprocessors.  Compaq  in 
PCs,  Microsoft  in  software,  Cisco  in 
netwoiking.  Seagate  in  storage.  This 
new,  horizontal  model  came  to  doroi- 
nate  the  IT  business,  and  the  old.  verti¬ 
cally  integrated  systems  companies 
largely  faded  away. 

During  the  1990s. 
the  horizontal  model 
spread  to  the  tele¬ 
communications  seg¬ 
ment  of  the  IT  indus¬ 
try.  Most  notably,  the 
massive,  vertically 
integrated  company 
that  was  once  AT8^ 
began  to  break  apart, 
as  each  piece  of  the 
telecom  business  — 
equipment  and  local, 
long-distance  and 
wireless  services  — 
emerged  as  a  distinct 
entity,  and  once 
again  a  layered  value-chain  model  took 
hold.  Todiay’s  ATScT  is  but  a  shadow  of 
its  once  great  self,  and  eventually  it 
could  vanish  altogether. 

In  both  computers  and  telecommu¬ 
nications.  the  resulting  horizontal  in¬ 
dustry  structures  proved  to  be  both 
more  efficient  and  more  innovative,  as 
intense  competition  and  powerful 
scale  economies  generally  took  bold. 

It’s  highly  unlikely  that  the  marvels  of 
today’s  rc.  Web  and  mobile  industries 
would  ever  have  emerged  so  quickly  if 
the  older,  vertically  integrated  struc¬ 
tures  bad  stayed  in  place. 

This  history  remains  relevant  be¬ 
cause  there’s  one  big  part  of  the  IT  in¬ 
dustry  that  still  has  many  characteris¬ 
tics  of  the  vertically  integrated  era,  and 
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that,  of  course,  is  the  corporate  IT  or- 
ganizatioD  itself.  In-house  IT  organiza¬ 
tions  are  still  largely  in  the  business  of 
building  systems,  writing  software,  in¬ 
stalling  networks  and  providing  the 
necessary  support  services. 

Indeed,  in  many  ways,  customers 
have  inherited  the  downside  of  today's 
horizontal  supply-side  model  There 
are  now  plenty  of  good  products  and 
services  to  buy.  but  the  burden  of  inte¬ 
gration  has  fallen  mostly  to  the  user. 
Unfortunately,  the  combination  of 
legacy  code  and  overwhelming  com¬ 
plexity  in  most  IT  environments  has 
made  the  modem  IT  organization  the 
least-efllcient  IT  industry  sector.  Many 
organizations  are  drowning  in  neces¬ 
sary  but  low-value  work. 

Today,  there  are  few  more  important 
IT  industry  questions  than  if  and  when 
the  power  of  the  horizontal  model  will 
come  to  define  the  customer  side  of 
the  IT  business.  Clearly,  some  move¬ 
ment  in  this  direction  is  now  occur¬ 
ring.  ASPs,  utility  computing,  software 
as  a  service,  contract  services.  Web 
services,  outsourcing  and  the  use  of 
the  public  Internet  are  all  examples  of 
how  specialized  providers  can  take 
over  work  that  otherwise  would  have 
been  done  in-house. 

But  compared  with  the  supply  side 
of  our  business,  the  rate  of  change 
has  been  much  less  dramatic.  There 
haven't  been  any  landscape-altering 
equivalents  to  the  launch  of  the  IBM 
PC  or  the  der^ulation  of  the  telecom 
industry.  It's  hard  to  ima^e  what  such 
an  equivalent  might  actually  look  like. 

Recently,  there's  even  been  a  bit  of  a 
backlash,  with  some  companies  pro¬ 
moting  the  virtues  of  keeping  all  IT 
woik  in-house.  That  says  a  lot  about 
the  stale  of  today's  overly  complicated 
IT  industry.  But  until  customers  can 
acquire,  use  and  integrate  information 
technologies  as  efiiciently  as  suppliers 
can  build  them,  the  user  community 
will  continue  to  bear  the  bulk  of  IT  in¬ 
dustry  frustration.  There’s  no  bigger 
IT  industry  challenge  O  S1412 
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Microsoft 
Plays  the 
Ethics  Card 
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•M  NOT  A  BIG  FAN  of  peo¬ 
ple  who  use  pirated  soft¬ 
ware,  and  I  have  managed 


in  the  course  of  my  online 
life  never  to  have  shared  or 
downloaded  a  song  or 
movie. 

Bui  does  this  make  me 
more  ethical  than  the  43%  of 
the  British  public  who  ad¬ 
mitted  that  they  own  coun¬ 
terfeit  goods,  or  the  23% 
who  said  they  willingly  have 
bought  pirated  software? 

I  don't  know.  It  }ust  seems 
to  make  me  confused,  be¬ 
cause  I  find  myself  on  the 
side  of  a  mega-multinational  software 
vendor  in  its  defense  of  intellectual 
property  rights,  even  as  I  find  myself 
doubting  its  claims  thai  pirated  soft¬ 
ware  means  lost  revenue  for  the  UK. 
government.  According  to  Microsoft, 
when  those  Britons  buy  pirated  soft¬ 
ware.  it's  not  just  the  company  fhat  suf¬ 
fers:  no.  the  Ekitish  government  and  all 
that  it  supports  arc  hurt.  loo.  because 
no  taxes  are  paid.  This  seems  reason¬ 
able  enough,  but  there's  more  to  it  than 
that,  as  ni  explain. 

Believe  it  or  not.  Microsoft  is  liken¬ 
ing  itself  to  small-scale  coffee  growers 
In  Third  World  countries. 

What's  behind  this?  A  Microsoft- 
sponsored  survey  by  YouGov  that  basi¬ 
cally  proves  that  people  are  a  bundle  of 
contradictions. 

On  the  one  hand.  89%  of  the  sample 


group  said  they  perceive 
themselves  to  be  ethical 
consumers,  defined  in  the 
survey  as  people  who  try  to 
buy  free-trade  coffee  and 
non-genetically-modified 
food.  But  a  lot  of  people  in 
this  group  st0i  don’t  seem 
to  mind  using  the  odd  bit 
of  pirated  software.  Mi¬ 
crosoft  is  trying  to  make 
the  connection  between 
itself  and  coffee  growers, 
claiming  that  there  is  a 
double  standard  when  it  comes  to  soft¬ 
ware  and  free  trade. 

Ah.  contradictions  and  double  stan¬ 
dards  —  two  topics  that  Microsoft 
happens  to  be  an  expert  on. 

About  frtose  taxes.  Microsoft  makes 
software  tn  the  Republic  of  Ireland, 
where  taxes  on  profits  are  lower  than 
those  in  the  UJC.  The  UJC.  operations 
are  really  just  a  marketing  vehicle  for 
Microsoft  software. 

So  would  buying  genuine  Microsoft 
software  boost  the  tax  revenues  of  the 
UK.  government?  Would  paying  full 
price  for  authentic  versions  of  Win¬ 
dows  and  Excel  help  Britain  build  new 
hospitals? 

Not  likely,  because  most  business 
users  get  to  claim  back  the  17.^  value- 
added  tax  that  is  tagged  onto  each  soft¬ 
ware  purchase. 
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As  for  Microsoft,  it  ships  most  of  the 
software  that's  destined  for  Europe  di¬ 
rectly  from  Ireland.  If  the  company  is 
so  dedicated  to  paying  taxes,  it  could 
seU  its  goods  from  the  UK.  That  would 
help  the  government  here. 

Microsoft  tries  to  make  the  point 
that  intellectual  property  is  the  same 
as  coffee  but  strangely  doesn't  seem  to 
recognize  that  pushing  IT  property 
rights  isn't  the  same  thing  as  trying  to 
ensure  that  small-scale  farmers  cam  a 
living  wage.  “People  who  pay  a  little 
more  for  free-trade  coffee  hope  that  at 
least  pan  of  the  premium  will  end  up 
in  the  pocket  of  the  grower."  says 
Robin  Littau.  general  manager  of  Don 
Pedro  Coffee  in  Houston.  Microsoft 
knows  it  can't  persuade  people  that 
they  should  make  sure  pan  of  the  price 
of  the  software  they  buy  ends  up  in  the 
pocket  of  Bill  Gates,  so  it  sets  up  the 
UK.  tax  man  as  the  injured  party. 

As  1  said.  Pm  no  fan  of  the  move¬ 
ment  that  believes  software,  music  and 
video  are  free  for  the  sharing  without 
in  some  way  compensating  the  author, 
musician  or  artist 

But  what  I  don't  like  even  more  is  a 
corporate  hypocrite.  O  SU27 
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Sun’s  Java  Stance 

SUN  HAS  POSTED  the  some 
code  tor  the  next  btg  verson  of 
Java,  codeiwned  Mustang,  on  the 
Internet  under  the  Jm  Research 
bcensa  {‘Open-Sowce  JaaT 
(XicidJnkS08971.ltlsfreefornon- 
commeroal  use  and  provides  de- 
velooers  a  chance  to  look  betore 
they  leap.  Sun  recognizes  the  need 
lostmi^ilsmynadbcdnsepoft' 
cies  and  constranls.  have 
been  confusing,  ft's  just  that  Sun. 
as  a  for-proM  organaallon.  6  trying 
to  hgure  out  how  to  make  money  lor 
Its  stakehoUers  nolMthstanding  a 
desim  to  gain  poibcat  points. 

Ratal  ively  speaking.  Sun  remains 
the  biggest  oontTtMQr  of  code 
to  the  open-source  movement 
through  its  work  on  GNOIC  Star- 
Office  ^  other  open-siuce  soft¬ 
ware  and  As  association  with  Coi- 
labneN  and  various  open-source  rr 
soixees.  The  company  6  also  mov¬ 
ing  elements  of  its  Sofane  Unix  op¬ 
erating  system  there,  convincing 


marry  of  the  third-party  owners  of 
the  250ixfd  ntelectuaf  property 
eiemen6togoalong.Suihasn- 
vesied  upvords  of  SI  bikm.  X) 
years  and  about  10  jOOO  man-years 
intheciealionofJava.Shoulditex- 
pectarTyretumsontheresulIngvr- 
telectuaf  property,  or  shotAd  It  cor^ 
vert  Jawi  nio  a  pue  open-source 
project,  grwig  up  al  Its  conkoT? 
Owners  of  the  3  biion  Sun  shares 
would  prefer  the  former. 

f^otactirig  the  nteleciuaf  prop¬ 
erty  IS  invortant  lor  Stfi's  iuhfe. 
Brand  protection  lhrou(^  Icensmg 
6  important  for  Amencan  atierests 
ntheintemahonaicontexlEnsur- 
ingcornpatbitycorttotandcoonb- 
naieddeveiopnrenloftheJayeplal- 
form  is  in  the  nteresl  of  Ml  humans. 
The  licensing  strcchfe  is  mended 
to  accompksh  al  of  the  above.  The 
Btttrudional  books  that  Sun  and 
others  have  authored  on  the  Java 
progrvnnwiQ  language  «td  plat¬ 
form  and  the  traning  programs 
leadng  to ‘certifieir  Java  develop¬ 
ers  al  feed  a  coordmaleddeveAop- 


meni  of  the  Java  trarectorv  Sun's 
Java  kcensmg  pokey  B  miended  to 
effeclivefy  foster  compattisy.  amo- 
vBlion  and  profttabdity.  al  at  the 
same  tne.  Research^  hcenses 
are  free  and  are  less  restnettve  tfi  or¬ 
der  to  foster  raptomhelion  Com¬ 
mercial  kcenses  have  tees  and  more 
restnctions.Byaoolvmgmetabo- 
ratecontnifsystem.Sunhasa<- 
tempted  and  largely  succeeded  II 
preventmg  market  hagnwnlation. 
NtelwtIOMn 

Program  manager.  Sun  Mi¬ 
crosystems  Inc,  Santa  Clam. 
Calif,  ni5hotJchan(Sisunxcm 


An  E-voting  Future 

TECHWCALprofesstonabwid 
grass-roots  polDcat  acbvBts  are 
figNy  skapbcal  of  fhmm  Foe's  v«w 
that  Internet  votng  d  n  ow  future 
fNext  Tlme.an  kilemel  Electoraie.* 
0uckUnkS04621.Befinthelnto- 
net  on  be  an  accteitable  aftematne 
to  ctsens  tiulgng  oft  to  poino  lo- 
cakons.  significani  changes  net 


ocoii.FfsLtheonslaughiofsell- 
prcpagatir)g.maliciQU5orDgram- 
mmg  must  be  neuirMued.  Other¬ 
wise,  ejections  may  be  manpuAated 
Second  s  the  gueseon  of  extendng 
Internet  voting  to  the  technotogcaly 
literate,  the  coriteuierjess  and  the 
homeiess.  Unless  these  issues  are 
dean  wWh.  rekance  on  the  fntemto 
woiid  make  the  axrere  stale  of  vote 
fraud  look  Hw  chftfs  play. 
RayBabecki 
Scientist  Ponh,  NJ. 

COMPUTERWORLO  wMcoines 
comments  from  As  readers,  letters 
wi  be  edled  for  brevity  md  daniy 
They  should  be  addressed  to 
JanveEckle.ieRerse(htor.Com- 
puterwoifd.  PO  Box  9171 1  Soeen 
Street  Framngham.  Mass.  OTTDI. 
F8x:(506}B79-4843  E-msi 
lettefaBcomputeiwutM.oom 
Indude  an  address  and  phone 
number  torimmediate  venkcation. 


>FbifflnetellBis  on  these  «d 
other  topes,  polo 


WebSphere 


MIDDLEWARE  IS  IBM  SOFTWARE.  WebSphere  Portal, 
part  of  the  IBM  Workplace  Family,  connects  partners, 
employees,  and  customers  worldwide.  It's  how  to  access 
multiple  applications  on  one  screen  and  on  virtually  any 
kind  of  device.  An  end-to-end  solution  that  helps  improve 
productivity  and  reduce  costs  as  it  enables  on  demand 
business.  It’s  an  accessory  that  you  just  can’t  live  without 


1.  Sales  associate  checks  online  inventoiy. 

2.  Manager  uploads  revenue  goals. 

a  Supervisor  gets  employee  overtime  info. 
4.  Cashier  IMs  downtown  store  location, 
a  Everyone  accessing  info  via  one  portal 


Middleware  is  Everywhere. 


1 


1.  Buyer  ck>Mmloads  competitive  pricing. 

2.  Manager  securely  retrieves  invoices. 

3.  Driver  obtains  specific  delivery  details. 

4.  EX'Vendor  denied  access  to  intranet. 

5.  Customer’s  identity  protected  from  theft 


MIDDLEWARE  IS  IBM  SOFTWARE.  Identity  management 
software  that  uses  single  sign^Dn  technology  tft  ensure  that 
the  right  access  is  given  to  the  right  people  Open,  modular 
Tivoli  security  software  that  automates  processes  between 
employees,  partners,  customers  and  suppliers  -  whi.e 
helping  to  reduce  costs  It  s  how  everyone  involved 
gets  the  information  they  need  On  time  And  on  demaixl. 
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PCI  Express  and  802.11g  appear 
to  be  speeding  toward  success 
in  the  enterprise,  while  power 
over  Ethernet  is  making  steady 
progress  in  selected  situations. 
But  it’s  been  slow  going  for 
Bluetooth.  By  Rotert  L.  Mitchell 


PCI  EXPRESS  was  designed  to  elimi¬ 
nate  I/O  bottlenecks  for  everything 
from  video  graphics  to  lOGbit/sec.  Eth¬ 
ernet  adapters.  802.11g  offered  a  back¬ 
ward-compatible  way  for  enterprises 
to  upgrade  their  802.Ub  wireless  LANs  to  higher 
speeds.  Power  over  Ethernet  would  eliminate  the 
need  to  use  AC  power  for  WLAN  access  points.  IP 


phones  and  other  equipment.  Bluetooth  promised  to 
end  cabling  clutter  on  the  desktop. 

Computerworld  has  covered  the  introduction  of 
each  of  these  emergii^  technologies  over  the  past 
two  years.  In  that  time,  some  have  gained  ground; 
others  have  fallen  short.  Here’s  a  report  card  on 
where  each  stands. 

PCI  Express:  Adding  Fast  Lanes 

After  more  than  a  year  of  slow,  steady  progress.  PCI 
Express,  a  new  I/O  technology  designed  to  replace 
the  Peripheral  Component  Interconnect  expansion 
bus  used  in  PCs  and  sett  ers,  is  ready  to  roll  Intel 
Corp.  released  the  first  PCI  Express  motherboard 
and  chip  sets  this  past  summer,  systems  began  ship- 
pmg  in  August  and  a  few  adapters  are  now  available. 

Developed  through  the  PCI  Special  Interest 
Group.  PCI  Express  (also  called  PCle)  replaces  the 
PCI  bus  with  a  serial  architecture  chat  uses  up  to 
16  sets  of  wires,  or  “lanes.”  to  support  bandwidth 
rangij^  from  500MB/sec.  to  16GB/sec.  For  the  most 
part.  PCI  Express  is  designed  to  solve  I/O  bottle¬ 
necks  that  most  users  have  yet  to  experience,  but 
IBM,  Hewlett-Packard  Co.  and  Dell  Inc.  have  all 
rolled  out  servers  that  include  both  traditional  PCI 
and  two  or  more  "4x"  (four-lane)  PCI  Express  slots 
to  stay  ahead  of  user  demand. 

On  commodity  servers.  PCI  Express  appears  to 
have  won  a  battle  with  PCI-X  2.(X  a  competing 
2GBAec  standard  once  supported  by  HP.  “Ethernet 
and  storage-controller  vendors  started  flipping  from 
‘  PCI-X  2.0  over  to  PCI  Express,  so  we're  moving  with 
the  market,"  says  Cc^  L^ey,  director  of  market 
strategy  for  the  ProLiant  server  line  at  HP. 

But  PCI-X  2J0  will  arrive  on  high-end  servers  next 
year,  both  because  PCI  Express  isn't  fully  mature 
and  PCl-X  2.0  is  likely  to  be  available  sooner  than 
comparable  8x  implementatiorts  of  PCI  Express,  says 
Tom  Bradicicfa,  chief  technology  officer  for  IBM's 
xSeries  and  BladeCenter  servers.  Eventually,  even 
these  systems  wUl  migrate  to  PCI  Express,  be  says. 

PCI  Express  is  already  replacing  the  accelerated 
graphics  port  for  high-end  graphics  on  PCs.  For 
most  other  I/O  needs,  however,  PCI  Express  is  over- 
kiU.  On  servers,  early  PCI  Express  adapters  focus  on 
technologies  likely  to  max  out  current  IGB/sec. 

PCI-X  bus,  including  10  Gigabit  Ethernet,  RAID  coo- 


TK  SMC  BUT  nFFERENT;  HP'S  ML  350  awiM  i«vm  con^ 
biM  fow  UadWonM  PO-X  sloM  (vfWto  iMs  in  photo)  Md  tw^ 
4i  PQ  EiproH  stats  (top.  in  Uack).  WMe  tht  slott  look  aimi' 
tar.  tho  4i  PCta  atats,  at  2GE^,  Mrw  about  twtao  tho 
bandsriiBh.  HP’s  DL  aortas  sorvars  support  PCta  by  way  of  an 
optional  PCio ‘’rtaorearrr  adaptor.  Othor  iorvsr  vandors  o^ 
tar  sbnlar  eonflgurationo. 


trollers  and  Fibre  Channel.  Bui  server  buyers  should 
be  cautious,  says  Nathan  Brookwood.  an  analyst  at 
Insight  64  in  Saratoga.  Calif.  “As  long  as  they  are  not 
fuiding  PCI-X  to  be  a  bottleneck,  it's  still  a  preferred 
solution  because  it's  tried  and  proven,**  he  says. 

PCI'SIG  is  also  working  on  a  server  I/O  module 
specification  that  Ton>*  Pierce,  the  group's  chairman, 
describes  as  "an  external.  bot*pluggable  form  factor 
designed  specifically  for  servers.”  And  a  revised 
specification,  due  to  be  published  in  2005.  will  dou¬ 
ble  the  current  data  rate.  For  now.  however,  PCI  Ex¬ 
press  slots  are  likely  to  creep  into  servers  in  incre¬ 
ments.  The  transition  has  begun,”  Brookwood  says. 
But  be  doesn't  see  It  taking  off  in  a  big  way  until 
at  least  2007. 

802.11g:  One  Step  Ahead 

The  802 Jig  54Mbit/sec.  WLAN  specification  was 
designed  to  provide  an  upgrade 
path  for  lUdbit/sec.  802.Ub  net¬ 
works.  While  it  has  sold  well  in 
the  consumer  market,  businesses 
have  largely  stayed  with  the 
slower  but  more  established 
802.Ub. 

802.11g  delivered  what  the 
S4Mbit/sec.  802 Jla  standard 
couldn't:  backward  compatibility 
for  802 Jib  users.  But  many  busi¬ 
ness  simply  haven't  needed  the 
extra  bandwidth,  says  Ken  Du¬ 
laney.  an  analyst  at  Gartner  Inc 

As  the  technology  has  ma¬ 
tured.  however,  vendors  of  enter¬ 
prise-class  WLAN  products  have 
replaced  b-mode-only  access 
points  CAP)  with  g-mode  units, 
and  some  businesses  are  taking 
advantage  of  the  faster  operating 
mode.  Embarcadero  Systems 
Corp.  is  installing  802Jlg  in  all 
new  sites,  says  John  Mon^roery, 
vke  president  and  chief  technol¬ 


ogy  officer.  And  new  applications  at  the  Alameda. 
Calif. -based  company's  container  shipping  terminals 
require  more  bandwidth,  so  he's  investigating  up¬ 
grades  for  b-mode  APs  as  well  While  802.11a's  short¬ 
er  range  would  have  required  adding  more  APs  for  the 
same  coverage  area,  with  802.11g.  Montgomery  says, 
he  should  be  able  to  uiJgradc  just  the  existing  b  units. 
"We  are  trying  to  do  a  one-to-one  swap,"  he  says. 

As  bandwidth  needs  climb,  the  long-ignored 
802.11a  is  starting  to  gamer  interest  as  well,  says  Gra¬ 
ham  Melville,  director  of  product  marketing  at  Sym¬ 
bol  Technologies  Inc.  It  runs  in  the  less-crowded 
5-GHz  ^>ectrum.  and  with  11  channels  to  802.11g’s 
three.  802.11a  APs  can  be  placed  closer  together  with¬ 
out  interference.  That  means  802.11a  can  support 
more  users  at  a  higher  aggregate  bandwidth.  Melville 
says  the  technology  is  ideal  for  crowded  offices, 
where  power  users  rely  on  wireless  as  their  primary 
connection  into  the  company  network. 

An  even  faster  variant  is  on  the  way:  802.11n  is  ex¬ 
pected  to  quadruple  current  WLAN  speeds.  But  the 
specification  is  in  the  early  stages  of  development, 
and  mature  products  are  unlikely  to  arrive  t^fore 
2007.  Says  Dulaney.  "If  you  want  higher  speeds,  go  to 
802Jla,  since  there  is  a  lot  more  capacity  at  5  GHz." 

PoE:  Ethernet  Powers  Up 

Who  needs  an  outlet?  Driven  by  the  need  to  cosi- 
effectivcly  power  IP  phones  and  WLAN  APs.  power 
over  Ethernet  (PoE)  has  quietly  moved  into  the  main¬ 
stream  since  the  IEEE  802 Jaf  standard  was  ratified  in 
2003.  PoE  is  now  a  global  standard  for  supplying  low- 
voltage  power  to  networked  devices  by  way  of  Ether¬ 
net  cabling.  "Almost  every  enterprise  I  talk  to  is  look¬ 
ing  at  putting  PoE  in  their  wiring  closet,"  says  Zeus 
Kerrat^a,  an  analyst  at  The  Yankee  Group  in  Boston. 

But  that  doesn't  mean  PoE  is  going  in  across  the 
board.  While  virtually  all  wireless  APs  and  IP  phones 
now  can  support  Ethernet  power,  PoE  is  offered  only 
in  high-end  switches  —  about  20%  of  those  on  the 
market  —  and  they  sell  at  a  tS%  to  40%  premium, 

says  Rachna  Ahlawat.  a  (partner 
analyst.  But  she  expects  the  pre¬ 
mium  to  disappear  over  the  next 
few  quarters  as  PoE  becomes  a 
"checklist  item"  for  all  switches. 

Only  14%  of  aU  KVlOOMbit/ 
sec  Ethernet  ports  shipp^  with 
PoE  in  the  first  half  of  20B4.  says 
AhlawaL  And  with  businesses 
DOW  keeping  existing  switches 
longer  —  up  to  seven  years  — 
many  companies  may  hold  off  on 
adding  PoE  for  a  few  years  or 
choose  to  add  midspan  devices 
that  can  send  power  to  selected 
ports  without  replacing  the 
switch.  Nonetheless.  IDC  pre¬ 
dicts  that  about  41%  of  all  Ether¬ 
net  port  shipments  will  be  PoE- 
enabted  by  2008. 

Embarcadero  uses  PoE  switch¬ 
es  to  support  IP  phones.  "We're 
still  using  traditional  methods  to 
power  our  network  switches  and 
WLAN  access  points,"  says  Moot- 


Worldwide  LAN  and  RdE  Switch  Ports 
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gomery.  But  he's  considering  PoE  to  support  new  AP 
and  closed-circuit  television  camera  deployments. 

PoE  is  slowly  gathering  momentum,  says  IDC  ana¬ 
lyst  Maximilian  FUsL  Tt  will  be  a  gradual,  steady 
phase-in."  he  says. 

Bluetooth:  PeriphereU  Player 

Bluetooth  promised  to  eliminate  cable  clutter  by 
connecting  devices  rangii^  from  handhelds  to  print¬ 
ers  over  a  low-power,  IMbit/sec.  wireless  personal- 
area  network  (PAN).  While  Bluetooth  has  made  in¬ 
roads  with  consumers,  it  has  failed  to  catch  on  in 
the  enterprise. 

Shipments  of  Bluetooth-enabled  products  have 
passed  3  million  units  per  week,  according  to  Blue¬ 
tooth  SIG  Inc.,  but  many  of  them  are  cell  phones  that 
are  sold  in  Europe.  Bluetooth  is  used  in  handheld 
computers,  in  some  cordless  headsets  and  hands-free 
cell  phone  kits,  and  for  .some  specialized  purposes. 
For  example.  United  Parcel  Service  Inc.’s  truck  dri¬ 
vers  use  the  technology  to  allow  handheld  comput¬ 
ers  that  are  environmentally  sealed  against  moisture 
and  have  no  physical  external  connection  to  connect 
wirelessly  to  primers.  But  overall,  it  has  faltered  as  a 
cable  replacement  technology. 

Acceptance  of  Bluetooth  h^  also  been  slowed  be¬ 
cause  of  concerns  about  interoperability  and  securi¬ 
ty.  Bluetooth  SIG  offers  interoperability  testing,  but 
users  still  must  rely  on  its  product  matrices  to  ensure 
that  different  devices  have  proffles  that  will  work  to¬ 
gether.  "1  call  Bluetooth  a  tailure  because  it  doesn’t 
deliver  ease  of  use,"  says  Gartner’s  Dulaney. 

Mike  Foley,  executive  and  technical  director  of 
Bluetooth  SIG.  says  improvements  are  on  the  way. 
The  specification  will  support  3Mbit/5ec.  by  the  end 
of  the  year,  and  it  will  include 
security  features  to  dose  some 
well-publicized  vulnerabiU- 
ties,  enhance  interoperability 
and  improve  power  manage¬ 
ment  It  will  also  support  qual¬ 
ity  of  service  and  multicastlRg 
to  improve  communications 
tvith  multiple  Bluetooth  devices  [(^jiickUnk  50590]. 

Tbday,  however,  Bluetooth  remains  essentially  a 
consumer  technology.  It  also  faces  competition  from 
the  emerging  ultrawideband  lOOIdbit/sec.  PAN  spec¬ 
ification.  Lfftimately,  UWB  could  replace  Bluetooth, 
says  Roger  Kay,  an  IDC  analyst.  "If  UWB  is  capable 
of  sending  large  amounts  of  data  rapidly  over  short 
distances,  there  is  no  reason  why  it  can't  send  <ini»n 
amounts  of  data  as  weU.”  O  S12M 
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Viirtela  Expands 
VMX  Capabflities 

■  Vkrtafal  Inc.  In  Undon,  Utah,  has 
umaHad  Vanion  t1  of  Its  Vintala 
Managament  Extensions  (VMX) 
appiicaUon.  The  upgrada  hB- 
provea  and  expands  the  use  of 
Mieroaoft  SyMsms  Management 
Server  2003  with  non-WMows 
operating  systems,  Mwing 
Unix.  Until  and  Mac  OS  X,  says 
VInteia.  VMX  is  an  administration 
consols  that  snaps  Into  SMS, 
slowing  tha  management  of  non- 
WMowi  dtents  natively  from 
within  SMS,  acconing  to  the 
vendor.  VMX  starts  at  $1,995, 
wito  non-Windows  server  pricing 
at  $125  each  and  non- Windows 
worlotation  pricing  at  $7S  each. 


Observer  to  FYovide 
Additional  Metrics 

■  Nstvmrii  tostniments  UC  an¬ 
nounced  the  roleaae  of  Observer 
10.1  for  nstworh  msnagement, 
anaiyiis  end  troubleahooling.  The 
upgradeaddsmoIrlcsfDrrBport* 
ing  network  perfcirinonce.atoa- 
bOtias  for  automatic  report  dBRv- 
sryandpadwtscheduftng,sn- 
haneemenlB  for  remote  nstworli 
analysis,  and  addKhmai  monitors 
for  ft02.tto,  b  and  g  nstwDite, 
the  Minnsspofa  baaed  company 
sMd.  Pricing  Marts  at  $895. 


Cognos  and  Acorn 
Partner  on  CPM 

•  Lat  VMk,  Covm  top.  ml 
Acorn  Ine.  uwMunca  an 

aSanca  to  dainr  ■dMy.paHd 
naHngandcaniantopaitoi- 
maiicaniaitogMTiMl(Cni)tocli- 
notogy.  Ilto  dtanca  «■  pair 
Houstoa.paaad  Acofp't  MN  An- 
■lyiar  pradud,  wMdi  if  daalviad 
to  pmaidt  antorptla.  coal  and 
pram  maMca,  toWi  dw  bulinaaa 
totompaiicaaimionantoidtol- 
nca' CPM  auda.  BiHngton. 
Haaa.Hiaaad  Cognoa  am  Jotody 
marital  lb  buMnaaa  intodipanca. 
pto-nnlcg  md  totaeaaltog  aodtoan 
and  icoracardng  todaiotogy  \odh 
Accra  to  dia  Inandai  aanfcaa. 
dkktoudcn,  canaunar  padagml 
goodi  and  ratal  maritoh. 
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Make  a  Technology 
Plan  for  2005 


f  HE  END  OF  THE  YEAR  is  a  traditional 
time  for  re-evaluation  of,  well,  just  about 
everything.  But  one  area  in  particular  that 
gets  re-evaluated  in  most  organizations  is 
technology  strategy. 


Many  of  the  technology 
strategy  issues  you  need  to 
address  in  2005  fall  into  five 
overlapping  areas:  server 
platform  architecture,  e-mail 
architecture,  security  archi¬ 
tecture.  enterprise  analytics, 
and  customer  interaction 
technology.  Here's  a  quick 
plannii^  checklist  o^  the  top 
issues  in  four  of  the  areas. 

(rU  discuss  enterprise  ana¬ 
lytics  in  a  future  column.) 

Server  ptatform  arcWtoctiira. 

As  usual,  the  most  interest¬ 
ing  issues  in  server  platform  architecture 
relate  to  database  management  systems. 
Included  among  those  is  this  huge  ques¬ 
tion:  Is  the  row-based  relational  model 
approaching  Che  end  of  its  useful  life? 
The  evidence  in  tevor  of  nonrelational 
and/or  column-based  DBMS  architec¬ 
ture  keeps  mounting  —  especially  for 
XML-based  applications.  And  while  top- 
of-tbe-line  DBMSs  are  still  clearly  supe¬ 
rior  for  data  warehousing,  complex 
queries  or  nontabular  data  management, 
often  that's  exactly  because  they're  get¬ 
ting  increasingly  from  simple  third- 
normal-form  data  structures.  Yet  con¬ 
ceptually.  there’s  little  reason  to  see  any 
limit  to  relational  systems'  continued 
evolution  and,  hence,  continued  market 
domination. 

Meanwhile,  at  the  other  end  of  the 
DBMS  spectrum,  what  about  commodity 
databa.<e  management  systems?  They  do 
a  good  job  for  many  smaller  online  trans¬ 
action  processing  applications.  Indeed, 
between  MyS^L  and  the  once-excellent 
Ingres,  even  open-source  DBMS  offer¬ 
ings  may  warrant  consideration. 

But  there’s  a  yet  bigger  set  of  con¬ 
cerns:  lust  which  kinds  of  platforms  are 
"strategic”  in  your  enterprise?  Viable 
candidates  include  traditional  hardware. 


k.  ^ 


storage  hardware  and  soft¬ 
ware,  DBMS,  operating  sys¬ 
tems.  application  servers, 
enterprise  information  inte¬ 
grators  and  ses'eral  kinds  of 
management  superstruc¬ 
tures.  And  arc  the  choices 
different  for  the  idealized 
grid/blade  future  and  the 
big-central-server  present? 

One  good  choice  of  strate¬ 
gic  center  is  fourfold:  DBMS 
♦  analytics  engine  ♦  operat¬ 
ing  system(s)  -» network 
management  inftastructure. 
But  there  are  many  viable  alternatives. 

E-mal  archftadura.  Now  here's  a  de¬ 
pressing  subject.  At  most  companies, 
e-mail  represents  a  huge  cost.  Employ¬ 
ees  each  spend  hours  per  day  on  e-mail, 
grumbling  all  the  way.  E-mail  adminis¬ 
tration  b  a  huge  nightmare.  And  vendors 
aren't  helping  much  —  Microsoft 
promised  key  fixes  over  a  decade  ago 
that  it  isn’t  even  close  to  delivering. 

So  how  about  a  radical  gambit?  E-mail 
b  a  constant  processing  stream  with  se¬ 
rious  security  vulnerabilities  and  regret¬ 
tably  little  In  the  way  of  DBMS  under¬ 
pinnings  at  thb  time.  Thai's  exactly  the 
kind  of  processing  that  does  well  on  ded¬ 
icated  appliances,  rather  than  general- 
purpose  computers.  And  you  shouldn’t 
just  consider  e-mail  appliances;  e-mail 
outsourcing  b  also  worth  a  serious  look. 

It’s  abo  time  for  serious  planning  in 
the  area  of  e-mail  archiving.  R^ulators 
want  you  to  keep  huge  amounts  of 
e-mail;  bwyers,  for  very  similar  reasons, 
want  you  to  throw  it  all  away.  Mean¬ 
while,  a  tremendous  fraction  of  an  orga¬ 
nization's  knowledge  b  buried  in  all  that 
e-mail,  and  archiving  technology  offers 
better  potential  access  to  it  all  the  time. 

SMurtyanMtoclur*.  At  most  organiza¬ 
tions,  security  architeenue  b  a  night¬ 


mare.  Dedicated  securit)-  appliances 
(which  work  well),  centralizki  security 
management  (which  doesn’t)  and  gener¬ 
al  networic  operations  management  sys¬ 
tems  don’t  play  together  nearly  as  well 
as  they  should-  Meanwhile,  wireless  net¬ 
working  and  employees'  personal  Inter¬ 
net  use  punch  ever  more  holes  in  the  se¬ 
curity  perimeter 

You  can’t  fix  the  whole  shebang,  but 
>*00  can  and  should  do  at  least  this: 

Break  your  networic  into  concepttial 
pieces,  then  move  quickly  to  secure  the 
most  critical  pieces  as  tightly  as  you  can. 
Dedicated  intrusion-prevention  systems, 
network  segmentation  firewails.  newfan¬ 
gled  applicatk)D*leve]  sfxnirity  appli¬ 
ances  and  so  on  —  you  can’t  protect 
your  whole  network  with  those  tech¬ 
nologies.  but  your  key  databases  can  be 
protected  very  well. 

Another  area  in  which  your  planning 
should  probably  rev  up  (it’s  OK  for  im¬ 
plementation  to  be  slower)  b  authenti¬ 
cation  and  identity  managemeoL  LDAP 
integration  will  eventually  be  a  neccssit)* 
and,  despite  the  inherent  hassle,  many 
enterprises  will  eventually  adopt  smart- 
card/badge-based  two-factor  authentica¬ 
tion  as  well 

There  are  other  large,  troubling  chal¬ 
lenges  that  I  could  mention  —  especially 
issues  relating  to  outsourcing.  But  since 
thb  b  the  holiday  season.  I’ll  end  on  a 
happy  note  instead. 

(^uMomvntoractian  technology.  This  area 
should  be  on  your  Ibt  for  re-examination 
every  year,  and  you  should  be  happy 
about  it  Technolt^  for  managing  cus¬ 
tomer  interactions  keeps  getting  better  — 
on  the  Web,  in  call  centers  and  even  in 
hoary  old  direct  mail  —  and  the  impact 
on  profits  b  almost  immediate.  So  run. 
don’t  walk,  to  your  marketing  executives, 
and  ask  them  to  dream  up  a  technologi¬ 
cal  wish  Ibt.  Chances  are.  you'll  be  able 
to  give  them  a  lot  of  what  they  want. 

But  thb  can  all  wait  until  the  new  year. 
Until  then,  have  a  great  holiday  season. 
051424 
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THE  SAME  BUT  DIEEERENT  HP’s  ML  350  series  servers  com¬ 
bine  tour  traditionai  PCI-X  slots  (white  slots  in  photo)  and  two 
4a  PCI  Eipress  slots  (top,  in  black).  While  the  slots  look  simi¬ 
lar.  the  4i  PCIe  slots,  at  26^sac..  deliver  about  twice  the 
bandwidth.  HFs  DL  series  servers  support  PCIe  by  way  of  an 
optional  PCIe  '‘riser  card'  adapter.  Other  server  vendors  of¬ 
fer  similar  corfhguratiofts. 


cndlcrs  and  Fibro  Channel.  But  server  hu\ors  should 
cautious,  says  Nathan  Brookvv<K*d.  an  analyst  at 
Insight  64  in  SaraU’ga.  Calif.  "As  h>ng  a.s  they  are  mu 
rinding  IH'I-X  to  be  a  Knileneck.  it's  still  a  prefenx‘d 
solution  because  it’s  tried  and  proven."  he  s;iys. 

I’Cl-SlCi  is  also  working  on  a  server  1  O  nuKlule 
specification  that  Tony  Pierce,  the  irroup’s  chairman, 
describes  as  "an  external,  hot -pluggable  form  factor 
designed  specifically  for  servers."  And  a  revised 
specification,  due  t»i  be  published  in  2tX>5,  will  dou¬ 
ble  the  current  data  rate.  For  now.  however.  PCd  Fa- 
pa*sb  slnts  are  likely  to  creep  into  servers  in  incre¬ 
ments  “The  transition  ha.s  begun."  BrookvvvHvd  says- 
Hut  he  doesn't  see  it  taking  olt  in  a  big  way  until 
at  least  20(»7 

802.11g:  One  Step  Ahead 

The  802.llg  54Mbit  ‘sec.  WLAN  specification  was 
designed  to  prtwide  .in  upgrade 
path  for  11Mbit  sec.  H02.ilh  net¬ 
works.  While  ii  has  sold  well  in 
the.consumer  market.  bu.sinesses 
have  largely  staved  with  the 
slower  but  more  e.siablished 
802.nb. 

802,llg  delivered  what  the 
54Mbit  sec.  802.11a  standard 
couldn't;  backward  compatibility 
for  802.11b  u-sers.  But  many  busi¬ 
ness  simpiv  haven’t  needed  the 
extra  bandwidth,  says  Ken  Du¬ 
laney.  an  analyst  at  Gartner  Inc- 

As  the  u^hnologv  has  ma¬ 
tured.  however,  vendors  of  enter¬ 
prise-class  WLAN  products  have 
replaced  b-m<Kic-onl)-  access 
points  (AP)  with  g-mode  units, 
and  some  businesses  arc  taking 
advantage  of  the  faster  upc'rating 
miide-  Embarcadcro  Systems 
Corp-  Ls  installing  802.1]g  in  all 
new  sites,  says  John  Montgomery, 
vice  president  and  chief  tcchnol- 


The  neit-generalion  Wt  Fi  slan 
dard.  currently  in  neqohalion  rn 
IEEE  Task  Group  N.  will  boost 
nominal  speeds  beyond  ?00Mbii/ 
sec.  (Actual  throughput  is  typical¬ 
ly  half  the  published  rate  )  Ratifi¬ 
cation  of  the  linal  .standard  isn't 
expected  before  the  end  of  2006, 
and  enterprise-quality  products 
aren’t  likely  to  arrive  before 
2007  Although  the  group  ha.s  yet 
to  settle  on  a  technical  proposal, 
the  802 11n  product  parade  has 
already  started  Belkin  Corp.  re 
leased  a  "pre-n"  WLAN  adapier 
and  router  in  October 


ogy  officer.  And  new  applications  at  the  Alameda. 
Calif -based  company's  container  shipping  terminals 
require  more  bandwidth,  so  he's  investigating  up¬ 
grades  for  h-mode  APs  as  well.  While  802.11a's  short¬ 
er  range  vvould  have  required  adding  more  Al*s  for  the 
same  coverage  area,  with  802.ilg.  Montgomery  says, 
he  should  be  able  to  upgrade  just  the  existing  b  units. 
"Wc  arc  trying  to  do  a  One-to-one  swap,"  he  says. 

As  bandwidth  needs  climb,  the  long-ignored 
802.11a  is  starting  to  garner  interest  as  well,  says  Gra¬ 
ham  Melville,  director  of  pnvduct  marketing  at  Sym¬ 
bol  Technologies  Inc.  It  runs  in  the  less-cnnvded 
.^-GHz  spectrum,  and  w  ith  11  channels  to  802.11g’s 
three.  802.11a  APs  can  be  placed  closer  together  with¬ 
out  interference.  Thai  means  802.Ua  can  support 
more  users  at  a  higher  aggregate  bandwidth.  Melville 
sa\-s  the  technology  is  ideal  for  cniwdcd  offices, 
where  power  users  rely  on  wireless  a.s  their  primary 
connection  into  the  company  network. 

An  even  faster  variant  is  on  the  w-ay:  802.11n  is  ex¬ 
pected  to  quadruple  current  WLAN  speeds.  But  the 
specification  i.s  in  the  early  stages  of  development, 
and  mature  products  are  unlikely  to  arrive  before 
2007  S.iv's  Dulaney.  "If  you  want  higher  speeds,  go  to 
802.11a.  since  there  is  a  lot  more  capacity  at  5  GHz." 

PoE;  Ethernet  Powers  Up 

Who  needs  an  outlet?  Driven  by  the  need  to  cost- 
elTeclivcIy  power  IP  phones  and  WLAN  AI*s.  power 
over  F-iheniei  (PnE)  has  quietly  moved  into  the  main¬ 
stream  since  the  lEEK  8023af  standard  was  ratified  in 
200.T.  PoE  is  now  a  global  s(and,ird  for  supplying  low- 
voltage  power  to  netwitrked  devices  by  way  of  Ether¬ 
net  cabling.  "Almost  every  enterprise  J  talk  to  is  look¬ 
ing  at  putting  PoE  in  their  wiring  closet."  says  Zeus 
Keixavala.  an  analyst  at  The  Yankee  Group  in  Boston. 

But  that  doesn't  mean  PoE  is  going  in  across  the 
board.  While  virtually  ail  wireless  AIN  and  IP  phojies 
now  can  support  Eihcmel  power.  PoE  is  offered  only 
in  high-end  .switches  —  about  of  those  on  the 

market  —  and  they  sell  ,if  a  15%  to  40N*  premium. 

says  Rachna  Ahlawat.  a  Ganner 
analy.si.  But  she  expects  the  pre-  I 
mium  to  disappear  over  the  next 
few  quarters  as  PoE  becomes  a  ^ 
“checklist  item"  for  all  switches. 

Only  14%  of  all  lO/lOOMbii- 
svc.  Ethernet  ports  shipped  with 
PoE  in  the  first  half  of  2004.  says  , 
Ahlawat.  And  with  businesses  j 
now  keeping  existing  switches  I 
longer  —  up  i»*  seven  years  —  t 
many  c«>mpanics  may  hold  off  on  | 
adding  l*oE  for  a  few  years  or 
choose  to  add  midspan  devices 
that  can  send  power  to  selected 
pons  without  replacing  the 
switch.  Nonetheless,  IDC  pre¬ 
dicts  that  about  41%  of  all  Ether- 
DtM  pv»n  shipments  will  be  PoE- 
enabled  by  2008. 

Embarcadcro  uses  PoE  switch¬ 
es  to  support  IP  phones.  “We're 
still  using  traditional  methods  to 
power  our  network  switches  and 
WLAN  access  points,"  says  Mont- 


Worldwide  LAN  and  PoE  Switch  Ports 
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gomcry.  But  he’s  considering  PoE  to  support  new  AP 
and  closed-circuit  television  camera  deployments. 

PoE  is  slowly  gathering  momentum,  says  IDC  ana¬ 
lyst  Maximilian  Flisi.  "It  will  be  a  gradual,  steady 
phase-in."  he  says. 

Bluetooth:  Peripheral  Player 

Bluetooth  promised  to  eliminate  cable  clutter  by 
i  amneciing  devices  ranging  from  handhelds  to  print- 
j  ers  over  a  low-power.  1Mbit  sec.  wireless  pcrsonal- 
1  area  network  (PAN).  While  Bluetooth  has  made  in¬ 
roads  with  consumers,  it  has  failed  to  catch  on  in 
the  enterprise. 

'  Shipments  of  Bluctixuh-cnablcd  products  h.wc 
passed  .T  million  units  per  week,  according  to  Blue¬ 
tooth  SIG  Inc-,  but  many  t»f  them  arc  cell  phones  that 
are  sold  in  Europe.  Bluetooth  is  used  in  handheld 
computers,  in  some  cordless  headsets  and  h.inds-frux' 
cell  phone  kits,  and  for  some  specialized  purposes. 
For  example.  United  Parcel  Service  Inc.'s  truck  dri¬ 
ven!  use  the  technology  to  allow  handheld  comput¬ 
ers  that  are  environmentally  sealed  against  moisture 
and  have  no  phj'sical  external  connection  to  conncx’i 
wirelessly  to  printers.  But  overall,  it  has  faltered  as  a 
cable  replacement  leehnology. 

Acceptance  of  Bluelwlh  has  also  been  slowed  be¬ 
cause  of  concerns  about  interoperability  and  securi¬ 
ty.  Bluetooth  SIG  offers  interoperability  testing,  hut 
users  still  must  rely  on  its  product  matrices  to  ensure 
that  different  devices  have  profiles  that  will  work  to¬ 
gether.  "I  call  Bluetooth  a  failure  because  it  doesn't 
deliver  case  of  use."  says  Gartner’s  Dulaney. 

Mike  Foley,  c.xccutivc  and  technical  director  of 
Bluetooth  SIG.  says  Improvements  are  on  the  way. 
The  specification  will  support  3Mb)i/sec.  by  the  end 
of  the  year,  and  it  will  include  _ 

Ill'S.  cnh.ince  imer<.piTabili.y 

and  improve  power  manage-  he»e  lo  slay  for  a  while 

meni.  It  will  also  support  qual-  ^  QuickLink  51291 

ity  of  service  and  multicasting  wwwxomputefworfd.coni 

to  improve  communications 

with  multiple  Bluetooth  devices  [QuickLink  50590). 

Today,  however.  Bluetooth  remains  essentially  a 
consumer  technology.  It  also  faces  competition  from 
the  emerging  ultrawidcband  lOOMbit/sec.  PAN  spec¬ 
ification.  Ultimately,  UWB  could  replace  Bluetooth, 
says  Roger  Kay.  an  IDC  analyst.  "If  UWB  is  capable 
of  sending  large  amounts  of  data  rapidly  over  short 
distances,  there  is  rvo  reason  why  it  can't  send  small 
amounts  of  data  as  well."  O  S12W 
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Vinteia  Expands 
VMX  Capabilities 

■  Vinteia  Inc.  in  Ltndon,  Utah,  has 
unveiled  Version  1.1  of  its  Vinteia 
Management  Extensions  (VMX) 
application.  The  upgrade  im* 
proves  and  expands  the  use  of 
Microsoft  Systems  Management 
Server  2003  with  non-Windows 
operating  systems,  including 
Unix.  Linux  and  Mac  OS  X.  says 
Vinteia.  VMX  is  an  administration 
console  that  snaps  into  SMS. 
allowing  the  managnnent  of  non* 
WindovK  clients  natively  from 
within  SMS,  according  to  the 
vendor.  VMX  starts  at  S1.995. 
with  non-Windows  server  pricing 
at  S125  each  and  non-VWndows 
worfistation  pricing  at  STS  each. 

Observer  to  Provide 
Additional  Metrics 

•  Network  Instruments  LLC  an¬ 
nounced  Hie  release  of  Observer 
10.1  for  network  management, 
analysis  and  troubleshooting.  The 
upgrade  adds  metrics  for  report¬ 
ing  network  performance,  capa¬ 
bilities  for  automatic  report  <Miv- 
ery  and  packet  scheduling,  en¬ 
hancements  for  remote  network 
analysis,  and  additional  monitors 
for  802.1U,  b  and  g  networks, 
the  Minneapolis-based  company 
said.  Pricing  starts  at  $995. 

Cognos  and  Acorn 
Partner  on  CPM 

■  Last  week.  Cognos  Corp.  and 
Acorn  Systems  Inc.  announced  an 
alliance  to  deliver  activity-based 
costing  and  corporate  perfor¬ 
mance  management  (CPM)  tech¬ 
nology.  The  alliance  will  pair 
Houston-based  Acorn's  Profit  An¬ 
alyzer  product,  which  is  designed 
to  prowde  enterprise  cost  and 
profit  metrics.  wHh  the  business  i 
intelligence  componertts  of  Cog¬ 
nos*  CPM  suite.  Burlington. 
Mass.'based  Cognos  will  iointty 
market  its  business  inteHigence, 
plannmg  and  forecasting  software  | 
and  scorecarding  technology  with  , 
Acorn  to  the  financial  services, 
distribution,  consumer  packaged 
goods  and  retafl  markets. 


Make  a  Technology 
Plan  for  2005 


I  HE  END  OF  THE  YEAR  is  a  traditional 
time  for  re-evaluation  of,  w'ell,  just  about 
everything.  But  one  area  in  particular  that 
gets  re-evaluated  in  most  organizations  is 
technology  strategy. 


Many  of  the  tcchnolop}' 
strategy  issues  you  need  to 
address  in  2005  fall  into  five 
oN-erlapping  areas;  server 
platform  architecture,  e-mail 
architecture,  security  archi¬ 
tecture.  enterprise  analytics, 
and  customer  interaction 
technology.  Hero's  a  quick 
planning  checklist  o'*  the  top 
issues  in  four  of  the  areas. 

(I’ll  discuss  enterprise  ana¬ 
lytics  in  a  future  column.) 

Server  platform  archftecture. 

As  usual,  the  most  interest¬ 
ing  issues  in  server  platform  architecture 
relate  to  database  management  sy.stems. 
Included  among  those  is  this  huge  ques¬ 
tion;  Is  the  row-based  relational  model 
approaching  the  end  of  its  useful  life? 
The  evidence  in  favor  of  nonrelational 
and-or  column-based  DBMS  architec¬ 
ture  keeps  mounting  —  especially  for 
XML-based  applications.  And  while  top* 
of-the-line  DBMSs  are  still  dearly  supe¬ 
rior  for  data  warehousing,  complex 
queries  or  nontabular  data  management, 
often  that’s  c.vactly  because  thej  ’re  get¬ 
ting  increasingly  far  fr(»m  simple  third- 
normal-form  data  structures.  Yet  con¬ 
ceptually.  there's  little  reason  to  sec  any 
limit  to  relational  systems’  continued 
evolution  and.  hence,  continued  market 
domination. 

Meanwhile,  at  the  other  end  of  the 
DBMS  spectrum,  what  about  commodity 
databa.«e  management  systems?  The)'  do 
a  good  job  for  many  smaller  online  trans¬ 
action  processing  applications.  Indeed, 
between  MySQL  and  the  once-exccllcnt 
Ingres,  even  open-source  DBMS  offer¬ 
ings  may  warrant  consideration. 

But  there's  a  yet  bigger  set  of  con- 
c'crns:  Just  which  kinds  of  platforms  arc 
“strategic”  in  your  enterprise?  N'iabic 
candidates  include  traditional  hardware. 
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storage  hardvsare  and  soft¬ 
ware.  DBMS,  operating  sys¬ 
tems.  application  servers, 
enterprise  information  inte¬ 
grators  and  several  kinds  i  >1' 
management  superstruc¬ 
tures.  And  are  the  choices 
dilTcrent  for  the  idealized 
grid  blade  fuiure  and  the 
big-eentral-server  present? 

One  giKKJ  ehj'icc  of  strate¬ 
gic  center  Ls  fimtf«ild:  DBMS 
-  analytics  engine  -  <tpcr;it- 
ing  sysiem(s)  -  network 
management  infrastructure. 
But  there  are  m.any  viable  alternatives. 

E-mail  architecture.  Now  here’s  a  de¬ 
pressing  .subject.  At  most  companies, 
e-mail  represents  a  huge  cv»si.  F.mplov  - 
ees  each  spend  hours  per  day  on  e-mail, 
grumbling  all  the  way.  E-mail  adminis- 
tn-ttion  is  a  huge  nightmare.  And  vendor-* 
aren’t  helping  much  —  Microsoft 
promised  key  fixes  over  a  decade  ago 
that  it  isn’t  even  close  to  delivering. 

So  how  about  a  radical  gambit?  E-mail 
is  a  constant  processing  stream  with  se¬ 
rious  se-curity  vulnerabilities  and  regret  • 
tably  little  in  the  way  of  DBMS  under¬ 
pinnings  at  this  lime.  That’s  exactly  the 
kind  of  processing  i)iai  docs  well  on  ded¬ 
icated  Appliances,  rather  than  general- 
purpi>se  wmpuiers.  And  you  shouldn't 
just  consider  e-mail  appliances;  e-mail 
outsourcing  is  alsv»  worth  a  serious  kM)k. 

It’s  also  time  for  serious  planning  in 
the  area  of  e-mail  archiving.  Regulators 
want  you  to  keep  huge  amounts  of 
e-mail;  lawyers,  for  very  similar  reasons.  | 
want  you  to  throw  it  all  away.  Mean¬ 
while.  a  tremendous  fraction  of  an  orga¬ 
nization’s  knowledge  is  buried  in  all  that  , 
e-mail,  and  archiving  technology  offers 
better  potential  access  to  it  all  the  time.  ^ 
Security  archftecture.  At  most  organiza¬ 
tions.  security  architecture  is  a  night¬ 


mare.  Dedicated  securiiv  appliance’' 
t  w  hich  work  welD.  centralized  scx-uritv 
management  tw  hich  Jivesn'i » and  gener¬ 
al  network  operations  nunagemem  sv-s- 
tems  don’t  plav  together  nearlv  .is  well 
as  they  should.  Me.inw  hile.  w  ireless  net¬ 
working  .ind  employees'  persi*nal  Inter¬ 
net  use  punch  ever  moiv  ht*ics  in  the  se- 
curii)  perimeier. 

You  can't  fix  the  whole  shebang,  but 
vou  can  and  should  J»>  at  le.ist  this; 

Break  your  network  imoeoncepiii.il 
pieces,  then  move  quicklv  to  secure  the 
most  criiivMl  pieci-s  as  lightlv  as  vou  e.in. 
IH'dicjled  intrusiiin-preventiofi  systems, 
network  sv-gment.ition  firv-walls.  new  fan 
gleJ  application-lev  el  wcuriiv  appli- 
.mces  and  s.»  on  —  you  can't  protwi 
your  whole  network  w  ith  ihow  tivh- 
noKigies.  hut  your  key  databases  L.»n  he 
protected  very  well. 

Amuherarea  in  which  your  planning 
should  probably  rev  up  tit's  OK  for  im¬ 
plement  athm  to  he  slowert  is  authenti¬ 
cation  and  identity  management  IDAP 
imc^raiion  will  eventually  be  a  necessity 
and.  despite  the  inherent  hassle,  many 
enterprises  will  evcntu.iUy  adopt  smart- 
card  bodge-based  iwo-faeior  authentica¬ 
tion  as  well 

T  here  arc  orber  large,  tfivubling  chal¬ 
lenges  that  I  could  mention  —  especially 
issues  relating  to  outsourcing.  But  stme 
this  is  the  holiday  seawm.  I'll  end  on  a 
happy  note  instead. 

Customer  interaction  technotogy.  This  area 
should  K'  on  vviur  list  for  rc'-evaniination 
every  year,  and  you  should  be  happy 
about  it.  Ttvhnology  fiw  managing  t-us- 
tomer  interactions  keeps gv’t ling  better  — 
on  the  Web.  in  call  centers  and  i*ven  in 
hoary  old  direct  mail  —  and  the  impact 
on  profits  is  almost  immediate.  Sirnm. 
don’t  walk.  U*  your  marketing  execqjHcs. 
and  ask  them  to  dream  up  a  technologi¬ 
cal  wish  list.  Chances  arc.  you'll  be  able 
to  give  them  a  lot  of  w  hat  they  w  ant. 

Hut  this  can  all  wait  until  the  new  ye.ir. 
Until  then,  have  a  great  hvvliday  seastin. 
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The  nation's  leading 
IT  executive  conference  for; 

•  CIOs,  CTOs  and  CSOs 
•VPs  of  IT 

•  Enterprise  IT  Directors 


PETER  SEN6E 

Senior  Lecturer,  Massadiusetts  Institute  of  Technology, 
Co-Author  of  Aeeence:  Human  Purpoae  and  the 
Fieid  of  the  Futu/e  and  author  of  The  Fifth  DisdpHne: 
The  Art  and  Practice  oftheLaaming  Organization 


Featured  speakers  include: 


Get  advice  from  award-winning 
CIOs  and  industry  experts  on: 


CHARUE  FELD 

Former  CIO  &  eteader,  Delta  Air  Lines 
Current  EVP,  ftirtfoKo  Mwagement  EDS 

PAUL  HIGDAY 

VP  rr  &  ^ogram  Development,  Owens  &  Minor,  Inc 


CREATING  state^f'the^  infras^cture 
to  expand  global  business  value 

EXTENDING  flexible  and  secure  supplier 
and  customer  connections 

ADVANCING  best  practices  in  IT 
governance  and  staffing,  regulatory 
compliance  and  project  leadership 

DESIGNING  a  technology  roadmap 
to  ensure  future  competitive  advantage 


RON  J.  PONDER 

Executive  VP  of  Information  Services 
WKj  CIO,  WsHftiint  Hearth  Networtts,  tec 

BETTE  WALKER 

VPandCIO.[MpKCoq, 


To  register  or  for  more  information, 
visit  wwwpremian  OOAMn/ewt 


For  sponsorship  opportunities,  call  1-888-239-4505 
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RELATIONSHIP  MAN¬ 
AGERS  ARE  CRUCIAL 
LIAISONS  BETWEEN 
TECHNOLOGY  AND 
BUSINESS.  BUT 
WITHOUT  PROPER 
SUPPORT,  THEY  CAN 
END  UP  BEING  DIS¬ 
TRUSTED  BY  BOTH. 
BYMARYBRANDEL 


SOME  |OBS  should  come  with 

small  print  attached,  just  like  the 
drug  advertisements  you  see  on 
TV.  Take  the  job  title  "relation¬ 
ship  manager,”  whose  warning 
label  might  read:  "Requires  great 
sense  of  humor  and  high  toler¬ 
ance  for  amb^ty.  Only  true  diplomats  should  ap¬ 
ply,  Do  not  attempt  unless  fully  supported  by  the  or¬ 
ganizational  structure." 

The  path  of  the  relationship  manager  is  a  tricky 
one,  fraught  with  political  potholes  and  organiza¬ 
tional  obstacles.  Companies  create  this  position  — 
also  called  account  manager,  client  mans^er,  cus¬ 
tomer  liaison  and  business  information  manager  — 
to  help  close  gaps  between  IT  and  the  business, 
whether  they  be  g^s  in  communication,  imagp, 
credibility,  trust  or  all  of  the  above  and  more. 

Relationship  mant^rs  are  called  upon  to  coordi¬ 
nate  IT  activities  across  a  given  business  unit  and 
drive  initiatives  that  position  the  unit  for  competi¬ 
tive  success,  accordirig  to  Marc  Cecere,  an  analyst 


at  Forrester  Research  Inc.  in  Cambridge,  Mass. 

Some  people  hired  into  this  role  have  spent  their 
careers  in  IT  but  also  have  solid  business  acumen 
and  deep  knowledge  of  business  processes.  Others 
are  senior-level,  technology-literate  business  people 
willing  to  learn  the  inner  workings  of  IT. 

But  when  well-meaning  companies  slap  a  rela¬ 
tionship  manager  on  a  rift  between  two  warring  par¬ 
ties  like  a  Band-Aid  and  hope  for  the  best,  things  can 
go  wrong.  “Where  there’s  a  deep-seated  lack  of 
n/business  alignment  and  the  relationship  between 
the  client  and  IT  is  strained,  trying  to  bring  m  a  rela¬ 
tionship  manager  to  paper  over  some  of  these  prob¬ 
lems  is  not  going  to  be  successful,”  says  run  High¬ 
tower.  a  fellow  at  Cutter  Consortium  in  Arlington. 
Mass.,  who  had  a  relationship  manager  role  as  an  IT 
manager  at  a  small  utility. 

“If  ftie  relationship  between  IT  and  the  business  is 
already  unstable,  the  relationship  manager  is  just 
someone  wdio’s  putting  out  fires  and  smoothing  out 
problems,"  agrees  Craig  Symons,  a  Forrester  analyst 
“That’s  not  going  to  get  you  very  far." 


BRIDGINGTHEGAP 
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Indeed,  while  40  out  of  100  cx)inpanies  surveyed  by 
Forrester  in  August  said  they  have  a  relationship 
manager  function,  there  are  many  ways  to  get  it 
wrong.  Cecere  says  (see  sidebar  below). 

Hiring  the  right  person  is  ^e  first  challenge.  It's  a 
rare  bird  who  can  hobnob  with  techies  and  business 
wonks  alike  and  also  ha.s  the  people  skills  to  resolve 
conflict  between  the  groups,  earn  credibility  through¬ 
out  the  ofganization  and  forge  a  productive  align¬ 
ment  that  enables  IT  to  meet  business  objectives. 

Take  Nan  Simon,  a  relationship  manager  with  the 
title  of  business  information  manager  at  Novartis 
Pharmaceuticals  Corp.  in  East  Hanover.  N.J.  She 
came  from  IT  but  had  a  lot  of  background  in  finan¬ 
cial  systems.  “My  first  love  was  systems  analysis  and 
working  with  business  partners  to  understand  their 
requirements,"  she  says. 

Or  look  at  Andrew  Sheppard,  director  of  relation¬ 
ship  management  at  Allegis  Group  Inc.,  a  contract 
services  provider  in  Hanover.  Md.  He  has  been  in 
IT  for  18  years,  but  he  also  holds  an  undergraduate 
degree  in  business  management  and  psychology 
and  a  master’s  degree  in  IT  management. 

Negotiation  SIdlb 

Relationship  managers  must  be  crack  negotiators. 
'There  can  be  competing  objectives,  and  you  have  to 
defuse  emotion  to  help  make  a  fact-based  decision." 
says  Gina  Piscopo,  who  has  a  relationship  manager 
role  as  a  director  in  the  marketing  technology  area  of 
Allstate  Protection  Technology  at  Allstate  Insurance 
Ca  in  Northbrook,  111.  For  instance,  when  IT  was 
struggling  with  a  tight  deadline  for  a  business  proj¬ 
ect.  Piscopo  stepped  in  to  ask  people  on  the  business 
side  if  they  could  scale  back  the  fimctionality  of  what 
they  wanted  delivered  by  tl^t  deadline. 

That  kind  of  active  negotiating  can  lead  to  some 
sticky  situations.  “You  have  to  have  thick  skin."  says 
loan  Mann,  associate  professor  of  IT  at  Old  Domin¬ 
ion  University  in  Norfolk.  Va.  “You  have  to  be  able  to 
roll  with  the  punches  and  be  very  comfortable  in  the 
face  of  uncertainty." 

Mediator,  translator,  persuader,  f^Uitator.  expedi¬ 
tor  —  these  are  roles  Mann  says  relationship  man¬ 
ors  need  to  play.  Not  to  mention  the  langyages 
they  Deed  to  spe^  To  earn  the  respect  of  IS,  you 
have  to  speak  at  the  router.  TI  and  application  code 
level."  says  Sheppard.  “With  the  business  people,  it's 
important  to  talk  at  the  profit/loss  and  deliverables 
level." 

But  the  relatioQship  manager  can’t  play  all  these 


roles  on  his  own.  Most  compa-  - 

nies  find  that  they  need  to  tweak 
organizational  charts  to  provide 
the  .support  they  need  to  strad¬ 
dle  the  space  between  IT  and  the 
business;  otherwise,  the  relation- 
.ship  manager  can  easily  fall  into 
thin  air.  “I  have  not  seen  the  role 
be  successful  when  it's  a  stand¬ 
alone  liaison  role,"  says  Mike 
Roche,  vice  president  of  Allstate 
Protection  Technology. 

Allstate  began  hiring  relation¬ 
ship  managers  two  years  ago.  At 
the  time.  IT  was  retooled  from 
a  shared-services  organization 
with  an  admitted  “arm’s-length 
relationship  with  the  business." 

Roche  says,  to  a  group  with  a 
CIO  and  dedicated  IT  staff  for 
each  of  the  two  major  arms  of 
the  company. 

Relationship  managers  were  installed  to  serve  as 
liaisons  between  IT  and  the  business  functions,  but 
the  setup  was  only  somewhat  successful.  Roche  says. 
The  problem,  he  determined,  was  that  the  individu¬ 
als  in  these  roles  had  no  accountability  for  delivering 
on  protects.  "It’s  easy  to  be  an  order  taker  and  create 
demand  without  having  any  indication  of  what’s  rea¬ 
sonable  from  a  delivery  standpoint."  he  explains. 

Now.  the  relationship  managers  have  teams  of  de¬ 
velopers  and  project  managers  assigned  to  them,  and 
—  most  imporunt  —  they  arc  responsible  for  achiev¬ 
ing  measurable  results.  “We  expect  these  lead  people 
to  be  innovative  in  terms  of  process  improvements." 
Roche  says. 

Without  that  kind  of  accountability,  he  says,  the  re¬ 
lationship  manager  stands  no  chance  of  earning  cred¬ 
ibility  and  may  even  create  a  layer  of  redundancy.  “If 
they’re  pushing  through  requirements  but  don’t  un¬ 
derstand  the  technology  that  supports  it.  someone 
has  to  rework  everything  they  do."  Roche  says. 

The  evolution  of  the  role  at  Allstate  is  not  unusual. 
“It's  not  like  you  can  put  in  a  magical  solution  on 
Day  1."  says  Rob  James.  CIO  at  Novartis.  “You  have  to 
build  support  processes  and  fine-tune  things  as  you 
move  forward" 

Novartis  decided  three  years  ago  to  move  away 
from  its  centralized  IT  organization  to  one  whose 
initiatives  are  driven  and  firnded  by  the  business 
units.  Each  business  fiinctioo  was  assigned  a  rela- 
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lack  of  business  cr^dtHlitv. 
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tionship  manager,  called  a  busi¬ 
ness  information  manager,  or 
BIM.  Several  centralized  FT 
groups  remained  to  support 
cross-enterprise  needs. 

At  first,  the  BIMs  worked 
alone  or  in  small  teams,  but  as 
demand  grew.  BIM  groups  ex¬ 
panded  to  include  dedicated 
project  mantlets,  developers 
and  support  staffers.  The  new 
structure  frees  them  to  focus  on 
strategic  issues.  "I’m  not  a  lone 
ranger  out  there.”  says  Simon, 
who  is  a  BIM  for  three  groups  at 
Novartis.  "If  I  get  a  request.  I 
have  control  over  how  quickly  I 
can  respond  because  I  have  re¬ 
sources  at  my  disposal." 

“Not  all  these  things  were  in 
place  from  the  start."  James  says. 
The  opportunities  will  continue  to  be  driven  by 
what  the  business  wants  us  to  do." 

At  Allegis.  the  relationship  manager  function  has 
undergone  a  major  transformation.  Today,  the  role  is 
solidly  positioned  in  IT.  but  it  wasn’t  always  that  way. 
Until  2002.  Sheppard  was  one  of  five  “business  infor¬ 
mation  officers”  the  company  had  embedded  within 
its  operating  units.  Sheppard  and  the  others  had  no 
direct  repons.  and  they  reported  to  IT  but  were  seen 
as  extensions  of  the  business. 

While  the  overall  setup  worked  well,  the  group  had 
an  unfortunate  image.  IT  tended  lo  view  each  of  its 
requests  as  just  another  problem  to  solve,  and  the 
business  people  didn't  like  hearing  why  some  of  their 
IT  requests  weren't  feasible.  "Either  way.  we  were 
seen  as  the  bad  guys  all  too  often,"  Sheppard  says. 

With  no  support  staff,  Sheppard  and  his  cohorts 
were  also  focusing  too  often  on  tactical  issues,  he 
says.  *‘I  wasn’t  doing  the  job  that  adds  value  to  the 
whole  organization,  which  is  looking  for  the  strate¬ 
gies  and  initiatives  for  the  next  year,"  he  says. 

Two  years  ago,  during  the  economic  downturn.  Al- 
legis  dissolved  all  of  its  business  information  officer 
positions  except  for  Sheppard’s.  Now.  as  the  only  rela¬ 
tionship  manager  left,  he  supports  the  IT  needs  of  all 
the  operating  companies  and  reports  to  the  CIO.  But 
he  has  three  groups  to  support  him  with  service-level 
agreements,  day-to-day  deliverables,  new-process  de¬ 
velopment  and  internal  public  relations.  That  support 
"allows  me  not  to  get  stuck  in  the  weeds."  he  says.  “I 
can  deal  with  the  business  side  at  a  higher  level." 

These  days.  Sheppard  feels  he’s  seen  as  less  of  a 
bad  guy.  although  as  a  relationship  manager,  you  nev¬ 
er  really  take  off  the  black  hat.  he  .says.  “When  they 
don’t  hear  what  they  want  to  hear,  they’re  still  un¬ 
happy  about  that."  Sheppard  says. 

Like  other  companies  with  relationship  managers, 
Allegis  will  continue  to  evolve  the  role  as  business 
requirements  dictate.  And  having  business  support  is 
the  top  priority  for  making  the  position  work.  Says 
Novartis  James.  "You  have  to  do  tliis  in  total  partner¬ 
ship  with  the  business."  O  51068 

Brandel  is  a  Computerworid  contributing  writer  in 
Grand  Rapids,  Mich.  Ymt  can  contact  her  at  maty. 
brandei@comeast.net. 
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Kobayashi  Named 
CIO  at  Ross  Stores 

Ross  StwM  Inc.  in  PiMsMton. 
CaRf,  hn  appdnlsd  MCWa  K. 
NOBRinSM  senior  vice  pTMidant 
and  CIO.  KobayasN  had  spent  the 
past  18  yean  at  Accenhn  Lid. 

He  has  bean  serving  in  an  Merim 
laadarsNp  role  in  Rose  Stores’ IT 
department  since  July. 


PPG  Industries 
TapsTrainham 

JMESJUmiMMIIlnbeai 
■nioMid  «in  prasMinl  of  Kl¬ 
ein  and  iKliiKilogy  M  PPO IR- 
diBtriH  he,  tMMu^i-taad 
ni>taral|ainl,ltataeand 
aaebills.  He  metaulir  imM  el 
IneWa,  hfineriy  Oungnl  TaiHa 
and  hdariors,  Ik  naariy  25  ynera. 
Ha  aM  ddaf  Minatagy  oncer  at 
Inaisti  ftem  2002  onU  the  con- 
panir's  dheatnura  frem  DuftM 
CaeardKlMsKar. 


Lewis  Takes  CTO 
Post  at  LjqukDS 

UqutdX&comlnc^ibulnaK-lo- 
hndnaKmaitialplacafafhtand- 
nama  anan  inwfilary  in  Hew 
tMi.  amoMad  MMI  lam  K 
era  Ha  atadad  at  Uqtdtnsxom 
in  Mandi  2003  K  aica  meidanl 
ol  iT.  haaioiBly,  Imk  ana  vica 
praaldaidaitadinaiogyalM- 
iandc  Ranordi  Oranp  (now  part  of 
Wamr  MuHc  Omip).  Lewie  has 
atao  craalad  tadinoioglK  hr 
CHbank,  Mohroh  tnc,  Lucent 
Tachnohgta  he.  and  Sohmon 
Brothaiatnc. 


ItemfieM  Appoints 
UkelsonasCTO 

itamtWd  he,  a  proaidK  of  data 
tnnahnnaltcn  sofMta  h  San 
Hafao,  CaH,  appohlad  JWS 
IMasaM  K  CTO.  IMaon  hhe 
itandlaU  frani  BM  braaTs  ehhat 
Taohneboy  UidL  whan  ha  ww 
CroandhueinoMdo.alop.nenl 
managar.  nanfauily.  hi  WM  a 
dapaftnanl  ganaial  managw  at 
BM^  Thomaa  J.  Watian 
Raaeardi  Caithr. 
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Cleaning  House 


Housekeeping  has  never  been  my 
strongest  suit,  but  I’ve  learned  a  few 
things  along  the  way  that  have  helped 
me  stay  somewhat  organized.  For  in¬ 
stance,  if  I  buy  something  new  (whether 
it’s  a  book  or  a  shirt),  I  try  to  shed  a  similar  item  from 
my  current  collection.  This  helps  me  avoid  clutter  and 
keep  the  number  of  things  in  my  house  to  a  somewhat 
manageable  level  Before  I  implemented  this  plan,  I 
found  myself  acquiring  too  much  stuff  that  I  didn’t  use 
often  enough  to  justify  keeping. 


Many  IT  organizations 
are  in  tbe  same  position 
when  it  comes  to  their 
application  portfolios. 

After  years  of  acquiring 
software  systems  and  not 
getting  rid  of  anything, 
companies  have  severe  ap> 
plication  clutter.  As  a  re¬ 
sult.  given  their  limited 
financial  resources,  they 
can't  meet  the  current 
demand  for  IT  unless 
they  “turn  oflT  some 
applications. 

Put  another  way.  they 
need  to  take  something  off 
their  plates  in  order  to  make  room 
for  the  next  course. 

This  makes  a  lot  of  sense,  actually. 
The  practice  of  continually  adding  to 
the  IT  burden  while  holding  fr  bud¬ 
gets  and  bead  counts  relatively  flat  is 
obviously  problematic.  Yet  that's  ex¬ 
actly  what  many  companies  have  done 
since  tbe  early  2000s.  And  this  prac¬ 
tice  is  one  of  tbe  reasons  why  many 
CIOs  feel  that  they  simply  don't  have 
enough  resources  to  meet  internal  de¬ 
mand  for  IT. 

Since  most  organizations  add  appli¬ 
cations  bft  rarely  get  rid  of  any.  it’s 
not  uncommon  to  And  that  a  large  or¬ 
ganization  supports  several  hundred 
applications,  including  packaged  and 
custom-developed  systems.  (Fm  not 


counting  shelfware.) 

Clearly,  most  CIOs  could 
argue  that  an  inventory 
and  bousecleaning  of  the 
application  portfolio  may 
be  in  order. 

Turning  off  some  exist¬ 
ing  systems  sounds  like 
a  pretty  straightforward 
solution,  but  it's  not 
When  CIOs  embark  on  a 
bousecleaning  prolect, 
they  oTlen  And  that  it's 
frau^t  with  challenges. 

The  following  are  some 
of  the  key  problems  that 
arise: 

■  Human  nature  is  such  that  nobody 
wants  to  give  up  any  application  or 
service  once  th^'ve  had  it.  This  is  es¬ 
pecially  true  for  line-of-business  man¬ 
agers  and  their  software  systems. 

■  Some  systems  are  so  old  that  no¬ 
body  remembers  who  ordered  them. 

■  IT  lacks  the  political  clout  to  make 
business  managers  participate  in  this 
exercise. 

But  there  are  ways  to  make  this 
housecleaning  less  painful: 

■  Incorporate  existing  systems  into 
the  current  application  portfolio  man, 
agement  framework.  companies 
use  portfolio  management  as  a  way  to 
prioritize  new  IT  initiatives. 

Adding  older  systems  to  tbe  portfo¬ 
lio  allows  IT  to  leverage  its  investment 


in  portfolio  management  and  tackle 
questions  about  existing  applicatfons 
with  the  same  audience  that  partici¬ 
pates  in  prioritization  discussions. 

■  Provide  business  leaders  with 
good  information  to  make  decisions 
about  the  future  of  applications. 

For  instance,  if  you  were  to  ask  a 
marketing  director  if  he  could  live 
without  a  current  order- tracking  sys¬ 
tem.  he  would  probably  say  no.  But  if 
you  ask  that  same  manager  whether 
it's  worth  the  SI  million  a  year  that  it 
costs  to  maintain  tbe  system  for  the  14 
business  people  who  use  it  that  bc^ 
comes  a  different  story. 

In  other  words,  give  business  people 
tbe  information  they  need  to  weigh 
the  costs  and  beneAcs  of  tbe  decision. 

■  Sell  the  housecleaning  initiative 
internally  so  that  there  is  high-level 
buy-in.  A  chief  Anancial  officer  or  oth¬ 
er  eiKcutive  champion  can  lend  credi¬ 
bility  to  the  effort.  Such  acceptance 
also  gets  IT  out  of  the  unenviable  pen 
sition  of  trying  to  take  systems  away 
from  the  business  leaders  and  users. 

•  Try  to  have  tbe  consumers  of  IT 
bear  the  cost  of  IT.  If  business  units 
don't  directly  pay  for  wdiai  they  con¬ 
sume.  it's  very  hard  to  get  them  to  give 
up  anything.  If  getting  rid  of  older  or 
underused  systems  is  in  your  future, 
you  may  have  to  look  at  your  IT  cost 
recovery  (chargeback)  plaa 
Ultimately,  tbe  solution  to  this  prob¬ 
lem  is  to  get  tbe  business  to  assume 
ownership  of  tbe  systems  they  have  IT 
build.  Ownership,  of  course,  extends 
for  the  entire  life  cycle  of  the  system, 
including  retirement. 

Unfortunately,  many  companies 
haven’t  reached  the  point  where  busi¬ 
ness  units  truly  own  tbe  IT  software 
assets.  Until  they  get  to  this  point.  IT 
organizations  should  be  prepared  to 
offer  some  help  with  the  cleanup  of 
applicatioD  portfolios.  O  S1067 
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Indeed,  w  hilc  40  uui  ol  lOil  companies  surv'cyed  by 
bi>rri's{cr  in  August  said  they  have  a  relationship 
manager  function,  there  are  many  ways  to  get  it 
wrong.  Cecere  Sitys  (see  sidebar  below  ). 

Hiring  the  right  person  is  the  first  challenge.  It's  a 
rare  bird  w  h4>  can  hobnob  with  techies  and  business 
wonks  alike  and  also  has  the  people  skills  to  resolve 
conflict  between  the  groups,  earn  credibility  through¬ 
out  the  organization  and  fl*rgc  a  productive  align¬ 
ment  that  enables  I  T  to  meet  busine.ss  objectives. 

lake  Nan  Sinu*n.  a  relaiii>nship  manager  with  the 
title  «*f  business  information  manager  -it  Novartis 
Pharmaceuticals  Corp.  in  Kast  Hanover.  N.J.  She 
came  from  I  r  but  had  a  hn  of  background  in  finan¬ 
cial  systems.  “My  first  love  was  systems  analysis  and 
working  with  business  partners  to  understand  their 
requirements."  she  says. 

Or  look  .It  Andrew  Sheppard,  direcutr  of  relation¬ 
ship  management  at  Allegis  (iroup  Inc.,  a  contract 
services  provider  in  Hanover.  Md.  He  has  been  in 
IT  for  IK  years,  but  he  also  holds  an  undergraduate 
degree  in  business  management  and  psychology 
and  a  master's  degree  in  IT  management. 

Negotiation  Skills 

Kelationship  managers  must  be  crack  negotiators. 
"There  can  be  et'mpeting  objectives,  and  you  have  to 
defuse  emutum  to  help  ntike  a  fact-based  decision.  " 
say’s  Gina  Plscopo.  who  has  a  relationship  manager 
role  a.s  a  direvtor  in  the  marketing  technology  area  of 
Allstate  Ihiitcciion  Technology  at  Allstate  Insurance  , 
Go.  in  Northbrook.  HI  For  instance,  when  I  T  was 
struggling  with  a  fight  deadline  for  a  busim^  proj¬ 
ect,  Piscopo  stepped  in  to  ask  people  on  the  business 
side  if  they  ciiuld  scale  back  the  functionality  of  what 
they  wanted  delivered  by  that  deadline. 

That  kind  of  active  ni*gotiating  can  lead  to  some 
sticky  situations.  "You  have  to  have  thick  skin.”  says 
hvan  .Mann,  ascsociatc  professor  of  IT  at  Old  Domin¬ 
ion  University  in  Norfolk.  Va.  'You  have  to  be  able  to 
roll  with  the  punches  and  be  very  comfortable  in  the 
face  of  uncertainty." 

Mediator,  translator,  persuader,  facilitator,  expedi¬ 
tor  —  these  are  roles  Mann  says  relationship  man¬ 
agers  need  to  play.  Nt>i  ii>  mcniitm  the  languages 
ihv^y  need  r«  speak.  “To  earn  the  respect  of  IS.  you 
have  to  speak  at  the  router.  TI  and  application  code 
level."  says  Sheppard.  "With  the  bu.siness  people,  it's 
important  to  talk  at  the  prvifiuloss  and  deliverables 
level” 

But  the  relationship  manager  can't  play  all  these 


role.s  on  his  own.  Most  compa¬ 
nies  find  (hat  they  need  to  tweak 
organizational  charts  to  provide 
the  support  they  need  to  strad¬ 
dle  the  space  between  I  T  and  the 
busine.ss;  otherwise,  the  relation¬ 
ship  manager  can  easily  fail  into 
thin  air.  "1  have  not  seen  the  role 
be  successful  when  it's  a  stand¬ 
alone  liaison  role."  s;iys  Mike 
Roche,  vice  president  of  .Allstate 
I  Hrotociion  Technology. 

Allstate  began  hiring  relation¬ 
ship  managers  two  years  ago.  At 
the  time.  IT  was  retooled  from 
a  shared-services  organization 
with  an  admitted  "arm's-length 
relationship  with  the  business."  I 
Roche  says,  n*  a  group  with  a  I 
CIO  and  dedicated  I  T  staff  for  ^ 
each  of  the  two  major  anns  of 
the  company. 

Relationship  managers  were  installed  to  serve  as 
liaisons  between  IT  and  the  bu.sincss  functions,  but 
the  setup  was  only  somewhat  successful.  Ri*che  says. 
The  pn»blem.  he  determined,  was  that  the  individu¬ 
als  in  these  roles  had  no  accountability  fur  delivering 
on  projects.  "It's  easy  to  be  an  order  taker  and  create 
demand  without  having  any  indication  of  what's  rea- 
stmable  from  a  delivery  standpoint."  he  explains. 

Now.  the  relationship  managers  have  teams  of  de¬ 
velopers  and  project  managers  assigned  to  them,  and 
—  most  important  —  they  are  responsible  ftir  achiev¬ 
ing  measurable  results.  "We  expect  these  lead  petiple 
to  be  innovative  in  terms  of  process  improvements." 
Roche  says. 

Without  that  kind  of  accountability,  he  says,  the  re¬ 
lationship  manager  stands  no  chance  of  earning  cred¬ 
ibility  and  may  even  create  a  layer  of  redundancy.  "If 
they’re  pushing  through  requirements  but  don’t  un¬ 
derstand  the  technology  that  supports  it.  someone 
has  to  rework  everything  they  do.”  Roche  says. 

The  evolution  of  the  role  at  Allstate  is  not  unusual. 
"It’s  not  like  you  can  put  in  a  magical  solution  on 
Day  I.  says  Rob  lames.  CIO  at  Novartis.  “You  have  to 
build  support  processes  and  fine-tune  things  as  you 
tnove  forward." 

Novartis  decided  three  years  ago  to  move  away 
from  its  centralized  IT  organizatittn  to  one  whose 
initiatives  are  driven  and  funded  by  the  business 
units.  Lach  business  function  was  assigned  a  rcla- 


Have  strong  IT  backgrouniis. 
especially  in  current  and 
emerqing  technologies. 

Have  strong  interpersonal  skills, 
so  they  can  interact  with  people  and  act 
as  liaisons  between  users  and  17. 

Report  to  IT.  ideally  to  the  CIO. 

Live  in  the  business  unit,  at  least  tem¬ 
porarily.  to  develop  domain  eiperitse, 

Have  the  active  and  personal 
support  and  mentoring  of  the  CIO. 


POLITICAL  PITFALLS 

RiBiationshgi  rnanaoBts  can  help  akgn  ff  proiects  Mth  bu^ 
nesB  goiis.  bu(  tfiey  face  many  obstadB.  says  Rsnester 
anaiyd  Mvk  Ceoare.  Han  are  some  of  them. 

LKfceHwBiweei  riedWIy.  Relationship  tnanagere  who 
don't  rally  undeestand  tKBines  processes  won't  be  incA^ 
n  otanmng  meehnos  or  IT  decaon-malano.  The  busviess  side 
may  even  see  Mm  as  sores  (or  rr  TbaMJidth(s.usesentfrT 
oeopte  wM  have  been  aagried  U>  Oifiness  teim  for  sev^ 
yean  and  ernbed  them  n  Mf  busmsa  units  Ic  enable  eiten- 
She  knowtedge  (ranslei 

Ladi  ef  rr  credbCiy.  Relationship  msnagen  met  be  ^ 


ORGANIZATIONAL  OBSTACLES 

10  speak  etteigeridy  on  the  possbttes  and  kmitalions  ol  a 
broad  range  of  technoloves.  They  shoi40t«veye«s(rf^ 
erne  n  tecfmioQy  as  wel «  an  estaUBhad  netw^ 

IT  departmant  80  ff  doesn't  see  Mm  as  users. 

Uck  of  coHaboratkm  wfth  ether  relitiofah^ 

agera.  H  ratahonship  managers  don't  work  ar.  a  laam.  thee 
iTOwtet^  (rf  M  buemess  and  ff  iiety  be  kag^ 
lecihie  ImoiMedge.  which  can  be  shared  in  rneettn^ 

Thilp  daefc"  Image,  White  one  of  Mir  rotes  s  to  help  with 
iadtcalandretetioiship-tuikkngtas^  suchastarigonniers 
they  fTtal  locus  on  Mstrategw  component  of  Ihorwork 


tionship  manager,  called  a  busi¬ 
ness  information  manager,  or 
BIM.  Several  centralized  IT 
gr»>ups  remained  to  support 
cross-enterprise  needs. 

At  first,  the  BIMs  worked 
alone  or  in  small  teams,  but  as 
demand  grew,  BIM  groups  ex¬ 
panded  to  include  dedicated 
project  rminagcrs,  dinelopers 
and  support  stafl'ers.  The  new 
structure  frees  them  to  focu.s  on 
strategic  issues.  "I'm  not  a  lone 
ranger  out  there."  says  Simon, 
who  is  a  RIM  for  three  groups  at 
Novartis.  "If  I  get  a  request.  I 
have  control  over  how  quickly  I 
can  respond  because  I  have  re- 
souret-s  .it  my  disposal." 

"Not  all  those  things  w  ere  in 
place  from  the  start."  lames  says. 
'The  opportunities  will  continue  to  be  driven  by 
what  (he  business  wants  us  to  do." 

At  Allegis.  the  relationship  manager  function  has 
undergone  a  major  tninsformaiion.  Today,  the  role  is 
solidly  positioned  in  IT.  but  it  wasn't  always  that  way. 
Until  2002,  Sheppard  was  one  of  five  "business  infor¬ 
mation  ortlccrs"  the  company  had  embedded  within 
its  operating  units.  Sheppard  and  the  others  h.id  no 
direct  reports,  and  they  reported  to  I  T  but  were  seen 
as  extensions  of  the  business. 

While  the  overall  wtup  worked  well,  the  group  h.id 
an  unfortunate  image.  IT  tended  to  view  each  of  its 
requests  .is  just  another  pmblem  to  solve,  and  the 
busine-ss  people  didn't  like  hearing  why  some  of  their 
.  I  T  requests  weren't  feasible.  "Either  way.  we  were 
'  seen  as  the  bad  guys  alt  ttMi  often.”  Sheppard  says. 

With  no  support  staff.  Sheppard  and  hLs  cohorts 
were  also  tiKusing  too  often  on  tactical  issues,  he 
says.  “1  wasn't  doing  the  job  that  adds  value  to  the 
whole  organization,  which  is  lo<»king  for  the  strate¬ 
gics  and  initiatives  for  the  next  year."  he  says. 

Two  years  ago.  during  the  economic  downturn.  Al- 
legi-s  dissolved  all  of  Its  business  information  officer 
positions  except  for  Sheppard’s.  Now.  as  the  only  rela¬ 
tionship  manager  left,  he  supports  the  IT  needs  of  all 
the  opcr.iting  companies  and  reports  to  the  CIO.  But 
he  has  three  groups  to  support  him  with  scn  ice-lcvel 
agreements,  day-to-day  deliverables.  ncw-priKess  de¬ 
velopment  and  inicm.ll  public  relations.  That  support 
"allows  me  not  to  get  stuck  in  the  weeds.”  he  sa\-s.  "I 
can  deal  with  the  business  side  at  a  higher  level" 

The.w  days.  Sheppard  feels  he’s  seen  as  less  of  a 
bad  guy.  although  as  a  relationship  manager,  you  nev¬ 
er  really  take  off  the  black  hat,  he  says.  "When  they 
don't  hear  what  they  want  to  hear,  thes  re  still  un- 
I  happy  about  that."  Sheppard  says. 

I  Like  other  companies  with  relationship  managers. 

;  Allegis  will  continue  to  evolve  the  role  as  busim'ss 
I  requirements  dictate.  And  having  business  support  is 
,  the  lop  priority  for  making  the  position  work.  Says 
I  Novartis  J.imes,  “You  have  to  do  this  in  total  partner- 

I  ship  with  the  business."  C  51088 

I  Brandel  is  a  Computerworld  contributing  writer  in 
I  Grand  Rapids.  Mich.  You  can  contact  her  at  mary. 

I  brondel^'comcost.nef. 
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Kobayashi  Named 
CIO  at  Ross  Stores 

Ross  Stores  Inc.  in  Ptaasanton. 
Calif.,  has  appoirrted  MDUa  K. 
K06AYASM  senior  vice  president 
and  CIO.  Kobayashi  had  spent  the 
past  t8  years  at  Accenture  Ltd. 

He  has  been  serving  in  an  interim 
leadership  role  in  Ross  Stores'  IT 
department  since  July. 


PPG  Industries 
Taps  Trainham 

JAMES  A.  TRAMHAM  has  been 
appointed  trice  president  of  sci¬ 
ence  and  technology  at  PPG  In¬ 
dustries  Inc.,  a  PHt^rgh-based 
maker  of  paint,  stains  and 
sealants.  He  previously  vmrfced  at 
Irrvista.  formerly  DuPont  Textiles 
and  Interiors,  for  nearly  25  years. 
He  was  chief  technology  officer  at 
Invista  from  2002  until  the  com¬ 
pany’s  divestiture  from  DuPont 
Co.  earfier  this  year. 


Lewis  Takes  CTO 
Post  at  LiquidlS 

LiquidXS.com  Inc.,  a  business-to- 
business  marketplace  for  brand- 
name  excess  inventory  in  New 
York,  appointed  AtVW  L£¥R5  as 
CT0.Hestar1edatLiquidXS.com 
in  March  2003  as  vice  president 
of  IT.  Previously.  Lewis  was  vice 
president  of  technology  at  At- 
Urttic  Records  Group  (now  part  of 
Mterner  Music  Group).  Lewis  has 
also  created  technoiogies  for 
dtibank.  Motorola  Inc..  Lucent 
Technologies  Inc.  and  Solomon 
Brothers  he. 


Itemfield  Appoints 
UkelsonasCTO 

Itemfield  he.,  a  provider  of  data 
transformation  software  h  San 
Mateo.  CalH..  appointed  JACOB 
UKEiSON  as  CTO.  Ukelson  joins 
Itemfield  from  IBM  IsraeTs  Global 
Technology  Unit,  where  he  was 
CTO  and  business  development 
manager.  Previously,  he  was  a 
department  general  manager  at 
IBM’s  Thomas  J.  Watson 
Research  Center. 


HAKBAUA  (.OMdLSKI 


Cleaning  House 


Housekeeping  has  never  been  my 
strongest  suit,  but  I’ve  learned  a  few 
things  along  the  way  that  have  helped 
me  stay  somewhat  organized.  For  in¬ 
stance,  if  I  buy  something  new  (whether 
it’s  a  book  or  a  shirt),  I  try  to  shed  a  similar  item  from 
my  current  collection.  This  helps  me  avoid  clutter  and 
keep  the  number  of  things  in  my  house  to  a  somewhat 
manageable  level.  Before  I  implemented  this  plan,  I 
found  myself  acquiring  too  much  stuff  that  I  didn’t  use 
often  enough  to  justify  keeping. 

Many  IT  oi^nizations 


are  in  the  same  position 
when  it  comes  to  their 
application  portfolios. 

After  years  of  acquiring 
software  systems  and  not 
getting  rid  of  anything, 
companies  have  severe  ap¬ 
plication  clutter.  As  a  re¬ 
sult.  given  their  limited 
financial  resources,  they 
can’t  meet  the  current 
demand  for  IT  unles.s 
they  ‘turn  ofT*  some 
applications. 

Put  another  way.  they 
need  to  take  something  off 
their  plates  in  order  to  make  room 
for  the  next  course. 

This  makes  a  lot  of  sense,  actually. 
The  practice  of  continually  adding  to 
the  IT  burden  w'hile  holding  IT  bud¬ 
gets  and  head  counts  relatively  flat  is 
obviously  problematic.  Yet  that’s  ex¬ 
actly  what  many  companies  have  done 
since  the  early  2000s.  And  this  prac¬ 
tice  is  one  of  the  reasons  why  many 
CIOs  feel  that  they  simply  don't  have 
enough  resources  to  meet  internal  de¬ 
mand  for  IT. 

Since  most  organizations  add  appli¬ 
cations  but  rarely  get  rid  of  any,  it's 
not  uncommon  to  find  that  a  large  or¬ 
ganization  supports  several  hundred 
applications,  including  packaged  and 
custom-de\'eloped  systems.  (I’m  not 


counting  shelfware.) 

Clearly,  most  CIOs  could 
argue  that  an  inventory’ 
and  houseclcaning  of  the 
application  portfolio  may 
be  in  order. 

Turning  off  some  exist¬ 
ing  systems  sounds  like 
a  pretty  straightforward 
solution,  but  it’s  not. 

When  CIOs  embark  on  a 
housecleaning  project, 
they  often  find  that  it's 

_ _ _  fraught  with  challenges. 

bw  M  TTie  following  arc  some 

of  the  key  problems  that 
arise: 

■  Human  nature  is  such  that  nobody 
wants  to  give  up  any  application  or 
service  once  they’ve  had  it.  This  is  es¬ 
pecially  true  for  line-of-busincss  man¬ 
agers  and  their  software  systems. 

■  Some  systems  are  so  old  that  no¬ 
body  remembers  who  ordered  them. 

•  IT  lacks  the  political  clout  to  make 
business  managers  participate  in  this 
exercise. 

But  there  are  wa>'5  to  make  this 
housecleaning  less  painful: 

■  Incorporate  existing  systems  into 
the  current  application  portfolio  man¬ 
agement  framework.  Many  companies 
use  portfolio  management  as  a  way  to 
prioritize  new  IT  initiatives. 

Adding  older  systems  to  the  portfo¬ 
lio  allows  IT  to  lever^je  its  investment 


in  portfolio  management  and  tackle 
questions  about  existing  applications 
with  the  same  audience  that  partici¬ 
pates  in  prioriiiz;)iion  discussions. 

■  Provide  busini-ss  leaders  with 
good  information  to  make  decisions 
about  the  future  of  applications. 

For  instance,  if  you  were  to  .ask  a 
marketing  director  if  he  could  live 
without  a  current  order-tracking  sys¬ 
tem.  he  would  probably  say  no.  But  if 
you  ask  th.U  same  manager  whether 
it's  wonh  the  Si  million  a  year  that  it 
costs  to  maintain  the  system  for  the  14 
business  people  who  use  it.  that  be¬ 
comes  a  different  stor\. 

in  other  words,  give  business  petiple 
;  the  information  they  need  to  weigh 
I  the  costs  and  benefits  of  the  decision. 

I  ■  Sell  the  houseclcaning  initiaiiw* 
j  internally  so  that  there  is  high-level 
I  buy-in.  A  chief  financial  officer  or  oih- 
'  er  executive  champion  can  lend  credi¬ 
bility  to  the  effort.  Such  accepiartce 
also  gets  IT  out  of  the  unenviable  po¬ 
sition  of  try  ing  to  take  systems  away 
from  the  business  leaders  and  users. 

■  Try  to  have  the  consumers  of  IT 
bear  the  cost  of  IT.  If  business  units 
don’t  directly  pay  for  what  they  con¬ 
sume.  it’s  very  hard  to  get  them  to  give 
up  anything.  If  getting  rid  of  older  or 
underused  systems  is  in  your  future, 
you  may  have  to  look  at  your  IT  cost 
recovery  (chargeback)  plan. 

Ultimately,  the  solution  to  this  prob¬ 
lem  Is  to  get  the  bu.sincss  to  assume 
ownership  of  the  systems  they  have  IT 
build.  Ownership,  of  course,  extends 
for  the  entire  life  cycle  of  the  system, 
including  retirement. 

Unfortunately,  many  companies 
haven’t  reached  the  point  where  biisi- 
ness  units  truly  own  the  IT  s*»ftwa/c 
assets.  Until  they  get  to  this  point.  IT 
organizations  should  be  prepared  to 
offer  some  help  with  the  cleanup  of 
application  portfolios.  O  51067 
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The  Trouble  With  Tags 

Sp>otty  read  rates  make 
it  clear  that  the  “R”  in 
RFID  doesn’t  stand  for 
reliabUity.  PAGE  32 


The  Long  and  Winding  Road 

See  how  RPID  data  makes  its 
way  from  the  manufacturing 
floor  to  the  retail  supply  chain 
at  pioneering  Gillette.  PAGE  34 
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OPINION 

Forget  Wal-Mart 

When  it  comes  to  RFID,  everyone’s 
talking  about  Wal-Mart.  Columnist  Mark 
Hall  says  that’s  a  mistake.  PACE  38 


RFID  will  eventual^  be 
a  winner,  but  reliability 
is  a  vexing  issue. 


EDITOR’S  NOTE 


Radio  fraquen- 
qridentifica- 
tion  technolo¬ 
gy,  or  RHO, 

will  eventu¬ 
ally  help  pre¬ 
vent  inventory  snafus  and  pro¬ 
vide  more  visibility  into  the  sup¬ 
ply  chaia  But  so  far,  the  road  to 
RFID  nirvana  has  been  paved 
with  potholes.  There  h^  been  a 
shortage  of  chips  plus  continuing 
problems  with  reliability,  sys¬ 
tems  integration  and  immature 
technology.  Analysts  say  that 
even  the  mighty  Wal-Mart  has 
had  to  relax  its  widely  publicized 
January  RFID  deadline  and  grmt 
some  suppliers  deferments  to 
mid-2005  because  of  “extenuat¬ 
ing  circumstances." 

Right  now,  RFID  is  all  about 
extenuating  circumstances.  Con¬ 
sider  the  case  of  Goodyear  Tire 
&  Rubber,  uliich  is  trying  to  %- 
ure  out  how  to  use  RFID  in  the 
tire  business.  Goodyear  execu¬ 
tive  Jonathan  Rich  points  out  that 
attaching  an  kFID  tag  to  a  box  or 
pallet  is  relatively  easy,  but  tires 
aren’t  shipped  that  way.  so  the 
tag  has  to  be  attached  directly  to 


a  round,  nubby  product.  “This  is 
complex."  Rich  says,  with  some 
understatement,  “because  tires 
are  flexible,  the  material  proper¬ 
ties  can  interrupt  or  distort  the 
radio  signal,  they  are  ship{>ed  in¬ 
dividually.  and  they  are  stored  in 
arbitrary  positions."  And  you 
think  you’ve  got  problemsl 
We  recognize  that  RFID  isn’t 
as  simple  as  the  airline  maga¬ 
zines  suggest,  so  this  special  re¬ 
port  provides  tips  for  dealing 
with  RFID  reliability  problems 
and  illustrates  the  complexity  of 
the  data  flows  at  bellwether  user 
Gillette.  As  IDC  analyst  Frank 
Gens  put  it,  “We  remain  bullish 
on  the  long-term  impact  and  val¬ 
ue  of  RFID . . .  [but]  adoption  is  a 
more  complicated  and  slower 
process  than  boosters  often  sug¬ 
gest."  O  51091 

Mitch  Betts  is  Computerworld’s 
executive  editor.  Contact  him  at 
mitch_befts@coniputerworl<icom. 

ONLINE  sSfiSrCMii 

XnoaMot  CaMv  tar  imn  aid 
momM.  OQlMilM  kZOOO 


.RFID 

Reality  Check 


32M|riTDim  hnalv  M.  M4 


KHOWLEDttCEIITa  SUPPLY  CmUM 


WWW  corrcut^fwortcJ  com 


Spotty  read  rates 
nme  it  clear  that  the 
‘R’  in  RFID  doesn’t 
stand  for  reliability. 

By  Mary  Brandel 

WHEN  YOU  HEAR  the  litany  of  reliabil¬ 
ity  and  readability  woes  that  plague 
radio  frequency  identification 
(RFID)  pilot  projects  in  the  supply 
chain  arena,  you  may  wonder  how 
anyone  is  making  any  progress  with 
this  technology  at  ail 

Problems  range  from  nonfunctioning  tags  to  envi¬ 
ronmental  conditions,  such  as  temperature,  humidity 
and  radio  frequency  interference,  that  can  render 
tags  unreadable.  Tlie  challenges  continue  as  contain¬ 
ers  move  through  the  warehouse  and  onto  trucks  —  a 
process  in  which  tags  can  be  damaged  or  thrown  out 
of  alignment  so  they  can't  receive  reader  signak  And 
the  hst  goes  on:  Forklifrs  cut  cables,  tag  printers  can't 
keep  up  with  conveyor  belt  speeds,  or  adhesives  that 
bond  tags  to  containers  fall  at  low  temperatures. 

"There's  still  a  lot  of  immaturity  in  the  technolo¬ 
gy."  says  Kara  Romanow.  research  director  at  AMR 
Research  Inc.  She  points  to  the  10%  to  12%  of  tags 
that  are  "dead  on  arrival"  —  meaning  they  arrive  at 
the  user  site  in  nonworking  condition.  Even  when 
you  weed  out  the  bum  tags,  average  read  rates  are 
still  just  80%  to  90%,  she  says.  Some  of  this  is  the  re¬ 
sult  of  tag  failure,  but  other  common  prc^lems  are 
incompatible  tag/reader  combinations  and  products 
that  aren't  suited  for  RFID.  "Companies  are  trying  to 
tag  RF-unfriendly  products,  like  soup  cans  and  baby 
wipes."  she  says.  "It  really  varies  by  product." 

And  yet,  if  you  talk  to  RFID  users  UkeC^ne  Obrock. 
vice  president  of  operations  at  Henkel  Consumer  Ad¬ 
hesives  Inc.  in  Avon,  Ohio,  or  David  Adams,  senior 
vice  president  of  corporate  strategy  at  TrenStar  Inc. 
in  Greenwood  VUU^,  Cokx.  you  find  that  they  are 
more  optimistic  Yes,  they  agree.  RFID  systems  are 
fraught  with  reliability  pitfalls,  some  of  which  never 
go  away.  But  the  potent  payback  is  so  great,  they  say. 
that  building  an  RFID-ba»ed  supply  chain  that  takes 
these  issues  into  consideration  b  worth  the  trouble  — 
even  if  the  benefits  are  five  to  10  years  away. 

"The  equipment  is  becommg  more  durable,  the 
technology  more  reliable,  the  tags  are  improving,  and 
at  the  same  time,  we’re  more  knowledgeable  about  the 
rdationship  between  the  technology  and  the  packages 
we  sell  to  our  retail  customers,”  says  Obrock,  whose 
company  is  testing  RFID  with  Wal-Mart  Stores  Inc 
Obrock  is  clear  that  reliability  will  play  a  major 
in  determining  Henkel's  eventual  return  on  in¬ 
vestment.  which  will  be  achieved  in  part  by  obtain¬ 
ing  more  accurate  and  timely  inventory  data  from  re¬ 
tailers.  But  valuable  data  can  be  collected  only  when 
the  volume  of  Henkel’s  RFID-tagged  packages  in¬ 
creases.  "It  may  take  five  or  six  years,  but  eventually 
it  will  grow  into  the  frbric  of  our  organization,  like 
UPC  bar  codes,”  Otmxdc  says. 

Obrock  and  other  experienced  users  advise  corn- 


pay  a  premium  to  certify  that  the  tags  will  work. 

This  extra  cost  b  acceptable  to  Atul  Salgaonkar. 
founder  of  Cupertino,  Calif.-based  RFID  Solutions 
LLC,  which  develops  RFID  systems  for  clients  in  the 
pharmaceutical  and  health  care  industries,  where  ac¬ 
curacy  b  paramount.  "If  I  have  10  samples  and  only 
eight  are  read,  I  don’t  want  to  have  to  do  a  song  and 
dance  in  front  of  my  client,"  be  says. 

Salgaonkar  proposes  that  manufacturers  sell  differ, 
ent  flavors  of  tags  with  prices  refleaing  variances  in 
reliability.  The  first  stqj  down  that  path  would  be  for 
the  tag  vendors  to  publicize  bit-failure-over-time 
rates,  which  they  currently  don’t  da  In  the  mean¬ 
time.  Salgaonkar  advises  clients  to  attach  not  one  but 
two  tags  to  pallets  —  which  b  fine  for  bb 


panies  to  learn  as  much  as  they  can  about  the  rela¬ 
tionship  between  RFID  and  their  own  products  and 
processes  and  then  build  a  system  that  anticipates 
and  resolves  reliability  problems  thar  arise. 

DOA  t^  are  common  enough  that  experienced 
users  have  found  ways  to  work  around  them.  They 
arrange  with  tag  manufacturers,  for  instance,  to  ship 
extra  tags  to  compensate  for  those  that  don’t  work. 
Many  printers  to^y  also  include  a  readability  tester 
that  rejects  bum  tags,  minimizing  the  chances  that 
one  will  ever  be  applied  to  a  container. 

Of  course,  that  doesn’t  resolve  the  issue  of  tags  that 
test  fine  but  frul  later.  That's  wdiy  users  that  require 
the  highest  reliability  guarantees  must  work  directly 
with  tag  manufacturers  on  quality  assurance  —  and 
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whose  high-end  products  warrant  the  extra  cost. 

Some  observers  see  tag  reliabUity  becotning  less  of 
a  factor  as  bigger-namc  companies  such  as  Texas  In¬ 
struments  Inc.  and  Hitachi  Data  Systems  Corp.  enter 
Ae  business.  “There's  a  good  chance  the  reliable-tag 
issue  will  be  resolved  by  the  end  of  the  second  quar¬ 
ter  next  year."  predicts  Steve  Banker,  service  director 
of  supply  chain  management  at  ARC  Advisory  Group 
Inc.  in  Dedham.  Mass. 

For  their  part,  retailers  seem  willing  to  accept 
some  level  of  inaccuracy.  “We  re  receiving  rules  that 
say.  if  every  week  you  send  me  a  pallet  with  80 
cases,  and  this  week  I  only  read  79, 1  will  understand 
it  as  100%,' "  Obrock  says.  Indeed,  Banker  expresses 
doubt  that  the  technology  will  ever  reach  100%  accu¬ 
racy  at  the  pallet  level,  where  tightly  packed  goods 
and  other  causes  of  interference  can  lead  to  readabil¬ 
ity  problems.  Retailers  'Vill  have  to  make  a  leap  of 
faith  that  if  they  can  read  19  out  of  20  SKUs  on  the 
pallet,  that  the  20th  one  is  there,"  he  says. 


Package  Problems 


What  will  continue  to  suck  up  lots  of  R&D  dollars, 
however,  is  studying  the  nature  of  the  products  being 
tagged.  "In  the  dry-goods  space,  people  are  getting 
close  to  100%  reads,  some  at  a  rate  of  600  feet  per 
minute,"  says  Eric  Peters.  CEO  of  True  Demand  Soft¬ 
ware.  an  RFID  start-up  in  Menlo  Park.  Calif.  But  with 
metal  containers  and  anything  containing  liquids, 
read  rates  are  a  much  lower  60%  to  75%,  or  even  15% 
on  some  metal  containers,  he  says. 

Companies  need  to  get  creative  to  overcome  these 
problems.  When  the  Department  of  Defense  had 
trouble  tagging  S5-gallon  metal  drums.  Peters  says,  it 
finally  succeeded  by  placing  weatherstripping 
hind  the  tags,  which  minimized  interference. 

With  Henkel's  metal  tape  products,  tags  have  to  be 
placed  in  a  very  specinc  position  on  the  box,  or  read¬ 
ers  will  pick  up  reflections  from  the  tape.  Meanwhile, 
a  completely  different  type  of  tag  works  better  with 
the  company's  shelf-liner  products.  That's  where  the 
cost  really  comes  in:  Companies  are  spending  re¬ 
search  dollars  trying  different  tags  and  tag  place¬ 
ments  with  all  of  their  products  —  and  they're  docu¬ 
menting  the  results  and  making  sure  workers  abide 
by  the  explicit  instructions.  They  might  end  up  re¬ 
quiring  a  variety  of  tags,  with  different  form  Curtors 
or  different  antennas,  to  accommodate  all  of  the  vari¬ 
ables  in  their  product  lines. 

“If  you  have  10  different  SKUs  and  10  different  tags 
that  you're  trying  to  test,  without  foil  there  won’t  be 
one  tag  type  suitable  for  all  10."  says  Brian  Higgins, 
director  of  global  RFID  solutions  at  BearingPoint 
Inc  in  McLran.  Va. 

That,  of  course,  increases  costs.  "You  can't  get  vol¬ 
ume  discounts  if  you're  spreading  out  tag  procure¬ 
ment  purchasing  power  over  10  different  tag  types," 
Higgins  says.  And  in  addition  to  incraaring  costs,  us- 
'mg  different  tags  disrupts  and  adds  complexity  to 
your  operations.  Custom  tags  are  also  more  expen¬ 
sive  chan  the  30<ent  variety,  Romanow  points  out. 
“Whatever  business  case  you  have  really  goes  negative 
when  you  start  gettiiig  into  custom  tags,"  she  says. 

The  challenge  is  to  find  the  lowest  common  de¬ 
nominator.  or  the  tag  that  works  best  on  the  widest 
swath  of  SKUs.  For  all  these  reasons,  Higgins  says, 
there's  a  gap  between  working  through  readability 


Squishy  Returns 

ARC  Adveofv  6foup  fsontly  condooed  8  suf^ 
mardacfurers  arxl  dstnfaulors  engaoed  in  RFC  1^^ 
mentations.  Here  are  some  fntrQs  from  the  study. 

■  Twenty  three  of  the  respondents  said  they 
dldnl  beRmre  they  would  achieve  fWI  within 
two  years. 

■  Respondents  said  that,  throuph  experimenta¬ 
tion.  they  were  aUa  to  achieve  t00%  accurate 
reads  at  tha  individual  case  leveL  However,  at 
the  palet  level,  “experience  was  afl  over  the 
map."  says  Steve  Banker,  service  director  of  supply 
Cham  manaoement  at  ARC  Some  respondents  with 
harthcHead  rnaterab  were  achwvirio  just  50%  acai- 
racy.  while  users  with  large  items  and  palets  wfth  no 
mtenor  cases  fared  bener.  1^051  Idks  were  able  (0 
read  every  case  on  a  palei  only  70%  of  the  txne.* 
Banker  says.  Respondents  said  they'd  need  95%  to 
99%  accuracy  at  the  palet  levei  Id  see  benefits  of 
RFK)  such  as  reduced  mventory  levels 

*  Respondants  ahampting  to  autornate  tag 
application  found  that  prkiter/ancodars  couMn'l 
kaap  up  with  their  conveyor  boRs.  SuccessU  al¬ 
ternatives.  such  as  robotic  applicators,  were  drtficull  to 
find  'TiariMare  suppliers  think  they're  two  generally 
away  ftom  resohnng  the  speed  ssue,*  Banker  says. 

■  Automatod  tag  appication  ii  ako  compicated 
by  nonfunctioning  tags.  Many  pnniers  reject  bum 

tags  and  generate  voideiHMl  ones,  but  rl  there  are  two 
of  these  m  a  row.  It  disrupts  aidomated  op&Miots. 

■Woneoftheraipondentosaidlheywrewgl- 
ingtomakeahigh-veliimetagpurdiasecom- 
ffdlnwnt.'7hey'reif«aibnofcrGeri2standanlstobe«)- 
prowd.  and  there's  a  new  raft  of  hardwve  proMdeis.’ 
Banker  says  “The  V0H  is  partBly  m  hope  that  they  cm 
negotiate  a  better  pnee.  but  d's  more  about  guably  and 

rflUxiity.' 

-  Maryfirandef 


concerns  and  true  deployroenL 

All  in  all,  users  have  to  walk  carefully  on  the  cost/ 
performance  balance  beam  when  they  er^age  in  all 
this  experimentation.  There  are  ways  to  enhance  le- 
UabiUty,  certainly.  But  the  challenge  is  keeping  it  on  a 
cosi/performance  curve  so  it’s  useful."  Higgins  says. 

What  Happens  Next 

So.  you've  worked  through  all  the  experimentation, 
and  you've  gotten  an  RFID  pilot  up  and  running. 
Don't  celebrate  yet  —  there's  room  for  more  trouble 
down  the  road-  “PDots  arc  neat,  where  you  get  100% 
read  rates  and  give  each  other  higfa-frves,"  says  Tren- 
star  s  Adams.  "But  when  you  turn  on  the  conveyor 
belt,  and  you're  reading  1,800  containers  an  hour,  it’s 
a  whole  different  ballgame." 

Adams  knows  what  he's  talking  about  ~  TrenStar. 
a  mobile  asset  management  firm,  tracks  tens  of  thou¬ 
sands  of  RFllMagged  containers.  The  company  is  so 
comfortable  with  the  reliabUity  rate  of  its  RFID  sys¬ 
tem  that  it  builds  a  key  performance  metric  into  cus¬ 
tomer  contracts,  promising  98%  to  99%  read  rates. 


But  the  only  way  it  can  do  this  is  by  budding  iniclli- 
gence  Into  its  netw-ork  to  pick  up  deviations  and 
degradations  quickly  enough  that  someone  can  re¬ 
spond  to  them 

"Reliability  is  so  much  about,Lhfi  quality  assurance 
process  you  have  in  place  so  that  when  things  stan  to 
not  wotk.  you  can  pick  up  on  that  before  it  turns  into 
a  train  wreck,"  Adams  says. 

TrenStar  s  RFID  s)'!itera  includes  a  series  of  check¬ 
points  that  containers  move  through,  each  of  which 
signals  whether  the  container  was  read  accurately.  If 
a  checkpoint  is  missed,  the  system  alerts  someone 
who  can  physically  investigate  whether  the  problem 
was  a  one-time  anomaly  or  sonething  s>-siemic  like 
a  cut  cable  or  bumed-out  battery.  “We've  put  in  busi¬ 
ness  logic  that  says.  'If  this  occurs,  take  this  action  or 
e-mail  this  person,  and  if  it  happens  100  times,  esca¬ 
late  the  problem.' "  Adams  says. 

Warehouse  to  Worlier 

FoUowing  the  RFID  reliabUity  trail  of  tears  eventual¬ 
ly  leads  to  the  most  important  point  of  all  ensuring 
the  integrity  of  the  data  collected  by  this  lechnofogy. 
Feu-  companies  have  progressed  to  the  point  of  inic^ 
grating  the  RFID  data  into  ibeir  warcbou.se  and  ERT 
systems,  so  it’s  too  soon  to  tell  whether  the  data  will 
be  accurate. 

But  companies  like  Henkel  are  preparing  for  the 
problems  that  will  arise.  If  I  ship  a  paUet  with  80 
cases,  and  the  number  that  gets  read  is  7b,  and  if 
every  pallet  is  read  that  way.  what  do  I  do  with  that 
datar  Obrock  says.  You  can  round  up  to  80.  assum¬ 
ing  a  misread,  but  what  if  a  large  number  of  pallets 
were  truly  four  containers  short.^ 

The  fact  is.  all  the  assumptions  that  you  build  into 
your  business  rules  need  to  be  reviewi^  before  using 
this  new  data  —  and  they  need  to  continue  to  be  re¬ 
viewed  as  the  technology  improves.  “You  can't  tcU 
your  dau  folks  to  assume  dau  is  off  by  10%,  and  eight 
months  later,  it's  actually  only  off  by  SV”  says  Obrock. 
“You  have  to  go  back  every  so  often  to  validate  the 
difference  betw-een  the  real  situation  and  modify  the 
conventions  around  bow  they  use  that  data.* 

While  reliability  and  readability  may  not  top  the 
list  of  factors  that  will  affect  RFID  adt^ion.  they 
will  in  the  end.  affect  how  meaningful  the  resulting 
data  will  be.  One  reason  is  that  a  large  volume  of  dau 
is  needed  in  order  for  it  to  be  useful 
“In  a  lot  of  these  pilots,  people  are  tagging  5%,  10%. 
20%  of  their  overall  SKUs,"  Higgins  says.  “It's  diffi¬ 
cult  to  do  any  planning  wben  you’re  only  capturing 
that  small  of  a  faction." 

Still,  experienced  users  arc  enthusiastic  about  the 
advances  being  made  in  RFID  reliability,  and  they 
point  out  that  the  more  users  experiment  and  learn 
—  particulariy  in  these  early  days  when  imple- 
roenlers  are  most  likely  to  be  open  about  their  expe¬ 
riences  —  the  better  off  they'll  be. 

Those  who  started  three  years  ago  will  stay  three 
years  ahead.  Others  will  catch  up,  but  theyll  be 
learning  it  on  their  own  dime,"  Obrock  says.  “Once 
some  of  the  retailers  and  manufacturers  get  good  at 
it. !  probably  won’t  share  all  my  insights  because  it 
will  be  hard-core  knowledge."  O  50759 
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ON  A  ROAD  MAP.  the  data  en¬ 
coded  in  an  RFID  tag  wilJ 
endure  a  long  but  clear-cut 
journey,  traveling  thou¬ 
sands  of  miles  from  a  man¬ 
ufacturer's  warehouse  to  a 
retailer's  distribution  center  In  a  chip 
no  bigger  than  the  head  of  a  pin.  But 
the  data's  path  gets  more  complicated 
as  it  wends  its  way  through  the  various 
middleware  and  back-ofltce  applica¬ 
tions  that  will  ultimately  make  it  useful 
in  the  retail  supply  chain. 

Standards  are  still  being  worked  out. 
and  the  software  is  still  evolving.  By 
the  time  everything  is  settled,  the  ways 
in  udiich  the  data  travels  may  change. 
That's  what  Computerworld  learned  as 
it  traced  the  path  of  RFID  data  at  trail- 
blazing  user  The  Gillene  Ca,  one  of 
Wal-Mart  Stores  Inc's  top  suppliers. 

The  Boston-based  manufacturer  has 
ooe  of  the  most  sophisticated  global  IT 
architecture  designs  among  the  100 
suppliers  facing  Wal-Mart's  January 
deadline.  Leo  Burstein.  distributed 
technology  architect  at  Gillette,  b  confi¬ 
dent  that  the  bumps  will  be  smoothed 
out.  Burstein  sits  on  the  architecture 
review  committee  of  EPCglobal  Inc., 
the  standards  body  working  to  resolve 
some  of  the  prickliest  issues. 

In  the  meantime,  with  so  much  in 
development.  Gillette  has  feced  a  bal¬ 
ancing  act  to  estabUsh  ‘a  framework 
that  b  flexible  enough  to  sustain  the 
long-term  project  but  at  the  same  tinn? 


develop  some  tactical  benefits  that  can 
be  used  to  support  our  customers  in 
the  short  term."  Burstein  says. 

At  Gillette,  the  data  begins  its  jour¬ 
ney  in  the  software  systems  that  assign 
a  unique  Electronic  Product  Code  to 
each  case  and  pallet.  The  EPC  is  trans¬ 
fused  onto  a  chip  embedded  in  a  tag 
that  has  a  flat,  razor-thin  coil  on  its  un¬ 
derside.  When  the  tag  hits  the  RF  field 
of  a  reader,  it  responds  with  a  signal 
containing  its  code,  and  the  data  b  sent 
to  EPC  middleware  for  processing. 

Once  Wal-Mart  expands  its  RFID 
efforts  and  other  retailers  follow  suit, 
data  will  be  gushing  through  those 
companies'  IT  systems  like  a  water^ll. 
But  the  volume  of  data  b  currently 
more  akin  to  the  trickle  of  a  stream. 

Thus  far.  only  a  handful  of  retailers 
have  asked  their  suppliers  to  ship  cases 
and  pallets  with  RFID  tags  to  selected 
distribution  centers,  so  technology 
vendors  aren't  able  to  get  the  critical 
mass  necessary  to  drive  down  costs. 

Because  RFn>  tags  and  related  sys¬ 
tems  are  expensive  and  the  near-term 
payoff  isn't  clear,  there's  little  point 
in  tagging  all  products  at  the  point 
they’re  manufactured.  Retailers  merely 
need  to  know  when  the  cases  and  pal¬ 
lets  are  shipped  and  what’s  in  them.  As 
a  result,  most  suppliers  tag  goods  as 
late  in  the  process  as  possible. 

Gillette  b  no  exception.  The  compa¬ 
ny  was  one  of  eight  suppliers  to  partic¬ 
ipate  in  a  pilot  with  Wal-Mart  Most  of 
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the  cases  of  razors,  shaving  cream  and 
toothpaste  it  ships  to  Wal-Mart  are 
tagged  at  its  dbtribution  center  in 
RomeovUie,  UL  But  because  Gillette 
chinks  the  beneHts  will  be  greater  the 
earlier  in  the  process  it  can  tag  goods, 
the  company  has  also  launched  a  pilot 
to  "tag  at  source"  at  its  pack^ing  facil¬ 
ity  in  Fort  Devens.  Mass.,  where  it  puts 
EPC  tags  on  cases  of  Venus  razors. 

like  a  license  plate  on  a  car,  the  EPC 
uniquely  identifies  a  case  or  pallet.  It 
uses  five  key  pieces  of  information:  the 
company  code;  product  code;  serial 
number  that  uniquely  identifies  the 
item:  a  header  that  defines  different 
types  of  tags,  such  as  those  in  the  con¬ 
sumer  products  industry:  and  a  filter 
value  that  allows  a  company  to  read 
only  pallet-level  tags,  ignoring  case- 
level  tags  or  vice  versa. 

By  tagging  at  the  point  of  packi^ng, 
Gillette  can  reduce  the  labor  costs  as¬ 
sociated  with  manually  scanning  each 
case  and  curb  errors.  Woikers  currently 
key  fi\'e  entries  onto  a  keyboard  and  do 
three  bar  code  scans  for  each  pallet  ac¬ 
cording  to  Jamshed  Dubash.  director  of 
Auto-IO  technology  at  Gillette.  He  says 
a  business  process  analysb  showed 
that  the  company  will  annually  save 
25%  in  operational  costs  once  all  cases 
are  being  tagged  at  the  packaging  point 


How  RFID  data  makes 
its  way  from  manufacturing 
floor  to  retail  supply  chain 
at  pioneering  Gfllette. 

By  Carol  Sliwa 


rather  than  at  the  distribution  center. 

But.  Dubash  is  quick  to  add.  "even 
though  you  can  get  significant  benefits 
from  operational  savings,  it's  the  col¬ 
laborative  benefits  that  are  the  real  dri¬ 
vers  and  motivators  for  us  to  work  so 
closely  with  our  retail  partners.  Our 
analysb  rfiows  that  90%  of  our  bene¬ 
fits  and  90%  of  the  retailer’s  benefits 
come  in  the  collaboration  process." 

Moving  Through  the  System 

Gillette's  EPC  data  traveU  thousands 
of  miles  on  a  tiny  chip  to  Wal-Mart's 
Texas  dbtribution  centers  in  Sanger 
and  DeSoto,  as  well  as  to  some  stores, 
Burstein  says.  If  all  goes  well,  its  ar¬ 
rival  b  automatically  logged  when  tbe 
tags  on  the  cases  and  pallets  are  read 
at  strategic  positions  in  the  retailer's 
distribution  centers  and  stores. 

Gillette  b  already  gettii^  access  to 
data  from  Wal-Mart  and  b  working 
with  the  retailer  to  understand  tbe 
optimal  use  of  the  data.  Burstein  says. 

A  spokesman  for  Wal-Mart  says  it 
provides  options  for  suppliers  through 
its  Retail  Link  extranet  site.  With  Re¬ 
tail  Link,  suppliers  have  to  ‘*puli"  data; 
a  dashboard  provides  customization 
options.  That  system  was  used  during 
the  pilot,  and  many  suppliers  will  con¬ 
tinue  using  it.  tbe  spokesman  says.  He 
adds  that  Wal-Mart  has  rolled  out 
specifications  for  an  Electronic  Data 
Interchange  document  that  will  allow 
suppliers  to  receive  "all  of  their  read 
data"  on  a  machine-to-machine  basb 
in  that  form  —  daily,  if  they  wbh. 

Gartner  Inc.  analyst  Jeff  Woods  says 
suppliers  will  be  able  to  see  data  indi¬ 
cating  not  only  when  a  product  arrives 
at  Wal-Mart’s  distribution  centers  and 
stores,  but  also  when  it  moves  from  a 
store's  back  room  to  the  sales  floor,  be¬ 
cause  readers  in  trash  compactors  will 
note  when  cases  are  crush^ 

The  challenge  for  suppliers  will  be 
getting  structured  access  to  the  data, 
because  that's  the  roost  efficient  way 
for  them  to  get  payback  from  RFID,  ac¬ 
cording  to  Woods.  "Capturing  the  data 
fiom  Wal-Mart  b  not  as  e0tcient  a 
process  as  most  people  believe.  Many 
suppliers  use  somen^t  manual 
processes  to  accompibb  this,"  Woods 
says,  noting  that  their  replenishment 
planning,  forecasting  and  category 
management  systems  will  need  the 
data. 

But,  Woods  maintains,  even  if  sup¬ 
pliers  can  get  the  RFiD  data,  the  ma¬ 
jority  wont  know  udiat  to  do  with  it 
"Most  arent  even  ready  to  use  the 
point-of-sale  data  that's  there  today," 
he  says. 

When  Gillette  began  designing  its 
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What’s  in  that  case? 


RflD-tag^  cas«  with  no  label  has  been  found  in  a  retailer  s  distribution 
center.  Here  s  how  the  retaiter  might  find  the  data  associated  with  that  case  in  tte  future. 


( ‘  INTERNET 

!  Z'  (secure  iden^  Mrashucture) 


ft  J^relaitef's^em  sends  a  query  re<ajestino  additional  infomialion  using  a 
W  Intemef-based  channel  that  transfers  the  data  and  establishes  the  identity  of  the  retail- 

ers  querying  system 

d  receives  the  request 

tneiWTOhtrtlttt  retailer  ssystern  and  creates  a  response  accortfing  to  the  access 
con^  rules  for  that  particuter  retailer,  alette's  EPC  inforrnation  service  uses  the 
estabtehed  secure  chanrrel  to  return  this  information  to  the  querying  systern. 

OTheretate  s  systern  receives  the  infornwfion  about  the  case  and  its  contents  and  can 
use  the  data  in  its  own  business  systems. 


architecture,  the  starting  points  were 
the  business  requirements  and  back- 
office  applications.  From  there,  it 
worked  its  way  back  through  an  inte¬ 
gration  layer,  the  EPC-enabled  middle¬ 
ware  and  finally  to  the  readers  and  the 
tags  containing  the  data.  The  idea  was 
to  minimize  changes  to  existing  busi¬ 
ness  applications,  protect  the  company 
from  shifts  in  RFID  technology  and 
create  layers  of  abstraction,  connected 
by  a  series  of  sophisticated  interfaces. 

Taking  a  service-oriented  approach, 
each  application  would  be  .similar  to  a 
Lego  block,  and  the  interfaces  would 
be  the  pegs  connecting  them.  Any  one 
of  the  Gilding  blocks  could  be  re¬ 
moved.  and  another  could  be  plugged 
in.  “You  can  use  the  best  building 
blocks  that  meet  your  requirements, 
and  if  you  need  to  replace  one  of  them, 
you  do  not  have  to  change  the  rest  of 


I  the  puzzle.”  says  Bursteia 

The  current  edition  of  Gillette's  ar¬ 
chitecture  has  a  business  application 
layer  consisting  of  its  data  warehouse, 
a  warehouse  management  system  from 
Provia  Software  Inc.  and  other  applica¬ 
tions  that  will  process  the  data. 

Integration  and  Affiddeware 

An  integration  layer  sits  between  the 
enterprise  application  layer  and  its 
EPC-enabled  middleware  from  Oat- 
Systems  Inc.  The  integration  layer, 
based  on  technology  from  Sun  Micro¬ 
systems  Inc.,  bandies  the  routing  of 
data  between  the  middleware  and  en¬ 
terprise  systems,  guarantees  message 
delivery  and  performs  any  needed  pro¬ 
tocol  or  data-fonnat  transformations. 

The  OatSystems  middleware  col¬ 
lects  the  EPC  data  from  the  readers, 
each  of  which  has  read  a  tag  potential- 


O  The  case  s  RFID  tag  is  detected  and  interpreted  by  the  software  «  a  reader  aiMl  sent  to 

a  coTTHTuter  system. 

Olfeng  tire  tag  dataJhe  system  sends  a  query  to  the  object  naming  servK*  (()NS 

IS  part  of  EPt^global's  BedronK:  Produd  Code  Network  arri  operates  nrech  Ito 
the  fnterriet  Domain  Name  System  does  for  Wib  site  addresses. 

©Based  on  the  manufacturer  code  and  the  ^xJud  code  embedded  in  the  taa  the  ONS 

sew  retuTC  the  Internet  ackkess  of  the  EPC  information  service  that  has  ajditional 

about  Ihe  and  its  contents.  In  this  particular  scenario,  lire  data  about  a  case 


Ga^s  padraging site  (at  nghl).  and  ttref  data  was  tr^erred  via  an  integration  layer 
to  owene  s  busirress  appHcabotis. 
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I  ly  hundreds  of  times  per  second,  and 
j  filters  the  data  into  separate  messages 
that  have  a  distinguishable  meaning 
from  the  business  process  per^>ective. 

Gillette  is  also  testing  an  appliance 
concept  that  will  combine  the  reader, 
some  frmctions  of  the  middleware  and 
the  physical  infrastructure  to  simplify 
its  systems.  Burstein  says. 

At  the  same  time.  Gillette  is  working 
hard  through  EPCglobal  to  standardize 
interfaces,  the  most  important  being 
those  between  the  middleware  and  en¬ 
terprise  applications,  Burstein  says. 
The  only  needed  interface  close  to  be¬ 
ing  finalized  is  the  one  between  tags 
and  readers,  he  adds.  “It’s  easier  said 
than  done,”  Burstein  acknowledges. 

“We  as  end  users  are  encouraging 
technology  providers  to  keep  their  sys¬ 
tems  open  so  we  don’t  create  stove¬ 
pipes  with  no  ability  to  exchange  infor¬ 


mation  between  them,"  Burstein  says. 

But  Woods  says  one  of  the  greatest 
hurdles  to  overcome  is  how  to  deter¬ 
mine  the  context  of  the  data  that’s  be¬ 
ing  collected.  For  instance,  a  reader  at 
a  shipping  dock  door  needs  to  discern 
which  tagged  pallets  are  heading  onto 
trucks  and  which  are  merely  passing 
by  on  their  way  to  storage,  ^  says. 

Scores  of  suppliers  will  merely  slap 
lags  onto  the  cases  and  pallets  they 
'  ship  to  Wal-Mart  and  not  worry  a^ut 
adapting  their  systems  and  business 
processes  to  take  advantage  of  the 
data,  at  least  in  the  near  term.  Even 
Gillette,  wdiich  has  what  Woods  terms 
a  “sophisUcaied,  very  sleek  architec¬ 
ture.”  still  has  a  long  way  to  go  in  figur¬ 
ing  out  meaningful  uses  for  the  data. 

But.  Woods  adds,  “if  any  supplier  can 
figure  out  a  way  to  use  the  data,  it  will 
be  GUlette.’’<l  51089 
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Os  \  \i  \i'  the  il.ua  cn- 
cosJoJ  ill  .in  Kfin  M>2  will 
on  Jure  j  loni:  bui  elcjf-cui 
journey,  iravetinj;  ihou- 
s.inds  t*i’  miles  from  .1  m.in- 
uL.ieliirer's  uarehtmse  to  a 
ix’Miler's  distribution  center  in  a  chip 
no  bieizer  than  the  head  of  a  pin.  But 
the  data's  path  yets  nu«re  complicated 
.IS  it  wends  its  wav  throuiih  the  various 
middleware  and  back-ofnee  .ippMcj' 
lions  that  w  ill  ultimately  make  ii  useful 
in  the  retail  supply  chain. 

Standards  arc  still  being  worked  out. 
and  the  software  is  still  eviJving.  By 
itu.‘  lime  t'v cry  thing  is  settled,  the  ways 
in  which  the  data  travels  m.n\  change. 
t‘h.ii's  what  t’ompureneor/J  learned  as 
it  inieed  the  pathof  KFID  data  at  trail- 
b].i^ing  user  The  toilette  ( av.  «>ne  of 
Wal-Mart  Stores  Ine.'.s  i««p  suppliers. 

The  lioston-baseJ  manufacturer  h.js 
tme  of  the  most  Miphisiicated  global  IT 
archiiivture  designs  among  the  1(H» 
suppliers  facing  Wal-Mari's  January 
deadline.  Leo  Bursteln.  distributed 
teehmilt^  architect  at  (ollette.  is  confi- 
Jcni  that  the  bumps  will  be  smoothed 
out.  Burstcin  sits  on  the  aa-hitceiure 
revk'w  s*onimittceof  El’l'global  tnc.. 
the  standards  body  working  to  ix'svilve 
some  of  the  prickliest  issues. 

In  (he  meantime,  with  so  much  in 
devehrpmenc.  Gillette  has  faced  a  bal¬ 
ancing  act  to  establish  “a  framework 
chat  is  flexible  enough  tv>  sustain  the 
long-term  project  but  at  the  same  rime 


develop  some  taelic.nl  benefits  th.it  can 
be  used  to  support  our  customers  in 
the  short  term.”  Burstcin  s.iys, 

.-\i  («illctte.  the  data  begins  its  joiir- 
nev  in  the  software  systems  that  assign 
j  unique  Klectronic  Product  Code  to 
each  ca.se  and  pallet.  I'he  H'C  is  trans¬ 
fused  onto  a  chip  embedded  in  a  tag 
that  h.)s  a  n.U.  ra7or-ihiii  coil  on  its  un¬ 
derside.  When  the  tag  hits  the  KK  field 
of  a  reader,  it  responds  with  a  signal 
containing  its  code,  and  the  data  is  sent 
to  KIK!  middleware  for  processing. 

Once  Wal-Mart  expands  its  RHI> 
efforts  .ind  other  retailers  follow  suit, 
data  will  be  gushing  through  those 
companies’  I  P  systems  like  a  w  aterfall. 
But  the  volume  of  data  is  currently 
more  akin  to  the  trickle  of  a  stream. 

[  Thus  far.  only  a  handful  of  retailers 
I  have  asked  their  suppliers  to  ship  ca.ses 
j  and  pallets  with  RFU>  tags  to  selected 
'  distribution  centers,  so  technology 
vendors  .aren't  able  to  get  the  critical 
I  mass  necessary  to  drive  dtiwn  costs. 

I  Because  RFID  tags  and  related  sys- 
j  terns  arc  expensive  and  the  near-term 
^  payoff  isn’t  clear,  there’s  little  point 
in  la^'ing  all  products  at  the  point 
they're  manufactured.  Retailers  merely 
need  to  know  when  the  cases  and  pal¬ 
lets  are  shipped  and  what’s  in  them.  As 
a  result,  mtwt  suppliers  tag  goitds  as 
late  in  the  pn>eoss  as  possible. 

Gillette  is  no  exceptum.  The  compa¬ 
ny  was  one  of  eight  suppliers  to  partic¬ 
ipate  in  a  pilot  with  Wal-Mart.  Most  of 


Our  analysis  shows 
that  90%  of  our 
benefits  and  90% 
of  the  retailer’s 
benefits  come  in  the 
collaboration  process. 


JAMSHED  OUBASH.  DIRECTOR  OF 
AUTO  lO  TECHNOLOGY.  GILLETTE 


the  eases  of  razors,  shaving  cream  and 
toothpaste  it  ships  to  Wal-Mart  are 
tagged  at  its  distribution  center  in 
Romciwillc.  II).  But  because  Gillette 
thinks  the  benefits  will  be  greater  the 
earlier  in  the  process  it  can  tag  goods, 
the  company  has  also  launched  a  pilot 
to  “tag  at  source"  at  its  packaging  facil¬ 
ity  in  Fort  Devens.  Mass.,  where  it  puts 
EP('  tags  on  cases  of  Venus  razors. 

Like  a  license  plate  on  a  car,  the  EPC 
uniquely  identifies  a  case  or  pallet,  it 
uses  five  key  pieces  informativin:  the 
company  code:  product  code;  serial 
number  that  uniquely  identifies  the 
item;  a  header  that  defines  difTcrent 
types  of  i3g,s,  such  as  ihi>se  in  the  con¬ 
sumer  products  industry;  and  a  filler 
value  that  allows  a  company  to  read 
only  pallet-level  tags,  ignoring  case- 
level  tags  or  V’ice  versa. 

By  tagging  at  the  point  of  packaging. 
Gillelic  can  ix'duco  the  labor  costs  as¬ 
sociated  with  manually  scanning  each 
ease  and  curb  errors.  Workers  currently 
key  five  entries  onto  a  keyboard  and  do 
three  bar  code  scans  for  each  pallet,  ae- 
airding  to  jamshed  Dubash.  director  of 
Auto-ID  technology  at  Gillette.  He  says 
a  business  pnx'css  analysis  showed 
that  the  company  will  annually  save 
2S%  in  operational  costs  once  all  cases 
are  being  tagged  at  the  packaging  pviint 


How  RFlDdata  makes 
its  way  from  manufacturing 
floor  to  retail  .supnlx'  chain  ^ 
at  pioneering  (iniette. 

Ifr  (';irol  Sliwa 


rather  than  at  the  disiribiitii*n  eenier. 

But.  Dub.ish  is  quick  to  .iJd.  "even 
though  vim  can  get  significant  benefits 
from  operational  savings,  it's  the  col¬ 
laborative  benefits  that  are  the  real  dri¬ 
vers  and  motivators  for  us  to  work  so 
closely  with  our  retail  partners.  Our 
analysis  show's  that  ‘)0“.i  of  our  bene¬ 
fits  and  W'.i  tif  the  retailer's  benefits 
come  in  the  eolLiboralion  process." 

Moving  Through  the  System 

Gillette's  FPC  data  travels  thousands 
of  miles  on  a  iin\  chip  to  Wal-Mart's 
Texas  distribution  centers  in  Siinger 
and  DeSoto.  a.s  well  .as  to  some  stores. 
Burstcin  says.  If  all  gws  well,  its  ar¬ 
rival  is  automatically  logged  w  hen  the 
tags  on  the  cases  and  p;tlleLs  are  read 
at  strategic  positions  in  the  retailer’s 
distribution  centers  and  smres. 

Gillette  is  alrv'ady  getting  access  to 
data  fntm  Wal-Mart  and  is  wttrking 
with  the  retailer  to  understand  the 
optimal  u.se  of  the  data,  Burstcin  says. 

A.spokesman  for  Wal-Mart  sa>'s  it 
provides  options  for  suppliers  through 
its  Retail  Link  extranet  site.  With  Re¬ 
tail  Link,  suppliers  have  to  "puH"  data; 
a  dashbivard  provides  customization 
options.  That  system  was  used  during 
the  pilot,  and  many  suppliers  will  con¬ 
tinue  using  it.  the  spokesman  says.  He 
adds  that  Wal-Mart  has  rolled  out 
specifications  for  an  Electronic  Data 
Interchange  d<K'ument  that  will  allow 
suppliers  to  receive  "all  of  their  read 
data”  on  a  machinc-to-machine  basis 
in  that  form  —  daily,  if  they  wish. 

Gartner  Inc.  analyst  JefT  Woods  says 
suppliers  will  be  able  to  see  data  indi¬ 
cating  not  only  when  a  product  arrives 
at  Wal-Mart's  distribution  centers  and 
stores,  but  also  when  it  ntoves  from  a 
store's  back  room  to  the  sales  floor,  be¬ 
cause  readers  in  trash  compactors  will 
note  when  cases  are  crushed. 

The  challenge  for  suppliers  will  be 
getting  structured  access  to  the  data, 
because  that's  the  most  efficient  way 
for  them  to  get  payback  from  RFID,  ac¬ 
cording  to  Woods.  "Capturing  the  data 
from  \V.al-Mart  is  not  as  efficient  a 
process  as  most  people  believe.  Many 
suppliers  use  somewhat  manual 
processes  to  accomplish  this."  Woods 
.says,  noting  that  their  replenishment 
planning,  forecasting  and  category 
management  systems  will  need  the 
datx 

But.  Woods  maintains,  even  if  sup¬ 
pliers  can  gel  the  RFID  data,  the  ma¬ 
jority  won’t  know'  what  to  do  with  it. 
“Most  aren’t  even  ready  to  use  the 
point-of-sale  data  that’s  there  today.” 
he  says. 

When  Gillette  began  designing  Us 
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OThe  case's  RFiD  lag  is  detected  and  interpreted  by  the  software  m  a  reader  and  sent  to 
a  computer  system. 

A  Using  the  tag  data  the  system  sends  a  query  to  the  obiect  naming  service  (ONS). 
which  IS  part  of  EPCglobal  s  Electronic  Product  Code  Network  and  operates  rmich  like 
the  Internet  Domain  Name  System  does  for  Web  site  addresses 

O  Based  on  the  manufacturer  code  and  the  product  code  embedded  in  the  tag  the  ONS 
se^er  returns  the  Internet  address  of  the  EPC  information  service  that  has  additional 
data  about  the  case  and  its  contents.  In  this  particular  scenario,  the  data  about  a  case 
of  Venw  razors  had  been  collected  using  a  network  of  readers  and  EPC  middleware  at 
biltette  s  packaging  site  (at  right),  and  that  data  was  Iranslerred  via  an  integration  laver 
to  Gillette  s  business  applications. 

O  The  retailer  s  system  sends  a  query  requesting  additional  information  using  a  secure. 
Internet -based  channel  that  transfers  the  data  and  establish^  the  identity  of  the  retail¬ 
er  s  querying  system. 


A  GiHelte’s  information  service  receives  the  request  through  the  secure  channel  verifies 

W  the  identi^  of  the  retailers  system  and  creates  a  response  according  to  the  access 
control  rules  for  that  particular  retailer.  Gillette's  EPC  information  service  iisg;  the 
established  secure  channel  to  return  this  information  to  the  querying  system. 

OThe  retailer's  system  receives  the  information  about  the  case  and  its  contents  and  can 
use  the  data  in  Its  own  business  systems. 


architecture,  the  starting  putnt.s  were 
the  business  requirements  and  back- 
office  applications.  From  there,  it 
worked  its  way  back  through  an  inte¬ 
gration  layer,  the  EPC-cnabled  middle¬ 
ware  and  finally  to  the  readers  and  the 
tags  containing  the  data.  The  idea  was 
to  minimize  changes  to  e.xisting  busi¬ 
ness  applications,  protect  the  company 
from  shifts  in  RFID  technology  and 
create  layers  of  abstraction,  connected 
by  a  series  of  sophisticated  interfaces. 

Taking  a  .sorv'ice-oriented  approach, 
each  application  would  he  similar  to  a 
Lego  block,  and  the  interfaces  would 
be  the  pegs  connecting  them.  Any  one 
of  the  building  blocks  could  be  re¬ 
moved,  and  another  could  be  plugged 
in.  "You  can  use  the  best  building 
blocks  that  meet  your  requirements, 
and  if  you  need  to  replace  one  of  them. 
>  ou  do  not  have  to  change  the  rest  of 


the  puzzle."  says  Bursiein. 

The  current  edition  of  Gillette  s  ar¬ 
chitecture  has  a  business  application 
layer  consisting  of  its  data  warehouse, 
a  warehouse  management  system  fr<»m 
Provia  Software  Inc.  and  other  applica¬ 
tions  that  will  priKcss  the  data. 

Integration  and  Middleware 

An  integration  layer  sits  between  the 
enterprise  application  layer  and  its 
EPC-cnabled  middleware  from  Oat- 
Systems  Inc.  The  integratkm  layer, 
based  on  technoU>gy  from  Sun  Mienv 
systems  Inc.,  handles  the  routing  of 
data  benveen  the  middleware  and  en- 
terpri-se  systems,  guarantee's  message 
delivery  and  performs  any  needed  pn>- 
liK’ol  or  daia-formai  transformations. 

The  OatSystems  middkwvarc  col¬ 
lects  the  EIX:  data  from  the  readers, 
each  of  which  has  read  a  tag  potential¬ 


ly  hundreds  of  limes  per  second,  and 
filters  the  data  into  separate  messages 
that  have  a  distinguishable  meaning 
from  the4?usiness  proee.ss  perspective. 

Gillette  is  also  testing  an  appliance 
amcept  that  will  combine  the  reader, 
some  functions  of  the  middleware  and 
the  phx-sieal  infrastructure  to  simplify 
its  sv.stoms.  Burstein  says. 

At  the  same  time.  Gillette  is  working 
hard  through  EPCglobal  to  standardize 
interfaces,  the  most  important  being 
those  betwevn  the  middleware  and  en¬ 
terprise  applications.  Burstein  says. 

I'he  only  needed  interface  close  to  be- 
j  ing  finalized  is  the  one  between  tags 
I  and  readers,  he  adds.  “It's  easier  said 
I  than  done."  Bursiein  as-kmnviedges. 
j  "We  as  end  users  are  encouraging 

I  technol«>gy  providers  to  kevp  tht'ir  sys- 
I  toms  open  s»)  we  don't  create  stove- 
<  pipes  w  ith  no  ability  to  exclunge  infor- 


I  mation  K*twx\*n  them."  Burstein  sa\-s. 
But  Woods  sa>-s  one  of  the  greatest 
hurdles  UKwercome  Is  bow  to  A-ut- 
mine  Uie  nmtext  of  the  data  that's  be¬ 
ing  collected.  For  instance.  .i  re.hier  at 
a  shipping  dix.k  dtxir  needs  to  discern 
which  tagged  pallets  are  heading  «into 
trucks  and  which  .in*  merely  passing 
by  on  their  way  to  storage,  be  sayv 
Scores  of  suppliers  will  men*l\  slap 
t.igs  onto  the  cases  and  p.illets  they 
j  .ship  to  Wal-Mart  and  iu>i  Witny  aNmi 
adapting  their  systems  and  busiiH*ss 
pnH-i.*sv*s  u»  take  advantage  of  the 
data,  at  least  in  the  near  term.  Even 
Gillette,  which  has  what  W«H«ds  terms 
a  “M*phisticalcd.  \ery  skvk  archiitv- 
lure."  still  h.is  .i  long  way  tt»  go  in  figur¬ 
ing  «*ui  meaningful  uses  for  the  data. 

But.  \S'oodsadds."ifany  supplier  can 
figure  out  a  w  ay  to  iisi*  the  data,  it  w  ill 
Ix-i.illetle' 0  51069 
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Just  getting 
your  feet  wet 
with  RFID? 
These  early 
users  offer 
advice  for 
managing  a 
pilot  project. 
By  March. 
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Easily  adopters  say  the  trick 
to  nav^tii^  the  relatively 
untested  watera  of  radio  fre¬ 
quency  identification  is  to 
assemble  a  savvy  team  that 
can  set  the  project  scope, 
win  over  business  users  and  make  up 
for  the  technology’s  limitations. 

Take,  for  example,  the  El  Paso 
County  government  ofi^ce  in  Colorado 
Sprii^.  A  six-week  RFID  pilot  project 
launched  this  fall  to  track  IT  assets  in¬ 
volved  taggii^  26S  PCs,  10  printers  and 
10  tablet  PCs.  The  first  step  in  the  proj¬ 
ect,  which  would  eventually  pour  re¬ 
trieved  RFID  data  into  PeopleSoft 
Inc.'s  Asset  Manner,  was  to  create  a 
business  case. 

Bufiy  Dorpinghaus,  manager  of  the 
Colorado  county’s  PeopIeSoh  group, 
met  with  CIO  Bill  Miller  and  desktop 
and  network  managers.  To  sell  them 
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on  the  protect.  Dorpinghaus  explained 
that  the  new  system  would  use  existing 
bar-code  scripts  to  cut  the  time  needed 
to  track  PCs  from  10  minutes  to  one 
minute  without  adding  hardware  or 
software  or  requiring  a  staff  member 
to  visit  each  desktop. 

“I  had  to  give  them  a  caveat  and  said. 
’Let's  just  try  it.  and  if  it’s  not  working 
out,  then  great,  no  harm  done,’  ”  she 
says.  The  pilot  woxild  also  be  cheap, 
at  ui>der  S100.000,  Dorpinghaus  says. 
That  one-time  pilot  expense,  which 
also  paid  for  the  production  license, 
was  a  big  plus.  Had  the  project  been 
b^er,  she  says,  there  probably  would 
have  been  resistance. 

Miller  says  that  although  RFID  is 
a  relatively  new  technology  for  gov¬ 
ernment  agencies,  the  pilot  was  seen 
as  an  opportunity  to  streamline  proc¬ 
esses  and  verify  that  new  software  and 


hardware  would  work  the  way  El  Paso 
County  needed  them  to. 

Next,  the  nine-person  project  team 
was  put  together.  Dorpfiighaus  was 
chosen  to  head  the  team  because  of 
her  PeopleSoft  applications  expertise 
and  ability  to  map  the  technology  to 
business  processes.  Also  on  board  was 
a  non-IT  manager,  who  handled  proj¬ 
ect  administration,  meeting  planning 
and  status  reporting,  and  three  IT 
staffers  who  would  eventually  use  the 
system,  including  one  person  assigned 
to  transfer  the  scripts  used  with  the 
bar  codes  so  they  would  work  with  the 
RFID  technology  as  welL 

Jamie  Hintlian.  a  consultant  at  Ac¬ 
centure  Ltd.,  says  this  upftont  work  of 
building  the  RFID  team  with  the  right 
skiUs  and  creating  a  solid  business  case 
b  key.  "Make  sure  the  pilot  is  focused 
on  a  common  set  of  objectives  and  iro- 
peraUves.”  he  advises.  By  managing 
the  scope,  companies  can  more  easily 
manage  the  ini^tructure  and  technol¬ 
ogy.  Hintlian  says. 

For  its  RFID  pilot.  Madisoa  Wis.- 
based  bicycle  manu&cturer  Pacific 
Cycle  Inc.  created  a  four-person  team: 
two  IT  workers  with  RFID  technical 
skills  and  two  business  users  who 
would  be  using  the  system  once  it  was 
up  and  running,  says  CIO  Ed  Matthews. 
The  pilot  involved  tagging  3,500  bikes 
and  the  packaging  material  inside  and 
outside  the  boxes  they're  shipped  in. 

Since  the  pilot  went  live  in  Septem¬ 
ber,  the  manufacturer  has  shipp^ 
15.000  tagged  bikes  to  Wal-Mart  Stores 
Inc.  But  because  RFID  technology  has 
been  changing  so  fast.  Matthews  says 
that  in  retrospect,  he  would  have  wait¬ 
ed  another  yeat  “In  terms  of  technol¬ 
ogy.  the  immaturity  has  and  continues 
to  be  a  nuisance,"  he  says.  “We  tried 
several  tag^  and  antenna  designs  but 
didn't  get  the  results  we  wanted.  1  can't 
tell  you  the  number  of  times  that  we 
were  told  a  product  is  just  a  couple  of 
weeks  or  a  month  away  only  to  fmd 
out  that  it  is  still  coming.** 

Winning  Over  Stakeholders 

Another  critical  part  of  managing  an 
RFID  project  is  gaining  business 
users’  trust.  The  £1  Paso  team  held 
regular  meetings  with  end  users  in  the 
help  desk  and  networking  departments 
as  well  as  those  in  the  purch^ing  and 
supply  group  to  create  a  clear,  stan¬ 
dardized  process.  The  team  used  Mi¬ 
crosoft  Corp.'s  Visio  software  to  map 
the  workflows. 

Creating  a  structured  workflow  plan 
is  time  well  spent,  says  Hintlian. '“Tlie 
results  will  be  more  s^ifleant.  and 
the  expectations  for  the  pilot  will  be 


agreed  upon  from  the  start."  he  says. 

Dorpinghaus  sa>'s  the  idea  was  to 
fully  train  the  workers  who  would  be 
using  the  RFID  system  and  ensure  that 
they  would  benefit  from  it.  Because 
the  end  users  in  this  case  were  IT 
workers  and  savvy  about  the  technol¬ 
ogy.  they  proved  especially  demand¬ 
ing.  requesting  special  interfoces  to 
access  relevant  data,  she  says. 

But  the  RFID  team  learned  early  on 
that  that  kind  of  continued  user  feed¬ 
back  can  only  improve  the  system. 
"Keep  encour^ing  them  to  be  open." 
advises  Dorpinghaus.  Most  problems 
can  be  easily  resolved,  and  quick  fixes 
can  nip  any  growing  dissatisfaction 
with  the  system,  she  says. 

“Make  sure  you  have  good  resource 
commitments  from  the  pilot  partici¬ 
pants.''  adds  Hintlian.  "Each  partici¬ 
pant  must  be  able  to  dedicate  enough 
time  to  plan  and  execute  well" 

In  additioa  “woiidng  together  face- 
to-face  is  important  for  the  success  of 
these  pilots,"  he  says. 

Learning  Akmg  the  Way 

Even  though  RFID  technology  has 
been  around  for  some  time,  launching 
a  successful  pilot  requires  trial  and  er¬ 
ror,  says  Sean  Clark,  director  of  RFID 
at  EXI  Logistics,  a  Dallas-based  third- 
party  logistics  services  provider.  His 
company  is  taunchii^  an  RFID  pilot 
project  in  January  for  oi»e  of  its  cus¬ 
tomers.  with  other  tests  planned  for 
clients  that  need  to  satisfy  the  require¬ 
ments  of  the  Lf.S.  Department  of  De¬ 
fense  and  retailers  like  Wal-Mart. 

For  example.  DC  Logistics  learned 
to  place  a  plastic  tag  under  the  RFID 
tag  if  the  container  is  made  of  metal 
so  that  the  signal  is  read  accurately. 


[RFID  technol- 
qgyjwillbea 
no-brainer  in  a  cou¬ 
ple  of  yearn.  But  for 
now,  they  don't  call 
ittheUeMingedge 
for  nothing. 
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At  Pacific  Cycle,  several  dry  runs  un¬ 
covered  the  best  places  on  the  bicycles 
to  place  the  tags  and  whether  the  tags 
could  be  successfully  stored  and  re¬ 
trieved,  says  Matthews. 

important  skill  for  RFID  team 
members  is  the  ability  to  improvise,  he 
says.  "If  you  looked  at  our  wwrehouse 
and  the  antenna  setup  around  (he  por¬ 
tals.  you  would  chink  it  was  a  mad  sci¬ 
entist  gone  bad."  says  Manhews.  To 
get  better  read  rales  and  to  protect  the 
antennas  from  being  hit  from  a  forklift, 
we  have  tried  everything  except  at¬ 
taching  an  old  TV  tray." 

In  fKt.  Matthews  says1)icyclc 
welders  were  called  on  by  the  prujea 
team  to  manufocrure  mounts  ^  attach 
RFID  equipment  to  dock  6oon. 

"I  do  believe  that  all  of  this  will  be  a 
no-brainer  in  a  couple  of  years,"  says 
Matthews.  “But  fornow,  they  don't  call 
it  the  bleeding  edge  for  nothii^." 

That  ability  to  roll  with  the  punches 
is  an  important  attribute  in  team  lead¬ 
ers  as  well  as  team  members.  "Of 
course  there  were  mistakes."  acknowl¬ 
edges  El  Paso's  Dorpinghaus.  For  in-  - 
stance,  she  says  she  forgot  to  change 
the  license  for  the  RFID  system  from 
development  to  production  when  the 
pilot  went  live,  a  problem  that  was 
quickly  resolved. 

She  also  soon  discovered  that  there 
aren’t  a  wide  variety  of  readers  or  tags 
to  choose  from.  The  county  bad  hoped 
to  get  more  "active"  tags  —  raps  with 
ranges  exceeding  6  feet  —  but  eventu¬ 
ally  had  to  settle  on  passive  tags  with 
shorter  rartges.  "Be  patient,  be  posi¬ 
tive."  advises  Dorpinghaus. 

"Just  because  it  doesn't  work  the 
first  time,  try  again."  adds  Clark.  Some 
tweaking  m^ht  get  the  system  up  and 
running  in  the  pilot.  “You  need  to  tin¬ 
ker  at  this  stage."  he  says.  O  50976 
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V  D0RPW6HAUS  panuaded  Bp 
ty‘<  CK)  to  give  RFC  a  shot  1  li_ 
to  give  them  a  cavoat  and  said,  lafs  \ 
)ust  hy  it.  and  H  it’s  not  wNtong  out 
then  great,  no  harm  done.'  ”  she  Si 


on  the  project.  IX)rpinghaus  explained 
that  the  new  system  would  use  existing 
har-eode  scripts  to  cut  the  time  needed 
to  track  PCs  from  10  minutes  to  one 
minute  without  addini:  hardware  or 
software  or  requiring  a  staff  member 
to  visit  each  deskt<»p. 

“I  had  to  give  them  a  caveat  and  said. 
•Let’s  just  tr)-  it.  and  if  it’s  not  working 
out.  then  great,  no  harm  done.' "  she 
says.  The  pilot  would  also  be  cheap, 
at  under  SIOO.OOO,  Di>rpinghaus  says. 
That  one-time  pilot  expense,  which 
also  paid  for  the  production  license, 
was  a  big  plus.  Had  the  pixiject  been 
bigger,  she  says,  there  probabK-  would 
have  been  resistance. 

Miller  says  that  although  RFID  Ls 
a  relatively  new  icchnok>g>-  for  gov¬ 
ernment  agencies,  the  pilot  was  seen 
as  an  opportunit>'  to  streamline  proc¬ 
esses  and  verify  that  new  software  and 


hardware  would  w«>rk  the  wav  FI  Paso 
(amnty  needed  them  nx 
Next,  the  nine-pcrs<*n  project  le.im 
was  put  together.  D»»rpinghjus  was 
chosen  to  head  the  team  because  of 
her  PeopleSt>ft  applications  expertise 
and  ability-  to  map  the  lechm»logy  to 
business  processes.  Also  on  board  was 
a  ni>n-n  manager,  who  handled  proj¬ 
ect  administration.  niLVting  planning 
and  status  reporting,  and  three  FI 
staffers  who  would  eventually  use  the 
s\  stem,  including  one  person  assigned 
to  transfer  the  scripts  used  with  the 
bar  codes  so  they  would  work  with  the 
RFID  tcchnohigy  as  well. 

lamie  Hintlian.  a  consultant  at  Ac¬ 
centure  Ltd.,  says  this  upfront  wt»rk  of 
building  the  RFID  team  with  the  right 
skills  and  creating  a  solid  business  ca.se 
Is  key.  "Make  sure  the  pilot  is  focused 
on  a  common  .set  of  objectives  and  im¬ 
peratives,"  he  advises.  By  managing 
the  scope.  a)mpanies  can  more  easily 
manage  the  infrastructure  and  technol¬ 
ogy.  Hintlian  says. 

K^r  ii.s  RFID  pilot.  Madison.  Wis.- 
based  bicycle  manufacturer  Pacific 
Cycle  Inc.  created  a  four-person  team: 
two  IT  workers  with  RFID  technical 
skills  and  two  business  users  who 
would  be  using  the  system  once  it  was 
up  and  running,  say.sCIO  Ed  Matthews. 
TTic  pilot  involved  logging  3.500  bikes 
and  the  packaging  material  inside  and 
outside  the  boxes  they're  shipped  in. 

Since  the  pilot  went  live  in  Septem- 
K’r.  the  manufacturer  ha.s  shippexi  ^ 
15.000  lagged  hikes  to  Wal-Mart  Stores ' 
Inc.  But  btvause  RFID  icchnoUw  has 
been  changing  so  fast.  Matthew's  says 
that  in  retft»spcct.  he  would  have  wait¬ 
ed  another  year.  “In  terms  of  technol¬ 
ogy.  the  immaturity  has  and  continues 
to  be  a  nuisance."  he  says.  ’We  tried 
several  tags  and  antenna  designs  but 
didn't  get  the  results  we  wanted.  I  can't 
tell  you  the  number  of  limes  that  we 
were  told  a  product  is  just  a  couple  of  I 
w'ceks  or  a  month  away  only  it>  find  I 
out  that  it  is  still  ct>ming."  I 

Winning  Over  Stakeholders 

Another  critical  pan  of  managing  an 
RFID  project  is  gaining  business 
u.sers'  tnjst.  Tlie  El  Paso  team  held 
regular  meetings  with  end  users  in  the 
help  desk  and  networking  departments 
as  w’cll  as  those  in  the  purchiusing  and 
supply  g(\>up  to  create  a  clear,  stan¬ 
dardized  pnicess.  The  team  used  Mi¬ 
crosoft  Corp.’s  V'^isio  software  to  map 
the  workflows. 

Creating  a  structured  workflow  plan 
is  time  well  spent,  says  Hintlian.  “The 
results  w  ill  be  more  significant,  and 
the  expectations  for.  the  pilot  will  be 


agreed  upon  from  the  si.nrt."  he  «..i\n 
Dorpinghaus  saysthe  idea  to 
fully  train  the  worker',  who  w..ii|j  K- 
using  the  KUD  system  and  ensure  tiui 
they  would  benefii  from  it.  Hecausv' 
j  the  end  us<.Ts  in  this  ease  were  I  T 
workers  and  savvy  about  the  lechnol- 
'  ogy.  they  proved  especially  deinanj- 
j  ing.  requesting  special  interf.u'es  to 
access  relevant  d.na.  she  says. 

I  But  the  RFID  team  learned  early  iui 
I  that  that  kind  v»f  continued  user  feed- 
,  back  can  only  improve  the  system. 
"Keep  encouraging  them  to  be  open." 
advises  Dorpinghaus.  Most  problems 
I  can  be  easily  resolved,  and  quick  fixes 
can  nip  any  grow  ing  dissati.sfaction 
,  with  the  .system,  she  viys, 

“Make  sure  you  have  good  rcsimrce 
cvimmitments  from  the  pilot  partici¬ 
pants,"  adds  Hintlian.  "Fjch  partici¬ 
pant  must  K*  able  to  dedicate  enough 
time  to  plan  and  e.xivutc  well." 

In  addition,  "working  together  faee- 
to-faec  is  important  for  the  success  of 
these  pilots."  he  savs, 

Learning  Along  the  Way 

Even  though  RFID  technology  ha.s 
been  around  for  svinw  time,  launching  . 
a  successful  pilot  requires  trial  and  er¬ 
ror.  says  Scan  Clark,  director  of  RFID 
at  tx:  Logistics,  a  Dallas-based  third- 
party  logistics  servicL's  provider.  His 
company  Ls  launching  an  RFID  pilot 
project  in  January  for  one  »tf  its  cus- 
tv>mcrs,  with  other  tests  planiKx!  for 
clients  that  need  to  satisfy  the  require- 
mv'nts  of  the  Udi.  IX'partmcnt  of  De¬ 
fense  and  retailers  like  Wal-Mart 
For  example.  DC  Logistics  learned 
to  place  a  plastic  tag  under  the  RFII ) 
tag  if  the  container  is  tmtde  of  metal 
stt  that  the  signal  is  read  accurately. 
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[RFID  technol¬ 
ogy]  will  be  a 
no-brainer  in  a  cou¬ 
ple  of  years.  But  for 
now,  they  don’t  call 
it  the  blekling  edge 
tor  nothing. 

EO  MATTHEWS.  PG  'C  GVCU 


At  F.icifie  ( .yell-,  w  oral  dry  runs  un¬ 
covered  the  best  pl.iees  on  the  bicycles 
to  place  the  lags  .mJ  w  hether  the  l.tgs 
could  be  sueeessiully  siorv'J  and  re¬ 
trieved,  says  M.iitliews. 

An  important  skill  for  RFIDteam 
members  is  the  ability  to  improv  i**-.  he 
•ctys.  "If  you  looked  at  our  w.irehouse 
and  the  antemu  setup  an»unJ  the  jsor- 
lals.  you  vvviuld  think  it  was  a  ni.id  sci¬ 
entist  gone  b.id."  say  s  Matthew  s.  "  To 
get  belter  re.id  rates  and  to  pixHcei  live 
antennas  fn>m  being  hit  fr«*m  a  forklift. 
We  have  tried  everything  exeept  at¬ 
taching  an  old  TV  tray." 

In  fact.  M.itthews  says  bk-yvle 
welders  were  called  *»n  by  the  prv«ivvi 
team  ii»  manufacture  tmtums  to  .itiach 
RFIDequipmeni  to di>ck' d«tors. 

’’I  do  K'Jieve  iluii  all  «'f  this  w  ill  be  a 
no-brainer  in  a  sample  of  years."  says 
Matthews.  "But  lor  now.  they  don’t  call 
it  the  bleeding  edge  for  mtihiitg." 

That  ability  to  rv»ll  w  iih  the  punches 
is  an  important  attribute  in  team  le.id- 
ers  as  well  as  team  memK’rs.  "Of 
course  there  were  mistakes."  ackmtwi- 
edges  K1 1’.tso’s  iTorpmghauv  F*»r  in¬ 
stance.  she  says  she  forgot  to  change 
the  license  for  the  RFID  system  from 
development  to  pn>ductiitn  when  the 
pilot  went  live,  a  pn*hlem  titu  was 
quickly  resttlved. 

She  jLso  soon  discovered  that  there 
aren't  a  wide  variety  of  readers  or  tags 
toehvNtse  from.  The  county  lud  luvpL'd 
to  gel  nume  "active"  tags  —  t.ig.s  with 
range's  exceeding  H  feet  —  hut  eventu¬ 
ally  had  to  settle  on  passive  tags  with 
shiirter  ranges.  ’Be  patk-ni.  be  pi»si- 
live."  advises  Dorpinghaus. 

“Just  because  it  dvK'sn'i  work  the 
first  time,  try  again.”  adds  Clark.  Some 
twe.iking  might  get  the  system  up  and 
running  in  the  pilot.  "You  need  to  tin¬ 
ker  at  this  stage."  he  says,  C  50976 
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Forget  Wal-Mart 


hen  Wal-Mart’s  much-watched,  ambitious  RFID  pilot 
project  kicks  off  next  month  in  Dallas  metro-area 
stores,  don’t  be  surprised  when  it  fails.  Save  your 
shock  for  the  slim  possibihty  that  it  will  succeed. 


I  say  this  because  Wai-Mart’s  stated  goal  for  its  pilot 
is  '*100%  readability  of  pallet  tags  throu^  dock  doors 
and  100%  readability  of  case  tags  on  distribution  cen¬ 
ter  conveyor  belts." 

Nor  a  chance. 

The  passive  Class  1  RFID  tags  and  the  readers  that  use 
radio  frequency  s^nals  to  get  information  from  the  la¬ 
bels  aren’t  capable  of  achieving  100%  success  in  noisy 
warehouses  loaded  with  signal-distorting  metal  objects. 
And  the  relatively  weak  signals  from  the  Class  I  readers 
will  have  loads  of  trouble  figuring  out  what  cases  of. 
say.  Clairol  shampoo  or  Palmolive  dish  soap  contain, 
since  those  signals  don’t  propagate  well  throi^  liquid. 

I’m  not  the  only  RFID  doom-and-gloomster.  Gartner 
issued  a  report  earlier  this  year  warning  its  sub¬ 
scribers  to  "prepare  for  disillusioiunent 
with  RFID."  Analyst  Jeff  Woods  concluded 
that,  for  the  moment,  “radio  frequency 
identification  cannot  live  up  to  the  promis¬ 
es  that  have  been  made  for  the  technology." 

But  you  already  know  how  disappointing 
RFID  has  been.  A  mere  8%  of  50  companies 
polled  by  ABl  Research  claimed  to  be  very 
or  somewhat  satisfied  with  their  RFID  pro¬ 
grams.  Nearly  20%  said  they  were  some¬ 
what  or  completely  dissatisfied. 

Nonetheless,  half  of  30  manufacturers 
surveyed  by  Accenture  said  that  they  “ex¬ 
pect  high  returns  on  RFID  investments." 

You  know  they’re  in  for  a  rude  awakening. 

You’d  think  the  big  problems  dissatisfied  users  face 
would  be  in  back-end  integration.  Not  sa  It’s  the  per¬ 
formance  of  the  tags  and  readers  that  irk  them.  That 
and  their  cost. 

So.  Mdiile  I’m  grateful  that  Wal-Mart  has  an  RFID 
FAQpj^e  on  its  Web  she.  it  will  be  a  long,  long  time 
before  we  need  to  know  that  people  can  either  keep  or 
discard  the  harmless  RFID  tags  they  find  on  goods 
purchased  at  a  Sam's  Club  or  V^-Mart  Supercenter. 

Despite  the  hoc^la  and  the  apparent  need.  RFID’s 
best  chance  for  success  won’t  be  in  retail.  I’m  betting  it 
will  be  in  manufacturing,  particularly  among  makers 
of  big-ticket  items.  That’s  because  the  RFID  labels  and 
readers  to  be  used  there  will  be  either  Class  3  or  4 
technology.  Titose  RFID  tags  include  a  battery  with  an 
estimated  three-  to  five-year  life  span  and  readers  that 
use  a  strong  enough  signal  to  woik  well  in  a  real-world 
warehouse  and  everyday  manufacturing  floor.  They’ll 
even  figure  out  what’s  inside  a  case  of  shampoo  or  a 
pallet  with  kegs  of  beer. 


One  company  woiking  toward  that  goal  is  IntelUflex 
in  San  Jose.  Intelliflex  hasn't  announced  its  existence 
to  the  world  yet  Its  venture  capital  backers  consider  it 
to  be  in  “stealth  mode."  with  its  products  still  in  early 
beta.  But  Ashish  Asthana.  vice  president  of  marketing 
and  product  strategy,  took  a  moment  to  discuss  the  ad¬ 
vantages  of  his  firm’s  technology. 

With  an  integrated  battery  on  an  RFID  tag,  be  says, 
you  get  to  add  memory  to  the  label  With  memory,  he 
suggests,  application  writers  can  expand  beyond  the 
simpler  expectations  retailers  have  about  using  RFID 
to  improve  inventory  control. 

“In  manufacturing,  you  can  do  things  with  configu¬ 
ration  control  throi^hout  your  supply  chain."  says 
Asthana.  You  can  even  make  an  RFID  tag  do  things  like 
report  the  temperature  of  an  item,  be  adds. 

David  Ezequelle.  venture  partner  at  Alloy 
Ventures,  which  is  one  of  Intelliflex’s  in¬ 
vestors,  adds  that  in  the  future,  battery-  and 
memory-assisted  RFID  tags  and  readers 
might  be  used  not  just  to  identify  an  object’s 
contents,  but  to  locate  it  too.  For  example, 
he  says,  a  bo^ital  could  tag  its  costly  instru¬ 
ments  and  use  a  nriai^tatkjn  of  readers  to 
find  them  when  they  go  missing,  as  happens 
so  often  in  busy,  sprawling  hospitals  where 
everyone  is  sharing  pricey  gear. 

Sure.  Class  3  and  4  RFID  products  are 
much  more  expensive:  tags  are  S25  to  $30 
versus  SO  cents  or  so  for  the  Class  1  labels 
chat  Wal-Mart's  partners  are  applying  today.  But  the 
objects  tagged  with  these  expensive  labels  have  a  far. 
far  greater  value  than  consumer  products  found  on  a 
retailer’s  shelves. 

So  I  say.  let’s  forget  Wal-Mart  for  a  while.  We  can 
wish  the  retailer  and  its  suppliers  well  in  their  efforts  to 
solve  a  tough  problem  at  the  lowest  possible  cost.  But  I 
doubt  that  many  companies  will  be  able  to  apply  many 
lessons  from  their  experiences,  at  least  for  a  while. 

What  we  need  are  examples  from.  say.  automakers 
that  can  use  Class  3  and  4  to  alert  inventory  sys¬ 
tems  that  the  expensive  products  from  their  Tier  1  sup¬ 
pliers  are  waiting  to  be  offloaded  from  trucks;  or  from 
the  transportation  industry,  where  railcar  owners  can 
keep  track  of  rolling  stock  and  their  contents  and 
schedules.  The  best  RFID  work  will  be  done  at  the 
high  end. 

“It’s  all  about  ROI,"  Ezequelle  says.  “No  one's  going 
to  invest  in  it  without  money  coming  out  the  other 
end."0512S7 
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IT  Careers 

Normally  workforce  experts  look  to  the  CIOs  of  the 
largest  IT  firms  to  establish  what  the  future  will  bring. 
However,  the  trends  facing  non-IT  CIOs  -  who  represent 
better  than  79  %  of  the  jobs,  according  to  ITAA's  annual 
workforce  study  -  are  the  ones  that  will  affect  the  vast 
majority  of  IT  professionals.  And  their  list  of  trends 
to  watch  in  2005  is  short. 

First  industry  sectors  will  continue  to  shift 

focus  on  information  technology  as  core 

business  competencies  Steve  Agnoli,  CIO  J 

for  Kirkpatrick  Lockhart  LLP  law  firm  in 

Pittsburgh,  says,  “IT  competence  is  key  in  B  1 

our  ability  to  provide  diem  service.  The  K  j  W 

large  firms  and  OKporations  we  represent 

expect  us  to  be  able  to  hang  with  them  |  I  I 

from  a  technical  standpoim.*  I  if 

That  situation  faces  alt  business  sectors.  \ 
according  to  Ray  Barnard.  CIO  for  the 
world's  largest  engineering  constitiction  firm.  Fluor  Corp. 
'We're  projects-based  with  projects  in  48  ditfererii 
countries.  Each  project  has  an  IT  elemem  to  it*  for  the 
World  Wildlife  Foundation,  based  in  Washington  OC  the 
rieed  is  the  same.  WWF's  CIO,  Greg  Smith,  says  advancirtg 
and  evolving  use  of  technologies  is  required  to  maintain 
the  non-profit's  mission  and  goals. 

Second,  the  cost  of  IT  services  will  continue  to  be  the  name 
of  the  game  for  all  industry  sectors.  The  result  acawding  to 
all  three  00s,  will  be  continued  levels  of  outsourcing  for 


Advertising  Suppiernem 

:  CIOs  Identify  Trends  for  2005 

commodity  functions,  Barnard,  who  recemty  outsowced  focus  'must  be  at  an  urdrehevafale  lewd*,  aivl  he  looks  for 
better  than  35%  of  his  IT  operation,  says  the  chalteoge  is  to  those  wd>o  can  communicate  abodt  and  apply  technology 
identify  xcuratefy  what  IT  capabilities  are  core  to  the  to  the  benefit  of  the  firm  And  for  Greg  Smith  at  WWF,  the 
business  or  organization  and  to  the  smooth  transition  of  cnbcal  skills  for  non-profit  IT  piofessionab  are  for-profit 
employees  to  outsource  service  providers.  *1  think  we'll  see  thinking  and  practices  to  achieve  eirtraordmary^resute 
^  to  service  providers.'  He  lists  analytics  and  business  intelligence  specialization 

says  Barnard,  pointing  to  increased  as  critical. 


E  opportunity  for  IT  professionals  with  the 
9le  commodity  skills.  'Right  now,  the 
?  providers  have  multiple  clients  to  take 
care  of  and  need  people.'  The  risk,  of  course,  is 


The  market  is  Wurred,*  adds  Smith,  in  terms  of  where  the 
greatest  opportunities  exist  -  government  for-profit  or 
non-profit  'I'd  challen^  them  (IT  professionals)  to  look  for 


I  when  a  CK)  or  IT  team  doesn't  amectly  identify  what  opportunities  for  organizations  that  haw  a  great 

I  needs  to  be  outsourced  and  what  needs  to  be  preserved  ^  recljnition  * 

imemally.  Currently  the  financial  services  sector,  which  was  ! 

out  front  on  driving  down  cost  through  outsourcing,  is 
again  hiring  to  regain  its  core  technical  capabHities 

Third,  the  fT  profession  continues  to  offer  opportunity  and 
challenge  The  most  critical  skills  IT  pros  need  include 
strong  customer  service  understanding,  communication 
skills  and  management  of  outsourced  capabilities.  For  Fluor 
Corp.,  the  need  is  for  staff  members  wha  understanding 
the  business  of  engineering,  can  develop  and  upgrade 
infrastructure  ardnitecture;  programming  in  support  of 
CAO,  three-dimensional  CAD  and  CATIA;  programming  in 
support  of  ttie  ERP  systems^  particularly  financial;  and 

development  of  security  protocols  and  progranming.  _ _ 

Mobility  is  another  critical  factor  in  Barnard’s  world,  where  ^  informatioo  about  fT  Careers  advertinng. 
systems  must  be  developed  and  put  in  place  on  a  ^  ®®®.762.2977 
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RFID  Benefits 

BUSINESS  beiHtit)' 
-MHfcled  RFID 

Reduced  labor  costs 


More  efIWtfll  bwinew  procewes 


Top  three  TECHNOLOGY  benefits 
expected  from  RF10; 


Improved  data  accumcy 


RFID  Risks 

Top  three  RRD 
BUSMESS  risks: 


Lack  of  standards 


Top  three  RFID 
TECHNOLOGY  risks: 


Coats  of  taps  and  readers 
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Forget  Wal-Mart 

W 


hen  Wal-Mart’s  much-watched,  ambitious  RFID  pilot 
project  kicks  off  next  month  in  Dallas  metro-area 
stores,  don’t  be  surprised  when  it  fails.  Save  your 
shock  for  the  slim  possibility  that  it  will  succeed. 


ISC. 


I  say  this  because  Wal-Mart’s  stated  gn:*!  ft’r  its  pilot 
is  "UK)*' 11  readability  of  pallet  tays  throutth  dock  doors 
and  100%  readability  of  case  tafis  on  distribution  cen¬ 
ter  conveyor  belts." 

Not  a  chance. 

The  passive  Class  1  RFID  lags  and  the  readers  that  use 
radio  frequency  signals  to  get  information  from  the  la¬ 
bels  aamT  capable  of  achieving  100%  success  in  noisy 
warehouses  loaded  with  signal-distorting  metal  objects. 
And  the  relatively  weak  signals  from  the  Class  I  readers 
will  have  Kxids  of  trouble  figuring  out  what  cases  of. 
say.  Clain.ll  shampoo  or  Palmolive  dish  soap  contain, 
since  those  signals  don’t  propagate  well  through  liquid. 

I’m  not  the  only  RFID  doom-and-gloomsicr.  Gartner 
issued  a  report  earlier  this  year  warning  its  sub¬ 
scribers  to  “prepare  for  disillusionment 
with  RFID."  Analyst  leff  Woods  concluded 
that,  for  the  moment,  ’’radio  frequency 
identification  cannot  live  up  to  the  promis¬ 
es  that  have  been  made  for  the  technology.'* 

But  you  already  know  how  disappointing 
RFID  has  been.  A  mere  8%  of  50  companies 
polled  by  ABl  Research  claimed  to  be  very 
or  somewhat  satisfied  with  their  RFID  pro- 
gram.s.  Nearly  20%  said  they  were  .some¬ 
what  or  completely  dissaiksfied. 

Nonetheless,  half  of. manufacturers 
surveyed  by  Accenture  said  that  they  “ex¬ 
pect  high  returns  on  RFID  investments.’’ 

You  kntiw  they’re  in  fiir  a  rude  awakening. 

You’d  think  the  big  problems  dissatisfied  users  face 
would  be  in  back-end  integration.  Not  so.  It's  the  per¬ 
formance  of  the  tags  and  readers  that  irk  them.  That 
and  their  cost. 

So,  while  I’m  grateful  that  Wal-Mart  has  an  RFID 
FAQ  page  on  its  Web  site,  it  will  be  a  long,  long  time 
bcfi>rc  we  need  to  know  that  people  can  either  keep  or 
discard  the  harmless  RFID  tags  they  find  on  goods 
purchased  at  a  Sam’s  Club  or  Wal-Mart  Supercenter. 

Despite  the  hoopla  and  the  apparent  need.  RFID's 
best  chance  for  success  won’t  be  in  retail.  I’m  betting  it 
will  be  in  manufacturing,  particularly  among  makers 
of  big-ticket  items.  That's  because  the  RFID  labels  and 
readers  to  be  used  there  will  be  either  Class  3  or  4 
technology.  Those  RFID  tags  include  a  battery  with  an 
estimated  three-  to  five-year  life  span  and  readers  that 
use  a  strong  enough  signal  to  work  well  in  a  real-world 
warehouse  and  evcr>’day  manufacturing  floor.  They’ll 
even  figure  out  what’s  inside  a  case  of  shampoo  or  a 
pallet  with  kegs  ofbeer. 


One  company  working  toward  that  goal  is  Intelliflcx 
in  San  lose.  IntelUflex  hasn't  announced  its  existence 
to  the  world  yet.  Its  venture  capital  backers  consider  it 
to  be  in  "stealth  mode,’’  with  its  products  still  in  early 
beta.  But  Ashish  Asthana,  vice  president  of  marketing 
and  product  strategy,  took  a  moment  to  discuss  the  ad¬ 
vantages  of  his  firm’s  technology. 

With  an  integrated  battery  on  an  RFID  tag.  he  says, 
you  get  to  add  memory  to  the  label.  With  memor>'.  he 
suggests,  application  writers  can  expand  beyond  the 
simpler  expectations  retailers  have  about  using  RFID 
to  improve  inventory  control. 

"In  manufacturing,  you  can  do  things  with  configu¬ 
ration  control  throughout  your  supply  chain."  says 
Asthana.  You  can  even  make  an  RFID  tag  do  things  like 
report  the  temperature  of  an  item,  he  adds. 

David  Ezcqucllc.  venture  partner  at  Alloy 
Ventures,  which  is  one  of  Inielline.x’s  in¬ 
vestors.  adds  that  in  the  future,  battery-  and 
memory-assisted  RFID  tags  and  readers 
might  be  used  not  just  to  identify  an  object’s 
contents,  but  to  locate  it.  loo.  For  example, 
he  says,  a  hospital  could  tag  its  ciistly  instru¬ 
ments  and  use  a  triangulation  of  readers  to 
find  them  when  they  go  missing,  as  happens 
so  often  in  busy,  sprawling  hospitals  where 
everyone  is  sharing  pricey  gear. 

Sure,  Class  3  and  4  RFID  products  are 
much  more  ex|>cnsi\’c:  tags  are  S25  to  S30 
versus  50  cents  or  so  for  the  Class  I  labels 
that  Wal-Mart’s  partners  are  applying  Uiday.  But  the 
objects  tagged  with  these  expensive  labels  have  a  far. 
far  greater  value  than  consumer  products  found  on  a 
retailer’s  shelves. 

So  I  say.  let’s  forget  Wal-Mart  for  a  while.  We  can 
wish  the  retailer  and  its  suppliers  well  in  their  efforts  to 
solve  a  lough  problem  at  the  lowest  possible  cost.  But  I 
doubt  that  many  companies  will  be  able  to  apply  many 
lessons  fixim  their  experiences,  at  least  for  a  while. 

What  we  need  arc  examples  from.  say.  automakers 
that  can  use  Class  3  and  4  tags  to  alert  inventory  sys¬ 
tems  that  the  expensive  pnxiucts  from  their  Tier  1  sup¬ 
pliers  arc  waiting  to  be  offloaded  from  trucks:  or  from 
the  transportation  industty.  where  railcar  owners  can 
keep  track  of  rolling  stock  and  their  contents  and 
schedules.  The  best  RFID  work  will  be  done  at  the 
high  end. 

"It’s  all  about  ROI,"  Ezcquellc  says.  “No  one’s  going 
to  invest  in  it  without  money  coming  out  the  other 
end.”  O  51257 
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Construction.  The  10  top  world  en9in«enr>9  construction 
firms  have  IT  staffs  of  appronmately  SOO  to  750  each, 
according  to  Barnard 

Non-profit.  World  WiWfife  Foundation  has  a  staff  of 
approMtmatefy  20  IT  professtonals.  fairfy  reproseniative  of 
sophisticated  non-profit  operations 


An  e.xlrarirdinary  place  to  work 
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AdverliS'ng  Supplement 


Normally  workforce  experts  look  to  the  CIOs  of  the 
largest  IT  firms  to  establish  what  the  future  will  bring 
However,  the  trends  facing  non-IT  CIOs  *  who  represent 
better  than  79  %  of  the  jobs,  according  to  ITAA's  annual 
workforce  study  -  are  the  ones  that  will  affect  the  vast 
majority  of  IT  professionals  And  their  list  of  trends 
to  watch  in  2005  is  short 


commodity  functions  Barnard,  who  recently  outsourced 
better  than  35%  of  his  IT  operation,  says  the  challenge  is  to 
identify  accurateiy  what  IT  capabilities  are  core  to  the 
business  or  organization  and  to  the  smooth  transition  of 
employees  to  outsource  service  providers  "I  think  weTI  see 
a  shift  of  some  jobs  to  service  prcwders." 
says  Barnard,  pointing  to  increased 
opportunity  foi  IT  professionals  with  the 
Y  j  I  valuable  commodity  skills  "Right  now,  the 
f  J  service  providers  have  multiple  clients  to  take 
I  care  of  and  need  people '  The  risk,  of  course,  is 

when  a  CIO  or  IT  team  doesn't  correaly  identify  what 
needs  to  be  outsourced  and  what  needs  to  be  preserved 
internally.  Currently  the  financial  services  sector,  which  was 
out  front  on  driving  down  cost  through  outsourcing,  is 
again  hiring  to  regain  its  core  technical  capabilities 

Third,  the  IT  profession  continues  to  offer  opportunity  and 
challenge  The  most  oitical  skills  IT  pros  need  Include 
strong  customer  service  understanding,  communication 
skills  and  management  of  outsourced  capabilities.  For  Fluor 
Corp.,  the  need  is  for  staff  members  who.  understanding 
the  business  of  englneenng.  can  develop  and  upgrade 
infrastructure  architeaure;  programming  in  support  of 
CAD.  three-dtmensionai  CAD  and  CATIA.  programming  m 
support  of  the  ERP  systems,  particularly  financial,  and 
development  of  security  protocols  and  programming. 
Mobility  is  another  critical  factor  in^mard's  w(»td.  where 
systems  must  be  developed  and  pul  in  place  on  a 
worldwide  basis  for  Agnolj  m  a  legal  setting,  tustomer 


focus  "must  be  at  an  unbelievable  level',  and  he  looks  for 
those  who  can  communKaie  about  and  apply  technology 
to  the  benefit  of  the  firm  And  for  Greg  Smith  at  WWF,  the 
cniKal  skills  for  non-profit  IT  professionals  are  for-profit 
thinkmg  and  practices  to  achieve  extraordinary  results 
He  lists  analytKs  and  business  intelligence  specialization 
as  cntical 


First  industry  sectors  will  continue  to  shift 

focus  on  information  technology  as  core 

business  competencies.  Steve  Agnoli,  CIO  /C 

for  Kirkpatrick  Lockhart  LLP  law  firm  in  ,> 

Pittsburgh,  says,  "IT  competence  is  key  in  1  '  J 

our  ability  to  provide  client  service  The  I 

large  firms  and  corporations  we  represent  ^ 

expect  us  to  be  able  to  hang  with  them  I  I 

from  a  technical  standpoint."  I  /  i 

That  Situation  faces  all  business  sectors.  \ 
according  to  Ray  Barnard.  CIO  for  the 
world's  largest  engineering  construction  firm,  Fluor  Corp. 
"We're  projects-based  with  projects  in  48  different 
countries.  Each  project  has  an  IT  element  to  it."  For  the 
World  Wildlife  Foundation,  based  in  Washington  DC,  the 
need  is  the  same  WWF's  CIO,  Greg  Smith,  says  advancing 
and  evolving  use  of  technologies  is  required  to  maintain 
the  non-profit's  mission  and  goals. 

Second,  the  cost  of  IT  services  will  continue  to  be  the  name 
of  the  game  for  all  industry  sectors.  The  result,  according  to 
all  three  CIOs,  will  be  continued  levels  of  outsourcing  for 


"The  market  is  blurred,*  adds  Smith,  m  terms  of  where  the 
greatest  opportunities  exist  -  government,  lor  profit  or 
non-profit  ‘I'd  challenge  them  (IT  piofessionals)  to  look  for 
sound  opportunities  for  organizations  that  have  a  great 
brand  and  name  recognition  * 
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Top  10  reasons  why  you 
should  advertise  your  recruitment 
message  with  IT  Careers. 


IT  Careers  Audience  Skill  Survey  2003/2004 

•  IIS/MIS/IT 

84% 

•  Windows  2000 

83% 

•  TCP/IP 

83% 

•  Windows  95/98 

82% 

•  PC/s 

80% 

•  Unix  NET/Linus 

75% 

•  Networking/Telecom 

74% 

•  Windows  NT 

73% 

•  Windows  XP 

69% 

•  Intemet/Web  Dev./E-Com. 

68% 
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Oracle 


ducks  in  a  row  just  to  have  to 
prepare  for  another  conver¬ 
sion  to  a  hybrid  Oracle/Peo- 
pleSoft/J.D.  Edwards  product." 
Robinson  said. 

"Oracle  has  to  win  us  over." 
agreed  Andrew  Albarcile.  prin¬ 
cipal  executive  at  Denver-based 
staffing  company  Remy  Corp., 
which  runs  PeoplcSoft’s  finan¬ 
cial  software.  “I  have  not  seen  a 
clear  message  from  them." 

Albarcile  said  Reray  had 
planned  to  license  several  ad¬ 
ditional  application  modules 
from  PeopleSoft  laic  this 
month.  But  now  he  will  hold 
off  and  evaluate  his  company's 
options  for  maintaining  its 
ERP  system.  He  said  he  will 
consider  building  applications 
in-house  as  new  functionality 
is  needed  and  look  at  third- 
party  maintenance  providers. 

Albarelle  isn't  the  only  user 
thinking  that  way.  In  a  recent 
survey  of  150  PeopleSoft  users 
by  Boston-based  AMR  Re¬ 
search  Inc.,  15%  said  they 
would  immediately  drop  their 
software  maintenance  con¬ 
tracts  with  the  vendor  If  it 
was  bought  by  Oracle. 

Burden  of  ntxrf 

Other  PeopleSoft  users  said 
they  plan  to  treat  Oracle  like 
any  other  potential  supplier. 

"Like  with  any  other  vendor, 
if  they  want  roe  to  buy  more 
or  something  new.  th^  need 
to  find  a  way  to  show  roe  they 
care  about  my  firm  and  are 
looking  to  help  us  succeed." 
said  Bubba  Tyler.  CIO  at  Con- 
shobocken,  Pa.-based  Quaker 
Chemical  Corp.,  an  Enter- 
priseOne  shop.  "TTiey  have  to 
prove  our  ongoing  relation¬ 
ship  will  lead  to  mutual  value 
and  not  just  their  profits." 

Some  customers  are  more 
inclined  to  believe  that  Oracle 
will  stick  to  its  pledge  to  con¬ 
tinue  enhancing  and  support¬ 
ing  the  acquired  applications. 

"1  would  have  to  say  that  at 
this  point,  Oracle  is  saying  all 


the  right  things  and  making 
the  type  of  commitments  most 
customers,  including  me. 
would  want."  said  Fred  Pond, 
director  of  information  ser¬ 
vices  at  Schnitzer  Steel  Indus¬ 
tries  Inc.  in  Portland.  Ore.,  and 
president  of  the  Quest  Inter¬ 
national  Users  Group  for  |X). 
Edwards  customers. 

Pond  said  he’s  open  to 
working  with  Oracle  but 
wants  to  sec  it  deliver  on  up¬ 
grades  that  are  in  PcopleSoft’s 
pipeline.  He  also  wants  bug 
fixes  and  regulatory  updates 
on  any  currently  supported 
version  of  EnterpriseOne. 

Uncertainty  Prevails 

If  nothing  else.  Pet^lcSoft's 
agreement  to  accept  Oracle's 
offer  lifts  a  cloud  of  uncertain¬ 
ty  that  had  been  hanging  over 
users  for  months,  Philip  Car- 
nelley.  research  director  at 
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But  some  users  arc  resigned 
to  finding  a  new  application 
vendor  in  the  long  term 
“The  chaiurcs  are  good  we'll 
be  someone  else's  customer  in 
10  to  12  years."  said  Casey  Mc- 


London-based  consultancy' 
Ovum  Ltd.,  said  in  a  report. 
“At  least  now  [PeopleSoft  cus¬ 
tomers!  will  get  some  certain¬ 
ty.  even  if  they  don't  like  the 
outcome."  he  wrote. 


Oracle  Exec  Outlines  PeopleSoft  Plan 


Phillips  promises  rapid  integration  of 
companies,  new  releases  of  key  apps 


BV  MAItC  L.  SONOINI 

PeopleSoft  will  be  integrated 
into  Oracle  next  month,  right 
after  the  expected  close  of  the 
SIOJ  billion  deal,  according  to 
Oracle  Co-President  Charles 
Phillips. 

During  a  press  conference 
last  week.  Phillips  said  the  two 
companies  are  already  work¬ 
ing  on  the  integration  plans. 

But  Bill  Swanton,  an  analyst 
at  AMR  Research  Inc.  in 
Boston,  predicted  that  the  in¬ 
tegration  will  be  easier  said 
than  done.  “They  will  have  to 
work  very  hard  to  succeed." 
Swanton  said.  There  are  lots  of 
places  [where]  they  could  run 
into  trouble." 

Product  Plans 

Without  disclosing  much  in 
the  way  of  details,  Phillips  said 
that  Oracle  will  continue  to 
enhance  PeopleSoft's  existing 
products  and  will  develop  new 


versions  of  both  the  flagship 
PeopleSoft  Enterprise  suite 
and  the  £merpriseOi>e  line  of 
midmaritet  applications. 

Phillips  also  said  Oracle 
will  continue  to  maintain  the 
World  green-screen  applica¬ 
tions  that  PeopleSpft  gained 
along  with  EnterpriseOne 
through  its  mid*2003  acquisi¬ 
tion  of  |.D.  Edwards  fit  Ca 

Over  time.  Phillips  said.  Or¬ 
acle  plans  to  merge  the  func¬ 
tions  of  the  PeopleSoft  and 
Oracle  produa  lines  so  they 
‘look  more  alike"  and  to  m^ 
it  easier  for  users  to  migrate 
from  PeopleSoft  to  Oracle. 

Oracle  said  its  E-Business 
Suite  software  will  ^ntually 
become  the  more  advanced 
set  of  applkatioos.  The  com¬ 
pany  wouldn't  say  whether  the 
merged  products  would  sup¬ 
port  databases  from  vendors 
other  than  Oracle. 

"With  the  database,  it's  hard 


to  say."  Phillips  said.  "1  would 
surmise  that  at  some  point 
there  would  be  customers 
who  pcihaps  are  using  People- 
Soft  on  DB2,  and  thcyll  end 
up  with  the  Oracle  product 
and  database  as  well." 

Swanton  said  Oracle  must 
quickly  convince  u.sers  that 
they  won’t  be  forced  to  ^ve 


Mullen.  CIO  at  Agri  Beef  Co., 
a  beef  supplier  in  Boise.  Idaho. 
■X)raclc  has  a  long  row  to  hoe 
if  they  think  they're  going  to 
W(K)  me  into  doing  business 
with  them." 

McMullen  said  he's  no  fan 
of  Oracle,  the  company's  prod¬ 
ucts  or  its  flamboyant  CEO. 
l.arry  ElUson.  He  said  he  may 
stay  a  customer  if  Ellison  de¬ 
parts  and  Oracle  continues  to 
develop  PeopleSoft's  products 
and  ensures  that  they  can  run 
on  multiple  databases,  such  as 
SQL  Serv  er  O  51518 

Stacy  Cowley  of  the  JDC 
News  Service  contributed  to 
this  report. 
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j  Vlfehaveto 
give  good 
service  and  give 
[PeopleSoft  users] 
areasonnotto 
look  elsewhere. 

CHARLES  PHIUIPS. 
ce-pnMMenLOrKie 


up  their  PeopleSoft  applica¬ 
tions  ovemi^t.  “No  one  is 
going  to  pay  full  maintenance 
just  to  be  ported  to  the  E-Busi¬ 
ness  Suite."  be  sakL 

Phillips  acknowledged  that 
Oracle  has  ro  keep  its  new 
customers  happy  to  bold  on 
fo  maintenance  revenue.  “Wc 
have  to  give  good  service  and 
give  them  a  reason  not  to  look 
elsewhere."  be  said. 

Oracle  does  plan  to  do  some 
rationalization  of  the  technol¬ 
ogy  —  which  most  likely 
means  paring  down  Pet^le- 
Soft’s  reliance  on  BEA  Sys¬ 
tems  Inc.’s  and  IBM's  middle¬ 
ware  stacks  in  favor  of  its  own 
products,  Phillips  said. 

In  an  e-mail.  Phillips  ac¬ 
knowledged  that  many  merg¬ 
ers  in  the  IT  industry  have 
failed,  but  be  pointed  out  chat 
"a  few  deals  have  worked"  He 
cited  SAP  AG's  acquisition  of 
TopTier  Software  Inc.  for  Hs 
portal  technology  and  many  of 
the  deals  made  by  Computer 
Associates  International  Inc 
as  examples. 

IThe  buyout]  wasn’t  easy, 
but  this  a  good  thing  for  the 
industry."  he  said  O  S15U 
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Where  to  Start 


Ready  for  2005?  It’s  shaping  up  as  a  year  for  innovation 
—  and  uncomfortable  decisions.  Things  are  changing. 
IBM  is  dropping  out  of  the  PC  business.  Oracle  is 
swallowing  PeopleSoft.  Outsourcing,  offshore  and 
otherwise,  looms  large  as  an  option  —  or  maybe  a 
requirement.  Saibanes-Oxley  and  HIPAA,  grids  and  Linux,  wireless 
and  RFID  all  require  corporate  IT  to  bite  the  bullet,  make  choices 
and  then  move  forward  to  do  new  things. 

We’ve  put  these  decisions  off  for  years.  We  can’t  any  longer.  But 


how  to  make  those  choices?  Start  with  the  filter 
IBM  used  in  deciding  to  sell  its  PC  line:  innova* 
tions  vs.  commodities. 

PCs  are  commodities.  That  means  it‘s  hard  to 
dilTerentiate  products,  so  competition  is  fierce 
and  return  on  investment  is  low.  True,  IBM 
ThinkPad  laptops  have  a  reputation  for  innova¬ 
tion  in  design.  But  IBM  decided  that  innovation 
couldn't  add  enough  to  a  ThinkPad's  price  to 
make  the  business  worth  keeping. 

So  how  does  an  IBM  competitor  like  Dell  stay 
afloat?  By  pouring  the  innovation  into  its  manu¬ 
facturing  and  marketing  processes,  not  just  into 
its  products.  That’s  why  Dell  will  still  be  in  the 
PC  business  in  2005  and  IBM  won't 
The  day  after  IBM  said  it  will  sell  its  PC  busi¬ 
ness  to  Chinese  vendor  Lenovo,  PalmSource  — 
which  makes  the  operating  system  for  Palm 
handhelds  ~  announced  it's  buying  China  Mo- 
bileSofl,  which  makes  a  version  of  Linux  for 
cell  phones.  PalmSource  also  said  it  will  turn 
Palm  OS  into  a  layer  on  top  of  Linux.  That 
makes  sense.  Operating  systems  are  now  com¬ 
modities.  PalmSource  doesn't  want  to  invest  in 
a  low-return  comn)odit>’  business. 

But  PalmSource  does  want  to  keep  control  of 
that  high-value  Palm  OS  layer.  That's  where  the 
innovation  is.  And  innovation  is  where  the 
money  is  in  2005. 

The  fact  that  operating  systems 
are  commodities  also  explains  why 
Microsoft  keeps  trying  to  climb  up 
to  innovation-oriented  layers  like 
business  intelligence  and  Internet 
search.  Monopoly  Microsoft  may 
thumb  its  nose  at  antitrust  regula¬ 
tors.  but  it  can't  fmesse  the  relent¬ 
less  pressure  of  commoditization. 

Why  has  Oracle  gone  afler 
PeopleSoft?  Because  relational 
databases  —  still  Oracle’s  core  busi¬ 
ness  —  are  commodities  toa  Sure, 
there’s  some  innovation,  but  mostly 


a  database  is  a  database.  Lots  of  PeopleSoft  cus¬ 
tomers  use  databases  from  IBM.  Microsoft  and 
other  vendors.  Oracle  wants  those  customers. 
And  buying  the  enterprise  application  out  from 
under  those  customers  looks  to  Oracle  like  a 
good  way  to  capture  them. 

Oracle  may  also  genuinely  want  to  leverage' 
the  innovation  that’s  in  PeopleSoft's  applica¬ 
tions.  Only  time  will  tell  whether  that's  true. 

What  do  we  learn  from  all  this?  The  same 
things  that  drive  these  vendors  will  drive  our 
decisions  in  2005. 

What  should  we  outsource?  The  low-return 
commodity  work,  obviously.  Unless,  like  Dell, 
we  can  find  innovative  ways  to  do  that  work  to 
create  a  competitive  advantage.  If  we  get  a 
higher  return  from  doing  it  in-house,  then  we 
should  keep  it  in-house. 

How  do  we  handle  regulatory  requirements 
like  Sarbanes-Oxley  and  HIPAA?  The  first  step 
is  meeting  the  deadlines.  But  after  that,  what?  If 
cranking  out  chat  data  is  a  commodity  process, 
we  should  fmd  the  cheapest  way  to  de^  with  it 
But  if  we  can  provide  insight  to  business-stders 
for  boosting  the  top  or  bottom  lines,  we  should 
invest  more  in  that  kind  of  data  collection. 

On-demand  IT  provisioning  makes  sense  if 
computing  and  storage  are  commodities  to  us  — 
but  not  if  we  can  find  innovative 
ways  to  leverage  those  elements  for 
business  advantage.  Going  with 
Linux  might  make  sense,  but  not  if 
there  are  special,  innovative  ways 
that  we're  using  Windows  or  Unix. 
Wireless  and  RFID  may  be  com¬ 
modities  or  innovation  points,  de¬ 
pending  on  what  we  need  and  how 
we  use  them. 

Yes,  2005  will  be  a  year  for  inno- 
vatioa  But  deciding  vriiat’s  ripe  for 
innovation  and  what’s  a  commodity 
—  that’s  the  decision  we’ll  have  to 
tackle  first.  0  51484 
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You  have  to  reconfigure  your  infrastructure.  Got  a  second? 


The  highly  dependable  HP  BlodeSyslem  features  Intel*  Xeon^  Processors.  Now  it's  possible  to  reoct  to  changing  business  conditions  in  reel  time— in  seconds. 
Application  deployment  ond  reprovisioning  become  on  automated  process.  From  single  console  remote  management  to  up  to  19%  power  sovings’— the  HP  BladeSystem 
is  designed  to  sove  you  time,  money  and,  quite  possibly,  your  sanity.  Which,  of  course,  could  be  the  most  compelling  reason  of  oil  to  learn  more. 


THE  SOLUTION 

THE  BENEFITS’ 

HP  ProLiant  BL30p  Blade  Server 

•  2  im^  Xmx*-  PreewKn  OP  up  to  3.20GHz/2MB' 

*  23%  savings  on  ocqiMition  cost 

*  High  dansity:  Up  to  96  Mr>«n  par  rode 

*  Up  to  19%  lass  powar  consumption 

•  HP  Syitomi  Irttighr  Monogor^:  Wab-bo«ad  noNrartod 
monagmani  through  o  $ingla  consola 

’  Up  to  93%  (awar  teblas 

*  HaxibWOpart:  Iraagrotot  with  awthng  irthostnictura 

*  Hot-swoppobla  sarvar  dasign 

*  Ropid  Oaploymant  Podc  For  aosa  oi  dapteymani 

*  Singla  intartoce  tor  intogrotod  ramoto  morrogamant 

ond  ongoing  provokmng  and  raprovtsioning 

